@mrrlin-dev/mcp 0.4.88 → 0.4.90

package/dist/bin.cjs

@@ -5832,7 +5832,7 @@ var require_fast_uri = __commonJS({
         normalizeString(uri, options);
       } else if (typeof uri === "object") {
         uri = /** @type {T} */
-        parse7(serialize(uri, options), options);
+        parse8(serialize(uri, options), options);
       }
       return uri;
     }
@@ -5872,8 +5872,8 @@ var require_fast_uri = __commonJS({
     function resolveComponent(base, relative, options, skipNormalization) {
       const target = {};
       if (!skipNormalization) {
-        base = parse7(serialize(base, options), options);
-        relative = parse7(serialize(relative, options), options);
+        base = parse8(serialize(base, options), options);
+        relative = parse8(serialize(relative, options), options);
       }
       options = options || {};
       if (!options.tolerant && relative.scheme) {
@@ -6172,7 +6172,7 @@ var require_fast_uri = __commonJS({
       }
       return { parsed, malformedAuthorityOrPort, malformedPercentEncoding, malformedSchemeSpecific, malformedHost, malformedScheme };
     }
-    function parse7(uri, opts) {
+    function parse8(uri, opts) {
       return parseWithStatus(uri, opts).parsed;
     }
     function normalizeString(uri, opts) {
@@ -6209,7 +6209,7 @@ var require_fast_uri = __commonJS({
       resolveComponent,
       equal,
       serialize,
-      parse: parse7
+      parse: parse8
     };
     module2.exports = fastUri;
     module2.exports.default = fastUri;
@@ -9205,7 +9205,7 @@ var require_content_type = __commonJS({
     var QUOTE_REGEXP = /([\\"])/g;
     var TYPE_REGEXP = /^[!#$%&'*+.^_`|~0-9A-Za-z-]+\/[!#$%&'*+.^_`|~0-9A-Za-z-]+$/;
     exports2.format = format;
-    exports2.parse = parse7;
+    exports2.parse = parse8;
     function format(obj) {
       if (!obj || typeof obj !== "object") {
         throw new TypeError("argument obj is required");
@@ -9229,7 +9229,7 @@ var require_content_type = __commonJS({
       }
       return string4;
     }
-    function parse7(string4) {
+    function parse8(string4) {
       if (!string4) {
         throw new TypeError("argument string is required");
       }
@@ -9298,6 +9298,503 @@ var require_content_type = __commonJS({
   }
 });
 
+// ../../node_modules/.pnpm/isexe@2.0.0/node_modules/isexe/windows.js
+var require_windows = __commonJS({
+  "../../node_modules/.pnpm/isexe@2.0.0/node_modules/isexe/windows.js"(exports2, module2) {
+    module2.exports = isexe;
+    isexe.sync = sync;
+    var fs14 = require("fs");
+    function checkPathExt(path28, options) {
+      var pathext = options.pathExt !== void 0 ? options.pathExt : process.env.PATHEXT;
+      if (!pathext) {
+        return true;
+      }
+      pathext = pathext.split(";");
+      if (pathext.indexOf("") !== -1) {
+        return true;
+      }
+      for (var i = 0; i < pathext.length; i++) {
+        var p = pathext[i].toLowerCase();
+        if (p && path28.substr(-p.length).toLowerCase() === p) {
+          return true;
+        }
+      }
+      return false;
+    }
+    function checkStat(stat3, path28, options) {
+      if (!stat3.isSymbolicLink() && !stat3.isFile()) {
+        return false;
+      }
+      return checkPathExt(path28, options);
+    }
+    function isexe(path28, options, cb) {
+      fs14.stat(path28, function(er, stat3) {
+        cb(er, er ? false : checkStat(stat3, path28, options));
+      });
+    }
+    function sync(path28, options) {
+      return checkStat(fs14.statSync(path28), path28, options);
+    }
+  }
+});
+
+// ../../node_modules/.pnpm/isexe@2.0.0/node_modules/isexe/mode.js
+var require_mode = __commonJS({
+  "../../node_modules/.pnpm/isexe@2.0.0/node_modules/isexe/mode.js"(exports2, module2) {
+    module2.exports = isexe;
+    isexe.sync = sync;
+    var fs14 = require("fs");
+    function isexe(path28, options, cb) {
+      fs14.stat(path28, function(er, stat3) {
+        cb(er, er ? false : checkStat(stat3, options));
+      });
+    }
+    function sync(path28, options) {
+      return checkStat(fs14.statSync(path28), options);
+    }
+    function checkStat(stat3, options) {
+      return stat3.isFile() && checkMode(stat3, options);
+    }
+    function checkMode(stat3, options) {
+      var mod2 = stat3.mode;
+      var uid = stat3.uid;
+      var gid = stat3.gid;
+      var myUid = options.uid !== void 0 ? options.uid : process.getuid && process.getuid();
+      var myGid = options.gid !== void 0 ? options.gid : process.getgid && process.getgid();
+      var u = parseInt("100", 8);
+      var g = parseInt("010", 8);
+      var o = parseInt("001", 8);
+      var ug = u | g;
+      var ret = mod2 & o || mod2 & g && gid === myGid || mod2 & u && uid === myUid || mod2 & ug && myUid === 0;
+      return ret;
+    }
+  }
+});
+
+// ../../node_modules/.pnpm/isexe@2.0.0/node_modules/isexe/index.js
+var require_isexe = __commonJS({
+  "../../node_modules/.pnpm/isexe@2.0.0/node_modules/isexe/index.js"(exports2, module2) {
+    var fs14 = require("fs");
+    var core;
+    if (process.platform === "win32" || global.TESTING_WINDOWS) {
+      core = require_windows();
+    } else {
+      core = require_mode();
+    }
+    module2.exports = isexe;
+    isexe.sync = sync;
+    function isexe(path28, options, cb) {
+      if (typeof options === "function") {
+        cb = options;
+        options = {};
+      }
+      if (!cb) {
+        if (typeof Promise !== "function") {
+          throw new TypeError("callback not provided");
+        }
+        return new Promise(function(resolve, reject) {
+          isexe(path28, options || {}, function(er, is) {
+            if (er) {
+              reject(er);
+            } else {
+              resolve(is);
+            }
+          });
+        });
+      }
+      core(path28, options || {}, function(er, is) {
+        if (er) {
+          if (er.code === "EACCES" || options && options.ignoreErrors) {
+            er = null;
+            is = false;
+          }
+        }
+        cb(er, is);
+      });
+    }
+    function sync(path28, options) {
+      try {
+        return core.sync(path28, options || {});
+      } catch (er) {
+        if (options && options.ignoreErrors || er.code === "EACCES") {
+          return false;
+        } else {
+          throw er;
+        }
+      }
+    }
+  }
+});
+
+// ../../node_modules/.pnpm/which@2.0.2/node_modules/which/which.js
+var require_which = __commonJS({
+  "../../node_modules/.pnpm/which@2.0.2/node_modules/which/which.js"(exports2, module2) {
+    var isWindows = process.platform === "win32" || process.env.OSTYPE === "cygwin" || process.env.OSTYPE === "msys";
+    var path28 = require("path");
+    var COLON = isWindows ? ";" : ":";
+    var isexe = require_isexe();
+    var getNotFoundError = (cmd) => Object.assign(new Error(`not found: ${cmd}`), { code: "ENOENT" });
+    var getPathInfo = (cmd, opt) => {
+      const colon = opt.colon || COLON;
+      const pathEnv = cmd.match(/\//) || isWindows && cmd.match(/\\/) ? [""] : [
+        // windows always checks the cwd first
+        ...isWindows ? [process.cwd()] : [],
+        ...(opt.path || process.env.PATH || /* istanbul ignore next: very unusual */
+        "").split(colon)
+      ];
+      const pathExtExe = isWindows ? opt.pathExt || process.env.PATHEXT || ".EXE;.CMD;.BAT;.COM" : "";
+      const pathExt = isWindows ? pathExtExe.split(colon) : [""];
+      if (isWindows) {
+        if (cmd.indexOf(".") !== -1 && pathExt[0] !== "")
+          pathExt.unshift("");
+      }
+      return {
+        pathEnv,
+        pathExt,
+        pathExtExe
+      };
+    };
+    var which = (cmd, opt, cb) => {
+      if (typeof opt === "function") {
+        cb = opt;
+        opt = {};
+      }
+      if (!opt)
+        opt = {};
+      const { pathEnv, pathExt, pathExtExe } = getPathInfo(cmd, opt);
+      const found = [];
+      const step = (i) => new Promise((resolve, reject) => {
+        if (i === pathEnv.length)
+          return opt.all && found.length ? resolve(found) : reject(getNotFoundError(cmd));
+        const ppRaw = pathEnv[i];
+        const pathPart = /^".*"$/.test(ppRaw) ? ppRaw.slice(1, -1) : ppRaw;
+        const pCmd = path28.join(pathPart, cmd);
+        const p = !pathPart && /^\.[\\\/]/.test(cmd) ? cmd.slice(0, 2) + pCmd : pCmd;
+        resolve(subStep(p, i, 0));
+      });
+      const subStep = (p, i, ii) => new Promise((resolve, reject) => {
+        if (ii === pathExt.length)
+          return resolve(step(i + 1));
+        const ext = pathExt[ii];
+        isexe(p + ext, { pathExt: pathExtExe }, (er, is) => {
+          if (!er && is) {
+            if (opt.all)
+              found.push(p + ext);
+            else
+              return resolve(p + ext);
+          }
+          return resolve(subStep(p, i, ii + 1));
+        });
+      });
+      return cb ? step(0).then((res) => cb(null, res), cb) : step(0);
+    };
+    var whichSync = (cmd, opt) => {
+      opt = opt || {};
+      const { pathEnv, pathExt, pathExtExe } = getPathInfo(cmd, opt);
+      const found = [];
+      for (let i = 0; i < pathEnv.length; i++) {
+        const ppRaw = pathEnv[i];
+        const pathPart = /^".*"$/.test(ppRaw) ? ppRaw.slice(1, -1) : ppRaw;
+        const pCmd = path28.join(pathPart, cmd);
+        const p = !pathPart && /^\.[\\\/]/.test(cmd) ? cmd.slice(0, 2) + pCmd : pCmd;
+        for (let j = 0; j < pathExt.length; j++) {
+          const cur = p + pathExt[j];
+          try {
+            const is = isexe.sync(cur, { pathExt: pathExtExe });
+            if (is) {
+              if (opt.all)
+                found.push(cur);
+              else
+                return cur;
+            }
+          } catch (ex) {
+          }
+        }
+      }
+      if (opt.all && found.length)
+        return found;
+      if (opt.nothrow)
+        return null;
+      throw getNotFoundError(cmd);
+    };
+    module2.exports = which;
+    which.sync = whichSync;
+  }
+});
+
+// ../../node_modules/.pnpm/path-key@3.1.1/node_modules/path-key/index.js
+var require_path_key = __commonJS({
+  "../../node_modules/.pnpm/path-key@3.1.1/node_modules/path-key/index.js"(exports2, module2) {
+    "use strict";
+    var pathKey = (options = {}) => {
+      const environment = options.env || process.env;
+      const platform = options.platform || process.platform;
+      if (platform !== "win32") {
+        return "PATH";
+      }
+      return Object.keys(environment).reverse().find((key) => key.toUpperCase() === "PATH") || "Path";
+    };
+    module2.exports = pathKey;
+    module2.exports.default = pathKey;
+  }
+});
+
+// ../../node_modules/.pnpm/cross-spawn@7.0.6/node_modules/cross-spawn/lib/util/resolveCommand.js
+var require_resolveCommand = __commonJS({
+  "../../node_modules/.pnpm/cross-spawn@7.0.6/node_modules/cross-spawn/lib/util/resolveCommand.js"(exports2, module2) {
+    "use strict";
+    var path28 = require("path");
+    var which = require_which();
+    var getPathKey = require_path_key();
+    function resolveCommandAttempt(parsed, withoutPathExt) {
+      const env = parsed.options.env || process.env;
+      const cwd = process.cwd();
+      const hasCustomCwd = parsed.options.cwd != null;
+      const shouldSwitchCwd = hasCustomCwd && process.chdir !== void 0 && !process.chdir.disabled;
+      if (shouldSwitchCwd) {
+        try {
+          process.chdir(parsed.options.cwd);
+        } catch (err) {
+        }
+      }
+      let resolved;
+      try {
+        resolved = which.sync(parsed.command, {
+          path: env[getPathKey({ env })],
+          pathExt: withoutPathExt ? path28.delimiter : void 0
+        });
+      } catch (e) {
+      } finally {
+        if (shouldSwitchCwd) {
+          process.chdir(cwd);
+        }
+      }
+      if (resolved) {
+        resolved = path28.resolve(hasCustomCwd ? parsed.options.cwd : "", resolved);
+      }
+      return resolved;
+    }
+    function resolveCommand(parsed) {
+      return resolveCommandAttempt(parsed) || resolveCommandAttempt(parsed, true);
+    }
+    module2.exports = resolveCommand;
+  }
+});
+
+// ../../node_modules/.pnpm/cross-spawn@7.0.6/node_modules/cross-spawn/lib/util/escape.js
+var require_escape = __commonJS({
+  "../../node_modules/.pnpm/cross-spawn@7.0.6/node_modules/cross-spawn/lib/util/escape.js"(exports2, module2) {
+    "use strict";
+    var metaCharsRegExp = /([()\][%!^"`<>&|;, *?])/g;
+    function escapeCommand(arg) {
+      arg = arg.replace(metaCharsRegExp, "^$1");
+      return arg;
+    }
+    function escapeArgument(arg, doubleEscapeMetaChars) {
+      arg = `${arg}`;
+      arg = arg.replace(/(?=(\\+?)?)\1"/g, '$1$1\\"');
+      arg = arg.replace(/(?=(\\+?)?)\1$/, "$1$1");
+      arg = `"${arg}"`;
+      arg = arg.replace(metaCharsRegExp, "^$1");
+      if (doubleEscapeMetaChars) {
+        arg = arg.replace(metaCharsRegExp, "^$1");
+      }
+      return arg;
+    }
+    module2.exports.command = escapeCommand;
+    module2.exports.argument = escapeArgument;
+  }
+});
+
+// ../../node_modules/.pnpm/shebang-regex@3.0.0/node_modules/shebang-regex/index.js
+var require_shebang_regex = __commonJS({
+  "../../node_modules/.pnpm/shebang-regex@3.0.0/node_modules/shebang-regex/index.js"(exports2, module2) {
+    "use strict";
+    module2.exports = /^#!(.*)/;
+  }
+});
+
+// ../../node_modules/.pnpm/shebang-command@2.0.0/node_modules/shebang-command/index.js
+var require_shebang_command = __commonJS({
+  "../../node_modules/.pnpm/shebang-command@2.0.0/node_modules/shebang-command/index.js"(exports2, module2) {
+    "use strict";
+    var shebangRegex = require_shebang_regex();
+    module2.exports = (string4 = "") => {
+      const match = string4.match(shebangRegex);
+      if (!match) {
+        return null;
+      }
+      const [path28, argument] = match[0].replace(/#! ?/, "").split(" ");
+      const binary = path28.split("/").pop();
+      if (binary === "env") {
+        return argument;
+      }
+      return argument ? `${binary} ${argument}` : binary;
+    };
+  }
+});
+
+// ../../node_modules/.pnpm/cross-spawn@7.0.6/node_modules/cross-spawn/lib/util/readShebang.js
+var require_readShebang = __commonJS({
+  "../../node_modules/.pnpm/cross-spawn@7.0.6/node_modules/cross-spawn/lib/util/readShebang.js"(exports2, module2) {
+    "use strict";
+    var fs14 = require("fs");
+    var shebangCommand = require_shebang_command();
+    function readShebang(command) {
+      const size = 150;
+      const buffer = Buffer.alloc(size);
+      let fd;
+      try {
+        fd = fs14.openSync(command, "r");
+        fs14.readSync(fd, buffer, 0, size, 0);
+        fs14.closeSync(fd);
+      } catch (e) {
+      }
+      return shebangCommand(buffer.toString());
+    }
+    module2.exports = readShebang;
+  }
+});
+
+// ../../node_modules/.pnpm/cross-spawn@7.0.6/node_modules/cross-spawn/lib/parse.js
+var require_parse2 = __commonJS({
+  "../../node_modules/.pnpm/cross-spawn@7.0.6/node_modules/cross-spawn/lib/parse.js"(exports2, module2) {
+    "use strict";
+    var path28 = require("path");
+    var resolveCommand = require_resolveCommand();
+    var escape2 = require_escape();
+    var readShebang = require_readShebang();
+    var isWin = process.platform === "win32";
+    var isExecutableRegExp = /\.(?:com|exe)$/i;
+    var isCmdShimRegExp = /node_modules[\\/].bin[\\/][^\\/]+\.cmd$/i;
+    function detectShebang(parsed) {
+      parsed.file = resolveCommand(parsed);
+      const shebang = parsed.file && readShebang(parsed.file);
+      if (shebang) {
+        parsed.args.unshift(parsed.file);
+        parsed.command = shebang;
+        return resolveCommand(parsed);
+      }
+      return parsed.file;
+    }
+    function parseNonShell(parsed) {
+      if (!isWin) {
+        return parsed;
+      }
+      const commandFile = detectShebang(parsed);
+      const needsShell = !isExecutableRegExp.test(commandFile);
+      if (parsed.options.forceShell || needsShell) {
+        const needsDoubleEscapeMetaChars = isCmdShimRegExp.test(commandFile);
+        parsed.command = path28.normalize(parsed.command);
+        parsed.command = escape2.command(parsed.command);
+        parsed.args = parsed.args.map((arg) => escape2.argument(arg, needsDoubleEscapeMetaChars));
+        const shellCommand = [parsed.command].concat(parsed.args).join(" ");
+        parsed.args = ["/d", "/s", "/c", `"${shellCommand}"`];
+        parsed.command = process.env.comspec || "cmd.exe";
+        parsed.options.windowsVerbatimArguments = true;
+      }
+      return parsed;
+    }
+    function parse8(command, args, options) {
+      if (args && !Array.isArray(args)) {
+        options = args;
+        args = null;
+      }
+      args = args ? args.slice(0) : [];
+      options = Object.assign({}, options);
+      const parsed = {
+        command,
+        args,
+        options,
+        file: void 0,
+        original: {
+          command,
+          args
+        }
+      };
+      return options.shell ? parsed : parseNonShell(parsed);
+    }
+    module2.exports = parse8;
+  }
+});
+
+// ../../node_modules/.pnpm/cross-spawn@7.0.6/node_modules/cross-spawn/lib/enoent.js
+var require_enoent = __commonJS({
+  "../../node_modules/.pnpm/cross-spawn@7.0.6/node_modules/cross-spawn/lib/enoent.js"(exports2, module2) {
+    "use strict";
+    var isWin = process.platform === "win32";
+    function notFoundError(original, syscall) {
+      return Object.assign(new Error(`${syscall} ${original.command} ENOENT`), {
+        code: "ENOENT",
+        errno: "ENOENT",
+        syscall: `${syscall} ${original.command}`,
+        path: original.command,
+        spawnargs: original.args
+      });
+    }
+    function hookChildProcess(cp, parsed) {
+      if (!isWin) {
+        return;
+      }
+      const originalEmit = cp.emit;
+      cp.emit = function(name, arg1) {
+        if (name === "exit") {
+          const err = verifyENOENT(arg1, parsed);
+          if (err) {
+            return originalEmit.call(cp, "error", err);
+          }
+        }
+        return originalEmit.apply(cp, arguments);
+      };
+    }
+    function verifyENOENT(status, parsed) {
+      if (isWin && status === 1 && !parsed.file) {
+        return notFoundError(parsed.original, "spawn");
+      }
+      return null;
+    }
+    function verifyENOENTSync(status, parsed) {
+      if (isWin && status === 1 && !parsed.file) {
+        return notFoundError(parsed.original, "spawnSync");
+      }
+      return null;
+    }
+    module2.exports = {
+      hookChildProcess,
+      verifyENOENT,
+      verifyENOENTSync,
+      notFoundError
+    };
+  }
+});
+
+// ../../node_modules/.pnpm/cross-spawn@7.0.6/node_modules/cross-spawn/index.js
+var require_cross_spawn = __commonJS({
+  "../../node_modules/.pnpm/cross-spawn@7.0.6/node_modules/cross-spawn/index.js"(exports2, module2) {
+    "use strict";
+    var cp = require("child_process");
+    var parse8 = require_parse2();
+    var enoent = require_enoent();
+    function spawn6(command, args, options) {
+      const parsed = parse8(command, args, options);
+      const spawned = cp.spawn(parsed.command, parsed.args, parsed.options);
+      enoent.hookChildProcess(spawned, parsed);
+      return spawned;
+    }
+    function spawnSync7(command, args, options) {
+      const parsed = parse8(command, args, options);
+      const result = cp.spawnSync(parsed.command, parsed.args, parsed.options);
+      result.error = result.error || enoent.verifyENOENTSync(result.status, parsed);
+      return result;
+    }
+    module2.exports = spawn6;
+    module2.exports.spawn = spawn6;
+    module2.exports.sync = spawnSync7;
+    module2.exports._parse = parse8;
+    module2.exports._enoent = enoent;
+  }
+});
+
 // ../../node_modules/.pnpm/semver@7.8.0/node_modules/semver/internal/constants.js
 var require_constants = __commonJS({
   "../../node_modules/.pnpm/semver@7.8.0/node_modules/semver/internal/constants.js"(exports2, module2) {
@@ -9752,11 +10249,11 @@ var require_semver = __commonJS({
 });
 
 // ../../node_modules/.pnpm/semver@7.8.0/node_modules/semver/functions/parse.js
-var require_parse2 = __commonJS({
+var require_parse3 = __commonJS({
   "../../node_modules/.pnpm/semver@7.8.0/node_modules/semver/functions/parse.js"(exports2, module2) {
     "use strict";
     var SemVer = require_semver();
-    var parse7 = (version2, options, throwErrors = false) => {
+    var parse8 = (version2, options, throwErrors = false) => {
       if (version2 instanceof SemVer) {
         return version2;
       }
@@ -9769,7 +10266,7 @@ var require_parse2 = __commonJS({
         throw er;
       }
     };
-    module2.exports = parse7;
+    module2.exports = parse8;
   }
 });
 
@@ -9777,9 +10274,9 @@ var require_parse2 = __commonJS({
 var require_valid = __commonJS({
   "../../node_modules/.pnpm/semver@7.8.0/node_modules/semver/functions/valid.js"(exports2, module2) {
     "use strict";
-    var parse7 = require_parse2();
+    var parse8 = require_parse3();
     var valid = (version2, options) => {
-      const v = parse7(version2, options);
+      const v = parse8(version2, options);
       return v ? v.version : null;
     };
     module2.exports = valid;
@@ -9790,9 +10287,9 @@ var require_valid = __commonJS({
 var require_clean = __commonJS({
   "../../node_modules/.pnpm/semver@7.8.0/node_modules/semver/functions/clean.js"(exports2, module2) {
     "use strict";
-    var parse7 = require_parse2();
+    var parse8 = require_parse3();
     var clean = (version2, options) => {
-      const s = parse7(version2.trim().replace(/^[=v]+/, ""), options);
+      const s = parse8(version2.trim().replace(/^[=v]+/, ""), options);
       return s ? s.version : null;
     };
     module2.exports = clean;
@@ -9827,10 +10324,10 @@ var require_inc = __commonJS({
 var require_diff = __commonJS({
   "../../node_modules/.pnpm/semver@7.8.0/node_modules/semver/functions/diff.js"(exports2, module2) {
     "use strict";
-    var parse7 = require_parse2();
+    var parse8 = require_parse3();
     var diff = (version1, version2) => {
-      const v1 = parse7(version1, null, true);
-      const v2 = parse7(version2, null, true);
+      const v1 = parse8(version1, null, true);
+      const v2 = parse8(version2, null, true);
       const comparison = v1.compare(v2);
       if (comparison === 0) {
         return null;
@@ -9901,9 +10398,9 @@ var require_patch = __commonJS({
 var require_prerelease = __commonJS({
   "../../node_modules/.pnpm/semver@7.8.0/node_modules/semver/functions/prerelease.js"(exports2, module2) {
     "use strict";
-    var parse7 = require_parse2();
+    var parse8 = require_parse3();
     var prerelease = (version2, options) => {
-      const parsed = parse7(version2, options);
+      const parsed = parse8(version2, options);
       return parsed && parsed.prerelease.length ? parsed.prerelease : null;
     };
     module2.exports = prerelease;
@@ -10089,7 +10586,7 @@ var require_coerce = __commonJS({
   "../../node_modules/.pnpm/semver@7.8.0/node_modules/semver/functions/coerce.js"(exports2, module2) {
     "use strict";
     var SemVer = require_semver();
-    var parse7 = require_parse2();
+    var parse8 = require_parse3();
     var { safeRe: re, t } = require_re();
     var coerce = (version2, options) => {
       if (version2 instanceof SemVer) {
@@ -10124,7 +10621,7 @@ var require_coerce = __commonJS({
       const patch = match[4] || "0";
       const prerelease = options.includePrerelease && match[5] ? `-${match[5]}` : "";
       const build = options.includePrerelease && match[6] ? `+${match[6]}` : "";
-      return parse7(`${major}.${minor}.${patch}${prerelease}${build}`, options);
+      return parse8(`${major}.${minor}.${patch}${prerelease}${build}`, options);
     };
     module2.exports = coerce;
   }
@@ -10134,7 +10631,7 @@ var require_coerce = __commonJS({
 var require_truncate = __commonJS({
   "../../node_modules/.pnpm/semver@7.8.0/node_modules/semver/functions/truncate.js"(exports2, module2) {
     "use strict";
-    var parse7 = require_parse2();
+    var parse8 = require_parse3();
     var constants2 = require_constants();
     var SemVer = require_semver();
     var truncate3 = (version2, truncation, options) => {
@@ -10146,7 +10643,7 @@ var require_truncate = __commonJS({
     };
     var cloneInputVersion = (version2, options) => {
       const versionStringToParse = version2 instanceof SemVer ? version2.version : version2;
-      return parse7(versionStringToParse, options);
+      return parse8(versionStringToParse, options);
     };
     var doTruncation = (version2, truncation) => {
       if (isPrerelease(truncation)) {
@@ -11182,7 +11679,7 @@ var require_semver2 = __commonJS({
     var constants2 = require_constants();
     var SemVer = require_semver();
     var identifiers = require_identifiers();
-    var parse7 = require_parse2();
+    var parse8 = require_parse3();
     var valid = require_valid();
     var clean = require_clean();
     var inc = require_inc();
@@ -11221,7 +11718,7 @@ var require_semver2 = __commonJS({
     var simplifyRange = require_simplify();
     var subset = require_subset();
     module2.exports = {
-      parse: parse7,
+      parse: parse8,
       valid,
       clean,
       inc,
@@ -13366,7 +13863,7 @@ var require_extension = __commonJS({
       if (dest[name] === void 0) dest[name] = [elem];
       else dest[name].push(elem);
     }
-    function parse7(header) {
+    function parse8(header) {
       const offers = /* @__PURE__ */ Object.create(null);
       let params = /* @__PURE__ */ Object.create(null);
       let mustUnescape = false;
@@ -13506,7 +14003,7 @@ var require_extension = __commonJS({
         }).join(", ");
       }).join(", ");
     }
-    module2.exports = { format, parse: parse7 };
+    module2.exports = { format, parse: parse8 };
   }
 });
 
@@ -13540,7 +14037,7 @@ var require_websocket = __commonJS({
     var {
       EventTarget: { addEventListener, removeEventListener }
     } = require_event_target();
-    var { format, parse: parse7 } = require_extension();
+    var { format, parse: parse8 } = require_extension();
     var { toBuffer } = require_buffer_util();
     var kAborted = Symbol("kAborted");
     var protocolVersions = [8, 13];
@@ -14217,7 +14714,7 @@ var require_websocket = __commonJS({
           }
           let extensions;
           try {
-            extensions = parse7(secWebSocketExtensions);
+            extensions = parse8(secWebSocketExtensions);
           } catch (err) {
             const message = "Invalid Sec-WebSocket-Extensions header";
             abortHandshake(websocket, socket, message);
@@ -14509,7 +15006,7 @@ var require_subprotocol = __commonJS({
   "../../node_modules/.pnpm/ws@8.21.0/node_modules/ws/lib/subprotocol.js"(exports2, module2) {
     "use strict";
     var { tokenChars } = require_validation2();
-    function parse7(header) {
+    function parse8(header) {
       const protocols = /* @__PURE__ */ new Set();
       let start = -1;
       let end = -1;
@@ -14545,7 +15042,7 @@ var require_subprotocol = __commonJS({
       protocols.add(protocol);
       return protocols;
     }
-    module2.exports = { parse: parse7 };
+    module2.exports = { parse: parse8 };
   }
 });
 
@@ -15991,11 +16488,11 @@ var require_signals = __commonJS({
 // ../../node_modules/.pnpm/signal-exit@3.0.7/node_modules/signal-exit/index.js
 var require_signal_exit = __commonJS({
   "../../node_modules/.pnpm/signal-exit@3.0.7/node_modules/signal-exit/index.js"(exports2, module2) {
-    var process4 = global.process;
-    var processOk = function(process5) {
-      return process5 && typeof process5 === "object" && typeof process5.removeListener === "function" && typeof process5.emit === "function" && typeof process5.reallyExit === "function" && typeof process5.listeners === "function" && typeof process5.kill === "function" && typeof process5.pid === "number" && typeof process5.on === "function";
+    var process5 = global.process;
+    var processOk = function(process6) {
+      return process6 && typeof process6 === "object" && typeof process6.removeListener === "function" && typeof process6.emit === "function" && typeof process6.reallyExit === "function" && typeof process6.listeners === "function" && typeof process6.kill === "function" && typeof process6.pid === "number" && typeof process6.on === "function";
     };
-    if (!processOk(process4)) {
+    if (!processOk(process5)) {
       module2.exports = function() {
         return function() {
         };
@@ -16003,15 +16500,15 @@ var require_signal_exit = __commonJS({
     } else {
       assert2 = require("assert");
       signals = require_signals();
-      isWin = /^win/i.test(process4.platform);
+      isWin = /^win/i.test(process5.platform);
       EE = require("events");
       if (typeof EE !== "function") {
         EE = EE.EventEmitter;
       }
-      if (process4.__signal_exit_emitter__) {
-        emitter = process4.__signal_exit_emitter__;
+      if (process5.__signal_exit_emitter__) {
+        emitter = process5.__signal_exit_emitter__;
       } else {
-        emitter = process4.__signal_exit_emitter__ = new EE();
+        emitter = process5.__signal_exit_emitter__ = new EE();
         emitter.count = 0;
         emitter.emitted = {};
       }
@@ -16048,12 +16545,12 @@ var require_signal_exit = __commonJS({
         loaded = false;
         signals.forEach(function(sig) {
           try {
-            process4.removeListener(sig, sigListeners[sig]);
+            process5.removeListener(sig, sigListeners[sig]);
           } catch (er) {
           }
         });
-        process4.emit = originalProcessEmit;
-        process4.reallyExit = originalProcessReallyExit;
+        process5.emit = originalProcessEmit;
+        process5.reallyExit = originalProcessReallyExit;
         emitter.count -= 1;
       };
       module2.exports.unload = unload;
@@ -16070,7 +16567,7 @@ var require_signal_exit = __commonJS({
           if (!processOk(global.process)) {
             return;
           }
-          var listeners = process4.listeners(sig);
+          var listeners = process5.listeners(sig);
           if (listeners.length === emitter.count) {
             unload();
             emit("exit", null, sig);
@@ -16078,7 +16575,7 @@ var require_signal_exit = __commonJS({
             if (isWin && sig === "SIGHUP") {
               sig = "SIGINT";
             }
-            process4.kill(process4.pid, sig);
+            process5.kill(process5.pid, sig);
           }
         };
       });
@@ -16094,36 +16591,36 @@ var require_signal_exit = __commonJS({
         emitter.count += 1;
         signals = signals.filter(function(sig) {
           try {
-            process4.on(sig, sigListeners[sig]);
+            process5.on(sig, sigListeners[sig]);
             return true;
           } catch (er) {
             return false;
           }
         });
-        process4.emit = processEmit;
-        process4.reallyExit = processReallyExit;
+        process5.emit = processEmit;
+        process5.reallyExit = processReallyExit;
       };
       module2.exports.load = load;
-      originalProcessReallyExit = process4.reallyExit;
+      originalProcessReallyExit = process5.reallyExit;
       processReallyExit = function processReallyExit2(code) {
         if (!processOk(global.process)) {
           return;
         }
-        process4.exitCode = code || /* istanbul ignore next */
+        process5.exitCode = code || /* istanbul ignore next */
         0;
-        emit("exit", process4.exitCode, null);
-        emit("afterexit", process4.exitCode, null);
-        originalProcessReallyExit.call(process4, process4.exitCode);
+        emit("exit", process5.exitCode, null);
+        emit("afterexit", process5.exitCode, null);
+        originalProcessReallyExit.call(process5, process5.exitCode);
       };
-      originalProcessEmit = process4.emit;
+      originalProcessEmit = process5.emit;
       processEmit = function processEmit2(ev, arg) {
         if (ev === "exit" && processOk(global.process)) {
           if (arg !== void 0) {
-            process4.exitCode = arg;
+            process5.exitCode = arg;
           }
           var ret = originalProcessEmit.apply(this, arguments);
-          emit("exit", process4.exitCode, null);
-          emit("afterexit", process4.exitCode, null);
+          emit("exit", process5.exitCode, null);
+          emit("afterexit", process5.exitCode, null);
           return ret;
         } else {
           return originalProcessEmit.apply(this, arguments);
@@ -17420,7 +17917,7 @@ var require_regex = __commonJS({
 });
 
 // ../../node_modules/.pnpm/qrcode@1.5.4/node_modules/qrcode/lib/core/mode.js
-var require_mode = __commonJS({
+var require_mode2 = __commonJS({
   "../../node_modules/.pnpm/qrcode@1.5.4/node_modules/qrcode/lib/core/mode.js"(exports2) {
     var VersionCheck = require_version_check();
     var Regex = require_regex();
@@ -17506,7 +18003,7 @@ var require_version = __commonJS({
     var Utils = require_utils2();
     var ECCode = require_error_correction_code();
     var ECLevel = require_error_correction_level();
-    var Mode = require_mode();
+    var Mode = require_mode2();
     var VersionCheck = require_version_check();
     var G18 = 1 << 12 | 1 << 11 | 1 << 10 | 1 << 9 | 1 << 8 | 1 << 5 | 1 << 2 | 1 << 0;
     var G18_BCH = Utils.getBCHDigit(G18);
@@ -17616,7 +18113,7 @@ var require_format_info = __commonJS({
 // ../../node_modules/.pnpm/qrcode@1.5.4/node_modules/qrcode/lib/core/numeric-data.js
 var require_numeric_data = __commonJS({
   "../../node_modules/.pnpm/qrcode@1.5.4/node_modules/qrcode/lib/core/numeric-data.js"(exports2, module2) {
-    var Mode = require_mode();
+    var Mode = require_mode2();
     function NumericData(data) {
       this.mode = Mode.NUMERIC;
       this.data = data.toString();
@@ -17651,7 +18148,7 @@ var require_numeric_data = __commonJS({
 // ../../node_modules/.pnpm/qrcode@1.5.4/node_modules/qrcode/lib/core/alphanumeric-data.js
 var require_alphanumeric_data = __commonJS({
   "../../node_modules/.pnpm/qrcode@1.5.4/node_modules/qrcode/lib/core/alphanumeric-data.js"(exports2, module2) {
-    var Mode = require_mode();
+    var Mode = require_mode2();
     var ALPHA_NUM_CHARS = [
       "0",
       "1",
@@ -17730,7 +18227,7 @@ var require_alphanumeric_data = __commonJS({
 // ../../node_modules/.pnpm/qrcode@1.5.4/node_modules/qrcode/lib/core/byte-data.js
 var require_byte_data = __commonJS({
   "../../node_modules/.pnpm/qrcode@1.5.4/node_modules/qrcode/lib/core/byte-data.js"(exports2, module2) {
-    var Mode = require_mode();
+    var Mode = require_mode2();
     function ByteData(data) {
       this.mode = Mode.BYTE;
       if (typeof data === "string") {
@@ -17760,7 +18257,7 @@ var require_byte_data = __commonJS({
 // ../../node_modules/.pnpm/qrcode@1.5.4/node_modules/qrcode/lib/core/kanji-data.js
 var require_kanji_data = __commonJS({
   "../../node_modules/.pnpm/qrcode@1.5.4/node_modules/qrcode/lib/core/kanji-data.js"(exports2, module2) {
-    var Mode = require_mode();
+    var Mode = require_mode2();
     var Utils = require_utils2();
     function KanjiData(data) {
       this.mode = Mode.KANJI;
@@ -17900,7 +18397,7 @@ var require_dijkstra = __commonJS({
 // ../../node_modules/.pnpm/qrcode@1.5.4/node_modules/qrcode/lib/core/segments.js
 var require_segments = __commonJS({
   "../../node_modules/.pnpm/qrcode@1.5.4/node_modules/qrcode/lib/core/segments.js"(exports2) {
-    var Mode = require_mode();
+    var Mode = require_mode2();
     var NumericData = require_numeric_data();
     var AlphanumericData = require_alphanumeric_data();
     var ByteData = require_byte_data();
@@ -18097,7 +18594,7 @@ var require_qrcode = __commonJS({
     var ReedSolomonEncoder = require_reed_solomon_encoder();
     var Version = require_version();
     var FormatInfo = require_format_info();
-    var Mode = require_mode();
+    var Mode = require_mode2();
     var Segments = require_segments();
     function setupFinderPattern(matrix, version2) {
       const size = matrix.size;
@@ -20276,10 +20773,10 @@ var require_packer_sync = __commonJS({
 var require_png_sync = __commonJS({
   "../../node_modules/.pnpm/pngjs@5.0.0/node_modules/pngjs/lib/png-sync.js"(exports2) {
     "use strict";
-    var parse7 = require_parser_sync();
+    var parse8 = require_parser_sync();
     var pack = require_packer_sync();
     exports2.read = function(buffer, options) {
-      return parse7(buffer, options || {});
+      return parse8(buffer, options || {});
     };
     exports2.write = function(png, options) {
       return pack(png, options);
@@ -21114,7 +21611,7 @@ async function installPublicMcpServerToConfigs(serverId, expected) {
   if (await pathExists5(codexPath)) {
     try {
       const content = await import_promises15.default.readFile(codexPath, "utf8");
-      const parsed = toml3.parse(content);
+      const parsed = toml4.parse(content);
       if (!parsed.mcp_servers?.[serverId]) {
         const appended = content.replace(/\n$/, "") + renderTomlBlock(serverId, expected);
         await writeAtomic(codexPath, appended);
@@ -21146,14 +21643,14 @@ async function installPublicMcpServerToConfigs(serverId, expected) {
     await writeAtomic(agyPath, JSON.stringify({ mcpServers: { [serverId]: expected } }, null, 2) + "\n");
   }
 }
-var import_promises15, import_node_os16, import_node_path36, toml3;
+var import_promises15, import_node_os16, import_node_path36, toml4;
 var init_install_public_mcp = __esm({
   "src/install-public-mcp.ts"() {
     "use strict";
     import_promises15 = __toESM(require("node:fs/promises"), 1);
     import_node_os16 = __toESM(require("node:os"), 1);
     import_node_path36 = __toESM(require("node:path"), 1);
-    toml3 = __toESM(require_toml(), 1);
+    toml4 = __toESM(require_toml(), 1);
   }
 });
 
@@ -21168,7 +21665,7 @@ var import_node_path42 = __toESM(require("node:path"), 1);
 var import_promises = __toESM(require("node:fs/promises"), 1);
 var import_node_os3 = __toESM(require("node:os"), 1);
 var import_node_path3 = __toESM(require("node:path"), 1);
-var toml = __toESM(require_toml(), 1);
+var toml2 = __toESM(require_toml(), 1);
 
 // src/api-base-url.ts
 var DEFAULT_API_BASE_URL = "http://127.0.0.1:8787";
@@ -21242,17 +21739,10 @@ function isLoopbackUrl(input) {
 function readConfiguredApiBaseUrl(explicit) {
   const direct = explicit ?? process.env.MRRLIN_API_BASE_URL;
   if (direct?.trim()) return retargetRetiredApiBaseUrl(direct.trim()).baseUrl;
-  if (process.env.MRRLIN_STAGING === "1") return STAGING_API_BASE_URL;
-  return DEFAULT_API_BASE_URL;
-}
-function readDirectorBridgeApiBaseUrl(explicit) {
-  const direct = explicit ?? process.env.MRRLIN_API_BASE_URL;
-  if (direct?.trim()) return retargetRetiredApiBaseUrl(direct.trim()).baseUrl;
-  if (process.env.MRRLIN_STAGING === "1") return STAGING_API_BASE_URL;
   return PRODUCTION_API_BASE_URL;
 }
-function isRemoteApiAllowed(apiBaseUrl) {
-  return isLoopbackUrl(apiBaseUrl) || isStagingApiBaseUrl(apiBaseUrl) || isProductionApiBaseUrl(apiBaseUrl) || process.env.MRRLIN_API_ALLOW_REMOTE === "1";
+function readDirectorBridgeApiBaseUrl(explicit) {
+  return readConfiguredApiBaseUrl(explicit);
 }
 function readProbeTimeoutMs(env) {
   const raw = Number((env.MRRLIN_API_PROBE_TIMEOUT_MS ?? "").trim());
@@ -21281,16 +21771,12 @@ async function resolveApiBaseUrlDynamic(opts = {}) {
     const { baseUrl, retargeted } = retargetRetiredApiBaseUrl(direct.trim());
     return { baseUrl, source: retargeted ? "retired-retarget" : "explicit" };
   }
-  if ((env.MRRLIN_STAGING ?? "").trim() === "1") {
-    return { baseUrl: STAGING_API_BASE_URL, source: "staging-env" };
-  }
   const autoDetect = (env.MRRLIN_API_AUTODETECT ?? "").trim() === "1";
   const timeoutMs = opts.probeTimeoutMs ?? readProbeTimeoutMs(env);
   if (autoDetect) {
     if (await probeLocalHealth(DEFAULT_API_BASE_URL, timeoutMs, fetchImpl)) {
       return { baseUrl: DEFAULT_API_BASE_URL, source: "local-probe" };
     }
-    return { baseUrl: STAGING_API_BASE_URL, source: "staging-autodetect" };
   }
   return { baseUrl: PRODUCTION_API_BASE_URL, source: "production-default" };
 }
@@ -21496,7 +21982,8 @@ async function installBrowser(opts = {}) {
 var import_node_fs = __toESM(require("node:fs"), 1);
 var import_node_os2 = __toESM(require("node:os"), 1);
 var import_node_path2 = __toESM(require("node:path"), 1);
-var KNOWN_MRRLIN_ENV_KEYS = /* @__PURE__ */ new Set(["MRRLIN_STAGING", "MRRLIN_API_BASE_URL", "MRRLIN_API_ALLOW_REMOTE"]);
+var toml = __toESM(require_toml(), 1);
+var KNOWN_MRRLIN_ENV_KEYS = /* @__PURE__ */ new Set(["MRRLIN_API_BASE_URL"]);
 function commandArgsTimeoutEqual(candidate, expected) {
   if (candidate.command !== expected.command) return false;
   const actualArgs = candidate.args === void 0 && expected.args.length === 0 ? [] : Array.isArray(candidate.args) ? candidate.args : null;
@@ -21525,13 +22012,9 @@ function tablesEqual(actual, expected) {
 }
 function isCoherentMrrlinEnv(env) {
   const keys = Object.keys(env);
-  const staging = env.MRRLIN_STAGING;
   const url2 = env.MRRLIN_API_BASE_URL;
-  const allowRemote = env.MRRLIN_API_ALLOW_REMOTE;
   const hasUrl = typeof url2 === "string" && url2.trim() !== "";
-  if (keys.length === 1 && staging === "1") return true;
   if (keys.length === 1 && hasUrl) return true;
-  if (keys.length === 2 && hasUrl && allowRemote === "1") return true;
   return false;
 }
 function classifyExistingBlock(actual, expected) {
@@ -21561,9 +22044,6 @@ function blockEnvHasRetiredApiUrl(actual) {
   }
   return retiredApiHostnames().includes(hostname3);
 }
-function isFirstPartyOrLoopbackApiUrl(value) {
-  return isStagingApiBaseUrl(value) || isProductionApiBaseUrl(value) || isLoopbackUrl(value);
-}
 function normalizedApiUrlFromEnv(env) {
   const pinned = env.MRRLIN_API_BASE_URL;
   if (typeof pinned === "string" && pinned.trim()) return retargetRetiredApiBaseUrl(pinned.trim()).baseUrl;
@@ -21574,10 +22054,11 @@ function blockEnvNeedsApiRoutingMigration(actual) {
   const env = actual.env;
   if (typeof env !== "object" || env === null) return false;
   const vars = env;
-  if (vars.MRRLIN_STAGING === "1") return true;
+  if (vars.MRRLIN_STAGING !== void 0) return true;
+  if (vars.MRRLIN_API_ALLOW_REMOTE !== void 0) return true;
   if (blockEnvHasRetiredApiUrl(actual)) return true;
   const apiUrl = normalizedApiUrlFromEnv(vars);
-  return apiUrl !== void 0 && (isProductionApiBaseUrl(apiUrl) || vars.MRRLIN_API_ALLOW_REMOTE === "1" && isFirstPartyOrLoopbackApiUrl(apiUrl));
+  return apiUrl !== void 0 && isProductionApiBaseUrl(apiUrl);
 }
 function renderEnvPreservedNotice(blockId, envKeys) {
   const keys = [...envKeys].sort().join(", ");
@@ -21598,9 +22079,6 @@ function reconcileMcpServerBlock(existing, desired) {
     }
     if (apiUrl && !isProductionApiBaseUrl(apiUrl)) {
       healedEnv.MRRLIN_API_BASE_URL = apiUrl;
-      if (existingEnv.MRRLIN_API_ALLOW_REMOTE === "1" && !isFirstPartyOrLoopbackApiUrl(apiUrl)) {
-        healedEnv.MRRLIN_API_ALLOW_REMOTE = "1";
-      }
     }
     const finalEnv = { ...desired.env, ...healedEnv };
     const block = { ...desired };
@@ -21627,27 +22105,76 @@ function readMcpServerById(configPath, serverId) {
   } catch {
     return null;
   }
-  let parsed;
-  try {
-    parsed = JSON.parse(raw);
-  } catch {
-    return null;
+  let servers;
+  if (configPath.endsWith(".toml")) {
+    try {
+      const parsed = toml.parse(raw);
+      servers = parsed.mcp_servers ?? parsed.mcpServers;
+    } catch {
+      return null;
+    }
+  } else {
+    let parsed;
+    try {
+      parsed = JSON.parse(raw);
+    } catch {
+      return null;
+    }
+    if (typeof parsed !== "object" || parsed === null) return null;
+    const rawServers = parsed.mcpServers ?? parsed.mcp_servers;
+    if (typeof rawServers !== "object" || rawServers === null) return null;
+    servers = rawServers;
   }
-  if (typeof parsed !== "object" || parsed === null) return null;
-  const servers = parsed.mcpServers;
-  if (typeof servers !== "object" || servers === null) return null;
+  if (!servers || typeof servers !== "object") return null;
   const entry = servers[serverId];
   if (typeof entry !== "object" || entry === null) return null;
-  const url2 = entry.url;
-  if (typeof url2 !== "string" || url2.trim() === "") return null;
-  const rawHeaders = entry.headers;
-  const headers = {};
-  if (typeof rawHeaders === "object" && rawHeaders !== null) {
-    for (const [key, value] of Object.entries(rawHeaders)) {
-      if (typeof value === "string") headers[key] = value;
+  const record2 = entry;
+  const url2 = typeof record2.url === "string" ? record2.url.trim() : "";
+  const command = typeof record2.command === "string" ? record2.command.trim() : "";
+  if (url2 !== "" && command !== "") return null;
+  if (url2 !== "") {
+    try {
+      new URL(url2);
+    } catch {
+      return null;
     }
+    const rawHeaders = record2.headers;
+    const headers = {};
+    if (rawHeaders !== void 0) {
+      if (typeof rawHeaders !== "object" || rawHeaders === null || Array.isArray(rawHeaders)) {
+        return null;
+      }
+      for (const [key, value] of Object.entries(rawHeaders)) {
+        if (typeof value !== "string") return null;
+        headers[key] = value;
+      }
+    }
+    return { id: serverId, transport: "http", url: url2, headers };
   }
-  return { url: url2, headers };
+  if (command !== "") {
+    const rawArgs = record2.args;
+    const args = [];
+    if (rawArgs !== void 0) {
+      if (!Array.isArray(rawArgs)) return null;
+      for (const item of rawArgs) {
+        if (typeof item !== "string") return null;
+        args.push(item);
+      }
+    }
+    const rawEnv = record2.env;
+    const env = {};
+    if (rawEnv !== void 0) {
+      if (typeof rawEnv !== "object" || rawEnv === null || Array.isArray(rawEnv)) {
+        return null;
+      }
+      for (const [key, value] of Object.entries(rawEnv)) {
+        if (typeof value !== "string") return null;
+        env[key] = value;
+      }
+    }
+    return { id: serverId, transport: "stdio", command, args, env };
+  }
+  return null;
 }
 function parseTomlMcpServers(raw) {
   const result = {};
@@ -21779,11 +22306,8 @@ function deriveServeEnvFromProcessEnv(env) {
   if (apiUrl) {
     if (!isProductionApiBaseUrl(apiUrl)) {
       out.MRRLIN_API_BASE_URL = apiUrl;
-      if (env.MRRLIN_API_ALLOW_REMOTE === "1" && !isStagingApiBaseUrl(apiUrl) && !isLoopbackUrl(apiUrl)) {
-        out.MRRLIN_API_ALLOW_REMOTE = "1";
-      }
     }
-  } else if (env.MRRLIN_STAGING === "1" || bridgeWantsStaging) {
+  } else if (bridgeWantsStaging) {
     out.MRRLIN_API_BASE_URL = STAGING_API_BASE_URL;
   }
   return Object.keys(out).length > 0 ? out : void 0;
@@ -21904,7 +22428,7 @@ async function installCodex(options) {
   let content = await import_promises.default.readFile(realPath, "utf8");
   let parsed = null;
   try {
-    parsed = toml.parse(content);
+    parsed = toml2.parse(content);
   } catch (error51) {
     const detail = error51 instanceof Error ? error51.message : String(error51);
     const err = {
@@ -22327,7 +22851,7 @@ __export(external_exports, {
   object: () => object,
   optional: () => optional,
   overwrite: () => _overwrite,
-  parse: () => parse3,
+  parse: () => parse4,
   parseAsync: () => parseAsync2,
   partialRecord: () => partialRecord,
   pipe: () => pipe,
@@ -22647,7 +23171,7 @@ __export(core_exports2, {
   isValidJWT: () => isValidJWT,
   locales: () => locales_exports,
   meta: () => meta,
-  parse: () => parse2,
+  parse: () => parse3,
   parseAsync: () => parseAsync,
   prettifyError: () => prettifyError,
   process: () => process2,
@@ -23592,7 +24116,7 @@ var _parse = (_Err) => (schema, value, _ctx, _params) => {
   }
   return result.value;
 };
-var parse2 = /* @__PURE__ */ _parse($ZodRealError);
+var parse3 = /* @__PURE__ */ _parse($ZodRealError);
 var _parseAsync = (_Err) => async (schema, value, _ctx, params) => {
   const ctx = _ctx ? { ..._ctx, async: true } : { async: true };
   let result = schema._zod.run({ value, issues: [] }, ctx);
@@ -26384,10 +26908,10 @@ var $ZodFunction = /* @__PURE__ */ $constructor("$ZodFunction", (inst, def) => {
       throw new Error("implement() must be called with a function");
     }
     return function(...args) {
-      const parsedArgs = inst._def.input ? parse2(inst._def.input, args) : args;
+      const parsedArgs = inst._def.input ? parse3(inst._def.input, args) : args;
       const result = Reflect.apply(func, this, parsedArgs);
       if (inst._def.output) {
-        return parse2(inst._def.output, result);
+        return parse3(inst._def.output, result);
       }
       return result;
     };
@@ -34821,7 +35345,7 @@ var ZodRealError = /* @__PURE__ */ $constructor("ZodError", initializer2, {
 });
 
 // ../../node_modules/.pnpm/zod@4.4.3/node_modules/zod/v4/classic/parse.js
-var parse3 = /* @__PURE__ */ _parse(ZodRealError);
+var parse4 = /* @__PURE__ */ _parse(ZodRealError);
 var parseAsync2 = /* @__PURE__ */ _parseAsync(ZodRealError);
 var safeParse2 = /* @__PURE__ */ _safeParse(ZodRealError);
 var safeParseAsync2 = /* @__PURE__ */ _safeParseAsync(ZodRealError);
@@ -34884,7 +35408,7 @@ var ZodType = /* @__PURE__ */ $constructor("ZodType", (inst, def) => {
   inst.def = def;
   inst.type = def.type;
   Object.defineProperty(inst, "_def", { value: def });
-  inst.parse = (data, params) => parse3(inst, data, params, { callee: inst.parse });
+  inst.parse = (data, params) => parse4(inst, data, params, { callee: inst.parse });
   inst.safeParse = (data, params) => safeParse2(inst, data, params);
   inst.parseAsync = async (data, params) => parseAsync2(inst, data, params, { callee: inst.parseAsync });
   inst.safeParseAsync = async (data, params) => safeParseAsync2(inst, data, params);
@@ -36691,11 +37215,11 @@ function resolveKindCapability(kind) {
 var REFUSAL_TEMPLATES = {
   no_route: {
     happened: ({ artifactKind, projectSlug }) => `Nothing is configured to deliver \`${artifactKind}\` for project \`${projectSlug}\`.`,
-    action: ({ capability }) => `Grant an MCP server that provides the "${capability}" capability and route it on the Integrations page. Retrying before that will refuse identically.`
+    action: ({ capability }) => `Grant an MCP server that provides the "${capability}" capability and route it on the Integrations page (/integrations?query=${encodeURIComponent(capability)}). Retrying before that will refuse identically.`
   },
   no_grant: {
     happened: ({ projectSlug, capability }) => `Project \`${projectSlug}\` routes "${capability}" to a server whose access has been revoked.`,
-    action: () => "Grant that server again on the Integrations page, or re-point the route. Retrying before that will refuse identically."
+    action: ({ capability }) => `Grant that server again on the Integrations page (/integrations?query=${encodeURIComponent(capability)}), or re-point the route. Retrying before that will refuse identically.`
   },
   project_mismatch: {
     happened: ({ capability }) => `The route for "${capability}" belongs to a different project than this task does.`,
@@ -36764,7 +37288,6 @@ var openApiOperationIds = {
   deleteTaskDependency: "deleteTaskDependency",
   getExecutionRun: "getExecutionRun",
   getProjectSchedulerPolicy: "getProjectSchedulerPolicy",
-  getProjectDeployWorkflow: "getProjectDeployWorkflow",
   getDeployTopology: "getDeployTopology",
   writeDeployTopology: "writeDeployTopology",
   getTaskDeployTarget: "getTaskDeployTarget",
@@ -36797,7 +37320,6 @@ var openApiOperationIds = {
   searchKnowledge: "searchKnowledge",
   updateExecutionRun: "updateExecutionRun",
   upsertProjectSchedulerPolicy: "upsertProjectSchedulerPolicy",
-  upsertProjectDeployWorkflow: "upsertProjectDeployWorkflow",
   updatePlan: "updatePlan",
   updateTask: "updateTask",
   updateWikiPage: "updateWikiPage",
@@ -37477,6 +37999,35 @@ var TASK_NOTES_JOURNAL_SECTIONS = [
 ];
 var JOURNAL_HEADING_RE = new RegExp(`^##[ \\t]+(${TASK_NOTES_JOURNAL_SECTIONS.map((s) => s.heading).join("|")})\\b[ \\t]*(?:[\u2014\u2013-][ \\t]*(\\S.*?))?[ \\t]*$`);
 
+// ../../packages/schemas/dist/integration-route-defaults.js
+var DEFAULT_INTEGRATION_ROUTES = {
+  github: {
+    capability: "repo_host",
+    artifactKind: "code_change",
+    operations: {
+      pull_request: "create_pull_request",
+      pull_request_state: "get_pull_request"
+    }
+  },
+  slack: {
+    capability: "send",
+    artifactKind: "message",
+    operations: {
+      dispatch: "slack_post_message"
+    }
+  }
+};
+var SERVER_ALIASES = {
+  "github-mcp": "github",
+  gh: "github",
+  "github-server": "github",
+  "slack-mcp": "slack"
+};
+function getDefaultCapabilityRouteForServer(serverId) {
+  const normalizedId = (SERVER_ALIASES[serverId.toLowerCase()] ?? serverId).toLowerCase();
+  return DEFAULT_INTEGRATION_ROUTES[normalizedId] ?? null;
+}
+
 // ../../packages/schemas/dist/index.js
 var mrrlinTaskStatusSchema = external_exports.enum([
   "backlog",
@@ -37556,7 +38107,7 @@ var mrrlinDeclaredOutcomeSchema = mrrlinDeclaredOutcomeShapeSchema.superRefine((
 var mrrlinReceiptSchema = external_exports.object({
   kind: external_exports.enum(["outcome", "attempt"]),
   evidence: external_exports.object({
-    type: external_exports.enum(["url", "build", "human_tap"]),
+    type: external_exports.enum(["url", "build", "status", "human_tap"]),
     value: external_exports.string().trim().min(1)
   }),
   observedAt: external_exports.string().datetime(),
@@ -38106,9 +38657,9 @@ function refineTaskCreateDomain(data, ctx) {
 }
 var mrrlinTaskCreateSchema = mrrlinTaskCreateShapeSchema.superRefine(refineTaskCreateDomain);
 var mrrlinTaskCreateWithoutIdSchema = mrrlinTaskCreateShapeSchema.omit({ id: true }).superRefine(refineTaskCreateDomain);
-var mrrlinDeployWorkflowEnvSchema = external_exports.enum(["dev", "prod"]);
+var mrrlinDeployEnvSchema = external_exports.enum(["dev", "prod"]);
 var mrrlinTaskDeployTargetInputSchema = external_exports.object({
-  env: mrrlinDeployWorkflowEnvSchema,
+  env: mrrlinDeployEnvSchema,
   targetLabel: external_exports.string().min(1),
   // publish-as-capability: which provider's namespace the workflow fields below belong to. Defaulted
   // rather than required so adding it breaks no caller, and `github` is the only provider that
@@ -38126,7 +38677,7 @@ var deployTopologyResponseSchema = external_exports.object({
     snapshot: external_exports.array(external_exports.object({ id: external_exports.number(), path: external_exports.string(), sha: external_exports.string(), state: external_exports.string() })).nullable(),
     entries: external_exports.array(external_exports.object({
       label: external_exports.string(),
-      env: mrrlinDeployWorkflowEnvSchema,
+      env: mrrlinDeployEnvSchema,
       workflowId: external_exports.number(),
       workflowPath: external_exports.string(),
       workflowSha: external_exports.string()
@@ -38137,7 +38688,7 @@ var mrrlinDeployTopologyWriteSchema = external_exports.object({
   fingerprint: external_exports.string().min(1),
   entries: external_exports.array(external_exports.object({
     label: external_exports.string().min(1),
-    env: mrrlinDeployWorkflowEnvSchema,
+    env: mrrlinDeployEnvSchema,
     workflowId: external_exports.number().int().positive(),
     workflowPath: external_exports.string().min(1),
     workflowSha: external_exports.string().min(1)
@@ -38881,37 +39432,6 @@ var mrrlinProjectSchedulerPolicyUpsertSchema = external_exports.object({
 var projectSchedulerPolicyResponseSchema = external_exports.object({
   data: mrrlinProjectSchedulerPolicySchema
 });
-var mrrlinDeployWorkflowSourceSchema = external_exports.enum(["agent", "operator"]);
-var mrrlinDeployWorkflowStateSchema = external_exports.enum(["resolved", "ambiguous"]);
-var mrrlinProjectDeployWorkflowSchema = external_exports.object({
-  projectSlug: mrrlinProjectSlugSchema,
-  env: mrrlinDeployWorkflowEnvSchema,
-  workflowId: external_exports.number().int().positive().nullable(),
-  workflowPath: external_exports.string().nullable(),
-  reason: external_exports.string().nullable(),
-  source: mrrlinDeployWorkflowSourceSchema.nullable(),
-  state: mrrlinDeployWorkflowStateSchema,
-  activeSetFingerprint: external_exports.string().nullable(),
-  reverifyRequested: external_exports.boolean(),
-  resolvedAt: external_exports.string().datetime().nullable(),
-  createdAt: external_exports.string().datetime(),
-  updatedAt: external_exports.string().datetime()
-});
-var mrrlinProjectDeployWorkflowUpsertSchema = external_exports.object({
-  workflowId: external_exports.number().int().positive().nullable(),
-  workflowPath: external_exports.string().nullable().optional(),
-  reason: external_exports.string().nullable().optional(),
-  state: mrrlinDeployWorkflowStateSchema.optional(),
-  activeSetFingerprint: external_exports.string().nullable().optional(),
-  reverifyRequested: external_exports.boolean().optional()
-}).refine((value) => (value.state ?? "resolved") !== "resolved" || value.workflowId !== null, {
-  message: "A resolved deploy-workflow row requires a non-null workflowId."
-}).refine((value) => (value.state ?? "resolved") !== "ambiguous" || value.workflowId === null, {
-  message: "An ambiguous deploy-workflow row must not carry a workflowId."
-});
-var projectDeployWorkflowResponseSchema = external_exports.object({
-  data: mrrlinProjectDeployWorkflowSchema
-});
 var mrrlinSchedulerPendingReasonSchema = external_exports.enum([
   "follow_up_due",
   "verification_due",
@@ -40654,13 +41174,37 @@ var CATEGORIES = [
 ];
 var CAT_SET = new Set(CATEGORIES);
 function parseVerdict(raw) {
-  const verdictMatch = raw.match(/\*\*Verdict\*\*:\s*(APPROVE|REQUEST_CHANGES|REJECT)\b/i);
-  const parsedVerdict = verdictMatch?.[1]?.toUpperCase();
-  const verdict = parsedVerdict === "APPROVE" || parsedVerdict === "REQUEST_CHANGES" || parsedVerdict === "REJECT" ? parsedVerdict : "REQUEST_CHANGES";
-  const afterCritical = raw.split(/\*\*Critical issues\*\*/i)[1];
-  const block = afterCritical?.split(/\n\*\*/)[0] ?? "";
   const issues = [];
   const parseFallbacks = [];
+  const VERDICT_LINE_RE = /^[ \t]*(>?[ \t]*)(?:\*\*)?Verdict(?:\*\*)?:[ \t]*(.*)$/i;
+  const APPROVE_VAL_RE = /^(?:\*\*)?[ \t]*APPROVE[ \t]*(?:\*\*)?$/i;
+  const REQUEST_CHANGES_VAL_RE = /^(?:\*\*)?[ \t]*REQUEST[ _]CHANGES\b/i;
+  const REJECT_VAL_RE = /^(?:\*\*)?[ \t]*REJECT\b/i;
+  const candidates = [];
+  for (const line of raw.split(/\r?\n/)) {
+    const m = line.match(VERDICT_LINE_RE);
+    if (!m) continue;
+    const isBlockquote = m[1]?.includes(">") ?? false;
+    const rest = (m[2] ?? "").trim();
+    if (APPROVE_VAL_RE.test(rest)) {
+      candidates.push({ verdict: "APPROVE", isBlockquote, line });
+    } else if (REQUEST_CHANGES_VAL_RE.test(rest)) {
+      candidates.push({ verdict: "REQUEST_CHANGES", isBlockquote, line });
+    } else if (REJECT_VAL_RE.test(rest)) {
+      candidates.push({ verdict: "REJECT", isBlockquote, line });
+    }
+  }
+  const unquoted = candidates.filter((c) => !c.isBlockquote);
+  const eligible = unquoted.length > 0 ? unquoted : candidates;
+  const chosen = eligible.length > 0 ? eligible[eligible.length - 1] : null;
+  let verdict;
+  if (chosen) {
+    verdict = chosen.verdict;
+  } else {
+    verdict = "REQUEST_CHANGES";
+  }
+  const afterCritical = raw.split(/\*\*Critical issues\*\*/i)[1] ?? raw.split(/(?:\*\*)?Critical issues(?:\*\*)?:?/i)[1];
+  const block = afterCritical?.split(/\n\*\*/)[0] ?? "";
   for (const line of block.split(/\r?\n/)) {
     const bulletMatch = line.match(/^\s*-\s+(.*\S)\s*$/);
     if (!bulletMatch) continue;
@@ -43584,7 +44128,7 @@ function firstString(...values) {
   return null;
 }
 function runCodexExec(input, deps) {
-  const spawn5 = deps?.spawn ?? import_node_child_process6.spawn;
+  const spawn6 = deps?.spawn ?? import_node_child_process6.spawn;
   const executable = input.codexExecutable ?? "codex";
   const sandbox = input.sandbox ?? "read-only";
   const fullPrompt = input.developerInstructions.trim() ? `${input.developerInstructions.trim()}
@@ -43624,7 +44168,7 @@ ${input.prompt}` : input.prompt;
     };
     let child;
     try {
-      child = spawn5(executable, args, options);
+      child = spawn6(executable, args, options);
     } catch (err) {
       finish({ ok: false, error: `Failed to spawn codex exec: ${errMessage(err)}` });
       return;
@@ -43667,7 +44211,7 @@ function errMessage(err) {
 // ../../packages/agent-client/dist/providers/claude/exec.js
 var import_node_child_process7 = require("node:child_process");
 function runClaudeExec(input, deps) {
-  const spawn5 = deps?.spawn ?? import_node_child_process7.spawn;
+  const spawn6 = deps?.spawn ?? import_node_child_process7.spawn;
   const executable = input.codexExecutable ?? "claude";
   const args = ["--print", "--output-format", "json", "--strict-mcp-config"];
   if (input.mcpConfig) {
@@ -43705,7 +44249,7 @@ function runClaudeExec(input, deps) {
     };
     let child;
     try {
-      child = spawn5(executable, args, options);
+      child = spawn6(executable, args, options);
     } catch (err) {
       finish({ ok: false, error: `Failed to spawn ${executable} exec: ${errMessage2(err)}` });
       return;
@@ -44868,7 +45412,7 @@ var DEFAULT_STATUS_TIMEOUT_MS = 1e4;
 function errMessage3(err) {
   return err instanceof Error ? err.message : String(err);
 }
-function runExternalAgentsStatus(bin, args, timeoutMs, spawn5) {
+function runExternalAgentsStatus(bin, args, timeoutMs, spawn6) {
   return new Promise((resolve) => {
     let settled = false;
     const timerRef = { id: void 0 };
@@ -44881,7 +45425,7 @@ function runExternalAgentsStatus(bin, args, timeoutMs, spawn5) {
     const options = { stdio: ["ignore", "pipe", "pipe"], env: process.env, shell: false };
     let child;
     try {
-      child = spawn5(bin, args, options);
+      child = spawn6(bin, args, options);
     } catch (err) {
       finish({ stdout: "", error: `spawn ${bin} failed: ${errMessage3(err)}` });
       return;
@@ -44905,13 +45449,13 @@ function runExternalAgentsStatus(bin, args, timeoutMs, spawn5) {
   });
 }
 async function fetchRegistrySnapshot(deps) {
-  const spawn5 = deps?.spawn ?? import_node_child_process9.spawn;
+  const spawn6 = deps?.spawn ?? import_node_child_process9.spawn;
   const { command, prefixArgs } = resolveExternalAgentsCliInvocation(deps?.externalAgentsBin);
   const { stdout, error: error51 } = await runExternalAgentsStatus(
     command,
     [...prefixArgs, "status", "--json"],
     deps?.statusTimeoutMs ?? DEFAULT_STATUS_TIMEOUT_MS,
-    spawn5
+    spawn6
   );
   if (error51) return { ok: false, error: error51 };
   try {
@@ -44955,7 +45499,7 @@ function estimateTokenCount(text) {
 function errMessage4(err) {
   return err instanceof Error ? err.message : String(err);
 }
-function runExternalAgents(bin, args, label, timeoutMs, spawn5) {
+function runExternalAgents(bin, args, label, timeoutMs, spawn6) {
   return new Promise((resolve) => {
     let settled = false;
     const timerRef = { id: void 0 };
@@ -44973,7 +45517,7 @@ function runExternalAgents(bin, args, label, timeoutMs, spawn5) {
     };
     let child;
     try {
-      child = spawn5(bin, args, options);
+      child = spawn6(bin, args, options);
     } catch (err) {
       finish({ code: null, stdout: "", error: `spawn ${bin} failed: ${errMessage4(err)}` });
       return;
@@ -44993,7 +45537,7 @@ function runExternalAgents(bin, args, label, timeoutMs, spawn5) {
   });
 }
 async function pickPanel(input, deps) {
-  const spawn5 = deps?.spawn ?? import_node_child_process10.spawn;
+  const spawn6 = deps?.spawn ?? import_node_child_process10.spawn;
   const { command, prefixArgs } = resolveExternalAgentsCliInvocation(deps?.externalAgentsBin);
   const args = [
     "pick",
@@ -45006,7 +45550,7 @@ async function pickPanel(input, deps) {
     "--exclude-providers",
     input.excludeProvider
   ];
-  const r = await runExternalAgents(command, [...prefixArgs, ...args], "pick", input.timeoutMs, spawn5);
+  const r = await runExternalAgents(command, [...prefixArgs, ...args], "pick", input.timeoutMs, spawn6);
   if (r.error) return { ok: false, error: r.error };
   if (r.code === 3) return { ok: true, agents: [] };
   if (r.code !== 0) return { ok: false, error: `external-agents pick exited ${r.code}` };
@@ -45040,10 +45584,10 @@ function parseDispatch(agentId, stdout, exitCode) {
   return { ok: true, text: parsed.text, usage };
 }
 async function dispatchHead(agentId, prompt, timeoutMs, deps) {
-  const spawn5 = deps?.spawn ?? import_node_child_process10.spawn;
+  const spawn6 = deps?.spawn ?? import_node_child_process10.spawn;
   const { command, prefixArgs } = resolveExternalAgentsCliInvocation(deps?.externalAgentsBin);
   const args = ["dispatch", agentId, "--json", prompt];
-  const r = await runExternalAgents(command, [...prefixArgs, ...args], "dispatch", timeoutMs, spawn5);
+  const r = await runExternalAgents(command, [...prefixArgs, ...args], "dispatch", timeoutMs, spawn6);
   if (r.error) return { ok: false, error: r.error };
   return parseDispatch(agentId, r.stdout, r.code);
 }
@@ -50169,37 +50713,271 @@ var StreamableHTTPClientTransport = class {
   }
 };
 
+// ../../node_modules/.pnpm/@modelcontextprotocol+sdk@1.30.0_zod@4.4.3/node_modules/@modelcontextprotocol/sdk/dist/esm/client/stdio.js
+var import_cross_spawn = __toESM(require_cross_spawn(), 1);
+var import_node_process = __toESM(require("node:process"), 1);
+var import_node_stream = require("node:stream");
+
+// ../../node_modules/.pnpm/@modelcontextprotocol+sdk@1.30.0_zod@4.4.3/node_modules/@modelcontextprotocol/sdk/dist/esm/shared/stdio.js
+var STDIO_DEFAULT_MAX_BUFFER_SIZE = 10 * 1024 * 1024;
+var ReadBuffer = class {
+  constructor(options) {
+    this._maxBufferSize = options?.maxBufferSize ?? STDIO_DEFAULT_MAX_BUFFER_SIZE;
+  }
+  append(chunk) {
+    const newSize = (this._buffer?.length ?? 0) + chunk.length;
+    if (newSize > this._maxBufferSize) {
+      this.clear();
+      throw new Error(`ReadBuffer exceeded maximum size of ${this._maxBufferSize} bytes`);
+    }
+    this._buffer = this._buffer ? Buffer.concat([this._buffer, chunk]) : chunk;
+  }
+  readMessage() {
+    if (!this._buffer) {
+      return null;
+    }
+    const index = this._buffer.indexOf("\n");
+    if (index === -1) {
+      return null;
+    }
+    const line = this._buffer.toString("utf8", 0, index).replace(/\r$/, "");
+    this._buffer = this._buffer.subarray(index + 1);
+    return deserializeMessage(line);
+  }
+  clear() {
+    this._buffer = void 0;
+  }
+};
+function deserializeMessage(line) {
+  return JSONRPCMessageSchema.parse(JSON.parse(line));
+}
+function serializeMessage(message) {
+  return JSON.stringify(message) + "\n";
+}
+
+// ../../node_modules/.pnpm/@modelcontextprotocol+sdk@1.30.0_zod@4.4.3/node_modules/@modelcontextprotocol/sdk/dist/esm/client/stdio.js
+var DEFAULT_INHERITED_ENV_VARS = import_node_process.default.platform === "win32" ? [
+  "APPDATA",
+  "HOMEDRIVE",
+  "HOMEPATH",
+  "LOCALAPPDATA",
+  "PATH",
+  "PROCESSOR_ARCHITECTURE",
+  "SYSTEMDRIVE",
+  "SYSTEMROOT",
+  "TEMP",
+  "USERNAME",
+  "USERPROFILE",
+  "PROGRAMFILES"
+] : (
+  /* list inspired by the default env inheritance of sudo */
+  ["HOME", "LOGNAME", "PATH", "SHELL", "TERM", "USER"]
+);
+function getDefaultEnvironment() {
+  const env = {};
+  for (const key of DEFAULT_INHERITED_ENV_VARS) {
+    const value = import_node_process.default.env[key];
+    if (value === void 0) {
+      continue;
+    }
+    if (value.startsWith("()")) {
+      continue;
+    }
+    env[key] = value;
+  }
+  return env;
+}
+var StdioClientTransport = class {
+  constructor(server) {
+    this._stderrStream = null;
+    this._serverParams = server;
+    this._readBuffer = new ReadBuffer({ maxBufferSize: server.maxBufferSize });
+    if (server.stderr === "pipe" || server.stderr === "overlapped") {
+      this._stderrStream = new import_node_stream.PassThrough();
+    }
+  }
+  /**
+   * Starts the server process and prepares to communicate with it.
+   */
+  async start() {
+    if (this._process) {
+      throw new Error("StdioClientTransport already started! If using Client class, note that connect() calls start() automatically.");
+    }
+    return new Promise((resolve, reject) => {
+      this._process = (0, import_cross_spawn.default)(this._serverParams.command, this._serverParams.args ?? [], {
+        // merge default env with server env because mcp server needs some env vars
+        env: {
+          ...getDefaultEnvironment(),
+          ...this._serverParams.env
+        },
+        stdio: ["pipe", "pipe", this._serverParams.stderr ?? "inherit"],
+        shell: false,
+        windowsHide: import_node_process.default.platform === "win32",
+        cwd: this._serverParams.cwd
+      });
+      this._process.on("error", (error51) => {
+        reject(error51);
+        this.onerror?.(error51);
+      });
+      this._process.on("spawn", () => {
+        resolve();
+      });
+      this._process.on("close", (_code) => {
+        this._process = void 0;
+        this.onclose?.();
+      });
+      this._process.stdin?.on("error", (error51) => {
+        this.onerror?.(error51);
+      });
+      this._process.stdout?.on("data", (chunk) => {
+        try {
+          this._readBuffer.append(chunk);
+          this.processReadBuffer();
+        } catch (error51) {
+          this.onerror?.(error51);
+          this.close().catch(() => {
+          });
+        }
+      });
+      this._process.stdout?.on("error", (error51) => {
+        this.onerror?.(error51);
+      });
+      if (this._stderrStream && this._process.stderr) {
+        this._process.stderr.pipe(this._stderrStream);
+      }
+    });
+  }
+  /**
+   * The stderr stream of the child process, if `StdioServerParameters.stderr` was set to "pipe" or "overlapped".
+   *
+   * If stderr piping was requested, a PassThrough stream is returned _immediately_, allowing callers to
+   * attach listeners before the start method is invoked. This prevents loss of any early
+   * error output emitted by the child process.
+   */
+  get stderr() {
+    if (this._stderrStream) {
+      return this._stderrStream;
+    }
+    return this._process?.stderr ?? null;
+  }
+  /**
+   * The child process pid spawned by this transport.
+   *
+   * This is only available after the transport has been started.
+   */
+  get pid() {
+    return this._process?.pid ?? null;
+  }
+  processReadBuffer() {
+    while (true) {
+      try {
+        const message = this._readBuffer.readMessage();
+        if (message === null) {
+          break;
+        }
+        this.onmessage?.(message);
+      } catch (error51) {
+        this.onerror?.(error51);
+      }
+    }
+  }
+  async close() {
+    if (this._process) {
+      const processToClose = this._process;
+      this._process = void 0;
+      const closePromise = new Promise((resolve) => {
+        processToClose.once("close", () => {
+          resolve();
+        });
+      });
+      try {
+        processToClose.stdin?.end();
+      } catch {
+      }
+      await Promise.race([closePromise, new Promise((resolve) => setTimeout(resolve, 2e3).unref())]);
+      if (processToClose.exitCode === null) {
+        try {
+          processToClose.kill("SIGTERM");
+        } catch {
+        }
+        await Promise.race([closePromise, new Promise((resolve) => setTimeout(resolve, 2e3).unref())]);
+      }
+      if (processToClose.exitCode === null) {
+        try {
+          processToClose.kill("SIGKILL");
+        } catch {
+        }
+      }
+    }
+    this._readBuffer.clear();
+  }
+  send(message) {
+    return new Promise((resolve) => {
+      if (!this._process?.stdin) {
+        throw new Error("Not connected");
+      }
+      const json2 = serializeMessage(message);
+      if (this._process.stdin.write(json2)) {
+        resolve();
+      } else {
+        this._process.stdin.once("drain", resolve);
+      }
+    });
+  }
+};
+
 // src/delivery/invoke.ts
 async function invokeCapability(server, toolName, payload) {
-  const headers = Object.fromEntries(
-    Object.entries(server.headers ?? {}).map(([key, value]) => {
-      const expandedValue = value.replace(/\$\{([A-Za-z_][A-Za-z0-9_]*)\}/g, (_match, varName) => {
-        const envVal = process.env[varName];
-        if (envVal === void 0) {
-          throw new InvokeUnexpandedHeaderError(key, varName);
-        }
-        return envVal;
-      });
-      return [key, expandedValue];
-    })
-  );
   const client = new Client({ name: "mrrlin-delivery-invoker", version: "1.0.0" });
   try {
     let result;
+    const target = server.transport === "stdio" ? server.command : server.url;
     try {
-      const transport = new StreamableHTTPClientTransport(new URL(server.url), {
-        requestInit: {
-          headers,
-          signal: AbortSignal.timeout(3e4)
+      if (server.transport === "stdio") {
+        const env = {};
+        for (const [key, value] of Object.entries(server.env ?? {})) {
+          const expandedValue = value.replace(/\$\{([A-Za-z_][A-Za-z0-9_]*)\}/g, (_match, varName) => {
+            const envVal = process.env[varName];
+            if (envVal === void 0) {
+              throw new InvokeUnexpandedHeaderError(key, varName);
+            }
+            return envVal;
+          });
+          env[key] = expandedValue;
         }
-      });
-      await client.connect(transport);
+        const transport = new StdioClientTransport({
+          command: server.command,
+          args: server.args ?? [],
+          env
+        });
+        await client.connect(transport);
+      } else {
+        const headers = Object.fromEntries(
+          Object.entries(server.headers ?? {}).map(([key, value]) => {
+            const expandedValue = value.replace(/\$\{([A-Za-z_][A-Za-z0-9_]*)\}/g, (_match, varName) => {
+              const envVal = process.env[varName];
+              if (envVal === void 0) {
+                throw new InvokeUnexpandedHeaderError(key, varName);
+              }
+              return envVal;
+            });
+            return [key, expandedValue];
+          })
+        );
+        const transport = new StreamableHTTPClientTransport(new URL(server.url), {
+          requestInit: {
+            headers,
+            signal: AbortSignal.timeout(3e4)
+          }
+        });
+        await client.connect(transport);
+      }
       result = await client.callTool({
         name: toolName,
         arguments: isRecord(payload) ? payload : void 0
       });
     } catch (error51) {
-      throw classifyInvokeError(error51, server.url, toolName);
+      throw classifyInvokeError(error51, target, toolName);
     }
     if (result.isError) {
       throw new Error(`invokeCapability: tool "${toolName}" reported isError -- ${extractFirstText(result.content)}`);
@@ -50241,6 +51019,9 @@ var InvokeUnexpandedHeaderError = class extends Error {
   }
 };
 function classifyInvokeError(error51, url2, toolName) {
+  if (error51 instanceof InvokeUnexpandedHeaderError) {
+    return error51;
+  }
   if (error51 instanceof StreamableHTTPError) {
     if (error51.code === 401 || error51.code === 403) return new InvokeAuthError(url2, error51);
     return new InvokeUnreachableError(url2, error51);
@@ -50296,9 +51077,78 @@ function findFirstMatch(value, pattern) {
 var gitPullRequestStateResponseSchema = external_exports.object({
   merged: external_exports.boolean()
 });
+function parsePullRequestUrl(url2) {
+  try {
+    const parsed = new URL(url2);
+    const parts = parsed.pathname.split("/").filter(Boolean);
+    const pullIdx = parts.indexOf("pull");
+    if (pullIdx >= 2 && pullIdx + 1 < parts.length) {
+      const owner = parts[pullIdx - 2];
+      const repo = parts[pullIdx - 1];
+      const pullPart = parts[pullIdx + 1];
+      const pullNumber = pullPart ? parseInt(pullPart, 10) : NaN;
+      if (owner && repo && !Number.isNaN(pullNumber)) {
+        return { owner, repo, pullNumber };
+      }
+    }
+  } catch {
+  }
+  return {};
+}
 async function deliverToGit(server, toolName, payload) {
-  const { operation: _operation, ...args } = payload;
-  return invokeCapability(server, toolName, args);
+  const defaultRoute = server.id ? getDefaultCapabilityRouteForServer(server.id) : null;
+  const isDefaultGitHubRoute = defaultRoute?.capability === "repo_host";
+  if (payload.operation === "pull_request") {
+    const { operation: _operation, ...args } = payload;
+    if (isDefaultGitHubRoute && toolName === defaultRoute.operations.pull_request) {
+      let owner = args.owner;
+      let repo = args.repo;
+      const repository = args.repository;
+      if ((!owner || !repo) && repository && repository.includes("/")) {
+        const parts = repository.split("/");
+        owner = parts[0];
+        repo = parts[1];
+      }
+      const head = args.head ?? payload.headBranch;
+      const base = args.base ?? payload.baseBranch ?? "main";
+      const title = args.title ?? payload.title ?? "";
+      const body = args.body ?? payload.body ?? "";
+      const adaptedArgs = {
+        head,
+        base,
+        title,
+        body
+      };
+      if (owner) adaptedArgs.owner = owner;
+      if (repo) adaptedArgs.repo = repo;
+      if (typeof payload.draft === "boolean") {
+        adaptedArgs.draft = payload.draft;
+      }
+      return invokeCapability(server, toolName, adaptedArgs);
+    }
+    return invokeCapability(server, toolName, args);
+  }
+  if (isDefaultGitHubRoute && toolName === defaultRoute.operations.pull_request_state) {
+    const { operation: _operation, ...args } = payload;
+    const urlParts = parsePullRequestUrl(payload.pullRequestUrl);
+    let owner = args.owner ?? urlParts.owner;
+    let repo = args.repo ?? urlParts.repo;
+    const repository = args.repository;
+    if ((!owner || !repo) && repository && repository.includes("/")) {
+      const parts = repository.split("/");
+      owner = parts[0];
+      repo = parts[1];
+    }
+    const pullNumber = args.pull_number ?? args.pullNumber ?? urlParts.pullNumber;
+    const adaptedArgs = {};
+    if (owner) adaptedArgs.owner = owner;
+    if (repo) adaptedArgs.repo = repo;
+    if (pullNumber !== void 0) {
+      adaptedArgs.pull_number = pullNumber;
+    }
+    return invokeCapability(server, toolName, adaptedArgs);
+  }
+  return invokeCapability(server, toolName, { pullRequestUrl: payload.pullRequestUrl });
 }
 
 // src/mcp-tool-error.ts
@@ -50379,6 +51229,16 @@ async function deliverToArtifacts(client, projectSlug, payload, bareFetch) {
 // src/delivery/send.ts
 async function deliverToSend(server, toolName, payload) {
   const { operation: _operation, ...args } = payload;
+  const defaultRoute = server.id ? getDefaultCapabilityRouteForServer(server.id) : null;
+  const isDefaultSlackRoute = defaultRoute?.capability === "send";
+  if (payload.operation === "dispatch" && isDefaultSlackRoute && toolName === defaultRoute.operations.dispatch) {
+    const channelId = args.channel_id ?? args.destination ?? args.channel ?? args.to;
+    const text = args.text ?? args.body ?? args.message ?? args.content;
+    const adaptedArgs = {};
+    if (channelId !== void 0) adaptedArgs.channel_id = channelId;
+    if (text !== void 0) adaptedArgs.text = text;
+    return invokeCapability(server, toolName, adaptedArgs);
+  }
   return invokeCapability(server, toolName, args);
 }
 
@@ -55466,7 +56326,7 @@ var import_node_fs10 = require("node:fs");
 var import_node_os11 = __toESM(require("node:os"), 1);
 var import_node_path18 = __toESM(require("node:path"), 1);
 var import_semver2 = __toESM(require_semver2(), 1);
-var toml2 = __toESM(require_toml(), 1);
+var toml3 = __toESM(require_toml(), 1);
 
 // src/agent-version.ts
 var import_node_child_process12 = require("node:child_process");
@@ -55649,7 +56509,7 @@ async function verifyProviderReadiness(provider, run3, opts = {}) {
     const configPath = import_node_path18.default.join(resolveCodexHome2(opts), "config.toml");
     try {
       const raw = await (0, import_promises10.readFile)(configPath, "utf8");
-      const parsed = toml2.parse(raw);
+      const parsed = toml3.parse(raw);
       checks.mcpReachable = isExternalAgentsWrapper(parsed.mcp_servers?.["external-agents"]);
     } catch {
     }
@@ -56831,7 +57691,7 @@ Do NOT derail the current task - if the operator has an in-flight question, answ
 }
 
 // src/_generated/version.ts
-var PKG_VERSION = "0.4.88";
+var PKG_VERSION = "0.4.90";
 
 // src/api-base-url-migrate.ts
 var import_node_fs13 = __toESM(require("node:fs"), 1);
@@ -56889,9 +57749,6 @@ function renderEcosystemConfig(opts) {
     const apiBaseUrl = legacyOpts.apiBaseUrl ? retargetRetiredApiBaseUrl(legacyOpts.apiBaseUrl).baseUrl : void 0;
     if (apiBaseUrl && !isProductionApiBaseUrl(apiBaseUrl)) {
       env.MRRLIN_API_BASE_URL = apiBaseUrl;
-      if (legacyOpts.apiAllowRemote && !isStagingApiBaseUrl(apiBaseUrl) && !isLoopbackUrl(apiBaseUrl)) {
-        env.MRRLIN_API_ALLOW_REMOTE = "1";
-      }
     }
     envLines = Object.entries(env).map(([k, v]) => `      ${k}: ${JSON.stringify(v)},`).join("\n");
   }
@@ -59939,35 +60796,7 @@ var EXECUTOR_BASE_INSTRUCTIONS = [
   "You MUST verify every delegated result against the actual files and tests before it lands \u2014",
   "pool models are lower-reliability and a wrong delegated edit is YOUR responsibility; never",
   "commit unverified delegated output. If dispatch fails or the pool is unavailable, do the",
-  "work yourself \u2014 never block the run on the pool.",
-  "",
-  // Auto-deploy design Part C (2026-08-04), C4: the workflow-resolution procedure. Only relevant
-  // when the deploy gate has parked this run on a missing/stale workflow id for one environment —
-  // most turns will never need this. This choice becomes durable project state (record_deploy_workflow
-  // writes project_deploy_workflow), not a per-run decision, so resolve it AT MOST ONCE per
-  // project+environment, only when actually needed (lazy, per env — do not speculatively resolve
-  // prod when only dev was asked for).
-  "If your context shows the deploy gate parked on a missing or stale workflow id for an",
-  "environment, resolve it once with this fail-closed procedure \u2014 do this AT MOST ONCE per",
-  "project+environment; it becomes durable project state, not a per-run choice:",
-  '1. Call `list_github_workflows` and keep only candidates with state: "active". A workflow\'s',
-  "   name is NOT evidence it deploys anything \u2014 e.g. this repo also has `publish` (ships an npm",
-  "   package) and `bootstrap-changelog`; picking by name resemblance can dispatch the wrong thing.",
-  "2. For each active candidate, read its file at `<worktree>/<path>` \u2014 the list API's `path` is",
-  "   already repo-root-relative (e.g. `.github/workflows/deploy.yml`), so do NOT prefix it again",
-  "   with `.github/workflows/`. Require an explicit `workflow_dispatch` trigger \u2014 a workflow you",
-  "   cannot confirm is dispatchable this way is not a candidate.",
-  "3. Require positive evidence from the workflow's own steps that it deploys THIS project \u2014 not",
-  "   just a plausible-sounding name.",
-  "4. Exactly one confirmed candidate \u2192 call `record_deploy_workflow` with that workflowId (state",
-  '   defaults to "resolved") and a one-sentence reason. The server captures its own snapshot of',
-  "   the live active-workflow set at write time \u2014 you do not need to compute or pass one; hand-",
-  "   assembling it yourself would risk a format mismatch against what the deploy gate recomputes",
-  "   later, silently disabling the drift check. Append a `checkpoint` artifact with the same pick",
-  "   + reason so the decision stays auditable.",
-  "5. Zero confirmed candidates, or more than one \u2192 call `record_deploy_workflow` with",
-  '   workflowId: null and state: "ambiguous", and file a clarifying question through the normal',
-  "   inbox question path. Do NOT guess between multiple plausible candidates."
+  "work yourself \u2014 never block the run on the pool."
 ].join("\n");
 function artifactKindForEvent(event) {
   switch (event.type) {
@@ -60012,21 +60841,21 @@ function isBlastRadiusFloorPath(path28) {
 }
 var execFileAsync2 = (0, import_node_util2.promisify)(import_node_child_process18.execFile);
 async function defaultListRunDiffPaths(opts) {
-  const parse7 = (stdout) => stdout.split("\n").map((line) => line.trim()).filter((line) => line.length > 0);
+  const parse8 = (stdout) => stdout.split("\n").map((line) => line.trim()).filter((line) => line.length > 0);
   try {
     const { stdout } = await execFileAsync2(
       "git",
       ["-C", opts.worktreePath, "diff", "--name-only", `origin/${opts.defaultBranch}...HEAD`],
       { timeout: 3e4 }
     );
-    return parse7(stdout);
+    return parse8(stdout);
   } catch {
     const { stdout } = await execFileAsync2(
       "git",
       ["-C", opts.worktreePath, "diff", "--name-only", `${opts.defaultBranch}...HEAD`],
       { timeout: 3e4 }
     );
-    return parse7(stdout);
+    return parse8(stdout);
   }
 }
 var BLAST_RADIUS_FLOOR_REASON = "migration or database schema files changed";
@@ -60088,23 +60917,6 @@ async function gatherContext(client, projectSlug, task, openRunId) {
     autonomyEvents
   };
 }
-async function deployWorkflowReverifyNotice(client, projectSlug) {
-  const envs = ["dev", "prod"];
-  const flagged = [];
-  const clientWithDeploy = client;
-  for (const env of envs) {
-    try {
-      const row = await clientWithDeploy.getProjectDeployWorkflow?.(projectSlug, env);
-      if (row?.reverifyRequested) flagged.push(env);
-    } catch {
-    }
-  }
-  if (flagged.length === 0) return "";
-  return `
-
-## Deploy workflow re-verification needed
-The GitHub Actions workflow set changed since the deploy workflow was last confirmed for: ${flagged.join(", ")}. Re-run the workflow-resolution procedure (list_github_workflows -> confirm -> record_deploy_workflow) for ${flagged.length === 1 ? "this environment" : "these environments"} if you have a worktree this turn \u2014 this is a hint, not a blocker, so it is fine to skip if unrelated work is more urgent this turn.`;
-}
 async function assertRunCompletionReady(deps, projectSlug, taskId, runId, allowedStatuses) {
   const task = await deps.client.getTask(projectSlug, taskId);
   if (!allowedStatuses.has(task.status)) {
@@ -60436,7 +61248,6 @@ async function driveRun(deps, projectSlug, runId) {
       }
     } : context
   );
-  bundle += await deployWorkflowReverifyNotice(deps.client, projectSlug);
   const runTelemetry = {
     promptBytes: 0,
     turnCount: 0,
@@ -60865,6 +61676,7 @@ Continue executing task ${task.id}. Make the next concrete increment of progress
         runId,
         payload: {
           operation: "pull_request",
+          repository: expectedRepoFullName,
           headBranch,
           title: `[mrrlin] ${readiness.task.title}`,
           body: buildPullRequestBody({ runId, taskId: readiness.task.id, producedUrls }),
@@ -61377,23 +62189,16 @@ async function driveNonCodeRun(deps, projectSlug, runId, leaseId, task, domain2)
       return;
     }
   }
-  let evidenceValue = pageId;
-  if (task.blockedBy.length > 0) {
-    for (const blockerId of task.blockedBy) {
-      const runs = (await deps.client.listExecutionRuns(projectSlug, { taskId: blockerId })).sort(
-        (a, b) => (b.createdAt ?? "").localeCompare(a.createdAt ?? "")
-      );
-      if (runs[0]?.prodEnvUrl) {
-        evidenceValue = runs[0].prodEnvUrl;
-        break;
-      }
-    }
-  }
-  const receipt = parsedResult.outcome === "completed" && task.declaredOutcome != null ? buildReceipt({
+  const receipt = parsedResult.outcome === "completed" && task.declaredOutcome != null ? task.declaredOutcome.requires.includes("document") ? buildReceipt({
     declaredOutcome: task.declaredOutcome,
-    evidenceType: "url",
-    evidenceValue,
-    coveredKinds: ["page"]
+    evidenceType: "human_tap",
+    evidenceValue: pageId,
+    coveredKinds: ["document"]
+  }) : buildReceipt({
+    declaredOutcome: task.declaredOutcome,
+    evidenceType: "human_tap",
+    evidenceValue: pageId,
+    coveredKinds: []
   }) : void 0;
   try {
     const settled = await deps.client.settleExecutionRunOutcome(projectSlug, runId, {
@@ -67489,7 +68294,7 @@ function collectedTurnTimeoutMs() {
   return COLLECTED_TURN_TIMEOUT_DEFAULT_MS;
 }
 var DEFAULT_IMAGE_ONLY_PROMPT = "Look at the attached image.";
-var VERIFICATION_BASE_INSTRUCTIONS = [
+var _VERIFICATION_BASE_INSTRUCTIONS = [
   "You are a deployment verification agent. Make ONLY read-only HTTP requests to the single",
   "environment URL given in the prompt to confirm a deploy succeeded. Do not read or write any",
   "files, do not use repository or credential access, do not contact any other host, and do not",
@@ -69232,11 +70037,6 @@ async function startDirectorBridge() {
   } catch {
   }
   const apiBaseUrl = readDirectorBridgeApiBaseUrl();
-  if (!isRemoteApiAllowed(apiBaseUrl)) {
-    throw new Error(
-      `Refusing to run the director-bridge execution consumer against untrusted remote API URL ${apiBaseUrl}. Set MRRLIN_API_ALLOW_REMOTE=1 for a custom remote, or set MRRLIN_API_BASE_URL=https://api-staging.mrrlin.com for the official staging API.`
-    );
-  }
   const envToken = process.env.MRRLIN_TOKEN?.trim() || void 0;
   const agentSecret = readAgentSecret();
   let tokenProvider = null;
@@ -70756,48 +71556,9 @@ var Server = class extends Protocol {
 };
 
 // ../../node_modules/.pnpm/@modelcontextprotocol+sdk@1.30.0_zod@4.4.3/node_modules/@modelcontextprotocol/sdk/dist/esm/server/stdio.js
-var import_node_process = __toESM(require("node:process"), 1);
-
-// ../../node_modules/.pnpm/@modelcontextprotocol+sdk@1.30.0_zod@4.4.3/node_modules/@modelcontextprotocol/sdk/dist/esm/shared/stdio.js
-var STDIO_DEFAULT_MAX_BUFFER_SIZE = 10 * 1024 * 1024;
-var ReadBuffer = class {
-  constructor(options) {
-    this._maxBufferSize = options?.maxBufferSize ?? STDIO_DEFAULT_MAX_BUFFER_SIZE;
-  }
-  append(chunk) {
-    const newSize = (this._buffer?.length ?? 0) + chunk.length;
-    if (newSize > this._maxBufferSize) {
-      this.clear();
-      throw new Error(`ReadBuffer exceeded maximum size of ${this._maxBufferSize} bytes`);
-    }
-    this._buffer = this._buffer ? Buffer.concat([this._buffer, chunk]) : chunk;
-  }
-  readMessage() {
-    if (!this._buffer) {
-      return null;
-    }
-    const index = this._buffer.indexOf("\n");
-    if (index === -1) {
-      return null;
-    }
-    const line = this._buffer.toString("utf8", 0, index).replace(/\r$/, "");
-    this._buffer = this._buffer.subarray(index + 1);
-    return deserializeMessage(line);
-  }
-  clear() {
-    this._buffer = void 0;
-  }
-};
-function deserializeMessage(line) {
-  return JSONRPCMessageSchema.parse(JSON.parse(line));
-}
-function serializeMessage(message) {
-  return JSON.stringify(message) + "\n";
-}
-
-// ../../node_modules/.pnpm/@modelcontextprotocol+sdk@1.30.0_zod@4.4.3/node_modules/@modelcontextprotocol/sdk/dist/esm/server/stdio.js
+var import_node_process2 = __toESM(require("node:process"), 1);
 var StdioServerTransport = class {
-  constructor(_stdin = import_node_process.default.stdin, _stdout = import_node_process.default.stdout, options) {
+  constructor(_stdin = import_node_process2.default.stdin, _stdout = import_node_process2.default.stdout, options) {
     this._stdin = _stdin;
     this._stdout = _stdout;
     this._started = false;
@@ -70873,16 +71634,10 @@ function redactUrlForLog(value) {
 }
 function resolveServerOptions(input = {}) {
   const apiBaseUrl = readConfiguredApiBaseUrl(input.apiBaseUrl);
-  const remoteAllowed = isRemoteApiAllowed(apiBaseUrl) || input.allowRemoteApi === true;
-  if (!remoteAllowed) {
-    throw new Error(
-      `Refusing to start MCP server against non-loopback URL ${apiBaseUrl}. Set MRRLIN_API_ALLOW_REMOTE=1 for a custom remote, or set MRRLIN_API_BASE_URL=https://api-staging.mrrlin.com for the official staging API.`
-    );
-  }
   return {
     apiBaseUrl,
     fetch: input.fetch,
-    remoteAllowed,
+    remoteAllowed: true,
     // Deliberately do NOT bake process.env.MRRLIN_TOKEN in here: withAuth (tools.ts) resolves
     // env + the bridge-persisted operator-token file lazily per request, so long-lived MCP
     // processes pick up token rotation. An explicit input.token still wins when provided.
@@ -71004,7 +71759,7 @@ async function startStdioServer(options = {}) {
     effective = {
       ...options,
       apiBaseUrl: baseUrl,
-      allowRemoteApi: source === "staging-env" || source === "staging-autodetect" || source === "retired-retarget"
+      allowRemoteApi: true
     };
     process.stderr.write(`[mrrlin-mcp] API resolved: ${redactUrlForLog(baseUrl)} (source=${source})
 `);
@@ -71346,9 +72101,7 @@ var CURATED_KEYS = [
   "CODEX_HOME",
   "CLAUDE_CONFIG_DIR",
   "MRRLIN_DIRECTOR_BRIDGE_LOG",
-  "MRRLIN_API_BASE_URL",
-  "MRRLIN_API_ALLOW_REMOTE",
-  "MRRLIN_STAGING"
+  "MRRLIN_API_BASE_URL"
 ];
 function mergeConfigEnv(depsEnv, carriedEnv) {
   const isWin = process.platform === "win32";
@@ -71406,6 +72159,7 @@ function mergeConfigEnv(depsEnv, carriedEnv) {
 function deriveMergedApiRouting(mergedEnv, invokingBridgeUrl) {
   const result = /* @__PURE__ */ Object.create(null);
   for (const k of Object.keys(mergedEnv)) {
+    if (k === "MRRLIN_STAGING" || k === "MRRLIN_API_ALLOW_REMOTE") continue;
     const v = mergedEnv[k];
     if (v !== void 0) {
       result[k] = v;
@@ -71420,9 +72174,7 @@ function deriveMergedApiRouting(mergedEnv, invokingBridgeUrl) {
       result["MRRLIN_API_BASE_URL"] = retargeted;
     }
   } else {
-    if (result["MRRLIN_STAGING"] === "1") {
-      result["MRRLIN_API_BASE_URL"] = STAGING_API_BASE_URL;
-    } else if (bridgeUrlImpliesStaging(invokingBridgeUrl)) {
+    if (mergedEnv["MRRLIN_STAGING"] === "1" || bridgeUrlImpliesStaging(invokingBridgeUrl)) {
       result["MRRLIN_API_BASE_URL"] = STAGING_API_BASE_URL;
     }
   }
@@ -71634,7 +72386,7 @@ function uninstallService(deps) {
 var import_promises16 = __toESM(require("node:fs/promises"), 1);
 var import_node_os19 = __toESM(require("node:os"), 1);
 var import_node_path39 = __toESM(require("node:path"), 1);
-var toml4 = __toESM(require_toml(), 1);
+var toml5 = __toESM(require_toml(), 1);
 function resolveCodexHome3(options) {
   if (options.codexHome) return options.codexHome;
   if (process.env.CODEX_HOME) return process.env.CODEX_HOME;
@@ -71660,7 +72412,7 @@ async function uninstallCodex(options = {}) {
   const existing = await import_promises16.default.readFile(realPath, "utf8");
   let parsed = null;
   try {
-    parsed = toml4.parse(existing);
+    parsed = toml5.parse(existing);
   } catch (error51) {
     const detail = error51 instanceof Error ? error51.message : String(error51);
     const err = {
@@ -71860,11 +72612,11 @@ var HELP_TEXT = `mrrlin-mcp - Mrrlin Phase 1 MCP server CLI
 
 Usage:
   mrrlin-mcp serve              Run the stdio MCP server. Honors
-                                MRRLIN_API_BASE_URL (default http://127.0.0.1:8787)
-                                and MRRLIN_TOKEN. Non-loopback API URLs require
-                                MRRLIN_API_ALLOW_REMOTE=1 for a custom remote. Use
-                                MRRLIN_API_BASE_URL=https://api-staging.mrrlin.com
-                                to target the known staging API.
+                                MRRLIN_API_BASE_URL (default
+                                https://api.mrrlin.com) and MRRLIN_TOKEN.
+                                Use MRRLIN_API_BASE_URL=https://api-staging.mrrlin.com
+                                to target the known staging API, or http://127.0.0.1:8787
+                                for local development.
 
   mrrlin-mcp install-browser    Idempotently install the dedicated, pinned
                                 Chromium into ~/.mrrlin/browser/browsers (its own
@@ -71901,15 +72653,9 @@ Usage:
                                 inline env table so \`serve\` boots even when the
                                 local 127.0.0.1:8787 is not running. Setup guide:
                                   MRRLIN_API_BASE_URL=https://api-staging.mrrlin.com                                     mrrlin-mcp configure bridge
-                                is the canonical staging path. For a custom remote,
-                                pass BOTH the URL AND the allow gate:
-                                  MRRLIN_API_BASE_URL=https://... \\
-                                    MRRLIN_API_ALLOW_REMOTE=1 mrrlin-mcp configure bridge
-                                Without an allow gate, \`serve\` still refuses any
-                                non-loopback URL (see \`mrrlin-mcp serve\` above).
+                                is the canonical staging path.
                                 An explicit URL is the only routing selector at bake
-                                time. Production needs no routing env; a custom
-                                remote also needs MRRLIN_API_ALLOW_REMOTE=1.
+                                time. Production is the default and needs no routing env.
                                 Re-running BARE (no env vars) over a block you
                                 already pinned to staging/a remote target is safe:
                                 it keeps your env verbatim (reported as
@@ -71941,11 +72687,9 @@ Usage:
                                   user turn text from the log when logging is enabled)
                                 It also hosts the execution-run consumer (advances
                                 pending runs, read-only). Consumer env:
-                                - MRRLIN_API_BASE_URL (default http://127.0.0.1:8787;
-                                  non-loopback requires MRRLIN_API_ALLOW_REMOTE=1,
-                                  or an explicit staging API URL)
-                                - MRRLIN_API_BASE_URL=https://api-staging.mrrlin.com
-                                  (known staging API)
+                                - MRRLIN_API_BASE_URL (default https://api.mrrlin.com;
+                                  set to https://api-staging.mrrlin.com for staging,
+                                  or http://127.0.0.1:8787 for local development)
                                 - MRRLIN_TOKEN (service-principal auth to the API;
                                   if unset, chat still works but claim-sweep /
                                   autonomous execution stays disabled)