@mrrlin-dev/mcp 0.4.92 → 0.4.95

package/dist/bin.cjs

@@ -4230,8 +4230,8 @@ var require_resolve = __commonJS({
       }
       return count2;
     }
-    function getFullPath(resolver, id = "", normalize) {
-      if (normalize !== false)
+    function getFullPath(resolver, id = "", normalize2) {
+      if (normalize2 !== false)
         id = normalizeId(id);
       const p = resolver.parse(id);
       return _getFullPath(resolver, p);
@@ -5257,8 +5257,8 @@ var require_utils = __commonJS({
       }
       return ind;
     }
-    function removeDotSegments(path28) {
-      let input = path28;
+    function removeDotSegments(path29) {
+      let input = path29;
       const output3 = [];
       let nextSlash = -1;
       let len = 0;
@@ -5667,8 +5667,8 @@ var require_schemes = __commonJS({
       }
       if (wsComponent.resourceName) {
         const queryIndex = wsComponent.resourceName.indexOf("?");
-        const path28 = queryIndex === -1 ? wsComponent.resourceName : wsComponent.resourceName.slice(0, queryIndex);
-        wsComponent.path = path28 && path28 !== "/" ? path28 : void 0;
+        const path29 = queryIndex === -1 ? wsComponent.resourceName : wsComponent.resourceName.slice(0, queryIndex);
+        wsComponent.path = path29 && path29 !== "/" ? path29 : void 0;
         wsComponent.query = queryIndex === -1 ? void 0 : wsComponent.resourceName.slice(queryIndex + 1);
         wsComponent.resourceName = void 0;
       }
@@ -5826,7 +5826,7 @@ var require_fast_uri = __commonJS({
       }
       return decodedScheme;
     }
-    function normalize(uri, options) {
+    function normalize2(uri, options) {
       if (typeof uri === "string") {
         uri = /** @type {T} */
         normalizeString(uri, options);
@@ -6204,7 +6204,7 @@ var require_fast_uri = __commonJS({
     }
     var fastUri = {
       SCHEMES,
-      normalize,
+      normalize: normalize2,
       resolve,
       resolveComponent,
       equal,
@@ -9304,7 +9304,7 @@ var require_windows = __commonJS({
     module2.exports = isexe;
     isexe.sync = sync;
     var fs14 = require("fs");
-    function checkPathExt(path28, options) {
+    function checkPathExt(path29, options) {
       var pathext = options.pathExt !== void 0 ? options.pathExt : process.env.PATHEXT;
       if (!pathext) {
         return true;
@@ -9315,25 +9315,25 @@ var require_windows = __commonJS({
       }
       for (var i = 0; i < pathext.length; i++) {
         var p = pathext[i].toLowerCase();
-        if (p && path28.substr(-p.length).toLowerCase() === p) {
+        if (p && path29.substr(-p.length).toLowerCase() === p) {
           return true;
         }
       }
       return false;
     }
-    function checkStat(stat3, path28, options) {
+    function checkStat(stat3, path29, options) {
       if (!stat3.isSymbolicLink() && !stat3.isFile()) {
         return false;
       }
-      return checkPathExt(path28, options);
+      return checkPathExt(path29, options);
     }
-    function isexe(path28, options, cb) {
-      fs14.stat(path28, function(er, stat3) {
-        cb(er, er ? false : checkStat(stat3, path28, options));
+    function isexe(path29, options, cb) {
+      fs14.stat(path29, function(er, stat3) {
+        cb(er, er ? false : checkStat(stat3, path29, options));
       });
     }
-    function sync(path28, options) {
-      return checkStat(fs14.statSync(path28), path28, options);
+    function sync(path29, options) {
+      return checkStat(fs14.statSync(path29), path29, options);
     }
   }
 });
@@ -9344,13 +9344,13 @@ var require_mode = __commonJS({
     module2.exports = isexe;
     isexe.sync = sync;
     var fs14 = require("fs");
-    function isexe(path28, options, cb) {
-      fs14.stat(path28, function(er, stat3) {
+    function isexe(path29, options, cb) {
+      fs14.stat(path29, function(er, stat3) {
         cb(er, er ? false : checkStat(stat3, options));
       });
     }
-    function sync(path28, options) {
-      return checkStat(fs14.statSync(path28), options);
+    function sync(path29, options) {
+      return checkStat(fs14.statSync(path29), options);
     }
     function checkStat(stat3, options) {
       return stat3.isFile() && checkMode(stat3, options);
@@ -9383,7 +9383,7 @@ var require_isexe = __commonJS({
     }
     module2.exports = isexe;
     isexe.sync = sync;
-    function isexe(path28, options, cb) {
+    function isexe(path29, options, cb) {
       if (typeof options === "function") {
         cb = options;
         options = {};
@@ -9393,7 +9393,7 @@ var require_isexe = __commonJS({
           throw new TypeError("callback not provided");
         }
         return new Promise(function(resolve, reject) {
-          isexe(path28, options || {}, function(er, is) {
+          isexe(path29, options || {}, function(er, is) {
             if (er) {
               reject(er);
             } else {
@@ -9402,7 +9402,7 @@ var require_isexe = __commonJS({
           });
         });
       }
-      core(path28, options || {}, function(er, is) {
+      core(path29, options || {}, function(er, is) {
         if (er) {
           if (er.code === "EACCES" || options && options.ignoreErrors) {
             er = null;
@@ -9412,9 +9412,9 @@ var require_isexe = __commonJS({
         cb(er, is);
       });
     }
-    function sync(path28, options) {
+    function sync(path29, options) {
       try {
-        return core.sync(path28, options || {});
+        return core.sync(path29, options || {});
       } catch (er) {
         if (options && options.ignoreErrors || er.code === "EACCES") {
           return false;
@@ -9430,7 +9430,7 @@ var require_isexe = __commonJS({
 var require_which = __commonJS({
   "../../node_modules/.pnpm/which@2.0.2/node_modules/which/which.js"(exports2, module2) {
     var isWindows = process.platform === "win32" || process.env.OSTYPE === "cygwin" || process.env.OSTYPE === "msys";
-    var path28 = require("path");
+    var path29 = require("path");
     var COLON = isWindows ? ";" : ":";
     var isexe = require_isexe();
     var getNotFoundError = (cmd) => Object.assign(new Error(`not found: ${cmd}`), { code: "ENOENT" });
@@ -9468,7 +9468,7 @@ var require_which = __commonJS({
           return opt.all && found.length ? resolve(found) : reject(getNotFoundError(cmd));
         const ppRaw = pathEnv[i];
         const pathPart = /^".*"$/.test(ppRaw) ? ppRaw.slice(1, -1) : ppRaw;
-        const pCmd = path28.join(pathPart, cmd);
+        const pCmd = path29.join(pathPart, cmd);
         const p = !pathPart && /^\.[\\\/]/.test(cmd) ? cmd.slice(0, 2) + pCmd : pCmd;
         resolve(subStep(p, i, 0));
       });
@@ -9495,7 +9495,7 @@ var require_which = __commonJS({
       for (let i = 0; i < pathEnv.length; i++) {
         const ppRaw = pathEnv[i];
         const pathPart = /^".*"$/.test(ppRaw) ? ppRaw.slice(1, -1) : ppRaw;
-        const pCmd = path28.join(pathPart, cmd);
+        const pCmd = path29.join(pathPart, cmd);
         const p = !pathPart && /^\.[\\\/]/.test(cmd) ? cmd.slice(0, 2) + pCmd : pCmd;
         for (let j = 0; j < pathExt.length; j++) {
           const cur = p + pathExt[j];
@@ -9543,7 +9543,7 @@ var require_path_key = __commonJS({
 var require_resolveCommand = __commonJS({
   "../../node_modules/.pnpm/cross-spawn@7.0.6/node_modules/cross-spawn/lib/util/resolveCommand.js"(exports2, module2) {
     "use strict";
-    var path28 = require("path");
+    var path29 = require("path");
     var which = require_which();
     var getPathKey = require_path_key();
     function resolveCommandAttempt(parsed, withoutPathExt) {
@@ -9561,7 +9561,7 @@ var require_resolveCommand = __commonJS({
       try {
         resolved = which.sync(parsed.command, {
           path: env[getPathKey({ env })],
-          pathExt: withoutPathExt ? path28.delimiter : void 0
+          pathExt: withoutPathExt ? path29.delimiter : void 0
         });
       } catch (e) {
       } finally {
@@ -9570,7 +9570,7 @@ var require_resolveCommand = __commonJS({
         }
       }
       if (resolved) {
-        resolved = path28.resolve(hasCustomCwd ? parsed.options.cwd : "", resolved);
+        resolved = path29.resolve(hasCustomCwd ? parsed.options.cwd : "", resolved);
       }
       return resolved;
     }
@@ -9624,8 +9624,8 @@ var require_shebang_command = __commonJS({
       if (!match) {
         return null;
       }
-      const [path28, argument] = match[0].replace(/#! ?/, "").split(" ");
-      const binary = path28.split("/").pop();
+      const [path29, argument] = match[0].replace(/#! ?/, "").split(" ");
+      const binary = path29.split("/").pop();
       if (binary === "env") {
         return argument;
       }
@@ -9660,7 +9660,7 @@ var require_readShebang = __commonJS({
 var require_parse2 = __commonJS({
   "../../node_modules/.pnpm/cross-spawn@7.0.6/node_modules/cross-spawn/lib/parse.js"(exports2, module2) {
     "use strict";
-    var path28 = require("path");
+    var path29 = require("path");
     var resolveCommand = require_resolveCommand();
     var escape2 = require_escape();
     var readShebang = require_readShebang();
@@ -9685,7 +9685,7 @@ var require_parse2 = __commonJS({
       const needsShell = !isExecutableRegExp.test(commandFile);
       if (parsed.options.forceShell || needsShell) {
         const needsDoubleEscapeMetaChars = isCmdShimRegExp.test(commandFile);
-        parsed.command = path28.normalize(parsed.command);
+        parsed.command = path29.normalize(parsed.command);
         parsed.command = escape2.command(parsed.command);
         parsed.args = parsed.args.map((arg) => escape2.argument(arg, needsDoubleEscapeMetaChars));
         const shellCommand = [parsed.command].concat(parsed.args).join(" ");
@@ -15499,14 +15499,14 @@ var require_polyfills = __commonJS({
       fs14.fstatSync = statFixSync(fs14.fstatSync);
       fs14.lstatSync = statFixSync(fs14.lstatSync);
       if (fs14.chmod && !fs14.lchmod) {
-        fs14.lchmod = function(path28, mode, cb) {
+        fs14.lchmod = function(path29, mode, cb) {
           if (cb) process.nextTick(cb);
         };
         fs14.lchmodSync = function() {
         };
       }
       if (fs14.chown && !fs14.lchown) {
-        fs14.lchown = function(path28, uid, gid, cb) {
+        fs14.lchown = function(path29, uid, gid, cb) {
           if (cb) process.nextTick(cb);
         };
         fs14.lchownSync = function() {
@@ -15573,9 +15573,9 @@ var require_polyfills = __commonJS({
         };
       }(fs14.readSync);
       function patchLchmod(fs15) {
-        fs15.lchmod = function(path28, mode, callback) {
+        fs15.lchmod = function(path29, mode, callback) {
           fs15.open(
-            path28,
+            path29,
             constants2.O_WRONLY | constants2.O_SYMLINK,
             mode,
             function(err, fd) {
@@ -15591,8 +15591,8 @@ var require_polyfills = __commonJS({
             }
           );
         };
-        fs15.lchmodSync = function(path28, mode) {
-          var fd = fs15.openSync(path28, constants2.O_WRONLY | constants2.O_SYMLINK, mode);
+        fs15.lchmodSync = function(path29, mode) {
+          var fd = fs15.openSync(path29, constants2.O_WRONLY | constants2.O_SYMLINK, mode);
           var threw = true;
           var ret;
           try {
@@ -15613,8 +15613,8 @@ var require_polyfills = __commonJS({
       }
       function patchLutimes(fs15) {
         if (constants2.hasOwnProperty("O_SYMLINK") && fs15.futimes) {
-          fs15.lutimes = function(path28, at, mt, cb) {
-            fs15.open(path28, constants2.O_SYMLINK, function(er, fd) {
+          fs15.lutimes = function(path29, at, mt, cb) {
+            fs15.open(path29, constants2.O_SYMLINK, function(er, fd) {
               if (er) {
                 if (cb) cb(er);
                 return;
@@ -15626,8 +15626,8 @@ var require_polyfills = __commonJS({
               });
             });
           };
-          fs15.lutimesSync = function(path28, at, mt) {
-            var fd = fs15.openSync(path28, constants2.O_SYMLINK);
+          fs15.lutimesSync = function(path29, at, mt) {
+            var fd = fs15.openSync(path29, constants2.O_SYMLINK);
             var ret;
             var threw = true;
             try {
@@ -15745,11 +15745,11 @@ var require_legacy_streams = __commonJS({
         ReadStream,
         WriteStream
       };
-      function ReadStream(path28, options) {
-        if (!(this instanceof ReadStream)) return new ReadStream(path28, options);
+      function ReadStream(path29, options) {
+        if (!(this instanceof ReadStream)) return new ReadStream(path29, options);
         Stream.call(this);
         var self = this;
-        this.path = path28;
+        this.path = path29;
         this.fd = null;
         this.readable = true;
         this.paused = false;
@@ -15794,10 +15794,10 @@ var require_legacy_streams = __commonJS({
           self._read();
         });
       }
-      function WriteStream(path28, options) {
-        if (!(this instanceof WriteStream)) return new WriteStream(path28, options);
+      function WriteStream(path29, options) {
+        if (!(this instanceof WriteStream)) return new WriteStream(path29, options);
         Stream.call(this);
-        this.path = path28;
+        this.path = path29;
         this.fd = null;
         this.writable = true;
         this.flags = "w";
@@ -15940,14 +15940,14 @@ var require_graceful_fs = __commonJS({
       fs15.createWriteStream = createWriteStream;
       var fs$readFile = fs15.readFile;
       fs15.readFile = readFile9;
-      function readFile9(path28, options, cb) {
+      function readFile9(path29, options, cb) {
         if (typeof options === "function")
           cb = options, options = null;
-        return go$readFile(path28, options, cb);
-        function go$readFile(path29, options2, cb2, startTime) {
-          return fs$readFile(path29, options2, function(err) {
+        return go$readFile(path29, options, cb);
+        function go$readFile(path30, options2, cb2, startTime) {
+          return fs$readFile(path30, options2, function(err) {
             if (err && (err.code === "EMFILE" || err.code === "ENFILE"))
-              enqueue([go$readFile, [path29, options2, cb2], err, startTime || Date.now(), Date.now()]);
+              enqueue([go$readFile, [path30, options2, cb2], err, startTime || Date.now(), Date.now()]);
             else {
               if (typeof cb2 === "function")
                 cb2.apply(this, arguments);
@@ -15957,14 +15957,14 @@ var require_graceful_fs = __commonJS({
       }
       var fs$writeFile = fs15.writeFile;
       fs15.writeFile = writeFile5;
-      function writeFile5(path28, data, options, cb) {
+      function writeFile5(path29, data, options, cb) {
         if (typeof options === "function")
           cb = options, options = null;
-        return go$writeFile(path28, data, options, cb);
-        function go$writeFile(path29, data2, options2, cb2, startTime) {
-          return fs$writeFile(path29, data2, options2, function(err) {
+        return go$writeFile(path29, data, options, cb);
+        function go$writeFile(path30, data2, options2, cb2, startTime) {
+          return fs$writeFile(path30, data2, options2, function(err) {
             if (err && (err.code === "EMFILE" || err.code === "ENFILE"))
-              enqueue([go$writeFile, [path29, data2, options2, cb2], err, startTime || Date.now(), Date.now()]);
+              enqueue([go$writeFile, [path30, data2, options2, cb2], err, startTime || Date.now(), Date.now()]);
             else {
               if (typeof cb2 === "function")
                 cb2.apply(this, arguments);
@@ -15975,14 +15975,14 @@ var require_graceful_fs = __commonJS({
       var fs$appendFile = fs15.appendFile;
       if (fs$appendFile)
         fs15.appendFile = appendFile2;
-      function appendFile2(path28, data, options, cb) {
+      function appendFile2(path29, data, options, cb) {
         if (typeof options === "function")
           cb = options, options = null;
-        return go$appendFile(path28, data, options, cb);
-        function go$appendFile(path29, data2, options2, cb2, startTime) {
-          return fs$appendFile(path29, data2, options2, function(err) {
+        return go$appendFile(path29, data, options, cb);
+        function go$appendFile(path30, data2, options2, cb2, startTime) {
+          return fs$appendFile(path30, data2, options2, function(err) {
             if (err && (err.code === "EMFILE" || err.code === "ENFILE"))
-              enqueue([go$appendFile, [path29, data2, options2, cb2], err, startTime || Date.now(), Date.now()]);
+              enqueue([go$appendFile, [path30, data2, options2, cb2], err, startTime || Date.now(), Date.now()]);
             else {
               if (typeof cb2 === "function")
                 cb2.apply(this, arguments);
@@ -16013,31 +16013,31 @@ var require_graceful_fs = __commonJS({
       var fs$readdir = fs15.readdir;
       fs15.readdir = readdir5;
       var noReaddirOptionVersions = /^v[0-5]\./;
-      function readdir5(path28, options, cb) {
+      function readdir5(path29, options, cb) {
         if (typeof options === "function")
           cb = options, options = null;
-        var go$readdir = noReaddirOptionVersions.test(process.version) ? function go$readdir2(path29, options2, cb2, startTime) {
-          return fs$readdir(path29, fs$readdirCallback(
-            path29,
+        var go$readdir = noReaddirOptionVersions.test(process.version) ? function go$readdir2(path30, options2, cb2, startTime) {
+          return fs$readdir(path30, fs$readdirCallback(
+            path30,
             options2,
             cb2,
             startTime
           ));
-        } : function go$readdir2(path29, options2, cb2, startTime) {
-          return fs$readdir(path29, options2, fs$readdirCallback(
-            path29,
+        } : function go$readdir2(path30, options2, cb2, startTime) {
+          return fs$readdir(path30, options2, fs$readdirCallback(
+            path30,
             options2,
             cb2,
             startTime
           ));
         };
-        return go$readdir(path28, options, cb);
-        function fs$readdirCallback(path29, options2, cb2, startTime) {
+        return go$readdir(path29, options, cb);
+        function fs$readdirCallback(path30, options2, cb2, startTime) {
           return function(err, files) {
             if (err && (err.code === "EMFILE" || err.code === "ENFILE"))
               enqueue([
                 go$readdir,
-                [path29, options2, cb2],
+                [path30, options2, cb2],
                 err,
                 startTime || Date.now(),
                 Date.now()
@@ -16108,7 +16108,7 @@ var require_graceful_fs = __commonJS({
         enumerable: true,
         configurable: true
       });
-      function ReadStream(path28, options) {
+      function ReadStream(path29, options) {
         if (this instanceof ReadStream)
           return fs$ReadStream.apply(this, arguments), this;
         else
@@ -16128,7 +16128,7 @@ var require_graceful_fs = __commonJS({
           }
         });
       }
-      function WriteStream(path28, options) {
+      function WriteStream(path29, options) {
         if (this instanceof WriteStream)
           return fs$WriteStream.apply(this, arguments), this;
         else
@@ -16146,22 +16146,22 @@ var require_graceful_fs = __commonJS({
           }
         });
       }
-      function createReadStream2(path28, options) {
-        return new fs15.ReadStream(path28, options);
+      function createReadStream2(path29, options) {
+        return new fs15.ReadStream(path29, options);
       }
-      function createWriteStream(path28, options) {
-        return new fs15.WriteStream(path28, options);
+      function createWriteStream(path29, options) {
+        return new fs15.WriteStream(path29, options);
       }
       var fs$open = fs15.open;
       fs15.open = open;
-      function open(path28, flags, mode, cb) {
+      function open(path29, flags, mode, cb) {
         if (typeof mode === "function")
           cb = mode, mode = null;
-        return go$open(path28, flags, mode, cb);
-        function go$open(path29, flags2, mode2, cb2, startTime) {
-          return fs$open(path29, flags2, mode2, function(err, fd) {
+        return go$open(path29, flags, mode, cb);
+        function go$open(path30, flags2, mode2, cb2, startTime) {
+          return fs$open(path30, flags2, mode2, function(err, fd) {
             if (err && (err.code === "EMFILE" || err.code === "ENFILE"))
-              enqueue([go$open, [path29, flags2, mode2, cb2], err, startTime || Date.now(), Date.now()]);
+              enqueue([go$open, [path30, flags2, mode2, cb2], err, startTime || Date.now(), Date.now()]);
             else {
               if (typeof cb2 === "function")
                 cb2.apply(this, arguments);
@@ -16690,7 +16690,7 @@ var require_mtime_precision = __commonJS({
 var require_lockfile = __commonJS({
   "../../node_modules/.pnpm/proper-lockfile@4.1.2/node_modules/proper-lockfile/lib/lockfile.js"(exports2, module2) {
     "use strict";
-    var path28 = require("path");
+    var path29 = require("path");
     var fs14 = require_graceful_fs();
     var retry = require_retry2();
     var onExit = require_signal_exit();
@@ -16701,7 +16701,7 @@ var require_lockfile = __commonJS({
     }
     function resolveCanonicalPath(file2, options, callback) {
       if (!options.realpath) {
-        return callback(null, path28.resolve(file2));
+        return callback(null, path29.resolve(file2));
       }
       options.fs.realpath(file2, callback);
     }
@@ -18565,10 +18565,10 @@ var require_segments = __commonJS({
       const segs = getSegmentsFromString(data, Utils.isKanjiModeEnabled());
       const nodes = buildNodes(segs);
       const graph = buildGraph(nodes, version2);
-      const path28 = dijkstra.find_path(graph.map, "start", "end");
+      const path29 = dijkstra.find_path(graph.map, "start", "end");
       const optimizedSegs = [];
-      for (let i = 1; i < path28.length - 1; i++) {
-        optimizedSegs.push(graph.table[path28[i]].node);
+      for (let i = 1; i < path29.length - 1; i++) {
+        optimizedSegs.push(graph.table[path29[i]].node);
       }
       return exports2.fromArray(mergeSegments(optimizedSegs));
     };
@@ -21045,7 +21045,7 @@ var require_png2 = __commonJS({
       });
       png.pack();
     };
-    exports2.renderToFile = function renderToFile(path28, qrData, options, cb) {
+    exports2.renderToFile = function renderToFile(path29, qrData, options, cb) {
       if (typeof cb === "undefined") {
         cb = options;
         options = void 0;
@@ -21056,7 +21056,7 @@ var require_png2 = __commonJS({
         called = true;
         cb.apply(null, args);
       };
-      const stream = fs14.createWriteStream(path28);
+      const stream = fs14.createWriteStream(path29);
       stream.on("error", done);
       stream.on("close", done);
       exports2.renderToFileStream(stream, qrData, options);
@@ -21118,14 +21118,14 @@ var require_utf8 = __commonJS({
       }
       return output3;
     };
-    exports2.renderToFile = function renderToFile(path28, qrData, options, cb) {
+    exports2.renderToFile = function renderToFile(path29, qrData, options, cb) {
       if (typeof cb === "undefined") {
         cb = options;
         options = void 0;
       }
       const fs14 = require("fs");
       const utf8 = exports2.render(qrData, options);
-      fs14.writeFile(path28, utf8, cb);
+      fs14.writeFile(path29, utf8, cb);
     };
   }
 });
@@ -21246,7 +21246,7 @@ var require_svg_tag = __commonJS({
       return str;
     }
     function qrToPath(data, size, margin) {
-      let path28 = "";
+      let path29 = "";
       let moveBy = 0;
       let newRow = false;
       let lineLength = 0;
@@ -21257,19 +21257,19 @@ var require_svg_tag = __commonJS({
         if (data[i]) {
           lineLength++;
           if (!(i > 0 && col > 0 && data[i - 1])) {
-            path28 += newRow ? svgCmd("M", col + margin, 0.5 + row + margin) : svgCmd("m", moveBy, 0);
+            path29 += newRow ? svgCmd("M", col + margin, 0.5 + row + margin) : svgCmd("m", moveBy, 0);
             moveBy = 0;
             newRow = false;
           }
           if (!(col + 1 < size && data[i + 1])) {
-            path28 += svgCmd("h", lineLength);
+            path29 += svgCmd("h", lineLength);
             lineLength = 0;
           }
         } else {
           moveBy++;
         }
       }
-      return path28;
+      return path29;
     }
     exports2.render = function render(qrData, options, cb) {
       const opts = Utils.getOptions(options);
@@ -21277,10 +21277,10 @@ var require_svg_tag = __commonJS({
       const data = qrData.modules.data;
       const qrcodesize = size + opts.margin * 2;
       const bg = !opts.color.light.a ? "" : "<path " + getColorAttrib(opts.color.light, "fill") + ' d="M0 0h' + qrcodesize + "v" + qrcodesize + 'H0z"/>';
-      const path28 = "<path " + getColorAttrib(opts.color.dark, "stroke") + ' d="' + qrToPath(data, size, opts.margin) + '"/>';
+      const path29 = "<path " + getColorAttrib(opts.color.dark, "stroke") + ' d="' + qrToPath(data, size, opts.margin) + '"/>';
       const viewBox = 'viewBox="0 0 ' + qrcodesize + " " + qrcodesize + '"';
       const width = !opts.width ? "" : 'width="' + opts.width + '" height="' + opts.width + '" ';
-      const svgTag = '<svg xmlns="http://www.w3.org/2000/svg" ' + width + viewBox + ' shape-rendering="crispEdges">' + bg + path28 + "</svg>\n";
+      const svgTag = '<svg xmlns="http://www.w3.org/2000/svg" ' + width + viewBox + ' shape-rendering="crispEdges">' + bg + path29 + "</svg>\n";
       if (typeof cb === "function") {
         cb(null, svgTag);
       }
@@ -21294,7 +21294,7 @@ var require_svg = __commonJS({
   "../../node_modules/.pnpm/qrcode@1.5.4/node_modules/qrcode/lib/renderer/svg.js"(exports2) {
     var svgTagRenderer = require_svg_tag();
     exports2.render = svgTagRenderer.render;
-    exports2.renderToFile = function renderToFile(path28, qrData, options, cb) {
+    exports2.renderToFile = function renderToFile(path29, qrData, options, cb) {
       if (typeof cb === "undefined") {
         cb = options;
         options = void 0;
@@ -21302,7 +21302,7 @@ var require_svg = __commonJS({
       const fs14 = require("fs");
       const svgTag = exports2.render(qrData, options);
       const xmlStr = '<?xml version="1.0" encoding="utf-8"?><!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd">' + svgTag;
-      fs14.writeFile(path28, xmlStr, cb);
+      fs14.writeFile(path29, xmlStr, cb);
     };
   }
 });
@@ -21460,8 +21460,8 @@ var require_server = __commonJS({
         cb
       };
     }
-    function getTypeFromFilename(path28) {
-      return path28.slice((path28.lastIndexOf(".") - 1 >>> 0) + 2).toLowerCase();
+    function getTypeFromFilename(path29) {
+      return path29.slice((path29.lastIndexOf(".") - 1 >>> 0) + 2).toLowerCase();
     }
     function getRendererFromType(type) {
       switch (type) {
@@ -21525,17 +21525,17 @@ var require_server = __commonJS({
       const renderer = getRendererFromType(params.opts.type);
       return render(renderer.renderToBuffer, text, params);
     };
-    exports2.toFile = function toFile(path28, text, opts, cb) {
-      if (typeof path28 !== "string" || !(typeof text === "string" || typeof text === "object")) {
+    exports2.toFile = function toFile(path29, text, opts, cb) {
+      if (typeof path29 !== "string" || !(typeof text === "string" || typeof text === "object")) {
         throw new Error("Invalid argument");
       }
       if (arguments.length < 3 && !canPromise()) {
         throw new Error("Too few arguments provided");
       }
       const params = checkParams(text, opts, cb);
-      const type = params.opts.type || getTypeFromFilename(path28);
+      const type = params.opts.type || getTypeFromFilename(path29);
       const renderer = getRendererFromType(type);
-      const renderToFile = renderer.renderToFile.bind(null, path28);
+      const renderToFile = renderer.renderToFile.bind(null, path29);
       return render(renderToFile, text, params);
     };
     exports2.toFileStream = function toFileStream(stream, text, opts) {
@@ -21593,7 +21593,7 @@ args = ${JSON.stringify(expected.args)}
 }
 async function installPublicMcpServerToConfigs(serverId, expected) {
   const homeDir = import_node_os16.default.homedir();
-  const claudePath = import_node_path36.default.join(homeDir, ".claude.json");
+  const claudePath = import_node_path37.default.join(homeDir, ".claude.json");
   if (await pathExists5(claudePath)) {
     try {
       const content = await import_promises15.default.readFile(claudePath, "utf8");
@@ -21607,7 +21607,7 @@ async function installPublicMcpServerToConfigs(serverId, expected) {
   } else {
     await writeAtomic(claudePath, JSON.stringify({ mcpServers: { [serverId]: expected } }, null, 2) + "\n");
   }
-  const codexPath = import_node_path36.default.join(homeDir, ".codex", "config.toml");
+  const codexPath = import_node_path37.default.join(homeDir, ".codex", "config.toml");
   if (await pathExists5(codexPath)) {
     try {
       const content = await import_promises15.default.readFile(codexPath, "utf8");
@@ -21622,11 +21622,11 @@ async function installPublicMcpServerToConfigs(serverId, expected) {
       console.error(`Failed to inject MCP server into ${codexPath}`, e);
     }
   } else {
-    await import_promises15.default.mkdir(import_node_path36.default.dirname(codexPath), { recursive: true, mode: 448 }).catch(() => {
+    await import_promises15.default.mkdir(import_node_path37.default.dirname(codexPath), { recursive: true, mode: 448 }).catch(() => {
     });
     await writeAtomic(codexPath, renderTomlBlock(serverId, expected).trim() + "\n");
   }
-  const agyPath = import_node_path36.default.join(homeDir, ".gemini", "antigravity", "mcp_config.json");
+  const agyPath = import_node_path37.default.join(homeDir, ".gemini", "antigravity", "mcp_config.json");
   if (await pathExists5(agyPath)) {
     try {
       const content = await import_promises15.default.readFile(agyPath, "utf8");
@@ -21638,28 +21638,28 @@ async function installPublicMcpServerToConfigs(serverId, expected) {
       console.error(`Failed to inject MCP server into ${agyPath}`, e);
     }
   } else {
-    await import_promises15.default.mkdir(import_node_path36.default.dirname(agyPath), { recursive: true, mode: 448 }).catch(() => {
+    await import_promises15.default.mkdir(import_node_path37.default.dirname(agyPath), { recursive: true, mode: 448 }).catch(() => {
     });
     await writeAtomic(agyPath, JSON.stringify({ mcpServers: { [serverId]: expected } }, null, 2) + "\n");
   }
 }
-var import_promises15, import_node_os16, import_node_path36, toml4;
+var import_promises15, import_node_os16, import_node_path37, toml4;
 var init_install_public_mcp = __esm({
   "src/install-public-mcp.ts"() {
     "use strict";
     import_promises15 = __toESM(require("node:fs/promises"), 1);
     import_node_os16 = __toESM(require("node:os"), 1);
-    import_node_path36 = __toESM(require("node:path"), 1);
+    import_node_path37 = __toESM(require("node:path"), 1);
     toml4 = __toESM(require_toml(), 1);
   }
 });
 
 // src/bin.ts
-var import_node_path41 = __toESM(require("node:path"), 1);
-var import_node_child_process21 = require("node:child_process");
+var import_node_path42 = __toESM(require("node:path"), 1);
+var import_node_child_process22 = require("node:child_process");
 var import_node_fs25 = require("node:fs");
 var import_node_os20 = require("node:os");
-var import_node_path42 = __toESM(require("node:path"), 1);
+var import_node_path43 = __toESM(require("node:path"), 1);
 
 // src/install-codex.ts
 var import_promises = __toESM(require("node:fs/promises"), 1);
@@ -22314,8 +22314,9 @@ function deriveServeEnvFromProcessEnv(env) {
 }
 function resolveCodexHome(options) {
   if (options.codexHome) return options.codexHome;
+  if (options.homeDir) return import_node_path3.default.join(options.homeDir, ".codex");
   if (process.env.CODEX_HOME) return process.env.CODEX_HOME;
-  return import_node_path3.default.join(options.homeDir ?? import_node_os3.default.homedir(), ".codex");
+  return import_node_path3.default.join(import_node_os3.default.homedir(), ".codex");
 }
 function mrrlinTable(binPath, distribution, serveEnv) {
   const base = distribution === "npm" ? { command: "mrrlin-mcp", args: ["serve"] } : { command: "node", args: [binPath, "serve"] };
@@ -22660,12 +22661,12 @@ async function installClaude(options) {
 // src/install-agy.ts
 var import_promises9 = __toESM(require("node:fs/promises"), 1);
 var import_node_os10 = __toESM(require("node:os"), 1);
-var import_node_path17 = __toESM(require("node:path"), 1);
+var import_node_path18 = __toESM(require("node:path"), 1);
 
 // src/tools.ts
 var import_node_crypto9 = require("node:crypto");
 var import_promises8 = require("node:fs/promises");
-var import_node_path16 = __toESM(require("node:path"), 1);
+var import_node_path17 = __toESM(require("node:path"), 1);
 var import_node_os9 = __toESM(require("node:os"), 1);
 
 // ../../node_modules/.pnpm/zod@4.4.3/node_modules/zod/v4/classic/external.js
@@ -23434,10 +23435,10 @@ function mergeDefs(...defs) {
 function cloneDef(schema) {
   return mergeDefs(schema._zod.def);
 }
-function getElementAtPath(obj, path28) {
-  if (!path28)
+function getElementAtPath(obj, path29) {
+  if (!path29)
     return obj;
-  return path28.reduce((acc, key) => acc?.[key], obj);
+  return path29.reduce((acc, key) => acc?.[key], obj);
 }
 function promiseAllObject(promisesObj) {
   const keys = Object.keys(promisesObj);
@@ -23846,11 +23847,11 @@ function explicitlyAborted(x, startIndex = 0) {
   }
   return false;
 }
-function prefixIssues(path28, issues) {
+function prefixIssues(path29, issues) {
   return issues.map((iss) => {
     var _a3;
     (_a3 = iss).path ?? (_a3.path = []);
-    iss.path.unshift(path28);
+    iss.path.unshift(path29);
     return iss;
   });
 }
@@ -23997,16 +23998,16 @@ function flattenError(error51, mapper = (issue2) => issue2.message) {
 }
 function formatError(error51, mapper = (issue2) => issue2.message) {
   const fieldErrors = { _errors: [] };
-  const processError = (error52, path28 = []) => {
+  const processError = (error52, path29 = []) => {
     for (const issue2 of error52.issues) {
       if (issue2.code === "invalid_union" && issue2.errors.length) {
-        issue2.errors.map((issues) => processError({ issues }, [...path28, ...issue2.path]));
+        issue2.errors.map((issues) => processError({ issues }, [...path29, ...issue2.path]));
       } else if (issue2.code === "invalid_key") {
-        processError({ issues: issue2.issues }, [...path28, ...issue2.path]);
+        processError({ issues: issue2.issues }, [...path29, ...issue2.path]);
       } else if (issue2.code === "invalid_element") {
-        processError({ issues: issue2.issues }, [...path28, ...issue2.path]);
+        processError({ issues: issue2.issues }, [...path29, ...issue2.path]);
       } else {
-        const fullpath = [...path28, ...issue2.path];
+        const fullpath = [...path29, ...issue2.path];
         if (fullpath.length === 0) {
           fieldErrors._errors.push(mapper(issue2));
         } else {
@@ -24033,17 +24034,17 @@ function formatError(error51, mapper = (issue2) => issue2.message) {
 }
 function treeifyError(error51, mapper = (issue2) => issue2.message) {
   const result = { errors: [] };
-  const processError = (error52, path28 = []) => {
+  const processError = (error52, path29 = []) => {
     var _a3, _b;
     for (const issue2 of error52.issues) {
       if (issue2.code === "invalid_union" && issue2.errors.length) {
-        issue2.errors.map((issues) => processError({ issues }, [...path28, ...issue2.path]));
+        issue2.errors.map((issues) => processError({ issues }, [...path29, ...issue2.path]));
       } else if (issue2.code === "invalid_key") {
-        processError({ issues: issue2.issues }, [...path28, ...issue2.path]);
+        processError({ issues: issue2.issues }, [...path29, ...issue2.path]);
       } else if (issue2.code === "invalid_element") {
-        processError({ issues: issue2.issues }, [...path28, ...issue2.path]);
+        processError({ issues: issue2.issues }, [...path29, ...issue2.path]);
       } else {
-        const fullpath = [...path28, ...issue2.path];
+        const fullpath = [...path29, ...issue2.path];
         if (fullpath.length === 0) {
           result.errors.push(mapper(issue2));
           continue;
@@ -24075,8 +24076,8 @@ function treeifyError(error51, mapper = (issue2) => issue2.message) {
 }
 function toDotPath(_path) {
   const segs = [];
-  const path28 = _path.map((seg) => typeof seg === "object" ? seg.key : seg);
-  for (const seg of path28) {
+  const path29 = _path.map((seg) => typeof seg === "object" ? seg.key : seg);
+  for (const seg of path29) {
     if (typeof seg === "number")
       segs.push(`[${seg}]`);
     else if (typeof seg === "symbol")
@@ -36768,13 +36769,13 @@ function resolveRef(ref, ctx) {
   if (!ref.startsWith("#")) {
     throw new Error("External $ref is not supported, only local refs (#/...) are allowed");
   }
-  const path28 = ref.slice(1).split("/").filter(Boolean);
-  if (path28.length === 0) {
+  const path29 = ref.slice(1).split("/").filter(Boolean);
+  if (path29.length === 0) {
     return ctx.rootSchema;
   }
   const defsKey = ctx.version === "draft-2020-12" ? "$defs" : "definitions";
-  if (path28[0] === defsKey) {
-    const key = path28[1];
+  if (path29[0] === defsKey) {
+    const key = path29[1];
     if (!key || !ctx.defs[key]) {
       throw new Error(`Reference not found: ${ref}`);
     }
@@ -38247,6 +38248,8 @@ var mrrlinRunBlockingReasonCodeSchema = external_exports.enum([
   // Slice 9: more than one live address answers for this deliverable, so the receipt cannot name
   // one without guessing. Blocks rather than picking, the same rule `ambiguous_route` follows.
   "publish_address_ambiguous",
+  // workspace-context-isolation (OQ-091): project boundary profile cannot be resolved fail-closed
+  "workspace_boundary_unresolvable",
   "unknown"
 ]);
 var mrrlinExecutionArtifactKindSchema = external_exports.enum([
@@ -38561,7 +38564,11 @@ var mrrlinProjectSummarySchema = external_exports.object({
     unclearCount: external_exports.number().int().nonnegative(),
     judgeVerdictCount: external_exports.number().int().nonnegative()
   }).nullable().optional(),
-  ownerEmail: external_exports.string().nullable().optional()
+  ownerEmail: external_exports.string().nullable().optional(),
+  // workspace-context-isolation (OQ-091): explicit client name and scope description
+  // for multi-tenant workspace containment. Output-optional and nullable for backwards compatibility.
+  clientName: external_exports.string().trim().max(80).nullable().optional(),
+  scopeDescription: external_exports.string().trim().max(240).nullable().optional()
 });
 var mrrlinProjectUpsertSchema = mrrlinProjectSummarySchema.omit({
   onboardingKickoffState: true,
@@ -38569,7 +38576,9 @@ var mrrlinProjectUpsertSchema = mrrlinProjectSummarySchema.omit({
 });
 var mrrlinProjectRenameSchema = external_exports.object({
   displayName: external_exports.string().trim().min(1).max(120).optional(),
-  intentJudgeEnabled: external_exports.boolean().optional()
+  intentJudgeEnabled: external_exports.boolean().optional(),
+  clientName: external_exports.string().trim().max(80).nullable().optional(),
+  scopeDescription: external_exports.string().trim().max(240).nullable().optional()
 });
 var ONBOARDING_KICKOFF_TRANSITIONS = [
   { from: null, to: "pending" },
@@ -38604,7 +38613,9 @@ var mrrlinProjectSnapshotSchema = external_exports.object({
     defaultDomains: mrrlinTaskDomainsSchema.optional(),
     displayName: external_exports.string().min(1),
     emoji: mrrlinProjectEmojiSchema,
-    slug: mrrlinProjectSlugSchema
+    slug: mrrlinProjectSlugSchema,
+    clientName: external_exports.string().trim().max(80).nullable().optional(),
+    scopeDescription: external_exports.string().trim().max(240).nullable().optional()
   }),
   taskDependencies: external_exports.array(mrrlinTaskDependencySchema).default([]),
   taskEvents: external_exports.array(mrrlinTaskEventSchema).default([]),
@@ -39406,6 +39417,7 @@ var mrrlinProjectSchedulerPolicySchema = external_exports.object({
   createdAt: external_exports.string().datetime(),
   // Slice 3 Part E: combined per-UTC-day cap on scheduler-enqueued draft/consensus jobs.
   dailyAutonomousJobBudget: external_exports.number().int().nonnegative(),
+  defaultAutoDeploy: mrrlinAutoDeploySchema,
   eligibleAutonomyLevels: external_exports.array(mrrlinAutonomyLevelSchema).min(1),
   // Slice 3 Part E: cap on concurrently active scheduler-created (ER-SCHED-*) runs.
   maxConcurrentAutonomousRuns: external_exports.number().int().nonnegative(),
@@ -39421,6 +39433,7 @@ var mrrlinProjectSchedulerPolicyUpsertSchema = external_exports.object({
   autoSpecApproval: mrrlinAutoSpecApprovalSchema.optional(),
   cadenceSeconds: external_exports.number().int().positive().nullable().optional(),
   dailyAutonomousJobBudget: external_exports.number().int().nonnegative().optional(),
+  defaultAutoDeploy: mrrlinAutoDeploySchema.optional(),
   eligibleAutonomyLevels: external_exports.array(mrrlinAutonomyLevelSchema).min(1).optional(),
   maxConcurrentAutonomousRuns: external_exports.number().int().nonnegative().optional(),
   prodGraceSeconds: external_exports.number().int().nonnegative().optional(),
@@ -39868,6 +39881,17 @@ var capabilityUseCreateSchema = external_exports.object({
 var deliveryResolutionResponseSchema = external_exports.object({
   data: external_exports.object({ route: CapabilityRouteSchema, verdict: CapabilityGateVerdictSchema })
 });
+function resolveProjectClientScope(project) {
+  const trimmedClient = project.clientName?.trim();
+  const trimmedDisplay = project.displayName?.trim();
+  const clientName = trimmedClient && trimmedClient.length > 0 ? trimmedClient : trimmedDisplay && trimmedDisplay.length > 0 ? trimmedDisplay : project.slug;
+  const trimmedScope = project.scopeDescription?.trim();
+  const scopeDescription = trimmedScope && trimmedScope.length > 0 ? trimmedScope : null;
+  return {
+    clientName,
+    scopeDescription
+  };
+}
 
 // ../../packages/client/dist/agent-token-provider.js
 var AgentTokenProviderError = class extends Error {
@@ -39989,18 +40013,18 @@ function createMrrlinClient(config2) {
   const customFetch = config2.fetch ?? globalThis.fetch;
   const baseUrl = config2.baseUrl.replace(/\/$/, "");
   const token = config2.token;
-  async function request(path28, init) {
+  async function request(path29, init) {
     const method = init?.method ?? "GET";
     const headers = new Headers(init?.headers ?? {});
     if (token && !headers.has("authorization")) {
       headers.set("authorization", `Bearer ${token}`);
     }
-    const response = await customFetch(`${baseUrl}${path28}`, { ...init, headers });
+    const response = await customFetch(`${baseUrl}${path29}`, { ...init, headers });
     if (!response.ok) {
       const body = await response.text();
       let code = `HTTP_${response.status}`;
       let violations = null;
-      let message = `Mrrlin API ${method} ${path28} failed: ${response.status}`;
+      let message = `Mrrlin API ${method} ${path29} failed: ${response.status}`;
       try {
         const parsed = JSON.parse(body);
         const violationsParsed = apiViolationsErrorSchema.safeParse(parsed);
@@ -40020,7 +40044,7 @@ function createMrrlinClient(config2) {
       throw new MrrlinApiError({
         code,
         method,
-        path: path28,
+        path: path29,
         responseBody: body,
         status: response.status,
         violations,
@@ -40029,18 +40053,18 @@ function createMrrlinClient(config2) {
     }
     return response.json();
   }
-  async function requestText(path28, init) {
+  async function requestText(path29, init) {
     const method = init?.method ?? "GET";
     const headers = new Headers(init?.headers ?? {});
     if (token && !headers.has("authorization")) {
       headers.set("authorization", `Bearer ${token}`);
     }
-    const response = await customFetch(`${baseUrl}${path28}`, { ...init, headers });
+    const response = await customFetch(`${baseUrl}${path29}`, { ...init, headers });
     if (!response.ok) {
       const body = await response.text();
       let code = `HTTP_${response.status}`;
       let violations = null;
-      let message = `Mrrlin API ${method} ${path28} failed: ${response.status}`;
+      let message = `Mrrlin API ${method} ${path29} failed: ${response.status}`;
       try {
         const parsed = JSON.parse(body);
         const violationsParsed = apiViolationsErrorSchema.safeParse(parsed);
@@ -40060,7 +40084,7 @@ function createMrrlinClient(config2) {
       throw new MrrlinApiError({
         code,
         method,
-        path: path28,
+        path: path29,
         responseBody: body,
         status: response.status,
         violations,
@@ -40228,16 +40252,16 @@ function createMrrlinClient(config2) {
     // rejected against the first, MrrlinTask[]-only overload) -- the `any` here is contained to
     // this one implementation signature; MrrlinClient's declared overloads keep callers precise.
     async listTasks(projectSlug, filters = {}, options) {
-      const path28 = buildTaskListPath(projectSlug, filters, options?.view);
-      const body = await request(path28);
+      const path29 = buildTaskListPath(projectSlug, filters, options?.view);
+      const body = await request(path29);
       if (options?.view === "summary") {
         return taskSummaryListResponseSchema.parse(body).data;
       }
       return taskListResponseSchema.parse(body).data;
     },
     async listTaskSummaries(projectSlug, filters = {}) {
-      const path28 = buildTaskListPath(projectSlug, filters, "summary");
-      const body = await request(path28);
+      const path29 = buildTaskListPath(projectSlug, filters, "summary");
+      const body = await request(path29);
       return taskSummaryListResponseSchema.parse(body).data;
     },
     async listTaxonomy(projectSlug) {
@@ -40245,22 +40269,22 @@ function createMrrlinClient(config2) {
       return taxonomyListResponseSchema.parse(body).data;
     },
     async listWikiPages(projectSlug, filters = {}) {
-      const path28 = appendQuery(`${projectPath(projectSlug)}/wiki`, {
+      const path29 = appendQuery(`${projectPath(projectSlug)}/wiki`, {
         folder: filters.folder,
         q: filters.q,
         taskId: filters.taskId
       });
-      const body = await request(path28);
+      const body = await request(path29);
       return wikiPageListResponseSchema.parse(body).data;
     },
     async searchWikiPages(projectSlug, query) {
-      const path28 = appendQuery(`${projectPath(projectSlug)}/wiki/search`, {
+      const path29 = appendQuery(`${projectPath(projectSlug)}/wiki/search`, {
         folder: query.folder,
         limit: query.limit === void 0 ? void 0 : String(query.limit),
         pathPrefix: query.pathPrefix,
         q: query.q
       });
-      const body = await request(path28);
+      const body = await request(path29);
       return wikiPageSearchResponseSchema.parse(body).data;
     },
     async updatePlan(projectSlug, planId, patch) {
@@ -42663,8 +42687,23 @@ var CodexBridgeEventMapper = class {
 // ../../packages/agent-client/dist/providers/codex/render-context-bundle.js
 var DEFAULT_SPEC_BUDGET_CHARS = 6e3;
 var DEFAULT_ARTIFACT_PAYLOAD_BUDGET_CHARS = 400;
+function renderWorkspaceBoundary(project) {
+  if (!project)
+    return "";
+  const clientName = (project.clientName || project.displayName || "(unspecified)").slice(0, 35);
+  const slug = project.slug.slice(0, 25);
+  const boundary = [
+    "## Workspace Boundary",
+    `Client: ${clientName} (${slug})`,
+    "Strict isolation: cross-client borrowing forbidden."
+  ].join("\n");
+  return boundary.length > 150 ? boundary.slice(0, 150) : boundary;
+}
 function renderContextBundle(input) {
   const sections = [];
+  if (input.project) {
+    sections.push(renderWorkspaceBoundary(input.project));
+  }
   sections.push(renderTaskSummary(input.task));
   sections.push(renderSpec(input.specMarkdown, input.compact));
   const { keptRuns, keptArtifacts, keptAutonomy, anyHistoricalDropped, droppedHandles } = applyHistoricalBudgetIfNeeded(input);
@@ -43757,8 +43796,11 @@ var AgyBridgeEventMapper = class {
         return [];
       }
       if (step.step_type === "error_message") {
-        const message = typeof step.error === "string" ? step.error : typeof step.message === "string" ? step.message : "AGY step error";
-        return [{ type: "error", content: message }];
+        const message = typeof step.error === "string" && step.error.trim() || typeof step.message === "string" && step.message.trim() || typeof step.text === "string" && step.text.trim() || typeof step.detail === "string" && step.detail.trim() || typeof step.details === "string" && step.details.trim() || "";
+        if (message) {
+          return [{ type: "error", content: message }];
+        }
+        return [];
       }
       return [];
     }
@@ -44166,9 +44208,15 @@ ${input.prompt}` : input.prompt;
       env: process.env,
       shell: false
     };
+    let spawnCmd = executable;
+    let spawnArgs = args;
+    if (process.platform === "win32" && /\.[mc]?[jt]s$/.test(executable)) {
+      spawnCmd = process.execPath;
+      spawnArgs = [executable, ...args];
+    }
     let child;
     try {
-      child = spawn6(executable, args, options);
+      child = spawn6(spawnCmd, spawnArgs, options);
     } catch (err) {
       finish({ ok: false, error: `Failed to spawn codex exec: ${errMessage(err)}` });
       return;
@@ -44247,9 +44295,15 @@ function runClaudeExec(input, deps) {
       env: process.env,
       shell: false
     };
+    let spawnCmd = executable;
+    let spawnArgs = args;
+    if (process.platform === "win32" && /\.[mc]?[jt]s$/.test(executable)) {
+      spawnCmd = process.execPath;
+      spawnArgs = [executable, ...args];
+    }
     let child;
     try {
-      child = spawn6(executable, args, options);
+      child = spawn6(spawnCmd, spawnArgs, options);
     } catch (err) {
       finish({ ok: false, error: `Failed to spawn ${executable} exec: ${errMessage2(err)}` });
       return;
@@ -44314,6 +44368,104 @@ function errMessage2(err) {
   return err instanceof Error ? err.message : String(err);
 }
 
+// ../../packages/agent-client/dist/providers/agy/exec.js
+var import_node_child_process8 = require("node:child_process");
+function runAgyExec(input, deps) {
+  const spawn6 = deps?.spawn ?? import_node_child_process8.spawn;
+  const executable = input.codexExecutable ?? "agy";
+  const args = ["--output-format", "json"];
+  if (input.sandbox === "read-only") {
+    args.push("--mode", "plan");
+  } else if (input.sandbox === "workspace-write") {
+    args.push("--mode", "accept-edits");
+  }
+  let prompt = input.prompt;
+  const trimmedInstructions = input.developerInstructions.trim();
+  if (trimmedInstructions) {
+    prompt = trimmedInstructions + "\n\n" + prompt;
+  }
+  if (input.model) {
+    args.push("--model", input.model);
+  }
+  args.push(`--print=${prompt}`);
+  return new Promise((resolve) => {
+    let settled = false;
+    const timerRef = { id: void 0 };
+    const finish = (result) => {
+      if (settled)
+        return;
+      settled = true;
+      if (timerRef.id)
+        clearTimeout(timerRef.id);
+      resolve(result);
+    };
+    const options = {
+      stdio: ["ignore", "pipe", "pipe"],
+      cwd: input.cwd,
+      env: process.env,
+      shell: false
+    };
+    let spawnCmd = executable;
+    let spawnArgs = args;
+    if (process.platform === "win32" && /\.[mc]?[jt]s$/.test(executable)) {
+      spawnCmd = process.execPath;
+      spawnArgs = [executable, ...args];
+    }
+    let child;
+    try {
+      child = spawn6(spawnCmd, spawnArgs, options);
+    } catch (err) {
+      finish({ ok: false, error: `Failed to spawn ${executable} exec: ${err instanceof Error ? err.message : String(err)}` });
+      return;
+    }
+    let stdout = "";
+    let timedOut = false;
+    timerRef.id = setTimeout(() => {
+      timedOut = true;
+      child.kill("SIGKILL");
+      finish({ ok: false, error: `${executable} exec timed out after ${input.timeoutMs}ms` });
+    }, input.timeoutMs);
+    child.stdout?.on("data", (chunk) => {
+      stdout += chunk.toString();
+    });
+    child.stderr?.on("data", () => {
+    });
+    child.on("error", (err) => {
+      finish({ ok: false, error: `${executable} exec process error: ${err.message}` });
+    });
+    child.on("close", (code) => {
+      if (timedOut)
+        return;
+      if (code !== 0) {
+        finish({ ok: false, error: `${executable} exec exited with code ${code ?? "null"}` });
+        return;
+      }
+      finish(extractOneShotResult2(stdout));
+    });
+  });
+}
+function extractOneShotResult2(stdout) {
+  let parsed;
+  try {
+    parsed = JSON.parse(stdout);
+  } catch {
+    return { ok: false, error: "agy exec produced no parseable JSON output" };
+  }
+  if (parsed.status !== "SUCCESS" || typeof parsed.response !== "string") {
+    return { ok: false, error: `agy exec failed or returned invalid response format: ${JSON.stringify(parsed)}` };
+  }
+  return {
+    ok: true,
+    text: parsed.response,
+    usage: {
+      inputTokens: parsed.usage?.input_tokens ?? 0,
+      outputTokens: parsed.usage?.output_tokens ?? 0,
+      cachedInputTokens: parsed.usage?.cache_read_tokens ?? 0,
+      cacheWriteInputTokens: 0
+    }
+  };
+}
+
 // ../../packages/agent-client/dist/run-agent-exec.js
 function runAgentExec(input, deps, persistedProvider) {
   const provider = resolveProvider(process.env, persistedProvider);
@@ -44323,6 +44475,9 @@ function runAgentExec(input, deps, persistedProvider) {
   if (provider.id === "claude") {
     return runClaudeExec(input, deps);
   }
+  if (provider.id === "agy") {
+    return runAgyExec(input, deps);
+  }
   throw new Error(`not-yet-wired: ${provider.id}`);
 }
 
@@ -44566,7 +44721,7 @@ function sterileCwd() {
 }
 
 // src/consensus/code-gate-git.ts
-var import_node_child_process8 = require("node:child_process");
+var import_node_child_process9 = require("node:child_process");
 var DIFF_MAX_BYTES = 2e5;
 var FASTGATE_OUTPUT_MAX_BYTES = 16e3;
 var GIT_TIMEOUT_MS = 6e4;
@@ -44582,7 +44737,7 @@ var defaultRunCmd = (cmd, args, opts) => new Promise((resolve) => {
   };
   let child;
   try {
-    child = (0, import_node_child_process8.spawn)(cmd, args, {
+    child = (0, import_node_child_process9.spawn)(cmd, args, {
       cwd: opts.cwd,
       env: process.env,
       shell: false,
@@ -45391,7 +45546,7 @@ You revise a deliverable to address the accepted issues so it satisfies the acce
 }
 
 // src/consensus/multi-llm-head.ts
-var import_node_child_process10 = require("node:child_process");
+var import_node_child_process11 = require("node:child_process");
 
 // src/external-agents-bin.ts
 function resolveExternalAgentsCliInvocation(override) {
@@ -45407,7 +45562,7 @@ function resolveExternalAgentsCliInvocation(override) {
 }
 
 // src/consensus/provider-limits.ts
-var import_node_child_process9 = require("node:child_process");
+var import_node_child_process10 = require("node:child_process");
 var DEFAULT_STATUS_TIMEOUT_MS = 1e4;
 function errMessage3(err) {
   return err instanceof Error ? err.message : String(err);
@@ -45449,7 +45604,7 @@ function runExternalAgentsStatus(bin, args, timeoutMs, spawn6) {
   });
 }
 async function fetchRegistrySnapshot(deps) {
-  const spawn6 = deps?.spawn ?? import_node_child_process9.spawn;
+  const spawn6 = deps?.spawn ?? import_node_child_process10.spawn;
   const { command, prefixArgs } = resolveExternalAgentsCliInvocation(deps?.externalAgentsBin);
   const { stdout, error: error51 } = await runExternalAgentsStatus(
     command,
@@ -45537,7 +45692,7 @@ function runExternalAgents(bin, args, label, timeoutMs, spawn6) {
   });
 }
 async function pickPanel(input, deps) {
-  const spawn6 = deps?.spawn ?? import_node_child_process10.spawn;
+  const spawn6 = deps?.spawn ?? import_node_child_process11.spawn;
   const { command, prefixArgs } = resolveExternalAgentsCliInvocation(deps?.externalAgentsBin);
   const args = [
     "pick",
@@ -45584,7 +45739,7 @@ function parseDispatch(agentId, stdout, exitCode) {
   return { ok: true, text: parsed.text, usage };
 }
 async function dispatchHead(agentId, prompt, timeoutMs, deps) {
-  const spawn6 = deps?.spawn ?? import_node_child_process10.spawn;
+  const spawn6 = deps?.spawn ?? import_node_child_process11.spawn;
   const { command, prefixArgs } = resolveExternalAgentsCliInvocation(deps?.externalAgentsBin);
   const args = ["dispatch", agentId, "--json", prompt];
   const r = await runExternalAgents(command, [...prefixArgs, ...args], "dispatch", timeoutMs, spawn6);
@@ -53804,8 +53959,8 @@ async function findSessionDays(stateDir, sessionId) {
 function isRecord5(v) {
   return v !== null && typeof v === "object";
 }
-function resolvePath(root, path28) {
-  const parts = path28.split(".");
+function resolvePath(root, path29) {
+  const parts = path29.split(".");
   let cur = root;
   for (let i = 0; i < parts.length - 1; i += 1) {
     const part = parts[i];
@@ -53873,9 +54028,9 @@ async function gate(artifact, prose, ctx) {
     return { ok: true, gated: true, artifact: withheldExcerptClone(artifact) };
   }
   const maskedClone = typeof structuredClone === "function" ? structuredClone(artifact) : JSON.parse(JSON.stringify(artifact));
-  for (const { path: path28, masked } of fields) {
-    const target = resolvePath(maskedClone, path28);
-    if (!target) throw new Error(`pii-gate: path "${path28}" failed to resolve on the clone after validating on the original`);
+  for (const { path: path29, masked } of fields) {
+    const target = resolvePath(maskedClone, path29);
+    if (!target) throw new Error(`pii-gate: path "${path29}" failed to resolve on the clone after validating on the original`);
     target.parent[target.key] = masked;
   }
   return { ok: true, gated: false, artifact: maskedClone };
@@ -54082,9 +54237,9 @@ var CheckoutRegistry = class {
   get(slug) {
     return this.read()[slug] ?? null;
   }
-  confirm(slug, path28, now) {
+  confirm(slug, path29, now) {
     const all = this.read();
-    all[slug] = { path: path28, confirmedAt: now };
+    all[slug] = { path: path29, confirmedAt: now };
     (0, import_node_fs6.writeFileSync)(this.file, JSON.stringify(all, null, 2));
   }
   /**
@@ -54125,8 +54280,9 @@ var CheckoutRegistry = class {
 };
 
 // src/checkout-handlers.ts
-var import_node_child_process11 = require("node:child_process");
+var import_node_child_process12 = require("node:child_process");
 var import_node_fs7 = require("node:fs");
+var import_node_path14 = __toESM(require("node:path"), 1);
 
 // src/git-remote-match.ts
 function normalizeRemote(url2) {
@@ -54152,7 +54308,7 @@ function remoteMatchesRepo(remoteUrl, repoFullName) {
 // src/checkout-handlers.ts
 function validateCheckoutPath(checkoutPath, repo) {
   const trimmedPath = checkoutPath.trim();
-  if (!trimmedPath.startsWith("/")) {
+  if (!import_node_path14.default.isAbsolute(trimmedPath)) {
     return {
       ok: false,
       code: "not_absolute",
@@ -54161,7 +54317,7 @@ function validateCheckoutPath(checkoutPath, repo) {
   }
   let resolvedPath;
   try {
-    resolvedPath = (0, import_node_fs7.realpathSync)(trimmedPath);
+    resolvedPath = (import_node_fs7.realpathSync.native ?? import_node_fs7.realpathSync)(trimmedPath);
   } catch {
     return {
       ok: false,
@@ -54171,7 +54327,7 @@ function validateCheckoutPath(checkoutPath, repo) {
   }
   let remoteUrl;
   try {
-    remoteUrl = (0, import_node_child_process11.execFileSync)("git", ["-C", resolvedPath, "remote", "get-url", "origin"], {
+    remoteUrl = (0, import_node_child_process12.execFileSync)("git", ["-C", resolvedPath, "remote", "get-url", "origin"], {
       encoding: "utf8",
       stdio: ["ignore", "pipe", "ignore"],
       timeout: 15e3,
@@ -54224,13 +54380,13 @@ function checkoutStateData(projectSlug, entry, machineLabel) {
 // src/operator-token.ts
 var import_node_fs8 = require("node:fs");
 var import_node_os7 = __toESM(require("node:os"), 1);
-var import_node_path14 = __toESM(require("node:path"), 1);
+var import_node_path15 = __toESM(require("node:path"), 1);
 function operatorDir() {
-  const base = process.env.CODEX_HOME ? import_node_path14.default.join(process.env.CODEX_HOME, "mrrlin") : import_node_path14.default.join(import_node_os7.default.homedir(), ".mrrlin");
+  const base = process.env.CODEX_HOME ? import_node_path15.default.join(process.env.CODEX_HOME, "mrrlin") : import_node_path15.default.join(import_node_os7.default.homedir(), ".mrrlin");
   return base;
 }
 function operatorTokenPath() {
-  return import_node_path14.default.join(operatorDir(), "operator-token");
+  return import_node_path15.default.join(operatorDir(), "operator-token");
 }
 function readOperatorToken() {
   try {
@@ -54247,7 +54403,7 @@ function persistOperatorToken(token) {
 `, { encoding: "utf8", mode: 384 });
 }
 function agentCredentialPath() {
-  return import_node_path14.default.join(operatorDir(), "agent-credential");
+  return import_node_path15.default.join(operatorDir(), "agent-credential");
 }
 function persistAgentSecret(secret) {
   const dir = operatorDir();
@@ -54270,7 +54426,7 @@ function readAgentSecret() {
 var import_node_crypto8 = require("node:crypto");
 var import_node_fs9 = require("node:fs");
 var import_node_os8 = __toESM(require("node:os"), 1);
-var import_node_path15 = __toESM(require("node:path"), 1);
+var import_node_path16 = __toESM(require("node:path"), 1);
 var DEFAULT_WORKER_PORT = 8792;
 function workerPort() {
   const raw = process.env.MRRLIN_WORKER_PORT;
@@ -54279,11 +54435,11 @@ function workerPort() {
   return Number.isFinite(parsed) && parsed > 0 ? parsed : DEFAULT_WORKER_PORT;
 }
 function workerDir() {
-  const base = process.env.CODEX_HOME ? import_node_path15.default.join(process.env.CODEX_HOME, "mrrlin") : import_node_path15.default.join(import_node_os8.default.homedir(), ".mrrlin");
-  return import_node_path15.default.join(base, "worker");
+  const base = process.env.CODEX_HOME ? import_node_path16.default.join(process.env.CODEX_HOME, "mrrlin") : import_node_path16.default.join(import_node_os8.default.homedir(), ".mrrlin");
+  return import_node_path16.default.join(base, "worker");
 }
 function workerTokenPath() {
-  return import_node_path15.default.join(workerDir(), "token");
+  return import_node_path16.default.join(workerDir(), "token");
 }
 function readWorkerToken() {
   try {
@@ -55435,76 +55591,136 @@ async function getAgentProviderForPanel(client, opts = {}) {
 }
 function createMrrlinTools(options) {
   const client = createMrrlinClient(withAuth(options));
+  let boundSlug = options.activeProjectSlug ?? (process.env.MRRLIN_PROJECT_SLUG?.trim() || void 0);
+  let sessionResolved = false;
+  async function resolveBoundSlug() {
+    if (boundSlug !== void 0) return boundSlug;
+    if (sessionResolved) return boundSlug;
+    try {
+      const settings = await client.getOperatorSettings();
+      if (settings?.activeProjectSlug) {
+        boundSlug = settings.activeProjectSlug;
+      }
+    } catch {
+    }
+    sessionResolved = true;
+    return boundSlug;
+  }
+  async function checkTenantBoundary(targetSlug, resourceName) {
+    const active = await resolveBoundSlug();
+    if (!active) {
+      throw new McpToolCodedError(
+        "TENANT_BOUNDARY_VIOLATION",
+        `Tenant boundary violation: no active workspace bound; cannot access ${resourceName} of project "${targetSlug}".`
+      );
+    }
+    if (active !== targetSlug) {
+      throw new McpToolCodedError(
+        "TENANT_BOUNDARY_VIOLATION",
+        `Tenant boundary violation: active workspace "${active}" cannot access ${resourceName} of project "${targetSlug}".`
+      );
+    }
+  }
   return {
     [mcpToolNames.archivePlan]: makeTool(
       client,
       mcpToolNames.archivePlan,
       "PLAN_ARCHIVE_FAILED",
       "Unable to archive plan.",
-      async (c, { projectSlug, planId }) => await c.updatePlan(projectSlug, planId, { status: "archived" })
+      async (c, { projectSlug, planId }) => {
+        await checkTenantBoundary(projectSlug, "plan");
+        return await c.updatePlan(projectSlug, planId, { status: "archived" });
+      }
     ),
     [mcpToolNames.createPlan]: makeTool(
       client,
       mcpToolNames.createPlan,
       "PLAN_CREATE_FAILED",
       "Unable to create plan.",
-      async (c, { projectSlug, ...input }) => await c.createPlan(projectSlug, input)
+      async (c, { projectSlug, ...input }) => {
+        await checkTenantBoundary(projectSlug, "plan");
+        return await c.createPlan(projectSlug, input);
+      }
     ),
     [mcpToolNames.createTaskDependency]: makeTool(
       client,
       mcpToolNames.createTaskDependency,
       "TASK_DEPENDENCY_CREATE_FAILED",
       "Unable to create task dependency.",
-      async (c, { projectSlug, ...input }) => await c.createTaskDependency(projectSlug, input)
+      async (c, { projectSlug, ...input }) => {
+        await checkTenantBoundary(projectSlug, "task dependency");
+        return await c.createTaskDependency(projectSlug, input);
+      }
     ),
     [mcpToolNames.createTaxonomyEntry]: makeTool(
       client,
       mcpToolNames.createTaxonomyEntry,
       "TAXONOMY_CREATE_FAILED",
       "Unable to create taxonomy entry.",
-      async (c, { projectSlug, ...input }) => await c.createTaxonomyEntry(projectSlug, input)
+      async (c, { projectSlug, ...input }) => {
+        await checkTenantBoundary(projectSlug, "taxonomy");
+        return await c.createTaxonomyEntry(projectSlug, input);
+      }
     ),
     [mcpToolNames.renameTaxonomyEntry]: makeTool(
       client,
       mcpToolNames.renameTaxonomyEntry,
       "TAXONOMY_RENAME_FAILED",
       "Unable to rename taxonomy entry.",
-      async (c, { projectSlug, ...input }) => await c.renameTaxonomyEntry(projectSlug, input)
+      async (c, { projectSlug, ...input }) => {
+        await checkTenantBoundary(projectSlug, "taxonomy");
+        return await c.renameTaxonomyEntry(projectSlug, input);
+      }
     ),
     [mcpToolNames.deleteTaxonomyEntry]: makeTool(
       client,
       mcpToolNames.deleteTaxonomyEntry,
       "TAXONOMY_DELETE_FAILED",
       "Unable to delete taxonomy entry.",
-      async (c, { projectSlug, ...input }) => await c.deleteTaxonomyEntry(projectSlug, input)
+      async (c, { projectSlug, ...input }) => {
+        await checkTenantBoundary(projectSlug, "taxonomy");
+        return await c.deleteTaxonomyEntry(projectSlug, input);
+      }
     ),
     [mcpToolNames.listProjectMembers]: makeTool(
       client,
       mcpToolNames.listProjectMembers,
       "PROJECT_MEMBER_LIST_FAILED",
       "Unable to list project members.",
-      async (c, { projectSlug }) => await c.listProjectMembers(projectSlug)
+      async (c, { projectSlug }) => {
+        await checkTenantBoundary(projectSlug, "project members");
+        return await c.listProjectMembers(projectSlug);
+      }
     ),
     [mcpToolNames.addProjectMember]: makeTool(
       client,
       mcpToolNames.addProjectMember,
       "PROJECT_MEMBER_ADD_FAILED",
       "Unable to add project member.",
-      async (c, { projectSlug, ...input }) => await c.addProjectMember(projectSlug, input)
+      async (c, { projectSlug, ...input }) => {
+        await checkTenantBoundary(projectSlug, "project member");
+        return await c.addProjectMember(projectSlug, input);
+      }
     ),
     [mcpToolNames.removeProjectMember]: makeTool(
       client,
       mcpToolNames.removeProjectMember,
       "PROJECT_MEMBER_REMOVE_FAILED",
       "Unable to remove project member.",
-      async (c, { projectSlug, ...input }) => await c.removeProjectMember(projectSlug, input)
+      async (c, { projectSlug, ...input }) => {
+        await checkTenantBoundary(projectSlug, "project member");
+        return await c.removeProjectMember(projectSlug, input);
+      }
     ),
     [mcpToolNames.appendTaskEvent]: makeTool(
       client,
       mcpToolNames.appendTaskEvent,
       "TASK_EVENT_APPEND_FAILED",
       "Unable to append task event.",
-      async (c, { projectSlug, taskId, ...input }) => await c.appendTaskEvent(projectSlug, taskId, input)
+      async (c, { projectSlug, taskId, ...input }) => {
+        await checkTenantBoundary(projectSlug, "task event");
+        return await c.appendTaskEvent(projectSlug, taskId, input);
+      }
     ),
     // Task 8.2: routed through deliverBuiltIn, not c.createWikiPage directly.
     [mcpToolNames.createWikiPage]: makeTool(
@@ -55512,41 +55728,60 @@ function createMrrlinTools(options) {
       mcpToolNames.createWikiPage,
       "WIKI_PAGE_CREATE_FAILED",
       "Unable to create wiki page.",
-      async (c, { projectSlug, ...input }) => await deliverBuiltIn(
-        c,
-        projectSlug,
-        "document",
-        { operation: "create", page: input },
-        { mcpConfigPath: options.mcpConfigPath }
-      )
+      async (c, { projectSlug, ...input }) => {
+        await checkTenantBoundary(projectSlug, "wiki page");
+        const pageInput = {
+          ...input,
+          folder: input.folder?.trim().toLowerCase() === "specs" ? "Specs" : input.folder
+        };
+        return await deliverBuiltIn(
+          c,
+          projectSlug,
+          "document",
+          { operation: "create", page: pageInput },
+          { mcpConfigPath: options.mcpConfigPath }
+        );
+      }
     ),
     [mcpToolNames.deleteTaskDependency]: makeTool(
       client,
       mcpToolNames.deleteTaskDependency,
       "TASK_DEPENDENCY_DELETE_FAILED",
       "Unable to delete task dependency.",
-      async (c, { projectSlug, ...input }) => await c.deleteTaskDependency(projectSlug, input)
+      async (c, { projectSlug, ...input }) => {
+        await checkTenantBoundary(projectSlug, "task dependency");
+        return await c.deleteTaskDependency(projectSlug, input);
+      }
     ),
     [mcpToolNames.createTask]: makeTool(
       client,
       mcpToolNames.createTask,
       "TASK_CREATE_FAILED",
       "Unable to create task.",
-      async (c, { projectSlug, ...input }) => await c.createTask(projectSlug, input)
+      async (c, { projectSlug, ...input }) => {
+        await checkTenantBoundary(projectSlug, "task");
+        return await c.createTask(projectSlug, input);
+      }
     ),
     [mcpToolNames.getProject]: makeTool(
       client,
       mcpToolNames.getProject,
       "PROJECT_READ_FAILED",
       "Unable to read project.",
-      async (c, { projectSlug }) => await c.getProject(projectSlug)
+      async (c, { projectSlug }) => {
+        await checkTenantBoundary(projectSlug, "project");
+        return await c.getProject(projectSlug);
+      }
     ),
     [mcpToolNames.getProjectSnapshot]: makeReadTool(
       client,
       mcpToolNames.getProjectSnapshot,
       "PROJECT_SNAPSHOT_READ_FAILED",
       "Unable to read project snapshot.",
-      async (c, { projectSlug }) => await c.getProjectSnapshot(projectSlug),
+      async (c, { projectSlug }) => {
+        await checkTenantBoundary(projectSlug, "project snapshot");
+        return await c.getProjectSnapshot(projectSlug);
+      },
       ({ projectSlug }) => projectSlug
     ),
     [mcpToolNames.getTask]: makeTool(
@@ -55554,42 +55789,61 @@ function createMrrlinTools(options) {
       mcpToolNames.getTask,
       "TASK_READ_FAILED",
       "Unable to read task.",
-      async (c, { projectSlug, taskId }) => await c.getTask(projectSlug, taskId)
+      async (c, { projectSlug, taskId }) => {
+        await checkTenantBoundary(projectSlug, "task");
+        return await c.getTask(projectSlug, taskId);
+      }
     ),
     [mcpToolNames.getWikiPage]: makeTool(
       client,
       mcpToolNames.getWikiPage,
       "WIKI_PAGE_READ_FAILED",
       "Unable to read wiki page.",
-      async (c, { projectSlug, pageId }) => await c.getWikiPage(projectSlug, pageId)
+      async (c, { projectSlug, pageId }) => {
+        await checkTenantBoundary(projectSlug, "wiki page");
+        return await c.getWikiPage(projectSlug, pageId);
+      }
     ),
     [mcpToolNames.listProjects]: makeTool(
       client,
       mcpToolNames.listProjects,
       "PROJECT_LIST_FAILED",
       "Unable to list projects.",
-      async (c) => await c.listProjects()
+      async (c) => {
+        const active = await resolveBoundSlug();
+        const projects = await c.listProjects();
+        return active ? projects.filter((p) => p.slug === active) : [];
+      }
     ),
     [mcpToolNames.listPlans]: makeTool(
       client,
       mcpToolNames.listPlans,
       "PLAN_LIST_FAILED",
       "Unable to list plans.",
-      async (c, { projectSlug }) => await c.listPlans(projectSlug)
+      async (c, { projectSlug }) => {
+        await checkTenantBoundary(projectSlug, "plans");
+        return await c.listPlans(projectSlug);
+      }
     ),
     [mcpToolNames.listTaskDependencies]: makeTool(
       client,
       mcpToolNames.listTaskDependencies,
       "TASK_DEPENDENCY_LIST_FAILED",
       "Unable to list task dependencies.",
-      async (c, { projectSlug }) => await c.listTaskDependencies(projectSlug)
+      async (c, { projectSlug }) => {
+        await checkTenantBoundary(projectSlug, "task dependencies");
+        return await c.listTaskDependencies(projectSlug);
+      }
     ),
     [mcpToolNames.listTaskEvents]: makeReadTool(
       client,
       mcpToolNames.listTaskEvents,
       "TASK_EVENT_LIST_FAILED",
       "Unable to list task events.",
-      async (c, { projectSlug, taskId }) => await c.listTaskEvents(projectSlug, taskId),
+      async (c, { projectSlug, taskId }) => {
+        await checkTenantBoundary(projectSlug, "task events");
+        return await c.listTaskEvents(projectSlug, taskId);
+      },
       ({ projectSlug }) => projectSlug,
       ({ taskId }) => taskId
     ),
@@ -55598,7 +55852,10 @@ function createMrrlinTools(options) {
       mcpToolNames.listTasks,
       "TASK_LIST_FAILED",
       "Unable to list tasks.",
-      async (c, { projectSlug, ...filters }) => await c.listTasks(projectSlug, filters),
+      async (c, { projectSlug, ...filters }) => {
+        await checkTenantBoundary(projectSlug, "tasks");
+        return await c.listTasks(projectSlug, filters);
+      },
       ({ projectSlug }) => projectSlug
     ),
     [mcpToolNames.listTaxonomy]: makeTool(
@@ -55606,14 +55863,20 @@ function createMrrlinTools(options) {
       mcpToolNames.listTaxonomy,
       "TAXONOMY_LIST_FAILED",
       "Unable to list taxonomy.",
-      async (c, { projectSlug }) => await c.listTaxonomy(projectSlug)
+      async (c, { projectSlug }) => {
+        await checkTenantBoundary(projectSlug, "taxonomy");
+        return await c.listTaxonomy(projectSlug);
+      }
     ),
     [mcpToolNames.listWikiPages]: makeReadTool(
       client,
       mcpToolNames.listWikiPages,
       "WIKI_PAGE_LIST_FAILED",
       "Unable to list wiki pages.",
-      async (c, { projectSlug, ...filters }) => await c.listWikiPages(projectSlug, filters),
+      async (c, { projectSlug, ...filters }) => {
+        await checkTenantBoundary(projectSlug, "wiki pages");
+        return await c.listWikiPages(projectSlug, filters);
+      },
       ({ projectSlug }) => projectSlug
     ),
     [mcpToolNames.searchWikiPages]: makeReadTool(
@@ -55621,7 +55884,10 @@ function createMrrlinTools(options) {
       mcpToolNames.searchWikiPages,
       "WIKI_PAGE_SEARCH_FAILED",
       "Unable to search wiki pages.",
-      async (c, { projectSlug, ...query }) => await c.searchWikiPages(projectSlug, query),
+      async (c, { projectSlug, ...query }) => {
+        await checkTenantBoundary(projectSlug, "wiki pages");
+        return await c.searchWikiPages(projectSlug, query);
+      },
       ({ projectSlug }) => projectSlug
     ),
     [mcpToolNames.searchKnowledge]: makeTool(
@@ -55636,49 +55902,70 @@ function createMrrlinTools(options) {
       mcpToolNames.updatePlan,
       "PLAN_UPDATE_FAILED",
       "Unable to update plan.",
-      async (c, { projectSlug, planId, ...patch }) => await c.updatePlan(projectSlug, planId, patch)
+      async (c, { projectSlug, planId, ...patch }) => {
+        await checkTenantBoundary(projectSlug, "plan");
+        return await c.updatePlan(projectSlug, planId, patch);
+      }
     ),
     [mcpToolNames.updateTask]: makeTool(
       client,
       mcpToolNames.updateTask,
       "TASK_UPDATE_FAILED",
       "Unable to update task.",
-      async (c, { projectSlug, taskId, ...patch }) => await c.updateTask(projectSlug, taskId, patch)
+      async (c, { projectSlug, taskId, ...patch }) => {
+        await checkTenantBoundary(projectSlug, "task");
+        return await c.updateTask(projectSlug, taskId, patch);
+      }
     ),
     [mcpToolNames.resetDirectorThread]: makeTool(
       client,
       mcpToolNames.resetDirectorThread,
       "DIRECTOR_THREAD_RESET_FAILED",
       "Unable to reset director thread.",
-      async (c, { projectSlug, taskId }) => await c.resetDirectorThread(projectSlug, taskId)
+      async (c, { projectSlug, taskId }) => {
+        await checkTenantBoundary(projectSlug, "director thread");
+        return await c.resetDirectorThread(projectSlug, taskId);
+      }
     ),
     [mcpToolNames.archiveTask]: makeTool(
       client,
       mcpToolNames.archiveTask,
       "TASK_ARCHIVE_FAILED",
       "Unable to archive task.",
-      async (c, { projectSlug, taskId }) => await c.archiveTask(projectSlug, taskId)
+      async (c, { projectSlug, taskId }) => {
+        await checkTenantBoundary(projectSlug, "task");
+        return await c.archiveTask(projectSlug, taskId);
+      }
     ),
     [mcpToolNames.unarchiveTask]: makeTool(
       client,
       mcpToolNames.unarchiveTask,
       "TASK_UNARCHIVE_FAILED",
       "Unable to unarchive task.",
-      async (c, { projectSlug, taskId }) => await c.unarchiveTask(projectSlug, taskId)
+      async (c, { projectSlug, taskId }) => {
+        await checkTenantBoundary(projectSlug, "task");
+        return await c.unarchiveTask(projectSlug, taskId);
+      }
     ),
     [mcpToolNames.takeOverTask]: makeTool(
       client,
       mcpToolNames.takeOverTask,
       "TASK_TAKE_OVER_FAILED",
       "Unable to take over task.",
-      async (c, { projectSlug, taskId, assignee }) => await c.takeOverTask(projectSlug, taskId, assignee)
+      async (c, { projectSlug, taskId, assignee }) => {
+        await checkTenantBoundary(projectSlug, "task");
+        return await c.takeOverTask(projectSlug, taskId, assignee);
+      }
     ),
     [mcpToolNames.closeTaskAsWontDo]: makeTool(
       client,
       mcpToolNames.closeTaskAsWontDo,
       "TASK_CLOSE_AS_WONT_DO_FAILED",
       "Unable to close task as won't-do.",
-      async (c, { projectSlug, taskId, reason }) => await c.closeTaskAsWontDo(projectSlug, taskId, reason)
+      async (c, { projectSlug, taskId, reason }) => {
+        await checkTenantBoundary(projectSlug, "task");
+        return await c.closeTaskAsWontDo(projectSlug, taskId, reason);
+      }
     ),
     // Task 8.2: routed through deliverBuiltIn, not c.updateWikiPage directly.
     [mcpToolNames.updateWikiPage]: makeTool(
@@ -55686,13 +55973,20 @@ function createMrrlinTools(options) {
       mcpToolNames.updateWikiPage,
       "WIKI_PAGE_UPDATE_FAILED",
       "Unable to update wiki page.",
-      async (c, { projectSlug, pageId, ...patch }) => await deliverBuiltIn(
-        c,
-        projectSlug,
-        "document",
-        { operation: "update", pageId, patch },
-        { mcpConfigPath: options.mcpConfigPath }
-      )
+      async (c, { projectSlug, pageId, ...patch }) => {
+        await checkTenantBoundary(projectSlug, "wiki page");
+        const patchInput = {
+          ...patch,
+          ...patch.folder !== void 0 ? { folder: patch.folder.trim().toLowerCase() === "specs" ? "Specs" : patch.folder } : {}
+        };
+        return await deliverBuiltIn(
+          c,
+          projectSlug,
+          "document",
+          { operation: "update", pageId, patch: patchInput },
+          { mcpConfigPath: options.mcpConfigPath }
+        );
+      }
     ),
     [mcpToolNames.markSpecReady]: makeTool(
       client,
@@ -55705,6 +55999,7 @@ function createMrrlinTools(options) {
       // only path to mark_spec_ready in the MVP. DB/API-side enforcement is a documented
       // follow-up (see Task D2d notes).
       async (c, { projectSlug, pageId, ready }) => {
+        await checkTenantBoundary(projectSlug, "spec");
         if (ready !== true) return await c.markSpecReady({ projectSlug, pageId, ready });
         const config2 = await c.getConsensusConfig(projectSlug);
         if (!config2.consensusEnabled) {
@@ -55758,6 +56053,7 @@ function createMrrlinTools(options) {
       "SPEC_CONSENSUS_FAILED",
       "Unable to enqueue spec consensus.",
       async (c, { projectSlug, pageId, extraHeads }) => {
+        await checkTenantBoundary(projectSlug, "spec consensus");
         const result = await enqueueAsyncTool(c, consensusDescriptor, { projectSlug, pageId, extraHeads });
         if (result.status === "queued") pingAsyncWorkerDispatch(projectSlug, result.jobId);
         return result;
@@ -55773,13 +56069,18 @@ function createMrrlinTools(options) {
       // tools.ts is an allowed provider mint site (eslint.config.mjs); decision-consensus.ts is
       // deliberately not, so the seat and the persisted provider are minted HERE and threaded down.
       // mintSeat stays a thunk so the anchor-only path never mints a seat it has no use for.
-      async (_c, input) => runDecisionConsensus(
-        { ...input, cwd: process.cwd() },
-        {
-          persistedProvider: getSelectedProvider(),
-          mintSeat: () => mintResolvedSeat(resolveProvider(process.env, getSelectedProvider()))
+      async (_c, input) => {
+        if (input.projectSlug) {
+          await checkTenantBoundary(input.projectSlug, "decision consensus");
         }
-      )
+        return runDecisionConsensus(
+          { ...input, cwd: process.cwd() },
+          {
+            persistedProvider: getSelectedProvider(),
+            mintSeat: () => mintResolvedSeat(resolveProvider(process.env, getSelectedProvider()))
+          }
+        );
+      }
     ),
     [mcpToolNames.runCodeReviewerGate]: makeTool(
       client,
@@ -55787,6 +56088,7 @@ function createMrrlinTools(options) {
       "CODE_GATE_FAILED",
       "Unable to run the code reviewer gate.",
       async (c, { projectSlug, baseRef, extraHeads }) => {
+        await checkTenantBoundary(projectSlug, "code reviewer gate");
         const deps = buildCodeGateDeps({
           client: c,
           projectSlug,
@@ -55831,7 +56133,10 @@ function createMrrlinTools(options) {
       mcpToolNames.listExecutionRuns,
       "EXECUTION_RUNS_LIST_FAILED",
       "Unable to list execution runs.",
-      async (c, { projectSlug, ...filters }) => await c.listExecutionRuns(projectSlug, filters)
+      async (c, { projectSlug, ...filters }) => {
+        await checkTenantBoundary(projectSlug, "execution runs");
+        return await c.listExecutionRuns(projectSlug, filters);
+      }
     ),
     [mcpToolNames.createExecutionRun]: makeTool(
       client,
@@ -55839,6 +56144,7 @@ function createMrrlinTools(options) {
       "EXECUTION_RUN_CREATE_FAILED",
       "Unable to create execution run.",
       async (c, { projectSlug, ...input }) => {
+        await checkTenantBoundary(projectSlug, "execution run");
         const run3 = await c.createExecutionRun(projectSlug, input);
         pingWorkerDispatch(projectSlug, run3.id);
         return run3;
@@ -55849,21 +56155,30 @@ function createMrrlinTools(options) {
       mcpToolNames.getExecutionRun,
       "EXECUTION_RUN_FETCH_FAILED",
       "Unable to fetch execution run.",
-      async (c, { projectSlug, runId }) => await c.getExecutionRun(projectSlug, runId)
+      async (c, { projectSlug, runId }) => {
+        await checkTenantBoundary(projectSlug, "execution run");
+        return await c.getExecutionRun(projectSlug, runId);
+      }
     ),
     [mcpToolNames.updateExecutionRun]: makeTool(
       client,
       mcpToolNames.updateExecutionRun,
       "EXECUTION_RUN_UPDATE_FAILED",
       "Unable to update execution run.",
-      async (c, { projectSlug, runId, ...patch }) => await c.updateExecutionRun(projectSlug, runId, patch)
+      async (c, { projectSlug, runId, ...patch }) => {
+        await checkTenantBoundary(projectSlug, "execution run");
+        return await c.updateExecutionRun(projectSlug, runId, patch);
+      }
     ),
     [mcpToolNames.listExecutionArtifacts]: makeReadTool(
       client,
       mcpToolNames.listExecutionArtifacts,
       "EXECUTION_ARTIFACTS_LIST_FAILED",
       "Unable to list execution artifacts.",
-      async (c, { projectSlug, runId }) => await c.listExecutionArtifacts(projectSlug, runId),
+      async (c, { projectSlug, runId }) => {
+        await checkTenantBoundary(projectSlug, "execution artifacts");
+        return await c.listExecutionArtifacts(projectSlug, runId);
+      },
       ({ projectSlug }) => projectSlug
     ),
     [mcpToolNames.appendExecutionArtifact]: makeTool(
@@ -55871,14 +56186,20 @@ function createMrrlinTools(options) {
       mcpToolNames.appendExecutionArtifact,
       "EXECUTION_ARTIFACT_APPEND_FAILED",
       "Unable to append execution artifact.",
-      async (c, { projectSlug, runId, ...input }) => await c.appendExecutionArtifact(projectSlug, runId, input)
+      async (c, { projectSlug, runId, ...input }) => {
+        await checkTenantBoundary(projectSlug, "execution artifact");
+        return await c.appendExecutionArtifact(projectSlug, runId, input);
+      }
     ),
     [mcpToolNames.updateTaskState]: makeTool(
       client,
       mcpToolNames.updateTaskState,
       "TASK_STATE_REPORT_FAILED",
       "Unable to record task state.",
-      async (c, { projectSlug, runId, ...report }) => await c.reportTaskState(projectSlug, runId, report)
+      async (c, { projectSlug, runId, ...report }) => {
+        await checkTenantBoundary(projectSlug, "task state");
+        return await c.reportTaskState(projectSlug, runId, report);
+      }
     ),
     [mcpToolNames.recordProducedUrl]: makeTool(
       client,
@@ -55886,6 +56207,7 @@ function createMrrlinTools(options) {
       "PRODUCED_URL_RECORD_FAILED",
       "Unable to record produced URL.",
       async (c, { projectSlug, runId, url: url2, label }) => {
+        await checkTenantBoundary(projectSlug, "produced url");
         const id = `EA-pu-${(0, import_node_crypto9.randomBytes)(4).toString("hex")}`;
         const payload = label ? { url: url2, label } : { url: url2 };
         return await c.appendExecutionArtifact(projectSlug, runId, {
@@ -55900,14 +56222,20 @@ function createMrrlinTools(options) {
       mcpToolNames.getProjectSchedulerPolicy,
       "SCHEDULER_POLICY_FETCH_FAILED",
       "Unable to fetch project scheduler policy.",
-      async (c, { projectSlug }) => await c.getProjectSchedulerPolicy(projectSlug)
+      async (c, { projectSlug }) => {
+        await checkTenantBoundary(projectSlug, "scheduler policy");
+        return await c.getProjectSchedulerPolicy(projectSlug);
+      }
     ),
     [mcpToolNames.upsertProjectSchedulerPolicy]: makeTool(
       client,
       mcpToolNames.upsertProjectSchedulerPolicy,
       "SCHEDULER_POLICY_UPSERT_FAILED",
       "Unable to upsert project scheduler policy.",
-      async (c, { projectSlug, ...input }) => await c.upsertProjectSchedulerPolicy(projectSlug, input)
+      async (c, { projectSlug, ...input }) => {
+        await checkTenantBoundary(projectSlug, "scheduler policy");
+        return await c.upsertProjectSchedulerPolicy(projectSlug, input);
+      }
     ),
     [mcpToolNames.getSchedulerPendingTasks]: makeTool(
       client,
@@ -55915,6 +56243,7 @@ function createMrrlinTools(options) {
       "SCHEDULER_PENDING_FETCH_FAILED",
       "Unable to fetch scheduler pending tasks.",
       async (c, { projectSlug }) => {
+        await checkTenantBoundary(projectSlug, "scheduler pending tasks");
         const result = await c.getSchedulerPendingTasks(projectSlug);
         return result;
       }
@@ -55924,28 +56253,40 @@ function createMrrlinTools(options) {
       mcpToolNames.wakeDirector,
       "DIRECTOR_WAKE_FAILED",
       "Unable to wake Director.",
-      async (c, { projectSlug, ...input }) => await c.wakeDirector(projectSlug, input)
+      async (c, { projectSlug, ...input }) => {
+        await checkTenantBoundary(projectSlug, "director wake");
+        return await c.wakeDirector(projectSlug, input);
+      }
     ),
     [mcpToolNames.listInboxItems]: makeTool(
       client,
       mcpToolNames.listInboxItems,
       "INBOX_ITEMS_LIST_FAILED",
       "Unable to list inbox items.",
-      async (c, { projectSlug, ...filters }) => await c.listInboxItems(projectSlug, filters)
+      async (c, { projectSlug, ...filters }) => {
+        await checkTenantBoundary(projectSlug, "inbox items");
+        return await c.listInboxItems(projectSlug, filters);
+      }
     ),
     [mcpToolNames.createInboxItem]: makeTool(
       client,
       mcpToolNames.createInboxItem,
       "INBOX_ITEM_CREATE_FAILED",
       "Unable to create inbox item.",
-      async (c, { projectSlug, ...input }) => await c.createInboxItem(projectSlug, input)
+      async (c, { projectSlug, ...input }) => {
+        await checkTenantBoundary(projectSlug, "inbox item");
+        return await c.createInboxItem(projectSlug, input);
+      }
     ),
     [mcpToolNames.decideInboxItem]: makeTool(
       client,
       mcpToolNames.decideInboxItem,
       "INBOX_ITEM_DECIDE_FAILED",
       "Unable to decide inbox item.",
-      async (c, { projectSlug, itemId, ...decision }) => await c.decideInboxItem(projectSlug, itemId, decision)
+      async (c, { projectSlug, itemId, ...decision }) => {
+        await checkTenantBoundary(projectSlug, "inbox item");
+        return await c.decideInboxItem(projectSlug, itemId, decision);
+      }
     ),
     [mcpToolNames.uploadArtifact]: makeTool(
       client,
@@ -55953,7 +56294,8 @@ function createMrrlinTools(options) {
       "ARTIFACT_FILE_UPLOAD_FAILED",
       "Unable to upload artifact file.",
       async (c, { projectSlug, path: filePath, class: artifactClass, taskId, runId, description }) => {
-        const extension2 = import_node_path16.default.extname(filePath).toLowerCase();
+        await checkTenantBoundary(projectSlug, "artifact upload");
+        const extension2 = import_node_path17.default.extname(filePath).toLowerCase();
         const contentType2 = ARTIFACT_EXTENSION_TYPES[extension2];
         if (!contentType2) {
           throw new McpToolCodedError(
@@ -55981,7 +56323,7 @@ function createMrrlinTools(options) {
             "Artifact exceeds 5MB; split or summarize instead."
           );
         }
-        const filename = import_node_path16.default.basename(filePath);
+        const filename = import_node_path17.default.basename(filePath);
         return deliverBuiltIn(
           c,
           projectSlug,
@@ -55997,13 +56339,14 @@ function createMrrlinTools(options) {
       "ARTIFACT_FILE_UPLOAD_FAILED",
       "Unable to deliver artifact file.",
       async (c, { projectSlug, filename, content, class: artifactClass, taskId, runId, description }) => {
+        await checkTenantBoundary(projectSlug, "artifact file");
         if (filename.includes("/") || filename.includes("\\") || filename.includes("..")) {
           throw new McpToolCodedError(
             "ARTIFACT_FILE_NAME_INVALID",
             `Invalid filename '${filename}'; provide a bare filename with no path separators or '..'.`
           );
         }
-        const extension2 = import_node_path16.default.extname(filename).toLowerCase();
+        const extension2 = import_node_path17.default.extname(filename).toLowerCase();
         const contentType2 = ARTIFACT_EXTENSION_TYPES[extension2];
         if (!contentType2) {
           throw new McpToolCodedError(
@@ -56038,35 +56381,50 @@ function createMrrlinTools(options) {
       mcpToolNames.listArtifactFiles,
       "ARTIFACT_FILE_LIST_FAILED",
       "Unable to list artifact files.",
-      async (c, { projectSlug, taskId, runId }) => await c.listArtifactFiles(projectSlug, { runId, taskId })
+      async (c, { projectSlug, taskId, runId }) => {
+        await checkTenantBoundary(projectSlug, "artifact files");
+        return await c.listArtifactFiles(projectSlug, { runId, taskId });
+      }
     ),
     [mcpToolNames.reclaimExecutionRunLease]: makeTool(
       client,
       mcpToolNames.reclaimExecutionRunLease,
       "EXECUTION_RUN_RECLAIM_FAILED",
       "Unable to reclaim the execution run lease.",
-      async (c, { projectSlug, runId, staleSeconds }) => await c.reclaimExecutionRunLease(projectSlug, runId, staleSeconds)
+      async (c, { projectSlug, runId, staleSeconds }) => {
+        await checkTenantBoundary(projectSlug, "execution run lease");
+        return await c.reclaimExecutionRunLease(projectSlug, runId, staleSeconds);
+      }
     ),
     [mcpToolNames.restartExecutionRun]: makeTool(
       client,
       mcpToolNames.restartExecutionRun,
       "EXECUTION_RUN_RESTART_FAILED",
       "Unable to restart the execution run.",
-      async (c, { projectSlug, runId, ...input }) => await c.restartExecutionRun(projectSlug, runId, input)
+      async (c, { projectSlug, runId, ...input }) => {
+        await checkTenantBoundary(projectSlug, "execution run restart");
+        return await c.restartExecutionRun(projectSlug, runId, input);
+      }
     ),
     [mcpToolNames.stopExecutionRun]: makeTool(
       client,
       mcpToolNames.stopExecutionRun,
       "EXECUTION_RUN_STOP_FAILED",
       "Unable to stop the execution run.",
-      async (c, { projectSlug, runId }) => await c.stopExecutionRun(projectSlug, runId)
+      async (c, { projectSlug, runId }) => {
+        await checkTenantBoundary(projectSlug, "execution run stop");
+        return await c.stopExecutionRun(projectSlug, runId);
+      }
     ),
     [mcpToolNames.resolveHandoff]: makeTool(
       client,
       mcpToolNames.resolveHandoff,
       "HANDOFF_RESOLVE_FAILED",
       "Unable to resolve handoff.",
-      async (c, { projectSlug, runId, ...input }) => await c.resolveHandoff(projectSlug, runId, input)
+      async (c, { projectSlug, runId, ...input }) => {
+        await checkTenantBoundary(projectSlug, "handoff resolve");
+        return await c.resolveHandoff(projectSlug, runId, input);
+      }
     ),
     [mcpToolNames.registerLocalCheckout]: makeTool(
       client,
@@ -56074,6 +56432,7 @@ function createMrrlinTools(options) {
       "LOCAL_CHECKOUT_REGISTER_FAILED",
       "Unable to register local checkout.",
       async (_c, { projectSlug, path: checkoutPath, repo }) => {
+        await checkTenantBoundary(projectSlug, "local checkout");
         const registry3 = new CheckoutRegistry(resolveStateDir());
         const result = registerCheckout(registry3, { projectSlug, path: checkoutPath, repo }, import_node_os9.default.hostname());
         if (!result.ok) {
@@ -56101,6 +56460,7 @@ function createMrrlinTools(options) {
             `Unrecognized mrrlin:// handle: ${handle}. Valid kinds: task | wiki | project/{slug}/snapshot | project/{slug}/tasks | run/{slug}/{runId} | run/{slug}/{runId}/artifacts.`
           );
         }
+        await checkTenantBoundary(parsed.projectSlug, "context handle");
         return await dispatchHandle(c, parsed);
       }
     )
@@ -56175,20 +56535,20 @@ function allAgyGrantStrings() {
 }
 function resolveAgyConfigPath(options) {
   if (options.agyConfigPath) return options.agyConfigPath;
-  return import_node_path17.default.join(options.homeDir ?? import_node_os10.default.homedir(), ".gemini", "config", "mcp_config.json");
+  return import_node_path18.default.join(options.homeDir ?? import_node_os10.default.homedir(), ".gemini", "config", "mcp_config.json");
 }
 function resolveConfigJsonPath(options) {
   if (options.configJsonPath) return options.configJsonPath;
-  return import_node_path17.default.join(options.homeDir ?? import_node_os10.default.homedir(), ".gemini", "config", "config.json");
+  return import_node_path18.default.join(options.homeDir ?? import_node_os10.default.homedir(), ".gemini", "config", "config.json");
 }
 async function detectInstallDistribution3(options) {
   if (options.distribution && options.distribution !== "auto") return options.distribution;
-  let current2 = import_node_path17.default.dirname(options.binPath);
+  let current2 = import_node_path18.default.dirname(options.binPath);
   while (true) {
-    if (await pathExists4(import_node_path17.default.join(current2, "pnpm-workspace.yaml"))) {
+    if (await pathExists4(import_node_path18.default.join(current2, "pnpm-workspace.yaml"))) {
       return "local";
     }
-    const parent = import_node_path17.default.dirname(current2);
+    const parent = import_node_path18.default.dirname(current2);
     if (parent === current2) break;
     current2 = parent;
   }
@@ -56230,8 +56590,8 @@ async function installAgy(options) {
   const configJsonPath = resolveConfigJsonPath(options);
   const distribution = await detectInstallDistribution3(options);
   const entries = managedEntries2(options, distribution);
-  await import_promises9.default.mkdir(import_node_path17.default.dirname(configPath), { recursive: true });
-  await import_promises9.default.mkdir(import_node_path17.default.dirname(configJsonPath), { recursive: true });
+  await import_promises9.default.mkdir(import_node_path18.default.dirname(configPath), { recursive: true });
+  await import_promises9.default.mkdir(import_node_path18.default.dirname(configJsonPath), { recursive: true });
   let action = "noop";
   const preservedEnvBlocks = [];
   if (!await pathExists4(configPath)) {
@@ -56349,12 +56709,12 @@ async function installAgy(options) {
 var import_promises10 = require("node:fs/promises");
 var import_node_fs10 = require("node:fs");
 var import_node_os11 = __toESM(require("node:os"), 1);
-var import_node_path18 = __toESM(require("node:path"), 1);
+var import_node_path19 = __toESM(require("node:path"), 1);
 var import_semver2 = __toESM(require_semver2(), 1);
 var toml3 = __toESM(require_toml(), 1);
 
 // src/agent-version.ts
-var import_node_child_process12 = require("node:child_process");
+var import_node_child_process13 = require("node:child_process");
 var import_semver = __toESM(require_semver2(), 1);
 var SEMVER_RE = /\b\d+\.\d+\.\d+(?:-[A-Za-z0-9.-]+)?\b/;
 var CODEX_PACKAGE = process.env.MRRLIN_CODEX_PACKAGE?.trim() || "@openai/codex";
@@ -56364,7 +56724,7 @@ function parseCodexVersion(raw) {
   return m ? m[0] : null;
 }
 var defaultRun = (args) => {
-  const r = (0, import_node_child_process12.spawnSync)("codex", args, { encoding: "utf8", timeout: 8e3, shell: true });
+  const r = (0, import_node_child_process13.spawnSync)("codex", args, { encoding: "utf8", timeout: 8e3, shell: true });
   return { status: r.status, stdout: r.stdout ?? "", stderr: r.stderr ?? "" };
 };
 function getInstalledAgentVersion(provider, run3) {
@@ -56440,12 +56800,13 @@ function startCodexProbe(deps = {}) {
 // src/provider-readiness.ts
 function resolveCodexHome2(opts) {
   if (opts.codexHome) return opts.codexHome;
+  if (opts.homeDir) return import_node_path19.default.join(opts.homeDir, ".codex");
   if (process.env.CODEX_HOME) return process.env.CODEX_HOME;
-  return import_node_path18.default.join(opts.homeDir ?? import_node_os11.default.homedir(), ".codex");
+  return import_node_path19.default.join(import_node_os11.default.homedir(), ".codex");
 }
 function resolveClaudeConfigPath2(opts) {
   if (opts.claudeConfigPath) return opts.claudeConfigPath;
-  return import_node_path18.default.join(opts.homeDir ?? import_node_os11.default.homedir(), ".claude.json");
+  return import_node_path19.default.join(opts.homeDir ?? import_node_os11.default.homedir(), ".claude.json");
 }
 function isExternalAgentsWrapper(table) {
   if (!table) return false;
@@ -56514,7 +56875,7 @@ async function verifyProviderReadiness(provider, run3, opts = {}) {
     if (!checks.version) details.push(`version: ${version2 ?? "unparseable"} is below the required 2.1.232`);
   }
   if (provider === "codex") {
-    const authPath = import_node_path18.default.join(resolveCodexHome2(opts), "auth.json");
+    const authPath = import_node_path19.default.join(resolveCodexHome2(opts), "auth.json");
     try {
       await (0, import_promises10.access)(authPath, import_node_fs10.constants.F_OK);
       checks.auth = true;
@@ -56531,7 +56892,7 @@ async function verifyProviderReadiness(provider, run3, opts = {}) {
     if (!checks.auth) details.push("auth: `claude auth status` failed");
   }
   if (provider === "codex") {
-    const configPath = import_node_path18.default.join(resolveCodexHome2(opts), "config.toml");
+    const configPath = import_node_path19.default.join(resolveCodexHome2(opts), "config.toml");
     try {
       const raw = await (0, import_promises10.readFile)(configPath, "utf8");
       const parsed = toml3.parse(raw);
@@ -56585,8 +56946,8 @@ async function verifyProviderReadiness(provider, run3, opts = {}) {
 var import_node_fs23 = __toESM(require("node:fs"), 1);
 var import_node_http = __toESM(require("node:http"), 1);
 var import_node_os17 = __toESM(require("node:os"), 1);
-var import_node_path37 = __toESM(require("node:path"), 1);
-var import_node_child_process20 = require("node:child_process");
+var import_node_path38 = __toESM(require("node:path"), 1);
+var import_node_child_process21 = require("node:child_process");
 var import_node_crypto15 = __toESM(require("node:crypto"), 1);
 
 // src/turn-replay-buffer.ts
@@ -57131,17 +57492,17 @@ function createTurnLock() {
 }
 
 // src/self-update.ts
-var import_node_child_process14 = require("node:child_process");
+var import_node_child_process15 = require("node:child_process");
 var import_node_crypto10 = require("node:crypto");
 var import_node_fs12 = require("node:fs");
-var import_node_path20 = __toESM(require("node:path"), 1);
+var import_node_path21 = __toESM(require("node:path"), 1);
 var import_semver3 = __toESM(require_semver2(), 1);
 
 // src/codex-auth-preflight.ts
-var import_node_child_process13 = require("node:child_process");
+var import_node_child_process14 = require("node:child_process");
 var import_node_fs11 = require("node:fs");
 var import_node_os12 = __toESM(require("node:os"), 1);
-var import_node_path19 = __toESM(require("node:path"), 1);
+var import_node_path20 = __toESM(require("node:path"), 1);
 var DEFAULT_CODEX_AUTH_MIN_TTL_SECONDS = 15 * 60;
 var DEFAULT_CODEX_AUTH_SMOKE_TIMEOUT_MS = 2e4;
 var DEFAULT_CODEX_AUTH_SMOKE_MODEL = "gpt-5.4-mini";
@@ -57160,7 +57521,7 @@ function codexAuthSmokeTimeoutMs(env = process.env) {
 function resolveCodexAuthPath(opts = {}) {
   const env = opts.env ?? process.env;
   const codexHome = env.CODEX_HOME?.trim();
-  return import_node_path19.default.join(codexHome || import_node_path19.default.join(opts.homeDir ?? import_node_os12.default.homedir(), ".codex"), "auth.json");
+  return import_node_path20.default.join(codexHome || import_node_path20.default.join(opts.homeDir ?? import_node_os12.default.homedir(), ".codex"), "auth.json");
 }
 function decodeJwtExpMs(token) {
   const parts = token.split(".");
@@ -57229,7 +57590,7 @@ function runCodexAuthRefreshSmokeForBridgeUpdate(opts = {}) {
     CODEX_AUTH_SMOKE_PROMPT
   ];
   const command = commandForSmoke(executable, model);
-  const execFileSync5 = opts.execFileSyncImpl ?? import_node_child_process13.execFileSync;
+  const execFileSync5 = opts.execFileSyncImpl ?? import_node_child_process14.execFileSync;
   try {
     execFileSync5(executable, args, {
       cwd,
@@ -57380,12 +57741,12 @@ function inspectCodexAuthForBridgeUpdate(opts = {}) {
 var BIN_NAME = "mrrlin-mcp";
 var SELF_UPDATE_AUTH_PREFLIGHT_OFFER_PREFIX = "[bridge:update:auth-preflight]";
 function resolveBinPath(opts) {
-  if (opts.argv1 && import_node_path20.default.basename(opts.argv1).includes("mrrlin")) {
+  if (opts.argv1 && import_node_path21.default.basename(opts.argv1).includes("mrrlin")) {
     return { path: opts.argv1, source: "argv" };
   }
   const whichSync = opts.whichSync ?? ((name) => {
     try {
-      return (0, import_node_child_process14.execFileSync)("which", [name], { encoding: "utf8", timeout: 3e3 }).trim() || null;
+      return (0, import_node_child_process15.execFileSync)("which", [name], { encoding: "utf8", timeout: 3e3 }).trim() || null;
     } catch {
       return null;
     }
@@ -57396,9 +57757,9 @@ function resolveBinPath(opts) {
     return { path: resolved, source: "which" };
   }
   const envPath = (opts.env ?? process.env).PATH ?? "";
-  for (const dir of envPath.split(import_node_path20.default.delimiter)) {
+  for (const dir of envPath.split(import_node_path21.default.delimiter)) {
     if (!dir) continue;
-    const candidate = import_node_path20.default.join(dir, BIN_NAME);
+    const candidate = import_node_path21.default.join(dir, BIN_NAME);
     if (existsSync5(candidate)) {
       return { path: candidate, source: "path-walk" };
     }
@@ -57716,17 +58077,17 @@ Do NOT derail the current task - if the operator has an in-flight question, answ
 }
 
 // src/_generated/version.ts
-var PKG_VERSION = "0.4.92";
+var PKG_VERSION = "0.4.95";
 
 // src/api-base-url-migrate.ts
 var import_node_fs13 = __toESM(require("node:fs"), 1);
 var import_node_os13 = __toESM(require("node:os"), 1);
-var import_node_path22 = __toESM(require("node:path"), 1);
+var import_node_path23 = __toESM(require("node:path"), 1);
 
 // src/service-paths.ts
-var import_node_path21 = __toESM(require("node:path"), 1);
+var import_node_path22 = __toESM(require("node:path"), 1);
 function isWorktreePath(p) {
-  const norm = import_node_path21.default.normalize(p).split(import_node_path21.default.sep).join("/");
+  const norm = import_node_path22.default.normalize(p).split(import_node_path22.default.sep).join("/");
   return norm.includes("/.claude/worktrees/");
 }
 function resolveServiceCwd(opts) {
@@ -57801,7 +58162,7 @@ function defaultDeps(deps) {
   const home = deps.home ?? process.env.HOME ?? import_node_os13.default.homedir();
   return {
     home,
-    codexHome: deps.codexHome ?? process.env.CODEX_HOME?.trim() ?? import_node_path22.default.join(home, ".codex"),
+    codexHome: deps.codexHome ?? process.env.CODEX_HOME?.trim() ?? import_node_path23.default.join(home, ".codex"),
     readFile: deps.readFile ?? ((p) => import_node_fs13.default.readFileSync(p, "utf8")),
     // Temp-file + atomic rename so a concurrent `serve` and `director-bridge` startup can never
     // interleave partial writes into a config the next start has to parse. Note this normalizes the
@@ -57850,7 +58211,7 @@ function backupOnce(file2, text, deps) {
 }
 function migrateEcosystemConfig(deps = {}) {
   const d = defaultDeps(deps);
-  const file2 = import_node_path22.default.join(d.home, ".mrrlin", "ecosystem.config.cjs");
+  const file2 = import_node_path23.default.join(d.home, ".mrrlin", "ecosystem.config.cjs");
   if (!d.exists(file2)) return { file: file2, status: "absent" };
   const text = d.readFile(file2);
   if (!findRetiredHost(text) && !hasLiveLegacyStagingFlag(text, "js"))
@@ -58000,7 +58361,7 @@ ${envLines}
 }
 function migrateCodexConfig(deps = {}) {
   const d = defaultDeps(deps);
-  const file2 = import_node_path22.default.join(d.codexHome, "config.toml");
+  const file2 = import_node_path23.default.join(d.codexHome, "config.toml");
   if (!d.exists(file2)) return { file: file2, status: "absent" };
   const text = d.readFile(file2);
   const host = findRetiredHost(text);
@@ -58086,7 +58447,7 @@ $1`
 }
 function migrateClaudeConfig(deps = {}) {
   const d = defaultDeps(deps);
-  const file2 = import_node_path22.default.join(d.home, ".claude.json");
+  const file2 = import_node_path23.default.join(d.home, ".claude.json");
   if (!d.exists(file2)) return { file: file2, status: "absent" };
   const text = d.readFile(file2);
   let parsed;
@@ -58136,9 +58497,9 @@ function migrateRetiredApiBaseUrls(deps = {}) {
   const d = defaultDeps(deps);
   const results = [];
   const steps = [
-    { run: migrateEcosystemConfig, file: import_node_path22.default.join(d.home, ".mrrlin", "ecosystem.config.cjs") },
-    { run: migrateCodexConfig, file: import_node_path22.default.join(d.codexHome, "config.toml") },
-    { run: migrateClaudeConfig, file: import_node_path22.default.join(d.home, ".claude.json") }
+    { run: migrateEcosystemConfig, file: import_node_path23.default.join(d.home, ".mrrlin", "ecosystem.config.cjs") },
+    { run: migrateCodexConfig, file: import_node_path23.default.join(d.codexHome, "config.toml") },
+    { run: migrateClaudeConfig, file: import_node_path23.default.join(d.home, ".claude.json") }
   ];
   for (const step of steps) {
     try {
@@ -58165,7 +58526,7 @@ function migrateRetiredApiBaseUrls(deps = {}) {
 
 // src/bridge-health.ts
 var import_node_fs14 = require("node:fs");
-var import_node_path23 = __toESM(require("node:path"), 1);
+var import_node_path24 = __toESM(require("node:path"), 1);
 var SENTINEL_FILE_NAME = "bridge-health-circuit-breaker.json";
 var CRASH_WINDOW_MS = 60 * 60 * 1e3;
 var MAX_CRASHES_PER_WINDOW = 3;
@@ -58177,7 +58538,7 @@ function isCrashSentinel(value) {
   return typeof candidate.crashCount === "number" && Number.isInteger(candidate.crashCount) && candidate.crashCount >= 0 && typeof candidate.windowStartedAt === "string";
 }
 async function readCrashSentinel(stateDir, now = Date.now) {
-  const sentinelPath = import_node_path23.default.join(stateDir, SENTINEL_FILE_NAME);
+  const sentinelPath = import_node_path24.default.join(stateDir, SENTINEL_FILE_NAME);
   try {
     const raw = await import_node_fs14.promises.readFile(sentinelPath, "utf8");
     const parsed = JSON.parse(raw);
@@ -58188,7 +58549,7 @@ async function readCrashSentinel(stateDir, now = Date.now) {
 }
 async function writeCrashSentinel(stateDir, sentinel) {
   await import_node_fs14.promises.mkdir(stateDir, { recursive: true });
-  const sentinelPath = import_node_path23.default.join(stateDir, SENTINEL_FILE_NAME);
+  const sentinelPath = import_node_path24.default.join(stateDir, SENTINEL_FILE_NAME);
   const tmpPath = `${sentinelPath}.tmp-${process.pid}-${Math.random().toString(36).slice(2)}`;
   await import_node_fs14.promises.writeFile(tmpPath, JSON.stringify(sentinel), "utf8");
   await import_node_fs14.promises.rename(tmpPath, sentinelPath);
@@ -58518,12 +58879,12 @@ function startSchedulerTickLoop(deps) {
 
 // src/retention/pruner.ts
 var import_promises11 = require("node:fs/promises");
-var import_node_path24 = __toESM(require("node:path"), 1);
+var import_node_path25 = __toESM(require("node:path"), 1);
 function protectedDayFloor(protectedSinceMs) {
   return new Date(protectedSinceMs).toISOString().slice(0, 10);
 }
 async function prune(stateDir, bounds) {
-  const logsDir = import_node_path24.default.join(stateDir, "logs");
+  const logsDir = import_node_path25.default.join(stateDir, "logs");
   let entries;
   try {
     entries = await (0, import_promises11.readdir)(logsDir);
@@ -58539,7 +58900,7 @@ async function prune(stateDir, bounds) {
   for (const entry of entries) {
     const m = bridgeRe.exec(entry);
     if (!m?.[1]) continue;
-    const fullPath = import_node_path24.default.join(logsDir, entry);
+    const fullPath = import_node_path25.default.join(logsDir, entry);
     const s = await (0, import_promises11.stat)(fullPath);
     files.push({ day: m[1], size: s.size, fullPath });
   }
@@ -58548,7 +58909,7 @@ async function prune(stateDir, bounds) {
   const reasonByDay = {};
   let bytesRemoved = 0;
   async function isDaySafeToDelete(day) {
-    const telemetryDir = import_node_path24.default.join(stateDir, "telemetry");
+    const telemetryDir = import_node_path25.default.join(stateDir, "telemetry");
     let telemetryEntries;
     try {
       telemetryEntries = await (0, import_promises11.readdir)(telemetryDir);
@@ -58564,7 +58925,7 @@ async function prune(stateDir, bounds) {
     }
     if (projectSlugs.length === 0) return true;
     for (const slug of projectSlugs) {
-      const markerPath = import_node_path24.default.join(telemetryDir, `.processed-${slug}-${day}`);
+      const markerPath = import_node_path25.default.join(telemetryDir, `.processed-${slug}-${day}`);
       try {
         await (0, import_promises11.stat)(markerPath);
       } catch (err) {
@@ -58614,7 +58975,7 @@ async function prune(stateDir, bounds) {
   const budgetOvershootBytes = Math.max(0, totalSize2 - budgetBytes);
   await emitPruneLog(stateDir, daysRemoved, reasonByDay, bytesRemoved, oldestDayRemaining);
   if (daysRemoved.length > 0) {
-    const sessionsPath = import_node_path24.default.join(logsDir, ".sessions.json");
+    const sessionsPath = import_node_path25.default.join(logsDir, ".sessions.json");
     let sessionsObj = {};
     let fileExists = true;
     try {
@@ -58636,8 +58997,8 @@ async function prune(stateDir, bounds) {
   return { daysRemoved, reasonByDay, bytesRemoved, oldestDayRemaining, budgetOvershootBytes };
 }
 async function emitPruneLog(stateDir, daysRemoved, reasonByDay, bytesRemoved, oldestDayRemaining) {
-  const logsDir = import_node_path24.default.join(stateDir, "logs");
-  const logPath = import_node_path24.default.join(logsDir, ".pruned.jsonl");
+  const logsDir = import_node_path25.default.join(stateDir, "logs");
+  const logPath = import_node_path25.default.join(logsDir, ".pruned.jsonl");
   await (0, import_promises11.mkdir)(logsDir, { recursive: true });
   const record2 = { ts: Date.now(), dir: "logs", daysRemoved, reasonByDay, bytesRemoved, oldestDayRemaining };
   await (0, import_promises11.appendFile)(logPath, `${JSON.stringify(record2)}
@@ -58647,7 +59008,7 @@ async function emitPruneLog(stateDir, daysRemoved, reasonByDay, bytesRemoved, ol
 // src/telemetry/turn-aggregator.ts
 var import_node_crypto11 = require("node:crypto");
 var import_promises12 = require("node:fs/promises");
-var import_node_path25 = require("node:path");
+var import_node_path26 = require("node:path");
 var BRIDGE_FILE_RE = /^bridge-(\d{4}-\d{2}-\d{2})\.jsonl$/;
 var PLUMBING_COUNTER_KEY = {
   socket_close: "socketCloses",
@@ -58676,7 +59037,7 @@ function inheritSlug(seeds, index) {
   return (preceding ?? following)?.slug;
 }
 async function foldClosedDays(stateDir, today) {
-  const logsDir = (0, import_node_path25.join)(stateDir, "logs");
+  const logsDir = (0, import_node_path26.join)(stateDir, "logs");
   let entries;
   try {
     entries = await (0, import_promises12.readdir)(logsDir);
@@ -58688,7 +59049,7 @@ async function foldClosedDays(stateDir, today) {
     if (!m) continue;
     const day = m[1];
     if (day === today) continue;
-    const raw = await (0, import_promises12.readFile)((0, import_node_path25.join)(logsDir, entry), "utf8");
+    const raw = await (0, import_promises12.readFile)((0, import_node_path26.join)(logsDir, entry), "utf8");
     const groups = /* @__PURE__ */ new Map();
     let groupCounter = 0;
     for (const line of raw.split("\n")) {
@@ -58799,10 +59160,10 @@ async function foldClosedDays(stateDir, today) {
       rowsByProject.set(slug, rows);
     }
     if (rowsByProject.size === 0) continue;
-    const telemetryDir = (0, import_node_path25.join)(stateDir, "telemetry");
+    const telemetryDir = (0, import_node_path26.join)(stateDir, "telemetry");
     await (0, import_promises12.mkdir)(telemetryDir, { recursive: true });
     for (const [slug, rows] of rowsByProject) {
-      const finalPath = (0, import_node_path25.join)(telemetryDir, `rows-${slug}-${day}.jsonl`);
+      const finalPath = (0, import_node_path26.join)(telemetryDir, `rows-${slug}-${day}.jsonl`);
       const tmpPath = `${finalPath}.tmp-${process.pid}-${(0, import_node_crypto11.randomBytes)(6).toString("hex")}`;
       try {
         await (0, import_promises12.writeFile)(tmpPath, rows.map((r) => JSON.stringify(r)).join("\n") + "\n", "utf8");
@@ -58817,27 +59178,27 @@ async function foldClosedDays(stateDir, today) {
 
 // src/telemetry/daily-uploader.ts
 var import_promises13 = require("node:fs/promises");
-var import_node_path27 = require("node:path");
+var import_node_path28 = require("node:path");
 
 // src/telemetry/installation-id.ts
 var import_node_crypto12 = require("node:crypto");
 var import_node_fs15 = require("node:fs");
-var import_node_path26 = require("node:path");
+var import_node_path27 = require("node:path");
 var FILE_NAME = "installation-id";
 var UUID = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/;
 var cache = /* @__PURE__ */ new Map();
 function resolveInstallationId(stateDir) {
   const cached2 = cache.get(stateDir);
   if (cached2 !== void 0) return cached2;
-  const path28 = (0, import_node_path26.join)(stateDir, FILE_NAME);
+  const path29 = (0, import_node_path27.join)(stateDir, FILE_NAME);
   let id;
   try {
-    id = (0, import_node_fs15.readFileSync)(path28, "utf8").trim();
+    id = (0, import_node_fs15.readFileSync)(path29, "utf8").trim();
     if (!UUID.test(id)) throw new Error("unusable");
   } catch {
     id = (0, import_node_crypto12.randomUUID)();
-    (0, import_node_fs15.mkdirSync)((0, import_node_path26.dirname)(path28), { recursive: true });
-    (0, import_node_fs15.writeFileSync)(path28, `${id}
+    (0, import_node_fs15.mkdirSync)((0, import_node_path27.dirname)(path29), { recursive: true });
+    (0, import_node_fs15.writeFileSync)(path29, `${id}
 `, "utf8");
   }
   cache.set(stateDir, id);
@@ -58854,7 +59215,7 @@ function truncateCause(err) {
   return `${message.slice(0, MAX_CAUSE_CHARS - 3)}...`;
 }
 async function uploadPendingDays(stateDir, client, bridgeHealth, gateCtx) {
-  const telemetryDir = (0, import_node_path27.join)(stateDir, "telemetry");
+  const telemetryDir = (0, import_node_path28.join)(stateDir, "telemetry");
   let files;
   try {
     files = await (0, import_promises13.readdir)(telemetryDir);
@@ -58870,14 +59231,14 @@ async function uploadPendingDays(stateDir, client, bridgeHealth, gateCtx) {
     const [, projectSlug, day] = match;
     const key = `${projectSlug}\0${day}`;
     const entry = discovered.get(key) ?? { projectSlug, day, rowsPath: null };
-    if (rowsMatch) entry.rowsPath = (0, import_node_path27.join)(telemetryDir, file2);
+    if (rowsMatch) entry.rowsPath = (0, import_node_path28.join)(telemetryDir, file2);
     discovered.set(key, entry);
   }
   const today = telemetryDay();
   const pending = [];
   const deferred = [];
   for (const { projectSlug, day, rowsPath } of discovered.values()) {
-    const markerPath = (0, import_node_path27.join)(telemetryDir, `.processed-${projectSlug}-${day}`);
+    const markerPath = (0, import_node_path28.join)(telemetryDir, `.processed-${projectSlug}-${day}`);
     if (rowsPath === null && day >= today) {
       try {
         await (0, import_promises13.access)(markerPath);
@@ -58897,7 +59258,7 @@ async function uploadPendingDays(stateDir, client, bridgeHealth, gateCtx) {
   const fullUnprocessed = [...pending.map((p) => ({ projectSlug: p.projectSlug, day: p.day })), ...deferred];
   pending.sort((a, b) => a.day.localeCompare(b.day));
   for (const cur of pending) {
-    const failurePath = (0, import_node_path27.join)(telemetryDir, `.failed-${cur.projectSlug}-${cur.day}.json`);
+    const failurePath = (0, import_node_path28.join)(telemetryDir, `.failed-${cur.projectSlug}-${cur.day}.json`);
     let failureState = null;
     try {
       const data = await (0, import_promises13.readFile)(failurePath, "utf8");
@@ -58931,7 +59292,7 @@ async function uploadPendingDays(stateDir, client, bridgeHealth, gateCtx) {
       }
       const gateCalls = [];
       try {
-        const rawGate = await (0, import_promises13.readFile)((0, import_node_path27.join)(telemetryDir, gateFileName(cur.projectSlug, cur.day)), "utf8");
+        const rawGate = await (0, import_promises13.readFile)((0, import_node_path28.join)(telemetryDir, gateFileName(cur.projectSlug, cur.day)), "utf8");
         for (const line of rawGate.split("\n")) {
           if (!line.trim()) continue;
           try {
@@ -59133,7 +59494,7 @@ async function collectAgentPoolSnapshot(deps) {
 }
 
 // src/external-agents-spawn.ts
-var import_node_child_process15 = require("node:child_process");
+var import_node_child_process16 = require("node:child_process");
 function runExternalAgentsCli(args, opts) {
   let command;
   let prefixArgs;
@@ -59164,7 +59525,7 @@ function runExternalAgentsCli(args, opts) {
     };
     let spawned;
     try {
-      spawned = (0, import_node_child_process15.spawn)(command, [...prefixArgs, ...args], { stdio: stdioConfig });
+      spawned = (0, import_node_child_process16.spawn)(command, [...prefixArgs, ...args], { stdio: stdioConfig });
     } catch {
       done(1);
       return;
@@ -59276,14 +59637,14 @@ function startAgentPoolLoop(deps) {
 }
 
 // src/provider-readiness-loop.ts
-var import_node_child_process16 = require("node:child_process");
+var import_node_child_process17 = require("node:child_process");
 var DEFAULT_INTERVAL_MS3 = 6e4;
 function providerReadinessLoopDisabled(env = process.env) {
   return env["MRRLIN_BRIDGE_PROVIDER_READINESS_DISABLE"] === "1";
 }
 function defaultRunnerFor(command) {
   return (args) => {
-    const r = (0, import_node_child_process16.spawnSync)(command, args, { encoding: "utf8", timeout: 8e3 });
+    const r = (0, import_node_child_process17.spawnSync)(command, args, { encoding: "utf8", timeout: 8e3 });
     return { status: r.status, stdout: r.stdout ?? "", stderr: r.stderr ?? "" };
   };
 }
@@ -59326,9 +59687,9 @@ function startProviderReadinessLoop(deps) {
 }
 
 // src/execution-consumer.ts
-var import_node_child_process18 = require("node:child_process");
+var import_node_child_process19 = require("node:child_process");
 var import_node_crypto13 = __toESM(require("node:crypto"), 1);
-var import_node_path30 = __toESM(require("node:path"), 1);
+var import_node_path31 = __toESM(require("node:path"), 1);
 var import_node_util2 = require("node:util");
 
 // src/notify-templates.ts
@@ -60182,17 +60543,17 @@ async function awaitTurnWithDeadline(opts) {
 }
 
 // src/worktree.ts
-var import_node_child_process17 = require("node:child_process");
+var import_node_child_process18 = require("node:child_process");
 var import_node_fs17 = require("node:fs");
-var import_node_path29 = require("node:path");
+var import_node_path30 = require("node:path");
 
 // src/checkout-lock.ts
 var import_node_fs16 = require("node:fs");
-var import_node_path28 = require("node:path");
+var import_node_path29 = require("node:path");
 var import_proper_lockfile = __toESM(require_proper_lockfile(), 1);
 async function withCheckoutLock(locksDir, slug, fn) {
   (0, import_node_fs16.mkdirSync)(locksDir, { recursive: true });
-  const target = (0, import_node_path28.join)(locksDir, `${slug}.lock`);
+  const target = (0, import_node_path29.join)(locksDir, `${slug}.lock`);
   if (!(0, import_node_fs16.existsSync)(target)) (0, import_node_fs16.writeFileSync)(target, "");
   const release = await import_proper_lockfile.default.lock(target, {
     retries: { retries: 600, factor: 1, minTimeout: 100, maxTimeout: 100 },
@@ -60209,16 +60570,16 @@ async function withCheckoutLock(locksDir, slug, fn) {
 function worktreeBranch(runId) {
   return `mrrlin/run-${runId}`;
 }
-var defaultGitExec = (args, env) => (0, import_node_child_process17.execFileSync)("git", args, { encoding: "utf8", timeout: 3e4, env });
+var defaultGitExec = (args, env) => (0, import_node_child_process18.execFileSync)("git", args, { encoding: "utf8", timeout: 3e4, env });
 function git(checkout, args) {
-  return (0, import_node_child_process17.execFileSync)("git", ["-C", checkout, ...args], {
+  return (0, import_node_child_process18.execFileSync)("git", ["-C", checkout, ...args], {
     encoding: "utf8",
     timeout: 3e4,
     env: { ...process.env, GIT_TERMINAL_PROMPT: "0" }
   });
 }
 async function createRunWorktree(opts) {
-  const worktreePath = (0, import_node_path29.join)(opts.worktreeRoot, opts.slug, opts.runId);
+  const worktreePath = (0, import_node_path30.join)(opts.worktreeRoot, opts.slug, opts.runId);
   await withCheckoutLock(opts.locksDir, opts.slug, async () => {
     (0, import_node_fs17.mkdirSync)(opts.worktreeRoot, { recursive: true });
     try {
@@ -60331,17 +60692,28 @@ async function sweepOrphanWorktrees(opts) {
   const reaped = [];
   const ownedPrefix = (() => {
     try {
-      return (0, import_node_fs17.realpathSync)(opts.worktreeRoot);
+      return (import_node_fs17.realpathSync.native ?? import_node_fs17.realpathSync)(opts.worktreeRoot);
     } catch {
       return opts.worktreeRoot;
     }
-  })() + import_node_path29.sep + opts.slug + import_node_path29.sep;
+  })() + import_node_path30.sep + opts.slug + import_node_path30.sep;
   await withCheckoutLock(opts.locksDir, opts.slug, async () => {
     const listing = git(opts.checkout, ["worktree", "list", "--porcelain"]);
     for (const block of listing.split("\n\n")) {
       const m = /^worktree (.+)$/m.exec(block);
-      const wt = m?.[1];
-      if (wt && wt.startsWith(ownedPrefix) && opts.isReapable(wt)) {
+      const wt = m?.[1]?.trim();
+      if (!wt) continue;
+      const canonicalWt = (() => {
+        try {
+          return (import_node_fs17.realpathSync.native ?? import_node_fs17.realpathSync)(wt);
+        } catch {
+          return wt;
+        }
+      })();
+      const normWt = (0, import_node_path30.normalize)(canonicalWt);
+      const normPrefix = (0, import_node_path30.normalize)(ownedPrefix);
+      const isMatch = process.platform === "win32" ? normWt.toLowerCase().startsWith(normPrefix.toLowerCase()) : normWt.startsWith(normPrefix);
+      if (isMatch && opts.isReapable(wt)) {
         try {
           git(opts.checkout, ["worktree", "remove", "--force", wt]);
           reaped.push(wt);
@@ -60509,6 +60881,13 @@ async function notifyPinRetirementIfRetired(seat, opts) {
 }
 
 // src/execution-consumer.ts
+var WorkspaceBoundaryError = class extends Error {
+  code = "workspace_boundary_unresolvable";
+  constructor(message, options) {
+    super(message, options);
+    this.name = "WorkspaceBoundaryError";
+  }
+};
 var DEFAULT_STALE_SECONDS = 300;
 var DEFAULT_MAX_LEASE_RECLAIMS = 3;
 var DEFAULT_TOUCH_INTERVAL_MS = 6e4;
@@ -60646,6 +61025,13 @@ var BASE_INSTRUCTIONS_PREFIX = [
   "Durable truth lives in execution artifacts and task events, not in this thread \u2014 record",
   "concrete progress via MCP tools rather than only narrating it.",
   "",
+  "Workspace boundary and client isolation (OQ-091):",
+  "- You are strictly isolated to the active client and project identified in the Workspace Boundary header.",
+  "- Never borrow, adapt, or reference styling, design, components, or domain logic from other clients or projects.",
+  "- If specifications, assets, or requirements for the current client are missing or ambiguous, do NOT guess",
+  '  or borrow from another client. Instead, file an inbox question (`create_inbox_item` kind="question") to request',
+  "  clarification from the operator, and halt execution rather than contaminating the client workspace.",
+  "",
   "Completion contract (the run is gated on this):",
   "- Act now, in this turn, whenever the tools to do the work are in reach, the work does not",
   "  depend on waiting for external state, and any irreversible outward action it takes is already",
@@ -60861,10 +61247,10 @@ function newArtifactId() {
   return `EA-${import_node_crypto13.default.randomUUID()}`;
 }
 var BLAST_RADIUS_FLOOR_PATTERNS = [/^supabase\/migrations\//, /^packages\/db\/src\/schema\.ts$/];
-function isBlastRadiusFloorPath(path28) {
-  return BLAST_RADIUS_FLOOR_PATTERNS.some((re) => re.test(path28));
+function isBlastRadiusFloorPath(path29) {
+  return BLAST_RADIUS_FLOOR_PATTERNS.some((re) => re.test(path29));
 }
-var execFileAsync2 = (0, import_node_util2.promisify)(import_node_child_process18.execFile);
+var execFileAsync2 = (0, import_node_util2.promisify)(import_node_child_process19.execFile);
 async function defaultListRunDiffPaths(opts) {
   const parse8 = (stdout) => stdout.split("\n").map((line) => line.trim()).filter((line) => line.length > 0);
   try {
@@ -60902,7 +61288,31 @@ async function resolveEffectiveRisk(deps, worktreePath, projectSlug, review) {
   }
   return { risk, reason };
 }
-async function gatherContext(client, projectSlug, task, openRunId) {
+async function gatherContext(client, projectSlug, task, openRunId, rawProjectInput) {
+  let rawProject = rawProjectInput;
+  if (!rawProject) {
+    try {
+      rawProject = await client.getProject(projectSlug);
+      if (!rawProject) {
+        throw new WorkspaceBoundaryError(`Project profile for slug "${projectSlug}" was not found.`);
+      }
+    } catch (error51) {
+      if (error51 instanceof WorkspaceBoundaryError) {
+        throw error51;
+      }
+      throw new WorkspaceBoundaryError(
+        `Failed to retrieve project profile for slug "${projectSlug}": ${error51?.message ?? error51}`,
+        { cause: error51 }
+      );
+    }
+  }
+  const scope = resolveProjectClientScope(rawProject);
+  const projectBoundary = {
+    slug: rawProject.slug,
+    displayName: rawProject.displayName,
+    clientName: scope.clientName,
+    scopeDescription: scope.scopeDescription
+  };
   const runs = (await client.listExecutionRuns(projectSlug, { taskId: task.id })).sort(
     (a, b) => a.createdAt.localeCompare(b.createdAt)
   );
@@ -60925,6 +61335,7 @@ async function gatherContext(client, projectSlug, task, openRunId) {
     }
   }
   return {
+    project: projectBoundary,
     task: {
       id: task.id,
       title: task.title,
@@ -61254,15 +61665,50 @@ async function driveRun(deps, projectSlug, runId) {
       }
     }
   }
+  let rawProject;
+  try {
+    rawProject = await deps.client.getProject(projectSlug);
+    if (!rawProject) {
+      throw new WorkspaceBoundaryError(`Project profile for slug "${projectSlug}" was not found.`);
+    }
+  } catch (error51) {
+    await failRun(
+      deps,
+      projectSlug,
+      task,
+      runId,
+      leaseId,
+      `workspace_boundary_unresolvable: ${error51?.message ?? error51}`,
+      "workspace_boundary_unresolvable"
+    );
+    return;
+  }
   const runDomains = Array.isArray(task.domains) ? task.domains : [task.domains ?? "code"];
   const isPureCode = runDomains.length === 1 && runDomains[0] === "code";
   if (!isPureCode) {
     const runDomain = runDomains[0] ?? "code";
-    await driveNonCodeRun(deps, projectSlug, runId, leaseId, task, runDomain);
+    await driveNonCodeRun(deps, projectSlug, runId, leaseId, task, runDomain, rawProject);
     return;
   }
   const compactEnabled = (process.env.MRRLIN_MCP_COMPACT_DISABLE ?? "").trim() !== "1";
-  const context = await gatherContext(deps.client, projectSlug, task, runId);
+  let context;
+  try {
+    context = await gatherContext(deps.client, projectSlug, task, runId, rawProject);
+  } catch (error51) {
+    if (error51 instanceof WorkspaceBoundaryError) {
+      await failRun(
+        deps,
+        projectSlug,
+        task,
+        runId,
+        leaseId,
+        `workspace_boundary_unresolvable: ${error51.message}`,
+        "workspace_boundary_unresolvable"
+      );
+      return;
+    }
+    throw error51;
+  }
   let bundle = renderContextBundle(
     compactEnabled ? {
       ...context,
@@ -61931,10 +62377,18 @@ function parseNonCodeResultEnvelope(stdout) {
   }
   return { outcome, resultSummary, markdownBody };
 }
-function buildDeliverableAuthorPrompt(task, specMarkdown) {
+function buildDeliverableAuthorPrompt(task, specMarkdown, project) {
   return [
     `Produce the deliverable for the task below. Write the FULL deliverable content as markdown.`,
     ``,
+    ...project ? [
+      `--- WORKSPACE BOUNDARY ---`,
+      `client: ${project.clientName || "(unspecified)"}`,
+      `project: ${project.displayName} (${project.slug})`,
+      ...project.scopeDescription ? [`scope: ${project.scopeDescription}`] : [],
+      `boundary rule: All authored artifacts must belong exclusively to this workspace. Do not mix with or reference external clients.`,
+      ``
+    ] : [],
     `--- TASK ---`,
     `id: ${task.id}`,
     `title: ${task.title}`,
@@ -62042,7 +62496,34 @@ async function writeNegativeResultEvidencePage(client, projectSlug, task, input)
   }
   throw new Error(`could not allocate negative-result evidence page for ${task.id} (last conflict: ${lastConflict})`);
 }
-async function driveNonCodeRun(deps, projectSlug, runId, leaseId, task, domain2) {
+async function driveNonCodeRun(deps, projectSlug, runId, leaseId, task, domain2, project) {
+  let rawProject = project;
+  if (!rawProject) {
+    try {
+      rawProject = await deps.client.getProject(projectSlug);
+      if (!rawProject) {
+        throw new WorkspaceBoundaryError(`Project profile for slug "${projectSlug}" was not found.`);
+      }
+    } catch (error51) {
+      await failRun(
+        deps,
+        projectSlug,
+        task,
+        runId,
+        leaseId,
+        `workspace_boundary_unresolvable: ${error51?.message ?? error51}`,
+        "workspace_boundary_unresolvable"
+      );
+      return;
+    }
+  }
+  const scope = resolveProjectClientScope(rawProject);
+  const projectBoundary = {
+    slug: rawProject.slug,
+    displayName: rawProject.displayName,
+    clientName: scope.clientName,
+    scopeDescription: scope.scopeDescription
+  };
   const personaName = resolveProducerPersona(domain2);
   if (!personaName) {
     await failRun(
@@ -62104,7 +62585,7 @@ async function driveNonCodeRun(deps, projectSlug, runId, leaseId, task, domain2)
   let parsedResult;
   try {
     const exec = await runExec({
-      prompt: buildDeliverableAuthorPrompt(task, specMarkdown),
+      prompt: buildDeliverableAuthorPrompt(task, specMarkdown, projectBoundary),
       developerInstructions: persona,
       cwd: deps.codexCwd ?? process.cwd(),
       timeoutMs: DELIVERABLE_AUTHOR_TIMEOUT_MS,
@@ -62598,8 +63079,8 @@ async function runBackstopSweep(deps, drive = (slug, id) => driveRun(deps, slug,
 function isRunRecoverableByThisBridge(run3, worktreeRoot) {
   if (!worktreeRoot) return true;
   if (!run3.worktreeId) return true;
-  const relative = import_node_path30.default.relative(import_node_path30.default.resolve(worktreeRoot), import_node_path30.default.resolve(run3.worktreeId));
-  return relative === "" || relative.length > 0 && !relative.startsWith("..") && !import_node_path30.default.isAbsolute(relative);
+  const relative = import_node_path31.default.relative(import_node_path31.default.resolve(worktreeRoot), import_node_path31.default.resolve(run3.worktreeId));
+  return relative === "" || relative.length > 0 && !relative.startsWith("..") && !import_node_path31.default.isAbsolute(relative);
 }
 async function deployGateHandoff(deps, projectSlug, task, runId, reason, leaseId) {
   await deps.client.updateExecutionRun(projectSlug, runId, { status: "failed", finishedAt: (/* @__PURE__ */ new Date()).toISOString(), leaseId: leaseId ?? void 0 }).catch(() => {
@@ -62804,12 +63285,12 @@ async function runAsyncBackstopSweep(deps, drive = (slug, jobId) => driveAsyncJo
 // src/bridge-artifacts.ts
 var import_node_fs18 = __toESM(require("node:fs"), 1);
 var import_promises14 = __toESM(require("node:fs/promises"), 1);
-var import_node_path31 = __toESM(require("node:path"), 1);
+var import_node_path32 = __toESM(require("node:path"), 1);
 var DEFAULT_MAX_ARTIFACTS_BYTES = 500 * 1024 * 1024;
 var DEFAULT_MAX_ARTIFACT_AGE_MS = 7 * 24 * 60 * 60 * 1e3;
 function resolveArtifactsDir(baseStateDir) {
   const stateDir = baseStateDir ?? resolveStateDir();
-  return import_node_path31.default.join(stateDir, "artifacts");
+  return import_node_path32.default.join(stateDir, "artifacts");
 }
 function ensureDir(dir) {
   import_node_fs18.default.mkdirSync(dir, { recursive: true, mode: 448 });
@@ -62822,7 +63303,7 @@ function safeArtifactPath(artifactsDir, id) {
   if (!id || typeof id !== "string" || !/^[a-zA-Z0-9_-]+$/.test(id)) {
     throw new Error("Invalid artifact id");
   }
-  return import_node_path31.default.join(artifactsDir, `${id}.json`);
+  return import_node_path32.default.join(artifactsDir, `${id}.json`);
 }
 async function writeLocalArtifact(id, payload, baseStateDir) {
   const artifactsDir = resolveArtifactsDir(baseStateDir);
@@ -62865,7 +63346,7 @@ async function cleanArtifacts(baseStateDir, options) {
   let deletedBytes = 0;
   for (const name of entries) {
     if (!name.endsWith(".json")) continue;
-    const filePath = import_node_path31.default.join(artifactsDir, name);
+    const filePath = import_node_path32.default.join(artifactsDir, name);
     try {
       const stat3 = await import_promises14.default.stat(filePath);
       if (now - stat3.mtimeMs > maxAgeMs) {
@@ -63093,9 +63574,9 @@ function agentIdleMs(provider) {
 
 // src/thread-index.ts
 var import_node_fs19 = require("node:fs");
-var import_node_path32 = __toESM(require("node:path"), 1);
+var import_node_path33 = __toESM(require("node:path"), 1);
 function threadIndexPath(stateDir) {
-  return import_node_path32.default.join(stateDir, "threads.json");
+  return import_node_path33.default.join(stateDir, "threads.json");
 }
 function loadThreadIndex(stateDir, ttlMs, now) {
   const result = /* @__PURE__ */ new Map();
@@ -63263,7 +63744,7 @@ function createToolBusyClock(opts) {
 var import_node_events3 = require("node:events");
 var import_node_fs20 = require("node:fs");
 var import_node_os14 = require("node:os");
-var import_node_path33 = require("node:path");
+var import_node_path34 = require("node:path");
 
 // ../../node_modules/.pnpm/@noble+hashes@1.3.3/node_modules/@noble/hashes/esm/cryptoNode.js
 var nc = __toESM(require("node:crypto"), 1);
@@ -66834,9 +67315,9 @@ var DirectorRelay = class {
 
 // src/remote-phone-relay.ts
 function loadOrCreateAgentDeviceKey() {
-  const path28 = (0, import_node_path33.join)((0, import_node_os14.homedir)(), ".mrrlin", "agent-device-key");
+  const path29 = (0, import_node_path34.join)((0, import_node_os14.homedir)(), ".mrrlin", "agent-device-key");
   try {
-    const raw = JSON.parse((0, import_node_fs20.readFileSync)(path28, "utf8"));
+    const raw = JSON.parse((0, import_node_fs20.readFileSync)(path29, "utf8"));
     if (typeof raw.priv === "string" && typeof raw.pub === "string") {
       return { privateKey: fromBase64Url(raw.priv), publicKey: fromBase64Url(raw.pub) };
     }
@@ -66844,9 +67325,9 @@ function loadOrCreateAgentDeviceKey() {
   }
   const kp = generateIdentityKeyPair();
   try {
-    (0, import_node_fs20.mkdirSync)((0, import_node_path33.join)((0, import_node_os14.homedir)(), ".mrrlin"), { recursive: true });
+    (0, import_node_fs20.mkdirSync)((0, import_node_path34.join)((0, import_node_os14.homedir)(), ".mrrlin"), { recursive: true });
     (0, import_node_fs20.writeFileSync)(
-      path28,
+      path29,
       JSON.stringify({ priv: toBase64Url(kp.privateKey), pub: toBase64Url(kp.publicKey) }),
       { mode: 384 }
     );
@@ -66854,7 +67335,7 @@ function loadOrCreateAgentDeviceKey() {
   }
   return kp;
 }
-var AGENT_PAIRING_PATH = (0, import_node_path33.join)((0, import_node_os14.homedir)(), ".mrrlin", "agent-pairing.json");
+var AGENT_PAIRING_PATH = (0, import_node_path34.join)((0, import_node_os14.homedir)(), ".mrrlin", "agent-pairing.json");
 function loadAgentPairing() {
   try {
     const raw = JSON.parse((0, import_node_fs20.readFileSync)(AGENT_PAIRING_PATH, "utf8"));
@@ -66872,7 +67353,7 @@ function loadAgentPairing() {
 }
 function saveAgentPairing(record2) {
   try {
-    (0, import_node_fs20.mkdirSync)((0, import_node_path33.join)((0, import_node_os14.homedir)(), ".mrrlin"), { recursive: true });
+    (0, import_node_fs20.mkdirSync)((0, import_node_path34.join)((0, import_node_os14.homedir)(), ".mrrlin"), { recursive: true });
     (0, import_node_fs20.writeFileSync)(AGENT_PAIRING_PATH, JSON.stringify(record2), { mode: 384 });
   } catch {
   }
@@ -67051,11 +67532,11 @@ async function renderPairingQrSvg(payload) {
 }
 
 // src/executor-server.ts
-var import_node_child_process19 = require("node:child_process");
+var import_node_child_process20 = require("node:child_process");
 function defaultReadinessRunner(provider) {
   const command = provider === "claude" ? "claude" : "codex";
   return (args) => {
-    const r = (0, import_node_child_process19.spawnSync)(command, args, { encoding: "utf8", timeout: 8e3, shell: true });
+    const r = (0, import_node_child_process20.spawnSync)(command, args, { encoding: "utf8", timeout: 8e3, shell: true });
     return { status: r.status, stdout: r.stdout ?? "", stderr: r.stderr ?? "" };
   };
 }
@@ -67180,7 +67661,7 @@ function createSelfReviewTurn(deps) {
 // src/director-reseed.ts
 var import_node_fs21 = require("node:fs");
 var import_node_readline = require("node:readline");
-var import_node_path34 = require("node:path");
+var import_node_path35 = require("node:path");
 function estimateTokens(s) {
   return Buffer.byteLength(s, "utf8");
 }
@@ -67329,7 +67810,7 @@ async function readSessionRows(logsDir, files, sessionIds) {
   const lines2 = [];
   let missingFiles = 0;
   for (const f of files) {
-    const filePath = (0, import_node_path34.join)(logsDir, f);
+    const filePath = (0, import_node_path35.join)(logsDir, f);
     try {
       const stream = (0, import_node_fs21.createReadStream)(filePath, { encoding: "utf8" });
       const rl = (0, import_node_readline.createInterface)({ input: stream, crlfDelay: Infinity });
@@ -67357,10 +67838,10 @@ async function readSessionRows(logsDir, files, sessionIds) {
 // src/external-agents-scrub.ts
 var import_node_fs22 = __toESM(require("node:fs"), 1);
 var import_node_os15 = __toESM(require("node:os"), 1);
-var import_node_path35 = __toESM(require("node:path"), 1);
+var import_node_path36 = __toESM(require("node:path"), 1);
 var REDACTION = "[REDACTED]";
 var SHORT_VALUE_THRESHOLD = 8;
-var KEYS_ENV_PATH = () => import_node_path35.default.join(import_node_os15.default.homedir(), ".local", "state", "external-agents", "keys.env");
+var KEYS_ENV_PATH = () => import_node_path36.default.join(import_node_os15.default.homedir(), ".local", "state", "external-agents", "keys.env");
 var keysEnvCache = null;
 function readKeysEnv() {
   const filePath = KEYS_ENV_PATH();
@@ -67804,9 +68285,9 @@ function readKnownGptSlugsFromTomlFile(filePath) {
   return Array.from(raw.matchAll(/^\s*model\s*=\s*"([^"]+)"/gm)).map((match) => match[1]?.trim() ?? "").filter(isSelectableModelSlug);
 }
 function readCodexFallbackModels() {
-  const codexHome = process.env.CODEX_HOME?.trim() || import_node_path37.default.join(import_node_os17.default.homedir(), ".codex");
+  const codexHome = process.env.CODEX_HOME?.trim() || import_node_path38.default.join(import_node_os17.default.homedir(), ".codex");
   const models = /* @__PURE__ */ new Map();
-  const cachePath = import_node_path37.default.join(codexHome, "models_cache.json");
+  const cachePath = import_node_path38.default.join(codexHome, "models_cache.json");
   const cacheRaw = readTextIfExists(cachePath);
   if (cacheRaw) {
     try {
@@ -67856,7 +68337,7 @@ function readCodexFallbackModels() {
       );
     }
   }
-  for (const slug of readKnownGptSlugsFromTomlFile(import_node_path37.default.join(codexHome, "config.toml"))) {
+  for (const slug of readKnownGptSlugsFromTomlFile(import_node_path38.default.join(codexHome, "config.toml"))) {
     addBridgeModel(
       models,
       mapBridgeModel({
@@ -67870,11 +68351,11 @@ function readCodexFallbackModels() {
       })
     );
   }
-  const automationsDir = import_node_path37.default.join(codexHome, "automations");
+  const automationsDir = import_node_path38.default.join(codexHome, "automations");
   try {
     for (const entry of import_node_fs23.default.readdirSync(automationsDir, { withFileTypes: true })) {
       if (!entry.isDirectory()) continue;
-      for (const slug of readKnownGptSlugsFromTomlFile(import_node_path37.default.join(automationsDir, entry.name, "automation.toml"))) {
+      for (const slug of readKnownGptSlugsFromTomlFile(import_node_path38.default.join(automationsDir, entry.name, "automation.toml"))) {
         addBridgeModel(
           models,
           mapBridgeModel({
@@ -67900,9 +68381,15 @@ function selfUpdateInboxItemId(offeredVersion) {
   return `II-MCPUPD-${offeredVersion.replace(/[^A-Za-z0-9._-]/g, "-")}-${hash3}`;
 }
 function neutralCheckoutCwd(stateDir) {
-  const dir = import_node_path37.default.join(stateDir, "no-checkout");
+  const dir = import_node_path38.default.join(stateDir, "no-checkout");
   try {
     import_node_fs23.default.mkdirSync(dir, { recursive: true });
+    if (!import_node_fs23.default.existsSync(import_node_path38.default.join(dir, ".git"))) {
+      try {
+        (0, import_node_child_process21.spawnSync)("git", ["init", "-b", "main"], { cwd: dir, stdio: "ignore" });
+      } catch {
+      }
+    }
   } catch {
   }
   return dir;
@@ -68005,6 +68492,12 @@ function buildThreadStartParams(msg, config2, desiredModel) {
     "turn with one sentence restating your understanding, then at most 3 scope-level questions, and",
     "do NOT create the task yet. Create it after the operator replies.",
     "",
+    "Once the operator replies and clarifies or confirms the scope (or if scope was already clear),",
+    "you MUST materialize the work onto the board: create the plan (if needed) and call `create_task`",
+    "in the same turn so actionable task cards appear on `/tasks` immediately. Never leave the board",
+    "empty with 0 tasks after agreeing on scope. Never claim tasks are created, queued, or ready unless",
+    "`create_task` was actually invoked and returned the task ID.",
+    "",
     "Set operatorSeedRequest to the operator's OWN WORDS, verbatim. Select every message in this",
     "conversation that forms part of the request \u2014 not only the last one \u2014 and concatenate them in",
     "order, separated by a blank line. Do NOT paraphrase, summarise, or rewrite any of it, and do",
@@ -68382,7 +68875,7 @@ function resolveDefaultBranch(checkoutPath) {
   if (!checkoutPath) return "main";
   const runGit = (args) => {
     try {
-      return (0, import_node_child_process20.execFileSync)("git", ["-C", checkoutPath, ...args], {
+      return (0, import_node_child_process21.execFileSync)("git", ["-C", checkoutPath, ...args], {
         encoding: "utf8",
         stdio: ["ignore", "pipe", "ignore"],
         timeout: 15e3,
@@ -69579,7 +70072,77 @@ function createBridgeMessageHandler(deps) {
         } catch {
         }
       }
-      const contextPrefix = renderContextPrefix({ ...msg.context, answeredQuestions, directorSessionId });
+      if (!contextProjectSlug) {
+        sendForSpan({
+          type: "error",
+          directorSessionId,
+          code: "workspace_boundary_unresolvable",
+          error: "Workspace boundary unresolvable: turn context must include projectSlug."
+        });
+        thread.inFlight = false;
+        deps.releaseCodex(turnSeat.id);
+        return;
+      }
+      if (!deps.getProject) {
+        sendForSpan({
+          type: "error",
+          directorSessionId,
+          code: "workspace_boundary_unresolvable",
+          error: "Workspace boundary unresolvable: deps.getProject is not wired."
+        });
+        thread.inFlight = false;
+        deps.releaseCodex(turnSeat.id);
+        return;
+      }
+      let projectContext = msg.context?.project;
+      if (projectContext && projectContext.slug !== contextProjectSlug) {
+        sendForSpan({
+          type: "error",
+          directorSessionId,
+          code: "workspace_boundary_unresolvable",
+          error: `Workspace boundary mismatch: provided project slug "${projectContext.slug}" does not match context project slug "${contextProjectSlug}".`
+        });
+        thread.inFlight = false;
+        deps.releaseCodex(turnSeat.id);
+        return;
+      }
+      try {
+        const rawProject = await deps.getProject(contextProjectSlug);
+        if (!rawProject) {
+          sendForSpan({
+            type: "error",
+            directorSessionId,
+            code: "workspace_boundary_unresolvable",
+            error: `Workspace boundary unresolvable: project profile for "${contextProjectSlug}" was not found.`
+          });
+          thread.inFlight = false;
+          deps.releaseCodex(turnSeat.id);
+          return;
+        }
+        const scope = resolveProjectClientScope(rawProject);
+        projectContext = {
+          slug: rawProject.slug,
+          displayName: rawProject.displayName,
+          clientName: scope.clientName,
+          scopeDescription: scope.scopeDescription
+        };
+      } catch (err) {
+        sendForSpan({
+          type: "error",
+          directorSessionId,
+          code: "workspace_boundary_unresolvable",
+          error: `Workspace boundary unresolvable: failed to retrieve project profile for "${contextProjectSlug}": ${err?.message ?? err}`
+        });
+        thread.inFlight = false;
+        deps.releaseCodex(turnSeat.id);
+        return;
+      }
+      const contextPrefix = renderContextPrefix({
+        ...msg.context,
+        project: projectContext,
+        answeredQuestions,
+        directorSessionId
+      });
       const sendInTurn = (msg2) => {
         const buf = thread.replay;
         if (!buf) {
@@ -69972,7 +70535,7 @@ function parseConfig() {
 }
 function scanForOtherBridges() {
   try {
-    const result = (0, import_node_child_process20.spawnSync)("pgrep", ["-f", "mrrlin-mcp director-bridge"], {
+    const result = (0, import_node_child_process21.spawnSync)("pgrep", ["-f", "mrrlin-mcp director-bridge"], {
       encoding: "utf8"
     });
     if (result.status !== 0) return [];
@@ -70148,8 +70711,8 @@ async function startDirectorBridge() {
     codexCwd: config2.codexCwd,
     codexExecutable: config2.codexExecutable,
     checkoutRegistry,
-    worktreeRoot: import_node_path37.default.join(config2.stateDir, "worktrees"),
-    locksDir: import_node_path37.default.join(config2.stateDir, "locks"),
+    worktreeRoot: import_node_path38.default.join(config2.stateDir, "worktrees"),
+    locksDir: import_node_path38.default.join(config2.stateDir, "locks"),
     // Wire the executor server for code-execution runs. Each run gets its own provider process
     // (app-server for codex, a resident CLI child for claude) at the run worktree, running
     // UNRESTRICTED from the real operator config (owner no-sandbox decision — auth + mrrlin MCP
@@ -70375,7 +70938,7 @@ async function startDirectorBridge() {
       const files = dayFilesInWindow(/* @__PURE__ */ new Date(), reseedWindowMs);
       filesCount = files.length;
       const sessionIds = [args.directorSessionId, ...args.priorSessionIds];
-      const { lines: lines2, missingFiles } = await readSessionRows(import_node_path37.default.join(config2.stateDir, "logs"), files, sessionIds);
+      const { lines: lines2, missingFiles } = await readSessionRows(import_node_path38.default.join(config2.stateDir, "logs"), files, sessionIds);
       missingFilesCount = missingFiles;
       const extracted = extractItems(lines2, sessionIds);
       items = extracted.items;
@@ -70474,6 +71037,7 @@ async function startDirectorBridge() {
       }
     },
     listAnsweredQuestions: (projectSlug, taskId) => client.listInboxItems(projectSlug, { status: "acknowledged", kind: "question", taskId }),
+    getProject: (projectSlug) => client.getProject(projectSlug),
     // External-agents control plane: the real spawn runner, with the EXTERNAL_AGENTS_CLI operator
     // escape hatch bound here (the handlers stay spawn-free and this is the only production seam).
     runExternalAgentsCli: (args, opts) => runExternalAgentsCli(args, { ...opts, envCliPath: process.env["EXTERNAL_AGENTS_CLI"] }),
@@ -70630,8 +71194,8 @@ async function startDirectorBridge() {
       );
       void runOrphanWorktreeSweep(client, {
         checkoutRegistry,
-        worktreeRoot: import_node_path37.default.join(config2.stateDir, "worktrees"),
-        locksDir: import_node_path37.default.join(config2.stateDir, "locks")
+        worktreeRoot: import_node_path38.default.join(config2.stateDir, "worktrees"),
+        locksDir: import_node_path38.default.join(config2.stateDir, "locks")
       });
       {
         const { retainedBuffers, retainedBytes, tombstonesRemoved } = sweepReplayBuffers(threads, tombstones, {
@@ -70957,7 +71521,7 @@ function readDispatchBody(req) {
 function readOrCreateBridgeToken(stateDir) {
   const explicit = (process.env.MRRLIN_DIRECTOR_BRIDGE_TOKEN ?? "").trim();
   if (explicit) return explicit;
-  const tokenPath = import_node_path37.default.join(stateDir, "token.txt");
+  const tokenPath = import_node_path38.default.join(stateDir, "token.txt");
   try {
     const existing = import_node_fs23.default.readFileSync(tokenPath, "utf8").trim();
     if (existing) return existing;
@@ -70976,6 +71540,22 @@ function isBridgeTokenAccepted(request, token) {
   return parts.includes(token);
 }
 function renderContextPrefix(context) {
+  const parts = [];
+  if (context?.project) {
+    const { slug, displayName, clientName, scopeDescription } = context.project;
+    const boundaryLines = [
+      "[ACTIVE WORKSPACE CONTEXT]",
+      `Project: "${displayName}" (Slug: ${slug})`,
+      `Client: "${clientName}"`
+    ];
+    if (scopeDescription) {
+      boundaryLines.push(`Scope: ${scopeDescription}`);
+    }
+    boundaryLines.push(
+      "BOUNDARY DIRECTIVE: You are strictly isolated to this project and client. You MUST NOT reference, reuse, or adapt components, designs, or assets from other clients or projects."
+    );
+    parts.push(boundaryLines.join("\n"));
+  }
   const projectSlug = context?.projectSlug?.trim() ? context.projectSlug.trim() : void 0;
   const urlPath = context?.urlPath?.trim() ? context.urlPath.trim() : void 0;
   const focusTaskId = context?.focusTaskId?.trim() ? context.focusTaskId.trim() : void 0;
@@ -70992,8 +71572,10 @@ function renderContextPrefix(context) {
   if (contextMessages?.length) payload.contextMessages = contextMessages;
   if (answeredQuestions) payload.answeredQuestions = answeredQuestions;
   const keys = Object.keys(payload);
-  if (keys.length === 0) return "";
-  return `Context (JSON): ${JSON.stringify(payload)}`;
+  if (keys.length > 0) {
+    parts.push(`Context (JSON): ${JSON.stringify(payload)}`);
+  }
+  return parts.join("\n\n");
 }
 
 // ../../node_modules/.pnpm/@modelcontextprotocol+sdk@1.30.0_zod@4.4.3/node_modules/@modelcontextprotocol/sdk/dist/esm/experimental/tasks/server.js
@@ -71666,7 +72248,9 @@ function resolveServerOptions(input = {}) {
     // Deliberately do NOT bake process.env.MRRLIN_TOKEN in here: withAuth (tools.ts) resolves
     // env + the bridge-persisted operator-token file lazily per request, so long-lived MCP
     // processes pick up token rotation. An explicit input.token still wins when provided.
-    token: input.token
+    token: input.token,
+    activeProjectSlug: input.activeProjectSlug ?? (process.env.MRRLIN_PROJECT_SLUG?.trim() || void 0),
+    mcpConfigPath: input.mcpConfigPath
   };
 }
 function readZodObjectShape(schema) {
@@ -71825,7 +72409,7 @@ function runSetCredential(args) {
 // src/install-service.ts
 var import_node_os18 = __toESM(require("node:os"), 1);
 var import_node_fs24 = require("node:fs");
-var import_node_path38 = __toESM(require("node:path"), 1);
+var import_node_path39 = __toESM(require("node:path"), 1);
 function parseEnvLine(line, env) {
   const trimmed = line.trim();
   if (!trimmed || trimmed === "}" || trimmed === "},") return;
@@ -72214,7 +72798,7 @@ function performConfigBackup(deps, ecoPath, existingText) {
       deps.log("Service config backup failed.");
       return;
     }
-    const dir = import_node_path38.default.dirname(ecoPath);
+    const dir = import_node_path39.default.dirname(ecoPath);
     let files;
     try {
       files = deps.listDir(dir);
@@ -72226,7 +72810,7 @@ function performConfigBackup(deps, ecoPath, existingText) {
       deps.log("Service config backup failed.");
       return;
     }
-    const base = import_node_path38.default.basename(ecoPath);
+    const base = import_node_path39.default.basename(ecoPath);
     const backupRegex = new RegExp(`^${escapeRegex2(base)}\\.bak-\\d{4}-\\d{2}-\\d{2}T\\d{2}-\\d{2}-\\d{2}-\\d{3}Z$`);
     const existingBackups = files.filter((f) => backupRegex.test(f));
     if (existingBackups.length >= 10) {
@@ -72327,11 +72911,11 @@ function installService(deps) {
   const claudeBin = deps.which("claude");
   const resolvedBins = [...bins, claudeBin].filter((b) => b !== null);
   const isWin = import_node_os18.default.platform() === "win32";
-  const systemDirs = isWin ? (deps.env.PATH || "").split(import_node_path38.default.delimiter).filter(Boolean) : SYSTEM_PATH_DIRS;
+  const systemDirs = isWin ? (deps.env.PATH || "").split(import_node_path39.default.delimiter).filter(Boolean) : SYSTEM_PATH_DIRS;
   const pathEnv = Array.from(
-    /* @__PURE__ */ new Set([...resolvedBins.map((b) => import_node_path38.default.dirname(b)), ...systemDirs])
-  ).join(import_node_path38.default.delimiter);
-  const ecoPath = import_node_path38.default.join(home, ".mrrlin", "ecosystem.config.cjs");
+    /* @__PURE__ */ new Set([...resolvedBins.map((b) => import_node_path39.default.dirname(b)), ...systemDirs])
+  ).join(import_node_path39.default.delimiter);
+  const ecoPath = import_node_path39.default.join(home, ".mrrlin", "ecosystem.config.cjs");
   const existingText = deps.readFile ? deps.readFile(ecoPath) : null;
   const parseResult = parseExistingEcosystemConfig(existingText);
   if (parseResult.kind === "rejected") {
@@ -72410,12 +72994,13 @@ function uninstallService(deps) {
 // src/uninstall-codex.ts
 var import_promises16 = __toESM(require("node:fs/promises"), 1);
 var import_node_os19 = __toESM(require("node:os"), 1);
-var import_node_path39 = __toESM(require("node:path"), 1);
+var import_node_path40 = __toESM(require("node:path"), 1);
 var toml5 = __toESM(require_toml(), 1);
 function resolveCodexHome3(options) {
   if (options.codexHome) return options.codexHome;
+  if (options.homeDir) return import_node_path40.default.join(options.homeDir, ".codex");
   if (process.env.CODEX_HOME) return process.env.CODEX_HOME;
-  return import_node_path39.default.join(options.homeDir ?? import_node_os19.default.homedir(), ".codex");
+  return import_node_path40.default.join(import_node_os19.default.homedir(), ".codex");
 }
 async function pathExists6(target) {
   try {
@@ -72428,7 +73013,7 @@ async function pathExists6(target) {
 var MRRLIN_BLOCK_RE = /(^|\n)\[mcp_servers\.(?:mrrlin(?:-browser)?|external-agents)(?:\]|\.[^\]\n]*\])[\s\S]*?(?=\n\[|$)/g;
 async function uninstallCodex(options = {}) {
   const codexHome = resolveCodexHome3(options);
-  const configPath = import_node_path39.default.join(codexHome, "config.toml");
+  const configPath = import_node_path40.default.join(codexHome, "config.toml");
   const removePrompts = async () => uninstallPrompts(codexHome, options.promptNames ?? []);
   if (!await pathExists6(configPath)) {
     return { action: "missing", configPath, prompts: await removePrompts() };
@@ -72456,10 +73041,10 @@ async function uninstallCodex(options = {}) {
 }
 async function uninstallPrompts(codexHome, names) {
   if (names.length === 0) return [];
-  const promptsDir = import_node_path39.default.join(codexHome, "prompts");
+  const promptsDir = import_node_path40.default.join(codexHome, "prompts");
   const out = [];
   for (const name of names) {
-    const promptPath = import_node_path39.default.join(promptsDir, `${name}.md`);
+    const promptPath = import_node_path40.default.join(promptsDir, `${name}.md`);
     try {
       await import_promises16.default.unlink(promptPath);
       out.push({ name, action: "removed", promptPath });
@@ -72477,7 +73062,7 @@ async function uninstallPrompts(codexHome, names) {
 
 // src/extract/command.ts
 var import_promises17 = require("node:fs/promises");
-var import_node_path40 = require("node:path");
+var import_node_path41 = require("node:path");
 function parseArgs(args) {
   const map2 = /* @__PURE__ */ new Map();
   for (let i = 0; i < args.length; i++) {
@@ -72514,7 +73099,7 @@ Missing required flag(s): ${missing.join(
   const days = await findSessionDays(deps.stateDir, sessionId);
   const matchingLines = [];
   for (const day of days) {
-    const logPath = (0, import_node_path40.join)(deps.stateDir, "logs", `bridge-${day}.jsonl`);
+    const logPath = (0, import_node_path41.join)(deps.stateDir, "logs", `bridge-${day}.jsonl`);
     let raw;
     try {
       raw = await (0, import_promises17.readFile)(logPath, "utf8");
@@ -72600,13 +73185,13 @@ Missing required flag(s): ${missing.join(
 
 // src/bin.ts
 function pm2Runner(args) {
-  const r = (0, import_node_child_process21.spawnSync)("pm2", args, { encoding: "utf8" });
+  const r = (0, import_node_child_process22.spawnSync)("pm2", args, { encoding: "utf8" });
   process.stderr.write(r.stdout ?? "");
   process.stderr.write(r.stderr ?? "");
   return { code: r.status ?? 1, stdout: r.stdout ?? "" };
 }
 function whichBin(bin) {
-  const r = (0, import_node_child_process21.spawnSync)("which", [bin], { encoding: "utf8" });
+  const r = (0, import_node_child_process22.spawnSync)("which", [bin], { encoding: "utf8" });
   const out = (r.stdout ?? "").trim();
   return r.status === 0 && out ? out.split("\n")[0] ?? null : null;
 }
@@ -72615,13 +73200,13 @@ function bootHookStatus() {
   const uid = process.getuid?.();
   if (uid === void 0 || uid === 0) return { status: "unknown" };
   const home = process.env.HOME ?? (0, import_node_os20.homedir)();
-  const agents = import_node_path42.default.join(home, "Library", "LaunchAgents");
+  const agents = import_node_path43.default.join(home, "Library", "LaunchAgents");
   const candidates = [
-    { label: "com.mrrlin.director-bridge", plist: import_node_path42.default.join(agents, "com.mrrlin.director-bridge.plist") },
-    { label: "com.PM2", plist: import_node_path42.default.join(agents, `pm2.${(0, import_node_os20.userInfo)().username}.plist`) }
+    { label: "com.mrrlin.director-bridge", plist: import_node_path43.default.join(agents, "com.mrrlin.director-bridge.plist") },
+    { label: "com.PM2", plist: import_node_path43.default.join(agents, `pm2.${(0, import_node_os20.userInfo)().username}.plist`) }
   ];
   for (const candidate of candidates) {
-    const printed = (0, import_node_child_process21.spawnSync)("launchctl", ["print", `gui/${uid}/${candidate.label}`], { encoding: "utf8" });
+    const printed = (0, import_node_child_process22.spawnSync)("launchctl", ["print", `gui/${uid}/${candidate.label}`], { encoding: "utf8" });
     if (printed.status !== 0) continue;
     if (!(0, import_node_fs25.existsSync)(candidate.plist)) continue;
     const out = printed.stdout ?? "";
@@ -72835,7 +73420,7 @@ async function main() {
         );
       }
       const { command: command2, args, env } = browserServeArgs();
-      const r = (0, import_node_child_process21.spawnSync)(command2, args, { stdio: "inherit", env: { ...process.env, ...env } });
+      const r = (0, import_node_child_process22.spawnSync)(command2, args, { stdio: "inherit", env: { ...process.env, ...env } });
       process.exitCode = r.status ?? 1;
       return;
     }
@@ -72846,7 +73431,7 @@ async function main() {
     }
     case "external-agents-serve": {
       const { command: command2, args } = externalAgentsServeArgs();
-      const r = (0, import_node_child_process21.spawnSync)(command2, args, { stdio: "inherit", env: process.env });
+      const r = (0, import_node_child_process22.spawnSync)(command2, args, { stdio: "inherit", env: process.env });
       process.exitCode = r.status ?? 1;
       return;
     }
@@ -72900,8 +73485,8 @@ async function main() {
         }
       }
       try {
-        const codexHome = process.env.CODEX_HOME ?? import_node_path42.default.join(process.env.HOME ?? (0, import_node_os20.homedir)(), ".codex");
-        (0, import_node_fs25.rmSync)(import_node_path42.default.join(codexHome, "prompts", "report-issue.md"), { force: true });
+        const codexHome = process.env.CODEX_HOME ?? import_node_path43.default.join(process.env.HOME ?? (0, import_node_os20.homedir)(), ".codex");
+        (0, import_node_fs25.rmSync)(import_node_path43.default.join(codexHome, "prompts", "report-issue.md"), { force: true });
       } catch {
       }
       const claudeResult = await installClaude({ binPath, force, serveEnv });
@@ -72923,7 +73508,7 @@ async function main() {
         );
       }
       const realProviderRunner = (command2) => (args) => {
-        const r = (0, import_node_child_process21.spawnSync)(command2, args, { encoding: "utf8", timeout: 8e3 });
+        const r = (0, import_node_child_process22.spawnSync)(command2, args, { encoding: "utf8", timeout: 8e3 });
         return { status: r.status, stdout: r.stdout ?? "", stderr: r.stderr ?? "" };
       };
       for (const provider of ["codex", "claude", "agy"]) {
@@ -72971,7 +73556,7 @@ async function main() {
         env: process.env,
         cwd: process.cwd(),
         writeFile: (p, c) => {
-          (0, import_node_fs25.mkdirSync)(import_node_path42.default.dirname(p), { recursive: true, mode: 448 });
+          (0, import_node_fs25.mkdirSync)(import_node_path43.default.dirname(p), { recursive: true, mode: 448 });
           (0, import_node_fs25.writeFileSync)(p, c, { mode: 384 });
         },
         writeExclusiveFile: (p, c) => (0, import_node_fs25.writeFileSync)(p, c, { flag: "wx", mode: 384 }),
@@ -73016,7 +73601,7 @@ async function main() {
         purgeSecret: purge,
         secretPath: agentCredentialPath(),
         tokenPath: operatorTokenPath(),
-        ecoPath: import_node_path42.default.join(process.env.HOME ?? (0, import_node_os20.homedir)(), ".mrrlin", "ecosystem.config.cjs"),
+        ecoPath: import_node_path43.default.join(process.env.HOME ?? (0, import_node_os20.homedir)(), ".mrrlin", "ecosystem.config.cjs"),
         log: (m) => process.stderr.write(`[mrrlin-mcp uninstall-service] ${m}
 `)
       });
@@ -73037,7 +73622,7 @@ async function main() {
         purgeSecret: true,
         secretPath: agentCredentialPath(),
         tokenPath: operatorTokenPath(),
-        ecoPath: import_node_path42.default.join(home, ".mrrlin", "ecosystem.config.cjs"),
+        ecoPath: import_node_path43.default.join(home, ".mrrlin", "ecosystem.config.cjs"),
         log
       });
       let codexOk = true;
@@ -73057,7 +73642,7 @@ async function main() {
         log(`codex config NOT modified: ${error51 instanceof Error ? error51.message : String(error51)}`);
       }
       try {
-        (0, import_node_fs25.rmSync)(import_node_path42.default.join(home, ".mrrlin"), { recursive: true, force: true });
+        (0, import_node_fs25.rmSync)(import_node_path43.default.join(home, ".mrrlin"), { recursive: true, force: true });
       } catch {
       }
       log("removed ~/.mrrlin");
@@ -73098,7 +73683,7 @@ ${HELP_TEXT}`);
   }
 }
 function resolveSelfBinPath() {
-  return import_node_path41.default.resolve(process.argv[1] ?? process.execPath);
+  return import_node_path42.default.resolve(process.argv[1] ?? process.execPath);
 }
 main().catch((error51) => {
   process.stderr.write(`mrrlin-mcp fatal error: ${error51 instanceof Error ? error51.message : String(error51)}