@mrrlin-dev/mcp 0.4.95 → 0.4.98

package/dist/bin.cjs

@@ -32,6 +32,7 @@ var __toESM = (mod2, isNodeMode, target) => (target = mod2 != null ? __create(__
   isNodeMode || !mod2 || !mod2.__esModule ? __defProp(target, "default", { value: mod2, enumerable: true }) : target,
   mod2
 ));
+var __toCommonJS = (mod2) => __copyProps(__defProp({}, "__esModule", { value: true }), mod2);
 
 // ../../node_modules/.pnpm/@iarna+toml@2.2.5/node_modules/@iarna/toml/lib/parser.js
 var require_parser = __commonJS({
@@ -1646,20 +1647,20 @@ var require_parse_async = __commonJS({
       const index = 0;
       const blocksize = opts.blocksize || 40960;
       const parser = new TOMLParser();
-      return new Promise((resolve, reject) => {
-        setImmediate(parseAsyncNext, index, blocksize, resolve, reject);
+      return new Promise((resolve2, reject) => {
+        setImmediate(parseAsyncNext, index, blocksize, resolve2, reject);
       });
-      function parseAsyncNext(index2, blocksize2, resolve, reject) {
+      function parseAsyncNext(index2, blocksize2, resolve2, reject) {
         if (index2 >= str.length) {
           try {
-            return resolve(parser.finish());
+            return resolve2(parser.finish());
           } catch (err) {
             return reject(prettyError(err, str));
           }
         }
         try {
           parser.parse(str.slice(index2, index2 + blocksize2));
-          setImmediate(parseAsyncNext, index2 + blocksize2, blocksize2, resolve, reject);
+          setImmediate(parseAsyncNext, index2 + blocksize2, blocksize2, resolve2, reject);
         } catch (err) {
           reject(prettyError(err, str));
         }
@@ -1685,7 +1686,7 @@ var require_parse_stream = __commonJS({
     function parseReadable(stm) {
       const parser = new TOMLParser();
       stm.setEncoding("utf8");
-      return new Promise((resolve, reject) => {
+      return new Promise((resolve2, reject) => {
         let readable;
         let ended = false;
         let errored = false;
@@ -1693,7 +1694,7 @@ var require_parse_stream = __commonJS({
           ended = true;
           if (readable) return;
           try {
-            resolve(parser.finish());
+            resolve2(parser.finish());
           } catch (err) {
             reject(err);
           }
@@ -4979,7 +4980,7 @@ var require_compile = __commonJS({
       const schOrFunc = root.refs[ref];
       if (schOrFunc)
         return schOrFunc;
-      let _sch = resolve.call(this, root, ref);
+      let _sch = resolve2.call(this, root, ref);
       if (_sch === void 0) {
         const schema = (_a3 = root.localRefs) === null || _a3 === void 0 ? void 0 : _a3[ref];
         const { schemaId } = this.opts;
@@ -5006,7 +5007,7 @@ var require_compile = __commonJS({
     function sameSchemaEnv(s1, s2) {
       return s1.schema === s2.schema && s1.root === s2.root && s1.baseId === s2.baseId;
     }
-    function resolve(root, ref) {
+    function resolve2(root, ref) {
       let sch;
       while (typeof (sch = this.refs[ref]) == "string")
         ref = sch;
@@ -5836,7 +5837,7 @@ var require_fast_uri = __commonJS({
       }
       return uri;
     }
-    function resolve(baseURI, relativeURI, options) {
+    function resolve2(baseURI, relativeURI, options) {
       const schemelessOptions = options ? Object.assign({ scheme: "null" }, options) : { scheme: "null" };
       const {
         parsed: baseParsed,
@@ -6205,7 +6206,7 @@ var require_fast_uri = __commonJS({
     var fastUri = {
       SCHEMES,
       normalize: normalize2,
-      resolve,
+      resolve: resolve2,
       resolveComponent,
       equal,
       serialize,
@@ -9392,12 +9393,12 @@ var require_isexe = __commonJS({
         if (typeof Promise !== "function") {
           throw new TypeError("callback not provided");
         }
-        return new Promise(function(resolve, reject) {
+        return new Promise(function(resolve2, reject) {
           isexe(path29, options || {}, function(er, is) {
             if (er) {
               reject(er);
             } else {
-              resolve(is);
+              resolve2(is);
             }
           });
         });
@@ -9463,27 +9464,27 @@ var require_which = __commonJS({
         opt = {};
       const { pathEnv, pathExt, pathExtExe } = getPathInfo(cmd, opt);
       const found = [];
-      const step = (i) => new Promise((resolve, reject) => {
+      const step = (i) => new Promise((resolve2, reject) => {
         if (i === pathEnv.length)
-          return opt.all && found.length ? resolve(found) : reject(getNotFoundError(cmd));
+          return opt.all && found.length ? resolve2(found) : reject(getNotFoundError(cmd));
         const ppRaw = pathEnv[i];
         const pathPart = /^".*"$/.test(ppRaw) ? ppRaw.slice(1, -1) : ppRaw;
         const pCmd = path29.join(pathPart, cmd);
         const p = !pathPart && /^\.[\\\/]/.test(cmd) ? cmd.slice(0, 2) + pCmd : pCmd;
-        resolve(subStep(p, i, 0));
+        resolve2(subStep(p, i, 0));
       });
-      const subStep = (p, i, ii) => new Promise((resolve, reject) => {
+      const subStep = (p, i, ii) => new Promise((resolve2, reject) => {
         if (ii === pathExt.length)
-          return resolve(step(i + 1));
+          return resolve2(step(i + 1));
         const ext = pathExt[ii];
         isexe(p + ext, { pathExt: pathExtExe }, (er, is) => {
           if (!er && is) {
             if (opt.all)
               found.push(p + ext);
             else
-              return resolve(p + ext);
+              return resolve2(p + ext);
           }
-          return resolve(subStep(p, i, ii + 1));
+          return resolve2(subStep(p, i, ii + 1));
         });
       });
       return cb ? step(0).then((res) => cb(null, res), cb) : step(0);
@@ -14016,7 +14017,7 @@ var require_websocket = __commonJS({
     var http2 = require("http");
     var net = require("net");
     var tls = require("tls");
-    var { randomBytes: randomBytes5, createHash: createHash5 } = require("crypto");
+    var { randomBytes: randomBytes5, createHash: createHash6 } = require("crypto");
     var { Duplex, Readable } = require("stream");
     var { URL: URL2 } = require("url");
     var PerMessageDeflate2 = require_permessage_deflate();
@@ -14684,7 +14685,7 @@ var require_websocket = __commonJS({
           abortHandshake(websocket, socket, "Invalid Upgrade header");
           return;
         }
-        const digest = createHash5("sha1").update(key + GUID).digest("base64");
+        const digest = createHash6("sha1").update(key + GUID).digest("base64");
         if (res.headers["sec-websocket-accept"] !== digest) {
           abortHandshake(websocket, socket, "Invalid Sec-WebSocket-Accept header");
           return;
@@ -15053,7 +15054,7 @@ var require_websocket_server = __commonJS({
     var EventEmitter3 = require("events");
     var http2 = require("http");
     var { Duplex } = require("stream");
-    var { createHash: createHash5 } = require("crypto");
+    var { createHash: createHash6 } = require("crypto");
     var extension2 = require_extension();
     var PerMessageDeflate2 = require_permessage_deflate();
     var subprotocol2 = require_subprotocol();
@@ -15360,7 +15361,7 @@ var require_websocket_server = __commonJS({
           );
         }
         if (this._state > RUNNING) return abortHandshake(socket, 503);
-        const digest = createHash5("sha1").update(key + GUID).digest("base64");
+        const digest = createHash6("sha1").update(key + GUID).digest("base64");
         const headers = [
           "HTTP/1.1 101 Switching Protocols",
           "Upgrade: websocket",
@@ -16946,12 +16947,12 @@ var require_adapter = __commonJS({
       return newFs;
     }
     function toPromise(method) {
-      return (...args) => new Promise((resolve, reject) => {
+      return (...args) => new Promise((resolve2, reject) => {
         args.push((err, result) => {
           if (err) {
             reject(err);
           } else {
-            resolve(result);
+            resolve2(result);
           }
         });
         method(...args);
@@ -21405,10 +21406,10 @@ var require_browser = __commonJS({
           text = canvas;
           canvas = void 0;
         }
-        return new Promise(function(resolve, reject) {
+        return new Promise(function(resolve2, reject) {
           try {
             const data = QRCode2.create(text, opts);
-            resolve(renderFunc(data, canvas, opts));
+            resolve2(renderFunc(data, canvas, opts));
           } catch (e) {
             reject(e);
           }
@@ -21489,11 +21490,11 @@ var require_server = __commonJS({
     }
     function render(renderFunc, text, params) {
       if (!params.cb) {
-        return new Promise(function(resolve, reject) {
+        return new Promise(function(resolve2, reject) {
           try {
             const data = QRCode2.create(text, params.opts);
             return renderFunc(data, params.opts, function(err, data2) {
-              return err ? reject(err) : resolve(data2);
+              return err ? reject(err) : resolve2(data2);
             });
           } catch (e) {
             reject(e);
@@ -21655,6 +21656,11 @@ var init_install_public_mcp = __esm({
 });
 
 // src/bin.ts
+var bin_exports = {};
+__export(bin_exports, {
+  augmentProcessPathWithCommonDirs: () => augmentProcessPathWithCommonDirs
+});
+module.exports = __toCommonJS(bin_exports);
 var import_node_path42 = __toESM(require("node:path"), 1);
 var import_node_child_process22 = require("node:child_process");
 var import_node_fs25 = require("node:fs");
@@ -37372,6 +37378,7 @@ var openApiOperationIds = {
   promoteSpecReadyCas: "promoteSpecReadyCas",
   recordSpecConsensusReview: "recordSpecConsensusReview",
   getSpecConsensusReview: "getSpecConsensusReview",
+  finalizeSpecReviewCas: "finalizeSpecReviewCas",
   onboardingKickoffTransition: "onboardingKickoffTransition",
   ingestTelemetry: "ingestTelemetry",
   ingestOperatorTelemetry: "ingestOperatorTelemetry",
@@ -37642,6 +37649,63 @@ var PERSONA_ROLE_MAP = {
   "spec-author": "spec"
 };
 var UNNAMED_PERSONAS = ["plan-reviewer", "scope-analyst"];
+var mrrlinSpecOwnershipSnapshotSchema = external_exports.discriminatedUnion("kind", [
+  external_exports.object({
+    kind: external_exports.literal("task"),
+    taskId: external_exports.string().min(1),
+    domains: external_exports.array(external_exports.string()).default(["code"])
+  }),
+  external_exports.object({
+    kind: external_exports.literal("plan"),
+    planId: external_exports.string().min(1),
+    domains: external_exports.array(external_exports.string()).default(["code"])
+  }),
+  external_exports.object({
+    kind: external_exports.literal("project"),
+    domains: external_exports.array(external_exports.string()).default(["code"])
+  })
+]);
+var SPEC_CONSENSUS_OUTCOMES = [
+  "CONVERGED",
+  "approved",
+  "CONSENSUS_BLOCKED",
+  "CONSENSUS_BLOCKED_CLARIFICATION",
+  "SKIPPED"
+];
+var specConsensusOutcomeSchema = external_exports.enum(SPEC_CONSENSUS_OUTCOMES);
+var mrrlinFinalizeSpecReviewCasBodySchema = external_exports.object({
+  expectedContentHash: external_exports.string().min(1),
+  reviewHash: external_exports.string().min(1).optional(),
+  ownership: mrrlinSpecOwnershipSnapshotSchema,
+  review: external_exports.object({
+    outcome: specConsensusOutcomeSchema,
+    rounds: external_exports.number().int().nonnegative().default(0),
+    suppressionEvidence: mrrlinSpecConsensusSuppressionEvidenceSchema.nullish(),
+    history: mrrlinSpecConsensusHistorySchema.nullish(),
+    highlights: mrrlinSpecConsensusHighlightsSchema.nullish()
+  }),
+  specReady: external_exports.boolean().default(false)
+}).refine((data) => {
+  if (data.specReady && (data.review.outcome === "CONSENSUS_BLOCKED" || data.review.outcome === "CONSENSUS_BLOCKED_CLARIFICATION")) {
+    return false;
+  }
+  return true;
+}, {
+  message: "specReady cannot be true when review outcome is blocked",
+  path: ["specReady"]
+});
+var mrrlinFinalizeSpecReviewCasResponseSchema = external_exports.object({
+  data: external_exports.discriminatedUnion("status", [
+    external_exports.object({
+      status: external_exports.literal("applied"),
+      promoted: external_exports.boolean()
+    }),
+    external_exports.object({
+      status: external_exports.literal("superseded"),
+      reason: external_exports.string()
+    })
+  ])
+});
 
 // ../../packages/schemas/dist/asyncJob.js
 var ASYNC_JOB_STATUSES = ["queued", "running", "done", "failed", "superseded"];
@@ -37713,7 +37777,7 @@ var mrrlinAsyncJobBeginAttemptSchema = external_exports.object({
 });
 var mrrlinAsyncJobTerminalizeSchema = external_exports.object({
   leaseId: external_exports.string().min(1),
-  status: external_exports.enum(["done", "failed"]),
+  status: external_exports.enum(["done", "failed", "superseded"]),
   resultJson: external_exports.string().nullable().optional(),
   error: external_exports.string().nullable().optional(),
   failureReason: mrrlinAsyncJobFailureReasonSchema.nullable().optional(),
@@ -38016,13 +38080,36 @@ var DEFAULT_INTEGRATION_ROUTES = {
     operations: {
       dispatch: "slack_post_message"
     }
+  },
+  publish: {
+    capability: "publish",
+    artifactKind: "page",
+    operations: {
+      preview: "publish_preview",
+      release: "publish_release",
+      rollback: "publish_rollback",
+      observe: "publish_observe"
+    }
+  },
+  "local-preview": {
+    capability: "publish",
+    artifactKind: "page",
+    operations: {
+      preview: "publish_preview",
+      release: "publish_release",
+      rollback: "publish_rollback",
+      observe: "publish_observe"
+    }
   }
 };
 var SERVER_ALIASES = {
   "github-mcp": "github",
   gh: "github",
   "github-server": "github",
-  "slack-mcp": "slack"
+  "slack-mcp": "slack",
+  "static-publisher": "publish",
+  "local-publisher": "publish",
+  preview: "local-preview"
 };
 function getDefaultCapabilityRouteForServer(serverId) {
   const normalizedId = (SERVER_ALIASES[serverId.toLowerCase()] ?? serverId).toLowerCase();
@@ -38052,10 +38139,14 @@ var mrrlinTaskEventAutonomyLevelSchema = external_exports.enum([
 ]);
 var mrrlinAutoDeploySchema = external_exports.enum(["off", "dev", "prod"]);
 var mrrlinTaskDomainsSchema = external_exports.array(external_exports.string()).min(1);
-function domainScopedReviewHash(rawHash, domain2) {
-  const d = Array.isArray(domain2) ? domain2.map(String) : [String(domain2 || "code")];
+function normalizeDomainArray(domains) {
+  const d = Array.isArray(domains) ? domains.map(String) : [String(domains || "code")];
   const normalized = d.map((v) => v.trim().toLowerCase()).filter(Boolean);
   normalized.sort();
+  return normalized.length === 0 ? ["code"] : Array.from(new Set(normalized));
+}
+function domainScopedReviewHash(rawHash, domain2) {
+  const normalized = normalizeDomainArray(domain2);
   return normalized.length === 1 && normalized[0] === "code" ? rawHash : `${rawHash}@${normalized.join(",")}`;
 }
 var mrrlinDeclaredOutcomeShapeSchema = external_exports.object({
@@ -38355,7 +38446,8 @@ var mrrlinTaskSchema = external_exports.object({
   // ADR 0020. OUTPUT-optional (not defaulted-required) so hardcoded task fixtures/mocks across the
   // codebase need no churn; the DB column is NOT NULL default 'code', so real rows always carry it,
   // and resolveHeads() treats an absent domain as `code`. Persisted create/update use their own forms.
-  domains: mrrlinTaskDomainsSchema.optional(),
+  // Preprocesses null to undefined so tasks with null domains deserialize gracefully without widening MrrlinTask['domains'] to null.
+  domains: external_exports.preprocess((val) => val === null ? void 0 : val, mrrlinTaskDomainsSchema.optional()),
   autonomyLevel: mrrlinAutonomyLevelSchema,
   autonomyReason: external_exports.string().min(1).max(240),
   blockedBy: external_exports.array(mrrlinTaskIdSchema),
@@ -38470,14 +38562,17 @@ var mrrlinWikiPageSchema = external_exports.object({
   createdAt: external_exports.string().datetime().nullable().default(null),
   folder: external_exports.string().min(1),
   id: mrrlinWikiPageIdSchema,
-  markdownBody: external_exports.string().min(1),
+  markdownBody: external_exports.string().default(""),
   path: mrrlinWikiPagePathSchema,
   preview: external_exports.string(),
   specReady: external_exports.boolean().default(false),
   taskId: mrrlinTaskIdSchema.nullable().default(null),
-  title: external_exports.string().min(1),
+  title: external_exports.string().default("Untitled"),
   updatedAt: external_exports.string().datetime().nullable().default(null)
 });
+var mrrlinWikiPageSummarySchema = mrrlinWikiPageSchema.omit({
+  markdownBody: true
+});
 var mrrlinMarkSpecReadyRequestSchema = external_exports.object({
   ready: external_exports.boolean()
 });
@@ -38628,6 +38723,7 @@ var mrrlinTaskCreateShapeSchema = external_exports.object({
   // "caller omitted this" apart from "caller explicitly chose off" -- omitted falls through to
   // the preview-only constant "dev"; the tasks column itself still defaults to 'off' at the
   // SQL level for any direct-insert path that bypasses createTask entirely.
+  assignee: mrrlinTaskAssigneeSchema.optional(),
   autoDeploy: mrrlinAutoDeploySchema.optional(),
   domains: mrrlinTaskDomainsSchema.optional(),
   autonomyLevel: mrrlinAutonomyLevelSchema.default("human_review"),
@@ -38772,6 +38868,7 @@ var mrrlinTaskListFiltersSchema = external_exports.object({
   category: taxonomyCategorySchema.optional(),
   dueDate: external_exports.string().date().optional(),
   impact: mrrlinTaskImpactSchema.optional(),
+  limit: external_exports.coerce.number().int().positive().optional(),
   q: external_exports.string().trim().min(1).optional(),
   status: mrrlinTaskStatusSchema.optional(),
   subcategory: taxonomySubcategorySchema.optional(),
@@ -38837,11 +38934,14 @@ var mrrlinWikiPageUpdateSchema = external_exports.object({
   taskId: mrrlinTaskIdSchema.nullable().optional(),
   title: external_exports.string().min(1).optional()
 }).refine((value) => Object.keys(value).length > 0, { message: "WikiPageUpdate requires at least one field" });
+var mrrlinWikiPageViewSchema = external_exports.enum(["summary"]);
 var mrrlinWikiPageListFiltersSchema = external_exports.object({
   folder: external_exports.string().min(1).optional(),
   id: mrrlinWikiPageIdSchema.optional(),
+  limit: external_exports.coerce.number().int().positive().optional(),
   q: external_exports.string().min(1).optional(),
-  taskId: mrrlinTaskIdSchema.optional()
+  taskId: mrrlinTaskIdSchema.optional(),
+  view: mrrlinWikiPageViewSchema.optional()
 });
 var mrrlinWikiPageSearchQuerySchema = external_exports.object({
   folder: external_exports.string().min(1).optional(),
@@ -38858,10 +38958,10 @@ var mrrlinWikiPageSearchResultSchema = external_exports.object({
   memoryClass: external_exports.enum(["normative", "historical"]),
   path: external_exports.string().min(1),
   precedence: external_exports.union([external_exports.literal(0), external_exports.literal(1), external_exports.literal(2), external_exports.literal(3)]).nullable(),
-  preview: external_exports.string(),
+  preview: external_exports.string().default(""),
   rank: external_exports.number(),
-  snippet: external_exports.string(),
-  title: external_exports.string().min(1),
+  snippet: external_exports.string().default(""),
+  title: external_exports.string().default(""),
   updatedAt: external_exports.string().datetime().nullable()
 });
 var wikiKnowledgeChunkSchema = external_exports.object({
@@ -39037,6 +39137,9 @@ var wikiPageResponseSchema = external_exports.object({
 var wikiPageListResponseSchema = external_exports.object({
   data: external_exports.array(mrrlinWikiPageSchema)
 });
+var wikiPageSummaryListResponseSchema = external_exports.object({
+  data: external_exports.array(mrrlinWikiPageSummarySchema)
+});
 var wikiPageSearchResponseSchema = external_exports.object({
   data: external_exports.array(mrrlinWikiPageSearchResultSchema)
 });
@@ -39508,6 +39611,7 @@ var mrrlinSchedulerParkedReasonSchema = external_exports.enum([
   "running",
   "awaiting_handoff",
   "awaiting_clarification",
+  "consensus_blocked",
   "spec_awaiting_approval",
   "blocked_by_active",
   // Derived, not stored (design.md, "Parking is derived"): an open `question` inbox item with
@@ -39541,7 +39645,8 @@ var mrrlinInFlightSchedulerEntrySchema = external_exports.discriminatedUnion("ki
     toolName: external_exports.enum(["draft_task_spec", "run_spec_consensus"]),
     // Additive: same resolution as the `run` variant above. null when `taskId` is null (a job
     // genuinely untied to a visible task) or the task could not be found.
-    taskTitle: external_exports.string().nullable()
+    taskTitle: external_exports.string().nullable(),
+    specPageId: external_exports.string().nullable().optional()
   })
 ]);
 var mrrlinIneligibleTaskSchema = external_exports.object({
@@ -39735,12 +39840,35 @@ var mrrlinInboxItemDecideSchema = external_exports.object({
     });
   }
 });
+var mrrlinInboxItemSummarySchema = external_exports.object({
+  answer: external_exports.string().nullable(),
+  createdAt: external_exports.string().datetime(),
+  createdBy: external_exports.string().min(1),
+  decidedAt: external_exports.string().datetime().nullable(),
+  decidedBy: external_exports.string().min(1).nullable(),
+  dedupKey: external_exports.string().nullable(),
+  directorSessionId: external_exports.string().min(1).nullable(),
+  groupId: external_exports.string().nullable().default(null),
+  id: mrrlinInboxItemIdSchema,
+  kind: mrrlinInboxItemKindSchema,
+  origin: external_exports.string().nullable().optional(),
+  planId: mrrlinPlanIdSchema.nullable().default(null),
+  projectSlug: mrrlinProjectSlugSchema,
+  readAt: external_exports.string().datetime().nullable(),
+  reason: external_exports.string().nullable().optional(),
+  status: mrrlinInboxItemStatusSchema,
+  taskId: mrrlinTaskIdSchema.nullable(),
+  taskTitle: external_exports.string().nullable()
+});
+var mrrlinInboxItemViewSchema = external_exports.enum(["summary"]);
 var mrrlinInboxItemListFiltersSchema = external_exports.object({
   groupId: external_exports.string().optional(),
   kind: mrrlinInboxItemKindSchema.optional(),
+  limit: external_exports.coerce.number().int().positive().optional(),
   readState: external_exports.enum(["read", "unread"]).optional(),
   status: mrrlinInboxItemStatusSchema.optional(),
-  taskId: mrrlinTaskIdSchema.optional()
+  taskId: mrrlinTaskIdSchema.optional(),
+  view: mrrlinInboxItemViewSchema.optional()
 });
 var mrrlinIntentVerdictSchema = external_exports.object({
   verdict: external_exports.enum(["CLEAR", "UNCLEAR"]),
@@ -39784,6 +39912,7 @@ var inboxItemsMarkReadResponseSchema = external_exports.object({
 });
 var inboxItemResponseSchema = external_exports.object({ data: mrrlinInboxItemSchema });
 var inboxItemListResponseSchema = external_exports.object({ data: external_exports.array(mrrlinInboxItemSchema) });
+var inboxItemSummaryListResponseSchema = external_exports.object({ data: external_exports.array(mrrlinInboxItemSummarySchema) });
 var capabilityServerIdSchema = external_exports.string().trim().min(1).max(200);
 var capabilityNameSchema = external_exports.string().trim().min(1).max(200);
 var capabilityOperationNameSchema = external_exports.string().min(1).max(100).regex(/^[a-z][a-z0-9_]*$/, "an operation name must be lower_snake_case, starting with a letter");
@@ -39984,11 +40113,12 @@ function buildTaskListPath(projectSlug, filters, view) {
     category: filters.category,
     dueDate: filters.dueDate,
     impact: filters.impact,
+    limit: filters.limit === void 0 ? void 0 : String(filters.limit),
     q: filters.q,
     status: filters.status,
     subcategory: filters.subcategory,
     type: filters.type,
-    view
+    view: view ?? filters.view
   });
 }
 var MrrlinApiError = class extends Error {
@@ -40253,28 +40383,35 @@ function createMrrlinClient(config2) {
     // this one implementation signature; MrrlinClient's declared overloads keep callers precise.
     async listTasks(projectSlug, filters = {}, options) {
       const path29 = buildTaskListPath(projectSlug, filters, options?.view);
-      const body = await request(path29);
+      const body = await request(path29, options?.signal ? { signal: options.signal } : void 0);
       if (options?.view === "summary") {
         return taskSummaryListResponseSchema.parse(body).data;
       }
       return taskListResponseSchema.parse(body).data;
     },
-    async listTaskSummaries(projectSlug, filters = {}) {
+    async listTaskSummaries(projectSlug, filters = {}, options) {
       const path29 = buildTaskListPath(projectSlug, filters, "summary");
-      const body = await request(path29);
+      const body = await request(path29, options?.signal ? { signal: options.signal } : void 0);
       return taskSummaryListResponseSchema.parse(body).data;
     },
     async listTaxonomy(projectSlug) {
       const body = await request(`${projectPath(projectSlug)}/taxonomy`);
       return taxonomyListResponseSchema.parse(body).data;
     },
-    async listWikiPages(projectSlug, filters = {}) {
+    async listWikiPages(projectSlug, filters = {}, options) {
+      const view = options?.view ?? filters.view;
       const path29 = appendQuery(`${projectPath(projectSlug)}/wiki`, {
         folder: filters.folder,
+        id: filters.id,
+        limit: filters.limit === void 0 ? void 0 : String(filters.limit),
         q: filters.q,
-        taskId: filters.taskId
+        taskId: filters.taskId,
+        view
       });
-      const body = await request(path29);
+      const body = await request(path29, options?.signal ? { signal: options.signal } : void 0);
+      if (view === "summary") {
+        return wikiPageSummaryListResponseSchema.parse(body).data;
+      }
       return wikiPageListResponseSchema.parse(body).data;
     },
     async searchWikiPages(projectSlug, query) {
@@ -40561,15 +40698,21 @@ function createMrrlinClient(config2) {
       });
       return capabilityUseResponseSchema.parse(body).data;
     },
-    async listInboxItems(projectSlug, filters = {}) {
+    async listInboxItems(projectSlug, filters = {}, options) {
+      const view = options?.view ?? filters.view;
       const url2 = appendQuery(`${projectPath(projectSlug)}/inbox`, {
         groupId: filters.groupId,
         kind: filters.kind,
+        limit: filters.limit === void 0 ? void 0 : String(filters.limit),
         readState: filters.readState,
         status: filters.status,
-        taskId: filters.taskId
+        taskId: filters.taskId,
+        view
       });
-      const body = await request(url2);
+      const body = await request(url2, options?.signal ? { signal: options.signal } : void 0);
+      if (view === "summary") {
+        return inboxItemSummaryListResponseSchema.parse(body).data;
+      }
       return inboxItemListResponseSchema.parse(body).data;
     },
     async createInboxItem(projectSlug, input) {
@@ -40952,6 +41095,14 @@ function createMrrlinClient(config2) {
       const body = await request(url2);
       return specConsensusReviewMaybeResponseSchema.parse(body).data;
     },
+    async finalizeSpecReviewCas(projectSlug, pageId, input) {
+      const body = await request(`${projectPath(projectSlug)}/wiki/${encodeURIComponent(pageId)}/consensus-finalize`, {
+        body: JSON.stringify(input),
+        headers: { "content-type": "application/json" },
+        method: "POST"
+      });
+      return mrrlinFinalizeSpecReviewCasResponseSchema.parse(body).data;
+    },
     async issueAgentCredential(projectSlug, input) {
       const body = await request(`${projectPath(projectSlug)}/agent-credentials`, {
         body: JSON.stringify(input),
@@ -41154,19 +41305,19 @@ function searchKnowledgeIndex(index, query, limit = 5) {
   if (queryTokens.length === 0)
     return [];
   const documents = index.map((chunk) => tokenize(`${chunk.heading_path.join(" ")} ${chunk.chunk_text}`));
-  const averageLength = documents.reduce((sum, tokens) => sum + tokens.length, 0) / Math.max(documents.length, 1);
+  const averageLength = documents.reduce((sum, tokens2) => sum + tokens2.length, 0) / Math.max(documents.length, 1);
   const documentFrequency = /* @__PURE__ */ new Map();
-  for (const tokens of documents) {
-    for (const token of new Set(tokens)) {
+  for (const tokens2 of documents) {
+    for (const token of new Set(tokens2)) {
       documentFrequency.set(token, (documentFrequency.get(token) ?? 0) + 1);
     }
   }
   const k1 = 1.2;
   const b = 0.75;
   const scored = index.map((chunk, chunkIndex) => {
-    const tokens = documents[chunkIndex] ?? [];
+    const tokens2 = documents[chunkIndex] ?? [];
     const frequencies = /* @__PURE__ */ new Map();
-    for (const token of tokens) {
+    for (const token of tokens2) {
       frequencies.set(token, (frequencies.get(token) ?? 0) + 1);
     }
     const score = queryTokens.reduce((sum, token) => {
@@ -41175,7 +41326,7 @@ function searchKnowledgeIndex(index, query, limit = 5) {
         return sum;
       const df = documentFrequency.get(token) ?? 0;
       const idf = Math.log(1 + (documents.length - df + 0.5) / (df + 0.5));
-      const denominator = tf + k1 * (1 - b + b * (tokens.length / Math.max(averageLength, 1)));
+      const denominator = tf + k1 * (1 - b + b * (tokens2.length / Math.max(averageLength, 1)));
       return sum + idf * (tf * (k1 + 1) / denominator);
     }, 0);
     return { ...chunk, score };
@@ -41342,7 +41493,7 @@ function createBoundedSemaphore(slots) {
   let available = slots;
   const queue = [];
   return {
-    acquire: () => available > 0 ? (available -= 1, Promise.resolve()) : new Promise((resolve) => queue.push(resolve)),
+    acquire: () => available > 0 ? (available -= 1, Promise.resolve()) : new Promise((resolve2) => queue.push(resolve2)),
     release: () => {
       const next = queue.shift();
       if (next) next();
@@ -41723,18 +41874,87 @@ function resolveProducerPersona(domain2) {
 }
 
 // src/consensus/acceptance-criteria.ts
-var HEADING_RE = /^(#{1,6})\s+(.+?)\s*$/;
-var CHECKLIST_ITEM_RE = /^\s*[-*]\s+\[[ xX]\]\s+(.+\S)\s*$/;
-function normalizeHeading(title) {
-  return title.trim().toLowerCase().replace(/\s+/g, " ");
+var HEADING_RE = /^[ ]{0,3}(#{1,6})\s+(.+?)\s*$/;
+var TOP_LEVEL_CHECKLIST_RE = /^[ ]{0,1}[-*]\s+\[[ xX]\]\s+(.+\S)\s*$/;
+var TOP_LEVEL_ITEM_RE = /^[ ]{0,1}(?:\d+[.)]|[-*])\s+(.+?\S)\s*$/;
+var INDENTED_CODE_RE = /^[ ]{4,}\S/;
+function createCommonMarkFenceScanner() {
+  let active = null;
+  return {
+    isFenced(line) {
+      const trimmed = line.trimStart();
+      const indent = line.length - trimmed.length;
+      if (indent <= 3) {
+        if (!active) {
+          const m = /^(`{3,}|~{3,})/.exec(trimmed);
+          if (m && m[1]) {
+            const fenceStr = m[1];
+            const char = fenceStr[0];
+            const length = fenceStr.length;
+            const remainder = trimmed.slice(length);
+            if (char === "~" || !remainder.includes("`")) {
+              active = { char, length };
+              return true;
+            }
+          }
+        } else {
+          const m = /^(`{3,}|~{3,})\s*$/.exec(trimmed);
+          if (m && m[1]) {
+            const fenceStr = m[1];
+            const char = fenceStr[0];
+            const length = fenceStr.length;
+            if (char === active.char && length >= active.length) {
+              active = null;
+              return true;
+            }
+          }
+        }
+      }
+      return active !== null;
+    },
+    isInCodeBlock() {
+      return active !== null;
+    }
+  };
+}
+var ACCEPTANCE_CRITERIA_ALIASES = /* @__PURE__ */ new Set([
+  "acceptance criteria",
+  "acceptance criteria (checklist)",
+  "acceptance criteria (dod)",
+  "acceptance criteria (definition of done)",
+  "criteria for acceptance",
+  "success criteria",
+  "definition of done",
+  "dod",
+  "dod (definition of done)",
+  "\u043A\u0440\u0438\u0442\u0435\u0440\u0456\u0457 \u043F\u0440\u0438\u0439\u043D\u044F\u0442\u043D\u043E\u0441\u0442\u0456",
+  "\u043A\u0440\u0438\u0442\u0435\u0440\u0456\u0457 \u043F\u0440\u0438\u0439\u043E\u043C\u043A\u0438",
+  "\u043A\u0440\u0438\u0442\u0435\u0440\u0456\u0457 \u043F\u0440\u0438\u0439\u043C\u0430\u043D\u043D\u044F",
+  "\u043A\u0440\u0438\u0442\u0435\u0440\u0456\u0457 \u0443\u0441\u043F\u0456\u0445\u0443",
+  "\u043A\u0440\u0438\u0442\u0435\u0440\u0456\u0457 \u0433\u043E\u0442\u043E\u0432\u043D\u043E\u0441\u0442\u0456",
+  "kryteria akceptacji",
+  "kryteria sukcesu",
+  "akzeptanzkriterien",
+  "erfolgskriterien"
+]);
+function isAcceptanceCriteriaHeading(title) {
+  const strippedNumber = title.trim().toLowerCase().replace(/^\d+[.)]\s*/, "");
+  const cleaned = strippedNumber.replace(/[:\-?.]+$/, "").replace(/\s+/g, " ").trim();
+  if (ACCEPTANCE_CRITERIA_ALIASES.has(cleaned)) return true;
+  if (cleaned.startsWith("acceptance criteria") || cleaned.startsWith("\u043A\u0440\u0438\u0442\u0435\u0440\u0456\u0457 \u043F\u0440\u0438\u0439\u043D\u044F\u0442\u043D\u043E\u0441\u0442\u0456")) return true;
+  return false;
 }
 function parseAcceptanceCriteria(markdown) {
   const lines2 = markdown.split(/\r?\n/);
+  const fenceScanner = createCommonMarkFenceScanner();
   let sectionStart = -1;
   let sectionLevel = 0;
   for (let i = 0; i < lines2.length; i += 1) {
-    const m = HEADING_RE.exec((lines2[i] ?? "").trim());
-    if (m && normalizeHeading(m[2] ?? "") === "acceptance criteria") {
+    const rawLine = lines2[i] ?? "";
+    const isFenced = fenceScanner.isFenced(rawLine);
+    if (isFenced) continue;
+    const m = HEADING_RE.exec(rawLine);
+    if (m && isAcceptanceCriteriaHeading(m[2] ?? "")) {
       sectionStart = i + 1;
       sectionLevel = (m[1] ?? "").length;
       break;
@@ -41743,14 +41963,65 @@ function parseAcceptanceCriteria(markdown) {
   if (sectionStart === -1) return null;
   const items = [];
   for (let i = sectionStart; i < lines2.length; i += 1) {
-    const line = lines2[i] ?? "";
-    const heading = HEADING_RE.exec(line.trim());
+    const rawLine = lines2[i] ?? "";
+    const isFenced = fenceScanner.isFenced(rawLine);
+    if (isFenced) continue;
+    if (INDENTED_CODE_RE.test(rawLine)) continue;
+    const heading = HEADING_RE.exec(rawLine);
     if (heading && (heading[1] ?? "").length <= sectionLevel) break;
-    const item = CHECKLIST_ITEM_RE.exec(line);
+    const item = TOP_LEVEL_CHECKLIST_RE.exec(rawLine);
     if (item && item[1]) items.push(item[1].trim());
   }
   return items.length > 0 ? { items } : null;
 }
+function normalizeAcceptanceCriteria(markdown) {
+  const isCrlf = markdown.includes("\r\n");
+  const newline = isCrlf ? "\r\n" : "\n";
+  const lines2 = markdown.split(/\r?\n/);
+  const fenceScanner = createCommonMarkFenceScanner();
+  let sectionStart = -1;
+  let sectionLevel = 0;
+  let headingIndex = -1;
+  for (let i = 0; i < lines2.length; i += 1) {
+    const rawLine = lines2[i] ?? "";
+    const isFenced = fenceScanner.isFenced(rawLine);
+    if (isFenced) continue;
+    const m = HEADING_RE.exec(rawLine);
+    if (m && isAcceptanceCriteriaHeading(m[2] ?? "")) {
+      headingIndex = i;
+      sectionStart = i + 1;
+      sectionLevel = (m[1] ?? "").length;
+      break;
+    }
+  }
+  if (sectionStart === -1) return markdown;
+  let changed = false;
+  const newLines = [...lines2];
+  const hashes = "#".repeat(sectionLevel || 2);
+  if (newLines[headingIndex]?.trim() !== `${hashes} Acceptance criteria`) {
+    newLines[headingIndex] = `${hashes} Acceptance criteria`;
+    changed = true;
+  }
+  const bodyFenceScanner = createCommonMarkFenceScanner();
+  for (let i = 0; i < sectionStart; i += 1) {
+    bodyFenceScanner.isFenced(lines2[i] ?? "");
+  }
+  for (let i = sectionStart; i < newLines.length; i += 1) {
+    const rawLine = newLines[i] ?? "";
+    const isFenced = bodyFenceScanner.isFenced(rawLine);
+    if (isFenced) continue;
+    if (INDENTED_CODE_RE.test(rawLine)) continue;
+    const heading = HEADING_RE.exec(rawLine);
+    if (heading && (heading[1] ?? "").length <= sectionLevel) break;
+    if (TOP_LEVEL_CHECKLIST_RE.test(rawLine)) continue;
+    const match = TOP_LEVEL_ITEM_RE.exec(rawLine);
+    if (match && match[1]) {
+      newLines[i] = `- [ ] ${match[1]}`;
+      changed = true;
+    }
+  }
+  return changed ? newLines.join(newline) : markdown;
+}
 function resolveSpecBudget(impact) {
   switch (impact?.toLowerCase()) {
     case "high":
@@ -41822,12 +42093,21 @@ function applyClarificationCap(issues, impact) {
   };
 }
 async function runSpecGate(_target, deps, opts) {
-  if (!await deps.consensusEnabled()) return { outcome: "SKIPPED" };
+  const spec = await deps.readSpec();
+  let currentHash = spec.contentHash;
+  let currentMarkdown = spec.markdownBody;
+  if (!await deps.consensusEnabled()) {
+    return {
+      outcome: "SKIPPED",
+      evaluatedSnapshot: { contentHash: currentHash, markdownBody: currentMarkdown }
+    };
+  }
   const intent = await deps.readIntent();
   const legacyExempt = intent.specApproved === "skipped_legacy";
   if (!legacyExempt && intent.taskId !== null && (intent.seed === null || intent.seed.trim() === "")) {
     return {
       outcome: "CONSENSUS_BLOCKED",
+      evaluatedSnapshot: { contentHash: currentHash, markdownBody: currentMarkdown },
       operatorClarifications: [
         {
           kind: "missing_requirement",
@@ -41845,10 +42125,17 @@ async function runSpecGate(_target, deps, opts) {
   const baseHeads = resolveHeads(intent.domains, intent.impact);
   const extraHeads = opts?.extraHeads ?? [];
   const heads = [...baseHeads, ...extraHeads.filter((h) => !baseHeads.includes(h))];
-  const spec = await deps.readSpec();
-  let currentHash = spec.contentHash;
-  let currentMarkdown = spec.markdownBody;
   let conflicted = false;
+  if (parseAcceptanceCriteria(currentMarkdown) === null) {
+    const normalized = normalizeAcceptanceCriteria(currentMarkdown);
+    if (parseAcceptanceCriteria(normalized) !== null) {
+      const cas = await deps.casUpdateSpec(normalized, currentHash);
+      if (cas.ok) {
+        currentHash = cas.contentHash;
+        currentMarkdown = normalized;
+      }
+    }
+  }
   if (parseAcceptanceCriteria(currentMarkdown) === null) {
     const bootstrapIssue = {
       id: "acceptance-criteria-bootstrap",
@@ -41861,6 +42148,7 @@ async function runSpecGate(_target, deps, opts) {
 `);
       return {
         outcome: "CONSENSUS_BLOCKED",
+        evaluatedSnapshot: { contentHash: currentHash, markdownBody: currentMarkdown },
         diagnostics: [
           {
             kind: "acceptance_criteria_unauthorable",
@@ -41881,8 +42169,11 @@ async function runSpecGate(_target, deps, opts) {
     }
     const cas = await deps.casUpdateSpec(revised.text, currentHash);
     if (!cas.ok) {
-      await deps.writeEvidence({ specPageId: spec.pageId, outcome: "SPEC_CHANGED_DURING_REVIEW" });
-      return { outcome: "SPEC_CHANGED_DURING_REVIEW" };
+      await deps.writeEvidence?.({ specPageId: spec.pageId, outcome: "SPEC_CHANGED_DURING_REVIEW" });
+      return {
+        outcome: "SPEC_CHANGED_DURING_REVIEW",
+        evaluatedSnapshot: { contentHash: currentHash, markdownBody: currentMarkdown }
+      };
     }
     currentHash = cas.contentHash;
     currentMarkdown = revised.text;
@@ -41918,8 +42209,11 @@ async function runSpecGate(_target, deps, opts) {
     // error and must propagate so it is not silently masked as a conflict.
   }).catch((e) => conflicted ? null : Promise.reject(e));
   if (conflicted || result === null) {
-    await deps.writeEvidence({ specPageId: spec.pageId, outcome: "SPEC_CHANGED_DURING_REVIEW" });
-    return { outcome: "SPEC_CHANGED_DURING_REVIEW" };
+    await deps.writeEvidence?.({ specPageId: spec.pageId, outcome: "SPEC_CHANGED_DURING_REVIEW" });
+    return {
+      outcome: "SPEC_CHANGED_DURING_REVIEW",
+      evaluatedSnapshot: { contentHash: currentHash, markdownBody: currentMarkdown }
+    };
   }
   if (result.outcome === "CONVERGED" && intent.taskId !== null && !validateSpecIdentity(currentMarkdown, intent.taskId)) {
     process.stderr.write(
@@ -41928,6 +42222,7 @@ async function runSpecGate(_target, deps, opts) {
     );
     return {
       outcome: "CONSENSUS_BLOCKED",
+      evaluatedSnapshot: { contentHash: currentHash, markdownBody: currentMarkdown },
       diagnostics: [
         {
           kind: "spec_identity_mismatch",
@@ -41951,19 +42246,50 @@ async function runSpecGate(_target, deps, opts) {
     keptClarifications = capped.kept;
     droppedByCap = capped.dropped;
   }
-  await deps.writeEvidence({
-    specPageId: spec.pageId,
-    outcome: result.outcome,
-    rounds: result.rounds,
-    history: result.history,
-    contentHash: currentHash,
-    ...droppedByCap.length > 0 ? { droppedByCap } : {}
-  });
+  const ownership = intent.taskId !== null ? { kind: "task", taskId: intent.taskId, domains: intent.domains ?? ["code"] } : intent.planId != null ? { kind: "plan", planId: intent.planId, domains: intent.domains ?? ["code"] } : { kind: "project", domains: intent.domains ?? ["code"] };
+  if (deps.finalizeSpecReviewCas) {
+    const shouldFinalizeCas = result.outcome === "CONVERGED" || result.outcome === "CONSENSUS_BLOCKED" && keptClarifications.length === 0;
+    if (shouldFinalizeCas) {
+      const finalizeRes = await deps.finalizeSpecReviewCas({
+        expectedContentHash: currentHash,
+        ownership,
+        review: {
+          outcome: result.outcome,
+          rounds: result.rounds,
+          history: result.history,
+          ...droppedByCap.length > 0 ? { suppressionEvidence: { droppedByCap } } : {}
+        },
+        specReady: result.outcome === "CONVERGED"
+      });
+      if (finalizeRes.status === "superseded") {
+        return {
+          outcome: "SUPERSEDED",
+          evaluatedSnapshot: { contentHash: currentHash, markdownBody: currentMarkdown },
+          evaluatedOwnership: ownership
+        };
+      }
+    }
+  } else {
+    await deps.writeEvidence?.({
+      specPageId: spec.pageId,
+      outcome: result.outcome,
+      rounds: result.rounds,
+      history: result.history,
+      contentHash: currentHash,
+      ...droppedByCap.length > 0 ? { droppedByCap } : {}
+    });
+    if (result.outcome === "CONVERGED") {
+      await deps.promoteSpecReady?.(currentHash);
+    }
+  }
   if (result.outcome === "CONVERGED") {
-    await deps.promoteSpecReady(currentHash);
     return {
       outcome: "CONVERGED",
+      evaluatedSnapshot: { contentHash: currentHash, markdownBody: currentMarkdown },
+      evaluatedOwnership: ownership,
       headOutcomes: result.history.at(-1)?.headOutcomes ?? [],
+      rounds: result.rounds,
+      history: result.history,
       arbiterInfo: result.arbiterInfo,
       panelComposition: result.panelComposition,
       sufficiencyVerdict: result.sufficiencyVerdict
@@ -41972,6 +42298,10 @@ async function runSpecGate(_target, deps, opts) {
   if (result.outcome === "CONSENSUS_BLOCKED") {
     return {
       outcome: "CONSENSUS_BLOCKED",
+      evaluatedSnapshot: { contentHash: currentHash, markdownBody: currentMarkdown },
+      evaluatedOwnership: ownership,
+      rounds: result.rounds,
+      history: result.history,
       ...keptClarifications.length > 0 ? { operatorClarifications: keptClarifications } : {},
       ...droppedByCap.length > 0 ? { droppedByCap } : {},
       ...result.escalation ? { escalation: result.escalation } : {},
@@ -41983,6 +42313,8 @@ async function runSpecGate(_target, deps, opts) {
   }
   return {
     outcome: result.outcome,
+    evaluatedSnapshot: { contentHash: currentHash, markdownBody: currentMarkdown },
+    evaluatedOwnership: ownership,
     arbiterInfo: result.arbiterInfo,
     panelComposition: result.panelComposition,
     sufficiencyVerdict: result.sufficiencyVerdict
@@ -42192,22 +42524,22 @@ var CodexJsonRpcClient = class {
     const payload = { jsonrpc: "2.0", id, method, params };
     const line = `${JSON.stringify(payload)}
 `;
-    const resultPromise = new Promise((resolve, reject) => {
+    const resultPromise = new Promise((resolve2, reject) => {
       const onResponse = (response) => {
         if (response.error) {
           reject(new Error(response.error.message ?? "Codex JSON-RPC error"));
           return;
         }
-        resolve(response.result);
+        resolve2(response.result);
       };
       this.emitter.once(`response:${id}`, onResponse);
     });
-    await new Promise((resolve, reject) => {
+    await new Promise((resolve2, reject) => {
       this.writeStream.write(line, (error51) => {
         if (error51)
           reject(error51);
         else
-          resolve();
+          resolve2();
       });
     });
     return await resultPromise;
@@ -42370,11 +42702,11 @@ var CodexServerManager = class {
       env: config2?.env ?? process.env,
       shell: true
     });
-    await new Promise((resolve, reject) => {
+    await new Promise((resolve2, reject) => {
       child.on("error", (err) => {
         reject(new Error(`Failed to spawn codex app-server: ${err.message}`));
       });
-      child.on("spawn", () => resolve());
+      child.on("spawn", () => resolve2());
     });
     if (!child.stdin || !child.stdout) {
       child.kill();
@@ -42401,6 +42733,8 @@ var CodexServerManager = class {
         rpcClient.respond(id, { decision: "accept" });
       } else if (method === "mcpServer/elicitation/request") {
         rpcClient.respond(id, { action: "accept" });
+      } else if (method.includes("approval") || method.includes("Approval") || method.includes("permission") || method.includes("elicitation")) {
+        rpcClient.respond(id, { action: "accept", decision: "accept", approved: true });
       }
     });
     const notificationHandlers = /* @__PURE__ */ new Set();
@@ -43151,7 +43485,7 @@ var ClaudeProcess = class {
       cwd: options.cwd?.trim() || void 0,
       // Inherit the operator's env so the CLI picks up their own ~/.claude.json tool registry —
       // unless an explicit mcpConfig was provided in options.
-      env: process.env,
+      env: options.env ?? process.env,
       stdio: ["pipe", "pipe", "pipe"]
     });
     this.child.stdout.setEncoding("utf8");
@@ -43198,6 +43532,9 @@ var ClaudeProcess = class {
     if (options.mcpConfig) {
       args.push("--mcp-config", options.mcpConfig);
     }
+    if (options.appendSystemPrompt && options.appendSystemPrompt.trim().length > 0) {
+      args.push("--append-system-prompt", options.appendSystemPrompt.trim());
+    }
     args.push("--permission-mode", options.permissionMode);
     if (options.disallowedTools && options.disallowedTools.length > 0) {
       args.push("--disallowedTools", options.disallowedTools.join(","));
@@ -43243,15 +43580,15 @@ var ClaudeProcess = class {
       return Promise.resolve();
     }
     if (this.disposed) {
-      return new Promise((resolve) => {
+      return new Promise((resolve2) => {
         const off = this.onExit(() => {
           off();
-          resolve();
+          resolve2();
         });
       });
     }
     this.disposed = true;
-    return new Promise((resolve) => {
+    return new Promise((resolve2) => {
       const forceKill = setTimeout(() => {
         if (!this.exited)
           this.child.kill("SIGKILL");
@@ -43260,7 +43597,7 @@ var ClaudeProcess = class {
       const off = this.onExit(() => {
         clearTimeout(forceKill);
         off();
-        resolve();
+        resolve2();
       });
       this.child.kill("SIGTERM");
     });
@@ -43460,11 +43797,16 @@ function permissionModeFor(sandbox) {
   return { permissionMode: "bypassPermissions" };
 }
 var ClaudeAgentHandle = class {
+  childEnv;
   // One resident child + one mapper per thread — mirrors ClaudeProcess's own per-thread residency
   // and ClaudeBridgeEventMapper's documented "fresh instance per thread" contract (its tool-use
   // dedup sets must not leak across threads).
   processes = /* @__PURE__ */ new Map();
   mappers = /* @__PURE__ */ new Map();
+  /** Exact complete environment passed unchanged to every process this handle spawns. */
+  constructor(childEnv) {
+    this.childEnv = childEnv;
+  }
   async startThread(params) {
     const { permissionMode, disallowedTools } = permissionModeFor(params.sandbox);
     const child = new ClaudeProcess({
@@ -43473,7 +43815,9 @@ var ClaudeAgentHandle = class {
       disallowedTools,
       model: params.model,
       cwd: params.cwd,
-      mcpConfig: params.mcpConfig
+      mcpConfig: params.mcpConfig,
+      appendSystemPrompt: params.baseInstructions,
+      ...this.childEnv === void 0 ? {} : { env: this.childEnv }
     });
     this.processes.set(child.sessionId, child);
     this.mappers.set(child.sessionId, new ClaudeBridgeEventMapper());
@@ -43487,7 +43831,9 @@ var ClaudeAgentHandle = class {
       disallowedTools,
       model: params.model,
       cwd: params.cwd,
-      mcpConfig: params.mcpConfig
+      mcpConfig: params.mcpConfig,
+      appendSystemPrompt: params.baseInstructions,
+      ...this.childEnv === void 0 ? {} : { env: this.childEnv }
     });
     this.processes.set(threadId, child);
     this.mappers.set(threadId, new ClaudeBridgeEventMapper());
@@ -43631,8 +43977,14 @@ var AgyProcess = class _AgyProcess {
         args.push("--mode", "accept-edits");
         break;
     }
-    if (options.model) {
-      args.push("--model", options.model);
+    let modelToUse = options.model;
+    if (modelToUse === "gemini-3.1-pro-high" || modelToUse === "gemini-3.7-flash-high") {
+      modelToUse = "gemini-3.8-flash-high";
+    } else if (modelToUse === "gemini-3.1-pro-low" || modelToUse === "gemini-3.7-flash-low") {
+      modelToUse = "gemini-3.8-flash-low";
+    }
+    if (modelToUse) {
+      args.push("--model", modelToUse);
     }
     if (mode.kind === "resume") {
       args.push("--conversation", mode.resumeId);
@@ -43641,7 +43993,7 @@ var AgyProcess = class _AgyProcess {
     const cwd = options.cwd?.trim() || void 0;
     this.child = (0, import_node_child_process4.spawn)(executable, args, {
       cwd,
-      env: process.env,
+      env: options.env ?? process.env,
       stdio: ["pipe", "pipe", "pipe"]
     });
     activeProcesses.add(this.child);
@@ -43861,7 +44213,7 @@ function agyModelCatalog() {
     id: entry.id,
     displayName: entry.displayName,
     description: entry.description,
-    isDefault: entry.id === "gemini-3.1-pro-high"
+    isDefault: entry.id === "gemini-3.8-flash-high"
   }));
 }
 var MODEL_ID_REGEX2 = /^[a-zA-Z0-9][a-zA-Z0-9._-]{1,63}$/;
@@ -43886,7 +44238,7 @@ function parseAgyModelsOutput(output3) {
       id,
       displayName,
       description,
-      isDefault: id === "gemini-3.1-pro-high"
+      isDefault: id === "gemini-3.8-flash-high"
     });
   }
   return models;
@@ -43953,18 +44305,28 @@ function permissionModeFor2(sandbox, approvalPolicy) {
   return { permissionMode: "acceptEdits" };
 }
 var AgyAgentHandle = class {
+  childEnv;
   processes = /* @__PURE__ */ new Map();
   mappers = /* @__PURE__ */ new Map();
+  baseInstructions = /* @__PURE__ */ new Map();
+  /** Exact complete environment passed unchanged to every process this handle spawns. */
+  constructor(childEnv) {
+    this.childEnv = childEnv;
+  }
   async startThread(params) {
     const { permissionMode } = permissionModeFor2(params.sandbox, params.approvalPolicy);
     const child = new AgyProcess({
       mode: { kind: "new" },
       permissionMode,
       model: params.model,
-      cwd: params.cwd
+      cwd: params.cwd,
+      ...this.childEnv === void 0 ? {} : { env: this.childEnv }
     });
     this.processes.set(child.sessionId, child);
     this.mappers.set(child.sessionId, new AgyBridgeEventMapper());
+    if (params.baseInstructions && params.baseInstructions.trim().length > 0) {
+      this.baseInstructions.set(child.sessionId, params.baseInstructions.trim());
+    }
     return { threadId: child.sessionId };
   }
   async resumeThread(threadId, params) {
@@ -43978,16 +44340,31 @@ var AgyAgentHandle = class {
       mode: { kind: "resume", resumeId: threadId },
       permissionMode,
       model: params.model,
-      cwd: params.cwd
+      cwd: params.cwd,
+      ...this.childEnv === void 0 ? {} : { env: this.childEnv }
     });
     this.processes.set(threadId, child);
     this.mappers.set(threadId, new AgyBridgeEventMapper());
+    if (params.baseInstructions && params.baseInstructions.trim().length > 0) {
+      this.baseInstructions.set(threadId, params.baseInstructions.trim());
+    }
     return { threadId: child.sessionId };
   }
   async startTurn(threadId, input) {
     const child = this.requireProcess(threadId);
     const text = input.filter((block) => block.type === "text").map((block) => block.text).join("\n");
-    child.sendTurn(text);
+    const inst = this.baseInstructions.get(threadId);
+    if (inst) {
+      const composed = `[SYSTEM INSTRUCTIONS - MRRLIN DIRECTOR]
+${inst}
+
+---
+[OPERATOR REQUEST]
+${text}`;
+      child.sendTurn(composed);
+    } else {
+      child.sendTurn(text);
+    }
     return { turnId: void 0 };
   }
   async interruptTurn(threadId) {
@@ -43997,6 +44374,7 @@ var AgyAgentHandle = class {
       });
       this.processes.delete(threadId);
       this.mappers.delete(threadId);
+      this.baseInstructions.delete(threadId);
     }
   }
   onEvent(threadId, handler) {
@@ -44019,6 +44397,14 @@ var AgyAgentHandle = class {
   async readRateLimits() {
     return null;
   }
+  disposeAll() {
+    for (const child of this.processes.values())
+      void child.dispose().catch(() => {
+      });
+    this.processes.clear();
+    this.mappers.clear();
+    this.baseInstructions.clear();
+  }
   requireProcess(threadId) {
     const child = this.processes.get(threadId);
     if (!child)
@@ -44191,7 +44577,7 @@ ${input.prompt}` : input.prompt;
     args.push("-m", input.model);
   }
   args.push(fullPrompt);
-  return new Promise((resolve) => {
+  return new Promise((resolve2) => {
     let settled = false;
     const timerRef = { id: void 0 };
     const finish = (result) => {
@@ -44200,7 +44586,7 @@ ${input.prompt}` : input.prompt;
       settled = true;
       if (timerRef.id)
         clearTimeout(timerRef.id);
-      resolve(result);
+      resolve2(result);
     };
     const options = {
       stdio: ["ignore", "pipe", "pipe"],
@@ -44278,7 +44664,7 @@ function runClaudeExec(input, deps) {
     args.push("--model", input.model);
   }
   args.push(input.prompt);
-  return new Promise((resolve) => {
+  return new Promise((resolve2) => {
     let settled = false;
     const timerRef = { id: void 0 };
     const finish = (result) => {
@@ -44287,7 +44673,7 @@ function runClaudeExec(input, deps) {
       settled = true;
       if (timerRef.id)
         clearTimeout(timerRef.id);
-      resolve(result);
+      resolve2(result);
     };
     const options = {
       stdio: ["ignore", "pipe", "pipe"],
@@ -44385,10 +44771,21 @@ function runAgyExec(input, deps) {
     prompt = trimmedInstructions + "\n\n" + prompt;
   }
   if (input.model) {
-    args.push("--model", input.model);
+    let targetModel = input.model;
+    if (targetModel === "gemini-3.1-pro-high" || targetModel === "gemini-3.7-flash-high") {
+      targetModel = "gemini-3.8-flash-high";
+    } else if (targetModel === "gemini-3.1-pro-low" || targetModel === "gemini-3.7-flash-low") {
+      targetModel = "gemini-3.8-flash-low";
+    }
+    const known = AGY_MODEL_CATALOG.find((m) => m.id === targetModel || m.displayName.toLowerCase() === targetModel.toLowerCase());
+    if (known && !known.id.startsWith("gemini-3.1")) {
+      args.push("--model", known.id);
+    } else {
+      args.push("--model", "gemini-3.8-flash-high");
+    }
   }
   args.push(`--print=${prompt}`);
-  return new Promise((resolve) => {
+  return new Promise((resolve2) => {
     let settled = false;
     const timerRef = { id: void 0 };
     const finish = (result) => {
@@ -44397,7 +44794,7 @@ function runAgyExec(input, deps) {
       settled = true;
       if (timerRef.id)
         clearTimeout(timerRef.id);
-      resolve(result);
+      resolve2(result);
     };
     const options = {
       stdio: ["ignore", "pipe", "pipe"],
@@ -44468,7 +44865,9 @@ function extractOneShotResult2(stdout) {
 
 // ../../packages/agent-client/dist/run-agent-exec.js
 function runAgentExec(input, deps, persistedProvider) {
-  const provider = resolveProvider(process.env, persistedProvider);
+  const explicitProvider = persistedProvider ?? process.env.MRRLIN_CONSENSUS_PROVIDER?.trim().toLowerCase();
+  const envToUse = explicitProvider ? { ...process.env, MRRLIN_AGENT_PROVIDER: explicitProvider } : process.env;
+  const provider = resolveProvider(envToUse, explicitProvider);
   if (provider.id === "codex") {
     return runCodexExec(input, deps);
   }
@@ -44484,7 +44883,7 @@ function runAgentExec(input, deps, persistedProvider) {
 // ../../packages/agent-client/dist/resolved-seat.js
 var CODEX_DEFAULT_MODEL_CONSTANT = "gpt-5.6-terra";
 var CLAUDE_DEFAULT_MODEL_CONSTANT = "sonnet";
-var AGY_DEFAULT_MODEL_CONSTANT = "gemini-3.1-pro-high";
+var AGY_DEFAULT_MODEL_CONSTANT = "gemini-3.8-flash-high";
 var CODEX_DEFAULT_MODEL_ENV = "MRRLIN_CODEX_DEFAULT_MODEL";
 var CODEX_STRONG_MODEL_ENV = "MRRLIN_CODEX_STRONG_MODEL";
 var CLAUDE_DEFAULT_MODEL_ENV = "MRRLIN_CLAUDE_DEFAULT_MODEL";
@@ -44635,23 +45034,32 @@ async function resolveGatedTaskId(client, projectSlug, page) {
 function domainScopedReviewHash2(rawHash, domain2) {
   return domainScopedReviewHash(rawHash, domain2);
 }
-async function resolveSpecDomain(client, projectSlug, page) {
+async function resolveSpecDomains(client, projectSlug, page) {
   try {
     const taskId = await resolveGatedTaskId(client, projectSlug, page);
     if (taskId !== null) {
       const task = await client.getTask(projectSlug, taskId);
-      return normalizeDomain(task?.domains ?? task?.domain);
+      return normalizeDomainArray(task?.domains ?? task?.domain);
     }
     const plans = await client.listPlans(projectSlug);
     const plan = plans.find((p) => p.specWikiPageId === page.id);
-    const planDomains = plan?.domains ?? plan?.domain;
-    if (planDomains != null) return normalizeDomain(planDomains);
+    if (plan) {
+      const rawPlanDomains = plan?.domains ?? plan?.domain;
+      const substantivePlanDomains = (Array.isArray(rawPlanDomains) ? rawPlanDomains : rawPlanDomains != null ? [rawPlanDomains] : []).map(String).map((d) => d.trim().toLowerCase()).filter(Boolean);
+      if (substantivePlanDomains.length > 0) {
+        return normalizeDomainArray(substantivePlanDomains);
+      }
+    }
     const project = await client.getProject(projectSlug);
-    return normalizeDomain(project?.defaultDomains ?? project?.defaultDomain);
+    return normalizeDomainArray(project?.defaultDomains ?? project?.defaultDomain);
   } catch {
-    return "code";
+    return ["code"];
   }
 }
+async function resolveSpecDomain(client, projectSlug, page) {
+  const domains = await resolveSpecDomains(client, projectSlug, page);
+  return normalizeDomain(domains);
+}
 
 // src/consensus/findings.ts
 function shouldCurateFindings(history) {
@@ -44726,14 +45134,14 @@ var DIFF_MAX_BYTES = 2e5;
 var FASTGATE_OUTPUT_MAX_BYTES = 16e3;
 var GIT_TIMEOUT_MS = 6e4;
 var FASTGATE_TIMEOUT_MS = 3e5;
-var defaultRunCmd = (cmd, args, opts) => new Promise((resolve) => {
+var defaultRunCmd = (cmd, args, opts) => new Promise((resolve2) => {
   let settled = false;
   const timerRef = { id: void 0 };
   const finish = (result) => {
     if (settled) return;
     settled = true;
     if (timerRef.id) clearTimeout(timerRef.id);
-    resolve(result);
+    resolve2(result);
   };
   let child;
   try {
@@ -45035,7 +45443,13 @@ function gateCallRecorder(args) {
 }
 function buildSpecGateDeps(args) {
   const { client, projectSlug, specPageId, codexExecutable, extraHeadCount = 0, seat, stateDir } = args;
-  const recordCost = gateCallRecorder({ stateDir, projectSlug, gate: "spec", provider: seat?.id ?? null });
+  const consensusProvider = process.env.MRRLIN_CONSENSUS_PROVIDER?.trim().toLowerCase() || void 0;
+  const recordCost = gateCallRecorder({
+    stateDir,
+    projectSlug,
+    gate: "spec",
+    provider: consensusProvider ?? seat?.id ?? null
+  });
   const rounds = Number(process.env["MRRLIN_CONSENSUS_ROUNDS"] ?? 5);
   const maxHeadCalls = 2 * rounds * (MAX_DOMAIN_HEADS + extraHeadCount + 2);
   const timeoutMs = Number(process.env["MRRLIN_CONSENSUS_HEAD_TIMEOUT_MS"] ?? 15e4);
@@ -45049,8 +45463,24 @@ function buildSpecGateDeps(args) {
         }
         const taskId = await resolveGatedTaskId(client, projectSlug, { id: page.id, taskId: page.taskId ?? null });
         if (taskId === null) {
+          const plans = await client.listPlans(projectSlug);
+          const plan = plans.find((p) => p.specWikiPageId === specPageId);
+          if (plan) {
+            const project2 = await client.getProject(projectSlug);
+            const rawPlanDomains = plan?.domains ?? plan?.domain;
+            const substantivePlanDomains = (Array.isArray(rawPlanDomains) ? rawPlanDomains : rawPlanDomains != null ? [rawPlanDomains] : []).map(String).map((d) => d.trim().toLowerCase()).filter(Boolean);
+            const planDomains = substantivePlanDomains.length > 0 ? substantivePlanDomains : project2?.defaultDomains ?? (project2?.defaultDomain ? [project2.defaultDomain] : void 0);
+            return {
+              taskId: null,
+              planId: plan.id,
+              seed: null,
+              title: plan.title ?? plan.name ?? null,
+              domains: planDomains,
+              notes: null
+            };
+          }
           const project = await client.getProject(projectSlug);
-          return { taskId: null, seed: null, title: null, domains: project.defaultDomains, notes: null };
+          return { taskId: null, planId: null, seed: null, title: null, domains: project.defaultDomains, notes: null };
         }
         const task = await client.getTask(projectSlug, taskId);
         if (!task) {
@@ -45067,10 +45497,7 @@ function buildSpecGateDeps(args) {
           if (answered && answered.answer) {
             resolvedSeed = "(No operator statement was recorded when this task was created. Derived from the operator's answer to the gate's requirements question:)\n\n" + answered.answer;
           } else {
-            const parsed = notes ? parseAcceptanceCriteria(notes) : null;
-            if (parsed !== null && parsed.items.length > 0) {
-              resolvedSeed = "(No operator statement on record for this task. Derived from the task's own notes \u2014 the following acceptance criteria were extracted verbatim:)\n\n" + parsed.items.map((c) => `- ${c}`).join("\n");
-            }
+            resolvedSeed = null;
           }
         }
         const adjudicated = selectAdjudicated(taskInboxItems);
@@ -45132,7 +45559,9 @@ ${artifact}`,
           timeoutMs,
           sandbox: "read-only",
           codexExecutable
-        }
+        },
+        void 0,
+        consensusProvider
       );
       recordCost("head", personaName, null, startedAt, result);
       return result;
@@ -45149,8 +45578,10 @@ ${artifact}`,
           codexExecutable,
           // model-tier-planning-and-arbiter task 2.5 (D1): the arbiter is pinned to the seat's
           // default model.
-          model: seat?.model ?? seat?.models?.strong
-        }
+          model: consensusProvider ? void 0 : seat?.model ?? seat?.models?.strong
+        },
+        void 0,
+        consensusProvider
       );
       recordCost("arbiter", "arbiter", seat?.model ?? seat?.models?.strong ?? null, startedAt, result);
       return result;
@@ -45173,7 +45604,9 @@ ${artifact}`,
           timeoutMs,
           sandbox: "read-only",
           codexExecutable
-        }
+        },
+        void 0,
+        consensusProvider
       );
       recordCost("reviser", null, null, startedAt, result);
       return result;
@@ -45206,6 +45639,28 @@ ${artifact}`,
         return false;
       }
     },
+    async finalizeSpecReviewCas(input) {
+      const history = input.review.history;
+      const highlights = await curateFindings(Array.isArray(history) ? history : [], {
+        runCodexExec: async (execInput) => {
+          const startedAt = Date.now();
+          const result = await runAgentExec(execInput, void 0, consensusProvider);
+          recordCost("findings", "findings-writer", null, startedAt, result);
+          return result;
+        },
+        loadPersona,
+        cwd: sterileCwd(),
+        timeoutMs,
+        codexExecutable
+      });
+      return client.finalizeSpecReviewCas(projectSlug, specPageId, {
+        ...input,
+        review: {
+          ...input.review,
+          ...highlights ? { highlights } : {}
+        }
+      });
+    },
     // Record the consensus-review outcome keyed by content hash via the D2b
     // endpoint. `record` is typed `unknown` (it crosses the SpecGateDeps
     // boundary) so we narrow it defensively:
@@ -45228,7 +45683,7 @@ ${artifact}`,
         // call the cost record silently omits.
         runCodexExec: async (input) => {
           const startedAt = Date.now();
-          const result = await runAgentExec(input);
+          const result = await runAgentExec(input, void 0, consensusProvider);
           recordCost("findings", "findings-writer", null, startedAt, result);
           return result;
         },
@@ -45257,7 +45712,13 @@ ${artifact}`,
 }
 function buildCodeGateDeps(args) {
   const { client, projectSlug, baseRef, cwd, codexExecutable, extraHeads, seat, stateDir } = args;
-  const recordCost = gateCallRecorder({ stateDir, projectSlug, gate: "code", provider: seat?.id ?? null });
+  const consensusProvider = process.env.MRRLIN_CONSENSUS_PROVIDER?.trim().toLowerCase() || void 0;
+  const recordCost = gateCallRecorder({
+    stateDir,
+    projectSlug,
+    gate: "code",
+    provider: consensusProvider ?? seat?.id ?? null
+  });
   const rounds = Number(process.env["MRRLIN_CONSENSUS_ROUNDS"] ?? 5);
   const heads = ["code-reviewer", ...extraHeads ?? []];
   const maxHeadCalls = 2 * rounds * (heads.length + 2);
@@ -45285,60 +45746,72 @@ function buildCodeGateDeps(args) {
     async runHead(personaName, artifact, dismissed) {
       const persona = loadPersona(personaName);
       const startedAt = Date.now();
-      const result = await runAgentExec({
-        prompt: `Review this code diff.
+      const result = await runAgentExec(
+        {
+          prompt: `Review this code diff.
 
 ${dismissed}
 
 --- DIFF ---
 ${artifact}`,
-        developerInstructions: persona,
-        // Read-only review of a diff that is entirely in the prompt — sterile, per sterile-cwd.ts.
-        // This factory is the ONE that stays mixed: runReviser below keeps the real `cwd` because
-        // it edits the branch, and the git helpers keep it because they are not provider calls.
-        cwd: sterileCwd(),
-        timeoutMs: headTimeoutMs,
-        sandbox: "read-only",
-        codexExecutable
-      });
+          developerInstructions: persona,
+          // Read-only review of a diff that is entirely in the prompt — sterile, per sterile-cwd.ts.
+          // This factory is the ONE that stays mixed: runReviser below keeps the real `cwd` because
+          // it edits the branch, and the git helpers keep it because they are not provider calls.
+          cwd: sterileCwd(),
+          timeoutMs: headTimeoutMs,
+          sandbox: "read-only",
+          codexExecutable
+        },
+        void 0,
+        consensusProvider
+      );
       recordCost("head", personaName, null, startedAt, result);
       return result;
     },
     async runArbiter(prompt) {
       const startedAt = Date.now();
-      const result = await runAgentExec({
-        prompt,
-        developerInstructions: loadPersona("arbiter"),
-        cwd: sterileCwd(),
-        timeoutMs: headTimeoutMs,
-        sandbox: "read-only",
-        codexExecutable,
-        // model-tier-planning-and-arbiter task 2.5 (D1): the arbiter is pinned to the seat's
-        // default model.
-        model: seat?.model ?? seat?.models?.strong
-      });
+      const result = await runAgentExec(
+        {
+          prompt,
+          developerInstructions: loadPersona("arbiter"),
+          cwd: sterileCwd(),
+          timeoutMs: headTimeoutMs,
+          sandbox: "read-only",
+          codexExecutable,
+          // model-tier-planning-and-arbiter task 2.5 (D1): the arbiter is pinned to the seat's
+          // default model.
+          model: consensusProvider ? void 0 : seat?.model ?? seat?.models?.strong
+        },
+        void 0,
+        consensusProvider
+      );
       recordCost("arbiter", "arbiter", seat?.model ?? seat?.models?.strong ?? null, startedAt, result);
       return result;
     },
     async runReviser(artifact, accepted) {
       const acceptedList = accepted.map((a) => `- (${a.category}) ${a.text}`).join("\n");
       const startedAt = Date.now();
-      const result = await runAgentExec({
-        prompt: `Accepted issues to fix:
+      const result = await runAgentExec(
+        {
+          prompt: `Accepted issues to fix:
 ${acceptedList}
 
 --- DIFF ---
 ${artifact}`,
-        developerInstructions: "You are fixing code review issues. Edit ONLY files already changed in this branch's diff; make the minimal change to resolve each accepted issue. Do not refactor unrelated code. Do not edit files outside the diff.",
-        // The real repository root, NOT sterileCwd(): this is the one gate call that runs
-        // `workspace-write` and edits the branch, so a sterile cwd would point the sandbox at an
-        // empty directory and the revision would silently apply to nothing — the gate would keep
-        // reporting rounds while fixing no code at all.
-        cwd,
-        timeoutMs: reviserTimeoutMs,
-        sandbox: "workspace-write",
-        codexExecutable
-      });
+          developerInstructions: "You are fixing code review issues. Edit ONLY files already changed in this branch's diff; make the minimal change to resolve each accepted issue. Do not refactor unrelated code. Do not edit files outside the diff.",
+          // The real repository root, NOT sterileCwd(): this is the one gate call that runs
+          // `workspace-write` and edits the branch, so a sterile cwd would point the sandbox at an
+          // empty directory and the revision would silently apply to nothing — the gate would keep
+          // reporting rounds while fixing no code at all.
+          cwd,
+          timeoutMs: reviserTimeoutMs,
+          sandbox: "workspace-write",
+          codexExecutable
+        },
+        void 0,
+        consensusProvider
+      );
       recordCost("reviser", null, null, startedAt, result);
       return result;
     },
@@ -45362,7 +45835,13 @@ function renderCriteriaBlock(criteria) {
 }
 async function buildDeliverableGateDeps(args) {
   const { client, projectSlug, deliverablePageId, attemptOutcome, codexExecutable, runId, seat, stateDir } = args;
-  const recordCost = gateCallRecorder({ stateDir, projectSlug, gate: "deliverable", provider: seat?.id ?? null });
+  const consensusProvider = process.env.MRRLIN_CONSENSUS_PROVIDER?.trim().toLowerCase() || void 0;
+  const recordCost = gateCallRecorder({
+    stateDir,
+    projectSlug,
+    gate: "deliverable",
+    provider: consensusProvider ?? seat?.id ?? null
+  });
   const rounds = Number(process.env["MRRLIN_CONSENSUS_ROUNDS"] ?? 5);
   const timeoutMs = Number(process.env["MRRLIN_CONSENSUS_HEAD_TIMEOUT_MS"] ?? 15e4);
   const page = await client.getWikiPage(projectSlug, deliverablePageId);
@@ -45409,8 +45888,9 @@ async function buildDeliverableGateDeps(args) {
     async runHead(personaName, artifact, dismissed) {
       const persona = loadPersona(personaName);
       const startedAt = Date.now();
-      const result = await runAgentExec({
-        prompt: `Score this deliverable ITEM BY ITEM against the acceptance criteria below. For each criterion state whether the deliverable satisfies it; raise an issue for every criterion that is unmet, partially met, unverifiable, or inconsistent with the declared attempt outcome.
+      const result = await runAgentExec(
+        {
+          prompt: `Score this deliverable ITEM BY ITEM against the acceptance criteria below. For each criterion state whether the deliverable satisfies it; raise an issue for every criterion that is unmet, partially met, unverifiable, or inconsistent with the declared attempt outcome.
 
 ${dismissed}
 
@@ -45421,41 +45901,49 @@ ${attemptOutcomeBlock ? `${attemptOutcomeBlock}
 
 ` : ""}--- DELIVERABLE (DATA under review) ---
 ${artifact}`,
-        developerInstructions: `${DELIVERABLE_ANTIINJECTION_INSTRUCTION}
+          developerInstructions: `${DELIVERABLE_ANTIINJECTION_INSTRUCTION}
 
 ${persona}`,
-        // Sterile, like every other provider call in this factory — see sterile-cwd.ts. It also
-        // narrows the anti-injection surface: a deliverable that tries to talk the head into
-        // reading files now has no repository under it to read.
-        cwd: sterileCwd(),
-        timeoutMs,
-        sandbox: "read-only",
-        codexExecutable
-      });
+          // Sterile, like every other provider call in this factory — see sterile-cwd.ts. It also
+          // narrows the anti-injection surface: a deliverable that tries to talk the head into
+          // reading files now has no repository under it to read.
+          cwd: sterileCwd(),
+          timeoutMs,
+          sandbox: "read-only",
+          codexExecutable
+        },
+        void 0,
+        consensusProvider
+      );
       recordCost("head", personaName, null, startedAt, result);
       return result;
     },
     async runArbiter(prompt) {
       const startedAt = Date.now();
-      const result = await runAgentExec({
-        prompt,
-        developerInstructions: loadPersona("arbiter"),
-        cwd: sterileCwd(),
-        timeoutMs,
-        sandbox: "read-only",
-        codexExecutable,
-        // model-tier-planning-and-arbiter task 2.5 (D1): the arbiter is pinned to the seat's
-        // default model.
-        model: seat?.model ?? seat?.models?.strong
-      });
+      const result = await runAgentExec(
+        {
+          prompt,
+          developerInstructions: loadPersona("arbiter"),
+          cwd: sterileCwd(),
+          timeoutMs,
+          sandbox: "read-only",
+          codexExecutable,
+          // model-tier-planning-and-arbiter task 2.5 (D1): the arbiter is pinned to the seat's
+          // default model.
+          model: consensusProvider ? void 0 : seat?.model ?? seat?.models?.strong
+        },
+        void 0,
+        consensusProvider
+      );
       recordCost("arbiter", "arbiter", seat?.model ?? seat?.models?.strong ?? null, startedAt, result);
       return result;
     },
     async runReviser(artifact, accepted) {
       const acceptedList = accepted.map((a) => `- (${a.category}) ${a.text}`).join("\n");
       const startedAt = Date.now();
-      const result = await runAgentExec({
-        prompt: `Accepted issues to fix (each maps to an unmet acceptance criterion):
+      const result = await runAgentExec(
+        {
+          prompt: `Accepted issues to fix (each maps to an unmet acceptance criterion):
 ${acceptedList}
 
 --- ACCEPTANCE CRITERIA ---
@@ -45463,14 +45951,17 @@ ${criteriaBlock}
 
 --- DELIVERABLE ---
 ${artifact}`,
-        developerInstructions: `${DELIVERABLE_ANTIINJECTION_INSTRUCTION}
+          developerInstructions: `${DELIVERABLE_ANTIINJECTION_INSTRUCTION}
 
 You revise a deliverable to address the accepted issues so it satisfies the acceptance criteria and stays consistent with the declared outcome${attemptOutcome ? ` (${attemptOutcome})` : ""}. Return ONLY the full revised markdown, no commentary. Do not invent facts; keep the deliverable's format and do not change the declared outcome.`,
-        cwd: sterileCwd(),
-        timeoutMs,
-        sandbox: "read-only",
-        codexExecutable
-      });
+          cwd: sterileCwd(),
+          timeoutMs,
+          sandbox: "read-only",
+          codexExecutable
+        },
+        void 0,
+        consensusProvider
+      );
       recordCost("reviser", null, null, startedAt, result);
       return result;
     },
@@ -45501,7 +45992,7 @@ You revise a deliverable to address the accepted issues so it satisfies the acce
       const rounds2 = typeof r["rounds"] === "number" ? r["rounds"] : 0;
       const history = r["history"];
       const highlights = await curateFindings(Array.isArray(history) ? history : [], {
-        runCodexExec: runAgentExec,
+        runCodexExec: (execInput) => runAgentExec(execInput, void 0, consensusProvider),
         loadPersona,
         cwd: sterileCwd(),
         timeoutMs,
@@ -45568,14 +46059,14 @@ function errMessage3(err) {
   return err instanceof Error ? err.message : String(err);
 }
 function runExternalAgentsStatus(bin, args, timeoutMs, spawn6) {
-  return new Promise((resolve) => {
+  return new Promise((resolve2) => {
     let settled = false;
     const timerRef = { id: void 0 };
     const finish = (r) => {
       if (settled) return;
       settled = true;
       if (timerRef.id) clearTimeout(timerRef.id);
-      resolve(r);
+      resolve2(r);
     };
     const options = { stdio: ["ignore", "pipe", "pipe"], env: process.env, shell: false };
     let child;
@@ -45655,14 +46146,14 @@ function errMessage4(err) {
   return err instanceof Error ? err.message : String(err);
 }
 function runExternalAgents(bin, args, label, timeoutMs, spawn6) {
-  return new Promise((resolve) => {
+  return new Promise((resolve2) => {
     let settled = false;
     const timerRef = { id: void 0 };
     const finish = (r) => {
       if (settled) return;
       settled = true;
       if (timerRef.id) clearTimeout(timerRef.id);
-      resolve(r);
+      resolve2(r);
     };
     const options = {
       stdio: ["ignore", "pipe", "pipe"],
@@ -48161,7 +48652,7 @@ var Protocol = class {
           return;
         }
         const pollInterval = task2.pollInterval ?? this._options?.defaultTaskPollInterval ?? 1e3;
-        await new Promise((resolve) => setTimeout(resolve, pollInterval));
+        await new Promise((resolve2) => setTimeout(resolve2, pollInterval));
         options?.signal?.throwIfAborted();
       }
     } catch (error51) {
@@ -48178,7 +48669,7 @@ var Protocol = class {
    */
   request(request, resultSchema, options) {
     const { relatedRequestId, resumptionToken, onresumptiontoken, task, relatedTask } = options ?? {};
-    return new Promise((resolve, reject) => {
+    return new Promise((resolve2, reject) => {
       const earlyReject = (error51) => {
         reject(error51);
       };
@@ -48256,7 +48747,7 @@ var Protocol = class {
           if (!parseResult.success) {
             reject(parseResult.error);
           } else {
-            resolve(parseResult.data);
+            resolve2(parseResult.data);
           }
         } catch (error51) {
           reject(error51);
@@ -48517,12 +49008,12 @@ var Protocol = class {
       }
     } catch {
     }
-    return new Promise((resolve, reject) => {
+    return new Promise((resolve2, reject) => {
       if (signal.aborted) {
         reject(new McpError(ErrorCode.InvalidRequest, "Request cancelled"));
         return;
       }
-      const timeoutId = setTimeout(resolve, interval);
+      const timeoutId = setTimeout(resolve2, interval);
       signal.addEventListener("abort", () => {
         clearTimeout(timeoutId);
         reject(new McpError(ErrorCode.InvalidRequest, "Request cancelled"));
@@ -49891,22 +50382,22 @@ async function authInternal(provider, { serverUrl, authorizationCode, scope, res
   }
   const nonInteractiveFlow = !provider.redirectUrl;
   if (authorizationCode !== void 0 || nonInteractiveFlow) {
-    const tokens2 = await fetchToken(provider, authorizationServerUrl, {
+    const tokens3 = await fetchToken(provider, authorizationServerUrl, {
       metadata,
       resource,
       authorizationCode,
       fetchFn
     });
-    await provider.saveTokens(tokens2);
+    await provider.saveTokens(tokens3);
     return "AUTHORIZED";
   }
-  const tokens = await provider.tokens();
-  if (tokens?.refresh_token) {
+  const tokens2 = await provider.tokens();
+  if (tokens2?.refresh_token) {
     try {
       const newTokens = await refreshAuthorization(authorizationServerUrl, {
         metadata,
         clientInformation,
-        refreshToken: tokens.refresh_token,
+        refreshToken: tokens2.refresh_token,
         resource,
         addClientAuthentication: provider.addClientAuthentication,
         fetchFn
@@ -50208,7 +50699,7 @@ async function refreshAuthorization(authorizationServerUrl, { metadata, clientIn
     grant_type: "refresh_token",
     refresh_token: refreshToken
   });
-  const tokens = await executeTokenRequest(authorizationServerUrl, {
+  const tokens2 = await executeTokenRequest(authorizationServerUrl, {
     metadata,
     tokenRequestParams,
     clientInformation,
@@ -50216,7 +50707,7 @@ async function refreshAuthorization(authorizationServerUrl, { metadata, clientIn
     resource,
     fetchFn
   });
-  return { refresh_token: refreshToken, ...tokens };
+  return { refresh_token: refreshToken, ...tokens2 };
 }
 async function fetchToken(provider, authorizationServerUrl, { metadata, resource, authorizationCode, fetchFn } = {}) {
   const scope = provider.clientMetadata.scope;
@@ -50521,9 +51012,9 @@ var StreamableHTTPClientTransport = class {
   async _commonHeaders() {
     const headers = {};
     if (this._authProvider) {
-      const tokens = await this._authProvider.tokens();
-      if (tokens) {
-        headers["Authorization"] = `Bearer ${tokens.access_token}`;
+      const tokens2 = await this._authProvider.tokens();
+      if (tokens2) {
+        headers["Authorization"] = `Bearer ${tokens2.access_token}`;
       }
     }
     if (this._sessionId) {
@@ -50958,7 +51449,7 @@ var StdioClientTransport = class {
     if (this._process) {
       throw new Error("StdioClientTransport already started! If using Client class, note that connect() calls start() automatically.");
     }
-    return new Promise((resolve, reject) => {
+    return new Promise((resolve2, reject) => {
       this._process = (0, import_cross_spawn.default)(this._serverParams.command, this._serverParams.args ?? [], {
         // merge default env with server env because mcp server needs some env vars
         env: {
@@ -50975,7 +51466,7 @@ var StdioClientTransport = class {
         this.onerror?.(error51);
       });
       this._process.on("spawn", () => {
-        resolve();
+        resolve2();
       });
       this._process.on("close", (_code) => {
         this._process = void 0;
@@ -51040,22 +51531,22 @@ var StdioClientTransport = class {
     if (this._process) {
       const processToClose = this._process;
       this._process = void 0;
-      const closePromise = new Promise((resolve) => {
+      const closePromise = new Promise((resolve2) => {
         processToClose.once("close", () => {
-          resolve();
+          resolve2();
         });
       });
       try {
         processToClose.stdin?.end();
       } catch {
       }
-      await Promise.race([closePromise, new Promise((resolve) => setTimeout(resolve, 2e3).unref())]);
+      await Promise.race([closePromise, new Promise((resolve2) => setTimeout(resolve2, 2e3).unref())]);
       if (processToClose.exitCode === null) {
         try {
           processToClose.kill("SIGTERM");
         } catch {
         }
-        await Promise.race([closePromise, new Promise((resolve) => setTimeout(resolve, 2e3).unref())]);
+        await Promise.race([closePromise, new Promise((resolve2) => setTimeout(resolve2, 2e3).unref())]);
       }
       if (processToClose.exitCode === null) {
         try {
@@ -51067,15 +51558,15 @@ var StdioClientTransport = class {
     this._readBuffer.clear();
   }
   send(message) {
-    return new Promise((resolve) => {
+    return new Promise((resolve2) => {
       if (!this._process?.stdin) {
         throw new Error("Not connected");
       }
       const json2 = serializeMessage(message);
       if (this._process.stdin.write(json2)) {
-        resolve();
+        resolve2();
       } else {
-        this._process.stdin.once("drain", resolve);
+        this._process.stdin.once("drain", resolve2);
       }
     });
   }
@@ -52284,13 +52775,87 @@ async function handleConsensusBlocked(result, ctx, input, resolvedTaskId) {
     suppressedAsAdjudicated.push({ rawQuestion: clarification.rawQuestion, coveredByAnswer: covering.answer });
     return false;
   });
+  let planId = null;
+  if (!taskId) {
+    const plans = await ctx.client.listPlans(input.projectSlug);
+    planId = plans.find((p) => p.specWikiPageId === input.pageId)?.id ?? null;
+  }
+  const evaluatedContentHash = result.evaluatedSnapshot?.contentHash ?? page?.contentHash;
+  const isSeedAbsence = operatorClarifications.some(
+    (c) => c.rawQuestion === SEED_ABSENCE_QUESTION || c.rawQuestion.includes(SEED_ABSENCE_MARKER)
+  );
+  if (!isSeedAbsence && operatorClarifications.length > 0 && evaluatedContentHash) {
+    const domain2 = await resolveSpecDomain(ctx.client, input.projectSlug, {
+      id: input.pageId,
+      taskId
+    });
+    const suppressionEvidence = (result.droppedByCap?.length ?? 0) > 0 || suppressedAsAdjudicated.length > 0 ? {
+      ...result.droppedByCap?.length ? { droppedByCap: result.droppedByCap } : {},
+      ...suppressedAsAdjudicated.length ? { suppressedAsAdjudicated } : {}
+    } : void 0;
+    let ownership;
+    if (result.evaluatedOwnership) {
+      ownership = result.evaluatedOwnership;
+    } else if (taskId !== null) {
+      const task = await ctx.client.getTask(input.projectSlug, taskId).catch(() => null);
+      ownership = { kind: "task", taskId, domains: task?.domains ?? [domain2] };
+    } else if (planId !== null) {
+      const plans = await ctx.client.listPlans(input.projectSlug).catch(() => []);
+      const plan = plans.find((p) => p.id === planId);
+      ownership = { kind: "plan", planId, domains: plan?.domains ?? ["code"] };
+    } else {
+      ownership = { kind: "project", domains: ["code"] };
+    }
+    if (ctx.client.finalizeSpecReviewCas) {
+      const finalizeRes = await ctx.client.finalizeSpecReviewCas(input.projectSlug, input.pageId, {
+        expectedContentHash: evaluatedContentHash,
+        ownership,
+        review: {
+          outcome: "CONSENSUS_BLOCKED_CLARIFICATION",
+          rounds: result.rounds !== void 0 ? result.rounds : result.history?.length ? result.history.length : 0,
+          ...result.history !== void 0 ? { history: result.history } : {},
+          ...result.highlights !== void 0 ? { highlights: Array.isArray(result.highlights) ? { findings: result.highlights } : result.highlights } : {},
+          ...suppressionEvidence ? { suppressionEvidence } : {}
+        },
+        specReady: false
+      });
+      if (finalizeRes.status === "superseded") {
+        return {
+          kind: "superseded",
+          finalReviewedHash: evaluatedContentHash,
+          error: "Spec content changed during review",
+          ...resolvedTaskId ? { taskId: resolvedTaskId } : {}
+        };
+      }
+      if (finalizeRes.status !== "applied") {
+        return {
+          kind: "failed",
+          failureReason: "consensus_blocked",
+          error: finalizeRes.reason ?? "cas_rejected",
+          finalReviewedHash: evaluatedContentHash,
+          ...resolvedTaskId ? { taskId: resolvedTaskId } : {}
+        };
+      }
+    } else if (ctx.client.recordSpecConsensusReview) {
+      try {
+        await ctx.client.recordSpecConsensusReview(input.projectSlug, input.pageId, {
+          contentHash: domainScopedReviewHash2(evaluatedContentHash, domain2),
+          outcome: "CONSENSUS_BLOCKED_CLARIFICATION",
+          rounds: result.rounds !== void 0 ? result.rounds : result.history?.length ? result.history.length : 0,
+          ...result.history !== void 0 ? { history: result.history } : {},
+          ...result.highlights !== void 0 ? { highlights: Array.isArray(result.highlights) ? { findings: result.highlights } : result.highlights } : {},
+          ...suppressionEvidence ? { suppressionEvidence } : {}
+        });
+      } catch (error52) {
+        process.stderr.write(
+          `[mrrlin-mcp consensus] legacy clarification write failed for ${input.projectSlug}/${input.pageId}: ${error52 instanceof Error ? error52.message : String(error52)}
+`
+        );
+      }
+    }
+  }
   let filedQuestionCount = 0;
   if (toFile.length > 0) {
-    let planId = null;
-    if (!taskId) {
-      const plans = await ctx.client.listPlans(input.projectSlug);
-      planId = plans.find((p) => p.specWikiPageId === input.pageId)?.id ?? null;
-    }
     if (taskId) {
       const scopeId = taskId;
       const groupId = toFile.length > 1 ? `II-${scopeId}-gate-group-${(0, import_node_crypto4.createHash)("sha256").update(toFile.map((c) => c.rawQuestion).sort().join("\n")).digest("hex").slice(0, 10)}` : void 0;
@@ -52307,7 +52872,11 @@ async function handleConsensusBlocked(result, ctx, input, resolvedTaskId) {
             questionOptions,
             ...groupId ? { groupId } : {}
           });
-        } catch {
+        } catch (err) {
+          const isConflict = err?.status === 409 || err?.statusCode === 409 || err?.code === "23505" || String(err?.message ?? "").includes("already exists") || String(err?.message ?? "").includes("duplicate key");
+          if (!isConflict) {
+            throw err;
+          }
         }
       }
       filedQuestionCount = toFile.length;
@@ -52327,7 +52896,11 @@ async function handleConsensusBlocked(result, ctx, input, resolvedTaskId) {
             questionOptions,
             ...groupId ? { groupId } : {}
           });
-        } catch {
+        } catch (err) {
+          const isConflict = err?.status === 409 || err?.statusCode === 409 || err?.code === "23505" || String(err?.message ?? "").includes("already exists") || String(err?.message ?? "").includes("duplicate key");
+          if (!isConflict) {
+            throw err;
+          }
         }
       }
       filedQuestionCount = toFile.length;
@@ -52356,40 +52929,15 @@ async function handleConsensusBlocked(result, ctx, input, resolvedTaskId) {
     } catch {
     }
   }
-  if (operatorClarifications.length > 0) {
-    try {
-      if (page) {
-        const domain2 = await resolveSpecDomain(ctx.client, input.projectSlug, {
-          id: page.id,
-          taskId: page.taskId ?? null
-        });
-        const suppressionEvidence = (result.droppedByCap?.length ?? 0) > 0 || suppressedAsAdjudicated.length > 0 ? {
-          ...result.droppedByCap?.length ? { droppedByCap: result.droppedByCap } : {},
-          ...suppressedAsAdjudicated.length ? { suppressedAsAdjudicated } : {}
-        } : void 0;
-        await ctx.client.recordSpecConsensusReview(input.projectSlug, input.pageId, {
-          contentHash: domainScopedReviewHash2(page.contentHash, domain2),
-          outcome: "CONSENSUS_BLOCKED_CLARIFICATION",
-          rounds: 0,
-          ...suppressionEvidence ? { suppressionEvidence } : {}
-        });
-      }
-    } catch (error52) {
-      process.stderr.write(
-        `[mrrlin-mcp consensus] clarification verdict write failed for ${input.projectSlug}/${input.pageId}: ${error52 instanceof Error ? error52.message : String(error52)}
-`
-      );
-    }
-  }
   let error51;
   if (filedQuestionCount > 0) {
     error51 = `Consensus blocked on ${filedQuestionCount} clarification(s); filed as operator question(s).`;
   } else if (diagnostics.length > 0 && operatorClarifications.length === 0) {
     const diagnosticKinds = new Set(diagnostics.map((d) => d.kind));
     if (diagnosticKinds.has("acceptance_criteria_unauthorable")) {
-      error51 = "Consensus blocked: the spec has no machine-usable acceptance criteria and the reviser could not add them automatically. A human needs to write the `## Acceptance criteria` section directly, not an inbox answer.";
+      error51 = "Consensus paused: the spec needs a clear `## Acceptance criteria` checklist (`- [ ]`) before review can complete. Please add or update the checklist in the spec.";
     } else {
-      error51 = "Consensus blocked: the spec content does not match its linked task. This requires fixing the spec/task relationship directly, not an inbox answer.";
+      error51 = "Consensus paused: the spec content does not match its linked task. Please update the spec or task relationship directly, not an inbox answer.";
     }
   } else if (operatorClarifications.length > 0 && toFile.length === 0 && suppressedAsAdjudicated.length > 0) {
     error51 = `The reviewers raised ${suppressedAsAdjudicated.length} clarification(s), but each was a reworded repeat of one already answered \u2014 nothing new to answer.`;
@@ -52401,11 +52949,13 @@ async function handleConsensusBlocked(result, ctx, input, resolvedTaskId) {
   if (result.escalation) {
     error51 += ` (reason: ${result.escalation.diagnosis})`;
   }
+  const isRelationshipDiagnostic = isSeedAbsence || result.diagnostics?.some((d) => d.kind === "spec_identity_mismatch") || result.escalation?.diagnosis === "spec_identity_mismatch";
   return {
     kind: "failed",
     failureReason: "consensus_blocked",
     error: error51,
     filedQuestionCount,
+    finalReviewedHash: isRelationshipDiagnostic ? null : result.evaluatedSnapshot?.contentHash ?? null,
     ...resolvedTaskId ? { taskId: resolvedTaskId } : {}
   };
 }
@@ -52419,18 +52969,30 @@ async function retireGateQuestionsOnConverge(ctx, input, resolvedTaskId) {
     const contentHash = page?.contentHash ?? null;
     const inboxItems = await ctx.client.listInboxItems(input.projectSlug, { taskId: resolvedTaskId });
     for (const item of inboxItems) {
-      if (item.origin !== "gate" || item.status !== "pending" || item.kind !== "question" || item.taskId != null && item.taskId !== resolvedTaskId) {
+      if (item.status !== "pending") {
+        continue;
+      }
+      if (item.taskId != null && item.taskId !== resolvedTaskId) {
+        continue;
+      }
+      const isGateQuestion = (item.origin === "gate" || item.origin === "gate_block") && item.kind === "question";
+      const specRefPattern = new RegExp(
+        `Specs/${input.pageId.replace(/[.*+?^${}()|[\]\\]/g, "\\$&")}(?![0-9a-zA-Z_-])`
+      );
+      const isSpecHandoff = item.kind === "handoff" && item.id.startsWith(`II-SPEC-STOPPED-${input.pageId}-`) && specRefPattern.test(item.body);
+      if (!isGateQuestion && !isSpecHandoff) {
         continue;
       }
       try {
+        const verdict = isGateQuestion ? "rejected" : "acknowledged";
         await ctx.client.decideInboxItem(input.projectSlug, item.id, {
-          verdict: "rejected",
+          verdict,
           decidedBy: "gate",
           reason: `Superseded by converged spec Specs/${input.pageId} (contentHash: ${contentHash ?? "unknown"})`
         });
       } catch (itemError) {
         process.stderr.write(
-          `[mrrlin-mcp consensus] gate-question retirement failed for ${input.projectSlug}/${input.pageId} item ${item.id}: ${itemError instanceof Error ? itemError.message : String(itemError)}
+          `[mrrlin-mcp consensus] gate retirement failed for ${input.projectSlug}/${input.pageId} item ${item.id}: ${itemError instanceof Error ? itemError.message : String(itemError)}
 `
         );
       }
@@ -52520,6 +53082,13 @@ async function run(ctx, input, builders = defaultNativeSpecGateBuilders) {
       return { kind: "retry", failureReason: "provider_unavailable", error: "Consensus unavailable (provider/quota).", ...resolvedTaskId ? { taskId: resolvedTaskId } : {} };
     case "SPEC_CHANGED_DURING_REVIEW":
       return { kind: "retry", failureReason: "spec_changed", error: "Spec changed during review.", ...resolvedTaskId ? { taskId: resolvedTaskId } : {} };
+    case "SUPERSEDED":
+      return {
+        kind: "superseded",
+        reason: "Spec changed or ownership unlinked during review",
+        error: "Spec changed or ownership unlinked during review",
+        ...resolvedTaskId ? { taskId: resolvedTaskId } : {}
+      };
     default:
       return {
         kind: "failed",
@@ -52530,6 +53099,14 @@ async function run(ctx, input, builders = defaultNativeSpecGateBuilders) {
   }
 }
 function onComplete(outcome, input) {
+  if (outcome.kind === "superseded") {
+    return {
+      kind: "info",
+      suppressInbox: true,
+      body: outcome.reason ?? "Superseded",
+      ...outcome.taskId ? { taskId: outcome.taskId } : {}
+    };
+  }
   const taskId = "taskId" in outcome ? outcome.taskId : void 0;
   const taskRef = taskId ? outcome.kind === "done" && outcome.taskTitle ? `${taskId} \u2014 ${outcome.taskTitle}` : taskId : null;
   if (outcome.kind === "done") {
@@ -52579,10 +53156,12 @@ ${findings.map((f) => `\u2022 ${f}`).join("\n")}` : "";
     };
   }
   const handoffTaskRef = taskRef ? ` (${taskRef})` : "";
+  const revisionSuffix = "finalReviewedHash" in outcome && outcome.finalReviewedHash ? outcome.finalReviewedHash.slice(0, 8) : "init";
   return {
     kind: "handoff",
+    id: `II-SPEC-STOPPED-${input.pageId}-${revisionSuffix}`,
     ...taskId ? { taskId } : {},
-    body: `The spec review stopped for Specs/${input.pageId}${handoffTaskRef}. ${outcome.error} Review the item, consult the Director if needed, then continue in Codex or handle it manually.`
+    body: `The spec review stopped for Specs/${input.pageId}${handoffTaskRef}. ${outcome.error} Review the spec or consult the Director to update it.`
   };
 }
 var consensusDescriptor = {
@@ -52761,6 +53340,14 @@ async function run2(ctx, input) {
   };
 }
 function onComplete2(outcome, input) {
+  if (outcome.kind === "superseded") {
+    return {
+      kind: "info",
+      suppressInbox: true,
+      body: outcome.reason ?? outcome.error ?? "Superseded",
+      ...outcome.taskId ? { taskId: outcome.taskId } : {}
+    };
+  }
   const taskId = outcome.kind === "failed" || outcome.kind === "done" ? outcome.taskId : void 0;
   const taskRef = taskId ? outcome.kind === "done" && outcome.taskTitle ? `${taskId} \u2014 ${outcome.taskTitle}` : taskId : null;
   if (outcome.kind === "done") {
@@ -52815,10 +53402,10 @@ var DRAFT_SPEC_TLDR_MAX_CHARS = 300;
 var DRAFT_SPEC_PERSONA = "spec-author";
 var PAGE_ID_MAX_ATTEMPTS = 5;
 function defaultSleep(ms) {
-  return new Promise((resolve) => setTimeout(resolve, ms));
+  return new Promise((resolve2) => setTimeout(resolve2, ms));
 }
 function enforceSpecOutputContract(markdown, taskId, title) {
-  let body = markdown.trim();
+  let body = normalizeAcceptanceCriteria(markdown.trim());
   const headingRe = new RegExp(`^#\\s+${taskId}\\b`, "m");
   if (!headingRe.test(body)) {
     body = `# ${taskId} \u2014 ${title}
@@ -53275,6 +53862,14 @@ async function runDraftSpec(ctx, input, deps) {
   };
 }
 function onComplete3(outcome, input) {
+  if (outcome.kind === "superseded") {
+    return {
+      kind: "info",
+      suppressInbox: true,
+      body: outcome.reason ?? outcome.error ?? "Superseded",
+      taskId: input.taskId
+    };
+  }
   if (outcome.kind === "done") {
     let parsed = {};
     try {
@@ -54167,6 +54762,9 @@ async function runReportEvidence(ctx, input) {
   return { kind: "done", resultJson: JSON.stringify(artifact), finalReviewedHash: null };
 }
 function onComplete5(outcome, input) {
+  if (outcome.kind === "superseded") {
+    return { kind: "info", body: `Evidence assembly superseded for report ${input.reportId}.`, suppressInbox: true };
+  }
   if (outcome.kind === "done") {
     return { kind: "info", body: `Evidence assembled for report ${input.reportId}.`, suppressInbox: true };
   }
@@ -55350,7 +55948,7 @@ var mcpToolDescriptions = {
   [mcpToolNames.appendTaskEvent]: "Append an operator note to a task's activity timeline. Also use it as the task-linked receipt path for material immediate work that has a parent task; summarize scope, outcome/no-result, evidence or artifacts, blockers, and next action in the note body.",
   [mcpToolNames.createWikiPage]: "Create a markdown Wiki page.",
   [mcpToolNames.deleteTaskDependency]: "Delete a blocked-by relationship.",
-  [mcpToolNames.createTask]: "Create a new task in a project. Defaults to status='backlog' with a blank assignee; pass status='todo' explicitly to authorize immediate autopilot work. 'backlog' and 'todo' are the only creatable statuses. Pass parentTaskId when spawning a follow-up task to continue work from an existing task \u2014 its operator_seed_request is inherited automatically if you don't supply your own. Domain is required UNLESS parentTaskId is supplied (a follow-up inherits its parent's domain automatically). Domain selects which reviewer roster judges the task's spec. Valid values: code, seo, marketing, content. When creating tasks for work that produces a published web page, author the work as a [code_change] task and a [page] task (with domain: 'content') linked by blocked_by. Set autoDeploy according to the publish policy: 'prod' if only meaningful once live (robots.txt, sitemap), 'dev' to stop at preview (landing page, layout), or 'off' if the repo is not the operator's own.",
+  [mcpToolNames.createTask]: "Create a new task in a project. Defaults to status='todo' to authorize immediate autopilot work; pass status='backlog' only if explicitly parking the task for later. 'backlog' and 'todo' are the only creatable statuses. Pass parentTaskId when spawning a follow-up task to continue work from an existing task \u2014 its operator_seed_request is inherited automatically if you don't supply your own. Domain is required UNLESS parentTaskId is supplied (a follow-up inherits its parent's domain automatically). Domain selects which reviewer roster judges the task's spec. Valid values: code, seo, marketing, content. When creating tasks for work that produces a published web page, author the work as a [code_change] task and a [page] task (with domain: 'content') linked by blocked_by. Set autoDeploy according to the publish policy: 'prod' if only meaningful once live (robots.txt, sitemap), 'dev' to stop at preview (landing page, layout), or 'off' if the repo is not the operator's own.",
   [mcpToolNames.getProject]: "Fetch a single project summary by slug.",
   [mcpToolNames.getProjectSnapshot]: "Fetch the full project snapshot: GitHub binding, tasks, plans, and wiki pages.",
   [mcpToolNames.getTask]: "Fetch a single task by project slug and task id.",
@@ -55591,20 +56189,18 @@ async function getAgentProviderForPanel(client, opts = {}) {
 }
 function createMrrlinTools(options) {
   const client = createMrrlinClient(withAuth(options));
-  let boundSlug = options.activeProjectSlug ?? (process.env.MRRLIN_PROJECT_SLUG?.trim() || void 0);
-  let sessionResolved = false;
   async function resolveBoundSlug() {
-    if (boundSlug !== void 0) return boundSlug;
-    if (sessionResolved) return boundSlug;
+    if (options.activeProjectSlug !== void 0) return options.activeProjectSlug;
+    const envSlug = process.env.MRRLIN_PROJECT_SLUG?.trim();
+    if (envSlug) return envSlug;
     try {
       const settings = await client.getOperatorSettings();
       if (settings?.activeProjectSlug) {
-        boundSlug = settings.activeProjectSlug;
+        return settings.activeProjectSlug;
       }
     } catch {
     }
-    sessionResolved = true;
-    return boundSlug;
+    return void 0;
   }
   async function checkTenantBoundary(targetSlug, resourceName) {
     const active = await resolveBoundSlug();
@@ -55734,6 +56330,13 @@ function createMrrlinTools(options) {
           ...input,
           folder: input.folder?.trim().toLowerCase() === "specs" ? "Specs" : input.folder
         };
+        if (pageInput.folder === "Specs") {
+          if (!parseAcceptanceCriteria(pageInput.markdownBody)) {
+            throw new Error(
+              "Error: Specifications in folder 'Specs' MUST include an '## Acceptance criteria' section with at least one top-level markdown checklist item ('- [ ] <condition>'). Please re-author the page body with verifiable checklist criteria."
+            );
+          }
+        }
         return await deliverBuiltIn(
           c,
           projectSlug,
@@ -55760,7 +56363,8 @@ function createMrrlinTools(options) {
       "Unable to create task.",
       async (c, { projectSlug, ...input }) => {
         await checkTenantBoundary(projectSlug, "task");
-        return await c.createTask(projectSlug, input);
+        const status = input.status ?? "todo";
+        return await c.createTask(projectSlug, { ...input, status });
       }
     ),
     [mcpToolNames.getProject]: makeTool(
@@ -55979,6 +56583,20 @@ function createMrrlinTools(options) {
           ...patch,
           ...patch.folder !== void 0 ? { folder: patch.folder.trim().toLowerCase() === "specs" ? "Specs" : patch.folder } : {}
         };
+        let targetFolder = patchInput.folder;
+        let targetBody = patch.markdownBody;
+        if ((targetFolder === void 0 || targetBody === void 0) && (targetFolder === "Specs" || targetBody !== void 0)) {
+          const existing = await c.getWikiPage(projectSlug, pageId);
+          if (targetFolder === void 0) targetFolder = existing.folder;
+          if (targetBody === void 0) targetBody = existing.markdownBody;
+        }
+        if (targetFolder === "Specs" && targetBody !== void 0) {
+          if (!parseAcceptanceCriteria(targetBody)) {
+            throw new Error(
+              "Error: Specifications in folder 'Specs' MUST include an '## Acceptance criteria' section with at least one top-level markdown checklist item ('- [ ] <condition>'). Please re-author the page body with verifiable checklist criteria."
+            );
+          }
+        }
         return await deliverBuiltIn(
           c,
           projectSlug,
@@ -56948,7 +57566,7 @@ var import_node_http = __toESM(require("node:http"), 1);
 var import_node_os17 = __toESM(require("node:os"), 1);
 var import_node_path38 = __toESM(require("node:path"), 1);
 var import_node_child_process21 = require("node:child_process");
-var import_node_crypto15 = __toESM(require("node:crypto"), 1);
+var import_node_crypto16 = __toESM(require("node:crypto"), 1);
 
 // src/turn-replay-buffer.ts
 var DEFAULT_MAX_EVENTS = 2e3;
@@ -57467,7 +58085,7 @@ function createTurnLock() {
     } else {
       autonomousTotalActive += 1;
     }
-    return new Promise((resolve, reject) => {
+    return new Promise((resolve2, reject) => {
       const start = () => {
         let bodyPromise;
         try {
@@ -57475,7 +58093,7 @@ function createTurnLock() {
         } catch (e) {
           bodyPromise = Promise.reject(e);
         }
-        bodyPromise.then((v) => resolve(v)).catch((e) => reject(e)).finally(() => {
+        bodyPromise.then((v) => resolve2(v)).catch((e) => reject(e)).finally(() => {
           if (lane === "chat") {
             chatTotalActive -= 1;
           } else {
@@ -58077,7 +58695,717 @@ Do NOT derail the current task - if the operator has an in-flight question, answ
 }
 
 // src/_generated/version.ts
-var PKG_VERSION = "0.4.95";
+var PKG_VERSION = "0.4.98";
+
+// src/director-closure.ts
+var CLOSURE_SNAPSHOT_TIMEOUT_MS = 2e3;
+var CLOSURE_MAX_SNAPSHOT_PAGES = 500;
+var CLOSURE_MAX_SNAPSHOT_TASKS = 2e3;
+var CLOSURE_MAX_SNAPSHOT_INBOX = 500;
+var CLOSURE_MIN_PROSE_CHARS = 25;
+var CLOSURE_MIN_PROSE_WORDS = 4;
+var ID_RE = /\b(?:GT|WK)-\d+\b/g;
+function diffSnapshots(before, after) {
+  const receipts = [];
+  const diffMap = (kind, prev, next) => {
+    for (const [id, entry] of next) {
+      const old = prev.get(id);
+      if (!old) {
+        receipts.push({ kind, action: "created", id, title: entry.title });
+      } else if (entry.updatedAt !== null && entry.updatedAt !== old.updatedAt) {
+        receipts.push({ kind, action: "updated", id, title: entry.title });
+      }
+    }
+  };
+  diffMap("task", before.tasks, after.tasks);
+  if (before.pages && after.pages) diffMap("page", before.pages, after.pages);
+  if (before.inbox && after.inbox) {
+    for (const id of after.inbox) {
+      if (!before.inbox.has(id)) receipts.push({ kind: "inbox", action: "created", id, title: "" });
+    }
+  }
+  return receipts;
+}
+function finalAssistantText(events) {
+  let lastToolResult = -1;
+  events.forEach((event, index) => {
+    if (event.type === "tool_result") lastToolResult = index;
+  });
+  return events.slice(lastToolResult + 1).filter((event) => event.type === "assistant" && typeof event.content === "string").map((event) => event.content).join("");
+}
+var MUTATION_TOOLS = /* @__PURE__ */ new Set([
+  "create_task",
+  "update_task",
+  "create_wiki_page",
+  "update_wiki_page",
+  "create_inbox_item"
+]);
+function extractStructuredResultId(content) {
+  if (!content) return null;
+  let parsed = content;
+  if (typeof content === "string") {
+    try {
+      parsed = JSON.parse(content);
+    } catch {
+      const trimmed = content.trim();
+      if (/^(?:GT|WK)-\d+$/.test(trimmed) || /^II-[0-9a-zA-Z-]+$/.test(trimmed)) {
+        return trimmed;
+      }
+      return null;
+    }
+  }
+  if (Array.isArray(parsed)) {
+    for (const item of parsed) {
+      const id = extractStructuredResultId(item);
+      if (id) return id;
+    }
+    return null;
+  }
+  if (parsed && typeof parsed === "object") {
+    const obj = parsed;
+    if (typeof obj.text === "string") {
+      const id = extractStructuredResultId(obj.text);
+      if (id) return id;
+    }
+    if (obj.structuredContent && typeof obj.structuredContent === "object") {
+      const sc = obj.structuredContent;
+      if (sc.data && typeof sc.data === "object" && typeof sc.data.id === "string") {
+        return sc.data.id;
+      }
+      if (typeof sc.id === "string") return sc.id;
+    }
+    if (obj.data && typeof obj.data === "object" && typeof obj.data.id === "string") {
+      return obj.data.id;
+    }
+    if (typeof obj.id === "string") {
+      return obj.id;
+    }
+    if (Array.isArray(obj.content)) {
+      for (const item of obj.content) {
+        const id = extractStructuredResultId(item);
+        if (id) return id;
+      }
+    }
+  }
+  return null;
+}
+function isErrorResult(event) {
+  if (event.is_error === true || event.is_error === "true") return true;
+  if (event.tool && typeof event.tool === "object") {
+    if (typeof event.tool.exitCode === "number" && event.tool.exitCode !== 0) return true;
+    if (typeof event.tool.status === "string" && event.tool.status === "error") return true;
+  }
+  const checkError = (val) => {
+    if (!val) return false;
+    if (Array.isArray(val)) {
+      return val.some(checkError);
+    }
+    if (typeof val === "object") {
+      const obj = val;
+      if (obj.isError === true || obj.isError === "true" || obj.error !== void 0) return true;
+      if (Array.isArray(obj.content) && obj.content.some(checkError)) return true;
+      if (typeof obj.text === "string") {
+        try {
+          return checkError(JSON.parse(obj.text));
+        } catch {
+        }
+      }
+    } else if (typeof val === "string") {
+      try {
+        return checkError(JSON.parse(val));
+      } catch {
+      }
+    }
+    return false;
+  };
+  return checkError(event.content);
+}
+function turnReferences(events) {
+  const mutatedIds = /* @__PURE__ */ new Set();
+  const mutatedInboxIds = /* @__PURE__ */ new Set();
+  const textIds = /* @__PURE__ */ new Set();
+  let hasToolEvents = false;
+  const keyedPending = /* @__PURE__ */ new Map();
+  const unkeyedCalls = [];
+  for (const event of events) {
+    if (event.type === "tool_use") {
+      hasToolEvents = true;
+      const rawName = event.tool?.name ?? event.name ?? "";
+      const toolName = rawName.replace(/^.*__/, "");
+      const isMutation = MUTATION_TOOLS.has(toolName);
+      const inputObj = event.tool?.input && typeof event.tool.input === "object" ? event.tool.input : event.input && typeof event.input === "object" ? event.input : {};
+      const rawTargetId = typeof inputObj.taskId === "string" ? inputObj.taskId : typeof inputObj.pageId === "string" ? inputObj.pageId : typeof inputObj.id === "string" ? inputObj.id : null;
+      let targetId = null;
+      if (rawTargetId) {
+        if ((toolName === "create_task" || toolName === "update_task") && /^GT-\d+$/.test(rawTargetId)) {
+          targetId = rawTargetId;
+        } else if ((toolName === "create_wiki_page" || toolName === "update_wiki_page") && /^WK-\d+$/.test(rawTargetId)) {
+          targetId = rawTargetId;
+        }
+      }
+      const callId = event.tool?.id ?? event.tool_use_id ?? event.id;
+      if (callId && typeof callId === "string") {
+        if (isMutation) {
+          keyedPending.set(callId, { toolName, targetId });
+        }
+      } else {
+        if (isMutation) {
+          unkeyedCalls.push({ isMutation: true, toolName, targetId });
+        } else {
+          unkeyedCalls.push({ isMutation: false });
+        }
+      }
+    } else if (event.type === "tool_result") {
+      hasToolEvents = true;
+      const callId = event.tool?.id ?? event.tool_use_id ?? event.id;
+      let mutation;
+      if (callId && typeof callId === "string") {
+        mutation = keyedPending.get(callId);
+        keyedPending.delete(callId);
+      } else if (unkeyedCalls.length > 0) {
+        const unkeyed = unkeyedCalls.shift();
+        if (unkeyed && unkeyed.isMutation) {
+          mutation = { toolName: unkeyed.toolName, targetId: unkeyed.targetId };
+        }
+      }
+      if (mutation && !isErrorResult(event)) {
+        const returnedId = extractStructuredResultId(event.content);
+        if (mutation.toolName === "create_inbox_item") {
+          if (returnedId && /^II-[0-9a-zA-Z-]+$/.test(returnedId)) {
+            mutatedInboxIds.add(returnedId);
+          }
+        } else {
+          if (mutation.targetId) {
+            mutatedIds.add(mutation.targetId);
+          }
+          if (returnedId) {
+            if ((mutation.toolName === "create_task" || mutation.toolName === "update_task") && /^GT-\d+$/.test(returnedId)) {
+              mutatedIds.add(returnedId);
+            } else if ((mutation.toolName === "create_wiki_page" || mutation.toolName === "update_wiki_page") && /^WK-\d+$/.test(returnedId)) {
+              mutatedIds.add(returnedId);
+            }
+          }
+        }
+      }
+    } else if (event.type === "assistant" && typeof event.content === "string") {
+      for (const id of event.content.match(ID_RE) ?? []) textIds.add(id);
+    }
+  }
+  return { mutatedIds, mutatedInboxIds, textIds, hasToolEvents };
+}
+function attributeReceipts(receipts, refs) {
+  if (refs.hasToolEvents) {
+    const board2 = receipts.filter((r) => r.kind !== "inbox" && refs.mutatedIds.has(r.id));
+    const inbox = receipts.filter((r) => r.kind === "inbox" && refs.mutatedInboxIds.has(r.id));
+    return [...board2, ...inbox];
+  }
+  const board = receipts.filter((r) => r.kind !== "inbox" && refs.textIds.has(r.id));
+  return [...board];
+}
+function closurePresent(finalText, receipts) {
+  const mentioned = new Set(finalText.match(ID_RE) ?? []);
+  if (!receipts.every((receipt) => receipt.kind === "inbox" || mentioned.has(receipt.id))) return false;
+  if (receipts.some((receipt) => receipt.kind === "inbox") && !/(?<![\p{L}\p{N}])(?:inbox|інбокс|вхідні)(?![\p{L}\p{N}])/iu.test(finalText)) return false;
+  const nonIdText = finalText.replace(ID_RE, "");
+  const letters = nonIdText.match(new RegExp("\\p{L}", "gu")) ?? [];
+  if (letters.length < CLOSURE_MIN_PROSE_CHARS) return false;
+  const words = nonIdText.match(new RegExp("\\p{L}{2,}", "gu")) ?? [];
+  const uniqueWords = new Set(words.map((w) => w.toLowerCase()));
+  if (uniqueWords.size < CLOSURE_MIN_PROSE_WORDS) return false;
+  return true;
+}
+function describe3(receipt, lang = "en") {
+  const title = receipt.title.trim();
+  const noun = lang === "uk" ? receipt.kind === "task" ? "\u0437\u0430\u0434\u0430\u0447\u0430" : "\u0441\u043F\u0435\u0446\u0438\u0444\u0456\u043A\u0430\u0446\u0456\u044F" : receipt.kind === "task" ? "task" : "page";
+  return title ? `${noun} ${receipt.id} "${title}"` : `${noun} ${receipt.id}`;
+}
+function renderClosure(receipts, lang = "en") {
+  const board = receipts.filter((r) => r.kind !== "inbox");
+  const created = board.filter((r) => r.action === "created");
+  const updated = board.filter((r) => r.action === "updated");
+  const inboxCount = receipts.filter((r) => r.kind === "inbox").length;
+  const parts = [];
+  if (lang === "uk") {
+    if (created.length) parts.push(`\u041F\u0456\u0434 \u0447\u0430\u0441 \u0446\u044C\u043E\u0433\u043E \u0445\u043E\u0434\u0443 \u0432 \u043F\u0440\u043E\u0454\u043A\u0442\u0456 \u0434\u043E\u0434\u0430\u043D\u043E: ${created.map((r) => describe3(r, "uk")).join("; ")}.`);
+    if (updated.length) parts.push(`\u041E\u043D\u043E\u0432\u043B\u0435\u043D\u043E: ${updated.map((r) => describe3(r, "uk")).join("; ")}.`);
+    if (inboxCount) parts.push(`\u041D\u043E\u0432\u0456 \u0435\u043B\u0435\u043C\u0435\u043D\u0442\u0438 Inbox: ${inboxCount}.`);
+    if (created.some((r) => r.kind === "task")) parts.push("\u041D\u0430\u0441\u0442\u0443\u043F\u043D\u0438\u0439 \u043A\u0440\u043E\u043A: \u0437\u0430\u0434\u0430\u0447\u0430 \u043D\u0430 \u0434\u043E\u0448\u0446\u0456 \u0437\u0430\u0434\u0430\u0447.");
+    return `
+
+**\u041F\u0456\u0434\u0441\u0443\u043C\u043E\u043A:** ${parts.join(" ")}`;
+  }
+  if (created.length) parts.push(`During this turn the project gained: ${created.map((r) => describe3(r, "en")).join("; ")}.`);
+  if (updated.length) parts.push(`Updated: ${updated.map((r) => describe3(r, "en")).join("; ")}.`);
+  if (inboxCount) parts.push(`New Inbox items: ${inboxCount}.`);
+  if (created.some((r) => r.kind === "task")) parts.push("Next: the task is on the task board.");
+  return `
+
+**Summary:** ${parts.join(" ")}`;
+}
+function closureFor(input) {
+  const receipts = attributeReceipts(diffSnapshots(input.before, input.after), turnReferences(input.events));
+  if (receipts.length === 0) return null;
+  if (closurePresent(finalAssistantText(input.events), receipts)) return null;
+  const isUk = Boolean(input.operatorText && /[Ѐ-ӿ]/.test(input.operatorText));
+  return renderClosure(receipts, isUk ? "uk" : "en");
+}
+
+// src/clarification-ledger.ts
+var LEDGER_MAX_ITEMS = 20;
+var LEDGER_MAX_QUESTIONS_PER_TURN = 5;
+var LEDGER_MAX_EXTRACTED_QUESTIONS = 50;
+var LEDGER_MAX_QUESTION_CHARS = 300;
+function emptyLedger() {
+  return { turn: 0, items: [] };
+}
+var NEGATION_RE = /\b(?:no\s+default|not\s+(?:\w+\s+)*(?:answered|assumed|resolved|decided|selected|chosen)|unanswered|unresolved|undecided|remains?\s+(?:\w+\s+)*(?:open|unanswered|unresolved|undecided)|still\s+open|without\s+(?:a\s+)?default|no\s+assumption|has\s+not\s+(?:been\s+)?(?:answered|assumed|resolved|decided|selected|chosen)|is\s+not\s+(?:answered|assumed|resolved|decided|selected|chosen)|was\s+not\s+(?:answered|assumed|resolved|decided|selected|chosen)|cannot\s+be\s+(?:answered|assumed|resolved|decided)|(?:default|assumed|assuming|assumption|decided|resolved|answered|choice|decision|option|selection)\s+(?:is\s+|was\s+|are\s+|were\s+|will\s+be\s+|to\s+|:\s*|\s*=\s*)?(?:not|never|no))\b|не\s+(?:\w+\s+)*(?:вирішено|відповіли|прийнято|обрано|визначено|узгоджено|припускаю)|без\s+(?:відповіді|замовчування)|залишається\s+відкритим|невирішено|(?:дефолт|за\s+замовчуванням|вирішено|відповіли|прийнято|припускаємо|припущення|вибір|рішення|варіант)\s*(?::\s*)?(?:не|ні|ніколи)/iu;
+var DEFERRED_DECISION_RE = /\b(?:will\s+(?:be\s+)?(?:decided|determined|resolved|chosen|selected|answered|settled|clarified|discussed|picked)|to\s+be\s+(?:decided|determined|resolved|chosen|selected|answered|settled|clarified|discussed|picked)|pending\s+(?:decision|resolution|clarification|answer|choice)|tbd|to\s+be\s+determined|deferred|postponed|will\s+(?:decide|determine|choose|resolve|answer)|decide\s+later|determine\s+later|deciding\s+later|at\s+a\s+later\s+time|tomorrow|next\s+(?:sprint|week|turn)|depends\s+on|contingent\s+on|conditional\s+on|subject\s+to|if\s+and\s+when)\b|буде\s+(?:вирішено|визначено|обрано|узгоджено|встановлено|з'ясовано)|вирішимо\s+пізніше|визначимо\s+пізніше|відкладено|залежить\s+від|потребує\s+уточнення|ще\s+не\s+(?:вирішено|визначено|обрано)/iu;
+var RESOLUTION_MARKER_RE = /\b(?:answered|assumed|assuming|assumption|blocker|default|resolved|decided)\b|відпові|прийнят|приймаю|беру|за замовчуванням|блокер|припуска|вирішено|узгоджено/iu;
+var LEDGER_STOP_WORDS = /* @__PURE__ */ new Set([
+  "which",
+  "what",
+  "where",
+  "when",
+  "who",
+  "whom",
+  "how",
+  "why",
+  "should",
+  "would",
+  "could",
+  "will",
+  "can",
+  "may",
+  "might",
+  "must",
+  "need",
+  "needed",
+  "use",
+  "used",
+  "have",
+  "been",
+  "there",
+  "this",
+  "that",
+  "question",
+  "questions",
+  "item",
+  "items",
+  "task",
+  "tasks",
+  "about",
+  "\u044F\u043A\u0456",
+  "\u044F\u043A\u0438\u0439",
+  "\u044F\u043A\u0430",
+  "\u044F\u043A\u0435",
+  "\u044F\u043A\u0438\u0445",
+  "\u044F\u043A\u043E\u043C\u0443",
+  "\u044F\u043A\u0456\u0439",
+  "\u0445\u0442\u043E",
+  "\u043A\u043E\u0433\u043E",
+  "\u043A\u043E\u043C\u0443",
+  "\u043A\u0438\u043C",
+  "\u0449\u043E",
+  "\u0447\u043E\u0433\u043E",
+  "\u0447\u043E\u043C\u0443",
+  "\u0447\u0438\u043C",
+  "\u0434\u0435",
+  "\u043A\u0443\u0434\u0438",
+  "\u0437\u0432\u0456\u0434\u043A\u0438",
+  "\u043A\u043E\u043B\u0438",
+  "\u0447\u043E\u043C\u0443",
+  "\u043D\u0430\u0432\u0456\u0449\u043E",
+  "\u044F\u043A",
+  "\u0447\u0438",
+  "\u0430\u0431\u043E",
+  "\u0434\u043B\u044F",
+  "\u043F\u0440\u043E",
+  "\u043F\u0440\u0438",
+  "\u043D\u0430\u0434",
+  "\u043F\u0456\u0434",
+  "\u0432\u0456\u0434",
+  "\u0434\u043E",
+  "\u043F\u0438\u0442\u0430\u043D\u043D\u044F",
+  "\u0437\u0430\u0434\u0430\u0447\u0430",
+  "\u0437\u0430\u0434\u0430\u0447\u0456",
+  "\u043F\u043E\u0442\u0440\u0456\u0431\u043D\u043E",
+  "\u043F\u043E\u0442\u0440\u0456\u0431\u043D\u0456",
+  "\u0442\u0440\u0435\u0431\u0430"
+]);
+function tokens(text) {
+  return new Set(
+    text.toLowerCase().split(/[^\p{L}\p{N}]+/u).filter((token) => token.length >= 3)
+  );
+}
+function tokenMatches(a, b) {
+  if (a === b) return true;
+  if (a.length >= 4 && b.length >= 4 && (a.startsWith(b.slice(0, 4)) || b.startsWith(a.slice(0, 4)))) {
+    return true;
+  }
+  return false;
+}
+function normalizeQuestionIdentity(value) {
+  return value.normalize("NFKC").toLowerCase().replace(/\s+/gu, " ").trim();
+}
+function isSameQuestion(a, b) {
+  const left = normalizeQuestionIdentity(a);
+  return /[\p{L}\p{N}]/u.test(left) && left === normalizeQuestionIdentity(b);
+}
+function isAffirmativeResolutionForQuestion(question, text, otherQuestions) {
+  if (!text || !RESOLUTION_MARKER_RE.test(text)) return false;
+  if (NEGATION_RE.test(text)) return false;
+  if (DEFERRED_DECISION_RE.test(text)) return false;
+  const substantiveQuestionToks = new Set(
+    Array.from(tokens(question)).filter((t) => !LEDGER_STOP_WORDS.has(t) && t.length >= 3)
+  );
+  if (otherQuestions && otherQuestions.length > 0) {
+    const textToks2 = tokens(text);
+    for (const otherQ of otherQuestions) {
+      if (otherQ === question || isSameQuestion(otherQ, question)) continue;
+      const otherToks = new Set(
+        Array.from(tokens(otherQ)).filter((t) => !LEDGER_STOP_WORDS.has(t) && t.length >= 3)
+      );
+      let hasSharedDomain = false;
+      for (const t of substantiveQuestionToks) {
+        for (const ot of otherToks) {
+          if (tokenMatches(t, ot)) {
+            hasSharedDomain = true;
+            break;
+          }
+        }
+        if (hasSharedDomain) break;
+      }
+      if (hasSharedDomain) {
+        const otherDistinguishingToks = [];
+        for (const ot of otherToks) {
+          let inThis = false;
+          for (const t of substantiveQuestionToks) {
+            if (tokenMatches(t, ot)) {
+              inThis = true;
+              break;
+            }
+          }
+          if (!inThis) otherDistinguishingToks.push(ot);
+        }
+        const thisDistinguishingToks = [];
+        for (const t of substantiveQuestionToks) {
+          let inOther = false;
+          for (const ot of otherToks) {
+            if (tokenMatches(t, ot)) {
+              inOther = true;
+              break;
+            }
+          }
+          if (!inOther) thisDistinguishingToks.push(t);
+        }
+        if (otherDistinguishingToks.length > 0 && thisDistinguishingToks.length > 0) {
+          let textMatchesOtherDistinguishing = false;
+          for (const ot of otherDistinguishingToks) {
+            for (const lt of textToks2) {
+              if (tokenMatches(ot, lt)) {
+                textMatchesOtherDistinguishing = true;
+                break;
+              }
+            }
+            if (textMatchesOtherDistinguishing) break;
+          }
+          let textMatchesThisDistinguishing = false;
+          for (const t of thisDistinguishingToks) {
+            for (const lt of textToks2) {
+              if (tokenMatches(t, lt)) {
+                textMatchesThisDistinguishing = true;
+                break;
+              }
+            }
+            if (textMatchesThisDistinguishing) break;
+          }
+          if (textMatchesOtherDistinguishing && !textMatchesThisDistinguishing) {
+            return false;
+          }
+        }
+      }
+    }
+  }
+  if (!isTopicConsistentWithQuestion(question, text)) {
+    return false;
+  }
+  const textToks = tokens(text);
+  let shared = 0;
+  for (const it of substantiveQuestionToks) {
+    for (const lt of textToks) {
+      if (tokenMatches(it, lt)) {
+        shared += 1;
+        break;
+      }
+    }
+  }
+  return shared >= 1 && (shared >= 2 || substantiveQuestionToks.size <= 2 || shared / substantiveQuestionToks.size >= 0.25);
+}
+function isTopicConsistentWithQuestion(question, text) {
+  const substantiveQuestionToks = Array.from(tokens(question)).filter((t) => !LEDGER_STOP_WORDS.has(t) && t.length >= 3);
+  const genericQualifiers = /* @__PURE__ */ new Set([
+    "the",
+    "a",
+    "an",
+    "this",
+    "that",
+    "our",
+    "its",
+    "their",
+    "your",
+    "\u0446\u0435\u0439",
+    "\u0446\u044F",
+    "\u0446\u0435",
+    "\u043D\u0430\u0448",
+    "\u043D\u0430\u0448\u0430",
+    "\u0439\u043E\u0433\u043E",
+    "\u0457\u0457",
+    "is",
+    "as",
+    "by",
+    "take",
+    "taking",
+    "taken",
+    "set",
+    "use",
+    "default",
+    "assumed",
+    "assuming",
+    "decision",
+    "outcome",
+    "choice",
+    "\u0434\u0435\u0444\u043E\u043B\u0442",
+    "\u0437\u0430\u043C\u043E\u0432\u0447\u0443\u0432\u0430\u043D\u043D\u044F",
+    "\u0432\u0438\u0431\u0456\u0440",
+    "\u0431\u0435\u0440\u0443",
+    "\u0432\u0432\u0430\u0436\u0430\u044E",
+    "\u043F\u0440\u0438\u0439\u043D\u044F\u0442\u043E",
+    "\u043E\u0431\u0440\u0430\u043D\u043E"
+  ]);
+  const beforeTopicMatch = text.match(/([a-zA-Z\u0400-\u04FF_-]+)\s+(?:default|дефолт|за\s+замовчуванням|is|are|was|were|will\s+be|є|це|буде|будуть|обрано|було|=|:|—|-)\b/i);
+  if (beforeTopicMatch && beforeTopicMatch[1]) {
+    const qualifier = beforeTopicMatch[1].toLowerCase();
+    if (!genericQualifiers.has(qualifier)) {
+      let qualifierMatches = false;
+      for (const it of substantiveQuestionToks) {
+        if (tokenMatches(it, qualifier)) {
+          qualifierMatches = true;
+          break;
+        }
+      }
+      if (!qualifierMatches) {
+        return false;
+      }
+    }
+  }
+  const resolutionKeywords = /* @__PURE__ */ new Set([
+    "answered",
+    "assumed",
+    "assuming",
+    "default",
+    "blocker",
+    "decision",
+    "outcome",
+    "choice",
+    "\u0432\u0456\u0434\u043F\u043E\u0432\u0456",
+    "\u043F\u0440\u0438\u0439\u043D\u044F\u0442",
+    "\u043F\u0440\u0438\u0439\u043C\u0430\u044E",
+    "\u0431\u0435\u0440\u0443",
+    "\u0437\u0430\u043C\u043E\u0432\u0447\u0443\u0432\u0430\u043D\u043D\u044F\u043C",
+    "\u0431\u043B\u043E\u043A\u0435\u0440",
+    "\u043F\u0440\u0438\u043F\u0443\u0441\u043A\u0430",
+    "\u0432\u0438\u0440\u0456\u0448\u0435\u043D\u043E",
+    "\u0443\u0437\u0433\u043E\u0434\u0436\u0435\u043D\u043E"
+  ]);
+  const textToks = Array.from(tokens(text)).filter((t) => !LEDGER_STOP_WORDS.has(t) && t.length >= 3);
+  const contentToks = textToks.filter((t) => !resolutionKeywords.has(t) && !genericQualifiers.has(t));
+  for (const ct of contentToks) {
+    const topicMatch = new RegExp(`\\b${ct}\\s+(?:default|\u0434\u0435\u0444\u043E\u043B\u0442|is|are|was|were|will\\s+be|\u0454|\u0446\u0435|\u0431\u0443\u0434\u0435|\u0431\u0443\u0434\u0443\u0442\u044C|=|:|\u2014|-)\\b`, "i").test(text);
+    if (topicMatch) {
+      let matchesQ = false;
+      for (const qt of substantiveQuestionToks) {
+        if (tokenMatches(qt, ct)) {
+          matchesQ = true;
+          break;
+        }
+      }
+      if (!matchesQ) {
+        return false;
+      }
+    }
+  }
+  return true;
+}
+function isDirectInlineResolutionForQuestion(question, afterText) {
+  if (!afterText) return false;
+  const isDirect = /^\s*(?:[-—–:]|\()\s*(?:answered|assumed|assuming|default|blocker|відпові|прийнят|приймаю|беру|за\s+замовчуванням|блокер|припуска|вирішено|узгоджено)/i.test(afterText);
+  if (!isDirect) return false;
+  if (NEGATION_RE.test(afterText)) return false;
+  if (DEFERRED_DECISION_RE.test(afterText)) return false;
+  return isTopicConsistentWithQuestion(question, afterText);
+}
+function extractQuestions(text) {
+  const withoutCode = text.replace(/```[\s\S]*?```|~~~[\s\S]*?~~~/g, " ").replace(/`[^`\n]*`/g, " ");
+  const found = [];
+  for (const rawLine of withoutCode.split(/\n+/)) {
+    const line = rawLine.replace(/^\s*(?:[-*•]|\d+[.)])\s+/, "").replace(/(\*\*|__|[*_~"«»“”])/g, "").trim();
+    if (!line) continue;
+    for (const match of line.matchAll(/[^.!?]*\?(?=\s|$)/g)) {
+      const sentence = match[0].trim();
+      const after = line.slice((match.index ?? 0) + match[0].length).split("?")[0] ?? "";
+      const hasInlineMarker = /^\s*(?:[-—–:]|\()\s*(?:answered|assumed|assuming|default|blocker|відпові|прийнят|приймаю|беру|за\s+замовчуванням|блокер|припуска|вирішено|узгоджено)/i.test(after);
+      if (hasInlineMarker) {
+        if (isDirectInlineResolutionForQuestion(sentence, after)) continue;
+      } else {
+        if (isAffirmativeResolutionForQuestion(sentence, after)) continue;
+      }
+      if (/https?:\/\/\S*$/.test(sentence)) continue;
+      if (sentence.replace(/[^\p{L}]/gu, "").length < 6) continue;
+      const question = sentence.slice(0, LEDGER_MAX_QUESTION_CHARS);
+      if (found.some((seen) => isSameQuestion(seen, question))) continue;
+      found.push(question);
+      if (found.length >= LEDGER_MAX_EXTRACTED_QUESTIONS) return found;
+    }
+  }
+  return found;
+}
+function presentLedger(ledger) {
+  const turn = ledger.turn + 1;
+  const candidates = ledger.items.map((item, index) => ({ item, index })).filter(({ item }) => item.status === "open" || item.status === "reasked" || item.status === "addressed");
+  const shownIndexes = new Set(candidates.slice(-LEDGER_MAX_ITEMS).map(({ index }) => index));
+  const items = ledger.items.map((item, index) => shownIndexes.has(index) ? { ...item, presentedTurn: turn } : item);
+  const shown = items.filter((_, index) => shownIndexes.has(index)).map(({ question, status, askedTurn }) => ({ question, status, askedTurn }));
+  return { ledger: { turn, items }, shown };
+}
+function isQuestionExplicitlyResolved(item, text, otherOpenQuestions) {
+  if (!text || !RESOLUTION_MARKER_RE.test(text)) return false;
+  const withoutCode = text.replace(/```[\s\S]*?```|~~~[\s\S]*?~~~/g, " ").replace(/`[^`\n]*`/g, " ");
+  for (const rawLine of withoutCode.split(/\n+/)) {
+    const line = rawLine.trim();
+    if (!line) continue;
+    if (line.includes(item.question)) {
+      const qIndex = line.indexOf(item.question);
+      const after = line.slice(qIndex + item.question.length).trim();
+      const isDirectAttachment = /^[:—–\->]\s*|[^\w\s]\s*(?:assumed|default|дефолт|outcome|decision|обрано|прийнято)\b/i.test(after);
+      if (isDirectAttachment && isDirectInlineResolutionForQuestion(item.question, after)) {
+        const hasOtherTokens = otherOpenQuestions?.some((oq) => {
+          if (oq === item.question || isSameQuestion(oq, item.question)) return false;
+          const otherToks = Array.from(tokens(oq)).filter((t) => !LEDGER_STOP_WORDS.has(t) && t.length >= 3);
+          const thisToks = Array.from(tokens(item.question)).filter((t) => !LEDGER_STOP_WORDS.has(t) && t.length >= 3);
+          const otherUnique = otherToks.filter((ot) => !thisToks.some((tt) => tokenMatches(ot, tt)));
+          const afterToks = tokens(after);
+          return otherUnique.length > 0 && otherUnique.some((ot) => Array.from(afterToks).some((at) => tokenMatches(ot, at)));
+        });
+        if (!hasOtherTokens) {
+          return true;
+        }
+      }
+    }
+  }
+  const segments = withoutCode.split(/\n+|(?<=[.!?])\s+/).map((l) => l.trim()).filter(Boolean);
+  for (const segment of segments) {
+    if (!RESOLUTION_MARKER_RE.test(segment)) continue;
+    if (NEGATION_RE.test(segment)) continue;
+    if (DEFERRED_DECISION_RE.test(segment)) continue;
+    if (segment.includes(item.question) || isSameQuestion(segment, item.question)) {
+      const hasOtherTokens = otherOpenQuestions?.some((oq) => {
+        if (oq === item.question || isSameQuestion(oq, item.question)) return false;
+        const otherToks = Array.from(tokens(oq)).filter((t) => !LEDGER_STOP_WORDS.has(t) && t.length >= 3);
+        const thisToks = Array.from(tokens(item.question)).filter((t) => !LEDGER_STOP_WORDS.has(t) && t.length >= 3);
+        const otherUnique = otherToks.filter((ot) => !thisToks.some((tt) => tokenMatches(ot, tt)));
+        const segToks = tokens(segment);
+        return otherUnique.length > 0 && otherUnique.some((ot) => Array.from(segToks).some((st) => tokenMatches(ot, st)));
+      });
+      if (!hasOtherTokens) {
+        return true;
+      }
+    }
+    if (isAffirmativeResolutionForQuestion(item.question, segment, otherOpenQuestions)) {
+      return true;
+    }
+  }
+  return false;
+}
+function recordTurn(ledger, finalText) {
+  const turn = ledger.turn;
+  const newQuestions = extractQuestions(finalText);
+  const unmatched = [...newQuestions];
+  const reasked = [];
+  const openQuestions = ledger.items.filter((it) => it.status === "open" || it.status === "reasked").map((it) => it.question);
+  const items = ledger.items.map((item) => {
+    if (item.status === "archived") return item;
+    const matchIndex = unmatched.findIndex((question) => isSameQuestion(question, item.question));
+    if (matchIndex >= 0) {
+      unmatched.splice(matchIndex, 1);
+      if (item.askedTurn === turn) return item;
+      const again = { ...item, status: "reasked", reasked: item.reasked + 1 };
+      delete again.addressedTurn;
+      reasked.push(again);
+      return again;
+    }
+    if (item.status === "addressed") {
+      return item.addressedTurn !== void 0 && item.addressedTurn < turn ? { ...item, status: "archived" } : item;
+    }
+    const otherQuestions = openQuestions.filter((q) => q !== item.question);
+    if (isQuestionExplicitlyResolved(item, finalText, otherQuestions)) {
+      return { ...item, status: "addressed", addressedTurn: turn };
+    }
+    return item;
+  });
+  const overflow = [];
+  let unresolved = items.filter((item) => item.status === "open" || item.status === "reasked").length;
+  let recordedNew = 0;
+  for (const question of unmatched) {
+    if (recordedNew >= LEDGER_MAX_QUESTIONS_PER_TURN) {
+      overflow.push(question);
+      continue;
+    }
+    if (unresolved >= LEDGER_MAX_ITEMS) {
+      overflow.push(question);
+      continue;
+    }
+    items.push({ question, askedTurn: turn, status: "open", reasked: 0 });
+    unresolved += 1;
+    recordedNew += 1;
+  }
+  return { ...capLedger({ turn, items }), reasked, overflow };
+}
+var DROP_ORDER = ["archived", "addressed"];
+function capLedger(ledger) {
+  const items = [...ledger.items];
+  const dropped = [];
+  for (const status of DROP_ORDER) {
+    while (items.length > LEDGER_MAX_ITEMS) {
+      const index = items.findIndex((item) => item.status === status);
+      if (index < 0) break;
+      dropped.push(...items.splice(index, 1));
+    }
+  }
+  return { ledger: { turn: ledger.turn, items }, dropped };
+}
+function parseLedger(value) {
+  if (!value || typeof value !== "object") return void 0;
+  const raw = value;
+  if (typeof raw.turn !== "number" || !Array.isArray(raw.items)) return void 0;
+  if (raw.items.length > LEDGER_MAX_ITEMS) return void 0;
+  const statuses = /* @__PURE__ */ new Set(["open", "reasked", "addressed", "archived"]);
+  const items = [];
+  for (const entry of raw.items) {
+    if (!entry || typeof entry !== "object") continue;
+    const item = entry;
+    if (typeof item.question !== "string" || typeof item.askedTurn !== "number") continue;
+    if (typeof item.status !== "string" || !statuses.has(item.status)) continue;
+    items.push({
+      question: item.question.slice(0, LEDGER_MAX_QUESTION_CHARS),
+      askedTurn: item.askedTurn,
+      status: item.status,
+      reasked: typeof item.reasked === "number" ? item.reasked : 0,
+      ...typeof item.presentedTurn === "number" ? { presentedTurn: item.presentedTurn } : {},
+      ...typeof item.addressedTurn === "number" ? { addressedTurn: item.addressedTurn } : {}
+    });
+  }
+  return { turn: raw.turn, items };
+}
 
 // src/api-base-url-migrate.ts
 var import_node_fs13 = __toESM(require("node:fs"), 1);
@@ -58556,7 +59884,7 @@ async function writeCrashSentinel(stateDir, sentinel) {
 }
 function withTimeout(fn, ms = DEFAULT_OPERATION_TIMEOUT_MS) {
   const controller = new AbortController();
-  return new Promise((resolve, reject) => {
+  return new Promise((resolve2, reject) => {
     const timer = setTimeout(() => {
       controller.abort();
       const timeoutError = new Error(`operation timed out after ${ms}ms`);
@@ -58566,7 +59894,7 @@ function withTimeout(fn, ms = DEFAULT_OPERATION_TIMEOUT_MS) {
     fn(controller.signal).then(
       (value) => {
         clearTimeout(timer);
-        resolve(value);
+        resolve2(value);
       },
       (error51) => {
         clearTimeout(timer);
@@ -59512,7 +60840,7 @@ function runExternalAgentsCli(args, opts) {
   }
   const useStdin = opts.stdinValue !== void 0;
   const stdioConfig = useStdin ? ["pipe", "pipe", "pipe"] : ["ignore", "pipe", "pipe"];
-  return new Promise((resolve) => {
+  return new Promise((resolve2) => {
     let stdout = "";
     let stderr = "";
     let settled = false;
@@ -59520,7 +60848,7 @@ function runExternalAgentsCli(args, opts) {
     const done = (code) => {
       if (!settled) {
         settled = true;
-        resolve({ stdout, stderr, code, timedOut, source, triedPath });
+        resolve2({ stdout, stderr, code, timedOut, source, triedPath });
       }
     };
     let spawned;
@@ -59688,7 +61016,7 @@ function startProviderReadinessLoop(deps) {
 
 // src/execution-consumer.ts
 var import_node_child_process19 = require("node:child_process");
-var import_node_crypto13 = __toESM(require("node:crypto"), 1);
+var import_node_crypto14 = __toESM(require("node:crypto"), 1);
 var import_node_path31 = __toESM(require("node:path"), 1);
 var import_node_util2 = require("node:util");
 
@@ -60544,6 +61872,7 @@ async function awaitTurnWithDeadline(opts) {
 
 // src/worktree.ts
 var import_node_child_process18 = require("node:child_process");
+var import_node_crypto13 = require("node:crypto");
 var import_node_fs17 = require("node:fs");
 var import_node_path30 = require("node:path");
 
@@ -60571,8 +61900,43 @@ function worktreeBranch(runId) {
   return `mrrlin/run-${runId}`;
 }
 var defaultGitExec = (args, env) => (0, import_node_child_process18.execFileSync)("git", args, { encoding: "utf8", timeout: 3e4, env });
-function git(checkout, args) {
-  return (0, import_node_child_process18.execFileSync)("git", ["-C", checkout, ...args], {
+function disabledGitHooksPath(locksDir, scope) {
+  const scopeKey = (0, import_node_crypto13.createHash)("sha256").update(scope).digest("hex").slice(0, 32);
+  return (0, import_node_path30.resolve)(locksDir, "..", "disabled-git-hooks", scopeKey);
+}
+function prepareDisabledGitHooksDir(locksDir, scope) {
+  const hooksDir = disabledGitHooksPath(locksDir, scope);
+  const hooksRoot = (0, import_node_path30.resolve)(hooksDir, "..");
+  (0, import_node_fs17.mkdirSync)(hooksRoot, { recursive: true, mode: 448 });
+  (0, import_node_fs17.mkdirSync)(hooksDir, { recursive: true, mode: 320 });
+  if ((0, import_node_fs17.readdirSync)(hooksDir).length > 0) {
+    throw new Error(`disabled_git_hooks_dir_not_empty: ${hooksDir}`);
+  }
+  try {
+    (0, import_node_fs17.chmodSync)(hooksDir, 320);
+  } catch {
+  }
+  return hooksDir;
+}
+function removeDisabledGitHooksDir(locksDir, scope) {
+  try {
+    (0, import_node_fs17.rmdirSync)(disabledGitHooksPath(locksDir, scope));
+  } catch {
+  }
+}
+function withDisabledGitHooksEnv(env, hooksDir) {
+  const rawCount = env.GIT_CONFIG_COUNT;
+  const parsedCount = rawCount === void 0 ? 0 : Number(rawCount);
+  const count2 = Number.isSafeInteger(parsedCount) && parsedCount >= 0 ? parsedCount : 0;
+  return {
+    ...env,
+    GIT_CONFIG_COUNT: String(count2 + 1),
+    [`GIT_CONFIG_KEY_${count2}`]: "core.hooksPath",
+    [`GIT_CONFIG_VALUE_${count2}`]: hooksDir
+  };
+}
+function git(checkout, args, hooksDir) {
+  return (0, import_node_child_process18.execFileSync)("git", ["-C", checkout, "-c", `core.hooksPath=${hooksDir}`, ...args], {
     encoding: "utf8",
     timeout: 3e4,
     env: { ...process.env, GIT_TERMINAL_PROMPT: "0" }
@@ -60580,20 +61944,21 @@ function git(checkout, args) {
 }
 async function createRunWorktree(opts) {
   const worktreePath = (0, import_node_path30.join)(opts.worktreeRoot, opts.slug, opts.runId);
+  const hooksDir = prepareDisabledGitHooksDir(opts.locksDir, opts.runId);
   await withCheckoutLock(opts.locksDir, opts.slug, async () => {
     (0, import_node_fs17.mkdirSync)(opts.worktreeRoot, { recursive: true });
     try {
-      git(opts.checkout, ["fetch", "origin", opts.defaultBranch]);
+      git(opts.checkout, ["fetch", "origin", opts.defaultBranch], hooksDir);
       if (!(0, import_node_fs17.existsSync)(worktreePath)) {
         git(opts.checkout, [
           "worktree",
           "add",
+          "--no-track",
           "-b",
           worktreeBranch(opts.runId),
           worktreePath,
           `origin/${opts.defaultBranch}`
-        ]);
-        git(worktreePath, ["config", "core.hooksPath", "/dev/null"]);
+        ], hooksDir);
       }
     } catch (error51) {
       const detail = error51 instanceof Error ? error51.message : String(error51);
@@ -60605,12 +61970,14 @@ async function createRunWorktree(opts) {
   return worktreePath;
 }
 async function removeRunWorktree(opts) {
+  const hooksDir = prepareDisabledGitHooksDir(opts.locksDir, (0, import_node_path30.basename)(opts.worktreePath));
   await withCheckoutLock(opts.locksDir, opts.slug, async () => {
     try {
-      git(opts.checkout, ["worktree", "remove", "--force", opts.worktreePath]);
+      git(opts.checkout, ["worktree", "remove", "--force", opts.worktreePath], hooksDir);
     } catch {
     }
-    git(opts.checkout, ["worktree", "prune"]);
+    git(opts.checkout, ["worktree", "prune"], hooksDir);
+    removeDisabledGitHooksDir(opts.locksDir, (0, import_node_path30.basename)(opts.worktreePath));
   });
 }
 async function pushRunBranch(opts, execGit = defaultGitExec) {
@@ -60633,6 +62000,7 @@ async function hasCommitsToPush(opts, execGit = defaultGitExec) {
 }
 async function doPushRunBranch(opts, execGit) {
   const branch = worktreeBranch(opts.runId);
+  const hooksDir = prepareDisabledGitHooksDir(opts.locksDir, opts.runId);
   const pushEnv = {
     PATH: process.env.PATH ?? "",
     ...process.env.HOME !== void 0 ? { HOME: process.env.HOME } : {},
@@ -60678,7 +62046,7 @@ async function doPushRunBranch(opts, execGit) {
       "-C",
       opts.worktreePath,
       "-c",
-      "core.hooksPath=/dev/null",
+      `core.hooksPath=${hooksDir}`,
       "push",
       "--no-verify",
       "origin",
@@ -60690,6 +62058,7 @@ async function doPushRunBranch(opts, execGit) {
 }
 async function sweepOrphanWorktrees(opts) {
   const reaped = [];
+  const hooksDir = prepareDisabledGitHooksDir(opts.locksDir, `sweep:${opts.slug}`);
   const ownedPrefix = (() => {
     try {
       return (import_node_fs17.realpathSync.native ?? import_node_fs17.realpathSync)(opts.worktreeRoot);
@@ -60697,32 +62066,37 @@ async function sweepOrphanWorktrees(opts) {
       return opts.worktreeRoot;
     }
   })() + import_node_path30.sep + opts.slug + import_node_path30.sep;
-  await withCheckoutLock(opts.locksDir, opts.slug, async () => {
-    const listing = git(opts.checkout, ["worktree", "list", "--porcelain"]);
-    for (const block of listing.split("\n\n")) {
-      const m = /^worktree (.+)$/m.exec(block);
-      const wt = m?.[1]?.trim();
-      if (!wt) continue;
-      const canonicalWt = (() => {
-        try {
-          return (import_node_fs17.realpathSync.native ?? import_node_fs17.realpathSync)(wt);
-        } catch {
-          return wt;
-        }
-      })();
-      const normWt = (0, import_node_path30.normalize)(canonicalWt);
-      const normPrefix = (0, import_node_path30.normalize)(ownedPrefix);
-      const isMatch = process.platform === "win32" ? normWt.toLowerCase().startsWith(normPrefix.toLowerCase()) : normWt.startsWith(normPrefix);
-      if (isMatch && opts.isReapable(wt)) {
-        try {
-          git(opts.checkout, ["worktree", "remove", "--force", wt]);
-          reaped.push(wt);
-        } catch {
+  try {
+    await withCheckoutLock(opts.locksDir, opts.slug, async () => {
+      const listing = git(opts.checkout, ["worktree", "list", "--porcelain"], hooksDir);
+      for (const block of listing.split("\n\n")) {
+        const m = /^worktree (.+)$/m.exec(block);
+        const wt = m?.[1]?.trim();
+        if (!wt) continue;
+        const canonicalWt = (() => {
+          try {
+            return (import_node_fs17.realpathSync.native ?? import_node_fs17.realpathSync)(wt);
+          } catch {
+            return wt;
+          }
+        })();
+        const normWt = (0, import_node_path30.normalize)(canonicalWt);
+        const normPrefix = (0, import_node_path30.normalize)(ownedPrefix);
+        const isMatch = process.platform === "win32" ? normWt.toLowerCase().startsWith(normPrefix.toLowerCase()) : normWt.startsWith(normPrefix);
+        if (isMatch && opts.isReapable(wt)) {
+          try {
+            git(opts.checkout, ["worktree", "remove", "--force", wt], hooksDir);
+            removeDisabledGitHooksDir(opts.locksDir, (0, import_node_path30.basename)(wt));
+            reaped.push(wt);
+          } catch {
+          }
         }
       }
-    }
-    git(opts.checkout, ["worktree", "prune"]);
-  });
+      git(opts.checkout, ["worktree", "prune"], hooksDir);
+    });
+  } finally {
+    removeDisabledGitHooksDir(opts.locksDir, `sweep:${opts.slug}`);
+  }
   return reaped;
 }
 
@@ -60916,7 +62290,7 @@ function readPositiveIntEnv(name, fallback) {
   return Number.isInteger(parsed) && parsed > 0 ? parsed : fallback;
 }
 function delayMs(ms) {
-  return new Promise((resolve) => setTimeout(resolve, ms));
+  return new Promise((resolve2) => setTimeout(resolve2, ms));
 }
 function executionBundleBudget() {
   if ((process.env.MRRLIN_RETRIEVAL_BUDGET_DISABLE ?? "").trim() === "1") return void 0;
@@ -61244,7 +62618,7 @@ function isBridgeGeneratedArtifact(artifact) {
   return typeof payload === "object" && payload !== null && "event" in payload;
 }
 function newArtifactId() {
-  return `EA-${import_node_crypto13.default.randomUUID()}`;
+  return `EA-${import_node_crypto14.default.randomUUID()}`;
 }
 var BLAST_RADIUS_FLOOR_PATTERNS = [/^supabase\/migrations\//, /^packages\/db\/src\/schema\.ts$/];
 function isBlastRadiusFloorPath(path29) {
@@ -61413,8 +62787,8 @@ async function driveTurn(deps, codex, projectSlug, runId, leaseId, threadId, inp
   return deps.run("exec", async () => {
     const pending = [];
     let resolveTurnEnded = null;
-    const turnEnded = new Promise((resolve) => {
-      resolveTurnEnded = resolve;
+    const turnEnded = new Promise((resolve2) => {
+      resolveTurnEnded = resolve2;
     });
     let acceptedTurnId = null;
     const unsubActivity = codex.onActivity(threadId, () => {
@@ -61495,7 +62869,7 @@ async function driveRun(deps, projectSlug, runId) {
   if (!claimed) return;
   if (!claimed.leaseId) {
     await deps.client.createInboxItem(projectSlug, {
-      id: `II-${import_node_crypto13.default.randomUUID()}`,
+      id: `II-${import_node_crypto14.default.randomUUID()}`,
       kind: "handoff",
       taskId: claimed.taskId,
       body: `Execution run ${runId} was claimed but returned no leaseId. This indicates DB/API corruption and requires operator attention.`
@@ -61546,6 +62920,22 @@ async function driveRun(deps, projectSlug, runId) {
       }
     }
   }
+  const needsBrowser = claimed.prerequisites?.some((p) => p.mcp === "mrrlin-browser") || task.domains?.includes("browser");
+  if (needsBrowser) {
+    const checkBusy = deps.checkBrowserBusy ?? checkBrowserBusy;
+    const busy = checkBusy();
+    if (busy.busy) {
+      await failRun(
+        deps,
+        projectSlug,
+        task,
+        runId,
+        leaseId,
+        `browser_busy: run ${runId} needs the browser, but it is currently in use by another task (holder pid: ${busy.holderPid}). Please retry once it finishes.`
+      );
+      return;
+    }
+  }
   const blockerTasks = task.blockedBy.length ? await Promise.all(task.blockedBy.map((blockerTaskId) => deps.client.getTask(projectSlug, blockerTaskId))) : [];
   const missingBlockers = task.blockedBy.filter((_, index) => !blockerTasks[index]);
   if (missingBlockers.length > 0) {
@@ -61724,12 +63114,20 @@ async function driveRun(deps, projectSlug, runId) {
     turnCount: 0,
     usage: null
   };
-  const recordTurn = (outcome) => {
+  const recordTurn2 = (outcome) => {
     runTelemetry.promptBytes += outcome.telemetry.promptBytes;
     runTelemetry.turnCount += 1;
     runTelemetry.usage = addTurnTokenUsage(runTelemetry.usage, outcome.telemetry.usage);
     return outcome;
   };
+  const isContextBudgetExhausted = (usage) => {
+    if (!usage) return false;
+    const contextTokens = (usage.inputTokens ?? 0) + (usage.outputTokens ?? 0);
+    if (contextTokens <= 0) return false;
+    const maxTokens = 2e5;
+    const remainingTokens = maxTokens - contextTokens;
+    return remainingTokens / maxTokens < 0.03 || remainingTokens < 4e3;
+  };
   const effortDecision = deriveEffort({
     impact: task.impact,
     type: task.type,
@@ -61952,7 +63350,7 @@ ${renderTaskStateSection(taskState)}`;
         );
         return;
       }
-      const primed = recordTurn(
+      const primed = recordTurn2(
         await driveTurn(deps, codex, projectSlug, runId, leaseId, threadId, bundle, primingBudgetMs, "priming", effortDecision?.level)
       );
       if (!primed.ok) {
@@ -62016,7 +63414,7 @@ Continue executing task ${task.id}. Make the next concrete increment of progress
       );
       return;
     }
-    const outcome = recordTurn(
+    const outcome = recordTurn2(
       await driveTurn(deps, codex, projectSlug, runId, leaseId, threadId, executionPrompt, workBudgetMs, "work", effortDecision?.level)
     );
     if (!outcome.ok) {
@@ -62024,6 +63422,26 @@ Continue executing task ${task.id}. Make the next concrete increment of progress
       await failRun(deps, projectSlug, task, runId, leaseId, outcome.error);
       return;
     }
+    if (isContextBudgetExhausted(outcome.telemetry.usage)) {
+      console.warn(
+        JSON.stringify({
+          event: "context_budget_gate_triggered",
+          projectSlug,
+          runId,
+          taskId: task.id,
+          usage: outcome.telemetry.usage
+        })
+      );
+      await failRun(
+        deps,
+        projectSlug,
+        task,
+        runId,
+        leaseId,
+        `context_budget_exhausted: context window is near capacity (<3% remaining). Execution run halted safely to preserve progress and prevent lost output.`
+      );
+      return;
+    }
     const prReadyStatuses = useExecutor ? CODE_PR_READY_TASK_STATUSES : COMPLETED_TASK_STATUSES;
     let readiness = await assertRunCompletionReady(deps, projectSlug, task.id, runId, prReadyStatuses);
     if (!readiness.ok) {
@@ -62042,7 +63460,7 @@ Continue executing task ${task.id}. Make the next concrete increment of progress
         })
       );
       const completionPrompt = buildCompletionTurnPrompt(task.id, readiness.task.status);
-      const completionOutcome = recordTurn(
+      const completionOutcome = recordTurn2(
         await driveTurn(
           deps,
           codex,
@@ -62902,7 +64320,7 @@ async function reconcileTaskAwaitingMerge(deps, projectSlug, task, runId, reason
   }
   try {
     await deps.client.createInboxItem(projectSlug, {
-      id: `II-${import_node_crypto13.default.randomUUID()}`,
+      id: `II-${import_node_crypto14.default.randomUUID()}`,
       kind: "handoff",
       taskId: task.id,
       body: `Task ${task.id} (${task.title}) still needs operator follow-up: ${reason}. Mrrlin could not move the task back to Handoff needed automatically.`
@@ -62937,7 +64355,7 @@ async function notifyOperatorHandoff(deps, projectSlug, task, runId, reason) {
   }
   try {
     await deps.client.createInboxItem(projectSlug, {
-      id: `II-${import_node_crypto13.default.randomUUID()}`,
+      id: `II-${import_node_crypto14.default.randomUUID()}`,
       kind: "handoff",
       taskId: task.id,
       body: `Execution run ${runId} for task ${task.id} (${task.title}) needs operator attention: ${reason}`
@@ -63098,7 +64516,7 @@ async function deployGateHandoff(deps, projectSlug, task, runId, reason, leaseId
   }).catch(() => {
   });
   await deps.client.createInboxItem(projectSlug, {
-    id: `II-${import_node_crypto13.default.randomUUID()}`,
+    id: `II-${import_node_crypto14.default.randomUUID()}`,
     kind: "handoff",
     taskId: task.id,
     body: `Deploy gate for run ${runId} (task ${task.id} \u2014 ${task.title}) needs operator attention: ${reason}`
@@ -63117,7 +64535,7 @@ function maxLeaseReclaims() {
 }
 
 // src/async-job-consumer.ts
-var import_node_crypto14 = __toESM(require("node:crypto"), 1);
+var import_node_crypto15 = __toESM(require("node:crypto"), 1);
 var ASYNC_JOB_MAX_ATTEMPTS = 2;
 function ASYNC_UNOWNED_TTL_DAYS() {
   const raw = Number(process.env.MRRLIN_ASYNC_UNOWNED_TTL_DAYS);
@@ -63207,12 +64625,21 @@ async function driveAsyncJob(deps, projectSlug, jobId) {
   } finally {
     clearInterval(touchTimer);
   }
+  if (outcome.kind === "superseded") {
+    await deps.client.terminalizeAsyncJob(projectSlug, jobId, {
+      leaseId,
+      status: "superseded",
+      error: outcome.reason ?? outcome.error ?? "Superseded"
+    }).catch(() => {
+    });
+    return;
+  }
   const terminalStatus = outcome.kind === "done" ? "done" : "failed";
   await deps.client.terminalizeAsyncJob(projectSlug, jobId, {
     leaseId,
     status: terminalStatus,
     resultJson: outcome.kind === "done" ? outcome.resultJson : null,
-    finalReviewedHash: outcome.kind === "done" ? outcome.finalReviewedHash : null,
+    finalReviewedHash: outcome.kind === "done" ? outcome.finalReviewedHash : outcome.kind === "failed" ? outcome.finalReviewedHash ?? null : null,
     error: outcome.kind === "done" ? null : outcome.error,
     failureReason: outcome.kind === "done" ? null : outcome.failureReason
   }).catch(() => {
@@ -63233,7 +64660,7 @@ async function driveAsyncJob(deps, projectSlug, jobId) {
   const delivery = descriptor2.onComplete(outcome, input);
   if (!delivery.suppressInbox) {
     await deps.client.createInboxItem(projectSlug, {
-      id: delivery.id ?? `II-${import_node_crypto14.default.randomUUID()}`,
+      id: delivery.id ?? `II-${import_node_crypto15.default.randomUUID()}`,
       kind: delivery.kind,
       body: delivery.body,
       ...delivery.taskId ? { taskId: delivery.taskId } : {},
@@ -63251,13 +64678,13 @@ async function deriveRequestedHash(client, toolName, input) {
   if (input.requestedHash) return input.requestedHash;
   if (toolName === "run_spec_consensus" && input.pageId) {
     const page = await client.getWikiPage(input.projectSlug, input.pageId);
-    return page.contentHash ?? import_node_crypto14.default.createHash("sha256").update(page.markdownBody).digest("hex");
+    return page.contentHash ?? import_node_crypto15.default.createHash("sha256").update(page.markdownBody).digest("hex");
   }
   if (toolName === "draft_task_spec" && input.taskId) {
     const task = await client.getTask(input.projectSlug, input.taskId);
-    return task.updatedAt ?? import_node_crypto14.default.createHash("sha256").update(JSON.stringify(task)).digest("hex");
+    return task.updatedAt ?? import_node_crypto15.default.createHash("sha256").update(JSON.stringify(task)).digest("hex");
   }
-  return import_node_crypto14.default.createHash("sha256").update(JSON.stringify(input)).digest("hex");
+  return import_node_crypto15.default.createHash("sha256").update(JSON.stringify(input)).digest("hex");
 }
 async function runAsyncBackstopSweep(deps, drive = (slug, jobId) => driveAsyncJob(deps, slug, jobId)) {
   const projects = await deps.client.listProjects();
@@ -63599,7 +65026,9 @@ function loadThreadIndex(stateDir, ttlMs, now) {
       lastUsedAt,
       model: typeof entry.model === "string" ? entry.model : null,
       reasoningEffort: typeof entry.reasoningEffort === "string" ? entry.reasoningEffort : null,
-      provider: typeof entry.provider === "string" ? entry.provider : null
+      provider: typeof entry.provider === "string" ? entry.provider : null,
+      systemInstructionHash: typeof entry.systemInstructionHash === "string" ? entry.systemInstructionHash : null,
+      ...parseLedger(entry.clarificationLedger) ? { clarificationLedger: parseLedger(entry.clarificationLedger) } : {}
     });
   }
   return result;
@@ -67359,7 +68788,7 @@ function saveAgentPairing(record2) {
   }
 }
 function runPhoneTurn(handler, directorSessionId, text, emit) {
-  return new Promise((resolve) => {
+  return new Promise((resolve2) => {
     const emitter = new import_node_events3.EventEmitter();
     const fakeSocket = {
       on: (event, cb) => {
@@ -67374,7 +68803,7 @@ function runPhoneTurn(handler, directorSessionId, text, emit) {
       settled = true;
       if (timer) clearTimeout(timer);
       emitter.removeAllListeners();
-      resolve();
+      resolve2();
     };
     const send = (msg) => {
       if (msg.type === "error") {
@@ -67534,13 +68963,19 @@ async function renderPairingQrSvg(payload) {
 // src/executor-server.ts
 var import_node_child_process20 = require("node:child_process");
 function defaultReadinessRunner(provider) {
-  const command = provider === "claude" ? "claude" : "codex";
+  if (provider !== "codex" && provider !== "claude" && provider !== "agy") {
+    throw new Error(`unsupported executor provider: ${String(provider)}`);
+  }
+  const command = provider === "claude" ? "claude" : provider === "agy" ? "agy" : "codex";
   return (args) => {
     const r = (0, import_node_child_process20.spawnSync)(command, args, { encoding: "utf8", timeout: 8e3, shell: true });
     return { status: r.status, stdout: r.stdout ?? "", stderr: r.stderr ?? "" };
   };
 }
 async function startExecutorServer(opts) {
+  if (opts.provider !== "codex" && opts.provider !== "claude" && opts.provider !== "agy") {
+    throw new Error(`unsupported executor provider: ${String(opts.provider)}`);
+  }
   const verify = opts.verifyReadiness ?? verifyProviderReadiness;
   const runner = opts.readinessRunner ?? defaultReadinessRunner(opts.provider);
   const readiness = await verify(opts.provider, runner);
@@ -67553,8 +68988,37 @@ async function startExecutorServer(opts) {
     error51.details = readiness.details;
     throw error51;
   }
+  const baseEnv = { ...opts.env ?? process.env };
+  const childEnv = withDisabledGitHooksEnv(baseEnv, opts.disabledGitHooksDir);
+  if (opts.provider === "codex") {
+    const manager = new CodexServerManager();
+    try {
+      const client = await manager.acquire({
+        cwd: opts.worktree,
+        approvalPolicy: "never",
+        env: childEnv,
+        ...opts.spawn ? { spawn: opts.spawn } : {}
+      });
+      let disposed = false;
+      const dispose = () => {
+        if (disposed) return;
+        disposed = true;
+        try {
+          manager.shutdown();
+        } catch {
+        }
+      };
+      return { handle: createCodexAgentHandle(client), dispose };
+    } catch (error51) {
+      try {
+        manager.shutdown();
+      } catch {
+      }
+      throw error51;
+    }
+  }
   if (opts.provider === "claude") {
-    const handle = new ClaudeAgentHandle();
+    const handle = new ClaudeAgentHandle(childEnv);
     let disposed = false;
     const dispose = () => {
       if (disposed) return;
@@ -67563,30 +69027,17 @@ async function startExecutorServer(opts) {
     };
     return { handle, dispose };
   }
-  const manager = new CodexServerManager();
-  try {
-    const client = await manager.acquire({
-      cwd: opts.worktree,
-      approvalPolicy: "never",
-      ...opts.spawn ? { spawn: opts.spawn } : {}
-    });
+  if (opts.provider === "agy") {
+    const handle = new AgyAgentHandle(childEnv);
     let disposed = false;
     const dispose = () => {
       if (disposed) return;
       disposed = true;
-      try {
-        manager.shutdown();
-      } catch {
-      }
+      handle.disposeAll();
     };
-    return { handle: createCodexAgentHandle(client), dispose };
-  } catch (error51) {
-    try {
-      manager.shutdown();
-    } catch {
-    }
-    throw error51;
+    return { handle, dispose };
   }
+  throw new Error(`unsupported executor provider: ${String(opts.provider)}`);
 }
 
 // src/self-review.ts
@@ -68375,9 +69826,9 @@ function readCodexFallbackModels() {
   return [...models.values()];
 }
 function selfUpdateInboxItemId(offeredVersion) {
-  if (!offeredVersion) return `II-MCPUPD-${(0, import_node_crypto15.randomUUID)()}`;
+  if (!offeredVersion) return `II-MCPUPD-${(0, import_node_crypto16.randomUUID)()}`;
   if (/^[A-Za-z0-9._-]+$/.test(offeredVersion)) return `II-MCPUPD-${offeredVersion}`;
-  const hash3 = import_node_crypto15.default.createHash("sha256").update(offeredVersion).digest("hex").slice(0, 10);
+  const hash3 = import_node_crypto16.default.createHash("sha256").update(offeredVersion).digest("hex").slice(0, 10);
   return `II-MCPUPD-${offeredVersion.replace(/[^A-Za-z0-9._-]/g, "-")}-${hash3}`;
 }
 function neutralCheckoutCwd(stateDir) {
@@ -68399,6 +69850,25 @@ function buildThreadStartParams(msg, config2, desiredModel) {
     "You are the Mrrlin Director assistant.",
     "You can call MCP tools to read and write project state.",
     "Prefer calling tools over guessing. Be concise.",
+    // O-DIRECTOR-HARD-GATES: a compact behaviour contract replaced ~30 accumulated mandates, several of
+    // which were fitted to single benchmark personas. Closure and localization are enforced in code
+    // (director-closure.ts, linkifyMrrlinIds.ts); the clarification ledger arrives in the turn context.
+    "Behaviour contract (three rules):",
+    '- DEFAULT-FIRST: never open an open-ended question round. When the intent-confirmation contract below says you must ask before creating a task, ask only about what would change the architecture or the deliverable \u2014 never about anything the operator already stated in this conversation \u2014 and once the operator has replied, take a reasonable default for whatever is still open and say so plainly ("unless you object, I take X") instead of asking again. Never ask permission to create tasks or specs \u2014 creating them is your job.',
+    "- USER-FACING CLOSURE: end every turn with plain text in the operator's language. If the turn created or changed anything, name each item (ID with a one-line scope), where the result goes, and what happens next; if it changed nothing, say plainly what you need from the operator or what happens next. Never invent an ID or a write to have something to report. A UI card or a bare list of IDs never replaces that text.",
+    "- QUESTION LIFECYCLE: every question you asked must end in exactly one state \u2014 answered by the operator, assumed (you state the default you took), or blocker (you state what it blocks). The open-question list in the turn context is authoritative: resolve each item explicitly and never drop one silently.",
+    "Core guards:",
+    "- Never claim a deliverable, file, test result, or running execution exists unless a tool actually produced it. Never claim autopilot is running unless an execution run is active; for a human_review task say it waits in To Do for your approval.",
+    "- Mention a GT- or WK- id only if a tool returned it in this conversation (server-authoritative receipts).",
+    "- Reply in the operator's language for the whole turn (questions, task scopes, summaries).",
+    "- Keep chat short and human. No code blocks, DDL, terminal output, local filesystem paths, internal job/inbox UUIDs or alert markers in chat \u2014 put long content into a wiki page and link it.",
+    "- Spec pages in folder Specs must contain `## Acceptance criteria` followed by `- [ ]` items.",
+    "- AGNOSTIC DELIVERY MANDATE: Mrrlin is an Agnostic Delivery Platform decoupled from mandatory GitHub. Delivery is routed strictly by artifact kind: (1) document -> wiki (specs, policies, legal compliance playbooks, project documentation); (2) page -> publish (web pages, landing pages, interactive HTML previews); (3) file_set -> artifacts (file uploads, bundles, build zips); (4) message -> send (outbound webhooks, Slack, notifications); (5) code_change -> repo_host (git / GitHub ONLY when modifying source repository code). NEVER stall or refuse non-code tasks (such as marketing landing pages, GDPR checklists, or legal compliance playbooks) by demanding a Git repository. Non-code tasks deliver directly via page (Publish) or document (Wiki).",
+    "- 3-TIER COMMERCIAL SCOPE GOVERNANCE: Treat tasks by domain governance tier. (1) Tier 1 Core Tech Delivery (backend, frontend, SRE, databases): decompose autonomously into repository code changes (when a repo is bound) or code artifacts. (2) Tier 2 Planning & Content (landing pages, SEO, marketing): create actionable drafts; when details such as a phone number, brand name or copy are missing, do not loop on questions \u2014 create the task, record `## Placeholders: [NEED_INPUT: <item>]` in the Wiki spec, and set `autonomyLevel: 'human_review'`. (3) Tier 3 Guardrailed Advisory (high risk: privacy/GDPR, security/SOC 2, billing, production database migrations, infrastructure): always set `autonomyLevel: 'human_review'`, put the domain's standard safety controls into the spec, and state that irreversible actions need human sign-off.",
+    "- INBOX QUESTION RETIREMENT MANDATE \u2014 Retiring answered questions: Before creating a task/plan, retire only pending Inbox questions the operator actually answered. Call `decide_inbox_item(itemId: <exact id>, decidedBy: 'director', verdict: 'acknowledged', answer: <actual answer>)`. Use `verdict: 'rejected', reason: ...` only if moot. Never close an unrelated item.",
+    "- CHAT CLARIFICATIONS ARE IN CHAT ONLY: During synchronous interactive Director chat, ask clarifying questions directly in your chat response. DO NOT call `create_inbox_item(kind: 'question')` for routine conversational clarifications in Turn 1 \u2014 Inbox questions are reserved for autonomous background workers or asynchronous gate pauses that occur while the operator is away.",
+    "- AUTOPILOT PRESENCE FENCE TRANSPARENCY: Autopilot requires operator web app presence to trigger execution ticks (`operator_absent`). When the operator asks about autopilot starting, remind them that keeping the web tab open allows the scheduler to advance the queue automatically.",
+    "",
     "Autonomy level is NOT a reason to skip clarification. `auto` means only that no human gate is",
     "required before the result LANDS (merge/deploy); it does not authorize building on unvalidated",
     "assumptions. Judge clarification on requirement clarity, independently of autonomy_level.",
@@ -68492,17 +69962,22 @@ function buildThreadStartParams(msg, config2, desiredModel) {
     "turn with one sentence restating your understanding, then at most 3 scope-level questions, and",
     "do NOT create the task yet. Create it after the operator replies.",
     "",
-    "Once the operator replies and clarifies or confirms the scope (or if scope was already clear),",
-    "you MUST materialize the work onto the board: create the plan (if needed) and call `create_task`",
-    "in the same turn so actionable task cards appear on `/tasks` immediately. Never leave the board",
-    "empty with 0 tasks after agreeing on scope. Never claim tasks are created, queued, or ready unless",
-    "`create_task` was actually invoked and returned the task ID.",
-    "",
     "Set operatorSeedRequest to the operator's OWN WORDS, verbatim. Select every message in this",
     "conversation that forms part of the request \u2014 not only the last one \u2014 and concatenate them in",
     "order, separated by a blank line. Do NOT paraphrase, summarise, or rewrite any of it, and do",
     "NOT add words of your own.",
     "",
+    "Once the operator replies and clarifies or confirms the scope (or if scope was already clear),",
+    "you MUST create the tasks: create the plan (if needed) and call `create_task` in the same turn so",
+    "actionable task cards appear on the Tasks board immediately. Never leave the board empty with 0",
+    "tasks after agreeing on scope. Never claim tasks are created, queued, or ready unless `create_task`",
+    "was actually invoked and returned the task ID. Set `status: 'todo'` on newly created actionable",
+    "tasks unless explicitly asked for backlog, so they appear in active Kanban columns immediately.",
+    "When referring to created tasks or where to view them, use natural, human-friendly language with a markdown link",
+    "to the Tasks page (e.g. 'on the [Tasks page](/tasks)', '[Tasks board](/tasks)', or in Ukrainian '\u043D\u0430 [\u0441\u0442\u043E\u0440\u0456\u043D\u0446\u0456 \u0437\u0430\u0434\u0430\u0447](/tasks)').",
+    "Never output raw technical URL fragments like '\u043D\u0430 /tasks' or 'on /tasks', and never use developer database",
+    "jargon like 'materialized tasks' or '\u043C\u0430\u0442\u0435\u0440\u0456\u0430\u043B\u0456\u0437\u0443\u0432\u0430\u0432 \u0437\u0430\u0434\u0430\u0447\u0456' \u2014 say 'created' / '\u0441\u0442\u0432\u043E\u0440\u0438\u0432' or 'added' / '\u0434\u043E\u0434\u0430\u0432' instead.",
+    "",
     "Set resolvedIntent to the accepted task intent in your own concise words only after the outcome",
     "is resolved enough to create the task. Use it to capture the actionable understanding that came",
     "from the conversation and, when needed, retrieved wiki context. Do NOT use resolvedIntent as a",
@@ -68541,6 +70016,9 @@ function buildThreadStartParams(msg, config2, desiredModel) {
     "  SHALL sentence stating the externally visible behavior.",
     "- Give every requirement at least one `#### Scenario: <name>` with `- WHEN ...` / `- THEN ...`",
     "  bullets (`- AND ...` as needed). Scenarios make the spec verifiable.",
+    "- MUST include `## Acceptance criteria`: a markdown checklist (`- [ ] ...`) of concrete, verifiable",
+    "  conditions \u2014 this is the machine-usable yardstick the consensus review scores against. NEVER format criteria as numbered lists (`1. ...`) or plain bullets.",
+    "- MUST include `## Verification`: the exact tests, commands, or checks that prove each criterion holds.",
     "- Keep behavior contracts in the spec; implementation details belong in `## Implementation Plan`.",
     "- Apply this format ONLY to Specs/{id} pages; do not retro-fit it onto other wiki page types.",
     '- Spec consensus runs ASYNCHRONOUSLY. Call `run_spec_consensus` for a `Specs/{id}` page; it returns IMMEDIATELY. On `already_converged`, the spec is already marked ready \u2014 proceed straight to `create_execution_run`; do NOT call `mark_spec_ready` and do NOT re-run consensus. On `queued` or `already_running`, tell the user it was launched and END your turn \u2014 do NOT poll or call it again; the result arrives in the inbox (an `info` item on CONVERGED, a `handoff` item if it was blocked/failed). When a `handoff` says it was blocked, address the recorded issues in the spec (any edit re-arms the gate) and call `run_spec_consensus` once more. For a NON-code task (domain seo/marketing/content, ADR 0020): the low-risk lanes `seo`, `marketing`, and `content` proceed to `create_execution_run` after consensus converges, using the same flow as code tasks. When the review agrees, tell the operator "the reviewers agreed on the spec" and proceed to create_execution_run. When it does not, tell them the reviewers could not agree and that there is a decision question in the inbox. Never say "consensus", "converged", or "CONVERGED" to the operator; those are internal words.',
@@ -68660,15 +70138,20 @@ function buildThreadStartParams(msg, config2, desiredModel) {
     `Product-surface contract \u2014 never answer "I don't know where that is" about Mrrlin's own UI:`,
     "- You are talking to an operator inside this product. When they ask where something is, name",
     "  the route and the control by the label actually printed on it, then let them click it.",
-    "- Connecting a GitHub repository lives on `/settings`, under the `GitHub integration` heading.",
-    "  That SECTION is always on the page \u2014 it sits below Overview, Scheduler and Intent Judge, so",
-    "  an operator who cannot find it has most likely not scrolled that far. What the section shows",
-    "  depends on how far along they already are, so do NOT promise a specific card before you know:",
-    '  nothing connected yet \u2192 a card titled "Connect a GitHub repository" with a `Connect GitHub`',
-    "  button that installs the GitHub App; App installed but no repo chosen \u2192 a repo picker to bind",
-    "  one; repo already bound \u2192 the connected repo and its deploy workflows. Describe the section",
-    "  and let them read which of the three they are looking at, or ask them. Binding a repo is",
-    "  optional: a project without one still works, it just has no branch/PR/deploy controls on tasks.",
+    "- Autopilot view lives on `/autopilot`. It displays autonomous execution runs, active background",
+    "  jobs, and tasks currently in handoff. To inspect why tasks are in handoff or diagnose autonomous",
+    '  progress, use the canonical typed tools: `list_inbox_items` (filtering by kind="handoff"),',
+    "  `list_tasks` (filtering by status), and `list_execution_runs`.",
+    "- Tasks and board backlog live on `/tasks` (and individual task details on `/items/{taskId}`).",
+    "  Always use `list_tasks`, `get_task`, and `list_task_events` to inspect them.",
+    "- Project knowledge, deliverable reports, and specifications live under `/wiki` and `/deliverables/*`.",
+    "  These are stored as project wiki pages \u2014 read them directly via `get_wiki_page` or search with",
+    "  `search_wiki_pages`/`list_wiki_pages`. Never open the browser for `/deliverables/*` or `/wiki/*`.",
+    "- Workspace settings, scheduler configurations, and integrations live on `/settings`.",
+    "- Universal Tool Availability: All canonical typed tools (`list_tasks`, `get_task`, `list_inbox_items`,",
+    "  `list_execution_runs`, `get_wiki_page`, `search_wiki_pages`, `list_wiki_pages`) are authoritative",
+    "  and fully available across ALL routes and session tabs. Never tell an operator that a typed tool",
+    "  is missing or unavailable because of the current page or route.",
     "- If a surface is genuinely not in this list, say what you do know and check with a typed tool",
     '  rather than guessing a route \u2014 a wrong path costs the operator more than an honest "let me',
     '  check". Never send them to the browser to hunt for a page in their own app.',
@@ -68722,22 +70205,12 @@ function buildThreadStartParams(msg, config2, desiredModel) {
     "- During a live chat turn, when a SPECIFIC task is ambiguous and the ambiguity affects",
     "  the work, ASK the operator a simple, concrete question inline in your reply (default to",
     "  asking rather than silently assuming). Low-impact ambiguity may still be recorded as an",
-    "  assumption on the spec page.",
-    "- For any such task-affecting question, ALSO bank it durably before your final reply:",
-    '  `create_inbox_item` with `kind="question"`, `taskId` set, `directorSessionId` from the',
-    "  Context JSON, `body` = the exact question, and `questionOptions` = 2-3 concrete answer",
-    "  options. Each option MUST include a short `label`, a concise `description`, and a",
-    "  self-contained durable `answer`; you MAY mark at most one option as `recommended` when",
-    "  you explicitly prefer a path. The operator always has a custom-answer path in the UI, so",
-    "  your options should guide, not trap. (The server dedups identical open questions; do not",
-    "  supply a dedup key.)",
-    "- When the operator answers in chat, write the answer into the Specs/{taskId}",
-    '  Clarifications section, then `decide_inbox_item` the question with `verdict="acknowledged"`',
-    "  and `answer` = the resolved answer.",
-    "- Project-level ambiguity (scope or direction not yet tied to a specific task) MAY be banked",
-    "  the same way but with `taskId` OMITTED. There is no spec page yet, so incorporate the answer",
-    "  into your current scoping/conversation. Reserve taskless questions for genuine project-level",
-    "  scope \u2014 task-affecting questions still set `taskId`.",
+    "  assumption on the spec page. NEVER ask clarifying questions after Turn 1 when the operator",
+    "  has provided core project scope; adopt standard conventions for secondary edge cases and create tasks.",
+    '- In synchronous live Director chat (Turn 1 scoping), ask your questions directly in your chat reply without creating Inbox items. Only bank questions in Inbox (`create_inbox_item` with `kind="question"`, `taskId` set, `directorSessionId` from Context JSON, `questionOptions` = 2-3 concrete answer options) when an autonomous background task pauses, when a task requires operator decision while the operator is away, or when explicitly requested. Each banked option MUST include a short `label`, a concise `description`, and a self-contained durable `answer`; you MAY mark at most one option as `recommended` when you explicitly prefer a path.',
+    '- When the operator answers in chat, write the answer into the Specs/{taskId} Clarifications section, and if an Inbox question was previously open, `decide_inbox_item` with `verdict="acknowledged"` and `answer` = the resolved answer.',
+    "- Project-level ambiguity (scope or direction not yet tied to a specific task) in live chat stays in chat; for genuine asynchronous pauses it MAY be banked with `taskId` OMITTED. Reserve taskless Inbox questions for genuine project-level scope.",
+    "- When the operator answers a banked question, immediately call `decide_inbox_item` with its exact `itemId`, `decidedBy='director'`, `verdict='acknowledged'`, and the actual `answer` before any `create_task`. Never close another pending question.",
     "- Binding taskless answers to a task: WHEN you create a task out of project-level scoping,",
     "  call `list_inbox_items` (kind=question), fold any relevant `acknowledged` TASKLESS answer",
     "  into the new task's Specs/{id} Clarifications, and `reject` (with a reason) any taskless",
@@ -68843,8 +70316,8 @@ async function runCollectedAgentTurn(handle, prompt, cwd, baseInstructions) {
   let acceptedTurnId;
   let turnError = null;
   let resolveTurnEnded = null;
-  const turnEnded = new Promise((resolve) => {
-    resolveTurnEnded = resolve;
+  const turnEnded = new Promise((resolve2) => {
+    resolveTurnEnded = resolve2;
   });
   const unsub = handle.onEvent(threadId, (event) => {
     if (event.type === "assistant") chunks.push(event.content);
@@ -69063,9 +70536,10 @@ function createBridgeRequestListener(opts) {
         res.end(JSON.stringify({ ok: false, error: "Origin not allowed." }));
         return;
       }
-      const nonce = import_node_crypto15.default.randomBytes(16).toString("base64url");
+      const nonce = import_node_crypto16.default.randomBytes(16).toString("base64url");
       res.writeHead(200, { "content-type": "application/json" });
-      res.end(JSON.stringify({ ok: true, wsUrl: `ws://${host}:${port}/ws`, token, nonce }));
+      const publicHost = host === "0.0.0.0" ? "127.0.0.1" : host;
+      res.end(JSON.stringify({ ok: true, wsUrl: `ws://${publicHost}:${port}/ws`, token, nonce }));
       return;
     }
     res.writeHead(404).end();
@@ -69366,7 +70840,7 @@ function createBridgeMessageHandler(deps) {
       }
     }
     socket.on("message", async (data) => {
-      const spanId = import_node_crypto15.default.randomUUID();
+      const spanId = import_node_crypto16.default.randomUUID();
       if (logCtx) {
         logCtx.span.id = spanId;
         logCtx.span.at = Date.now();
@@ -69970,8 +71444,10 @@ function createBridgeMessageHandler(deps) {
       const desiredEffort = normalizeReasoningEffort(msg.reasoningEffort);
       const resolvedProviderId = turnSeat.id;
       let startedFreshThread = false;
+      let desiredInstructionHash = null;
       try {
         const startParams = deps.buildStartParams(msg, desiredModel);
+        desiredInstructionHash = import_node_crypto16.default.createHash("sha256").update(startParams.baseInstructions ?? "").digest("hex");
         if (!thread) {
           const newThread = {
             threadId: "",
@@ -69982,7 +71458,8 @@ function createBridgeMessageHandler(deps) {
             reasoningEffort: desiredEffort,
             replay: null,
             supersededReplay: null,
-            provider: resolvedProviderId
+            provider: resolvedProviderId,
+            systemInstructionHash: null
           };
           const started = await codexClient.startThread(startParams);
           newThread.threadId = started.threadId;
@@ -69993,17 +71470,27 @@ function createBridgeMessageHandler(deps) {
         } else {
           const existingThread = thread;
           const providerMismatch = existingThread.provider !== null && existingThread.provider !== resolvedProviderId;
+          const instructionMismatch = (resolvedProviderId === "agy" || resolvedProviderId === "claude") && (!existingThread.systemInstructionHash || existingThread.systemInstructionHash !== desiredInstructionHash);
           let resumed = true;
           let result;
-          if (!existingThread.threadId || providerMismatch) {
+          if (!existingThread.threadId || providerMismatch || instructionMismatch) {
+            if (existingThread.threadId) {
+              await codexClient.interruptTurn(existingThread.threadId).catch(() => {
+              });
+            }
             resumed = false;
             result = await codexClient.startThread(startParams);
+            existingThread.systemInstructionHash = null;
           } else {
             try {
-              result = await codexClient.resumeThread(existingThread.threadId, startParams);
+              result = await codexClient.resumeThread(existingThread.threadId, {
+                ...startParams,
+                alreadySeeded: true
+              });
             } catch {
               resumed = false;
               result = await codexClient.startThread(startParams);
+              existingThread.systemInstructionHash = null;
             }
           }
           existingThread.threadId = result.threadId;
@@ -70037,7 +71524,7 @@ function createBridgeMessageHandler(deps) {
       thread.inFlight = true;
       pendingTurnSessions.delete(directorSessionId);
       thread.replay = createReplayBuffer({
-        turnId: (0, import_node_crypto15.randomUUID)(),
+        turnId: (0, import_node_crypto16.randomUUID)(),
         spanId,
         ...deps.retentionMs !== void 0 ? { retentionMs: deps.retentionMs } : {},
         ...deps.ackLingerMs !== void 0 ? { ackLingerMs: deps.ackLingerMs } : {}
@@ -70137,10 +71624,13 @@ function createBridgeMessageHandler(deps) {
         deps.releaseCodex(turnSeat.id);
         return;
       }
+      const presentedLedger = presentLedger(thread.clarificationLedger ?? emptyLedger());
+      thread.clarificationLedger = presentedLedger.ledger;
       const contextPrefix = renderContextPrefix({
         ...msg.context,
         project: projectContext,
         answeredQuestions,
+        openQuestions: presentedLedger.shown.length ? presentedLedger.shown : void 0,
         directorSessionId
       });
       const sendInTurn = (msg2) => {
@@ -70187,15 +71677,38 @@ function createBridgeMessageHandler(deps) {
           }
           let resolveTurn = null;
           let rejectTurn = null;
-          const turnFinished = new Promise((resolve, reject) => {
-            resolveTurn = resolve;
+          const turnFinished = new Promise((resolve2, reject) => {
+            resolveTurn = resolve2;
             rejectTurn = (error51) => reject(error51);
           });
           let outputEvents = 0;
           let exhaustedLimitSignal = null;
           let turnTokenUsage = null;
           let promptBytes = 0;
+          let contextBudgetGateTriggered = false;
           const deferredResults = [];
+          const closureEvents = [];
+          let closureBefore = null;
+          const takeClosureSnapshot = async () => {
+            const snapshot = deps.snapshotProjectObjects;
+            if (!snapshot || !contextProjectSlug) return null;
+            const controller = new AbortController();
+            let timer;
+            try {
+              timer = setTimeout(() => {
+                controller.abort(new Error("snapshot timed out"));
+              }, CLOSURE_SNAPSHOT_TIMEOUT_MS);
+              return await snapshot(contextProjectSlug, { signal: controller.signal });
+            } catch (error51) {
+              process.stderr.write(
+                `[mrrlin-mcp director-bridge] closure_snapshot_failed for ${contextProjectSlug}: ${error51 instanceof Error ? error51.message : String(error51)}
+`
+              );
+              return null;
+            } finally {
+              if (timer) clearTimeout(timer);
+            }
+          };
           let pokeActivity = () => {
           };
           const forward = (event) => {
@@ -70207,11 +71720,24 @@ function createBridgeMessageHandler(deps) {
             if (event.type === "token_usage") {
               const usage = event.usage;
               turnTokenUsage = addTurnTokenUsage(turnTokenUsage, usage);
+              if (turnTokenUsage) {
+                const totalTokens = (turnTokenUsage.inputTokens ?? 0) + (turnTokenUsage.outputTokens ?? 0);
+                if (totalTokens > 0) {
+                  const maxTokens = 2e5;
+                  const remainingTokens = maxTokens - totalTokens;
+                  if (remainingTokens / maxTokens < 0.03 || remainingTokens < 4e3) {
+                    contextBudgetGateTriggered = true;
+                  }
+                }
+              }
               return;
             }
             if (event.type === "turn_completed" || event.type === "rate_limits") {
               return;
             }
+            if (event.type === "assistant" || event.type === "tool_result" || event.type === "tool_use") {
+              closureEvents.push(event);
+            }
             outputEvents += 1;
             sendInTurn({ type: "event", directorSessionId, event });
           };
@@ -70220,7 +71746,21 @@ function createBridgeMessageHandler(deps) {
             pokeActivity();
           });
           const currentTurnBrowserToolIds = /* @__PURE__ */ new Set();
+          let hadErrorOnTurn = false;
+          let confirmedProductiveEvent = false;
           const unsubEvent = codexClient.onEvent(threadId, (event) => {
+            if (event.type === "error") {
+              hadErrorOnTurn = true;
+            } else if (!confirmedProductiveEvent && !hadErrorOnTurn) {
+              const isProductive = event.type === "assistant" && typeof event.content === "string" && event.content.trim().length > 0 || event.type === "tool_use" || event.type === "tool_result" || event.type === "result" && event.subtype === "success";
+              if (isProductive) {
+                confirmedProductiveEvent = true;
+                if (desiredInstructionHash && thread.systemInstructionHash !== desiredInstructionHash) {
+                  thread.systemInstructionHash = desiredInstructionHash;
+                  deps.persistThreads();
+                }
+              }
+            }
             if (event.type === "tool_use") {
               toolBusy.start(event.tool.id);
               if (event.tool.name.startsWith("mcp__mrrlin-browser__browser_")) {
@@ -70354,6 +71894,7 @@ ${effectiveText}` : effectiveText;
               turnInput.push({ type: "image", url: imageDataUri });
             }
             sendInTurn({ type: "turn-executing", directorSessionId, turnId: currentReplayBuf.turnId });
+            closureBefore = await takeClosureSnapshot();
             await codexClient.startTurn(thread.threadId, turnInput, thread.reasoningEffort ?? void 0);
             await turnFinished;
           })();
@@ -70371,7 +71912,47 @@ ${effectiveText}` : effectiveText;
                 error: zeroOutputLimit.message
               });
             }
-            const telemetry = turnTokenUsage !== null ? { promptBytes, usage: turnTokenUsage } : void 0;
+            if (!hadErrorOnTurn && outputEvents > 0) {
+              const recorded = recordTurn(thread.clarificationLedger ?? emptyLedger(), finalAssistantText(closureEvents));
+              thread.clarificationLedger = recorded.ledger;
+              for (const item of recorded.reasked) {
+                process.stderr.write(
+                  `[mrrlin-mcp director-bridge] clarification_reasked (x${item.reasked}) for ${directorSessionId}: ${item.question}
+`
+                );
+              }
+              for (const question of recorded.overflow) {
+                process.stderr.write(
+                  `[mrrlin-mcp director-bridge] clarification_overflow for ${directorSessionId}: ${question}
+`
+                );
+              }
+              for (const item of recorded.dropped) {
+                process.stderr.write(
+                  `[mrrlin-mcp director-bridge] clarification_dropped (${item.status}) for ${directorSessionId}: ${item.question}
+`
+                );
+              }
+              deps.persistThreads();
+            }
+            if (closureBefore && !hadErrorOnTurn && outputEvents > 0) {
+              const closureAfter = await takeClosureSnapshot();
+              const closureText = closureAfter ? closureFor({ before: closureBefore, after: closureAfter, events: closureEvents, operatorText: msg.message ?? "" }) : null;
+              if (closureText) {
+                sendInTurn({ type: "event", directorSessionId, event: { type: "assistant", content: closureText } });
+              }
+            }
+            if (contextBudgetGateTriggered) {
+              sendInTurn({
+                type: "event",
+                directorSessionId,
+                event: {
+                  type: "assistant",
+                  content: "\n\n\u26A0\uFE0F **Context Budget Gate**: Model context window is near capacity (<3% remaining). Further tool dispatch disabled to preserve conversational integrity and results."
+                }
+              });
+            }
+            const telemetry = turnTokenUsage !== null ? { promptBytes, usage: turnTokenUsage, contextBudgetGateTriggered } : void 0;
             for (const event of deferredResults) {
               sendInTurn({ type: "event", directorSessionId, event, telemetry });
             }
@@ -70655,7 +72236,7 @@ async function startDirectorBridge() {
     await tokenRefresher.start();
     process.stderr.write("[mrrlin-mcp director-bridge] agent credential active; operator token auto-refresh enabled.\n");
   } else {
-    const apiToken = envToken ?? readOperatorToken() ?? void 0;
+    let apiToken = envToken ?? readOperatorToken() ?? void 0;
     if (envToken) {
       try {
         persistOperatorToken(envToken);
@@ -70726,6 +72307,7 @@ async function startDirectorBridge() {
     acquireExecutorAgent: async (worktreePath, providerId) => {
       const executor = await startExecutorServer({
         worktree: worktreePath,
+        disabledGitHooksDir: prepareDisabledGitHooksDir(import_node_path38.default.join(config2.stateDir, "locks"), import_node_path38.default.basename(worktreePath)),
         provider: providerId
       });
       return { handle: executor.handle, dispose: executor.dispose };
@@ -70764,7 +72346,7 @@ async function startDirectorBridge() {
   };
   const sessionSinks = createSessionSinkRegistry();
   const tombstones = /* @__PURE__ */ new Map();
-  const bridgeInstanceId = (0, import_node_crypto15.randomUUID)();
+  const bridgeInstanceId = (0, import_node_crypto16.randomUUID)();
   const asyncConsumerDeps = {
     client,
     run: wrappedTurnLock.run,
@@ -70858,7 +72440,9 @@ async function startDirectorBridge() {
       reasoningEffort: normalizeReasoningEffort(entry.reasoningEffort),
       replay: null,
       supersededReplay: null,
-      provider: entry.provider
+      provider: entry.provider,
+      systemInstructionHash: entry.systemInstructionHash ?? null,
+      ...entry.clarificationLedger ? { clarificationLedger: entry.clarificationLedger } : {}
     });
   }
   const persistThreads = () => {
@@ -70870,7 +72454,9 @@ async function startDirectorBridge() {
           lastUsedAt: thread.lastUsedAt,
           model: thread.model,
           reasoningEffort: thread.reasoningEffort,
-          provider: thread.provider
+          provider: thread.provider,
+          systemInstructionHash: thread.systemInstructionHash ?? null,
+          ...thread.clarificationLedger ? { clarificationLedger: thread.clarificationLedger } : {}
         }
       ])
     );
@@ -71037,6 +72623,35 @@ async function startDirectorBridge() {
       }
     },
     listAnsweredQuestions: (projectSlug, taskId) => client.listInboxItems(projectSlug, { status: "acknowledged", kind: "question", taskId }),
+    snapshotProjectObjects: async (projectSlug, opts) => {
+      const signal = opts?.signal;
+      if (signal?.aborted) throw new Error("snapshot aborted");
+      const tasks = await client.listTasks(
+        projectSlug,
+        { archived: "all", limit: CLOSURE_MAX_SNAPSHOT_TASKS + 1 },
+        { view: "summary", signal }
+      );
+      if (tasks.length > CLOSURE_MAX_SNAPSHOT_TASKS) {
+        throw new Error(`${tasks.length} tasks exceed the closure snapshot cap (${CLOSURE_MAX_SNAPSHOT_TASKS})`);
+      }
+      const [pages, inbox] = await Promise.all([
+        client.listWikiPages(
+          projectSlug,
+          { folder: "Specs", limit: CLOSURE_MAX_SNAPSHOT_PAGES + 1 },
+          { view: "summary", signal }
+        ),
+        client.listInboxItems(
+          projectSlug,
+          { status: "pending", limit: CLOSURE_MAX_SNAPSHOT_INBOX + 1 },
+          { view: "summary", signal }
+        )
+      ]);
+      return {
+        inbox: inbox.length > CLOSURE_MAX_SNAPSHOT_INBOX ? null : new Set(inbox.map((item) => item.id)),
+        tasks: new Map(tasks.map((task) => [task.id, { title: task.title, updatedAt: task.updatedAt ?? null }])),
+        pages: pages.length > CLOSURE_MAX_SNAPSHOT_PAGES ? null : new Map(pages.map((page) => [page.id, { title: page.title, updatedAt: page.updatedAt }]))
+      };
+    },
     getProject: (projectSlug) => client.getProject(projectSlug),
     // External-agents control plane: the real spawn runner, with the EXTERNAL_AGENTS_CLI operator
     // escape hatch bound here (the handlers stay spawn-free and this is the only production seam).
@@ -71058,7 +72673,7 @@ async function startDirectorBridge() {
   const bridgeLogger = createBridgeLogger(config2.stateDir, process.env);
   let bridgeBinShaShort = "unknown00000";
   try {
-    bridgeBinShaShort = import_node_crypto15.default.createHash("sha256").update(import_node_fs23.default.readFileSync(process.argv[1] ?? "")).digest("hex").slice(0, 12);
+    bridgeBinShaShort = import_node_crypto16.default.createHash("sha256").update(import_node_fs23.default.readFileSync(process.argv[1] ?? "")).digest("hex").slice(0, 12);
   } catch {
   }
   attachBridgeWss(server, {
@@ -71149,9 +72764,9 @@ async function startDirectorBridge() {
       res.writeHead(400).end();
     });
   });
-  await new Promise((resolve, reject) => {
+  await new Promise((resolve2, reject) => {
     dispatchServer.on("error", reject);
-    dispatchServer.listen(workerPort(), "127.0.0.1", () => resolve());
+    dispatchServer.listen(workerPort(), "127.0.0.1", () => resolve2());
   });
   const bridgeHealth = new BridgeHealthTracker({
     stateDir: config2.stateDir,
@@ -71342,7 +72957,7 @@ async function startDirectorBridge() {
       )
     });
   }
-  await new Promise((resolve, reject) => {
+  await new Promise((resolve2, reject) => {
     server.on("error", (err) => {
       if (err.code === "EADDRINUSE") {
         const conflictingPids = scanForOtherBridges();
@@ -71358,7 +72973,7 @@ async function startDirectorBridge() {
       }
       reject(err);
     });
-    server.listen(config2.port, config2.host, () => resolve());
+    server.listen(config2.port, config2.host, () => resolve2());
   });
   const orphans = scanForOtherBridges();
   if (orphans.length > 0) {
@@ -71499,10 +73114,10 @@ function timingSafeTokenEqual(provided, expected) {
   const a = Buffer.from(provided);
   const b = Buffer.from(expected);
   if (a.length !== b.length) return false;
-  return import_node_crypto15.default.timingSafeEqual(a, b);
+  return import_node_crypto16.default.timingSafeEqual(a, b);
 }
 function readDispatchBody(req) {
-  return new Promise((resolve, reject) => {
+  return new Promise((resolve2, reject) => {
     const chunks = [];
     let size = 0;
     req.on("data", (chunk) => {
@@ -71514,7 +73129,7 @@ function readDispatchBody(req) {
       }
       chunks.push(chunk);
     });
-    req.on("end", () => resolve(Buffer.concat(chunks).toString("utf8")));
+    req.on("end", () => resolve2(Buffer.concat(chunks).toString("utf8")));
     req.on("error", reject);
   });
 }
@@ -71528,7 +73143,7 @@ function readOrCreateBridgeToken(stateDir) {
   } catch {
   }
   import_node_fs23.default.mkdirSync(stateDir, { recursive: true, mode: 448 });
-  const token = import_node_crypto15.default.randomBytes(32).toString("base64url");
+  const token = import_node_crypto16.default.randomBytes(32).toString("base64url");
   import_node_fs23.default.writeFileSync(tokenPath, `${token}
 `, { mode: 384 });
   return token;
@@ -71571,10 +73186,17 @@ function renderContextPrefix(context) {
   if (directorSessionId) payload.directorSessionId = directorSessionId;
   if (contextMessages?.length) payload.contextMessages = contextMessages;
   if (answeredQuestions) payload.answeredQuestions = answeredQuestions;
+  const openQuestions = context?.openQuestions?.length ? context.openQuestions : void 0;
+  if (openQuestions) payload.openQuestions = openQuestions;
   const keys = Object.keys(payload);
   if (keys.length > 0) {
     parts.push(`Context (JSON): ${JSON.stringify(payload)}`);
   }
+  if (openQuestions) {
+    parts.push(
+      "[OPEN QUESTIONS] `openQuestions` lists questions you asked earlier in this chat. For each one, state in this reply whether it is answered (by the operator), assumed (say the default you took) or a blocker (say what it blocks). Do not ask it again unless the answer would change the architecture or the deliverable."
+    );
+  }
   return parts.join("\n\n");
 }
 
@@ -72219,12 +73841,12 @@ var StdioServerTransport = class {
     this.onclose?.();
   }
   send(message) {
-    return new Promise((resolve) => {
+    return new Promise((resolve2) => {
       const json2 = serializeMessage(message);
       if (this._stdout.write(json2)) {
-        resolve();
+        resolve2();
       } else {
-        this._stdout.once("drain", resolve);
+        this._stdout.once("drain", resolve2);
       }
     });
   }
@@ -72299,7 +73921,9 @@ function jsonSchemaProperty(schema) {
     property.enum = jsonSchema.enum;
   }
   if (typeof jsonSchema.pattern === "string") {
-    property.pattern = jsonSchema.pattern;
+    if (!/\(\?<?[!=]/.test(jsonSchema.pattern)) {
+      property.pattern = jsonSchema.pattern;
+    }
   }
   return property;
 }
@@ -72909,7 +74533,8 @@ function installService(deps) {
     return { ok: false };
   }
   const claudeBin = deps.which("claude");
-  const resolvedBins = [...bins, claudeBin].filter((b) => b !== null);
+  const agyBin = deps.which("agy");
+  const resolvedBins = [...bins, claudeBin, agyBin].filter((b) => b !== null);
   const isWin = import_node_os18.default.platform() === "win32";
   const systemDirs = isWin ? (deps.env.PATH || "").split(import_node_path39.default.delimiter).filter(Boolean) : SYSTEM_PATH_DIRS;
   const pathEnv = Array.from(
@@ -73184,6 +74809,24 @@ Missing required flag(s): ${missing.join(
 }
 
 // src/bin.ts
+function augmentProcessPathWithCommonDirs() {
+  const isWin = process.platform === "win32";
+  if (isWin) return;
+  const home = process.env.HOME || (0, import_node_os20.homedir)();
+  const candidates = [
+    import_node_path43.default.join(home, ".local", "bin"),
+    import_node_path43.default.join(home, ".cargo", "bin"),
+    "/usr/local/bin",
+    "/opt/homebrew/bin"
+  ];
+  const existing = (process.env.PATH || "").split(import_node_path43.default.delimiter).filter(Boolean);
+  const existingSet = new Set(existing);
+  const toAdd = candidates.filter((d) => !existingSet.has(d) && (0, import_node_fs25.existsSync)(d));
+  if (toAdd.length > 0) {
+    process.env.PATH = [...existing, ...toAdd].join(import_node_path43.default.delimiter);
+  }
+}
+augmentProcessPathWithCommonDirs();
 function pm2Runner(args) {
   const r = (0, import_node_child_process22.spawnSync)("pm2", args, { encoding: "utf8" });
   process.stderr.write(r.stdout ?? "");
@@ -73690,6 +75333,10 @@ main().catch((error51) => {
 `);
   process.exit(1);
 });
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  augmentProcessPathWithCommonDirs
+});
 /*! Bundled license information:
 
 content-type/index.js: