@mrrlin-dev/mcp 0.4.97 → 0.4.98

package/dist/bin.cjs

@@ -1647,20 +1647,20 @@ var require_parse_async = __commonJS({
       const index = 0;
       const blocksize = opts.blocksize || 40960;
       const parser = new TOMLParser();
-      return new Promise((resolve, reject) => {
-        setImmediate(parseAsyncNext, index, blocksize, resolve, reject);
+      return new Promise((resolve2, reject) => {
+        setImmediate(parseAsyncNext, index, blocksize, resolve2, reject);
       });
-      function parseAsyncNext(index2, blocksize2, resolve, reject) {
+      function parseAsyncNext(index2, blocksize2, resolve2, reject) {
         if (index2 >= str.length) {
           try {
-            return resolve(parser.finish());
+            return resolve2(parser.finish());
           } catch (err) {
             return reject(prettyError(err, str));
           }
         }
         try {
           parser.parse(str.slice(index2, index2 + blocksize2));
-          setImmediate(parseAsyncNext, index2 + blocksize2, blocksize2, resolve, reject);
+          setImmediate(parseAsyncNext, index2 + blocksize2, blocksize2, resolve2, reject);
         } catch (err) {
           reject(prettyError(err, str));
         }
@@ -1686,7 +1686,7 @@ var require_parse_stream = __commonJS({
     function parseReadable(stm) {
       const parser = new TOMLParser();
       stm.setEncoding("utf8");
-      return new Promise((resolve, reject) => {
+      return new Promise((resolve2, reject) => {
         let readable;
         let ended = false;
         let errored = false;
@@ -1694,7 +1694,7 @@ var require_parse_stream = __commonJS({
           ended = true;
           if (readable) return;
           try {
-            resolve(parser.finish());
+            resolve2(parser.finish());
           } catch (err) {
             reject(err);
           }
@@ -4980,7 +4980,7 @@ var require_compile = __commonJS({
       const schOrFunc = root.refs[ref];
       if (schOrFunc)
         return schOrFunc;
-      let _sch = resolve.call(this, root, ref);
+      let _sch = resolve2.call(this, root, ref);
       if (_sch === void 0) {
         const schema = (_a3 = root.localRefs) === null || _a3 === void 0 ? void 0 : _a3[ref];
         const { schemaId } = this.opts;
@@ -5007,7 +5007,7 @@ var require_compile = __commonJS({
     function sameSchemaEnv(s1, s2) {
       return s1.schema === s2.schema && s1.root === s2.root && s1.baseId === s2.baseId;
     }
-    function resolve(root, ref) {
+    function resolve2(root, ref) {
       let sch;
       while (typeof (sch = this.refs[ref]) == "string")
         ref = sch;
@@ -5837,7 +5837,7 @@ var require_fast_uri = __commonJS({
       }
       return uri;
     }
-    function resolve(baseURI, relativeURI, options) {
+    function resolve2(baseURI, relativeURI, options) {
       const schemelessOptions = options ? Object.assign({ scheme: "null" }, options) : { scheme: "null" };
       const {
         parsed: baseParsed,
@@ -6206,7 +6206,7 @@ var require_fast_uri = __commonJS({
     var fastUri = {
       SCHEMES,
       normalize: normalize2,
-      resolve,
+      resolve: resolve2,
       resolveComponent,
       equal,
       serialize,
@@ -9393,12 +9393,12 @@ var require_isexe = __commonJS({
         if (typeof Promise !== "function") {
           throw new TypeError("callback not provided");
         }
-        return new Promise(function(resolve, reject) {
+        return new Promise(function(resolve2, reject) {
           isexe(path29, options || {}, function(er, is) {
             if (er) {
               reject(er);
             } else {
-              resolve(is);
+              resolve2(is);
             }
           });
         });
@@ -9464,27 +9464,27 @@ var require_which = __commonJS({
         opt = {};
       const { pathEnv, pathExt, pathExtExe } = getPathInfo(cmd, opt);
       const found = [];
-      const step = (i) => new Promise((resolve, reject) => {
+      const step = (i) => new Promise((resolve2, reject) => {
         if (i === pathEnv.length)
-          return opt.all && found.length ? resolve(found) : reject(getNotFoundError(cmd));
+          return opt.all && found.length ? resolve2(found) : reject(getNotFoundError(cmd));
         const ppRaw = pathEnv[i];
         const pathPart = /^".*"$/.test(ppRaw) ? ppRaw.slice(1, -1) : ppRaw;
         const pCmd = path29.join(pathPart, cmd);
         const p = !pathPart && /^\.[\\\/]/.test(cmd) ? cmd.slice(0, 2) + pCmd : pCmd;
-        resolve(subStep(p, i, 0));
+        resolve2(subStep(p, i, 0));
       });
-      const subStep = (p, i, ii) => new Promise((resolve, reject) => {
+      const subStep = (p, i, ii) => new Promise((resolve2, reject) => {
         if (ii === pathExt.length)
-          return resolve(step(i + 1));
+          return resolve2(step(i + 1));
         const ext = pathExt[ii];
         isexe(p + ext, { pathExt: pathExtExe }, (er, is) => {
           if (!er && is) {
             if (opt.all)
               found.push(p + ext);
             else
-              return resolve(p + ext);
+              return resolve2(p + ext);
           }
-          return resolve(subStep(p, i, ii + 1));
+          return resolve2(subStep(p, i, ii + 1));
         });
       });
       return cb ? step(0).then((res) => cb(null, res), cb) : step(0);
@@ -14017,7 +14017,7 @@ var require_websocket = __commonJS({
     var http2 = require("http");
     var net = require("net");
     var tls = require("tls");
-    var { randomBytes: randomBytes5, createHash: createHash5 } = require("crypto");
+    var { randomBytes: randomBytes5, createHash: createHash6 } = require("crypto");
     var { Duplex, Readable } = require("stream");
     var { URL: URL2 } = require("url");
     var PerMessageDeflate2 = require_permessage_deflate();
@@ -14685,7 +14685,7 @@ var require_websocket = __commonJS({
           abortHandshake(websocket, socket, "Invalid Upgrade header");
           return;
         }
-        const digest = createHash5("sha1").update(key + GUID).digest("base64");
+        const digest = createHash6("sha1").update(key + GUID).digest("base64");
         if (res.headers["sec-websocket-accept"] !== digest) {
           abortHandshake(websocket, socket, "Invalid Sec-WebSocket-Accept header");
           return;
@@ -15054,7 +15054,7 @@ var require_websocket_server = __commonJS({
     var EventEmitter3 = require("events");
     var http2 = require("http");
     var { Duplex } = require("stream");
-    var { createHash: createHash5 } = require("crypto");
+    var { createHash: createHash6 } = require("crypto");
     var extension2 = require_extension();
     var PerMessageDeflate2 = require_permessage_deflate();
     var subprotocol2 = require_subprotocol();
@@ -15361,7 +15361,7 @@ var require_websocket_server = __commonJS({
           );
         }
         if (this._state > RUNNING) return abortHandshake(socket, 503);
-        const digest = createHash5("sha1").update(key + GUID).digest("base64");
+        const digest = createHash6("sha1").update(key + GUID).digest("base64");
         const headers = [
           "HTTP/1.1 101 Switching Protocols",
           "Upgrade: websocket",
@@ -16947,12 +16947,12 @@ var require_adapter = __commonJS({
       return newFs;
     }
     function toPromise(method) {
-      return (...args) => new Promise((resolve, reject) => {
+      return (...args) => new Promise((resolve2, reject) => {
         args.push((err, result) => {
           if (err) {
             reject(err);
           } else {
-            resolve(result);
+            resolve2(result);
           }
         });
         method(...args);
@@ -21406,10 +21406,10 @@ var require_browser = __commonJS({
           text = canvas;
           canvas = void 0;
         }
-        return new Promise(function(resolve, reject) {
+        return new Promise(function(resolve2, reject) {
           try {
             const data = QRCode2.create(text, opts);
-            resolve(renderFunc(data, canvas, opts));
+            resolve2(renderFunc(data, canvas, opts));
           } catch (e) {
             reject(e);
           }
@@ -21490,11 +21490,11 @@ var require_server = __commonJS({
     }
     function render(renderFunc, text, params) {
       if (!params.cb) {
-        return new Promise(function(resolve, reject) {
+        return new Promise(function(resolve2, reject) {
           try {
             const data = QRCode2.create(text, params.opts);
             return renderFunc(data, params.opts, function(err, data2) {
-              return err ? reject(err) : resolve(data2);
+              return err ? reject(err) : resolve2(data2);
             });
           } catch (e) {
             reject(e);
@@ -41493,7 +41493,7 @@ function createBoundedSemaphore(slots) {
   let available = slots;
   const queue = [];
   return {
-    acquire: () => available > 0 ? (available -= 1, Promise.resolve()) : new Promise((resolve) => queue.push(resolve)),
+    acquire: () => available > 0 ? (available -= 1, Promise.resolve()) : new Promise((resolve2) => queue.push(resolve2)),
     release: () => {
       const next = queue.shift();
       if (next) next();
@@ -42524,22 +42524,22 @@ var CodexJsonRpcClient = class {
     const payload = { jsonrpc: "2.0", id, method, params };
     const line = `${JSON.stringify(payload)}
 `;
-    const resultPromise = new Promise((resolve, reject) => {
+    const resultPromise = new Promise((resolve2, reject) => {
       const onResponse = (response) => {
         if (response.error) {
           reject(new Error(response.error.message ?? "Codex JSON-RPC error"));
           return;
         }
-        resolve(response.result);
+        resolve2(response.result);
       };
       this.emitter.once(`response:${id}`, onResponse);
     });
-    await new Promise((resolve, reject) => {
+    await new Promise((resolve2, reject) => {
       this.writeStream.write(line, (error51) => {
         if (error51)
           reject(error51);
         else
-          resolve();
+          resolve2();
       });
     });
     return await resultPromise;
@@ -42702,11 +42702,11 @@ var CodexServerManager = class {
       env: config2?.env ?? process.env,
       shell: true
     });
-    await new Promise((resolve, reject) => {
+    await new Promise((resolve2, reject) => {
       child.on("error", (err) => {
         reject(new Error(`Failed to spawn codex app-server: ${err.message}`));
       });
-      child.on("spawn", () => resolve());
+      child.on("spawn", () => resolve2());
     });
     if (!child.stdin || !child.stdout) {
       child.kill();
@@ -43485,7 +43485,7 @@ var ClaudeProcess = class {
       cwd: options.cwd?.trim() || void 0,
       // Inherit the operator's env so the CLI picks up their own ~/.claude.json tool registry —
       // unless an explicit mcpConfig was provided in options.
-      env: process.env,
+      env: options.env ?? process.env,
       stdio: ["pipe", "pipe", "pipe"]
     });
     this.child.stdout.setEncoding("utf8");
@@ -43580,15 +43580,15 @@ var ClaudeProcess = class {
       return Promise.resolve();
     }
     if (this.disposed) {
-      return new Promise((resolve) => {
+      return new Promise((resolve2) => {
         const off = this.onExit(() => {
           off();
-          resolve();
+          resolve2();
         });
       });
     }
     this.disposed = true;
-    return new Promise((resolve) => {
+    return new Promise((resolve2) => {
       const forceKill = setTimeout(() => {
         if (!this.exited)
           this.child.kill("SIGKILL");
@@ -43597,7 +43597,7 @@ var ClaudeProcess = class {
       const off = this.onExit(() => {
         clearTimeout(forceKill);
         off();
-        resolve();
+        resolve2();
       });
       this.child.kill("SIGTERM");
     });
@@ -43797,11 +43797,16 @@ function permissionModeFor(sandbox) {
   return { permissionMode: "bypassPermissions" };
 }
 var ClaudeAgentHandle = class {
+  childEnv;
   // One resident child + one mapper per thread — mirrors ClaudeProcess's own per-thread residency
   // and ClaudeBridgeEventMapper's documented "fresh instance per thread" contract (its tool-use
   // dedup sets must not leak across threads).
   processes = /* @__PURE__ */ new Map();
   mappers = /* @__PURE__ */ new Map();
+  /** Exact complete environment passed unchanged to every process this handle spawns. */
+  constructor(childEnv) {
+    this.childEnv = childEnv;
+  }
   async startThread(params) {
     const { permissionMode, disallowedTools } = permissionModeFor(params.sandbox);
     const child = new ClaudeProcess({
@@ -43811,7 +43816,8 @@ var ClaudeAgentHandle = class {
       model: params.model,
       cwd: params.cwd,
       mcpConfig: params.mcpConfig,
-      appendSystemPrompt: params.baseInstructions
+      appendSystemPrompt: params.baseInstructions,
+      ...this.childEnv === void 0 ? {} : { env: this.childEnv }
     });
     this.processes.set(child.sessionId, child);
     this.mappers.set(child.sessionId, new ClaudeBridgeEventMapper());
@@ -43826,7 +43832,8 @@ var ClaudeAgentHandle = class {
       model: params.model,
       cwd: params.cwd,
       mcpConfig: params.mcpConfig,
-      appendSystemPrompt: params.baseInstructions
+      appendSystemPrompt: params.baseInstructions,
+      ...this.childEnv === void 0 ? {} : { env: this.childEnv }
     });
     this.processes.set(threadId, child);
     this.mappers.set(threadId, new ClaudeBridgeEventMapper());
@@ -43986,7 +43993,7 @@ var AgyProcess = class _AgyProcess {
     const cwd = options.cwd?.trim() || void 0;
     this.child = (0, import_node_child_process4.spawn)(executable, args, {
       cwd,
-      env: process.env,
+      env: options.env ?? process.env,
       stdio: ["pipe", "pipe", "pipe"]
     });
     activeProcesses.add(this.child);
@@ -44298,16 +44305,22 @@ function permissionModeFor2(sandbox, approvalPolicy) {
   return { permissionMode: "acceptEdits" };
 }
 var AgyAgentHandle = class {
+  childEnv;
   processes = /* @__PURE__ */ new Map();
   mappers = /* @__PURE__ */ new Map();
   baseInstructions = /* @__PURE__ */ new Map();
+  /** Exact complete environment passed unchanged to every process this handle spawns. */
+  constructor(childEnv) {
+    this.childEnv = childEnv;
+  }
   async startThread(params) {
     const { permissionMode } = permissionModeFor2(params.sandbox, params.approvalPolicy);
     const child = new AgyProcess({
       mode: { kind: "new" },
       permissionMode,
       model: params.model,
-      cwd: params.cwd
+      cwd: params.cwd,
+      ...this.childEnv === void 0 ? {} : { env: this.childEnv }
     });
     this.processes.set(child.sessionId, child);
     this.mappers.set(child.sessionId, new AgyBridgeEventMapper());
@@ -44327,7 +44340,8 @@ var AgyAgentHandle = class {
       mode: { kind: "resume", resumeId: threadId },
       permissionMode,
       model: params.model,
-      cwd: params.cwd
+      cwd: params.cwd,
+      ...this.childEnv === void 0 ? {} : { env: this.childEnv }
     });
     this.processes.set(threadId, child);
     this.mappers.set(threadId, new AgyBridgeEventMapper());
@@ -44383,6 +44397,14 @@ ${text}`;
   async readRateLimits() {
     return null;
   }
+  disposeAll() {
+    for (const child of this.processes.values())
+      void child.dispose().catch(() => {
+      });
+    this.processes.clear();
+    this.mappers.clear();
+    this.baseInstructions.clear();
+  }
   requireProcess(threadId) {
     const child = this.processes.get(threadId);
     if (!child)
@@ -44555,7 +44577,7 @@ ${input.prompt}` : input.prompt;
     args.push("-m", input.model);
   }
   args.push(fullPrompt);
-  return new Promise((resolve) => {
+  return new Promise((resolve2) => {
     let settled = false;
     const timerRef = { id: void 0 };
     const finish = (result) => {
@@ -44564,7 +44586,7 @@ ${input.prompt}` : input.prompt;
       settled = true;
       if (timerRef.id)
         clearTimeout(timerRef.id);
-      resolve(result);
+      resolve2(result);
     };
     const options = {
       stdio: ["ignore", "pipe", "pipe"],
@@ -44642,7 +44664,7 @@ function runClaudeExec(input, deps) {
     args.push("--model", input.model);
   }
   args.push(input.prompt);
-  return new Promise((resolve) => {
+  return new Promise((resolve2) => {
     let settled = false;
     const timerRef = { id: void 0 };
     const finish = (result) => {
@@ -44651,7 +44673,7 @@ function runClaudeExec(input, deps) {
       settled = true;
       if (timerRef.id)
         clearTimeout(timerRef.id);
-      resolve(result);
+      resolve2(result);
     };
     const options = {
       stdio: ["ignore", "pipe", "pipe"],
@@ -44763,7 +44785,7 @@ function runAgyExec(input, deps) {
     }
   }
   args.push(`--print=${prompt}`);
-  return new Promise((resolve) => {
+  return new Promise((resolve2) => {
     let settled = false;
     const timerRef = { id: void 0 };
     const finish = (result) => {
@@ -44772,7 +44794,7 @@ function runAgyExec(input, deps) {
       settled = true;
       if (timerRef.id)
         clearTimeout(timerRef.id);
-      resolve(result);
+      resolve2(result);
     };
     const options = {
       stdio: ["ignore", "pipe", "pipe"],
@@ -45112,14 +45134,14 @@ var DIFF_MAX_BYTES = 2e5;
 var FASTGATE_OUTPUT_MAX_BYTES = 16e3;
 var GIT_TIMEOUT_MS = 6e4;
 var FASTGATE_TIMEOUT_MS = 3e5;
-var defaultRunCmd = (cmd, args, opts) => new Promise((resolve) => {
+var defaultRunCmd = (cmd, args, opts) => new Promise((resolve2) => {
   let settled = false;
   const timerRef = { id: void 0 };
   const finish = (result) => {
     if (settled) return;
     settled = true;
     if (timerRef.id) clearTimeout(timerRef.id);
-    resolve(result);
+    resolve2(result);
   };
   let child;
   try {
@@ -46037,14 +46059,14 @@ function errMessage3(err) {
   return err instanceof Error ? err.message : String(err);
 }
 function runExternalAgentsStatus(bin, args, timeoutMs, spawn6) {
-  return new Promise((resolve) => {
+  return new Promise((resolve2) => {
     let settled = false;
     const timerRef = { id: void 0 };
     const finish = (r) => {
       if (settled) return;
       settled = true;
       if (timerRef.id) clearTimeout(timerRef.id);
-      resolve(r);
+      resolve2(r);
     };
     const options = { stdio: ["ignore", "pipe", "pipe"], env: process.env, shell: false };
     let child;
@@ -46124,14 +46146,14 @@ function errMessage4(err) {
   return err instanceof Error ? err.message : String(err);
 }
 function runExternalAgents(bin, args, label, timeoutMs, spawn6) {
-  return new Promise((resolve) => {
+  return new Promise((resolve2) => {
     let settled = false;
     const timerRef = { id: void 0 };
     const finish = (r) => {
       if (settled) return;
       settled = true;
       if (timerRef.id) clearTimeout(timerRef.id);
-      resolve(r);
+      resolve2(r);
     };
     const options = {
       stdio: ["ignore", "pipe", "pipe"],
@@ -48630,7 +48652,7 @@ var Protocol = class {
           return;
         }
         const pollInterval = task2.pollInterval ?? this._options?.defaultTaskPollInterval ?? 1e3;
-        await new Promise((resolve) => setTimeout(resolve, pollInterval));
+        await new Promise((resolve2) => setTimeout(resolve2, pollInterval));
         options?.signal?.throwIfAborted();
       }
     } catch (error51) {
@@ -48647,7 +48669,7 @@ var Protocol = class {
    */
   request(request, resultSchema, options) {
     const { relatedRequestId, resumptionToken, onresumptiontoken, task, relatedTask } = options ?? {};
-    return new Promise((resolve, reject) => {
+    return new Promise((resolve2, reject) => {
       const earlyReject = (error51) => {
         reject(error51);
       };
@@ -48725,7 +48747,7 @@ var Protocol = class {
           if (!parseResult.success) {
             reject(parseResult.error);
           } else {
-            resolve(parseResult.data);
+            resolve2(parseResult.data);
           }
         } catch (error51) {
           reject(error51);
@@ -48986,12 +49008,12 @@ var Protocol = class {
       }
     } catch {
     }
-    return new Promise((resolve, reject) => {
+    return new Promise((resolve2, reject) => {
       if (signal.aborted) {
         reject(new McpError(ErrorCode.InvalidRequest, "Request cancelled"));
         return;
       }
-      const timeoutId = setTimeout(resolve, interval);
+      const timeoutId = setTimeout(resolve2, interval);
       signal.addEventListener("abort", () => {
         clearTimeout(timeoutId);
         reject(new McpError(ErrorCode.InvalidRequest, "Request cancelled"));
@@ -51427,7 +51449,7 @@ var StdioClientTransport = class {
     if (this._process) {
       throw new Error("StdioClientTransport already started! If using Client class, note that connect() calls start() automatically.");
     }
-    return new Promise((resolve, reject) => {
+    return new Promise((resolve2, reject) => {
       this._process = (0, import_cross_spawn.default)(this._serverParams.command, this._serverParams.args ?? [], {
         // merge default env with server env because mcp server needs some env vars
         env: {
@@ -51444,7 +51466,7 @@ var StdioClientTransport = class {
         this.onerror?.(error51);
       });
       this._process.on("spawn", () => {
-        resolve();
+        resolve2();
       });
       this._process.on("close", (_code) => {
         this._process = void 0;
@@ -51509,22 +51531,22 @@ var StdioClientTransport = class {
     if (this._process) {
       const processToClose = this._process;
       this._process = void 0;
-      const closePromise = new Promise((resolve) => {
+      const closePromise = new Promise((resolve2) => {
         processToClose.once("close", () => {
-          resolve();
+          resolve2();
         });
       });
       try {
         processToClose.stdin?.end();
       } catch {
       }
-      await Promise.race([closePromise, new Promise((resolve) => setTimeout(resolve, 2e3).unref())]);
+      await Promise.race([closePromise, new Promise((resolve2) => setTimeout(resolve2, 2e3).unref())]);
       if (processToClose.exitCode === null) {
         try {
           processToClose.kill("SIGTERM");
         } catch {
         }
-        await Promise.race([closePromise, new Promise((resolve) => setTimeout(resolve, 2e3).unref())]);
+        await Promise.race([closePromise, new Promise((resolve2) => setTimeout(resolve2, 2e3).unref())]);
       }
       if (processToClose.exitCode === null) {
         try {
@@ -51536,15 +51558,15 @@ var StdioClientTransport = class {
     this._readBuffer.clear();
   }
   send(message) {
-    return new Promise((resolve) => {
+    return new Promise((resolve2) => {
       if (!this._process?.stdin) {
         throw new Error("Not connected");
       }
       const json2 = serializeMessage(message);
       if (this._process.stdin.write(json2)) {
-        resolve();
+        resolve2();
       } else {
-        this._process.stdin.once("drain", resolve);
+        this._process.stdin.once("drain", resolve2);
       }
     });
   }
@@ -53380,7 +53402,7 @@ var DRAFT_SPEC_TLDR_MAX_CHARS = 300;
 var DRAFT_SPEC_PERSONA = "spec-author";
 var PAGE_ID_MAX_ATTEMPTS = 5;
 function defaultSleep(ms) {
-  return new Promise((resolve) => setTimeout(resolve, ms));
+  return new Promise((resolve2) => setTimeout(resolve2, ms));
 }
 function enforceSpecOutputContract(markdown, taskId, title) {
   let body = normalizeAcceptanceCriteria(markdown.trim());
@@ -56195,22 +56217,6 @@ function createMrrlinTools(options) {
       );
     }
   }
-  async function autoRetirePendingScopeQuestions(c, projectSlug, resolutionContext) {
-    try {
-      const pendingQuestions = await c.listInboxItems(projectSlug, { status: "pending", kind: "question" });
-      for (const item of pendingQuestions) {
-        if (!item.taskId) {
-          await c.decideInboxItem(projectSlug, item.id, {
-            decidedBy: "director",
-            verdict: "acknowledged",
-            answer: `Addressed in materialized plan/tasks (${resolutionContext})`
-          }).catch(() => {
-          });
-        }
-      }
-    } catch {
-    }
-  }
   return {
     [mcpToolNames.archivePlan]: makeTool(
       client,
@@ -56229,9 +56235,7 @@ function createMrrlinTools(options) {
       "Unable to create plan.",
       async (c, { projectSlug, ...input }) => {
         await checkTenantBoundary(projectSlug, "plan");
-        const plan = await c.createPlan(projectSlug, input);
-        await autoRetirePendingScopeQuestions(c, projectSlug, `Plan ${plan.id}: ${plan.name}`);
-        return plan;
+        return await c.createPlan(projectSlug, input);
       }
     ),
     [mcpToolNames.createTaskDependency]: makeTool(
@@ -56360,9 +56364,7 @@ function createMrrlinTools(options) {
       async (c, { projectSlug, ...input }) => {
         await checkTenantBoundary(projectSlug, "task");
         const status = input.status ?? "todo";
-        const task = await c.createTask(projectSlug, { ...input, status });
-        await autoRetirePendingScopeQuestions(c, projectSlug, `Task ${task.id}: ${task.title}`);
-        return task;
+        return await c.createTask(projectSlug, { ...input, status });
       }
     ),
     [mcpToolNames.getProject]: makeTool(
@@ -57564,7 +57566,7 @@ var import_node_http = __toESM(require("node:http"), 1);
 var import_node_os17 = __toESM(require("node:os"), 1);
 var import_node_path38 = __toESM(require("node:path"), 1);
 var import_node_child_process21 = require("node:child_process");
-var import_node_crypto15 = __toESM(require("node:crypto"), 1);
+var import_node_crypto16 = __toESM(require("node:crypto"), 1);
 
 // src/turn-replay-buffer.ts
 var DEFAULT_MAX_EVENTS = 2e3;
@@ -58083,7 +58085,7 @@ function createTurnLock() {
     } else {
       autonomousTotalActive += 1;
     }
-    return new Promise((resolve, reject) => {
+    return new Promise((resolve2, reject) => {
       const start = () => {
         let bodyPromise;
         try {
@@ -58091,7 +58093,7 @@ function createTurnLock() {
         } catch (e) {
           bodyPromise = Promise.reject(e);
         }
-        bodyPromise.then((v) => resolve(v)).catch((e) => reject(e)).finally(() => {
+        bodyPromise.then((v) => resolve2(v)).catch((e) => reject(e)).finally(() => {
           if (lane === "chat") {
             chatTotalActive -= 1;
           } else {
@@ -58693,7 +58695,7 @@ Do NOT derail the current task - if the operator has an in-flight question, answ
 }
 
 // src/_generated/version.ts
-var PKG_VERSION = "0.4.97";
+var PKG_VERSION = "0.4.98";
 
 // src/director-closure.ts
 var CLOSURE_SNAPSHOT_TIMEOUT_MS = 2e3;
@@ -58952,7 +58954,6 @@ function closureFor(input) {
 var LEDGER_MAX_ITEMS = 20;
 var LEDGER_MAX_QUESTIONS_PER_TURN = 5;
 var LEDGER_MAX_EXTRACTED_QUESTIONS = 50;
-var LEDGER_REASK_JACCARD = 0.6;
 var LEDGER_MAX_QUESTION_CHARS = 300;
 function emptyLedger() {
   return { turn: 0, items: [] };
@@ -59043,13 +59044,12 @@ function tokenMatches(a, b) {
   }
   return false;
 }
+function normalizeQuestionIdentity(value) {
+  return value.normalize("NFKC").toLowerCase().replace(/\s+/gu, " ").trim();
+}
 function isSameQuestion(a, b) {
-  const ta = tokens(a);
-  const tb = tokens(b);
-  if (ta.size === 0 || tb.size === 0) return false;
-  let shared = 0;
-  for (const token of ta) if (tb.has(token)) shared += 1;
-  return shared / (ta.size + tb.size - shared) >= LEDGER_REASK_JACCARD;
+  const left = normalizeQuestionIdentity(a);
+  return /[\p{L}\p{N}]/u.test(left) && left === normalizeQuestionIdentity(b);
 }
 function isAffirmativeResolutionForQuestion(question, text, otherQuestions) {
   if (!text || !RESOLUTION_MARKER_RE.test(text)) return false;
@@ -59884,7 +59884,7 @@ async function writeCrashSentinel(stateDir, sentinel) {
 }
 function withTimeout(fn, ms = DEFAULT_OPERATION_TIMEOUT_MS) {
   const controller = new AbortController();
-  return new Promise((resolve, reject) => {
+  return new Promise((resolve2, reject) => {
     const timer = setTimeout(() => {
       controller.abort();
       const timeoutError = new Error(`operation timed out after ${ms}ms`);
@@ -59894,7 +59894,7 @@ function withTimeout(fn, ms = DEFAULT_OPERATION_TIMEOUT_MS) {
     fn(controller.signal).then(
       (value) => {
         clearTimeout(timer);
-        resolve(value);
+        resolve2(value);
       },
       (error51) => {
         clearTimeout(timer);
@@ -60840,7 +60840,7 @@ function runExternalAgentsCli(args, opts) {
   }
   const useStdin = opts.stdinValue !== void 0;
   const stdioConfig = useStdin ? ["pipe", "pipe", "pipe"] : ["ignore", "pipe", "pipe"];
-  return new Promise((resolve) => {
+  return new Promise((resolve2) => {
     let stdout = "";
     let stderr = "";
     let settled = false;
@@ -60848,7 +60848,7 @@ function runExternalAgentsCli(args, opts) {
     const done = (code) => {
       if (!settled) {
         settled = true;
-        resolve({ stdout, stderr, code, timedOut, source, triedPath });
+        resolve2({ stdout, stderr, code, timedOut, source, triedPath });
       }
     };
     let spawned;
@@ -61016,7 +61016,7 @@ function startProviderReadinessLoop(deps) {
 
 // src/execution-consumer.ts
 var import_node_child_process19 = require("node:child_process");
-var import_node_crypto13 = __toESM(require("node:crypto"), 1);
+var import_node_crypto14 = __toESM(require("node:crypto"), 1);
 var import_node_path31 = __toESM(require("node:path"), 1);
 var import_node_util2 = require("node:util");
 
@@ -61872,6 +61872,7 @@ async function awaitTurnWithDeadline(opts) {
 
 // src/worktree.ts
 var import_node_child_process18 = require("node:child_process");
+var import_node_crypto13 = require("node:crypto");
 var import_node_fs17 = require("node:fs");
 var import_node_path30 = require("node:path");
 
@@ -61899,8 +61900,43 @@ function worktreeBranch(runId) {
   return `mrrlin/run-${runId}`;
 }
 var defaultGitExec = (args, env) => (0, import_node_child_process18.execFileSync)("git", args, { encoding: "utf8", timeout: 3e4, env });
-function git(checkout, args) {
-  return (0, import_node_child_process18.execFileSync)("git", ["-C", checkout, ...args], {
+function disabledGitHooksPath(locksDir, scope) {
+  const scopeKey = (0, import_node_crypto13.createHash)("sha256").update(scope).digest("hex").slice(0, 32);
+  return (0, import_node_path30.resolve)(locksDir, "..", "disabled-git-hooks", scopeKey);
+}
+function prepareDisabledGitHooksDir(locksDir, scope) {
+  const hooksDir = disabledGitHooksPath(locksDir, scope);
+  const hooksRoot = (0, import_node_path30.resolve)(hooksDir, "..");
+  (0, import_node_fs17.mkdirSync)(hooksRoot, { recursive: true, mode: 448 });
+  (0, import_node_fs17.mkdirSync)(hooksDir, { recursive: true, mode: 320 });
+  if ((0, import_node_fs17.readdirSync)(hooksDir).length > 0) {
+    throw new Error(`disabled_git_hooks_dir_not_empty: ${hooksDir}`);
+  }
+  try {
+    (0, import_node_fs17.chmodSync)(hooksDir, 320);
+  } catch {
+  }
+  return hooksDir;
+}
+function removeDisabledGitHooksDir(locksDir, scope) {
+  try {
+    (0, import_node_fs17.rmdirSync)(disabledGitHooksPath(locksDir, scope));
+  } catch {
+  }
+}
+function withDisabledGitHooksEnv(env, hooksDir) {
+  const rawCount = env.GIT_CONFIG_COUNT;
+  const parsedCount = rawCount === void 0 ? 0 : Number(rawCount);
+  const count2 = Number.isSafeInteger(parsedCount) && parsedCount >= 0 ? parsedCount : 0;
+  return {
+    ...env,
+    GIT_CONFIG_COUNT: String(count2 + 1),
+    [`GIT_CONFIG_KEY_${count2}`]: "core.hooksPath",
+    [`GIT_CONFIG_VALUE_${count2}`]: hooksDir
+  };
+}
+function git(checkout, args, hooksDir) {
+  return (0, import_node_child_process18.execFileSync)("git", ["-C", checkout, "-c", `core.hooksPath=${hooksDir}`, ...args], {
     encoding: "utf8",
     timeout: 3e4,
     env: { ...process.env, GIT_TERMINAL_PROMPT: "0" }
@@ -61908,20 +61944,21 @@ function git(checkout, args) {
 }
 async function createRunWorktree(opts) {
   const worktreePath = (0, import_node_path30.join)(opts.worktreeRoot, opts.slug, opts.runId);
+  const hooksDir = prepareDisabledGitHooksDir(opts.locksDir, opts.runId);
   await withCheckoutLock(opts.locksDir, opts.slug, async () => {
     (0, import_node_fs17.mkdirSync)(opts.worktreeRoot, { recursive: true });
     try {
-      git(opts.checkout, ["fetch", "origin", opts.defaultBranch]);
+      git(opts.checkout, ["fetch", "origin", opts.defaultBranch], hooksDir);
       if (!(0, import_node_fs17.existsSync)(worktreePath)) {
         git(opts.checkout, [
           "worktree",
           "add",
+          "--no-track",
           "-b",
           worktreeBranch(opts.runId),
           worktreePath,
           `origin/${opts.defaultBranch}`
-        ]);
-        git(worktreePath, ["config", "core.hooksPath", "/dev/null"]);
+        ], hooksDir);
       }
     } catch (error51) {
       const detail = error51 instanceof Error ? error51.message : String(error51);
@@ -61933,12 +61970,14 @@ async function createRunWorktree(opts) {
   return worktreePath;
 }
 async function removeRunWorktree(opts) {
+  const hooksDir = prepareDisabledGitHooksDir(opts.locksDir, (0, import_node_path30.basename)(opts.worktreePath));
   await withCheckoutLock(opts.locksDir, opts.slug, async () => {
     try {
-      git(opts.checkout, ["worktree", "remove", "--force", opts.worktreePath]);
+      git(opts.checkout, ["worktree", "remove", "--force", opts.worktreePath], hooksDir);
     } catch {
     }
-    git(opts.checkout, ["worktree", "prune"]);
+    git(opts.checkout, ["worktree", "prune"], hooksDir);
+    removeDisabledGitHooksDir(opts.locksDir, (0, import_node_path30.basename)(opts.worktreePath));
   });
 }
 async function pushRunBranch(opts, execGit = defaultGitExec) {
@@ -61961,6 +62000,7 @@ async function hasCommitsToPush(opts, execGit = defaultGitExec) {
 }
 async function doPushRunBranch(opts, execGit) {
   const branch = worktreeBranch(opts.runId);
+  const hooksDir = prepareDisabledGitHooksDir(opts.locksDir, opts.runId);
   const pushEnv = {
     PATH: process.env.PATH ?? "",
     ...process.env.HOME !== void 0 ? { HOME: process.env.HOME } : {},
@@ -62006,7 +62046,7 @@ async function doPushRunBranch(opts, execGit) {
       "-C",
       opts.worktreePath,
       "-c",
-      "core.hooksPath=/dev/null",
+      `core.hooksPath=${hooksDir}`,
       "push",
       "--no-verify",
       "origin",
@@ -62018,6 +62058,7 @@ async function doPushRunBranch(opts, execGit) {
 }
 async function sweepOrphanWorktrees(opts) {
   const reaped = [];
+  const hooksDir = prepareDisabledGitHooksDir(opts.locksDir, `sweep:${opts.slug}`);
   const ownedPrefix = (() => {
     try {
       return (import_node_fs17.realpathSync.native ?? import_node_fs17.realpathSync)(opts.worktreeRoot);
@@ -62025,32 +62066,37 @@ async function sweepOrphanWorktrees(opts) {
       return opts.worktreeRoot;
     }
   })() + import_node_path30.sep + opts.slug + import_node_path30.sep;
-  await withCheckoutLock(opts.locksDir, opts.slug, async () => {
-    const listing = git(opts.checkout, ["worktree", "list", "--porcelain"]);
-    for (const block of listing.split("\n\n")) {
-      const m = /^worktree (.+)$/m.exec(block);
-      const wt = m?.[1]?.trim();
-      if (!wt) continue;
-      const canonicalWt = (() => {
-        try {
-          return (import_node_fs17.realpathSync.native ?? import_node_fs17.realpathSync)(wt);
-        } catch {
-          return wt;
-        }
-      })();
-      const normWt = (0, import_node_path30.normalize)(canonicalWt);
-      const normPrefix = (0, import_node_path30.normalize)(ownedPrefix);
-      const isMatch = process.platform === "win32" ? normWt.toLowerCase().startsWith(normPrefix.toLowerCase()) : normWt.startsWith(normPrefix);
-      if (isMatch && opts.isReapable(wt)) {
-        try {
-          git(opts.checkout, ["worktree", "remove", "--force", wt]);
-          reaped.push(wt);
-        } catch {
+  try {
+    await withCheckoutLock(opts.locksDir, opts.slug, async () => {
+      const listing = git(opts.checkout, ["worktree", "list", "--porcelain"], hooksDir);
+      for (const block of listing.split("\n\n")) {
+        const m = /^worktree (.+)$/m.exec(block);
+        const wt = m?.[1]?.trim();
+        if (!wt) continue;
+        const canonicalWt = (() => {
+          try {
+            return (import_node_fs17.realpathSync.native ?? import_node_fs17.realpathSync)(wt);
+          } catch {
+            return wt;
+          }
+        })();
+        const normWt = (0, import_node_path30.normalize)(canonicalWt);
+        const normPrefix = (0, import_node_path30.normalize)(ownedPrefix);
+        const isMatch = process.platform === "win32" ? normWt.toLowerCase().startsWith(normPrefix.toLowerCase()) : normWt.startsWith(normPrefix);
+        if (isMatch && opts.isReapable(wt)) {
+          try {
+            git(opts.checkout, ["worktree", "remove", "--force", wt], hooksDir);
+            removeDisabledGitHooksDir(opts.locksDir, (0, import_node_path30.basename)(wt));
+            reaped.push(wt);
+          } catch {
+          }
         }
       }
-    }
-    git(opts.checkout, ["worktree", "prune"]);
-  });
+      git(opts.checkout, ["worktree", "prune"], hooksDir);
+    });
+  } finally {
+    removeDisabledGitHooksDir(opts.locksDir, `sweep:${opts.slug}`);
+  }
   return reaped;
 }
 
@@ -62244,7 +62290,7 @@ function readPositiveIntEnv(name, fallback) {
   return Number.isInteger(parsed) && parsed > 0 ? parsed : fallback;
 }
 function delayMs(ms) {
-  return new Promise((resolve) => setTimeout(resolve, ms));
+  return new Promise((resolve2) => setTimeout(resolve2, ms));
 }
 function executionBundleBudget() {
   if ((process.env.MRRLIN_RETRIEVAL_BUDGET_DISABLE ?? "").trim() === "1") return void 0;
@@ -62572,7 +62618,7 @@ function isBridgeGeneratedArtifact(artifact) {
   return typeof payload === "object" && payload !== null && "event" in payload;
 }
 function newArtifactId() {
-  return `EA-${import_node_crypto13.default.randomUUID()}`;
+  return `EA-${import_node_crypto14.default.randomUUID()}`;
 }
 var BLAST_RADIUS_FLOOR_PATTERNS = [/^supabase\/migrations\//, /^packages\/db\/src\/schema\.ts$/];
 function isBlastRadiusFloorPath(path29) {
@@ -62741,8 +62787,8 @@ async function driveTurn(deps, codex, projectSlug, runId, leaseId, threadId, inp
   return deps.run("exec", async () => {
     const pending = [];
     let resolveTurnEnded = null;
-    const turnEnded = new Promise((resolve) => {
-      resolveTurnEnded = resolve;
+    const turnEnded = new Promise((resolve2) => {
+      resolveTurnEnded = resolve2;
     });
     let acceptedTurnId = null;
     const unsubActivity = codex.onActivity(threadId, () => {
@@ -62823,7 +62869,7 @@ async function driveRun(deps, projectSlug, runId) {
   if (!claimed) return;
   if (!claimed.leaseId) {
     await deps.client.createInboxItem(projectSlug, {
-      id: `II-${import_node_crypto13.default.randomUUID()}`,
+      id: `II-${import_node_crypto14.default.randomUUID()}`,
       kind: "handoff",
       taskId: claimed.taskId,
       body: `Execution run ${runId} was claimed but returned no leaseId. This indicates DB/API corruption and requires operator attention.`
@@ -64274,7 +64320,7 @@ async function reconcileTaskAwaitingMerge(deps, projectSlug, task, runId, reason
   }
   try {
     await deps.client.createInboxItem(projectSlug, {
-      id: `II-${import_node_crypto13.default.randomUUID()}`,
+      id: `II-${import_node_crypto14.default.randomUUID()}`,
       kind: "handoff",
       taskId: task.id,
       body: `Task ${task.id} (${task.title}) still needs operator follow-up: ${reason}. Mrrlin could not move the task back to Handoff needed automatically.`
@@ -64309,7 +64355,7 @@ async function notifyOperatorHandoff(deps, projectSlug, task, runId, reason) {
   }
   try {
     await deps.client.createInboxItem(projectSlug, {
-      id: `II-${import_node_crypto13.default.randomUUID()}`,
+      id: `II-${import_node_crypto14.default.randomUUID()}`,
       kind: "handoff",
       taskId: task.id,
       body: `Execution run ${runId} for task ${task.id} (${task.title}) needs operator attention: ${reason}`
@@ -64470,7 +64516,7 @@ async function deployGateHandoff(deps, projectSlug, task, runId, reason, leaseId
   }).catch(() => {
   });
   await deps.client.createInboxItem(projectSlug, {
-    id: `II-${import_node_crypto13.default.randomUUID()}`,
+    id: `II-${import_node_crypto14.default.randomUUID()}`,
     kind: "handoff",
     taskId: task.id,
     body: `Deploy gate for run ${runId} (task ${task.id} \u2014 ${task.title}) needs operator attention: ${reason}`
@@ -64489,7 +64535,7 @@ function maxLeaseReclaims() {
 }
 
 // src/async-job-consumer.ts
-var import_node_crypto14 = __toESM(require("node:crypto"), 1);
+var import_node_crypto15 = __toESM(require("node:crypto"), 1);
 var ASYNC_JOB_MAX_ATTEMPTS = 2;
 function ASYNC_UNOWNED_TTL_DAYS() {
   const raw = Number(process.env.MRRLIN_ASYNC_UNOWNED_TTL_DAYS);
@@ -64614,7 +64660,7 @@ async function driveAsyncJob(deps, projectSlug, jobId) {
   const delivery = descriptor2.onComplete(outcome, input);
   if (!delivery.suppressInbox) {
     await deps.client.createInboxItem(projectSlug, {
-      id: delivery.id ?? `II-${import_node_crypto14.default.randomUUID()}`,
+      id: delivery.id ?? `II-${import_node_crypto15.default.randomUUID()}`,
       kind: delivery.kind,
       body: delivery.body,
       ...delivery.taskId ? { taskId: delivery.taskId } : {},
@@ -64632,13 +64678,13 @@ async function deriveRequestedHash(client, toolName, input) {
   if (input.requestedHash) return input.requestedHash;
   if (toolName === "run_spec_consensus" && input.pageId) {
     const page = await client.getWikiPage(input.projectSlug, input.pageId);
-    return page.contentHash ?? import_node_crypto14.default.createHash("sha256").update(page.markdownBody).digest("hex");
+    return page.contentHash ?? import_node_crypto15.default.createHash("sha256").update(page.markdownBody).digest("hex");
   }
   if (toolName === "draft_task_spec" && input.taskId) {
     const task = await client.getTask(input.projectSlug, input.taskId);
-    return task.updatedAt ?? import_node_crypto14.default.createHash("sha256").update(JSON.stringify(task)).digest("hex");
+    return task.updatedAt ?? import_node_crypto15.default.createHash("sha256").update(JSON.stringify(task)).digest("hex");
   }
-  return import_node_crypto14.default.createHash("sha256").update(JSON.stringify(input)).digest("hex");
+  return import_node_crypto15.default.createHash("sha256").update(JSON.stringify(input)).digest("hex");
 }
 async function runAsyncBackstopSweep(deps, drive = (slug, jobId) => driveAsyncJob(deps, slug, jobId)) {
   const projects = await deps.client.listProjects();
@@ -68742,7 +68788,7 @@ function saveAgentPairing(record2) {
   }
 }
 function runPhoneTurn(handler, directorSessionId, text, emit) {
-  return new Promise((resolve) => {
+  return new Promise((resolve2) => {
     const emitter = new import_node_events3.EventEmitter();
     const fakeSocket = {
       on: (event, cb) => {
@@ -68757,7 +68803,7 @@ function runPhoneTurn(handler, directorSessionId, text, emit) {
       settled = true;
       if (timer) clearTimeout(timer);
       emitter.removeAllListeners();
-      resolve();
+      resolve2();
     };
     const send = (msg) => {
       if (msg.type === "error") {
@@ -68917,13 +68963,19 @@ async function renderPairingQrSvg(payload) {
 // src/executor-server.ts
 var import_node_child_process20 = require("node:child_process");
 function defaultReadinessRunner(provider) {
-  const command = provider === "claude" ? "claude" : "codex";
+  if (provider !== "codex" && provider !== "claude" && provider !== "agy") {
+    throw new Error(`unsupported executor provider: ${String(provider)}`);
+  }
+  const command = provider === "claude" ? "claude" : provider === "agy" ? "agy" : "codex";
   return (args) => {
     const r = (0, import_node_child_process20.spawnSync)(command, args, { encoding: "utf8", timeout: 8e3, shell: true });
     return { status: r.status, stdout: r.stdout ?? "", stderr: r.stderr ?? "" };
   };
 }
 async function startExecutorServer(opts) {
+  if (opts.provider !== "codex" && opts.provider !== "claude" && opts.provider !== "agy") {
+    throw new Error(`unsupported executor provider: ${String(opts.provider)}`);
+  }
   const verify = opts.verifyReadiness ?? verifyProviderReadiness;
   const runner = opts.readinessRunner ?? defaultReadinessRunner(opts.provider);
   const readiness = await verify(opts.provider, runner);
@@ -68936,8 +68988,37 @@ async function startExecutorServer(opts) {
     error51.details = readiness.details;
     throw error51;
   }
+  const baseEnv = { ...opts.env ?? process.env };
+  const childEnv = withDisabledGitHooksEnv(baseEnv, opts.disabledGitHooksDir);
+  if (opts.provider === "codex") {
+    const manager = new CodexServerManager();
+    try {
+      const client = await manager.acquire({
+        cwd: opts.worktree,
+        approvalPolicy: "never",
+        env: childEnv,
+        ...opts.spawn ? { spawn: opts.spawn } : {}
+      });
+      let disposed = false;
+      const dispose = () => {
+        if (disposed) return;
+        disposed = true;
+        try {
+          manager.shutdown();
+        } catch {
+        }
+      };
+      return { handle: createCodexAgentHandle(client), dispose };
+    } catch (error51) {
+      try {
+        manager.shutdown();
+      } catch {
+      }
+      throw error51;
+    }
+  }
   if (opts.provider === "claude") {
-    const handle = new ClaudeAgentHandle();
+    const handle = new ClaudeAgentHandle(childEnv);
     let disposed = false;
     const dispose = () => {
       if (disposed) return;
@@ -68946,30 +69027,17 @@ async function startExecutorServer(opts) {
     };
     return { handle, dispose };
   }
-  const manager = new CodexServerManager();
-  try {
-    const client = await manager.acquire({
-      cwd: opts.worktree,
-      approvalPolicy: "never",
-      ...opts.spawn ? { spawn: opts.spawn } : {}
-    });
+  if (opts.provider === "agy") {
+    const handle = new AgyAgentHandle(childEnv);
     let disposed = false;
     const dispose = () => {
       if (disposed) return;
       disposed = true;
-      try {
-        manager.shutdown();
-      } catch {
-      }
+      handle.disposeAll();
     };
-    return { handle: createCodexAgentHandle(client), dispose };
-  } catch (error51) {
-    try {
-      manager.shutdown();
-    } catch {
-    }
-    throw error51;
+    return { handle, dispose };
   }
+  throw new Error(`unsupported executor provider: ${String(opts.provider)}`);
 }
 
 // src/self-review.ts
@@ -69758,9 +69826,9 @@ function readCodexFallbackModels() {
   return [...models.values()];
 }
 function selfUpdateInboxItemId(offeredVersion) {
-  if (!offeredVersion) return `II-MCPUPD-${(0, import_node_crypto15.randomUUID)()}`;
+  if (!offeredVersion) return `II-MCPUPD-${(0, import_node_crypto16.randomUUID)()}`;
   if (/^[A-Za-z0-9._-]+$/.test(offeredVersion)) return `II-MCPUPD-${offeredVersion}`;
-  const hash3 = import_node_crypto15.default.createHash("sha256").update(offeredVersion).digest("hex").slice(0, 10);
+  const hash3 = import_node_crypto16.default.createHash("sha256").update(offeredVersion).digest("hex").slice(0, 10);
   return `II-MCPUPD-${offeredVersion.replace(/[^A-Za-z0-9._-]/g, "-")}-${hash3}`;
 }
 function neutralCheckoutCwd(stateDir) {
@@ -69797,7 +69865,7 @@ function buildThreadStartParams(msg, config2, desiredModel) {
     "- Spec pages in folder Specs must contain `## Acceptance criteria` followed by `- [ ]` items.",
     "- AGNOSTIC DELIVERY MANDATE: Mrrlin is an Agnostic Delivery Platform decoupled from mandatory GitHub. Delivery is routed strictly by artifact kind: (1) document -> wiki (specs, policies, legal compliance playbooks, project documentation); (2) page -> publish (web pages, landing pages, interactive HTML previews); (3) file_set -> artifacts (file uploads, bundles, build zips); (4) message -> send (outbound webhooks, Slack, notifications); (5) code_change -> repo_host (git / GitHub ONLY when modifying source repository code). NEVER stall or refuse non-code tasks (such as marketing landing pages, GDPR checklists, or legal compliance playbooks) by demanding a Git repository. Non-code tasks deliver directly via page (Publish) or document (Wiki).",
     "- 3-TIER COMMERCIAL SCOPE GOVERNANCE: Treat tasks by domain governance tier. (1) Tier 1 Core Tech Delivery (backend, frontend, SRE, databases): decompose autonomously into repository code changes (when a repo is bound) or code artifacts. (2) Tier 2 Planning & Content (landing pages, SEO, marketing): create actionable drafts; when details such as a phone number, brand name or copy are missing, do not loop on questions \u2014 create the task, record `## Placeholders: [NEED_INPUT: <item>]` in the Wiki spec, and set `autonomyLevel: 'human_review'`. (3) Tier 3 Guardrailed Advisory (high risk: privacy/GDPR, security/SOC 2, billing, production database migrations, infrastructure): always set `autonomyLevel: 'human_review'`, put the domain's standard safety controls into the spec, and state that irreversible actions need human sign-off.",
-    "- INBOX QUESTION RETIREMENT MANDATE: If clarifying questions were banked or exist as pending items in Inbox from a previous turn (e.g. via `create_inbox_item(kind: 'question')`), and the operator has now answered them in chat in Turn 2+, you MUST call `decide_inbox_item(id, verdict: 'acknowledged', note: ...)` (or `verdict: 'rejected'` if moot) to retire the pending questions BEFORE creating tasks or plans on the board. Never leave questions you received answers to lingering as unanswered items in Inbox.",
+    "- INBOX QUESTION RETIREMENT MANDATE \u2014 Retiring answered questions: Before creating a task/plan, retire only pending Inbox questions the operator actually answered. Call `decide_inbox_item(itemId: <exact id>, decidedBy: 'director', verdict: 'acknowledged', answer: <actual answer>)`. Use `verdict: 'rejected', reason: ...` only if moot. Never close an unrelated item.",
     "- CHAT CLARIFICATIONS ARE IN CHAT ONLY: During synchronous interactive Director chat, ask clarifying questions directly in your chat response. DO NOT call `create_inbox_item(kind: 'question')` for routine conversational clarifications in Turn 1 \u2014 Inbox questions are reserved for autonomous background workers or asynchronous gate pauses that occur while the operator is away.",
     "- AUTOPILOT PRESENCE FENCE TRANSPARENCY: Autopilot requires operator web app presence to trigger execution ticks (`operator_absent`). When the operator asks about autopilot starting, remind them that keeping the web tab open allows the scheduler to advance the queue automatically.",
     "",
@@ -70142,7 +70210,7 @@ function buildThreadStartParams(msg, config2, desiredModel) {
     '- In synchronous live Director chat (Turn 1 scoping), ask your questions directly in your chat reply without creating Inbox items. Only bank questions in Inbox (`create_inbox_item` with `kind="question"`, `taskId` set, `directorSessionId` from Context JSON, `questionOptions` = 2-3 concrete answer options) when an autonomous background task pauses, when a task requires operator decision while the operator is away, or when explicitly requested. Each banked option MUST include a short `label`, a concise `description`, and a self-contained durable `answer`; you MAY mark at most one option as `recommended` when you explicitly prefer a path.',
     '- When the operator answers in chat, write the answer into the Specs/{taskId} Clarifications section, and if an Inbox question was previously open, `decide_inbox_item` with `verdict="acknowledged"` and `answer` = the resolved answer.',
     "- Project-level ambiguity (scope or direction not yet tied to a specific task) in live chat stays in chat; for genuine asynchronous pauses it MAY be banked with `taskId` OMITTED. Reserve taskless Inbox questions for genuine project-level scope.",
-    "- Retiring answered questions: When the operator answers a previously banked question (task-specific or taskless) in chat, you MUST immediately call `decide_inbox_item` with `verdict=\"acknowledged\"` and note/answer BEFORE calling `create_task`. Do NOT leave answered questions in status 'pending' in Inbox.",
+    "- When the operator answers a banked question, immediately call `decide_inbox_item` with its exact `itemId`, `decidedBy='director'`, `verdict='acknowledged'`, and the actual `answer` before any `create_task`. Never close another pending question.",
     "- Binding taskless answers to a task: WHEN you create a task out of project-level scoping,",
     "  call `list_inbox_items` (kind=question), fold any relevant `acknowledged` TASKLESS answer",
     "  into the new task's Specs/{id} Clarifications, and `reject` (with a reason) any taskless",
@@ -70248,8 +70316,8 @@ async function runCollectedAgentTurn(handle, prompt, cwd, baseInstructions) {
   let acceptedTurnId;
   let turnError = null;
   let resolveTurnEnded = null;
-  const turnEnded = new Promise((resolve) => {
-    resolveTurnEnded = resolve;
+  const turnEnded = new Promise((resolve2) => {
+    resolveTurnEnded = resolve2;
   });
   const unsub = handle.onEvent(threadId, (event) => {
     if (event.type === "assistant") chunks.push(event.content);
@@ -70468,7 +70536,7 @@ function createBridgeRequestListener(opts) {
         res.end(JSON.stringify({ ok: false, error: "Origin not allowed." }));
         return;
       }
-      const nonce = import_node_crypto15.default.randomBytes(16).toString("base64url");
+      const nonce = import_node_crypto16.default.randomBytes(16).toString("base64url");
       res.writeHead(200, { "content-type": "application/json" });
       const publicHost = host === "0.0.0.0" ? "127.0.0.1" : host;
       res.end(JSON.stringify({ ok: true, wsUrl: `ws://${publicHost}:${port}/ws`, token, nonce }));
@@ -70772,7 +70840,7 @@ function createBridgeMessageHandler(deps) {
       }
     }
     socket.on("message", async (data) => {
-      const spanId = import_node_crypto15.default.randomUUID();
+      const spanId = import_node_crypto16.default.randomUUID();
       if (logCtx) {
         logCtx.span.id = spanId;
         logCtx.span.at = Date.now();
@@ -71379,7 +71447,7 @@ function createBridgeMessageHandler(deps) {
       let desiredInstructionHash = null;
       try {
         const startParams = deps.buildStartParams(msg, desiredModel);
-        desiredInstructionHash = import_node_crypto15.default.createHash("sha256").update(startParams.baseInstructions ?? "").digest("hex");
+        desiredInstructionHash = import_node_crypto16.default.createHash("sha256").update(startParams.baseInstructions ?? "").digest("hex");
         if (!thread) {
           const newThread = {
             threadId: "",
@@ -71456,7 +71524,7 @@ function createBridgeMessageHandler(deps) {
       thread.inFlight = true;
       pendingTurnSessions.delete(directorSessionId);
       thread.replay = createReplayBuffer({
-        turnId: (0, import_node_crypto15.randomUUID)(),
+        turnId: (0, import_node_crypto16.randomUUID)(),
         spanId,
         ...deps.retentionMs !== void 0 ? { retentionMs: deps.retentionMs } : {},
         ...deps.ackLingerMs !== void 0 ? { ackLingerMs: deps.ackLingerMs } : {}
@@ -71609,8 +71677,8 @@ function createBridgeMessageHandler(deps) {
           }
           let resolveTurn = null;
           let rejectTurn = null;
-          const turnFinished = new Promise((resolve, reject) => {
-            resolveTurn = resolve;
+          const turnFinished = new Promise((resolve2, reject) => {
+            resolveTurn = resolve2;
             rejectTurn = (error51) => reject(error51);
           });
           let outputEvents = 0;
@@ -72239,6 +72307,7 @@ async function startDirectorBridge() {
     acquireExecutorAgent: async (worktreePath, providerId) => {
       const executor = await startExecutorServer({
         worktree: worktreePath,
+        disabledGitHooksDir: prepareDisabledGitHooksDir(import_node_path38.default.join(config2.stateDir, "locks"), import_node_path38.default.basename(worktreePath)),
         provider: providerId
       });
       return { handle: executor.handle, dispose: executor.dispose };
@@ -72277,7 +72346,7 @@ async function startDirectorBridge() {
   };
   const sessionSinks = createSessionSinkRegistry();
   const tombstones = /* @__PURE__ */ new Map();
-  const bridgeInstanceId = (0, import_node_crypto15.randomUUID)();
+  const bridgeInstanceId = (0, import_node_crypto16.randomUUID)();
   const asyncConsumerDeps = {
     client,
     run: wrappedTurnLock.run,
@@ -72604,7 +72673,7 @@ async function startDirectorBridge() {
   const bridgeLogger = createBridgeLogger(config2.stateDir, process.env);
   let bridgeBinShaShort = "unknown00000";
   try {
-    bridgeBinShaShort = import_node_crypto15.default.createHash("sha256").update(import_node_fs23.default.readFileSync(process.argv[1] ?? "")).digest("hex").slice(0, 12);
+    bridgeBinShaShort = import_node_crypto16.default.createHash("sha256").update(import_node_fs23.default.readFileSync(process.argv[1] ?? "")).digest("hex").slice(0, 12);
   } catch {
   }
   attachBridgeWss(server, {
@@ -72695,9 +72764,9 @@ async function startDirectorBridge() {
       res.writeHead(400).end();
     });
   });
-  await new Promise((resolve, reject) => {
+  await new Promise((resolve2, reject) => {
     dispatchServer.on("error", reject);
-    dispatchServer.listen(workerPort(), "127.0.0.1", () => resolve());
+    dispatchServer.listen(workerPort(), "127.0.0.1", () => resolve2());
   });
   const bridgeHealth = new BridgeHealthTracker({
     stateDir: config2.stateDir,
@@ -72888,7 +72957,7 @@ async function startDirectorBridge() {
       )
     });
   }
-  await new Promise((resolve, reject) => {
+  await new Promise((resolve2, reject) => {
     server.on("error", (err) => {
       if (err.code === "EADDRINUSE") {
         const conflictingPids = scanForOtherBridges();
@@ -72904,7 +72973,7 @@ async function startDirectorBridge() {
       }
       reject(err);
     });
-    server.listen(config2.port, config2.host, () => resolve());
+    server.listen(config2.port, config2.host, () => resolve2());
   });
   const orphans = scanForOtherBridges();
   if (orphans.length > 0) {
@@ -73045,10 +73114,10 @@ function timingSafeTokenEqual(provided, expected) {
   const a = Buffer.from(provided);
   const b = Buffer.from(expected);
   if (a.length !== b.length) return false;
-  return import_node_crypto15.default.timingSafeEqual(a, b);
+  return import_node_crypto16.default.timingSafeEqual(a, b);
 }
 function readDispatchBody(req) {
-  return new Promise((resolve, reject) => {
+  return new Promise((resolve2, reject) => {
     const chunks = [];
     let size = 0;
     req.on("data", (chunk) => {
@@ -73060,7 +73129,7 @@ function readDispatchBody(req) {
       }
       chunks.push(chunk);
     });
-    req.on("end", () => resolve(Buffer.concat(chunks).toString("utf8")));
+    req.on("end", () => resolve2(Buffer.concat(chunks).toString("utf8")));
     req.on("error", reject);
   });
 }
@@ -73074,7 +73143,7 @@ function readOrCreateBridgeToken(stateDir) {
   } catch {
   }
   import_node_fs23.default.mkdirSync(stateDir, { recursive: true, mode: 448 });
-  const token = import_node_crypto15.default.randomBytes(32).toString("base64url");
+  const token = import_node_crypto16.default.randomBytes(32).toString("base64url");
   import_node_fs23.default.writeFileSync(tokenPath, `${token}
 `, { mode: 384 });
   return token;
@@ -73772,12 +73841,12 @@ var StdioServerTransport = class {
     this.onclose?.();
   }
   send(message) {
-    return new Promise((resolve) => {
+    return new Promise((resolve2) => {
       const json2 = serializeMessage(message);
       if (this._stdout.write(json2)) {
-        resolve();
+        resolve2();
       } else {
-        this._stdout.once("drain", resolve);
+        this._stdout.once("drain", resolve2);
       }
     });
   }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mrrlin-dev/mcp",
-  "version": "0.4.97",
+  "version": "0.4.98",
   "type": "module",
   "bin": {
     "mrrlin-mcp": "dist/bin.cjs"