@mrrlin-dev/mcp 0.4.98 → 0.4.100

package/dist/bin.cjs

@@ -9776,7 +9776,7 @@ var require_cross_spawn = __commonJS({
     var cp = require("child_process");
     var parse8 = require_parse2();
     var enoent = require_enoent();
-    function spawn6(command, args, options) {
+    function spawn7(command, args, options) {
       const parsed = parse8(command, args, options);
       const spawned = cp.spawn(parsed.command, parsed.args, parsed.options);
       enoent.hookChildProcess(spawned, parsed);
@@ -9788,8 +9788,8 @@ var require_cross_spawn = __commonJS({
       result.error = result.error || enoent.verifyENOENTSync(result.status, parsed);
       return result;
     }
-    module2.exports = spawn6;
-    module2.exports.spawn = spawn6;
+    module2.exports = spawn7;
+    module2.exports.spawn = spawn7;
     module2.exports.sync = spawnSync7;
     module2.exports._parse = parse8;
     module2.exports._enoent = enoent;
@@ -21662,7 +21662,7 @@ __export(bin_exports, {
 });
 module.exports = __toCommonJS(bin_exports);
 var import_node_path42 = __toESM(require("node:path"), 1);
-var import_node_child_process22 = require("node:child_process");
+var import_node_child_process23 = require("node:child_process");
 var import_node_fs25 = require("node:fs");
 var import_node_os20 = require("node:os");
 var import_node_path43 = __toESM(require("node:path"), 1);
@@ -37189,6 +37189,39 @@ function date4(params) {
 // ../../node_modules/.pnpm/zod@4.4.3/node_modules/zod/v4/classic/external.js
 config(en_default());
 
+// ../../packages/schemas/dist/plans.js
+var PLAN_TIERS = ["base", "pro", "team", "ultra"];
+var planTierSchema = external_exports.enum(PLAN_TIERS);
+var billingPriceSchema = external_exports.object({
+  amount: external_exports.number().int().nonnegative(),
+  currency: external_exports.string().length(3)
+});
+var billingPlansResponseSchema = external_exports.object({
+  data: external_exports.object({
+    plans: external_exports.array(external_exports.object({
+      tier: planTierSchema,
+      name: external_exports.string().min(1),
+      limits: external_exports.object({
+        projects: external_exports.number().int(),
+        seats: external_exports.number().int()
+      }),
+      prices: external_exports.object({
+        month: billingPriceSchema.optional(),
+        year: billingPriceSchema.optional()
+      })
+    }))
+  })
+});
+var createCheckoutSessionRequestSchema = external_exports.object({
+  tier: planTierSchema,
+  interval: external_exports.enum(["month", "year"])
+});
+var billingUrlResponseSchema = external_exports.object({
+  data: external_exports.object({
+    url: external_exports.string().url()
+  })
+});
+
 // ../../packages/schemas/dist/artifact-checks.js
 var artifactKindSchema = external_exports.enum([
   "document",
@@ -37394,7 +37427,16 @@ var openApiOperationIds = {
   confirmFirstWrite: "confirmFirstWrite",
   resolveArtifactKindRoute: "resolveArtifactKindRoute",
   resolveDeliveryForArtifactKind: "resolveDeliveryForArtifactKind",
-  recordCapabilityUse: "recordCapabilityUse"
+  recordCapabilityUse: "recordCapabilityUse",
+  resolveAccount: "resolveAccount",
+  linkAccountIdentity: "linkAccountIdentity",
+  getMyAccount: "getMyAccount",
+  getMyEntitlement: "getMyEntitlement",
+  listBillingPlans: "listBillingPlans",
+  createCheckoutSession: "createCheckoutSession",
+  createBillingPortalSession: "createBillingPortalSession",
+  syncBilling: "syncBilling",
+  redeemAppsumoCode: "redeemAppsumoCode"
 };
 
 // ../../packages/schemas/dist/session.js
@@ -37414,10 +37456,13 @@ var operatorSessionSchema = external_exports.object({
   // Default 'project' for backward-compat: tokens minted before this field existed parse
   // cleanly into the project branch of the middleware (which mirrors today's behavior).
   scope: external_exports.enum(["project", "operator"]).default("project"),
+  accountId: external_exports.string().uuid().optional(),
+  identitySubject: external_exports.string().min(1).optional(),
+  purpose: external_exports.enum(["session", "identity_assertion"]).default("session"),
   // Billing entitlement carried on the session. Optional because a GitHub session never has one
   // and a Firebase session has one only once the claims exist. `determinedAt` is what makes it
   // falsifiable: the token lives for 7 days, so a value that can go stale needs a freshness bound
-  // enforced by the reader (readEffectivePlan), not by the cookie.
+  // enforced by the reader, not by the cookie.
   entitlement: external_exports.object({
     plan: external_exports.string(),
     status: external_exports.enum(["active", "none"]),
@@ -38064,6 +38109,24 @@ var TASK_NOTES_JOURNAL_SECTIONS = [
 ];
 var JOURNAL_HEADING_RE = new RegExp(`^##[ \\t]+(${TASK_NOTES_JOURNAL_SECTIONS.map((s) => s.heading).join("|")})\\b[ \\t]*(?:[\u2014\u2013-][ \\t]*(\\S.*?))?[ \\t]*$`);
 
+// ../../packages/schemas/dist/appsumo.js
+var APPSUMO_CODE_ALPHABET = "0123456789ABCDEFGHJKMNPQRSTVWXYZ";
+var APPSUMO_ALPHABET_SET = new Set(APPSUMO_CODE_ALPHABET);
+var redeemAppsumoCodeRequestSchema = external_exports.object({
+  code: external_exports.string().min(1).max(64)
+});
+var redeemAppsumoCodeResponseSchema = external_exports.object({
+  data: external_exports.object({
+    outcome: external_exports.enum(["redeemed", "already_redeemed_by_you"]),
+    codes: external_exports.number().int().min(1).max(4),
+    tier: planTierSchema,
+    limits: external_exports.object({
+      projects: external_exports.number().int().nonnegative(),
+      seats: external_exports.number().int().nonnegative()
+    })
+  })
+});
+
 // ../../packages/schemas/dist/integration-route-defaults.js
 var DEFAULT_INTEGRATION_ROUTES = {
   github: {
@@ -38665,9 +38728,12 @@ var mrrlinProjectSummarySchema = external_exports.object({
   clientName: external_exports.string().trim().max(80).nullable().optional(),
   scopeDescription: external_exports.string().trim().max(240).nullable().optional()
 });
+var mrrlinProjectOperatorInputSchema = external_exports.string().regex(/^@[!-~]+$/, "operator must be '@' followed by printable ASCII with no whitespace");
 var mrrlinProjectUpsertSchema = mrrlinProjectSummarySchema.omit({
   onboardingKickoffState: true,
   slug: true
+}).extend({
+  github: mrrlinGithubBindingSchema.extend({ operator: mrrlinProjectOperatorInputSchema })
 });
 var mrrlinProjectRenameSchema = external_exports.object({
   displayName: external_exports.string().trim().min(1).max(120).optional(),
@@ -39091,13 +39157,61 @@ var projectSnapshotResponseSchema = external_exports.object({
 var projectSummaryResponseSchema = external_exports.object({
   data: mrrlinProjectSummarySchema
 });
+var projectListItemSchema = mrrlinProjectSummarySchema.extend({
+  viewerRole: external_exports.enum(["owner", "collaborator"]).optional(),
+  // True when this caller would get 402 (owner plan inactive, project over limit, or no seat) on
+  // the project's routes. Lets the web skip paused projects when picking a default and offer the
+  // ones that still open. Absent when the API runs without a session (auth disabled).
+  paused: external_exports.boolean().optional()
+});
 var projectSummaryListResponseSchema = external_exports.object({
-  data: external_exports.array(mrrlinProjectSummarySchema),
+  data: external_exports.array(projectListItemSchema),
   entitlement: external_exports.object({
     plan: external_exports.string(),
     status: external_exports.union([external_exports.literal("active"), external_exports.literal("none")])
   })
 });
+var accountEntitlementSchema = external_exports.object({
+  accountId: external_exports.string(),
+  standing: external_exports.enum(["entitled", "collaborator", "none"]),
+  lapsed: external_exports.boolean(),
+  tier: planTierSchema.nullable(),
+  source: external_exports.enum(["stripe", "appsumo", "grant"]).nullable(),
+  stripe: external_exports.object({
+    status: external_exports.string(),
+    tier: planTierSchema.nullable(),
+    interval: external_exports.enum(["month", "year"]).nullable(),
+    currentPeriodEnd: external_exports.string().nullable(),
+    cancelAtPeriodEnd: external_exports.boolean()
+  }).nullable(),
+  appsumo: external_exports.object({
+    codes: external_exports.number().int(),
+    tier: planTierSchema
+  }).nullable(),
+  grant: external_exports.object({
+    tier: planTierSchema,
+    reason: external_exports.string()
+  }).nullable(),
+  limits: external_exports.object({
+    projects: external_exports.number().int(),
+    seats: external_exports.number().int()
+  }).nullable(),
+  usage: external_exports.object({
+    projects: external_exports.number().int(),
+    seats: external_exports.number().int()
+  }),
+  collaboratorProjects: external_exports.number().int(),
+  upgradePath: external_exports.enum(["stripe", "appsumo", "none"]),
+  tiers: external_exports.array(external_exports.object({
+    tier: planTierSchema,
+    projects: external_exports.number().int(),
+    seats: external_exports.number().int(),
+    selfServe: external_exports.boolean()
+  }))
+});
+var accountEntitlementResponseSchema = external_exports.object({
+  data: accountEntitlementSchema
+});
 var taskResponseSchema = external_exports.object({
   data: mrrlinTaskSchema
 });
@@ -40021,6 +40135,47 @@ function resolveProjectClientScope(project) {
     scopeDescription
   };
 }
+var resolvedAccountSchema = external_exports.object({
+  accountId: external_exports.string().uuid(),
+  principal: external_exports.string().min(1),
+  emails: external_exports.array(external_exports.string().email()),
+  providers: external_exports.array(external_exports.enum(["github", "firebase"]))
+});
+var resolveAccountResponseSchema = external_exports.object({
+  data: external_exports.discriminatedUnion("outcome", [
+    resolvedAccountSchema.extend({ outcome: external_exports.literal("resolved") }),
+    resolvedAccountSchema.extend({ outcome: external_exports.literal("created") }),
+    external_exports.object({
+      outcome: external_exports.literal("link_required"),
+      accountId: external_exports.string().uuid(),
+      principal: external_exports.null(),
+      emails: external_exports.array(external_exports.string()).length(0),
+      providers: external_exports.array(external_exports.enum(["github", "firebase"])).min(1)
+    }),
+    external_exports.object({
+      outcome: external_exports.literal("refused"),
+      accountId: external_exports.string().uuid().nullable().optional(),
+      principal: external_exports.null().optional(),
+      emails: external_exports.array(external_exports.string()).optional(),
+      providers: external_exports.array(external_exports.enum(["github", "firebase"])).optional()
+    })
+  ])
+});
+var linkAccountIdentityRequestSchema = external_exports.object({
+  assertion: external_exports.string().min(1)
+});
+var accountSummaryResponseSchema = external_exports.object({
+  data: external_exports.object({
+    accountId: external_exports.string().uuid(),
+    principal: external_exports.string().min(1),
+    emails: external_exports.array(external_exports.string().email()),
+    identities: external_exports.array(external_exports.object({
+      provider: external_exports.enum(["github", "firebase"]),
+      login: external_exports.string().nullable(),
+      email: external_exports.string().nullable()
+    }))
+  })
+});
 
 // ../../packages/client/dist/agent-token-provider.js
 var AgentTokenProviderError = class extends Error {
@@ -41143,6 +41298,60 @@ function createMrrlinClient(config2) {
       await request(`/operator/agent-credentials/${encodeURIComponent(credentialId)}`, {
         method: "DELETE"
       });
+    },
+    async resolveAccount() {
+      const body = await request("/auth/account/resolve", {
+        method: "POST"
+      });
+      return resolveAccountResponseSchema.parse(body);
+    },
+    async linkAccountIdentity(assertion) {
+      const body = await request("/auth/account/link", {
+        body: JSON.stringify({ assertion }),
+        headers: { "content-type": "application/json" },
+        method: "POST"
+      });
+      return resolveAccountResponseSchema.parse(body);
+    },
+    async getMyAccount() {
+      const body = await request("/me/account");
+      return accountSummaryResponseSchema.parse(body);
+    },
+    async getMyEntitlement() {
+      const body = await request("/me/entitlement");
+      return accountEntitlementResponseSchema.parse(body).data;
+    },
+    async listBillingPlans() {
+      const body = await request("/billing/plans");
+      return billingPlansResponseSchema.parse(body).data.plans;
+    },
+    async createCheckoutSession(input) {
+      const body = await request("/billing/checkout-session", {
+        body: JSON.stringify(input),
+        headers: { "content-type": "application/json" },
+        method: "POST"
+      });
+      return billingUrlResponseSchema.parse(body).data;
+    },
+    async createBillingPortalSession() {
+      const body = await request("/billing/portal-session", {
+        method: "POST"
+      });
+      return billingUrlResponseSchema.parse(body).data;
+    },
+    async syncBilling() {
+      const body = await request("/billing/sync", {
+        method: "POST"
+      });
+      return accountEntitlementResponseSchema.parse(body).data;
+    },
+    async redeemAppsumoCode(code) {
+      const body = await request("/appsumo/redeem", {
+        body: JSON.stringify({ code }),
+        headers: { "content-type": "application/json" },
+        method: "POST"
+      });
+      return redeemAppsumoCodeResponseSchema.parse(body).data;
     }
   };
 }
@@ -44556,7 +44765,7 @@ function firstString(...values) {
   return null;
 }
 function runCodexExec(input, deps) {
-  const spawn6 = deps?.spawn ?? import_node_child_process6.spawn;
+  const spawn7 = deps?.spawn ?? import_node_child_process6.spawn;
   const executable = input.codexExecutable ?? "codex";
   const sandbox = input.sandbox ?? "read-only";
   const fullPrompt = input.developerInstructions.trim() ? `${input.developerInstructions.trim()}
@@ -44602,7 +44811,7 @@ ${input.prompt}` : input.prompt;
     }
     let child;
     try {
-      child = spawn6(spawnCmd, spawnArgs, options);
+      child = spawn7(spawnCmd, spawnArgs, options);
     } catch (err) {
       finish({ ok: false, error: `Failed to spawn codex exec: ${errMessage(err)}` });
       return;
@@ -44645,7 +44854,7 @@ function errMessage(err) {
 // ../../packages/agent-client/dist/providers/claude/exec.js
 var import_node_child_process7 = require("node:child_process");
 function runClaudeExec(input, deps) {
-  const spawn6 = deps?.spawn ?? import_node_child_process7.spawn;
+  const spawn7 = deps?.spawn ?? import_node_child_process7.spawn;
   const executable = input.codexExecutable ?? "claude";
   const args = ["--print", "--output-format", "json", "--strict-mcp-config"];
   if (input.mcpConfig) {
@@ -44689,7 +44898,7 @@ function runClaudeExec(input, deps) {
     }
     let child;
     try {
-      child = spawn6(spawnCmd, spawnArgs, options);
+      child = spawn7(spawnCmd, spawnArgs, options);
     } catch (err) {
       finish({ ok: false, error: `Failed to spawn ${executable} exec: ${errMessage2(err)}` });
       return;
@@ -44757,7 +44966,7 @@ function errMessage2(err) {
 // ../../packages/agent-client/dist/providers/agy/exec.js
 var import_node_child_process8 = require("node:child_process");
 function runAgyExec(input, deps) {
-  const spawn6 = deps?.spawn ?? import_node_child_process8.spawn;
+  const spawn7 = deps?.spawn ?? import_node_child_process8.spawn;
   const executable = input.codexExecutable ?? "agy";
   const args = ["--output-format", "json"];
   if (input.sandbox === "read-only") {
@@ -44810,7 +45019,7 @@ function runAgyExec(input, deps) {
     }
     let child;
     try {
-      child = spawn6(spawnCmd, spawnArgs, options);
+      child = spawn7(spawnCmd, spawnArgs, options);
     } catch (err) {
       finish({ ok: false, error: `Failed to spawn ${executable} exec: ${err instanceof Error ? err.message : String(err)}` });
       return;
@@ -46058,7 +46267,7 @@ var DEFAULT_STATUS_TIMEOUT_MS = 1e4;
 function errMessage3(err) {
   return err instanceof Error ? err.message : String(err);
 }
-function runExternalAgentsStatus(bin, args, timeoutMs, spawn6) {
+function runExternalAgentsStatus(bin, args, timeoutMs, spawn7) {
   return new Promise((resolve2) => {
     let settled = false;
     const timerRef = { id: void 0 };
@@ -46071,7 +46280,7 @@ function runExternalAgentsStatus(bin, args, timeoutMs, spawn6) {
     const options = { stdio: ["ignore", "pipe", "pipe"], env: process.env, shell: false };
     let child;
     try {
-      child = spawn6(bin, args, options);
+      child = spawn7(bin, args, options);
     } catch (err) {
       finish({ stdout: "", error: `spawn ${bin} failed: ${errMessage3(err)}` });
       return;
@@ -46095,13 +46304,13 @@ function runExternalAgentsStatus(bin, args, timeoutMs, spawn6) {
   });
 }
 async function fetchRegistrySnapshot(deps) {
-  const spawn6 = deps?.spawn ?? import_node_child_process10.spawn;
+  const spawn7 = deps?.spawn ?? import_node_child_process10.spawn;
   const { command, prefixArgs } = resolveExternalAgentsCliInvocation(deps?.externalAgentsBin);
   const { stdout, error: error51 } = await runExternalAgentsStatus(
     command,
     [...prefixArgs, "status", "--json"],
     deps?.statusTimeoutMs ?? DEFAULT_STATUS_TIMEOUT_MS,
-    spawn6
+    spawn7
   );
   if (error51) return { ok: false, error: error51 };
   try {
@@ -46145,7 +46354,7 @@ function estimateTokenCount(text) {
 function errMessage4(err) {
   return err instanceof Error ? err.message : String(err);
 }
-function runExternalAgents(bin, args, label, timeoutMs, spawn6) {
+function runExternalAgents(bin, args, label, timeoutMs, spawn7) {
   return new Promise((resolve2) => {
     let settled = false;
     const timerRef = { id: void 0 };
@@ -46163,7 +46372,7 @@ function runExternalAgents(bin, args, label, timeoutMs, spawn6) {
     };
     let child;
     try {
-      child = spawn6(bin, args, options);
+      child = spawn7(bin, args, options);
     } catch (err) {
       finish({ code: null, stdout: "", error: `spawn ${bin} failed: ${errMessage4(err)}` });
       return;
@@ -46183,7 +46392,7 @@ function runExternalAgents(bin, args, label, timeoutMs, spawn6) {
   });
 }
 async function pickPanel(input, deps) {
-  const spawn6 = deps?.spawn ?? import_node_child_process11.spawn;
+  const spawn7 = deps?.spawn ?? import_node_child_process11.spawn;
   const { command, prefixArgs } = resolveExternalAgentsCliInvocation(deps?.externalAgentsBin);
   const args = [
     "pick",
@@ -46196,7 +46405,7 @@ async function pickPanel(input, deps) {
     "--exclude-providers",
     input.excludeProvider
   ];
-  const r = await runExternalAgents(command, [...prefixArgs, ...args], "pick", input.timeoutMs, spawn6);
+  const r = await runExternalAgents(command, [...prefixArgs, ...args], "pick", input.timeoutMs, spawn7);
   if (r.error) return { ok: false, error: r.error };
   if (r.code === 3) return { ok: true, agents: [] };
   if (r.code !== 0) return { ok: false, error: `external-agents pick exited ${r.code}` };
@@ -46230,10 +46439,10 @@ function parseDispatch(agentId, stdout, exitCode) {
   return { ok: true, text: parsed.text, usage };
 }
 async function dispatchHead(agentId, prompt, timeoutMs, deps) {
-  const spawn6 = deps?.spawn ?? import_node_child_process11.spawn;
+  const spawn7 = deps?.spawn ?? import_node_child_process11.spawn;
   const { command, prefixArgs } = resolveExternalAgentsCliInvocation(deps?.externalAgentsBin);
   const args = ["dispatch", agentId, "--json", prompt];
-  const r = await runExternalAgents(command, [...prefixArgs, ...args], "dispatch", timeoutMs, spawn6);
+  const r = await runExternalAgents(command, [...prefixArgs, ...args], "dispatch", timeoutMs, spawn7);
   if (r.error) return { ok: false, error: r.error };
   return parseDispatch(agentId, r.stdout, r.code);
 }
@@ -57560,12 +57769,155 @@ async function verifyProviderReadiness(provider, run3, opts = {}) {
   return { ready, checks, details };
 }
 
+// src/browser-interceptor.ts
+var import_node_readline = __toESM(require("node:readline"), 1);
+var import_node_child_process14 = require("node:child_process");
+var INTERNAL_HOST_PATTERNS = [
+  /^(?:.*\.)?mrrlin\.(?:com|internal|local)$/i,
+  /^(?:localhost|127\.0\.0\.1)(?::\d+)?$/i
+];
+var INTERNAL_ROUTE_PREFIXES = [
+  "/wiki",
+  "/deliverables",
+  "/specs",
+  "/items",
+  "/memory",
+  "/tasks",
+  "/autopilot",
+  "/settings"
+];
+function isInternalMrrlinUrl(urlString) {
+  if (!urlString || typeof urlString !== "string") {
+    return { isInternal: false };
+  }
+  const trimmed = urlString.trim();
+  try {
+    const isRelative = trimmed.startsWith("/");
+    const parsedPathname = isRelative ? (trimmed.split("?")[0] ?? "").split("#")[0] ?? "" : "";
+    const parsed = isRelative ? { pathname: parsedPathname, hostname: "localhost" } : new URL(trimmed);
+    const isInternalHost = isRelative || INTERNAL_HOST_PATTERNS.some((p) => p.test(parsed.hostname));
+    if (!isInternalHost) {
+      return { isInternal: false };
+    }
+    const pathname = (parsed.pathname ?? "").toLowerCase();
+    const matchedPrefix = INTERNAL_ROUTE_PREFIXES.find(
+      (prefix) => pathname === prefix || pathname.startsWith(`${prefix}/`)
+    );
+    if (matchedPrefix) {
+      let suggestedTool = "get_wiki_page / search_wiki_pages";
+      if (matchedPrefix === "/items" || matchedPrefix === "/deliverables" || matchedPrefix === "/tasks") {
+        suggestedTool = "get_task / list_tasks";
+      } else if (matchedPrefix === "/autopilot") {
+        suggestedTool = "list_inbox_items (filtering kind='handoff') / list_tasks";
+      }
+      return {
+        isInternal: true,
+        reason: `Route '${matchedPrefix}' belongs to internal Mrrlin domain/state.`,
+        suggestedTool
+      };
+    }
+  } catch {
+  }
+  return { isInternal: false };
+}
+function formatInternalRouteRejectionMessage(url2, suggestedTool) {
+  return `[Preflight Guard] Refused to navigate browser to internal route "${url2}". Internal entities must be accessed via fast typed MCP tools directly against the database/API. Suggested tool: ${suggestedTool}. Do NOT open Chromium for internal data retrieval. If browser rendering is strictly required for visual UI testing, pass force_internal: true.`;
+}
+function interceptJsonRpcLine(rawLine) {
+  const trimmed = rawLine.trim();
+  if (!trimmed) return null;
+  try {
+    const msg = JSON.parse(trimmed);
+    if (msg && msg.jsonrpc === "2.0" && msg.method === "tools/call" && msg.params?.name === "browser_navigate") {
+      const args = msg.params.arguments;
+      const url2 = typeof args?.url === "string" ? args.url : "";
+      const forceInternal = Boolean(args?.force_internal);
+      if (!forceInternal && url2) {
+        const check2 = isInternalMrrlinUrl(url2);
+        if (check2.isInternal) {
+          const rejectionText = formatInternalRouteRejectionMessage(
+            url2,
+            check2.suggestedTool ?? "get_wiki_page / get_task"
+          );
+          return JSON.stringify({
+            jsonrpc: "2.0",
+            id: msg.id,
+            result: {
+              isError: true,
+              content: [
+                {
+                  type: "text",
+                  text: rejectionText
+                }
+              ]
+            }
+          });
+        }
+      }
+    }
+  } catch {
+  }
+  return null;
+}
+function wireBrowserServeProxy(streams) {
+  const { input, output: output3, childIn, childOut } = streams;
+  const rl = import_node_readline.default.createInterface({
+    input,
+    crlfDelay: Infinity,
+    terminal: false
+  });
+  rl.on("line", (line) => {
+    const intercepted = interceptJsonRpcLine(line);
+    if (intercepted) {
+      output3.write(intercepted + "\n");
+    } else {
+      childIn.write(line + "\n");
+    }
+  });
+  rl.on("close", () => {
+    try {
+      childIn.end();
+    } catch {
+    }
+  });
+  childOut.on("data", (chunk) => {
+    output3.write(chunk);
+  });
+}
+async function runBrowserServeProxy(opts) {
+  const input = opts.input ?? process.stdin;
+  const output3 = opts.output ?? process.stdout;
+  const child = (0, import_node_child_process14.spawn)(opts.command, opts.args, {
+    stdio: ["pipe", "pipe", "inherit"],
+    env: { ...process.env, ...opts.env }
+  });
+  if (!child.stdin || !child.stdout) {
+    throw new Error("Failed to open stdio pipes to @playwright/mcp child process");
+  }
+  wireBrowserServeProxy({
+    input,
+    output: output3,
+    childIn: child.stdin,
+    childOut: child.stdout
+  });
+  return new Promise((resolve2) => {
+    child.on("close", (code) => {
+      resolve2(code ?? 0);
+    });
+    child.on("error", (err) => {
+      process.stderr.write(`[browser-serve proxy error]: ${err.message}
+`);
+      resolve2(1);
+    });
+  });
+}
+
 // src/director-bridge.ts
 var import_node_fs23 = __toESM(require("node:fs"), 1);
 var import_node_http = __toESM(require("node:http"), 1);
 var import_node_os17 = __toESM(require("node:os"), 1);
 var import_node_path38 = __toESM(require("node:path"), 1);
-var import_node_child_process21 = require("node:child_process");
+var import_node_child_process22 = require("node:child_process");
 var import_node_crypto16 = __toESM(require("node:crypto"), 1);
 
 // src/turn-replay-buffer.ts
@@ -58110,14 +58462,14 @@ function createTurnLock() {
 }
 
 // src/self-update.ts
-var import_node_child_process15 = require("node:child_process");
+var import_node_child_process16 = require("node:child_process");
 var import_node_crypto10 = require("node:crypto");
 var import_node_fs12 = require("node:fs");
 var import_node_path21 = __toESM(require("node:path"), 1);
 var import_semver3 = __toESM(require_semver2(), 1);
 
 // src/codex-auth-preflight.ts
-var import_node_child_process14 = require("node:child_process");
+var import_node_child_process15 = require("node:child_process");
 var import_node_fs11 = require("node:fs");
 var import_node_os12 = __toESM(require("node:os"), 1);
 var import_node_path20 = __toESM(require("node:path"), 1);
@@ -58208,7 +58560,7 @@ function runCodexAuthRefreshSmokeForBridgeUpdate(opts = {}) {
     CODEX_AUTH_SMOKE_PROMPT
   ];
   const command = commandForSmoke(executable, model);
-  const execFileSync5 = opts.execFileSyncImpl ?? import_node_child_process14.execFileSync;
+  const execFileSync5 = opts.execFileSyncImpl ?? import_node_child_process15.execFileSync;
   try {
     execFileSync5(executable, args, {
       cwd,
@@ -58364,7 +58716,7 @@ function resolveBinPath(opts) {
   }
   const whichSync = opts.whichSync ?? ((name) => {
     try {
-      return (0, import_node_child_process15.execFileSync)("which", [name], { encoding: "utf8", timeout: 3e3 }).trim() || null;
+      return (0, import_node_child_process16.execFileSync)("which", [name], { encoding: "utf8", timeout: 3e3 }).trim() || null;
     } catch {
       return null;
     }
@@ -58695,7 +59047,7 @@ Do NOT derail the current task - if the operator has an in-flight question, answ
 }
 
 // src/_generated/version.ts
-var PKG_VERSION = "0.4.98";
+var PKG_VERSION = "0.4.100";
 
 // src/director-closure.ts
 var CLOSURE_SNAPSHOT_TIMEOUT_MS = 2e3;
@@ -60822,7 +61174,7 @@ async function collectAgentPoolSnapshot(deps) {
 }
 
 // src/external-agents-spawn.ts
-var import_node_child_process16 = require("node:child_process");
+var import_node_child_process17 = require("node:child_process");
 function runExternalAgentsCli(args, opts) {
   let command;
   let prefixArgs;
@@ -60853,7 +61205,7 @@ function runExternalAgentsCli(args, opts) {
     };
     let spawned;
     try {
-      spawned = (0, import_node_child_process16.spawn)(command, [...prefixArgs, ...args], { stdio: stdioConfig });
+      spawned = (0, import_node_child_process17.spawn)(command, [...prefixArgs, ...args], { stdio: stdioConfig });
     } catch {
       done(1);
       return;
@@ -60965,14 +61317,14 @@ function startAgentPoolLoop(deps) {
 }
 
 // src/provider-readiness-loop.ts
-var import_node_child_process17 = require("node:child_process");
+var import_node_child_process18 = require("node:child_process");
 var DEFAULT_INTERVAL_MS3 = 6e4;
 function providerReadinessLoopDisabled(env = process.env) {
   return env["MRRLIN_BRIDGE_PROVIDER_READINESS_DISABLE"] === "1";
 }
 function defaultRunnerFor(command) {
   return (args) => {
-    const r = (0, import_node_child_process17.spawnSync)(command, args, { encoding: "utf8", timeout: 8e3 });
+    const r = (0, import_node_child_process18.spawnSync)(command, args, { encoding: "utf8", timeout: 8e3 });
     return { status: r.status, stdout: r.stdout ?? "", stderr: r.stderr ?? "" };
   };
 }
@@ -61015,7 +61367,7 @@ function startProviderReadinessLoop(deps) {
 }
 
 // src/execution-consumer.ts
-var import_node_child_process19 = require("node:child_process");
+var import_node_child_process20 = require("node:child_process");
 var import_node_crypto14 = __toESM(require("node:crypto"), 1);
 var import_node_path31 = __toESM(require("node:path"), 1);
 var import_node_util2 = require("node:util");
@@ -61871,7 +62223,7 @@ async function awaitTurnWithDeadline(opts) {
 }
 
 // src/worktree.ts
-var import_node_child_process18 = require("node:child_process");
+var import_node_child_process19 = require("node:child_process");
 var import_node_crypto13 = require("node:crypto");
 var import_node_fs17 = require("node:fs");
 var import_node_path30 = require("node:path");
@@ -61899,7 +62251,7 @@ async function withCheckoutLock(locksDir, slug, fn) {
 function worktreeBranch(runId) {
   return `mrrlin/run-${runId}`;
 }
-var defaultGitExec = (args, env) => (0, import_node_child_process18.execFileSync)("git", args, { encoding: "utf8", timeout: 3e4, env });
+var defaultGitExec = (args, env) => (0, import_node_child_process19.execFileSync)("git", args, { encoding: "utf8", timeout: 3e4, env });
 function disabledGitHooksPath(locksDir, scope) {
   const scopeKey = (0, import_node_crypto13.createHash)("sha256").update(scope).digest("hex").slice(0, 32);
   return (0, import_node_path30.resolve)(locksDir, "..", "disabled-git-hooks", scopeKey);
@@ -61936,7 +62288,7 @@ function withDisabledGitHooksEnv(env, hooksDir) {
   };
 }
 function git(checkout, args, hooksDir) {
-  return (0, import_node_child_process18.execFileSync)("git", ["-C", checkout, "-c", `core.hooksPath=${hooksDir}`, ...args], {
+  return (0, import_node_child_process19.execFileSync)("git", ["-C", checkout, "-c", `core.hooksPath=${hooksDir}`, ...args], {
     encoding: "utf8",
     timeout: 3e4,
     env: { ...process.env, GIT_TERMINAL_PROMPT: "0" }
@@ -62624,7 +62976,7 @@ var BLAST_RADIUS_FLOOR_PATTERNS = [/^supabase\/migrations\//, /^packages\/db\/sr
 function isBlastRadiusFloorPath(path29) {
   return BLAST_RADIUS_FLOOR_PATTERNS.some((re) => re.test(path29));
 }
-var execFileAsync2 = (0, import_node_util2.promisify)(import_node_child_process19.execFile);
+var execFileAsync2 = (0, import_node_util2.promisify)(import_node_child_process20.execFile);
 async function defaultListRunDiffPaths(opts) {
   const parse8 = (stdout) => stdout.split("\n").map((line) => line.trim()).filter((line) => line.length > 0);
   try {
@@ -68961,14 +69313,14 @@ async function renderPairingQrSvg(payload) {
 }
 
 // src/executor-server.ts
-var import_node_child_process20 = require("node:child_process");
+var import_node_child_process21 = require("node:child_process");
 function defaultReadinessRunner(provider) {
   if (provider !== "codex" && provider !== "claude" && provider !== "agy") {
     throw new Error(`unsupported executor provider: ${String(provider)}`);
   }
   const command = provider === "claude" ? "claude" : provider === "agy" ? "agy" : "codex";
   return (args) => {
-    const r = (0, import_node_child_process20.spawnSync)(command, args, { encoding: "utf8", timeout: 8e3, shell: true });
+    const r = (0, import_node_child_process21.spawnSync)(command, args, { encoding: "utf8", timeout: 8e3, shell: true });
     return { status: r.status, stdout: r.stdout ?? "", stderr: r.stderr ?? "" };
   };
 }
@@ -69111,7 +69463,7 @@ function createSelfReviewTurn(deps) {
 
 // src/director-reseed.ts
 var import_node_fs21 = require("node:fs");
-var import_node_readline = require("node:readline");
+var import_node_readline2 = require("node:readline");
 var import_node_path35 = require("node:path");
 function estimateTokens(s) {
   return Buffer.byteLength(s, "utf8");
@@ -69264,7 +69616,7 @@ async function readSessionRows(logsDir, files, sessionIds) {
     const filePath = (0, import_node_path35.join)(logsDir, f);
     try {
       const stream = (0, import_node_fs21.createReadStream)(filePath, { encoding: "utf8" });
-      const rl = (0, import_node_readline.createInterface)({ input: stream, crlfDelay: Infinity });
+      const rl = (0, import_node_readline2.createInterface)({ input: stream, crlfDelay: Infinity });
       try {
         for await (const line of rl) {
           if (line.trim() === "") continue;
@@ -69837,7 +70189,7 @@ function neutralCheckoutCwd(stateDir) {
     import_node_fs23.default.mkdirSync(dir, { recursive: true });
     if (!import_node_fs23.default.existsSync(import_node_path38.default.join(dir, ".git"))) {
       try {
-        (0, import_node_child_process21.spawnSync)("git", ["init", "-b", "main"], { cwd: dir, stdio: "ignore" });
+        (0, import_node_child_process22.spawnSync)("git", ["init", "-b", "main"], { cwd: dir, stdio: "ignore" });
       } catch {
       }
     }
@@ -70348,7 +70700,7 @@ function resolveDefaultBranch(checkoutPath) {
   if (!checkoutPath) return "main";
   const runGit = (args) => {
     try {
-      return (0, import_node_child_process21.execFileSync)("git", ["-C", checkoutPath, ...args], {
+      return (0, import_node_child_process22.execFileSync)("git", ["-C", checkoutPath, ...args], {
         encoding: "utf8",
         stdio: ["ignore", "pipe", "ignore"],
         timeout: 15e3,
@@ -72116,7 +72468,7 @@ function parseConfig() {
 }
 function scanForOtherBridges() {
   try {
-    const result = (0, import_node_child_process21.spawnSync)("pgrep", ["-f", "mrrlin-mcp director-bridge"], {
+    const result = (0, import_node_child_process22.spawnSync)("pgrep", ["-f", "mrrlin-mcp director-bridge"], {
       encoding: "utf8"
     });
     if (result.status !== 0) return [];
@@ -74828,13 +75180,13 @@ function augmentProcessPathWithCommonDirs() {
 }
 augmentProcessPathWithCommonDirs();
 function pm2Runner(args) {
-  const r = (0, import_node_child_process22.spawnSync)("pm2", args, { encoding: "utf8" });
+  const r = (0, import_node_child_process23.spawnSync)("pm2", args, { encoding: "utf8" });
   process.stderr.write(r.stdout ?? "");
   process.stderr.write(r.stderr ?? "");
   return { code: r.status ?? 1, stdout: r.stdout ?? "" };
 }
 function whichBin(bin) {
-  const r = (0, import_node_child_process22.spawnSync)("which", [bin], { encoding: "utf8" });
+  const r = (0, import_node_child_process23.spawnSync)("which", [bin], { encoding: "utf8" });
   const out = (r.stdout ?? "").trim();
   return r.status === 0 && out ? out.split("\n")[0] ?? null : null;
 }
@@ -74849,7 +75201,7 @@ function bootHookStatus() {
     { label: "com.PM2", plist: import_node_path43.default.join(agents, `pm2.${(0, import_node_os20.userInfo)().username}.plist`) }
   ];
   for (const candidate of candidates) {
-    const printed = (0, import_node_child_process22.spawnSync)("launchctl", ["print", `gui/${uid}/${candidate.label}`], { encoding: "utf8" });
+    const printed = (0, import_node_child_process23.spawnSync)("launchctl", ["print", `gui/${uid}/${candidate.label}`], { encoding: "utf8" });
     if (printed.status !== 0) continue;
     if (!(0, import_node_fs25.existsSync)(candidate.plist)) continue;
     const out = printed.stdout ?? "";
@@ -75063,8 +75415,8 @@ async function main() {
         );
       }
       const { command: command2, args, env } = browserServeArgs();
-      const r = (0, import_node_child_process22.spawnSync)(command2, args, { stdio: "inherit", env: { ...process.env, ...env } });
-      process.exitCode = r.status ?? 1;
+      const exitCode = await runBrowserServeProxy({ command: command2, args, env });
+      process.exitCode = exitCode;
       return;
     }
     case "browser-status": {
@@ -75074,7 +75426,7 @@ async function main() {
     }
     case "external-agents-serve": {
       const { command: command2, args } = externalAgentsServeArgs();
-      const r = (0, import_node_child_process22.spawnSync)(command2, args, { stdio: "inherit", env: process.env });
+      const r = (0, import_node_child_process23.spawnSync)(command2, args, { stdio: "inherit", env: process.env });
       process.exitCode = r.status ?? 1;
       return;
     }
@@ -75151,7 +75503,7 @@ async function main() {
         );
       }
       const realProviderRunner = (command2) => (args) => {
-        const r = (0, import_node_child_process22.spawnSync)(command2, args, { encoding: "utf8", timeout: 8e3 });
+        const r = (0, import_node_child_process23.spawnSync)(command2, args, { encoding: "utf8", timeout: 8e3 });
         return { status: r.status, stdout: r.stdout ?? "", stderr: r.stderr ?? "" };
       };
       for (const provider of ["codex", "claude", "agy"]) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mrrlin-dev/mcp",
-  "version": "0.4.98",
+  "version": "0.4.100",
   "type": "module",
   "bin": {
     "mrrlin-mcp": "dist/bin.cjs"