@mrrlin-dev/mcp 0.4.99 → 0.4.101

package/dist/bin.cjs

@@ -9776,7 +9776,7 @@ var require_cross_spawn = __commonJS({
     var cp = require("child_process");
     var parse8 = require_parse2();
     var enoent = require_enoent();
-    function spawn6(command, args, options) {
+    function spawn7(command, args, options) {
       const parsed = parse8(command, args, options);
       const spawned = cp.spawn(parsed.command, parsed.args, parsed.options);
       enoent.hookChildProcess(spawned, parsed);
@@ -9788,8 +9788,8 @@ var require_cross_spawn = __commonJS({
       result.error = result.error || enoent.verifyENOENTSync(result.status, parsed);
       return result;
     }
-    module2.exports = spawn6;
-    module2.exports.spawn = spawn6;
+    module2.exports = spawn7;
+    module2.exports.spawn = spawn7;
     module2.exports.sync = spawnSync7;
     module2.exports._parse = parse8;
     module2.exports._enoent = enoent;
@@ -21593,7 +21593,7 @@ args = ${JSON.stringify(expected.args)}
   return tomlStr;
 }
 async function installPublicMcpServerToConfigs(serverId, expected) {
-  const homeDir = import_node_os16.default.homedir();
+  const homeDir = import_node_os17.default.homedir();
   const claudePath = import_node_path37.default.join(homeDir, ".claude.json");
   if (await pathExists5(claudePath)) {
     try {
@@ -21644,12 +21644,12 @@ async function installPublicMcpServerToConfigs(serverId, expected) {
     await writeAtomic(agyPath, JSON.stringify({ mcpServers: { [serverId]: expected } }, null, 2) + "\n");
   }
 }
-var import_promises15, import_node_os16, import_node_path37, toml4;
+var import_promises15, import_node_os17, import_node_path37, toml4;
 var init_install_public_mcp = __esm({
   "src/install-public-mcp.ts"() {
     "use strict";
     import_promises15 = __toESM(require("node:fs/promises"), 1);
-    import_node_os16 = __toESM(require("node:os"), 1);
+    import_node_os17 = __toESM(require("node:os"), 1);
     import_node_path37 = __toESM(require("node:path"), 1);
     toml4 = __toESM(require_toml(), 1);
   }
@@ -21662,9 +21662,9 @@ __export(bin_exports, {
 });
 module.exports = __toCommonJS(bin_exports);
 var import_node_path42 = __toESM(require("node:path"), 1);
-var import_node_child_process22 = require("node:child_process");
+var import_node_child_process23 = require("node:child_process");
 var import_node_fs25 = require("node:fs");
-var import_node_os20 = require("node:os");
+var import_node_os21 = require("node:os");
 var import_node_path43 = __toESM(require("node:path"), 1);
 
 // src/install-codex.ts
@@ -44765,7 +44765,7 @@ function firstString(...values) {
   return null;
 }
 function runCodexExec(input, deps) {
-  const spawn6 = deps?.spawn ?? import_node_child_process6.spawn;
+  const spawn7 = deps?.spawn ?? import_node_child_process6.spawn;
   const executable = input.codexExecutable ?? "codex";
   const sandbox = input.sandbox ?? "read-only";
   const fullPrompt = input.developerInstructions.trim() ? `${input.developerInstructions.trim()}
@@ -44811,7 +44811,7 @@ ${input.prompt}` : input.prompt;
     }
     let child;
     try {
-      child = spawn6(spawnCmd, spawnArgs, options);
+      child = spawn7(spawnCmd, spawnArgs, options);
     } catch (err) {
       finish({ ok: false, error: `Failed to spawn codex exec: ${errMessage(err)}` });
       return;
@@ -44854,7 +44854,7 @@ function errMessage(err) {
 // ../../packages/agent-client/dist/providers/claude/exec.js
 var import_node_child_process7 = require("node:child_process");
 function runClaudeExec(input, deps) {
-  const spawn6 = deps?.spawn ?? import_node_child_process7.spawn;
+  const spawn7 = deps?.spawn ?? import_node_child_process7.spawn;
   const executable = input.codexExecutable ?? "claude";
   const args = ["--print", "--output-format", "json", "--strict-mcp-config"];
   if (input.mcpConfig) {
@@ -44898,7 +44898,7 @@ function runClaudeExec(input, deps) {
     }
     let child;
     try {
-      child = spawn6(spawnCmd, spawnArgs, options);
+      child = spawn7(spawnCmd, spawnArgs, options);
     } catch (err) {
       finish({ ok: false, error: `Failed to spawn ${executable} exec: ${errMessage2(err)}` });
       return;
@@ -44966,7 +44966,7 @@ function errMessage2(err) {
 // ../../packages/agent-client/dist/providers/agy/exec.js
 var import_node_child_process8 = require("node:child_process");
 function runAgyExec(input, deps) {
-  const spawn6 = deps?.spawn ?? import_node_child_process8.spawn;
+  const spawn7 = deps?.spawn ?? import_node_child_process8.spawn;
   const executable = input.codexExecutable ?? "agy";
   const args = ["--output-format", "json"];
   if (input.sandbox === "read-only") {
@@ -45019,7 +45019,7 @@ function runAgyExec(input, deps) {
     }
     let child;
     try {
-      child = spawn6(spawnCmd, spawnArgs, options);
+      child = spawn7(spawnCmd, spawnArgs, options);
     } catch (err) {
       finish({ ok: false, error: `Failed to spawn ${executable} exec: ${err instanceof Error ? err.message : String(err)}` });
       return;
@@ -46267,7 +46267,7 @@ var DEFAULT_STATUS_TIMEOUT_MS = 1e4;
 function errMessage3(err) {
   return err instanceof Error ? err.message : String(err);
 }
-function runExternalAgentsStatus(bin, args, timeoutMs, spawn6) {
+function runExternalAgentsStatus(bin, args, timeoutMs, spawn7) {
   return new Promise((resolve2) => {
     let settled = false;
     const timerRef = { id: void 0 };
@@ -46280,7 +46280,7 @@ function runExternalAgentsStatus(bin, args, timeoutMs, spawn6) {
     const options = { stdio: ["ignore", "pipe", "pipe"], env: process.env, shell: false };
     let child;
     try {
-      child = spawn6(bin, args, options);
+      child = spawn7(bin, args, options);
     } catch (err) {
       finish({ stdout: "", error: `spawn ${bin} failed: ${errMessage3(err)}` });
       return;
@@ -46304,13 +46304,13 @@ function runExternalAgentsStatus(bin, args, timeoutMs, spawn6) {
   });
 }
 async function fetchRegistrySnapshot(deps) {
-  const spawn6 = deps?.spawn ?? import_node_child_process10.spawn;
+  const spawn7 = deps?.spawn ?? import_node_child_process10.spawn;
   const { command, prefixArgs } = resolveExternalAgentsCliInvocation(deps?.externalAgentsBin);
   const { stdout, error: error51 } = await runExternalAgentsStatus(
     command,
     [...prefixArgs, "status", "--json"],
     deps?.statusTimeoutMs ?? DEFAULT_STATUS_TIMEOUT_MS,
-    spawn6
+    spawn7
   );
   if (error51) return { ok: false, error: error51 };
   try {
@@ -46354,7 +46354,7 @@ function estimateTokenCount(text) {
 function errMessage4(err) {
   return err instanceof Error ? err.message : String(err);
 }
-function runExternalAgents(bin, args, label, timeoutMs, spawn6) {
+function runExternalAgents(bin, args, label, timeoutMs, spawn7) {
   return new Promise((resolve2) => {
     let settled = false;
     const timerRef = { id: void 0 };
@@ -46372,7 +46372,7 @@ function runExternalAgents(bin, args, label, timeoutMs, spawn6) {
     };
     let child;
     try {
-      child = spawn6(bin, args, options);
+      child = spawn7(bin, args, options);
     } catch (err) {
       finish({ code: null, stdout: "", error: `spawn ${bin} failed: ${errMessage4(err)}` });
       return;
@@ -46392,7 +46392,7 @@ function runExternalAgents(bin, args, label, timeoutMs, spawn6) {
   });
 }
 async function pickPanel(input, deps) {
-  const spawn6 = deps?.spawn ?? import_node_child_process11.spawn;
+  const spawn7 = deps?.spawn ?? import_node_child_process11.spawn;
   const { command, prefixArgs } = resolveExternalAgentsCliInvocation(deps?.externalAgentsBin);
   const args = [
     "pick",
@@ -46405,7 +46405,7 @@ async function pickPanel(input, deps) {
     "--exclude-providers",
     input.excludeProvider
   ];
-  const r = await runExternalAgents(command, [...prefixArgs, ...args], "pick", input.timeoutMs, spawn6);
+  const r = await runExternalAgents(command, [...prefixArgs, ...args], "pick", input.timeoutMs, spawn7);
   if (r.error) return { ok: false, error: r.error };
   if (r.code === 3) return { ok: true, agents: [] };
   if (r.code !== 0) return { ok: false, error: `external-agents pick exited ${r.code}` };
@@ -46439,10 +46439,10 @@ function parseDispatch(agentId, stdout, exitCode) {
   return { ok: true, text: parsed.text, usage };
 }
 async function dispatchHead(agentId, prompt, timeoutMs, deps) {
-  const spawn6 = deps?.spawn ?? import_node_child_process11.spawn;
+  const spawn7 = deps?.spawn ?? import_node_child_process11.spawn;
   const { command, prefixArgs } = resolveExternalAgentsCliInvocation(deps?.externalAgentsBin);
   const args = ["dispatch", agentId, "--json", prompt];
-  const r = await runExternalAgents(command, [...prefixArgs, ...args], "dispatch", timeoutMs, spawn6);
+  const r = await runExternalAgents(command, [...prefixArgs, ...args], "dispatch", timeoutMs, spawn7);
   if (r.error) return { ok: false, error: r.error };
   return parseDispatch(agentId, r.stdout, r.code);
 }
@@ -57769,12 +57769,242 @@ async function verifyProviderReadiness(provider, run3, opts = {}) {
   return { ready, checks, details };
 }
 
+// src/browser-interceptor.ts
+var import_node_os12 = __toESM(require("node:os"), 1);
+var import_node_readline = __toESM(require("node:readline"), 1);
+var import_node_child_process14 = require("node:child_process");
+var INTERNAL_HOST_PATTERNS = [
+  /^(?:.*\.)?mrrlin\.(?:com|internal|local)$/i,
+  /^(?:localhost|127\.0\.0\.1)(?::\d+)?$/i
+];
+var INTERNAL_ROUTE_PREFIXES = [
+  "/wiki",
+  "/deliverables",
+  "/specs",
+  "/items",
+  "/memory",
+  "/tasks",
+  "/autopilot",
+  "/settings"
+];
+function isInternalMrrlinUrl(urlString) {
+  if (!urlString || typeof urlString !== "string") {
+    return { isInternal: false };
+  }
+  const trimmed = urlString.trim();
+  try {
+    const isRelative = trimmed.startsWith("/");
+    const parsed = isRelative ? new URL(trimmed, "http://localhost") : new URL(trimmed);
+    const isInternalHost = isRelative || INTERNAL_HOST_PATTERNS.some((p) => p.test(parsed.hostname));
+    if (!isInternalHost) {
+      return { isInternal: false };
+    }
+    const pathname = (parsed.pathname ?? "").toLowerCase();
+    const matchedPrefix = INTERNAL_ROUTE_PREFIXES.find(
+      (prefix) => pathname === prefix || pathname.startsWith(`${prefix}/`)
+    );
+    if (matchedPrefix) {
+      let suggestedTool = "get_wiki_page / search_wiki_pages";
+      if (matchedPrefix === "/items" || matchedPrefix === "/deliverables" || matchedPrefix === "/tasks") {
+        suggestedTool = "get_task / list_tasks";
+      } else if (matchedPrefix === "/autopilot") {
+        suggestedTool = "list_inbox_items (filtering kind='handoff') / list_tasks";
+      }
+      return {
+        isInternal: true,
+        reason: `Route '${matchedPrefix}' belongs to internal Mrrlin domain/state.`,
+        suggestedTool
+      };
+    }
+  } catch {
+  }
+  return { isInternal: false };
+}
+function formatInternalRouteRejectionMessage(url2, suggestedTool) {
+  return `[Preflight Guard] Refused to navigate browser to internal route "${url2}". Internal entities must be accessed via fast typed MCP tools directly against the database/API. Suggested tool: ${suggestedTool}. Do NOT open Chromium for internal data retrieval. If browser rendering is strictly required for visual UI testing, pass force_internal: true.`;
+}
+function processClientJsonRpcLine(rawLine) {
+  const trimmed = rawLine.trim();
+  if (!trimmed) return { type: "forward", payload: rawLine };
+  try {
+    const msg = JSON.parse(trimmed);
+    if (msg && msg.jsonrpc === "2.0" && msg.method === "tools/call" && msg.params?.name === "browser_navigate") {
+      const args = msg.params.arguments;
+      const url2 = typeof args?.url === "string" ? args.url : "";
+      const forceInternal = args?.force_internal === true;
+      const hadForceInternal = args && typeof args === "object" && "force_internal" in args;
+      if (hadForceInternal) {
+        delete args.force_internal;
+      }
+      if (forceInternal) {
+        return { type: "forward", payload: JSON.stringify(msg) };
+      }
+      if (url2) {
+        const check2 = isInternalMrrlinUrl(url2);
+        if (check2.isInternal) {
+          const rejectionText = formatInternalRouteRejectionMessage(
+            url2,
+            check2.suggestedTool ?? "get_wiki_page / get_task"
+          );
+          return {
+            type: "respond",
+            payload: JSON.stringify({
+              jsonrpc: "2.0",
+              id: msg.id,
+              result: {
+                isError: true,
+                content: [
+                  {
+                    type: "text",
+                    text: rejectionText
+                  }
+                ]
+              }
+            })
+          };
+        }
+      }
+      if (hadForceInternal) {
+        return { type: "forward", payload: JSON.stringify(msg) };
+      }
+    }
+  } catch {
+  }
+  return { type: "forward", payload: rawLine };
+}
+function processChildJsonRpcLine(rawLine) {
+  const trimmed = rawLine.trim();
+  if (!trimmed) return rawLine;
+  try {
+    const msg = JSON.parse(trimmed);
+    if (msg && msg.result && Array.isArray(msg.result.tools)) {
+      const navTool = msg.result.tools.find((t) => t.name === "browser_navigate");
+      if (navTool && navTool.inputSchema) {
+        if (!navTool.inputSchema.properties) {
+          navTool.inputSchema.properties = {};
+        }
+        navTool.inputSchema.properties.force_internal = {
+          type: "boolean",
+          description: "Bypass the preflight guard for internal Mrrlin routes when visual browser rendering is strictly required."
+        };
+        return JSON.stringify(msg);
+      }
+    }
+  } catch {
+  }
+  return rawLine;
+}
+function wireBrowserServeProxy(streams) {
+  const { input, output: output3, childIn, childOut } = streams;
+  childIn.on("error", () => {
+  });
+  const rl = import_node_readline.default.createInterface({
+    input,
+    crlfDelay: Infinity,
+    terminal: false
+  });
+  const childRl = import_node_readline.default.createInterface({
+    input: childOut,
+    crlfDelay: Infinity,
+    terminal: false
+  });
+  rl.on("line", (line) => {
+    const action = processClientJsonRpcLine(line);
+    if (action.type === "respond") {
+      output3.write(action.payload + "\n");
+    } else {
+      try {
+        childIn.write(action.payload + "\n");
+      } catch {
+      }
+    }
+  });
+  childRl.on("line", (line) => {
+    const augmented = processChildJsonRpcLine(line);
+    try {
+      output3.write(augmented + "\n");
+    } catch {
+    }
+  });
+  const close = () => {
+    rl.close();
+    childRl.close();
+    try {
+      childIn.end();
+    } catch {
+    }
+  };
+  rl.on("close", () => {
+    try {
+      childIn.end();
+    } catch {
+    }
+  });
+  return { close };
+}
+function signalToExitCode(signal) {
+  if (!signal) return 1;
+  const sigNum = import_node_os12.default.constants.signals[signal];
+  if (typeof sigNum === "number") {
+    return 128 + sigNum;
+  }
+  return 128 + 15;
+}
+async function runBrowserServeProxy(opts) {
+  const input = opts.input ?? process.stdin;
+  const output3 = opts.output ?? process.stdout;
+  const child = (0, import_node_child_process14.spawn)(opts.command, opts.args, {
+    stdio: ["pipe", "pipe", "inherit"],
+    env: { ...process.env, ...opts.env }
+  });
+  if (!child.stdin || !child.stdout) {
+    throw new Error("Failed to open stdio pipes to @playwright/mcp child process");
+  }
+  const proxy = wireBrowserServeProxy({
+    input,
+    output: output3,
+    childIn: child.stdin,
+    childOut: child.stdout
+  });
+  const sigintHandler = () => {
+    try {
+      child.kill("SIGINT");
+    } catch {
+    }
+  };
+  const sigtermHandler = () => {
+    try {
+      child.kill("SIGTERM");
+    } catch {
+    }
+  };
+  process.on("SIGINT", sigintHandler);
+  process.on("SIGTERM", sigtermHandler);
+  return new Promise((resolve2) => {
+    child.on("close", (code, signal) => {
+      process.off("SIGINT", sigintHandler);
+      process.off("SIGTERM", sigtermHandler);
+      proxy.close();
+      const exitCode = code !== null ? code : signalToExitCode(signal);
+      resolve2(exitCode);
+    });
+    child.on("error", (err) => {
+      process.off("SIGINT", sigintHandler);
+      process.off("SIGTERM", sigtermHandler);
+      proxy.close();
+      process.stderr.write(`[browser-serve proxy error]: ${err.message}
+`);
+      resolve2(1);
+    });
+  });
+}
+
 // src/director-bridge.ts
 var import_node_fs23 = __toESM(require("node:fs"), 1);
 var import_node_http = __toESM(require("node:http"), 1);
-var import_node_os17 = __toESM(require("node:os"), 1);
+var import_node_os18 = __toESM(require("node:os"), 1);
 var import_node_path38 = __toESM(require("node:path"), 1);
-var import_node_child_process21 = require("node:child_process");
+var import_node_child_process22 = require("node:child_process");
 var import_node_crypto16 = __toESM(require("node:crypto"), 1);
 
 // src/turn-replay-buffer.ts
@@ -58319,16 +58549,16 @@ function createTurnLock() {
 }
 
 // src/self-update.ts
-var import_node_child_process15 = require("node:child_process");
+var import_node_child_process16 = require("node:child_process");
 var import_node_crypto10 = require("node:crypto");
 var import_node_fs12 = require("node:fs");
 var import_node_path21 = __toESM(require("node:path"), 1);
 var import_semver3 = __toESM(require_semver2(), 1);
 
 // src/codex-auth-preflight.ts
-var import_node_child_process14 = require("node:child_process");
+var import_node_child_process15 = require("node:child_process");
 var import_node_fs11 = require("node:fs");
-var import_node_os12 = __toESM(require("node:os"), 1);
+var import_node_os13 = __toESM(require("node:os"), 1);
 var import_node_path20 = __toESM(require("node:path"), 1);
 var DEFAULT_CODEX_AUTH_MIN_TTL_SECONDS = 15 * 60;
 var DEFAULT_CODEX_AUTH_SMOKE_TIMEOUT_MS = 2e4;
@@ -58348,7 +58578,7 @@ function codexAuthSmokeTimeoutMs(env = process.env) {
 function resolveCodexAuthPath(opts = {}) {
   const env = opts.env ?? process.env;
   const codexHome = env.CODEX_HOME?.trim();
-  return import_node_path20.default.join(codexHome || import_node_path20.default.join(opts.homeDir ?? import_node_os12.default.homedir(), ".codex"), "auth.json");
+  return import_node_path20.default.join(codexHome || import_node_path20.default.join(opts.homeDir ?? import_node_os13.default.homedir(), ".codex"), "auth.json");
 }
 function decodeJwtExpMs(token) {
   const parts = token.split(".");
@@ -58406,7 +58636,7 @@ function runCodexAuthRefreshSmokeForBridgeUpdate(opts = {}) {
   const configuredExecutable = opts.codexExecutable ?? env.MRRLIN_DIRECTOR_BRIDGE_CODEX_BIN?.trim();
   const executable = configuredExecutable || "codex";
   const timeoutMs = opts.timeoutMs ?? codexAuthSmokeTimeoutMs(env);
-  const cwd = opts.cwd ?? import_node_os12.default.tmpdir();
+  const cwd = opts.cwd ?? import_node_os13.default.tmpdir();
   const args = [
     "exec",
     "--sandbox",
@@ -58417,7 +58647,7 @@ function runCodexAuthRefreshSmokeForBridgeUpdate(opts = {}) {
     CODEX_AUTH_SMOKE_PROMPT
   ];
   const command = commandForSmoke(executable, model);
-  const execFileSync5 = opts.execFileSyncImpl ?? import_node_child_process14.execFileSync;
+  const execFileSync5 = opts.execFileSyncImpl ?? import_node_child_process15.execFileSync;
   try {
     execFileSync5(executable, args, {
       cwd,
@@ -58573,7 +58803,7 @@ function resolveBinPath(opts) {
   }
   const whichSync = opts.whichSync ?? ((name) => {
     try {
-      return (0, import_node_child_process15.execFileSync)("which", [name], { encoding: "utf8", timeout: 3e3 }).trim() || null;
+      return (0, import_node_child_process16.execFileSync)("which", [name], { encoding: "utf8", timeout: 3e3 }).trim() || null;
     } catch {
       return null;
     }
@@ -58904,7 +59134,7 @@ Do NOT derail the current task - if the operator has an in-flight question, answ
 }
 
 // src/_generated/version.ts
-var PKG_VERSION = "0.4.99";
+var PKG_VERSION = "0.4.101";
 
 // src/director-closure.ts
 var CLOSURE_SNAPSHOT_TIMEOUT_MS = 2e3;
@@ -59618,7 +59848,7 @@ function parseLedger(value) {
 
 // src/api-base-url-migrate.ts
 var import_node_fs13 = __toESM(require("node:fs"), 1);
-var import_node_os13 = __toESM(require("node:os"), 1);
+var import_node_os14 = __toESM(require("node:os"), 1);
 var import_node_path23 = __toESM(require("node:path"), 1);
 
 // src/service-paths.ts
@@ -59696,7 +59926,7 @@ ${envLines}
 
 // src/api-base-url-migrate.ts
 function defaultDeps(deps) {
-  const home = deps.home ?? process.env.HOME ?? import_node_os13.default.homedir();
+  const home = deps.home ?? process.env.HOME ?? import_node_os14.default.homedir();
   return {
     home,
     codexHome: deps.codexHome ?? process.env.CODEX_HOME?.trim() ?? import_node_path23.default.join(home, ".codex"),
@@ -61031,7 +61261,7 @@ async function collectAgentPoolSnapshot(deps) {
 }
 
 // src/external-agents-spawn.ts
-var import_node_child_process16 = require("node:child_process");
+var import_node_child_process17 = require("node:child_process");
 function runExternalAgentsCli(args, opts) {
   let command;
   let prefixArgs;
@@ -61062,7 +61292,7 @@ function runExternalAgentsCli(args, opts) {
     };
     let spawned;
     try {
-      spawned = (0, import_node_child_process16.spawn)(command, [...prefixArgs, ...args], { stdio: stdioConfig });
+      spawned = (0, import_node_child_process17.spawn)(command, [...prefixArgs, ...args], { stdio: stdioConfig });
     } catch {
       done(1);
       return;
@@ -61174,14 +61404,14 @@ function startAgentPoolLoop(deps) {
 }
 
 // src/provider-readiness-loop.ts
-var import_node_child_process17 = require("node:child_process");
+var import_node_child_process18 = require("node:child_process");
 var DEFAULT_INTERVAL_MS3 = 6e4;
 function providerReadinessLoopDisabled(env = process.env) {
   return env["MRRLIN_BRIDGE_PROVIDER_READINESS_DISABLE"] === "1";
 }
 function defaultRunnerFor(command) {
   return (args) => {
-    const r = (0, import_node_child_process17.spawnSync)(command, args, { encoding: "utf8", timeout: 8e3 });
+    const r = (0, import_node_child_process18.spawnSync)(command, args, { encoding: "utf8", timeout: 8e3 });
     return { status: r.status, stdout: r.stdout ?? "", stderr: r.stderr ?? "" };
   };
 }
@@ -61224,7 +61454,7 @@ function startProviderReadinessLoop(deps) {
 }
 
 // src/execution-consumer.ts
-var import_node_child_process19 = require("node:child_process");
+var import_node_child_process20 = require("node:child_process");
 var import_node_crypto14 = __toESM(require("node:crypto"), 1);
 var import_node_path31 = __toESM(require("node:path"), 1);
 var import_node_util2 = require("node:util");
@@ -62080,7 +62310,7 @@ async function awaitTurnWithDeadline(opts) {
 }
 
 // src/worktree.ts
-var import_node_child_process18 = require("node:child_process");
+var import_node_child_process19 = require("node:child_process");
 var import_node_crypto13 = require("node:crypto");
 var import_node_fs17 = require("node:fs");
 var import_node_path30 = require("node:path");
@@ -62108,7 +62338,7 @@ async function withCheckoutLock(locksDir, slug, fn) {
 function worktreeBranch(runId) {
   return `mrrlin/run-${runId}`;
 }
-var defaultGitExec = (args, env) => (0, import_node_child_process18.execFileSync)("git", args, { encoding: "utf8", timeout: 3e4, env });
+var defaultGitExec = (args, env) => (0, import_node_child_process19.execFileSync)("git", args, { encoding: "utf8", timeout: 3e4, env });
 function disabledGitHooksPath(locksDir, scope) {
   const scopeKey = (0, import_node_crypto13.createHash)("sha256").update(scope).digest("hex").slice(0, 32);
   return (0, import_node_path30.resolve)(locksDir, "..", "disabled-git-hooks", scopeKey);
@@ -62145,7 +62375,7 @@ function withDisabledGitHooksEnv(env, hooksDir) {
   };
 }
 function git(checkout, args, hooksDir) {
-  return (0, import_node_child_process18.execFileSync)("git", ["-C", checkout, "-c", `core.hooksPath=${hooksDir}`, ...args], {
+  return (0, import_node_child_process19.execFileSync)("git", ["-C", checkout, "-c", `core.hooksPath=${hooksDir}`, ...args], {
     encoding: "utf8",
     timeout: 3e4,
     env: { ...process.env, GIT_TERMINAL_PROMPT: "0" }
@@ -62833,7 +63063,7 @@ var BLAST_RADIUS_FLOOR_PATTERNS = [/^supabase\/migrations\//, /^packages\/db\/sr
 function isBlastRadiusFloorPath(path29) {
   return BLAST_RADIUS_FLOOR_PATTERNS.some((re) => re.test(path29));
 }
-var execFileAsync2 = (0, import_node_util2.promisify)(import_node_child_process19.execFile);
+var execFileAsync2 = (0, import_node_util2.promisify)(import_node_child_process20.execFile);
 async function defaultListRunDiffPaths(opts) {
   const parse8 = (stdout) => stdout.split("\n").map((line) => line.trim()).filter((line) => line.length > 0);
   try {
@@ -65381,7 +65611,7 @@ function createToolBusyClock(opts) {
 // src/remote-phone-relay.ts
 var import_node_events3 = require("node:events");
 var import_node_fs20 = require("node:fs");
-var import_node_os14 = require("node:os");
+var import_node_os15 = require("node:os");
 var import_node_path34 = require("node:path");
 
 // ../../node_modules/.pnpm/@noble+hashes@1.3.3/node_modules/@noble/hashes/esm/cryptoNode.js
@@ -68953,7 +69183,7 @@ var DirectorRelay = class {
 
 // src/remote-phone-relay.ts
 function loadOrCreateAgentDeviceKey() {
-  const path29 = (0, import_node_path34.join)((0, import_node_os14.homedir)(), ".mrrlin", "agent-device-key");
+  const path29 = (0, import_node_path34.join)((0, import_node_os15.homedir)(), ".mrrlin", "agent-device-key");
   try {
     const raw = JSON.parse((0, import_node_fs20.readFileSync)(path29, "utf8"));
     if (typeof raw.priv === "string" && typeof raw.pub === "string") {
@@ -68963,7 +69193,7 @@ function loadOrCreateAgentDeviceKey() {
   }
   const kp = generateIdentityKeyPair();
   try {
-    (0, import_node_fs20.mkdirSync)((0, import_node_path34.join)((0, import_node_os14.homedir)(), ".mrrlin"), { recursive: true });
+    (0, import_node_fs20.mkdirSync)((0, import_node_path34.join)((0, import_node_os15.homedir)(), ".mrrlin"), { recursive: true });
     (0, import_node_fs20.writeFileSync)(
       path29,
       JSON.stringify({ priv: toBase64Url(kp.privateKey), pub: toBase64Url(kp.publicKey) }),
@@ -68973,7 +69203,7 @@ function loadOrCreateAgentDeviceKey() {
   }
   return kp;
 }
-var AGENT_PAIRING_PATH = (0, import_node_path34.join)((0, import_node_os14.homedir)(), ".mrrlin", "agent-pairing.json");
+var AGENT_PAIRING_PATH = (0, import_node_path34.join)((0, import_node_os15.homedir)(), ".mrrlin", "agent-pairing.json");
 function loadAgentPairing() {
   try {
     const raw = JSON.parse((0, import_node_fs20.readFileSync)(AGENT_PAIRING_PATH, "utf8"));
@@ -68991,7 +69221,7 @@ function loadAgentPairing() {
 }
 function saveAgentPairing(record2) {
   try {
-    (0, import_node_fs20.mkdirSync)((0, import_node_path34.join)((0, import_node_os14.homedir)(), ".mrrlin"), { recursive: true });
+    (0, import_node_fs20.mkdirSync)((0, import_node_path34.join)((0, import_node_os15.homedir)(), ".mrrlin"), { recursive: true });
     (0, import_node_fs20.writeFileSync)(AGENT_PAIRING_PATH, JSON.stringify(record2), { mode: 384 });
   } catch {
   }
@@ -69170,14 +69400,14 @@ async function renderPairingQrSvg(payload) {
 }
 
 // src/executor-server.ts
-var import_node_child_process20 = require("node:child_process");
+var import_node_child_process21 = require("node:child_process");
 function defaultReadinessRunner(provider) {
   if (provider !== "codex" && provider !== "claude" && provider !== "agy") {
     throw new Error(`unsupported executor provider: ${String(provider)}`);
   }
   const command = provider === "claude" ? "claude" : provider === "agy" ? "agy" : "codex";
   return (args) => {
-    const r = (0, import_node_child_process20.spawnSync)(command, args, { encoding: "utf8", timeout: 8e3, shell: true });
+    const r = (0, import_node_child_process21.spawnSync)(command, args, { encoding: "utf8", timeout: 8e3, shell: true });
     return { status: r.status, stdout: r.stdout ?? "", stderr: r.stderr ?? "" };
   };
 }
@@ -69320,7 +69550,7 @@ function createSelfReviewTurn(deps) {
 
 // src/director-reseed.ts
 var import_node_fs21 = require("node:fs");
-var import_node_readline = require("node:readline");
+var import_node_readline2 = require("node:readline");
 var import_node_path35 = require("node:path");
 function estimateTokens(s) {
   return Buffer.byteLength(s, "utf8");
@@ -69473,7 +69703,7 @@ async function readSessionRows(logsDir, files, sessionIds) {
     const filePath = (0, import_node_path35.join)(logsDir, f);
     try {
       const stream = (0, import_node_fs21.createReadStream)(filePath, { encoding: "utf8" });
-      const rl = (0, import_node_readline.createInterface)({ input: stream, crlfDelay: Infinity });
+      const rl = (0, import_node_readline2.createInterface)({ input: stream, crlfDelay: Infinity });
       try {
         for await (const line of rl) {
           if (line.trim() === "") continue;
@@ -69497,11 +69727,11 @@ async function readSessionRows(logsDir, files, sessionIds) {
 
 // src/external-agents-scrub.ts
 var import_node_fs22 = __toESM(require("node:fs"), 1);
-var import_node_os15 = __toESM(require("node:os"), 1);
+var import_node_os16 = __toESM(require("node:os"), 1);
 var import_node_path36 = __toESM(require("node:path"), 1);
 var REDACTION = "[REDACTED]";
 var SHORT_VALUE_THRESHOLD = 8;
-var KEYS_ENV_PATH = () => import_node_path36.default.join(import_node_os15.default.homedir(), ".local", "state", "external-agents", "keys.env");
+var KEYS_ENV_PATH = () => import_node_path36.default.join(import_node_os16.default.homedir(), ".local", "state", "external-agents", "keys.env");
 var keysEnvCache = null;
 function readKeysEnv() {
   const filePath = KEYS_ENV_PATH();
@@ -69945,7 +70175,7 @@ function readKnownGptSlugsFromTomlFile(filePath) {
   return Array.from(raw.matchAll(/^\s*model\s*=\s*"([^"]+)"/gm)).map((match) => match[1]?.trim() ?? "").filter(isSelectableModelSlug);
 }
 function readCodexFallbackModels() {
-  const codexHome = process.env.CODEX_HOME?.trim() || import_node_path38.default.join(import_node_os17.default.homedir(), ".codex");
+  const codexHome = process.env.CODEX_HOME?.trim() || import_node_path38.default.join(import_node_os18.default.homedir(), ".codex");
   const models = /* @__PURE__ */ new Map();
   const cachePath = import_node_path38.default.join(codexHome, "models_cache.json");
   const cacheRaw = readTextIfExists(cachePath);
@@ -70046,7 +70276,7 @@ function neutralCheckoutCwd(stateDir) {
     import_node_fs23.default.mkdirSync(dir, { recursive: true });
     if (!import_node_fs23.default.existsSync(import_node_path38.default.join(dir, ".git"))) {
       try {
-        (0, import_node_child_process21.spawnSync)("git", ["init", "-b", "main"], { cwd: dir, stdio: "ignore" });
+        (0, import_node_child_process22.spawnSync)("git", ["init", "-b", "main"], { cwd: dir, stdio: "ignore" });
       } catch {
       }
     }
@@ -70557,7 +70787,7 @@ function resolveDefaultBranch(checkoutPath) {
   if (!checkoutPath) return "main";
   const runGit = (args) => {
     try {
-      return (0, import_node_child_process21.execFileSync)("git", ["-C", checkoutPath, ...args], {
+      return (0, import_node_child_process22.execFileSync)("git", ["-C", checkoutPath, ...args], {
         encoding: "utf8",
         stdio: ["ignore", "pipe", "ignore"],
         timeout: 15e3,
@@ -71111,7 +71341,7 @@ function createBridgeMessageHandler(deps) {
           sendForSpan({ type: "checkout-state", ok: false, error: { code: "invalid_input", fields: { projectSlug: "required" } } });
           return;
         }
-        const state = readCheckoutState(deps.checkoutRegistry, projectSlug, import_node_os17.default.hostname());
+        const state = readCheckoutState(deps.checkoutRegistry, projectSlug, import_node_os18.default.hostname());
         if (!state) {
           sendForSpan({ type: "checkout-state", ok: false, error: { code: "checkout_missing" } });
           return;
@@ -71143,7 +71373,7 @@ function createBridgeMessageHandler(deps) {
         const result = registerCheckout(
           deps.checkoutRegistry,
           { projectSlug, path: typeof msg.path === "string" ? msg.path : "", repo },
-          import_node_os17.default.hostname()
+          import_node_os18.default.hostname()
         );
         if (!result.ok) {
           sendForSpan({ type: "checkout-register", ok: false, error: { code: result.code, detail: result.detail } });
@@ -72325,7 +72555,7 @@ function parseConfig() {
 }
 function scanForOtherBridges() {
   try {
-    const result = (0, import_node_child_process21.spawnSync)("pgrep", ["-f", "mrrlin-mcp director-bridge"], {
+    const result = (0, import_node_child_process22.spawnSync)("pgrep", ["-f", "mrrlin-mcp director-bridge"], {
       encoding: "utf8"
     });
     if (result.status !== 0) return [];
@@ -74240,7 +74470,7 @@ function runSetCredential(args) {
 }
 
 // src/install-service.ts
-var import_node_os18 = __toESM(require("node:os"), 1);
+var import_node_os19 = __toESM(require("node:os"), 1);
 var import_node_fs24 = require("node:fs");
 var import_node_path39 = __toESM(require("node:path"), 1);
 function parseEnvLine(line, env) {
@@ -74719,11 +74949,11 @@ function installService(deps) {
     deps.log(resolved.reason);
     return { ok: false };
   }
-  const home = deps.env.HOME ?? import_node_os18.default.homedir();
+  const home = deps.env.HOME ?? import_node_os19.default.homedir();
   const user = resolveBridgeUser({
     env: deps.env,
     home,
-    userInfo: deps.userInfo ?? (() => import_node_os18.default.userInfo()),
+    userInfo: deps.userInfo ?? (() => import_node_os19.default.userInfo()),
     homeOwnerUid: deps.homeOwnerUid ?? defaultHomeOwnerUid,
     log: deps.log
   });
@@ -74744,7 +74974,7 @@ function installService(deps) {
   const claudeBin = deps.which("claude");
   const agyBin = deps.which("agy");
   const resolvedBins = [...bins, claudeBin, agyBin].filter((b) => b !== null);
-  const isWin = import_node_os18.default.platform() === "win32";
+  const isWin = import_node_os19.default.platform() === "win32";
   const systemDirs = isWin ? (deps.env.PATH || "").split(import_node_path39.default.delimiter).filter(Boolean) : SYSTEM_PATH_DIRS;
   const pathEnv = Array.from(
     /* @__PURE__ */ new Set([...resolvedBins.map((b) => import_node_path39.default.dirname(b)), ...systemDirs])
@@ -74827,14 +75057,14 @@ function uninstallService(deps) {
 
 // src/uninstall-codex.ts
 var import_promises16 = __toESM(require("node:fs/promises"), 1);
-var import_node_os19 = __toESM(require("node:os"), 1);
+var import_node_os20 = __toESM(require("node:os"), 1);
 var import_node_path40 = __toESM(require("node:path"), 1);
 var toml5 = __toESM(require_toml(), 1);
 function resolveCodexHome3(options) {
   if (options.codexHome) return options.codexHome;
   if (options.homeDir) return import_node_path40.default.join(options.homeDir, ".codex");
   if (process.env.CODEX_HOME) return process.env.CODEX_HOME;
-  return import_node_path40.default.join(import_node_os19.default.homedir(), ".codex");
+  return import_node_path40.default.join(import_node_os20.default.homedir(), ".codex");
 }
 async function pathExists6(target) {
   try {
@@ -75021,7 +75251,7 @@ Missing required flag(s): ${missing.join(
 function augmentProcessPathWithCommonDirs() {
   const isWin = process.platform === "win32";
   if (isWin) return;
-  const home = process.env.HOME || (0, import_node_os20.homedir)();
+  const home = process.env.HOME || (0, import_node_os21.homedir)();
   const candidates = [
     import_node_path43.default.join(home, ".local", "bin"),
     import_node_path43.default.join(home, ".cargo", "bin"),
@@ -75037,13 +75267,13 @@ function augmentProcessPathWithCommonDirs() {
 }
 augmentProcessPathWithCommonDirs();
 function pm2Runner(args) {
-  const r = (0, import_node_child_process22.spawnSync)("pm2", args, { encoding: "utf8" });
+  const r = (0, import_node_child_process23.spawnSync)("pm2", args, { encoding: "utf8" });
   process.stderr.write(r.stdout ?? "");
   process.stderr.write(r.stderr ?? "");
   return { code: r.status ?? 1, stdout: r.stdout ?? "" };
 }
 function whichBin(bin) {
-  const r = (0, import_node_child_process22.spawnSync)("which", [bin], { encoding: "utf8" });
+  const r = (0, import_node_child_process23.spawnSync)("which", [bin], { encoding: "utf8" });
   const out = (r.stdout ?? "").trim();
   return r.status === 0 && out ? out.split("\n")[0] ?? null : null;
 }
@@ -75051,14 +75281,14 @@ function bootHookStatus() {
   if (process.platform !== "darwin") return { status: "unknown" };
   const uid = process.getuid?.();
   if (uid === void 0 || uid === 0) return { status: "unknown" };
-  const home = process.env.HOME ?? (0, import_node_os20.homedir)();
+  const home = process.env.HOME ?? (0, import_node_os21.homedir)();
   const agents = import_node_path43.default.join(home, "Library", "LaunchAgents");
   const candidates = [
     { label: "com.mrrlin.director-bridge", plist: import_node_path43.default.join(agents, "com.mrrlin.director-bridge.plist") },
-    { label: "com.PM2", plist: import_node_path43.default.join(agents, `pm2.${(0, import_node_os20.userInfo)().username}.plist`) }
+    { label: "com.PM2", plist: import_node_path43.default.join(agents, `pm2.${(0, import_node_os21.userInfo)().username}.plist`) }
   ];
   for (const candidate of candidates) {
-    const printed = (0, import_node_child_process22.spawnSync)("launchctl", ["print", `gui/${uid}/${candidate.label}`], { encoding: "utf8" });
+    const printed = (0, import_node_child_process23.spawnSync)("launchctl", ["print", `gui/${uid}/${candidate.label}`], { encoding: "utf8" });
     if (printed.status !== 0) continue;
     if (!(0, import_node_fs25.existsSync)(candidate.plist)) continue;
     const out = printed.stdout ?? "";
@@ -75272,8 +75502,8 @@ async function main() {
         );
       }
       const { command: command2, args, env } = browserServeArgs();
-      const r = (0, import_node_child_process22.spawnSync)(command2, args, { stdio: "inherit", env: { ...process.env, ...env } });
-      process.exitCode = r.status ?? 1;
+      const exitCode = await runBrowserServeProxy({ command: command2, args, env });
+      process.exitCode = exitCode;
       return;
     }
     case "browser-status": {
@@ -75283,7 +75513,7 @@ async function main() {
     }
     case "external-agents-serve": {
       const { command: command2, args } = externalAgentsServeArgs();
-      const r = (0, import_node_child_process22.spawnSync)(command2, args, { stdio: "inherit", env: process.env });
+      const r = (0, import_node_child_process23.spawnSync)(command2, args, { stdio: "inherit", env: process.env });
       process.exitCode = r.status ?? 1;
       return;
     }
@@ -75337,7 +75567,7 @@ async function main() {
         }
       }
       try {
-        const codexHome = process.env.CODEX_HOME ?? import_node_path43.default.join(process.env.HOME ?? (0, import_node_os20.homedir)(), ".codex");
+        const codexHome = process.env.CODEX_HOME ?? import_node_path43.default.join(process.env.HOME ?? (0, import_node_os21.homedir)(), ".codex");
         (0, import_node_fs25.rmSync)(import_node_path43.default.join(codexHome, "prompts", "report-issue.md"), { force: true });
       } catch {
       }
@@ -75360,7 +75590,7 @@ async function main() {
         );
       }
       const realProviderRunner = (command2) => (args) => {
-        const r = (0, import_node_child_process22.spawnSync)(command2, args, { encoding: "utf8", timeout: 8e3 });
+        const r = (0, import_node_child_process23.spawnSync)(command2, args, { encoding: "utf8", timeout: 8e3 });
         return { status: r.status, stdout: r.stdout ?? "", stderr: r.stderr ?? "" };
       };
       for (const provider of ["codex", "claude", "agy"]) {
@@ -75453,14 +75683,14 @@ async function main() {
         purgeSecret: purge,
         secretPath: agentCredentialPath(),
         tokenPath: operatorTokenPath(),
-        ecoPath: import_node_path43.default.join(process.env.HOME ?? (0, import_node_os20.homedir)(), ".mrrlin", "ecosystem.config.cjs"),
+        ecoPath: import_node_path43.default.join(process.env.HOME ?? (0, import_node_os21.homedir)(), ".mrrlin", "ecosystem.config.cjs"),
         log: (m) => process.stderr.write(`[mrrlin-mcp uninstall-service] ${m}
 `)
       });
       return;
     }
     case "uninstall": {
-      const home = process.env.HOME ?? (0, import_node_os20.homedir)();
+      const home = process.env.HOME ?? (0, import_node_os21.homedir)();
       const log = (m) => process.stderr.write(`[mrrlin-mcp uninstall] ${m}
 `);
       uninstallService({

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mrrlin-dev/mcp",
-  "version": "0.4.99",
+  "version": "0.4.101",
   "type": "module",
   "bin": {
     "mrrlin-mcp": "dist/bin.cjs"