@bridge_gpt/mcp-server 0.2.10 → 0.2.12

package/build/install-bridge.js

@@ -34,10 +34,12 @@
  * gitignored) and the user-scoped credential store (Step 4).
  */
 import { readFile, writeFile, mkdir, stat, rename, chmod, unlink } from "fs/promises";
+import { spawn } from "child_process";
 import os from "os";
 import path from "path";
 import readline from "readline";
 import { runInit, buildBridgeApiEntry } from "./init.js";
+import { VERSION } from "./version.generated.js";
 import { validateRepoName } from "./bridge-config.js";
 import { resolveStartTicketsRepoName } from "./start-tickets-repo.js";
 import { upsertBapiCredential, getPrimaryCredentialStorePath, } from "./credential-store.js";
@@ -45,6 +47,23 @@ import { DEFAULT_AGENT_NAME, resolveAgentSpec, isAgentName, formatValidAgentName
 import { buildGenericAgentShellCommand, getDefaultSpawnTerminalTabForPlatform, detectTerminal, createDefaultStartTicketsDeps, } from "./start-tickets.js";
 /** Redaction sentinel — the API-key value is NEVER printed; this stands in. */
 export const REDACTED_API_KEY = "<REDACTED>";
+/**
+ * Always-surfaced success-path note (BAPI-451 W3, E-3). The pinned launcher's
+ * FIRST cold launch can resolve/download the package inline; if the MCP client's
+ * connect deadline is very short it may time out before the handshake. Pre-warming
+ * (below) makes this rare, but the note is surfaced unconditionally so the
+ * fail-soft backstop is always discoverable.
+ */
+export const MCP_TIMEOUT_GUIDANCE = "Note: if your MCP client has a very short connect deadline, raise MCP_TIMEOUT for the first launch " +
+    "(the initial npx package resolution/download can exceed a short connect timeout).";
+/** The exact, version-pinned launcher spec the pre-warm spawns (fast-exiting --version). */
+export function buildPrewarmArgs() {
+    return ["-y", `@bridge_gpt/mcp-server@${VERSION}`, "--version"];
+}
+/** Secret-free preview of the pre-warm command (no env, no key). */
+export function buildPrewarmCommandPreview() {
+    return `npx ${buildPrewarmArgs().join(" ")}`;
+}
 /** The natural-language sequential prompt handed to the spawned agent session. */
 export const INSTALL_BRIDGE_AGENT_PROMPT = "Please execute the /install-bridge command. Once it completes successfully, execute the /learn-repository command.";
 /** Default base URL when `BAPI_BASE_URL` is unset (mirrors index.ts). */
@@ -198,6 +217,44 @@ function promptLineViaReadline(promptText) {
         });
     });
 }
+/**
+ * Default pre-warm spawner (BAPI-451 W3). Spawns array-based (`shell: false`) so
+ * no argument is ever shell-interpreted, ignores all child stdio (node-gyp /
+ * download noise stays out of the CLI UX), bounds the run with a 60s timeout, and
+ * passes a SANITIZED env clone with `BAPI_API_KEY` deleted — the `--version`
+ * pre-warm never needs the key, and it must never reach an npm lifecycle script.
+ * Always resolves (never rejects): a spawn error / non-zero exit / timeout becomes
+ * `{ ok: false, warning }` with secret-free warning text.
+ */
+function spawnPrewarmDefault(command, args, env) {
+    return new Promise((resolve) => {
+        const sanitizedEnv = { ...env };
+        delete sanitizedEnv.BAPI_API_KEY;
+        try {
+            const child = spawn(command, args, {
+                shell: false,
+                stdio: "ignore",
+                timeout: 60_000,
+                env: sanitizedEnv,
+            });
+            child.on("error", () => resolve({ ok: false, warning: "the pre-warm process could not be started" }));
+            child.on("close", (code, signal) => {
+                if (signal) {
+                    resolve({ ok: false, warning: `the pre-warm process timed out or was terminated (${signal})` });
+                }
+                else if (code === 0) {
+                    resolve({ ok: true });
+                }
+                else {
+                    resolve({ ok: false, warning: `the pre-warm process exited with code ${code}` });
+                }
+            });
+        }
+        catch {
+            resolve({ ok: false, warning: "the pre-warm process could not be started" });
+        }
+    });
+}
 /** Build default deps from the live process. */
 export function createDefaultInstallBridgeDeps() {
     const isTTY = Boolean(process.stdin.isTTY);
@@ -217,6 +274,7 @@ export function createDefaultInstallBridgeDeps() {
         promptSecret: isTTY ? promptSecretViaReadline : undefined,
         promptLine: isTTY ? promptLineViaReadline : undefined,
         fetch: (...args) => fetch(...args),
+        spawnPrewarm: spawnPrewarmDefault,
         runInit,
         upsertCredential: upsertBapiCredential,
         buildShellCommand: buildGenericAgentShellCommand,
@@ -472,6 +530,8 @@ export function buildDryRunPreview(plan) {
         ...(plan.manualEditors.length > 0
             ? [`  ${plan.manualEditors.join(" + ")}: detected (global config) — manual setup instructions would be printed.`]
             : []),
+        `Step 3b — pre-warm the version-pinned launcher bucket (fail-open, env sanitized — BAPI_API_KEY removed): ${plan.prewarmCommand}`,
+        MCP_TIMEOUT_GUIDANCE,
         `Step 4 — persist routing credential: target ${plan.credentialTarget} at ${plan.credentialStorePath}`,
         `Step 5 — spawn agent session: ${plan.spawnCommand}`,
     ];
@@ -590,6 +650,7 @@ export async function runInstallBridgeCli(argv, overrides = {}) {
         credentialTarget: `bapi:${repoName}`,
         credentialStorePath,
         pingUrl: buildPingUrl(baseUrl, repoName),
+        prewarmCommand: buildPrewarmCommandPreview(),
         spawnCommand,
     };
     // ---- --dry-run: preview every step, strictly no side effects ----
@@ -639,6 +700,25 @@ export async function runInstallBridgeCli(argv, overrides = {}) {
     const manualInstructions = buildManualHostInstructions(entry, manualEditors);
     if (manualInstructions)
         log(manualInstructions);
+    // ---- Step 3b — pre-warm the @${VERSION}-pinned _npx bucket (BAPI-451 W3) ----
+    // The launcher just written is pinned to @${VERSION}, a DIFFERENT _npx bucket
+    // than the @latest bucket this `npx … install-bridge` invocation warmed. Spawn
+    // the exact pinned launcher once with the fast-exiting `--version` flag so the
+    // first real MCP launch resolves from a warm bucket instead of paying the cold
+    // install inline (which can exceed the client's connect deadline). Strictly
+    // fail-open: a failure warns (secret-free) but never fails the install.
+    log("  pre-warming the version-pinned launcher bucket…");
+    const prewarm = await deps.spawnPrewarm("npx", buildPrewarmArgs(), deps.env);
+    if (prewarm.ok) {
+        log("  launcher bucket warmed (the first MCP launch will not pay a cold install).");
+        log(`  ${MCP_TIMEOUT_GUIDANCE}`);
+    }
+    else {
+        // Escalate to a stronger, still secret-free warning when pre-warm didn't
+        // complete cleanly — but the install itself still succeeds (exit unaffected).
+        errorLog(`Warning: could not pre-warm the version-pinned launcher bucket${prewarm.warning ? ` (${prewarm.warning})` : ""}. ` +
+            `The first MCP launch may pay a one-time cold install and could be slow. ${MCP_TIMEOUT_GUIDANCE}`);
+    }
     // ---- Step 4 — persist routing credential (non-blocking / fail-open) ----
     log("Step 4/5 — persisting routing credential…");
     try {