@bridge_gpt/mcp-server 0.2.39 → 0.2.42

package/docs/install/mcp-tool-integrations.md

@@ -179,15 +179,31 @@ by tier.
 | Tool | Dependencies (class) |
 |---|---|
 | `create_pull_request` | VCS **[BLOCK]** (Tier-1) |
-| `merge_pull_request` | VCS **[BLOCK]** (Tier-1; protected server-decided merge — see below) |
+| `merge_pull_request` | VCS **[BLOCK]** (Tier-1; protected server-decided merge) + local `gh` login **[BLOCK]** (the merge executes here — see below) |
 | `resolve_ci_checks` | VCS **[BLOCK]** (Tier-1) |
 | `poll_ci_checks` | VCS **[BLOCK]** (Tier-1); also **hidden until `ci_check_config` is resolved** (needs a prior `resolve_ci_checks`) |
 | `materialize_fresh_base` | VCS / git base ref **[BLOCK]** (Tier-1; materializes a pinned base tree) |
 
 #### `merge_pull_request` — what the caller can observe
 
-The tool holds no VCS credential and performs no merge of its own; it asks the
-server and reports the answer. Four constraints are worth knowing before calling it:
+The tool holds no VCS credential and makes no merge decision of its own; it asks
+the server, and the server decides. Since **BAPI-832** the tool does perform the
+*write*, with the operator's `gh` login, because GitHub's merge endpoint needs
+`contents: write` and the Bridge GPT App installation is `contents: read` — a
+server-side merge simply cannot succeed here. Every server-side guard still runs
+first, and the local path is reachable only from a live approval for that exact
+pull request and head commit.
+
+Constraints worth knowing before calling it:
+
+- **A logged-in `gh` is required on the machine running the MCP server**, because
+  that is where the merge executes. Without one the tool refuses with
+  `local_gh_unavailable` or `local_gh_unauthenticated` and a `hint` naming the fix
+  (`gh auth login`); nothing is merged and the server-side lease is released. This
+  is a **BLOCK**, not a degrade: with no `gh`, no merge is possible at all.
+  `doctor` reports the same state under `local_merge`, so it is diagnosable
+  read-only before a run. Repositories configured `merge_execution: server` are
+  the exception — they need the App permission instead, and no local `gh`.
 
 - **Only `merged: true` is success.** `dry_run`, `pending_approval`, and
   `lease_held` are non-progress outcomes — nothing was merged, and repeating the

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bridge_gpt/mcp-server",
-  "version": "0.2.39",
+  "version": "0.2.42",
   "description": "Bridge API MCP server — exposes Jira endpoints as MCP tools for Claude Code agents",
   "license": "MIT",
   "type": "module",
@@ -29,7 +29,7 @@
     "test": "npm run test:normal && npm run test:module-mocks",
     "test:normal": "node scripts/run-unit-tests.js normal",
     "test:module-mocks": "node scripts/run-unit-tests.js module-mocks",
-    "test:integration": "node --test build/conductor/conductor-runtime.integration.test.js build/integration/refresh-main.integration.test.js build/integration/command-provisioning.integration.test.js build/integration/start-tickets.integration.test.js build/integration/start-tickets-tier-handoff.integration.test.js build/integration/doctor.integration.test.js build/integration/agent-capabilities.integration.test.js build/integration/conductor-producer.integration.test.js build/integration/conductor-message-relay.integration.test.js build/integration/executor-http-runner.integration.test.js build/integration/executor-job-behaviors.integration.test.js build/integration/executor-recovery-jobs.integration.test.js build/integration/executor-spec-review-prompt.integration.test.js build/integration/resume-pre-spawn.git.integration.test.js build/integration/executor-containment.git.integration.test.js build/integration/conduct-epic-cli.integration.test.js build/integration/conduct-epic-corrections.integration.test.js build/integration/worker-finalization-origin.integration.test.js build/integration/post-remediation-merge-ci-wait.integration.test.js build/integration/executor-merge-supervision.integration.test.js build/integration/attachment-binary-roundtrip.integration.test.js build/integration/dependent-ticket-fresh-base.integration.test.js build/integration/execute-plan-instructions.integration.test.js build/integration/implement-ticket-finalization-order.integration.test.js build/integration/conductor-bundle-artifacts.integration.test.js build/integration/install-bridge-repo-resolution.integration.test.js build/integration/capability-report-contract.integration.test.js build/integration/request-brainstorm-general.integration.test.js build/integration/request-council-trigger-drop.integration.test.js build/integration/install-bridge-onboarding-launch.integration.test.js build/integration/install-bridge-conductor.integration.test.js build/integration/install-bridge-conductor-executor.integration.test.js build/integration/install-bridge-failure-guards.integration.test.js build/integration/learn-repository-pipeline.integration.test.js build/integration/visual-diff-mcp.integration.test.js build/integration/executor-mcp-provisioning.integration.test.js build/integration/executor-worktree-reentry.integration.test.js build/integration/sfcc-read-error-contract.integration.test.js build/integration/sfcc-read-surface.integration.test.js build/integration/sfcc-response-envelope.integration.test.js build/integration/sfcc-total-error-contract.integration.test.js build/integration/sfcc-target-boundary.integration.test.js build/integration/serve-stdio.integration.test.js build/integration/install-alias.integration.test.js build/integration/setup-epic-validation.integration.test.js build/integration/plane-cli.integration.test.js build/integration/executor-auth-retirement.integration.test.js build/integration/decision-implications-command-scaffold.test.js build/integration/strict-mcp-worker-contract.test.js build/integration/executor-adapter-flow.test.js build/integration/install-cli-contract.integration.test.js build/integration/inline-phase-state-tools.test.js",
+    "test:integration": "node scripts/run-integration-tests.js",
     "test:smoke": "node --test build/integration/packaged-cli-smoke.test.js",
     "canary:agent-capabilities": "npm run build && node scripts/agent-capabilities-canary.mjs",
     "prepublishOnly": "node scripts/bundle-assets.js && npm run build && node scripts/verify-shebang.cjs"