@bridge_gpt/mcp-server 0.2.59 → 0.2.60

package/build/implement-epic/spawn.js

@@ -1,113 +0,0 @@
-/**
- * Secret-free agent-tab spawning for `implement-epic spawn` (BAPI-803).
- *
- * `spawn` opens exactly ONE terminal tab in a ticket's worktree running the
- * agent against a prompt the CALLER wrote to a file. The prompt is arbitrary
- * operator/loop-authored text — it can contain apostrophes, `$(…)`, backticks,
- * and newlines — so it is placed inside a single-quoted shell literal using the
- * repository's existing quoting helpers rather than any local escaping. Reusing
- * `shSquoteInner` / `powershellSquote` is the point: a second escaping
- * implementation is a second place for a quoting bug to produce shell execution.
- *
- * Two invariants this module is responsible for:
- *
- * - **Exactly one tab, and only after every check passes.** The spawn seam is
- *   invoked once, at the end, after the agent is validated and the command is
- *   built. A partial failure must leave no tab, because the caller increments
- *   `sessions_spawned` on success and a phantom tab would desynchronize it.
- * - **No credential reaches the command.** Nothing here resolves, receives, or
- *   formats Bridge access data. The spawned agent resolves its own credentials
- *   from the user-scoped store, exactly as `start-tickets` workers do; a key in
- *   argv would be visible to every process on the machine via `ps`.
- */
-import { powershellSquote, shSquoteInner, } from "../start-tickets.js";
-import { INDEX_SCOPE_ENV_VAR } from "../index-scope-contract.js";
-/** The agents `implement-epic spawn` may launch. */
-export const CONDUCT_EPIC_AGENTS = ["claude", "cursor-agent"];
-/** The repository's established default agent. */
-export const CONDUCT_EPIC_DEFAULT_AGENT = "claude";
-/**
- * Validate an agent value, defaulting to {@link CONDUCT_EPIC_DEFAULT_AGENT}.
- *
- * Rejects before any command is built. The agent name becomes the executable in
- * a shell command, so an unvalidated value is a command-injection surface even
- * though the surrounding operands are quoted.
- */
-export function resolveConductEpicAgent(agent) {
-    if (agent === undefined || agent.trim().length === 0) {
-        return { ok: true, agent: CONDUCT_EPIC_DEFAULT_AGENT };
-    }
-    const trimmed = agent.trim();
-    if (!CONDUCT_EPIC_AGENTS.includes(trimmed)) {
-        return {
-            ok: false,
-            error: `Unsupported agent '${trimmed}'. Expected one of: ${CONDUCT_EPIC_AGENTS.join(", ")}`,
-        };
-    }
-    return { ok: true, agent: trimmed };
-}
-/**
- * Build `cd '<worktree>' && <agent> '<prompt>'` (POSIX) or the PowerShell
- * equivalent, with both operands quoted by the shared helpers.
- *
- * Returns the command as a string rather than an argv array because that is what
- * every terminal spawner in this repository consumes — a tab is opened by handing
- * a shell a command line, not by `exec`ing a process.
- *
- * BAPI-844: a validated `indexScope` is prefixed as an environment assignment
- * using the SAME quoting helpers as the rest of the command — the shell's own
- * environment mechanism, not an argument the agent can see. An absent scope emits
- * no prefix, so the unscoped command is unchanged byte-for-byte.
- */
-export function buildConductEpicAgentCommand(input) {
-    const resolved = resolveConductEpicAgent(input.agent);
-    if (!resolved.ok)
-        return resolved;
-    if (input.worktreePath.trim().length === 0) {
-        return { ok: false, error: "A worktree path is required to build the agent command." };
-    }
-    if (input.platform === "win32") {
-        const scopePrefix = input.indexScope
-            ? `$env:${INDEX_SCOPE_ENV_VAR} = ${powershellSquote(input.indexScope)}; `
-            : "";
-        return {
-            ok: true,
-            command: `${scopePrefix}Set-Location -LiteralPath ${powershellSquote(input.worktreePath)}; ` +
-                `${resolved.agent} ${powershellSquote(input.prompt)}`,
-        };
-    }
-    const scopePrefix = input.indexScope
-        ? `export ${INDEX_SCOPE_ENV_VAR}='${shSquoteInner(input.indexScope)}' && `
-        : "";
-    return {
-        ok: true,
-        command: `${scopePrefix}cd '${shSquoteInner(input.worktreePath)}' && ` +
-            `${resolved.agent} '${shSquoteInner(input.prompt)}'`,
-    };
-}
-/**
- * Build the command and open exactly one tab through `spawnTab`.
- *
- * The seam is invoked once and only after construction succeeds. A spawner
- * failure is returned as `{ ok: false }` with the spawner's own sanitized
- * message — never the command, which embeds the full prompt text.
- */
-export async function spawnConductEpicAgentTab(input, spawnTab) {
-    const built = buildConductEpicAgentCommand(input);
-    if (!built.ok)
-        return built;
-    let result;
-    try {
-        result = await spawnTab(built.command, {
-            key: input.ticketKey,
-            worktreePath: input.worktreePath,
-            title: `implement-epic ${input.ticketKey}`,
-        });
-    }
-    catch {
-        return { ok: false, error: "The terminal tab could not be opened." };
-    }
-    if (!result.ok)
-        return { ok: false, error: result.error };
-    return { ok: true, command: built.command };
-}

package/build/plan-epic-conductor-eligibility.js

@@ -1,213 +0,0 @@
-/**
- * Combined merge/review conductor-eligibility assessment for `plan-epic` (BAPI-964).
- *
- * Runs once the epic decomposition's child manifest is frozen and every
- * sub-task's exploration text is written, so this module can predict — before
- * any conductor worker is spawned — which children are likely to trip the
- * runtime workflow-file merge guard (`api/library/vcs/epic_implementer_merge_service.py`)
- * and which of those additionally touch `claude-review.yml` itself, where
- * automated review cannot run at all (BAPI-941's supply-chain preflight refuses
- * to review a workflow that differs from the base branch's copy).
- *
- * The BROADER merge classification is delegated entirely to the Python
- * classifier via one Bridge API call for the complete child set — this module
- * never reimplements "what counts as a workflow file". The NARROWER review
- * subclass is classified locally by checking each child's combined text for the
- * full `CLAUDE_REVIEW_WORKFLOW_RELPATH`, imported (not re-declared) from
- * `claude-review-workflow-drift.js`.
- *
- * Fails open, deliberately: any validation failure, classification failure, or
- * internal contradiction (a review-subset child the backend did not also mark
- * merge-blocked) becomes the explicit `unavailable` result — never a fabricated
- * zero count. A caller that cannot get a real answer must say so, not guess.
- */
-import { CLAUDE_REVIEW_WORKFLOW_RELPATH } from "./claude-review-workflow-drift.js";
-/**
- * Build the real network-backed classification client that POSTs the complete
- * child set to `/jira/planning/epic-workflow-eligibility` exactly once.
- */
-export function createBridgeEpicConductorEligibilityClient(deps) {
-    return {
-        async classifyChildren(children) {
-            const fetchImpl = deps.fetchImpl ?? fetch;
-            const resp = await fetchImpl(deps.buildUrl("/planning/epic-workflow-eligibility"), {
-                method: "POST",
-                headers: await deps.getPostHeaders(),
-                body: JSON.stringify({ repo_name: deps.repoName, children }),
-            });
-            if (!resp.ok) {
-                throw new Error(`epic-workflow-eligibility classification request failed: ${resp.status}`);
-            }
-            return (await resp.json());
-        },
-    };
-}
-const UNAVAILABLE = { status: "unavailable" };
-function isNonBlankString(value) {
-    return typeof value === "string" && value.trim().length > 0;
-}
-/** Shape-validate an evidence array: every element must be a string. */
-function isStringArray(value) {
-    return Array.isArray(value) && value.every((item) => typeof item === "string");
-}
-/** Treat a missing/undefined optional field as empty text; reject a non-string value. */
-function optionalTextOrNull(value) {
-    if (value === undefined || value === null)
-        return "";
-    return typeof value === "string" ? value : null;
-}
-/** Deterministically assemble one child's scan text from its authoritative fields. */
-function buildCombinedText(child) {
-    return [child.title, child.scope, child.description, child.requirements]
-        .filter((part) => typeof part === "string" && part.length > 0)
-        .join("\n\n");
-}
-/** Validate the child collection at the module boundary. `null` means malformed. */
-function validateChildren(children) {
-    if (!Array.isArray(children) || children.length === 0)
-        return null;
-    const validated = [];
-    for (const child of children) {
-        if (child === null || typeof child !== "object")
-            return null;
-        if (!isNonBlankString(child.id) || !isNonBlankString(child.title))
-            return null;
-        const scope = optionalTextOrNull(child.scope);
-        const description = optionalTextOrNull(child.description);
-        const requirements = optionalTextOrNull(child.requirements);
-        if (scope === null || description === null || requirements === null)
-            return null;
-        validated.push({
-            id: child.id,
-            title: child.title,
-            combinedText: buildCombinedText({
-                id: child.id,
-                title: child.title,
-                scope,
-                description,
-                requirements,
-            }),
-        });
-    }
-    return validated;
-}
-/**
- * Assess conductor merge/review eligibility for one frozen epic child set.
- *
- * Sends the complete ordered child set to the injected Bridge client exactly
- * once. Never throws — every failure path (malformed input, client rejection,
- * malformed backend response, an internal merge/review contradiction) resolves
- * to the explicit `unavailable` result, diagnosed with `console.error` (never
- * `console.log`, which is reserved for the MCP stdio transport).
- */
-export async function assessEpicConductorEligibility(children, deps) {
-    const validated = validateChildren(children);
-    if (validated === null) {
-        console.error("assessEpicConductorEligibility: malformed child collection; unavailable.");
-        return UNAVAILABLE;
-    }
-    let response;
-    try {
-        response = await deps.client.classifyChildren(validated.map((child) => ({ child_id: child.id, combined_text: child.combinedText })));
-    }
-    catch (err) {
-        console.error("assessEpicConductorEligibility: Bridge classification call failed:", err);
-        return UNAVAILABLE;
-    }
-    if (response === null ||
-        typeof response !== "object" ||
-        !Array.isArray(response.predictions) ||
-        !Number.isInteger(response.total_children) ||
-        response.total_children < 0 ||
-        !Number.isInteger(response.predicted_workflow_children) ||
-        response.predicted_workflow_children < 0 ||
-        !Number.isInteger(response.containment_children) ||
-        response.containment_children < 0 ||
-        typeof response.reason !== "string") {
-        console.error("assessEpicConductorEligibility: malformed backend response shape; unavailable.");
-        return UNAVAILABLE;
-    }
-    if (response.predictions.length !== validated.length) {
-        console.error("assessEpicConductorEligibility: backend prediction count does not match child count; unavailable.");
-        return UNAVAILABLE;
-    }
-    // The backend is contractually order-preserving; still verify identity and
-    // order rather than trusting it, so a reordered/duplicate/unknown response
-    // never silently mislabels a child's prediction.
-    const predictionById = new Map();
-    for (const prediction of response.predictions) {
-        if (prediction === null ||
-            typeof prediction !== "object" ||
-            !isNonBlankString(prediction.child_id) ||
-            typeof prediction.predicted_workflow_modified !== "boolean" ||
-            !isStringArray(prediction.matched_paths) ||
-            typeof prediction.predicted_containment_hazard !== "boolean" ||
-            !isStringArray(prediction.matched_hazards)) {
-            console.error("assessEpicConductorEligibility: malformed per-child prediction; unavailable.");
-            return UNAVAILABLE;
-        }
-        if (prediction.predicted_containment_hazard !== (prediction.matched_hazards.length > 0)) {
-            console.error(`assessEpicConductorEligibility: child ${prediction.child_id} has a containment flag that ` +
-                "disagrees with whether matched hazard evidence is present; unavailable.");
-            return UNAVAILABLE;
-        }
-        if (predictionById.has(prediction.child_id)) {
-            console.error("assessEpicConductorEligibility: duplicate child_id in backend response; unavailable.");
-            return UNAVAILABLE;
-        }
-        predictionById.set(prediction.child_id, prediction);
-    }
-    const affectedChildren = [];
-    let reviewSubsetChildren = 0;
-    let predictedWorkflowChildren = 0;
-    let containmentChildren = 0;
-    for (const child of validated) {
-        const prediction = predictionById.get(child.id);
-        if (!prediction) {
-            console.error(`assessEpicConductorEligibility: backend response is missing child ${child.id}; unavailable.`);
-            return UNAVAILABLE;
-        }
-        const reviewPathReferenced = child.combinedText.includes(CLAUDE_REVIEW_WORKFLOW_RELPATH);
-        if (reviewPathReferenced && !prediction.predicted_workflow_modified) {
-            // Subset invariant violated: a child naming claude-review.yml itself must
-            // also be in the broader merge-blocked set. Publishing this as a
-            // "review-only" child would contradict the merge count, so refuse instead.
-            console.error(`assessEpicConductorEligibility: child ${child.id} references the review workflow ` +
-                "but the backend did not mark it merge-blocked; refusing contradictory result.");
-            return UNAVAILABLE;
-        }
-        if (prediction.predicted_workflow_modified) {
-            predictedWorkflowChildren += 1;
-            if (reviewPathReferenced)
-                reviewSubsetChildren += 1;
-        }
-        if (prediction.predicted_containment_hazard)
-            containmentChildren += 1;
-        // A child is affected — and therefore included — when it is workflow-modifying,
-        // containment-flagged, or both. Skip only a child that is neither.
-        if (!prediction.predicted_workflow_modified && !prediction.predicted_containment_hazard)
-            continue;
-        affectedChildren.push({
-            id: child.id,
-            title: child.title,
-            matchedPaths: [...prediction.matched_paths],
-            requiresHandReview: reviewPathReferenced,
-            requiresContainmentReview: prediction.predicted_containment_hazard,
-            matchedHazards: [...prediction.matched_hazards],
-        });
-    }
-    if (containmentChildren !== response.containment_children) {
-        console.error("assessEpicConductorEligibility: containment_children count disagrees with the validated " +
-            "per-child containment flags; unavailable.");
-        return UNAVAILABLE;
-    }
-    return {
-        status: "assessed",
-        totalChildren: validated.length,
-        predictedWorkflowChildren,
-        reason: response.reason,
-        reviewSubsetChildren,
-        containmentChildren,
-        affectedChildren,
-    };
-}