@bridge_gpt/mcp-server 0.2.60 → 0.2.62

package/build/setup-epic.js

@@ -78,7 +78,7 @@
 import { readFile as fsReadFile, stat as fsStat } from "node:fs/promises";
 import os from "node:os";
 import { createProductionEpicIntegrationGhRunner, ensureEpicIntegrationPullRequest, formatEpicIntegrationPullRequestOutcome, } from "./epic-integration-pr.js";
-import { approveEpicPlan, buildConductorJiraUrl, conductorGetHeaders, createEpicRunWithDisposition, fetchConductorReadiness, fetchEpicRunState, replaceEpicRunPolicy, resolveConductorBridgeApiAccess, storeEpicPlan, validateEpicPlan, ConductorBridgeApiError, } from "./conductor/bridge-api-client.js";
+import { approveEpicPlan, buildConductorJiraUrl, conductorGetHeaders, createEpicRunWithDisposition, decodeCanonicalProvenance, fetchConductorReadiness, fetchEpicRunState, replaceEpicRunPolicy, resolveConductorBridgeApiAccess, resolveEpicLaunchBridgeApiAccess, storeEpicPlan, validateEpicPlan, ConductorBridgeApiError, } from "./conductor/bridge-api-client.js";
 // BAPI-1133 (A2) — the single legacy-to-typed merge-execution-mode mapping and
 // its total legacy resolver live in `merge-pull-request.ts` (no import cycle:
 // that module never imports from `setup-epic.ts`). Reused here rather than
@@ -97,7 +97,7 @@ import { validateBranchName } from "./base-ref.js";
 // conductor can drift on a field name or an endpoint shape. No MCP tool, no
 // input-schema field, and no description changes.
 import { getConfigFieldBaseBranch, getIndexScopeLifecycle, getParseStatus, } from "./epic-shared/bridge-client.js";
-import { boundScopeLifecycleLabel, createExecFileRunCommand, ensureCommitResolvableLocally, normalizeCommitSha, performExactIndexScopeCut, pollIndexScopeLifecycle, readRemoteBranchHead, runGit, SCOPE_BOOTSTRAP_POLL_INTERVAL_MS, SCOPE_LIFECYCLE_LABELS, } from "./epic-shared/cut-protocol.js";
+import { boundScopeLifecycleLabel, createExecFileRunCommand, ensureCommitResolvableLocally, performExactIndexScopeCut, pollIndexScopeLifecycle, readRemoteBranchHead, runGit, SCOPE_BOOTSTRAP_POLL_INTERVAL_MS, SCOPE_LIFECYCLE_LABELS, } from "./epic-shared/cut-protocol.js";
 import { hashPlan } from "./conductor/plan.js";
 import { BRING_UP_REFUSAL_MESSAGES, firstBringUpRefusal, } from "./conductor/bring-up-facts.js";
 import { MCP_PACKAGE_NAME } from "./mcp-identity.js";
@@ -148,6 +148,16 @@ export const SETUP_EPIC_AUTO_MERGE_POLICY_KEY = "v2_auto_merge_enabled";
  * neither changes merge execution until a later A2 child.
  */
 export const SETUP_EPIC_MERGE_EXECUTION_MODE_POLICY_KEY = "merge_execution_mode";
+/**
+ * BAPI-1259 — the opt-in for automatic integration-PR preparation. Written into
+ * the UNATTENDED epic-branch default only (fill-if-absent), so a run the
+ * operator starts unattended is prepared and handed off without a manual base
+ * merge or a manual un-draft. Attended runs, `--into-base` runs, and runs whose
+ * `--policy-file` already declares the key keep exactly what they had; a run
+ * approved before this key existed is never changed retroactively.
+ */
+export const SETUP_EPIC_INTEGRATION_PREPARATION_POLICY_KEY = "integration_preparation";
+const SETUP_EPIC_INTEGRATION_PREPARATION_DEFAULT = { enabled: true };
 /** Accepted `policy_json.review_policy.source` values (the `ReviewPolicy` surface). */
 export const SETUP_EPIC_REVIEW_POLICY_SOURCES = [
     "verdict_protocol",
@@ -249,6 +259,10 @@ export function getSetupEpicUsage() {
         "                         sets no review policy of its own, so a value supplied",
         "                         here always wins.",
         "  --json                 Emit a single JSON result object on stdout",
+        "  --launch-profile <name>  (BAPI-1260) Resolve the target, repository, and bound",
+        "                         credential from this host-local launch profile. Passed",
+        "                         by drive-epic; there is no production default with it.",
+        "  --base-url <url>       (BAPI-1260) Explicit target; must agree with the profile.",
         "  -h, --help             Show this help",
         "",
         "Policy controls:",
@@ -349,6 +363,8 @@ export function parseSetupEpicArgs(argv) {
     let localOnly = false;
     let dryRun = false;
     let json = false;
+    let launchProfile;
+    let baseUrl;
     for (let i = 0; i < argv.length; i++) {
         const arg = argv[i];
         // `--policy-file=<path>` inline form (BAPI-754).
@@ -450,6 +466,19 @@ export function parseSetupEpicArgs(argv) {
                 i++;
                 break;
             }
+            // BAPI-1260 — the launch selection forwarded by drive-epic.
+            case "--launch-profile":
+            case "--base-url": {
+                const v = takeValue(argv, i, arg);
+                if (v === null || v.trim() === "")
+                    return { status: "error", message: `${arg} requires a value.` };
+                if (arg === "--launch-profile")
+                    launchProfile = v.trim();
+                else
+                    baseUrl = v.trim();
+                i++;
+                break;
+            }
             case "--into-base":
                 intoBase = true;
                 break;
@@ -531,6 +560,9 @@ export function parseSetupEpicArgs(argv) {
             localOnly,
             dryRun,
             json,
+            // BAPI-1260 — only when supplied, so a legacy options object is unchanged.
+            ...(launchProfile ? { launchProfile } : {}),
+            ...(baseUrl ? { baseUrl } : {}),
         },
     };
 }
@@ -1367,9 +1399,10 @@ export function requestedPolicyIsUnattended(policy, attended) {
  *   requested `review_policy`, and nothing else. Byte-identical to the
  *   pre-BAPI-1102 composition, which is precisely what the opt-out promises.
  * * **Feature branch, default** → adds `posture: "unattended"`,
- *   `v2_auto_merge_enabled: true`, and (BAPI-1133, A2) `merge_execution_mode`
+ *   `v2_auto_merge_enabled: true`, (BAPI-1133, A2) `merge_execution_mode`
  *   when the caller resolved one — the server refuses an unattended auto-merge
- *   policy that omits it.
+ *   policy that omits it — and (BAPI-1259) `integration_preparation:
+ *   { enabled: true }`, so the run prepares its own integration PR.
  *
  * Deliberately absent from every shape:
  *
@@ -1394,6 +1427,9 @@ export function composeDefaultSetupEpicPolicy(args) {
             if (args.mergeExecutionMode !== undefined) {
                 policy[SETUP_EPIC_MERGE_EXECUTION_MODE_POLICY_KEY] = args.mergeExecutionMode;
             }
+            policy[SETUP_EPIC_INTEGRATION_PREPARATION_POLICY_KEY] = {
+                ...SETUP_EPIC_INTEGRATION_PREPARATION_DEFAULT,
+            };
         }
     }
     if (args.reviewPolicy !== undefined) {
@@ -1465,6 +1501,11 @@ export function applySetupEpicUnattendedDefault(policy, args) {
         args.mergeExecutionMode !== undefined) {
         composed[SETUP_EPIC_MERGE_EXECUTION_MODE_POLICY_KEY] = args.mergeExecutionMode;
     }
+    if (!(SETUP_EPIC_INTEGRATION_PREPARATION_POLICY_KEY in composed)) {
+        composed[SETUP_EPIC_INTEGRATION_PREPARATION_POLICY_KEY] = {
+            ...SETUP_EPIC_INTEGRATION_PREPARATION_DEFAULT,
+        };
+    }
     return composed;
 }
 /**
@@ -1654,14 +1695,51 @@ export function resolveEffectiveFeatureBranch(featureBranch, requestedPolicy) {
     return trimmed;
 }
 /**
- * Read canonical parse truth and require a `succeeded` parse with a full
- * indexed commit — the commit `origin/<feature>` will be cut at.
+ * BAPI-1252: the operator sentence for each canonical refusal. Every one names
+ * the situation and what to do; none names a SHA, generation, or server error.
+ */
+export function canonicalRefusalMessage(repoName, reason) {
+    switch (reason) {
+        case "canonical_capability_unsupported":
+            return (`The Bridge server for ${repoName} did not report verified canonical index provenance ` +
+                `(it predates this contract, or sent a value this CLI cannot verify). Upgrade the ` +
+                `server; a cut is never authorized from the legacy indexed commit.`);
+        case "canonical_index_unverified":
+            return (`${SETUP_EPIC_PARSE_FIRST_MESSAGE}: the canonical index for ${repoName} has no verified ` +
+                `generation (legacy, interrupted, or still-writing content is never trusted), so there ` +
+                `is no commit to cut the feature branch at.`);
+        case "canonical_source_missing":
+            return (`${SETUP_EPIC_PARSE_FIRST_MESSAGE}: the last canonical parse of ${repoName} observed no ` +
+                `source commit (for example it parsed a supplied directory), so its content cannot be ` +
+                `verified. Re-parse it from its remote.`);
+        case "canonical_manifest_mismatch":
+            return (`The canonical index content for ${repoName} no longer matches its verified manifest ` +
+                `and has been marked unverified. Re-parse the repository before cutting.`);
+        case "canonical_generation_mismatch":
+        case "canonical_index_advanced":
+            return (`The canonical index for ${repoName} advanced while it was being checked. Retry once ` +
+                `the current parse finishes.`);
+        case "canonical_validity_unavailable":
+        default:
+            return (`The canonical validity for ${repoName} could not be read. Retry — this is not ` +
+                `evidence the repository is unindexed.`);
+    }
+}
+/**
+ * Read canonical parse truth and require AFFIRMATIVE verified provenance — the
+ * commit `origin/<feature>` will be cut at (BAPI-1252).
+ *
+ * The cut commit is the server's VERIFIED canonical source SHA, decoded through
+ * `decodeCanonicalProvenance`. Lifecycle fields (`status`, `indexed_commit_sha`)
+ * are display history and are never consulted: a `succeeded` row can describe a
+ * newer-created parse whose content the index does not hold. An absent field
+ * (an older server), an unknown state, a read failure, or an unverified
+ * generation all refuse before any branch or run mutation.
  *
  * Fails CLOSED (ratified R-2). The first line of every refusal is the exact
- * operator instruction; the closing lines state what did NOT happen. An
- * UNREADABLE status is kept distinct from an unsuccessful one — "could not read"
- * is not evidence the repository is unindexed, and telling that operator to
- * re-index would send them to re-parse a repository that may be fine.
+ * operator instruction; the closing line states what did NOT happen. An
+ * UNREADABLE status is kept distinct from an unverified one — "could not read"
+ * is not evidence the repository is unindexed.
  */
 export async function readCanonicalParseTruth(access, fetchImpl) {
     const notCreated = [
@@ -1678,30 +1756,14 @@ export async function readCanonicalParseTruth(access, fetchImpl) {
             ],
         };
     }
-    if (parse.value.status !== "succeeded") {
+    const evidence = decodeCanonicalProvenance(parse.value);
+    if (!evidence.verified) {
         return {
             ok: false,
-            lines: [
-                `${SETUP_EPIC_PARSE_FIRST_MESSAGE}: the canonical index for ${access.repoName} has no ` +
-                    `successful parse (status: ${String(parse.value.status)}), so there is no commit to ` +
-                    `cut the feature branch at.`,
-                ...notCreated,
-            ],
+            lines: [canonicalRefusalMessage(access.repoName, evidence.reason), ...notCreated],
         };
     }
-    const indexed = normalizeCommitSha(parse.value.indexed_commit_sha);
-    if (indexed === null) {
-        return {
-            ok: false,
-            lines: [
-                `${SETUP_EPIC_PARSE_FIRST_MESSAGE}: the canonical index for ${access.repoName} published ` +
-                    `no commit for its last successful parse, so there is no commit to cut the feature ` +
-                    `branch at.`,
-                ...notCreated,
-            ],
-        };
-    }
-    return { ok: true, cutCommitSha: indexed };
+    return { ok: true, cutCommitSha: evidence.sourceCommitSha };
 }
 /** The strict subset of `SetupEpicDeps` the shared cut protocol consumes. */
 function cutProtocolDeps(deps, runCommand) {
@@ -1936,7 +1998,10 @@ async function executeSetupEpic(argv, overrides, runIdSink) {
         return 0;
     }
     // --- Resolve access ------------------------------------------------------
-    const accessResult = await resolveConductorBridgeApiAccess({
+    // BAPI-1260: a caller that selected the epic-launch contract (drive-epic
+    // forwards --launch-profile / --base-url) gets the target-first resolver and
+    // the bound credential; the legacy resolver is kept byte-for-byte otherwise.
+    const accessDeps = {
         env: deps.env,
         cwd: deps.cwd,
         homedir: deps.homedir,
@@ -1944,7 +2009,13 @@ async function executeSetupEpic(argv, overrides, runIdSink) {
         readFile: deps.readFile,
         stat: deps.stat,
         repoName: opts.repo,
-    });
+    };
+    const accessResult = opts.launchProfile !== undefined || opts.baseUrl !== undefined
+        ? await resolveEpicLaunchBridgeApiAccess({
+            ...(opts.launchProfile ? { profileName: opts.launchProfile } : {}),
+            ...(opts.baseUrl ? { baseUrl: opts.baseUrl } : {}),
+        }, accessDeps)
+        : await resolveConductorBridgeApiAccess(accessDeps);
     if (!accessResult.ok) {
         deps.errorLog(`Cannot reach the Bridge API: ${accessResult.error}`);
         return 1;

package/build/version.generated.js

@@ -1,4 +1,4 @@
 // AUTO-GENERATED — do not edit manually. Regenerate with: npm run build
-export const VERSION = "0.2.60";
-export const BUILD_COMMIT = "1920a31997d2";
-export const LAUNCHER_ARGS = ["-y", "--prefer-offline", "@bridge_gpt/mcp-server@0.2.60", "serve"];
+export const VERSION = "0.2.62";
+export const BUILD_COMMIT = "9351fac413bf";
+export const LAUNCHER_ARGS = ["-y", "--prefer-offline", "@bridge_gpt/mcp-server@0.2.62", "serve"];

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bridge_gpt/mcp-server",
-  "version": "0.2.60",
+  "version": "0.2.62",
   "description": "Bridge API MCP server — exposes Jira endpoints as MCP tools for Claude Code agents",
   "license": "MIT",
   "type": "module",