@bridge_gpt/mcp-server 0.2.62 → 0.2.66

package/build/conductor/readiness-cli.js

@@ -35,7 +35,8 @@
 import os from "node:os";
 import { readFile as fsReadFile, stat as fsStat } from "node:fs/promises";
 import { collectConductorReadinessGate, formatConductorReadinessGateReport, } from "./readiness.js";
-import { resolveConductorBridgeApiAccess } from "./bridge-api-client.js";
+import { readinessEndpointEnvironments, resolveConductorBridgeApiAccess, resolveEpicLaunchBridgeApiAccess } from "./bridge-api-client.js";
+import { validateHttpBaseUrl } from "../base-url.js";
 import { claudeReviewWorkflowPath } from "../claude-review-workflow.js";
 import { runDefaultPlanePreflight } from "../plane/cli.js";
 /** Fixed notice emitted to stderr when a source could not be collected. */
@@ -43,7 +44,7 @@ export const READINESS_COLLECTION_NOTICE = "one or more readiness sources could
 /** Usage text for `epic-implementer readiness`. */
 export function getReadinessUsage() {
     return [
-        "Usage: epic-implementer readiness [--json] [--no-deny-probe]",
+        "Usage: epic-implementer readiness [--json] [--no-deny-probe] [--base-url <url>]",
         "",
         "Read-only ADVISORY report of every conductor prerequisite, consolidated from the",
         "Bridge install checklist, the epic-implementer doctor, the plane preflight, and the",
@@ -58,19 +59,31 @@ export function getReadinessUsage() {
         "  --json            Print the versioned structured report as JSON",
         "  --no-deny-probe   Accepted for parity with `epic-implementer doctor`; inert here, because",
         "                    this command never spawns the deny-enforcement probe",
+        "  --base-url <url>  Select a read-only Bridge API endpoint for this report;",
+        "                    this does not authorize or supply a credential",
         "  --help            Print this usage message",
     ].join("\n");
 }
 /** Parse `epic-implementer readiness` argv. Unknown flags and positionals are errors. */
 export function parseReadinessArgs(argv) {
     const parsed = { json: false, help: false, noDenyProbe: false };
-    for (const token of argv) {
+    for (let index = 0; index < argv.length; index++) {
+        const token = argv[index];
         if (token === "--json")
             parsed.json = true;
         else if (token === "--no-deny-probe")
             parsed.noDenyProbe = true;
         else if (token === "--help" || token === "-h")
             parsed.help = true;
+        else if (token === "--base-url") {
+            const raw = argv[++index];
+            if (!raw || raw.startsWith("--"))
+                return { error: "--base-url requires an HTTP(S) URL." };
+            const valid = validateHttpBaseUrl(raw);
+            if (!valid.ok)
+                return { error: "--base-url requires a valid HTTP(S) URL." };
+            parsed.baseUrl = valid.baseUrl;
+        }
         else
             return { error: `Unknown argument "${token}". Run "epic-implementer readiness --help" for usage.` };
     }
@@ -83,8 +96,16 @@ export function parseReadinessArgs(argv) {
  * epic-implementer doctor's local inspections, and the same plane preflight
  * `plane up` and `drive-epic` run. Nothing is re-implemented here.
  */
-async function collectProductionReport(repoRoot, env) {
-    const accessResult = await resolveConductorBridgeApiAccess({ env, cwd: repoRoot });
+async function collectProductionReport(repoRoot, env, baseUrl) {
+    const { reportEnv, resolverEnv } = readinessEndpointEnvironments(env, baseUrl);
+    const accessResult = baseUrl === undefined
+        ? await resolveConductorBridgeApiAccess({ env: reportEnv, cwd: repoRoot })
+        : await resolveEpicLaunchBridgeApiAccess({ baseUrl }, { env: resolverEnv, cwd: repoRoot });
+    if (baseUrl !== undefined && !accessResult.ok) {
+        // A refused override is never permission for a downstream doctor collector
+        // to resolve credentials afresh from the general CLI environment.
+        return collectConductorReadinessGate({ repoName: null });
+    }
     const access = accessResult.ok ? accessResult.access : null;
     return collectConductorReadinessGate({
         // Never guessed: an unresolved identity is reported as such rather than
@@ -101,7 +122,7 @@ async function collectProductionReport(repoRoot, env) {
             readWorkflowFile: () => fsReadFile(claudeReviewWorkflowPath(repoRoot), "utf-8"),
             projectRoot: repoRoot,
             installDoctorDeps: {
-                env,
+                env: reportEnv,
                 cwd: repoRoot,
                 platform: process.platform,
                 homedir: os.homedir,
@@ -112,8 +133,8 @@ async function collectProductionReport(repoRoot, env) {
         },
         // The deny-enforcement probe is never spawned from this command; the check
         // is reported as an explicit skip naming `epic-implementer doctor` instead.
-        conductorDoctorDeps: { env, skipDenyProbe: true },
-        runPlanePreflight: () => runDefaultPlanePreflight(repoRoot, env),
+        conductorDoctorDeps: { env: reportEnv, skipDenyProbe: true },
+        runPlanePreflight: () => runDefaultPlanePreflight(repoRoot, reportEnv),
     });
 }
 /**
@@ -138,7 +159,7 @@ export async function runConductorReadinessCommand(argv, deps = {}) {
     }
     const cwd = deps.cwd ?? process.cwd();
     const env = deps.env ?? process.env;
-    const collect = deps.collect ?? ((repoRoot) => collectProductionReport(repoRoot, env));
+    const collect = deps.collect ?? ((repoRoot) => collectProductionReport(repoRoot, env, parsed.baseUrl));
     const report = await collect(cwd);
     // Fixed, sanitized, and stderr-only: never a credential, exception, header,
     // body, subprocess output, or absolute path. It fires on a COLLECTION gap,

package/build/conductor/readiness-sections.js

@@ -771,12 +771,13 @@ export function conductorHookTargetsSection(legacyConductor, conductorContext) {
             detail: "advisory — not a git worktree, so no managed conductor hooks apply",
         };
     }
+    // BAPI-1290: the shared per-hook `usable` verdict — a recognized command, an
+    // executable hook, and a qualified persistent runtime whose Node and native
+    // binding load. A file that merely exists is not delivery, and a hook without
+    // that verdict (an older or partial report) is unknown, never usable.
     const usable = (name) => {
         const hook = (hooks.hooks ?? []).find((h) => h.name === name);
-        return (hook !== undefined &&
-            hook.exists &&
-            hook.managed_block_present &&
-            hook.embedded_bin_is_file);
+        return hook !== undefined && hook.usable === true;
     };
     const rendered = MANAGED_HOOK_NAMES.map((name) => `${name}=${usable(name)}`).join(", ");
     const allUsable = MANAGED_HOOK_NAMES.every((name) => usable(name));

package/build/conductor/readiness.js

@@ -141,7 +141,7 @@ export const SERVER_READINESS_DESCRIPTORS = [
     { id: "executor-readiness", label: "Executor server observation" },
     { id: "review-workflow", label: "Review workflow protocol" },
     { id: "conductor-ci-workflow", label: "Conductor CI migration guard" },
-    // BAPI-1102 — the two ONE-TIME unattended prerequisites plus the aggregate the
+    // BAPI-1102 — the two unattended repository prerequisites plus the aggregate the
     // third unattended refusal reads. Noun phrases, like every row above: these
     // render as list items under a source heading, not as sentences.
     { id: "unattended-consent", label: "Repository unattended consent" },
@@ -189,8 +189,10 @@ const SERVER_REMEDIATIONS = {
     olderServer: "upgrade the Bridge API deploy so it reports this fact; its state is unknown here, not healthy.",
     // BAPI-1102. Each names the ONE action that clears it, and none of them
     // mentions a webhook URL, a destination, or any configuration value.
-    unattendedConsent: "set `unattended_epic_implementer_allowed` for this repository (docs/claude/account-settings-operator-runbook.md), or run setup with --attended.",
-    unattendedNotifyDefault: "supply a --policy-file declaring notify.webhook_url, or run setup with --attended; an unattended run must have a working escalation channel, and notify.local_sink is not one.",
+    // BAPI-1273: consent defaults ON; the repository owner switches it on the
+    // admin panel's Setup page. No MCP or CLI surface ever writes it.
+    unattendedConsent: "turn on 'Allow unattended Epic Implementer runs' on the repository's Setup page in the Bridge admin panel, or run setup with --attended. If it is already on, contact Bridge support.",
+    unattendedNotifyDefault: "supply a --policy-file declaring notify.webhook_url, or add an email address to the account so escalation alerts can be emailed, or run setup with --attended; an unattended run must have a working escalation channel, and notify.local_sink is not one.",
     repositoryWorkflowReadiness: "run `install-bridge conductor` so the review and conductor-CI workflows are confirmed on the default branch, or run setup with --attended.",
     // BAPI-1135. Both are IMPORTED from the shared classifier rather than written
     // out here, so the remedy command has exactly one spelling across the refusal,
@@ -336,7 +338,28 @@ export function mapServerReadinessToChecks(readiness, failure = "unreachable") {
     });
     // BAPI-1260 — appended ONLY when the server reported the block, so every
     // pre-BAPI-1260 report keeps exactly the descriptor set above.
-    return [...described, ...admissionEvidenceChecks(readiness)];
+    return [...described, ...admissionEvidenceChecks(readiness), ...genericDiagnosticChecks(readiness)];
+}
+function genericDiagnosticChecks(readiness) {
+    return (readiness.diagnostics ?? []).map((diagnostic, index) => {
+        const inapplicable = diagnostic.applicability === "inapplicable";
+        const declared = diagnostic.severity !== null && diagnostic.applicability !== null;
+        const satisfied = declared && diagnostic.verdict === "passed" && diagnostic.applicability === "applicable";
+        const advisory = diagnostic.severity === "advisory";
+        const status = !declared ? "fail" : inapplicable ? "skip" : satisfied ? "pass" : advisory ? "warn" : "fail";
+        return createReadinessCheckSafely({
+            id: `server.diagnostic-${index + 1}-${diagnostic.id.replace(/[_.]/g, "-")}`,
+            source: "server",
+            label: `Server diagnostic ${diagnostic.id}`,
+            status,
+            detail: `severity ${diagnostic.severity ?? "unknown"}; applicability ${diagnostic.applicability ?? "unknown"}; verdict ${diagnostic.verdict}`,
+            ...(status === "pass" ? {} : {
+                remediation: status === "skip"
+                    ? "This diagnostic does not apply to the selected topology."
+                    : "Restore the diagnostic producer or resolve the reported condition before launch.",
+            }),
+        });
+    });
 }
 /** Human labels for the known BAPI-1260 evidence predicates. */
 const ADMISSION_EVIDENCE_LABELS = {
@@ -351,7 +374,7 @@ const ADMISSION_EVIDENCE_LABELS = {
 /** Who acts, in fixed prose. Never a value from the payload. */
 const ADMISSION_OWNER_REMEDIATION = {
     operator: "the operator re-runs guided setup (`install conductor --launch-profile <name>`) and re-observes.",
-    repository_admin: "a repository administrator resolves it through the account-settings runbook; setup never grants it.",
+    repository_admin: "a repository administrator resolves it (unattended consent is the 'Allow unattended Epic Implementer runs' toggle on the repository's Setup page in the Bridge admin panel); setup never grants it.",
     bridge_operations: "escalate to Bridge operations; this is not something an operator command can change.",
 };
 /**
@@ -485,7 +508,7 @@ function unattendedOutcomes(readiness) {
             : {
                 id: "unattended-consent",
                 status: "warn",
-                detail: "unattended_epic_implementer_allowed is NOT set — an unattended run will be refused before it is created",
+                detail: "unattended runs are off for this repository — an unattended run will be refused before it is created",
                 remediation: SERVER_REMEDIATIONS.unattendedConsent,
             },
         u.notify_webhook_default_declared
@@ -498,12 +521,21 @@ function unattendedOutcomes(readiness) {
                     ? "a notify webhook default is declared and verified"
                     : "a notify webhook default is declared (verified at approval, not here)",
             }
-            : {
-                id: "unattended-notify-default",
-                status: "warn",
-                detail: "no repository notify webhook default is declared — an unattended run needs an escalation channel, and no column supplies a repository default today, so the run must declare notify.webhook_url itself",
-                remediation: SERVER_REMEDIATIONS.unattendedNotifyDefault,
-            },
+            : u.escalation_email_available === true
+                ? {
+                    // BAPI-1274 — with no webhook declared, escalation alerts go to the
+                    // account's email address. Presence only: the address is never
+                    // reported by the server and is never rendered here.
+                    id: "unattended-notify-default",
+                    status: "pass",
+                    detail: "No webhook declared; escalation alerts will be emailed to the account's email address",
+                }
+                : {
+                    id: "unattended-notify-default",
+                    status: "warn",
+                    detail: "no repository notify webhook default is declared — an unattended run needs an escalation channel, and no column supplies a repository default today, so the run must declare notify.webhook_url itself or the account needs an email address for escalation alerts",
+                    remediation: SERVER_REMEDIATIONS.unattendedNotifyDefault,
+                },
         u.repository_readiness_confirmed
             ? {
                 id: "repository-workflow-readiness",
@@ -891,6 +923,7 @@ export async function collectConductorReadinessGate(deps) {
         repoName: deps.repoName ?? null,
         unavailableSources,
         checks: validated,
+        ...(installReport?.readiness?.diagnostics ? { diagnostics: installReport.readiness.diagnostics } : {}),
         summary: summarizeReadinessChecks(validated),
     };
 }