@bridge_gpt/mcp-server 0.2.65 → 0.2.67

package/build/conductor/repository-workflow-remedy.js

@@ -0,0 +1,125 @@
+/** The two fixed workflow files unattended auto-merge reads. Named once here. */
+export const REVIEW_WORKFLOW_PATH = ".github/workflows/claude-review.yml";
+export const CI_WORKFLOW_PATH = ".github/workflows/epic-implementer-ci.yml";
+/** The migration guard's stable job id and its exact checker invocation. */
+export const MIGRATION_GUARD_JOB_ID = "migration-guard";
+export const MIGRATION_GUARD_CHECKER_PATH = "scripts/check_alembic_migration_graph.py";
+export const MIGRATION_GUARD_INVOCATION = `python ${MIGRATION_GUARD_CHECKER_PATH}`;
+const RETRY = "Run the readiness check again, or pass --attended. " +
+    "If it keeps failing, contact Bridge operations.";
+const TEMPLATES = {
+    review_workflow_file: `${REVIEW_WORKFLOW_PATH} is missing from the default branch. Add it, or pass --attended.`,
+    review_run_id_marker: `${REVIEW_WORKFLOW_PATH} does not emit the run-id: marker in its verdict comment. ` +
+        "Add it, or pass --attended.",
+    review_reviewed_sha_marker: `${REVIEW_WORKFLOW_PATH} does not emit the Reviewed-SHA: marker in its verdict comment. ` +
+        "Add it, or pass --attended.",
+    review_workflow_unverifiable: `Bridge could not read ${REVIEW_WORKFLOW_PATH} on the default branch. ${RETRY}`,
+    ci_workflow_file: `${CI_WORKFLOW_PATH} is missing from the default branch. Add it, or pass --attended.`,
+    migration_guard_job: `${CI_WORKFLOW_PATH} has no job with id ${MIGRATION_GUARD_JOB_ID} running ${MIGRATION_GUARD_INVOCATION}. ` +
+        "It is required because this repository has alembic.ini on its default branch, " +
+        `and an equivalent checker at ${MIGRATION_GUARD_CHECKER_PATH} is required too. ` +
+        "Add that job, or pass --attended.",
+    migration_chain_unverifiable: "Bridge could not confirm whether this repository has alembic.ini on its default branch, " +
+        `so it could not decide if the ${MIGRATION_GUARD_JOB_ID} job is required. ${RETRY}`,
+    ci_workflow_unverifiable: `Bridge could not read ${CI_WORKFLOW_PATH} on the default branch. ${RETRY}`,
+    // An older server never reported whether the guard is conditional, so its
+    // guard has always been required. This states that requirement and NOTHING
+    // about alembic.ini: an older server observed no such file.
+    migration_guard_job_legacy: `${CI_WORKFLOW_PATH} has no job with id ${MIGRATION_GUARD_JOB_ID} running ${MIGRATION_GUARD_INVOCATION}. ` +
+        "Add that job, or pass --attended.",
+};
+/** Shown when the report is missing, incomplete, or not in a shape we can name. */
+const UNVERIFIABLE_FALLBACK = "Bridge could not verify the review and CI workflows on the default branch. " + RETRY;
+function classifyReview(w) {
+    if (w === null || w === undefined || typeof w !== "object")
+        return "malformed";
+    if (w.probe_succeeded !== true)
+        return ["review_workflow_unverifiable"];
+    if (w.workflow_present === false)
+        return ["review_workflow_file"];
+    if (w.workflow_present !== true ||
+        typeof w.emits_run_id !== "boolean" ||
+        typeof w.emits_reviewed_sha !== "boolean") {
+        return "malformed";
+    }
+    const missing = [];
+    if (!w.emits_run_id)
+        missing.push("review_run_id_marker");
+    if (!w.emits_reviewed_sha)
+        missing.push("review_reviewed_sha_marker");
+    return missing;
+}
+function classifyCi(c) {
+    if (c === null || c === undefined || typeof c !== "object")
+        return "malformed";
+    if (c.probe_succeeded !== true)
+        return ["ci_workflow_unverifiable"];
+    if (c.workflow_present === false)
+        return ["ci_workflow_file"];
+    if (c.workflow_present !== true || typeof c.migration_guard_present !== "boolean") {
+        return "malformed";
+    }
+    if (c.migration_guard_present)
+        return [];
+    const required = c.migration_guard_required;
+    const chainProbed = c.migration_chain_probe_succeeded;
+    // Older server: neither field reported. The guard was always required there,
+    // and the absent fields must never read as "not required".
+    if (required === undefined && chainProbed === undefined) {
+        return ["migration_guard_job_legacy"];
+    }
+    if (typeof required !== "boolean" || typeof chainProbed !== "boolean")
+        return "malformed";
+    if (chainProbed && !required)
+        return []; // confirmed guard-free
+    if (chainProbed && required)
+        return ["migration_guard_job"];
+    return ["migration_chain_unverifiable"];
+}
+/**
+ * Name the first failing workflow section of a parsed readiness report, its
+ * missing facts in stable order, and one fixed-template message.
+ *
+ * `section: null` with the fallback text means the report is missing or malformed
+ * — "could not verify", never "fine". An empty `missing` with `section: null`
+ * cannot occur: a report with nothing failing yields the fallback only when it is
+ * unreadable, and otherwise the empty result below.
+ */
+export function describeRepositoryWorkflowRemedy(readiness) {
+    const review = classifyReview(readiness?.review_workflow);
+    if (review === "malformed") {
+        return { section: null, missing: [], text: UNVERIFIABLE_FALLBACK };
+    }
+    if (review.length > 0)
+        return build("review_workflow", review);
+    const ci = classifyCi(readiness?.conductor_ci_workflow);
+    if (ci === "malformed") {
+        return { section: null, missing: [], text: UNVERIFIABLE_FALLBACK };
+    }
+    if (ci.length > 0)
+        return build("conductor_ci_workflow", ci);
+    return { section: null, missing: [], text: "" };
+}
+function build(section, missing) {
+    return { section, missing, text: missing.map((token) => TEMPLATES[token]).join(" ") };
+}
+/**
+ * The remedy sentence for a repository whose workflows are not confirmed. Never
+ * empty: a report with nothing to name (the server said unconfirmed but this
+ * client can name no item) gets the unverifiable fallback rather than silence.
+ */
+export function repositoryWorkflowRemedy(readiness) {
+    const described = describeRepositoryWorkflowRemedy(readiness);
+    return described.text === "" ? UNVERIFIABLE_FALLBACK : described.text;
+}
+/**
+ * The remedy for the CI workflow section alone — what the readiness CI row shows
+ * when the migration guard is absent. Same templates, same words as
+ * {@link repositoryWorkflowRemedy}, so the row and the refusals cannot drift.
+ */
+export function ciWorkflowRemedy(c) {
+    const tokens = classifyCi(c);
+    if (tokens === "malformed" || tokens.length === 0)
+        return UNVERIFIABLE_FALLBACK;
+    return tokens.map((token) => TEMPLATES[token]).join(" ");
+}

package/build/conductor/tools.js

@@ -82,9 +82,9 @@ function registerExplainRunTool(registerTool) {
         // is the field list: a caller cannot discover the answer shape from a
         // tool that only says "explain a run", and the whole point of the tool is
         // that the answer is in one place.
-        description: "Explain why a Conductor epic run, or one ticket in it, is stuck. One snapshot: " +
+        description: "Explain why an Epic Implementer run, or one ticket in it, is stuck. One snapshot: " +
             "current gate, latest observation and age, outstanding jobs with queue position, " +
-            "lease owner/expiry, blocker reasons, expected-vs-observed head SHA, committed and " +
+            "lease owner/expiry, blocker reasons, expected/observed head SHA, committed and " +
             "pending disposition, usage ceiling. Pass ticket_key to narrow. Read-only; 404 " +
             "returns status 'unknown'.",
         inputSchema: {

package/build/conductor-bundle-artifacts.js

@@ -27,6 +27,14 @@ import { validateTicketKey } from "./ticket-key-utils.js";
 const EPIC_SLUG_RE = /^[A-Za-z][A-Za-z0-9_-]*$/;
 /** Placeholder node identity written by `decompose-epic.md` before tickets exist. */
 const PLACEHOLDER_RE = /TBD-\d+/;
+/**
+ * A whole plan-node key that is still an authoring placeholder (`TBD-<digits>`),
+ * case-insensitive. Anchored on purpose and stateless (no `g` or `y` flag, so
+ * `.test()` carries no `lastIndex`). This is NOT {@link PLACEHOLDER_RE}: that one
+ * is an unanchored scan of a whole serialized plan, and
+ * {@link findResidualPlaceholder} keeps using it unchanged.
+ */
+export const PLACEHOLDER_NODE_KEY_RE = /^TBD-\d+$/i;
 /**
  * The conductor's hard spec bound, mirroring `_SPEC_REVIEW_TICKET_SPEC_MAX_CHARS`
  * (64,000) in `api/library/epic_implementer/reconciler.py`. Since PR #848 the

package/build/credential-store.js

@@ -38,6 +38,7 @@
  * user-scoped `~/.config/bridge/credentials.json` store written here.
  */
 import path from "path";
+import { diagnosticComponent } from "./epic-launch-diagnostic.js";
 // ---------------------------------------------------------------------------
 // Path resolution
 // ---------------------------------------------------------------------------
@@ -1497,9 +1498,9 @@ export async function resolveEpicLaunchCredential(repoName, targetBaseUrl, deps,
         return {
             ok: false,
             kind: "binding-unbound",
-            error: `The stored credential "${bundleKey}" has not been approved for this Bridge API endpoint ` +
-                `(${primaryPath}). Production needs no approval; any other endpoint does. Run guided setup ` +
-                `once to bind it: install conductor --launch-profile <name> --base-url ${target}.`,
+            error: `The stored credential "${diagnosticComponent(bundleKey)}" has not been approved for this Bridge API endpoint ` +
+                `(${diagnosticComponent(primaryPath)}). Production needs no approval; any other endpoint does. Run guided setup ` +
+                `once to bind it: install conductor --launch-profile <name> --base-url ${diagnosticComponent(target)}.`,
         };
     }
     // An unreadable read-back is refused like a mismatch: the key was read a
@@ -1508,7 +1509,7 @@ export async function resolveEpicLaunchCredential(repoName, targetBaseUrl, deps,
         return {
             ok: false,
             kind: "binding-mismatch",
-            error: `The stored credential "${bundleKey}" is approved for a different Bridge API endpoint than the ` +
+            error: `The stored credential "${diagnosticComponent(bundleKey)}" is approved for a different Bridge API endpoint than the ` +
                 "selected target. It was not sent. A key approved for a local server is never sent to " +
                 "production: pass that server's --launch-profile <name> or --base-url <url>, or bind the key " +
                 "once with install conductor --launch-profile <name> --base-url <url>.",

package/build/diagnostic-text.js

@@ -0,0 +1,36 @@
+/**
+ * Single-line rendering for untrusted values in diagnostics (BAPI-1318).
+ *
+ * Project names read from `.bridge/config` or an MCP config env block, and paths
+ * read from `BAPI_PROJECT_ROOT`, are user-controlled. A newline or other control
+ * character in one of them could forge an extra line in a stderr diagnostic or a
+ * doctor report. This renderer escapes every ASCII control character and bounds
+ * the length, so each value always occupies exactly one line of output.
+ */
+/** Longest rendered value; anything longer is cut and marked with an ellipsis. */
+export const DIAGNOSTIC_VALUE_MAX_LENGTH = 200;
+/**
+ * Render `value` for a one-line diagnostic: control characters become `\xNN`
+ * (with `\n`, `\r`, and `\t` spelled out), and the result is bounded to
+ * {@link DIAGNOSTIC_VALUE_MAX_LENGTH} characters.
+ */
+export function renderDiagnosticValue(value) {
+    let out = "";
+    for (const ch of value) {
+        const code = ch.charCodeAt(0);
+        if (ch === "\n")
+            out += "\\n";
+        else if (ch === "\r")
+            out += "\\r";
+        else if (ch === "\t")
+            out += "\\t";
+        else if (code <= 0x1f || code === 0x7f)
+            out += `\\x${code.toString(16).padStart(2, "0")}`;
+        else
+            out += ch;
+    }
+    if (out.length > DIAGNOSTIC_VALUE_MAX_LENGTH) {
+        out = `${out.slice(0, DIAGNOSTIC_VALUE_MAX_LENGTH)}…`;
+    }
+    return out;
+}