@bridge_gpt/mcp-server 0.2.65 → 0.2.67

package/build/conductor/readiness-sections.js

@@ -33,6 +33,7 @@
  * The one exception is {@link inspectWorkflowPresence}, which awaits the
  * READ-ONLY reader seams its caller injects and never opens a path of its own.
  */
+import { PRINTED_CONNECT_GITHUB_COMMAND } from "../printed-remedy-commands.js";
 import { MANAGED_HOOK_NAMES } from "./git-hooks.js";
 import { MCP_PACKAGE_NAME } from "../mcp-identity.js";
 import { CLAUDE_REVIEW_WORKFLOW_DRIFT_REMEDIATION, summarizeClaudeReviewWorkflowDrift, } from "../claude-review-workflow-drift.js";
@@ -41,7 +42,7 @@ import { classifyMergeExecutionEligibility, MERGE_EXECUTION_UNVERIFIABLE_REMEDIA
 import { MERGE_WORKFLOW_CHILD_MERGE_COMPATIBLE_VERSIONS, MERGE_WORKFLOW_PATH, mergeWorkflowVersionSupportsChildMerge, } from "./merge-execution-contract.js";
 import { classifyDatabaseMigration, classifySingleTransitionAuthority, classifyWorkerPresent, } from "./bring-up-facts.js";
 /** Operator runbook pointer surfaced beside the executor gap. */
-export const CONDUCTOR_OPERATOR_RUNBOOK_POINTER = "docs/claude/epic-implementer-v2-operator-runbook.md";
+export const CONDUCTOR_OPERATOR_RUNBOOK_POINTER = "docs/epic-implementer/operator-runbook.md";
 /**
  * Capability-matrix guidance for the executor leg.
  *
@@ -105,6 +106,22 @@ export const REQUIRED_CHECKS_PRESENTATION_COPY = {
         remediation: "restore required-check verification (a readable default branch with static lane " +
             "workflows and a current Bridge API), or correct the required-check configuration.",
     },
+    // BAPI-1360 — file- and check-specific copy for the two proven, repository-admin
+    // causes of `unverifiable`. Fixed strings over the two hard-coded workflow paths
+    // and the two gate names; nothing from the payload is interpolated.
+    retiredGate: {
+        detail: "Could not verify — a configured required check is the retired gate " +
+            `conductor-ci / gate; ${REQUIRED_CHECKS_OPERATOR_HOLD}`,
+        remediation: "a repository administrator replaces conductor-ci / gate with epic-implementer-ci / gate in the " +
+            "plan's required_checks, the supervisor done-gate checks, and branch protection.",
+    },
+    laneAbsent: {
+        detail: "Could not verify — a lane workflow file is missing from the default branch, so a configured " +
+            `required check has no producer; ${REQUIRED_CHECKS_OPERATOR_HOLD}`,
+        remediation: "a repository administrator adds the missing lane workflow file(s) — " +
+            ".github/workflows/epic-implementer-ci.yml and/or .github/workflows/claude-review.yml — " +
+            "to the default branch so the configured required checks (such as epic-implementer-ci / gate) have a producer.",
+    },
     empty: {
         detail: "Could not verify — the required-check list is EMPTY, which is unsafe: the done gate " +
             `would pass unconditionally; ${REQUIRED_CHECKS_OPERATOR_HOLD}`,
@@ -155,6 +172,24 @@ export function presentRequiredChecks(supervisor) {
             ...REQUIRED_CHECKS_PRESENTATION_COPY.unknown_name,
         };
     }
+    // BAPI-1360 — optional bounded facts refine the generic unverifiable copy. An
+    // old server reports neither, and keeps the wording above. Retired gate ranks
+    // first, then a proven-absent lane; anything else stays generic.
+    if (supervisor.required_checks_retired_gate_configured === true) {
+        return {
+            outcome: "unverifiable",
+            satisfied: false,
+            ...REQUIRED_CHECKS_PRESENTATION_COPY.retiredGate,
+        };
+    }
+    if (supervisor.required_checks_ci_workflow_absent === true ||
+        supervisor.required_checks_review_workflow_absent === true) {
+        return {
+            outcome: "unverifiable",
+            satisfied: false,
+            ...REQUIRED_CHECKS_PRESENTATION_COPY.laneAbsent,
+        };
+    }
     return {
         outcome: "unverifiable",
         satisfied: false,
@@ -268,7 +303,7 @@ export function githubCredentialsSection(readiness) {
         detail: g.credentials_readable
             ? `incomplete: ${missing} unresolved`
             : "no GitHub credential row for this repository",
-        remediation: "connect GitHub from the Bridge setup UI (`install-bridge connect-github`).",
+        remediation: `connect GitHub from the Bridge setup UI or run \`${PRINTED_CONNECT_GITHUB_COMMAND}\`.`,
     };
 }
 export function githubActionsSection(readiness) {
@@ -396,7 +431,7 @@ export function reconcilerSection(readiness) {
         // remediation at all — so a report could name a gap with no next step.
         return {
             id: "reconciler-liveness",
-            label: "Reconciler tick liveness",
+            label: "Active-run progress",
             status: "degraded",
             detail: "liveness could not be read",
             remediation: "retry once the Bridge API is reachable; reconciler liveness is unknown here, " +
@@ -406,19 +441,19 @@ export function reconcilerSection(readiness) {
     if (!r.stale) {
         return {
             id: "reconciler-liveness",
-            label: "Reconciler tick liveness",
+            label: "Active-run progress",
             status: "ok",
             detail: `last tick ${r.last_tick_age_seconds}s ago across ${r.active_run_count} active run(s)`,
         };
     }
     return {
         id: "reconciler-liveness",
-        label: "Reconciler tick liveness",
+        label: "Active-run progress",
         status: "degraded",
         detail: r.last_tick_at === null
             ? "no reconciler tick recorded for this repository"
             : `last tick ${r.last_tick_age_seconds}s ago (threshold ${readiness.thresholds.reconciler_stale_after_seconds}s)`,
-        remediation: "start the reconciler (`epic-implementer epic-tick` schedule) for this repository.",
+        remediation: "check the worker first (`server.worker-present`), then inspect the stalled run with `epic-implementer epic-status`.",
     };
 }
 // ---------------------------------------------------------------------------

package/build/conductor/readiness.js

@@ -92,12 +92,14 @@
  * unrelated additive change look like a breaking one here, or worse, hide a real
  * one.
  */
+import { PRINTED_CHECK_NAME_INSTRUCTION, PRINTED_CONDUCTOR_EXECUTOR_INSTALL_COMMAND, PRINTED_CONDUCTOR_INSTALL_COMMAND, PRINTED_CONNECT_GITHUB_COMMAND, PRINTED_EXECUTOR_ID_INSTRUCTION, } from "../printed-remedy-commands.js";
 import { mapConductorDoctorReportToReadinessChecks, } from "./doctor.js";
 import { mapInstallStatusChecksToReadinessChecks, } from "../install-doctor.js";
 import { mapPlanePreflightToReadinessChecks, } from "../plane/preflight.js";
 import { runConductorInstallDoctor, } from "./install-doctor.js";
 import { BRING_UP_SECTION_LABELS, presentRequiredChecks, } from "./readiness-sections.js";
 import { classifyBringUpFacts } from "./bring-up-facts.js";
+import { CI_WORKFLOW_PATH, REVIEW_WORKFLOW_PATH, ciWorkflowRemedy, repositoryWorkflowRemedy, } from "./repository-workflow-remedy.js";
 import { classifyMergeExecutionEligibility, MERGE_EXECUTION_INELIGIBLE_REMEDIATION, MERGE_EXECUTION_UNVERIFIABLE_REMEDIATION, } from "./merge-execution-eligibility.js";
 import { createReadinessCheck, createReadinessCheckSafely, summarizeReadinessChecks, validateReadinessChecks, } from "../readiness-check.js";
 import { ADMISSION_EVIDENCE_SCHEMA_VERSION, } from "./bridge-api-client.js";
@@ -137,7 +139,10 @@ export const SERVER_READINESS_DESCRIPTORS = [
         id: "single-transition-authority",
         label: BRING_UP_SECTION_LABELS["single-transition-authority"],
     },
-    { id: "reconciler-liveness", label: "Reconciler tick liveness" },
+    // The stable ID stays `reconciler-liveness`; only the label changed (BAPI-1360),
+    // because the row reports whether ACTIVE runs are making progress, not whether a
+    // reconciler process exists.
+    { id: "reconciler-liveness", label: "Active-run progress" },
     { id: "executor-readiness", label: "Executor server observation" },
     { id: "review-workflow", label: "Review workflow protocol" },
     { id: "conductor-ci-workflow", label: "Conductor CI migration guard" },
@@ -145,7 +150,7 @@ export const SERVER_READINESS_DESCRIPTORS = [
     // third unattended refusal reads. Noun phrases, like every row above: these
     // render as list items under a source heading, not as sentences.
     { id: "unattended-consent", label: "Repository unattended consent" },
-    { id: "unattended-notify-default", label: "Verified notify webhook default" },
+    { id: "unattended-notify-default", label: "Escalation channel (webhook or email)" },
     { id: "repository-workflow-readiness", label: "Repository workflow readiness" },
 ];
 /** Fixed, secret-free prose per failure kind. Never a status body or header. */
@@ -169,23 +174,29 @@ const SERVER_FAILURE_COPY = {
 };
 /** Remediations for the individual server facts, as fixed prose. */
 const SERVER_REMEDIATIONS = {
-    supervisorSetup: "run `install conductor` (or `setup-epic`) for this repository to write the project-default supervisor posture.",
-    supervisorConfig: "run `install conductor` for this repository to write the project-default supervisor configuration.",
+    supervisorSetup: `run \`${PRINTED_CONDUCTOR_INSTALL_COMMAND}\` (or \`setup-epic\`) for this repository to write the project-default supervisor posture. ${PRINTED_CHECK_NAME_INSTRUCTION}`,
+    supervisorConfig: `run \`${PRINTED_CONDUCTOR_INSTALL_COMMAND}\` for this repository to write the project-default supervisor configuration. ${PRINTED_CHECK_NAME_INSTRUCTION}`,
     mergeApproval: "set the merge-approval requirement explicitly in the supervisor configuration rather than leaving it unset.",
     reviewPolicyMissing: "set the repository review-policy default so the merge path and the code_review gate read the same signal.",
     reviewPolicyDivergent: "align the repository review-policy default with the done gate's review_state condition, or confirm the difference is intended.",
-    githubCredentials: "connect GitHub from the Bridge setup UI (`install-bridge connect-github`) so owner, repository id, and installation id all resolve.",
+    githubCredentials: `connect GitHub from the Bridge setup UI or run \`${PRINTED_CONNECT_GITHUB_COMMAND}\` so owner, repository id, and installation id all resolve.`,
     actionsProbeFailed: "re-run once credentials resolve; the permission could not be checked, which is not the same as confirmed-missing.",
     actionsMissing: "grant the GitHub App `actions: write`; without it the conductor's workflow rerun lane fails open on 403.",
     reconcilerUnreadable: "retry once the Bridge API is reachable; reconciler liveness is unknown here, not confirmed stale.",
-    reconcilerStale: "start the reconciler for this repository (the `epic-implementer epic-tick` schedule) so ticks resume.",
+    // BAPI-1360: the frozen `epic-tick` command is never named. The reconciler runs
+    // inside the worker, so the first check is that the worker is up, then the run's
+    // own status.
+    reconcilerStale: "check the worker first (`server.worker-present`), then inspect the stalled run with `epic-implementer epic-status`.",
     executorUnreadable: "retry once the Bridge API is reachable; no executor readiness claim is ever made from local state.",
-    executorNeverSeen: "provision and start an executor (`install conductor --executor-id <id> --repo-wide` or `executor install-service`); readiness comes only from a live server observation.",
+    executorNeverSeen: `provision and start an executor (\`${PRINTED_CONDUCTOR_EXECUTOR_INSTALL_COMMAND}\` or \`executor install-service\`); readiness comes only from a live server observation. ${PRINTED_CHECK_NAME_INSTRUCTION} ${PRINTED_EXECUTOR_ID_INSTRUCTION}`,
+    executorNoneObservedNoRuns: `no action is needed to launch: \`drive-epic\` starts a run-scoped executor. To keep an executor running between runs, install one with \`${PRINTED_CONDUCTOR_EXECUTOR_INSTALL_COMMAND}\` or \`executor install-service\`. ${PRINTED_CHECK_NAME_INSTRUCTION} ${PRINTED_EXECUTOR_ID_INSTRUCTION}`,
     executorStale: "restart the executor service; it was observed once and has gone quiet past the server's staleness threshold.",
     reviewWorkflowUnknown: "re-run; the default branch's review workflow could not be evaluated, which is not the same as it being absent.",
     reviewWorkflowIncomplete: "install the claude-review workflow template on the default branch so it emits both the run id and the reviewed SHA the verdict protocol reads.",
     ciWorkflowUnknown: "re-run; the default branch's conductor CI workflow could not be evaluated, which is not the same as the guard being absent.",
-    ciWorkflowMissingGuard: "add the migration-guard job to the conductor CI workflow on the default branch so migrations are checked before a merge.",
+    // BAPI-1359: the missing-guard remedy is built by `ciWorkflowRemedy` (the shared
+    // formatter), because its wording depends on WHY the guard is missing — a
+    // confirmed Alembic chain, an older server, or an unreadable answer.
     olderServer: "upgrade the Bridge API deploy so it reports this fact; its state is unknown here, not healthy.",
     // BAPI-1102. Each names the ONE action that clears it, and none of them
     // mentions a webhook URL, a destination, or any configuration value.
@@ -193,7 +204,10 @@ const SERVER_REMEDIATIONS = {
     // admin panel's Setup page. No MCP or CLI surface ever writes it.
     unattendedConsent: "turn on 'Allow unattended Epic Implementer runs' on the repository's Setup page in the Bridge admin panel, or run setup with --attended. If it is already on, contact Bridge support.",
     unattendedNotifyDefault: "supply a --policy-file declaring notify.webhook_url, or add an email address to the account so escalation alerts can be emailed, or run setup with --attended; an unattended run must have a working escalation channel, and notify.local_sink is not one.",
-    repositoryWorkflowReadiness: "run `install-bridge conductor` so the review and conductor-CI workflows are confirmed on the default branch, or run setup with --attended.",
+    // BAPI-1359: the `repository-workflow-readiness` remedy is built by
+    // `repositoryWorkflowRemedy` (the shared formatter) from the SAME report, so it
+    // names the specific missing item. The generic "run `install-bridge
+    // conductor`" text was retired: no install step creates a migration-guard job.
     // BAPI-1135. Both are IMPORTED from the shared classifier rather than written
     // out here, so the remedy command has exactly one spelling across the refusal,
     // the readiness row, and the doctor — see `merge-execution-contract.ts`.
@@ -331,14 +345,42 @@ export function mapServerReadinessToChecks(readiness, failure = "unreachable") {
             label,
             status: outcome.status,
             detail: outcome.detail,
+            // A pass carries no remediation, and a `skip` carries one only when its
+            // outcome supplied one: the older-server default would misdescribe a fact
+            // that was deliberately not evaluated.
             ...(outcome.status === "pass"
                 ? {}
-                : { remediation: outcome.remediation ?? SERVER_REMEDIATIONS.olderServer }),
+                : outcome.status === "skip"
+                    ? outcome.remediation === undefined
+                        ? {}
+                        : { remediation: outcome.remediation }
+                    : { remediation: outcome.remediation ?? SERVER_REMEDIATIONS.olderServer }),
         });
     });
     // BAPI-1260 — appended ONLY when the server reported the block, so every
     // pre-BAPI-1260 report keeps exactly the descriptor set above.
-    return [...described, ...admissionEvidenceChecks(readiness)];
+    return [...described, ...admissionEvidenceChecks(readiness), ...genericDiagnosticChecks(readiness)];
+}
+function genericDiagnosticChecks(readiness) {
+    return (readiness.diagnostics ?? []).map((diagnostic, index) => {
+        const inapplicable = diagnostic.applicability === "inapplicable";
+        const declared = diagnostic.severity !== null && diagnostic.applicability !== null;
+        const satisfied = declared && diagnostic.verdict === "passed" && diagnostic.applicability === "applicable";
+        const advisory = diagnostic.severity === "advisory";
+        const status = !declared ? "fail" : inapplicable ? "skip" : satisfied ? "pass" : advisory ? "warn" : "fail";
+        return createReadinessCheckSafely({
+            id: `server.diagnostic-${index + 1}-${diagnostic.id.replace(/[_.]/g, "-")}`,
+            source: "server",
+            label: `Server diagnostic ${diagnostic.id}`,
+            status,
+            detail: `severity ${diagnostic.severity ?? "unknown"}; applicability ${diagnostic.applicability ?? "unknown"}; verdict ${diagnostic.verdict}`,
+            ...(status === "pass" ? {} : {
+                remediation: status === "skip"
+                    ? "This diagnostic does not apply to the selected topology."
+                    : "Restore the diagnostic producer or resolve the reported condition before launch.",
+            }),
+        });
+    });
 }
 /** Human labels for the known BAPI-1260 evidence predicates. */
 const ADMISSION_EVIDENCE_LABELS = {
@@ -356,6 +398,44 @@ const ADMISSION_OWNER_REMEDIATION = {
     repository_admin: "a repository administrator resolves it (unattended consent is the 'Allow unattended Epic Implementer runs' toggle on the repository's Setup page in the Bridge admin panel); setup never grants it.",
     bridge_operations: "escalate to Bridge operations; this is not something an operator command can change.",
 };
+/** The retired and current Bridge CI gate names, spelled once for the fixed remedies. */
+const RETIRED_GATE_NAME = "conductor-ci / gate";
+const CURRENT_GATE_NAME = "epic-implementer-ci / gate";
+/**
+ * Fixed, per-reason remedies (BAPI-1360). Assembled from literals and the two
+ * hard-coded workflow paths only: a record's reason picks a template, and nothing
+ * from the payload is interpolated. `null` means "no specific remedy — use the
+ * owner's generic one".
+ */
+function admissionReasonRemedy(record, readiness) {
+    const sup = readiness.supervisor;
+    const ciAbsent = sup.required_checks_ci_workflow_absent === true ||
+        (readiness.conductor_ci_workflow?.probe_succeeded === true &&
+            readiness.conductor_ci_workflow?.workflow_present === false);
+    const reviewAbsent = sup.required_checks_review_workflow_absent === true ||
+        (readiness.review_workflow?.probe_succeeded === true &&
+            readiness.review_workflow?.workflow_present === false);
+    switch (record.reason) {
+        case "review_workflow_unconfirmed":
+            return (`a repository administrator adds ${REVIEW_WORKFLOW_PATH} to the default branch, or repairs it so it ` +
+                "emits the run-id: and Reviewed-SHA: markers in its verdict comment; setup never grants it.");
+        case "conductor_ci_workflow_unconfirmed":
+            return (`a repository administrator adds ${CI_WORKFLOW_PATH} to the default branch, or repairs it (a ` +
+                "migration-guard job is required when the repository has alembic.ini); setup never grants it.");
+        case "required_checks_lane_workflow_absent": {
+            const files = [ciAbsent ? CI_WORKFLOW_PATH : null, reviewAbsent ? REVIEW_WORKFLOW_PATH : null].filter((file) => file !== null);
+            const named = files.length > 0 ? files.join(" and ") : `${CI_WORKFLOW_PATH} and ${REVIEW_WORKFLOW_PATH}`;
+            return (`a repository administrator adds ${named} to the default branch so the configured required ` +
+                `checks (such as ${CURRENT_GATE_NAME}) have a producer; setup never grants it.`);
+        }
+        case "required_check_retired_gate":
+            return (`a repository administrator replaces ${RETIRED_GATE_NAME} with ${CURRENT_GATE_NAME} in the plan's ` +
+                "required_checks, in the supervisor done-gate checks, and in branch protection." +
+                (ciAbsent ? ` Also add ${CI_WORKFLOW_PATH} to the default branch so ${CURRENT_GATE_NAME} has a producer.` : ""));
+        default:
+            return null;
+    }
+}
 /**
  * Project the server's typed launch evidence (BAPI-1260) into `server.*`
  * checks, read-only.
@@ -384,13 +464,30 @@ export function admissionEvidenceChecks(readiness) {
             }),
         ];
     }
-    return evidence.records.map((record) => admissionEvidenceCheck(record));
+    return evidence.records.map((record) => admissionEvidenceCheck(record, readiness));
 }
-function admissionEvidenceCheck(record) {
+function admissionEvidenceCheck(record, readiness) {
     const slug = record.predicate.replace(/[^a-z0-9]+/g, "-").replace(/^-+|-+$/g, "") || "unknown";
     const label = ADMISSION_EVIDENCE_LABELS[record.predicate] ?? "Launch evidence";
     const reason = record.reason ? ` (${record.reason})` : "";
-    const remediation = ADMISSION_OWNER_REMEDIATION[record.next_action_owner ?? "operator"] ?? ADMISSION_OWNER_REMEDIATION.operator;
+    const remediation = admissionReasonRemedy(record, readiness) ??
+        ADMISSION_OWNER_REMEDIATION[record.next_action_owner ?? "operator"] ??
+        ADMISSION_OWNER_REMEDIATION.operator;
+    // BAPI-1360: the durable-actor handshake being unsupported is a known, current
+    // limitation, not a hold — it renders as a warning that says so. Every other
+    // predicate, and every other reason for this one, keeps its existing branch.
+    if (record.predicate === "durable_actor" && record.reason === "actor_handshake_unsupported") {
+        return createReadinessCheckSafely({
+            id: `server.admission-${slug}`,
+            source: "server",
+            label,
+            status: "warn",
+            detail: `not yet supported by this deploy${reason} — this does not hold a launch`,
+            // Fixed, non-escalating: the owner remedy would tell the operator to escalate
+            // for a limitation that blocks nothing.
+            remediation: "no action is needed to launch; this warning clears once the deploy supports the durable-actor handshake.",
+        });
+    }
     switch (record.verdict) {
         case "confirmed":
             return createReadinessCheckSafely({
@@ -482,7 +579,7 @@ function unattendedOutcomes(readiness) {
             ? {
                 id: "unattended-consent",
                 status: "pass",
-                detail: "this repository has consented to unattended conductor runs",
+                detail: "this repository has consented to unattended Epic Implementer runs",
             }
             : {
                 id: "unattended-consent",
@@ -519,13 +616,21 @@ function unattendedOutcomes(readiness) {
             ? {
                 id: "repository-workflow-readiness",
                 status: "pass",
-                detail: "the review and conductor-CI workflows are both confirmed",
+                detail: "the review and epic-implementer-ci workflows are both confirmed",
             }
             : {
                 id: "repository-workflow-readiness",
                 status: "warn",
-                detail: "the review and conductor-CI workflows are not both confirmed — an unattended auto-merging run will be refused",
-                remediation: SERVER_REMEDIATIONS.repositoryWorkflowReadiness,
+                // BAPI-1360: name a confirmed-missing file separately from a file that
+                // could not be read; the remedy already differs by owner.
+                detail: readiness.review_workflow?.probe_succeeded === true &&
+                    readiness.review_workflow?.workflow_present === false
+                    ? `${REVIEW_WORKFLOW_PATH} is missing from the default branch — an unattended auto-merging run will be refused`
+                    : readiness.conductor_ci_workflow?.probe_succeeded === true &&
+                        readiness.conductor_ci_workflow?.workflow_present === false
+                        ? `${CI_WORKFLOW_PATH} is missing from the default branch — an unattended auto-merging run will be refused`
+                        : "the review and epic-implementer-ci workflows are not both confirmed — an unattended auto-merging run will be refused",
+                remediation: repositoryWorkflowRemedy(readiness),
             },
     ];
 }
@@ -656,6 +761,17 @@ function reconcilerOutcome(readiness) {
             remediation: SERVER_REMEDIATIONS.reconcilerUnreadable,
         };
     }
+    // BAPI-1360 — with no active run there is no progress to judge: the row is an
+    // explicit, remedy-free `skip`, not a stale-tick failure about a reconciler that
+    // has nothing to reconcile. ONLY a readable response with a strict zero count
+    // qualifies; a missing or malformed count keeps the stale/pass reading below.
+    if (r.liveness_readable === true && r.active_run_count === 0) {
+        return {
+            id: "reconciler-liveness",
+            status: "skip",
+            detail: "no active runs, so there is no run progress to check",
+        };
+    }
     if (!r.stale) {
         return {
             id: "reconciler-liveness",
@@ -705,10 +821,21 @@ function executorOutcome(readiness) {
             remediation: SERVER_REMEDIATIONS.executorStale,
         };
     }
+    // `ready === null`. BAPI-1360: with readable executor AND reconciler liveness and
+    // a strict zero active-run count, no executor being present is expected —
+    // `drive-epic` starts a run-scoped one — so it is a warning, not a failure.
+    if (readiness.reconciler.liveness_readable === true && readiness.reconciler.active_run_count === 0) {
+        return {
+            id: "executor-readiness",
+            status: "warn",
+            detail: "no executor was observed; `drive-epic` starts a run-scoped executor at launch, so a durable service is optional",
+            remediation: SERVER_REMEDIATIONS.executorNoneObservedNoRuns,
+        };
+    }
     return {
         id: "executor-readiness",
         status: "fail",
-        detail: "never observed by the server",
+        detail: "no executor was observed while runs are active or their count could not be read",
         remediation: SERVER_REMEDIATIONS.executorNeverSeen,
     };
 }
@@ -733,6 +860,16 @@ function reviewWorkflowOutcome(readiness) {
             remediation: SERVER_REMEDIATIONS.reviewWorkflowUnknown,
         };
     }
+    // BAPI-1360 — a SUCCESSFUL probe that found no file is a confirmed absence, kept
+    // apart from an unreadable file (Bridge operations) and from missing markers.
+    if (w.workflow_present === false) {
+        return {
+            id: "review-workflow",
+            status: "fail",
+            detail: `${REVIEW_WORKFLOW_PATH} is missing from the default branch (confirmed)`,
+            remediation: `a repository administrator adds ${REVIEW_WORKFLOW_PATH} to the default branch so it emits both the run id and the reviewed SHA the verdict protocol reads.`,
+        };
+    }
     if (w.emits_run_id && w.emits_reviewed_sha) {
         return {
             id: "review-workflow",
@@ -759,7 +896,7 @@ function ciWorkflowOutcome(readiness) {
         return {
             id: "conductor-ci-workflow",
             status: "fail",
-            detail: "this Bridge API deploy did not report the conductor-CI workflow facts",
+            detail: "this Bridge API deploy did not report the epic-implementer-ci workflow facts",
             remediation: SERVER_REMEDIATIONS.olderServer,
         };
     }
@@ -773,18 +910,51 @@ function ciWorkflowOutcome(readiness) {
             remediation: SERVER_REMEDIATIONS.ciWorkflowUnknown,
         };
     }
-    return c.migration_guard_present
-        ? {
+    // BAPI-1360 — confirmed absence of the file, not a missing migration guard.
+    if (c.workflow_present === false) {
+        return {
+            id: "conductor-ci-workflow",
+            status: "fail",
+            detail: `${CI_WORKFLOW_PATH} is missing from the default branch (confirmed)`,
+            remediation: `a repository administrator adds ${CI_WORKFLOW_PATH} to the default branch. ${ciWorkflowRemedy(c)}`,
+        };
+    }
+    if (c.migration_guard_present) {
+        return {
             id: "conductor-ci-workflow",
             status: "pass",
             detail: "the default branch's conductor CI workflow runs the migration guard",
-        }
-        : {
+        };
+    }
+    // BAPI-1359 — the guard is conditional on an Alembic chain. Three explicit
+    // server answers, plus the older-server case where neither field is reported.
+    if (c.migration_chain_probe_succeeded === true && c.migration_guard_required === false) {
+        return {
             id: "conductor-ci-workflow",
-            status: "warn",
-            detail: "the conductor CI workflow does not run the migration guard",
-            remediation: SERVER_REMEDIATIONS.ciWorkflowMissingGuard,
+            status: "pass",
+            // States only what was observed. It does not say migrations are safe, or
+            // that the repository has none.
+            detail: "migration guard not required (no Alembic chain: no alembic.ini on the default branch)",
+        };
+    }
+    if (c.migration_chain_probe_succeeded === false) {
+        return {
+            id: "conductor-ci-workflow",
+            status: "fail",
+            detail: "the Alembic check could not be read, so it is not known whether the conductor CI workflow needs the migration guard",
+            remediation: ciWorkflowRemedy(c),
         };
+    }
+    return {
+        id: "conductor-ci-workflow",
+        status: "warn",
+        detail: c.migration_guard_required === true && c.migration_chain_probe_succeeded === true
+            ? "the conductor CI workflow does not run the migration guard, which this repository requires because it has alembic.ini on its default branch"
+            : // An older server (no new fields) or a partial report: keep today's
+                // wording and today's behavior, and claim nothing about alembic.ini.
+                "the conductor CI workflow does not run the migration guard",
+        remediation: ciWorkflowRemedy(c),
+    };
 }
 // ---------------------------------------------------------------------------
 // Install-time section adapter
@@ -852,7 +1022,7 @@ export function mapInstallSectionsToReadinessChecks(sections) {
                 ? {}
                 : {
                     remediation: section.remediation ??
-                        "run `install conductor` for this repository to re-provision this capability.",
+                        `run \`${PRINTED_CONDUCTOR_INSTALL_COMMAND}\` for this repository to re-provision this capability. ${PRINTED_CHECK_NAME_INSTRUCTION}`,
                 }),
         }));
     }
@@ -882,13 +1052,14 @@ export async function collectConductorReadinessGate(deps) {
     }
     // A plane preflight was requested and could not be run. Not requesting one is
     // not an unavailability — its prerequisites are still reported as unknowns.
-    if (deps.runPlanePreflight && planeResult === null)
+    if (deps.runPlanePreflight && deps.planeNotApplicable === undefined && planeResult === null) {
         unavailableSources.push("plane");
+    }
     const checks = [
         ...mapInstallStatusChecksToReadinessChecks((installReport?.legacyInstallChecks ?? null), installReport === null),
         ...mapConductorDoctorReportToReadinessChecks(installReport?.legacyConductor ?? null),
         ...mapInstallSectionsToReadinessChecks(installReport?.sections ?? null),
-        ...mapPlanePreflightToReadinessChecks(planeResult),
+        ...mapPlanePreflightToReadinessChecks(planeResult, deps.planeNotApplicable),
         ...mapServerReadinessToChecks(installReport?.readiness ?? null, classifyServerFailure(installReport)),
     ];
     // Validate the ASSEMBLED report, not just the pieces: an injected collector or
@@ -902,6 +1073,7 @@ export async function collectConductorReadinessGate(deps) {
         repoName: deps.repoName ?? null,
         unavailableSources,
         checks: validated,
+        ...(installReport?.readiness?.diagnostics ? { diagnostics: installReport.readiness.diagnostics } : {}),
         summary: summarizeReadinessChecks(validated),
     };
 }
@@ -924,6 +1096,8 @@ async function runInstallDoctorSafely(deps) {
 }
 /** Run the plane preflight, containing any throw. */
 async function runPlaneSafely(deps) {
+    if (deps.planeNotApplicable !== undefined)
+        return null;
     if (!deps.runPlanePreflight)
         return null;
     try {