@bridge_gpt/mcp-server 0.2.66 → 0.2.67

package/build/conductor/readiness.js

@@ -92,12 +92,14 @@
  * unrelated additive change look like a breaking one here, or worse, hide a real
  * one.
  */
+import { PRINTED_CHECK_NAME_INSTRUCTION, PRINTED_CONDUCTOR_EXECUTOR_INSTALL_COMMAND, PRINTED_CONDUCTOR_INSTALL_COMMAND, PRINTED_CONNECT_GITHUB_COMMAND, PRINTED_EXECUTOR_ID_INSTRUCTION, } from "../printed-remedy-commands.js";
 import { mapConductorDoctorReportToReadinessChecks, } from "./doctor.js";
 import { mapInstallStatusChecksToReadinessChecks, } from "../install-doctor.js";
 import { mapPlanePreflightToReadinessChecks, } from "../plane/preflight.js";
 import { runConductorInstallDoctor, } from "./install-doctor.js";
 import { BRING_UP_SECTION_LABELS, presentRequiredChecks, } from "./readiness-sections.js";
 import { classifyBringUpFacts } from "./bring-up-facts.js";
+import { CI_WORKFLOW_PATH, REVIEW_WORKFLOW_PATH, ciWorkflowRemedy, repositoryWorkflowRemedy, } from "./repository-workflow-remedy.js";
 import { classifyMergeExecutionEligibility, MERGE_EXECUTION_INELIGIBLE_REMEDIATION, MERGE_EXECUTION_UNVERIFIABLE_REMEDIATION, } from "./merge-execution-eligibility.js";
 import { createReadinessCheck, createReadinessCheckSafely, summarizeReadinessChecks, validateReadinessChecks, } from "../readiness-check.js";
 import { ADMISSION_EVIDENCE_SCHEMA_VERSION, } from "./bridge-api-client.js";
@@ -137,7 +139,10 @@ export const SERVER_READINESS_DESCRIPTORS = [
         id: "single-transition-authority",
         label: BRING_UP_SECTION_LABELS["single-transition-authority"],
     },
-    { id: "reconciler-liveness", label: "Reconciler tick liveness" },
+    // The stable ID stays `reconciler-liveness`; only the label changed (BAPI-1360),
+    // because the row reports whether ACTIVE runs are making progress, not whether a
+    // reconciler process exists.
+    { id: "reconciler-liveness", label: "Active-run progress" },
     { id: "executor-readiness", label: "Executor server observation" },
     { id: "review-workflow", label: "Review workflow protocol" },
     { id: "conductor-ci-workflow", label: "Conductor CI migration guard" },
@@ -145,7 +150,7 @@ export const SERVER_READINESS_DESCRIPTORS = [
     // third unattended refusal reads. Noun phrases, like every row above: these
     // render as list items under a source heading, not as sentences.
     { id: "unattended-consent", label: "Repository unattended consent" },
-    { id: "unattended-notify-default", label: "Verified notify webhook default" },
+    { id: "unattended-notify-default", label: "Escalation channel (webhook or email)" },
     { id: "repository-workflow-readiness", label: "Repository workflow readiness" },
 ];
 /** Fixed, secret-free prose per failure kind. Never a status body or header. */
@@ -169,23 +174,29 @@ const SERVER_FAILURE_COPY = {
 };
 /** Remediations for the individual server facts, as fixed prose. */
 const SERVER_REMEDIATIONS = {
-    supervisorSetup: "run `install conductor` (or `setup-epic`) for this repository to write the project-default supervisor posture.",
-    supervisorConfig: "run `install conductor` for this repository to write the project-default supervisor configuration.",
+    supervisorSetup: `run \`${PRINTED_CONDUCTOR_INSTALL_COMMAND}\` (or \`setup-epic\`) for this repository to write the project-default supervisor posture. ${PRINTED_CHECK_NAME_INSTRUCTION}`,
+    supervisorConfig: `run \`${PRINTED_CONDUCTOR_INSTALL_COMMAND}\` for this repository to write the project-default supervisor configuration. ${PRINTED_CHECK_NAME_INSTRUCTION}`,
     mergeApproval: "set the merge-approval requirement explicitly in the supervisor configuration rather than leaving it unset.",
     reviewPolicyMissing: "set the repository review-policy default so the merge path and the code_review gate read the same signal.",
     reviewPolicyDivergent: "align the repository review-policy default with the done gate's review_state condition, or confirm the difference is intended.",
-    githubCredentials: "connect GitHub from the Bridge setup UI (`install-bridge connect-github`) so owner, repository id, and installation id all resolve.",
+    githubCredentials: `connect GitHub from the Bridge setup UI or run \`${PRINTED_CONNECT_GITHUB_COMMAND}\` so owner, repository id, and installation id all resolve.`,
     actionsProbeFailed: "re-run once credentials resolve; the permission could not be checked, which is not the same as confirmed-missing.",
     actionsMissing: "grant the GitHub App `actions: write`; without it the conductor's workflow rerun lane fails open on 403.",
     reconcilerUnreadable: "retry once the Bridge API is reachable; reconciler liveness is unknown here, not confirmed stale.",
-    reconcilerStale: "start the reconciler for this repository (the `epic-implementer epic-tick` schedule) so ticks resume.",
+    // BAPI-1360: the frozen `epic-tick` command is never named. The reconciler runs
+    // inside the worker, so the first check is that the worker is up, then the run's
+    // own status.
+    reconcilerStale: "check the worker first (`server.worker-present`), then inspect the stalled run with `epic-implementer epic-status`.",
     executorUnreadable: "retry once the Bridge API is reachable; no executor readiness claim is ever made from local state.",
-    executorNeverSeen: "provision and start an executor (`install conductor --executor-id <id> --repo-wide` or `executor install-service`); readiness comes only from a live server observation.",
+    executorNeverSeen: `provision and start an executor (\`${PRINTED_CONDUCTOR_EXECUTOR_INSTALL_COMMAND}\` or \`executor install-service\`); readiness comes only from a live server observation. ${PRINTED_CHECK_NAME_INSTRUCTION} ${PRINTED_EXECUTOR_ID_INSTRUCTION}`,
+    executorNoneObservedNoRuns: `no action is needed to launch: \`drive-epic\` starts a run-scoped executor. To keep an executor running between runs, install one with \`${PRINTED_CONDUCTOR_EXECUTOR_INSTALL_COMMAND}\` or \`executor install-service\`. ${PRINTED_CHECK_NAME_INSTRUCTION} ${PRINTED_EXECUTOR_ID_INSTRUCTION}`,
     executorStale: "restart the executor service; it was observed once and has gone quiet past the server's staleness threshold.",
     reviewWorkflowUnknown: "re-run; the default branch's review workflow could not be evaluated, which is not the same as it being absent.",
     reviewWorkflowIncomplete: "install the claude-review workflow template on the default branch so it emits both the run id and the reviewed SHA the verdict protocol reads.",
     ciWorkflowUnknown: "re-run; the default branch's conductor CI workflow could not be evaluated, which is not the same as the guard being absent.",
-    ciWorkflowMissingGuard: "add the migration-guard job to the conductor CI workflow on the default branch so migrations are checked before a merge.",
+    // BAPI-1359: the missing-guard remedy is built by `ciWorkflowRemedy` (the shared
+    // formatter), because its wording depends on WHY the guard is missing — a
+    // confirmed Alembic chain, an older server, or an unreadable answer.
     olderServer: "upgrade the Bridge API deploy so it reports this fact; its state is unknown here, not healthy.",
     // BAPI-1102. Each names the ONE action that clears it, and none of them
     // mentions a webhook URL, a destination, or any configuration value.
@@ -193,7 +204,10 @@ const SERVER_REMEDIATIONS = {
     // admin panel's Setup page. No MCP or CLI surface ever writes it.
     unattendedConsent: "turn on 'Allow unattended Epic Implementer runs' on the repository's Setup page in the Bridge admin panel, or run setup with --attended. If it is already on, contact Bridge support.",
     unattendedNotifyDefault: "supply a --policy-file declaring notify.webhook_url, or add an email address to the account so escalation alerts can be emailed, or run setup with --attended; an unattended run must have a working escalation channel, and notify.local_sink is not one.",
-    repositoryWorkflowReadiness: "run `install-bridge conductor` so the review and conductor-CI workflows are confirmed on the default branch, or run setup with --attended.",
+    // BAPI-1359: the `repository-workflow-readiness` remedy is built by
+    // `repositoryWorkflowRemedy` (the shared formatter) from the SAME report, so it
+    // names the specific missing item. The generic "run `install-bridge
+    // conductor`" text was retired: no install step creates a migration-guard job.
     // BAPI-1135. Both are IMPORTED from the shared classifier rather than written
     // out here, so the remedy command has exactly one spelling across the refusal,
     // the readiness row, and the doctor — see `merge-execution-contract.ts`.
@@ -331,9 +345,16 @@ export function mapServerReadinessToChecks(readiness, failure = "unreachable") {
             label,
             status: outcome.status,
             detail: outcome.detail,
+            // A pass carries no remediation, and a `skip` carries one only when its
+            // outcome supplied one: the older-server default would misdescribe a fact
+            // that was deliberately not evaluated.
             ...(outcome.status === "pass"
                 ? {}
-                : { remediation: outcome.remediation ?? SERVER_REMEDIATIONS.olderServer }),
+                : outcome.status === "skip"
+                    ? outcome.remediation === undefined
+                        ? {}
+                        : { remediation: outcome.remediation }
+                    : { remediation: outcome.remediation ?? SERVER_REMEDIATIONS.olderServer }),
         });
     });
     // BAPI-1260 — appended ONLY when the server reported the block, so every
@@ -377,6 +398,44 @@ const ADMISSION_OWNER_REMEDIATION = {
     repository_admin: "a repository administrator resolves it (unattended consent is the 'Allow unattended Epic Implementer runs' toggle on the repository's Setup page in the Bridge admin panel); setup never grants it.",
     bridge_operations: "escalate to Bridge operations; this is not something an operator command can change.",
 };
+/** The retired and current Bridge CI gate names, spelled once for the fixed remedies. */
+const RETIRED_GATE_NAME = "conductor-ci / gate";
+const CURRENT_GATE_NAME = "epic-implementer-ci / gate";
+/**
+ * Fixed, per-reason remedies (BAPI-1360). Assembled from literals and the two
+ * hard-coded workflow paths only: a record's reason picks a template, and nothing
+ * from the payload is interpolated. `null` means "no specific remedy — use the
+ * owner's generic one".
+ */
+function admissionReasonRemedy(record, readiness) {
+    const sup = readiness.supervisor;
+    const ciAbsent = sup.required_checks_ci_workflow_absent === true ||
+        (readiness.conductor_ci_workflow?.probe_succeeded === true &&
+            readiness.conductor_ci_workflow?.workflow_present === false);
+    const reviewAbsent = sup.required_checks_review_workflow_absent === true ||
+        (readiness.review_workflow?.probe_succeeded === true &&
+            readiness.review_workflow?.workflow_present === false);
+    switch (record.reason) {
+        case "review_workflow_unconfirmed":
+            return (`a repository administrator adds ${REVIEW_WORKFLOW_PATH} to the default branch, or repairs it so it ` +
+                "emits the run-id: and Reviewed-SHA: markers in its verdict comment; setup never grants it.");
+        case "conductor_ci_workflow_unconfirmed":
+            return (`a repository administrator adds ${CI_WORKFLOW_PATH} to the default branch, or repairs it (a ` +
+                "migration-guard job is required when the repository has alembic.ini); setup never grants it.");
+        case "required_checks_lane_workflow_absent": {
+            const files = [ciAbsent ? CI_WORKFLOW_PATH : null, reviewAbsent ? REVIEW_WORKFLOW_PATH : null].filter((file) => file !== null);
+            const named = files.length > 0 ? files.join(" and ") : `${CI_WORKFLOW_PATH} and ${REVIEW_WORKFLOW_PATH}`;
+            return (`a repository administrator adds ${named} to the default branch so the configured required ` +
+                `checks (such as ${CURRENT_GATE_NAME}) have a producer; setup never grants it.`);
+        }
+        case "required_check_retired_gate":
+            return (`a repository administrator replaces ${RETIRED_GATE_NAME} with ${CURRENT_GATE_NAME} in the plan's ` +
+                "required_checks, in the supervisor done-gate checks, and in branch protection." +
+                (ciAbsent ? ` Also add ${CI_WORKFLOW_PATH} to the default branch so ${CURRENT_GATE_NAME} has a producer.` : ""));
+        default:
+            return null;
+    }
+}
 /**
  * Project the server's typed launch evidence (BAPI-1260) into `server.*`
  * checks, read-only.
@@ -405,13 +464,30 @@ export function admissionEvidenceChecks(readiness) {
             }),
         ];
     }
-    return evidence.records.map((record) => admissionEvidenceCheck(record));
+    return evidence.records.map((record) => admissionEvidenceCheck(record, readiness));
 }
-function admissionEvidenceCheck(record) {
+function admissionEvidenceCheck(record, readiness) {
     const slug = record.predicate.replace(/[^a-z0-9]+/g, "-").replace(/^-+|-+$/g, "") || "unknown";
     const label = ADMISSION_EVIDENCE_LABELS[record.predicate] ?? "Launch evidence";
     const reason = record.reason ? ` (${record.reason})` : "";
-    const remediation = ADMISSION_OWNER_REMEDIATION[record.next_action_owner ?? "operator"] ?? ADMISSION_OWNER_REMEDIATION.operator;
+    const remediation = admissionReasonRemedy(record, readiness) ??
+        ADMISSION_OWNER_REMEDIATION[record.next_action_owner ?? "operator"] ??
+        ADMISSION_OWNER_REMEDIATION.operator;
+    // BAPI-1360: the durable-actor handshake being unsupported is a known, current
+    // limitation, not a hold — it renders as a warning that says so. Every other
+    // predicate, and every other reason for this one, keeps its existing branch.
+    if (record.predicate === "durable_actor" && record.reason === "actor_handshake_unsupported") {
+        return createReadinessCheckSafely({
+            id: `server.admission-${slug}`,
+            source: "server",
+            label,
+            status: "warn",
+            detail: `not yet supported by this deploy${reason} — this does not hold a launch`,
+            // Fixed, non-escalating: the owner remedy would tell the operator to escalate
+            // for a limitation that blocks nothing.
+            remediation: "no action is needed to launch; this warning clears once the deploy supports the durable-actor handshake.",
+        });
+    }
     switch (record.verdict) {
         case "confirmed":
             return createReadinessCheckSafely({
@@ -503,7 +579,7 @@ function unattendedOutcomes(readiness) {
             ? {
                 id: "unattended-consent",
                 status: "pass",
-                detail: "this repository has consented to unattended conductor runs",
+                detail: "this repository has consented to unattended Epic Implementer runs",
             }
             : {
                 id: "unattended-consent",
@@ -540,13 +616,21 @@ function unattendedOutcomes(readiness) {
             ? {
                 id: "repository-workflow-readiness",
                 status: "pass",
-                detail: "the review and conductor-CI workflows are both confirmed",
+                detail: "the review and epic-implementer-ci workflows are both confirmed",
             }
             : {
                 id: "repository-workflow-readiness",
                 status: "warn",
-                detail: "the review and conductor-CI workflows are not both confirmed — an unattended auto-merging run will be refused",
-                remediation: SERVER_REMEDIATIONS.repositoryWorkflowReadiness,
+                // BAPI-1360: name a confirmed-missing file separately from a file that
+                // could not be read; the remedy already differs by owner.
+                detail: readiness.review_workflow?.probe_succeeded === true &&
+                    readiness.review_workflow?.workflow_present === false
+                    ? `${REVIEW_WORKFLOW_PATH} is missing from the default branch — an unattended auto-merging run will be refused`
+                    : readiness.conductor_ci_workflow?.probe_succeeded === true &&
+                        readiness.conductor_ci_workflow?.workflow_present === false
+                        ? `${CI_WORKFLOW_PATH} is missing from the default branch — an unattended auto-merging run will be refused`
+                        : "the review and epic-implementer-ci workflows are not both confirmed — an unattended auto-merging run will be refused",
+                remediation: repositoryWorkflowRemedy(readiness),
             },
     ];
 }
@@ -677,6 +761,17 @@ function reconcilerOutcome(readiness) {
             remediation: SERVER_REMEDIATIONS.reconcilerUnreadable,
         };
     }
+    // BAPI-1360 — with no active run there is no progress to judge: the row is an
+    // explicit, remedy-free `skip`, not a stale-tick failure about a reconciler that
+    // has nothing to reconcile. ONLY a readable response with a strict zero count
+    // qualifies; a missing or malformed count keeps the stale/pass reading below.
+    if (r.liveness_readable === true && r.active_run_count === 0) {
+        return {
+            id: "reconciler-liveness",
+            status: "skip",
+            detail: "no active runs, so there is no run progress to check",
+        };
+    }
     if (!r.stale) {
         return {
             id: "reconciler-liveness",
@@ -726,10 +821,21 @@ function executorOutcome(readiness) {
             remediation: SERVER_REMEDIATIONS.executorStale,
         };
     }
+    // `ready === null`. BAPI-1360: with readable executor AND reconciler liveness and
+    // a strict zero active-run count, no executor being present is expected —
+    // `drive-epic` starts a run-scoped one — so it is a warning, not a failure.
+    if (readiness.reconciler.liveness_readable === true && readiness.reconciler.active_run_count === 0) {
+        return {
+            id: "executor-readiness",
+            status: "warn",
+            detail: "no executor was observed; `drive-epic` starts a run-scoped executor at launch, so a durable service is optional",
+            remediation: SERVER_REMEDIATIONS.executorNoneObservedNoRuns,
+        };
+    }
     return {
         id: "executor-readiness",
         status: "fail",
-        detail: "never observed by the server",
+        detail: "no executor was observed while runs are active or their count could not be read",
         remediation: SERVER_REMEDIATIONS.executorNeverSeen,
     };
 }
@@ -754,6 +860,16 @@ function reviewWorkflowOutcome(readiness) {
             remediation: SERVER_REMEDIATIONS.reviewWorkflowUnknown,
         };
     }
+    // BAPI-1360 — a SUCCESSFUL probe that found no file is a confirmed absence, kept
+    // apart from an unreadable file (Bridge operations) and from missing markers.
+    if (w.workflow_present === false) {
+        return {
+            id: "review-workflow",
+            status: "fail",
+            detail: `${REVIEW_WORKFLOW_PATH} is missing from the default branch (confirmed)`,
+            remediation: `a repository administrator adds ${REVIEW_WORKFLOW_PATH} to the default branch so it emits both the run id and the reviewed SHA the verdict protocol reads.`,
+        };
+    }
     if (w.emits_run_id && w.emits_reviewed_sha) {
         return {
             id: "review-workflow",
@@ -780,7 +896,7 @@ function ciWorkflowOutcome(readiness) {
         return {
             id: "conductor-ci-workflow",
             status: "fail",
-            detail: "this Bridge API deploy did not report the conductor-CI workflow facts",
+            detail: "this Bridge API deploy did not report the epic-implementer-ci workflow facts",
             remediation: SERVER_REMEDIATIONS.olderServer,
         };
     }
@@ -794,18 +910,51 @@ function ciWorkflowOutcome(readiness) {
             remediation: SERVER_REMEDIATIONS.ciWorkflowUnknown,
         };
     }
-    return c.migration_guard_present
-        ? {
+    // BAPI-1360 — confirmed absence of the file, not a missing migration guard.
+    if (c.workflow_present === false) {
+        return {
+            id: "conductor-ci-workflow",
+            status: "fail",
+            detail: `${CI_WORKFLOW_PATH} is missing from the default branch (confirmed)`,
+            remediation: `a repository administrator adds ${CI_WORKFLOW_PATH} to the default branch. ${ciWorkflowRemedy(c)}`,
+        };
+    }
+    if (c.migration_guard_present) {
+        return {
             id: "conductor-ci-workflow",
             status: "pass",
             detail: "the default branch's conductor CI workflow runs the migration guard",
-        }
-        : {
+        };
+    }
+    // BAPI-1359 — the guard is conditional on an Alembic chain. Three explicit
+    // server answers, plus the older-server case where neither field is reported.
+    if (c.migration_chain_probe_succeeded === true && c.migration_guard_required === false) {
+        return {
             id: "conductor-ci-workflow",
-            status: "warn",
-            detail: "the conductor CI workflow does not run the migration guard",
-            remediation: SERVER_REMEDIATIONS.ciWorkflowMissingGuard,
+            status: "pass",
+            // States only what was observed. It does not say migrations are safe, or
+            // that the repository has none.
+            detail: "migration guard not required (no Alembic chain: no alembic.ini on the default branch)",
+        };
+    }
+    if (c.migration_chain_probe_succeeded === false) {
+        return {
+            id: "conductor-ci-workflow",
+            status: "fail",
+            detail: "the Alembic check could not be read, so it is not known whether the conductor CI workflow needs the migration guard",
+            remediation: ciWorkflowRemedy(c),
         };
+    }
+    return {
+        id: "conductor-ci-workflow",
+        status: "warn",
+        detail: c.migration_guard_required === true && c.migration_chain_probe_succeeded === true
+            ? "the conductor CI workflow does not run the migration guard, which this repository requires because it has alembic.ini on its default branch"
+            : // An older server (no new fields) or a partial report: keep today's
+                // wording and today's behavior, and claim nothing about alembic.ini.
+                "the conductor CI workflow does not run the migration guard",
+        remediation: ciWorkflowRemedy(c),
+    };
 }
 // ---------------------------------------------------------------------------
 // Install-time section adapter
@@ -873,7 +1022,7 @@ export function mapInstallSectionsToReadinessChecks(sections) {
                 ? {}
                 : {
                     remediation: section.remediation ??
-                        "run `install conductor` for this repository to re-provision this capability.",
+                        `run \`${PRINTED_CONDUCTOR_INSTALL_COMMAND}\` for this repository to re-provision this capability. ${PRINTED_CHECK_NAME_INSTRUCTION}`,
                 }),
         }));
     }
@@ -903,13 +1052,14 @@ export async function collectConductorReadinessGate(deps) {
     }
     // A plane preflight was requested and could not be run. Not requesting one is
     // not an unavailability — its prerequisites are still reported as unknowns.
-    if (deps.runPlanePreflight && planeResult === null)
+    if (deps.runPlanePreflight && deps.planeNotApplicable === undefined && planeResult === null) {
         unavailableSources.push("plane");
+    }
     const checks = [
         ...mapInstallStatusChecksToReadinessChecks((installReport?.legacyInstallChecks ?? null), installReport === null),
         ...mapConductorDoctorReportToReadinessChecks(installReport?.legacyConductor ?? null),
         ...mapInstallSectionsToReadinessChecks(installReport?.sections ?? null),
-        ...mapPlanePreflightToReadinessChecks(planeResult),
+        ...mapPlanePreflightToReadinessChecks(planeResult, deps.planeNotApplicable),
         ...mapServerReadinessToChecks(installReport?.readiness ?? null, classifyServerFailure(installReport)),
     ];
     // Validate the ASSEMBLED report, not just the pieces: an injected collector or
@@ -946,6 +1096,8 @@ async function runInstallDoctorSafely(deps) {
 }
 /** Run the plane preflight, containing any throw. */
 async function runPlaneSafely(deps) {
+    if (deps.planeNotApplicable !== undefined)
+        return null;
     if (!deps.runPlanePreflight)
         return null;
     try {

package/build/conductor/recovery-cli.js

@@ -1,15 +1,16 @@
 /**
- * `conductor` operator recovery and repair verbs — thirteen CLI-only commands.
+ * `conductor` operator recovery and repair verbs — fourteen CLI-only commands.
  *
  * The four BAPI-872 recovery verbs: `stop-run`, `abandon-run`, `unpark`,
  * `adopt-current-head-and-unpark`. The six run-addressed repair verbs: BAPI-1154's
  * `scope-reparse`, `dispatch-remediation`, `merge-child`, and BAPI-1176's
  * `scope-catch-up`, `patch-policy`, `resume-run`. BAPI-1300's parked-child
  * continuation pair: `continue-child` and the read-only `continuation-receipt`.
- * BAPI-1326's allowance-preserving CI resume: `resume-ci`.
+ * BAPI-1326's allowance-preserving CI resume: `resume-ci`. BAPI-1388's guided
+ * provider re-run of failed CI workflow runs: `rerun-ci`.
  *
  * CLI-only by design — this is an explicit ticket non-goal, not an oversight:
- * none of these thirteen command names is ever registered as an MCP tool, tool
+ * none of these fourteen command names is ever registered as an MCP tool, tool
  * description, or generated tool-schema input (`index-static.test.ts` guards
  * this). They exist so an operator (or `plane down`, via
  * `recovery-operations.ts`) can recover a stuck run or ticket WITHOUT
@@ -709,11 +710,13 @@ export async function runScopeReparseCommand(argv) {
 const DISPATCH_REMEDIATION_USAGE = [
     "Usage: epic-implementer dispatch-remediation --epic-run-id <id> --ticket-key <key> --context-file <path> [--json]",
     "",
-    "Dispatch a remediation job for a ticket at code_review (or parked there),",
+    "Dispatch a remediation job for a ticket at code_review or ci (or parked there),",
     "carrying your driver context to the worker. The SERVER chooses the job type",
-    "(remediate, or reconcile_overlap for a conflict/overlap ticket) and admits it",
+    "(remediate, or reconcile_overlap for a conflict/overlap ticket; ci_fix for a CI",
+    "failure the server's FRESH CI read routes to investigation) and admits it",
     "through the reconciler's own strict-serial lane, remediation budget, and",
-    "dedup key. A parked ticket is resumed in the same step.",
+    "dedup key. A parked ticket is resumed in the same step (unguided only). An",
+    "infrastructure CI failure is refused by name and points to rerun-ci.",
     "",
     `--context-file must be non-empty UTF-8 text of at most DRIVER_CONTEXT_MAX_BYTES`,
     `(${DRIVER_CONTEXT_MAX_BYTES} bytes). It is rejected, never truncated, and is never`,
@@ -764,7 +767,7 @@ export async function runDispatchRemediationCommand(argv, deps = {}) {
                     guard,
                 }),
                 label: `ticket ${parsed.ticketKey}`,
-                stateLabel: "code_review gate",
+                stateLabel: "selected gate",
             }, parsed.json);
         }
         const { dispatchRemediationRepair } = await import("./recovery-operations.js");
@@ -777,7 +780,7 @@ export async function runDispatchRemediationCommand(argv, deps = {}) {
             verb: "dispatch-remediation",
             epicRunId: parsed.epicRunId,
             targetLabel: `ticket ${parsed.ticketKey}`,
-            stateLabel: "code_review gate",
+            stateLabel: "selected gate",
         }, parsed.json, (result) => [
             `  job:             ${result.job_type || "unknown"}${result.job_id !== null ? ` (job ${result.job_id})` : ""}`,
         ]);
@@ -787,6 +790,195 @@ export async function runDispatchRemediationCommand(argv, deps = {}) {
         return 1;
     }
 }
+// ---------------------------------------------------------------------------
+// BAPI-1388 — rerun-ci
+// ---------------------------------------------------------------------------
+const RERUN_CI_VALUE_FLAGS = new Set(["--epic-run-id", "--ticket-key", "--binding"]);
+/** Exit codes: 0 applied (including an all-not-re-runnable no-op), 2 refused/stale, 3 unconfirmed, 1 other. */
+export const RERUN_CI_EXIT_OK = 0;
+export const RERUN_CI_EXIT_FAILED = 1;
+export const RERUN_CI_EXIT_REFUSED = 2;
+export const RERUN_CI_EXIT_UNCONFIRMED = 3;
+const RERUN_CI_USAGE = [
+    "Usage: epic-implementer rerun-ci --epic-run-id <id> --ticket-key <key> --binding <token> [--json]",
+    "",
+    "Ask the CI provider to re-run a ticket's FAILED required checks at its bound head,",
+    "for a ticket at ci or parked on it. Copy the command exactly as the run",
+    "explanation rendered it: --binding pins the ticket version and head it showed.",
+    "The SERVER re-reads fresh CI evidence, re-runs each GitHub Actions workflow run at",
+    "most once per head, and reports every failed check as enqueued, deduplicated,",
+    "deferred, or not_re_runnable.",
+    "",
+    "rerun-ci NEVER re-runs the claude-review workflow. It charges no allowance and",
+    "changes no park state, and a re-run is not a verdict: when CI is green, use",
+    "`epic-implementer resume-ci` (a parked ticket) or let the reconciler observe it.",
+    "If the failure is a code defect, use `dispatch-remediation --context-file`.",
+    "",
+    "The request is stored locally before it is sent, so re-running the same command",
+    "after a lost response re-sends the SAME request. A subject that has since changed",
+    "is refused as stale with nothing written.",
+    "",
+    "Exit codes: 0 applied (including a no-op when nothing could be re-run); 2 refused",
+    "or stale; 3 unconfirmed; 1 other failure (including a server without this verb).",
+].join("\n");
+export function parseRerunCiArgs(argv) {
+    const { values, bools } = tokenizeRecoveryFlags(argv, RERUN_CI_VALUE_FLAGS, RECOVERY_BOOL_FLAGS);
+    if (bools.has("--help")) {
+        return { epicRunId: "", ticketKey: "", binding: "", json: bools.has("--json"), help: true };
+    }
+    return {
+        epicRunId: requireFlag(values, "--epic-run-id"),
+        ticketKey: requireFlag(values, "--ticket-key"),
+        binding: requireFlag(values, "--binding"),
+        json: bools.has("--json"),
+        help: false,
+    };
+}
+const RERUN_CI_STATUS_TEXT = {
+    enqueued: "re-run requested",
+    deduplicated: "already requested",
+    deferred: "deferred (not requested; run the verb again after a fresh explain-run)",
+    not_re_runnable: "not re-runnable",
+};
+const RERUN_CI_REASON_TEXT = {
+    not_github_actions: "not a GitHub Actions check",
+    no_workflow_run_id: "no workflow run id",
+    claude_review_excluded: "claude-review is never re-run",
+};
+const RERUN_CI_OUTCOME_TEXT = {
+    enqueued: "re-runs requested",
+    partial: "partially requested (some runs deferred)",
+    nothing_to_enqueue: "nothing to enqueue (no failed check could be re-run)",
+};
+const RERUN_CI_NEXT_ACTION = {
+    enqueued: "Wait for the re-runs to finish, then read `epic-implementer explain-run`. When CI is " +
+        "green use `epic-implementer resume-ci` (a parked ticket); this verb did not mark CI passed.",
+    partial: "Some runs were not requested. Read `epic-implementer explain-run` and, if still " +
+        "offered, re-run the command it renders with its fresh binding.",
+    nothing_to_enqueue: "No re-run was possible. Read `epic-implementer explain-run`; for a code defect use " +
+        "`dispatch-remediation --context-file`.",
+};
+function rerunCiCheckLine(check) {
+    const identity = [
+        check.name ?? "(unnamed check)",
+        check.workflow_identity ? `workflow ${check.workflow_identity}` : null,
+        check.run_id !== null ? `run ${check.run_id}` : null,
+    ]
+        .filter((part) => part !== null)
+        .join(", ");
+    const reason = check.reason ? ` — ${RERUN_CI_REASON_TEXT[check.reason] ?? check.reason}` : "";
+    const job = check.job_id !== null ? ` (job ${check.job_id})` : "";
+    return `    - ${identity}: ${RERUN_CI_STATUS_TEXT[check.status] ?? check.status}${reason}${job}`;
+}
+/**
+ * Exported for tests: render one `rerun-ci` outcome. Success goes to stdout and
+ * every failure to stderr (`--json` included). An unsupported server is NEVER a
+ * success and says it is "not available on this server".
+ */
+export function renderRerunCiOutcome(outcome, parsed, json) {
+    const label = `ticket ${parsed.ticketKey} (run ${parsed.epicRunId})`;
+    if (outcome.kind === "applied") {
+        const result = outcome.result;
+        if (result.committed && !result.event_recorded) {
+            console.error(`Warning: rerun-ci for ${label} COMMITTED, but its operator_verb_applied audit ` +
+                "event was not recorded. The action stands.");
+        }
+        if (json) {
+            console.log(JSON.stringify({
+                ok: true,
+                outcome: "applied",
+                request_id: outcome.requestId,
+                reference_reused: outcome.referenceReused,
+                result,
+            }));
+            return RERUN_CI_EXIT_OK;
+        }
+        const lines = [
+            `rerun-ci (guided) — ${label}`,
+            `  ticket:          ${result.ticket_key}`,
+            `  head:            ${result.head_sha ? "`" + result.head_sha + "`" : "unknown"}`,
+            `  outcome:         ${RERUN_CI_OUTCOME_TEXT[result.outcome] ?? result.outcome}`,
+            "  failed checks:",
+            ...result.checks.map(rerunCiCheckLine),
+            `  next action:     ${RERUN_CI_NEXT_ACTION[result.outcome] ?? "Read `epic-implementer explain-run`."}`,
+            `  request:         ${outcome.requestId}${outcome.referenceReused ? " (re-sent from the local reference)" : ""}`,
+            `  event recorded:  ${result.event_recorded}`,
+        ];
+        console.log(lines.join("\n"));
+        return RERUN_CI_EXIT_OK;
+    }
+    if (outcome.kind === "refused" || outcome.kind === "stale") {
+        const payload = {
+            ok: false,
+            outcome: outcome.kind,
+            code: outcome.code,
+            message: outcome.message,
+            request_id: outcome.requestId,
+            nothing_written: true,
+        };
+        if (json) {
+            console.error(JSON.stringify(payload));
+        }
+        else {
+            console.error(`Refused: rerun-ci for ${label} — ${outcome.code}: ${outcome.message}. ` +
+                (outcome.kind === "stale"
+                    ? "Nothing was written. The run changed since this command was rendered; re-read the run explanation."
+                    : "Nothing was written."));
+        }
+        return RERUN_CI_EXIT_REFUSED;
+    }
+    if (outcome.kind === "unconfirmed") {
+        if (json) {
+            console.error(JSON.stringify({
+                ok: false,
+                outcome: "unconfirmed",
+                reason: outcome.reason,
+                message: outcome.message,
+                request_id: outcome.requestId,
+            }));
+        }
+        else {
+            console.error(`Unconfirmed: rerun-ci for ${label} — ${outcome.message}.`);
+        }
+        return RERUN_CI_EXIT_UNCONFIRMED;
+    }
+    if (json) {
+        console.error(JSON.stringify({ ok: false, outcome: outcome.kind, message: outcome.message }));
+    }
+    else {
+        console.error(`Failed: rerun-ci for ${label} — ${outcome.message}.`);
+    }
+    return RERUN_CI_EXIT_FAILED;
+}
+export async function runRerunCiCommand(argv) {
+    try {
+        const parsed = parseRerunCiArgs(argv);
+        if (parsed.help) {
+            console.log(RERUN_CI_USAGE);
+            return 0;
+        }
+        // Prove the token names THIS command, run, and ticket before credentials are
+        // resolved, so a mismatched binding reaches no one.
+        const binding = checkGuidedBinding(parsed.binding, "rerun-ci", {
+            epicRunId: parsed.epicRunId,
+            ticketKey: parsed.ticketKey,
+        });
+        const access = await resolveRecoveryAccess(parsed.json);
+        if (!access)
+            return RERUN_CI_EXIT_FAILED;
+        const { rerunCiRepair } = await import("./recovery-operations.js");
+        const outcome = await rerunCiRepair(access, {
+            epicRunId: parsed.epicRunId,
+            ticketKey: parsed.ticketKey,
+            binding,
+        });
+        return renderRerunCiOutcome(outcome, parsed, parsed.json);
+    }
+    catch (error) {
+        console.error(`Error: ${toConductorErrorEnvelope(error).message}`);
+        return RERUN_CI_EXIT_FAILED;
+    }
+}
 const MERGE_CHILD_USAGE = [
     "Usage: epic-implementer merge-child --epic-run-id <id> --pr <number> [--json]",
     "",