@bridge_gpt/mcp-server 0.2.66 → 0.2.68

package/build/conductor/epic-implementer-cli.js

@@ -31,6 +31,8 @@ import { HOOK_RUNTIME_PROBE_ACTION, HOOK_RUNTIME_PROBE_MARKER } from "./hook-run
 import { runFileScopeGuardCli } from "./file-scope-guard.js";
 import { runPostCommitHookProducer, runReferenceTransactionHookProducer } from "./git-producer.js";
 import { buildConductorDoctorReport, formatConductorDoctorReport } from "./doctor.js";
+import { createCommandDriftInspector } from "./command-drift-production.js";
+import { writeJsonDocument } from "./json-output.js";
 import { resolveSupervisorConfig } from "./supervisor-config.js";
 import { VERSION } from "../version.generated.js";
 // `runSupervisor` is imported LAZILY inside runSuperviseCommand: it transitively
@@ -57,18 +59,21 @@ export function getConductorUsage() {
     return [
         "Usage: epic-implementer <command> [options]",
         "",
-        "Local append-only event ledger for multi-agent coordination.",
-        "Talks ONLY to the local SQLite store (~/.config/bridge/events.db); no Bridge API calls.",
+        "Local append-only event ledger for multi-agent coordination, plus run-control",
+        "commands. The ledger commands talk ONLY to the local SQLite store",
+        "(~/.config/bridge/events.db); the run-control commands (stop-run through",
+        "rerun-ci), epic-status, and readiness call the Bridge API.",
         "",
         "Commands:",
         "  emit-event           Append one semantic event to the ledger",
         "  supervise --run-id <id>  Run the foreground, run-scoped supervisor loop",
-        "  epic-tick            Run one stateless reconciliation pass for an Epic",
+        "  epic-tick            RETIRED (v1): always exits 1 with EPIC_TICK_V1_FROZEN; the",
+        "                       server-side reconciler replaced it",
         "  epic-status          Print read-only health summary of an Epic Run",
         "  send-message         Enqueue ONE typed supervisor->worker relay message (idempotent)",
         "  check-messages       Read + ACK pending relay messages for a worker (no redelivery)",
         "  doctor               Read-only health/diagnostics report (ledger + git hooks)",
-        "  readiness            Read-only ADVISORY report of every conductor prerequisite",
+        "  readiness            Read-only ADVISORY report of every Epic Implementer prerequisite",
         "                       (install + epic-implementer doctor + plane preflight + server),",
         "                       each with pass/warn/fail/skip and one named remediation.",
         "                       Remediations are NOT run automatically; always exits 0.",
@@ -77,6 +82,7 @@ export function getConductorUsage() {
         "  git-hook post-commit Run the post-commit producer (invoked by the installed hook)",
         "  git-hook reference-transaction --phase <p> --stdin-file <f>",
         "                       Run the reference-transaction producer (invoked by the hook)",
+        "  likely-tests --base <sha>  Local advisory test references for committed changes.",
         "  file-scope-guard     Warn-only: compare the branch diff against the declared",
         "                       touched-file set (always exits 0; never blocks a PR)",
         "  stop-run             Stop an epic run: block dispatch and cancel queued work",
@@ -91,6 +97,7 @@ export function getConductorUsage() {
         "  scope-reparse --epic-run-id <id> --scope-id <scope>",
         "                       Re-drive the run's OWN index scope through retry-reparse",
         "                       and schedule its parse. Refused if the scope is not the run's.",
+        "  escalate --epic-run-id <id> --ticket-key <key> --cause <cause> --action-needed <text>",
         "  dispatch-remediation --epic-run-id <id> --ticket-key <key> --context-file <path>",
         `                       Dispatch a remediation job carrying driver context (UTF-8,`,
         `                       at most DRIVER_CONTEXT_MAX_BYTES = ${DRIVER_CONTEXT_MAX_BYTES} bytes; never truncated).`,
@@ -106,7 +113,8 @@ export function getConductorUsage() {
         "  resume-run --epic-run-id <id> [--clear-quarantine] [--json]",
         "                       Resume a paused run (a quarantined one only with --clear-quarantine);",
         "                       activation is re-checked server-side. Active/no-control is a no-op.",
-        "  continue-child --epic-run-id <id> --ticket-key <key> [--reason <text>] [--json]",
+        "  continue-child --epic-run-id <id> --ticket-key <key> [--reason <text> --worker-exit-proof exited|fenced] [--json]",
+        "  grant-continuation --epic-run-id <id> --ticket-key <key> --reason <text> [--extra-continuations 1] [--extra-seconds <seconds>] [--json]",
         "                       Continue a parked child's CURRENT episode WITHOUT a reset: same attempt,",
         "                       retained work, only the allowance left. At most one dispatch per episode.",
         "  continuation-receipt --epic-run-id <id> --ticket-key <key> [--request-id <id>] [--json]",
@@ -115,6 +123,10 @@ export function getConductorUsage() {
         "  resume-ci --epic-run-id <id> --ticket-key <key> [--json]",
         "                       Resume a child parked on a qualified CI stop once CI is green: CI",
         "                       returns to evaluation with NO new wait, job, or repair allowance.",
+        "  rerun-ci --epic-run-id <id> --ticket-key <key> --binding <token> [--json]",
+        "                       Ask CI to re-run a ticket's FAILED checks at its bound head (guided: copy",
+        "                       the command explain-run rendered). Charges NO allowance and never re-runs",
+        "                       claude-review. A re-run is not a verdict: after CI is green, use resume-ci.",
         "",
         "supervise options:",
         "  --run-id <id>             Run/session identifier to supervise (required)",
@@ -172,6 +184,9 @@ export function getConductorUsage() {
         "  --no-deny-probe      Accepted for parity with `doctor`; inert here — `readiness`",
         "                       never spawns the deny-enforcement probe, and reports that",
         "                       check as an explicit skip naming `epic-implementer doctor`",
+        "  --epic-run-id <id>   The epic run being attached; when the live plane is bound",
+        "                       to it, the plane port and existing-plane rows pass with",
+        "                       reason own_plane instead of failing",
         "  --help               Print the readiness usage message",
         "  Note: advisory only. It blocks nothing and changes no exit code; `drive-epic`",
         "  remains the sole route-selection gate and server-side admission the sole refusal.",
@@ -196,11 +211,11 @@ export function getConductorUsage() {
         "  epic-implementer scope-catch-up --epic-run-id <id> --scope-id <scope>",
         "      # a merge landed on epic/<KEY> that the scope never observed (unobserved_advance)",
         "  epic-implementer patch-policy --epic-run-id <id> --patch-file required-checks.json",
-        "      # required_checks_empty_no_mode; the file holds {\"required_checks\":[\"conductor-ci / gate\"]}",
+        "      # required_checks_empty_no_mode; the file holds {\"required_checks\":[\"epic-implementer-ci / gate\"]}",
         "  epic-implementer resume-run --epic-run-id <id>",
         "      # a cap_wall_clock pause whose cause is now cleared",
         "",
-        "epic-tick options:",
+        "epic-tick options (retired; parsed by no live path):",
         "  --epic-key <KEY>          Epic key to supervise (required, non-empty)",
         "  --scheduled-at <epoch>    Epoch-seconds timestamp when this tick was scheduled (optional)",
         "  --lease-ttl-seconds <n>   Lease TTL in seconds (optional, default 120)",
@@ -259,6 +274,8 @@ export function getConductorUsage() {
         "  epic-implementer continuation-receipt --epic-run-id 3f9c2b7e-... --ticket-key BAPI-852",
         "  # CI finished green after the child parked on an expired CI wait:",
         "  epic-implementer resume-ci --epic-run-id 3f9c2b7e-... --ticket-key BAPI-852",
+        "  # CI failed on infrastructure: re-run it (never claude-review); then resume-ci once green:",
+        "  epic-implementer rerun-ci --epic-run-id 3f9c2b7e-... --ticket-key BAPI-852 --binding <token>",
     ].join("\n");
 }
 /**
@@ -294,6 +311,7 @@ const VALID_COMMANDS = new Set([
     "install-git-hooks",
     "git-hook",
     "file-scope-guard",
+    "likely-tests",
     // BAPI-872: CLI-only operator recovery verbs — never registered as MCP tools.
     "stop-run",
     "abandon-run",
@@ -301,6 +319,7 @@ const VALID_COMMANDS = new Set([
     "adopt-current-head-and-unpark",
     // BAPI-1154: CLI-only run-addressed repair verbs — never registered as MCP tools.
     "scope-reparse",
+    "escalate",
     "dispatch-remediation",
     "merge-child",
     // BAPI-1176: CLI-only run-addressed repair verbs — never registered as MCP tools.
@@ -309,9 +328,12 @@ const VALID_COMMANDS = new Set([
     "resume-run",
     // BAPI-1300: CLI-only parked-child continuation pair — never registered as MCP tools.
     "continue-child",
+    "grant-continuation",
     "continuation-receipt",
     // BAPI-1326: CLI-only allowance-preserving CI resume — never an MCP tool.
     "resume-ci",
+    // BAPI-1388: CLI-only guided provider re-run of failed CI workflow runs — never an MCP tool.
+    "rerun-ci",
     // Private, and deliberately ABSENT from the usage text: `__hook-bin` exists as
     // the bundled-artifact regression guard for BAPI-772 (mirroring `plane
     // __entrypoint`), not as a supported operator workflow.
@@ -532,11 +554,9 @@ export async function runEmitEventCommand(argv, deps = {}) {
         throw error;
     }
     if (parsed.json) {
-        console.log(JSON.stringify(result));
-    }
-    else {
-        console.log(JSON.stringify(result, null, 2));
+        return (await writeJsonDocument(JSON.stringify(result))) ? 0 : 1;
     }
+    console.log(JSON.stringify(result, null, 2));
     return 0;
 }
 // ---------------------------------------------------------------------------
@@ -638,7 +658,8 @@ export async function runSendMessageCommand(argv, deps = {}) {
     }
     const result = await sendWorkerMessage(parsed.input);
     if (parsed.json) {
-        console.log(JSON.stringify(result));
+        if (!(await writeJsonDocument(JSON.stringify(result))))
+            return 1;
     }
     else {
         console.log([
@@ -691,8 +712,7 @@ export async function runCheckMessagesCommand(argv) {
     }
     const result = await checkWorkerMessages(parsed.input);
     if (parsed.json) {
-        console.log(JSON.stringify(result));
-        return 0;
+        return (await writeJsonDocument(JSON.stringify(result))) ? 0 : 1;
     }
     const lines = [`Acknowledged ${result.acked_count} of ${result.count} message(s).`];
     for (const message of result.messages) {
@@ -717,10 +737,16 @@ export async function runDoctorCommand(argv, deps = {}) {
         return 0;
     }
     // A caller may inject deps (e.g. a fake deny inspector in tests) to stay hermetic.
-    const report = await buildConductorDoctorReport(bools.has("--no-deny-probe") ? { ...deps, skipDenyProbe: true } : deps);
+    // BAPI-1392: the warn-only committed-command drift row is read-only; a caller's
+    // injected inspector wins so tests stay hermetic.
+    const doctorDeps = {
+        inspectCommandDrift: createCommandDriftInspector({ env: deps.env ?? process.env, cwd: process.cwd() }),
+        ...deps,
+    };
+    const report = await buildConductorDoctorReport(bools.has("--no-deny-probe") ? { ...doctorDeps, skipDenyProbe: true } : doctorDeps);
     if (bools.has("--json")) {
-        console.log(JSON.stringify({ ...report.ledger, git_hooks: report.git_hooks, mcp_profile: report.mcp_profile, native_ledger: report.native_ledger, deny_enforcement: report.deny_enforcement }));
-        return 0;
+        const written = await writeJsonDocument(JSON.stringify({ ...report.ledger, git_hooks: report.git_hooks, mcp_profile: report.mcp_profile, native_ledger: report.native_ledger, deny_enforcement: report.deny_enforcement, ...(report.command_drift ? { command_drift: report.command_drift } : {}) }));
+        return written ? 0 : 1;
     }
     console.log(formatConductorDoctorReport(report));
     return 0;
@@ -1092,7 +1118,7 @@ export async function runApprovePlanCommand(argv) {
     if (!accessResult.ok) {
         const envelope = { error: "CREDENTIALS_UNAVAILABLE", status: 401, message: accessResult.error };
         if (parsed.json) {
-            console.log(JSON.stringify({ ok: false, kind: "unauthorized", error: envelope.message }));
+            await writeJsonDocument(JSON.stringify({ ok: false, kind: "unauthorized", error: envelope.message }));
         }
         else {
             console.error(`Error: ${accessResult.error}`);
@@ -1110,7 +1136,8 @@ export async function runApprovePlanCommand(argv) {
                 `the current approved version and that the blob has been stored first.`);
         }
         if (parsed.json) {
-            console.log(JSON.stringify({ ok: true, plan_hash: result.plan_hash }));
+            if (!(await writeJsonDocument(JSON.stringify({ ok: true, plan_hash: result.plan_hash }))))
+                return 1;
         }
         else {
             console.log(`Plan approved atomically. ` +
@@ -1125,7 +1152,7 @@ export async function runApprovePlanCommand(argv) {
         // rather than distinguishing 5xx (2) from other failures.
         const envelope = toConductorErrorEnvelope(error);
         if (parsed.json) {
-            console.log(JSON.stringify(envelope));
+            await writeJsonDocument(JSON.stringify(envelope));
         }
         else {
             console.error(`Error: ${formatConductorErrorLine(envelope)}`);
@@ -1179,7 +1206,7 @@ export async function runEpicStatusCommand(argv) {
     const accessResult = await resolveConductorBridgeApiAccess();
     if (!accessResult.ok) {
         if (parsed.json) {
-            console.log(JSON.stringify({ ok: false, kind: "unauthorized", error: accessResult.error }));
+            await writeJsonDocument(JSON.stringify({ ok: false, kind: "unauthorized", error: accessResult.error }));
         }
         else {
             console.error(`Error: ${accessResult.error}`);
@@ -1189,8 +1216,7 @@ export async function runEpicStatusCommand(argv) {
     try {
         const state = await fetchEpicRunState(accessResult.access, parsed.epicKey);
         if (parsed.json) {
-            console.log(JSON.stringify(state));
-            return 0;
+            return (await writeJsonDocument(JSON.stringify(state))) ? 0 : 1;
         }
         // Human-readable summary: structured status fields only, no raw payloads.
         const lines = [];
@@ -1220,7 +1246,9 @@ export async function runEpicStatusCommand(argv) {
     catch (error) {
         if (error instanceof BridgeApiError && error.status === 404) {
             if (parsed.json) {
-                console.log(JSON.stringify({ epic_key: parsed.epicKey, status: "unknown", state: null }));
+                const written = await writeJsonDocument(JSON.stringify({ epic_key: parsed.epicKey, status: "unknown", state: null }));
+                if (!written)
+                    return 1;
             }
             else {
                 console.log("No such epic found.");
@@ -1231,7 +1259,7 @@ export async function runEpicStatusCommand(argv) {
         // rather than distinguishing 5xx (2) from other failures.
         const envelope = toConductorErrorEnvelope(error);
         if (parsed.json) {
-            console.log(JSON.stringify(envelope));
+            await writeJsonDocument(JSON.stringify(envelope));
         }
         else {
             console.error(`Error: ${formatConductorErrorLine(envelope)}`);
@@ -1318,8 +1346,7 @@ export async function runPurgeCommand(argv) {
     }
     const result = await purgeConductorLedger();
     if (bools.has("--json")) {
-        console.log(JSON.stringify(result));
-        return 0;
+        return (await writeJsonDocument(JSON.stringify(result))) ? 0 : 1;
     }
     console.log([
         `Conductor ledger purged (existed: ${result.existed}).`,
@@ -1329,6 +1356,32 @@ export async function runPurgeCommand(argv) {
     ].join("\n"));
     return 0;
 }
+export async function runLikelyTestsCommand(argv, deps = {}) {
+    const { resolveLikelyTests, isFullCommitSha, validTestReference, DISCOVERY_NOTES } = await import("../executor/likely-tests.js");
+    const stdout = deps.stdout ?? ((text) => { process.stdout.write(text); });
+    const stderr = deps.stderr ?? ((text) => { process.stderr.write(text); });
+    let base;
+    if (argv.length === 2 && argv[0] === "--base")
+        base = argv[1];
+    if (argv.length === 1 && argv[0].startsWith("--base="))
+        base = argv[0].slice(7);
+    if (!base || !isFullCommitSha(base)) {
+        stderr(DISCOVERY_NOTES.invalid_arguments + "\n");
+        return 0;
+    }
+    try {
+        const result = await (deps.resolve ?? resolveLikelyTests)({ cwd: deps.cwd ?? process.cwd(), comparisonSha: base });
+        for (const reference of result.references)
+            if (validTestReference(reference))
+                stdout(reference + "\n");
+        for (const diagnostic of result.diagnostics)
+            stderr(DISCOVERY_NOTES[diagnostic] + "\n");
+    }
+    catch {
+        stderr(DISCOVERY_NOTES.git_unavailable + "\n");
+    }
+    return 0;
+}
 /**
  * Dispatch the epic-implementer CLI. Returns (asynchronously) a process exit
  * code (non-zero for parser, validation, and storage failures). The dispatcher
@@ -1340,7 +1393,9 @@ export async function runPurgeCommand(argv) {
  * profile group this dispatcher sits alongside remain unrenamed until S5; this
  * S4 slice renames only the public entry point and CLI-facing text.
  */
-export async function runEpicImplementerCli(argv) {
+export async function runEpicImplementerCli(argv, likelyTestsDeps) {
+    if (argv[0] === "likely-tests")
+        return runLikelyTestsCommand(argv.slice(1), likelyTestsDeps);
     const parsed = parseConductorArgs(argv);
     if (parsed.kind === "help") {
         console.log(getConductorUsage());
@@ -1389,6 +1444,8 @@ export async function runEpicImplementerCli(argv) {
                 // Also dispatched before any MCP construction or store open: it only
                 // imports the native binding, so it can answer on a host with no ledger.
                 return await runHookRuntimeProbeCommand();
+            case "likely-tests":
+                return runLikelyTestsCommand(parsed.argv);
             case "file-scope-guard":
                 // BAPI-507 (N-2): warn-only worker file-scope guard. Always exits 0.
                 return runFileScopeGuardCli();
@@ -1416,6 +1473,10 @@ export async function runEpicImplementerCli(argv) {
                 const { runScopeReparseCommand } = await import("./recovery-cli.js");
                 return await runScopeReparseCommand(parsed.argv);
             }
+            case "escalate": {
+                const { runEscalateCommand } = await import("./recovery-cli.js");
+                return await runEscalateCommand(parsed.argv);
+            }
             case "dispatch-remediation": {
                 const { runDispatchRemediationCommand } = await import("./recovery-cli.js");
                 return await runDispatchRemediationCommand(parsed.argv);
@@ -1442,6 +1503,10 @@ export async function runEpicImplementerCli(argv) {
                 const { runContinueChildCommand } = await import("./recovery-cli.js");
                 return await runContinueChildCommand(parsed.argv);
             }
+            case "grant-continuation": {
+                const { runGrantContinuationCommand } = await import("./recovery-cli.js");
+                return await runGrantContinuationCommand(parsed.argv);
+            }
             case "continuation-receipt": {
                 const { runContinuationReceiptCommand } = await import("./recovery-cli.js");
                 return await runContinuationReceiptCommand(parsed.argv);
@@ -1451,6 +1516,11 @@ export async function runEpicImplementerCli(argv) {
                 const { runResumeCiCommand } = await import("./recovery-cli.js");
                 return await runResumeCiCommand(parsed.argv);
             }
+            case "rerun-ci": {
+                // BAPI-1388: delegates only to the guided, pinned rerun-ci operation.
+                const { runRerunCiCommand } = await import("./recovery-cli.js");
+                return await runRerunCiCommand(parsed.argv);
+            }
             default:
                 console.error('Error: Unknown command. Run "epic-implementer --help" for usage.');
                 return 1;

package/build/conductor/errors.js

@@ -70,9 +70,10 @@ export class ConductorStoreError extends Error {
  */
 export class ConductorEpicTickV1FrozenError extends Error {
     constructor() {
-        super("The v1 `epic-implementer epic-tick` path is frozen (EPIC_TICK_V1_FROZEN). Epic " +
-            "Conductor v2 replaces the local epic tick with a server-side reconciler " +
-            "plus the local executor — run `mcp-server executor` instead.");
+        super("The v1 `epic-implementer epic-tick` path is frozen (EPIC_TICK_V1_FROZEN). The " +
+            "Epic Implementer replaced the local epic tick with a server-side reconciler " +
+            "plus the local executor — run `mcp-server executor --repo <name> " +
+            "--epic-run-id <run-id>` instead.");
         this.name = "ConductorEpicTickV1FrozenError";
     }
 }