@bridge_gpt/mcp-server 0.2.69 → 0.2.70

package/build/conductor/epic-child-continuation.js

@@ -77,9 +77,25 @@ export function canonicalJson(value) {
 export function canonicalSha256(value) {
     return createHash("sha256").update(canonicalJson(value), "utf8").digest("hex");
 }
-/** The fingerprint input document (identical to the Python builder). */
+/** BAPI-1514 — lowercase SHA-256 hex of a driver context's exact UTF-8 bytes. */
+export function driverContextSha256(context) {
+    return createHash("sha256").update(context, "utf8").digest("hex");
+}
+/** The context hash a binding set carries, or `undefined` when it has no context. */
+export function bindingsDriverContextSha256(b) {
+    if (b.driverContext !== undefined)
+        return driverContextSha256(b.driverContext);
+    return b.driverContextSha256;
+}
+/**
+ * The fingerprint input document (identical to the Python builder). The
+ * top-level `driver_context_sha256` key is present ONLY when the request carries
+ * driver context, so a context-free document is byte-identical to before.
+ */
 export function continuationFingerprintInput(b) {
+    const contextSha = bindingsDriverContextSha256(b);
     return {
+        ...(contextSha !== undefined ? { driver_context_sha256: contextSha } : {}),
         v: CONTINUATION_WIRE_VERSION,
         operation: CONTINUATION_OPERATION,
         target: {
@@ -222,6 +238,25 @@ export function parseContinuationStatusResult(value) {
         receipt,
     };
 }
+/**
+ * BAPI-1514 — retryable CI-waiting refusals. The server committed nothing and
+ * asks for a retry with the SAME request id, so the local recovery reference is
+ * KEPT (not cleared) and the next continue-child re-sends that same request.
+ */
+export const CONTINUATION_CI_WAITING_REASONS = new Set([
+    "ci_pending_at_bound_head",
+    "ci_provider_read_unavailable",
+    "ci_observation_stale",
+]);
+/**
+ * BAPI-1514 — whether a continuation result is a REAL dispatch (a committed
+ * receipt for this request). Only this may be counted against an intervention
+ * budget or continuation allowance; `ci_green_adopted` and every other refusal
+ * dispatched nothing and charged nothing.
+ */
+export function continuationDispatchedJob(result) {
+    return result.outcome === "committed" && result.receipt !== null;
+}
 /** The namespace (subdirectory) of the parked-child continuation references. */
 export const CONTINUATION_REFERENCE_NAMESPACE = "epic-child-continuations";
 /**
@@ -304,6 +339,11 @@ function parseReference(raw) {
         expectedHeadSha: (b.expectedHeadSha ?? null),
         sourceParkGeneration: b.sourceParkGeneration,
     };
+    if (b.driverContextSha256 !== undefined) {
+        if (typeof b.driverContextSha256 !== "string" || !FINGERPRINT_RE.test(b.driverContextSha256))
+            return null;
+        bindings.driverContextSha256 = b.driverContextSha256;
+    }
     if (!bindings.repoName || !bindings.epicRunId || !bindings.ticketKey || !bindings.parkedGate ||
         !nonNegInt(bindings.expectedRowVersion) || !nonNegInt(bindings.sourceParkGeneration) ||
         (bindings.expectedHeadSha !== null && !FULL_SHA_RE.test(bindings.expectedHeadSha))) {
@@ -332,11 +372,22 @@ export async function readContinuationReference(epicRunId, ticketKey, deps = {})
     const raw = await readRecoveryReferenceFile(CONTINUATION_REFERENCE_NAMESPACE, { epicRunId, ticketKey }, deps);
     return raw === null ? null : parseReference(raw);
 }
+/**
+ * BAPI-1514 — the bindings as stored: the raw context replaced by its hash. A
+ * context-free binding set is returned unchanged, so its file is byte-identical.
+ */
+function persistableBindings(b) {
+    const contextSha = bindingsDriverContextSha256(b);
+    const { driverContext: _omitContext, driverContextSha256: _omitSha, ...rest } = b;
+    return contextSha === undefined ? rest : { ...rest, driverContextSha256: contextSha };
+}
 /** Durably write a reference (0700 directory, 0600 file, write-then-rename). */
 export async function writeContinuationReference(reference, deps = {}, key = reference.bindings) {
     // ``key`` only names the file (the caller may address the run by its epic key);
-    // the stored bindings are always the exact, fingerprinted ones.
-    await writeRecoveryReferenceFile(CONTINUATION_REFERENCE_NAMESPACE, key, reference, deps);
+    // the stored bindings are always the exact, fingerprinted ones. BAPI-1514: the
+    // raw driver context is never written — only its SHA-256, which is all a
+    // reload needs to recompute the same fingerprint.
+    await writeRecoveryReferenceFile(CONTINUATION_REFERENCE_NAMESPACE, key, { ...reference, bindings: persistableBindings(reference.bindings) }, deps);
 }
 /** Remove a child's reference once its outcome is authoritative. Never throws. */
 export async function clearContinuationReference(epicRunId, ticketKey, deps = {}) {

package/build/conductor/epic-implementer-cli.js

@@ -8,8 +8,10 @@
  *   epic-implementer doctor [--json]
  *   epic-implementer purge  [--json]
  *
- * Every command talks only to the local SQLite ledger. Errors are surfaced as
- * sanitized messages (no stack traces, no secrets, no raw payloads) and
+ * The ledger commands talk only to the local SQLite ledger; the run-control,
+ * status, readiness, and read-only wait commands (for example `wait-run`) are
+ * authenticated Bridge API calls, each lazily imported so a local-only command
+ * never loads the HTTP graph. Errors are surfaced as sanitized messages (no stack traces, no secrets, no raw payloads) and
  * {@link runEpicImplementerCli} returns a process exit code rather than calling
  * `process.exit` itself (the bin wrapper owns that).
  *
@@ -28,13 +30,18 @@ import { SEMANTIC_EVENT_TYPES } from "./taxonomy.js";
 import { DRIVER_CONTEXT_MAX_BYTES, POLICY_PATCH_MAX_BYTES } from "./repair-contract.js";
 import { CONDUCTOR_BIN_UNRESOLVED_ERROR, installConductorGitHooks, resolveConductorHookBin, } from "./git-hooks.js";
 import { HOOK_RUNTIME_PROBE_ACTION, HOOK_RUNTIME_PROBE_MARKER } from "./hook-runtime-qualification.js";
-import { runFileScopeGuardCli } from "./file-scope-guard.js";
+import { DECLARED_TOUCHED_FILES_ENV, runFileScopeGuardCli } from "./file-scope-guard.js";
 import { runPostCommitHookProducer, runReferenceTransactionHookProducer } from "./git-producer.js";
 import { buildConductorDoctorReport, formatConductorDoctorReport } from "./doctor.js";
+import { nodeGithubMergeCredentialReadDeps, readLocalGithubRemote } from "./stored-merge-credential.js";
 import { createCommandDriftInspector } from "./command-drift-production.js";
+import { createWorkerDatabaseDoctorInspector } from "./worker-database-doctor-inspector.js";
 import { writeJsonDocument } from "./json-output.js";
 import { resolveSupervisorConfig } from "./supervisor-config.js";
 import { VERSION } from "../version.generated.js";
+// BAPI-1496: the inspector factory moved to its own module; re-exported so
+// existing importers of this module keep working.
+export { createWorkerDatabaseDoctorInspector };
 // `runSupervisor` is imported LAZILY inside runSuperviseCommand: it transitively
 // pulls in the SQLite store, and a static import here would force every
 // epic-implementer CLI invocation (and every test that mocks ./store.js for the
@@ -62,7 +69,7 @@ export function getConductorUsage() {
         "Local append-only event ledger for multi-agent coordination, plus run-control",
         "commands. The ledger commands talk ONLY to the local SQLite store",
         "(~/.config/bridge/events.db); the run-control commands (stop-run through",
-        "rerun-ci), epic-status, and readiness call the Bridge API.",
+        "resolve-handoff), epic-status, readiness, and the read-only wait-run call the Bridge API.",
         "",
         "Commands:",
         "  emit-event           Append one semantic event to the ledger",
@@ -113,7 +120,7 @@ export function getConductorUsage() {
         "  resume-run --epic-run-id <id> [--clear-quarantine] [--json]",
         "                       Resume a paused run (a quarantined one only with --clear-quarantine);",
         "                       activation is re-checked server-side. Active/no-control is a no-op.",
-        "  continue-child --epic-run-id <id> --ticket-key <key> [--reason <text> --worker-exit-proof exited|fenced] [--json]",
+        "  continue-child --epic-run-id <id> --ticket-key <key> [--reason <text> --worker-exit-proof exited|fenced] [--context-file <path>] [--json]",
         "  grant-continuation --epic-run-id <id> --ticket-key <key> --reason <text> [--extra-continuations 1] [--extra-seconds <seconds>] [--json]",
         "                       Continue a parked child's CURRENT episode WITHOUT a reset: same attempt,",
         "                       retained work, only the allowance left. At most one dispatch per episode.",
@@ -127,6 +134,20 @@ export function getConductorUsage() {
         "                       Ask CI to re-run a ticket's FAILED checks at its bound head (guided: copy",
         "                       the command explain-run rendered). Charges NO allowance and never re-runs",
         "                       claude-review. A re-run is not a verdict: after CI is green, use resume-ci.",
+        "  regenerate-plan --epic-run-id <id> --ticket-key <key> --route test|implementation --reason <text> [--json]",
+        "                       Answer a child parked on a NAMED plan failure with ONE forced plan",
+        "                       regeneration on the chosen route. Success means the override and gate",
+        "                       reset committed, not that a usable plan exists. Prints \"server too old\"",
+        "                       and exits nonzero on a server without the route; no fallback is tried.",
+        "  resolve-handoff --epic-run-id <id> --ticket-key <key> --steps 27,36 --kind verified|risk_accepted",
+        "                  --evidence <ref> --reason <text> [--json]",
+        "                       Record the OWNER's decision on verification hand-offs (a human decision,",
+        "                       never automatic). Also remove .bridge/epic-workarounds/<KEY>.md in a new",
+        "                       epic-head commit: the PR leaves draft only when both holds are clear.",
+        "  wait-run --epic-run-id <id> [--ticket-key <key>] [--since <token>] [--timeout <seconds>] [--json]",
+        "                       Read-only: wait until the run's observable state changes, the run finishes,",
+        "                       or the window closes (default 110 s; values above 240 are clamped to 240).",
+        "                       Pass the previous result's token as --since. Changes nothing.",
         "",
         "supervise options:",
         "  --run-id <id>             Run/session identifier to supervise (required)",
@@ -198,7 +219,7 @@ export function getConductorUsage() {
         "                       explicit skipped state (enforcement UNVERIFIED, never enforced)",
         "",
         "Examples:",
-        "  epic-implementer emit-event --type run.started --source git-hook --run-id BAPI-393 \\",
+        "  epic-implementer emit-event --type run.started --source git-hook --run-id PROJ-393 \\",
         "      --data-json '{\"summary\":\"run started\"}'",
         "  epic-implementer emit-event --type git.commit_created --source git-hook \\",
         "      --raw-json '{\"branch\":\"feature/x\",\"sha\":\"abc123\"}'",
@@ -265,17 +286,25 @@ export function getConductorUsage() {
         "  # The run is done for good — close it out:",
         "  epic-implementer abandon-run --epic-run-id 3f9c2b7e-...",
         "  # A ticket parked itself (needs_human) and the cause is now fixed:",
-        "  epic-implementer unpark --epic-run-id 3f9c2b7e-... --ticket-key BAPI-852",
+        "  epic-implementer unpark --epic-run-id 3f9c2b7e-... --ticket-key PROJ-852",
         "  # A human pushed directly to the PR and the ticket parked on head drift:",
-        "  epic-implementer adopt-current-head-and-unpark --epic-run-id 3f9c2b7e-... --ticket-key BAPI-852",
+        "  epic-implementer adopt-current-head-and-unpark --epic-run-id 3f9c2b7e-... --ticket-key PROJ-852",
         "  # A child stopped mid-attempt and should carry on WITHOUT resetting its budget:",
-        "  epic-implementer continue-child --epic-run-id 3f9c2b7e-... --ticket-key BAPI-852",
+        "  epic-implementer continue-child --epic-run-id 3f9c2b7e-... --ticket-key PROJ-852",
         "  # The continue-child response was lost — did it commit?",
-        "  epic-implementer continuation-receipt --epic-run-id 3f9c2b7e-... --ticket-key BAPI-852",
+        "  epic-implementer continuation-receipt --epic-run-id 3f9c2b7e-... --ticket-key PROJ-852",
         "  # CI finished green after the child parked on an expired CI wait:",
-        "  epic-implementer resume-ci --epic-run-id 3f9c2b7e-... --ticket-key BAPI-852",
+        "  epic-implementer resume-ci --epic-run-id 3f9c2b7e-... --ticket-key PROJ-852",
         "  # CI failed on infrastructure: re-run it (never claude-review); then resume-ci once green:",
-        "  epic-implementer rerun-ci --epic-run-id 3f9c2b7e-... --ticket-key BAPI-852 --binding <token>",
+        "  epic-implementer rerun-ci --epic-run-id 3f9c2b7e-... --ticket-key PROJ-852 --binding <token>",
+        "  # A child parked on a named plan failure (see explain-run for the route and reason):",
+        "  epic-implementer regenerate-plan --epic-run-id 3f9c2b7e-... --ticket-key PROJ-852 \\",
+        "    --route implementation --reason \"The test plan named a target that is not indexed\"",
+        "  # The owner accepted the risk of a step a worker could not verify (verification incomplete):",
+        "  epic-implementer resolve-handoff --epic-run-id 3f9c2b7e-... --ticket-key PROJ-852 --steps 27 \\",
+        "    --kind risk_accepted --evidence owner-review-2026-10-11 --reason \"Owner accepts the risk\"",
+        "  # Wait for the next change before the next full pass (read-only):",
+        "  epic-implementer wait-run --epic-run-id 3f9c2b7e-... --since v1:0123456789abcdef",
     ].join("\n");
 }
 /**
@@ -334,6 +363,12 @@ const VALID_COMMANDS = new Set([
     "resume-ci",
     // BAPI-1388: CLI-only guided provider re-run of failed CI workflow runs — never an MCP tool.
     "rerun-ci",
+    // BAPI-1494: CLI-only owner decision on verification hand-offs — never an MCP tool.
+    "resolve-handoff",
+    // BAPI-1532: CLI-only answer to a named plan failure — never an MCP tool.
+    "regenerate-plan",
+    // BAPI-1469: CLI-only read-only bounded wait on a run's state — never an MCP tool.
+    "wait-run",
     // Private, and deliberately ABSENT from the usage text: `__hook-bin` exists as
     // the bundled-artifact regression guard for BAPI-772 (mirroring `plane
     // __entrypoint`), not as a supported operator workflow.
@@ -741,11 +776,28 @@ export async function runDoctorCommand(argv, deps = {}) {
     // injected inspector wins so tests stay hermetic.
     const doctorDeps = {
         inspectCommandDrift: createCommandDriftInspector({ env: deps.env ?? process.env, cwd: process.cwd() }),
+        // BAPI-1479: advisory, read-only worker-database rows; runs under
+        // --no-deny-probe too. A caller's injected inspector wins.
+        inspectWorkerDatabase: createWorkerDatabaseDoctorInspector({ env: deps.env ?? process.env, cwd: process.cwd() }),
+        // BAPI-1461: a merge token stored once for this repository counts as
+        // configured — after the bounded capability probe confirms GitHub accepts
+        // it. Doctor runs in the person's own session, so the stored rung applies.
+        storedMergeCredential: {
+            allowStoredEntry: true,
+            localRemote: await readLocalGithubRemote(process.cwd()),
+            storeDeps: nodeGithubMergeCredentialReadDeps(deps.env ?? process.env),
+            // Loaded only when a stored token exists: the probe brings the merge
+            // executor's module graph, which an ordinary doctor run never needs.
+            probe: async (args) => {
+                const { probeStoredMergeToken } = await import("./stored-merge-token-probe.js");
+                return probeStoredMergeToken({ ...args, env: deps.env ?? process.env });
+            },
+        },
         ...deps,
     };
     const report = await buildConductorDoctorReport(bools.has("--no-deny-probe") ? { ...doctorDeps, skipDenyProbe: true } : doctorDeps);
     if (bools.has("--json")) {
-        const written = await writeJsonDocument(JSON.stringify({ ...report.ledger, git_hooks: report.git_hooks, mcp_profile: report.mcp_profile, native_ledger: report.native_ledger, deny_enforcement: report.deny_enforcement, ...(report.command_drift ? { command_drift: report.command_drift } : {}) }));
+        const written = await writeJsonDocument(JSON.stringify({ ...report.ledger, git_hooks: report.git_hooks, mcp_profile: report.mcp_profile, native_ledger: report.native_ledger, deny_enforcement: report.deny_enforcement, ...(report.command_drift ? { command_drift: report.command_drift } : {}), ...(report.worker_database ? { worker_database: report.worker_database } : {}) }));
         return written ? 0 : 1;
     }
     console.log(formatConductorDoctorReport(report));
@@ -1235,10 +1287,15 @@ export async function runEpicStatusCommand(argv) {
             const dispatchRef = t.dispatch_run_id ? `dispatch_run_id=${t.dispatch_run_id}` : "-";
             lines.push(`  ${t.ticket_key}  [${t.status}]  ${dispatchRef}  remediation=${t.remediation_attempts}/${t.remediation_no_progress_attempts}`);
         }
-        lines.push(`\nDispatches (${state.dispatches.length}):`);
-        for (const d of state.dispatches) {
-            const runRef = d.run_id ? `run_id=${d.run_id}` : "-";
-            lines.push(`  ${d.dispatch_key}  [${d.status}]  ${runRef}`);
+        if (state.dispatches === null) {
+            lines.push("\nDispatches: not applicable to this run");
+        }
+        else {
+            lines.push(`\nDispatches (${state.dispatches.length}):`);
+            for (const d of state.dispatches) {
+                const runRef = d.run_id ? `run_id=${d.run_id}` : "-";
+                lines.push(`  ${d.dispatch_key}  [${d.status}]  ${runRef}`);
+            }
         }
         console.log(lines.join("\n"));
         return 0;
@@ -1356,31 +1413,49 @@ export async function runPurgeCommand(argv) {
     ].join("\n"));
     return 0;
 }
+const LIKELY_TESTS_FAILURE_NOTE = "Likely-tests discovery unavailable: internal discovery failure (not an empty result).\n";
 export async function runLikelyTestsCommand(argv, deps = {}) {
-    const { resolveLikelyTests, isFullCommitSha, validTestReference, DISCOVERY_NOTES } = await import("../executor/likely-tests.js");
     const stdout = deps.stdout ?? ((text) => { process.stdout.write(text); });
     const stderr = deps.stderr ?? ((text) => { process.stderr.write(text); });
-    let base;
-    if (argv.length === 2 && argv[0] === "--base")
-        base = argv[1];
-    if (argv.length === 1 && argv[0].startsWith("--base="))
-        base = argv[0].slice(7);
-    if (!base || !isFullCommitSha(base)) {
-        stderr(DISCOVERY_NOTES.invalid_arguments + "\n");
-        return 0;
-    }
     try {
-        const result = await (deps.resolve ?? resolveLikelyTests)({ cwd: deps.cwd ?? process.cwd(), comparisonSha: base });
-        for (const reference of result.references)
-            if (validTestReference(reference))
+        const { resolveLikelyTests, isFullCommitSha, validTestReference, DISCOVERY_NOTES } = await import("../executor/likely-tests.js");
+        let base;
+        if (argv.length === 2 && argv[0] === "--base")
+            base = argv[1];
+        if (argv.length === 1 && argv[0].startsWith("--base="))
+            base = argv[0].slice(7);
+        if (!base || !isFullCommitSha(base)) {
+            stderr(DISCOVERY_NOTES.invalid_arguments + "\n");
+            return 1;
+        }
+        const declared = (deps.env ?? process.env)[DECLARED_TOUCHED_FILES_ENV];
+        const result = await (deps.resolve ?? resolveLikelyTests)({
+            cwd: deps.cwd ?? process.cwd(),
+            comparisonSha: base,
+            ...(declared !== undefined && declared.trim().length > 0 ? { declaredTouchedFilesJson: declared } : {}),
+        });
+        let printed = 0;
+        for (const reference of result.references) {
+            if (validTestReference(reference)) {
                 stdout(reference + "\n");
-        for (const diagnostic of result.diagnostics)
-            stderr(DISCOVERY_NOTES[diagnostic] + "\n");
+                printed += 1;
+            }
+        }
+        const failed = result.diagnostics.some(d => d === "git_unavailable" || d === "invalid_arguments");
+        for (const diagnostic of new Set(result.diagnostics)) {
+            if (diagnostic !== "empty")
+                stderr(DISCOVERY_NOTES[diagnostic] + "\n");
+        }
+        if (failed)
+            return 1;
+        if (printed === 0)
+            stderr(DISCOVERY_NOTES.empty + "\n");
+        return 0;
     }
     catch {
-        stderr(DISCOVERY_NOTES.git_unavailable + "\n");
+        stderr(LIKELY_TESTS_FAILURE_NOTE);
+        return 1;
     }
-    return 0;
 }
 /**
  * Dispatch the epic-implementer CLI. Returns (asynchronously) a process exit
@@ -1521,6 +1596,29 @@ export async function runEpicImplementerCli(argv, likelyTestsDeps) {
                 const { runRerunCiCommand } = await import("./recovery-cli.js");
                 return await runRerunCiCommand(parsed.argv);
             }
+            case "resolve-handoff": {
+                // BAPI-1494: delegates only to the owner-decision recovery operation.
+                const { runResolveHandoffCommand } = await import("./recovery-cli.js");
+                return await runResolveHandoffCommand(parsed.argv);
+            }
+            case "regenerate-plan": {
+                // BAPI-1532: delegates only to the pinned plan-regeneration operation.
+                const { runRegeneratePlanCommand } = await import("./recovery-cli.js");
+                return await runRegeneratePlanCommand(parsed.argv);
+            }
+            case "wait-run": {
+                // BAPI-1469: read-only bounded wait. Lazily imported like the recovery
+                // verbs; a module-load failure gets fixed wording, never exception text.
+                let runWaitRunCommand;
+                try {
+                    ({ runWaitRunCommand } = await import("./wait-run-cli.js"));
+                }
+                catch {
+                    console.error("Error: wait-run could not be loaded; no run state was read.");
+                    return 1;
+                }
+                return await runWaitRunCommand(parsed.argv);
+            }
             default:
                 console.error('Error: Unknown command. Run "epic-implementer --help" for usage.');
                 return 1;

package/build/conductor/epic-runtime.js

@@ -668,7 +668,7 @@ export async function runEpicTick(options, deps = {}) {
         // on the machine; rebuildObservedState only folds signals whose run_id maps
         // to one of these dispatches, so scoping the read here avoids loading the
         // entire (up to 50K-row) ledger on every tick.
-        const dispatchedRunIds = epicRunState.dispatches
+        const dispatchedRunIds = (epicRunState.dispatches ?? [])
             .map((d) => d.run_id)
             .filter((rid) => typeof rid === "string" && rid.length > 0);
         const localEvents = await fetchLocalEvents(epic_key, dispatchedRunIds);
@@ -1005,7 +1005,7 @@ export async function runEpicTick(options, deps = {}) {
             const latestDispatchByTicket = new Map();
             const reviewLatestDispatchByTicket = new Map();
             const reviewAttemptCounts = new Map();
-            for (const d of epicRunState.dispatches) {
+            for (const d of epicRunState.dispatches ?? []) {
                 const isReview = d.dispatch_key.endsWith(":review");
                 if (isReview) {
                     reviewAttemptCounts.set(d.ticket_key, (reviewAttemptCounts.get(d.ticket_key) ?? 0) + 1);

package/build/conductor/epic-state.js

@@ -423,7 +423,7 @@ export function rebuildObservedState(postgresState, events, _now) {
     // complete → proceed) instead of mis-folding it as implementation completion
     // ("ready_for_review", awaiting merge), which would skip implementation.
     const runIdToTicketKey = new Map();
-    for (const dispatch of dispatches) {
+    for (const dispatch of dispatches ?? []) {
         if (dispatch.run_id) {
             runIdToTicketKey.set(dispatch.run_id, {
                 ticketKey: dispatch.ticket_key,

package/build/conductor/hook-runtime-qualification.js

@@ -89,7 +89,7 @@ export const HOOK_RUNTIME_ACTIONS = {
         "from a persistent install.",
     "unqualified-runtime": "the hook runtime is not a qualified persistent installation (supported: a persistent npm " +
         `install of ${MCP_PACKAGE_NAME} ${HOOK_RUNTIME_COMPATIBLE_RANGE} on macOS or Linux with an even ` +
-        `Node LTS line >= ${HOOK_RUNTIME_MIN_NODE_MAJOR}). See mcp_server/docs/EPIC-IMPLEMENTER.md.`,
+        `Node LTS line >= ${HOOK_RUNTIME_MIN_NODE_MAJOR}). See docs/EPIC-IMPLEMENTER.md in the ${MCP_PACKAGE_NAME} package.`,
     "node-unavailable": "`node` could not be launched from PATH, so the hook cannot run. Put a qualified Node on PATH " +
         "and re-run `epic-implementer doctor`.",
     "native-unavailable": "better-sqlite3 does not load for the hook's Node, so no event can be recorded. Reinstall the " +

package/build/conductor/install-doctor.js

@@ -129,7 +129,9 @@ export async function runConductorInstallDoctor(deps) {
     }
     else {
         try {
-            readiness = await fetchConductorReadiness(deps.access, deps.fetch);
+            readiness = deps.epicRunId
+                ? await fetchConductorReadiness(deps.access, deps.fetch, { epicRunId: deps.epicRunId })
+                : await fetchConductorReadiness(deps.access, deps.fetch);
         }
         catch (err) {
             const kind = err instanceof ConductorBridgeApiError ? err.kind : "network";
@@ -158,7 +160,7 @@ export async function runConductorInstallDoctor(deps) {
         // BAPI-1405 — the three warn-only epic-branch CI rows, beside the gate
         // profile they qualify. Never fatal, so they cannot change the exit code or
         // the installer's pre-write abort. An older server renders them as
-        // "Unreported — upgrade the server", never as "no warning".
+        // "Unreported by the server", never as "no warning".
         sections.push(...epicBranchCiSections(readiness.epic_branch_ci));
         sections.push(githubCredentialsSection(readiness));
         sections.push(githubActionsSection(readiness));