@defrex/autobuild 0.11.0 → 0.13.0

package/packages/core/src/cli/help.ts

@@ -69,6 +69,20 @@ export const HELP_CATALOG: readonly HelpEntry[] = [
       'locally. --validate cannot be combined with --force.',
     ]),
   },
+  {
+    name: 'connect',
+    audience: 'human',
+    summary: 'Connect this project to a hosted service with browser approval.',
+    detail:
+      'Usage: ab connect [--tickets] [url]\nWith a URL, approve the printed URL and code in your browser. Stores the credential in user configuration and adds [store] url to autobuild.toml. Use --tickets to save [tickets] url and keep builds local. Without a URL, reports every service connection and its uses. Runs outside sessions.',
+  },
+  {
+    name: 'disconnect',
+    audience: 'human',
+    summary: 'Revoke and remove this project’s saved credential.',
+    detail:
+      'Usage: ab disconnect [--tickets | --builds]\nRevokes the saved credential remotely before removing it locally. Keeps project registration, data and [store] url. Runs outside sessions.',
+  },
   {
     name: 'upgrade',
     audience: 'human',
@@ -159,20 +173,26 @@ export const HELP_CATALOG: readonly HelpEntry[] = [
     detail: page([
       'Usage:',
       '  ab ticket create <title> --body <file> [--state <state>] [--labels a,b] [--blocked-by id,id] [--json]',
-      '  ab ticket update <id> [--title <title>] [--body <file>] [--labels a,b] [--json]',
-      '  ab ticket block <id> <blocker-id[,blocker-id...]> [--json]',
-      '  ab ticket unblock <id> <blocker-id[,blocker-id...]> [--json]',
+      '  ab ticket edit <id>',
+      '  ab ticket export <dir> [--store <ref>]',
+      '  ab ticket import <dir> [--store <ref>]',
+      '  ab ticket update <id> [--title <title>] [--body <file>] [--labels a,b] [--expected-revision <opaque>] [--json]',
+      '  ab ticket block <id> <blocker-id[,blocker-id...]> [--expected-revision <opaque>] [--json]',
+      '  ab ticket unblock <id> <blocker-id[,blocker-id...]> [--expected-revision <opaque>] [--json]',
       '  ab ticket list [--state <state>] [--labels a,b] [--json]',
       '  ab ticket show <id> [--store <ref>] [--json]',
-      '  ab ticket move <id> <state> [--json]',
+      '  ab ticket move <id> <state> [--expected-revision <opaque>] [--json]',
       '  ab ticket states [--json]',
       '  ab ticket state create <name> [--about <text>] [--json]',
       '  ab ticket attach <id> <kind> <path> [--name <name>] [--store <ref>] [--json]',
       '  ab ticket asset get <id> <kind> <name> <dest> [--rev <n>] [--store <ref>] [--json]',
       '  ab ticket asset rm <id> <kind> <name> [--store <ref>] [--json]',
       '',
-      'Operate on the configured [tickets] source (§8.8); all ticket commands run',
-      'outside sessions. create files a ticket and may establish initial blockers.',
+      'Operate on the configured [tickets] source (§8.8); commands run outside sessions.',
+      'Every JSON ticket read includes an opaque revision. update, move, block and',
+      'unblock accept --expected-revision to refuse stale writes. Linear refuses checks.',
+      'edit opens VISUAL or EDITOR, checks the opening revision, and preserves failed buffers.',
+      'create files a ticket and may establish initial blockers.',
       '--state overrides [tickets].createState (or the provider default) for that',
       'create only; it is passed through unchanged and validated by the source.',
       'update partially replaces editable fields: omitted fields survive, --labels',
@@ -311,12 +331,23 @@ export const HELP_CATALOG: readonly HelpEntry[] = [
       '                     flushed as soon as it is written.',
       '  --store <ref>      Override the BuildStore path or URL.',
       '',
-      'Default filter — the attention set. For builds: escalation.raised, phase.failed,',
-      'infrastructure.failed, runner.setup-failed, dispatch.failed, publication.lost,',
-      'finalize.completed, pr.conflicted, pr.merged, pr.closed, build.completed,',
-      'build.aborted. For the repository journal: harvest.escalated, harvest.failed,',
-      'dispatcher.tick-failed, dispatcher.config-rejected, dispatcher.harvest-runner-failed,',
-      'dispatcher.ticket-source-degraded, dispatcher.ticket-source-recovered.',
+      'Default filter — actionable attention only. Builds: escalation.raised and',
+      'build.merge-decision (finalized open PR, auto-merge off or currently deferred).',
+      'Armed consent awaiting application is silent; one merge decision per build/PR.',
+      'Repository: harvest.escalated, harvest.recovery-exhausted, dispatcher.config-rejected,',
+      'dispatcher.config-reloaded with restartRequired, abnormal dispatcher.run-stopped,',
+      'and dispatcher.lost. dispatcher.ticket-source-persistent reports degradation past',
+      'resetAt after a tick started at or after reset completes or fails while still degraded,',
+      'or 15 minutes without a reset; dispatcher.tick-failure-persistent reports',
+      'five minutes of continuous tick failure outside source grace or cooldown. Each episode',
+      'reports once; recovery ends it. Cooldown failures do not start the tick-failure clock.',
+      '--event replaces defaults with exactly matching catalog events (or dispatcher.lost).',
+      'Routine failures, finalize and terminal outcomes require explicit --event globs.',
+      'Derived records carry observation instead of event, with observedAt and PR/reason',
+      'or source/cause/message/resetAt or run/firstFailure/error plus episodeSeq.',
+      'Cursors suppress delivered observations, including timer-only records. Old v1',
+      'cursors remain valid. Fresh watches baseline history and retain repository timers;',
+      'reconcile existing build attention through status after arming.',
       '',
       'Record shape (--json): build (slug, or null for a repository event), repo (repository',
       'id, present only for repository events), event (the complete durable envelope: build,',
@@ -364,19 +395,23 @@ export const HELP_CATALOG: readonly HelpEntry[] = [
       'Conditions (--for, repeatable): blocked, paused, running, done, aborted, terminal (done',
       'or aborted), pr=open, pr=merged, pr=closed, pr=conflicted, phase=<phase> (a core phase —',
       'plan, plan-review, implement, code-review, finalize, reconcile — or verify:<step>), and',
-      'attention (any event in the ab watch attention set). An unknown value is rejected before',
+      'attention (an open escalation or a build waiting for a merge decision). Merge attention',
+      'requires a finalized open PR with auto-merge off or a current actionable gate deferral;',
+      'armed pending consent, routine outcomes and self-healing failures stay silent.',
+      'An unknown condition value is rejected before',
       'any store access. Repeatable --event globs follow the ab watch rules. Multiple --for',
       'values and --event globs are alternatives: the first one satisfied ends the wait — all',
       '--for values in supply order first (each checked against the state after an event and',
-      'the event’s attention membership), then all --event globs in supply order.',
+      'the actionable build projection), then all --event globs in supply order.',
       '',
       'A status, PR-lifecycle, or phase condition is satisfied when a targeted build’s reduction',
       'has that status, PR state, or current phase. If any targeted build already satisfies',
       'such a condition when the command starts, the command returns immediately — in the',
       'manner of kubectl wait — with that build’s latest event; --since does not suppress this.',
       'Otherwise the condition is satisfied by the first later event whose reduction produces',
-      'it. attention and --event conditions are satisfied only by events appended after the',
-      'command started (or, on a cursor-resumed backlog, after --since).',
+      'it. attention also recognizes existing conditions immediately, even with --since.',
+      '--event conditions match only events appended after the command started, or a',
+      'cursor-resumed backlog after --since; use --event to opt into other event types.',
       '',
       'Record shape (--json): the ab watch record — build, event (the complete durable',
       'envelope), state (the reduction after this event: status, phase, round, openEscalations,',

package/packages/core/src/cli/init-validation.ts

@@ -1,3 +1,5 @@
+import { projectToken } from './project-credentials'
+import { resolveRepoOrigin } from './repo-state'
 import { mkdtemp, readFile, rm } from 'node:fs/promises'
 import { tmpdir } from 'node:os'
 import { join, resolve } from 'node:path'
@@ -390,7 +392,31 @@ export async function validateInitReadiness(opts: {
   const configPath = join(repo, 'autobuild.toml')
   const configBytes = await readFile(configPath, 'utf8')
   const config = await loadConfig(configPath)
-  const state = resolveRepoStatePaths({ repo, envStore: opts.env.AB_STORE })
+  hostPreflight(config, opts.env)
+  const selectedRemote = opts.env.AB_STORE?.trim() || config.store?.url
+  const identity =
+    selectedRemote && isRemoteStoreRef(selectedRemote) && !opts.env.AB_TOKEN
+      ? ((await resolveRepoOrigin(repo, exec)) ?? repo)
+      : repo
+  const state = resolveRepoStatePaths({
+    repo: identity,
+    checkout: repo,
+    envStore: opts.env.AB_STORE,
+    configStore: config.store?.url,
+  })
+  opts = {
+    ...opts,
+    env: {
+      ...opts.env,
+      AB_STORE: state.storeRef,
+      ...(isRemoteStoreRef(state.storeRef)
+        ? { AB_TOKEN: projectToken(state.storeRef, identity, opts.env) }
+        : {}),
+    },
+  }
+  if (config.store?.url === state.storeRef && !opts.env.AB_TOKEN) {
+    throw new Error('No project credential for this service; run ab connect')
+  }
   // Pre-registry parse and redaction come from the builtin capability table;
   // after plugin load the registration's own declarations take over (AUT-516).
   const builtinCaps = builtinWorkspaceProviderCapabilities(config.workspace.provider)
@@ -405,7 +431,6 @@ export async function validateInitReadiness(opts: {
   let caps: WorkspaceProviderCapabilities | undefined
   let assigneeLine: string | undefined
   try {
-    hostPreflight(config, opts.env)
     // Ticket acquisition is a host responsibility for both workspace providers.
     // Exercise its read surface before allocating disposable infrastructure.
     const hostPlugins = await loadPlugins(config.plugins, repo, { packageRoot: repo })

package/packages/core/src/cli/installation.ts

@@ -1,5 +1,5 @@
 import { stat, readFile, realpath } from 'node:fs/promises'
-import { join, resolve, sep } from 'node:path'
+import { dirname, join, resolve, sep } from 'node:path'
 import semver from 'semver'
 import { PLUGIN_API_VERSION } from '../plugins/manifest'
 import { defaultDistRoot } from './init'
@@ -155,6 +155,57 @@ function ownerRootForPackage(identity: DistributionIdentity): string | undefined
   return owner === '' ? sep : owner
 }
 
+/** Store-internal fallback links cannot establish project ownership. */
+function inBunStore(path: string): boolean {
+  return path
+    .split(sep)
+    .some((part, index, parts) => part === '.bun' && parts[index - 1] === 'node_modules')
+}
+
+function ancestors(path: string): string[] {
+  const result: string[] = []
+  for (let current = resolve(path); ; current = dirname(current)) {
+    result.push(current)
+    if (dirname(current) === current) return result
+  }
+}
+
+async function discoverOwner(
+  identity: DistributionIdentity,
+  cwd: string,
+): Promise<string | undefined> {
+  const direct = ownerRootForPackage(identity)
+  if (direct !== undefined && !inBunStore(direct)) return direct
+  // Reject invalid package names before constructing candidate public paths.
+  if (identity.packageName.split('/').some((part) => part === '' || part === '.' || part === '..'))
+    return undefined
+  const candidates = new Set([...ancestors(identity.root), ...ancestors(cwd)])
+  for (const candidate of candidates) {
+    if (inBunStore(candidate)) continue
+    if (!(await samePath(join(candidate, 'node_modules', identity.packageName), identity.root)))
+      continue
+    const manifestPath = join(candidate, 'package.json')
+    if (!(await exists(manifestPath))) continue
+    const manifest = await parseJson(manifestPath)
+    if (declaredSection(manifest, identity.packageName) !== undefined) return candidate
+  }
+  return undefined
+}
+
+async function readMetadata(path: string): Promise<string> {
+  try {
+    return await readFile(path, 'utf8')
+  } catch (error) {
+    if ((error as NodeJS.ErrnoException).code === 'ENOENT') {
+      throw new Error(`${path} does not exist`, { cause: error })
+    }
+    throw new Error(
+      `cannot read ${path}: ${error instanceof Error ? error.message : String(error)}`,
+      { cause: error },
+    )
+  }
+}
+
 function githubDependency(value: unknown): { owner: string; repository: string } | undefined {
   if (typeof value !== 'string') return undefined
   const match = /^github:([A-Za-z0-9_.-]+)\/([A-Za-z0-9_.-]+)(?:#([^\s]+))?$/.exec(value)
@@ -172,8 +223,9 @@ function registryDependency(value: unknown, installedVersion: string): boolean {
 }
 
 async function parseJson(path: string): Promise<Record<string, unknown>> {
+  const text = await readMetadata(path)
   try {
-    return object(JSON.parse(await readFile(path, 'utf8'))) ?? {}
+    return object(JSON.parse(text)) ?? {}
   } catch (error) {
     throw new Error(
       `${path} is not valid JSON: ${error instanceof Error ? error.message : String(error)}`,
@@ -182,8 +234,9 @@ async function parseJson(path: string): Promise<Record<string, unknown>> {
 }
 
 async function parseJsonc(path: string): Promise<Record<string, unknown>> {
+  const text = await readMetadata(path)
   try {
-    const value = Bun.JSONC.parse(await readFile(path, 'utf8'))
+    const value = Bun.JSONC.parse(text)
     return object(value) ?? {}
   } catch (error) {
     throw new Error(
@@ -241,6 +294,7 @@ async function samePath(left: string, right: string): Promise<boolean> {
 export async function inspectInstallation(options: {
   distRoot?: string
   globalBin: string
+  cwd?: string
 }): Promise<InstallationInspection> {
   const identity = await readDistributionIdentity(options.distRoot)
   if (identity.sourceCheckout) {
@@ -251,18 +305,18 @@ export async function inspectInstallation(options: {
     }
   }
 
-  const ownerRoot = ownerRootForPackage(identity)
-  if (ownerRoot === undefined) {
-    return {
-      kind: 'unknown',
-      identity,
-      reason: 'the distribution is not a direct Bun node_modules package',
+  try {
+    const ownerRoot = await discoverOwner(identity, options.cwd ?? process.cwd())
+    if (ownerRoot === undefined) {
+      return {
+        kind: 'unknown',
+        identity,
+        reason: 'the distribution is not a direct Bun node_modules package',
+      }
     }
-  }
-  const ownerManifest = join(ownerRoot, 'package.json')
-  const ownerLock = join(ownerRoot, 'bun.lock')
+    const ownerManifest = join(ownerRoot, 'package.json')
+    const ownerLock = join(ownerRoot, 'bun.lock')
 
-  try {
     const manifest = await parseJson(ownerManifest)
     const lock = await parseJsonc(ownerLock)
     const declared = declaredSection(manifest, identity.packageName)

package/packages/core/src/cli/main.ts

@@ -1,3 +1,6 @@
+import { preparePinnedAssets } from '../store/ticket-assets'
+import type { PinnedAsset } from '../events/payloads'
+import { abConnect, abDisconnect } from './connect'
 /**
  * `ab` — the only channel between agents and the store, and the enforcement
  * point of the entire ontology (SPEC §8). This module is pure routing: every
@@ -16,7 +19,7 @@ import type { Clock } from '../store/types'
 import type { BuildStore } from '../store/types'
 import { textContent } from '../store/types'
 import type { Forge } from '../ports/types'
-import type { Exec } from '../ports/workspace/git-worktree'
+import { spawnExec, type Exec } from '../ports/workspace/git-worktree'
 import type { IdSource } from '../ids'
 import { reduceBuild } from '../kernel/reducer'
 import { artifactDownload, artifactDownloadStream, artifactGet, artifactPut } from './artifact'
@@ -44,7 +47,6 @@ import { recognizeHelpRequest, renderCommandHelp, renderTopLevelHelp } from './h
 import { observe } from './observe'
 import { abPlugin, type PluginContractSubprocess } from './plugin'
 import { preparePrAttachments } from './pr-attachments'
-import { renderPrSummary } from './pr-summary'
 import { abBuildAssetGet, abBuilds, abBuildStatus } from './status'
 import { abRepositoryStatus } from './repository-status'
 import { abWatch, WATCH_USAGE } from './watch'
@@ -53,6 +55,7 @@ import { abMcp, AB_MCP_USAGE } from './mcp'
 import type { StoreOpener } from './store-opening'
 import { done, escalate, verdict } from './terminals'
 import { abTicket, openTicketSource } from './ticket'
+import { checkUpgradeCompatibility, type CompatibilityFetch } from './upgrade-compatibility'
 import { abUpgrade, type ResolveConflict } from './upgrade'
 import { withUpgradeProgress } from './upgrade-progress'
 import {
@@ -95,6 +98,8 @@ import {
  */
 export const SESSIONLESS_COMMANDS = new Set([
   'init',
+  'connect',
+  'disconnect',
   'upgrade',
   'update',
   'ticket',
@@ -186,6 +191,7 @@ export interface SessionlessCliDeps {
    * to the running module, independent of the current repository. */
   distributionRoot?: string
   /** Self-update seams keep release/package-manager orchestration testable. */
+  compatibilityFetch?: CompatibilityFetch
   selfUpdateCommand?: SelfUpdateCommand
   selfUpdate?: (options: SelfUpdateOptions) => Promise<SelfUpdateResult>
   /** Production supplies the tool-free upgrade agent; tests inject a fake.
@@ -304,6 +310,7 @@ async function runBuildControl(
   action: BuildControlAction,
   storeRef?: string,
   readTicketBody?: (ref: TicketRef) => Promise<string>,
+  prepareTicketAssets?: (ref: TicketRef, store: BuildStore, repo: string) => Promise<PinnedAsset[]>,
 ): Promise<void> {
   if (deps.exec === undefined) {
     throw new Error(
@@ -318,6 +325,7 @@ async function runBuildControl(
     action,
     ...(storeRef !== undefined ? { storeRef } : {}),
     ...(readTicketBody !== undefined ? { readTicketBody } : {}),
+    ...(prepareTicketAssets ? { prepareTicketAssets } : {}),
     ...(deps.openStore !== undefined ? { openStore: deps.openStore } : {}),
   })
   deps.stdout(buildControlConfirmation(result))
@@ -444,6 +452,24 @@ async function dispatch(argv: string[], deps: SessionlessCliDeps): Promise<numbe
 
     // init and upgrade run OUTSIDE build sessions (§16.3): they operate on a
     // repo, not a build, so they route before any store/env requirement.
+    case 'connect':
+    case 'disconnect': {
+      const usage = command === 'connect' ? 'usage: ab connect [url]' : 'usage: ab disconnect'
+      const parsed = parseArgs(rest, { tickets: 'boolean', builds: 'boolean' }, usage)
+      if (parsed.positionals.length > (command === 'connect' ? 1 : 0)) throw new Error(usage)
+      const options = {
+        tickets: parsed.flags.get('tickets') === true,
+        builds: parsed.flags.get('builds') === true,
+        cwd: deps.workspacePath,
+        env: deps.processEnv ?? process.env,
+        exec: deps.exec ?? spawnExec,
+        print: stdout,
+        ...(deps.signal ? { signal: deps.signal } : {}),
+      }
+      if (command === 'connect') await abConnect(parsed.positionals[0], options)
+      else await abDisconnect(options)
+      return 0
+    }
     case 'init': {
       const usage = 'usage: ab init [target] [--force | --validate] (§16.3)'
       const removed = [
@@ -515,6 +541,14 @@ async function dispatch(argv: string[], deps: SessionlessCliDeps): Promise<numbe
       }
       const targetRepo = parsed.positionals[0] ?? deps.workspacePath
       const noCommit = parsed.flags.has('no-commit')
+      const compatibilityWarnings = new Set<string>()
+      const upgradeStderr = (line: string): void => {
+        if (line.startsWith('warning:')) {
+          if (compatibilityWarnings.has(line)) return
+          compatibilityWarnings.add(line)
+        }
+        stderr(line)
+      }
       const handoff = deps.processEnv?.[SELF_UPDATE_HANDOFF_ENV] === '1'
       let commitContext: UpgradeCommitContext | undefined
       if (!noCommit) {
@@ -543,9 +577,10 @@ async function dispatch(argv: string[], deps: SessionlessCliDeps): Promise<numbe
         if (!parsed.flags.has('no-self-update') && !handoff) {
           const update = await (deps.selfUpdate ?? selfUpdate)({
             targetRepo,
+            compatibilityFetch: deps.compatibilityFetch,
             stdout,
-            stderr,
-            env: deps.processEnv ?? {},
+            stderr: upgradeStderr,
+            env: deps.processEnv ?? process.env,
             noCommit: noCommit || commitContext === undefined,
             ...(commitContext === undefined
               ? {}
@@ -559,6 +594,13 @@ async function dispatch(argv: string[], deps: SessionlessCliDeps): Promise<numbe
           if (update.kind === 'handoff') return update.exitCode
           if (update.kind === 'failed') return 1
         }
+        await checkUpgradeCompatibility({
+          targetRepo,
+          distRoot: deps.distributionRoot,
+          env: deps.processEnv,
+          stderr: upgradeStderr,
+          fetch: deps.compatibilityFetch,
+        })
         const resolverFactory = deps.upgradeResolverFactory
         let resolver: ResolveConflict | undefined
         const resolveConflict: ResolveConflict | undefined =
@@ -1091,6 +1133,7 @@ async function dispatch(argv: string[], deps: SessionlessCliDeps): Promise<numbe
           : parsed.flags.has('revise-spec-from-ticket')
             ? ({ kind: 'revise-spec', body: { kind: 'ticket' } } as const)
             : undefined
+      let revisionTicketSource: import('../ports/types').TicketSource | undefined
       const readTicketBody =
         resolve?.kind === 'revise-spec' && resolve.body.kind === 'ticket'
           ? async (ref: TicketRef): Promise<string> => {
@@ -1104,6 +1147,7 @@ async function dispatch(argv: string[], deps: SessionlessCliDeps): Promise<numbe
                 },
                 'ab answer --revise-spec-from-ticket',
               )
+              revisionTicketSource = source
               if (source.name !== ref.source) {
                 throw new Error(
                   `build ticket source is "${ref.source}", but this repository is configured for "${source.name}"; refusing to read a same-id ticket from a different source`,
@@ -1115,7 +1159,10 @@ async function dispatch(argv: string[], deps: SessionlessCliDeps): Promise<numbe
                   `ticket "${ref.id}" was not found in the configured ${source.name} source`,
                 )
               }
-              if (ticket.ref.source !== ref.source || ticket.ref.id !== ref.id) {
+              if (
+                ticket.ref.source !== ref.source ||
+                (source.name !== 'hosted' && ticket.ref.id !== ref.id)
+              ) {
                 throw new Error(
                   `ticket adapter returned ${ticket.ref.source}:${ticket.ref.id}, expected ${ref.source}:${ref.id}`,
                 )
@@ -1134,6 +1181,13 @@ async function dispatch(argv: string[], deps: SessionlessCliDeps): Promise<numbe
         },
         storeRef,
         readTicketBody,
+        readTicketBody
+          ? async (ref, store, repo) => {
+              if (!revisionTicketSource)
+                throw new Error('ticket body must be read before preparing assets')
+              return preparePinnedAssets(revisionTicketSource, store, repo, ref.id)
+            }
+          : undefined,
       )
       return 0
     }
@@ -1314,7 +1368,7 @@ async function dispatch(argv: string[], deps: SessionlessCliDeps): Promise<numbe
         const meta = await artifactPut(session, kind, file, { attach })
 
         // A designation made after the PR exists (verify after reconcile or a
-        // finalize post-step) republishes the same complete projection. Every
+        // finalize post-step) prepares hosted attachments. Every
         // external side effect is best-effort after the atomic designation.
         if (attach) {
           try {
@@ -1328,16 +1382,6 @@ async function dispatch(argv: string[], deps: SessionlessCliDeps): Promise<numbe
                 // asset identity before throwing. Keep going so its hosting
                 // failure cannot suppress the complete text projection.
               }
-              try {
-                await session.forge.commentOnPr(
-                  session.workspacePath,
-                  pr.number,
-                  renderPrSummary(session.env, await session.store.getEvents(session.env.build)),
-                )
-              } catch {
-                // The exact artifact and designation are already durable. A
-                // comment refresh cannot turn the agent's deposit into failure.
-              }
             }
           } catch {
             // Reading the optional PR projection is best-effort too.

package/packages/core/src/cli/mcp.ts

@@ -107,19 +107,21 @@ export async function buildMcpTicketBackend(
         config.tickets.readyState,
         config.tickets.claimedState,
         config.tickets.createState,
+        config.tickets.doneState,
       ].filter((state): state is string => state !== undefined),
     ),
   ]
   return {
     sourceFor: async (context) => {
-      if (config.tickets.teamKey !== context.teamKey) {
+      if ((config.tickets.teamKey ?? '') !== context.teamKey) {
         throw new Error(
           `the repository's effective ticket config names team "${context.teamKey}", but this checkout's autobuild.toml names team "${String(config.tickets.teamKey)}"; refusing to serve tickets across that drift — run ab mcp from the checkout dispatch uses`,
         )
       }
       return source
     },
-    statesFor: async () => states,
+    statesFor: async (_context, source) =>
+      source.listStates ? (await source.listStates()).map((s) => s.name) : states,
   }
 }
 
@@ -200,6 +202,11 @@ export async function abMcp(opts: AbMcpOpts): Promise<number> {
   try {
     const backend = await buildMcpTicketBackend({
       ...opts,
+      env: {
+        ...opts.env,
+        AB_STORE: context.storeRef,
+        ...(context.token !== undefined ? { AB_TOKEN: context.token } : {}),
+      },
       checkout: context.checkout,
       localStateRoot: context.localStateRoot,
     })