@konstantdotcloud/boombox 0.1.2 → 0.2.0

package/README.md

@@ -21,7 +21,7 @@ boombox admin       # opens the VM admin UI through a short-lived cloud grant
 boombox run bd_pre_meeting_brief --input meeting_uid=sample --input organizer=user@example.com --input attendees='["user@example.com"]' --input start_time=2026-06-02T15:00:00Z --input summary=Sample
 ```
 
-For MCP clients, add `boombox serve --mcp` after `boombox login` succeeds.
+For MCP clients, add `boombox serve --mcp` after `boombox login` succeeds. The MCP server defaults to the `advanced` profile (cassette authoring + rack verbs included); set `GARY_MCP_PROFILE=andrew` or pass `--profile` to narrow or change it.
 
 ## Commands
 
@@ -33,6 +33,7 @@ For MCP clients, add `boombox serve --mcp` after `boombox login` succeeds.
 | `boombox run <cassette_name> [--input key=value ...] [--no-tail] [--json]` | Manually triggers a cassette through `/gateway/rack/run`, prompts for required missing inputs, then polls to a terminal state unless `--no-tail` is set. |
 | `boombox cassettes list` | Lists active cassettes available to the tenant. |
 | `boombox cassettes show <id> [--draft]` | Prints a cassette YAML projection. |
+| `boombox cassettes publish <draft_id> --name <name> [--version <n>] [--json]` | Publishes a dry-run-approved cassette draft to the tenant tier via `POST /gateway/cassette/publish`; renders gate rejections (e.g. `dry-run-not-green`) with fix guidance. |
 | `boombox runs list [--cassette=X] [--since=24h] [--actor=Y] [--status=completed] [--limit=20]` | Lists recent runs with run id, cassette, actor, status, duration, and start time. |
 | `boombox runs show <run_id>` | Shows one run: spec hash, inputs, step trace, delivery receipts, error summary, and replay ref. |
 | `boombox logs tail [--cassette=X]` | Tails run/step events from the VM SSE stream. |

package/dist/boombox.js

@@ -37341,12 +37341,6 @@ function registerCassetteAuthoringVerbs(server, gateway) {
     publishSchema,
     async (input) => renderGatewayResult("cassette_publish", await gateway.call("/gateway/cassette/publish", input))
   );
-  server.tool(
-    "cassette_request_publish",
-    "Request tenant_admin approval to publish a cassette draft when the caller lacks cassette.publish.",
-    requestPublishSchema,
-    async (input) => renderGatewayResult("cassette_request_publish", await gateway.call("/gateway/cassette/request-publish", input))
-  );
   server.tool(
     "cassette_get",
     "Get a cassette draft or published cassette as YAML plus describe payload.",
@@ -37399,7 +37393,7 @@ ${JSON.stringify(record2, null, 2)}`;
 function isRecord(value) {
   return value !== null && typeof value === "object" && !Array.isArray(value);
 }
-var recordSchema, draftSchema, refineSchema, dryRunSchema, publishSchema, requestPublishSchema, getSchema, listDraftsSchema, listCapabilitiesSchema;
+var recordSchema, draftSchema, refineSchema, dryRunSchema, publishSchema, getSchema, listDraftsSchema, listCapabilitiesSchema;
 var init_cassette_authoring = __esm({
   "../../lib/gary-mcp/verbs/cassette-authoring.ts"() {
     "use strict";
@@ -37427,10 +37421,6 @@ var init_cassette_authoring = __esm({
       name: external_exports2.string().min(1),
       version: external_exports2.number().int().min(1).optional()
     };
-    requestPublishSchema = {
-      draft_id: external_exports2.string().min(1),
-      reason: external_exports2.string().min(1).optional()
-    };
     getSchema = {
       id: external_exports2.string().min(1).optional(),
       draft_id: external_exports2.string().min(1).optional()
@@ -37609,7 +37599,7 @@ var {
 init_esm_shims();
 
 // package.json
-var version = "0.1.2";
+var version = "0.2.0";
 
 // src/lib/version.ts
 var BOOMBOX_VERSION = version;
@@ -47050,12 +47040,20 @@ function relativeToCwd(absPath) {
 
 // src/server/mcp-stdio.ts
 init_esm_shims();
+var DEFAULT_MCP_PROFILE = "advanced";
+function resolveMcpProfileSelection(flag) {
+  if (flag === void 0) return void 0;
+  return flag === "default" ? DEFAULT_MCP_PROFILE : flag;
+}
 async function startStdioMcp(config2) {
   process.env.GARY_MCP_GATEWAY_URL = resolveGateway(config2);
   process.env.GARY_MCP_API_KEY = config2.konstant.api_key;
   if (!process.env.KONSTANT_API_KEY) {
     process.env.KONSTANT_API_KEY = config2.konstant.api_key;
   }
+  if (!(process.env.GARY_MCP_PROFILE ?? "").trim()) {
+    process.env.GARY_MCP_PROFILE = DEFAULT_MCP_PROFILE;
+  }
   const mod = await Promise.resolve().then(() => (init_gary_mcp(), gary_mcp_exports));
   await mod.startGaryMcpServer();
 }
@@ -47130,8 +47128,10 @@ async function runServe(options = {}) {
     log("Note: mcp_enabled=false in config; enabling for this session.");
   }
   if (enableMcp) {
-    const requestedProfile = options.profile === "default" ? "andrew" : options.profile;
-    process.env.GARY_MCP_PROFILE = requestedProfile ?? process.env.GARY_MCP_PROFILE ?? "andrew";
+    const selectedProfile = resolveMcpProfileSelection(options.profile);
+    if (selectedProfile !== void 0) {
+      process.env.GARY_MCP_PROFILE = selectedProfile;
+    }
     process.env.GARY_MCP_TENANT_ID = config2.konstant.tenant_id;
   }
   const handle = await serve2({
@@ -49199,6 +49199,96 @@ async function runCassettesDryRun(options) {
   }
   printSimulation(body, ctx);
 }
+async function runCassettesPublish(options) {
+  const ctx = createOpsContext(options);
+  const payload = {
+    draft_id: options.draftId,
+    name: options.name
+  };
+  if (options.version !== void 0) payload.version = options.version;
+  let body;
+  try {
+    body = (await fetchJson(ctx, "/gateway/cassette/publish", { method: "POST", body: payload })).body;
+  } catch (error2) {
+    if (error2 instanceof OpsHttpError) {
+      renderPublishRejection(error2.body, ctx, options, `HTTP ${error2.status}`);
+      return 1;
+    }
+    throw error2;
+  }
+  const record2 = asRecord(body);
+  if (record2 && (record2.ok === false || typeof record2.code === "string" && record2.ok !== true)) {
+    renderPublishRejection(body, ctx, options, "rejected");
+    return 1;
+  }
+  if (options.json) {
+    ctx.log(JSON.stringify(body ?? null, null, 2));
+    return 0;
+  }
+  const published = recordField(record2, "workflow") ?? recordField(record2, "published") ?? recordField(record2, "cassette") ?? record2 ?? {};
+  printKeyValues([
+    ["draft", options.draftId],
+    ["workflow", field2(published, ["workflow_id", "id", "cassette_id"])],
+    ["version", field2(published, ["version", "workflow_version"])],
+    ["tier", field2(published, ["tier"])],
+    ["status", field2(published, ["status"])]
+  ], ctx.log);
+  ctx.log("Published to the tenant tier.");
+  return 0;
+}
+function publishRejectionHint(code, draftId) {
+  switch (code.toLowerCase().replace(/_/g, "-")) {
+    case "publish-blocked-draft-required":
+      return `Publish requires a saved draft, not raw YAML. Save the draft first (cassette_draft / cassette_refine via MCP), then publish by draft_id (\`${draftId}\`).`;
+    case "publish-blocked-dry-run-missing":
+      return `This draft has no dry-run yet. Run one (cassette_dry_run via MCP, or \`boombox cassettes dry-run ${draftId} --draft\`) and get a ready_to_publish verdict before publishing.`;
+    case "publish-blocked-dry-run-not-ready":
+    case "dry-run-not-green":
+      return `The draft's latest dry-run is not green. Re-run it (cassette_dry_run via MCP, or \`boombox cassettes dry-run ${draftId} --draft\`) until the verdict is ready_to_publish, then publish again.`;
+    case "publish-blocked-dry-run-stale":
+    case "dry-run-stale":
+    // legacy aliases
+    case "stale-dry-run":
+    case "spec-hash-mismatch":
+      return "The draft changed after its last green dry-run. Re-run the dry-run against the current draft revision, then publish again.";
+    case "forbidden-authority":
+    case "missing-authority":
+      return "This API key lacks the cassette.publish grant. Use cassette_request_publish (MCP) to ask a tenant admin to publish, or have an admin add cassette.publish to your key.";
+    case "publish-blocked-not-owner":
+    case "forbidden-not-owner":
+    case "forbidden":
+    // legacy aliases
+    case "draft-not-owned":
+      return "This draft is not owned by your API key actor. Publish from the key that created the draft, or ask a tenant admin to publish it.";
+    case "not-found":
+      return `No draft "${draftId}" is visible to this key. Check \`boombox cassettes list --status draft\` (or cassette_list_drafts via MCP).`;
+    case "publish-blocked-master-shadow":
+    case "master-shadowing":
+    // legacy aliases
+    case "master-collision":
+      return "The cassette id collides with a master/builtin cassette, which tenant publishes are not allowed to shadow. Rename the cassette and publish again.";
+    case "publish-blocked-event-trigger":
+      return "Tenant cassettes cannot publish with event triggers (those are reserved for master-tier cassettes). Remove the event trigger, or request an admin publish.";
+    case "cassette-yaml-invalid":
+      return "The draft YAML failed validation. Fix the reported errors (cassette_refine via MCP) and re-run a dry-run before publishing.";
+    case "validation-error":
+      return "The publish payload was rejected. Check the draft_id and --name values, then re-validate the draft before publishing.";
+    default:
+      return void 0;
+  }
+}
+function renderPublishRejection(body, ctx, options, fallbackLabel) {
+  if (options.json) {
+    ctx.errLog(JSON.stringify(body ?? { code: fallbackLabel }, null, 2));
+    return;
+  }
+  const record2 = asRecord(body);
+  const code = stringField4(record2, "code") ?? fallbackLabel;
+  const message = stringField4(record2, "message") ?? stringField4(record2, "error") ?? "no detail from gateway";
+  ctx.errLog(`publish rejected (${code}): ${message}`);
+  const hint = publishRejectionHint(code, options.draftId);
+  if (hint) ctx.errLog(`  fix: ${hint}`);
+}
 function extractCassettes(body) {
   const record2 = asRecord(body);
   const list = arrayField2(record2, "cassettes") ?? arrayField2(record2, "items") ?? arrayField2(record2, "drafts") ?? (Array.isArray(body) ? body : []);
@@ -49604,6 +49694,16 @@ cassettes.command("validate <id>").description("Run cassette oracle readiness ch
 cassettes.command("dry-run <id>").description("Run cassette v2 preview simulation with no durable side effects.").option("--draft", "load from cassette_drafts instead of published records").option("--json", "print raw JSON report").option("--config <path>", "override config path").action(async (id, opts) => {
   await runCassettesDryRun({ id, draft: opts.draft, json: opts.json, configPath: opts.config });
 });
+cassettes.command("publish <draft_id>").description("Publish a dry-run-approved cassette draft to the tenant tier.").requiredOption("--name <name>", "name for the published cassette").option("--version <n>", "explicit version (server assigns the next one when omitted)", parsePositiveIntFlag).option("--json", "print the raw JSON response").option("--config <path>", "override config path").action(async (draftId, opts) => {
+  const code = await runCassettesPublish({
+    draftId,
+    name: opts.name,
+    version: opts.version,
+    json: opts.json,
+    configPath: opts.config
+  });
+  if (code !== 0) process.exit(code);
+});
 var artifacts = program2.command("artifacts").description("Operate on artifacts.");
 artifacts.command("open <artifact_id>").description("Open an artifact URL in the system browser.").option("--config <path>", "override config path").action(async (artifactId, opts) => {
   await runArtifactsOpen({ artifactId, configPath: opts.config });

package/dist/index.js

@@ -29412,12 +29412,6 @@ function registerCassetteAuthoringVerbs(server, gateway) {
     publishSchema,
     async (input) => renderGatewayResult("cassette_publish", await gateway.call("/gateway/cassette/publish", input))
   );
-  server.tool(
-    "cassette_request_publish",
-    "Request tenant_admin approval to publish a cassette draft when the caller lacks cassette.publish.",
-    requestPublishSchema,
-    async (input) => renderGatewayResult("cassette_request_publish", await gateway.call("/gateway/cassette/request-publish", input))
-  );
   server.tool(
     "cassette_get",
     "Get a cassette draft or published cassette as YAML plus describe payload.",
@@ -29470,7 +29464,7 @@ ${JSON.stringify(record2, null, 2)}`;
 function isRecord(value) {
   return value !== null && typeof value === "object" && !Array.isArray(value);
 }
-var recordSchema, draftSchema, refineSchema, dryRunSchema, publishSchema, requestPublishSchema, getSchema, listDraftsSchema, listCapabilitiesSchema;
+var recordSchema, draftSchema, refineSchema, dryRunSchema, publishSchema, getSchema, listDraftsSchema, listCapabilitiesSchema;
 var init_cassette_authoring = __esm({
   "../../lib/gary-mcp/verbs/cassette-authoring.ts"() {
     "use strict";
@@ -29498,10 +29492,6 @@ var init_cassette_authoring = __esm({
       name: external_exports2.string().min(1),
       version: external_exports2.number().int().min(1).optional()
     };
-    requestPublishSchema = {
-      draft_id: external_exports2.string().min(1),
-      reason: external_exports2.string().min(1).optional()
-    };
     getSchema = {
       id: external_exports2.string().min(1).optional(),
       draft_id: external_exports2.string().min(1).optional()
@@ -34584,7 +34574,7 @@ init_esm_shims();
 init_esm_shims();
 
 // package.json
-var version = "0.1.2";
+var version = "0.2.0";
 
 // src/lib/version.ts
 var BOOMBOX_VERSION = version;
@@ -42894,12 +42884,20 @@ function relativeToCwd(absPath) {
 
 // src/server/mcp-stdio.ts
 init_esm_shims();
+var DEFAULT_MCP_PROFILE = "advanced";
+function resolveMcpProfileSelection(flag) {
+  if (flag === void 0) return void 0;
+  return flag === "default" ? DEFAULT_MCP_PROFILE : flag;
+}
 async function startStdioMcp(config2) {
   process.env.GARY_MCP_GATEWAY_URL = resolveGateway(config2);
   process.env.GARY_MCP_API_KEY = config2.konstant.api_key;
   if (!process.env.KONSTANT_API_KEY) {
     process.env.KONSTANT_API_KEY = config2.konstant.api_key;
   }
+  if (!(process.env.GARY_MCP_PROFILE ?? "").trim()) {
+    process.env.GARY_MCP_PROFILE = DEFAULT_MCP_PROFILE;
+  }
   const mod = await Promise.resolve().then(() => (init_gary_mcp(), gary_mcp_exports));
   await mod.startGaryMcpServer();
 }
@@ -43353,8 +43351,10 @@ async function runServe(options = {}) {
     log("Note: mcp_enabled=false in config; enabling for this session.");
   }
   if (enableMcp) {
-    const requestedProfile = options.profile === "default" ? "andrew" : options.profile;
-    process.env.GARY_MCP_PROFILE = requestedProfile ?? process.env.GARY_MCP_PROFILE ?? "andrew";
+    const selectedProfile = resolveMcpProfileSelection(options.profile);
+    if (selectedProfile !== void 0) {
+      process.env.GARY_MCP_PROFILE = selectedProfile;
+    }
     process.env.GARY_MCP_TENANT_ID = config2.konstant.tenant_id;
   }
   const handle = await serve2({

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@konstantdotcloud/boombox",
-  "version": "0.1.2",
+  "version": "0.2.0",
   "description": "Local Boombox runtime for Konstant cassettes — CLI, stdio MCP server, and local Hono proxy.",
   "license": "UNLICENSED",
   "type": "module",