@snowyroad/braid 0.96.8 → 0.98.0

package/dist/{http-3WYFRJZR.js → http-7QNDIXBN.js}

@@ -4,7 +4,7 @@ import {
   boundedJsonFetch,
   resetHttpMetricsForTest,
   snapshotHttpMetrics
-} from "./chunk-QHWKKDPN.js";
+} from "./chunk-3SHZYLWH.js";
 import "./chunk-HQNAAXUM.js";
 export {
   assertHttpEndpoint,

package/dist/mcp/server.js

@@ -34,7 +34,7 @@ function brokerClient(socketPath, token) {
       }
     );
     req.on("error", reject);
-    req.setTimeout(1e4, () => {
+    req.setTimeout(route.startsWith("/git/") ? 3e5 : 1e4, () => {
       req.destroy(new Error("broker timeout"));
     });
     req.write(data);
@@ -559,10 +559,74 @@ ${lines.join("\n")}`;
       } catch (e) {
         return canvasErrorMessage(e, brokerStatus);
       }
-    }
+    },
     // ── End channel canvas tools ───────────────────────────────────────────────
+    // ── Git gateway tools (2026-10-06 D6/D7) ──────────────────────────────────
+    // No argument names the repo: the bridge takes it from the owner's grant. A
+    // refusal's text (what to ask the owner for) is returned to the agent verbatim.
+    async braidGitStatus(args) {
+      return gitCall(call, "/git/status", withPath(args, {}));
+    },
+    async braidGitFetch(args) {
+      return gitCall(call, "/git/fetch", withPath(args, {}));
+    },
+    async braidGitPush(args) {
+      const body = branchBody(args);
+      if (typeof body === "string") return body;
+      const sha = nonEmpty(args?.sha);
+      if (sha) body.sha = sha;
+      return gitCall(call, "/git/push", withPath(args, body));
+    },
+    async braidOpenPr(args) {
+      const body = branchBody(args);
+      if (typeof body === "string") return body;
+      const title = nonEmpty(args?.title);
+      if (!title) return "Error: title is required.";
+      body.title = title;
+      if (typeof args?.body === "string") body.body = args.body;
+      const base = nonEmpty(args?.base);
+      if (base) body.base = base;
+      return gitCall(call, "/git/pr/open", withPath(args, body));
+    },
+    async braidMergePr(args) {
+      const raw = args?.number;
+      const num = typeof raw === "number" ? raw : typeof raw === "string" && raw.trim() !== "" ? Number(raw) : NaN;
+      if (!Number.isFinite(num) || !Number.isInteger(num)) return "Error: number is required (the pull request number, an integer).";
+      const body = { number: num };
+      const method = nonEmpty(args?.method);
+      if (method) body.method = method;
+      return gitCall(call, "/git/pr/merge", body);
+    }
+    // ── End git gateway tools ──────────────────────────────────────────────────
   };
 }
+function nonEmpty(v) {
+  return typeof v === "string" && v.trim() !== "" ? v : void 0;
+}
+function branchBody(args) {
+  const branch = nonEmpty(args?.branch);
+  return branch ? { branch } : "Error: branch is required.";
+}
+function withPath(args, body) {
+  const p = nonEmpty(args?.path);
+  return p ? { ...body, path: p } : body;
+}
+async function gitCall(call, route, body) {
+  try {
+    const res = await call(route, body);
+    return typeof res?.text === "string" && res.text ? res.text : "Done.";
+  } catch (e) {
+    const parsed = e?.body && typeof e.body === "object" ? e.body : (() => {
+      try {
+        return JSON.parse(String(e?.message ?? "").replace(/^broker \d+:\s*/, ""));
+      } catch {
+        return null;
+      }
+    })();
+    if (parsed && typeof parsed.text === "string" && parsed.text) return parsed.text;
+    return "The git operation could not be completed right now. Try again, or ask the owner if it keeps failing.";
+  }
+}
 
 // src/mcp/server.ts
 async function main() {
@@ -903,6 +967,60 @@ async function main() {
     },
     async (args) => ({ content: [{ type: "text", text: await tools.appendCanvasSection(args) }] })
   );
+  const gitPath = z.string().optional().describe("Worktree path; defaults to the session directory");
+  server.registerTool(
+    "braid_git_status",
+    {
+      description: "Show the GitHub repository this agent may act on through Braid (granted by its owner), the autonomy mode, the current branch and HEAD, and how far it is from the remote. Read-only. Use before braid_git_push.",
+      inputSchema: { path: gitPath }
+    },
+    async (args) => ({ content: [{ type: "text", text: await tools.braidGitStatus(args) }] })
+  );
+  server.registerTool(
+    "braid_git_fetch",
+    {
+      description: "Fetch the granted repository's branches into the current worktree under refs/remotes/braid/* (for example braid/main). Braid runs git outside the sandbox with a credential you never see.",
+      inputSchema: { path: gitPath }
+    },
+    async (args) => ({ content: [{ type: "text", text: await tools.braidGitFetch(args) }] })
+  );
+  server.registerTool(
+    "braid_git_push",
+    {
+      description: "Push a local commit (default HEAD of the worktree) to a branch of the granted repository. Braid runs the push outside the sandbox with a credential you never see and enforces the owner's rules: fast-forward only, no deletes or tags; in pr-only mode only branches under braid/<agent>/ and never the default branch; .github/workflows changes only if the owner allowed them. On refusal the text tells you what to ask the owner for.",
+      inputSchema: {
+        path: gitPath,
+        branch: z.string(),
+        sha: z.string().optional()
+      }
+    },
+    async (args) => ({ content: [{ type: "text", text: await tools.braidGitPush(args) }] })
+  );
+  server.registerTool(
+    "braid_open_pr",
+    {
+      description: "Open a pull request from a branch you pushed to the granted repository (draft in pr-only mode). Returns the PR number and URL.",
+      inputSchema: {
+        path: gitPath,
+        branch: z.string(),
+        title: z.string(),
+        body: z.string().optional(),
+        base: z.string().optional()
+      }
+    },
+    async (args) => ({ content: [{ type: "text", text: await tools.braidOpenPr(args) }] })
+  );
+  server.registerTool(
+    "braid_merge_pr",
+    {
+      description: "Merge a pull request in the granted repository. Allowed only when the owner set autonomous mode; in pr-only mode a human merges. method is squash (default), merge, or rebase.",
+      inputSchema: {
+        number: z.number().int(),
+        method: z.enum(["merge", "squash", "rebase"]).optional()
+      }
+    },
+    async (args) => ({ content: [{ type: "text", text: await tools.braidMergePr(args) }] })
+  );
   await server.connect(new StdioServerTransport());
 }
 main().catch((err) => {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@snowyroad/braid",
-  "version": "0.96.8",
+  "version": "0.98.0",
   "description": "Braid: connect your own coding agent (Claude Code, Codex, Gemini, Grok) to a Braid channel and collaborate with other agents and humans.",
   "license": "SEE LICENSE IN LICENSE.md",
   "author": "SnowyRoad",

package/service-shrinkwrap.json

@@ -1,12 +1,12 @@
 {
   "name": "@snowyroad/braid",
-  "version": "0.96.8",
+  "version": "0.98.0",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@snowyroad/braid",
-      "version": "0.96.8",
+      "version": "0.98.0",
       "license": "SEE LICENSE IN LICENSE.md",
       "dependencies": {
         "@agentclientprotocol/sdk": "0.25.1",
@@ -1394,9 +1394,9 @@
       }
     },
     "node_modules/acorn": {
-      "version": "8.18.0",
-      "resolved": "https://registry.npmjs.org/acorn/-/acorn-8.18.0.tgz",
-      "integrity": "sha512-lGq+9yr1/GuAWaVYIHRjvvySG5/4VfKIvC8EWxStPdcDh/Ka7FG3twP6v4d5BkravUilhIAsG4Qj83t02LWUPQ==",
+      "version": "8.19.0",
+      "resolved": "https://registry.npmjs.org/acorn/-/acorn-8.19.0.tgz",
+      "integrity": "sha512-oJlA3XiRm7Cyk6qFD2Jn8ak9B7jSy0qy00ADO3+8dpT0LSjFihQYv4C02LFCSYJV3Q37xYwwRy5m+IpIiUzqWw==",
       "dev": true,
       "license": "MIT",
       "bin": {
@@ -2144,9 +2144,9 @@
       }
     },
     "node_modules/express-rate-limit": {
-      "version": "8.7.0",
-      "resolved": "https://registry.npmjs.org/express-rate-limit/-/express-rate-limit-8.7.0.tgz",
-      "integrity": "sha512-hOwV7WOxXfjRpAM1DSJWZDXx3GhplwD8IfwuwvogD8i1Qnkgosw/H45s4ZnFAUHDAhPjlY9hLBvJhKmGMyY26g==",
+      "version": "8.7.1",
+      "resolved": "https://registry.npmjs.org/express-rate-limit/-/express-rate-limit-8.7.1.tgz",
+      "integrity": "sha512-2FXbqkygil3mZiXzEtM0IjE/UBmBNot0J1GEVrJT4JbrvwOSoEtqtO+wHbiMQELWe1eNvHoYRg2dkjOid+6JkA==",
       "license": "MIT",
       "dependencies": {
         "debug": "^4.4.3",
@@ -2369,9 +2369,9 @@
       }
     },
     "node_modules/hono": {
-      "version": "4.13.12",
-      "resolved": "https://registry.npmjs.org/hono/-/hono-4.13.12.tgz",
-      "integrity": "sha512-6E2QDAc9Ick9Sq77ZrGS/dk2WUYni91aufTw6LJKpV7w8kW5/GxVUc650FOADOmlwg3K+f7Pun6XlV+pYmW6gw==",
+      "version": "4.13.13",
+      "resolved": "https://registry.npmjs.org/hono/-/hono-4.13.13.tgz",
+      "integrity": "sha512-CQ46U0ZkAGmbT/4UxdzzGJpacP2IeKgY4a5/tOI9AABbpOMfK739wfDXmv1usCk+3RkKj1hQy4/fjhiwa2xlrA==",
       "license": "MIT",
       "engines": {
         "node": ">=16.9.0"
@@ -2745,9 +2745,9 @@
       }
     },
     "node_modules/nanoid": {
-      "version": "3.3.19",
-      "resolved": "https://registry.npmjs.org/nanoid/-/nanoid-3.3.19.tgz",
-      "integrity": "sha512-Y2tUNy4ouw6tq5oDSKeQYGOyhkUBhNOcGV/02KC+6kd9eDGqdZd++mjMiIDilrBYvjEnCYvVtsuHCuP+okSfug==",
+      "version": "3.3.20",
+      "resolved": "https://registry.npmjs.org/nanoid/-/nanoid-3.3.20.tgz",
+      "integrity": "sha512-uKdg2G3GNCKQn9byYOpxbGqrT2fGO5KRt5J/8b3pok8rT6qxGWF6hxMyJiEYtAf+FVyYuD9hRaDqX5uPFYJ4ZQ==",
       "dev": true,
       "funding": [
         {
@@ -2964,9 +2964,9 @@
       }
     },
     "node_modules/postcss": {
-      "version": "8.5.28",
-      "resolved": "https://registry.npmjs.org/postcss/-/postcss-8.5.28.tgz",
-      "integrity": "sha512-RRuzqDtt5Y9h3quz5hWhK+TPnsmVs6WwSU6LkJMeY4HstUEDuYTG8UJSdawMRzmzAtV+KEoG8N3Qg2qLy5vM/A==",
+      "version": "8.5.29",
+      "resolved": "https://registry.npmjs.org/postcss/-/postcss-8.5.29.tgz",
+      "integrity": "sha512-49cGhUbXj8Qenv0iTMxA1cFBzxXoctpC9Ujd77t1WcbJIr6nF/eI7g/8MgxrYldFRuAXvja7xQRwavoW7kgrxQ==",
       "dev": true,
       "funding": [
         {
@@ -2984,9 +2984,9 @@
       ],
       "license": "MIT",
       "dependencies": {
-        "nanoid": "^3.3.18",
+        "nanoid": "^3.3.19",
         "picocolors": "^1.1.1",
-        "source-map-js": "^1.2.1"
+        "source-map-js": "^1.2.2"
       },
       "engines": {
         "node": "^10 || ^12 || >=14"