requ-mcp 0.2.0 → 0.5.0

package/dist/index.js

@@ -6,10 +6,12 @@ import { promises as fs } from "node:fs";
 import path from "node:path";
 import url from "node:url";
 import { Store } from "./storage.js";
-import { CoverageMode, Priority, PhaseStatus, RequirementStatus, StoryStatus, TestStatus, testKey, } from "./schema.js";
+import { SqliteStore } from "./sqlite-store.js";
+import { ComponentStatus, CoverageMode, ExportPayload, Priority, PhaseStatus, RequirementStatus, StoryStatus, TestStatus, testKey, VcsRefKind, VcsRefState, } from "./schema.js";
 import { danglingStoryTags, indexConductor, inspectConductorProject, linkedScenarioKeys, scenariosByStory, validateTestRef, } from "./conductor.js";
 import { buildReport, buildTrend, findGaps, resolveStatuses } from "./coverage.js";
 import { parseCucumberJson } from "./ingest.js";
+import { buildExport, applyImport } from "./export-import.js";
 const now = () => new Date().toISOString();
 function json(data) {
     return { content: [{ type: "text", text: JSON.stringify(data, null, 2) }] };
@@ -23,16 +25,46 @@ function fail(message, extra) {
         content: [{ type: "text", text: JSON.stringify({ error: message, ...extra }, null, 2) }],
     };
 }
-const server = new McpServer({ name: "requ-mcp", version: "0.2.0" });
+/** SqliteStore instances for HTTP mode, keyed by URL-safe slug. */
+const _stores = new Map();
+/** Derive a URL-safe slug from a project root path. Deduplicates against `_stores`. */
+function slugify(root) {
+    const base = path.basename(root).toLowerCase().replace(/[^a-z0-9-]/g, "-");
+    if (!_stores.has(base))
+        return base;
+    let i = 2;
+    while (_stores.has(`${base}-${i}`))
+        i++;
+    return `${base}-${i}`;
+}
+/**
+ * Pre-load projects from env vars at HTTP server startup.
+ * REQU_PROJECTS: comma-separated absolute paths.
+ * Falls back to REQU_ROOT if REQU_PROJECTS is not set.
+ */
+function loadProjectsFromEnv() {
+    const raw = process.env.REQU_PROJECTS ?? process.env.REQU_ROOT;
+    if (!raw)
+        return;
+    // Deduplicate by resolved root — duplicate paths would share one .db file.
+    const roots = [...new Set(raw.split(",").map((s) => s.trim()).filter(Boolean).map((p) => path.resolve(p)))];
+    // Scope REQU_DB to single-project mode only — multiple projects must each use their own DB.
+    const dbOverride = roots.length === 1 ? (process.env.REQU_DB ?? undefined) : undefined;
+    for (const root of roots) {
+        try {
+            const slug = slugify(root);
+            _stores.set(slug, new SqliteStore(root, dbOverride));
+        }
+        catch (err) {
+            throw new Error(`Failed to open store for project ${root}: ${err.message}`);
+        }
+    }
+}
 // ===========================================================================
 // Project resolution
-//
-// A user-level (global) server must figure out which project each call targets.
-// Precedence: explicit projectPath → REQU_ROOT → a workspace root (MCP roots)
-// or cwd-ancestor that already contains `.requ/` → first workspace root → cwd.
 // ===========================================================================
 let cachedRoots = null;
-async function workspaceRoots() {
+async function workspaceRoots(server) {
     if (cachedRoots)
         return cachedRoots;
     try {
@@ -43,7 +75,7 @@ async function workspaceRoots() {
             .map((u) => url.fileURLToPath(u));
     }
     catch {
-        cachedRoots = []; // client doesn't support roots
+        cachedRoots = [];
     }
     return cachedRoots;
 }
@@ -67,45 +99,182 @@ async function findUp(start) {
         dir = parent;
     }
 }
-async function resolveRoot(explicit) {
+async function resolveRoot(server, explicit) {
     if (explicit)
         return path.resolve(explicit);
     if (process.env.REQU_ROOT)
         return path.resolve(process.env.REQU_ROOT);
-    const roots = await workspaceRoots();
+    const roots = await workspaceRoots(server);
     for (const r of roots)
         if (await hasRequ(r))
-            return r; // initialized workspace wins
+            return r;
     const found = await findUp(process.cwd());
     if (found)
         return found;
-    return roots[0] ?? process.cwd(); // not yet initialized
+    return roots[0] ?? process.cwd();
 }
-async function getStore(explicit) {
-    return new Store(await resolveRoot(explicit));
+async function getStore(server, explicit) {
+    if (process.env.REQU_TRANSPORT === "http") {
+        const root = await resolveRoot(server, explicit);
+        // Find an existing store for this root, or create a new one.
+        for (const store of _stores.values()) {
+            if (store.root === root)
+                return store;
+        }
+        const slug = slugify(root);
+        const store = new SqliteStore(root);
+        _stores.set(slug, store);
+        return store;
+    }
+    return new Store(await resolveRoot(server, explicit));
+}
+async function getStoreByKey(key, server) {
+    // HTTP mode: search loaded stores.
+    for (const store of _stores.values()) {
+        try {
+            const cfg = await store.readConfig();
+            if (cfg.key === key)
+                return store;
+        }
+        catch { /* skip uninitialized */ }
+    }
+    // stdio fallback: check the single auto-resolved store.
+    if (_stores.size === 0) {
+        try {
+            const store = await getStore(server, undefined);
+            const cfg = await store.readConfig();
+            if (cfg.key === key)
+                return store;
+        }
+        catch { /* no match */ }
+    }
+    return null;
 }
 const projectPathSchema = z
     .string()
     .optional()
     .describe("Absolute path to the project root (the dir containing .requ/). Omit to auto-detect: REQU_ROOT, else a workspace root or ancestor of the cwd that contains .requ/.");
-/** Register a tool that auto-injects `projectPath` and resolves the Store. */
+/**
+ * All tool definitions, collected once at module load. They are registered onto a
+ * fresh `McpServer` by `createServer()` — one server instance per stdio process or
+ * per HTTP session — so a single server is never connected to two transports.
+ */
+const toolDefs = [];
+/** Collect a tool definition that auto-injects `projectPath` and resolves the Store. */
 function tool(name, config, handler) {
-    const inputSchema = { ...(config.inputSchema ?? {}), projectPath: projectPathSchema };
-    server.registerTool(name, { title: config.title, description: config.description, inputSchema }, async (args) => {
+    toolDefs.push({ name, config, handler });
+}
+/** Build a fresh McpServer with every collected tool registered on it. */
+function createServer() {
+    const server = new McpServer({ name: "requ-mcp", version: "0.2.0" });
+    for (const { name, config, handler } of toolDefs) {
+        const inputSchema = { ...(config.inputSchema ?? {}), projectPath: projectPathSchema };
+        server.registerTool(name, { title: config.title, description: config.description, inputSchema }, async (args) => {
+            try {
+                const store = await getStore(server, args.projectPath);
+                return (await handler(args, store));
+            }
+            catch (e) {
+                return fail(e.message);
+            }
+        });
+    }
+    // list_projects — enumerate all active projects on this server instance.
+    server.registerTool("list_projects", {
+        title: "List Projects",
+        description: "List all requ projects currently loaded on this server instance. " +
+            "Returns each project's key, name, and root path. " +
+            "Use this to discover which projects are available before calling other tools.",
+        inputSchema: {},
+    }, async () => {
         try {
-            const store = await getStore(args.projectPath);
-            return (await handler(args, store));
+            // HTTP mode: _stores has one entry per loaded project root.
+            if (_stores.size > 0) {
+                const projects = [];
+                for (const store of _stores.values()) {
+                    try {
+                        const cfg = await store.readConfig();
+                        projects.push({ key: cfg.key ?? null, name: cfg.name, root: store.root ?? "" });
+                    }
+                    catch { /* skip uninitialized */ }
+                }
+                return json(projects);
+            }
+            // Stdio / single-store mode: resolve the default store and report it.
+            try {
+                const store = await getStore(server, undefined);
+                const cfg = await store.readConfig();
+                return json([{ key: cfg.key ?? null, name: cfg.name, root: store.root ?? "" }]);
+            }
+            catch {
+                return json([]);
+            }
         }
         catch (e) {
             return fail(e.message);
         }
     });
+    // get_project_brief is registered directly so it can use the server closure for key-based lookup.
+    server.registerTool("get_project_brief", {
+        title: "Get Project Brief",
+        description: "Retrieve a project's name, key, and Markdown brief by its project key. Useful when you know the project key but not its filesystem path.",
+        inputSchema: {
+            key: z.string().describe("The project key to look up (e.g. 'AUTH')."),
+        },
+    }, async (args) => {
+        try {
+            const store = await getStoreByKey(args.key, server);
+            if (!store) {
+                return json({ error: `No project found with key '${args.key}'.` });
+            }
+            const cfg = await store.readConfig();
+            return json({
+                key: cfg.key ?? null,
+                name: cfg.name,
+                brief: cfg.brief ?? "",
+                root: store.root ?? "",
+            });
+        }
+        catch (e) {
+            return fail(e.message);
+        }
+    });
+    return server;
 }
 async function ensureInit(store) {
     if (!(await store.isInitialized())) {
         throw new Error(`requ project not initialized at ${store.root}. Run \`init_project\` first (pass projectPath to target a specific directory).`);
     }
 }
+/** A `fail()` result if `id` is not an existing phase, else null. */
+async function phaseError(store, id) {
+    if (await store.getPhase(id))
+        return null;
+    const phases = await store.listPhases();
+    return fail(`Unknown phase ${id}.`, { knownPhases: phases.map((p) => p.id) });
+}
+/**
+ * Resolve the target phase for a newly created requirement/story:
+ *   undefined → default to the active phase (may be unassigned),
+ *   ""        → explicitly unassigned,
+ *   "P1"      → validated against existing phases.
+ * Returns `{ value }` (value may be undefined = unassigned) or `{ error }`.
+ */
+async function resolveAssignedPhase(store, input) {
+    let id;
+    if (input === undefined)
+        id = await store.resolvePhaseId();
+    else if (input === "")
+        id = undefined;
+    else
+        id = input;
+    if (!id)
+        return { value: undefined };
+    const error = await phaseError(store, id);
+    if (error)
+        return { error };
+    return { value: id };
+}
 async function loadConductorIndex(store) {
     const root = await store.conductorRoot();
     return { root, index: await indexConductor(root) };
@@ -118,6 +287,8 @@ tool("init_project", {
     description: "Create the `.requ/` directory at the resolved project root, record the Conductor project path and optional cucumber-json report path, and optionally create an initial phase. Before writing, it verifies the Conductor folder exists and is a real Conductor project (has features/ or a cucumber config), and reports its detected name. Refuses if the folder is missing/invalid unless force=true. Idempotent.",
     inputSchema: {
         name: z.string().optional(),
+        key: z.string().optional().describe("Short unique project identifier (e.g. 'AUTH'). Uppercase letters, digits, hyphens, underscores. 2–20 chars. Must be unique across projects."),
+        brief: z.string().optional().describe("Markdown-formatted description of what this project is about."),
         conductorPath: z.string().optional().describe("Path to the Conductor project root (has features/). Default '.'."),
         conductorReportPath: z
             .string()
@@ -129,8 +300,6 @@ tool("init_project", {
 }, async (args, store) => {
     const existing = (await store.isInitialized()) ? await store.readConfig() : null;
     const conductorPath = args.conductorPath ?? existing?.conductorPath ?? ".";
-    // Verify the Conductor folder is present and looks like a Conductor project
-    // BEFORE writing anything, and surface its detected name.
     const conductorAbs = store.resolvePath(conductorPath);
     const conductor = await inspectConductorProject(conductorAbs);
     if (!conductor.isConductorProject && !args.force) {
@@ -140,6 +309,8 @@ tool("init_project", {
     }
     const config = {
         name: args.name ?? existing?.name ?? path.basename(store.root),
+        key: args.key ?? existing?.key,
+        brief: args.brief ?? existing?.brief,
         conductorPath,
         conductorName: conductor.isConductorProject ? conductor.name : existing?.conductorName,
         conductorReportPath: args.conductorReportPath ?? existing?.conductorReportPath,
@@ -149,7 +320,7 @@ tool("init_project", {
     let phase;
     if (args.initialPhase) {
         phase = {
-            id: "PHASE-001",
+            id: "P1",
             name: args.initialPhase,
             order: 1,
             status: "active",
@@ -189,22 +360,118 @@ tool("check_conductor", {
     return json(await inspectConductorProject(candidate));
 });
 // ===========================================================================
+// Components
+// ===========================================================================
+tool("create_component", {
+    title: "Create component",
+    description: "Register a sub-system/component. The id should match broker domain_tags (e.g. 'C-auth' with domainTags=['auth','security']). Requirements reference component IDs in their components[] field. Coverage reports slice by component.",
+    inputSchema: {
+        id: z.string().min(1).describe("Unique identifier, e.g. 'C-auth'. Should match broker domain_tags."),
+        name: z.string().min(1).describe("Human-readable name, e.g. 'Authentication'."),
+        description: z.string().optional(),
+        domainTags: z.array(z.string()).optional().describe("Broker routing tags this component maps to, e.g. ['auth','security']."),
+    },
+}, async (args, store) => {
+    await ensureInit(store);
+    const existing = await store.listComponents();
+    if (existing.some((c) => c.id === args.id))
+        return fail(`Component ${args.id} already exists.`);
+    const comp = {
+        id: args.id,
+        name: args.name,
+        description: args.description ?? "",
+        domainTags: args.domainTags ?? [],
+        status: "active",
+        createdAt: now(),
+        updatedAt: now(),
+    };
+    await store.writeComponent(comp);
+    return json(comp);
+});
+tool("list_components", {
+    title: "List components",
+    description: "List all registered components, optionally filtered by status.",
+    inputSchema: { status: ComponentStatus.optional() },
+}, async (args, store) => {
+    await ensureInit(store);
+    let comps = await store.listComponents();
+    if (args.status)
+        comps = comps.filter((c) => c.status === args.status);
+    return json(comps);
+});
+tool("get_component", {
+    title: "Get component",
+    description: "Fetch one component and the requirements that reference it.",
+    inputSchema: { id: z.string().min(1) },
+}, async (args, store) => {
+    await ensureInit(store);
+    const comp = await store.getComponent(args.id);
+    if (!comp)
+        return fail(`Component ${args.id} not found.`);
+    const reqs = await store.listRequirements();
+    return json({ ...comp, linkedRequirements: reqs.filter((r) => r.components.includes(args.id)).map((r) => r.id) });
+});
+tool("update_component", {
+    title: "Update component",
+    description: "Update a component's name, description, domainTags, or status.",
+    inputSchema: {
+        id: z.string().min(1),
+        name: z.string().optional(),
+        description: z.string().optional(),
+        domainTags: z.array(z.string()).optional(),
+        status: ComponentStatus.optional(),
+    },
+}, async (args, store) => {
+    await ensureInit(store);
+    const comp = await store.getComponent(args.id);
+    if (!comp)
+        return fail(`Component ${args.id} not found.`);
+    if (args.name !== undefined)
+        comp.name = args.name;
+    if (args.description !== undefined)
+        comp.description = args.description;
+    if (args.domainTags !== undefined)
+        comp.domainTags = args.domainTags;
+    if (args.status !== undefined)
+        comp.status = args.status;
+    comp.updatedAt = now();
+    await store.writeComponent(comp);
+    return json(comp);
+});
+// ===========================================================================
 // Requirements
 // ===========================================================================
 tool("create_requirement", {
     title: "Create requirement",
-    description: "Register an imported requirement (the upstream 'what must be built').",
+    description: "Register an imported requirement (the upstream 'what must be built'). components[] must contain valid Component IDs if any components have been registered.",
     inputSchema: {
         title: z.string(),
         description: z.string().optional(),
         source: z.string().optional().describe("Provenance: doc, spec section, ticket id."),
         priority: Priority.optional(),
-        components: z.array(z.string()).optional().describe("Sub-systems/modules this requirement belongs to."),
+        components: z.array(z.string()).optional().describe("Component IDs this requirement belongs to (matches Component.id)."),
         tags: z.array(z.string()).optional(),
+        phase: z.string().optional().describe("Target phase this requirement is planned for (e.g. 'P1'). Defaults to the active phase; pass '' to leave unassigned."),
         id: z.string().regex(/^REQ-\d+$/).optional(),
     },
 }, async (args, store) => {
     await ensureInit(store);
+    // Resolve & validate target phase (default to active phase; "" = unassigned).
+    const phase = await resolveAssignedPhase(store, args.phase);
+    if (phase.error)
+        return phase.error;
+    // Validate component IDs if components exist
+    if (args.components?.length) {
+        const existingComps = await store.listComponents();
+        if (existingComps.length > 0) {
+            const unknown = args.components.filter((c) => !existingComps.some((e) => e.id === c));
+            if (unknown.length) {
+                return fail(`Unknown component(s): ${unknown.join(", ")}. Create them first with create_component.`, {
+                    knownComponents: existingComps.map((c) => c.id),
+                });
+            }
+        }
+    }
     const existing = await store.listRequirements();
     const id = args.id ?? Store.nextId("REQ", existing.map((r) => r.id));
     if (existing.some((r) => r.id === id))
@@ -218,6 +485,7 @@ tool("create_requirement", {
         components: args.components ?? [],
         tags: args.tags ?? [],
         status: "active",
+        ...(phase.value ? { phase: phase.value } : {}),
         createdAt: now(),
         updatedAt: now(),
     };
@@ -231,6 +499,7 @@ tool("list_requirements", {
         status: RequirementStatus.optional(),
         component: z.string().optional(),
         tag: z.string().optional(),
+        phase: z.string().optional().describe("Filter by assigned target phase (exact match)."),
     },
 }, async (args, store) => {
     await ensureInit(store);
@@ -241,6 +510,8 @@ tool("list_requirements", {
         reqs = reqs.filter((r) => r.components.includes(args.component));
     if (args.tag)
         reqs = reqs.filter((r) => r.tags.includes(args.tag));
+    if (args.phase)
+        reqs = reqs.filter((r) => r.phase === args.phase);
     return json(reqs);
 });
 tool("get_requirement", {
@@ -266,6 +537,7 @@ tool("update_requirement", {
         priority: Priority.optional(),
         components: z.array(z.string()).optional(),
         tags: z.array(z.string()).optional(),
+        phase: z.string().optional().describe("Target phase (e.g. 'P1'). Pass '' to clear the assignment."),
         status: RequirementStatus.optional(),
     },
 }, async (args, store) => {
@@ -273,6 +545,16 @@ tool("update_requirement", {
     const req = await store.getRequirement(args.id);
     if (!req)
         return fail(`Requirement ${args.id} not found.`);
+    if (args.phase !== undefined) {
+        if (args.phase === "")
+            req.phase = undefined;
+        else {
+            const error = await phaseError(store, args.phase);
+            if (error)
+                return error;
+            req.phase = args.phase;
+        }
+    }
     for (const k of ["title", "description", "source", "priority", "components", "tags", "status"]) {
         if (args[k] !== undefined)
             req[k] = args[k];
@@ -289,9 +571,10 @@ tool("create_user_story", {
     description: "Author a user story. MUST link ≥1 existing requirement (validated). Acceptance criteria are descriptive; tests are linked by tagging scenarios with @<this story id> in the feature files.",
     inputSchema: {
         title: z.string(),
-        requirements: z.array(z.string().regex(/^REQ-\d+$/)).min(1),
+        requirements: z.array(z.string().regex(/^REQ-\d+$/)).min(1).describe("IDs of existing requirements this story implements."),
         description: z.string().optional(),
         acceptanceCriteria: z.array(z.string()).optional().describe("Descriptive criterion texts."),
+        phase: z.string().optional().describe("Target phase this story is planned for (e.g. 'P1'). Defaults to the active phase; pass '' to leave unassigned."),
         id: z.string().regex(/^US-\d+$/).optional(),
     },
 }, async (args, store) => {
@@ -302,6 +585,9 @@ tool("create_user_story", {
             missing.push(reqId);
     if (missing.length)
         return fail(`Unknown requirement(s): ${missing.join(", ")}`);
+    const phase = await resolveAssignedPhase(store, args.phase);
+    if (phase.error)
+        return phase.error;
     const existing = await store.listStories();
     const id = args.id ?? Store.nextId("US", existing.map((s) => s.id));
     if (existing.some((s) => s.id === id))
@@ -317,6 +603,7 @@ tool("create_user_story", {
         requirements: args.requirements,
         acceptanceCriteria,
         status: "draft",
+        ...(phase.value ? { phase: phase.value } : {}),
         createdAt: now(),
         updatedAt: now(),
     };
@@ -326,7 +613,11 @@ tool("create_user_story", {
 tool("list_user_stories", {
     title: "List user stories",
     description: "List user stories, optionally filtered by status or linked requirement.",
-    inputSchema: { status: StoryStatus.optional(), requirement: z.string().regex(/^REQ-\d+$/).optional() },
+    inputSchema: {
+        status: StoryStatus.optional(),
+        requirement: z.string().regex(/^REQ-\d+$/).optional(),
+        phase: z.string().optional().describe("Filter by assigned target phase (exact match)."),
+    },
 }, async (args, store) => {
     await ensureInit(store);
     let stories = await store.listStories();
@@ -334,6 +625,8 @@ tool("list_user_stories", {
         stories = stories.filter((s) => s.status === args.status);
     if (args.requirement)
         stories = stories.filter((s) => s.requirements.includes(args.requirement));
+    if (args.phase)
+        stories = stories.filter((s) => s.phase === args.phase);
     return json(stories);
 });
 tool("get_user_story", {
@@ -352,7 +645,7 @@ tool("get_user_story", {
     const status = resolveStatuses(execByPhase, phases, phaseId, "cumulative");
     return json({
         ...story,
-        phase: phaseId,
+        statusPhase: phaseId,
         linkedScenarios: scs.map((sc) => ({
             feature: sc.feature,
             name: sc.name,
@@ -369,6 +662,7 @@ tool("update_user_story", {
         description: z.string().optional(),
         status: StoryStatus.optional(),
         requirements: z.array(z.string().regex(/^REQ-\d+$/)).min(1).optional(),
+        phase: z.string().optional().describe("Target phase (e.g. 'P1'). Pass '' to clear the assignment."),
     },
 }, async (args, store) => {
     await ensureInit(store);
@@ -384,6 +678,16 @@ tool("update_user_story", {
             return fail(`Unknown requirement(s): ${missing.join(", ")}`);
         story.requirements = args.requirements;
     }
+    if (args.phase !== undefined) {
+        if (args.phase === "")
+            story.phase = undefined;
+        else {
+            const error = await phaseError(store, args.phase);
+            if (error)
+                return error;
+            story.phase = args.phase;
+        }
+    }
     if (args.title !== undefined)
         story.title = args.title;
     if (args.description !== undefined)
@@ -418,20 +722,22 @@ tool("add_acceptance_criterion", {
 // ===========================================================================
 tool("create_phase", {
     title: "Create phase/release",
-    description: "Create a phase (sprint or release) to capture coverage at a point in time. Order auto-increments. Optionally make it the active phase.",
+    description: "Create a phase (sprint or release). The id must be unique and MUST match the broker phase_id (e.g. 'P1', 'Sprint-3') so both systems share the same identifier. Order auto-increments if not provided. Optionally make it the active phase.",
     inputSchema: {
-        name: z.string().describe("e.g. 'v1.0', 'Sprint 3'."),
+        id: z.string().min(1).describe("Phase identifier; use the same value as broker phase_id (e.g. 'P1', 'Sprint-3')."),
+        name: z.string().describe("e.g. 'Phase 1 MVP', 'Sprint 3'."),
         order: z.number().int().optional().describe("Sort key; defaults to max+1."),
         description: z.string().optional(),
-        activate: z.boolean().optional(),
+        activate: z.boolean().optional().describe("Make this the active phase."),
     },
 }, async (args, store) => {
     await ensureInit(store);
     const existing = await store.listPhases();
-    const id = Store.nextId("PHASE", existing.map((p) => p.id));
+    if (existing.some((p) => p.id === args.id))
+        return fail(`Phase ${args.id} already exists.`);
     const order = args.order ?? (existing.reduce((m, p) => Math.max(m, p.order), 0) + 1);
     const phase = {
-        id,
+        id: args.id,
         name: args.name,
         order,
         status: args.activate ? "active" : "planned",
@@ -442,7 +748,7 @@ tool("create_phase", {
     await store.writePhase(phase);
     if (args.activate || existing.length === 0) {
         const cfg = await store.readConfig();
-        await store.writeConfig({ ...cfg, activePhase: id });
+        await store.writeConfig({ ...cfg, activePhase: args.id });
     }
     return json(phase);
 });
@@ -455,7 +761,7 @@ tool("update_phase", {
     title: "Update phase",
     description: "Update a phase's name, order, status, or description.",
     inputSchema: {
-        id: z.string().regex(/^PHASE-\d+$/),
+        id: z.string().min(1),
         name: z.string().optional(),
         order: z.number().int().optional(),
         status: PhaseStatus.optional(),
@@ -477,7 +783,7 @@ tool("update_phase", {
 tool("set_active_phase", {
     title: "Set active phase",
     description: "Set which phase new executions are recorded against by default.",
-    inputSchema: { id: z.string().regex(/^PHASE-\d+$/) },
+    inputSchema: { id: z.string().min(1) },
 }, async (args, store) => {
     await ensureInit(store);
     if (!(await store.getPhase(args.id)))
@@ -487,7 +793,7 @@ tool("set_active_phase", {
     return json({ activePhase: args.id });
 });
 // ===========================================================================
-// Links (derived from @US-xxx scenario tags) — discovery & validation
+// Links (derived from @US-xxx scenario tags)
 // ===========================================================================
 tool("list_links", {
     title: "List tag-derived links",
@@ -516,12 +822,12 @@ tool("list_links", {
 // ===========================================================================
 tool("record_execution", {
     title: "Record a test execution",
-    description: "Record one scenario result against a phase (default: active). Validated against the Conductor project. Use for ad-hoc results or corrections; use import_execution_report for whole cucumber runs.",
+    description: "Record one scenario result against a phase (default: active). Validated against the Conductor project. Use for ad-hoc results or for teams running on a different machine than the requ-mcp server (no local file access needed). Use import_execution_report for whole cucumber runs on the same machine.",
     inputSchema: {
         feature: z.string().describe("Feature name (the `Feature:` line)."),
         name: z.string().describe("Scenario name (the `Scenario:` line)."),
         status: TestStatus,
-        phase: z.string().regex(/^PHASE-\d+$/).optional().describe("Defaults to the active phase."),
+        phase: z.string().optional().describe("Phase ID (e.g. 'P1'). Defaults to the active phase."),
         runId: z.string().optional(),
         note: z.string().optional(),
     },
@@ -550,10 +856,10 @@ tool("record_execution", {
 });
 tool("import_execution_report", {
     title: "Import Conductor cucumber-json report",
-    description: "Parse a Conductor cucumber-js JSON result file and record one execution per scenario into a phase (default: active). Reports how many scenarios are tagged to a story. Path defaults to config.conductorReportPath.",
+    description: "Parse a Conductor cucumber-js JSON result file and record one execution per scenario into a phase (default: active). Reports how many scenarios are tagged to a story. Path defaults to config.conductorReportPath. Requires the report file to be accessible on the machine running requ-mcp.",
     inputSchema: {
         filePath: z.string().optional().describe("Path to the cucumber-json file. Defaults to config.conductorReportPath."),
-        phase: z.string().regex(/^PHASE-\d+$/).optional(),
+        phase: z.string().optional().describe("Phase ID (e.g. 'P1'). Defaults to active phase."),
         runId: z.string().optional().describe("Run identifier stamped on every imported execution."),
     },
 }, async (args, store) => {
@@ -612,40 +918,50 @@ tool("import_execution_report", {
     });
 });
 // ===========================================================================
-// Reporting (phase- and mode-aware, story-level)
+// Reporting
 // ===========================================================================
 async function resolveForReport(store, phase, mode) {
-    const [reqs, stories, phases, execByPhase, { index }] = await Promise.all([
+    const [reqs, stories, phases, execByPhase, { index }, vcsRefs] = await Promise.all([
         store.listRequirements(),
         store.listStories(),
         store.listPhases(),
         store.readAllExecutions(),
         loadConductorIndex(store),
+        store.listVcsRefs(),
     ]);
     const phaseId = await store.resolvePhaseId(phase);
     const m = mode ?? "cumulative";
     const status = resolveStatuses(execByPhase, phases, phaseId, m);
     const byStory = scenariosByStory(index);
-    return { reqs, stories, phases, byStory, status, phaseId, mode: m };
+    return { reqs, stories, phases, byStory, status, phaseId, mode: m, vcsRefs };
 }
 tool("coverage_report", {
     title: "Coverage report",
-    description: "Story-level coverage for a phase: requirement → story → tagged scenarios, per-component breakdown, summary %. mode='cumulative' (latest result as of the phase) or 'strict' (only this phase's runs). Defaults to active phase, cumulative.",
+    description: "Story-level coverage for a phase: requirement → story → tagged scenarios, per-component breakdown (with component name and domainTags), summary %. mode='cumulative' (latest result as of the phase) or 'strict' (only this phase's runs). Defaults to active phase, cumulative.",
     inputSchema: {
-        phase: z.string().regex(/^PHASE-\d+$/).optional(),
+        phase: z.string().optional().describe("Phase ID (e.g. 'P1'). Defaults to active phase."),
         mode: CoverageMode.optional(),
         format: z.enum(["json", "markdown"]).optional(),
     },
 }, async (args, store) => {
     await ensureInit(store);
-    const { reqs, stories, byStory, status, phaseId, mode } = await resolveForReport(store, args.phase, args.mode);
-    const report = buildReport(reqs, stories, byStory, status, phaseId, mode);
+    const { reqs, stories, byStory, status, phaseId, mode, vcsRefs, phases } = await resolveForReport(store, args.phase, args.mode);
+    const report = buildReport(reqs, stories, byStory, status, phaseId, mode, vcsRefs, phases);
+    // Enrich byComponent with component name and domainTags
+    const components = await store.listComponents();
+    const compMap = new Map(components.map((c) => [c.id, c]));
+    const enrichedByComponent = report.byComponent.map((bc) => ({
+        ...bc,
+        componentName: compMap.get(bc.component)?.name ?? bc.component,
+        domainTags: compMap.get(bc.component)?.domainTags ?? [],
+    }));
+    const enrichedReport = { ...report, byComponent: enrichedByComponent };
     if (args.format === "markdown") {
         const phases = await store.listPhases();
         const name = phases.find((p) => p.id === phaseId)?.name ?? "(none)";
-        return text(renderMarkdown(report, name));
+        return text(renderMarkdown(enrichedReport, name));
     }
-    return json(report);
+    return json(enrichedReport);
 });
 tool("coverage_trend", {
     title: "Coverage evolution by phase",
@@ -666,11 +982,221 @@ tool("coverage_trend", {
 tool("find_gaps", {
     title: "Find coverage gaps",
     description: "For a phase: active requirements with no story, stories with no tagged scenario, and stories not covered (with failing/not-run scenarios). Defaults to active phase, cumulative.",
-    inputSchema: { phase: z.string().regex(/^PHASE-\d+$/).optional(), mode: CoverageMode.optional() },
+    inputSchema: {
+        phase: z.string().optional().describe("Phase ID (e.g. 'P1'). Defaults to active phase."),
+        mode: CoverageMode.optional(),
+    },
 }, async (args, store) => {
     await ensureInit(store);
-    const { reqs, stories, byStory, status, phaseId, mode } = await resolveForReport(store, args.phase, args.mode);
-    return json(findGaps(reqs, stories, byStory, status, phaseId, mode));
+    const { reqs, stories, byStory, status, phaseId, mode, phases } = await resolveForReport(store, args.phase, args.mode);
+    return json(findGaps(reqs, stories, byStory, status, phaseId, mode, phases));
+});
+// ===========================================================================
+// VCS references (GitLab branches / merge requests)
+//
+// requ-mcp NEVER calls the VCS provider and holds NO token. These tools only
+// record references that nodes report, for traceability.
+// ===========================================================================
+tool("set_repo", {
+    title: "Set VCS repository reference",
+    description: "Record the project's VCS repository reference (repoUrl, defaultBranch, vcsType) in config. requ-mcp never calls the VCS provider — it only stores these references for traceability.",
+    inputSchema: {
+        repoUrl: z.string().describe("Repository URL, e.g. 'https://gitlab.com/group/project'."),
+        defaultBranch: z.string().optional().describe("Default branch name. Defaults to 'main'."),
+        vcsType: z.enum(["gitlab"]).optional().describe("VCS provider type."),
+    },
+}, async (args, store) => {
+    await ensureInit(store);
+    const cfg = await store.readConfig();
+    const next = {
+        ...cfg,
+        repoUrl: args.repoUrl,
+        defaultBranch: args.defaultBranch ?? cfg.defaultBranch ?? "main",
+        vcsType: args.vcsType ?? cfg.vcsType,
+    };
+    await store.writeConfig(next);
+    return json({ repoUrl: next.repoUrl, defaultBranch: next.defaultBranch, vcsType: next.vcsType ?? null });
+});
+tool("get_repo", {
+    title: "Get VCS repository reference",
+    description: "Return the recorded VCS repository config: repoUrl, defaultBranch, vcsType.",
+    inputSchema: {},
+}, async (_args, store) => {
+    await ensureInit(store);
+    const cfg = await store.readConfig();
+    return json({ repoUrl: cfg.repoUrl ?? null, defaultBranch: cfg.defaultBranch ?? "main", vcsType: cfg.vcsType ?? null });
+});
+/** Validate story/requirement ids referenced by a VcsRef; fail on unknown ids. */
+async function validateVcsLinks(store, storyIds, requirementIds) {
+    const missingStories = [];
+    for (const id of storyIds)
+        if (!(await store.getStory(id)))
+            missingStories.push(id);
+    if (missingStories.length)
+        return fail(`Unknown story id(s): ${missingStories.join(", ")}`);
+    const missingReqs = [];
+    for (const id of requirementIds)
+        if (!(await store.getRequirement(id)))
+            missingReqs.push(id);
+    if (missingReqs.length)
+        return fail(`Unknown requirement id(s): ${missingReqs.join(", ")}`);
+    return null;
+}
+tool("link_branch", {
+    title: "Link a VCS branch reference",
+    description: "Record a reference to a VCS branch (kind='branch', state='opened'), auto-id 'BR-n'. Referenced storyIds/requirementIds must exist (fails if unknown). requ-mcp does not create the branch — it only records the reference.",
+    inputSchema: {
+        branch: z.string().min(1).describe("Branch name."),
+        component: z.string().optional().describe("Component id this branch relates to."),
+        storyIds: z.array(z.string().regex(/^US-\d+$/)).optional().describe("User story ids (US-…) this branch implements."),
+        requirementIds: z.array(z.string().regex(/^REQ-\d+$/)).optional().describe("Requirement ids (REQ-…) this branch relates to."),
+        url: z.string().optional().describe("URL of the branch (optional)."),
+    },
+}, async (args, store) => {
+    await ensureInit(store);
+    const storyIds = args.storyIds ?? [];
+    const requirementIds = args.requirementIds ?? [];
+    const bad = await validateVcsLinks(store, storyIds, requirementIds);
+    if (bad)
+        return bad;
+    const existing = await store.listVcsRefs();
+    const dup = existing.find((r) => r.kind === "branch" && r.ref === args.branch);
+    const id = dup?.id ?? Store.nextId("BR", existing.map((r) => r.id));
+    const ts = now();
+    const ref = {
+        id,
+        kind: "branch",
+        ref: args.branch,
+        url: args.url ?? "",
+        branch: args.branch,
+        component: args.component,
+        storyIds,
+        requirementIds,
+        state: "opened",
+        createdAt: dup?.createdAt ?? ts,
+        updatedAt: ts,
+    };
+    await store.writeVcsRef(ref);
+    return json(ref);
+});
+tool("link_merge_request", {
+    title: "Link a VCS merge request reference",
+    description: "Record (or upsert) a reference to a merge request (kind='mr'), keyed by `ref` (the MR iid), id 'MR-<ref>'. Referenced storyIds/requirementIds must exist (fails if unknown). requ-mcp does not call GitLab — it only records the reference.",
+    inputSchema: {
+        ref: z.string().regex(/^\d+$/).describe("MR iid (numeric string)."),
+        url: z.string().min(1).describe("MR URL."),
+        branch: z.string().min(1).describe("Source branch of the MR."),
+        storyIds: z.array(z.string().regex(/^US-\d+$/)).optional().describe("User story ids (US-…) this MR implements."),
+        requirementIds: z.array(z.string().regex(/^REQ-\d+$/)).optional().describe("Requirement ids (REQ-…) this MR relates to."),
+        targetBranch: z.string().optional().describe("Target branch of the MR."),
+        state: VcsRefState.optional().describe("MR state. Defaults to 'opened'."),
+        component: z.string().optional().describe("Component id this MR relates to."),
+    },
+}, async (args, store) => {
+    await ensureInit(store);
+    const storyIds = args.storyIds ?? [];
+    const requirementIds = args.requirementIds ?? [];
+    const bad = await validateVcsLinks(store, storyIds, requirementIds);
+    if (bad)
+        return bad;
+    const id = `MR-${args.ref}`;
+    const existing = await store.getVcsRef(id);
+    const ts = now();
+    const ref = {
+        id,
+        kind: "mr",
+        ref: args.ref,
+        url: args.url,
+        branch: args.branch,
+        targetBranch: args.targetBranch,
+        component: args.component,
+        storyIds,
+        requirementIds,
+        state: args.state ?? "opened",
+        mergeCommit: existing?.mergeCommit,
+        createdAt: existing?.createdAt ?? ts,
+        updatedAt: ts,
+    };
+    await store.writeVcsRef(ref);
+    return json(ref);
+});
+tool("update_merge_request", {
+    title: "Update a merge request reference state",
+    description: "Update the state (and optional mergeCommit) of a recorded MR reference, found by its `ref` (MR iid). Bumps updatedAt. Fails if no MR reference with that ref exists.",
+    inputSchema: {
+        ref: z.string().regex(/^\d+$/).describe("MR iid (numeric string)."),
+        state: VcsRefState.describe("New MR state."),
+        mergeCommit: z.string().optional().describe("Merge commit SHA (when merged)."),
+    },
+}, async (args, store) => {
+    await ensureInit(store);
+    const refs = await store.listVcsRefs();
+    const target = refs.find((r) => r.kind === "mr" && r.ref === args.ref);
+    if (!target)
+        return fail(`No merge request reference found for ref '${args.ref}'.`);
+    const patch = { state: args.state, updatedAt: now() };
+    if (args.mergeCommit !== undefined)
+        patch.mergeCommit = args.mergeCommit;
+    const updated = await store.updateVcsRef(target.id, patch);
+    if (!updated)
+        return fail(`Merge request reference ${target.id} not found.`);
+    return json(updated);
+});
+tool("list_vcs_refs", {
+    title: "List VCS references",
+    description: "List recorded VCS references (branches and MRs), optionally filtered by kind, component, state, or linked storyId.",
+    inputSchema: {
+        kind: VcsRefKind.optional(),
+        component: z.string().optional(),
+        state: z.string().optional(),
+        storyId: z.string().optional(),
+    },
+}, async (args, store) => {
+    await ensureInit(store);
+    let refs = await store.listVcsRefs();
+    if (args.kind)
+        refs = refs.filter((r) => r.kind === args.kind);
+    if (args.component)
+        refs = refs.filter((r) => r.component === args.component);
+    if (args.state)
+        refs = refs.filter((r) => r.state === args.state);
+    if (args.storyId)
+        refs = refs.filter((r) => r.storyIds.includes(args.storyId));
+    return json(refs);
+});
+// ===========================================================================
+// Export / Import
+// ===========================================================================
+tool("export_project", {
+    title: "Export project",
+    description: "Export all project data (requirements, stories, phases, executions, components, VCS refs) as a JSON string. Pass the result to import_project on another instance to migrate or copy data.",
+    inputSchema: {},
+}, async (_args, store) => {
+    await ensureInit(store);
+    const payload = await buildExport(store);
+    return json(JSON.stringify(payload, null, 2));
+});
+tool("import_project", {
+    title: "Import project",
+    description: "Import project data from a JSON string produced by export_project. Existing records (same ID) are skipped and reported. Returns a summary of what was imported and what was skipped.",
+    inputSchema: {
+        data: z.string().describe("JSON string produced by export_project"),
+    },
+}, async (args, store) => {
+    await ensureInit(store);
+    let payload;
+    try {
+        payload = JSON.parse(args.data);
+    }
+    catch {
+        return fail("data is not valid JSON");
+    }
+    const parsed = ExportPayload.safeParse(payload);
+    if (!parsed.success) {
+        return fail(`Invalid export format: ${parsed.error.message}`);
+    }
+    const report = await applyImport(store, parsed.data);
+    return json(report);
 });
 function renderMarkdown(report, phaseName) {
     const s = report.summary;
@@ -684,8 +1210,11 @@ function renderMarkdown(report, phaseName) {
     lines.push(`- Scenarios passing: **${s.scenariosPassing}/${s.scenariosLinked}**`, "");
     if (report.byComponent.length) {
         lines.push("## By component", "");
-        for (const c of report.byComponent)
-            lines.push(`- **${c.component}** — verified ${c.verified}/${c.requirements} (${c.verifiedPct}%)`);
+        for (const c of report.byComponent) {
+            const label = c.componentName && c.componentName !== c.component ? `${c.component} (${c.componentName})` : c.component;
+            const tags = c.domainTags?.length ? ` [${c.domainTags.join(", ")}]` : "";
+            lines.push(`- **${label}**${tags} — verified ${c.verified}/${c.requirements} (${c.verifiedPct}%)`);
+        }
         lines.push("");
     }
     lines.push("## Requirements", "");
@@ -697,7 +1226,12 @@ function renderMarkdown(report, phaseName) {
     lines.push("", "## Stories", "");
     for (const st of report.stories) {
         const mark = st.covered ? "✅" : !st.tested ? "❌" : "🟡";
-        lines.push(`- ${mark} **${st.id}** ${st.title} — ${st.passing}/${st.scenarios.length} scenarios pass (${st.status})`);
+        const mr = st.mergedMr
+            ? st.mergedMr.state === "merged"
+                ? ` — verified + merged (MR ${st.mergedMr.ref})`
+                : ` — MR ${st.mergedMr.ref} (${st.mergedMr.state})`
+            : "";
+        lines.push(`- ${mark} **${st.id}** ${st.title} — ${st.passing}/${st.scenarios.length} scenarios pass (${st.status})${mr}`);
         for (const sc of st.scenarios) {
             const cm = sc.status === "pass" ? "✓" : sc.status === "fail" ? "✗" : "·";
             lines.push(`  - ${cm} ${sc.feature} :: ${sc.name} — ${sc.status}`);
@@ -708,12 +1242,83 @@ function renderMarkdown(report, phaseName) {
     return lines.join("\n");
 }
 // ===========================================================================
+// HTTP server (REQU_TRANSPORT=http)
+// ===========================================================================
+function readBody(req) {
+    return new Promise((resolve, reject) => {
+        const chunks = [];
+        req.on("data", (c) => chunks.push(c));
+        req.on("end", () => resolve(Buffer.concat(chunks).toString()));
+        req.on("error", reject);
+    });
+}
+async function startHttpServer() {
+    const { createServer: createHttpServer } = await import("node:http");
+    const { randomUUID } = await import("node:crypto");
+    const { StreamableHTTPServerTransport } = await import("@modelcontextprotocol/sdk/server/streamableHttp.js");
+    const { handleWebRequest } = await import("./web-api.js");
+    const port = parseInt(process.env.REQU_PORT ?? "8788", 10);
+    const host = process.env.REQU_HOST ?? "0.0.0.0";
+    const sessions = new Map();
+    loadProjectsFromEnv();
+    const httpServer = createHttpServer(async (req, res) => {
+        // Web dashboard routes (REST API + static files)
+        if (await handleWebRequest(req, res, _stores))
+            return;
+        if (!req.url?.includes("/mcp")) {
+            res.writeHead(404).end("Not Found");
+            return;
+        }
+        try {
+            const bodyStr = req.method === "POST" ? await readBody(req) : "{}";
+            const body = bodyStr.trim() ? JSON.parse(bodyStr) : undefined;
+            const sessionId = req.headers["mcp-session-id"];
+            let transport;
+            if (sessionId && sessions.has(sessionId)) {
+                transport = sessions.get(sessionId);
+            }
+            else {
+                transport = new StreamableHTTPServerTransport({
+                    sessionIdGenerator: () => randomUUID(),
+                    onsessioninitialized: (id) => { sessions.set(id, transport); },
+                });
+                transport.onclose = () => {
+                    const sid = transport.sessionId;
+                    if (sid)
+                        sessions.delete(sid);
+                };
+                // Fresh McpServer per session — an McpServer cannot be connected to two transports.
+                const sessionServer = createServer();
+                await sessionServer.connect(transport);
+            }
+            await transport.handleRequest(req, res, body);
+        }
+        catch (err) {
+            if (!res.headersSent)
+                res.writeHead(500).end(String(err));
+        }
+    });
+    httpServer.listen(port, host, () => {
+        const loadedCount = _stores.size;
+        const dbInfo = loadedCount > 0
+            ? `projects=${loadedCount}`
+            : `db=${process.env.REQU_ROOT ?? process.cwd()}/.requ/requ.db`;
+        console.error(`requ-mcp HTTP → http://${host}:${port}/mcp  ${dbInfo}`);
+    });
+}
+// ===========================================================================
 // Boot
 // ===========================================================================
 async function main() {
-    const transport = new StdioServerTransport();
-    await server.connect(transport);
-    console.error("requ-mcp running (per-call project resolution).");
+    if (process.env.REQU_TRANSPORT === "http") {
+        await startHttpServer();
+    }
+    else {
+        const server = createServer();
+        const transport = new StdioServerTransport();
+        await server.connect(transport);
+        console.error("requ-mcp running (stdio, YAML storage, per-call project resolution).");
+    }
 }
 main().catch((err) => {
     console.error("requ-mcp fatal:", err);