Add patch submission fallback

Author: 10099042

README.md

@@ -24,6 +24,7 @@ Every bug fix ships with a regression test, verified in a sandbox before payout.
 - `get_bounty_detail({ task_id_or_slug })`
 - `request_repo_access({ task_id, agent_id? })` — short-lived read-only clone URL for private code tasks.
 - `submit_pr({ task_id, agent_id, result_text, external_link, cover_note? })`
+- `submit_patch({ task_id, agent_id, result_text, patch_text?, patch_url?, cover_note? })` - fallback for private code tasks where the agent can clone the repo but cannot create an upstream PR. Provide exactly one of `patch_text` or `patch_url`.
 - `check_submission_status({ submission_id })`
 
 ## Install

package.json

@@ -31,7 +31,8 @@
     "README.md"
   ],
   "scripts": {
-    "build": "tsc && chmod +x build/index.js",
+    "build": "tsc && node scripts/make-build-executable.mjs",
+    "test": "npm run build && node --test tests/*.test.mjs",
     "start": "node build/index.js",
     "prepare": "npm run build"
   },

scripts/make-build-executable.mjs

@@ -0,0 +1,3 @@
+import { chmodSync } from "node:fs";
+
+chmodSync("build/index.js", 0o755);

server.json

@@ -19,7 +19,7 @@
       "environmentVariables": [
         {
           "name": "TASKBOUNTY_API_KEY",
-          "description": "Your tb_live_* key from https://www.task-bounty.com/dashboard/api-keys. Required for write tools (submit_pr, create_bounty_draft, fund_bounty, list_my_bounties, get_bounty_submissions, award_bounty, cancel_bounty, request_repo_access, check_submission_status).",
+          "description": "Your tb_live_* key from https://www.task-bounty.com/dashboard/api-keys. Required for write tools (submit_pr, submit_patch, create_bounty_draft, fund_bounty, list_my_bounties, get_bounty_submissions, award_bounty, cancel_bounty, request_repo_access, check_submission_status).",
           "isRequired": false,
           "isSecret": true
         },

src/index.ts

@@ -3,6 +3,8 @@
  * TaskBounty MCP server — wraps https://www.task-bounty.com/api/v1/*
  * Auth: set TASKBOUNTY_API_KEY (your tb_live_* key) in env.
  */
+import path from "node:path";
+import { fileURLToPath } from "node:url";
 import { Server } from "@modelcontextprotocol/sdk/server/index.js";
 import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
 import {
@@ -20,6 +22,46 @@ type ToolResult = {
   isError?: boolean;
 };
 
+type PatchSubmissionBuildResult =
+  | { ok: true; body: Record<string, unknown> }
+  | { ok: false; message: string };
+
+export function buildPatchSubmissionBody(
+  args: Record<string, unknown>,
+): PatchSubmissionBuildResult {
+  const taskId = String(args.task_id ?? "");
+  const agentId = String(args.agent_id ?? "");
+  const resultText = String(args.result_text ?? "");
+  const patchText = typeof args.patch_text === "string" ? args.patch_text.trim() : "";
+  const patchUrl = typeof args.patch_url === "string" ? args.patch_url.trim() : "";
+
+  if (!taskId) return { ok: false, message: "task_id is required" };
+  if (!agentId) return { ok: false, message: "agent_id is required" };
+  if (!resultText) return { ok: false, message: "result_text is required" };
+  if (!patchText && !patchUrl) {
+    return { ok: false, message: "patch_text or patch_url is required" };
+  }
+  if (patchText && patchUrl) {
+    return { ok: false, message: "Provide only one of patch_text or patch_url" };
+  }
+
+  const body: Record<string, unknown> = {
+    task_id: taskId,
+    agent_id: agentId,
+    result_text: resultText,
+    submission_type: "patch",
+  };
+
+  if (typeof args.cover_note === "string") body.cover_note = args.cover_note;
+  if (patchText) body.patch_text = patchText;
+  if (patchUrl) {
+    body.patch_url = patchUrl;
+    body.external_link = patchUrl;
+  }
+
+  return { ok: true, body };
+}
+
 async function tbFetch(
   path: string,
   init: RequestInit & { requireAuth?: boolean } = {},
@@ -117,7 +159,7 @@ const TOOLS = [
   {
     name: "request_repo_access",
     description:
-      "For private code-task repos: mint a short-lived (~1h) read-only git clone URL. Read-only — push to your own fork to PR. Requires TASKBOUNTY_API_KEY.",
+      "For private code-task repos: mint a short-lived (~1h) read-only git clone URL. If the private upstream cannot accept a PR from the agent, submit a unified diff with submit_patch. Requires TASKBOUNTY_API_KEY.",
     inputSchema: {
       type: "object",
       properties: {
@@ -155,6 +197,35 @@ const TOOLS = [
       required: ["task_id", "agent_id", "result_text", "external_link"],
     },
   },
+  {
+    name: "submit_patch",
+    description:
+      "Submit a patch artifact when a private upstream repo cannot be forked or opened as a PR by the agent. Provide either patch_text (unified diff) or patch_url. Requires TASKBOUNTY_API_KEY.",
+    inputSchema: {
+      type: "object",
+      properties: {
+        task_id: { type: "string" },
+        agent_id: { type: "string" },
+        result_text: {
+          type: "string",
+          description: "Summary of the work done and tests run.",
+        },
+        patch_text: {
+          type: "string",
+          description: "Unified diff created with git diff or git format-patch.",
+        },
+        patch_url: {
+          type: "string",
+          description: "URL to a patch artifact, for example a GitHub gist or raw patch file.",
+        },
+        cover_note: {
+          type: "string",
+          description: "Optional note to the task poster.",
+        },
+      },
+      required: ["task_id", "agent_id", "result_text"],
+    },
+  },
   {
     name: "check_submission_status",
     description:
@@ -333,6 +404,21 @@ server.setRequestHandler(CallToolRequestSchema, async (req) => {
       });
     }
 
+    case "submit_patch": {
+      const result = buildPatchSubmissionBody(a);
+      if (!result.ok) {
+        return {
+          content: [{ type: "text", text: result.message }],
+          isError: true,
+        };
+      }
+      return await tbFetch(`/submissions`, {
+        method: "POST",
+        body: JSON.stringify(result.body),
+        requireAuth: true,
+      });
+    }
+
     case "check_submission_status": {
       const id = String(a.submission_id ?? "");
       if (!id) {
@@ -467,7 +553,13 @@ async function main() {
   console.error("[taskbounty-mcp] ready on stdio");
 }
 
-main().catch((err) => {
-  console.error("[taskbounty-mcp] fatal", err);
-  process.exit(1);
-});
+const isCliEntry =
+  process.argv[1] !== undefined &&
+  path.resolve(process.argv[1]) === fileURLToPath(import.meta.url);
+
+if (isCliEntry) {
+  main().catch((err) => {
+    console.error("[taskbounty-mcp] fatal", err);
+    process.exit(1);
+  });
+}

tests/patch-submission.test.mjs

@@ -0,0 +1,73 @@
+import assert from "node:assert/strict";
+import { describe, it } from "node:test";
+
+import { buildPatchSubmissionBody } from "../build/index.js";
+
+describe("buildPatchSubmissionBody", () => {
+  it("builds an inline patch submission without requiring a PR URL", () => {
+    const result = buildPatchSubmissionBody({
+      task_id: "task-1",
+      agent_id: "agent-1",
+      result_text: "Fixed the DST crash and added a regression test.",
+      patch_text: "diff --git a/src/lib/utils.ts b/src/lib/utils.ts\n",
+    });
+
+    assert.equal(result.ok, true);
+    assert.deepEqual(result.body, {
+      task_id: "task-1",
+      agent_id: "agent-1",
+      result_text: "Fixed the DST crash and added a regression test.",
+      submission_type: "patch",
+      patch_text: "diff --git a/src/lib/utils.ts b/src/lib/utils.ts",
+    });
+  });
+
+  it("uses a patch artifact URL as the external link for compatibility", () => {
+    const result = buildPatchSubmissionBody({
+      task_id: "task-1",
+      agent_id: "agent-1",
+      result_text: "Fixed the issue.",
+      patch_url: "https://gist.github.com/example/patch.diff",
+      cover_note: "Private repo PR creation was not available.",
+    });
+
+    assert.equal(result.ok, true);
+    assert.deepEqual(result.body, {
+      task_id: "task-1",
+      agent_id: "agent-1",
+      result_text: "Fixed the issue.",
+      submission_type: "patch",
+      cover_note: "Private repo PR creation was not available.",
+      patch_url: "https://gist.github.com/example/patch.diff",
+      external_link: "https://gist.github.com/example/patch.diff",
+    });
+  });
+
+  it("rejects submissions without a patch artifact", () => {
+    const result = buildPatchSubmissionBody({
+      task_id: "task-1",
+      agent_id: "agent-1",
+      result_text: "Fixed the issue.",
+    });
+
+    assert.deepEqual(result, {
+      ok: false,
+      message: "patch_text or patch_url is required",
+    });
+  });
+
+  it("rejects ambiguous patch artifacts", () => {
+    const result = buildPatchSubmissionBody({
+      task_id: "task-1",
+      agent_id: "agent-1",
+      result_text: "Fixed the issue.",
+      patch_text: "diff --git a/file b/file\n",
+      patch_url: "https://gist.github.com/example/patch.diff",
+    });
+
+    assert.deepEqual(result, {
+      ok: false,
+      message: "Provide only one of patch_text or patch_url",
+    });
+  });
+});