feat(bug-filing-mcp): new cartridge wrapping the real feedback-o-tron engine

[hyperpolymath]

What

A new first-class JS-worker cartridge bug-filing-mcp that packages the real feedback-o-tron bug-filing engine for the autonomous bug-reporting pipeline.

• Single tool submit_feedback → forwards to the engine's HTTP intake POST http://127.0.0.1:7722/api/v1/submit_feedback (companion PR: feedback-o-tron#46).
• Reachable via the gateway: POST /cartridge/bug-filing-mcp/invoke {tool:"submit_feedback", arguments:{title,body,repo}}.
• Manifest validates against schemas/cartridge-v1.json; deno check clean; no FFI/.so claims — pure mod.js dispatch.
• Returns a clear 503 (with a start-the-engine hint) if the backend isn't running.

Why — D0 = new wrapping cartridge

Owner decision D0: the unrelated feedback-mcp sentiment counter is left untouched; the real engine gets its own distinctly-named cartridge. This ends the long-standing name/identity collision by making the real engine first-class, and completes the boj-side of contract C4 dispatch (feedback-o-tron/docs/AUTONOMOUS-BUG-PIPELINE.adoc).

Wiring

boj gateway :7700
  POST /cartridge/bug-filing-mcp/invoke {tool:submit_feedback, arguments:{title,body,repo}}
    -> bug-filing-mcp/mod.js (Deno)
       -> POST 127.0.0.1:7722/api/v1/submit_feedback
          -> feedback-o-tron Submitter -> gh / glab / Bugzilla REST / ...

Notes

• site/catalog.json is an externally-generated artifact (no in-repo generator); this cartridge will appear on the next catalog regeneration.

Closes hyperpolymath/boj-server#279 · Refs hyperpolymath/boj-server#274

🤖 Generated with Claude Code

[github-actions]

🔍 Hypatia Security Scan

Findings: 282 issues detected

Severity	Count
🔴 Critical	44
🟠 High	131
🟡 Medium	107

⚠️ Action Required: Critical security issues found!

View findings

[
  {
    "reason": "TypeScript file detected -- banned language",
    "type": "banned_language_file",
    "file": "/home/runner/work/boj-server-cartridges/boj-server-cartridges/cartridges/cross-cutting/orchestration/stack-orchestrator-mcp/adapter/planner.ts",
    "action": "flag",
    "rule_module": "cicd_rules",
    "severity": "critical"
  },
  {
    "reason": "TypeScript file detected -- banned language",
    "type": "banned_language_file",
    "file": "/home/runner/work/boj-server-cartridges/boj-server-cartridges/cartridges/cross-cutting/orchestration/stack-orchestrator-mcp/adapter/types.ts",
    "action": "flag",
    "rule_module": "cicd_rules",
    "severity": "critical"
  },
  {
    "reason": "TypeScript file detected -- banned language",
    "type": "banned_language_file",
    "file": "/home/runner/work/boj-server-cartridges/boj-server-cartridges/cartridges/cross-cutting/orchestration/stack-orchestrator-mcp/adapter/rollback.ts",
    "action": "flag",
    "rule_module": "cicd_rules",
    "severity": "critical"
  },
  {
    "reason": "TypeScript file detected -- banned language",
    "type": "banned_language_file",
    "file": "/home/runner/work/boj-server-cartridges/boj-server-cartridges/cartridges/cross-cutting/orchestration/stack-orchestrator-mcp/adapter/rollback_test.ts",
    "action": "flag",
    "rule_module": "cicd_rules",
    "severity": "critical"
  },
  {
    "reason": "TypeScript file detected -- banned language",
    "type": "banned_language_file",
    "file": "/home/runner/work/boj-server-cartridges/boj-server-cartridges/cartridges/cross-cutting/orchestration/stack-orchestrator-mcp/adapter/planner_test.ts",
    "action": "flag",
    "rule_module": "cicd_rules",
    "severity": "critical"
  },
  {
    "reason": "TypeScript file detected -- banned language",
    "type": "banned_language_file",
    "file": "/home/runner/work/boj-server-cartridges/boj-server-cartridges/cartridges/cross-cutting/orchestration/stack-orchestrator-mcp/adapter/lsp_client.ts",
    "action": "flag",
    "rule_module": "cicd_rules",
    "severity": "critical"
  },
  {
    "reason": "TypeScript file detected -- banned language",
    "type": "banned_language_file",
    "file": "/home/runner/work/boj-server-cartridges/boj-server-cartridges/cartridges/cross-cutting/orchestration/stack-orchestrator-mcp/adapter/lsp_client_test.ts",
    "action": "flag",
    "rule_module": "cicd_rules",
    "severity": "critical"
  },
  {
    "reason": "TypeScript file detected -- banned language",
    "type": "banned_language_file",
    "file": "/home/runner/work/boj-server-cartridges/boj-server-cartridges/cartridges/cross-cutting/orchestration/stack-orchestrator-mcp/adapter/parser.ts",
    "action": "flag",
    "rule_module": "cicd_rules",
    "severity": "critical"
  },
  {
    "reason": "TypeScript file detected -- banned language",
    "type": "banned_language_file",
    "file": "/home/runner/work/boj-server-cartridges/boj-server-cartridges/cartridges/cross-cutting/orchestration/stack-orchestrator-mcp/adapter/integration_test.ts",
    "action": "flag",
    "rule_module": "cicd_rules",
    "severity": "critical"
  },
  {
    "reason": "TypeScript file detected -- banned language",
    "type": "banned_language_file",
    "file": "/home/runner/work/boj-server-cartridges/boj-server-cartridges/cartridges/cross-cutting/orchestration/stack-orchestrator-mcp/adapter/parser_test.ts",
    "action": "flag",
    "rule_module": "cicd_rules",
    "severity": "critical"
  }
]

Powered by Hypatia Neurosymbolic CI/CD Intelligence