@miraland-labs/conduit-bridge 0.11.1 → 0.11.3

package/README.md

@@ -2,7 +2,7 @@
 
 Local Bridge CLI for [Conduit](https://github.com/miralandlabs/conduit). Connects a computer to one organization, claims work, and drives a local agent.
 
-**Package version:** `0.11.0` — **ExecutionClass inversion:** the control plane stamps `execution_class` on the assignment; Bridge launches from that stamp (fail closed if missing), asserts the full class floor after ceilings, and projects permissions locally (“Bridge wins” on tools). Ordinary grants are derived server-side as classMax ∩ project ceiling; landing is package `lands`, not a class axiom. Workspace briefs discover verification commands for Node, Make, Cargo, Go, pytest, and Gradle. Control-plane `instruction` is **additive** evidence/class prose; Bridge always appends local RULES (shell allow-list, verbatim paste, criterion mapping, hard-denied). Prompt is data; permissions stay local — residual risk if the control plane is compromised (sharpest for `observe_network`). Artifact digests still normalize bare 64-hex to `sha256:<hex>`. Experimental Pi lane remains; `observe_network` is refused on Pi. Heartbeat protocol 2, worktrees, ops helpers, multi-driver lanes, and slots **1–4** unchanged. Protocol 1 heartbeats remain compatible for presence but cannot receive work.
+**Package version:** `0.11.3` — a lost connection to the code host during delivery finalize is now reported as **retryable**: that block marked every throw non-retryable, which is right for a malformed delivery report and wrong for a dropped connection, and it reported a GitHub HTTP/2 flake on `git push` as the agent failing its execution contract. Since `0.11.0`: `0.11.1` made a missing stamped class retryable-then-fail-closed, `0.11.2` removed the unread `external_network` spec field and made a driver refusing a class it cannot enforce terminal. **ExecutionClass inversion:** the control plane stamps `execution_class` on the assignment; Bridge launches from that stamp (fail closed if missing), asserts the full class floor after ceilings, and projects permissions locally (“Bridge wins” on tools). Ordinary grants are derived server-side as classMax ∩ project ceiling; landing is package `lands`, not a class axiom. Workspace briefs discover verification commands for Node, Make, Cargo, Go, pytest, and Gradle. Control-plane `instruction` is **additive** evidence/class prose; Bridge always appends local RULES (shell allow-list, verbatim paste, criterion mapping, hard-denied). Prompt is data; permissions stay local — residual risk if the control plane is compromised (sharpest for `observe_network`). Artifact digests still normalize bare 64-hex to `sha256:<hex>`. Experimental Pi lane remains; `observe_network` is refused on Pi. Heartbeat protocol 2, worktrees, ops helpers, multi-driver lanes, and slots **1–4** unchanged. Protocol 1 heartbeats remain compatible for presence but cannot receive work.
 
 ## Prerequisites
 

package/dist/execution.js

@@ -22,9 +22,21 @@ function changesRequestedFeedback(summary) {
         return null;
     }
 }
+/**
+ * A network fault reaching the code host. Mirrors FORGE_TRANSPORT_PATTERN in the control plane's
+ * failures.ts — Bridge cannot import from there, so test/failure-classification.test.ts pins the two
+ * together rather than trusting them to stay in step.
+ */
+export const FORGE_TRANSPORT_PATTERN = /unable to access '?https?:\/\/|error in the http2 framing layer|could not resolve host|connection (?:reset|timed out|refused)|\bcurl\b.*\b(?:52|55|56|92)\b|remote end hung up unexpectedly|\brpc failed\b|tls handshake|network is unreachable|operation timed out/i;
+export function forgeTransportFailure(message) {
+    return FORGE_TRANSPORT_PATTERN.test(message);
+}
 /** Failures that require an operator/configuration change must never burn the remaining attempts. */
 export function retryableAgentFailure(message) {
-    return !/unknown (?:option|argument)|unrecognized (?:option|argument)|not logged in|no login|not authenticated|login required|\bENOENT\b|could not verify the installed CLI|requires local fuel|No Bridge-mapped|preflight/i.test(message);
+    // `cannot enforce` is a driver projection refusing a class it structurally cannot bound (Pi and
+    // observe_network). No number of retries on that lane changes it, and retrying an immutable input
+    // is how one assignment burned ~80 attempts. Fail closed; the message names the drivers that work.
+    return !/unknown (?:option|argument)|unrecognized (?:option|argument)|not logged in|no login|not authenticated|login required|\bENOENT\b|could not verify the installed CLI|requires local fuel|No Bridge-mapped|cannot enforce|preflight/i.test(message);
 }
 const assignmentSchema = z.object({
     id: z.string().uuid(),
@@ -54,7 +66,6 @@ const taskSpecSchema = z.object({
     execution_class: z.enum(["observe", "observe_network", "publish_artifact", "verify", "mutate_repo"]).optional(),
     lands: z.boolean().optional(),
     privileged_grants: z.array(z.string()).optional(),
-    external_network: z.boolean().optional(),
     instruction: z.string().optional(),
     evidence_standard: z.unknown().optional(),
     working_language: z.enum(["en", "zh"]).optional(),
@@ -519,9 +530,13 @@ async function runClaimedAssignment(client, config, driver, workspace, brief, ta
         }
         catch (error) {
             const message = error instanceof Error ? error.message : "Agent delivery report was invalid";
-            // Contract/tooling/credential failures need a human fix. Automatic retry would repeat the same
-            // state immediately and spend another attempt before the operator can change anything.
-            await queueTerminal(client, taskId, { action: "fail", body: { error: message, retryable: false, idempotency_key: `bridge:invalid-delivery:${active.attemptId}` } });
+            // Contract/tooling/credential failures need a human fix: automatic retry would repeat the same
+            // state immediately and spend another attempt before the operator can change anything. A lost
+            // connection to the code host is the opposite — nothing here is wrong and the next attempt can
+            // succeed — and calling it non-retryable is what reported a GitHub HTTP/2 flake on `git push`
+            // as the agent failing its contract.
+            const transport = forgeTransportFailure(message);
+            await queueTerminal(client, taskId, { action: "fail", body: { error: message, retryable: transport, idempotency_key: `bridge:invalid-delivery:${active.attemptId}` } });
             console.error(`Assignment ${taskId} could not produce a valid Delivery: ${redactSecrets(message)}`);
             const replyTail = reportText.slice(-8_000);
             console.error(`Assignment ${taskId} agent reply tail (${reportText.length} chars total, redacted): ${redactSecrets(replyTail) || "<empty>"}`);
@@ -706,10 +721,12 @@ async function prepareDelivery(client, attemptId, taskId, report) {
     };
 }
 export function validateDeliveryReport(report, spec, grants = []) {
-    validateChangeScope(report, spec.change_scope ?? []);
     // Research findings live in the report. Do not demand a published pack URL for work_role=research
     // even when a planner mis-labeled the package as deliverable=artifact.
     const artifactDelivery = spec.deliverable === "artifact" && spec.work_role !== "research";
+    // Artifact packs are not git landings — do not demand head_commit when the planner put
+    // `.conduit/artifacts/**` in change_scope as a write hint (path-4 canary incident).
+    validateChangeScope(report, spec.change_scope ?? [], { requireHeadCommit: !artifactDelivery });
     if (artifactDelivery) {
         const published = report.evidence.some((item) => {
             if (!["preview", "research", "documentation"].includes(item.kind))
@@ -776,11 +793,15 @@ function referenceKind(kind) {
         return "document";
     return "other";
 }
-export function validateChangeScope(report, changeScope) {
+export function validateChangeScope(report, changeScope, options = {}) {
     if (!changeScope.length)
         return;
-    if (!report.head_commit)
+    const requireHeadCommit = options.requireHeadCommit !== false;
+    if (requireHeadCommit && !report.head_commit) {
         throw new Error("Repository changes require a delivered head commit");
+    }
+    if (!report.changes.length)
+        return;
     const paths = report.changes.map((change) => change.split(/\s+[—-]\s+/, 1)[0].trim().replaceAll("\\", "/"));
     const outside = paths.filter((path) => !path || path.startsWith("/") || path.split("/").includes("..") || !changeScope.some((scope) => pathMatchesScope(path, scope)));
     if (outside.length)

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@miraland-labs/conduit-bridge",
-  "version": "0.11.1",
+  "version": "0.11.3",
   "description": "Conduit Bridge CLI — join, connect, disconnect, multi-driver lanes, and run Claude Code / Codex / Cursor / OpenCode / Pi / Kiro / Antigravity agents for a Conduit organization",
   "type": "module",
   "bin": {