@miraland-labs/conduit-bridge 0.11.2 → 0.11.3

package/README.md

@@ -2,7 +2,7 @@
 
 Local Bridge CLI for [Conduit](https://github.com/miralandlabs/conduit). Connects a computer to one organization, claims work, and drives a local agent.
 
-**Package version:** `0.11.0` — **ExecutionClass inversion:** the control plane stamps `execution_class` on the assignment; Bridge launches from that stamp (fail closed if missing), asserts the full class floor after ceilings, and projects permissions locally (“Bridge wins” on tools). Ordinary grants are derived server-side as classMax ∩ project ceiling; landing is package `lands`, not a class axiom. Workspace briefs discover verification commands for Node, Make, Cargo, Go, pytest, and Gradle. Control-plane `instruction` is **additive** evidence/class prose; Bridge always appends local RULES (shell allow-list, verbatim paste, criterion mapping, hard-denied). Prompt is data; permissions stay local — residual risk if the control plane is compromised (sharpest for `observe_network`). Artifact digests still normalize bare 64-hex to `sha256:<hex>`. Experimental Pi lane remains; `observe_network` is refused on Pi. Heartbeat protocol 2, worktrees, ops helpers, multi-driver lanes, and slots **1–4** unchanged. Protocol 1 heartbeats remain compatible for presence but cannot receive work.
+**Package version:** `0.11.3` — a lost connection to the code host during delivery finalize is now reported as **retryable**: that block marked every throw non-retryable, which is right for a malformed delivery report and wrong for a dropped connection, and it reported a GitHub HTTP/2 flake on `git push` as the agent failing its execution contract. Since `0.11.0`: `0.11.1` made a missing stamped class retryable-then-fail-closed, `0.11.2` removed the unread `external_network` spec field and made a driver refusing a class it cannot enforce terminal. **ExecutionClass inversion:** the control plane stamps `execution_class` on the assignment; Bridge launches from that stamp (fail closed if missing), asserts the full class floor after ceilings, and projects permissions locally (“Bridge wins” on tools). Ordinary grants are derived server-side as classMax ∩ project ceiling; landing is package `lands`, not a class axiom. Workspace briefs discover verification commands for Node, Make, Cargo, Go, pytest, and Gradle. Control-plane `instruction` is **additive** evidence/class prose; Bridge always appends local RULES (shell allow-list, verbatim paste, criterion mapping, hard-denied). Prompt is data; permissions stay local — residual risk if the control plane is compromised (sharpest for `observe_network`). Artifact digests still normalize bare 64-hex to `sha256:<hex>`. Experimental Pi lane remains; `observe_network` is refused on Pi. Heartbeat protocol 2, worktrees, ops helpers, multi-driver lanes, and slots **1–4** unchanged. Protocol 1 heartbeats remain compatible for presence but cannot receive work.
 
 ## Prerequisites
 

package/dist/execution.js

@@ -22,6 +22,15 @@ function changesRequestedFeedback(summary) {
         return null;
     }
 }
+/**
+ * A network fault reaching the code host. Mirrors FORGE_TRANSPORT_PATTERN in the control plane's
+ * failures.ts — Bridge cannot import from there, so test/failure-classification.test.ts pins the two
+ * together rather than trusting them to stay in step.
+ */
+export const FORGE_TRANSPORT_PATTERN = /unable to access '?https?:\/\/|error in the http2 framing layer|could not resolve host|connection (?:reset|timed out|refused)|\bcurl\b.*\b(?:52|55|56|92)\b|remote end hung up unexpectedly|\brpc failed\b|tls handshake|network is unreachable|operation timed out/i;
+export function forgeTransportFailure(message) {
+    return FORGE_TRANSPORT_PATTERN.test(message);
+}
 /** Failures that require an operator/configuration change must never burn the remaining attempts. */
 export function retryableAgentFailure(message) {
     // `cannot enforce` is a driver projection refusing a class it structurally cannot bound (Pi and
@@ -521,9 +530,13 @@ async function runClaimedAssignment(client, config, driver, workspace, brief, ta
         }
         catch (error) {
             const message = error instanceof Error ? error.message : "Agent delivery report was invalid";
-            // Contract/tooling/credential failures need a human fix. Automatic retry would repeat the same
-            // state immediately and spend another attempt before the operator can change anything.
-            await queueTerminal(client, taskId, { action: "fail", body: { error: message, retryable: false, idempotency_key: `bridge:invalid-delivery:${active.attemptId}` } });
+            // Contract/tooling/credential failures need a human fix: automatic retry would repeat the same
+            // state immediately and spend another attempt before the operator can change anything. A lost
+            // connection to the code host is the opposite — nothing here is wrong and the next attempt can
+            // succeed — and calling it non-retryable is what reported a GitHub HTTP/2 flake on `git push`
+            // as the agent failing its contract.
+            const transport = forgeTransportFailure(message);
+            await queueTerminal(client, taskId, { action: "fail", body: { error: message, retryable: transport, idempotency_key: `bridge:invalid-delivery:${active.attemptId}` } });
             console.error(`Assignment ${taskId} could not produce a valid Delivery: ${redactSecrets(message)}`);
             const replyTail = reportText.slice(-8_000);
             console.error(`Assignment ${taskId} agent reply tail (${reportText.length} chars total, redacted): ${redactSecrets(replyTail) || "<empty>"}`);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@miraland-labs/conduit-bridge",
-  "version": "0.11.2",
+  "version": "0.11.3",
   "description": "Conduit Bridge CLI — join, connect, disconnect, multi-driver lanes, and run Claude Code / Codex / Cursor / OpenCode / Pi / Kiro / Antigravity agents for a Conduit organization",
   "type": "module",
   "bin": {