@miraland-labs/conduit-bridge 0.14.7 → 0.14.8

package/dist/driver.js

@@ -15,7 +15,7 @@ function deliveryLanguageRule(language) {
     return null;
 }
 export const evidenceKinds = ["change", "test", "preview", "research", "documentation"];
-export const agentReportTemplate = '{"outcome": "one-paragraph summary", "changes": ["path — what changed"], "verification": ["command — result"], "acceptance_results": [{"criterion": "exact criterion text", "status": "met|not_met|unknown", "unverified_reason": "omit unless status is unknown", "unverified_detail": "one sentence naming what was missing; omit unless status is unknown"}], "evidence": [{"kind": "change|test|preview|research|documentation", "name": "concise evidence name", "uri": "external URL if one exists", "digest": "optional digest", "details": ["observable result"], "acceptance_criteria": ["exact criterion text supported by this evidence"]}], "assumptions": [], "risks": [], "limitations": [], "head_commit": "full sha of your final commit, omit if none"}';
+export const agentReportTemplate = '{"outcome": "one-paragraph summary", "changes": ["path from the repository root — what changed"], "verification": ["command — result"], "acceptance_results": [{"criterion": "exact criterion text", "status": "met|not_met|unknown", "unverified_reason": "omit unless status is unknown", "unverified_detail": "one sentence naming what was missing; omit unless status is unknown"}], "evidence": [{"kind": "change|test|preview|research|documentation", "name": "concise evidence name", "uri": "external URL if one exists", "digest": "optional digest", "details": ["observable result"], "acceptance_criteria": ["exact criterion text supported by this evidence"]}], "assumptions": [], "risks": [], "limitations": [], "head_commit": "full sha of your final commit, omit if none"}';
 /**
  * Resolve an operator's ordered tier candidates against the live model list.
  * Picks the first safe candidate the CLI currently offers; without a live list

package/dist/execution.js

@@ -1281,10 +1281,31 @@ export function validateChangeScope(report, changeScope, options = {}) {
     if (!report.changes.length)
         return;
     const paths = report.changes.map((change) => change.split(/\s+[—-]\s+/, 1)[0].trim().replaceAll("\\", "/"));
-    const outside = paths.filter((path) => !path || path.startsWith("/") || path.split("/").includes("..") || !changeScope.some((scope) => pathMatchesScope(path, scope)));
+    const outside = paths.filter((path) => {
+        if (!path || path.startsWith("/") || path.split("/").includes(".."))
+            return true;
+        if (changeScope.some((scope) => pathMatchesScope(path, scope)))
+            return false;
+        return !namesOneScopedFile(path, changeScope);
+    });
     if (outside.length)
         throw new Error(`Agent reported changes outside the approved scope: ${outside.join(", ")}`);
 }
+/**
+ * Did the agent name an approved file the short way?
+ *
+ * A run that edited src/lib/tools.ts and reported "tools.ts" did the approved work and described it
+ * loosely. Rejecting that spends the attempt, fails the contract, and puts a decision in front of
+ * the owner over a path format — and the rerun reports it the same way. Accept the shorthand only
+ * when it can mean exactly one approved file: with two candidates we genuinely cannot tell which was
+ * touched, so it stays a violation.
+ */
+function namesOneScopedFile(path, changeScope) {
+    const candidates = changeScope
+        .map((scope) => scope.replaceAll("\\", "/").replace(/^\.\//, "").replace(/\/$/, ""))
+        .filter((scope) => !scope.includes("*") && scope.endsWith(`/${path}`));
+    return candidates.length === 1;
+}
 function pathMatchesScope(path, scope) {
     const normalized = scope.replaceAll("\\", "/").replace(/^\.\//, "").replace(/\/$/, "");
     if (normalized.endsWith("/**")) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@miraland-labs/conduit-bridge",
-  "version": "0.14.7",
+  "version": "0.14.8",
   "description": "Conduit Bridge CLI — join, connect, disconnect, multi-driver lanes, and run Claude Code / Codex / Cursor / OpenCode / Pi / Kiro / Antigravity agents for a Conduit organization",
   "type": "module",
   "bin": {