@miraland-labs/conduit-bridge 0.16.101 → 0.16.102

package/dist/execution.js

@@ -28,7 +28,7 @@ const execFileAsync = promisify(execFile);
 import { captureVerificationFailure, detectGateRanNothing, ensureTestEvidence, needsTestEvidence, runBoundedVerificationCommand, verificationEvidenceCommands, VerificationGateRanNothingError } from "./ensure-test-evidence.js";
 import { ensureChangeEvidence } from "./ensure-change-evidence.js";
 import { ensureNormativeEvidence } from "./ensure-normative-evidence.js";
-import { changedPathsSince, compareWorktreeState, worktreeStateFingerprint, worktreeWrittenPaths } from "./git-witness.js";
+import { changedPathsSince, compareWorktreeState, diffStatSince, worktreeStateFingerprint, worktreeWrittenPaths } from "./git-witness.js";
 import { assertNormativeRefsMaterialized, checkNormativeMarkers, materializeNormativeRefs, NORMATIVE_MARKER_PREFIX, NORMATIVE_REF_PREFIX, parseNormativeRefs, } from "./normative-refs.js";
 import { checkIntegrationObligations, INTEGRATION_OBLIGATION_PREFIX, parseIntegrationObligations, } from "./integration-obligations.js";
 /** Keep a Mac awake only while an assignment is active; display sleep remains allowed. */
@@ -1717,6 +1717,11 @@ async function runAttempt(client, config, driver, workspace, brief, taskId, watc
                 : null;
             // The vendor named the model as the cause, so the model is what the retry must change. The
             // model rides in the prefix: the control plane cannot read Bridge's selection any other way.
+            const diffStat = verificationDetail && attemptWorkspace && startCommit
+                ? await diffStatSince(attemptWorkspace, startCommit)
+                    .then((stat) => stat?.slice(0, 8_000) ?? null)
+                    .catch(() => null)
+                : null;
             const abortPrefix = agentModelAbortPrefix(selection.model);
             const modelAborted = agentModelAborted(`${agentMessage}\n${result.signal?.stderr_tail ?? ""}`);
             // T52: the epoch's second abort is not a retryable model swap — the first one already bought
@@ -1724,7 +1729,7 @@ async function runAttempt(client, config, driver, workspace, brief, taskId, watc
             // "Agent Looping Detected" runs on the cursor CLI default). Hold on the tier instead.
             const bindingRequired = modelAborted && !verificationDetail && modelBindingRequired(selection);
             const message = verificationDetail
-                ? `Verification failed after the agent run.\n${verificationDetail}`
+                ? `Verification failed after the agent run.\n${verificationDetail}${diffStat ? `\n\nChanged files:\n${diffStat}` : ""}`
                 : bindingRequired
                     ? `${modelBindingRequiredPrefix(selection.tier, driver.name)}${agentMessage}`
                     : modelAborted ? `${abortPrefix}${agentMessage}` : agentMessage;
@@ -1744,7 +1749,7 @@ async function runAttempt(client, config, driver, workspace, brief, taskId, watc
                     ? { phase: "agent", witness: "vendor", kind: "quota", vendor_message: agentMessage.slice(0, 2_000) }
                     : result.signal
                         ? verificationDetail
-                            ? { ...result.signal, phase: "verification", witness: "bridge", stderr_tail: undefined, stdout_tail: undefined }
+                            ? { ...result.signal, phase: "verification", witness: "bridge", stderr_tail: undefined, stdout_tail: undefined, ...(diffStat ? { diff_stat: diffStat } : {}) }
                             : result.signal
                         : undefined;
             const response = await queueTerminal(client, taskId, { action: "fail", body: {
@@ -2172,8 +2177,13 @@ async function runAttempt(client, config, driver, workspace, brief, taskId, watc
             // exact tree and send the witness marker that arms Conductor diagnosis. Treating it as a
             // delivery-envelope defect would stop before Invariant 23 ever ran.
             const verificationFailed = /^Agent report: Verification failed \(/.test(message);
+            const diffStat = verificationFailed && attemptWorkspace
+                ? await diffStatSince(attemptWorkspace, deliveryBaseCommit)
+                    .then((stat) => stat?.slice(0, 8_000) ?? null)
+                    .catch(() => null)
+                : null;
             const classified = verificationFailed
-                ? { retryable: true, error: `Verification failed after the agent run.\n${message}` }
+                ? { retryable: true, error: `Verification failed after the agent run.\n${message}${diffStat ? `\n\nChanged files:\n${diffStat}` : ""}` }
                 // classifyFinalizeFailure: forge transport → retryable; contract/environment/unknown → fail
                 // closed (unknown prefixed as "Bridge finalize interrupted", not laundered as contract).
                 : classifyFinalizeFailure(message);
@@ -2184,6 +2194,12 @@ async function runAttempt(client, config, driver, workspace, brief, taskId, watc
                 body: {
                     error: classified.error,
                     retryable: classified.retryable,
+                    ...(verificationFailed ? { signal: {
+                            phase: "verification",
+                            witness: "bridge",
+                            kind: "verification_failed",
+                            ...(diffStat ? { diff_stat: diffStat } : {}),
+                        } } : {}),
                     // A rework's own PR may already be open (ensureDeliveryPullRequest ran before this
                     // gate). Carry the URL so the control plane can close it instead of littering.
                     ...(report.pull_request_url ? { pull_request_url: report.pull_request_url } : {}),

package/dist/failure-signal.js

@@ -24,6 +24,8 @@ export const failureSignalSchema = z.object({
     paths: z.array(z.string().max(300)).max(20).optional(),
     /** The base commit the dry run ran against, when a gate already fails there. */
     base_commit: z.string().max(200).optional(),
+    /** Short git diff --stat of files modified in the attempt worktree. */
+    diff_stat: z.string().max(8_000).optional(),
     exit_code: z.number().int().nullable().optional(),
     /** The vendor envelope's own status, e.g. agy's "ERROR". */
     vendor_status: z.string().max(200).optional(),

package/dist/git-witness.js

@@ -123,11 +123,20 @@ export function compareWorktreeState(before, after) {
 /** Short stat summary for change evidence artifacts. */
 export async function diffStatSince(worktree, startCommit) {
     try {
-        const { stdout } = await execFileAsync("git", ["-C", worktree, "diff", "--stat", `${startCommit}..HEAD`], {
-            timeout: 30_000,
-            maxBuffer: 2_000_000,
-        });
-        const text = stdout.trim();
+        const [{ stdout }, { stdout: untracked }] = await Promise.all([
+            execFileAsync("git", ["-C", worktree, "diff", "--stat", startCommit], {
+                timeout: 30_000,
+                maxBuffer: 2_000_000,
+            }),
+            execFileAsync("git", ["-C", worktree, "ls-files", "--others", "--exclude-standard", "-z"], {
+                timeout: 30_000,
+                maxBuffer: 2_000_000,
+                encoding: "buffer",
+            }),
+        ]);
+        const untrackedLines = untracked.toString("utf8").split("\0").filter(Boolean)
+            .map((path) => ` ${path} | untracked`);
+        const text = [stdout.trim(), ...untrackedLines].filter(Boolean).join("\n");
         return text || null;
     }
     catch {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@miraland-labs/conduit-bridge",
-  "version": "0.16.101",
+  "version": "0.16.102",
   "description": "Conduit Bridge CLI \u2014 join, connect, disconnect, multi-driver lanes, and run Claude Code / Codex / Cursor / OpenCode / Pi / Kiro / Antigravity / Grok Build agents for a Conduit organization",
   "type": "module",
   "bin": {