@miraland-labs/conduit-bridge 0.16.101 → 0.16.103

package/dist/brief.js

@@ -1,4 +1,4 @@
-import { readdir, readFile } from "node:fs/promises";
+import { access, readdir, readFile } from "node:fs/promises";
 import { join } from "node:path";
 import { execFile } from "node:child_process";
 import { promisify } from "node:util";
@@ -8,18 +8,28 @@ const execFileAsync = promisify(execFile);
 const MANIFESTS = [
     "package.json", "wrangler.jsonc", "wrangler.toml", "tsconfig.json",
     "Cargo.toml", "pyproject.toml", "pytest.ini", "setup.cfg", "go.mod",
-    "Makefile", "build.gradle", "build.gradle.kts", "gradlew",
+    "Makefile", "build.gradle", "build.gradle.kts", "gradlew", "pom.xml", "mvnw",
+    "DESCRIPTION", "renv.lock", "tests/testthat.R",
 ];
 /** Prefer test before typecheck/lint so discovery order matches what pickVerificationCommand wants. */
 const VERIFICATION_SCRIPTS = ["test", "verify", "typecheck", "lint", "build"];
 export const MAKE_VERIFICATION_TARGETS = ["test", "check", "verify", "replay", "typecheck", "lint", "build"];
 const EXCLUDED_DIRECTORIES = new Set(["node_modules", "dist", "build", "target", "coverage", ".venv", "venv"]);
+function rDescriptionUsesTestthat(text) {
+    return [...text.matchAll(/^(?:Depends|Imports|Suggests):[^\n]*(?:\n[ \t]+[^\n]*)*/gmi)]
+        .some((field) => /\btestthat\b/i.test(field[0]));
+}
 export async function buildWorkspaceBrief(workspace) {
     const entries = await readdir(workspace, { withFileTypes: true });
     const modules = entries
         .filter((entry) => entry.isDirectory() && !entry.name.startsWith(".") && !EXCLUDED_DIRECTORIES.has(entry.name))
         .map((entry) => entry.name).sort().slice(0, 30);
     const files = new Set(entries.filter((entry) => entry.isFile()).map((entry) => entry.name));
+    try {
+        await access(join(workspace, "tests", "testthat.R"));
+        files.add("tests/testthat.R");
+    }
+    catch { /* optional nested R test entrypoint */ }
     const manifests = MANIFESTS.filter((name) => files.has(name));
     const declared = await readDeclaredVerification(workspace);
     return {
@@ -258,8 +268,21 @@ export async function discoverVerificationCommands(workspace, files) {
         }
     }
     if (files.has("build.gradle") || files.has("build.gradle.kts")) {
-        if (files.has("gradlew"))
-            commands.push("./gradlew test");
+        commands.push(files.has("gradlew") ? "./gradlew test" : "gradle test");
+    }
+    if (files.has("pom.xml")) {
+        commands.push(files.has("mvnw") ? "./mvnw test" : "mvn test");
+    }
+    if (files.has("DESCRIPTION")) {
+        try {
+            const description = await readFile(join(workspace, "DESCRIPTION"), "utf8");
+            if (rDescriptionUsesTestthat(description))
+                commands.push("Rscript -e testthat::test_local()");
+        }
+        catch { /* unreadable manifests do not broaden execution */ }
+    }
+    else if (files.has("tests/testthat.R")) {
+        commands.push("Rscript tests/testthat.R");
     }
     // The heartbeat schema caps `verification` at 10. A gate-rich checkout discovers more than that,
     // and the whole heartbeat was then refused: the computer went dark with no reason on any card.

package/dist/ensure-test-evidence.js

@@ -29,7 +29,7 @@ export function needsTestEvidence(spec, grants) {
  * is not satisfied by a silent `npm run typecheck`.
  */
 export function isPreferentialTestCommand(command) {
-    return /^(npm run test|pnpm test|yarn test|cargo test|go test(?: \.\/\.\.\.)?|make test|python3? -m (?:pytest|unittest)(?: [\w./=:-]+)*|pytest(?: [\w./=-]+)?|\.\/gradlew test)$/.test(command.trim());
+    return /^(npm run test|pnpm test|yarn test|cargo test|go test(?: \.\/\.\.\.)?|make test|python3? -m (?:pytest|unittest)(?: [\w./=:-]+)*|pytest(?: [\w./=-]+)?|(?:\.\/gradlew|gradle|\.\/mvnw|mvn) test|Rscript tests\/testthat\.R|Rscript -e testthat::test_local\(\))$/.test(command.trim());
 }
 export function pickVerificationCommand(commands) {
     const bounded = commands
@@ -91,7 +91,7 @@ export function verificationCommandsMentioned(text, offered = []) {
     const source = text.slice(0, 20_000);
     const verbatim = [...new Set(offered.map((command) => command.trim()))]
         .filter((command) => isBoundedVerificationCommand(command) && textNamesCommand(source, command));
-    const pattern = /(?:^|[\s("'`])((?:npm run [A-Za-z0-9][A-Za-z0-9._:-]*|pnpm [A-Za-z0-9][A-Za-z0-9._:-]*|yarn [A-Za-z0-9][A-Za-z0-9._:-]*|cargo (?:test|check)|go test(?: \.\/\.\.\.)?|make [A-Za-z0-9][A-Za-z0-9._-]*|python3? -m [A-Za-z0-9_][\w.]*(?: [\w./=:-]*[./=-][\w./=:-]*)*|pytest(?: [\w./=-]*[./=-][\w./=-]*)?|python3? [\w./-]+\.py(?: [\w./=:-]*[./=-][\w./=:-]*)*|\.\/gradlew test))(?=$|[\s"'`),.;:])/g;
+    const pattern = /(?:^|[\s("'`])((?:npm run [A-Za-z0-9][A-Za-z0-9._:-]*|pnpm [A-Za-z0-9][A-Za-z0-9._:-]*|yarn [A-Za-z0-9][A-Za-z0-9._:-]*|cargo (?:test|check)|go test(?: \.\/\.\.\.)?|make [A-Za-z0-9][A-Za-z0-9._-]*|python3? -m [A-Za-z0-9_][\w.]*(?: [\w./=:-]*[./=-][\w./=:-]*)*|pytest(?: [\w./=-]*[./=-][\w./=-]*)?|python3? [\w./-]+\.py(?: [\w./=:-]*[./=-][\w./=:-]*)*|(?:\.\/gradlew|gradle|\.\/mvnw|mvn) test|Rscript tests\/testthat\.R|Rscript -e testthat::test_local\(\)))(?=$|[\s"'`),.;:])/g;
     const mentions = [...new Set([...source.matchAll(pattern)].map((match) => match[1]))]
         .filter((mention) => isBoundedVerificationCommand(mention)
         && !verbatim.some((command) => command === mention || command.startsWith(`${mention} `)));
@@ -423,6 +423,23 @@ export function detectGateRanNothing(command, stdout, stderr, code) {
     if (/^go test\b/.test(trimmed) && code === 0 && /\[no test files\]/.test(combined) && !/^ok\s/m.test(combined)) {
         return "gate ran no tests";
     }
+    if (/^(?:\.\/mvnw|mvn) test$/.test(trimmed)
+        && /\bNo tests to run\b/i.test(combined)
+        && !/\bTests run:\s*[1-9]\d*/i.test(combined)) {
+        return "gate ran no tests";
+    }
+    if (/^(?:\.\/gradlew|gradle) test$/.test(trimmed)) {
+        const testTasks = combined.split(/\r?\n/)
+            .map((line) => line.trim().replace(/^> Task /, ""))
+            .filter((line) => /^:(?:[^:\s]+:)*test(?:\s|$)/.test(line));
+        if (testTasks.length > 0 && testTasks.every((line) => /\sNO-SOURCE\b/.test(line))) {
+            return "gate ran no tests";
+        }
+    }
+    if (/^Rscript (?:tests\/testthat\.R|-e testthat::test_local\(\))$/.test(trimmed)
+        && /\bNo test files found\b/i.test(combined)) {
+        return "gate ran no tests";
+    }
     const firstLine = combined.trim().split("\n")[0] ?? "";
     if ((code === 1 || code === 2) && /^usage:/i.test(firstLine)) {
         return "gate printed usage";

package/dist/execution-class.js

@@ -13,7 +13,7 @@ export function isBoundedVerificationCommand(command) {
     // A `*` is a legal character in a Python argument (`-p test_*.py` is how a repository spells its
     // own gate). Bridge starts a gate with execFile and no shell, so the star stays literal and no
     // expansion can happen. Refusing it only dropped the declaration, with no reason given.
-    return /^(npm run [A-Za-z0-9][A-Za-z0-9._:-]*|pnpm [A-Za-z0-9][A-Za-z0-9._:-]*|yarn [A-Za-z0-9][A-Za-z0-9._:-]*|cargo (test|check)|go test(?: \.\/\.\.\.)?|make [A-Za-z0-9][A-Za-z0-9._-]*|python3? -m [A-Za-z0-9_][\w.]*(?: [\w./=:*-]+)*|pytest(?: [\w./=*-]+)?|python3? [\w./-]+\.py(?: [\w./=:-]+)*|\.\/gradlew test)$/.test(command);
+    return /^(npm run [A-Za-z0-9][A-Za-z0-9._:-]*|pnpm [A-Za-z0-9][A-Za-z0-9._:-]*|yarn [A-Za-z0-9][A-Za-z0-9._:-]*|cargo (test|check)|go test(?: \.\/\.\.\.)?|make [A-Za-z0-9][A-Za-z0-9._-]*|python3? -m [A-Za-z0-9_][\w.]*(?: [\w./=:*-]+)*|pytest(?: [\w./=*-]+)?|python3? [\w./-]+\.py(?: [\w./=:-]+)*|(?:\.\/gradlew|gradle|\.\/mvnw|mvn) test|Rscript tests\/testthat\.R|Rscript -e testthat::test_local\(\))$/.test(command);
 }
 /** Shell commands each grant authorizes — mapped per driver so they cannot drift. */
 export const branchCreateCommands = [

package/dist/execution-facts.js

@@ -15,6 +15,10 @@ export const BOOTSTRAP_RESULTS = ["not_applicable", "not_run", "installed", "fai
 const LOCKFILE_NAMES = [
     "package-lock.json", "npm-shrinkwrap.json", "yarn.lock", "pnpm-lock.yaml",
     "Cargo.lock", "poetry.lock", "Pipfile.lock", "go.sum", "Gemfile.lock", "composer.lock",
+    "gradle.lockfile", "renv.lock",
+];
+const JAVASCRIPT_LOCKFILE_NAMES = [
+    "package-lock.json", "npm-shrinkwrap.json", "yarn.lock", "pnpm-lock.yaml",
 ];
 /**
  * The facts the control plane refuses to see change once it holds them, in the order it compares
@@ -114,7 +118,7 @@ export async function bootstrapResultForWorkspace(workspace) {
         return "not_applicable";
     }
     try {
-        const lockfile = await Promise.any(LOCKFILE_NAMES.map(async (name) => {
+        const lockfile = await Promise.any(JAVASCRIPT_LOCKFILE_NAMES.map(async (name) => {
             await access(join(workspace, name));
             return true;
         }));

package/dist/execution.js

@@ -28,7 +28,7 @@ const execFileAsync = promisify(execFile);
 import { captureVerificationFailure, detectGateRanNothing, ensureTestEvidence, needsTestEvidence, runBoundedVerificationCommand, verificationEvidenceCommands, VerificationGateRanNothingError } from "./ensure-test-evidence.js";
 import { ensureChangeEvidence } from "./ensure-change-evidence.js";
 import { ensureNormativeEvidence } from "./ensure-normative-evidence.js";
-import { changedPathsSince, compareWorktreeState, worktreeStateFingerprint, worktreeWrittenPaths } from "./git-witness.js";
+import { changedPathsSince, compareWorktreeState, diffStatSince, worktreeStateFingerprint, worktreeWrittenPaths } from "./git-witness.js";
 import { assertNormativeRefsMaterialized, checkNormativeMarkers, materializeNormativeRefs, NORMATIVE_MARKER_PREFIX, NORMATIVE_REF_PREFIX, parseNormativeRefs, } from "./normative-refs.js";
 import { checkIntegrationObligations, INTEGRATION_OBLIGATION_PREFIX, parseIntegrationObligations, } from "./integration-obligations.js";
 /** Keep a Mac awake only while an assignment is active; display sleep remains allowed. */
@@ -1717,6 +1717,11 @@ async function runAttempt(client, config, driver, workspace, brief, taskId, watc
                 : null;
             // The vendor named the model as the cause, so the model is what the retry must change. The
             // model rides in the prefix: the control plane cannot read Bridge's selection any other way.
+            const diffStat = verificationDetail && attemptWorkspace && startCommit
+                ? await diffStatSince(attemptWorkspace, startCommit)
+                    .then((stat) => stat?.slice(0, 8_000) ?? null)
+                    .catch(() => null)
+                : null;
             const abortPrefix = agentModelAbortPrefix(selection.model);
             const modelAborted = agentModelAborted(`${agentMessage}\n${result.signal?.stderr_tail ?? ""}`);
             // T52: the epoch's second abort is not a retryable model swap — the first one already bought
@@ -1724,7 +1729,7 @@ async function runAttempt(client, config, driver, workspace, brief, taskId, watc
             // "Agent Looping Detected" runs on the cursor CLI default). Hold on the tier instead.
             const bindingRequired = modelAborted && !verificationDetail && modelBindingRequired(selection);
             const message = verificationDetail
-                ? `Verification failed after the agent run.\n${verificationDetail}`
+                ? `Verification failed after the agent run.\n${verificationDetail}${diffStat ? `\n\nChanged files:\n${diffStat}` : ""}`
                 : bindingRequired
                     ? `${modelBindingRequiredPrefix(selection.tier, driver.name)}${agentMessage}`
                     : modelAborted ? `${abortPrefix}${agentMessage}` : agentMessage;
@@ -1744,7 +1749,7 @@ async function runAttempt(client, config, driver, workspace, brief, taskId, watc
                     ? { phase: "agent", witness: "vendor", kind: "quota", vendor_message: agentMessage.slice(0, 2_000) }
                     : result.signal
                         ? verificationDetail
-                            ? { ...result.signal, phase: "verification", witness: "bridge", stderr_tail: undefined, stdout_tail: undefined }
+                            ? { ...result.signal, phase: "verification", witness: "bridge", stderr_tail: undefined, stdout_tail: undefined, ...(diffStat ? { diff_stat: diffStat } : {}) }
                             : result.signal
                         : undefined;
             const response = await queueTerminal(client, taskId, { action: "fail", body: {
@@ -2172,8 +2177,13 @@ async function runAttempt(client, config, driver, workspace, brief, taskId, watc
             // exact tree and send the witness marker that arms Conductor diagnosis. Treating it as a
             // delivery-envelope defect would stop before Invariant 23 ever ran.
             const verificationFailed = /^Agent report: Verification failed \(/.test(message);
+            const diffStat = verificationFailed && attemptWorkspace
+                ? await diffStatSince(attemptWorkspace, deliveryBaseCommit)
+                    .then((stat) => stat?.slice(0, 8_000) ?? null)
+                    .catch(() => null)
+                : null;
             const classified = verificationFailed
-                ? { retryable: true, error: `Verification failed after the agent run.\n${message}` }
+                ? { retryable: true, error: `Verification failed after the agent run.\n${message}${diffStat ? `\n\nChanged files:\n${diffStat}` : ""}` }
                 // classifyFinalizeFailure: forge transport → retryable; contract/environment/unknown → fail
                 // closed (unknown prefixed as "Bridge finalize interrupted", not laundered as contract).
                 : classifyFinalizeFailure(message);
@@ -2184,6 +2194,12 @@ async function runAttempt(client, config, driver, workspace, brief, taskId, watc
                 body: {
                     error: classified.error,
                     retryable: classified.retryable,
+                    ...(verificationFailed ? { signal: {
+                            phase: "verification",
+                            witness: "bridge",
+                            kind: "verification_failed",
+                            ...(diffStat ? { diff_stat: diffStat } : {}),
+                        } } : {}),
                     // A rework's own PR may already be open (ensureDeliveryPullRequest ran before this
                     // gate). Carry the URL so the control plane can close it instead of littering.
                     ...(report.pull_request_url ? { pull_request_url: report.pull_request_url } : {}),

package/dist/failure-signal.js

@@ -24,6 +24,8 @@ export const failureSignalSchema = z.object({
     paths: z.array(z.string().max(300)).max(20).optional(),
     /** The base commit the dry run ran against, when a gate already fails there. */
     base_commit: z.string().max(200).optional(),
+    /** Short git diff --stat of files modified in the attempt worktree. */
+    diff_stat: z.string().max(8_000).optional(),
     exit_code: z.number().int().nullable().optional(),
     /** The vendor envelope's own status, e.g. agy's "ERROR". */
     vendor_status: z.string().max(200).optional(),

package/dist/git-witness.js

@@ -123,11 +123,20 @@ export function compareWorktreeState(before, after) {
 /** Short stat summary for change evidence artifacts. */
 export async function diffStatSince(worktree, startCommit) {
     try {
-        const { stdout } = await execFileAsync("git", ["-C", worktree, "diff", "--stat", `${startCommit}..HEAD`], {
-            timeout: 30_000,
-            maxBuffer: 2_000_000,
-        });
-        const text = stdout.trim();
+        const [{ stdout }, { stdout: untracked }] = await Promise.all([
+            execFileAsync("git", ["-C", worktree, "diff", "--stat", startCommit], {
+                timeout: 30_000,
+                maxBuffer: 2_000_000,
+            }),
+            execFileAsync("git", ["-C", worktree, "ls-files", "--others", "--exclude-standard", "-z"], {
+                timeout: 30_000,
+                maxBuffer: 2_000_000,
+                encoding: "buffer",
+            }),
+        ]);
+        const untrackedLines = untracked.toString("utf8").split("\0").filter(Boolean)
+            .map((path) => ` ${path} | untracked`);
+        const text = [stdout.trim(), ...untrackedLines].filter(Boolean).join("\n");
         return text || null;
     }
     catch {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@miraland-labs/conduit-bridge",
-  "version": "0.16.101",
+  "version": "0.16.103",
   "description": "Conduit Bridge CLI \u2014 join, connect, disconnect, multi-driver lanes, and run Claude Code / Codex / Cursor / OpenCode / Pi / Kiro / Antigravity / Grok Build agents for a Conduit organization",
   "type": "module",
   "bin": {