@miraland-labs/conduit-bridge 0.16.102 → 0.16.104

package/dist/brief.js

@@ -1,4 +1,4 @@
-import { readdir, readFile } from "node:fs/promises";
+import { access, readdir, readFile } from "node:fs/promises";
 import { join } from "node:path";
 import { execFile } from "node:child_process";
 import { promisify } from "node:util";
@@ -8,18 +8,28 @@ const execFileAsync = promisify(execFile);
 const MANIFESTS = [
     "package.json", "wrangler.jsonc", "wrangler.toml", "tsconfig.json",
     "Cargo.toml", "pyproject.toml", "pytest.ini", "setup.cfg", "go.mod",
-    "Makefile", "build.gradle", "build.gradle.kts", "gradlew",
+    "Makefile", "build.gradle", "build.gradle.kts", "gradlew", "pom.xml", "mvnw",
+    "DESCRIPTION", "renv.lock", "tests/testthat.R",
 ];
 /** Prefer test before typecheck/lint so discovery order matches what pickVerificationCommand wants. */
 const VERIFICATION_SCRIPTS = ["test", "verify", "typecheck", "lint", "build"];
 export const MAKE_VERIFICATION_TARGETS = ["test", "check", "verify", "replay", "typecheck", "lint", "build"];
 const EXCLUDED_DIRECTORIES = new Set(["node_modules", "dist", "build", "target", "coverage", ".venv", "venv"]);
+function rDescriptionUsesTestthat(text) {
+    return [...text.matchAll(/^(?:Depends|Imports|Suggests):[^\n]*(?:\n[ \t]+[^\n]*)*/gmi)]
+        .some((field) => /\btestthat\b/i.test(field[0]));
+}
 export async function buildWorkspaceBrief(workspace) {
     const entries = await readdir(workspace, { withFileTypes: true });
     const modules = entries
         .filter((entry) => entry.isDirectory() && !entry.name.startsWith(".") && !EXCLUDED_DIRECTORIES.has(entry.name))
         .map((entry) => entry.name).sort().slice(0, 30);
     const files = new Set(entries.filter((entry) => entry.isFile()).map((entry) => entry.name));
+    try {
+        await access(join(workspace, "tests", "testthat.R"));
+        files.add("tests/testthat.R");
+    }
+    catch { /* optional nested R test entrypoint */ }
     const manifests = MANIFESTS.filter((name) => files.has(name));
     const declared = await readDeclaredVerification(workspace);
     return {
@@ -258,8 +268,21 @@ export async function discoverVerificationCommands(workspace, files) {
         }
     }
     if (files.has("build.gradle") || files.has("build.gradle.kts")) {
-        if (files.has("gradlew"))
-            commands.push("./gradlew test");
+        commands.push(files.has("gradlew") ? "./gradlew test" : "gradle test");
+    }
+    if (files.has("pom.xml")) {
+        commands.push(files.has("mvnw") ? "./mvnw test" : "mvn test");
+    }
+    if (files.has("DESCRIPTION")) {
+        try {
+            const description = await readFile(join(workspace, "DESCRIPTION"), "utf8");
+            if (rDescriptionUsesTestthat(description))
+                commands.push("Rscript -e testthat::test_local()");
+        }
+        catch { /* unreadable manifests do not broaden execution */ }
+    }
+    else if (files.has("tests/testthat.R")) {
+        commands.push("Rscript tests/testthat.R");
     }
     // The heartbeat schema caps `verification` at 10. A gate-rich checkout discovers more than that,
     // and the whole heartbeat was then refused: the computer went dark with no reason on any card.

package/dist/ensure-test-evidence.js

@@ -29,7 +29,7 @@ export function needsTestEvidence(spec, grants) {
  * is not satisfied by a silent `npm run typecheck`.
  */
 export function isPreferentialTestCommand(command) {
-    return /^(npm run test|pnpm test|yarn test|cargo test|go test(?: \.\/\.\.\.)?|make test|python3? -m (?:pytest|unittest)(?: [\w./=:-]+)*|pytest(?: [\w./=-]+)?|\.\/gradlew test)$/.test(command.trim());
+    return /^(npm run test|pnpm test|yarn test|cargo test|go test(?: \.\/\.\.\.)?|make test|python3? -m (?:pytest|unittest)(?: [\w./=:-]+)*|pytest(?: [\w./=-]+)?|(?:\.\/gradlew|gradle|\.\/mvnw|mvn) test|Rscript tests\/testthat\.R|Rscript -e testthat::test_local\(\))$/.test(command.trim());
 }
 export function pickVerificationCommand(commands) {
     const bounded = commands
@@ -45,14 +45,24 @@ export function pickVerificationCommand(commands) {
  * a declared gate neither dry-run nor witnessed unless an acceptance criterion happened to name it.
  * So the declared gates run beside the aggregate, in declared order, de-duplicated.
  */
-export function verificationEvidenceCommands(commands, declared = []) {
+export function verificationEvidenceCommands(commands, declared = [], acceptance = null) {
     const bounded = [...new Set(commands
             .map((command) => command.trim())
             .filter((command) => command && isRunnableVerificationCommand(command)))];
+    const declaredGates = bounded.filter((command) => declared.some((line) => line.trim() === command));
+    // T191: the gate is what the project declared for itself plus what the contract will be judged
+    // on — the commands its acceptance criteria name. Every other discovered script (this repository's
+    // ten-minute `npm run verify` for a docs change judged on `npm run typecheck`) is a candidate the
+    // planner may name, not a gate the Bridge runs unasked. When the criteria name no command the
+    // discovered rule below decides, as before (T31: a declared gate runs beside the aggregate).
+    if (acceptance !== null) {
+        const named = acceptanceVerificationCommands([...acceptance], commands).commands;
+        if (named.length)
+            return [...new Set([...declaredGates, ...named])];
+    }
     const aggregate = bounded.find((command) => /^(?:npm run|pnpm|yarn) verify$|^make check$/.test(command));
     if (!aggregate)
         return bounded;
-    const declaredGates = bounded.filter((command) => declared.some((line) => line.trim() === command));
     return [...new Set([...declaredGates, aggregate])];
 }
 /**
@@ -91,7 +101,7 @@ export function verificationCommandsMentioned(text, offered = []) {
     const source = text.slice(0, 20_000);
     const verbatim = [...new Set(offered.map((command) => command.trim()))]
         .filter((command) => isBoundedVerificationCommand(command) && textNamesCommand(source, command));
-    const pattern = /(?:^|[\s("'`])((?:npm run [A-Za-z0-9][A-Za-z0-9._:-]*|pnpm [A-Za-z0-9][A-Za-z0-9._:-]*|yarn [A-Za-z0-9][A-Za-z0-9._:-]*|cargo (?:test|check)|go test(?: \.\/\.\.\.)?|make [A-Za-z0-9][A-Za-z0-9._-]*|python3? -m [A-Za-z0-9_][\w.]*(?: [\w./=:-]*[./=-][\w./=:-]*)*|pytest(?: [\w./=-]*[./=-][\w./=-]*)?|python3? [\w./-]+\.py(?: [\w./=:-]*[./=-][\w./=:-]*)*|\.\/gradlew test))(?=$|[\s"'`),.;:])/g;
+    const pattern = /(?:^|[\s("'`])((?:npm run [A-Za-z0-9][A-Za-z0-9._:-]*|pnpm [A-Za-z0-9][A-Za-z0-9._:-]*|yarn [A-Za-z0-9][A-Za-z0-9._:-]*|cargo (?:test|check)|go test(?: \.\/\.\.\.)?|make [A-Za-z0-9][A-Za-z0-9._-]*|python3? -m [A-Za-z0-9_][\w.]*(?: [\w./=:-]*[./=-][\w./=:-]*)*|pytest(?: [\w./=-]*[./=-][\w./=-]*)?|python3? [\w./-]+\.py(?: [\w./=:-]*[./=-][\w./=:-]*)*|(?:\.\/gradlew|gradle|\.\/mvnw|mvn) test|Rscript tests\/testthat\.R|Rscript -e testthat::test_local\(\)))(?=$|[\s"'`),.;:])/g;
     const mentions = [...new Set([...source.matchAll(pattern)].map((match) => match[1]))]
         .filter((mention) => isBoundedVerificationCommand(mention)
         && !verbatim.some((command) => command === mention || command.startsWith(`${mention} `)));
@@ -423,6 +433,23 @@ export function detectGateRanNothing(command, stdout, stderr, code) {
     if (/^go test\b/.test(trimmed) && code === 0 && /\[no test files\]/.test(combined) && !/^ok\s/m.test(combined)) {
         return "gate ran no tests";
     }
+    if (/^(?:\.\/mvnw|mvn) test$/.test(trimmed)
+        && /\bNo tests to run\b/i.test(combined)
+        && !/\bTests run:\s*[1-9]\d*/i.test(combined)) {
+        return "gate ran no tests";
+    }
+    if (/^(?:\.\/gradlew|gradle) test$/.test(trimmed)) {
+        const testTasks = combined.split(/\r?\n/)
+            .map((line) => line.trim().replace(/^> Task /, ""))
+            .filter((line) => /^:(?:[^:\s]+:)*test(?:\s|$)/.test(line));
+        if (testTasks.length > 0 && testTasks.every((line) => /\sNO-SOURCE\b/.test(line))) {
+            return "gate ran no tests";
+        }
+    }
+    if (/^Rscript (?:tests\/testthat\.R|-e testthat::test_local\(\))$/.test(trimmed)
+        && /\bNo test files found\b/i.test(combined)) {
+        return "gate ran no tests";
+    }
     const firstLine = combined.trim().split("\n")[0] ?? "";
     if ((code === 1 || code === 2) && /^usage:/i.test(firstLine)) {
         return "gate printed usage";
@@ -458,7 +485,7 @@ export async function ensureTestEvidence(input) {
     // The project's gate first, then every bounded command the criteria name that the workspace
     // authorizes. Each is witnessed on its own, so the reviewer sees the criterion's own proof.
     const commands = [...new Set([
-            ...verificationEvidenceCommands(input.verificationCommands, input.declaredVerificationCommands ?? []),
+            ...verificationEvidenceCommands(input.verificationCommands, input.declaredVerificationCommands ?? [], acceptance),
             ...named.commands,
         ])];
     if (commands.length === 0) {

package/dist/execution-class.js

@@ -13,7 +13,7 @@ export function isBoundedVerificationCommand(command) {
     // A `*` is a legal character in a Python argument (`-p test_*.py` is how a repository spells its
     // own gate). Bridge starts a gate with execFile and no shell, so the star stays literal and no
     // expansion can happen. Refusing it only dropped the declaration, with no reason given.
-    return /^(npm run [A-Za-z0-9][A-Za-z0-9._:-]*|pnpm [A-Za-z0-9][A-Za-z0-9._:-]*|yarn [A-Za-z0-9][A-Za-z0-9._:-]*|cargo (test|check)|go test(?: \.\/\.\.\.)?|make [A-Za-z0-9][A-Za-z0-9._-]*|python3? -m [A-Za-z0-9_][\w.]*(?: [\w./=:*-]+)*|pytest(?: [\w./=*-]+)?|python3? [\w./-]+\.py(?: [\w./=:-]+)*|\.\/gradlew test)$/.test(command);
+    return /^(npm run [A-Za-z0-9][A-Za-z0-9._:-]*|pnpm [A-Za-z0-9][A-Za-z0-9._:-]*|yarn [A-Za-z0-9][A-Za-z0-9._:-]*|cargo (test|check)|go test(?: \.\/\.\.\.)?|make [A-Za-z0-9][A-Za-z0-9._-]*|python3? -m [A-Za-z0-9_][\w.]*(?: [\w./=:*-]+)*|pytest(?: [\w./=*-]+)?|python3? [\w./-]+\.py(?: [\w./=:-]+)*|(?:\.\/gradlew|gradle|\.\/mvnw|mvn) test|Rscript tests\/testthat\.R|Rscript -e testthat::test_local\(\))$/.test(command);
 }
 /** Shell commands each grant authorizes — mapped per driver so they cannot drift. */
 export const branchCreateCommands = [

package/dist/execution-facts.js

@@ -15,6 +15,10 @@ export const BOOTSTRAP_RESULTS = ["not_applicable", "not_run", "installed", "fai
 const LOCKFILE_NAMES = [
     "package-lock.json", "npm-shrinkwrap.json", "yarn.lock", "pnpm-lock.yaml",
     "Cargo.lock", "poetry.lock", "Pipfile.lock", "go.sum", "Gemfile.lock", "composer.lock",
+    "gradle.lockfile", "renv.lock",
+];
+const JAVASCRIPT_LOCKFILE_NAMES = [
+    "package-lock.json", "npm-shrinkwrap.json", "yarn.lock", "pnpm-lock.yaml",
 ];
 /**
  * The facts the control plane refuses to see change once it holds them, in the order it compares
@@ -114,7 +118,7 @@ export async function bootstrapResultForWorkspace(workspace) {
         return "not_applicable";
     }
     try {
-        const lockfile = await Promise.any(LOCKFILE_NAMES.map(async (name) => {
+        const lockfile = await Promise.any(JAVASCRIPT_LOCKFILE_NAMES.map(async (name) => {
             await access(join(workspace, name));
             return true;
         }));

package/dist/execution.js

@@ -1285,7 +1285,7 @@ async function runAttempt(client, config, driver, workspace, brief, taskId, watc
         await removeReleasedDiagnosticWorktree(response);
         return;
     }
-    const evidenceCommands = verificationEvidenceCommands(attemptBrief?.verification ?? [], attemptBrief?.declared_verification ?? []);
+    const evidenceCommands = verificationEvidenceCommands(attemptBrief?.verification ?? [], attemptBrief?.declared_verification ?? [], spec.acceptance ?? []);
     // Ahead of the dry run and of the model: the contract requires test evidence and this worktree
     // offers no command that can witness it. Every fact is known here — the required evidence, the
     // test_run grant, the attempt worktree's own gates — and the same question was asked only after
@@ -1323,6 +1323,7 @@ async function runAttempt(client, config, driver, workspace, brief, taskId, watc
             workspace: attemptWorkspace,
             verificationCommands: attemptBrief?.verification ?? [],
             declaredVerificationCommands: attemptBrief?.declared_verification ?? [],
+            acceptance: spec.acceptance ?? [],
             changeScope: spec.change_scope ?? [],
         });
         if (dryRun.ranNothing) {
@@ -2791,7 +2792,7 @@ export function verificationScopeConflictDetail(paths, changeScope) {
  * discarded before the agent starts, so the agent always begins in the tree of the base commit.
  */
 export async function verificationScopeDryRun(input) {
-    const commands = verificationEvidenceCommands(input.verificationCommands, input.declaredVerificationCommands ?? []);
+    const commands = verificationEvidenceCommands(input.verificationCommands, input.declaredVerificationCommands ?? [], input.acceptance ?? null);
     if (!commands.length)
         return { ranNothing: null, redBase: null, outsideScope: [] };
     const run = input.runCommand ?? runBoundedVerificationCommand;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@miraland-labs/conduit-bridge",
-  "version": "0.16.102",
+  "version": "0.16.104",
   "description": "Conduit Bridge CLI \u2014 join, connect, disconnect, multi-driver lanes, and run Claude Code / Codex / Cursor / OpenCode / Pi / Kiro / Antigravity / Grok Build agents for a Conduit organization",
   "type": "module",
   "bin": {