@miraland-labs/conduit-bridge 0.16.127 → 0.16.131

package/dist/driver.js

@@ -696,7 +696,7 @@ export function claudeUsage(message) {
  */
 export const CLAUDE_CODE_KNOWN_MODELS = [
     "fable", "opus", "sonnet", "haiku",
-    "claude-fable-5-1", "claude-opus-5", "claude-sonnet-5", "claude-haiku-4-5",
+    "claude-fable-5-1", "claude-opus-5-5", "claude-opus-5", "claude-sonnet-5", "claude-haiku-4-5",
 ];
 export const claudeCodeDriver = {
     name: "claude-code",
@@ -960,7 +960,8 @@ export function cursorRunArgs(input) {
     args.push(...modelArgs(cursorDriver, input.model));
     if (input.resumeSessionId)
         args.push("--resume", input.resumeSessionId);
-    args.push(input.prompt);
+    // The prompt goes on stdin, as it does for codex: Linux caps one argument at 128 KiB
+    // (MAX_ARG_STRLEN) and an assignment contract exceeds that, which spawned `E2BIG`.
     return args;
 }
 /** Parse `agent --list-models` output: one "id - Label" line per model. */
@@ -999,7 +1000,9 @@ export const cursorDriver = {
         vendor: "cursor",
         // Cursor's own first-party families only. `--list-models` also lists other vendors' models
         // Cursor proxies at a much higher price (the "Other Models" allowance) — those are not owned.
-        owns: (id) => id.startsWith("cursor-grok-") || id.startsWith("composer-"),
+        // Grok 4.7 dropped the `cursor-` prefix (`grok-4.7-high`, 2026-09-26) but Cursor still lists it
+        // under "Cursor Models", beside Grok 4.6 and Composer.
+        owns: (id) => id.startsWith("cursor-grok-") || id.startsWith("grok-") || id.startsWith("composer-"),
     },
     async run(input) {
         const fuelSource = input.fuelSource === "local" ? "local" : "conduit";
@@ -1047,7 +1050,7 @@ export const cursorDriver = {
             capabilities: input.capabilities ?? [],
             diagnosis: input.workRole === "diagnose",
         });
-        const configured = await withCursorPermissions(input.workspace, { allow: projected.allow, deny: projected.deny }, () => execute(executable, cursorRunArgs({ ...input, trustWorkspace, executionClass, force: projected.force }), input.workspace, agentTurnTimeoutMs(input), undefined, "local", undefined, input.signal));
+        const configured = await withCursorPermissions(input.workspace, { allow: projected.allow, deny: projected.deny }, () => execute(executable, cursorRunArgs({ ...input, trustWorkspace, executionClass, force: projected.force }), input.workspace, agentTurnTimeoutMs(input), undefined, "local", input.prompt, input.signal));
         const { code, stdout, stderr } = configured;
         const parsed = parseCursorOutput(stdout);
         // Cursor prints no token or cost figure, so the run reports the one fact it can prove: it ran.

package/dist/ensure-test-evidence.js

@@ -101,7 +101,7 @@ export function verificationCommandsMentioned(text, offered = []) {
     const source = text.slice(0, 20_000);
     const verbatim = [...new Set(offered.map((command) => command.trim()))]
         .filter((command) => isBoundedVerificationCommand(command) && textNamesCommand(source, command));
-    const pattern = /(?:^|[\s("'`])((?:npm run [A-Za-z0-9][A-Za-z0-9._:-]*|pnpm [A-Za-z0-9][A-Za-z0-9._:-]*|yarn [A-Za-z0-9][A-Za-z0-9._:-]*|cargo (?:test|check)|go test(?: \.\/\.\.\.)?|make [A-Za-z0-9][A-Za-z0-9._-]*|python3? -m [A-Za-z0-9_][\w.]*(?: [\w./=:-]*[./=-][\w./=:-]*)*|pytest(?: [\w./=-]*[./=-][\w./=-]*)?|python3? [\w./-]+\.py(?: [\w./=:-]*[./=-][\w./=:-]*)*|(?:\.\/gradlew|gradle|\.\/mvnw|mvn) test|Rscript tests\/testthat\.R|Rscript -e testthat::test_local\(\)))(?=$|[\s"'`),.;:])/g;
+    const pattern = /(?:^|[\s("'`])((?:npm run [A-Za-z0-9][A-Za-z0-9._:-]*|pnpm [A-Za-z0-9][A-Za-z0-9._:-]*|yarn [A-Za-z0-9][A-Za-z0-9._:-]*|cargo (?:test|check|clippy)|go test(?: \.\/\.\.\.)?|make [A-Za-z0-9][A-Za-z0-9._-]*|python3? -m [A-Za-z0-9_][\w.]*(?: [\w./=:-]*[./=-][\w./=:-]*)*|pytest(?: [\w./=-]*[./=-][\w./=-]*)?|python3? [\w./-]+\.py(?: [\w./=:-]*[./=-][\w./=:-]*)*|(?:\.\/gradlew|gradle|\.\/mvnw|mvn) test|Rscript tests\/testthat\.R|Rscript -e testthat::test_local\(\)))(?=$|[\s"'`),.;:])/g;
     const mentions = [...new Set([...source.matchAll(pattern)].map((match) => match[1]))]
         .filter((mention) => isBoundedVerificationCommand(mention)
         && !verbatim.some((command) => command === mention || command.startsWith(`${mention} `)));

package/dist/execution-class.js

@@ -13,7 +13,10 @@ export function isBoundedVerificationCommand(command) {
     // A `*` is a legal character in a Python argument (`-p test_*.py` is how a repository spells its
     // own gate). Bridge starts a gate with execFile and no shell, so the star stays literal and no
     // expansion can happen. Refusing it only dropped the declaration, with no reason given.
-    return /^(npm run [A-Za-z0-9][A-Za-z0-9._:-]*|pnpm [A-Za-z0-9][A-Za-z0-9._:-]*|yarn [A-Za-z0-9][A-Za-z0-9._:-]*|cargo (test|check)|go test(?: \.\/\.\.\.)?|make [A-Za-z0-9][A-Za-z0-9._-]*|python3? -m [A-Za-z0-9_][\w.]*(?: [\w./=:*-]+)*|pytest(?: [\w./=*-]+)?|python3? [\w./-]+\.py(?: [\w./=:-]+)*|(?:\.\/gradlew|gradle|\.\/mvnw|mvn) test|Rscript tests\/testthat\.R|Rscript -e testthat::test_local\(\))$/.test(command);
+    // Cargo takes flags the same way: acme-sim registered `cargo clippy --all-targets -- -D warnings`
+    // on 2026-09-25, the rule admitted only a bare `cargo test|check`, and five deliveries shipped
+    // clippy failures because the gate was dropped before any attempt could run it.
+    return /^(npm run [A-Za-z0-9][A-Za-z0-9._:-]*|pnpm [A-Za-z0-9][A-Za-z0-9._:-]*|yarn [A-Za-z0-9][A-Za-z0-9._:-]*|cargo (test|check|clippy)(?: [\w./=:-]+)*|go test(?: \.\/\.\.\.)?|make [A-Za-z0-9][A-Za-z0-9._-]*|python3? -m [A-Za-z0-9_][\w.]*(?: [\w./=:*-]+)*|pytest(?: [\w./=*-]+)?|python3? [\w./-]+\.py(?: [\w./=:-]+)*|(?:\.\/gradlew|gradle|\.\/mvnw|mvn) test|Rscript tests\/testthat\.R|Rscript -e testthat::test_local\(\))$/.test(command);
 }
 /** Shell commands each grant authorizes — mapped per driver so they cannot drift. */
 export const branchCreateCommands = [

package/dist/execution.js

@@ -1180,7 +1180,11 @@ async function runAttempt(client, config, driver, workspace, brief, taskId, watc
     // diffing from the requested base would report commits that predate the agent as its work.
     // T138: a rework carries the first revision's resolved start, because its worktree starts at the
     // previous delivery's head. That lets a prose-only rework witness the original pack while still
-    // including any new rework changes. Older contracts fall back to the T136 rule.
+    // including any new rework changes. A conflict rework is different: it is pinned to the live base
+    // tip and starts fresh there, so the control plane sends no carried base and the requested base --
+    // the pinned tip -- is the delivery base. Diffing from the first revision's start would report
+    // every commit the base gained in between as the agent's own work. Older contracts fall back to
+    // the T136 rule.
     const rework = task.delivery_state === "changes_requested" || Boolean(executionContract.prior_head_commit);
     const deliveryBaseCommit = executionContract.delivery_base_commit
         ?? (rework

package/dist/investigation.js

@@ -38,8 +38,9 @@ const budgetSchema = z.object({
 export const investigationAssignmentSchema = z.object({
     id: z.string().uuid(),
     project_id: z.string().uuid(),
-    kind: z.literal("repository"),
-    question: z.string().min(1).max(4_000),
+    /** `conduct` (protocol 10): a Conductor seat turn — the question is the whole packet Conduit wrote. */
+    kind: z.enum(["repository", "conduct"]),
+    question: z.string().min(1).max(64_000),
     grants: z.array(z.string()).default([]),
     budget: budgetSchema.optional().default({}),
     repository_fingerprint: z.string().nullable().optional().default(null),
@@ -294,6 +295,24 @@ export function fitBriefToContract(candidate) {
  * lane wrote prose, a truncated fence, or a field the schema refuses. The failure now names the
  * reason and carries a bounded, redacted tail of what came back.
  */
+/**
+ * A Conductor seat turn's report: its summary and the actions it asks for. Bridge only carries them;
+ * Conduit checks and applies each one when the turn settles.
+ */
+export function parseConductReport(text) {
+    let candidate;
+    try {
+        candidate = parseJsonObjectCandidate(extractAgentReportJsonText(text));
+    }
+    catch {
+        throw new Error(`${UNUSABLE_BRIEF}: no JSON object in the reply. Reply tail: ${redactSecrets(boundedTail(text, UNUSABLE_BRIEF_TAIL_CHARS))}`);
+    }
+    const report = candidate;
+    if (typeof report.summary !== "string" || !report.summary.trim()) {
+        throw new Error(`${UNUSABLE_BRIEF}: the turn report has no summary. Reply tail: ${redactSecrets(boundedTail(text, UNUSABLE_BRIEF_TAIL_CHARS))}`);
+    }
+    return { summary: report.summary.trim().slice(0, 4_000), actions: Array.isArray(report.actions) ? report.actions.slice(0, 12) : [] };
+}
 export function parseInvestigationBrief(text) {
     let candidate;
     try {
@@ -815,10 +834,12 @@ export async function executeNextInvestigation(client, config, workspace, brief,
         // T154: the lane resolves its model the way the authoring lane does. Without it Claude Code ran
         // at its CLI default, which Conduit's /v1 rejects as an unknown alias (hosted-1, 2026-09-10:
         // every verification of the first hosted delivery failed "Unknown model alias: claude-opus-5").
-        // A verification reads and runs commands: the light tier.
-        const selection = await resolveAssignmentModel(driver, config, { risk_level: "low" }, assignment.id, attemptWorkspace, fuel);
+        // A verification reads and runs commands: the light tier. A seat turn plans, writes briefs and
+        // judges deliveries: the deep tier.
+        const conduct = assignment.kind === "conduct";
+        const selection = await resolveAssignmentModel(driver, config, { risk_level: conduct ? "high" : "low" }, assignment.id, attemptWorkspace, fuel);
         const result = await driver.run({
-            prompt: buildInvestigationPrompt(assignment, commit, context),
+            prompt: conduct ? assignment.question : buildInvestigationPrompt(assignment, commit, context),
             workspace: attemptWorkspace,
             ...(selection.model ? { model: selection.model } : {}),
             grants: assignment.grants,
@@ -839,6 +860,20 @@ export async function executeNextInvestigation(client, config, workspace, brief,
             console.error(`Investigation ${assignment.id} failed: ${redactSecrets(message)}`);
             return true;
         }
+        if (conduct) {
+            const report = parseConductReport(result.resultText ?? "");
+            const turnCheck = await verifyObservationOnly({ attemptWorkspace, workspace, commit, fingerprintBefore });
+            if (!turnCheck.ok) {
+                await settle(client, assignment.id, {
+                    lease_token: leaseToken, status: "failed", error: boundedTail(`${turnCheck.error}: ${turnCheck.detail}`, 2_000), retryable: true,
+                });
+                console.error(`Seat turn ${assignment.id} discarded — ${turnCheck.error}: ${turnCheck.detail}`);
+                return true;
+            }
+            await settle(client, assignment.id, { lease_token: leaseToken, status: "completed", result: report });
+            console.log(`Seat turn ${assignment.id} settled with ${report.actions.length} action(s).`);
+            return true;
+        }
         const observed = parseInvestigationBrief(result.resultText ?? "");
         const check = await verifyObservationOnly({ attemptWorkspace, workspace, commit, fingerprintBefore });
         if (!check.ok) {

package/dist/on-shift-apply.js

@@ -8,6 +8,7 @@ import { expandOpsValue } from "./ops.js";
 import { ensureCheckout } from "./checkout.js";
 import { bootstrapManagedWorkspace } from "./workspace-bootstrap.js";
 import { managedWorkspacePath } from "./managed-workspace-path.js";
+import { refreshSourceWorkspace } from "./workspace-refresh.js";
 export { managedWorkspacePath } from "./managed-workspace-path.js";
 function pathsEqual(left, right) {
     return resolve(expandOpsValue(left)) === resolve(expandOpsValue(right));
@@ -32,6 +33,21 @@ export async function switchManagedWorkspace(managedRoot, repositoryUrl, deps =
     if (result === "cloned") {
         console.log(`Cloned ${repositoryUrl} into ${target}`);
         (deps.bootstrapWorkspace ?? bootstrapManagedWorkspace)(target);
+        return target;
+    }
+    // The runner's own refresh follows only the workspace it was started on. A managed checkout it
+    // switches into was never refreshed: acme-sim stayed shallow at a five-day-old main on
+    // 2026-09-25 while every claim read it. Follow origin here, before the claim reads the checkout.
+    // A dirty or diverged checkout is not moved; the attempt worktree refuses a dirty source.
+    const refresh = await refreshSourceWorkspace(target).catch(() => null);
+    if (refresh?.state === "fast_forwarded") {
+        console.log(`Managed workspace ${target} fast-forwarded to origin/${refresh.branch}.`);
+    }
+    else if (refresh?.state === "diverged") {
+        console.error(`Managed workspace ${target} cannot fast-forward: ${refresh.local_commits} local-only commit(s) on ${refresh.branch}. Park or push them.`);
+    }
+    else if (refresh?.state !== "up_to_date") {
+        console.error(`Managed workspace ${target} could not follow origin (dirty tree, detached HEAD, or fetch failed).`);
     }
     return target;
 }

package/dist/preflight.js

@@ -30,7 +30,7 @@ function modelsFingerprint(config) {
     return createHash("sha256").update(parts.join(";")).digest("hex").slice(0, 16);
 }
 // Protocol 9 adds the Bridge-observed driver interface cohort to every preflight lane.
-export const BRIDGE_PROTOCOL_VERSION = 9;
+export const BRIDGE_PROTOCOL_VERSION = 10;
 /** Keep the version identity within the same bound accepted by the heartbeat schema. */
 export const MAX_DRIVER_VERSION_LENGTH = 200;
 /** True for a single, bounded line with no control characters -- a version, not a notice. */

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@miraland-labs/conduit-bridge",
-  "version": "0.16.127",
+  "version": "0.16.131",
   "description": "Conduit Bridge CLI \u2014 join, connect, disconnect, multi-driver lanes, and run Claude Code / Codex / Cursor / OpenCode / Pi / Kiro / Antigravity / Grok Build agents for a Conduit organization",
   "type": "module",
   "bin": {