@miraland-labs/conduit-bridge 0.16.151 → 0.16.153

package/dist/driver.js

@@ -1990,6 +1990,11 @@ export function boundedEnvironment(fuel, fuelSource = "conduit", extraEnv) {
     // machines that only have network access through a proxy.
     const allowed = ["PATH", "HOME", "USER", "LOGNAME", "SHELL", "TMPDIR", "TMP", "TEMP", "LANG", "LC_ALL", "TERM", "NO_COLOR", "FORCE_COLOR",
         "HTTP_PROXY", "HTTPS_PROXY", "NO_PROXY", "ALL_PROXY", "http_proxy", "https_proxy", "no_proxy", "SSL_CERT_FILE", "NODE_EXTRA_CA_CERTS",
+        // The machine's Rust toolchain and build cache. Without CARGO_TARGET_DIR an agent compiled every
+        // dependency cold in its worktree, so no `cargo test` it started finished (acme-sim SV1b, 2026-10-10);
+        // CARGO_PROFILE_* keeps its build identical to the gate's, so the gate reuses what the agent built.
+        "CARGO_HOME", "RUSTUP_HOME", "CARGO_TARGET_DIR",
+        ...Object.keys(process.env).filter((name) => name.startsWith("CARGO_PROFILE_")),
         ...(fuelSource === "local" ? LOCAL_VENDOR_ENV : [])];
     const env = Object.fromEntries(allowed.flatMap((name) => process.env[name] === undefined ? [] : [[name, process.env[name]]]));
     if (fuelSource === "conduit" && fuel) {

package/dist/execution.js

@@ -524,7 +524,10 @@ export function buildDiagnosticPrompt(input) {
         ...(acceptance.length ? ["", `APPROVED ACCEPTANCE CRITERIA\n${acceptance.map((item) => `- ${item}`).join("\n")}`] : []),
         ...(changeScope.length ? ["", `APPROVED CHANGE SCOPE\n${changeScope.map((item) => `- ${item}`).join("\n")}`] : []),
         ...(decisions.length ? ["", `OWNER DECISIONS\n${decisions.map((item) => `- ${item.question}: ${item.decision}`).join("\n")}`] : []),
-        ...(input.verificationCommands.length ? ["", `BOUNDED VERIFICATION COMMANDS\n${input.verificationCommands.map((item) => `- ${item}`).join("\n")}`] : []),
+        // The next authoring agent's shell accepts these commands and git, nothing else. A brief that
+        // prescribes another command (SV1b: `cargo run … > openapi.json`) sends that run into the same failure.
+        ...(input.verificationCommands.length ? ["", `BOUNDED VERIFICATION COMMANDS\n${input.verificationCommands.map((item) => `- ${item}`).join("\n")}`,
+            "The next authoring agent can edit files, but its shell accepts only these commands and git. fix_direction must not tell it to run any other command."] : []),
         ...(gate ? ["", `GATE — Bridge re-runs \`${gate}\` after the next run; the agent cannot change or replace it.`
                 + " A fix that needs a file outside the APPROVED CHANGE SCOPE is still a grounded diagnosis."
                 + " Answer confident:true and write the full repository path of each such file in fix_direction. Conductor makes it a scope decision."

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@miraland-labs/conduit-bridge",
-  "version": "0.16.151",
+  "version": "0.16.153",
   "description": "Conduit Bridge CLI \u2014 join, connect, disconnect, multi-driver lanes, and run Claude Code / Codex / Cursor / OpenCode / Pi / Kiro / Antigravity / Grok Build agents for a Conduit organization",
   "type": "module",
   "bin": {