@miraland-labs/conduit-bridge 0.16.180 → 0.16.181

package/dist/driver.js

@@ -2038,7 +2038,8 @@ export function buildUntrustedCodeSpawn(input, host) {
             ...(host.toolchainRead ?? []).flatMap((path) => ["--ro-bind", path, path]),
             ...(rootWorkspace ? ["--bind", input.cwd, input.cwd] : []),
             ...(hidden ? ["--tmpfs", hidden] : []),
-            ...writable.filter((path) => !rootWorkspace || path !== input.cwd).flatMap((path) => ["--bind", path, path]), "--chdir", input.cwd, "--clearenv",
+            ...writable.filter((path) => !rootWorkspace || path !== input.cwd).flatMap((path) => ["--bind", path, path]),
+            ...(host.ephemeral ?? []).flatMap((path) => ["--tmpfs", path]), "--chdir", input.cwd, "--clearenv",
             ...Object.entries(input.env).flatMap(([key, value]) => value === undefined ? [] : ["--setenv", key, value]),
             "--", input.command, ...input.argv];
         return { ...direct, command: host.executable ?? "/usr/bin/bwrap", argv };
@@ -2060,7 +2061,7 @@ export function buildUntrustedCodeSpawn(input, host) {
     }
     const metadata = [...ancestors].map((path) => `(literal ${JSON.stringify(path)})`).join(" ");
     const profile = `(version 1) (allow default) (deny network*) (deny file-write*)
-    (allow file-write* ${subpaths(writable)}) (allow file-write-data (literal "/dev/null"))
+    (allow file-write* ${subpaths([...writable, ...(host.ephemeral ?? [])])}) (allow file-write-data (literal "/dev/null"))
     (deny file-read* (subpath ${JSON.stringify(host.home)}) ${hidden ? `(subpath ${JSON.stringify(hidden)})` : ""})
     (allow file-read* ${subpaths(readPaths)}) (allow file-read-metadata ${metadata})`;
     return { ...direct, command: host.executable ?? "/usr/bin/sandbox-exec", argv: ["-p", profile, "--", input.command, ...input.argv] };
@@ -2085,6 +2086,26 @@ async function sandboxRepositoryPaths(cwd) {
         return {};
     }
 }
+/**
+ * A worktree resolves Node packages upward into the source repository's install, and vite, babel
+ * and their kin write caches beside those packages (`.vite-temp`, `.cache`). The install stays
+ * read-only; those two directories are tmpfs, so a gate can start and the next attempt never sees
+ * what this one wrote. bwrap mounts tmpfs only on an existing directory, so they are created here.
+ */
+async function sandboxNodeScratch(cwd, sourceRepository) {
+    if (!sourceRepository || sourceRepository === cwd)
+        return [];
+    const install = join(sourceRepository, "node_modules");
+    if (!(await stat(install).then((entry) => entry.isDirectory(), () => false)))
+        return [];
+    const scratch = [];
+    for (const name of [".vite-temp", ".cache"]) {
+        const path = join(install, name);
+        await mkdir(path, { recursive: true });
+        scratch.push(await realpath(path));
+    }
+    return scratch;
+}
 /** A delivered instrument's nested runs stay inside its already isolated scratch directory. */
 export function untrustedCodeTempRoot(workspace) {
     return process.env.HOME && process.env.TMPDIR === join(process.env.HOME, "tmp")
@@ -2195,8 +2216,9 @@ export async function untrustedCodeSpawn(input) {
     // Installed toolchains are read like PATH directories; a gate never rewrites rustc for the next attempt.
     if (input.env.RUSTUP_HOME && existsSync(input.env.RUSTUP_HOME))
         toolchainRead.push(await realpath(input.env.RUSTUP_HOME));
+    const repository = await sandboxRepositoryPaths(cwd);
     return buildUntrustedCodeSpawn({ ...input, command, cwd, env, writable }, {
-        ...sandbox, home: await realpath(homedir()), toolchainRead, ...await sandboxRepositoryPaths(cwd),
+        ...sandbox, home: await realpath(homedir()), toolchainRead, ...repository, ephemeral: await sandboxNodeScratch(cwd, repository.sourceRepository),
     });
 }
 const sandboxExecFile = promisify(execFile);

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@miraland-labs/conduit-bridge",
-  "version": "0.16.180",
-  "description": "Conduit Bridge CLI \u2014 join, connect, disconnect, multi-driver lanes, and run Claude Code / Codex / Cursor / OpenCode / Pi / Kiro / Antigravity / Grok Build agents for a Conduit organization",
+  "version": "0.16.181",
+  "description": "Conduit Bridge CLI — join, connect, disconnect, multi-driver lanes, and run Claude Code / Codex / Cursor / OpenCode / Pi / Kiro / Antigravity / Grok Build agents for a Conduit organization",
   "type": "module",
   "bin": {
     "conduit": "dist/cli.js"