@miraland-labs/conduit-bridge 0.16.180 → 0.16.182

package/dist/driver.js

@@ -2038,7 +2038,8 @@ export function buildUntrustedCodeSpawn(input, host) {
             ...(host.toolchainRead ?? []).flatMap((path) => ["--ro-bind", path, path]),
             ...(rootWorkspace ? ["--bind", input.cwd, input.cwd] : []),
             ...(hidden ? ["--tmpfs", hidden] : []),
-            ...writable.filter((path) => !rootWorkspace || path !== input.cwd).flatMap((path) => ["--bind", path, path]), "--chdir", input.cwd, "--clearenv",
+            ...writable.filter((path) => !rootWorkspace || path !== input.cwd).flatMap((path) => ["--bind", path, path]),
+            ...(host.ephemeral ?? []).flatMap((path) => ["--tmpfs", path]), "--chdir", input.cwd, "--clearenv",
             ...Object.entries(input.env).flatMap(([key, value]) => value === undefined ? [] : ["--setenv", key, value]),
             "--", input.command, ...input.argv];
         return { ...direct, command: host.executable ?? "/usr/bin/bwrap", argv };
@@ -2060,7 +2061,7 @@ export function buildUntrustedCodeSpawn(input, host) {
     }
     const metadata = [...ancestors].map((path) => `(literal ${JSON.stringify(path)})`).join(" ");
     const profile = `(version 1) (allow default) (deny network*) (deny file-write*)
-    (allow file-write* ${subpaths(writable)}) (allow file-write-data (literal "/dev/null"))
+    (allow file-write* ${subpaths([...writable, ...(host.ephemeral ?? [])])}) (allow file-write-data (literal "/dev/null"))
     (deny file-read* (subpath ${JSON.stringify(host.home)}) ${hidden ? `(subpath ${JSON.stringify(hidden)})` : ""})
     (allow file-read* ${subpaths(readPaths)}) (allow file-read-metadata ${metadata})`;
     return { ...direct, command: host.executable ?? "/usr/bin/sandbox-exec", argv: ["-p", profile, "--", input.command, ...input.argv] };
@@ -2085,6 +2086,26 @@ async function sandboxRepositoryPaths(cwd) {
         return {};
     }
 }
+/**
+ * A worktree resolves Node packages upward into the source repository's install, and vite, babel
+ * and their kin write caches beside those packages (`.vite-temp`, `.cache`). The install stays
+ * read-only; those two directories are tmpfs, so a gate can start and the next attempt never sees
+ * what this one wrote. bwrap mounts tmpfs only on an existing directory, so they are created here.
+ */
+async function sandboxNodeScratch(cwd, sourceRepository) {
+    if (!sourceRepository || sourceRepository === cwd)
+        return [];
+    const install = join(sourceRepository, "node_modules");
+    if (!(await stat(install).then((entry) => entry.isDirectory(), () => false)))
+        return [];
+    const scratch = [];
+    for (const name of [".vite-temp", ".cache"]) {
+        const path = join(install, name);
+        await mkdir(path, { recursive: true });
+        scratch.push(await realpath(path));
+    }
+    return scratch;
+}
 /** A delivered instrument's nested runs stay inside its already isolated scratch directory. */
 export function untrustedCodeTempRoot(workspace) {
     return process.env.HOME && process.env.TMPDIR === join(process.env.HOME, "tmp")
@@ -2195,8 +2216,9 @@ export async function untrustedCodeSpawn(input) {
     // Installed toolchains are read like PATH directories; a gate never rewrites rustc for the next attempt.
     if (input.env.RUSTUP_HOME && existsSync(input.env.RUSTUP_HOME))
         toolchainRead.push(await realpath(input.env.RUSTUP_HOME));
+    const repository = await sandboxRepositoryPaths(cwd);
     return buildUntrustedCodeSpawn({ ...input, command, cwd, env, writable }, {
-        ...sandbox, home: await realpath(homedir()), toolchainRead, ...await sandboxRepositoryPaths(cwd),
+        ...sandbox, home: await realpath(homedir()), toolchainRead, ...repository, ephemeral: await sandboxNodeScratch(cwd, repository.sourceRepository),
     });
 }
 const sandboxExecFile = promisify(execFile);

package/dist/failure-signal.js

@@ -372,6 +372,20 @@ export const VERIFICATION_FAILS_ON_BASE = "verification fails on the base commit
  * red commit.
  */
 export const WORKSPACE_DEPENDENCIES_MISSING_PATTERN = /(?:^|\n)\s*(?:\/(?:usr\/)?bin\/)?(?:ba|z|da)?sh:\s*(?:(?:\d+:\s*)?[^:\n]{1,120}:\s*(?:command\s+)?not found|command not found:\s*[^\n]+)\s*(?=\n|$)|(?:^|\n)\s*'[^'\n]+' is not recognized as an internal or external command/im;
+/** A write the toolchain needs that the computer refused before any test ran: the sandbox or disk, not the base commit. */
+export const WORKSPACE_WRITE_REFUSED_PATTERN = /\b(?:EROFS|ENOSPC)\b|read-only file system|no space left on device/i;
+/** CR17e (2026-10-22): vitest could not write its config bundle under the sandboxed install; Bridge held the owner for its own mount. */
+export function workspaceWriteRefusedFailure(detail) {
+    return {
+        code: "workspace_write_refused",
+        class: "environment",
+        disposition: "hold",
+        responsible_party: "conduit",
+        message: "The gate could not start: this computer refused a write the project's toolchain needs.",
+        next_action: "Nothing to repair in the base commit — no test ran. Update Bridge on this computer (or free its disk), then press Try again.",
+        diagnostic_detail: detail,
+    };
+}
 /** The one envelope for a gate whose tool is absent from the checkout, wherever it was noticed. */
 export function workspaceDependenciesMissingFailure(detail) {
     return {
@@ -602,6 +616,9 @@ export function classifyFailureSignal(signal) {
         if (signal.exit_code === 127 || WORKSPACE_DEPENDENCIES_MISSING_PATTERN.test(output)) {
             return workspaceDependenciesMissingFailure([`$ ${command}`, `exit ${signal.exit_code ?? "unknown"}`, output].filter(Boolean).join("\n"));
         }
+        if (WORKSPACE_WRITE_REFUSED_PATTERN.test(output)) {
+            return workspaceWriteRefusedFailure([`$ ${command}`, `exit ${signal.exit_code ?? "unknown"}`, output].filter(Boolean).join("\n"));
+        }
         return {
             code: "verification_red_base",
             class: "contract",

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@miraland-labs/conduit-bridge",
-  "version": "0.16.180",
-  "description": "Conduit Bridge CLI \u2014 join, connect, disconnect, multi-driver lanes, and run Claude Code / Codex / Cursor / OpenCode / Pi / Kiro / Antigravity / Grok Build agents for a Conduit organization",
+  "version": "0.16.182",
+  "description": "Conduit Bridge CLI — join, connect, disconnect, multi-driver lanes, and run Claude Code / Codex / Cursor / OpenCode / Pi / Kiro / Antigravity / Grok Build agents for a Conduit organization",
   "type": "module",
   "bin": {
     "conduit": "dist/cli.js"