@miraland-labs/conduit-bridge 0.16.185 → 0.16.187

package/dist/cli.js

@@ -780,7 +780,12 @@ function startGateRehearsal(workspace, plan) {
     const rehearsalPath = rehearsalWorktreePath(workspace);
     console.log(`Rehearsing the gate in ${workspace}: ${plan.commands.join(", ")}`);
     void createRehearsalWorktree(workspace, plan.commit)
-        .then((path) => runGateRehearsal(path, plan))
+        .then((path) => runGateRehearsal(path, plan, {
+        freshWorkspace: (warmUpSeconds) => {
+            console.log(`Gate warm-up took ${warmUpSeconds} s; measuring again in a fresh worktree`);
+            return createRehearsalWorktree(workspace, plan.commit);
+        },
+    }))
         .then((rehearsal) => { if (rehearsal === "busy")
         console.log("Gate rehearsal deferred: another runner on this computer is rehearsing"); })
         .catch((error) => console.error(`Gate rehearsal failed: ${redactSecrets(error instanceof Error ? error.message : "unknown error")}`))

package/dist/ensure-test-evidence.js

@@ -4,11 +4,13 @@
  * it never substitutes for it.
  */
 import { spawn } from "node:child_process";
-import { mkdir, mkdtemp, rm } from "node:fs/promises";
+import { createHash } from "node:crypto";
+import { mkdir, mkdtemp, readFile, realpath, rm } from "node:fs/promises";
 import { join } from "node:path";
 import { untrustedCodeTempRoot, untrustedCodeSpawn, untrustedCodeEnvironment, criterionKey, resolveCriterionReference, signalGroup, STDIO_DRAIN_MS, CHILD_STOP_GRACE_MS, OWN_PROCESS_GROUP, trackProcessGroup, untrackProcessGroup } from "./driver.js";
 import { isBoundedVerificationCommand, isRunnableVerificationCommand } from "./execution-class.js";
 import { workspaceDependenciesMissingFailure } from "./failure-signal.js";
+import { redactSecrets } from "./secret-redaction.js";
 /** A typed spawn refusal, distinct from a command that ran and failed. */
 export class VerificationCommandUnavailableError extends Error {
     failure;
@@ -381,6 +383,40 @@ export function boundedFailureDetail(command, lines, code, maxChars = FAILURE_DE
     const middle = dropped > 0 ? [...head, marker(dropped), ...tail] : [...head, ...tail];
     return [first, ...middle, last].join("\n");
 }
+const FETCH_STDERR_TAIL_BYTES = 64 * 1024;
+/** Workspace realpath + Cargo.lock sha256 already fetched by this process. */
+const fetchedLocks = new Set();
+/** The runner's own environment: network, the real CARGO_HOME and the PATH that finds cargo. */
+const runFetchOutsideSandbox = (command, argv, cwd) => new Promise((resolve) => {
+    const child = spawn(command, argv, { cwd, env: process.env, stdio: ["ignore", "ignore", "pipe"] });
+    let stderr = "";
+    const timer = setTimeout(() => child.kill("SIGKILL"), VERIFICATION_TIMEOUT_MS);
+    child.stderr?.setEncoding("utf8");
+    child.stderr?.on("data", (chunk) => { stderr = `${stderr}${chunk}`.slice(-FETCH_STDERR_TAIL_BYTES); });
+    child.on("error", (error) => { clearTimeout(timer); resolve({ code: 127, stderr: error.message }); });
+    child.on("close", (code) => { clearTimeout(timer); resolve({ code: code ?? 1, stderr }); });
+});
+/**
+ * CR19 (2026-10-22): the gate runs without network, so every crate the Cargo.lock pins must already
+ * be in CARGO_HOME. `cargo fetch --locked` fills it outside the sandbox; it writes only to CARGO_HOME
+ * and refuses to change the lock. Once per lock file per process: an agent that adds a dependency
+ * changes the lock, and the next gate fetches again. A failed fetch does not stop the gate: its own
+ * output names the cause.
+ */
+export async function fetchLockedDependencies(workspace, options = {}) {
+    const lock = await readFile(join(workspace, "Cargo.lock")).catch(() => null);
+    if (!lock)
+        return { ran: false };
+    const key = `${await realpath(workspace)}\0${createHash("sha256").update(lock).digest("hex")}`;
+    if (fetchedLocks.has(key))
+        return { ran: false };
+    const result = await (options.run ?? runFetchOutsideSandbox)("cargo", ["fetch", "--locked"], workspace);
+    if (result.code === 0)
+        fetchedLocks.add(key);
+    else
+        console.error(redactSecrets(`[bridge] cargo fetch --locked exited ${result.code} in ${workspace}: ${result.stderr.trim().split("\n").slice(-10).join("\n")}`));
+    return { ran: true, code: result.code };
+}
 /**
  * The bounded runner every Bridge-run verification uses: the declared command, in the given
  * workspace, with the verification timeout and buffer. A non-zero exit is a result, not a throw.
@@ -449,6 +485,7 @@ export async function runBoundedVerificationCommand(command, workspace, timeoutM
         partial[stream].append(parts.at(-1));
     };
     const output = () => [lines.text().replace(/\n$/, ""), partial.stdout.text(), partial.stderr.text()].filter(Boolean).join("\n");
+    await fetchLockedDependencies(workspace);
     const tempRoot = untrustedCodeTempRoot(workspace);
     await mkdir(tempRoot, { recursive: true });
     const scratchHome = await mkdtemp(join(tempRoot, "gate-home-"));

package/dist/failure-signal.js

@@ -374,6 +374,8 @@ export const VERIFICATION_FAILS_ON_BASE = "verification fails on the base commit
 export const WORKSPACE_DEPENDENCIES_MISSING_PATTERN = /(?:^|\n)\s*(?:\/(?:usr\/)?bin\/)?(?:ba|z|da)?sh:\s*(?:(?:\d+:\s*)?[^:\n]{1,120}:\s*(?:command\s+)?not found|command not found:\s*[^\n]+)\s*(?=\n|$)|(?:^|\n)\s*'[^'\n]+' is not recognized as an internal or external command/im;
 /** A write the toolchain needs that the computer refused before any test ran: the sandbox or disk, not the base commit. */
 export const WORKSPACE_WRITE_REFUSED_PATTERN = /\b(?:EROFS|ENOSPC)\b|read-only file system|no space left on device/i;
+/** CR19 (2026-10-22): cargo inside the no-network sandbox tried to download a crate the shared cache lacks; the gate never tested the base. */
+export const WORKSPACE_FETCH_REFUSED_PATTERN = /Could not resolve host|failed to download from|Temporary failure in name resolution|Network is unreachable|unable to get packages from source/i;
 /** CR17e (2026-10-22): vitest could not write its config bundle under the sandboxed install; Bridge held the owner for its own mount. */
 export function workspaceWriteRefusedFailure(detail) {
     return {
@@ -613,7 +615,7 @@ export function classifyFailureSignal(signal) {
         // base commit. It is the computer's checkout that lacks a tool — an environment Hold that
         // clears when the workspace is bootstrapped, not a contract Hold on the author that never
         // clears. runner-2's first claim (2026-09-15) sat on the author for a missing `node_modules`.
-        if (signal.exit_code === 127 || WORKSPACE_DEPENDENCIES_MISSING_PATTERN.test(output)) {
+        if (signal.exit_code === 127 || WORKSPACE_DEPENDENCIES_MISSING_PATTERN.test(output) || WORKSPACE_FETCH_REFUSED_PATTERN.test(output)) {
             return workspaceDependenciesMissingFailure([`$ ${command}`, `exit ${signal.exit_code ?? "unknown"}`, output].filter(Boolean).join("\n"));
         }
         if (WORKSPACE_WRITE_REFUSED_PATTERN.test(output)) {

package/dist/preflight.js

@@ -7,7 +7,8 @@ import { dirname, join } from "node:path";
 import { promisify } from "node:util";
 import { buildWorkspaceBrief, normalizeRepositoryUrl } from "./brief.js";
 import { bridgeConfigDirectory } from "./config.js";
-import { runBoundedVerificationCommand, verificationEvidenceCommands } from "./ensure-test-evidence.js";
+import { runBoundedVerificationCommand, VERIFICATION_TIMEOUT_MS, verificationEvidenceCommands } from "./ensure-test-evidence.js";
+import { lockfileDigest } from "./execution-facts.js";
 import { resolveAgentTimeout, resolveMaxTurns } from "./execution-budget.js";
 import { hasAntigravityLogin, hasClaudeLogin, hasGrokLogin, hasOpenAiLogin, hasOpenCodeLogin, driverExecutable, readSignInStatus, } from "./driver.js";
 import { laneQuota, laneTierBindings, localFuelOnlyDriver, onlineDriverIds, resolveDriverFuel, supportsReadOnlyDiagnosis } from "./drivers.js";
@@ -315,18 +316,29 @@ async function readGateRehearsals(statePath) {
         return {};
     }
 }
+/**
+ * The rehearsal's own limit. The first run after a dependency change can compile a whole dependency
+ * tree: on 2026-10-22 acme-sim's registry crates took more than ten minutes, the attempt limit
+ * stopped the rehearsal mid-compile, the shared target directory stayed cold, and the next attempt
+ * stopped at the same limit before any agent started. The rehearsal absorbs that warm-up.
+ */
+export const REHEARSAL_TIMEOUT_MS = 3_600_000;
 /** UTC calendar day: a push to main costs no run, and a new day measures the cache again. */
 function rehearsalDay(at) {
     return new Date(at).toISOString().slice(0, 10);
 }
-/** The last rehearsal of this workspace's repository, and the gate to run when one is due today. */
+/**
+ * The last rehearsal of this workspace's repository, and the gate to run when one is due: once a
+ * day, and again when the workspace's lockfiles change, because new dependencies need a new warm-up.
+ */
 export async function planGateRehearsal(brief, options = {}) {
     const commands = verificationEvidenceCommands(brief.verification, brief.declared_verification, null);
     if (!brief.repository || !brief.base_commit || !commands.length)
         return { report: null, due: null };
     const repository = normalizeRepositoryUrl(brief.repository);
     const stored = (await readGateRehearsals(options.statePath ?? gateRehearsalStatePath()))[repository] ?? null;
-    const digest = createHash("sha256").update(commands.join("\n")).digest("hex").slice(0, 16);
+    const lockfiles = options.workspace ? await lockfileDigest(options.workspace) : null;
+    const digest = createHash("sha256").update(commands.join("\n")).update(lockfiles ?? "").digest("hex").slice(0, 16);
     const day = rehearsalDay((options.now ?? Date.now)());
     if (stored && stored.day === day && stored.digest === digest)
         return { report: stored.rehearsal, due: null };
@@ -342,7 +354,7 @@ export async function planGateRehearsals(checkouts, options = {}) {
     const seen = new Set();
     let due = null;
     for (const checkout of checkouts) {
-        const planned = await planGateRehearsal(checkout.brief, options);
+        const planned = await planGateRehearsal(checkout.brief, { ...options, workspace: checkout.workspace });
         const repository = planned.report?.repository ?? planned.due?.repository;
         if (!repository || seen.has(repository))
             continue;
@@ -429,13 +441,36 @@ async function rehearseGate(workspace, plan, options) {
     const now = options.now ?? Date.now;
     const run = options.runCommand ?? runBoundedVerificationCommand;
     const commands = [];
+    let cwd = workspace;
     for (const command of plan.commands) {
         const started = now();
         // A command that cannot start measured nothing; the dry run skips it the same way.
-        const result = await run(command, workspace).catch(() => null);
+        const result = await run(command, cwd, REHEARSAL_TIMEOUT_MS).catch(() => null);
         if (!result)
             continue;
-        commands.push({ command, seconds: Math.round((now() - started) / 1_000), exit_code: result.code, timed_out: result.timedOut === true });
+        const elapsed = now() - started;
+        const seconds = Math.round(elapsed / 1_000);
+        if (result.code !== 0 || result.timedOut === true || elapsed <= VERIFICATION_TIMEOUT_MS) {
+            commands.push({ command, seconds, exit_code: result.code, timed_out: result.timedOut === true });
+            continue;
+        }
+        // The pass fit only the rehearsal's limit: it was a warm-up. Measure once more, in a fresh
+        // checkout with the attempt's limit, so the report shows what an attempt will see.
+        if (options.freshWorkspace)
+            cwd = await options.freshWorkspace(seconds);
+        const again = now();
+        const second = await run(command, cwd, VERIFICATION_TIMEOUT_MS).catch(() => null);
+        if (!second) {
+            commands.push({ command, seconds, exit_code: result.code, timed_out: false });
+            continue;
+        }
+        commands.push({
+            command,
+            seconds: Math.round((now() - again) / 1_000),
+            exit_code: second.code,
+            timed_out: second.timedOut === true,
+            warm_up_seconds: seconds,
+        });
     }
     const at = now();
     const rehearsal = commands.length

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@miraland-labs/conduit-bridge",
-  "version": "0.16.185",
+  "version": "0.16.187",
   "description": "Conduit Bridge CLI — join, connect, disconnect, multi-driver lanes, and run Claude Code / Codex / Cursor / OpenCode / Pi / Kiro / Antigravity / Grok Build agents for a Conduit organization",
   "type": "module",
   "bin": {