@miraland-labs/conduit-bridge 0.16.187 → 0.16.188

package/dist/ensure-test-evidence.js

@@ -5,8 +5,9 @@
  */
 import { spawn } from "node:child_process";
 import { createHash } from "node:crypto";
-import { mkdir, mkdtemp, readFile, realpath, rm } from "node:fs/promises";
-import { join } from "node:path";
+import { access, copyFile, mkdir, mkdtemp, readFile, readdir, realpath, rm } from "node:fs/promises";
+import { tmpdir } from "node:os";
+import { join, relative, sep } from "node:path";
 import { untrustedCodeTempRoot, untrustedCodeSpawn, untrustedCodeEnvironment, criterionKey, resolveCriterionReference, signalGroup, STDIO_DRAIN_MS, CHILD_STOP_GRACE_MS, OWN_PROCESS_GROUP, trackProcessGroup, untrackProcessGroup } from "./driver.js";
 import { isBoundedVerificationCommand, isRunnableVerificationCommand } from "./execution-class.js";
 import { workspaceDependenciesMissingFailure } from "./failure-signal.js";
@@ -417,6 +418,190 @@ export async function fetchLockedDependencies(workspace, options = {}) {
         console.error(redactSecrets(`[bridge] cargo fetch --locked exited ${result.code} in ${workspace}: ${result.stderr.trim().split("\n").slice(-10).join("\n")}`));
     return { ran: true, code: result.code };
 }
+const NPM_CI_ARGV = ["ci", "--ignore-scripts", "--no-audit", "--no-fund", "--prefer-offline"];
+/** Root is depth 0. `web/` is depth 1. `packages/<name>/` is depth 2. Nothing deeper. */
+const MAX_PACKAGE_DIRECTORY_DEPTH = 2;
+/** Discovery does not enter these directories. `node_modules` is recorded separately and not entered. */
+const PACKAGE_DISCOVERY_EXCLUDED = new Set([".conduit", ".git", "dist", "target"]);
+/** Package-directory realpath + npm lock sha256 already attempted by this process. */
+const installedLocks = new Set();
+/**
+ * The gate runs without network, so a package the lock pins must already be on disk. Node resolves
+ * from the directory that holds the gate and walks upward: a repository whose JavaScript lives in
+ * `web/` with its own lock, and whose root is not a package, never reaches an install. `npm ci`
+ * fills that directory outside the sandbox and refuses to change the lock. Once per lock file per
+ * process, including a failed install. A failed install does not stop the gate: its own output
+ * names the cause.
+ *
+ * `package-lock.json` and `npm-shrinkwrap.json` are npm locks. A package with only `yarn.lock` or
+ * `pnpm-lock.yaml`, a package with no npm lock, and a package whose `node_modules` git does not
+ * ignore are skipped and logged. Discovery does not enter `.git`, `.conduit`, `dist`, `node_modules`,
+ * or `target`.
+ */
+function runGit(argv, cwd, env = process.env) {
+    return new Promise((resolve) => {
+        let settled = false;
+        let timer;
+        const finish = (code, stdout) => {
+            if (settled)
+                return;
+            settled = true;
+            clearTimeout(timer);
+            resolve({ code, stdout });
+        };
+        const child = spawn("git", argv, { cwd, env, stdio: ["ignore", "pipe", "ignore"] });
+        let stdout = "";
+        child.stdout?.setEncoding("utf8");
+        child.stdout?.on("data", (chunk) => {
+            if (stdout.length < 8192)
+                stdout = `${stdout}${chunk}`.slice(0, 8192);
+        });
+        timer = setTimeout(() => { child.kill("SIGKILL"); finish(124, stdout); }, VERIFICATION_TIMEOUT_MS);
+        child.on("error", () => finish(127, stdout));
+        child.on("close", (code) => finish(code ?? 1, stdout));
+    });
+}
+function gitCommandEnv() {
+    const env = { ...process.env };
+    delete env.GIT_DIR;
+    delete env.GIT_WORK_TREE;
+    delete env.GIT_INDEX_FILE;
+    return env;
+}
+/** A directory outside `workspace`, so a crash cannot leave a probe inside the attempt tree. */
+function probeParentDirectory(workspace) {
+    for (const candidate of [tmpdir(), "/tmp", "/var/tmp"]) {
+        const rel = relative(workspace, candidate);
+        if (rel === ".." || rel.startsWith(`..${sep}`))
+            return candidate;
+    }
+    return tmpdir();
+}
+async function copyGitignoreIfPresent(from, to) {
+    try {
+        await copyFile(join(from, ".gitignore"), join(to, ".gitignore"));
+        return true;
+    }
+    catch (error) {
+        return error.code === "ENOENT";
+    }
+}
+/**
+ * A directory-only rule (`node_modules/`) matches only a directory on disk. The probe directory is
+ * created in a temporary work tree, never in the attempt tree. `-c core.excludesFile=/dev/null`
+ * keeps the repository's own ignore rules and drops the runner's global excludes, so a personal
+ * ignore cannot hide a node_modules git would track.
+ */
+async function nodeModulesIsGitIgnored(directory) {
+    const env = gitCommandEnv();
+    const located = await runGit(["rev-parse", "--show-toplevel", "--absolute-git-dir", "--show-prefix"], directory, env);
+    if (located.code !== 0)
+        return false;
+    const lines = located.stdout.split("\n");
+    const toplevel = lines[0]?.trim() ?? "";
+    const gitDir = lines[1]?.trim() ?? "";
+    const prefix = lines[2] ?? "";
+    if (!toplevel || !gitDir)
+        return false;
+    const temp = await mkdtemp(join(probeParentDirectory(directory), "conduit-npm-ignore-"));
+    try {
+        let source = toplevel;
+        let target = temp;
+        if (!await copyGitignoreIfPresent(source, target))
+            return false;
+        for (const segment of prefix.split("/").filter(Boolean)) {
+            source = join(source, segment);
+            target = join(target, segment);
+            await mkdir(target, { recursive: true });
+            if (!await copyGitignoreIfPresent(source, target))
+                return false;
+        }
+        await mkdir(join(target, "node_modules"));
+        const relativeDir = prefix === "" || prefix.endsWith("/") ? prefix : `${prefix}/`;
+        const checked = await runGit([
+            "--git-dir", gitDir, "--work-tree", temp, "-c", "core.excludesFile=/dev/null",
+            "check-ignore", "-q", "--", `${relativeDir}node_modules`,
+        ], temp, env);
+        return checked.code === 0;
+    }
+    finally {
+        await rm(temp, { recursive: true, force: true });
+    }
+}
+async function scanPackageDirectories(root) {
+    const packages = [];
+    const skipped = [];
+    const walk = async (directory, depth) => {
+        if (await readFile(join(directory, "package.json")).then(() => true, () => false))
+            packages.push(directory);
+        if (depth >= MAX_PACKAGE_DIRECTORY_DEPTH)
+            return;
+        const entries = await readdir(directory, { withFileTypes: true }).catch(() => []);
+        for (const entry of entries) {
+            if (!entry.isDirectory())
+                continue;
+            const child = join(directory, entry.name);
+            if (entry.name === "node_modules") {
+                skipped.push({ directory: child, reason: "package is under node_modules" });
+                continue;
+            }
+            if (PACKAGE_DISCOVERY_EXCLUDED.has(entry.name))
+                continue;
+            await walk(child, depth + 1);
+        }
+    };
+    await walk(root, 0);
+    packages.sort();
+    return { packages, skipped };
+}
+/** npm uses `npm-shrinkwrap.json` when both lock files exist. */
+async function readNpmLock(directory) {
+    const shrink = await readFile(join(directory, "npm-shrinkwrap.json")).catch(() => null);
+    if (shrink)
+        return shrink;
+    return readFile(join(directory, "package-lock.json")).catch(() => null);
+}
+async function missingNpmLockReason(directory) {
+    const yarn = await access(join(directory, "yarn.lock")).then(() => true, () => false);
+    const pnpm = await access(join(directory, "pnpm-lock.yaml")).then(() => true, () => false);
+    if (yarn && pnpm)
+        return "yarn.lock and pnpm-lock.yaml are not npm installs";
+    if (yarn)
+        return "yarn.lock is not an npm install";
+    if (pnpm)
+        return "pnpm-lock.yaml is not an npm install";
+    return "no package-lock.json or npm-shrinkwrap.json";
+}
+export async function installLockedPackages(workspace, options = {}) {
+    const installed = [];
+    const skipped = [];
+    const run = options.run ?? runFetchOutsideSandbox;
+    const scan = await scanPackageDirectories(workspace);
+    skipped.push(...scan.skipped);
+    for (const directory of scan.packages) {
+        const lock = await readNpmLock(directory);
+        if (!lock) {
+            skipped.push({ directory, reason: await missingNpmLockReason(directory) });
+            continue;
+        }
+        const key = `${await realpath(directory)}\0${createHash("sha256").update(lock).digest("hex")}`;
+        if (installedLocks.has(key))
+            continue;
+        if (!await nodeModulesIsGitIgnored(directory)) {
+            skipped.push({ directory, reason: "node_modules is not git-ignored" });
+            continue;
+        }
+        const result = await run("npm", [...NPM_CI_ARGV], directory);
+        installedLocks.add(key);
+        if (result.code !== 0)
+            console.error(redactSecrets(`[bridge] npm ci --ignore-scripts --no-audit --no-fund --prefer-offline exited ${result.code} in ${directory}: ${result.stderr.trim().split("\n").slice(-10).join("\n")}`));
+        installed.push({ directory, code: result.code });
+    }
+    skipped.sort((left, right) => left.directory < right.directory ? -1 : left.directory > right.directory ? 1 : 0);
+    for (const skip of skipped)
+        console.error(redactSecrets(`[bridge] npm ci skipped ${skip.directory}: ${skip.reason}`));
+    return { installed, skipped };
+}
 /**
  * The bounded runner every Bridge-run verification uses: the declared command, in the given
  * workspace, with the verification timeout and buffer. A non-zero exit is a result, not a throw.
@@ -486,6 +671,7 @@ export async function runBoundedVerificationCommand(command, workspace, timeoutM
     };
     const output = () => [lines.text().replace(/\n$/, ""), partial.stdout.text(), partial.stderr.text()].filter(Boolean).join("\n");
     await fetchLockedDependencies(workspace);
+    await installLockedPackages(workspace);
     const tempRoot = untrustedCodeTempRoot(workspace);
     await mkdir(tempRoot, { recursive: true });
     const scratchHome = await mkdtemp(join(tempRoot, "gate-home-"));

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@miraland-labs/conduit-bridge",
-  "version": "0.16.187",
+  "version": "0.16.188",
   "description": "Conduit Bridge CLI — join, connect, disconnect, multi-driver lanes, and run Claude Code / Codex / Cursor / OpenCode / Pi / Kiro / Antigravity / Grok Build agents for a Conduit organization",
   "type": "module",
   "bin": {