@miraland-labs/conduit-bridge 0.16.195 → 0.16.197

package/dist/cli.js

@@ -20,7 +20,7 @@ import { BOOTSTRAP_RESULTS, buildSovereignExecutionFacts, workspaceIsClean } fro
 import { ensureCheckout } from "./checkout.js";
 import { buildOnShiftIntentProof, managedWorkspacePath, maybeApplyOnShiftIntent } from "./on-shift-apply.js";
 import { expandOpsValue, loadOpsEnv, OPS_VERBS, runOps } from "./ops.js";
-import { assignmentsPending, pumpExecutionSlots, renewLeases } from "./execution.js";
+import { pumpExecutionSlots, renewLeases } from "./execution.js";
 import { createRehearsalWorktree, rehearsalWorktreePath, removeAttemptWorktree } from "./attempt-worktree.js";
 import { applyRunnerToolPath, installRunnerService, uninstallRunnerService } from "./service.js";
 import { attemptsActiveOnComputer, BRIDGE_PROTOCOL_VERSION, cachedBridgePreflight, gateRehearsalLockHeld, planGateRehearsals, PREFLIGHT_CACHE_TTL_MS, runGateRehearsal, unavailableWorkspacePreflight } from "./preflight.js";
@@ -667,24 +667,21 @@ async function runner() {
                 await heartbeat(client, config, workspace, currentBrief, preflight, intentProof, bootstrapResult);
             }
             await renewLeases(client, config);
-            // Dispatched work outranks a rehearsal already running, and so does an attempt on this
-            // computer (this runner or another). Stop it with nothing recorded, release the lock, and
-            // claim on this same cycle. The rehearsal stays due.
-            if (gateRehearsalRunning && (attemptsActiveOnComputer() || await assignmentsPending(client))) {
+            // Only an active attempt interrupts a rehearsal. Waiting work takes the next cycle.
+            if (gateRehearsalRunning && attemptsActiveOnComputer()) {
                 gateRehearsalAbort?.abort();
                 await gateRehearsalDone;
             }
-            // Another runner on this computer rehearsing its gate, or any runner with an attempt in
-            // flight: claim as usual, rehearse on a later cycle. An assignment already waiting is
-            // claimed below; this cycle does not start a rehearsal.
+            // Another runner with an attempt in flight takes precedence over a new rehearsal.
             if (workspace && onlineDriverIds(config).length && !gateRehearsalRunning && rehearsalPlan?.due
                 && running.size === 0 && Object.keys(config.activeAttempts).length === 0 && !gateRehearsalLockHeld()
-                && !attemptsActiveOnComputer()
-                && !await assignmentsPending(client)) {
+                && !attemptsActiveOnComputer()) {
+                console.log(`Claim deferred for gate rehearsal in ${rehearsalPlan.due.workspace}`);
                 startGateRehearsal(rehearsalPlan.due.workspace, rehearsalPlan.due.plan);
             }
-            // No claim while the gate rehearses: the rehearsal measures the gate alone, never beside an attempt.
-            if (workspace && onlineDriverIds(config).length && !gateRehearsalRunning) {
+            // Idle computers rehearse before claiming. Active attempts keep their execution slots pumping.
+            if (workspace && onlineDriverIds(config).length && !gateRehearsalRunning
+                && (!rehearsalPlan?.due || running.size > 0 || Object.keys(config.activeAttempts).length > 0 || attemptsActiveOnComputer())) {
                 // Read the workspace again, then publish it. The last brief stands if the read fails.
                 const publishWorkspaceState = async (options = {}) => {
                     // Not while an investigation runs: its observation-only check compares the source checkout
@@ -740,7 +737,7 @@ async function runner() {
         await new Promise((resolveSleep) => setTimeout(resolveSleep, intervalMs));
     }
 }
-/** True while the gate rehearsal runs in the background. A dispatched assignment aborts it, then this cycle claims. */
+/** True while the gate rehearsal runs in the background. Waiting assignments do not interrupt it. */
 let gateRehearsalRunning = false;
 let gateRehearsalAbort = null;
 let gateRehearsalDone = Promise.resolve();
@@ -809,7 +806,7 @@ function startGateRehearsal(workspace, plan) {
         else if (rehearsal === null && attemptsActiveOnComputer())
             console.log("Gate rehearsal stopped: an attempt is in flight on this computer");
         else if (abort.signal.aborted)
-            console.log("Gate rehearsal stopped: an assignment is waiting");
+            console.log("Gate rehearsal stopped: an attempt is in flight on this computer");
     })
         .catch((error) => console.error(`Gate rehearsal failed: ${redactSecrets(error instanceof Error ? error.message : "unknown error")}`))
         .finally(async () => {

package/dist/investigation.js

@@ -156,16 +156,20 @@ export function buildInvestigationPrompt(assignment, commit, context) {
  * verdict per criterion is the product; prose without verdicts is an unusable brief.
  */
 export function buildDeliveryVerificationPrompt(assignment, commit, context) {
-    // The lane's shell holds only the registered commands, so it cannot run git itself. Bridge ran the
-    // stat; the lane reads the named files at the pinned commit.
+    // Bridge supplies the stat; OS-sandboxed lanes can also read through their read-only shell.
+    const osSandbox = context.boundedBy === "os_sandbox";
+    const readFiles = osSandbox
+        ? `Read the tree with read-only shell commands such as cat, sed, ls, grep, and git show ${commit}:<path> at the pinned commit.`
+        : "Read the changed files that matter to each criterion at the pinned commit; you cannot run git.";
     const stat = context.diffStat?.trim() ?? "";
     const cut = stat.length > DIFF_STAT_MAX_CHARS;
     const diff = stat
-        ? `CHANGE SUMMARY (git diff --stat ${assignment.base_commit ?? "base"}..${commit}, computed by Bridge)\n${cut ? `${stat.slice(0, DIFF_STAT_MAX_CHARS)}\n[cut at ${DIFF_STAT_MAX_CHARS} characters]` : stat}\nRead the changed files that matter to each criterion at the pinned commit; you cannot run git.`
-        : "No change summary is available: read the files each criterion names at the pinned commit; you cannot run git.";
+        ? `CHANGE SUMMARY (git diff --stat ${assignment.base_commit ?? "base"}..${commit}, computed by Bridge)\n${cut ? `${stat.slice(0, DIFF_STAT_MAX_CHARS)}\n[cut at ${DIFF_STAT_MAX_CHARS} characters]` : stat}\n${readFiles}`
+        : osSandbox ? `No change summary is available: read the files each criterion names at the pinned commit. ${readFiles}`
+            : "No change summary is available: read the files each criterion names at the pinned commit; you cannot run git.";
     const commands = context.verificationCommands.length
-        ? `REGISTERED COMMANDS (the only commands your shell accepts)\n${context.verificationCommands.map((command) => `- ${command}`).join("\n")}`
-        : "REGISTERED COMMANDS\n- none: this repository registers no verification command, so judge from the files only";
+        ? `${osSandbox ? "REGISTERED COMMANDS (the only gate commands)" : "REGISTERED COMMANDS (the only commands your shell accepts)"}\n${context.verificationCommands.map((command) => `- ${command}`).join("\n")}`
+        : `${osSandbox ? "REGISTERED COMMANDS (the only gate commands)" : "REGISTERED COMMANDS"}\n- none: this repository registers no verification command, so judge from the files only`;
     const keys = (assignment.brief_keys ?? []).map((key) => key.trim()).filter(Boolean);
     const briefKeysBlock = keys.length ? `BRIEF KEYS\n${keys.join("\n")}` : "";
     const returns = (assignment.owner_returns ?? []).map((text) => text.trim()).filter(Boolean);
@@ -178,7 +182,9 @@ export function buildDeliveryVerificationPrompt(assignment, commit, context) {
         "You have repo_read and test_run only. Do not edit, create, delete, format, commit, branch, push, install, or change any file.",
         diff,
         formatGatesRunBlock(context.gatesRun ?? []),
-        "Bridge already ran the gates at this commit. The GATES RUN block is the only gate fact — use those exit codes and output tails; do not choose which commands count as gates. You may still run a REGISTERED COMMAND to read more. Run nothing that is not registered. Never start a server, deploy, or call a production system.",
+        osSandbox
+            ? "Bridge already ran the gates at this commit. The GATES RUN block is the only gate fact — use those exit codes and output tails; do not choose which commands count as gates. A registered-command rerun that fails on the read-only tree is not evidence against the delivery and is not a new gate. Never start a server, deploy, or call a production system."
+            : "Bridge already ran the gates at this commit. The GATES RUN block is the only gate fact — use those exit codes and output tails; do not choose which commands count as gates. You may still run a REGISTERED COMMAND to read more. Run nothing that is not registered. Never start a server, deploy, or call a production system.",
         // T132: three verifications ended at the time limit with no brief. Order the work so the brief
         // exists before the budget does not.
         "Order of work: read the GATES RUN facts first, then the changed files that matter, then write the brief. You may run a registered command to read more, one at a time and never two at once (a test suite that rewrites a source file and restores it races against itself when run concurrently, and a changed tree voids your run). Your time is limited: a brief with `unclear` verdicts for what you did not reach is the required outcome; a run that ends without a brief settles nothing.",
@@ -868,6 +874,7 @@ export async function executeNextInvestigation(client, config, workspace, brief,
             })
             : [];
         const context = {
+            boundedBy: boundedByForDriver(driverId),
             verificationCommands,
             diffStat: assignment.base_commit ? await diffStatSince(attemptWorkspace, assignment.base_commit) : null,
             gatesRun,

package/dist/preflight.js

@@ -611,6 +611,8 @@ async function rehearseGate(workspace, plan, options) {
         const seconds = Math.round(elapsed / 1_000);
         if (result.code !== 0 || result.timedOut === true || elapsed <= VERIFICATION_TIMEOUT_MS) {
             commands.push({ command, seconds, exit_code: result.code, timed_out: result.timedOut === true });
+            if (result.code !== 0 || result.timedOut === true)
+                break;
             continue;
         }
         // The pass fit only the rehearsal's limit: it was a warm-up. Measure once more, in a fresh

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@miraland-labs/conduit-bridge",
-  "version": "0.16.195",
+  "version": "0.16.197",
   "description": "Conduit Bridge CLI — join, connect, disconnect, multi-driver lanes, and run Claude Code / Codex / Cursor / OpenCode / Pi / Kiro / Antigravity / Grok Build agents for a Conduit organization",
   "type": "module",
   "bin": {