@miraland-labs/conduit-bridge 0.16.200 → 0.16.205

package/dist/execution-class.js

@@ -16,7 +16,7 @@ export function isBoundedVerificationCommand(command) {
     // Cargo takes flags the same way: acme-sim registered `cargo clippy --all-targets -- -D warnings`
     // on 2026-09-25, the rule admitted only a bare `cargo test|check`, and five deliveries shipped
     // clippy failures because the gate was dropped before any attempt could run it.
-    return /^(npm run [A-Za-z0-9][A-Za-z0-9._:-]*|pnpm [A-Za-z0-9][A-Za-z0-9._:-]*|yarn [A-Za-z0-9][A-Za-z0-9._:-]*|cargo (test|check|clippy)(?: [\w./=:-]+)*|go test(?: \.\/\.\.\.)?|make [A-Za-z0-9][A-Za-z0-9._-]*|python3? -m [A-Za-z0-9_][\w.]*(?: [\w./=:*-]+)*|pytest(?: [\w./=*-]+)?|python3? [\w./-]+\.py(?: [\w./=:-]+)*|(?:\.\/gradlew|gradle|\.\/mvnw|mvn) test|Rscript tests\/testthat\.R|Rscript -e testthat::test_local\(\))$/.test(command);
+    return /^(npm run [A-Za-z0-9][A-Za-z0-9._:-]*(?: --(?: [\w./=:-]+)+)?|pnpm [A-Za-z0-9][A-Za-z0-9._:-]*(?: --(?: [\w./=:-]+)+)?|yarn [A-Za-z0-9][A-Za-z0-9._:-]*(?: --(?: [\w./=:-]+)+)?|cargo (test|check|clippy)(?: [\w./=:-]+)*|go test(?: \.\/\.\.\.)?|make [A-Za-z0-9][A-Za-z0-9._-]*|python3? -m [A-Za-z0-9_][\w.]*(?: [\w./=:*-]+)*|pytest(?: [\w./=*-]+)?|python3? [\w./-]+\.py(?: [\w./=:-]+)*|(?:\.\/gradlew|gradle|\.\/mvnw|mvn) test|Rscript tests\/testthat\.R|Rscript -e testthat::test_local\(\))$/.test(command);
 }
 /** Shell commands each grant authorizes — mapped per driver so they cannot drift. */
 export const branchCreateCommands = [

package/dist/investigation.js

@@ -7,7 +7,7 @@
  */
 import { redactSecrets, redactSecretsDeep } from "./secret-redaction.js";
 import { z } from "zod";
-import { boundedTail, runBoundedVerificationCommand } from "./ensure-test-evidence.js";
+import { boundedTail, runBoundedVerificationCommand, VERIFICATION_TIMEOUT_MS } from "./ensure-test-evidence.js";
 import { markAttemptActive } from "./preflight.js";
 import { createAttemptWorktree, removeAttemptWorktree } from "./attempt-worktree.js";
 import { buildWorkspaceBrief, ensureCommitAvailable, normalizeRepositoryUrl } from "./brief.js";
@@ -106,7 +106,8 @@ const investigationBriefSchema = z.object({
 /** T122: a delivery verification is an investigation whose question carries this header. */
 export const DELIVERY_VERIFICATION_HEADER = "DELIVERY VERIFICATION";
 /** Owner-verbatim: the lane writes probe source; Bridge executes. Shown only when BRIEF KEYS are present. */
-export const DELIVERY_VERIFICATION_PROBE_INSTRUCTION = 'For every BRIEF KEY that states behaviour, add one entry to probes: either {"key":"[sN]","test":"<registered command that asserts it>","checks":"<one line: what it proves>"} or {"key":"[sN]","lang":"ts|py|sh","source":"<a short script run from the repository root that prints PROBE HOLDS as its last line and exits 0 when the key holds at this commit and prints PROBE FAILS as its last line and exits 1 when it does not; any other ending is recorded as broken; it may import repository modules by paths relative to the repository root>","checks":"<one line>"}. You do not run probes; Bridge runs them after you finish. Every other BRIEF KEY states no behaviour (wording, scope, docs): add it to no_behaviour as {"key":"[sN]","reason":"<one line: why it states no behaviour>"}. Name every BRIEF KEY once, in probes or in no_behaviour.';
+export const DELIVERY_VERIFICATION_PROBE_ADMITTED_SHAPE = 'Admitted shape: npm run <script>, pnpm <script>, or yarn <script>, optionally followed by -- and plain tokens using only letters, digits, underscore, dot, slash, equals, colon, or hyphen; no quotes or shell syntax.';
+export const DELIVERY_VERIFICATION_PROBE_INSTRUCTION = 'For every BRIEF KEY that states behaviour, add one entry to probes: either {"key":"[sN]","test":"<one of the REGISTERED COMMANDS verbatim, optionally narrowed with the admitted argument tail>","checks":"<one line: what it proves>"} or {"key":"[sN]","lang":"ts|py|sh","source":"<a short script run from the repository root that prints PROBE HOLDS as its last line and exits 0 when the key holds at this commit and prints PROBE FAILS as its last line and exits 1 when it does not; any other ending is recorded as broken; it may import repository modules by paths relative to the repository root>","checks":"<one line>"}. ' + DELIVERY_VERIFICATION_PROBE_ADMITTED_SHAPE + ' A filter that needs quotes must use a source probe instead. You do not run probes; Bridge runs them after you finish. Every other BRIEF KEY states no behaviour (wording, scope, docs): add it to no_behaviour as {"key":"[sN]","reason":"<one line: why it states no behaviour>"}. Name every BRIEF KEY once, in probes or in no_behaviour.';
 const BRIEF_JSON_EXAMPLE = '{"summary":"one paragraph: what the change does and whether it meets the criteria","findings":["grounded fact with file/symbol"],"verification":["command — result"],"limitations":["what you could not settle"],"criteria":[{"criterion":"c1","assessment":"supported|unsupported|unclear","reason":"what you saw"}],"command_failures":["command that exited non-zero — the decisive output line"],"files_read":0,"bytes_read":0,"commands_run":["command you actually ran"]}';
 const BRIEF_JSON_EXAMPLE_WITH_PROBES = '{"summary":"one paragraph: what the change does and whether it meets the criteria","findings":["grounded fact with file/symbol"],"verification":["command — result"],"limitations":["what you could not settle"],"criteria":[{"criterion":"c1","assessment":"supported|unsupported|unclear","reason":"what you saw"}],"command_failures":["command that exited non-zero — the decisive output line"],"probes":[],"no_behaviour":[],"files_read":0,"bytes_read":0,"commands_run":["command you actually ran"]}';
 /** Named in both prompts so the lane knows each list's maximum before it writes. */
@@ -418,6 +419,10 @@ export const BRIDGE_PACKAGE_NAME = "@miraland-labs/conduit-bridge";
 export const BRIDGE_SRC_PREFIX = "packages/conduit-bridge/src/";
 export const PROBE_RUN_ENTRY = "packages/conduit-bridge/src/probe-run.ts";
 export const DELIVERED_PROBE_SELF_CHECK_TAIL = "delivered probe instrument failed its self-check";
+export const DELIVERED_PROBE_RUN_FAILED_TAIL = "delivered probe instrument failed its real run";
+export function deliveredProbeTimeoutMs(probes) {
+    return probes.slice(0, PROBE_MAX).reduce((bound, probe) => bound + (probe.test?.trim() ? VERIFICATION_TIMEOUT_MS : PROBE_TIMEOUT_MS), PROBE_TIMEOUT_MS);
+}
 export const KNOWN_ANSWER_PROBES = [
     { key: "[known-holds]", lang: "sh", source: "echo 'PROBE HOLDS'\nexit 0", checks: "known answer: holds" },
     { key: "[known-fails]", lang: "sh", source: "echo 'PROBE FAILS'\nexit 1", checks: "known answer: fails" },
@@ -567,10 +572,13 @@ export async function runDeliveryVerificationProbes(input) {
         const source = probe.source?.trim() ?? "";
         if (named) {
             if (!isRunnableVerificationCommand(named)) {
-                witnesses.push(witnessRecord({
-                    key: probe.key, kind: "test", command: named, exitCode: -1, stdout: "", stderr: "not a registered command", checks,
-                    verdict: "broken",
-                }));
+                witnesses.push({
+                    ...witnessRecord({
+                        key: probe.key, kind: "test", command: named, exitCode: -1, stdout: "", stderr: "", checks,
+                        verdict: "broken",
+                    }),
+                    tail: `not a registered command: ${named} ${DELIVERY_VERIFICATION_PROBE_ADMITTED_SHAPE}`,
+                });
                 continue;
             }
             let exitCode = -1;
@@ -640,8 +648,8 @@ const deliveredWitnessSchema = z.object({
 function stampInstrument(witnesses, instrument) {
     return witnesses.map((witness) => ({ ...witness, instrument }));
 }
-function markSelfCheckBroken(witnesses, reason) {
-    const tail = boundedTail(`${DELIVERED_PROBE_SELF_CHECK_TAIL}: ${reason}`, PROBE_TAIL_CHARS);
+function markDeliveredProbeBroken(witnesses, label, reason) {
+    const tail = `${label}: ${boundedTail(reason, PROBE_TAIL_CHARS - label.length - 2)}`;
     return stampInstrument(witnesses.map((witness) => ({
         ...witness,
         verdict: "broken",
@@ -683,7 +691,7 @@ async function execDeliveredProbeRun(argv, stdin, workspace, timeoutMs) {
 }
 export async function runDeliveredProbeInstrument(input) {
     const entry = join(input.workspace, PROBE_RUN_ENTRY);
-    const timeoutMs = PROBE_TIMEOUT_MS * (input.probes.length + 1);
+    const timeoutMs = deliveredProbeTimeoutMs(input.probes);
     const stdin = JSON.stringify({ probes: input.probes });
     const argv = ["node", ...probeNodeFlags(), "--import", tsxLoader, entry];
     const result = await (input.exec ?? execDeliveredProbeRun)(argv, stdin, input.workspace, timeoutMs);
@@ -710,15 +718,23 @@ export async function runDeliveryVerificationProbesForAttempt(input) {
     let selfCheckDetail = null;
     try {
         const check = await runDelivered({ workspace: input.workspace, probes: KNOWN_ANSWER_PROBES });
-        if (knownAnswerProbesPassed(check)) {
-            return stampInstrument(await runDelivered({ workspace: input.workspace, probes: input.probes }), "delivered");
+        if (!knownAnswerProbesPassed(check)) {
+            selfCheckDetail = `gave ${check.map((witness) => witness.verdict).join(", ")}`;
         }
-        selfCheckDetail = `gave ${check.map((witness) => witness.verdict).join(", ")}`;
     }
     catch (error) {
         selfCheckDetail = redactSecrets(error instanceof Error ? error.message : String(error));
     }
-    return markSelfCheckBroken(await runRunning(), selfCheckDetail ?? "");
+    if (selfCheckDetail !== null) {
+        return markDeliveredProbeBroken(await runRunning(), DELIVERED_PROBE_SELF_CHECK_TAIL, selfCheckDetail);
+    }
+    try {
+        return stampInstrument(await runDelivered({ workspace: input.workspace, probes: input.probes }), "delivered");
+    }
+    catch (error) {
+        const detail = redactSecrets(error instanceof Error ? error.message : String(error));
+        return markDeliveredProbeBroken(await runRunning(), DELIVERED_PROBE_RUN_FAILED_TAIL, detail);
+    }
 }
 async function settle(client, investigationId, body) {
     await client.request(`/runner/v1/investigations/${investigationId}/settle`, {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@miraland-labs/conduit-bridge",
-  "version": "0.16.200",
+  "version": "0.16.205",
   "description": "Conduit Bridge CLI — join, connect, disconnect, multi-driver lanes, and run Claude Code / Codex / Cursor / OpenCode / Pi / Kiro / Antigravity / Grok Build agents for a Conduit organization",
   "type": "module",
   "bin": {