@miraland-labs/conduit-bridge 0.16.203 → 0.16.207

package/dist/driver.js

@@ -728,6 +728,25 @@ export function claudeCodeFuelEnv(fuelSource, model) {
         return undefined;
     return { ANTHROPIC_MODEL: model, ANTHROPIC_SMALL_FAST_MODEL: model, CLAUDE_CODE_DISABLE_NONESSENTIAL_TRAFFIC: "1" };
 }
+export function codexSandboxFacts(projection) {
+    return [
+        "SANDBOX FACTS",
+        `Sandbox mode: ${projection.sandbox}.`,
+        projection.networkAccess
+            ? "Network is on."
+            : "Network is off, including loopback listen.",
+        projection.sandbox === "workspace-write"
+            ? "Writes are allowed only in the workspace and TMPDIR. HOME and the rest of the filesystem are read-only."
+            : "No writes are allowed. The filesystem is read-only.",
+        "Child processes inherit these limits.",
+        "A registered gate that fails only with EPERM, EROFS, or a refused listen does not test the change.",
+        "Record that run as evidence with the refused calls.",
+        "Mark each criterion that run would settle as unknown with unverified_reason needs_environment.",
+        "Set unverified_detail to name the refusal.",
+        "Do not state in outcome, verification, or limitations that the gate failed.",
+        "Bridge runs every registered gate outside this sandbox after the turn. Its result is the witness.",
+    ].join("\n");
+}
 /**
  * Codex exec arguments. The sandbox is the enforcement boundary: network stays
  * off inside workspace-write unless the class/capabilities require it.
@@ -848,7 +867,7 @@ export const codexDriver = {
             diagnosis: input.workRole === "diagnose",
         });
         // Prompt via stdin avoids ARG_MAX limits on large assignment contracts.
-        const { code, stdout, stderr } = await execute(driverExecutable(codexDriver.name, input.executable), codexExecArgs({ ...input, networkAccess: projected.networkAccess }, projected.sandbox), input.workspace, agentTurnTimeoutMs(input), fuelSource === "conduit" ? input.fuel : undefined, fuelSource, input.prompt, input.signal);
+        const { code, stdout, stderr } = await execute(driverExecutable(codexDriver.name, input.executable), codexExecArgs({ ...input, networkAccess: projected.networkAccess }, projected.sandbox), input.workspace, agentTurnTimeoutMs(input), fuelSource === "conduit" ? input.fuel : undefined, fuelSource, `${input.prompt}\n\n${codexSandboxFacts(projected)}`, input.signal);
         const parsed = parseCodexJsonl(stdout);
         const resultText = parsed.resultText ?? (stdout || null);
         if (code !== 0) {
@@ -1389,11 +1408,14 @@ export function parseAntigravityModelList(stdout) {
 export function parseAntigravityOutput(stdout) {
     try {
         const parsed = JSON.parse(stdout.trim());
+        const earlyEnd = typeof parsed.finished_reason === "string"
+            && ["print_timeout", "interrupted", "error"].includes(parsed.finished_reason);
         return {
             resultText: typeof parsed.response === "string" ? parsed.response : null,
             sessionId: typeof parsed.conversation_id === "string" ? parsed.conversation_id : null,
-            status: typeof parsed.status === "string" ? parsed.status : null,
-            error: typeof parsed.error === "string" && parsed.error.trim() ? parsed.error : null,
+            status: earlyEnd ? "ERROR" : typeof parsed.status === "string" ? parsed.status : null,
+            error: typeof parsed.error === "string" && parsed.error.trim() ? parsed.error
+                : earlyEnd ? `agy ended early: ${parsed.finished_reason}` : null,
         };
     }
     catch {

package/dist/execution-class.js

@@ -16,7 +16,7 @@ export function isBoundedVerificationCommand(command) {
     // Cargo takes flags the same way: acme-sim registered `cargo clippy --all-targets -- -D warnings`
     // on 2026-09-25, the rule admitted only a bare `cargo test|check`, and five deliveries shipped
     // clippy failures because the gate was dropped before any attempt could run it.
-    return /^(npm run [A-Za-z0-9][A-Za-z0-9._:-]*|pnpm [A-Za-z0-9][A-Za-z0-9._:-]*|yarn [A-Za-z0-9][A-Za-z0-9._:-]*|cargo (test|check|clippy)(?: [\w./=:-]+)*|go test(?: \.\/\.\.\.)?|make [A-Za-z0-9][A-Za-z0-9._-]*|python3? -m [A-Za-z0-9_][\w.]*(?: [\w./=:*-]+)*|pytest(?: [\w./=*-]+)?|python3? [\w./-]+\.py(?: [\w./=:-]+)*|(?:\.\/gradlew|gradle|\.\/mvnw|mvn) test|Rscript tests\/testthat\.R|Rscript -e testthat::test_local\(\))$/.test(command);
+    return /^(npm run [A-Za-z0-9][A-Za-z0-9._:-]*(?: --(?: [\w./=:-]+)+)?|pnpm [A-Za-z0-9][A-Za-z0-9._:-]*(?: --(?: [\w./=:-]+)+)?|yarn [A-Za-z0-9][A-Za-z0-9._:-]*(?: --(?: [\w./=:-]+)+)?|cargo (test|check|clippy)(?: [\w./=:-]+)*|go test(?: \.\/\.\.\.)?|make [A-Za-z0-9][A-Za-z0-9._-]*|python3? -m [A-Za-z0-9_][\w.]*(?: [\w./=:*-]+)*|pytest(?: [\w./=*-]+)?|python3? [\w./-]+\.py(?: [\w./=:-]+)*|(?:\.\/gradlew|gradle|\.\/mvnw|mvn) test|Rscript tests\/testthat\.R|Rscript -e testthat::test_local\(\))$/.test(command);
 }
 /** Shell commands each grant authorizes — mapped per driver so they cannot drift. */
 export const branchCreateCommands = [

package/dist/investigation.js

@@ -106,7 +106,8 @@ const investigationBriefSchema = z.object({
 /** T122: a delivery verification is an investigation whose question carries this header. */
 export const DELIVERY_VERIFICATION_HEADER = "DELIVERY VERIFICATION";
 /** Owner-verbatim: the lane writes probe source; Bridge executes. Shown only when BRIEF KEYS are present. */
-export const DELIVERY_VERIFICATION_PROBE_INSTRUCTION = 'For every BRIEF KEY that states behaviour, add one entry to probes: either {"key":"[sN]","test":"<registered command that asserts it>","checks":"<one line: what it proves>"} or {"key":"[sN]","lang":"ts|py|sh","source":"<a short script run from the repository root that prints PROBE HOLDS as its last line and exits 0 when the key holds at this commit and prints PROBE FAILS as its last line and exits 1 when it does not; any other ending is recorded as broken; it may import repository modules by paths relative to the repository root>","checks":"<one line>"}. You do not run probes; Bridge runs them after you finish. Every other BRIEF KEY states no behaviour (wording, scope, docs): add it to no_behaviour as {"key":"[sN]","reason":"<one line: why it states no behaviour>"}. Name every BRIEF KEY once, in probes or in no_behaviour.';
+export const DELIVERY_VERIFICATION_PROBE_ADMITTED_SHAPE = 'Admitted shape: npm run <script>, pnpm <script>, or yarn <script>, optionally followed by -- and plain tokens using only letters, digits, underscore, dot, slash, equals, colon, or hyphen; no quotes or shell syntax.';
+export const DELIVERY_VERIFICATION_PROBE_INSTRUCTION = 'For every BRIEF KEY that states behaviour, add one entry to probes: either {"key":"[sN]","test":"<one of the REGISTERED COMMANDS verbatim, optionally narrowed with the admitted argument tail>","checks":"<one line: what it proves>"} or {"key":"[sN]","lang":"ts|py|sh","source":"<a short script run from the repository root that prints PROBE HOLDS as its last line and exits 0 when the key holds at this commit and prints PROBE FAILS as its last line and exits 1 when it does not; any other ending is recorded as broken; it may import repository modules by paths relative to the repository root>","checks":"<one line>"}. ' + DELIVERY_VERIFICATION_PROBE_ADMITTED_SHAPE + ' A filter that needs quotes must use a source probe instead. You do not run probes; Bridge runs them after you finish. Every other BRIEF KEY states no behaviour (wording, scope, docs): add it to no_behaviour as {"key":"[sN]","reason":"<one line: why it states no behaviour>"}. Name every BRIEF KEY once, in probes or in no_behaviour.';
 const BRIEF_JSON_EXAMPLE = '{"summary":"one paragraph: what the change does and whether it meets the criteria","findings":["grounded fact with file/symbol"],"verification":["command — result"],"limitations":["what you could not settle"],"criteria":[{"criterion":"c1","assessment":"supported|unsupported|unclear","reason":"what you saw"}],"command_failures":["command that exited non-zero — the decisive output line"],"files_read":0,"bytes_read":0,"commands_run":["command you actually ran"]}';
 const BRIEF_JSON_EXAMPLE_WITH_PROBES = '{"summary":"one paragraph: what the change does and whether it meets the criteria","findings":["grounded fact with file/symbol"],"verification":["command — result"],"limitations":["what you could not settle"],"criteria":[{"criterion":"c1","assessment":"supported|unsupported|unclear","reason":"what you saw"}],"command_failures":["command that exited non-zero — the decisive output line"],"probes":[],"no_behaviour":[],"files_read":0,"bytes_read":0,"commands_run":["command you actually ran"]}';
 /** Named in both prompts so the lane knows each list's maximum before it writes. */
@@ -571,10 +572,13 @@ export async function runDeliveryVerificationProbes(input) {
         const source = probe.source?.trim() ?? "";
         if (named) {
             if (!isRunnableVerificationCommand(named)) {
-                witnesses.push(witnessRecord({
-                    key: probe.key, kind: "test", command: named, exitCode: -1, stdout: "", stderr: "not a registered command", checks,
-                    verdict: "broken",
-                }));
+                witnesses.push({
+                    ...witnessRecord({
+                        key: probe.key, kind: "test", command: named, exitCode: -1, stdout: "", stderr: "", checks,
+                        verdict: "broken",
+                    }),
+                    tail: `not a registered command: ${named} ${DELIVERY_VERIFICATION_PROBE_ADMITTED_SHAPE}`,
+                });
                 continue;
             }
             let exitCode = -1;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@miraland-labs/conduit-bridge",
-  "version": "0.16.203",
+  "version": "0.16.207",
   "description": "Conduit Bridge CLI — join, connect, disconnect, multi-driver lanes, and run Claude Code / Codex / Cursor / OpenCode / Pi / Kiro / Antigravity / Grok Build agents for a Conduit organization",
   "type": "module",
   "bin": {