@miraland-labs/conduit-bridge 0.16.205 → 0.16.207

package/dist/driver.js

@@ -728,6 +728,25 @@ export function claudeCodeFuelEnv(fuelSource, model) {
         return undefined;
     return { ANTHROPIC_MODEL: model, ANTHROPIC_SMALL_FAST_MODEL: model, CLAUDE_CODE_DISABLE_NONESSENTIAL_TRAFFIC: "1" };
 }
+export function codexSandboxFacts(projection) {
+    return [
+        "SANDBOX FACTS",
+        `Sandbox mode: ${projection.sandbox}.`,
+        projection.networkAccess
+            ? "Network is on."
+            : "Network is off, including loopback listen.",
+        projection.sandbox === "workspace-write"
+            ? "Writes are allowed only in the workspace and TMPDIR. HOME and the rest of the filesystem are read-only."
+            : "No writes are allowed. The filesystem is read-only.",
+        "Child processes inherit these limits.",
+        "A registered gate that fails only with EPERM, EROFS, or a refused listen does not test the change.",
+        "Record that run as evidence with the refused calls.",
+        "Mark each criterion that run would settle as unknown with unverified_reason needs_environment.",
+        "Set unverified_detail to name the refusal.",
+        "Do not state in outcome, verification, or limitations that the gate failed.",
+        "Bridge runs every registered gate outside this sandbox after the turn. Its result is the witness.",
+    ].join("\n");
+}
 /**
  * Codex exec arguments. The sandbox is the enforcement boundary: network stays
  * off inside workspace-write unless the class/capabilities require it.
@@ -848,7 +867,7 @@ export const codexDriver = {
             diagnosis: input.workRole === "diagnose",
         });
         // Prompt via stdin avoids ARG_MAX limits on large assignment contracts.
-        const { code, stdout, stderr } = await execute(driverExecutable(codexDriver.name, input.executable), codexExecArgs({ ...input, networkAccess: projected.networkAccess }, projected.sandbox), input.workspace, agentTurnTimeoutMs(input), fuelSource === "conduit" ? input.fuel : undefined, fuelSource, input.prompt, input.signal);
+        const { code, stdout, stderr } = await execute(driverExecutable(codexDriver.name, input.executable), codexExecArgs({ ...input, networkAccess: projected.networkAccess }, projected.sandbox), input.workspace, agentTurnTimeoutMs(input), fuelSource === "conduit" ? input.fuel : undefined, fuelSource, `${input.prompt}\n\n${codexSandboxFacts(projected)}`, input.signal);
         const parsed = parseCodexJsonl(stdout);
         const resultText = parsed.resultText ?? (stdout || null);
         if (code !== 0) {
@@ -1389,11 +1408,14 @@ export function parseAntigravityModelList(stdout) {
 export function parseAntigravityOutput(stdout) {
     try {
         const parsed = JSON.parse(stdout.trim());
+        const earlyEnd = typeof parsed.finished_reason === "string"
+            && ["print_timeout", "interrupted", "error"].includes(parsed.finished_reason);
         return {
             resultText: typeof parsed.response === "string" ? parsed.response : null,
             sessionId: typeof parsed.conversation_id === "string" ? parsed.conversation_id : null,
-            status: typeof parsed.status === "string" ? parsed.status : null,
-            error: typeof parsed.error === "string" && parsed.error.trim() ? parsed.error : null,
+            status: earlyEnd ? "ERROR" : typeof parsed.status === "string" ? parsed.status : null,
+            error: typeof parsed.error === "string" && parsed.error.trim() ? parsed.error
+                : earlyEnd ? `agy ended early: ${parsed.finished_reason}` : null,
         };
     }
     catch {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@miraland-labs/conduit-bridge",
-  "version": "0.16.205",
+  "version": "0.16.207",
   "description": "Conduit Bridge CLI — join, connect, disconnect, multi-driver lanes, and run Claude Code / Codex / Cursor / OpenCode / Pi / Kiro / Antigravity / Grok Build agents for a Conduit organization",
   "type": "module",
   "bin": {