@miraland-labs/conduit-bridge 0.16.9 → 0.16.10

package/dist/execution-class.js

@@ -141,7 +141,7 @@ export function projectCursor(executionClass, input) {
         if (grants.includes("test_run")) {
             allow.push(...verificationCommands.filter(isBoundedVerificationCommand).map((command) => `Shell(${command})`));
         }
-        if (executionClass === "mutate_repo") {
+        if (executionClass === "mutate_repo" && !input.diagnosis) {
             if (grants.includes("branch_create"))
                 allow.push(...branchCreateCommands.map((command) => `Shell(${command})`));
             if (grants.includes("pr_create"))
@@ -169,6 +169,19 @@ export function projectClaude(executionClass, input) {
     if (executionClass === "observe" || executionClass === "observe_network") {
         return { allowedTools: ["Read", "Glob", "Grep", ...fetchTools], disallowedTools, acceptEdits: false };
     }
+    // Diagnosis is read-only whatever class the assignment was stamped with — the same
+    // class-independent rule Cursor, Codex, and Grok already enforce on the flag itself.
+    if (input.diagnosis) {
+        return {
+            allowedTools: [
+                "Read", "Glob", "Grep",
+                ...verificationCommands.filter(isBoundedVerificationCommand).map((command) => `Bash(${command}:*)`),
+                ...fetchTools,
+            ],
+            disallowedTools,
+            acceptEdits: false,
+        };
+    }
     if (executionClass === "publish_artifact") {
         return {
             allowedTools: ["Read", "Glob", "Grep", "Edit", "Write", "Bash", ...fetchTools],
@@ -180,7 +193,6 @@ export function projectClaude(executionClass, input) {
         return {
             allowedTools: [
                 "Read",
-                ...(input.diagnosis ? ["Glob", "Grep"] : []),
                 ...verificationCommands.filter(isBoundedVerificationCommand).map((command) => `Bash(${command}:*)`),
                 ...fetchTools,
             ],

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@miraland-labs/conduit-bridge",
-  "version": "0.16.9",
+  "version": "0.16.10",
   "description": "Conduit Bridge CLI — join, connect, disconnect, multi-driver lanes, and run Claude Code / Codex / Cursor / OpenCode / Pi / Kiro / Antigravity / Grok Build agents for a Conduit organization",
   "type": "module",
   "bin": {