@miraland-labs/conduit-bridge 0.9.0 → 0.9.2

package/README.md

@@ -2,71 +2,76 @@
 
 Local Bridge CLI for [Conduit](https://github.com/miralandlabs/conduit). Connects a computer to one organization, claims work, and drives a local agent.
 
-**Current npm:** `0.8.0` — **multi-driver lanes** on one Connect computer (`drivers online|offline`), shared concurrent slots **1–4** (sum across online IDEs, not per IDE), per-attempt worktrees, optional `--ensure-checkout`, safe resume.
+**Current npm:** `0.9.2` — **ops** helpers for macOS / Linux / Windows, LaunchAgent/systemd **PATH** for `~/.local/bin`, disconnect/disengage, multi-driver lanes, shared slots **1–4**, worktrees, optional `--ensure-checkout`.
 
 ## Prerequisites
 
 - Node.js 20+
-- One or more supported agent CLIs on PATH (common: install several on one Mac):
-  - **Claude Code** — `claude` (Conduit pump or Anthropic login)
-  - **Codex** — `codex` (Conduit pump or ChatGPT/OpenAI login). Since the July 2026 ChatGPT desktop merge, Bridge also finds the CLI bundled inside ChatGPT.app when `codex` is not on PATH (macOS)
-  - **OpenCode** — `opencode` (Conduit pump or local provider login)
-  - **Cursor Agent** — `agent` (local fuel; set with `drivers fuel cursor local` or machine `fuel local`)
+- One or more supported agent CLIs:
+  - **Claude Code** — `claude`
+  - **Codex** — `codex`
+  - **OpenCode** — `opencode`
+  - **Cursor Agent** — `agent` (local fuel)
   - **Kiro CLI** — `kiro-cli` (local fuel)
   - **Antigravity** — `agy` (local fuel)
-- macOS or Linux for `install-service` (Windows: keep a terminal runner open)
 
-## Install / run
+## Easy path (all platforms)
+
+One config file + the same `ops` commands on macOS, Linux, and Windows:
 
 ```bash
-npx @miraland-labs/conduit-bridge join --url <https://your-conduit> --organization <slug>
+# 1) Config once
+mkdir -p ~/.config/conduit
+# Windows: mkdir %USERPROFILE%\.config\conduit
+npx @miraland-labs/conduit-bridge@latest init-ops
+cp ~/conduit/ops/env.example ~/.config/conduit/ops.env
+# edit ops.env  (URL, WORKSPACE, optional REPO, DRIVERS, ROLES)
+
+# 2) Connect → approve in browser → install
+npx @miraland-labs/conduit-bridge@latest ops connect
+npx @miraland-labs/conduit-bridge@latest ops install
+npx @miraland-labs/conduit-bridge@latest ops status
 ```
 
-After approval, seed detects installed CLIs as **offline lanes**. Bring one or more online (subscription failover / concurrent lanes):
+Later:
 
 ```bash
-npx @miraland-labs/conduit-bridge drivers              # list lanes
-npx @miraland-labs/conduit-bridge drivers online claude-code
-npx @miraland-labs/conduit-bridge drivers online claude-code codex   # both can run at once
-npx @miraland-labs/conduit-bridge drivers offline claude-code         # finish in-flight; no new claims
-npx @miraland-labs/conduit-bridge runner --workspace /path/to/repo
+npx @miraland-labs/conduit-bridge@latest ops online cursor
+npx @miraland-labs/conduit-bridge@latest ops offline cursor
+npx @miraland-labs/conduit-bridge@latest ops disconnect
 ```
 
-Legacy single-driver process override (does not change saved online set):
+Optional local shortcuts after `init-ops` (same verbs):
 
-```bash
-npx @miraland-labs/conduit-bridge runner --agent claude-code --workspace /path/to/repo
-```
+| Platform | Examples |
+| --- | --- |
+| macOS / Linux | `~/conduit/ops/connect.sh`, `install.sh`, … |
+| Windows | `%USERPROFILE%\conduit\ops\connect.cmd`, `install.cmd`, … |
 
-Persist (macOS/Linux) — one LaunchAgent; honors the drivers online set:
+**Windows note:** `ops install` brings lanes online and prints a `runner --workspace …` command to keep open (no LaunchAgent). macOS/Linux install a background service.
 
-```bash
-npx @miraland-labs/conduit-bridge install-service --workspace /path/to/repo
-# optional: bring a lane online at install time
-npx @miraland-labs/conduit-bridge install-service --agent claude-code --workspace /path/to/repo
-```
+`ops.env` keys: `CONDUIT_URL`, `CONDUIT_ORG` (optional), `CONDUIT_WORKSPACE`, `CONDUIT_REPO` (optional), `CONDUIT_DRIVERS` (default `cursor`), `CONDUIT_ROLES` (default `implement research`). Values expand `$HOME`, `%USERPROFILE%`, and `~`.
 
-Reinstall after upgrading from Bridge versions before 0.8 if the old unit baked a single `--agent`.
+## Advanced CLI
 
-For a Start-created GitHub repo that is not checked out yet, point `--workspace` at the intended path and add `--ensure-checkout <https://github.com/…>` so Bridge clones with the machine’s Git credentials before the first heartbeat (never the control-plane PAT).
+```bash
+npx @miraland-labs/conduit-bridge join --url <https://your-conduit> --organization <slug>
+npx @miraland-labs/conduit-bridge drivers online cursor
+npx @miraland-labs/conduit-bridge install-service --workspace /path/to/repo --ensure-checkout https://github.com/org/repo.git
+npx @miraland-labs/conduit-bridge disconnect --yes
+```
 
-**Capacity:** Connect-approved `lease_capacity` (1–4) is a **shared pool** for all online lanes on that computer. Claude alone may use all 4 slots; Claude + Codex share those 4 — never 4×N.
+**Capacity:** Connect-approved `lease_capacity` (1–4) is a **shared pool** for all online lanes on that computer.
 
 ## Grant enforcement
 
-Every driver enforces the assignment's granted actions with its CLI's native mechanism — never just the prompt:
-
 | Driver | Fuel | Mechanism |
 | --- | --- | --- |
-| `claude-code` | pump or local | `--allowedTools` / `--disallowedTools` per grant; bounded verification commands |
-| `codex` | pump or local | sandbox `read-only` / `workspace-write`; network enabled only with `pr_create`; resumes by thread id |
-| `opencode` | pump or local | `plan`/`build` agents; per-run `opencode.json` bash deny list (shared `deniedCommands`); `--session` resume; `--format json` |
-| `cursor` | local only | per-run `.cursor/cli.json` `permissions` allow/deny (no `--force`); read-only runs in `--mode plan` |
-| `kiro` | local only | `--trust-tools=fs_read,fs_write,execute_bash` allowlist; `--no-interactive`; `--resume-id`. Tool-level only — no per-command scoping, so a bash grant trusts `execute_bash` wholesale (Antigravity-tier) |
-| `antigravity` | local only | `-p --mode plan` (read-only) / `--mode accept-edits --sandbox` (write). Mode-level, coarser than per-tool; plain-text output; resume not surfaced |
-
-Every driver refuses to start when grants map to nothing, fails closed on missing logins, and shares one denied-command list (merge, force-push, deploy, kubectl, terraform).
-
-**Verification status:**
-- `claude-code`, `codex`, `cursor`, `opencode`, `antigravity` — verified end-to-end against their real CLIs (agy 1.1.3: `-p --mode` args, Google login, plain-text output confirmed through the driver).
-- `kiro` — flag surface and login preflight verified against kiro-cli 2.13.0 (`chat --no-interactive --trust-tools --resume-id`; tool names; `whoami`-based login check that avoids the browser-login hang). A full run is **pending a `KIRO_API_KEY`** — kiro-cli requires auth to execute and cannot be exercised offline.
+| `claude-code` | pump or local | `--allowedTools` / `--disallowedTools` per grant |
+| `codex` | pump or local | sandbox `read-only` / `workspace-write` |
+| `opencode` | pump or local | per-run `opencode.json` bash deny list |
+| `cursor` | local only | per-run `.cursor/cli.json` permissions |
+| `kiro` | local only | `--trust-tools` allowlist |
+| `antigravity` | local only | `-p --mode plan` / `accept-edits` |
+
+Cursor/Kiro/Antigravity require local fuel (`ops install` sets this for you).

package/dist/cli.js

@@ -1,12 +1,14 @@
 #!/usr/bin/env node
 import { parseArgs } from "node:util";
 import { resolve, dirname, join as pathJoin } from "node:path";
-import { hostname, userInfo } from "node:os";
+import { hostname, homedir, platform, userInfo } from "node:os";
 import { spawn } from "node:child_process";
-import { readFileSync } from "node:fs";
+import { createInterface } from "node:readline/promises";
+import { chmodSync, cpSync, existsSync, mkdirSync, readFileSync, readdirSync } from "node:fs";
+import { stdin as input, stdout as output } from "node:process";
 import { fileURLToPath } from "node:url";
-import { ConduitClient } from "./client.js";
-import { BRIDGE_LEASE_CAPACITY, BRIDGE_MAX_LEASE_CAPACITY, clampLeaseCapacity, clearPendingConnection, loadConfig, loadConfigIfPresent, loadOrCreateInstallationId, loadPendingConnection, redactSecrets, saveConfig, saveConfigPrefs, savePendingConnection, suggestMachineName, } from "./config.js";
+import { ConduitClient, ConduitRequestError } from "./client.js";
+import { BRIDGE_LEASE_CAPACITY, BRIDGE_MAX_LEASE_CAPACITY, clampLeaseCapacity, clearLocalConnection, clearPendingConnection, loadConfig, loadConfigIfPresent, loadOrCreateInstallationId, loadPendingConnection, redactSecrets, saveConfig, saveConfigPrefs, savePendingConnection, suggestMachineName, } from "./config.js";
 import { runMcp } from "./mcp.js";
 import { detectInstalledClients, localFuelOnlyClients, suggestFuelSource } from "./detect.js";
 import { DRIVERS } from "./driver.js";
@@ -15,6 +17,7 @@ import { buildWorkspaceBrief } from "./brief.js";
 import { ensureCheckout } from "./checkout.js";
 import { pumpExecutionSlots, renewLeases } from "./execution.js";
 import { installRunnerService, uninstallRunnerService } from "./service.js";
+import { OPS_VERBS, runOps } from "./ops.js";
 const [command] = process.argv.slice(2);
 /** Read our own package version so every runner start logs exactly which build is live. */
 function bridgeVersion() {
@@ -54,6 +57,27 @@ async function connect() {
         throw new Error(data.error?.message ?? `Connect failed (${response.status})`);
     await finishConnection(baseUrl, data, parseFuelSource(values.fuel));
 }
+async function promptLine(question) {
+    if (!input.isTTY || !output.isTTY) {
+        throw new Error("Interactive input is unavailable; pass the value on the command line");
+    }
+    const rl = createInterface({ input, output });
+    try {
+        return (await rl.question(question)).trim();
+    }
+    finally {
+        rl.close();
+    }
+}
+async function resolveJoinOrganization(explicit) {
+    const raw = explicit?.trim() || await promptLine("Join which org? ");
+    const organization = raw.toLowerCase();
+    if (!organization)
+        throw new Error("Organization slug is required");
+    if (!/^[a-z0-9][a-z0-9-]{0,62}$/.test(organization))
+        throw new Error("Organization must be its lowercase workspace slug");
+    return organization;
+}
 async function join() {
     const { values } = parseArgs({ args: process.argv.slice(3), options: {
             url: { type: "string" }, resume: { type: "boolean" }, machine: { type: "string" }, operator: { type: "string" },
@@ -75,13 +99,11 @@ async function join() {
     if (pending && !values.resume)
         console.log(`Resuming the pending connection request for ${pending.baseUrl}.`);
     if (!pending) {
-        if (!values.url || !values.organization) {
-            throw new Error(`Usage: ${bridgeUsage("join", "--url", "<worker-url>", "--organization", "<slug>", "[--machine <name>]", "[--capability <role>]", "[--fuel conduit|local]")}`);
+        if (!values.url) {
+            throw new Error(`Usage: ${bridgeUsage("join", "--url", "<worker-url>", "[--organization <slug>]", "[--machine <name>]", "[--capability <role>]", "[--fuel conduit|local]")}`);
         }
         const baseUrl = normalizeBaseUrl(values.url);
-        const organization = values.organization.trim().toLowerCase();
-        if (!/^[a-z0-9][a-z0-9-]{0,62}$/.test(organization))
-            throw new Error("Organization must be its lowercase workspace slug");
+        const organization = await resolveJoinOrganization(values.organization);
         // A config that fails validation (for example pre-organization) must not
         // block rejoining — join replaces it with a complete identity.
         const connected = await loadConfigIfPresent().catch(() => null);
@@ -296,6 +318,56 @@ async function uninstallService() {
     const result = await uninstallRunnerService();
     console.log(`Removed Conduit runner service (${result.platform}): ${result.path}`);
 }
+/** Copy cross-platform ops launchers to ~/conduit/ops (default). Env stays in ~/.config. */
+async function initOps() {
+    const targetArg = process.argv[3];
+    const target = resolve(targetArg ?? pathJoin(homedir(), "conduit", "ops"));
+    const packageRoot = pathJoin(dirname(fileURLToPath(import.meta.url)), "..");
+    const source = pathJoin(packageRoot, "ops");
+    if (!existsSync(source)) {
+        throw new Error(`Ops kit missing from package at ${source}. Reinstall @miraland-labs/conduit-bridge.`);
+    }
+    mkdirSync(target, { recursive: true });
+    for (const name of readdirSync(source)) {
+        cpSync(pathJoin(source, name), pathJoin(target, name));
+        if (name.endsWith(".sh") || name === "conduit-ops")
+            chmodSync(pathJoin(target, name), 0o755);
+    }
+    const configDir = pathJoin(homedir(), ".config", "conduit");
+    const envPath = pathJoin(configDir, "ops.env");
+    const host = platform();
+    console.log(`Ops launchers installed at ${target}`);
+    console.log(`Config file (separate): ${envPath}`);
+    console.log("");
+    console.log("Works the same on macOS, Linux, and Windows via:");
+    console.log(`  ${bridgeUsage("ops", "<connect|install|online|offline|status|disconnect|uninstall>")}`);
+    console.log("");
+    console.log("1. Edit env once:");
+    console.log(`   Create folder: ${configDir}`);
+    console.log(`   Copy ${pathJoin(target, "env.example")} → ${envPath}`);
+    console.log(`   # edit ${envPath}`);
+    console.log("2. Connect (approve in browser):");
+    if (host === "win32") {
+        console.log(`   ${pathJoin(target, "connect.cmd")}`);
+        console.log("   # or: npx @miraland-labs/conduit-bridge@latest ops connect");
+        console.log("3. Install / start runner:");
+        console.log(`   ${pathJoin(target, "install.cmd")}`);
+    }
+    else {
+        console.log(`   ${pathJoin(target, "connect.sh")}`);
+        console.log("   # or: npx @miraland-labs/conduit-bridge@latest ops connect");
+        console.log("3. Install runner:");
+        console.log(`   ${pathJoin(target, "install.sh")}`);
+    }
+    console.log("Later: status · online · offline · disconnect (same names .sh / .cmd)");
+}
+async function opsCommand() {
+    const verb = process.argv[3];
+    if (!verb || !OPS_VERBS.includes(verb)) {
+        throw new Error(`Usage: ${bridgeUsage("ops", "<connect|install|online|offline|status|disconnect|uninstall>", "[driver…]")}`);
+    }
+    await runOps(verb, process.argv.slice(4));
+}
 async function fuelCommand() {
     const mode = process.argv[3];
     if (mode !== "local" && mode !== "conduit") {
@@ -448,11 +520,45 @@ async function heartbeat(client, config, brief, processOnlineIds) {
             ...(brief ? { workspace_brief: brief } : {}),
         }) });
 }
+async function disconnect() {
+    const { values } = parseArgs({ args: process.argv.slice(3), options: { yes: { type: "boolean", short: "y" } } });
+    const config = await loadConfigIfPresent().catch(() => null);
+    if (!config) {
+        await clearLocalConnection();
+        console.log("This Bridge is not connected to an organization.");
+        return;
+    }
+    if (!values.yes) {
+        const answer = (await promptLine(`Disengage this computer from the organization and clear local credentials? [y/N] `)).toLowerCase();
+        if (answer !== "y" && answer !== "yes") {
+            console.log("Cancelled.");
+            return;
+        }
+    }
+    try {
+        await new ConduitClient(config).request("/runner/v1/disengage", { method: "POST", body: "{}" });
+        console.log("Conduit disengaged this computer from the organization.");
+    }
+    catch (error) {
+        // Local clear still proceeds when the server already revoked the key (admin disengage).
+        if (error instanceof ConduitRequestError && (error.status === 401 || error.status === 404)) {
+            console.warn(`Server disengage skipped (${error.status}): ${redactSecrets(error.message)}`);
+        }
+        else {
+            throw error;
+        }
+    }
+    await clearLocalConnection();
+    console.log("Local Bridge credentials cleared. Run join to connect again (same or another org).");
+    console.log(`Tip: stop a background runner with \`${bridgeUsage("uninstall-service")}\` if one is installed.`);
+}
 try {
     if (command === "connect")
         await connect();
     else if (command === "join")
         await join();
+    else if (command === "disconnect")
+        await disconnect();
     else if (command === "fuel")
         await fuelCommand();
     else if (command === "drivers")
@@ -465,8 +571,12 @@ try {
         await installService();
     else if (command === "uninstall-service")
         await uninstallService();
+    else if (command === "init-ops")
+        await initOps();
+    else if (command === "ops")
+        await opsCommand();
     else
-        throw new Error(`Usage: ${BRIDGE_NPX} <join|connect|fuel|drivers|mcp|runner|install-service|uninstall-service>`);
+        throw new Error(`Usage: ${BRIDGE_NPX} <join|disconnect|connect|fuel|drivers|mcp|runner|install-service|uninstall-service|init-ops|ops>`);
 }
 catch (error) {
     console.error(error instanceof Error ? redactSecrets(error.message) : "Conduit command failed");

package/dist/config.js

@@ -260,6 +260,17 @@ export async function clearPendingConnection() {
             throw error;
     });
 }
+/** Drop local org credentials after a server-side disengage. Keeps installation.json. */
+export async function clearLocalConnection() {
+    await withConfigLock(async () => {
+        for (const target of [path, runtimePath, pendingPath]) {
+            await unlink(target).catch((error) => {
+                if (error.code !== "ENOENT")
+                    throw error;
+            });
+        }
+    });
+}
 export async function loadOrCreateInstallationId() {
     try {
         const identity = JSON.parse(await readFile(installationPath, "utf8"));

package/dist/driver.js

@@ -3,6 +3,15 @@ import { existsSync } from "node:fs";
 import { mkdir, readFile, rm, writeFile } from "node:fs/promises";
 import { join } from "node:path";
 import { z } from "zod";
+function deliveryLanguageRule(language) {
+    if (language === "zh") {
+        return "- Write every human-facing delivery packet string (outcome, changes, verification, assumptions, risks, limitations, criterion text) in Chinese (Simplified). Keep JSON keys and enum token values in English.";
+    }
+    if (language === "en") {
+        return "- Write every human-facing delivery packet string (outcome, changes, verification, assumptions, risks, limitations, criterion text) in English. Keep JSON keys and enum token values in English.";
+    }
+    return null;
+}
 export const evidenceKinds = ["change", "test", "preview", "research", "documentation"];
 export const agentReportTemplate = '{"outcome": "one-paragraph summary", "changes": ["path — what changed"], "verification": ["command — result"], "acceptance_results": [{"criterion": "exact criterion text", "status": "met|not_met|unknown"}], "evidence": [{"kind": "change|test|preview|research|documentation", "name": "concise evidence name", "uri": "external URL if one exists", "digest": "optional digest", "details": ["observable result"], "acceptance_criteria": ["exact criterion text supported by this evidence"]}], "assumptions": [], "risks": [], "limitations": [], "head_commit": "full sha of your final commit, omit if none"}';
 /**
@@ -131,7 +140,8 @@ export function buildAssignmentPrompt(context) {
         ...(context.grants.includes("branch_create") ? branchCreateCommands : []),
         ...(context.grants.includes("pr_create") ? prCreateCommands : []),
     ];
-    lines.push("", "RULES", "- Stay within the change scope and boundaries.", 
+    const languageRule = deliveryLanguageRule(packageContext?.working_language ?? spec.working_language);
+    lines.push("", "RULES", "- Stay within the change scope and boundaries.", ...(languageRule ? [languageRule] : []), 
     // Name the executable commands. The shell allow-list is exact, so an agent that guesses at
     // `bash scripts/validate-pack.sh`, `python3 ...` or `echo` gets every call rejected and concludes
     // it has no shell at all — observed twice on live Daily Signal runs, both times while the

package/dist/execution.js

@@ -44,6 +44,7 @@ const taskSpecSchema = z.object({
     change_scope: z.array(z.string()).optional(), work_role: z.string().optional(),
     repository: z.object({ url: z.string().optional(), base_commit: z.string().optional() }).nullable().optional(),
     risk_level: z.string().optional(),
+    deliverable: z.enum(["repository", "artifact"]).optional().default("repository"),
 });
 const executionContractSchema = z.object({
     repository_fingerprint: z.string().nullable().optional().default(null),
@@ -58,6 +59,7 @@ const workPackageSchema = z.object({
     acceptance: z.array(z.string()).optional(),
     change_scope: z.array(z.string()).optional(),
     required_evidence: z.array(z.string()).optional(),
+    deliverable: z.enum(["repository", "artifact"]).optional().default("repository"),
     initiative: z.object({
         title: z.string().nullable().optional(),
         desired_outcome: z.string().nullable().optional(),
@@ -65,6 +67,7 @@ const workPackageSchema = z.object({
     }).optional(),
     decisions: z.array(z.object({ question: z.string(), decision: z.string() })).optional(),
     rework_feedback: z.string().nullable().optional(),
+    working_language: z.enum(["en", "zh"]).optional(),
 }).nullable().optional();
 export async function renewLeases(client, config) {
     for (const active of Object.values(config.activeAttempts)) {
@@ -272,7 +275,10 @@ async function runClaimedAssignment(client, config, driver, workspace, brief, ta
     const task = taskDetailSchema.parse(detail.task);
     const executionContract = executionContractSchema.parse(detail.execution_contract ?? {});
     const workPackage = workPackageSchema.parse(detail.work_package) ?? null;
-    const spec = parseTaskSpec(task.spec_json);
+    const parsedSpec = parseTaskSpec(task.spec_json);
+    const deliverable = workPackage?.deliverable ?? parsedSpec.deliverable;
+    const spec = { ...parsedSpec, deliverable };
+    const artifactDelivery = deliverable === "artifact";
     const grants = z.array(z.string()).parse(task.grants_json ? JSON.parse(task.grants_json) : []);
     const reworkFeedback = task.delivery_state === "changes_requested" ? changesRequestedFeedback(task.delivery_summary) : null;
     // Recompile current state at claim time — earlier packages may have moved the repo.
@@ -309,6 +315,7 @@ async function runClaimedAssignment(client, config, driver, workspace, brief, ta
         }
     }
     let attemptWorkspace;
+    let deliverySubmitted = false;
     if (options.existingWorktree) {
         attemptWorkspace = options.existingWorktree;
     }
@@ -486,20 +493,26 @@ async function runClaimedAssignment(client, config, driver, workspace, brief, ta
         }
         await client.updateAttempt(taskId, { phase: "agent_finished", delivery: { spec, report } });
         await submitFinishedDelivery(client, taskId);
+        deliverySubmitted = true;
         console.log(`Assignment ${taskId} delivered for review and acceptance.`);
     }
     finally {
         clearInterval(renewTimer);
         if (heartbeatTimer)
             clearInterval(heartbeatTimer);
-        // F-07: dispose the attempt worktree so the next claim cannot inherit edits.
-        // Terminal submit may already have cleared activeAttempts — never throw from cleanup.
-        const path = config.activeAttempts[taskId]?.worktreePath ?? attemptWorkspace;
-        await removeAttemptWorktree(workspace, path).catch((error) => {
-            console.error(`Attempt worktree cleanup failed: ${redactSecrets(error instanceof Error ? error.message : "unknown")}`);
-        });
-        if (config.activeAttempts[taskId]) {
-            await client.updateAttempt(taskId, { worktreePath: undefined }).catch(() => undefined);
+        if (artifactDelivery && !deliverySubmitted) {
+            console.error(`Artifact delivery was not submitted; retained generated files at ${attemptWorkspace}`);
+        }
+        else {
+            // F-07: dispose the attempt worktree so the next claim cannot inherit edits.
+            // Terminal submit may already have cleared activeAttempts — never throw from cleanup.
+            const path = config.activeAttempts[taskId]?.worktreePath ?? attemptWorkspace;
+            await removeAttemptWorktree(workspace, path).catch((error) => {
+                console.error(`Attempt worktree cleanup failed: ${redactSecrets(error instanceof Error ? error.message : "unknown")}`);
+            });
+            if (config.activeAttempts[taskId]) {
+                await client.updateAttempt(taskId, { worktreePath: undefined }).catch(() => undefined);
+            }
         }
     }
 }
@@ -658,6 +671,24 @@ async function prepareDelivery(client, attemptId, taskId, report) {
 }
 export function validateDeliveryReport(report, spec, grants = []) {
     validateChangeScope(report, spec.change_scope ?? []);
+    if (spec.deliverable === "artifact") {
+        const published = report.evidence.some((item) => {
+            if (!["preview", "research", "documentation"].includes(item.kind))
+                return false;
+            if (!item.uri || !item.digest || !/^sha256:[0-9a-f]{64}$/i.test(item.digest))
+                return false;
+            try {
+                const protocol = new URL(item.uri).protocol;
+                return protocol === "https:" || protocol === "http:";
+            }
+            catch {
+                return false;
+            }
+        });
+        if (!published) {
+            throw new Error("Artifact delivery requires a published HTTP(S) URL and sha256 digest");
+        }
+    }
     // Invariant 9: grants bound what an attempt may do. Cursor/plan-mode are soft hints the headless
     // agent can leave, so repository-write authority is enforced here on the reported delivery: a task
     // without repo_write must not report repository changes.

package/dist/ops.js

@@ -0,0 +1,199 @@
+/**
+ * Cross-platform operator helpers (macOS / Linux / Windows).
+ * Invoked as: npx @miraland-labs/conduit-bridge ops <connect|install|…>
+ */
+import { spawnSync } from "node:child_process";
+import { existsSync, readFileSync } from "node:fs";
+import { homedir, platform } from "node:os";
+import { join, resolve } from "node:path";
+export const OPS_VERBS = [
+    "connect", "install", "online", "offline", "status", "disconnect", "uninstall",
+];
+const LOCAL_FUEL_DRIVERS = new Set(["cursor", "kiro", "antigravity"]);
+export function defaultOpsEnvPath(home = homedir()) {
+    return join(home, ".config", "conduit", "ops.env");
+}
+/** Expand $HOME, %USERPROFILE%, and leading ~ for cross-platform env values. */
+export function expandOpsValue(value, home = homedir()) {
+    let next = value.trim();
+    if ((next.startsWith('"') && next.endsWith('"')) || (next.startsWith("'") && next.endsWith("'"))) {
+        next = next.slice(1, -1);
+    }
+    next = next.replace(/%USERPROFILE%/gi, home).replace(/%HOME%/gi, home);
+    next = next.replace(/\$HOME\b/g, home).replace(/\$\{HOME\}/g, home);
+    if (next.startsWith("~/") || next === "~")
+        next = join(home, next.slice(2));
+    return next;
+}
+export function parseOpsEnvFile(text, home = homedir()) {
+    const out = {};
+    for (const raw of text.split(/\r?\n/)) {
+        const line = raw.trim();
+        if (!line || line.startsWith("#"))
+            continue;
+        const eq = line.indexOf("=");
+        if (eq <= 0)
+            continue;
+        const key = line.slice(0, eq).trim();
+        if (!/^[A-Za-z_][A-Za-z0-9_]*$/.test(key))
+            continue;
+        out[key] = expandOpsValue(line.slice(eq + 1), home);
+    }
+    return out;
+}
+export function loadOpsEnv(home = homedir(), cwd = process.cwd()) {
+    const candidates = [
+        process.env.CONDUIT_OPS_ENV,
+        join(cwd, ".conduit-ops.env"),
+        defaultOpsEnvPath(home),
+    ].filter((path) => Boolean(path));
+    let loadedFrom = null;
+    let fileValues = {};
+    for (const path of candidates) {
+        if (!existsSync(path))
+            continue;
+        fileValues = parseOpsEnvFile(readFileSync(path, "utf8"), home);
+        loadedFrom = path;
+        break;
+    }
+    const pick = (key, fallback) => {
+        const fromEnv = process.env[key];
+        if (fromEnv !== undefined && fromEnv !== "")
+            return expandOpsValue(fromEnv, home);
+        if (fileValues[key])
+            return fileValues[key];
+        return fallback;
+    };
+    return {
+        CONDUIT_URL: pick("CONDUIT_URL", ""),
+        CONDUIT_ORG: pick("CONDUIT_ORG", ""),
+        CONDUIT_WORKSPACE: pick("CONDUIT_WORKSPACE", ""),
+        CONDUIT_REPO: pick("CONDUIT_REPO", ""),
+        CONDUIT_DRIVERS: pick("CONDUIT_DRIVERS", "cursor"),
+        CONDUIT_ROLES: pick("CONDUIT_ROLES", "implement research"),
+        loadedFrom,
+    };
+}
+export function requireOpsEnv(env) {
+    if (env.loadedFrom || env.CONDUIT_URL || env.CONDUIT_WORKSPACE)
+        return;
+    const path = defaultOpsEnvPath();
+    throw new Error(`Missing ops env. Create it once:\n` +
+        `  Create folder: ${join(homedir(), ".config", "conduit")}\n` +
+        `  Copy env.example to: ${path}\n` +
+        `  Edit that file, then retry.`);
+}
+export function splitOpsList(value) {
+    return value.split(/[,\s]+/).map((item) => item.trim()).filter(Boolean);
+}
+export function resolveDrivers(env, argv) {
+    const fromArgs = argv.map((item) => item.trim()).filter(Boolean);
+    const drivers = fromArgs.length ? fromArgs : splitOpsList(env.CONDUIT_DRIVERS);
+    if (!drivers.length)
+        throw new Error("No drivers. Set CONDUIT_DRIVERS or pass ids.");
+    return drivers;
+}
+/** Quote args for a copy-pasteable shell/cmd line (paths with spaces). */
+export function shellQuoteArgs(args) {
+    return args.map((arg) => {
+        if (!/[^\w@%+=:,./\\-]/i.test(arg))
+            return arg;
+        return `"${arg.replaceAll('"', '\\"')}"`;
+    }).join(" ");
+}
+function defaultRunBridge(args, options = {}) {
+    // Re-enter this package's CLI in a child so ops stays a thin orchestrator.
+    const cli = process.argv[1];
+    const node = process.execPath;
+    const result = spawnSync(node, [cli, ...args], { stdio: "inherit", env: process.env });
+    if (result.error) {
+        if (options.allowFail)
+            return;
+        throw result.error;
+    }
+    if (result.status !== 0) {
+        if (options.allowFail)
+            return;
+        process.exit(result.status ?? 1);
+    }
+}
+export async function runOps(verb, argv = [], deps = {}) {
+    const runBridge = deps.runBridge ?? defaultRunBridge;
+    const host = deps.host ?? platform();
+    const env = deps.env ?? loadOpsEnv();
+    if (verb === "disconnect") {
+        runBridge(["uninstall-service"], { allowFail: true });
+        runBridge(["disconnect", "--yes"]);
+        console.log("Disconnected. Run: npx @miraland-labs/conduit-bridge@latest ops connect");
+        return;
+    }
+    if (verb === "uninstall") {
+        runBridge(["uninstall-service"]);
+        return;
+    }
+    if (verb === "status") {
+        if (env.loadedFrom) {
+            console.log(`Env: ${env.loadedFrom}`);
+            console.log(`URL: ${env.CONDUIT_URL || "(unset)"}`);
+            console.log(`Workspace: ${env.CONDUIT_WORKSPACE || "(unset)"}`);
+            console.log(`Repo: ${env.CONDUIT_REPO || "(none)"}`);
+            console.log(`Drivers: ${env.CONDUIT_DRIVERS}`);
+            console.log(`Roles: ${env.CONDUIT_ROLES}`);
+            console.log("");
+        }
+        else {
+            console.log("No ops.env loaded (showing drivers only).\n");
+        }
+        runBridge(["drivers"]);
+        return;
+    }
+    // Lane toggles only need Bridge config + optional driver ids — not a full ops.env.
+    if (verb === "online" || verb === "offline") {
+        const drivers = resolveDrivers(env, argv);
+        runBridge(["drivers", verb, ...drivers]);
+        return;
+    }
+    requireOpsEnv(env);
+    if (verb === "connect") {
+        if (!env.CONDUIT_URL)
+            throw new Error(`Set CONDUIT_URL in ${defaultOpsEnvPath()}`);
+        const args = ["join", "--url", env.CONDUIT_URL];
+        if (env.CONDUIT_ORG)
+            args.push("--organization", env.CONDUIT_ORG);
+        for (const role of splitOpsList(env.CONDUIT_ROLES))
+            args.push("--capability", role);
+        console.log(`Connecting to ${env.CONDUIT_URL} (roles: ${env.CONDUIT_ROLES})`);
+        console.log("Approve this computer in Connect when the browser opens.");
+        runBridge(args);
+        return;
+    }
+    if (verb === "install") {
+        if (!env.CONDUIT_WORKSPACE)
+            throw new Error(`Set CONDUIT_WORKSPACE in ${defaultOpsEnvPath()}`);
+        const workspace = resolve(expandOpsValue(env.CONDUIT_WORKSPACE));
+        const drivers = resolveDrivers(env, argv);
+        for (const id of drivers) {
+            if (LOCAL_FUEL_DRIVERS.has(id))
+                runBridge(["drivers", "fuel", id, "local"]);
+        }
+        runBridge(["drivers", "online", ...drivers]);
+        if (host === "win32") {
+            const runnerArgs = ["runner", "--workspace", workspace];
+            if (env.CONDUIT_REPO)
+                runnerArgs.push("--ensure-checkout", env.CONDUIT_REPO);
+            console.log("Windows: background install-service is not available.");
+            console.log("Keep a terminal open and run:");
+            console.log(`  npx @miraland-labs/conduit-bridge@latest ${shellQuoteArgs(runnerArgs)}`);
+            console.log(`Drivers online: ${drivers.join(", ")}`);
+            return;
+        }
+        const installArgs = ["install-service", "--workspace", workspace];
+        if (env.CONDUIT_REPO)
+            installArgs.push("--ensure-checkout", env.CONDUIT_REPO);
+        console.log(`Installing runner for ${workspace} (drivers: ${drivers.join(", ")})`);
+        runBridge(installArgs);
+        console.log("Done. Check with: npx @miraland-labs/conduit-bridge@latest ops status");
+        return;
+    }
+    throw new Error(`Unknown ops verb: ${verb}`);
+}

package/dist/service.js

@@ -34,7 +34,24 @@ export function runnerProgramArguments(options = {}) {
         args.push("--agent-timeout-minutes", options.agentTimeoutMinutes);
     return args;
 }
-export function launchdPlist(programArguments, stdoutPath) {
+/**
+ * PATH for LaunchAgent/systemd so agent CLIs in ~/.local/bin and Homebrew resolve
+ * without the operator hand-editing the unit.
+ */
+export function runnerServicePath(home = homedir(), nodeBin = dirname(process.execPath)) {
+    const parts = [
+        nodeBin,
+        join(home, ".local", "bin"),
+        "/opt/homebrew/bin",
+        "/usr/local/bin",
+        "/usr/bin",
+        "/bin",
+        "/usr/sbin",
+        "/sbin",
+    ];
+    return [...new Set(parts.filter(Boolean))].join(":");
+}
+export function launchdPlist(programArguments, stdoutPath, pathEnv = runnerServicePath()) {
     const argsXml = programArguments.map((arg) => `    <string>${escapeXml(arg)}</string>`).join("\n");
     return `<?xml version="1.0" encoding="UTF-8"?>
 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
@@ -46,6 +63,11 @@ export function launchdPlist(programArguments, stdoutPath) {
   <array>
 ${argsXml}
   </array>
+  <key>EnvironmentVariables</key>
+  <dict>
+    <key>PATH</key>
+    <string>${escapeXml(pathEnv)}</string>
+  </dict>
   <key>RunAtLoad</key>
   <true/>
   <key>KeepAlive</key>
@@ -58,7 +80,7 @@ ${argsXml}
 </plist>
 `;
 }
-export function systemdUserUnit(programArguments, workingDirectory) {
+export function systemdUserUnit(programArguments, workingDirectory, pathEnv = runnerServicePath()) {
     const execStart = programArguments.map(escapeSystemd).join(" ");
     return `[Unit]
 Description=Conduit Bridge runner
@@ -68,6 +90,7 @@ Wants=network-online.target
 [Service]
 Type=simple
 WorkingDirectory=${workingDirectory}
+Environment=PATH=${escapeSystemd(pathEnv)}
 ExecStart=${execStart}
 Restart=always
 RestartSec=5

package/ops/conduit-ops

@@ -0,0 +1,10 @@
+#!/usr/bin/env bash
+# Usage: ./conduit-ops <connect|install|online|offline|status|disconnect|uninstall> [args…]
+set -euo pipefail
+if [[ $# -lt 1 ]]; then
+  echo "Usage: $0 <connect|install|online|offline|status|disconnect|uninstall> [args…]" >&2
+  exit 1
+fi
+verb=$1
+shift
+exec npx --yes @miraland-labs/conduit-bridge@latest ops "$verb" "$@"

package/ops/conduit-ops.cmd

@@ -0,0 +1,8 @@
+@echo off
+REM Usage: conduit-ops.cmd <connect|install|online|offline|status|disconnect|uninstall> [args…]
+if "%~1"=="" (
+  echo Usage: %~nx0 ^<connect^|install^|online^|offline^|status^|disconnect^|uninstall^> [args…]
+  exit /b 1
+)
+npx --yes @miraland-labs/conduit-bridge@latest ops %*
+if errorlevel 1 exit /b %errorlevel%

package/ops/connect.cmd

@@ -0,0 +1,4 @@
+@echo off
+REM Windows launcher. macOS/Linux: use connect.sh
+npx --yes @miraland-labs/conduit-bridge@latest ops connect %*
+if errorlevel 1 exit /b %errorlevel%

package/ops/connect.sh

@@ -0,0 +1,4 @@
+#!/usr/bin/env bash
+# Cross-platform launcher (macOS/Linux). Windows: use connect.cmd
+set -euo pipefail
+exec npx --yes @miraland-labs/conduit-bridge@latest ops connect "$@"

package/ops/disconnect.cmd

@@ -0,0 +1,4 @@
+@echo off
+REM Windows launcher. macOS/Linux: use disconnect.sh
+npx --yes @miraland-labs/conduit-bridge@latest ops disconnect %*
+if errorlevel 1 exit /b %errorlevel%

package/ops/disconnect.sh

@@ -0,0 +1,4 @@
+#!/usr/bin/env bash
+# Cross-platform launcher (macOS/Linux). Windows: use disconnect.cmd
+set -euo pipefail
+exec npx --yes @miraland-labs/conduit-bridge@latest ops disconnect "$@"

package/ops/env.example

@@ -0,0 +1,13 @@
+# Configuration (not scripts). Copy to ~/.config/conduit/ops.env and edit once.
+# Same file works on macOS, Linux, and Windows ($HOME / %USERPROFILE% / ~ are expanded).
+#
+# Cross-platform commands (any OS):
+#   npx @miraland-labs/conduit-bridge@latest ops connect
+#   npx @miraland-labs/conduit-bridge@latest ops install
+# Local shortcuts after init-ops: ~/conduit/ops/*.sh (Mac/Linux) or *.cmd (Windows)
+CONDUIT_URL=https://api.conduit.miraland.io
+# CONDUIT_ORG=your-org-slug
+CONDUIT_WORKSPACE=$HOME/agentic/promote-pr402
+# CONDUIT_REPO=https://github.com/miralandlabs/promote-pr402.git
+CONDUIT_DRIVERS=cursor
+CONDUIT_ROLES=implement research

package/ops/install.cmd

@@ -0,0 +1,4 @@
+@echo off
+REM Windows launcher. macOS/Linux: use install.sh
+npx --yes @miraland-labs/conduit-bridge@latest ops install %*
+if errorlevel 1 exit /b %errorlevel%

package/ops/install.sh

@@ -0,0 +1,4 @@
+#!/usr/bin/env bash
+# Cross-platform launcher (macOS/Linux). Windows: use install.cmd
+set -euo pipefail
+exec npx --yes @miraland-labs/conduit-bridge@latest ops install "$@"

package/ops/offline.cmd

@@ -0,0 +1,4 @@
+@echo off
+REM Windows launcher. macOS/Linux: use offline.sh
+npx --yes @miraland-labs/conduit-bridge@latest ops offline %*
+if errorlevel 1 exit /b %errorlevel%

package/ops/offline.sh

@@ -0,0 +1,4 @@
+#!/usr/bin/env bash
+# Cross-platform launcher (macOS/Linux). Windows: use offline.cmd
+set -euo pipefail
+exec npx --yes @miraland-labs/conduit-bridge@latest ops offline "$@"

package/ops/online.cmd

@@ -0,0 +1,4 @@
+@echo off
+REM Windows launcher. macOS/Linux: use online.sh
+npx --yes @miraland-labs/conduit-bridge@latest ops online %*
+if errorlevel 1 exit /b %errorlevel%

package/ops/online.sh

@@ -0,0 +1,4 @@
+#!/usr/bin/env bash
+# Cross-platform launcher (macOS/Linux). Windows: use online.cmd
+set -euo pipefail
+exec npx --yes @miraland-labs/conduit-bridge@latest ops online "$@"

package/ops/status.cmd

@@ -0,0 +1,4 @@
+@echo off
+REM Windows launcher. macOS/Linux: use status.sh
+npx --yes @miraland-labs/conduit-bridge@latest ops status %*
+if errorlevel 1 exit /b %errorlevel%

package/ops/status.sh

@@ -0,0 +1,4 @@
+#!/usr/bin/env bash
+# Cross-platform launcher (macOS/Linux). Windows: use status.cmd
+set -euo pipefail
+exec npx --yes @miraland-labs/conduit-bridge@latest ops status "$@"

package/ops/uninstall.cmd

@@ -0,0 +1,4 @@
+@echo off
+REM Windows launcher. macOS/Linux: use uninstall.sh
+npx --yes @miraland-labs/conduit-bridge@latest ops uninstall %*
+if errorlevel 1 exit /b %errorlevel%

package/ops/uninstall.sh

@@ -0,0 +1,4 @@
+#!/usr/bin/env bash
+# Cross-platform launcher (macOS/Linux). Windows: use uninstall.cmd
+set -euo pipefail
+exec npx --yes @miraland-labs/conduit-bridge@latest ops uninstall "$@"

package/package.json

@@ -1,13 +1,14 @@
 {
   "name": "@miraland-labs/conduit-bridge",
-  "version": "0.9.0",
-  "description": "Conduit Bridge CLI — join, connect, multi-driver lanes, and run Claude Code / Codex / Cursor / OpenCode / Kiro / Antigravity agents for a Conduit organization",
+  "version": "0.9.2",
+  "description": "Conduit Bridge CLI — join, connect, disconnect, multi-driver lanes, and run Claude Code / Codex / Cursor / OpenCode / Kiro / Antigravity agents for a Conduit organization",
   "type": "module",
   "bin": {
     "conduit": "dist/cli.js"
   },
   "files": [
     "dist",
+    "ops",
     "README.md"
   ],
   "engines": {