@miraland-labs/conduit-bridge 0.9.10 → 0.9.11

package/README.md

@@ -2,7 +2,7 @@
 
 Local Bridge CLI for [Conduit](https://github.com/miralandlabs/conduit). Connects a computer to one organization, claims work, and drives a local agent.
 
-**Package version:** `0.9.10` — heartbeat protocol 2 requires a clean workspace plus a ready, versioned driver lane before dispatch. Cursor assignments with `external_network` allow-list `WebFetch(*)` so headless fetches are not auto-rejected. Attempt worktrees fetch/start from the initiative base when the source tip is behind or history was rewritten, without resetting the source checkout. Also includes **ops** helpers for macOS / Linux / Windows, LaunchAgent/systemd **PATH** for `~/.local/bin`, disconnect/disengage, multi-driver lanes, shared slots **1–4**, worktrees, and optional `--ensure-checkout`. Protocol 1 heartbeats remain compatible for presence but cannot receive work.
+**Package version:** `0.9.11` — heartbeat protocol 2 requires a clean workspace plus a ready, versioned driver lane before dispatch. Cursor assignments with `external_network` allow-list `WebFetch(*)` and pass `--force` (required for headless fetch); research-only networked runs also deny `Shell(*)` / `Write(**)`. Attempt worktrees fetch/start from the initiative base when the source tip is behind or history was rewritten, without resetting the source checkout. Also includes **ops** helpers for macOS / Linux / Windows, LaunchAgent/systemd **PATH** for `~/.local/bin`, disconnect/disengage, multi-driver lanes, shared slots **1–4**, worktrees, and optional `--ensure-checkout`. Protocol 1 heartbeats remain compatible for presence but cannot receive work.
 
 ## Prerequisites
 

package/dist/driver.js

@@ -440,10 +440,12 @@ export const codexDriver = {
  * Current Cursor Agent schema accepts only `permissions.{allow,deny}` (no
  * `version` / `approvalMode`). Outside the allow list is denied without --force.
  *
- * `external_network` maps to WebFetch(*) — without it, headless `-p` runs get
- * "User Rejected" on every fetch (no interactive approval). Deliberately not
- * `--force`/`--yolo`: that would also auto-allow unlisted Shell commands.
- * Codex's parallel is sandbox_workspace_write.network_access=true.
+ * `external_network` maps to WebFetch(*) plus `--force` on the run (see
+ * cursorRunArgs). Field evidence: allow-listing WebFetch alone still yields
+ * "User Rejected" under headless `-p`; `--force` is required for fetch to
+ * succeed. Because `--force` auto-allows unlisted tools, research-only
+ * networked assignments also deny Shell(*) and Write(**). Codex's parallel is
+ * sandbox_workspace_write.network_access=true.
  */
 export function cursorPermissionsForGrants(grants, verificationCommands = [], capabilities = []) {
     const allow = [];
@@ -457,7 +459,16 @@ export function cursorPermissionsForGrants(grants, verificationCommands = [], ca
     // Cursor docs: WebFetch(domainOrPattern); WebFetch(*) auto-approves any domain.
     if (capabilities.includes("external_network"))
         allow.push("WebFetch(*)");
-    return { allow, deny: deniedCommands.map((command) => `Shell(${command})`) };
+    const deny = deniedCommands.map((command) => `Shell(${command})`);
+    // --force opens anything not denied; lock shell/write when the assignment has no mutate/shell grants.
+    if (capabilities.includes("external_network")
+        && !grants.includes("repo_write")
+        && !grants.includes("test_run")
+        && !grants.includes("branch_create")
+        && !grants.includes("pr_create")) {
+        deny.push("Shell(*)", "Write(**)");
+    }
+    return { allow, deny };
 }
 /**
  * Cursor CLI arguments. Deliberately no `--mode plan` for read-only assignments: plan mode is not an
@@ -475,6 +486,9 @@ export function cursorRunArgs(input) {
     const args = ["-p", "--output-format", "json", "--workspace", input.workspace];
     if (input.trustWorkspace)
         args.push("--trust");
+    // Headless WebFetch requires --force even when WebFetch(*) is allow-listed (Cursor CLI 2026.07+).
+    if (input.capabilities?.includes("external_network"))
+        args.push("--force");
     if (input.model)
         args.push("--model", input.model);
     if (input.resumeSessionId)

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@miraland-labs/conduit-bridge",
-  "version": "0.9.10",
+  "version": "0.9.11",
   "description": "Conduit Bridge CLI — join, connect, disconnect, multi-driver lanes, and run Claude Code / Codex / Cursor / OpenCode / Kiro / Antigravity agents for a Conduit organization",
   "type": "module",
   "bin": {