bridgie 0.6.0 → 0.6.1

package/README.md

@@ -93,6 +93,14 @@ Verification commands live in `.bridgie/policy.yaml` (`verify.commands.<tier>`;
 writes). Without them Bridgie uses the lane's commands for the stacks it detects; a tier the risk requires
 but nobody configured is never skipped silently.
 
+Which model CLI runs each seat is set in `~/.bridgie/policy.yaml` (`routing.tiers`, `routing.seats`). When the
+routed CLI cannot run a seat at all (not installed, not set up for the folder, signed out, over its limit,
+crashed), Bridgie warns and runs the seat on the next CLI that is installed and fits it: the agent you are
+running Bridgie from, then Claude Code, Codex, Antigravity, Copilot. A model that ran but answered badly is not
+retried elsewhere, and the reviewer still needs a different model family from the builder. Set your own order
+with `routing.fallback: [codex, claude-code]`, turn it off with `routing.fallback: []`, or pin one CLI for a
+command with `BRIDGIE_ADAPTER=<name>`.
+
 While an agent runs, Bridgie state is read-only (a project-wide seat lock): your decisions are refused with a
 message rather than rolled back, and anything the agent adds, changes or deletes under `.bridgie/` is restored.
 

package/VERSION

@@ -1 +1 @@
-0.6.0
+0.6.1

package/adapters/antigravity/run.mjs

@@ -4,7 +4,9 @@ import { dirname, join, basename } from 'node:path';
 import { homedir } from 'node:os';
 import * as A from '../lib/common.mjs';
 
-const o = A.parse(process.argv.slice(2));
+// --check-cwd DIR (used by bridgie doctor): OK when an Antigravity project covers DIR, else the reason.
+const cc = process.argv.indexOf('--check-cwd');
+const o = cc >= 0 ? {} : A.parse(process.argv.slice(2));
 function findAgy() {
   if (process.env.BRIDGIE_AGY_BIN) return process.env.BRIDGIE_AGY_BIN;
   const onPath = A.which('agy');
@@ -33,6 +35,12 @@ function findProject(dir) {
   return best?.id || null;
 }
 const bin = findAgy();
+if (cc >= 0) {
+  const dir = process.argv[cc + 1];
+  const id = findProject(dir);
+  if (id) { process.stdout.write(`OK ${id}\n`); process.exit(0); }
+  process.stdout.write(`no Antigravity project covers ${dir}\n`); process.exit(1);
+}
 if (o.probe) A.probe(bin, 'agy (PATH or %LOCALAPPDATA%/agy/bin)');
 if (o.caps) A.caps({ vendor: 'google', reads_repo: true, reads_web: false });
 A.requireRunArgs(o);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "bridgie",
-  "version": "0.6.0",
+  "version": "0.6.1",
   "description": "A file-based operating system for running a company's work through AI agents: decide, build, verify, accept, learn.",
   "type": "module",
   "bin": { "bridgie": "bin/bridgie.mjs" },

package/runner/cli/seat.mjs

@@ -84,39 +84,70 @@ export async function runSeat(slug, seat, opts = {}) {
   const { manifest } = loadSeat(seat);
   let route;
   try { route = st.route(root, manifest); } catch (e) { die(`routing failed: ${e.message}`); }
-  const { adapter, model = 'default', effort } = route;
-  if (adapter === 'none') die(`seat ${seat} has no model adapter (mechanical seats run in the verify command)`);
-  const [cmd, pre] = adapterCommand(adapter);
+  if (route.adapter === 'none') die(`seat ${seat} has no model adapter (mechanical seats run in the verify command)`);
   const mode = manifest.writes === 'worktree' ? 'write' : 'readonly';
   const output = manifest.output;
-  const { raw, caps } = adapterCapabilities(adapter, seatDir, model);
-  writeFileSync(join(runDir, 'adapter.json'), raw + '\n');
-  if ((manifest.tools || []).includes('web') && caps.reads_web !== true) die(`seat ${name} needs web access; adapter '${adapter}' has none (route it to one that does: routing.seats.${name})`);
+  const needsWeb = (manifest.tools || []).includes('web');
+  // fits: can this adapter take the seat? (web for research; repo access and another model family
+  // for the reviewer, when the caller says so)
+  const fits = caps => (!needsWeb || caps.reads_web === true) && (!opts.needsRepo || caps.reads_repo === true) && (!opts.avoidVendor || caps.vendor !== opts.avoidVendor);
+  let { adapter, model = 'default', effort } = route;
+  let { raw, caps } = adapterCapabilities(adapter, seatDir, model);
+  if (needsWeb && caps.reads_web !== true) die(`seat ${name} needs web access; adapter '${adapter}' has none (route it to one that does: routing.seats.${name})`);
+  const spare = st.fallbacks(root, adapter);
+  // nextFallback: the next spare adapter whose CLI is installed and that fits the seat.
+  const nextFallback = () => {
+    while (spare.length) {
+      const a = spare.shift();
+      if (!existsSync(join(HOME, 'adapters', a))) continue;
+      const [c, p] = adapterCommand(a);
+      const probe = spawnSync(c, [...p, '--probe'], { encoding: 'utf8', timeout: 30000 });
+      if (probe.status !== 0 || !/OK/.test(probe.stdout || '')) continue;
+      const got = adapterCapabilities(a, seatDir, 'default');
+      if (fits(got.caps)) return { adapter: a, ...got };
+    }
+    return null;
+  };
 
-  // 3. lock, snapshot, launch, measure
+  // 3. lock, snapshot, launch, measure; on an adapter that cannot run at all, warn and fall back
   const locked = opts.lock !== false;
   const excludes = [relTo(root, runDir), ...(opts.exclude ? [relTo(root, opts.exclude)] : [])];
   if (locked) seatLock(root, name, runDir);
   try {
     try { snapshot(root, join(runDir, '.snapshot'), excludes); } catch (e) { die(e.message); }
-    const startedAt = new Date().toISOString().replace(/\.\d+Z$/, 'Z'), start = Date.now();
-    const args = [...pre, '--seat', seatDir, '--prompt', join(runDir, 'prompt.md'), '--out', join(runDir, output), '--cwd', cwd, '--mode', mode, '--model', model, ...(effort ? ['--effort', effort] : [])];
-    const rc = await launch(cmd, args, join(runDir, 'adapter.log'));
-    st.costAdd(runDir, { seat: name, adapter, model, started_at: startedAt, duration_s: Math.round((Date.now() - start) / 1000), attempt: n, exit_code: rc, tokens_in: null, tokens_out: null, usd: null });
+    const fellBack = [];
+    for (;;) {
+      writeFileSync(join(runDir, 'adapter.json'), raw + '\n');
+      const [cmd, pre] = adapterCommand(adapter);
+      const startedAt = new Date().toISOString().replace(/\.\d+Z$/, 'Z'), start = Date.now();
+      const args = [...pre, '--seat', seatDir, '--prompt', join(runDir, 'prompt.md'), '--out', join(runDir, output), '--cwd', cwd, '--mode', mode, '--model', model, ...(effort ? ['--effort', effort] : [])];
+      const rc = await launch(cmd, args, join(runDir, 'adapter.log'));
+      st.costAdd(runDir, { seat: name, adapter, model, started_at: startedAt, duration_s: Math.round((Date.now() - start) / 1000), attempt: n, exit_code: rc, tokens_in: null, tokens_out: null, usd: null });
 
-    // 4. single-writer guard (P1): any added, removed or changed state file fails the run
-    const d = check(root, join(runDir, '.snapshot'), excludes);
-    if (d.added.length || d.removed.length || d.changed.length) {
-      const restored = restore(root, join(runDir, '.snapshot'), excludes);
-      writeFileSync(join(runDir, 'VIOLATION'), `seat ${name} modified Bridgie state directly; state restored from snapshot\n${JSON.stringify(restored)}\n`);
-      die(`seat ${name} wrote to Bridgie state files; run failed and state restored (see ${join(runDir, 'VIOLATION')})`);
-    }
-    rmSync(join(runDir, '.snapshot'), { recursive: true, force: true });   // kept only beside a VIOLATION
-    if (rc !== 0) {
+      // 4. single-writer guard (P1): any added, removed or changed state file fails the run
+      const d = check(root, join(runDir, '.snapshot'), excludes);
+      if (d.added.length || d.removed.length || d.changed.length) {
+        const restored = restore(root, join(runDir, '.snapshot'), excludes);
+        writeFileSync(join(runDir, 'VIOLATION'), `seat ${name} modified Bridgie state directly; state restored from snapshot\n${JSON.stringify(restored)}\n`);
+        die(`seat ${name} wrote to Bridgie state files; run failed and state restored (see ${join(runDir, 'VIOLATION')})`);
+      }
+      if (rc === 0) break;
       let why = '';
-      try { why = readFileSync(join(runDir, 'adapter.log'), 'utf8').trim().split(/\r?\n/).filter(l => /^(adapter|extract-json):|not found/.test(l)).pop() || ''; } catch {}
-      die(`adapter ${adapter} exited ${rc} for seat ${name}${why ? `: ${why}` : ''}; see ${join(runDir, 'adapter.log')}`);
+      try { why = readFileSync(join(runDir, 'adapter.log'), 'utf8').trim().split(/\r?\n/).filter(l => /^(adapter|extract-json):|not found|no Antigravity project/.test(l)).pop() || ''; } catch {}
+      const failed = `adapter ${adapter} exited ${rc} for seat ${name}${why ? `: ${why}` : ''}`;
+      // 1: the adapter could not start (CLI missing, not set up); 6: the CLI failed (signed out, over
+      // its limit, crashed); 127: could not launch. A model that ran but answered badly (4, 5) is not
+      // a reason to switch models.
+      const next = [1, 6, 127].includes(rc) ? nextFallback() : null;
+      if (!next) die(`${failed}; see ${join(runDir, 'adapter.log')}${fellBack.length ? ` (after falling back from ${fellBack.join(', ')})` : ''}`);
+      process.stderr.write(`bridgie: warning: ${failed}; falling back to ${next.adapter}\n`);
+      renameSync(join(runDir, 'adapter.log'), join(runDir, `adapter-${adapter}.log`));
+      for (const f of [output, 'reply.txt']) rmSync(join(runDir, f), { force: true });
+      fellBack.push(adapter);
+      writeFileSync(join(runDir, 'fallback.json'), JSON.stringify({ routed: route.adapter, failed: fellBack, used: next.adapter }, null, 2) + '\n');
+      ({ adapter, raw, caps } = next); model = 'default'; effort = null;
     }
+    rmSync(join(runDir, '.snapshot'), { recursive: true, force: true });   // kept only beside a VIOLATION
   } finally {
     if (locked) seatUnlock(root);
   }

package/runner/cmd/setup.mjs

@@ -48,8 +48,14 @@ function routing() {
 }
 
 const inside = (dir, parent) => { const r = relative(parent, dir); return r && !r.startsWith('..') && !isAbsolute(r); };
-const run = (cmd, args) => spawnSync(cmd, args, { stdio: 'inherit', shell: IS_WIN });   // npm/npx are .cmd files on Windows
-const q = s => (IS_WIN && /\s/.test(s) ? `"${s}"` : s);                                  // shell: true on Windows needs quoting
+// Run npm or npx. On Windows they are .cmd files, which only run through cmd.exe, so build one command
+// line with every part quoted (npm usually lives in C:\Program Files\nodejs) and let cmd find the
+// command by name; elsewhere run the resolved path directly with no shell.
+const winQuote = s => (/[\s"&|<>^()%!]/.test(s) ? `"${s.replace(/"/g, '""')}"` : s);
+export const commandLine = (name, args) => [name, ...args].map(winQuote).join(' ');
+const run = (name, path, args, opts = {}) => IS_WIN
+  ? spawnSync(commandLine(name, args), { stdio: 'inherit', ...opts, shell: true })
+  : spawnSync(path, args, { stdio: 'inherit', ...opts });
 
 export default async function setup(argv) {
   const a = parseArgs(argv, { 'no-link': 'bool', 'no-skill': 'bool', 'no-policy': 'bool', agent: 'list', path: 'bool', policy: 'bool' }, 'setup');
@@ -57,28 +63,29 @@ export default async function setup(argv) {
   const say = s => process.stdout.write(`${s}\n`);
   const npm = which('npm'), npx = which('npx');
 
-  // 1. command on PATH
+  // 1. command on PATH. The old bash-era Windows shim goes only once the new command is in place.
   const oldShim = join(process.env.LOCALAPPDATA || join(home, 'AppData', 'Local'), 'Microsoft', 'WindowsApps', 'bridgie.cmd');
-  if (existsSync(oldShim) && /bin[\\/]bridgie"/.test(readFileSync(oldShim, 'utf8'))) { rmSync(oldShim); say(`removed the old bash shim ${oldShim}`); }
-  if (!a['no-link']) {
+  const dropShim = () => { if (existsSync(oldShim) && /bin[\\/]bridgie"/.test(readFileSync(oldShim, 'utf8'))) { rmSync(oldShim); say(`removed the old bash shim ${oldShim}`); } };
+  if (a['no-link']) dropShim();
+  else {
     const fromClone = existsSync(join(HOME, '.git'));
-    const globalRoot = npm ? (spawnSync(npm, ['root', '-g'], { encoding: 'utf8', shell: IS_WIN }).stdout || '').trim() : '';
-    if (!npm) say(`npm not found; put ${join(HOME, 'bin')} on your PATH to use bridgie`);
-    else if (!fromClone && globalRoot && inside(resolve(HOME), resolve(globalRoot))) say(`bridgie ${version()} is already installed with npm`);
+    const globalRoot = npm ? (run('npm', npm, ['root', '-g'], { stdio: 'pipe', encoding: 'utf8' }).stdout || '').trim() : '';
+    if (!npm) say(`npm not found; install Node.js (it includes npm), then run: npx bridgie@latest setup`);
+    else if (!fromClone && globalRoot && inside(resolve(HOME), resolve(globalRoot))) { say(`bridgie ${version()} is already installed with npm`); dropShim(); }
     else {
       const target = fromClone ? HOME : `bridgie@${version()}`;
-      const r = run(npm, ['install', '-g', q(target)]);
-      if (r.status === 0) say(`bridgie ${fromClone ? 'linked from this clone' : `${version()} installed`} with npm: works in PowerShell, cmd, Git Bash, macOS and Linux terminals`);
-      else say(`npm install -g failed; put ${join(HOME, 'bin')} on your PATH instead, or fix npm's global prefix (npm config get prefix)`);
+      const r = run('npm', npm, ['install', '-g', target]);
+      if (r.status === 0) { say(`bridgie ${fromClone ? 'linked from this clone' : `${version()} installed`} with npm: works in PowerShell, cmd, Git Bash, macOS and Linux terminals`); dropShim(); }
+      else say(`npm install -g failed; run it yourself to see why: npm install -g ${fromClone ? `"${HOME}"` : target}   (or check npm's global prefix: npm config get prefix)`);
     }
   }
 
   // 2. agent skill, for every agent on this machine, through the skills installer
   if (!a['no-skill']) {
     const args = addArgs(HOME, a.agent);
-    const r = npx ? run(npx, args.map(q)) : { status: 1 };
+    const r = npx ? run('npx', npx, args) : { status: 1 };
     if (r.status === 0) say('bridgie skill installed for the agents found on this machine (list them: npx skills ls -g)');
-    else say(`could not run the skills installer${npx ? '' : ' (npx not found)'}; install the skill by hand: npx ${args.join(' ')}`);
+    else say(`could not run the skills installer${npx ? '' : ' (npx not found)'}; install the skill by hand: npx -y ${args[1]} add anoopvijayan-dev/bridgie -g -y --copy`);
     say('Claude chat and Claude cloud sessions read skills from claude.ai: upload skills/bridgie/SKILL.md there once (and again after it changes)');
   }
 

package/runner/cmd/verify.mjs

@@ -92,7 +92,7 @@ export default async function verify(argv) {
   // 4. reviewer in a detached, read-only worktree (R3)
   const rv = g.reviewWorktree(root, slug, task);
   let rvDir, failure = null;
-  try { rvDir = await runSeat(slug, 'verify/reviewer', { root, task, cwd: rv, packet: vdir }); } catch (e) { failure = e; }
+  try { rvDir = await runSeat(slug, 'verify/reviewer', { root, task, cwd: rv, packet: vdir, needsRepo: true, avoidVendor: fl.crossFamily(root, slug) ? fl.producerVendor(root, slug, task) : '' }); } catch (e) { failure = e; }
   const dirty = git(['-C', rv, 'status', '--porcelain']).out.trim();
   g.removeWorktree(root, rv);
   if (failure) die(`${failure.message}\nverify: reviewer run failed for ${task}; task stays in verify`);

package/runner/doctor.mjs

@@ -63,6 +63,17 @@ export function doctor(root) {
 
   if (!root) { warn('not inside a project: tool checks only'); return r; }
   try { st.loadPolicy(root); ok('project policy merges and validates'); } catch (e) { fail(`project policy: ${e.message}`); }
+  try {   // Antigravity runs only in a folder one of its projects covers; say so before a seat fails
+    const pol = st.loadPolicy(root), routes = [...Object.values(pol.routing?.tiers || {}), ...Object.values(pol.routing?.seats || {})];
+    if (!process.env.BRIDGIE_ADAPTER && routes.some(x => x.adapter === 'antigravity')) {
+      const p = spawnSync(process.execPath, [join(st.HOME, 'adapters', 'antigravity', 'run.mjs'), '--check-cwd', root], { encoding: 'utf8', timeout: 30000 });
+      if (p.status === 0) ok(`Antigravity project for this folder: ${(p.stdout || '').trim().replace(/^OK /, '')}`);
+      else {
+        const spare = st.fallbacks(root, 'antigravity')[0];
+        warn(`no Antigravity project covers ${root}; seats routed to Antigravity will ${spare ? `fall back to ${spare}` : 'fail'}. Fix: open this folder once in Antigravity, or set BRIDGIE_AGY_PROJECT to a project id`);
+      }
+    }
+  } catch { /* policy errors are reported above */ }
   const betSchema = st.loadSchema('bet'), decSchema = st.loadSchema('decisions'); let betFail = 0;
   for (const s of st.listBets(root)) {
     const e1 = validate(betSchema, st.readFm(st.betPath(root, s)).data); if (e1.length) { betFail++; fail(`bet ${s}: ${e1.join('; ')}`); }

package/runner/state.mjs

@@ -306,6 +306,23 @@ export function route(root, manifest) {
     effort: r.effort || null,
   };
 }
+// parentAdapter: the agent harness running Bridgie, when it can be told from the environment.
+export function parentAdapter() {
+  if (process.env.BRIDGIE_PARENT_ADAPTER) return process.env.BRIDGIE_PARENT_ADAPTER;
+  if (process.env.CLAUDECODE) return 'claude-code';
+  return null;
+}
+
+// fallbacks: adapters to try, in order, when the routed one cannot run a seat at all (not installed,
+// not set up, signed out, crashed). BRIDGIE_ADAPTER pins one adapter: no fallback. routing.fallback
+// sets the list ([] turns fallback off); without it: the parent harness, then the known model CLIs.
+export function fallbacks(root, primary) {
+  if (process.env.BRIDGIE_ADAPTER) return [];
+  const set = loadPolicy(root).routing?.fallback;
+  const list = Array.isArray(set) ? set : [parentAdapter(), 'claude-code', 'codex', 'antigravity', 'copilot'].filter(a => a !== 'fake');
+  return [...new Set(list.filter(a => a && a !== primary && a !== 'none'))];
+}
+
 export function costAdd(runDir, entry) {
   const f = join(runDir, 'cost.json');
   const doc = existsSync(f) ? readJson(f) : { entries: [] };

package/schemas/policy.json

@@ -99,6 +99,12 @@
     "routing": {
       "type": "object",
       "properties": {
+        "fallback": {
+          "type": "array",
+          "items": {
+            "type": "string"
+          }
+        },
         "tiers": {
           "type": "object",
           "additionalProperties": {