@atlasnomos/atlas 1.1.2 → 1.1.3

package/atlas.js

@@ -8,10 +8,8 @@ const path = require('path');
 const { ErrorHandler } = require('./src/core/ErrorHandler');
 
 // 0. Entry Point Hardening (Anti-Bypass)
-if (require.main !== module) {
-    console.error('⛔ SECURITY VIOLATION: ATLAS Kernel must be executed directly, not required as a module.');
-    process.exit(1);
-}
+const { validateEntryPoint } = require('./src/kernel/boot/BootGuard');
+validateEntryPoint();
 
 // 1. Load Env & Config
 // Priority 1: CWD .env (Project specific)

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@atlasnomos/atlas",
-    "version": "1.1.2",
+    "version": "1.1.3",
     "description": "Production-grade AI governance kernel for autonomous agents with fail-closed security and cryptographic audit trails",
     "main": "atlas.js",
     "bin": {

package/src/kernel/boot/BootGuard.js

@@ -25,7 +25,8 @@ const { panic } = require('./HardKill');
  * All paths are relative to the atlas root directory.
  */
 const AUTHORIZED_ENTRY_POINTS = Object.freeze([
-    'atlas.js'
+    'atlas.js',
+    'atlas'      // Supported for NPM global wrapper
 ]);
 
 // ═══════════════════════════════════════════════════════════════
@@ -56,11 +57,14 @@ function validateEntryPoint() {
     const expectedPath = path.join(atlasRoot, entryFilename);
 
     // Normalize paths for comparison (handle Windows backslashes)
-    if (path.resolve(mainModule.filename) !== expectedPath) {
-        panic('BOOT_GUARD: Entry point path mismatch', {
+    const normalizedActual = path.resolve(mainModule.filename);
+    const isUnderRoot = normalizedActual.startsWith(atlasRoot);
+
+    if (!isUnderRoot) {
+        panic('BOOT_GUARD: Entry point out of bounds', {
             actual: mainModule.filename,
-            expected: expectedPath,
-            reason: 'Entry point must be in the kernel root directory'
+            expectedPrefix: atlasRoot,
+            reason: 'Entry point must be within the kernel root directory'
         });
         return false;
     }