@clear-capabilities/agentic-security-scanner 0.165.1 → 0.166.0

package/dist/agentic-security.mjs.sha256

@@ -1 +1 @@
-5a4520f3bff6f1e77c0bb2bfaa0346b11c1447eb3a8433bc1661d2f58c03537a  agentic-security.mjs
+37394bc97ebb4c287b4baa85822494bda80e330e4d55194ad5fb63598bce4eb0  agentic-security.mjs

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@clear-capabilities/agentic-security-scanner",
-  "version": "0.165.1",
+  "version": "0.166.0",
   "description": "Scanner engine for the agentic-security Claude Code plugin: SAST, SCA with reachability and CISA KEV, secrets, IaC, Haskell and Nix/NixOS, prompt-injection, MCP/agent-tool audit, authZ analysis, SBOM, compliance attestation, and more.",
   "type": "module",
   "main": "src/index.js",
@@ -68,7 +68,7 @@
     "test:extras": "AGENTIC_SECURITY_CPP_DATAFLOW=1 node --test test/cpp-dataflow.test.js && node --experimental-test-module-mocks --test test/fault-injection.test.js && node --experimental-test-module-mocks --test test/detector-fault-injection.test.js && node --experimental-test-module-mocks --test test/detector-fault-injection-k8s-admission.test.js && node --experimental-test-module-mocks --test test/lineage-fault-injection.test.js && npm run test:python",
     "loop": "node ../scripts/loop-engineering/run.mjs",
     "test:loop-real-prd": "node --test ../scripts/loop-engineering/test/loop-real-prd.test.js",
-    "test:loop": "node --test --test-concurrency=1 ../scripts/loop-engineering/test/loop-manifest.test.js ../scripts/loop-engineering/test/loop-watchdog.test.js ../scripts/loop-engineering/test/loop-background.test.js ../scripts/loop-engineering/test/loop-dashboard.test.js ../scripts/loop-engineering/test/loop-evidence.test.js ../scripts/loop-engineering/test/loop-recovery.test.js ../scripts/loop-engineering/test/loop-remote.test.js ../scripts/loop-engineering/test/loop-runbook.test.js ../scripts/loop-engineering/test/loop-assurance-profile.test.js ../scripts/loop-engineering/test/loop-assurance-runtime.test.js ../scripts/loop-engineering/test/loop-bounds.test.js ../scripts/loop-engineering/test/loop-spend.test.js",
+    "test:loop": "node --test --test-concurrency=1 ../scripts/loop-engineering/test/loop-manifest.test.js ../scripts/loop-engineering/test/loop-watchdog.test.js ../scripts/loop-engineering/test/loop-background.test.js ../scripts/loop-engineering/test/loop-dashboard.test.js ../scripts/loop-engineering/test/loop-evidence.test.js ../scripts/loop-engineering/test/loop-recovery.test.js ../scripts/loop-engineering/test/loop-remote.test.js ../scripts/loop-engineering/test/loop-runbook.test.js ../scripts/loop-engineering/test/loop-assurance-profile.test.js ../scripts/loop-engineering/test/loop-assurance-runtime.test.js ../scripts/loop-engineering/test/loop-bounds.test.js ../scripts/loop-engineering/test/loop-spend.test.js ../scripts/loop-engineering/test/loop-ci-attest.test.js",
     "test:python": "node ../scripts/run-python-tests.mjs",
     "test:smoke": "node --test test/smoke.test.js test/demo-app.test.js",
     "test:ollama-e2e": "AGENTIC_SECURITY_OLLAMA_E2E=1 node --test test/ollama-e2e.test.js",
@@ -110,7 +110,7 @@
     "release:closure:check": "node ../scripts/release-closure.mjs --run",
     "release:closure:static": "node ../scripts/release-closure.mjs --static",
     "test:documentation": "node --test test/documentation/drift-check.test.js test/documentation/generated-pages.test.js test/documentation/scope-and-examples.test.js test/documentation/policy-cards.test.js test/documentation/operations-and-review.test.js",
-    "test:capabilities": "node --test test/capabilities/manifest.test.js test/capabilities/filesystem.test.js test/capabilities/exec.test.js test/capabilities/network.test.js test/capabilities/canary.test.js test/capabilities/tools.test.js test/capabilities/recovery.test.js test/capabilities/receipts.test.js test/capabilities/adversarial.test.js test/capabilities/linux-enforcement.test.js",
+    "test:capabilities": "node --test test/capabilities/manifest.test.js test/capabilities/filesystem.test.js test/capabilities/exec.test.js test/capabilities/network.test.js test/capabilities/canary.test.js test/capabilities/tools.test.js test/capabilities/recovery.test.js test/capabilities/receipts.test.js test/capabilities/adversarial.test.js test/capabilities/linux-enforcement.test.js test/supervise-async-sweep.test.js",
     "test:verification": "node --test test/verification/verification-record.test.js test/verification/oracle-adapters.test.js test/verification/replay-manifest.test.js test/verification/patch-negative.test.js test/verification/non-taint-classes.test.js test/verification/interface-equivalence.test.js test/verification/advisory-gating.test.js test/verification/oracle-conformance.test.js",
     "test:deployment": "node --test test/deployment/boundary-graph.test.js test/deployment/config-adapters.test.js test/deployment/trace-correlation.test.js test/deployment/cross-repo.test.js test/deployment/attack-paths.test.js test/deployment/drift.test.js test/deployment/boundary-presentation.test.js test/deployment/differentiation-ablation.test.js test/deployment/boundaries-cli.test.js",
     "test:portfolio": "node --test test/portfolio/manifest.test.js test/portfolio/bundle.test.js test/portfolio/signing.test.js test/portfolio/work-units.test.js test/portfolio/resume.test.js test/portfolio/scheduler.test.js test/portfolio/progress.test.js test/portfolio/retention.test.js test/portfolio/backend.test.js",

package/src/capabilities/CLAUDE.md

@@ -87,6 +87,14 @@ is ENOENT or EROFS rather than `denied`; liveness is judged by heartbeat, not ho
 pid; a declared network destination blocks the task); `sandbox-linux` fails if any
 of them skips.
 
+`sandbox-linux` also writes a per-test report (`sandbox-linux-test-report`, artifact of the
+job). The loop controller reads it back, for the exact commit, to accept the six
+Linux-namespace tests that SKIP on a host without the backend
+(`docs/guides/loop-engineering.md`, "Attested tests"). That is evidence from the
+hosted run, reported as its own source (`attested-from-ci: sandbox-linux@<sha>`)
+beside the unchanged local skip count; it is not a claim that the local host
+enforced anything and it does not change `partially-verified`.
+
 ## Known limits (also in `REPORT_LIMITATIONS`)
 
 Descendant exec is not allowlisted; ancestors of declared roots expose metadata;

package/src/sandbox/supervise.js

@@ -22,7 +22,7 @@
 // sweep interval bounds the window; it does not close it. Only a PID-namespace
 // or cgroup boundary closes it, and macOS has neither. The namespace backend
 // has the boundary (see `runConfinedSupervised`).
-import { spawn, spawnSync } from 'node:child_process';
+import { spawn, execFile } from 'node:child_process';
 import { detectBackend } from './capabilities.js';
 import { runDisabled } from './backend-disabled.js';
 import { buildUserspaceInvocation } from './backend-userspace.js';
@@ -40,12 +40,21 @@ function groupAlive(pgid) {
 function signalPid(pid, sig) { try { process.kill(pid, sig); } catch { /* already gone */ } }
 function signalGroup(pgid, sig) { try { process.kill(-pgid, sig); } catch { /* already gone */ } }
 
-/** Descendants of `rootPid` plus members of its group, from one `ps` snapshot. */
+/**
+ * Descendants of `rootPid` plus members of its group, from one `ps` snapshot. Asynchronous on purpose: a synchronous `ps` blocks the
+ * controller's event loop for as long as the machine takes to run it (tens of milliseconds idle, far more under load), and this runs on
+ * every sweep.
+ */
 function snapshotTree(rootPid) {
-  const r = spawnSync('ps', ['-A', '-o', 'pid=,ppid=,pgid='], { encoding: 'utf8', timeout: 2000 });
-  if (r.error || r.status !== 0) return [];
+  return new Promise((resolve) => {
+    execFile('ps', ['-A', '-o', 'pid=,ppid=,pgid='], { encoding: 'utf8', timeout: 2000, maxBuffer: 16 * 1024 * 1024 }, (err, stdout) => {
+      resolve(err ? [] : treeFromPs(stdout, rootPid));
+    });
+  });
+}
+function treeFromPs(stdout, rootPid) {
   const rows = [];
-  for (const line of String(r.stdout).split('\n')) {
+  for (const line of String(stdout).split('\n')) {
     const m = line.trim().split(/\s+/).map(Number);
     if (m.length === 3 && m.every(Number.isFinite)) rows.push({ pid: m[0], ppid: m[1], pgid: m[2] });
   }
@@ -86,27 +95,28 @@ export function superviseSpawn(bin, args, {
     let finishing = null;
     let timer = null;
 
-    const sweep = () => { if (pgid) for (const p of snapshotTree(pgid)) tracked.add(p); };
-    // sweepMs <= 0 turns the periodic sweep off. Each sweep is a SYNCHRONOUS `ps`, which blocks the controller's event loop for as long as
-    // it runs; on the namespace backend the kernel ends every member with the supervisor (--kill-child), so the periodic sweep adds nothing
-    // there and only costs responsiveness. The cleanup below still takes its own snapshots.
-    const sweeper = sweepMs > 0 ? setInterval(sweep, sweepMs) : null;
+    const sweep = async () => { if (pgid) for (const p of await snapshotTree(pgid)) tracked.add(p); };
+    // sweepMs <= 0 turns the periodic sweep off: on the namespace backend the kernel ends every member with the supervisor
+    // (--kill-child), so the periodic sweep adds nothing there. The cleanup below still takes its own snapshots. A sweep never overlaps the
+    // previous one, so a slow `ps` under load cannot pile up work.
+    let sweeping = false;
+    const sweeper = sweepMs > 0 ? setInterval(() => { if (sweeping) return; sweeping = true; sweep().finally(() => { sweeping = false; }); }, sweepMs) : null;
 
-    const survivors = () => {
-      sweep();
+    const survivors = async () => {
+      await sweep();
       return { live: [...tracked].filter(alive), group: groupAlive(pgid) };
     };
 
     async function terminate() {
       const t = _emptyTermination();
-      const before = survivors();
+      const before = await survivors();
       if (!before.group && before.live.length === 0) return t;
       t.signalled = 'SIGTERM';
       signalGroup(pgid, 'SIGTERM');
       for (const p of tracked) signalPid(p, 'SIGTERM');
       const deadline = Date.now() + graceMs;
       while (Date.now() < deadline) {
-        const s = survivors();
+        const s = await survivors();
         if (!s.group && s.live.length === 0) return t;
         await sleep(25);
       }
@@ -115,13 +125,13 @@ export function superviseSpawn(bin, args, {
       t.signalled = 'SIGKILL';
       const hard = Date.now() + 3000;
       while (Date.now() < hard) {
-        const s = survivors();
+        const s = await survivors();
         if (!s.group && s.live.length === 0) break;
         signalGroup(pgid, 'SIGKILL');
         for (const p of s.live) { signalPid(p, 'SIGKILL'); if (!t.killedPids.includes(p)) t.killedPids.push(p); }
         await sleep(25);
       }
-      const s = survivors();
+      const s = await survivors();
       t.survivors = s.live.length ? s.live : (s.group ? [-pgid] : []);
       return t;
     }