@dharma-ai-labs/agent-fabric 0.2.124 → 0.2.126

package/dist/index.test.js

@@ -7,9 +7,10 @@ import { join } from 'node:path';
 import test from 'node:test';
 import { fileURLToPath, pathToFileURL } from 'node:url';
 import { promisify } from 'node:util';
-import { acceptedTrajectoryHead, activateAgyPlugin, attestAgySkillActivation, attestHermesSkillBundleActivation, actionDecisionCapabilityFreshUntil, canonicalFilesystemPath, controlAgentDecisionUrl, installAvailableNativeAgentFabricBootstraps, assertCapsuleAuthorizedByCurrentPolicy, assertRecoveredTaskWorkspacePolicy, assertTaskWorkspacePolicy, assertTaskSkillPin, installNativeAgentFabricBootstrap, installClaudeReadOnlyProjectPermissions, installRepositoryAgentFabricSkill, isDirectExecution, isTransientBootstrapError, loadAgentFabricOnboardingContract, loadOrCreateInstallationId, materializeWorkspacePolicy, applyServerEvidencePolicy, materializeInlineSkillFiles, validateSkillBundleSources, nativeSkillDirectory, nativeSkillDirectoryForWorkspace, nativeSkillRootMatchingAuthorization, normalizeGitRemoteIdentity, postTaskOutcome, parseCliOptions, parseSelectedProviderIds, pathExistsOrThrow, portalUrl, providerHintFromEnvironment, providerHintFromProcessArgv, probeRelayConnection, preflightBootstrapWorkspaceIdentity, rawLocalRetentionDays, syncPendingRetentionCapsules, requireCompletedBootstrapEvidence, retryBootstrapOnboarding, synchronizeBootstrapEvidence, deferUnavailableRelayRetention, recoverLegacySkillBundleIdAfterAuthorizationFailure, installedBundleIdForSkillPollAfterAuthorizationFailure, recoveredTaskPolicyWasSuperseded, acquireRelayProcessLease, acquireRelaySupervisorLease, relayProcessState, relaySupervisorProcessState, releaseDailyContentUpload, reserveDailyContentUpload, run, runAssistantCommand, sourceRepositoryFingerprint, stableRepositoryLauncherContents, summarizeBootstrapOrganizationApi, ensureAgyReadOnlyAttestationPermission, attestAgySkillBundleActivation, responseTextFromEvent, taskResponsePreview, taskReceiptSession, taskSkillPinFailureCode, verifyAgentFabricSkillInstallation, waitForRelayReadiness, withWorkspacePolicyRefreshLock, withRelayStartupMutation, withWorkspaceSkillActivationLock, } from './index.js';
+import { acceptedTrajectoryHead, activateAgyPlugin, attestAgySkillActivation, attestHermesSkillBundleActivation, actionDecisionCapabilityFreshUntil, canonicalFilesystemPath, controlAgentDecisionUrl, installAvailableNativeAgentFabricBootstraps, assertCapsuleAuthorizedByCurrentPolicy, assertRecoveredTaskWorkspacePolicy, assertTaskWorkspacePolicy, assertTaskSkillPin, installNativeAgentFabricBootstrap, installClaudeReadOnlyProjectPermissions, installRepositoryAgentFabricSkill, initialBootstrapEvidenceDisposition, isDirectExecution, isTransientBootstrapError, loadAgentFabricOnboardingContract, loadOrCreateInstallationId, materializeWorkspacePolicy, applyServerEvidencePolicy, materializeInlineSkillFiles, validateSkillBundleSources, nativeSkillDirectory, nativeSkillDirectoryForWorkspace, nativeSkillRootMatchingAuthorization, normalizeGitRemoteIdentity, postTaskOutcome, parseCliOptions, parseSelectedProviderIds, pathExistsOrThrow, portalUrl, providerHintFromEnvironment, providerHintFromProcessArgv, probeRelayConnection, preflightBootstrapWorkspaceIdentity, publishedPackageCanDeferSecretEvidence, rawLocalRetentionDays, syncPendingRetentionCapsules, requireCompletedBootstrapEvidence, retryBootstrapOnboarding, synchronizeBootstrapEvidence, deferUnavailableRelayRetention, recoverLegacySkillBundleIdAfterAuthorizationFailure, installedBundleIdForSkillPollAfterAuthorizationFailure, recoveredTaskPolicyWasSuperseded, acquireRelayProcessLease, acquireRelaySupervisorLease, relayProcessState, relaySupervisorProcessState, releaseDailyContentUpload, reserveDailyContentUpload, run, runAssistantCommand, sourceRepositoryFingerprint, stableRepositoryLauncherContents, summarizeBootstrapOrganizationApi, ensureAgyReadOnlyAttestationPermission, attestAgySkillBundleActivation, responseTextFromEvent, taskResponsePreview, taskReceiptSession, taskSkillPinFailureCode, verifyAgentFabricSkillInstallation, waitForRelayReadiness, withWorkspacePolicyRefreshLock, withRelayStartupMutation, withWorkspaceSkillActivationLock, } from './index.js';
 import { canonicalize, signCanonicalObject } from '@dharma-ai-labs/agent-fabric-contracts';
 import { buildTrajectoryCapsule, trajectoryCapsuleHash } from '@dharma-ai-labs/agent-fabric-evidence-reduction';
+import { AgentFabricRequestError } from '@dharma-ai-labs/agent-fabric-relay-client';
 import { CLI_USAGE } from './usage.js';
 import { workspaceIdForDevice } from './onboardingWorkspace.js';
 import { isSupportedNodeVersion, launchWithRuntime, nodeRuntimeCandidates, runtimeBootstrapHint, } from './runtime-bootstrap.js';
@@ -140,20 +141,37 @@ test('bootstrap defers policy-rejected evidence without weakening the disclosure
     });
     assert.deepEqual(result, {
         state: 'deferred',
-        captured: 0,
-        synced: 0,
+        captured: null,
+        synced: null,
         reason: 'policy_boundary',
         errorCode: 'local_path_disclosure_forbidden',
     });
 });
+test('only a published package under the same source policy can defer a definitive secret rejection', async () => {
+    const denied = await synchronizeBootstrapEvidence(async () => {
+        throw new AgentFabricRequestError({ error: { code: 'policy_boundary',
+                message: 'secret_disclosure_forbidden' } }, 403, true);
+    });
+    assert.equal(denied.errorCode, 'secret_disclosure_forbidden');
+    const published = { state: 'published', releaseId: '11111111-1111-4111-8111-111111111111',
+        sourcePolicyGenerationId: '22222222-2222-4222-8222-222222222222' };
+    assert.equal(publishedPackageCanDeferSecretEvidence(denied, published, '22222222-2222-4222-8222-222222222222'), true);
+    assert.equal(publishedPackageCanDeferSecretEvidence(denied, published, '33333333-3333-4333-8333-333333333333'), false);
+    assert.equal(publishedPackageCanDeferSecretEvidence(denied, { ...published, state: 'accepted' }, '22222222-2222-4222-8222-222222222222'), false);
+    const ambiguous = await synchronizeBootstrapEvidence(async () => {
+        throw new AgentFabricRequestError({ error: { code: 'policy_boundary',
+                message: 'secret_disclosure_forbidden' } }, 503, false);
+    });
+    assert.equal(publishedPackageCanDeferSecretEvidence(ambiguous, published, '22222222-2222-4222-8222-222222222222'), false);
+});
 test('bootstrap reports non-policy evidence failures without returning sensitive error text', async () => {
     const result = await synchronizeBootstrapEvidence(async () => {
         throw new Error('fetch failed for C:/Users/customer/private-session.json');
     });
     assert.deepEqual(result, {
         state: 'deferred',
-        captured: 0,
-        synced: 0,
+        captured: null,
+        synced: null,
         reason: 'capture_unavailable',
         errorCode: 'evidence_capture_failed',
     });
@@ -165,8 +183,8 @@ test('bootstrap identifies unavailable retention without weakening other capture
     });
     assert.deepEqual(result, {
         state: 'deferred',
-        captured: 0,
-        synced: 0,
+        captured: null,
+        synced: null,
         reason: 'retention_not_ready',
         errorCode: 'agent_fabric_retention_not_ready',
     });
@@ -175,6 +193,16 @@ test('bootstrap records successful evidence synchronization', async () => {
     const result = await synchronizeBootstrapEvidence(async () => ({ captured: 2, synced: 2 }));
     assert.deepEqual(result, { state: 'synchronized', captured: 2, synced: 2 });
 });
+test('eligible history without disclosure is reported as denied, not synchronized', () => {
+    assert.deepEqual(initialBootstrapEvidenceDisposition(3, false), {
+        state: 'denied_disclosure', captured: 0, synced: 0,
+        reason: 'policy_boundary', errorCode: 'automatic_disclosure_not_ready',
+    });
+    assert.deepEqual(initialBootstrapEvidenceDisposition(0, false), {
+        state: 'synchronized', captured: 0, synced: 0,
+    });
+    assert.throws(() => initialBootstrapEvidenceDisposition(Number.NaN, true), /invalid trajectory count/);
+});
 test('relay defers unavailable retention without stopping signed task polling', async () => {
     const result = await deferUnavailableRelayRetention(async () => {
         throw new Error('agent_fabric_retention_not_ready: Content synchronization is unavailable until retention is enabled.');
@@ -1480,6 +1508,61 @@ test('queued capsules from a replaced device are retained locally but never sent
     assert.deepEqual(sent, [current.trajectoryId]);
     assert.equal(old.deviceId, '11111111-1111-4111-8111-111111111111');
 });
+test('definitive secret rejection retires only its upload queue row and leaves later work eligible', async () => {
+    const base = await materializeWorkspacePolicy({
+        workspace: await mkdtemp(join(tmpdir(), 'dharma-secret-rejection-')),
+        organizationId: 'org_northstar', revision: 'local',
+    });
+    const deviceId = '22222222-2222-4222-8222-222222222222';
+    const session = (sessionId) => ({
+        provider: 'codex', sessionId, sourcePath: '/private/codex.jsonl',
+        workspace: '/repo', coverage: 'observed',
+        startedAt: '2026-09-23T00:00:00.000Z', endedAt: '2026-09-23T00:00:01.000Z',
+        records: [{ native: { type: 'message' }, sourcePath: '/private/codex.jsonl', line: 1,
+                workspace: '/repo', timestamp: '2026-09-23T00:00:00.000Z', kind: 'metadata' }],
+    });
+    const capsules = ['denied', 'allowed'].map(sessionId => buildTrajectoryCapsule({
+        organizationId: 'org_northstar', deviceId, workspaceId: 'workspace-northstar',
+        session: session(sessionId), policy: base.policy,
+        rawContentId: `sha256:${'a'.repeat(64)}`, rawBytes: 32,
+    }));
+    const pending = [...capsules];
+    const discarded = [];
+    const synced = [];
+    const vault = {
+        listPendingCapsuleSyncs: async () => pending.map(capsule => ({ trajectoryId: capsule.trajectoryId,
+            revision: capsule.revision, capsule })),
+        markCapsuleSynced: (trajectoryId) => {
+            synced.push(trajectoryId);
+            pending.splice(pending.findIndex(c => c.trajectoryId === trajectoryId), 1);
+        },
+        discardPendingCapsuleSync: (trajectoryId, _revision, reason) => {
+            discarded.push(reason);
+            pending.splice(pending.findIndex(c => c.trajectoryId === trajectoryId), 1);
+        },
+    };
+    const fabric = {
+        config: { organizationId: 'org_northstar', deviceId },
+        syncTrajectory: async (capsule) => {
+            if (capsule.trajectoryId === capsules[0].trajectoryId) {
+                throw new AgentFabricRequestError({ error: { code: 'policy_boundary',
+                        message: 'secret_disclosure_forbidden' } }, 403, true);
+            }
+        },
+    };
+    assert.equal(await syncPendingRetentionCapsules(vault, fabric, base.policy, 'workspace-northstar'), 1);
+    assert.deepEqual(discarded, ['secret_disclosure_forbidden']);
+    assert.deepEqual(synced, [capsules[1].trajectoryId]);
+    assert.equal(pending.length, 0);
+    pending.push(capsules[0]);
+    fabric.syncTrajectory = async () => {
+        throw new AgentFabricRequestError({ error: { code: 'policy_boundary',
+                message: 'secret_disclosure_forbidden' } }, 503, false);
+    };
+    await assert.rejects(() => syncPendingRetentionCapsules(vault, fabric, base.policy, 'workspace-northstar'), /secret_disclosure_forbidden/);
+    assert.equal(pending.length, 1);
+    assert.deepEqual(discarded, ['secret_disclosure_forbidden']);
+});
 test('oversized queued current-device revision is retired only after checking the accepted head', async () => {
     const base = await materializeWorkspacePolicy({
         workspace: await mkdtemp(join(tmpdir(), 'dharma-oversized-capsule-')),