@dharma-ai-labs/agent-fabric 0.2.181 → 0.2.183

package/dist/cliProcessIdentity.d.ts

@@ -0,0 +1,15 @@
+import { type ContainerProcessIdentity } from './containerRelayLifecycle.js';
+export declare function matchingCliExecutable(pid: number, caller: string, uid: number): Promise<boolean>;
+interface ProcessVerification {
+    uid?: number;
+    execPath?: string;
+    identity?(pid: number): Promise<ContainerProcessIdentity>;
+    resolve?(path: string): Promise<string>;
+    executableMatches?(pid: number, caller: string, uid: number): Promise<boolean>;
+    verifyRuntime?(candidate: string, caller: string): Promise<string>;
+}
+/** Normalize npm aliases only after verifying the live executable and exact
+ * published CLI bytes. Callers still enforce their complete action/flag tuple. */
+export declare function verifiedCliProcessArguments(identity: ContainerProcessIdentity, callerIndex: string, runtime?: ProcessVerification): Promise<string[] | null>;
+export {};
+//# sourceMappingURL=cliProcessIdentity.d.ts.map

package/dist/cliProcessIdentity.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cliProcessIdentity.d.ts","sourceRoot":"","sources":["../src/cliProcessIdentity.ts"],"names":[],"mappings":"AAKA,OAAO,EACL,KAAK,wBAAwB,EAAC,MAAM,8BAA8B,CAAC;AAqCrE,wBAAsB,qBAAqB,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,oBAMnF;AAED,UAAU,mBAAmB;IAC3B,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,wBAAwB,CAAC,CAAC;IAC1D,OAAO,CAAC,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IACxC,iBAAiB,CAAC,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAC/E,aAAa,CAAC,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;CACpE;AAED;kFACkF;AAClF,wBAAsB,2BAA2B,CAAC,QAAQ,EAAE,wBAAwB,EAAE,WAAW,EAAE,MAAM,EACvG,OAAO,GAAE,mBAAwB,GAAG,OAAO,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC,CAiC7D"}

package/dist/cliProcessIdentity.js

@@ -0,0 +1,102 @@
+import { createHash } from 'node:crypto';
+import { constants } from 'node:fs';
+import { open, realpath, stat } from 'node:fs/promises';
+import { basename, dirname, isAbsolute, join } from 'node:path';
+import { fileURLToPath } from 'node:url';
+import { readContainerProcessIdentity, verifyContainerControllerRuntime } from './containerRelayLifecycle.js';
+const executableHashes = new Map();
+async function publicExecutableHash(path, uid) {
+    const canonical = await realpath(path);
+    const file = await open(canonical, constants.O_RDONLY | constants.O_NOFOLLOW | constants.O_NONBLOCK);
+    try {
+        const before = await file.stat();
+        const mapped = await stat(path);
+        if (!before.isFile() || ![0, uid].includes(before.uid) || (before.mode & 0o022) !== 0
+            || before.size < 1 || before.size > 268_435_456 || before.dev !== mapped.dev || before.ino !== mapped.ino) {
+            throw new Error('cli_process_unverified');
+        }
+        const fingerprint = JSON.stringify([canonical, before.dev, before.ino, before.uid, before.mode,
+            before.size, before.mtimeMs, before.ctimeMs]);
+        let digest = executableHashes.get(fingerprint);
+        if (!digest) {
+            digest = (async () => {
+                const hash = createHash('sha256');
+                for await (const chunk of file.createReadStream({ autoClose: false }))
+                    hash.update(chunk);
+                return hash.digest('hex');
+            })();
+            if (executableHashes.size >= 16)
+                executableHashes.clear();
+            executableHashes.set(fingerprint, digest);
+            digest.catch(() => executableHashes.delete(fingerprint));
+        }
+        const result = await digest;
+        const after = await file.stat();
+        if (JSON.stringify([after.dev, after.ino, after.uid, after.mode, after.size, after.mtimeMs, after.ctimeMs])
+            !== JSON.stringify([before.dev, before.ino, before.uid, before.mode, before.size, before.mtimeMs, before.ctimeMs])) {
+            executableHashes.delete(fingerprint);
+            throw new Error('cli_process_unverified');
+        }
+        return result;
+    }
+    finally {
+        await file.close();
+    }
+}
+export async function matchingCliExecutable(pid, caller, uid) {
+    if (await realpath(caller) !== await realpath('/proc/self/exe'))
+        return false;
+    const [running, trusted] = await Promise.all([
+        publicExecutableHash(`/proc/${pid}/exe`, uid), publicExecutableHash('/proc/self/exe', uid),
+    ]);
+    return running === trusted;
+}
+/** Normalize npm aliases only after verifying the live executable and exact
+ * published CLI bytes. Callers still enforce their complete action/flag tuple. */
+export async function verifiedCliProcessArguments(identity, callerIndex, runtime = {}) {
+    try {
+        const uid = runtime.uid ?? process.getuid?.() ?? -1, execPath = runtime.execPath ?? process.execPath;
+        const readIdentity = runtime.identity ?? readContainerProcessIdentity;
+        const resolve = runtime.resolve ?? realpath;
+        const executableMatches = runtime.executableMatches ?? matchingCliExecutable;
+        const verifyRuntime = runtime.verifyRuntime ?? (async (candidate, caller) => {
+            const verified = await verifyContainerControllerRuntime(candidate, caller);
+            const [installedGuard, callerGuard] = await Promise.all([
+                publicExecutableHash(join(dirname(candidate), 'cliProcessIdentity.js'), uid),
+                publicExecutableHash(join(dirname(caller), 'cliProcessIdentity.js'), uid),
+            ]);
+            if (installedGuard !== callerGuard)
+                throw new Error('cli_process_unverified');
+            return verified;
+        });
+        if (uid <= 0 || identity.uid !== uid || !Number.isSafeInteger(identity.pid) || identity.pid < 1
+            || !/^\d{1,20}$/.test(identity.startTicks) || identity.argv.length < 2)
+            return null;
+        if (JSON.stringify(await readIdentity(identity.pid)) !== JSON.stringify(identity))
+            return null;
+        const command = identity.argv[0], script = identity.argv[1];
+        if ((command !== 'node' && !isAbsolute(command)) || !isAbsolute(script) || script.length > 4096
+            || /[\r\n\0]/.test(script))
+            return null;
+        const executable = await resolve(`/proc/${identity.pid}/exe`);
+        if (command !== 'node' && await resolve(command) !== executable)
+            return null;
+        if (!await executableMatches(identity.pid, execPath, uid))
+            return null;
+        const entrypoint = await resolve(script), kind = basename(entrypoint);
+        if (!['bin.js', 'index.js'].includes(kind) || basename(dirname(entrypoint)) !== 'dist')
+            return null;
+        const ownIndex = fileURLToPath(callerIndex), ownBin = join(dirname(ownIndex), 'bin.js');
+        const candidateBin = join(dirname(entrypoint), 'bin.js');
+        if (await verifyRuntime(candidateBin, ownBin) !== candidateBin)
+            return null;
+        if (await resolve(script) !== entrypoint || await resolve(`/proc/${identity.pid}/exe`) !== executable
+            || JSON.stringify(await readIdentity(identity.pid)) !== JSON.stringify(identity))
+            return null;
+        return [execPath, join(dirname(ownIndex), kind), ...identity.argv.slice(2)];
+    }
+    catch {
+        return null;
+    }
+}
+//# sourceMappingURL=cliProcessIdentity.js.map

package/dist/cliProcessIdentity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cliProcessIdentity.js","sourceRoot":"","sources":["../src/cliProcessIdentity.ts"],"names":[],"mappings":"AAAA,OAAO,EAAC,UAAU,EAAC,MAAM,aAAa,CAAC;AACvC,OAAO,EAAC,SAAS,EAAC,MAAM,SAAS,CAAC;AAClC,OAAO,EAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAC,MAAM,kBAAkB,CAAC;AACtD,OAAO,EAAC,QAAQ,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAC,MAAM,WAAW,CAAC;AAC9D,OAAO,EAAC,aAAa,EAAC,MAAM,UAAU,CAAC;AACvC,OAAO,EAAC,4BAA4B,EAAE,gCAAgC,EACtC,MAAM,8BAA8B,CAAC;AAErE,MAAM,gBAAgB,GAAG,IAAI,GAAG,EAA2B,CAAC;AAC5D,KAAK,UAAU,oBAAoB,CAAC,IAAY,EAAE,GAAW;IAC3D,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC;IACvC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,SAAS,EAAE,SAAS,CAAC,QAAQ,GAAG,SAAS,CAAC,UAAU,GAAG,SAAS,CAAC,UAAU,CAAC,CAAC;IACrG,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;QACjC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC;QAChC,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC;eAChF,MAAM,CAAC,IAAI,GAAG,CAAC,IAAI,MAAM,CAAC,IAAI,GAAG,WAAW,IAAI,MAAM,CAAC,GAAG,KAAK,MAAM,CAAC,GAAG,IAAI,MAAM,CAAC,GAAG,KAAK,MAAM,CAAC,GAAG,EAAE,CAAC;YAC5G,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;QAC5C,CAAC;QACD,MAAM,WAAW,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,SAAS,EAAE,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI;YAC5F,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC;QAChD,IAAI,MAAM,GAAG,gBAAgB,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QAC/C,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,GAAG,CAAC,KAAK,IAAI,EAAE;gBACnB,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;gBAClC,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,IAAI,CAAC,gBAAgB,CAAC,EAAC,SAAS,EAAE,KAAK,EAAC,CAAC;oBAAE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;gBACxF,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAC5B,CAAC,CAAC,EAAE,CAAC;YACL,IAAI,gBAAgB,CAAC,IAAI,IAAI,EAAE;gBAAE,gBAAgB,CAAC,KAAK,EAAE,CAAC;YAC1D,gBAAgB,CAAC,GAAG,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;YAC1C,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,gBAAgB,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC;QAC3D,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC;QAC5B,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;QAChC,IAAI,IAAI,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;gBACrG,IAAI,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;YACrH,gBAAgB,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;YACrC,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;QAC5C,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;YAAS,CAAC;QAAA,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;IAAA,CAAC;AACjC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,GAAW,EAAE,MAAc,EAAE,GAAW;IAClF,IAAI,MAAM,QAAQ,CAAC,MAAM,CAAC,KAAK,MAAM,QAAQ,CAAC,gBAAgB,CAAC;QAAE,OAAO,KAAK,CAAC;IAC9E,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QAC3C,oBAAoB,CAAC,SAAS,GAAG,MAAM,EAAE,GAAG,CAAC,EAAE,oBAAoB,CAAC,gBAAgB,EAAE,GAAG,CAAC;KAC3F,CAAC,CAAC;IACH,OAAO,OAAO,KAAK,OAAO,CAAC;AAC7B,CAAC;AAWD;kFACkF;AAClF,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAAC,QAAkC,EAAE,WAAmB,EACvG,UAA+B,EAAE;IACjC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,MAAM,EAAE,EAAE,IAAI,CAAC,CAAC,EAAE,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,QAAQ,CAAC;QACrG,MAAM,YAAY,GAAG,OAAO,CAAC,QAAQ,IAAI,4BAA4B,CAAC;QACtE,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,QAAQ,CAAC;QAC5C,MAAM,iBAAiB,GAAG,OAAO,CAAC,iBAAiB,IAAI,qBAAqB,CAAC;QAC7E,MAAM,aAAa,GAAG,OAAO,CAAC,aAAa,IAAI,CAAC,KAAK,EAAE,SAAiB,EAAE,MAAc,EAAE,EAAE;YAC1F,MAAM,QAAQ,GAAG,MAAM,gCAAgC,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;YAC3E,MAAM,CAAC,cAAc,EAAE,WAAW,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;gBACtD,oBAAoB,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,uBAAuB,CAAC,EAAE,GAAG,CAAC;gBAC5E,oBAAoB,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,uBAAuB,CAAC,EAAE,GAAG,CAAC;aAC1E,CAAC,CAAC;YACH,IAAI,cAAc,KAAK,WAAW;gBAAE,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;YAC9E,OAAO,QAAQ,CAAC;QAClB,CAAC,CAAC,CAAC;QACH,IAAI,GAAG,IAAI,CAAC,IAAI,QAAQ,CAAC,GAAG,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,QAAQ,CAAC,GAAG,GAAG,CAAC;eAC1F,CAAC,YAAY,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,QAAQ,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC;QACtF,IAAI,IAAI,CAAC,SAAS,CAAC,MAAM,YAAY,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC;YAAE,OAAO,IAAI,CAAC;QAC/F,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAE,EAAE,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC;QAC9D,IAAI,CAAC,OAAO,KAAK,MAAM,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,GAAG,IAAI;eAC1F,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC;YAAE,OAAO,IAAI,CAAC;QAC1C,MAAM,UAAU,GAAG,MAAM,OAAO,CAAC,SAAS,QAAQ,CAAC,GAAG,MAAM,CAAC,CAAC;QAC9D,IAAI,OAAO,KAAK,MAAM,IAAI,MAAM,OAAO,CAAC,OAAO,CAAC,KAAK,UAAU;YAAE,OAAO,IAAI,CAAC;QAC7E,IAAI,CAAC,MAAM,iBAAiB,CAAC,QAAQ,CAAC,GAAG,EAAE,QAAQ,EAAE,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC;QACvE,MAAM,UAAU,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC,EAAE,IAAI,GAAG,QAAQ,CAAC,UAAU,CAAC,CAAC;QACtE,IAAI,CAAC,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,QAAQ,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,KAAK,MAAM;YAAE,OAAO,IAAI,CAAC;QACpG,MAAM,QAAQ,GAAG,aAAa,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,QAAQ,CAAC,CAAC;QACxF,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,QAAQ,CAAC,CAAC;QACzD,IAAI,MAAM,aAAa,CAAC,YAAY,EAAE,MAAM,CAAC,KAAK,YAAY;YAAE,OAAO,IAAI,CAAC;QAC5E,IAAI,MAAM,OAAO,CAAC,MAAM,CAAC,KAAK,UAAU,IAAI,MAAM,OAAO,CAAC,SAAS,QAAQ,CAAC,GAAG,MAAM,CAAC,KAAK,UAAU;eAChG,IAAI,CAAC,SAAS,CAAC,MAAM,YAAY,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC;YAAE,OAAO,IAAI,CAAC;QAChG,OAAO,CAAC,QAAQ,EAAE,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,EAAE,GAAG,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAC9E,CAAC;IAAC,MAAM,CAAC;QAAA,OAAO,IAAI,CAAC;IAAA,CAAC;AACxB,CAAC"}

package/dist/cliProcessIdentity.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=cliProcessIdentity.test.d.ts.map

package/dist/cliProcessIdentity.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cliProcessIdentity.test.d.ts","sourceRoot":"","sources":["../src/cliProcessIdentity.test.ts"],"names":[],"mappings":""}

package/dist/cliProcessIdentity.test.js

@@ -0,0 +1,152 @@
+import assert from 'node:assert/strict';
+import { spawn } from 'node:child_process';
+import { once } from 'node:events';
+import { chmod, mkdir, mkdtemp, rm, symlink, writeFile } from 'node:fs/promises';
+import { tmpdir } from 'node:os';
+import { join, resolve } from 'node:path';
+import { pathToFileURL } from 'node:url';
+import test from 'node:test';
+import { verifiedCliProcessArguments, matchingCliExecutable } from './cliProcessIdentity.js';
+import { readContainerProcessIdentity } from './containerRelayLifecycle.js';
+const trustedIndex = pathToFileURL(resolve('/trusted/dist/index.js')).href;
+function fixture() {
+    const identity = { pid: 101, uid: 1000, parentPid: 100,
+        processGroupId: 101, sessionId: 101, startTicks: '123',
+        argv: ['node', resolve('/cache/first/node_modules/.bin/dharma'), 'relay', 'supervise', '--policy', resolve('/workspace/.dharma/policy.json')] };
+    const node = resolve('/runtime/node'), bin = resolve('/cache/second/node_modules/@dharma-ai-labs/agent-fabric/dist/bin.js');
+    let reads = 0;
+    const observed = structuredClone(identity);
+    const runtime = {
+        uid: 1000, execPath: node,
+        identity: async (pid) => { assert.equal(pid, 101); reads++; return structuredClone(observed); },
+        resolve: async (path) => {
+            if (path === '/proc/101/exe' || path === node)
+                return node;
+            if (path === identity.argv[1])
+                return bin;
+            throw new Error('fixture_path_unavailable');
+        },
+        executableMatches: async (pid, caller, uid) => {
+            assert.equal(pid, 101);
+            assert.equal(caller, node);
+            assert.equal(uid, 1000);
+            return true;
+        },
+        verifyRuntime: async (candidate, caller) => {
+            assert.equal(candidate, bin);
+            assert.equal(caller, resolve('/trusted/dist/bin.js'));
+            return candidate;
+        },
+    };
+    return { identity, observed, runtime, node, bin, reads: () => reads };
+}
+test('npm node and dharma aliases normalize only after executable/artifact verification', async () => {
+    const f = fixture();
+    assert.deepEqual(await verifiedCliProcessArguments(f.identity, trustedIndex, f.runtime), [f.node, resolve('/trusted/dist/bin.js'), ...f.identity.argv.slice(2)]);
+    assert.equal(f.reads(), 2);
+});
+test('an absolute command must resolve to the actual live executable', async () => {
+    const f = fixture();
+    f.identity.argv[0] = f.node;
+    f.observed.argv[0] = f.node;
+    assert.ok(await verifiedCliProcessArguments(f.identity, trustedIndex, f.runtime));
+    f.runtime.resolve = async (path) => path === '/proc/101/exe' ? f.node : '/foreign/node';
+    assert.equal(await verifiedCliProcessArguments(f.identity, trustedIndex, f.runtime), null);
+});
+for (const change of ['uid', 'root', 'pid', 'creation', 'command', 'relative-script', 'foreign-runtime', 'foreign-artifact',
+    'unknown-script', 'pid-reuse', 'script-drift', 'executable-drift', 'unavailable']) {
+    test(`npm aliases remain fail-closed for ${change}`, async () => {
+        const f = fixture();
+        if (change === 'uid')
+            f.identity.uid = 999;
+        if (change === 'root')
+            f.runtime.uid = 0;
+        if (change === 'pid')
+            f.identity.pid = 0;
+        if (change === 'creation')
+            f.identity.startTicks = 'invalid';
+        if (change === 'command') {
+            f.identity.argv[0] = 'python';
+            f.observed.argv[0] = 'python';
+        }
+        if (change === 'relative-script') {
+            f.identity.argv[1] = '.bin/dharma';
+            f.observed.argv[1] = '.bin/dharma';
+        }
+        if (change === 'foreign-runtime')
+            f.runtime.executableMatches = async () => false;
+        if (change === 'foreign-artifact')
+            f.runtime.verifyRuntime = async () => { throw new Error('different-version-or-bytes'); };
+        if (change === 'unknown-script')
+            f.runtime.resolve = async (path) => path === '/proc/101/exe' ? f.node : '/foreign/dist/foreign.js';
+        if (change === 'pid-reuse')
+            f.runtime.identity = async () => ({ ...f.observed, startTicks: '999' });
+        if (change === 'script-drift') {
+            let scripts = 0;
+            const resolve = f.runtime.resolve;
+            f.runtime.resolve = async (path) => path === f.identity.argv[1] && ++scripts > 1 ? '/foreign/dist/bin.js' : resolve(path);
+        }
+        if (change === 'executable-drift') {
+            let executables = 0;
+            const resolve = f.runtime.resolve;
+            f.runtime.resolve = async (path) => path === '/proc/101/exe' && ++executables > 1 ? '/foreign/node' : resolve(path);
+        }
+        if (change === 'unavailable')
+            f.runtime.identity = async () => { throw new Error('process-unavailable'); };
+        assert.equal(await verifiedCliProcessArguments(f.identity, trustedIndex, f.runtime), null);
+    });
+}
+test('normalization preserves every action argument for the caller exact-tuple check', async () => {
+    const f = fixture();
+    f.identity.argv.push('--foreign');
+    f.observed.argv.push('--foreign');
+    const result = await verifiedCliProcessArguments(f.identity, trustedIndex, f.runtime);
+    assert.equal(result?.at(-1), '--foreign');
+});
+test('live Linux executable verification uses loaded bytes, not argv names', { skip: process.platform !== 'linux' }, async () => {
+    assert.equal(await matchingCliExecutable(process.pid, process.execPath, process.getuid()), true);
+    assert.equal(await matchingCliExecutable(process.pid, '/missing/node', process.getuid()).catch(() => false), false);
+});
+test('real npm-style child requires matching verifier bytes across independent package prefixes', { skip: process.platform !== 'linux' || process.getuid?.() === 0, timeout: 15_000 }, async (t) => {
+    const root = await mkdtemp(join(tmpdir(), 'dharma-cli-identity-'));
+    t.after(() => rm(root, { recursive: true, force: true }));
+    const caller = join(root, 'caller'), candidate = join(root, 'candidate');
+    const bin = "process.on('message',()=>process.exit(0));process.send('ready');\n";
+    for (const prefix of [caller, candidate]) {
+        await mkdir(join(prefix, 'dist'), { recursive: true });
+        await writeFile(join(prefix, 'package.json'), JSON.stringify({ name: '@dharma-ai-labs/agent-fabric', version: '0.0.0-test' }), { mode: 0o600 });
+        for (const [name, bytes] of Object.entries({ 'bin.js': bin, 'index.js': 'synthetic index',
+            'containerRelayLifecycle.js': 'synthetic lifecycle', 'cliProcessIdentity.js': 'synthetic verifier' })) {
+            await writeFile(join(prefix, 'dist', name), bytes, { mode: 0o600 });
+        }
+    }
+    const alias = join(root, '.bin', 'dharma');
+    await mkdir(join(root, '.bin'));
+    await symlink(join(candidate, 'dist', 'bin.js'), alias);
+    const child = spawn(process.execPath, [alias, 'relay', 'supervise', '--policy', join(root, 'policy.json')], { argv0: 'node', stdio: ['ignore', 'ignore', 'ignore', 'ipc'] });
+    t.after(async () => {
+        if (child.exitCode === null && child.signalCode === null) {
+            const exited = once(child, 'exit');
+            child.send('stop');
+            await exited;
+        }
+    });
+    const [ready] = await once(child, 'message');
+    assert.equal(ready, 'ready');
+    const identity = await readContainerProcessIdentity(child.pid);
+    assert.equal(identity.argv[0], 'node');
+    assert.equal(identity.argv[1], alias);
+    const callerUrl = pathToFileURL(join(caller, 'dist', 'index.js')).href;
+    const expected = [process.execPath, join(caller, 'dist', 'bin.js'), ...identity.argv.slice(2)];
+    assert.deepEqual(await verifiedCliProcessArguments(identity, callerUrl), expected);
+    await writeFile(join(candidate, 'dist', 'cliProcessIdentity.js'), 'altered verifier', { mode: 0o600 });
+    assert.equal(await verifiedCliProcessArguments(identity, callerUrl), null);
+    await writeFile(join(candidate, 'dist', 'cliProcessIdentity.js'), 'synthetic verifier', { mode: 0o600 });
+    await chmod(join(candidate, 'dist', 'cliProcessIdentity.js'), 0o666);
+    assert.equal(await verifiedCliProcessArguments(identity, callerUrl), null);
+    await chmod(join(candidate, 'dist', 'cliProcessIdentity.js'), 0o600);
+    assert.deepEqual(await verifiedCliProcessArguments(identity, callerUrl), expected);
+    await writeFile(join(candidate, 'package.json'), JSON.stringify({ name: '@dharma-ai-labs/agent-fabric', version: '0.0.1-foreign' }));
+    assert.equal(await verifiedCliProcessArguments(identity, callerUrl), null);
+});
+//# sourceMappingURL=cliProcessIdentity.test.js.map

package/dist/cliProcessIdentity.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cliProcessIdentity.test.js","sourceRoot":"","sources":["../src/cliProcessIdentity.test.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,oBAAoB,CAAC;AACxC,OAAO,EAAC,KAAK,EAAC,MAAM,oBAAoB,CAAC;AACzC,OAAO,EAAC,IAAI,EAAC,MAAM,aAAa,CAAC;AACjC,OAAO,EAAC,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,SAAS,EAAC,MAAM,kBAAkB,CAAC;AAC/E,OAAO,EAAC,MAAM,EAAC,MAAM,SAAS,CAAC;AAC/B,OAAO,EAAC,IAAI,EAAE,OAAO,EAAC,MAAM,WAAW,CAAC;AACxC,OAAO,EAAC,aAAa,EAAC,MAAM,UAAU,CAAC;AACvC,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAC,2BAA2B,EAAE,qBAAqB,EAAC,MAAM,yBAAyB,CAAC;AAC3F,OAAO,EAAC,4BAA4B,EAAgC,MAAM,8BAA8B,CAAC;AAEzG,MAAM,YAAY,GAAG,aAAa,CAAC,OAAO,CAAC,wBAAwB,CAAC,CAAC,CAAC,IAAI,CAAC;AAC3E,SAAS,OAAO;IACd,MAAM,QAAQ,GAA6B,EAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG;QAC7E,cAAc,EAAE,GAAG,EAAE,SAAS,EAAE,GAAG,EAAE,UAAU,EAAE,KAAK;QACtD,IAAI,EAAE,CAAC,MAAM,EAAE,OAAO,CAAC,uCAAuC,CAAC,EAAE,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,OAAO,CAAC,gCAAgC,CAAC,CAAC,EAAC,CAAC;IACjJ,MAAM,IAAI,GAAG,OAAO,CAAC,eAAe,CAAC,EAAE,GAAG,GAAG,OAAO,CAAC,qEAAqE,CAAC,CAAC;IAC5H,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,MAAM,QAAQ,GAAG,eAAe,CAAC,QAAQ,CAAC,CAAC;IAC3C,MAAM,OAAO,GAAG;QACd,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI;QACzB,QAAQ,EAAE,KAAK,EAAE,GAAW,EAAE,EAAE,GAAE,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,OAAO,eAAe,CAAC,QAAQ,CAAC,CAAC,CAAA,CAAC;QACrG,OAAO,EAAE,KAAK,EAAE,IAAY,EAAmB,EAAE;YAC/C,IAAI,IAAI,KAAK,eAAe,IAAI,IAAI,KAAK,IAAI;gBAAE,OAAO,IAAI,CAAC;YAC3D,IAAI,IAAI,KAAK,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;gBAAE,OAAO,GAAG,CAAC;YAC1C,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;QAC9C,CAAC;QACD,iBAAiB,EAAE,KAAK,EAAE,GAAW,EAAE,MAAc,EAAE,GAAW,EAAE,EAAE;YACpE,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;YAAA,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;YAAA,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;YAAA,OAAO,IAAI,CAAC;QACxF,CAAC;QACD,aAAa,EAAE,KAAK,EAAE,SAAiB,EAAE,MAAc,EAAE,EAAE;YACzD,MAAM,CAAC,KAAK,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;YAAA,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,OAAO,CAAC,sBAAsB,CAAC,CAAC,CAAC;YAAA,OAAO,SAAS,CAAC;QACtG,CAAC;KACF,CAAC;IACF,OAAO,EAAC,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,KAAK,EAAC,CAAC;AACtE,CAAC;AAED,IAAI,CAAC,mFAAmF,EAAE,KAAK,IAAI,EAAE;IACnG,MAAM,CAAC,GAAG,OAAO,EAAE,CAAC;IACpB,MAAM,CAAC,SAAS,CAAC,MAAM,2BAA2B,CAAC,CAAC,CAAC,QAAQ,EAAE,YAAY,EAAE,CAAC,CAAC,OAAO,CAAC,EACrF,CAAC,CAAC,CAAC,IAAI,EAAE,OAAO,CAAC,sBAAsB,CAAC,EAAE,GAAG,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC1E,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC;AAC7B,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,gEAAgE,EAAE,KAAK,IAAI,EAAE;IAChF,MAAM,CAAC,GAAG,OAAO,EAAE,CAAC;IAAA,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;IAAA,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;IAC5E,MAAM,CAAC,EAAE,CAAC,MAAM,2BAA2B,CAAC,CAAC,CAAC,QAAQ,EAAE,YAAY,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IAClF,CAAC,CAAC,OAAO,CAAC,OAAO,GAAG,KAAK,EAAC,IAAI,EAAC,EAAE,CAAC,IAAI,KAAK,eAAe,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,eAAe,CAAC;IACtF,MAAM,CAAC,KAAK,CAAC,MAAM,2BAA2B,CAAC,CAAC,CAAC,QAAQ,EAAE,YAAY,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,IAAI,CAAC,CAAC;AAC7F,CAAC,CAAC,CAAC;AAEH,KAAK,MAAM,MAAM,IAAI,CAAC,KAAK,EAAC,MAAM,EAAC,KAAK,EAAC,UAAU,EAAC,SAAS,EAAC,iBAAiB,EAAC,iBAAiB,EAAC,kBAAkB;IAClH,gBAAgB,EAAC,WAAW,EAAC,cAAc,EAAC,kBAAkB,EAAC,aAAa,CAAU,EAAE,CAAC;IACzF,IAAI,CAAC,sCAAsC,MAAM,EAAE,EAAE,KAAK,IAAI,EAAE;QAC9D,MAAM,CAAC,GAAG,OAAO,EAAE,CAAC;QACpB,IAAI,MAAM,KAAK,KAAK;YAAE,CAAC,CAAC,QAAQ,CAAC,GAAG,GAAG,GAAG,CAAC;QAC3C,IAAI,MAAM,KAAK,MAAM;YAAE,CAAC,CAAC,OAAO,CAAC,GAAG,GAAG,CAAC,CAAC;QACzC,IAAI,MAAM,KAAK,KAAK;YAAE,CAAC,CAAC,QAAQ,CAAC,GAAG,GAAG,CAAC,CAAC;QACzC,IAAI,MAAM,KAAK,UAAU;YAAE,CAAC,CAAC,QAAQ,CAAC,UAAU,GAAG,SAAS,CAAC;QAC7D,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YAAA,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,QAAQ,CAAC;YAAA,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,QAAQ,CAAC;QAAA,CAAC;QACxF,IAAI,MAAM,KAAK,iBAAiB,EAAE,CAAC;YAAA,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,aAAa,CAAC;YAAA,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,aAAa,CAAC;QAAA,CAAC;QAC1G,IAAI,MAAM,KAAK,iBAAiB;YAAE,CAAC,CAAC,OAAO,CAAC,iBAAiB,GAAG,KAAK,IAAI,EAAE,CAAC,KAAK,CAAC;QAClF,IAAI,MAAM,KAAK,kBAAkB;YAAE,CAAC,CAAC,OAAO,CAAC,aAAa,GAAG,KAAK,IAAI,EAAE,GAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC,CAAA,CAAC,CAAC;QAC1H,IAAI,MAAM,KAAK,gBAAgB;YAAE,CAAC,CAAC,OAAO,CAAC,OAAO,GAAG,KAAK,EAAC,IAAI,EAAC,EAAE,CAAC,IAAI,KAAK,eAAe,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,0BAA0B,CAAC;QAClI,IAAI,MAAM,KAAK,WAAW;YAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,GAAG,KAAK,IAAI,EAAE,CAAC,CAAC,EAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,UAAU,EAAE,KAAK,EAAC,CAAC,CAAC;QAClG,IAAI,MAAM,KAAK,cAAc,EAAE,CAAC;YAC9B,IAAI,OAAO,GAAG,CAAC,CAAC;YAAA,MAAM,OAAO,GAAG,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC;YAClD,CAAC,CAAC,OAAO,CAAC,OAAO,GAAG,KAAK,EAAC,IAAI,EAAC,EAAE,CAAC,IAAI,KAAK,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAC1H,CAAC;QACD,IAAI,MAAM,KAAK,kBAAkB,EAAE,CAAC;YAClC,IAAI,WAAW,GAAG,CAAC,CAAC;YAAA,MAAM,OAAO,GAAG,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC;YACtD,CAAC,CAAC,OAAO,CAAC,OAAO,GAAG,KAAK,EAAC,IAAI,EAAC,EAAE,CAAC,IAAI,KAAK,eAAe,IAAI,EAAE,WAAW,GAAG,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACpH,CAAC;QACD,IAAI,MAAM,KAAK,aAAa;YAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,GAAG,KAAK,IAAI,EAAE,GAAE,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC,CAAA,CAAC,CAAC;QACzG,MAAM,CAAC,KAAK,CAAC,MAAM,2BAA2B,CAAC,CAAC,CAAC,QAAQ,EAAE,YAAY,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,IAAI,CAAC,CAAC;IAC7F,CAAC,CAAC,CAAC;AACL,CAAC;AAED,IAAI,CAAC,gFAAgF,EAAE,KAAK,IAAI,EAAE;IAChG,MAAM,CAAC,GAAG,OAAO,EAAE,CAAC;IAAA,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IAAA,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IACxF,MAAM,MAAM,GAAG,MAAM,2BAA2B,CAAC,CAAC,CAAC,QAAQ,EAAE,YAAY,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC;IACtF,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC;AAC5C,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,sEAAsE,EAAE,EAAC,IAAI,EAAE,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAC,EAAE,KAAK,IAAI,EAAE;IAC5H,MAAM,CAAC,KAAK,CAAC,MAAM,qBAAqB,CAAC,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,MAAO,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC;IAClG,MAAM,CAAC,KAAK,CAAC,MAAM,qBAAqB,CAAC,OAAO,CAAC,GAAG,EAAE,eAAe,EAAE,OAAO,CAAC,MAAO,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC,CAAC;AACvH,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,2FAA2F,EAC9F,EAAC,IAAI,EAAE,OAAO,CAAC,QAAQ,KAAK,OAAO,IAAI,OAAO,CAAC,MAAM,EAAE,EAAE,KAAK,CAAC,EAAE,OAAO,EAAE,MAAM,EAAC,EAAE,KAAK,EAAC,CAAC,EAAC,EAAE;IAC3F,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,sBAAsB,CAAC,CAAC,CAAC;IACnE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,IAAI,EAAE,EAAC,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAC,CAAC,CAAC,CAAC;IACxD,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,EAAE,SAAS,GAAG,IAAI,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;IACzE,MAAM,GAAG,GAAG,oEAAoE,CAAC;IACjF,KAAK,MAAM,MAAM,IAAI,CAAC,MAAM,EAAE,SAAS,CAAC,EAAE,CAAC;QACzC,MAAM,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,EAAC,SAAS,EAAE,IAAI,EAAC,CAAC,CAAC;QACrD,MAAM,SAAS,CAAC,IAAI,CAAC,MAAM,EAAE,cAAc,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,EAAC,IAAI,EAAE,8BAA8B,EAAE,OAAO,EAAE,YAAY,EAAC,CAAC,EAAE,EAAC,IAAI,EAAE,KAAK,EAAC,CAAC,CAAC;QAC5I,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,EAAC,QAAQ,EAAE,GAAG,EAAE,UAAU,EAAE,iBAAiB;YACtF,4BAA4B,EAAE,qBAAqB,EAAE,uBAAuB,EAAE,oBAAoB,EAAC,CAAC,EAAE,CAAC;YACvG,MAAM,SAAS,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,KAAK,EAAE,EAAC,IAAI,EAAE,KAAK,EAAC,CAAC,CAAC;QACpE,CAAC;IACH,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;IAC3C,MAAM,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;IAAC,MAAM,OAAO,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,KAAK,CAAC,CAAC;IACzF,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,IAAI,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC,EACxG,EAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,CAAC,EAAC,CAAC,CAAC;IACjE,CAAC,CAAC,KAAK,CAAC,KAAK,IAAI,EAAE;QACjB,IAAI,KAAK,CAAC,QAAQ,KAAK,IAAI,IAAI,KAAK,CAAC,UAAU,KAAK,IAAI,EAAE,CAAC;YACzD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;YAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAAC,MAAM,MAAM,CAAC;QACvE,CAAC;IACH,CAAC,CAAC,CAAC;IACH,MAAM,CAAC,KAAK,CAAC,GAAG,MAAM,IAAI,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;IAAC,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IAC3E,MAAM,QAAQ,GAAG,MAAM,4BAA4B,CAAC,KAAK,CAAC,GAAI,CAAC,CAAC;IAChE,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;IAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;IAC9E,MAAM,SAAS,GAAG,aAAa,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC;IACvE,MAAM,QAAQ,GAAG,CAAC,OAAO,CAAC,QAAQ,EAAE,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,GAAG,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAC/F,MAAM,CAAC,SAAS,CAAC,MAAM,2BAA2B,CAAC,QAAQ,EAAE,SAAS,CAAC,EAAE,QAAQ,CAAC,CAAC;IACnF,MAAM,SAAS,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,EAAE,uBAAuB,CAAC,EAAE,kBAAkB,EAAE,EAAC,IAAI,EAAE,KAAK,EAAC,CAAC,CAAC;IACrG,MAAM,CAAC,KAAK,CAAC,MAAM,2BAA2B,CAAC,QAAQ,EAAE,SAAS,CAAC,EAAE,IAAI,CAAC,CAAC;IAC3E,MAAM,SAAS,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,EAAE,uBAAuB,CAAC,EAAE,oBAAoB,EAAE,EAAC,IAAI,EAAE,KAAK,EAAC,CAAC,CAAC;IACvG,MAAM,KAAK,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,EAAE,uBAAuB,CAAC,EAAE,KAAK,CAAC,CAAC;IACrE,MAAM,CAAC,KAAK,CAAC,MAAM,2BAA2B,CAAC,QAAQ,EAAE,SAAS,CAAC,EAAE,IAAI,CAAC,CAAC;IAC3E,MAAM,KAAK,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,EAAE,uBAAuB,CAAC,EAAE,KAAK,CAAC,CAAC;IACrE,MAAM,CAAC,SAAS,CAAC,MAAM,2BAA2B,CAAC,QAAQ,EAAE,SAAS,CAAC,EAAE,QAAQ,CAAC,CAAC;IACnF,MAAM,SAAS,CAAC,IAAI,CAAC,SAAS,EAAE,cAAc,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,EAAC,IAAI,EAAE,8BAA8B,EAAE,OAAO,EAAE,eAAe,EAAC,CAAC,CAAC,CAAC;IACnI,MAAM,CAAC,KAAK,CAAC,MAAM,2BAA2B,CAAC,QAAQ,EAAE,SAAS,CAAC,EAAE,IAAI,CAAC,CAAC;AAC7E,CAAC,CAAC,CAAC"}

package/dist/codexBootstrapCompletion.test.js

@@ -97,6 +97,7 @@ async function fixture(t) {
         [resolve(home, 'relay', 'repositories', workspaceId, 'last-successful-poll.json'), poll],
     ]);
     const calls = [], mutations = {};
+    const canonicalProcesses = new Map();
     const dependencies = {
         resolve, Date, canonicalize, sha256, codexSetupSessionPolicyHash, selectDeviceWorkspace, parseLocalCodexSetupReadiness, parseNamedCodexSkillObservation,
         isNamedSessionOwnerReceipt, repositoryRelayObservationReady, discoverRepositoryRoleMetadata,
@@ -131,6 +132,7 @@ async function fixture(t) {
             mutations.process?.();
             return structuredClone(processes.find(p => p.pid === pid));
         },
+        verifiedCliProcessArguments: async (identity) => canonicalProcesses.has(identity.pid) ? canonicalProcesses.get(identity.pid) : identity.argv,
         readBootstrapRuntimeJson: async (path, scope) => scope.step(async () => {
             calls.push('owned-state');
             if (!paths.has(path))
@@ -151,7 +153,7 @@ async function fixture(t) {
             return handoffEnabled ? handoff : null;
         } };
     return { prepared, vault, observe, providerVault, calls, paths, mutations, row, profile, binding, native, remote,
-        content, startup, startupState, policy, supervisor, poll, processes, dependencies, handoff,
+        content, startup, startupState, policy, supervisor, poll, processes, canonicalProcesses, dependencies, handoff,
         enableHandoff: () => { handoffEnabled = true; processes[2].argv.push('--setup-handoff'); } };
 }
 async function signedReadinessFixture(f) {
@@ -245,7 +247,25 @@ for (const ipc of [false, true]) {
         const result = await f.observe(f.prepared, f.providerVault, 'no_eligible_history', ipc ? hash : undefined);
         assert.equal(result.sessionId, f.binding.sessionId);
     });
+    test(`actual completion accepts verified npm aliases with IPC=${ipc}`, async (t) => {
+        const f = await fixture(t);
+        f.processes[0].argv[0] = 'node';
+        f.processes[0].argv[1] = resolve(f.row.path, 'npm-cache', 'node_modules', '.bin', 'dharma');
+        f.canonicalProcesses.set(101, ['synthetic-node', resolve(f.row.path, 'bin.js'), ...f.processes[0].argv.slice(2)]);
+        if (ipc)
+            f.enableHandoff();
+        const result = await f.observe(f.prepared, f.providerVault, 'no_eligible_history', ipc ? hash : undefined);
+        assert.equal(result.sessionId, f.binding.sessionId);
+    });
 }
+test('actual completion rejects an npm alias without verified executable and package identity', async (t) => {
+    const f = await fixture(t);
+    f.enableHandoff();
+    f.processes[0].argv[0] = 'node';
+    f.processes[0].argv[1] = resolve(f.row.path, 'npm-cache', 'node_modules', '.bin', 'dharma');
+    f.canonicalProcesses.set(101, null);
+    await assert.rejects(f.observe(f.prepared, f.providerVault, 'no_eligible_history', hash), { message: 'setup_runtime_process_unconfirmed' });
+});
 for (const change of ['foreign-supervisor', 'relay-bin', 'session-bin', 'runtime', 'uid', 'policy', 'extra-args']) {
     test(`official bin completion still rejects ${change}`, async (t) => {
         const f = await fixture(t);