@dharma-ai-labs/agent-fabric 0.2.79 → 0.2.80

package/dist/index.test.js

@@ -7,7 +7,7 @@ import { join } from 'node:path';
 import test from 'node:test';
 import { fileURLToPath, pathToFileURL } from 'node:url';
 import { promisify } from 'node:util';
-import { acceptedTrajectoryHead, activateAgyPlugin, attestAgySkillActivation, attestHermesSkillBundleActivation, actionDecisionCapabilityFreshUntil, canonicalFilesystemPath, controlAgentDecisionUrl, installAvailableNativeAgentFabricBootstraps, assertCapsuleAuthorizedByCurrentPolicy, assertRecoveredTaskWorkspacePolicy, assertTaskWorkspacePolicy, assertTaskSkillPin, installNativeAgentFabricBootstrap, installClaudeReadOnlyProjectPermissions, installRepositoryAgentFabricSkill, isDirectExecution, isTransientBootstrapError, loadAgentFabricOnboardingContract, loadOrCreateInstallationId, materializeWorkspacePolicy, applyServerEvidencePolicy, materializeInlineSkillFiles, validateSkillBundleSources, nativeSkillDirectory, nativeSkillDirectoryForWorkspace, nativeSkillRootMatchingAuthorization, normalizeGitRemoteIdentity, postTaskOutcome, parseCliOptions, parseSelectedProviderIds, pathExistsOrThrow, portalUrl, providerHintFromEnvironment, providerHintFromProcessArgv, probeRelayConnection, preflightBootstrapWorkspaceIdentity, rawLocalRetentionDays, requireCompletedBootstrapEvidence, retryBootstrapOnboarding, synchronizeBootstrapEvidence, deferUnavailableRelayRetention, recoverLegacySkillBundleIdAfterAuthorizationFailure, installedBundleIdForSkillPollAfterAuthorizationFailure, recoveredTaskPolicyWasSuperseded, relayProcessState, releaseDailyContentUpload, reserveDailyContentUpload, run, runAssistantCommand, sourceRepositoryFingerprint, stableRepositoryLauncherContents, summarizeBootstrapOrganizationApi, ensureAgyReadOnlyAttestationPermission, attestAgySkillBundleActivation, responseTextFromEvent, taskResponsePreview, taskReceiptSession, taskSkillPinFailureCode, verifyAgentFabricSkillInstallation, waitForRelayReadiness, withWorkspacePolicyRefreshLock, withWorkspaceSkillActivationLock, } from './index.js';
+import { acceptedTrajectoryHead, activateAgyPlugin, attestAgySkillActivation, attestHermesSkillBundleActivation, actionDecisionCapabilityFreshUntil, canonicalFilesystemPath, controlAgentDecisionUrl, installAvailableNativeAgentFabricBootstraps, assertCapsuleAuthorizedByCurrentPolicy, assertRecoveredTaskWorkspacePolicy, assertTaskWorkspacePolicy, assertTaskSkillPin, installNativeAgentFabricBootstrap, installClaudeReadOnlyProjectPermissions, installRepositoryAgentFabricSkill, isDirectExecution, isTransientBootstrapError, loadAgentFabricOnboardingContract, loadOrCreateInstallationId, materializeWorkspacePolicy, applyServerEvidencePolicy, materializeInlineSkillFiles, validateSkillBundleSources, nativeSkillDirectory, nativeSkillDirectoryForWorkspace, nativeSkillRootMatchingAuthorization, normalizeGitRemoteIdentity, postTaskOutcome, parseCliOptions, parseSelectedProviderIds, pathExistsOrThrow, portalUrl, providerHintFromEnvironment, providerHintFromProcessArgv, probeRelayConnection, preflightBootstrapWorkspaceIdentity, rawLocalRetentionDays, syncPendingRetentionCapsules, requireCompletedBootstrapEvidence, retryBootstrapOnboarding, synchronizeBootstrapEvidence, deferUnavailableRelayRetention, recoverLegacySkillBundleIdAfterAuthorizationFailure, installedBundleIdForSkillPollAfterAuthorizationFailure, recoveredTaskPolicyWasSuperseded, relayProcessState, releaseDailyContentUpload, reserveDailyContentUpload, run, runAssistantCommand, sourceRepositoryFingerprint, stableRepositoryLauncherContents, summarizeBootstrapOrganizationApi, ensureAgyReadOnlyAttestationPermission, attestAgySkillBundleActivation, responseTextFromEvent, taskResponsePreview, taskReceiptSession, taskSkillPinFailureCode, verifyAgentFabricSkillInstallation, waitForRelayReadiness, withWorkspacePolicyRefreshLock, withWorkspaceSkillActivationLock, } from './index.js';
 import { canonicalize, signCanonicalObject } from '@dharma-ai-labs/agent-fabric-contracts';
 import { buildTrajectoryCapsule } from '@dharma-ai-labs/agent-fabric-evidence-reduction';
 import { CLI_USAGE } from './usage.js';
@@ -1290,6 +1290,50 @@ test('queued content must match the current signed consent and policy revision',
     assert.throws(() => assertCapsuleAuthorizedByCurrentPolicy({ ...current, redactionReceipt: { disclosureMode: 'customer_authorized_content', policyRevision: 'content-v1', consentReceiptId: 'consent-old' } }, policy), /no longer authorized/);
     assert.throws(() => assertCapsuleAuthorizedByCurrentPolicy(current, { ...policy, evidence: { ...policy.evidence, automaticDisclosure: { mode: 'local_analysis' } } }), /invalid|no longer authorized/);
 });
+test('queued capsules from a replaced device are retained locally but never sent under the current device signature', async () => {
+    const base = await materializeWorkspacePolicy({
+        workspace: await mkdtemp(join(tmpdir(), 'dharma-rebound-capsules-')),
+        organizationId: 'org_northstar', revision: 'local',
+    });
+    const workspaceId = 'workspace-northstar';
+    const currentDeviceId = '22222222-2222-4222-8222-222222222222';
+    const session = {
+        provider: 'codex', sessionId: 'same-workspace-history', sourcePath: '/private/codex.jsonl',
+        workspace: '/repo', coverage: 'observed',
+        startedAt: '2026-09-23T00:00:00.000Z', endedAt: '2026-09-23T00:00:01.000Z',
+        records: [{ native: { type: 'message' }, sourcePath: '/private/codex.jsonl', line: 1,
+                workspace: '/repo', timestamp: '2026-09-23T00:00:00.000Z', kind: 'metadata' }],
+    };
+    const capsuleFor = (deviceId) => buildTrajectoryCapsule({
+        organizationId: 'org_northstar', deviceId, workspaceId, session, policy: base.policy,
+        rawContentId: `sha256:${'a'.repeat(64)}`, rawBytes: 32,
+    });
+    const old = capsuleFor('11111111-1111-4111-8111-111111111111');
+    const current = capsuleFor(currentDeviceId);
+    const pending = [old, current];
+    const discarded = [];
+    const sent = [];
+    const vault = {
+        listPendingCapsuleSyncs: async () => pending.map(capsule => ({ trajectoryId: capsule.trajectoryId,
+            revision: capsule.revision, capsule })),
+        markCapsuleSynced: (trajectoryId) => { pending.splice(pending.findIndex(c => c.trajectoryId === trajectoryId), 1); },
+        discardPendingCapsuleSync: (trajectoryId, _revision, reason) => {
+            discarded.push({ trajectoryId, reason });
+            pending.splice(pending.findIndex(c => c.trajectoryId === trajectoryId), 1);
+        },
+    };
+    const fabric = { config: { organizationId: 'org_northstar', deviceId: currentDeviceId },
+        syncTrajectory: async (capsule) => {
+            if (capsule.deviceId !== currentDeviceId)
+                throw new Error('trajectory_tenant_mismatch');
+            sent.push(capsule.trajectoryId);
+        } };
+    const count = await syncPendingRetentionCapsules(vault, fabric, base.policy, workspaceId);
+    assert.equal(count, 1);
+    assert.deepEqual(discarded, [{ trajectoryId: old.trajectoryId, reason: 'device_binding_changed' }]);
+    assert.deepEqual(sent, [current.trajectoryId]);
+    assert.equal(old.deviceId, '11111111-1111-4111-8111-111111111111');
+});
 test('recovered task evidence distinguishes a superseded policy from the current revision', () => {
     const capsule = { redactionReceipt: { policyRevision: 'policy-v1' } };
     assert.equal(recoveredTaskPolicyWasSuperseded(capsule, { revision: 'policy-v2' }), true);
@@ -1570,13 +1614,13 @@ test('relay probe opens an authenticated session without polling or leasing work
         },
         openSession: async (version) => {
             sessions += 1;
-            assert.equal(version, '0.2.79');
+            assert.equal(version, '0.2.80');
             return { ok: true };
         },
     }));
     assert.equal(sessions, 1);
     assert.deepEqual(result, {
-        ok: true, connected: true, organizationId: 'org_test', deviceId: 'device_test', relayVersion: '0.2.79',
+        ok: true, connected: true, organizationId: 'org_test', deviceId: 'device_test', relayVersion: '0.2.80',
     });
 });
 test('relay probe fails closed when the server does not acknowledge the session', async () => {