@dharma-ai-labs/agent-fabric 0.2.96 → 0.2.98

package/dist/index.test.js

@@ -7,7 +7,7 @@ import { join } from 'node:path';
 import test from 'node:test';
 import { fileURLToPath, pathToFileURL } from 'node:url';
 import { promisify } from 'node:util';
-import { acceptedTrajectoryHead, activateAgyPlugin, attestAgySkillActivation, attestHermesSkillBundleActivation, actionDecisionCapabilityFreshUntil, canonicalFilesystemPath, controlAgentDecisionUrl, installAvailableNativeAgentFabricBootstraps, assertCapsuleAuthorizedByCurrentPolicy, assertRecoveredTaskWorkspacePolicy, assertTaskWorkspacePolicy, assertTaskSkillPin, installNativeAgentFabricBootstrap, installClaudeReadOnlyProjectPermissions, installRepositoryAgentFabricSkill, isDirectExecution, isTransientBootstrapError, loadAgentFabricOnboardingContract, loadOrCreateInstallationId, materializeWorkspacePolicy, applyServerEvidencePolicy, materializeInlineSkillFiles, validateSkillBundleSources, nativeSkillDirectory, nativeSkillDirectoryForWorkspace, nativeSkillRootMatchingAuthorization, normalizeGitRemoteIdentity, postTaskOutcome, parseCliOptions, parseSelectedProviderIds, pathExistsOrThrow, portalUrl, providerHintFromEnvironment, providerHintFromProcessArgv, probeRelayConnection, preflightBootstrapWorkspaceIdentity, rawLocalRetentionDays, syncPendingRetentionCapsules, requireCompletedBootstrapEvidence, retryBootstrapOnboarding, synchronizeBootstrapEvidence, deferUnavailableRelayRetention, recoverLegacySkillBundleIdAfterAuthorizationFailure, installedBundleIdForSkillPollAfterAuthorizationFailure, recoveredTaskPolicyWasSuperseded, relayProcessState, releaseDailyContentUpload, reserveDailyContentUpload, run, runAssistantCommand, sourceRepositoryFingerprint, stableRepositoryLauncherContents, summarizeBootstrapOrganizationApi, ensureAgyReadOnlyAttestationPermission, attestAgySkillBundleActivation, responseTextFromEvent, taskResponsePreview, taskReceiptSession, taskSkillPinFailureCode, verifyAgentFabricSkillInstallation, waitForRelayReadiness, withWorkspacePolicyRefreshLock, withWorkspaceSkillActivationLock, } from './index.js';
+import { acceptedTrajectoryHead, activateAgyPlugin, attestAgySkillActivation, attestHermesSkillBundleActivation, actionDecisionCapabilityFreshUntil, canonicalFilesystemPath, controlAgentDecisionUrl, installAvailableNativeAgentFabricBootstraps, assertCapsuleAuthorizedByCurrentPolicy, assertRecoveredTaskWorkspacePolicy, assertTaskWorkspacePolicy, assertTaskSkillPin, installNativeAgentFabricBootstrap, installClaudeReadOnlyProjectPermissions, installRepositoryAgentFabricSkill, isDirectExecution, isTransientBootstrapError, loadAgentFabricOnboardingContract, loadOrCreateInstallationId, materializeWorkspacePolicy, applyServerEvidencePolicy, materializeInlineSkillFiles, validateSkillBundleSources, nativeSkillDirectory, nativeSkillDirectoryForWorkspace, nativeSkillRootMatchingAuthorization, normalizeGitRemoteIdentity, postTaskOutcome, parseCliOptions, parseSelectedProviderIds, pathExistsOrThrow, portalUrl, providerHintFromEnvironment, providerHintFromProcessArgv, probeRelayConnection, preflightBootstrapWorkspaceIdentity, rawLocalRetentionDays, syncPendingRetentionCapsules, requireCompletedBootstrapEvidence, retryBootstrapOnboarding, synchronizeBootstrapEvidence, deferUnavailableRelayRetention, recoverLegacySkillBundleIdAfterAuthorizationFailure, installedBundleIdForSkillPollAfterAuthorizationFailure, recoveredTaskPolicyWasSuperseded, acquireRelayProcessLease, relayProcessState, releaseDailyContentUpload, reserveDailyContentUpload, run, runAssistantCommand, sourceRepositoryFingerprint, stableRepositoryLauncherContents, summarizeBootstrapOrganizationApi, ensureAgyReadOnlyAttestationPermission, attestAgySkillBundleActivation, responseTextFromEvent, taskResponsePreview, taskReceiptSession, taskSkillPinFailureCode, verifyAgentFabricSkillInstallation, waitForRelayReadiness, withWorkspacePolicyRefreshLock, withWorkspaceSkillActivationLock, } from './index.js';
 import { canonicalize, signCanonicalObject } from '@dharma-ai-labs/agent-fabric-contracts';
 import { buildTrajectoryCapsule, trajectoryCapsuleHash } from '@dharma-ai-labs/agent-fabric-evidence-reduction';
 import { CLI_USAGE } from './usage.js';
@@ -88,6 +88,39 @@ test('bootstrap relay readiness fails closed when acknowledgement never arrives'
         wait: async () => undefined,
     }), /relay_session_unacknowledged/);
 });
+test('bootstrap rejects a connected relay from an older CLI release', async () => {
+    await assert.rejects(() => waitForRelayReadiness({
+        processState: async () => 'running',
+        probe: async () => ({ ok: true, connected: true, organizationId: 'org_test',
+            deviceId: 'device_test', relayVersion: '0.2.80' }),
+        expectedVersion: '0.2.98',
+        attempts: 1,
+    }), /relay_version_mismatch:0\.2\.80:0\.2\.98/);
+    await assert.rejects(() => waitForRelayReadiness({
+        processState: async () => 'running',
+        probe: async () => ({ ok: true, connected: false, organizationId: 'org_test',
+            deviceId: 'device_test', relayVersion: '0.2.98' }),
+        expectedVersion: '0.2.98',
+        attempts: 1,
+    }), /relay_session_unacknowledged/);
+});
+test('relay process lease rejects concurrent starts and preserves a successor PID', async () => {
+    const home = await mkdtemp(join(tmpdir(), 'dharma-relay-lease-'));
+    const pidPath = join(home, 'relay', 'relay.pid');
+    await mkdir(join(home, 'relay'), { recursive: true });
+    await writeFile(pidPath, '99999999\n');
+    const release = await acquireRelayProcessLease(home);
+    assert.equal(await relayProcessState(home), 'running');
+    assert.equal((await readFile(pidPath, 'utf8')).trim(), String(process.pid));
+    await assert.rejects(() => acquireRelayProcessLease(home), /Another relay process is already running/);
+    await writeFile(pidPath, '424242\n');
+    await release();
+    assert.equal((await readFile(pidPath, 'utf8')).trim(), '424242');
+    await unlink(pidPath);
+    const nextRelease = await acquireRelayProcessLease(home);
+    await nextRelease();
+    assert.equal(await relayProcessState(home), 'stopped');
+});
 test('bootstrap defers policy-rejected evidence without weakening the disclosure boundary', async () => {
     const result = await synchronizeBootstrapEvidence(async () => {
         throw new Error('local_path_disclosure_forbidden: capsule event contains a local path');
@@ -1752,13 +1785,13 @@ test('relay probe opens an authenticated session without polling or leasing work
         },
         openSession: async (version) => {
             sessions += 1;
-            assert.equal(version, '0.2.96');
+            assert.equal(version, '0.2.98');
             return { ok: true };
         },
     }));
     assert.equal(sessions, 1);
     assert.deepEqual(result, {
-        ok: true, connected: true, organizationId: 'org_test', deviceId: 'device_test', relayVersion: '0.2.96',
+        ok: true, connected: true, organizationId: 'org_test', deviceId: 'device_test', relayVersion: '0.2.98',
     });
 });
 test('relay probe fails closed when the server does not acknowledge the session', async () => {