@halofy/agent-connect 0.13.1 → 0.13.2

package/README.md

@@ -311,6 +311,17 @@ updated disposable installation. Existing local runtimes do not auto-upgrade.
 
 ## Organization instructions (0.10.0)
 
+The 0.13.2 release candidate includes an MCP policy validator extension.
+It accepts one final generated `Required MCP access policy` document in the
+connection's exact namespace, alongside ordinary authored instructions. That
+document may exceed 16 KiB; the complete instruction bundle still cannot exceed
+64 KiB. Ordinary documents keep their 16 KiB limit and unique, ordered ancestor
+scopes. Content hashes, bundle digest, UTF-8 and managed-marker checks still apply.
+Existing installed `0.13.1` runtimes without this extension reject same-scope
+authored/generated pairs and generated policies above 16 KiB. They need an
+upgraded runtime; this source change neither publishes a package nor upgrades
+existing installations. Invalid bundles leave existing local files untouched.
+
 This source adds Govern instruction delivery alongside the existing skill,
 policy, knowledge and delivery-receipt paths. Activation requires the reviewed
 0.10.0 npm publication, matching server deployment and a fresh confirmed

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@halofy/agent-connect",
-  "version": "0.13.1",
+  "version": "0.13.2",
   "type": "module",
   "description": "Halofy lifecycle installer and runtime for supported agents; runtime requests are signed with a per-installation Ed25519 key",
   "bin": {

package/src/instructions.mjs

@@ -12,6 +12,7 @@ export const INSTALL_INSTRUCTION_SYNC_TIMEOUT_MS = 15_000;
 
 const sha = (value) => createHash("sha256").update(value).digest("hex");
 const HEX = /^[a-f0-9]{64}$/;
+const MCP_POLICY_ID = /^mcp-policy-[a-f0-9]{64}$/;
 const MARKER = "<!-- HALOFY-INSTRUCTIONS:";
 const fail = (code) => { throw Object.assign(new Error(code), { instructionCode: code }); };
 const plain = (value) => value && typeof value === "object" && !Array.isArray(value);
@@ -34,16 +35,21 @@ export function validateInstructionBundle(bundle, expectedNamespace) {
       bundle.namespace !== expectedNamespace || !HEX.test(bundle.digest) || !Array.isArray(bundle.documents) ||
       Buffer.byteLength(JSON.stringify(bundle)) > 64 * 1024) fail("invalid_bundle");
   let previous = null;
-  const documents = bundle.documents.map((doc) => {
+  const documents = bundle.documents.map((doc, index) => {
+    // This reserved identifier is a wire discriminator, not an authenticity
+    // proof. Authority still comes from the authorized server response.
+    const generatedPolicy = plain(doc) && typeof doc.id === "string" && MCP_POLICY_ID.test(doc.id);
     if (!plain(doc) || typeof doc.id !== "string" || !/^[A-Za-z0-9_-]{1,160}$/.test(doc.id) || !scope(doc.namespace) ||
         !(doc.namespace === "" || doc.namespace === expectedNamespace || expectedNamespace.startsWith(`${doc.namespace}/`)) ||
-        (previous !== null && !(doc.namespace !== previous && (previous === "" || doc.namespace.startsWith(`${previous}/`)))) ||
+        (doc.id.startsWith("mcp-policy-") && !generatedPolicy) ||
+        (generatedPolicy && (index !== bundle.documents.length - 1 || doc.namespace !== expectedNamespace || doc.title !== "Required MCP access policy")) ||
+        (!generatedPolicy && previous !== null && !(doc.namespace !== previous && (previous === "" || doc.namespace.startsWith(`${previous}/`)))) ||
         !Number.isSafeInteger(doc.version) || doc.version < 1 || typeof doc.title !== "string" || !doc.title.trim() || doc.title.length > 160 || doc.title.includes(MARKER) ||
         /[\u0000-\u001f\u007f]/.test(doc.title) || typeof doc.content !== "string" || !doc.content.trim() ||
         Buffer.from(doc.title, "utf8").toString("utf8") !== doc.title || Buffer.from(doc.content, "utf8").toString("utf8") !== doc.content ||
-        doc.content.includes("\0") || doc.content.includes(MARKER) || Buffer.byteLength(doc.content) > 16 * 1024 ||
+        doc.content.includes("\0") || doc.content.includes(MARKER) || Buffer.byteLength(doc.content) > (generatedPolicy ? 64 : 16) * 1024 ||
         !HEX.test(doc.sha256) || sha(doc.content) !== doc.sha256) fail("invalid_bundle");
-    previous = doc.namespace;
+    if (!generatedPolicy) previous = doc.namespace;
     return { id: doc.id, namespace: doc.namespace, version: doc.version, title: doc.title, content: doc.content, sha256: doc.sha256 };
   });
   if (sha(JSON.stringify(documents)) !== bundle.digest) fail("invalid_bundle");

package/src/version.mjs

@@ -1,4 +1,4 @@
 export const PACKAGE_NAME = "@halofy/agent-connect";
-export const INSTALLER_VERSION = "0.13.1";
-export const RUNTIME_VERSION = "0.13.1";
+export const INSTALLER_VERSION = "0.13.2";
+export const RUNTIME_VERSION = "0.13.2";
 export const DISCLOSURE_VERSION = "halofy-agent-lifecycle-2026-09-17.1";