@metamynd/agentsafe-signer 0.15.1 → 0.15.3

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@metamynd/agentsafe-signer",
-  "version": "0.15.1",
+  "version": "0.15.3",
   "description": "Local signer daemon for AgentSafe agent/service keys \u2014 the key never enters the calling guard's own process. See docs/design/agent-key-custody-local-signer-daemon-plan.md.",
   "type": "module",
   "main": "./daemon.mjs",

package/policy-core.mjs

@@ -643,16 +643,24 @@ function evaluateMandate(mandate, req) {
     };
   }
   for (const p of perms) {
-    const failing = (p.constraint ?? []).find((c) => !constraintSatisfied(c, req, true));
-    if (!failing) return { decision: "allow", reasonCode: "AUTHORIZED" };
+    const failing2 = (p.constraint ?? []).find((c) => !constraintSatisfied(c, req, true));
+    if (!failing2) return { decision: "allow", reasonCode: "AUTHORIZED" };
   }
-  const firstFail = (perms[0].constraint ?? []).find((c) => !constraintSatisfied(c, req, true));
+  const failing = (perms[0].constraint ?? []).filter((c) => !constraintSatisfied(c, req, true));
+  const firstFail = failing[0];
+  const reported = reportedFailure(failing) ?? firstFail;
   return {
     decision: firstFail?.onFail ?? "block",
-    reasonCode: reasonFor(firstFail, req),
-    matched: { kind: "permission", target: perms[0].target, constraint: firstFail }
+    reasonCode: reasonFor(reported, req),
+    matched: { kind: "permission", target: perms[0].target, constraint: reported }
   };
 }
+function reportedFailure(failing) {
+  const first = failing[0];
+  if (!first || !AMOUNT_OPERANDS.has(first.leftOperand)) return void 0;
+  const decision = first.onFail ?? "block";
+  return failing.find((c) => !AMOUNT_OPERANDS.has(c.leftOperand) && (c.onFail ?? "block") === decision);
+}
 function remainingBudget(b) {
   return Math.max(0, b.cap - b.spent - b.held);
 }

package/service-installer.mjs

@@ -26,6 +26,13 @@ function defaultNodePath() {
   return process.execPath || '/usr/bin/node';
 }
 
+/** One ExecStart= word. systemd splits the line on whitespace, so a path with a space in it (a node under
+ *  `/opt/Node JS/`, or `C:\Program Files\nodejs\node.exe` when the unit is generated on Windows) became two words and
+ *  the unit failed at exec. Double quotes are systemd's own quoting, with `\` and `"` escaped inside them. */
+function systemdArg(value) {
+  return /\s/.test(value) ? `"${value.replace(/(["\\])/g, '\\$1')}"` : value;
+}
+
 function assertTier(tier) {
   if (tier !== 1 && tier !== 2) throw new Error(`tier must be 1 or 2, got ${tier}`);
 }
@@ -74,7 +81,7 @@ export function generateSystemdUnits({ identity, tier, nodePath = defaultNodePat
   const cliInvocationPath = tier === 1 && !isAbsolutePath ? `%h/${resolvedCliPath.replace(/^\.?\//, '')}` : resolvedCliPath;
   // %S is systemd's own state-directory root, so this lines up with StateDirectory= below rather
   // than hard-coding a path that has to be kept in sync with it by hand.
-  const invocation = `${nodePath} ${cliInvocationPath} start --state-dir %S/agentsafe/%i --role ${role} --identity %i`;
+  const invocation = `${systemdArg(nodePath)} ${systemdArg(cliInvocationPath)} start --state-dir %S/agentsafe/%i --role ${role} --identity %i`;
   // No setpriv wrapper. An earlier pass wrapped this in `setpriv --dumpable 0 --` to deny ptrace
   // via PR_SET_DUMPABLE=0. That option does not exist: util-linux's setpriv has no --dumpable flag
   // (checked on util-linux 2.39.3 / Ubuntu 24.04 LTS — the string is absent from the binary