@oxagen/cli 2.1.5-88 → 2.1.5-97

package/oxagen.mjs

@@ -26722,7 +26722,7 @@ import { readFileSync as readFileSync10 } from "node:fs";
 import { dirname as dirname9, resolve as resolve3 } from "node:path";
 import { fileURLToPath } from "node:url";
 function readVersion() {
-  if (true) return "2.1.5-88";
+  if (true) return "2.1.5-97";
   try {
     const here = dirname9(fileURLToPath(import.meta.url));
     const pkg = JSON.parse(
@@ -50886,6 +50886,13 @@ function asJson(value) {
 function argumentsHashOf(args) {
   return digestJcs(asJson(args));
 }
+function launchDigestOf(launch) {
+  return digestJcs({
+    command: launch.command,
+    args: [...launch.args],
+    env: [...launch.env]
+  });
+}
 function envelopeSigningBytes(envelope2) {
   const { signature: _signature, ...signed } = envelope2;
   return new TextEncoder().encode(jcs(asJson(signed)));
@@ -50926,6 +50933,7 @@ var init_wire2 = __esm({
       definition_hash: sha256Schema,
       package_digest: sha256Schema,
       arguments_hash: sha256Schema,
+      launch_digest: sha256Schema,
       deadline_ms: external_exports.number().int().min(1).max(3e5).optional(),
       machine: machineIdSchema,
       nonce: nonceSchema,
@@ -51448,6 +51456,14 @@ function verifyCallDelivery(delivery, options) {
       )
     );
   }
+  const launchDigest = launchDigestOf(delivery.launch);
+  if (launchDigest !== envelope2.launch_digest) {
+    return refuse2(
+      launchMismatch(
+        `the launch's command, args, and env names hash to ${launchDigest}, and the envelope signs ${envelope2.launch_digest}`
+      )
+    );
+  }
   if (argumentsHashOf(delivery.arguments) !== envelope2.arguments_hash) {
     return refuse2(argumentsMismatch());
   }
@@ -63510,7 +63526,7 @@ var init_package = __esm({
   "package.json"() {
     package_default = {
       name: "@oxagen/cli",
-      version: "2.1.5-88",
+      version: "2.1.5-97",
       description: "Oxagen governance CLI \u2014 spend, lineage, grounding, credentials, and audit (agentic coding lives in the stella CLI)",
       type: "module",
       main: "./dist/index.js",
@@ -92732,6 +92748,9 @@ var init_local_call_envelope = __esm({
         arguments_hash: sha256Schema2.describe(
           "SHA-256 over the RFC 8785 form of the upstream arguments, after the input was shaped."
         ),
+        launch_digest: sha256Schema2.describe(
+          "SHA-256 over the RFC 8785 form of the launch's command, args with each ${NAME} unfilled, and env names. The local gateway refuses a launch that does not match."
+        ),
         deadline_ms: envelopeDeadlineSchema.describe(
           `How long the local gateway lets the call run before it stops it. ${DEFAULT_DEADLINE_MS2} when omitted.`
         ),
@@ -134158,6 +134177,18 @@ async function treeFacts(tree, deps) {
   const tools = deps.tools ? await deps.tools(tree) : await compiledTools(tree, deps.compiler ?? compileServerFolder);
   return { cedar, workspace, agents: treeAgents(tree), tools };
 }
+function noCedarHooks(trees) {
+  const read2 = new Set(trees);
+  const none = (tree) => {
+    if (!read2.has(tree)) throw new Error(UNREAD_TREE);
+    return [];
+  };
+  return {
+    parse: () => [],
+    validate: (_policies, _schema, tree) => none(tree),
+    test: (_policies, _schema, _tests, tree) => none(tree)
+  };
+}
 function files(texts) {
   return [...texts].map(([path2, text5]) => ({ path: path2, text: text5 }));
 }
@@ -134165,6 +134196,7 @@ function cedarIssue(issue) {
   return { path: issue.path, line: issue.line, message: issue.message };
 }
 async function steeringCedarHooks(trees, deps = {}) {
+  if (!trees.some(hasCedarFiles)) return noCedarHooks(trees);
   const runtime = await (deps.cedar ?? loadCedarRuntime)();
   if (runtime === null) {
     const refuse4 = () => {
@@ -134177,11 +134209,7 @@ async function steeringCedarHooks(trees, deps = {}) {
   const now = deps.now ?? Date.now;
   const factsOf = (tree) => {
     const found = facts.get(tree);
-    if (found === void 0) {
-      throw new Error(
-        "The Cedar hooks were called for a tree they did not read. Pass every tree the checks run on to steeringCedarHooks."
-      );
-    }
+    if (found === void 0) throw new Error(UNREAD_TREE);
     return found;
   };
   return {
@@ -134232,7 +134260,7 @@ function cedarPolicyGate(deps = {}) {
     });
   };
 }
-var CHECK_WORKSPACE, NO_EVALUATOR;
+var CHECK_WORKSPACE, NO_EVALUATOR, UNREAD_TREE;
 var init_cedar_hooks = __esm({
   "../../packages/steering-bundle/src/cedar-hooks.ts"() {
     "use strict";
@@ -134244,6 +134272,7 @@ var init_cedar_hooks = __esm({
     init_tree();
     CHECK_WORKSPACE = "steering-check";
     NO_EVALUATOR = "Cedar's evaluator did not load, so Oxagen could not check the Cedar policies";
+    UNREAD_TREE = "The Cedar hooks were called for a tree they did not read. Pass every tree the checks run on to steeringCedarHooks.";
   }
 });
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@oxagen/cli",
-  "version": "2.1.5-88",
+  "version": "2.1.5-97",
   "description": "Oxagen governance CLI — spend, lineage, grounding, credentials, and audit (agentic coding lives in the stella CLI)",
   "type": "module",
   "bin": {