@oxagen/cli 2.1.5-91 → 2.1.5-97

package/oxagen.mjs

@@ -26722,7 +26722,7 @@ import { readFileSync as readFileSync10 } from "node:fs";
 import { dirname as dirname9, resolve as resolve3 } from "node:path";
 import { fileURLToPath } from "node:url";
 function readVersion() {
-  if (true) return "2.1.5-91";
+  if (true) return "2.1.5-97";
   try {
     const here = dirname9(fileURLToPath(import.meta.url));
     const pkg = JSON.parse(
@@ -50886,6 +50886,13 @@ function asJson(value) {
 function argumentsHashOf(args) {
   return digestJcs(asJson(args));
 }
+function launchDigestOf(launch) {
+  return digestJcs({
+    command: launch.command,
+    args: [...launch.args],
+    env: [...launch.env]
+  });
+}
 function envelopeSigningBytes(envelope2) {
   const { signature: _signature, ...signed } = envelope2;
   return new TextEncoder().encode(jcs(asJson(signed)));
@@ -50926,6 +50933,7 @@ var init_wire2 = __esm({
       definition_hash: sha256Schema,
       package_digest: sha256Schema,
       arguments_hash: sha256Schema,
+      launch_digest: sha256Schema,
       deadline_ms: external_exports.number().int().min(1).max(3e5).optional(),
       machine: machineIdSchema,
       nonce: nonceSchema,
@@ -51448,6 +51456,14 @@ function verifyCallDelivery(delivery, options) {
       )
     );
   }
+  const launchDigest = launchDigestOf(delivery.launch);
+  if (launchDigest !== envelope2.launch_digest) {
+    return refuse2(
+      launchMismatch(
+        `the launch's command, args, and env names hash to ${launchDigest}, and the envelope signs ${envelope2.launch_digest}`
+      )
+    );
+  }
   if (argumentsHashOf(delivery.arguments) !== envelope2.arguments_hash) {
     return refuse2(argumentsMismatch());
   }
@@ -63510,7 +63526,7 @@ var init_package = __esm({
   "package.json"() {
     package_default = {
       name: "@oxagen/cli",
-      version: "2.1.5-91",
+      version: "2.1.5-97",
       description: "Oxagen governance CLI \u2014 spend, lineage, grounding, credentials, and audit (agentic coding lives in the stella CLI)",
       type: "module",
       main: "./dist/index.js",
@@ -92732,6 +92748,9 @@ var init_local_call_envelope = __esm({
         arguments_hash: sha256Schema2.describe(
           "SHA-256 over the RFC 8785 form of the upstream arguments, after the input was shaped."
         ),
+        launch_digest: sha256Schema2.describe(
+          "SHA-256 over the RFC 8785 form of the launch's command, args with each ${NAME} unfilled, and env names. The local gateway refuses a launch that does not match."
+        ),
         deadline_ms: envelopeDeadlineSchema.describe(
           `How long the local gateway lets the call run before it stops it. ${DEFAULT_DEADLINE_MS2} when omitted.`
         ),

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@oxagen/cli",
-  "version": "2.1.5-91",
+  "version": "2.1.5-97",
   "description": "Oxagen governance CLI — spend, lineage, grounding, credentials, and audit (agentic coding lives in the stella CLI)",
   "type": "module",
   "bin": {