@sagentlab/navarch-runtime 0.1.89 → 0.1.90

package/dist/browser-probe.cjs

@@ -192,7 +192,17 @@ async function probeCodexSandbox(config, deps) {
             readRoots: [node_path_1.default.dirname(await node_fs_1.promises.realpath(process.execPath)), node_path_1.default.dirname(playwrightDir)],
         });
         const env = { NAVARCH_PROBE_PLAYWRIGHT: playwrightDir };
-        for (const key of ["HOME", "PATH", "TMPDIR", "CODEX_HOME", "PLAYWRIGHT_BROWSERS_PATH", "XDG_CACHE_HOME"]) {
+        for (const key of [
+            "HOME",
+            "PATH",
+            "TMPDIR",
+            "CODEX_HOME",
+            "PLAYWRIGHT_BROWSERS_PATH",
+            "XDG_CACHE_HOME",
+            // Agent sessions inherit it; without it Node falls back to the default
+            // config path, which can disagree with what sessions actually load.
+            "OPENSSL_CONF",
+        ]) {
             if (process.env[key])
                 env[key] = process.env[key];
         }
@@ -204,12 +214,16 @@ async function probeCodexSandbox(config, deps) {
             // bwrap could not find the program it was asked to start inside the
             // sandbox view: a path outside the granted read roots, not an old CLI.
             const hidden = /bwrap: execvp .*No such file or directory/.test(output);
+            const opensslConfig = /OpenSSL configuration error/.test(output);
             return ("Could not verify a browser inside the Codex sandbox: `codex sandbox` did not run the probe " +
                 `(${result.timedOut ? "timed out" : output.trim() ? summarizeLaunchFailure(output) : `exit ${result.code}`}). ` +
                 (hidden
                     ? "The sandbox cannot see that executable; add its install directory to NAVARCH_GUARD_EXTRA_ROOTS, " +
                         "or run browser tasks with another agent."
-                    : "Update the Codex CLI, or run browser tasks with another agent."));
+                    : opensslConfig
+                        ? "Node cannot read its OpenSSL config inside the sandbox, so Codex sessions cannot run node either; " +
+                            "update the Navarch runtime, or add that file's directory to NAVARCH_GUARD_EXTRA_ROOTS."
+                        : "Update the Codex CLI, or run browser tasks with another agent."));
         }
         const detail = result.timedOut ? "the launch timed out." : summarizeLaunchFailure(output);
         const machPort = /bootstrap_check_in|MachPortRendezvous|mach_port_rendezvous/i.test(output);
@@ -236,6 +250,15 @@ function summarizeLaunchFailure(output) {
         // "[pid=1][err] [1001/210406.593317:FATAL:base/apple/mach_port_rendezvous_mac.cc:159] Check failed: ..."
         return fatal.replace(/^.*FATAL:[^\]]*\]\s*/, "");
     }
+    const opensslIndex = lines.findIndex((line) => /OpenSSL configuration error/.test(line));
+    if (opensslIndex >= 0) {
+        // "<node>: OpenSSL configuration error:" with the reason on the next line:
+        // "...:error:80000001:system library:BIO_new_file:Operation not permitted:...:calling fopen(<path>, rb)"
+        const reason = lines[opensslIndex + 1] ?? "";
+        const cause = /:system library:[^:]*:([^:]+):/.exec(reason)?.[1];
+        const file = /fopen\(([^,]+),/.exec(reason)?.[1];
+        return `OpenSSL configuration error${cause ? `: ${cause}` : ""}${file ? ` reading ${node_path_1.default.normalize(file)}` : ""}`;
+    }
     const missing = lines.find((line) => /Executable doesn't exist/.test(line));
     if (missing)
         return "Chromium is not installed for the runtime's Playwright.";

package/dist/worktree-guard.cjs

@@ -138,6 +138,9 @@ function codexToolReadRoots(env = process.env, platform = process.platform) {
         node_path_1.default.join(miseDataDir(env, homeDir), "installs"),
         node_path_1.default.join(env.NVM_DIR?.trim() || node_path_1.default.join(homeDir, ".nvm"), "versions"),
         ...(platform === "darwin" ? MACOS_TOOLCHAIN_READ_ROOTS : []),
+        // An operator-chosen OpenSSL config is read by every Node (and OpenSSL
+        // CLI) start; the agent inherits OPENSSL_CONF, so the file must be too.
+        ...(env.OPENSSL_CONF?.trim() ? [env.OPENSSL_CONF.trim()] : []),
     ];
 }
 function miseDataDir(env, homeDir) {
@@ -209,7 +212,16 @@ function resolveExecutable(bin, env) {
  * system prefixes for the Claude hook (bin/worktree-guard-hook.cjs), so this
  * only brings the Codex profile level with it.
  */
-const MACOS_TOOLCHAIN_READ_ROOTS = ["/Library/Developer", "/Applications"];
+const MACOS_TOOLCHAIN_READ_ROOTS = [
+    "/Library/Developer",
+    "/Applications",
+    // Official nodejs.org macOS builds (nvm, fnm, volta, the .pkg installer)
+    // load OPENSSLDIR/openssl.cnf on every start and exit with "OpenSSL
+    // configuration error: ... Operation not permitted" when seatbelt denies
+    // the read, so no `node` or `npm` runs. Grant only the file: the directory
+    // also holds private/.
+    "/System/Library/OpenSSL/openssl.cnf",
+];
 /**
  * Per-user macOS build state that Xcode and SwiftPM write during a build or
  * test run: simulator devices and DerivedData under `~/Library/Developer`,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sagentlab/navarch-runtime",
-  "version": "0.1.89",
+  "version": "0.1.90",
   "description": "Navarch machine-side session manager: claims delivery tasks and runs them through local coding agents.",
   "type": "commonjs",
   "license": "MIT",