@wipcomputer/wip-ldm-os 0.4.85-alpha.18 → 0.4.85-alpha.19

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wipcomputer/wip-ldm-os",
-  "version": "0.4.85-alpha.18",
+  "version": "0.4.85-alpha.19",
   "type": "module",
   "description": "LDM OS: identity, memory, and sovereignty infrastructure for AI agents",
   "engines": {

package/scripts/test-crc-pair-relink-audit-and-rotation.mjs

@@ -38,6 +38,9 @@ assertContains(server, 'json(res, 410, { error: "code expired or already used" }
 assertContains(server, "invalidateCodexBrowserSessionsForAgent(identity.agentId, \"daemon key replaced\")", "daemon replacement invalidates stale browser sessions");
 assertContains(server, "evaluateCodexDaemonReconnectPubkey(", "daemon reconnect checks existing key policy");
 assertContains(server, "daemon key change requires fresh pair", "changed daemon reconnect key requires pair flow");
+assertContains(server, "daemonIdentityAccepted = activateCodexDaemonWs();", "daemon only becomes active after identity is accepted");
+assertContains(server, "daemon already online", "duplicate daemon cannot evict an online daemon");
+assertContains(server, "daemon identity required", "daemon frames require identity before routing");
 assertContains(server, "p.replaced_daemon_key = !!daemonKeyResult?.replaced;", "pair state records replacement status");
 assertContains(server, "replaced_daemon_key: !!p.replaced_daemon_key", "pair-status exposes relink replacement status");
 assertContains(pairHtml, "codex_pair_presence_token: getPairPresenceToken()", "pair page sends pair presence token");
@@ -87,6 +90,9 @@ assert(changedReconnectPolicy.new_fingerprint === codexDaemonPubkeyFingerprint("
 const invalidReconnectPolicy = evaluateCodexDaemonReconnectPubkey({ pubkey: "daemon-reconnect-key" }, "");
 assert(invalidReconnectPolicy.allowed === false, "daemon reconnect rejects missing pubkey");
 assert(invalidReconnectPolicy.reason === "invalid_daemon_pubkey", "missing daemon reconnect pubkey has explicit reason");
+const oversizedReconnectPolicy = evaluateCodexDaemonReconnectPubkey(null, "x".repeat(1025));
+assert(oversizedReconnectPolicy.allowed === false, "daemon reconnect rejects oversized pubkey");
+assert(oversizedReconnectPolicy.reason === "invalid_daemon_pubkey", "oversized daemon reconnect pubkey has explicit reason");
 
 const executeCalls = [];
 const persistedRegistry = createCodexDaemonPubkeyRegistry({

package/src/hosted-mcp/codex-relay-e2ee-registry.mjs

@@ -14,7 +14,7 @@ export function codexDaemonPubkeyFingerprint(pubkey) {
 
 export function evaluateCodexDaemonReconnectPubkey(existingKey, incomingPubkey) {
   const existingPubkey = typeof existingKey?.pubkey === "string" && existingKey.pubkey ? existingKey.pubkey : null;
-  const nextPubkey = typeof incomingPubkey === "string" && incomingPubkey ? incomingPubkey : null;
+  const nextPubkey = typeof incomingPubkey === "string" && incomingPubkey && incomingPubkey.length <= 1024 ? incomingPubkey : null;
   const oldFingerprint = codexDaemonPubkeyFingerprint(existingPubkey);
   const newFingerprint = codexDaemonPubkeyFingerprint(nextPubkey);
 

package/src/hosted-mcp/server.mjs

@@ -3132,10 +3132,19 @@ httpServer.on("upgrade", (req, socket, head) => {
 
   if (isDaemon) {
     codexRelayWss.handleUpgrade(req, socket, head, (ws) => {
-      const previous = codexDaemons.get(identity.agentId);
-      if (previous && previous !== ws) try { previous.close(4000, "replaced"); } catch {}
-      codexDaemons.set(identity.agentId, ws);
-      console.log("codex-relay: daemon online for " + identity.agentId);
+      let daemonIdentityAccepted = false;
+      function activateCodexDaemonWs() {
+        const previous = codexDaemons.get(identity.agentId);
+        if (previous && previous !== ws && previous.readyState === previous.OPEN) {
+          console.warn("codex-relay: rejected duplicate daemon reconnect for online tenant " + identity.agentId);
+          try { ws.close(4004, "daemon already online"); } catch {}
+          return false;
+        }
+        if (previous && previous !== ws) try { previous.close(4000, "replaced"); } catch {}
+        codexDaemons.set(identity.agentId, ws);
+        console.log("codex-relay: daemon online for " + identity.agentId);
+        return true;
+      }
       // F-001 per-thread isolation. Daemon -> web routing must NOT
       // fan out every frame to every same-agent web socket; that
       // breaks isolation when one user has multiple threads open.
@@ -3180,11 +3189,21 @@ httpServer.on("upgrade", (req, socket, head) => {
             envelope.daemon_public_key,
             envelope.crypto_versions,
             "daemon-reconnect",
-          ).catch(() => {
+          ).then((result) => {
+            if (!result?.registered) {
+              try { ws.close(1011, "daemon identity persistence failed"); } catch {}
+              return;
+            }
+            daemonIdentityAccepted = activateCodexDaemonWs();
+          }).catch(() => {
             try { ws.close(1011, "daemon identity persistence failed"); } catch {}
           });
           return;
         }
+        if (!daemonIdentityAccepted) {
+          try { ws.close(1008, "daemon identity required"); } catch {}
+          return;
+        }
         const sessionId = envelope?.session || envelope?.sessionId || envelope?.threadId;
         if (sessionId) {
           const targets = resolveCodexWebClientsForDaemonFrame(identity.agentId, sessionId);