aismemory 0.7.1 → 0.7.3

package/dist/__tests__/credential-resolution.test.js

@@ -0,0 +1,141 @@
+import { Client } from '@modelcontextprotocol/sdk/client/index.js';
+import { StdioClientTransport } from '@modelcontextprotocol/sdk/client/stdio.js';
+import { createServer } from 'node:http';
+import { mkdtempSync, writeFileSync, rmSync } from 'node:fs';
+import { tmpdir } from 'node:os';
+import { join, resolve } from 'node:path';
+import { describe, expect, it } from 'vitest';
+import { loadAgentApiKeyConfig } from '../agent-key-mode.js';
+import { loadWorkspaceKeyConfig } from '../workspace-key-mode.js';
+import { loadHarnessIdentity } from '../harness-identity.js';
+const agentId = '11111111-1111-4111-8111-111111111111';
+describe('scoped credential aliases', () => {
+    it('accepts AIS_API_KEY for a single agent and trims it', () => {
+        expect(loadAgentApiKeyConfig({ AIS_API_KEY: ' ais_ak_test\n', AIS_AGENT_ID: agentId }))
+            .toEqual({ apiKey: 'ais_ak_test', agentId });
+    });
+    it('accepts a workspace key through AIS_API_KEY', () => {
+        expect(loadWorkspaceKeyConfig({ AIS_API_KEY: ' ais_wk_test\n', AIS_AGENT_ID: agentId }))
+            .toEqual({ workspaceKey: 'ais_wk_test', agentId });
+    });
+    it('prefers the explicit workspace key over the generic alias', () => {
+        expect(loadWorkspaceKeyConfig({ AIS_WORKSPACE_KEY: 'ais_wk_primary', AIS_API_KEY: 'ais_wk_other', AIS_AGENT_ID: agentId }))
+            .toEqual({ workspaceKey: 'ais_wk_primary', agentId });
+    });
+    it('prefers AIS_API_KEY over the legacy single-agent alias', () => {
+        expect(loadAgentApiKeyConfig({ AIS_API_KEY: 'ais_ak_primary', AIS_AGENT_API_KEY: 'ais_ak_other', AIS_AGENT_ID: agentId }))
+            .toEqual({ apiKey: 'ais_ak_primary', agentId });
+    });
+    it.each(['', '   ', 'service-test-sentinel', 'eyJ.fake.jwt'])('rejects an invalid generic key without falling through (%s)', (key) => {
+        expect(() => loadAgentApiKeyConfig({ AIS_API_KEY: key, AIS_AGENT_ID: agentId })).toThrow(/AIS_API_KEY/);
+    });
+    it('names the missing identity for either generic key type', () => {
+        expect(() => loadAgentApiKeyConfig({ AIS_API_KEY: 'ais_ak_test' })).toThrow(/AIS_API_KEY is set but AIS_AGENT_ID is missing/);
+        expect(() => loadWorkspaceKeyConfig({ AIS_API_KEY: 'ais_wk_test' })).toThrow(/AIS_API_KEY is set but AIS_AGENT_ID is missing/);
+    });
+    it('selects agent key mode when AIS_AGENT_ID arrives with injection whitespace', () => {
+        // main() resolves the harness identity BEFORE its agent-API-key check and
+        // rebuilds the adapter env from it, so an untrimmed AIS_AGENT_ID used to
+        // abort the process there and agent key mode never ran (CORBOT-D8D35CF0).
+        const env = { AIS_API_KEY: 'ais_ak_test', AIS_AGENT_ID: ` ${agentId}\n` };
+        const identity = loadHarnessIdentity([], env);
+        expect(identity).toEqual({ version: 1, harness: 'env-pin', agentId });
+        const adapterEnv = { ...env, AIS_AGENT_ID: identity?.agentId };
+        expect(loadAgentApiKeyConfig(adapterEnv)).toEqual({ apiKey: 'ais_ak_test', agentId });
+    });
+    it('treats a blank AIS_AGENT_ID as absent so the key loader names it', () => {
+        expect(loadHarnessIdentity([], { AIS_AGENT_ID: '  ' })).toBeNull();
+        expect(() => loadAgentApiKeyConfig({ AIS_API_KEY: 'ais_ak_test', AIS_AGENT_ID: undefined }))
+            .toThrow(/AIS_API_KEY is set but AIS_AGENT_ID is missing/);
+    });
+    it('ignores infrastructure credentials', () => {
+        const env = { AIS_SERVICE_KEY: 'service-test-sentinel', DATABASE_URL: 'database-test-sentinel' };
+        expect(loadWorkspaceKeyConfig(env)).toBeNull();
+        expect(loadAgentApiKeyConfig(env)).toBeNull();
+    });
+});
+describe('real MCP credential resolution', () => {
+    it.each(['workspace', 'agent', 'agent-padded', 'cache', 'cold'])('%s path uses only the selected credential and gives actionable errors', async (mode) => {
+        const taskHome = mkdtempSync(join(tmpdir(), 'ais-credential-resolution-'));
+        const requests = [];
+        const server = createServer((req, res) => {
+            const workspace = req.headers['x-workspace-key'];
+            const agent = req.headers['x-agent-api-key'];
+            requests.push({
+                path: req.url ?? '',
+                ...(typeof workspace === 'string' ? { workspace } : {}),
+                ...(typeof agent === 'string' ? { agent } : {}),
+                ...(req.headers.authorization ? { bearer: req.headers.authorization } : {}),
+            });
+            res.writeHead(mode === 'cold' ? 503 : 200, { 'content-type': 'application/json' });
+            res.end(JSON.stringify({ success: mode !== 'cold', data: { memories: [] } }));
+        });
+        const client = new Client({ name: 'credential-resolution-test', version: '1.0.0' });
+        try {
+            await new Promise((done) => { server.listen(0, '127.0.0.1', done); });
+            const address = server.address();
+            if (!address || typeof address === 'string')
+                throw new Error('Missing test server address');
+            const cacheFile = join(taskHome, 'credentials.json');
+            if (mode !== 'cold') {
+                writeFileSync(cacheFile, JSON.stringify({ token: 'cache-test-sentinel', agentId, tenantId: 'tenant-test', expiresAt: '2099-01-01T00:00:00Z' }), { mode: 0o600 });
+            }
+            const env = {};
+            for (const [name, value] of Object.entries(process.env)) {
+                if (value !== undefined && !name.startsWith('AIS_') && name !== 'DATABASE_URL')
+                    env[name] = value;
+            }
+            Object.assign(env, {
+                HOME: taskHome,
+                AIS_URL: `http://127.0.0.1:${address.port}`,
+                AIS_CREDENTIALS_FILE: cacheFile,
+                AIS_SERVICE_KEY: 'service-test-sentinel',
+                DATABASE_URL: 'database-test-sentinel',
+            });
+            if (mode === 'workspace')
+                Object.assign(env, { AIS_WORKSPACE_KEY: 'ais_wk_test', AIS_API_KEY: 'ais_ak_other', AIS_AGENT_ID: agentId });
+            if (mode === 'agent')
+                Object.assign(env, { AIS_API_KEY: 'ais_ak_test', AIS_AGENT_ID: agentId });
+            // Same credential, injected the way a sourced .env file delivers it.
+            if (mode === 'agent-padded')
+                Object.assign(env, { AIS_API_KEY: ' ais_ak_test\n', AIS_AGENT_ID: ` ${agentId}\n` });
+            const transport = new StdioClientTransport({ command: process.execPath, args: [resolve(__dirname, '../../dist/index.js')], env, stderr: 'pipe' });
+            await client.connect(transport);
+            const result = await client.callTool({ name: mode === 'cold' ? 'agent_load' : 'recall', arguments: mode === 'cold' ? { query: 'corbot' } : { query: 'test' } });
+            const serialized = JSON.stringify(result);
+            if (mode === 'cold') {
+                expect(result.isError).toBe(true);
+                expect(serialized).toContain('Missing AIS credential:');
+                expect(serialized).toContain('AIS_WORKSPACE_KEY / AIS_API_KEY');
+                expect(serialized).toContain('ask your workspace owner');
+                expect(serialized).toContain('AIS_AGENT_ID');
+                expect(serialized).toContain('~/.aismemory/credentials.json');
+                expect(serialized).toContain('AIS sign-in could not start');
+                expect(requests.every((request) => request.path === '/v1/oauth/device/authorize' && !request.bearer && !request.workspace && !request.agent)).toBe(true);
+            }
+            else {
+                expect(result.isError).not.toBe(true);
+                const memoryRequests = requests.filter((request) => request.path.includes('/memory'));
+                expect(memoryRequests.length).toBeGreaterThan(0);
+                for (const request of memoryRequests) {
+                    expect(request.workspace).toBe(mode === 'workspace' ? 'ais_wk_test' : undefined);
+                    expect(request.agent).toBe(mode.startsWith('agent') ? 'ais_ak_test' : undefined);
+                    expect(request.bearer).toBe(mode === 'cache' ? 'Bearer cache-test-sentinel' : undefined);
+                }
+                expect(requests.some((request) => request.path.includes('/oauth/'))).toBe(false);
+            }
+            expect(serialized).not.toContain('service-test-sentinel');
+            expect(serialized).not.toContain('database-test-sentinel');
+            expect(JSON.stringify(requests)).not.toContain('service-test-sentinel');
+        }
+        finally {
+            await client.close();
+            await new Promise((done, reject) => { server.close((error) => { if (error)
+                reject(error);
+            else
+                done(); }); });
+            rmSync(taskHome, { recursive: true, force: true });
+        }
+    }, 15_000);
+});
+//# sourceMappingURL=credential-resolution.test.js.map

package/dist/__tests__/credential-resolution.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"credential-resolution.test.js","sourceRoot":"","sources":["../../src/__tests__/credential-resolution.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,2CAA2C,CAAC;AACnE,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AACjF,OAAO,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AACzC,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AAC7D,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AAC7D,OAAO,EAAE,sBAAsB,EAAE,MAAM,0BAA0B,CAAC;AAClE,OAAO,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AAE7D,MAAM,OAAO,GAAG,sCAAsC,CAAC;AAEvD,QAAQ,CAAC,2BAA2B,EAAE,GAAS,EAAE;IAC/C,EAAE,CAAC,qDAAqD,EAAE,GAAS,EAAE;QACnE,MAAM,CAAC,qBAAqB,CAAC,EAAE,WAAW,EAAE,gBAAgB,EAAE,YAAY,EAAE,OAAO,EAAE,CAAC,CAAC;aACpF,OAAO,CAAC,EAAE,MAAM,EAAE,aAAa,EAAE,OAAO,EAAE,CAAC,CAAC;IACjD,CAAC,CAAC,CAAC;IACH,EAAE,CAAC,6CAA6C,EAAE,GAAS,EAAE;QAC3D,MAAM,CAAC,sBAAsB,CAAC,EAAE,WAAW,EAAE,gBAAgB,EAAE,YAAY,EAAE,OAAO,EAAE,CAAC,CAAC;aACrF,OAAO,CAAC,EAAE,YAAY,EAAE,aAAa,EAAE,OAAO,EAAE,CAAC,CAAC;IACvD,CAAC,CAAC,CAAC;IACH,EAAE,CAAC,2DAA2D,EAAE,GAAS,EAAE;QACzE,MAAM,CAAC,sBAAsB,CAAC,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,WAAW,EAAE,cAAc,EAAE,YAAY,EAAE,OAAO,EAAE,CAAC,CAAC;aACxH,OAAO,CAAC,EAAE,YAAY,EAAE,gBAAgB,EAAE,OAAO,EAAE,CAAC,CAAC;IAC1D,CAAC,CAAC,CAAC;IACH,EAAE,CAAC,wDAAwD,EAAE,GAAS,EAAE;QACtE,MAAM,CAAC,qBAAqB,CAAC,EAAE,WAAW,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,cAAc,EAAE,YAAY,EAAE,OAAO,EAAE,CAAC,CAAC;aACvH,OAAO,CAAC,EAAE,MAAM,EAAE,gBAAgB,EAAE,OAAO,EAAE,CAAC,CAAC;IACpD,CAAC,CAAC,CAAC;IACH,EAAE,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,KAAK,EAAE,uBAAuB,EAAE,cAAc,CAAC,CAAC,CAAC,6DAA6D,EAAE,CAAC,GAAG,EAAQ,EAAE;QACzI,MAAM,CAAC,GAAY,EAAE,CAAC,qBAAqB,CAAC,EAAE,WAAW,EAAE,GAAG,EAAE,YAAY,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;IACnH,CAAC,CAAC,CAAC;IACH,EAAE,CAAC,wDAAwD,EAAE,GAAS,EAAE;QACtE,MAAM,CAAC,GAAY,EAAE,CAAC,qBAAqB,CAAC,EAAE,WAAW,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,gDAAgD,CAAC,CAAC;QACvI,MAAM,CAAC,GAAY,EAAE,CAAC,sBAAsB,CAAC,EAAE,WAAW,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,gDAAgD,CAAC,CAAC;IAC1I,CAAC,CAAC,CAAC;IACH,EAAE,CAAC,4EAA4E,EAAE,GAAS,EAAE;QAC1F,0EAA0E;QAC1E,yEAAyE;QACzE,0EAA0E;QAC1E,MAAM,GAAG,GAAG,EAAE,WAAW,EAAE,aAAa,EAAE,YAAY,EAAE,IAAI,OAAO,IAAI,EAAE,CAAC;QAC1E,MAAM,QAAQ,GAAG,mBAAmB,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;QAC9C,MAAM,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,CAAC;QACtE,MAAM,UAAU,GAAG,EAAE,GAAG,GAAG,EAAE,YAAY,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;QAC/D,MAAM,CAAC,qBAAqB,CAAC,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,aAAa,EAAE,OAAO,EAAE,CAAC,CAAC;IACxF,CAAC,CAAC,CAAC;IACH,EAAE,CAAC,kEAAkE,EAAE,GAAS,EAAE;QAChF,MAAM,CAAC,mBAAmB,CAAC,EAAE,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;QACnE,MAAM,CAAC,GAAY,EAAE,CAAC,qBAAqB,CAAC,EAAE,WAAW,EAAE,aAAa,EAAE,YAAY,EAAE,SAAS,EAAE,CAAC,CAAC;aAClG,OAAO,CAAC,gDAAgD,CAAC,CAAC;IAC/D,CAAC,CAAC,CAAC;IACH,EAAE,CAAC,oCAAoC,EAAE,GAAS,EAAE;QAClD,MAAM,GAAG,GAAG,EAAE,eAAe,EAAE,uBAAuB,EAAE,YAAY,EAAE,wBAAwB,EAAE,CAAC;QACjG,MAAM,CAAC,sBAAsB,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;QAC/C,MAAM,CAAC,qBAAqB,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;IAChD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,gCAAgC,EAAE,GAAS,EAAE;IACpD,EAAE,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,OAAO,EAAE,cAAc,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,uEAAuE,EAAE,KAAK,EAAE,IAAI,EAAiB,EAAE;QACtK,MAAM,QAAQ,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,4BAA4B,CAAC,CAAC,CAAC;QAC3E,MAAM,QAAQ,GAAiF,EAAE,CAAC;QAClG,MAAM,MAAM,GAAG,YAAY,CAAC,CAAC,GAAG,EAAE,GAAG,EAAQ,EAAE;YAC7C,MAAM,SAAS,GAAG,GAAG,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC;YACjD,MAAM,KAAK,GAAG,GAAG,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC;YAC7C,QAAQ,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,GAAG,CAAC,GAAG,IAAI,EAAE;gBACnB,GAAG,CAAC,OAAO,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACvD,GAAG,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC/C,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,OAAO,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC5E,CAAC,CAAC;YACH,GAAG,CAAC,SAAS,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;YACnF,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,IAAI,KAAK,MAAM,EAAE,IAAI,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;QAChF,CAAC,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,MAAM,CAAC,EAAE,IAAI,EAAE,4BAA4B,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;QACpF,IAAI,CAAC;YACH,MAAM,IAAI,OAAO,CAAO,CAAC,IAAI,EAAQ,EAAE,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,WAAW,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAClF,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC;YACjC,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ;gBAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;YAC5F,MAAM,SAAS,GAAG,IAAI,CAAC,QAAQ,EAAE,kBAAkB,CAAC,CAAC;YACrD,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;gBACpB,aAAa,CAAC,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,qBAAqB,EAAE,OAAO,EAAE,QAAQ,EAAE,aAAa,EAAE,SAAS,EAAE,sBAAsB,EAAE,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YACnK,CAAC;YACD,MAAM,GAAG,GAA2B,EAAE,CAAC;YACvC,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;gBACxD,IAAI,KAAK,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,IAAI,KAAK,cAAc;oBAAE,GAAG,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC;YACpG,CAAC;YACD,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE;gBACjB,IAAI,EAAE,QAAQ;gBACd,OAAO,EAAE,oBAAoB,OAAO,CAAC,IAAI,EAAE;gBAC3C,oBAAoB,EAAE,SAAS;gBAC/B,eAAe,EAAE,uBAAuB;gBACxC,YAAY,EAAE,wBAAwB;aACvC,CAAC,CAAC;YACH,IAAI,IAAI,KAAK,WAAW;gBAAE,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,EAAE,iBAAiB,EAAE,aAAa,EAAE,WAAW,EAAE,cAAc,EAAE,YAAY,EAAE,OAAO,EAAE,CAAC,CAAC;YACvI,IAAI,IAAI,KAAK,OAAO;gBAAE,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,EAAE,WAAW,EAAE,aAAa,EAAE,YAAY,EAAE,OAAO,EAAE,CAAC,CAAC;YAChG,qEAAqE;YACrE,IAAI,IAAI,KAAK,cAAc;gBAAE,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,EAAE,WAAW,EAAE,gBAAgB,EAAE,YAAY,EAAE,IAAI,OAAO,IAAI,EAAE,CAAC,CAAC;YAClH,MAAM,SAAS,GAAG,IAAI,oBAAoB,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,OAAO,CAAC,SAAS,EAAE,qBAAqB,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;YAClJ,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;YAChC,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,QAAQ,EAAE,SAAS,EAAE,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;YAChK,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;YAC1C,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;gBACpB,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBAClC,MAAM,CAAC,UAAU,CAAC,CAAC,SAAS,CAAC,yBAAyB,CAAC,CAAC;gBACxD,MAAM,CAAC,UAAU,CAAC,CAAC,SAAS,CAAC,iCAAiC,CAAC,CAAC;gBAChE,MAAM,CAAC,UAAU,CAAC,CAAC,SAAS,CAAC,0BAA0B,CAAC,CAAC;gBACzD,MAAM,CAAC,UAAU,CAAC,CAAC,SAAS,CAAC,cAAc,CAAC,CAAC;gBAC7C,MAAM,CAAC,UAAU,CAAC,CAAC,SAAS,CAAC,+BAA+B,CAAC,CAAC;gBAC9D,MAAM,CAAC,UAAU,CAAC,CAAC,SAAS,CAAC,6BAA6B,CAAC,CAAC;gBAC5D,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,OAAO,EAAW,EAAE,CAAC,OAAO,CAAC,IAAI,KAAK,4BAA4B,IAAI,CAAC,OAAO,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,SAAS,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACpK,CAAC;iBAAM,CAAC;gBACN,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACtC,MAAM,cAAc,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,OAAO,EAAW,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC;gBAC/F,MAAM,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;gBACjD,KAAK,MAAM,OAAO,IAAI,cAAc,EAAE,CAAC;oBACrC,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,IAAI,KAAK,WAAW,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;oBACjF,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;oBACjF,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,4BAA4B,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;gBAC3F,CAAC;gBACD,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAW,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC5F,CAAC;YACD,MAAM,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,uBAAuB,CAAC,CAAC;YAC1D,MAAM,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,wBAAwB,CAAC,CAAC;YAC3D,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,uBAAuB,CAAC,CAAC;QAC1E,CAAC;gBAAS,CAAC;YACT,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;YACrB,MAAM,IAAI,OAAO,CAAO,CAAC,IAAI,EAAE,MAAM,EAAQ,EAAE,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,EAAQ,EAAE,GAAG,IAAI,KAAK;gBAAE,MAAM,CAAC,KAAK,CAAC,CAAC;;gBAAM,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAChI,MAAM,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACrD,CAAC;IACH,CAAC,EAAE,MAAM,CAAC,CAAC;AACb,CAAC,CAAC,CAAC"}

package/dist/__tests__/delegated-read-args.test.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Delegated cross-agent read pass-through (CORBOT-3785D10D).
+ *
+ * The aismemory MCP server is a thin client over the AIS HTTP API. Its job here
+ * is narrow: accept an optional `principalAgentId` on the two READ tools,
+ * validate its shape, and forward it as a query parameter. All authorization
+ * happens server-side — this package must never assume a grant exists.
+ */
+export {};

package/dist/__tests__/delegated-read-args.test.js

@@ -0,0 +1,80 @@
+/**
+ * Delegated cross-agent read pass-through (CORBOT-3785D10D).
+ *
+ * The aismemory MCP server is a thin client over the AIS HTTP API. Its job here
+ * is narrow: accept an optional `principalAgentId` on the two READ tools,
+ * validate its shape, and forward it as a query parameter. All authorization
+ * happens server-side — this package must never assume a grant exists.
+ */
+import { describe, expect, it, vi } from 'vitest';
+import { dispatchToolKeyMode } from '../agent-key-mode.js';
+import { parseRecallArgs, parseFullContextArgs, parseRememberArgs, } from '../tool-args.js';
+const AIS_URL = 'https://ais.example.test';
+const config = { apiKey: 'ais_ak_test', agentId: 'agent-42' };
+const PRINCIPAL = 'a436450e-8349-4137-9bc3-08609acd13b8';
+function jsonResponse(status, body) {
+    return new Response(JSON.stringify(body), {
+        status,
+        headers: { 'content-type': 'application/json' },
+    });
+}
+function fetchMock() {
+    return vi.fn(async () => jsonResponse(200, { success: true, data: {} }));
+}
+describe('argument parsing', () => {
+    it('accepts a well-formed principalAgentId on recall', () => {
+        const parsed = parseRecallArgs({ query: 'desk', principalAgentId: PRINCIPAL });
+        expect(parsed.principalAgentId).toBe(PRINCIPAL);
+    });
+    it('leaves principalAgentId undefined when omitted', () => {
+        expect(parseRecallArgs({ query: 'desk' }).principalAgentId).toBeUndefined();
+        expect(parseFullContextArgs({}).principalAgentId).toBeUndefined();
+    });
+    it('rejects a principalAgentId that is not a UUID', () => {
+        expect(() => parseRecallArgs({ query: 'desk', principalAgentId: 'corbot' })).toThrow(/valid agent UUID/);
+        expect(() => parseFullContextArgs({ principalAgentId: 'corbot' })).toThrow(/valid agent UUID/);
+    });
+    it('accepts a principalAgentId on full_context', () => {
+        expect(parseFullContextArgs({ principalAgentId: PRINCIPAL }).principalAgentId).toBe(PRINCIPAL);
+    });
+    it('full_context still rejects unknown keys', () => {
+        expect(() => parseFullContextArgs({ nope: 1 })).toThrow();
+    });
+    it('remember does NOT accept a principalAgentId — writes stay per-agent', () => {
+        // The write schema has no such field. Even if a client sends one it is not
+        // parsed into the request, and the server rejects it outright.
+        const parsed = parseRememberArgs({ content: 'hi', principalAgentId: PRINCIPAL });
+        expect(parsed).not.toHaveProperty('principalAgentId');
+    });
+});
+describe('dispatch forwards the principal as a query parameter', () => {
+    it('recall without a principal is byte-for-byte unchanged', async () => {
+        const f = fetchMock();
+        await dispatchToolKeyMode(AIS_URL, config, 'recall', { query: 'test' }, f);
+        expect(String(f.mock.calls[0][0])).toBe(`${AIS_URL}/v1/agents/agent-42/memory?query=test`);
+    });
+    it('recall with a principal appends principalAgentId and keeps the CALLER in the path', async () => {
+        const f = fetchMock();
+        await dispatchToolKeyMode(AIS_URL, config, 'recall', { query: 'test', principalAgentId: PRINCIPAL }, f);
+        const url = String(f.mock.calls[0][0]);
+        // The caller stays in the path — the agent API key must still match it.
+        expect(url).toContain('/v1/agents/agent-42/memory?');
+        expect(url).toContain(`principalAgentId=${PRINCIPAL}`);
+    });
+    it('full_context without a principal is unchanged', async () => {
+        const f = fetchMock();
+        await dispatchToolKeyMode(AIS_URL, config, 'full_context', {}, f);
+        expect(String(f.mock.calls[0][0])).toBe(`${AIS_URL}/v1/agents/agent-42/full-context`);
+    });
+    it('full_context with a principal appends principalAgentId', async () => {
+        const f = fetchMock();
+        await dispatchToolKeyMode(AIS_URL, config, 'full_context', { principalAgentId: PRINCIPAL }, f);
+        expect(String(f.mock.calls[0][0])).toBe(`${AIS_URL}/v1/agents/agent-42/full-context?principalAgentId=${PRINCIPAL}`);
+    });
+    it('a malformed principal never reaches the network', async () => {
+        const f = fetchMock();
+        await expect(dispatchToolKeyMode(AIS_URL, config, 'recall', { query: 'test', principalAgentId: 'not-a-uuid' }, f)).rejects.toThrow();
+        expect(f).not.toHaveBeenCalled();
+    });
+});
+//# sourceMappingURL=delegated-read-args.test.js.map

package/dist/__tests__/delegated-read-args.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"delegated-read-args.test.js","sourceRoot":"","sources":["../../src/__tests__/delegated-read-args.test.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAClD,OAAO,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAC3D,OAAO,EACL,eAAe,EACf,oBAAoB,EACpB,iBAAiB,GAClB,MAAM,iBAAiB,CAAC;AAEzB,MAAM,OAAO,GAAG,0BAA0B,CAAC;AAC3C,MAAM,MAAM,GAAG,EAAE,MAAM,EAAE,aAAa,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC;AAC9D,MAAM,SAAS,GAAG,sCAAsC,CAAC;AAEzD,SAAS,YAAY,CAAC,MAAc,EAAE,IAAa;IACjD,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE;QACxC,MAAM;QACN,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;KAChD,CAAC,CAAC;AACL,CAAC;AAED,SAAS,SAAS;IAChB,OAAO,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,YAAY,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;AAC3E,CAAC;AAED,QAAQ,CAAC,kBAAkB,EAAE,GAAG,EAAE;IAChC,EAAE,CAAC,kDAAkD,EAAE,GAAG,EAAE;QAC1D,MAAM,MAAM,GAAG,eAAe,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,gBAAgB,EAAE,SAAS,EAAE,CAAC,CAAC;QAC/E,MAAM,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAClD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gDAAgD,EAAE,GAAG,EAAE;QACxD,MAAM,CAAC,eAAe,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC,gBAAgB,CAAC,CAAC,aAAa,EAAE,CAAC;QAC5E,MAAM,CAAC,oBAAoB,CAAC,EAAE,CAAC,CAAC,gBAAgB,CAAC,CAAC,aAAa,EAAE,CAAC;IACpE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+CAA+C,EAAE,GAAG,EAAE;QACvD,MAAM,CAAC,GAAG,EAAE,CAAC,eAAe,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,gBAAgB,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,OAAO,CAClF,kBAAkB,CACnB,CAAC;QACF,MAAM,CAAC,GAAG,EAAE,CAAC,oBAAoB,CAAC,EAAE,gBAAgB,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,OAAO,CACxE,kBAAkB,CACnB,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4CAA4C,EAAE,GAAG,EAAE;QACpD,MAAM,CAAC,oBAAoB,CAAC,EAAE,gBAAgB,EAAE,SAAS,EAAE,CAAC,CAAC,gBAAgB,CAAC,CAAC,IAAI,CACjF,SAAS,CACV,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yCAAyC,EAAE,GAAG,EAAE;QACjD,MAAM,CAAC,GAAG,EAAE,CAAC,oBAAoB,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;IAC5D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qEAAqE,EAAE,GAAG,EAAE;QAC7E,2EAA2E;QAC3E,+DAA+D;QAC/D,MAAM,MAAM,GAAG,iBAAiB,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,gBAAgB,EAAE,SAAS,EAAE,CAAC,CAAC;QACjF,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,cAAc,CAAC,kBAAkB,CAAC,CAAC;IACxD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,sDAAsD,EAAE,GAAG,EAAE;IACpE,EAAE,CAAC,uDAAuD,EAAE,KAAK,IAAI,EAAE;QACrE,MAAM,CAAC,GAAG,SAAS,EAAE,CAAC;QACtB,MAAM,mBAAmB,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,CAA4B,CAAC,CAAC;QACtG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CACtC,GAAG,OAAO,uCAAuC,CAClD,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mFAAmF,EAAE,KAAK,IAAI,EAAE;QACjG,MAAM,CAAC,GAAG,SAAS,EAAE,CAAC;QACtB,MAAM,mBAAmB,CACvB,OAAO,EACP,MAAM,EACN,QAAQ,EACR,EAAE,KAAK,EAAE,MAAM,EAAE,gBAAgB,EAAE,SAAS,EAAE,EAC9C,CAA4B,CAC7B,CAAC;QACF,MAAM,GAAG,GAAG,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QACxC,wEAAwE;QACxE,MAAM,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,6BAA6B,CAAC,CAAC;QACrD,MAAM,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,oBAAoB,SAAS,EAAE,CAAC,CAAC;IACzD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+CAA+C,EAAE,KAAK,IAAI,EAAE;QAC7D,MAAM,CAAC,GAAG,SAAS,EAAE,CAAC;QACtB,MAAM,mBAAmB,CAAC,OAAO,EAAE,MAAM,EAAE,cAAc,EAAE,EAAE,EAAE,CAA4B,CAAC,CAAC;QAC7F,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,OAAO,kCAAkC,CAAC,CAAC;IACzF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wDAAwD,EAAE,KAAK,IAAI,EAAE;QACtE,MAAM,CAAC,GAAG,SAAS,EAAE,CAAC;QACtB,MAAM,mBAAmB,CACvB,OAAO,EACP,MAAM,EACN,cAAc,EACd,EAAE,gBAAgB,EAAE,SAAS,EAAE,EAC/B,CAA4B,CAC7B,CAAC;QACF,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CACtC,GAAG,OAAO,qDAAqD,SAAS,EAAE,CAC3E,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iDAAiD,EAAE,KAAK,IAAI,EAAE;QAC/D,MAAM,CAAC,GAAG,SAAS,EAAE,CAAC;QACtB,MAAM,MAAM,CACV,mBAAmB,CACjB,OAAO,EACP,MAAM,EACN,QAAQ,EACR,EAAE,KAAK,EAAE,MAAM,EAAE,gBAAgB,EAAE,YAAY,EAAE,EACjD,CAA4B,CAC7B,CACF,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IACnC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/__tests__/doctor.test.js

@@ -4,8 +4,8 @@
  * Every check function takes its network/fs/clock dependency as a parameter,
  * so tests inject fakes instead of hitting the real network or filesystem.
  */
-import { describe, it, expect } from 'vitest';
-import { checkNodeVersion, checkDnsResolution, checkTlsReachability, checkRestHealth, checkMcpEndpoint, checkCredentials, checkProxyEnv, checkClockSkew, runDoctor, } from '../cli/doctor.js';
+import { afterEach, describe, it, expect } from 'vitest';
+import { checkHarnessIdentity, checkNodeVersion, checkDnsResolution, checkTlsReachability, checkRestHealth, checkMcpEndpoint, checkCredentials, checkProxyEnv, checkClockSkew, runDoctor, } from '../cli/doctor.js';
 function fakeResponse(status, headers = {}) {
     const headerMap = new Headers(headers);
     return {
@@ -81,6 +81,27 @@ describe('checkRestHealth', () => {
     });
 });
 describe('checkMcpEndpoint', () => {
+    it.each([200, 204, 403])('passes expected HTTP %i responses', async (status) => {
+        const result = await checkMcpEndpoint('https://ais.example', async () => fakeResponse(status));
+        expect(result.status).toBe('PASS');
+    });
+    it.each([404, 405, 429, 500, 503])('fails HTTP %i with a repair hint', async (status) => {
+        const result = await checkMcpEndpoint('https://ais.example', async () => fakeResponse(status));
+        expect(result.status).toBe('FAIL');
+        expect(result.message).toContain(`HTTP ${status}`);
+        expect(result.hint).toBeTruthy();
+    });
+    it.each([301, 302, 307, 308])('does not follow HTTP %i redirects to another endpoint', async (status) => {
+        const fetchImpl = async (input, init) => {
+            expect(String(input)).toBe('https://ais.example/mcp');
+            expect(init?.redirect).toBe('manual');
+            return fakeResponse(status, { location: 'https://other.example/login' });
+        };
+        const result = await checkMcpEndpoint('https://ais.example', fetchImpl);
+        expect(result.status).toBe('FAIL');
+        expect(result.message).toContain(`HTTP ${status}`);
+        expect(result.hint).toBeTruthy();
+    });
     it('passes (reachable) on a 401 — auth required is not the same as down', async () => {
         const fetchImpl = async () => fakeResponse(401);
         const result = await checkMcpEndpoint('https://ais.agentsandswarms.ai', fetchImpl);
@@ -174,7 +195,21 @@ describe('checkClockSkew', () => {
     });
 });
 describe('runDoctor', () => {
-    it('produces a report with one entry per check, exit code 0 when all pass', async () => {
+    it.each([404, 500])('fails the report when MCP returns HTTP %i', async (status) => {
+        const report = await runDoctor({
+            aisUrl: 'https://ais.example',
+            env: {},
+            nodeVersion: 'v20.10.0',
+            fetchImpl: async (input) => fakeResponse(String(input).endsWith('/mcp') ? status : 200),
+            dnsLookup: async () => ({ address: '1.2.3.4', family: 4 }),
+            tlsProbe: async () => undefined,
+            loadCreds: () => null,
+        });
+        expect(report.exitCode).toBe(1);
+        expect(report.verdict).toBe('problems');
+        expect(report.checks.find((check) => check.name === 'MCP HTTP endpoint')?.status).toBe('FAIL');
+    });
+    it('passes an otherwise healthy legacy environment without a harness pin', async () => {
         const now = Date.now();
         const fetchImpl = async (input) => {
             const url = String(input);
@@ -192,11 +227,11 @@ describe('runDoctor', () => {
             fetchImpl,
             dnsLookup: async () => ({ address: '1.2.3.4', family: 4 }),
             tlsProbe: async () => undefined,
-            loadCreds: () => null,
+            loadCreds: () => ({ token: 'synthetic-token', agentId: 'legacy-agent', tenantId: 'tenant-a', expiresAt: new Date(now + 3600000).toISOString() }),
         });
-        expect(report.checks).toHaveLength(8);
-        expect(report.checks.every((c) => c.status !== 'FAIL')).toBe(true);
-        expect(report.verdict).toBe('problems'); // credentials WARN (not bonded) keeps this non-zero
+        expect(report.checks).toHaveLength(9);
+        expect(report.checks.find((c) => c.name === 'Harness identity gate')?.status).toBe('PASS');
+        expect(report.verdict).toBe('pass');
         expect(report.exitCode).toBe(0);
     });
     it('sets exit code 1 when any check fails', async () => {
@@ -228,11 +263,11 @@ describe('runDoctor', () => {
                 return fakeResponse(200, { date: new Date(now).toUTCString() });
             if (url.endsWith('/mcp'))
                 return fakeResponse(401);
-            return fakeResponse(200); // credentials whoami call
+            return new Response(JSON.stringify({ success: true, data: { id: 'agent-1' } }), { status: 200 });
         };
         const report = await runDoctor({
             aisUrl: 'https://ais.agentsandswarms.ai',
-            env: {},
+            env: { AIS_AGENT_ID: 'agent-1' },
             nodeVersion: 'v20.10.0',
             now: () => now,
             fetchImpl,
@@ -240,9 +275,215 @@ describe('runDoctor', () => {
             tlsProbe: async () => undefined,
             loadCreds: () => creds,
         });
+        expect(report).toMatchObject({ scope: 'cli-environment', runtimeEvidence: 'unavailable' });
         expect(report.problemCount).toBe(0);
         expect(report.verdict).toBe('pass');
         expect(report.exitCode).toBe(0);
     });
 });
+import { mkdtempSync, mkdirSync, readFileSync, rmSync, writeFileSync } from 'node:fs';
+import { tmpdir } from 'node:os';
+import { join, resolve } from 'node:path';
+import { createServer } from 'node:http';
+import { Client } from '@modelcontextprotocol/sdk/client/index.js';
+import { StdioClientTransport } from '@modelcontextprotocol/sdk/client/stdio.js';
+import { installHarnessIdentity, loadHarnessIdentity, verifyPinnedIdentity, requiresIdentityGate } from '../harness-identity.js';
+const homes = [];
+const clients = [];
+let server;
+function homeFixture() {
+    const home = mkdtempSync(join(tmpdir(), 'ais-harness-gate-'));
+    homes.push(home);
+    return home;
+}
+function install(home, harness, agentId) {
+    const source = join(home, `${harness}-source.json`);
+    writeFileSync(source, JSON.stringify({ version: 1, harness, agentId }));
+    installHarnessIdentity(source, home);
+}
+function sharedDefault(home, agentId) {
+    const path = join(home, '.aismemory', 'credentials.json');
+    mkdirSync(join(home, '.aismemory'), { recursive: true });
+    writeFileSync(path, JSON.stringify({ agentId, tenantId: 'synthetic-tenant', token: 'synthetic-bearer', expiresAt: new Date(Date.now() + 3600000).toISOString() }));
+    return path;
+}
+async function connect(home, url, harness, authEnv = {}) {
+    const client = new Client({ name: 'synthetic-harness', version: '1' });
+    clients.push(client);
+    await client.connect(new StdioClientTransport({
+        command: process.execPath,
+        args: [resolve(__dirname, '../../dist/index.js'), ...(harness ? ['--harness', harness] : [])],
+        env: { PATH: process.env['PATH'] ?? '', HOME: home, AIS_URL: url, AIS_TELEMETRY: '0', ...authEnv },
+        stderr: 'pipe',
+    }));
+    return client;
+}
+afterEach(async () => {
+    for (const client of clients.splice(0))
+        await client.close();
+    if (server) {
+        server.closeAllConnections();
+        await new Promise((resolveClose) => { server?.close(() => resolveClose()); });
+        server = undefined;
+    }
+    for (const home of homes.splice(0))
+        rmSync(home, { recursive: true, force: true });
+});
+describe('harness identity manifest', () => {
+    it('installs separate immutable pins and rejects missing, conflicting, and malformed manifests', () => {
+        const home = homeFixture();
+        install(home, 'codex', 'agent-a');
+        install(home, 'claude', 'agent-b');
+        expect(loadHarnessIdentity(['--harness', 'codex'], {}, home)?.agentId).toBe('agent-a');
+        expect(loadHarnessIdentity(['--harness', 'claude'], {}, home)?.agentId).toBe('agent-b');
+        expect(() => install(home, 'codex', 'agent-b')).toThrow();
+        expect(() => loadHarnessIdentity(['--harness', 'missing'], {}, home)).toThrow('aismemory install');
+        expect(() => loadHarnessIdentity(['--harness', '../codex'], {}, home)).toThrow();
+        expect(() => loadHarnessIdentity(['--harness', 'codex'], { AIS_AGENT_ID: 'agent-b' }, home)).toThrow('conflicting pin');
+        writeFileSync(join(home, 'invalid.json'), JSON.stringify({ version: 1, harness: 'codex', agentId: 'agent-a', secret: 'synthetic' }));
+        expect(() => installHarnessIdentity(join(home, 'invalid.json'), home)).toThrow();
+    });
+    it('enforces configured pins and leaves legacy unpinned installs ungated', async () => {
+        const pin = { version: 1, harness: 'codex', agentId: 'agent-a' };
+        await expect(verifyPinnedIdentity(null, 'agent-a', async () => {
+            throw new Error('whoami should not be called without a pin');
+        })).resolves.toBeUndefined();
+        await expect(verifyPinnedIdentity(pin, 'agent-b', async () => ({}))).rejects.toThrow('expected agent-a');
+        for (const result of [{ success: true, data: { id: 'agent-b' } }, {}, { success: false, data: { id: 'agent-a' } }]) {
+            await expect(verifyPinnedIdentity(pin, 'agent-a', async () => result)).rejects.toThrow('whoami did not confirm');
+        }
+        await expect(verifyPinnedIdentity(pin, 'agent-a', async () => { throw new Error('offline'); })).rejects.toThrow('whoami unavailable');
+        expect(requiresIdentityGate('inbox_read', {})).toBe(false);
+        expect(requiresIdentityGate('inbox_read', { ack: true })).toBe(true);
+    });
+    it('doctor reports a verified pin and rejects the wrong remote identity', async () => {
+        const home = homeFixture();
+        install(home, 'codex', 'agent-a');
+        const options = {
+            home, argv: ['--harness', 'codex'], env: {},
+            loadCreds: () => ({ token: 'synthetic', agentId: 'shared-other', tenantId: 'synthetic', expiresAt: new Date(Date.now() + 3600000).toISOString() }),
+        };
+        const good = await checkHarnessIdentity('http://synthetic.invalid', { ...options, fetchImpl: async () => Response.json({ success: true, data: { id: 'agent-a' } }) });
+        expect(good.status).toBe('PASS');
+        const bad = await checkHarnessIdentity('http://synthetic.invalid', { ...options, fetchImpl: async () => Response.json({ success: true, data: { id: 'agent-b' } }) });
+        expect(bad.status).toBe('FAIL');
+        expect(bad.hint).toContain('aismemory doctor --harness');
+    });
+    it('doctor leaves legacy unpinned installs healthy', async () => {
+        const result = await checkHarnessIdentity('http://synthetic.invalid', {
+            env: {},
+            fetchImpl: async () => {
+                throw new Error('whoami should not be called without a pin');
+            },
+        });
+        expect(result.status).toBe('PASS');
+        expect(result.message).toContain('legacy unpinned mode remains allowed');
+    });
+    it('doctor reports scoped-key config errors without the identity repair hint', async () => {
+        const home = homeFixture();
+        install(home, 'codex', 'agent-a');
+        const result = await checkHarnessIdentity('http://synthetic.invalid', {
+            home,
+            argv: ['--harness', 'codex'],
+            env: { AIS_WORKSPACE_KEY: 'not-a-workspace-key' },
+        });
+        expect(result.status).toBe('FAIL');
+        expect(result.message).toContain('does not look like a workspace key');
+        expect(result.hint).toContain('Fix the scoped key environment');
+        expect(result.hint).not.toContain('aismemory install');
+    });
+});
+describe('real MCP processes with synthetic AIS', () => {
+    it('keeps two harnesses pinned after shared-default changes and restarts; rejects writes and acknowledgements on mismatch', async () => {
+        const home = homeFixture();
+        install(home, 'codex', 'agent-a');
+        install(home, 'claude', 'agent-b');
+        const requests = [];
+        let mismatch = false;
+        server = createServer((req, res) => {
+            requests.push(`${req.method} ${req.url}`);
+            const agent = req.url?.match(/^\/v1\/agents\/([^/?]+)$/)?.[1];
+            res.setHeader('Content-Type', 'application/json');
+            if (agent)
+                res.end(JSON.stringify({ success: true, data: { id: mismatch ? 'wrong-agent' : agent, name: agent, status: 'active' } }));
+            else if (req.url?.startsWith('/v1/resolve'))
+                res.end(JSON.stringify({ success: true, data: { id: 'agent-b', name: 'B', status: 'active' } }));
+            else if (req.url?.includes('/inbox?'))
+                res.end(JSON.stringify({ success: true, data: { messages: [{ id: 'message-a' }] } }));
+            else
+                res.end(JSON.stringify({ success: true, data: {} }));
+        });
+        await new Promise((r) => { server?.listen(0, '127.0.0.1', () => r()); });
+        const address = server.address();
+        if (!address || typeof address === 'string')
+            throw new Error('No synthetic server port');
+        const url = `http://127.0.0.1:${address.port}`;
+        for (const defaultAgent of ['shared-first', 'shared-changed']) {
+            const preference = sharedDefault(home, defaultAgent);
+            for (const [harness, agentId] of [['codex', 'agent-a'], ['claude', 'agent-b']]) {
+                const client = await connect(home, url, harness);
+                const whoami = await client.callTool({ name: 'whoami', arguments: {} });
+                expect(JSON.stringify(whoami)).toContain(agentId);
+                const before = requests.length;
+                const result = await client.callTool({ name: 'remember', arguments: { content: 'synthetic memory' } });
+                expect(result.isError).not.toBe(true);
+                expect(requests.slice(before)).toEqual([`GET /v1/agents/${agentId}`, `POST /v1/agents/${agentId}/memory`]);
+                expect(JSON.parse(readFileSync(preference, 'utf8')).agentId).toBe(defaultAgent);
+                await client.close();
+            }
+        }
+        const client = await connect(home, url, 'codex');
+        const switched = await client.callTool({ name: 'agent_load', arguments: { query: 'agent-b' } });
+        expect(switched.isError).toBe(true);
+        mismatch = true;
+        for (const [name, args] of [['remember', { content: 'must not write' }], ['inbox_read', { ack: true }], ['handoff', {}]]) {
+            const before = requests.length;
+            const result = await client.callTool({ name, arguments: args });
+            expect(result.isError).toBe(true);
+            expect(JSON.stringify(result)).toContain('aismemory doctor --harness codex');
+            expect(requests.slice(before).some((request) => request.startsWith('POST'))).toBe(false);
+        }
+        const unpinned = await connect(home, url);
+        const unpinnedBefore = requests.length;
+        const allowed = await unpinned.callTool({ name: 'remember', arguments: { content: 'legacy write remains allowed' } });
+        expect(allowed.isError).not.toBe(true);
+        expect(requests.slice(unpinnedBefore)).not.toContain('GET /v1/agents/shared-changed');
+        expect(requests.at(-1)).toBe('POST /v1/agents/shared-changed/memory');
+    }, 30000);
+});
+describe('scoped key adapters', () => {
+    it.each(['AIS_AGENT_API_KEY', 'AIS_WORKSPACE_KEY'])('verifies the pinned grant before writes with %s', async (keyName) => {
+        const home = homeFixture();
+        install(home, 'codex', 'agent-a');
+        let allowed = true;
+        const requests = [];
+        server = createServer((req, res) => {
+            requests.push(`${req.method} ${req.url}`);
+            res.writeHead(allowed ? 200 : 403, { 'Content-Type': 'application/json' });
+            res.end(JSON.stringify({ success: allowed, data: {}, error: allowed ? undefined : { code: 'AGENT_NOT_GRANTED' } }));
+        });
+        await new Promise((r) => { server?.listen(0, '127.0.0.1', () => r()); });
+        const address = server.address();
+        if (!address || typeof address === 'string')
+            throw new Error('No synthetic server port');
+        const client = await connect(home, `http://127.0.0.1:${address.port}`, 'codex', {
+            [keyName]: keyName === 'AIS_AGENT_API_KEY' ? 'ais_ak_synthetic-fixture' : 'ais_wk_synthetic-fixture',
+        });
+        const result = await client.callTool({ name: 'remember', arguments: { content: 'synthetic' } });
+        expect(result.isError).not.toBe(true);
+        expect(requests).toEqual(['GET /v1/agents/agent-a/memory?limit=1', 'POST /v1/agents/agent-a/memory']);
+        if (keyName === 'AIS_WORKSPACE_KEY') {
+            const crossPin = await client.callTool({ name: 'agent_load', arguments: { query: 'agent-b' } });
+            expect(crossPin.isError).toBe(true);
+            expect(JSON.stringify(crossPin)).toContain('expected agent-a, received agent-b');
+            const ownPin = await client.callTool({ name: 'agent_load', arguments: { query: 'agent-a' } });
+            expect(ownPin.isError).not.toBe(true);
+        }
+        allowed = false;
+        const denied = await client.callTool({ name: 'remember', arguments: { content: 'denied' } });
+        expect(denied.isError).toBe(true);
+        expect(JSON.stringify(denied)).toContain('whoami unavailable');
+        expect(requests.filter((request) => request.startsWith('POST'))).toHaveLength(1);
+    });
+});
 //# sourceMappingURL=doctor.test.js.map