fix(#829): enforce repository-wide runtime launch choke point

packages/mosaic/src/mutator-gate/runtime_launch_guard_unittest.py

@@ -4,8 +4,15 @@
 from __future__ import annotations
 
 import importlib.util
+import io
+import json
+import runpy
+import sys
+import tempfile
 import unittest
+from contextlib import redirect_stderr, redirect_stdout
 from pathlib import Path
+from unittest.mock import patch
 
 
 MOSAIC_ROOT = Path(__file__).parents[2]
@@ -26,6 +33,15 @@ class RuntimeLaunchGuardTest(unittest.TestCase):
             "typescript.ts": "spawn('pi', ['--print', prompt]);\n",
             "python.py": "subprocess.run(['claude', '-p', prompt])\n",
             "dynamic.ts": "return [runtime, '-p', prompt];\n",
+            "plain-shell.sh": 'claude "$prompt"\n',
+            "node-exec.ts": 'exec("claude --print hello");\n',
+            "command-array.ts": "const launchCommand = ['pi', '--print', prompt];\n",
+            "python-system.py": 'os.system("claude -p prompt")\n',
+            "dynamic-shell.sh": 'exec "$runtime" "$prompt"\n',
+            "dynamic-spawn.ts": 'spawn(runtime, args);\n',
+            "dynamic-command.sh": 'LAUNCH_COMMAND=("$MOSAIC_AGENT_RUNTIME" --print)\n',
+            "absolute-shell.sh": 'exec /usr/local/bin/claude -p prompt\n',
+            "absolute-spawn.ts": "spawn('/opt/bin/pi', args);\n",
         }
         for filename, source in cases.items():
             with self.subTest(filename=filename):
@@ -51,6 +67,68 @@ class RuntimeLaunchGuardTest(unittest.TestCase):
             "\n".join(GUARD.format_violation(violation) for violation in violations),
         )
 
+    def test_repository_walk_skips_tests_build_outputs_and_reports_unscannable_source(self) -> None:
+        with tempfile.TemporaryDirectory() as directory:
+            root = Path(directory)
+            production = root / "packages/example/src/launch.sh"
+            production.parent.mkdir(parents=True)
+            production.write_text("exec claude -p prompt\n")
+            (production.parent / "launch.spec.ts").write_text("spawn('pi', [])\n")
+            dist = root / "packages/example/dist/launch.js"
+            dist.parent.mkdir(parents=True)
+            dist.write_text("exec('claude -p prompt')\n")
+            ignored_suffix = production.parent / "notes.txt"
+            ignored_suffix.write_text("claude -p prompt\n")
+            invalid = production.parent / "invalid.py"
+            invalid.write_bytes(b"\xff\xfe")
+
+            violations = GUARD.scan_repository(root)
+            formatted = [GUARD.format_violation(item) for item in violations]
+            self.assertEqual(len(violations), 2)
+            self.assertTrue(any("launch.sh:1: direct" in item for item in formatted))
+            self.assertTrue(any("invalid.py:0: unscannable" in item for item in formatted))
+            self.assertFalse(any("spec" in item or "dist" in item or "notes" in item for item in formatted))
+
+            inventory = GUARD.inventory_repository(root)
+            self.assertEqual({item.classification for item in inventory}, {"direct", "unscannable"})
+
+    def test_main_emits_machine_inventory_and_fails_on_a_direct_site(self) -> None:
+        with tempfile.TemporaryDirectory() as directory:
+            root = Path(directory)
+            source = root / "packages/example/launch.sh"
+            source.parent.mkdir(parents=True)
+            source.write_text("exec claude -p prompt\n")
+            stdout = io.StringIO()
+            stderr = io.StringIO()
+            with redirect_stdout(stdout), redirect_stderr(stderr):
+                result = GUARD.main(["--root", str(root), "--json"])
+            payload = json.loads(stdout.getvalue())
+            self.assertEqual(result, 1)
+            self.assertEqual(payload["gated"], 0)
+            self.assertEqual(payload["total"], 1)
+            self.assertIn("ungated consequential runtime", stderr.getvalue())
+
+    def test_main_text_mode_reports_a_green_gated_inventory(self) -> None:
+        with tempfile.TemporaryDirectory() as directory:
+            root = Path(directory)
+            source = root / "packages/example/launch.sh"
+            source.parent.mkdir(parents=True)
+            source.write_text("exec mosaic yolo claude prompt\n")
+            stdout = io.StringIO()
+            with redirect_stdout(stdout):
+                result = GUARD.main(["--root", str(root)])
+            self.assertEqual(result, 0)
+            self.assertIn("1 gated/1 total", stdout.getvalue())
+
+    def test_script_entrypoint_uses_current_directory_default(self) -> None:
+        with tempfile.TemporaryDirectory() as directory:
+            root = Path(directory)
+            (root / "packages").mkdir()
+            with patch.object(sys, "argv", [str(GUARD_PATH)]), patch("pathlib.Path.cwd", return_value=root):
+                with redirect_stdout(io.StringIO()), self.assertRaises(SystemExit) as raised:
+                    runpy.run_path(str(GUARD_PATH), run_name="__main__")
+            self.assertEqual(raised.exception.code, 0)
+
 
 if __name__ == "__main__":
     unittest.main()

packages/mosaic/src/mutator-gate/runtime_tools_unittest.py

@@ -6,7 +6,10 @@ from __future__ import annotations
 import importlib.util
 import io
 import json
+import os
+import runpy
 import socket
+import sys
 import unittest
 from contextlib import redirect_stderr
 from pathlib import Path
@@ -97,6 +100,17 @@ class LaunchRuntimeTest(unittest.TestCase):
         self.assertEqual(environment["MOSAIC_LEASE_RUNTIME"], "claude")
         self.assertEqual(environment["PRESERVED"], "yes")
 
+    def test_command_without_separator_is_forwarded_unchanged(self) -> None:
+        executed: list[tuple[str, list[str], dict[str, str]]] = []
+        result = LAUNCHER.main(
+            ["--runtime", "pi", "pi", "--print", "hello"],
+            environ={"MOSAIC_LEASE_BROKER_SOCKET": "/broker"},
+            request=lambda *_args: {"ok": True, "session_id": "f" * 64},
+            execute=lambda *args: executed.append(args),
+        )
+        self.assertEqual(result, 0)
+        self.assertEqual(executed[0][0:2], ("pi", ["pi", "--print", "hello"]))
+
     def test_missing_command_is_usage_error(self) -> None:
         with redirect_stderr(io.StringIO()):
             self.assertEqual(
@@ -185,6 +199,31 @@ class LaunchRuntimeTest(unittest.TestCase):
                         self.assertEqual(fake.shutdown_how, socket.SHUT_WR)
 
 
+class ExecutableEntrypointTest(unittest.TestCase):
+    def test_launcher_entrypoint_returns_usage_without_a_command(self) -> None:
+        with patch.object(
+            sys,
+            "argv",
+            [str(TOOLS_DIR / "launch-runtime.py"), "--runtime", "claude"],
+        ), redirect_stderr(io.StringIO()), self.assertRaises(SystemExit) as raised:
+            runpy.run_path(str(TOOLS_DIR / "launch-runtime.py"), run_name="__main__")
+        self.assertEqual(raised.exception.code, 64)
+
+    def test_gate_entrypoint_denies_when_identity_environment_is_absent(self) -> None:
+        class Stdin:
+            buffer = io.BytesIO(b'{"tool_name":"Bash"}')
+
+        with patch.object(
+            sys,
+            "argv",
+            [str(TOOLS_DIR / "mutator-gate.py"), "--runtime", "claude"],
+        ), patch.object(sys, "stdin", Stdin()), patch.dict(
+            os.environ, {}, clear=True
+        ), redirect_stderr(io.StringIO()), self.assertRaises(SystemExit) as raised:
+            runpy.run_path(str(TOOLS_DIR / "mutator-gate.py"), run_name="__main__")
+        self.assertEqual(raised.exception.code, 2)
+
+
 class MutatorGateTest(unittest.TestCase):
     @staticmethod
     def environment() -> dict[str, str]: