PR 010 repair: handle Node permission propagation boundary

[LogicDuke]

N24-PERM-1 only.

This stacked validation PR repairs a CURRENT P3 test-compatibility defect in
tests/adapters/process-transport.test.ts.

The repository supports Node >=24 <25, but Node spawn/spawnSync permission-model
flag propagation through NODE_OPTIONS first appears in Node 24.4.0.

The repair preserves the writesNodeOptions anti-vacuity check while expecting
the runtime's actual versioned behavior:

• Node 24.0–24.3: false
• Node 24.4+: true

All AgentBridge security/environment assertions remain unconditional.

Production code is unchanged.

CR-3 is intentionally NOT repaired here and remains independently tracked.

Independent validation:
PASS

Validated diff SHA-256:
d01267bafdd98623946cf232fe3707775355bc43566d9691be8244e9367c8f4c

🤖 Generated with Claude Code

Summary by CodeRabbit

• Bug Fixes
  • Improved permission handling tests across supported Node.js versions.
  • Added compatibility for Node.js 24.4 and later, where permission settings may behave differently when passed through environment options.

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro Plus

Run ID: e7c49855-2f3f-4b92-97c2-b2834a56fa2d

📥 Commits

Reviewing files that changed from the base of the PR and between e42ea4e and 6054fdd.

📒 Files selected for processing (1)

• tests/adapters/process-transport.test.ts

Included review availability: Your plan includes up to 1 review per rolling hour; 0 remain after this review.

---

📝 Walkthrough

Walkthrough

The permission transport tests now detect Node runtime support for permission-flag propagation through NODE_OPTIONS. Two assertions use this runtime-dependent expectation.

Changes

Permission propagation test updates

Layer / File(s)	Summary
Runtime-aware permission expectations tests/adapters/process-transport.test.ts	The tests detect permission-flag propagation on Node 24.4 and later. Permission probe and environment leakage assertions use the detected expectation.

Estimated code review effort: 1 (Trivial) | ~5 minutes

Merge Risk: ⚪ Minimal · up to 6054f

This localized test-only change adjusts permission-propagation expectations for supported Node 24 versions; no actionable merge-blocking risk remains beyond normal checks and review.

Poem

I’m a rabbit with tests in my den,
Checking Node versions again.
Flags hop through the air,
Only when supported there.
Green checks dance with a grin!

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title clearly identifies the repair for the Node permission propagation boundary, which matches the main change.

✨ Finishing Touches

📝 Generate docstrings

• Create stacked PR
• Commit on current branch

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch repair/pr010-n24-perm-propagation

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[LogicDuke]

@coderabbitai review

[coderabbitai]

⚠️ Action not completed

Review rate limited.

Note: CodeRabbit is an incremental review system and does not re-review already reviewed commits. This command is applicable only when automatic reviews are paused.

[LogicDuke]

@codex review

[chatgpt-codex-connector]

Codex Review: Didn't find any major issues. Chef's kiss.

Reviewed commit: 6054fddceb

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

[LogicDuke]

@coderabbitai review

[coderabbitai]

⚠️ Action not completed

Review rate limited.

Note: CodeRabbit is an incremental review system and does not re-review already reviewed commits. This command is applicable only when automatic reviews are paused.

[LogicDuke]

@coderabbitai review

[coderabbitai]

✅ Action performed

Review finished.

Note: CodeRabbit is an incremental review system and does not re-review already reviewed commits. This command is applicable only when automatic reviews are paused.