[Bug]: ACP Registry rejects contained executable names starting with two dots #35831

#!/bin/sh
set -u
if [ "$#" -ne 1 ]; then
  echo 'Usage: sh repro-contained-name.sh CHECKOUT' >&2
  echo 'RESULT: inconclusive'
  exit 2
fi
repo=$(cd "$1" && pwd -P) || exit 2
git --version
node --version
python3 --version
scratch=$(mktemp -d) || exit 2
cleanup() {
  git -C "$repo" worktree remove --force "$scratch/wt" >/dev/null 2>&1 || true
  rm -rf "$scratch"
}
trap cleanup EXIT HUP INT TERM
mkdir -p "$scratch/home" "$scratch/tmp" "$scratch/state"
export HOME="$scratch/home" TMPDIR="$scratch/tmp" T3CODE_HOME="$scratch/state"
export G12_RESULT="$scratch/result.json"
if ! git -C "$repo" worktree add --quiet --detach "$scratch/wt" HEAD; then
  echo 'RESULT: inconclusive'
  exit 2
fi
python3 - "$repo" "$scratch/wt" <<'PY'
import pathlib,sys
source,target=map(pathlib.Path,sys.argv[1:])
parents=[pathlib.Path('.'),pathlib.Path('scripts'),pathlib.Path('oxlint-plugin-t3code')]
for base in ('apps','packages','infra'):
 parents += [p.parent.relative_to(source) for p in (source/base).glob('*/package.json')]
for rel in parents:
 dep=source/rel/'node_modules'; dest=target/rel/'node_modules'
 if dep.exists() and dest.parent.exists() and not dest.exists(): dest.symlink_to(dep,target_is_directory=True)
PY
if [ ! -x "$scratch/wt/node_modules/.bin/vp" ]; then
  echo 'Dependencies must already be installed in CHECKOUT.' >&2
  echo 'RESULT: inconclusive'
  exit 2
fi
"$scratch/wt/node_modules/.bin/vp" --version
cat > "$scratch/wt/packages/provider-acp-registry/src/server/ContainedNameRepro.test.ts" <<'TS'
import * as NodeCrypto from "@effect/platform-node/NodeCrypto";
import * as NodeServices from "@effect/platform-node/NodeServices";
import { expect, it } from "@effect/vitest";
import * as Effect from "effect/Effect";
import * as FileSystem from "effect/FileSystem";
import * as Layer from "effect/Layer";
import * as HttpClient from "effect/http/HttpClient";
import * as HttpClientResponse from "effect/http/HttpClientResponse";
import * as HostProcess from "@t3tools/shared/HostProcess";
import * as TestProviderHost from "@t3tools/provider-testing/TestProviderHost";
import * as Support from "./AcpRegistrySupport.ts";
import { writeFileSync } from "node:fs";
const registryUrl="https://registry.test/registry.json";
const bytes=new TextEncoder().encode("fixture bytes; never executed\n");
it.effect("prepares a contained command whose filename starts with two dots",()=>Effect.gen(function*(){
 const fs=yield* FileSystem.FileSystem;
 const root=yield* fs.makeTempDirectoryScoped({prefix:"contained-name-"});
 const agents=["agent","..agent"].map((cmd,index)=>({id:`fixture-${index}`,name:`Fixture ${index}`,version:"1.0.0",description:"Local fixture",license_url:"https://example.test/LICENSE",distribution:{binary:{"linux-x86_64":{archive:`https://registry.test/fixture-${index}.bin`,cmd}}}}));
 const resolver=yield* Support.makeAcpRegistryCatalog({cacheDir:root,toolsDir:`${root}/tools`,registryUrl}).pipe(Effect.provideService(HttpClient.HttpClient,HttpClient.make(request=>Effect.succeed(HttpClientResponse.fromWeb(request,new Response(request.url===registryUrl?JSON.stringify({version:"1.0.0",agents}):bytes))))));
 expect((yield* resolver.prepare({agentId:"fixture-0"})).prepared).toBe(true);
 expect(yield* fs.readFileString(`${root}/tools/fixture-0/1.0.0/linux-x86_64/agent`)).toBe(new TextDecoder().decode(bytes));
 const outcome=yield* resolver.prepare({agentId:"fixture-1"}).pipe(Effect.match({onSuccess:value=>({ok:true,value}),onFailure:error=>({ok:false,error})}));
 if(outcome.ok){
  expect(yield* fs.readFileString(`${root}/tools/fixture-1/1.0.0/linux-x86_64/..agent`)).toBe(new TextDecoder().decode(bytes));
  writeFileSync(process.env.G12_RESULT!,JSON.stringify({control:"prepared",candidate:"prepared",result:"expected"}));
 }else{
  expect(outcome.error.reason).toBe("archive_invalid");
  expect(outcome.error.detail).toBe("ACP Registry archive command resolves outside its installation directory.");
  writeFileSync(process.env.G12_RESULT!,JSON.stringify({control:"prepared",candidate:outcome.error.reason,detail:outcome.error.detail,result:"defect"}));
 }
}).pipe(Effect.scoped,Effect.provide(Layer.mergeAll(NodeServices.layer,NodeCrypto.layer,TestProviderHost.layer().pipe(Layer.provide(Layer.mergeAll(NodeServices.layer,NodeCrypto.layer))))),Effect.provideService(HostProcess.Platform,"linux"),Effect.provideService(HostProcess.Architecture,"x64"),Effect.provideService(HostProcess.Environment,{PATH:"/usr/bin:/bin"})));
TS
if ! (cd "$scratch/wt/packages/provider-acp-registry" && "$scratch/wt/node_modules/.bin/vp" test run --config ../../vite.config.ts src/server/ContainedNameRepro.test.ts --maxWorkers 1) >"$scratch/runner.log" 2>&1; then
  cat "$scratch/runner.log"
  echo 'RESULT: inconclusive'
  exit 2
fi
python3 - "$G12_RESULT" <<'PY'
import json,sys
try: value=json.load(open(sys.argv[1]))
except Exception:
 print('RESULT: inconclusive');sys.exit(2)
print('control filename agent:',value['control'])
print('candidate filename ..agent:',value['candidate'])
if 'detail' in value: print(value['detail'])
if value['result']=='expected':print('RESULT: expected behavior');sys.exit(0)
print('RESULT: defect reproduced');sys.exit(1)
PY
status=$?
exit "$status"