수정: Windows Execution Memory 경로 권한 정규화

Windows short path와 long path를 canonical filesystem path로 수렴시켜 승인 root를 정확히 비교한다.
Evidence Pack 봉인을 복구하면서 존재하지 않는 경로와 root 밖 경로는 계속 거부한다.

검증: contracts 36 suites; test:mcp-product 20/20; npm test

Author: eddmpython

CHANGELOG.md

@@ -77,6 +77,9 @@ happen only on an explicit maintainer decision; the Unreleased section accumulat
   browser poll during Linux cleanup.
 - Native profile C sources and `Setup.local` inputs are pinned to LF checkout bytes. Their locked SHA-256 values
   now validate identically on Windows and Linux before the reproducible CPython WASI build starts.
+- Execution Memory import authority now compares canonical existing filesystem paths. Windows short and long
+  aliases for the same approved root no longer reject Evidence Pack sealing, while missing paths and escapes
+  remain outside the authority boundary.
 - The GitHub Pages demo now establishes cross-origin isolation through its versioned service-worker bootstrap
   before starting the owned kernel, while the no-header preflight continues to fail closed outside that entry.
 
@@ -121,6 +124,8 @@ one-shot cursor와 pinned root에서 effect 없이 분기를 탐색하고 determ
 MCP fatal 종료는 보류 중인 page long poll을 명시적으로 닫고, 네이티브 프로필의 C와 Setup 입력은
 Windows와 Linux에서 같은 LF 바이트로 검증한다. GitHub Pages 데모는 versioned service worker로
 cross-origin isolation을 확보한 뒤 소유 커널을 시작한다.
+Execution Memory는 Windows의 short path와 long path를 실제 파일시스템 경로로 정규화해 같은 승인
+root로 판정하고, 존재하지 않는 경로와 root 밖 경로는 계속 거부한다.
 
 ## 0.0.21 - 2026-08-13
 

scripts/executionMemory/executionMemoryTools.js

@@ -1,4 +1,5 @@
 // executionMemoryTools.js - Control과 MCP가 공유하는 Execution Memory operation과 handler.
+import { realpathSync } from "node:fs";
 import { isAbsolute, relative, resolve } from "node:path";
 import { createExecutionMemoryRegistry } from "./executionMemoryRegistry.js";
 import { executionMemoryError } from "./executionMemoryCanonical.js";
@@ -72,9 +73,16 @@ function allowedPath(pathInput, roots, label) {
   if (typeof pathInput !== "string" || !isAbsolute(pathInput)) {
     throw executionMemoryError("EXECUTION_MEMORY_PATH", `${label} must be an absolute path`);
   }
-  const target = resolve(pathInput);
+  let target;
+  try { target = realpathSync.native(resolve(pathInput)); }
+  catch (error) {
+    throw executionMemoryError("EXECUTION_MEMORY_PATH", `${label} must reference an existing path`);
+  }
   if (!roots.some((root) => {
-    const rel = relative(root, target);
+    let canonicalRoot;
+    try { canonicalRoot = realpathSync.native(resolve(root)); }
+    catch (error) { return false; }
+    const rel = relative(canonicalRoot, target);
     return rel === "" || (!rel.startsWith("..") && !isAbsolute(rel));
   })) throw executionMemoryError("EXECUTION_MEMORY_PATH", `${label} is outside configured roots`);
   return target;

tests/browser/installedMcpProduct.mjs

@@ -1,7 +1,7 @@
 // installedMcpProduct.mjs - packed pyproc-mcp command, Python machine, browser and artifacts in one gate.
 import { createHash, generateKeyPairSync } from "node:crypto";
 import { spawn } from "node:child_process";
-import { existsSync } from "node:fs";
+import { existsSync, realpathSync } from "node:fs";
 import { createServer } from "node:http";
 import { mkdir, rm, writeFile } from "node:fs/promises";
 import { createInterface } from "node:readline";
@@ -62,7 +62,10 @@ const check = (name, pass, info = "") => {
 
 const samePath = (left, right) => {
   if (typeof left !== "string" || typeof right !== "string") return false;
-  const values = [left, right].map((value) => resolve(value));
+  const values = [left, right].map((value) => {
+    const absolute = resolve(value);
+    return existsSync(absolute) ? realpathSync.native(absolute) : absolute;
+  });
   return process.platform === "win32"
     ? values[0].toLowerCase() === values[1].toLowerCase()
     : values[0] === values[1];

tests/contracts/executionMemory.mjs

@@ -1,4 +1,5 @@
 import { createHash, sign } from "node:crypto";
+import { realpathSync } from "node:fs";
 import { mkdtemp, readFile, rm, writeFile } from "node:fs/promises";
 import { tmpdir } from "node:os";
 import { join } from "node:path";
@@ -66,6 +67,10 @@ export async function assertExecutionMemoryContract() {
       permissionManifest: { pythonNetwork: "denied", browser: null }, importRoots: [targetRoot] });
     assert(handlerProduct.registry instanceof ExecutionMemoryRegistry,
       "비어 있지 않은 importRoots가 제품 handler 초기화를 깨뜨렸다");
+    assert(handlerProduct.allowedImportPath(targetRoot, "fixtureRoot") === realpathSync.native(targetRoot),
+      "existing import root의 canonical path가 보존되지 않았다");
+    assert((await errorOf(() => handlerProduct.allowedImportPath(join(targetRoot, "missing"), "missing")))?.code
+      === "EXECUTION_MEMORY_PATH", "존재하지 않는 import path가 권한 경계를 통과했다");
     const source = await ExecutionMemoryRegistry.open({ root: sourceRoot, secretValues: ["fixture-secret"] });
     assert((await errorOf(async () => source.artifacts.captureMachineImage({
       bytes: await machineImage("fixture-secret"), machineId: "machine:secret", lifecycle: "portable",