Supply chain at the client side layer

#!/usr/bin/env bash
# ABOUTME: Local supply-chain rebuild. Reinstall runtime with sig verification, restore MCP allowlist from clean source, regen lockfiles.
# ABOUTME: Caller must pass a verified-clean clone path; local files in /etc/agents/ are treated as possibly-tainted.

set -euo pipefail

if [[ $# -lt 3 ]]; then
  echo "Usage: agent-restore-supply-chain-local <AGENT_NAME> <INCIDENT_ID> <CLEAN_REPO_PATH>" >&2
  echo "  CLEAN_REPO_PATH must be a freshly cloned repo on a known-clean machine." >&2
  exit 64
fi

AGENT_NAME="$1"
INCIDENT_ID="$2"
CLEAN_REPO="$3"

if [[ ! -d "$CLEAN_REPO/controls/supply-chain/client-side" ]]; then
  echo "REFUSING: $CLEAN_REPO does not contain controls/supply-chain/client-side/" >&2
  exit 1
fi

SOURCE_DIR="$CLEAN_REPO/controls/supply-chain/client-side"

# 1. Restore MCP allowlist from clean source. Replace, do not merge — a
# merge could keep tainted entries from the local copy.
install -m 0644 "$SOURCE_DIR/mcp-allowlist.json" /etc/agents/mcp-allowlist.json

# 2. Restore mcp-launch and mcp-verify-tools from clean source.
install -m 0755 "$SOURCE_DIR/mcp-launch" /usr/local/bin/mcp-launch
install -m 0755 "$SOURCE_DIR/mcp-verify-tools.py" /usr/local/bin/mcp-verify-tools.py

# 3. Clear chattr +i on lockfiles so the operator can regenerate them.
for lockfile in \
    "/etc/agents/$AGENT_NAME/package-lock.json" \
    "/etc/agents/$AGENT_NAME/requirements.txt" \
    "/etc/agents/$AGENT_NAME/Pipfile.lock" \
    "/etc/agents/$AGENT_NAME/poetry.lock" \
    "/etc/agents/$AGENT_NAME/go.sum" \
    "/etc/agents/$AGENT_NAME/Cargo.lock"; do
  [[ -f "$lockfile" ]] && chattr -i "$lockfile" 2>/dev/null || true
done

# 4. Run vulnerability scans on the rebuilt environment.
if [[ -f "/etc/agents/$AGENT_NAME/requirements.txt" ]] && command -v pip-audit >/dev/null 2>&1; then
  pip-audit --requirement "/etc/agents/$AGENT_NAME/requirements.txt" --strict || \
    echo "WARN: pip-audit reported findings — review before restoring agent traffic" >&2
fi

if [[ -f "/etc/agents/$AGENT_NAME/package.json" ]] && command -v npm >/dev/null 2>&1; then
  ( cd "/etc/agents/$AGENT_NAME" && npm audit --audit-level=high ) || \
    echo "WARN: npm audit reported findings — review before restoring agent traffic" >&2
fi

logger -t agent-recovery -p user.notice \
  "$(jq -n \
      --arg event "supply_chain_restored_local" \
      --arg agent "$AGENT_NAME" \
      --arg incident "$INCIDENT_ID" \
      --arg actor "$(whoami)" \
      --arg ts "$(date -Iseconds)" \
      '{event:$event, agent:$agent, incident:$incident, actor:$actor, ts:$ts}')"

echo "Local supply-chain restore complete for $AGENT_NAME"
echo "Verify pip-audit / npm audit output before restoring agent traffic."