fix(ci): trust npm 12 Brev template

.github/actions/ci-reviewed-npm-audit/action.yaml

@@ -39,29 +39,26 @@ runs:
         previous_bucket="$(( current_bucket - 1 ))"
         node --experimental-strip-types --input-type=module - \
           "$GITHUB_ACTION_PATH/../../../ci/reviewed-npm-audit.json" \
-          "$GITHUB_ACTION_PATH/../../../scripts/lib/repository-input-path.mts" <<'NODE'
+          "$GITHUB_ACTION_PATH/../../../scripts/lib/repository-input-path.mts" \
+          "$GITHUB_ACTION_PATH/../../../scripts/lib/reviewed-npm-audit.mts" <<'NODE'
         import { createHash } from "node:crypto";
         import { appendFileSync, readFileSync } from "node:fs";
         import { join } from "node:path";
         import { pathToFileURL } from "node:url";
         const targetRoot = process.env.NEMOCLAW_REVIEWED_NPM_AUDIT_TARGET_ROOT;
-        const [configFile, resolverFile] = process.argv.slice(2);
+        const [configFile, resolverFile, reviewedNpmAuditFile] = process.argv.slice(2);
         if (!targetRoot) {
           throw new Error("reviewed npm audit target root is required");
         }
         const { resolvePathWithinRoot } = await import(pathToFileURL(resolverFile).href);
+        const { parseReviewedNpmIdentity } = await import(pathToFileURL(reviewedNpmAuditFile).href);
         const configSource = readFileSync(configFile, "utf8");
         const config = JSON.parse(configSource);
-        if (!/^(?:0|[1-9][0-9]*)\.(?:0|[1-9][0-9]*)\.(?:0|[1-9][0-9]*)$/.test(config.npmVersion) || /[\r\n]/.test(config.npmVersion)) {
-          throw new Error("reviewed npm audit configuration has an invalid npmVersion");
-        }
-        if (!/^sha512-[A-Za-z0-9+/]+={0,2}$/.test(config.npmIntegrity) || /[\r\n]/.test(config.npmIntegrity)) {
-          throw new Error("reviewed npm audit configuration has an invalid npmIntegrity");
-        }
+        const identity = parseReviewedNpmIdentity(config);
         const directories = ["", ...config.lockedGraphs.map((graph) => graph.directory)].sort();
         const hash = createHash("sha256");
         hash.update(configSource);
-        hash.update(JSON.stringify({ argv: ["audit", "--registry=https://registry.yarnpkg.com", "--omit=dev", "--json"], npmVersion: config.npmVersion, registry: "https://registry.yarnpkg.com/", schemaVersion: 1 }));
+        hash.update(JSON.stringify({ argv: ["audit", "--registry=https://registry.yarnpkg.com", "--omit=dev", "--json"], ...identity, registry: "https://registry.yarnpkg.com/", schemaVersion: 2 }));
         for (const directory of directories) {
           for (const file of ["package.json", "package-lock.json"]) {
             const relative = join(directory, file);
@@ -71,7 +68,7 @@ runs:
         }
         appendFileSync(
           process.env.GITHUB_OUTPUT,
-          `input-digest=${hash.digest("hex")}\nnpm-version=${config.npmVersion}\nnpm-integrity=${config.npmIntegrity}\n`,
+          `input-digest=${hash.digest("hex")}\n`,
         );
         NODE
         printf 'current=%s\nprevious=%s\n' "$current_bucket" "$previous_bucket" >> "$GITHUB_OUTPUT"
@@ -82,21 +79,21 @@ runs:
       uses: actions/cache/restore@0400d5f644dc74513175e3cd8d07132dd4860809 # v4.2.4
       with:
         path: ${{ inputs.cache-directory }}
-        key: reviewed-npm-audit-v1-${{ runner.os }}-${{ steps.cache-buckets.outputs.input-digest }}-${{ steps.cache-buckets.outputs.current }}
+        key: reviewed-npm-audit-v2-${{ runner.os }}-${{ steps.cache-buckets.outputs.input-digest }}-${{ steps.cache-buckets.outputs.current }}
 
     - name: Restore previous reviewed npm audit cache bucket
       if: steps.cache-current.outputs.cache-hit != 'true'
       uses: actions/cache/restore@0400d5f644dc74513175e3cd8d07132dd4860809 # v4.2.4
       with:
         path: ${{ inputs.cache-directory }}
-        key: reviewed-npm-audit-v1-${{ runner.os }}-${{ steps.cache-buckets.outputs.input-digest }}-${{ steps.cache-buckets.outputs.previous }}
+        key: reviewed-npm-audit-v2-${{ runner.os }}-${{ steps.cache-buckets.outputs.input-digest }}-${{ steps.cache-buckets.outputs.previous }}
 
     - name: Download and verify production npm
       shell: bash
-      env:
-        NEMOCLAW_REVIEWED_NPM_VERSION: ${{ steps.cache-buckets.outputs.npm-version }}
-        NEMOCLAW_REVIEWED_NPM_INTEGRITY: ${{ steps.cache-buckets.outputs.npm-integrity }}
-      run: env -u NODE_AUTH_TOKEN -u NPM_TOKEN -u NPM_CONFIG__AUTH_TOKEN "$GITHUB_ACTION_PATH/verify-and-install-npm.sh"
+      run: >-
+        env -u NODE_AUTH_TOKEN -u NPM_TOKEN -u NPM_CONFIG__AUTH_TOKEN
+        "$GITHUB_ACTION_PATH/../setup-reviewed-npm/verify-and-install-npm.sh"
+        "$GITHUB_ACTION_PATH/../../../ci/reviewed-npm-audit.json"
 
     - name: Materialize and audit reviewed npm graphs
       shell: bash
@@ -113,7 +110,7 @@ runs:
       uses: actions/cache/save@0400d5f644dc74513175e3cd8d07132dd4860809 # v4.2.4
       with:
         path: ${{ inputs.cache-directory }}
-        key: reviewed-npm-audit-v1-${{ runner.os }}-${{ steps.cache-buckets.outputs.input-digest }}-${{ steps.cache-buckets.outputs.current }}
+        key: reviewed-npm-audit-v2-${{ runner.os }}-${{ steps.cache-buckets.outputs.input-digest }}-${{ steps.cache-buckets.outputs.current }}
 
     - name: Upload reviewed npm audit reports
       if: always()

.github/actions/setup-reviewed-npm/verify-and-install-npm.sh

@@ -0,0 +1,81 @@
+#!/usr/bin/env bash
+# SPDX-FileCopyrightText: Copyright (c) 2026 NVIDIA CORPORATION & AFFILIATES. All rights reserved.
+# SPDX-License-Identifier: Apache-2.0
+
+set -euo pipefail
+
+if [ "$#" -ne 1 ]; then
+  echo "ERROR: reviewed npm identity path is required." >&2
+  exit 1
+fi
+
+config_file="$1"
+script_dir="$(cd -- "$(dirname -- "${BASH_SOURCE[0]}")" && pwd -P)"
+download_dir="$(mktemp -d "$RUNNER_TEMP/reviewed-npm.XXXXXX")"
+trap 'rm -rf "$download_dir"' EXIT
+identity_file="$download_dir/identity"
+
+node --experimental-strip-types --input-type=module - \
+  "$config_file" \
+  "$script_dir/../../../scripts/lib/reviewed-npm-audit.mts" >"$identity_file" <<'NODE'
+import { readFileSync } from "node:fs";
+import { pathToFileURL } from "node:url";
+
+const [configFile, reviewedNpmAuditFile] = process.argv.slice(2);
+const { parseReviewedNpmIdentityConfig } = await import(pathToFileURL(reviewedNpmAuditFile).href);
+const identity = parseReviewedNpmIdentityConfig(readFileSync(configFile, "utf8"));
+process.stdout.write(`${identity.npmVersion}\n${identity.npmIntegrity}\n${identity.npmArchiveSha256}\n`);
+NODE
+
+IFS= read -r version <"$identity_file"
+IFS= read -r expected_integrity < <(sed -n '2p' "$identity_file")
+IFS= read -r expected_sha256 < <(sed -n '3p' "$identity_file")
+[ -n "$version" ]
+[ -n "$expected_integrity" ]
+[ -n "$expected_sha256" ]
+
+npm pack "npm@$version" \
+  --pack-destination "$download_dir" \
+  --userconfig /dev/null \
+  --registry https://registry.npmjs.org/ \
+  --ignore-scripts --no-audit --no-fund >/dev/null
+
+archive="$download_dir/npm-$version.tgz"
+actual_hashes="$download_dir/actual-hashes"
+node -e '
+  const fs = require("node:fs");
+  const crypto = require("node:crypto");
+  const archive = fs.readFileSync(process.argv[1]);
+  process.stdout.write(
+    crypto.createHash("sha512").update(archive).digest("base64") + "\n" +
+    crypto.createHash("sha256").update(archive).digest("hex") + "\n",
+  );
+' "$archive" >"$actual_hashes"
+IFS= read -r actual_sha512 <"$actual_hashes"
+IFS= read -r actual_sha256 < <(sed -n '2p' "$actual_hashes")
+actual_integrity="sha512-$actual_sha512"
+if [ "$actual_integrity" != "$expected_integrity" ] || [ "$actual_sha256" != "$expected_sha256" ]; then
+  echo "ERROR: npm@$version archive integrity mismatch." >&2
+  exit 1
+fi
+
+archive_version="$(
+  tar -xOf "$archive" package/package.json | node -e '
+    let source = "";
+    process.stdin.setEncoding("utf8");
+    process.stdin.on("data", (chunk) => { source += chunk; });
+    process.stdin.on("end", () => {
+      const version = JSON.parse(source).version;
+      if (typeof version !== "string") process.exit(1);
+      process.stdout.write(version);
+    });
+  '
+)"
+if [ "$archive_version" != "$version" ]; then
+  echo "ERROR: npm archive version $archive_version does not match reviewed npm@$version." >&2
+  exit 1
+fi
+
+npm install --global "$archive" \
+  --userconfig /dev/null \
+  --ignore-scripts --no-audit --no-fund --offline

.github/workflows/base-image.yaml

@@ -26,6 +26,7 @@ on:
       - "test/e2e/live/managed-image-activation-e2e.test.ts"
       - "test/e2e/live/managed-image-activation-e2e-helpers.ts"
       - ".github/actions/ci-reviewed-npm-audit/**"
+      - ".github/actions/setup-reviewed-npm/**"
       - ".github/actions/publish-managed-image-digest/**"
       - ".github/actions/build-base-image-platform/**"
       - ".github/actions/publish-base-image-manifest/**"

.github/workflows/managed-images.yaml

@@ -32,6 +32,7 @@ on:
   pull_request:
     paths:
       - ".github/actions/ci-reviewed-npm-audit/**"
+      - ".github/actions/setup-reviewed-npm/**"
       - ".github/workflows/base-image.yaml"
       - ".github/actions/publish-managed-image-digest/**"
       - ".github/workflows/managed-images.yaml"
@@ -96,6 +97,7 @@ jobs:
           persist-credentials: false
           sparse-checkout: |
             .github/actions/ci-reviewed-npm-audit
+            .github/actions/setup-reviewed-npm
             ci/npm-audit-exceptions.json
             ci/reviewed-npm-audit.json
             scripts/audit-reviewed-npm-graph.mts

.github/workflows/pr.yaml

@@ -543,6 +543,7 @@ jobs:
           persist-credentials: false
           sparse-checkout: |
             .github/actions/ci-reviewed-npm-audit
+            .github/actions/setup-reviewed-npm
             ci/npm-audit-exceptions.json
             ci/reviewed-npm-audit.json
             scripts/audit-reviewed-npm-graph.mts

ci/reviewed-npm-audit.json

@@ -3,6 +3,7 @@
   "nodeVersion": "22.23.2",
   "npmVersion": "10.9.4",
   "npmIntegrity": "sha512-OnUG836FwboQIbqtefDNlyR0gTHzIfwRfE3DuiNewBvnMnWEpB0VEXwBlFVgqpNzIgYo/MHh3d2Hel/pszapAA==",
+  "npmArchiveSha256": "4bfba8a0c823024d1926ec9d97a37a00eb60fd2adf44b3d34a686fc32e8f51e4",
   "registryOrigin": "https://registry.npmjs.org/",
   "sourceRegistryPackage": {
     "artifactName": "nvidia-openshell-sdk-0.0.106.tgz",

ci/source-shape-test-budget.json

@@ -211,6 +211,16 @@
       "test": "passes the cache identity target root without interpolating it into shell source",
       "category": "security"
     },
+    {
+      "file": "test/automation/releases/reviewed-npm-audit-workflow.test.ts",
+      "test": "uses the single JSON-bound reviewed npm bootstrap owner",
+      "category": "security"
+    },
+    {
+      "file": "test/automation/releases/reviewed-npm-audit-handoff.test.ts",
+      "test": "routes bootstrap-only changes through image qualification and publication",
+      "category": "security"
+    },
     {
       "file": "test/automation/releases/reviewed-npm-audit-workflow.test.ts",
       "test": "rejects the removed plural source-registry package shape",
@@ -256,6 +266,11 @@
       "test": "accepts the reviewed %s OpenShell 0.0.106 installer template",
       "category": "security"
     },
+    {
+      "file": "test/install/installer-brev-npm12-template-trust.test.ts",
+      "test": "binds the exact reviewed npm 12 Brev successor and rejects bootstrap drift",
+      "category": "security"
+    },
     {
       "file": "test/install/installer-supervisor-manifest-trust.test.ts",
       "test": "accepts the prospective shared gateway state resolver template (#10544)",

scripts/audit-reviewed-npm-graph.mts

@@ -21,6 +21,7 @@ import {
   type AuditPolicyResult,
   NPM_AUDIT_REGISTRY,
   assertExceptionGraphs,
+  parseReviewedNpmIdentity,
   readAuditExceptionRegistry,
   runReviewedNpmAudit,
   type Severity,
@@ -57,6 +58,7 @@ type AuditConfig = Readonly<{
   exceptionFile: string;
   lockedGraphs: readonly LockedGraph[];
   nodeVersion: string;
+  npmArchiveSha256: string;
   npmIntegrity: string;
   npmVersion: string;
   registryOrigin: string;
@@ -166,6 +168,7 @@ function run(command: string, args: readonly string[], cwd: string) {
 
 export function parseAuditConfig(contents: string): AuditConfig {
   const parsed = JSON.parse(contents) as AuditConfig;
+  const reviewedNpmIdentity = parseReviewedNpmIdentity(parsed);
   if (
     parsed.schemaVersion !== 2 ||
     !SEVERITIES.includes(parsed.severityThreshold) ||
@@ -174,12 +177,6 @@ export function parseAuditConfig(contents: string): AuditConfig {
     parsed.archiveTarVersion !== "7.5.21" ||
     typeof parsed.exceptionFile !== "string" ||
     !parsed.exceptionFile ||
-    typeof parsed.npmVersion !== "string" ||
-    !/^(?:0|[1-9][0-9]*)\.(?:0|[1-9][0-9]*)\.(?:0|[1-9][0-9]*)$/.test(parsed.npmVersion) ||
-    /[\r\n]/.test(parsed.npmVersion) ||
-    typeof parsed.npmIntegrity !== "string" ||
-    !/^sha512-[A-Za-z0-9+/]+={0,2}$/.test(parsed.npmIntegrity) ||
-    /[\r\n]/.test(parsed.npmIntegrity) ||
     typeof parsed.registryOrigin !== "string" ||
     !parsed.registryOrigin ||
     !Array.isArray(parsed.archivePackages) ||
@@ -246,7 +243,7 @@ export function parseAuditConfig(contents: string): AuditConfig {
   ) {
     throw new Error("ci/reviewed-npm-audit.json is invalid");
   }
-  return parsed;
+  return { ...parsed, ...reviewedNpmIdentity };
 }
 
 function readConfig(): AuditConfig {

scripts/checks/extract-installer-pins.mts

@@ -351,9 +351,12 @@ const TRUSTED_OPENSHELL_RELEASES: readonly OpenShellReleaseTrust[] = [
     version: "0.0.103",
   },
   {
+    // The third template authorizes the reviewed Node 24.18.1 and npm 12.0.2
+    // successor constructed and verified by installer-brev-npm12-template-trust.test.ts.
     brevTemplateSha256: [
       "c0a4ddf25a02a9fe02b2df53a60942ea887610f04d4ce16a121b6e79a5aeff1a",
       "56fc6482d1508b73604099e6fd6c16daea16275cf36cc25c1c5366c82a4394e3",
+      "5674b528f6604b30b31fbf3877e4f5d53abc08e88c0a352070a898cfd7eaa7bf",
     ],
     formula: {
       asset: "openshell.rb",

scripts/lib/npm-audit-receipt.mts

@@ -11,6 +11,7 @@ import {
   parseAuditExceptionRegistry,
   parseAuditReport,
   NPM_AUDIT_ARGV,
+  parseReviewedNpmIdentityConfig,
 } from "./reviewed-npm-audit.mts";
 
 export const AUDIT_ARGV = NPM_AUDIT_ARGV;
@@ -212,24 +213,7 @@ export function canonicalAuditReceipt(receipt: AuditReceipt): string {
 }
 
 export function reviewedNpmVersionFromConfig(contents: string): string {
-  let parsed: unknown;
-  try {
-    parsed = JSON.parse(contents);
-  } catch {
-    throw new Error("reviewed npm audit configuration is not valid JSON");
-  }
-  const npmVersion =
-    typeof parsed === "object" && parsed !== null && !Array.isArray(parsed)
-      ? (parsed as Record<string, unknown>).npmVersion
-      : undefined;
-  if (
-    typeof npmVersion !== "string" ||
-    !/^(?:0|[1-9][0-9]*)\.(?:0|[1-9][0-9]*)\.(?:0|[1-9][0-9]*)$/.test(npmVersion) ||
-    /[\r\n]/.test(npmVersion)
-  ) {
-    throw new Error("reviewed npm audit configuration has an invalid npmVersion");
-  }
-  return npmVersion;
+  return parseReviewedNpmIdentityConfig(contents).npmVersion;
 }
 
 function cli(args: readonly string[]): void {