fix(policy): allow the resolved claude-code npm launcher in the preset (#7579)

nemoclaw-blueprint/policies/presets/claude-code.yaml

@@ -35,6 +35,12 @@ network_policies:
       - { path: /usr/bin/claude }
       - { path: /tmp/npm-global/bin/claude }
       - { path: /home/linuxbrew/.linuxbrew/bin/claude }
+      # OpenShell enforces on the kernel-trusted /proc/<pid>/exe, which for a
+      # global npm install resolves to the package's own launcher rather than
+      # the `bin/claude` shim above. The bundled Claude Code skill installs with
+      # `npm install -g --prefix /tmp/npm-global`, so allow that resolved path
+      # too or egress to api.anthropic.com is denied despite the shim (#7579).
+      - { path: /tmp/npm-global/lib/node_modules/@anthropic-ai/claude-code/bin/claude.exe }
       # Claude Code is distributed as an npm CLI, so OpenShell may observe
       # the Node runtime instead of the shim that launched it.
       - { path: /usr/local/bin/node }

test/effective-policy-contracts.test.ts

@@ -511,5 +511,11 @@ describe("effective built-in policy contracts", () => {
       expect(methods(endpoint)).toEqual(["GET", "POST"]);
     }
     expect(binaries(claude)).not.toContain("/**");
+    // OpenShell enforces on the resolved /proc/<pid>/exe, so the npm-installed
+    // launcher (not just the bin/claude shim) must be allowlisted or egress is
+    // denied for the documented `--prefix /tmp/npm-global` install (#7579).
+    expect(binaries(claude)).toContain(
+      "/tmp/npm-global/lib/node_modules/@anthropic-ai/claude-code/bin/claude.exe",
+    );
   });
 });