tamperward 1.10.1 → 1.10.3

package/dist/cli/index.js

@@ -272,6 +272,19 @@ function diffWorktree(opts = {}) {
     (c) => enrich(c, (p) => blobAt("HEAD", p, opts.cwd), (p) => fromDisk(p, opts.cwd))
   );
 }
+function diffWorktreeWithUntracked(opts = {}) {
+  const tracked = diffWorktree(opts);
+  const others = git(["ls-files", "--others", "--exclude-standard", "-z"], opts.cwd).split("\0").filter(Boolean);
+  const seen = new Set(tracked.filter((c) => c.kind === "file").map((c) => c.path));
+  const untracked = others.filter((rel) => !seen.has(rel)).map(
+    (rel) => enrich(
+      { kind: "file", path: rel, oldPath: null, op: "add", before: null, after: null, binary: false, hunks: [] },
+      () => null,
+      (p) => fromDisk(p, opts.cwd)
+    )
+  );
+  return [...tracked, ...untracked];
+}
 
 // src/detectors/finding.ts
 function severityOf(rule, policy, fallback = "block") {
@@ -316,7 +329,16 @@ var LITERAL = [
   { re: /(?:^|\s)--no-verify(?:\s|$)/, why: "--no-verify skips the pre-commit/pre-push hooks" },
   { re: /(?:^|\s)--no-hooks(?:\s|$)/, why: "--no-hooks disables hook execution" },
   { re: /(?:^|[\s;&|=])HUSKY=0(?:\s|$)/, why: "HUSKY=0 disables all Husky hooks" },
-  { re: /\bHUSKY_SKIP_HOOKS=1\b/, why: "HUSKY_SKIP_HOOKS=1 skips Husky hooks" }
+  { re: /\bHUSKY_SKIP_HOOKS=1\b/, why: "HUSKY_SKIP_HOOKS=1 skips Husky hooks" },
+  // git-native hook disabling. core.hooksPath is strictly MORE general than the
+  // flags above: it turns off husky, lefthook, plain .git/hooks and pre-commit
+  // alike, and it was reachable in three spellings the literal list missed
+  // (-c, `git config`, and GIT_CONFIG_* env injection). (P1-9, external review.)
+  { re: /\bcore\.hooksPath\b/i, why: "core.hooksPath redirects git away from the installed hooks" },
+  { re: /\bGIT_CONFIG_KEY_\d+\s*=\s*["']?core\.hooksPath/i, why: "GIT_CONFIG_* injection sets core.hooksPath" },
+  { re: /(?:^|[\s;&|=])LEFTHOOK=0(?:\s|$)/, why: "LEFTHOOK=0 disables Lefthook hooks" },
+  { re: /\bSKIP_SIMPLE_GIT_HOOKS=1\b/, why: "SKIP_SIMPLE_GIT_HOOKS=1 skips simple-git-hooks" },
+  { re: /\bPRE_COMMIT_ALLOW_NO_CONFIG=1\b/, why: "PRE_COMMIT_ALLOW_NO_CONFIG=1 lets pre-commit no-op" }
 ];
 var SHORT_N = /^-[a-z]*n[a-z]*$/i;
 var noVerify = {
@@ -867,6 +889,9 @@ var CHECK = /\b(test|tests|lint|typecheck|type-check|tsc|eslint|jest|vitest|play
 var YAML_KEY = /^\s*-?\s*[A-Za-z_][\w-]*:\s*(?:$|\S)/;
 var INVOKES_TOOL = /(?:^\s*|[;&|`]\s*|\$\(\s*|\b(?:npx|yarn|pnpm|bunx?)\s+)(?:jest|vitest|eslint|tsc|playwright|pytest|tamperward)\b/;
 var INVOKES_SCRIPT = /\b(?:npm|pnpm|yarn|bun)\s+(?:run\s+)?(?:test|tests|lint|typecheck|type-check|coverage)\b|\b(?:make|cargo|go)\s+test\b|\bgradle\w*\s+(?:test|check)\b/;
+function isActiveWorkflow(path) {
+  return /(^|\/)\.github\/workflows\/[^/]+\.ya?ml$/.test(path);
+}
 var invokesCheck = (line) => INVOKES_TOOL.test(line) || INVOKES_SCRIPT.test(line);
 function commandCore(line) {
   return line.trim().replace(/^-\s*/, "").replace(/^(?:run|uses):\s*/, "").replace(/\s+/g, " ").trim();
@@ -897,6 +922,17 @@ var ciTampering = {
     const out2 = [];
     for (const c of changes) {
       if (c.kind !== "file") continue;
+      if (c.op === "rename" && c.oldPath && isActiveWorkflow(c.oldPath) && !isActiveWorkflow(c.path)) {
+        out2.push(
+          makeFinding(RULE5, policy, {
+            file: c.path,
+            message: `A CI workflow was renamed so it no longer runs (${c.oldPath} \u2192 ${c.path}).`,
+            evidence: `${c.oldPath} \u2192 ${c.path}`,
+            remediation: "Restore the path and extension. GitHub runs only *.yml/*.yaml directly under .github/workflows \u2014 renaming outside that disables the checks as surely as deleting them."
+          })
+        );
+        continue;
+      }
       if (!isProtected(c.path, policy, "ci")) continue;
       for (const l of addedLines(c)) {
         const coe = l.content.match(/^\s*-?\s*continue-on-error:\s*(.+?)\s*$/);
@@ -1247,7 +1283,7 @@ var testDeletion = {
               remediation: "Restoring the path. Renaming a spec out of the glob silently removes it from the suite."
             })
           );
-        } else if (c.op === "modify" && isTest && c.before != null && c.after != null) {
+        } else if ((c.op === "modify" || c.op === "rename") && isTest && c.before != null && c.after != null) {
           const before = countTestBlocks(c.before);
           const after = countTestBlocks(c.after);
           if (after < before) {
@@ -1326,7 +1362,7 @@ var testContentRemoval = {
       }
     }
     for (const c of changes) {
-      if (c.kind !== "file" || c.op !== "modify" || c.before == null || c.after == null) continue;
+      if (c.kind !== "file" || c.op !== "modify" && c.op !== "rename" || c.before == null || c.after == null) continue;
       if (!isProtected(c.path, policy, "tests")) continue;
       if (isProtected(c.path, policy, "snapshots")) continue;
       if (countTestBlocks(c.after) < countTestBlocks(c.before)) continue;
@@ -1652,8 +1688,17 @@ function wrap(text, width) {
   if (cur) out2.push(cur);
   return out2.length ? out2 : [""];
 }
+function stripControl(v) {
+  let outStr = "";
+  for (const ch of v) {
+    const cp = ch.codePointAt(0) ?? 0;
+    const control = cp < 32 && cp !== 9 && cp !== 10 && cp !== 13 || cp === 127 || cp >= 128 && cp <= 159;
+    outStr += control ? "\uFFFD" : ch;
+  }
+  return outStr;
+}
 function clip(s, max) {
-  const one = s.replace(/\s+/g, " ").trim();
+  const one = stripControl(s).replace(/\s+/g, " ").trim();
   return one.length > max ? one.slice(0, Math.max(1, max - 1)) + "\u2026" : one;
 }
 function orderFindings(findings) {
@@ -1840,7 +1885,7 @@ function report(input) {
 
 // src/cli/check.ts
 function check(opts) {
-  let policy = loadPolicy(opts.cwd);
+  let policy = opts.policyOverride ?? loadPolicy(opts.cwd);
   const cwd = opts.cwd ?? process.cwd();
   let changes;
   let layer;
@@ -1850,8 +1895,8 @@ function check(opts) {
     layer = "local";
     view = "staged";
   } else if (opts.worktree) {
-    changes = diffWorktree({ cwd: opts.cwd });
-    layer = "local";
+    changes = opts.includeUntracked ? diffWorktreeWithUntracked({ cwd: opts.cwd }) : diffWorktree({ cwd: opts.cwd });
+    layer = opts.ciLayer ? "ci" : "local";
     view = "worktree";
   } else if (opts.diff) {
     const [base, head] = opts.diff.split(/\.{2,3}/);
@@ -1863,7 +1908,7 @@ function check(opts) {
     changes = diffRange(base, head, { cwd: opts.cwd });
     layer = "ci";
     view = "range";
-    policy = loadPolicyAt(mergeBaseOf(base, head, { cwd: opts.cwd }), opts.cwd) ?? defaultPolicy();
+    policy = opts.policyOverride ?? loadPolicyAt(mergeBaseOf(base, head, { cwd: opts.cwd }), opts.cwd) ?? defaultPolicy();
   } else {
     process.stderr.write("tamperward: specify --staged, --worktree, or --diff <base>...<head>\n");
     return 2;
@@ -2820,7 +2865,7 @@ function runVerify(opts) {
   const out2 = (s) => void process.stdout.write(s + "\n");
   let policy;
   try {
-    policy = loadPolicy(cwd);
+    policy = opts.policyOverride ?? loadPolicy(cwd);
   } catch (e) {
     out2(`verify: cannot load policy (${e instanceof Error ? e.message : String(e)}) \u2014 failing closed`);
     return 2;
@@ -2932,12 +2977,13 @@ function runEnvelope(opts) {
     err(`tamperward run: cannot resolve trusted base ${opts.base ?? "HEAD"} \u2014 failing closed.`);
     return 2;
   }
+  let frozenPolicy;
   let frozenCmd;
   let frozenBudget;
   try {
-    const entryPolicy = loadPolicy(cwd);
-    frozenCmd = opts.cmd ?? entryPolicy.verify?.command;
-    frozenBudget = opts.budget ?? entryPolicy.verify?.budget;
+    frozenPolicy = loadPolicyAt(base, cwd) ?? defaultPolicy();
+    frozenCmd = opts.cmd ?? frozenPolicy.verify?.command;
+    frozenBudget = opts.budget ?? frozenPolicy.verify?.budget;
   } catch (e) {
     err(`tamperward run: cannot load the entry-time policy (${e instanceof Error ? e.message : String(e)}) \u2014 failing closed.`);
     return 2;
@@ -2971,12 +3017,12 @@ tamperward run \u2014 agent exit ${agentExit}; HISTORY_REWRITE \u2192 ENFORCEMEN
   if (head !== base) {
     out(`
 [envelope] policy check over committed changes (${base.slice(0, 10)}...${head.slice(0, 10)}):`);
-    diffCode = runCheck({ diff: `${base}...${head}`, cwd });
+    diffCode = runCheck({ diff: `${base}...${head}`, cwd, policyOverride: frozenPolicy });
   }
-  out("\n[envelope] policy check over the working tree:");
-  const workCode = runCheck({ worktree: true, cwd });
+  out("\n[envelope] policy check over the working tree (frozen policy, untracked included, no local ledger):");
+  const workCode = runCheck({ worktree: true, cwd, policyOverride: frozenPolicy, includeUntracked: true, ciLayer: true });
   out("\n[envelope] pristine verification against the trusted base:");
-  const verifyCode = runVerify({ cwd, base, cmd: frozenCmd, budget: frozenBudget });
+  const verifyCode = runVerify({ cwd, base, cmd: frozenCmd, budget: frozenBudget, policyOverride: frozenPolicy });
   const cannot = diffCode === 2 || workCode === 2 || verifyCode === 2;
   const blocked = diffCode === 1 || workCode === 1 || verifyCode === 1;
   const enforcement = cannot ? 2 : blocked ? 1 : 0;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "tamperward",
-  "version": "1.10.1",
+  "version": "1.10.3",
   "description": "The deterministic agent-integrity gate. One ruleset, evaluated on the actual diff/commands as a verdict, enforced everywhere a change can be made.",
   "license": "Apache-2.0",
   "author": "hexrift",