tamperward 1.10.3 → 1.11.0

package/dist/cli/index.js

@@ -2139,18 +2139,13 @@ function snapshotProtected(cwd, policy, prev) {
       }
       if (st.isDirectory()) walk(r);
       else if (st.isFile() && isProtected(r, policy)) {
-        const p = prev?.[r];
-        if (p && p.mtimeMs === st.mtimeMs && p.size === st.size && p.mode === st.mode) {
-          out2[r] = p;
-        } else {
-          let hash = "";
-          try {
-            hash = sha(readFileSync6(join6(cwd, r)));
-          } catch {
-            hash = "unreadable";
-          }
-          out2[r] = { hash, mode: st.mode, size: st.size, mtimeMs: st.mtimeMs };
+        let hash = "";
+        try {
+          hash = sha(readFileSync6(join6(cwd, r)));
+        } catch {
+          hash = "unreadable";
         }
+        out2[r] = { hash, mode: st.mode, size: st.size, mtimeMs: st.mtimeMs };
       }
     }
   };
@@ -2959,11 +2954,69 @@ function parseVerify(args) {
 
 // src/cli/run.ts
 import { execFileSync as execFileSync5, spawnSync as spawnSync2 } from "node:child_process";
+import { createHash as createHash5 } from "node:crypto";
+import { readdirSync as readdirSync3, readFileSync as readFileSync11, realpathSync } from "node:fs";
+import { join as join10 } from "node:path";
 var out = (s) => process.stdout.write(s + "\n");
 var err = (s) => process.stderr.write(s + "\n");
 function git3(args, cwd) {
   return execFileSync5("git", args, { cwd, encoding: "utf8", maxBuffer: 1 << 28 });
 }
+function treeFingerprint(cwd) {
+  const files = git3(["ls-files", "-z", "--cached", "--others", "--exclude-standard"], cwd).split("\0").filter(Boolean).sort();
+  const h = createHash5("sha256");
+  for (const rel of files) {
+    h.update(rel);
+    h.update("\0");
+    try {
+      h.update(readFileSync11(join10(cwd, rel)));
+    } catch {
+      h.update("<unreadable>");
+    }
+    h.update("\0");
+  }
+  return h.digest("hex");
+}
+function nowTicks() {
+  try {
+    return Math.floor(parseFloat(readFileSync11("/proc/uptime", "utf8").split(" ")[0]) * 100);
+  } catch {
+    return Number.POSITIVE_INFINITY;
+  }
+}
+function survivorsHoldingTree(cwd, spawnedAfterTicks) {
+  const out2 = [];
+  let real;
+  try {
+    real = realpathSync(cwd);
+  } catch {
+    return out2;
+  }
+  let pids;
+  try {
+    pids = readdirSync3("/proc").filter((d) => /^\d+$/.test(d));
+  } catch {
+    return out2;
+  }
+  for (const pid of pids) {
+    const n = Number(pid);
+    if (n === process.pid) continue;
+    let held;
+    try {
+      held = realpathSync(`/proc/${pid}/cwd`);
+    } catch {
+      continue;
+    }
+    if (held !== real && !held.startsWith(real + "/")) continue;
+    try {
+      const stat = readFileSync11(`/proc/${pid}/stat`, "utf8");
+      const startTicks = Number(stat.slice(stat.lastIndexOf(")") + 2).split(" ")[19]);
+      if (Number.isFinite(startTicks) && startTicks >= spawnedAfterTicks) out2.push(n);
+    } catch {
+    }
+  }
+  return out2;
+}
 function runEnvelope(opts) {
   const cwd = opts.cwd ?? process.cwd();
   if (!opts.argv.length) {
@@ -3002,6 +3055,7 @@ function runEnvelope(opts) {
     }
   }
   out(`tamperward run \u2014 trusted base ${base.slice(0, 10)}; agent exit is untrusted.`);
+  const spawnTicks = nowTicks();
   const agent = spawnSync2(opts.argv[0], opts.argv.slice(1), { cwd, stdio: "inherit" });
   const agentExit = agent.status ?? 1;
   const head = git3(["rev-parse", "HEAD"], cwd).trim();
@@ -3013,6 +3067,7 @@ function runEnvelope(opts) {
 tamperward run \u2014 agent exit ${agentExit}; HISTORY_REWRITE \u2192 ENFORCEMENT_FAILED`);
     return 1;
   }
+  const fpBefore = treeFingerprint(cwd);
   let diffCode = 0;
   if (head !== base) {
     out(`
@@ -3023,10 +3078,27 @@ tamperward run \u2014 agent exit ${agentExit}; HISTORY_REWRITE \u2192 ENFORCEMEN
   const workCode = runCheck({ worktree: true, cwd, policyOverride: frozenPolicy, includeUntracked: true, ciLayer: true });
   out("\n[envelope] pristine verification against the trusted base:");
   const verifyCode = runVerify({ cwd, base, cmd: frozenCmd, budget: frozenBudget, policyOverride: frozenPolicy });
+  if (opts.settle && opts.settle > 0) {
+    try {
+      execFileSync5("sleep", [String(opts.settle)]);
+    } catch {
+    }
+  }
+  const mutatedDuringAdjudication = treeFingerprint(cwd) !== fpBefore;
+  if (mutatedDuringAdjudication) {
+    err("tamperward run: the working tree changed while it was being adjudicated \u2014");
+    err("the verdict below would describe a tree that no longer exists.");
+  }
+  const survivors = survivorsHoldingTree(cwd, spawnTicks);
+  if (survivors.length) {
+    err(`tamperward run: ${survivors.length} process(es) started during this run still hold the`);
+    err(`working tree (pid ${survivors.join(", ")}). A verdict cannot outlive the tree it describes.`);
+  }
+  const notQuiescent = mutatedDuringAdjudication || survivors.length > 0;
   const cannot = diffCode === 2 || workCode === 2 || verifyCode === 2;
-  const blocked = diffCode === 1 || workCode === 1 || verifyCode === 1;
+  const blocked = diffCode === 1 || workCode === 1 || verifyCode === 1 || notQuiescent;
   const enforcement = cannot ? 2 : blocked ? 1 : 0;
-  const verdict2 = enforcement === 2 ? "CANNOT_ADJUDICATE (fail closed)" : enforcement === 1 ? "ENFORCEMENT_FAILED \u2014 the tree the runtime released does not stand" : agentExit !== 0 ? `agent exited ${agentExit} (enforcement clean)` : "GREEN MEANS GREEN";
+  const verdict2 = enforcement === 2 ? "CANNOT_ADJUDICATE (fail closed)" : notQuiescent ? "NOT_QUIESCENT \u2014 the tree moved, or something still holds it" : enforcement === 1 ? "ENFORCEMENT_FAILED \u2014 the tree the runtime released does not stand" : agentExit !== 0 ? `agent exited ${agentExit} (enforcement clean)` : "GREEN MEANS GREEN";
   out(`
 tamperward run \u2014 agent exit ${agentExit}; checks diff=${diffCode} worktree=${workCode} verify=${verifyCode} \u2192 ${verdict2}`);
   return enforcement !== 0 ? enforcement : agentExit;
@@ -3042,6 +3114,7 @@ function parseRun(args) {
     else if (a === "--cmd") o.cmd = args[++i];
     else if (a === "--budget") o.budget = Number(args[++i]);
     else if (a === "--allow-dirty") o.allowDirty = true;
+    else if (a === "--settle") o.settle = Number(args[++i]);
     else if (a === "--cwd") o.cwd = args[++i];
     else {
       o.argv = args.slice(i);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "tamperward",
-  "version": "1.10.3",
+  "version": "1.11.0",
   "description": "The deterministic agent-integrity gate. One ruleset, evaluated on the actual diff/commands as a verdict, enforced everywhere a change can be made.",
   "license": "Apache-2.0",
   "author": "hexrift",