tamperward 1.11.0 → 1.11.1

package/dist/cli/index.js

@@ -2791,7 +2791,7 @@ tamperward init: ${changed} change(s) applied. Commit them so the gate travels w
 import { execFileSync as execFileSync4, spawnSync } from "node:child_process";
 import { chmodSync as chmodSync2, cpSync, mkdirSync as mkdirSync6, mkdtempSync as mkdtempSync2, rmSync as rmSync2, statSync as statSync5, symlinkSync, writeFileSync as writeFileSync6, existsSync as existsSync8 } from "node:fs";
 import { tmpdir as tmpdir2 } from "node:os";
-import { dirname as dirname4, join as join9 } from "node:path";
+import { dirname as dirname4, join as join9, resolve } from "node:path";
 var OVERLAY_CLASSES = ["tests", "snapshots", "config"];
 function git2(args, cwd) {
   return execFileSync4("git", args, { cwd, encoding: "utf8", maxBuffer: 1 << 28 });
@@ -2820,7 +2820,7 @@ function materialize(cwd, dest) {
     cpSync(src, out2);
     chmodSync2(out2, st.mode);
   }
-  const nm = join9(cwd, "node_modules");
+  const nm = resolve(cwd, "node_modules");
   if (existsSync8(nm)) symlinkSync(nm, join9(dest, "node_modules"), "dir");
 }
 function overlayPristine(cwd, base, dest, policy) {
@@ -2955,8 +2955,8 @@ function parseVerify(args) {
 // src/cli/run.ts
 import { execFileSync as execFileSync5, spawnSync as spawnSync2 } from "node:child_process";
 import { createHash as createHash5 } from "node:crypto";
-import { readdirSync as readdirSync3, readFileSync as readFileSync11, realpathSync } from "node:fs";
-import { join as join10 } from "node:path";
+import { readdirSync as readdirSync3, readFileSync as readFileSync11, readlinkSync, realpathSync, statSync as statSync6 } from "node:fs";
+import { join as join10, resolve as resolve2 } from "node:path";
 var out = (s) => process.stdout.write(s + "\n");
 var err = (s) => process.stderr.write(s + "\n");
 function git3(args, cwd) {
@@ -2977,6 +2977,45 @@ function treeFingerprint(cwd) {
   }
   return h.digest("hex");
 }
+function depsFingerprint(cwd) {
+  const root = join10(cwd, "node_modules");
+  const h = createHash5("sha256");
+  const walk = (dir) => {
+    let entries;
+    try {
+      entries = readdirSync3(dir, { withFileTypes: true });
+    } catch {
+      return;
+    }
+    for (const e of [...entries].sort((a, b) => a.name.localeCompare(b.name))) {
+      const p = join10(dir, e.name);
+      if (e.isDirectory()) walk(p);
+      else if (e.isFile()) {
+        h.update(p);
+        try {
+          h.update(readFileSync11(p));
+          h.update(String(statSync6(p).mode));
+        } catch {
+          h.update("<unreadable>");
+        }
+      } else if (e.isSymbolicLink()) {
+        h.update(p);
+        try {
+          h.update(readlinkSync(p));
+        } catch {
+          h.update("<unreadable-link>");
+        }
+      }
+    }
+  };
+  try {
+    if (!statSync6(root).isDirectory()) return "none";
+  } catch {
+    return "none";
+  }
+  walk(root);
+  return h.digest("hex");
+}
 function nowTicks() {
   try {
     return Math.floor(parseFloat(readFileSync11("/proc/uptime", "utf8").split(" ")[0]) * 100);
@@ -3018,7 +3057,7 @@ function survivorsHoldingTree(cwd, spawnedAfterTicks) {
   return out2;
 }
 function runEnvelope(opts) {
-  const cwd = opts.cwd ?? process.cwd();
+  const cwd = resolve2(opts.cwd ?? process.cwd());
   if (!opts.argv.length) {
     err("tamperward run: no agent command given (usage: tamperward run [options] -- <command...>)");
     return 2;
@@ -3055,6 +3094,7 @@ function runEnvelope(opts) {
     }
   }
   out(`tamperward run \u2014 trusted base ${base.slice(0, 10)}; agent exit is untrusted.`);
+  const depsBefore = depsFingerprint(cwd);
   const spawnTicks = nowTicks();
   const agent = spawnSync2(opts.argv[0], opts.argv.slice(1), { cwd, stdio: "inherit" });
   const agentExit = agent.status ?? 1;
@@ -3089,16 +3129,21 @@ tamperward run \u2014 agent exit ${agentExit}; HISTORY_REWRITE \u2192 ENFORCEMEN
     err("tamperward run: the working tree changed while it was being adjudicated \u2014");
     err("the verdict below would describe a tree that no longer exists.");
   }
+  const depsDrifted = !opts.allowDepDrift && depsFingerprint(cwd) !== depsBefore;
+  if (depsDrifted) {
+    err("tamperward run: the installed dependency tree changed during this run \u2014 the program that");
+    err("runs the suite is not the one we started with. Both verification runs execute it.");
+  }
   const survivors = survivorsHoldingTree(cwd, spawnTicks);
   if (survivors.length) {
     err(`tamperward run: ${survivors.length} process(es) started during this run still hold the`);
     err(`working tree (pid ${survivors.join(", ")}). A verdict cannot outlive the tree it describes.`);
   }
-  const notQuiescent = mutatedDuringAdjudication || survivors.length > 0;
+  const notQuiescent = mutatedDuringAdjudication || survivors.length > 0 || depsDrifted;
   const cannot = diffCode === 2 || workCode === 2 || verifyCode === 2;
   const blocked = diffCode === 1 || workCode === 1 || verifyCode === 1 || notQuiescent;
   const enforcement = cannot ? 2 : blocked ? 1 : 0;
-  const verdict2 = enforcement === 2 ? "CANNOT_ADJUDICATE (fail closed)" : notQuiescent ? "NOT_QUIESCENT \u2014 the tree moved, or something still holds it" : enforcement === 1 ? "ENFORCEMENT_FAILED \u2014 the tree the runtime released does not stand" : agentExit !== 0 ? `agent exited ${agentExit} (enforcement clean)` : "GREEN MEANS GREEN";
+  const verdict2 = enforcement === 2 ? "CANNOT_ADJUDICATE (fail closed)" : depsDrifted ? "DEPENDENCY_DRIFT \u2014 the suite runner changed under the envelope" : notQuiescent ? "NOT_QUIESCENT \u2014 the tree moved, or something still holds it" : enforcement === 1 ? "ENFORCEMENT_FAILED \u2014 the tree the runtime released does not stand" : agentExit !== 0 ? `agent exited ${agentExit} (enforcement clean)` : "GREEN MEANS GREEN";
   out(`
 tamperward run \u2014 agent exit ${agentExit}; checks diff=${diffCode} worktree=${workCode} verify=${verifyCode} \u2192 ${verdict2}`);
   return enforcement !== 0 ? enforcement : agentExit;
@@ -3115,6 +3160,7 @@ function parseRun(args) {
     else if (a === "--budget") o.budget = Number(args[++i]);
     else if (a === "--allow-dirty") o.allowDirty = true;
     else if (a === "--settle") o.settle = Number(args[++i]);
+    else if (a === "--allow-dep-drift") o.allowDepDrift = true;
     else if (a === "--cwd") o.cwd = args[++i];
     else {
       o.argv = args.slice(i);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "tamperward",
-  "version": "1.11.0",
+  "version": "1.11.1",
   "description": "The deterministic agent-integrity gate. One ruleset, evaluated on the actual diff/commands as a verdict, enforced everywhere a change can be made.",
   "license": "Apache-2.0",
   "author": "hexrift",