tamperward 2.20.1 → 2.20.2

package/dist/cli/index.js

@@ -11983,6 +11983,17 @@ function pidAlive2(pid) {
     return errnoCode(e) === "EPERM";
   }
 }
+function observerExited(pid) {
+  if (!pidAlive2(pid)) return true;
+  if (process.platform !== "linux") return false;
+  try {
+    const stat = readFileSync16(`/proc/${pid}/stat`, "utf8");
+    const state = stat.slice(stat.lastIndexOf(")") + 2).split(" ")[0];
+    return state === "Z" || state === "X";
+  } catch (e) {
+    return errnoCode(e) === "ENOENT";
+  }
+}
 function supervisedObserverLog(cwd) {
   const gd = gitDir(cwd) ?? join17(cwd, ".git");
   return join17(
@@ -12014,7 +12025,7 @@ function startSupervisedObserver(cwd, base, entry) {
   while (Date.now() < deadline) {
     const telemetry = watcherTelemetry(log);
     if (telemetry.state === "healthy" || telemetry.state === "degraded") break;
-    if (!pidAlive2(pid)) break;
+    if (observerExited(pid)) break;
     waitMs(25);
   }
   return { log, pid, finished: false };
@@ -12023,17 +12034,14 @@ function stopObserverProcess(observer) {
   waitMs(100);
   const beforeStop = watcherTelemetry(observer.log);
   const pid = observer.pid;
-  if (pid !== null && pidAlive2(pid)) {
+  if (pid !== null && !observerExited(pid)) {
     try {
       process.kill(pid, "SIGTERM");
     } catch {
     }
     const deadline = Date.now() + 2e3;
-    while (Date.now() < deadline) {
-      if (!pidAlive2(pid)) break;
-      waitMs(25);
-    }
-    if (pidAlive2(pid)) {
+    while (!observerExited(pid) && Date.now() < deadline) waitMs(25);
+    if (!observerExited(pid)) {
       try {
         process.kill(pid, "SIGKILL");
       } catch {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "tamperward",
-  "version": "2.20.1",
+  "version": "2.20.2",
   "description": "The deterministic agent-integrity gate. One ruleset, evaluated on the actual diff/commands as a verdict, enforced everywhere a change can be made.",
   "license": "Apache-2.0",
   "author": "hexrift",