tamperward 2.23.16 → 2.23.18

package/README.md

@@ -257,6 +257,7 @@ platforms.
 | Capability | Linux | macOS | Windows |
 | --- | --- | --- | --- |
 | `check` / policy evaluation | Supported | Supported | Supported |
+| parsed output (`--json`, `--format github`, hook/sweep JSON) on a pipe | Complete before exit | Complete before exit (asynchronous pipe drained first) | Complete before exit (asynchronous pipe drained first) |
 | Claude hook / Stop adapter | Supported where Claude Code command hooks are available | Same | Same |
 | `watch` / observer telemetry | Supported; backend health is reported | Supported/degraded according to `fs.watch` health | Supported/degraded according to `fs.watch` health |
 | opt-in `hook-service` | Supported (per-user `0600` unix socket) | Supported (per-user `0600` unix socket) | **Unsupported; `start` refuses, hooks run in-process** |

package/dist/cli/index.js

@@ -302,6 +302,29 @@ var init_hook_client = __esm({
   }
 });
 
+// src/cli/exit.ts
+function exitAfterFlush(code2) {
+  process.exitCode = code2;
+  let pending = 0;
+  const done = () => {
+    pending -= 1;
+    if (pending === 0) process.exit(code2);
+  };
+  for (const stream of [process.stdout, process.stderr]) {
+    pending += 1;
+    stream.on("error", noop);
+    stream.write("", done);
+  }
+}
+var noop;
+var init_exit = __esm({
+  "src/cli/exit.ts"() {
+    "use strict";
+    noop = () => {
+    };
+  }
+});
+
 // src/lazy-deps.ts
 import { createRequire } from "node:module";
 function loadPicomatch() {
@@ -6756,6 +6779,25 @@ function entryShape(h) {
   }
   return { problems, runs };
 }
+function judgeGateEntry(event, matcher, h) {
+  const cmd = typeof h.command === "string" ? h.command : "";
+  const a = analyseGateCommand(cmd, event);
+  const shape = entryShape(h);
+  const problems = [...a.problems, ...shape.problems];
+  let runs = a.runs && shape.runs;
+  let tools = null;
+  if (event === "PreToolUse") {
+    const sel = matcherSelection(matcher);
+    tools = sel.tools;
+    if (sel.problem) {
+      problems.push(sel.problem);
+    }
+  } else if (matcher !== void 0 && !(typeof matcher === "string" && (matcher === "" || matcher === "*"))) {
+    problems.push(`a \`matcher\` (${JSON.stringify(matcher)}) on the Stop entry`);
+    runs = false;
+  }
+  return { runs, problems, pin: a.pin, tools };
+}
 function gateCandidates(s, event) {
   const out3 = [];
   for (const group of eventEntries(s, event) ?? []) {
@@ -6778,22 +6820,7 @@ function gateCandidates(s, event) {
         continue;
       }
       if (!MENTIONS_GATE.test(cmd)) continue;
-      const a = analyseGateCommand(cmd, event);
-      const shape = entryShape(h);
-      const problems = [...a.problems, ...shape.problems];
-      let runs = a.runs && shape.runs;
-      let tools = null;
-      if (event === "PreToolUse") {
-        const sel = matcherSelection(group.matcher);
-        tools = sel.tools;
-        if (sel.problem) {
-          problems.push(sel.problem);
-        }
-      } else if (group.matcher !== void 0 && !(typeof group.matcher === "string" && (group.matcher === "" || group.matcher === "*"))) {
-        problems.push(`a \`matcher\` (${JSON.stringify(group.matcher)}) on the Stop entry`);
-        runs = false;
-      }
-      out3.push({ key: JSON.stringify({ m: group.matcher, h }), runs, problems, pin: a.pin, tools });
+      out3.push({ key: JSON.stringify({ m: group.matcher, h }), ...judgeGateEntry(event, group.matcher, h) });
     }
   }
   return out3;
@@ -10745,7 +10772,7 @@ function runHookService(args) {
     }).catch((e) => {
       process.stderr.write(`tamperward hook-service: ${e instanceof Error ? e.message : String(e)}
 `);
-      process.exit(2);
+      exitAfterFlush(2);
     });
     return -1;
   }
@@ -10769,14 +10796,15 @@ function runHookService(args) {
     if (!isRecord(res) || typeof res.served !== "number") {
       process.stdout.write(`tamperward hook-service: not running (pid ${state.pid} did not answer, or is another version); ${optIn}
 `);
-      process.exit(0);
+      exitAfterFlush(0);
+      return;
     }
     const cache3 = isRecord(res.cache) ? res.cache : {};
     process.stdout.write(
       `tamperward hook-service: running (pid ${state.pid}, tamperward@${state.version}, root ${state.root}, since ${state.started_at}); served: ${res.served}; snapshot cache hits/misses/entries: ${String(cache3.hits ?? 0)}/${String(cache3.misses ?? 0)}/${String(cache3.size ?? 0)}; ${optIn}
 `
     );
-    process.exit(0);
+    exitAfterFlush(0);
   });
   return -1;
 }
@@ -10789,6 +10817,7 @@ var init_hook_service = __esm({
     init_ptree_cache();
     init_repo_context();
     init_hook();
+    init_exit();
     init_hook_client();
     MAX_REQUEST_BYTES = 64 * 1024 * 1024;
     STOP_WAIT_MS = 1e4;
@@ -11164,6 +11193,17 @@ function planGitignore(cwd) {
     apply: () => atomicReplaceFile(path, next, existingMode(path, 420))
   };
 }
+function gateVerdicts(event, groups, needle) {
+  const out3 = [];
+  for (const group of groups) {
+    for (const h of group.hooks ?? []) {
+      if (!needle.test(String(h.command ?? ""))) continue;
+      const { runs, problems } = judgeGateEntry(event, group.matcher, h);
+      out3.push({ event, group, h, runs, problems });
+    }
+  }
+  return out3;
+}
 function planClaudeHooks(cwd) {
   const rel = ".claude/settings.json";
   const path = join14(cwd, rel);
@@ -11197,10 +11237,24 @@ function planClaudeHooks(cwd) {
   const needPre = preEntries.length === 0;
   const stopEntries = entriesWith(hooks.Stop, SWEEP_RE);
   const needStop = stopEntries.length === 0;
+  const neutralised = [
+    ...gateVerdicts("PreToolUse", preEntries, HOOK_RE),
+    ...gateVerdicts("Stop", stopEntries, SWEEP_RE)
+  ].filter((v) => !v.runs);
+  const foreign = neutralised.filter((v) => ours(String(v.h.command ?? "")) === null);
+  if (foreign.length > 0) {
+    return {
+      item: "agent",
+      path: rel,
+      status: "error",
+      detail: `${foreign.map((v) => `the ${v.event} gate entry is neutralised (${v.problems.join("; ")})`).join("; ")} \u2014 the runtime would not run the gate through it; remove the entry, then re-run init (refusing to rewrite a hand-written entry)`
+    };
+  }
   const stale = preEntries.filter((m) => missingTools(m.matcher).length > 0);
-  const repin = [...preEntries, ...stopEntries].flatMap((m) => m.hooks ?? []).filter((h) => stalePin(String(h.command ?? "")));
+  const restoring = new Set(neutralised.map((v) => v.h));
+  const repin = [...preEntries, ...stopEntries].flatMap((m) => m.hooks ?? []).filter((h) => !restoring.has(h) && stalePin(String(h.command ?? "")));
   const needDisableFalse = settings.disableAllHooks !== false;
-  if (!needPre && !needStop && stale.length === 0 && repin.length === 0 && !needDisableFalse) {
+  if (!needPre && !needStop && stale.length === 0 && repin.length === 0 && neutralised.length === 0 && !needDisableFalse) {
     return { item: "agent", path: rel, status: "ok", detail: "PreToolUse + Stop hooks already wired" };
   }
   const repairing = stale.length > 0 ? [...new Set(stale.flatMap((m) => missingTools(m.matcher)))] : [];
@@ -11214,9 +11268,16 @@ function planClaudeHooks(cwd) {
       needStop && "wire Stop sweep",
       repairing.length > 0 && `widen the PreToolUse matcher to cover ${repairing.join(", ")}`,
       repin.length > 0 && `re-pin the hook commands to tamperward@${TW_VERSION} (was ${pins.join(", ")})`,
+      ...neutralised.map((v) => `restore the ${v.event} gate entry to the shape init writes \u2014 it is neutralised (${v.problems.join("; ")})`),
       needDisableFalse && (settings.disableAllHooks === void 0 ? "declare disableAllHooks: false so the user settings file cannot switch the hooks off" : `set disableAllHooks: false (was ${JSON.stringify(settings.disableAllHooks)})`)
     ].filter(Boolean).join(" + "),
     apply: () => {
+      for (const v of neutralised) {
+        for (const k of Object.keys(v.h)) delete v.h[k];
+        v.h.type = "command";
+        v.h.command = v.event === "PreToolUse" ? HOOK_CMD : SWEEP_CMD;
+        if (v.event === "Stop") delete v.group.matcher;
+      }
       for (const h of repin) {
         const kind = ours(String(h.command ?? ""))?.[2];
         h.command = kind === "hook claude" ? HOOK_CMD : kind === "sweep claude" ? SWEEP_CMD : h.command;
@@ -11316,7 +11377,7 @@ ${block.join("\n")}
   }
   const lines = existing.split("\n");
   const dead = unconditionalExitAt(lines);
-  const at = lines.findIndex((l) => PRECOMMIT_RE.test(l));
+  const at = lines.findIndex((l) => !/^\s*#/.test(l) && PRECOMMIT_RE.test(l));
   const write = (out3) => atomicReplaceFile(path, out3.join("\n"), hookMode());
   if (at !== -1 && (dead === -1 || at < dead)) {
     if (!stalePin(lines[at])) {
@@ -11559,6 +11620,7 @@ var init_init = __esm({
     init_verifier_limits();
     init_wiring();
     init_narrow();
+    init_hook_tampering();
     init_repo_context();
     init_safe_write();
     errText3 = (e) => (e instanceof Error ? e.message : String(e)).replace(/\s+/g, " ").trim();
@@ -17779,6 +17841,7 @@ var init_main = __esm({
 
 // src/cli/index.ts
 init_hook_client();
+init_exit();
 import { readFileSync as readFileSync24 } from "node:fs";
 function loadMain() {
   return Promise.resolve().then(() => (init_main(), main_exports));
@@ -17810,4 +17873,4 @@ async function launch(argv) {
   return main2.guardedMain(argv);
 }
 var code = await launch(process.argv.slice(2));
-if (code >= 0) process.exit(code);
+if (code >= 0) exitAfterFlush(code);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "tamperward",
-  "version": "2.23.16",
+  "version": "2.23.18",
   "description": "The deterministic agent-integrity gate. One ruleset, evaluated on the actual diff/commands as a verdict, enforced everywhere a change can be made.",
   "license": "Apache-2.0",
   "author": "hexrift",