tamperward 2.23.17 → 2.23.18

package/README.md

@@ -257,6 +257,7 @@ platforms.
 | Capability | Linux | macOS | Windows |
 | --- | --- | --- | --- |
 | `check` / policy evaluation | Supported | Supported | Supported |
+| parsed output (`--json`, `--format github`, hook/sweep JSON) on a pipe | Complete before exit | Complete before exit (asynchronous pipe drained first) | Complete before exit (asynchronous pipe drained first) |
 | Claude hook / Stop adapter | Supported where Claude Code command hooks are available | Same | Same |
 | `watch` / observer telemetry | Supported; backend health is reported | Supported/degraded according to `fs.watch` health | Supported/degraded according to `fs.watch` health |
 | opt-in `hook-service` | Supported (per-user `0600` unix socket) | Supported (per-user `0600` unix socket) | **Unsupported; `start` refuses, hooks run in-process** |

package/dist/cli/index.js

@@ -302,6 +302,29 @@ var init_hook_client = __esm({
   }
 });
 
+// src/cli/exit.ts
+function exitAfterFlush(code2) {
+  process.exitCode = code2;
+  let pending = 0;
+  const done = () => {
+    pending -= 1;
+    if (pending === 0) process.exit(code2);
+  };
+  for (const stream of [process.stdout, process.stderr]) {
+    pending += 1;
+    stream.on("error", noop);
+    stream.write("", done);
+  }
+}
+var noop;
+var init_exit = __esm({
+  "src/cli/exit.ts"() {
+    "use strict";
+    noop = () => {
+    };
+  }
+});
+
 // src/lazy-deps.ts
 import { createRequire } from "node:module";
 function loadPicomatch() {
@@ -10749,7 +10772,7 @@ function runHookService(args) {
     }).catch((e) => {
       process.stderr.write(`tamperward hook-service: ${e instanceof Error ? e.message : String(e)}
 `);
-      process.exit(2);
+      exitAfterFlush(2);
     });
     return -1;
   }
@@ -10773,14 +10796,15 @@ function runHookService(args) {
     if (!isRecord(res) || typeof res.served !== "number") {
       process.stdout.write(`tamperward hook-service: not running (pid ${state.pid} did not answer, or is another version); ${optIn}
 `);
-      process.exit(0);
+      exitAfterFlush(0);
+      return;
     }
     const cache3 = isRecord(res.cache) ? res.cache : {};
     process.stdout.write(
       `tamperward hook-service: running (pid ${state.pid}, tamperward@${state.version}, root ${state.root}, since ${state.started_at}); served: ${res.served}; snapshot cache hits/misses/entries: ${String(cache3.hits ?? 0)}/${String(cache3.misses ?? 0)}/${String(cache3.size ?? 0)}; ${optIn}
 `
     );
-    process.exit(0);
+    exitAfterFlush(0);
   });
   return -1;
 }
@@ -10793,6 +10817,7 @@ var init_hook_service = __esm({
     init_ptree_cache();
     init_repo_context();
     init_hook();
+    init_exit();
     init_hook_client();
     MAX_REQUEST_BYTES = 64 * 1024 * 1024;
     STOP_WAIT_MS = 1e4;
@@ -17816,6 +17841,7 @@ var init_main = __esm({
 
 // src/cli/index.ts
 init_hook_client();
+init_exit();
 import { readFileSync as readFileSync24 } from "node:fs";
 function loadMain() {
   return Promise.resolve().then(() => (init_main(), main_exports));
@@ -17847,4 +17873,4 @@ async function launch(argv) {
   return main2.guardedMain(argv);
 }
 var code = await launch(process.argv.slice(2));
-if (code >= 0) process.exit(code);
+if (code >= 0) exitAfterFlush(code);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "tamperward",
-  "version": "2.23.17",
+  "version": "2.23.18",
   "description": "The deterministic agent-integrity gate. One ruleset, evaluated on the actual diff/commands as a verdict, enforced everywhere a change can be made.",
   "license": "Apache-2.0",
   "author": "hexrift",