tamperward 2.28.0 → 2.29.1

package/README.md

@@ -133,30 +133,7 @@ surfaces, see [the full architecture diagram](./docs/architecture.md).
 
 ### The local enforcement envelope
 
-```mermaid
-graph TD
-    entry["Trusted entry snapshot"]
-    hooks["In-loop hooks and observer"]
-    agent["Agent runtime"]
-    tree["Candidate commit and worktree"]
-    adjudicate["Post-exit adjudication"]
-    checks["Diff and worktree checks"]
-    verify["Visible and pristine verification"]
-    integrity["Ancestry dependency and quiescence"]
-    verdict["Final exit verdict"]
-
-    entry --> agent
-    hooks --> agent
-    agent --> tree
-    entry --> adjudicate
-    tree --> adjudicate
-    adjudicate --> checks
-    adjudicate --> verify
-    adjudicate --> integrity
-    checks --> verdict
-    verify --> verdict
-    integrity --> verdict
-```
+![TamperWard local enforcement envelope — trusted entry state and in-loop steering feed the agent lifecycle; post-exit adjudication fans out through change checks, visible/pristine verification, and ancestry/dependency/quiescence checks before one final verdict](./docs/local-enforcement-envelope.svg)
 
 Before starting the agent, the envelope
 

package/dist/cli/index.js

@@ -17956,11 +17956,88 @@ var init_trace_verify = __esm({
   }
 });
 
+// src/runtimes.ts
+import { existsSync as existsSync17 } from "node:fs";
+import { join as join23 } from "node:path";
+function detectRuntimes(cwd) {
+  const found = [];
+  for (const rt of KNOWN_RUNTIMES) {
+    const matchedMarker = rt.markers.find((m) => {
+      try {
+        return existsSync17(join23(cwd, m));
+      } catch {
+        return false;
+      }
+    });
+    if (matchedMarker !== void 0) found.push({ ...rt, matchedMarker });
+  }
+  return found;
+}
+function hasInLoopRuntime(detected) {
+  return detected.some((r) => r.steering === "in-loop");
+}
+function detectionHeadline(detected) {
+  if (detected.length === 0) {
+    return "No agent runtime detected. Wiring Claude Code in-loop steering plus the agent-neutral layers (pre-commit + CI) that protect any agent or human.";
+  }
+  if (detected.length === 1) {
+    const r = detected[0];
+    return `Detected ${r.label} \u2014 ${r.note}`;
+  }
+  const parts = detected.map((r) => `${r.label} (${r.steering === "in-loop" ? "in-loop" : "neutral layers"})`);
+  return `Detected ${detected.length} agent runtimes: ${parts.join(", ")}.`;
+}
+function neutralOnlyCaveat(detected) {
+  if (detected.length === 0 || hasInLoopRuntime(detected)) return null;
+  const names = detected.map((r) => r.label).join(", ");
+  const tracking = [...new Set(detected.map((r) => r.adapterTracking).filter(Boolean))].join(", ");
+  return `In-loop steering (deny-before-execute) ships for Claude Code only today, so on ${names} your live protection is the agent-neutral layers: pre-commit and CI. The Claude hook wiring is still written and is inert unless Claude Code runs in this repository.${tracking ? ` A native in-loop adapter is tracked in ${tracking}.` : ""}`;
+}
+var KNOWN_RUNTIMES;
+var init_runtimes = __esm({
+  "src/runtimes.ts"() {
+    "use strict";
+    KNOWN_RUNTIMES = [
+      {
+        id: "claude-code",
+        label: "Claude Code",
+        markers: [".claude/settings.json", ".claude"],
+        steering: "in-loop",
+        note: "native in-loop steering (PreToolUse deny + Stop sweep) plus the agent-neutral layers."
+      },
+      {
+        id: "cursor",
+        label: "Cursor",
+        markers: [".cursor", ".cursorrules"],
+        steering: "neutral",
+        adapterTracking: "#482",
+        note: "agent-neutral layers (pre-commit + CI) today; a native in-loop adapter is tracked in #482."
+      },
+      {
+        id: "copilot",
+        label: "GitHub Copilot",
+        markers: [".github/copilot-instructions.md", ".github/copilot"],
+        steering: "neutral",
+        adapterTracking: "#482",
+        note: "agent-neutral layers (pre-commit + CI) today; a native in-loop adapter is tracked in #482."
+      },
+      {
+        id: "codex",
+        label: "an AGENTS.md-aware agent (e.g. Codex)",
+        markers: [".codex", "AGENTS.md"],
+        steering: "neutral",
+        adapterTracking: "#482",
+        note: "agent-neutral layers (pre-commit + CI) today; a native in-loop adapter is tracked in #482."
+      }
+    ];
+  }
+});
+
 // src/cli/onboard.ts
 import { execFileSync as execFileSync12 } from "node:child_process";
 import { lstatSync as lstatSync10, mkdtempSync as mkdtempSync6, readFileSync as readFileSync21, realpathSync as realpathSync11, rmSync as rmSync10 } from "node:fs";
 import { tmpdir as tmpdir7 } from "node:os";
-import { join as join23, relative as relative7, resolve as resolve12, sep as sep5 } from "node:path";
+import { join as join24, relative as relative7, resolve as resolve12, sep as sep5 } from "node:path";
 import { createInterface } from "node:readline";
 import { parseDocument } from "yaml";
 function readlineAsker(input, output) {
@@ -18028,7 +18105,7 @@ function explainVerdict(v, code2) {
   }
 }
 function writeVerifyCommand(cwd, command) {
-  const path = join23(cwd, POLICY_FILE);
+  const path = join24(cwd, POLICY_FILE);
   const kind = writeTargetKind(path);
   if (kind === "symlink" || kind === "irregular") {
     return `${POLICY_FILE} is not a regular file; refusing to follow or replace a symlink or special file`;
@@ -18182,11 +18259,15 @@ async function runOnboard(opts, io = {}) {
       }
     }
     section(2);
+    const detected = detectRuntimes(cwd);
+    status("RUNTIME", detectionHeadline(detected), "info");
+    const caveat = neutralOnlyCaveat(detected);
+    if (caveat) status("NOTE", caveat, "warn");
     const plan = planInit(cwd);
     const names = {
       policy: "Policy",
       gitignore: "Git ignore",
-      agent: "Claude hooks",
+      agent: "In-loop (Claude)",
       "pre-commit": "Pre-commit",
       ci: "CI workflow",
       codeowners: "CODEOWNERS"
@@ -18423,13 +18504,13 @@ function runDemo(cwd, head, runners, out3) {
   }
   const before = treeFingerprint(cwd);
   out3(`working tree fingerprint before: ${before.slice(0, 16)}`);
-  const wt = mkdtempSync6(join23(tmpdir7(), "tw-onboard-demo-"));
+  const wt = mkdtempSync6(join24(tmpdir7(), "tw-onboard-demo-"));
   try {
     if (git5(cwd, ["worktree", "add", "--detach", wt, head]) === null) {
       out3("Demo skipped: could not create a temporary worktree (git worktree add failed).");
       return;
     }
-    const targetPath = join23(wt, target.path);
+    const targetPath = join24(wt, target.path);
     const targetStat = lstatSync10(targetPath, { throwIfNoEntry: false });
     if (!targetStat || !targetStat.isFile() || targetStat.isSymbolicLink()) {
       out3("Demo skipped: the selected test is not a regular file in the disposable worktree.");
@@ -18484,6 +18565,7 @@ var init_onboard = __esm({
     init_policy();
     init_policy_load();
     init_narrow();
+    init_runtimes();
     init_wiring();
     init_safe_write();
     Aborted = class extends Error {
@@ -18876,13 +18958,13 @@ var init_record = __esm({
 
 // src/research/run.ts
 import { execFileSync as execFileSync13 } from "node:child_process";
-import { existsSync as existsSync17, mkdirSync as mkdirSync9, readFileSync as readFileSync23, renameSync as renameSync4, rmSync as rmSync11, writeFileSync as writeFileSync11 } from "node:fs";
-import { join as join24, resolve as resolve15 } from "node:path";
+import { existsSync as existsSync18, mkdirSync as mkdirSync9, readFileSync as readFileSync23, renameSync as renameSync4, rmSync as rmSync11, writeFileSync as writeFileSync11 } from "node:fs";
+import { join as join25, resolve as resolve15 } from "node:path";
 function git6(args, cwd) {
   return execFileSync13("git", args, { cwd, encoding: "utf8", stdio: ["ignore", "pipe", "pipe"] }).trim();
 }
 function pairRecordPath(ledger, task, pair) {
-  return join24(ledger, "pairs", `${task}--${pair}.json`);
+  return join25(ledger, "pairs", `${task}--${pair}.json`);
 }
 function resumableRecord(path, expected) {
   let raw;
@@ -18928,9 +19010,9 @@ function writeRecordAtomically(path, text) {
   renameSync4(tmp, path);
 }
 function freshWorkspace(ledger, task, pair, arm, sourceBase) {
-  const ws3 = join24(ledger, "workspaces", `${task.id}--${pair}--${arm}`);
+  const ws3 = join25(ledger, "workspaces", `${task.id}--${pair}--${arm}`);
   rmSync11(ws3, { recursive: true, force: true });
-  mkdirSync9(join24(ledger, "workspaces"), { recursive: true });
+  mkdirSync9(join25(ledger, "workspaces"), { recursive: true });
   try {
     execFileSync13("git", ["clone", "-q", "--no-hardlinks", task.repo, ws3], { stdio: ["ignore", "ignore", "pipe"], encoding: "utf8" });
   } catch (e) {
@@ -19178,14 +19260,14 @@ function runResearch(opts) {
   }
   const ledger = resolve15(opts.out);
   const pairs = opts.pairs ?? 1;
-  mkdirSync9(join24(ledger, "pairs"), { recursive: true });
+  mkdirSync9(join25(ledger, "pairs"), { recursive: true });
   for (const task of tasks) {
     const existingRecords = /* @__PURE__ */ new Map();
     let sourceBase = null;
     try {
       for (let pair = 1; pair <= pairs; pair++) {
         const path = pairRecordPath(ledger, task.id, pair);
-        if (!existsSync17(path)) continue;
+        if (!existsSync18(path)) continue;
         const existing = resumableRecord(path, {
           task: task.id,
           pair,
@@ -19311,9 +19393,9 @@ var init_run2 = __esm({
 
 // src/research/summarize.ts
 import { readdirSync as readdirSync7, readFileSync as readFileSync24 } from "node:fs";
-import { join as join25, resolve as resolve16 } from "node:path";
+import { join as join26, resolve as resolve16 } from "node:path";
 function readLedger2(dir) {
-  const pairsDir = join25(resolve16(dir), "pairs");
+  const pairsDir = join26(resolve16(dir), "pairs");
   let names;
   try {
     names = readdirSync7(pairsDir).filter((n) => n.endsWith(".json")).sort();
@@ -19322,7 +19404,7 @@ function readLedger2(dir) {
   }
   if (names.length === 0) throw new ResearchError(`ledger ${pairsDir} holds no pair records`);
   return names.map((n) => {
-    const path = join25(pairsDir, n);
+    const path = join26(pairsDir, n);
     let raw;
     try {
       raw = JSON.parse(readFileSync24(path, "utf8"));

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "tamperward",
-  "version": "2.28.0",
+  "version": "2.29.1",
   "description": "The deterministic agent-integrity gate. One ruleset, evaluated on the actual diff/commands as a verdict, enforced everywhere a change can be made.",
   "license": "Apache-2.0",
   "author": "hexrift",