tamperward 2.29.13 → 2.29.14

package/dist/cli/index.js

@@ -17883,6 +17883,22 @@ function parseStraceFileAccess(raw) {
   }
   return out3;
 }
+function tracerDenialDiagnostic(stderr) {
+  for (const raw of stderr.split("\n")) {
+    const line = raw.trim();
+    if (line.startsWith("strace:") && TRACER_DENIAL_RE.test(line)) return line;
+  }
+  return null;
+}
+function classifyTraceRun(r) {
+  if (r.spawnError) return { kind: "tracer-error", diagnostic: `strace could not be launched: ${r.spawnError}` };
+  const denial = tracerDenialDiagnostic(r.stderr);
+  if (denial) return { kind: "tracer-error", diagnostic: denial };
+  if (r.signal) return { kind: "tracer-error", diagnostic: `strace was killed by ${r.signal} before the trace completed` };
+  if (r.traceFileCount === 0) return { kind: "tracer-error", diagnostic: "strace produced no trace files; the tracer did not attach (ptrace may be denied)" };
+  if (r.accessCount === 0) return { kind: "tracer-error", diagnostic: "strace recorded no file syscalls; the tracer attached to nothing (ptrace may be denied)" };
+  return { kind: "ok", exit: r.status ?? 1 };
+}
 function inside3(root, path) {
   const rel = relative6(resolve11(root), resolve11(path));
   return rel === "" || rel !== ".." && !rel.startsWith(`..${sep4}`) && !isAbsolute12(rel);
@@ -18009,11 +18025,9 @@ function rewriteTraceRoot(accesses, actualRoot) {
     return { ...item, path: join22(TRACE_ROOT, ...rel.split("/")) };
   });
 }
-function runOneTrace(cwd, base, command, budget) {
-  const root = mkdtempSync5(join22(tmpdir6(), "tw-trace-base-"));
+function straceOnce(root, command, budget) {
   const traceDir = mkdtempSync5(join22(tmpdir6(), "tw-trace-log-"));
   try {
-    materializeBase(base, cwd, root);
     const prefix = join22(traceDir, "trace");
     const traced = spawnSync5(
       "strace",
@@ -18042,21 +18056,40 @@ function runOneTrace(cwd, base, command, budget) {
         maxBuffer: 64 * 1024 * 1024
       }
     );
-    if (traced.error) throw traced.error;
-    const logs = traceFiles(prefix);
-    if (logs.length === 0) {
-      throw new Error("strace produced no trace files");
-    }
+    const logs = traced.error ? [] : traceFiles(prefix);
     const accesses = logs.flatMap((path) => parseStraceFileAccess(readFileSync20(path, "utf8")));
-    return {
-      exit: traced.status ?? 1,
-      accesses: rewriteTraceRoot(accesses, root)
+    const raw = {
+      spawnError: traced.error ? traced.error.message : null,
+      status: traced.status,
+      signal: traced.signal ?? null,
+      stderr: String(traced.stderr ?? "").slice(0, 8192),
+      traceFileCount: logs.length,
+      accessCount: accesses.length
     };
+    return { raw, accesses };
   } finally {
-    rmSync9(root, { recursive: true, force: true });
     rmSync9(traceDir, { recursive: true, force: true });
   }
 }
+function runOneTrace(cwd, base, command, budget) {
+  const root = mkdtempSync5(join22(tmpdir6(), "tw-trace-base-"));
+  try {
+    materializeBase(base, cwd, root);
+    const { raw, accesses } = straceOnce(root, command, budget);
+    return { outcome: classifyTraceRun(raw), accesses: rewriteTraceRoot(accesses, root) };
+  } finally {
+    rmSync9(root, { recursive: true, force: true });
+  }
+}
+function tracerPreflight(budget = 10) {
+  const probeRoot = mkdtempSync5(join22(tmpdir6(), "tw-trace-probe-"));
+  try {
+    const { raw } = straceOnce(probeRoot, "true", Math.max(1, Math.min(budget, 10)));
+    return classifyTraceRun(raw);
+  } finally {
+    rmSync9(probeRoot, { recursive: true, force: true });
+  }
+}
 function renderText2(report2) {
   const out3 = (s = "") => void process.stdout.write(s + "\n");
   out3("tamperward trace-verify \u2014 ADVISORY observation, not an enforcement verdict");
@@ -18143,6 +18176,15 @@ function runTraceVerify(opts = {}) {
 `);
     return 2;
   }
+  const preflight = tracerPreflight(budget);
+  if (preflight.kind === "tracer-error") {
+    process.stderr.write(
+      `tamperward trace-verify: the tracer cannot observe in this environment, so no verifier input can be discovered \u2014 ${preflight.diagnostic}.
+This is a tracing/tooling limitation (e.g. ptrace denied by seccomp or Yama), not a verifier result.
+`
+    );
+    return 2;
+  }
   const atBase = trackedAt(base, cwd);
   const tracked = new Set(atBase);
   const covered = verifierCoveredInputs(command, atBase, policy);
@@ -18150,9 +18192,16 @@ function runTraceVerify(opts = {}) {
   const runExits = [];
   try {
     for (let i = 0; i < runs; i++) {
-      const result = runOneTrace(cwd, base, command, budget);
-      observed.push(result.accesses);
-      runExits.push(result.exit);
+      const { outcome, accesses } = runOneTrace(cwd, base, command, budget);
+      if (outcome.kind === "tracer-error") {
+        process.stderr.write(
+          `tamperward trace-verify: tracing failed during run ${i + 1}/${runs} \u2014 ${outcome.diagnostic}. No advisory report emitted.
+`
+        );
+        return 2;
+      }
+      observed.push(accesses);
+      runExits.push(outcome.exit);
     }
   } catch (e) {
     process.stderr.write(`tamperward trace-verify: tracing failed (${e instanceof Error ? e.message : String(e)}).
@@ -18199,7 +18248,7 @@ function parseTraceVerify(args) {
   }
   return out3;
 }
-var TRACE_ROOT, CONFIG_BASENAMES;
+var TRACE_ROOT, TRACER_DENIAL_RE, CONFIG_BASENAMES;
 var init_trace_verify = __esm({
   "src/cli/trace-verify.ts"() {
     "use strict";
@@ -18209,6 +18258,7 @@ var init_trace_verify = __esm({
     init_policy_load();
     init_verify();
     TRACE_ROOT = "/__tamperward_trusted_base__";
+    TRACER_DENIAL_RE = /\b(?:PTRACE_[A-Z_]+|ptrace|seccomp|no[-_ ]new[-_ ]privs|yama)\b|Operation not permitted|Permission denied/i;
     CONFIG_BASENAMES = /* @__PURE__ */ new Set([
       "package.json",
       "pytest.ini",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "tamperward",
-  "version": "2.29.13",
+  "version": "2.29.14",
   "description": "The deterministic agent-integrity gate. One ruleset, evaluated on the actual diff/commands as a verdict, enforced everywhere a change can be made.",
   "license": "Apache-2.0",
   "author": "hexrift",