tamperward 2.29.19 → 2.29.20

package/dist/cli/index.js

@@ -11638,14 +11638,31 @@ function watcherTelemetry(log) {
     return { state: "degraded", health, reason: health.last_error ?? "observer reported an error" };
   return { state: "healthy", health };
 }
-function watchTree(dir, cb, onState, onError) {
+function watchTree(dir, cb, onState, onError, watchFn = watch) {
+  const describe2 = (e) => e instanceof Error ? e.message : String(e);
   if (process.env.TAMPERWARD_WATCH_NO_RECURSIVE !== "1") {
     try {
-      const w = watch(dir, { recursive: true }, (kind, fname) => {
+      let recursiveClosed = false;
+      const closeRecursive = () => {
+        if (recursiveClosed) return;
+        recursiveClosed = true;
+        w.close();
+      };
+      const w = watchFn(dir, { recursive: true }, (kind, fname) => {
         if (fname) cb(kind, String(fname));
       });
+      w.on("error", (e) => {
+        if (recursiveClosed) return;
+        recursiveClosed = true;
+        try {
+          w.close();
+        } catch {
+        }
+        onState("recursive", 0);
+        onError(`recursive watch on ${dir}: ${describe2(e)}`);
+      });
       onState("recursive", 1);
-      return { close: () => w.close() };
+      return { close: closeRecursive };
     } catch {
     }
   }
@@ -11656,7 +11673,7 @@ function watchTree(dir, cb, onState, onError) {
     if (closed || watchers.has(rel) || SKIP2.test(rel + "/")) return;
     let w;
     try {
-      w = watch(rel ? join12(dir, rel) : dir, (kind, fname) => {
+      w = watchFn(rel ? join12(dir, rel) : dir, (kind, fname) => {
         if (closed || !fname) return;
         const child = rel ? `${rel}/${String(fname)}` : String(fname);
         cb(kind, child);
@@ -11666,11 +11683,19 @@ function watchTree(dir, cb, onState, onError) {
         }
       });
     } catch (e) {
-      onError(
-        `watch directory ${rel || "."}: ${e instanceof Error ? e.message : String(e)}`
-      );
+      onError(`watch directory ${rel || "."}: ${describe2(e)}`);
       return;
     }
+    w.on("error", (e) => {
+      if (closed || watchers.get(rel) !== w) return;
+      watchers.delete(rel);
+      try {
+        w.close();
+      } catch {
+      }
+      onError(`watch directory ${rel || "."}: ${describe2(e)}`);
+      onState("fallback", watchers.size);
+    });
     watchers.set(rel, w);
     onState("fallback", watchers.size);
   };
@@ -11704,7 +11729,7 @@ function watchTree(dir, cb, onState, onError) {
     }
   };
 }
-function startWatcher(dir, log, policy) {
+function startWatcher(dir, log, policy, watchFn = watch) {
   try {
     mkdirSync4(join12(log, ".."), { recursive: true });
   } catch {
@@ -11784,7 +11809,8 @@ function startWatcher(dir, log, policy) {
       health.watched_dirs = watchedDirs;
       persistHealth();
     },
-    (detail) => degrade(detail)
+    (detail) => degrade(detail),
+    watchFn
   );
   let closed = false;
   return {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "tamperward",
-  "version": "2.29.19",
+  "version": "2.29.20",
   "description": "The deterministic agent-integrity gate. One ruleset, evaluated on the actual diff/commands as a verdict, enforced everywhere a change can be made.",
   "license": "Apache-2.0",
   "author": "hexrift",