tamperward 2.30.2 → 2.30.4

package/dist/cli/index.js

@@ -866,10 +866,10 @@ function headerPaths(line) {
         first = rest.slice(0, mid);
         rest = rest.slice(mid + 1);
       } else {
-        const m = rest.match(/^(.*) (b\/.*)$/);
-        if (!m) return [null, null];
-        first = m[1];
-        rest = m[2];
+        const at = rest.lastIndexOf(" b/");
+        if (at < 0) return [null, null];
+        first = rest.slice(0, at);
+        rest = rest.slice(at + 1);
       }
     }
   }
@@ -2874,7 +2874,6 @@ function expandShellPath(t, env = process.env) {
 function hookTests(policy, ctx) {
   const cwd = ctx?.cwd;
   const diskCwd = cwd !== void 0 && existsSync3(cwd) ? cwd : void 0;
-  const onDisk = diskCwd !== void 0;
   const root = diskCwd !== void 0 ? canonicalPath(diskCwd) : cwd;
   const memo = /* @__PURE__ */ new Map();
   const rel = (t) => {
@@ -2938,7 +2937,7 @@ function shellHookTarget(seg, toks, policy, ctx) {
   return null;
 }
 function shellWritesHook(seg, toks, policy, ctx) {
-  const { rel, hook, whole, holds, hookish } = hookTests(policy, ctx);
+  const { hook, whole, holds, hookish } = hookTests(policy, ctx);
   for (const m of seg.matchAll(REDIRECT_TARGET)) {
     if (hook(m[1])) return "a redirect empties or rewrites a protected hook";
   }
@@ -2947,7 +2946,6 @@ function shellWritesHook(seg, toks, policy, ctx) {
   const cmd = (toks[at] ?? "").replace(/^.*\//, "");
   const args = toks.slice(at + 1);
   const positional = args.filter((a) => a !== "--" && !a.startsWith("-"));
-  const last = positional[positional.length - 1] ?? "";
   const anyHook = args.some(hook);
   const inPlace = args.some((a) => /^-[A-Za-z]*i|^--in-place/.test(a));
   const scripts = args.filter((_, i) => i > 0 && INLINE_FLAG.test(args[i - 1]));
@@ -11157,7 +11155,7 @@ function annotations(findings) {
   });
 }
 function cell(s) {
-  return stripControl(s).replace(/\s+/g, " ").replace(/\|/g, "\\|").trim();
+  return stripControl(s).replace(/\s+/g, " ").replace(/\\/g, "\\\\").replace(/\|/g, "\\|").trim();
 }
 function mdCode(s) {
   return s.replace(/`/g, "'").replace(/[\r\n]/g, " ");
@@ -14525,7 +14523,7 @@ function freezeRoot(kind, path) {
   }
 }
 function shellTokens(command) {
-  const matches = command.match(/(?:[^\s"'\\]+|"(?:\\.|[^"])*"|'[^']*')+/g) ?? [];
+  const matches = command.match(/(?:[^\s"'\\]|"[^"\\]*(?:\\.[^"\\]*)*"|'[^']*')+/g) ?? [];
   return matches.map((token) => {
     if (token.startsWith("'") && token.endsWith("'") || token.startsWith('"') && token.endsWith('"')) return token.slice(1, -1);
     return token;
@@ -14884,7 +14882,7 @@ function runCapturedProcessSync(executable, args, opts) {
     rmSync6(stateDir, { recursive: true, force: true });
   }
 }
-var DIAGNOSTIC_TAIL_BYTES, EMPTY_STREAM, CAPTURE_SUPERVISOR;
+var DIAGNOSTIC_TAIL_BYTES, EMPTY_STREAM, CLEANUP_HELPERS_SRC, CAPTURE_SUPERVISOR;
 var init_suite_diagnostics = __esm({
   "src/suite-diagnostics.ts"() {
     "use strict";
@@ -14896,40 +14894,32 @@ var init_suite_diagnostics = __esm({
       truncated: false,
       tail: ""
     };
-    CAPTURE_SUPERVISOR = String.raw`
-const cp = require('node:child_process');
-const fs = require('node:fs');
-
-const [configFile] = process.argv.slice(1);
-const cfg = JSON.parse(fs.readFileSync(configFile, 'utf8'));
-const CAP = Number(cfg.captureBytes);
-
-const fresh = () => ({ total: 0, tail: Buffer.alloc(0) });
-const stdout = fresh();
-const stderr = fresh();
-
-// Linux ordinary-exit hardening (#371): process-group ownership alone misses a
-// descendant that calls setsid(). Track the real descendant tree while the
-// suite is alive so a reparented session escape is still known when the main
-// child exits. This supplements, rather than replaces, group termination.
-const trackedDescendants = new Set();
+    CLEANUP_HELPERS_SRC = String.raw`
+function readStat(pid) {
+  try {
+    const stat = fs.readFileSync('/proc/' + pid + '/stat', 'utf8');
+    const fields = stat.slice(stat.lastIndexOf(')') + 2).split(' ');
+    const ppid = Number(fields[1]);
+    const starttime = fields[19];
+    if (!Number.isFinite(ppid) || starttime === undefined) return null;
+    return { ppid: ppid, starttime: starttime };
+  } catch (e) { return null; }
+}
 
 function linuxDescendants(rootPid) {
   if (process.platform !== 'linux' || !rootPid) return [];
   const byParent = new Map();
+  const startById = new Map();
   let names = [];
-  try { names = fs.readdirSync('/proc').filter((x) => /^\d+$/.test(x)); } catch { return []; }
+  try { names = fs.readdirSync('/proc').filter((x) => /^\d+$/.test(x)); } catch (e) { return []; }
   for (const name of names) {
     const pid = Number(name);
-    try {
-      const stat = fs.readFileSync('/proc/' + name + '/stat', 'utf8');
-      const fields = stat.slice(stat.lastIndexOf(')') + 2).split(' ');
-      const ppid = Number(fields[1]);
-      if (!Number.isFinite(ppid)) continue;
-      const kids = byParent.get(ppid) || [];
-      kids.push(pid);
-      byParent.set(ppid, kids);
-    } catch {}
+    const st = readStat(pid);
+    if (!st) continue;
+    startById.set(pid, st.starttime);
+    const kids = byParent.get(st.ppid) || [];
+    kids.push(pid);
+    byParent.set(st.ppid, kids);
   }
   const out = [];
   const seen = new Set([rootPid]);
@@ -14939,16 +14929,56 @@ function linuxDescendants(rootPid) {
     for (const pid of (byParent.get(parent) || [])) {
       if (seen.has(pid)) continue;
       seen.add(pid);
-      out.push(pid);
+      out.push({ pid: pid, starttime: startById.get(pid) });
       stack.push(pid);
     }
   }
   return out;
 }
 
+function killableDescendants(tracked) {
+  const out = [];
+  for (const entry of tracked) {
+    const pid = entry[0];
+    const starttime = entry[1];
+    const st = readStat(pid);
+    if (st && st.starttime === starttime) out.push(pid);
+  }
+  return out;
+}
+
+function cleanupPlan(child, cfg, platform, killable) {
+  const live = !!child && child.exitCode === null && child.signalCode === null;
+  return {
+    signalGroup: !!(live && cfg.detached && platform !== 'win32'),
+    signalMainChild: live,
+    descendants: platform === 'linux' ? killable() : [],
+  };
+}
+`;
+    CAPTURE_SUPERVISOR = String.raw`
+const cp = require('node:child_process');
+const fs = require('node:fs');
+
+const [configFile] = process.argv.slice(1);
+const cfg = JSON.parse(fs.readFileSync(configFile, 'utf8'));
+const CAP = Number(cfg.captureBytes);
+
+const fresh = () => ({ total: 0, tail: Buffer.alloc(0) });
+const stdout = fresh();
+const stderr = fresh();
+
+// Linux ordinary-exit hardening (#371): process-group ownership alone misses a
+// descendant that calls setsid(). Track the real descendant tree while the
+// suite is alive so a reparented session escape is still known when the main
+// child exits. This supplements, rather than replaces, group termination.
+// pid -> the /proc start-time observed for that pid, so cleanup can re-check
+// identity before signalling (a bare pid alone can be reused — #545).
+const trackedDescendants = new Map();
+${CLEANUP_HELPERS_SRC}
 function trackDescendants() {
   if (!child || !child.pid || process.platform !== 'linux') return;
-  for (const pid of linuxDescendants(child.pid)) trackedDescendants.add(pid);
+  for (const d of linuxDescendants(child.pid)) trackedDescendants.set(d.pid, d.starttime);
 }
 
 function append(state, chunk) {
@@ -14983,17 +15013,17 @@ let drainTimer = null;
 function killOwned() {
   if (!child || !child.pid) return;
   trackDescendants();
-  if (cfg.detached && process.platform !== 'win32') {
-    try { process.kill(-child.pid, 'SIGKILL'); } catch {}
-  }
-  try { child.kill('SIGKILL'); } catch {}
-  if (process.platform === 'linux') {
-    // Deepest-first is friendlier to short-lived process trees. PIDs are still
-    // rechecked by kill(2); races with natural exit are harmless.
-    for (const pid of Array.from(trackedDescendants).reverse()) {
-      try { process.kill(pid, 'SIGKILL'); } catch {}
-    }
-  }
+  // The main child and its detached group are signalled only while the child is
+  // still reported live: after its exit event the pid can be reused, and both
+  // child.kill() and kill(-pid) resolve the current bearer of that number (#545).
+  // Descendants are the independently identity-checked set (deepest-first, which
+  // is friendlier to short-lived process trees).
+  const plan = cleanupPlan(child, cfg, process.platform, function () {
+    return killableDescendants(Array.from(trackedDescendants).reverse());
+  });
+  if (plan.signalGroup) { try { process.kill(-child.pid, 'SIGKILL'); } catch {} }
+  if (plan.signalMainChild) { try { child.kill('SIGKILL'); } catch {} }
+  for (const pid of plan.descendants) { try { process.kill(pid, 'SIGKILL'); } catch {} }
 }
 
 function finish(extra) {
@@ -15092,7 +15122,7 @@ if (child) {
 // src/verifier-backend.ts
 import { createHash as createHash11, randomUUID } from "node:crypto";
 import { spawnSync as spawnSync2 } from "node:child_process";
-import { accessSync as accessSync2, constants as constants3, readFileSync as readFileSync16, realpathSync as realpathSync7, statSync as statSync4 } from "node:fs";
+import { accessSync as accessSync2, constants as constants3, readFileSync as readFileSync15, realpathSync as realpathSync7, statSync as statSync4 } from "node:fs";
 import { delimiter as delimiter2, dirname as dirname7, join as join18, resolve as resolve7 } from "node:path";
 function identity() {
   const uid = typeof process.getuid === "function" ? process.getuid() : null;
@@ -15137,7 +15167,7 @@ function findExecutable(name) {
   return null;
 }
 function fileSha256(path) {
-  return createHash11("sha256").update(readFileSync16(path)).digest("hex");
+  return createHash11("sha256").update(readFileSync15(path)).digest("hex");
 }
 function engineClientEnv() {
   return {
@@ -15571,7 +15601,7 @@ var init_verifier_backend = __esm({
 // src/cli/verify.ts
 import { execFileSync as execFileSync8, spawnSync as spawnSync3 } from "node:child_process";
 import { createHash as createHash12 } from "node:crypto";
-import { chmodSync as chmodSync2, cpSync, lstatSync as lstatSync9, mkdirSync as mkdirSync8, mkdtempSync as mkdtempSync3, readFileSync as readFileSync17, readlinkSync as readlinkSync3, rmSync as rmSync7, symlinkSync, writeFileSync as writeFileSync9, existsSync as existsSync14 } from "node:fs";
+import { chmodSync as chmodSync2, cpSync, lstatSync as lstatSync9, mkdirSync as mkdirSync8, mkdtempSync as mkdtempSync3, readFileSync as readFileSync16, readlinkSync as readlinkSync3, rmSync as rmSync7, symlinkSync, writeFileSync as writeFileSync9, existsSync as existsSync14 } from "node:fs";
 import { tmpdir as tmpdir4 } from "node:os";
 import { dirname as dirname8, isAbsolute as isAbsolute11, join as join19, relative as relative5, resolve as resolve8, sep as sep3 } from "node:path";
 function oracleAssuranceReport() {
@@ -15792,7 +15822,7 @@ function overlayDigest(dest, paths) {
     try {
       const st = lstatSync9(p);
       h.update(String(st.mode));
-      h.update(st.isSymbolicLink() ? readlinkSync3(p) : readFileSync17(p));
+      h.update(st.isSymbolicLink() ? readlinkSync3(p) : readFileSync16(p));
     } catch {
       h.update("<gone>");
     }
@@ -16506,7 +16536,7 @@ var init_verify = __esm({
 // src/cli/run.ts
 import { execFileSync as execFileSync9, spawn, spawnSync as spawnSync4 } from "node:child_process";
 import { randomBytes as randomBytes3 } from "node:crypto";
-import { accessSync as accessSync3, constants as fsConstants, mkdtempSync as mkdtempSync4, readdirSync as readdirSync4, readFileSync as readFileSync18, readlinkSync as readlinkSync4, realpathSync as realpathSync9, rmSync as rmSync8, statSync as statSync5, writeFileSync as writeFileSync10 } from "node:fs";
+import { accessSync as accessSync3, constants as fsConstants, mkdtempSync as mkdtempSync4, readdirSync as readdirSync4, readFileSync as readFileSync17, readlinkSync as readlinkSync4, realpathSync as realpathSync8, rmSync as rmSync8, statSync as statSync5, writeFileSync as writeFileSync10 } from "node:fs";
 import { tmpdir as tmpdir5 } from "node:os";
 import { dirname as dirname9, join as join20, resolve as resolve9 } from "node:path";
 function authoritativeRunLifecyclePlatform(platform = process.platform) {
@@ -16561,7 +16591,7 @@ function trustedLinuxPython(candidates = DEFAULT_TRUSTED_PYTHON_CANDIDATES) {
   }
   for (const candidate of candidates) {
     try {
-      const real = realpathSync9(candidate);
+      const real = realpathSync8(candidate);
       const st = statSync5(real);
       if (!st.isFile() || writableByCaller2(real)) continue;
       const probe = spawnSync4(
@@ -16660,7 +16690,7 @@ function runAgentSupervised(argv, cwd, budgetSecs, linuxPythonCandidates, lifecy
     }
     let state = {};
     try {
-      state = JSON.parse(readFileSync18(resultFile, "utf8"));
+      state = JSON.parse(readFileSync17(resultFile, "utf8"));
     } catch {
       return {
         exit: 1,
@@ -16704,7 +16734,7 @@ function observerExited(pid) {
   if (!pidAlive3(pid)) return true;
   if (process.platform !== "linux") return false;
   try {
-    const stat = readFileSync18(`/proc/${pid}/stat`, "utf8");
+    const stat = readFileSync17(`/proc/${pid}/stat`, "utf8");
     const state = stat.slice(stat.lastIndexOf(")") + 2).split(" ")[0];
     return state === "Z" || state === "X";
   } catch (e) {
@@ -16826,7 +16856,7 @@ function git3(args, cwd) {
 }
 function nowTicks() {
   try {
-    return Math.floor(parseFloat(readFileSync18("/proc/uptime", "utf8").split(" ")[0]) * 100);
+    return Math.floor(parseFloat(readFileSync17("/proc/uptime", "utf8").split(" ")[0]) * 100);
   } catch {
     return Number.POSITIVE_INFINITY;
   }
@@ -16835,7 +16865,7 @@ function survivorsHoldingTree(cwd, spawnedAfterTicks) {
   const out3 = [];
   let real;
   try {
-    real = realpathSync9(cwd);
+    real = realpathSync8(cwd);
   } catch {
     return out3;
   }
@@ -16849,7 +16879,7 @@ function survivorsHoldingTree(cwd, spawnedAfterTicks) {
     const n = Number(pid);
     if (n === process.pid) continue;
     try {
-      const stat = readFileSync18(`/proc/${pid}/stat`, "utf8");
+      const stat = readFileSync17(`/proc/${pid}/stat`, "utf8");
       const startTicks = Number(stat.slice(stat.lastIndexOf(")") + 2).split(" ")[19]);
       if (!Number.isFinite(startTicks) || startTicks < spawnedAfterTicks) continue;
     } catch {
@@ -17421,7 +17451,7 @@ raise SystemExit(0)
 
 // src/cli/doctor.ts
 import { execFileSync as execFileSync10 } from "node:child_process";
-import { existsSync as existsSync15, readFileSync as readFileSync19, readdirSync as readdirSync5 } from "node:fs";
+import { existsSync as existsSync15, readFileSync as readFileSync18, readdirSync as readdirSync5 } from "node:fs";
 import { join as join21, resolve as resolve10 } from "node:path";
 function lifecyclePlatformCheck(platform = process.platform, linuxPython = platform === "linux" ? trustedLinuxPython() : null) {
   if (platform === "linux") {
@@ -17480,7 +17510,7 @@ function pinsInFile(path) {
   if (!existsSync15(path)) return [];
   let src = "";
   try {
-    src = readFileSync19(path, "utf8");
+    src = readFileSync18(path, "utf8");
   } catch {
     return [];
   }
@@ -17507,7 +17537,7 @@ function workflowPermissionCheck(cwd, workflowRels = [".github/workflows/tamperw
     }
     let doc;
     try {
-      doc = yaml.parse(readFileSync19(path, "utf8"));
+      doc = yaml.parse(readFileSync18(path, "utf8"));
     } catch (e) {
       broken.push(`${rel} is not valid YAML (${e instanceof Error ? e.message : String(e)})`);
       continue;
@@ -17931,7 +17961,7 @@ function diagnose(opts = {}) {
     }
     let doc;
     try {
-      doc = yaml.parse(readFileSync19(workflowPath, "utf8"));
+      doc = yaml.parse(readFileSync18(workflowPath, "utf8"));
     } catch (e) {
       return fail(
         "ci-verifier",
@@ -18110,9 +18140,9 @@ import { execFileSync as execFileSync11, spawnSync as spawnSync5 } from "node:ch
 import {
   existsSync as existsSync16,
   mkdtempSync as mkdtempSync5,
-  readFileSync as readFileSync20,
+  readFileSync as readFileSync19,
   readdirSync as readdirSync6,
-  realpathSync as realpathSync10,
+  realpathSync as realpathSync9,
   rmSync as rmSync9,
   symlinkSync as symlinkSync2
 } from "node:fs";
@@ -18129,7 +18159,7 @@ function parseStraceFileAccess(raw) {
     const call = line.match(/\b(execveat|execve|openat2|openat|open|newfstatat|fstatat|statx|lstat|stat|access|readlinkat|readlink)\s*\(/);
     if (!call) continue;
     const afterCall = line.slice((call.index ?? 0) + call[0].length);
-    const quoted = afterCall.match(/"((?:\\.|[^"])*)"/);
+    const quoted = afterCall.match(/"([^"\\]*(?:\\.[^"\\]*)*)"/);
     if (!quoted) continue;
     const path = unescapeStraceString(quoted[1]);
     if (!path) continue;
@@ -18276,7 +18306,7 @@ function rewriteTraceRoot(accesses, actualRoot) {
     if (!inside3(actualRoot, abs)) return { ...item, path: abs };
     const rel = relative6(actualRoot, abs).split(sep4).join("/");
     try {
-      const real = resolve11(realpathSync10(abs));
+      const real = resolve11(realpathSync9(abs));
       if (!inside3(actualRoot, real)) return { ...item, path: real };
     } catch {
     }
@@ -18315,7 +18345,7 @@ function straceOnce(root, command, budget) {
       }
     );
     const logs = traced.error ? [] : traceFiles(prefix);
-    const accesses = logs.flatMap((path) => parseStraceFileAccess(readFileSync20(path, "utf8")));
+    const accesses = logs.flatMap((path) => parseStraceFileAccess(readFileSync19(path, "utf8")));
     const raw = {
       spawnError: traced.error ? traced.error.message : null,
       status: traced.status,
@@ -18545,7 +18575,7 @@ var init_trace_verify = __esm({
 });
 
 // src/runtimes.ts
-import { existsSync as existsSync17, readFileSync as readFileSync21 } from "node:fs";
+import { existsSync as existsSync17, readFileSync as readFileSync20 } from "node:fs";
 import { join as join23 } from "node:path";
 function isRecord4(x) {
   return typeof x === "object" && x !== null && !Array.isArray(x);
@@ -18576,7 +18606,7 @@ function claudeSettingsBeyondTamperward(cwd) {
   let raw;
   try {
     if (!existsSync17(path)) return false;
-    raw = readFileSync21(path, "utf8");
+    raw = readFileSync20(path, "utf8");
   } catch {
     return false;
   }
@@ -18683,7 +18713,7 @@ var init_runtimes = __esm({
 
 // src/cli/onboard.ts
 import { execFileSync as execFileSync12 } from "node:child_process";
-import { lstatSync as lstatSync10, mkdtempSync as mkdtempSync6, readFileSync as readFileSync22, realpathSync as realpathSync11, rmSync as rmSync10 } from "node:fs";
+import { lstatSync as lstatSync10, mkdtempSync as mkdtempSync6, readFileSync as readFileSync21, realpathSync as realpathSync10, rmSync as rmSync10 } from "node:fs";
 import { tmpdir as tmpdir7 } from "node:os";
 import { join as join24, relative as relative7, resolve as resolve12, sep as sep5 } from "node:path";
 import { createInterface } from "node:readline";
@@ -18756,7 +18786,7 @@ function writeVerifyCommand(cwd, command) {
     return `${POLICY_FILE} is not a regular file; refusing to follow or replace a symlink or special file`;
   }
   const mode = existingMode(path, 420);
-  const original = kind === "file" ? readFileSync22(path, "utf8") : null;
+  const original = kind === "file" ? readFileSync21(path, "utf8") : null;
   let next;
   try {
     const doc = parseDocument(original && original.trim() ? original : "version: 1\n");
@@ -18816,7 +18846,7 @@ async function runOnboard(opts, io = {}) {
   const cwd = resolve12(rootText);
   let sameRoot = cwd === requestedCwd;
   try {
-    sameRoot = realpathSync11(cwd) === realpathSync11(requestedCwd);
+    sameRoot = realpathSync10(cwd) === realpathSync10(requestedCwd);
   } catch {
   }
   if (!sameRoot) {
@@ -19156,8 +19186,8 @@ function runDemo(cwd, head, runners, out3) {
     let worktreeRoot;
     let realTarget;
     try {
-      worktreeRoot = realpathSync11(wt);
-      realTarget = realpathSync11(targetPath);
+      worktreeRoot = realpathSync10(wt);
+      realTarget = realpathSync10(targetPath);
     } catch {
       out3("Demo skipped: the selected test could not be resolved safely inside the disposable worktree.");
       return;
@@ -19341,8 +19371,8 @@ var init_capture = __esm({
 });
 
 // src/research/manifest.ts
-import { createHash as createHash14 } from "node:crypto";
-import { readFileSync as readFileSync23 } from "node:fs";
+import { createHash as createHash13 } from "node:crypto";
+import { readFileSync as readFileSync22 } from "node:fs";
 import { dirname as dirname10, resolve as resolve14 } from "node:path";
 function taskFrom(raw, index, manifestDir) {
   const where = `task #${index + 1}`;
@@ -19376,7 +19406,7 @@ function readManifest(path) {
   const abs = resolve14(path);
   let bytes;
   try {
-    bytes = readFileSync23(abs);
+    bytes = readFileSync22(abs);
   } catch (e) {
     throw new ResearchError(`cannot read task manifest ${abs}: ${e instanceof Error ? e.message : String(e)}`);
   }
@@ -19399,7 +19429,7 @@ function readManifest(path) {
     if (seen.has(t.id)) throw new ResearchError(`task manifest ${abs}: duplicate task id "${t.id}"`);
     seen.add(t.id);
   }
-  return { path: abs, sha256: createHash14("sha256").update(bytes).digest("hex"), tasks };
+  return { path: abs, sha256: createHash13("sha256").update(bytes).digest("hex"), tasks };
 }
 var MANIFEST_VERSION;
 var init_manifest = __esm({
@@ -19588,7 +19618,7 @@ var init_record = __esm({
 
 // src/research/run.ts
 import { execFileSync as execFileSync13 } from "node:child_process";
-import { existsSync as existsSync18, mkdirSync as mkdirSync9, readFileSync as readFileSync24, renameSync as renameSync4, rmSync as rmSync11, writeFileSync as writeFileSync11 } from "node:fs";
+import { existsSync as existsSync18, mkdirSync as mkdirSync9, readFileSync as readFileSync23, renameSync as renameSync4, rmSync as rmSync11, writeFileSync as writeFileSync11 } from "node:fs";
 import { join as join25, resolve as resolve15 } from "node:path";
 function git6(args, cwd) {
   return execFileSync13("git", args, { cwd, encoding: "utf8", stdio: ["ignore", "pipe", "pipe"] }).trim();
@@ -19599,7 +19629,7 @@ function pairRecordPath(ledger, task, pair) {
 function resumableRecord(path, expected) {
   let raw;
   try {
-    raw = JSON.parse(readFileSync24(path, "utf8"));
+    raw = JSON.parse(readFileSync23(path, "utf8"));
   } catch (e) {
     throw new ResearchError(`ledger record ${path} is malformed (${errorMessage(e).split("\n")[0]}); remove it to regenerate the pair, or use a new --out`);
   }
@@ -19639,12 +19669,15 @@ function writeRecordAtomically(path, text) {
   writeFileSync11(tmp, text);
   renameSync4(tmp, path);
 }
+function cloneArgs(repo, ws3) {
+  return ["-c", "protocol.ext.allow=never", "clone", "-q", "--no-hardlinks", "--", repo, ws3];
+}
 function freshWorkspace(ledger, task, pair, arm, sourceBase) {
   const ws3 = join25(ledger, "workspaces", `${task.id}--${pair}--${arm}`);
   rmSync11(ws3, { recursive: true, force: true });
   mkdirSync9(join25(ledger, "workspaces"), { recursive: true });
   try {
-    execFileSync13("git", ["clone", "-q", "--no-hardlinks", task.repo, ws3], { stdio: ["ignore", "ignore", "pipe"], encoding: "utf8" });
+    execFileSync13("git", cloneArgs(task.repo, ws3), { stdio: ["ignore", "ignore", "pipe"], encoding: "utf8" });
   } catch (e) {
     throw new ResearchError(`task "${task.id}": cannot clone ${task.repo}: ${errorMessage(e).split("\n")[0]}`);
   }
@@ -20022,7 +20055,7 @@ var init_run2 = __esm({
 });
 
 // src/research/summarize.ts
-import { readdirSync as readdirSync7, readFileSync as readFileSync25 } from "node:fs";
+import { readdirSync as readdirSync7, readFileSync as readFileSync24 } from "node:fs";
 import { join as join26, resolve as resolve16 } from "node:path";
 function readLedger2(dir) {
   const pairsDir = join26(resolve16(dir), "pairs");
@@ -20037,7 +20070,7 @@ function readLedger2(dir) {
     const path = join26(pairsDir, n);
     let raw;
     try {
-      raw = JSON.parse(readFileSync25(path, "utf8"));
+      raw = JSON.parse(readFileSync24(path, "utf8"));
     } catch (e) {
       throw new ResearchError(`ledger record ${path} is not valid JSON: ${errorMessage(e)}`);
     }
@@ -20744,7 +20777,7 @@ var init_main = __esm({
 // src/cli/index.ts
 init_hook_client();
 init_exit();
-import { readFileSync as readFileSync26 } from "node:fs";
+import { readFileSync as readFileSync25 } from "node:fs";
 function loadMain() {
   return Promise.resolve().then(() => (init_main(), main_exports));
 }
@@ -20757,7 +20790,7 @@ async function launch(argv) {
   if (kind && hookServiceEnabled()) {
     let raw = null;
     try {
-      raw = readFileSync26(0, "utf8");
+      raw = readFileSync25(0, "utf8");
     } catch {
       raw = null;
     }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "tamperward",
-  "version": "2.30.2",
+  "version": "2.30.4",
   "description": "The deterministic agent-integrity gate. One ruleset, evaluated on the actual diff/commands as a verdict, enforced everywhere a change can be made.",
   "license": "Apache-2.0",
   "author": "hexrift",