tamperward 2.38.0 → 2.38.1

package/dist/cli/index.js

@@ -21899,6 +21899,7 @@ var init_report2 = __esm({
 
 // src/research/bundle.ts
 import { createHash as createHash17 } from "node:crypto";
+import { isDeepStrictEqual } from "node:util";
 import { gzipSync, gunzipSync } from "node:zlib";
 import { mkdirSync as mkdirSync13, readFileSync as readFileSync26, writeFileSync as writeFileSync15 } from "node:fs";
 import { dirname as dirname14, resolve as resolve19 } from "node:path";
@@ -22039,6 +22040,15 @@ function validateResearchBundle(path) {
   }
   const parsedSummary = summary;
   if (parsedSummary.document !== "summary" || parsedSummary.command !== "research") throw new ResearchError("research bundle summary is not a research summary");
+  for (const key2 of Object.keys(p)) {
+    if (!PROVENANCE_KEYS.has(key2)) throw new ResearchError(`research bundle provenance contains unknown field ${key2}`);
+  }
+  if (p.manifest_sha256 !== parsedSummary.manifest_sha256) throw new ResearchError("research bundle provenance manifest hash disagrees with summary");
+  if (!isDeepStrictEqual(p.adapter, parsedSummary.adapter)) throw new ResearchError("research bundle provenance adapter disagrees with summary");
+  if (p.model !== parsedSummary.model) throw new ResearchError("research bundle provenance model disagrees with summary");
+  if (p.tamperward_version !== parsedSummary.tamperward_version) throw new ResearchError("research bundle provenance TamperWard version disagrees with summary");
+  if (!isDeepStrictEqual(p.agent_argv, parsedSummary.agent_argv)) throw new ResearchError("research bundle provenance agent argv disagrees with summary");
+  if (p.agent_budget !== parsedSummary.agent_budget) throw new ResearchError("research bundle provenance agent budget disagrees with summary");
   const records = [];
   for (const [name, bytes] of files) {
     if (!PAIR_ENTRY_RE.test(name)) continue;
@@ -22054,9 +22064,9 @@ function validateResearchBundle(path) {
   }
   if (records.length === 0) throw new ResearchError("research bundle contains no pair records");
   const derived = summarizeRecords(records);
+  if (p.records !== records.length) throw new ResearchError("research bundle provenance record count disagrees with pair records");
   if (JSON.stringify(derived) !== JSON.stringify(summary)) throw new ResearchError("research bundle summary does not match its pair records");
   if (report2.toString("utf8") !== renderResearchReport(derived)) throw new ResearchError("research bundle report does not match its summary");
-  if (p.manifest_sha256 !== parsedSummary.manifest_sha256) throw new ResearchError("research bundle manifest hash disagrees with summary");
   if (!p.protocol || p.protocol !== "research-bundle-v1") throw new ResearchError("research bundle protocol is missing or unsupported");
   return { records: records.length, manifest_sha256: String(p.manifest_sha256) };
 }
@@ -22115,7 +22125,7 @@ function runResearchBundle(opts) {
     throw e;
   }
 }
-var BLOCK, BUNDLE_VERSION, TOP_LEVEL_ENTRIES, PAIR_ENTRY_RE, TAR_NAME_MAX, NAME_FIELD, TYPE_OFFSET, PREFIX_OFFSET, PREFIX_FIELD;
+var BLOCK, BUNDLE_VERSION, PROVENANCE_KEYS, TOP_LEVEL_ENTRIES, PAIR_ENTRY_RE, TAR_NAME_MAX, NAME_FIELD, TYPE_OFFSET, PREFIX_OFFSET, PREFIX_FIELD;
 var init_bundle = __esm({
   "src/research/bundle.ts"() {
     "use strict";
@@ -22127,6 +22137,20 @@ var init_bundle = __esm({
     init_summarize();
     BLOCK = 512;
     BUNDLE_VERSION = 1;
+    PROVENANCE_KEYS = /* @__PURE__ */ new Set([
+      "bundle_schema_version",
+      "protocol",
+      "schema_version",
+      "manifest_sha256",
+      "adapter",
+      "model",
+      "tamperward_version",
+      "agent_argv",
+      "agent_budget",
+      "records",
+      "manifest_included",
+      "prompts_included"
+    ]);
     TOP_LEVEL_ENTRIES = /* @__PURE__ */ new Set(["summary.json", "report.txt", "provenance.json", "manifest.json"]);
     PAIR_ENTRY_RE = /^ledger\/pairs\/[^/]+\.json$/;
     TAR_NAME_MAX = 99;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "tamperward",
-  "version": "2.38.0",
+  "version": "2.38.1",
   "description": "The deterministic agent-integrity gate. One ruleset, evaluated on the actual diff/commands as a verdict, enforced everywhere a change can be made.",
   "license": "Apache-2.0",
   "author": "hexrift",