tamperward 2.39.1 → 2.39.2

package/dist/cli/index.js

@@ -19896,6 +19896,17 @@ var init_runtimes = __esm({
 });
 
 // src/adapters/contract.ts
+function immutableRuntimeCapabilities(caps) {
+  return Object.freeze({
+    preDeny: Object.freeze([...caps.preDeny]),
+    postObserve: Object.freeze([...caps.postObserve]),
+    endOfTurn: caps.endOfTurn,
+    unsupported: Object.freeze([...caps.unsupported])
+  });
+}
+function immutableRuntimeAdapter(adapter) {
+  return Object.freeze(adapter);
+}
 function unknownToolFinding(toolName) {
   const name = toolName.length > 80 ? toolName.slice(0, 77) + "..." : toolName;
   const detail = 'Copilot tool "' + name + `" is not in TamperWard's explicit operation vocabulary`;
@@ -19963,7 +19974,7 @@ var init_adapter = __esm({
     init_contract();
     ClaudeRuntimeAdapter = class {
       name = "claude-code";
-      capabilities = {
+      capabilities = immutableRuntimeCapabilities({
         preDeny: OPERATION_KINDS.filter((kind) => kind !== "mcp" && kind !== "other"),
         postObserve: [],
         endOfTurn: true,
@@ -19974,7 +19985,7 @@ var init_adapter = __esm({
           "network-egress control",
           "identity / authentication"
         ]
-      };
+      });
       parseEvent(raw, phase) {
         try {
           return eventFrom(parseInput(raw), phase);
@@ -20071,7 +20082,7 @@ var init_adapter = __esm({
         return failClosedResult(outcome, detail, phase, (f, p) => this.denyPayload(f, p));
       }
     };
-    claudeAdapter = new ClaudeRuntimeAdapter();
+    claudeAdapter = immutableRuntimeAdapter(new ClaudeRuntimeAdapter());
   }
 });
 
@@ -20373,7 +20384,7 @@ var init_adapter2 = __esm({
        * stop, so those are declared; every real gap is named in `unsupported`. The
        * `probe:codex-runtime` harness is what may later justify moving a kind into `preDeny`.
        */
-      capabilities = {
+      capabilities = immutableRuntimeCapabilities({
         preDeny: [],
         postObserve: POST_OBSERVE,
         endOfTurn: true,
@@ -20383,7 +20394,7 @@ var init_adapter2 = __esm({
           "network-egress control",
           "identity / authentication"
         ]
-      };
+      });
       parseEvent(raw, phase) {
         return normalizeCodexEvent(raw, phase);
       }
@@ -20462,7 +20473,7 @@ var init_adapter2 = __esm({
         return failClosedResult(outcome, detail, phase, (f, p) => this.denyPayload(f, p));
       }
     };
-    codexAdapter = new CodexRuntimeAdapter();
+    codexAdapter = immutableRuntimeAdapter(new CodexRuntimeAdapter());
   }
 });
 
@@ -20703,7 +20714,7 @@ var init_adapter3 = __esm({
        * does not report. Every real gap is named in `unsupported`. The `probe:copilot-runtime`
        * harness is what may later justify moving a kind into `preDeny` or populating `postObserve`.
        */
-      capabilities = {
+      capabilities = immutableRuntimeCapabilities({
         preDeny: [],
         postObserve: [],
         endOfTurn: true,
@@ -20717,7 +20728,7 @@ var init_adapter3 = __esm({
           "network-egress control",
           "identity / authentication"
         ]
-      };
+      });
       parseEvent(raw, phase) {
         return normalizeCopilotEvent(raw, phase);
       }
@@ -20812,7 +20823,7 @@ var init_adapter3 = __esm({
         return failClosedResult(outcome, detail, phase, (f, p) => this.denyPayload(f, p));
       }
     };
-    copilotAdapter = new CopilotRuntimeAdapter();
+    copilotAdapter = immutableRuntimeAdapter(new CopilotRuntimeAdapter());
   }
 });
 
@@ -21150,7 +21161,7 @@ var init_adapter4 = __esm({
        * no post-execution veto). `endOfTurn` is true via `onAgentStop`. Every real gap is named in
        * `unsupported`, at the granularity #611 asks for.
        */
-      capabilities = {
+      capabilities = immutableRuntimeCapabilities({
         preDeny: [],
         postObserve: [],
         endOfTurn: true,
@@ -21162,7 +21173,7 @@ var init_adapter4 = __esm({
           "network-egress control",
           "identity / authentication"
         ]
-      };
+      });
       parseEvent(raw, phase) {
         return normalizeCopilotSdkEvent(raw, phase);
       }
@@ -21257,7 +21268,7 @@ var init_adapter4 = __esm({
         return failClosedResult(outcome, detail, phase, (f, p) => this.denyPayload(f, p));
       }
     };
-    copilotSdkAdapter = new CopilotSdkHostedAdapter();
+    copilotSdkAdapter = immutableRuntimeAdapter(new CopilotSdkHostedAdapter());
   }
 });
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "tamperward",
-  "version": "2.39.1",
+  "version": "2.39.2",
   "description": "The deterministic agent-integrity gate. One ruleset, evaluated on the actual diff/commands as a verdict, enforced everywhere a change can be made.",
   "license": "Apache-2.0",
   "author": "hexrift",