tamperward 2.39.12 → 2.39.14

package/dist/cli/index.js

@@ -791,6 +791,37 @@ function readStateFile(abs) {
     `${abs} ${notARegularFile(e)}; the gate reads its state files only as regular files \u2014 remove what stands there so the state can be re-established`
   );
 }
+function openRegular(abs, refused) {
+  let st;
+  try {
+    st = lstatSync2(abs);
+  } catch (e) {
+    const code2 = errCode(e);
+    if (code2 === "ENOENT" || code2 === "ENOTDIR") return null;
+    throw new StateFileError(`${abs} cannot be read (${errText(e)})${refused}`);
+  }
+  if (!st.isFile()) throw new StateFileError(`${abs} ${notARegularFile(classify(abs, st))}${refused}`);
+  let fd;
+  try {
+    fd = openSync(abs, O_READ);
+  } catch (e) {
+    const code2 = errCode(e);
+    if (code2 === "ENOENT") return null;
+    throw new StateFileError(
+      `${abs} ${code2 === "ELOOP" || code2 === "ENXIO" ? `changed shape while it was being opened (${errText(e)})` : `cannot be read (${errText(e)})`}${refused}`
+    );
+  }
+  let now;
+  try {
+    now = fstatSync(fd);
+  } catch (e) {
+    closeSync(fd);
+    throw new StateFileError(`${abs} cannot be read (${errText(e)})${refused}`);
+  }
+  if (now.isFile()) return fd;
+  closeSync(fd);
+  throw new StateFileError(`${abs} is a ${now.isDirectory() ? "directory" : irregularName(now)}${refused}`);
+}
 function stateDirectory(gitDir3) {
   const dir = join3(gitDir3, "tamperward");
   const st = lstatSync2(dir, { throwIfNoEntry: false });
@@ -12432,7 +12463,7 @@ var init_fs_events = __esm({
 
 // src/cli/audit.ts
 import { createHash as createHash6, randomBytes as randomBytes2 } from "node:crypto";
-import { closeSync as closeSync4, existsSync as existsSync5, mkdirSync as mkdirSync5, openSync as openSync4, readSync as readSync3 } from "node:fs";
+import { closeSync as closeSync4, mkdirSync as mkdirSync5, readSync as readSync3 } from "node:fs";
 import { dirname as dirname4, isAbsolute as isAbsolute8, join as join13, resolve as resolve4 } from "node:path";
 function sessionHash(sessionId) {
   if (!sessionId) return void 0;
@@ -12552,7 +12583,8 @@ function parseAuditLine(line, lineNumber) {
   return parseAuditEvent(value, lineNumber);
 }
 function forEachAuditLine(file, onLine, maxLineBytes = MAX_AUDIT_LINE_BYTES) {
-  const fd = openSync4(file, "r");
+  const fd = openRegular(file, STATS_READ_REFUSED);
+  if (fd === null) return false;
   try {
     const chunk = Buffer.allocUnsafe(64 * 1024);
     let pending = [];
@@ -12592,6 +12624,7 @@ function forEachAuditLine(file, onLine, maxLineBytes = MAX_AUDIT_LINE_BYTES) {
   } finally {
     closeSync4(fd);
   }
+  return true;
 }
 function parseSince(value, nowMs = Date.now()) {
   const relative13 = /^(\d+)(m|h|d)$/.exec(value);
@@ -12654,11 +12687,6 @@ function createAuditAggregator() {
     }
   };
 }
-function summarizeAudit(events) {
-  const aggregator = createAuditAggregator();
-  for (const event of events) aggregator.add(event);
-  return aggregator.finish();
-}
 function renderAuditStats(summary) {
   const out3 = [
     "TamperWard audit stats",
@@ -12691,23 +12719,18 @@ function runStats(opts = {}) {
   const file = opts.file ? isAbsolute8(opts.file) ? opts.file : resolve4(cwd, opts.file) : configured && configured !== "auto" ? isAbsolute8(configured) ? configured : resolve4(cwd, configured) : defaultAuditPath(cwd);
   const cutoff = opts.since ? parseSince(opts.since) : null;
   if (!file) throw new Error("stats needs --file outside a Git repository");
-  if (!existsSync5(file)) {
-    if (explicitFile) throw new Error(`audit file not found: ${file}`);
-    const empty2 = summarizeAudit([]);
-    process.stdout.write(opts.json ? JSON.stringify(empty2) + "\n" : renderAuditStats(empty2));
-    return 0;
-  }
   const aggregator = createAuditAggregator();
-  forEachAuditLine(file, (line, lineNumber) => {
+  const read = forEachAuditLine(file, (line, lineNumber) => {
     const event = parseAuditLine(line, lineNumber);
     if (cutoff !== null && Date.parse(event.timestamp) < cutoff) return;
     aggregator.add(event);
   });
+  if (!read && explicitFile) throw new Error(`audit file not found: ${file}`);
   const summary = aggregator.finish();
   process.stdout.write(opts.json ? JSON.stringify(summary) + "\n" : renderAuditStats(summary));
   return 0;
 }
-var AUDIT_SCHEMA_VERSION, AUDIT_LOG_ENV, MAX_AUDIT_LINE_BYTES, ALLOWED_KEYS;
+var AUDIT_SCHEMA_VERSION, AUDIT_LOG_ENV, MAX_AUDIT_LINE_BYTES, ALLOWED_KEYS, STATS_READ_REFUSED;
 var init_audit = __esm({
   "src/cli/audit.ts"() {
     "use strict";
@@ -12727,11 +12750,12 @@ var init_audit = __esm({
       "decision",
       "session"
     ]);
+    STATS_READ_REFUSED = "; stats reads the audit log only as a regular file \u2014 remove what stands there so the log can be read";
   }
 });
 
 // src/cli/hook.ts
-import { readFileSync as readFileSync6, writeFileSync as writeFileSync5, existsSync as existsSync6 } from "node:fs";
+import { readFileSync as readFileSync6, writeFileSync as writeFileSync5, existsSync as existsSync5 } from "node:fs";
 import { createHash as createHash7 } from "node:crypto";
 function setSnapshotCache(cache3) {
   snapshotCache = cache3;
@@ -13028,7 +13052,7 @@ function turnTransientBlocks(cwd, sessionId, policy, changes) {
     recordObserverHealth(cwd, sessionId, telemetry.state, telemetry.reason);
   }
   const cp = cursorPath(cwd, sessionId);
-  if (!existsSync6(log)) return none;
+  if (!existsSync5(log)) return none;
   let offset = 0;
   const cursorText = cp ? readStateFile(cp) : null;
   if (cursorText !== null) {
@@ -13306,7 +13330,7 @@ var init_ptree_cache = __esm({
 });
 
 // src/cli/hook-service.ts
-import { chmodSync, existsSync as existsSync7, lstatSync as lstatSync8, mkdirSync as mkdirSync6, readFileSync as readFileSync7, rmSync as rmSync5, writeFileSync as writeFileSync6 } from "node:fs";
+import { chmodSync, existsSync as existsSync6, lstatSync as lstatSync8, mkdirSync as mkdirSync6, readFileSync as readFileSync7, rmSync as rmSync5, writeFileSync as writeFileSync6 } from "node:fs";
 import { createConnection as createConnection2, createServer } from "node:net";
 import { realpathSync as realpathSync4 } from "node:fs";
 import { sep } from "node:path";
@@ -13394,7 +13418,7 @@ function removeQuietly(p) {
   }
 }
 function ensurePrivateDir(dir, uid) {
-  if (!existsSync7(dir)) mkdirSync6(dir, { recursive: true, mode: 448 });
+  if (!existsSync6(dir)) mkdirSync6(dir, { recursive: true, mode: 448 });
   const st = lstatSync8(dir);
   if (!st.isDirectory()) throw new Error(`${dir} is not a directory`);
   if (st.uid !== uid) throw new Error(`${dir} is owned by uid ${st.uid}, not ${uid}; refusing to serve from it`);
@@ -13591,7 +13615,7 @@ async function stopHookService(paths, expectedRoot) {
         process.kill(st.pid, "SIGTERM");
       } catch {
       }
-      const gone = () => !pidAlive2(st.pid) || !existsSync7(paths.socket);
+      const gone = () => !pidAlive2(st.pid) || !existsSync6(paths.socket);
       const until = Date.now() + STOP_WAIT_MS;
       while (!gone() && Date.now() < until) sleepSync(50);
       if (!gone()) throw new Error(`hook service pid ${st.pid} did not exit within ${STOP_WAIT_MS / 1e3}s`);
@@ -13828,7 +13852,7 @@ var init_verifier_limits = __esm({
 // src/cli/init.ts
 import { execFileSync as execFileSync6 } from "node:child_process";
 import { createHash as createHash8 } from "node:crypto";
-import { existsSync as existsSync8, mkdirSync as mkdirSync7, readFileSync as readFileSync8, realpathSync as realpathSync5 } from "node:fs";
+import { existsSync as existsSync7, mkdirSync as mkdirSync7, readFileSync as readFileSync8, realpathSync as realpathSync5 } from "node:fs";
 import { basename as basename3, dirname as dirname5, isAbsolute as isAbsolute9, join as join15, relative as relative4, resolve as resolve6 } from "node:path";
 function gitConfig(cwd, key2) {
   try {
@@ -13932,7 +13956,7 @@ function verifierCandidates(cwd) {
     if (/^\s*\[tool\.pytest(?:\.ini_options)?\]\s*$/m.test(pyproject)) add("pytest");
   } catch {
   }
-  if (existsSync8(join15(cwd, "pytest.ini"))) add("pytest");
+  if (existsSync7(join15(cwd, "pytest.ini"))) add("pytest");
   try {
     const setupCfg = readFileSync8(join15(cwd, "setup.cfg"), "utf8");
     if (/^\s*\[tool:pytest\]\s*$/m.test(setupCfg)) add("pytest");
@@ -13992,7 +14016,7 @@ function planPolicy(cwd) {
   const path = join15(cwd, POLICY_FILE);
   const refused = refuseNonRegular(path);
   if (refused) return { item: "policy", path: POLICY_FILE, status: "error", detail: refused };
-  if (existsSync8(path)) {
+  if (existsSync7(path)) {
     try {
       loadPolicy(cwd);
     } catch (e) {
@@ -14011,7 +14035,7 @@ function planPolicy(cwd) {
 function planGitignore(cwd) {
   const rel = ".gitignore";
   const path = join15(cwd, rel);
-  if (!existsSync8(join15(cwd, "node_modules"))) return null;
+  if (!existsSync7(join15(cwd, "node_modules"))) return null;
   let existing = "";
   let kind;
   try {
@@ -14076,7 +14100,7 @@ function planClaudeHooks(cwd) {
   const refused = refuseNonRegular(path);
   if (refused) return { item: "agent", path: rel, status: "error", detail: refused };
   let settings = {};
-  if (existsSync8(path)) {
+  if (existsSync7(path)) {
     let parsed;
     try {
       parsed = JSON.parse(readFileSync8(path, "utf8"));
@@ -14128,7 +14152,7 @@ function planClaudeHooks(cwd) {
   return {
     item: "agent",
     path: rel,
-    status: existsSync8(path) ? "update" : "create",
+    status: existsSync7(path) ? "update" : "create",
     detail: [
       needPre && "wire PreToolUse deny",
       needStop && "wire Stop sweep",
@@ -14172,7 +14196,7 @@ function hooksDir(cwd) {
     if (out3) return resolve6(cwd, out3);
   } catch {
   }
-  return existsSync8(join15(cwd, ".git")) ? join15(cwd, ".git", "hooks") : null;
+  return existsSync7(join15(cwd, ".git")) ? join15(cwd, ".git", "hooks") : null;
 }
 function display(cwd, path) {
   const rel = relative4(cwd, path);
@@ -14199,11 +14223,11 @@ function planPreCommit(cwd) {
   const skip = (detail) => ({ item: "pre-commit", path: "(none)", status: "skip", detail });
   let path;
   let note;
-  if (existsSync8(join15(cwd, ".husky"))) {
+  if (existsSync7(join15(cwd, ".husky"))) {
     path = join15(cwd, ".husky", "pre-commit");
     note = "husky";
   } else {
-    const managed = MANAGED_HOOKS.find((m) => m.configs.some((c) => existsSync8(join15(cwd, c))));
+    const managed = MANAGED_HOOKS.find((m) => m.configs.some((c) => existsSync7(join15(cwd, c))));
     if (managed) {
       return skip(`${managed.name} manages this repository's hooks and regenerates them on install, so a line in the hooks directory would not last \u2014 ${managed.hint}`);
     }
@@ -14221,7 +14245,7 @@ function planPreCommit(cwd) {
   const rel = display(cwd, path);
   const refused = refuseNonRegular(path);
   if (refused) return { item: "pre-commit", path: rel, status: "error", detail: refused };
-  const existing = existsSync8(path) ? readFileSync8(path, "utf8") : null;
+  const existing = existsSync7(path) ? readFileSync8(path, "utf8") : null;
   const hookMode = () => existingMode(path, 493) | 73;
   if (existing === null) {
     return {
@@ -14352,7 +14376,7 @@ function planWorkflow(cwd, force) {
   };
   const refused = refuseNonRegular(path);
   if (refused) return { item: "ci", path: rel, status: "error", detail: refused };
-  if (!existsSync8(path)) {
+  if (!existsSync7(path)) {
     return {
       item: "ci",
       path: rel,
@@ -14710,7 +14734,7 @@ var init_fingerprint = __esm({
 // src/dependency-env.ts
 import { createHash as createHash10 } from "node:crypto";
 import {
-  existsSync as existsSync9,
+  existsSync as existsSync8,
   lstatSync as lstatSync9,
   readdirSync as readdirSync3,
   readFileSync as readFileSync9,
@@ -14864,7 +14888,7 @@ function snapshot(roots, probes, cwd) {
   const h = createHash10("sha256");
   for (const probe of probes) {
     h.update(
-      "probe\0" + probe.kind + "\0" + probe.path + "\0" + (existsSync9(probe.path) ? "present" : "absent") + "\0"
+      "probe\0" + probe.kind + "\0" + probe.path + "\0" + (existsSync8(probe.path) ? "present" : "absent") + "\0"
     );
   }
   for (const root of roots) fingerprintRoot(root, cwd, h);
@@ -14923,7 +14947,7 @@ function resolveExecutable(token, cwd, env) {
   if (token.includes("/") || token.includes("\\")) {
     const path = isAbsolute10(token) ? token : resolve7(cwd, token);
     try {
-      return existsSync9(path) ? realpathSync6(path) : null;
+      return existsSync8(path) ? realpathSync6(path) : null;
     } catch {
       return null;
     }
@@ -14931,7 +14955,7 @@ function resolveExecutable(token, cwd, env) {
   for (const entry of (env.PATH ?? "").split(delimiter).filter(Boolean)) {
     const candidate = resolve7(entry, token);
     try {
-      if (existsSync9(candidate) && statSync3(candidate).isFile()) return realpathSync6(candidate);
+      if (existsSync8(candidate) && statSync3(candidate).isFile()) return realpathSync6(candidate);
     } catch {
     }
   }
@@ -14954,7 +14978,7 @@ function inferredVenvFromToken(token, cwd) {
   const parentName = basename4(parent).toLowerCase();
   if (parentName !== "bin" && parentName !== "scripts") return null;
   const root = dirname6(parent);
-  return existsSync9(join16(root, "pyvenv.cfg")) ? root : null;
+  return existsSync8(join16(root, "pyvenv.cfg")) ? root : null;
 }
 function unsupportedEcosystem(command, token) {
   const name = token ? basename4(token).toLowerCase() : "";
@@ -14970,11 +14994,11 @@ function inferredVenv(executable) {
   const parentName = basename4(parent).toLowerCase();
   if (parentName !== "bin" && parentName !== "scripts") return null;
   const root = dirname6(parent);
-  return existsSync9(join16(root, "pyvenv.cfg")) ? root : null;
+  return existsSync8(join16(root, "pyvenv.cfg")) ? root : null;
 }
 function venvProblem(root) {
   const cfg = join16(root, "pyvenv.cfg");
-  if (!existsSync9(cfg)) return "VIRTUAL_ENV " + JSON.stringify(root) + " has no pyvenv.cfg";
+  if (!existsSync8(cfg)) return "VIRTUAL_ENV " + JSON.stringify(root) + " has no pyvenv.cfg";
   try {
     const body = readFileSync9(cfg, "utf8");
     if (/^\s*include-system-site-packages\s*=\s*true\s*$/im.test(body)) {
@@ -15001,7 +15025,7 @@ function discoverDependencyEnvironment(cwdInput, command, env = process.env) {
   };
   try {
     const nodeModules = join16(cwd, "node_modules");
-    if (existsSync9(nodeModules)) addRoot("node_modules", nodeModules);
+    if (existsSync8(nodeModules)) addRoot("node_modules", nodeModules);
     else probes.push({ kind: "node_modules", path: nodeModules });
     const token = firstExecutable(command);
     const executable = resolveExecutable(token, cwd, env);
@@ -15013,7 +15037,7 @@ function discoverDependencyEnvironment(cwdInput, command, env = process.env) {
       venv = resolve7(env.VIRTUAL_ENV);
     } else {
       venv = inferredVenv(executable) ?? inferredVenvFromToken(token, cwd);
-      if (!venv && /(?:^|\s)uv\s+run(?:\s|$)/.test(command) && existsSync9(join16(cwd, ".venv", "pyvenv.cfg"))) {
+      if (!venv && /(?:^|\s)uv\s+run(?:\s|$)/.test(command) && existsSync8(join16(cwd, ".venv", "pyvenv.cfg"))) {
         venv = join16(cwd, ".venv");
       }
     }
@@ -16616,7 +16640,7 @@ var init_verification_receipt = __esm({
 // src/cli/verify.ts
 import { execFileSync as execFileSync9, spawnSync as spawnSync3 } from "node:child_process";
 import { createHash as createHash14 } from "node:crypto";
-import { chmodSync as chmodSync2, cpSync, lstatSync as lstatSync10, mkdirSync as mkdirSync10, mkdtempSync as mkdtempSync3, readFileSync as readFileSync12, readlinkSync as readlinkSync3, rmSync as rmSync9, symlinkSync, writeFileSync as writeFileSync8, existsSync as existsSync10 } from "node:fs";
+import { chmodSync as chmodSync2, cpSync, lstatSync as lstatSync10, mkdirSync as mkdirSync10, mkdtempSync as mkdtempSync3, readFileSync as readFileSync12, readlinkSync as readlinkSync3, rmSync as rmSync9, symlinkSync, writeFileSync as writeFileSync8, existsSync as existsSync9 } from "node:fs";
 import { tmpdir as tmpdir4 } from "node:os";
 import { dirname as dirname10, isAbsolute as isAbsolute11, join as join21, relative as relative6, resolve as resolve9, sep as sep4 } from "node:path";
 function oracleAssuranceReport() {
@@ -16812,7 +16836,7 @@ function probeFilesystemCaseSensitivity(dir) {
   const lower = join21(dir, ".tw-case-probe-a");
   try {
     writeFileSync8(upper, "", { flag: "wx" });
-    return !existsSync10(lower);
+    return !existsSync9(lower);
   } finally {
     rmSync9(upper, { force: true });
   }
@@ -18605,7 +18629,7 @@ raise SystemExit(0)
 
 // src/cli/doctor.ts
 import { execFileSync as execFileSync11 } from "node:child_process";
-import { existsSync as existsSync11, readFileSync as readFileSync14, readdirSync as readdirSync5 } from "node:fs";
+import { existsSync as existsSync10, readFileSync as readFileSync14, readdirSync as readdirSync5 } from "node:fs";
 import { join as join23, resolve as resolve11 } from "node:path";
 function lifecyclePlatformCheck(platform = process.platform, linuxPython = platform === "linux" ? trustedLinuxPython() : null) {
   if (platform === "linux") {
@@ -18661,7 +18685,7 @@ function wiringState(status, authority) {
   return authority ? "BROKEN" : "WARN";
 }
 function pinsInFile(path) {
-  if (!existsSync11(path)) return [];
+  if (!existsSync10(path)) return [];
   let src = "";
   try {
     src = readFileSync14(path, "utf8");
@@ -18685,7 +18709,7 @@ function workflowPermissionCheck(cwd, workflowRels = [".github/workflows/tamperw
   const warnings = [];
   for (const rel of workflowRels) {
     const path = resolve11(cwd, rel);
-    if (!existsSync11(path)) {
+    if (!existsSync10(path)) {
       broken.push(`${rel} is missing`);
       continue;
     }
@@ -19090,7 +19114,7 @@ function diagnose(opts = {}) {
   } else {
     const workflowDirRel = ".github/workflows";
     const workflowDir = resolve11(cwd, workflowDirRel);
-    if (!existsSync11(workflowDir)) {
+    if (!existsSync10(workflowDir)) {
       return fail("ci-verifier", `${workflowDirRel}: workflow directory does not exist`);
     }
     let entries;
@@ -19110,7 +19134,7 @@ function diagnose(opts = {}) {
   const authorityWorkflows = [];
   for (const workflowRel of workflowRels) {
     const workflowPath = resolve11(cwd, workflowRel);
-    if (!existsSync11(workflowPath)) {
+    if (!existsSync10(workflowPath)) {
       return fail("ci-verifier", `${workflowRel}: workflow does not exist`);
     }
     let doc;
@@ -19429,7 +19453,7 @@ var init_status2 = __esm({
 // src/cli/trace-verify.ts
 import { execFileSync as execFileSync12, spawnSync as spawnSync5 } from "node:child_process";
 import {
-  existsSync as existsSync12,
+  existsSync as existsSync11,
   mkdtempSync as mkdtempSync5,
   readFileSync as readFileSync15,
   readdirSync as readdirSync6,
@@ -19688,7 +19712,7 @@ function materializeBase(base, cwd, dest) {
   }
   const hostModules = join24(cwd, "node_modules");
   const tracedModules = join24(dest, "node_modules");
-  if (existsSync12(hostModules) && !existsSync12(tracedModules)) {
+  if (existsSync11(hostModules) && !existsSync11(tracedModules)) {
     symlinkSync2(resolve12(hostModules), tracedModules, "dir");
   }
 }
@@ -20000,7 +20024,7 @@ var init_immutable = __esm({
 });
 
 // src/runtimes.ts
-import { existsSync as existsSync13, readFileSync as readFileSync16 } from "node:fs";
+import { existsSync as existsSync12, readFileSync as readFileSync16 } from "node:fs";
 import { join as join25 } from "node:path";
 function isRecord6(x) {
   return typeof x === "object" && x !== null && !Array.isArray(x);
@@ -20030,7 +20054,7 @@ function claudeSettingsBeyondTamperward(cwd) {
   const path = join25(cwd, ".claude", "settings.json");
   let raw;
   try {
-    if (!existsSync13(path)) return false;
+    if (!existsSync12(path)) return false;
     raw = readFileSync16(path, "utf8");
   } catch {
     return false;
@@ -20057,7 +20081,7 @@ function detectRuntimes(cwd) {
   for (const rt of KNOWN_RUNTIMES) {
     const marker = rt.markers.find((m) => {
       try {
-        return existsSync13(join25(cwd, m));
+        return existsSync12(join25(cwd, m));
       } catch {
         return false;
       }
@@ -20149,15 +20173,15 @@ function immutableRuntimeCapabilities(caps) {
 function immutableRuntimeAdapter(adapter) {
   return Object.freeze(adapter);
 }
-function unknownToolFinding(toolName) {
+function unknownToolFinding(runtime, toolName) {
   const name = toolName.length > 80 ? toolName.slice(0, 77) + "..." : toolName;
-  const detail = 'Copilot tool "' + name + `" is not in TamperWard's explicit operation vocabulary`;
+  const detail = runtime + ' tool "' + name + `" is not in TamperWard's explicit operation vocabulary`;
   return {
     rule: "unknown-tool",
     severity: "block",
     message: "TamperWard cannot safely classify " + detail + "; it is denied rather than treated as a no-op.",
     evidence: detail,
-    remediation: "Confirm the tool is non-mutating and add it to the Copilot adapter allowlist, or obtain an explicit sign-off before retrying.",
+    remediation: "Confirm the tool is non-mutating and add it to the " + runtime + " adapter allowlist, or obtain an explicit sign-off before retrying.",
     signoff: { required: true, command: 'tamperward allow --reason "..."' }
   };
 }
@@ -20568,7 +20592,8 @@ function codexOperationKind(toolName) {
   if (FILE_EDIT_TOOLS.has(toolName)) return "file-edit";
   if (toolName.startsWith(MCP_PREFIX)) return "mcp";
   if (FILE_READ_TOOLS.has(toolName)) return "file-read";
-  return "other";
+  if (NON_MUTATING_TOOLS.has(toolName)) return "other";
+  return "unknown";
 }
 function inputFrom(parsed) {
   return {
@@ -20601,7 +20626,7 @@ function normalizeCodexEvent(raw, phase) {
   }
   return eventFrom2(inputFrom(parsed), phase);
 }
-var SHELL_TOOLS, FILE_EDIT_TOOLS, FILE_READ_TOOLS, MCP_PREFIX;
+var SHELL_TOOLS, FILE_EDIT_TOOLS, FILE_READ_TOOLS, NON_MUTATING_TOOLS, MCP_PREFIX;
 var init_schema = __esm({
   "src/adapters/codex/schema.ts"() {
     "use strict";
@@ -20609,6 +20634,7 @@ var init_schema = __esm({
     SHELL_TOOLS = /* @__PURE__ */ new Set(["Bash"]);
     FILE_EDIT_TOOLS = /* @__PURE__ */ new Set(["apply_patch", "Write", "Edit"]);
     FILE_READ_TOOLS = /* @__PURE__ */ new Set(["view_image"]);
+    NON_MUTATING_TOOLS = /* @__PURE__ */ new Set(["update_plan", "web_search"]);
     MCP_PREFIX = "mcp__";
   }
 });
@@ -20704,6 +20730,12 @@ var init_adapter2 = __esm({
           const findings = swept.findings ? [...swept.findings] : [];
           return { outcome: "ok", wire: swept.stdout, decision: { verdict: swept.stdout ? "deny" : "allow", findings, reason: swept.stdout || void 0 } };
         }
+        if (parsed.operation.kind === "unknown") {
+          const detail = `unrecognized Codex tool ${parsed.operation.name}; refusing to evaluate it as a no-op`;
+          const findings = [unknownToolFinding("Codex", parsed.operation.name)];
+          const wire = this.denyPayload(findings, "pre-action");
+          return { outcome: "ok", wire, detail, decision: { verdict: "deny", findings, reason: wire } };
+        }
         try {
           const root = idv.trustedRoot ?? repoRoot(defaultCwd ?? process.cwd());
           const sessionCwd = parsed.identity.claimedCwd ?? defaultCwd ?? process.cwd();
@@ -20841,7 +20873,7 @@ function copilotOperationKind(toolName) {
   if (FILE_EDIT_TOOLS2.has(name)) return "file-edit";
   if (name.startsWith(MCP_PREFIX2)) return "mcp";
   if (FILE_READ_TOOLS2.has(name)) return "file-read";
-  if (NON_MUTATING_TOOLS.has(name)) return "other";
+  if (NON_MUTATING_TOOLS2.has(name)) return "other";
   return "unknown";
 }
 function argsFrom(parsed) {
@@ -20905,7 +20937,7 @@ function copilotStopInput(raw) {
     ...input.stop_hook_active !== void 0 ? { stop_hook_active: input.stop_hook_active } : {}
   });
 }
-var SHELL_TOOLS2, FILE_EDIT_TOOLS2, FILE_READ_TOOLS2, NON_MUTATING_TOOLS, MCP_PREFIX2;
+var SHELL_TOOLS2, FILE_EDIT_TOOLS2, FILE_READ_TOOLS2, NON_MUTATING_TOOLS2, MCP_PREFIX2;
 var init_schema2 = __esm({
   "src/adapters/copilot/schema.ts"() {
     "use strict";
@@ -20913,7 +20945,7 @@ var init_schema2 = __esm({
     SHELL_TOOLS2 = /* @__PURE__ */ new Set(["bash", "powershell", "write_bash", "write_powershell"]);
     FILE_EDIT_TOOLS2 = /* @__PURE__ */ new Set(["create", "edit", "write", "multiedit", "apply_patch", "str_replace_editor"]);
     FILE_READ_TOOLS2 = /* @__PURE__ */ new Set(["view", "read", "grep", "rg", "glob"]);
-    NON_MUTATING_TOOLS = /* @__PURE__ */ new Set([
+    NON_MUTATING_TOOLS2 = /* @__PURE__ */ new Set([
       "read_bash",
       "read_powershell",
       "stop_bash",
@@ -21050,7 +21082,7 @@ var init_adapter3 = __esm({
         }
         if (parsed.operation.kind === "unknown") {
           const detail = `unrecognized Copilot tool ${parsed.operation.name}; refusing to evaluate it as a no-op`;
-          const findings = [unknownToolFinding(parsed.operation.name)];
+          const findings = [unknownToolFinding("Copilot", parsed.operation.name)];
           const wire = this.denyPayload(findings, "pre-action");
           return { outcome: "ok", wire, detail, decision: { verdict: "deny", findings, reason: wire } };
         }
@@ -21082,7 +21114,7 @@ var init_adapter3 = __esm({
 
 // src/adapters/copilot-sdk/changes.ts
 import { execFileSync as execFileSync13 } from "node:child_process";
-import { mkdtempSync as mkdtempSync6, writeFileSync as writeFileSync10, readFileSync as readFileSync17, rmSync as rmSync12, existsSync as existsSync14, realpathSync as realpathSync10 } from "node:fs";
+import { mkdtempSync as mkdtempSync6, writeFileSync as writeFileSync10, readFileSync as readFileSync17, rmSync as rmSync12, existsSync as existsSync13, realpathSync as realpathSync10 } from "node:fs";
 import { tmpdir as tmpdir7 } from "node:os";
 import { basename as basename5, dirname as dirname12, isAbsolute as isAbsolute16, relative as relative11, resolve as resolve15, join as join26 } from "node:path";
 function asStr4(v) {
@@ -21101,7 +21133,7 @@ function canonicalContainedTarget(abs, root) {
   }
   let dir = abs;
   const tail = [];
-  while (!existsSync14(dir)) {
+  while (!existsSync13(dir)) {
     const parent = dirname12(dir);
     if (parent === dir) break;
     tail.unshift(basename5(dir));
@@ -21929,7 +21961,7 @@ var init_runtime_qualification = __esm({
 
 // src/cli/runtime.ts
 import { execFileSync as execFileSync14 } from "node:child_process";
-import { existsSync as existsSync15, mkdirSync as mkdirSync11, readFileSync as readFileSync18 } from "node:fs";
+import { existsSync as existsSync14, mkdirSync as mkdirSync11, readFileSync as readFileSync18 } from "node:fs";
 import { join as join27, dirname as dirname13 } from "node:path";
 function storePath(cwd) {
   const dir = gitDir(cwd);
@@ -22110,7 +22142,7 @@ function resolveHookConfigHash(canonicalId, cwd) {
     "github-copilot-cli": join27(cwd, ".github", "hooks", "tamperward.json")
   };
   const file = files[canonicalId];
-  if (!file || !existsSync15(file)) return null;
+  if (!file || !existsSync14(file)) return null;
   try {
     const raw = readFileSync18(file, "utf8");
     let hooks = raw;
@@ -23588,7 +23620,7 @@ var init_record = __esm({
 // src/research/run.ts
 import { randomUUID as randomUUID2 } from "node:crypto";
 import { execFileSync as execFileSync16 } from "node:child_process";
-import { closeSync as closeSync5, existsSync as existsSync16, linkSync, mkdirSync as mkdirSync12, openSync as openSync5, readFileSync as readFileSync21, renameSync as renameSync4, rmSync as rmSync14, unlinkSync, writeFileSync as writeFileSync11, writeSync as writeSync2 } from "node:fs";
+import { closeSync as closeSync5, existsSync as existsSync15, linkSync, mkdirSync as mkdirSync12, openSync as openSync4, readFileSync as readFileSync21, renameSync as renameSync4, rmSync as rmSync14, unlinkSync, writeFileSync as writeFileSync11, writeSync as writeSync2 } from "node:fs";
 import { hostname } from "node:os";
 import { join as join29, resolve as resolve19 } from "node:path";
 function git7(args, cwd) {
@@ -23625,7 +23657,7 @@ function lockHolder(path) {
 function acquireResearchLock(ledger, breakStaleLock = false) {
   mkdirSync12(ledger, { recursive: true });
   const path = researchLockPath(ledger);
-  if (breakStaleLock && existsSync16(path)) {
+  if (breakStaleLock && existsSync15(path)) {
     const owner2 = readLockOwner(path);
     if (!owner2) {
       throw new ResearchError(`research output ${ledger} has an unreadable lock at ${path}; verify no run is active, then remove it deliberately`);
@@ -23668,7 +23700,7 @@ function acquireResearchLock(ledger, breakStaleLock = false) {
   const text = JSON.stringify(owner) + "\n";
   let fd = -1;
   try {
-    fd = openSync5(path, "wx", 384);
+    fd = openSync4(path, "wx", 384);
     writeSync2(fd, text);
     closeSync5(fd);
     fd = -1;
@@ -23998,7 +24030,7 @@ function runResearch(opts) {
       try {
         for (let pair = 1; pair <= pairs; pair++) {
           const path = pairRecordPath(ledger, task.id, pair);
-          if (!existsSync16(path)) continue;
+          if (!existsSync15(path)) continue;
           const existing = resumableRecord(path, {
             task: task.id,
             pair,
@@ -24118,7 +24150,7 @@ var init_run2 = __esm({
 });
 
 // src/research/ledger-files.ts
-import { closeSync as closeSync6, constants as constants5, fstatSync as fstatSync3, lstatSync as lstatSync12, openSync as openSync6, readFileSync as readFileSync22, readdirSync as readdirSync7, realpathSync as realpathSync12 } from "node:fs";
+import { closeSync as closeSync6, constants as constants5, fstatSync as fstatSync3, lstatSync as lstatSync12, openSync as openSync5, readFileSync as readFileSync22, readdirSync as readdirSync7, realpathSync as realpathSync12 } from "node:fs";
 import { join as join30, resolve as resolve20 } from "node:path";
 function lstatOrNull(path) {
   try {
@@ -24151,7 +24183,7 @@ function readRegularFile(path, realPairsDir, name) {
   const flags = constants5.O_RDONLY | (constants5.O_NOFOLLOW ?? 0);
   let fd;
   try {
-    fd = openSync6(path, flags);
+    fd = openSync5(path, flags);
   } catch (e) {
     throw new ResearchError(`cannot open ledger record ${path}: ${errorMessage(e)}`);
   }
@@ -24334,7 +24366,7 @@ var init_summarize = __esm({
 
 // src/research/init.ts
 import { createHash as createHash17 } from "node:crypto";
-import { existsSync as existsSync17, mkdirSync as mkdirSync13, readFileSync as readFileSync23, writeFileSync as writeFileSync12 } from "node:fs";
+import { existsSync as existsSync16, mkdirSync as mkdirSync13, readFileSync as readFileSync23, writeFileSync as writeFileSync12 } from "node:fs";
 import { basename as basename6, dirname as dirname15, resolve as resolve21 } from "node:path";
 function idFrom(repo) {
   const clean = repo.replace(/[\\/]$/, "").split(/[\\/]/).pop() || "task";
@@ -24346,7 +24378,7 @@ function createResearchManifest(opts) {
   if (!opts.prompt) throw new ResearchError("research init requires --prompt");
   if (!opts.verifyCommand) throw new ResearchError("research init requires --verify-command");
   const out3 = resolve21(opts.out);
-  if (existsSync17(out3)) throw new ResearchError(`research init refuses to overwrite ${out3}; choose a new path`);
+  if (existsSync16(out3)) throw new ResearchError(`research init refuses to overwrite ${out3}; choose a new path`);
   const id = opts.id ?? idFrom(opts.repo);
   if (!/^[A-Za-z0-9._-]+$/.test(id)) throw new ResearchError(`research init id must match [A-Za-z0-9._-] (got "${id}")`);
   if (opts.verifyBudget !== void 0 && (!Number.isFinite(opts.verifyBudget) || opts.verifyBudget <= 0)) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "tamperward",
-  "version": "2.39.12",
+  "version": "2.39.14",
   "description": "The deterministic agent-integrity gate. One ruleset, evaluated on the actual diff/commands as a verdict, enforced everywhere a change can be made.",
   "license": "Apache-2.0",
   "author": "hexrift",