tamperward 2.39.16 → 2.39.18

package/dist/cli/index.js

@@ -20109,11 +20109,10 @@ function neutralOnlyCaveat(detected) {
   const neutral = detected.filter((r) => r.steering === "neutral");
   if (neutral.length === 0) return null;
   const names = neutral.map((r) => r.label).join(", ");
-  const tracking = [...new Set(neutral.map((r) => r.adapterTracking).filter(Boolean))].join(", ");
   const claudeAlso = hasInLoopRuntime(detected);
   const lead = claudeAlso ? `In-loop steering (deny-before-execute) ships for Claude Code only today: Claude Code here gets it, but on ${names} your live protection is ` : `In-loop steering (deny-before-execute) ships for Claude Code only today, so on ${names} your live protection is `;
   const tail = claudeAlso ? "" : " The Claude hook wiring is still written and is inert unless Claude Code runs in this repository.";
-  return `${lead}the agent-neutral layers: pre-commit and CI.${tail}${tracking ? ` A native in-loop adapter is tracked in ${tracking}.` : ""}`;
+  return `${lead}the agent-neutral layers: pre-commit and CI.${tail}`;
 }
 var KNOWN_RUNTIMES;
 var init_runtimes = __esm({
@@ -20138,24 +20137,21 @@ var init_runtimes = __esm({
         label: "Cursor",
         markers: [".cursor", ".cursorrules"],
         steering: "neutral",
-        adapterTracking: "#482",
-        note: "agent-neutral layers (pre-commit + CI) today; a native in-loop adapter is tracked in #482."
+        note: "agent-neutral layers (pre-commit + CI) today; no in-loop adapter ships for Cursor."
       },
       {
         id: "copilot",
         label: "GitHub Copilot",
         markers: [".github/copilot-instructions.md", ".github/copilot"],
         steering: "neutral",
-        adapterTracking: "#482",
-        note: "agent-neutral layers (pre-commit + CI) today; a native in-loop adapter is tracked in #482."
+        note: "agent-neutral layers (pre-commit + CI) today; the experimental Copilot adapters are not qualified for in-loop steering (see `tamperward runtime verify`)."
       },
       {
         id: "codex",
         label: "an AGENTS.md-aware agent (e.g. Codex)",
         markers: [".codex", "AGENTS.md"],
         steering: "neutral",
-        adapterTracking: "#482",
-        note: "agent-neutral layers (pre-commit + CI) today; a native in-loop adapter is tracked in #482."
+        note: "agent-neutral layers (pre-commit + CI) today; the experimental Codex adapter is not qualified for in-loop steering (see `tamperward runtime verify`)."
       }
     ]);
   }
@@ -22157,7 +22153,8 @@ function resolveHookConfigHash(canonicalId, cwd) {
     return sha16(JSON.stringify(interventionWiring(cwd)));
   }
   const files = {
-    "github-copilot-cli": join27(cwd, ".github", "hooks", "tamperward.json")
+    "github-copilot-cli": join27(cwd, ".github", "hooks", "tamperward.json"),
+    codex: join27(cwd, ".codex", "config.toml")
   };
   const file = files[canonicalId];
   if (!file || !existsSync14(file)) return null;
@@ -22690,7 +22687,7 @@ async function runOnboard(opts, io = {}) {
         if (!adapter) {
           status(
             "QUALIFY",
-            `${runtime.label}: no shipped qualification adapter; neutral layers remain the live protection. See #602 before treating this runtime as in-loop qualified.`,
+            `${runtime.label}: no shipped qualification adapter; neutral layers remain the live protection.`,
             "warn"
           );
           return;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "tamperward",
-  "version": "2.39.16",
+  "version": "2.39.18",
   "description": "The deterministic agent-integrity gate. One ruleset, evaluated on the actual diff/commands as a verdict, enforced everywhere a change can be made.",
   "license": "Apache-2.0",
   "author": "hexrift",