tamperward 2.39.2 → 2.39.3

package/dist/cli/index.js

@@ -19758,6 +19758,29 @@ var init_trace_verify = __esm({
   }
 });
 
+// src/immutable.ts
+function isPlainData(value) {
+  if (value === null || typeof value !== "object") return false;
+  const proto = Object.getPrototypeOf(value);
+  return proto === Object.prototype || proto === Array.prototype || proto === null;
+}
+function deepFreeze(value) {
+  const seen = /* @__PURE__ */ new WeakSet();
+  const walk2 = (node) => {
+    if (!isPlainData(node) || seen.has(node)) return;
+    seen.add(node);
+    Object.freeze(node);
+    for (const key2 of Reflect.ownKeys(node)) walk2(Reflect.get(node, key2));
+  };
+  walk2(value);
+  return value;
+}
+var init_immutable = __esm({
+  "src/immutable.ts"() {
+    "use strict";
+  }
+});
+
 // src/runtimes.ts
 import { existsSync as existsSync17, readFileSync as readFileSync20 } from "node:fs";
 import { join as join25 } from "node:path";
@@ -19854,7 +19877,8 @@ var KNOWN_RUNTIMES;
 var init_runtimes = __esm({
   "src/runtimes.ts"() {
     "use strict";
-    KNOWN_RUNTIMES = [
+    init_immutable();
+    KNOWN_RUNTIMES = deepFreeze([
       {
         id: "claude-code",
         // Markers are Claude Code files `init` never writes, so detection never mistakes
@@ -19891,7 +19915,7 @@ var init_runtimes = __esm({
         adapterTracking: "#482",
         note: "agent-neutral layers (pre-commit + CI) today; a native in-loop adapter is tracked in #482."
       }
-    ];
+    ]);
   }
 });
 
@@ -19934,11 +19958,22 @@ function failClosedResult(outcome, detail, phase, denyPayload) {
   const wire = denyPayload(findings, phase);
   return { outcome, detail, wire, decision: { verdict: "deny", findings, reason: wire } };
 }
-var OPERATION_KINDS;
+var STEERING_PHASES, CONTRACT_TO_RESEARCH_LAYER, OPERATION_KINDS;
 var init_contract = __esm({
   "src/adapters/contract.ts"() {
     "use strict";
-    OPERATION_KINDS = ["shell", "file-edit", "file-read", "mcp", "other"];
+    init_immutable();
+    STEERING_PHASES = Object.freeze(["pre-action", "post-action", "end-of-turn"]);
+    CONTRACT_TO_RESEARCH_LAYER = deepFreeze([
+      { source: "pre-action", layer: "pre-tool-use", note: "synchronous pre-execution deny (Claude PreToolUse)" },
+      { source: "end-of-turn", layer: "stop-sweep", note: "mandatory end-of-turn reconciliation (Claude Stop)" },
+      {
+        source: "post-exit-envelope",
+        layer: "envelope",
+        note: "the run envelope around the whole agent process; post-action outcome observation lives here, not in a per-tool veto"
+      }
+    ]);
+    OPERATION_KINDS = Object.freeze(["shell", "file-edit", "file-read", "mcp", "other"]);
   }
 });
 
@@ -21288,24 +21323,24 @@ var init_registry = __esm({
     init_adapter2();
     init_adapter3();
     init_adapter4();
-    RUNTIME_ADAPTERS = [
+    RUNTIME_ADAPTERS = Object.freeze([
       claudeAdapter,
       codexAdapter,
       copilotAdapter,
       copilotSdkAdapter
-    ];
-    ADAPTER_LABELS = {
+    ]);
+    ADAPTER_LABELS = Object.freeze({
       "claude-code": "Claude Code",
       codex: "Codex",
       "github-copilot-cli": "GitHub Copilot CLI",
       "github-copilot-sdk-hosted": "GitHub Copilot SDK (hosted)"
-    };
-    ADAPTER_ALIASES = {
+    });
+    ADAPTER_ALIASES = Object.freeze({
       claude: "claude-code",
       copilot: "github-copilot-cli",
       "copilot-cli": "github-copilot-cli",
       "copilot-sdk": "github-copilot-sdk-hosted"
-    };
+    });
   }
 });
 
@@ -21330,7 +21365,8 @@ var RETAINED_EVIDENCE;
 var init_evidence = __esm({
   "src/adapters/evidence.ts"() {
     "use strict";
-    RETAINED_EVIDENCE = [
+    init_immutable();
+    RETAINED_EVIDENCE = deepFreeze([
       {
         ref: "copilot-sdk-capture-2026-09-20",
         source: "harness/adapters/copilot-sdk/evidence/capture-2026-09-20.json",
@@ -21371,7 +21407,7 @@ var init_evidence = __esm({
           }
         ]
       }
-    ];
+    ]);
   }
 });
 
@@ -21590,19 +21626,19 @@ function evidenceId(binding, assessments) {
   };
   return sha16(JSON.stringify(projection));
 }
-var CAPABILITY_STATES, RUNTIME_CAPABILITY_IDS, EVIDENCE_SOURCES, FINAL_AUTHORITY, FAIL_OPEN_RE, PRE_DENY_UNPROVEN_RE, TRANSPORT_UNPROVEN_RE, LIFECYCLE_ONLY_RE, POST_ACTION_RE, TRANSPORT_KEYWORDS, PRE_DENY_IDS, REQUIRED_IN_LOOP_IDS;
+var CAPABILITY_STATES, RUNTIME_CAPABILITY_IDS, EVIDENCE_SOURCES, IN_LOOP_AGGREGATES, FINAL_AUTHORITY, FAIL_OPEN_RE, PRE_DENY_UNPROVEN_RE, TRANSPORT_UNPROVEN_RE, LIFECYCLE_ONLY_RE, POST_ACTION_RE, TRANSPORT_KEYWORDS, PRE_DENY_IDS, REQUIRED_IN_LOOP_IDS;
 var init_runtime_qualification = __esm({
   "src/runtime-qualification.ts"() {
     "use strict";
-    CAPABILITY_STATES = [
+    CAPABILITY_STATES = Object.freeze([
       "PROVEN",
       "PARTIAL",
       "UNPROVEN",
       "UNSUPPORTED",
       "FAIL-OPEN",
       "INCONCLUSIVE"
-    ];
-    RUNTIME_CAPABILITY_IDS = [
+    ]);
+    RUNTIME_CAPABILITY_IDS = Object.freeze([
       "pre-deny:shell",
       "pre-deny:native-edit",
       "pre-deny:delete",
@@ -21620,8 +21656,8 @@ var init_runtime_qualification = __esm({
       "transport:empty",
       "hook-not-invoked",
       "detached/quiescence"
-    ];
-    EVIDENCE_SOURCES = [
+    ]);
+    EVIDENCE_SOURCES = Object.freeze([
       "adapter-declaration",
       // structural preDeny / postObserve / endOfTurn membership
       "adapter-unsupported",
@@ -21632,7 +21668,8 @@ var init_runtime_qualification = __esm({
       // a committed real-runtime evidence record proved it
       "not-declared"
       // absent from every declaration — no proof either way
-    ];
+    ]);
+    IN_LOOP_AGGREGATES = Object.freeze(["FULL", "PARTIAL", "NONE"]);
     FINAL_AUTHORITY = "AVAILABLE";
     FAIL_OPEN_RE = /fails?\s+open/i;
     PRE_DENY_UNPROVEN_RE = /pre-action deny|pre-deny|shell pre-deny/i;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "tamperward",
-  "version": "2.39.2",
+  "version": "2.39.3",
   "description": "The deterministic agent-integrity gate. One ruleset, evaluated on the actual diff/commands as a verdict, enforced everywhere a change can be made.",
   "license": "Apache-2.0",
   "author": "hexrift",