tamperward 2.39.20 → 2.39.22

package/dist/cli/index.js

@@ -20194,7 +20194,7 @@ function steeringUnavailableFinding(detail) {
 function failClosedResult(outcome, detail, phase, denyPayload) {
   const findings = [steeringUnavailableFinding(detail)];
   const wire = denyPayload(findings, phase);
-  return { outcome, detail, wire, decision: { verdict: "deny", findings, reason: wire } };
+  return { outcome, detail, wire, unavailableReason: outcome, decision: { verdict: "deny", findings, reason: wire } };
 }
 var STEERING_PHASES, CONTRACT_TO_RESEARCH_LAYER, OPERATION_KINDS;
 var init_contract = __esm({
@@ -21524,7 +21524,13 @@ var init_adapter4 = __esm({
           }
           const swept = stopFromRaw(stopInput, defaultCwd, idv.trustedRoot);
           const findings = swept.findings ? [...swept.findings] : [];
-          return { outcome: "ok", wire: swept.stdout, decision: { verdict: swept.stdout ? "deny" : "allow", findings, reason: swept.stdout || void 0 } };
+          const sweepFailedClosed = findings.some((f) => f.rule === "tamperward-unavailable");
+          return {
+            outcome: "ok",
+            wire: swept.stdout,
+            ...sweepFailedClosed ? { unavailableReason: "end-of-turn-sweep" } : {},
+            decision: { verdict: swept.stdout ? "deny" : "allow", findings, reason: swept.stdout || void 0 }
+          };
         }
         if (parsed.operation.kind === "unknown") {
           const detail = `unrecognized Copilot SDK permission request ${parsed.operation.name}; refusing to evaluate it as a no-op`;
@@ -21532,7 +21538,7 @@ var init_adapter4 = __esm({
           const wire = this.denyPayload(findings, "pre-action");
           return { outcome: "ok", wire, detail, decision: { verdict: "deny", findings, reason: wire } };
         }
-        let stage = "repo-context";
+        let stage = "baseline";
         try {
           const root = idv.trustedRoot ?? repoRoot(defaultCwd ?? process.cwd());
           stage = "baseline";
@@ -21661,13 +21667,13 @@ var init_evidence = __esm({
             id: "pre-deny:shell",
             result: "proven",
             capture_path: "returned-reject",
-            detail: "returned-reject path (permission.completed result.kind denied): a rejected permission decision blocked shell tool dispatch \u2014 protected state not mutated (shell-pre-deny observation, boundary seq 2 < completion seq 3)"
+            detail: "returned-reject path (frozen permission-gate signature: denied / 96ed60fc6898cdfa): a rejected permission decision blocked shell tool dispatch \u2014 protected state not mutated (shell-pre-deny observation, boundary seq 2 < completion seq 3)"
           },
           {
             id: "hook-not-invoked",
             result: "proven",
             capture_path: "callback-failure",
-            detail: "callback-failure path: a broken permission callback (sync-throw, reject and adapter-throw, independently) failed CLOSED \u2014 the tool did not dispatch and protected state stayed intact"
+            detail: "callback-failure path (frozen permission-gate signature: denied / ebf2100b9c49ae12): a broken permission callback (sync-throw, reject and adapter-throw, independently) failed CLOSED \u2014 the tool did not dispatch and protected state stayed intact"
           },
           {
             id: "transport:timeout",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "tamperward",
-  "version": "2.39.20",
+  "version": "2.39.22",
   "description": "The deterministic agent-integrity gate. One ruleset, evaluated on the actual diff/commands as a verdict, enforced everywhere a change can be made.",
   "license": "Apache-2.0",
   "author": "hexrift",