vigiles 14.7.0 → 14.9.0

package/dist/adapters/claude-code/agent-runtime.d.ts

@@ -23,25 +23,8 @@
  * harness-agnostic and fully testable.
  */
 import type { PurityLevel } from "../../core/effects.js";
-/**
- * Parse an agent's allowed-tools contract from its compiled markdown.
- *
- * Returns the list of allowed tool names, or `null` when the agent declares no
- * `tools:` line at all — which in Claude Code means it inherits EVERY tool (the
- * #1 footgun). `null` is the "no restriction" signal the decision logic honors;
- * an empty list (`tools:` with nothing after it) means "no tools allowed".
- */
-export declare function parseAgentTools(markdown: string): string[] | null;
-/**
- * Parse a comma/array tool list under an arbitrary frontmatter `key` (e.g.
- * `tools:` or `disallowedTools:`) via the shared lenient reader
- * (core/frontmatter-read.ts): a real YAML parse (so `key: [Read, "Bash"]` is a
- * native array and `key: Read, Bash` a comma scalar) with a regex salvage when
- * the block is malformed — the rail still reads the contract. `null` when the key
- * is absent (inherits all), `[]` when present-but-empty (no tools). Shared by the
- * rail (`tools:`) and the `disallowed-tools-contract` scan/lint.
- */
-export declare function parseAgentToolList(markdown: string, key: string): string[] | null;
+import { parseAgentTools, parseAgentToolList } from "./agent-tools.js";
+export { parseAgentTools, parseAgentToolList };
 /**
  * Parse the declared purity floor from a compiled agent's `.md` — the
  * `<!-- vigiles:purity:LEVEL -->` marker `compile` emits (see `purityMarker`).

package/dist/adapters/claude-code/agent-runtime.js

@@ -24,8 +24,7 @@
  * harness-agnostic and fully testable.
  */
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.parseAgentTools = parseAgentTools;
-exports.parseAgentToolList = parseAgentToolList;
+exports.parseAgentToolList = exports.parseAgentTools = void 0;
 exports.parseAgentPurity = parseAgentPurity;
 exports.decidePreToolUse = decidePreToolUse;
 exports.readActiveStack = readActiveStack;
@@ -39,36 +38,12 @@ exports.decideTaskDispatch = decideTaskDispatch;
 exports.evaluatePreToolUse = evaluatePreToolUse;
 const node_fs_1 = require("node:fs");
 const node_path_1 = require("node:path");
-const frontmatter_read_js_1 = require("../../core/frontmatter-read.js");
 const effects_js_1 = require("../../core/effects.js");
 const dialect_js_1 = require("./dialect.js");
 const effect_region_js_1 = require("./effect-region.js");
-// ---------------------------------------------------------------------------
-// Parse the tool contract from a compiled agent .md
-// ---------------------------------------------------------------------------
-/**
- * Parse an agent's allowed-tools contract from its compiled markdown.
- *
- * Returns the list of allowed tool names, or `null` when the agent declares no
- * `tools:` line at all — which in Claude Code means it inherits EVERY tool (the
- * #1 footgun). `null` is the "no restriction" signal the decision logic honors;
- * an empty list (`tools:` with nothing after it) means "no tools allowed".
- */
-function parseAgentTools(markdown) {
-    return parseAgentToolList(markdown, "tools");
-}
-/**
- * Parse a comma/array tool list under an arbitrary frontmatter `key` (e.g.
- * `tools:` or `disallowedTools:`) via the shared lenient reader
- * (core/frontmatter-read.ts): a real YAML parse (so `key: [Read, "Bash"]` is a
- * native array and `key: Read, Bash` a comma scalar) with a regex salvage when
- * the block is malformed — the rail still reads the contract. `null` when the key
- * is absent (inherits all), `[]` when present-but-empty (no tools). Shared by the
- * rail (`tools:`) and the `disallowed-tools-contract` scan/lint.
- */
-function parseAgentToolList(markdown, key) {
-    return (0, frontmatter_read_js_1.frontmatterList)((0, frontmatter_read_js_1.readFrontmatter)(markdown), key);
-}
+const agent_tools_js_1 = require("./agent-tools.js");
+Object.defineProperty(exports, "parseAgentTools", { enumerable: true, get: function () { return agent_tools_js_1.parseAgentTools; } });
+Object.defineProperty(exports, "parseAgentToolList", { enumerable: true, get: function () { return agent_tools_js_1.parseAgentToolList; } });
 const PURITY_RE = /<!--\s*vigiles:purity:(pure|bounded|unrestricted)\s*-->/;
 /**
  * Parse the declared purity floor from a compiled agent's `.md` — the
@@ -264,7 +239,7 @@ function evaluatePreToolUse(cwd, tool, command) {
         return { allow: true, message: "" };
     const md = (0, node_fs_1.readFileSync)(full, "utf-8");
     // 1) Tool-contract rail — the declared allowlist.
-    const rail = decidePreToolUse(parseAgentTools(md), tool);
+    const rail = decidePreToolUse((0, agent_tools_js_1.parseAgentTools)(md), tool);
     if (!rail.allow)
         return rail;
     // 2) Purity gate — the declared effect floor, refined by the live command.

package/dist/adapters/claude-code/agent-tools.d.ts

@@ -0,0 +1,20 @@
+/**
+ * Parse an agent's allowed-tools contract from its compiled markdown.
+ *
+ * Returns the list of allowed tool names, or `null` when the agent declares no
+ * `tools:` line at all — which in Claude Code means it inherits EVERY tool (the
+ * #1 footgun). `null` is the "no restriction" signal the decision logic honors;
+ * an empty list (`tools:` with nothing after it) means "no tools allowed".
+ */
+export declare function parseAgentTools(markdown: string): string[] | null;
+/**
+ * Parse a comma/array tool list under an arbitrary frontmatter `key` (e.g.
+ * `tools:` or `disallowedTools:`) via the shared lenient reader
+ * (core/frontmatter-read.ts): a real YAML parse (so `key: [Read, "Bash"]` is a
+ * native array and `key: Read, Bash` a comma scalar) with a regex salvage when
+ * the block is malformed — the rail still reads the contract. `null` when the key
+ * is absent (inherits all), `[]` when present-but-empty (no tools). Shared by the
+ * rail (`tools:`) and the `disallowed-tools-contract` scan/lint.
+ */
+export declare function parseAgentToolList(markdown: string, key: string): string[] | null;
+//# sourceMappingURL=agent-tools.d.ts.map

package/dist/adapters/claude-code/agent-tools.js

@@ -0,0 +1,40 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.parseAgentTools = parseAgentTools;
+exports.parseAgentToolList = parseAgentToolList;
+/**
+ * Pure tool-contract PARSERS for a compiled agent/skill `.md` — extracted from
+ * `agent-runtime.ts` so a consumer can read a `tools:`/`allowed-tools:` contract
+ * WITHOUT pulling `agent-runtime.ts`'s `node:fs` runtime rail into the bundle.
+ *
+ * The deterministic audit engine (`scan-core.ts` → `scanAgents`/`scanSkills`)
+ * reads these contracts in the browser, where `node:fs` cannot be bundled; the
+ * live PreToolUse rail (`agent-runtime.ts`) re-exports both so its callers are
+ * unchanged. Node-free by construction — the only dependency is the shared
+ * lenient frontmatter reader (`core/frontmatter-read.ts`, js-yaml, no `node:`).
+ */
+const frontmatter_read_js_1 = require("../../core/frontmatter-read.js");
+/**
+ * Parse an agent's allowed-tools contract from its compiled markdown.
+ *
+ * Returns the list of allowed tool names, or `null` when the agent declares no
+ * `tools:` line at all — which in Claude Code means it inherits EVERY tool (the
+ * #1 footgun). `null` is the "no restriction" signal the decision logic honors;
+ * an empty list (`tools:` with nothing after it) means "no tools allowed".
+ */
+function parseAgentTools(markdown) {
+    return parseAgentToolList(markdown, "tools");
+}
+/**
+ * Parse a comma/array tool list under an arbitrary frontmatter `key` (e.g.
+ * `tools:` or `disallowedTools:`) via the shared lenient reader
+ * (core/frontmatter-read.ts): a real YAML parse (so `key: [Read, "Bash"]` is a
+ * native array and `key: Read, Bash` a comma scalar) with a regex salvage when
+ * the block is malformed — the rail still reads the contract. `null` when the key
+ * is absent (inherits all), `[]` when present-but-empty (no tools). Shared by the
+ * rail (`tools:`) and the `disallowed-tools-contract` scan/lint.
+ */
+function parseAgentToolList(markdown, key) {
+    return (0, frontmatter_read_js_1.frontmatterList)((0, frontmatter_read_js_1.readFrontmatter)(markdown), key);
+}
+//# sourceMappingURL=agent-tools.js.map

package/dist/audit-report.d.ts

@@ -17,7 +17,7 @@ import { type Verdict } from "./audit-verdict.js";
 import type { LedgerSummary } from "./observe.js";
 import type { AdoptabilityResult } from "./adoptability.js";
 import type { ScanReport, MarketplaceInfo } from "./scan.js";
-import type { PluginScore } from "./leaderboard.js";
+import type { PluginScore } from "./score-core.js";
 import type { RuleInventoryItem } from "./rule-inventory.js";
 import type { RuleRouting } from "./rule-routing.js";
 /**