vigiles 15.0.3 → 15.2.0

package/dist/core/sidecar.d.ts

@@ -30,6 +30,22 @@ export declare function computePerFileHashes(inputFiles: string[], basePath: str
  * Recurses so that nested targets (e.g. `.github/copilot-instructions.md`,
  * which lives at `.vigiles/.github/copilot-instructions.md.inputs.json`)
  * are not silently skipped.
+ *
+ * 🔴 A DIRECTORY SYMLINK IS NOT DESCENDED INTO — this walk classified entries
+ * with a bare `statSync().isDirectory()`, which FOLLOWS a link, so a link inside
+ * `.vigiles/` pointing at a directory OUTSIDE it was walked (manifests from a
+ * foreign tree entering the audit under reconstructed target names), and a cycle
+ * — `.vigiles/loop -> .vigiles`, or a link to any ancestor — re-walked the same
+ * tree once per lap. Measured 2026-08-13 by reverting this call: ONE manifest was
+ * reported FORTY-ONE times, as `Real.md`, `loop/Real.md`, `loop/loop/Real.md` …
+ * until the kernel's link limit stopped it. Unlike the loader's walk it did not
+ * throw, and that is not a mitigation: the `catch` below swallowed the `ELOOP` and
+ * turned a crash into a silently multiplied audit. Third instance of the class in
+ * this repo; the decision is {@link entryOf} in `fs-walk.ts`, which carries the
+ * full rationale: a symlinked FILE is still read (it cannot recurse, and a
+ * manifest reached through one is a real manifest), termination is by
+ * construction rather than a visited-set, and an unreadable entry is `"skip"`
+ * rather than a throw — which is exactly what the `try`/`continue` here did.
  */
 export declare function iterateSidecars(basePath: string, fn: (target: string, manifest: SidecarManifest) => void): void;
 //# sourceMappingURL=sidecar.d.ts.map

package/dist/core/sidecar.js

@@ -18,6 +18,7 @@ exports.computePerFileHashes = computePerFileHashes;
 exports.iterateSidecars = iterateSidecars;
 const node_fs_1 = require("node:fs");
 const node_path_1 = require("node:path");
+const fs_walk_js_1 = require("../fs-walk.js");
 const hash_js_1 = require("./hash.js");
 const SIDECAR_ROOT = ".vigiles";
 const MANIFEST_SUFFIX = ".inputs.json";
@@ -60,6 +61,22 @@ function computePerFileHashes(inputFiles, basePath) {
  * Recurses so that nested targets (e.g. `.github/copilot-instructions.md`,
  * which lives at `.vigiles/.github/copilot-instructions.md.inputs.json`)
  * are not silently skipped.
+ *
+ * 🔴 A DIRECTORY SYMLINK IS NOT DESCENDED INTO — this walk classified entries
+ * with a bare `statSync().isDirectory()`, which FOLLOWS a link, so a link inside
+ * `.vigiles/` pointing at a directory OUTSIDE it was walked (manifests from a
+ * foreign tree entering the audit under reconstructed target names), and a cycle
+ * — `.vigiles/loop -> .vigiles`, or a link to any ancestor — re-walked the same
+ * tree once per lap. Measured 2026-08-13 by reverting this call: ONE manifest was
+ * reported FORTY-ONE times, as `Real.md`, `loop/Real.md`, `loop/loop/Real.md` …
+ * until the kernel's link limit stopped it. Unlike the loader's walk it did not
+ * throw, and that is not a mitigation: the `catch` below swallowed the `ELOOP` and
+ * turned a crash into a silently multiplied audit. Third instance of the class in
+ * this repo; the decision is {@link entryOf} in `fs-walk.ts`, which carries the
+ * full rationale: a symlinked FILE is still read (it cannot recurse, and a
+ * manifest reached through one is a real manifest), termination is by
+ * construction rather than a visited-set, and an unreadable entry is `"skip"`
+ * rather than a throw — which is exactly what the `try`/`continue` here did.
  */
 function iterateSidecars(basePath, fn) {
     const root = (0, node_path_1.resolve)(basePath, SIDECAR_ROOT);
@@ -77,17 +94,15 @@ function walk(dir, root, basePath, fn) {
     }
     for (const entry of entries) {
         const fullPath = (0, node_path_1.resolve)(dir, entry);
-        let isDir;
-        try {
-            isDir = (0, node_fs_1.statSync)(fullPath).isDirectory();
-        }
-        catch {
-            continue;
-        }
-        if (isDir) {
+        const { kind } = (0, fs_walk_js_1.entryOf)(fullPath);
+        if (kind === "dir") {
             walk(fullPath, root, basePath, fn);
             continue;
         }
+        // "skip" covers what the old bare `statSync` handled by throwing (a dangling
+        // link, an unreadable entry) AND the symlinked directory it silently followed.
+        if (kind === "skip")
+            continue;
         if (!entry.endsWith(MANIFEST_SUFFIX))
             continue;
         // Reconstruct the target name from the path relative to .vigiles/

package/dist/hook.d.ts

@@ -45,9 +45,11 @@
  * tool calls. A gate is a strong default, never an unbypassable wall. See
  * `docs/compiled-hooks.md`.
  */
-export { defineHook, defineFileGate, definePromptGate, defineStopGate, tool, tools, allow, deny, ask, commandView, pathView, gateAction, hookMode, defineInject, inject, defineReact, run, notice, nothing, responseView, decideProgram, decideFileGate, decidePromptGate, decideStopGate, runInject, runReact, runHookProgram, decisionExitCode, dispatchKind, hookRouting, hookNeeds, compileHookProgram, checkHookImports, stampHook, verifyHookStamp, HookCompileError, } from "./core/hook-program.js";
+export { defineHook, defineFileGate, definePromptGate, defineStopGate, tool, tools, allow, deny, ask, commandView, pathView, gateAction, hookMode, defineInject, inject, defineReact, run, notice, nothing, responseView, decideProgram, decideFileGate, decidePromptGate, decideStopGate, runInject, runReact, runHookProgram, decisionExitCode, dispatchKind, hookRouting, hookNeeds, injectionOf, outcomeWrites, matchesTool, invalidToolPatterns, compileHookProgram, checkHookImports, stampHook, verifyHookStamp, HookCompileError, } from "./core/hook-program.js";
 export type { Decision, HookMode, GateAction, CommandView, PathView, ResponseView, BashToolEvent, FileToolEvent, PromptEvent, StopEvent, ReactEvent, SessionEvent, HookProgram, FileGateHook, PromptGateHook, StopGateHook, InjectHook, ReactHook, AnyHook, DispatchKind, Injection, Reaction, RunReaction, CompiledHookProgram, CompileHookOptions, RawHookEvent, HookProgramOutcome, } from "./core/hook-program.js";
 export { provide, dangerously, defineProvider, provider, } from "./core/hook-providers.js";
+export { state, record, stateFact, isValidStateKey, isStateNeed, isStateWrite, admissibleWrites, durationSeconds, HookStateError, } from "./core/hook-state.js";
+export type { StateFact, StateEntry, StateNeed, StateWrite, Duration, } from "./core/hook-state.js";
 export type { ProviderName, ProviderResults, HookCtx, NeedSpec, InlineProvider, RegisteredProvider, RegisteredRef, ProviderRegistry, } from "./core/hook-providers.js";
 export { leafCommandsNormalized } from "./core/bash-effects.js";
 export type { NormalizedLeaf, LeafRedirect } from "./core/bash-effects.js";

package/dist/hook.js

@@ -1,6 +1,7 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.leafCommandsNormalized = exports.provider = exports.defineProvider = exports.dangerously = exports.provide = exports.HookCompileError = exports.verifyHookStamp = exports.stampHook = exports.checkHookImports = exports.compileHookProgram = exports.hookNeeds = exports.hookRouting = exports.dispatchKind = exports.decisionExitCode = exports.runHookProgram = exports.runReact = exports.runInject = exports.decideStopGate = exports.decidePromptGate = exports.decideFileGate = exports.decideProgram = exports.responseView = exports.nothing = exports.notice = exports.run = exports.defineReact = exports.inject = exports.defineInject = exports.hookMode = exports.gateAction = exports.pathView = exports.commandView = exports.ask = exports.deny = exports.allow = exports.tools = exports.tool = exports.defineStopGate = exports.definePromptGate = exports.defineFileGate = exports.defineHook = void 0;
+exports.isStateWrite = exports.isStateNeed = exports.isValidStateKey = exports.stateFact = exports.record = exports.state = exports.provider = exports.defineProvider = exports.dangerously = exports.provide = exports.HookCompileError = exports.verifyHookStamp = exports.stampHook = exports.checkHookImports = exports.compileHookProgram = exports.invalidToolPatterns = exports.matchesTool = exports.outcomeWrites = exports.injectionOf = exports.hookNeeds = exports.hookRouting = exports.dispatchKind = exports.decisionExitCode = exports.runHookProgram = exports.runReact = exports.runInject = exports.decideStopGate = exports.decidePromptGate = exports.decideFileGate = exports.decideProgram = exports.responseView = exports.nothing = exports.notice = exports.run = exports.defineReact = exports.inject = exports.defineInject = exports.hookMode = exports.gateAction = exports.pathView = exports.commandView = exports.ask = exports.deny = exports.allow = exports.tools = exports.tool = exports.defineStopGate = exports.definePromptGate = exports.defineFileGate = exports.defineHook = void 0;
+exports.leafCommandsNormalized = exports.HookStateError = exports.durationSeconds = exports.admissibleWrites = void 0;
 /**
  * `vigiles/hook` — the **closed vocabulary** for authoring a compiled hook.
  *
@@ -84,6 +85,10 @@ Object.defineProperty(exports, "decisionExitCode", { enumerable: true, get: func
 Object.defineProperty(exports, "dispatchKind", { enumerable: true, get: function () { return hook_program_js_1.dispatchKind; } });
 Object.defineProperty(exports, "hookRouting", { enumerable: true, get: function () { return hook_program_js_1.hookRouting; } });
 Object.defineProperty(exports, "hookNeeds", { enumerable: true, get: function () { return hook_program_js_1.hookNeeds; } });
+Object.defineProperty(exports, "injectionOf", { enumerable: true, get: function () { return hook_program_js_1.injectionOf; } });
+Object.defineProperty(exports, "outcomeWrites", { enumerable: true, get: function () { return hook_program_js_1.outcomeWrites; } });
+Object.defineProperty(exports, "matchesTool", { enumerable: true, get: function () { return hook_program_js_1.matchesTool; } });
+Object.defineProperty(exports, "invalidToolPatterns", { enumerable: true, get: function () { return hook_program_js_1.invalidToolPatterns; } });
 // compile + integrity
 Object.defineProperty(exports, "compileHookProgram", { enumerable: true, get: function () { return hook_program_js_1.compileHookProgram; } });
 Object.defineProperty(exports, "checkHookImports", { enumerable: true, get: function () { return hook_program_js_1.checkHookImports; } });
@@ -95,6 +100,18 @@ Object.defineProperty(exports, "provide", { enumerable: true, get: function () {
 Object.defineProperty(exports, "dangerously", { enumerable: true, get: function () { return hook_providers_js_1.dangerously; } });
 Object.defineProperty(exports, "defineProvider", { enumerable: true, get: function () { return hook_providers_js_1.defineProvider; } });
 Object.defineProperty(exports, "provider", { enumerable: true, get: function () { return hook_providers_js_1.provider; } });
+// Runtime-owned named state: `state(k)` in `needs` reads a fact, `record(k)` in a
+// return value declares one. The whole design note lives in `core/hook-state.ts`.
+var hook_state_js_1 = require("./core/hook-state.js");
+Object.defineProperty(exports, "state", { enumerable: true, get: function () { return hook_state_js_1.state; } });
+Object.defineProperty(exports, "record", { enumerable: true, get: function () { return hook_state_js_1.record; } });
+Object.defineProperty(exports, "stateFact", { enumerable: true, get: function () { return hook_state_js_1.stateFact; } });
+Object.defineProperty(exports, "isValidStateKey", { enumerable: true, get: function () { return hook_state_js_1.isValidStateKey; } });
+Object.defineProperty(exports, "isStateNeed", { enumerable: true, get: function () { return hook_state_js_1.isStateNeed; } });
+Object.defineProperty(exports, "isStateWrite", { enumerable: true, get: function () { return hook_state_js_1.isStateWrite; } });
+Object.defineProperty(exports, "admissibleWrites", { enumerable: true, get: function () { return hook_state_js_1.admissibleWrites; } });
+Object.defineProperty(exports, "durationSeconds", { enumerable: true, get: function () { return hook_state_js_1.durationSeconds; } });
+Object.defineProperty(exports, "HookStateError", { enumerable: true, get: function () { return hook_state_js_1.HookStateError; } });
 // Operation-normalized leaf extraction — the robust matching primitive a
 // hardened guard is built on (see examples/harness/safe-bash-guard-v2.mjs).
 var bash_effects_js_1 = require("./core/bash-effects.js");

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "vigiles",
-  "version": "15.0.3",
+  "version": "15.2.0",
   "description": "Audit, test and measure the harness your AI agent runs on — grade your CLAUDE.md / AGENTS.md, skills, subagents and hooks, run them against a scripted model, and measure whether they actually fire.",
   "keywords": [
     "claude-code",