vigiles 15.4.0 → 16.0.0

package/dist/integration.d.ts

@@ -1,29 +0,0 @@
-/**
- * `vigiles/integration` — the **deterministic, assembled-machine** tier.
- *
- * Re-exports everything in [`vigiles/unit`](./unit.ts) and adds the
- * harness-agnostic runners for the assembled machine: `runHarnessTest` /
- * `runHarness` (real hooks fire, outcome reproducible) plus the generic trace
- * parsers and the sandbox policy. Capability contract: needs the **`claude`
- * binary and bubblewrap**, but **no API key and no network**. A
- * `*.integration.test.ts` imports from here.
- *
- * The Claude-Code **transport** — the scripted mock (`scriptModel`) and the
- * plugin loader (`loadPlugin` / `resolveHarness`) — is harness-specific, so it is
- * NOT re-exported here (this surface stays agnostic, enforced by the
- * `agnostic-surface ⊄ adapter` boundary lint). Import it from
- * [`vigiles/claude-code`](./claude-code.ts):
- * `import { scriptModel, loadPlugin } from "vigiles/claude-code"`.
- *
- * Real **egress** is a CAPABILITY of this scope (the former `e2e` tier), not a
- * separate tier: `egressRoutes()` probes whether allowlisted egress can route,
- * and `runHook` takes `egress: { allow }` for allowlisted real outbound — gated
- * by a routable sandbox + real network (a test self-skips via `egressRoutes()`).
- * `vigiles/e2e` remains as a thin back-compat alias. See
- * `research/testing-api-design.md` Part 4.
- */
-export * from "./unit.js";
-export { runHarnessTest, runHarness, parseToolCalls, parseSubagents, parseResultEvent, parseOutput, parseHooks, decideSandbox, specTrusted, sandboxAvailable, } from "./harness-test.js";
-export type { HarnessTestSpec, Trace, SubagentTrace, HarnessTestResult, RunHarnessTestOptions, ModelTurn, ModelRequest, ToolCall, HookFire, HarnessTestDriver, SandboxMode, } from "./harness-test.js";
-export { egressRoutes } from "./run-hook.js";
-//# sourceMappingURL=integration.d.ts.map

package/dist/integration.js

@@ -1,58 +0,0 @@
-"use strict";
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __exportStar = (this && this.__exportStar) || function(m, exports) {
-    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.egressRoutes = exports.sandboxAvailable = exports.specTrusted = exports.decideSandbox = exports.parseHooks = exports.parseOutput = exports.parseResultEvent = exports.parseSubagents = exports.parseToolCalls = exports.runHarness = exports.runHarnessTest = void 0;
-/**
- * `vigiles/integration` — the **deterministic, assembled-machine** tier.
- *
- * Re-exports everything in [`vigiles/unit`](./unit.ts) and adds the
- * harness-agnostic runners for the assembled machine: `runHarnessTest` /
- * `runHarness` (real hooks fire, outcome reproducible) plus the generic trace
- * parsers and the sandbox policy. Capability contract: needs the **`claude`
- * binary and bubblewrap**, but **no API key and no network**. A
- * `*.integration.test.ts` imports from here.
- *
- * The Claude-Code **transport** — the scripted mock (`scriptModel`) and the
- * plugin loader (`loadPlugin` / `resolveHarness`) — is harness-specific, so it is
- * NOT re-exported here (this surface stays agnostic, enforced by the
- * `agnostic-surface ⊄ adapter` boundary lint). Import it from
- * [`vigiles/claude-code`](./claude-code.ts):
- * `import { scriptModel, loadPlugin } from "vigiles/claude-code"`.
- *
- * Real **egress** is a CAPABILITY of this scope (the former `e2e` tier), not a
- * separate tier: `egressRoutes()` probes whether allowlisted egress can route,
- * and `runHook` takes `egress: { allow }` for allowlisted real outbound — gated
- * by a routable sandbox + real network (a test self-skips via `egressRoutes()`).
- * `vigiles/e2e` remains as a thin back-compat alias. See
- * `research/testing-api-design.md` Part 4.
- */
-__exportStar(require("./unit.js"), exports);
-// The harness-test tier — AGNOSTIC SURFACE ONLY (CC transport lives in
-// vigiles/claude-code; see the module doc above).
-var harness_test_js_1 = require("./harness-test.js");
-Object.defineProperty(exports, "runHarnessTest", { enumerable: true, get: function () { return harness_test_js_1.runHarnessTest; } });
-Object.defineProperty(exports, "runHarness", { enumerable: true, get: function () { return harness_test_js_1.runHarness; } });
-Object.defineProperty(exports, "parseToolCalls", { enumerable: true, get: function () { return harness_test_js_1.parseToolCalls; } });
-Object.defineProperty(exports, "parseSubagents", { enumerable: true, get: function () { return harness_test_js_1.parseSubagents; } });
-Object.defineProperty(exports, "parseResultEvent", { enumerable: true, get: function () { return harness_test_js_1.parseResultEvent; } });
-Object.defineProperty(exports, "parseOutput", { enumerable: true, get: function () { return harness_test_js_1.parseOutput; } });
-Object.defineProperty(exports, "parseHooks", { enumerable: true, get: function () { return harness_test_js_1.parseHooks; } });
-Object.defineProperty(exports, "decideSandbox", { enumerable: true, get: function () { return harness_test_js_1.decideSandbox; } });
-Object.defineProperty(exports, "specTrusted", { enumerable: true, get: function () { return harness_test_js_1.specTrusted; } });
-Object.defineProperty(exports, "sandboxAvailable", { enumerable: true, get: function () { return harness_test_js_1.sandboxAvailable; } });
-var run_hook_js_1 = require("./run-hook.js");
-Object.defineProperty(exports, "egressRoutes", { enumerable: true, get: function () { return run_hook_js_1.egressRoutes; } });
-//# sourceMappingURL=integration.js.map

package/dist/testing.d.ts

@@ -1,41 +0,0 @@
-/**
- * `vigiles/testing` — Pillar 2 entry point: the **harness-testing** API. Re-exports
- * the three tiers — `runHook` (unit), `runHarnessTest` (deterministic), `runEval`
- * (eval) — plus the runner-agnostic predicates/assertions. Kept deliberately
- * separate from `vigiles/claude-code` so this surface can stay harness-agnostic as
- * more harnesses are added.
- *
- * 🔴 THIS LINE USED TO SAY the granular paths (`vigiles/run-hook`, etc.) «still
- * work». MEASURED 2026-08-16: they do not. `vigiles/run-hook`, `vigiles/eval`,
- * `vigiles/harness-test`, `vigiles/harness-assert`, `vigiles/skill` and
- * `vigiles/skill-test` all raise ERR_PACKAGE_PATH_NOT_EXPORTED — six paths this
- * package advertised to its own readers and does not serve. A promise that an
- * import keeps working is exactly the kind a reader has no reason to re-check.
- *
- * It re-exports the composition-root runner modules (which do the Claude-Code
- * default-wiring), never an adapter directly — the `agnostic-surface` eslint
- * boundary forbids importing `src/adapters/*` from here. See
- * `research/adapter-api-design.md`.
- */
-export { recordCheck } from "./check-count.js";
-export { runScript } from "./run-script.js";
-export type { RunScriptOptions, ScriptRunResult } from "./run-script.js";
-export { runHook, propertyHook, fileToolEvents } from "./run-hook.js";
-export type { HookRunResult, RunHookOptions, HookInput, HookOutput, HookPropertyResult, FileToolEventOptions, } from "./run-hook.js";
-export { runEval, measure, measureArms, measureTriggerRate, assertRates, assertPromptDiversity, checkPromptDiversity, checkReportToJUnit, formatCheckReport, formatEvalReport, formatTriggerRateReport, claudeEvalDriver, parseClaudeRun, stubSkillBody, } from "./eval.js";
-export type { EvalArm, EvalDriver, EvalSpec, EvalReport, EvalUsage, MeasureSpec, ArmsMeasureSpec, ArmReport, ArmUsage, ArmsCheckReport, CheckRate, CheckReport, MetricStat, Metrics, ModelOutputParser, ParsedModelRun, PromptDiversityIssue, PromptTriggerStat, RunContext, RunOut, SelectionTrialResult, TriggerRateReport, TriggerRateSpec, AgentRunArgs, AgentRunner, } from "./eval.js";
-export * from "./harness-assert.js";
-export { loadHook } from "./load-hook.js";
-export * from "./check.js";
-export { hookFired } from "./check.js";
-export { judge } from "./judge.js";
-export * from "./tool-stub.js";
-export { runHarnessTest, runHarness } from "./harness-test.js";
-export { commandsIn, mustInclude, mustNotInclude } from "./doc-commands.js";
-export type { DocCommand } from "./doc-commands.js";
-export { skillContract } from "./skill-contract.js";
-export { compareContainment, formatContainment, } from "./trigger-containment.js";
-export type { ContainmentInput, ContainmentVerdict, } from "./trigger-containment.js";
-export type { SkillContract, SkillContractOptions } from "./skill-contract.js";
-export type { HarnessTestSpec, Trace, SubagentTrace, HarnessTestResult, RunHarnessTestOptions, ModelTurn, ModelRequest, ToolCall, HookFire, HarnessTestDriver, SandboxMode, } from "./harness-test.js";
-//# sourceMappingURL=testing.d.ts.map

package/dist/testing.js

@@ -1,123 +0,0 @@
-"use strict";
-/**
- * `vigiles/testing` — Pillar 2 entry point: the **harness-testing** API. Re-exports
- * the three tiers — `runHook` (unit), `runHarnessTest` (deterministic), `runEval`
- * (eval) — plus the runner-agnostic predicates/assertions. Kept deliberately
- * separate from `vigiles/claude-code` so this surface can stay harness-agnostic as
- * more harnesses are added.
- *
- * 🔴 THIS LINE USED TO SAY the granular paths (`vigiles/run-hook`, etc.) «still
- * work». MEASURED 2026-08-16: they do not. `vigiles/run-hook`, `vigiles/eval`,
- * `vigiles/harness-test`, `vigiles/harness-assert`, `vigiles/skill` and
- * `vigiles/skill-test` all raise ERR_PACKAGE_PATH_NOT_EXPORTED — six paths this
- * package advertised to its own readers and does not serve. A promise that an
- * import keeps working is exactly the kind a reader has no reason to re-check.
- *
- * It re-exports the composition-root runner modules (which do the Claude-Code
- * default-wiring), never an adapter directly — the `agnostic-surface` eslint
- * boundary forbids importing `src/adapters/*` from here. See
- * `research/adapter-api-design.md`.
- */
-// Curated public re-exports (named, not `export *`) so the internal seams —
-// the injectable `*With` runners, low-level `parse*`, pool/aggregate/model-tier
-// helpers — stay out of the public surface, the api reports, and the docs site.
-// (vigiles's own tests import those from the source modules directly.)
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __exportStar = (this && this.__exportStar) || function(m, exports) {
-    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.formatContainment = exports.compareContainment = exports.skillContract = exports.mustNotInclude = exports.mustInclude = exports.commandsIn = exports.runHarness = exports.runHarnessTest = exports.judge = exports.hookFired = exports.loadHook = exports.stubSkillBody = exports.parseClaudeRun = exports.claudeEvalDriver = exports.formatTriggerRateReport = exports.formatEvalReport = exports.formatCheckReport = exports.checkReportToJUnit = exports.checkPromptDiversity = exports.assertPromptDiversity = exports.assertRates = exports.measureTriggerRate = exports.measureArms = exports.measure = exports.runEval = exports.fileToolEvents = exports.propertyHook = exports.runHook = exports.runScript = exports.recordCheck = void 0;
-// --- reporting: how much did this script actually do? ---
-// `vigiles test` can otherwise see only an exit code, so a file that runs NOTHING
-// prints the same `✓` as one that ran and passed (measured 2026-08-08 on a file
-// exporting an object of tests nobody calls). The tiers below count themselves;
-// call `recordCheck()` yourself when you assert some OTHER way — `node:assert`,
-// vitest's `expect` — so those are visible to the runner too. See check-count.ts.
-var check_count_js_1 = require("./check-count.js");
-Object.defineProperty(exports, "recordCheck", { enumerable: true, get: function () { return check_count_js_1.recordCheck; } });
-// --- unit tier: runScript (the primitive) + runHook (it, plus a decision) ---
-// `runScript` runs any program and reports what it DID (exit, both streams,
-// writes, egress). `runHook` is that plus the hook protocol: event to stdin,
-// exit code to allow/deny. Testing a plain helper script? Reach for runScript —
-// its result carries no `decision`, because a script does not have one.
-var run_script_js_1 = require("./run-script.js");
-Object.defineProperty(exports, "runScript", { enumerable: true, get: function () { return run_script_js_1.runScript; } });
-var run_hook_js_1 = require("./run-hook.js");
-Object.defineProperty(exports, "runHook", { enumerable: true, get: function () { return run_hook_js_1.runHook; } });
-Object.defineProperty(exports, "propertyHook", { enumerable: true, get: function () { return run_hook_js_1.propertyHook; } });
-Object.defineProperty(exports, "fileToolEvents", { enumerable: true, get: function () { return run_hook_js_1.fileToolEvents; } });
-// --- eval tier: runEval / measure / trigger-rate ---
-var eval_js_1 = require("./eval.js");
-Object.defineProperty(exports, "runEval", { enumerable: true, get: function () { return eval_js_1.runEval; } });
-Object.defineProperty(exports, "measure", { enumerable: true, get: function () { return eval_js_1.measure; } });
-Object.defineProperty(exports, "measureArms", { enumerable: true, get: function () { return eval_js_1.measureArms; } });
-Object.defineProperty(exports, "measureTriggerRate", { enumerable: true, get: function () { return eval_js_1.measureTriggerRate; } });
-Object.defineProperty(exports, "assertRates", { enumerable: true, get: function () { return eval_js_1.assertRates; } });
-Object.defineProperty(exports, "assertPromptDiversity", { enumerable: true, get: function () { return eval_js_1.assertPromptDiversity; } });
-Object.defineProperty(exports, "checkPromptDiversity", { enumerable: true, get: function () { return eval_js_1.checkPromptDiversity; } });
-Object.defineProperty(exports, "checkReportToJUnit", { enumerable: true, get: function () { return eval_js_1.checkReportToJUnit; } });
-Object.defineProperty(exports, "formatCheckReport", { enumerable: true, get: function () { return eval_js_1.formatCheckReport; } });
-Object.defineProperty(exports, "formatEvalReport", { enumerable: true, get: function () { return eval_js_1.formatEvalReport; } });
-Object.defineProperty(exports, "formatTriggerRateReport", { enumerable: true, get: function () { return eval_js_1.formatTriggerRateReport; } });
-Object.defineProperty(exports, "claudeEvalDriver", { enumerable: true, get: function () { return eval_js_1.claudeEvalDriver; } });
-Object.defineProperty(exports, "parseClaudeRun", { enumerable: true, get: function () { return eval_js_1.parseClaudeRun; } });
-Object.defineProperty(exports, "stubSkillBody", { enumerable: true, get: function () { return eval_js_1.stubSkillBody; } });
-__exportStar(require("./harness-assert.js"), exports);
-// The compiled-hook LOADER. The in-process assertions above take the hook
-// OBJECT, but a `.harness.mjs` test only has its PATH — without this the
-// intended in-process test path is unreachable from the file format
-// `vigiles test` actually runs, and authors fall back to spawning the runtime as
-// a subprocess (the very plumbing compiled hooks exist to remove). Same loader
-// the CLI runtime uses, so a hook that loads in a test loads identically in prod.
-var load_hook_js_1 = require("./load-hook.js");
-Object.defineProperty(exports, "loadHook", { enumerable: true, get: function () { return load_hook_js_1.loadHook; } });
-// The declarative check vocabulary is now first-class at the front door. Its
-// `hookFired` (a `Check<Trace>`) supersedes the legacy boolean predicate of the
-// same name — the explicit re-export below wins over the two `export *`s.
-__exportStar(require("./check.js"), exports);
-var check_js_1 = require("./check.js");
-Object.defineProperty(exports, "hookFired", { enumerable: true, get: function () { return check_js_1.hookFired; } });
-// The model-graded judge (agnostic — grades text against a rubric). Public here
-// now that `vigiles/judge` is no longer a standalone subpath.
-var judge_js_1 = require("./judge.js");
-Object.defineProperty(exports, "judge", { enumerable: true, get: function () { return judge_js_1.judge; } });
-// Tool stubs on PATH (rung R2): shadow a CLI tool with a recorded canned result.
-__exportStar(require("./tool-stub.js"), exports);
-// The harness-test tier — AGNOSTIC SURFACE ONLY. The Claude-Code transport
-// (`scriptModel`, `claudeCodeDriver`, `buildClaudeArgs`, `parseClaudeRun`,
-// `claudeAvailable`, `loadPlugin`, `resolveHarness`) is deliberately NOT
-// re-exported here, so `vigiles/testing` stays harness-agnostic — import those
-// from `vigiles/claude-code` (or your harness's package). See
-// `research/code-adapter-architecture.md`.
-var harness_test_js_1 = require("./harness-test.js");
-Object.defineProperty(exports, "runHarnessTest", { enumerable: true, get: function () { return harness_test_js_1.runHarnessTest; } });
-Object.defineProperty(exports, "runHarness", { enumerable: true, get: function () { return harness_test_js_1.runHarness; } });
-// A document's own rule about its own COMMANDS, made checkable. vigiles cannot
-// infer "always pass -g" from prose; what was missing was a cheap way to declare
-// it — measured at ~95 lines of markdown parsing around ~5 lines of rule, which
-// is why nobody wrote the check and the rule stayed prose.
-var doc_commands_js_1 = require("./doc-commands.js");
-Object.defineProperty(exports, "commandsIn", { enumerable: true, get: function () { return doc_commands_js_1.commandsIn; } });
-Object.defineProperty(exports, "mustInclude", { enumerable: true, get: function () { return doc_commands_js_1.mustInclude; } });
-Object.defineProperty(exports, "mustNotInclude", { enumerable: true, get: function () { return doc_commands_js_1.mustNotInclude; } });
-// A skill's own `allowed-tools:` frontmatter, read back as checks — the wiring
-// from a declaration to the existing check vocabulary, not new machinery.
-var skill_contract_js_1 = require("./skill-contract.js");
-Object.defineProperty(exports, "skillContract", { enumerable: true, get: function () { return skill_contract_js_1.skillContract; } });
-// Is a WEAKER model a valid lower bound for trigger-rate? Pure comparison of two
-// runs; the open question the model floor makes people ask.
-var trigger_containment_js_1 = require("./trigger-containment.js");
-Object.defineProperty(exports, "compareContainment", { enumerable: true, get: function () { return trigger_containment_js_1.compareContainment; } });
-Object.defineProperty(exports, "formatContainment", { enumerable: true, get: function () { return trigger_containment_js_1.formatContainment; } });
-//# sourceMappingURL=testing.js.map

package/dist/unit.d.ts

@@ -1,39 +0,0 @@
-/**
- * `vigiles/unit` — the **no-capability** harness-testing surface.
- *
- * Importing from here is MOSTLY a contract: this test needs no `claude`, no
- * bubblewrap and no network — only a process. It is the cheap base of the pyramid:
- *
- * 🔴 «NO MODEL» IS NOT TRUE TODAY, AND SAYING SO WAS THE WORST OF THE FOUR
- * MISSTATEMENTS ON THIS SURFACE, because it reads as a guarantee rather than a
- * description. `judged` is re-exported here and its default judge is a REAL model
- * call — `check.ts` resolves `opts.judge ?? ((o) => runJudge(o))`. So a test that
- * imports only from this barrel can still spend money, and the one line a reader
- * would rely on to know it cannot is this one.
- *
- * The honest fix is to MOVE `judged` off this barrel, not to reword the sentence —
- * but that changes the public surface, and the surface is being reorganised
- * separately (the measured proposal splits by COST: everything free on one path,
- * everything that spends money on another, where this defect becomes unexpressible
- * rather than merely documented). Until that lands, the claim is corrected here
- * rather than left standing.
- *
- * `runHook` (pipe a synthesized event to a hook and read the block/allow
- * decision), the bare `Trace` predicates, the `assert*` helpers, and the pure
- * parsers. A `*.test.ts` should import **only** from here (enforced by lint).
- *
- * Higher tiers re-export this one — dependencies point downward only
- * (e2e → integration → unit), never up. See `vigiles/integration` and
- * `vigiles/e2e`.
- */
-export * from "./harness-assert.js";
-export { loadHook } from "./load-hook.js";
-export { runHook, parseHookOutput, decideHook, propertyHook, fileToolEvents, } from "./run-hook.js";
-export type { HookInput, HookOutput, HookRunResult, RunHookOptions, HookPropertyResult, FileToolEventOptions, } from "./run-hook.js";
-export { runScript } from "./run-script.js";
-export type { RunScriptOptions, ScriptRunResult } from "./run-script.js";
-export * from "./check.js";
-export { hookFired } from "./check.js";
-export { DISASTER_CATALOG, verifyGuardrail, unblockedDisasters, assertBlocksDisasters, formatGuardrailReport, } from "./guardrail-check.js";
-export type { DisasterEvent, DisasterCategory, GuardrailResult, VerifyGuardrailOptions, } from "./guardrail-check.js";
-//# sourceMappingURL=unit.d.ts.map

package/dist/unit.js

@@ -1,74 +0,0 @@
-"use strict";
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __exportStar = (this && this.__exportStar) || function(m, exports) {
-    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.formatGuardrailReport = exports.assertBlocksDisasters = exports.unblockedDisasters = exports.verifyGuardrail = exports.DISASTER_CATALOG = exports.hookFired = exports.runScript = exports.fileToolEvents = exports.propertyHook = exports.decideHook = exports.parseHookOutput = exports.runHook = exports.loadHook = void 0;
-/**
- * `vigiles/unit` — the **no-capability** harness-testing surface.
- *
- * Importing from here is MOSTLY a contract: this test needs no `claude`, no
- * bubblewrap and no network — only a process. It is the cheap base of the pyramid:
- *
- * 🔴 «NO MODEL» IS NOT TRUE TODAY, AND SAYING SO WAS THE WORST OF THE FOUR
- * MISSTATEMENTS ON THIS SURFACE, because it reads as a guarantee rather than a
- * description. `judged` is re-exported here and its default judge is a REAL model
- * call — `check.ts` resolves `opts.judge ?? ((o) => runJudge(o))`. So a test that
- * imports only from this barrel can still spend money, and the one line a reader
- * would rely on to know it cannot is this one.
- *
- * The honest fix is to MOVE `judged` off this barrel, not to reword the sentence —
- * but that changes the public surface, and the surface is being reorganised
- * separately (the measured proposal splits by COST: everything free on one path,
- * everything that spends money on another, where this defect becomes unexpressible
- * rather than merely documented). Until that lands, the claim is corrected here
- * rather than left standing.
- *
- * `runHook` (pipe a synthesized event to a hook and read the block/allow
- * decision), the bare `Trace` predicates, the `assert*` helpers, and the pure
- * parsers. A `*.test.ts` should import **only** from here (enforced by lint).
- *
- * Higher tiers re-export this one — dependencies point downward only
- * (e2e → integration → unit), never up. See `vigiles/integration` and
- * `vigiles/e2e`.
- */
-__exportStar(require("./harness-assert.js"), exports);
-// The compiled-hook loader belongs to the no-capability tier: it imports a local
-// module and nothing else. Without it the in-process assertions above are
-// unreachable from a test that only knows the hook's PATH.
-var load_hook_js_1 = require("./load-hook.js");
-Object.defineProperty(exports, "loadHook", { enumerable: true, get: function () { return load_hook_js_1.loadHook; } });
-var run_hook_js_1 = require("./run-hook.js");
-Object.defineProperty(exports, "runHook", { enumerable: true, get: function () { return run_hook_js_1.runHook; } });
-Object.defineProperty(exports, "parseHookOutput", { enumerable: true, get: function () { return run_hook_js_1.parseHookOutput; } });
-Object.defineProperty(exports, "decideHook", { enumerable: true, get: function () { return run_hook_js_1.decideHook; } });
-Object.defineProperty(exports, "propertyHook", { enumerable: true, get: function () { return run_hook_js_1.propertyHook; } });
-Object.defineProperty(exports, "fileToolEvents", { enumerable: true, get: function () { return run_hook_js_1.fileToolEvents; } });
-// The PRIMITIVE beneath runHook: run any program, get what it did. A hook has a
-// DECISION, a script has EFFECTS — two questions, so two result types.
-var run_script_js_1 = require("./run-script.js");
-Object.defineProperty(exports, "runScript", { enumerable: true, get: function () { return run_script_js_1.runScript; } });
-// The check vocabulary is part of the base surface (pure, no capability). Its
-// `hookFired` check supersedes the legacy boolean predicate of the same name.
-__exportStar(require("./check.js"), exports);
-var check_js_1 = require("./check.js");
-Object.defineProperty(exports, "hookFired", { enumerable: true, get: function () { return check_js_1.hookFired; } });
-// Guardrail verification — "prove your safety hook actually blocks" (over runHook).
-var guardrail_check_js_1 = require("./guardrail-check.js");
-Object.defineProperty(exports, "DISASTER_CATALOG", { enumerable: true, get: function () { return guardrail_check_js_1.DISASTER_CATALOG; } });
-Object.defineProperty(exports, "verifyGuardrail", { enumerable: true, get: function () { return guardrail_check_js_1.verifyGuardrail; } });
-Object.defineProperty(exports, "unblockedDisasters", { enumerable: true, get: function () { return guardrail_check_js_1.unblockedDisasters; } });
-Object.defineProperty(exports, "assertBlocksDisasters", { enumerable: true, get: function () { return guardrail_check_js_1.assertBlocksDisasters; } });
-Object.defineProperty(exports, "formatGuardrailReport", { enumerable: true, get: function () { return guardrail_check_js_1.formatGuardrailReport; } });
-//# sourceMappingURL=unit.js.map