vigiles 16.1.1 → 16.1.3

package/dist/scan-files.js

@@ -52,10 +52,12 @@ const hook_block_ineffective_js_1 = require("./core/hook-block-ineffective.js");
 const hook_matcher_js_1 = require("./core/hook-matcher.js");
 const test_coverage_files_js_1 = require("./test-coverage-files.js");
 const coverage_evidence_js_1 = require("./coverage-evidence.js");
+const source_refs_js_1 = require("./core/source-refs.js");
 const scan_core_js_1 = require("./scan-core.js");
 // Zero imports of its own — pure string work, safe in the browser engine.
 const skill_refs_js_1 = require("./skill-refs.js");
 const merge_conflict_js_1 = require("./core/merge-conflict.js");
+const scan_core_js_2 = require("./scan-core.js");
 /**
  * The synthetic absolute root every path in a browser scan resolves against. A
  * pure, deterministic string (never `process.cwd()`), so `join`/`relative` stay
@@ -284,9 +286,10 @@ function materializeSurfaces(files, layout, acc, repoName) {
 // ---------------------------------------------------------------------------
 // Dangling intra-plugin refs (mirrors plugin-loader.ts danglingRefs)
 // ---------------------------------------------------------------------------
-const INTRA_REF_EXTS = "md|sh|cmd|mjs|cjs|js|ts|py|rb|txt|json";
+// Extensions + BOTH token boundaries live in core/source-refs.ts, so this and
+// its disk twin (plugin-loader.ts) cannot disagree and neither can omit one.
 function intraRefRe(layout) {
-    return new RegExp(`(?:${layout.intraRefDirs.join("|")})/[A-Za-z0-9._/-]+\\.(?:${INTRA_REF_EXTS})`, "g");
+    return (0, source_refs_js_1.intraRefPattern)(layout.intraRefDirs);
 }
 const NON_PLUGIN_VARS = new Set([
     "CLAUDE_PROJECT_DIR",
@@ -295,10 +298,14 @@ const NON_PLUGIN_VARS = new Set([
     "PWD",
     "OLDPWD",
 ]);
-/** Mirror of plugin-loader.ts `isPluginRooted`. */
+/** Mirror of plugin-loader.ts `isPluginRooted`, including its boundary test:
+ *  a match preceded by a path-segment character landed INSIDE a longer name
+ *  (`claude-agents/`) and refers to nothing. */
 function isPluginRooted(content, idx) {
-    if (idx === 0 || content[idx - 1] !== "/")
-        return true;
+    // Start-of-content is handled by `startsAtSeparator` itself (`idx <= 0`), not
+    // by a guard here — see the twin in plugin-loader.ts.
+    if (content[idx - 1] !== "/")
+        return (0, source_refs_js_1.startsAtSeparator)(content, idx);
     const seg = /([^\s"'`(=:/]*)$/.exec(content.slice(0, idx - 1))?.[1] ?? "";
     const varName = /^\$\{?(\w+)\}?$/.exec(seg)?.[1];
     if (varName !== undefined)
@@ -306,19 +313,6 @@ function isPluginRooted(content, idx) {
     return false;
 }
 const DOC_SOURCE_RE = /\.(?:md|markdown|mdx|txt|rst)$/i;
-// A `.sh`/`.bash`/`.cmd` SCRIPT's own `#`-led comments are prose, not code — a
-// usage comment (`# bash skills/<plugin>/hooks/setup.sh`, written as it would be
-// invoked from the REPO CHECKOUT root) is not a real file operation any more than
-// a path mentioned in a doc file is (issue #110). Mirror of plugin-loader.ts
-// `SCRIPT_COMMENT_RE`.
-const SCRIPT_COMMENT_RE = /\.(?:sh|bash|cmd)$/i;
-/** Mirror of plugin-loader.ts `stripShellComments`. */
-function stripShellComments(content) {
-    return content
-        .split("\n")
-        .filter((line) => !line.trimStart().startsWith("#"))
-        .join("\n");
-}
 /** The plugin's executable (non-prose) source-file CONTENTS under the surface dirs. */
 function executableContents(files, layout) {
     const out = [];
@@ -332,7 +326,8 @@ function executableContents(files, layout) {
                 continue;
             if (byteLen(content) > MAX_SKILL_FILE_BYTES)
                 continue;
-            out.push(SCRIPT_COMMENT_RE.test(k) ? stripShellComments(content) : content);
+            // A full-line comment is prose in EVERY language, not only in shell.
+            out.push((0, source_refs_js_1.stripFullLineComments)(k, content));
         }
     }
     return out;
@@ -475,7 +470,8 @@ function scanFiles(files, layout = layout_js_1.claudeCodeLayout, dialect = diale
     const hookRegs = (0, hook_normalize_js_1.normalizeHooks)(loaded.settings.hooks);
     const { hooks, inline, manual } = (0, scan_core_js_1.scanHooks)(hookRegs, exports.BROWSER_ROOT, lay.pluginRootToken, exists);
     const eventNames = (0, hook_normalize_js_1.hookEventNames)(loaded.settings.hooks);
-    const hookEventIssues = (0, hook_events_js_1.confidentHookEventIssues)((0, hook_events_js_1.verifyHookEvents)(eventNames, dialect));
+    const allHookEventIssues = (0, hook_events_js_1.verifyHookEvents)(eventNames, dialect);
+    const hookEventIssues = (0, hook_events_js_1.scoredIssues)(allHookEventIssues);
     const instructions = loaded.files[lay.instructionFile] !== undefined
         ? {
             file: lay.instructionFile,
@@ -534,6 +530,7 @@ function scanFiles(files, layout = layout_js_1.claudeCodeLayout, dialect = diale
             sources: loaded.sources,
         })).map(skill_refs_js_1.formatSkillRefIssue),
         hookEventIssues,
+        vocabularyNotes: (0, scan_core_js_2.collectVocabularyNotes)(allHookEventIssues, agents),
         frontmatterIssues: remap((0, scan_core_js_1.frontmatterIssuesFor)(loaded.files, cls)),
         frontmatterValueIssues: remap((0, scan_core_js_1.frontmatterValueIssuesFor)(loaded.files, cls)),
         skillMetaIssues: remap((0, scan_core_js_1.skillMetaIssuesFor)(loaded.files, cls)),

package/dist/scan.d.ts

@@ -78,6 +78,12 @@ export interface ScanAgent {
     readonly toolIssues: readonly ToolIssue[];
     /** MCP tool entries naming a server the plugin doesn't declare (can't resolve). */
     readonly mcpToolIssues: readonly McpToolIssue[];
+    /**
+     * ADVISORY tool findings — a real tool withheld only under a condition vigiles
+     * cannot see, or a name not in its capture. Surfaced via `vocabularyNotes`,
+     * never scored. Optional: absence is not a claim of zero.
+     */
+    readonly toolNotes?: readonly ToolIssue[];
     /** `disallowedTools:` block-list entries that are typos of a real tool (block nothing). */
     readonly disallowedToolIssues: readonly ToolIssue[];
     /**
@@ -102,6 +108,12 @@ export interface ScanAgent {
     readonly trifecta: TrifectaFinding | null;
 }
 /** A lethal-trifecta finding tagged with the surface (subagent/skill) that holds it. */
+/** One advisory vocabulary finding, tagged with the surface that carries it. */
+export interface VocabularyNote {
+    /** Where it was found — a hook event key, or an agent's path. */
+    readonly where: string;
+    readonly message: string;
+}
 export interface ScanTrifectaFinding {
     readonly path: string;
     readonly kind: "subagent" | "skill";
@@ -218,6 +230,18 @@ export interface ScanReport {
     readonly skillRefIssues?: readonly string[];
     /** Hooks registered under an event name the harness doesn't define (typo / dead). */
     readonly hookEventIssues: readonly HookEventIssue[];
+    /**
+     * ADVISORY vocabulary findings — names vigiles could not confirm, and real
+     * names the platform withholds only under a condition it cannot see. Surfaced
+     * and NEVER scored, which is the point: the two failure modes this replaced
+     * were silence (which reads as approval and hides vigiles's own staleness) and
+     * an error (which blames the user for our gap). Neither is a verdict, so these
+     * get a third channel instead of a grade.
+     *
+     * OPTIONAL because absence is not a claim: a producer predating this field
+     * reports nothing rather than reporting zero.
+     */
+    readonly vocabularyNotes?: readonly VocabularyNote[];
     /** Skills/agents missing a required frontmatter field (name; agents also description). */
     readonly frontmatterIssues: readonly FrontmatterIssue[];
     /** Agent frontmatter fields with an invalid value (a typo of a real model/color). */

package/dist/scan.js

@@ -153,7 +153,8 @@ function scanPlugin(dir, layout, dialect = dialect_js_1.claudeCodeDialect, opts
     // object keys only and returns [] for an array. We don't interpret a format we
     // don't own.
     const eventNames = (0, hook_normalize_js_1.hookEventNames)(loaded.settings.hooks);
-    const hookEventIssues = (0, hook_events_js_1.confidentHookEventIssues)((0, hook_events_js_1.verifyHookEvents)(eventNames, dialect));
+    const allHookEventIssues = (0, hook_events_js_1.verifyHookEvents)(eventNames, dialect);
+    const hookEventIssues = (0, hook_events_js_1.scoredIssues)(allHookEventIssues);
     const instructions = loaded.files[lay.instructionFile] !== undefined
         ? {
             file: lay.instructionFile,
@@ -211,6 +212,7 @@ function scanPlugin(dir, layout, dialect = dialect_js_1.claudeCodeDialect, opts
             sources: loaded.sources,
         })).map(skill_refs_js_1.formatSkillRefIssue),
         hookEventIssues,
+        vocabularyNotes: (0, scan_core_js_1.collectVocabularyNotes)(allHookEventIssues, agents),
         frontmatterIssues: remap((0, scan_core_js_1.frontmatterIssuesFor)(loaded.files, cls)),
         frontmatterValueIssues: remap((0, scan_core_js_1.frontmatterValueIssuesFor)(loaded.files, cls)),
         skillMetaIssues: remap((0, scan_core_js_1.skillMetaIssuesFor)(loaded.files, cls)),
@@ -468,6 +470,11 @@ function formatScanReport(r) {
     out.push(...section("Hooks", hookLines, r.hooks.length + r.inlineHooks));
     out.push(...section("Broken references", r.danglingRefs.map((ref) => `  ✗ ${ref} (referenced but MISSING)`)));
     out.push(...section("Hook events", r.hookEventIssues.map((i) => `  ✗ ${i.message}`)));
+    // Advisory, never scored — a name vigiles cannot confirm, or a real one the
+    // platform withholds only under a condition it cannot see. Printed with `·`
+    // rather than `✗` so it reads as a note about vigiles's knowledge, not a
+    // defect in the repo being audited.
+    out.push(...section("Vocabulary notes (advisory, not graded)", (r.vocabularyNotes ?? []).map((n) => `  · ${n.where}: ${n.message}`)));
     out.push(...section("Frontmatter", [
         ...r.frontmatterIssues.map((i) => `  ✗ ${i.message}`),
         ...r.frontmatterValueIssues.map((i) => `  ✗ ${i.message}`),

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "vigiles",
-  "version": "16.1.1",
+  "version": "16.1.3",
   "description": "Audit, test and measure the harness your AI agent runs on — grade your CLAUDE.md / AGENTS.md, skills, subagents and hooks, run them against a scripted model, and measure whether they actually fire.",
   "keywords": [
     "claude-code",