vigiles 19.0.0 → 20.0.0

package/dist/hook.js

@@ -15,15 +15,15 @@ exports.leafCommandsNormalized = exports.HookStateError = exports.durationSecond
  *
  * The roles, each with its own output type so a category mistake is a `tsc`
  * error, not a silent no-op:
- *   - `defineHook` / `defineFileGate` — a **gate** returns a `Decision`
+ *   - `experimental_defineHook` / `experimental_defineFileGate` — a **gate** returns a `Decision`
  *     (`allow`/`deny`/`ask`); `deny` is the only thing that blocks.
- *   - `definePromptGate` — a **prompt gate** (UserPromptSubmit) sees the prompt
+ *   - `experimental_definePromptGate` — a **prompt gate** (UserPromptSubmit) sees the prompt
  *     TEXT and may `deny` to block it (a security filter).
- *   - `defineStopGate` — a **stop gate** (Stop/SubagentStop) may `deny` to keep
+ *   - `experimental_defineStopGate` — a **stop gate** (Stop/SubagentStop) may `deny` to keep
  *     the agent going (gate-until-tests-pass).
- *   - `defineInject` — an **inject** returns an `Injection` (context text); it
+ *   - `experimental_defineInject` — an **inject** returns an `Injection` (context text); it
  *     has no `deny`, so "block on a SessionStart hook" won't compile.
- *   - `defineReact` — a **react** (PostToolUse) returns a `Reaction`; it sees the
+ *   - `experimental_defineReact` — a **react** (PostToolUse) returns a `Reaction`; it sees the
  *     tool RESPONSE, its `run(cmd)` is effect-classified at construction, and it
  *     can't block (the tool already ran).
  *
@@ -57,12 +57,23 @@ var hook_program_js_1 = require("./core/hook-program.js");
 // entry points makes the marking structural for the whole vocabulary. A
 // per-name prefix could not guarantee that; a chokepoint can.
 //
-// Import them aliased, so the word crosses the package boundary exactly once:
-//   import { experimental_defineInject as defineInject, state } from "vigiles/hook";
-Object.defineProperty(exports, "experimental_defineHook", { enumerable: true, get: function () { return hook_program_js_1.defineHook; } });
-Object.defineProperty(exports, "experimental_defineFileGate", { enumerable: true, get: function () { return hook_program_js_1.defineFileGate; } });
-Object.defineProperty(exports, "experimental_definePromptGate", { enumerable: true, get: function () { return hook_program_js_1.definePromptGate; } });
-Object.defineProperty(exports, "experimental_defineStopGate", { enumerable: true, get: function () { return hook_program_js_1.defineStopGate; } });
+// 🔴 DO NOT alias the prefix away at the import. This block used to advise
+// exactly that — "so the word crosses the package boundary exactly once" — and
+// the advice defeated the mechanism it was attached to. Measured 2026-08-21:
+// with the alias in place the marker survived at 0 of 5 call sites in the only
+// user-facing example, because a reader 200 lines down sees `defineHook(...)`
+// and cannot tell it is provisional. A prefix that is stripped on import is a
+// subpath with extra steps; if the guarantee is only boundary-deep, the honest
+// shape is a quarantined subpath, not a name nobody sees. We chose the name,
+// and then deleted the subpath (`vigiles/experimental`, gone 2026-08-21) so
+// there is only the one mechanism left to keep honest.
+// so the name has to be there. The declarations carry it too — there is one
+// spelling of each symbol now, and `local/experimental-name` no longer needs
+// to reason about re-export aliasing to know what crosses the boundary.
+Object.defineProperty(exports, "experimental_defineHook", { enumerable: true, get: function () { return hook_program_js_1.experimental_defineHook; } });
+Object.defineProperty(exports, "experimental_defineFileGate", { enumerable: true, get: function () { return hook_program_js_1.experimental_defineFileGate; } });
+Object.defineProperty(exports, "experimental_definePromptGate", { enumerable: true, get: function () { return hook_program_js_1.experimental_definePromptGate; } });
+Object.defineProperty(exports, "experimental_defineStopGate", { enumerable: true, get: function () { return hook_program_js_1.experimental_defineStopGate; } });
 Object.defineProperty(exports, "tool", { enumerable: true, get: function () { return hook_program_js_1.tool; } });
 Object.defineProperty(exports, "tools", { enumerable: true, get: function () { return hook_program_js_1.tools; } });
 Object.defineProperty(exports, "allow", { enumerable: true, get: function () { return hook_program_js_1.allow; } });
@@ -73,10 +84,10 @@ Object.defineProperty(exports, "pathView", { enumerable: true, get: function ()
 Object.defineProperty(exports, "gateAction", { enumerable: true, get: function () { return hook_program_js_1.gateAction; } });
 Object.defineProperty(exports, "hookMode", { enumerable: true, get: function () { return hook_program_js_1.hookMode; } });
 // inject vocabulary
-Object.defineProperty(exports, "experimental_defineInject", { enumerable: true, get: function () { return hook_program_js_1.defineInject; } });
+Object.defineProperty(exports, "experimental_defineInject", { enumerable: true, get: function () { return hook_program_js_1.experimental_defineInject; } });
 Object.defineProperty(exports, "inject", { enumerable: true, get: function () { return hook_program_js_1.inject; } });
 // react vocabulary
-Object.defineProperty(exports, "experimental_defineReact", { enumerable: true, get: function () { return hook_program_js_1.defineReact; } });
+Object.defineProperty(exports, "experimental_defineReact", { enumerable: true, get: function () { return hook_program_js_1.experimental_defineReact; } });
 Object.defineProperty(exports, "run", { enumerable: true, get: function () { return hook_program_js_1.run; } });
 Object.defineProperty(exports, "notice", { enumerable: true, get: function () { return hook_program_js_1.notice; } });
 Object.defineProperty(exports, "nothing", { enumerable: true, get: function () { return hook_program_js_1.nothing; } });

package/dist/linting.d.ts

@@ -1,14 +1,43 @@
 /**
  * `vigiles/linting` — Pillar 1 entry point: the **linting layer** for instruction
- * files. Re-exports the spec builders/types + the public compile entry points
- * under one concern-named import. This is the canonical pillar-1 surface; the
- * spec builders are also at the package root (`vigiles`).
+ * files. The spec builders/types that describe a CLAUDE.md, a SKILL.md or an
+ * agent, plus the public compile entry points, under one concern-named import.
  *
  * Curated (named, not `export *`) so the internal compiler validators, hash
  * helpers, and the linter cross-reference ENGINE stay out of the public surface,
  * the api reports, and the docs site (the CLI imports those from the source).
+ *
+ * 🔴 THAT SENTENCE USED TO BE FALSE, and so did the one after it (fixed
+ * 2026-08-21). The file claimed to be curated while `export * from
+ * "./core/spec.js"` sat one line below it, and it claimed "the spec builders are
+ * also at the package root (`vigiles`)" — measured against `vigiles.api.md`: 191
+ * exports there and zero matches for `claude`, `agent`, `enforce` or `result`.
+ * The builders' second door is `vigiles/spec`, not the root. Both claims read as
+ * documentation of a decision and were descriptions of the opposite one; a
+ * header nobody re-reads is where an `export *` hides best.
+ *
+ * WHAT THE CURATION DROPS (28 symbols, measured — nothing in this repo imported
+ * any of them from here; every in-repo user takes them from `vigiles/spec`, and
+ * the one live consumer of this subpath in the docs takes `compileAgent`): the
+ * typed-COMPOSITION family — `experimental_pipe`/`_pipeStep`/`_start`/
+ * `_andThen`/`_needs`, `Pipeline`, `PipeStep`, `Supplies`, `Handoff`,
+ * `NeedsContract`, `OkOf`, `TypedAgentSpec`, `TypedOutcome`, `Shape`,
+ * `OutputFieldType` and the `result()` builder. Those verify HANDOFFS between
+ * workers; they compile to nothing and lint nothing, so they are not pillar 1.
+ *
+ * ⚠️ The cut is not a clean slice along that line, and pretending otherwise
+ * would strand a signature: the `result()` FUNCTION leaves, but the
+ * `OutputContract` TYPE stays, because `compileAgent`/`compileSkill` name it in
+ * their own types. A consumer who needs to BUILD one imports `vigiles/spec`.
  */
-export * from "./core/spec.js";
+export { instructionFile, prose, experimental_effect, enforce, guidance, guard, file, cmd, symbol, ref, dir, glob, project, experimental_skill, experimental_agent, railway, delegate, 
+/** @deprecated Renamed to `instructionFile`. Removed one major AFTER the one that introduces it. */
+claude, 
+/** @deprecated Renamed to `prose`. Removed one major AFTER the one that introduces it. */
+instructions, 
+/** @deprecated Renamed to `experimental_agent`. Removed one major AFTER the one that introduces it. */
+agent, } from "./core/spec.js";
+export { BUILTIN_LINTERS, type BuiltinLinter, type LinterRule, type VigilesRef, type EnforcementRef, type KnownLinterRules, type KnownProjectFiles, type KnownNpmScripts, type KnownAgentName, type StrictLinterRule, type StrictFile, type StrictCmd, type ToolVocabulary, type OpenToolVocabulary, type AllowedAt, type AuthoredPurity, type EnforceRule, type GuidanceRule, type GuardRule, type Rule, type VerifiedPath, type VerifiedCmd, type VerifiedRef, type VerifiedDir, type VerifiedGlob, type FileRef, type CmdRef, type SkillRef, type SymbolRef, type DirRef, type GlobRef, type Ref, type EffectRegion, type InstructionFragment, type InstructionTarget, type ClaudeSpec, type Gate, type RoleGate, type ProjectRole, type SkillInput, type SkillStep, type SkillSpec, type SkillSpecInput, type AgentSpec, type AgentSpecInput, type Railway, type RailwayStep, type OutputContract, } from "./core/spec.js";
 export { compileClaude, compileSkill, compileAgent, compileRailway, CompileError, } from "./core/compile.js";
 export type { CompileClaudeOptions, CompileClaudeResult, CompileSkillResult, CompileAgentResult, CompileRailwayOptions, CompileRailwayResult, } from "./core/compile.js";
 //# sourceMappingURL=linting.d.ts.map

package/dist/linting.js

@@ -1,32 +1,73 @@
 "use strict";
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __exportStar = (this && this.__exportStar) || function(m, exports) {
-    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.compileRailway = exports.compileAgent = exports.compileSkill = exports.compileClaude = void 0;
 /**
  * `vigiles/linting` — Pillar 1 entry point: the **linting layer** for instruction
- * files. Re-exports the spec builders/types + the public compile entry points
- * under one concern-named import. This is the canonical pillar-1 surface; the
- * spec builders are also at the package root (`vigiles`).
+ * files. The spec builders/types that describe a CLAUDE.md, a SKILL.md or an
+ * agent, plus the public compile entry points, under one concern-named import.
  *
  * Curated (named, not `export *`) so the internal compiler validators, hash
  * helpers, and the linter cross-reference ENGINE stay out of the public surface,
  * the api reports, and the docs site (the CLI imports those from the source).
+ *
+ * 🔴 THAT SENTENCE USED TO BE FALSE, and so did the one after it (fixed
+ * 2026-08-21). The file claimed to be curated while `export * from
+ * "./core/spec.js"` sat one line below it, and it claimed "the spec builders are
+ * also at the package root (`vigiles`)" — measured against `vigiles.api.md`: 191
+ * exports there and zero matches for `claude`, `agent`, `enforce` or `result`.
+ * The builders' second door is `vigiles/spec`, not the root. Both claims read as
+ * documentation of a decision and were descriptions of the opposite one; a
+ * header nobody re-reads is where an `export *` hides best.
+ *
+ * WHAT THE CURATION DROPS (28 symbols, measured — nothing in this repo imported
+ * any of them from here; every in-repo user takes them from `vigiles/spec`, and
+ * the one live consumer of this subpath in the docs takes `compileAgent`): the
+ * typed-COMPOSITION family — `experimental_pipe`/`_pipeStep`/`_start`/
+ * `_andThen`/`_needs`, `Pipeline`, `PipeStep`, `Supplies`, `Handoff`,
+ * `NeedsContract`, `OkOf`, `TypedAgentSpec`, `TypedOutcome`, `Shape`,
+ * `OutputFieldType` and the `result()` builder. Those verify HANDOFFS between
+ * workers; they compile to nothing and lint nothing, so they are not pillar 1.
+ *
+ * ⚠️ The cut is not a clean slice along that line, and pretending otherwise
+ * would strand a signature: the `result()` FUNCTION leaves, but the
+ * `OutputContract` TYPE stays, because `compileAgent`/`compileSkill` name it in
+ * their own types. A consumer who needs to BUILD one imports `vigiles/spec`.
  */
-// The spec authoring builders (claude/enforce/guidance/file/cmd/agent/skill/…).
-__exportStar(require("./core/spec.js"), exports);
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.compileRailway = exports.compileAgent = exports.compileSkill = exports.compileClaude = exports.BUILTIN_LINTERS = exports.agent = exports.instructions = exports.claude = exports.delegate = exports.railway = exports.experimental_agent = exports.experimental_skill = exports.project = exports.glob = exports.dir = exports.ref = exports.symbol = exports.cmd = exports.file = exports.guard = exports.guidance = exports.enforce = exports.experimental_effect = exports.prose = exports.instructionFile = void 0;
+// --- the spec authoring builders: rules, refs, prose, and the three spec kinds ---
+var spec_js_1 = require("./core/spec.js");
+// instruction files
+Object.defineProperty(exports, "instructionFile", { enumerable: true, get: function () { return spec_js_1.instructionFile; } });
+Object.defineProperty(exports, "prose", { enumerable: true, get: function () { return spec_js_1.prose; } });
+Object.defineProperty(exports, "experimental_effect", { enumerable: true, get: function () { return spec_js_1.experimental_effect; } });
+// rules
+Object.defineProperty(exports, "enforce", { enumerable: true, get: function () { return spec_js_1.enforce; } });
+Object.defineProperty(exports, "guidance", { enumerable: true, get: function () { return spec_js_1.guidance; } });
+Object.defineProperty(exports, "guard", { enumerable: true, get: function () { return spec_js_1.guard; } });
+// verified references
+Object.defineProperty(exports, "file", { enumerable: true, get: function () { return spec_js_1.file; } });
+Object.defineProperty(exports, "cmd", { enumerable: true, get: function () { return spec_js_1.cmd; } });
+Object.defineProperty(exports, "symbol", { enumerable: true, get: function () { return spec_js_1.symbol; } });
+Object.defineProperty(exports, "ref", { enumerable: true, get: function () { return spec_js_1.ref; } });
+Object.defineProperty(exports, "dir", { enumerable: true, get: function () { return spec_js_1.dir; } });
+Object.defineProperty(exports, "glob", { enumerable: true, get: function () { return spec_js_1.glob; } });
+Object.defineProperty(exports, "project", { enumerable: true, get: function () { return spec_js_1.project; } });
+// the other two spec kinds + how a railway wires them
+Object.defineProperty(exports, "experimental_skill", { enumerable: true, get: function () { return spec_js_1.experimental_skill; } });
+Object.defineProperty(exports, "experimental_agent", { enumerable: true, get: function () { return spec_js_1.experimental_agent; } });
+Object.defineProperty(exports, "railway", { enumerable: true, get: function () { return spec_js_1.railway; } });
+Object.defineProperty(exports, "delegate", { enumerable: true, get: function () { return spec_js_1.delegate; } });
+// ─── ОКНО АЛИАСА (один мажор) — see core/spec.ts for why a window is not
+// politeness here. Kept on THIS door too: a consumer importing `claude` from
+// `vigiles/linting` never saw `vigiles/spec`, so the window over there does
+// not cover them.
+/** @deprecated Renamed to `instructionFile`. Removed one major AFTER the one that introduces it. */
+Object.defineProperty(exports, "claude", { enumerable: true, get: function () { return spec_js_1.claude; } });
+/** @deprecated Renamed to `prose`. Removed one major AFTER the one that introduces it. */
+Object.defineProperty(exports, "instructions", { enumerable: true, get: function () { return spec_js_1.instructions; } });
+/** @deprecated Renamed to `experimental_agent`. Removed one major AFTER the one that introduces it. */
+Object.defineProperty(exports, "agent", { enumerable: true, get: function () { return spec_js_1.agent; } });
+var spec_js_2 = require("./core/spec.js");
+Object.defineProperty(exports, "BUILTIN_LINTERS", { enumerable: true, get: function () { return spec_js_2.BUILTIN_LINTERS; } });
 // Compile: only the public entry points + their option/result types.
 var compile_js_1 = require("./core/compile.js");
 Object.defineProperty(exports, "compileClaude", { enumerable: true, get: function () { return compile_js_1.compileClaude; } });

package/dist/load-hook.js

@@ -56,7 +56,7 @@ async function loadHook(file) {
     const program = mod.default?.default ?? mod.default;
     if (!program || typeof program !== "object") {
         throw new hook_program_js_1.HookCompileError(`${file} has no default-exported hook program ` +
-            `(use \`export default defineHook({…})\`).`);
+            `(use \`export default experimental_defineHook({…})\`).`);
     }
     // Remember WHERE it came from, so the assertion that later EVALUATES it can
     // attribute execution coverage without parsing anything. Remembering is not

package/dist/scaffold-test.js

@@ -180,7 +180,7 @@ function fallbackSection(input) {
     return `import { runHarnessTest, assertToolUsed } from "vigiles";
 
 // ${input.name} has no result() contract, so its outcome can't be asserted
-// deterministically — add one (result() on its agent() spec) for a no-judge
+// deterministically — add one (result() on its experimental_agent() spec) for a no-judge
 // outcome test. For now, assert it reaches for the right tool.
 const r = await runHarnessTest({
   plugin: ".", // TODO: the plugin dir holding this subagent

package/dist/services-docker.js

@@ -9,7 +9,7 @@ exports.parseDockerPort = parseDockerPort;
 exports.experimental_makeDockerRuntime = experimental_makeDockerRuntime;
 /**
  * vigiles — a Docker-backed {@link ContainerRuntime} for the R3 disposable-service
- * tier (⚠️ EXPERIMENTAL / UNSTABLE — see src/services.ts and `vigiles/experimental`).
+ * tier (⚠️ EXPERIMENTAL / UNSTABLE — see src/services.ts; served from `vigiles`).
  *
  * This is the v0 backend the R3 build spec (research/r3-disposable-services.md)
  * scopes: `docker run` a throwaway service, wait for it to be ready, run its seed,
@@ -23,7 +23,7 @@ exports.experimental_makeDockerRuntime = experimental_makeDockerRuntime;
  * end-to-end integration test needs a live daemon (it skips when absent).
  *
  * @experimental
- * @module vigiles/experimental (docker backend)
+ * @module vigiles (docker backend)
  */
 const node_child_process_1 = require("node:child_process");
 const node_net_1 = require("node:net");

package/dist/services.d.ts

@@ -2,7 +2,7 @@
  * vigiles — R3 disposable-service tier (⚠️ EXPERIMENTAL / UNSTABLE).
  *
  * ─────────────────────────────────────────────────────────────────────────────
- *   EXPERIMENTAL: this surface is a DRAFT. Import it from `vigiles/experimental`,
+ *   EXPERIMENTAL: this surface is a DRAFT. Import it from `vigiles`,
  *   NOT from a stable subpath. It is NOT covered by the stability guarantee and
  *   may change shape or be removed WITHOUT a major-version bump. Do not build a
  *   production workflow on it yet. See docs/measuring-skills.md § Experimental.
@@ -44,7 +44,7 @@
  * side-effect-free).
  *
  * @experimental
- * @module vigiles/experimental (services)
+ * @module vigiles (services)
  */
 /**
  * How a service signals it is ready to accept work — polled by the

package/dist/services.js

@@ -3,7 +3,7 @@
  * vigiles — R3 disposable-service tier (⚠️ EXPERIMENTAL / UNSTABLE).
  *
  * ─────────────────────────────────────────────────────────────────────────────
- *   EXPERIMENTAL: this surface is a DRAFT. Import it from `vigiles/experimental`,
+ *   EXPERIMENTAL: this surface is a DRAFT. Import it from `vigiles`,
  *   NOT from a stable subpath. It is NOT covered by the stability guarantee and
  *   may change shape or be removed WITHOUT a major-version bump. Do not build a
  *   production workflow on it yet. See docs/measuring-skills.md § Experimental.
@@ -45,7 +45,7 @@
  * side-effect-free).
  *
  * @experimental
- * @module vigiles/experimental (services)
+ * @module vigiles (services)
  */
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.experimental_startServices = experimental_startServices;

package/dist/test.d.ts

@@ -56,6 +56,7 @@ export type { RunScriptOptions, ScriptRunResult } from "./run-script.js";
 export { runHook, parseHookOutput, decideHook, propertyHook, fileToolEvents, egressRoutes, } from "./run-hook.js";
 export type { HookRunResult, RunHookOptions, HookInput, HookOutput, HookPropertyResult, FileToolEventOptions, } from "./run-hook.js";
 export * from "./harness-assert.js";
+export { experimental_emitTool, experimental_parseEmitted, experimental_assertEmittedOk, type EmitFieldSchema, type EmitObjectSchema, type EmitPropertySchema, type EmitTrackSchema, type EmitToolDefinition, type ExperimentalEmitTool, } from "./experimental-emit.js";
 export { loadHook } from "./load-hook.js";
 export { evalChecks, assertChecks, tool, toolWith, notTool, onlyTools, skill, output, hookFired, received, turns, wrote, didNotWrite, subagent, blocked, allowed, mcp, cost, latency, tokens, inputTokens, outputTokens, cacheTokens, } from "./check.js";
 export type { ArgMatcher, Check, CheckJSON, CheckResult, JudgeFn, } from "./check.js";
@@ -74,4 +75,6 @@ export { defineEval } from "./eval-define.js";
 export type { EvalDefinition, EvalDefinitionInput, EvalHooks, EvalKind, EvalMeasurements, EvalReports, SelectionMatrixSpec, } from "./eval-define.js";
 export { assertRates, assertPromptDiversity, checkPromptDiversity, checkReportToJUnit, formatCheckReport, formatEvalReport, formatTriggerRateReport, parseClaudeRun, stubSkillBody, } from "./eval.js";
 export type { EvalArm, EvalDriver, EvalSpec, EvalReport, EvalUsage, MeasureSpec, ArmsMeasureSpec, ArmReport, ArmUsage, ArmsCheckReport, CheckRate, CheckReport, MetricStat, Metrics, ModelOutputParser, ParsedModelRun, PromptDiversityIssue, PromptTriggerStat, RunContext, RunOut, SelectionTrialResult, TriggerRateReport, TriggerRateSpec, AgentRunArgs, AgentRunner, } from "./eval.js";
+export { experimental_startServices, experimental_withServices, type ServiceSpec, type ServiceReady, type ServiceReset, type ServiceHandle, type ServiceSession, type ContainerRuntime, } from "./services.js";
+export { experimental_dockerRuntime, experimental_makeDockerRuntime, type DockerExec, type NetProbe, } from "./services-docker.js";
 //# sourceMappingURL=test.d.ts.map

package/dist/test.js

@@ -66,8 +66,8 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
     for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.mustNotInclude = exports.mustInclude = exports.commandsIn = exports.sandboxAvailable = exports.specTrusted = exports.decideSandbox = exports.parseHooks = exports.parseOutput = exports.parseResultEvent = exports.parseSubagents = exports.parseToolCalls = exports.runHarness = exports.runHarnessTest = exports.formatGuardrailReport = exports.assertBlocksDisasters = exports.unblockedDisasters = exports.verifyGuardrail = exports.DISASTER_CATALOG = exports.cacheTokens = exports.outputTokens = exports.inputTokens = exports.tokens = exports.latency = exports.cost = exports.mcp = exports.allowed = exports.blocked = exports.subagent = exports.didNotWrite = exports.wrote = exports.turns = exports.received = exports.hookFired = exports.output = exports.skill = exports.onlyTools = exports.notTool = exports.toolWith = exports.tool = exports.assertChecks = exports.evalChecks = exports.loadHook = exports.egressRoutes = exports.fileToolEvents = exports.propertyHook = exports.decideHook = exports.parseHookOutput = exports.runHook = exports.runScript = exports.recordCheck = void 0;
-exports.stubSkillBody = exports.parseClaudeRun = exports.formatTriggerRateReport = exports.formatEvalReport = exports.formatCheckReport = exports.checkReportToJUnit = exports.checkPromptDiversity = exports.assertPromptDiversity = exports.assertRates = exports.defineEval = exports.formatContainment = exports.compareContainment = exports.skillContract = void 0;
+exports.sandboxAvailable = exports.specTrusted = exports.decideSandbox = exports.parseHooks = exports.parseOutput = exports.parseResultEvent = exports.parseSubagents = exports.parseToolCalls = exports.runHarness = exports.runHarnessTest = exports.formatGuardrailReport = exports.assertBlocksDisasters = exports.unblockedDisasters = exports.verifyGuardrail = exports.DISASTER_CATALOG = exports.cacheTokens = exports.outputTokens = exports.inputTokens = exports.tokens = exports.latency = exports.cost = exports.mcp = exports.allowed = exports.blocked = exports.subagent = exports.didNotWrite = exports.wrote = exports.turns = exports.received = exports.hookFired = exports.output = exports.skill = exports.onlyTools = exports.notTool = exports.toolWith = exports.tool = exports.assertChecks = exports.evalChecks = exports.loadHook = exports.experimental_assertEmittedOk = exports.experimental_parseEmitted = exports.experimental_emitTool = exports.egressRoutes = exports.fileToolEvents = exports.propertyHook = exports.decideHook = exports.parseHookOutput = exports.runHook = exports.runScript = exports.recordCheck = void 0;
+exports.experimental_makeDockerRuntime = exports.experimental_dockerRuntime = exports.experimental_withServices = exports.experimental_startServices = exports.stubSkillBody = exports.parseClaudeRun = exports.formatTriggerRateReport = exports.formatEvalReport = exports.formatCheckReport = exports.checkReportToJUnit = exports.checkPromptDiversity = exports.assertPromptDiversity = exports.assertRates = exports.defineEval = exports.formatContainment = exports.compareContainment = exports.skillContract = exports.mustNotInclude = exports.mustInclude = exports.commandsIn = void 0;
 // --- reporting: how much did this script actually do? ---
 // `vigiles test` can otherwise see only an exit code, so a file that runs NOTHING
 // prints the same `✓` as one that ran and passed (measured 2026-08-08 on a file
@@ -92,6 +92,19 @@ Object.defineProperty(exports, "fileToolEvents", { enumerable: true, get: functi
 Object.defineProperty(exports, "egressRoutes", { enumerable: true, get: function () { return run_hook_js_1.egressRoutes; } });
 // --- assertions and the eval-RESULT analysis helpers (free; see cost #1 above) ---
 __exportStar(require("./harness-assert.js"), exports);
+// --- the EMIT delivery for a typed result (⚠️ EXPERIMENTAL) ---
+// Moved here 2026-08-21 from the `vigiles/experimental` subpath, which is gone
+// (the `experimental_` prefix already marks every call site; the subpath only
+// marked the import line). It belongs BESIDE the assertions above rather than in
+// a drawer of its own: `experimental_parseEmitted` / `experimental_assertEmittedOk`
+// are the emit-channel twins of `parseAgentResult` / `assertAgentOk`, and a reader
+// comparing the two delivery shapes should not have to change doors to see both.
+// Read src/experimental-emit.ts's header before using it — it lists, by number,
+// what is unproven and what would have to be true to drop the prefix.
+var experimental_emit_js_1 = require("./experimental-emit.js");
+Object.defineProperty(exports, "experimental_emitTool", { enumerable: true, get: function () { return experimental_emit_js_1.experimental_emitTool; } });
+Object.defineProperty(exports, "experimental_parseEmitted", { enumerable: true, get: function () { return experimental_emit_js_1.experimental_parseEmitted; } });
+Object.defineProperty(exports, "experimental_assertEmittedOk", { enumerable: true, get: function () { return experimental_emit_js_1.experimental_assertEmittedOk; } });
 // The compiled-hook LOADER. The in-process assertions above take the hook
 // OBJECT, but a `.harness.mjs` test only has its PATH — without this the
 // intended in-process test path is unreachable from the file format
@@ -196,4 +209,31 @@ Object.defineProperty(exports, "formatEvalReport", { enumerable: true, get: func
 Object.defineProperty(exports, "formatTriggerRateReport", { enumerable: true, get: function () { return eval_js_1.formatTriggerRateReport; } });
 Object.defineProperty(exports, "parseClaudeRun", { enumerable: true, get: function () { return eval_js_1.parseClaudeRun; } });
 Object.defineProperty(exports, "stubSkillBody", { enumerable: true, get: function () { return eval_js_1.stubSkillBody; } });
+// --- R3: the disposable-service tier (⚠️ EXPERIMENTAL, and it has REAL EFFECTS) ---
+// Moved off the `vigiles/experimental` subpath 2026-08-21, when that subpath was
+// deleted: it marked the IMPORT LINE, which is out of view by the time anyone
+// reads the call, while `experimental_` marks every call site.
+//
+// 🔴 IT LANDED ON `vigiles/eval` FIRST, AND THE EXPORT-PREFIX GATE REJECTED IT —
+// correctly, and the reasoning is worth keeping. `./eval` has a naming contract:
+// every runtime export there is `paid_*`, meaning THIS CALL CAN BILL YOU. R3 felt
+// like it belonged because the docs frame it as measuring skills for real. But
+// `experimental_startServices` takes a `ContainerRuntime` and starts containers;
+// it calls no model. Naming it `paid_experimental_startServices` to satisfy the
+// gate would have made `paid_` mean "expensive in some sense", which is exactly
+// the erosion that turns a prefix back into decoration. The model spend is in
+// `paid_measureArms`, which is already over there. So R3 is free-of-model-cost
+// and belongs on this door — where "free" keeps its narrow meaning.
+//
+// ⚠️ FREE OF MODEL COST IS NOT FREE OF CONSEQUENCE, and this is the one place the
+// root barrel carries something with real side effects. The disposable container
+// is the ONLY isolation vigiles provides — it does NOT confine the skill's
+// filesystem or network. Run it somewhere disposable with no production access
+// and keep real credentials out of the run. See the SAFETY note in src/services.ts.
+var services_js_1 = require("./services.js");
+Object.defineProperty(exports, "experimental_startServices", { enumerable: true, get: function () { return services_js_1.experimental_startServices; } });
+Object.defineProperty(exports, "experimental_withServices", { enumerable: true, get: function () { return services_js_1.experimental_withServices; } });
+var services_docker_js_1 = require("./services-docker.js");
+Object.defineProperty(exports, "experimental_dockerRuntime", { enumerable: true, get: function () { return services_docker_js_1.experimental_dockerRuntime; } });
+Object.defineProperty(exports, "experimental_makeDockerRuntime", { enumerable: true, get: function () { return services_docker_js_1.experimental_makeDockerRuntime; } });
 //# sourceMappingURL=test.js.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "vigiles",
-  "version": "19.0.0",
+  "version": "20.0.0",
   "description": "Audit, test and measure the harness your AI agent runs on — grade your CLAUDE.md / AGENTS.md, skills, subagents and hooks, run them against a scripted model, and measure whether they actually fire.",
   "keywords": [
     "claude-code",
@@ -46,7 +46,6 @@
     "./claude-code": "./dist/claude-code.js",
     "./codex": "./dist/codex.js",
     "./adapter": "./dist/adapter.js",
-    "./experimental": "./dist/experimental.js",
     "./vitest": {
       "types": "./dist/vitest.d.mts",
       "default": "./dist/vitest.mjs"
@@ -92,7 +91,7 @@
     "check": "node scripts/check.mjs",
     "docs:check": "npm run build && node scripts/check-doc-imports.mjs . docs README.md",
     "exports:check": "npm run build && node scripts/check-export-prefixes.mjs .",
-    "experimental:check": "npm run api:check && node scripts/check-experimental-naming.mjs",
+    "internal:check": "npm run api:check && node scripts/check-internal-tag.mjs",
     "docs:api": "typedoc"
   },
   "devDependencies": {

package/dist/experimental.d.ts

@@ -1,34 +0,0 @@
-/**
- * `vigiles/experimental` — ⚠️ EXPERIMENTAL, UNSTABLE public surface.
- *
- * Everything re-exported here is a DRAFT. It is deliberately quarantined behind
- * the `experimental` subpath (and the `experimental_` name prefix on runtime
- * exports) so the import itself signals the risk at the call site:
- *
- *   import { experimental_startServices } from "vigiles/experimental";
- *
- * NOT covered by the stability guarantee (STABILITY.md): the shape may change or
- * be removed WITHOUT a major-version bump. Do not depend on it in production.
- *
- * Current contents:
- *  - the R3 disposable-service tier (real side-effect testing; see
- *    docs/measuring-skills.md § Experimental and src/services.ts);
- *  - the EMIT delivery for a typed result (`src/experimental-emit.ts`) — a skill
- *    that CALLS a tool with its outcome instead of ending its turn with a fenced
- *    block, which is how an UNFORKED skill can carry an `OutputContract` at all.
- *    Read that module's header before using it: it lists, by number, what is
- *    unproven and what would have to be true to drop the prefix.
- *
- * ⚠️ SAFETY: R3 runs a model-driven skill FOR REAL. The disposable container is
- * the ONLY isolation vigiles provides — it does not confine the skill's filesystem
- * or network. Run it in a disposable environment with NO production access and
- * keep real credentials out of the run. See the SAFETY note in src/services.ts and
- * docs/measuring-skills.md § Experimental.
- *
- * @experimental
- * @module vigiles/experimental
- */
-export { experimental_startServices, experimental_withServices, type ServiceSpec, type ServiceReady, type ServiceReset, type ServiceHandle, type ServiceSession, type ContainerRuntime, } from "./services.js";
-export { experimental_dockerRuntime, experimental_makeDockerRuntime, type DockerExec, type NetProbe, } from "./services-docker.js";
-export { experimental_emitTool, experimental_parseEmitted, experimental_assertEmittedOk, type EmitFieldSchema, type EmitObjectSchema, type EmitPropertySchema, type EmitTrackSchema, type EmitToolDefinition, type ExperimentalEmitTool, } from "./experimental-emit.js";
-//# sourceMappingURL=experimental.d.ts.map

package/dist/experimental.js

@@ -1,44 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.experimental_assertEmittedOk = exports.experimental_parseEmitted = exports.experimental_emitTool = exports.experimental_makeDockerRuntime = exports.experimental_dockerRuntime = exports.experimental_withServices = exports.experimental_startServices = void 0;
-/**
- * `vigiles/experimental` — ⚠️ EXPERIMENTAL, UNSTABLE public surface.
- *
- * Everything re-exported here is a DRAFT. It is deliberately quarantined behind
- * the `experimental` subpath (and the `experimental_` name prefix on runtime
- * exports) so the import itself signals the risk at the call site:
- *
- *   import { experimental_startServices } from "vigiles/experimental";
- *
- * NOT covered by the stability guarantee (STABILITY.md): the shape may change or
- * be removed WITHOUT a major-version bump. Do not depend on it in production.
- *
- * Current contents:
- *  - the R3 disposable-service tier (real side-effect testing; see
- *    docs/measuring-skills.md § Experimental and src/services.ts);
- *  - the EMIT delivery for a typed result (`src/experimental-emit.ts`) — a skill
- *    that CALLS a tool with its outcome instead of ending its turn with a fenced
- *    block, which is how an UNFORKED skill can carry an `OutputContract` at all.
- *    Read that module's header before using it: it lists, by number, what is
- *    unproven and what would have to be true to drop the prefix.
- *
- * ⚠️ SAFETY: R3 runs a model-driven skill FOR REAL. The disposable container is
- * the ONLY isolation vigiles provides — it does not confine the skill's filesystem
- * or network. Run it in a disposable environment with NO production access and
- * keep real credentials out of the run. See the SAFETY note in src/services.ts and
- * docs/measuring-skills.md § Experimental.
- *
- * @experimental
- * @module vigiles/experimental
- */
-var services_js_1 = require("./services.js");
-Object.defineProperty(exports, "experimental_startServices", { enumerable: true, get: function () { return services_js_1.experimental_startServices; } });
-Object.defineProperty(exports, "experimental_withServices", { enumerable: true, get: function () { return services_js_1.experimental_withServices; } });
-var services_docker_js_1 = require("./services-docker.js");
-Object.defineProperty(exports, "experimental_dockerRuntime", { enumerable: true, get: function () { return services_docker_js_1.experimental_dockerRuntime; } });
-Object.defineProperty(exports, "experimental_makeDockerRuntime", { enumerable: true, get: function () { return services_docker_js_1.experimental_makeDockerRuntime; } });
-var experimental_emit_js_1 = require("./experimental-emit.js");
-Object.defineProperty(exports, "experimental_emitTool", { enumerable: true, get: function () { return experimental_emit_js_1.experimental_emitTool; } });
-Object.defineProperty(exports, "experimental_parseEmitted", { enumerable: true, get: function () { return experimental_emit_js_1.experimental_parseEmitted; } });
-Object.defineProperty(exports, "experimental_assertEmittedOk", { enumerable: true, get: function () { return experimental_emit_js_1.experimental_assertEmittedOk; } });
-//# sourceMappingURL=experimental.js.map