vigiles 4.0.0 → 4.0.1

package/README.md

@@ -100,13 +100,15 @@ hijacking unrelated ones (precision). **[Full guide →](docs/harness-testing.md
 
 ## Quick start
 
-> **Paste into Claude Code or Codex:**
->
-> > Install vigiles in this repo and run it. Verify my CLAUDE.md / AGENTS.md
-> > references and show me what's stale, then write and run a harness test for one
-> > of my hooks or skills. Use good defaults (both pillars, non-interactive), but
-> > **ask me first** whether to gate it in CI, whether to add a real-model eval,
-> > and whether to enforce strictly (`--strict`).
+**Paste into Claude Code or Codex:**
+
+```text
+Install vigiles in this repo and run it. Verify my CLAUDE.md / AGENTS.md
+references and show me what's stale, then write and run a harness test for one
+of my hooks or skills. Use good defaults (both pillars, non-interactive), but
+ask me first whether to gate it in CI, whether to add a real-model eval, and
+whether to enforce strictly (--strict).
+```
 
 Or do it yourself:
 
@@ -118,16 +120,25 @@ It's interactive in a terminal and non-interactive for agents/CI (or with
 `--yes`), so "set up vigiles" from a Claude Code / Codex prompt Just Works — and
 it installs a model-invocable **`test-harness` skill**, so afterward you can just
 tell your agent _"test my skills"_ and it picks the tier and writes the test.
-Scope `init` with `--lint` / `--test` (one pillar or both). Or write harness
-tests yourself in JS **or** TS (`*.harness.{mjs,ts}`) and run `npx vigiles test`.
-`init` also adds `vigiles` to your `devDependencies` and installs the Claude Code
-plugin (skills + hooks) via the marketplace — globally, never vendored into your
-repo. It wires CI as a `zernie/vigiles@v1` workflow — a composite over the same CLI:
-
-```yaml
-- uses: actions/checkout@v4
-- uses: zernie/vigiles@v1 # lints by default; posts a sticky PR comment + a `valid` output
-```
+
+<details>
+<summary>What <code>init</code> sets up</summary>
+
+- **Both pillars** by default; scope with `--lint` / `--test` (one or both).
+- Adds `vigiles` to your `devDependencies`.
+- Installs the Claude Code plugin (skills + hooks) via the marketplace —
+  globally, never vendored into your repo.
+- Wires CI as a `zernie/vigiles@v1` workflow (a composite over the same CLI):
+
+  ```yaml
+  - uses: actions/checkout@v4
+  - uses: zernie/vigiles@v1 # lints by default; posts a sticky PR comment + a `valid` output
+  ```
+
+Prefer to write tests yourself? They can be JS **or** TS
+(`*.harness.{mjs,ts}`) — run them with `npx vigiles test`.
+
+</details>
 
 ## More
 

package/action.yml

@@ -11,7 +11,7 @@ inputs:
     required: false
     default: "lint"
   paths:
-    description: "Comma- or space-separated paths to operate on (.md files for audit, .spec.ts files for compile). Auto-discovers when empty."
+    description: "Comma- or space-separated paths to operate on (.md files for lint, .spec.ts files for compile). Auto-discovers when empty."
     required: false
     default: ""
   version:

package/dist/adapters/claude-code/adapter.js

@@ -14,7 +14,7 @@ const layout_js_1 = require("./layout.js");
 const runtime_js_1 = require("./runtime.js");
 const hook_protocol_js_1 = require("./hook-protocol.js");
 const model_mock_js_1 = require("./model-mock.js");
-const harness_test_js_1 = require("./harness-test.js");
+const harness_test_js_1 = require("../../harness-test.js");
 exports.claudeCodeAdapter = {
     name: "claude-code",
     // The reference harness: every tier. Mockable transport (Anthropic SSE) and

package/dist/claude-code.d.ts

@@ -6,7 +6,7 @@
  * is the adapter, so a future `vigiles/<other-harness>` can sit beside it.
  */
 export * from "./adapters/claude-code/plugin-loader.js";
-export * from "./adapters/claude-code/mock-model.js";
+export * from "./mock-model.js";
 export * from "./adapters/claude-code/dialect.js";
 export * from "./adapters/claude-code/layout.js";
 export * from "./adapters/claude-code/runtime.js";

package/dist/claude-code.js

@@ -22,7 +22,7 @@ Object.defineProperty(exports, "__esModule", { value: true });
  * is the adapter, so a future `vigiles/<other-harness>` can sit beside it.
  */
 __exportStar(require("./adapters/claude-code/plugin-loader.js"), exports);
-__exportStar(require("./adapters/claude-code/mock-model.js"), exports);
+__exportStar(require("./mock-model.js"), exports);
 __exportStar(require("./adapters/claude-code/dialect.js"), exports);
 __exportStar(require("./adapters/claude-code/layout.js"), exports);
 __exportStar(require("./adapters/claude-code/runtime.js"), exports);

package/dist/cli.js

@@ -36,7 +36,7 @@ const refs_js_1 = require("./core/refs.js");
 const mcp_js_1 = require("./core/mcp.js");
 const skill_runtime_js_1 = require("./adapters/claude-code/skill-runtime.js");
 const linters_js_1 = require("./core/linters.js");
-const harness_test_js_1 = require("./adapters/claude-code/harness-test.js");
+const harness_test_js_1 = require("./harness-test.js");
 const run_scripts_js_1 = require("./adapters/claude-code/run-scripts.js");
 const integrity_js_1 = require("./core/integrity.js");
 const coverage_js_1 = require("./core/coverage.js");
@@ -1943,7 +1943,7 @@ function printUsage(command) {
     console.log("Examples:");
     console.log("  vigiles init                 Auto-detect project, create specs, wire CI");
     console.log("  vigiles compile              Compile all .spec.ts files");
-    console.log("  vigiles audit                Verify hashes + coverage + suggestions");
+    console.log("  vigiles lint                 Verify references, hashes, coverage + suggestions");
     console.log("");
     console.log("Plumbing:");
     console.log("  vigiles generate-types [out]  Emit .d.ts from project state");
@@ -2244,7 +2244,7 @@ function refsHookCommand() {
         issues.map((m) => `  - ${m}`).join("\n") +
         `\nExpress references as marks (\`enforce()\` / \`file()\` / \`cmd()\` / a ` +
         `\`vigiles:symbol\` span / an inline \`<!-- vigiles:enforce -->\` comment) so ` +
-        `\`vigiles audit\` can check them — or add \`<!-- vigiles:ignore -->\` if it ` +
+        `\`vigiles lint\` can check them — or add \`<!-- vigiles:ignore -->\` if it ` +
         `is prose, not a reference.`;
     process.stdout.write(JSON.stringify({
         hookSpecificOutput: {

package/dist/e2e.d.ts

@@ -15,5 +15,5 @@
  * [`vigiles/eval`](./eval.ts) + [`vigiles/judge`](./judge.ts), not from here.
  */
 export * from "./integration.js";
-export { egressRoutes } from "./adapters/claude-code/run-hook.js";
+export { egressRoutes } from "./run-hook.js";
 //# sourceMappingURL=e2e.d.ts.map

package/dist/e2e.js

@@ -34,6 +34,6 @@ exports.egressRoutes = void 0;
 __exportStar(require("./integration.js"), exports);
 // The real-egress capability probe (the egress-using runHook is already re-exported
 // via the integration→unit chain).
-var run_hook_js_1 = require("./adapters/claude-code/run-hook.js");
+var run_hook_js_1 = require("./run-hook.js");
 Object.defineProperty(exports, "egressRoutes", { enumerable: true, get: function () { return run_hook_js_1.egressRoutes; } });
 //# sourceMappingURL=e2e.js.map

package/dist/{adapters/claude-code/eval-cache.d.ts → eval-cache.d.ts}

@@ -1,4 +1,4 @@
-import { type SHA256Hash } from "../../core/hash.js";
+import { type SHA256Hash } from "./core/hash.js";
 import type { RunOut } from "./eval.js";
 /** Cache behaviour: never touch the cache / read-only / read-and-write. */
 export type CacheMode = "off" | "read" | "readwrite";

package/dist/{adapters/claude-code/eval-cache.js → eval-cache.js}

@@ -24,7 +24,7 @@ exports.restoreDir = restoreDir;
  */
 const node_fs_1 = require("node:fs");
 const node_path_1 = require("node:path");
-const hash_js_1 = require("../../core/hash.js");
+const hash_js_1 = require("./core/hash.js");
 const MAX_SNAPSHOT_FILE_BYTES = 1024 * 1024;
 const SKIP_DIRS = new Set(["node_modules", ".git"]);
 /**

package/dist/{adapters/claude-code/eval.js → eval.js}

@@ -39,8 +39,8 @@ const node_child_process_1 = require("node:child_process");
 const node_fs_1 = require("node:fs");
 const node_os_1 = require("node:os");
 const node_path_1 = require("node:path");
-const plugin_loader_js_1 = require("./plugin-loader.js");
-const runtime_js_1 = require("./runtime.js");
+const plugin_loader_js_1 = require("./adapters/claude-code/plugin-loader.js");
+const runtime_js_1 = require("./adapters/claude-code/runtime.js");
 const harness_test_js_1 = require("./harness-test.js");
 const eval_cache_js_1 = require("./eval-cache.js");
 function writeFiles(cwd, files) {

package/dist/harness-assert.d.ts

@@ -13,16 +13,16 @@
  *     `expect(...).toHaveCreated(...)` sugar. The signature is identical for
  *     vitest and jest, so the same object supports both.
  */
-import { type HarnessTestSpec, type HarnessTestResult, type ToolCall, type Trace } from "./adapters/claude-code/harness-test.js";
-import type { EvalReport, TriggerRateReport } from "./adapters/claude-code/eval.js";
-import type { HookRunResult, EgressAttempt } from "./adapters/claude-code/run-hook.js";
+import { type HarnessTestSpec, type HarnessTestResult, type ToolCall, type Trace } from "./harness-test.js";
+import type { EvalReport, TriggerRateReport } from "./eval.js";
+import type { HookRunResult, EgressAttempt } from "./run-hook.js";
 import type { OutputContract } from "./core/spec.js";
 import { type ParsedAgentResult } from "./adapters/claude-code/agent-result.js";
-import { type BaselineFile, type DiffOptions } from "./adapters/claude-code/eval-baseline.js";
-export { compareArms } from "./adapters/claude-code/stats.js";
-export type { Comparison } from "./adapters/claude-code/stats.js";
-export { diffReports, toBaselineFile, parseBaselineFile, readBaseline, writeBaseline, formatBaselineDiff, diffToJUnit, } from "./adapters/claude-code/eval-baseline.js";
-export type { BaselineFile, BaselineDiff, MetricDiff, DiffStatus, DiffOptions, } from "./adapters/claude-code/eval-baseline.js";
+import { type BaselineFile, type DiffOptions } from "./eval-baseline.js";
+export { compareArms } from "./stats.js";
+export type { Comparison } from "./stats.js";
+export { diffReports, toBaselineFile, parseBaselineFile, readBaseline, writeBaseline, formatBaselineDiff, diffToJUnit, } from "./eval-baseline.js";
+export type { BaselineFile, BaselineDiff, MetricDiff, DiffStatus, DiffOptions, } from "./eval-baseline.js";
 /**
  * Run a harness test, hand the result to `fn`, and always clean up the sandbox.
  * Returns whatever `fn` returns. Use this instead of calling `cleanup()` by

package/dist/harness-assert.js

@@ -57,15 +57,15 @@ exports.assertTriggerRate = assertTriggerRate;
  *     `expect(...).toHaveCreated(...)` sugar. The signature is identical for
  *     vitest and jest, so the same object supports both.
  */
-const harness_test_js_1 = require("./adapters/claude-code/harness-test.js");
+const harness_test_js_1 = require("./harness-test.js");
 const agent_result_js_1 = require("./adapters/claude-code/agent-result.js");
-const stats_js_1 = require("./adapters/claude-code/stats.js");
-const eval_baseline_js_1 = require("./adapters/claude-code/eval-baseline.js");
+const stats_js_1 = require("./stats.js");
+const eval_baseline_js_1 = require("./eval-baseline.js");
 // Re-export the significance primitives so the whole eval-analysis surface lives
 // behind `vigiles/harness-assert` (no separate entry point).
-var stats_js_2 = require("./adapters/claude-code/stats.js");
+var stats_js_2 = require("./stats.js");
 Object.defineProperty(exports, "compareArms", { enumerable: true, get: function () { return stats_js_2.compareArms; } });
-var eval_baseline_js_2 = require("./adapters/claude-code/eval-baseline.js");
+var eval_baseline_js_2 = require("./eval-baseline.js");
 Object.defineProperty(exports, "diffReports", { enumerable: true, get: function () { return eval_baseline_js_2.diffReports; } });
 Object.defineProperty(exports, "toBaselineFile", { enumerable: true, get: function () { return eval_baseline_js_2.toBaselineFile; } });
 Object.defineProperty(exports, "parseBaselineFile", { enumerable: true, get: function () { return eval_baseline_js_2.parseBaselineFile; } });

package/dist/{adapters/claude-code/harness-test.d.ts → harness-test.d.ts}

@@ -1,9 +1,9 @@
-import type { HarnessAdapter } from "../../core/adapter.js";
-import type { HarnessTestDriver, ToolCall, HookFire, ParsedRun, ModelTurn, ModelRequest } from "../../core/harness-driver.js";
+import type { HarnessAdapter } from "./core/adapter.js";
+import type { HarnessTestDriver, ToolCall, HookFire, ParsedRun, ModelTurn, ModelRequest } from "./core/harness-driver.js";
 import { type SandboxMode } from "./sandbox.js";
 export { scriptModel } from "./mock-model.js";
-export type { ModelTurn, ModelRequest, ToolCall, HookFire, HarnessTestDriver, } from "../../core/harness-driver.js";
-export { loadPlugin, resolveHarness } from "./plugin-loader.js";
+export type { ModelTurn, ModelRequest, ToolCall, HookFire, HarnessTestDriver, } from "./core/harness-driver.js";
+export { loadPlugin, resolveHarness, } from "./adapters/claude-code/plugin-loader.js";
 export { decideSandbox, specTrusted, sandboxAvailable, type SandboxMode, } from "./sandbox.js";
 export interface HarnessTestSpec {
     /** Fixture files to write in a fresh temp working dir (path → contents). */

package/dist/{adapters/claude-code/harness-test.js → harness-test.js}

@@ -43,14 +43,14 @@ const node_child_process_1 = require("node:child_process");
 const node_fs_1 = require("node:fs");
 const node_os_1 = require("node:os");
 const node_path_1 = require("node:path");
-const adapter_conformance_js_1 = require("../../adapter-conformance.js");
-const runtime_js_1 = require("./runtime.js");
+const adapter_conformance_js_1 = require("./adapter-conformance.js");
+const runtime_js_1 = require("./adapters/claude-code/runtime.js");
 const mock_model_js_1 = require("./mock-model.js");
-const plugin_loader_js_1 = require("./plugin-loader.js");
+const plugin_loader_js_1 = require("./adapters/claude-code/plugin-loader.js");
 const sandbox_js_1 = require("./sandbox.js");
 var mock_model_js_2 = require("./mock-model.js");
 Object.defineProperty(exports, "scriptModel", { enumerable: true, get: function () { return mock_model_js_2.scriptModel; } });
-var plugin_loader_js_2 = require("./plugin-loader.js");
+var plugin_loader_js_2 = require("./adapters/claude-code/plugin-loader.js");
 Object.defineProperty(exports, "loadPlugin", { enumerable: true, get: function () { return plugin_loader_js_2.loadPlugin; } });
 Object.defineProperty(exports, "resolveHarness", { enumerable: true, get: function () { return plugin_loader_js_2.resolveHarness; } });
 var sandbox_js_2 = require("./sandbox.js");

package/dist/integration.d.ts

@@ -10,7 +10,7 @@
  * imports from here.
  */
 export * from "./unit.js";
-export * from "./adapters/claude-code/harness-test.js";
-export * from "./adapters/claude-code/mock-model.js";
-export * from "./adapters/claude-code/plugin-loader.js";
+export * from "./harness-test.js";
+export * from "./mock-model.js";
+export type { LoadedPlugin } from "./plugin-loader.js";
 //# sourceMappingURL=integration.d.ts.map

package/dist/integration.js

@@ -26,7 +26,6 @@ Object.defineProperty(exports, "__esModule", { value: true });
  * imports from here.
  */
 __exportStar(require("./unit.js"), exports);
-__exportStar(require("./adapters/claude-code/harness-test.js"), exports);
-__exportStar(require("./adapters/claude-code/mock-model.js"), exports);
-__exportStar(require("./adapters/claude-code/plugin-loader.js"), exports);
+__exportStar(require("./harness-test.js"), exports);
+__exportStar(require("./mock-model.js"), exports);
 //# sourceMappingURL=integration.js.map

package/dist/{adapters/claude-code/mock-model.d.ts → mock-model.d.ts}

@@ -1,5 +1,5 @@
-import type { ModelTurn, ModelRequest } from "../../core/harness-driver.js";
-export type { ModelTurn, ModelRequest } from "../../core/harness-driver.js";
+import type { ModelTurn, ModelRequest } from "./core/harness-driver.js";
+export type { ModelTurn, ModelRequest } from "./core/harness-driver.js";
 /** Build a scripted model from an ordered list of turns. */
 export declare function scriptModel(turns: readonly ModelTurn[]): ModelTurn[];
 export interface TurnInfo {

package/dist/{adapters/claude-code/run-hook.d.ts → run-hook.d.ts}

@@ -1,4 +1,4 @@
-import type { HookProtocol } from "../../core/hook-protocol.js";
+import type { HookProtocol } from "./core/hook-protocol.js";
 import { type SandboxMode, type EgressAttempt } from "./sandbox.js";
 export type { EgressAttempt };
 /** A hook event payload (the JSON Claude Code writes to the hook's stdin). */

package/dist/{adapters/claude-code/run-hook.js → run-hook.js}

@@ -38,7 +38,7 @@ const node_child_process_1 = require("node:child_process");
 const node_fs_1 = require("node:fs");
 const node_os_1 = require("node:os");
 const node_path_1 = require("node:path");
-const hook_protocol_js_1 = require("./hook-protocol.js");
+const hook_protocol_js_1 = require("./adapters/claude-code/hook-protocol.js");
 const egress_js_1 = require("./egress.js");
 const sandbox_js_1 = require("./sandbox.js");
 /** Parse stdout as a hook JSON decision (pure, testable without a process). */

package/dist/{adapters/claude-code/sandbox.js → sandbox.js}

@@ -35,7 +35,7 @@ const node_child_process_1 = require("node:child_process");
 const node_fs_1 = require("node:fs");
 const node_os_1 = require("node:os");
 const node_path_1 = require("node:path");
-const runtime_js_1 = require("./runtime.js");
+const runtime_js_1 = require("./adapters/claude-code/runtime.js");
 let cachedAvailable;
 /**
  * Whether this environment can ACTUALLY confine untrusted code under bubblewrap.

package/dist/testing.d.ts

@@ -4,9 +4,14 @@
  * (eval) — plus the runner-agnostic predicates/assertions. Kept deliberately
  * separate from `vigiles/claude-code` so this surface can stay harness-agnostic as
  * more harnesses are added. Granular paths (`vigiles/run-hook`, etc.) still work.
+ *
+ * It re-exports the composition-root runner modules (which do the Claude-Code
+ * default-wiring), never an adapter directly — the `agnostic-surface` eslint
+ * boundary forbids importing `src/adapters/*` from here. See
+ * `research/adapter-api-design.md`.
  */
-export * from "./adapters/claude-code/run-hook.js";
-export * from "./adapters/claude-code/harness-test.js";
-export * from "./adapters/claude-code/eval.js";
+export * from "./run-hook.js";
+export * from "./harness-test.js";
+export * from "./eval.js";
 export * from "./harness-assert.js";
 //# sourceMappingURL=testing.d.ts.map

package/dist/testing.js

@@ -20,9 +20,14 @@ Object.defineProperty(exports, "__esModule", { value: true });
  * (eval) — plus the runner-agnostic predicates/assertions. Kept deliberately
  * separate from `vigiles/claude-code` so this surface can stay harness-agnostic as
  * more harnesses are added. Granular paths (`vigiles/run-hook`, etc.) still work.
+ *
+ * It re-exports the composition-root runner modules (which do the Claude-Code
+ * default-wiring), never an adapter directly — the `agnostic-surface` eslint
+ * boundary forbids importing `src/adapters/*` from here. See
+ * `research/adapter-api-design.md`.
  */
-__exportStar(require("./adapters/claude-code/run-hook.js"), exports);
-__exportStar(require("./adapters/claude-code/harness-test.js"), exports);
-__exportStar(require("./adapters/claude-code/eval.js"), exports);
+__exportStar(require("./run-hook.js"), exports);
+__exportStar(require("./harness-test.js"), exports);
+__exportStar(require("./eval.js"), exports);
 __exportStar(require("./harness-assert.js"), exports);
 //# sourceMappingURL=testing.js.map

package/dist/unit.d.ts

@@ -12,6 +12,6 @@
  * `vigiles/e2e`.
  */
 export * from "./harness-assert.js";
-export { runHook, parseHookOutput, decideHook, } from "./adapters/claude-code/run-hook.js";
-export type { HookInput, HookOutput, HookRunResult, RunHookOptions, } from "./adapters/claude-code/run-hook.js";
+export { runHook, parseHookOutput, decideHook } from "./run-hook.js";
+export type { HookInput, HookOutput, HookRunResult, RunHookOptions, } from "./run-hook.js";
 //# sourceMappingURL=unit.d.ts.map

package/dist/unit.js

@@ -29,7 +29,7 @@ exports.decideHook = exports.parseHookOutput = exports.runHook = void 0;
  * `vigiles/e2e`.
  */
 __exportStar(require("./harness-assert.js"), exports);
-var run_hook_js_1 = require("./adapters/claude-code/run-hook.js");
+var run_hook_js_1 = require("./run-hook.js");
 Object.defineProperty(exports, "runHook", { enumerable: true, get: function () { return run_hook_js_1.runHook; } });
 Object.defineProperty(exports, "parseHookOutput", { enumerable: true, get: function () { return run_hook_js_1.parseHookOutput; } });
 Object.defineProperty(exports, "decideHook", { enumerable: true, get: function () { return run_hook_js_1.decideHook; } });

package/hooks/session-start.sh

@@ -1,8 +1,8 @@
 #!/usr/bin/env bash
-# SessionStart hook — inject a one-line vigiles audit summary into
+# SessionStart hook — inject a one-line vigiles lint summary into
 # Claude's context at session start and after compaction.
 #
-# Uses `vigiles audit --summary` which is designed for this: it
+# Uses `vigiles lint --summary` which is designed for this: it
 # silences all per-stage output and prints a single line like
 #   vigiles: 3 stale / 2 validation errors / 1 duplicate
 # (or "vigiles: clean") so the injection costs a handful of tokens.
@@ -24,7 +24,7 @@ fi
 
 # Prefer local install, fall back to npx.
 if command -v npx &>/dev/null; then
-  SUMMARY=$(npx --no-install vigiles audit --summary 2>/dev/null || true)
+  SUMMARY=$(npx --no-install vigiles lint --summary 2>/dev/null || true)
 else
   exit 0
 fi

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "vigiles",
-  "version": "4.0.0",
+  "version": "4.0.1",
   "description": "Compile .spec.ts files to instruction files (CLAUDE.md, AGENTS.md) with linter cross-referencing",
   "bin": {
     "vigiles": "dist/cli.js"
@@ -20,14 +20,14 @@
     "./spec": "./dist/core/spec.js",
     "./compile": "./dist/core/compile.js",
     "./linters": "./dist/core/linters.js",
-    "./eval": "./dist/adapters/claude-code/eval.js",
-    "./harness-test": "./dist/adapters/claude-code/harness-test.js",
+    "./eval": "./dist/eval.js",
+    "./harness-test": "./dist/harness-test.js",
     "./harness-assert": "./dist/harness-assert.js",
-    "./run-hook": "./dist/adapters/claude-code/run-hook.js",
+    "./run-hook": "./dist/run-hook.js",
     "./plugin-loader": "./dist/adapters/claude-code/plugin-loader.js",
     "./mcp": "./dist/core/mcp.js",
-    "./judge": "./dist/adapters/claude-code/judge.js",
-    "./mock-model": "./dist/adapters/claude-code/mock-model.js",
+    "./judge": "./dist/judge.js",
+    "./mock-model": "./dist/mock-model.js",
     "./vitest": {
       "types": "./dist/vitest.d.mts",
       "default": "./dist/vitest.mjs"