vigiles 5.2.0 → 7.0.0

package/dist/adapters/claude-code/skill-runtime.d.ts

@@ -17,7 +17,7 @@
  *
  * Safety: this executes the gate commands the skill author declared (e.g.
  * `npm test`, `validate.py`) via an explicit, user-invoked command
- * (`vigiles run-skill`). It is not a silent hook and runs nothing the spec
+ * (`vigiles hook-runtime run-skill`). It is not a silent hook and runs nothing the spec
  * didn't declare as a gate.
  */
 import type { PurityLevel } from "../../core/effects.js";

package/dist/adapters/claude-code/skill-runtime.js

@@ -18,7 +18,7 @@
  *
  * Safety: this executes the gate commands the skill author declared (e.g.
  * `npm test`, `validate.py`) via an explicit, user-invoked command
- * (`vigiles run-skill`). It is not a silent hook and runs nothing the spec
+ * (`vigiles hook-runtime run-skill`). It is not a silent hook and runs nothing the spec
  * didn't declare as a gate.
  */
 Object.defineProperty(exports, "__esModule", { value: true });
@@ -38,7 +38,6 @@ const node_fs_1 = require("node:fs");
 const node_path_1 = require("node:path");
 const effects_js_1 = require("../../core/effects.js");
 const dialect_js_1 = require("./dialect.js");
-const effect_region_js_1 = require("./effect-region.js");
 const STEP_RE = /^###\s+Step\s+(\d+)/;
 const GATE_CMD_RE = /<!--\s*vigiles:gate\s+"([^"]*)"(?:\s+retry:(\d+))?\s*-->/;
 const GATE_FILE_RE = /<!--\s*vigiles:gate\s+file:(\S+)\s*-->/;
@@ -294,13 +293,6 @@ function evaluateSkillPreToolUse(cwd, tool, command) {
         return { allow: true, message: "" };
     const md = (0, node_fs_1.readFileSync)(full, "utf-8");
     const purity = parseSkillPurity(md);
-    const boundary = (0, effect_region_js_1.hasEffectBoundary)(md);
-    if (boundary) {
-        const effective = (0, effect_region_js_1.readEffectActive)(cwd)
-            ? (purity ?? "unrestricted")
-            : "pure";
-        return (0, effects_js_1.decidePurityGate)(effective, tool, command, dialect_js_1.claudeCodeDialect);
-    }
     if (!purity)
         return { allow: true, message: "" };
     return (0, effects_js_1.decidePurityGate)(purity, tool, command, dialect_js_1.claudeCodeDialect);

package/dist/adapters/claude-code/typed-spec.d.ts

@@ -0,0 +1,58 @@
+/**
+ * Typed Claude Code authoring surface — the compile-time half of the purity
+ * contract, bound to the Claude Code tool vocabulary.
+ *
+ * The core `agent()` / `skill()` builders (`vigiles/spec`) are generic over a
+ * tool `ToolVocabulary` that DEFAULTS to fully-open (`string` at every purity
+ * level), so they accept any tools — backwards-compatible, harness-agnostic.
+ * This module re-binds them to the CONCRETE Claude Code vocabulary derived from
+ * `claudeCodeDialect`, so authoring a spec with an invalid `purity`×`tools`
+ * combination is a `tsc` error at EDIT TIME, before any vigiles command runs:
+ *
+ *   import { agent } from "vigiles/claude-code";
+ *
+ *   agent({ purity: "pure", tools: ["Read", "Bash"] });
+ *   //                                       ^^^^^^ tsc error — Bash side-effecting
+ *
+ *   agent({ purity: "bounded", tools: ["Read", "Bash", "Write"] }); // OK
+ *   agent({ purity: "bounded", tools: ["mcp__x__y"] });
+ *   //                                  ^^^^^^^^^^^ tsc error — MCP not decidable
+ *
+ *   agent({ tools: ["anything", "mcp__x__y"] }); // no purity → open, OK
+ *
+ * This is a STRICT ADDITION to the runtime/compile checks: `purityViolations`
+ * (`vigiles compile`) and `decidePurityGate` (the PreToolUse gate) are unchanged
+ * and remain the universal backstop. In particular the command-level decision a
+ * `bounded` unit makes for `Bash` (read-only command allowed, mutating denied)
+ * is the RUNTIME gate's job — the type only admits the `Bash` TOOL at `bounded`.
+ *
+ * The CC literal tool names live ONLY in this adapter (and the dialect it reads
+ * from), never in core — the hexagonal boundary that keeps the domain
+ * harness-agnostic.
+ */
+import { type AgentSpec, type AgentSpecInput, type SkillSpec, type SkillSpecInput, type AuthoredPurity, type ToolVocabulary } from "../../core/spec.js";
+import type { ClaudeCodeReadOnlyTool, ClaudeCodeBoundedTool } from "./dialect.js";
+/**
+ * The Claude Code tool vocabulary, split by the purity floor that admits each
+ * tool (mirrors the runtime ladder in `core/effects.ts`):
+ * - `readOnly`: tools a `pure` unit may declare (Read/Grep/Glob/LS).
+ * - `bounded`:  read-only ∪ Write/Edit/MultiEdit/NotebookEdit ∪ `Bash`.
+ */
+export interface ClaudeCodeToolVocabulary extends ToolVocabulary {
+    readonly readOnly: ClaudeCodeReadOnlyTool;
+    readonly bounded: ClaudeCodeBoundedTool;
+}
+/**
+ * Define a Claude Code subagent with the purity floor enforced AT COMPILE TIME
+ * against the Claude Code tool catalog. Identical to the core `agent()` at
+ * runtime (it IS the core builder); the only difference is the typed `tools`
+ * constraint. `P` is inferred from the literal `purity` field.
+ */
+export declare function agent<const P extends AuthoredPurity | undefined = undefined>(spec: AgentSpecInput<P, ClaudeCodeToolVocabulary>): AgentSpec;
+/**
+ * Define a Claude Code skill with the purity floor enforced AT COMPILE TIME
+ * against the Claude Code tool catalog. Identical to the core `skill()` at
+ * runtime; the typed `tools` constraint is the only difference.
+ */
+export declare function skill<const P extends AuthoredPurity | undefined = undefined>(spec: SkillSpecInput<P, ClaudeCodeToolVocabulary>): SkillSpec;
+//# sourceMappingURL=typed-spec.d.ts.map

package/dist/adapters/claude-code/typed-spec.js

@@ -0,0 +1,55 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.agent = agent;
+exports.skill = skill;
+/**
+ * Typed Claude Code authoring surface — the compile-time half of the purity
+ * contract, bound to the Claude Code tool vocabulary.
+ *
+ * The core `agent()` / `skill()` builders (`vigiles/spec`) are generic over a
+ * tool `ToolVocabulary` that DEFAULTS to fully-open (`string` at every purity
+ * level), so they accept any tools — backwards-compatible, harness-agnostic.
+ * This module re-binds them to the CONCRETE Claude Code vocabulary derived from
+ * `claudeCodeDialect`, so authoring a spec with an invalid `purity`×`tools`
+ * combination is a `tsc` error at EDIT TIME, before any vigiles command runs:
+ *
+ *   import { agent } from "vigiles/claude-code";
+ *
+ *   agent({ purity: "pure", tools: ["Read", "Bash"] });
+ *   //                                       ^^^^^^ tsc error — Bash side-effecting
+ *
+ *   agent({ purity: "bounded", tools: ["Read", "Bash", "Write"] }); // OK
+ *   agent({ purity: "bounded", tools: ["mcp__x__y"] });
+ *   //                                  ^^^^^^^^^^^ tsc error — MCP not decidable
+ *
+ *   agent({ tools: ["anything", "mcp__x__y"] }); // no purity → open, OK
+ *
+ * This is a STRICT ADDITION to the runtime/compile checks: `purityViolations`
+ * (`vigiles compile`) and `decidePurityGate` (the PreToolUse gate) are unchanged
+ * and remain the universal backstop. In particular the command-level decision a
+ * `bounded` unit makes for `Bash` (read-only command allowed, mutating denied)
+ * is the RUNTIME gate's job — the type only admits the `Bash` TOOL at `bounded`.
+ *
+ * The CC literal tool names live ONLY in this adapter (and the dialect it reads
+ * from), never in core — the hexagonal boundary that keeps the domain
+ * harness-agnostic.
+ */
+const spec_js_1 = require("../../core/spec.js");
+/**
+ * Define a Claude Code subagent with the purity floor enforced AT COMPILE TIME
+ * against the Claude Code tool catalog. Identical to the core `agent()` at
+ * runtime (it IS the core builder); the only difference is the typed `tools`
+ * constraint. `P` is inferred from the literal `purity` field.
+ */
+function agent(spec) {
+    return (0, spec_js_1.agent)(spec);
+}
+/**
+ * Define a Claude Code skill with the purity floor enforced AT COMPILE TIME
+ * against the Claude Code tool catalog. Identical to the core `skill()` at
+ * runtime; the typed `tools` constraint is the only difference.
+ */
+function skill(spec) {
+    return (0, spec_js_1.skill)(spec);
+}
+//# sourceMappingURL=typed-spec.js.map

package/dist/adapters/codex/hook-protocol.js

@@ -5,6 +5,9 @@ exports.codexHookProtocol = {
     name: "codex",
     blockExitCode: 2,
     denyDecisionValues: ["block", "deny"],
+    // Codex matchers are anchored regexes (`matcher = "^Bash$"`), unlike Claude
+    // Code's exact tool name / `A|B` alternation.
+    matcherStyle: "regex",
     eventEnvVars: [
         "session_id",
         "cwd",

package/dist/adapters/codex/mock-model.js

@@ -15,7 +15,7 @@ exports.startCodexMock = startCodexMock;
  * with the proven `response.created → … → response.completed` SSE sequence that
  * makes codex emit one assistant text message. There is no count-tokens
  * endpoint. This is the Codex-side analogue of the Anthropic Messages mock in
- * `src/adapters/claude-code/mock-model.ts` (`startMock`).
+ * `src/mock-model.ts` (`startMock`).
  *
  * The wire format here is NOT guessed — it is PROVEN end-to-end against real
  * `codex` (codex-cli 0.139.0) via the `-c model_providers.mock.*` recipe in

package/dist/claude-code.d.ts

@@ -9,6 +9,7 @@ export * from "./adapters/claude-code/plugin-loader.js";
 export * from "./mock-model.js";
 export { claudeCodeDriver, buildClaudeArgs, parseClaudeRun, claudeAvailable, } from "./harness-test.js";
 export * from "./adapters/claude-code/dialect.js";
+export { agent, skill, type ClaudeCodeToolVocabulary, } from "./adapters/claude-code/typed-spec.js";
 export * from "./adapters/claude-code/layout.js";
 export * from "./adapters/claude-code/runtime.js";
 export * from "./adapters/claude-code/hook-protocol.js";

package/dist/claude-code.js

@@ -14,7 +14,7 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
     for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.claudeAvailable = exports.parseClaudeRun = exports.buildClaudeArgs = exports.claudeCodeDriver = void 0;
+exports.skill = exports.agent = exports.claudeAvailable = exports.parseClaudeRun = exports.buildClaudeArgs = exports.claudeCodeDriver = void 0;
 /**
  * `vigiles/claude-code` — the Claude Code-specific harness pieces a *different*
  * harness would swap out: the plugin/repo loader (reads real Claude Code plugin
@@ -35,6 +35,13 @@ Object.defineProperty(exports, "buildClaudeArgs", { enumerable: true, get: funct
 Object.defineProperty(exports, "parseClaudeRun", { enumerable: true, get: function () { return harness_test_js_1.parseClaudeRun; } });
 Object.defineProperty(exports, "claudeAvailable", { enumerable: true, get: function () { return harness_test_js_1.claudeAvailable; } });
 __exportStar(require("./adapters/claude-code/dialect.js"), exports);
+// The typed Claude Code authoring surface: `agent` / `skill` with the `purity`
+// floor enforced AT COMPILE TIME against the CC tool catalog (a `tsc` error for
+// e.g. `purity: "pure"` + `"Bash"`). A strict addition to the runtime/compile
+// purity checks; the bare core `agent()`/`skill()` (`vigiles/spec`) stay open.
+var typed_spec_js_1 = require("./adapters/claude-code/typed-spec.js");
+Object.defineProperty(exports, "agent", { enumerable: true, get: function () { return typed_spec_js_1.agent; } });
+Object.defineProperty(exports, "skill", { enumerable: true, get: function () { return typed_spec_js_1.skill; } });
 __exportStar(require("./adapters/claude-code/layout.js"), exports);
 __exportStar(require("./adapters/claude-code/runtime.js"), exports);
 __exportStar(require("./adapters/claude-code/hook-protocol.js"), exports);

package/dist/cli-commands.d.ts

@@ -0,0 +1,19 @@
+/**
+ * The canonical vigiles command surface — the SINGLE SOURCE OF TRUTH the
+ * self-command-refs dogfood (`src/self-command-refs.test.ts`) cross-references
+ * vigiles's OWN docs + comments against, so a renamed/removed command can't
+ * leave a stale `vigiles <cmd>` reference rotting in the docs (the cross-ref
+ * moat applied to vigiles itself; the cohesive-cli-surface rule).
+ *
+ * VERBS are typed by a human/agent/CI. HOOK_RUNTIME_KINDS are the hidden runtime
+ * entrypoints under `vigiles hook-runtime <kind>`, emitted into hooks configs and
+ * never typed by hand. A behavioural test asserts the dispatch (`src/cli.ts`)
+ * recognizes exactly these, so this list can't silently drift from the code.
+ */
+/** Human-facing verbs (printed in help; typed by a human/agent/CI). */
+export declare const VERBS: readonly ["init", "compile", "lint", "refs", "test", "eval", "scan", "measure", "explain", "scaffold-test", "generate-types", "generate-schema", "generate-harness", "hook-runtime"];
+/** Runtime entrypoint kinds under `vigiles hook-runtime <kind>` (emitted, not typed). */
+export declare const HOOK_RUNTIME_KINDS: readonly ["run-program", "agent", "agent-start", "agent-done", "skill", "skill-tool", "skill-start", "skill-done", "run-skill", "intercept-tool", "guard", "action", "refs", "effect-enter", "effect-exit"];
+export type Verb = (typeof VERBS)[number];
+export type HookRuntimeKind = (typeof HOOK_RUNTIME_KINDS)[number];
+//# sourceMappingURL=cli-commands.d.ts.map

package/dist/cli-commands.js

@@ -0,0 +1,51 @@
+"use strict";
+/**
+ * The canonical vigiles command surface — the SINGLE SOURCE OF TRUTH the
+ * self-command-refs dogfood (`src/self-command-refs.test.ts`) cross-references
+ * vigiles's OWN docs + comments against, so a renamed/removed command can't
+ * leave a stale `vigiles <cmd>` reference rotting in the docs (the cross-ref
+ * moat applied to vigiles itself; the cohesive-cli-surface rule).
+ *
+ * VERBS are typed by a human/agent/CI. HOOK_RUNTIME_KINDS are the hidden runtime
+ * entrypoints under `vigiles hook-runtime <kind>`, emitted into hooks configs and
+ * never typed by hand. A behavioural test asserts the dispatch (`src/cli.ts`)
+ * recognizes exactly these, so this list can't silently drift from the code.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.HOOK_RUNTIME_KINDS = exports.VERBS = void 0;
+/** Human-facing verbs (printed in help; typed by a human/agent/CI). */
+exports.VERBS = [
+    "init",
+    "compile",
+    "lint",
+    "refs",
+    "test",
+    "eval",
+    "scan",
+    "measure",
+    "explain",
+    "scaffold-test",
+    "generate-types",
+    "generate-schema",
+    "generate-harness",
+    "hook-runtime",
+];
+/** Runtime entrypoint kinds under `vigiles hook-runtime <kind>` (emitted, not typed). */
+exports.HOOK_RUNTIME_KINDS = [
+    "run-program",
+    "agent",
+    "agent-start",
+    "agent-done",
+    "skill",
+    "skill-tool",
+    "skill-start",
+    "skill-done",
+    "run-skill",
+    "intercept-tool",
+    "guard",
+    "action",
+    "refs",
+    "effect-enter",
+    "effect-exit",
+];
+//# sourceMappingURL=cli-commands.js.map