vigiles 6.0.0 → 7.0.0

package/dist/tool-intercept.js

@@ -23,7 +23,7 @@ exports.parseIntercepts = parseIntercepts;
  *
  * - `decideIntercept` — does this call get intercepted, and with what deny reason;
  * - `buildInterceptSettings` — the PreToolUse hook fragment routing matched tools
- *   through `vigiles intercept-tool-hook`;
+ *   through `vigiles hook-runtime intercept-tool`;
  * - `serializeIntercepts` / `parseIntercepts` — the env round-trip (incl. RegExp
  *   matchers) the hook subprocess reads back.
  *
@@ -40,7 +40,7 @@ exports.parseIntercepts = parseIntercepts;
  * tools, so deny+reason is the closest available — with that ceiling.
  */
 const arg_match_js_1 = require("./arg-match.js");
-/** Env var the spawned `vigiles intercept-tool-hook` reads its intercept list from. */
+/** Env var the spawned `vigiles hook-runtime intercept-tool` reads its intercept list from. */
 exports.INTERCEPT_TOOLS_ENV = "VIGILES_INTERCEPT_TOOLS";
 /** The default denial reason — honest that the call was intercepted (prevented), NOT executed. */
 exports.DEFAULT_INTERCEPT_REASON = "vigiles intercepted this tool call for testing — it was NOT executed. " +
@@ -48,7 +48,7 @@ exports.DEFAULT_INTERCEPT_REASON = "vigiles intercepted this tool call for testi
 /**
  * Decide whether a tool call should be intercepted. Returns the first matching
  * intercept's denial reason (preventing real execution), or `{ intercept: false }`
- * to let the call run for real. Pure — the same logic `vigiles intercept-tool-hook`
+ * to let the call run for real. Pure — the same logic `vigiles hook-runtime intercept-tool`
  * runs.
  */
 function decideIntercept(toolName, input, intercepts) {
@@ -90,14 +90,14 @@ function uniqueToolNames(intercepts) {
 }
 /**
  * Build the PreToolUse hook fragment that routes every intercepted tool through
- * `vigiles intercept-tool-hook`. The `matcher` is a CC tool-name regex over the
+ * `vigiles hook-runtime intercept-tool`. The `matcher` is a CC tool-name regex over the
  * union of intercepted tool names (each escaped), so unrelated tools are never
  * intercepted. Merge the result into an arm's `settings`; the intercept list
  * itself travels in the {@link INTERCEPT_TOOLS_ENV} env var (see
  * {@link serializeIntercepts}).
  */
 function buildInterceptSettings(intercepts, opts = {}) {
-    const command = opts.command ?? "npx vigiles intercept-tool-hook";
+    const command = opts.command ?? "npx vigiles hook-runtime intercept-tool";
     const matcher = uniqueToolNames(intercepts).map(escapeRegex).join("|");
     return {
         hooks: {

package/dist/unit.d.ts

@@ -16,4 +16,6 @@ export { runHook, parseHookOutput, decideHook, propertyHook, } from "./run-hook.
 export type { HookInput, HookOutput, HookRunResult, RunHookOptions, HookPropertyResult, } from "./run-hook.js";
 export * from "./check.js";
 export { hookFired } from "./check.js";
+export { DISASTER_CATALOG, verifyGuardrail, unblockedDisasters, assertBlocksDisasters, formatGuardrailReport, } from "./guardrail-check.js";
+export type { DisasterEvent, DisasterCategory, GuardrailResult, VerifyGuardrailOptions, } from "./guardrail-check.js";
 //# sourceMappingURL=unit.d.ts.map

package/dist/unit.js

@@ -14,7 +14,7 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
     for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.hookFired = exports.propertyHook = exports.decideHook = exports.parseHookOutput = exports.runHook = void 0;
+exports.formatGuardrailReport = exports.assertBlocksDisasters = exports.unblockedDisasters = exports.verifyGuardrail = exports.DISASTER_CATALOG = exports.hookFired = exports.propertyHook = exports.decideHook = exports.parseHookOutput = exports.runHook = void 0;
 /**
  * `vigiles/unit` — the **no-capability** harness-testing surface.
  *
@@ -39,4 +39,11 @@ Object.defineProperty(exports, "propertyHook", { enumerable: true, get: function
 __exportStar(require("./check.js"), exports);
 var check_js_1 = require("./check.js");
 Object.defineProperty(exports, "hookFired", { enumerable: true, get: function () { return check_js_1.hookFired; } });
+// Guardrail verification — "prove your safety hook actually blocks" (over runHook).
+var guardrail_check_js_1 = require("./guardrail-check.js");
+Object.defineProperty(exports, "DISASTER_CATALOG", { enumerable: true, get: function () { return guardrail_check_js_1.DISASTER_CATALOG; } });
+Object.defineProperty(exports, "verifyGuardrail", { enumerable: true, get: function () { return guardrail_check_js_1.verifyGuardrail; } });
+Object.defineProperty(exports, "unblockedDisasters", { enumerable: true, get: function () { return guardrail_check_js_1.unblockedDisasters; } });
+Object.defineProperty(exports, "assertBlocksDisasters", { enumerable: true, get: function () { return guardrail_check_js_1.assertBlocksDisasters; } });
+Object.defineProperty(exports, "formatGuardrailReport", { enumerable: true, get: function () { return guardrail_check_js_1.formatGuardrailReport; } });
 //# sourceMappingURL=unit.js.map

package/hooks/refs-nudge.sh

@@ -13,7 +13,7 @@ INPUT=$(cat)
 command -v npx >/dev/null 2>&1 || exit 0
 [ -f package.json ] || exit 0
 
-printf '%s' "$INPUT" | npx vigiles refs-hook
+printf '%s' "$INPUT" | npx vigiles hook-runtime refs
 status=${PIPESTATUS[1]}
 
 # Propagate ONLY an explicit block (exit 2). Swallow tool/setup errors so a

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "vigiles",
-  "version": "6.0.0",
+  "version": "7.0.0",
   "description": "Lint & test the harness your AI agent runs on — verify the references in your CLAUDE.md / AGENTS.md and test that your hooks and skills actually work.",
   "keywords": [
     "claude-code",
@@ -38,6 +38,7 @@
     "./linting": "./dist/linting.js",
     "./testing": "./dist/testing.js",
     "./unit": "./dist/unit.js",
+    "./hook": "./dist/hook.js",
     "./integration": "./dist/integration.js",
     "./e2e": "./dist/e2e.js",
     "./claude-code": "./dist/claude-code.js",
@@ -82,11 +83,10 @@
     "test:types": "npm run build && tsc --noEmit -p test/types/tsconfig.json",
     "api:report": "npm run build && node scripts/api-extractor.mjs --local",
     "api:check": "npm run build && node scripts/api-extractor.mjs",
-    "docs:api": "npm run api:report && api-documenter markdown -i temp -o api-reference"
+    "docs:api": "typedoc"
   },
   "devDependencies": {
     "@eslint/js": "^10.0.1",
-    "@microsoft/api-documenter": "^7.30.7",
     "@microsoft/api-extractor": "^7.58.9",
     "@types/js-yaml": "^4.0.9",
     "@types/minimatch": "^5.1.2",
@@ -102,6 +102,7 @@
     "jest": "^30.4.2",
     "prettier": "^3.8.1",
     "tsx": "^4.21.0",
+    "typedoc": "^0.28.19",
     "typescript": "^5.9.3",
     "vitest": "^4.1.8"
   },
@@ -124,6 +125,7 @@
     "@ast-grep/napi": "^0.43.0",
     "@iarna/toml": "^2.2.5",
     "@jackchuka/mdschema": "^0.12.8",
+    "ci-info": "^4.4.0",
     "cosmiconfig": "^9.0.1",
     "glob": "^13.0.6",
     "js-yaml": "^4.1.0",