@iowarp/clio-coder 0.3.0 → 0.3.1

package/dist/{chunk-2J63S4SF.js → chunk-FST4FYJB.js}

@@ -1,18 +1,30 @@
+import { createRequire as __clioCreateRequire } from "node:module"; const require = __clioCreateRequire(import.meta.url);
 import {
+  COMPAT_RESOURCE_PRECEDENCE,
   defaultScopedResourceRoots,
   expandSkillInvocationInput,
   loadSkills,
   parsePendingSkillRequests,
+  projectCompatTrusted,
   readRootEntries,
   sourceInfoForRoot,
   splitYamlFrontmatter,
   stringField
-} from "./chunk-26BZQOAD.js";
+} from "./chunk-474KN5II.js";
 import {
-  expandConfigPath
-} from "./chunk-5LDRNKX2.js";
+  INTEROP_AGENT_KINDS
+} from "./chunk-IHXBNWMM.js";
+import {
+  expandConfigPath,
+  require_dist
+} from "./chunk-GB6QRBXN.js";
+import {
+  __toESM,
+  init_esm_shims
+} from "./chunk-3R73A4XB.js";
 
 // src/domains/resources/skills/evals.ts
+init_esm_shims();
 var SCENARIO_HEADING = /^##\s+([A-Z])(\d+)\s*[-:–—]\s*(.+?)\s*$/;
 function parseSkillEvals(markdown) {
   const lines = markdown.split("\n");
@@ -140,19 +152,34 @@ function extractExpected(block) {
   return bullets.map((bullet) => bullet.trim()).filter((bullet) => bullet.length > 0);
 }
 
+// src/domains/resources/index.ts
+init_esm_shims();
+
+// src/domains/resources/extension.ts
+init_esm_shims();
+
+// src/domains/resources/loader.ts
+init_esm_shims();
+
 // src/domains/resources/prompts/loader.ts
+init_esm_shims();
 import { readFileSync } from "node:fs";
+import { homedir } from "node:os";
 import path from "node:path";
 
 // src/domains/resources/collision.ts
+init_esm_shims();
 var SCOPE_RANK = {
   package: 0,
   user: 1,
   project: 2,
   cli: 3
 };
+function rankOf(info) {
+  return info.precedence ?? SCOPE_RANK[info.scope];
+}
 function compareCandidates(a, b) {
-  const rankDelta = SCOPE_RANK[a.source.scope] - SCOPE_RANK[b.source.scope];
+  const rankDelta = rankOf(a.source) - rankOf(b.source);
   if (rankDelta !== 0) return rankDelta;
   return a.source.path.localeCompare(b.source.path);
 }
@@ -191,6 +218,7 @@ function resolveResourceCollisions(candidates) {
 }
 
 // src/domains/resources/prompts/substitute.ts
+init_esm_shims();
 function parseCommandArgs(input) {
   const args = [];
   let current = "";
@@ -250,8 +278,32 @@ function substituteArgs(content, args) {
 }
 
 // src/domains/resources/prompts/loader.ts
-function defaultPromptTemplateRoots(cwd) {
-  return defaultScopedResourceRoots("prompts", cwd);
+function defaultPromptTemplateRoots(input = {}) {
+  const cwd = input.cwd ?? process.cwd();
+  const home = input.home ?? homedir();
+  const trustProject = projectCompatTrusted(input.trustProjectCompatRoots);
+  const compat = [];
+  for (const kind of INTEROP_AGENT_KINDS) {
+    if (kind.userPromptRoot !== void 0) {
+      compat.push({
+        path: path.join(home, kind.userPromptRoot),
+        scope: "user",
+        source: `${kind.id}-user`,
+        precedence: COMPAT_RESOURCE_PRECEDENCE.userCompat,
+        trusted: true
+      });
+    }
+    if (kind.projectPromptRoot !== void 0) {
+      compat.push({
+        path: path.join(cwd, kind.projectPromptRoot),
+        scope: "project",
+        source: `${kind.id}-project`,
+        precedence: COMPAT_RESOURCE_PRECEDENCE.projectCompat,
+        trusted: trustProject
+      });
+    }
+  }
+  return [...defaultScopedResourceRoots("prompts", cwd), ...compat];
 }
 function splitOptionalFrontmatter(raw, filePath, diagnostics) {
   const split = splitYamlFrontmatter(raw);
@@ -289,7 +341,8 @@ function loadPromptFile(filePath, root, diagnostics) {
     description,
     content: body.trim(),
     filePath,
-    sourceInfo
+    sourceInfo,
+    trusted: root.trusted !== false
   };
   if (argumentHint) template.argumentHint = argumentHint;
   return { name, value: template, source: sourceInfo };
@@ -304,8 +357,7 @@ function loadPromptRoot(root, diagnostics) {
   return candidates;
 }
 function loadPromptTemplates(input = {}) {
-  const cwd = input.cwd ?? process.cwd();
-  const roots = input.roots ?? defaultPromptTemplateRoots(cwd);
+  const roots = input.roots ?? defaultPromptTemplateRoots(input);
   const diagnostics = [];
   const candidates = roots.flatMap((root) => loadPromptRoot(root, diagnostics));
   const resolved = resolveResourceCollisions(candidates);
@@ -329,6 +381,16 @@ function expandPromptTemplateInput(input, templates) {
   if (!command) return { expanded: false, text: input, args: [], diagnostics: templates.diagnostics };
   const template = templates.items.find((entry) => entry.name === command.name);
   if (!template) return { expanded: false, text: input, args: [], diagnostics: templates.diagnostics };
+  if (!template.trusted) {
+    const message = `prompt template ${template.name} comes from an untrusted project root; set skills.trustProjectCompatRoots to use it`;
+    return {
+      expanded: false,
+      text: input,
+      args: [],
+      diagnostics: [...templates.diagnostics, { type: "warning", message, path: template.filePath }],
+      refusal: { template, message }
+    };
+  }
   const args = parseCommandArgs(command.rest);
   return {
     expanded: true,
@@ -343,6 +405,10 @@ function expandPromptTemplateInput(input, templates) {
 function createResourcesLoader(options = {}) {
   const defaultCwd = options.cwd ?? process.cwd();
   const skillOptions2 = () => options.skills?.() ?? {};
+  const promptOptions = (cwd) => ({
+    cwd,
+    ...skillOptions2().trustProjectCompatRoots !== void 0 ? { trustProjectCompatRoots: skillOptions2().trustProjectCompatRoots === true } : {}
+  });
   return {
     skills(cwd = defaultCwd) {
       return loadSkills({ cwd, ...skillOptions2() });
@@ -354,10 +420,10 @@ function createResourcesLoader(options = {}) {
       return parsePendingSkillRequests(text, loadSkills({ cwd, ...skillOptions2() }), { cwd, ...expansionOptions });
     },
     prompts(cwd = defaultCwd) {
-      return loadPromptTemplates({ cwd });
+      return loadPromptTemplates(promptOptions(cwd));
     },
     expandPromptTemplate(text, cwd = defaultCwd) {
-      return expandPromptTemplateInput(text, loadPromptTemplates({ cwd }));
+      return expandPromptTemplateInput(text, loadPromptTemplates(promptOptions(cwd)));
     },
     themes() {
       return { items: [], diagnostics: [] };
@@ -423,15 +489,17 @@ function skillOptions(trustProjectCompatRoots, options) {
 }
 
 // src/domains/resources/manifest.ts
+init_esm_shims();
 var ResourcesManifest = {
   name: "resources",
   dependsOn: ["config"]
 };
 
 // src/domains/resources/skills/provenance-pin.ts
+init_esm_shims();
+var import_yaml = __toESM(require_dist(), 1);
 import { existsSync, readFileSync as readFileSync2 } from "node:fs";
 import path2 from "node:path";
-import yaml from "yaml";
 var SKILL_PIN_MANIFEST_FILENAME = "registry.yaml";
 function isPlainObject(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
@@ -445,7 +513,7 @@ function resolveSkillPinManifestPath(cwd) {
 function loadSkillPinManifest(manifestPath) {
   let parsed;
   try {
-    parsed = yaml.parse(readFileSync2(manifestPath, "utf8"));
+    parsed = import_yaml.default.parse(readFileSync2(manifestPath, "utf8"));
   } catch {
     return null;
   }
@@ -505,4 +573,4 @@ export {
   ResourcesDomainModule,
   createResourcesDomainModule
 };
-//# sourceMappingURL=chunk-2J63S4SF.js.map
+//# sourceMappingURL=chunk-FST4FYJB.js.map

package/dist/{chunk-3DANZDGR.js → chunk-G34LV2PF.js}

@@ -1,31 +1,44 @@
+import { createRequire as __clioCreateRequire } from "node:module"; const require = __clioCreateRequire(import.meta.url);
 import {
   loadOperatorProfile,
   loadProjectRules,
   renderOperatorProfile,
   selectActiveRules
-} from "./chunk-UWIJNAOB.js";
+} from "./chunk-M5T5VO65.js";
 import {
   compile,
   compileWorker,
   sha256
-} from "./chunk-GNGDQYDU.js";
+} from "./chunk-7SS2CTV2.js";
 import {
   isUserVisibleAgent
-} from "./chunk-WD6AJM35.js";
+} from "./chunk-OLBBMFRD.js";
 import {
   classifyProjectPreload
-} from "./chunk-KBR4MZZR.js";
+} from "./chunk-K5XEMXTI.js";
 import {
   BusChannels
-} from "./chunk-D5YD55AR.js";
+} from "./chunk-Q5WJOSJ7.js";
+import {
+  require_dist
+} from "./chunk-GB6QRBXN.js";
 import {
   resolvePackageRoot
-} from "./chunk-DXQNI4PC.js";
+} from "./chunk-IWHMRKLL.js";
+import {
+  __toESM,
+  init_esm_shims
+} from "./chunk-3R73A4XB.js";
+
+// src/domains/prompts/index.ts
+init_esm_shims();
 
 // src/domains/prompts/extension.ts
+init_esm_shims();
 import { isAbsolute, relative } from "node:path";
 
 // src/core/clio-repo.ts
+init_esm_shims();
 import { existsSync, readFileSync, statSync } from "node:fs";
 import path from "node:path";
 var CLIO_PACKAGE_NAME = "@iowarp/clio-coder";
@@ -84,6 +97,7 @@ function detectClioCoderRepo(cwd = process.cwd()) {
 }
 
 // src/domains/agents/catalog.ts
+init_esm_shims();
 var DEFAULT_DISPATCH_AGENT_ID = "coder";
 var FLEET_PROMPT_PURPOSE_MAX_CHARS = 64;
 var FLEET_DELEGATION_RULE = "Delegate when the task has two or more independent file-scoped subtasks, or any broad exploration. You keep synthesis and validation; a single narrow change stays with you.";
@@ -173,9 +187,10 @@ function formatSpecLine(spec, suffix) {
 }
 
 // src/domains/prompts/fragment-loader.ts
+init_esm_shims();
+var import_yaml = __toESM(require_dist(), 1);
 import { readdirSync, readFileSync as readFileSync2 } from "node:fs";
 import path2 from "node:path";
-import yaml from "yaml";
 var frontmatterRegex = /^---\r?\n([\s\S]*?)\r?\n---\r?\n?([\s\S]*)$/;
 var fragmentIdRegex = /^[a-z0-9-]+(?:\.[a-z0-9-]+)+$/;
 function defaultRootDir() {
@@ -214,7 +229,7 @@ function parseFragment(filePath, rootDir) {
   const body = match[2] ?? "";
   let parsed;
   try {
-    parsed = yaml.parse(frontmatterText);
+    parsed = import_yaml.default.parse(frontmatterText);
   } catch (err) {
     const reason = err instanceof Error ? err.message : String(err);
     throw new Error(`fragment-loader: ${relPath}: invalid YAML frontmatter (${reason})`);
@@ -498,6 +513,7 @@ function selectProjectContext(context, providerSupportsTools) {
 }
 
 // src/domains/prompts/manifest.ts
+init_esm_shims();
 var PromptsManifest = {
   name: "prompts",
   // agents: the compiled session prompt carries the fleet roster, so the
@@ -516,7 +532,14 @@ function createPromptsDomainModule(options = {}) {
   };
 }
 
+// src/domains/scheduling/index.ts
+init_esm_shims();
+
+// src/domains/scheduling/extension.ts
+init_esm_shims();
+
 // src/domains/scheduling/budget.ts
+init_esm_shims();
 function createBudgetState(initialCeilingUsd) {
   if (initialCeilingUsd < 0) throw new Error(`budget: ceiling must be >= 0 (got ${initialCeilingUsd})`);
   let ceiling = initialCeilingUsd;
@@ -539,6 +562,7 @@ function createBudgetState(initialCeilingUsd) {
 }
 
 // src/domains/scheduling/cluster.ts
+init_esm_shims();
 var LOCAL_NODE_ID = "local";
 var NODE_DEATH_FAILURE_THRESHOLD = 2;
 function freshState() {
@@ -698,6 +722,7 @@ function createSchedulingBundle(context) {
 }
 
 // src/domains/scheduling/manifest.ts
+init_esm_shims();
 var SchedulingManifest = {
   name: "scheduling",
   dependsOn: ["config", "observability"]
@@ -714,4 +739,4 @@ export {
   createPromptsDomainModule,
   SchedulingDomainModule
 };
-//# sourceMappingURL=chunk-3DANZDGR.js.map
+//# sourceMappingURL=chunk-G34LV2PF.js.map

package/dist/{chunk-BBUH4VAA.js → chunk-GAEBEQVI.js}

@@ -1,23 +1,30 @@
+import { createRequire as __clioCreateRequire } from "node:module"; const require = __clioCreateRequire(import.meta.url);
 import {
   shellQuote
-} from "./chunk-GOTUR54M.js";
+} from "./chunk-TXOTCRLG.js";
 import {
   atomicWrite
-} from "./chunk-UGYAX5YI.js";
+} from "./chunk-HQQID6OA.js";
 import {
   clioStateDir
-} from "./chunk-X3NE4WVW.js";
+} from "./chunk-BNAZZHFG.js";
 import {
   readClioVersion,
   resolvePackageRoot
-} from "./chunk-DXQNI4PC.js";
+} from "./chunk-IWHMRKLL.js";
+import {
+  init_esm_shims
+} from "./chunk-3R73A4XB.js";
 
 // src/domains/dispatch/fleet-preflight.ts
+init_esm_shims();
 import { execFile } from "node:child_process";
 import { existsSync, readFileSync } from "node:fs";
 import { join as join2 } from "node:path";
+import { performance } from "node:perf_hooks";
 
 // src/domains/dispatch/route-facts.ts
+init_esm_shims();
 var ROUTE_FACT_FRESHNESS_MS = 15 * 60 * 1e3;
 function isFresh(probedAt, now, freshnessMs) {
   const at = Date.parse(probedAt);
@@ -112,16 +119,20 @@ function evaluateRouteFacts(facts, resources, requirement, options) {
 }
 
 // src/domains/dispatch/transport.ts
+init_esm_shims();
 import { spawn as spawn2 } from "node:child_process";
 
 // src/domains/dispatch/worker-spawn.ts
+init_esm_shims();
 import { spawn } from "node:child_process";
 import { join } from "node:path";
 
 // src/domains/dispatch/worker-protocol.ts
+init_esm_shims();
 import { createHash as createHash2 } from "node:crypto";
 
 // src/worker/protocol.ts
+init_esm_shims();
 import { createHash } from "node:crypto";
 var WORKER_PROTOCOL_VERSION = 1;
 var CONTROL_FRAME_PREFIX = "@clio-control/1 ";
@@ -407,11 +418,8 @@ function parseControlFrame(line) {
       if (!attestation.ok) return attestation;
       return { ok: true, value: { kind: "announce", attestation: attestation.value } };
     }
-    case "heartbeat": {
-      const at = readFiniteNumber(record, "at");
-      if (at === null) return { ok: false, reason: "heartbeat frame requires a finite at" };
-      return { ok: true, value: { kind: "heartbeat", at } };
-    }
+    case "heartbeat":
+      return { ok: true, value: { kind: "heartbeat" } };
     case "cancel_ack": {
       const at = readFiniteNumber(record, "at");
       if (at === null) return { ok: false, reason: "cancel_ack frame requires a finite at" };
@@ -903,10 +911,10 @@ function spawnWorkerProcess(command, args, spec, opts) {
 }
 function spawnNativeWorker(spec, opts) {
   const workerEntry = opts?.workerEntryPath ?? join(resolvePackageRoot(), "dist/worker/entry.js");
+  const { workerEntryPath: _entryPath, ...processOptions } = opts ?? {};
   return spawnWorkerProcess(process.execPath, ["--disable-warning=ExperimentalWarning", workerEntry], spec, {
-    ...opts?.cwd !== void 0 ? { cwd: opts.cwd } : {},
-    env: opts?.env ?? process.env,
-    ...opts?.shutdownGraceMs !== void 0 ? { shutdownGraceMs: opts.shutdownGraceMs } : {}
+    ...processOptions,
+    env: opts?.env ?? process.env
   });
 }
 
@@ -924,7 +932,7 @@ function remoteEnvAssignments(node) {
   return `CLIO_CODER_RESIDENCY=${residency} CLIO_CODER_WORKER_PGID=$$${labelAssignment}`;
 }
 function buildRemoteWorkerCommand(node, cwd) {
-  const entry = node.clioEntry !== void 0 && node.clioEntry.trim().length > 0 ? node.clioEntry.trim() : DEFAULT_REMOTE_CLIO_ENTRY;
+  const entry = node.clioCoderEntry !== void 0 && node.clioCoderEntry.trim().length > 0 ? node.clioCoderEntry.trim() : DEFAULT_REMOTE_CLIO_ENTRY;
   return `cd ${shellQuote(cwd)} && exec env ${remoteEnvAssignments(node)} ${entry}`;
 }
 function buildSshArgs(node, remoteCommand) {
@@ -966,15 +974,20 @@ function createSshWorkerTransport(node, opts) {
         } catch {
         }
       };
+      const { cwd: _consumedCwd, onAnnounce, onForcedKill, ...forwarded } = spawnOpts ?? {};
       return spawnWorkerProcess(sshBinary, buildSshArgs(node, buildRemoteWorkerCommand(node, cwd)), spec, {
-        // No cwd for the local ssh client; the remote command cds itself.
-        env: process.env,
         ...opts?.shutdownGraceMs !== void 0 ? { shutdownGraceMs: opts.shutdownGraceMs } : {},
+        ...forwarded,
+        env: process.env,
         onAnnounce: (attestation) => {
           remote.pid = attestation.pid;
           remote.processGroupId = attestation.processGroupId;
+          onAnnounce?.(attestation);
         },
-        onForcedKill: killRemote
+        onForcedKill: () => {
+          killRemote();
+          onForcedKill?.();
+        }
       });
     }
   };
@@ -1043,7 +1056,7 @@ function routeFactVerdict(requirement, records = readFleetPreflightRecords(), op
 var PREFLIGHT_MARKER = "clio-preflight/1";
 var DEFAULT_PREFLIGHT_TIMEOUT_MS = 2e4;
 function buildPreflightScript(node, projectRoot, targets = []) {
-  const entry = node.clioEntry !== void 0 && node.clioEntry.trim().length > 0 ? node.clioEntry.trim() : "clio-coder worker";
+  const entry = node.clioCoderEntry !== void 0 && node.clioCoderEntry.trim().length > 0 ? node.clioCoderEntry.trim() : "clio-coder worker";
   const cliBase = entry.endsWith(" worker") ? entry.slice(0, -" worker".length) : null;
   const versionProbe = cliBase !== null ? `v=$(${cliBase} --version 2>/dev/null | head -n 1); if [ -n "$v" ]; then echo "clio=$v"; else echo clio=missing; fi` : `echo clio=custom-entry`;
   const lines = [
@@ -1143,9 +1156,9 @@ async function runFleetNodePreflight(node, projectRoot, options) {
     resources: null
   };
   const script = buildPreflightScript(node, projectRoot, targets);
-  const probeStartedAt = Date.now();
+  const probeStartedAt = performance.now();
   const result = await runSsh(sshBinary, buildSshArgs(node, script), timeoutMs);
-  const probeDurationMs = Date.now() - probeStartedAt;
+  const probeDurationMs = Math.round(performance.now() - probeStartedAt);
   if (!result.stdout.includes(PREFLIGHT_MARKER)) {
     const stderr = result.stderr.trim().split("\n").slice(-1)[0] ?? "";
     record.detail = `unreachable (ssh exit ${result.code}${stderr.length > 0 ? `: ${stderr}` : ""})`;
@@ -1183,7 +1196,7 @@ async function runFleetNodePreflight(node, projectRoot, options) {
   if (!checks.pathParity)
     failures.push(`project root ${projectRoot} missing on node (disjoint filesystems are unsupported)`);
   if (!checks.clioPresent)
-    failures.push("clio-coder not found on remote PATH (set fleet.nodes[].clioEntry or install clio-coder)");
+    failures.push("clio-coder not found on remote PATH (set fleet.nodes[].clioCoderEntry or install clio-coder)");
   else if (!checks.versionMatch) {
     failures.push(
       `clio-coder version mismatch (local ${parseSemver(localVersion) ?? localVersion}, remote ${record.remoteVersion ?? "unknown"})`
@@ -1221,4 +1234,4 @@ export {
   routeFactVerdict,
   runFleetNodePreflight
 };
-//# sourceMappingURL=chunk-BBUH4VAA.js.map
+//# sourceMappingURL=chunk-GAEBEQVI.js.map