@iowarp/clio-coder 0.3.0 → 0.3.2

package/dist/chunk-MBS4V7ZP.js

@@ -0,0 +1,217 @@
+import { createRequire as __clioCreateRequire } from "node:module"; const require = __clioCreateRequire(import.meta.url);
+import {
+  readLayeredSettings,
+  readStrictLayeredSettings
+} from "./chunk-CBCAPZAA.js";
+import {
+  formatBootTrace
+} from "./chunk-HKIYEGME.js";
+import {
+  initializeClioHome
+} from "./chunk-BMEMKKIT.js";
+import {
+  readSettings
+} from "./chunk-A3CYT5EX.js";
+import {
+  require_dist
+} from "./chunk-APJ265NV.js";
+import {
+  findEngineEnvKeys,
+  getEngineEnvApiKey
+} from "./chunk-YXLYO42X.js";
+import {
+  clioConfigDir
+} from "./chunk-BNAZZHFG.js";
+import {
+  __toESM,
+  init_esm_shims
+} from "./chunk-3R73A4XB.js";
+
+// src/cli/clio.ts
+init_esm_shims();
+
+// src/cli/default-target.ts
+init_esm_shims();
+
+// src/domains/providers/auth/boot-status.ts
+init_esm_shims();
+var import_yaml = __toESM(require_dist(), 1);
+import { existsSync, readFileSync } from "node:fs";
+import { join } from "node:path";
+function record(value) {
+  return value !== null && typeof value === "object" && !Array.isArray(value) ? value : null;
+}
+function storedCredentialPresent(providerId) {
+  const path = join(clioConfigDir(), "credentials.yaml");
+  if (!existsSync(path)) return false;
+  try {
+    const root = record((0, import_yaml.parse)(readFileSync(path, "utf8")));
+    const entry = record(record(root?.entries)?.[providerId]);
+    if (!entry) return false;
+    if (entry.type === "api_key") return typeof entry.key === "string" && entry.key.trim().length > 0;
+    if (entry.type === "oauth") {
+      return typeof entry.access === "string" && typeof entry.refresh === "string" && typeof entry.expires === "number";
+    }
+    return typeof entry.key === "string" && entry.key.trim().length > 0;
+  } catch {
+    return false;
+  }
+}
+function environmentCredentialPresent(providerId, explicitEnvVar) {
+  if (explicitEnvVar && process.env[explicitEnvVar]?.trim()) return true;
+  for (const name of findEngineEnvKeys(providerId) ?? []) {
+    if (process.env[name]?.trim()) return true;
+  }
+  return Boolean(getEngineEnvApiKey(providerId)?.trim());
+}
+function bootAuthStatus(target, runtime) {
+  const required = runtime.auth === "oauth" || runtime.auth === "api-key" && (Boolean(target.auth?.apiKeyEnvVar || target.auth?.apiKeyRef || target.auth?.oauthProfile) || runtime.tier === "cloud" || Boolean(runtime.credentialsEnvVar));
+  const providerId = target.auth?.oauthProfile?.trim() || target.auth?.apiKeyRef?.trim() || runtime.oauthProviderId || runtime.id;
+  if (!required) return { providerId, required: false, available: true };
+  const explicitEnvVar = target.auth?.apiKeyEnvVar ?? runtime.credentialsEnvVar;
+  return {
+    providerId,
+    required: true,
+    available: storedCredentialPresent(providerId) || environmentCredentialPresent(providerId, explicitEnvVar)
+  };
+}
+
+// src/domains/providers/runtimes/boot-manifest.ts
+init_esm_shims();
+var BUILTIN_RUNTIME_BOOT_MANIFEST = [
+  { id: "alcf", kind: "http", tier: "cloud", auth: "oauth" },
+  { id: "anthropic", kind: "http", tier: "cloud", auth: "api-key", credentialsEnvVar: "ANTHROPIC_API_KEY" },
+  { id: "anthropic-max", kind: "http", tier: "cloud", auth: "oauth", oauthProviderId: "anthropic" },
+  { id: "bedrock", kind: "http", tier: "cloud", auth: "aws-sdk" },
+  { id: "deepseek", kind: "http", tier: "cloud", auth: "api-key", credentialsEnvVar: "DEEPSEEK_API_KEY" },
+  { id: "google", kind: "http", tier: "cloud", auth: "api-key", credentialsEnvVar: "GOOGLE_API_KEY" },
+  { id: "groq", kind: "http", tier: "cloud", auth: "api-key", credentialsEnvVar: "GROQ_API_KEY" },
+  { id: "mistral", kind: "http", tier: "cloud", auth: "api-key", credentialsEnvVar: "MISTRAL_API_KEY" },
+  { id: "openai", kind: "http", tier: "cloud", auth: "api-key", credentialsEnvVar: "OPENAI_API_KEY" },
+  { id: "openai-codex", kind: "http", tier: "cloud", auth: "oauth" },
+  { id: "openrouter", kind: "http", tier: "cloud", auth: "api-key", credentialsEnvVar: "OPENROUTER_API_KEY" },
+  { id: "lemonade-anthropic", kind: "http", tier: "local-native", auth: "api-key" },
+  { id: "lemonade", kind: "http", tier: "local-native", auth: "api-key" },
+  { id: "llamacpp", kind: "http", tier: "local-native", auth: "api-key" },
+  { id: "llamacpp-anthropic", kind: "http", tier: "local-native", auth: "api-key" },
+  { id: "llamacpp-completion", kind: "http", tier: "local-native", auth: "api-key" },
+  { id: "llamacpp-embed", kind: "http", tier: "local-native", auth: "api-key" },
+  { id: "llamacpp-rerank", kind: "http", tier: "local-native", auth: "api-key" },
+  { id: "lmstudio", aliases: ["lmstudio-native"], kind: "http", tier: "local-native", auth: "api-key" },
+  { id: "ollama-native", kind: "http", tier: "local-native", auth: "none" },
+  { id: "anthropic-compat", kind: "http", tier: "protocol", auth: "api-key" },
+  { id: "openai-compat", kind: "http", tier: "protocol", auth: "api-key" },
+  { id: "sglang", kind: "http", tier: "local-native", auth: "api-key" },
+  { id: "vllm", kind: "http", tier: "local-native", auth: "api-key" },
+  { id: "claude-code", kind: "subprocess", tier: "subscription", auth: "claude-cli" },
+  { id: "claude-sdk", kind: "sdk", tier: "subscription", auth: "claude-cli" },
+  { id: "antigravity-code", kind: "subprocess", tier: "subscription", auth: "none" }
+];
+function findBuiltinRuntimeBootMetadata(id) {
+  return BUILTIN_RUNTIME_BOOT_MANIFEST.find((runtime) => runtime.id === id || runtime.aliases?.includes(id)) ?? null;
+}
+
+// src/cli/default-target.ts
+function classifyDefaultTarget(settings = readSettings()) {
+  const targetId = settings.orchestrator.target;
+  if (!targetId) return { kind: "no-target" };
+  const target = settings.targets.find((entry) => entry.id === targetId);
+  if (!target) return { kind: "no-target" };
+  const runtime = findBuiltinRuntimeBootMetadata(target.runtime);
+  if (runtime?.kind !== "http") {
+    return { kind: "ineligible-runtime", targetId, runtime: target.runtime };
+  }
+  const auth = bootAuthStatus(target, runtime);
+  if (auth.available) return { kind: "usable" };
+  return { kind: "missing-credential", targetId, store: auth.providerId };
+}
+function describeVerdict(verdict) {
+  switch (verdict.kind) {
+    case "no-target":
+      return "No model target is configured.";
+    case "ineligible-runtime":
+      return `Target '${verdict.targetId}' runs on '${verdict.runtime}', which cannot drive the main agent.`;
+    default:
+      return "No usable default target is configured.";
+  }
+}
+
+// src/cli/clio.ts
+function terminalLeaseEligible(options, env = process.env) {
+  return !options.headless && !options.acp && env.CLIO_CODER_INTERACTIVE === "1";
+}
+async function runClioCommand(options = {}) {
+  if (!options.headless && !options.acp && process.env.CLIO_CODER_INTERACTIVE === void 0 && process.stdin.isTTY) {
+    process.env.CLIO_CODER_INTERACTIVE = "1";
+  }
+  let startupSettings;
+  if (terminalLeaseEligible(options)) {
+    initializeClioHome();
+    startupSettings = readStrictLayeredSettings(process.cwd()).settings;
+    const verdict = classifyDefaultTarget(startupSettings);
+    if (verdict.kind === "missing-credential") {
+      process.stdout.write(
+        `Target '${verdict.targetId}' has no stored credential under '${verdict.store}'.
+Run \`clio-coder auth login ${verdict.store}\` if the endpoint requires one; local runtimes that ignore keys work as is.
+`
+      );
+    } else if (verdict.kind !== "usable") {
+      process.stdout.write(`${describeVerdict(verdict)} Starting \`clio-coder configure\`.
+`);
+      const { runConfigureCommand } = await import("./configure-R6A64DHX.js");
+      const configured = await runConfigureCommand([]);
+      if (configured !== 0) return configured;
+      startupSettings = readStrictLayeredSettings(process.cwd()).settings;
+    }
+  }
+  let terminalLease;
+  try {
+    if (terminalLeaseEligible(options)) {
+      const { createProcessTerminalLease, instantShellEnabled } = await import("./terminal-lease-IT5JW2NR.js");
+      if (instantShellEnabled()) {
+        let stage0FrameId = null;
+        terminalLease = createProcessTerminalLease({
+          settings: startupSettings ?? readLayeredSettings(process.cwd()).settings,
+          onStage0Commit: (frameId) => {
+            stage0FrameId = frameId;
+          }
+        });
+        if (stage0FrameId !== null) {
+          const line = formatBootTrace("Stage 0 shell commit", `frameId=${stage0FrameId}`);
+          if (line) terminalLease.deferDiagnostic("stderr", line);
+        }
+      }
+    }
+    if (terminalLease && process.env.NODE_ENV === "test") {
+      const requestedDelay = Number.parseInt(process.env.CLIO_CODER_TEST_STAGE1_DELAY_MS ?? "0", 10);
+      const delayMs = Number.isFinite(requestedDelay) ? Math.max(0, Math.min(5e3, requestedDelay)) : 0;
+      if (delayMs > 0) await new Promise((resolve) => setTimeout(resolve, delayMs));
+      if (process.env.CLIO_CODER_TEST_STAGE1_FAIL === "1") {
+        throw new Error("injected Stage 1 hydration failure");
+      }
+    }
+    const { bootOrchestrator } = await import("./orchestrator-CGFKEP27.js");
+    const result = await bootOrchestrator({
+      ...options,
+      ...startupSettings ? { startupSettings } : {},
+      ...terminalLease ? { terminalLease } : {}
+    });
+    return result.exitCode;
+  } catch (error) {
+    try {
+      await terminalLease?.fail();
+    } catch (cleanupError) {
+      process.stderr.write(
+        `Clio Coder: terminal cleanup also failed: ${cleanupError instanceof Error ? cleanupError.message : String(cleanupError)}
+`
+      );
+    }
+    throw error;
+  }
+}
+
+export {
+  terminalLeaseEligible,
+  runClioCommand
+};
+//# sourceMappingURL=chunk-MBS4V7ZP.js.map

package/dist/{chunk-2J63S4SF.js → chunk-MFFY33HR.js}

@@ -1,18 +1,34 @@
+import { createRequire as __clioCreateRequire } from "node:module"; const require = __clioCreateRequire(import.meta.url);
 import {
-  defaultScopedResourceRoots,
   expandSkillInvocationInput,
   loadSkills,
   parsePendingSkillRequests,
+  projectCompatTrusted
+} from "./chunk-4BPJXDWC.js";
+import {
+  COMPAT_RESOURCE_PRECEDENCE,
+  defaultScopedResourceRoots,
   readRootEntries,
   sourceInfoForRoot,
   splitYamlFrontmatter,
   stringField
-} from "./chunk-26BZQOAD.js";
+} from "./chunk-2SFS6XQE.js";
+import {
+  INTEROP_AGENT_KINDS
+} from "./chunk-IHXBNWMM.js";
 import {
   expandConfigPath
-} from "./chunk-5LDRNKX2.js";
+} from "./chunk-SST6Z5JA.js";
+import {
+  require_dist
+} from "./chunk-APJ265NV.js";
+import {
+  __toESM,
+  init_esm_shims
+} from "./chunk-3R73A4XB.js";
 
 // src/domains/resources/skills/evals.ts
+init_esm_shims();
 var SCENARIO_HEADING = /^##\s+([A-Z])(\d+)\s*[-:–—]\s*(.+?)\s*$/;
 function parseSkillEvals(markdown) {
   const lines = markdown.split("\n");
@@ -140,19 +156,98 @@ function extractExpected(block) {
   return bullets.map((bullet) => bullet.trim()).filter((bullet) => bullet.length > 0);
 }
 
-// src/domains/resources/prompts/loader.ts
-import { readFileSync } from "node:fs";
+// src/domains/resources/skills/provenance-pin.ts
+init_esm_shims();
+var import_yaml = __toESM(require_dist(), 1);
+import { existsSync, readFileSync } from "node:fs";
 import path from "node:path";
+var SKILL_PIN_MANIFEST_FILENAME = "registry.yaml";
+function isPlainObject(value) {
+  return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function resolveSkillPinManifestPath(cwd) {
+  const fromEnv = process.env.CLIO_CODER_SKILL_CATALOG_DIR;
+  const catalogDir = fromEnv && fromEnv.trim().length > 0 ? path.resolve(fromEnv.trim()) : path.join(cwd, "skills");
+  const manifestPath = path.join(catalogDir, SKILL_PIN_MANIFEST_FILENAME);
+  return existsSync(manifestPath) ? manifestPath : null;
+}
+function loadSkillPinManifest(manifestPath) {
+  let parsed;
+  try {
+    parsed = import_yaml.default.parse(readFileSync(manifestPath, "utf8"));
+  } catch {
+    return null;
+  }
+  if (!isPlainObject(parsed) || !Array.isArray(parsed.skills)) return null;
+  const entries = /* @__PURE__ */ new Map();
+  for (const raw of parsed.skills) {
+    if (!isPlainObject(raw)) continue;
+    const name = typeof raw.name === "string" ? raw.name.trim() : "";
+    const sha256 = typeof raw.sha256 === "string" ? raw.sha256.trim().toLowerCase() : "";
+    if (name.length === 0 || !/^[0-9a-f]{64}$/.test(sha256)) continue;
+    entries.set(name, {
+      name,
+      version: typeof raw.version === "string" && raw.version.trim().length > 0 ? raw.version.trim() : null,
+      sha256
+    });
+  }
+  return entries;
+}
+function checkSkillDrift(skill, cwd) {
+  const actual = skill.normalizedHash.toLowerCase();
+  const manifestPath = resolveSkillPinManifestPath(cwd);
+  const manifest = manifestPath === null ? null : loadSkillPinManifest(manifestPath);
+  const pinned = manifest?.get(skill.name);
+  if (pinned !== void 0) {
+    return {
+      verdict: pinned.sha256 === actual ? "match" : "mismatch",
+      authority: "pinned-manifest",
+      expected: pinned.sha256
+    };
+  }
+  const recorded = skill.provenance?.installedHash?.trim().toLowerCase();
+  if (recorded !== void 0 && /^[0-9a-f]{64}$/.test(recorded)) {
+    return {
+      verdict: recorded === actual ? "match" : "mismatch",
+      authority: "install-record",
+      expected: recorded
+    };
+  }
+  return null;
+}
+
+// src/domains/resources/index.ts
+init_esm_shims();
+
+// src/domains/resources/extension.ts
+init_esm_shims();
+
+// src/domains/resources/loader.ts
+init_esm_shims();
+
+// src/domains/resources/prompts/loader.ts
+init_esm_shims();
+import { readFileSync as readFileSync2 } from "node:fs";
+import { homedir } from "node:os";
+import path2 from "node:path";
+
+// src/engine/prompt-templates.ts
+init_esm_shims();
+import { parseCommandArgs, substituteArgs } from "@earendil-works/pi-agent-core";
 
 // src/domains/resources/collision.ts
+init_esm_shims();
 var SCOPE_RANK = {
   package: 0,
   user: 1,
   project: 2,
   cli: 3
 };
+function rankOf(info) {
+  return info.precedence ?? SCOPE_RANK[info.scope];
+}
 function compareCandidates(a, b) {
-  const rankDelta = SCOPE_RANK[a.source.scope] - SCOPE_RANK[b.source.scope];
+  const rankDelta = rankOf(a.source) - rankOf(b.source);
   if (rankDelta !== 0) return rankDelta;
   return a.source.path.localeCompare(b.source.path);
 }
@@ -190,68 +285,33 @@ function resolveResourceCollisions(candidates) {
   return { winners, diagnostics };
 }
 
-// src/domains/resources/prompts/substitute.ts
-function parseCommandArgs(input) {
-  const args = [];
-  let current = "";
-  let hasToken = false;
-  let quote = null;
-  const push = () => {
-    if (!hasToken) return;
-    args.push(current);
-    current = "";
-    hasToken = false;
-  };
-  for (let i = 0; i < input.length; i += 1) {
-    const ch = input[i];
-    if (!ch) continue;
-    if (quote) {
-      if (ch === quote) {
-        quote = null;
-      } else {
-        current += ch;
-      }
-      continue;
-    }
-    if (ch === "'" || ch === `"`) {
-      quote = ch;
-      hasToken = true;
-      continue;
+// src/domains/resources/prompts/loader.ts
+function defaultPromptTemplateRoots(input = {}) {
+  const cwd = input.cwd ?? process.cwd();
+  const home = input.home ?? homedir();
+  const trustProject = projectCompatTrusted(input.trustProjectCompatRoots);
+  const compat = [];
+  for (const kind of INTEROP_AGENT_KINDS) {
+    if (kind.userPromptRoot !== void 0) {
+      compat.push({
+        path: path2.join(home, kind.userPromptRoot),
+        scope: "user",
+        source: `${kind.id}-user`,
+        precedence: COMPAT_RESOURCE_PRECEDENCE.userCompat,
+        trusted: true
+      });
     }
-    if (/\s/.test(ch)) {
-      push();
-      continue;
+    if (kind.projectPromptRoot !== void 0) {
+      compat.push({
+        path: path2.join(cwd, kind.projectPromptRoot),
+        scope: "project",
+        source: `${kind.id}-project`,
+        precedence: COMPAT_RESOURCE_PRECEDENCE.projectCompat,
+        trusted: trustProject
+      });
     }
-    current += ch;
-    hasToken = true;
   }
-  push();
-  return args;
-}
-function sliceArgs(args, startText, lengthText) {
-  const start = Number.parseInt(startText, 10);
-  if (!Number.isFinite(start) || start <= 0) return "";
-  const zeroBased = start - 1;
-  if (lengthText === void 0) return args.slice(zeroBased).join(" ");
-  const length = Number.parseInt(lengthText, 10);
-  if (!Number.isFinite(length) || length <= 0) return "";
-  return args.slice(zeroBased, zeroBased + length).join(" ");
-}
-function substituteArgs(content, args) {
-  const allArgs = args.join(" ");
-  return content.replace(
-    /\$\{@:(\d+)(?::(\d+))?\}/g,
-    (_match, start, length) => sliceArgs(args, start, length)
-  ).replace(/\$ARGUMENTS/g, allArgs).replace(/\$@/g, allArgs).replace(/\$(\d+)/g, (_match, indexText) => {
-    const index = Number.parseInt(indexText, 10);
-    if (!Number.isFinite(index) || index <= 0) return "";
-    return args[index - 1] ?? "";
-  });
-}
-
-// src/domains/resources/prompts/loader.ts
-function defaultPromptTemplateRoots(cwd) {
-  return defaultScopedResourceRoots("prompts", cwd);
+  return [...defaultScopedResourceRoots("prompts", cwd), ...compat];
 }
 function splitOptionalFrontmatter(raw, filePath, diagnostics) {
   const split = splitYamlFrontmatter(raw);
@@ -268,17 +328,17 @@ function fallbackDescription(body) {
   return normalized.length > 60 ? `${normalized.slice(0, 57)}...` : normalized;
 }
 function loadPromptFile(filePath, root, diagnostics) {
-  const ext = path.extname(filePath).toLowerCase();
+  const ext = path2.extname(filePath).toLowerCase();
   if (ext !== ".md") return null;
   let raw;
   try {
-    raw = readFileSync(filePath, "utf8");
+    raw = readFileSync2(filePath, "utf8");
   } catch (err) {
     const reason = err instanceof Error ? err.message : String(err);
     diagnostics.push({ type: "warning", message: `prompt template could not be read: ${reason}`, path: filePath });
     return null;
   }
-  const name = path.basename(filePath, ext);
+  const name = path2.basename(filePath, ext);
   if (name.trim().length === 0) return null;
   const { frontmatter, body } = splitOptionalFrontmatter(raw, filePath, diagnostics);
   const description = stringField(frontmatter, "description") ?? fallbackDescription(body);
@@ -289,7 +349,8 @@ function loadPromptFile(filePath, root, diagnostics) {
     description,
     content: body.trim(),
     filePath,
-    sourceInfo
+    sourceInfo,
+    trusted: root.trusted !== false
   };
   if (argumentHint) template.argumentHint = argumentHint;
   return { name, value: template, source: sourceInfo };
@@ -298,19 +359,30 @@ function loadPromptRoot(root, diagnostics) {
   const candidates = [];
   for (const entry of readRootEntries(root, "prompt template", diagnostics)) {
     if (!entry.isFile()) continue;
-    const candidate = loadPromptFile(path.join(root.path, entry.name), root, diagnostics);
+    const candidate = loadPromptFile(path2.join(root.path, entry.name), root, diagnostics);
     if (candidate) candidates.push(candidate);
   }
   return candidates;
 }
 function loadPromptTemplates(input = {}) {
-  const cwd = input.cwd ?? process.cwd();
-  const roots = input.roots ?? defaultPromptTemplateRoots(cwd);
+  const roots = input.roots ?? defaultPromptTemplateRoots(input);
   const diagnostics = [];
   const candidates = roots.flatMap((root) => loadPromptRoot(root, diagnostics));
   const resolved = resolveResourceCollisions(candidates);
+  const items = [];
+  for (const template of resolved.winners) {
+    if (input.reservedNames?.has(template.name) === true) {
+      diagnostics.push({
+        type: "collision",
+        message: `prompt template /${template.name} conflicts with the built-in slash command /${template.name} and was ignored`,
+        path: template.filePath
+      });
+      continue;
+    }
+    items.push(template);
+  }
   return {
-    items: [...resolved.winners].sort((a, b) => a.name.localeCompare(b.name)),
+    items: items.sort((a, b) => a.name.localeCompare(b.name)),
     diagnostics: [...diagnostics, ...resolved.diagnostics]
   };
 }
@@ -329,6 +401,16 @@ function expandPromptTemplateInput(input, templates) {
   if (!command) return { expanded: false, text: input, args: [], diagnostics: templates.diagnostics };
   const template = templates.items.find((entry) => entry.name === command.name);
   if (!template) return { expanded: false, text: input, args: [], diagnostics: templates.diagnostics };
+  if (!template.trusted) {
+    const message = `prompt template ${template.name} comes from an untrusted project root; set skills.trustProjectCompatRoots to use it`;
+    return {
+      expanded: false,
+      text: input,
+      args: [],
+      diagnostics: [...templates.diagnostics, { type: "warning", message, path: template.filePath }],
+      refusal: { template, message }
+    };
+  }
   const args = parseCommandArgs(command.rest);
   return {
     expanded: true,
@@ -343,6 +425,11 @@ function expandPromptTemplateInput(input, templates) {
 function createResourcesLoader(options = {}) {
   const defaultCwd = options.cwd ?? process.cwd();
   const skillOptions2 = () => options.skills?.() ?? {};
+  const promptOptions = (cwd) => ({
+    cwd,
+    ...options.reservedPromptNames !== void 0 ? { reservedNames: options.reservedPromptNames } : {},
+    ...skillOptions2().trustProjectCompatRoots !== void 0 ? { trustProjectCompatRoots: skillOptions2().trustProjectCompatRoots === true } : {}
+  });
   return {
     skills(cwd = defaultCwd) {
       return loadSkills({ cwd, ...skillOptions2() });
@@ -354,13 +441,10 @@ function createResourcesLoader(options = {}) {
       return parsePendingSkillRequests(text, loadSkills({ cwd, ...skillOptions2() }), { cwd, ...expansionOptions });
     },
     prompts(cwd = defaultCwd) {
-      return loadPromptTemplates({ cwd });
+      return loadPromptTemplates(promptOptions(cwd));
     },
     expandPromptTemplate(text, cwd = defaultCwd) {
-      return expandPromptTemplateInput(text, loadPromptTemplates({ cwd }));
-    },
-    themes() {
-      return { items: [], diagnostics: [] };
+      return expandPromptTemplateInput(text, loadPromptTemplates(promptOptions(cwd)));
     },
     resolvePath(value, cwd = defaultCwd) {
       return expandConfigPath(value, { cwd });
@@ -376,6 +460,7 @@ function createResourcesBundle(context, options = {}) {
   const config = () => context.getContract("config");
   const loader = createResourcesLoader({
     ...options.cwd !== void 0 ? { cwd: options.cwd } : {},
+    ...options.reservedPromptNames !== void 0 ? { reservedPromptNames: options.reservedPromptNames } : {},
     skills: () => ({
       ...skillOptions(config()?.get().skills.trustProjectCompatRoots === true, options)
     })
@@ -401,9 +486,6 @@ function createResourcesBundle(context, options = {}) {
     expandPromptTemplate(text, cwd) {
       return loader.expandPromptTemplate(text, cwd);
     },
-    themes() {
-      return loader.themes();
-    },
     resolvePath(value, cwd) {
       return loader.resolvePath(value, cwd);
     },
@@ -423,69 +505,14 @@ function skillOptions(trustProjectCompatRoots, options) {
 }
 
 // src/domains/resources/manifest.ts
+init_esm_shims();
 var ResourcesManifest = {
   name: "resources",
   dependsOn: ["config"]
 };
 
-// src/domains/resources/skills/provenance-pin.ts
-import { existsSync, readFileSync as readFileSync2 } from "node:fs";
-import path2 from "node:path";
-import yaml from "yaml";
-var SKILL_PIN_MANIFEST_FILENAME = "registry.yaml";
-function isPlainObject(value) {
-  return typeof value === "object" && value !== null && !Array.isArray(value);
-}
-function resolveSkillPinManifestPath(cwd) {
-  const fromEnv = process.env.CLIO_CODER_SKILL_CATALOG_DIR;
-  const catalogDir = fromEnv && fromEnv.trim().length > 0 ? path2.resolve(fromEnv.trim()) : path2.join(cwd, "skills");
-  const manifestPath = path2.join(catalogDir, SKILL_PIN_MANIFEST_FILENAME);
-  return existsSync(manifestPath) ? manifestPath : null;
-}
-function loadSkillPinManifest(manifestPath) {
-  let parsed;
-  try {
-    parsed = yaml.parse(readFileSync2(manifestPath, "utf8"));
-  } catch {
-    return null;
-  }
-  if (!isPlainObject(parsed) || !Array.isArray(parsed.skills)) return null;
-  const entries = /* @__PURE__ */ new Map();
-  for (const raw of parsed.skills) {
-    if (!isPlainObject(raw)) continue;
-    const name = typeof raw.name === "string" ? raw.name.trim() : "";
-    const sha256 = typeof raw.sha256 === "string" ? raw.sha256.trim().toLowerCase() : "";
-    if (name.length === 0 || !/^[0-9a-f]{64}$/.test(sha256)) continue;
-    entries.set(name, {
-      name,
-      version: typeof raw.version === "string" && raw.version.trim().length > 0 ? raw.version.trim() : null,
-      sha256
-    });
-  }
-  return entries;
-}
-function checkSkillDrift(skill, cwd) {
-  const actual = skill.normalizedHash.toLowerCase();
-  const manifestPath = resolveSkillPinManifestPath(cwd);
-  const manifest = manifestPath === null ? null : loadSkillPinManifest(manifestPath);
-  const pinned = manifest?.get(skill.name);
-  if (pinned !== void 0) {
-    return {
-      verdict: pinned.sha256 === actual ? "match" : "mismatch",
-      authority: "pinned-manifest",
-      expected: pinned.sha256
-    };
-  }
-  const recorded = skill.provenance?.installedHash?.trim().toLowerCase();
-  if (recorded !== void 0 && /^[0-9a-f]{64}$/.test(recorded)) {
-    return {
-      verdict: recorded === actual ? "match" : "mismatch",
-      authority: "install-record",
-      expected: recorded
-    };
-  }
-  return null;
-}
+// src/domains/resources/prompts/substitute.ts
+init_esm_shims();
 
 // src/domains/resources/index.ts
 var ResourcesDomainModule = {
@@ -505,4 +532,4 @@ export {
   ResourcesDomainModule,
   createResourcesDomainModule
 };
-//# sourceMappingURL=chunk-2J63S4SF.js.map
+//# sourceMappingURL=chunk-MFFY33HR.js.map