@iowarp/clio-coder 0.3.0 → 0.3.2

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (1187) hide show
  1. package/CHANGELOG.md +123 -2
  2. package/CONTRIBUTING.md +23 -23
  3. package/README.md +295 -627
  4. package/dist/acp-BIYHVZIM.js +128 -0
  5. package/dist/{agents-Q4MYPMUW.js → agents-YT6SSRIT.js} +52 -27
  6. package/dist/assets/codewiki.json +1 -0
  7. package/dist/assets/grammars/notices/@vscode__tree-sitter-wasm/LICENSE +21 -0
  8. package/dist/assets/grammars/notices/@vscode__tree-sitter-wasm/cgmanifest.json +16 -0
  9. package/dist/assets/grammars/notices/tree-sitter-wasms/LICENSE +24 -0
  10. package/dist/assets/grammars/tree-sitter-c-sharp.wasm +0 -0
  11. package/dist/assets/grammars/tree-sitter-c.wasm +0 -0
  12. package/dist/assets/grammars/tree-sitter-cpp.wasm +0 -0
  13. package/dist/assets/grammars/tree-sitter-go.wasm +0 -0
  14. package/dist/assets/grammars/tree-sitter-java.wasm +0 -0
  15. package/dist/assets/grammars/tree-sitter-javascript.wasm +0 -0
  16. package/dist/assets/grammars/tree-sitter-python.wasm +0 -0
  17. package/dist/assets/grammars/tree-sitter-ruby.wasm +0 -0
  18. package/dist/assets/grammars/tree-sitter-rust.wasm +0 -0
  19. package/dist/assets/grammars/tree-sitter-tsx.wasm +0 -0
  20. package/dist/assets/grammars/tree-sitter-typescript.wasm +0 -0
  21. package/dist/assets/grammars/tree-sitter.wasm +0 -0
  22. package/dist/{auth-O6HYIJ6J.js → auth-5TWEIYDN.js} +30 -15
  23. package/dist/chunk-2EHAIA3X.js +481 -0
  24. package/dist/{chunk-ME6DNWIU.js → chunk-2IR2NMPA.js} +12 -4
  25. package/dist/chunk-2SFS6XQE.js +122 -0
  26. package/dist/{chunk-KKKPTZLM.js → chunk-2STGEDFV.js} +8 -1
  27. package/dist/chunk-2VTFPG5O.js +48 -0
  28. package/dist/chunk-3I7MS7N2.js +40 -0
  29. package/dist/chunk-3R73A4XB.js +69 -0
  30. package/dist/{chunk-JPOWPFCU.js → chunk-3ZXDFGR5.js} +52 -23
  31. package/dist/chunk-4BJ5BYCE.js +61 -0
  32. package/dist/{chunk-26BZQOAD.js → chunk-4BPJXDWC.js} +161 -260
  33. package/dist/chunk-4KLWL3UC.js +18 -0
  34. package/dist/{chunk-5LDRNKX2.js → chunk-4VP4KH3K.js} +161 -262
  35. package/dist/chunk-4ZG3XFUR.js +77 -0
  36. package/dist/chunk-5B2AEOW5.js +5407 -0
  37. package/dist/chunk-5TSRNF4G.js +510 -0
  38. package/dist/{chunk-WD6AJM35.js → chunk-5UUP6MWO.js} +48 -69
  39. package/dist/{chunk-X3BR7HWV.js → chunk-5WIGXA4T.js} +7 -1
  40. package/dist/chunk-65DEGPJ6.js +52 -0
  41. package/dist/chunk-6EJMN2Y3.js +17 -0
  42. package/dist/chunk-6EJV5X2W.js +16405 -0
  43. package/dist/chunk-6N5PTWMY.js +136 -0
  44. package/dist/chunk-6XLNIQDB.js +27 -0
  45. package/dist/{chunk-XNISANGE.js → chunk-77VKQEHF.js} +171 -74
  46. package/dist/chunk-7CR24IG7.js +242 -0
  47. package/dist/{chunk-UWIJNAOB.js → chunk-7EYHLWU7.js} +907 -638
  48. package/dist/chunk-7MNJORFF.js +22 -0
  49. package/dist/{chunk-JWHCJDCI.js → chunk-A3CYT5EX.js} +257 -79
  50. package/dist/chunk-AGYYIBLL.js +1069 -0
  51. package/dist/chunk-AO4RKG4M.js +277 -0
  52. package/dist/chunk-APJ265NV.js +7410 -0
  53. package/dist/chunk-ARBGF5F7.js +174 -0
  54. package/dist/{chunk-TFSSEXL6.js → chunk-BMEMKKIT.js} +14 -4
  55. package/dist/{chunk-X3NE4WVW.js → chunk-BNAZZHFG.js} +7 -1
  56. package/dist/chunk-CBCAPZAA.js +229 -0
  57. package/dist/{chunk-QV47YRF4.js → chunk-CGKSTWHD.js} +7 -1
  58. package/dist/chunk-CMZWFGD2.js +352 -0
  59. package/dist/chunk-ECH6PKUQ.js +39 -0
  60. package/dist/{chunk-67MTHP2E.js → chunk-ED4KHGC3.js} +13 -5
  61. package/dist/chunk-EKMEHE4H.js +340 -0
  62. package/dist/{chunk-O4EJEDHO.js → chunk-EPVUXGXG.js} +50 -35
  63. package/dist/chunk-FCSXB6T2.js +338 -0
  64. package/dist/chunk-FJ3H4MN5.js +48 -0
  65. package/dist/chunk-FQ4SKYE4.js +29 -0
  66. package/dist/chunk-G2DE3C7R.js +644 -0
  67. package/dist/chunk-G4BMMOKF.js +182 -0
  68. package/dist/{chunk-7BHLZB3A.js → chunk-GGXXDWE4.js} +190 -1218
  69. package/dist/chunk-HC4CLZ2Y.js +68 -0
  70. package/dist/{chunk-E3NYWENM.js → chunk-HFSBBKSQ.js} +55 -61
  71. package/dist/chunk-HKIYEGME.js +30 -0
  72. package/dist/chunk-I4HZDVNP.js +73 -0
  73. package/dist/chunk-IGLFWIYI.js +161 -0
  74. package/dist/chunk-IHXBNWMM.js +137 -0
  75. package/dist/chunk-IKCO5N3L.js +162 -0
  76. package/dist/chunk-IR4CFBFN.js +56 -0
  77. package/dist/{chunk-DXQNI4PC.js → chunk-IWHMRKLL.js} +8 -1
  78. package/dist/{chunk-VOO7NYPP.js → chunk-J5HN4RYU.js} +27 -9
  79. package/dist/{chunk-4UQA7NCT.js → chunk-J5Q24KAG.js} +7 -2
  80. package/dist/{chunk-KBR4MZZR.js → chunk-JVCV3ICN.js} +7 -1
  81. package/dist/chunk-KJ5LWLOE.js +1077 -0
  82. package/dist/chunk-LBMZMYH2.js +285 -0
  83. package/dist/{chunk-3DANZDGR.js → chunk-LBNRH5WM.js} +100 -161
  84. package/dist/{chunk-TKHQ4DGZ.js → chunk-LZSJBIVT.js} +7358 -7414
  85. package/dist/{chunk-UGYAX5YI.js → chunk-M6SHUN7Q.js} +13 -8
  86. package/dist/chunk-MAW544W2.js +1882 -0
  87. package/dist/chunk-MBS4V7ZP.js +217 -0
  88. package/dist/{chunk-2J63S4SF.js → chunk-MFFY33HR.js} +167 -140
  89. package/dist/chunk-MNA4JGU4.js +255 -0
  90. package/dist/chunk-MQSRRFWA.js +3428 -0
  91. package/dist/{chunk-RQDWMVRB.js → chunk-MVVUPGPW.js} +138 -137
  92. package/dist/chunk-OAO4GE4M.js +619 -0
  93. package/dist/chunk-OHHN2SO4.js +5135 -0
  94. package/dist/chunk-OKGUZO2U.js +34 -0
  95. package/dist/{chunk-BBUH4VAA.js → chunk-OOJYHWRB.js} +60 -361
  96. package/dist/{chunk-D5YD55AR.js → chunk-OQ33BKR3.js} +12 -1
  97. package/dist/chunk-OQE5J4C6.js +73 -0
  98. package/dist/{chunk-AMFR5YA3.js → chunk-ORBHGJC5.js} +26 -12
  99. package/dist/chunk-POHLU5DW.js +1186 -0
  100. package/dist/chunk-QKMUKYO7.js +4961 -0
  101. package/dist/{chunk-7RBKDI66.js → chunk-QTYWRVRA.js} +104 -12
  102. package/dist/{chunk-5N2FG33Q.js → chunk-R346GLFC.js} +7 -1
  103. package/dist/chunk-SRF2PJNW.js +184 -0
  104. package/dist/chunk-SST6Z5JA.js +80 -0
  105. package/dist/{chunk-XV4ZJ6ZM.js → chunk-STBPMHSX.js} +473 -1194
  106. package/dist/{chunk-HBU5MTAM.js → chunk-SVNXH4L2.js} +7 -1
  107. package/dist/chunk-T6YILFSB.js +80 -0
  108. package/dist/chunk-TXOTCRLG.js +15 -0
  109. package/dist/chunk-TZTZS7QK.js +227 -0
  110. package/dist/chunk-UOV2BYIW.js +107 -0
  111. package/dist/{chunk-527KG6XR.js → chunk-V4RXGQ5Q.js} +72 -185
  112. package/dist/chunk-VAKQQHWR.js +434 -0
  113. package/dist/chunk-VG7TBQIY.js +128 -0
  114. package/dist/chunk-VJWL6YS5.js +244 -0
  115. package/dist/chunk-WEH5XRJQ.js +32 -0
  116. package/dist/{chunk-VPAWTYLY.js → chunk-WEPFGWHJ.js} +7 -1
  117. package/dist/chunk-WMSVI4G2.js +2095 -0
  118. package/dist/chunk-WVO7V2QY.js +797 -0
  119. package/dist/chunk-X4RCMKVQ.js +641 -0
  120. package/dist/chunk-X75S7HFS.js +374 -0
  121. package/dist/chunk-XN3L4EYL.js +46 -0
  122. package/dist/{chunk-HMYNFFY4.js → chunk-XPLRXC72.js} +7 -2
  123. package/dist/{chunk-PIDUD6M2.js → chunk-YCWGATWI.js} +12 -5
  124. package/dist/chunk-YHZX5GEU.js +193 -0
  125. package/dist/chunk-YXLYO42X.js +91 -0
  126. package/dist/{chunk-UHTSULZS.js → chunk-ZDOOVTXZ.js} +38 -73
  127. package/dist/chunk-ZI647VB5.js +37 -0
  128. package/dist/{chunk-CLJ5HLUD.js → chunk-ZWLZP4ZT.js} +25 -6
  129. package/dist/cli/index.js +70 -56
  130. package/dist/clio-4LY5K2AC.js +25 -0
  131. package/dist/code-nav-7AX6FYE6.js +600 -0
  132. package/dist/codewiki/build-worker.js +66 -0
  133. package/dist/compile-cache-CVJMMODC.js +18 -0
  134. package/dist/{components-JVHMUBEB.js → components-KELWS457.js} +31 -9
  135. package/dist/{config-ZFCDBMDC.js → config-GTLUW2PR.js} +104 -56
  136. package/dist/configure-R6A64DHX.js +42 -0
  137. package/dist/context-5VKGUVJJ.js +866 -0
  138. package/dist/{context-CDXTP2MP.js → context-JFZEJ7W5.js} +21 -13
  139. package/dist/{context-E3KIFVXI.js → context-RW5HC47S.js} +77 -36
  140. package/dist/{context-clear-3F4PLXOS.js → context-clear-6ZHBAZZT.js} +64 -30
  141. package/dist/{context-index-Q7YSYTR3.js → context-index-BZ4UYMTC.js} +36 -24
  142. package/dist/dispatch-runner-VKBRCWQC.js +1997 -0
  143. package/dist/{docs-YIETIWZI.js → docs-2C2LTVT2.js} +32 -13
  144. package/dist/doctor-KI767GSN.js +87 -0
  145. package/dist/{eval-B3KZZESM.js → eval-XSSNATB4.js} +93 -27
  146. package/dist/{evidence-V67CHM35.js → evidence-UA6AWDQQ.js} +55 -27
  147. package/dist/{evolve-YDZSUQYA.js → evolve-QNTFGV6Z.js} +59 -26
  148. package/dist/{extensions-SRG7XCAH.js → extensions-QVDOHDGJ.js} +23 -8
  149. package/dist/{fleet-CA2CRTVG.js → fleet-Q7UOMUSG.js} +173 -56
  150. package/dist/fleet-preflight-DDN536IT.js +26 -0
  151. package/dist/{init-2OZDJE2D.js → init-WBB65ZHQ.js} +79 -34
  152. package/dist/{memory-3PIQQAKX.js → memory-MD3O64RI.js} +57 -28
  153. package/dist/{models-DY35XI7Y.js → models-BZU34YWD.js} +49 -24
  154. package/dist/monitor-MEQA5C3I.js +661 -0
  155. package/dist/{chunk-PS4PFJQP.js → orchestrator-CGFKEP27.js} +22837 -18564
  156. package/dist/{paths-5OMXW7Z4.js → paths-UXLN5YYZ.js} +17 -6
  157. package/dist/preload-P6DGH2PZ.js +13 -0
  158. package/dist/{reset-PIFYNOS3.js → reset-L2FQEE3E.js} +25 -13
  159. package/dist/{run-3VSPP24F.js → run-IV4Q6RLN.js} +115 -63
  160. package/dist/{share-D36RQCXM.js → share-S5BZQC5I.js} +23 -10
  161. package/dist/{skills-F2MRLELY.js → skills-LQEKRDTN.js} +42 -15
  162. package/dist/{skills-eval-E2ZTW4PL.js → skills-eval-3DC4HEWS.js} +90 -45
  163. package/dist/steer-GGWFUJUD.js +77 -0
  164. package/dist/{targets-DZMEZAH4.js → targets-C4SSGQOB.js} +78 -60
  165. package/dist/terminal-lease-IT5JW2NR.js +395 -0
  166. package/dist/{trace-7NYCUI2J.js → trace-PNCASAXC.js} +48 -17
  167. package/dist/tree-sitter-HGKH6LG4.js +4673 -0
  168. package/dist/{uninstall-AD3JWHBB.js → uninstall-FZCQCDKC.js} +19 -8
  169. package/dist/{upgrade-WYYBKGDY.js → upgrade-7TT7SQ3G.js} +66 -24
  170. package/dist/{usage-ULIDAGFF.js → usage-GV4PKT3M.js} +71 -32
  171. package/dist/verify-G6V4D2G7.js +716 -0
  172. package/dist/version-KGEG7EPO.js +21 -0
  173. package/dist/web-fetch-2YHJ3KTG.js +638 -0
  174. package/dist/{wiki-generate-PKFIX6OB.js → wiki-generate-DQF6Z66B.js} +98 -48
  175. package/dist/worker/entry.js +297 -54
  176. package/dist/workspace-G4ZWUIPR.js +22 -0
  177. package/docs/README.md +29 -21
  178. package/docs/acp.md +191 -16
  179. package/docs/alcf-provider.md +1 -1
  180. package/docs/architecture.md +157 -7
  181. package/docs/artifact-placement.md +101 -0
  182. package/docs/artifact-versions.md +1 -1
  183. package/docs/built-in-agents.md +4 -2
  184. package/docs/capacity-and-scheduling.md +1 -1
  185. package/docs/commands-and-modes.md +224 -97
  186. package/docs/config-knobs-audit.md +1 -3
  187. package/docs/configuration-and-targets.md +236 -38
  188. package/docs/context-engine.md +34 -7
  189. package/docs/development-pipeline.md +102 -0
  190. package/docs/dispatch-architecture-rationale.md +1 -1
  191. package/docs/documentation-coverage.md +4 -4
  192. package/docs/documentation-guide.md +3 -3
  193. package/docs/environment-variables.md +15 -6
  194. package/docs/eval-runner.md +3 -3
  195. package/docs/evals-internal.md +2 -2
  196. package/docs/evidence-and-memory.md +10 -2
  197. package/docs/evolution.md +2 -2
  198. package/docs/exit-codes-and-output.md +15 -9
  199. package/docs/extensions-and-sharing.md +25 -18
  200. package/docs/fleet-demo-runbook.md +22 -23
  201. package/docs/fleet-dispatch.md +117 -16
  202. package/docs/git-commit-provenance.md +120 -0
  203. package/docs/glossary.md +107 -15
  204. package/docs/installation-and-lifecycle.md +75 -17
  205. package/docs/middleware-and-components.md +1 -1
  206. package/docs/model-catalog.md +46 -15
  207. package/docs/observability.md +8 -5
  208. package/docs/performance-methodology.md +491 -0
  209. package/docs/pi-boundary.md +72 -0
  210. package/docs/proactive-memory.md +14 -14
  211. package/docs/prompt-envelope-and-tools.md +25 -4
  212. package/docs/provider-adapter-cookbook.md +57 -4
  213. package/docs/release-cut-checklist.md +129 -111
  214. package/docs/safety-model.md +28 -8
  215. package/docs/scientific-validation.md +3 -3
  216. package/docs/session-lifecycle.md +55 -12
  217. package/docs/skills-marketplace.md +12 -8
  218. package/docs/time-conventions.md +101 -0
  219. package/docs/tool-usage.md +6 -5
  220. package/docs/trace-store.md +1 -1
  221. package/docs/troubleshooting.md +10 -7
  222. package/docs/tui-design.md +121 -28
  223. package/docs/worker-dispatch-mechanics.md +3 -3
  224. package/package.json +33 -36
  225. package/skills/README.md +5 -6
  226. package/skills/coding/ast-grep/SKILL.md +136 -0
  227. package/skills/coding/ast-grep/evals.md +56 -0
  228. package/skills/coding/ast-grep/references/rule_reference.md +297 -0
  229. package/skills/coding/coding-standards/SKILL.md +113 -0
  230. package/skills/coding/coding-standards/evals.md +34 -0
  231. package/skills/coding/prototype/SKILL.md +86 -0
  232. package/skills/coding/prototype/evals.md +42 -0
  233. package/skills/coding/prototype/references/LOGIC.md +67 -0
  234. package/skills/coding/prototype/references/UI.md +112 -0
  235. package/skills/coding/tdd/SKILL.md +101 -0
  236. package/skills/coding/tdd/evals.md +41 -0
  237. package/skills/coding/tdd/references/mocking.md +59 -0
  238. package/skills/coding/tdd/references/tests.md +77 -0
  239. package/skills/context/context-handoff/SKILL.md +126 -0
  240. package/skills/context/context-handoff/evals.md +57 -0
  241. package/skills/context/context-handoff/scripts/new-handoff.sh +26 -0
  242. package/skills/context/context-prime/SKILL.md +95 -0
  243. package/skills/context/context-prime/evals.md +54 -0
  244. package/skills/git/file-ticket/SKILL.md +107 -0
  245. package/skills/git/file-ticket/evals.md +54 -0
  246. package/skills/git/fix-issue/SKILL.md +106 -0
  247. package/skills/git/fix-issue/evals.md +71 -0
  248. package/skills/git/ship/SKILL.md +92 -0
  249. package/skills/git/ship/evals.md +72 -0
  250. package/skills/meta/clio-dev/SKILL.md +91 -0
  251. package/skills/meta/clio-dev/evals.md +45 -0
  252. package/skills/meta/clio-test/SKILL.md +130 -0
  253. package/skills/meta/clio-test/evals.md +43 -0
  254. package/skills/meta/clio-test/references/harness.md +97 -0
  255. package/skills/meta/clio-test/references/test-map.md +59 -0
  256. package/skills/meta/credentials/SKILL.md +125 -0
  257. package/skills/meta/credentials/evals.md +104 -0
  258. package/skills/meta/find-skills/SKILL.md +72 -0
  259. package/skills/meta/find-skills/evals.md +47 -0
  260. package/skills/meta/herdr/SKILL.md +127 -0
  261. package/skills/meta/herdr/evals.md +38 -0
  262. package/skills/meta/skill-craft/SKILL.md +102 -0
  263. package/skills/meta/skill-craft/evals.md +41 -0
  264. package/skills/planning/architecture/SKILL.md +129 -0
  265. package/skills/planning/architecture/evals.md +36 -0
  266. package/skills/planning/backlog/SKILL.md +90 -0
  267. package/skills/planning/backlog/evals.md +43 -0
  268. package/skills/planning/prd/SKILL.md +82 -0
  269. package/skills/planning/prd/evals.md +49 -0
  270. package/skills/planning/product-intent/SKILL.md +112 -0
  271. package/skills/planning/product-intent/evals.md +36 -0
  272. package/skills/planning/tech-spec/SKILL.md +115 -0
  273. package/skills/planning/tech-spec/evals.md +47 -0
  274. package/skills/registry.yaml +136 -0
  275. package/skills/research/arxiv-literature/SKILL.md +104 -0
  276. package/skills/research/arxiv-literature/evals.md +58 -0
  277. package/skills/research/experiment-protocol/SKILL.md +122 -0
  278. package/skills/research/experiment-protocol/evals.md +91 -0
  279. package/skills/research/scientific-debugging/SKILL.md +119 -0
  280. package/skills/research/scientific-debugging/evals.md +138 -0
  281. package/skills/research/scientific-modernization/SKILL.md +138 -0
  282. package/skills/research/scientific-modernization/evals.md +84 -0
  283. package/skills/skill-marketplace.json +12 -20
  284. package/skills/workflow/design-council/SKILL.md +139 -0
  285. package/skills/workflow/design-council/evals.md +97 -0
  286. package/skills/workflow/grill-me/SKILL.md +186 -0
  287. package/skills/workflow/grill-me/evals.md +78 -0
  288. package/skills/workflow/workflow-distiller/SKILL.md +136 -0
  289. package/skills/workflow/workflow-distiller/evals.md +107 -0
  290. package/src/cli/acp.ts +115 -0
  291. package/src/cli/agents.ts +60 -0
  292. package/src/cli/args.ts +280 -0
  293. package/src/cli/argv.ts +170 -0
  294. package/src/cli/ask.ts +34 -0
  295. package/src/cli/auth.ts +468 -0
  296. package/src/cli/bootstrap-generate.ts +498 -0
  297. package/src/cli/clio.ts +96 -0
  298. package/src/cli/components.ts +195 -0
  299. package/src/cli/config-inspect.ts +336 -0
  300. package/src/cli/config.ts +72 -0
  301. package/src/cli/configure-interop.ts +67 -0
  302. package/src/cli/configure-layout.ts +172 -0
  303. package/src/cli/configure.ts +1525 -0
  304. package/src/cli/context-clear.ts +76 -0
  305. package/src/cli/context-index.ts +100 -0
  306. package/src/cli/context.ts +321 -0
  307. package/src/cli/default-target.ts +55 -0
  308. package/src/cli/docs.ts +346 -0
  309. package/src/cli/doctor.ts +54 -0
  310. package/src/cli/eval.ts +315 -0
  311. package/src/cli/evidence.ts +225 -0
  312. package/src/cli/evolve.ts +219 -0
  313. package/src/cli/extensions.ts +214 -0
  314. package/src/cli/fleet.ts +868 -0
  315. package/src/cli/index.ts +338 -0
  316. package/src/cli/init.ts +219 -0
  317. package/src/cli/initial-message.ts +47 -0
  318. package/src/cli/internal-dispatch.ts +55 -0
  319. package/src/cli/memory.ts +182 -0
  320. package/src/cli/models.ts +257 -0
  321. package/src/cli/modes/json-stream.ts +121 -0
  322. package/src/cli/modes/jsonl.ts +9 -0
  323. package/src/cli/modes/print.ts +604 -0
  324. package/src/cli/oauth-manual-input.ts +72 -0
  325. package/src/cli/oauth-select.ts +36 -0
  326. package/src/cli/output-guard.ts +48 -0
  327. package/src/cli/paths.ts +44 -0
  328. package/src/cli/provider-target.ts +113 -0
  329. package/src/cli/removal.ts +72 -0
  330. package/src/cli/reset.ts +253 -0
  331. package/src/cli/run.ts +497 -0
  332. package/src/cli/share.ts +243 -0
  333. package/src/cli/shared.ts +60 -0
  334. package/src/cli/skills-eval.ts +1240 -0
  335. package/src/cli/skills.ts +485 -0
  336. package/src/cli/steer-channel.ts +86 -0
  337. package/src/cli/targets.ts +1154 -0
  338. package/src/cli/text-layout.ts +112 -0
  339. package/src/cli/trace.ts +322 -0
  340. package/src/cli/uninstall.ts +405 -0
  341. package/src/cli/upgrade.ts +286 -0
  342. package/src/cli/usage.ts +876 -0
  343. package/src/cli/validate-model.ts +28 -0
  344. package/src/cli/version.ts +7 -0
  345. package/src/cli/wiki-generate.ts +510 -0
  346. package/src/core/agent-environment.ts +7 -0
  347. package/src/core/artifact-paths.ts +43 -0
  348. package/src/core/bash-exec.ts +313 -0
  349. package/src/core/boot-trace.ts +42 -0
  350. package/src/core/bus-events.ts +744 -0
  351. package/src/core/bus-trace.ts +53 -0
  352. package/src/core/c-header-language.ts +265 -0
  353. package/src/core/clio-repo.ts +78 -0
  354. package/src/core/commit-attribution.ts +157 -0
  355. package/src/core/compile-cache.ts +159 -0
  356. package/src/core/config.ts +1722 -0
  357. package/src/core/context-floor.ts +33 -0
  358. package/src/core/defaults.ts +659 -0
  359. package/src/core/domain-loader.ts +177 -0
  360. package/src/core/event-bus.ts +94 -0
  361. package/src/core/file-references.ts +282 -0
  362. package/src/core/git-commit-attribution.ts +362 -0
  363. package/src/core/guardrails.ts +185 -0
  364. package/src/core/headless-permission.ts +21 -0
  365. package/src/core/incomplete-installation.ts +45 -0
  366. package/src/core/init.ts +223 -0
  367. package/src/core/json-payload.ts +58 -0
  368. package/src/core/package-root.ts +54 -0
  369. package/src/core/path-canonical.ts +37 -0
  370. package/src/core/process-identity.ts +41 -0
  371. package/src/core/recent-models.ts +91 -0
  372. package/src/core/residency-protection.ts +56 -0
  373. package/src/core/resolve-config-value.ts +88 -0
  374. package/src/core/response-schema.ts +279 -0
  375. package/src/core/run-overrides.ts +77 -0
  376. package/src/core/safe-exec.ts +205 -0
  377. package/src/core/safe-id.ts +37 -0
  378. package/src/core/safe-resource-write.ts +162 -0
  379. package/src/core/session-routing.ts +339 -0
  380. package/src/core/settings-layers.ts +354 -0
  381. package/src/core/shared-bus.ts +8 -0
  382. package/src/core/shell-quote.ts +26 -0
  383. package/src/core/skill-activation.ts +190 -0
  384. package/src/core/startup-timer.ts +37 -0
  385. package/src/core/state-file-lock.ts +219 -0
  386. package/src/core/termination.ts +275 -0
  387. package/src/core/timers.ts +38 -0
  388. package/src/core/tool-names.ts +65 -0
  389. package/src/core/verification-scripts.ts +13 -0
  390. package/src/core/workspace-files.ts +492 -0
  391. package/src/core/xdg.ts +177 -0
  392. package/src/domains/agents/builtins/architect.md +4 -4
  393. package/src/domains/agents/builtins/coder.md +3 -2
  394. package/src/domains/agents/builtins/debugger.md +1 -1
  395. package/src/domains/agents/builtins/documenter.md +1 -1
  396. package/src/domains/agents/builtins/git-master.md +3 -3
  397. package/src/domains/agents/builtins/provenance.md +1 -1
  398. package/src/domains/agents/builtins/researcher.md +1 -1
  399. package/src/domains/agents/builtins/scout.md +1 -1
  400. package/src/domains/agents/builtins/tester.md +1 -1
  401. package/src/domains/agents/builtins/verifier.md +1 -1
  402. package/src/domains/agents/builtins/wiki-writer.md +1 -1
  403. package/src/domains/agents/catalog.ts +172 -0
  404. package/src/domains/agents/contract.ts +16 -0
  405. package/src/domains/agents/extension.ts +110 -0
  406. package/src/domains/agents/fleet-commands.ts +154 -0
  407. package/src/domains/agents/fleet-contract.ts +797 -0
  408. package/src/domains/agents/frontmatter.ts +40 -0
  409. package/src/domains/agents/index.ts +102 -0
  410. package/src/domains/agents/manifest.ts +6 -0
  411. package/src/domains/agents/recipe-schema.ts +202 -0
  412. package/src/domains/agents/recipe.ts +125 -0
  413. package/src/domains/agents/registry.ts +111 -0
  414. package/src/domains/agents/result-contract.ts +1265 -0
  415. package/src/domains/agents/spec.ts +371 -0
  416. package/src/domains/agents/write-boundary.ts +109 -0
  417. package/src/domains/components/diff.ts +99 -0
  418. package/src/domains/components/hash.ts +21 -0
  419. package/src/domains/components/index.ts +3 -0
  420. package/src/domains/components/scan.ts +304 -0
  421. package/src/domains/components/snapshot.ts +108 -0
  422. package/src/domains/components/types.ts +82 -0
  423. package/src/domains/config/agent-namespace.ts +13 -0
  424. package/src/domains/config/classify.ts +106 -0
  425. package/src/domains/config/contract.ts +22 -0
  426. package/src/domains/config/extension.ts +142 -0
  427. package/src/domains/config/index.ts +23 -0
  428. package/src/domains/config/keybindings.ts +200 -0
  429. package/src/domains/config/manifest.ts +6 -0
  430. package/src/domains/config/watcher.ts +41 -0
  431. package/src/domains/context/adoption.ts +880 -0
  432. package/src/domains/context/bootstrap-prompt.ts +273 -0
  433. package/src/domains/context/bootstrap.ts +1502 -0
  434. package/src/domains/context/clear.ts +91 -0
  435. package/src/domains/context/clio-md.ts +429 -0
  436. package/src/domains/context/codewiki/artifact.ts +400 -0
  437. package/src/domains/context/codewiki/build-worker-protocol.ts +24 -0
  438. package/src/domains/context/codewiki/build-worker.ts +54 -0
  439. package/src/domains/context/codewiki/cmake.ts +356 -0
  440. package/src/domains/context/codewiki/cooperative.ts +46 -0
  441. package/src/domains/context/codewiki/coordinator.ts +182 -0
  442. package/src/domains/context/codewiki/digest.ts +135 -0
  443. package/src/domains/context/codewiki/grammar-assets.ts +33 -0
  444. package/src/domains/context/codewiki/indexer.ts +1529 -0
  445. package/src/domains/context/codewiki/paths.ts +67 -0
  446. package/src/domains/context/codewiki/schema.ts +80 -0
  447. package/src/domains/context/codewiki/tree-sitter.ts +771 -0
  448. package/src/domains/context/contract.ts +68 -0
  449. package/src/domains/context/excluded-dirs.ts +1 -0
  450. package/src/domains/context/extension.ts +358 -0
  451. package/src/domains/context/fingerprint.ts +198 -0
  452. package/src/domains/context/index.ts +154 -0
  453. package/src/domains/context/init-options.ts +69 -0
  454. package/src/domains/context/manifest.ts +6 -0
  455. package/src/domains/context/operator-profile.ts +157 -0
  456. package/src/domains/context/project-metadata.ts +529 -0
  457. package/src/domains/context/project-rules.ts +227 -0
  458. package/src/domains/context/prompt-context.ts +61 -0
  459. package/src/domains/context/refresh.ts +178 -0
  460. package/src/domains/context/runtime.ts +17 -0
  461. package/src/domains/context/sibling-files.ts +10 -0
  462. package/src/domains/context/state.ts +237 -0
  463. package/src/domains/context/wiki/assemble.ts +303 -0
  464. package/src/domains/context/wiki/frontmatter.ts +210 -0
  465. package/src/domains/context/wiki/generate.ts +595 -0
  466. package/src/domains/context/wiki/layout.ts +111 -0
  467. package/src/domains/context/wiki/meta.ts +221 -0
  468. package/src/domains/context/wiki/plan-store.ts +217 -0
  469. package/src/domains/context/wiki/plan.ts +250 -0
  470. package/src/domains/context/wiki/prompts.ts +283 -0
  471. package/src/domains/context/wiki/staleness.ts +198 -0
  472. package/src/domains/dispatch/active-route-planner.ts +168 -0
  473. package/src/domains/dispatch/admission-queue.ts +150 -0
  474. package/src/domains/dispatch/admission.ts +334 -0
  475. package/src/domains/dispatch/agent-candidates.ts +307 -0
  476. package/src/domains/dispatch/agent-ledger-hub.ts +71 -0
  477. package/src/domains/dispatch/agent-ledger-store.ts +257 -0
  478. package/src/domains/dispatch/agent-ledger.ts +212 -0
  479. package/src/domains/dispatch/agent-plan-adapter.ts +85 -0
  480. package/src/domains/dispatch/assignment-events.ts +132 -0
  481. package/src/domains/dispatch/assignment-reconcile.ts +76 -0
  482. package/src/domains/dispatch/assignment-store.ts +162 -0
  483. package/src/domains/dispatch/assignment.ts +278 -0
  484. package/src/domains/dispatch/backoff.ts +59 -0
  485. package/src/domains/dispatch/batch-store.ts +134 -0
  486. package/src/domains/dispatch/batch-tracker.ts +66 -0
  487. package/src/domains/dispatch/capability-match.ts +155 -0
  488. package/src/domains/dispatch/capacity-lease.ts +413 -0
  489. package/src/domains/dispatch/code-step-store.ts +52 -0
  490. package/src/domains/dispatch/code-step.ts +387 -0
  491. package/src/domains/dispatch/contract.ts +278 -0
  492. package/src/domains/dispatch/dedup.ts +133 -0
  493. package/src/domains/dispatch/event-pump.ts +251 -0
  494. package/src/domains/dispatch/execution-handoff.ts +29 -0
  495. package/src/domains/dispatch/execution-plan.ts +328 -0
  496. package/src/domains/dispatch/execution-role.ts +277 -0
  497. package/src/domains/dispatch/execution-scheduler.ts +583 -0
  498. package/src/domains/dispatch/extension.ts +6006 -0
  499. package/src/domains/dispatch/failure-classification.ts +147 -0
  500. package/src/domains/dispatch/fleet-commit-attribution.ts +56 -0
  501. package/src/domains/dispatch/fleet-plan.ts +225 -0
  502. package/src/domains/dispatch/fleet-preflight.ts +394 -0
  503. package/src/domains/dispatch/gate-decisions.ts +1040 -0
  504. package/src/domains/dispatch/gate-role-prompts.ts +58 -0
  505. package/src/domains/dispatch/heartbeat.ts +27 -0
  506. package/src/domains/dispatch/index.ts +137 -0
  507. package/src/domains/dispatch/joint-route-adapter.ts +114 -0
  508. package/src/domains/dispatch/joint-route-resolver.ts +283 -0
  509. package/src/domains/dispatch/manifest.ts +6 -0
  510. package/src/domains/dispatch/orphan-recovery.ts +266 -0
  511. package/src/domains/dispatch/outcome.ts +109 -0
  512. package/src/domains/dispatch/phase-timing.ts +47 -0
  513. package/src/domains/dispatch/placement.ts +202 -0
  514. package/src/domains/dispatch/receipt-findings.ts +255 -0
  515. package/src/domains/dispatch/receipt-integrity.ts +383 -0
  516. package/src/domains/dispatch/recovery-candidates.ts +74 -0
  517. package/src/domains/dispatch/reproducibility.ts +48 -0
  518. package/src/domains/dispatch/reservation-store.ts +501 -0
  519. package/src/domains/dispatch/route-approval.ts +177 -0
  520. package/src/domains/dispatch/route-candidates.ts +57 -0
  521. package/src/domains/dispatch/route-decision.ts +1079 -0
  522. package/src/domains/dispatch/route-facts.ts +187 -0
  523. package/src/domains/dispatch/route-history.ts +238 -0
  524. package/src/domains/dispatch/route-observer.ts +488 -0
  525. package/src/domains/dispatch/route-policy.ts +327 -0
  526. package/src/domains/dispatch/route-quality.ts +256 -0
  527. package/src/domains/dispatch/route-readiness.ts +120 -0
  528. package/src/domains/dispatch/routing-intent.ts +287 -0
  529. package/src/domains/dispatch/run-identity.ts +56 -0
  530. package/src/domains/dispatch/scout-transition.ts +130 -0
  531. package/src/domains/dispatch/state.ts +302 -0
  532. package/src/domains/dispatch/tool-stats.ts +132 -0
  533. package/src/domains/dispatch/transport.ts +210 -0
  534. package/src/domains/dispatch/types.ts +799 -0
  535. package/src/domains/dispatch/validation-grounding.ts +154 -0
  536. package/src/domains/dispatch/validation.ts +721 -0
  537. package/src/domains/dispatch/worker-protocol.ts +275 -0
  538. package/src/domains/dispatch/worker-spawn.ts +585 -0
  539. package/src/domains/dispatch/write-boundary-enforcer.ts +97 -0
  540. package/src/domains/dispatch/write-boundary.ts +426 -0
  541. package/src/domains/eval/artifacts/redact.ts +42 -0
  542. package/src/domains/eval/artifacts/store.ts +173 -0
  543. package/src/domains/eval/compare/compare.ts +33 -0
  544. package/src/domains/eval/compare/gates.ts +66 -0
  545. package/src/domains/eval/compare/thresholds.ts +92 -0
  546. package/src/domains/eval/harness-metrics.ts +62 -0
  547. package/src/domains/eval/index.ts +66 -0
  548. package/src/domains/eval/metrics/chaos-stream.ts +93 -0
  549. package/src/domains/eval/metrics/context.ts +34 -0
  550. package/src/domains/eval/metrics/coverage.ts +21 -0
  551. package/src/domains/eval/metrics/evidence.ts +182 -0
  552. package/src/domains/eval/metrics/fleet-loop-stream.ts +196 -0
  553. package/src/domains/eval/metrics/invariants.ts +736 -0
  554. package/src/domains/eval/metrics/latency.ts +4 -0
  555. package/src/domains/eval/metrics/token-stream.ts +139 -0
  556. package/src/domains/eval/metrics/tokens.ts +51 -0
  557. package/src/domains/eval/metrics/tool-calls.ts +7 -0
  558. package/src/domains/eval/proactive-memory.ts +279 -0
  559. package/src/domains/eval/provenance.ts +35 -0
  560. package/src/domains/eval/report.ts +234 -0
  561. package/src/domains/eval/reports/json.ts +5 -0
  562. package/src/domains/eval/reports/junit.ts +23 -0
  563. package/src/domains/eval/reports/markdown.ts +20 -0
  564. package/src/domains/eval/reports/swe-jsonl.ts +16 -0
  565. package/src/domains/eval/reports/text.ts +25 -0
  566. package/src/domains/eval/run-compare.ts +274 -0
  567. package/src/domains/eval/runner.ts +244 -0
  568. package/src/domains/eval/runners/clio-run.ts +148 -0
  569. package/src/domains/eval/runners/context-index.ts +56 -0
  570. package/src/domains/eval/runners/context-init.ts +203 -0
  571. package/src/domains/eval/runners/external-command.ts +350 -0
  572. package/src/domains/eval/runtime-paths.ts +171 -0
  573. package/src/domains/eval/schema/artifact.ts +75 -0
  574. package/src/domains/eval/schema/suite.ts +235 -0
  575. package/src/domains/eval/schema/validate.ts +339 -0
  576. package/src/domains/eval/store.ts +392 -0
  577. package/src/domains/eval/suites/load.ts +74 -0
  578. package/src/domains/eval/suites/matrix.ts +19 -0
  579. package/src/domains/eval/suites/resolve.ts +44 -0
  580. package/src/domains/eval/suites/run.ts +325 -0
  581. package/src/domains/eval/task-file.ts +186 -0
  582. package/src/domains/eval/types.ts +140 -0
  583. package/src/domains/eval/verifiers/command.ts +27 -0
  584. package/src/domains/eval/verifiers/file-exists.ts +6 -0
  585. package/src/domains/eval/verifiers/patch.ts +22 -0
  586. package/src/domains/eval/workspaces/git.ts +41 -0
  587. package/src/domains/eval/workspaces/local.ts +17 -0
  588. package/src/domains/eval/workspaces/temp-copy.ts +29 -0
  589. package/src/domains/evidence/build.ts +1754 -0
  590. package/src/domains/evidence/eval.ts +605 -0
  591. package/src/domains/evidence/failure-attribution.ts +54 -0
  592. package/src/domains/evidence/finish-contract-map.ts +42 -0
  593. package/src/domains/evidence/index.ts +55 -0
  594. package/src/domains/evidence/provenance.ts +200 -0
  595. package/src/domains/evidence/redact.ts +81 -0
  596. package/src/domains/evidence/store.ts +291 -0
  597. package/src/domains/evidence/types.ts +325 -0
  598. package/src/domains/evolution/SELF_EDIT_GATE.md +91 -0
  599. package/src/domains/evolution/index.ts +26 -0
  600. package/src/domains/evolution/manifest.ts +154 -0
  601. package/src/domains/evolution/validate.ts +304 -0
  602. package/src/domains/extensions/contract.ts +22 -0
  603. package/src/domains/extensions/discovery.ts +193 -0
  604. package/src/domains/extensions/extension.ts +46 -0
  605. package/src/domains/extensions/index.ts +34 -0
  606. package/src/domains/extensions/manager.ts +30 -0
  607. package/src/domains/extensions/manifest.ts +6 -0
  608. package/src/domains/extensions/resources.ts +38 -0
  609. package/src/domains/extensions/state.ts +224 -0
  610. package/src/domains/extensions/types.ts +83 -0
  611. package/src/domains/interop/consent.ts +185 -0
  612. package/src/domains/interop/contract.ts +29 -0
  613. package/src/domains/interop/detect.ts +173 -0
  614. package/src/domains/interop/extension.ts +59 -0
  615. package/src/domains/interop/index.ts +34 -0
  616. package/src/domains/interop/manifest.ts +6 -0
  617. package/src/domains/interop/registry.ts +139 -0
  618. package/src/domains/interop/state.ts +92 -0
  619. package/src/domains/interop/types.ts +109 -0
  620. package/src/domains/lifecycle/contract.ts +11 -0
  621. package/src/domains/lifecycle/doctor.ts +536 -0
  622. package/src/domains/lifecycle/extension.ts +23 -0
  623. package/src/domains/lifecycle/index.ts +21 -0
  624. package/src/domains/lifecycle/install-method.ts +51 -0
  625. package/src/domains/lifecycle/manifest.ts +6 -0
  626. package/src/domains/lifecycle/migrations/2026-08-18-lmstudio-runtime-id.ts +52 -0
  627. package/src/domains/lifecycle/migrations/index.ts +114 -0
  628. package/src/domains/lifecycle/state.ts +93 -0
  629. package/src/domains/lifecycle/upgrade-notice.ts +35 -0
  630. package/src/domains/lifecycle/version.ts +35 -0
  631. package/src/domains/memory/index.ts +128 -0
  632. package/src/domains/memory/operations.ts +143 -0
  633. package/src/domains/memory/prompt-section.ts +86 -0
  634. package/src/domains/memory/proposal.ts +180 -0
  635. package/src/domains/memory/store.ts +163 -0
  636. package/src/domains/memory/task-bank.ts +229 -0
  637. package/src/domains/memory/task-memory-handoff.ts +222 -0
  638. package/src/domains/memory/task-memory-policy.ts +602 -0
  639. package/src/domains/memory/task-memory-status.ts +58 -0
  640. package/src/domains/memory/task-memory-telemetry.ts +346 -0
  641. package/src/domains/memory/task-memory-trace.ts +89 -0
  642. package/src/domains/memory/types.ts +74 -0
  643. package/src/domains/memory/validate.ts +297 -0
  644. package/src/domains/middleware/budget.ts +216 -0
  645. package/src/domains/middleware/contract.ts +35 -0
  646. package/src/domains/middleware/dispatch-nudge.ts +469 -0
  647. package/src/domains/middleware/extension.ts +129 -0
  648. package/src/domains/middleware/hook-receipts.ts +70 -0
  649. package/src/domains/middleware/hooks-io.ts +186 -0
  650. package/src/domains/middleware/hooks.ts +432 -0
  651. package/src/domains/middleware/index.ts +154 -0
  652. package/src/domains/middleware/manifest.ts +6 -0
  653. package/src/domains/middleware/memory-intervention.ts +701 -0
  654. package/src/domains/middleware/rules.ts +42 -0
  655. package/src/domains/middleware/runtime.ts +333 -0
  656. package/src/domains/middleware/skills-reminder.ts +202 -0
  657. package/src/domains/middleware/snapshot.ts +71 -0
  658. package/src/domains/middleware/stalled-turn.ts +71 -0
  659. package/src/domains/middleware/task-board-reminder.ts +87 -0
  660. package/src/domains/middleware/task-nudge.ts +77 -0
  661. package/src/domains/middleware/tool-choice-control.ts +42 -0
  662. package/src/domains/middleware/types.ts +131 -0
  663. package/src/domains/middleware/validate.ts +329 -0
  664. package/src/domains/observability/accountability.ts +67 -0
  665. package/src/domains/observability/contract.ts +168 -0
  666. package/src/domains/observability/cost.ts +206 -0
  667. package/src/domains/observability/evidence-index.ts +123 -0
  668. package/src/domains/observability/extension.ts +281 -0
  669. package/src/domains/observability/index.ts +78 -0
  670. package/src/domains/observability/manifest.ts +10 -0
  671. package/src/domains/observability/metrics.ts +37 -0
  672. package/src/domains/observability/projection.ts +477 -0
  673. package/src/domains/observability/telemetry.ts +89 -0
  674. package/src/domains/observability/trace-store.ts +1454 -0
  675. package/src/domains/prompts/compiler.ts +614 -0
  676. package/src/domains/prompts/contract.ts +46 -0
  677. package/src/domains/prompts/extension.ts +336 -0
  678. package/src/domains/prompts/fragment-loader.ts +138 -0
  679. package/src/domains/prompts/fragments/identity/clio.md +5 -6
  680. package/src/domains/prompts/fragments/identity/docs-routing.md +10 -0
  681. package/src/domains/prompts/fragments/identity/self-awareness.md +19 -0
  682. package/src/domains/prompts/fragments/operating/contract.md +4 -41
  683. package/src/domains/prompts/fragments/operating/delegation.md +42 -0
  684. package/src/domains/prompts/fragments/operating/skills.md +26 -0
  685. package/src/domains/prompts/fragments/operating/worker.md +16 -0
  686. package/src/domains/prompts/fragments/safety/auto-edit.md +5 -5
  687. package/src/domains/prompts/fragments/safety/full-auto.md +3 -3
  688. package/src/domains/prompts/fragments/safety/read-only.md +4 -4
  689. package/src/domains/prompts/fragments/safety/suggest.md +2 -2
  690. package/src/domains/prompts/fragments/wiki/page.md +10 -0
  691. package/src/domains/prompts/fragments/wiki/plan.md +10 -0
  692. package/src/domains/prompts/hash.ts +73 -0
  693. package/src/domains/prompts/index.ts +32 -0
  694. package/src/domains/prompts/manifest.ts +8 -0
  695. package/src/domains/prompts/memory-intervention.ts +57 -0
  696. package/src/domains/prompts/preload.ts +82 -0
  697. package/src/domains/providers/auth/api-key.ts +47 -0
  698. package/src/domains/providers/auth/backend-file.ts +79 -0
  699. package/src/domains/providers/auth/backend-memory.ts +72 -0
  700. package/src/domains/providers/auth/boot-status.ts +65 -0
  701. package/src/domains/providers/auth/index.ts +37 -0
  702. package/src/domains/providers/auth/oauth.ts +37 -0
  703. package/src/domains/providers/auth/storage.ts +726 -0
  704. package/src/domains/providers/capabilities.ts +58 -0
  705. package/src/domains/providers/catalog.ts +162 -0
  706. package/src/domains/providers/contract.ts +162 -0
  707. package/src/domains/providers/credentials.ts +20 -0
  708. package/src/domains/providers/eligibility.ts +24 -0
  709. package/src/domains/providers/errors.ts +64 -0
  710. package/src/domains/providers/extension.ts +548 -0
  711. package/src/domains/providers/index.ts +142 -0
  712. package/src/domains/providers/knowledge-base-path.ts +102 -0
  713. package/src/domains/providers/manifest.ts +6 -0
  714. package/src/domains/providers/model-capabilities.ts +136 -0
  715. package/src/domains/providers/model-discovery.ts +144 -0
  716. package/src/domains/providers/model-family.ts +32 -0
  717. package/src/domains/providers/model-runtime-capabilities.ts +723 -0
  718. package/src/domains/providers/models/local-models/clio-local-coding-targets.yaml +120 -37
  719. package/src/domains/providers/plugins.ts +61 -0
  720. package/src/domains/providers/probe/fingerprint.ts +64 -0
  721. package/src/domains/providers/probe/http.ts +114 -0
  722. package/src/domains/providers/probe/reasoning.ts +111 -0
  723. package/src/domains/providers/registry.ts +187 -0
  724. package/src/domains/providers/resolver.ts +156 -0
  725. package/src/domains/providers/runtime-resolution.ts +720 -0
  726. package/src/domains/providers/runtimes/antigravity/antigravity-code.ts +90 -0
  727. package/src/domains/providers/runtimes/boot-manifest.ts +55 -0
  728. package/src/domains/providers/runtimes/builtins.ts +78 -0
  729. package/src/domains/providers/runtimes/claude/claude-code.ts +38 -0
  730. package/src/domains/providers/runtimes/claude/claude-sdk.ts +38 -0
  731. package/src/domains/providers/runtimes/claude/common.ts +55 -0
  732. package/src/domains/providers/runtimes/cloud/alcf.ts +171 -0
  733. package/src/domains/providers/runtimes/cloud/anthropic-max.ts +71 -0
  734. package/src/domains/providers/runtimes/cloud/anthropic.ts +43 -0
  735. package/src/domains/providers/runtimes/cloud/bedrock.ts +35 -0
  736. package/src/domains/providers/runtimes/cloud/deepseek.ts +50 -0
  737. package/src/domains/providers/runtimes/cloud/google.ts +41 -0
  738. package/src/domains/providers/runtimes/cloud/groq.ts +46 -0
  739. package/src/domains/providers/runtimes/cloud/mistral.ts +46 -0
  740. package/src/domains/providers/runtimes/cloud/openai-codex.ts +49 -0
  741. package/src/domains/providers/runtimes/cloud/openai.ts +46 -0
  742. package/src/domains/providers/runtimes/cloud/openrouter.ts +111 -0
  743. package/src/domains/providers/runtimes/common/lmstudio-http.ts +423 -0
  744. package/src/domains/providers/runtimes/common/local-synth.ts +164 -0
  745. package/src/domains/providers/runtimes/common/probe-helpers.ts +474 -0
  746. package/src/domains/providers/runtimes/local-native/lemonade-anthropic.ts +27 -0
  747. package/src/domains/providers/runtimes/local-native/lemonade-openai.ts +26 -0
  748. package/src/domains/providers/runtimes/local-native/llamacpp-anthropic.ts +88 -0
  749. package/src/domains/providers/runtimes/local-native/llamacpp-completion.ts +207 -0
  750. package/src/domains/providers/runtimes/local-native/llamacpp-embed.ts +180 -0
  751. package/src/domains/providers/runtimes/local-native/llamacpp-rerank.ts +126 -0
  752. package/src/domains/providers/runtimes/local-native/llamacpp.ts +98 -0
  753. package/src/domains/providers/runtimes/local-native/lmstudio.ts +241 -0
  754. package/src/domains/providers/runtimes/local-native/ollama-native.ts +117 -0
  755. package/src/domains/providers/runtimes/local-native/sglang.ts +26 -0
  756. package/src/domains/providers/runtimes/local-native/vllm.ts +27 -0
  757. package/src/domains/providers/runtimes/protocol/anthropic-compat.ts +104 -0
  758. package/src/domains/providers/runtimes/protocol/anthropic-messages.ts +28 -0
  759. package/src/domains/providers/runtimes/protocol/bedrock.ts +26 -0
  760. package/src/domains/providers/runtimes/protocol/google.ts +27 -0
  761. package/src/domains/providers/runtimes/protocol/openai-compat.ts +145 -0
  762. package/src/domains/providers/support.ts +241 -0
  763. package/src/domains/providers/thinking-control-policy.ts +85 -0
  764. package/src/domains/providers/types/capability-flags.ts +114 -0
  765. package/src/domains/providers/types/cost-provenance.ts +7 -0
  766. package/src/domains/providers/types/inference.ts +41 -0
  767. package/src/domains/providers/types/knowledge-base.ts +156 -0
  768. package/src/domains/providers/types/local-model-quirks.ts +216 -0
  769. package/src/domains/providers/types/runtime-descriptor.ts +181 -0
  770. package/src/domains/providers/types/target-descriptor.ts +60 -0
  771. package/src/domains/resources/collision.ts +92 -0
  772. package/src/domains/resources/common-loader.ts +140 -0
  773. package/src/domains/resources/contract.ts +24 -0
  774. package/src/domains/resources/extension.ts +59 -0
  775. package/src/domains/resources/index.ts +74 -0
  776. package/src/domains/resources/loader.ts +85 -0
  777. package/src/domains/resources/manifest.ts +6 -0
  778. package/src/domains/resources/prompts/loader.ts +246 -0
  779. package/src/domains/resources/prompts/substitute.ts +1 -0
  780. package/src/domains/resources/skills/content-hash.ts +107 -0
  781. package/src/domains/resources/skills/evals.ts +175 -0
  782. package/src/domains/resources/skills/install.ts +427 -0
  783. package/src/domains/resources/skills/loader.ts +985 -0
  784. package/src/domains/resources/skills/marketplace.ts +301 -0
  785. package/src/domains/resources/skills/provenance-pin.ts +115 -0
  786. package/src/domains/safety/action-classifier.ts +270 -0
  787. package/src/domains/safety/approval-axis.ts +23 -0
  788. package/src/domains/safety/audit.ts +493 -0
  789. package/src/domains/safety/autonomy.ts +174 -0
  790. package/src/domains/safety/call-target.ts +59 -0
  791. package/src/domains/safety/contract.ts +65 -0
  792. package/src/domains/safety/damage-control.ts +44 -0
  793. package/src/domains/safety/default-path-policy.ts +117 -0
  794. package/src/domains/safety/extension.ts +383 -0
  795. package/src/domains/safety/finish-contract-registration.ts +128 -0
  796. package/src/domains/safety/finish-contract.ts +554 -0
  797. package/src/domains/safety/index.ts +44 -0
  798. package/src/domains/safety/loop-detector.ts +143 -0
  799. package/src/domains/safety/manifest.ts +6 -0
  800. package/src/domains/safety/path-policy.ts +164 -0
  801. package/src/domains/safety/policy-engine.ts +994 -0
  802. package/src/domains/safety/project-policy.ts +391 -0
  803. package/src/domains/safety/protected-artifacts-registration.ts +189 -0
  804. package/src/domains/safety/protected-artifacts.ts +993 -0
  805. package/src/domains/safety/rejection-feedback.ts +102 -0
  806. package/src/domains/safety/rigor.ts +72 -0
  807. package/src/domains/safety/rule-compiler.ts +48 -0
  808. package/src/domains/safety/rule-pack-loader.ts +92 -0
  809. package/src/domains/safety/run-effects.ts +197 -0
  810. package/src/domains/safety/scope.ts +61 -0
  811. package/src/domains/scheduling/budget.ts +35 -0
  812. package/src/domains/scheduling/cluster.ts +175 -0
  813. package/src/domains/scheduling/contract.ts +30 -0
  814. package/src/domains/scheduling/extension.ts +91 -0
  815. package/src/domains/scheduling/index.ts +12 -0
  816. package/src/domains/scheduling/manifest.ts +6 -0
  817. package/src/domains/session/archive-readers.ts +208 -0
  818. package/src/domains/session/checkpoint.ts +38 -0
  819. package/src/domains/session/compaction/auto.ts +89 -0
  820. package/src/domains/session/compaction/branch-summary.ts +187 -0
  821. package/src/domains/session/compaction/compact.ts +493 -0
  822. package/src/domains/session/compaction/cut-point.ts +172 -0
  823. package/src/domains/session/compaction/defaults.ts +34 -0
  824. package/src/domains/session/compaction/mask-observations.ts +265 -0
  825. package/src/domains/session/compaction/session-entries.ts +18 -0
  826. package/src/domains/session/compaction/tokens.ts +148 -0
  827. package/src/domains/session/context-accounting.ts +583 -0
  828. package/src/domains/session/context-ledger.ts +362 -0
  829. package/src/domains/session/contract.ts +159 -0
  830. package/src/domains/session/cwd-fallback.ts +65 -0
  831. package/src/domains/session/decision-board.ts +190 -0
  832. package/src/domains/session/entries.ts +572 -0
  833. package/src/domains/session/extension.ts +403 -0
  834. package/src/domains/session/history.ts +172 -0
  835. package/src/domains/session/index.ts +84 -0
  836. package/src/domains/session/manager.ts +128 -0
  837. package/src/domains/session/manifest.ts +6 -0
  838. package/src/domains/session/migrations/index.ts +27 -0
  839. package/src/domains/session/prompt-manifest.ts +173 -0
  840. package/src/domains/session/protected-artifact-journal.ts +241 -0
  841. package/src/domains/session/protected-artifacts.ts +90 -0
  842. package/src/domains/session/retry.ts +230 -0
  843. package/src/domains/session/session-artifacts.ts +107 -0
  844. package/src/domains/session/task-board.ts +569 -0
  845. package/src/domains/session/tree/active-path.ts +137 -0
  846. package/src/domains/session/tree/fork.ts +159 -0
  847. package/src/domains/session/tree/manager.ts +128 -0
  848. package/src/domains/session/tree/navigator.ts +177 -0
  849. package/src/domains/session/tree/preview.ts +259 -0
  850. package/src/domains/session/usage.ts +148 -0
  851. package/src/domains/session/workspace/git-probe.ts +167 -0
  852. package/src/domains/session/workspace/index.ts +4 -0
  853. package/src/domains/session/workspace/project-type.ts +217 -0
  854. package/src/domains/session/workspace/snapshot.ts +74 -0
  855. package/src/domains/share/archive.ts +684 -0
  856. package/src/domains/share/contract.ts +9 -0
  857. package/src/domains/share/extension.ts +26 -0
  858. package/src/domains/share/index.ts +28 -0
  859. package/src/domains/share/manifest.ts +6 -0
  860. package/src/domains/user-tasks/store.ts +297 -0
  861. package/src/engine/acp/adapter.ts +397 -0
  862. package/src/engine/acp/errors.ts +128 -0
  863. package/src/engine/acp/event-mapper.ts +154 -0
  864. package/src/engine/acp/server.ts +2238 -0
  865. package/src/engine/acp/tool-mediator.ts +686 -0
  866. package/src/engine/acp/transport.ts +775 -0
  867. package/src/engine/acp/types.ts +196 -0
  868. package/src/engine/agent.ts +29 -0
  869. package/src/engine/ai.ts +207 -0
  870. package/src/engine/alcf-oauth.ts +205 -0
  871. package/src/engine/antigravity/subprocess-runtime.ts +205 -0
  872. package/src/engine/api-registry.ts +223 -0
  873. package/src/engine/apis/degraded-inference.ts +95 -0
  874. package/src/engine/apis/index.ts +16 -0
  875. package/src/engine/apis/llamacpp-residency.ts +292 -0
  876. package/src/engine/apis/lmstudio-residency.ts +76 -0
  877. package/src/engine/apis/lmstudio.ts +243 -0
  878. package/src/engine/apis/ollama-native.ts +528 -0
  879. package/src/engine/apis/openai-completions.ts +795 -0
  880. package/src/engine/apis/output-budget.ts +99 -0
  881. package/src/engine/apis/residency-lock.ts +29 -0
  882. package/src/engine/apis/residency.ts +776 -0
  883. package/src/engine/apis/resident-models.ts +42 -0
  884. package/src/engine/apis/sampling-overrides.ts +38 -0
  885. package/src/engine/apis/types.ts +16 -0
  886. package/src/engine/claude/sdk-runtime.ts +685 -0
  887. package/src/engine/claude/session-id.ts +5 -0
  888. package/src/engine/claude/subprocess-runtime.ts +316 -0
  889. package/src/engine/claude/tool-safety.ts +400 -0
  890. package/src/engine/env-api-keys.ts +98 -0
  891. package/src/engine/external-subprocess.ts +23 -0
  892. package/src/engine/gemma-channel-filter.ts +223 -0
  893. package/src/engine/harmony-response.ts +165 -0
  894. package/src/engine/instrumented-tui.ts +192 -0
  895. package/src/engine/loop-guard.ts +1127 -0
  896. package/src/engine/messages.ts +14 -0
  897. package/src/engine/models.ts +42 -0
  898. package/src/engine/oauth.ts +196 -0
  899. package/src/engine/pi-mono-names.ts +13 -0
  900. package/src/engine/prompt-templates.ts +1 -0
  901. package/src/engine/provider-payload.ts +272 -0
  902. package/src/engine/select-list.ts +53 -0
  903. package/src/engine/session.ts +834 -0
  904. package/src/engine/strip-tokenizer-sentinels.ts +125 -0
  905. package/src/engine/truncate.ts +9 -0
  906. package/src/engine/tui.ts +111 -0
  907. package/src/engine/types.ts +63 -0
  908. package/src/engine/worker-events.ts +100 -0
  909. package/src/engine/worker-runtime-capabilities.ts +5 -0
  910. package/src/engine/worker-runtime.ts +1022 -0
  911. package/src/engine/worker-tools.ts +208 -0
  912. package/src/entry/boot-options.ts +50 -0
  913. package/src/entry/orchestrator.ts +2011 -0
  914. package/src/interactive/application-controller.ts +433 -0
  915. package/src/interactive/bus-notices.ts +265 -0
  916. package/src/interactive/chat-loop-messages.ts +626 -0
  917. package/src/interactive/chat-loop-policy.ts +18 -0
  918. package/src/interactive/chat-loop.ts +1090 -0
  919. package/src/interactive/chat-panel.ts +1820 -0
  920. package/src/interactive/chat-renderer.ts +1228 -0
  921. package/src/interactive/clio-editor.ts +161 -0
  922. package/src/interactive/command-fallbacks.ts +23 -0
  923. package/src/interactive/command-output.ts +85 -0
  924. package/src/interactive/context-activity.ts +203 -0
  925. package/src/interactive/context-meter.ts +223 -0
  926. package/src/interactive/context-overlay.ts +246 -0
  927. package/src/interactive/cost-overlay.ts +279 -0
  928. package/src/interactive/dispatch-board.ts +1319 -0
  929. package/src/interactive/dispatch-steering.ts +86 -0
  930. package/src/interactive/editor-bash.ts +46 -0
  931. package/src/interactive/editor-steer.ts +51 -0
  932. package/src/interactive/editor-submit.ts +507 -0
  933. package/src/interactive/export-html/ansi-to-html.ts +161 -0
  934. package/src/interactive/export-html/index.ts +51 -0
  935. package/src/interactive/export-html/template.ts +45 -0
  936. package/src/interactive/export-html/tool-renderer.ts +54 -0
  937. package/src/interactive/external-editor.ts +67 -0
  938. package/src/interactive/follow-up-queue-panel.ts +75 -0
  939. package/src/interactive/footer/dashboard.ts +538 -0
  940. package/src/interactive/footer/notifications.ts +275 -0
  941. package/src/interactive/footer/widgets.ts +1264 -0
  942. package/src/interactive/footer-panel.ts +187 -0
  943. package/src/interactive/format-time.ts +97 -0
  944. package/src/interactive/index.ts +11 -0
  945. package/src/interactive/interactive-application.ts +939 -0
  946. package/src/interactive/interactive-event-projection.ts +385 -0
  947. package/src/interactive/interactive-input-runtime.ts +307 -0
  948. package/src/interactive/interactive-presentation.ts +584 -0
  949. package/src/interactive/interactive-shell.ts +388 -0
  950. package/src/interactive/interactive-slash-runtime.ts +554 -0
  951. package/src/interactive/interactive-subscriptions.ts +111 -0
  952. package/src/interactive/interactive-tickers.ts +183 -0
  953. package/src/interactive/keybinding-manager.ts +496 -0
  954. package/src/interactive/layout.ts +57 -0
  955. package/src/interactive/leader-key.ts +143 -0
  956. package/src/interactive/loop-guard-interrupt.ts +101 -0
  957. package/src/interactive/memory-overlay.ts +280 -0
  958. package/src/interactive/overlay-ask-user-lifecycle.ts +110 -0
  959. package/src/interactive/overlay-auth-lifecycle.ts +308 -0
  960. package/src/interactive/overlay-frame.ts +502 -0
  961. package/src/interactive/overlay-general-openers.ts +274 -0
  962. package/src/interactive/overlay-key-routing.ts +216 -0
  963. package/src/interactive/overlay-lifecycle.ts +426 -0
  964. package/src/interactive/overlay-model-selectors.ts +127 -0
  965. package/src/interactive/overlay-permission-lifecycle.ts +345 -0
  966. package/src/interactive/overlay-resource-openers.ts +112 -0
  967. package/src/interactive/overlay-session-lifecycle.ts +327 -0
  968. package/src/interactive/overlay-transitions.ts +57 -0
  969. package/src/interactive/overlays/agents.ts +69 -0
  970. package/src/interactive/overlays/ask-user.ts +921 -0
  971. package/src/interactive/overlays/auth-dialog.ts +221 -0
  972. package/src/interactive/overlays/context-reset.ts +108 -0
  973. package/src/interactive/overlays/cwd-fallback.ts +141 -0
  974. package/src/interactive/overlays/decisions.ts +300 -0
  975. package/src/interactive/overlays/extensions.ts +54 -0
  976. package/src/interactive/overlays/help-reference.ts +145 -0
  977. package/src/interactive/overlays/interop.ts +139 -0
  978. package/src/interactive/overlays/keybinding-detail.ts +90 -0
  979. package/src/interactive/overlays/list-overlay.ts +606 -0
  980. package/src/interactive/overlays/message-picker.ts +155 -0
  981. package/src/interactive/overlays/model-selector.ts +1109 -0
  982. package/src/interactive/overlays/prompts.ts +72 -0
  983. package/src/interactive/overlays/session-selector-search.ts +31 -0
  984. package/src/interactive/overlays/session-selector.ts +284 -0
  985. package/src/interactive/overlays/settings.ts +3451 -0
  986. package/src/interactive/overlays/skills-hub.ts +237 -0
  987. package/src/interactive/overlays/tree-selector.ts +422 -0
  988. package/src/interactive/permission-overlay.ts +170 -0
  989. package/src/interactive/render-trace.ts +534 -0
  990. package/src/interactive/renderers/branch-summary.ts +86 -0
  991. package/src/interactive/renderers/code-ink.ts +420 -0
  992. package/src/interactive/renderers/compaction-summary.ts +112 -0
  993. package/src/interactive/renderers/diff.ts +137 -0
  994. package/src/interactive/renderers/mermaid.ts +53 -0
  995. package/src/interactive/renderers/notice.ts +28 -0
  996. package/src/interactive/renderers/retry-status.ts +31 -0
  997. package/src/interactive/renderers/structured.ts +89 -0
  998. package/src/interactive/renderers/tool-execution.ts +1357 -0
  999. package/src/interactive/renderers/worker-entry.ts +280 -0
  1000. package/src/interactive/session-last-turn.ts +186 -0
  1001. package/src/interactive/session-switch-settlement.ts +10 -0
  1002. package/src/interactive/session-transcript.ts +105 -0
  1003. package/src/interactive/session-usage-reseed.ts +74 -0
  1004. package/src/interactive/slash-autocomplete.ts +256 -0
  1005. package/src/interactive/slash-commands.ts +1407 -0
  1006. package/src/interactive/slash-spec.ts +424 -0
  1007. package/src/interactive/status/controller.ts +260 -0
  1008. package/src/interactive/status/index.ts +23 -0
  1009. package/src/interactive/status/state-machine.ts +530 -0
  1010. package/src/interactive/status/summary.ts +170 -0
  1011. package/src/interactive/status/types.ts +121 -0
  1012. package/src/interactive/status/verbs.ts +163 -0
  1013. package/src/interactive/status/watchdog.ts +24 -0
  1014. package/src/interactive/stdout-backpressure.ts +99 -0
  1015. package/src/interactive/stream-pacer.ts +530 -0
  1016. package/src/interactive/stream-pacing-policy.ts +66 -0
  1017. package/src/interactive/tasks-overlay.ts +540 -0
  1018. package/src/interactive/terminal-lease.ts +485 -0
  1019. package/src/interactive/theme/components.ts +55 -0
  1020. package/src/interactive/theme/glyphs.ts +70 -0
  1021. package/src/interactive/theme/index.ts +15 -0
  1022. package/src/interactive/theme/labels.ts +88 -0
  1023. package/src/interactive/theme/rules.ts +138 -0
  1024. package/src/interactive/theme/segments.ts +88 -0
  1025. package/src/interactive/theme/tokens.ts +121 -0
  1026. package/src/interactive/thinking-level-policy.ts +6 -0
  1027. package/src/interactive/tool-prose-loop.ts +122 -0
  1028. package/src/interactive/tool-prose-registration.ts +48 -0
  1029. package/src/interactive/turn-context.ts +855 -0
  1030. package/src/interactive/turn-middleware.ts +283 -0
  1031. package/src/interactive/turn-persistence.ts +458 -0
  1032. package/src/interactive/turn-queues.ts +181 -0
  1033. package/src/interactive/turn-recovery.ts +323 -0
  1034. package/src/interactive/turn-runtime.ts +869 -0
  1035. package/src/interactive/turn-state.ts +133 -0
  1036. package/src/interactive/view/artifacts.ts +1452 -0
  1037. package/src/interactive/view/view-overlay.ts +735 -0
  1038. package/src/interactive/welcome-dashboard.ts +537 -0
  1039. package/src/interactive/worker-receipts.ts +143 -0
  1040. package/src/interactive/worker-replay.ts +111 -0
  1041. package/src/interactive/worker-share.ts +100 -0
  1042. package/src/interactive/worker-stream.ts +446 -0
  1043. package/src/interactive/workspace-facts.ts +141 -0
  1044. package/src/tools/agent-tools.ts +402 -0
  1045. package/src/tools/artifact.ts +103 -0
  1046. package/src/tools/ask-user.ts +666 -0
  1047. package/src/tools/bash.ts +204 -0
  1048. package/src/tools/bootstrap.ts +77 -0
  1049. package/src/tools/builtin-tool-catalog.ts +265 -0
  1050. package/src/tools/codewiki/code-nav-surface.ts +29 -0
  1051. package/src/tools/codewiki/code-nav.ts +549 -0
  1052. package/src/tools/codewiki/shared.ts +118 -0
  1053. package/src/tools/compete-worktrees.ts +898 -0
  1054. package/src/tools/context/docs-engine.ts +630 -0
  1055. package/src/tools/context/index.ts +514 -0
  1056. package/src/tools/context/surface.ts +19 -0
  1057. package/src/tools/core-bootstrap.ts +168 -0
  1058. package/src/tools/credential-present.ts +151 -0
  1059. package/src/tools/dispatch-admission.ts +533 -0
  1060. package/src/tools/dispatch-arguments.ts +228 -0
  1061. package/src/tools/dispatch-background.ts +54 -0
  1062. package/src/tools/dispatch-event-text.ts +6 -0
  1063. package/src/tools/dispatch-plan.ts +746 -0
  1064. package/src/tools/dispatch-run-events.ts +238 -0
  1065. package/src/tools/dispatch-runner.ts +2370 -0
  1066. package/src/tools/dispatch-scout-admission.ts +295 -0
  1067. package/src/tools/dispatch-scout.ts +461 -0
  1068. package/src/tools/dispatch-types.ts +77 -0
  1069. package/src/tools/dispatch.ts +244 -0
  1070. package/src/tools/edit-diff.ts +534 -0
  1071. package/src/tools/edit.ts +128 -0
  1072. package/src/tools/executables.ts +22 -0
  1073. package/src/tools/file-mutation-queue.ts +35 -0
  1074. package/src/tools/find.ts +294 -0
  1075. package/src/tools/grep.ts +495 -0
  1076. package/src/tools/ignore-policy.ts +169 -0
  1077. package/src/tools/lazy-tool.ts +60 -0
  1078. package/src/tools/ledger.ts +206 -0
  1079. package/src/tools/ls.ts +110 -0
  1080. package/src/tools/monitor-surface.ts +36 -0
  1081. package/src/tools/monitor.ts +767 -0
  1082. package/src/tools/network-policy.ts +29 -0
  1083. package/src/tools/observation.ts +421 -0
  1084. package/src/tools/observers.ts +99 -0
  1085. package/src/tools/path-utils.ts +79 -0
  1086. package/src/tools/policy.ts +154 -0
  1087. package/src/tools/profiles.ts +108 -0
  1088. package/src/tools/read.ts +173 -0
  1089. package/src/tools/registry.ts +1169 -0
  1090. package/src/tools/result-shaping.ts +204 -0
  1091. package/src/tools/safe-exec.ts +128 -0
  1092. package/src/tools/spawn-hygiene.ts +182 -0
  1093. package/src/tools/steer-surface.ts +17 -0
  1094. package/src/tools/steer.ts +77 -0
  1095. package/src/tools/tasks.ts +265 -0
  1096. package/src/tools/truncate-utf8.ts +17 -0
  1097. package/src/tools/truncate.ts +43 -0
  1098. package/src/tools/verify/frontend.ts +687 -0
  1099. package/src/tools/verify/index.ts +31 -0
  1100. package/src/tools/verify/scripts.ts +108 -0
  1101. package/src/tools/verify/surface.ts +46 -0
  1102. package/src/tools/web-fetch-surface.ts +23 -0
  1103. package/src/tools/web-fetch.ts +759 -0
  1104. package/src/tools/worker-evidence.ts +215 -0
  1105. package/src/tools/write.ts +57 -0
  1106. package/src/utils/exif-orientation.ts +192 -0
  1107. package/src/utils/git.ts +24 -0
  1108. package/src/utils/image-resize.ts +148 -0
  1109. package/src/utils/photon.ts +103 -0
  1110. package/src/worker/control-lane.ts +22 -0
  1111. package/src/worker/entry.ts +294 -0
  1112. package/src/worker/event-projection.ts +56 -0
  1113. package/src/worker/heartbeat.ts +24 -0
  1114. package/src/worker/ledger-mirror.ts +95 -0
  1115. package/src/worker/ndjson.ts +40 -0
  1116. package/src/worker/protocol.ts +529 -0
  1117. package/src/worker/resource-facts.ts +79 -0
  1118. package/src/worker/runtime-registry.ts +12 -0
  1119. package/src/worker/spec-contract.ts +675 -0
  1120. package/src/worker/stdin-demux.ts +316 -0
  1121. package/dist/acp-UMLFVA3F.js +0 -92
  1122. package/dist/chunk-262G75JS.js +0 -35
  1123. package/dist/chunk-6CWDTGUC.js +0 -20
  1124. package/dist/chunk-BYEU76JP.js +0 -899
  1125. package/dist/chunk-GNGDQYDU.js +0 -34688
  1126. package/dist/chunk-GOTUR54M.js +0 -9
  1127. package/dist/chunk-NI4DEJMC.js +0 -88
  1128. package/dist/chunk-TPOCL34A.js +0 -2876
  1129. package/dist/chunk-UU3R62TT.js +0 -128
  1130. package/dist/clio-KIQ5SNDS.js +0 -53
  1131. package/dist/configure-G4E3A2PG.js +0 -27
  1132. package/dist/doctor-M5HJJZOL.js +0 -61
  1133. package/dist/domains/agents/builtins/architect.md +0 -33
  1134. package/dist/domains/agents/builtins/coder.md +0 -31
  1135. package/dist/domains/agents/builtins/context-bootstrap.md +0 -38
  1136. package/dist/domains/agents/builtins/debugger.md +0 -30
  1137. package/dist/domains/agents/builtins/documenter.md +0 -31
  1138. package/dist/domains/agents/builtins/git-master.md +0 -30
  1139. package/dist/domains/agents/builtins/provenance.md +0 -30
  1140. package/dist/domains/agents/builtins/researcher.md +0 -71
  1141. package/dist/domains/agents/builtins/scout.md +0 -42
  1142. package/dist/domains/agents/builtins/tester.md +0 -31
  1143. package/dist/domains/agents/builtins/verifier.md +0 -30
  1144. package/dist/domains/agents/builtins/wiki-writer.md +0 -41
  1145. package/dist/fleet-preflight-CLIAX7YR.js +0 -21
  1146. package/dist/preload-KZVHET2B.js +0 -11
  1147. package/dist/version-ROZ6CZKH.js +0 -16
  1148. package/docs/html/agents_blueprint.html +0 -936
  1149. package/docs/html/alcf_blueprint.html +0 -324
  1150. package/docs/html/architecture_blueprint.html +0 -850
  1151. package/docs/html/commands_blueprint.html +0 -794
  1152. package/docs/html/config_knobs_audit_blueprint.html +0 -178
  1153. package/docs/html/configuration_blueprint.html +0 -1080
  1154. package/docs/html/context_blueprint.html +0 -603
  1155. package/docs/html/documentation_blueprint.html +0 -832
  1156. package/docs/html/environment_blueprint.html +0 -404
  1157. package/docs/html/eval_blueprint.html +0 -743
  1158. package/docs/html/evals_internal_blueprint.html +0 -190
  1159. package/docs/html/evolution_blueprint.html +0 -674
  1160. package/docs/html/extensions_blueprint.html +0 -2065
  1161. package/docs/html/fleet_dispatch_blueprint.html +0 -286
  1162. package/docs/html/index.html +0 -919
  1163. package/docs/html/lifecycle_blueprint.html +0 -723
  1164. package/docs/html/memory_blueprint.html +0 -699
  1165. package/docs/html/middleware_blueprint.html +0 -664
  1166. package/docs/html/models_blueprint.html +0 -2366
  1167. package/docs/html/observability_blueprint.html +0 -683
  1168. package/docs/html/provider_adapter_blueprint.html +0 -245
  1169. package/docs/html/safety_blueprint.html +0 -1386
  1170. package/docs/html/shared.css +0 -571
  1171. package/docs/html/shared.js +0 -143
  1172. package/docs/html/skills_blueprint.html +0 -671
  1173. package/docs/html/soak_blueprint.html +0 -182
  1174. package/docs/html/tool_usage_blueprint.html +0 -350
  1175. package/docs/html/tools_blueprint.html +0 -2249
  1176. package/docs/html/trace_blueprint.html +0 -235
  1177. package/docs/html/tui_design_blueprint.html +0 -314
  1178. package/docs/html/validation_blueprint.html +0 -961
  1179. package/docs/html/worker_dispatch_blueprint.html +0 -231
  1180. package/skills/git/commit-crafting/SKILL.md +0 -79
  1181. package/skills/git/commit-crafting/evals.md +0 -92
  1182. package/skills/git/create-pr/SKILL.md +0 -116
  1183. package/skills/git/create-pr/evals.md +0 -114
  1184. package/skills/git/investigate-issue/SKILL.md +0 -139
  1185. package/skills/git/investigate-issue/evals.md +0 -94
  1186. package/skills/git/review-changes/SKILL.md +0 -103
  1187. package/skills/git/review-changes/evals.md +0 -85
package/docs/html/safety_blueprint.html DELETED
@@ -1,1386 +0,0 @@
1
- <!DOCTYPE html>
2
- <html lang="en">
3
- <head>
4
- <meta charset="UTF-8">
5
- <meta name="viewport" content="width=device-width, initial-scale=1.0">
6
- <title>Clio Coder Safety Model Blueprint (v0.3.0)</title>
7
-
8
- <style>
9
- :root {
10
- --bg-dark: #090d16;
11
- --bg-grid: rgba(255, 255, 255, 0.02);
12
- --bg-card: rgba(13, 20, 38, 0.45);
13
- --bg-card-hover: rgba(20, 30, 58, 0.6);
14
- --border-card: rgba(255, 255, 255, 0.08);
15
- --border-card-hover: rgba(0, 240, 255, 0.3);
16
- --text-main: #f3f4f6;
17
- --text-muted: #9ca3af;
18
- --text-dim: #6b7280;
19
-
20
- --color-cyan: #00f0ff;
21
- --color-cyan-rgb: 0, 240, 255;
22
- --color-purple: #bd00ff;
23
- --color-purple-rgb: 189, 0, 255;
24
- --color-emerald: #10b981;
25
- --color-emerald-rgb: 16, 185, 129;
26
- --color-amber: #f59e0b;
27
- --color-amber-rgb: 245, 158, 11;
28
- --color-rose: #ef4444;
29
- --color-rose-rgb: 239, 68, 68;
30
-
31
- --gradient-main: linear-gradient(135deg, var(--color-cyan), var(--color-purple));
32
- --shadow-glow: 0 0 25px rgba(0, 240, 255, 0.15);
33
- --font-sans: "Segoe UI", -apple-system, BlinkMacSystemFont, Roboto, "Helvetica Neue", Arial, sans-serif;
34
- --font-mono: "SFMono-Regular", Consolas, "Liberation Mono", Menlo, monospace;
35
-
36
- --glass-blur: blur(12px);
37
- }
38
-
39
- * {
40
- box-sizing: border-box;
41
- margin: 0;
42
- padding: 0;
43
- }
44
-
45
- body {
46
- background-color: var(--bg-dark);
47
- background-image:
48
- radial-gradient(circle at 10% 20%, rgba(var(--color-cyan-rgb), 0.05) 0%, transparent 40%),
49
- radial-gradient(circle at 90% 80%, rgba(var(--color-purple-rgb), 0.05) 0%, transparent 40%),
50
- radial-gradient(circle at 50% 50%, #0d1527 0%, var(--bg-dark) 100%);
51
- color: var(--text-main);
52
- font-family: var(--font-sans);
53
- min-height: 100vh;
54
- line-height: 1.6;
55
- overflow-x: hidden;
56
- position: relative;
57
- }
58
-
59
- body::before {
60
- content: '';
61
- position: absolute;
62
- inset: 0;
63
- background-image: linear-gradient(var(--bg-grid) 1px, transparent 1px),
64
- linear-gradient(90deg, var(--bg-grid) 1px, transparent 1px);
65
- background-size: 40px 40px;
66
- background-position: center top;
67
- pointer-events: none;
68
- z-index: 0;
69
- opacity: 0.8;
70
- }
71
-
72
- .container {
73
- max-width: 1400px;
74
- margin: 0 auto;
75
- padding: 2rem;
76
- position: relative;
77
- z-index: 1;
78
- }
79
-
80
- /* Header Styling */
81
- header {
82
- display: flex;
83
- justify-content: space-between;
84
- align-items: center;
85
- margin-bottom: 2.5rem;
86
- padding-bottom: 1.5rem;
87
- border-bottom: 1px solid rgba(255, 255, 255, 0.05);
88
- }
89
-
90
- .header-left {
91
- display: flex;
92
- align-items: center;
93
- gap: 1rem;
94
- }
95
-
96
- .header-logo {
97
- display: inline-flex;
98
- align-items: center;
99
- justify-content: center;
100
- width: 48px;
101
- height: 48px;
102
- background: rgba(255, 255, 255, 0.02);
103
- border: 1px solid var(--border-card);
104
- border-radius: 12px;
105
- position: relative;
106
- }
107
-
108
- .header-logo svg {
109
- width: 28px;
110
- height: 28px;
111
- }
112
-
113
- .header-title-wrapper h1 {
114
- font-size: 1.5rem;
115
- font-weight: 800;
116
- letter-spacing: -0.03em;
117
- background: linear-gradient(to right, #ffffff, #c7d2fe, var(--color-cyan));
118
- -webkit-background-clip: text;
119
- -webkit-text-fill-color: transparent;
120
- }
121
-
122
- .header-title-wrapper p {
123
- font-size: 0.825rem;
124
- color: var(--text-muted);
125
- }
126
-
127
- .header-right {
128
- display: flex;
129
- align-items: center;
130
- gap: 1rem;
131
- }
132
-
133
- .back-btn {
134
- background: rgba(255, 255, 255, 0.03);
135
- border: 1px solid var(--border-card);
136
- color: var(--text-muted);
137
- padding: 0.5rem 1rem;
138
- border-radius: 8px;
139
- font-size: 0.875rem;
140
- font-weight: 600;
141
- text-decoration: none;
142
- display: inline-flex;
143
- align-items: center;
144
- gap: 0.5rem;
145
- transition: all 0.2s;
146
- }
147
-
148
- .back-btn:hover {
149
- background: rgba(255, 255, 255, 0.08);
150
- color: var(--text-main);
151
- border-color: rgba(var(--color-cyan-rgb), 0.3);
152
- }
153
-
154
- .version-badge {
155
- background: rgba(0, 240, 255, 0.08);
156
- border: 1px solid rgba(0, 240, 255, 0.25);
157
- color: var(--color-cyan);
158
- padding: 0.35rem 0.75rem;
159
- border-radius: 50px;
160
- font-size: 0.75rem;
161
- font-weight: 600;
162
- font-family: var(--font-mono);
163
- }
164
-
165
- /* Tabs Navigation */
166
- .tabs-nav {
167
- display: flex;
168
- gap: 0.75rem;
169
- margin-bottom: 2rem;
170
- }
171
-
172
- .tab-btn {
173
- background: rgba(255, 255, 255, 0.03);
174
- border: 1px solid var(--border-card);
175
- color: var(--text-muted);
176
- padding: 0.6rem 1.25rem;
177
- border-radius: 8px;
178
- font-size: 0.875rem;
179
- font-weight: 600;
180
- cursor: pointer;
181
- display: flex;
182
- align-items: center;
183
- gap: 0.5rem;
184
- transition: all 0.2s;
185
- }
186
-
187
- .tab-btn:hover {
188
- background: rgba(255, 255, 255, 0.06);
189
- color: var(--text-main);
190
- }
191
-
192
- .tab-btn.active {
193
- background: var(--gradient-main);
194
- color: #090d16;
195
- border-color: transparent;
196
- box-shadow: 0 4px 15px rgba(var(--color-cyan-rgb), 0.25);
197
- }
198
-
199
- /* Content Layout */
200
- .tab-pane {
201
- display: none;
202
- animation: fadeIn 0.3s ease-out forwards;
203
- }
204
-
205
- .tab-pane.active {
206
- display: block;
207
- }
208
-
209
- @keyframes fadeIn {
210
- from { opacity: 0; transform: translateY(8px); }
211
- to { opacity: 1; transform: translateY(0); }
212
- }
213
-
214
- /* Split layout: Specs + Simulator */
215
- .blueprint-layout {
216
- display: grid;
217
- grid-template-columns: 1.1fr 0.9fr;
218
- gap: 2rem;
219
- align-items: start;
220
- }
221
-
222
- @media (max-width: 1100px) {
223
- .blueprint-layout {
224
- grid-template-columns: 1fr;
225
- }
226
- }
227
-
228
- .glass-card {
229
- background: var(--bg-card);
230
- border: 1px solid var(--border-card);
231
- border-radius: 16px;
232
- padding: 1.75rem;
233
- margin-bottom: 2rem;
234
- backdrop-filter: var(--glass-blur);
235
- box-shadow: 0 8px 32px 0 rgba(0, 0, 0, 0.3);
236
- }
237
-
238
- .glass-card h2 {
239
- font-size: 1.25rem;
240
- font-weight: 700;
241
- color: #ffffff;
242
- margin-bottom: 1.25rem;
243
- display: flex;
244
- align-items: center;
245
- gap: 0.5rem;
246
- border-bottom: 1px solid rgba(255, 255, 255, 0.05);
247
- padding-bottom: 0.75rem;
248
- }
249
-
250
- .glass-card h2 svg {
251
- width: 18px;
252
- height: 18px;
253
- color: var(--color-cyan);
254
- }
255
-
256
- .glass-card p {
257
- font-size: 0.925rem;
258
- color: var(--text-muted);
259
- margin-bottom: 1rem;
260
- }
261
-
262
- /* Autonomy Matrix Style */
263
- .matrix-wrapper {
264
- overflow-x: auto;
265
- margin-bottom: 1.5rem;
266
- border-radius: 8px;
267
- border: 1px solid var(--border-card);
268
- }
269
-
270
- .matrix-table {
271
- width: 100%;
272
- border-collapse: collapse;
273
- font-size: 0.85rem;
274
- }
275
-
276
- .matrix-table th, .matrix-table td {
277
- padding: 0.75rem 1rem;
278
- text-align: left;
279
- border-bottom: 1px solid rgba(255, 255, 255, 0.05);
280
- }
281
-
282
- .matrix-table th {
283
- background: rgba(0,0,0,0.3);
284
- color: var(--text-muted);
285
- font-weight: 600;
286
- }
287
-
288
- .matrix-table td.col-hdr {
289
- font-weight: 600;
290
- }
291
-
292
- .matrix-table td {
293
- color: var(--text-main);
294
- }
295
-
296
- /* Matrix Highlight Columns */
297
- .matrix-table th.highlight, .matrix-table td.highlight {
298
- background: rgba(var(--color-cyan-rgb), 0.08);
299
- border-left: 1px solid rgba(var(--color-cyan-rgb), 0.15);
300
- border-right: 1px solid rgba(var(--color-cyan-rgb), 0.15);
301
- }
302
-
303
- .matrix-table tr:hover td {
304
- background: rgba(255,255,255,0.02);
305
- }
306
-
307
- .badge-decision {
308
- display: inline-block;
309
- padding: 0.15rem 0.5rem;
310
- border-radius: 4px;
311
- font-weight: 700;
312
- font-size: 0.75rem;
313
- text-transform: uppercase;
314
- font-family: var(--font-mono);
315
- }
316
-
317
- .badge-decision.allow { background: rgba(16, 185, 129, 0.1); border: 1px solid rgba(16, 185, 129, 0.25); color: var(--color-emerald); }
318
- .badge-decision.ask { background: rgba(245, 158, 11, 0.1); border: 1px solid rgba(245, 158, 11, 0.25); color: var(--color-amber); }
319
- .badge-decision.deny { background: rgba(239, 68, 68, 0.1); border: 1px solid rgba(239, 68, 68, 0.25); color: var(--color-rose); }
320
- .badge-decision.block { background: rgba(239, 68, 68, 0.15); border: 1px solid rgba(239, 68, 68, 0.4); color: var(--color-rose); text-shadow: 0 0 5px rgba(239, 68, 68, 0.3); }
321
-
322
- /* SVG Flowchart */
323
- .flowchart-container {
324
- background: rgba(9, 13, 22, 0.6);
325
- border: 1px solid var(--border-card);
326
- border-radius: 12px;
327
- padding: 1.5rem;
328
- text-align: center;
329
- margin: 1.5rem 0;
330
- }
331
-
332
- .flowchart-container svg {
333
- width: 100%;
334
- height: auto;
335
- max-height: 280px;
336
- }
337
-
338
- /* Simulator Panel Styling */
339
- .simulator-panel {
340
- position: sticky;
341
- top: 2rem;
342
- }
343
-
344
- .form-group {
345
- margin-bottom: 1.25rem;
346
- }
347
-
348
- .form-group label {
349
- display: block;
350
- font-size: 0.8rem;
351
- font-weight: 600;
352
- color: var(--text-muted);
353
- margin-bottom: 0.5rem;
354
- text-transform: uppercase;
355
- letter-spacing: 0.05em;
356
- }
357
-
358
- .form-row {
359
- display: grid;
360
- grid-template-columns: 1fr 1fr;
361
- gap: 1rem;
362
- }
363
-
364
- select, input, textarea {
365
- width: 100%;
366
- background: rgba(9, 13, 22, 0.7);
367
- border: 1px solid var(--border-card);
368
- border-radius: 8px;
369
- padding: 0.65rem 0.85rem;
370
- color: #fff;
371
- font-family: var(--font-sans);
372
- font-size: 0.9rem;
373
- outline: none;
374
- transition: all 0.2s;
375
- }
376
-
377
- select:focus, input:focus, textarea:focus {
378
- border-color: var(--color-cyan);
379
- box-shadow: 0 0 10px rgba(var(--color-cyan-rgb), 0.15);
380
- }
381
-
382
- textarea {
383
- font-family: var(--font-mono);
384
- font-size: 0.8rem;
385
- resize: vertical;
386
- }
387
-
388
- /* Preset list */
389
- .presets-list {
390
- display: flex;
391
- flex-wrap: wrap;
392
- gap: 0.4rem;
393
- margin-bottom: 1.25rem;
394
- }
395
-
396
- .preset-btn {
397
- background: rgba(255, 255, 255, 0.03);
398
- border: 1px solid var(--border-card);
399
- color: var(--text-muted);
400
- padding: 0.3rem 0.6rem;
401
- border-radius: 4px;
402
- font-size: 0.725rem;
403
- cursor: pointer;
404
- font-family: var(--font-mono);
405
- transition: all 0.2s;
406
- }
407
-
408
- .preset-btn:hover {
409
- background: rgba(0, 240, 255, 0.08);
410
- border-color: var(--color-cyan);
411
- color: #fff;
412
- }
413
-
414
- /* Simulation Verdict Displays */
415
- .verdict-header {
416
- font-size: 0.8rem;
417
- font-weight: 600;
418
- color: var(--text-muted);
419
- margin-bottom: 0.5rem;
420
- text-transform: uppercase;
421
- }
422
-
423
- .verdict-card {
424
- border-radius: 12px;
425
- padding: 1.25rem;
426
- margin-bottom: 1.5rem;
427
- display: flex;
428
- align-items: center;
429
- justify-content: space-between;
430
- transition: all 0.3s ease;
431
- }
432
-
433
- .verdict-info h3 {
434
- font-size: 1.35rem;
435
- font-weight: 800;
436
- letter-spacing: 0.05em;
437
- }
438
-
439
- .verdict-info p {
440
- font-size: 0.825rem;
441
- color: var(--text-main);
442
- margin: 0.25rem 0 0 0;
443
- }
444
-
445
- .verdict-status-badge {
446
- font-size: 2.25rem;
447
- font-weight: 900;
448
- }
449
-
450
- /* Verdict classes */
451
- .v-allow {
452
- background: rgba(16, 185, 129, 0.08);
453
- border: 1px solid rgba(16, 185, 129, 0.3);
454
- color: var(--color-emerald);
455
- box-shadow: 0 0 15px rgba(16, 185, 129, 0.08);
456
- }
457
-
458
- .v-ask {
459
- background: rgba(245, 158, 11, 0.08);
460
- border: 1px solid rgba(245, 158, 11, 0.3);
461
- color: var(--color-amber);
462
- box-shadow: 0 0 15px rgba(245, 158, 11, 0.08);
463
- }
464
-
465
- .v-deny {
466
- background: rgba(239, 68, 68, 0.08);
467
- border: 1px solid rgba(239, 68, 68, 0.3);
468
- color: var(--color-rose);
469
- box-shadow: 0 0 15px rgba(239, 68, 68, 0.08);
470
- }
471
-
472
- .v-block {
473
- background: rgba(239, 68, 68, 0.12);
474
- border: 1px solid rgba(239, 68, 68, 0.45);
475
- color: var(--color-rose);
476
- box-shadow: 0 0 20px rgba(239, 68, 68, 0.12);
477
- }
478
-
479
- /* Live trace console */
480
- .console-header {
481
- display: flex;
482
- justify-content: space-between;
483
- align-items: center;
484
- margin-bottom: 0.5rem;
485
- }
486
-
487
- .console-title {
488
- font-size: 0.8rem;
489
- font-weight: 600;
490
- color: var(--text-muted);
491
- text-transform: uppercase;
492
- }
493
-
494
- .console-body {
495
- background: #020408;
496
- border: 1px solid var(--border-card);
497
- border-radius: 8px;
498
- padding: 1rem;
499
- font-family: var(--font-mono);
500
- font-size: 0.8rem;
501
- height: 180px;
502
- overflow-y: auto;
503
- white-space: pre-wrap;
504
- color: #a5b4fc;
505
- box-shadow: inset 0 2px 10px rgba(0,0,0,0.8);
506
- }
507
-
508
- /* Code block style */
509
- pre {
510
- background: rgba(0,0,0,0.3);
511
- border: 1px solid var(--border-card);
512
- border-radius: 8px;
513
- padding: 1rem;
514
- overflow-x: auto;
515
- margin: 1rem 0;
516
- }
517
-
518
- code {
519
- font-family: var(--font-mono);
520
- font-size: 0.85rem;
521
- }
522
-
523
- /* Markdown styling classes */
524
- .ref-table {
525
- width: 100%;
526
- border-collapse: collapse;
527
- margin: 1.5rem 0;
528
- }
529
-
530
- .ref-table th, .ref-table td {
531
- padding: 0.65rem 0.85rem;
532
- border: 1px solid var(--border-card);
533
- text-align: left;
534
- }
535
-
536
- .ref-table th {
537
- background: rgba(255,255,255,0.03);
538
- }
539
-
540
- .alert-tip {
541
- background: rgba(16, 185, 129, 0.06);
542
- border-left: 4px solid var(--color-emerald);
543
- padding: 1rem;
544
- border-radius: 0 8px 8px 0;
545
- margin: 1.5rem 0;
546
- font-size: 0.9rem;
547
- }
548
-
549
- .alert-tip strong {
550
- color: var(--color-emerald);
551
- }
552
-
553
- /* Footer */
554
- footer {
555
- text-align: center;
556
- margin-top: 4rem;
557
- padding-top: 2rem;
558
- border-top: 1px solid rgba(255, 255, 255, 0.05);
559
- color: var(--text-dim);
560
- font-size: 0.875rem;
561
- }
562
- </style>
563
- </head>
564
- <body>
565
- <div class="container">
566
- <header>
567
- <div class="header-left">
568
- <div class="header-logo">
569
- <svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" style="color: var(--color-cyan);"><title>Icon</title>
570
- <rect x="3" y="11" width="18" height="11" rx="2" ry="2"></rect>
571
- <path d="M7 11V7a5 5 0 0 1 10 0v4"></path>
572
- </svg>
573
- </div>
574
- <div class="header-title-wrapper">
575
- <h1>Clio Coder Safety Model</h1>
576
- <p>Execution-gated guardrails, autonomy mappings, and policy enforcement engine</p>
577
- <div class="meta-chips-row">
578
- <span class="chip">Source: docs/safety-model.md</span>
579
- <span class="chip chip-orange">clio-coder docs safety</span>
580
- </div>
581
- </div>
582
- </div>
583
- <div class="header-right">
584
- <span class="version-badge">Clio Coder v0.3.0</span>
585
- <a href="index.html" class="back-btn">
586
- <svg width="14" height="14" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"><title>Icon</title><line x1="19" y1="12" x2="5" y2="12"></line><polyline points="12 19 5 12 12 5"></polyline></svg>
587
- Dashboard Hub
588
- </a>
589
- </div>
590
- </header>
591
-
592
- <div class="tabs-nav">
593
- <button type="button" class="tab-btn active" onclick="switchTab('interactive')">
594
- <svg width="16" height="16" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2"><title>Icon</title><polyline points="22 12 18 12 15 21 9 3 6 12 2 12"></polyline></svg>
595
- Interactive Spec &amp; Simulator
596
- </button>
597
- <button type="button" class="tab-btn" onclick="switchTab('reference')">
598
- <svg width="16" height="16" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2"><title>Icon</title><path d="M14 2H6a2 2 0 0 0-2 2v16a2 2 0 0 0 2 2h12a2 2 0 0 0 2-2V8z"></path><polyline points="14 2 14 8 20 8"></polyline><line x1="16" y1="13" x2="8" y2="13"></line><line x1="16" y1="17" x2="8" y2="17"></line><polyline points="10 9 9 9 8 9"></polyline></svg>
599
- Full Technical Reference
600
- </button>
601
- </div>
602
-
603
- <!-- TAB 1: INTERACTIVE -->
604
- <main class="tab-pane active" id="pane-interactive">
605
- <div class="blueprint-layout">
606
-
607
- <!-- Left: Matrix & Flows -->
608
- <div class="specs-col">
609
-
610
- <div class="glass-card">
611
- <h2>
612
- <svg width="18" height="18" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2"><title>Icon</title><path d="M12 22s8-4 8-10V5l-8-3-8 3v7c0 6 8 10 8 10z"></path></svg>
613
- Autonomy Level Matrix
614
- </h2>
615
- <p>The <code>autonomy</code> setting in <code>settings.yaml</code> (read-only | suggest | auto-edit | full-auto) controls tool execution gates. The safety net blocks apply regardless of this level.</p>
616
-
617
- <div class="matrix-wrapper">
618
- <table class="matrix-table" id="matrixTable">
619
- <thead>
620
- <tr>
621
- <th>Action Class</th>
622
- <th id="hdr-read-only">read-only</th>
623
- <th id="hdr-suggest">suggest</th>
624
- <th id="hdr-auto-edit" class="highlight">auto-edit (default)</th>
625
- <th id="hdr-full-auto">full-auto</th>
626
- </tr>
627
- </thead>
628
- <tbody>
629
- <tr id="row-read">
630
- <td class="col-hdr">read</td>
631
- <td><span class="badge-decision allow">allow</span></td>
632
- <td><span class="badge-decision allow">allow</span></td>
633
- <td class="highlight"><span class="badge-decision allow">allow</span></td>
634
- <td><span class="badge-decision allow">allow</span></td>
635
- </tr>
636
- <tr id="row-write">
637
- <td class="col-hdr">write</td>
638
- <td><span class="badge-decision deny">deny</span></td>
639
- <td><span class="badge-decision ask">ask</span></td>
640
- <td class="highlight"><span class="badge-decision allow">allow</span></td>
641
- <td><span class="badge-decision allow">allow</span></td>
642
- </tr>
643
- <tr id="row-execute-builtin">
644
- <td class="col-hdr">execute (builtin / project command)</td>
645
- <td><span class="badge-decision deny">deny</span></td>
646
- <td><span class="badge-decision ask">ask</span></td>
647
- <td class="highlight"><span class="badge-decision allow">allow</span></td>
648
- <td><span class="badge-decision allow">allow</span></td>
649
- </tr>
650
- <tr id="row-execute-other">
651
- <td class="col-hdr">execute (any other bash)</td>
652
- <td><span class="badge-decision deny">deny</span></td>
653
- <td><span class="badge-decision ask">ask</span></td>
654
- <td class="highlight"><span class="badge-decision ask">ask</span></td>
655
- <td><span class="badge-decision allow">allow</span></td>
656
- </tr>
657
- <tr id="row-dispatch">
658
- <td class="col-hdr">dispatch</td>
659
- <td><span class="badge-decision deny">deny</span></td>
660
- <td><span class="badge-decision ask">ask</span></td>
661
- <td class="highlight"><span class="badge-decision allow">allow</span></td>
662
- <td><span class="badge-decision allow">allow</span></td>
663
- </tr>
664
- <tr id="row-system-modify">
665
- <td class="col-hdr">system_modify</td>
666
- <td><span class="badge-decision deny">deny</span></td>
667
- <td><span class="badge-decision ask">ask</span></td>
668
- <td class="highlight"><span class="badge-decision ask">ask</span></td>
669
- <td><span class="badge-decision ask">ask</span></td>
670
- </tr>
671
- <tr id="row-git-destructive">
672
- <td class="col-hdr">git_destructive</td>
673
- <td><span class="badge-decision block">net block</span></td>
674
- <td><span class="badge-decision block">net block</span></td>
675
- <td class="highlight"><span class="badge-decision block">net block</span></td>
676
- <td><span class="badge-decision block">net block</span></td>
677
- </tr>
678
- <tr id="row-unknown">
679
- <td class="col-hdr">unknown</td>
680
- <td><span class="badge-decision deny">deny</span></td>
681
- <td><span class="badge-decision ask">ask</span></td>
682
- <td class="highlight"><span class="badge-decision ask">ask</span></td>
683
- <td><span class="badge-decision ask">ask</span></td>
684
- </tr>
685
- </tbody>
686
- </table>
687
- </div>
688
- </div>
689
-
690
- <div class="glass-card">
691
- <h2>
692
- <svg width="18" height="18" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2"><title>Icon</title><polyline points="22 12 18 12 15 21 9 3 6 12 2 12"></polyline></svg>
693
- Enforcement Path Flow
694
- </h2>
695
- <p>Every tool call evaluates through the Safety Net filters first, followed by Autonomy level mapping, and finally queues through the Approvals resolver.</p>
696
-
697
- <div class="flowchart-container">
698
- <svg viewBox="0 0 600 220" fill="none" xmlns="http://www.w3.org/2000/svg"><title>Icon</title>
699
- <!-- Marker def -->
700
- <defs>
701
- <marker id="arrow" viewBox="0 0 10 10" refX="6" refY="5" markerWidth="6" markerHeight="6" orient="auto-start-reverse">
702
- <path d="M 0 1.5 L 8 5 L 0 8.5 z" fill="var(--color-cyan)"/>
703
- </marker>
704
- </defs>
705
-
706
- <!-- Box 1 -->
707
- <rect x="10" y="70" width="115" height="50" rx="8" fill="rgba(255,255,255,0.02)" stroke="var(--border-card)" stroke-width="1"/>
708
- <text x="67" y="94" fill="#fff" font-size="10" font-family="var(--font-sans)" text-anchor="middle" font-weight="600">Tool Call Input</text>
709
- <text x="67" y="108" fill="var(--text-muted)" font-size="8" font-family="var(--font-sans)" text-anchor="middle">(bash, write, etc.)</text>
710
-
711
- <!-- Arrow 1 -> 2 -->
712
- <path d="M 125 95 L 150 95" fill="none" stroke="var(--color-cyan)" stroke-width="1.5" marker-end="url(#arrow)"/>
713
-
714
- <!-- Box 2 -->
715
- <rect id="flow-net" x="160" y="60" width="110" height="70" rx="8" fill="rgba(255,255,255,0.02)" stroke="var(--border-card)" stroke-width="1"/>
716
- <text x="215" y="85" fill="#fff" font-size="11" font-family="var(--font-sans)" text-anchor="middle" font-weight="700">1. Safety Net</text>
717
- <text x="215" y="100" fill="var(--color-rose)" font-size="8" font-family="var(--font-sans)" text-anchor="middle" font-weight="600">Block / Confirm</text>
718
- <text x="215" y="115" fill="var(--color-emerald)" font-size="8" font-family="var(--font-sans)" text-anchor="middle" font-weight="600">Pass →</text>
719
-
720
- <!-- Arrow 2 -> 3 -->
721
- <path d="M 270 95 L 295 95" fill="none" stroke="var(--color-cyan)" stroke-width="1.5" marker-end="url(#arrow)"/>
722
-
723
- <!-- Box 3 -->
724
- <rect id="flow-autonomy" x="305" y="60" width="110" height="70" rx="8" fill="rgba(0, 240, 255, 0.03)" stroke="var(--color-cyan)" stroke-width="1.5"/>
725
- <text x="360" y="85" fill="#fff" font-size="11" font-family="var(--font-sans)" text-anchor="middle" font-weight="700">2. Autonomy</text>
726
- <text x="360" y="100" fill="var(--text-muted)" font-size="8" font-family="var(--font-sans)" text-anchor="middle">Mapping Matrix</text>
727
- <text x="360" y="115" fill="var(--color-cyan)" font-size="8" font-family="var(--font-sans)" text-anchor="middle" font-weight="600">Allow / Ask / Deny</text>
728
-
729
- <!-- Arrow 3 -> 4 -->
730
- <path d="M 415 95 L 440 95" fill="none" stroke="var(--color-cyan)" stroke-width="1.5" marker-end="url(#arrow)"/>
731
-
732
- <!-- Box 4 -->
733
- <rect id="flow-approvals" x="450" y="60" width="130" height="70" rx="8" fill="rgba(255,255,255,0.02)" stroke="var(--border-card)" stroke-width="1"/>
734
- <text x="515" y="85" fill="#fff" font-size="11" font-family="var(--font-sans)" text-anchor="middle" font-weight="700">3. Approvals Flow</text>
735
- <text x="515" y="100" fill="var(--color-amber)" font-size="8" font-family="var(--font-sans)" text-anchor="middle">TUI: Queue overlay</text>
736
- <text x="515" y="115" fill="var(--color-rose)" font-size="8" font-family="var(--font-sans)" text-anchor="middle">Headless: Deny</text>
737
-
738
- <!-- Safety Net reject branch -->
739
- <path d="M 215 130 L 215 170 L 450 170" fill="none" stroke="var(--color-rose)" stroke-width="1" stroke-dasharray="3 3" marker-end="url(#arrow)"/>
740
- <text x="330" y="165" fill="var(--color-rose)" font-size="8" font-family="var(--font-sans)">Safety block / escape block</text>
741
- </svg>
742
- </div>
743
- </div>
744
-
745
- </div>
746
-
747
- <!-- Right: Simulator -->
748
- <div class="simulator-panel">
749
- <div class="glass-card">
750
- <h2>
751
- <svg width="18" height="18" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2"><title>Icon</title><path d="M12 22s8-4 8-10V5l-8-3-8 3v7c0 6 8 10 8 10z"></path></svg>
752
- Safety Evaluation Simulator
753
- </h2>
754
-
755
- <div class="presets-list">
756
- <span class="preset-btn" onclick="loadPreset('status')">git status</span>
757
- <span class="preset-btn" onclick="loadPreset('npm-test')">npm test</span>
758
- <span class="preset-btn" onclick="loadPreset('write-src')">write index.ts</span>
759
- <span class="preset-btn" onclick="loadPreset('write-env')">write .env</span>
760
- <span class="preset-btn" onclick="loadPreset('rm-rf')">rm -rf /</span>
761
- <span class="preset-btn" onclick="loadPreset('stash-drop')">git stash drop</span>
762
- <span class="preset-btn" onclick="loadPreset('force-push')">git push --force</span>
763
- <span class="preset-btn" onclick="loadPreset('escape-write')">write /etc/hosts</span>
764
- <span class="preset-btn" onclick="loadPreset('unrecognized-exec')">apt-get install</span>
765
- </div>
766
-
767
- <div class="form-row">
768
- <div class="form-group">
769
- <label for="autonomyLevel">Autonomy Level</label>
770
- <select id="autonomyLevel" onchange="runSimulation()">
771
- <option value="read-only">read-only</option>
772
- <option value="suggest">suggest</option>
773
- <option value="auto-edit" selected>auto-edit (default)</option>
774
- <option value="full-auto">full-auto</option>
775
- </select>
776
- </div>
777
- <div class="form-group">
778
- <label for="operatingPosture">Posture Mode</label>
779
- <select id="operatingPosture" onchange="runSimulation()">
780
- <option value="interactive">Interactive TUI</option>
781
- <option value="headless">Headless (clio-coder run)</option>
782
- </select>
783
- </div>
784
- </div>
785
-
786
- <div class="form-row">
787
- <div class="form-group">
788
- <label for="toolGroup">Tool Group</label>
789
- <select id="toolGroup" onchange="onToolChange()">
790
- <option value="read">read (read, grep, find, ls)</option>
791
- <option value="write" selected>write / edit</option>
792
- <option value="git">git (status, diff, log, checkout)</option>
793
- <option value="bash">bash (general commands)</option>
794
- <option value="dispatch">dispatch (worker delegation)</option>
795
- </select>
796
- </div>
797
- <div class="form-group">
798
- <label for="cmdCwd">Working Directory</label>
799
- <input type="text" id="cmdCwd" value="/workspace/project" oninput="runSimulation()">
800
- </div>
801
- </div>
802
-
803
- <div class="form-group" id="group-command" style="display:none;">
804
- <label for="commandInput">Shell Command</label>
805
- <input type="text" id="commandInput" value="" placeholder="e.g. npm test" oninput="runSimulation()">
806
- </div>
807
-
808
- <div class="form-group" id="group-filepath">
809
- <label for="filepathInput">File Path</label>
810
- <input type="text" id="filepathInput" value="src/core/config.ts" placeholder="e.g. src/index.ts" oninput="runSimulation()">
811
- </div>
812
-
813
- <div class="form-group">
814
- <label for="projectPolicy">Simulated .clio-coder/safety.yaml</label>
815
- <textarea id="projectPolicy" rows="6" oninput="runSimulation()">zeroAccessPaths:
816
- - secrets/
817
- - .env
818
- readOnlyPaths:
819
- - vendor/
820
- noDeletePaths:
821
- - out/validated/
822
- commands:
823
- - id: local-test
824
- command: npm test
825
- cwd: .
826
- requireConfirmation: false</textarea>
827
- </div>
828
-
829
- <div class="verdict-header">Evaluation Verdict</div>
830
- <div id="verdictCard" class="verdict-card v-allow">
831
- <div class="verdict-info">
832
- <h3 id="verdictTitle">ALLOW</h3>
833
- <p id="verdictDesc">Tool call passes all checks and runs immediately.</p>
834
- </div>
835
- <div id="verdictIcon" class="verdict-status-badge">✓</div>
836
- </div>
837
-
838
- <div class="console-header">
839
- <span class="console-title">Engine Decision Trace</span>
840
- <span class="preset-btn" style="padding: 0.15rem 0.4rem; font-size:0.65rem;" onclick="clearConsole()">Clear</span>
841
- </div>
842
- <div id="traceConsole" class="console-body">Initializing Safety Policy Engine...</div>
843
- </div>
844
- </div>
845
-
846
- </div>
847
- </main>
848
-
849
- <!-- TAB 2: TECHNICAL REFERENCE -->
850
- <main class="tab-pane" id="pane-reference">
851
- <div class="glass-card">
852
- <h2>Clio Coder Safety Model Specification</h2>
853
-
854
- <div class="alert-tip">
855
- <strong>Interactive Spec Available:</strong> Use the <strong>Interactive Spec &amp; Simulator</strong> tab above to simulate policy enforcement runs in real-time.
856
- </div>
857
-
858
- <p>Clio Coder's safety posture is code-enforced, not prompt-only. Prompt text tells the model how to behave, but execution is gated by target capabilities, the tool registry, safety policy engine, project policy, protected-artifact checks, and receipts.</p>
859
- <p>Source of truth: <code>src/domains/safety/**</code>, <code>src/tools/registry.ts</code>, <code>src/tools/bootstrap.ts</code>, and <code>damage-control-rules.yaml</code>.</p>
860
-
861
- <h3 style="margin: 1.5rem 0 0.5rem 0; color:#fff;">Two axes: autonomy and the safety net</h3>
862
- <p>The <code>autonomy</code> setting (<code>read-only</code> | <code>suggest</code> | <code>auto-edit</code> | <code>full-auto</code>) is an enforced dial. It controls exactly one thing: which action classes run immediately, which park for operator approval, and which are auto-denied. Effective autonomy is resolved through <code>resolveEffectiveAutonomy</code> and <code>resolveBaselineAutonomy</code> in <code>src/entry/orchestrator.ts</code> across all admission surfaces. The safety net (damage-control rules, path policy, protected artifacts, loop guard, dispatch scope admission) is independent of the dial and identical at every level.</p>
863
-
864
- <h3 style="margin: 1.5rem 0 0.5rem 0; color:#fff;">Enforcement path</h3>
865
- <p>Every tool call, orchestrator or worker, evaluates in this order:</p>
866
- <ol style="margin-left: 2rem; margin-bottom: 1rem; font-size: 0.925rem; color: var(--text-muted);">
867
- <li style="margin-bottom: 0.5rem;"><strong>Safety net</strong> (policy engine + middleware guards): <code>block</code> is final at every level; <code>ask</code> is a confirm rail (damage-control <code>ask</code> rules, project <code>requireConfirmation</code>) that parks at every level; <code>pass</code> hands off to step 2.</li>
868
- <li style="margin-bottom: 0.5rem;"><strong>Autonomy mapping</strong>: the action class plus the level produce allow, ask, or deny per the matrix.</li>
869
- <li style="margin-bottom: 0.5rem;"><strong>Approvals</strong>: whatever asked in step 1 or 2 parks interactively, denies deterministically headless, resolves per <code>workers.onPermission</code> in workers, and non-stall denies in delegations.</li>
870
- </ol>
871
-
872
- <h3 style="margin: 1.5rem 0 0.5rem 0; color:#fff;">Damage-control rules</h3>
873
- <p><code>damage-control-rules.yaml</code> is compiled into rule packs. Base rules apply broadly. Rules with <code>ask: true</code> park for one-shot confirmation (for example <code>git stash drop</code> and remote-branch deletion); hard-block rules and classifier-pattern <code>git_destructive</code> hits are always blocked. Both behaviors apply at every autonomy level.</p>
874
-
875
- <h3 style="margin: 1.5rem 0 0.5rem 0; color:#fff;">Bash recognition</h3>
876
- <p>The policy engine tags every bash command as recognized or unrecognized:</p>
877
- <ul style="margin-left: 2rem; margin-bottom: 1rem; font-size: 0.925rem; color: var(--text-muted);">
878
- <li style="margin-bottom: 0.5rem;"><strong>Recognized</strong>: a valid <code>.clio-coder/safety.yaml</code> command entry, or the narrow built-in no-prompt set such as <code>pwd</code>, simple <code>ls</code>, <code>git status</code>, bounded <code>git diff/log</code>, common test/lint/build commands. Recognized commands run without prompting at <code>auto-edit</code> and <code>full-auto</code>.</li>
879
- <li style="margin-bottom: 0.5rem;"><strong>Unrecognized</strong>: anything else. Unrecognized bash asks for one-shot approval at <code>auto-edit</code> and runs at <code>full-auto</code>; at <code>suggest</code> it asks like every mutation, and at <code>read-only</code> it is denied.</li>
880
- </ul>
881
-
882
- <h3 style="margin: 1.5rem 0 0.5rem 0; color:#fff;">Project safety policy</h3>
883
- <p>Clio searches upward from the current working directory for <code>.clio-coder/safety.yaml</code>. Minimum schema is version-locked (v1) and parses into standard path boundaries (<code>zeroAccessPaths</code>, <code>readOnlyPaths</code>, <code>noDeletePaths</code>) and customized command sets.</p>
884
-
885
- <pre><code>version: 1
886
- zeroAccessPaths:
887
- - secrets/
888
- - .env
889
- readOnlyPaths:
890
- - vendor/
891
- noDeletePaths:
892
- - out/validated/
893
- commands:
894
- - id: local-test
895
- command: npm test
896
- cwd: .
897
- actionClass: execute
898
- shellOperators: deny
899
- requireConfirmation: false
900
- rationale: Standard local test command.</code></pre>
901
-
902
- <h3 style="margin: 1.5rem 0 0.5rem 0; color:#fff;">Typed validation tools</h3>
903
- <p>Prefer typed tools over Bash: <code>git</code> (status/diff/log) and <code>verify</code>. <code>verify(check="frontend")</code> accepts <code>.html</code>, <code>.css</code>, <code>.js</code> under the workspace root, performing syntax checks and optionally validating references in headless browsers.</p>
904
-
905
- <h3 style="margin: 1.5rem 0 0.5rem 0; color:#fff;">Dispatch and delegation runtimes</h3>
906
- <p>Clio dispatches tasks to worker runtimes and delegation agents under different safety postures:</p>
907
- <ul style="margin-left: 2rem; margin-bottom: 1rem; font-size: 0.925rem; color: var(--text-muted);">
908
- <li style="margin-bottom: 0.5rem;"><strong><code>claude-sdk</code> (Enforced Safety):</strong> The Claude Code SDK worker is the <strong>strong safety path</strong>. It gates every tool request through Clio's safety net and active autonomy dial before execution via PreToolUse hooks. Worker denials resolve non-interactively based on <code>workers.onPermission</code>.</li>
909
- <li style="margin-bottom: 0.5rem;"><strong><code>claude-code</code> (Subprocess Gating):</strong> Drives <code>claude -p</code> as a subprocess. Gating is restricted to command-line parameters mapping the autonomy level to CLI permission modes, without per-tool callbacks.</li>
910
- <li style="margin-bottom: 0.5rem;"><strong>Claude Code over ACP (Advisory Gating):</strong> Drives the agent over ACP delegation. Gating is <strong>advisory</strong> because Claude self-governs its tools; <code>claude-sdk</code> is preferred for fully enforced safety.</li>
911
- </ul>
912
-
913
- <h3 style="margin: 1.5rem 0 0.5rem 0; color:#fff;">Write boundaries: detect-and-rollback</h3>
914
- <p>Post-run enforcement of declared write boundaries is strictly detect-and-rollback, never sandboxing (<code>src/domains/dispatch/write-boundary.ts</code>). Nothing prevents a write during step execution: no container, no seccomp filter, and no filesystem interception. After execution, the orchestrator compares the checkout against pre-step snapshots, rolls back unpermitted modifications, and fails the step with a <code>WriteBoundaryViolation</code>.</p>
915
-
916
- <h3 style="margin: 1.5rem 0 0.5rem 0; color:#fff;">Receipts and evidence</h3>
917
- <p>Safety decisions feed receipts, audit rows, and evidence. The interactive <code>/view</code> surface can inspect receipt artifacts without mutating them, detailing rules matched, command hashes, and active decisions counts.</p>
918
- </div>
919
- </main>
920
-
921
- <footer>
922
- <p>Clio Coder Safety Model Specification Dashboard &bull; Version 0.3.0</p>
923
- </footer>
924
- </div>
925
-
926
- <script>
927
- // Tab switching
928
- function switchTab(tabId) {
929
- document.querySelectorAll('.tab-btn').forEach(btn => { btn.classList.remove('active'); });
930
- document.querySelectorAll('.tab-pane').forEach(pane => { pane.classList.remove('active'); });
931
-
932
- if (tabId === 'interactive') {
933
- document.querySelector('.tab-btn:nth-child(1)').classList.add('active');
934
- document.getElementById('pane-interactive').classList.add('active');
935
- } else {
936
- document.querySelector('.tab-btn:nth-child(2)').classList.add('active');
937
- document.getElementById('pane-reference').classList.add('active');
938
- }
939
- }
940
-
941
- // Rules Definitions
942
- const DAMAGE_CONTROL_RULES = [
943
- { id: "rm-rf-root", pattern: /\brm\s+-rf?\s+\/(?![a-z0-9]*tmp\/)/, class: "system_modify", block: true, reason: "Destructive filesystem operation on root" },
944
- { id: "git-push-force", pattern: /\bgit\s+push\s+.*(--force|-f)(?!-with-lease)\b/, class: "git_destructive", block: true, reason: "Force push overwrites branch history" },
945
- { id: "curl-pipe-sh", pattern: /\bcurl\b[^|]*\|\s*(sudo\s+)?(sh|bash|zsh)\b/, class: "execute", block: true, reason: "Remote-script-to-shell installer is prohibited" },
946
- { id: "git-stash-drop", pattern: /\bgit\s+stash\s+drop\b/, class: "git_destructive", block: false, ask: true, reason: "Stash drop permanently discards uncommitted code" },
947
- { id: "git-restore-dot", pattern: /\bgit\s+restore\s+\.\s*$/, class: "git_destructive", block: false, ask: true, reason: "Git restore discards all local workspace edits" },
948
- ];
949
-
950
- const BUILTIN_RECOGNIZED = [
951
- /^pwd$/,
952
- /^ls(?:\s+-[a-zA-Z0-9]+|\s+[\w./-]+)*$/,
953
- /^git\s+status$/,
954
- /^git\s+diff(?:\s+[\w./-]+)*$/,
955
- /^git\s+log(?:\s+-[0-9]+)?$/,
956
- /^npm\s+test$/,
957
- /^npm\s+run\s+test$/
958
- ];
959
-
960
- // Tool Groups Change
961
- function onToolChange() {
962
- const tool = document.getElementById('toolGroup').value;
963
- const cmdGroup = document.getElementById('group-command');
964
- const fileGroup = document.getElementById('group-filepath');
965
-
966
- if (tool === 'bash' || tool === 'git') {
967
- cmdGroup.style.display = 'block';
968
- fileGroup.style.display = 'none';
969
- } else if (tool === 'read' || tool === 'write') {
970
- cmdGroup.style.display = 'none';
971
- fileGroup.style.display = 'block';
972
- } else {
973
- cmdGroup.style.display = 'none';
974
- fileGroup.style.display = 'none';
975
- }
976
- runSimulation();
977
- }
978
-
979
- // Load presets
980
- function loadPreset(presetId) {
981
- const toolGroup = document.getElementById('toolGroup');
982
- const commandInput = document.getElementById('commandInput');
983
- const filepathInput = document.getElementById('filepathInput');
984
-
985
- switch(presetId) {
986
- case 'status':
987
- toolGroup.value = 'git';
988
- commandInput.value = 'git status';
989
- break;
990
- case 'npm-test':
991
- toolGroup.value = 'bash';
992
- commandInput.value = 'npm test';
993
- break;
994
- case 'write-src':
995
- toolGroup.value = 'write';
996
- filepathInput.value = 'src/index.ts';
997
- break;
998
- case 'write-env':
999
- toolGroup.value = 'write';
1000
- filepathInput.value = '.env';
1001
- break;
1002
- case 'rm-rf':
1003
- toolGroup.value = 'bash';
1004
- commandInput.value = 'rm -rf /';
1005
- break;
1006
- case 'stash-drop':
1007
- toolGroup.value = 'git';
1008
- commandInput.value = 'git stash drop';
1009
- break;
1010
- case 'force-push':
1011
- toolGroup.value = 'git';
1012
- commandInput.value = 'git push origin main --force';
1013
- break;
1014
- case 'escape-write':
1015
- toolGroup.value = 'write';
1016
- filepathInput.value = '/etc/hosts';
1017
- break;
1018
- case 'unrecognized-exec':
1019
- toolGroup.value = 'bash';
1020
- commandInput.value = 'sudo apt-get install build-essential';
1021
- break;
1022
- }
1023
- onToolChange();
1024
- }
1025
-
1026
- // Clear console
1027
- function clearConsole() {
1028
- document.getElementById('traceConsole').innerHTML = '';
1029
- }
1030
-
1031
- // Log to console helper
1032
- function logTrace(msg, type = 'info') {
1033
- const consoleEl = document.getElementById('traceConsole');
1034
- let prefix = '[INFO]';
1035
- if (type === 'warn') prefix = '[WARN]';
1036
- if (type === 'error') prefix = '[ERROR]';
1037
- if (type === 'success') prefix = '[SUCCESS]';
1038
-
1039
- consoleEl.innerHTML += `\n${prefix} ${msg}`;
1040
- consoleEl.scrollTop = consoleEl.scrollHeight;
1041
- }
1042
-
1043
- // Parse simple yaml zeroAccess/readOnly/noDelete paths
1044
- function parsePathPolicies(yamlText) {
1045
- const zeroAccess = [];
1046
- const readOnly = [];
1047
- const noDelete = [];
1048
-
1049
- try {
1050
- const lines = yamlText.split('\n');
1051
- let currentSection = null;
1052
- lines.forEach(line => {
1053
- const trimmed = line.trim();
1054
- if (!trimmed || trimmed.startsWith('#')) return;
1055
-
1056
- if (trimmed.startsWith('zeroAccessPaths:')) {
1057
- currentSection = 'zero';
1058
- } else if (trimmed.startsWith('readOnlyPaths:')) {
1059
- currentSection = 'readonly';
1060
- } else if (trimmed.startsWith('noDeletePaths:')) {
1061
- currentSection = 'nodelete';
1062
- } else if (trimmed.startsWith('commands:')) {
1063
- currentSection = 'commands';
1064
- } else if (trimmed.startsWith('-') && currentSection) {
1065
- const val = trimmed.replace(/^-/, '').trim().replace(/['"]/g, '');
1066
- if (currentSection === 'zero') zeroAccess.push(val);
1067
- if (currentSection === 'readonly') readOnly.push(val);
1068
- if (currentSection === 'nodelete') noDelete.push(val);
1069
- }
1070
- });
1071
- } catch (_) {
1072
- // fail silently
1073
- }
1074
-
1075
- return { zeroAccess, readOnly, noDelete };
1076
- }
1077
-
1078
- // Main simulator algorithm
1079
- function runSimulation() {
1080
- const autonomy = document.getElementById('autonomyLevel').value;
1081
- const posture = document.getElementById('operatingPosture').value;
1082
- const tool = document.getElementById('toolGroup').value;
1083
- const cwd = document.getElementById('cmdCwd').value.trim();
1084
- const command = document.getElementById('commandInput').value.trim();
1085
- const filepath = document.getElementById('filepathInput').value.trim();
1086
- const policyYaml = document.getElementById('projectPolicy').value;
1087
-
1088
- clearConsole();
1089
- logTrace("Evaluating safety request...", 'info');
1090
- logTrace(`autonomy_level="${autonomy}" posture_mode="${posture}" tool="${tool}"`, 'info');
1091
-
1092
- // Highlight active autonomy column in matrix table
1093
- document.querySelectorAll('#matrixTable th, #matrixTable td').forEach(el => { el.classList.remove('highlight'); });
1094
- const activeColId = `hdr-${autonomy}`;
1095
- const colIndex = Array.from(document.querySelectorAll('#matrixTable th')).findIndex(th => th.id === activeColId);
1096
- if (colIndex !== -1) {
1097
- document.querySelectorAll(`#matrixTable th:nth-child(${colIndex + 1})`).forEach(el => { el.classList.add('highlight'); });
1098
- document.querySelectorAll(`#matrixTable td:nth-child(${colIndex + 1})`).forEach(el => { el.classList.add('highlight'); });
1099
- }
1100
-
1101
- // ----------------------------------------------------
1102
- // STAGE 1: CLASSIFY ACTION CLASS
1103
- // ----------------------------------------------------
1104
- let actionClass = "unknown";
1105
-
1106
- if (tool === 'read') {
1107
- actionClass = "read";
1108
- } else if (tool === 'write') {
1109
- // Path safety overrides classification
1110
- const SYSTEM_ROOTS = ['/etc', '/usr', '/var', '/bin', '/sbin', '/run'];
1111
- const SCRATCH_EXEMPT = ['/var/tmp', '/var/folders'];
1112
- const underSystemRoot =
1113
- SYSTEM_ROOTS.some((root) => filepath === root || filepath.startsWith(root + '/')) &&
1114
- !SCRATCH_EXEMPT.some((root) => filepath === root || filepath.startsWith(root + '/'));
1115
- if (underSystemRoot) {
1116
- actionClass = "system_modify";
1117
- logTrace(`Path Escaping: file write path "${filepath}" is a system directory`, 'warn');
1118
- } else if (filepath.startsWith('..') || filepath.startsWith('/') && !filepath.startsWith(cwd)) {
1119
- actionClass = "system_modify";
1120
- logTrace(`Path Escaping: file write path "${filepath}" escapes workspace root`, 'warn');
1121
- } else {
1122
- actionClass = "write";
1123
- }
1124
- } else if (tool === 'git') {
1125
- // Parse git command
1126
- let isDestructive = false;
1127
- for (const rule of DAMAGE_CONTROL_RULES) {
1128
- if (rule.class === 'git_destructive' && rule.pattern.test(command)) {
1129
- actionClass = "git_destructive";
1130
- isDestructive = true;
1131
- break;
1132
- }
1133
- }
1134
- if (!isDestructive) {
1135
- if (command.startsWith('git diff') || command.startsWith('git status') || command.startsWith('git log')) {
1136
- actionClass = "read";
1137
- } else {
1138
- actionClass = "execute"; // git commit, add, stash, etc.
1139
- }
1140
- }
1141
- } else if (tool === 'bash') {
1142
- // Classify bash commands
1143
- let isDestructive = false;
1144
- let isSysModify = false;
1145
-
1146
- for (const rule of DAMAGE_CONTROL_RULES) {
1147
- if (rule.pattern.test(command)) {
1148
- if (rule.class === 'git_destructive') {
1149
- actionClass = "git_destructive";
1150
- isDestructive = true;
1151
- } else if (rule.class === 'system_modify') {
1152
- actionClass = "system_modify";
1153
- isSysModify = true;
1154
- }
1155
- break;
1156
- }
1157
- }
1158
-
1159
- if (!isDestructive && !isSysModify) {
1160
- if (command.includes('sudo') || command.includes('apt-get') || command.includes('npm install -g')) {
1161
- actionClass = "system_modify";
1162
- } else {
1163
- // Check if recognized
1164
- let recognized = false;
1165
- const hasOtherOperators = /\|\||[;|><\n]/.test(command);
1166
- const isChain = !hasOtherOperators && command.includes('&&');
1167
- if (hasOtherOperators) {
1168
- logTrace(`Sequencing or redirection operator found. Command is unrecognized.`, 'warn');
1169
- } else if (isChain) {
1170
- // An && chain is recognized only when every member is, capped at
1171
- // six members, and it takes the most restrictive member's verdict.
1172
- const segments = command.split('&&').map((part) => part.trim()).filter(Boolean);
1173
- const memberRecognized = (segment) =>
1174
- BUILTIN_RECOGNIZED.some((rx) => rx.test(segment)) || segment === 'npm test' || /^cd\s+\S+$/.test(segment);
1175
- if (segments.length > 6) {
1176
- logTrace(`Chain of ${segments.length} members exceeds the six-member cap. Command is unrecognized.`, 'warn');
1177
- } else if (segments.every(memberRecognized)) {
1178
- recognized = true;
1179
- logTrace(`Every member of the && chain is recognized. Chain classified as execute (recognized).`, 'success');
1180
- } else {
1181
- logTrace(`One or more && chain members are unrecognized. Command is unrecognized.`, 'warn');
1182
- }
1183
- } else {
1184
- for (const rx of BUILTIN_RECOGNIZED) {
1185
- if (rx.test(command)) {
1186
- recognized = true;
1187
- break;
1188
- }
1189
- }
1190
- // Check project policy command IDs
1191
- if (command === 'npm test') {
1192
- recognized = true; // matches simulated policy
1193
- }
1194
- }
1195
-
1196
- if (recognized) {
1197
- actionClass = "execute"; // Recognized no-prompt set
1198
- logTrace(`Recognized command match: "${command}" classified as execute (recognized)`, 'success');
1199
- } else {
1200
- actionClass = "execute_other"; // Unrecognized bash
1201
- logTrace(`Unrecognized command: "${command}" classified as execute (any other bash)`, 'warn');
1202
- }
1203
- }
1204
- }
1205
- } else if (tool === 'dispatch') {
1206
- actionClass = "dispatch";
1207
- }
1208
-
1209
- // Highlight active row in matrix
1210
- document.querySelectorAll('#matrixTable tbody tr').forEach(tr => { tr.style.background = 'none'; });
1211
- let rowEl = null;
1212
- if (actionClass === 'read') rowEl = document.getElementById('row-read');
1213
- else if (actionClass === 'write') rowEl = document.getElementById('row-write');
1214
- else if (actionClass === 'execute') rowEl = document.getElementById('row-execute-builtin');
1215
- else if (actionClass === 'execute_other') rowEl = document.getElementById('row-execute-other');
1216
- else if (actionClass === 'dispatch') rowEl = document.getElementById('row-dispatch');
1217
- else if (actionClass === 'system_modify') rowEl = document.getElementById('row-system-modify');
1218
- else if (actionClass === 'git_destructive') rowEl = document.getElementById('row-git-destructive');
1219
- else rowEl = document.getElementById('row-unknown');
1220
-
1221
- if (rowEl) {
1222
- rowEl.style.background = 'rgba(0, 240, 255, 0.04)';
1223
- }
1224
-
1225
- logTrace(`Resolved Action Class: "${actionClass === 'execute_other' ? 'execute: other bash' : actionClass}"`, 'info');
1226
-
1227
- // ----------------------------------------------------
1228
- // STAGE 2: RUN THROUGH SAFETY NET (Damage Control Rules & Path Policies)
1229
- // ----------------------------------------------------
1230
- let safetyNetVerdict = "pass";
1231
- let safetyNetReason = "";
1232
-
1233
- // Path policies from YAML
1234
- const policies = parsePathPolicies(policyYaml);
1235
- const activeScanPath = tool === 'write' ? filepath : command;
1236
-
1237
- // Check zeroAccessPaths
1238
- for (const p of policies.zeroAccess) {
1239
- if (activeScanPath.includes(p)) {
1240
- safetyNetVerdict = "block";
1241
- safetyNetReason = `zeroAccessPaths breach: path contains "${p}"`;
1242
- break;
1243
- }
1244
- }
1245
-
1246
- // Check command substitution confirm rail
1247
- if (safetyNetVerdict === 'pass' && (tool === 'bash' || tool === 'git')) {
1248
- const hasSubstitution = /\$\(|`/.test(command);
1249
- if (hasSubstitution) {
1250
- safetyNetVerdict = "confirm";
1251
- safetyNetReason = "Command substitution $(...) or backticks is an always-on Safety Net confirm rail";
1252
- }
1253
- }
1254
-
1255
- // Check readOnlyPaths (for write commands)
1256
- if (safetyNetVerdict === 'pass' && tool === 'write') {
1257
- for (const p of policies.readOnly) {
1258
- if (filepath.includes(p)) {
1259
- safetyNetVerdict = "block";
1260
- safetyNetReason = `readOnlyPaths breach: writing to "${p}" is blocked`;
1261
- break;
1262
- }
1263
- }
1264
- }
1265
-
1266
- // Check Damage Control rules regexes
1267
- if (safetyNetVerdict === 'pass') {
1268
- for (const rule of DAMAGE_CONTROL_RULES) {
1269
- if (rule.pattern.test(command) || rule.pattern.test(filepath)) {
1270
- if (rule.block) {
1271
- safetyNetVerdict = "block";
1272
- safetyNetReason = `Damage control match: ${rule.reason} (Rule: ${rule.id})`;
1273
- } else if (rule.ask) {
1274
- safetyNetVerdict = "confirm";
1275
- safetyNetReason = `Damage control confirm check: ${rule.reason} (Rule: ${rule.id})`;
1276
- }
1277
- break;
1278
- }
1279
- }
1280
- }
1281
-
1282
- logTrace(`[Safety Net Check] Verdict: ${safetyNetVerdict.toUpperCase()} ${safetyNetReason ? `(${safetyNetReason})` : ''}`, safetyNetVerdict === 'block' ? 'error' : (safetyNetVerdict === 'confirm' ? 'warn' : 'success'));
1283
-
1284
- // ----------------------------------------------------
1285
- // STAGE 3: AUTONOMY MAPPING
1286
- // ----------------------------------------------------
1287
- let autonomyVerdict = "allow";
1288
-
1289
- if (safetyNetVerdict !== 'block') {
1290
- // Map matrix
1291
- if (autonomy === 'read-only') {
1292
- autonomyVerdict = (actionClass === 'read') ? 'allow' : 'deny';
1293
- } else if (autonomy === 'suggest') {
1294
- autonomyVerdict = (actionClass === 'read') ? 'allow' : 'ask';
1295
- } else if (autonomy === 'auto-edit') {
1296
- if (actionClass === 'read' || actionClass === 'write' || actionClass === 'execute' || actionClass === 'dispatch') {
1297
- autonomyVerdict = 'allow';
1298
- } else {
1299
- autonomyVerdict = 'ask'; // execute_other, system_modify, unknown
1300
- }
1301
- } else if (autonomy === 'full-auto') {
1302
- if (actionClass === 'system_modify' || actionClass === 'unknown') {
1303
- autonomyVerdict = 'ask';
1304
- } else {
1305
- autonomyVerdict = 'allow';
1306
- }
1307
- }
1308
-
1309
- // git_destructive is net block regardless of autonomy level
1310
- // EXCEPT when it is overridden by an authored damage-control confirm (ask) rule (e.g. git stash drop)
1311
- const isAskRule = (safetyNetVerdict === 'confirm');
1312
- if (actionClass === 'git_destructive' && !isAskRule) {
1313
- autonomyVerdict = 'block';
1314
- }
1315
- } else {
1316
- autonomyVerdict = 'block';
1317
- }
1318
-
1319
- logTrace(`[Autonomy Mapping] Matrix result: ${autonomyVerdict.toUpperCase()}`, autonomyVerdict === 'allow' ? 'success' : (autonomyVerdict === 'ask' ? 'warn' : 'error'));
1320
-
1321
- // ----------------------------------------------------
1322
- // STAGE 4: RESOLVE APPROVALS / POSTURE
1323
- // ----------------------------------------------------
1324
- let finalVerdict = "ALLOW";
1325
- let finalDetails = "Tool call passes all checks and runs immediately.";
1326
- let cardClass = "v-allow";
1327
- let icon = "✓";
1328
-
1329
- // Combine Safety Net + Autonomy Mappings
1330
- const resolvesToAsk = (safetyNetVerdict === 'confirm' || autonomyVerdict === 'ask');
1331
- const resolvesToBlock = (safetyNetVerdict === 'block' || autonomyVerdict === 'block');
1332
- const resolvesToDeny = (autonomyVerdict === 'deny');
1333
-
1334
- if (resolvesToBlock) {
1335
- finalVerdict = "BLOCK";
1336
- finalDetails = `[safety-net] block: ${safetyNetReason || 'Action classified as destructive and hard blocked by rule.'}`;
1337
- cardClass = "v-block";
1338
- icon = "🛑";
1339
- logTrace(`Safety Net blocked execution. Final status: BLOCKED`, 'error');
1340
- } else if (resolvesToDeny) {
1341
- finalVerdict = "DENY";
1342
- finalDetails = `[autonomy] denied: Operating under "${autonomy}" level. Action is denied.`;
1343
- cardClass = "v-deny";
1344
- icon = "✕";
1345
- logTrace(`Autonomy level denied execution. Final status: DENIED`, 'error');
1346
- } else if (resolvesToAsk) {
1347
- if (posture === 'headless') {
1348
- // Headless mode automatically denies asks deterministically
1349
- finalVerdict = "DENY (HEADLESS)";
1350
- finalDetails = `clio-coder run cannot confirm permission requests; rerun interactively to approve this action.`;
1351
- cardClass = "v-block";
1352
- icon = "✕";
1353
- logTrace(`Headless mode auto-denied interactive request. Final status: DENIED`, 'error');
1354
- } else {
1355
- // Interactive TUI mode parks for overlay approval
1356
- finalVerdict = "ASK / PARK";
1357
- const askedBy = (safetyNetVerdict === 'confirm') ? 'Asked by: Safety Net rule' : 'Asked by: Autonomy Mapping Matrix';
1358
- finalDetails = `[approval] notice: Parked in TUI queue overlay. (${askedBy})`;
1359
- cardClass = "v-ask";
1360
- icon = "⏳";
1361
- logTrace(`Parked in TUI permission overlay queue. Waiting for operator...`, 'warn');
1362
- }
1363
- } else {
1364
- logTrace(`Tool call successfully allowed. Final status: ALLOWED`, 'success');
1365
- }
1366
-
1367
- // Update UI displays
1368
- document.getElementById('verdictTitle').innerText = finalVerdict;
1369
- document.getElementById('verdictDesc').innerText = finalDetails;
1370
-
1371
- const vCard = document.getElementById('verdictCard');
1372
- vCard.className = `verdict-card ${cardClass}`;
1373
- document.getElementById('verdictIcon').innerText = icon;
1374
- }
1375
-
1376
- window.switchTab = switchTab;
1377
- window.loadPreset = loadPreset;
1378
- window.clearConsole = clearConsole;
1379
-
1380
- // Initialize Simulator on load
1381
- window.onload = () => {
1382
- onToolChange();
1383
- };
1384
- </script>
1385
- </body>
1386
- </html>