@iowarp/clio-coder 0.3.1 → 0.3.2

package/dist/{auth-IC3K6NIZ.js → auth-5TWEIYDN.js}

@@ -6,18 +6,19 @@ import {
 import {
   terminalColumns,
   wrapPlain
-} from "./chunk-IS3ONKU3.js";
+} from "./chunk-2IR2NMPA.js";
 import {
   credentialWriteFailed,
   printPlaintextCredentialWarning
-} from "./chunk-RDLVBZEO.js";
+} from "./chunk-YCWGATWI.js";
 import {
   columnWidths,
   formatColumnRow,
   formatColumns,
   printError,
   printOk
-} from "./chunk-K2ITRMHZ.js";
+} from "./chunk-ED4KHGC3.js";
+import "./chunk-5TSRNF4G.js";
 import {
   EMPTY_CAPABILITIES,
   getRuntimeRegistry,
@@ -25,24 +26,31 @@ import {
   registerBuiltinRuntimes,
   resolveProviderReference,
   supportGroupLabel
-} from "./chunk-H6F6BYOH.js";
-import "./chunk-Q5WJOSJ7.js";
+} from "./chunk-LZSJBIVT.js";
 import {
   readSettings
-} from "./chunk-KY56HMHH.js";
-import "./chunk-NMOX6HFD.js";
+} from "./chunk-A3CYT5EX.js";
+import "./chunk-ZDOOVTXZ.js";
 import {
   authNotRequiredStatus,
   openAuthStorage,
   registerClioOAuthProviders,
   resolveRuntimeAuthTarget,
   targetRequiresAuth
-} from "./chunk-GB6QRBXN.js";
-import "./chunk-3I7MS7N2.js";
-import "./chunk-HQQID6OA.js";
+} from "./chunk-4VP4KH3K.js";
+import "./chunk-M6SHUN7Q.js";
 import "./chunk-R346GLFC.js";
-import "./chunk-WEPFGWHJ.js";
+import "./chunk-FQ4SKYE4.js";
+import "./chunk-IKCO5N3L.js";
+import "./chunk-3I7MS7N2.js";
+import "./chunk-SST6Z5JA.js";
+import "./chunk-4ZG3XFUR.js";
+import "./chunk-APJ265NV.js";
+import "./chunk-FCSXB6T2.js";
+import "./chunk-YXLYO42X.js";
 import "./chunk-BNAZZHFG.js";
+import "./chunk-WEPFGWHJ.js";
+import "./chunk-OQ33BKR3.js";
 import "./chunk-IWHMRKLL.js";
 import {
   init_esm_shims
@@ -525,4 +533,4 @@ async function runAuthCommand(args) {
 export {
   runAuthCommand
 };
-//# sourceMappingURL=auth-IC3K6NIZ.js.map
+//# sourceMappingURL=auth-5TWEIYDN.js.map

package/dist/{chunk-PV4JUBVJ.js → chunk-2EHAIA3X.js}

@@ -1,25 +1,27 @@
 import { createRequire as __clioCreateRequire } from "node:module"; const require = __clioCreateRequire(import.meta.url);
+import {
+  readSettings,
+  updateSettings
+} from "./chunk-A3CYT5EX.js";
 import {
   runCommandVector
-} from "./chunk-EYOKLTMF.js";
+} from "./chunk-SRF2PJNW.js";
+import {
+  withStateFileLockSync
+} from "./chunk-IKCO5N3L.js";
 import {
   INTEROP_AGENT_KINDS,
   interopAgentKind
 } from "./chunk-IHXBNWMM.js";
 import {
-  readSettings,
-  updateSettings
-} from "./chunk-KY56HMHH.js";
+  require_dist
+} from "./chunk-APJ265NV.js";
 import {
-  require_dist,
-  withStateFileLockSync
-} from "./chunk-GB6QRBXN.js";
+  clioStateDir
+} from "./chunk-BNAZZHFG.js";
 import {
   safeResourceWrite
 } from "./chunk-WEPFGWHJ.js";
-import {
-  clioStateDir
-} from "./chunk-BNAZZHFG.js";
 import {
   __toESM,
   init_esm_shims
@@ -39,11 +41,26 @@ async function fetchWithTimeout(url, timeoutMs) {
   }
 }
 async function fingerprintNativeRuntime(baseUrl) {
-  const trimmed = baseUrl.endsWith("/") ? baseUrl.slice(0, -1) : baseUrl;
-  const lmStudioV1 = await fetchWithTimeout(`${trimmed}/api/v1/models`, 750);
-  if (lmStudioV1?.ok) return { runtimeId: "lmstudio-native", displayName: "LM Studio" };
+  const normalized = baseUrl.replace(/^ws:/u, "http:").replace(/^wss:/u, "https:");
+  const trimmed = normalized.endsWith("/") ? normalized.slice(0, -1) : normalized;
+  const greeting = await fetchWithTimeout(`${trimmed}/lmstudio-greeting`, 750);
+  if (greeting?.ok) {
+    try {
+      const data = await greeting.json();
+      if (data.lmstudio === true) return { runtimeId: "lmstudio", displayName: "LM Studio" };
+    } catch {
+    }
+  }
   const lmStudioV0 = await fetchWithTimeout(`${trimmed}/api/v0/models`, 750);
-  if (lmStudioV0?.ok) return { runtimeId: "lmstudio-native", displayName: "LM Studio" };
+  if (lmStudioV0?.ok) {
+    try {
+      const data = await lmStudioV0.json();
+      if (Array.isArray(data.data) && data.data.some((entry) => typeof entry === "object" && entry !== null && "compatibility_type" in entry)) {
+        return { runtimeId: "lmstudio", displayName: "LM Studio" };
+      }
+    } catch {
+    }
+  }
   const ollama = await fetchWithTimeout(`${trimmed}/api/version`, 750);
   if (ollama?.ok) {
     try {
@@ -57,6 +74,12 @@ async function fingerprintNativeRuntime(baseUrl) {
   return null;
 }
 
+// src/domains/interop/index.ts
+init_esm_shims();
+
+// src/domains/interop/extension.ts
+init_esm_shims();
+
 // src/domains/interop/consent.ts
 init_esm_shims();
 var import_yaml = __toESM(require_dist(), 1);
@@ -379,11 +402,7 @@ async function detectInteropAgents(input = {}, previous) {
   return { version: 1, detectedAt: (/* @__PURE__ */ new Date()).toISOString(), agents };
 }
 
-// src/domains/interop/index.ts
-init_esm_shims();
-
 // src/domains/interop/extension.ts
-init_esm_shims();
 var EMPTY_REPORT = { version: 1, detectedAt: (/* @__PURE__ */ new Date(0)).toISOString(), agents: [] };
 function createInteropBundle(_context) {
   let detected2 = null;
@@ -448,6 +467,7 @@ var InteropDomainModule = {
 };
 
 export {
+  fingerprintNativeRuntime,
   INHERITED_PROJECT_CONTEXT,
   delegationEntryForKind,
   interopProposals,
@@ -456,7 +476,6 @@ export {
   declineInteropAgents,
   resolveOnPath,
   detectInteropAgents,
-  InteropDomainModule,
-  fingerprintNativeRuntime
+  InteropDomainModule
 };
-//# sourceMappingURL=chunk-PV4JUBVJ.js.map
+//# sourceMappingURL=chunk-2EHAIA3X.js.map

package/dist/{chunk-IS3ONKU3.js → chunk-2IR2NMPA.js}

@@ -5,10 +5,12 @@ import {
 
 // src/cli/text-layout.ts
 init_esm_shims();
-function terminalColumns(stream = process.stdout) {
+function terminalColumns(stream = process.stdout, env = process.env) {
   const columns = stream.columns;
-  if (typeof columns !== "number" || !Number.isFinite(columns)) return 80;
-  return Math.max(20, Math.floor(columns));
+  if (typeof columns === "number" && Number.isFinite(columns)) return Math.max(20, Math.floor(columns));
+  const declared = Number(env.COLUMNS);
+  if (Number.isFinite(declared) && declared > 0) return Math.max(20, Math.floor(declared));
+  return 80;
 }
 function truncate(text, width) {
   if (width <= 0) return "";
@@ -69,4 +71,4 @@ export {
   wrapPlain,
   twoColumnRow
 };
-//# sourceMappingURL=chunk-IS3ONKU3.js.map
+//# sourceMappingURL=chunk-2IR2NMPA.js.map

package/dist/chunk-2SFS6XQE.js

@@ -0,0 +1,122 @@
+import { createRequire as __clioCreateRequire } from "node:module"; const require = __clioCreateRequire(import.meta.url);
+import {
+  enabledExtensionResourceRoots
+} from "./chunk-ZWLZP4ZT.js";
+import {
+  require_dist
+} from "./chunk-APJ265NV.js";
+import {
+  clioConfigDir
+} from "./chunk-BNAZZHFG.js";
+import {
+  __toESM,
+  init_esm_shims
+} from "./chunk-3R73A4XB.js";
+
+// src/domains/resources/common-loader.ts
+init_esm_shims();
+var import_yaml = __toESM(require_dist(), 1);
+import { existsSync, readdirSync, statSync } from "node:fs";
+import path from "node:path";
+var COMPAT_RESOURCE_PRECEDENCE = {
+  extension: 10,
+  userCompat: 20,
+  user: 30,
+  projectCompat: 40,
+  project: 50
+};
+function defaultScopedResourceRoots(kind, cwd) {
+  return [
+    ...enabledExtensionResourceRoots(kind, cwd).map((root) => ({
+      path: root.path,
+      scope: "package",
+      source: root.source,
+      precedence: COMPAT_RESOURCE_PRECEDENCE.extension
+    })),
+    {
+      path: path.join(clioConfigDir(), kind),
+      scope: "user",
+      source: "config",
+      precedence: COMPAT_RESOURCE_PRECEDENCE.user
+    },
+    {
+      path: path.join(cwd, ".clio-coder", kind),
+      scope: "project",
+      source: "project",
+      precedence: COMPAT_RESOURCE_PRECEDENCE.project
+    }
+  ];
+}
+function sourceInfoForRoot(root, filePath) {
+  return {
+    path: filePath,
+    scope: root.scope,
+    ...root.source ? { source: root.source } : {},
+    ...root.precedence !== void 0 ? { precedence: root.precedence } : {}
+  };
+}
+function readRootEntries(root, label, diagnostics) {
+  if (!existsSync(root.path)) return [];
+  let stat;
+  try {
+    stat = statSync(root.path);
+  } catch (err) {
+    const reason = err instanceof Error ? err.message : String(err);
+    diagnostics.push({
+      type: "warning",
+      message: `${label} root could not be stat'ed: ${reason}`,
+      path: root.path
+    });
+    return [];
+  }
+  if (!stat.isDirectory()) {
+    diagnostics.push({ type: "warning", message: `${label} root is not a directory`, path: root.path });
+    return [];
+  }
+  try {
+    return readdirSync(root.path, { withFileTypes: true }).sort((a, b) => a.name.localeCompare(b.name));
+  } catch (err) {
+    const reason = err instanceof Error ? err.message : String(err);
+    diagnostics.push({ type: "warning", message: `${label} root could not be read: ${reason}`, path: root.path });
+    return [];
+  }
+}
+function splitYamlFrontmatter(raw) {
+  const opening = raw.match(/^---\r?\n/);
+  if (!opening) return { ok: false, reason: "missing", body: raw };
+  const closeRegex = /\r?\n---(?:\r?\n|$)/g;
+  closeRegex.lastIndex = opening[0].length;
+  const closing = closeRegex.exec(raw);
+  if (!closing) return { ok: false, reason: "missing closing delimiter", body: raw };
+  const body = raw.slice(closing.index + closing[0].length);
+  const frontmatterText = raw.slice(opening[0].length, closing.index);
+  let parsed;
+  try {
+    parsed = (0, import_yaml.parse)(frontmatterText);
+  } catch (err) {
+    const reason = err instanceof Error ? err.message : String(err);
+    return { ok: false, reason: `invalid YAML: ${reason}`, body };
+  }
+  if (parsed === null || typeof parsed !== "object" || Array.isArray(parsed)) {
+    return { ok: false, reason: "must be a YAML object", body };
+  }
+  return {
+    ok: true,
+    frontmatter: parsed,
+    body
+  };
+}
+function stringField(frontmatter, key) {
+  const value = frontmatter[key];
+  return typeof value === "string" && value.trim().length > 0 ? value.trim() : null;
+}
+
+export {
+  COMPAT_RESOURCE_PRECEDENCE,
+  defaultScopedResourceRoots,
+  sourceInfoForRoot,
+  readRootEntries,
+  splitYamlFrontmatter,
+  stringField
+};
+//# sourceMappingURL=chunk-2SFS6XQE.js.map

package/dist/chunk-2VTFPG5O.js

@@ -0,0 +1,48 @@
+import { createRequire as __clioCreateRequire } from "node:module"; const require = __clioCreateRequire(import.meta.url);
+import {
+  init_esm_shims
+} from "./chunk-3R73A4XB.js";
+
+// src/cli/output-guard.ts
+init_esm_shims();
+var stdoutTakeoverState;
+function takeOverStdout() {
+  if (stdoutTakeoverState) return;
+  const rawStdoutWrite = process.stdout.write.bind(process.stdout);
+  const rawStderrWrite = process.stderr.write.bind(process.stderr);
+  const originalStdoutWrite = process.stdout.write;
+  process.stdout.write = ((chunk, encodingOrCallback, callback) => {
+    const cb = typeof encodingOrCallback === "function" ? encodingOrCallback : callback;
+    return rawStderrWrite(String(chunk), cb);
+  });
+  stdoutTakeoverState = { rawStdoutWrite, originalStdoutWrite };
+}
+function restoreStdout() {
+  if (!stdoutTakeoverState) return;
+  process.stdout.write = stdoutTakeoverState.originalStdoutWrite;
+  stdoutTakeoverState = void 0;
+}
+function writeRawStdout(text) {
+  if (stdoutTakeoverState) {
+    stdoutTakeoverState.rawStdoutWrite(text);
+    return;
+  }
+  process.stdout.write(text);
+}
+async function flushRawStdout() {
+  await new Promise((resolve, reject) => {
+    const write = stdoutTakeoverState?.rawStdoutWrite ?? process.stdout.write.bind(process.stdout);
+    write("", (err) => {
+      if (err) reject(err);
+      else resolve();
+    });
+  });
+}
+
+export {
+  takeOverStdout,
+  restoreStdout,
+  writeRawStdout,
+  flushRawStdout
+};
+//# sourceMappingURL=chunk-2VTFPG5O.js.map

package/dist/{chunk-MAR7Y6HW.js → chunk-3ZXDFGR5.js}

@@ -1,18 +1,27 @@
 import { createRequire as __clioCreateRequire } from "node:module"; const require = __clioCreateRequire(import.meta.url);
 import {
   assertAgentIdNamespace
-} from "./chunk-Q3RUPKEJ.js";
+} from "./chunk-V4RXGQ5Q.js";
+import {
+  parseFrontmatter
+} from "./chunk-QKMUKYO7.js";
+import {
+  loadSkills
+} from "./chunk-4BPJXDWC.js";
 import {
   CONFIRMED_SCOPE,
   READONLY_SCOPE,
   WORKSPACE_SCOPE,
+  isSubset
+} from "./chunk-IR4CFBFN.js";
+import {
   createLoopState,
+  observe
+} from "./chunk-UOV2BYIW.js";
+import {
   createSafetyPolicyEngine,
-  isSubset,
-  observe,
-  parseFrontmatter,
   parseResultContract
-} from "./chunk-GEP36Y4X.js";
+} from "./chunk-STBPMHSX.js";
 import {
   assertAgentSpecPolicy,
   classify,
@@ -24,19 +33,16 @@ import {
   isAgentProjectContextTier,
   isShadowAgent,
   normalizeAgentSpec
-} from "./chunk-OLBBMFRD.js";
-import {
-  loadSkills
-} from "./chunk-474KN5II.js";
-import {
-  BusChannels,
-  isRunAbortedPayload
-} from "./chunk-Q5WJOSJ7.js";
+} from "./chunk-5UUP6MWO.js";
 import {
   clioConfigDir,
   clioStateDir,
   stateRootRemoved
 } from "./chunk-BNAZZHFG.js";
+import {
+  BusChannels,
+  isRunAbortedPayload
+} from "./chunk-OQ33BKR3.js";
 import {
   resolvePackageRoot
 } from "./chunk-IWHMRKLL.js";
@@ -467,7 +473,8 @@ var dateFormatter = new Intl.DateTimeFormat("en-CA", DATE_OPTIONS);
 function localDateString(d) {
   if (process.env.TZ !== dateFormatterZone) {
     dateFormatterZone = process.env.TZ;
-    dateFormatter = new Intl.DateTimeFormat("en-CA", DATE_OPTIONS);
+    const zone = dateFormatterZone === void 0 ? void 0 : { timeZone: dateFormatterZone };
+    dateFormatter = new Intl.DateTimeFormat("en-CA", { ...DATE_OPTIONS, ...zone });
   }
   return dateFormatter.format(d);
 }
@@ -688,7 +695,7 @@ function openAuditWriter(opts) {
 function isPermissionResolvedPayload(value) {
   if (!value || typeof value !== "object") return false;
   const p = value;
-  if (p.status !== "granted" && p.status !== "denied") return false;
+  if (p.status !== "granted" && p.status !== "denied" && p.status !== "expired") return false;
   if (p.tool !== void 0 && typeof p.tool !== "string") return false;
   if (p.actionClass !== void 0 && typeof p.actionClass !== "string") return false;
   if (p.reason !== void 0 && typeof p.reason !== "string") return false;
@@ -1029,4 +1036,4 @@ export {
   AgentsDomainModule,
   SafetyDomainModule
 };
-//# sourceMappingURL=chunk-MAR7Y6HW.js.map
+//# sourceMappingURL=chunk-3ZXDFGR5.js.map

package/dist/chunk-4BJ5BYCE.js

@@ -0,0 +1,61 @@
+import { createRequire as __clioCreateRequire } from "node:module"; const require = __clioCreateRequire(import.meta.url);
+import {
+  init_esm_shims
+} from "./chunk-3R73A4XB.js";
+
+// src/domains/evidence/redact.ts
+init_esm_shims();
+function createRedactionTally() {
+  return { count: 0 };
+}
+var SECRET_PATTERNS = [
+  {
+    kind: "pem",
+    re: /-----BEGIN [A-Z0-9 ]*(?:PRIVATE KEY|PRIVATE KEY BLOCK)-----[\s\S]*?(?:-----END [A-Z0-9 ]*(?:PRIVATE KEY|PRIVATE KEY BLOCK)-----|$)/g
+  },
+  { kind: "aws-access-key", re: /\bAKIA[0-9A-Z]{16}\b/g },
+  { kind: "github-token", re: /\b(?:ghp|gho|ghu|ghs|ghr)_[A-Za-z0-9]{20,}\b/g },
+  { kind: "github-token", re: /\bgithub_pat_[A-Za-z0-9_]{20,}\b/g },
+  { kind: "sk-key", re: /\bsk-(?:[A-Za-z0-9_-]{2,20}-)?[A-Za-z0-9_-]{16,}\b/g },
+  { kind: "slack-token", re: /\bxox[bpars]-[A-Za-z0-9-]{8,}\b/g },
+  { kind: "google-api-key", re: /\bAIza[0-9A-Za-z_-]{30,}\b/g },
+  { kind: "jwt", re: /\beyJ[A-Za-z0-9_-]{8,}\.[A-Za-z0-9_-]{8,}\.[A-Za-z0-9_-]{4,}\b/g },
+  {
+    kind: "assignment",
+    // KEY=value / key: value / "api_key": "value" shapes where the key name
+    // is secret-flavored and the value is long enough to be a credential.
+    re: /\b((?:[A-Za-z0-9_-]*(?:api[_-]?key|apikey|secret|token|passwd|password|credential)[A-Za-z0-9_-]*)\s*["']?\s*[:=]\s*["']?)([^\s"'`;,&|<>]{8,})/gi
+  }
+];
+function redactSecretsText(text, tally) {
+  let out = text;
+  for (const pattern of SECRET_PATTERNS) {
+    out = out.replace(pattern.re, (...match) => {
+      tally.count += 1;
+      if (pattern.kind === "assignment") {
+        return `${String(match[1])}[redacted:${pattern.kind}]`;
+      }
+      return `[redacted:${pattern.kind}]`;
+    });
+  }
+  return out;
+}
+function redactSecretsDeep(value, tally) {
+  if (typeof value === "string") return redactSecretsText(value, tally);
+  if (Array.isArray(value)) return value.map((item) => redactSecretsDeep(item, tally));
+  if (value !== null && typeof value === "object" && Object.getPrototypeOf(value) === Object.prototype) {
+    const out = {};
+    for (const [key, item] of Object.entries(value)) {
+      out[key] = redactSecretsDeep(item, tally);
+    }
+    return out;
+  }
+  return value;
+}
+
+export {
+  createRedactionTally,
+  redactSecretsText,
+  redactSecretsDeep
+};
+//# sourceMappingURL=chunk-4BJ5BYCE.js.map