@iowarp/clio-coder 0.3.1 → 0.3.2

package/dist/{wiki-generate-NUQCVOQ3.js → wiki-generate-DQF6Z66B.js}

@@ -1,69 +1,109 @@
 import { createRequire as __clioCreateRequire } from "node:module"; const require = __clioCreateRequire(import.meta.url);
 import {
   armInternalDispatchDeadline
-} from "./chunk-R5KLMSBV.js";
+} from "./chunk-J5Q24KAG.js";
 import {
   SchedulingDomainModule,
   createPromptsDomainModule
-} from "./chunk-G34LV2PF.js";
+} from "./chunk-LBNRH5WM.js";
 import {
   AgentsDomainModule,
   SafetyDomainModule
-} from "./chunk-MAR7Y6HW.js";
+} from "./chunk-3ZXDFGR5.js";
 import {
   ConfigDomainModule,
   loadDomains
-} from "./chunk-Q3RUPKEJ.js";
-import "./chunk-XYWBQRDM.js";
+} from "./chunk-V4RXGQ5Q.js";
+import {
+  createObservabilityDomainModule
+} from "./chunk-WVO7V2QY.js";
+import "./chunk-HC4CLZ2Y.js";
+import "./chunk-HFSBBKSQ.js";
+import "./chunk-CBCAPZAA.js";
 import {
   ContextDomainModule,
   buildWikiPagePrompt,
   buildWikiPlanPrompt
-} from "./chunk-M5T5VO65.js";
+} from "./chunk-7EYHLWU7.js";
 import "./chunk-5WIGXA4T.js";
-import "./chunk-PFEFKVGL.js";
+import "./chunk-J5HN4RYU.js";
 import {
   DispatchDomainModule,
+  SessionDomainModule
+} from "./chunk-6EJV5X2W.js";
+import "./chunk-4BJ5BYCE.js";
+import "./chunk-QKMUKYO7.js";
+import "./chunk-AGYYIBLL.js";
+import "./chunk-OOJYHWRB.js";
+import "./chunk-TXOTCRLG.js";
+import "./chunk-G4BMMOKF.js";
+import {
   MAX_PAGE_ATTEMPTS,
-  MiddlewareDomainModule,
-  SessionDomainModule,
-  createObservabilityDomainModule,
   pendingPages,
   readAuthoredWikiPlan,
   writeWikiPlanFile
-} from "./chunk-7SS2CTV2.js";
+} from "./chunk-X4RCMKVQ.js";
+import "./chunk-MVVUPGPW.js";
 import {
   ResourcesDomainModule
-} from "./chunk-FST4FYJB.js";
-import "./chunk-BSU2YIWB.js";
-import "./chunk-ZPY3JZ5E.js";
-import "./chunk-N6F52NLF.js";
-import "./chunk-LU4TK2PR.js";
-import "./chunk-GEP36Y4X.js";
-import "./chunk-OLBBMFRD.js";
-import "./chunk-474KN5II.js";
+} from "./chunk-MFFY33HR.js";
+import "./chunk-4BPJXDWC.js";
+import "./chunk-2SFS6XQE.js";
+import "./chunk-ZWLZP4ZT.js";
+import {
+  MiddlewareDomainModule
+} from "./chunk-WMSVI4G2.js";
+import "./chunk-IR4CFBFN.js";
+import "./chunk-UOV2BYIW.js";
+import "./chunk-OAO4GE4M.js";
+import "./chunk-MQSRRFWA.js";
+import "./chunk-STBPMHSX.js";
+import "./chunk-GGXXDWE4.js";
+import "./chunk-5UUP6MWO.js";
+import "./chunk-CMZWFGD2.js";
+import "./chunk-I4HZDVNP.js";
+import "./chunk-7MNJORFF.js";
+import "./chunk-VG7TBQIY.js";
+import "./chunk-OQE5J4C6.js";
+import "./chunk-ECH6PKUQ.js";
+import "./chunk-T6YILFSB.js";
+import "./chunk-VAKQQHWR.js";
+import "./chunk-6XLNIQDB.js";
+import "./chunk-5B2AEOW5.js";
 import {
   ToolNames
 } from "./chunk-CGKSTWHD.js";
-import "./chunk-C4PTHK7P.js";
-import "./chunk-GAEBEQVI.js";
-import "./chunk-TXOTCRLG.js";
-import "./chunk-K5XEMXTI.js";
+import "./chunk-POHLU5DW.js";
+import "./chunk-YHZX5GEU.js";
+import "./chunk-VJWL6YS5.js";
+import "./chunk-LBMZMYH2.js";
+import "./chunk-EKMEHE4H.js";
 import {
   ProvidersDomainModule,
   canonicalizeWireModelId
-} from "./chunk-H6F6BYOH.js";
-import "./chunk-EYOKLTMF.js";
-import "./chunk-IHXBNWMM.js";
-import "./chunk-Q5WJOSJ7.js";
-import "./chunk-KY56HMHH.js";
-import "./chunk-NMOX6HFD.js";
-import "./chunk-GB6QRBXN.js";
-import "./chunk-3I7MS7N2.js";
-import "./chunk-HQQID6OA.js";
+} from "./chunk-LZSJBIVT.js";
+import "./chunk-A3CYT5EX.js";
+import "./chunk-ZDOOVTXZ.js";
+import "./chunk-4VP4KH3K.js";
+import "./chunk-M6SHUN7Q.js";
 import "./chunk-R346GLFC.js";
-import "./chunk-WEPFGWHJ.js";
+import "./chunk-X75S7HFS.js";
+import "./chunk-FQ4SKYE4.js";
+import "./chunk-IKCO5N3L.js";
+import "./chunk-3I7MS7N2.js";
+import "./chunk-IHXBNWMM.js";
+import "./chunk-SST6Z5JA.js";
+import "./chunk-4ZG3XFUR.js";
+import "./chunk-APJ265NV.js";
+import "./chunk-FCSXB6T2.js";
+import "./chunk-YXLYO42X.js";
 import "./chunk-BNAZZHFG.js";
+import "./chunk-6EJMN2Y3.js";
+import "./chunk-WEPFGWHJ.js";
+import "./chunk-TZTZS7QK.js";
+import "./chunk-OQ33BKR3.js";
+import "./chunk-JVCV3ICN.js";
+import "./chunk-7CR24IG7.js";
 import "./chunk-IWHMRKLL.js";
 import {
   init_esm_shims
@@ -384,4 +424,4 @@ export {
   resolveDocumenterModelId,
   runWikiDispatch
 };
-//# sourceMappingURL=wiki-generate-NUQCVOQ3.js.map
+//# sourceMappingURL=wiki-generate-DQF6Z66B.js.map

package/dist/worker/entry.js

@@ -1,57 +1,69 @@
 #!/usr/bin/env node
 import { createRequire as __clioCreateRequire } from "node:module"; const require = __clioCreateRequire(import.meta.url);
 import {
+  assertRegisteredBuiltinTools,
   createEngineAgent,
   createLoopGuardRegistration,
   createProtectedArtifactsRegistration,
+  createRegistry,
   describeCallTarget,
+  effectiveToolNames,
   isLoopGuardSynthesisBackstopReason,
   isReserveAdmittedTool,
   lockedSynthesisFallbackText,
   patchWorkerRequestPayload,
+  registerCoreTools,
+  resolveAgentTools,
   resolveDeliveryTools,
   sanitizeLockedSynthesisMessage,
   workerLoopBlockBudget
-} from "../chunk-DKGKUHFA.js";
+} from "../chunk-OHHN2SO4.js";
+import "../chunk-MNA4JGU4.js";
+import {
+  createMiddlewareContractFromSnapshot,
+  createMiddlewareToolChoiceControl,
+  shouldRequestStalledTurnContinuation
+} from "../chunk-WMSVI4G2.js";
+import {
+  CONFIRMED_SCOPE,
+  READONLY_SCOPE,
+  WORKSPACE_SCOPE,
+  isSubset
+} from "../chunk-IR4CFBFN.js";
+import {
+  createLoopState,
+  observe
+} from "../chunk-UOV2BYIW.js";
+import "../chunk-G2DE3C7R.js";
+import "../chunk-OAO4GE4M.js";
 import {
   DEFAULT_ESCALATION_FALLBACK,
   DEFAULT_ESCALATION_TIMEOUT_MS,
   WORKER_EXIT_PERMISSION_REQUIRED,
-  agentSkillToolPolicy,
-  attestedToolSignature,
   claudeToolsOutsideProfile,
   coerceToolInput,
-  createMiddlewareToolChoiceControl,
   createRunEffectsRecorder,
-  createWorkerSafety,
-  createWorkerToolRegistry,
   emitClaudeToolPermissionDecision,
   isClaudeCodeSessionId,
   parseWorkerSpec,
-  resolveAgentTools,
   runtimeSpeaksResponseSchemaDialect,
-  shouldRequestStalledTurnContinuation,
   startAntigravityWorkerRun,
   startClaudeCodeWorkerRun,
   validateRehydratedWorkerRuntime
-} from "../chunk-7SS2CTV2.js";
-import "../chunk-FST4FYJB.js";
-import "../chunk-BSU2YIWB.js";
-import "../chunk-ZPY3JZ5E.js";
-import "../chunk-N6F52NLF.js";
-import "../chunk-LU4TK2PR.js";
+} from "../chunk-MQSRRFWA.js";
 import {
+  DEFAULT_AUTONOMY_LEVEL,
   RESULT_CONTRACT_REPAIR_LIMIT,
+  createSafetyPolicyEngine,
   parseResultContract,
   resultContractRepairMessages,
   validateResultContract
-} from "../chunk-GEP36Y4X.js";
-import "../chunk-OLBBMFRD.js";
-import "../chunk-474KN5II.js";
+} from "../chunk-STBPMHSX.js";
+import "../chunk-GGXXDWE4.js";
 import {
-  ToolNames
-} from "../chunk-CGKSTWHD.js";
-import "../chunk-C4PTHK7P.js";
+  classify,
+  protectedArtifactMutationBlockReason
+} from "../chunk-5UUP6MWO.js";
 import {
   UNKNOWN_RESOURCE,
   WORKER_PROTOCOL_VERSION,
@@ -63,43 +75,78 @@ import {
   knownResource,
   parseAgentLedgerBody,
   parseAgentLedgerEntry,
+  toolSignatureOf,
   withinFrameBudget,
   workerSpecDigest
-} from "../chunk-GAEBEQVI.js";
-import "../chunk-TXOTCRLG.js";
+} from "../chunk-CMZWFGD2.js";
+import {
+  deleteInjectedCompileCacheFrom
+} from "../chunk-I4HZDVNP.js";
+import "../chunk-ZI647VB5.js";
+import "../chunk-ARBGF5F7.js";
+import "../chunk-7MNJORFF.js";
+import "../chunk-XN3L4EYL.js";
+import "../chunk-VG7TBQIY.js";
+import "../chunk-OQE5J4C6.js";
+import "../chunk-ECH6PKUQ.js";
+import "../chunk-OKGUZO2U.js";
+import {
+  agentSkillToolPolicy
+} from "../chunk-T6YILFSB.js";
+import "../chunk-VAKQQHWR.js";
+import "../chunk-6XLNIQDB.js";
+import "../chunk-5B2AEOW5.js";
+import {
+  ToolNames
+} from "../chunk-CGKSTWHD.js";
+import "../chunk-65DEGPJ6.js";
 import {
   FileKnowledgeBase,
   applyModelCapabilityPatch,
-  disposeLmStudioClients,
   getRuntimeRegistry,
   loadPluginRuntimes,
   registerBuiltinRuntimes,
   registerClioApiProviders,
-  registerFauxFromEnv,
   resolveModelRuntimeCapabilitiesForModel,
   resolveProviderKnowledgeBaseRoots,
   setGlobalDefaultMaxOutputTokens,
   setProtectedModelsProvider,
   setResidencyNoticeSink
-} from "../chunk-H6F6BYOH.js";
-import "../chunk-EYOKLTMF.js";
-import "../chunk-IHXBNWMM.js";
-import "../chunk-Q5WJOSJ7.js";
+} from "../chunk-LZSJBIVT.js";
 import {
   readSettings,
   validateSettingsFile
-} from "../chunk-KY56HMHH.js";
+} from "../chunk-A3CYT5EX.js";
+import "../chunk-ZDOOVTXZ.js";
+import "../chunk-4VP4KH3K.js";
+import "../chunk-M6SHUN7Q.js";
+import "../chunk-R346GLFC.js";
+import "../chunk-SRF2PJNW.js";
+import {
+  setGitCommitAttributionEnabled,
+  withManagedGitCommitAttributionEnvironment
+} from "../chunk-X75S7HFS.js";
+import "../chunk-FQ4SKYE4.js";
+import "../chunk-IKCO5N3L.js";
+import "../chunk-3I7MS7N2.js";
+import "../chunk-IHXBNWMM.js";
+import "../chunk-SST6Z5JA.js";
 import {
   configureGuardrails,
   isWorkerToolCallCapExceededReason,
   isWorkerToolCallCapSynthesisReason
-} from "../chunk-NMOX6HFD.js";
-import "../chunk-GB6QRBXN.js";
-import "../chunk-3I7MS7N2.js";
-import "../chunk-HQQID6OA.js";
-import "../chunk-R346GLFC.js";
-import "../chunk-WEPFGWHJ.js";
+} from "../chunk-4ZG3XFUR.js";
+import "../chunk-APJ265NV.js";
+import {
+  registerFauxFromEnv
+} from "../chunk-FCSXB6T2.js";
+import "../chunk-YXLYO42X.js";
 import "../chunk-BNAZZHFG.js";
+import {
+  AI_AGENT_NAME
+} from "../chunk-6EJMN2Y3.js";
+import "../chunk-WEPFGWHJ.js";
+import "../chunk-OQ33BKR3.js";
 import {
   readClioVersion
 } from "../chunk-IWHMRKLL.js";
@@ -120,6 +167,128 @@ init_esm_shims();
 import {
   query
 } from "@anthropic-ai/claude-agent-sdk";
+
+// src/engine/worker-tools.ts
+init_esm_shims();
+function createWorkerSafety(options = {}) {
+  let loopState = createLoopState();
+  const policyEngine = createSafetyPolicyEngine({
+    ...options.cwd !== void 0 ? { cwd: options.cwd } : {},
+    ...options.writeRoots !== void 0 ? { writeRoots: options.writeRoots } : {}
+  });
+  const protectedArtifactState = {
+    artifacts: structuredClone(options.protectedArtifactState?.artifacts ?? [])
+  };
+  return {
+    classify: (call) => classify(call),
+    evaluate(call, posture) {
+      const protectedReason = protectedArtifactMutationBlockReason(protectedArtifactState, call.tool, call.args);
+      if (protectedReason !== null) {
+        const classification2 = classify(call);
+        const rejection = {
+          short: "protected artifact blocked",
+          detail: protectedReason,
+          hints: []
+        };
+        const metadata = policyEngine.metadata(posture);
+        const policy2 = {
+          kind: "block",
+          classification: classification2,
+          tool: call.tool,
+          actionClass: classification2.actionClass,
+          reasons: [...classification2.reasons, protectedReason],
+          ruleId: "protected-artifact",
+          reasonCode: "protected-artifact",
+          cwd: metadata.cwd,
+          policySource: "builtin-classifier",
+          rejection,
+          ...posture !== void 0 ? { posture } : {}
+        };
+        return { kind: "block", classification: classification2, rejection, policy: policy2 };
+      }
+      const policy = policyEngine.evaluate(call, posture);
+      const classification = policy.classification;
+      if (policy.kind === "block") {
+        const decision = {
+          kind: "block",
+          classification,
+          rejection: policy.rejection ?? fallbackRejection(policy),
+          policy
+        };
+        if (policy.match) decision.match = policy.match;
+        return decision;
+      }
+      if (policy.kind === "ask") {
+        const decision = {
+          kind: "ask",
+          classification,
+          rejection: policy.rejection ?? fallbackRejection(policy),
+          policy
+        };
+        if (policy.match) decision.match = policy.match;
+        return decision;
+      }
+      return { kind: "allow", classification, policy };
+    },
+    observeLoop(key, now) {
+      const [next, verdict] = observe(loopState, key, now ?? Date.now());
+      loopState = next;
+      return verdict;
+    },
+    scopes: { readonly: READONLY_SCOPE, workspace: WORKSPACE_SCOPE, confirmed: CONFIRMED_SCOPE },
+    isSubset,
+    policy: { metadata: (posture) => policyEngine.metadata(posture) },
+    audit: { recordCount: () => 0 }
+  };
+}
+function fallbackRejection(policy) {
+  return {
+    short: `${policy.tool} blocked: ${policy.actionClass}`,
+    detail: policy.reasons.join("\n"),
+    hints: []
+  };
+}
+function createWorkerToolRegistry(middlewareSnapshot, safety = createWorkerSafety(), skillLoaderOptions, hookRegistrations, autonomy, onMiddlewareEffects, agentLedger) {
+  const middleware = createMiddlewareContractFromSnapshot(middlewareSnapshot ?? { version: 1, rules: [] });
+  for (const registration2 of hookRegistrations ?? []) {
+    middleware.registerHook(registration2);
+  }
+  const registry = createRegistry({
+    safety,
+    middleware,
+    autonomy: () => autonomy ?? DEFAULT_AUTONOMY_LEVEL,
+    ...onMiddlewareEffects ? { onMiddlewareEffects } : {}
+  });
+  const registration = registerCoreTools(registry, {
+    ...agentLedger ? { agentLedger } : {},
+    // A worker cannot install a skill or reach the operator who could, so
+    // its skill listing carries installed (or bound) skills only; the
+    // marketplace is the orchestrator's to offer.
+    skillMarketplace: false,
+    getSkillLoaderOptions: () => ({
+      trustProjectCompatRoots: skillLoaderOptions?.trustProjectCompatRoots === true,
+      disableDiscovery: skillLoaderOptions?.noSkills === true,
+      ...skillLoaderOptions?.skillPaths && skillLoaderOptions.skillPaths.length > 0 ? { explicitSkillPaths: skillLoaderOptions.skillPaths } : {}
+    })
+  });
+  assertRegisteredBuiltinTools(registry, registration, false);
+  return registry;
+}
+function attestedToolSignature(input) {
+  const registry = createWorkerToolRegistry();
+  return toolSignatureOf(
+    effectiveToolNames({
+      registry,
+      allowedTools: input.toolsSupported ? input.allowedTools : [],
+      includeInteractiveTools: false,
+      ...input.toolProfile !== void 0 ? { toolProfile: input.toolProfile } : {},
+      ...input.agentId !== void 0 ? { agentId: input.agentId } : {},
+      ...input.task !== void 0 ? { task: input.task } : {}
+    })
+  );
+}
+
+// src/engine/claude/sdk-runtime.ts
 var DEFAULT_CLAUDE_TOOLS = { type: "preset", preset: "claude_code" };
 function sdkUserTextMessage(text, shouldQuery) {
   return {
@@ -1626,6 +1795,9 @@ function createWorkerStdinDemux() {
 
 // src/worker/entry.ts
 process.title = "clio-coder-worker";
+process.env.AI_AGENT = AI_AGENT_NAME;
+deleteInjectedCompileCacheFrom(process.env);
+process.env.CLIO_CODER_WORKER_RUN = "1";
 var CHANNEL_CLOSE_EXIT_GRACE_MS = 5e3;
 function configuredNodeLabels() {
   return (process.env.CLIO_CODER_WORKER_LABELS ?? "").split(",").map((label) => label.trim()).filter((label) => label.length > 0);
@@ -1677,6 +1849,20 @@ async function main() {
   process.stdin.resume();
   const spec = await demux.readSpec();
   process.title = `clio-coder-worker:${spec.agentId}`;
+  const attributionEnabled = spec.gitCommitAttribution ?? true;
+  setGitCommitAttributionEnabled(attributionEnabled);
+  const attribution = withManagedGitCommitAttributionEnvironment(process.env, {
+    cwd: process.cwd(),
+    enabled: attributionEnabled
+  });
+  for (const key of Object.keys(process.env)) {
+    if (!(key in attribution.env)) Reflect.deleteProperty(process.env, key);
+  }
+  Object.assign(process.env, attribution.env);
+  if (attribution.diagnostic !== null) {
+    process.stderr.write(`[worker] commit attribution: ${attribution.diagnostic}
+`);
+  }
   setProtectedModelsProvider(() => spec.protectedModels ?? []);
   const stopHeartbeat = startWorkerHeartbeat();
   const runtime = await resolveWorkerRuntime(spec.runtimeId);
@@ -1778,7 +1964,6 @@ async function main() {
       process.stderr.write(`[worker] dropped ${dropped} unrecognized stdin line(s) after the spec
 `);
     }
-    await disposeLmStudioClients();
   }
 }
 main().then(

package/dist/workspace-G4ZWUIPR.js

@@ -0,0 +1,22 @@
+import { createRequire as __clioCreateRequire } from "node:module"; const require = __clioCreateRequire(import.meta.url);
+import {
+  emptyWorkspaceSnapshot,
+  probeGit,
+  probeGitAsync,
+  probeGitStatusAsync,
+  probeWorkspace,
+  probeWorkspaceAsync
+} from "./chunk-G4BMMOKF.js";
+import "./chunk-YHZX5GEU.js";
+import "./chunk-EKMEHE4H.js";
+import "./chunk-7CR24IG7.js";
+import "./chunk-3R73A4XB.js";
+export {
+  emptyWorkspaceSnapshot,
+  probeGit,
+  probeGitAsync,
+  probeGitStatusAsync,
+  probeWorkspace,
+  probeWorkspaceAsync
+};
+//# sourceMappingURL=workspace-G4ZWUIPR.js.map

package/docs/README.md

@@ -4,7 +4,7 @@
 
 # Clio Coder Documentation
 
-These pages document `v0.3.1` of Clio Coder, an open-source coding orchestrator within the [IOWarp](https://iowarp.ai) scientific computing platform, created by the [Gnosis Research Center](https://grc.iit.edu) at the [Illinois Institute of Technology](https://www.iit.edu).
+These pages document `v0.3.2` of Clio Coder, an open-source coding orchestrator within the [IOWarp](https://iowarp.ai) scientific computing platform, created by the [Gnosis Research Center](https://grc.iit.edu) at the [Illinois Institute of Technology](https://www.iit.edu).
 
 They are source-aligned guides: when prose and source disagree, prefer the
 current source, tests, and `CHANGELOG.md`.
@@ -21,13 +21,14 @@ current source, tests, and `CHANGELOG.md`.
 | Installation, upgrade, reset, uninstallation, configuration folders, and permissions | [installation-and-lifecycle.md](installation-and-lifecycle.md) ([Interactive Blueprint](html/lifecycle_blueprint.html)) |
 | Safety posture, default-deny Bash, project policy, damage-control rules, and typed validation | [safety-model.md](safety-model.md) ([Interactive Blueprint](html/safety_blueprint.html)) |
 | Source layout, compile-time boundaries, domain loading, and runtime data flow | [architecture.md](architecture.md) ([Interactive Blueprint](html/architecture_blueprint.html)) |
-| Why the dispatch domain is not split, which invariants cross the obvious seams, and why direct subpath imports are permitted | [dispatch-architecture-rationale.md](dispatch-architecture-rationale.md) |
-| Prompt envelope reuse, provider tool delivery, and bounded tool results | [prompt-envelope-and-tools.md](prompt-envelope-and-tools.md) ([Interactive Blueprint](html/tools_blueprint.html)) |
+| Why the dispatch domain is not split, which invariants cross the obvious seams, and why direct subpath imports are permitted | [dispatch-architecture-rationale.md](dispatch-architecture-rationale.md) ([Interactive Blueprint](html/dispatch_rationale_blueprint.html)) |
+| Prompt envelope reuse, provider tool delivery, and bounded tool results | [prompt-envelope-and-tools.md](prompt-envelope-and-tools.md) ([Interactive Blueprints: prompt_envelope](html/prompt_envelope_blueprint.html), [tools](html/tools_blueprint.html)) |
 | In-depth reference for all 20 worker tools: parameters, typical payloads, and error examples | [tool-usage.md](tool-usage.md) ([Interactive Blueprint](html/tool_usage_blueprint.html)) |
 | Developer guide to implementing custom model runtimes and inference server integrations | [provider-adapter-cookbook.md](provider-adapter-cookbook.md) ([Interactive Blueprint](html/provider_adapter_blueprint.html)) |
 | Built-in agent recipes, discovery roots, frontmatter schema, and dispatch admission | [built-in-agents.md](built-in-agents.md) ([Interactive Blueprint](html/agents_blueprint.html)) |
 | Artifact browsing, receipt verification, dispatch diagnostics, and observability routing | [observability.md](observability.md) ([Interactive Blueprint](html/observability_blueprint.html)) |
-| Where every generated file lands: the working tree, `.clio-coder/`, and the XDG dirs, by audience | [artifact-placement.md](artifact-placement.md) |
+| Evidence-aware Git commit role trailers, managed-hook safety, and how platforms render the identity | [git-commit-provenance.md](git-commit-provenance.md) |
+| Where every generated file lands: the working tree, `.clio-coder/`, and the XDG dirs, by audience | [artifact-placement.md](artifact-placement.md) ([Interactive Blueprint](html/artifact_placement_blueprint.html)) |
 | Evidence directory structures, findings, and operator-approved memory retrieval | [evidence-and-memory.md](evidence-and-memory.md) ([Interactive Blueprint](html/memory_blueprint.html)) |
 | Local YAML eval suites, reports, comparisons, and command evidence | [eval-runner.md](eval-runner.md) ([Interactive Blueprint](html/eval_blueprint.html)) |
 | Prompt and skill resources, extension manifests, and portable share archives | [extensions-and-sharing.md](extensions-and-sharing.md) ([Interactive Blueprint](html/extensions_blueprint.html)) |
@@ -40,26 +41,30 @@ current source, tests, and `CHANGELOG.md`.
 | Interface layout, colors palette, Unicode character vocabulary, and drawing choreography | [tui-design.md](tui-design.md) ([Interactive Blueprint](html/tui_design_blueprint.html)) |
 | NDJSON parent-child socket protocols, watchdog timers, and exit status mapping | [worker-dispatch-mechanics.md](worker-dispatch-mechanics.md) ([Interactive Blueprint](html/worker_dispatch_blueprint.html)) |
 | Multi-node fleet dispatch: process-safe admission, attested workers, measured routing, activation, agent automation, topologies, and receipts | [fleet-dispatch.md](fleet-dispatch.md) ([Interactive Blueprint](html/fleet_dispatch_blueprint.html)) |
-| Multi-process capacity leases, heartbeat TTLs, cross-process locks, and cluster drain controls | [capacity-and-scheduling.md](capacity-and-scheduling.md) |
+| Multi-process capacity leases, heartbeat TTLs, cross-process locks, and cluster drain controls | [capacity-and-scheduling.md](capacity-and-scheduling.md) ([Interactive Blueprint](html/capacity_scheduling_blueprint.html)) |
 | Executable multi-node demo with reviewer gate and receipt provenance walkthrough | [fleet-demo-runbook.md](fleet-demo-runbook.md) |
-| Session lifecycle, on-disk ledger format v3, `/tree` active-path lineage, `/fork`, `/resume`, checkpoints, and recovery | [session-lifecycle.md](session-lifecycle.md) |
-| Agent Client Protocol (ACP) server over stdio, tool mediation, non-stall permissions, and error taxonomy | [acp.md](acp.md) |
-| Version registry and migration policies for all 9 serialized artifact schemas | [artifact-versions.md](artifact-versions.md) |
-| Process exit code taxonomy, `--help` standard, machine-readable JSON streaming, and headless output contracts | [exit-codes-and-output.md](exit-codes-and-output.md) |
-| Actionable error remediation and diagnostics keyed by exact user-facing messages | [troubleshooting.md](troubleshooting.md) |
-| Canonical definitions of 40 core architectural concepts mapped to `src/` types | [glossary.md](glossary.md) |
+| Session lifecycle, on-disk ledger format v3, `/tree` active-path lineage, `/fork`, `/resume`, checkpoints, and recovery | [session-lifecycle.md](session-lifecycle.md) ([Interactive Blueprint](html/session_lifecycle_blueprint.html)) |
+| Agent Client Protocol (ACP) server over stdio, tool mediation, non-stall permissions, and error taxonomy | [acp.md](acp.md) ([Interactive Blueprint](html/acp_blueprint.html)) |
+| Version registry and migration policies for all 9 serialized artifact schemas | [artifact-versions.md](artifact-versions.md) ([Interactive Blueprint](html/artifact_versions_blueprint.html)) |
+| Process exit code taxonomy, `--help` standard, machine-readable JSON streaming, and headless output contracts | [exit-codes-and-output.md](exit-codes-and-output.md) ([Interactive Blueprint](html/exit_codes_blueprint.html)) |
+| Actionable error remediation and diagnostics keyed by exact user-facing messages | [troubleshooting.md](troubleshooting.md) ([Interactive Blueprint](html/troubleshooting_blueprint.html)) |
+| Canonical definitions of 40 core architectural concepts mapped to `src/` types | [glossary.md](glossary.md) ([Interactive Blueprint](html/glossary_blueprint.html)) |
 | Complete source-to-documentation mapping matrix and subsystem coverage status | [documentation-coverage.md](documentation-coverage.md) |
 | Issue-driven development lifecycle: file-ticket through release, label taxonomy, and dogfooding setup | [development-pipeline.md](development-pipeline.md) |
 | Proactive task memory architecture, session task bank, intervention rules, and handoff carrying | [proactive-memory.md](proactive-memory.md) ([Interactive Blueprint](html/memory_blueprint.html)) |
 | WAL SQLite trace mirror database schema, rowid cursor queries, rebuildability, and CLI trace subcommands | [trace-store.md](trace-store.md) ([Interactive Blueprint](html/trace_blueprint.html)) |
 | Private context index determinism, target smoke matrices, and Clio machinery soak benchmark suite | [evals-internal.md](evals-internal.md) ([Blueprints: evals_internal](html/evals_internal_blueprint.html), [soak](html/soak_blueprint.html)) |
 | Point-in-time inventory of legacy environment variables (Historical Appendix) | [config-knobs-audit.md](config-knobs-audit.md) ([Interactive Blueprint](html/config_knobs_audit_blueprint.html)) |
-| Clock and timestamp conventions: durations, instants, ordering, and formatting | [time-conventions.md](time-conventions.md) |
+| Clock and timestamp conventions: durations, instants, ordering, and formatting | [time-conventions.md](time-conventions.md) ([Interactive Blueprint](html/time_conventions_blueprint.html)) |
+| Correct render, PTY, startup, compile-cache, and import-graph measurement endpoints and the 0.3.2 baseline | [performance-methodology.md](performance-methodology.md) |
+| Pi SDK boundary: upstream primitives, attribution, and Clio-owned product policies | [pi-boundary.md](pi-boundary.md) ([Interactive Blueprint](html/pi_boundary_blueprint.html)) |
 
-Every project Clio works in gets its context from a checked-in `CLIO-CODER.md`,
-bootstrapped and maintained by `clio-coder context init`. The root
-[CLIO-CODER.md](../CLIO-CODER.md) of this repository is the maintained reference example
-of the format.
+Every project Clio works in gets its context from a local `CLIO-CODER.md`,
+bootstrapped and maintained by `clio-coder context init`. It's human-owned and
+versioned by default; this repo's own root `CLIO-CODER.md` is the exception,
+gitignored here for dogfooding so this checkout's copy doesn't collide with
+Clio's own committed docs. Run `clio-coder context init` in this checkout to
+generate one for Clio's own source.
 
 ## Developer Quick Start
 
@@ -77,7 +82,7 @@ under `src/`, run `npm run build` again or keep `npm run dev` running.
 ## Release Notes
 
 The release entry point is [../README.md](../README.md); detailed release
-history lives in [../CHANGELOG.md](../CHANGELOG.md). For v0.3.1 the supported
+history lives in [../CHANGELOG.md](../CHANGELOG.md). For v0.3.2 the supported
 install paths are `npm install -g @iowarp/clio-coder` and a source checkout
 through `npm run install:local`, the deterministic release gate is
 `npm run ci:release`, and live model smoke validation is local/manual and