@iowarp/clio-coder 0.3.3 → 0.3.4

package/CHANGELOG.md

@@ -2,6 +2,45 @@
 
 All notable changes to Clio Coder are documented in this file. The format follows [Keep a Changelog](https://keepachangelog.com/en/1.1.0/) and versions follow Semantic Versioning; pre-1.0 minor releases may include incompatible changes.
 
+## 0.3.4 - 2026-08-22
+
+### Added
+- A typed project verifier catalog at `.clio-coder/verifiers.yaml` (#170). Each check declares a stable id, description, exact argv vector, repository-relative cwd, bounded timeout, and tags. `verify()` lists package scripts and catalog checks through one `DeclaredCheck` projection, and `verify(check=<id>)` runs the admitted argv through safe-exec with no shell, no model-text interpolation, and no widening of workspace authority. Shell strings, escaping cwds, duplicate ids, unknown fields, unsupported versions, and over-cap values fail closed with diagnostics that name the field and the cap.
+- Guided verifier authoring through `clio-coder verifiers discover|author|validate|dry-run|add|edit|rename|remove` (#174). Discovery recognizes package scripts, Cargo manifests, CMake presets, declared Python runners, Go modules, and existing validation-contract commands with source provenance, and proposes argv vectors labeled project-declared or toolchain-defined. Every preview shows path, cwd, timeout, tags, and effective execution authority; nothing is written or executed before `--yes`, validation uses the production catalog parser, and dry runs use the production verify path. Projects with no declared command get an explicit manual-entry path instead of a guessed command.
+- One canonical tool-result disposition contract with independent presentation and model-context axes (#165). A tool declares how the operator sees a result and, separately, whether the model receives full content, a bounded excerpt, a deterministic code-produced summary, or metadata only. Typed result metadata records captured, displayed, and context byte counts, the requested versus applied mode, truncation, the offload path, and summary provenance. Exit status, error state, safety facts, and retrieval instructions survive every context mode.
+- Canonical Bash output dispositions with a tail-biased bounded default, deterministic redacted diagnostic summaries, metadata-only retrieval, budget-admitted full context, and explicit byte and termination facts (#172). `output_policy` is optional on the Bash tool; omitting it preserves the previous tail behavior.
+- A six-axis canonical trust status for runs (#154): artifact integrity, validation grounding, independent review, context provenance, autonomy enforcement, and completion evidence, each with explicit `absent`, `unknown`, and `not_applicable` states and a named source and authority. Composition never promotes one axis from another; the no-promotion rules are enforced at the adapters and the evidence composition boundary. Evidence bundles gain `trust-status.json`.
+- Non-destructive working-set eviction. When context pressure crosses `compaction.threshold`, Clio now records which tool-result bodies and closed-turn thinking blocks leave the model's working set instead of rewriting them out of the session. The bodies stay in the ledger, the transcript keeps showing them, and each one is replaced in model replay by a one-line marker naming the ref, the reason, the size, and the exact call that brings it back.
+- Exact recall by ref. The model reads an evicted body back with `context(scope="recall", ref="<turnId>")`; the operator reads one into the transcript with `/context recall <ref>`, which never enters model context. A recall does not un-evict: the marker stays byte-identical so the provider prefix cache is untouched, and repeated recalls of one ref are the churn signal.
+- Two eviction policies. `structural-v1` is the default: it selects by what the session did since (`stale_after_mutation`, `superseded_read`, `failure_resolved`, `listing_consumed`, `thinking_turn_closed`) and falls back to age only under pressure. `age-horizon` reproduces the previous age-based selection, minus results whose body is below `context.workingSet.minEvictableTokens`. Replayed over the seeded procedural corpora with the summary stage modeled, `structural-v1` cuts the number of lossy summary compactions per 300-turn science trace from 21.5 to 8.8 at a 64k budget and from 8.9 to 3.1 at 128k, retains at or above `age-horizon` at every budget, and beats random eviction on precision by 2.3x or more; the default-policy rule, the cold-prefix cost it pays for finer batching, and the full grid are under `benchmarks/results/context-replay/`.
+- `/context` reports the working set: policy, evicted items, evicted tokens, events, recalls, and churn. Evicted tool rows carry a dim `evicted · <reason>` tag in the transcript.
+- Cache-honesty attribution for eviction. An applied event stamps `working_set_evict` on the next assistant entry's `promptCache.expectedColdReasons`, and `/context` reports `last cold turn: working-set eviction (expected)` instead of warning about a cold backend it caused itself.
+- `clio-coder context replay --sessions <path>...` replays Clio ledgers, and `--synthetic <ids>` replays seeded procedural science-coding corpora (`science-long`, `refactor`, `exploration`), through the live eviction code with `none`, `random`, and `oracle` controls and reports retention, precision, tokens evicted, recall tokens, cold prefix tokens, saturation, turns to first summary, and summaries per trace under a modeled summary stage; `clio-coder context working-set --session <id|path>` prints one session's working-set fold and path index. The procedural corpora replace the private Claude Code transcripts the first tables were built on, so the committed tables under `benchmarks/results/context-replay/` rebuild byte for byte on any checkout.
+- New guide: `docs/context-working-set.md`.
+
+### Changed
+- Tool offload files are content-addressed: `<stateDir>/scratch/<sessionId>/<sha256 of the captured text>.txt` instead of the tool call id or a timestamp, so identical captures share one file and the `retrieve=` header, the eviction marker, and the resume transcript carry the same bytes every time.
+- Editing an existing `.clio-coder/verifiers.yaml` through `clio-coder verifiers add|edit|rename|remove` now mutates the operator's file in place: comments and on-disk order survive, only changed fields move, and a revision that changes nothing writes the file back byte for byte.
+- Evidence rows, the latest gate decision and finish contract, and the verifier catalog order by code point instead of locale collation, so two machines rebuild the same bundle in the same order.
+- Receipt inspection, evidence bundles, monitor output, and worker evidence derive their trust facts from one canonical derivation (#157). The public `evidence_verification=<state>/<basis>` token is unchanged. An integrity-failed receipt now renders `receipt_integrity=FAILED reason=…` and labels its claims `worker claims (unverified prose)` in both dispatch and monitor output.
+- Session format version 4. The bump is additive: it adds the `contextEviction` and `contextRecall` records and changes no existing entry, so a version 3 session migrates to 4 in place on open with nothing rewritten. Only a session written by a newer build is refused. The bump is one-way for the operator, and a 0.3.3 binary cannot open a session this release wrote.
+- New settings under `context.workingSet`: `enabled` (default `true`), `policy` (default `structural-v1`), `target` (default `0.6`), `protectLastTurns` (default `6`), and `minEvictableTokens` (default `200`). `compaction.excludeLastTurns` now governs only the legacy mask path.
+- Compaction reports a `working_set` stage on `ContextPruned`, and the middleware `on_compaction` hook gains the `working_set_evict` and `working_set_recall` stages.
+
+### Removed
+- The Claude Code transcript loader for `context replay` and its `--format` flag. Replay inputs are Clio ledgers and the seeded procedural corpora.
+- `TRUST_STATUS_NO_PROMOTION_RULES`, `adaptEvidenceFindingsValidationStatus`, and `adaptEvidenceLinkContextStatus` from the evidence barrel. The no-promotion rules are enforced at the adapters and the composition boundary and are written out in `docs/evidence-and-memory.md`; the two adapters were reachable from no builder.
+
+### Security
+- A project-catalog `verify(check=<id>)` no longer sits in the no-prompt set. The policy engine resolves the check against `.clio-coder/verifiers.yaml`, scans the declared argv with the damage-control rules and the zero-access read guard, and tags it unrecognized, so `auto-edit` confirms it once with the argv shown and `full-auto` runs it. Package-script checks and `verify(check="frontend")` are unchanged. `.clio-coder/verifiers.yaml` and `.clio-coder/safety.yaml` are read-only to the model's `write`, `edit`, and bash redirect paths by default: before this, a model at the default `auto-edit` level could write the catalog and run any argv through `verify` without a prompt.
+
+### Fixed
+- A completed conversational offer such as "point me at it and I'll get moving" no longer triggers an automatic continuation or the "turn still has open work" footer warning (#178). The stalled-turn detector now requires an announced concrete action: it recognizes inflected verbs ("I'll be running the tests"), announced paths and commands ("Let me open src/cli/index.ts", "I'll npm run build"), and keeps conditional offers, "let me know" phrasing, questions, and wait statements ("I'll wait for your go-ahead before I touch index.ts") suppressed. The one-continuation cap for genuine stalls is unchanged.
+- A completion-contract audit row can no longer ground validation. The row is the run's own self-report and feeds completion evidence only; validation grounding is filled by executions the session ledger observed. A run whose receipt fails integrity contributes no verified field, its completion self-report downgrades to `unknown`, and the `no-validation` warning is restored. A blank or whitespace-only identifier in one audit row no longer aborts the whole evidence build.
+- Tool-result summaries are honest about omission. Head and tail slices are disjoint, a scratch offload is written only when the model projection actually omits content, whitespace-only output is complete rather than truncated, NUL bytes are removed from model context while presentation and the offload keep the captured bytes, the head-tail strategy honors `redact`, and a throwing disposition resolver fails closed to metadata-only with the cause recorded in the result metadata, the model header, and the transcript row.
+- `clio-coder verifiers … --yes` no longer prints "no file has been written" immediately before writing the catalog; the confirmed preview is rendered after authorization.
+- Auto-compaction no longer destroys observations. The stale-observation mask rewrote persisted bodies through `session.replaceEntries`, so masked content was gone from `/resume`, `/tree`, `/fork`, and the HTML export as well as from the model. `CLIO_CODER_LEGACY_MASK=1` restores that stage for one release as a compatibility escape hatch; it is removed in the next release.
+
 ## 0.3.3 - 2026-08-21
 
 ### Changed

package/CONTRIBUTING.md

@@ -41,7 +41,7 @@ npm run ci:release
 Live LLM smoke validation (manual/opt-in):
 
 ```bash
-CLIO_CODER_LIVE_SMOKE=1 CLIO_CODER_LIVE_TARGET=anthropic ANTHROPIC_API_KEY=your_key npm run test:live
+npm run live:smoke -- --target <configured-target-id>
 ```
 
 ## Testing conventions

package/README.md

@@ -263,7 +263,7 @@ dist-tag instead.
 From source, pinned to this release:
 
 ```bash
-git clone --branch v0.3.3 https://github.com/iowarp/clio-coder.git
+git clone --branch v0.3.4 https://github.com/iowarp/clio-coder.git
 cd clio-coder
 npm run install:local
 export PATH="$HOME/.local/bin:$PATH"
@@ -289,7 +289,7 @@ Full lifecycle details, including `reset` and the upgrade path, are in
 
 ## Status
 
-The current release is **v0.3.3**, installable from npm as
+The current release is **v0.3.4**, installable from npm as
 [`@iowarp/clio-coder`](https://www.npmjs.com/package/@iowarp/clio-coder) or
 from source. Clio Coder is still experimental: we ship quickly, interfaces may
 change between minor versions, and model-specific behavior varies by target, so
@@ -402,7 +402,7 @@ Conventions worth knowing before your first PR: local imports end in `.js`,
 tests use `node:test`, `any` needs a tracking issue, and compile-time
 boundaries between domains are enforced by the hygiene lint rather than by
 convention. Read [docs/architecture.md](docs/architecture.md) before adding a
-cross-domain import. Live model validation (`npm run test:live`) and the
+cross-domain import. Live model validation (`npm run live:smoke -- --target <id>`) and the
 SWE-bench, SciCode, and Terminal-Bench harnesses under `benchmarks/` are
 separate and opt-in, because no deterministic suite can promise that every
 local model behaves identically.

package/dist/{acp-P2AQILE2.js → acp-S5R4RR5B.js}

@@ -6,17 +6,18 @@ import {
 } from "./chunk-2VTFPG5O.js";
 import {
   runClioCommand
-} from "./chunk-KZWTDYJF.js";
-import "./chunk-CBCAPZAA.js";
+} from "./chunk-4JUF2NNX.js";
+import "./chunk-E25LMLRW.js";
 import "./chunk-HKIYEGME.js";
-import "./chunk-BMEMKKIT.js";
+import "./chunk-KOHPCX4K.js";
 import "./chunk-YCWGATWI.js";
 import {
   printError
 } from "./chunk-ED4KHGC3.js";
 import "./chunk-5TSRNF4G.js";
-import "./chunk-A3CYT5EX.js";
-import "./chunk-ZDOOVTXZ.js";
+import "./chunk-AD2SYQYC.js";
+import "./chunk-4OC57DA6.js";
+import "./chunk-LL4KHSZI.js";
 import "./chunk-4VP4KH3K.js";
 import {
   MAX_TIMER_DELAY_MS
@@ -125,4 +126,4 @@ export {
   resolveAcpCwd,
   runAcpCommand
 };
-//# sourceMappingURL=acp-P2AQILE2.js.map
+//# sourceMappingURL=acp-S5R4RR5B.js.map

package/dist/{agents-72W3BI7I.js → agents-P6DMMVZY.js}

@@ -2,58 +2,61 @@ import { createRequire as __clioCreateRequire } from "node:module"; const requir
 import {
   AgentsDomainModule,
   SafetyDomainModule
-} from "./chunk-PAJK6MAQ.js";
-import "./chunk-5UFT4SUX.js";
+} from "./chunk-X6COSD2O.js";
+import "./chunk-K6WL7QZT.js";
+import {
+  ensureClioState
+} from "./chunk-VAWWTKDP.js";
 import {
   ConfigDomainModule,
   loadDomains
-} from "./chunk-OC7FIQPC.js";
-import {
-  ensureClioState
-} from "./chunk-UFIIWP2H.js";
-import "./chunk-CBCAPZAA.js";
+} from "./chunk-KRPY7NTG.js";
+import "./chunk-E25LMLRW.js";
 import "./chunk-QKMUKYO7.js";
 import "./chunk-4BPJXDWC.js";
 import "./chunk-2SFS6XQE.js";
 import "./chunk-ZWLZP4ZT.js";
 import "./chunk-IR4CFBFN.js";
 import "./chunk-UOV2BYIW.js";
-import "./chunk-STBPMHSX.js";
+import "./chunk-7RXG6QRZ.js";
 import {
   isUserVisibleAgent
-} from "./chunk-5UUP6MWO.js";
-import "./chunk-7MNJORFF.js";
+} from "./chunk-AOCYTWAV.js";
+import "./chunk-MV3K5QF2.js";
+import "./chunk-FYYLNIL5.js";
+import "./chunk-UL3WSD3F.js";
 import "./chunk-ECH6PKUQ.js";
 import "./chunk-5B2AEOW5.js";
 import "./chunk-CGKSTWHD.js";
 import "./chunk-XPLRXC72.js";
-import "./chunk-2TLUCQVG.js";
-import "./chunk-BMEMKKIT.js";
+import "./chunk-RD5U66HV.js";
+import "./chunk-KOHPCX4K.js";
 import "./chunk-YCWGATWI.js";
 import {
   printError
 } from "./chunk-ED4KHGC3.js";
 import "./chunk-5TSRNF4G.js";
-import "./chunk-A3CYT5EX.js";
-import "./chunk-ZDOOVTXZ.js";
+import "./chunk-AD2SYQYC.js";
+import "./chunk-4OC57DA6.js";
+import "./chunk-LL4KHSZI.js";
 import "./chunk-4VP4KH3K.js";
-import "./chunk-M6SHUN7Q.js";
-import "./chunk-R346GLFC.js";
-import "./chunk-VPAYEGVX.js";
-import "./chunk-COU2UHX6.js";
+import "./chunk-VEZEGCGW.js";
 import "./chunk-FQ4SKYE4.js";
 import "./chunk-IKCO5N3L.js";
 import "./chunk-3I7MS7N2.js";
 import "./chunk-IHXBNWMM.js";
 import "./chunk-SST6Z5JA.js";
+import "./chunk-FO5ZOVUY.js";
+import "./chunk-R346GLFC.js";
 import "./chunk-4ZG3XFUR.js";
 import "./chunk-APJ265NV.js";
 import "./chunk-YXLYO42X.js";
 import "./chunk-BNAZZHFG.js";
 import "./chunk-6EJMN2Y3.js";
 import "./chunk-WEPFGWHJ.js";
-import "./chunk-TZTZS7QK.js";
-import "./chunk-OQ33BKR3.js";
+import "./chunk-HXG4IURW.js";
+import "./chunk-ZGVHUX3M.js";
+import "./chunk-TTNYS3EA.js";
 import "./chunk-IWHMRKLL.js";
 import {
   init_esm_shims
@@ -113,4 +116,4 @@ function renderLine(spec) {
 export {
   runAgentsCommand
 };
-//# sourceMappingURL=agents-72W3BI7I.js.map
+//# sourceMappingURL=agents-P6DMMVZY.js.map