@iowarp/clio-coder 0.3.3 → 0.3.4

package/src/cli/context-working-set.ts

@@ -0,0 +1,513 @@
+import { execFileSync } from "node:child_process";
+import { mkdir, readdir, readFile, stat, writeFile } from "node:fs/promises";
+import { basename, dirname, join, resolve } from "node:path";
+import { assertSafeId } from "../core/safe-id.js";
+import { clioStatePath } from "../core/xdg.js";
+import { DEFAULT_WORKING_SET_SETTINGS } from "../domains/context/working-set/defaults.js";
+import { foldWorkingSet } from "../domains/context/working-set/fold.js";
+import { buildPathIndex } from "../domains/context/working-set/path-index.js";
+import { resolveWorkingSetPolicy } from "../domains/context/working-set/policies/index.js";
+import { makeOraclePolicy, makeRandomPolicy, nonePolicy } from "../domains/context/working-set/replay/controls.js";
+import { loadClioTraces, type ReplayLoadCascade } from "../domains/context/working-set/replay/load-clio.js";
+import { aggregateReplayMetrics, type ReplayMeasurement } from "../domains/context/working-set/replay/metrics.js";
+import { buildReferenceGraph, type ReferenceGraph } from "../domains/context/working-set/replay/reference-graph.js";
+import {
+	type ReplayPolicyResult,
+	type ReplayReportInput,
+	renderReplayJson,
+	renderReplayMarkdown,
+} from "../domains/context/working-set/replay/report.js";
+import { replayTrace } from "../domains/context/working-set/replay/runner.js";
+import { generateSyntheticCorpora, SYNTHETIC_CORPORA } from "../domains/context/working-set/replay/synthetic.js";
+import type { Trace } from "../domains/context/working-set/replay/trace.js";
+import { parseSessionEntries } from "../domains/session/archive-readers.js";
+import { DEFAULT_KEEP_RECENT_TOKENS } from "../domains/session/compaction/defaults.js";
+import { filterEntriesToActivePath } from "../domains/session/tree/active-path.js";
+
+const REPLAY_HELP = `Usage:
+  clio-coder context replay (--sessions <path>... | --synthetic <corpus>...) [options]
+
+Options:
+  --sessions <path>... Clio session directories, sessions roots, or ledger JSONL files
+  --synthetic <ids>   comma-separated procedural corpora: ${SYNTHETIC_CORPORA.map((spec) => spec.id).join(",")}
+  --policies <ids>    comma-separated none,random,age-horizon,structural-v1,oracle
+  --budgets <tokens>  comma-separated budgets (default: 16000,32000,64000)
+  --threshold <ratio> pressure threshold (default: 0.8)
+  --target <ratio>    post-eviction pressure target (default: 0.6)
+  --protect-last-turns <n>
+                      protected recent turns (default: ${DEFAULT_WORKING_SET_SETTINGS.protectLastTurns})
+  --min-evictable-tokens <n>
+                      minimum tool-result body tokens (default: ${DEFAULT_WORKING_SET_SETTINGS.minEvictableTokens})
+  --seed <integer>    deterministic random-policy seed (default: 0)
+  --no-filter         include every readable transcript
+  --json <path>       write the stable JSON report
+  --md <path>         write Markdown instead of printing it
+`;
+
+const WORKING_SET_HELP = `Usage:
+  clio-coder context working-set --session <id|path>
+
+Print the durable working-set fold and path-index summary for one Clio session.
+`;
+
+/**
+ * Conservative stand-in for replay's summary paraphrase. Five recorded local
+ * compactions price at 405, 405, 968, 981, and 1,124 tokens; 1,500 sits above
+ * that observed range. The replay README records the sample and sensitivity.
+ */
+const REPLAY_SUMMARY_TOKENS = 1_500;
+
+const POLICY_IDS = ["none", "random", "age-horizon", "structural-v1", "oracle"] as const;
+type ReplayPolicyId = (typeof POLICY_IDS)[number];
+
+class CliUsageError extends Error {}
+
+interface ReplayArgs {
+	sessions: string[];
+	policies: ReplayPolicyId[];
+	budgets: number[];
+	threshold: number;
+	target: number;
+	protectLastTurns: number;
+	minEvictableTokens: number;
+	seed: number;
+	synthetic: string[];
+	noFilter: boolean;
+	jsonPath?: string;
+	markdownPath?: string;
+}
+
+function commaValues(value: string, flag: string): string[] {
+	const values = value
+		.split(",")
+		.map((entry) => entry.trim())
+		.filter((entry) => entry.length > 0);
+	if (values.length === 0) throw new CliUsageError(`${flag} requires at least one value`);
+	return [...new Set(values)];
+}
+
+function numberValue(value: string, flag: string): number {
+	const parsed = Number(value);
+	if (!Number.isFinite(parsed)) throw new CliUsageError(`${flag} requires a finite number`);
+	return parsed;
+}
+
+function requiredValue(args: ReadonlyArray<string>, index: number, flag: string): string {
+	const value = args[index + 1];
+	if (value === undefined || value.startsWith("--")) throw new CliUsageError(`${flag} requires a value`);
+	return value;
+}
+
+function policyResolves(id: ReplayPolicyId): boolean {
+	if (id === "none" || id === "random" || id === "oracle") return true;
+	try {
+		resolveWorkingSetPolicy(id);
+		return true;
+	} catch {
+		return false;
+	}
+}
+
+function defaultPolicies(): ReplayPolicyId[] {
+	return POLICY_IDS.filter(policyResolves);
+}
+
+function parseReplayArgs(args: ReadonlyArray<string>): ReplayArgs {
+	const parsed: ReplayArgs = {
+		sessions: [],
+		policies: defaultPolicies(),
+		budgets: [16_000, 32_000, 64_000],
+		threshold: 0.8,
+		target: 0.6,
+		protectLastTurns: DEFAULT_WORKING_SET_SETTINGS.protectLastTurns,
+		minEvictableTokens: DEFAULT_WORKING_SET_SETTINGS.minEvictableTokens,
+		seed: 0,
+		synthetic: [],
+		noFilter: false,
+	};
+	let policiesExplicit = false;
+	for (let index = 0; index < args.length; index += 1) {
+		const arg = args[index];
+		if (arg === "--no-filter") {
+			parsed.noFilter = true;
+			continue;
+		}
+		if (arg === "--sessions") {
+			let consumed = 0;
+			while (index + 1 < args.length && !args[index + 1]?.startsWith("--")) {
+				parsed.sessions.push(args[index + 1] as string);
+				index += 1;
+				consumed += 1;
+			}
+			if (consumed === 0) throw new CliUsageError("--sessions requires at least one path");
+			continue;
+		}
+		if (
+			arg === "--policies" ||
+			arg === "--budgets" ||
+			arg === "--synthetic" ||
+			arg === "--threshold" ||
+			arg === "--target" ||
+			arg === "--protect-last-turns" ||
+			arg === "--min-evictable-tokens" ||
+			arg === "--seed"
+		) {
+			const value = requiredValue(args, index, arg);
+			index += 1;
+			if (arg === "--policies") {
+				const values = commaValues(value, arg);
+				const unknown = values.filter((entry) => !(POLICY_IDS as ReadonlyArray<string>).includes(entry));
+				if (unknown.length > 0) throw new CliUsageError(`unknown replay policy: ${unknown.join(", ")}`);
+				parsed.policies = values as ReplayPolicyId[];
+				policiesExplicit = true;
+			} else if (arg === "--budgets") {
+				parsed.budgets = commaValues(value, arg).map((entry) => {
+					const budget = numberValue(entry, arg);
+					if (!Number.isInteger(budget) || budget <= 0) {
+						throw new CliUsageError("--budgets values must be positive integers");
+					}
+					return budget;
+				});
+			} else if (arg === "--synthetic") {
+				const values = commaValues(value, arg);
+				const known = SYNTHETIC_CORPORA.map((spec) => spec.id);
+				const unknown = values.filter((entry) => !known.includes(entry));
+				if (unknown.length > 0) throw new CliUsageError(`unknown synthetic corpus: ${unknown.join(", ")}`);
+				parsed.synthetic = values;
+			} else if (arg === "--threshold") {
+				parsed.threshold = numberValue(value, arg);
+				if (parsed.threshold <= 0 || parsed.threshold > 1) {
+					throw new CliUsageError("--threshold must be greater than 0 and at most 1");
+				}
+			} else if (arg === "--target") {
+				parsed.target = numberValue(value, arg);
+				if (parsed.target <= 0 || parsed.target >= 1) {
+					throw new CliUsageError("--target must be greater than 0 and less than 1");
+				}
+			} else if (arg === "--protect-last-turns") {
+				parsed.protectLastTurns = numberValue(value, arg);
+				if (!Number.isInteger(parsed.protectLastTurns) || parsed.protectLastTurns < 1) {
+					throw new CliUsageError("--protect-last-turns must be an integer at least 1");
+				}
+			} else if (arg === "--min-evictable-tokens") {
+				parsed.minEvictableTokens = numberValue(value, arg);
+				if (!Number.isInteger(parsed.minEvictableTokens) || parsed.minEvictableTokens < 0) {
+					throw new CliUsageError("--min-evictable-tokens must be a non-negative integer");
+				}
+			} else {
+				parsed.seed = numberValue(value, arg);
+				if (!Number.isInteger(parsed.seed)) throw new CliUsageError("--seed must be an integer");
+			}
+			continue;
+		}
+		if (arg === "--json" || arg === "--md") {
+			const value = requiredValue(args, index, arg);
+			index += 1;
+			if (arg === "--json") parsed.jsonPath = value;
+			else parsed.markdownPath = value;
+			continue;
+		}
+		throw new CliUsageError(`unknown flag ${arg}`);
+	}
+	if (parsed.sessions.length === 0 && parsed.synthetic.length === 0) {
+		throw new CliUsageError("--sessions or --synthetic is required");
+	}
+	if (parsed.target >= parsed.threshold) throw new CliUsageError("--target must be less than --threshold");
+	if (policiesExplicit) {
+		const unavailable = parsed.policies.filter((id) => !policyResolves(id));
+		if (unavailable.length > 0) {
+			throw new CliUsageError(`replay policy is not available in this build: ${unavailable.join(", ")}`);
+		}
+	}
+	return parsed;
+}
+
+function policyForTrace(id: ReplayPolicyId, graph: ReferenceGraph, seed: number) {
+	if (id === "none") return nonePolicy;
+	if (id === "random") return makeRandomPolicy(seed);
+	if (id === "oracle") return makeOraclePolicy(graph);
+	return resolveWorkingSetPolicy(id);
+}
+
+function gitSha(): string | null {
+	try {
+		return execFileSync("git", ["rev-parse", "HEAD"], {
+			cwd: process.cwd(),
+			encoding: "utf8",
+			stdio: ["ignore", "pipe", "ignore"],
+		}).trim();
+	} catch {
+		return null;
+	}
+}
+
+function exactCommandLine(): string[] {
+	return [process.execPath, ...process.execArgv, ...process.argv.slice(1)];
+}
+
+async function writeOutput(path: string, contents: string): Promise<string> {
+	const output = resolve(path);
+	await mkdir(dirname(output), { recursive: true });
+	await writeFile(output, contents, "utf8");
+	return output;
+}
+
+function cascadeLine(cascade: ReplayLoadCascade): string {
+	const filtered = Object.entries(cascade.filtered)
+		.map(([stage, count]) => `${stage}=${count}`)
+		.join(" ");
+	return `cascade found=${cascade.found} unreadable=${cascade.unreadable} ${filtered} kept=${cascade.kept}`;
+}
+
+export async function runContextReplayCommand(args: string[]): Promise<number> {
+	if (args.includes("--help") || args.includes("-h")) {
+		process.stdout.write(REPLAY_HELP);
+		return 0;
+	}
+	let parsed: ReplayArgs;
+	try {
+		parsed = parseReplayArgs(args);
+	} catch (error) {
+		process.stderr.write(
+			`clio-coder context replay: ${error instanceof Error ? error.message : String(error)}\n${REPLAY_HELP}`,
+		);
+		return 2;
+	}
+	try {
+		const ledgers = await loadClioTraces(parsed.sessions, { filter: parsed.noFilter ? false : {} });
+		const synthetic = generateSyntheticCorpora(parsed.synthetic);
+		const loaded = {
+			traces: [...ledgers.traces, ...synthetic.traces],
+			cascade: {
+				found: ledgers.cascade.found + synthetic.cascade.found,
+				unreadable: ledgers.cascade.unreadable,
+				filtered: ledgers.cascade.filtered,
+				kept: ledgers.cascade.kept + synthetic.cascade.kept,
+			},
+		};
+		if (loaded.traces.length === 0) {
+			process.stderr.write(`clio-coder context replay: no traces to replay (${cascadeLine(loaded.cascade)})\n`);
+			return 1;
+		}
+		const indexed = loaded.traces.map((trace) => {
+			const index = buildPathIndex(trace.entries, { cwd: trace.cwd });
+			return { trace, index, graph: buildReferenceGraph(trace, index) };
+		});
+		const settings = {
+			...DEFAULT_WORKING_SET_SETTINGS,
+			target: parsed.target,
+			protectLastTurns: parsed.protectLastTurns,
+			minEvictableTokens: parsed.minEvictableTokens,
+		};
+		const results: ReplayPolicyResult[] = [];
+		for (const budgetTokens of parsed.budgets) {
+			for (const policyId of parsed.policies) {
+				const measurements: ReplayMeasurement[] = indexed.map(({ trace, index, graph }) => ({
+					trace,
+					index,
+					graph,
+					replay: replayTrace(trace, policyForTrace(policyId, graph, parsed.seed), {
+						policyId,
+						budgetTokens,
+						threshold: parsed.threshold,
+						target: parsed.target,
+						settings,
+						seed: parsed.seed,
+						summaries: { keepRecentTokens: DEFAULT_KEEP_RECENT_TOKENS, summaryTokens: REPLAY_SUMMARY_TOKENS },
+					}),
+				}));
+				results.push({ budgetTokens, policyId, metrics: aggregateReplayMetrics(measurements) });
+			}
+		}
+		const report: ReplayReportInput = {
+			config: {
+				policies: parsed.policies,
+				budgets: parsed.budgets,
+				threshold: parsed.threshold,
+				target: parsed.target,
+				seed: parsed.seed,
+				corpus: [...(parsed.sessions.length > 0 ? ["ledgers"] : []), ...parsed.synthetic],
+				filter: parsed.noFilter ? "none" : "default",
+				settings,
+			},
+			cascade: loaded.cascade,
+			results,
+			gitSha: gitSha(),
+			commandLine: exactCommandLine(),
+		};
+		const markdown = renderReplayMarkdown(report);
+		if (parsed.markdownPath === undefined) process.stdout.write(markdown);
+		else {
+			const path = await writeOutput(parsed.markdownPath, markdown);
+			process.stdout.write(`${cascadeLine(loaded.cascade)}\nmarkdown ${path}\n`);
+		}
+		if (parsed.jsonPath !== undefined) {
+			const path = await writeOutput(parsed.jsonPath, renderReplayJson(report));
+			process.stdout.write(`json ${path}\n`);
+		}
+		return 0;
+	} catch (error) {
+		process.stderr.write(`clio-coder context replay failed: ${error instanceof Error ? error.message : String(error)}\n`);
+		return 1;
+	}
+}
+
+async function sessionPath(value: string): Promise<string> {
+	const candidate = resolve(value);
+	try {
+		const facts = await stat(candidate);
+		if (facts.isDirectory()) return join(candidate, "current.jsonl");
+		if (facts.isFile()) return candidate;
+	} catch {
+		// A non-path value is resolved as a validated session id below.
+	}
+	try {
+		assertSafeId(value, "session");
+	} catch (error) {
+		throw new CliUsageError(error instanceof Error ? error.message : String(error));
+	}
+	const sessionsRoot = join(clioStatePath(), "sessions");
+	let cwdHashes: string[];
+	try {
+		cwdHashes = await readdir(sessionsRoot);
+	} catch {
+		throw new Error(`session not found: ${value}`);
+	}
+	for (const cwdHash of cwdHashes.sort()) {
+		const current = join(sessionsRoot, cwdHash, value, "current.jsonl");
+		try {
+			if ((await stat(current)).isFile()) return current;
+		} catch {
+			// Continue across repositories until the id is found.
+		}
+	}
+	throw new Error(`session not found: ${value}`);
+}
+
+async function pinnedLeafForSession(source: string): Promise<string | undefined> {
+	try {
+		const raw = await readFile(join(dirname(source), "meta.json"), "utf8");
+		const value = JSON.parse(raw) as unknown;
+		if (typeof value !== "object" || value === null || Array.isArray(value)) return undefined;
+		const pinned = (value as Record<string, unknown>).pinnedLeafTurnId;
+		return typeof pinned === "string" && pinned.length > 0 ? pinned : undefined;
+	} catch {
+		return undefined;
+	}
+}
+
+async function sessionCwdForSession(source: string): Promise<string | null> {
+	try {
+		const raw = await readFile(join(dirname(source), "meta.json"), "utf8");
+		const value = JSON.parse(raw) as unknown;
+		if (typeof value !== "object" || value === null || Array.isArray(value)) return null;
+		const cwd = (value as Record<string, unknown>).cwd;
+		return typeof cwd === "string" && cwd.length > 0 ? cwd : null;
+	} catch {
+		return null;
+	}
+}
+
+function formatWorkingSet(trace: Trace): string {
+	const view = foldWorkingSet(trace.entries);
+	const index = buildPathIndex(trace.entries, { cwd: trace.cwd });
+	const graph = buildReferenceGraph(trace, index);
+	const evictedTokens = [...view.evicted.values()].reduce((sum, state) => sum + state.tokensFreed, 0);
+	const churn = view.itemsEvicted === 0 ? "n/a" : (view.recalls / view.itemsEvicted).toFixed(3);
+	const opCounts = new Map<string, number>();
+	for (const observation of index.observations) {
+		opCounts.set(observation.op, (opCounts.get(observation.op) ?? 0) + 1);
+	}
+	const rewrittenPaths = new Set<string>();
+	for (const edge of graph.edges) {
+		if (edge.kind !== "file_rewrite") continue;
+		const path = index.byRef.get(edge.from)?.path;
+		if (path) rewrittenPaths.add(path);
+	}
+	const lines = [
+		`session: ${trace.id}`,
+		`source: ${trace.source}`,
+		"working set:",
+		`  policy: ${view.lastPolicyId ?? "none"}`,
+		`  eviction events: ${view.evictionEvents}`,
+		`  evicted refs: ${view.evicted.size}`,
+		`  items evicted: ${view.itemsEvicted}`,
+		`  evicted tokens: ${evictedTokens}`,
+		`  recalls: ${view.recalls}`,
+		`  churn: ${churn}`,
+		"  refs:",
+		...([...view.evicted.entries()].length === 0
+			? ["    none"]
+			: [...view.evicted.entries()]
+					.sort(([a], [b]) => a.localeCompare(b))
+					.map(([ref, state]) => `    ${ref} reason=${state.reason} by=${state.by ?? "-"} tokens=${state.tokensFreed}`)),
+		"path index:",
+		`  observations: ${index.observations.length}`,
+		`  ops: ${
+			[...opCounts.entries()]
+				.sort(([a], [b]) => a.localeCompare(b))
+				.map(([op, count]) => `${op}=${count}`)
+				.join(", ") || "none"
+		}`,
+		`  paths with rewrites: ${rewrittenPaths.size}`,
+		...[...rewrittenPaths].sort().map((path) => `    ${path}`),
+		"",
+	];
+	return lines.join("\n");
+}
+
+export async function runContextWorkingSetCommand(args: string[]): Promise<number> {
+	if (args.includes("--help") || args.includes("-h")) {
+		process.stdout.write(WORKING_SET_HELP);
+		return 0;
+	}
+	let session: string | undefined;
+	for (let index = 0; index < args.length; index += 1) {
+		const arg = args[index];
+		if (arg === "--session") {
+			try {
+				session = requiredValue(args, index, arg);
+			} catch (error) {
+				process.stderr.write(
+					`clio-coder context working-set: ${error instanceof Error ? error.message : String(error)}\n${WORKING_SET_HELP}`,
+				);
+				return 2;
+			}
+			index += 1;
+			continue;
+		}
+		process.stderr.write(`clio-coder context working-set: unknown flag ${arg}\n${WORKING_SET_HELP}`);
+		return 2;
+	}
+	if (session === undefined) {
+		process.stderr.write(`clio-coder context working-set: --session is required\n${WORKING_SET_HELP}`);
+		return 2;
+	}
+	try {
+		const source = await sessionPath(session);
+		const raw = await readFile(source, "utf8");
+		const parsed = parseSessionEntries(raw, source);
+		if (parsed.errors.length > 0) throw new Error(parsed.errors.join("; "));
+		const entries = filterEntriesToActivePath(parsed.entries, await pinnedLeafForSession(source));
+		const cwd = await sessionCwdForSession(source);
+		process.stdout.write(
+			formatWorkingSet({
+				id: basename(dirname(source)),
+				source,
+				cwd,
+				entries,
+				turnCount: buildPathIndex(entries, { cwd }).turnCount,
+			}),
+		);
+		return 0;
+	} catch (error) {
+		if (error instanceof CliUsageError) {
+			process.stderr.write(`clio-coder context working-set: ${error.message}\n${WORKING_SET_HELP}`);
+			return 2;
+		}
+		process.stderr.write(
+			`clio-coder context working-set failed: ${error instanceof Error ? error.message : String(error)}\n`,
+		);
+		return 1;
+	}
+}

package/src/cli/context.ts

@@ -10,6 +10,8 @@ const HELP = `Usage:
                     [--target <id>] [--model <id>] [--thinking off|low|medium|high]
   clio-coder context reset [--all] [--yes]
   clio-coder context index [--json]
+  clio-coder context replay --sessions <path>... [options]
+  clio-coder context working-set --session <id|path>
 
 Project context commands:
   clio-coder context              show project context status (CLIO-CODER.md, preload, codewiki)
@@ -18,6 +20,8 @@ Project context commands:
   clio-coder context wiki         generate or inspect the agent-authored Markdown wiki
   clio-coder context reset        clear accumulated project context artifacts
   clio-coder context index        build the codewiki index without model calls
+  clio-coder context replay       compare working-set policies over Clio ledgers
+  clio-coder context working-set  inspect one session's working-set fold and path index
 `;
 
 function printWikiProgress(event: BootstrapProgressEvent): void {
@@ -313,6 +317,10 @@ export async function runContextCommand(args: string[]): Promise<number> {
 			return (await import("./context-clear.js")).runContextClearCommand(rest);
 		case "index":
 			return (await import("./context-index.js")).runContextIndexCommand(rest);
+		case "replay":
+			return (await import("./context-working-set.js")).runContextReplayCommand(rest);
+		case "working-set":
+			return (await import("./context-working-set.js")).runContextWorkingSetCommand(rest);
 		default:
 			process.stderr.write(`clio-coder context: unknown subcommand ${verb}\n`);
 			process.stdout.write(HELP);

package/src/cli/evidence.ts

@@ -1,6 +1,6 @@
 import { InvalidIdError } from "../core/safe-id.js";
 import { clioDataDir, clioStateDir } from "../core/xdg.js";
-import type { EvidenceOverview, EvidenceRunProvenance } from "../domains/evidence/index.js";
+import type { CanonicalTrustStatus, EvidenceOverview, EvidenceRunProvenance } from "../domains/evidence/index.js";
 import {
 	buildEvalEvidence,
 	buildEvidence,
@@ -178,7 +178,7 @@ function renderEvidence(
 	input: Awaited<ReturnType<typeof inspectEvidence>>,
 	provenance: ReadonlyArray<EvidenceRunProvenance> = [],
 ): void {
-	const { overview, findings } = input;
+	const { overview, findings, trustStatus } = input;
 	process.stdout.write(`evidence: ${overview.evidenceId}\n`);
 	process.stdout.write(`source: ${formatSource(overview)}\n`);
 	process.stdout.write(`generated: ${overview.generatedAt}\n`);
@@ -188,6 +188,13 @@ function renderEvidence(
 	process.stdout.write(`blocked tools: ${overview.totals.blockedToolCalls}\n`);
 	process.stdout.write(`tags: ${formatList(overview.tags)}\n`);
 	process.stdout.write(`findings: ${findings.length}\n`);
+	if (trustStatus.projection === "historical_format") {
+		process.stdout.write("trust status: unavailable (historical bundle without canonical projection)\n");
+	} else {
+		for (const run of trustStatus.runs) {
+			process.stdout.write(`trust ${run.runId}: ${formatTrustStatus(run.status)}\n`);
+		}
+	}
 	// Provenance is printed only for runs whose receipts carry it, so a legacy
 	// bundle prints nothing new here.
 	for (const { runId, view } of provenance) {
@@ -197,6 +204,17 @@ function renderEvidence(
 	process.stdout.write(`files: ${formatList(overview.files)}\n`);
 }
 
+function formatTrustStatus(status: CanonicalTrustStatus): string {
+	return [
+		`artifactIntegrity=${status.artifactIntegrity.state}`,
+		`validationGrounding=${status.validationGrounding.state}`,
+		`independentReview=${status.independentReview.state}`,
+		`contextProvenance=${status.contextProvenance.state}`,
+		`autonomyEnforcement=${status.autonomyEnforcement.state}`,
+		`completionEvidence=${status.completionEvidence.state}`,
+	].join(" ");
+}
+
 function renderEvidenceList(overviews: ReadonlyArray<EvidenceOverview>): void {
 	process.stdout.write(`${overviews.length} evidence artifacts\n`);
 	if (overviews.length === 0) return;

package/src/cli/index.ts

@@ -52,6 +52,8 @@ Usage:
   clio-coder context wiki [--update] [--status] [--depth auto|simple|medium|detailed] [--target <id>] [--model <id>]
   clio-coder context reset [--all] [--yes]  clear accumulated project context artifacts
   clio-coder context index [--json]  build the codewiki index without model calls
+  clio-coder context replay --sessions <path>...  compare working-set policies over Clio ledgers
+  clio-coder context working-set --session <id|path>  inspect one session's working-set state
   clio-coder uninstall            remove all Clio Coder state; --remove-binary also unlinks the launcher
   clio-coder upgrade              upgrade Clio Coder and run pending migrations
   clio-coder agents               list discovered agent recipes
@@ -63,6 +65,7 @@ Usage:
   clio-coder trace                query or view the durable dispatch trace mirror
   clio-coder extensions           install, list, enable, disable, or remove extension packages
   clio-coder skills               list, inspect, validate, or install skills
+  clio-coder verifiers            discover, author, validate, edit, or dry-run project checks
   clio-coder docs [topic]         serve the HTML docs of a source checkout on 127.0.0.1 (--no-open to skip browser)
   clio-coder dev <command>        harness instruments; run 'clio-coder dev' for the list
   clio-coder --help, -h           this message
@@ -243,6 +246,7 @@ const COMMAND_HANDLERS = new Map<string, CommandHandler>([
 	["ext", extensionsCommand],
 	["fleet", async (subArgs) => (await import("./fleet.js")).runFleetCommand(subArgs)],
 	["skills", async (subArgs) => (await import("./skills.js")).runSkillsCommand(subArgs)],
+	["verifiers", async (subArgs) => (await import("./verifiers.js")).runVerifiersCommand(subArgs)],
 	["docs", async (subArgs) => (await import("./docs.js")).runDocsCommand(subArgs)],
 	["share", async (subArgs) => (await import("./share.js")).runShareCommand(subArgs)],
 	["export", async (subArgs) => (await import("./share.js")).runExportCommand(subArgs)],