@iowarp/clio-coder 0.3.3 → 0.3.4

package/src/tools/worker-evidence.ts

@@ -1,6 +1,7 @@
 import { mentionsWorkerToolCallCap } from "../core/guardrails.js";
 import type { ReceiptIntegrityResult } from "../domains/dispatch/receipt-integrity.js";
 import type { RunReceipt, RunReceiptVerification } from "../domains/dispatch/types.js";
+import { adaptRunReceiptTrustStatus, type CanonicalTrustStatus } from "../domains/evidence/trust-status.js";
 
 /** Matches a source citation the parent can independently spot-check. */
 const SOURCE_CITATION_PATTERN = /([\w./~-]+):(\d+)/g;
@@ -39,10 +40,10 @@ export const SPOT_CHECK_GUIDANCE =
  * keeps its own role, so this is deliberately narrow; the activity and
  * first-pass labels below carry the honest signal for every other class.
  */
-function isMutationClassRun(receipt: RunReceipt, verification: RunReceiptVerification): boolean {
+function isMutationClassRun(receipt: RunReceipt, status: CanonicalTrustStatus): boolean {
 	// A read-only agent seals `not_applicable`; recon that changes nothing is
 	// the expected outcome there, not a missing effect.
-	if (verification.state === "not_applicable") return false;
+	if (status.validationGrounding.state === "not_applicable") return false;
 	if (receipt.executionRole === "builder" || receipt.executionRole === "recovery") return true;
 	return receipt.quality?.resultContract?.sourceId?.startsWith("agent-result-contract:mutation-report") === true;
 }
@@ -87,7 +88,7 @@ function receiptAdmissionLabels(receipt: RunReceipt): string[] {
  * fixed the file. These labels are the receipt's own counters, so the parent
  * sees the shape of the run before it reads the worker's account of it.
  */
-function receiptActivityLabels(receipt: RunReceipt, verification: RunReceiptVerification): string[] {
+function receiptActivityLabels(receipt: RunReceipt, status: CanonicalTrustStatus): string[] {
 	const labels: string[] = [];
 	const activity = receipt.toolActivity;
 	if (activity !== undefined) {
@@ -98,7 +99,7 @@ function receiptActivityLabels(receipt: RunReceipt, verification: RunReceiptVeri
 		);
 		// The case this whole label set exists for: the task was to change
 		// something and nothing changed, under an exit code that says success.
-		if (!activity.mutatingSucceeded && isMutationClassRun(receipt, verification)) labels.push("mutation_effect=none");
+		if (!activity.mutatingSucceeded && isMutationClassRun(receipt, status)) labels.push("mutation_effect=none");
 	}
 	const findings = receipt.findingsSummary;
 	if (findings !== undefined) {
@@ -119,7 +120,11 @@ export function receiptEvidenceLabels(
 	verification: RunReceiptVerification,
 	integrity: ReceiptIntegrityResult,
 ): string[] {
-	if (!integrity.ok) return [`receipt_integrity=FAILED reason=${JSON.stringify(integrity.reason)}`];
+	const status = adaptRunReceiptTrustStatus({ ...receipt, verification }, { integrity });
+	const canonical = canonicalTrustLabel(status);
+	if (!integrity.ok) {
+		return [canonical, `receipt_integrity=FAILED reason=${JSON.stringify(integrity.reason)}`];
+	}
 	const briefing =
 		receipt.briefing === undefined
 			? "briefing=none"
@@ -132,23 +137,36 @@ export function receiptEvidenceLabels(
 		}${receipt.projectContext.contentHash !== undefined ? ` sha256:${receipt.projectContext.contentHash}` : ""}`;
 	}
 	return [
+		canonical,
 		`receipt_integrity=verified/v${receipt.integrity.version}/${receipt.integrity.algorithm}`,
 		`evidence_verification=${verification.state}/${verification.basis}`,
 		...receiptAdmissionLabels(receipt),
-		...receiptActivityLabels(receipt, verification),
+		...receiptActivityLabels(receipt, status),
 		briefing,
 		projectContext,
 	];
 }
 
+function canonicalTrustLabel(status: CanonicalTrustStatus): string {
+	return [
+		`trust_status=v${status.version}`,
+		`artifactIntegrity:${status.artifactIntegrity.state}`,
+		`validationGrounding:${status.validationGrounding.state}`,
+		`independentReview:${status.independentReview.state}`,
+		`contextProvenance:${status.contextProvenance.state}`,
+		`autonomyEnforcement:${status.autonomyEnforcement.state}`,
+		`completionEvidence:${status.completionEvidence.state}`,
+	].join(" ");
+}
+
 /**
  * Header for delegated worker text, keyed only on integrity-checked receipt
  * verification. The string is shared by dispatch and monitor so detached
  * collection cannot silently assign a different evidence meaning.
  */
-export function workerTextLabel(verification: RunReceiptVerification): string {
-	switch (verification.state) {
-		case "verified":
+export function workerTextLabel(status: CanonicalTrustStatus): string {
+	switch (status.validationGrounding.state) {
+		case "validated":
 			return "worker output (tool-verified):";
 		case "not_applicable":
 			return "reconnaissance output (advisory leads, not validation evidence):";
@@ -166,7 +184,7 @@ export function workerTextLabel(verification: RunReceiptVerification): string {
  */
 export function workerTextNonEvidenceNotices(
 	receipt: RunReceipt,
-	verification: RunReceiptVerification,
+	status: CanonicalTrustStatus,
 	answerText: string,
 ): string[] {
 	const notices: string[] = [];
@@ -184,7 +202,7 @@ export function workerTextNonEvidenceNotices(
 	}
 	if (receipt.toolActivity !== undefined && receipt.toolActivity.succeeded === 0) {
 		notices.push("non-evidence: no tool call succeeded in this run; the text above was written without observed work.");
-	} else if (receipt.toolActivity?.mutatingSucceeded === false && isMutationClassRun(receipt, verification)) {
+	} else if (receipt.toolActivity?.mutatingSucceeded === false && isMutationClassRun(receipt, status)) {
 		// A live verifier run returned {"verdict":"pass"} for a check it never
 		// ran, on a script that does not exist, at exit 0. The parent recovered
 		// only because it independently diffed the tree; say so on the line.
@@ -206,7 +224,12 @@ export function workerTextNonEvidenceNotices(
 			`non-evidence: '${receipt.capabilityMismatch.agentId}' is a ${receipt.capabilityMismatch.capabilityClass} recipe and cannot write to the workspace, but this task classified as ${receipt.capabilityMismatch.taskType}. Nothing it reports as changed can have been changed by it.`,
 		);
 	}
-	if (!failedRun && verification.state === "not_applicable" && answerText.length > 0 && !hasSourceCitation(answerText)) {
+	if (
+		!failedRun &&
+		status.validationGrounding.state === "not_applicable" &&
+		answerText.length > 0 &&
+		!hasSourceCitation(answerText)
+	) {
 		notices.push(
 			"non-evidence: this reconnaissance answer cites no file:line locations; treat its leads as unconfirmed.",
 		);

package/dist/chunk-J7CWMCQD.js

@@ -1,255 +0,0 @@
-import { createRequire as __clioCreateRequire } from "node:module"; const require = __clioCreateRequire(import.meta.url);
-import {
-  gitCommitAttributionEnabled,
-  reportCommitAttributionDiagnostic,
-  withManagedGitCommitAttributionEnvironment
-} from "./chunk-COU2UHX6.js";
-import {
-  clampTimerDelayMs
-} from "./chunk-FQ4SKYE4.js";
-import {
-  AI_AGENT_NAME
-} from "./chunk-6EJMN2Y3.js";
-import {
-  init_esm_shims
-} from "./chunk-3R73A4XB.js";
-
-// src/core/headless-permission.ts
-init_esm_shims();
-var HEADLESS_PERMISSION_DENIED_REASON = "clio-coder run cannot confirm permission requests; rerun interactively to approve this action.";
-var HEADLESS_PERMISSION_DENIED_MARKER = "clio-coder run cannot confirm permission requests";
-
-// src/core/bash-exec.ts
-init_esm_shims();
-import { spawn } from "node:child_process";
-var BASH_HARD_CAP_BYTES = 16 * 1024 * 1024;
-var CLIO_CONTROL_ENV_KEYS = ["CLIO_CODER_INTERACTIVE", "CLIO_CODER_RESUME_SESSION_ID"];
-var BASH_UPDATE_THROTTLE_MS = 100;
-function buildToolEnv() {
-  const env = { ...process.env };
-  env.AI_AGENT = AI_AGENT_NAME;
-  for (const key of CLIO_CONTROL_ENV_KEYS) {
-    Reflect.deleteProperty(env, key);
-  }
-  return env;
-}
-var LOGIN_ENV_CAPTURE_TIMEOUT_MS = 1e4;
-var loginEnvCapture = null;
-function parseNullDelimitedEnv(raw) {
-  const env = {};
-  for (const entry of raw.split("\0")) {
-    if (entry.length === 0) continue;
-    const eq = entry.indexOf("=");
-    if (eq <= 0) continue;
-    env[entry.slice(0, eq)] = entry.slice(eq + 1);
-  }
-  return typeof env.PATH === "string" && env.PATH.length > 0 ? env : null;
-}
-function captureLoginEnv() {
-  return new Promise((resolve) => {
-    let stdout = "";
-    let settled = false;
-    const finish = (value) => {
-      if (settled) return;
-      settled = true;
-      clearTimeout(timer);
-      resolve(value);
-    };
-    const child = spawn("/bin/bash", ["-lc", "env -0"], {
-      env: buildToolEnv(),
-      stdio: ["ignore", "pipe", "ignore"]
-    });
-    const timer = setTimeout(() => {
-      child.kill("SIGKILL");
-      finish(null);
-    }, LOGIN_ENV_CAPTURE_TIMEOUT_MS);
-    child.stdout?.on("data", (chunk) => {
-      stdout += chunk.toString("utf8");
-    });
-    child.on("error", () => finish(null));
-    child.on("close", (code) => finish(code === 0 ? parseNullDelimitedEnv(stdout) : null));
-  });
-}
-async function bashSpawnPlan() {
-  loginEnvCapture ??= captureLoginEnv();
-  const captured = await loginEnvCapture;
-  if (captured === null) return { mode: "-lc", env: buildToolEnv() };
-  const env = { ...process.env, ...captured };
-  env.AI_AGENT = AI_AGENT_NAME;
-  for (const key of CLIO_CONTROL_ENV_KEYS) {
-    Reflect.deleteProperty(env, key);
-  }
-  return { mode: "-c", env };
-}
-function combineBashOutput(result) {
-  const { stdout, stderr } = result;
-  return stderr.length > 0 ? `${stdout}${stdout.endsWith("\n") || stdout.length === 0 ? "" : "\n"}${stderr}` : stdout;
-}
-async function runBashCommand(command, options = {}) {
-  const plan = await bashSpawnPlan();
-  const attribution = withManagedGitCommitAttributionEnvironment(plan.env, {
-    cwd: options.cwd ?? process.cwd(),
-    enabled: gitCommitAttributionEnabled(process.env)
-  });
-  reportCommitAttributionDiagnostic(attribution.diagnostic);
-  return new Promise((resolve) => {
-    const timeout = clampTimerDelayMs(options.timeoutMs ?? 3e5);
-    let aborted = false;
-    let timedOut = false;
-    let settled = false;
-    let timeoutId = null;
-    let killGraceTimer = null;
-    let killSent = false;
-    let stdout = "";
-    let stderr = "";
-    let outputBytes = 0;
-    let outputCapped = false;
-    let updateTimer = null;
-    let updateDirty = false;
-    let lastUpdateAt = 0;
-    const child = spawn("/bin/bash", [plan.mode, command], {
-      ...options.cwd === void 0 ? {} : { cwd: options.cwd },
-      env: attribution.env,
-      detached: process.platform !== "win32",
-      stdio: ["ignore", "pipe", "pipe"]
-    });
-    const emitUpdate = () => {
-      if (options.onUpdate === void 0 || !updateDirty) return;
-      updateDirty = false;
-      lastUpdateAt = Date.now();
-      try {
-        options.onUpdate({ stdout, stderr, outputBytes: Math.min(outputBytes, BASH_HARD_CAP_BYTES) });
-      } catch {
-      }
-    };
-    const clearUpdateTimer = () => {
-      if (updateTimer === null) return;
-      clearTimeout(updateTimer);
-      updateTimer = null;
-    };
-    const scheduleUpdate = () => {
-      if (options.onUpdate === void 0) return;
-      updateDirty = true;
-      const delay = BASH_UPDATE_THROTTLE_MS - (Date.now() - lastUpdateAt);
-      if (delay <= 0) {
-        clearUpdateTimer();
-        emitUpdate();
-        return;
-      }
-      updateTimer ??= setTimeout(() => {
-        updateTimer = null;
-        emitUpdate();
-      }, delay);
-    };
-    const finishUpdates = () => {
-      clearUpdateTimer();
-      emitUpdate();
-    };
-    if (options.onUpdate !== void 0) {
-      updateDirty = true;
-      emitUpdate();
-    }
-    const clearKillGraceTimer = () => {
-      if (!killGraceTimer) return;
-      clearTimeout(killGraceTimer);
-      killGraceTimer = null;
-    };
-    const sendSignal = (signalName) => {
-      const pid = child.pid;
-      if (pid && process.platform !== "win32") {
-        try {
-          process.kill(-pid, signalName);
-          return;
-        } catch {
-        }
-      }
-      child.kill(signalName);
-    };
-    const killChild = () => {
-      if (killSent) return;
-      killSent = true;
-      sendSignal("SIGTERM");
-      killGraceTimer = setTimeout(() => {
-        sendSignal("SIGKILL");
-      }, 5e3);
-    };
-    function onAbort() {
-      aborted = true;
-      killChild();
-    }
-    if (timeout > 0) {
-      timeoutId = setTimeout(() => {
-        timedOut = true;
-        killChild();
-      }, timeout);
-    }
-    if (options.signal?.aborted) {
-      onAbort();
-    } else {
-      options.signal?.addEventListener("abort", onAbort, { once: true });
-    }
-    const appendChunk = (target, chunk) => {
-      if (outputCapped) return;
-      outputBytes += chunk.byteLength;
-      if (outputBytes > BASH_HARD_CAP_BYTES) {
-        const remaining = BASH_HARD_CAP_BYTES - (outputBytes - chunk.byteLength);
-        if (remaining > 0) {
-          const slice = chunk.subarray(0, remaining).toString("utf8");
-          if (target === "stdout") stdout += slice;
-          else stderr += slice;
-        }
-        outputCapped = true;
-        scheduleUpdate();
-        killChild();
-        return;
-      }
-      if (target === "stdout") stdout += chunk.toString("utf8");
-      else stderr += chunk.toString("utf8");
-      scheduleUpdate();
-    };
-    child.stdout?.on("data", (chunk) => appendChunk("stdout", chunk));
-    child.stderr?.on("data", (chunk) => appendChunk("stderr", chunk));
-    child.on("error", (error) => {
-      if (settled) return;
-      settled = true;
-      if (timeoutId) clearTimeout(timeoutId);
-      clearKillGraceTimer();
-      finishUpdates();
-      options.signal?.removeEventListener("abort", onAbort);
-      resolve({
-        error,
-        stdout,
-        stderr,
-        exitCode: null,
-        signal: null,
-        aborted,
-        timedOut,
-        outputCapped
-      });
-    });
-    child.on("close", (code, signalName) => {
-      if (settled) return;
-      settled = true;
-      if (timeoutId) clearTimeout(timeoutId);
-      clearKillGraceTimer();
-      finishUpdates();
-      options.signal?.removeEventListener("abort", onAbort);
-      const error = code === 0 && signalName === null ? null : {
-        name: "Error",
-        message: signalName ? `command terminated by ${signalName}` : `command exited with code ${code ?? "?"}`,
-        code: code ?? void 0,
-        signal: signalName ?? void 0
-      };
-      resolve({ error, stdout, stderr, exitCode: code, signal: signalName, aborted, timedOut, outputCapped });
-    });
-  });
-}
-
-export {
-  HEADLESS_PERMISSION_DENIED_REASON,
-  HEADLESS_PERMISSION_DENIED_MARKER,
-  BASH_HARD_CAP_BYTES,
-  combineBashOutput,
-  runBashCommand
-};
-//# sourceMappingURL=chunk-J7CWMCQD.js.map

package/dist/chunk-T6YILFSB.js

@@ -1,80 +0,0 @@
-import { createRequire as __clioCreateRequire } from "node:module"; const require = __clioCreateRequire(import.meta.url);
-import {
-  init_esm_shims
-} from "./chunk-3R73A4XB.js";
-
-// src/core/skill-activation.ts
-init_esm_shims();
-var SKILL_SUGGESTION_ANCHOR = "Suggested skill: /skill <name>";
-var SKILL_SUGGESTION_PREFIX = SKILL_SUGGESTION_ANCHOR.slice(0, SKILL_SUGGESTION_ANCHOR.indexOf("<name>"));
-var SKILL_SURFACE_EXEMPT_TOOLS = /* @__PURE__ */ new Set(["context", "ask_user"]);
-function evaluateSkillToolSurface(policy, tool) {
-  if (!policy || policy.loadedSkillPolicies.size === 0) return null;
-  if (SKILL_SURFACE_EXEMPT_TOOLS.has(tool)) return null;
-  const entries = [...policy.loadedSkillPolicies.entries()];
-  const skills = entries.map(([name]) => name);
-  const disallowedBy = entries.filter(([, declared]) => declared.disallowedTools?.includes(tool) === true).map(([name]) => name);
-  if (disallowedBy.length > 0) return { skills, mergedAllowedTools: null, disallowedBy };
-  const allowLists = entries.map(([, declared]) => declared.allowedTools);
-  if (allowLists.some((list) => list === void 0 || list.length === 0)) return null;
-  const merged = [...new Set(allowLists.flatMap((list) => [...list ?? []]))];
-  if (merged.includes(tool)) return null;
-  return { skills, mergedAllowedTools: merged, disallowedBy: [] };
-}
-function agentSkillToolPolicy(skillNames) {
-  const allowedSkillNames = [...new Set(skillNames.map((name) => name.trim()).filter((name) => name.length > 0))];
-  if (allowedSkillNames.length === 0) return void 0;
-  return {
-    allowedSkillNames,
-    requests: allowedSkillNames.map((name) => ({ name, args: "", source: "recipe", installed: true })),
-    loadedSkillNames: /* @__PURE__ */ new Set(),
-    loadedSkillPolicies: /* @__PURE__ */ new Map()
-  };
-}
-function trimmedString(value) {
-  return typeof value === "string" && value.trim().length > 0 ? value.trim() : null;
-}
-function skillActivationFromSource(source, triggeredBy, turnId) {
-  const sourceOrigin = trimmedString(source.sourceOrigin) ?? trimmedString(source.sourceInfo?.source);
-  return {
-    name: source.name,
-    filePath: source.filePath,
-    hash: source.hash,
-    source: source.source,
-    ...sourceOrigin ? { sourceOrigin } : {},
-    triggeredBy,
-    ...turnId ? { turnId } : {}
-  };
-}
-function skillActivationFromToolDetails(details, turnId) {
-  if (!details || typeof details !== "object" || Array.isArray(details)) return null;
-  const record = details;
-  const name = trimmedString(record.name);
-  const filePath = trimmedString(record.filePath) ?? trimmedString(record.path);
-  const hash = trimmedString(record.hash);
-  const source = trimmedString(record.source);
-  const sourceOrigin = trimmedString(record.sourceOrigin) ?? trimmedString(record.origin);
-  if (!name || !filePath || !hash || !source) return null;
-  const activation = skillActivationFromSource(
-    { name, filePath, hash, source, ...sourceOrigin ? { sourceOrigin } : {} },
-    "tool",
-    turnId
-  );
-  if (record.drift === "match" || record.drift === "mismatch") activation.drift = record.drift;
-  return activation;
-}
-function isSkillActivation(value) {
-  if (!value || typeof value !== "object" || Array.isArray(value)) return false;
-  const record = value;
-  return typeof record.name === "string" && typeof record.filePath === "string" && typeof record.hash === "string" && typeof record.source === "string" && (record.sourceOrigin === void 0 || typeof record.sourceOrigin === "string") && (record.triggeredBy === "slash-command" || record.triggeredBy === "tool") && (record.turnId === void 0 || typeof record.turnId === "string") && (record.runId === void 0 || typeof record.runId === "string");
-}
-
-export {
-  SKILL_SUGGESTION_ANCHOR,
-  SKILL_SUGGESTION_PREFIX,
-  evaluateSkillToolSurface,
-  agentSkillToolPolicy,
-  skillActivationFromToolDetails,
-  isSkillActivation
-};
-//# sourceMappingURL=chunk-T6YILFSB.js.map