@iowarp/clio-coder 0.3.3 → 0.3.4

package/dist/chunk-BEY543CS.js

@@ -0,0 +1,258 @@
+import { createRequire as __clioCreateRequire } from "node:module"; const require = __clioCreateRequire(import.meta.url);
+import {
+  init_esm_shims
+} from "./chunk-3R73A4XB.js";
+
+// src/core/skill-activation.ts
+init_esm_shims();
+var SKILL_SUGGESTION_ANCHOR = "Suggested skill: /skill <name>";
+var SKILL_SUGGESTION_PREFIX = SKILL_SUGGESTION_ANCHOR.slice(0, SKILL_SUGGESTION_ANCHOR.indexOf("<name>"));
+var SKILL_SURFACE_EXEMPT_TOOLS = /* @__PURE__ */ new Set(["context", "ask_user"]);
+function evaluateSkillToolSurface(policy, tool) {
+  if (!policy || policy.loadedSkillPolicies.size === 0) return null;
+  if (SKILL_SURFACE_EXEMPT_TOOLS.has(tool)) return null;
+  const entries = [...policy.loadedSkillPolicies.entries()];
+  const skills = entries.map(([name]) => name);
+  const disallowedBy = entries.filter(([, declared]) => declared.disallowedTools?.includes(tool) === true).map(([name]) => name);
+  if (disallowedBy.length > 0) return { skills, mergedAllowedTools: null, disallowedBy };
+  const allowLists = entries.map(([, declared]) => declared.allowedTools);
+  if (allowLists.some((list) => list === void 0 || list.length === 0)) return null;
+  const merged = [...new Set(allowLists.flatMap((list) => [...list ?? []]))];
+  if (merged.includes(tool)) return null;
+  return { skills, mergedAllowedTools: merged, disallowedBy: [] };
+}
+function agentSkillToolPolicy(skillNames) {
+  const allowedSkillNames = [...new Set(skillNames.map((name) => name.trim()).filter((name) => name.length > 0))];
+  if (allowedSkillNames.length === 0) return void 0;
+  return {
+    allowedSkillNames,
+    requests: allowedSkillNames.map((name) => ({ name, args: "", source: "recipe", installed: true })),
+    loadedSkillNames: /* @__PURE__ */ new Set(),
+    loadedSkillPolicies: /* @__PURE__ */ new Map()
+  };
+}
+function trimmedString(value) {
+  return typeof value === "string" && value.trim().length > 0 ? value.trim() : null;
+}
+function skillActivationFromSource(source, triggeredBy, turnId) {
+  const sourceOrigin = trimmedString(source.sourceOrigin) ?? trimmedString(source.sourceInfo?.source);
+  return {
+    name: source.name,
+    filePath: source.filePath,
+    hash: source.hash,
+    source: source.source,
+    ...sourceOrigin ? { sourceOrigin } : {},
+    triggeredBy,
+    ...turnId ? { turnId } : {}
+  };
+}
+function skillActivationFromToolDetails(details, turnId) {
+  if (!details || typeof details !== "object" || Array.isArray(details)) return null;
+  const record = details;
+  const name = trimmedString(record.name);
+  const filePath = trimmedString(record.filePath) ?? trimmedString(record.path);
+  const hash = trimmedString(record.hash);
+  const source = trimmedString(record.source);
+  const sourceOrigin = trimmedString(record.sourceOrigin) ?? trimmedString(record.origin);
+  if (!name || !filePath || !hash || !source) return null;
+  const activation = skillActivationFromSource(
+    { name, filePath, hash, source, ...sourceOrigin ? { sourceOrigin } : {} },
+    "tool",
+    turnId
+  );
+  if (record.drift === "match" || record.drift === "mismatch") activation.drift = record.drift;
+  return activation;
+}
+function isSkillActivation(value) {
+  if (!value || typeof value !== "object" || Array.isArray(value)) return false;
+  const record = value;
+  return typeof record.name === "string" && typeof record.filePath === "string" && typeof record.hash === "string" && typeof record.source === "string" && (record.sourceOrigin === void 0 || typeof record.sourceOrigin === "string") && (record.triggeredBy === "slash-command" || record.triggeredBy === "tool") && (record.turnId === void 0 || typeof record.turnId === "string") && (record.runId === void 0 || typeof record.runId === "string");
+}
+
+// src/domains/session/entries.ts
+init_esm_shims();
+var EVICTION_REASONS = [
+  "superseded_read",
+  "stale_after_mutation",
+  "listing_consumed",
+  "failure_resolved",
+  "thinking_turn_closed",
+  "age_horizon",
+  "operator"
+];
+var EVICTION_TRIGGERS = ["pressure", "operator"];
+var RECALL_TRIGGERS = ["tool", "operator"];
+var SESSION_ENTRY_KINDS = [
+  "message",
+  "bashExecution",
+  "custom",
+  "modelChange",
+  "thinkingLevelChange",
+  "fileEntry",
+  "branchSummary",
+  "compactionSummary",
+  "sessionInfo",
+  "label",
+  "protectedArtifact",
+  "skillActivation",
+  "taskLedger",
+  "decisionLedger",
+  "workerRun",
+  "contextEviction",
+  "contextRecall"
+];
+function isRecord(value) {
+  return !!value && typeof value === "object";
+}
+function isString(value) {
+  return typeof value === "string";
+}
+function isOptionalString(value) {
+  return value === void 0 || typeof value === "string";
+}
+function isOptionalBoolean(value) {
+  return value === void 0 || typeof value === "boolean";
+}
+function isNumber(value) {
+  return typeof value === "number" && Number.isFinite(value);
+}
+function isPositiveInteger(value) {
+  return isNumber(value) && Number.isInteger(value) && value > 0;
+}
+function isOptionalNumber(value) {
+  return value === void 0 || isNumber(value);
+}
+function isNullableString(value) {
+  return value === null || typeof value === "string";
+}
+function isOneOf(value, allowed) {
+  return typeof value === "string" && allowed.includes(value);
+}
+function isStringArray(value) {
+  return Array.isArray(value) && value.every((item) => typeof item === "string");
+}
+function hasBaseSessionEntryFields(v) {
+  return isString(v.turnId) && isNullableString(v.parentTurnId) && isString(v.timestamp);
+}
+var MESSAGE_ROLES = ["user", "assistant", "tool_call", "tool_result", "system", "checkpoint"];
+var FILE_OPERATIONS = ["read", "write", "edit", "create", "delete"];
+var COMPACTION_TRIGGERS = ["auto", "force", "overflow"];
+var PROTECTED_ARTIFACT_SOURCES = [
+  "validation",
+  "middleware",
+  "user",
+  "session"
+];
+var TASK_LEDGER_STATUSES = ["pending", "active", "completed", "blocked", "cancelled"];
+var TASK_LEDGER_EVIDENCE_STATUSES = [
+  "required",
+  "pending",
+  "passed",
+  "failed",
+  "missing"
+];
+var DECISION_STATUSES = ["active", "superseded"];
+var DECISION_INTERVIEW_STATUSES = ["complete", "cancelled"];
+var WORKER_RUN_ORIGINS = ["user", "agent"];
+var WORKER_RUN_RUNTIME_KINDS = ["clio", "acp", "claude-sdk", "claude-code"];
+function isWorkerRunRuntime(value) {
+  if (!isRecord(value)) return false;
+  return isOneOf(value.kind, WORKER_RUN_RUNTIME_KINDS) && isOptionalString(value.targetId) && isOptionalString(value.wireModelId) && isOptionalString(value.peerId);
+}
+function isTaskLedgerGoal(value) {
+  if (!isRecord(value)) return false;
+  if (!isString(value.id) || !isString(value.title)) return false;
+  if (!isOneOf(value.status, TASK_LEDGER_STATUSES)) return false;
+  if (value.parentGoalId !== void 0 && !isNullableString(value.parentGoalId)) return false;
+  const hasPairedProvenance = value.origin === "user" ? isString(value.userTaskId) && /^u[1-9]\d*$/.test(value.userTaskId) : (value.origin === void 0 || value.origin === "agent") && value.userTaskId === void 0;
+  return isOptionalString(value.description) && hasPairedProvenance;
+}
+function isTaskLedgerEvidence(value) {
+  if (!isRecord(value)) return false;
+  if (!isString(value.id) || !isString(value.description)) return false;
+  if (!isOneOf(value.status, TASK_LEDGER_EVIDENCE_STATUSES)) return false;
+  return isOptionalString(value.command) && isOptionalString(value.artifactPath) && isOptionalString(value.observedAt) && isOptionalString(value.notes);
+}
+function isDecisionRecord(value) {
+  if (!isRecord(value)) return false;
+  if (!isString(value.key) || !/^[a-z0-9]+(?:_[a-z0-9]+)*$/.test(value.key)) return false;
+  if (!isString(value.value) || !isOneOf(value.status, DECISION_STATUSES) || !isString(value.decidedAt)) return false;
+  if (!isOptionalString(value.label) || !isOptionalString(value.source_question)) return false;
+  if (!isOptionalString(value.revisedAt) || !isOptionalString(value.correction)) return false;
+  return value.status === "superseded" ? isString(value.revisedAt) : value.revisedAt === void 0 && value.correction === void 0;
+}
+function isOptionalCompactionUsage(value) {
+  if (value === void 0) return true;
+  if (!isRecord(value)) return false;
+  const cost = value.cost;
+  return isNumber(value.input) && isNumber(value.output) && isNumber(value.cacheRead) && isNumber(value.cacheWrite) && isNumber(value.reasoning) && isNumber(value.totalTokens) && isNumber(value.apiCalls) && isRecord(cost) && isNumber(cost.total);
+}
+function isProtectedArtifact(value) {
+  if (!isRecord(value)) return false;
+  return isString(value.path) && isString(value.protectedAt) && isString(value.reason) && isOneOf(value.source, PROTECTED_ARTIFACT_SOURCES) && isOptionalString(value.validationCommand) && isOptionalNumber(value.validationExitCode);
+}
+function isSessionHeader(value) {
+  if (!isRecord(value)) return false;
+  return value.type === "session" && isPositiveInteger(value.version) && isString(value.id) && isString(value.timestamp) && isString(value.cwd) && isOptionalString(value.parentSession) && isOptionalString(value.parentTurnId);
+}
+function isWorkingSetRef(value) {
+  return isRecord(value) && isString(value.entry);
+}
+function isEvictedItem(value) {
+  return isRecord(value) && isWorkingSetRef(value.ref) && isOneOf(value.reason, EVICTION_REASONS) && isNumber(value.tokensFreed) && isString(value.marker) && isOptionalString(value.by);
+}
+function isSessionEntry(value) {
+  if (!value || typeof value !== "object") return false;
+  const v = value;
+  if (!hasBaseSessionEntryFields(v)) return false;
+  if (!isOneOf(v.kind, SESSION_ENTRY_KINDS)) return false;
+  switch (v.kind) {
+    case "message":
+      return Object.hasOwn(v, "payload") && isOneOf(v.role, MESSAGE_ROLES);
+    case "bashExecution":
+      return isString(v.command) && isString(v.output) && (v.exitCode === null || isNumber(v.exitCode)) && typeof v.cancelled === "boolean" && typeof v.truncated === "boolean" && isOptionalString(v.fullOutputPath) && isOptionalBoolean(v.excludeFromContext);
+    case "custom":
+      return isString(v.customType) && isOptionalBoolean(v.display);
+    case "modelChange":
+      return isString(v.provider) && isString(v.modelId) && isOptionalString(v.target);
+    case "thinkingLevelChange":
+      return isString(v.thinkingLevel);
+    case "fileEntry":
+      return isString(v.path) && isOneOf(v.operation, FILE_OPERATIONS) && isOptionalNumber(v.bytes) && isOptionalString(v.hash);
+    case "branchSummary":
+      return isString(v.fromTurnId) && isString(v.summary);
+    case "compactionSummary":
+      return isString(v.summary) && isNumber(v.tokensBefore) && isString(v.firstKeptTurnId) && isOptionalCompactionUsage(v.usage) && (v.trigger === void 0 || isOneOf(v.trigger, COMPACTION_TRIGGERS)) && isOptionalNumber(v.tokensAfter) && isOptionalNumber(v.messagesSummarized) && isOptionalBoolean(v.isSplitTurn);
+    case "sessionInfo":
+      return isOptionalString(v.name) && isOptionalString(v.targetTurnId) && isOptionalString(v.label);
+    case "label":
+      return isString(v.targetTurnId) && isOptionalString(v.label);
+    case "protectedArtifact":
+      return v.action === "protect" && isProtectedArtifact(v.artifact) && isOptionalString(v.toolName) && isOptionalString(v.toolCallId) && isOptionalString(v.runId) && isOptionalString(v.correlationId);
+    case "skillActivation":
+      return isSkillActivation(v.activation);
+    case "taskLedger":
+      return isOptionalString(v.boardId) && Array.isArray(v.goals) && v.goals.every(isTaskLedgerGoal) && Array.isArray(v.subgoals) && v.subgoals.every(isTaskLedgerGoal) && isStringArray(v.activeRunIds) && Array.isArray(v.requiredValidationEvidence) && v.requiredValidationEvidence.every(isTaskLedgerEvidence);
+    case "decisionLedger":
+      return isString(v.interviewId) && isOneOf(v.interviewStatus, DECISION_INTERVIEW_STATUSES) && isString(v.startedAt) && isString(v.endedAt) && isNumber(v.roundCount) && Number.isInteger(v.roundCount) && v.roundCount >= 0 && isOptionalString(v.summary) && isOptionalString(v.transcriptPath) && Array.isArray(v.decisions) && v.decisions.every(isDecisionRecord);
+    case "workerRun":
+      return isString(v.assignmentId) && isString(v.runId) && isOneOf(v.origin, WORKER_RUN_ORIGINS) && isString(v.agentId) && isWorkerRunRuntime(v.runtime) && isOptionalString(v.parentToolCallId);
+    case "contextEviction":
+      return isString(v.policyId) && isOneOf(v.trigger, EVICTION_TRIGGERS) && Array.isArray(v.evicted) && v.evicted.every(isEvictedItem) && isNumber(v.tokensBefore) && isNumber(v.tokensAfter) && (v.pressureBefore === null || isNumber(v.pressureBefore)) && (v.snapshotIdBefore === null || isString(v.snapshotIdBefore));
+    case "contextRecall":
+      return isWorkingSetRef(v.ref) && isOneOf(v.trigger, RECALL_TRIGGERS) && isNumber(v.tokensReadmitted) && isOptionalString(v.toolCallId);
+  }
+  return false;
+}
+
+export {
+  SKILL_SUGGESTION_ANCHOR,
+  SKILL_SUGGESTION_PREFIX,
+  evaluateSkillToolSurface,
+  agentSkillToolPolicy,
+  skillActivationFromToolDetails,
+  isSkillActivation,
+  isSessionHeader,
+  isSessionEntry
+};
+//# sourceMappingURL=chunk-BEY543CS.js.map

package/dist/{chunk-6N5PTWMY.js → chunk-BP4OYD6A.js}

@@ -1,4 +1,7 @@
 import { createRequire as __clioCreateRequire } from "node:module"; const require = __clioCreateRequire(import.meta.url);
+import {
+  adaptRunReceiptTrustStatus
+} from "./chunk-QQL5RT5M.js";
 import {
   mentionsWorkerToolCallCap
 } from "./chunk-4ZG3XFUR.js";
@@ -22,8 +25,8 @@ function hasSourceCitation(text) {
   return sourceCitations(text).length > 0;
 }
 var SPOT_CHECK_GUIDANCE = 'Spot-check delegated claims before repeating them: re-read any cited file:line location, and re-run or inspect the named validation before repeating a "tests pass" claim.';
-function isMutationClassRun(receipt, verification) {
-  if (verification.state === "not_applicable") return false;
+function isMutationClassRun(receipt, status) {
+  if (status.validationGrounding.state === "not_applicable") return false;
   if (receipt.executionRole === "builder" || receipt.executionRole === "recovery") return true;
   return receipt.quality?.resultContract?.sourceId?.startsWith("agent-result-contract:mutation-report") === true;
 }
@@ -43,14 +46,14 @@ function receiptAdmissionLabels(receipt) {
   }
   return labels;
 }
-function receiptActivityLabels(receipt, verification) {
+function receiptActivityLabels(receipt, status) {
   const labels = [];
   const activity = receipt.toolActivity;
   if (activity !== void 0) {
     labels.push(
       `work=calls:${activity.calls} ok:${activity.succeeded} failed:${activity.failed} blocked:${activity.blocked} mutations:${activity.mutatingSucceeded ? "yes" : "no"}`
     );
-    if (!activity.mutatingSucceeded && isMutationClassRun(receipt, verification)) labels.push("mutation_effect=none");
+    if (!activity.mutatingSucceeded && isMutationClassRun(receipt, status)) labels.push("mutation_effect=none");
   }
   const findings = receipt.findingsSummary;
   if (findings !== void 0) {
@@ -60,7 +63,11 @@ function receiptActivityLabels(receipt, verification) {
   return labels;
 }
 function receiptEvidenceLabels(receipt, verification, integrity) {
-  if (!integrity.ok) return [`receipt_integrity=FAILED reason=${JSON.stringify(integrity.reason)}`];
+  const status = adaptRunReceiptTrustStatus({ ...receipt, verification }, { integrity });
+  const canonical = canonicalTrustLabel(status);
+  if (!integrity.ok) {
+    return [canonical, `receipt_integrity=FAILED reason=${JSON.stringify(integrity.reason)}`];
+  }
   const briefing = receipt.briefing === void 0 ? "briefing=none" : `briefing=bytes:${receipt.briefing.bytes} sha256:${receipt.briefing.contentHash}`;
   let projectContext = "project_context=absent";
   if (receipt.projectContext !== void 0) {
@@ -68,17 +75,29 @@ function receiptEvidenceLabels(receipt, verification, integrity) {
     projectContext = `project_context=${receipt.projectContext.tier} chars:${receipt.projectContext.chars ?? 0}${sections.length > 0 ? ` sections:${[...sections].sort().join(",")}` : ""}${receipt.projectContext.contentHash !== void 0 ? ` sha256:${receipt.projectContext.contentHash}` : ""}`;
   }
   return [
+    canonical,
     `receipt_integrity=verified/v${receipt.integrity.version}/${receipt.integrity.algorithm}`,
     `evidence_verification=${verification.state}/${verification.basis}`,
     ...receiptAdmissionLabels(receipt),
-    ...receiptActivityLabels(receipt, verification),
+    ...receiptActivityLabels(receipt, status),
     briefing,
     projectContext
   ];
 }
-function workerTextLabel(verification) {
-  switch (verification.state) {
-    case "verified":
+function canonicalTrustLabel(status) {
+  return [
+    `trust_status=v${status.version}`,
+    `artifactIntegrity:${status.artifactIntegrity.state}`,
+    `validationGrounding:${status.validationGrounding.state}`,
+    `independentReview:${status.independentReview.state}`,
+    `contextProvenance:${status.contextProvenance.state}`,
+    `autonomyEnforcement:${status.autonomyEnforcement.state}`,
+    `completionEvidence:${status.completionEvidence.state}`
+  ].join(" ");
+}
+function workerTextLabel(status) {
+  switch (status.validationGrounding.state) {
+    case "validated":
       return "worker output (tool-verified):";
     case "not_applicable":
       return "reconnaissance output (advisory leads, not validation evidence):";
@@ -88,7 +107,7 @@ function workerTextLabel(verification) {
       return "worker claims (unverified prose):";
   }
 }
-function workerTextNonEvidenceNotices(receipt, verification, answerText) {
+function workerTextNonEvidenceNotices(receipt, status, answerText) {
   const notices = [];
   const failedRun = receipt.exitCode !== 0 || receipt.outcome !== void 0 && receipt.outcome !== "succeeded";
   if (mentionsWorkerToolCallCap(receipt.failureMessage) || mentionsWorkerToolCallCap(receipt.outcomeDetail)) {
@@ -102,7 +121,7 @@ function workerTextNonEvidenceNotices(receipt, verification, answerText) {
   }
   if (receipt.toolActivity !== void 0 && receipt.toolActivity.succeeded === 0) {
     notices.push("non-evidence: no tool call succeeded in this run; the text above was written without observed work.");
-  } else if (receipt.toolActivity?.mutatingSucceeded === false && isMutationClassRun(receipt, verification)) {
+  } else if (receipt.toolActivity?.mutatingSucceeded === false && isMutationClassRun(receipt, status)) {
     notices.push(
       "non-evidence: this run was dispatched as work that changes the tree, but no mutating tool call succeeded. Nothing was written. Confirm with a diff before repeating any claim that something was fixed."
     );
@@ -119,7 +138,7 @@ function workerTextNonEvidenceNotices(receipt, verification, answerText) {
       `non-evidence: '${receipt.capabilityMismatch.agentId}' is a ${receipt.capabilityMismatch.capabilityClass} recipe and cannot write to the workspace, but this task classified as ${receipt.capabilityMismatch.taskType}. Nothing it reports as changed can have been changed by it.`
     );
   }
-  if (!failedRun && verification.state === "not_applicable" && answerText.length > 0 && !hasSourceCitation(answerText)) {
+  if (!failedRun && status.validationGrounding.state === "not_applicable" && answerText.length > 0 && !hasSourceCitation(answerText)) {
     notices.push(
       "non-evidence: this reconnaissance answer cites no file:line locations; treat its leads as unconfirmed."
     );
@@ -133,4 +152,4 @@ export {
   workerTextLabel,
   workerTextNonEvidenceNotices
 };
-//# sourceMappingURL=chunk-6N5PTWMY.js.map
+//# sourceMappingURL=chunk-BP4OYD6A.js.map