@iowarp/clio-coder 0.3.3 → 0.3.6

package/dist/{chunk-CBCAPZAA.js → chunk-E25LMLRW.js}

@@ -5,7 +5,7 @@ import {
   settingsPath,
   updateSavedSettingsDocument,
   validateSettings
-} from "./chunk-A3CYT5EX.js";
+} from "./chunk-AD2SYQYC.js";
 import {
   require_dist
 } from "./chunk-APJ265NV.js";
@@ -226,4 +226,4 @@ export {
   updateLayeredSettings,
   settingsSourceFor
 };
-//# sourceMappingURL=chunk-CBCAPZAA.js.map
+//# sourceMappingURL=chunk-E25LMLRW.js.map

package/dist/{chunk-ZWMF7253.js → chunk-E2ER4LJF.js}

@@ -549,8 +549,277 @@ function clioTheme() {
 
 // src/interactive/clio-editor.ts
 init_esm_shims();
+
+// src/interactive/overlay-frame.ts
+init_esm_shims();
+var DEFAULT_SELECT_THEME = selectListTheme(clioTheme());
+var DEFAULT_SETTINGS_THEME = settingsListTheme(clioTheme());
+var FocusBox = class extends Box {
+  inputTarget;
+  onInput;
+  constructor(children, options) {
+    super(options?.x ?? 1, options?.y ?? 0);
+    const childList = Array.isArray(children) ? children : [children];
+    for (const child of childList) this.addChild(child);
+    this.inputTarget = options?.inputTarget === void 0 ? childList[0] ?? null : options.inputTarget;
+    this.onInput = options?.onInput;
+  }
+  handleInput(data) {
+    if (this.onInput) {
+      this.onInput(data);
+      return;
+    }
+    this.inputTarget?.handleInput?.(data);
+  }
+};
+function resolveTone(tone) {
+  return typeof tone === "function" ? tone() : tone;
+}
+function clioFrame(text, token = "frame") {
+  return clioTheme().fg(token, text);
+}
+function clioTitle(text, token) {
+  return token === void 0 ? screenTitle(clioTheme(), text) : clioTheme().style(token, text, { bold: true });
+}
+function clioError(text) {
+  return clioTheme().fg("error", text);
+}
+function brandedTopBorder(label, innerWidth, tone) {
+  const frame2 = (text) => clioFrame(text, tone ?? "frame");
+  const clean = label.replace(/^[┌┐└┘├┤─│\s]+/, "").replace(/[┌┐└┘├┤─│\s]+$/, "");
+  const formatted = clean.length > 0 ? `\u2500 ${clean} ` : "\u2500";
+  const clipped = visibleWidth(formatted) > innerWidth ? truncateToWidth(formatted, innerWidth, "\u2026", true) : formatted;
+  const fill = "\u2500".repeat(Math.max(0, innerWidth - visibleWidth(clipped)));
+  const cleanIndex = clipped.indexOf(clean);
+  if (cleanIndex !== -1) {
+    const prefix = clipped.slice(0, cleanIndex);
+    const suffix = clipped.slice(cleanIndex + clean.length);
+    return `${frame2("\u250C")}${frame2(prefix)}${clioTitle(clean, tone)}${frame2(suffix)}${frame2(fill)}${frame2("\u2510")}`;
+  }
+  return `${frame2("\u250C")}${frame2(clipped)}${frame2(fill)}${frame2("\u2510")}`;
+}
+function isCriticalHintKey(key) {
+  const canonical = canonicalizeKey(key);
+  return canonical === "Esc" || canonical === "Enter" || canonical === "Enter/Space" || canonical === "type";
+}
+function isCriticalEntry(entry) {
+  return entry.critical ?? isCriticalHintKey(entry.key);
+}
+function renderHintEntries(entries, short) {
+  return entries.map((entry) => `[${canonicalizeKey(entry.key)}] ${short ? entry.short ?? entry.verb : entry.verb}`).join(" \xB7 ");
+}
+function fitHintEntries(entries, maxWidth) {
+  if (entries.length === 0) return "";
+  for (const short of [false, true]) {
+    const rendered = renderHintEntries(entries, short);
+    if (visibleWidth(rendered) <= maxWidth) return rendered;
+  }
+  const kept = [...entries];
+  for (const criticalPass of [false, true]) {
+    while (kept.length > 1) {
+      const index = kept.findIndex((entry) => criticalPass || !isCriticalEntry(entry));
+      if (index === -1) break;
+      kept.splice(index, 1);
+      const rendered = renderHintEntries(kept, true);
+      if (visibleWidth(rendered) <= maxWidth) return rendered;
+    }
+  }
+  return renderHintEntries(kept, true);
+}
+var FILTER_HINT = { key: "type", verb: "filter" };
+function canonicalizeKey(key) {
+  const trimmed = key.trim();
+  if (trimmed === "R") return "R";
+  const lower = trimmed.toLowerCase();
+  if (lower === "up/down" || lower === "updown" || lower === "\u2191/\u2193" || lower === "up/down/j/k" || lower === "\u2191\u2193")
+    return "\u2191\u2193";
+  if (lower === "enter/space") return "Enter/Space";
+  if (lower === "enter") return "Enter";
+  if (lower === "esc" || lower === "escape") return "Esc";
+  if (lower === "space") return "Space";
+  if (lower === "tab") return "Tab";
+  if (lower === "r") return "r";
+  if (lower === "type") return "type";
+  return trimmed;
+}
+function buildHint(entries, esc = "close") {
+  const finalEntries = [
+    ...entries.map((e) => ({ key: canonicalizeKey(e.key), verb: e.verb })),
+    { key: "Esc", verb: esc }
+  ];
+  return finalEntries.map((e) => `[${e.key}] ${e.verb}`).join(" \xB7 ");
+}
+function elideHint(hint, maxCleanWidth) {
+  const parts = hint.split(" \xB7 ");
+  if (parts.length <= 2) return hint;
+  const entries = parts.map((part) => {
+    const match = /^\[([^\]]+)\] ([\s\S]+)$/u.exec(part);
+    if (!match) return { key: "", verb: part, critical: false };
+    return { key: match[1] ?? "", verb: match[2] ?? "" };
+  });
+  const rendered = fitHintEntries(entries, maxCleanWidth);
+  return rendered.replace(/\[\] /gu, "");
+}
+function brandedBottomBorder(innerWidth, hint, tone) {
+  const frame2 = (text) => clioFrame(text, tone ?? "frame");
+  if (!hint || hint.trim().length === 0) {
+    return `${frame2("\u2514")}${frame2("\u2500".repeat(innerWidth))}${frame2("\u2518")}`;
+  }
+  let clean = hint.trim();
+  const maxCleanWidth = innerWidth - 3;
+  if (clean.includes(" \xB7 ") && visibleWidth(`\u2500 ${clean} `) > innerWidth) {
+    clean = elideHint(clean, maxCleanWidth);
+  }
+  const formatted = `\u2500 ${clean} `;
+  const clipped = visibleWidth(formatted) > innerWidth ? truncateToWidth(formatted, innerWidth, "\u2026", true) : formatted;
+  const fill = "\u2500".repeat(Math.max(0, innerWidth - visibleWidth(clipped)));
+  const cleanIndex = clipped.indexOf(clean);
+  if (cleanIndex !== -1) {
+    const prefix = clipped.slice(0, cleanIndex);
+    const suffix = clipped.slice(cleanIndex + clean.length);
+    return `${frame2("\u2514")}${frame2(prefix)}${clioTheme().fg("dim", clean)}${frame2(suffix)}${frame2(fill)}${frame2("\u2518")}`;
+  }
+  return `${frame2("\u2514")}${frame2(clipped)}${frame2(fill)}${frame2("\u2518")}`;
+}
+function formatRuntimeResolutionDiagnostic(diagnostic) {
+  return `${diagnostic.severity}: ${diagnostic.code}: ${diagnostic.message}`;
+}
+function diagnosticSeverityToken(severity) {
+  return severity === "error" ? "error" : severity === "warning" ? "warning" : "muted";
+}
+function runtimeResolutionDiagnosticLine(diagnostic, width) {
+  return clioTheme().fg(diagnosticSeverityToken(diagnostic.severity), fitDiagnosticLine(diagnostic, width));
+}
+function fitDiagnosticLine(diagnostic, width) {
+  return padAnsi(formatRuntimeResolutionDiagnostic(diagnostic), Math.max(1, width));
+}
+function frameAlignForAnchor(anchor) {
+  if (anchor === void 0) return "center";
+  if (anchor === "left-center" || anchor.endsWith("-left")) return "left";
+  if (anchor === "right-center" || anchor.endsWith("-right")) return "right";
+  return "center";
+}
+function fitBody(lines, rowBudget, contentWidth) {
+  if (rowBudget <= 0) return lines;
+  const bodyBudget = Math.max(1, rowBudget - 2);
+  if (lines.length <= bodyBudget) return lines;
+  const kept = lines.slice(0, bodyBudget - 1);
+  const hidden = lines.length - kept.length;
+  return [...kept, clioTheme().fg("dim", truncateToWidth(`\u2026 ${hidden} more rows`, contentWidth, "", true))];
+}
+var ClioOverlayFrame = class {
+  constructor(child, title, footerHint, boxWidth = 0, align = "center", tone) {
+    this.child = child;
+    this.title = title;
+    this.footerHint = footerHint;
+    this.boxWidth = boxWidth;
+    this.align = align;
+    this.tone = tone;
+  }
+  child;
+  title;
+  footerHint;
+  boxWidth;
+  align;
+  tone;
+  /**
+   * Rows the box may occupy, or zero while unknown.
+   *
+   * `Component.render` is handed a width and nothing else, so the frame learns
+   * its height budget from the engine's `visible` predicate, which is called
+   * with the live terminal size immediately before the render pass that
+   * composites this overlay.
+   */
+  rowBudget = 0;
+  /**
+   * Last rendered box, keyed by everything that shapes it. `childLines` is
+   * compared by array identity: a child that rebuilds its rows returns a fresh
+   * array and correctly misses, and one that serves a cache returns the same
+   * array and correctly hits.
+   */
+  cachedRender;
+  setRowBudget(rows) {
+    this.rowBudget = Math.max(0, Math.floor(rows));
+  }
+  render(width) {
+    const boxWidth = Math.max(5, Math.min(this.boxWidth > 0 ? this.boxWidth : width, width));
+    const contentWidth = Math.max(1, boxWidth - 4);
+    const childLines = this.child.render(contentWidth);
+    const titleText = typeof this.title === "function" ? this.title() : this.title;
+    const hint = typeof this.footerHint === "function" ? this.footerHint(contentWidth + 2) : this.footerHint;
+    const tone = resolveTone(this.tone);
+    const cached = this.cachedRender;
+    if (cached !== void 0 && cached.width === width && cached.rowBudget === this.rowBudget && cached.childLines === childLines && cached.title === titleText && cached.hint === hint && cached.tone === tone) {
+      return cached.lines;
+    }
+    const label = titleText.length > 0 ? `\u2500 ${titleText} ` : "\u2500 ";
+    const side = clioFrame("\u2502", tone ?? "frame");
+    const boxLines = [
+      brandedTopBorder(label, contentWidth + 2, tone),
+      ...fitBody(childLines, this.rowBudget, contentWidth).map((line) => `${side} ${padAnsi(line, contentWidth)} ${side}`),
+      brandedBottomBorder(contentWidth + 2, hint, tone)
+    ];
+    const slack = Math.max(0, width - boxWidth);
+    const lines = (() => {
+      if (slack === 0) return boxLines;
+      const leading = this.align === "left" ? 0 : this.align === "right" ? slack : Math.floor(slack / 2);
+      const lead = " ".repeat(leading);
+      const trail = " ".repeat(slack - leading);
+      return boxLines.map((line) => `${lead}${line}${trail}`);
+    })();
+    this.cachedRender = { width, rowBudget: this.rowBudget, childLines, title: titleText, hint, tone, lines };
+    return lines;
+  }
+  handleInput(data) {
+    this.child.handleInput?.(data);
+  }
+  invalidate() {
+    this.cachedRender = void 0;
+    this.child.invalidate?.();
+  }
+};
+function showClioOverlayFrame(tui, child, options) {
+  const { title, footerHint, tone, width, visible, maxHeight, margin, ...overlayOptions } = options;
+  const boxWidth = typeof width === "number" ? width : 0;
+  const frame2 = new ClioOverlayFrame(child, title, footerHint, boxWidth, frameAlignForAnchor(options.anchor), tone);
+  return tui.showOverlay(frame2, {
+    ...overlayOptions,
+    ...margin !== void 0 ? { margin } : {},
+    width: "100%",
+    visible: (termWidth, termHeight) => {
+      const shown = visible ? visible(termWidth, termHeight) : true;
+      const marginRows = typeof margin === "number" ? margin * 2 : (margin?.top ?? 0) + (margin?.bottom ?? 0);
+      const available = Math.max(1, termHeight - marginRows);
+      const requested = resolveRowSize(maxHeight, termHeight);
+      frame2.setRowBudget(requested === null ? available : Math.min(requested, available));
+      return shown;
+    }
+  });
+}
+function resolveRowSize(value, termHeight) {
+  if (typeof value === "number") return Math.max(1, Math.floor(value));
+  if (typeof value !== "string") return null;
+  const percent = /^(\d+(?:\.\d+)?)%$/u.exec(value.trim());
+  if (!percent?.[1]) return null;
+  return Math.max(1, Math.floor(termHeight * Number.parseFloat(percent[1]) / 100));
+}
+
+// src/interactive/permission-hint.ts
+init_esm_shims();
+function permissionHintEntries(composerHasDraft = false) {
+  return [
+    composerHasDraft ? { key: "Backspace", verb: "clear the draft to allow", short: "clear draft", critical: true } : { key: "Enter", verb: "allow once", short: "allow", critical: true },
+    { key: "s", verb: "stop turn", short: "stop", critical: true },
+    // With a draft, deny and stop are the only immediate answers, so Esc
+    // outranks the narrowing that would otherwise drop it first.
+    { key: "Esc", verb: "deny", critical: composerHasDraft }
+  ];
+}
+
+// src/interactive/clio-editor.ts
 var REVERSE_VIDEO_BLANK = `${String.fromCharCode(27)}[7m ${String.fromCharCode(27)}[0m`;
 var EMPTY_PROMPT = "Ask Clio\u2026  / for commands";
+var CONFIRM_PROMPT = "A parked call is waiting for your decision";
 var MIN_HINT_WIDTH = 60;
 function hasScrollIndicator(line) {
   const stripped = stripTerminalSequences(line);
@@ -579,6 +848,7 @@ function styledRailLabel(theme, chrome) {
   return `${theme.fg("dim", chrome.getModelLabel())} ${theme.fg("dim", "\xB7")} ${styledThinkingHint(theme, chrome.getThinkingLabel())}`;
 }
 function composerMode(chrome, text) {
+  if (chrome.isAwaitingApproval?.() ?? false) return "CONFIRM";
   if (!(chrome.isStreaming?.() ?? false)) return "MESSAGE";
   const willSteer = chrome.willEnterSteer?.(text) ?? text.trim().length > 0;
   return willSteer ? "STEER" : "FOLLOW-UP";
@@ -589,12 +859,20 @@ function lowerRailHint(theme, chrome) {
     `${chrome.getSubmitKeyLabel?.() ?? "Enter"} send \xB7 ${chrome.getNewlineKeyLabel?.() ?? "Shift+Enter"} newline`
   );
 }
-function renderEmptyPrompt(line, width, theme) {
+function confirmRailHint(theme, width, hasDraft) {
+  return theme.fg("warning", fitHintEntries(permissionHintEntries(hasDraft), Math.max(1, width - 3)));
+}
+function modeToken(mode) {
+  if (mode === "STEER") return "action";
+  if (mode === "CONFIRM") return "warning";
+  return "accentDeep";
+}
+function renderEmptyPrompt(line, width, theme, text = EMPTY_PROMPT) {
   const cursorAt = line.indexOf(REVERSE_VIDEO_BLANK);
   if (cursorAt < 0) return line;
   const afterCursorAt = cursorAt + REVERSE_VIDEO_BLANK.length;
   const available = Math.max(0, width - 1);
-  const prompt = truncateToWidth(theme.fg("dim", EMPTY_PROMPT), available, "\u2026", false);
+  const prompt = truncateToWidth(theme.fg("dim", text), available, "\u2026", false);
   const consumed = visibleWidth(prompt);
   return `${line.slice(0, afterCursorAt)}${prompt}${line.slice(afterCursorAt + consumed)}`;
 }
@@ -619,21 +897,30 @@ var ClioEditor = class extends Editor {
     const text = this.getText();
     const mode = composerMode(this.chrome, text);
     if (hasScrollIndicator(lines[0] ?? "")) {
-      const modeLabel = theme.style(mode === "STEER" ? "action" : "accentDeep", mode, { bold: true });
+      const modeLabel = theme.style(modeToken(mode), mode, { bold: true });
       lines[0] = truncateToWidth(`${modeLabel} ${lines[0] ?? ""}`, safeWidth, "", true);
     } else {
       lines[0] = rule(theme, safeWidth, {
         left: mode,
-        leftToken: mode === "STEER" ? "action" : "accentDeep",
+        leftToken: modeToken(mode),
         right: styledRailLabel(theme, this.chrome),
         fillToken: "frameStrong",
         rightRaw: true,
         rightTail: theme.style("frameStrong", "\u2500", { bold: true })
       });
     }
-    if (text.length === 0 && lines[1]) lines[1] = renderEmptyPrompt(lines[1], safeWidth, theme);
+    if (text.length === 0 && lines[1]) {
+      lines[1] = renderEmptyPrompt(lines[1], safeWidth, theme, mode === "CONFIRM" ? CONFIRM_PROMPT : EMPTY_PROMPT);
+    }
     const bottomRail = findBottomRail(lines, safeWidth);
-    if (bottomRail >= 0 && safeWidth >= MIN_HINT_WIDTH) {
+    if (bottomRail >= 0 && mode === "CONFIRM") {
+      lines[bottomRail] = rule(theme, safeWidth, {
+        right: confirmRailHint(theme, safeWidth, text.length > 0),
+        fillToken: "frameStrong",
+        rightRaw: true,
+        rightTail: theme.style("frameStrong", "\u2500", { bold: true })
+      });
+    } else if (bottomRail >= 0 && safeWidth >= MIN_HINT_WIDTH) {
       lines[bottomRail] = rule(theme, safeWidth, {
         right: lowerRailHint(theme, this.chrome),
         fillToken: "frameStrong",
@@ -1825,7 +2112,6 @@ function createKeybindingManager(settings, env = process.env) {
 export {
   SelectList,
   createAgentProgress,
-  Box,
   CombinedAutocompleteProvider,
   Container,
   fuzzyFilter,
@@ -1857,7 +2143,6 @@ export {
   joinSections,
   markdownTheme,
   selectListTheme,
-  settingsListTheme,
   abbreviateModelId,
   formatTargetLabel,
   formatCompactMs,
@@ -1869,6 +2154,16 @@ export {
   frame,
   innerDivider,
   clioTheme,
+  DEFAULT_SELECT_THEME,
+  FocusBox,
+  clioError,
+  fitHintEntries,
+  FILTER_HINT,
+  buildHint,
+  formatRuntimeResolutionDiagnostic,
+  runtimeResolutionDiagnosticLine,
+  showClioOverlayFrame,
+  permissionHintEntries,
   ClioEditor,
   getActiveRenderTrace,
   createProcessInteractiveShell,
@@ -1879,4 +2174,4 @@ export {
   formatPlatformKeybindingNotice,
   createKeybindingManager
 };
-//# sourceMappingURL=chunk-ZWMF7253.js.map
+//# sourceMappingURL=chunk-E2ER4LJF.js.map

package/dist/{chunk-STBPMHSX.js → chunk-EKY57CSP.js}

@@ -1,18 +1,24 @@
 import { createRequire as __clioCreateRequire } from "node:module"; const require = __clioCreateRequire(import.meta.url);
 import {
   AGENT_AUTOMATION_AUTHORITIES,
+  classify
+} from "./chunk-AOCYTWAV.js";
+import {
   artifactDefaultPath,
-  classify,
   detectValidationCommand,
   extractCommandDeleteTargets,
   extractCommandWriteTargets,
   inlineShellScript,
   tokenizeShellLike,
   toolMutationPaths
-} from "./chunk-5UUP6MWO.js";
+} from "./chunk-MV3K5QF2.js";
+import {
+  loadProjectVerifierCatalog
+} from "./chunk-FYYLNIL5.js";
 import {
+  isProjectVerifierCheckId,
   isVerificationScriptName
-} from "./chunk-7MNJORFF.js";
+} from "./chunk-UL3WSD3F.js";
 import {
   canonicalizeExistingPath
 } from "./chunk-ECH6PKUQ.js";
@@ -654,7 +660,7 @@ function resultContractRepairMessage(input) {
   const lines = [
     last ? "FINAL RESULT REQUIRED IN THIS RESPONSE. Your previous response still did not satisfy this run's result contract." : "Your previous response did not satisfy this run's result contract.",
     `Validator reason: ${input.reason}`,
-    "Tool use is over. Answer from the evidence you already gathered.",
+    input.toolsAvailable === true ? "You may use the admitted tools to repair this validator failure, then emit the required terminal result." : "Tool use is over. Answer from the evidence you already gathered.",
     `Emit exactly this shape and nothing else: ${resultContractShape(input.contract)}`,
     "Do not add prose, code fences, or commentary around it. Do not describe work you intend to do next."
   ];
@@ -974,8 +980,9 @@ function typedValidationSummary(toolName, payload) {
       const path5 = typeof args?.path === "string" && args.path.trim().length > 0 ? args.path.trim() : "artifact";
       return `verify frontend ${path5}`;
     }
-    if (!isVerificationScriptName(check)) return null;
-    return `npm run ${check}`;
+    if (isVerificationScriptName(check)) return `npm run ${check}`;
+    if (isProjectVerifierCheckId(check)) return `verify ${check}`;
+    return null;
   }
   return null;
 }
@@ -1097,72 +1104,6 @@ function asRecord(value) {
   return value !== null && typeof value === "object" ? value : null;
 }
 
-// src/domains/safety/autonomy.ts
-init_esm_shims();
-var AUTONOMY_LEVELS = ["read-only", "suggest", "auto-edit", "full-auto"];
-var DEFAULT_AUTONOMY_LEVEL = "auto-edit";
-function isAutonomyLevel(value) {
-  return typeof value === "string" && AUTONOMY_LEVELS.includes(value);
-}
-var DEFAULT_AUTONOMY_EXPOSURE = "local";
-function mapAutonomy(level, actionClass, options = {}) {
-  if (actionClass === "git_destructive") return "deny";
-  if ((level === "auto-edit" || level === "suggest") && options.exposure === "outward") return "ask";
-  if (actionClass === "read") return "allow";
-  if (level === "read-only") return "deny";
-  if (level === "suggest") return "ask";
-  switch (actionClass) {
-    case "write":
-      return "allow";
-    case "dispatch":
-      if (options.dispatchPlanScale === true && level !== "full-auto") return "ask";
-      return "allow";
-    case "execute": {
-      if (options.executeRecognized !== false) return "allow";
-      return level === "full-auto" ? "allow" : "ask";
-    }
-    case "unknown":
-      return "ask";
-    default:
-      return "ask";
-  }
-}
-function autonomyDenyRejection(level, tool, actionClass) {
-  return {
-    short: `${tool} denied: autonomy level is ${level}`,
-    detail: `Clio is at autonomy ${level}: ${actionClass} actions are denied without prompting. Describe the change you would make instead, so the operator can apply it or raise the autonomy level.`,
-    hints: ["Propose the exact edit or command as text.", "The operator can change the level in /settings."]
-  };
-}
-function autonomyAskRejection(level, tool, actionClass, exposure = DEFAULT_AUTONOMY_EXPOSURE) {
-  if (exposure === "outward") {
-    return {
-      short: `${tool} needs approval: outward-facing gate at autonomy ${level}`,
-      detail: `The call declared exposure=outward, so answering it publishes or sends something outside the workspace. Autonomy ${level} auto-answers local gates and parks outward-facing ones for the operator.`,
-      hints: [
-        "Approving resumes only this call.",
-        "Autonomy full-auto answers outward gates too; the safety net still applies there."
-      ]
-    };
-  }
-  return {
-    short: `${tool} needs approval (${actionClass}) at autonomy ${level}`,
-    detail: `Autonomy ${level} routes ${actionClass} actions through operator approval. The call is parked until the operator approves it once or cancels it.`,
-    hints: [
-      "Approving resumes only this call.",
-      "Recognized commands can be added to .clio-coder/safety.yaml.",
-      // The sanctioned pivots for a gated shell command: typed verification
-      // and read-class observe tools run without approval at this level,
-      // and models otherwise stall retrying denied bash for checks or
-      // directory listings.
-      ...actionClass === "execute" ? [
-        'A declared package.json check runs without approval through the verify tool: verify(check="<script>").',
-        "Read-only inspection runs without approval through the ls, read, grep, and find tools."
-      ] : []
-    ]
-  };
-}
-
 // src/domains/safety/path-policy.ts
 init_esm_shims();
 import { homedir } from "node:os";
@@ -1326,6 +1267,14 @@ var DEFAULT_DAMAGE_CONTROL_PATH_POLICY = {
     "*.dump"
   ],
   readOnlyPaths: [
+    // Clio's own operator-authority files in the project. `safety.yaml` is the
+    // policy that gates the model's tools, and `verifiers.yaml` is an argv
+    // catalog that verify() executes; a model that can author either one can
+    // widen its own permissions in two tool calls. Both are authored by the
+    // operator through the CLI (`clio-coder verifiers author` lands nothing
+    // before `--yes`), so model-side writes and deletes are refused.
+    ".clio-coder/safety.yaml",
+    ".clio-coder/verifiers.yaml",
     "/etc/",
     "/usr/",
     "/bin/",
@@ -1914,7 +1863,9 @@ function createSafetyPolicyEngine(options = {}) {
       const rawClassification = classify(call);
       const command = commandArg(call.args);
       const callCwd = cwdArg(call.args, cwd);
-      const scan = damageControlScan(call);
+      const catalogCheck = resolveVerifyCatalogCheck(call, cwd);
+      const catalogCommand = catalogCheck === null ? null : catalogCheck.command.join(" ");
+      const scan = catalogCommand ?? damageControlScan(call);
       const hit = scan ? matchSourcedRule(scan, sourcedRules) : null;
       const classification = effectiveClassification(rawClassification, hit?.match);
       const base = baseDecision(call, classification, callCwd, posture, command);
@@ -1971,8 +1922,9 @@ function createSafetyPolicyEngine(options = {}) {
         if (projectPolicy.path !== null) blockInput.projectPolicyPath = projectPolicy.path;
         return blockDecision(base, blockInput);
       }
-      if (call.tool === ToolNames.Bash && command !== null) {
-        const secretRead = evaluateBashZeroAccessRead(zeroAccessPolicy, command, callCwd);
+      const scannedCommand = call.tool === ToolNames.Bash ? command : catalogCommand;
+      if (scannedCommand !== null) {
+        const secretRead = evaluateBashZeroAccessRead(zeroAccessPolicy, scannedCommand, callCwd);
         if (secretRead !== null) {
           const blockInput = {
             ruleId: "secret_path_bash",
@@ -2027,7 +1979,15 @@ function createSafetyPolicyEngine(options = {}) {
       };
       if (hit?.match.ruleId !== void 0) allowInput.ruleId = hit.match.ruleId;
       if (hit?.match !== void 0) allowInput.match = hit.match;
-      if (classification.actionClass === "execute") allowInput.execRecognition = "recognized";
+      if (classification.actionClass === "execute") {
+        allowInput.execRecognition = catalogCheck === null ? "recognized" : "unrecognized";
+        if (catalogCheck !== null) {
+          allowInput.reasons = [
+            ...allowInput.reasons,
+            `project verifier '${catalogCheck.id}' runs declared argv: ${catalogCommand ?? ""}`
+          ];
+        }
+      }
       return allowDecision(base, allowInput);
     },
     metadata() {
@@ -2396,6 +2356,20 @@ function damageControlScan(call) {
   const pathArg2 = call.args?.path;
   return typeof pathArg2 === "string" ? pathArg2 : "";
 }
+function resolveVerifyCatalogCheck(call, workspaceRoot) {
+  if (call.tool !== ToolNames.Verify) return null;
+  const check = call.args?.check;
+  if (typeof check !== "string") return null;
+  const id = check.trim();
+  if (id.length === 0 || id === "frontend") return null;
+  try {
+    const catalog = loadProjectVerifierCatalog(workspaceRoot);
+    if (!catalog.ok || catalog.source === null) return null;
+    return catalog.source.checks.find((candidate) => candidate.id === id) ?? null;
+  } catch {
+    return null;
+  }
+}
 function serializeArgs(args) {
   if (!args) return "";
   const parts = [];
@@ -2439,13 +2413,6 @@ export {
   RESULT_CONTRACT_REPAIR_LIMIT,
   resultContractRepairMessages,
   parseResultContract,
-  AUTONOMY_LEVELS,
-  DEFAULT_AUTONOMY_LEVEL,
-  isAutonomyLevel,
-  DEFAULT_AUTONOMY_EXPOSURE,
-  mapAutonomy,
-  autonomyDenyRejection,
-  autonomyAskRejection,
   DEFAULT_RECENT_ENTRY_LIMIT,
   assessFinishContract,
   typedValidationSummary,
@@ -2453,4 +2420,4 @@ export {
   WRITE_ROOT_REFUSED_TOOLS,
   createSafetyPolicyEngine
 };
-//# sourceMappingURL=chunk-STBPMHSX.js.map
+//# sourceMappingURL=chunk-EKY57CSP.js.map

package/dist/{chunk-DUYJ5IO6.js → chunk-EYPA3EGJ.js}

@@ -4,9 +4,10 @@ import {
   TOOL_PROFILE_NAMES,
   classifyAgentTask,
   cloneApprovedAssignmentRoute,
+  cloneDispatchBudgetRequest,
   isApprovedAssignmentRoute,
   isToolProfileName
-} from "./chunk-LWLEKMDQ.js";
+} from "./chunk-XXQNGV4M.js";
 import {
   ROUTE_POLICY_VERSION,
   isExecutionRole,
@@ -14,10 +15,10 @@ import {
   isRoutingIntent,
   parseRoutingIntent,
   requestExecutionRole
-} from "./chunk-GGXXDWE4.js";
+} from "./chunk-22NAGB7X.js";
 import {
   AGENT_AUTOMATION_AUTHORITIES
-} from "./chunk-5UUP6MWO.js";
+} from "./chunk-AOCYTWAV.js";
 import {
   init_esm_shims
 } from "./chunk-3R73A4XB.js";
@@ -147,6 +148,13 @@ function dispatchRequestFromArgs(args, options) {
     }
     request.thinkingLevel = thinkingLevel;
   }
+  if (args.budget !== void 0) {
+    try {
+      request.budget = cloneDispatchBudgetRequest(args.budget);
+    } catch (error) {
+      return { ok: false, message: error instanceof Error ? error.message : String(error) };
+    }
+  }
   return { ok: true, request };
 }
 function dispatchRequestsFromArgs(args, options) {
@@ -641,4 +649,4 @@ export {
   withResolvedDispatchPlan,
   describeDispatchPlan
 };
-//# sourceMappingURL=chunk-DUYJ5IO6.js.map
+//# sourceMappingURL=chunk-EYPA3EGJ.js.map

package/dist/{chunk-M6SHUN7Q.js → chunk-FO5ZOVUY.js}

@@ -38,7 +38,7 @@ import {
 } from "node:fs";
 import { dirname, join, resolve } from "node:path";
 import { StringDecoder } from "node:string_decoder";
-var CURRENT_SESSION_FORMAT_VERSION = 3;
+var CURRENT_SESSION_FORMAT_VERSION = 4;
 function cwdHash(cwd) {
   const normalized = resolve(cwd);
   return createHash("sha256").update(normalized).digest("hex").slice(0, 16);
@@ -567,4 +567,4 @@ export {
   openSession,
   resumeSession
 };
-//# sourceMappingURL=chunk-M6SHUN7Q.js.map
+//# sourceMappingURL=chunk-FO5ZOVUY.js.map