@iowarp/clio-coder 0.3.4 → 0.3.6

package/dist/{chunk-ZWMF7253.js → chunk-E2ER4LJF.js}

@@ -549,8 +549,277 @@ function clioTheme() {
 
 // src/interactive/clio-editor.ts
 init_esm_shims();
+
+// src/interactive/overlay-frame.ts
+init_esm_shims();
+var DEFAULT_SELECT_THEME = selectListTheme(clioTheme());
+var DEFAULT_SETTINGS_THEME = settingsListTheme(clioTheme());
+var FocusBox = class extends Box {
+  inputTarget;
+  onInput;
+  constructor(children, options) {
+    super(options?.x ?? 1, options?.y ?? 0);
+    const childList = Array.isArray(children) ? children : [children];
+    for (const child of childList) this.addChild(child);
+    this.inputTarget = options?.inputTarget === void 0 ? childList[0] ?? null : options.inputTarget;
+    this.onInput = options?.onInput;
+  }
+  handleInput(data) {
+    if (this.onInput) {
+      this.onInput(data);
+      return;
+    }
+    this.inputTarget?.handleInput?.(data);
+  }
+};
+function resolveTone(tone) {
+  return typeof tone === "function" ? tone() : tone;
+}
+function clioFrame(text, token = "frame") {
+  return clioTheme().fg(token, text);
+}
+function clioTitle(text, token) {
+  return token === void 0 ? screenTitle(clioTheme(), text) : clioTheme().style(token, text, { bold: true });
+}
+function clioError(text) {
+  return clioTheme().fg("error", text);
+}
+function brandedTopBorder(label, innerWidth, tone) {
+  const frame2 = (text) => clioFrame(text, tone ?? "frame");
+  const clean = label.replace(/^[┌┐└┘├┤─│\s]+/, "").replace(/[┌┐└┘├┤─│\s]+$/, "");
+  const formatted = clean.length > 0 ? `\u2500 ${clean} ` : "\u2500";
+  const clipped = visibleWidth(formatted) > innerWidth ? truncateToWidth(formatted, innerWidth, "\u2026", true) : formatted;
+  const fill = "\u2500".repeat(Math.max(0, innerWidth - visibleWidth(clipped)));
+  const cleanIndex = clipped.indexOf(clean);
+  if (cleanIndex !== -1) {
+    const prefix = clipped.slice(0, cleanIndex);
+    const suffix = clipped.slice(cleanIndex + clean.length);
+    return `${frame2("\u250C")}${frame2(prefix)}${clioTitle(clean, tone)}${frame2(suffix)}${frame2(fill)}${frame2("\u2510")}`;
+  }
+  return `${frame2("\u250C")}${frame2(clipped)}${frame2(fill)}${frame2("\u2510")}`;
+}
+function isCriticalHintKey(key) {
+  const canonical = canonicalizeKey(key);
+  return canonical === "Esc" || canonical === "Enter" || canonical === "Enter/Space" || canonical === "type";
+}
+function isCriticalEntry(entry) {
+  return entry.critical ?? isCriticalHintKey(entry.key);
+}
+function renderHintEntries(entries, short) {
+  return entries.map((entry) => `[${canonicalizeKey(entry.key)}] ${short ? entry.short ?? entry.verb : entry.verb}`).join(" \xB7 ");
+}
+function fitHintEntries(entries, maxWidth) {
+  if (entries.length === 0) return "";
+  for (const short of [false, true]) {
+    const rendered = renderHintEntries(entries, short);
+    if (visibleWidth(rendered) <= maxWidth) return rendered;
+  }
+  const kept = [...entries];
+  for (const criticalPass of [false, true]) {
+    while (kept.length > 1) {
+      const index = kept.findIndex((entry) => criticalPass || !isCriticalEntry(entry));
+      if (index === -1) break;
+      kept.splice(index, 1);
+      const rendered = renderHintEntries(kept, true);
+      if (visibleWidth(rendered) <= maxWidth) return rendered;
+    }
+  }
+  return renderHintEntries(kept, true);
+}
+var FILTER_HINT = { key: "type", verb: "filter" };
+function canonicalizeKey(key) {
+  const trimmed = key.trim();
+  if (trimmed === "R") return "R";
+  const lower = trimmed.toLowerCase();
+  if (lower === "up/down" || lower === "updown" || lower === "\u2191/\u2193" || lower === "up/down/j/k" || lower === "\u2191\u2193")
+    return "\u2191\u2193";
+  if (lower === "enter/space") return "Enter/Space";
+  if (lower === "enter") return "Enter";
+  if (lower === "esc" || lower === "escape") return "Esc";
+  if (lower === "space") return "Space";
+  if (lower === "tab") return "Tab";
+  if (lower === "r") return "r";
+  if (lower === "type") return "type";
+  return trimmed;
+}
+function buildHint(entries, esc = "close") {
+  const finalEntries = [
+    ...entries.map((e) => ({ key: canonicalizeKey(e.key), verb: e.verb })),
+    { key: "Esc", verb: esc }
+  ];
+  return finalEntries.map((e) => `[${e.key}] ${e.verb}`).join(" \xB7 ");
+}
+function elideHint(hint, maxCleanWidth) {
+  const parts = hint.split(" \xB7 ");
+  if (parts.length <= 2) return hint;
+  const entries = parts.map((part) => {
+    const match = /^\[([^\]]+)\] ([\s\S]+)$/u.exec(part);
+    if (!match) return { key: "", verb: part, critical: false };
+    return { key: match[1] ?? "", verb: match[2] ?? "" };
+  });
+  const rendered = fitHintEntries(entries, maxCleanWidth);
+  return rendered.replace(/\[\] /gu, "");
+}
+function brandedBottomBorder(innerWidth, hint, tone) {
+  const frame2 = (text) => clioFrame(text, tone ?? "frame");
+  if (!hint || hint.trim().length === 0) {
+    return `${frame2("\u2514")}${frame2("\u2500".repeat(innerWidth))}${frame2("\u2518")}`;
+  }
+  let clean = hint.trim();
+  const maxCleanWidth = innerWidth - 3;
+  if (clean.includes(" \xB7 ") && visibleWidth(`\u2500 ${clean} `) > innerWidth) {
+    clean = elideHint(clean, maxCleanWidth);
+  }
+  const formatted = `\u2500 ${clean} `;
+  const clipped = visibleWidth(formatted) > innerWidth ? truncateToWidth(formatted, innerWidth, "\u2026", true) : formatted;
+  const fill = "\u2500".repeat(Math.max(0, innerWidth - visibleWidth(clipped)));
+  const cleanIndex = clipped.indexOf(clean);
+  if (cleanIndex !== -1) {
+    const prefix = clipped.slice(0, cleanIndex);
+    const suffix = clipped.slice(cleanIndex + clean.length);
+    return `${frame2("\u2514")}${frame2(prefix)}${clioTheme().fg("dim", clean)}${frame2(suffix)}${frame2(fill)}${frame2("\u2518")}`;
+  }
+  return `${frame2("\u2514")}${frame2(clipped)}${frame2(fill)}${frame2("\u2518")}`;
+}
+function formatRuntimeResolutionDiagnostic(diagnostic) {
+  return `${diagnostic.severity}: ${diagnostic.code}: ${diagnostic.message}`;
+}
+function diagnosticSeverityToken(severity) {
+  return severity === "error" ? "error" : severity === "warning" ? "warning" : "muted";
+}
+function runtimeResolutionDiagnosticLine(diagnostic, width) {
+  return clioTheme().fg(diagnosticSeverityToken(diagnostic.severity), fitDiagnosticLine(diagnostic, width));
+}
+function fitDiagnosticLine(diagnostic, width) {
+  return padAnsi(formatRuntimeResolutionDiagnostic(diagnostic), Math.max(1, width));
+}
+function frameAlignForAnchor(anchor) {
+  if (anchor === void 0) return "center";
+  if (anchor === "left-center" || anchor.endsWith("-left")) return "left";
+  if (anchor === "right-center" || anchor.endsWith("-right")) return "right";
+  return "center";
+}
+function fitBody(lines, rowBudget, contentWidth) {
+  if (rowBudget <= 0) return lines;
+  const bodyBudget = Math.max(1, rowBudget - 2);
+  if (lines.length <= bodyBudget) return lines;
+  const kept = lines.slice(0, bodyBudget - 1);
+  const hidden = lines.length - kept.length;
+  return [...kept, clioTheme().fg("dim", truncateToWidth(`\u2026 ${hidden} more rows`, contentWidth, "", true))];
+}
+var ClioOverlayFrame = class {
+  constructor(child, title, footerHint, boxWidth = 0, align = "center", tone) {
+    this.child = child;
+    this.title = title;
+    this.footerHint = footerHint;
+    this.boxWidth = boxWidth;
+    this.align = align;
+    this.tone = tone;
+  }
+  child;
+  title;
+  footerHint;
+  boxWidth;
+  align;
+  tone;
+  /**
+   * Rows the box may occupy, or zero while unknown.
+   *
+   * `Component.render` is handed a width and nothing else, so the frame learns
+   * its height budget from the engine's `visible` predicate, which is called
+   * with the live terminal size immediately before the render pass that
+   * composites this overlay.
+   */
+  rowBudget = 0;
+  /**
+   * Last rendered box, keyed by everything that shapes it. `childLines` is
+   * compared by array identity: a child that rebuilds its rows returns a fresh
+   * array and correctly misses, and one that serves a cache returns the same
+   * array and correctly hits.
+   */
+  cachedRender;
+  setRowBudget(rows) {
+    this.rowBudget = Math.max(0, Math.floor(rows));
+  }
+  render(width) {
+    const boxWidth = Math.max(5, Math.min(this.boxWidth > 0 ? this.boxWidth : width, width));
+    const contentWidth = Math.max(1, boxWidth - 4);
+    const childLines = this.child.render(contentWidth);
+    const titleText = typeof this.title === "function" ? this.title() : this.title;
+    const hint = typeof this.footerHint === "function" ? this.footerHint(contentWidth + 2) : this.footerHint;
+    const tone = resolveTone(this.tone);
+    const cached = this.cachedRender;
+    if (cached !== void 0 && cached.width === width && cached.rowBudget === this.rowBudget && cached.childLines === childLines && cached.title === titleText && cached.hint === hint && cached.tone === tone) {
+      return cached.lines;
+    }
+    const label = titleText.length > 0 ? `\u2500 ${titleText} ` : "\u2500 ";
+    const side = clioFrame("\u2502", tone ?? "frame");
+    const boxLines = [
+      brandedTopBorder(label, contentWidth + 2, tone),
+      ...fitBody(childLines, this.rowBudget, contentWidth).map((line) => `${side} ${padAnsi(line, contentWidth)} ${side}`),
+      brandedBottomBorder(contentWidth + 2, hint, tone)
+    ];
+    const slack = Math.max(0, width - boxWidth);
+    const lines = (() => {
+      if (slack === 0) return boxLines;
+      const leading = this.align === "left" ? 0 : this.align === "right" ? slack : Math.floor(slack / 2);
+      const lead = " ".repeat(leading);
+      const trail = " ".repeat(slack - leading);
+      return boxLines.map((line) => `${lead}${line}${trail}`);
+    })();
+    this.cachedRender = { width, rowBudget: this.rowBudget, childLines, title: titleText, hint, tone, lines };
+    return lines;
+  }
+  handleInput(data) {
+    this.child.handleInput?.(data);
+  }
+  invalidate() {
+    this.cachedRender = void 0;
+    this.child.invalidate?.();
+  }
+};
+function showClioOverlayFrame(tui, child, options) {
+  const { title, footerHint, tone, width, visible, maxHeight, margin, ...overlayOptions } = options;
+  const boxWidth = typeof width === "number" ? width : 0;
+  const frame2 = new ClioOverlayFrame(child, title, footerHint, boxWidth, frameAlignForAnchor(options.anchor), tone);
+  return tui.showOverlay(frame2, {
+    ...overlayOptions,
+    ...margin !== void 0 ? { margin } : {},
+    width: "100%",
+    visible: (termWidth, termHeight) => {
+      const shown = visible ? visible(termWidth, termHeight) : true;
+      const marginRows = typeof margin === "number" ? margin * 2 : (margin?.top ?? 0) + (margin?.bottom ?? 0);
+      const available = Math.max(1, termHeight - marginRows);
+      const requested = resolveRowSize(maxHeight, termHeight);
+      frame2.setRowBudget(requested === null ? available : Math.min(requested, available));
+      return shown;
+    }
+  });
+}
+function resolveRowSize(value, termHeight) {
+  if (typeof value === "number") return Math.max(1, Math.floor(value));
+  if (typeof value !== "string") return null;
+  const percent = /^(\d+(?:\.\d+)?)%$/u.exec(value.trim());
+  if (!percent?.[1]) return null;
+  return Math.max(1, Math.floor(termHeight * Number.parseFloat(percent[1]) / 100));
+}
+
+// src/interactive/permission-hint.ts
+init_esm_shims();
+function permissionHintEntries(composerHasDraft = false) {
+  return [
+    composerHasDraft ? { key: "Backspace", verb: "clear the draft to allow", short: "clear draft", critical: true } : { key: "Enter", verb: "allow once", short: "allow", critical: true },
+    { key: "s", verb: "stop turn", short: "stop", critical: true },
+    // With a draft, deny and stop are the only immediate answers, so Esc
+    // outranks the narrowing that would otherwise drop it first.
+    { key: "Esc", verb: "deny", critical: composerHasDraft }
+  ];
+}
+
+// src/interactive/clio-editor.ts
 var REVERSE_VIDEO_BLANK = `${String.fromCharCode(27)}[7m ${String.fromCharCode(27)}[0m`;
 var EMPTY_PROMPT = "Ask Clio\u2026  / for commands";
+var CONFIRM_PROMPT = "A parked call is waiting for your decision";
 var MIN_HINT_WIDTH = 60;
 function hasScrollIndicator(line) {
   const stripped = stripTerminalSequences(line);
@@ -579,6 +848,7 @@ function styledRailLabel(theme, chrome) {
   return `${theme.fg("dim", chrome.getModelLabel())} ${theme.fg("dim", "\xB7")} ${styledThinkingHint(theme, chrome.getThinkingLabel())}`;
 }
 function composerMode(chrome, text) {
+  if (chrome.isAwaitingApproval?.() ?? false) return "CONFIRM";
   if (!(chrome.isStreaming?.() ?? false)) return "MESSAGE";
   const willSteer = chrome.willEnterSteer?.(text) ?? text.trim().length > 0;
   return willSteer ? "STEER" : "FOLLOW-UP";
@@ -589,12 +859,20 @@ function lowerRailHint(theme, chrome) {
     `${chrome.getSubmitKeyLabel?.() ?? "Enter"} send \xB7 ${chrome.getNewlineKeyLabel?.() ?? "Shift+Enter"} newline`
   );
 }
-function renderEmptyPrompt(line, width, theme) {
+function confirmRailHint(theme, width, hasDraft) {
+  return theme.fg("warning", fitHintEntries(permissionHintEntries(hasDraft), Math.max(1, width - 3)));
+}
+function modeToken(mode) {
+  if (mode === "STEER") return "action";
+  if (mode === "CONFIRM") return "warning";
+  return "accentDeep";
+}
+function renderEmptyPrompt(line, width, theme, text = EMPTY_PROMPT) {
   const cursorAt = line.indexOf(REVERSE_VIDEO_BLANK);
   if (cursorAt < 0) return line;
   const afterCursorAt = cursorAt + REVERSE_VIDEO_BLANK.length;
   const available = Math.max(0, width - 1);
-  const prompt = truncateToWidth(theme.fg("dim", EMPTY_PROMPT), available, "\u2026", false);
+  const prompt = truncateToWidth(theme.fg("dim", text), available, "\u2026", false);
   const consumed = visibleWidth(prompt);
   return `${line.slice(0, afterCursorAt)}${prompt}${line.slice(afterCursorAt + consumed)}`;
 }
@@ -619,21 +897,30 @@ var ClioEditor = class extends Editor {
     const text = this.getText();
     const mode = composerMode(this.chrome, text);
     if (hasScrollIndicator(lines[0] ?? "")) {
-      const modeLabel = theme.style(mode === "STEER" ? "action" : "accentDeep", mode, { bold: true });
+      const modeLabel = theme.style(modeToken(mode), mode, { bold: true });
       lines[0] = truncateToWidth(`${modeLabel} ${lines[0] ?? ""}`, safeWidth, "", true);
     } else {
       lines[0] = rule(theme, safeWidth, {
         left: mode,
-        leftToken: mode === "STEER" ? "action" : "accentDeep",
+        leftToken: modeToken(mode),
         right: styledRailLabel(theme, this.chrome),
         fillToken: "frameStrong",
         rightRaw: true,
         rightTail: theme.style("frameStrong", "\u2500", { bold: true })
       });
     }
-    if (text.length === 0 && lines[1]) lines[1] = renderEmptyPrompt(lines[1], safeWidth, theme);
+    if (text.length === 0 && lines[1]) {
+      lines[1] = renderEmptyPrompt(lines[1], safeWidth, theme, mode === "CONFIRM" ? CONFIRM_PROMPT : EMPTY_PROMPT);
+    }
     const bottomRail = findBottomRail(lines, safeWidth);
-    if (bottomRail >= 0 && safeWidth >= MIN_HINT_WIDTH) {
+    if (bottomRail >= 0 && mode === "CONFIRM") {
+      lines[bottomRail] = rule(theme, safeWidth, {
+        right: confirmRailHint(theme, safeWidth, text.length > 0),
+        fillToken: "frameStrong",
+        rightRaw: true,
+        rightTail: theme.style("frameStrong", "\u2500", { bold: true })
+      });
+    } else if (bottomRail >= 0 && safeWidth >= MIN_HINT_WIDTH) {
       lines[bottomRail] = rule(theme, safeWidth, {
         right: lowerRailHint(theme, this.chrome),
         fillToken: "frameStrong",
@@ -1825,7 +2112,6 @@ function createKeybindingManager(settings, env = process.env) {
 export {
   SelectList,
   createAgentProgress,
-  Box,
   CombinedAutocompleteProvider,
   Container,
   fuzzyFilter,
@@ -1857,7 +2143,6 @@ export {
   joinSections,
   markdownTheme,
   selectListTheme,
-  settingsListTheme,
   abbreviateModelId,
   formatTargetLabel,
   formatCompactMs,
@@ -1869,6 +2154,16 @@ export {
   frame,
   innerDivider,
   clioTheme,
+  DEFAULT_SELECT_THEME,
+  FocusBox,
+  clioError,
+  fitHintEntries,
+  FILTER_HINT,
+  buildHint,
+  formatRuntimeResolutionDiagnostic,
+  runtimeResolutionDiagnosticLine,
+  showClioOverlayFrame,
+  permissionHintEntries,
   ClioEditor,
   getActiveRenderTrace,
   createProcessInteractiveShell,
@@ -1879,4 +2174,4 @@ export {
   formatPlatformKeybindingNotice,
   createKeybindingManager
 };
-//# sourceMappingURL=chunk-ZWMF7253.js.map
+//# sourceMappingURL=chunk-E2ER4LJF.js.map

package/dist/{chunk-7RXG6QRZ.js → chunk-EKY57CSP.js}

@@ -660,7 +660,7 @@ function resultContractRepairMessage(input) {
   const lines = [
     last ? "FINAL RESULT REQUIRED IN THIS RESPONSE. Your previous response still did not satisfy this run's result contract." : "Your previous response did not satisfy this run's result contract.",
     `Validator reason: ${input.reason}`,
-    "Tool use is over. Answer from the evidence you already gathered.",
+    input.toolsAvailable === true ? "You may use the admitted tools to repair this validator failure, then emit the required terminal result." : "Tool use is over. Answer from the evidence you already gathered.",
     `Emit exactly this shape and nothing else: ${resultContractShape(input.contract)}`,
     "Do not add prose, code fences, or commentary around it. Do not describe work you intend to do next."
   ];
@@ -1104,72 +1104,6 @@ function asRecord(value) {
   return value !== null && typeof value === "object" ? value : null;
 }
 
-// src/domains/safety/autonomy.ts
-init_esm_shims();
-var AUTONOMY_LEVELS = ["read-only", "suggest", "auto-edit", "full-auto"];
-var DEFAULT_AUTONOMY_LEVEL = "auto-edit";
-function isAutonomyLevel(value) {
-  return typeof value === "string" && AUTONOMY_LEVELS.includes(value);
-}
-var DEFAULT_AUTONOMY_EXPOSURE = "local";
-function mapAutonomy(level, actionClass, options = {}) {
-  if (actionClass === "git_destructive") return "deny";
-  if ((level === "auto-edit" || level === "suggest") && options.exposure === "outward") return "ask";
-  if (actionClass === "read") return "allow";
-  if (level === "read-only") return "deny";
-  if (level === "suggest") return "ask";
-  switch (actionClass) {
-    case "write":
-      return "allow";
-    case "dispatch":
-      if (options.dispatchPlanScale === true && level !== "full-auto") return "ask";
-      return "allow";
-    case "execute": {
-      if (options.executeRecognized !== false) return "allow";
-      return level === "full-auto" ? "allow" : "ask";
-    }
-    case "unknown":
-      return "ask";
-    default:
-      return "ask";
-  }
-}
-function autonomyDenyRejection(level, tool, actionClass) {
-  return {
-    short: `${tool} denied: autonomy level is ${level}`,
-    detail: `Clio is at autonomy ${level}: ${actionClass} actions are denied without prompting. Describe the change you would make instead, so the operator can apply it or raise the autonomy level.`,
-    hints: ["Propose the exact edit or command as text.", "The operator can change the level in /settings."]
-  };
-}
-function autonomyAskRejection(level, tool, actionClass, exposure = DEFAULT_AUTONOMY_EXPOSURE) {
-  if (exposure === "outward") {
-    return {
-      short: `${tool} needs approval: outward-facing gate at autonomy ${level}`,
-      detail: `The call declared exposure=outward, so answering it publishes or sends something outside the workspace. Autonomy ${level} auto-answers local gates and parks outward-facing ones for the operator.`,
-      hints: [
-        "Approving resumes only this call.",
-        "Autonomy full-auto answers outward gates too; the safety net still applies there."
-      ]
-    };
-  }
-  return {
-    short: `${tool} needs approval (${actionClass}) at autonomy ${level}`,
-    detail: `Autonomy ${level} routes ${actionClass} actions through operator approval. The call is parked until the operator approves it once or cancels it.`,
-    hints: [
-      "Approving resumes only this call.",
-      "Recognized commands can be added to .clio-coder/safety.yaml.",
-      // The sanctioned pivots for a gated shell command: typed verification
-      // and read-class observe tools run without approval at this level,
-      // and models otherwise stall retrying denied bash for checks or
-      // directory listings.
-      ...actionClass === "execute" ? [
-        'A declared package or project-catalog check runs without approval through the verify tool: verify(check="<id>").',
-        "Read-only inspection runs without approval through the ls, read, grep, and find tools."
-      ] : []
-    ]
-  };
-}
-
 // src/domains/safety/path-policy.ts
 init_esm_shims();
 import { homedir } from "node:os";
@@ -2479,13 +2413,6 @@ export {
   RESULT_CONTRACT_REPAIR_LIMIT,
   resultContractRepairMessages,
   parseResultContract,
-  AUTONOMY_LEVELS,
-  DEFAULT_AUTONOMY_LEVEL,
-  isAutonomyLevel,
-  DEFAULT_AUTONOMY_EXPOSURE,
-  mapAutonomy,
-  autonomyDenyRejection,
-  autonomyAskRejection,
   DEFAULT_RECENT_ENTRY_LIMIT,
   assessFinishContract,
   typedValidationSummary,
@@ -2493,4 +2420,4 @@ export {
   WRITE_ROOT_REFUSED_TOOLS,
   createSafetyPolicyEngine
 };
-//# sourceMappingURL=chunk-7RXG6QRZ.js.map
+//# sourceMappingURL=chunk-EKY57CSP.js.map

package/dist/{chunk-EDRHSCIE.js → chunk-EYPA3EGJ.js}

@@ -4,9 +4,10 @@ import {
   TOOL_PROFILE_NAMES,
   classifyAgentTask,
   cloneApprovedAssignmentRoute,
+  cloneDispatchBudgetRequest,
   isApprovedAssignmentRoute,
   isToolProfileName
-} from "./chunk-ZYKPLLNQ.js";
+} from "./chunk-XXQNGV4M.js";
 import {
   ROUTE_POLICY_VERSION,
   isExecutionRole,
@@ -147,6 +148,13 @@ function dispatchRequestFromArgs(args, options) {
     }
     request.thinkingLevel = thinkingLevel;
   }
+  if (args.budget !== void 0) {
+    try {
+      request.budget = cloneDispatchBudgetRequest(args.budget);
+    } catch (error) {
+      return { ok: false, message: error instanceof Error ? error.message : String(error) };
+    }
+  }
   return { ok: true, request };
 }
 function dispatchRequestsFromArgs(args, options) {
@@ -641,4 +649,4 @@ export {
   withResolvedDispatchPlan,
   describeDispatchPlan
 };
-//# sourceMappingURL=chunk-EDRHSCIE.js.map
+//# sourceMappingURL=chunk-EYPA3EGJ.js.map

package/dist/{chunk-TTNYS3EA.js → chunk-G7MUEIGA.js}

@@ -67,4 +67,4 @@ export {
   BusChannels,
   isRunAbortedPayload
 };
-//# sourceMappingURL=chunk-TTNYS3EA.js.map
+//# sourceMappingURL=chunk-G7MUEIGA.js.map

package/dist/{chunk-BPGS2WCQ.js → chunk-GEYXPTRF.js}

@@ -191,6 +191,7 @@ function buildContextLedger(input) {
     model: input.model ?? null,
     contextWindow: window,
     contextWindowSource: input.contextWindowSource ?? null,
+    contextWindowSlots: input.contextWindowSlots ?? null,
     usedTokens,
     reserveTokens,
     freeTokens,
@@ -609,4 +610,4 @@ export {
   snapshotInputTokens,
   reconcileSnapshot
 };
-//# sourceMappingURL=chunk-BPGS2WCQ.js.map
+//# sourceMappingURL=chunk-GEYXPTRF.js.map

package/dist/{chunk-BEY543CS.js → chunk-GOXNB3AO.js}

@@ -1,4 +1,7 @@
 import { createRequire as __clioCreateRequire } from "node:module"; const require = __clioCreateRequire(import.meta.url);
+import {
+  AUTONOMY_EXPOSURES
+} from "./chunk-HWUFFB6L.js";
 import {
   init_esm_shims
 } from "./chunk-3R73A4XB.js";
@@ -234,7 +237,7 @@ function isSessionEntry(value) {
     case "taskLedger":
       return isOptionalString(v.boardId) && Array.isArray(v.goals) && v.goals.every(isTaskLedgerGoal) && Array.isArray(v.subgoals) && v.subgoals.every(isTaskLedgerGoal) && isStringArray(v.activeRunIds) && Array.isArray(v.requiredValidationEvidence) && v.requiredValidationEvidence.every(isTaskLedgerEvidence);
     case "decisionLedger":
-      return isString(v.interviewId) && isOneOf(v.interviewStatus, DECISION_INTERVIEW_STATUSES) && isString(v.startedAt) && isString(v.endedAt) && isNumber(v.roundCount) && Number.isInteger(v.roundCount) && v.roundCount >= 0 && isOptionalString(v.summary) && isOptionalString(v.transcriptPath) && Array.isArray(v.decisions) && v.decisions.every(isDecisionRecord);
+      return isString(v.interviewId) && isOneOf(v.interviewStatus, DECISION_INTERVIEW_STATUSES) && isString(v.startedAt) && isString(v.endedAt) && isNumber(v.roundCount) && Number.isInteger(v.roundCount) && v.roundCount >= 0 && isOptionalString(v.summary) && isOptionalString(v.transcriptPath) && (v.exposure === void 0 || isOneOf(v.exposure, AUTONOMY_EXPOSURES)) && Array.isArray(v.decisions) && v.decisions.every(isDecisionRecord);
     case "workerRun":
       return isString(v.assignmentId) && isString(v.runId) && isOneOf(v.origin, WORKER_RUN_ORIGINS) && isString(v.agentId) && isWorkerRunRuntime(v.runtime) && isOptionalString(v.parentToolCallId);
     case "contextEviction":
@@ -255,4 +258,4 @@ export {
   isSessionHeader,
   isSessionEntry
 };
-//# sourceMappingURL=chunk-BEY543CS.js.map
+//# sourceMappingURL=chunk-GOXNB3AO.js.map

package/dist/{chunk-G4BMMOKF.js → chunk-HVDIIIQW.js}

@@ -1,7 +1,7 @@
 import { createRequire as __clioCreateRequire } from "node:module"; const require = __clioCreateRequire(import.meta.url);
 import {
   detectProjectType
-} from "./chunk-YHZX5GEU.js";
+} from "./chunk-XAKHZX5N.js";
 import {
   init_esm_shims
 } from "./chunk-3R73A4XB.js";
@@ -179,4 +179,4 @@ export {
   probeWorkspace,
   probeWorkspaceAsync
 };
-//# sourceMappingURL=chunk-G4BMMOKF.js.map
+//# sourceMappingURL=chunk-HVDIIIQW.js.map

package/dist/chunk-HWUFFB6L.js

@@ -0,0 +1,83 @@
+import { createRequire as __clioCreateRequire } from "node:module"; const require = __clioCreateRequire(import.meta.url);
+import {
+  init_esm_shims
+} from "./chunk-3R73A4XB.js";
+
+// src/domains/safety/autonomy.ts
+init_esm_shims();
+var AUTONOMY_LEVELS = ["read-only", "suggest", "auto-edit", "full-auto"];
+var DEFAULT_AUTONOMY_LEVEL = "auto-edit";
+function isAutonomyLevel(value) {
+  return typeof value === "string" && AUTONOMY_LEVELS.includes(value);
+}
+var AUTONOMY_EXPOSURES = ["local", "outward"];
+var DEFAULT_AUTONOMY_EXPOSURE = "local";
+function mapAutonomy(level, actionClass, options = {}) {
+  if (actionClass === "git_destructive") return "deny";
+  if ((level === "auto-edit" || level === "suggest") && options.exposure === "outward") return "ask";
+  if (actionClass === "read") return "allow";
+  if (level === "read-only") return "deny";
+  if (level === "suggest") return "ask";
+  switch (actionClass) {
+    case "write":
+      return "allow";
+    case "dispatch":
+      if (options.dispatchPlanScale === true && level !== "full-auto") return "ask";
+      return "allow";
+    case "execute": {
+      if (options.executeRecognized !== false) return "allow";
+      return level === "full-auto" ? "allow" : "ask";
+    }
+    case "unknown":
+      return "ask";
+    default:
+      return "ask";
+  }
+}
+function autonomyDenyRejection(level, tool, actionClass) {
+  return {
+    short: `${tool} denied: autonomy level is ${level}`,
+    detail: `Clio is at autonomy ${level}: ${actionClass} actions are denied without prompting. Describe the change you would make instead, so the operator can apply it or raise the autonomy level.`,
+    hints: ["Propose the exact edit or command as text.", "The operator can change the level in /settings."]
+  };
+}
+function autonomyAskRejection(level, tool, actionClass, exposure = DEFAULT_AUTONOMY_EXPOSURE) {
+  if (exposure === "outward") {
+    return {
+      short: `${tool} needs approval: outward-facing gate at autonomy ${level}`,
+      detail: `The call declared exposure=outward, so answering it publishes or sends something outside the workspace. Autonomy ${level} auto-answers local gates and parks outward-facing ones for the operator.`,
+      hints: [
+        "Approving resumes only this call.",
+        "Autonomy full-auto answers outward gates too; the safety net still applies there."
+      ]
+    };
+  }
+  return {
+    short: `${tool} needs approval (${actionClass}) at autonomy ${level}`,
+    detail: `Autonomy ${level} routes ${actionClass} actions through operator approval. The call is parked until the operator approves it once or cancels it.`,
+    hints: [
+      "Approving resumes only this call.",
+      "Recognized commands can be added to .clio-coder/safety.yaml.",
+      // The sanctioned pivots for a gated shell command: typed verification
+      // and read-class observe tools run without approval at this level,
+      // and models otherwise stall retrying denied bash for checks or
+      // directory listings.
+      ...actionClass === "execute" ? [
+        'A declared package or project-catalog check runs without approval through the verify tool: verify(check="<id>").',
+        "Read-only inspection runs without approval through the ls, read, grep, and find tools."
+      ] : []
+    ]
+  };
+}
+
+export {
+  AUTONOMY_LEVELS,
+  DEFAULT_AUTONOMY_LEVEL,
+  isAutonomyLevel,
+  AUTONOMY_EXPOSURES,
+  DEFAULT_AUTONOMY_EXPOSURE,
+  mapAutonomy,
+  autonomyDenyRejection,
+  autonomyAskRejection
+};
+//# sourceMappingURL=chunk-HWUFFB6L.js.map