@iowarp/clio-coder 0.3.6 → 0.3.8

package/dist/{chunk-QKMUKYO7.js → chunk-E77JEWSD.js}

@@ -1,4 +1,13 @@
 import { createRequire as __clioCreateRequire } from "node:module"; const require = __clioCreateRequire(import.meta.url);
+import {
+  enabledExtensionResourceRoots
+} from "./chunk-DYIM5TJT.js";
+import {
+  PATH_BOUNDARY_MAX_ENTRIES,
+  normalizePathBoundary,
+  normalizePathBoundaryEntry,
+  pathBoundaryCovers
+} from "./chunk-TTHACPOM.js";
 import {
   ArrayOptions,
   Clone,
@@ -62,12 +71,15 @@ import {
   settings_exports,
   typebox_exports
 } from "./chunk-5B2AEOW5.js";
+import {
+  resolvePackageRoot
+} from "./chunk-IWHMRKLL.js";
 import {
   require_dist
 } from "./chunk-APJ265NV.js";
 import {
-  resolvePackageRoot
-} from "./chunk-IWHMRKLL.js";
+  clioConfigDir
+} from "./chunk-BNAZZHFG.js";
 import {
   __export,
   __toESM,
@@ -3874,23 +3886,23 @@ init_esm_shims();
 
 // node_modules/typebox/build/value/delta/diff.mjs
 init_esm_shims();
-function CreateUpdate(path2, value) {
-  return { type: "update", path: path2, value };
+function CreateUpdate(path, value) {
+  return { type: "update", path, value };
 }
-function CreateInsert(path2, value) {
-  return { type: "insert", path: path2, value };
+function CreateInsert(path, value) {
+  return { type: "insert", path, value };
 }
-function CreateDelete(path2) {
-  return { type: "delete", path: path2 };
+function CreateDelete(path) {
+  return { type: "delete", path };
 }
 function AssertCanDiffObject(value) {
   if (guard_exports.IsObject(value) && guard_exports.IsEqual(guard_exports.Symbols(value).length, 0))
     return;
   throw new Error("Cannot create diffs for objects with symbols keys");
 }
-function* FromObject8(path2, left, right) {
+function* FromObject8(path, left, right) {
   if (!guard_exports.IsObject(right) || guard_exports.IsArray(right))
-    return yield CreateUpdate(path2, right);
+    return yield CreateUpdate(path, right);
   AssertCanDiffObject(left);
   AssertCanDiffObject(right);
   const leftKeys = guard_exports.Keys(left);
@@ -3900,7 +3912,7 @@ function* FromObject8(path2, left, right) {
       continue;
     if (guard_exports.IsUnsafePropertyKey(key))
       continue;
-    yield CreateInsert(`${path2}/${key}`, right[key]);
+    yield CreateInsert(`${path}/${key}`, right[key]);
   }
   for (const key of leftKeys) {
     if (!guard_exports.HasPropertyKey(right, key))
@@ -3909,52 +3921,52 @@ function* FromObject8(path2, left, right) {
       continue;
     if (Equal(left, right))
       continue;
-    yield* FromValue2(`${path2}/${key}`, left[key], right[key]);
+    yield* FromValue2(`${path}/${key}`, left[key], right[key]);
   }
   for (const key of leftKeys) {
     if (guard_exports.HasPropertyKey(right, key))
       continue;
     if (guard_exports.IsUnsafePropertyKey(key))
       continue;
-    yield CreateDelete(`${path2}/${key}`);
+    yield CreateDelete(`${path}/${key}`);
   }
 }
-function* FromArray8(path2, left, right) {
+function* FromArray8(path, left, right) {
   if (!guard_exports.IsArray(right))
-    return yield CreateUpdate(path2, right);
+    return yield CreateUpdate(path, right);
   for (let i = 0; i < Math.min(left.length, right.length); i++) {
-    yield* FromValue2(`${path2}/${i}`, left[i], right[i]);
+    yield* FromValue2(`${path}/${i}`, left[i], right[i]);
   }
   for (let i = 0; i < right.length; i++) {
     if (i < left.length)
       continue;
-    yield CreateInsert(`${path2}/${i}`, right[i]);
+    yield CreateInsert(`${path}/${i}`, right[i]);
   }
   for (let i = left.length - 1; i >= 0; i--) {
     if (i < right.length)
       continue;
-    yield CreateDelete(`${path2}/${i}`);
+    yield CreateDelete(`${path}/${i}`);
   }
 }
-function* FromTypedArray(path2, left, right) {
+function* FromTypedArray(path, left, right) {
   const typeLeft = globalThis.Object.getPrototypeOf(left).constructor.name;
   const typeRight = globalThis.Object.getPrototypeOf(right).constructor.name;
   const predicate = globals_exports.IsTypeArray(right) && guard_exports.IsEqual(left.length, right.length) && guard_exports.IsEqual(typeLeft, typeRight);
   if (predicate) {
     for (let index = 0; index < Math.min(left.length, right.length); index++) {
-      yield* FromValue2(`${path2}/${index}`, left[index], right[index]);
+      yield* FromValue2(`${path}/${index}`, left[index], right[index]);
     }
   } else {
-    return yield CreateUpdate(path2, right);
+    return yield CreateUpdate(path, right);
   }
 }
-function* FromUnknown(path2, left, right) {
+function* FromUnknown(path, left, right) {
   if (left === right)
     return;
-  yield CreateUpdate(path2, right);
+  yield CreateUpdate(path, right);
 }
-function* FromValue2(path2, left, right) {
-  return globals_exports.IsTypeArray(left) ? yield* FromTypedArray(path2, left, right) : guard_exports.IsArray(left) ? yield* FromArray8(path2, left, right) : guard_exports.IsObject(left) ? yield* FromObject8(path2, left, right) : yield* FromUnknown(path2, left, right);
+function* FromValue2(path, left, right) {
+  return globals_exports.IsTypeArray(left) ? yield* FromTypedArray(path, left, right) : guard_exports.IsArray(left) ? yield* FromArray8(path, left, right) : guard_exports.IsObject(left) ? yield* FromObject8(path, left, right) : yield* FromUnknown(path, left, right);
 }
 function Diff(current, next) {
   return [...FromValue2("", current, next)];
@@ -4360,9 +4372,9 @@ function parseFleetCommands(raw, sourcePath) {
   return { version: 1, commands, path: sourcePath };
 }
 function loadFleetCommands(cwd) {
-  const path2 = fleetCommandsPath(cwd);
-  if (!existsSync(path2)) return null;
-  return parseFleetCommands(readFileSync(path2, "utf8"), path2);
+  const path = fleetCommandsPath(cwd);
+  if (!existsSync(path)) return null;
+  return parseFleetCommands(readFileSync(path, "utf8"), path);
 }
 
 // src/domains/agents/fleet-contract.ts
@@ -4404,45 +4416,15 @@ function parseFrontmatter(raw, sourcePath) {
 
 // src/domains/agents/write-boundary.ts
 init_esm_shims();
-var WRITE_BOUNDARY_MAX_ENTRIES = 32;
-var GLOB_CHARACTERS = /[*?[\]{}]/u;
+var WRITE_BOUNDARY_MAX_ENTRIES = PATH_BOUNDARY_MAX_ENTRIES;
 function normalizeWriteBoundaryEntry(entry) {
-  const raw = entry.trim();
-  if (raw.length === 0) throw new Error("write boundary: entry must be a non-empty path");
-  if (raw.includes("\\")) {
-    throw new Error(`write boundary: entry '${entry}' must use '/' separators`);
-  }
-  if (GLOB_CHARACTERS.test(raw)) {
-    throw new Error(`write boundary: entry '${entry}' looks like a glob, which v1 does not support`);
-  }
-  if (raw.startsWith("/") || /^[A-Za-z]:/u.test(raw)) {
-    throw new Error(`write boundary: entry '${entry}' must be repository-relative, not absolute`);
-  }
-  const subtree = raw.endsWith("/");
-  const segments = raw.split("/").filter((segment) => segment.length > 0);
-  if (segments.length === 0) {
-    throw new Error(`write boundary: entry '${entry}' must name a path inside the repository`);
-  }
-  for (const segment of segments) {
-    if (segment === "..") throw new Error(`write boundary: entry '${entry}' must not contain '..'`);
-    if (segment === ".") throw new Error(`write boundary: entry '${entry}' must not contain '.' segments`);
-  }
-  const joined = segments.join("/");
-  return subtree ? `${joined}/` : joined;
+  return normalizePathBoundaryEntry(entry);
 }
 function normalizeWriteBoundary(entries) {
-  if (entries.length > WRITE_BOUNDARY_MAX_ENTRIES) {
-    throw new Error(`write boundary: at most ${WRITE_BOUNDARY_MAX_ENTRIES} entries may be declared`);
-  }
-  const normalized = new Set(entries.map(normalizeWriteBoundaryEntry));
-  return [...normalized].sort();
+  return normalizePathBoundary(entries);
 }
-function toRepoRelativePosix(path2) {
-  return path2.split("\\").join("/");
-}
-function writeBoundaryCovers(boundary, path2) {
-  const candidate = toRepoRelativePosix(path2);
-  return boundary.some((entry) => entry.endsWith("/") ? candidate.startsWith(entry) : candidate === entry);
+function writeBoundaryCovers(boundary, path) {
+  return pathBoundaryCovers(boundary, path);
 }
 function describeWriteBoundary(boundary) {
   return boundary.length === 0 ? "(nothing: readonly)" : boundary.join(", ");
@@ -4450,11 +4432,15 @@ function describeWriteBoundary(boundary) {
 
 // src/domains/agents/fleet-contract.ts
 var FLEET_WRITE_BOUNDARY_VERSION = 4;
+var FLEET_DYNAMIC_STEP_VERSION = 5;
 var FLEET_LOOP_MAX_ATTEMPTS = 5;
 var FleetScopeSchema = typebox_exports.Union([typebox_exports.Literal("readonly"), typebox_exports.Literal("workspace")]);
 function writesSchema(version) {
   return version >= FLEET_WRITE_BOUNDARY_VERSION ? { writes: typebox_exports.Optional(typebox_exports.Array(typebox_exports.String({ minLength: 1 }), { maxItems: WRITE_BOUNDARY_MAX_ENTRIES })) } : {};
 }
+function routeSchema(version) {
+  return version >= FLEET_DYNAMIC_STEP_VERSION ? { target: typebox_exports.Optional(typebox_exports.String({ minLength: 1 })), profile: typebox_exports.Optional(typebox_exports.String({ minLength: 1 })) } : {};
+}
 function agentStepSchema(version) {
   return typebox_exports.Object(
     {
@@ -4463,7 +4449,40 @@ function agentStepSchema(version) {
       agent: typebox_exports.String({ minLength: 1 }),
       scope: FleetScopeSchema,
       dependencies: typebox_exports.Array(typebox_exports.String({ minLength: 1 })),
-      ...writesSchema(version)
+      ...writesSchema(version),
+      ...routeSchema(version)
+    },
+    { additionalProperties: false }
+  );
+}
+function gateStepSchema() {
+  return typebox_exports.Object(
+    {
+      kind: typebox_exports.Literal("gate"),
+      id: typebox_exports.String({ minLength: 1 }),
+      agent: typebox_exports.String({ minLength: 1 }),
+      path: typebox_exports.String({ minLength: 1 }),
+      run: typebox_exports.String({ minLength: 1 }),
+      scope: typebox_exports.Optional(typebox_exports.Literal("workspace")),
+      dependencies: typebox_exports.Array(typebox_exports.String({ minLength: 1 })),
+      ...routeSchema(5)
+    },
+    { additionalProperties: false }
+  );
+}
+function planStepSchema() {
+  return typebox_exports.Object(
+    {
+      kind: typebox_exports.Literal("plan"),
+      id: typebox_exports.String({ minLength: 1 }),
+      agent: typebox_exports.Optional(typebox_exports.String({ minLength: 1 })),
+      roster: typebox_exports.Array(typebox_exports.String({ minLength: 1 }), { minItems: 1, maxItems: 16 }),
+      maxTasks: typebox_exports.Integer({ minimum: 1, maximum: 16 }),
+      proposals: typebox_exports.Optional(typebox_exports.Boolean()),
+      scope: FleetScopeSchema,
+      dependencies: typebox_exports.Array(typebox_exports.String({ minLength: 1 })),
+      ...writesSchema(5),
+      ...routeSchema(5)
     },
     { additionalProperties: false }
   );
@@ -4500,12 +4519,19 @@ function loopStepSchema(version) {
           },
           { additionalProperties: false }
         ),
+        ...version >= FLEET_DYNAMIC_STEP_VERSION ? [
+          typebox_exports.Object(
+            { kind: typebox_exports.Literal("gate"), gate: typebox_exports.String({ minLength: 1 }) },
+            { additionalProperties: false }
+          )
+        ] : [],
         typebox_exports.Object(
           {
             kind: typebox_exports.Literal("agent"),
             agent: typebox_exports.String({ minLength: 1 }),
             scope: FleetScopeSchema,
-            ...writesSchema(version)
+            ...writesSchema(version),
+            ...routeSchema(version)
           },
           { additionalProperties: false }
         )
@@ -4515,7 +4541,8 @@ function loopStepSchema(version) {
           kind: typebox_exports.Optional(typebox_exports.Literal("agent")),
           agent: typebox_exports.String({ minLength: 1 }),
           scope: FleetScopeSchema,
-          ...writesSchema(version)
+          ...writesSchema(version),
+          ...routeSchema(version)
         },
         { additionalProperties: false }
       )
@@ -4526,6 +4553,15 @@ function loopStepSchema(version) {
 function stepSchema(version) {
   if (version === 1) return agentStepSchema(1);
   if (version === 2) return typebox_exports.Union([agentStepSchema(2), codeStepSchema(2)]);
+  if (version === 5) {
+    return typebox_exports.Union([
+      agentStepSchema(version),
+      codeStepSchema(version),
+      loopStepSchema(version),
+      gateStepSchema(),
+      planStepSchema()
+    ]);
+  }
   return typebox_exports.Union([agentStepSchema(version), codeStepSchema(version), loopStepSchema(version)]);
 }
 function frontmatterSchema(version) {
@@ -4537,7 +4573,8 @@ function frontmatterSchema(version) {
       steps: typebox_exports.Array(stepSchema(version), { minItems: 1 }),
       maxWorkers: typebox_exports.Integer({ minimum: 1 }),
       budgetUsd: typebox_exports.Optional(typebox_exports.Number()),
-      onFailure: typebox_exports.Union([typebox_exports.Literal("stop"), typebox_exports.Literal("continue")])
+      onFailure: typebox_exports.Union([typebox_exports.Literal("stop"), typebox_exports.Literal("continue")]),
+      ...version >= FLEET_DYNAMIC_STEP_VERSION ? { writers: typebox_exports.Optional(typebox_exports.Literal(1)) } : {}
     },
     { additionalProperties: false }
   );
@@ -4546,11 +4583,12 @@ var SCHEMAS = {
   1: frontmatterSchema(1),
   2: frontmatterSchema(2),
   3: frontmatterSchema(3),
-  4: frontmatterSchema(4)
+  4: frontmatterSchema(4),
+  5: frontmatterSchema(5)
 };
 function contractVersion(frontmatter) {
   const value = frontmatter.version;
-  return value === 1 || value === 2 || value === 3 || value === 4 ? value : null;
+  return value === 1 || value === 2 || value === 3 || value === 4 || value === 5 ? value : null;
 }
 function firstSchemaError2(frontmatter, version) {
   const schema = SCHEMAS[version];
@@ -4565,6 +4603,36 @@ function normalizedWrites(writes) {
   return writes === void 0 ? {} : { writes: normalizeWriteBoundary(writes) };
 }
 function normalizeStep(step) {
+  const route = (value) => ({
+    ...value.target !== void 0 ? { target: value.target } : {},
+    ...value.profile !== void 0 ? { profile: value.profile } : {}
+  });
+  if (step.kind === "gate") {
+    return {
+      kind: "gate",
+      id: step.id,
+      agent: step.agent ?? "",
+      path: step.path ?? "",
+      run: step.run ?? "",
+      scope: "workspace",
+      dependencies: [...step.dependencies],
+      ...route(step)
+    };
+  }
+  if (step.kind === "plan") {
+    return {
+      kind: "plan",
+      id: step.id,
+      agent: step.agent ?? "architect",
+      roster: [...step.roster ?? []],
+      maxTasks: step.maxTasks ?? 0,
+      proposals: step.proposals ?? false,
+      scope: step.scope,
+      dependencies: [...step.dependencies],
+      ...normalizedWrites(step.writes),
+      ...route(step)
+    };
+  }
   if (step.kind === "loop") {
     const check = step.check;
     const repair = step.repair;
@@ -4573,8 +4641,20 @@ function normalizeStep(step) {
       id: step.id,
       maxAttempts: step.maxAttempts ?? 0,
       dependencies: [...step.dependencies],
-      check: check.kind === "code" ? { kind: "code", command: check.command ?? "", scope: check.scope, ...normalizedWrites(check.writes) } : { kind: "agent", agent: check.agent ?? "", scope: check.scope, ...normalizedWrites(check.writes) },
-      repair: { kind: "agent", agent: repair.agent, scope: repair.scope, ...normalizedWrites(repair.writes) }
+      check: check.kind === "code" ? { kind: "code", command: check.command ?? "", scope: check.scope, ...normalizedWrites(check.writes) } : check.kind === "gate" ? { kind: "gate", gate: check.gate ?? "" } : {
+        kind: "agent",
+        agent: check.agent ?? "",
+        scope: check.scope,
+        ...normalizedWrites(check.writes),
+        ...route(check)
+      },
+      repair: {
+        kind: "agent",
+        agent: repair.agent,
+        scope: repair.scope,
+        ...normalizedWrites(repair.writes),
+        ...route(repair)
+      }
     };
   }
   if (step.kind === "code") {
@@ -4594,7 +4674,8 @@ function normalizeStep(step) {
     agent: step.agent ?? "",
     scope: step.scope,
     dependencies: [...step.dependencies],
-    ...normalizedWrites(step.writes)
+    ...normalizedWrites(step.writes),
+    ...route(step)
   };
 }
 function fleetLoopCheckStepId(loopId, attempt) {
@@ -4635,6 +4716,13 @@ function validateFleetGraph(contract) {
     }
   }
   for (const step of contract.steps) {
+    if (step.kind === "loop" && step.check.kind === "gate") {
+      const gateId = step.check.gate;
+      const gate = contract.steps.find((candidate) => candidate.id === gateId);
+      if (gate?.kind !== "gate") {
+        throw new Error(`fleet contract ${contract.path}: loop '${step.id}' names unknown gate '${gateId}'`);
+      }
+    }
     for (const dependency of step.dependencies) {
       if (dependency === step.id) throw new Error(`fleet contract ${contract.path}: step '${step.id}' depends on itself`);
       if (!declared.has(dependency)) {
@@ -4688,10 +4776,18 @@ function fleetStepBoundaries(contract) {
   };
   for (const step of contract.steps) {
     if (step.kind === "loop") {
-      add(`${step.id}.check`, step.check.scope, step.check.writes);
+      if (step.check.kind === "gate") {
+        const gateId = step.check.gate;
+        const gate = contract.steps.find((candidate) => candidate.id === gateId);
+        if (gate?.kind === "gate") add(`${step.id}.check`, "workspace", [gate.path]);
+      } else add(`${step.id}.check`, step.check.scope, step.check.writes);
       add(`${step.id}.repair`, step.repair.scope, step.repair.writes);
       continue;
     }
+    if (step.kind === "gate") {
+      add(step.id, "workspace", [step.path]);
+      continue;
+    }
     add(step.id, step.scope, step.writes);
   }
   return boundaries;
@@ -4707,9 +4803,9 @@ function validateWriteBoundaries(contract) {
   }
   for (const step of contract.steps) {
     const declared = step.kind === "loop" ? [
-      { id: `${step.id}.check`, scope: step.check.scope, writes: step.check.writes },
+      ...step.check.kind === "gate" ? [] : [{ id: `${step.id}.check`, scope: step.check.scope, writes: step.check.writes }],
       { id: `${step.id}.repair`, scope: step.repair.scope, writes: step.repair.writes }
-    ] : [{ id: step.id, scope: step.scope, writes: step.writes }];
+    ] : step.kind === "gate" ? [] : [{ id: step.id, scope: step.scope, writes: step.writes }];
     for (const position of declared) {
       if (position.scope === "readonly" && position.writes !== void 0) {
         throw new Error(
@@ -4742,11 +4838,11 @@ function parseFleetContract(raw, sourcePath) {
   const { frontmatter, body } = parseFrontmatter(raw, sourcePath);
   const version = contractVersion(frontmatter);
   if (version === null) {
-    throw new Error(
-      `fleet contract ${sourcePath}: version must be 1 (agent steps), 2 (agent and code steps), 3 (adds bounded loops and commit steps), or 4 (adds enforced write boundaries)`
-    );
+    throw new Error(`fleet contract ${sourcePath}: version must be 1, 2, 3, 4, or 5`);
   }
   if (version < FLEET_WRITE_BOUNDARY_VERSION) assertNoWritesBefore(frontmatter, sourcePath, version);
+  if (version < FLEET_DYNAMIC_STEP_VERSION) assertNoV5FieldsBefore(frontmatter, sourcePath, version);
+  if (version >= FLEET_DYNAMIC_STEP_VERSION) assertNoGateWrites(frontmatter, sourcePath);
   const schemaError = firstSchemaError2(frontmatter, version);
   if (schemaError !== null) {
     throw new Error(`fleet contract ${sourcePath}: ${schemaError}`);
@@ -4767,13 +4863,47 @@ function parseFleetContract(raw, sourcePath) {
     maxWorkers: fm.maxWorkers,
     budgetUsd: fm.budgetUsd ?? null,
     onFailure: fm.onFailure,
+    ...fm.writers === 1 ? { writers: 1 } : {},
     body: trimmedBody,
     path: sourcePath
   };
   validateFleetGraph(contract);
   validateWriteBoundaries(contract);
+  validateV5Declarations(contract);
   return contract;
 }
+function validateV5Declarations(contract) {
+  if (contract.version < FLEET_DYNAMIC_STEP_VERSION) return;
+  const route = (id, value) => {
+    if (value.target !== void 0 && value.profile !== void 0) {
+      throw new Error(`fleet contract ${contract.path}: step '${id}' may declare target or profile, never both`);
+    }
+  };
+  for (const step of contract.steps) {
+    if (step.kind === "agent" || step.kind === "plan" || step.kind === "gate") route(step.id, step);
+    if (step.kind === "plan" && new Set(step.roster).size !== step.roster.length) {
+      throw new Error(`fleet contract ${contract.path}: plan step '${step.id}' roster contains duplicate agents`);
+    }
+    if (step.kind === "gate") {
+      let normalized;
+      try {
+        normalized = normalizeWriteBoundary([step.path]);
+      } catch (error) {
+        throw new Error(
+          `fleet contract ${contract.path}: gate '${step.id}' path is invalid: ${error instanceof Error ? error.message : String(error)}`
+        );
+      }
+      if (normalized[0] !== step.path.replaceAll("\\", "/")) {
+        throw new Error(
+          `fleet contract ${contract.path}: gate '${step.id}' path must be normalized and repository-relative`
+        );
+      }
+    }
+    if (step.kind !== "loop") continue;
+    if (step.check.kind === "agent") route(`${step.id}.check`, step.check);
+    route(`${step.id}.repair`, step.repair);
+  }
+}
 function assertNoWritesBefore(frontmatter, sourcePath, version) {
   const steps = Array.isArray(frontmatter.steps) ? frontmatter.steps : [];
   const declaresWrites = (value) => typeof value === "object" && value !== null && "writes" in value;
@@ -4786,10 +4916,48 @@ function assertNoWritesBefore(frontmatter, sourcePath, version) {
     }
   }
 }
+function assertNoGateWrites(frontmatter, sourcePath) {
+  for (const value of Array.isArray(frontmatter.steps) ? frontmatter.steps : []) {
+    if (typeof value !== "object" || value === null) continue;
+    const step = value;
+    if (step.kind !== "gate" || typeof step.id !== "string" || step.id.length === 0 || !("writes" in step)) continue;
+    throw new Error(
+      `fleet contract ${sourcePath}: gate step '${step.id}' must not declare 'writes'; its write boundary is derived from 'path'`
+    );
+  }
+}
+function assertNoV5FieldsBefore(frontmatter, sourcePath, version) {
+  const forbidden = ["target", "profile"];
+  if ("writers" in frontmatter) {
+    throw new Error(
+      `fleet contract ${sourcePath}: 'writers' requires contract version ${FLEET_DYNAMIC_STEP_VERSION}; this contract declares version ${version}`
+    );
+  }
+  for (const value of Array.isArray(frontmatter.steps) ? frontmatter.steps : []) {
+    if (typeof value !== "object" || value === null) continue;
+    const step = value;
+    if (step.kind === "plan" || step.kind === "gate") {
+      throw new Error(
+        `fleet contract ${sourcePath}: kind '${String(step.kind)}' requires contract version ${FLEET_DYNAMIC_STEP_VERSION}; this contract declares version ${version}`
+      );
+    }
+    for (const candidate of [step, step.check, step.repair]) {
+      if (typeof candidate !== "object" || candidate === null) continue;
+      for (const field of forbidden) {
+        if (field in candidate) {
+          throw new Error(
+            `fleet contract ${sourcePath}: '${field}' requires contract version ${FLEET_DYNAMIC_STEP_VERSION}; this contract declares version ${version}`
+          );
+        }
+      }
+    }
+  }
+}
 function fleetCodeSteps(contract) {
   const steps = [];
   for (const step of contract.steps) {
     if (step.kind === "code") steps.push({ id: step.id, command: step.command });
+    else if (step.kind === "gate") steps.push({ id: step.id, command: step.run });
     else if (step.kind === "loop" && step.check.kind === "code") {
       steps.push({ id: fleetLoopCheckStepId(step.id, 1), command: step.check.command });
     }
@@ -4828,11 +4996,19 @@ function validateFleetCommands(contract, registry) {
 function builtinFleetsDir() {
   return join2(resolvePackageRoot(), "src", "domains", "agents", "fleets");
 }
+function fleetSources(cwd) {
+  return [
+    { dir: builtinFleetsDir(), source: "builtin" },
+    ...enabledExtensionResourceRoots("fleets", cwd).sort((left, right) => left.source.localeCompare(right.source)).map((root) => ({ dir: root.path, source: "extension" })),
+    { dir: join2(clioConfigDir(), "fleets"), source: "user" },
+    { dir: fleetsDir(cwd), source: "project" }
+  ];
+}
 function fleetContractPath(cwd, name) {
-  const projectPath = join2(fleetsDir(cwd), `${name}.md`);
-  if (existsSync2(projectPath)) return { path: projectPath, source: "project" };
-  const builtinPath = join2(builtinFleetsDir(), `${name}.md`);
-  if (existsSync2(builtinPath)) return { path: builtinPath, source: "builtin" };
+  for (const source of [...fleetSources(cwd)].reverse()) {
+    const candidate = join2(source.dir, `${name}.md`);
+    if (existsSync2(candidate)) return { path: candidate, source: source.source };
+  }
   return null;
 }
 function loadFleetContract(cwd, name) {
@@ -4861,23 +5037,20 @@ function listFleetContracts(cwd) {
     registryError = err instanceof Error ? err.message : String(err);
   }
   const listings = /* @__PURE__ */ new Map();
-  const sources = [
-    { dir: builtinFleetsDir(), source: "builtin" },
-    { dir: fleetsDir(cwd), source: "project" }
-  ];
+  const sources = fleetSources(cwd);
   for (const { dir, source } of sources) {
     for (const file of listDirectory(dir)) {
-      const path2 = join2(dir, file);
+      const path = join2(dir, file);
       const name = basename(file, ".md");
       try {
-        const contract = parseFleetContract(readFileSync2(path2, "utf8"), path2);
+        const contract = parseFleetContract(readFileSync2(path, "utf8"), path);
         if (registryError !== null && fleetCodeSteps(contract).length > 0) throw new Error(registryError);
         validateFleetCommands(contract, registry);
-        listings.set(name, { name, path: path2, source, contract, error: null, needsCommands: null });
+        listings.set(name, { name, path, source, contract, error: null, needsCommands: null });
       } catch (err) {
         listings.set(name, {
           name,
-          path: path2,
+          path,
           source,
           contract: null,
           error: err instanceof Error ? err.message : String(err),
@@ -4908,54 +5081,26 @@ function renderFleetPrompt(body, vars) {
   return rendered;
 }
 
-// src/domains/safety/rigor.ts
-init_esm_shims();
-import { existsSync as existsSync3 } from "node:fs";
-import path from "node:path";
-var VALIDATION_CONTRACT_FILES = [
-  path.join(".clio-coder", "validation.yaml"),
-  path.join(".clio-coder", "validation.yml"),
-  "validation.yaml",
-  "validation.yml",
-  "VALIDATION.md"
-];
-function resolveRigor(options) {
-  if (options.override === "high" || options.override === "normal") return options.override;
-  const cwd = options.cwd ?? process.cwd();
-  return hasValidationContract(cwd) ? "high" : "normal";
-}
-function parseRigorOverride(value) {
-  if (typeof value !== "string") return null;
-  const normalized = value.trim().toLowerCase();
-  if (normalized === "high") return "high";
-  if (normalized === "normal") return "normal";
-  return null;
-}
-function hasValidationContract(cwd) {
-  try {
-    return VALIDATION_CONTRACT_FILES.some((relative) => existsSync3(path.join(cwd, relative)));
-  } catch {
-    return false;
-  }
-}
-
 export {
   parseFrontmatter,
   FLEET_COMMAND_BASE_ENV,
   loadFleetCommands,
+  normalizeWriteBoundaryEntry,
   normalizeWriteBoundary,
   writeBoundaryCovers,
   describeWriteBoundary,
   fleetLoopCheckStepId,
   fleetLoopRepairStepId,
+  validateFleetGraph,
   fleetStepWriteBoundary,
+  fleetStepBoundaries,
+  parseFleetContract,
   FLEET_COMMANDS_REPO_PATH,
   FLEET_COMMANDS_REMEDY,
   FleetCommandRegistryMissingError,
+  validateFleetCommands,
   loadFleetContract,
   listFleetContracts,
-  renderFleetPrompt,
-  resolveRigor,
-  parseRigorOverride
+  renderFleetPrompt
 };
-//# sourceMappingURL=chunk-QKMUKYO7.js.map
+//# sourceMappingURL=chunk-E77JEWSD.js.map