@iowarp/clio-coder 0.3.7 → 0.3.8

package/dist/{chunk-ZWLZP4ZT.js → chunk-DYIM5TJT.js}

@@ -16,7 +16,7 @@ import {
 // src/domains/extensions/discovery.ts
 init_esm_shims();
 var import_yaml = __toESM(require_dist(), 1);
-import { existsSync, readdirSync, readFileSync, statSync } from "node:fs";
+import { existsSync, lstatSync, readdirSync, readFileSync, realpathSync, statSync } from "node:fs";
 import path from "node:path";
 var MANIFEST_NAMES = ["clio-coder-extension.yaml", "clio-coder-extension.yml", "clio-coder-extension.json"];
 function isRecord(value) {
@@ -44,12 +44,85 @@ function normalizeResources(value) {
   const out = {};
   const skills = trimString(value.skills);
   const prompts = trimString(value.prompts);
+  const agents = trimString(value.agents);
+  const fleets = trimString(value.fleets);
   const themes = trimString(value.themes);
   if (skills) out.skills = skills;
   if (prompts) out.prompts = prompts;
+  if (agents) out.agents = agents;
+  if (fleets) out.fleets = fleets;
   if (themes) out.themes = themes;
   return out;
 }
+function contained(root, candidate) {
+  const relative = path.relative(root, candidate);
+  return relative === "" || !relative.startsWith(`..${path.sep}`) && relative !== ".." && !path.isAbsolute(relative);
+}
+function validateResourceTree(root, resourcePath, kind, diagnostics) {
+  if (path.isAbsolute(resourcePath)) {
+    diagnostics.push({ type: "error", message: `resources.${kind} must be relative`, path: resourcePath });
+    return;
+  }
+  const resolvedRoot = path.resolve(root);
+  const resolved = path.resolve(resolvedRoot, resourcePath);
+  if (!contained(resolvedRoot, resolved) || resolved === resolvedRoot) {
+    diagnostics.push({ type: "error", message: `resources.${kind} escapes the extension root`, path: resourcePath });
+    return;
+  }
+  let canonicalRoot;
+  let canonicalResource;
+  try {
+    canonicalRoot = realpathSync(resolvedRoot);
+    canonicalResource = realpathSync(resolved);
+    if (!lstatSync(resolved).isDirectory()) {
+      diagnostics.push({ type: "error", message: `resources.${kind} is not a directory`, path: resolved });
+      return;
+    }
+  } catch (error) {
+    diagnostics.push({
+      type: "error",
+      message: `resources.${kind} cannot be resolved: ${error instanceof Error ? error.message : String(error)}`,
+      path: resolved
+    });
+    return;
+  }
+  if (!contained(canonicalRoot, canonicalResource)) {
+    diagnostics.push({ type: "error", message: `resources.${kind} escapes through a symbolic link`, path: resolved });
+    return;
+  }
+  const pending = [resolved];
+  while (pending.length > 0) {
+    const directory = pending.pop();
+    if (!directory) continue;
+    for (const entry of readdirSync(directory, { withFileTypes: true }).sort((a, b) => a.name.localeCompare(b.name))) {
+      const candidate = path.join(directory, entry.name);
+      if (entry.isSymbolicLink()) {
+        try {
+          if (!contained(canonicalRoot, realpathSync(candidate))) {
+            diagnostics.push({
+              type: "error",
+              message: `resources.${kind} contains an escaping symbolic link`,
+              path: candidate
+            });
+          }
+        } catch (error) {
+          diagnostics.push({
+            type: "error",
+            message: `resources.${kind} contains an unresolved symbolic link: ${error instanceof Error ? error.message : String(error)}`,
+            path: candidate
+          });
+        }
+      } else if (entry.isDirectory()) {
+        pending.push(candidate);
+      }
+    }
+  }
+}
+function validateResourceRoots(root, resources, diagnostics) {
+  for (const [kind, resourcePath] of Object.entries(resources)) {
+    if (resourcePath) validateResourceTree(root, resourcePath, kind, diagnostics);
+  }
+}
 function stringArray(value) {
   if (!Array.isArray(value)) return void 0;
   const out = value.map((entry) => trimString(entry)).filter((entry) => entry !== void 0);
@@ -115,6 +188,7 @@ function loadManifestFromRoot(root) {
   }
   try {
     const parsed = parseExtensionManifest(readJsonOrYaml(manifestPath), manifestPath);
+    if (parsed.manifest) validateResourceRoots(root, parsed.manifest.resources, parsed.diagnostics);
     return {
       path: root,
       manifestPath,
@@ -284,7 +358,7 @@ function installExtension(sourcePath, options = {}) {
   const cwd = options.cwd ?? process.cwd();
   const source = path2.resolve(sourcePath);
   const candidate = loadManifestFromRoot(source);
-  if (!candidate.manifest) return { diagnostics: candidate.diagnostics };
+  if (!candidate.manifest || !candidate.valid) return { diagnostics: candidate.diagnostics };
   const targetRoot = path2.join(extensionBaseDir(scope, cwd), candidate.manifest.id);
   if (existsSync2(targetRoot)) {
     if (!options.force) {
@@ -307,7 +381,11 @@ function installExtension(sourcePath, options = {}) {
     rmSync(backupRoot, { recursive: true, force: true });
     cpSync(source, stagingRoot, {
       recursive: true,
-      filter: (src) => path2.basename(src) !== "state.json"
+      // `state.json` beside the installed extension directories belongs to
+      // Clio's extension manager. An extension may legitimately ship nested
+      // resources with the same basename (for example a project-state JSON
+      // template), so exclude only a bookkeeping file at the package root.
+      filter: (src) => path2.relative(source, src) !== "state.json"
     });
     if (existsSync2(targetRoot)) {
       renameSync(targetRoot, backupRoot);
@@ -379,14 +457,26 @@ init_esm_shims();
 
 // src/domains/extensions/resources.ts
 init_esm_shims();
-import { statSync as statSync2 } from "node:fs";
+import { lstatSync as lstatSync2, realpathSync as realpathSync2 } from "node:fs";
 import path3 from "node:path";
 function extensionResourcePath(rootPath, resourcePath) {
   const root = path3.resolve(rootPath);
   const full = path3.resolve(root, resourcePath);
   const relative = path3.relative(root, full);
-  if (relative === "" || !relative.startsWith("..") && !path3.isAbsolute(relative)) return full;
-  return null;
+  if (relative === "" || relative === ".." || relative.startsWith(`..${path3.sep}`) || path3.isAbsolute(relative))
+    return null;
+  try {
+    const rootReal = realpathSync2(root);
+    const fullReal = realpathSync2(full);
+    const canonicalRelative = path3.relative(rootReal, fullReal);
+    if (canonicalRelative === ".." || canonicalRelative.startsWith(`..${path3.sep}`) || path3.isAbsolute(canonicalRelative)) {
+      return null;
+    }
+    if (!lstatSync2(full).isDirectory()) return null;
+    return full;
+  } catch {
+    return null;
+  }
 }
 function enabledExtensionResourceRoots(kind, cwd = process.cwd()) {
   const roots = [];
@@ -396,15 +486,11 @@ function enabledExtensionResourceRoots(kind, cwd = process.cwd()) {
     if (!rel) continue;
     const full = extensionResourcePath(entry.rootPath, rel);
     if (!full) continue;
-    try {
-      if (!statSync2(full).isDirectory()) continue;
-    } catch {
-      continue;
-    }
     roots.push({
       id: entry.id,
       scope: entry.scope,
       path: full,
+      rootPath: entry.rootPath,
       source: `extension:${entry.scope}:${entry.id}`
     });
   }
@@ -474,4 +560,4 @@ export {
   enabledExtensionResourceRoots,
   ExtensionsDomainModule
 };
-//# sourceMappingURL=chunk-ZWLZP4ZT.js.map
+//# sourceMappingURL=chunk-DYIM5TJT.js.map

package/dist/{chunk-KCMKRQX4.js → chunk-E77JEWSD.js}

@@ -1,4 +1,13 @@
 import { createRequire as __clioCreateRequire } from "node:module"; const require = __clioCreateRequire(import.meta.url);
+import {
+  enabledExtensionResourceRoots
+} from "./chunk-DYIM5TJT.js";
+import {
+  PATH_BOUNDARY_MAX_ENTRIES,
+  normalizePathBoundary,
+  normalizePathBoundaryEntry,
+  pathBoundaryCovers
+} from "./chunk-TTHACPOM.js";
 import {
   ArrayOptions,
   Clone,
@@ -62,15 +71,15 @@ import {
   settings_exports,
   typebox_exports
 } from "./chunk-5B2AEOW5.js";
+import {
+  resolvePackageRoot
+} from "./chunk-IWHMRKLL.js";
 import {
   require_dist
 } from "./chunk-APJ265NV.js";
 import {
   clioConfigDir
 } from "./chunk-BNAZZHFG.js";
-import {
-  resolvePackageRoot
-} from "./chunk-IWHMRKLL.js";
 import {
   __export,
   __toESM,
@@ -4407,45 +4416,15 @@ function parseFrontmatter(raw, sourcePath) {
 
 // src/domains/agents/write-boundary.ts
 init_esm_shims();
-var WRITE_BOUNDARY_MAX_ENTRIES = 32;
-var GLOB_CHARACTERS = /[*?[\]{}]/u;
+var WRITE_BOUNDARY_MAX_ENTRIES = PATH_BOUNDARY_MAX_ENTRIES;
 function normalizeWriteBoundaryEntry(entry) {
-  const raw = entry.trim();
-  if (raw.length === 0) throw new Error("write boundary: entry must be a non-empty path");
-  if (raw.includes("\\")) {
-    throw new Error(`write boundary: entry '${entry}' must use '/' separators`);
-  }
-  if (GLOB_CHARACTERS.test(raw)) {
-    throw new Error(`write boundary: entry '${entry}' looks like a glob, which v1 does not support`);
-  }
-  if (raw.startsWith("/") || /^[A-Za-z]:/u.test(raw)) {
-    throw new Error(`write boundary: entry '${entry}' must be repository-relative, not absolute`);
-  }
-  const subtree = raw.endsWith("/");
-  const segments = raw.split("/").filter((segment) => segment.length > 0);
-  if (segments.length === 0) {
-    throw new Error(`write boundary: entry '${entry}' must name a path inside the repository`);
-  }
-  for (const segment of segments) {
-    if (segment === "..") throw new Error(`write boundary: entry '${entry}' must not contain '..'`);
-    if (segment === ".") throw new Error(`write boundary: entry '${entry}' must not contain '.' segments`);
-  }
-  const joined = segments.join("/");
-  return subtree ? `${joined}/` : joined;
+  return normalizePathBoundaryEntry(entry);
 }
 function normalizeWriteBoundary(entries) {
-  if (entries.length > WRITE_BOUNDARY_MAX_ENTRIES) {
-    throw new Error(`write boundary: at most ${WRITE_BOUNDARY_MAX_ENTRIES} entries may be declared`);
-  }
-  const normalized = new Set(entries.map(normalizeWriteBoundaryEntry));
-  return [...normalized].sort();
-}
-function toRepoRelativePosix(path) {
-  return path.split("\\").join("/");
+  return normalizePathBoundary(entries);
 }
 function writeBoundaryCovers(boundary, path) {
-  const candidate = toRepoRelativePosix(path);
-  return boundary.some((entry) => entry.endsWith("/") ? candidate.startsWith(entry) : candidate === entry);
+  return pathBoundaryCovers(boundary, path);
 }
 function describeWriteBoundary(boundary) {
   return boundary.length === 0 ? "(nothing: readonly)" : boundary.join(", ");
@@ -4863,6 +4842,7 @@ function parseFleetContract(raw, sourcePath) {
   }
   if (version < FLEET_WRITE_BOUNDARY_VERSION) assertNoWritesBefore(frontmatter, sourcePath, version);
   if (version < FLEET_DYNAMIC_STEP_VERSION) assertNoV5FieldsBefore(frontmatter, sourcePath, version);
+  if (version >= FLEET_DYNAMIC_STEP_VERSION) assertNoGateWrites(frontmatter, sourcePath);
   const schemaError = firstSchemaError2(frontmatter, version);
   if (schemaError !== null) {
     throw new Error(`fleet contract ${sourcePath}: ${schemaError}`);
@@ -4936,6 +4916,16 @@ function assertNoWritesBefore(frontmatter, sourcePath, version) {
     }
   }
 }
+function assertNoGateWrites(frontmatter, sourcePath) {
+  for (const value of Array.isArray(frontmatter.steps) ? frontmatter.steps : []) {
+    if (typeof value !== "object" || value === null) continue;
+    const step = value;
+    if (step.kind !== "gate" || typeof step.id !== "string" || step.id.length === 0 || !("writes" in step)) continue;
+    throw new Error(
+      `fleet contract ${sourcePath}: gate step '${step.id}' must not declare 'writes'; its write boundary is derived from 'path'`
+    );
+  }
+}
 function assertNoV5FieldsBefore(frontmatter, sourcePath, version) {
   const forbidden = ["target", "profile"];
   if ("writers" in frontmatter) {
@@ -5006,13 +4996,19 @@ function validateFleetCommands(contract, registry) {
 function builtinFleetsDir() {
   return join2(resolvePackageRoot(), "src", "domains", "agents", "fleets");
 }
+function fleetSources(cwd) {
+  return [
+    { dir: builtinFleetsDir(), source: "builtin" },
+    ...enabledExtensionResourceRoots("fleets", cwd).sort((left, right) => left.source.localeCompare(right.source)).map((root) => ({ dir: root.path, source: "extension" })),
+    { dir: join2(clioConfigDir(), "fleets"), source: "user" },
+    { dir: fleetsDir(cwd), source: "project" }
+  ];
+}
 function fleetContractPath(cwd, name) {
-  const projectPath = join2(fleetsDir(cwd), `${name}.md`);
-  if (existsSync2(projectPath)) return { path: projectPath, source: "project" };
-  const userPath = join2(clioConfigDir(), "fleets", `${name}.md`);
-  if (existsSync2(userPath)) return { path: userPath, source: "user" };
-  const builtinPath = join2(builtinFleetsDir(), `${name}.md`);
-  if (existsSync2(builtinPath)) return { path: builtinPath, source: "builtin" };
+  for (const source of [...fleetSources(cwd)].reverse()) {
+    const candidate = join2(source.dir, `${name}.md`);
+    if (existsSync2(candidate)) return { path: candidate, source: source.source };
+  }
   return null;
 }
 function loadFleetContract(cwd, name) {
@@ -5041,11 +5037,7 @@ function listFleetContracts(cwd) {
     registryError = err instanceof Error ? err.message : String(err);
   }
   const listings = /* @__PURE__ */ new Map();
-  const sources = [
-    { dir: builtinFleetsDir(), source: "builtin" },
-    { dir: join2(clioConfigDir(), "fleets"), source: "user" },
-    { dir: fleetsDir(cwd), source: "project" }
-  ];
+  const sources = fleetSources(cwd);
   for (const { dir, source } of sources) {
     for (const file of listDirectory(dir)) {
       const path = join2(dir, file);
@@ -5093,6 +5085,7 @@ export {
   parseFrontmatter,
   FLEET_COMMAND_BASE_ENV,
   loadFleetCommands,
+  normalizeWriteBoundaryEntry,
   normalizeWriteBoundary,
   writeBoundaryCovers,
   describeWriteBoundary,
@@ -5110,4 +5103,4 @@ export {
   listFleetContracts,
   renderFleetPrompt
 };
-//# sourceMappingURL=chunk-KCMKRQX4.js.map
+//# sourceMappingURL=chunk-E77JEWSD.js.map

package/dist/{chunk-J7PIKKWC.js → chunk-EMYUUSFG.js}

@@ -4,25 +4,25 @@ import {
   READONLY_SCOPE,
   WORKSPACE_SCOPE,
   isSubset
-} from "./chunk-IR4CFBFN.js";
+} from "./chunk-VCBR6CU7.js";
 import {
   createLoopState,
   observe
 } from "./chunk-UOV2BYIW.js";
 import {
   createSafetyPolicyEngine
-} from "./chunk-OBMAI2DP.js";
+} from "./chunk-5H3GB5BO.js";
 import {
   classify
 } from "./chunk-AOCYTWAV.js";
+import {
+  BusChannels,
+  isRunAbortedPayload
+} from "./chunk-TT36MB5S.js";
 import {
   clioStateDir,
   stateRootRemoved
 } from "./chunk-BNAZZHFG.js";
-import {
-  BusChannels,
-  isRunAbortedPayload
-} from "./chunk-OB5HIGJY.js";
 import {
   init_esm_shims
 } from "./chunk-3R73A4XB.js";
@@ -608,4 +608,4 @@ var SafetyDomainModule = {
 export {
   SafetyDomainModule
 };
-//# sourceMappingURL=chunk-J7PIKKWC.js.map
+//# sourceMappingURL=chunk-EMYUUSFG.js.map

package/dist/{chunk-JRIO5UD2.js → chunk-EQ63NRB7.js}

@@ -9,16 +9,16 @@ import {
 import {
   require_dist
 } from "./chunk-APJ265NV.js";
-import {
-  findEngineEnvKeys,
-  getEngineEnvApiKey
-} from "./chunk-YXLYO42X.js";
 import {
   clioConfigDir
 } from "./chunk-BNAZZHFG.js";
 import {
   safeResourceWrite
 } from "./chunk-WEPFGWHJ.js";
+import {
+  findEngineEnvKeys,
+  getEngineEnvApiKey
+} from "./chunk-YXLYO42X.js";
 import {
   __toESM,
   init_esm_shims
@@ -959,4 +959,4 @@ export {
   authNotRequiredStatus,
   openAuthStorage
 };
-//# sourceMappingURL=chunk-JRIO5UD2.js.map
+//# sourceMappingURL=chunk-EQ63NRB7.js.map

package/dist/{chunk-UVDSQ6LW.js → chunk-FBVTI2TJ.js}

@@ -4,13 +4,16 @@ import {
 } from "./chunk-DR52UMZW.js";
 import {
   loadSkills
-} from "./chunk-C4JBQ5SR.js";
+} from "./chunk-TANS5ZJS.js";
 import {
   parseFrontmatter
-} from "./chunk-KCMKRQX4.js";
+} from "./chunk-E77JEWSD.js";
+import {
+  enabledExtensionResourceRoots
+} from "./chunk-DYIM5TJT.js";
 import {
   parseResultContract
-} from "./chunk-DJNLUABN.js";
+} from "./chunk-TTHACPOM.js";
 import {
   assertAgentSpecPolicy,
   isAgentAudience,
@@ -22,12 +25,12 @@ import {
   isShadowAgent,
   normalizeAgentSpec
 } from "./chunk-AOCYTWAV.js";
-import {
-  clioConfigDir
-} from "./chunk-BNAZZHFG.js";
 import {
   resolvePackageRoot
 } from "./chunk-IWHMRKLL.js";
+import {
+  clioConfigDir
+} from "./chunk-BNAZZHFG.js";
 import {
   init_esm_shims
 } from "./chunk-3R73A4XB.js";
@@ -37,11 +40,10 @@ init_esm_shims();
 
 // src/domains/agents/extension.ts
 init_esm_shims();
-import path3 from "node:path";
 
 // src/domains/agents/registry.ts
 init_esm_shims();
-import { existsSync, readdirSync, readFileSync } from "node:fs";
+import { existsSync, readdirSync, readFileSync, realpathSync } from "node:fs";
 import path2 from "node:path";
 
 // src/domains/agents/recipe.ts
@@ -144,19 +146,19 @@ var RECIPE_KEYS = [
 ];
 var OPTIONAL_RECIPE_KEYS = ["product"];
 var ALL_RECIPE_KEYS = [...RECIPE_KEYS, ...OPTIONAL_RECIPE_KEYS];
-function requiredString(value, path4) {
+function requiredString(value, path3) {
   if (typeof value !== "string" || value.trim().length === 0)
-    throw new Error(`agent recipe: ${path4} must be a non-empty string`);
+    throw new Error(`agent recipe: ${path3} must be a non-empty string`);
   return value;
 }
-function requiredStringArray(value, path4) {
-  if (!Array.isArray(value)) throw new Error(`agent recipe: ${path4} must be an array of strings`);
-  const entries = value.map((entry, index) => requiredString(entry, `${path4}[${index}]`));
-  if (new Set(entries).size !== entries.length) throw new Error(`agent recipe: ${path4} must not contain duplicates`);
+function requiredStringArray(value, path3) {
+  if (!Array.isArray(value)) throw new Error(`agent recipe: ${path3} must be an array of strings`);
+  const entries = value.map((entry, index) => requiredString(entry, `${path3}[${index}]`));
+  if (new Set(entries).size !== entries.length) throw new Error(`agent recipe: ${path3} must not contain duplicates`);
   return entries;
 }
-function enumValue(value, path4, predicate) {
-  if (!predicate(value)) throw new Error(`agent recipe: ${path4} has an unsupported value`);
+function enumValue(value, path3, predicate) {
+  if (!predicate(value)) throw new Error(`agent recipe: ${path3} has an unsupported value`);
   return value;
 }
 function parseAudience(value, source, filepath) {
@@ -270,10 +272,26 @@ var RESERVED_CUSTOM_AGENT_IDS = /* @__PURE__ */ new Set(["worker", "delegate", "
 function resolveBoundSkills(recipe, source) {
   if (recipe.skills.length === 0) return { ...recipe, boundSkillPaths: [] };
   const packageSkills = path2.resolve(source.dir, "..", "..", "..", "..", "skills");
-  const skills = loadSkills({
-    cwd: process.cwd(),
+  if (source.source === "extension" && source.skillRoot === void 0) {
+    throw new Error(`agent recipe: ${recipe.filepath}: extension declares bound skills but no skills resource root`);
+  }
+  const skills = source.source === "extension" ? loadSkills({
+    cwd: source.cwd ?? process.cwd(),
+    disableDiscovery: true,
+    explicitSkillPaths: source.skillRoot === void 0 ? [] : [source.skillRoot]
+  }) : loadSkills({
+    cwd: source.cwd ?? process.cwd(),
     ...source.source === "builtin" && existsSync(packageSkills) ? { explicitSkillPaths: [packageSkills] } : {}
   });
+  if (source.source === "extension" && source.skillRoot !== void 0) {
+    const canonicalRoot = realpathSync(source.skillRoot);
+    for (const skill of skills.items) {
+      const relative = path2.relative(canonicalRoot, realpathSync(skill.filePath));
+      if (relative === ".." || relative.startsWith(`..${path2.sep}`) || path2.isAbsolute(relative)) {
+        throw new Error(`agent recipe: ${recipe.filepath}: bound skill escapes its extension: ${skill.filePath}`);
+      }
+    }
+  }
   const byName = new Map(skills.items.map((skill) => [skill.name, skill.filePath]));
   const missing = recipe.skills.filter((skill) => !byName.has(skill));
   if (missing.length > 0) {
@@ -334,6 +352,11 @@ function mergeRecipes(...sources) {
         continue;
       }
       const builtin = builtinById.get(recipe.id);
+      if (recipe.source === "extension" && builtin) {
+        process.stderr.write(`[clio:agents] ignore override id=${recipe.id} by=extension reason=reserved-builtin
+`);
+        continue;
+      }
       if (recipe.source === "user" && builtin && isShadowAgent(normalizeAgentSpec(builtin))) {
         process.stderr.write(`[clio:agents] ignore override id=${recipe.id} by=user reason=reserved-shadow
 `);
@@ -351,6 +374,36 @@ function mergeRecipes(...sources) {
   }
   return Array.from(byId.values()).sort((left, right) => left.id.localeCompare(right.id));
 }
+function discoverAgentRecipes(cwd = process.cwd(), diagnostics = []) {
+  const builtin = loadRecipesFromDir(
+    {
+      dir: path2.join(resolvePackageRoot(), "src", "domains", "agents", "builtins"),
+      source: "builtin",
+      cwd
+    },
+    diagnostics
+  );
+  const skillRoots = new Map(enabledExtensionResourceRoots("skills", cwd).map((root) => [root.source, root.path]));
+  const extensionRecipes = enabledExtensionResourceRoots("agents", cwd).sort((left, right) => left.source.localeCompare(right.source)).map((root) => {
+    const skillRoot = skillRoots.get(root.source);
+    return loadRecipesFromDir(
+      {
+        dir: root.path,
+        source: "extension",
+        cwd,
+        origin: root.source,
+        ...skillRoot === void 0 ? {} : { skillRoot }
+      },
+      diagnostics
+    );
+  });
+  const user = loadRecipesFromDir({ dir: path2.join(clioConfigDir(), "agents"), source: "user", cwd }, diagnostics);
+  const project = loadRecipesFromDir(
+    { dir: path2.join(cwd, ".clio-coder", "agents"), source: "project", cwd },
+    diagnostics
+  );
+  return mergeRecipes(builtin, ...extensionRecipes, user, project);
+}
 
 // src/domains/agents/extension.ts
 function createAgentsBundle(_context) {
@@ -358,14 +411,8 @@ function createAgentsBundle(_context) {
   let specs = [];
   let diagnostics = [];
   function discover() {
-    const builtinDir = path3.join(resolvePackageRoot(), "src", "domains", "agents", "builtins");
-    const userDir = path3.join(clioConfigDir(), "agents");
-    const projectDir = path3.join(process.cwd(), ".clio-coder", "agents");
     const nextDiagnostics = [];
-    const builtin = loadRecipesFromDir({ dir: builtinDir, source: "builtin" }, nextDiagnostics);
-    const user = loadRecipesFromDir({ dir: userDir, source: "user" }, nextDiagnostics);
-    const project = loadRecipesFromDir({ dir: projectDir, source: "project" }, nextDiagnostics);
-    const merged = mergeRecipes(builtin, user, project);
+    const merged = discoverAgentRecipes(process.cwd(), nextDiagnostics);
     const config = _context.getContract("config");
     assertAgentIdNamespace(merged, config?.get()?.delegation?.agents ?? []);
     recipes = merged;
@@ -465,8 +512,7 @@ var AgentsDomainModule = {
 
 export {
   parseAgentRecipeSchema,
-  loadRecipesFromDir,
-  mergeRecipes,
+  discoverAgentRecipes,
   AgentsDomainModule
 };
-//# sourceMappingURL=chunk-UVDSQ6LW.js.map
+//# sourceMappingURL=chunk-FBVTI2TJ.js.map

package/dist/{chunk-BMWK7ZIZ.js → chunk-FHJEP5SW.js}

@@ -1,29 +1,29 @@
 import { createRequire as __clioCreateRequire } from "node:module"; const require = __clioCreateRequire(import.meta.url);
-import {
-  readStrictLayeredSettings,
-  updateLayeredSettings
-} from "./chunk-YD734TPH.js";
 import {
   assertAgentIdNamespace
 } from "./chunk-DR52UMZW.js";
 import {
-  formatSettingsFailure,
-  settingsPath
-} from "./chunk-UHXRNZ2J.js";
-import {
-  setGitCommitAttributionEnabled
-} from "./chunk-D4MDIG46.js";
+  readStrictLayeredSettings,
+  updateLayeredSettings
+} from "./chunk-26LEYJZH.js";
 import {
   resolveShutdownHookBudgetMs,
   runWithBudget,
   writeShutdownNotice
-} from "./chunk-X2KV5FXT.js";
+} from "./chunk-WXY7KU3G.js";
+import {
+  setGitCommitAttributionEnabled
+} from "./chunk-B5CSFE7B.js";
+import {
+  formatSettingsFailure,
+  settingsPath
+} from "./chunk-IJ7RPIYJ.js";
 import {
   getSharedBus
 } from "./chunk-ZGVHUX3M.js";
 import {
   BusChannels
-} from "./chunk-OB5HIGJY.js";
+} from "./chunk-TT36MB5S.js";
 import {
   init_esm_shims
 } from "./chunk-3R73A4XB.js";
@@ -378,4 +378,4 @@ export {
   ConfigDomainModule,
   createConfigDomainModule
 };
-//# sourceMappingURL=chunk-BMWK7ZIZ.js.map
+//# sourceMappingURL=chunk-FHJEP5SW.js.map

package/dist/{chunk-FOT2FX5J.js → chunk-GN57SG4G.js}

@@ -1,11 +1,11 @@
 import { createRequire as __clioCreateRequire } from "node:module"; const require = __clioCreateRequire(import.meta.url);
 import {
   parseAgentRecipeSchema
-} from "./chunk-UVDSQ6LW.js";
+} from "./chunk-FBVTI2TJ.js";
 import {
   parseFleetContract,
   parseFrontmatter
-} from "./chunk-KCMKRQX4.js";
+} from "./chunk-E77JEWSD.js";
 import {
   assertAgentSpecPolicy,
   normalizeAgentSpec
@@ -14,7 +14,10 @@ import {
   readSettings,
   settingsPath,
   updateSettings
-} from "./chunk-UHXRNZ2J.js";
+} from "./chunk-IJ7RPIYJ.js";
+import {
+  readClioVersion
+} from "./chunk-IWHMRKLL.js";
 import {
   DEFAULT_SETTINGS
 } from "./chunk-4DGYLA73.js";
@@ -29,9 +32,6 @@ import {
   safeResourceBackupPath,
   safeResourceWrite
 } from "./chunk-WEPFGWHJ.js";
-import {
-  readClioVersion
-} from "./chunk-IWHMRKLL.js";
 import {
   __toESM,
   init_esm_shims
@@ -610,4 +610,4 @@ export {
   importShareArchive,
   ShareDomainModule
 };
-//# sourceMappingURL=chunk-FOT2FX5J.js.map
+//# sourceMappingURL=chunk-GN57SG4G.js.map