@iowarp/clio-coder 0.3.7 → 0.3.9

package/dist/{chunk-GEYXPTRF.js → chunk-AEYBF3TB.js}

@@ -2,7 +2,7 @@ import { createRequire as __clioCreateRequire } from "node:module"; const requir
 import {
   cwdHash,
   sessionPaths
-} from "./chunk-FO5ZOVUY.js";
+} from "./chunk-KV2AOLDF.js";
 import {
   init_esm_shims
 } from "./chunk-3R73A4XB.js";
@@ -170,14 +170,6 @@ function buildContextLedger(input) {
     });
   }
   const meter = [...groups];
-  if (reserveTokens > 0) {
-    meter.push({
-      category: "reserve",
-      label: CONTEXT_CATEGORY_LABEL.reserve,
-      tokens: reserveTokens,
-      percent: percentOf(reserveTokens, window)
-    });
-  }
   if (window > 0) {
     meter.push({
       category: "free",
@@ -186,6 +178,14 @@ function buildContextLedger(input) {
       percent: percentOf(freeTokens, window)
     });
   }
+  if (reserveTokens > 0) {
+    meter.push({
+      category: "reserve",
+      label: CONTEXT_CATEGORY_LABEL.reserve,
+      tokens: reserveTokens,
+      percent: percentOf(reserveTokens, window)
+    });
+  }
   return {
     provider: input.provider ?? null,
     model: input.model ?? null,
@@ -205,7 +205,8 @@ function buildContextLedger(input) {
     groups,
     meter,
     lastCompaction: input.lastCompaction ?? null,
-    promptCache: input.promptCache ?? null
+    promptCache: input.promptCache ?? null,
+    prewarm: input.prewarm ?? null
   };
 }
 
@@ -405,6 +406,17 @@ function getLatestContextSnapshot(meta) {
   const list = getContextSnapshots(meta);
   return list.at(-1) ?? null;
 }
+function lastLoadedContextWindow(meta, providerId, modelId) {
+  const snapshots = getContextSnapshots(meta);
+  for (let i = snapshots.length - 1; i >= 0; i -= 1) {
+    const snapshot = snapshots[i];
+    if (snapshot?.contextWindowSource !== "loaded") continue;
+    if (snapshot.providerId !== providerId || snapshot.modelId !== modelId) continue;
+    const window = snapshot.effectiveContextWindow;
+    if (typeof window === "number" && Number.isFinite(window) && window > 0) return window;
+  }
+  return null;
+}
 function buildSnapshotCategories(inputs) {
   const raw = {
     system: 0,
@@ -477,6 +489,7 @@ function captureContextSnapshot(input) {
     compactionThreshold: input.compactionThreshold
   });
   return {
+    estimatedTokens: sumSplitTokens(categories),
     snapshotId: nextSnapshotId(),
     sessionId: input.sessionId,
     turnId: input.turnId,
@@ -499,8 +512,11 @@ function captureContextSnapshot(input) {
     messageRange: input.conversationMessages.length > 0 ? { start: 0, end: input.conversationMessages.length - 1 } : void 0
   };
 }
+function sumSplitTokens(categories) {
+  return SNAPSHOT_SPLIT_KEYS.reduce((sum, key) => sum + (categories[key] ?? 0), 0);
+}
 function snapshotInputTokens(snapshot) {
-  return SNAPSHOT_SPLIT_KEYS.reduce((sum, key) => sum + (snapshot.categories[key] ?? 0), 0);
+  return sumSplitTokens(snapshot.categories);
 }
 function reconcileSnapshot(snapshot, usage) {
   const exactInput = (usage.input || 0) + (usage.cacheRead || 0) + (usage.cacheWrite || 0);
@@ -580,9 +596,13 @@ function reconcileSnapshot(snapshot, usage) {
     },
     {}
   );
+  const estimatedTokens = snapshot.estimatedTokens ?? sumSplitTokens(snapshot.categories);
   return {
     ...snapshot,
     categories: updatedCategories,
+    estimatedTokens,
+    reconciledTokens: exactInput,
+    divergenceRatio: estimatedTokens > 0 ? Math.round(exactInput / estimatedTokens * 1e3) / 1e3 : void 0,
     sources: {
       total: "reconciled",
       splits: splitsSources
@@ -606,8 +626,9 @@ export {
   contextUsageSnapshot,
   appendContextSnapshot,
   getLatestContextSnapshot,
+  lastLoadedContextWindow,
   captureContextSnapshot,
   snapshotInputTokens,
   reconcileSnapshot
 };
-//# sourceMappingURL=chunk-GEYXPTRF.js.map
+//# sourceMappingURL=chunk-AEYBF3TB.js.map

package/dist/{chunk-2SFS6XQE.js → chunk-AMKHQW3C.js}

@@ -1,7 +1,7 @@
 import { createRequire as __clioCreateRequire } from "node:module"; const require = __clioCreateRequire(import.meta.url);
 import {
   enabledExtensionResourceRoots
-} from "./chunk-ZWLZP4ZT.js";
+} from "./chunk-5QKCQQ3E.js";
 import {
   require_dist
 } from "./chunk-APJ265NV.js";
@@ -29,6 +29,7 @@ function defaultScopedResourceRoots(kind, cwd) {
   return [
     ...enabledExtensionResourceRoots(kind, cwd).map((root) => ({
       path: root.path,
+      rootPath: root.rootPath,
       scope: "package",
       source: root.source,
       precedence: COMPAT_RESOURCE_PRECEDENCE.extension
@@ -119,4 +120,4 @@ export {
   splitYamlFrontmatter,
   stringField
 };
-//# sourceMappingURL=chunk-2SFS6XQE.js.map
+//# sourceMappingURL=chunk-AMKHQW3C.js.map

package/dist/{chunk-D4MDIG46.js → chunk-B5CSFE7B.js}

@@ -2,12 +2,12 @@ import { createRequire as __clioCreateRequire } from "node:module"; const requir
 import {
   clampTimerDelayMs
 } from "./chunk-FQ4SKYE4.js";
-import {
-  clioStateDir
-} from "./chunk-BNAZZHFG.js";
 import {
   AI_AGENT_NAME
 } from "./chunk-6EJMN2Y3.js";
+import {
+  clioStateDir
+} from "./chunk-BNAZZHFG.js";
 import {
   init_esm_shims
 } from "./chunk-3R73A4XB.js";
@@ -48,7 +48,7 @@ var KNOWN_CLIO_TRAILERS = new Set(
   Object.values(CLIO_COMMIT_TRAILERS).map((line) => normalizedTrailer(line)).filter((line) => line !== null)
 );
 function isClioTrailer(key) {
-  return KNOWN_CLIO_TRAILERS.has(key) || key.startsWith("clio-evidence:receipt-v19/sha256:");
+  return KNOWN_CLIO_TRAILERS.has(key) || key.startsWith("clio-evidence:receipt-v20/sha256:");
 }
 function trailerBlockStart(lines) {
   if (lines.length < 2) return null;
@@ -67,10 +67,10 @@ function trailerBlockStart(lines) {
   return sawTrailer ? first : null;
 }
 function receiptTrailer(receipt) {
-  if (receipt?.version !== 19 || receipt.algorithm !== "sha256" || receipt.integrityValid !== true || receipt.directlyRelevant !== true || !SHA256.test(receipt.digest)) {
+  if (receipt?.version !== 20 || receipt.algorithm !== "sha256" || receipt.integrityValid !== true || receipt.directlyRelevant !== true || !SHA256.test(receipt.digest)) {
     return null;
   }
-  return `Clio-Evidence: receipt-v19/sha256:${receipt.digest}`;
+  return `Clio-Evidence: receipt-v20/sha256:${receipt.digest}`;
 }
 function attributeCommitMessage(originalMessage, evidence, enabled = true) {
   if (!enabled) return originalMessage;
@@ -567,4 +567,4 @@ export {
   runCommandVector,
   combineSafeOutput
 };
-//# sourceMappingURL=chunk-D4MDIG46.js.map
+//# sourceMappingURL=chunk-B5CSFE7B.js.map

package/dist/{chunk-MXI6J5JF.js → chunk-B5XRQOLB.js}

@@ -2,26 +2,26 @@ import { createRequire as __clioCreateRequire } from "node:module"; const requir
 import {
   readLayeredSettings,
   readStrictLayeredSettings
-} from "./chunk-YD734TPH.js";
+} from "./chunk-FALJGAWU.js";
 import {
   formatBootTrace
 } from "./chunk-HKIYEGME.js";
 import {
   initializeClioHome
-} from "./chunk-DOOEX22V.js";
+} from "./chunk-56KB5IJP.js";
 import {
   readSettings
-} from "./chunk-UHXRNZ2J.js";
+} from "./chunk-PNY46YEY.js";
 import {
   require_dist
 } from "./chunk-APJ265NV.js";
+import {
+  clioConfigDir
+} from "./chunk-BNAZZHFG.js";
 import {
   findEngineEnvKeys,
   getEngineEnvApiKey
 } from "./chunk-YXLYO42X.js";
-import {
-  clioConfigDir
-} from "./chunk-BNAZZHFG.js";
 import {
   __toESM,
   init_esm_shims
@@ -158,7 +158,7 @@ Run \`clio-coder auth login ${verdict.store}\` if the endpoint requires one; loc
     } else if (verdict.kind !== "usable") {
       process.stdout.write(`${describeVerdict(verdict)} Starting \`clio-coder configure\`.
 `);
-      const { runConfigureCommand } = await import("./configure-OLCVPHNM.js");
+      const { runConfigureCommand } = await import("./configure-2WYWSCSD.js");
       const configured = await runConfigureCommand([]);
       if (configured !== 0) return configured;
       startupSettings = readStrictLayeredSettings(process.cwd()).settings;
@@ -167,7 +167,7 @@ Run \`clio-coder auth login ${verdict.store}\` if the endpoint requires one; loc
   let terminalLease;
   try {
     if (terminalLeaseEligible(options)) {
-      const { createProcessTerminalLease, instantShellEnabled } = await import("./terminal-lease-WUZY7ZV5.js");
+      const { createProcessTerminalLease, instantShellEnabled } = await import("./terminal-lease-QYVORFR4.js");
       if (instantShellEnabled()) {
         let stage0FrameId = null;
         terminalLease = createProcessTerminalLease({
@@ -190,7 +190,7 @@ Run \`clio-coder auth login ${verdict.store}\` if the endpoint requires one; loc
         throw new Error("injected Stage 1 hydration failure");
       }
     }
-    const { bootOrchestrator } = await import("./orchestrator-WZYB54DM.js");
+    const { bootOrchestrator } = await import("./orchestrator-ZKBPCHW6.js");
     const result = await bootOrchestrator({
       ...options,
       ...startupSettings ? { startupSettings } : {},
@@ -214,4 +214,4 @@ export {
   terminalLeaseEligible,
   runClioCommand
 };
-//# sourceMappingURL=chunk-MXI6J5JF.js.map
+//# sourceMappingURL=chunk-B5XRQOLB.js.map

package/dist/{chunk-X2KV5FXT.js → chunk-BVDVID7E.js}

@@ -4,7 +4,7 @@ import {
 } from "./chunk-ZGVHUX3M.js";
 import {
   BusChannels
-} from "./chunk-OB5HIGJY.js";
+} from "./chunk-RKRLDWD3.js";
 import {
   init_esm_shims
 } from "./chunk-3R73A4XB.js";
@@ -226,4 +226,4 @@ export {
   runWithBudget,
   getTerminationCoordinator
 };
-//# sourceMappingURL=chunk-X2KV5FXT.js.map
+//# sourceMappingURL=chunk-BVDVID7E.js.map

package/dist/{chunk-JNXPYBB4.js → chunk-CA42X6KT.js}

@@ -16,10 +16,10 @@ import {
   SAFE_EXEC_DEFAULT_TIMEOUT_MS,
   combineSafeOutput,
   runCommandVector
-} from "./chunk-D4MDIG46.js";
+} from "./chunk-B5CSFE7B.js";
 import {
   StringEnum
-} from "./chunk-FCSXB6T2.js";
+} from "./chunk-UOSL25KY.js";
 import {
   init_esm_shims
 } from "./chunk-3R73A4XB.js";
@@ -177,4 +177,4 @@ export {
   prepareVerifyArguments,
   verifyToolSurface
 };
-//# sourceMappingURL=chunk-JNXPYBB4.js.map
+//# sourceMappingURL=chunk-CA42X6KT.js.map

package/dist/{chunk-VREKEFLL.js → chunk-D73KXYPF.js}

@@ -1,10 +1,10 @@
 import { createRequire as __clioCreateRequire } from "node:module"; const require = __clioCreateRequire(import.meta.url);
 import {
   durableAssistantTextFromEvent
-} from "./chunk-UUANF5CR.js";
+} from "./chunk-TEO2TLVN.js";
 import {
   responseModelIdObservationFromRecord
-} from "./chunk-6TUKSZVF.js";
+} from "./chunk-LXPJXFM5.js";
 import {
   init_esm_shims
 } from "./chunk-3R73A4XB.js";
@@ -34,4 +34,4 @@ export {
   assistantTextFromEvent,
   receiptResponseModelIdObservationLabel
 };
-//# sourceMappingURL=chunk-VREKEFLL.js.map
+//# sourceMappingURL=chunk-D73KXYPF.js.map

package/dist/{chunk-JTSEDYVQ.js → chunk-DG4M6ZUE.js}

@@ -2,19 +2,19 @@ import { createRequire as __clioCreateRequire } from "node:module"; const requir
 import {
   readStateInfo,
   runDoctor
-} from "./chunk-3HAPLH5M.js";
+} from "./chunk-T3Z6VAAF.js";
 import {
   getVersionInfo
 } from "./chunk-XPLRXC72.js";
-import {
-  authStoragePath,
-  openAuthStorage
-} from "./chunk-JRIO5UD2.js";
 import {
   readSettings,
   settingsPath,
   updateSettings
-} from "./chunk-UHXRNZ2J.js";
+} from "./chunk-PNY46YEY.js";
+import {
+  authStoragePath,
+  openAuthStorage
+} from "./chunk-EQ63NRB7.js";
 import {
   init_esm_shims
 } from "./chunk-3R73A4XB.js";
@@ -158,4 +158,4 @@ export {
   describeUpgradeNotice,
   LifecycleDomainModule
 };
-//# sourceMappingURL=chunk-JTSEDYVQ.js.map
+//# sourceMappingURL=chunk-DG4M6ZUE.js.map

package/dist/{chunk-DQA7QLMD.js → chunk-EBOC7MT3.js}

@@ -1,48 +1,33 @@
 import { createRequire as __clioCreateRequire } from "node:module"; const require = __clioCreateRequire(import.meta.url);
 import {
-  compileFleetExecutionPlan
-} from "./chunk-M4AKACEO.js";
+  discoverAgentRecipes
+} from "./chunk-HCBCAYZU.js";
 import {
-  loadRecipesFromDir,
-  mergeRecipes
-} from "./chunk-UVDSQ6LW.js";
+  compileFleetExecutionPlan
+} from "./chunk-HKO36JWF.js";
 import {
   loadFleetCommands,
   loadFleetContract,
   renderFleetPrompt
-} from "./chunk-KCMKRQX4.js";
+} from "./chunk-HPCTNZM2.js";
 import {
   requestExecutionRole,
   withAttemptRole
-} from "./chunk-UND3GU2L.js";
+} from "./chunk-H7IXIC72.js";
 import {
   normalizeAgentSpec
-} from "./chunk-AOCYTWAV.js";
+} from "./chunk-S4COXYBG.js";
 import {
   readSettings
-} from "./chunk-UHXRNZ2J.js";
-import {
-  clioConfigDir
-} from "./chunk-BNAZZHFG.js";
-import {
-  resolvePackageRoot
-} from "./chunk-IWHMRKLL.js";
+} from "./chunk-PNY46YEY.js";
 import {
   init_esm_shims
 } from "./chunk-3R73A4XB.js";
 
 // src/cli/fleet-preflight.ts
 init_esm_shims();
-import { join } from "node:path";
 function discoverSpecs(cwd) {
-  const diagnostics = [];
-  const builtin = loadRecipesFromDir(
-    { dir: join(resolvePackageRoot(), "src", "domains", "agents", "builtins"), source: "builtin" },
-    diagnostics
-  );
-  const user = loadRecipesFromDir({ dir: join(clioConfigDir(), "agents"), source: "user" }, diagnostics);
-  const project = loadRecipesFromDir({ dir: join(cwd, ".clio-coder", "agents"), source: "project" }, diagnostics);
-  return mergeRecipes(builtin, user, project).map(normalizeAgentSpec);
+  return discoverAgentRecipes(cwd).map(normalizeAgentSpec);
 }
 function inspectFleet(name, vars) {
   const cwd = process.cwd();
@@ -120,4 +105,4 @@ function inspectFleet(name, vars) {
 export {
   inspectFleet
 };
-//# sourceMappingURL=chunk-DQA7QLMD.js.map
+//# sourceMappingURL=chunk-EBOC7MT3.js.map

package/dist/{chunk-KZ2H5X4G.js → chunk-ECUO3KDP.js}

@@ -2,11 +2,16 @@ import { createRequire as __clioCreateRequire } from "node:module"; const requir
 import {
   describeWriteBoundary,
   normalizeWriteBoundary,
+  normalizeWriteBoundaryEntry,
   writeBoundaryCovers
-} from "./chunk-KCMKRQX4.js";
+} from "./chunk-HPCTNZM2.js";
+import {
+  asDirectoryPathBoundary,
+  pathBoundaryEntryCovers
+} from "./chunk-S4COXYBG.js";
 import {
   atomicWrite
-} from "./chunk-FO5ZOVUY.js";
+} from "./chunk-KV2AOLDF.js";
 import {
   clioStateDir
 } from "./chunk-BNAZZHFG.js";
@@ -730,7 +735,7 @@ init_esm_shims();
 import { execFileSync as execFileSync3 } from "node:child_process";
 import { createHash as createHash2 } from "node:crypto";
 import { existsSync as existsSync3, lstatSync as lstatSync2, mkdirSync as mkdirSync3, readlinkSync, realpathSync as realpathSync3, rmSync as rmSync3, writeFileSync as writeFileSync3 } from "node:fs";
-import { dirname, join as join3, relative as relative3, resolve as resolve3, sep as sep2 } from "node:path";
+import { dirname, isAbsolute as isAbsolute2, join as join3, relative as relative3, resolve as resolve3, sep as sep2 } from "node:path";
 var WRITE_BOUNDARY_VIOLATION_REASON = "writes_boundary_violation";
 var ABSENT = "absent";
 var GIT_TIMEOUT_MS = 3e4;
@@ -834,6 +839,20 @@ function diffWorkspace(snapshot) {
   }
   return changes;
 }
+function describeWriteBoundaryAttributionDowngrade(downgrade) {
+  if (downgrade.reason === "opaque_tool_succeeded") {
+    const tool = downgrade.tool ?? "unknown";
+    const call = downgrade.toolCallId === null ? "" : ` (call ${downgrade.toolCallId})`;
+    return `a successful '${tool}' call${call} can write paths its arguments do not name`;
+  }
+  if (downgrade.reason === "incomplete_tool_telemetry") {
+    return downgrade.runId === null ? "tool telemetry was incomplete" : `run '${downgrade.runId}' reported incomplete tool telemetry`;
+  }
+  if (downgrade.reason === "code_step_untracked") {
+    return downgrade.stepId === null ? "a code step ran through the untracked command runner" : `code step '${downgrade.stepId}' ran through the untracked command runner`;
+  }
+  return downgrade.stepId === null ? "no usable write record was available" : `step '${downgrade.stepId}' supplied no usable write record`;
+}
 function canonicalVerdict(verdict) {
   return JSON.stringify(verdict);
 }
@@ -876,10 +895,34 @@ function rollbackPath(snapshot, change) {
   }
   return { rolledBack: { path: change.path, action: "restored", restoredFrom: `${snapshot.head}:${change.path}` } };
 }
+function withinRecordedWrite(recorded, path) {
+  if (recorded.has(path)) return true;
+  for (const target of recorded) {
+    if (path.startsWith(`${target}/`)) return true;
+  }
+  return false;
+}
 function enforceWriteBoundary(input) {
   const allow = normalizeWriteBoundary(input.allow);
   const changes = diffWorkspace(input.snapshot);
-  const violations = changes.filter((change) => !writeBoundaryCovers(allow, change.path));
+  const outside = changes.filter((change) => !writeBoundaryCovers(allow, change.path));
+  const attributionComplete = input.attribution?.complete === true;
+  const attributionDowngrades = attributionComplete ? [] : input.attribution?.downgrades !== void 0 && input.attribution.downgrades.length > 0 ? input.attribution.downgrades.map((entry) => ({ ...entry })) : [
+    {
+      reason: "write_record_unavailable",
+      tool: null,
+      toolCallId: null,
+      runId: null,
+      stepId: input.stepIds.length === 1 ? input.stepIds[0] ?? null : null
+    }
+  ];
+  const recorded = /* @__PURE__ */ new Set();
+  for (const target of input.attribution?.recorded ?? []) {
+    const relativeTarget = repoRelative(input.snapshot.root, target);
+    if (relativeTarget !== null) recorded.add(relativeTarget);
+  }
+  const violations = attributionComplete ? outside.filter((change) => withinRecordedWrite(recorded, change.path)) : outside;
+  const unattributed = attributionComplete ? outside.filter((change) => !withinRecordedWrite(recorded, change.path)) : [];
   const rolledBack = [];
   const unrecoverable = [];
   for (const change of violations) {
@@ -888,14 +931,20 @@ function enforceWriteBoundary(input) {
     if (outcome.unrecoverable !== void 0) unrecoverable.push(outcome.unrecoverable);
   }
   const status = violations.length === 0 ? "clean" : unrecoverable.length === 0 ? "rolled-back" : "rollback-incomplete";
-  const attribution = input.stepIds.length === 1 ? `step '${input.stepIds[0]}'` : `steps ${input.stepIds.map((id) => `'${id}'`).join(", ")} ran concurrently in one checkout, so the write cannot be attributed to one of them`;
-  const detail = violations.length === 0 ? null : [
-    `${attribution} wrote outside its declared boundary.`,
+  const who = input.stepIds.length === 1 ? `step '${input.stepIds[0]}'` : `steps ${input.stepIds.map((id) => `'${id}'`).join(", ")} ran concurrently in one checkout, so the write cannot be attributed to one of them`;
+  const violationDetail = violations.length === 0 ? [] : [
+    `${who} wrote outside its declared boundary.`,
     `Unauthorized paths: ${violations.map((change) => change.path).join(", ")}.`,
     `Declared writes: ${describeWriteBoundary(allow)}.`,
     status === "rolled-back" ? "Those paths were rolled back to the baseline commit." : `Rollback is incomplete; the working tree is left as the step made it. Unrestorable: ${unrecoverable.map((entry) => `${entry.path} (${entry.reason})`).join("; ")}.`,
+    attributionComplete ? "Each was blamed on this window because a run in it recorded writing that path." : `Attribution was incomplete because ${attributionDowngrades.map(describeWriteBoundaryAttributionDowngrade).join("; ")}, so every change outside the declaration was blamed on this window.`,
     "If the change was legitimate, widen the step's `writes:` declaration to cover it."
-  ].join(" ");
+  ];
+  const concurrentDetail = unattributed.length === 0 ? [] : [
+    `Concurrent changes were seen in this window that no run in it recorded writing: ${unattributed.map((change) => change.path).join(", ")}.`,
+    "They were left untouched, because a path this window did not write is not this window's to restore."
+  ];
+  const detail = [...violationDetail, ...concurrentDetail];
   const body = {
     version: 1,
     window: input.window,
@@ -906,11 +955,14 @@ function enforceWriteBoundary(input) {
     checkedAt: (/* @__PURE__ */ new Date()).toISOString(),
     changedPaths: changes.map((change) => change.path),
     violations: violations.map((change) => change.path),
+    unattributed: unattributed.map((change) => change.path),
+    attributionComplete,
+    attributionDowngrades,
     rolledBack,
     unrecoverable,
     status,
     reason: violations.length === 0 ? null : WRITE_BOUNDARY_VIOLATION_REASON,
-    detail
+    detail: detail.length === 0 ? null : detail.join(" ")
   };
   return { ...body, digest: createHash2("sha256").update(canonicalVerdict(body), "utf8").digest("hex") };
 }
@@ -921,14 +973,41 @@ function assertWriteBoundaryInsideRoot(root, allow) {
     let probe = join3(realRoot, relativeEntry);
     while (probe !== realRoot && !existsSync3(probe)) probe = dirname(probe);
     const resolved = realpathSync3(probe);
-    if (resolved !== realRoot && !resolved.startsWith(realRoot + sep2)) {
+    if (resolved !== realRoot && !pathBoundaryEntryCovers(asDirectoryPathBoundary(realRoot), resolved)) {
       throw new Error(`write boundary: entry '${entry}' resolves to ${resolved}, outside the workspace at ${realRoot}`);
     }
   }
 }
+function assertWriteBoundaryVisibleToGit(root, allow) {
+  const entries = [...new Set(allow.map(normalizeWriteBoundaryEntry))].sort();
+  if (entries.length === 0) return;
+  const absolute = resolve3(root);
+  let raw;
+  try {
+    raw = git3(absolute, ["check-ignore", "-v", "-z", "--stdin"], `${entries.join("\0")}\0`);
+  } catch (error) {
+    const status = error.status;
+    if (status === 1) return;
+    throw new Error(
+      `write boundary: could not determine whether ${describeWriteBoundary(entries)} is ignored by git in ${absolute}: ${error.message}`
+    );
+  }
+  const fields = raw.split("\0");
+  const refusals = [];
+  for (let index = 0; index + 3 < fields.length; index += 4) {
+    const [source, line, pattern, path] = fields.slice(index, index + 4);
+    if (path === void 0 || path.length === 0) continue;
+    refusals.push(`'${path}' is ignored by ${source}:${line}:${pattern}`);
+  }
+  if (refusals.length === 0) return;
+  throw new Error(
+    `write boundary: ${refusals.join(", ")}. git status never reports an ignored path, so a boundary declared over one is verified against nothing and every window would be certified clean without an observation. Declare a path the repository tracks, or stop ignoring this one.`
+  );
+}
 function repoRelative(root, path) {
-  const rel = relative3(resolve3(root), resolve3(path));
-  if (rel.length === 0 || rel.startsWith("..") || rel.startsWith(`..${sep2}`)) return null;
+  const base = resolve3(root);
+  const rel = relative3(base, resolve3(base, path));
+  if (rel.length === 0 || rel === ".." || rel.startsWith(`..${sep2}`) || isAbsolute2(rel)) return null;
   return rel.split(sep2).join("/");
 }
 function writeBoundaryDir(rootId) {
@@ -956,6 +1035,7 @@ function preflightWriteBoundaries(plan, root) {
     );
   }
   for (const step of declared) assertWriteBoundaryInsideRoot(root, step.writes ?? []);
+  assertWriteBoundaryVisibleToGit(root, [...new Set(declared.flatMap((step) => [...step.writes ?? []]))]);
 }
 function createWriteBoundaryEnforcer(input) {
   const open = /* @__PURE__ */ new Map();
@@ -964,10 +1044,42 @@ function createWriteBoundaryEnforcer(input) {
     for (const stepId of stepIds) for (const entry of input.boundaryFor(stepId) ?? []) allow.add(entry);
     return [...allow].sort();
   };
+  const attributionFor = (stepIds) => {
+    const recordedWritesFor = input.recordedWritesFor;
+    if (recordedWritesFor === void 0) return void 0;
+    const recorded = /* @__PURE__ */ new Set();
+    const downgrades = [];
+    let complete = true;
+    for (const stepId of stepIds) {
+      const observed = recordedWritesFor(stepId);
+      if (observed === null) {
+        complete = false;
+        downgrades.push({
+          reason: "write_record_unavailable",
+          tool: null,
+          toolCallId: null,
+          runId: null,
+          stepId
+        });
+        continue;
+      }
+      if (!("recorded" in observed)) {
+        for (const target of observed) recorded.add(target);
+        continue;
+      }
+      for (const target of observed.recorded) recorded.add(target);
+      if (!observed.complete) complete = false;
+      for (const downgrade of observed.downgrades ?? []) {
+        downgrades.push({ ...downgrade, stepId: downgrade.stepId ?? stepId });
+      }
+    }
+    return { recorded: [...recorded].sort(), complete, downgrades };
+  };
   return {
     begin(window, stepIds) {
       const allow = allowFor(stepIds);
       assertWriteBoundaryInsideRoot(input.root, allow);
+      assertWriteBoundaryVisibleToGit(input.root, allow);
       open.set(window, { snapshot: captureWorkspaceSnapshot(input.root), allow });
     },
     async verify(window, stepIds) {
@@ -976,11 +1088,13 @@ function createWriteBoundaryEnforcer(input) {
         throw new Error(`write boundary: window '${window}' was verified without a snapshot`);
       }
       open.delete(window);
+      const attribution = attributionFor(stepIds);
       const verdict = enforceWriteBoundary({
         snapshot: pending.snapshot,
         window,
         stepIds,
-        allow: pending.allow
+        allow: pending.allow,
+        ...attribution === void 0 ? {} : { attribution }
       });
       const path = writeWriteBoundaryVerdict(input.rootId, verdict);
       input.onVerdict?.(verdict, path);
@@ -1020,7 +1134,8 @@ export {
   recoverCleanupReadyCompeteGroups,
   WRITE_BOUNDARY_VIOLATION_REASON,
   captureWorkspaceSnapshot,
+  describeWriteBoundaryAttributionDowngrade,
   preflightWriteBoundaries,
   createWriteBoundaryEnforcer
 };
-//# sourceMappingURL=chunk-KZ2H5X4G.js.map
+//# sourceMappingURL=chunk-ECUO3KDP.js.map

package/dist/{chunk-JRIO5UD2.js → chunk-EQ63NRB7.js}

@@ -9,16 +9,16 @@ import {
 import {
   require_dist
 } from "./chunk-APJ265NV.js";
-import {
-  findEngineEnvKeys,
-  getEngineEnvApiKey
-} from "./chunk-YXLYO42X.js";
 import {
   clioConfigDir
 } from "./chunk-BNAZZHFG.js";
 import {
   safeResourceWrite
 } from "./chunk-WEPFGWHJ.js";
+import {
+  findEngineEnvKeys,
+  getEngineEnvApiKey
+} from "./chunk-YXLYO42X.js";
 import {
   __toESM,
   init_esm_shims
@@ -959,4 +959,4 @@ export {
   authNotRequiredStatus,
   openAuthStorage
 };
-//# sourceMappingURL=chunk-JRIO5UD2.js.map
+//# sourceMappingURL=chunk-EQ63NRB7.js.map

package/dist/{chunk-YD734TPH.js → chunk-FALJGAWU.js}

@@ -5,7 +5,7 @@ import {
   settingsPath,
   updateSavedSettingsDocument,
   validateSettings
-} from "./chunk-UHXRNZ2J.js";
+} from "./chunk-PNY46YEY.js";
 import {
   require_dist
 } from "./chunk-APJ265NV.js";
@@ -226,4 +226,4 @@ export {
   updateLayeredSettings,
   settingsSourceFor
 };
-//# sourceMappingURL=chunk-YD734TPH.js.map
+//# sourceMappingURL=chunk-FALJGAWU.js.map