@iowarp/clio-coder 0.3.9 → 0.4.0

package/dist/chunk-HHV2GANA.js

@@ -0,0 +1,88 @@
+import { createRequire as __clioCreateRequire } from "node:module"; const require = __clioCreateRequire(import.meta.url);
+import {
+  init_esm_shims
+} from "./chunk-3R73A4XB.js";
+
+// src/core/path-boundary.ts
+init_esm_shims();
+import path from "node:path";
+var PATH_BOUNDARY_MAX_ENTRIES = 32;
+var PathBoundaryError = class extends Error {
+  code;
+  constructor(code, message) {
+    super(message);
+    this.name = "PathBoundaryError";
+    this.code = code;
+  }
+};
+var GLOB_CHARACTERS = /[*?[\]{}]/u;
+function normalizePathBoundaryEntry(entry) {
+  const raw = entry.trim();
+  if (raw.length === 0) throw new PathBoundaryError("empty", "write boundary: entry must be a non-empty path");
+  if (raw.includes("\\")) {
+    throw new PathBoundaryError("separator", `write boundary: entry '${entry}' must use '/' separators`);
+  }
+  if (GLOB_CHARACTERS.test(raw)) {
+    throw new PathBoundaryError("glob", `write boundary: entry '${entry}' looks like a glob, which v1 does not support`);
+  }
+  if (raw.startsWith("/") || /^[A-Za-z]:/u.test(raw)) {
+    throw new PathBoundaryError("absolute", `write boundary: entry '${entry}' must be repository-relative, not absolute`);
+  }
+  const subtree = raw.endsWith("/");
+  const segments = raw.split("/").filter((segment) => segment.length > 0);
+  if (segments.length === 0) {
+    throw new PathBoundaryError("empty", `write boundary: entry '${entry}' must name a path inside the repository`);
+  }
+  for (const segment of segments) {
+    if (segment === "..") {
+      throw new PathBoundaryError("parent", `write boundary: entry '${entry}' must not contain '..'`);
+    }
+    if (segment === ".") {
+      throw new PathBoundaryError("dot", `write boundary: entry '${entry}' must not contain '.' segments`);
+    }
+  }
+  const joined = segments.join("/");
+  return subtree ? `${joined}/` : joined;
+}
+function normalizePathBoundary(entries) {
+  if (entries.length > PATH_BOUNDARY_MAX_ENTRIES) {
+    throw new Error(`write boundary: at most ${PATH_BOUNDARY_MAX_ENTRIES} entries may be declared`);
+  }
+  return [...new Set(entries.map(normalizePathBoundaryEntry))].sort();
+}
+function toPosixBoundaryPath(value) {
+  return value.split("\\").join("/");
+}
+function isDirectoryPathBoundary(entry) {
+  return toPosixBoundaryPath(entry).endsWith("/");
+}
+function asDirectoryPathBoundary(entry) {
+  const normalized = toPosixBoundaryPath(entry);
+  return normalized.endsWith("/") ? normalized : `${normalized}/`;
+}
+function resolvePathBoundary(cwd, entry) {
+  const directory = isDirectoryPathBoundary(entry);
+  const withoutMarker = directory ? entry.slice(0, -1) : entry;
+  const resolved = toPosixBoundaryPath(path.resolve(cwd, withoutMarker));
+  return directory ? asDirectoryPathBoundary(resolved) : resolved;
+}
+function pathBoundaryEntryCovers(outer, inner) {
+  const normalizedOuter = toPosixBoundaryPath(outer);
+  const normalizedInner = toPosixBoundaryPath(inner);
+  return normalizedOuter.endsWith("/") ? normalizedInner.startsWith(normalizedOuter) : !normalizedInner.endsWith("/") && normalizedInner === normalizedOuter;
+}
+function pathBoundaryCovers(boundary, candidate) {
+  return boundary.some((entry) => pathBoundaryEntryCovers(entry, candidate));
+}
+
+export {
+  PATH_BOUNDARY_MAX_ENTRIES,
+  PathBoundaryError,
+  normalizePathBoundaryEntry,
+  normalizePathBoundary,
+  asDirectoryPathBoundary,
+  resolvePathBoundary,
+  pathBoundaryEntryCovers,
+  pathBoundaryCovers
+};
+//# sourceMappingURL=chunk-HHV2GANA.js.map

package/dist/{chunk-774ILSRL.js → chunk-HI63TFOG.js}

@@ -2,7 +2,7 @@ import { createRequire as __clioCreateRequire } from "node:module"; const requir
 import {
   resolveAuthTarget,
   resolveRuntimeAuthTarget
-} from "./chunk-EQ63NRB7.js";
+} from "./chunk-BBVYXMFO.js";
 import {
   getRuntimeRegistry
 } from "./chunk-NUGM5KR6.js";
@@ -34,7 +34,8 @@ var SUMMARY_BY_RUNTIME_ID = {
   lmstudio: "LM Studio chat over OpenAI-compatible REST with native REST model management",
   llamacpp: "llama.cpp server (auto-detect surface)",
   "anthropic-compat": "Generic Anthropic-compatible REST",
-  "openai-compat": "Generic OpenAI-compatible REST"
+  "openai-compat": "Generic OpenAI-compatible REST",
+  litellm: "LiteLLM gateway with per-alias capability discovery and routed-model attribution"
 };
 function groupPriority(group) {
   switch (group) {
@@ -169,4 +170,4 @@ export {
   configuredTargetsForRuntime,
   resolveProviderReference
 };
-//# sourceMappingURL=chunk-774ILSRL.js.map
+//# sourceMappingURL=chunk-HI63TFOG.js.map

package/dist/{chunk-R7LNVMCS.js → chunk-HJJTYUHX.js}

@@ -5,19 +5,26 @@ import {
 import {
   hashToolCall
 } from "./chunk-UOV2BYIW.js";
+import {
+  resolveFdBinary,
+  resolveRgBinary
+} from "./chunk-BMS5RKQY.js";
+import {
+  webFetchToolSurface
+} from "./chunk-YPI3QQCF.js";
 import {
   gitTool,
   verifyToolSurface
-} from "./chunk-CA42X6KT.js";
+} from "./chunk-HWHKMHUA.js";
 import {
   codeNavToolSurface
-} from "./chunk-OEDBCISO.js";
+} from "./chunk-LQ3DZAMX.js";
 import {
   contextToolSurface
-} from "./chunk-5DQRIYDZ.js";
+} from "./chunk-NHCZP4K7.js";
 import {
   describeDispatchPlan
-} from "./chunk-VKBMFOYV.js";
+} from "./chunk-36EJLSQQ.js";
 import {
   compileGlobRegex,
   fallbackIgnoredDirs,
@@ -27,37 +34,31 @@ import {
 } from "./chunk-VG7TBQIY.js";
 import {
   RESPONSE_SCHEMA_RUNTIME_ID,
-  applyToolProfile,
   bashTool,
   builtin,
-  describeCallAction,
   networkToolsDisabled,
   readMaxBytes,
   readTool,
   renderAgentLedger
-} from "./chunk-4H6ULJ3H.js";
+} from "./chunk-J4W7KFM7.js";
 import {
   createTaskBoardStore,
   taskBoardCounts
 } from "./chunk-2JDWVJND.js";
 import {
   formatModelRejection
-} from "./chunk-N3PBVRTZ.js";
+} from "./chunk-32KWKNSF.js";
+import {
+  describeCallAction
+} from "./chunk-TVHHYFHE.js";
+import {
+  applyToolProfile
+} from "./chunk-42FMPA75.js";
 import {
   resolveReadPath,
   resolveToCwd,
   toPosixPath
 } from "./chunk-OQE5J4C6.js";
-import {
-  classify
-} from "./chunk-S4COXYBG.js";
-import {
-  CLIO_ARTIFACT_DIR,
-  artifactDefaultPath,
-  detectValidationCommand,
-  protectArtifact,
-  protectedArtifactMutationBlockReason
-} from "./chunk-MV3K5QF2.js";
 import {
   DEFAULT_AUTONOMY_EXPOSURE,
   DEFAULT_AUTONOMY_LEVEL,
@@ -81,36 +82,43 @@ import {
   toolResultContextText,
   toolResultDigestFor,
   truncateHead
-} from "./chunk-ODFEOB4F.js";
+} from "./chunk-CY6FY24N.js";
 import {
   GREP_MAX_LINE_LENGTH,
   truncateLine
 } from "./chunk-OZNBF4L3.js";
+import {
+  truncateUtf8
+} from "./chunk-6XLNIQDB.js";
 import {
   parseAgentLedgerBody
 } from "./chunk-CMZWFGD2.js";
 import {
-  webFetchToolSurface
-} from "./chunk-ZI647VB5.js";
+  classify
+} from "./chunk-DYJP44XW.js";
 import {
-  truncateUtf8
-} from "./chunk-6XLNIQDB.js";
+  CLIO_ARTIFACT_DIR,
+  artifactDefaultPath,
+  detectValidationCommand,
+  protectArtifact,
+  protectedArtifactMutationBlockReason
+} from "./chunk-GCSMB2KY.js";
 import {
   typebox_exports
 } from "./chunk-5B2AEOW5.js";
 import {
   ToolNames,
   isBuiltinToolName
-} from "./chunk-CGKSTWHD.js";
+} from "./chunk-K6BSR66V.js";
 import {
   incompleteInstallationAdvice
 } from "./chunk-65DEGPJ6.js";
-import {
-  buildSafeToolEnv
-} from "./chunk-B5CSFE7B.js";
 import {
   BusChannels
-} from "./chunk-RKRLDWD3.js";
+} from "./chunk-HLW2MRKE.js";
+import {
+  buildSafeToolEnv
+} from "./chunk-BBVJUZHB.js";
 import {
   GUARDRAIL_DEFAULTS,
   isWorkerToolCallCapExceededReason,
@@ -122,7 +130,7 @@ import {
 } from "./chunk-4ZG3XFUR.js";
 import {
   clioStateDir
-} from "./chunk-BNAZZHFG.js";
+} from "./chunk-BYP5D4HI.js";
 import {
   StringEnum,
   engineStreamSimple
@@ -3740,31 +3748,9 @@ var editTool = {
 
 // src/tools/find.ts
 init_esm_shims();
-import { existsSync, statSync as statSync2 } from "node:fs";
+import { existsSync, statSync } from "node:fs";
 import { readdir } from "node:fs/promises";
-import { join as join2, relative } from "node:path";
-
-// src/tools/executables.ts
-init_esm_shims();
-import { statSync } from "node:fs";
-import { delimiter, join } from "node:path";
-function findExecutableOnPath(name) {
-  const pathEnv = process.env.PATH;
-  if (!pathEnv) return null;
-  for (const dir of pathEnv.split(delimiter)) {
-    if (!dir) continue;
-    const candidate = join(dir, name);
-    const stat = statSync(candidate, { throwIfNoEntry: false });
-    if (stat?.isFile() && (stat.mode & 73) !== 0) return candidate;
-  }
-  return null;
-}
-function resolveFdBinary() {
-  return findExecutableOnPath("fd") ?? findExecutableOnPath("fdfind");
-}
-function resolveRgBinary() {
-  return findExecutableOnPath("rg");
-}
+import { join, relative } from "node:path";
 
 // src/tools/spawn-hygiene.ts
 init_esm_shims();
@@ -3940,7 +3926,7 @@ async function fallbackFind(pattern, searchPath, collectLimit, includeIgnored, s
     }
     for (const entry of entries) {
       if (out.length >= collectLimit || signal?.aborted) return;
-      const absPath = join2(dir, entry.name);
+      const absPath = join(dir, entry.name);
       if (entry.isDirectory() && !entry.isSymbolicLink()) {
         if (ignored.has(entry.name)) continue;
         const relDir = `${toPosixPath(relative(searchPath, absPath))}/`;
@@ -3961,7 +3947,7 @@ function orderByMtime(paths, searchPath, limit, candidateCap) {
   const stamped = paths.map((relPath) => {
     let mtimeMs = 0;
     try {
-      mtimeMs = statSync2(join2(searchPath, relPath)).mtimeMs;
+      mtimeMs = statSync(join(searchPath, relPath)).mtimeMs;
     } catch {
     }
     return { relPath, mtimeMs };
@@ -4042,7 +4028,7 @@ var findTool = {
     }
     const searchPath = resolveReadPath(typeof args.path === "string" && args.path.length > 0 ? args.path : ".");
     if (!existsSync(searchPath)) return { kind: "error", message: `find: path not found: ${searchPath}` };
-    if (!statSync2(searchPath).isDirectory()) return { kind: "error", message: `find: not a directory: ${searchPath}` };
+    if (!statSync(searchPath).isDirectory()) return { kind: "error", message: `find: not a directory: ${searchPath}` };
     const limit = typeof args.limit === "number" && args.limit > 0 ? Math.floor(args.limit) : DEFAULT_LIMIT;
     const includeIgnored = args.include_ignored === true;
     const reservation = reserveObservation(OBSERVE_SELF_CAPS.find, options);
@@ -4090,8 +4076,8 @@ var findTool = {
 
 // src/tools/grep.ts
 init_esm_shims();
-import { readdirSync, readFileSync as readFileSync2, statSync as statSync3 } from "node:fs";
-import path3, { join as join3, relative as relative2 } from "node:path";
+import { readdirSync, readFileSync as readFileSync2, statSync as statSync2 } from "node:fs";
+import path3, { join as join2, relative as relative2 } from "node:path";
 var DEFAULT_LIMIT2 = 100;
 var FALLBACK_MAX_FILE_BYTES = 2e7;
 var MODE_UNITS = {
@@ -4113,7 +4099,7 @@ function formatPath(filePath, searchPath, isDirectory) {
 }
 function statIsDirectory(searchPath) {
   try {
-    return { ok: true, isDirectory: statSync3(searchPath).isDirectory() };
+    return { ok: true, isDirectory: statSync2(searchPath).isDirectory() };
   } catch (err) {
     const message = err instanceof Error ? err.message : String(err);
     return { ok: false, message };
@@ -4313,7 +4299,7 @@ function fallbackGrep(input) {
     if (limitHit) return;
     let buffer;
     try {
-      const stat = statSync3(filePath);
+      const stat = statSync2(filePath);
       if (!stat.isFile() || stat.size > FALLBACK_MAX_FILE_BYTES) return;
       buffer = readFileSync2(filePath);
     } catch {
@@ -4365,7 +4351,7 @@ function fallbackGrep(input) {
     }
     for (const entry of entries) {
       if (limitHit || signal?.aborted) return;
-      const absPath = join3(dir, entry.name);
+      const absPath = join2(dir, entry.name);
       if (entry.isDirectory()) {
         if (ignored.has(entry.name)) continue;
         walk(absPath);
@@ -4617,7 +4603,7 @@ ${output}`,
 
 // src/tools/ls.ts
 init_esm_shims();
-import { readdirSync as readdirSync2, statSync as statSync4 } from "node:fs";
+import { readdirSync as readdirSync2, statSync as statSync3 } from "node:fs";
 import path4 from "node:path";
 var DEFAULT_LIMIT3 = 500;
 function parseLimit(value) {
@@ -4637,7 +4623,7 @@ var lsTool = {
     const root = resolveReadPath(rootArg);
     const limit = parseLimit(args.limit);
     try {
-      const rootStat = statSync4(root);
+      const rootStat = statSync3(root);
       if (!rootStat.isDirectory()) {
         return { kind: "error", message: `ls: not a directory: ${root}` };
       }
@@ -4665,7 +4651,7 @@ var lsTool = {
           break;
         }
         try {
-          const entryStat = statSync4(path4.join(root, entry));
+          const entryStat = statSync3(path4.join(root, entry));
           outputEntries.push(entryStat.isDirectory() ? `${entry}/` : entry);
         } catch {
         }
@@ -4740,6 +4726,10 @@ var TOOL_PLANES = {
   // review the board depends on. Sequential so two posts in one batch do not
   // interleave against the local post cap.
   [ToolNames.Ledger]: { plane: "orchestrate", actionClass: "read", executionMode: "sequential" },
+  // panes projects Clio's own runs onto a pane host and opens preset utility
+  // panes. It mutates no workspace, so it stays read class; sequential because
+  // two pane operations in one batch would race the same pane registry.
+  [ToolNames.Panes]: { plane: "orchestrate", actionClass: "read", executionMode: "sequential" },
   [ToolNames.WebFetch]: { plane: "retrieve", actionClass: "read", executionMode: "parallel" },
   [ToolNames.AskUser]: { plane: "interact", actionClass: "read", executionMode: "sequential" },
   [ToolNames.Artifact]: { plane: "artifact", actionClass: "write", executionMode: "sequential" }
@@ -4758,6 +4748,7 @@ var OBSERVE_ENVELOPE_SELF_CAPS = [
 var SESSION_BOUND_TOOLS = /* @__PURE__ */ new Set([]);
 var DISPATCH_BOUND_TOOLS = /* @__PURE__ */ new Set([ToolNames.Dispatch, ToolNames.Monitor, ToolNames.Steer]);
 var INTERACTIVE_BOUND_TOOLS = /* @__PURE__ */ new Set([ToolNames.AskUser]);
+var PANES_BOUND_TOOLS = /* @__PURE__ */ new Set([ToolNames.Panes]);
 var NETWORK_BOUND_TOOLS = /* @__PURE__ */ new Set([ToolNames.WebFetch]);
 function validateBuiltinToolPolicy(specs, options = {}) {
   const errors = [];
@@ -4796,12 +4787,14 @@ function validateBuiltinToolPolicy(specs, options = {}) {
   const includeSessionTools = options.includeSessionTools ?? false;
   const includeDispatchTools = options.includeDispatchTools ?? false;
   const includeInteractiveTools = options.includeInteractiveTools ?? false;
+  const includePanesTools = options.includePanesTools ?? false;
   const includeNetworkTools = options.includeNetworkTools ?? true;
   const required = new Set(Object.values(ToolNames));
   for (const tool of [...required]) {
     if (!includeSessionTools && SESSION_BOUND_TOOLS.has(tool)) required.delete(tool);
     if (!includeDispatchTools && DISPATCH_BOUND_TOOLS.has(tool)) required.delete(tool);
     if (!includeInteractiveTools && INTERACTIVE_BOUND_TOOLS.has(tool)) required.delete(tool);
+    if (!includePanesTools && PANES_BOUND_TOOLS.has(tool)) required.delete(tool);
     if (!includeNetworkTools && NETWORK_BOUND_TOOLS.has(tool)) required.delete(tool);
   }
   for (const tool of required) {
@@ -5099,7 +5092,7 @@ function registerCoreTools(registry, deps = {}) {
   if (includeNetworkTools) {
     registry.register({
       ...builtin(
-        lazyTool(webFetchToolSurface, async () => (await import("./web-fetch-2YHJ3KTG.js")).webFetchTool),
+        lazyTool(webFetchToolSurface, async () => (await import("./web-fetch-S7RR6GZ7.js")).webFetchTool),
         { path: "src/tools/web-fetch.ts", scope: "core" }
       )
     });
@@ -5109,13 +5102,13 @@ function registerCoreTools(registry, deps = {}) {
   });
   registry.register({
     ...builtin(
-      lazyTool(verifyToolSurface, async () => (await import("./verify-BVKWTNDL.js")).verifyTool),
+      lazyTool(verifyToolSurface, async () => (await import("./verify-3U6J7FZI.js")).verifyTool),
       { path: "src/tools/verify/index.ts", scope: "core" }
     )
   });
   registry.register({
     ...builtin(
-      lazyTool(codeNavToolSurface, async () => (await import("./code-nav-LMW275PA.js")).codeNavTool),
+      lazyTool(codeNavToolSurface, async () => (await import("./code-nav-3YYRMYNF.js")).codeNavTool),
       { path: "src/tools/codewiki/code-nav.ts", scope: "core" }
     )
   });
@@ -5140,7 +5133,7 @@ function registerCoreTools(registry, deps = {}) {
   registry.register({
     ...builtin(
       lazyTool(contextToolSurface, async () => {
-        const { createContextTool } = await import("./context-PALKKQYL.js");
+        const { createContextTool } = await import("./context-GSXUE4CT.js");
         if (!session) return createContextTool(skillToolDeps);
         const { probeWorkspace } = await import("./workspace-ZJ6BFM3Q.js");
         return createContextTool({
@@ -5199,8 +5192,8 @@ function registerCoreTools(registry, deps = {}) {
     includeInteractiveTools: Boolean(deps.askUser)
   };
 }
-function assertRegisteredBuiltinTools(registry, registration, includeDispatchTools) {
-  assertBuiltinToolPolicy(registry.listAll(), { ...registration, includeDispatchTools });
+function assertRegisteredBuiltinTools(registry, registration, includeDispatchTools, includePanesTools = false) {
+  assertBuiltinToolPolicy(registry.listAll(), { ...registration, includeDispatchTools, includePanesTools });
 }
 
 export {
@@ -5237,10 +5230,9 @@ export {
   applyEditsToNormalizedContent,
   generateDiffString,
   askAxis,
-  resolveFdBinary,
   lazyTool,
   registerCoreTools,
   assertRegisteredBuiltinTools,
   createRegistry
 };
-//# sourceMappingURL=chunk-R7LNVMCS.js.map
+//# sourceMappingURL=chunk-HJJTYUHX.js.map

package/dist/{chunk-RKRLDWD3.js → chunk-HLW2MRKE.js}

@@ -70,4 +70,4 @@ export {
   BusChannels,
   isRunAbortedPayload
 };
-//# sourceMappingURL=chunk-RKRLDWD3.js.map
+//# sourceMappingURL=chunk-HLW2MRKE.js.map

package/dist/{chunk-CA42X6KT.js → chunk-HWHKMHUA.js}

@@ -1,22 +1,22 @@
 import { createRequire as __clioCreateRequire } from "node:module"; const require = __clioCreateRequire(import.meta.url);
-import {
-  VERIFICATION_SCRIPT_FAMILY_HINT
-} from "./chunk-UL3WSD3F.js";
 import {
   truncateUtf8
 } from "./chunk-6XLNIQDB.js";
+import {
+  VERIFICATION_SCRIPT_FAMILY_HINT
+} from "./chunk-UL3WSD3F.js";
 import {
   typebox_exports
 } from "./chunk-5B2AEOW5.js";
 import {
   ToolNames
-} from "./chunk-CGKSTWHD.js";
+} from "./chunk-K6BSR66V.js";
 import {
   SAFE_EXEC_DEFAULT_MAX_OUTPUT_BYTES,
   SAFE_EXEC_DEFAULT_TIMEOUT_MS,
   combineSafeOutput,
   runCommandVector
-} from "./chunk-B5CSFE7B.js";
+} from "./chunk-BBVJUZHB.js";
 import {
   StringEnum
 } from "./chunk-UOSL25KY.js";
@@ -177,4 +177,4 @@ export {
   prepareVerifyArguments,
   verifyToolSurface
 };
-//# sourceMappingURL=chunk-CA42X6KT.js.map
+//# sourceMappingURL=chunk-HWHKMHUA.js.map