@iowarp/clio-coder 0.3.9 → 0.4.0

package/dist/{auth-OI4LIH2I.js → auth-3IDSJEIK.js}

@@ -10,52 +10,53 @@ import {
 import {
   credentialWriteFailed,
   printPlaintextCredentialWarning
-} from "./chunk-IFBNV6H6.js";
+} from "./chunk-2ANTL7MR.js";
 import {
   columnWidths,
   formatColumnRow,
   formatColumns,
   printError,
   printOk
-} from "./chunk-XK56QHLX.js";
+} from "./chunk-VPKWYKEY.js";
 import "./chunk-5TSRNF4G.js";
 import {
   EMPTY_CAPABILITIES
-} from "./chunk-MIX5N5AC.js";
+} from "./chunk-DQITNCXG.js";
 import "./chunk-CFGTUFWB.js";
-import "./chunk-LU7P4LHA.js";
-import "./chunk-AEYBF3TB.js";
+import "./chunk-P3FOHJT4.js";
+import "./chunk-UM7N4G5A.js";
+import "./chunk-ZGVHUX3M.js";
+import "./chunk-HLW2MRKE.js";
+import "./chunk-76ONBSIA.js";
+import "./chunk-R346GLFC.js";
 import {
   readSettings
-} from "./chunk-PNY46YEY.js";
+} from "./chunk-VFA6GDY5.js";
 import "./chunk-FQ4SKYE4.js";
-import "./chunk-ZGVHUX3M.js";
-import "./chunk-RKRLDWD3.js";
-import "./chunk-KV2AOLDF.js";
 import "./chunk-IWHMRKLL.js";
 import {
   registerBuiltinRuntimes
-} from "./chunk-JEQQR47K.js";
-import "./chunk-XDOQXGFO.js";
+} from "./chunk-6DB53AJS.js";
+import "./chunk-GXNLGKAB.js";
 import "./chunk-LL4KHSZI.js";
 import "./chunk-4ZG3XFUR.js";
 import {
   listProviderSupportEntries,
   resolveProviderReference,
   supportGroupLabel
-} from "./chunk-774ILSRL.js";
+} from "./chunk-HI63TFOG.js";
 import {
   authNotRequiredStatus,
   openAuthStorage,
   registerClioOAuthProviders,
   resolveRuntimeAuthTarget,
   targetRequiresAuth
-} from "./chunk-EQ63NRB7.js";
+} from "./chunk-BBVYXMFO.js";
 import "./chunk-SST6Z5JA.js";
 import "./chunk-IKCO5N3L.js";
 import "./chunk-3I7MS7N2.js";
 import "./chunk-APJ265NV.js";
-import "./chunk-BNAZZHFG.js";
+import "./chunk-BYP5D4HI.js";
 import "./chunk-WEPFGWHJ.js";
 import {
   getRuntimeRegistry
@@ -544,4 +545,4 @@ async function runAuthCommand(args) {
 export {
   runAuthCommand
 };
-//# sourceMappingURL=auth-OI4LIH2I.js.map
+//# sourceMappingURL=auth-3IDSJEIK.js.map

package/dist/{builtins-AD25UL3C.js → builtins-XCZWXSC7.js}

@@ -2,8 +2,8 @@ import { createRequire as __clioCreateRequire } from "node:module"; const requir
 import {
   BUILTIN_RUNTIMES,
   registerBuiltinRuntimes
-} from "./chunk-JEQQR47K.js";
-import "./chunk-XDOQXGFO.js";
+} from "./chunk-6DB53AJS.js";
+import "./chunk-GXNLGKAB.js";
 import "./chunk-LL4KHSZI.js";
 import "./chunk-4ZG3XFUR.js";
 import "./chunk-VO2LKSTM.js";
@@ -14,4 +14,4 @@ export {
   BUILTIN_RUNTIMES,
   registerBuiltinRuntimes
 };
-//# sourceMappingURL=builtins-AD25UL3C.js.map
+//# sourceMappingURL=builtins-XCZWXSC7.js.map

package/dist/{chunk-IFBNV6H6.js → chunk-2ANTL7MR.js}

@@ -1,13 +1,13 @@
 import { createRequire as __clioCreateRequire } from "node:module"; const require = __clioCreateRequire(import.meta.url);
 import {
   printError
-} from "./chunk-XK56QHLX.js";
+} from "./chunk-VPKWYKEY.js";
 import {
   source_default
 } from "./chunk-5TSRNF4G.js";
 import {
   authStoragePath
-} from "./chunk-EQ63NRB7.js";
+} from "./chunk-BBVYXMFO.js";
 import {
   init_esm_shims
 } from "./chunk-3R73A4XB.js";
@@ -35,4 +35,4 @@ export {
   printPlaintextCredentialWarning,
   credentialWriteFailed
 };
-//# sourceMappingURL=chunk-IFBNV6H6.js.map
+//# sourceMappingURL=chunk-2ANTL7MR.js.map

package/dist/{chunk-56KB5IJP.js → chunk-2OQE55CK.js}

@@ -4,14 +4,14 @@ import {
 } from "./chunk-IWHMRKLL.js";
 import {
   DEFAULT_SETTINGS_YAML
-} from "./chunk-XDOQXGFO.js";
+} from "./chunk-GXNLGKAB.js";
 import {
   clioCacheDir,
   clioConfigDir,
   clioDataDir,
   clioStateDir,
   resolveClioDirs
-} from "./chunk-BNAZZHFG.js";
+} from "./chunk-BYP5D4HI.js";
 import {
   init_esm_shims
 } from "./chunk-3R73A4XB.js";
@@ -143,4 +143,4 @@ function enforceHomePrefixGuard() {
 export {
   initializeClioHome
 };
-//# sourceMappingURL=chunk-56KB5IJP.js.map
+//# sourceMappingURL=chunk-2OQE55CK.js.map

package/dist/{chunk-N3PBVRTZ.js → chunk-32KWKNSF.js}

@@ -1,25 +1,27 @@
 import { createRequire as __clioCreateRequire } from "node:module"; const require = __clioCreateRequire(import.meta.url);
 import {
   loadProjectVerifierCatalog
-} from "./chunk-A2NJGIB3.js";
+} from "./chunk-5LXZXPKX.js";
 import {
-  classify,
   pathBoundaryCovers,
   resolvePathBoundary
-} from "./chunk-S4COXYBG.js";
+} from "./chunk-HHV2GANA.js";
+import {
+  classify
+} from "./chunk-DYJP44XW.js";
 import {
   artifactDefaultPath,
   extractCommandDeleteTargets,
   extractCommandWriteTargets,
   inlineShellScript,
   tokenizeShellLike
-} from "./chunk-MV3K5QF2.js";
+} from "./chunk-GCSMB2KY.js";
 import {
   canonicalizeExistingPath
 } from "./chunk-ECH6PKUQ.js";
 import {
   ToolNames
-} from "./chunk-CGKSTWHD.js";
+} from "./chunk-K6BSR66V.js";
 import {
   foreignAgentDirs
 } from "./chunk-IHXBNWMM.js";
@@ -31,7 +33,7 @@ import {
 } from "./chunk-APJ265NV.js";
 import {
   clioConfigDir
-} from "./chunk-BNAZZHFG.js";
+} from "./chunk-BYP5D4HI.js";
 import {
   __toESM,
   init_esm_shims
@@ -1338,4 +1340,4 @@ export {
   WRITE_ROOT_REFUSED_TOOLS,
   createSafetyPolicyEngine
 };
-//# sourceMappingURL=chunk-N3PBVRTZ.js.map
+//# sourceMappingURL=chunk-32KWKNSF.js.map

package/dist/{chunk-VKBMFOYV.js → chunk-36EJLSQQ.js}

@@ -1,29 +1,33 @@
 import { createRequire as __clioCreateRequire } from "node:module"; const require = __clioCreateRequire(import.meta.url);
 import {
   DISPATCH_BRIEFING_MAX_BYTES,
-  TOOL_PROFILE_NAMES,
   classifyAgentTask,
+  classifyDispatchIntentCompatibility,
   cloneApprovedAssignmentRoute,
   cloneDispatchBudgetRequest,
+  dispatchIntentRefusals,
+  dispatchIntentScopeWidening,
   isApprovedAssignmentRoute,
   isDispatchIntent,
-  isToolProfileName,
   resolveDispatchPathScope
-} from "./chunk-4H6ULJ3H.js";
+} from "./chunk-J4W7KFM7.js";
 import {
   ROUTE_POLICY_VERSION,
   isRouteDecisionAgentSelection,
   isRoutingIntent,
   parseRoutingIntent
-} from "./chunk-VPTUJU4P.js";
+} from "./chunk-SJ5ZKQ4S.js";
+import {
+  TOOL_PROFILE_NAMES,
+  isToolProfileName
+} from "./chunk-42FMPA75.js";
 import {
   isExecutionRole,
   requestExecutionRole
 } from "./chunk-H7IXIC72.js";
 import {
-  AGENT_AUTOMATION_AUTHORITIES,
-  pathBoundaryCovers
-} from "./chunk-S4COXYBG.js";
+  AGENT_AUTOMATION_AUTHORITIES
+} from "./chunk-DYJP44XW.js";
 import {
   init_esm_shims
 } from "./chunk-3R73A4XB.js";
@@ -161,10 +165,14 @@ function dispatchRequestFromArgs(args, options) {
     if (resolved.intent.writeRoots.length > 0) {
       const legacy = Array.isArray(args.writeRoots) ? args.writeRoots.filter((entry) => typeof entry === "string") : void 0;
       if (legacy !== void 0) {
-        const left = [...new Set(legacy)].sort();
-        if (JSON.stringify(left) !== JSON.stringify(resolved.intent.writeRoots)) {
-          return { ok: false, message: "intent_write_roots_contradiction" };
-        }
+        const refusal = dispatchIntentRefusals(
+          classifyDispatchIntentCompatibility({
+            intent: resolved.intent,
+            writeRoots: legacy,
+            ...cwd !== void 0 ? { cwd } : {}
+          })
+        ).find((entry) => entry.code === "intent_write_roots_contradiction");
+        if (refusal !== void 0) return { ok: false, message: refusal.message };
         request.writeRoots = legacy;
       } else {
         request.writeRoots = resolved.intent.writeRoots;
@@ -230,21 +238,9 @@ function dispatchRequestsFromArgs(args, options) {
       }
       const ceiling = options.resolveIntent(sharedIntent, parsed.request.cwd);
       if (!ceiling.ok) return { ok: false, message: `dispatch: task ${index + 1}: ${ceiling.message}` };
-      const pathCeilings = {
-        readRoots: [...ceiling.intent.readRoots, ...ceiling.intent.writeRoots],
-        writeRoots: ceiling.intent.writeRoots,
-        relevantPaths: [...ceiling.intent.readRoots, ...ceiling.intent.writeRoots, ...ceiling.intent.relevantPaths]
-      };
-      for (const field of ["readRoots", "writeRoots", "relevantPaths"]) {
-        const outside = parsed.request.intent?.[field].find(
-          (candidate) => !pathBoundaryCovers(pathCeilings[field], candidate)
-        );
-        if (outside !== void 0) {
-          return {
-            ok: false,
-            message: `dispatch: task ${index + 1}: intent_scope_widening: ${field} entry '${outside}' is outside the top-level intent ceiling`
-          };
-        }
+      const widening = parsed.request.intent === void 0 ? null : dispatchIntentScopeWidening(ceiling.intent, parsed.request.intent);
+      if (widening !== null) {
+        return { ok: false, message: `dispatch: task ${index + 1}: ${widening.message}` };
       }
     }
     requests.push(parsed.request);
@@ -815,4 +811,4 @@ export {
   withResolvedDispatchPlan,
   describeDispatchPlan
 };
-//# sourceMappingURL=chunk-VKBMFOYV.js.map
+//# sourceMappingURL=chunk-36EJLSQQ.js.map

package/dist/{chunk-465CC7FK.js → chunk-3BT2XMV4.js}

@@ -1,29 +1,29 @@
 import { createRequire as __clioCreateRequire } from "node:module"; const require = __clioCreateRequire(import.meta.url);
-import {
-  assertAgentIdNamespace
-} from "./chunk-DR52UMZW.js";
 import {
   readStrictLayeredSettings,
   updateLayeredSettings
-} from "./chunk-FALJGAWU.js";
+} from "./chunk-7MCTRUCE.js";
 import {
   resolveShutdownHookBudgetMs,
   runWithBudget,
   writeShutdownNotice
-} from "./chunk-BVDVID7E.js";
+} from "./chunk-LDQ2ZF2M.js";
 import {
-  setGitCommitAttributionEnabled
-} from "./chunk-B5CSFE7B.js";
-import {
-  formatSettingsFailure,
-  settingsPath
-} from "./chunk-PNY46YEY.js";
+  assertAgentIdNamespace
+} from "./chunk-DR52UMZW.js";
 import {
   getSharedBus
 } from "./chunk-ZGVHUX3M.js";
 import {
   BusChannels
-} from "./chunk-RKRLDWD3.js";
+} from "./chunk-HLW2MRKE.js";
+import {
+  formatSettingsFailure,
+  settingsPath
+} from "./chunk-VFA6GDY5.js";
+import {
+  setGitCommitAttributionEnabled
+} from "./chunk-BBVJUZHB.js";
 import {
   init_esm_shims
 } from "./chunk-3R73A4XB.js";
@@ -150,6 +150,9 @@ var HOT_RELOAD_FIELDS = /* @__PURE__ */ new Set([
   "modelSelector",
   "terminal.smoothStreaming",
   "attribution.gitCommits",
+  // The bridge reads these on every explicit open; no mux re-detection is
+  // needed because the host capability rung remains `panes.enabled`.
+  "panes.yazi",
   // The watchdog registration reads its settings live on every trigger, so
   // enabling it, retargeting it, or changing its cadence takes effect on the
   // next turn boundary without a restart or a session-routing patch.
@@ -381,4 +384,4 @@ export {
   ConfigDomainModule,
   createConfigDomainModule
 };
-//# sourceMappingURL=chunk-465CC7FK.js.map
+//# sourceMappingURL=chunk-3BT2XMV4.js.map

package/dist/{chunk-NQ6UCCOD.js → chunk-3URVFKWK.js}

@@ -4,31 +4,31 @@ import {
   listChecks,
   runProjectCheck,
   runScriptCheck
-} from "./chunk-P3JGPQFL.js";
+} from "./chunk-YDFRH54B.js";
 import {
   BROWSER_MODES,
   maxOutputArg,
   prepareVerifyArguments,
   timeoutArg,
   verifyToolSurface
-} from "./chunk-CA42X6KT.js";
+} from "./chunk-HWHKMHUA.js";
 import {
   escapeRegExp
 } from "./chunk-VG7TBQIY.js";
 import {
   resolveReadPath
 } from "./chunk-OQE5J4C6.js";
+import {
+  truncateUtf8
+} from "./chunk-6XLNIQDB.js";
 import {
   VERIFICATION_SCRIPT_FAMILY_HINT,
   isVerificationScriptName
 } from "./chunk-UL3WSD3F.js";
-import {
-  truncateUtf8
-} from "./chunk-6XLNIQDB.js";
 import {
   combineSafeOutput,
   runCommandVector
-} from "./chunk-B5CSFE7B.js";
+} from "./chunk-BBVJUZHB.js";
 import {
   init_esm_shims
 } from "./chunk-3R73A4XB.js";
@@ -633,4 +633,4 @@ var verifyTool = {
 export {
   verifyTool
 };
-//# sourceMappingURL=chunk-NQ6UCCOD.js.map
+//# sourceMappingURL=chunk-3URVFKWK.js.map

package/dist/{chunk-WIE7ZOSW.js → chunk-3XML7CDN.js}

@@ -4,7 +4,7 @@ import {
 } from "./chunk-5B2AEOW5.js";
 import {
   ToolNames
-} from "./chunk-CGKSTWHD.js";
+} from "./chunk-K6BSR66V.js";
 import {
   StringEnum
 } from "./chunk-UOSL25KY.js";
@@ -29,4 +29,4 @@ var steerToolSurface = {
 export {
   steerToolSurface
 };
-//# sourceMappingURL=chunk-WIE7ZOSW.js.map
+//# sourceMappingURL=chunk-3XML7CDN.js.map

package/dist/chunk-42FMPA75.js

@@ -0,0 +1,101 @@
+import { createRequire as __clioCreateRequire } from "node:module"; const require = __clioCreateRequire(import.meta.url);
+import {
+  ToolNames,
+  isBuiltinToolName
+} from "./chunk-K6BSR66V.js";
+import {
+  init_esm_shims
+} from "./chunk-3R73A4XB.js";
+
+// src/tools/profiles.ts
+init_esm_shims();
+var TOOL_PROFILE_NAMES = [
+  "minimal-local",
+  "science-local",
+  "full-agent"
+];
+var ALL_TOOL_PROFILE_NAMES = [...TOOL_PROFILE_NAMES, "council-read-only"];
+var CODEWIKI_TOOL_NAMES = [ToolNames.CodeNav];
+var MINIMAL_LOCAL_TOOLS = [
+  ToolNames.Read,
+  ToolNames.Grep,
+  ToolNames.Find,
+  ToolNames.Ls,
+  ToolNames.Git,
+  ToolNames.Context,
+  ToolNames.CodeNav,
+  // A narrowed read-only scout swarm is the surface that most needs to see
+  // what its peers already staked.
+  ToolNames.Ledger
+];
+var SCIENCE_LOCAL_TOOLS = [...MINIMAL_LOCAL_TOOLS, ToolNames.Verify];
+var COUNCIL_READ_ONLY_TOOLS = [
+  ToolNames.Read,
+  ToolNames.Grep,
+  ToolNames.Find,
+  ToolNames.Ls,
+  ToolNames.CodeNav,
+  ToolNames.Context
+];
+var NARROW_TOOL_PROFILES = {
+  "minimal-local": new Set(MINIMAL_LOCAL_TOOLS),
+  "science-local": new Set(SCIENCE_LOCAL_TOOLS),
+  "council-read-only": new Set(COUNCIL_READ_ONLY_TOOLS)
+};
+function isToolProfileName(value) {
+  return ALL_TOOL_PROFILE_NAMES.includes(value);
+}
+function narrowsToolSurface(profile) {
+  return profile !== void 0 && profile in NARROW_TOOL_PROFILES;
+}
+function assertToolProfileEnforceable(profile, runtimeLabel) {
+  if (narrowsToolSurface(profile)) {
+    throw new Error(
+      `${runtimeLabel} runtime cannot enforce tool_profile '${profile}': it runs its own tool surface without Clio per-tool mediation. Dispatch to a native or claude-sdk worker, or use tool_profile full-agent.`
+    );
+  }
+}
+function applyToolProfile(tools, profile, context) {
+  const unique = uniquePreservingOrder(tools);
+  let profiled;
+  if (profile === void 0 || profile === "full-agent") {
+    profiled = unique;
+  } else {
+    const allowed = NARROW_TOOL_PROFILES[profile];
+    profiled = unique.filter((tool) => isBuiltinToolName(tool) && allowed.has(tool));
+  }
+  return profile === "council-read-only" ? profiled : applyCodewikiWorkerPolicy(profiled, context);
+}
+function uniquePreservingOrder(tools) {
+  const seen = /* @__PURE__ */ new Set();
+  const unique = [];
+  for (const tool of tools) {
+    if (seen.has(tool)) continue;
+    seen.add(tool);
+    unique.push(tool);
+  }
+  return unique;
+}
+function isCodewikiTool(tool) {
+  return CODEWIKI_TOOL_NAMES.includes(tool);
+}
+function isNavigationHeavyTask(task) {
+  if (!task) return false;
+  return /\b(?:codewiki|symbol|symbols|entry\s*points?|where\s+is|code_nav|call\s*sites?|references?|imports?|exports?|map|mapping|navigate|navigation|topology|architecture|boundar(?:y|ies)|ownership|trace|locate|find\s+(?:the\s+)?(?:implementation|definition|module|file|path))\b|(?:^|\s)(?:src|tests?|cmd|pkg|lib)\/|\.(?:[cm]?[tj]sx?|py|pyw|go|rs|c|h|cc|cpp|cxx|hpp|hh|hxx|java|rb)\b/i.test(
+    task
+  );
+}
+function applyCodewikiWorkerPolicy(tools, context) {
+  if (!context?.agentId) return tools;
+  if (context.agentId === "scout") return tools;
+  if (isNavigationHeavyTask(context.task)) return tools;
+  return tools.filter((tool) => !isCodewikiTool(tool));
+}
+
+export {
+  TOOL_PROFILE_NAMES,
+  isToolProfileName,
+  assertToolProfileEnforceable,
+  applyToolProfile
+};
+//# sourceMappingURL=chunk-42FMPA75.js.map

package/dist/{chunk-A2NJGIB3.js → chunk-5LXZXPKX.js}

@@ -5,7 +5,7 @@ import {
 import {
   SAFE_EXEC_DEFAULT_TIMEOUT_MS,
   resolveSafeCwd
-} from "./chunk-B5CSFE7B.js";
+} from "./chunk-BBVJUZHB.js";
 import {
   require_dist
 } from "./chunk-APJ265NV.js";
@@ -310,4 +310,4 @@ export {
   parseProjectVerifierCatalogText,
   packageDeclaredCheck
 };
-//# sourceMappingURL=chunk-A2NJGIB3.js.map
+//# sourceMappingURL=chunk-5LXZXPKX.js.map

package/dist/{chunk-HAY4ZE2P.js → chunk-5PSMVOLM.js}

@@ -3,7 +3,7 @@ import {
   asDirectoryPathBoundary,
   pathBoundaryEntryCovers,
   resolvePathBoundary
-} from "./chunk-S4COXYBG.js";
+} from "./chunk-HHV2GANA.js";
 import {
   init_esm_shims
 } from "./chunk-3R73A4XB.js";
@@ -53,4 +53,4 @@ export {
   WORKSPACE_SCOPE,
   CONFIRMED_SCOPE
 };
-//# sourceMappingURL=chunk-HAY4ZE2P.js.map
+//# sourceMappingURL=chunk-5PSMVOLM.js.map