@iowarp/clio-coder 0.3.9 → 0.4.1

package/src/engine/worker-events.ts

@@ -9,18 +9,18 @@ import type { RunOutcomeCode } from "../domains/dispatch/types.js";
 import type { ToolFinishEvent, ToolStartEvent } from "../tools/agent-tools.js";
 
 export interface ClioToolStartEvent {
-	type: "clio_tool_start";
+	type: "clio_coder_tool_start";
 	payload: ToolStartEvent;
 }
 
 export interface ClioToolFinishEvent {
-	type: "clio_tool_finish";
+	type: "clio_coder_tool_finish";
 	payload: ToolFinishEvent;
 }
 
 /** Emitted when the worker's non-stall policy resolves a permission-requiring tool call. */
 export interface ClioPermissionResolvedEvent {
-	type: "clio_permission_resolved";
+	type: "clio_coder_permission_resolved";
 	payload: {
 		tool: string;
 		actionClass: string;
@@ -47,7 +47,7 @@ export interface ClioPermissionResolvedEvent {
  * on stdin (or the timeout fallback) resolves it.
  */
 export interface ClioPermissionEscalatedEvent {
-	type: "clio_permission_escalated";
+	type: "clio_coder_permission_escalated";
 	payload: {
 		requestId: string;
 		tool: string;
@@ -78,7 +78,7 @@ export interface ClioPermissionEscalatedEvent {
  * is the delivery ack for operator surfaces.
  */
 export interface ClioSteerReceivedEvent {
-	type: "clio_steer_received";
+	type: "clio_coder_steer_received";
 	payload: {
 		chars: number;
 		/** Exact parent-side steering provenance entry this acceptance closes. */
@@ -88,7 +88,7 @@ export interface ClioSteerReceivedEvent {
 
 /** Machine-readable terminal classification, emitted where the condition is known. */
 export interface ClioRunOutcomeEvent {
-	type: "clio_run_outcome";
+	type: "clio_coder_run_outcome";
 	payload: { outcomeCode: RunOutcomeCode };
 }
 

package/src/engine/worker-runtime.ts

@@ -9,11 +9,11 @@
  * own worker runners before pi-agent model synthesis.
  */
 
-import { existsSync, readFileSync } from "node:fs";
 import path from "node:path";
 import { validateSettingsFile } from "../core/config.js";
 import {
 	configureGuardrails,
+	guardrailValuesFromSettings,
 	isWorkerToolCallCapExceededReason,
 	isWorkerToolCallCapSynthesisReason,
 } from "../core/guardrails.js";
@@ -29,6 +29,7 @@ import {
 	resultContractRepairMessages,
 	validateResultContract,
 } from "../domains/agents/result-contract.js";
+import { nodeResultContractFilesystem } from "../domains/agents/result-contract-filesystem.js";
 import type { AgentProduct } from "../domains/agents/spec.js";
 import type { MiddlewareSnapshot } from "../domains/middleware/index.js";
 import { createMiddlewareToolChoiceControl } from "../domains/middleware/index.js";
@@ -258,18 +259,7 @@ function terminalContractViolation(
 		// Repair rounds judge shape and grounding only. Network posture belongs to
 		// the orchestrator's sealed validation, which runs again on the receipt.
 		networkAllowed: true,
-		filesystem: {
-			readFile(filePath) {
-				try {
-					return readFileSync(filePath, "utf8");
-				} catch {
-					return null;
-				}
-			},
-			pathExists(filePath) {
-				return existsSync(filePath);
-			},
-		},
+		filesystem: nodeResultContractFilesystem(),
 	});
 	return validation.conformance === "pass" ? null : (validation.reason ?? "invalid result");
 }
@@ -387,11 +377,11 @@ export function startWorkerRun(input: WorkerRunInput, emit: WorkerEventEmit): Wo
 	// non-throwing read: a worker must not abort over a settings issue the parent
 	// already surfaced.
 	const workerSettings = validateSettingsFile().settings;
-	setGlobalDefaultMaxOutputTokens(workerSettings.defaults.maxTokens);
+	setGlobalDefaultMaxOutputTokens(workerSettings.chat.maxOutputTokens);
 	// Same mirroring for guardrail policy: the worker's loop-guard cap and tool
 	// byte caps resolve settings-first, so the fresh process needs the section
 	// installed before any registry or tool construction reads it.
-	configureGuardrails(workerSettings.guardrails);
+	configureGuardrails(guardrailValuesFromSettings(workerSettings));
 	const fauxModel = registerFauxFromEnv();
 	// Workers are bounded runs against an admission-verified recipe surface.
 	// They have no operator to widen a missing tool, so the active surface is
@@ -559,17 +549,17 @@ export function startWorkerRun(input: WorkerRunInput, emit: WorkerEventEmit): Wo
 		);
 	const telemetry: ToolTelemetry = {
 		onStart(event) {
-			emit({ type: "clio_tool_start", payload: event });
+			emit({ type: "clio_coder_tool_start", payload: event });
 		},
 		onFinish(event) {
-			emit({ type: "clio_tool_finish", payload: event });
+			emit({ type: "clio_coder_tool_finish", payload: event });
 			if (event.outcome !== "blocked" || typeof event.reason !== "string") return;
 			// Lifetime-cap lockout: record the bound (the run must not seal as an
 			// ordinary success) but do not abort. The loop guard has flipped the
 			// synthesis tool lock, so the next model round runs text-only and the
 			// synthesized answer still reaches message_end and the receipt.
 			if (isWorkerToolCallCapSynthesisReason(event.reason)) {
-				emit({ type: "clio_run_outcome", payload: { outcomeCode: "worker_tool_call_cap_exhausted" } });
+				emit({ type: "clio_coder_run_outcome", payload: { outcomeCode: "worker_tool_call_cap_exhausted" } });
 				if (workerBoundFailure === null) {
 					workerBoundFailure = event.reason;
 					process.stderr.write(`[worker] ${event.reason}\n`);
@@ -582,7 +572,7 @@ export function startWorkerRun(input: WorkerRunInput, emit: WorkerEventEmit): Wo
 			// receipt diagnostic.
 			if (isWorkerToolCallCapExceededReason(event.reason) || isLoopGuardSynthesisBackstopReason(event.reason)) {
 				emit({
-					type: "clio_run_outcome",
+					type: "clio_coder_run_outcome",
 					payload: {
 						outcomeCode: isLoopGuardSynthesisBackstopReason(event.reason)
 							? "loop_guard_tools_disabled_exhausted"
@@ -728,7 +718,7 @@ export function startWorkerRun(input: WorkerRunInput, emit: WorkerEventEmit): Wo
 					for (const message of repair) agent.followUp(message as unknown as AgentMessage);
 				} else if (workerBoundFailure === null) {
 					workerBoundFailure = `result contract failed after ${RESULT_CONTRACT_REPAIR_LIMIT} bounded repair rounds: ${violation}`;
-					emit({ type: "clio_run_outcome", payload: { outcomeCode: "result_contract_exhausted" } });
+					emit({ type: "clio_coder_run_outcome", payload: { outcomeCode: "result_contract_exhausted" } });
 					process.stderr.write(`[worker] ${workerBoundFailure}\n`);
 				}
 			}
@@ -813,7 +803,7 @@ export function startWorkerRun(input: WorkerRunInput, emit: WorkerEventEmit): Wo
 		answeredEscalations.set(active.callKey, { decision, requestId });
 		if (decision === "approve") {
 			emit({
-				type: "clio_permission_resolved",
+				type: "clio_coder_permission_resolved",
 				payload: {
 					tool: active.tool,
 					actionClass: active.actionClass,
@@ -842,7 +832,7 @@ export function startWorkerRun(input: WorkerRunInput, emit: WorkerEventEmit): Wo
 			? `permission required for ${active.tool} (${active.actionClass}); ${denialContext} and workers fallback=fail ends this run`
 			: `permission denied by ${source === "timeout" ? "escalation timeout fallback" : "operator"}: ${active.tool} requires ${active.actionClass} confirmation`;
 		emit({
-			type: "clio_permission_resolved",
+			type: "clio_coder_permission_resolved",
 			payload: {
 				tool: active.tool,
 				actionClass: active.actionClass,
@@ -868,7 +858,7 @@ export function startWorkerRun(input: WorkerRunInput, emit: WorkerEventEmit): Wo
 		const active = activeEscalation;
 		if (!active) return;
 		emit({
-			type: "clio_permission_resolved",
+			type: "clio_coder_permission_resolved",
 			payload: {
 				tool: active.tool,
 				actionClass: active.actionClass,
@@ -893,7 +883,7 @@ export function startWorkerRun(input: WorkerRunInput, emit: WorkerEventEmit): Wo
 					? `operator approved an identical ${call.tool} call earlier in this run (request ${remembered.requestId}); the answer stands without a new prompt`
 					: `permission denied by operator: an identical ${call.tool} call was already denied earlier in this run (request ${remembered.requestId}); the answer stands, so do not repeat this call`;
 				emit({
-					type: "clio_permission_resolved",
+					type: "clio_coder_permission_resolved",
 					payload: {
 						tool: call.tool,
 						actionClass,
@@ -927,7 +917,7 @@ export function startWorkerRun(input: WorkerRunInput, emit: WorkerEventEmit): Wo
 			// as type-and-size summaries, and the args stay inside the worker.
 			const target = describeCallTarget(call.tool, call.args);
 			emit({
-				type: "clio_permission_escalated",
+				type: "clio_coder_permission_escalated",
 				payload: {
 					requestId,
 					tool: call.tool,
@@ -948,7 +938,7 @@ export function startWorkerRun(input: WorkerRunInput, emit: WorkerEventEmit): Wo
 		}
 		const reason = onPermission === "fail" ? failReason(call.tool, actionClass) : denyReason(call.tool, actionClass);
 		emit({
-			type: "clio_permission_resolved",
+			type: "clio_coder_permission_resolved",
 			payload: {
 				tool: call.tool,
 				actionClass,

package/src/entry/boot-options.ts

@@ -26,6 +26,8 @@ export interface BootOptions {
 	terminalLease?: TerminalLease;
 	/** Strict effective settings snapshot shared by preflight, Stage 0, and hydration. */
 	startupSettings?: Readonly<ClioSettings>;
+	/** `--with-panes` / `--no-panes`. The flag beats `panes.enabled` in both directions. */
+	panes?: "with" | "without";
 	headless?: {
 		prompt: string;
 		images?: ReadonlyArray<ImageContent>;