@iowarp/clio-coder 0.4.1 → 0.4.2

package/src/cli/config-inspect.ts

@@ -16,7 +16,7 @@ import { basename, join } from "node:path";
 import type { ClioSettings } from "../core/config.js";
 import { resolvePackageRoot } from "../core/package-root.js";
 import { readLayeredSettings, type SettingsOrigin, settingsSourceFor } from "../core/settings-layers.js";
-import { clioDataDir } from "../core/xdg.js";
+import { clioDataDir, clioStateDir } from "../core/xdg.js";
 import {
 	loadOperatorProfile,
 	loadProjectClioMd,
@@ -24,12 +24,18 @@ import {
 	renderOperatorProfile,
 	renderPromptContext,
 } from "../domains/context/index.js";
-import { listInstalledExtensions } from "../domains/extensions/index.js";
+import { extensionSnapshotFor, listInstalledExtensions } from "../domains/extensions/index.js";
 import { loadMemoryRecordsSync, memoryStorePath } from "../domains/memory/index.js";
-import { loadUserHooks, readHookSources } from "../domains/middleware/index.js";
+import {
+	HOOK_RECEIPT_LOG_CAPACITY,
+	loadUserHooks,
+	readHookSources,
+	readPersistedHookReceipts,
+} from "../domains/middleware/index.js";
 import { classifyProjectPreload } from "../domains/prompts/preload.js";
 import { defaultScopedResourceRoots } from "../domains/resources/common-loader.js";
 import { ceilChars } from "../domains/session/context-accounting.js";
+import { capturedHookSourcesFor } from "../entry/extension-hook-sources.js";
 
 export type CustomizationCategory =
 	| "settings"
@@ -45,7 +51,8 @@ export type CustomizationCategory =
 	| "safety"
 	| "memory";
 
-export type ReloadClass = "hot" | "next-turn" | "restart" | "n/a";
+/** `reload` means an explicit `/resources extensions reload` (or a restart) publishes the change. */
+export type ReloadClass = "hot" | "next-turn" | "reload" | "restart" | "n/a";
 
 export interface CustomizationEntry {
 	category: CustomizationCategory;
@@ -203,10 +210,13 @@ function inspectOperatorProfile(cwd: string, graph: CustomizationGraph): void {
 
 function inspectHooks(cwd: string, graph: CustomizationGraph): void {
 	try {
-		const extensions = listInstalledExtensions(cwd)
-			.filter((ext) => ext.enabled && ext.effective)
-			.map((ext) => ({ id: ext.id, rootPath: ext.rootPath }));
-		const { batches, fileIssues } = readHookSources({ cwd, extensions });
+		// Extension declarations come from the same captured bytes a booted
+		// session admits; an inspecting process without a bound store builds an
+		// ephemeral generation-0 projection.
+		const { batches, fileIssues } = readHookSources({
+			cwd,
+			capturedSources: capturedHookSourcesFor(extensionSnapshotFor(cwd)),
+		});
 		for (const issue of fileIssues) graph.issues.push(`hook ${issue.source.origin}: ${issue.message}`);
 		const loaded = loadUserHooks(batches, { workspaceRoot: cwd });
 		for (const issue of loaded.issues) {
@@ -221,7 +231,7 @@ function inspectHooks(cwd: string, graph: CustomizationGraph): void {
 				hash: hook.hash,
 				trust: hook.source.origin === "extension" ? "untrusted" : "trusted",
 				precedence: "winner",
-				reloadClass: "restart",
+				reloadClass: "reload",
 				detail: { on: hook.on, kind: hook.spec.kind, enabled: hook.enabled, ...(hook.tools ? { tools: hook.tools } : {}) },
 			});
 		}
@@ -234,7 +244,7 @@ function inspectHooks(cwd: string, graph: CustomizationGraph): void {
 				hash: loser.hash,
 				trust: loser.source.origin === "extension" ? "untrusted" : "trusted",
 				precedence: "loser",
-				reloadClass: "restart",
+				reloadClass: "reload",
 				detail: { on: loser.on, kind: loser.spec.kind },
 			});
 		}
@@ -243,6 +253,42 @@ function inspectHooks(cwd: string, graph: CustomizationGraph): void {
 	}
 }
 
+/**
+ * Rolls up the durable hook-execution receipt log (`<stateDir>/hook-receipts.json`,
+ * written by `createHookReceiptLog` in `src/domains/middleware/hook-receipts.ts`)
+ * into one entry, since this process never held the live in-memory ring a
+ * running session's own invocation writes through. One entry rather than one
+ * per receipt: this graph explains configuration provenance, and a couple
+ * hundred execution rows would swamp that rather than answer it.
+ */
+function inspectHookReceipts(graph: CustomizationGraph): void {
+	const path = join(clioStateDir(), "hook-receipts.json");
+	try {
+		const receipts = existsSync(path) ? readPersistedHookReceipts(path) : [];
+		const outcomes: Record<string, number> = {};
+		for (const receipt of receipts) outcomes[receipt.outcome] = (outcomes[receipt.outcome] ?? 0) + 1;
+		const last = receipts.at(-1);
+		graph.entries.push({
+			category: "hook",
+			id: "hook-receipts",
+			scope: "user",
+			sourcePath: path,
+			reloadClass: "n/a",
+			trust: "n/a",
+			precedence: "single",
+			detail: {
+				present: existsSync(path),
+				count: receipts.length,
+				capacity: HOOK_RECEIPT_LOG_CAPACITY,
+				outcomes,
+				...(last === undefined ? {} : { mostRecent: { at: last.at, hookId: last.hookId, outcome: last.outcome } }),
+			},
+		});
+	} catch (err) {
+		graph.issues.push(`hook-receipts: ${err instanceof Error ? err.message : String(err)}`);
+	}
+}
+
 function inspectExtensions(cwd: string, graph: CustomizationGraph): void {
 	try {
 		for (const ext of listInstalledExtensions(cwd, { all: true })) {
@@ -254,8 +300,14 @@ function inspectExtensions(cwd: string, graph: CustomizationGraph): void {
 				hash: shortHash(`${ext.id}@${ext.version}`),
 				trust: "untrusted",
 				precedence: ext.effective ? "winner" : "loser",
-				reloadClass: "restart",
-				detail: { version: ext.version, enabled: ext.enabled, effective: ext.effective },
+				reloadClass: "reload",
+				detail: {
+					version: ext.version,
+					enabled: ext.enabled,
+					valid: ext.valid,
+					effective: ext.effective,
+					loadable: ext.loadable,
+				},
 			});
 		}
 	} catch (err) {
@@ -356,6 +408,7 @@ export function buildCustomizationGraph(cwd: string): CustomizationGraph {
 	inspectRules(cwd, graph);
 	inspectOperatorProfile(cwd, graph);
 	inspectHooks(cwd, graph);
+	inspectHookReceipts(graph);
 	inspectExtensions(cwd, graph);
 	inspectResourceRoots(cwd, graph);
 	inspectSafetyAndMemory(cwd, graph);

package/src/cli/configure.ts

@@ -200,15 +200,12 @@ function parseSetupArgs(argv: ReadonlyArray<string>): ParsedArgs {
 				out.backgroundModel = need();
 				break;
 			case "--fleet-model":
-			case "--worker-model":
 				out.workerModel = need();
 				break;
 			case "--agent-profile":
-			case "--worker-profile":
 				out.workerProfile = need();
 				break;
 			case "--agent-profile-model":
-			case "--worker-profile-model":
 				out.workerProfileModel = need();
 				break;
 			case "--api-key-env":
@@ -238,7 +235,6 @@ function parseSetupArgs(argv: ReadonlyArray<string>): ParsedArgs {
 				out.setBackground = true;
 				break;
 			case "--set-fleet-default":
-			case "--set-worker-default":
 				out.setWorkerDefault = true;
 				break;
 			case "--context-window": {

package/src/cli/docs.ts

@@ -1,13 +1,13 @@
 import { spawn } from "node:child_process";
-import { createReadStream, readdirSync, statSync } from "node:fs";
+import { createReadStream, readdirSync, realpathSync, statSync } from "node:fs";
 import { createServer, type IncomingMessage, type Server, type ServerResponse } from "node:http";
 import type { AddressInfo } from "node:net";
 import { relative, resolve } from "node:path";
 import chalk from "chalk";
 import { resolvePackageRoot } from "../core/package-root.js";
-import { printError, printHeader } from "./shared.js";
+import { printError, printHeader } from "./argv.js";
 
-// Human-facing viewer over the bundled HTML blueprints. It binds an ephemeral
+// Human-facing viewer over the source-checkout HTML blueprints. It binds an ephemeral
 // static file server to 127.0.0.1 only, serves docs/html/index.html as the
 // menu plus the blueprint pages, prints the URL, and runs until SIGINT. It
 // uses only Node's built-in http and fs: zero new dependencies, no daemon, no
@@ -21,7 +21,8 @@ const HELP = `clio-coder docs [topic] [--no-open]
 
 Serve Clio Coder's interactive HTML documentation locally and open it in a
 browser. The blueprints live in docs/html of a source checkout; the npm package
-ships the Markdown guides in docs/ only. The server binds an ephemeral port on
+ships the categorized Markdown reference tree under docs/ and excludes HTML.
+The server binds an ephemeral port on
 127.0.0.1, keeps no state, runs no daemon, and reaches no external network.
 Press Ctrl+C to stop it.
 
@@ -64,7 +65,7 @@ export interface DocsMenuEntry {
 	label: string;
 }
 
-/** Resolve docs/html from the package root; present in a source checkout, absent from the npm package. */
+/** Resolve the source-checkout HTML root. The npm package deliberately excludes it. */
 function resolveDocsHtmlDir(): string {
 	return resolve(resolvePackageRoot(), "docs", "html");
 }
@@ -159,8 +160,8 @@ function listHtmlFiles(htmlDir: string): string[] {
 }
 
 /** Build the static request handler for one html root. */
-function createDocsRequestHandler(htmlDir: string): (req: IncomingMessage, res: ServerResponse) => void {
-	const root = resolve(htmlDir);
+export function createDocsRequestHandler(htmlDir: string): (req: IncomingMessage, res: ServerResponse) => void {
+	const root = realpathSync(resolve(htmlDir));
 	return (req, res) => {
 		if (req.method !== "GET" && req.method !== "HEAD") {
 			res.writeHead(405, { "content-type": "text/plain; charset=utf-8", allow: "GET, HEAD" });
@@ -174,20 +175,27 @@ function createDocsRequestHandler(htmlDir: string): (req: IncomingMessage, res:
 			res.end(resolved.reason);
 			return;
 		}
-		const target = resolve(root, resolved.relative);
-		if (!isWithin(target, root)) {
+		const requestedTarget = resolve(root, resolved.relative);
+		if (!isWithin(requestedTarget, root)) {
 			res.writeHead(403, { "content-type": "text/plain; charset=utf-8" });
 			res.end("forbidden");
 			return;
 		}
 		let size: number | null = null;
+		let target: string | null = null;
 		try {
+			target = realpathSync(requestedTarget);
+			if (!isWithin(target, root)) {
+				res.writeHead(403, { "content-type": "text/plain; charset=utf-8" });
+				res.end("forbidden");
+				return;
+			}
 			const stat = statSync(target);
 			if (stat.isFile()) size = stat.size;
 		} catch {
 			size = null;
 		}
-		if (size === null) {
+		if (size === null || target === null) {
 			res.writeHead(404, { "content-type": "text/plain; charset=utf-8" });
 			res.end("not found");
 			return;
@@ -263,7 +271,7 @@ function openBrowser(url: string): void {
 	}
 }
 
-function waitForShutdown(): Promise<void> {
+export function waitForShutdown(): Promise<void> {
 	return new Promise((resolveShutdown) => {
 		const onSignal = (): void => {
 			process.removeListener("SIGINT", onSignal);
@@ -304,14 +312,14 @@ export async function runDocsCommand(args: ReadonlyArray<string> = []): Promise<
 	try {
 		htmlDir = resolveDocsHtmlDir();
 	} catch (err) {
-		printError(`could not resolve bundled docs: ${err instanceof Error ? err.message : String(err)}`);
+		printError(`could not resolve the docs HTML root: ${err instanceof Error ? err.message : String(err)}`);
 		return 1;
 	}
 	const files = listHtmlFiles(htmlDir);
 	if (files.length === 0) {
 		printError(`no HTML docs at ${htmlDir}`);
 		process.stdout.write(
-			`  the npm package ships the Markdown guides only: ${resolve(resolvePackageRoot(), "docs")}\n` +
+			`  the npm package ships only the categorized Markdown reference tree: ${resolve(resolvePackageRoot(), "docs")}\n` +
 				"  the interactive blueprints are in a source checkout and at https://github.com/iowarp/clio-coder/tree/main/docs/html\n",
 		);
 		return 1;
@@ -333,7 +341,7 @@ export async function runDocsCommand(args: ReadonlyArray<string> = []): Promise<
 	const handle = await startDocsServer({ htmlDir });
 	const landingUrl = landing === "index.html" ? handle.url : `${handle.url}${landing}`;
 	printHeader("Clio docs viewer");
-	process.stdout.write(`  serving ${htmlDir}\n`);
+	process.stdout.write(`  serving HTML root ${htmlDir}\n`);
 	process.stdout.write(`  open ${chalk.cyan(landingUrl)}\n`);
 	process.stdout.write("  bound to 127.0.0.1 only: no external network, no daemon, no state.\n");
 	process.stdout.write("  press Ctrl+C to stop.\n");

package/src/cli/doctor-naming.ts

@@ -88,7 +88,7 @@ function namingResourceFindings(options: NamingDoctorOptions): DoctorFinding[] {
 					`${renamed} proven skills renamed`,
 					`${renamable} proven skills await doctor --fix`,
 					`${conflicts} modified/conflicting skills left untouched`,
-					`${skillMetadata.length} legacy skill metadata keys`,
+					`${skillMetadata.length} legacy skill metadata keys${skillMetadata.length > 0 ? ` (rename \`clio:\` to \`clio-coder:\` in ${skillMetadata.map((entry) => entry.path).join(", ")})` : ""}`,
 					`${overlays.length} legacy model overlay files/metadata (manual migration required)`,
 				].join("; "),
 			},
@@ -145,7 +145,7 @@ function yaziNamingFinding(fix: boolean, enabled: boolean): DoctorFinding {
 	if (!enabled) {
 		return {
 			ok: true,
-			name: "naming yazi profile",
+			name: "naming files profile",
 			detail: "disabled by settings",
 		};
 	}
@@ -154,7 +154,7 @@ function yaziNamingFinding(fix: boolean, enabled: boolean): DoctorFinding {
 	if (legacy === 0) {
 		return {
 			ok: true,
-			name: "naming yazi profile",
+			name: "naming files profile",
 			detail: inspection.present
 				? `${inspection.profileDir} uses canonical event and environment identifiers`
 				: `${inspection.profileDir} is absent; the next managed open will generate canonical identifiers`,
@@ -164,7 +164,7 @@ function yaziNamingFinding(fix: boolean, enabled: boolean): DoctorFinding {
 		return {
 			ok: true,
 			level: "warn",
-			name: "naming yazi profile",
+			name: "naming files profile",
 			detail: `${inspection.profileDir}: ${inspection.legacyEvents} legacy events and ${inspection.legacyEnvironmentNames} legacy environment names (run \`clio-coder doctor --fix\`)`,
 		};
 	}
@@ -172,7 +172,7 @@ function yaziNamingFinding(fix: boolean, enabled: boolean): DoctorFinding {
 	return {
 		ok: report.status !== "regeneration-failed",
 		...(report.status === "regeneration-failed" ? {} : { level: "ok" as const }),
-		name: "naming yazi profile",
+		name: "naming files profile",
 		detail: report.detail,
 	};
 }

package/src/cli/doctor-toolchain.ts

@@ -16,7 +16,7 @@ function yaziProfileFinding(enabled: boolean): DoctorFinding {
 	if (!enabled) {
 		return {
 			ok: true,
-			name: "yazi managed profile",
+			name: "files pane profile",
 			detail: "disabled by settings",
 		};
 	}
@@ -24,14 +24,14 @@ function yaziProfileFinding(enabled: boolean): DoctorFinding {
 		const profile = inspectCurrentYaziProfile();
 		return {
 			ok: true,
-			name: "yazi managed profile",
+			name: "files pane profile",
 			detail: describeYaziProfile(profile),
 			level: profile.state === "current" ? "ok" : "warn",
 		};
 	} catch (error) {
 		return {
 			ok: true,
-			name: "yazi managed profile",
+			name: "files pane profile",
 			level: "warn",
 			detail: `${yaziProfileDir()} could not be inspected (${error instanceof Error ? error.message : String(error)}); user config ${userYaziConfigDir()} is separate and untouched`,
 		};

package/src/cli/eval.ts

@@ -115,8 +115,7 @@ function parseEvalArgs(args: ReadonlyArray<string>): ParsedEvalArgs {
 				index += 1;
 				continue;
 			}
-			// `--clio-entry` is the pre-0.3.1 spelling and still parses.
-			if (arg === "--clio-coder-entry" || arg === "--clio-entry") {
+			if (arg === "--clio-coder-entry") {
 				parsed.clioEntry = requiredValue(args, index, arg);
 				index += 1;
 				continue;

package/src/cli/extensions.ts

@@ -91,10 +91,11 @@ function resourceSummary(extension: InstalledExtension): string {
 }
 
 function stateLabel(extension: InstalledExtension): string {
+	if (!extension.valid) return "invalid";
 	if (!extension.compatible) return "incompatible";
 	if (!extension.enabled) return "disabled";
 	if (!extension.effective) return `shadowed:${extension.overriddenBy ?? "higher"}`;
-	return "active";
+	return extension.loadable ? "active" : "inactive";
 }
 
 function printList(items: ReadonlyArray<InstalledExtension>): void {

package/src/cli/fleet.ts

@@ -373,7 +373,7 @@ async function runFleet(args: ReadonlyArray<string>): Promise<number> {
 		return fail("required domains unavailable (dispatch/agents/safety)");
 	}
 	const fleetSettings = config?.get() ?? readSettings();
-	// Install `panes.journal` the same way the interactive composition root
+	// Install `fleet.history.journal` the same way the interactive composition root
 	// does, so a fleet run honours the setting without the journal ever reading
 	// settings.yaml from the dispatch event path.
 	configureRunEventJournal(fleetSettings.fleet.history.journal);

package/src/cli/index.ts

@@ -48,6 +48,7 @@ Usage:
   clio-coder auth list|status|login|logout [target-or-runtime]
   clio-coder doctor [--fix]       diagnose state; --fix creates or repairs it
   clio-coder paths [--json]       print resolved config/data/cache directories
+  clio-coder config inspect [--json]  inspect effective customization and provenance
   clio-coder reset                recover or wipe Clio Coder state
   clio-coder context              show project context status (CLIO-CODER.md, preload, codewiki)
   clio-coder context init [--yes] [--preview|--heuristic]  explore the repo and bootstrap CLIO-CODER.md and codewiki
@@ -72,7 +73,7 @@ Usage:
   clio-coder verifiers            discover, inspect, author, validate, edit, or dry-run project checks
   clio-coder tools list|status|install|remove <id>  pinned external programs Clio can drive
   clio-coder interop inspect --json  detected external coding agents and how far each one is wired
-  clio-coder panes install        install the pane multiplexer (alias for 'tools install herdr')
+  clio-coder panes install|theme  install the pane multiplexer (alias for 'tools install herdr'), or print Clio's theme as a herdr block
   clio-coder docs [topic]         serve the HTML docs of a source checkout on 127.0.0.1 (--no-open to skip browser)
   clio-coder dev <command>        harness instruments; run 'clio-coder dev' for the list
   clio-coder --help, -h           this message

package/src/cli/internal-dispatch.ts

@@ -9,7 +9,7 @@
  * operator cancel.
  */
 
-import { GUARDRAIL_ENV_VARS, resolveGuardrail } from "../core/guardrails.js";
+import { resolveGuardrail } from "../core/guardrails.js";
 import type { DispatchContract } from "../domains/dispatch/contract.js";
 
 export interface InternalDispatchDeadline {
@@ -25,10 +25,9 @@ export function armInternalDispatchDeadline(
 	dispatch: DispatchContract,
 	runId: string,
 	label: string,
-	env: NodeJS.ProcessEnv = process.env,
 	maxTimeoutMs?: number,
 ): InternalDispatchDeadline {
-	const configuredTimeoutMs = resolveGuardrail("internalDispatchTimeoutMs", env);
+	const configuredTimeoutMs = resolveGuardrail("internalDispatchTimeoutMs");
 	const timeoutMs =
 		maxTimeoutMs === undefined ? configuredTimeoutMs : Math.min(configuredTimeoutMs, Math.max(1, maxTimeoutMs));
 	const productCapped = timeoutMs < configuredTimeoutMs;
@@ -50,6 +49,6 @@ export function armInternalDispatchDeadline(
 			productCapped
 				? `${label} exceeded its ${Math.round(timeoutMs / 1000)}s latency ceiling and was aborted.`
 				: `${label} timed out after ${Math.round(timeoutMs / 1000)}s and was aborted. ` +
-					`Raise guardrails.internalDispatchTimeoutMs (env ${GUARDRAIL_ENV_VARS.internalDispatchTimeoutMs}) for slower targets.`,
+					"Raise fleet.limits.internalRunTimeoutMs for slower targets.",
 	};
 }

package/src/cli/panes.ts

@@ -1,16 +1,22 @@
+import { renderHerdrThemeBlock } from "../domains/mux/yazi/theme.js";
 import { printError } from "./shared.js";
 import { runToolsCommand } from "./tools.js";
 
 const HELP = `clio-coder panes install [--force] [--json]
+clio-coder panes theme
 
-Install the pane multiplexer Clio drives. This is an alias for
-\`clio-coder tools install herdr\`; the toolchain command is where every pinned
-external program is managed, and \`clio-coder tools status herdr\` explains
-which copy Clio would run.
+install  Install the pane multiplexer Clio drives. This is an alias for
+         \`clio-coder tools install herdr\`; the toolchain command is where every
+         pinned external program is managed, and \`clio-coder tools status herdr\`
+         explains which copy Clio would run.
+theme    Print Clio's theme tokens as a herdr [theme.custom] block. herdr styles
+         its own chrome from its config.toml and offers no per-pane styling, so
+         Clio prints the block for you to paste rather than editing another
+         program's configuration. The files pane itself is themed by Clio at open.
 `;
 
 /**
- * The user-facing verb for the pane layer's one setup step.
+ * The user-facing verbs for the pane layer's setup.
  *
  * Panes are the feature; herdr is the program behind it. Naming the program in
  * a command an operator types is a leak, so the alias exists and routes to the
@@ -26,6 +32,14 @@ export async function runPanesCommand(argv: ReadonlyArray<string> = []): Promise
 		process.stdout.write(HELP);
 		return 2;
 	}
+	if (subcommand === "theme") {
+		if (rest.length > 0) {
+			printError(`panes theme takes no arguments, got: ${rest.join(" ")}`);
+			return 2;
+		}
+		process.stdout.write(renderHerdrThemeBlock());
+		return 0;
+	}
 	if (subcommand !== "install") {
 		printError(`unknown panes command: ${subcommand}`);
 		process.stderr.write(HELP);

package/src/cli/run.ts

@@ -261,7 +261,7 @@ export async function runClioRun(
 				// A mistyped slash command is a usage error, not a task. Refusing it
 				// here keeps it from booting a session and spending a model turn on a
 				// command that was never run, which is what the TUI has always done
-				// and what docs/extensions-and-sharing.md documents for both surfaces.
+				// and what docs/guide/extensions-and-sharing.md documents for both surfaces.
 				const slashRefusal = await unknownSlashCommandRefusal(assembled.prompt);
 				if (slashRefusal !== null) {
 					process.stderr.write(`clio-coder run: ${slashRefusal}\n`);
@@ -372,7 +372,7 @@ async function runDispatch(
 	]);
 	const config = loaded.getContract<ConfigContract>("config");
 	const baseSettings = config?.get() ?? readSettings();
-	// Install `panes.journal` the same way the interactive composition root
+	// Install `fleet.history.journal` the same way the interactive composition root
 	// does. The journal never reads settings.yaml itself: it sits on the
 	// dispatch event path, where a settings read would be both a cost and a
 	// throw site.

package/src/cli/share.ts

@@ -142,7 +142,11 @@ function printDiagnostics(diagnostics: ReadonlyArray<ShareDiagnostic>): void {
 
 function printRecovery(plan: ShareImportPlan): void {
 	if (!plan.recovery) return;
-	process.stderr.write("recovery: import stopped after a write failure\n");
+	process.stderr.write(
+		plan.recovery.failed
+			? "recovery: import stopped after a write failure\n"
+			: "recovery: import completed with preserved backups\n",
+	);
 	process.stderr.write("written files:\n");
 	if (plan.recovery.written.length === 0) process.stderr.write("  none\n");
 	else {

package/src/cli/skills-eval.ts

@@ -51,9 +51,9 @@ const DEFAULT_RUN_TIMEOUT_MS = 600_000;
  *
  * A headless `clio-coder run` has no operator to answer a permission ask, so below
  * full-auto every exec-class call in an arm dies with the harness's own denial
- * and the judge scores a skill that was never allowed to act. Operator decision
- * of 2026-08-13 (docs/findings/HARNESS-NOTES.md item 4): eval arms run
- * full-auto, because their workspaces are per-run copies created under a
+ * and the judge scores a skill that was never allowed to act. The 2026-08-13
+ * harness decision is that eval arms run full-auto because their workspaces
+ * are per-run copies created under a
  * private temp root and removed when the scenario ends. The judge arm is
  * excluded: it scores text and is instructed to call no tools, so granting it
  * unattended write and exec buys nothing.

package/src/cli/targets.ts

@@ -51,10 +51,6 @@ Usage:
   clio-coder targets convert <id> --runtime <runtimeId>
   clio-coder targets remove <id>
   clio-coder targets rename <old> <new>
-
-Aliases:
-  --worker-target and --worker-model are accepted for --fleet-target and
-  --fleet-model, carried over from before the worker/fleet rename.
 `;
 
 const USE_USAGE =
@@ -249,11 +245,11 @@ function parseUseArgs(args: ReadonlyArray<string>): UseArgs | null {
 			parsed.backgroundModel = need();
 			continue;
 		}
-		if (arg === "--fleet-model" || arg === "--worker-model") {
+		if (arg === "--fleet-model") {
 			parsed.workerModel = need();
 			continue;
 		}
-		if (arg === "--fleet-target" || arg === "--worker-target") {
+		if (arg === "--fleet-target") {
 			parsed.workerTarget = need();
 			continue;
 		}