@iowarp/clio-coder 0.4.1 → 0.4.3

package/dist/{chunk-HUAS7ITX.js → chunk-LDJG7DW3.js}

@@ -8,29 +8,29 @@ import {
   readRootEntries,
   splitYamlFrontmatter,
   stringField
-} from "./chunk-FEFIFZTL.js";
+} from "./chunk-CE5AX47J.js";
 import {
   enabledExtensionResourceRoots
-} from "./chunk-SUW5DORT.js";
+} from "./chunk-7DRAWPTZ.js";
 import {
   ToolNames
 } from "./chunk-K6BSR66V.js";
 import {
   INTEROP_AGENT_KINDS,
   interopSourceRank
-} from "./chunk-IHXBNWMM.js";
+} from "./chunk-KXDSS5WJ.js";
 import {
   warnLegacyNaming
 } from "./chunk-D7E7WCDF.js";
 import {
   resolvePackageRoot
 } from "./chunk-IWHMRKLL.js";
-import {
-  clioConfigDir
-} from "./chunk-BYP5D4HI.js";
 import {
   fsyncDirectory
 } from "./chunk-WEPFGWHJ.js";
+import {
+  clioConfigDir
+} from "./chunk-BYP5D4HI.js";
 import {
   init_esm_shims
 } from "./chunk-3R73A4XB.js";
@@ -123,6 +123,12 @@ function parseMarketplaceIndex(indexPath, diagnostics = []) {
       }
       const kind = record.kind === "agent" || record.kind === "prompt" || record.kind === "fleet" ? record.kind : "skill";
       const requires = Array.isArray(record.requires) ? record.requires.filter((entry) => typeof entry === "string") : void 0;
+      const overlay = optionalString(record.overlay);
+      if (overlay && (path.isAbsolute(overlay) || overlay.split("/").includes(".."))) {
+        diagnostics.push(`skill marketplace index entry has an overlay outside the package: ${skill.name}`);
+        return [];
+      }
+      const exclude = optionalTriggerList(record.exclude);
       return [
         {
           kind,
@@ -134,6 +140,8 @@ function parseMarketplaceIndex(indexPath, diagnostics = []) {
           ...category ? { category } : {},
           ...triggers ? { triggers } : {},
           ...requires ? { requires } : {},
+          ...overlay ? { overlay } : {},
+          ...exclude ? { exclude } : {},
           origin: "index"
         }
       ];
@@ -205,22 +213,22 @@ function discoverMarketplaceSkills(options = {}) {
   const diagnostics = [];
   const skills = [];
   const seen = /* @__PURE__ */ new Set();
+  const indexPath = options.indexPath === null ? null : options.indexPath ?? process.env.CLIO_CODER_SKILL_MARKETPLACE_INDEX ?? null;
+  const resolvedIndexPath = indexPath ?? defaultIndexPath();
+  const indexSkills = options.indexPath !== null && resolvedIndexPath && existsSync(resolvedIndexPath) ? parseMarketplaceIndex(resolvedIndexPath, diagnostics) : [];
+  const overlayNames = new Set(indexSkills.filter((skill) => skill.overlay).map((skill) => skill.name));
   const catalogDir = resolveCatalogDir(options);
   if (catalogDir) {
     for (const skill of catalogSkills(catalogDir, diagnostics)) {
-      if (seen.has(skill.name)) continue;
+      if (seen.has(skill.name) || overlayNames.has(skill.name)) continue;
       seen.add(skill.name);
       skills.push(skill);
     }
   }
-  const indexPath = options.indexPath === null ? null : options.indexPath ?? process.env.CLIO_CODER_SKILL_MARKETPLACE_INDEX ?? null;
-  const resolvedIndexPath = indexPath ?? defaultIndexPath();
-  if (options.indexPath !== null && resolvedIndexPath && existsSync(resolvedIndexPath)) {
-    for (const skill of parseMarketplaceIndex(resolvedIndexPath, diagnostics)) {
-      if (seen.has(skill.name)) continue;
-      seen.add(skill.name);
-      skills.push(skill);
-    }
+  for (const skill of indexSkills) {
+    if (seen.has(skill.name)) continue;
+    seen.add(skill.name);
+    skills.push(skill);
   }
   if (skills.length === 0 && diagnostics.length === 0) {
     diagnostics.push(MARKETPLACE_UNCONFIGURED);
@@ -230,6 +238,21 @@ function discoverMarketplaceSkills(options = {}) {
 function getMarketplaceSkills(options = {}) {
   return discoverMarketplaceSkills(options).skills;
 }
+function marketplaceInstallShaping(skill) {
+  const shaping = {};
+  if (skill.overlay) shaping.overlay = path.join(resolvePackageRoot(), skill.overlay);
+  if (skill.exclude && skill.exclude.length > 0) shaping.exclude = [...skill.exclude];
+  return shaping;
+}
+function resolveMarketplaceShaping(options = {}) {
+  return (installed) => {
+    const entry = getMarketplaceSkills(options).find(
+      (skill) => skill.name === installed.name && skill.sourceUrl === installed.sourceUrl
+    );
+    if (!entry || !entry.overlay && !entry.exclude) return void 0;
+    return marketplaceInstallShaping(entry);
+  };
+}
 function installSkill(input) {
   const requested = input.source.trim();
   const source = requested === "clio-dev" ? "clio-coder-dev" : requested === "clio-test" ? "clio-coder-test" : requested;
@@ -242,7 +265,7 @@ function installSkill(input) {
     if (!skill) {
       throw new Error(`"${source}" is neither an existing local path nor available in the local marketplace`);
     }
-    return installSkillFromSource({ ...input, source: skill.sourceUrl });
+    return installSkillFromSource({ ...input, ...marketplaceInstallShaping(skill), source: skill.sourceUrl });
   }
   return installSkillFromSource({ ...input, source });
 }
@@ -282,19 +305,8 @@ function defaultPrecedenceForScope(scope) {
       return SKILL_PRECEDENCE.cli;
   }
 }
-var warnedLegacyProjectTrustEnv = false;
 function projectCompatTrusted(explicit) {
-  if (explicit === true) return true;
-  if (process.env.CLIO_CODER_TRUST_PROJECT_RESOURCES === "1") return true;
-  if (process.env.CLIO_CODER_TRUST_PROJECT_SKILLS !== "1") return false;
-  if (!warnedLegacyProjectTrustEnv) {
-    warnedLegacyProjectTrustEnv = true;
-    process.emitWarning("CLIO_CODER_TRUST_PROJECT_SKILLS is deprecated; use CLIO_CODER_TRUST_PROJECT_RESOURCES instead", {
-      code: "CLIO_CODER_DEPRECATED_ENV",
-      type: "DeprecationWarning"
-    });
-  }
-  return true;
+  return explicit === true;
 }
 function defaultSkillRoots(input = {}) {
   const cwd = input.cwd ?? process.cwd();
@@ -441,7 +453,10 @@ function validateDescription(description) {
   }
   return [];
 }
-function extractMetadata(frontmatter) {
+function warnLegacySkillMetadata(filePath) {
+  warnLegacyNaming(`clio: skill metadata in ${filePath}`, "clio-coder: skill metadata");
+}
+function extractMetadata(frontmatter, filePath) {
   const metadata = {};
   for (const [key, value] of Object.entries(frontmatter)) {
     if (CORE_FRONTMATTER_KEYS.has(key)) continue;
@@ -450,7 +465,7 @@ function extractMetadata(frontmatter) {
       continue;
     }
     if (key === "clio") {
-      warnLegacyNaming("clio: skill metadata", "clio-coder: skill metadata");
+      warnLegacySkillMetadata(filePath);
       if (!("clio-coder" in frontmatter)) metadata.clioCoder = value;
       continue;
     }
@@ -458,10 +473,10 @@ function extractMetadata(frontmatter) {
   }
   return metadata;
 }
-function extractProvenance(frontmatter) {
+function extractProvenance(frontmatter, filePath) {
   const canonicalRaw = frontmatter["clio-coder"];
   const legacyRaw = frontmatter.clio;
-  if (legacyRaw !== void 0) warnLegacyNaming("clio: skill metadata", "clio-coder: skill metadata");
+  if (legacyRaw !== void 0) warnLegacySkillMetadata(filePath);
   const clioCoderRaw = canonicalRaw ?? legacyRaw;
   const clioCoder = clioCoderRaw !== null && typeof clioCoderRaw === "object" && !Array.isArray(clioCoderRaw) ? clioCoderRaw : void 0;
   const field = (...keys) => {
@@ -601,7 +616,7 @@ function loadSkillFile(filePath, root) {
     scope,
     ...root.origin ? { source: root.origin } : {}
   };
-  const provenance = extractProvenance(parsed.frontmatter);
+  const provenance = extractProvenance(parsed.frontmatter, filePath);
   const allowedTools = declaredToolSurface(parsed.frontmatter, "allowed-tools", filePath, diagnostics);
   const disallowedTools = declaredToolSurface(parsed.frontmatter, "disallowed-tools", filePath, diagnostics);
   const skill = {
@@ -621,7 +636,7 @@ function loadSkillFile(filePath, root) {
     pathSubject,
     trusted: root.trusted ?? true,
     precedence: root.precedence ?? defaultPrecedenceForScope(scope),
-    metadata: extractMetadata(parsed.frontmatter),
+    metadata: extractMetadata(parsed.frontmatter, filePath),
     diagnostics,
     ...provenance ? { provenance } : {}
   };
@@ -818,6 +833,7 @@ function skillCatalogValidity(list) {
   if (list.items.length === 0) return { ok: false, reason: "no-skills" };
   return { ok: true, reason: null };
 }
+var SKILL_SURFACE_CLEAR_ARG = "off";
 function parseSkillCommand(input) {
   const trimmed = input.trim();
   if (!trimmed.startsWith("/skill ")) return null;
@@ -1033,16 +1049,40 @@ function fetchSource(spec) {
     throw err instanceof Error ? err : new Error(String(err));
   }
 }
-function copySkillDir(from, to) {
+function copySkillDir(from, to, exclude = []) {
   mkdirSync(path3.dirname(to), { recursive: true });
+  const excluded = new Set(exclude);
   cpSync(from, to, {
     recursive: true,
     filter: (source) => {
       const base = path3.basename(source);
-      return base !== ".git" && base !== "node_modules";
+      if (base === ".git" || base === "node_modules") return false;
+      return !(excluded.size > 0 && path3.dirname(source) === from && excluded.has(base));
     }
   });
 }
+function shapeSource(fetched, shaping) {
+  const exclude = shaping.exclude ?? [];
+  if (!shaping.overlay && exclude.length === 0) return fetched;
+  if (shaping.overlay && !existsSync3(shaping.overlay)) {
+    fetched.cleanup();
+    throw new Error(`skill overlay directory does not exist: ${shaping.overlay}`);
+  }
+  const tmp = mkdtempSync(path3.join(tmpdir(), "clio-coder-skill-shape-"));
+  const shaped = path3.join(tmp, "skill");
+  const cleanup = () => {
+    rmSync(tmp, { recursive: true, force: true });
+    fetched.cleanup();
+  };
+  try {
+    copySkillDir(fetched.skillDir, shaped, exclude);
+    if (shaping.overlay) copySkillDir(shaping.overlay, shaped);
+    return { skillDir: resolveSkillDir(shaped), cleanup };
+  } catch (err) {
+    cleanup();
+    throw err instanceof Error ? err : new Error(String(err));
+  }
+}
 var skillSwapSequence = 0;
 function swapSkillDir(stage, dest) {
   const suffix = `${process.pid}-${++skillSwapSequence}`;
@@ -1087,7 +1127,7 @@ function installSkillFromSource(input) {
   if (!spec) throw new Error(`unsupported skill source: ${input.source}`);
   const cwd = input.cwd ?? process.cwd();
   const scope = input.scope ?? "project";
-  const fetched = fetchSource(spec);
+  const fetched = shapeSource(fetchSource(spec), input);
   try {
     const { skill, warnings } = validateSourceSkill(fetched.skillDir);
     const name = (input.name ?? skill.name).trim();
@@ -1134,12 +1174,17 @@ function managedSkills(cwd, configDir) {
     (skill) => skill.source === "clio-coder" && (skill.scope === "user" || skill.scope === "project")
   );
 }
-function updateOne(skill, force) {
+function updateOne(skill, force, shaping = {}) {
   const sourceUrl = skill.provenance?.installUrl;
   if (!sourceUrl) return { name: skill.name, status: "no-source", detail: "no source-url provenance recorded" };
   const spec = parseSkillSourceSpec(sourceUrl);
   if (!spec) return { name: skill.name, status: "error", detail: `unsupported source-url: ${sourceUrl}` };
-  const fetched = fetchSource(spec);
+  let fetched;
+  try {
+    fetched = shapeSource(fetchSource(spec), shaping);
+  } catch (err) {
+    return { name: skill.name, status: "error", detail: err instanceof Error ? err.message : String(err) };
+  }
   try {
     validateSourceSkill(fetched.skillDir);
     const remoteFile = path3.join(fetched.skillDir, "SKILL.md");
@@ -1180,13 +1225,14 @@ function updateOne(skill, force) {
 function updateSkills(input = {}) {
   const cwd = input.cwd ?? process.cwd();
   const skills = managedSkills(cwd, input.configDir);
+  const shapingFor = (skill) => skill.provenance?.installUrl && input.resolveShaping?.({ name: skill.name, sourceUrl: skill.provenance.installUrl }) || {};
   if (input.name) {
     const skill = skills.find((entry) => entry.name === input.name);
     if (!skill) return [{ name: input.name, status: "error", detail: "not found in Clio-managed skill roots" }];
-    return [updateOne(skill, input.force === true)];
+    return [updateOne(skill, input.force === true, shapingFor(skill))];
   }
   if (input.all !== true) throw new Error("updateSkills requires a name or all=true");
-  return skills.filter((skill) => skill.provenance?.installUrl).map((skill) => updateOne(skill, input.force === true));
+  return skills.filter((skill) => skill.provenance?.installUrl).map((skill) => updateOne(skill, input.force === true, shapingFor(skill)));
 }
 
 export {
@@ -1195,14 +1241,17 @@ export {
   MARKETPLACE_UNCONFIGURED,
   discoverMarketplaceSkills,
   getMarketplaceSkills,
+  marketplaceInstallShaping,
+  resolveMarketplaceShaping,
   installSkill,
   projectCompatTrusted,
   defaultSkillRoots,
   loadSkills,
   modelVisibleSkills,
   skillCatalogValidity,
+  SKILL_SURFACE_CLEAR_ARG,
   parseSkillCommand,
   expandSkillInvocationInput,
   parsePendingSkillRequests
 };
-//# sourceMappingURL=chunk-HUAS7ITX.js.map
+//# sourceMappingURL=chunk-LDJG7DW3.js.map

package/dist/{chunk-CDNVLKUX.js → chunk-LLDJM5XK.js}

@@ -2,14 +2,14 @@ import { createRequire as __clioCreateRequire } from "node:module"; const requir
 import {
   resolveAuthTarget,
   resolveRuntimeAuthTarget
-} from "./chunk-WNP7O5WZ.js";
+} from "./chunk-ID64D7PE.js";
 import {
   getRuntimeRegistry
 } from "./chunk-NUGM5KR6.js";
 import {
   catalogProviderForRuntime,
   listCatalogModelsForRuntime
-} from "./chunk-O42A54GG.js";
+} from "./chunk-5OIVVPHF.js";
 import {
   init_esm_shims
 } from "./chunk-3R73A4XB.js";
@@ -20,6 +20,7 @@ var SUMMARY_BY_RUNTIME_ID = {
   alcf: "ALCF inference gateway (Sophia/Metis) via Globus",
   anthropic: "Anthropic API",
   "anthropic-max": "Claude Pro/Max subscription via Anthropic OAuth",
+  "antigravity-code": "Experimental local delegation via the installed Antigravity CLI",
   bedrock: "Amazon Bedrock",
   "claude-code": "Claude Code subscription via installed claude CLI",
   "claude-sdk": "Claude Code subscription via Claude Agent SDK",
@@ -35,24 +36,28 @@ var SUMMARY_BY_RUNTIME_ID = {
   llamacpp: "llama.cpp server (auto-detect surface)",
   "anthropic-compat": "Generic Anthropic-compatible REST",
   "openai-compat": "Generic OpenAI-compatible REST",
-  litellm: "LiteLLM gateway with per-alias capability discovery and routed-model attribution"
+  litellm: "LiteLLM gateway with per-route capability discovery and physical-model attribution"
 };
 function groupPriority(group) {
   switch (group) {
     case "featured":
       return 0;
-    case "subscription":
+    case "external-worker":
       return 1;
-    case "cloud-api":
+    case "subscription":
       return 2;
-    case "local-http":
+    case "cloud-api":
       return 3;
+    case "local-http":
+      return 4;
   }
 }
 function supportGroupLabel(group) {
   switch (group) {
     case "featured":
       return "Featured";
+    case "external-worker":
+      return "External delegation";
     case "subscription":
       return "Subscriptions";
     case "cloud-api":
@@ -63,6 +68,7 @@ function supportGroupLabel(group) {
 }
 function classifyGroup(runtime) {
   if (runtime.id === "openai-codex") return "featured";
+  if (runtime.externalAgentLoop !== void 0) return "external-worker";
   if (runtime.id === "alcf") return "cloud-api";
   if (runtime.auth === "oauth" || runtime.auth === "claude-cli") return "subscription";
   if (catalogProviderForRuntime(runtime.id) || runtime.auth === "api-key" && !runtime.probe) {
@@ -170,4 +176,4 @@ export {
   configuredTargetsForRuntime,
   resolveProviderReference
 };
-//# sourceMappingURL=chunk-CDNVLKUX.js.map
+//# sourceMappingURL=chunk-LLDJM5XK.js.map

package/dist/{chunk-YPI3QQCF.js → chunk-MCEPRMZW.js}

@@ -22,9 +22,7 @@ var webFetchToolSurface = {
     timeout_ms: typebox_exports.Optional(typebox_exports.Number({ description: "Timeout ms (default 30000)." })),
     max_bytes: typebox_exports.Optional(typebox_exports.Number({ description: "Max bytes returned (default 600000)." })),
     format: typebox_exports.Optional(
-      typebox_exports.String({
-        description: "auto (default: HTML is cleaned to Markdown, other content passes through) or raw (no conversion)."
-      })
+      typebox_exports.String({ description: "auto (default) converts HTML to Markdown; raw returns the body unconverted." })
     )
   }),
   baseActionClass: "read",
@@ -34,4 +32,4 @@ var webFetchToolSurface = {
 export {
   webFetchToolSurface
 };
-//# sourceMappingURL=chunk-YPI3QQCF.js.map
+//# sourceMappingURL=chunk-MCEPRMZW.js.map

package/dist/{chunk-Y4CAGMM6.js → chunk-MNJGS2IN.js}

@@ -1,16 +1,15 @@
 import { createRequire as __clioCreateRequire } from "node:module"; const require = __clioCreateRequire(import.meta.url);
 import {
-  GUARDRAIL_ENV_VARS,
   resolveGuardrail
-} from "./chunk-NLFAQR7Z.js";
+} from "./chunk-S66XZJOF.js";
 import {
   init_esm_shims
 } from "./chunk-3R73A4XB.js";
 
 // src/cli/internal-dispatch.ts
 init_esm_shims();
-function armInternalDispatchDeadline(dispatch, runId, label, env = process.env, maxTimeoutMs) {
-  const configuredTimeoutMs = resolveGuardrail("internalDispatchTimeoutMs", env);
+function armInternalDispatchDeadline(dispatch, runId, label, maxTimeoutMs) {
+  const configuredTimeoutMs = resolveGuardrail("internalDispatchTimeoutMs");
   const timeoutMs = maxTimeoutMs === void 0 ? configuredTimeoutMs : Math.min(configuredTimeoutMs, Math.max(1, maxTimeoutMs));
   const productCapped = timeoutMs < configuredTimeoutMs;
   let fired = false;
@@ -24,11 +23,11 @@ function armInternalDispatchDeadline(dispatch, runId, label, env = process.env,
   return {
     timedOut: () => fired,
     clear: () => clearTimeout(timer),
-    message: () => productCapped ? `${label} exceeded its ${Math.round(timeoutMs / 1e3)}s latency ceiling and was aborted.` : `${label} timed out after ${Math.round(timeoutMs / 1e3)}s and was aborted. Raise guardrails.internalDispatchTimeoutMs (env ${GUARDRAIL_ENV_VARS.internalDispatchTimeoutMs}) for slower targets.`
+    message: () => productCapped ? `${label} exceeded its ${Math.round(timeoutMs / 1e3)}s latency ceiling and was aborted.` : `${label} timed out after ${Math.round(timeoutMs / 1e3)}s and was aborted. Raise fleet.limits.internalRunTimeoutMs for slower targets.`
   };
 }
 
 export {
   armInternalDispatchDeadline
 };
-//# sourceMappingURL=chunk-Y4CAGMM6.js.map
+//# sourceMappingURL=chunk-MNJGS2IN.js.map

package/dist/{chunk-VKFQTNDV.js → chunk-MUW2BDDH.js}

@@ -1,13 +1,13 @@
 import { createRequire as __clioCreateRequire } from "node:module"; const require = __clioCreateRequire(import.meta.url);
 import {
   runPending
-} from "./chunk-6HMJX2VU.js";
+} from "./chunk-GWZNEVM2.js";
 import {
   runDoctor
-} from "./chunk-OJTRZGR3.js";
+} from "./chunk-N2Z7HLVY.js";
 import {
   readStateInfo
-} from "./chunk-QTFGO774.js";
+} from "./chunk-IGLP3ODT.js";
 import {
   getVersionInfo
 } from "./chunk-XPLRXC72.js";
@@ -63,4 +63,4 @@ export {
   describeUpgradeNotice,
   LifecycleDomainModule
 };
-//# sourceMappingURL=chunk-VKFQTNDV.js.map
+//# sourceMappingURL=chunk-MUW2BDDH.js.map