@iowarp/clio-coder 0.4.2 → 0.4.4

package/dist/{chunk-ZGNYYXQ6.js → chunk-NXIMQY5W.js}

@@ -2,10 +2,10 @@ import { createRequire as __clioCreateRequire } from "node:module"; const requir
 import {
   parseJsonObjectPayload,
   parseVerifierResult
-} from "./chunk-PGF63K6I.js";
+} from "./chunk-KFV5L5SK.js";
 import {
   atomicWrite
-} from "./chunk-MQXIVJ35.js";
+} from "./chunk-HAXOFFRH.js";
 import {
   clioStateDir
 } from "./chunk-BYP5D4HI.js";
@@ -685,4 +685,4 @@ export {
   readGateDecisionArtifacts,
   readGateDecisionArtifactsForRunIds
 };
-//# sourceMappingURL=chunk-ZGNYYXQ6.js.map
+//# sourceMappingURL=chunk-NXIMQY5W.js.map

package/dist/{chunk-IKOZFYBN.js → chunk-NXYCB2VD.js}

@@ -1,37 +1,27 @@
 import { createRequire as __clioCreateRequire } from "node:module"; const require = __clioCreateRequire(import.meta.url);
-import {
-  isVerificationScriptName
-} from "./chunk-UL3WSD3F.js";
 import {
   canonicalizeExistingPath
 } from "./chunk-ECH6PKUQ.js";
+import {
+  artifactDefaultPath
+} from "./chunk-GYV6VZOC.js";
+import {
+  isVerificationScriptName
+} from "./chunk-UL3WSD3F.js";
 import {
   ToolNames
-} from "./chunk-K6BSR66V.js";
+} from "./chunk-4NSRCOYP.js";
 import {
   init_esm_shims
 } from "./chunk-3R73A4XB.js";
 
-// src/core/artifact-paths.ts
-init_esm_shims();
-var CLIO_PROJECT_DIR = ".clio-coder";
-var CLIO_ARTIFACT_DIR = `${CLIO_PROJECT_DIR}/artifacts`;
-var KIND_FILENAMES = {
-  plan: "PLAN.md",
-  review: "REVIEW.md",
-  report: "REPORT.md"
-};
-var DEFAULT_FILENAME = KIND_FILENAMES.plan;
-function artifactDefaultPath(kind) {
-  const filename = typeof kind === "string" ? KIND_FILENAMES[kind] ?? DEFAULT_FILENAME : DEFAULT_FILENAME;
-  return `${CLIO_ARTIFACT_DIR}/${filename}`;
-}
-
 // src/domains/safety/protected-artifacts.ts
 init_esm_shims();
 import path from "node:path";
-var COMMAND_SEPARATORS = /* @__PURE__ */ new Set([";", "&&", "||", "|"]);
+var COMMAND_SEPARATORS = /* @__PURE__ */ new Set([";", "&", "&&", "||", "|"]);
 var SHELL_WRAPPERS = /* @__PURE__ */ new Set(["command", "builtin", "sudo", "doas"]);
+var SHELL_REDIRECTIONS = /* @__PURE__ */ new Set([">", ">>", "<", "<<", "<<<", "<&", ">&", "<>", ">|", "&>", "&>>"]);
+var SHELL_WRITE_REDIRECTIONS = /* @__PURE__ */ new Set([">", ">>", ">&", "<>", ">|", "&>", "&>>"]);
 function toolMutationPaths(toolName, args) {
   if (toolName === ToolNames.Artifact) {
     return [mutationPathArg(args) ?? artifactDefaultPath(args?.kind)];
@@ -79,9 +69,9 @@ function isProtectedPath(state, artifactPath) {
 function classifyDestructiveCommand(command, protectedArtifacts) {
   const artifacts = normalizedArtifacts(protectedArtifacts);
   if (artifacts.length === 0) return { kind: "benign", matches: [] };
-  const tokens = tokenizeShellLike(command);
-  for (const segment of splitSegments(tokens)) {
-    const redirect = classifyRedirect(segment, artifacts);
+  for (const tokens of splitSegments(scanShellLike(command))) {
+    const segment = shellCommandArguments(tokens);
+    const redirect = classifyRedirect(tokens, artifacts);
     if (redirect.kind === "destructive") return redirect;
     const commandIndex = commandTokenIndex(segment);
     if (commandIndex === null) continue;
@@ -141,8 +131,8 @@ function classifyDestructiveCommand(command, protectedArtifacts) {
   return { kind: "benign", matches: [] };
 }
 function detectValidationCommand(command, scope = "finish-contract") {
-  const tokens = tokenizeShellLike(command);
-  for (const segment of splitSegments(tokens)) {
+  for (const tokens of splitSegments(scanShellLike(command))) {
+    const segment = shellCommandArguments(tokens);
     const commandIndex = commandTokenIndex(segment);
     if (commandIndex === null) continue;
     const executable = basenameToken(segment[commandIndex]);
@@ -154,10 +144,11 @@ function detectValidationCommand(command, scope = "finish-contract") {
 }
 function extractCommandWriteTargets(command) {
   const targets = [];
-  for (const segment of expandedSegments(command)) {
+  for (const segment of expandedShellSegments(command)) {
     collectRedirectTargets(segment, targets);
-    collectInvokedWriteTargets(segment, targets);
-    collectInPlaceEditTargets(segment, targets);
+    const argv = shellCommandArguments(segment);
+    collectInvokedWriteTargets(argv, targets);
+    collectInPlaceEditTargets(argv, targets);
   }
   return targets.filter(isInterestingWriteTarget);
 }
@@ -179,27 +170,28 @@ function segmentShellScript(segment) {
   }
   return null;
 }
-function expandedSegments(command, depth = 0) {
-  const segments = splitSegments(tokenizeShellLike(command));
+function expandedShellSegments(command, depth = 0) {
+  const segments = splitSegments(scanShellLike(command));
   if (depth >= INNER_SHELL_MAX_DEPTH) return segments;
   const out = [];
   for (const segment of segments) {
     out.push(segment);
-    const script = segmentShellScript(segment);
-    if (script !== null) out.push(...expandedSegments(script, depth + 1));
+    const script = segmentShellScript(shellCommandArguments(segment));
+    if (script !== null) out.push(...expandedShellSegments(script, depth + 1));
   }
   return out;
 }
 function inlineShellScript(command) {
-  const segments = splitSegments(tokenizeShellLike(command));
+  const segments = splitSegments(scanShellLike(command));
   if (segments.length !== 1) return null;
   const segment = segments[0];
   if (segment === void 0) return null;
-  return segmentShellScript(segment);
+  return segmentShellScript(shellCommandArguments(segment));
 }
 function extractCommandCdTargets(command) {
   const targets = [];
-  for (const segment of expandedSegments(command)) {
+  for (const tokens of expandedShellSegments(command)) {
+    const segment = shellCommandArguments(tokens);
     const commandIndex = commandTokenIndex(segment);
     if (commandIndex === null) continue;
     const executable = basenameToken(segment[commandIndex]);
@@ -211,7 +203,8 @@ function extractCommandCdTargets(command) {
 }
 function extractCommandDeleteTargets(command) {
   const targets = [];
-  for (const segment of expandedSegments(command)) {
+  for (const tokens of expandedShellSegments(command)) {
+    const segment = shellCommandArguments(tokens);
     const commandIndex = commandTokenIndex(segment);
     if (commandIndex === null) continue;
     const executable = basenameToken(segment[commandIndex]);
@@ -230,15 +223,85 @@ function extractCommandDeleteTargets(command) {
   }
   return targets.filter(isInterestingWriteTarget);
 }
+function invokesClioSkillMutation(command) {
+  for (const segment of expandedShellSegments(command)) {
+    const argv = shellCommandArguments(segment);
+    const index = commandTokenIndex(argv);
+    if (index === null) continue;
+    let args = argv.slice(index);
+    const executable = basenameToken(args[0]);
+    if (executable === "npx" || executable === "npm" && args[1] === "exec") {
+      args = args.slice(executable === "npm" ? 2 : 1);
+      while (args[0]?.startsWith("-")) args = args.slice(1);
+    }
+    const program = args[0] ?? "";
+    if (basenameToken(program) === "node" || basenameToken(program) === "tsx") {
+      if (!/(?:^|\/)(?:src|dist)\/cli\/index\.(?:js|ts)$/.test(args[1] ?? "")) continue;
+      args = args.slice(2);
+    } else if (/^(?:@iowarp\/)?clio-coder(?:@[^/]+)?$/.test(program) || basenameToken(program) === "clio-coder") {
+      args = args.slice(1);
+    } else continue;
+    if (args.includes("--version") || args.includes("-v")) continue;
+    let rootHelp = false;
+    let firstRootFlag;
+    while (args[0]?.startsWith("-")) {
+      const flag = args[0];
+      if (flag === "--all" || flag === "--help" || flag === "-h") firstRootFlag ??= flag;
+      rootHelp = firstRootFlag === "--help" || firstRootFlag === "-h";
+      args = args.slice(flag === "--skill" || flag === "--api-key" ? 2 : 1);
+    }
+    if (rootHelp) continue;
+    if (args[0] !== "skills" && args[0] !== "library") continue;
+    if (resourceCliMutatesSkills(args[0], args.slice(1))) return true;
+  }
+  return false;
+}
+function shellCommandArguments(segment) {
+  const args = [];
+  for (let index = 0; index < segment.length; index += 1) {
+    const token = segment[index];
+    if (token === void 0) continue;
+    if (token.operator && SHELL_REDIRECTIONS.has(token.value)) {
+      const previous = args.at(-1);
+      if (previous && previous.end === token.start && !previous.quoted && /^\d+$/.test(previous.value)) args.pop();
+      if (segment[index + 1]?.operator === false) index += 1;
+      continue;
+    }
+    args.push(token);
+  }
+  return args.map((token) => token.value);
+}
+function resourceCliMutatesSkills(resource, args) {
+  const valueOptions = resource === "skills" ? ["--name", "--category", "--scenario", "--target", "--workspace", "--timeout"] : ["--kind", "--from"];
+  let verb;
+  let confirmed = false;
+  for (let index = 0; index < args.length; index += 1) {
+    const arg = args[index];
+    if (arg === void 0) continue;
+    if (valueOptions.includes(arg)) {
+      index += 1;
+      continue;
+    }
+    if (arg === "--help" || arg === "-h") return false;
+    if (arg === "--yes") confirmed = true;
+    if (!arg.startsWith("-")) verb ??= arg;
+  }
+  if (resource === "skills") return verb === "install" || verb === "update" || verb === "sync";
+  return verb === "add" && confirmed;
+}
 var STANDARD_DEV_TARGETS = /* @__PURE__ */ new Set(["/dev/null", "/dev/stdout", "/dev/stderr", "/dev/tty", "/dev/zero"]);
 function collectRedirectTargets(segment, out) {
   for (let index = 0; index < segment.length - 1; index += 1) {
-    const token = segment[index];
-    if (token !== ">" && token !== ">>") continue;
-    const target = segment[index + 1];
-    if (target !== void 0) out.push(target);
+    const target = redirectWriteTarget(segment[index], segment[index + 1]);
+    if (target !== null) out.push(target);
   }
 }
+function redirectWriteTarget(operator, target) {
+  if (!operator?.operator || target === void 0 || target.operator || !SHELL_WRITE_REDIRECTIONS.has(operator.value))
+    return null;
+  if (operator.value === ">&" && /^(?:\d+-?|-)$/u.test(target.value)) return null;
+  return target.value;
+}
 function collectInvokedWriteTargets(segment, out) {
   const cmdIndex = commandTokenIndex(segment);
   if (cmdIndex === null) return;
@@ -274,7 +337,6 @@ function hasSedInPlaceFlag(segment, cmdIndex) {
   for (let index = cmdIndex + 1; index < segment.length; index += 1) {
     const token = segment[index];
     if (token === void 0) continue;
-    if (COMMAND_SEPARATORS.has(token)) break;
     if (token === "--") break;
     if (token === "--in-place" || token.startsWith("--in-place=")) return true;
     if (token.startsWith("--")) continue;
@@ -289,7 +351,6 @@ function sedFileOperands(segment, cmdIndex) {
   for (let index = cmdIndex + 1; index < segment.length; index += 1) {
     const token = segment[index];
     if (token === void 0) continue;
-    if (COMMAND_SEPARATORS.has(token)) break;
     if (!endOfOptions && token === "--") {
       endOfOptions = true;
       continue;
@@ -322,16 +383,15 @@ function sedFileOperands(segment, cmdIndex) {
 }
 function isInterestingWriteTarget(target) {
   if (target.length === 0) return false;
-  if (target.startsWith("&")) return false;
   if (STANDARD_DEV_TARGETS.has(target)) return false;
   if (target.startsWith("/dev/fd/")) return false;
   return true;
 }
 function classifyRedirect(segment, artifacts) {
   for (let index = 0; index < segment.length; index += 1) {
-    if (segment[index] !== ">") continue;
-    const target = segment[index + 1];
-    if (target === void 0) continue;
+    if (segment[index]?.value === ">>" || segment[index]?.value === "&>>") continue;
+    const target = redirectWriteTarget(segment[index], segment[index + 1]);
+    if (target === null) continue;
     const matches = matchesForPaths([target], artifacts, "target", "redirect can overwrite protected artifacts");
     if (matches.length > 0) {
       return {
@@ -528,28 +588,30 @@ function pathArgs(segment, commandIndex) {
   for (let index = commandIndex + 1; index < segment.length; index += 1) {
     const token = segment[index];
     if (token === void 0) continue;
-    if (COMMAND_SEPARATORS.has(token)) break;
     if (!endOfOptions && token === "--") {
       endOfOptions = true;
       continue;
     }
     if (!endOfOptions && token.startsWith("-")) continue;
-    if (token === ">" || token === ">>" || token === "<" || token === "<<") {
-      index += 1;
-      continue;
-    }
     args.push(token);
   }
   return args;
 }
-function tokenizeShellLike(command) {
+function commandArgumentSegments(command) {
+  return splitSegments(scanShellLike(command)).map(shellCommandArguments);
+}
+function scanShellLike(command) {
   const tokens = [];
   let current = "";
+  let wordStart = null;
+  let quoted = false;
   let quote = null;
-  const pushCurrent = () => {
-    if (current.length === 0) return;
-    tokens.push(current);
+  const pushCurrent = (end) => {
+    if (wordStart === null) return;
+    tokens.push({ value: current, operator: false, quoted, start: wordStart, end });
     current = "";
+    wordStart = null;
+    quoted = false;
   };
   for (let index = 0; index < command.length; index += 1) {
     const char = command[index];
@@ -560,78 +622,60 @@ function tokenizeShellLike(command) {
         continue;
       }
       if (quote === '"' && char === "\\" && index + 1 < command.length) {
-        index += 1;
-        current += command[index] ?? "";
-        continue;
+        const next = command[index + 1] ?? "";
+        if (next === "\n" || '$`"\\'.includes(next)) {
+          index += 1;
+          if (next !== "\n") current += next;
+          continue;
+        }
       }
       current += char;
       continue;
     }
     if (char === "'" || char === '"') {
+      wordStart ??= index;
+      quoted = true;
       quote = char;
       continue;
     }
     if (char === "\\" && index + 1 < command.length) {
-      index += 1;
-      current += command[index] ?? "";
-      continue;
-    }
-    if (/\s/.test(char)) {
-      pushCurrent();
-      if (char === "\n") tokens.push(";");
-      continue;
-    }
-    if (char === ";") {
-      pushCurrent();
-      tokens.push(";");
-      continue;
-    }
-    if (char === "&" && command[index + 1] === "&") {
-      pushCurrent();
-      tokens.push("&&");
+      if (command[index + 1] !== "\n") {
+        wordStart ??= index;
+        quoted = true;
+        current += command[index + 1] ?? "";
+      }
       index += 1;
       continue;
     }
-    if (char === "|") {
-      pushCurrent();
-      if (command[index + 1] === "|") {
-        tokens.push("||");
-        index += 1;
-      } else {
-        tokens.push("|");
-      }
+    if (char === "#" && wordStart === null) {
+      while (index + 1 < command.length && command[index + 1] !== "\n") index += 1;
       continue;
     }
-    if (char === ">") {
-      pushCurrent();
-      if (command[index + 1] === ">") {
-        tokens.push(">>");
-        index += 1;
-      } else {
-        tokens.push(">");
-      }
+    if (/\s/.test(char)) {
+      pushCurrent(index);
+      if (char === "\n") tokens.push({ value: ";", operator: true, quoted: false, start: index, end: index + 1 });
       continue;
     }
-    if (char === "<") {
-      pushCurrent();
-      if (command[index + 1] === "<") {
-        tokens.push("<<");
-        index += 1;
-      } else {
-        tokens.push("<");
-      }
+    if (";&|><".includes(char)) {
+      pushCurrent(index);
+      const three = command.slice(index, index + 3);
+      const two = command.slice(index, index + 2);
+      const value = SHELL_REDIRECTIONS.has(three) || COMMAND_SEPARATORS.has(three) ? three : SHELL_REDIRECTIONS.has(two) || COMMAND_SEPARATORS.has(two) ? two : char;
+      tokens.push({ value, operator: true, quoted: false, start: index, end: index + value.length });
+      index += value.length - 1;
       continue;
     }
+    wordStart ??= index;
     current += char;
   }
-  pushCurrent();
+  pushCurrent(command.length);
   return tokens;
 }
 function splitSegments(tokens) {
   const segments = [];
   let current = [];
   for (const token of tokens) {
-    if (COMMAND_SEPARATORS.has(token)) {
+    if (token.operator && COMMAND_SEPARATORS.has(token.value)) {
       if (current.length > 0) segments.push(current);
       current = [];
       continue;
@@ -748,9 +792,6 @@ function compareStrings(left, right) {
 }
 
 export {
-  CLIO_PROJECT_DIR,
-  CLIO_ARTIFACT_DIR,
-  artifactDefaultPath,
   toolMutationPaths,
   protectedArtifactMutationBlockReason,
   protectArtifact,
@@ -759,6 +800,8 @@ export {
   inlineShellScript,
   extractCommandCdTargets,
   extractCommandDeleteTargets,
-  tokenizeShellLike
+  invokesClioSkillMutation,
+  commandArgumentSegments,
+  scanShellLike
 };
-//# sourceMappingURL=chunk-IKOZFYBN.js.map
+//# sourceMappingURL=chunk-NXYCB2VD.js.map

package/dist/{chunk-CWVRRIEI.js → chunk-NZMNUPZZ.js}

@@ -2,7 +2,7 @@ import { createRequire as __clioCreateRequire } from "node:module"; const requir
 import {
   cwdHash,
   sessionPaths
-} from "./chunk-MQXIVJ35.js";
+} from "./chunk-HAXOFFRH.js";
 import {
   init_esm_shims
 } from "./chunk-3R73A4XB.js";
@@ -631,4 +631,4 @@ export {
   snapshotInputTokens,
   reconcileSnapshot
 };
-//# sourceMappingURL=chunk-CWVRRIEI.js.map
+//# sourceMappingURL=chunk-NZMNUPZZ.js.map

package/dist/{chunk-462T4EGZ.js → chunk-O5CVSAG5.js}

@@ -14,7 +14,7 @@ import {
 } from "./chunk-W6GROXXM.js";
 import {
   ceilChars
-} from "./chunk-CWVRRIEI.js";
+} from "./chunk-NZMNUPZZ.js";
 import {
   init_esm_shims
 } from "./chunk-3R73A4XB.js";
@@ -119,4 +119,4 @@ export {
   recallableRefListing,
   recallErrorMessage
 };
-//# sourceMappingURL=chunk-462T4EGZ.js.map
+//# sourceMappingURL=chunk-O5CVSAG5.js.map

package/dist/chunk-ODGTEFFI.js

@@ -0,0 +1,50 @@
+import { createRequire as __clioCreateRequire } from "node:module"; const require = __clioCreateRequire(import.meta.url);
+import {
+  describeValidationContract,
+  loadValidationContract
+} from "./chunk-V76WTFTW.js";
+import {
+  init_esm_shims
+} from "./chunk-3R73A4XB.js";
+
+// src/domains/safety/rigor.ts
+init_esm_shims();
+function rigorResolution(options) {
+  if (options.override === "high" || options.override === "normal") {
+    return { rigor: options.override, source: "override" };
+  }
+  const cwd = options.cwd ?? process.cwd();
+  const loaded = loadValidationContract(cwd);
+  if (!loaded.ok) {
+    const resolution = { rigor: "normal", source: "invalid-contract", contractPath: loaded.path };
+    const diagnostic = describeValidationContract(loaded);
+    if (diagnostic !== null) resolution.diagnostic = diagnostic;
+    return resolution;
+  }
+  if (loaded.contract !== null) {
+    return { rigor: "high", source: "validation-contract", contractPath: loaded.path };
+  }
+  if ("advisory" in loaded) {
+    const resolution = { rigor: "normal", source: "markdown-advisory", contractPath: loaded.path };
+    const diagnostic = describeValidationContract(loaded);
+    if (diagnostic !== null) resolution.diagnostic = diagnostic;
+    return resolution;
+  }
+  return { rigor: "normal", source: "none" };
+}
+function resolveRigor(options) {
+  return rigorResolution(options).rigor;
+}
+function parseRigorOverride(value) {
+  if (typeof value !== "string") return null;
+  const normalized = value.trim().toLowerCase();
+  if (normalized === "high") return "high";
+  if (normalized === "normal") return "normal";
+  return null;
+}
+
+export {
+  resolveRigor,
+  parseRigorOverride
+};
+//# sourceMappingURL=chunk-ODGTEFFI.js.map

package/dist/{chunk-3F7VUY77.js → chunk-OEJSLEPW.js}

@@ -4,7 +4,7 @@ import {
 } from "./chunk-RKKLTLYB.js";
 import {
   enabledExtensionResourceRoots
-} from "./chunk-HLAFFSEK.js";
+} from "./chunk-TQAHXW6Y.js";
 import {
   PATH_BOUNDARY_MAX_ENTRIES,
   normalizePathBoundary,
@@ -5073,4 +5073,4 @@ export {
   listFleetContracts,
   renderFleetPrompt
 };
-//# sourceMappingURL=chunk-3F7VUY77.js.map
+//# sourceMappingURL=chunk-OEJSLEPW.js.map

package/dist/{chunk-KKOJXO6R.js → chunk-OMQNJVKW.js}

@@ -1390,7 +1390,9 @@ async function detectMux(options = {}) {
     return { detection: none("panes are turned off"), client: null };
   }
   if (enabled === "embedded") {
-    log("info", "interface.panes.enabled=embedded is not implemented yet; detecting a guest pane host instead");
+    const reason = "embedded pane hosting is not implemented; use auto or guest";
+    log("warning", reason);
+    return { detection: none(reason, [], true), client: null };
   }
   if (env.HERDR_ENV !== "1") {
     return { detection: none("HERDR_ENV is not 1, so Clio is not running inside a pane host"), client: null };
@@ -1830,4 +1832,4 @@ export {
   createYaziSession,
   createMuxDomainModule
 };
-//# sourceMappingURL=chunk-KKOJXO6R.js.map
+//# sourceMappingURL=chunk-OMQNJVKW.js.map