@iowarp/clio-coder 0.4.2 → 0.4.4

package/dist/{chunk-P75RZCJW.js → chunk-RZDWV63N.js}

@@ -1,13 +1,13 @@
 import { createRequire as __clioCreateRequire } from "node:module"; const require = __clioCreateRequire(import.meta.url);
 import {
   discoverAgentRecipes
-} from "./chunk-CRFOIAX3.js";
+} from "./chunk-7UGL4MB5.js";
 import {
   assertAgentIdNamespace
 } from "./chunk-DR52UMZW.js";
 import {
   normalizeAgentSpec
-} from "./chunk-PGF63K6I.js";
+} from "./chunk-KFV5L5SK.js";
 import {
   BusChannels
 } from "./chunk-F4EKGO4N.js";
@@ -146,4 +146,4 @@ var AgentsDomainModule = {
 export {
   AgentsDomainModule
 };
-//# sourceMappingURL=chunk-P75RZCJW.js.map
+//# sourceMappingURL=chunk-RZDWV63N.js.map

package/dist/{chunk-UH632ZYL.js → chunk-S6PYF2XF.js}

@@ -1,7 +1,7 @@
 import { createRequire as __clioCreateRequire } from "node:module"; const require = __clioCreateRequire(import.meta.url);
 import {
   compileExecutionPlan
-} from "./chunk-DZAW46HP.js";
+} from "./chunk-LTIKRKFL.js";
 import {
   deriveExecutionRole
 } from "./chunk-H7IXIC72.js";
@@ -94,4 +94,4 @@ function compileScoutTransition(input) {
 export {
   compileScoutTransition
 };
-//# sourceMappingURL=chunk-UH632ZYL.js.map
+//# sourceMappingURL=chunk-S6PYF2XF.js.map

package/dist/{chunk-HJWWJ6IL.js → chunk-TOIVGRUX.js}

@@ -3,7 +3,7 @@ import {
   gitCommitAttributionEnabled,
   reportCommitAttributionDiagnostic,
   withManagedGitCommitAttributionEnvironment
-} from "./chunk-JIEGK6UF.js";
+} from "./chunk-U6TMQNSI.js";
 import {
   clampTimerDelayMs
 } from "./chunk-EBY63B7G.js";
@@ -32,12 +32,24 @@ var ENV_ALLOWLIST = [
   "TEMP",
   "TMP",
   "CI",
-  "NO_COLOR"
+  "NO_COLOR",
+  // Platform/session location variables needed by installed local CLIs. These
+  // locate operator-owned state; provider keys and Clio gates are deliberately
+  // absent from this allowlist.
+  "XDG_CONFIG_HOME",
+  "XDG_CACHE_HOME",
+  "XDG_STATE_HOME",
+  "APPDATA",
+  "LOCALAPPDATA",
+  "SYSTEMROOT",
+  "WINDIR",
+  "COMSPEC",
+  "PATHEXT"
 ];
-function buildSafeToolEnv(extra = {}) {
+function buildSafeToolEnv(extra = {}, source = process.env) {
   const env = {};
   for (const key of ENV_ALLOWLIST) {
-    const value = process.env[key];
+    const value = source[key];
     if (value !== void 0) env[key] = value;
   }
   for (const [key, value] of Object.entries(extra)) {
@@ -181,4 +193,4 @@ export {
   runCommandVector,
   combineSafeOutput
 };
-//# sourceMappingURL=chunk-HJWWJ6IL.js.map
+//# sourceMappingURL=chunk-TOIVGRUX.js.map

package/dist/{chunk-HLAFFSEK.js → chunk-TQAHXW6Y.js}

@@ -7,7 +7,7 @@ import {
   listInstalledExtensionRecords,
   listInstalledExtensions,
   removeExtension
-} from "./chunk-77QIVUZB.js";
+} from "./chunk-5MEZN6CB.js";
 import {
   require_dist
 } from "./chunk-APJ265NV.js";
@@ -357,4 +357,4 @@ export {
   enabledExtensionResourceRoots,
   ExtensionsDomainModule
 };
-//# sourceMappingURL=chunk-HLAFFSEK.js.map
+//# sourceMappingURL=chunk-TQAHXW6Y.js.map

package/dist/{chunk-JIEGK6UF.js → chunk-U6TMQNSI.js}

@@ -34,6 +34,9 @@ var CLIO_COMMIT_TRAILERS = {
   reviewed: `Reviewed-by: ${CLIO_COMMIT_IDENTITY}`,
   coAuthored: `Co-authored-by: ${CLIO_COMMIT_IDENTITY}`
 };
+var CLIO_DECISION_TRAILER_KEY = "Clio-Decision";
+var CLIO_DECISION_TRAILER_CAP = 32;
+var DECISION_REF_PATTERN = /^[A-Za-z0-9][A-Za-z0-9:._-]{0,127}\/[a-z0-9]+(?:[_-][a-z0-9]+)*$/u;
 var TRAILER_LINE = /^([A-Za-z0-9][A-Za-z0-9-]*):[ \t]+(.+)$/u;
 var SHA256 = /^[0-9a-f]{64}$/u;
 function normalizedTrailer(line) {
@@ -45,7 +48,18 @@ var KNOWN_CLIO_TRAILERS = new Set(
   Object.values(CLIO_COMMIT_TRAILERS).map((line) => normalizedTrailer(line)).filter((line) => line !== null)
 );
 function isClioTrailer(key) {
-  return KNOWN_CLIO_TRAILERS.has(key) || key.startsWith("clio-evidence:receipt-v20/sha256:");
+  return KNOWN_CLIO_TRAILERS.has(key) || key.startsWith("clio-evidence:receipt-v20/sha256:") || key.startsWith(`${CLIO_DECISION_TRAILER_KEY.toLowerCase()}:`);
+}
+function decisionTrailerRefs(decisions) {
+  if (decisions === void 0) return [];
+  const refs = /* @__PURE__ */ new Set();
+  for (const ref of decisions) {
+    if (typeof ref === "string" && DECISION_REF_PATTERN.test(ref)) refs.add(ref);
+  }
+  return [...refs].sort().slice(0, CLIO_DECISION_TRAILER_CAP);
+}
+function decisionTrailer(ref) {
+  return `${CLIO_DECISION_TRAILER_KEY}: ${ref}`;
 }
 function trailerBlockStart(lines) {
   if (lines.length < 2) return null;
@@ -92,6 +106,7 @@ function attributeCommitMessage(originalMessage, evidence, enabled = true) {
   if (evidence.materiallyAuthored === true) desired.push(CLIO_COMMIT_TRAILERS.coAuthored);
   const receipt = receiptTrailer(evidence.receipt);
   if (receipt !== null) desired.push(receipt);
+  for (const ref of decisionTrailerRefs(evidence.decisions)) desired.push(decisionTrailer(ref));
   const existing = new Set(
     (blockStart === null ? [] : retained.slice(blockStart)).map((line) => normalizedTrailer(line)).filter((line) => line !== null)
   );
@@ -112,9 +127,10 @@ function attributeCommitMessage(originalMessage, evidence, enabled = true) {
 var CLIO_GIT_COMMITS_ENABLED_ENV = "CLIO_CODER_GIT_COMMITS_ENABLED";
 var ASSISTED_ENV = "CLIO_CODER_COMMIT_ASSISTED";
 var AUTHORED_ENV = "CLIO_CODER_COMMIT_AUTHORED";
+var DECISIONS_ENV = "CLIO_CODER_COMMIT_DECISIONS";
 var CONFIG_BASE_COUNT_ENV = "CLIO_CODER_GIT_CONFIG_BASE_COUNT";
 var DEFAULT_HOOKS_EQUIVALENT_ENV = "CLIO_CODER_GIT_DEFAULT_HOOKS_EQUIVALENT";
-var MANAGED_HOOK_VERSION = 2;
+var MANAGED_HOOK_VERSION = 3;
 var DIAGNOSTIC_MAX_CHARS = 300;
 var COUNT = /^(?:0|[1-9][0-9]*)$/u;
 var reportedDiagnostics = /* @__PURE__ */ new Set();
@@ -122,7 +138,24 @@ var PROBE_CACHE_TTL_MS = 1e4;
 var PROBE_CACHE_MAX_ENTRIES = 32;
 var probeCache = /* @__PURE__ */ new Map();
 var installedHooksDirectory = null;
-var PER_SPAWN_ENV_NAMES = [ASSISTED_ENV, AUTHORED_ENV, CONFIG_BASE_COUNT_ENV, DEFAULT_HOOKS_EQUIVALENT_ENV];
+var PER_SPAWN_ENV_NAMES = [
+  ASSISTED_ENV,
+  AUTHORED_ENV,
+  DECISIONS_ENV,
+  CONFIG_BASE_COUNT_ENV,
+  DEFAULT_HOOKS_EQUIVALENT_ENV
+];
+var decisionRefsProvider = null;
+function setCommitDecisionRefsProvider(provider) {
+  decisionRefsProvider = provider;
+}
+function providedDecisionRefs() {
+  try {
+    return decisionRefsProvider?.() ?? [];
+  } catch {
+    return [];
+  }
+}
 function reportCommitAttributionDiagnostic(diagnostic) {
   if (diagnostic === null || reportedDiagnostics.has(diagnostic)) return;
   reportedDiagnostics.add(diagnostic);
@@ -279,6 +312,14 @@ if [ "$${ASSISTED_ENV}" = '1' ] || [ "$${AUTHORED_ENV}" = '1' ]; then
   append_trailer '${CLIO_COMMIT_TRAILERS.assisted}'
 fi
 if [ "$${AUTHORED_ENV}" = '1' ]; then append_trailer '${CLIO_COMMIT_TRAILERS.coAuthored}'; fi
+# Decision refs are validated again here: only <id>/<key> shapes become
+# trailers, so a stray value cannot inject a second line into the message.
+for decision_ref in $${DECISIONS_ENV}; do
+  case "$decision_ref" in
+    *[!A-Za-z0-9:._/-]* | */*/* | /* | */ | *-*-) continue ;;
+    */*) append_trailer "${CLIO_DECISION_TRAILER_KEY}: $decision_ref" ;;
+  esac
+done
 exit 0
 `;
 function installManagedHook(directory, name) {
@@ -358,6 +399,8 @@ function withManagedGitCommitAttributionEnvironment(source, options = {}) {
   const evidence = options.evidence ?? { materiallyAssisted: true, materiallyAuthored: true };
   env[ASSISTED_ENV] = evidence.materiallyAssisted === true ? "1" : "0";
   env[AUTHORED_ENV] = evidence.materiallyAuthored === true ? "1" : "0";
+  const decisions = decisionTrailerRefs(evidence.decisions ?? providedDecisionRefs());
+  if (decisions.length > 0) env[DECISIONS_ENV] = decisions.join(" ");
   const countRaw = env.GIT_CONFIG_COUNT;
   const count = countRaw === void 0 ? 0 : COUNT.test(countRaw) ? Number(countRaw) : Number.NaN;
   if (!Number.isSafeInteger(count) || count > 1024) {
@@ -394,9 +437,10 @@ function withManagedGitCommitAttributionEnvironment(source, options = {}) {
 
 export {
   attributeCommitMessage,
+  setCommitDecisionRefsProvider,
   reportCommitAttributionDiagnostic,
   setGitCommitAttributionEnabled,
   gitCommitAttributionEnabled,
   withManagedGitCommitAttributionEnvironment
 };
-//# sourceMappingURL=chunk-JIEGK6UF.js.map
+//# sourceMappingURL=chunk-U6TMQNSI.js.map

package/dist/{chunk-2HFQNRV3.js → chunk-UEPWCCTY.js}

@@ -2,26 +2,26 @@ import { createRequire as __clioCreateRequire } from "node:module"; const requir
 import {
   readLayeredSettings,
   readStrictLayeredSettings
-} from "./chunk-M2DAX4F6.js";
-import {
-  formatBootTrace
-} from "./chunk-ZTJUVLTU.js";
+} from "./chunk-4WR7VSYB.js";
 import {
   initializeClioHome
 } from "./chunk-I7XBWTYH.js";
+import {
+  formatBootTrace
+} from "./chunk-ZTJUVLTU.js";
 import {
   readSettings
-} from "./chunk-34BHNEE3.js";
+} from "./chunk-GHS5EBTQ.js";
 import {
   require_dist
 } from "./chunk-APJ265NV.js";
-import {
-  clioConfigDir
-} from "./chunk-BYP5D4HI.js";
 import {
   findEngineEnvKeys,
   getEngineEnvApiKey
 } from "./chunk-YXLYO42X.js";
+import {
+  clioConfigDir
+} from "./chunk-BYP5D4HI.js";
 import {
   __toESM,
   init_esm_shims
@@ -159,7 +159,7 @@ Run \`clio-coder auth login ${verdict.store}\` if the endpoint requires one; loc
     } else if (verdict.kind !== "usable") {
       process.stdout.write(`${describeVerdict(verdict)} Starting \`clio-coder configure\`.
 `);
-      const { runConfigureCommand } = await import("./configure-PIWO7B24.js");
+      const { runConfigureCommand } = await import("./configure-VEPX4NMX.js");
       const configured = await runConfigureCommand([]);
       if (configured !== 0) return configured;
       startupSettings = readStrictLayeredSettings(process.cwd()).settings;
@@ -174,7 +174,7 @@ Run \`clio-coder auth login ${verdict.store}\` if the endpoint requires one; loc
   let terminalLease;
   try {
     if (terminalLeaseEligible(options)) {
-      const { createProcessTerminalLease, instantShellEnabled } = await import("./terminal-lease-YREJ3JX2.js");
+      const { createProcessTerminalLease, instantShellEnabled } = await import("./terminal-lease-C2J3JYRE.js");
       if (instantShellEnabled()) {
         let stage0FrameId = null;
         terminalLease = createProcessTerminalLease({
@@ -197,7 +197,7 @@ Run \`clio-coder auth login ${verdict.store}\` if the endpoint requires one; loc
         throw new Error("injected Stage 1 hydration failure");
       }
     }
-    const { bootOrchestrator } = await import("./orchestrator-DDMPR3PY.js");
+    const { bootOrchestrator } = await import("./orchestrator-J4BSH4WQ.js");
     const result = await bootOrchestrator({
       ...options,
       ...startupSettings ? { startupSettings } : {},
@@ -220,4 +220,4 @@ Run \`clio-coder auth login ${verdict.store}\` if the endpoint requires one; loc
 export {
   runClioCommand
 };
-//# sourceMappingURL=chunk-2HFQNRV3.js.map
+//# sourceMappingURL=chunk-UEPWCCTY.js.map

package/dist/chunk-UOIZ7DA4.js

@@ -0,0 +1,41 @@
+import { createRequire as __clioCreateRequire } from "node:module"; const require = __clioCreateRequire(import.meta.url);
+import {
+  init_esm_shims
+} from "./chunk-3R73A4XB.js";
+
+// src/domains/lifecycle/install-method.ts
+init_esm_shims();
+import { existsSync, readFileSync, realpathSync } from "node:fs";
+import { join, resolve, sep } from "node:path";
+var PACKAGE_NAME = "@iowarp/clio-coder";
+var DIST_CLI_SUFFIX = join("dist", "cli", "index.js");
+function detectInstallMethod(entryPath = process.argv[1]) {
+  const root = sourceCheckoutRoot(entryPath);
+  return root === null ? "npm" : "source";
+}
+function sourceCheckoutRoot(entryPath = process.argv[1]) {
+  if (!entryPath || entryPath.trim().length === 0) return null;
+  let entry;
+  try {
+    entry = realpathSync(resolve(entryPath));
+  } catch {
+    return null;
+  }
+  const suffix = sep + DIST_CLI_SUFFIX;
+  if (!entry.endsWith(suffix)) return null;
+  if (entry.split(sep).includes("node_modules")) return null;
+  const root = entry.slice(0, entry.length - suffix.length);
+  try {
+    const pkg = JSON.parse(readFileSync(join(root, "package.json"), "utf8"));
+    if (pkg.name !== PACKAGE_NAME) return null;
+  } catch {
+    return null;
+  }
+  const hasCheckoutMarker = existsSync(join(root, ".git")) || existsSync(join(root, "src", "cli", "index.ts"));
+  return hasCheckoutMarker ? root : null;
+}
+
+export {
+  detectInstallMethod
+};
+//# sourceMappingURL=chunk-UOIZ7DA4.js.map

package/dist/{chunk-UH347SHR.js → chunk-USR47QNF.js}

@@ -1,13 +1,13 @@
 import { createRequire as __clioCreateRequire } from "node:module"; const require = __clioCreateRequire(import.meta.url);
 import {
   migrateSettingsV1Document
-} from "./chunk-3KIPBMUA.js";
+} from "./chunk-5ICU3EUH.js";
 import {
   parseAgentRecipeSchema
-} from "./chunk-CRFOIAX3.js";
+} from "./chunk-7UGL4MB5.js";
 import {
   parseFleetContract
-} from "./chunk-3F7VUY77.js";
+} from "./chunk-OEJSLEPW.js";
 import {
   parseFrontmatter
 } from "./chunk-RKKLTLYB.js";
@@ -17,17 +17,17 @@ import {
   installExtension,
   listInstalledExtensions,
   loadManifestFromRoot
-} from "./chunk-77QIVUZB.js";
+} from "./chunk-5MEZN6CB.js";
 import {
   assertAgentSpecPolicy,
   normalizeAgentSpec
-} from "./chunk-PGF63K6I.js";
+} from "./chunk-KFV5L5SK.js";
 import {
   readSettings,
   settingsPath,
   updateSettings,
   validateSettings
-} from "./chunk-34BHNEE3.js";
+} from "./chunk-GHS5EBTQ.js";
 import {
   readClioVersion
 } from "./chunk-IWHMRKLL.js";
@@ -37,14 +37,14 @@ import {
 import {
   require_dist
 } from "./chunk-APJ265NV.js";
-import {
-  clioConfigDir,
-  resolveClioDirs
-} from "./chunk-BYP5D4HI.js";
 import {
   safeResourceBackupPath,
   safeResourceWrite
 } from "./chunk-WEPFGWHJ.js";
+import {
+  clioConfigDir,
+  resolveClioDirs
+} from "./chunk-BYP5D4HI.js";
 import {
   __toESM,
   init_esm_shims
@@ -792,4 +792,4 @@ export {
   importShareArchive,
   ShareDomainModule
 };
-//# sourceMappingURL=chunk-UH347SHR.js.map
+//# sourceMappingURL=chunk-USR47QNF.js.map

package/dist/{chunk-AZ4WMN4W.js → chunk-V6HJFQZE.js}

@@ -1,7 +1,7 @@
 import { createRequire as __clioCreateRequire } from "node:module"; const require = __clioCreateRequire(import.meta.url);
 import {
   sha256
-} from "./chunk-B74PXLU7.js";
+} from "./chunk-CUSRQKPU.js";
 import {
   resolvePackageRoot
 } from "./chunk-IWHMRKLL.js";
@@ -225,4 +225,4 @@ export {
   renderCodewikiDigest,
   loadFragments
 };
-//# sourceMappingURL=chunk-AZ4WMN4W.js.map
+//# sourceMappingURL=chunk-V6HJFQZE.js.map