@iowarp/clio-coder 0.4.3 → 0.4.4

package/dist/{dispatch-runner-5AHT53RF.js → dispatch-runner-RJ5I2F2O.js}

@@ -1,11 +1,11 @@
 import { createRequire as __clioCreateRequire } from "node:module"; const require = __clioCreateRequire(import.meta.url);
+import "./chunk-S6PYF2XF.js";
 import {
   SPOT_CHECK_GUIDANCE,
   receiptEvidenceLabels,
   workerTextLabel,
   workerTextNonEvidenceNotices
-} from "./chunk-ZWPRK62N.js";
-import "./chunk-2UH2KFUP.js";
+} from "./chunk-DT3LWJOB.js";
 import {
   UNVERIFIABLE_RECEIPT_VERIFICATION,
   closeAgentLedger,
@@ -16,7 +16,20 @@ import {
   provenanceCompactSuffix,
   renderAgentLedgerBoard,
   renderDispatchReviewerTask
-} from "./chunk-AF4YM7Z4.js";
+} from "./chunk-NRO2BJRH.js";
+import {
+  decideReviewGate,
+  finalizePendingGateDecision,
+  materializePendingGateDecision,
+  parseCompeteGateResult,
+  preflightPendingGateDecisionMaterialization,
+  preparePendingGateDecisionRecovery,
+  readGateDecisionArtifacts,
+  resolvePendingGateDecision,
+  stagePendingGateDecision,
+  stagePendingGateOutput
+} from "./chunk-NXIMQY5W.js";
+import "./chunk-XRZT5WY5.js";
 import {
   candidateDiffStat,
   claimCompeteGroup,
@@ -35,43 +48,32 @@ import {
   removeCandidateWorktreeMapped,
   settleCompeteGroupRun,
   settleRecoveredCompeteDecision
-} from "./chunk-B4VEBZKF.js";
+} from "./chunk-QUFRYSWI.js";
 import {
   compileExecutionPlan,
   requireAgentSteps
-} from "./chunk-E3TPLWFX.js";
-import {
-  decideReviewGate,
-  finalizePendingGateDecision,
-  materializePendingGateDecision,
-  parseCompeteGateResult,
-  preflightPendingGateDecisionMaterialization,
-  preparePendingGateDecisionRecovery,
-  readGateDecisionArtifacts,
-  resolvePendingGateDecision,
-  stagePendingGateDecision,
-  stagePendingGateOutput
-} from "./chunk-WRBAGUNF.js";
+} from "./chunk-LTIKRKFL.js";
+import "./chunk-ODGTEFFI.js";
 import {
   adaptRunReceiptTrustStatus,
   summarizeTrustStatus,
   verifyReceiptIntegrity
-} from "./chunk-IWT4SF4R.js";
-import "./chunk-JKKCYP3C.js";
+} from "./chunk-CUSRQKPU.js";
+import "./chunk-6UINWWS6.js";
 import "./chunk-FTMGRKEF.js";
-import "./chunk-XRZT5WY5.js";
-import "./chunk-RVG5JXAL.js";
 import "./chunk-VIA6RFQZ.js";
+import "./chunk-W6GROXXM.js";
 import {
+  activeDecisionRefs,
   durableAssistantTextFromEvent
-} from "./chunk-T56WDKA5.js";
-import "./chunk-W6GROXXM.js";
-import "./chunk-2VIKGWFZ.js";
+} from "./chunk-I2DWJ4GM.js";
+import "./chunk-OEJSLEPW.js";
 import "./chunk-RKKLTLYB.js";
-import "./chunk-6PTFB5VS.js";
-import "./chunk-TXOTCRLG.js";
+import "./chunk-K6T2ZAMZ.js";
+import "./chunk-3UUXNFEX.js";
+import "./chunk-V76WTFTW.js";
 import "./chunk-3DPEIQKN.js";
-import "./chunk-7DRAWPTZ.js";
+import "./chunk-TQAHXW6Y.js";
 import "./chunk-5MEZN6CB.js";
 import "./chunk-HVDIIIQW.js";
 import {
@@ -81,55 +83,59 @@ import {
   RESOLVED_DISPATCH_PLAN_ARGUMENT,
   REVIEWER_GATE_PROMPT,
   describeDispatchPlan,
-  narrowDispatchIntentToReadOnly,
   renderCouncilVoteMemberTask,
   withResolvedPlanTaskPin
-} from "./chunk-PAJQJ7BS.js";
+} from "./chunk-75W7L2E2.js";
+import "./chunk-6QOTUPRG.js";
 import {
   explainRouteDecision
-} from "./chunk-EKCHAPYA.js";
-import "./chunk-L47TF46W.js";
-import "./chunk-RSJ25QSL.js";
-import "./chunk-XIVNBFZS.js";
+} from "./chunk-AUPNRN7C.js";
+import "./chunk-6PAZTBPA.js";
+import "./chunk-6Q3CYFD3.js";
 import "./chunk-NEDJ26B5.js";
-import "./chunk-42FMPA75.js";
+import "./chunk-OQE5J4C6.js";
+import "./chunk-NAI6ZFCY.js";
+import "./chunk-OZNBF4L3.js";
+import "./chunk-QZWQA4DE.js";
 import {
   gateDeciderAgentId,
   gateRouteCorrelation
 } from "./chunk-H7IXIC72.js";
-import "./chunk-7DICMOS6.js";
-import "./chunk-OQE5J4C6.js";
-import "./chunk-HHV2GANA.js";
 import {
   parseJsonObjectPayload,
   parseScoutResult,
   resultContractSourceId
-} from "./chunk-B4OAX3SI.js";
-import "./chunk-I7ZPNEJM.js";
-import "./chunk-GYV6VZOC.js";
-import "./chunk-UL3WSD3F.js";
-import "./chunk-JDAY6FIL.js";
-import "./chunk-OZNBF4L3.js";
+} from "./chunk-KFV5L5SK.js";
+import "./chunk-NXYCB2VD.js";
 import "./chunk-ECH6PKUQ.js";
 import {
-  truncateUtf8
-} from "./chunk-6XLNIQDB.js";
+  narrowDispatchIntentToReadOnly
+} from "./chunk-IRXAATOX.js";
+import "./chunk-BJVFZO5U.js";
+import "./chunk-DXKJURES.js";
+import "./chunk-HHV2GANA.js";
+import "./chunk-GYV6VZOC.js";
+import "./chunk-UL3WSD3F.js";
 import "./chunk-5B2AEOW5.js";
 import "./chunk-VAVR4IJY.js";
-import "./chunk-JGRC33J2.js";
 import "./chunk-4BJ5BYCE.js";
-import "./chunk-K6BSR66V.js";
-import "./chunk-XPWWI35G.js";
+import "./chunk-54X7T7DK.js";
+import "./chunk-I5FWO7L5.js";
+import {
+  truncateUtf8
+} from "./chunk-6XLNIQDB.js";
+import "./chunk-4NSRCOYP.js";
+import "./chunk-JSD46VO2.js";
 import "./chunk-CFGTUFWB.js";
 import "./chunk-NZMNUPZZ.js";
 import "./chunk-2JH2WHGE.js";
-import "./chunk-HAXOFFRH.js";
-import "./chunk-R346GLFC.js";
 import "./chunk-KXDSS5WJ.js";
 import "./chunk-GHS5EBTQ.js";
 import "./chunk-D7E7WCDF.js";
+import "./chunk-HAXOFFRH.js";
+import "./chunk-R346GLFC.js";
 import "./chunk-BTK3SSSK.js";
-import "./chunk-NMJXSHBJ.js";
+import "./chunk-W54I7H25.js";
 import "./chunk-PMZVFWSR.js";
 import {
   BusChannels
@@ -139,15 +145,15 @@ import "./chunk-33YXPOE3.js";
 import "./chunk-7CR24IG7.js";
 import "./chunk-XPLRXC72.js";
 import "./chunk-IWHMRKLL.js";
-import "./chunk-VW6DOEDG.js";
+import "./chunk-6OSVSQL5.js";
 import "./chunk-UXCU4E3T.js";
 import "./chunk-LL4KHSZI.js";
-import "./chunk-JSC3U7TI.js";
 import "./chunk-S66XZJOF.js";
-import "./chunk-JIEGK6UF.js";
+import "./chunk-TOIVGRUX.js";
+import "./chunk-U6TMQNSI.js";
 import "./chunk-EBY63B7G.js";
 import "./chunk-6EJMN2Y3.js";
-import "./chunk-LLDJM5XK.js";
+import "./chunk-26QSH3EJ.js";
 import "./chunk-ID64D7PE.js";
 import "./chunk-336NSSKI.js";
 import "./chunk-IKCO5N3L.js";
@@ -762,6 +768,7 @@ async function runReviewGated(deps, base, review, timeoutMs, signal) {
         ...review.target !== void 0 ? { target: review.target } : {},
         ...base.plan !== void 0 ? { plan: base.plan } : {},
         ...base.parentToolCallId !== void 0 ? { parentToolCallId: base.parentToolCallId } : {},
+        ...base.decisionRefs !== void 0 ? { decisionRefs: base.decisionRefs } : {},
         ...base.reservation !== void 0 ? { reservation: { ownerId: base.reservation.ownerId, memberId: base.reservation.memberId } } : {}
       };
       const reviewer = await runOne(
@@ -1164,7 +1171,9 @@ async function runCompete(deps, base, compete, autonomy, timeoutMs, signal) {
         const receipt = candidateRuns[index]?.receipt;
         const failed = receipt !== void 0 && isPipelineStepFailure(receipt);
         if (failed) return "builder failed";
-        commitCandidateWork(worktree, `clio-coder compete ${group} candidate ${worktree.index}`);
+        if (receipt?.autonomyEnforcement?.autonomy !== "read-only") {
+          commitCandidateWork(worktree, `clio-coder compete ${group} candidate ${worktree.index}`);
+        }
         return candidateDiffStat(root, worktree.branch);
       });
       if (candidateRuns.every((run) => isPipelineStepFailure(run.receipt))) {
@@ -1197,6 +1206,7 @@ async function runCompete(deps, base, compete, autonomy, timeoutMs, signal) {
         ...compete.judge?.node !== void 0 ? { node: compete.judge.node } : {},
         ...base.plan !== void 0 ? { plan: base.plan } : {},
         ...base.parentToolCallId !== void 0 ? { parentToolCallId: base.parentToolCallId } : {},
+        ...base.decisionRefs !== void 0 ? { decisionRefs: base.decisionRefs } : {},
         ...base.reservation !== void 0 ? { reservation: { ownerId: base.reservation.ownerId, memberId: base.reservation.memberId } } : {}
       };
       throwIfStopped();
@@ -1758,7 +1768,8 @@ ${base.task}`,
       ...council.judge?.model ? { model: council.judge.model } : {},
       ...council.judge?.node ? { node: council.judge.node } : {},
       ...base.plan ? { plan: base.plan } : {},
-      ...base.parentToolCallId ? { parentToolCallId: base.parentToolCallId } : {}
+      ...base.parentToolCallId ? { parentToolCallId: base.parentToolCallId } : {},
+      ...base.decisionRefs !== void 0 ? { decisionRefs: base.decisionRefs } : {}
     };
     const pinned = council.resolvedTasks?.find((task) => task.role === "synthesis");
     const judgeRun = await runMember(
@@ -1897,6 +1908,8 @@ async function runDispatchTool(inputDeps, admissionState, args, options) {
   const reservationOwnerId = admissionState.trustedReservationOwners.get(args);
   const parentToolCallId = options?.toolCallId;
   let requests = parentToolCallId === void 0 || parentToolCallId.length === 0 ? structuredClone(snapshot.requests) : snapshot.requests.map((request) => ({ ...structuredClone(request), parentToolCallId }));
+  const decisionRefs = activeDecisionRefs(deps.getDecisionBoard?.() ?? []);
+  if (decisionRefs.length > 0) requests = requests.map((request) => ({ ...request, decisionRefs }));
   if (planView.planScale && deps.dispatch.preview !== void 0 && resolvedPlan === null) {
     return { kind: "error", message: "dispatch: resolved plan is missing after admission" };
   }
@@ -2346,4 +2359,4 @@ async function runWriterLimitedBatch(deps, requests, timeoutMs, signal) {
 export {
   runDispatchTool
 };
-//# sourceMappingURL=dispatch-runner-5AHT53RF.js.map
+//# sourceMappingURL=dispatch-runner-RJ5I2F2O.js.map

package/dist/{docs-PD3EXDKU.js → docs-SPOV3BAN.js}

@@ -1,11 +1,9 @@
 import { createRequire as __clioCreateRequire } from "node:module"; const require = __clioCreateRequire(import.meta.url);
 import {
   printError,
-  printHeader
-} from "./chunk-VPKWYKEY.js";
-import {
+  printHeader,
   source_default
-} from "./chunk-5TSRNF4G.js";
+} from "./chunk-JCI2ROMZ.js";
 import {
   resolvePackageRoot
 } from "./chunk-IWHMRKLL.js";
@@ -291,4 +289,4 @@ export {
   runDocsCommand,
   waitForShutdown
 };
-//# sourceMappingURL=docs-PD3EXDKU.js.map
+//# sourceMappingURL=docs-SPOV3BAN.js.map

package/dist/{doctor-WNNVO6FY.js → doctor-DKICC2SN.js}

@@ -3,7 +3,7 @@ import {
   MUX_METHOD_MIN_PROTOCOL,
   detectMux,
   resolveSocketCandidates
-} from "./chunk-KKOJXO6R.js";
+} from "./chunk-OMQNJVKW.js";
 import "./chunk-HRQMFLJP.js";
 import {
   formatDoctorReport,
@@ -13,7 +13,7 @@ import {
   runDoctorInteropChecks,
   runDoctorModelChecks,
   runDoctorRuntimeChecks
-} from "./chunk-N2Z7HLVY.js";
+} from "./chunk-2ASED4PZ.js";
 import {
   inspectInstalledNamingResources,
   inspectModelOverlayNaming,
@@ -24,59 +24,68 @@ import {
   regenerateYaziNamingProfile,
   transformNamingSettingsDocument
 } from "./chunk-IGLP3ODT.js";
-import {
-  TraceReader
-} from "./chunk-VKPAQYEB.js";
 import {
   describeYaziProfile,
   inspectCurrentYaziProfile,
   userYaziConfigDir,
   yaziProfileDir
 } from "./chunk-3M6DQK6S.js";
+import {
+  TraceReader
+} from "./chunk-VKPAQYEB.js";
 import "./chunk-LCGCVYZ4.js";
-import "./chunk-LDJG7DW3.js";
+import "./chunk-2ZSONWVL.js";
 import "./chunk-NDDGJUXD.js";
-import "./chunk-CE5AX47J.js";
+import "./chunk-YECAMM3D.js";
+import {
+  describeValidationContract,
+  loadValidationContract
+} from "./chunk-V76WTFTW.js";
 import "./chunk-3DPEIQKN.js";
-import "./chunk-7DRAWPTZ.js";
+import "./chunk-TQAHXW6Y.js";
 import "./chunk-5MEZN6CB.js";
 import "./chunk-D4CJV46V.js";
+import {
+  formatBytes
+} from "./chunk-DQOVN6KV.js";
 import "./chunk-NEKRRTYW.js";
-import "./chunk-INY6HTFL.js";
+import "./chunk-JEIYHLOR.js";
 import "./chunk-I7XBWTYH.js";
-import "./chunk-PUVDKJ2Y.js";
+import "./chunk-2IR2NMPA.js";
+import "./chunk-3ODX73FK.js";
 import {
   printError
-} from "./chunk-VPKWYKEY.js";
-import "./chunk-5TSRNF4G.js";
+} from "./chunk-JCI2ROMZ.js";
 import {
   describeResolution,
   toolStatus,
   toolStatuses
 } from "./chunk-QSNYB6ZV.js";
-import "./chunk-JGRC33J2.js";
 import "./chunk-4BJ5BYCE.js";
-import "./chunk-K6BSR66V.js";
+import "./chunk-54X7T7DK.js";
+import "./chunk-I5FWO7L5.js";
+import "./chunk-6XLNIQDB.js";
+import "./chunk-4NSRCOYP.js";
 import {
   findPinnedTool
 } from "./chunk-QDC3K2U3.js";
 import "./chunk-2JH2WHGE.js";
-import "./chunk-HAXOFFRH.js";
-import "./chunk-R346GLFC.js";
 import "./chunk-KXDSS5WJ.js";
 import {
   readSettings,
   withSettingsLock
 } from "./chunk-GHS5EBTQ.js";
 import "./chunk-D7E7WCDF.js";
+import "./chunk-HAXOFFRH.js";
+import "./chunk-R346GLFC.js";
 import "./chunk-BTK3SSSK.js";
 import "./chunk-XPLRXC72.js";
 import "./chunk-IWHMRKLL.js";
 import "./chunk-UXCU4E3T.js";
 import "./chunk-LL4KHSZI.js";
-import "./chunk-JSC3U7TI.js";
 import "./chunk-S66XZJOF.js";
-import "./chunk-JIEGK6UF.js";
+import "./chunk-TOIVGRUX.js";
+import "./chunk-U6TMQNSI.js";
 import "./chunk-EBY63B7G.js";
 import "./chunk-6EJMN2Y3.js";
 import "./chunk-ID64D7PE.js";
@@ -653,17 +662,6 @@ function measureEntry(path) {
   }
   return { bytes, error: null };
 }
-function formatBytes(bytes) {
-  if (bytes < 1024) return `${bytes} B`;
-  const units = ["KiB", "MiB", "GiB", "TiB"];
-  let value = bytes;
-  let unit = -1;
-  do {
-    value /= 1024;
-    unit += 1;
-  } while (value >= 1024 && unit < units.length - 1);
-  return `${value.toFixed(value >= 10 ? 1 : 2)} ${units[unit]}`;
-}
 
 // src/cli/doctor-toolchain.ts
 init_esm_shims();
@@ -706,6 +704,29 @@ function toolchainFindings(options = {}) {
   return [...tools, yaziProfileFinding(filesEnabled)];
 }
 
+// src/cli/doctor-validation-contract.ts
+init_esm_shims();
+function validationContractFinding(workspaceRoot = process.cwd()) {
+  const name = "validation contract";
+  const loaded = loadValidationContract(workspaceRoot);
+  if (!loaded.ok) {
+    return { ok: false, name, detail: `invalid: ${describeValidationContract(loaded)}; rigor default stays normal` };
+  }
+  if (loaded.contract === null) {
+    if ("advisory" in loaded) {
+      return { ok: true, name, level: "warn", detail: `markdown-only: ${describeValidationContract(loaded)}` };
+    }
+    return { ok: true, name, detail: "none at the workspace root; rigor default normal" };
+  }
+  const artifacts = loaded.contract.artifacts?.length ?? 0;
+  const validators = loaded.contract.validators?.length ?? 0;
+  return {
+    ok: true,
+    name,
+    detail: `valid: ${loaded.path} (version ${loaded.contract.version}, ${artifacts} artifact(s), ${validators} validator(s)); rigor default high`
+  };
+}
+
 // src/cli/doctor.ts
 var HELP = `clio-coder doctor [--fix] [--json]
 
@@ -746,6 +767,7 @@ async function runDoctorCommand(args = []) {
   const toolChecks = untouched ? [] : toolchainFindings({ panesEnabled, filesEnabled });
   const paneChecks = untouched ? [] : await panesFindings();
   const namingChecks = namingFootprintFindings({ fix, yaziEnabled: filesEnabled });
+  const contractChecks = [validationContractFinding()];
   const all = [
     ...findings,
     ...storageChecks,
@@ -755,7 +777,8 @@ async function runDoctorCommand(args = []) {
     ...fleetChecks,
     ...toolChecks,
     ...paneChecks,
-    ...namingChecks
+    ...namingChecks,
+    ...contractChecks
   ];
   const ok = all.every((f) => f.ok);
   if (json) {
@@ -770,4 +793,4 @@ async function runDoctorCommand(args = []) {
 export {
   runDoctorCommand
 };
-//# sourceMappingURL=doctor-WNNVO6FY.js.map
+//# sourceMappingURL=doctor-DKICC2SN.js.map

package/dist/{eval-7G7SGAYO.js → eval-OQOQUDHK.js}

@@ -5,10 +5,10 @@ import {
 import {
   loadFragments,
   renderCodewikiDigest
-} from "./chunk-Y3CBHOR6.js";
+} from "./chunk-V6HJFQZE.js";
 import {
   discoverAgentRecipes
-} from "./chunk-RRNP2ANY.js";
+} from "./chunk-7UGL4MB5.js";
 import {
   EvalTaskFileError,
   TRUST_STATUS_AXES,
@@ -23,11 +23,11 @@ import {
   loadEvalTaskFile,
   summarizeTrustStatus,
   verifyReceiptIntegrity
-} from "./chunk-IWT4SF4R.js";
+} from "./chunk-CUSRQKPU.js";
 import {
   listSessionLedgerRefs,
   parseSessionEntries
-} from "./chunk-JKKCYP3C.js";
+} from "./chunk-6UINWWS6.js";
 import {
   EVAL_BEHAVIOR_METRIC_DEFINITIONS_V1,
   EVAL_EXECUTION_ENVELOPE_SCHEMA_V1,
@@ -51,52 +51,49 @@ import {
 } from "./chunk-FTMGRKEF.js";
 import "./chunk-W6GROXXM.js";
 import "./chunk-RKKLTLYB.js";
-import {
-  shellQuote
-} from "./chunk-TXOTCRLG.js";
-import "./chunk-LDJG7DW3.js";
+import "./chunk-2ZSONWVL.js";
 import "./chunk-NDDGJUXD.js";
-import "./chunk-CE5AX47J.js";
+import "./chunk-YECAMM3D.js";
 import "./chunk-3DPEIQKN.js";
-import "./chunk-7DRAWPTZ.js";
+import "./chunk-TQAHXW6Y.js";
 import "./chunk-5MEZN6CB.js";
-import "./chunk-PUVDKJ2Y.js";
+import "./chunk-3ODX73FK.js";
 import "./chunk-HVDIIIQW.js";
 import {
   printError
-} from "./chunk-VPKWYKEY.js";
-import "./chunk-5TSRNF4G.js";
-import "./chunk-EKCHAPYA.js";
-import "./chunk-L47TF46W.js";
+} from "./chunk-JCI2ROMZ.js";
+import "./chunk-AUPNRN7C.js";
+import "./chunk-6PAZTBPA.js";
 import {
   createSafetyPolicyEngine
-} from "./chunk-XIVNBFZS.js";
+} from "./chunk-6Q3CYFD3.js";
 import "./chunk-H7IXIC72.js";
-import "./chunk-7DICMOS6.js";
-import "./chunk-HHV2GANA.js";
 import {
   agentSpecFingerprint,
   normalizeAgentSpec
-} from "./chunk-B4OAX3SI.js";
-import "./chunk-I7ZPNEJM.js";
+} from "./chunk-KFV5L5SK.js";
+import "./chunk-NXYCB2VD.js";
+import "./chunk-ECH6PKUQ.js";
+import "./chunk-DXKJURES.js";
+import "./chunk-HHV2GANA.js";
 import "./chunk-GYV6VZOC.js";
 import "./chunk-UL3WSD3F.js";
-import "./chunk-ECH6PKUQ.js";
-import "./chunk-JGRC33J2.js";
-import "./chunk-K6BSR66V.js";
+import "./chunk-54X7T7DK.js";
+import "./chunk-I5FWO7L5.js";
+import "./chunk-4NSRCOYP.js";
 import "./chunk-CFGTUFWB.js";
 import {
   extractReasoningTokens
 } from "./chunk-NZMNUPZZ.js";
-import "./chunk-HAXOFFRH.js";
-import {
-  InvalidIdError
-} from "./chunk-R346GLFC.js";
 import "./chunk-KXDSS5WJ.js";
 import "./chunk-GHS5EBTQ.js";
 import {
   namingCompatibilityEnvironment
 } from "./chunk-D7E7WCDF.js";
+import "./chunk-HAXOFFRH.js";
+import {
+  InvalidIdError
+} from "./chunk-R346GLFC.js";
 import {
   normalizeClioCoderEventRecord,
   normalizeClioCoderEventType
@@ -117,9 +114,9 @@ import "./chunk-XPLRXC72.js";
 import "./chunk-IWHMRKLL.js";
 import "./chunk-UXCU4E3T.js";
 import "./chunk-LL4KHSZI.js";
-import "./chunk-JSC3U7TI.js";
 import "./chunk-S66XZJOF.js";
-import "./chunk-JIEGK6UF.js";
+import "./chunk-TOIVGRUX.js";
+import "./chunk-U6TMQNSI.js";
 import "./chunk-EBY63B7G.js";
 import "./chunk-6EJMN2Y3.js";
 import "./chunk-ID64D7PE.js";
@@ -3016,6 +3013,7 @@ var OUTPUT_HEAD_LIMIT = 2e4;
 var OUTPUT_TRUNCATION_MARKER = "\n[output middle truncated; tail preserved]\n";
 var METRIC_JSONL_LIMIT = 256e3;
 var METRIC_JSONL_LINE_LIMIT = 64e3;
+var TIMEOUT_KILL_GRACE_MS = 5e3;
 async function runExternalCommandRunner(runner, cwd, timeoutMs, env) {
   const runnerCommands = runner.commands ?? [];
   const commands = runnerCommands.length > 0 ? runnerCommands : runner.command === void 0 ? [] : [runner.command];
@@ -3085,14 +3083,10 @@ function runShellCommand(command, cwd, timeoutMs, env) {
     const callLedgerFold = createEvalCallLedgerFold();
     let timedOut = false;
     let settled = false;
-    const child = spawn(command, {
-      cwd,
-      shell: true,
-      stdio: ["ignore", "pipe", "pipe"],
-      // The overlay is additive: an eval item pins where Clio writes its
-      // journal, and inherits everything else the operator's shell provides.
-      env: env === void 0 ? process.env : { ...process.env, ...env }
-    });
+    const spawnEnv = env === void 0 ? process.env : { ...process.env, ...env };
+    const [file, args, shell] = typeof command === "string" ? [command, [], true] : [command[0], command.slice(1), false];
+    const child = spawn(file, args, { cwd, shell, stdio: ["ignore", "pipe", "pipe"], env: spawnEnv });
+    const commandLine = typeof command === "string" ? command : command.join(" ");
     child.stdout.setEncoding("utf8");
     child.stderr.setEncoding("utf8");
     child.stdout.on("data", (chunk) => {
@@ -3109,14 +3103,14 @@ function runShellCommand(command, cwd, timeoutMs, env) {
     const timer = setTimeout(() => {
       timedOut = true;
       child.kill("SIGTERM");
-      setTimeout(() => child.kill("SIGKILL"), 1e3);
+      setTimeout(() => child.kill("SIGKILL"), TIMEOUT_KILL_GRACE_MS);
     }, timeoutMs);
     const finish = (exitCode) => {
       if (settled) return;
       settled = true;
       clearTimeout(timer);
       resolve9({
-        command,
+        command: commandLine,
         exitCode,
         stdout,
         metricJsonl: metricCapture.finish(),
@@ -3252,18 +3246,19 @@ function stringField(record, field) {
 async function runClioRunRunner(runner, cwd, clioEntry, timeoutMs, target, env, readObservation) {
   const prompt = runner.prompt ?? "";
   const args = [
-    shellQuote(clioEntry),
+    process.execPath,
+    clioEntry,
     "run",
     "--json",
-    ...runner.agent === void 0 ? [] : ["--agent", shellQuote(runner.agent)],
+    ...runner.agent === void 0 ? [] : ["--agent", runner.agent],
     "--target",
-    shellQuote(target.id),
-    ...target.model === void 0 ? [] : ["--model", shellQuote(target.model)],
-    ...target.thinking === void 0 ? [] : ["--thinking", shellQuote(target.thinking)],
+    target.id,
+    ...target.model === void 0 ? [] : ["--model", target.model],
+    ...target.thinking === void 0 ? [] : ["--thinking", target.thinking],
     ...runner.autonomy === void 0 ? [] : ["--autonomy", runner.autonomy],
-    shellQuote(prompt)
+    prompt
   ];
-  const result = await runShellCommand(`${process.execPath} ${args.join(" ")}`, cwd, runner.timeoutMs ?? timeoutMs, env);
+  const result = await runShellCommand(args, cwd, runner.timeoutMs ?? timeoutMs, env);
   const tokens = result.usage;
   const toolMetricStream = result.metricJsonl.length > 0 ? result.metricJsonl : result.stdout;
   const tools = toolCallMetricsFromJsonl(toolMetricStream);
@@ -3449,12 +3444,8 @@ function isRecord9(value) {
 // src/domains/eval/runners/context-index.ts
 init_esm_shims();
 async function runContextIndexRunner(cwd, clioEntry, timeoutMs, target, env) {
-  const result = await runShellCommand(
-    `${shellQuote(process.execPath)} ${shellQuote(clioEntry)} context index --json`,
-    cwd,
-    timeoutMs,
-    env
-  );
+  const args = [process.execPath, clioEntry, "context", "index", "--json"];
+  const result = await runShellCommand(args, cwd, timeoutMs, env);
   const parsed = parseContextIndexOutput(result.stdout);
   return {
     assignmentId: null,
@@ -3496,7 +3487,7 @@ import { existsSync as existsSync2, statSync } from "node:fs";
 import { join as join4 } from "node:path";
 async function runContextInitRunner(runner, cwd, clioEntry, timeoutMs, target, env) {
   const extraArgs = runner.args ?? [];
-  const command = [
+  const args = [
     process.execPath,
     clioEntry,
     "context",
@@ -3508,8 +3499,8 @@ async function runContextInitRunner(runner, cwd, clioEntry, timeoutMs, target, e
     ...target.model === void 0 ? [] : ["--model", target.model],
     ...target.thinking === void 0 ? [] : ["--thinking", target.thinking],
     ...extraArgs
-  ].map(shellQuote).join(" ");
-  const result = await runShellCommand(command, cwd, runner.timeoutMs ?? timeoutMs, env);
+  ];
+  const result = await runShellCommand(args, cwd, runner.timeoutMs ?? timeoutMs, env);
   const payload = parseInitPayload(result.stdout);
   const candidateGeneration = recordField2(payload, "generation");
   const generation = isValidGenerationPayload(payload, candidateGeneration) ? candidateGeneration : null;
@@ -4672,4 +4663,4 @@ function comparisonFormat(value) {
 export {
   runEvalCommand
 };
-//# sourceMappingURL=eval-7G7SGAYO.js.map
+//# sourceMappingURL=eval-OQOQUDHK.js.map