@iowarp/clio-coder 0.4.3 → 0.4.4

package/dist/{chunk-JGRC33J2.js → chunk-54X7T7DK.js}

@@ -57,6 +57,7 @@ function evaluateSkillToolSurface(policy, tool) {
   const carriedSurface = policy.carriedSurface === true;
   const disallowedBy = entries.filter(([, declared]) => declared.disallowedTools?.includes(tool) === true).map(([name]) => name);
   if (disallowedBy.length > 0) return { skills, mergedAllowedTools: null, disallowedBy, carriedSurface };
+  if (tool === "limitation") return null;
   const allowLists = entries.map(([, declared]) => declared.allowedTools);
   if (allowLists.some((list) => list === void 0 || list.length === 0)) return null;
   const merged = [...new Set(allowLists.flatMap((list) => [...list ?? []]))];
@@ -183,6 +184,9 @@ function autonomyAskRejection(level, tool, actionClass, exposure = DEFAULT_AUTON
 
 // src/domains/session/entries.ts
 init_esm_shims();
+function decisionRef(interviewId, key) {
+  return `${interviewId}/${key}`;
+}
 var EVICTION_REASONS = [
   "superseded_read",
   "stale_after_mutation",
@@ -287,9 +291,12 @@ function isTaskLedgerEvidence(value) {
 }
 function isDecisionRecord(value) {
   if (!isRecord(value)) return false;
-  if (!isString(value.key) || !/^[a-z0-9]+(?:_[a-z0-9]+)*$/.test(value.key)) return false;
+  if (!isString(value.key) || !/^[a-z0-9]+(?:[_-][a-z0-9]+)*$/.test(value.key)) return false;
   if (!isString(value.value) || !isOneOf(value.status, DECISION_STATUSES) || !isString(value.decidedAt)) return false;
   if (!isOptionalString(value.label) || !isOptionalString(value.source_question)) return false;
+  if (value.source !== void 0 && !isOneOf(value.source, ["operator", "agent"])) return false;
+  if (value.alternatives !== void 0 && !isStringArray(value.alternatives)) return false;
+  if (!isOptionalString(value.rationale)) return false;
   if (!isOptionalString(value.revisedAt) || !isOptionalString(value.correction)) return false;
   return value.status === "superseded" ? isString(value.revisedAt) : value.revisedAt === void 0 && value.correction === void 0;
 }
@@ -346,7 +353,7 @@ function isSessionEntry(value) {
     case "taskLedger":
       return isOptionalString(v.boardId) && Array.isArray(v.goals) && v.goals.every(isTaskLedgerGoal) && Array.isArray(v.subgoals) && v.subgoals.every(isTaskLedgerGoal) && isStringArray(v.activeRunIds) && Array.isArray(v.requiredValidationEvidence) && v.requiredValidationEvidence.every(isTaskLedgerEvidence);
     case "decisionLedger":
-      return isString(v.interviewId) && isOneOf(v.interviewStatus, DECISION_INTERVIEW_STATUSES) && isString(v.startedAt) && isString(v.endedAt) && isNumber(v.roundCount) && Number.isInteger(v.roundCount) && v.roundCount >= 0 && isOptionalString(v.summary) && isOptionalString(v.transcriptPath) && (v.exposure === void 0 || isOneOf(v.exposure, AUTONOMY_EXPOSURES)) && Array.isArray(v.decisions) && v.decisions.every(isDecisionRecord);
+      return (v.origin === void 0 || isOneOf(v.origin, ["interview", "agent"])) && isString(v.interviewId) && isOneOf(v.interviewStatus, DECISION_INTERVIEW_STATUSES) && isString(v.startedAt) && isString(v.endedAt) && isNumber(v.roundCount) && Number.isInteger(v.roundCount) && v.roundCount >= 0 && isOptionalString(v.summary) && isOptionalString(v.transcriptPath) && (v.exposure === void 0 || isOneOf(v.exposure, AUTONOMY_EXPOSURES)) && Array.isArray(v.decisions) && v.decisions.every(isDecisionRecord);
     case "workerRun":
       return isString(v.assignmentId) && isString(v.runId) && isOneOf(v.origin, WORKER_RUN_ORIGINS) && isString(v.agentId) && isWorkerRunRuntime(v.runtime) && isOptionalString(v.parentToolCallId);
     case "contextEviction":
@@ -380,7 +387,9 @@ export {
   mapAutonomy,
   autonomyDenyRejection,
   autonomyAskRejection,
+  decisionRef,
+  isDecisionRecord,
   isSessionHeader,
   isSessionEntry
 };
-//# sourceMappingURL=chunk-JGRC33J2.js.map
+//# sourceMappingURL=chunk-54X7T7DK.js.map

package/dist/{chunk-YQWYVTMC.js → chunk-5636DCO5.js}

@@ -8,13 +8,13 @@ import {
 import {
   createLoopState,
   observe
-} from "./chunk-RSJ25QSL.js";
+} from "./chunk-6QOTUPRG.js";
 import {
   createSafetyPolicyEngine
-} from "./chunk-XIVNBFZS.js";
+} from "./chunk-6Q3CYFD3.js";
 import {
   classify
-} from "./chunk-B4OAX3SI.js";
+} from "./chunk-KFV5L5SK.js";
 import {
   BusChannels,
   isRunAbortedPayload
@@ -608,4 +608,4 @@ var SafetyDomainModule = {
 export {
   SafetyDomainModule
 };
-//# sourceMappingURL=chunk-YQWYVTMC.js.map
+//# sourceMappingURL=chunk-5636DCO5.js.map

package/dist/{chunk-7E7I3WLS.js → chunk-57XXR6DR.js}

@@ -1,19 +1,12 @@
 import { createRequire as __clioCreateRequire } from "node:module"; const require = __clioCreateRequire(import.meta.url);
-import {
-  createLifecyclePresenter,
-  shortenPath
-} from "./chunk-SKHCAU7K.js";
 import {
   createDelayedManualCodeInput,
   promptOAuthSelection
 } from "./chunk-2STGEDFV.js";
 import {
-  column,
-  terminalColumns,
-  truncate,
-  twoColumnRow,
-  wrapPlain
-} from "./chunk-2IR2NMPA.js";
+  createLifecyclePresenter,
+  shortenPath
+} from "./chunk-DQOVN6KV.js";
 import {
   fingerprintNativeRuntime
 } from "./chunk-NEKRRTYW.js";
@@ -25,27 +18,32 @@ import {
   interopProposals,
   renderProposalEntry,
   resolveOnPath
-} from "./chunk-INY6HTFL.js";
+} from "./chunk-JEIYHLOR.js";
 import {
   initializeClioHome
 } from "./chunk-I7XBWTYH.js";
+import {
+  column,
+  terminalColumns,
+  truncate,
+  twoColumnRow,
+  wrapPlain
+} from "./chunk-2IR2NMPA.js";
 import {
   credentialWriteFailed,
   printPlaintextCredentialWarning
-} from "./chunk-PUVDKJ2Y.js";
+} from "./chunk-3ODX73FK.js";
 import {
   printError,
-  printOk
-} from "./chunk-VPKWYKEY.js";
-import {
+  printOk,
   source_default
-} from "./chunk-5TSRNF4G.js";
+} from "./chunk-JCI2ROMZ.js";
 import {
   isOrchestratorEligibleRuntime,
   probeCapabilitiesForModel,
   readTargetModelSnapshot,
   recordTargetModelSnapshot
-} from "./chunk-XPWWI35G.js";
+} from "./chunk-JSD46VO2.js";
 import {
   credentialsPresent
 } from "./chunk-2JH2WHGE.js";
@@ -56,13 +54,16 @@ import {
   settingsPath,
   updateSettings
 } from "./chunk-GHS5EBTQ.js";
+import {
+  warnLegacyNaming
+} from "./chunk-D7E7WCDF.js";
 import {
   getVersionInfo
 } from "./chunk-XPLRXC72.js";
 import {
   greetLmStudio,
   registerBuiltinRuntimes
-} from "./chunk-VW6DOEDG.js";
+} from "./chunk-6OSVSQL5.js";
 import {
   THINKING_LEVELS
 } from "./chunk-UXCU4E3T.js";
@@ -73,7 +74,7 @@ import {
   listKnownModelsForRuntime,
   listProviderSupportEntries,
   supportGroupLabel
-} from "./chunk-LLDJM5XK.js";
+} from "./chunk-26QSH3EJ.js";
 import {
   authStoragePath,
   openAuthStorage,
@@ -3489,7 +3490,7 @@ var SECTIONS = [
         label: "Run doctor",
         hint: "read-only health check",
         run: async () => {
-          const { runDoctorCommand } = await import("./doctor-WNNVO6FY.js");
+          const { runDoctorCommand } = await import("./doctor-DKICC2SN.js");
           await runDoctorCommand([]);
         }
       },
@@ -3731,7 +3732,7 @@ async function runConfigureCommand(argv, inStream = input, outStream = output2)
       return 2;
     }
     if (runtimeId === "lmstudio-native" && runtime.id === "lmstudio") {
-      process.stderr.write("warning: runtime 'lmstudio-native' is deprecated; using 'lmstudio'\n");
+      warnLegacyNaming(runtimeId, runtime.id);
     }
   }
   const hasTargetSetupFlag = args.id !== void 0 || args.url !== void 0 || args.model !== void 0 || args.workerProfile !== void 0 || args.workerProfileModel !== void 0 || args.apiKey !== void 0 || args.apiKeyEnv !== void 0 || args.gateway || args.lifecycle !== void 0 || args.setOrchestrator || args.setWorkerDefault || args.contextWindow !== void 0 || args.maxTokens !== void 0 || args.reasoning !== void 0;
@@ -3759,4 +3760,4 @@ export {
   runTargetRename,
   runConfigureCommand
 };
-//# sourceMappingURL=chunk-7E7I3WLS.js.map
+//# sourceMappingURL=chunk-57XXR6DR.js.map

package/dist/{chunk-7ZYNNDKC.js → chunk-5TUB6SLS.js}

@@ -13,7 +13,7 @@ import {
   formatColumns,
   printError,
   printOk
-} from "./chunk-VPKWYKEY.js";
+} from "./chunk-JCI2ROMZ.js";
 import {
   describeFloorRejection,
   describeResolution,
@@ -299,4 +299,4 @@ function jsonShape(status) {
 export {
   runToolsCommand
 };
-//# sourceMappingURL=chunk-7ZYNNDKC.js.map
+//# sourceMappingURL=chunk-5TUB6SLS.js.map

package/dist/{chunk-VW6DOEDG.js → chunk-6OSVSQL5.js}

@@ -4,7 +4,7 @@ import {
 } from "./chunk-UXCU4E3T.js";
 import {
   runCommandVector
-} from "./chunk-JSC3U7TI.js";
+} from "./chunk-TOIVGRUX.js";
 import {
   catalogThinkingLevelsForRuntime,
   listCatalogModelsForRuntime,
@@ -328,6 +328,15 @@ var claudeCodeRuntime = {
   headlessCommand: "claude -p --output-format stream-json",
   outputParser: "claude-code-stream-json",
   defaultCapabilities: claudeCodeCapabilities,
+  // The Claude CLI runs its own tool loop. Clio observes only the stream, so a
+  // declared per-tool budget is recorded as external-one-shot, never enforced.
+  externalAgentLoop: {
+    tools: "externally-governed-unobserved",
+    network: "externally-governed-unobserved",
+    budget: "external-one-shot",
+    generatingRetry: "allowed",
+    modelCatalog: "static"
+  },
   synthesizeModel(target, wireModelId, kb) {
     return synthesizeClaudeDelegatedModel({
       target,
@@ -3597,4 +3606,4 @@ export {
   BUILTIN_RUNTIMES,
   registerBuiltinRuntimes
 };
-//# sourceMappingURL=chunk-VW6DOEDG.js.map
+//# sourceMappingURL=chunk-6OSVSQL5.js.map

package/dist/{chunk-L47TF46W.js → chunk-6PAZTBPA.js}

@@ -1,7 +1,7 @@
 import { createRequire as __clioCreateRequire } from "node:module"; const require = __clioCreateRequire(import.meta.url);
 import {
   isSessionEntry
-} from "./chunk-JGRC33J2.js";
+} from "./chunk-54X7T7DK.js";
 import {
   init_esm_shims
 } from "./chunk-3R73A4XB.js";
@@ -45,6 +45,7 @@ function boardStatus(tasks) {
 function toTaskLedgerEntryFields(board, now) {
   const evidence = [];
   const subgoals = board.tasks.map((task) => {
+    evidence.push(...(task.requiredValidationEvidence ?? []).map((item) => ({ ...item })));
     if (task.status === "completed" && task.evidence) {
       evidence.push({
         id: `${task.id}.evidence`,
@@ -139,6 +140,8 @@ function toEntryView(entry) {
         origin: goal.origin ?? "agent"
       };
       if (goal.userTaskId) task.userTaskId = goal.userTaskId;
+      const required = entry.requiredValidationEvidence.filter((item) => item.id.startsWith(`${goal.id}.acceptance.`));
+      if (required.length > 0) task.requiredValidationEvidence = required.map((item) => ({ ...item }));
       if (goal.description) task.reason = goal.description;
       const evidence = evidenceByTask.get(goal.id);
       if (evidence) task.evidence = evidence;
@@ -211,6 +214,15 @@ function applyMutation(board, mutation) {
       origin: "user",
       userTaskId: mutation.userTaskId
     };
+    if (mutation.verification && mutation.verification.length > 0) {
+      picked.requiredValidationEvidence = mutation.verification.map((item, index) => ({
+        id: `${picked.id}.acceptance.${index}`,
+        description: `Operator acceptance: ${item.check}`,
+        command: item.check,
+        status: "pending",
+        notes: `timeoutMs=${item.timeoutMs}`
+      }));
+    }
     return {
       board: {
         boardId: board?.boardId ?? "",
@@ -371,4 +383,4 @@ export {
   foldSessionTaskHistory,
   createTaskBoardStore
 };
-//# sourceMappingURL=chunk-L47TF46W.js.map
+//# sourceMappingURL=chunk-6PAZTBPA.js.map

package/dist/{chunk-XIVNBFZS.js → chunk-6Q3CYFD3.js}

@@ -1,14 +1,7 @@
 import { createRequire as __clioCreateRequire } from "node:module"; const require = __clioCreateRequire(import.meta.url);
-import {
-  loadProjectVerifierCatalog
-} from "./chunk-7DICMOS6.js";
-import {
-  pathBoundaryCovers,
-  resolvePathBoundary
-} from "./chunk-HHV2GANA.js";
 import {
   classify
-} from "./chunk-B4OAX3SI.js";
+} from "./chunk-KFV5L5SK.js";
 import {
   extractCommandCdTargets,
   extractCommandDeleteTargets,
@@ -16,16 +9,23 @@ import {
   inlineShellScript,
   invokesClioSkillMutation,
   scanShellLike
-} from "./chunk-I7ZPNEJM.js";
-import {
-  artifactDefaultPath
-} from "./chunk-GYV6VZOC.js";
+} from "./chunk-NXYCB2VD.js";
 import {
   canonicalizeExistingPath
 } from "./chunk-ECH6PKUQ.js";
+import {
+  loadProjectVerifierCatalog
+} from "./chunk-DXKJURES.js";
+import {
+  pathBoundaryCovers,
+  resolvePathBoundary
+} from "./chunk-HHV2GANA.js";
+import {
+  artifactDefaultPath
+} from "./chunk-GYV6VZOC.js";
 import {
   ToolNames
-} from "./chunk-K6BSR66V.js";
+} from "./chunk-4NSRCOYP.js";
 import {
   foreignAgentDirs
 } from "./chunk-KXDSS5WJ.js";
@@ -212,8 +212,10 @@ var DEFAULT_DAMAGE_CONTROL_PATH_POLICY = {
     // widen its own permissions in two tool calls. Both are authored by the
     // operator through the CLI (`clio-coder verifiers author` lands nothing
     // before `--yes`), so model-side writes and deletes are refused.
+    // Skills also refuse model-side writes and deletes; installs go through `clio-coder skills install`.
     ".clio-coder/safety.yaml",
     ".clio-coder/verifiers.yaml",
+    ".clio-coder/skills/",
     "/etc/",
     "/usr/",
     "/bin/",
@@ -824,7 +826,10 @@ function createSafetyPolicyEngine(options = {}) {
   const projectPolicy = options.projectPolicy ?? loadProjectSafetyPolicy(cwd);
   const projectPolicyRoot = projectPolicy.path === null ? cwd : path4.dirname(path4.dirname(canonicalizeExistingPath(projectPolicy.path)));
   const pathPolicyInput = projectPolicy.disableDefaultPathPolicy ? projectPolicy.pathPolicy : mergePathPolicyInputs(DEFAULT_DAMAGE_CONTROL_PATH_POLICY, projectPolicy.pathPolicy);
-  const expandedDefaults = projectPolicy.disableDefaultPathPolicy ? pathPolicyInput : mergePathPolicyInputs(pathPolicyInput, { zeroAccessPaths: clioCredentialStorePaths() });
+  const expandedDefaults = projectPolicy.disableDefaultPathPolicy ? pathPolicyInput : mergePathPolicyInputs(pathPolicyInput, {
+    zeroAccessPaths: clioCredentialStorePaths(),
+    readOnlyPaths: clioSkillsRootPaths()
+  });
   const pathPolicy = compilePathPolicy(expandedDefaults, projectPolicyRoot);
   const zeroAccessPolicy = {
     root: pathPolicy.root,
@@ -1001,6 +1006,13 @@ function clioCredentialStorePaths() {
     return [];
   }
 }
+function clioSkillsRootPaths() {
+  try {
+    return [path4.join(clioConfigDir(), "skills")];
+  } catch {
+    return [];
+  }
+}
 var SAFE_PRESENCE_RE = /^\s*grep\s+(?:-(?:q|sq|qs)\s+)('[^']*'|"[^"]*"|\S+)\s+\S+\s*$/;
 function isSafePresenceCheck(command) {
   const match = SAFE_PRESENCE_RE.exec(command);
@@ -1338,7 +1350,13 @@ function cwdArg(args, fallback) {
   const resolved = typeof args?.cwd === "string" && args.cwd.length > 0 ? path4.resolve(fallback, args.cwd) : fallback;
   return canonicalizeExistingPath(resolved);
 }
-var CONTENT_BEARING_TOOLS = /* @__PURE__ */ new Set([ToolNames.Write, ToolNames.Edit, ToolNames.Artifact]);
+var CONTENT_BEARING_TOOLS = /* @__PURE__ */ new Set([
+  ToolNames.Write,
+  ToolNames.Edit,
+  ToolNames.Artifact,
+  ToolNames.Dispatch,
+  ToolNames.Tasks
+]);
 function damageControlScan(call) {
   if (!CONTENT_BEARING_TOOLS.has(call.tool)) return serializeArgs(call.args);
   const pathArg2 = call.args?.path;
@@ -1395,4 +1413,4 @@ export {
   WRITE_ROOT_REFUSED_TOOLS,
   createSafetyPolicyEngine
 };
-//# sourceMappingURL=chunk-XIVNBFZS.js.map
+//# sourceMappingURL=chunk-6Q3CYFD3.js.map