@iowarp/clio-coder 0.4.3 → 0.4.5

package/dist/chunk-EFSEIZE6.js

@@ -0,0 +1,56 @@
+import { createRequire as __clioCreateRequire } from "node:module"; const require = __clioCreateRequire(import.meta.url);
+import {
+  init_esm_shims
+} from "./chunk-ECBHH7LU.js";
+
+// src/domains/safety/redaction.ts
+init_esm_shims();
+function isPlainObject(value) {
+  return value !== null && typeof value === "object" && !Array.isArray(value);
+}
+var SECRET_KEY_RE = /(?:api[-_]?key|access[-_]?key|auth(?:orization)?|credential|password|private[-_]?key|secret|token)/iu;
+var ENV_KEY_RE = /^env(?:ironment)?$/iu;
+var SECRET_STRING_RE = /(https?:\/\/[^\s/@]+:)[^\s/@]+@/giu;
+var SECRET_URL_PARAM_RE = /([?&](?:api[-_]?key|access[-_]?token|auth(?:orization)?|credential|password|secret|token)[^=\s]*=)[^&#\s]+/giu;
+var SECRET_ASSIGNMENT_RE = /(?<![A-Z0-9_])((?:[A-Z0-9_]*(?:ACCESS|API|AUTH|CREDENTIAL|KEY|PASS(?:WORD)?|PRIVATE|SECRET|TOKEN)[A-Z0-9_]*)=)[^\s;&|]+/giu;
+var SECRET_FLAG_RE = /(--?(?:[a-z0-9-]*(?:api[-_]?key|access[-_]?token|auth(?:orization)?|credential|password|secret|token)[a-z0-9-]*))(=|\s+)([^\s;&|]+)/giu;
+function redactSecretString(value) {
+  return value.replace(SECRET_STRING_RE, "$1[redacted]@").replace(SECRET_URL_PARAM_RE, "$1[redacted]").replace(SECRET_ASSIGNMENT_RE, "$1[redacted]").replace(SECRET_FLAG_RE, "$1$2[redacted]");
+}
+function isSecretArgKey(key) {
+  return SECRET_KEY_RE.test(key);
+}
+function isEnvironmentArgKey(key) {
+  return ENV_KEY_RE.test(key);
+}
+function redactEnvironmentValue(value, depth) {
+  if (depth > 8) return "[redacted nested values]";
+  if (typeof value === "string") return "[redacted]";
+  if (Array.isArray(value)) return value.map((item) => redactEnvironmentValue(item, depth + 1));
+  if (!isPlainObject(value)) return value;
+  const out = {};
+  for (const [childKey, childValue] of Object.entries(value)) {
+    out[childKey] = redactEnvironmentValue(childValue, depth + 1);
+  }
+  return out;
+}
+function redactToolArgs(value, key = "", depth = 0) {
+  if (isSecretArgKey(key)) return "[redacted]";
+  if (isEnvironmentArgKey(key)) return redactEnvironmentValue(value, depth);
+  if (typeof value === "string") return redactSecretString(value);
+  if (depth > 8) return "[redacted nested values]";
+  if (Array.isArray(value)) return value.map((item) => redactToolArgs(item, key, depth + 1));
+  if (!isPlainObject(value)) return value;
+  const out = {};
+  for (const [childKey, childValue] of Object.entries(value)) {
+    out[childKey] = redactToolArgs(childValue, childKey, depth + 1);
+  }
+  return out;
+}
+
+export {
+  redactSecretString,
+  isSecretArgKey,
+  redactToolArgs
+};
+//# sourceMappingURL=chunk-EFSEIZE6.js.map

package/dist/{chunk-IJNZMHLA.js → chunk-EHCPSZJF.js}

@@ -1,13 +1,13 @@
 import { createRequire as __clioCreateRequire } from "node:module"; const require = __clioCreateRequire(import.meta.url);
 import {
   appendOutOfTurnUsageRow
-} from "./chunk-VA5FNYMT.js";
+} from "./chunk-HR3HPQ76.js";
 import {
   extractReasoningTokens
-} from "./chunk-NZMNUPZZ.js";
+} from "./chunk-77CZRFTE.js";
 import {
   init_esm_shims
-} from "./chunk-3R73A4XB.js";
+} from "./chunk-ECBHH7LU.js";
 
 // src/domains/observability/compaction-usage.ts
 init_esm_shims();
@@ -98,4 +98,4 @@ export {
   recordFailedCompactionCalls,
   summarizeFailedCompactionUsage
 };
-//# sourceMappingURL=chunk-IJNZMHLA.js.map
+//# sourceMappingURL=chunk-EHCPSZJF.js.map

package/dist/{chunk-K6BSR66V.js → chunk-EHOSNVVM.js}

@@ -1,13 +1,14 @@
 import { createRequire as __clioCreateRequire } from "node:module"; const require = __clioCreateRequire(import.meta.url);
 import {
   init_esm_shims
-} from "./chunk-3R73A4XB.js";
+} from "./chunk-ECBHH7LU.js";
 
 // src/core/tool-names.ts
 init_esm_shims();
 var ToolNames = {
   // OBSERVE
   Read: "read",
+  Evidence: "evidence",
   Grep: "grep",
   Find: "find",
   Ls: "ls",
@@ -28,6 +29,8 @@ var ToolNames = {
   Tasks: "tasks",
   Ledger: "ledger",
   Panes: "panes",
+  Limitation: "limitation",
+  Decide: "decide",
   // RETRIEVE
   WebFetch: "web_fetch",
   // INTERACT
@@ -50,6 +53,7 @@ function isBuiltinToolName(name) {
 
 export {
   ToolNames,
+  ALL_TOOL_NAMES,
   isBuiltinToolName
 };
-//# sourceMappingURL=chunk-K6BSR66V.js.map
+//# sourceMappingURL=chunk-EHOSNVVM.js.map

package/dist/{chunk-RRNP2ANY.js → chunk-EQEJJ53P.js}

@@ -1,13 +1,13 @@
 import { createRequire as __clioCreateRequire } from "node:module"; const require = __clioCreateRequire(import.meta.url);
-import {
-  parseFrontmatter
-} from "./chunk-RKKLTLYB.js";
 import {
   loadSkills
-} from "./chunk-LDJG7DW3.js";
+} from "./chunk-T7FDXNRU.js";
+import {
+  parseFrontmatter
+} from "./chunk-CXQ37WJH.js";
 import {
   enabledExtensionResourceRoots
-} from "./chunk-7DRAWPTZ.js";
+} from "./chunk-22PQ4TX4.js";
 import {
   assertAgentSpecPolicy,
   isAgentAudience,
@@ -19,16 +19,16 @@ import {
   isShadowAgent,
   normalizeAgentSpec,
   parseResultContract
-} from "./chunk-B4OAX3SI.js";
+} from "./chunk-OQM5IVJY.js";
 import {
   resolvePackageRoot
-} from "./chunk-IWHMRKLL.js";
+} from "./chunk-E3LEPLQ2.js";
 import {
   clioConfigDir
-} from "./chunk-BYP5D4HI.js";
+} from "./chunk-CTTI7G3T.js";
 import {
   init_esm_shims
-} from "./chunk-3R73A4XB.js";
+} from "./chunk-ECBHH7LU.js";
 
 // src/domains/agents/recipe.ts
 init_esm_shims();
@@ -396,4 +396,4 @@ export {
   parseAgentRecipeSchema,
   discoverAgentRecipes
 };
-//# sourceMappingURL=chunk-RRNP2ANY.js.map
+//# sourceMappingURL=chunk-EQEJJ53P.js.map

package/dist/{chunk-GWZNEVM2.js → chunk-EWD5P3GK.js}

@@ -1,33 +1,33 @@
 import { createRequire as __clioCreateRequire } from "node:module"; const require = __clioCreateRequire(import.meta.url);
 import {
   settings_v2_default
-} from "./chunk-5ICU3EUH.js";
+} from "./chunk-GVYWZNRK.js";
 import {
   clio_coder_naming_default
-} from "./chunk-IGLP3ODT.js";
+} from "./chunk-E3BQTQUP.js";
 import {
   upgradeLegacyExtensionInstallState
-} from "./chunk-5MEZN6CB.js";
+} from "./chunk-DZK63TZJ.js";
 import {
   readSettings,
   settingsPath,
   updateSettings,
   withSettingsLock
-} from "./chunk-GHS5EBTQ.js";
+} from "./chunk-FKIOX6DS.js";
 import {
   authStoragePath,
   openAuthStorage
-} from "./chunk-ID64D7PE.js";
+} from "./chunk-HXHFDHB6.js";
 import {
   require_dist
-} from "./chunk-APJ265NV.js";
+} from "./chunk-B5GGDIHT.js";
 import {
   safeResourceWrite
-} from "./chunk-WEPFGWHJ.js";
+} from "./chunk-ZZFWWYLX.js";
 import {
   __toESM,
   init_esm_shims
-} from "./chunk-3R73A4XB.js";
+} from "./chunk-ECBHH7LU.js";
 
 // src/domains/lifecycle/migrations/index.ts
 init_esm_shims();
@@ -190,4 +190,4 @@ export {
   readMigrationManifest,
   runPending
 };
-//# sourceMappingURL=chunk-GWZNEVM2.js.map
+//# sourceMappingURL=chunk-EWD5P3GK.js.map

package/dist/{chunk-JKKCYP3C.js → chunk-F34AR6O3.js}

@@ -1,20 +1,20 @@
 import { createRequire as __clioCreateRequire } from "node:module"; const require = __clioCreateRequire(import.meta.url);
 import {
   entryBelongsToPath
-} from "./chunk-W6GROXXM.js";
+} from "./chunk-O5F25NIE.js";
 import {
   probeWorkspace
-} from "./chunk-HVDIIIQW.js";
+} from "./chunk-DNHVRBH4.js";
 import {
   protectArtifact
-} from "./chunk-I7ZPNEJM.js";
+} from "./chunk-M6TAYK66.js";
 import {
   isSessionEntry,
   isSessionHeader
-} from "./chunk-JGRC33J2.js";
+} from "./chunk-5ZMXGW7P.js";
 import {
   stripTokenizerSentinels
-} from "./chunk-CFGTUFWB.js";
+} from "./chunk-MCJKEGHO.js";
 import {
   CURRENT_SESSION_FORMAT_VERSION,
   appendSessionFileEntry,
@@ -26,17 +26,17 @@ import {
   readSessionMeta,
   resumeSession,
   sessionPaths
-} from "./chunk-HAXOFFRH.js";
+} from "./chunk-FQOOGXBH.js";
 import {
   BusChannels
-} from "./chunk-F4EKGO4N.js";
+} from "./chunk-HL26ADLH.js";
 import {
   clioStateDir,
   stateRootRemoved
-} from "./chunk-BYP5D4HI.js";
+} from "./chunk-CTTI7G3T.js";
 import {
   init_esm_shims
-} from "./chunk-3R73A4XB.js";
+} from "./chunk-ECBHH7LU.js";
 
 // src/core/response-model-id.ts
 init_esm_shims();
@@ -317,10 +317,10 @@ function enrichForkMeta(meta, parentSessionId, parentTurnId) {
 // src/domains/session/manager.ts
 init_esm_shims();
 
-// node_modules/uuid/dist-node/index.js
+// node_modules/.pnpm/uuid@14.0.1/node_modules/uuid/dist-node/index.js
 init_esm_shims();
 
-// node_modules/uuid/dist-node/stringify.js
+// node_modules/.pnpm/uuid@14.0.1/node_modules/uuid/dist-node/stringify.js
 init_esm_shims();
 var byteToHex = [];
 for (let i = 0; i < 256; ++i) {
@@ -330,14 +330,14 @@ function unsafeStringify(arr, offset = 0) {
   return (byteToHex[arr[offset + 0]] + byteToHex[arr[offset + 1]] + byteToHex[arr[offset + 2]] + byteToHex[arr[offset + 3]] + "-" + byteToHex[arr[offset + 4]] + byteToHex[arr[offset + 5]] + "-" + byteToHex[arr[offset + 6]] + byteToHex[arr[offset + 7]] + "-" + byteToHex[arr[offset + 8]] + byteToHex[arr[offset + 9]] + "-" + byteToHex[arr[offset + 10]] + byteToHex[arr[offset + 11]] + byteToHex[arr[offset + 12]] + byteToHex[arr[offset + 13]] + byteToHex[arr[offset + 14]] + byteToHex[arr[offset + 15]]).toLowerCase();
 }
 
-// node_modules/uuid/dist-node/rng.js
+// node_modules/.pnpm/uuid@14.0.1/node_modules/uuid/dist-node/rng.js
 init_esm_shims();
 var rnds8 = new Uint8Array(16);
 function rng() {
   return crypto.getRandomValues(rnds8);
 }
 
-// node_modules/uuid/dist-node/v7.js
+// node_modules/.pnpm/uuid@14.0.1/node_modules/uuid/dist-node/v7.js
 init_esm_shims();
 var _state = {};
 function v7(options, buf, offset) {
@@ -1400,7 +1400,13 @@ async function readSessionEntriesForId(stateDir, sessionId) {
         return { entries: [], missing: false, errors: [`${currentPath}: ${err.message ?? String(err)}`] };
       }
     }
-    return parseSessionEntries(raw, source);
+    const result = parseSessionEntries(raw, source);
+    try {
+      const meta = JSON.parse(await readFile(join3(root, cwdHash2, sessionId, "meta.json"), "utf8"));
+      if (isRecord(meta) && typeof meta.pinnedLeafTurnId === "string") result.leafTurnId = meta.pinnedLeafTurnId;
+    } catch {
+    }
+    return result;
   }
   return { entries: [], missing: true, errors: [] };
 }
@@ -1481,4 +1487,4 @@ export {
   ledgerUsageCalls,
   SessionDomainModule
 };
-//# sourceMappingURL=chunk-JKKCYP3C.js.map
+//# sourceMappingURL=chunk-F34AR6O3.js.map

package/dist/{chunk-GHS5EBTQ.js → chunk-FKIOX6DS.js}

@@ -1,7 +1,7 @@
 import { createRequire as __clioCreateRequire } from "node:module"; const require = __clioCreateRequire(import.meta.url);
 import {
   warnLegacyNaming
-} from "./chunk-D7E7WCDF.js";
+} from "./chunk-DVNAPPXU.js";
 import {
   ACTIVE_AGENT_AUTOMATION_ROLES,
   ACTIVE_ROUTING_POSTURES,
@@ -10,27 +10,27 @@ import {
   DEFAULT_SETTINGS,
   THEME_NAMED_COLORS,
   THINKING_LEVELS
-} from "./chunk-UXCU4E3T.js";
+} from "./chunk-SE4ZKILO.js";
 import {
   MAX_TIMER_DELAY_MS
-} from "./chunk-EBY63B7G.js";
+} from "./chunk-6EXUUOSN.js";
 import {
   withStateFileLockSync
-} from "./chunk-IKCO5N3L.js";
+} from "./chunk-2QPI3TR3.js";
 import {
   require_dist
-} from "./chunk-APJ265NV.js";
+} from "./chunk-B5GGDIHT.js";
 import {
   safeResourceWrite
-} from "./chunk-WEPFGWHJ.js";
+} from "./chunk-ZZFWWYLX.js";
 import {
   clioConfigDir,
   resolveClioDirs
-} from "./chunk-BYP5D4HI.js";
+} from "./chunk-CTTI7G3T.js";
 import {
   __toESM,
   init_esm_shims
-} from "./chunk-3R73A4XB.js";
+} from "./chunk-ECBHH7LU.js";
 
 // src/core/config.ts
 init_esm_shims();
@@ -812,7 +812,10 @@ function validateExternalAgent(issues, path, value, defaults, seen) {
   }
   for (const key of ["connectTimeoutMs", "turnTimeoutMs", "permissionTimeoutMs"]) {
     if (!(key in value)) continue;
-    const parsed = expectInteger(issues, `${path}.${key}`, value[key], { min: 1, max: MAX_TIMER_DELAY_MS });
+    const parsed = expectInteger(issues, `${path}.${key}`, value[key], {
+      min: key === "turnTimeoutMs" ? 0 : 1,
+      max: MAX_TIMER_DELAY_MS
+    });
     if (parsed !== void 0) agent[key] = parsed;
   }
   if ("stallTimeoutMs" in value) {
@@ -1683,7 +1686,7 @@ function validateSettings(raw) {
               for (const key of ["connectTimeoutMs", "turnTimeoutMs", "permissionTimeoutMs"]) {
                 if (!(key in defaults)) continue;
                 const parsed = expectInteger(issues, `integrations.externalAgents.defaults.${key}`, defaults[key], {
-                  min: 1,
+                  min: key === "turnTimeoutMs" ? 0 : 1,
                   max: MAX_TIMER_DELAY_MS
                 });
                 if (parsed !== void 0) settings.integrations.externalAgents.defaults[key] = parsed;
@@ -1813,16 +1816,22 @@ function useTargetInSettings(settings, targetId, options = {}) {
   if (!target) return null;
   const workerTarget = options.workerTargetId !== void 0 && options.workerTargetId !== target.id ? settings.targets.find((entry) => entry.id === options.workerTargetId) : target;
   if (!workerTarget) return null;
+  const scoped = options.orchestratorModel !== void 0 || options.workerModel !== void 0 || options.workerTargetId !== void 0 || options.backgroundModel !== void 0;
+  const roles = [];
+  if (!scoped || options.orchestratorModel !== void 0) roles.push("chat");
+  if (!scoped || options.workerModel !== void 0 || options.workerTargetId !== void 0) roles.push("fleet");
+  if (options.backgroundModel !== void 0) roles.push("memory");
+  const changedRoles = [];
   const sharedModel = options.model ?? target.defaultModel ?? null;
-  settings.chat.target = target.id;
-  settings.chat.model = options.orchestratorModel ?? sharedModel;
-  settings.fleet.default.target = workerTarget.id;
-  settings.fleet.default.model = options.workerModel ?? (workerTarget === target ? sharedModel : workerTarget.defaultModel ?? null);
-  if (options.backgroundModel !== void 0) {
-    settings.context.memory.target = target.id;
-    settings.context.memory.model = options.backgroundModel;
-  }
-  return { workerTargetId: workerTarget.id };
+  for (const role of roles) {
+    const current = role === "chat" ? settings.chat : role === "fleet" ? settings.fleet.default : settings.context.memory;
+    const nextTarget = role === "fleet" ? workerTarget.id : target.id;
+    const nextModel = role === "chat" ? options.orchestratorModel ?? sharedModel : role === "fleet" ? options.workerModel ?? (workerTarget === target ? sharedModel : workerTarget.defaultModel ?? null) : options.backgroundModel ?? null;
+    if (current.target !== nextTarget || current.model !== nextModel) changedRoles.push(role);
+    current.target = nextTarget;
+    current.model = nextModel;
+  }
+  return { workerTargetId: workerTarget.id, roles, changedRoles };
 }
 function removeTargetFromSettings(settings, id) {
   if (!settings.targets.some((entry) => entry.id === id)) return false;
@@ -1894,4 +1903,4 @@ export {
   removeFleetProfileFromSettings,
   bindAgentProfileInSettings
 };
-//# sourceMappingURL=chunk-GHS5EBTQ.js.map
+//# sourceMappingURL=chunk-FKIOX6DS.js.map

package/dist/{chunk-HAXOFFRH.js → chunk-FQOOGXBH.js}

@@ -1,25 +1,25 @@
 import { createRequire as __clioCreateRequire } from "node:module"; const require = __clioCreateRequire(import.meta.url);
 import {
   assertSafeId
-} from "./chunk-R346GLFC.js";
+} from "./chunk-UHW5V7HC.js";
 import {
   normalizeClioCoderEventTree
-} from "./chunk-BTK3SSSK.js";
+} from "./chunk-KMF54VH3.js";
 import {
   readClioVersion,
   readPiMonoVersion
-} from "./chunk-IWHMRKLL.js";
+} from "./chunk-E3LEPLQ2.js";
 import {
   fsyncDirectory,
   safeResourceWrite
-} from "./chunk-WEPFGWHJ.js";
+} from "./chunk-ZZFWWYLX.js";
 import {
   clioStateDir,
   stateRootRemoved
-} from "./chunk-BYP5D4HI.js";
+} from "./chunk-CTTI7G3T.js";
 import {
   init_esm_shims
-} from "./chunk-3R73A4XB.js";
+} from "./chunk-ECBHH7LU.js";
 
 // src/engine/session.ts
 init_esm_shims();
@@ -576,4 +576,4 @@ export {
   openSession,
   resumeSession
 };
-//# sourceMappingURL=chunk-HAXOFFRH.js.map
+//# sourceMappingURL=chunk-FQOOGXBH.js.map