@iowarp/clio-coder 0.4.3 → 0.4.5

package/dist/{chunk-64I3JVYM.js → chunk-PWWSIB2A.js}

@@ -1,16 +1,16 @@
 import { createRequire as __clioCreateRequire } from "node:module"; const require = __clioCreateRequire(import.meta.url);
 import {
   typebox_exports
-} from "./chunk-5B2AEOW5.js";
+} from "./chunk-GH5ZR6JP.js";
 import {
   ToolNames
-} from "./chunk-K6BSR66V.js";
+} from "./chunk-EHOSNVVM.js";
 import {
   StringEnum
-} from "./chunk-YPC6ZR5L.js";
+} from "./chunk-5CMARGPF.js";
 import {
   init_esm_shims
-} from "./chunk-3R73A4XB.js";
+} from "./chunk-ECBHH7LU.js";
 
 // src/tools/codewiki/code-nav-surface.ts
 init_esm_shims();
@@ -49,4 +49,4 @@ export {
   CODE_NAV_MAX_LIMIT,
   codeNavToolSurface
 };
-//# sourceMappingURL=chunk-64I3JVYM.js.map
+//# sourceMappingURL=chunk-PWWSIB2A.js.map

package/dist/{chunk-2STGEDFV.js → chunk-QEQISF75.js}

@@ -1,7 +1,7 @@
 import { createRequire as __clioCreateRequire } from "node:module"; const require = __clioCreateRequire(import.meta.url);
 import {
   init_esm_shims
-} from "./chunk-3R73A4XB.js";
+} from "./chunk-ECBHH7LU.js";
 
 // src/cli/oauth-manual-input.ts
 init_esm_shims();
@@ -97,4 +97,4 @@ export {
   createDelayedManualCodeInput,
   promptOAuthSelection
 };
-//# sourceMappingURL=chunk-2STGEDFV.js.map
+//# sourceMappingURL=chunk-QEQISF75.js.map

package/dist/{chunk-3DPEIQKN.js → chunk-QH3ZTUOA.js}

@@ -1,7 +1,7 @@
 import { createRequire as __clioCreateRequire } from "node:module"; const require = __clioCreateRequire(import.meta.url);
 import {
   init_esm_shims
-} from "./chunk-3R73A4XB.js";
+} from "./chunk-ECBHH7LU.js";
 
 // src/domains/session/prompt-cache.ts
 init_esm_shims();
@@ -110,4 +110,4 @@ export {
   topExpectedColdReason,
   foldPromptCacheTelemetry
 };
-//# sourceMappingURL=chunk-3DPEIQKN.js.map
+//# sourceMappingURL=chunk-QH3ZTUOA.js.map

package/dist/{chunk-YAKGTXEV.js → chunk-QRFXEO6Y.js}

@@ -1,7 +1,7 @@
 import { createRequire as __clioCreateRequire } from "node:module"; const require = __clioCreateRequire(import.meta.url);
 import {
   init_esm_shims
-} from "./chunk-3R73A4XB.js";
+} from "./chunk-ECBHH7LU.js";
 
 // src/engine/tui-primitives.ts
 init_esm_shims();
@@ -14,4 +14,4 @@ export {
   visibleWidth,
   wrapTextWithAnsi
 };
-//# sourceMappingURL=chunk-YAKGTXEV.js.map
+//# sourceMappingURL=chunk-QRFXEO6Y.js.map

package/dist/{chunk-35MSIRKH.js → chunk-QUIJZSDW.js}

@@ -1,7 +1,7 @@
 import { createRequire as __clioCreateRequire } from "node:module"; const require = __clioCreateRequire(import.meta.url);
 import {
   init_esm_shims
-} from "./chunk-3R73A4XB.js";
+} from "./chunk-ECBHH7LU.js";
 
 // src/domains/mux/operations.ts
 init_esm_shims();
@@ -42,4 +42,4 @@ export {
   PANES_PRESET_IDS,
   resolvePanesPresetId
 };
-//# sourceMappingURL=chunk-35MSIRKH.js.map
+//# sourceMappingURL=chunk-QUIJZSDW.js.map

package/dist/{chunk-HHV2GANA.js → chunk-R2P2U3ZS.js}

@@ -1,7 +1,7 @@
 import { createRequire as __clioCreateRequire } from "node:module"; const require = __clioCreateRequire(import.meta.url);
 import {
   init_esm_shims
-} from "./chunk-3R73A4XB.js";
+} from "./chunk-ECBHH7LU.js";
 
 // src/core/path-boundary.ts
 init_esm_shims();
@@ -85,4 +85,4 @@ export {
   pathBoundaryEntryCovers,
   pathBoundaryCovers
 };
-//# sourceMappingURL=chunk-HHV2GANA.js.map
+//# sourceMappingURL=chunk-R2P2U3ZS.js.map

package/dist/chunk-R6MAYTMS.js

@@ -0,0 +1,108 @@
+import { createRequire as __clioCreateRequire } from "node:module"; const require = __clioCreateRequire(import.meta.url);
+import {
+  truncateToWidth
+} from "./chunk-QRFXEO6Y.js";
+import {
+  EVIDENCE_TAGS,
+  listEvidenceOverviews,
+  loadEvidenceTrustStatus
+} from "./chunk-SDWNDICN.js";
+import {
+  trustVerdict
+} from "./chunk-6CDNRHWH.js";
+import {
+  sanitizeCallTargetText
+} from "./chunk-2GPGAE5W.js";
+import {
+  clioDataDir
+} from "./chunk-CTTI7G3T.js";
+import {
+  init_esm_shims
+} from "./chunk-ECBHH7LU.js";
+
+// src/domains/evidence/inventory.ts
+init_esm_shims();
+var EVIDENCE_INVENTORY_MAX_ARTIFACTS = 12;
+var EVIDENCE_INVENTORY_MAX_IDS = 8;
+var IDENTITY_WIDTH = 128;
+var VERDICT_SEVERITY = ["compromised", "unverified", "unknown", "grounded", "reviewed"];
+function bounded(value, width) {
+  const sanitized = sanitizeCallTargetText(value);
+  if (sanitized.length === 0) return "unavailable";
+  return sanitizeCallTargetText(truncateToWidth(sanitized, width, "\u2026", false));
+}
+function identities(values) {
+  const seen = [];
+  for (const value of values) {
+    const text = bounded(value, IDENTITY_WIDTH);
+    if (!seen.includes(text)) seen.push(text);
+    if (seen.length >= EVIDENCE_INVENTORY_MAX_IDS) break;
+  }
+  return seen;
+}
+function tally(value) {
+  return typeof value === "number" && Number.isFinite(value) && value >= 0 ? Math.trunc(value) : 0;
+}
+function amount(value) {
+  return typeof value === "number" && Number.isFinite(value) && value >= 0 ? value : 0;
+}
+function byNewest(a, b) {
+  return (Date.parse(b.generatedAt) || 0) - (Date.parse(a.generatedAt) || 0);
+}
+async function evidenceInventorySnapshot(now = Date.now, dataDir = clioDataDir()) {
+  const all = (await listEvidenceOverviews(dataDir)).sort(byNewest);
+  const window = all.slice(0, EVIDENCE_INVENTORY_MAX_ARTIFACTS);
+  const artifacts = [];
+  for (const overview of window) {
+    let verdict = "unknown";
+    let runsCovered = 0;
+    let historical = true;
+    try {
+      const status = await loadEvidenceTrustStatus(dataDir, overview.evidenceId);
+      historical = status.projection !== "canonical";
+      runsCovered = status.runs.length;
+      const verdicts = status.runs.map((run) => trustVerdict(run.status));
+      verdict = VERDICT_SEVERITY.find((candidate) => verdicts.includes(candidate)) ?? "unknown";
+    } catch {
+      verdict = "unknown";
+    }
+    artifacts.push({
+      evidenceId: bounded(overview.evidenceId, IDENTITY_WIDTH),
+      sourceKind: overview.source.kind,
+      generatedAt: overview.generatedAt,
+      startedAt: overview.startedAt,
+      endedAt: overview.endedAt,
+      runIds: identities(overview.runIds),
+      runIdsTruncated: overview.runIds.length > EVIDENCE_INVENTORY_MAX_IDS,
+      agentIds: identities(overview.agentIds),
+      statuses: identities(overview.statuses),
+      tags: overview.tags.filter((tag) => EVIDENCE_TAGS.includes(tag)),
+      totals: {
+        runs: tally(overview.totals.runs),
+        receipts: tally(overview.totals.receipts),
+        toolCalls: tally(overview.totals.toolCalls),
+        toolErrors: tally(overview.totals.toolErrors),
+        blockedToolCalls: tally(overview.totals.blockedToolCalls),
+        protectedArtifacts: tally(overview.totals.protectedArtifacts),
+        tokens: tally(overview.totals.tokens),
+        costUsd: amount(overview.totals.costUsd),
+        wallTimeMs: tally(overview.totals.wallTimeMs)
+      },
+      redactionCount: tally(overview.redactionCount),
+      trust: { verdict, runsCovered, historical }
+    });
+  }
+  return {
+    version: 1,
+    generatedAt: new Date(now()).toISOString(),
+    artifacts,
+    truncated: all.length > window.length
+  };
+}
+
+export {
+  EVIDENCE_INVENTORY_MAX_ARTIFACTS,
+  EVIDENCE_INVENTORY_MAX_IDS,
+  evidenceInventorySnapshot
+};
+//# sourceMappingURL=chunk-R6MAYTMS.js.map

package/dist/{chunk-MUW2BDDH.js → chunk-R6MICQYU.js}

@@ -1,19 +1,19 @@
 import { createRequire as __clioCreateRequire } from "node:module"; const require = __clioCreateRequire(import.meta.url);
 import {
   runPending
-} from "./chunk-GWZNEVM2.js";
+} from "./chunk-EWD5P3GK.js";
 import {
   runDoctor
-} from "./chunk-N2Z7HLVY.js";
+} from "./chunk-K6RDB7IA.js";
 import {
   readStateInfo
-} from "./chunk-IGLP3ODT.js";
+} from "./chunk-E3BQTQUP.js";
 import {
   getVersionInfo
-} from "./chunk-XPLRXC72.js";
+} from "./chunk-GD55RTIW.js";
 import {
   init_esm_shims
-} from "./chunk-3R73A4XB.js";
+} from "./chunk-ECBHH7LU.js";
 
 // src/domains/lifecycle/upgrade-notice.ts
 init_esm_shims();
@@ -63,4 +63,4 @@ export {
   describeUpgradeNotice,
   LifecycleDomainModule
 };
-//# sourceMappingURL=chunk-MUW2BDDH.js.map
+//# sourceMappingURL=chunk-R6MICQYU.js.map

package/dist/{chunk-JDAY6FIL.js → chunk-RLTT5GVY.js}

@@ -3,25 +3,31 @@ import {
   formatSize,
   truncateHead,
   truncateTail
-} from "./chunk-OZNBF4L3.js";
+} from "./chunk-KECNXMDE.js";
 import {
-  byteLength,
-  truncateUtf8
-} from "./chunk-6XLNIQDB.js";
+  createSafetyPolicyEngine
+} from "./chunk-4SVIVOMC.js";
+import {
+  INSTRUCTION_SHAPED_WARNING
+} from "./chunk-WXA2CFJO.js";
 import {
   createRedactionTally,
   redactSecretsText
-} from "./chunk-4BJ5BYCE.js";
+} from "./chunk-O3VV6IVK.js";
+import {
+  byteLength,
+  truncateUtf8
+} from "./chunk-MYI32N4R.js";
 import {
   GUARDRAIL_DEFAULTS,
   resolveGuardrail
-} from "./chunk-S66XZJOF.js";
+} from "./chunk-C27U2TYG.js";
 import {
   clioStateDir
-} from "./chunk-BYP5D4HI.js";
+} from "./chunk-CTTI7G3T.js";
 import {
   init_esm_shims
-} from "./chunk-3R73A4XB.js";
+} from "./chunk-ECBHH7LU.js";
 
 // src/tools/truncate.ts
 init_esm_shims();
@@ -555,6 +561,7 @@ function sweepExpiredToolOffloads(now = Date.now()) {
   const root = join(clioStateDir(), "scratch");
   const cutoff = now - TOOL_OFFLOAD_MAX_AGE_MS;
   let removed = 0;
+  let skipped = 0;
   try {
     for (const session of readdirSync(root, { withFileTypes: true })) {
       if (!session.isDirectory()) continue;
@@ -566,17 +573,20 @@ function sweepExpiredToolOffloads(now = Date.now()) {
           if (statSync(path).mtimeMs >= cutoff) continue;
           rmSync(path, { force: true });
           removed += 1;
-        } catch {
+        } catch (error) {
+          if (error?.code !== "ENOENT") skipped += 1;
         }
       }
       try {
         if (readdirSync(sessionDir).length === 0) rmdirSync(sessionDir);
-      } catch {
+      } catch (error) {
+        if (error?.code !== "ENOENT") skipped += 1;
       }
     }
-  } catch {
+  } catch (error) {
+    if (error?.code !== "ENOENT") skipped += 1;
   }
-  return removed;
+  return { removed, skipped };
 }
 function writeToolOffload(text, context, maxBytes = RESULT_OFFLOAD_MAX_BYTES, digest = createHash2("sha256").update(text).digest("hex")) {
   try {
@@ -740,7 +750,7 @@ function withOffloadMetadata(result, offloadPath, capturedBytes, displayedBytes,
   };
   return { ...result, details: mergeDetails(result.details, resultSize) };
 }
-function shapeToolResult(spec, result, context, requestedDisposition) {
+function shapeTextToolResultBody(spec, result, context, requestedDisposition) {
   if (existingDisposition(result.details) !== null) return result;
   const hardMaxBytes = maxBytesFor(spec, context);
   const disposition = normalizeToolResultDisposition(spec, hardMaxBytes, requestedDisposition);
@@ -823,6 +833,86 @@ function shapeToolResult(spec, result, context, requestedDisposition) {
     modelContext: projection.text
   };
 }
+function shapeTextToolResult(spec, result, context, requestedDisposition) {
+  const shaped = shapeTextToolResultBody(spec, result, context, requestedDisposition);
+  const warning = `[middleware:warn] ${INSTRUCTION_SHAPED_WARNING}`;
+  if (!resultText(result).includes(warning)) return shaped;
+  const hardMaxBytes = maxBytesFor(spec, context);
+  const disposition = normalizeToolResultDisposition(spec, hardMaxBytes, requestedDisposition);
+  const preserve = (text, cap, tail) => {
+    if (text.startsWith(warning) && byteLength(text) <= cap) return text;
+    const prefix = `${warning}
+
+`;
+    const remainder = text.split(warning).join("").trimStart();
+    const allowance = Math.max(0, cap - byteLength(prefix));
+    if (allowance === 0) return truncateUtf8(warning, cap, "");
+    const body = tail ? truncateTail2(remainder, { maxBytes: allowance, maxLines: Number.MAX_SAFE_INTEGER }).content : truncateUtf8(remainder, allowance, "");
+    return prefix + body;
+  };
+  const output = preserve(
+    resultText(shaped),
+    Math.min(hardMaxBytes, disposition?.presentation.maxBytes ?? hardMaxBytes),
+    disposition?.presentation.overflow === "tail"
+  );
+  const modelContext = shaped.modelContext === void 0 ? void 0 : preserve(
+    shaped.modelContext,
+    Math.min(hardMaxBytes, disposition?.context.maxBytes ?? hardMaxBytes),
+    disposition?.context.mode === "bounded" && disposition.context.excerpt === "tail"
+  );
+  const previous = existingDisposition(shaped.details);
+  const details = { ...shaped.details };
+  if (previous !== null)
+    details.resultDisposition = {
+      ...previous,
+      presentation: { ...previous.presentation, content: output },
+      displayedBytes: byteLength(output),
+      contextBytes: byteLength(modelContext ?? output),
+      presentationTruncated: previous.presentationTruncated || byteLength(resultText(shaped)) > byteLength(output),
+      contextTruncated: previous.contextTruncated || byteLength(shaped.modelContext ?? "") > byteLength(modelContext ?? "")
+    };
+  const size = detailsRecord(shaped.details, "resultSize");
+  if (size !== null) details.resultSize = { ...size, shownBytes: byteLength(output) };
+  return {
+    ...shaped,
+    ...shaped.kind === "ok" ? { output } : { message: output },
+    ...modelContext === void 0 ? {} : { modelContext },
+    details
+  };
+}
+function shapeToolResult(spec, result, context, requestedDisposition) {
+  if (result.kind !== "ok" || !result.images?.length)
+    return shapeTextToolResult(spec, result, context, requestedDisposition);
+  const hardMaxBytes = maxBytesFor(spec, context);
+  const disposition = normalizeToolResultDisposition(spec, hardMaxBytes, requestedDisposition);
+  const maxBytes = Math.min(hardMaxBytes, disposition?.context.maxBytes ?? hardMaxBytes);
+  const images = [];
+  let imageBytes = 0;
+  for (const image of result.images) {
+    const bytes = byteLength(image.data);
+    if (context?.supportsImages === true && disposition?.context.mode !== "metadata-only" && bytes + imageBytes < maxBytes - 512) {
+      images.push(image);
+      imageBytes += bytes;
+    }
+  }
+  const omitted = result.images.length - images.length;
+  const notice = omitted > 0 ? `[${omitted} image(s) omitted: model capability, context policy, or tool result byte cap.]
+` : "";
+  const remaining = Math.max(1, maxBytes - imageBytes);
+  const shaped = shapeTextToolResult(
+    spec,
+    { ...result, output: notice + result.output, images },
+    { ...context, toolResultMaxBytes: remaining },
+    requestedDisposition
+  );
+  if (shaped.kind !== "ok") return shaped;
+  return {
+    ...shaped,
+    images,
+    output: truncateUtf8(shaped.output, remaining, ""),
+    ...shaped.modelContext === void 0 ? {} : { modelContext: truncateUtf8(shaped.modelContext, remaining, "") }
+  };
+}
 
 // src/tools/observation.ts
 init_esm_shims();
@@ -1049,7 +1139,11 @@ ${noticeLine(input, bodyBytes, totalBytes, offloadPath, next)}`;
 ${limitedBudgetNote(input.reservation)}`;
     }
   }
-  const shownBytes = byteLength(output);
+  if ((input.withheldPaths ?? 0) > 0 && format === "text")
+    output += `
+
+[${input.withheldPaths} protected paths withheld by zero-access policy]`;
+  const shownBytes = byteLength(output) + (input.images ?? []).reduce((bytes, image) => bytes + byteLength(image.data), 0);
   recordSpentBytes(input.reservation, shownBytes);
   const budget = budgetDetails(input.reservation);
   const observation = {
@@ -1069,7 +1163,27 @@ ${limitedBudgetNote(input.reservation)}`;
     ...offloadPath !== null ? { offloadPath } : {},
     ...budget !== null ? { budget } : {}
   };
-  return { kind: "ok", output, details: { ...input.details ?? {}, observation } };
+  return {
+    kind: "ok",
+    output,
+    ...input.images?.length ? { images: input.images } : {},
+    details: { ...input.details ?? {}, observation }
+  };
+}
+function createObservationPathFilter(cwd = process.cwd(), allowsPath) {
+  const policy = allowsPath ? void 0 : createSafetyPolicyEngine({ cwd });
+  const allows = allowsPath ?? ((path) => policy?.evaluate({ tool: "read", args: { path } }).reasonCode !== "path-policy:zeroAccessPaths");
+  const withheld = /* @__PURE__ */ new Set();
+  return {
+    allows(path) {
+      if (allows(path)) return true;
+      withheld.add(path);
+      return false;
+    },
+    get withheldPaths() {
+      return withheld.size;
+    }
+  };
 }
 
 export {
@@ -1095,6 +1209,7 @@ export {
   commitObservationReservation,
   releaseObservation,
   observationBudgetExhausted,
-  finalizeObservation
+  finalizeObservation,
+  createObservationPathFilter
 };
-//# sourceMappingURL=chunk-JDAY6FIL.js.map
+//# sourceMappingURL=chunk-RLTT5GVY.js.map

package/dist/{chunk-ZWPRK62N.js → chunk-RXIOCVBZ.js}

@@ -2,24 +2,28 @@ import { createRequire as __clioCreateRequire } from "node:module"; const requir
 import {
   receiptGatewayRoutingLabel,
   receiptResponseModelIdObservationLabel
-} from "./chunk-AF4YM7Z4.js";
+} from "./chunk-SDWNDICN.js";
 import {
   adaptRunReceiptTrustStatus,
   formatTrustAxes,
   formatTrustSummary
-} from "./chunk-IWT4SF4R.js";
+} from "./chunk-6CDNRHWH.js";
 import {
   formatBudgetPolicy,
   formatBudgetReasons,
   formatBudgetRequest,
   formatEffectiveBudget
-} from "./chunk-PAJQJ7BS.js";
+} from "./chunk-TZ7MFRG4.js";
+import {
+  RESULT_SUMMARY_MAX_BYTES_CEILING,
+  resultContractAuthorship
+} from "./chunk-OQM5IVJY.js";
 import {
   mentionsWorkerToolCallCap
-} from "./chunk-S66XZJOF.js";
+} from "./chunk-C27U2TYG.js";
 import {
   init_esm_shims
-} from "./chunk-3R73A4XB.js";
+} from "./chunk-ECBHH7LU.js";
 
 // src/tools/worker-evidence.ts
 init_esm_shims();
@@ -97,6 +101,7 @@ function receiptEvidenceLabels(receipt, verification, integrity) {
   return [
     ...canonical,
     `receipt_integrity=verified/v${receipt.integrity.version}/${receipt.integrity.algorithm}`,
+    ...documenterDeliveryLabels(receipt),
     `evidence_verification=${verification.state}/${verification.basis}`,
     `host_verification=${receipt.hostVerification?.status ?? "not_requested"}`,
     ...responseModelIdObservation ? [responseModelIdObservation] : [],
@@ -108,6 +113,19 @@ function receiptEvidenceLabels(receipt, verification, integrity) {
     projectContext
   ];
 }
+function documenterDeliveryLabels(receipt) {
+  if (receipt.agentId !== "documenter" || !receipt.quality.resultContract?.sourceId.startsWith("agent-result-contract:mutation-report:"))
+    return [];
+  const output = receipt.output;
+  const summary = output?.state === "final" ? resultContractAuthorship(
+    { kind: "mutation-report", maxSummaryBytes: RESULT_SUMMARY_MAX_BYTES_CEILING },
+    output.text
+  ).summary : null;
+  return [
+    `terminal Documenter result: ${summary === null ? "no inline summary is available" : "the inline deliverable or limitation is in output.text JSON field summary"}. Execution success and contract conformance alone do not prove the requested explanation was delivered.`,
+    "Read the summary or the task-authorized artifact once and check it against the requested deliverable. If it is absent, incomplete, or states a limitation, report the specific limitation and the run ID; do not repeatedly read this unchanged terminal receipt or poll it for new output. Keep any separately authorized recovery and its outcome distinct from the original run."
+  ];
+}
 function canonicalTrustLabels(status) {
   return [`trust=${JSON.stringify(formatTrustSummary(status))}`, formatTrustAxes(status)];
 }
@@ -176,4 +194,4 @@ export {
   workerTextLabel,
   workerTextNonEvidenceNotices
 };
-//# sourceMappingURL=chunk-ZWPRK62N.js.map
+//# sourceMappingURL=chunk-RXIOCVBZ.js.map