@iowarp/clio-coder 0.4.3 → 0.4.5

package/dist/{chunk-JGRC33J2.js → chunk-5ZMXGW7P.js}

@@ -1,7 +1,7 @@
 import { createRequire as __clioCreateRequire } from "node:module"; const require = __clioCreateRequire(import.meta.url);
 import {
   init_esm_shims
-} from "./chunk-3R73A4XB.js";
+} from "./chunk-ECBHH7LU.js";
 
 // src/core/skill-activation.ts
 init_esm_shims();
@@ -57,6 +57,7 @@ function evaluateSkillToolSurface(policy, tool) {
   const carriedSurface = policy.carriedSurface === true;
   const disallowedBy = entries.filter(([, declared]) => declared.disallowedTools?.includes(tool) === true).map(([name]) => name);
   if (disallowedBy.length > 0) return { skills, mergedAllowedTools: null, disallowedBy, carriedSurface };
+  if (tool === "limitation") return null;
   const allowLists = entries.map(([, declared]) => declared.allowedTools);
   if (allowLists.some((list) => list === void 0 || list.length === 0)) return null;
   const merged = [...new Set(allowLists.flatMap((list) => [...list ?? []]))];
@@ -149,7 +150,13 @@ function autonomyDenyRejection(level, tool, actionClass) {
   return {
     short: `${tool} denied: autonomy level is ${level}`,
     detail: `Clio is at autonomy ${level}: ${actionClass} actions are denied without prompting. Describe the change you would make instead, so the operator can apply it or raise the autonomy level.`,
-    hints: ["Propose the exact edit or command as text.", "The operator can change the level in /settings."]
+    hints: [
+      ...level === "read-only" && actionClass === "execute" ? [
+        "For independent permitted inspection, use the native read, grep, find, or ls tools when available. Do not use them to reproduce the denied execution or write; each call still follows its safety policy."
+      ] : [],
+      "Propose the exact edit or command as text.",
+      "The operator can change the level in interactive /settings or start a new headless run with clio-coder run --autonomy <level>."
+    ]
   };
 }
 function autonomyAskRejection(level, tool, actionClass, exposure = DEFAULT_AUTONOMY_EXPOSURE) {
@@ -183,6 +190,69 @@ function autonomyAskRejection(level, tool, actionClass, exposure = DEFAULT_AUTON
 
 // src/domains/session/entries.ts
 init_esm_shims();
+import { createHash } from "node:crypto";
+var SKILL_CONTEXT_STATE = "skillContextState";
+function skillContextContentHash(content) {
+  return createHash("sha256").update(JSON.stringify(content)).digest("hex");
+}
+function isSkillContextState(value) {
+  return isRecord(value) && value.version === 1 && (value.unknown === void 0 || value.unknown === true) && Array.isArray(value.activationRefs) && value.activationRefs.every((ref) => typeof ref === "string");
+}
+function isSkillContextCheckpoint(value) {
+  return isRecord(value) && value.version === 1 && Array.isArray(value.skills) && value.skills.every(
+    (skill) => isRecord(skill) && [skill.activationRef, skill.requestRef, skill.callRef, skill.resultRef, skill.requestText, skill.contentHash].every(
+      isString
+    ) && isSkillActivation(skill.activation) && Array.isArray(skill.content) && skill.content.every((block) => isRecord(block) && block.type === "text" && typeof block.text === "string")
+  );
+}
+function verifiedSkillContextCheckpoint(value) {
+  if (!isSkillContextCheckpoint(value)) return false;
+  const refs = /* @__PURE__ */ new Set();
+  const names = /* @__PURE__ */ new Set();
+  return value.skills.every((skill) => {
+    const activation = skill.activation;
+    if (![skill.activationRef, skill.requestRef, skill.callRef, skill.resultRef].every((ref) => ref.length > 0) || activation.runId !== void 0 || activation.triggeredBy !== "tool" || activation.turnId !== skill.requestRef || !activation.name || !activation.filePath || !activation.source || !activation.sourceOrigin || !/^[a-f0-9]{64}$/.test(activation.hash) || activation.drift !== void 0 && activation.drift !== "match" || skill.content.length === 0 || skill.content.every((block) => block.text.length === 0) || skill.contentHash !== skillContextContentHash(skill.content) || refs.has(skill.activationRef) || names.has(activation.name))
+      return false;
+    refs.add(skill.activationRef);
+    names.add(activation.name);
+    return true;
+  });
+}
+function isPreservedUserContext(value) {
+  return isRecord(value) && isString(value.turnId) && isString(value.text);
+}
+function mainSkillContextState(entries, policy) {
+  if (!policy) return latestSkillContextState(entries);
+  if (policy.modelActivation === true && policy.carriedSurface !== true && policy.requests.length === 0 && policy.loadedSkillNames.size === 0 && policy.loadedSkillPolicies.size === 0)
+    return latestSkillContextState(entries);
+  if (policy.requests.some((request) => !policy.loadedSkillNames.has(request.name))) return null;
+  const names = [...policy.loadedSkillNames];
+  if (names.length === 0) return null;
+  const activationRefs = [];
+  for (const name of names) {
+    const entry = [...entries].reverse().find(
+      (candidate) => candidate.kind === "skillActivation" && candidate.activation.runId === void 0 && candidate.activation.name === name
+    );
+    if (!entry) return null;
+    activationRefs.push(entry.turnId);
+  }
+  return { version: 1, activationRefs };
+}
+function latestSkillContextState(entries) {
+  for (let index = entries.length - 1; index >= 0; index--) {
+    const entry = entries[index];
+    if (entry?.kind === "custom" && entry.customType === SKILL_CONTEXT_STATE) {
+      return isSkillContextState(entry.data) ? entry.data : void 0;
+    }
+    if (entry?.kind === "compactionSummary" && entry.skillContext !== void 0) {
+      return verifiedSkillContextCheckpoint(entry.skillContext) ? { version: 1, activationRefs: entry.skillContext.skills.map((skill) => skill.activationRef) } : void 0;
+    }
+  }
+  return void 0;
+}
+function decisionRef(interviewId, key) {
+  return `${interviewId}/${key}`;
+}
 var EVICTION_REASONS = [
   "superseded_read",
   "stale_after_mutation",
@@ -287,11 +357,15 @@ function isTaskLedgerEvidence(value) {
 }
 function isDecisionRecord(value) {
   if (!isRecord(value)) return false;
-  if (!isString(value.key) || !/^[a-z0-9]+(?:_[a-z0-9]+)*$/.test(value.key)) return false;
+  if (!isString(value.key) || !/^[a-z0-9]+(?:[_-][a-z0-9]+)*$/.test(value.key)) return false;
   if (!isString(value.value) || !isOneOf(value.status, DECISION_STATUSES) || !isString(value.decidedAt)) return false;
   if (!isOptionalString(value.label) || !isOptionalString(value.source_question)) return false;
+  if (value.source !== void 0 && !isOneOf(value.source, ["operator", "agent"])) return false;
+  if (value.revisionSource !== void 0 && !isOneOf(value.revisionSource, ["operator", "agent"])) return false;
+  if (value.alternatives !== void 0 && !isStringArray(value.alternatives)) return false;
+  if (!isOptionalString(value.rationale)) return false;
   if (!isOptionalString(value.revisedAt) || !isOptionalString(value.correction)) return false;
-  return value.status === "superseded" ? isString(value.revisedAt) : value.revisedAt === void 0 && value.correction === void 0;
+  return value.status === "superseded" ? isString(value.revisedAt) : value.revisedAt === void 0 && value.revisionSource === void 0 && value.correction === void 0;
 }
 function isOptionalCompactionUsage(value) {
   if (value === void 0) return true;
@@ -311,7 +385,7 @@ function isWorkingSetRef(value) {
   return isRecord(value) && isString(value.entry);
 }
 function isEvictedItem(value) {
-  return isRecord(value) && isWorkingSetRef(value.ref) && isOneOf(value.reason, EVICTION_REASONS) && isNumber(value.tokensFreed) && isString(value.marker) && isOptionalString(value.by);
+  return isRecord(value) && isWorkingSetRef(value.ref) && isOneOf(value.reason, EVICTION_REASONS) && isNumber(value.tokensFreed) && isString(value.marker) && (value.alias === void 0 || typeof value.alias === "string" && /^r[1-9]\d*$/.test(value.alias)) && isOptionalString(value.by);
 }
 function isSessionEntry(value) {
   if (!value || typeof value !== "object") return false;
@@ -324,7 +398,7 @@ function isSessionEntry(value) {
     case "bashExecution":
       return isString(v.command) && isString(v.output) && (v.exitCode === null || isNumber(v.exitCode)) && typeof v.cancelled === "boolean" && typeof v.truncated === "boolean" && isOptionalString(v.fullOutputPath) && isOptionalBoolean(v.excludeFromContext);
     case "custom":
-      return isString(v.customType) && isOptionalBoolean(v.display);
+      return isString(v.customType) && isOptionalBoolean(v.display) && (v.customType !== SKILL_CONTEXT_STATE || isSkillContextState(v.data));
     case "modelChange":
       return isString(v.provider) && isString(v.modelId) && isOptionalString(v.target);
     case "thinkingLevelChange":
@@ -334,7 +408,7 @@ function isSessionEntry(value) {
     case "branchSummary":
       return isString(v.fromTurnId) && isString(v.summary);
     case "compactionSummary":
-      return isString(v.summary) && isNumber(v.tokensBefore) && isString(v.firstKeptTurnId) && isOptionalCompactionUsage(v.usage) && (v.trigger === void 0 || isOneOf(v.trigger, COMPACTION_TRIGGERS)) && isOptionalNumber(v.tokensAfter) && isOptionalNumber(v.messagesSummarized) && isOptionalBoolean(v.isSplitTurn);
+      return isString(v.summary) && isNumber(v.tokensBefore) && isString(v.firstKeptTurnId) && isOptionalCompactionUsage(v.usage) && (v.trigger === void 0 || isOneOf(v.trigger, COMPACTION_TRIGGERS)) && isOptionalNumber(v.tokensAfter) && isOptionalNumber(v.messagesSummarized) && isOptionalBoolean(v.isSplitTurn) && (v.skillContext === void 0 || isSkillContextCheckpoint(v.skillContext)) && (v.userContext === void 0 || isPreservedUserContext(v.userContext));
     case "sessionInfo":
       return isOptionalString(v.name) && isOptionalString(v.targetTurnId) && isOptionalString(v.label);
     case "label":
@@ -346,7 +420,7 @@ function isSessionEntry(value) {
     case "taskLedger":
       return isOptionalString(v.boardId) && Array.isArray(v.goals) && v.goals.every(isTaskLedgerGoal) && Array.isArray(v.subgoals) && v.subgoals.every(isTaskLedgerGoal) && isStringArray(v.activeRunIds) && Array.isArray(v.requiredValidationEvidence) && v.requiredValidationEvidence.every(isTaskLedgerEvidence);
     case "decisionLedger":
-      return isString(v.interviewId) && isOneOf(v.interviewStatus, DECISION_INTERVIEW_STATUSES) && isString(v.startedAt) && isString(v.endedAt) && isNumber(v.roundCount) && Number.isInteger(v.roundCount) && v.roundCount >= 0 && isOptionalString(v.summary) && isOptionalString(v.transcriptPath) && (v.exposure === void 0 || isOneOf(v.exposure, AUTONOMY_EXPOSURES)) && Array.isArray(v.decisions) && v.decisions.every(isDecisionRecord);
+      return (v.origin === void 0 || isOneOf(v.origin, ["interview", "agent"])) && isString(v.interviewId) && isOneOf(v.interviewStatus, DECISION_INTERVIEW_STATUSES) && isString(v.startedAt) && isString(v.endedAt) && isNumber(v.roundCount) && Number.isInteger(v.roundCount) && v.roundCount >= 0 && isOptionalString(v.summary) && isOptionalString(v.transcriptPath) && (v.exposure === void 0 || isOneOf(v.exposure, AUTONOMY_EXPOSURES)) && Array.isArray(v.decisions) && v.decisions.every(isDecisionRecord);
     case "workerRun":
       return isString(v.assignmentId) && isString(v.runId) && isOneOf(v.origin, WORKER_RUN_ORIGINS) && isString(v.agentId) && isWorkerRunRuntime(v.runtime) && isOptionalString(v.parentToolCallId);
     case "contextEviction":
@@ -380,7 +454,14 @@ export {
   mapAutonomy,
   autonomyDenyRejection,
   autonomyAskRejection,
+  SKILL_CONTEXT_STATE,
+  skillContextContentHash,
+  verifiedSkillContextCheckpoint,
+  mainSkillContextState,
+  latestSkillContextState,
+  decisionRef,
+  isDecisionRecord,
   isSessionHeader,
   isSessionEntry
 };
-//# sourceMappingURL=chunk-JGRC33J2.js.map
+//# sourceMappingURL=chunk-5ZMXGW7P.js.map

package/dist/chunk-5ZSZEYJK.js

@@ -0,0 +1,119 @@
+import { createRequire as __clioCreateRequire } from "node:module"; const require = __clioCreateRequire(import.meta.url);
+import {
+  cwdHash,
+  sessionPaths
+} from "./chunk-FQOOGXBH.js";
+import {
+  init_esm_shims
+} from "./chunk-ECBHH7LU.js";
+
+// src/domains/session/prompt-manifest.ts
+init_esm_shims();
+import { appendFileSync, existsSync, readFileSync } from "node:fs";
+import { dirname, join } from "node:path";
+var PROMPT_MANIFEST_VERSION = 2;
+var SHA256_HEX = /^[a-f0-9]{64}$/;
+function isCanonicalUtcTimestamp(value) {
+  if (typeof value !== "string") return false;
+  const timestamp = Date.parse(value);
+  return Number.isFinite(timestamp) && new Date(timestamp).toISOString() === value;
+}
+function isRecord(value) {
+  return value !== null && typeof value === "object" && !Array.isArray(value);
+}
+function isNonNegativeInteger(value) {
+  return typeof value === "number" && Number.isInteger(value) && value >= 0;
+}
+function isSha256(value) {
+  return typeof value === "string" && SHA256_HEX.test(value);
+}
+function isPromptManifestSection(value) {
+  return isRecord(value) && typeof value.id === "string" && isNonNegativeInteger(value.tokenEstimate);
+}
+function isPromptManifestFragment(value) {
+  return isRecord(value) && typeof value.id === "string" && typeof value.relPath === "string" && isSha256(value.contentHash) && typeof value.dynamic === "boolean";
+}
+function isProjectPreloadClass(value) {
+  if (value === null || typeof value !== "object" || Array.isArray(value)) return false;
+  const row = value;
+  const integer = (item) => typeof item === "number" && Number.isInteger(item) && item >= 0;
+  const optionalInteger = (item) => item === void 0 || integer(item);
+  const range = (item) => item === null || Array.isArray(item) && item.length === 2 && integer(item[0]) && item[0] >= 1 && integer(item[1]) && item[1] >= item[0];
+  return typeof row.mode === "string" && ["full", "partial", "synopsis", "none"].includes(row.mode) && integer(row.chars) && integer(row.lines) && (row.reason === null || typeof row.reason === "string" && ["size", "lines", "no-clio-md"].includes(row.reason)) && typeof row.nearLimit === "boolean" && typeof row.label === "string" && optionalInteger(row.includedChars) && optionalInteger(row.includedLines) && optionalInteger(row.omittedSupportFragments) && (row.providerSupportsTools === void 0 || row.providerSupportsTools === null || typeof row.providerSupportsTools === "boolean") && (row.sources === void 0 || Array.isArray(row.sources) && row.sources.every((source) => {
+    if (source === null || typeof source !== "object" || Array.isArray(source)) return false;
+    const s = source;
+    return typeof s.path === "string" && typeof s.contentHash === "string" && /^[a-f0-9]{64}$/.test(s.contentHash) && integer(s.availableChars) && integer(s.availableLines) && integer(s.includedChars) && integer(s.includedLines) && s.includedChars <= s.availableChars && s.includedLines <= s.availableLines && range(s.includedRange) && range(s.omittedRange) && (s.omissionReason === null || s.omissionReason === "budget");
+  }));
+}
+function isOptional(value, guard) {
+  return value === void 0 || guard(value);
+}
+function isSessionPromptCompileRecord(value) {
+  if (!isRecord(value)) return false;
+  return isOptional(value.version, isNonNegativeInteger) && isOptional(
+    value.contextWindow,
+    (candidate) => candidate === null ? true : isNonNegativeInteger(candidate)
+  ) && isOptional(
+    value.contextWindowSource,
+    (candidate) => candidate === null ? true : typeof candidate === "string"
+  ) && isCanonicalUtcTimestamp(value.at) && (value.previousHash === null || isSha256(value.previousHash)) && isSha256(value.systemPromptHash) && isNonNegativeInteger(value.tokenEstimate) && (value.thinkingLevel === null || typeof value.thinkingLevel === "string") && (value.projectPreload === null || isProjectPreloadClass(value.projectPreload)) && Array.isArray(value.sections) && value.sections.every(isPromptManifestSection) && Array.isArray(value.fragments) && value.fragments.every(isPromptManifestFragment);
+}
+function getPromptManifestFilePath(meta, stateDir) {
+  const safeMeta = {
+    ...meta,
+    cwdHash: meta.cwdHash || cwdHash(meta.cwd || process.cwd())
+  };
+  if (stateDir !== void 0) {
+    return join(stateDir, "sessions", safeMeta.cwdHash, safeMeta.id, "prompt-manifest.jsonl");
+  }
+  const paths = sessionPaths(safeMeta);
+  return join(dirname(paths.current), "prompt-manifest.jsonl");
+}
+function appendPromptCompileRecord(meta, record) {
+  try {
+    const file = getPromptManifestFilePath(meta);
+    appendFileSync(file, `${JSON.stringify(record)}
+`, "utf8");
+  } catch {
+  }
+}
+function readPromptCompileManifest(meta, stateDir) {
+  const file = getPromptManifestFilePath(meta, stateDir);
+  try {
+    if (!existsSync(file)) return { records: [], errors: [] };
+    const records = [];
+    const errors = [];
+    for (const [index, line] of readFileSync(file, "utf8").split("\n").entries()) {
+      if (line.trim().length === 0) continue;
+      try {
+        const parsed = JSON.parse(line);
+        if (isSessionPromptCompileRecord(parsed)) {
+          records.push(parsed);
+        } else {
+          errors.push({ line: index + 1, message: "invalid prompt manifest record" });
+        }
+      } catch {
+        errors.push({ line: index + 1, message: "invalid JSON" });
+      }
+    }
+    return { records, errors };
+  } catch (err) {
+    return {
+      records: [],
+      errors: [{ line: null, message: err instanceof Error ? err.message : String(err) }]
+    };
+  }
+}
+function readPromptCompileRecords(meta) {
+  return readPromptCompileManifest(meta).records;
+}
+
+export {
+  PROMPT_MANIFEST_VERSION,
+  isProjectPreloadClass,
+  getPromptManifestFilePath,
+  appendPromptCompileRecord,
+  readPromptCompileManifest,
+  readPromptCompileRecords
+};
+//# sourceMappingURL=chunk-5ZSZEYJK.js.map

package/dist/chunk-633EXGZA.js

@@ -0,0 +1,44 @@
+import { createRequire as __clioCreateRequire } from "node:module"; const require = __clioCreateRequire(import.meta.url);
+import {
+  inspectEvidence
+} from "./chunk-SDWNDICN.js";
+import {
+  TRUST_STATUS_AXES,
+  trustVerdict
+} from "./chunk-6CDNRHWH.js";
+import {
+  clioDataDir
+} from "./chunk-CTTI7G3T.js";
+import {
+  init_esm_shims
+} from "./chunk-ECBHH7LU.js";
+
+// src/domains/evidence/detail.ts
+init_esm_shims();
+var EVIDENCE_DETAIL_MAX_RUNS = 16;
+async function evidenceDetailSnapshot(evidenceId, now = Date.now, dataDir = clioDataDir()) {
+  const inspected = await inspectEvidence(dataDir, evidenceId);
+  const all = inspected.trustStatus.runs;
+  const window = all.slice(0, EVIDENCE_DETAIL_MAX_RUNS);
+  return {
+    version: 1,
+    generatedAt: new Date(now()).toISOString(),
+    evidenceId: inspected.overview.evidenceId,
+    sourceKind: inspected.overview.source.kind,
+    canonical: inspected.trustStatus.projection === "canonical",
+    runs: window.map(
+      (run) => ({
+        runId: run.runId,
+        verdict: trustVerdict(run.status),
+        axes: Object.fromEntries(TRUST_STATUS_AXES.map((axis) => [axis, run.status[axis].state]))
+      })
+    ),
+    runsTruncated: all.length > window.length
+  };
+}
+
+export {
+  EVIDENCE_DETAIL_MAX_RUNS,
+  evidenceDetailSnapshot
+};
+//# sourceMappingURL=chunk-633EXGZA.js.map