@iowarp/clio-coder 0.4.4 → 0.4.5

package/dist/{chunk-6QOTUPRG.js → chunk-KF6GFW6O.js}

@@ -4,20 +4,25 @@ import {
   extractCommandDeleteTargets,
   extractCommandWriteTargets,
   toolMutationPaths
-} from "./chunk-NXYCB2VD.js";
+} from "./chunk-M6TAYK66.js";
 import {
   PROJECT_VERIFIER_CATALOG_RELATIVE_PATH
-} from "./chunk-DXKJURES.js";
+} from "./chunk-MDU3C27C.js";
+import {
+  asDirectoryPathBoundary,
+  pathBoundaryEntryCovers,
+  resolvePathBoundary
+} from "./chunk-R2P2U3ZS.js";
 import {
   isProjectVerifierCheckId,
   isVerificationScriptName
-} from "./chunk-UL3WSD3F.js";
+} from "./chunk-M4KFUXS7.js";
 import {
   ToolNames
-} from "./chunk-4NSRCOYP.js";
+} from "./chunk-EHOSNVVM.js";
 import {
   init_esm_shims
-} from "./chunk-3R73A4XB.js";
+} from "./chunk-ECBHH7LU.js";
 
 // src/domains/safety/finish-contract.ts
 init_esm_shims();
@@ -134,7 +139,7 @@ function mutatingReceipts(recent) {
   for (const entry of recent) {
     const bashMutation = bashExecutionMutationPaths(entry);
     if (bashMutation !== null) {
-      for (const path of bashMutation) pushPath(paths, seen, path);
+      for (const path2 of bashMutation) pushPath(paths, seen, path2);
       continue;
     }
     const call = mutatingToolCall(entry);
@@ -146,7 +151,7 @@ function mutatingReceipts(recent) {
     if (resultId !== null) {
       const candidate = mutationCalls.get(resultId);
       if (candidate !== void 0) {
-        for (const path of candidate.paths) pushPath(paths, seen, path);
+        for (const path2 of candidate.paths) pushPath(paths, seen, path2);
       }
     }
   }
@@ -181,10 +186,10 @@ function bashExecutionMutationPaths(entry) {
   if (record.cancelled === true || record.exitCode !== 0) return null;
   return [...extractCommandWriteTargets(record.command), ...extractCommandDeleteTargets(record.command)];
 }
-function pushPath(paths, seen, path) {
-  if (path.length === 0 || seen.has(path)) return;
-  seen.add(path);
-  paths.push(path);
+function pushPath(paths, seen, path2) {
+  if (path2.length === 0 || seen.has(path2)) return;
+  seen.add(path2);
+  paths.push(path2);
 }
 function collectValidationEvidence(recent, acceptanceChecks, workspaceRoot) {
   const evidence = [];
@@ -328,8 +333,8 @@ function typedValidationSummary(toolName, payload) {
   if (toolName === "verify") {
     const check = typeof args?.check === "string" ? args.check.trim() : "";
     if (check === "frontend") {
-      const path = typeof args?.path === "string" && args.path.trim().length > 0 ? args.path.trim() : "artifact";
-      return `verify frontend ${path}`;
+      const path2 = typeof args?.path === "string" && args.path.trim().length > 0 ? args.path.trim() : "artifact";
+      return `verify frontend ${path2}`;
     }
     if (isVerificationScriptName(check)) return `npm run ${check}`;
     if (isProjectVerifierCheckId(check)) return `verify ${check}`;
@@ -414,11 +419,11 @@ function protectedArtifactEvidence(entry) {
   const record = asRecord(entry);
   if (record?.kind !== "protectedArtifact" || record.action !== "protect") return null;
   const artifact = asRecord(record.artifact);
-  const path = typeof artifact?.path === "string" && artifact.path.trim().length > 0 ? artifact.path.trim() : null;
-  if (path === null) return null;
+  const path2 = typeof artifact?.path === "string" && artifact.path.trim().length > 0 ? artifact.path.trim() : null;
+  if (path2 === null) return null;
   const evidence = {
     kind: "protected_artifact",
-    summary: `protected artifact recorded: ${path}`
+    summary: `protected artifact recorded: ${path2}`
   };
   const turnId = turnIdOf(entry);
   if (turnId !== null) evidence.turnId = turnId;
@@ -599,6 +604,45 @@ function observe(state, key, now) {
   return [newState, { looping, key, count }];
 }
 
+// src/domains/safety/scope.ts
+init_esm_shims();
+import path from "node:path";
+function normalizeRoot(root) {
+  return resolvePathBoundary(process.cwd(), root);
+}
+function isSubset(worker, orchestrator) {
+  for (const action of worker.allowedActions) {
+    if (!orchestrator.allowedActions.has(action)) return false;
+  }
+  for (const root of worker.allowedWriteRoots) {
+    const covered = orchestrator.allowedWriteRoots.some(
+      (outer) => pathBoundaryEntryCovers(normalizeRoot(outer), normalizeRoot(root))
+    );
+    if (!covered) return false;
+  }
+  if (worker.allowNetwork && !orchestrator.allowNetwork) return false;
+  if (worker.allowDispatch && !orchestrator.allowDispatch) return false;
+  return true;
+}
+var READONLY_SCOPE = {
+  allowedActions: /* @__PURE__ */ new Set(["read"]),
+  allowedWriteRoots: [],
+  allowNetwork: true,
+  allowDispatch: false
+};
+var WORKSPACE_SCOPE = {
+  allowedActions: /* @__PURE__ */ new Set(["read", "write", "execute", "dispatch"]),
+  allowedWriteRoots: [asDirectoryPathBoundary(path.resolve(process.cwd()))],
+  allowNetwork: true,
+  allowDispatch: true
+};
+var CONFIRMED_SCOPE = {
+  allowedActions: /* @__PURE__ */ new Set(["read", "write", "execute", "dispatch", "system_modify"]),
+  allowedWriteRoots: [asDirectoryPathBoundary(path.resolve(process.cwd()))],
+  allowNetwork: true,
+  allowDispatch: true
+};
+
 export {
   createLoopState,
   hashToolCall,
@@ -606,6 +650,10 @@ export {
   DEFAULT_RECENT_ENTRY_LIMIT,
   assessFinishContract,
   recentEntries,
-  typedValidationSummary
+  typedValidationSummary,
+  isSubset,
+  READONLY_SCOPE,
+  WORKSPACE_SCOPE,
+  CONFIRMED_SCOPE
 };
-//# sourceMappingURL=chunk-6QOTUPRG.js.map
+//# sourceMappingURL=chunk-KF6GFW6O.js.map

package/dist/{chunk-BTK3SSSK.js → chunk-KMF54VH3.js}

@@ -1,7 +1,7 @@
 import { createRequire as __clioCreateRequire } from "node:module"; const require = __clioCreateRequire(import.meta.url);
 import {
   init_esm_shims
-} from "./chunk-3R73A4XB.js";
+} from "./chunk-ECBHH7LU.js";
 
 // src/core/naming-events.ts
 init_esm_shims();
@@ -64,4 +64,4 @@ export {
   normalizeClioCoderEventRecord,
   normalizeClioCoderEventTree
 };
-//# sourceMappingURL=chunk-BTK3SSSK.js.map
+//# sourceMappingURL=chunk-KMF54VH3.js.map

package/dist/chunk-KPRLAMP4.js

@@ -0,0 +1,32 @@
+import { createRequire as __clioCreateRequire } from "node:module"; const require = __clioCreateRequire(import.meta.url);
+import {
+  init_esm_shims
+} from "./chunk-ECBHH7LU.js";
+
+// src/domains/context/codewiki/cooperative.ts
+init_esm_shims();
+import { setImmediate as yieldToEventLoop } from "node:timers/promises";
+var INDEX_SLICE_MS = 8;
+var settled = Promise.resolve();
+function createSlicer(sliceMs = INDEX_SLICE_MS) {
+  let deadline = performance.now() + sliceMs;
+  let yields = 0;
+  return {
+    tick() {
+      if (performance.now() < deadline) return settled;
+      yields += 1;
+      return yieldToEventLoop().then(() => {
+        deadline = performance.now() + sliceMs;
+      });
+    },
+    get yields() {
+      return yields;
+    }
+  };
+}
+
+export {
+  INDEX_SLICE_MS,
+  createSlicer
+};
+//# sourceMappingURL=chunk-KPRLAMP4.js.map

package/dist/{chunk-ECH6PKUQ.js → chunk-KQ6IDQIB.js}

@@ -1,7 +1,7 @@
 import { createRequire as __clioCreateRequire } from "node:module"; const require = __clioCreateRequire(import.meta.url);
 import {
   init_esm_shims
-} from "./chunk-3R73A4XB.js";
+} from "./chunk-ECBHH7LU.js";
 
 // src/core/path-canonical.ts
 init_esm_shims();
@@ -36,4 +36,4 @@ function canonicalizeExistingPath(absPath) {
 export {
   canonicalizeExistingPath
 };
-//# sourceMappingURL=chunk-ECH6PKUQ.js.map
+//# sourceMappingURL=chunk-KQ6IDQIB.js.map

package/dist/{chunk-3UNOLWNZ.js → chunk-KTFSFCVN.js}

@@ -1,28 +1,39 @@
 import { createRequire as __clioCreateRequire } from "node:module"; const require = __clioCreateRequire(import.meta.url);
 import {
   typebox_exports
-} from "./chunk-5B2AEOW5.js";
+} from "./chunk-GH5ZR6JP.js";
 import {
   ToolNames
-} from "./chunk-4NSRCOYP.js";
+} from "./chunk-EHOSNVVM.js";
 import {
   StringEnum
-} from "./chunk-YPC6ZR5L.js";
+} from "./chunk-5CMARGPF.js";
 import {
   init_esm_shims
-} from "./chunk-3R73A4XB.js";
+} from "./chunk-ECBHH7LU.js";
 
 // src/tools/context/surface.ts
 init_esm_shims();
 var contextToolSurface = {
   name: ToolNames.Context,
-  description: "Environment context: scope=workspace returns the git/project snapshot, scope=docs searches Clio's bundled documentation (omit query to list the corpus), scope=skills lists installed and marketplace skills or loads an installed one by name, scope=recall returns the exact body of an evicted tool result by ref (the turnId named in an [evicted ...] marker). For repository code and the repo's generated wiki use code_nav (mode=wiki).",
+  description: "Environment context: scope=workspace returns the git/project snapshot, scope=docs searches Clio's bundled documentation (omit query to list the corpus), scope=skills lists installed and marketplace skills or loads an installed one by name, scope=recall returns an exact persisted evicted or summarized tool result by ref; omit ref to discover historical results by query with bounded limit/offset pages. For repository code and the repo's generated wiki use code_nav (mode=wiki).",
   parameters: typebox_exports.Object({
     scope: StringEnum(["workspace", "docs", "skills", "recall"], { description: "Context source." }),
-    query: typebox_exports.Optional(typebox_exports.String({ description: "scope=docs: question or terms; omit to list the corpus." })),
+    query: typebox_exports.Optional(
+      typebox_exports.String({
+        description: "scope=docs: question or terms. scope=recall without ref: path, tool, or ref terms; omit to list."
+      })
+    ),
     name: typebox_exports.Optional(typebox_exports.String({ description: "scope=skills: skill name to load; omit to list." })),
-    limit: typebox_exports.Optional(typebox_exports.Number({ description: "scope=docs: max sections (default 5, max 12)." })),
-    ref: typebox_exports.Optional(typebox_exports.String({ description: "scope=recall: ref of the evicted item, as named in its marker." })),
+    limit: typebox_exports.Optional(
+      typebox_exports.Number({
+        description: "scope=docs: max sections (default 5, max 12). scope=recall: max refs (default 8, max 12)."
+      })
+    ),
+    ref: typebox_exports.Optional(typebox_exports.String({ description: "scope=recall: exact persisted result ref; omit for discovery." })),
+    offset: typebox_exports.Optional(
+      typebox_exports.Number({ description: "scope=recall discovery: zero-based offset; follow nextOffset (default 0)." })
+    ),
     include_tree: typebox_exports.Optional(typebox_exports.Boolean({ description: "scope=skills: list files under the skill base_dir." }))
   }),
   baseActionClass: "read",
@@ -32,4 +43,4 @@ var contextToolSurface = {
 export {
   contextToolSurface
 };
-//# sourceMappingURL=chunk-3UNOLWNZ.js.map
+//# sourceMappingURL=chunk-KTFSFCVN.js.map

package/dist/{chunk-57XXR6DR.js → chunk-KYKNBD4Y.js}

@@ -2,14 +2,14 @@ import { createRequire as __clioCreateRequire } from "node:module"; const requir
 import {
   createDelayedManualCodeInput,
   promptOAuthSelection
-} from "./chunk-2STGEDFV.js";
+} from "./chunk-QEQISF75.js";
 import {
   createLifecyclePresenter,
   shortenPath
-} from "./chunk-DQOVN6KV.js";
+} from "./chunk-6YA46L5A.js";
 import {
   fingerprintNativeRuntime
-} from "./chunk-NEKRRTYW.js";
+} from "./chunk-MC3JSVR6.js";
 import {
   INHERITED_PROJECT_CONTEXT,
   acceptInteropAgents,
@@ -18,55 +18,55 @@ import {
   interopProposals,
   renderProposalEntry,
   resolveOnPath
-} from "./chunk-JEIYHLOR.js";
+} from "./chunk-6SYEGZI3.js";
 import {
   initializeClioHome
-} from "./chunk-I7XBWTYH.js";
+} from "./chunk-T53XI6I7.js";
 import {
   column,
   terminalColumns,
   truncate,
   twoColumnRow,
   wrapPlain
-} from "./chunk-2IR2NMPA.js";
+} from "./chunk-ZIDFQJRB.js";
 import {
   credentialWriteFailed,
   printPlaintextCredentialWarning
-} from "./chunk-3ODX73FK.js";
+} from "./chunk-5VTJP36Q.js";
 import {
   printError,
   printOk,
   source_default
-} from "./chunk-JCI2ROMZ.js";
+} from "./chunk-3T4DXWP6.js";
 import {
   isOrchestratorEligibleRuntime,
   probeCapabilitiesForModel,
   readTargetModelSnapshot,
   recordTargetModelSnapshot
-} from "./chunk-JSD46VO2.js";
+} from "./chunk-TEG3RYVZ.js";
 import {
   credentialsPresent
-} from "./chunk-2JH2WHGE.js";
+} from "./chunk-J2FYEQ5L.js";
 import {
   bindAgentProfileInSettings,
   readSettings,
   removeTargetFromSettings,
   settingsPath,
   updateSettings
-} from "./chunk-GHS5EBTQ.js";
+} from "./chunk-FKIOX6DS.js";
 import {
   warnLegacyNaming
-} from "./chunk-D7E7WCDF.js";
+} from "./chunk-DVNAPPXU.js";
 import {
   getVersionInfo
-} from "./chunk-XPLRXC72.js";
+} from "./chunk-GD55RTIW.js";
 import {
   greetLmStudio,
   registerBuiltinRuntimes
-} from "./chunk-6OSVSQL5.js";
+} from "./chunk-ICO4TQ2F.js";
 import {
   THINKING_LEVELS
-} from "./chunk-UXCU4E3T.js";
+} from "./chunk-SE4ZKILO.js";
 import {
   buildProviderSupportEntry,
   configuredTargetsForRuntime,
@@ -74,7 +74,7 @@ import {
   listKnownModelsForRuntime,
   listProviderSupportEntries,
   supportGroupLabel
-} from "./chunk-26QSH3EJ.js";
+} from "./chunk-HHVJNVUJ.js";
 import {
   authStoragePath,
   openAuthStorage,
@@ -82,19 +82,19 @@ import {
   resolveAuthTarget,
   resolveRuntimeAuthTarget,
   targetRequiresAuth
-} from "./chunk-ID64D7PE.js";
+} from "./chunk-HXHFDHB6.js";
 import {
   getRuntimeRegistry
-} from "./chunk-NUGM5KR6.js";
+} from "./chunk-SRCEQKQS.js";
 import {
   getCatalogModelForRuntime
-} from "./chunk-5OIVVPHF.js";
+} from "./chunk-TN5FW4XY.js";
 import {
   resolveClioDirs
-} from "./chunk-BYP5D4HI.js";
+} from "./chunk-CTTI7G3T.js";
 import {
   init_esm_shims
-} from "./chunk-3R73A4XB.js";
+} from "./chunk-ECBHH7LU.js";
 
 // src/cli/configure.ts
 init_esm_shims();
@@ -3490,7 +3490,7 @@ var SECTIONS = [
         label: "Run doctor",
         hint: "read-only health check",
         run: async () => {
-          const { runDoctorCommand } = await import("./doctor-DKICC2SN.js");
+          const { runDoctorCommand } = await import("./doctor-N3LCM2LG.js");
           await runDoctorCommand([]);
         }
       },
@@ -3756,8 +3756,9 @@ async function runConfigureCommand(argv, inStream = input, outStream = output2)
 }
 
 export {
+  resolveSupportedWireModels,
   runTargetRemove,
   runTargetRename,
   runConfigureCommand
 };
-//# sourceMappingURL=chunk-57XXR6DR.js.map
+//# sourceMappingURL=chunk-KYKNBD4Y.js.map

package/dist/{chunk-IRXAATOX.js → chunk-L4N3DWNW.js}

@@ -6,10 +6,10 @@ import {
   normalizePathBoundaryEntry,
   pathBoundaryCovers,
   resolvePathBoundary
-} from "./chunk-HHV2GANA.js";
+} from "./chunk-R2P2U3ZS.js";
 import {
   init_esm_shims
-} from "./chunk-3R73A4XB.js";
+} from "./chunk-ECBHH7LU.js";
 
 // src/domains/dispatch/intent.ts
 init_esm_shims();
@@ -536,4 +536,4 @@ export {
   normalizeIntentExpectedOutputs,
   normalizeIntentVerification
 };
-//# sourceMappingURL=chunk-IRXAATOX.js.map
+//# sourceMappingURL=chunk-L4N3DWNW.js.map

package/dist/{chunk-LCGCVYZ4.js → chunk-LQTKDAUO.js}

@@ -1,7 +1,7 @@
 import { createRequire as __clioCreateRequire } from "node:module"; const require = __clioCreateRequire(import.meta.url);
 import {
   init_esm_shims
-} from "./chunk-3R73A4XB.js";
+} from "./chunk-ECBHH7LU.js";
 
 // src/core/toml.ts
 init_esm_shims();
@@ -54,4 +54,4 @@ export {
   tomlTableAt,
   createTomlFileReader
 };
-//# sourceMappingURL=chunk-LCGCVYZ4.js.map
+//# sourceMappingURL=chunk-LQTKDAUO.js.map

package/dist/{chunk-U6TMQNSI.js → chunk-LTR5QCLS.js}

@@ -1,13 +1,13 @@
 import { createRequire as __clioCreateRequire } from "node:module"; const require = __clioCreateRequire(import.meta.url);
 import {
   AI_AGENT_NAME
-} from "./chunk-6EJMN2Y3.js";
+} from "./chunk-ZTNFYMIO.js";
 import {
   clioStateDir
-} from "./chunk-BYP5D4HI.js";
+} from "./chunk-CTTI7G3T.js";
 import {
   init_esm_shims
-} from "./chunk-3R73A4XB.js";
+} from "./chunk-ECBHH7LU.js";
 
 // src/core/git-commit-attribution.ts
 init_esm_shims();
@@ -443,4 +443,4 @@ export {
   gitCommitAttributionEnabled,
   withManagedGitCommitAttributionEnvironment
 };
-//# sourceMappingURL=chunk-U6TMQNSI.js.map
+//# sourceMappingURL=chunk-LTR5QCLS.js.map