@iowarp/clio-coder 0.4.4 → 0.4.5

package/dist/{chunk-36CT5VVL.js → chunk-U2JOLB7O.js}

@@ -2,58 +2,56 @@ import { createRequire as __clioCreateRequire } from "node:module"; const requir
 import {
   resolveFdBinary,
   resolveRgBinary
-} from "./chunk-BMS5RKQY.js";
+} from "./chunk-JABWPKFY.js";
 import {
   webFetchToolSurface
-} from "./chunk-2CU2H6KE.js";
+} from "./chunk-BBV5TKE6.js";
 import {
   verifyToolSurface
-} from "./chunk-GX5WYQO4.js";
+} from "./chunk-GXCCHKN6.js";
 import {
   codeNavToolSurface
-} from "./chunk-RXTN6AKH.js";
+} from "./chunk-PWWSIB2A.js";
 import {
   contextToolSurface
-} from "./chunk-3UNOLWNZ.js";
-import {
-  compileGlobRegex,
-  fallbackIgnoredDirs,
-  fdIgnoreArgs,
-  normalizeGlobInput,
-  rgIgnoreArgs
-} from "./chunk-VG7TBQIY.js";
+} from "./chunk-KTFSFCVN.js";
 import {
   RESPONSE_SCHEMA_RUNTIME_ID,
   bashTool,
   builtin,
   createAskUserTool,
-  networkToolsDisabled,
   readMaxBytes,
   readTool,
   renderAgentLedger
-} from "./chunk-75W7L2E2.js";
+} from "./chunk-TZ7MFRG4.js";
 import {
   hashToolCall
-} from "./chunk-6QOTUPRG.js";
+} from "./chunk-KF6GFW6O.js";
 import {
   createTaskBoardStore,
   taskBoardCounts
-} from "./chunk-6PAZTBPA.js";
-import {
-  formatModelRejection
-} from "./chunk-6Q3CYFD3.js";
+} from "./chunk-7HBHHVCK.js";
 import {
   describeCallAction
-} from "./chunk-NEDJ26B5.js";
+} from "./chunk-2GPGAE5W.js";
 import {
+  networkToolsDisabled
+} from "./chunk-SL2RDHKO.js";
+import {
+  compileGlobRegex,
+  fallbackIgnoredDirs,
+  fdIgnoreArgs,
+  normalizeGlobInput,
   resolveReadPath,
   resolveToCwd,
+  rgIgnoreArgs,
   toPosixPath
-} from "./chunk-OQE5J4C6.js";
+} from "./chunk-V552WL53.js";
 import {
   OBSERVATION_POLICY_SLACK_BYTES,
   OBSERVE_SELF_CAPS,
   commitObservationReservation,
+  createObservationPathFilter,
   finalizeObservation,
   isDispositionedToolResultError,
   observationBudgetExhausted,
@@ -61,55 +59,58 @@ import {
   reserveObservation,
   toolResultContextText,
   truncateHead
-} from "./chunk-NAI6ZFCY.js";
+} from "./chunk-RLTT5GVY.js";
 import {
   GREP_MAX_LINE_LENGTH,
   truncateLine
-} from "./chunk-OZNBF4L3.js";
+} from "./chunk-KECNXMDE.js";
+import {
+  formatModelRejection
+} from "./chunk-4SVIVOMC.js";
 import {
   applyToolProfile
-} from "./chunk-QZWQA4DE.js";
+} from "./chunk-CBSKDFWL.js";
 import {
   classify
-} from "./chunk-KFV5L5SK.js";
+} from "./chunk-LUL5Z66S.js";
 import {
   protectArtifact,
   protectedArtifactMutationBlockReason
-} from "./chunk-NXYCB2VD.js";
+} from "./chunk-M6TAYK66.js";
 import {
   gitTool
-} from "./chunk-BJVFZO5U.js";
+} from "./chunk-WJIMKGD6.js";
 import {
   CLIO_ARTIFACT_DIR,
   artifactDefaultPath
-} from "./chunk-GYV6VZOC.js";
+} from "./chunk-NTTS3O53.js";
 import {
   typebox_exports
-} from "./chunk-5B2AEOW5.js";
+} from "./chunk-GH5ZR6JP.js";
 import {
   parseAgentLedgerBody
-} from "./chunk-VAVR4IJY.js";
+} from "./chunk-VQD7NH7Z.js";
 import {
   decisionRef,
   skillActivationFromToolDetails
-} from "./chunk-54X7T7DK.js";
+} from "./chunk-5ZMXGW7P.js";
 import {
   byteLength,
   truncateUtf8
-} from "./chunk-6XLNIQDB.js";
+} from "./chunk-MYI32N4R.js";
 import {
   ToolNames,
   isBuiltinToolName
-} from "./chunk-4NSRCOYP.js";
+} from "./chunk-EHOSNVVM.js";
 import {
   assertSafeId
-} from "./chunk-R346GLFC.js";
+} from "./chunk-UHW5V7HC.js";
 import {
   BusChannels
-} from "./chunk-F4EKGO4N.js";
+} from "./chunk-HL26ADLH.js";
 import {
   incompleteInstallationAdvice
-} from "./chunk-65DEGPJ6.js";
+} from "./chunk-3A3CUMKA.js";
 import {
   GUARDRAIL_DEFAULTS,
   resolveGuardrail,
@@ -117,21 +118,21 @@ import {
   workerSynthesisReserveDirective,
   workerToolCallCapExceededReason,
   workerToolCallCapSynthesisReason
-} from "./chunk-S66XZJOF.js";
+} from "./chunk-C27U2TYG.js";
 import {
   buildSafeToolEnv
-} from "./chunk-TOIVGRUX.js";
+} from "./chunk-GJ24ODAX.js";
 import {
   StringEnum,
   engineStreamSimple
-} from "./chunk-YPC6ZR5L.js";
+} from "./chunk-5CMARGPF.js";
 import {
   clioDataDir,
   clioStateDir
-} from "./chunk-BYP5D4HI.js";
+} from "./chunk-CTTI7G3T.js";
 import {
   init_esm_shims
-} from "./chunk-3R73A4XB.js";
+} from "./chunk-ECBHH7LU.js";
 
 // src/domains/safety/protected-artifacts-registration.ts
 init_esm_shims();
@@ -396,8 +397,9 @@ function readOrchTurnToolCallBudget() {
 }
 function createLoopGuardRegistration(options) {
   const budget = options.turnBlockBudget ?? INTERACTIVE_LOOP_BLOCK_BUDGET;
-  const cap = options.toolCallCap;
-  let softLimit = options.toolCallSoftLimit !== void 0 && Number.isSafeInteger(options.toolCallSoftLimit) && options.toolCallSoftLimit > 0 && (cap === void 0 || options.toolCallSoftLimit <= cap) ? options.toolCallSoftLimit : void 0;
+  const cap = options.toolBudgetAdvisory ? void 0 : options.toolCallCap;
+  let advisoryEmitted = false;
+  let softLimit = !options.toolBudgetAdvisory && options.toolCallSoftLimit !== void 0 && Number.isSafeInteger(options.toolCallSoftLimit) && options.toolCallSoftLimit > 0 && (cap === void 0 || options.toolCallSoftLimit <= cap) ? options.toolCallSoftLimit : void 0;
   const synthesisLockout = options.turnSynthesisLockout === true;
   let softReadReserve = options.toolCallSoftReadReserve ?? 0;
   let softReadReserveThreshold = softLimit !== void 0 && softReadReserve > 0 && softLimit > softReadReserve ? softLimit - softReadReserve : null;
@@ -407,7 +409,7 @@ function createLoopGuardRegistration(options) {
   let softReadReserveEntered = false;
   let reserveDenials = { denials: 0 };
   let deniedAttempts = 0;
-  const denialBudget = cap === void 0 ? void 0 : Math.max(cap, WIDE_BATCH_DENIAL_FLOOR);
+  const denialBudget = options.toolCallCap === void 0 ? void 0 : Math.max(options.toolCallCap, WIDE_BATCH_DENIAL_FLOOR);
   const boundRunDenials = (effects, input) => {
     if (denialBudget === void 0 || !effects.some((effect) => effect.kind === "block_tool")) return effects;
     deniedAttempts += 1;
@@ -634,6 +636,14 @@ function createLoopGuardRegistration(options) {
         recordSuccessfulResult(input);
         recordResultForStagnation(input);
         const effects = [...crossArgumentResultEffects(input)];
+        if (options.toolBudgetAdvisory && !advisoryEmitted && count >= (options.toolCallSoftLimit ?? options.toolCallCap ?? Infinity)) {
+          advisoryEmitted = true;
+          effects.push({
+            kind: "annotate_tool_result",
+            message: `Advisory tool estimate reached (${count} calls). Reassess remaining work and finish the assignment; tools remain available. Explicit task requirements still apply.`,
+            severity: "warn"
+          });
+        }
         if (softReadReserveEntered && softLockout === null && deliveryTools.length === 0 && input.toolName === ToolNames.Read) {
           effects.push({ kind: "require_tool", toolName: ToolNames.Read });
         }
@@ -846,7 +856,7 @@ function projectToolResult(result) {
     return { content: [{ type: "text", text: toolResultContextText(result) }], details };
   }
   return {
-    content: [{ type: "text", text: toolResultContextText(result) }],
+    content: [{ type: "text", text: toolResultContextText(result) }, ...result.images ?? []],
     details,
     ...result.terminate === true ? { terminate: true } : {}
   };
@@ -916,7 +926,7 @@ async function runValidatedToolCall(input) {
   const toolDetails = isRecord(verdict.result.details) ? verdict.result.details : {};
   const skillActivation = spec.name === ToolNames.Context ? skillActivationFromToolDetails(toolDetails, input.invokeOptions?.turnId) : null;
   const result = {
-    content: [{ type: "text", text: toolResultContextText(verdict.result) }],
+    content: [{ type: "text", text: toolResultContextText(verdict.result) }, ...verdict.result.images ?? []],
     details: { ...toolDetails, kind: "ok" }
   };
   if (verdict.result.terminate === true) {
@@ -1034,7 +1044,10 @@ function effectiveToolNames(input) {
 function resolveSessionTools(runtime, toolRegistry, invokeOptions, telemetry) {
   if (!toolRegistry || runtime.runtimeResolution.capabilityDecisions.tools !== true) return [];
   const input = { registry: toolRegistry };
-  if (invokeOptions) input.invokeOptions = invokeOptions;
+  input.invokeOptions = () => ({
+    ...invokeOptions?.(),
+    supportsImages: runtime.runtimeResolution.capabilityDecisions.vision === true
+  });
   if (telemetry) input.telemetry = telemetry;
   return resolveAgentTools(input);
 }
@@ -1122,7 +1135,7 @@ function patchToolChoiceNamedPayload(payload, model, toolName) {
       if (Object.keys(outputConfig).length > 0) patched.output_config = outputConfig;
       else delete patched.output_config;
     }
-    return { ...patched, tools: tools2, tool_choice: { type: "tool", name: toolName } };
+    return { ...patched, tool_choice: { type: "tool", name: toolName } };
   }
   if (model.api === "google-generative-ai" || model.api === "google-vertex") {
     if (!isRecord2(payload.config) || payload.config.tools === void 0 || payload.config.tools === null)
@@ -1533,7 +1546,7 @@ function boundedAlternatives(value) {
 function createDecideTool(deps = {}) {
   return {
     name: ToolNames.Decide,
-    description: "Record a design decision you made between two or more viable options, with the alternatives you rejected and why. Call it before implementing the choice; a later call with the same key supersedes the earlier record.",
+    description: "Record a design decision between viable options, with rejected alternatives and rationale, before implementing. Verify implementation against the active choice before commit; decision trailers do not prove adherence. If policy changes, a call with the same key revises your earlier agent choice; operator choices require operator revision through ask_user. Record the revision before commit.",
     parameters: typebox_exports.Object({
       key: typebox_exports.String({
         description: `Stable kebab-case name for the decision, e.g. "cache-key-shape" (at most ${DECIDE_CAPS.keyBytes} bytes).`
@@ -1613,10 +1626,10 @@ import { readFileSync, writeFileSync as writeFileSync2 } from "node:fs";
 // src/tools/edit-diff.ts
 init_esm_shims();
 
-// node_modules/diff/libesm/index.js
+// node_modules/.pnpm/diff@9.0.0/node_modules/diff/libesm/index.js
 init_esm_shims();
 
-// node_modules/diff/libesm/diff/base.js
+// node_modules/.pnpm/diff@9.0.0/node_modules/diff/libesm/diff/base.js
 init_esm_shims();
 var Diff = class {
   diff(oldStr, newStr, options = {}) {
@@ -1819,10 +1832,10 @@ var Diff = class {
   }
 };
 
-// node_modules/diff/libesm/diff/word.js
+// node_modules/.pnpm/diff@9.0.0/node_modules/diff/libesm/diff/word.js
 init_esm_shims();
 
-// node_modules/diff/libesm/util/string.js
+// node_modules/.pnpm/diff@9.0.0/node_modules/diff/libesm/util/string.js
 init_esm_shims();
 function longestCommonPrefix(str1, str2) {
   let i;
@@ -1951,7 +1964,7 @@ function leadingAndTrailingWs(string, segmenter) {
   return [head, tail];
 }
 
-// node_modules/diff/libesm/diff/word.js
+// node_modules/.pnpm/diff@9.0.0/node_modules/diff/libesm/diff/word.js
 var extendedWordChars = "a-zA-Z0-9_\\u{AD}\\u{C0}-\\u{D6}\\u{D8}-\\u{F6}\\u{F8}-\\u{2C6}\\u{2C8}-\\u{2D7}\\u{2DE}-\\u{2FF}\\u{1E00}-\\u{1EFF}";
 var tokenizeIncludingWhitespace = new RegExp(`[${extendedWordChars}]+|\\s+|[^${extendedWordChars}]`, "ug");
 var WordDiff = class extends Diff {
@@ -2094,7 +2107,7 @@ function diffWordsWithSpace(oldStr, newStr, options) {
   return wordsWithSpaceDiff.diff(oldStr, newStr, options);
 }
 
-// node_modules/diff/libesm/diff/line.js
+// node_modules/.pnpm/diff@9.0.0/node_modules/diff/libesm/diff/line.js
 init_esm_shims();
 var LineDiff = class extends Diff {
   constructor() {
@@ -2672,7 +2685,7 @@ var evidenceTool = {
     try {
       const dataDir = clioDataDir();
       if (mode === "list") {
-        const { evidenceInventorySnapshot } = await import("./inventory-C26CFDRR.js");
+        const { evidenceInventorySnapshot } = await import("./inventory-K2OZ36YJ.js");
         return boundedResult(await evidenceInventorySnapshot(Date.now, dataDir));
       }
       const id = mode === "inspect" ? args.id : args.runId;
@@ -2680,8 +2693,8 @@ var evidenceTool = {
         return { kind: "error", message: `evidence: ${mode} requires ${mode === "inspect" ? "id" : "runId"}` };
       }
       assertSafeId(id, mode === "inspect" ? "evidence" : "run");
-      const { buildEvidence, EvidenceNotFoundError, inspectEvidence, loadEvidenceGateDecisions } = await import("./evidence-4F5USFKH.js");
-      const { evidenceDetailSnapshot } = await import("./detail-A7JAVSIG.js");
+      const { buildEvidence, EvidenceNotFoundError, inspectEvidence, loadEvidenceGateDecisions } = await import("./evidence-DTGEN456.js");
+      const { evidenceDetailSnapshot } = await import("./detail-5572VLBO.js");
       let evidenceId = mode === "run" ? `run-${id}` : id;
       let inspected;
       try {
@@ -2931,11 +2944,13 @@ function renderFindResult(input) {
   if (ordered.paths.length === 0) {
     return finalizeObservation({
       tool: ToolNames.Find,
+      withheldPaths: input.withheldPaths,
       unit: "paths",
-      output: "No files found matching pattern",
+      output: "No visible files found matching pattern",
       shownCount: 0,
-      totalCount: 0,
-      truncated: false,
+      totalCount: collected >= collectLimit ? null : 0,
+      truncated: collected >= collectLimit,
+      ...collected >= collectLimit ? { next: `limit=${limit * 2}` } : {},
       reservation,
       ...options ? { options } : {}
     });
@@ -2960,6 +2975,7 @@ function renderFindResult(input) {
   }
   return finalizeObservation({
     tool: ToolNames.Find,
+    withheldPaths: input.withheldPaths,
     unit: "paths",
     output: truncation.content,
     // Offload only when the byte cap cut collected paths; a bare result
@@ -3029,10 +3045,14 @@ var findTool = {
           return { kind: "error", message: `find: ${message}` };
         }
       }
+      const collectedCount = collectedPaths.length;
+      const pathFilter = createObservationPathFilter(process.cwd(), options?.allowsObservationPath);
+      collectedPaths = collectedPaths.filter((entry) => pathFilter.allows(join(searchPath, entry)));
       const ordered = order === "mtime" ? orderByMtime(collectedPaths, searchPath, limit, collectLimit) : { paths: collectedPaths.slice(0, limit), candidateCapHit: false, candidateCap: null };
       return renderFindResult({
+        withheldPaths: pathFilter.withheldPaths,
         ordered,
-        collected: collectedPaths.length,
+        collected: collectedCount,
         collectLimit,
         limit,
         order,
@@ -3082,6 +3102,7 @@ function renderGrepResult(input) {
   if (lines.length === 0) {
     return finalizeObservation({
       tool: ToolNames.Grep,
+      withheldPaths: input.withheldPaths,
       unit: MODE_UNITS[mode],
       output: NO_MATCH_OUTPUT,
       shownCount: 0,
@@ -3112,6 +3133,7 @@ function renderGrepResult(input) {
   }
   return finalizeObservation({
     tool: ToolNames.Grep,
+    withheldPaths: input.withheldPaths,
     unit: MODE_UNITS[mode],
     output,
     // Offload only when the byte cap cut collected content; a bare match
@@ -3167,6 +3189,7 @@ async function runRipgrep(input) {
     const lineNumber = data?.line_number;
     const lineText = data?.lines?.text;
     if (typeof filePath !== "string" || typeof lineNumber !== "number" || typeof lineText !== "string") return;
+    if (!input.pathFilter.allows(filePath)) return;
     const { text, wasTruncated } = truncateLine(sanitizeMatchText(lineText));
     if (wasTruncated) linesTruncated = true;
     const isMatch = type === "match";
@@ -3185,6 +3208,8 @@ async function runRipgrep(input) {
   const onListLine = (line, stop) => {
     const trimmed = line.replace(/\r$/, "");
     if (trimmed.length === 0) return;
+    const filePath = input.mode === "count" ? trimmed.slice(0, trimmed.lastIndexOf(":")) : trimmed;
+    if (!input.pathFilter.allows(filePath)) return;
     let text;
     if (input.mode === "count") {
       const sep = trimmed.lastIndexOf(":");
@@ -3215,6 +3240,7 @@ async function runRipgrep(input) {
     return { kind: "error", message: `grep: ${result.stderr.trim() || `ripgrep exited with code ${result.exitCode}`}` };
   }
   return renderGrepResult({
+    withheldPaths: input.pathFilter.withheldPaths,
     mode: input.mode,
     lines: rendered,
     matchCount,
@@ -3267,7 +3293,7 @@ function fallbackGrep(input) {
     rendered.push({ text: truncatedLine.text, isMatch });
   };
   const searchFile = (filePath) => {
-    if (limitHit) return;
+    if (limitHit || !input.pathFilter.allows(filePath)) return;
     let buffer;
     try {
       const stat = statSync2(filePath);
@@ -3340,6 +3366,7 @@ function fallbackGrep(input) {
   else searchFile(input.searchPath);
   if (signal?.aborted) return { kind: "error", message: "grep: operation aborted" };
   return renderGrepResult({
+    withheldPaths: input.pathFilter.withheldPaths,
     mode: input.mode,
     lines: rendered,
     matchCount,
@@ -3397,6 +3424,7 @@ var grepTool = {
       });
     }
     const shared = {
+      pathFilter: createObservationPathFilter(process.cwd(), options?.allowsObservationPath),
       mode,
       pattern,
       searchPath,
@@ -3666,7 +3694,8 @@ var lsTool = {
       });
     }
     try {
-      const entries = readdirSync2(root).sort((a, b) => a.toLowerCase().localeCompare(b.toLowerCase()));
+      const pathFilter = createObservationPathFilter(process.cwd(), options?.allowsObservationPath);
+      const entries = readdirSync2(root).filter((entry) => pathFilter.allows(path3.join(root, entry))).sort((a, b) => a.toLowerCase().localeCompare(b.toLowerCase()));
       const outputEntries = [];
       let entryLimitReached = false;
       for (const entry of entries) {
@@ -3683,6 +3712,7 @@ var lsTool = {
       if (outputEntries.length === 0) {
         return finalizeObservation({
           tool: ToolNames.Ls,
+          withheldPaths: pathFilter.withheldPaths,
           unit: "entries",
           output: "(empty directory)",
           shownCount: 0,
@@ -3700,6 +3730,7 @@ var lsTool = {
       const truncated = entryLimitReached || truncation.truncated;
       return finalizeObservation({
         tool: ToolNames.Ls,
+        withheldPaths: pathFilter.withheldPaths,
         unit: "entries",
         output: truncation.content,
         // Offload only when the byte cap cut collected entries; a bare
@@ -3857,7 +3888,7 @@ var STATUS_MARK = {
 };
 function waitingTrailer(tasks) {
   return tasks.filter((task) => task.status === "open" || task.status === "handed").map(
-    (task) => `operator tasks waiting: ${task.id} ${JSON.stringify(task.title)} \u2014 pick up with action="pick" id="${task.id}"`
+    (task) => `operator tasks waiting: ${task.id} ${JSON.stringify(task.title)} \u2014 durable status=${task.status}; not completed; pick only if this is the intended operator task, with action="pick" id="${task.id}" before work`
   );
 }
 function renderTaskBoardText(board, userTasks = []) {
@@ -3869,13 +3900,28 @@ function renderTaskBoardText(board, userTasks = []) {
     if (task.status === "blocked" && task.reason) line += ` \u2014 blocked: ${task.reason}`;
     if (task.status === "cancelled" && task.reason) line += ` \u2014 dropped: ${task.reason}`;
     lines.push(line);
-    const outputs = userTasks.find((item) => item.id === task.userTaskId)?.acceptance?.expectedOutputs;
+    const operatorTask = userTasks.find((item) => item.id === task.userTaskId);
+    if (task.userTaskId) {
+      lines.push(
+        `  operator task ${task.userTaskId}: durable status=${operatorTask?.status ?? "unavailable"}; session=${operatorTask?.handedSessionId ?? "unlinked"}; board task=${operatorTask?.boardTaskId ?? "unlinked"}`
+      );
+    }
+    const outputs = operatorTask?.acceptance?.expectedOutputs;
     if (outputs?.length) lines.push(`  expected outputs: ${outputs.join(", ")}`);
-    for (const item of task.requiredValidationEvidence ?? [])
-      lines.push(`  acceptance: ${item.command} (${item.status}; ${item.notes})`);
+    for (const item of task.requiredValidationEvidence ?? []) {
+      if (item.status === "required") {
+        lines.push(
+          `  acceptance requirement: ${item.command} (${item.notes}; declaration only; execution status is in verification receipts)`
+        );
+      } else {
+        lines.push(`  acceptance: ${item.command} (${item.status}; ${item.notes})`);
+      }
+    }
   }
   if (counts.open > 0 && counts.active === 0) {
-    lines.push(`next: start a task with action="start" before working it`);
+    lines.push(
+      `next: start only an authorized task with action="start" before working it; block proposed implementation with a note naming the pending operator decision, or drop it, and wait`
+    );
   }
   lines.push(...waitingTrailer(userTasks));
   return lines.join("\n");
@@ -3940,7 +3986,7 @@ function createTasksTool(deps) {
   };
   return {
     name: ToolNames.Tasks,
-    description: "Session task board. plan declares a titled board (replaces any prior board); add appends tasks; pick moves one operator task uN onto the board; start marks one task active (the current focus); done completes a task (started or still pending) and requires note as the evidence the work actually finished; block parks it with a required reason; drop cancels it; list shows the board. Work that did not happen is blocked or dropped, never done.",
+    description: "Session task board. plan declares a titled board (replaces any prior board); add appends tasks; pick moves one operator task uN onto the board; start marks one task active (the current focus); done completes a task (started or still pending) and requires note as the evidence the work actually finished; block parks it with a required reason; drop cancels it; list shows the board. For an operator handoff, pick the intended uN before work and use its returned linked tN; CLI hand alone does not pick it. Never pick unrelated inbox tasks. Before claiming operator completion, list and confirm the linked board row is completed and the durable operator status is done with the same session/board link; report those IDs and actual states. Work that did not happen is blocked or dropped, never done. A self-created plan is not operator authorization. For proposal-only work, block deferred implementation with note naming the pending operator decision, or drop it; wait for an explicit operator go-ahead before start or implementation. A skill-install choice does not grant that go-ahead.",
     parameters: typebox_exports.Object({
       action: StringEnum(TASKS_ACTIONS, { description: "Board action." }),
       title: typebox_exports.Optional(typebox_exports.String({ description: "Board title (plan)." })),
@@ -3984,7 +4030,10 @@ function createTasksTool(deps) {
       if (typedAction === "list") {
         const board = deps.board.snapshot();
         if (!board) {
-          const output2 = ['no task board yet; declare one with action="plan"', ...waitingTrailer(userTasks)].join("\n");
+          const output2 = [
+            'no task board yet; for an operator handoff, pick the intended uN before work; otherwise declare one with action="plan"',
+            ...waitingTrailer(userTasks)
+          ].join("\n");
           return {
             kind: "ok",
             output: output2,
@@ -4138,7 +4187,7 @@ function registerCoreTools(registry, deps = {}) {
   if (includeNetworkTools) {
     registry.register({
       ...builtin(
-        lazyTool(webFetchToolSurface, async () => (await import("./web-fetch-V4FKSDAV.js")).webFetchTool),
+        lazyTool(webFetchToolSurface, async () => (await import("./web-fetch-MQN4FH3X.js")).webFetchTool),
         { path: "src/tools/web-fetch.ts", scope: "core" }
       )
     });
@@ -4148,13 +4197,13 @@ function registerCoreTools(registry, deps = {}) {
   });
   registry.register({
     ...builtin(
-      lazyTool(verifyToolSurface, async () => (await import("./verify-FWYGPKMR.js")).verifyTool),
+      lazyTool(verifyToolSurface, async () => (await import("./verify-3AS3ULCY.js")).verifyTool),
       { path: "src/tools/verify/index.ts", scope: "core" }
     )
   });
   registry.register({
     ...builtin(
-      lazyTool(codeNavToolSurface, async () => (await import("./code-nav-IJR2DBPR.js")).codeNavTool),
+      lazyTool(codeNavToolSurface, async () => (await import("./code-nav-YXIAEZVS.js")).codeNavTool),
       { path: "src/tools/codewiki/code-nav.ts", scope: "core" }
     )
   });
@@ -4188,9 +4237,9 @@ function registerCoreTools(registry, deps = {}) {
   registry.register({
     ...builtin(
       lazyTool(contextToolSurface, async () => {
-        const { createContextTool } = await import("./context-2DKHWH2T.js");
+        const { createContextTool } = await import("./context-QQ53HSGJ.js");
         if (!session) return createContextTool(skillToolDeps);
-        const { probeWorkspace } = await import("./workspace-ZJ6BFM3Q.js");
+        const { probeWorkspace } = await import("./workspace-DZ7JADBG.js");
         return createContextTool({
           ...skillToolDeps,
           ...readSessionEntries ? {
@@ -4286,4 +4335,4 @@ export {
   registerCoreTools,
   assertRegisteredBuiltinTools
 };
-//# sourceMappingURL=chunk-36CT5VVL.js.map
+//# sourceMappingURL=chunk-U2JOLB7O.js.map

package/dist/{chunk-LL4KHSZI.js → chunk-U2MSJ57E.js}

@@ -1,7 +1,7 @@
 import { createRequire as __clioCreateRequire } from "node:module"; const require = __clioCreateRequire(import.meta.url);
 import {
   init_esm_shims
-} from "./chunk-3R73A4XB.js";
+} from "./chunk-ECBHH7LU.js";
 
 // src/domains/context/working-set/defaults.ts
 init_esm_shims();
@@ -19,4 +19,4 @@ var DEFAULT_WORKING_SET_SETTINGS = {
 export {
   DEFAULT_WORKING_SET_SETTINGS
 };
-//# sourceMappingURL=chunk-LL4KHSZI.js.map
+//# sourceMappingURL=chunk-U2MSJ57E.js.map

package/dist/{chunk-FTMGRKEF.js → chunk-U44YYLVV.js}

@@ -1,13 +1,13 @@
 import { createRequire as __clioCreateRequire } from "node:module"; const require = __clioCreateRequire(import.meta.url);
 import {
   assertSafeId
-} from "./chunk-R346GLFC.js";
+} from "./chunk-UHW5V7HC.js";
 import {
   safeResourceWrite
-} from "./chunk-WEPFGWHJ.js";
+} from "./chunk-ZZFWWYLX.js";
 import {
   init_esm_shims
-} from "./chunk-3R73A4XB.js";
+} from "./chunk-ECBHH7LU.js";
 
 // src/domains/eval/schema/execution-envelope.ts
 init_esm_shims();
@@ -1526,4 +1526,4 @@ export {
   loadEvalArtifactV4,
   parseEvalArtifactV4
 };
-//# sourceMappingURL=chunk-FTMGRKEF.js.map
+//# sourceMappingURL=chunk-U44YYLVV.js.map

package/dist/{chunk-YECAMM3D.js → chunk-U7H5WRG5.js}

@@ -1,17 +1,17 @@
 import { createRequire as __clioCreateRequire } from "node:module"; const require = __clioCreateRequire(import.meta.url);
 import {
   enabledExtensionResourceRoots
-} from "./chunk-TQAHXW6Y.js";
+} from "./chunk-22PQ4TX4.js";
 import {
   require_dist
-} from "./chunk-APJ265NV.js";
+} from "./chunk-B5GGDIHT.js";
 import {
   clioConfigDir
-} from "./chunk-BYP5D4HI.js";
+} from "./chunk-CTTI7G3T.js";
 import {
   __toESM,
   init_esm_shims
-} from "./chunk-3R73A4XB.js";
+} from "./chunk-ECBHH7LU.js";
 
 // src/domains/resources/common-loader.ts
 init_esm_shims();
@@ -120,4 +120,4 @@ export {
   splitYamlFrontmatter,
   stringField
 };
-//# sourceMappingURL=chunk-YECAMM3D.js.map
+//# sourceMappingURL=chunk-U7H5WRG5.js.map