@iowarp/clio-coder 0.4.4 → 0.4.6

package/dist/{with-panes-BDQEWBRT.js → with-panes-OFTNAR4Y.js}

@@ -1,41 +1,42 @@
 import { createRequire as __clioCreateRequire } from "node:module"; const require = __clioCreateRequire(import.meta.url);
 import {
   createPanesRuntime
-} from "./chunk-3EBYEESD.js";
-import "./chunk-35MSIRKH.js";
-import "./chunk-VIA6RFQZ.js";
+} from "./chunk-A46ILRS2.js";
+import "./chunk-QUIJZSDW.js";
 import {
   createMuxDomainModule,
   createYaziSession,
   resolveYaziBinaries,
   watchViewerCommand
-} from "./chunk-OMQNJVKW.js";
+} from "./chunk-SRZOW5L2.js";
 import {
   ensureYaziProfile,
   yaziProfileDir
-} from "./chunk-3M6DQK6S.js";
-import "./chunk-LCGCVYZ4.js";
-import "./chunk-BMS5RKQY.js";
+} from "./chunk-T334FW2H.js";
+import "./chunk-UQIVHSE4.js";
+import "./chunk-LQTKDAUO.js";
+import "./chunk-JABWPKFY.js";
+import "./chunk-XCUDZQLX.js";
+import "./chunk-K2BLQC5E.js";
 import {
   sanitizeCallTargetText
-} from "./chunk-NEDJ26B5.js";
-import "./chunk-QSNYB6ZV.js";
-import "./chunk-QDC3K2U3.js";
-import "./chunk-D7E7WCDF.js";
-import "./chunk-BTK3SSSK.js";
+} from "./chunk-2GPGAE5W.js";
+import "./chunk-DVNAPPXU.js";
+import "./chunk-KMF54VH3.js";
+import "./chunk-EFSEIZE6.js";
 import {
   BusChannels
-} from "./chunk-F4EKGO4N.js";
-import "./chunk-IWHMRKLL.js";
+} from "./chunk-HL26ADLH.js";
+import "./chunk-E3LEPLQ2.js";
 import {
   clioCacheDir,
   clioConfigDir,
   clioDataDir,
   clioStateDir
-} from "./chunk-BYP5D4HI.js";
+} from "./chunk-CTTI7G3T.js";
 import {
   init_esm_shims
-} from "./chunk-3R73A4XB.js";
+} from "./chunk-ECBHH7LU.js";
 
 // src/entry/with-panes.ts
 init_esm_shims();
@@ -215,7 +216,8 @@ function createWatchPaneController(deps) {
       return false;
     }
   };
-  const openPane = () => deps.mux.openUtilityPane({
+  const openPane = (onFailure) => deps.mux.openUtilityPane({
+    ...onFailure ? { onFailure } : {},
     argv: command(selectionPath, dirs),
     cwd: deps.getCwd(),
     label: "watch",
@@ -243,9 +245,21 @@ function createWatchPaneController(deps) {
       const scanned = await adoptExistingPane();
       if (!scanned) await adoptExistingPane();
       if (paneId !== null) return { status: "watching", runId, paneId, opened: false };
-      const opened = await openPane();
+      let reason = "cannot open the watch pane: no failure reason was supplied by the pane host; check /panes before trying again";
+      const opened = await openPane((failure) => {
+        if (failure.source === "local") {
+          reason = `cannot open the watch pane locally: ${failure.message}`;
+        } else {
+          const details = [
+            `kind=${failure.kind}`,
+            ...failure.wireCode === null ? [] : [`code=${failure.wireCode}`],
+            ...failure.method === null ? [] : [`method=${failure.method}`]
+          ];
+          reason = `cannot open the watch pane (${details.join(", ")}): ${failure.message || "no failure message was supplied by the pane host"}`;
+        }
+      });
       if (opened === null) {
-        return { status: "unavailable", reason: "the pane host refused to open the watch pane" };
+        return { status: "unavailable", reason };
       }
       paneId = opened.paneId;
       return { status: "watching", runId, paneId, opened: true };
@@ -611,4 +625,4 @@ export {
   createWatchPaneController,
   createYaziBridge
 };
-//# sourceMappingURL=with-panes-BDQEWBRT.js.map
+//# sourceMappingURL=with-panes-OFTNAR4Y.js.map

package/dist/worker/entry.js

@@ -17,25 +17,19 @@ import {
   resolveDeliveryTools,
   sanitizeLockedSynthesisMessage,
   workerLoopBlockBudget
-} from "../chunk-36CT5VVL.js";
-import "../chunk-BMS5RKQY.js";
+} from "../chunk-6RYDAVQT.js";
+import "../chunk-JABWPKFY.js";
 import {
   createMiddlewareContractFromSnapshot,
   createMiddlewareToolChoiceControl,
   shouldRequestStalledTurnContinuation
-} from "../chunk-XULDXHTN.js";
-import "../chunk-2CU2H6KE.js";
-import "../chunk-GX5WYQO4.js";
-import "../chunk-RXTN6AKH.js";
-import "../chunk-3UNOLWNZ.js";
-import {
-  CONFIRMED_SCOPE,
-  READONLY_SCOPE,
-  WORKSPACE_SCOPE,
-  isSubset
-} from "../chunk-5PSMVOLM.js";
-import "../chunk-2WZ546HR.js";
-import "../chunk-VG7TBQIY.js";
+} from "../chunk-BT7HGDOX.js";
+import "../chunk-BBV5TKE6.js";
+import "../chunk-3QKXHCGS.js";
+import "../chunk-PWWSIB2A.js";
+import "../chunk-KTFSFCVN.js";
+import "../chunk-XCUDZQLX.js";
+import "../chunk-K2BLQC5E.js";
 import {
   DEFAULT_ESCALATION_FALLBACK,
   DEFAULT_ESCALATION_TIMEOUT_MS,
@@ -52,42 +46,29 @@ import {
   startAntigravityWorkerRun,
   startClaudeCodeWorkerRun,
   validateRehydratedWorkerRuntime
-} from "../chunk-75W7L2E2.js";
-import {
-  createLoopState,
-  observe
-} from "../chunk-6QOTUPRG.js";
-import "../chunk-AUPNRN7C.js";
-import "../chunk-6PAZTBPA.js";
-import {
-  createSafetyPolicyEngine
-} from "../chunk-6Q3CYFD3.js";
+} from "../chunk-P5JMBPDJ.js";
+import "../chunk-K2HL3GBL.js";
+import "../chunk-YPRSNUTC.js";
 import {
   describeCallTarget
-} from "../chunk-NEDJ26B5.js";
-import "../chunk-OQE5J4C6.js";
-import "../chunk-NAI6ZFCY.js";
-import "../chunk-OZNBF4L3.js";
-import "../chunk-QZWQA4DE.js";
-import "../chunk-H7IXIC72.js";
+} from "../chunk-2GPGAE5W.js";
+import "../chunk-SL2RDHKO.js";
+import "../chunk-YGDMBK7O.js";
+import "../chunk-V552WL53.js";
+import "../chunk-7JSSKXG2.js";
+import "../chunk-KECNXMDE.js";
+import "../chunk-WXA2CFJO.js";
+import "../chunk-CBSKDFWL.js";
+import "../chunk-LY4N4TTL.js";
 import {
   RESULT_CONTRACT_REPAIR_LIMIT,
-  classify,
   parseWorkerResultContract,
   resultContractRepairMessages,
   validateResultContract
-} from "../chunk-KFV5L5SK.js";
-import {
-  protectedArtifactMutationBlockReason
-} from "../chunk-NXYCB2VD.js";
-import "../chunk-ECH6PKUQ.js";
-import "../chunk-IRXAATOX.js";
-import "../chunk-BJVFZO5U.js";
-import "../chunk-DXKJURES.js";
-import "../chunk-HHV2GANA.js";
-import "../chunk-GYV6VZOC.js";
-import "../chunk-UL3WSD3F.js";
-import "../chunk-5B2AEOW5.js";
+} from "../chunk-OQM5IVJY.js";
+import "../chunk-L4N3DWNW.js";
+import "../chunk-WJIMKGD6.js";
+import "../chunk-GH5ZR6JP.js";
 import {
   UNKNOWN_RESOURCE,
   WORKER_PROTOCOL_VERSION,
@@ -102,19 +83,23 @@ import {
   toolSignatureOf,
   withinFrameBudget,
   workerSpecDigest
-} from "../chunk-VAVR4IJY.js";
-import "../chunk-QSNYB6ZV.js";
-import "../chunk-4BJ5BYCE.js";
+} from "../chunk-VQD7NH7Z.js";
+import "../chunk-O3VV6IVK.js";
 import {
-  DEFAULT_AUTONOMY_LEVEL,
   agentSkillToolPolicy
-} from "../chunk-54X7T7DK.js";
-import "../chunk-I5FWO7L5.js";
-import "../chunk-6XLNIQDB.js";
+} from "../chunk-KAFMW7WM.js";
 import {
-  ToolNames
-} from "../chunk-4NSRCOYP.js";
-import "../chunk-QDC3K2U3.js";
+  CONFIRMED_SCOPE,
+  READONLY_SCOPE,
+  WORKSPACE_SCOPE,
+  createLoopState,
+  isSubset,
+  observe
+} from "../chunk-I2K2NCZQ.js";
+import {
+  createSafetyPolicyEngine
+} from "../chunk-IKRWLEDA.js";
+import "../chunk-NTK3WTHM.js";
 import {
   FileKnowledgeBase,
   applyModelCapabilityPatch,
@@ -125,68 +110,88 @@ import {
   setGlobalDefaultMaxOutputTokens,
   setProtectedModelsProvider,
   setResidencyNoticeSink
-} from "../chunk-JSD46VO2.js";
-import "../chunk-CFGTUFWB.js";
-import "../chunk-NZMNUPZZ.js";
-import "../chunk-2JH2WHGE.js";
-import "../chunk-KXDSS5WJ.js";
+} from "../chunk-4U4TKZFR.js";
+import "../chunk-MCJKEGHO.js";
+import "../chunk-77CZRFTE.js";
+import {
+  classify
+} from "../chunk-LUL5Z66S.js";
+import {
+  protectedArtifactMutationBlockReason
+} from "../chunk-M6TAYK66.js";
+import "../chunk-KQ6IDQIB.js";
+import "../chunk-PZN2LQY6.js";
+import "../chunk-R2P2U3ZS.js";
+import "../chunk-NTTS3O53.js";
+import "../chunk-M4KFUXS7.js";
+import "../chunk-J2FYEQ5L.js";
+import {
+  DEFAULT_AUTONOMY_LEVEL
+} from "../chunk-EM2WNQS2.js";
 import {
   readSettings,
   validateSettingsFile
-} from "../chunk-GHS5EBTQ.js";
-import "../chunk-D7E7WCDF.js";
-import "../chunk-HAXOFFRH.js";
-import "../chunk-R346GLFC.js";
-import "../chunk-BTK3SSSK.js";
-import "../chunk-W54I7H25.js";
-import "../chunk-PMZVFWSR.js";
-import "../chunk-F4EKGO4N.js";
-import "../chunk-65DEGPJ6.js";
+} from "../chunk-WNGF5AJX.js";
+import "../chunk-DVNAPPXU.js";
+import "../chunk-5CY4Q6QI.js";
+import "../chunk-FQOOGXBH.js";
+import "../chunk-UHW5V7HC.js";
+import "../chunk-B6UM3OZC.js";
+import "../chunk-MYI32N4R.js";
+import {
+  ToolNames
+} from "../chunk-EHOSNVVM.js";
+import "../chunk-KMF54VH3.js";
+import "../chunk-5A6XR3RJ.js";
+import "../chunk-EFSEIZE6.js";
+import "../chunk-B5ZTR6KZ.js";
+import "../chunk-HL26ADLH.js";
+import "../chunk-3A3CUMKA.js";
 import {
   readClioVersion
-} from "../chunk-IWHMRKLL.js";
+} from "../chunk-E3LEPLQ2.js";
 import {
   registerBuiltinRuntimes
-} from "../chunk-6OSVSQL5.js";
-import "../chunk-UXCU4E3T.js";
-import "../chunk-LL4KHSZI.js";
+} from "../chunk-WV6TDAPN.js";
+import "../chunk-3BJGMT2D.js";
+import "../chunk-U2MSJ57E.js";
 import {
   configureGuardrails,
   guardrailValuesFromSettings,
   isWorkerToolCallCapExceededReason,
   isWorkerToolCallCapSynthesisReason
-} from "../chunk-S66XZJOF.js";
-import "../chunk-TOIVGRUX.js";
+} from "../chunk-C27U2TYG.js";
+import "../chunk-GJ24ODAX.js";
 import {
   setGitCommitAttributionEnabled,
   withManagedGitCommitAttributionEnvironment
-} from "../chunk-U6TMQNSI.js";
-import "../chunk-EBY63B7G.js";
+} from "../chunk-LTR5QCLS.js";
+import "../chunk-6EXUUOSN.js";
 import {
   AI_AGENT_NAME
-} from "../chunk-6EJMN2Y3.js";
-import "../chunk-26QSH3EJ.js";
-import "../chunk-ID64D7PE.js";
-import "../chunk-336NSSKI.js";
-import "../chunk-IKCO5N3L.js";
-import "../chunk-3I7MS7N2.js";
-import "../chunk-APJ265NV.js";
-import "../chunk-WEPFGWHJ.js";
+} from "../chunk-ZTNFYMIO.js";
+import "../chunk-HHVJNVUJ.js";
+import "../chunk-HXHFDHB6.js";
+import "../chunk-VNBICSS2.js";
+import "../chunk-2QPI3TR3.js";
+import "../chunk-TK2BMCBZ.js";
+import "../chunk-B5GGDIHT.js";
+import "../chunk-ZZFWWYLX.js";
 import {
   getRuntimeRegistry
-} from "../chunk-NUGM5KR6.js";
-import "../chunk-5OIVVPHF.js";
+} from "../chunk-SRCEQKQS.js";
+import "../chunk-TN5FW4XY.js";
 import {
   registerFauxFromEnv
-} from "../chunk-YPC6ZR5L.js";
-import "../chunk-YXLYO42X.js";
+} from "../chunk-5CMARGPF.js";
+import "../chunk-DXVMLM3Z.js";
 import {
   deleteInjectedCompileCacheFrom
-} from "../chunk-2LEAKD4C.js";
-import "../chunk-BYP5D4HI.js";
+} from "../chunk-CKK25WN3.js";
+import "../chunk-CTTI7G3T.js";
 import {
   init_esm_shims
-} from "../chunk-3R73A4XB.js";
+} from "../chunk-ECBHH7LU.js";
 
 // src/worker/entry.ts
 init_esm_shims();
@@ -267,7 +272,10 @@ function createWorkerSafety(options = {}) {
     },
     scopes: { readonly: READONLY_SCOPE, workspace: WORKSPACE_SCOPE, confirmed: CONFIRMED_SCOPE },
     isSubset,
-    policy: { metadata: (posture) => policyEngine.metadata(posture) },
+    policy: {
+      metadata: (posture) => policyEngine.metadata(posture),
+      allowsObservationPath: (path2) => policyEngine.evaluate({ tool: "read", args: { path: path2 } }).reasonCode !== "path-policy:zeroAccessPaths"
+    },
     audit: { recordCount: () => 0 }
   };
 }
@@ -569,6 +577,7 @@ function createClaudeWorkerBudgetGate(budget, onBoundary, onHardCap, deliveryToo
   let admitted = 0;
   let locked = false;
   const phaseDecision = (canonicalToolName) => {
+    if (budget.mode === "advisory") return { kind: "allow" };
     const reserveAdmits = isReserveAdmittedTool(canonicalToolName, deliveryTools);
     if (locked || admitted >= budget.toolCalls) {
       if (deliveryTools.length > 0 && !locked) {
@@ -596,7 +605,7 @@ function createClaudeWorkerBudgetGate(budget, onBoundary, onHardCap, deliveryToo
   return {
     attempt(canonicalToolName) {
       attempts += 1;
-      if (attempts > budget.hardCap) {
+      if (budget.mode !== "advisory" && attempts > budget.hardCap) {
         onHardCap();
         return { kind: "deny", reason: `workerToolCallCap reached (${budget.hardCap}); abort run` };
       }
@@ -606,7 +615,7 @@ function createClaudeWorkerBudgetGate(budget, onBoundary, onHardCap, deliveryToo
       const phase = phaseDecision(canonicalToolName);
       if (phase.kind === "deny") return phase;
       admitted += 1;
-      if (admitted >= budget.toolCalls && deliveryTools.length === 0) {
+      if (budget.mode !== "advisory" && admitted >= budget.toolCalls && deliveryTools.length === 0) {
         locked = true;
         onBoundary();
       }
@@ -898,6 +907,8 @@ function assistantMessageText(message) {
 }
 function isTerminalAssistantMessage(message) {
   if (!isAssistantMessage(message)) return false;
+  if (message.stopReason === "length" && Array.isArray(message.content) && message.content.some((block) => block.type === "toolCall"))
+    return false;
   return message.stopReason !== "toolUse" && message.stopReason !== "error";
 }
 function terminalContractViolation(contract, message, cwd, observedReadRanges, observedRunEffects) {
@@ -1034,6 +1045,7 @@ function startWorkerRun(input, emit) {
   const loopGuardRegistration = createLoopGuardRegistration({
     safety,
     toolCallCap: workerBudget.hardCap,
+    toolBudgetAdvisory: workerBudget.mode === "advisory",
     toolCallSoftLimit: workerBudget.toolCalls,
     // A worker's blocks all land in one run-long bucket, so the bound on
     // them is a statement about this run's length, not about a turn.
@@ -1157,6 +1169,7 @@ function startWorkerRun(input, emit) {
     invokeOptions: () => ({
       correlationId: `worker-model-round-${workerModelRound}`,
       toolResultMaxBytes: workerSettings.context.toolResultMaxBytes,
+      supportsImages: model.input.includes("image"),
       ...agentSkillPolicy ? { pendingSkillPolicy: agentSkillPolicy } : {}
     })
   });
@@ -1251,7 +1264,7 @@ function startWorkerRun(input, emit) {
               stopAfterToolResultCallId = null;
             }
           }
-          const revisionToolsAvailable = resultContractRevisionActive && !synthesisToolLock;
+          const revisionToolsAvailable = (workerBudget.mode === "advisory" || resultContractRevisionActive) && !synthesisToolLock;
           if (!revisionToolsAvailable) synthesisToolLock = true;
           const repair = resultContractRepairMessages(
             {

package/dist/{workspace-ZJ6BFM3Q.js → workspace-DZ7JADBG.js}

@@ -6,11 +6,11 @@ import {
   probeGitStatusAsync,
   probeWorkspace,
   probeWorkspaceAsync
-} from "./chunk-HVDIIIQW.js";
-import "./chunk-XAKHZX5N.js";
-import "./chunk-33YXPOE3.js";
-import "./chunk-7CR24IG7.js";
-import "./chunk-3R73A4XB.js";
+} from "./chunk-DNHVRBH4.js";
+import "./chunk-CVDAFGPW.js";
+import "./chunk-PPEZJWUG.js";
+import "./chunk-WDV62RKY.js";
+import "./chunk-ECBHH7LU.js";
 export {
   emptyWorkspaceSnapshot,
   probeGit,
@@ -19,4 +19,4 @@ export {
   probeWorkspace,
   probeWorkspaceAsync
 };
-//# sourceMappingURL=workspace-ZJ6BFM3Q.js.map
+//# sourceMappingURL=workspace-DZ7JADBG.js.map

package/docs/README.md

@@ -144,23 +144,24 @@ is retained as release engineering history.
 ```bash
 git clone https://github.com/iowarp/clio-coder.git
 cd clio-coder
-npm ci
-npm run build
+corepack enable pnpm
+pnpm install --frozen-lockfile
+pnpm run build
 node dist/cli/index.js --help
 ```
 
 For a persistent local command:
 
 ```bash
-npm run install:local
+pnpm run install:local
 export PATH="$HOME/.local/bin:$PATH"
 hash -r
 clio-coder --version
 ```
 
-Use `npm run dev` for a watch build. Before handing back a change, run the
-focused test while iterating and `npm run ci` for the deterministic repository
-gate. Maintainers use `npm run ci:release` to add the distribution and package
+Use `pnpm run dev` for a watch build. Before handing back a change, run the
+focused test while iterating and `pnpm run ci` for the deterministic repository
+gate. Maintainers use `pnpm run ci:release` to add the distribution and package
 audit.
 
 ## Project context in a source checkout

package/docs/architecture/acp.md

@@ -347,3 +347,13 @@ The submission procedure follows these steps:
 3. Copy `assets/acp-registry/agent.json` and `assets/acp-registry/icon.svg` into that directory.
 4. Verify that `agent.json` adheres to the registry schema and that `icon.svg` remains monochrome with viewBox `0 0 16 16`.
 5. Submit a pull request to the upstream registry repository. Once merged, clients that consume the ACP registry discover and install Clio Coder automatically.
+
+## Independent lifecycle coverage
+
+Workbench host replacement and direct ACP session isolation are separate checks. For the supported host API lifecycle, open a session and complete a turn, close, then use New and complete another turn. Close retires child A and initializes unbound child B; New binds B without a third launch. Record actual PIDs and host generations: both must change. A reused session ID alone cannot prove child replacement.
+
+For direct ACP isolation, keep one stdio child alive through new, turn, close, new, and turn. Record the same live PID and distinct session IDs. Check that the second request and persisted ledger exclude first-session history and turn ancestry and that the actual tasks list has no board. Explicitly resuming the first session must restore its own history and task state without second-session text. Record bounded teardown and child exit.
+
+The Workbench host contract uses a fixture subprocess; the direct ACP smoke uses built Clio with a loopback provider. Neither establishes browser interaction or live-provider behavior. The GUI has no close control, and the host API retires its child on close. Record host restart and direct same-child isolation independently, with the actions, process identities, evidence mode, and limits.
+
+ACP delegation receipts preserve peer-reported token totals, including explicit zero usage, and supported cost provenance without double-counting event metering. A peer total is used when supplied; otherwise components determine the total. Unknown cost is not evidence of free execution.

package/docs/architecture/architecture.md

@@ -184,7 +184,7 @@ and `src/tools/dispatch.ts` owns a separate cached dynamic import of
 
 ## Boundary invariants
 
-`npm run lint` executes the boundary checker (`tests/boundaries/check-boundaries.ts`, imported by `scripts/check-hygiene.ts`). Treat these checks as executable specifications.
+`pnpm run lint` executes the boundary checker (`tests/boundaries/check-boundaries.ts`, imported by `scripts/check-hygiene.ts`). Treat these checks as executable specifications.
 
 The enforced import rules below are complemented by the maintained
 [Pi SDK boundary table](pi-boundary.md), which records the semantic owner of
@@ -334,10 +334,10 @@ Interactive slash commands in Clio Coder are governed by a unified declarative c
 ## Verification commands
 
 ```bash
-npm run lint
-npm run typecheck
-npm run test
-npm run build
+pnpm run lint
+pnpm run typecheck
+pnpm run test
+pnpm run build
 ```
 
 Run the focused boundary check before editing `src/engine/**`, `src/worker/**`, or cross-domain imports. Run the full test/build gate before release-facing documentation or behavior changes.