@iowarp/clio-coder 0.4.5 → 0.4.6

package/dist/{chunk-RXIOCVBZ.js → chunk-6HAO6X5B.js}

@@ -2,18 +2,18 @@ import { createRequire as __clioCreateRequire } from "node:module"; const requir
 import {
   receiptGatewayRoutingLabel,
   receiptResponseModelIdObservationLabel
-} from "./chunk-SDWNDICN.js";
+} from "./chunk-24T2YZ7A.js";
 import {
   adaptRunReceiptTrustStatus,
   formatTrustAxes,
   formatTrustSummary
-} from "./chunk-6CDNRHWH.js";
+} from "./chunk-HZ2T2YED.js";
 import {
   formatBudgetPolicy,
   formatBudgetReasons,
   formatBudgetRequest,
   formatEffectiveBudget
-} from "./chunk-TZ7MFRG4.js";
+} from "./chunk-P5JMBPDJ.js";
 import {
   RESULT_SUMMARY_MAX_BYTES_CEILING,
   resultContractAuthorship
@@ -194,4 +194,4 @@ export {
   workerTextLabel,
   workerTextNonEvidenceNotices
 };
-//# sourceMappingURL=chunk-RXIOCVBZ.js.map
+//# sourceMappingURL=chunk-6HAO6X5B.js.map

package/dist/{chunk-HGSLRG33.js → chunk-6OII3LOK.js}

@@ -13,7 +13,7 @@ import {
   renderNumericReport,
   renderPerfBaseline,
   resolveProjectVerifierExecutionCwd
-} from "./chunk-MDU3C27C.js";
+} from "./chunk-PZN2LQY6.js";
 import {
   declaredVerificationScripts
 } from "./chunk-M4KFUXS7.js";
@@ -401,4 +401,4 @@ export {
   recordPerfBaseline,
   runScriptCheck
 };
-//# sourceMappingURL=chunk-HGSLRG33.js.map
+//# sourceMappingURL=chunk-6OII3LOK.js.map

package/dist/{chunk-U2JOLB7O.js → chunk-6RYDAVQT.js}

@@ -8,7 +8,7 @@ import {
 } from "./chunk-BBV5TKE6.js";
 import {
   verifyToolSurface
-} from "./chunk-GXCCHKN6.js";
+} from "./chunk-3QKXHCGS.js";
 import {
   codeNavToolSurface
 } from "./chunk-PWWSIB2A.js";
@@ -23,14 +23,11 @@ import {
   readMaxBytes,
   readTool,
   renderAgentLedger
-} from "./chunk-TZ7MFRG4.js";
-import {
-  hashToolCall
-} from "./chunk-KF6GFW6O.js";
+} from "./chunk-P5JMBPDJ.js";
 import {
   createTaskBoardStore,
   taskBoardCounts
-} from "./chunk-7HBHHVCK.js";
+} from "./chunk-YPRSNUTC.js";
 import {
   describeCallAction
 } from "./chunk-2GPGAE5W.js";
@@ -59,31 +56,17 @@ import {
   reserveObservation,
   toolResultContextText,
   truncateHead
-} from "./chunk-RLTT5GVY.js";
+} from "./chunk-7JSSKXG2.js";
 import {
   GREP_MAX_LINE_LENGTH,
   truncateLine
 } from "./chunk-KECNXMDE.js";
-import {
-  formatModelRejection
-} from "./chunk-4SVIVOMC.js";
 import {
   applyToolProfile
 } from "./chunk-CBSKDFWL.js";
-import {
-  classify
-} from "./chunk-LUL5Z66S.js";
-import {
-  protectArtifact,
-  protectedArtifactMutationBlockReason
-} from "./chunk-M6TAYK66.js";
 import {
   gitTool
 } from "./chunk-WJIMKGD6.js";
-import {
-  CLIO_ARTIFACT_DIR,
-  artifactDefaultPath
-} from "./chunk-NTTS3O53.js";
 import {
   typebox_exports
 } from "./chunk-GH5ZR6JP.js";
@@ -93,7 +76,27 @@ import {
 import {
   decisionRef,
   skillActivationFromToolDetails
-} from "./chunk-5ZMXGW7P.js";
+} from "./chunk-KAFMW7WM.js";
+import {
+  hashToolCall
+} from "./chunk-I2K2NCZQ.js";
+import {
+  formatModelRejection
+} from "./chunk-IKRWLEDA.js";
+import {
+  classify
+} from "./chunk-LUL5Z66S.js";
+import {
+  protectArtifact,
+  protectedArtifactMutationBlockReason
+} from "./chunk-M6TAYK66.js";
+import {
+  CLIO_ARTIFACT_DIR,
+  artifactDefaultPath
+} from "./chunk-NTTS3O53.js";
+import {
+  assertSafeId
+} from "./chunk-UHW5V7HC.js";
 import {
   byteLength,
   truncateUtf8
@@ -102,9 +105,6 @@ import {
   ToolNames,
   isBuiltinToolName
 } from "./chunk-EHOSNVVM.js";
-import {
-  assertSafeId
-} from "./chunk-UHW5V7HC.js";
 import {
   BusChannels
 } from "./chunk-HL26ADLH.js";
@@ -2685,7 +2685,7 @@ var evidenceTool = {
     try {
       const dataDir = clioDataDir();
       if (mode === "list") {
-        const { evidenceInventorySnapshot } = await import("./inventory-K2OZ36YJ.js");
+        const { evidenceInventorySnapshot } = await import("./inventory-74UL7UHU.js");
         return boundedResult(await evidenceInventorySnapshot(Date.now, dataDir));
       }
       const id = mode === "inspect" ? args.id : args.runId;
@@ -2693,8 +2693,8 @@ var evidenceTool = {
         return { kind: "error", message: `evidence: ${mode} requires ${mode === "inspect" ? "id" : "runId"}` };
       }
       assertSafeId(id, mode === "inspect" ? "evidence" : "run");
-      const { buildEvidence, EvidenceNotFoundError, inspectEvidence, loadEvidenceGateDecisions } = await import("./evidence-DTGEN456.js");
-      const { evidenceDetailSnapshot } = await import("./detail-5572VLBO.js");
+      const { buildEvidence, EvidenceNotFoundError, inspectEvidence, loadEvidenceGateDecisions } = await import("./evidence-35PYWGSO.js");
+      const { evidenceDetailSnapshot } = await import("./detail-UXPWRANG.js");
       let evidenceId = mode === "run" ? `run-${id}` : id;
       let inspected;
       try {
@@ -4197,13 +4197,13 @@ function registerCoreTools(registry, deps = {}) {
   });
   registry.register({
     ...builtin(
-      lazyTool(verifyToolSurface, async () => (await import("./verify-3AS3ULCY.js")).verifyTool),
+      lazyTool(verifyToolSurface, async () => (await import("./verify-HYF7KBVE.js")).verifyTool),
       { path: "src/tools/verify/index.ts", scope: "core" }
     )
   });
   registry.register({
     ...builtin(
-      lazyTool(codeNavToolSurface, async () => (await import("./code-nav-YXIAEZVS.js")).codeNavTool),
+      lazyTool(codeNavToolSurface, async () => (await import("./code-nav-GUPM6766.js")).codeNavTool),
       { path: "src/tools/codewiki/code-nav.ts", scope: "core" }
     )
   });
@@ -4237,7 +4237,7 @@ function registerCoreTools(registry, deps = {}) {
   registry.register({
     ...builtin(
       lazyTool(contextToolSurface, async () => {
-        const { createContextTool } = await import("./context-QQ53HSGJ.js");
+        const { createContextTool } = await import("./context-OL5P3HEP.js");
         if (!session) return createContextTool(skillToolDeps);
         const { probeWorkspace } = await import("./workspace-DZ7JADBG.js");
         return createContextTool({
@@ -4335,4 +4335,4 @@ export {
   registerCoreTools,
   assertRegisteredBuiltinTools
 };
-//# sourceMappingURL=chunk-U2JOLB7O.js.map
+//# sourceMappingURL=chunk-6RYDAVQT.js.map

package/dist/{chunk-T53XI6I7.js → chunk-6VRRJT7L.js}

@@ -4,7 +4,7 @@ import {
 } from "./chunk-E3LEPLQ2.js";
 import {
   DEFAULT_SETTINGS_YAML
-} from "./chunk-SE4ZKILO.js";
+} from "./chunk-3BJGMT2D.js";
 import {
   clioCacheDir,
   clioConfigDir,
@@ -143,4 +143,4 @@ function enforceHomePrefixGuard() {
 export {
   initializeClioHome
 };
-//# sourceMappingURL=chunk-T53XI6I7.js.map
+//# sourceMappingURL=chunk-6VRRJT7L.js.map

package/dist/{chunk-RLTT5GVY.js → chunk-7JSSKXG2.js}

@@ -4,9 +4,6 @@ import {
   truncateHead,
   truncateTail
 } from "./chunk-KECNXMDE.js";
-import {
-  createSafetyPolicyEngine
-} from "./chunk-4SVIVOMC.js";
 import {
   INSTRUCTION_SHAPED_WARNING
 } from "./chunk-WXA2CFJO.js";
@@ -14,6 +11,9 @@ import {
   createRedactionTally,
   redactSecretsText
 } from "./chunk-O3VV6IVK.js";
+import {
+  createSafetyPolicyEngine
+} from "./chunk-IKRWLEDA.js";
 import {
   byteLength,
   truncateUtf8
@@ -1212,4 +1212,4 @@ export {
   finalizeObservation,
   createObservationPathFilter
 };
-//# sourceMappingURL=chunk-RLTT5GVY.js.map
+//# sourceMappingURL=chunk-7JSSKXG2.js.map

package/dist/{chunk-633EXGZA.js → chunk-ACCKVSHU.js}

@@ -1,11 +1,11 @@
 import { createRequire as __clioCreateRequire } from "node:module"; const require = __clioCreateRequire(import.meta.url);
 import {
   inspectEvidence
-} from "./chunk-SDWNDICN.js";
+} from "./chunk-24T2YZ7A.js";
 import {
   TRUST_STATUS_AXES,
   trustVerdict
-} from "./chunk-6CDNRHWH.js";
+} from "./chunk-HZ2T2YED.js";
 import {
   clioDataDir
 } from "./chunk-CTTI7G3T.js";
@@ -41,4 +41,4 @@ export {
   EVIDENCE_DETAIL_MAX_RUNS,
   evidenceDetailSnapshot
 };
-//# sourceMappingURL=chunk-633EXGZA.js.map
+//# sourceMappingURL=chunk-ACCKVSHU.js.map

package/dist/{chunk-6SYEGZI3.js → chunk-B3MOMLJ4.js}

@@ -2,7 +2,7 @@ import { createRequire as __clioCreateRequire } from "node:module"; const requir
 import {
   readSettings,
   updateSettings
-} from "./chunk-FKIOX6DS.js";
+} from "./chunk-WNGF5AJX.js";
 import {
   INTEROP_AGENT_KINDS,
   interopAgentKind
@@ -430,4 +430,4 @@ export {
   detectInteropAgents,
   InteropDomainModule
 };
-//# sourceMappingURL=chunk-6SYEGZI3.js.map
+//# sourceMappingURL=chunk-B3MOMLJ4.js.map

package/dist/{chunk-UXAC2FX4.js → chunk-BLTEAUCB.js}

@@ -4,12 +4,12 @@ import {
   listChecks,
   runProjectCheck,
   runScriptCheck
-} from "./chunk-HGSLRG33.js";
+} from "./chunk-6OII3LOK.js";
 import {
   BROWSER_MODES,
   prepareVerifyArguments,
   verifyToolSurface
-} from "./chunk-GXCCHKN6.js";
+} from "./chunk-3QKXHCGS.js";
 import {
   prepareBoundedImage
 } from "./chunk-YGDMBK7O.js";
@@ -665,4 +665,4 @@ var verifyTool = {
 export {
   verifyTool
 };
-//# sourceMappingURL=chunk-UXAC2FX4.js.map
+//# sourceMappingURL=chunk-BLTEAUCB.js.map

package/dist/{chunk-DRD2A54W.js → chunk-BT7HGDOX.js}

@@ -5,21 +5,14 @@ import {
   isTerminalRunEnvelope,
   runTaskMemoryPolicy,
   taskMemoryBankDelta
-} from "./chunk-TZ7MFRG4.js";
-import {
-  hashToolCall
-} from "./chunk-KF6GFW6O.js";
+} from "./chunk-P5JMBPDJ.js";
 import {
   taskBoardCounts
-} from "./chunk-7HBHHVCK.js";
+} from "./chunk-YPRSNUTC.js";
 import {
   legacyToolResultDigest,
   sanitizeToolResultDigest
-} from "./chunk-RLTT5GVY.js";
-import {
-  captureProjectSurface,
-  projectSurfaceTrustNotice
-} from "./chunk-NTK3WTHM.js";
+} from "./chunk-7JSSKXG2.js";
 import {
   INSTRUCTION_SHAPED_WARNING
 } from "./chunk-WXA2CFJO.js";
@@ -30,16 +23,23 @@ import {
   SKILL_INSTALL_OFFER_OPTION_USER,
   SKILL_SUGGESTION_ANCHOR,
   SKILL_SUGGESTION_PREFIX
-} from "./chunk-5ZMXGW7P.js";
+} from "./chunk-KAFMW7WM.js";
 import {
-  ToolNames
-} from "./chunk-EHOSNVVM.js";
+  hashToolCall
+} from "./chunk-I2K2NCZQ.js";
+import {
+  captureProjectSurface,
+  projectSurfaceTrustNotice
+} from "./chunk-NTK3WTHM.js";
 import {
   registerForegroundStream
-} from "./chunk-TEG3RYVZ.js";
+} from "./chunk-4U4TKZFR.js";
 import {
   ceilChars
 } from "./chunk-77CZRFTE.js";
+import {
+  ToolNames
+} from "./chunk-EHOSNVVM.js";
 import {
   BusChannels
 } from "./chunk-HL26ADLH.js";
@@ -3148,4 +3148,4 @@ export {
   createWatchdogRegistration,
   MiddlewareDomainModule
 };
-//# sourceMappingURL=chunk-DRD2A54W.js.map
+//# sourceMappingURL=chunk-BT7HGDOX.js.map

package/dist/{chunk-F34AR6O3.js → chunk-DXLUVUD4.js}

@@ -5,16 +5,16 @@ import {
 import {
   probeWorkspace
 } from "./chunk-DNHVRBH4.js";
-import {
-  protectArtifact
-} from "./chunk-M6TAYK66.js";
 import {
   isSessionEntry,
   isSessionHeader
-} from "./chunk-5ZMXGW7P.js";
+} from "./chunk-KAFMW7WM.js";
 import {
   stripTokenizerSentinels
 } from "./chunk-MCJKEGHO.js";
+import {
+  protectArtifact
+} from "./chunk-M6TAYK66.js";
 import {
   CURRENT_SESSION_FORMAT_VERSION,
   appendSessionFileEntry,
@@ -1487,4 +1487,4 @@ export {
   ledgerUsageCalls,
   SessionDomainModule
 };
-//# sourceMappingURL=chunk-F34AR6O3.js.map
+//# sourceMappingURL=chunk-DXLUVUD4.js.map

package/dist/{chunk-HR3HPQ76.js → chunk-E7RF4KBO.js}

@@ -1,7 +1,7 @@
 import { createRequire as __clioCreateRequire } from "node:module"; const require = __clioCreateRequire(import.meta.url);
 import {
   FAILURE_CAUSE_TAGS
-} from "./chunk-SDWNDICN.js";
+} from "./chunk-24T2YZ7A.js";
 import {
   withStateFileLock,
   withStateFileLockSync
@@ -263,4 +263,4 @@ export {
   appendOutOfTurnUsageRow,
   readOutOfTurnUsageRows
 };
-//# sourceMappingURL=chunk-HR3HPQ76.js.map
+//# sourceMappingURL=chunk-E7RF4KBO.js.map

package/dist/chunk-EM2WNQS2.js

@@ -0,0 +1,93 @@
+import { createRequire as __clioCreateRequire } from "node:module"; const require = __clioCreateRequire(import.meta.url);
+import {
+  init_esm_shims
+} from "./chunk-ECBHH7LU.js";
+
+// src/domains/safety/autonomy.ts
+init_esm_shims();
+var AUTONOMY_LEVELS = ["read-only", "suggest", "auto-edit", "full-auto"];
+var DEFAULT_AUTONOMY_LEVEL = "auto-edit";
+function isAutonomyLevel(value) {
+  return typeof value === "string" && AUTONOMY_LEVELS.includes(value);
+}
+var AUTONOMY_EXPOSURES = ["local", "outward"];
+var DEFAULT_AUTONOMY_EXPOSURE = "local";
+function modelMayActivateSkills(level) {
+  return level === "auto-edit" || level === "full-auto";
+}
+function mapAutonomy(level, actionClass, options = {}) {
+  if (actionClass === "git_destructive") return "deny";
+  if ((level === "auto-edit" || level === "suggest") && options.exposure === "outward") return "ask";
+  if (actionClass === "read") return "allow";
+  if (level === "read-only") return "deny";
+  if (level === "suggest") return "ask";
+  switch (actionClass) {
+    case "write":
+      return "allow";
+    case "dispatch":
+      if (options.dispatchPlanScale === true && level !== "full-auto") return "ask";
+      return "allow";
+    case "execute": {
+      if (options.executeRecognized !== false) return "allow";
+      return level === "full-auto" ? "allow" : "ask";
+    }
+    case "unknown":
+      return "ask";
+    default:
+      return "ask";
+  }
+}
+function autonomyDenyRejection(level, tool, actionClass) {
+  return {
+    short: `${tool} denied: autonomy level is ${level}`,
+    detail: `Clio is at autonomy ${level}: ${actionClass} actions are denied without prompting. Describe the change you would make instead, so the operator can apply it or raise the autonomy level.`,
+    hints: [
+      ...level === "read-only" && actionClass === "execute" ? [
+        "For independent permitted inspection, use the native read, grep, find, or ls tools when available. Do not use them to reproduce the denied execution or write; each call still follows its safety policy."
+      ] : [],
+      "Propose the exact edit or command as text.",
+      "The operator can change the level in interactive /settings or start a new headless run with clio-coder run --autonomy <level>."
+    ]
+  };
+}
+function autonomyAskRejection(level, tool, actionClass, exposure = DEFAULT_AUTONOMY_EXPOSURE) {
+  if (exposure === "outward") {
+    return {
+      short: `${tool} needs approval: outward-facing gate at autonomy ${level}`,
+      detail: `The call declared exposure=outward, so answering it publishes or sends something outside the workspace. Autonomy ${level} auto-answers local gates and parks outward-facing ones for the operator.`,
+      hints: [
+        "Approving resumes only this call.",
+        "Autonomy full-auto answers outward gates too; the safety net still applies there."
+      ]
+    };
+  }
+  return {
+    short: `${tool} needs approval (${actionClass}) at autonomy ${level}`,
+    detail: `Autonomy ${level} routes ${actionClass} actions through operator approval. The call is parked until the operator approves it once or cancels it.`,
+    hints: [
+      "Approving resumes only this call.",
+      "Recognized commands can be added to .clio-coder/safety.yaml.",
+      // The sanctioned pivots for a gated shell command: typed verification
+      // and read-class observe tools run without approval at this level,
+      // and models otherwise stall retrying denied bash for checks or
+      // directory listings.
+      ...actionClass === "execute" ? [
+        'A declared package or project-catalog check runs without approval through the verify tool: verify(check="<id>").',
+        "Read-only inspection runs without approval through the ls, read, grep, and find tools."
+      ] : []
+    ]
+  };
+}
+
+export {
+  AUTONOMY_LEVELS,
+  DEFAULT_AUTONOMY_LEVEL,
+  isAutonomyLevel,
+  AUTONOMY_EXPOSURES,
+  DEFAULT_AUTONOMY_EXPOSURE,
+  modelMayActivateSkills,
+  mapAutonomy,
+  autonomyDenyRejection,
+  autonomyAskRejection
+};
+//# sourceMappingURL=chunk-EM2WNQS2.js.map