@iowarp/clio-coder 0.4.5 → 0.4.7

package/src/domains/extensions/state.ts

@@ -1,15 +1,5 @@
 import { createHash } from "node:crypto";
-import {
-	cpSync,
-	existsSync,
-	lstatSync,
-	mkdirSync,
-	readdirSync,
-	readFileSync,
-	realpathSync,
-	renameSync,
-	rmSync,
-} from "node:fs";
+import { cpSync, existsSync, mkdirSync, readdirSync, readFileSync, realpathSync, renameSync, rmSync } from "node:fs";
 import path from "node:path";
 import { safeResourceWrite } from "../../core/safe-resource-write.js";
 import { clioConfigDir } from "../../core/xdg.js";
@@ -24,7 +14,6 @@ import type {
 	ExtensionMutationResult,
 	ExtensionScope,
 	ExtensionState,
-	ExtensionStateUpgradeReport,
 	InstalledExtension,
 } from "./types.js";
 
@@ -151,7 +140,7 @@ function installedFromRoot(
 	} else if (!expectedDigest) {
 		diagnostics.push({
 			type: "error",
-			message: `extension ${id} install provenance has no content digest; run clio-coder upgrade, then reinstall with --force if it remains unverifiable`,
+			message: `extension ${id} install provenance has no content digest; reinstall with --force`,
 			path: statePath(scope, cwd),
 		});
 	} else {
@@ -198,6 +187,8 @@ function installedFromRoot(
 		name: manifest?.name ?? id,
 		version: manifest?.version ?? "unknown",
 		description: manifest?.description ?? "Installed extension has an invalid manifest.",
+		...(manifest?.capabilities ? { capabilities: manifest.capabilities } : {}),
+		...(manifest?.runtime ? { runtime: manifest.runtime } : {}),
 		scope,
 		rootPath: root,
 		manifestPath: candidate.manifestPath ?? root,
@@ -208,7 +199,6 @@ function installedFromRoot(
 		loadable: false,
 		...(extensionProvenance ? { provenance: extensionProvenance } : {}),
 		...(observedDigest ? { observedContentDigest: observedDigest } : {}),
-		resources: manifest?.resources ?? {},
 		diagnostics,
 	};
 	return { entry, ...(extensionProvenance && captured ? { captured } : {}) };
@@ -228,74 +218,6 @@ function listScope(scope: ExtensionScope, cwd = process.cwd()): InstalledExtensi
 	return out;
 }
 
-/**
- * Add integrity digests to released v1 install records only after the installed
- * tree validates and remains byte-identical through the atomic state rewrite.
- * Refused records remain unchanged and therefore fail closed at load time.
- */
-export function upgradeLegacyExtensionInstallState(
-	cwd = process.cwd(),
-	scopes: ReadonlyArray<ExtensionScope> = ["user", "project"],
-): ExtensionStateUpgradeReport[] {
-	const reports: ExtensionStateUpgradeReport[] = [];
-	for (const scope of scopes) {
-		const filePath = statePath(scope, cwd);
-		const report: ExtensionStateUpgradeReport = { scope, statePath: filePath, upgraded: [], refused: [] };
-		const stateResult = readState(scope, cwd);
-		if (stateResult.status === "absent") {
-			reports.push(report);
-			continue;
-		}
-		if (stateResult.status === "corrupt") {
-			report.refused.push({ id: "<state>", reason: `install state is corrupt: ${stateResult.message}` });
-			reports.push(report);
-			continue;
-		}
-		const next = structuredClone(stateResult.state);
-		const verified = new Map<string, { root: string; digest: string }>();
-		for (const [id, record] of Object.entries(next.installed)) {
-			if (record.contentDigest) continue;
-			const root = path.join(extensionBaseDir(scope, cwd), id);
-			try {
-				if (!lstatSync(root).isDirectory()) throw new Error("installed path is not a directory");
-				const candidate = loadManifestFromRoot(root);
-				if (!candidate.valid || !candidate.manifest) {
-					throw new Error(candidate.diagnostics.map((diagnostic) => diagnostic.message).join("; ") || "manifest is invalid");
-				}
-				if (candidate.manifest.id !== id) {
-					throw new Error(`manifest id ${candidate.manifest.id} does not match install record ${id}`);
-				}
-				const digest = extensionContentDigest(root);
-				record.contentDigest = digest;
-				verified.set(id, { root, digest });
-				report.upgraded.push(id);
-			} catch (error) {
-				report.refused.push({ id, reason: error instanceof Error ? error.message : String(error) });
-			}
-		}
-		if (report.upgraded.length > 0) {
-			const backupPath = `${filePath}.pre-digest.bak`;
-			safeResourceWrite(filePath, `${JSON.stringify(next, null, 2)}\n`, {
-				encoding: "utf8",
-				backup: { path: backupPath },
-				beforeRename: () => {
-					for (const [id, expected] of verified) {
-						const candidate = loadManifestFromRoot(expected.root);
-						if (!candidate.valid || candidate.manifest?.id !== id) {
-							throw new Error(`extension ${id} became invalid during digest migration`);
-						}
-						const observed = extensionContentDigest(expected.root);
-						if (observed !== expected.digest) throw new Error(`extension ${id} changed during digest migration`);
-					}
-				},
-			});
-			report.backupPath = backupPath;
-		}
-		reports.push(report);
-	}
-	return reports;
-}
-
 export function listInstalledExtensions(cwd = process.cwd(), options: ExtensionListOptions = {}): InstalledExtension[] {
 	return listInstalledExtensionRecords(cwd, options).map((record) => record.entry);
 }
@@ -326,7 +248,7 @@ export function listInstalledExtensionRecords(
 		}
 	}
 	// Invalid and incompatible packages remain visible by default so the load
-	// refusal and its diagnostic cannot disappear with the resources it suppresses.
+	// refusal and its diagnostic cannot disappear with the capabilities it suppresses.
 	const all =
 		options.all === true ? records : records.filter(({ entry }) => entry.effective || !entry.valid || !entry.compatible);
 	return all.sort((a, b) => {

package/src/domains/extensions/types.ts

@@ -1,23 +1,41 @@
 export type ExtensionScope = "user" | "project";
-export type ExtensionResourceKind = "skills" | "prompts" | "agents" | "fleets" | "themes";
 
-export interface ExtensionManifestResources {
-	skills?: string;
-	prompts?: string;
-	agents?: string;
-	fleets?: string;
-	themes?: string;
+export interface ExtensionRuntimeDeclaration {
+	api: 1;
+	entrypoint: string;
+	commands: Array<{ name: string; description: string; timeoutMs: number }>;
+	events: Array<"session_open" | "turn_end">;
+	ui: Array<"status" | "panel">;
 }
 
+export interface ExtensionCommandTool {
+	name: string;
+	description: string;
+	runtime: "node" | "python3";
+	entrypoint: string;
+	inputSchema: Record<string, unknown>;
+	timeoutMs?: number;
+	maxOutputBytes?: number;
+}
+
+export interface ExtensionCapabilities {
+	tools: ExtensionCommandTool[];
+}
+
+/**
+ * The harness extension contract. An extension contributes executable runtime
+ * capability to Clio: command tools declared here and hook declarations
+ * captured from `hooks.yaml` at the package root. Prompts, skills, agents,
+ * fleets, and reference files are plugin content and have no manifest key.
+ */
 export interface ClioExtensionManifest {
-	manifestVersion: 1;
+	runtime?: ExtensionRuntimeDeclaration;
 	id: string;
 	name: string;
 	version: string;
 	description: string;
-	resources: ExtensionManifestResources;
-	tools?: string[];
-	settings?: string[];
+	/** Absent for a package whose only capability is its `hooks.yaml`. */
+	capabilities?: ExtensionCapabilities;
 	compatibility?: { clio?: string };
 }
 
@@ -41,26 +59,27 @@ export interface ExtensionProvenance {
 }
 
 export interface InstalledExtension {
+	runtime?: ExtensionRuntimeDeclaration;
 	id: string;
 	name: string;
 	version: string;
 	description: string;
+	capabilities?: ExtensionCapabilities;
 	scope: ExtensionScope;
 	rootPath: string;
 	manifestPath: string;
 	enabled: boolean;
-	/** Whether the complete manifest and declared resource tree are valid. */
+	/** Whether the complete manifest and the installed tree are valid. */
 	valid: boolean;
 	/** Whether this package admits the running Clio version. */
 	compatible: boolean;
 	effective: boolean;
-	/** The single admission decision for extension-owned resources and hooks. */
+	/** The single admission decision for extension-owned tools and hooks. */
 	loadable: boolean;
 	/** Present exactly when the installed tree and manifest bytes were reverified. */
 	provenance?: ExtensionProvenance;
 	/** Digest observed while checking installed content on this load. */
 	observedContentDigest?: string;
-	resources: ExtensionManifestResources;
 	overriddenBy?: ExtensionScope;
 	diagnostics: ExtensionDiagnostic[];
 }
@@ -79,17 +98,6 @@ export interface ExtensionCandidate {
 	diagnostics: ExtensionDiagnostic[];
 }
 
-export interface ExtensionResourceRoot {
-	id: string;
-	scope: ExtensionScope;
-	path: string;
-	rootPath: string;
-	source: string;
-	provenance: ExtensionProvenance;
-	/** Zero denotes an ephemeral, uncommitted projection. */
-	generation: number;
-}
-
 export interface ExtensionHookSource {
 	provenance: ExtensionProvenance;
 	/** SHA-256 of the captured hooks.yaml bytes. */
@@ -112,7 +120,6 @@ export interface ExtensionSnapshot {
 	/** Content identity; generation, timestamp, and diagnostic text are excluded. */
 	digest: string;
 	packages: ReadonlyArray<InstalledExtension>;
-	resourceRoots: Readonly<Record<ExtensionResourceKind, ReadonlyArray<ExtensionResourceRoot>>>;
 	hookSources: ReadonlyArray<ExtensionHookSource>;
 	diagnostics: ExtensionSnapshotDiagnostics;
 }
@@ -190,14 +197,6 @@ export interface ExtensionMutationResult {
 	diagnostics: ExtensionDiagnostic[];
 }
 
-export interface ExtensionStateUpgradeReport {
-	scope: ExtensionScope;
-	statePath: string;
-	backupPath?: string;
-	upgraded: string[];
-	refused: Array<{ id: string; reason: string }>;
-}
-
 export interface ExtensionState {
 	version: 1;
 	disabled: string[];