@iowarp/clio-coder 0.4.5 → 0.4.7

package/dist/{chunk-DIMRLNIC.js → chunk-IMOD2YPV.js}

@@ -7,17 +7,17 @@ import {
   renderOperatorProfile,
   selectActiveRules,
   selectProjectPreload
-} from "./chunk-SDWNDICN.js";
+} from "./chunk-WN552PKN.js";
 import {
   loadFragments,
   sha256
-} from "./chunk-6CDNRHWH.js";
-import {
-  isUserVisibleAgent
-} from "./chunk-OQM5IVJY.js";
+} from "./chunk-IQCNVLO6.js";
 import {
   BusChannels
-} from "./chunk-HL26ADLH.js";
+} from "./chunk-6CB2IL4N.js";
+import {
+  isUserVisibleAgent
+} from "./chunk-34XHRVKG.js";
 import {
   init_esm_shims
 } from "./chunk-ECBHH7LU.js";
@@ -349,10 +349,17 @@ function createPromptsBundle(context, options = {}) {
         if (!diffTouchesFragments(paths)) return;
         reload();
       });
-      unsubscribeExtensionsReload = context.bus.on(BusChannels.ExtensionsReloaded, (payload) => {
+      const onResourceReload = (payload) => {
         if (payload?.changed !== true) return;
         reload();
-      });
+      };
+      const unsubscribe = [
+        context.bus.on(BusChannels.ExtensionsReloaded, onResourceReload),
+        context.bus.on(BusChannels.PluginsReloaded, () => reload())
+      ];
+      unsubscribeExtensionsReload = () => {
+        for (const stop of unsubscribe) stop();
+      };
     },
     async stop() {
       unsubscribeContextSources?.();
@@ -689,4 +696,4 @@ export {
   createPromptsDomainModule,
   SchedulingDomainModule
 };
-//# sourceMappingURL=chunk-DIMRLNIC.js.map
+//# sourceMappingURL=chunk-IMOD2YPV.js.map

package/dist/{chunk-6CDNRHWH.js → chunk-IQCNVLO6.js}

@@ -2,14 +2,15 @@ import { createRequire as __clioCreateRequire } from "node:module"; const requir
 import {
   ROUTE_POLICY_VERSION,
   isRouteDecisionAgentSelection,
-  isRoutingIntent
-} from "./chunk-K2HL3GBL.js";
+  isRoutingIntent,
+  parseWorkerContextProvenance
+} from "./chunk-T4TY5GG3.js";
 import {
   isExecutionRole
-} from "./chunk-LY4N4TTL.js";
+} from "./chunk-3LXJOICS.js";
 import {
   readSettings
-} from "./chunk-FKIOX6DS.js";
+} from "./chunk-4QKAITQT.js";
 import {
   readClioVersion,
   resolvePackageRoot
@@ -323,6 +324,7 @@ var RECEIPT_INTEGRITY_FIELD_COVERAGE = {
   ledgerContribution: true,
   sessionId: true,
   briefing: true,
+  workerContext: true,
   outcomeCode: true,
   steering: true,
   routeDecision: true
@@ -393,6 +395,7 @@ function ledgerDigestFields(envelope) {
     promptSignature: envelope.promptSignature ?? null,
     toolSignature: envelope.toolSignature ?? null,
     briefing: envelope.briefing ?? null,
+    ...envelope.workerContext !== void 0 ? { workerContext: envelope.workerContext } : {},
     outcomeCode: envelope.outcomeCode ?? null,
     steering: envelope.steering ?? null
   };
@@ -486,6 +489,8 @@ function firstLedgerMismatch(receipt, envelope) {
     if (!Object.is(receiptValue, ledgerValue)) return field;
   }
   if (canonicalJson2(receipt.briefing ?? null) !== canonicalJson2(envelope.briefing ?? null)) return "briefing";
+  if (canonicalJson2(receipt.workerContext ?? null) !== canonicalJson2(envelope.workerContext ?? null))
+    return "workerContext";
   if (canonicalJson2(receipt.budget ?? null) !== canonicalJson2(envelope.budget ?? null)) return "budget";
   if (canonicalJson2(receipt.steering ?? null) !== canonicalJson2(envelope.steering ?? null)) return "steering";
   return null;
@@ -591,6 +596,7 @@ var ARTIFACT_KINDS = /* @__PURE__ */ new Set([
   "gate_decision",
   "briefing",
   "project_context",
+  "worker_context",
   "autonomy_policy",
   "finish_contract_evidence",
   "evidence_bundle",
@@ -898,8 +904,20 @@ function recordedProjectContextHash(context) {
   if (context.tier === "bounded") return validBoundedProjectContext(context) ? context.contentHash : void 0;
   return validNoneTierProjectContext(context) ? context.contentHash : void 0;
 }
+function validWorkerContext(value) {
+  try {
+    parseWorkerContextProvenance(value);
+    return true;
+  } catch {
+    return false;
+  }
+}
 function contextArtifacts(receipt) {
   const artifacts = [receiptReference(receipt)];
+  if (receipt.workerContext !== void 0 && validWorkerContext(receipt.workerContext))
+    artifacts.push(
+      sha256Reference("worker_context", `${receipt.runId}:worker-context`, receipt.workerContext.contentHash)
+    );
   if (receipt.briefing !== void 0 && validBriefing(receipt.briefing)) {
     artifacts.push(sha256Reference("briefing", `${receipt.runId}:briefing`, receipt.briefing.contentHash));
   }
@@ -914,16 +932,18 @@ function adaptRunReceiptContextStatus(receipt) {
   const artifacts = contextArtifacts(receipt);
   const source = receiptSource(receipt);
   const briefingInvalid = receipt.briefing !== void 0 && !validBriefing(receipt.briefing);
-  if (briefingInvalid) return attributed("invalid", source, DISPATCH_AUTHORITY, artifacts);
+  if (briefingInvalid || receipt.workerContext !== void 0 && !validWorkerContext(receipt.workerContext))
+    return attributed("invalid", source, DISPATCH_AUTHORITY, artifacts);
   const context = receipt.projectContext;
   if (context === void 0) {
-    if (receipt.briefing !== void 0) return attributed("recorded", source, DISPATCH_AUTHORITY, artifacts);
+    if (receipt.briefing !== void 0 || receipt.workerContext !== void 0)
+      return attributed("recorded", source, DISPATCH_AUTHORITY, artifacts);
     return attributed("unknown", compatibilitySource(receipt, "projectContext"), COMPATIBILITY_AUTHORITY, artifacts);
   }
   if (context.tier === "none") {
     const bare = context.chars === void 0 && context.contentHash === void 0 && context.sections === void 0;
     if (bare) {
-      return receipt.briefing === void 0 ? attributed("not_applicable", source, DISPATCH_AUTHORITY, artifacts) : attributed("recorded", source, DISPATCH_AUTHORITY, artifacts);
+      return receipt.briefing === void 0 && receipt.workerContext === void 0 ? attributed("not_applicable", source, DISPATCH_AUTHORITY, artifacts) : attributed("recorded", source, DISPATCH_AUTHORITY, artifacts);
     }
     return attributed(
       validNoneTierProjectContext(context) ? "recorded" : "invalid",
@@ -1684,4 +1704,4 @@ export {
   EvalTaskFileError,
   loadFragments
 };
-//# sourceMappingURL=chunk-6CDNRHWH.js.map
+//# sourceMappingURL=chunk-IQCNVLO6.js.map

package/dist/{chunk-UTUNT5QL.js → chunk-ISNCCX42.js}

@@ -2,28 +2,28 @@ import { createRequire as __clioCreateRequire } from "node:module"; const requir
 import {
   canonicalJson,
   sha256
-} from "./chunk-6CDNRHWH.js";
+} from "./chunk-IQCNVLO6.js";
 import {
   addResponseModelIdObservationCount,
   emptyResponseModelIdObservationCounts,
   responseModelIdObservationFromRecord
-} from "./chunk-F34AR6O3.js";
+} from "./chunk-D2T66PDV.js";
 import {
   uncachedPrefillTokens
 } from "./chunk-QH3ZTUOA.js";
-import {
-  ToolNames
-} from "./chunk-EHOSNVVM.js";
 import {
   ceilChars,
   extractReasoningTokens
 } from "./chunk-77CZRFTE.js";
-import {
-  settingsPath
-} from "./chunk-FKIOX6DS.js";
 import {
   isEngineContextOverflow
 } from "./chunk-5CMARGPF.js";
+import {
+  settingsPath
+} from "./chunk-4QKAITQT.js";
+import {
+  ToolNames
+} from "./chunk-WLHX3MM5.js";
 import {
   init_esm_shims
 } from "./chunk-ECBHH7LU.js";
@@ -663,4 +663,4 @@ export {
   projectHeadlessJsonEvent,
   projectDispatchJsonEvent
 };
-//# sourceMappingURL=chunk-UTUNT5QL.js.map
+//# sourceMappingURL=chunk-ISNCCX42.js.map

package/dist/{chunk-RLTT5GVY.js → chunk-IZYTT3CD.js}

@@ -4,9 +4,6 @@ import {
   truncateHead,
   truncateTail
 } from "./chunk-KECNXMDE.js";
-import {
-  createSafetyPolicyEngine
-} from "./chunk-4SVIVOMC.js";
 import {
   INSTRUCTION_SHAPED_WARNING
 } from "./chunk-WXA2CFJO.js";
@@ -14,6 +11,9 @@ import {
   createRedactionTally,
   redactSecretsText
 } from "./chunk-O3VV6IVK.js";
+import {
+  createSafetyPolicyEngine
+} from "./chunk-DLIYANB7.js";
 import {
   byteLength,
   truncateUtf8
@@ -925,7 +925,11 @@ var OBSERVE_SELF_CAPS = {
   codeNav: 16 * 1024,
   contextDocs: 16 * 1024,
   contextSkills: 50 * 1024,
-  contextWorkspace: 50 * 1024
+  contextWorkspace: 50 * 1024,
+  // Library rows are metadata: name, owner, origin, availability, invocation.
+  // A full page of 50 stays well inside this, and a smaller cap than the
+  // skills catalog is what keeps a catalog read from crowding out the turn.
+  contextLibrary: 16 * 1024
 };
 var DEFAULT_OBSERVATION_TURN_BUDGET_BYTES = GUARDRAIL_DEFAULTS.observationTurnBudgetBytes;
 var MIN_BUDGET_SLICE_BYTES = 1024;
@@ -1212,4 +1216,4 @@ export {
   finalizeObservation,
   createObservationPathFilter
 };
-//# sourceMappingURL=chunk-RLTT5GVY.js.map
+//# sourceMappingURL=chunk-IZYTT3CD.js.map

package/dist/{chunk-5ZMXGW7P.js → chunk-KAFMW7WM.js}

@@ -1,4 +1,7 @@
 import { createRequire as __clioCreateRequire } from "node:module"; const require = __clioCreateRequire(import.meta.url);
+import {
+  AUTONOMY_EXPOSURES
+} from "./chunk-EM2WNQS2.js";
 import {
   init_esm_shims
 } from "./chunk-ECBHH7LU.js";
@@ -112,82 +115,6 @@ function isSkillActivation(value) {
   return typeof record.name === "string" && typeof record.filePath === "string" && typeof record.hash === "string" && typeof record.source === "string" && (record.sourceOrigin === void 0 || typeof record.sourceOrigin === "string") && (record.triggeredBy === "slash-command" || record.triggeredBy === "tool") && (record.turnId === void 0 || typeof record.turnId === "string") && (record.runId === void 0 || typeof record.runId === "string");
 }
 
-// src/domains/safety/autonomy.ts
-init_esm_shims();
-var AUTONOMY_LEVELS = ["read-only", "suggest", "auto-edit", "full-auto"];
-var DEFAULT_AUTONOMY_LEVEL = "auto-edit";
-function isAutonomyLevel(value) {
-  return typeof value === "string" && AUTONOMY_LEVELS.includes(value);
-}
-var AUTONOMY_EXPOSURES = ["local", "outward"];
-var DEFAULT_AUTONOMY_EXPOSURE = "local";
-function modelMayActivateSkills(level) {
-  return level === "auto-edit" || level === "full-auto";
-}
-function mapAutonomy(level, actionClass, options = {}) {
-  if (actionClass === "git_destructive") return "deny";
-  if ((level === "auto-edit" || level === "suggest") && options.exposure === "outward") return "ask";
-  if (actionClass === "read") return "allow";
-  if (level === "read-only") return "deny";
-  if (level === "suggest") return "ask";
-  switch (actionClass) {
-    case "write":
-      return "allow";
-    case "dispatch":
-      if (options.dispatchPlanScale === true && level !== "full-auto") return "ask";
-      return "allow";
-    case "execute": {
-      if (options.executeRecognized !== false) return "allow";
-      return level === "full-auto" ? "allow" : "ask";
-    }
-    case "unknown":
-      return "ask";
-    default:
-      return "ask";
-  }
-}
-function autonomyDenyRejection(level, tool, actionClass) {
-  return {
-    short: `${tool} denied: autonomy level is ${level}`,
-    detail: `Clio is at autonomy ${level}: ${actionClass} actions are denied without prompting. Describe the change you would make instead, so the operator can apply it or raise the autonomy level.`,
-    hints: [
-      ...level === "read-only" && actionClass === "execute" ? [
-        "For independent permitted inspection, use the native read, grep, find, or ls tools when available. Do not use them to reproduce the denied execution or write; each call still follows its safety policy."
-      ] : [],
-      "Propose the exact edit or command as text.",
-      "The operator can change the level in interactive /settings or start a new headless run with clio-coder run --autonomy <level>."
-    ]
-  };
-}
-function autonomyAskRejection(level, tool, actionClass, exposure = DEFAULT_AUTONOMY_EXPOSURE) {
-  if (exposure === "outward") {
-    return {
-      short: `${tool} needs approval: outward-facing gate at autonomy ${level}`,
-      detail: `The call declared exposure=outward, so answering it publishes or sends something outside the workspace. Autonomy ${level} auto-answers local gates and parks outward-facing ones for the operator.`,
-      hints: [
-        "Approving resumes only this call.",
-        "Autonomy full-auto answers outward gates too; the safety net still applies there."
-      ]
-    };
-  }
-  return {
-    short: `${tool} needs approval (${actionClass}) at autonomy ${level}`,
-    detail: `Autonomy ${level} routes ${actionClass} actions through operator approval. The call is parked until the operator approves it once or cancels it.`,
-    hints: [
-      "Approving resumes only this call.",
-      "Recognized commands can be added to .clio-coder/safety.yaml.",
-      // The sanctioned pivots for a gated shell command: typed verification
-      // and read-class observe tools run without approval at this level,
-      // and models otherwise stall retrying denied bash for checks or
-      // directory listings.
-      ...actionClass === "execute" ? [
-        'A declared package or project-catalog check runs without approval through the verify tool: verify(check="<id>").',
-        "Read-only inspection runs without approval through the ls, read, grep, and find tools."
-      ] : []
-    ]
-  };
-}
-
 // src/domains/session/entries.ts
 init_esm_shims();
 import { createHash } from "node:crypto";
@@ -446,14 +373,6 @@ export {
   agentSkillToolPolicy,
   skillActivationFromToolDetails,
   isSkillActivation,
-  AUTONOMY_LEVELS,
-  DEFAULT_AUTONOMY_LEVEL,
-  isAutonomyLevel,
-  DEFAULT_AUTONOMY_EXPOSURE,
-  modelMayActivateSkills,
-  mapAutonomy,
-  autonomyDenyRejection,
-  autonomyAskRejection,
   SKILL_CONTEXT_STATE,
   skillContextContentHash,
   verifiedSkillContextCheckpoint,
@@ -464,4 +383,4 @@ export {
   isSessionHeader,
   isSessionEntry
 };
-//# sourceMappingURL=chunk-5ZMXGW7P.js.map
+//# sourceMappingURL=chunk-KAFMW7WM.js.map