@iowarp/clio-coder 0.4.5 → 0.4.7

package/dist/{chunk-U2JOLB7O.js → chunk-CE64C5K5.js}

@@ -5,16 +5,16 @@ import {
 } from "./chunk-JABWPKFY.js";
 import {
   webFetchToolSurface
-} from "./chunk-BBV5TKE6.js";
+} from "./chunk-CPXGJI2A.js";
 import {
   verifyToolSurface
-} from "./chunk-GXCCHKN6.js";
+} from "./chunk-MZHXENL7.js";
 import {
   codeNavToolSurface
-} from "./chunk-PWWSIB2A.js";
+} from "./chunk-ZGIGW4ZG.js";
 import {
   contextToolSurface
-} from "./chunk-KTFSFCVN.js";
+} from "./chunk-HRAKUPIH.js";
 import {
   RESPONSE_SCHEMA_RUNTIME_ID,
   bashTool,
@@ -23,17 +23,23 @@ import {
   readMaxBytes,
   readTool,
   renderAgentLedger
-} from "./chunk-TZ7MFRG4.js";
-import {
-  hashToolCall
-} from "./chunk-KF6GFW6O.js";
+} from "./chunk-NO7J45X6.js";
 import {
   createTaskBoardStore,
   taskBoardCounts
-} from "./chunk-7HBHHVCK.js";
+} from "./chunk-YPRSNUTC.js";
 import {
   describeCallAction
 } from "./chunk-2GPGAE5W.js";
+import {
+  isLoadableExtension
+} from "./chunk-OH3YYA3B.js";
+import {
+  extensionToolName,
+  listInstalledExtensions,
+  parseExtensionManifest,
+  resolveExtensionEntrypoint
+} from "./chunk-24S3DN22.js";
 import {
   networkToolsDisabled
 } from "./chunk-SL2RDHKO.js";
@@ -59,58 +65,71 @@ import {
   reserveObservation,
   toolResultContextText,
   truncateHead
-} from "./chunk-RLTT5GVY.js";
+} from "./chunk-IZYTT3CD.js";
 import {
   GREP_MAX_LINE_LENGTH,
   truncateLine
 } from "./chunk-KECNXMDE.js";
-import {
-  formatModelRejection
-} from "./chunk-4SVIVOMC.js";
 import {
   applyToolProfile
-} from "./chunk-CBSKDFWL.js";
-import {
-  classify
-} from "./chunk-LUL5Z66S.js";
-import {
-  protectArtifact,
-  protectedArtifactMutationBlockReason
-} from "./chunk-M6TAYK66.js";
+} from "./chunk-GEVQNST4.js";
 import {
   gitTool
-} from "./chunk-WJIMKGD6.js";
-import {
-  CLIO_ARTIFACT_DIR,
-  artifactDefaultPath
-} from "./chunk-NTTS3O53.js";
-import {
-  typebox_exports
-} from "./chunk-GH5ZR6JP.js";
+} from "./chunk-BAU36233.js";
 import {
   parseAgentLedgerBody
 } from "./chunk-VQD7NH7Z.js";
 import {
   decisionRef,
   skillActivationFromToolDetails
-} from "./chunk-5ZMXGW7P.js";
+} from "./chunk-KAFMW7WM.js";
 import {
-  byteLength,
-  truncateUtf8
-} from "./chunk-MYI32N4R.js";
+  hashToolCall
+} from "./chunk-BQQ5MXUC.js";
 import {
-  ToolNames,
-  isBuiltinToolName
-} from "./chunk-EHOSNVVM.js";
+  formatModelRejection
+} from "./chunk-DLIYANB7.js";
 import {
   assertSafeId
 } from "./chunk-UHW5V7HC.js";
+import {
+  byteLength,
+  truncateUtf8
+} from "./chunk-MYI32N4R.js";
 import {
   BusChannels
-} from "./chunk-HL26ADLH.js";
+} from "./chunk-6CB2IL4N.js";
 import {
   incompleteInstallationAdvice
 } from "./chunk-3A3CUMKA.js";
+import {
+  StringEnum,
+  engineStreamSimple
+} from "./chunk-5CMARGPF.js";
+import {
+  value_exports
+} from "./chunk-SER7RRAE.js";
+import {
+  extensionContentDigestWithCapture
+} from "./chunk-XW2UZICE.js";
+import {
+  classify
+} from "./chunk-HOX4YZ2K.js";
+import {
+  protectArtifact,
+  protectedArtifactMutationBlockReason
+} from "./chunk-2O2LVQQK.js";
+import {
+  typebox_exports
+} from "./chunk-GH5ZR6JP.js";
+import {
+  CLIO_ARTIFACT_DIR,
+  artifactDefaultPath
+} from "./chunk-NTTS3O53.js";
+import {
+  ToolNames,
+  isBuiltinToolName
+} from "./chunk-WLHX3MM5.js";
 import {
   GUARDRAIL_DEFAULTS,
   resolveGuardrail,
@@ -120,17 +139,18 @@ import {
   workerToolCallCapSynthesisReason
 } from "./chunk-C27U2TYG.js";
 import {
-  buildSafeToolEnv
+  buildSafeToolEnv,
+  runCommandVector
 } from "./chunk-GJ24ODAX.js";
 import {
-  StringEnum,
-  engineStreamSimple
-} from "./chunk-5CMARGPF.js";
+  require_dist
+} from "./chunk-B5GGDIHT.js";
 import {
   clioDataDir,
   clioStateDir
 } from "./chunk-CTTI7G3T.js";
 import {
+  __toESM,
   init_esm_shims
 } from "./chunk-ECBHH7LU.js";
 
@@ -1730,16 +1750,16 @@ var Diff = class {
       }
     }
   }
-  addToPath(path4, added, removed, oldPosInc, options) {
-    const last = path4.lastComponent;
+  addToPath(path5, added, removed, oldPosInc, options) {
+    const last = path5.lastComponent;
     if (last && !options.oneChangePerToken && last.added === added && last.removed === removed) {
       return {
-        oldPos: path4.oldPos + oldPosInc,
+        oldPos: path5.oldPos + oldPosInc,
         lastComponent: { count: last.count + 1, added, removed, previousComponent: last.previousComponent }
       };
     } else {
       return {
-        oldPos: path4.oldPos + oldPosInc,
+        oldPos: path5.oldPos + oldPosInc,
         lastComponent: { count: 1, added, removed, previousComponent: last }
       };
     }
@@ -2394,27 +2414,27 @@ function resolveMatch(content, oldText, newText) {
   if (fuzzyMatch.found) return fuzzyMatch;
   return findIndentationRelaxedMatch(content, oldText, newText);
 }
-function notFoundError(path4, editIndex, totalEdits) {
+function notFoundError(path5, editIndex, totalEdits) {
   if (totalEdits === 1) {
     return new Error(
-      `Could not find the exact text in ${path4}. The old text must match exactly including all whitespace and newlines.`
+      `Could not find the exact text in ${path5}. The old text must match exactly including all whitespace and newlines.`
     );
   }
   return new Error(
-    `Could not find edits[${editIndex}] in ${path4}. The oldText must match exactly including all whitespace and newlines.`
+    `Could not find edits[${editIndex}] in ${path5}. The oldText must match exactly including all whitespace and newlines.`
   );
 }
-function duplicateError(path4, editIndex, totalEdits, occurrences) {
+function duplicateError(path5, editIndex, totalEdits, occurrences) {
   if (totalEdits === 1) {
     return new Error(
-      `Found ${occurrences} occurrences of the text in ${path4}. The text must be unique. Please provide more context to make it unique.`
+      `Found ${occurrences} occurrences of the text in ${path5}. The text must be unique. Please provide more context to make it unique.`
     );
   }
   return new Error(
-    `Found ${occurrences} occurrences of edits[${editIndex}] in ${path4}. Each oldText must be unique. Please provide more context to make it unique.`
+    `Found ${occurrences} occurrences of edits[${editIndex}] in ${path5}. Each oldText must be unique. Please provide more context to make it unique.`
   );
 }
-function applyEditsToNormalizedContent(normalizedContent, edits, path4) {
+function applyEditsToNormalizedContent(normalizedContent, edits, path5) {
   const normalizedEdits = edits.map((edit) => ({
     oldText: normalizeToLF(edit.oldText),
     newText: normalizeToLF(edit.newText)
@@ -2422,7 +2442,7 @@ function applyEditsToNormalizedContent(normalizedContent, edits, path4) {
   for (let i = 0; i < normalizedEdits.length; i += 1) {
     if ((normalizedEdits[i]?.oldText ?? "").length === 0) {
       throw new Error(
-        normalizedEdits.length === 1 ? `oldText must not be empty in ${path4}.` : `edits[${i}].oldText must not be empty in ${path4}.`
+        normalizedEdits.length === 1 ? `oldText must not be empty in ${path5}.` : `edits[${i}].oldText must not be empty in ${path5}.`
       );
     }
   }
@@ -2432,8 +2452,8 @@ function applyEditsToNormalizedContent(normalizedContent, edits, path4) {
     const edit = normalizedEdits[i];
     if (!edit) continue;
     const match = resolveMatch(baseContent, edit.oldText, edit.newText);
-    if (!match.found) throw notFoundError(path4, i, normalizedEdits.length);
-    if (match.occurrences > 1) throw duplicateError(path4, i, normalizedEdits.length, match.occurrences);
+    if (!match.found) throw notFoundError(path5, i, normalizedEdits.length);
+    if (match.occurrences > 1) throw duplicateError(path5, i, normalizedEdits.length, match.occurrences);
     matchedEdits.push({
       editIndex: i,
       matchIndex: match.index,
@@ -2448,7 +2468,7 @@ function applyEditsToNormalizedContent(normalizedContent, edits, path4) {
     if (!previous || !current) continue;
     if (previous.matchIndex + previous.matchLength > current.matchIndex) {
       throw new Error(
-        `edits[${previous.editIndex}] and edits[${current.editIndex}] overlap in ${path4}. Merge them into one edit or target disjoint regions.`
+        `edits[${previous.editIndex}] and edits[${current.editIndex}] overlap in ${path5}. Merge them into one edit or target disjoint regions.`
       );
     }
   }
@@ -2460,7 +2480,7 @@ function applyEditsToNormalizedContent(normalizedContent, edits, path4) {
   }
   if (baseContent === newContent) {
     throw new Error(
-      normalizedEdits.length === 1 ? `No changes made to ${path4}. The replacement produced identical content.` : `No changes made to ${path4}. The replacements produced identical content.`
+      normalizedEdits.length === 1 ? `No changes made to ${path5}. The replacement produced identical content.` : `No changes made to ${path5}. The replacements produced identical content.`
     );
   }
   return { baseContent, newContent };
@@ -2685,7 +2705,7 @@ var evidenceTool = {
     try {
       const dataDir = clioDataDir();
       if (mode === "list") {
-        const { evidenceInventorySnapshot } = await import("./inventory-K2OZ36YJ.js");
+        const { evidenceInventorySnapshot } = await import("./inventory-7KFQGLCV.js");
         return boundedResult(await evidenceInventorySnapshot(Date.now, dataDir));
       }
       const id = mode === "inspect" ? args.id : args.runId;
@@ -2693,8 +2713,8 @@ var evidenceTool = {
         return { kind: "error", message: `evidence: ${mode} requires ${mode === "inspect" ? "id" : "runId"}` };
       }
       assertSafeId(id, mode === "inspect" ? "evidence" : "run");
-      const { buildEvidence, EvidenceNotFoundError, inspectEvidence, loadEvidenceGateDecisions } = await import("./evidence-DTGEN456.js");
-      const { evidenceDetailSnapshot } = await import("./detail-5572VLBO.js");
+      const { buildEvidence, EvidenceNotFoundError, inspectEvidence, loadEvidenceGateDecisions } = await import("./evidence-D6GUSYJW.js");
+      const { evidenceDetailSnapshot } = await import("./detail-H73BEF2N.js");
       let evidenceId = mode === "run" ? `run-${id}` : id;
       let inspected;
       try {
@@ -3485,12 +3505,12 @@ function bodyFromArgs(args) {
     case "finding": {
       const claim = stringArg(args, "claim");
       if (claim === null) return { error: "ledger: a finding requires claim (the one thing you observed)" };
-      const path4 = stringArg(args, "path");
+      const path5 = stringArg(args, "path");
       const line = typeof args.line === "number" ? args.line : void 0;
       return {
         kind: "finding",
         claim,
-        ...path4 === null ? {} : { path: path4 },
+        ...path5 === null ? {} : { path: path5 },
         ...line === void 0 ? {} : { line }
       };
     }
@@ -3616,9 +3636,9 @@ function normalizePaths(value) {
   if (!Array.isArray(value)) return null;
   const paths = [];
   for (const item of value) {
-    const path4 = trimString2(item);
-    if (path4 === null) return null;
-    if (!paths.includes(path4)) paths.push(path4);
+    const path5 = trimString2(item);
+    if (path5 === null) return null;
+    if (!paths.includes(path5)) paths.push(path5);
   }
   return paths;
 }
@@ -3806,7 +3826,12 @@ var OBSERVE_ENVELOPE_SELF_CAPS = [
   [ToolNames.CodeNav, () => OBSERVE_SELF_CAPS.codeNav],
   [
     ToolNames.Context,
-    () => Math.max(OBSERVE_SELF_CAPS.contextDocs, OBSERVE_SELF_CAPS.contextSkills, OBSERVE_SELF_CAPS.contextWorkspace)
+    () => Math.max(
+      OBSERVE_SELF_CAPS.contextDocs,
+      OBSERVE_SELF_CAPS.contextSkills,
+      OBSERVE_SELF_CAPS.contextWorkspace,
+      OBSERVE_SELF_CAPS.contextLibrary
+    )
   ]
 ];
 var SESSION_BOUND_TOOLS = /* @__PURE__ */ new Set([]);
@@ -4187,7 +4212,7 @@ function registerCoreTools(registry, deps = {}) {
   if (includeNetworkTools) {
     registry.register({
       ...builtin(
-        lazyTool(webFetchToolSurface, async () => (await import("./web-fetch-MQN4FH3X.js")).webFetchTool),
+        lazyTool(webFetchToolSurface, async () => (await import("./web-fetch-W4TNW4Q7.js")).webFetchTool),
         { path: "src/tools/web-fetch.ts", scope: "core" }
       )
     });
@@ -4197,17 +4222,18 @@ function registerCoreTools(registry, deps = {}) {
   });
   registry.register({
     ...builtin(
-      lazyTool(verifyToolSurface, async () => (await import("./verify-3AS3ULCY.js")).verifyTool),
+      lazyTool(verifyToolSurface, async () => (await import("./verify-T7NAEVIG.js")).verifyTool),
       { path: "src/tools/verify/index.ts", scope: "core" }
     )
   });
   registry.register({
     ...builtin(
-      lazyTool(codeNavToolSurface, async () => (await import("./code-nav-YXIAEZVS.js")).codeNavTool),
+      lazyTool(codeNavToolSurface, async () => (await import("./code-nav-B5LNX4KU.js")).codeNavTool),
       { path: "src/tools/codewiki/code-nav.ts", scope: "core" }
     )
   });
   const skillToolDeps = {
+    ...deps.workerRecall ? { workerRecall: deps.workerRecall } : {},
     getCwd: () => deps.session?.current()?.cwd ?? process.cwd(),
     ...deps.getSkillLoaderOptions ? { getSkillLoaderOptions: deps.getSkillLoaderOptions } : {},
     ...deps.skillMarketplace !== void 0 ? { skillMarketplace: deps.skillMarketplace } : {}
@@ -4237,7 +4263,7 @@ function registerCoreTools(registry, deps = {}) {
   registry.register({
     ...builtin(
       lazyTool(contextToolSurface, async () => {
-        const { createContextTool } = await import("./context-QQ53HSGJ.js");
+        const { createContextTool } = await import("./context-7HJEWTTP.js");
         if (!session) return createContextTool(skillToolDeps);
         const { probeWorkspace } = await import("./workspace-DZ7JADBG.js");
         return createContextTool({
@@ -4304,6 +4330,134 @@ function assertRegisteredBuiltinTools(registry, registration, includeDispatchToo
   assertBuiltinToolPolicy(registry.listAll(), { ...registration, includeDispatchTools, includePanesTools });
 }
 
+// src/tools/harness-extensions.ts
+init_esm_shims();
+import path4 from "node:path";
+var import_yaml = __toESM(require_dist(), 1);
+var MAX_INPUT_BYTES = 64 * 1024;
+function quoted(value) {
+  return `'${value.replaceAll("'", "'\\''")}'`;
+}
+function jsonInput(args) {
+  const input = JSON.stringify(args);
+  if (Buffer.byteLength(input) > MAX_INPUT_BYTES) throw new Error(`command tool input exceeds ${MAX_INPUT_BYTES} bytes`);
+  return input;
+}
+function commandVector(extension, tool) {
+  const entrypoint = resolveExtensionEntrypoint(extension.rootPath, tool.entrypoint);
+  return tool.runtime === "node" ? { file: process.execPath, args: ["--", entrypoint] } : { file: "python3", args: ["-I", entrypoint] };
+}
+function verifiedCommands(extension) {
+  const manifestName = path4.basename(extension.manifestPath);
+  const verified = extensionContentDigestWithCapture(extension.rootPath, { capture: [manifestName] });
+  if (verified.digest !== extension.provenance.contentDigest)
+    throw new Error("installed extension changed while loading tools");
+  const bytes = verified.captured.get(manifestName);
+  if (!bytes) throw new Error("verified extension manifest bytes are absent");
+  const parsed = parseExtensionManifest(
+    manifestName.endsWith(".json") ? JSON.parse(bytes.toString("utf8")) : (0, import_yaml.parse)(bytes.toString("utf8")),
+    extension.manifestPath
+  );
+  if (!parsed.manifest || parsed.diagnostics.some((entry) => entry.type === "error"))
+    throw new Error("verified extension manifest is invalid");
+  if (parsed.manifest.id !== extension.id || parsed.manifest.version !== extension.version)
+    throw new Error("verified extension identity changed while loading tools");
+  return parsed.manifest.capabilities?.tools ?? [];
+}
+function createCommandTool(extension, tool, cwd) {
+  const name = extensionToolName(extension.id, tool.name);
+  const vector = commandVector(extension, tool);
+  return {
+    name,
+    description: `${tool.description}
+Harness extension ${extension.id}@${extension.version}; runs an installed command with JSON input and output.`,
+    parameters: tool.inputSchema,
+    baseActionClass: "execute",
+    executionMode: "sequential",
+    sourceInfo: { path: extension.manifestPath, scope: "domain", extension: extension.provenance },
+    metadata: {
+      objective: tool.description,
+      uiLabel: `${extension.id}/${tool.name}`,
+      retrySafety: "not_retry_safe",
+      resultSizePolicy: { kind: "bounded", maxBytes: tool.maxOutputBytes ?? 6e5 },
+      costLatency: "local_slow"
+    },
+    safetyCall(args) {
+      let input = "[invalid JSON input]";
+      try {
+        input = jsonInput(args);
+      } catch {
+      }
+      return { tool: "bash", args: { command: [vector.file, ...vector.args, input].map(quoted).join(" "), cwd } };
+    },
+    async run(args, options) {
+      try {
+        const input = jsonInput(args);
+        if (!value_exports.Check(tool.inputSchema, args))
+          return { kind: "error", message: `${name}: input does not match its declared JSON schema` };
+        if (options?.signal?.aborted) return { kind: "error", message: `${name}: aborted before execution` };
+        const current = listInstalledExtensions(cwd).find(
+          (entry) => entry.id === extension.id && isLoadableExtension(entry)
+        );
+        if (!current || !isLoadableExtension(current) || current.scope !== extension.scope || current.provenance.canonicalRoot !== extension.provenance.canonicalRoot || current.provenance.contentDigest !== extension.provenance.contentDigest) {
+          return {
+            kind: "error",
+            message: `${name}: extension disabled, removed, replaced, or changed; restart after reviewing its installation`
+          };
+        }
+        const activeVector = commandVector(current, tool);
+        const result = await runCommandVector(activeVector.file, [...activeVector.args, input], {
+          cwd,
+          workspaceRoot: cwd,
+          timeoutMs: tool.timeoutMs ?? 12e4,
+          maxOutputBytes: tool.maxOutputBytes ?? 6e5,
+          ...options?.signal ? { signal: options.signal } : {}
+        });
+        const details = {
+          extension: extension.provenance,
+          argv: [result.file, ...result.args],
+          cwd: result.cwd,
+          exitCode: result.exitCode,
+          durationMs: result.durationMs,
+          aborted: result.aborted,
+          timedOut: result.timedOut,
+          outputCapped: result.outputCapped,
+          stderr: result.stderr
+        };
+        if (result.aborted || result.timedOut || result.outputCapped || result.exitCode !== 0) {
+          const reason = result.aborted ? "aborted" : result.timedOut ? "timed out" : result.outputCapped ? "output limit exceeded" : `exited with code ${result.exitCode}`;
+          return { kind: "error", message: `${name}: ${reason}`, details };
+        }
+        try {
+          return { kind: "ok", output: JSON.stringify(JSON.parse(result.stdout)), details };
+        } catch {
+          return { kind: "error", message: `${name}: command stdout must contain one JSON value`, details };
+        }
+      } catch (error) {
+        return { kind: "error", message: `${name}: ${error instanceof Error ? error.message : String(error)}` };
+      }
+    }
+  };
+}
+function registerHarnessExtensionTools(registry, cwd = process.cwd()) {
+  const diagnostics = [];
+  for (const extension of listInstalledExtensions(cwd)) {
+    if (!isLoadableExtension(extension) || !extension.capabilities) continue;
+    try {
+      const tools = verifiedCommands(extension).map((tool) => createCommandTool(extension, tool, path4.resolve(cwd)));
+      for (const tool of tools) if (registry.get(tool.name)) throw new Error(`tool collision: ${tool.name}`);
+      for (const tool of tools) registry.register(tool);
+    } catch (error) {
+      diagnostics.push({
+        type: "error",
+        path: extension.rootPath,
+        message: `extension ${extension.id}: ${error instanceof Error ? error.message : String(error)}`
+      });
+    }
+  }
+  return diagnostics;
+}
+
 export {
   createProtectedArtifactsRegistration,
   INTERACTIVE_LOOP_BLOCK_BUDGET,
@@ -4333,6 +4487,7 @@ export {
   generateDiffString,
   lazyTool,
   registerCoreTools,
-  assertRegisteredBuiltinTools
+  assertRegisteredBuiltinTools,
+  registerHarnessExtensionTools
 };
-//# sourceMappingURL=chunk-U2JOLB7O.js.map
+//# sourceMappingURL=chunk-CE64C5K5.js.map