@iowarp/clio-coder 0.4.6 → 0.4.7

package/docs/guide/commands-and-modes.md

@@ -76,7 +76,7 @@ For process exit codes, stdout deliverable guarantees, and machine-readable JSON
 | `clio-coder trace ui [--db PATH] [--port N]` | Serve the localhost-only waterfall viewer. The viewer is not part of the published package. |
 | `clio-coder dev evolve manifest init\|validate\|summarize` | Create and check typed harness change manifests. |
 | `clio-coder extensions list\|discover\|install\|enable\|disable\|remove` | Manage installed extension packages and resource roots. `clio-coder ext` is an accepted alias. |
-| `clio-coder skills list\|search\|inspect\|validate\|install\|update\|sync\|eval` | Manage discovered skills, Clio-native skills, and local marketplace installs. |
+| `clio-coder library list\|search\|register\|inspect\|validate\|install\|update\|enable\|disable\|drift\|pin\|remove` | Manage packages of kind plugin, skill, agent, prompt or fleet at user/project scope; `install/update --dry-run` preview. `library skills` lists runtime skills; `library inventory --json` is the fixed GUI read. |
 | `clio-coder docs [topic] [--no-open]` | Serve the interactive HTML docs of a source checkout on 127.0.0.1; the npm package ships the Markdown guides only. |
 | `clio-coder usage report [--repo <path>] [--days <n>] [--json]` | Cross-session usage facts from session/run ledgers and retained out-of-turn calls, including known failed-compaction spending and missing coverage. The window defaults to 30 days and the JSON schema is marked experimental. |
 | `clio-coder dev share export --out <path> [--project\|--user\|--both] [--context] [--prompts] [--skills] [--settings] [--extensions]` | Export project context, prompts, skills, settings fragments, and extension bundles. |
@@ -169,8 +169,16 @@ The registry table below lists the available interactive slash commands. On a ba
 | --- | --- | --- |
 | `/quit` | `/quit` | Exit Clio Coder |
 | `/help` | `/help [query]` | Open the interactive help center showing commands and keys |
-| `/skill` | `/skill [name] [task]` | Open the Skills Hub or invoke a skill |
-| `/resources` | `/resources [skills\|prompts\|library [kind]\|extensions [reload]]` | Browse installed resources and private library entries; `extensions reload` commits a new extension generation |
+| `/skill` | `/skill <name> [task]` or `/skill off` | Invoke a skill or clear its active tool surface; `/skills` opens the browser. |
+| `/background` | `/background` | Detach the newest eligible attached dispatch through its existing owner; no eligible dispatch gives an explanatory no-op. |
+| `/interrupt` | `/interrupt <text>` | Settle the active run and send text through the interrupt owner; refusals keep its existing next-slot behavior. Missing text is correctable. |
+| `/editor` | `/editor [text]` | Edit explicit text or an empty buffer externally; return to the composer for deliberate submission. Failure preserves the command for correction. |
+| `/notifications` | `/notifications dismiss [all]` | Dismiss the oldest notice once, or explicitly dismiss all; this does not mute future notices. |
+| `/library` | `/library [inspect \| install \| remove <ref>] [import <path-or-url>] [reload]` | Open the full-screen Library with Skills, Agents, Prompts, Fleets and Plugins tabs. A named reference opens the browser on that row; `install`, `remove` and `import` show a reviewed plan first and write nothing until it is accepted. `reload` refreshes installed recipe resources. Alt+L opens the same browser. |
+| `/skills` | `/skills` | Open the Library on Skills. |
+| `/prompts` | `/prompts` | Open the Library on Prompts. |
+| `/extensions` | `/extensions [reload]` | Inspect harness extensions or reload their hooks and operator runtimes. |
+| `/interop` | `/interop` | Inspect another local coding agent and review adoption of supported resources. |
 | `/share` | `/share [runId]` | Share a worker result with the main agent |
 | `/archive` | `/archive export <path> \| /archive import [--dry-run] [--force] <path>` | Export or import a full Clio archive |
 | `/run` | `/run [--agent-profile <profile>] [--runtime <runtimeId>] [--target <id>] [--model <id>] [--thinking <level>] [--tool-profile <minimal-local\|science-local\|full-agent>] [--require <cap>] [--share] <agent> <task>` | Run a fleet agent |
@@ -178,7 +186,7 @@ The registry table below lists the available interactive slash commands. On a ba
 | `/btw` | `/btw <question>` | Ask a side question that never enters the session transcript |
 | `/oracle` | `/oracle <question>` | Ask a read-only advisor to challenge a question against this session's settled decisions |
 | `/council` | `/council [--roster <name>] [--rounds <n>] [--synthesis <judge\|vote\|none>] <task>` | Ask a roster of read-only members the same task, with an optional vote or judge synthesis |
-| `/agents` | `/agents [list\|connect]` | List native and external agents, or review detected external-agent proposals |
+| `/agents` | `/agents` | Open the Library on Agents. |
 | `/cost` | `/cost` | Show session token and cost totals |
 | `/context` | `/context compact [instructions] \| /context recall <ref> \| /context init \| /context refresh \| /context reset` | Context hub: window overlay plus compact, recall, init, refresh, and reset |
 | `/fleet` | `/fleet run [--var <key=value>] <name>` | Open Settings → Fleet, or run a fleet contract with an approval preview |
@@ -214,7 +222,7 @@ must record a passing validation receipt for every named check or a successful
 completion note alone does not satisfy acceptance. `clio-coder tasks list`,
 `hand <uN>`, `done <uN>`, and `drop <uN>` manage the same inbox as `/tasks`.
 
-Retired spellings are unrecognized commands and use the standard unknown-command diagnostic; they do not print automatic replacement hints. Use supported spellings such as `/settings targets`, `/settings chat model-picker`, and the corresponding `/resources` subcommand. Unrecognized commands are not sent to the model as prompt text.
+Retired commands are rejected before model submission. Old Library browsing forms, including `/resources`, `/library <kind>` and `/agents connect`, explain the canonical route. Browse with `/library`, `/skills`, `/agents` or `/prompts`; use `/interop` for local-agent adoption and `/extensions` for harness extensions.
 
 `/context` with no arguments opens the context-window ledger overlay, including
 the working-set section (policy, evicted items and tokens, events, recalls, churn).
@@ -314,7 +322,7 @@ The `/resume` picker accepts Page Up and Page Down to move by its 12 visible row
 Only active commands run. Typing anything command-shaped that the registry does
 not own checks the loaded prompt templates across native and foreign prompt roots.
 Built-in command names are reserved across interactive and headless modes; a
-template with the same basename is omitted from `/resources prompts` with a collision
+template with the same basename is omitted from `/prompts` with a collision
 diagnostic instead of shadowing a command on one surface and expanding on another.
 If a matching template is found in an untrusted project root, Clio prints that the
 prompt template comes from an untrusted project root and directs the operator to set
@@ -424,17 +432,19 @@ After `/resume`, Clio offers `/memory seed` when the newest handoff contains a
 structured snapshot. Seeding is explicit, deduplicated, and unavailable while
 `context.memory.enabled` is false.
 
-The `/agents connect` overlay lists the other coding agents Clio found on this machine,
-grouped `Detected`, `Configured`, and `Declined`. A detected row's detail pane
+The `/interop` overlay lists the other coding agents Clio found on this machine,
+grouped `Detected`, `Configured`, `Declined`, and `Inventory`. A detected row's detail pane
 shows the exact `integrations.externalAgents.entries` entry that connecting it would append, plus
 the two facts a new peer inherits: `projectContext: none`, so the peer receives
 the task text and never the project projection, and `toolGovernance:
 clio-coder-policy`, so its tool calls are gated by Clio safety. Press `a` to connect
-one or `d` to decline; the overlay reads the report this process already produced
-at boot and never probes on a keystroke. Accepting applies to the live session,
+one or `d` to decline. Opening the overlay refreshes the disk inventory and runs
+bounded version probes; navigation and plan approval start no agent session. Accepting applies to the live session,
 because `delegation` hot-reloads.
 
-Boot adds at most one line about interop. The current hint can still say `Run /interop to review.`, but `/interop` is unrecognized and receives the standard unknown-command diagnostic. Open `/agents connect` directly. The hint names only agents that are installed, unconfigured, and undecided, appears at most once per set of facts, and is never emitted in headless or ACP mode. Declining an agent silences it until its binary version or path changes, at which point it becomes a fresh proposal.
+Boot adds at most one line about interop. `/interop` opens the inventory and connection review. The hint names installed, unconfigured, undecided agents and stays silent in headless or ACP mode. Declining an agent silences its connection proposal until its binary version or path changes.
+
+`clio-coder interop inspect [--json]` reports host resources and wiring. `clio-coder interop adopt <host> [--kind skill|agent|prompt|plugin] [--project|--user] [--yes] [--dry-run]` shows a plan and requires approval before installing safe resources through the library. `/interop` offers the same adoption plan with source and destination scope, kind selection, and explicit approval. See [Coding agent interoperability](interop.md) for layouts, limits, and trust semantics.
 
 `clio-coder doctor` reports interop and never proposes anything. It emits one
 `ok` row per detected agent naming its version, its path, and whether it is
@@ -446,46 +456,122 @@ one, and plain `doctor` writes nothing.
 
 ## Keybindings
 
-App bindings use `Alt + <key>` as the primary scheme, plus `Shift+Tab`,
-`Ctrl+D`, `Shift+Enter` / `Ctrl+J`, and a portable `Ctrl+G` leader. Modern terminals and Linux/meta
-setups send Alt directly. Stock macOS Terminal.app needs **Use Option as Meta
-key** enabled in Settings > Profiles > Keyboard for native Alt; otherwise use
-`Ctrl+G` then the Alt binding letter.
-
-`Alt+B` and `Alt+D` are approved application-input boundary overrides of Pi's
-editor word-back and word-delete chords. Clio routes those two bindings before
-the editor sees them so the task and decision boards remain global shortcuts.
-They are intentional exceptions to the other app bindings' avoidance of Pi
-editor reserves and can be rebound through `settings.yaml.keybindings`.
+Clio has eleven direct application defaults. `/help` shows the effective keys,
+fixed leader entries, scopes and user overrides. `Ctrl+G` opens a visible action
+menu with no timeout: use a suffix or Up/Down and Enter. Unknown suffixes leave
+the menu open and preserve the draft; Ctrl+G or Esc closes it. Ctrl+C immediately
+cancels the underlying owner. The menu does not search as you type.
 
-| Binding | Action |
+| Direct default | Action | Fixed leader suffix |
+| --- | --- | --- |
+| `Alt+L` | Toggle top-level Library | `l` |
+| `Alt+M` | Toggle model picker | `m` |
+| `Alt+O` | Cycle Compact, Standard, Detailed output | `o` |
+| `Alt+U` | Toggle dashboard | `u` |
+| `Alt+W` | Toggle Workers | `w` |
+| `Alt+E` | Toggle files from Clio focus | `e` |
+| `Shift+Tab` | Cycle supported thinking effort | `t` |
+| `Ctrl+Q` | Queue draft after the whole active run; ordinary send while idle | `f` |
+| `Alt+Q` | Restore both queue kinds before the current draft, once | `q` |
+| `Ctrl+D` | Delete forward with text; exit only empty and idle with no queued messages | — |
+| `Ctrl+G` | Open or close the contextual action menu | — |
+
+Additional menu entries: `i` interrupts with the draft, `s` backgrounds the newest
+eligible attached dispatch, `g` edits the expanded draft externally, `x` dismisses
+one notification, `z` undoes the focused editable field, `r` toggles transcript
+search, `p`/`n` page the transcript and Home/End jump to its bounds. Previous/next
+prompt entries are available through arrows and Enter. `/tasks`, `/decisions`
+and `/tree` retain their boards; scoped model cycling retains configurable action
+IDs and has no default direct key.
+
+| Editing or contextual key | Behavior |
 | --- | --- |
-| `Enter` | Send draft prompt (when idle) or deliver it at the next slot of the active run (when streaming). |
-| `Shift+Enter` / `Ctrl+J` | Insert a newline into multiline editor input. |
-| `Ctrl+P` / `Ctrl+N` | Browse backward / forward through prompts accepted in this interactive process; returning past the newest entry restores the unfinished draft. |
-| `Alt+Enter` | End of turn: queue the current draft for delivery when the active run settles. |
-| `Alt+I` | Interrupt: cancel the active run and deliver the current draft now. Refused while an attached dispatch runs or a permission ask is parked; the draft then queues for the next slot. |
-| `Alt+Up` | Restore queued next-slot and end-of-turn messages to the editor. |
-| `Shift+Tab` | Cycle orchestrator thinking level (`off`, `minimal`, `low`, `medium`, `high`, `xhigh`, `max`). |
-| `Alt+T` | Open the session tree navigator (`/tree`). |
-| `Alt+U` | Toggle the footer dashboard between compact (quiet 2-zone) and expanded (4-zone urgency) layouts. |
-| `Alt+L` | Open the model and targets selector. |
-| `Alt+J` / `Alt+K` | Cycle forward / backward through the configured model set (when empty, directs the operator to `/settings chat model-picker`). |
-| `Alt+W` | Toggle the Fleet Runs board (task, run ID, live telemetry, retry, and terminal history). Inside it, `Enter` opens the selected run's live worker detail, `s` steers, and `x` cancels. |
-| `Alt+E` | Toggle the files pane docked below the session in a `--with-panes` session inside herdr; the same as `/files`. Rebind through `clio-coder.files.toggle`. |
-| `Alt+B` | Open the composite session and operator task board (`/tasks`). Approved application-boundary override of editor word-back. |
-| `Alt+D` | Open the settled interview decision board (`/decisions`). Approved application-boundary override of editor word-delete. |
-| `Alt+S` / `Ctrl+Alt+B` | Convert an active attached dispatch to a detached background batch. |
-| `Alt+O` | Cycle Output style: Compact, Standard, Detailed. Session only; save a default in `/settings interface`. |
-| `Alt+G` | Open the current input in an external editor. |
-| `Alt+X` | Dismiss footer notifications. |
-| `Ctrl+G`, then a letter | Portable leader fallback for Alt-letter actions. |
-| `Ctrl+C` | With no overlay: cancel stream, clear input, or press twice to exit. With an overlay open: close/cancel that overlay only. |
-| `Ctrl+D` | Exit when the editor is empty; otherwise delete the next character. It never exits from inside an overlay. |
-| `PageUp` / `PageDown` | In `/resume` and list overlays: scroll the selection by one full page (12 rows). |
-| `Esc` | With an overlay open: clear non-empty filter first, move up drill-down level, then close/cancel. With no overlay: cancel stream/operation or collapse dashboard. |
-
-When scripting Clio inside tmux, prefer `tmux send-keys C-m` for submit/confirm keys instead of the literal `Enter` token; some tmux/terminal combinations do not deliver `Enter` reliably.
+| `Enter` | Accept completion first, otherwise send idle input or queue at the next steering slot |
+| `Ctrl+J`, `Shift+Enter` | Composer newline; distinct Shift+Enter delivery is optional |
+| `Alt+B`/`Alt+F`, Ctrl+Left/Right, Alt+Left/Right | Word movement |
+| `Alt+D`/Alt+Delete | Delete the next word |
+| Ctrl+W, Alt+Backspace, Ctrl+Backspace | Delete the previous word; Ctrl+Backspace covers Windows Terminal's BS encoding |
+| Home/End, Ctrl+A/E | Composer line bounds, including fullscreen |
+| Ctrl+P/N | Prompt history, restoring the unfinished draft on return |
+| Ctrl+underscore | Undo; menu `z` is the fallback when the physical chord is unavailable |
+| Ctrl+R | Fullscreen transcript search; regular mode explains terminal Find |
+| Search Enter / Up | Next / previous match; Home/End edit the query |
+| Search Esc / Ctrl+C / Ctrl+R | Close search without cancelling unrelated work |
+| PageUp/PageDown, Ctrl+Up/Down | Fullscreen transcript paging / previous-next prompt; overlays own their local navigation |
+| Esc | Cancel completion or one local field/detail first; plain composer cancels bash then the active run |
+| Ctrl+C | Cancel the current search/modal/child; otherwise cancel work, clear draft, or use idle-empty double Ctrl+C to quit |
+
+Reviews, model-scope choices, permissions and interviews own their input. They
+expose no global send, navigation, background or quit actions. Top-level Library,
+model, tree and Workers scopes can expose their owner toggle; editable fields
+expose semantic undo. Nested Library reviews must finish or cancel before the
+browser toggle becomes available. Permission deletion never resolves a user
+submit binding. Enter allows only when its defined empty-draft condition holds;
+legacy LF/Ctrl+J is indistinguishable from Enter in these single-line scopes.
+
+Bracketed paste is literal and never submits, executes a slash or shell command,
+or confirms a modal. Submission needs a later deliberate key. External editing
+receives expanded paste text and preserves the draft on failure; returned text
+and recovered queues retain literal bang provenance. Input arriving during an
+asynchronous send expansion remains in the composer. Explicit release events
+are ignored before application or viewport actions. Repeats may edit, navigate
+or scroll; they cannot repeat send, toggle, cycle, confirmation, cancel or exit.
+Legacy streams cannot distinguish every held-key repeat.
+
+**Overrides and migration.** Keep overrides in `interface.keybindings`; legacy
+top-level `keybindings` remains a compatibility input. An explicit `[]` disables
+both direct access and the action's default leader entry. A default-unbound
+action may still have a leader entry. Rebinding a direct key does not change its
+fixed suffix; `leader: []` disables the menu. Unknown IDs and effective conflicts
+diagnose, and edits reload routing, components and hints together, cancelling a
+pending menu. No preferences are rewritten. Defaults move follow-up from
+Alt+Enter to Ctrl+Q and recovery from Alt+Up to Alt+Q; Alt+B/D return to editing.
+Infrequent boards use their slash commands, and interrupt/background/external
+editor/dismiss use the menu or command bridges. Explicit old choices remain.
+
+**Terminal delivery.** On stock macOS Terminal.app, Option may compose text;
+the Ctrl+G menu works without changing that setting. A temporary profile with
+Use Option as Meta enabled permits direct Alt keys. Windows Terminal/WSL2 can
+retain native Alt+Enter, Alt+arrow, clipboard, Find and zoom controls. Ctrl+J
+is the portable newline. Node raw mode normally disables flow control and
+signal generation; an SSH/mux or terminal UI can still intercept keys, so menu
+`f` is available if Ctrl+Q does not arrive. Native clipboard and terminal window
+controls remain upstream. Clio does not own keys while Yazi, an external editor
+or the host mux holds focus. Physical Windows/macOS acceptance is separate from
+Linux PTY and protocol tests; no terminal profile is installed automatically.
+
+### What Ctrl+C does
+
+`Ctrl+C` is not a single action. It resolves against the current input boundary,
+first match wins (`resolveApplicationCtrlCAction`, `src/interactive/application-controller.ts`):
+
+| State | What Ctrl+C does |
+| --- | --- |
+| An overlay owns input (transcript search, Library, Settings, model picker, a permission card) | Closes that overlay. It does not cancel a running turn and does not exit. Any armed shutdown is disarmed. |
+| Streaming or running a tool | Cancels the in-flight run. The turn seals its partial output in ledger order and the session stays open. |
+| Idle with text in the composer | Clears the draft. The press is consumed as an editor action, so it cannot become the hidden first half of an exit. |
+| Idle with messages queued | Protects the queue and says how to recover it with the bound dequeue key (`Alt+Q` by default). |
+| Idle, empty composer, nothing queued | Arms shutdown. A second `Ctrl+C` within 500 ms (`APPLICATION_DOUBLE_TAP_MS`) exits. |
+
+Closing a permission card without approving it is a decision, not a dismissal:
+the parked call is cancelled with `User cancelled this tool call from the
+permission confirmation prompt`, and a parked *worker* permission resolves as
+`deny`. The session itself keeps running.
+
+### Typing before Clio has finished starting
+
+Interactive startup mounts the editor before it loads its services, so the
+composer accepts input from the first frame. Type and press Enter during
+startup and the submission is held in a visible pending list, in order. When
+hydration completes it adopts that same editor rather than rebuilding it, and
+the held submissions drain once, in the order you sent them, through the
+ordinary slash/bash/chat pipeline. A draft you have not submitted stays in the
+composer with its cursor.
+
+If startup fails or you interrupt it before hydration finishes, the terminal is
+restored and any pending submissions and draft text are printed to stderr rather
+than discarded. `CLIO_CODER_INSTANT_SHELL=0` opts out and waits for a fully
+hydrated first frame. The seam is `src/interactive/terminal-lease.ts`.
 
 ## Live Steering
 
@@ -495,8 +581,21 @@ There are three modes, chosen per message; the default is next slot.
 | Mode | Key | Delivery |
 | --- | --- | --- |
 | Next slot | `Enter` | Between tool batches, mid-run, through `agent.steer`. The agent keeps going and reads the message before its next model call. |
-| End of turn | `Alt+Enter` | When the whole run settles and Clio would hand control back, through `agent.followUp`. A turn is the whole run, not one model round. |
-| Interrupt | `Alt+I` (or `Ctrl+G`, `i`) | Cancels the in-flight work the way `Esc` does (generation aborts; a running bash child gets SIGTERM, then SIGKILL), waits for the cancelled run to seal its tool results in ledger order, then submits the message as a fresh prompt. Anything already queued returns to the editor. |
+| End of turn | `Ctrl+Q` | When the whole run settles and Clio would hand control back, through `agent.followUp`. A turn is the whole run, not one model round. |
+| Interrupt | `Ctrl+G`, `i` or `/interrupt <text>` | Cancels the in-flight work the way `Esc` does (generation aborts; a running bash child gets SIGTERM, then SIGKILL), waits for the cancelled run to seal its tool results in ledger order, then submits the message as a fresh prompt. Anything already queued returns to the editor. |
+
+### The same three modes against a background worker
+
+The table above describes the main agent. Against a dispatched worker the three
+modes are not symmetric:
+
+- **Steer** reaches a worker. `@<agent> <text>` sends the message across the
+  worker channel; the worker acknowledges it and keeps running.
+- **Follow-up** does not. A worker has no follow-up queue, so a new goal for it
+  is a new dispatch.
+- **Interrupt** is refused while an attached dispatch is running, for the reason
+  given below. Cancel the worker itself with `Esc`, which stops the run and
+  still leaves a receipt.
 
 Interrupt is refused in two states and the message is queued for the next slot
 instead, with a notice saying why: while an attached dispatch is running (the
@@ -586,10 +685,10 @@ to execute through the existing engine worker path, the sanctioned Claude Code w
 
 | Command | Purpose |
 | --- | --- |
-| `pnpm run ci` | Local and GitHub PR gate: typecheck, lint, skills pin check, build, the deterministic test suite, and the trace-viewer suite. |
+| `pnpm run ci` | Local and GitHub PR gate: typecheck, lint, library package pin and skill audit checks, build, the deterministic test suite, and the trace-viewer suite. |
 | `pnpm run ci:release` | Maintainer release gate: `pnpm run ci`, then the `check-release` dist and packaging audit. |
 | `pnpm run typecheck` | Strict TypeScript pass. |
-| `pnpm run lint` | Biome checks plus `scripts/check-hygiene.ts`, which runs the boundary invariants, the skills pin check, and the README and docs drift rules. |
+| `pnpm run lint` | Biome checks plus `scripts/check-hygiene.ts`, which runs the boundary invariants, the library package pin and skill audit checks, and the README and docs drift rules. |
 | `pnpm test` | Focused contract and smoke files through plain `node --test`. |
 | `pnpm run build` | Production bundle through `tsup`. |
 | `pnpm run dev` | `tsup --watch`. |
@@ -774,10 +873,10 @@ The footer owns live activity. Transcript actions have static running or outcome
 
 The Clio TUI has been enhanced to maximize readability, operational focus, and command discovery:
 
-- **Adaptive Welcome Launchpad:** Before the first prompt, renders a compact launchpad with bold CAPS section tags (`WORKSPACE`, `ROUTE`, `NEXT`), honest readiness indicators, and context-sensitive next actions. Upon first prompt submission, it deliberately collapses into a single-line session header (`>C_ Clio Coder vX.Y.Z · <workspace · git branch> · <target·model · ready> · ctx ready · type a task`) so the conversation transcript owns the viewport.
-- **Unmistakable Clio Composer:** The input editor features an explicit left section tag reflecting current prompt semantics (`MESSAGE` while idle, `FOLLOW-UP` while Clio runs, and orange `STEER` when Enter steers in-flight execution). Includes the dim placeholder `Ask Clio…  / for commands` and lower-rail hint `Enter send · Shift+Enter newline` at wider widths.
+- **Welcome header:** Before your first prompt the header is three rows and no box: a masthead (`>C_ Clio Coder v0.4.7` on the left, `~/iowarp/clio-coder · main*` on the right), the route (`✓ dynamo · qwen3.8-27b`), and one next step (`describe a task · Enter to send · / for commands`). The next step names whatever actually blocks work first: no route or model sends you to `/model`, an unavailable or degraded route to `/settings targets`, a missing or stale `CLIO-CODER.md` to `/context init` or `/context refresh`. A healthy route shows no latency; a failing one shows its reason. Your first submit collapses the header to one live row, `>C_ Clio Coder v0.4.7 · dynamo · qwen3.8-27b · ~/iowarp/clio-coder · main*`, which follows a mid-session model change. `/new` returns to the three-row form; `/resume`, `/tree`, `/fork`, `/handoff` and `--continue` open collapsed. See [tui-design.md](../architecture/tui-design.md#51-welcome-launchpad--session-header) for the width-degradation order and route vocabulary.
+- **Unmistakable Clio Composer:** The input editor features an explicit left section tag reflecting current prompt semantics (`MESSAGE` while idle, `FOLLOW-UP` while Clio runs, and orange `STEER` when Enter steers in-flight execution). Includes the dim placeholder `Ask Clio…  / for commands` and lower-rail hint `Enter send · Ctrl+J newline` at wider widths.
 - **Progressively Disclosed Footer:** The compact footer uses a quiet two-zone status layout that suppresses idle decoration (`tools none`, `◌ idle`, and duplicate turn receipts). Line 1 displays workspace location, git branch/dirty state, and active phase only when meaningful; Line 2 displays the context window gauge, current Output style, and session cost. `Alt+U` toggles the expanded dashboard, which orders information by operational urgency (Activity, Context, Session, Workspace).
-- **Footer Notification Degradation Ladder:** The footer notification badge reserves the severity head (`glyph count noun`) and `[Alt+X] dismiss` tail first, allocating remaining width to an ellipsized message body. Under narrow terminal constraints, it degrades cleanly down the ladder without clipping action keys.
+- **Footer Notification Degradation Ladder:** The footer notification badge reserves the severity head (`glyph count noun`) and `[Ctrl+G x] dismiss` tail first, allocating remaining width to an ellipsized message body. Under narrow terminal constraints, it degrades cleanly down the ladder without clipping action keys.
 - **Grouped Slash Command Palette:** Typing `/` opens an autocomplete command palette grouped by operational category (`Run`, `Inspect`, `Configure`, `Sessions`) with compact argument hints. Every suggestion is the command's one canonical spelling.
 - **Voice-First Transcript & Receipts:** User (`› `) and assistant (`✦ `) prose are formatted with a two-cell hanging indent, ensuring wrapped continuation lines remain visually tied to their voice prefix. Tool ledgers maintain full terminal width. Completed turn receipts honor output verbosity (`minimal` none, `default` compact dim `turn · in N · out M`, `verbose` full receipt with call counts, cache reads/writes, reasoning provenance, and verification caveats).
 - **Transactional Settings Center:** Open `/settings` or deep-link to one of
@@ -862,3 +961,9 @@ actual behavior. Redact secrets and private repository content.
 Acceptance rows labeled Required declare expected checks and timeout limits; they are not pending executions or passing results. Inspect verification receipts for outcomes. Under high rigor, the finish gate requires the applicable passing checks or explicit limitations.
 
 Task-board guidance and ordinary continuation preserve proposal-only scope. Deferred implementation should be blocked or dropped while awaiting an explicit operator go-ahead. A skill-install decision is separate from implementation authorization, and full-auto capability does not expand the task. These are model instructions, not a guarantee of model adherence.
+
+## Package evals
+
+`clio-coder eval validate --package <path|kind:name> --eval <name>` validates a named package suite. `clio-coder eval run` with the same package flags runs it; `--user` or `--project` selects the installed copy. Materio declares `scripts` for its offline Python contracts. The experimental skill-scenario lane is `clio-coder eval skill <name|path> [--scenario <id>]`. See [Library packages](resource-library.md).
+
+The old top-level CLI `skills` and `plugins` groups are retired; use `clio-coder library`. In the editor, `/library`, `/skills`, `/agents` and `/prompts` open the shared browser. `/resources` and `/plugins` give a replacement hint. `/skill <name>` activates a skill; `/interop` handles local-agent discovery and reviewed adoption.

package/docs/guide/configuration-and-targets.md

@@ -878,7 +878,7 @@ commands. Space selects peers and Enter confirms the selection. Without a
 TTY it prints the proposals and exits 0 with `settings.yaml` byte-identical.
 The full target wizard in Settings offers the same review after saving
 the first primary target; Quick Connect skips it. Also,
-`/agents connect` in the TUI opens the same flow.
+`/interop` in the TUI opens the same flow.
 
 No code path writes `integrations.externalAgents.entries` without an operator
 decision, and `doctor --fix` is not such a path. An accepted proposal appends

package/docs/guide/configuration-reference.md

@@ -3,7 +3,7 @@
 > **Visual blueprint:** The source checkout includes the complete
 > [Configuration reference visual reference](https://github.com/iowarp/clio-coder/blob/main/docs/html/configuration_reference_blueprint.html).
 
-Every switch that changes what Clio Coder does, in one place: settings keys, environment variables, CLI flags, project files under `.clio-coder/`, recipe and prompt-fragment frontmatter, tool arguments the model can send, and model knowledge-base tags. The source of truth is `src/`; this page is the audited inventory of what the code read at the 0.4.2 cut and is maintained by hand with each release. The narrative guide is [configuration-and-targets.md](configuration-and-targets.md); operator prose for each environment variable is in [environment-variables.md](environment-variables.md).
+Every switch that changes what Clio Coder does, in one place: settings keys, environment variables, CLI flags, project files under `.clio-coder/`, recipe and prompt-fragment frontmatter, tool arguments the model can send, and model knowledge-base tags. The source of truth is `src/`; this page is the audited inventory of what current source reads and is maintained alongside the code. The narrative guide is [configuration-and-targets.md](configuration-and-targets.md); operator prose for each environment variable is in [environment-variables.md](environment-variables.md).
 
 Precedence, where several surfaces set the same value: a one-run CLI flag beats a session override (`/settings`, `/model`, `/thinking`), which beats `.clio-coder/settings.local.yaml`, which beats `.clio-coder/settings.yaml`, which beats the user `settings.yaml`, which beats the compiled default. Entries whose order differs say so in their precedence column.
 
@@ -16,8 +16,8 @@ Precedence, where several surfaces set the same value: a one-run CLI flag beats
 | Name | Default | Controls | Precedence |
 |---|---|---|---|
 | `chat.maxOutputTokens` | `0` | Global output-token budget requested on every chat turn (integer >= 0, `0` means per-model caps only); clamped to the model's max-output cap and remaining context window, with the product's 32,768-token ceiling used when the model cap is unknown; applies next turn. | session override (`/settings` apply-this-session) > `.clio-coder/settings.local.yaml` > `.clio-coder/settings.yaml` > user settings.yaml > default |
-| `chat.model` | `null` | Saved default chat model id (string or null); null with a target set rebases to that target's `defaultModel` at validation; applies next session. | `run --model` > session routing (`/model`, `/thinking`, Alt+J/K, `/settings` apply-this-session) > `.clio-coder/settings.local.yaml` > `.clio-coder/settings.yaml` > user settings.yaml > default |
-| `chat.modelPicker.cycleSet` | `[]` | Exact `target` or `target/model` refs Alt+J/Alt+K cycle through (refs with an empty target part are dropped); session-owned routing state, immediate this session, saved default next session. | session routing (Alt+J/K, `/settings`) > `.clio-coder/settings.local.yaml` > `.clio-coder/settings.yaml` > user settings.yaml > default |
+| `chat.model` | `null` | Saved default chat model id (string or null); null with a target set rebases to that target's `defaultModel` at validation; applies next session. | `run --model` > session routing (`/model`, `/thinking`, configured model-cycle actions, `/settings` apply-this-session) > `.clio-coder/settings.local.yaml` > `.clio-coder/settings.yaml` > user settings.yaml > default |
+| `chat.modelPicker.cycleSet` | `[]` | Exact `target` or `target/model` refs configured model-cycle keys cycle through (refs with an empty target part are dropped); session-owned routing state, immediate this session, saved default next session. | session routing (configured model-cycle actions, `/settings`) > `.clio-coder/settings.local.yaml` > `.clio-coder/settings.yaml` > user settings.yaml > default |
 | `chat.modelPicker.favorites` | `[]` | Exact `target/model` refs pinned in the focused model picker; refs naming an unconfigured target are dropped at validation; applies immediately. | session override (`/settings` apply-this-session) > `.clio-coder/settings.local.yaml` > `.clio-coder/settings.yaml` > user settings.yaml > default |
 | `chat.modelPicker.recentLimit` | `12` | How many recently selected `target/model` refs `recent-models.json` keeps (integer >= 1); applies immediately. | session override (`/settings` apply-this-session) > `.clio-coder/settings.local.yaml` > `.clio-coder/settings.yaml` > user settings.yaml > default |
 | `chat.prewarm` | `false` | Whether the known prompt prefix is sent to a `local-native` server at session start, after resume, and after compaction to fill its prefix cache (boolean; no effect on other tiers, workers, headless); applies next turn. | session override (`/settings` apply-this-session) > `.clio-coder/settings.local.yaml` > `.clio-coder/settings.yaml` > user settings.yaml > default |
@@ -26,8 +26,8 @@ Precedence, where several surfaces set the same value: a one-run CLI flag beats
 | `chat.retry.maxDelayMs` | `60000` | Ceiling in ms on the exponential backoff between chat-loop retries (integer >= 0); applies next turn. | session override (`/settings` apply-this-session) > `.clio-coder/settings.local.yaml` > `.clio-coder/settings.yaml` > user settings.yaml > default |
 | `chat.retry.maxRetries` | `3` | Maximum retry attempts for one transient provider failure in the chat loop (integer >= 0); applies next turn. | session override (`/settings` apply-this-session) > `.clio-coder/settings.local.yaml` > `.clio-coder/settings.yaml` > user settings.yaml > default |
 | `chat.retry.streamStallMs` | `180000` | Silence on an in-flight stream longer than this many ms is treated as a wedged backend and the turn is aborted and retried (integer >= 0, `0` disables the stall timer); applies next turn. | session override (`/settings` apply-this-session) > `.clio-coder/settings.local.yaml` > `.clio-coder/settings.yaml` > user settings.yaml > default |
-| `chat.target` | `null` | Saved default chat target id (configured id or null); a dangling id normalizes to null and clears `chat.model`; seeds session routing at launch, so applies next session. | `run --target` > session routing (`/model`, `/thinking`, Alt+J/K, `/settings` apply-this-session) > `.clio-coder/settings.local.yaml` > `.clio-coder/settings.yaml` > user settings.yaml > default |
-| `chat.thinkingLevel` | `low` | Saved default reasoning effort for the chat model: `off`, `minimal`, `low`, `medium`, `high`, `xhigh`, `max`, clamped to what the model supports at request time; applies next session. | `run --thinking` > session routing (`/model`, `/thinking`, Alt+J/K, `/settings` apply-this-session) > `.clio-coder/settings.local.yaml` > `.clio-coder/settings.yaml` > user settings.yaml > default |
+| `chat.target` | `null` | Saved default chat target id (configured id or null); a dangling id normalizes to null and clears `chat.model`; seeds session routing at launch, so applies next session. | `run --target` > session routing (`/model`, `/thinking`, configured model-cycle actions, `/settings` apply-this-session) > `.clio-coder/settings.local.yaml` > `.clio-coder/settings.yaml` > user settings.yaml > default |
+| `chat.thinkingLevel` | `low` | Saved default reasoning effort for the chat model: `off`, `minimal`, `low`, `medium`, `high`, `xhigh`, `max`, clamped to what the model supports at request time; applies next session. | `run --thinking` > session routing (`/model`, `/thinking`, configured model-cycle actions, `/settings` apply-this-session) > `.clio-coder/settings.local.yaml` > `.clio-coder/settings.yaml` > user settings.yaml > default |
 | `context.compaction.auto` | `true` | Master switch for the pre-request compaction trigger when context pressure crosses `threshold` (boolean); manual `/context compact` still works when off; applies next turn. | session override (`/settings` apply-this-session) > `.clio-coder/settings.local.yaml` > `.clio-coder/settings.yaml` > user settings.yaml > default |
 | `context.compaction.model` |  | Optional model pattern (prefer exact `target/model`) resolved when compaction runs. Must uniquely match an available HTTP chat model; invalid, ambiguous, unavailable, and worker-only selections fail explicitly. Absent means the current chat route summarizes. |  |
 | `context.compaction.systemPrompt` |  | Optional UTF-8 prompt file read on every compaction to replace the built-in system prompt. Relative paths use the current session workspace (`cwd`); absolute paths are supported. Must be a nonempty regular file of at most 65,536 bytes; read failures are explicit. `/context compact` focus instructions remain separate. |  |
@@ -221,7 +221,7 @@ Read from the process environment at boot unless the row says otherwise.
 | `CLIO_CODER_LMSTUDIO_CORESIDENT_CONTEXT` | `131072` | Positive integer ceiling on the context length requested when loading an LM Studio model next to another resident model; `off`, `0`, or `false` disables the clamp. |  |
 | `CLIO_CODER_MEMORY_TRACE` | `unset (disabled)` | File path for a JSONL trace of proactive task-memory step envelopes including up to 8000 chars of model text per step; off when unset or empty. |  |
 | `CLIO_CODER_MODEL_CATALOG_DIRS` | `unset` | PATH-delimited list of extra model-catalog overlay directories, applied after the user and project overlays with the highest precedence. |  |
-| `CLIO_CODER_DISABLE_RETRIEVE_TOOLS` | off | Exactly `1` removes RETRIEVE tools from registries; `clio-coder skills-eval` sets it for child arms. Bash, hooks, external CLIs, and provider networking remain available; OS isolation is required for hermetic runs. Legacy `CLIO_CODER_NO_NETWORK_TOOLS=1` remains accepted. | `skills-eval --allow-network` clears both spellings for child arms |
+| `CLIO_CODER_DISABLE_RETRIEVE_TOOLS` | off | Exactly `1` removes RETRIEVE tools from registries; `clio-coder eval skill` sets it for child arms. Bash, hooks, external CLIs, and provider networking remain available; OS isolation is required for hermetic runs. Legacy `CLIO_CODER_NO_NETWORK_TOOLS=1` remains accepted. | `eval skill --allow-network` clears both spellings for child arms |
 | `CLIO_CODER_NO_NETWORK_TOOLS` | off | Legacy alias of `CLIO_CODER_DISABLE_RETRIEVE_TOOLS`; disables retrieval tools only, with no shell network isolation. | env only |
 | `CLIO_CODER_PROVIDER_DUMP_PATH` | `unset` | Read per native provider call: absolute path for private JSONL request-body and terminal-response diagnostics. Parent must exist; the file must be operator-owned, regular, mode `0600`, and not a symlink. Known credentials are redacted; prompt and tool content remain. | env only |
 | `CLIO_CODER_WEB_FETCH_ALLOW_PRIVATE_NETWORK` | off | Exactly `1` allows web_fetch to reach private and local services. This operator process opt-in is not accepted from model arguments or project settings. | env only |
@@ -436,20 +436,29 @@ Grouped by command. Global flags appear under `global`.
 | Flag | Controls |
 |---|---|
 | `--allow-config-drift` | For `eval compare`, proceed when the two artifacts' configs differ and label the comparison as config drift allowed. |
+| `--allow-network` | For `eval skill`, keep the network tool plane available to the child runs instead of stripping it. |
 | `--baseline` | For `eval gate`, the baseline eval id the candidate is gated against (required). |
 | `--clio-coder-entry` | For `eval run`, path to the clio-coder CLI entry the runner executes; a relative path is pinned to the invoking directory. |
+| `--eval` | For `eval validate --package` and `eval run --package`, the named evaluation to run. |
 | `--format` | For `eval report`: `text`, `json`, `md`, `swe-jsonl`, or `junit`; for `eval compare`: `text`, `json`, `md`, or `junit`. |
 | `--help` | Print the command's usage and exit. |
-| `--json` | For `eval inventory`, the only accepted argument; emits the bounded machine-readable inventory. |
+| `--json` | Emit machine-readable JSON output for `eval inventory` or `eval skill`. |
 | `--metric` | For `eval compare`, the behavioral metric or metric family the comparison is scored on. |
 | `--model` | For `eval run`, wire model id that overrides the suite's model. |
 | `--out` | For `eval run`, path where the eval artifact is written. |
+| `--package` | For `eval validate` and `eval run`, package reference or path (`<path|kind:name>`). |
+| `--project` | For `eval validate --package` and `eval run --package`, target project scope. |
 | `--repeat` | For `eval run --task-file`, positive integer repetitions per v1 task. |
+| `--scenario` | For `eval skill`, the evals.md scenario id (or bare number) to run instead of every scenario. |
 | `--suite` | For `eval validate` and `eval run`, path to the Suite v2 YAML; run takes exactly one of `--suite` or `--task-file`. |
-| `--target` | For `eval run`, target id that overrides the suite's target. |
+| `--target` | For `eval run` and `eval skill`, target id overriding the default target. |
 | `--task-file` | For `eval run`, path to a compatibility v1 task file loaded as a suite. |
 | `--thresholds` | For `eval gate`, path to a thresholds file replacing the built-in gate thresholds. |
+| `--timeout` | For `eval skill`, positive integer seconds allowed per child run. |
 | `--trials` | For `eval run`, positive integer overriding the suite's `matrix.repeats` and requesting a fresh workspace per matrix item. |
+| `--trust-fixtures` | For `eval skill`, allow the fixture shell commands declared in evals.md to execute in the seed workspace. |
+| `--user` | For `eval validate --package` and `eval run --package`, target user scope. |
+| `--workspace` | For `eval skill`, existing checkout copied into the throwaway seed workspace; the source is never mutated. |
 | `-h` | Short form of --help. |
 
 ### `evidence`
@@ -548,12 +557,16 @@ Grouped by command. Global flags appear under `global`.
 
 | Flag | Controls |
 |---|---|
-| `--from` | For `library add`, a catalog directory or path to install from; the literal `catalog` selects the default catalog. |
+| `--all` | For `library skills`, list all discovered runtime skills including unmanaged local files. |
+| `--dry-run` | For `library install`, print the execution plan without writing changes. |
+| `--force` | For `library install`, `register`, and `update`, overwrite existing destination files or force operation. |
+| `--from` | For `library` commands, alternate index or catalog file/URL to read from. |
 | `--help` | Print the command's usage and exit. |
-| `--json` | Emit JSON for `library list`, `search`, and `add`. |
-| `--kind` | For `library list` and `library search`, restrict to one entry kind: `skill`, `agent`, `prompt`, or `fleet`. |
-| `--with-requirements` | For `library add`, also install the entry's unsatisfied requirements instead of refusing. |
-| `--yes` | For `library add`, confirm the install writes; without it the plan is printed and nothing is written. |
+| `--json` | Emit machine-readable JSON output. |
+| `--kind` | For `library list` and `library search`, restrict to one entry kind: `plugin`, `skill`, `agent`, `prompt`, or `fleet`. |
+| `--project` | Target project scope (`.clio-coder/`). |
+| `--user` | Target user scope (`<configDir>/`). |
+| `--with-requirements` | For `library install`, also install the entry's unsatisfied requirements instead of refusing. |
 | `-h` | Short form of --help. |
 
 ### `memory`
@@ -667,26 +680,6 @@ Grouped by command. Global flags appear under `global`.
 | `-f` | Short form of --force for `dev share import`. |
 | `-h` | Short form of --help. |
 
-### `skills`
-
-| Flag | Controls |
-|---|---|
-| `--all` | For `skills list`, include skills the model cannot load; for `skills update`, update every installed skill. |
-| `--allow-network` | For `skills eval`, keep the network tool plane available to the child runs instead of stripping it. |
-| `--category` | For `skills install`, install every marketplace skill in this catalog category instead of naming sources. |
-| `--force` | For `skills install`, `update`, and `sync`, overwrite an existing installed skill. |
-| `--help` | Print the command's usage and exit. |
-| `--json` | Emit JSON for `skills list`, `search`, `inspect`, `validate`, and `eval` (JSONL rows); the only accepted argument for `skills inventory`. |
-| `--name` | For `skills install`, install the single source under this skill name. |
-| `--project` | For `skills install`, choose the project skill root; mutually exclusive with `--user`. |
-| `--scenario` | For `skills eval`, the evals.md scenario id (or bare number) to run instead of every scenario. |
-| `--target` | For `skills eval`, target id used by the baseline, treatment, and judge runs instead of the default target. |
-| `--timeout` | For `skills eval`, positive integer seconds allowed per child run. |
-| `--trust-fixtures` | For `skills eval`, allow the fixture shell commands declared in evals.md to execute in the seed workspace. |
-| `--user` | For `skills install`, choose the user skill root; mutually exclusive with `--project`. |
-| `--workspace` | For `skills eval`, existing checkout copied into the throwaway seed workspace; the source is never mutated. |
-| `-h` | Short form of --help. |
-
 ### `targets`
 
 | Flag | Controls |
@@ -791,7 +784,7 @@ Project safety, hooks, and settings are ignored until the operator reviews them
 
 | Key | Controls | Precedence |
 |---|---|---|
-| `(recipe files)` | Project agent recipes (`<id>.md` with the recipe frontmatter schema); a project recipe must declare `audience: custom` and cannot override a shipped builtin. | For non-builtin ids: project `.clio-coder/agents/` > user agents > enabled-extension agents. Builtins remain protected; user recipes alone may customize a shipped base agent, never a shadow or internal agent. |
+| `(recipe files)` | Project agent recipes (`<id>.md` with the recipe frontmatter schema); a project recipe must declare `audience: custom` and cannot override a shipped builtin. | For non-builtin ids: project `.clio-coder/agents/` > user agents > enabled-plugin agents. Builtins remain protected; user recipes alone may customize a shipped base agent, never a shadow or internal agent. |
 
 ### `.clio-coder/fleets`
 

package/docs/guide/environment-variables.md

@@ -58,7 +58,7 @@ These names follow an upstream or operating-system convention. They are not subs
 | --- | --- |
 | Provider credential variables | `src/engine/env-api-keys.ts` maps the selected provider to its conventional key, including `OPENAI_API_KEY`, `ANTHROPIC_API_KEY`, `OPENROUTER_API_KEY`, `GEMINI_API_KEY`, `AWS_*` Bedrock credentials, and Google Vertex application credentials. `clio-coder auth` remains the preferred managed credential path. |
 | `OLLAMA_NUM_PARALLEL` | Fallback concurrency advertised for an Ollama Native target when the runtime does not provide a stronger slot fact (`src/domains/providers/runtimes/local-native/ollama-native.ts`). |
-| `VISUAL`, `EDITOR` | External editor command, with `VISUAL` taking precedence (`src/interactive/external-editor.ts`). |
+| `VISUAL`, `EDITOR` | External editor command, with `VISUAL` taking precedence (`src/core/external-editor.ts`). |
 | `TERM`, `COLORTERM`, `TERM_PROGRAM`, `WT_SESSION` | Terminal capability, color-depth, keybinding, and desktop-notification adaptation. These variables describe the terminal rather than Clio policy. |
 | `SSH_CONNECTION`, `SSH_TTY`, `TMUX`, `STY` | Remote-session and terminal-multiplexer detection used by the adaptive stream-pacing policy (`src/interactive/stream-pacing-policy.ts`). |
 | `COLUMNS` | Fallback text width for non-TTY CLI output (`src/cli/text-layout.ts`). |
@@ -89,7 +89,7 @@ These two take a path, not `1`. Setting either to `1` writes a file named `1` in
 Example:
 
 ```bash
-CLIO_CODER_RENDER_TRACE=/tmp/clio-render.jsonl clio-coder
+CLIO_CODER_RENDER_TRACE=/tmp/clio-coder-render.jsonl clio-coder
 ```
 
 ## Internal plumbing

package/docs/guide/exit-codes-and-output.md

@@ -18,7 +18,7 @@ Clio Coder follows a deterministic exit code taxonomy across all commands:
 | **`0`** | **Success** | Successful command execution, clean run settlement, `--version`, `--help` invocation, or missing trace database notice without an explicit `--db` flag. |
 | **`1`** | **Operational Failure** | Execution error, model target unreachable, doctor diagnosis with unresolved issues, explicit `--db` path not found, or evaluation rubric failure (`fail` or `error` verdict). |
 | **`2`** | **Syntax / Usage Error** | Unknown subcommand, invalid flag, missing required positional arguments, global flag placed after subcommand, or data mutation SQL keyword passed to `clio-coder trace sql`. |
-| **`3`** | **Unmeasured / Harness State** | Specific to `clio-coder skills eval`: rubric could not be evaluated due to unparseable judge output, timeout, or evidence archive write failure (distinct from a failure/regression). |
+| **`3`** | **Unmeasured / Harness State** | Specific to `clio-coder eval skill` (formerly `clio-coder skills eval`): rubric could not be evaluated due to unparseable judge output, timeout, or evidence archive write failure (distinct from a failure/regression). Package eval commands (`clio-coder eval run --package`) and suite evaluations return 1 on failure. |
 
 ---