@iowarp/clio-coder 0.4.7 → 0.4.8

package/dist/{chunk-C3G5PNUO.js → chunk-JLBVCROW.js}

@@ -1,53 +1,53 @@
 import { createRequire as __clioCreateRequire } from "node:module"; const require = __clioCreateRequire(import.meta.url);
 import {
   readStateInfoResult
-} from "./chunk-DO7M3LSX.js";
+} from "./chunk-JIMWEYWO.js";
+import {
+  foldPromptCacheTelemetry,
+  hasPromptCacheTelemetry,
+  topExpectedColdReason
+} from "./chunk-QH3ZTUOA.js";
 import {
   fingerprintNativeRuntime
 } from "./chunk-QJMRYTCX.js";
 import {
   detectInteropAgents,
   resolveOnPath
-} from "./chunk-CP3HIR5H.js";
+} from "./chunk-GJBJHJNY.js";
 import {
   initializeClioHome
-} from "./chunk-6CA2BHOR.js";
-import {
-  foldPromptCacheTelemetry,
-  hasPromptCacheTelemetry,
-  topExpectedColdReason
-} from "./chunk-QH3ZTUOA.js";
+} from "./chunk-PFZJMXIY.js";
 import {
-  isSessionEntry
-} from "./chunk-KAFMW7WM.js";
+  loadSkills
+} from "./chunk-EXKUF426.js";
 import {
   credentialsPresent
-} from "./chunk-VTYHHQ57.js";
-import {
-  readSessionFileEntries
-} from "./chunk-FQOOGXBH.js";
+} from "./chunk-TOPICHGR.js";
 import {
   openAuthStorage,
   resolveAuthTarget,
   targetRequiresAuth
-} from "./chunk-6TAATXXH.js";
-import {
-  loadSkills
-} from "./chunk-MZNWZUJM.js";
+} from "./chunk-PAQVETLA.js";
 import {
   formatSettingsIssues,
   readSettings,
   validateSettingsFile
-} from "./chunk-4QKAITQT.js";
+} from "./chunk-PGEFOTJB.js";
 import {
   interopAgentKind
 } from "./chunk-5EQO5NWP.js";
 import {
-  getVersionInfo
-} from "./chunk-GD55RTIW.js";
+  isSessionEntry
+} from "./chunk-6R5MBXBJ.js";
+import {
+  readSessionFileEntries
+} from "./chunk-36XSBPXL.js";
 import {
   resolveClioDirs
 } from "./chunk-CTTI7G3T.js";
+import {
+  getVersionInfo
+} from "./chunk-GD55RTIW.js";
 import {
   init_esm_shims
 } from "./chunk-ECBHH7LU.js";
@@ -360,7 +360,7 @@ async function runDoctorFleetChecks(projectRoot = process.cwd()) {
   }
   const nodes = settings.fleet?.nodes ?? [];
   if (nodes.length === 0) return [];
-  const { runFleetNodePreflight } = await import("./fleet-preflight-FRLETDD3.js");
+  const { runFleetNodePreflight } = await import("./fleet-preflight-T5NCZKHE.js");
   const targets = (settings.targets ?? []).map((target) => ({
     id: target.id,
     runtimeId: target.runtime,
@@ -507,8 +507,8 @@ async function runDoctorModelChecks() {
   if (settings.targets.length === 0) return [];
   const [{ getRuntimeRegistry }, { registerBuiltinRuntimes }, { listKnownModelsForRuntime }] = await Promise.all([
     import("./registry-DESGAXWK.js"),
-    import("./builtins-XLXWWSRF.js"),
-    import("./support-L2SOL3IE.js")
+    import("./builtins-TKS63VNV.js"),
+    import("./support-AWC3XKPX.js")
   ]);
   const registry = getRuntimeRegistry();
   if (registry.list().length === 0) registerBuiltinRuntimes(registry);
@@ -559,4 +559,4 @@ export {
   runDoctorRuntimeChecks,
   runDoctorModelChecks
 };
-//# sourceMappingURL=chunk-C3G5PNUO.js.map
+//# sourceMappingURL=chunk-JLBVCROW.js.map

package/dist/chunk-JOBN2YQQ.js

@@ -0,0 +1,176 @@
+import { createRequire as __clioCreateRequire } from "node:module"; const require = __clioCreateRequire(import.meta.url);
+import {
+  Id
+} from "./chunk-KKRXONXG.js";
+import {
+  typebox_exports
+} from "./chunk-GH5ZR6JP.js";
+import {
+  init_esm_shims
+} from "./chunk-ECBHH7LU.js";
+
+// apps/clio-coder-web/contracts/evidence.ts
+init_esm_shims();
+var closed = { additionalProperties: false };
+var strings = typebox_exports.Array(typebox_exports.String());
+var nullable = typebox_exports.Union([typebox_exports.String(), typebox_exports.Null()]);
+var record = typebox_exports.Record(typebox_exports.String(), typebox_exports.Unknown());
+var Verdict = typebox_exports.Union([
+  typebox_exports.Literal("compromised"),
+  typebox_exports.Literal("unverified"),
+  typebox_exports.Literal("unknown"),
+  typebox_exports.Literal("grounded"),
+  typebox_exports.Literal("reviewed")
+]);
+var TrustAxes = typebox_exports.Object(
+  {
+    artifactIntegrity: typebox_exports.String(),
+    validationGrounding: typebox_exports.String(),
+    independentReview: typebox_exports.String(),
+    contextProvenance: typebox_exports.String(),
+    autonomyEnforcement: typebox_exports.String(),
+    completionEvidence: typebox_exports.String()
+  },
+  closed
+);
+var TrustSummary = typebox_exports.Object(
+  {
+    version: typebox_exports.Literal(1),
+    verdict: Verdict,
+    text: typebox_exports.String(),
+    axes: TrustAxes,
+    claimant: typebox_exports.String(),
+    unknown: strings,
+    refs: strings
+  },
+  closed
+);
+var EvidenceOverview = typebox_exports.Object(
+  {
+    version: typebox_exports.Literal(1),
+    evidenceId: Id,
+    source: typebox_exports.Union([
+      typebox_exports.Object({ kind: typebox_exports.Literal("run"), runId: Id }, closed),
+      typebox_exports.Object({ kind: typebox_exports.Literal("session"), sessionId: Id }, closed),
+      typebox_exports.Object({ kind: typebox_exports.Literal("eval"), evalId: Id }, closed)
+    ]),
+    generatedAt: typebox_exports.String(),
+    runIds: strings,
+    sessionId: nullable,
+    statuses: strings,
+    startedAt: nullable,
+    endedAt: nullable,
+    tasks: strings,
+    cwds: strings,
+    agentIds: strings,
+    targetIds: strings,
+    runtimeIds: strings,
+    modelIds: strings,
+    tags: strings,
+    files: strings,
+    totals: typebox_exports.Object(
+      {
+        runs: typebox_exports.Number(),
+        receipts: typebox_exports.Number(),
+        toolCalls: typebox_exports.Number(),
+        toolErrors: typebox_exports.Number(),
+        blockedToolCalls: typebox_exports.Number(),
+        sessionEntries: typebox_exports.Number(),
+        auditRows: typebox_exports.Number(),
+        toolEvents: typebox_exports.Number(),
+        linkedToolEvents: typebox_exports.Number(),
+        protectedArtifacts: typebox_exports.Number(),
+        tokens: typebox_exports.Number(),
+        costUsd: typebox_exports.Number(),
+        wallTimeMs: typebox_exports.Number()
+      },
+      closed
+    ),
+    redactionCount: typebox_exports.Optional(typebox_exports.Number()),
+    decisions: typebox_exports.Optional(
+      typebox_exports.Array(typebox_exports.Object({ runId: typebox_exports.String(), sessionId: typebox_exports.String(), ref: typebox_exports.String(), record }, closed))
+    )
+  },
+  closed
+);
+var EvidenceItem = typebox_exports.Object({ overview: EvidenceOverview, verdict: Verdict }, closed);
+var EvidencePage = typebox_exports.Object({ items: typebox_exports.Array(EvidenceItem), nextCursor: nullable }, closed);
+var EvidenceDetail = typebox_exports.Object(
+  {
+    overview: EvidenceOverview,
+    verdict: Verdict,
+    projection: typebox_exports.Union([typebox_exports.Literal("canonical"), typebox_exports.Literal("historical_format")]),
+    findings: typebox_exports.Array(
+      typebox_exports.Object(
+        {
+          id: typebox_exports.String(),
+          severity: typebox_exports.Union([typebox_exports.Literal("info"), typebox_exports.Literal("warn")]),
+          tag: typebox_exports.String(),
+          runId: nullable,
+          message: typebox_exports.String()
+        },
+        closed
+      )
+    ),
+    // Full canonical attributed axes and authenticated decisions are intentionally retained.
+    runs: typebox_exports.Array(typebox_exports.Object({ runId: typebox_exports.String(), status: record, summary: TrustSummary }, closed)),
+    provenance: typebox_exports.Array(typebox_exports.Object({ runId: typebox_exports.String(), view: record, lines: strings }, closed)),
+    gateDecisions: typebox_exports.Array(record)
+  },
+  closed
+);
+var ReceiptVerification = typebox_exports.Object(
+  {
+    version: typebox_exports.Literal(1),
+    verifiedAt: typebox_exports.String(),
+    runId: Id,
+    state: typebox_exports.Union([
+      typebox_exports.Literal("pending"),
+      typebox_exports.Literal("verified"),
+      typebox_exports.Literal("failed"),
+      typebox_exports.Literal("unavailable")
+    ]),
+    reason: typebox_exports.Union([
+      typebox_exports.Null(),
+      ...[
+        "integrity-mismatch",
+        "ledger-mismatch",
+        "integrity-invalid",
+        "execution-role-invalid",
+        "routing-intent-invalid",
+        "route-decision-invalid",
+        "receipt-unreadable",
+        "envelope-unavailable",
+        "unclassified"
+      ].map((value) => typebox_exports.Literal(value))
+    ]),
+    axes: TrustAxes
+  },
+  closed
+);
+var EvidenceOperationResult = typebox_exports.Union([
+  typebox_exports.Object(
+    { kind: typebox_exports.Literal("evidence"), id: Id, exitCode: typebox_exports.Literal(0), message: typebox_exports.String(), artifact: EvidenceItem },
+    closed
+  ),
+  typebox_exports.Object(
+    {
+      kind: typebox_exports.Literal("receipt-verification"),
+      id: Id,
+      exitCode: typebox_exports.Literal(0),
+      message: typebox_exports.String(),
+      verification: ReceiptVerification
+    },
+    closed
+  )
+]);
+
+export {
+  EvidenceOverview,
+  EvidenceItem,
+  EvidencePage,
+  EvidenceDetail,
+  ReceiptVerification,
+  EvidenceOperationResult
+};
+//# sourceMappingURL=chunk-JOBN2YQQ.js.map

package/dist/chunk-JOL2QRLE.js

@@ -0,0 +1,152 @@
+import { createRequire as __clioCreateRequire } from "node:module"; const require = __clioCreateRequire(import.meta.url);
+import {
+  installPinnedTool,
+  installTool,
+  removeTool
+} from "./chunk-5GZICIYO.js";
+import {
+  AppProblem,
+  problemOf
+} from "./chunk-MZDPF35R.js";
+import {
+  describeResolution,
+  toolStatus,
+  toolStatuses
+} from "./chunk-XCUDZQLX.js";
+import {
+  PINNED_TOOLS,
+  findPinnedTool,
+  toolchainRoot
+} from "./chunk-K2BLQC5E.js";
+import {
+  resolvePackageRoot
+} from "./chunk-E3LEPLQ2.js";
+import {
+  init_esm_shims
+} from "./chunk-ECBHH7LU.js";
+
+// apps/clio-coder-web/server/clio/adapters/runtime.ts
+init_esm_shims();
+import { threadId } from "node:worker_threads";
+function runtimeInfo(entry) {
+  return { entry, packageRoot: resolvePackageRoot(), execArgv: process.execArgv, threadId };
+}
+
+// apps/clio-coder-web/server/clio/adapters/toolchain.ts
+init_esm_shims();
+import { existsSync, realpathSync } from "node:fs";
+import { dirname, relative, resolve, sep } from "node:path";
+import { threadId as threadId2 } from "node:worker_threads";
+function pinnedFetcher(pins, fetcher) {
+  const allowed = new Set(
+    pins.flatMap((pin) => [
+      ...Object.values(pin.downloads).map((download) => download.url),
+      ...pin.documents.map((document) => document.url)
+    ])
+  );
+  return async (url) => {
+    if (!allowed.has(url)) throw new AppProblem("unsupported", "Download URL is outside the pinned tool registry.");
+    return fetcher(url);
+  };
+}
+function toolDownloader(network) {
+  return async (url) => {
+    const response = await network(url, { redirect: "follow", signal: AbortSignal.timeout(3e5) });
+    if (!response.ok) throw new Error(`Pinned download returned HTTP ${response.status}.`);
+    return Buffer.from(await response.arrayBuffer());
+  };
+}
+function containedTool(id) {
+  const root = resolve(toolchainRoot());
+  const canonical = (path) => {
+    let parent = path;
+    while (!existsSync(parent)) parent = dirname(parent);
+    return resolve(realpathSync(parent), relative(parent, path));
+  };
+  const difference = relative(canonical(root), canonical(resolve(root, id)));
+  if (difference === ".." || difference.startsWith(`..${sep}`) || difference.startsWith(sep))
+    throw new AppProblem("validation", "Tool directory escapes the toolchain root.");
+}
+function toolchainAdapter(options = {}) {
+  const pins = options.pins ?? PINNED_TOOLS;
+  const fetcher = pinnedFetcher(pins, options.fetcher ?? toolDownloader(globalThis.fetch));
+  const known = (id) => {
+    const entry = pins.find((pin) => pin.id === id);
+    if (!entry || !findPinnedTool(id)) throw new AppProblem("not_found", "Unknown pinned tool.");
+    containedTool(id);
+    containedTool(`${id}/${entry.version}`);
+    return entry;
+  };
+  return {
+    list() {
+      const statuses = options.pins ? pins.map(toolStatus) : toolStatuses();
+      return {
+        threadId: threadId2,
+        rows: statuses.map((status) => ({
+          id: status.id,
+          version: status.version,
+          summary: pins.find((pin) => pin.id === status.id)?.summary ?? "",
+          license: status.license,
+          platform: status.platform,
+          supported: status.supported,
+          installed: status.installed,
+          installDir: status.installDir,
+          resolution: {
+            source: status.resolution.source,
+            binaryPath: status.resolution.binaryPath,
+            version: status.resolution.version,
+            vendoredPath: status.resolution.vendoredPath,
+            pathCandidate: status.resolution.pathCandidate,
+            description: describeResolution(status)
+          }
+        }))
+      };
+    },
+    async install(id, force, onProgress) {
+      const entry = known(id);
+      const settings = { force, onProgress, fetch: fetcher };
+      const result = options.pins ? await installPinnedTool(entry, settings) : await installTool(id, settings);
+      if (!result.ok) {
+        const problem = new AppProblem(
+          "operation_failed",
+          "Pinned tool installation failed. See the server log for details."
+        );
+        console.error(`[clio-coder:web] ${problem.problem.instance} ${result.message}`);
+        throw problem;
+      }
+      return { id: result.id, message: result.message };
+    },
+    remove(id) {
+      known(id);
+      const result = removeTool(id);
+      if (!result.ok) throw new AppProblem("operation_failed", "Vendored tool removal failed.");
+      return { id: result.id, message: result.message };
+    }
+  };
+}
+
+// apps/clio-coder-web/server/worker/serve.ts
+init_esm_shims();
+import { parentPort } from "node:worker_threads";
+function serveWorker(handle) {
+  const port = parentPort;
+  if (!port) throw new Error("A domain entry must run in a worker.");
+  port.on("message", async (call) => {
+    const send = (reply) => port.postMessage(reply);
+    try {
+      if (Date.now() >= call.deadlineMs) throw new AppProblem("unavailable", "Call expired before execution.");
+      const result = await handle(call, (progress) => send({ id: call.id, progress }));
+      send({ id: call.id, ok: true, result });
+    } catch (error) {
+      send({ id: call.id, ok: false, problem: problemOf(error) });
+    }
+  });
+}
+
+export {
+  runtimeInfo,
+  toolDownloader,
+  toolchainAdapter,
+  serveWorker
+};
+//# sourceMappingURL=chunk-JOL2QRLE.js.map

package/dist/{chunk-N37QC5FV.js → chunk-JRA6OBHY.js}

@@ -20,10 +20,6 @@ import {
   enableClioCompileCache,
   workerCompileCacheEnvironment
 } from "./chunk-CKK25WN3.js";
-import {
-  readClioVersion,
-  resolvePackageRoot
-} from "./chunk-E3LEPLQ2.js";
 import {
   AI_AGENT_NAME,
   withClioAgentEnvironment
@@ -31,6 +27,10 @@ import {
 import {
   clioStateDir
 } from "./chunk-CTTI7G3T.js";
+import {
+  readClioVersion,
+  resolvePackageRoot
+} from "./chunk-E3LEPLQ2.js";
 import {
   init_esm_shims
 } from "./chunk-ECBHH7LU.js";
@@ -971,4 +971,4 @@ export {
   routeFactVerdict,
   runFleetNodePreflight
 };
-//# sourceMappingURL=chunk-N37QC5FV.js.map
+//# sourceMappingURL=chunk-JRA6OBHY.js.map

package/dist/{chunk-C6GEXX4L.js → chunk-JV25I7ID.js}

@@ -2,7 +2,10 @@ import { createRequire as __clioCreateRequire } from "node:module"; const requir
 import {
   ensureYaziProfile,
   yaziProfileDir
-} from "./chunk-T334FW2H.js";
+} from "./chunk-O2QJDRWP.js";
+import {
+  namingCompatibilityEnvironment
+} from "./chunk-DVNAPPXU.js";
 import {
   describeResolution,
   resolveToolBinary,
@@ -12,14 +15,11 @@ import {
   findPinnedTool
 } from "./chunk-K2BLQC5E.js";
 import {
-  namingCompatibilityEnvironment
-} from "./chunk-DVNAPPXU.js";
+  clioCacheDir
+} from "./chunk-CTTI7G3T.js";
 import {
   resolvePackageRoot
 } from "./chunk-E3LEPLQ2.js";
-import {
-  clioCacheDir
-} from "./chunk-CTTI7G3T.js";
 import {
   init_esm_shims
 } from "./chunk-ECBHH7LU.js";
@@ -1862,4 +1862,4 @@ export {
   createYaziSession,
   createMuxDomainModule
 };
-//# sourceMappingURL=chunk-C6GEXX4L.js.map
+//# sourceMappingURL=chunk-JV25I7ID.js.map

package/dist/{chunk-SEDI5K5B.js → chunk-JYKUMHCQ.js}

@@ -2,49 +2,49 @@ import { createRequire as __clioCreateRequire } from "node:module"; const requir
 import {
   SchedulingDomainModule,
   createPromptsDomainModule
-} from "./chunk-IMOD2YPV.js";
+} from "./chunk-F7Y6QTPL.js";
 import {
   ConfigDomainModule,
   loadDomains
-} from "./chunk-QKWL7SYE.js";
+} from "./chunk-2SXGG2IV.js";
 import {
   createObservabilityDomainModule
-} from "./chunk-XZ6UFQ52.js";
+} from "./chunk-XTLJDC2X.js";
 import {
   ResourcesDomainModule
-} from "./chunk-TZ6UVP2H.js";
-import {
-  AgentsDomainModule
-} from "./chunk-WURGVOZJ.js";
+} from "./chunk-H5DPSUBB.js";
 import {
   DispatchDomainModule,
   fallbackBootstrapOutput
-} from "./chunk-WN552PKN.js";
+} from "./chunk-5W4FRA5Q.js";
 import {
   renderCodewikiDigest
-} from "./chunk-IQCNVLO6.js";
+} from "./chunk-FB3KTE2J.js";
 import {
   SessionDomainModule
-} from "./chunk-D2T66PDV.js";
+} from "./chunk-BIY22UUK.js";
 import {
   SafetyDomainModule
-} from "./chunk-NCCQ6DVS.js";
+} from "./chunk-2ZWLMA3T.js";
+import {
+  AgentsDomainModule
+} from "./chunk-LZDLYSUN.js";
 import {
   MiddlewareDomainModule
-} from "./chunk-MBJO5VNZ.js";
+} from "./chunk-PJ5H5B7A.js";
 import {
   UnsupportedResponseSchemaError,
   isResponseSchemaRejection
-} from "./chunk-NO7J45X6.js";
+} from "./chunk-MWMW53WW.js";
 import {
   declaredScopeIntent
 } from "./chunk-L4N3DWNW.js";
 import {
   ProvidersDomainModule
-} from "./chunk-WT5TRMO4.js";
+} from "./chunk-GVU4CXPJ.js";
 import {
   parseJsonObjectPayload
-} from "./chunk-34XHRVKG.js";
+} from "./chunk-ARRUMZ7X.js";
 import {
   resolveGuardrail
 } from "./chunk-C27U2TYG.js";
@@ -702,4 +702,4 @@ export {
   validateInitOptions,
   bootstrapInputFromInitOptions
 };
-//# sourceMappingURL=chunk-SEDI5K5B.js.map
+//# sourceMappingURL=chunk-JYKUMHCQ.js.map

package/dist/{chunk-UA6W4XFJ.js → chunk-K3W6BF5C.js}

@@ -2,7 +2,7 @@ import { createRequire as __clioCreateRequire } from "node:module"; const requir
 import {
   WORKER_OUTPUT_MAX_BYTES,
   durableAssistantTextFromEvent
-} from "./chunk-CULVKYTK.js";
+} from "./chunk-STC6CWUZ.js";
 import {
   truncateUtf8
 } from "./chunk-MYI32N4R.js";
@@ -280,4 +280,4 @@ export {
   boundSettledText,
   createWorkerProgressFold
 };
-//# sourceMappingURL=chunk-UA6W4XFJ.js.map
+//# sourceMappingURL=chunk-K3W6BF5C.js.map