chainlesschain 0.166.69 → 0.166.71

package/src/assets/web-panel/assets/{usePersonalDataHub-BMUYSPn-.js → usePersonalDataHub-Bb2M_BPj.js}

@@ -1 +1 @@
-import{u as v}from"./index-DZiSMYoD.js";import{u as _}from"./useShellMode-CgR0wCYM.js";function d(r){if(!r)return r;if(r.error)throw new Error(r.error);return r.result!==void 0?r.result:r}async function p(r,s={},e=!0){try{if(e!==!0||!r||typeof r.sendRaw!="function")return{status:"unavailable",path:null};const a=await r.sendRaw({type:"fs.openDirectory",title:s.title},6e4);if(a&&(a.ok===!1||a.error))return{status:"unavailable",path:null};const t=a&&a.result!==void 0?a.result:a;return t&&(t.ok===!1||t.error||t.unsupported===!0)?{status:"unavailable",path:null}:t&&t.canceled===!0?{status:"cancelled",path:null}:t&&typeof t.path=="string"&&t.path.length>0?{status:"selected",path:t.path}:{status:"unavailable",path:null}}catch{return{status:"unavailable",path:null}}}function b(r,s,e,a,t){return typeof r.onMessage!="function"||typeof r.sendRaw!="function"?r.sendRaw({type:s,...e},t).then(d):new Promise((n,u)=>{const l=typeof crypto<"u"&&crypto.randomUUID?crypto.randomUUID():`${Date.now()}-${Math.random().toString(36).slice(2)}`,w=`${s}.event`,m=`${s}.end`;let c=!1,h=()=>{};const o=(i,f)=>{if(!c){c=!0,clearTimeout(g);try{h()}catch{}i(f)}},g=setTimeout(()=>{o(u,new Error(`stream timeout (${t}ms): ${s}`))},t),y=r.onMessage(i=>{if(!(c||!i)&&!(i.id!==l&&i.requestId!==l)){if(i.type===w){if(typeof a=="function")try{a(i.event||i)}catch{}return}if(i.type===m){o(n,d(i));return}i.type==="error"&&o(u,new Error(i.message||"stream error"))}});h=typeof y=="function"?y:()=>{},Promise.resolve(r.sendRaw({id:l,type:s,...e},t)).catch(()=>{})})}function k(){const r=v(),s=_(),e=(a,t={},n=3e4)=>r.sendRaw({type:a,...t},n).then(d);return{async health(){return await e("personal-data-hub.health",{},8e3)},async stats(){return await e("personal-data-hub.stats",{},8e3)},async listAdapters(){return await e("personal-data-hub.list-adapters",{},5e3)},async pickFile(a={}){try{const t=await r.sendRaw({type:"fs.openDialog",title:a.title,filters:a.filters},6e4),n=t&&t.result!==void 0?t.result:t,u=n&&typeof n.path=="string"?n.path:n&&typeof n.filePath=="string"?n.filePath:null;return n&&n.canceled!==!0&&u?u:null}catch{return null}},async pickDirectoryResult(a={}){return await p(r,a,s.isEmbedded)},async pickDirectory(a={}){const t=await p(r,a,s.isEmbedded);return t.status==="selected"?t.path:null},async adapterReadiness(a){return await e("personal-data-hub.adapter-readiness",Number.isInteger(a)?{timeoutMs:a}:{},15e3)},async syncAdapter(a,t={}){return await e("personal-data-hub.sync-adapter",{name:a,options:t},6e5)},async syncAll(a={}){return await e("personal-data-hub.sync-all",{options:a},6e5)},async registerMock({name:a="mock",count:t=20,seed:n=1}={}){return await e("personal-data-hub.register-mock",{name:a,count:t,seed:n})},async unregister(a){return await e("personal-data-hub.unregister",{name:a})},async ask(a,t={}){return await e("personal-data-hub.ask",{question:a,options:t},18e4)},async queryEvents(a={}){return await e("personal-data-hub.query-events",a,1e4)},async recentAudit(a={}){return await e("personal-data-hub.recent-audit",a,1e4)},async searchEvents(a={}){return await e("personal-data-hub.search-events",a,15e3)},async facetCounts(a={}){return await e("personal-data-hub.facet-counts",a,1e4)},async testEmailAuth(a){return await e("personal-data-hub.test-email-auth",{account:a},3e4)},async registerEmail(a,t={}){return await e("personal-data-hub.register-email",{account:a,opts:t},15e3)},async unregisterEmail(a){return await e("personal-data-hub.unregister-email",{email:a},5e3)},async listEmailAccounts(){return await e("personal-data-hub.list-email-accounts",{},5e3)},async activateEmail(a){return await e("personal-data-hub.activate-email",{email:a},5e3)},async eventDetail(a){return await e("personal-data-hub.event-detail",{eventId:a},5e3)},async syncAdapterStream(a,t={},n){return await b(r,"personal-data-hub.sync-adapter-stream",{name:a,options:t},n,6e5)},async syncAllStream(a={},t){return await b(r,"personal-data-hub.sync-all-stream",{options:a},t,9e5)},async registerAlipay(a,t={}){return await e("personal-data-hub.register-alipay",{account:a,opts:t},15e3)},async unregisterAlipay(a){return await e("personal-data-hub.unregister-alipay",{email:a},5e3)},async listAlipayAccounts(){return await e("personal-data-hub.list-alipay-accounts",{},5e3)},async activateAlipay(a){return await e("personal-data-hub.activate-alipay",{email:a},5e3)},async importAlipayBill({zipPath:a,csvPath:t,zipPassword:n}={}){return await e("personal-data-hub.import-alipay-bill",{zipPath:a,csvPath:t,zipPassword:n},3e5)},async reviewQueueList(a=50){return await e("personal-data-hub.review-queue-list",{limit:a},5e3)},async reviewDecision(a,t){return await e("personal-data-hub.review-decision",{reviewId:a,decision:t},5e3)},async manualMerge(a,t){return await e("personal-data-hub.manual-merge",{aId:a,bId:t},5e3)},async manualUnmerge(a){return await e("personal-data-hub.manual-unmerge",{personId:a},5e3)},async resolverDrain(a=50){return await e("personal-data-hub.resolver-drain",{limit:a},18e4)},async resolverStats(){return await e("personal-data-hub.resolver-stats",{},5e3)},async skillsList(){return await e("personal-data-hub.skills-list",{},5e3)},async runSkill(a,t={}){return await e("personal-data-hub.run-skill",{name:a,options:t},12e4)},async openAichatLogin(a,t={}){return await e("personal-data-hub.aichat-open-login",{vendor:a,opts:t},1e4)},async probeAichatCookies(a,t){return await e("personal-data-hub.aichat-probe-cookies",{vendor:a,cookieHeader:t},1e4)},async registerAichatVendor(a,t,n={}){return await e("personal-data-hub.aichat-register-vendor",{vendor:a,cookies:t,opts:n},3e4)},async rotateAichatLogin(a){return await e("personal-data-hub.aichat-rotate-login",{vendor:a},1e4)},async listAichatAccounts(){return await e("personal-data-hub.list-aichat-accounts",{},5e3)},async unregisterAichat(a){return await e("personal-data-hub.unregister-aichat",{vendor:a},5e3)},async aichatHealthCheckOnce(){return await e("personal-data-hub.aichat-health-check-once",{},3e4)},async probeWechatEnv(){return await e("personal-data-hub.wechat-env-probe",{},15e3)},async registerWechat({account:a,dbPath:t,wechatDataPath:n,fridaOpts:u,keyProviderOverride:l}={}){return await e("personal-data-hub.register-wechat",{account:a,dbPath:t,wechatDataPath:n,fridaOpts:u,keyProviderOverride:l},45e3)},async listWechatAccounts(){return await e("personal-data-hub.list-wechat-accounts",{},5e3)},async activateWechat(a,t={}){return await e("personal-data-hub.activate-wechat",{uin:a,fridaOpts:t.fridaOpts,keyProviderOverride:t.keyProviderOverride},45e3)},async unregisterWechat(a){return await e("personal-data-hub.unregister-wechat",{uin:a},5e3)},async bilibiliAdbSync(a={}){return await e("personal-data-hub.bilibili-adb-sync",{limits:a.limits,stagingDir:a.stagingDir,displayName:a.displayName},12e4)},async bilibiliAdbDoctor(){return await e("personal-data-hub.bilibili-adb-doctor",{},15e3)},async weiboAdbSync(a={}){return await e("personal-data-hub.weibo-adb-sync",{limits:a.limits,stagingDir:a.stagingDir,displayName:a.displayName},6e4)},async xhsAdbSync(a={}){return await e("personal-data-hub.xhs-adb-sync",{limits:a.limits,stagingDir:a.stagingDir,displayName:a.displayName},6e4)},async toutiaoAdbSync(a={}){return await e("personal-data-hub.toutiao-adb-sync",{limits:a.limits,stagingDir:a.stagingDir,displayName:a.displayName},9e4)},async kuaishouAdbSync(a={}){return await e("personal-data-hub.kuaishou-adb-sync",{limits:a.limits,stagingDir:a.stagingDir,displayName:a.displayName},12e4)},async bridgeDoctor(){return await e("personal-data-hub.bridge-doctor",{},6e4)},async douyinAdbSync(a={}){return await e("personal-data-hub.douyin-adb-sync",{uid:a.uid,limits:a.limits,stagingDir:a.stagingDir,displayName:a.displayName},6e4)}}}export{k as u};
+import{u as v}from"./index-5UfwyzQV.js";import{u as _}from"./useShellMode-CgR0wCYM.js";function d(r){if(!r)return r;if(r.error)throw new Error(r.error);return r.result!==void 0?r.result:r}async function p(r,s={},e=!0){try{if(e!==!0||!r||typeof r.sendRaw!="function")return{status:"unavailable",path:null};const a=await r.sendRaw({type:"fs.openDirectory",title:s.title},6e4);if(a&&(a.ok===!1||a.error))return{status:"unavailable",path:null};const t=a&&a.result!==void 0?a.result:a;return t&&(t.ok===!1||t.error||t.unsupported===!0)?{status:"unavailable",path:null}:t&&t.canceled===!0?{status:"cancelled",path:null}:t&&typeof t.path=="string"&&t.path.length>0?{status:"selected",path:t.path}:{status:"unavailable",path:null}}catch{return{status:"unavailable",path:null}}}function b(r,s,e,a,t){return typeof r.onMessage!="function"||typeof r.sendRaw!="function"?r.sendRaw({type:s,...e},t).then(d):new Promise((n,u)=>{const l=typeof crypto<"u"&&crypto.randomUUID?crypto.randomUUID():`${Date.now()}-${Math.random().toString(36).slice(2)}`,w=`${s}.event`,m=`${s}.end`;let c=!1,h=()=>{};const o=(i,f)=>{if(!c){c=!0,clearTimeout(g);try{h()}catch{}i(f)}},g=setTimeout(()=>{o(u,new Error(`stream timeout (${t}ms): ${s}`))},t),y=r.onMessage(i=>{if(!(c||!i)&&!(i.id!==l&&i.requestId!==l)){if(i.type===w){if(typeof a=="function")try{a(i.event||i)}catch{}return}if(i.type===m){o(n,d(i));return}i.type==="error"&&o(u,new Error(i.message||"stream error"))}});h=typeof y=="function"?y:()=>{},Promise.resolve(r.sendRaw({id:l,type:s,...e},t)).catch(()=>{})})}function k(){const r=v(),s=_(),e=(a,t={},n=3e4)=>r.sendRaw({type:a,...t},n).then(d);return{async health(){return await e("personal-data-hub.health",{},8e3)},async stats(){return await e("personal-data-hub.stats",{},8e3)},async listAdapters(){return await e("personal-data-hub.list-adapters",{},5e3)},async pickFile(a={}){try{const t=await r.sendRaw({type:"fs.openDialog",title:a.title,filters:a.filters},6e4),n=t&&t.result!==void 0?t.result:t,u=n&&typeof n.path=="string"?n.path:n&&typeof n.filePath=="string"?n.filePath:null;return n&&n.canceled!==!0&&u?u:null}catch{return null}},async pickDirectoryResult(a={}){return await p(r,a,s.isEmbedded)},async pickDirectory(a={}){const t=await p(r,a,s.isEmbedded);return t.status==="selected"?t.path:null},async adapterReadiness(a){return await e("personal-data-hub.adapter-readiness",Number.isInteger(a)?{timeoutMs:a}:{},15e3)},async syncAdapter(a,t={}){return await e("personal-data-hub.sync-adapter",{name:a,options:t},6e5)},async syncAll(a={}){return await e("personal-data-hub.sync-all",{options:a},6e5)},async registerMock({name:a="mock",count:t=20,seed:n=1}={}){return await e("personal-data-hub.register-mock",{name:a,count:t,seed:n})},async unregister(a){return await e("personal-data-hub.unregister",{name:a})},async ask(a,t={}){return await e("personal-data-hub.ask",{question:a,options:t},18e4)},async queryEvents(a={}){return await e("personal-data-hub.query-events",a,1e4)},async recentAudit(a={}){return await e("personal-data-hub.recent-audit",a,1e4)},async searchEvents(a={}){return await e("personal-data-hub.search-events",a,15e3)},async facetCounts(a={}){return await e("personal-data-hub.facet-counts",a,1e4)},async testEmailAuth(a){return await e("personal-data-hub.test-email-auth",{account:a},3e4)},async registerEmail(a,t={}){return await e("personal-data-hub.register-email",{account:a,opts:t},15e3)},async unregisterEmail(a){return await e("personal-data-hub.unregister-email",{email:a},5e3)},async listEmailAccounts(){return await e("personal-data-hub.list-email-accounts",{},5e3)},async activateEmail(a){return await e("personal-data-hub.activate-email",{email:a},5e3)},async eventDetail(a){return await e("personal-data-hub.event-detail",{eventId:a},5e3)},async syncAdapterStream(a,t={},n){return await b(r,"personal-data-hub.sync-adapter-stream",{name:a,options:t},n,6e5)},async syncAllStream(a={},t){return await b(r,"personal-data-hub.sync-all-stream",{options:a},t,9e5)},async registerAlipay(a,t={}){return await e("personal-data-hub.register-alipay",{account:a,opts:t},15e3)},async unregisterAlipay(a){return await e("personal-data-hub.unregister-alipay",{email:a},5e3)},async listAlipayAccounts(){return await e("personal-data-hub.list-alipay-accounts",{},5e3)},async activateAlipay(a){return await e("personal-data-hub.activate-alipay",{email:a},5e3)},async importAlipayBill({zipPath:a,csvPath:t,zipPassword:n}={}){return await e("personal-data-hub.import-alipay-bill",{zipPath:a,csvPath:t,zipPassword:n},3e5)},async reviewQueueList(a=50){return await e("personal-data-hub.review-queue-list",{limit:a},5e3)},async reviewDecision(a,t){return await e("personal-data-hub.review-decision",{reviewId:a,decision:t},5e3)},async manualMerge(a,t){return await e("personal-data-hub.manual-merge",{aId:a,bId:t},5e3)},async manualUnmerge(a){return await e("personal-data-hub.manual-unmerge",{personId:a},5e3)},async resolverDrain(a=50){return await e("personal-data-hub.resolver-drain",{limit:a},18e4)},async resolverStats(){return await e("personal-data-hub.resolver-stats",{},5e3)},async skillsList(){return await e("personal-data-hub.skills-list",{},5e3)},async runSkill(a,t={}){return await e("personal-data-hub.run-skill",{name:a,options:t},12e4)},async openAichatLogin(a,t={}){return await e("personal-data-hub.aichat-open-login",{vendor:a,opts:t},1e4)},async probeAichatCookies(a,t){return await e("personal-data-hub.aichat-probe-cookies",{vendor:a,cookieHeader:t},1e4)},async registerAichatVendor(a,t,n={}){return await e("personal-data-hub.aichat-register-vendor",{vendor:a,cookies:t,opts:n},3e4)},async rotateAichatLogin(a){return await e("personal-data-hub.aichat-rotate-login",{vendor:a},1e4)},async listAichatAccounts(){return await e("personal-data-hub.list-aichat-accounts",{},5e3)},async unregisterAichat(a){return await e("personal-data-hub.unregister-aichat",{vendor:a},5e3)},async aichatHealthCheckOnce(){return await e("personal-data-hub.aichat-health-check-once",{},3e4)},async probeWechatEnv(){return await e("personal-data-hub.wechat-env-probe",{},15e3)},async registerWechat({account:a,dbPath:t,wechatDataPath:n,fridaOpts:u,keyProviderOverride:l}={}){return await e("personal-data-hub.register-wechat",{account:a,dbPath:t,wechatDataPath:n,fridaOpts:u,keyProviderOverride:l},45e3)},async listWechatAccounts(){return await e("personal-data-hub.list-wechat-accounts",{},5e3)},async activateWechat(a,t={}){return await e("personal-data-hub.activate-wechat",{uin:a,fridaOpts:t.fridaOpts,keyProviderOverride:t.keyProviderOverride},45e3)},async unregisterWechat(a){return await e("personal-data-hub.unregister-wechat",{uin:a},5e3)},async bilibiliAdbSync(a={}){return await e("personal-data-hub.bilibili-adb-sync",{limits:a.limits,stagingDir:a.stagingDir,displayName:a.displayName},12e4)},async bilibiliAdbDoctor(){return await e("personal-data-hub.bilibili-adb-doctor",{},15e3)},async weiboAdbSync(a={}){return await e("personal-data-hub.weibo-adb-sync",{limits:a.limits,stagingDir:a.stagingDir,displayName:a.displayName},6e4)},async xhsAdbSync(a={}){return await e("personal-data-hub.xhs-adb-sync",{limits:a.limits,stagingDir:a.stagingDir,displayName:a.displayName},6e4)},async toutiaoAdbSync(a={}){return await e("personal-data-hub.toutiao-adb-sync",{limits:a.limits,stagingDir:a.stagingDir,displayName:a.displayName},9e4)},async kuaishouAdbSync(a={}){return await e("personal-data-hub.kuaishou-adb-sync",{limits:a.limits,stagingDir:a.stagingDir,displayName:a.displayName},12e4)},async bridgeDoctor(){return await e("personal-data-hub.bridge-doctor",{},6e4)},async douyinAdbSync(a={}){return await e("personal-data-hub.douyin-adb-sync",{uid:a.uid,limits:a.limits,stagingDir:a.stagingDir,displayName:a.displayName},6e4)}}}export{k as u};

package/src/assets/web-panel/assets/{vnode-DL2pI31V.js → vnode-DENyLaXR.js}

@@ -1 +1 @@
-import{N as i,h as a,w as l}from"./index-DZiSMYoD.js";import{a7 as o,k as g,C as d,F as f,A as p}from"./vendor-Bn1JzzAn.js";function c(e){let r=arguments.length>1&&arguments[1]!==void 0?arguments[1]:{},t=arguments.length>2&&arguments[2]!==void 0?arguments[2]:!0,s=arguments.length>3&&arguments[3]!==void 0?arguments[3]:!1,u=e;if(Array.isArray(e)&&(u=i(e)[0]),!u)return null;const n=o(u,r,s);return n.props=t?a(a({},n.props),r):n.props,l(typeof n.props.class!="object","class must be string"),n}function V(e){let r=arguments.length>1&&arguments[1]!==void 0?arguments[1]:{},t=arguments.length>2&&arguments[2]!==void 0?arguments[2]:!0;return e.map(s=>c(s,r,t))}function v(e,r,t){p(o(e,a({},r)),t)}const m=e=>(e||[]).some(r=>g(r)?!(r.type===d||r.type===f&&!m(r.children)):!0)?e:null;function h(e,r,t,s){var u;const n=(u=e[r])===null||u===void 0?void 0:u.call(e,t);return m(n)?n:s?.()}export{h as a,V as b,c,v as t};
+import{N as i,h as a,w as l}from"./index-5UfwyzQV.js";import{a7 as o,k as g,C as d,F as f,A as p}from"./vendor-Bn1JzzAn.js";function c(e){let r=arguments.length>1&&arguments[1]!==void 0?arguments[1]:{},t=arguments.length>2&&arguments[2]!==void 0?arguments[2]:!0,s=arguments.length>3&&arguments[3]!==void 0?arguments[3]:!1,u=e;if(Array.isArray(e)&&(u=i(e)[0]),!u)return null;const n=o(u,r,s);return n.props=t?a(a({},n.props),r):n.props,l(typeof n.props.class!="object","class must be string"),n}function V(e){let r=arguments.length>1&&arguments[1]!==void 0?arguments[1]:{},t=arguments.length>2&&arguments[2]!==void 0?arguments[2]:!0;return e.map(s=>c(s,r,t))}function v(e,r,t){p(o(e,a({},r)),t)}const m=e=>(e||[]).some(r=>g(r)?!(r.type===d||r.type===f&&!m(r.children)):!0)?e:null;function h(e,r,t,s){var u;const n=(u=e[r])===null||u===void 0?void 0:u.call(e,t);return m(n)?n:s?.()}export{h as a,V as b,c,v as t};

package/src/assets/web-panel/assets/{zoom-Cbi8fISi.js → zoom-BUOUP8-I.js}

@@ -1,4 +1,4 @@
-import{K as o}from"./index-DZiSMYoD.js";import{i as f}from"./motion-oVcQdpCm.js";const c=new o("antZoomIn",{"0%":{transform:"scale(0.2)",opacity:0},"100%":{transform:"scale(1)",opacity:1}}),y=new o("antZoomOut",{"0%":{transform:"scale(1)"},"100%":{transform:"scale(0.2)",opacity:0}}),a=new o("antZoomBigIn",{"0%":{transform:"scale(0.8)",opacity:0},"100%":{transform:"scale(1)",opacity:1}}),s=new o("antZoomBigOut",{"0%":{transform:"scale(1)"},"100%":{transform:"scale(0.8)",opacity:0}}),g=new o("antZoomUpIn",{"0%":{transform:"scale(0.8)",transformOrigin:"50% 0%",opacity:0},"100%":{transform:"scale(1)",transformOrigin:"50% 0%"}}),O=new o("antZoomUpOut",{"0%":{transform:"scale(1)",transformOrigin:"50% 0%"},"100%":{transform:"scale(0.8)",transformOrigin:"50% 0%",opacity:0}}),l=new o("antZoomLeftIn",{"0%":{transform:"scale(0.8)",transformOrigin:"0% 50%",opacity:0},"100%":{transform:"scale(1)",transformOrigin:"0% 50%"}}),u=new o("antZoomLeftOut",{"0%":{transform:"scale(1)",transformOrigin:"0% 50%"},"100%":{transform:"scale(0.8)",transformOrigin:"0% 50%",opacity:0}}),p=new o("antZoomRightIn",{"0%":{transform:"scale(0.8)",transformOrigin:"100% 50%",opacity:0},"100%":{transform:"scale(1)",transformOrigin:"100% 50%"}}),z=new o("antZoomRightOut",{"0%":{transform:"scale(1)",transformOrigin:"100% 50%"},"100%":{transform:"scale(0.8)",transformOrigin:"100% 50%",opacity:0}}),K=new o("antZoomDownIn",{"0%":{transform:"scale(0.8)",transformOrigin:"50% 100%",opacity:0},"100%":{transform:"scale(1)",transformOrigin:"50% 100%"}}),w=new o("antZoomDownOut",{"0%":{transform:"scale(1)",transformOrigin:"50% 100%"},"100%":{transform:"scale(0.8)",transformOrigin:"50% 100%",opacity:0}}),I={zoom:{inKeyframes:c,outKeyframes:y},"zoom-big":{inKeyframes:a,outKeyframes:s},"zoom-big-fast":{inKeyframes:a,outKeyframes:s},"zoom-left":{inKeyframes:l,outKeyframes:u},"zoom-right":{inKeyframes:p,outKeyframes:z},"zoom-up":{inKeyframes:g,outKeyframes:O},"zoom-down":{inKeyframes:K,outKeyframes:w}},h=(n,r)=>{const{antCls:m}=n,t=`${m}-${r}`,{inKeyframes:i,outKeyframes:e}=I[r];return[f(t,i,e,r==="zoom-big-fast"?n.motionDurationFast:n.motionDurationMid),{[`
+import{K as o}from"./index-5UfwyzQV.js";import{i as f}from"./motion-C7PjuFda.js";const c=new o("antZoomIn",{"0%":{transform:"scale(0.2)",opacity:0},"100%":{transform:"scale(1)",opacity:1}}),y=new o("antZoomOut",{"0%":{transform:"scale(1)"},"100%":{transform:"scale(0.2)",opacity:0}}),a=new o("antZoomBigIn",{"0%":{transform:"scale(0.8)",opacity:0},"100%":{transform:"scale(1)",opacity:1}}),s=new o("antZoomBigOut",{"0%":{transform:"scale(1)"},"100%":{transform:"scale(0.8)",opacity:0}}),g=new o("antZoomUpIn",{"0%":{transform:"scale(0.8)",transformOrigin:"50% 0%",opacity:0},"100%":{transform:"scale(1)",transformOrigin:"50% 0%"}}),O=new o("antZoomUpOut",{"0%":{transform:"scale(1)",transformOrigin:"50% 0%"},"100%":{transform:"scale(0.8)",transformOrigin:"50% 0%",opacity:0}}),l=new o("antZoomLeftIn",{"0%":{transform:"scale(0.8)",transformOrigin:"0% 50%",opacity:0},"100%":{transform:"scale(1)",transformOrigin:"0% 50%"}}),u=new o("antZoomLeftOut",{"0%":{transform:"scale(1)",transformOrigin:"0% 50%"},"100%":{transform:"scale(0.8)",transformOrigin:"0% 50%",opacity:0}}),p=new o("antZoomRightIn",{"0%":{transform:"scale(0.8)",transformOrigin:"100% 50%",opacity:0},"100%":{transform:"scale(1)",transformOrigin:"100% 50%"}}),z=new o("antZoomRightOut",{"0%":{transform:"scale(1)",transformOrigin:"100% 50%"},"100%":{transform:"scale(0.8)",transformOrigin:"100% 50%",opacity:0}}),K=new o("antZoomDownIn",{"0%":{transform:"scale(0.8)",transformOrigin:"50% 100%",opacity:0},"100%":{transform:"scale(1)",transformOrigin:"50% 100%"}}),w=new o("antZoomDownOut",{"0%":{transform:"scale(1)",transformOrigin:"50% 100%"},"100%":{transform:"scale(0.8)",transformOrigin:"50% 100%",opacity:0}}),I={zoom:{inKeyframes:c,outKeyframes:y},"zoom-big":{inKeyframes:a,outKeyframes:s},"zoom-big-fast":{inKeyframes:a,outKeyframes:s},"zoom-left":{inKeyframes:l,outKeyframes:u},"zoom-right":{inKeyframes:p,outKeyframes:z},"zoom-up":{inKeyframes:g,outKeyframes:O},"zoom-down":{inKeyframes:K,outKeyframes:w}},h=(n,r)=>{const{antCls:m}=n,t=`${m}-${r}`,{inKeyframes:i,outKeyframes:e}=I[r];return[f(t,i,e,r==="zoom-big-fast"?n.motionDurationFast:n.motionDurationMid),{[`
         ${t}-enter,
         ${t}-appear
       `]:{transform:"scale(0)",opacity:0,animationTimingFunction:n.motionEaseOutCirc,"&-prepare":{transform:"none"}},[`${t}-leave`]:{animationTimingFunction:n.motionEaseInOutCirc}}]};export{h as i,c as z};

package/src/assets/web-panel/index.html

@@ -8,7 +8,7 @@
     // Injected by web-ui-server.js at serve time
     window.__CC_CONFIG__ = __CC_CONFIG_PLACEHOLDER__;
   </script>
-  <script type="module" crossorigin src="./assets/index-DZiSMYoD.js"></script>
+  <script type="module" crossorigin src="./assets/index-5UfwyzQV.js"></script>
   <link rel="modulepreload" crossorigin href="./assets/vendor-Bn1JzzAn.js">
   <link rel="modulepreload" crossorigin href="./assets/icons-DG5UD-6K.js">
   <link rel="stylesheet" crossorigin href="./assets/index-Cq93VfoF.css">

package/src/command-help-index.json

@@ -5,7 +5,7 @@
     "a2a": "Usage: chainlesschain a2a [options] [command]\n\nA2A Protocol — agent-to-agent communication\n\nOptions:\n  -h, --help                                     display help for command\n\nCommands:\n  register [options] <name>                      Register an agent card\n  discover [options]                             Discover agents by capability or skill\n  submit [options] <agent-id> <input>            Submit a task to an agent\n  status [options] <task-id>                     Get task status\n  complete <task-id> <output>                    Mark a task as completed\n  fail <task-id> <error>                         Mark a task as failed\n  peers [options]                                List all registered agents\n  cards [options]                                List all agent cards with details\n  negotiate [options] <agent-id> <capabilities>  Check if an agent supports required capabilities\n  task-statuses [options]                        List V2 task statuses (Phase 81)\n  card-statuses [options]                        List V2 card statuses (Phase 81)\n  subscription-types [options]                   List V2 subscription types (Phase 81)\n  negotiation-results [options]                  List V2 negotiation outcomes (Phase 81)\n  validate-card [options] <name>                 Validate an agent card against the A2A schema\n  set-card-status [options] <cardId> <status>    Transition a card between active/inactive/expired\n  card-status [options] <cardId>                 Show a card's V2 status\n  send-task-v2 [options] <agentId> <input>       Submit a V2 task (in-memory, with optional timeout)\n  start-working [options] <taskId>               Transition a V2 task to working\n  request-input [options] <taskId> <prompt>      Request user input while a V2 task is working\n  provide-input [options] <taskId> <input>       Provide input for an input-required V2 task\n  complete-task-v2 [options] <taskId> [output]   Complete a V2 task (from working only)\n  fail-task-v2 [options] <taskId> [error]        Fail a V2 task with an error message\n  cancel-task [options] <taskId> [reason]        Cancel a non-terminal V2 task\n  check-timeout [options] <taskId>               Check V2 task timeout (auto-fails if past deadline)\n  task-v2 [options] <taskId>                     Show a V2 task snapshot\n  tasks-v2 [options]                             List V2 tasks\n  negotiate-v2 [options] <cardJson>              Phase 81 capability negotiation against an agent card\n  stats-v2 [options]                             Aggregate V2 stats (tasks + cards + subscriptions)\n  enums-v2                                       Show V2 governance enums\n  register-agent-v2 [options]                    Register an a2a agent profile (pending)\n  activate-agent-v2 <id>                         Activate agent\n  suspend-agent-v2 <id>                          Suspend agent\n  retire-agent-v2 <id>                           Retire agent (terminal)\n  touch-agent-v2 <id>                            Refresh lastTouchedAt\n  get-agent-v2 <id>                              Get agent\n  list-agents-v2                                 List agents\n  create-message-v2 [options]                    Create an a2a message (queued)\n  start-message-v2 <id>                          Transition message to sending\n  deliver-message-v2 <id>                        Transition message to delivered\n  fail-message-v2 [options] <id>                 Fail message\n  cancel-message-v2 [options] <id>               Cancel message\n  get-message-v2 <id>                            Get message\n  list-messages-v2                               List messages\n  set-max-active-agents-v2 <n>                   Set per-owner active cap\n  set-max-pending-messages-v2 <n>                Set per-agent pending cap\n  set-agent-idle-ms-v2 <n>                       Set idle threshold\n  set-message-stuck-ms-v2 <n>                    Set stuck threshold\n  auto-suspend-idle-agents-v2                    Auto-suspend idle agents\n  auto-fail-stuck-messages-v2                    Auto-fail stuck sending messages\n  gov-stats-v2                                   V2 governance aggregate stats\n  help [command]                                 display help for command\n",
     "activitypub": "Usage: chainlesschain activitypub|ap [options] [command]\n\nActivityPub C2S bridge — actors, outbox/inbox, Follow/Create/Like/Announce\n\nOptions:\n  -h, --help                                    display help for command\n\nCommands:\n  actor                                         Manage local and remote ActivityPub actors\n  publish [options] <content>                   Publish a Create(Note) activity to the actor's outbox\n  follow [options] <target>                     Publish a Follow activity (target: username or actor URL)\n  accept [options] <follow-activity-id>         Accept a pending Follow request\n  unfollow [options] <target>                   Publish an Undo(Follow) activity\n  like [options] <object-id>                    Publish a Like activity for an object URL\n  announce [options] <object-id>                Publish an Announce (boost) activity for an object URL\n  outbox [options] <username>                   List an actor's outbox activities\n  inbox [options] <username>                    List an actor's inbox activities\n  deliver [options] <username> <activity-json>  Simulate inbox delivery — push a JSON activity into a local actor's inbox\n  followers [options] <username>                List followers of an actor\n  search [options] <query>                      Search actors and/or notes in the local Fediverse index\n  following [options] <username>                List who this actor is following\n  enums-v2                                      Show V2 enums\n  register-actor-v2 [options]                   Register an AP actor profile (pending)\n  activate-actor-v2 <id>                        Activate actor\n  suspend-actor-v2 <id>                         Suspend actor\n  deactivate-actor-v2 <id>                      Deactivate actor (terminal)\n  touch-actor-v2 <id>                           Refresh lastTouchedAt\n  get-actor-v2 <id>                             Get actor\n  list-actors-v2                                List actors\n  create-activity-v2 [options]                  Create an AP activity (queued)\n  start-activity-v2 <id>                        Transition activity to delivering\n  deliver-activity-v2 <id>                      Transition activity to delivered\n  fail-activity-v2 [options] <id>               Fail activity\n  cancel-activity-v2 [options] <id>             Cancel activity\n  get-activity-v2 <id>                          Get activity\n  list-activities-v2                            List activities\n  set-max-active-actors-v2 <n>                  Set per-owner active cap\n  set-max-pending-activities-v2 <n>             Set per-actor pending cap\n  set-actor-idle-ms-v2 <n>                      Set idle threshold\n  set-activity-stuck-ms-v2 <n>                  Set stuck threshold\n  auto-suspend-idle-actors-v2                   Auto-suspend idle actors\n  auto-fail-stuck-activities-v2                 Auto-fail stuck delivering activities\n  gov-stats-v2                                  V2 governance aggregate stats\n  help [command]                                display help for command\n",
     "agenda": "Usage: chainlesschain agenda [options] [command]\n\nFire agent-scheduled wakeups / crons / monitors (persisted by the `schedule`\ntool)\n\nOptions:\n  -h, --help             display help for command\n\nCommands:\n  list [options]         List all scheduled entries\n  run [options]          Fire every entry that is due now\n  cancel [options] <id>  Remove a scheduled entry by id\n  prune [options]        Remove finished entries (fired / matched / exhausted /\n                         expired)\n  help [command]         display help for command\n",
-    "agent": "Usage: chainlesschain agent|a [options] [task...]\n\nStart an agentic AI session (reads/writes files, runs commands)\n\nArguments:\n  task                                 Headless task 鈥?when given (or with -p /\n                                       piped stdin), runs non-interactively\n\nOptions:\n  --model <model>                      Model name\n  --provider <provider>                LLM provider (ollama, openai,\n                                       volcengine, deepseek, ...)\n  --base-url <url>                     API base URL\n  --api-key <key>                      API key\n  --think [level]                      Enable Anthropic extended thinking\n                                       (level: think | hard | ultra; Anthropic\n                                       models only)\n  --ultrathink                         Maximum Anthropic extended thinking (=\n                                       --think ultra)\n  --thinking-budget <n>                Thinking token budget for legacy Claude\n                                       models (Sonnet 4.5 / Opus 4.0-4.5 /\n                                       older); clamped below max_tokens.\n                                       Adaptive-thinking models ignore it (they\n                                       use --think's effort). Requires\n                                       --think/--ultrathink.\n  --image <path>                       Attach an image (png/jpg/jpeg/gif/webp)\n                                       to the prompt for a vision-capable model\n                                       (headless; repeatable)\n  --vision-model <id>                  Model to use when an image is attached\n                                       (default: config llm.visionModel or\n                                       doubao-seed-2-0-lite-260215)\n  --session <id>                       Resume a previous agent session\n  -c, --continue                       Resume the most recent session (no id\n                                       needed 鈥?claude --continue parity)\n  --resume [id]                        Resume a session by id (no id 鈫?most\n                                       recent 鈥?claude --resume parity)\n  --fork-session                       When resuming, branch into a NEW session\n                                       id and leave the original untouched\n                                       (claude --fork-session parity)\n  --fork-request-id <key>              Stable idempotency key for\n                                       --fork-session retries (omit for a new\n                                       fork each invocation)\n  --add-dir <dir>                      Extra working directory the agent may\n                                       read/search/edit (repeatable)\n  --checkpoint                         Auto-snapshot the work tree before each\n                                       mutating tool (DEFAULT inside a git\n                                       repo; cc checkpoint restore to roll\n                                       back)\n  --no-checkpoint                      Disable auto-checkpointing (it is on by\n                                       default inside git repos)\n  --managed-checkpoint                 Checkpoint bounded mutating tools with\n                                       Process Broker; unavailable writer\n                                       lifetimes are reported as coverage none\n  --managed-checkpoint-state <dir>     Durable managed-checkpoint state\n                                       directory (must be outside the\n                                       workspace)\n  --managed-checkpoint-exclude <path>  Explicit workspace path excluded from\n                                       managed checkpoints; repeatable and\n                                       reported as partial coverage\n  --safe-mode                          Run bare: disable project memory,\n                                       settings hooks, memory recall, IDE\n                                       context, status line and update notice\n                                       (permission rules STAY active)\n  --bare                               Everything --safe-mode disables PLUS\n                                       skills, plugins and MCP/IDE auto-connect\n                                       — minimal fast surface for scripted\n                                       calls (explicit --mcp-config still\n                                       loads; permission rules STAY active)\n  --ephemeral                          No session persistence: nothing is\n                                       written to the session store (headless;\n                                       a --resume id still replays history\n                                       read-only)\n  --capabilities                       Print a machine-readable capability\n                                       manifest (JSON: protocol version, tools,\n                                       permission modes, exit codes) and exit\n  --disable-slash-commands             Interactive REPL: don't dispatch '/'\n                                       input as slash commands — it reaches the\n                                       model verbatim (/exit and /quit stay\n                                       live)\n  --ax-screen-reader                   Screen-reader friendly output: no ANSI\n                                       colors, no in-place status line repaints\n                                       (also CC_SCREEN_READER=1)\n  --worktree                           Run this session in a fresh git worktree\n                                       (isolated branch; auto-removed when the\n                                       session changes nothing)\n  --no-worktree                        Background Git task: explicitly share\n                                       the current work tree (intended for\n                                       read-only tasks; writable runs are not\n                                       isolated)\n  --unattended                         Enable fail-closed shell action policy\n                                       for scheduled/event-driven runs\n  --unattended-allow <classes>         Comma-separated action classes\n                                       explicitly allowed for unattended shell\n                                       runs\n  --sandbox [image]                    Run shell commands in an ephemeral\n                                       Docker sandbox (network disabled by\n                                       default)\n  --sandbox-mode <mode>                Sandbox posture: off | workspace-write |\n                                       strict (explicit isolation modes fail\n                                       closed)\n  --sandbox-network                    Allow network access inside --sandbox\n  --otlp <file>                        Write the agent run's OpenTelemetry\n                                       spans (model/tool/retry) as OTLP/JSON to\n                                       <file>\n  --otlp-content                       Include prompt/response CONTENT in\n                                       --otlp spans (off by default; content is\n                                       redacted unless this is set)\n  --auto-rewake                        When an async `asyncRewake` hook (e.g. a\n                                       background test) fails at turn end,\n                                       re-engage the agent to fix it (bounded\n                                       by --max-rewakes)\n  --auto-pin                           Force-pin the original task (first user\n                                       turn) through compaction (ON by default;\n                                       disable with CC_AUTO_PIN=0 or config\n                                       context.autoPin=false)\n  --max-rewakes <n>                    Max auto-rewake re-drives per run\n                                       (default 1); implies --auto-rewake\n  --bg, --background                   Start as a detached background agent and\n                                       return its id immediately\n  --agent-id <id>                      Agent id for scoped memory recall\n  --recall-limit <n>                   Top-K memories to inject into system\n                                       prompt\n  --recall-query <q>                   Query string for startup memory recall\n  --no-recall-memory                   Disable startup memory recall\n  --vim                                Start the interactive REPL in vim-mode\n                                       line editing (toggle later with /vim; or\n                                       CC_VIM=1)\n  --no-stream                          Disable streamed response rendering\n  --no-park-on-exit                    Close the session-core handle on exit\n                                       instead of parking it\n  --bundle <path>                      Agent bundle directory (may execute\n                                       local MCP commands from mcp.json)\n  -p, --print [prompt]                 Headless: run one non-interactive turn\n                                       and exit\n  --output-format <fmt>                Headless output: text | json |\n                                       stream-json (default: \"text\")\n  --max-turns <n>                      Cap agent loop iterations (0 =\n                                       unlimited; interactive streams default\n                                       to unlimited, unattended runs to 50)\n  --json-schema <file>                 Headless structured output: final reply\n                                       must be JSON validating against this\n                                       schema (invalid replies retried)\n  --allowed-tools <list>               Comma/space-separated tool allow-list\n                                       (headless)\n  --disallowed-tools <list>            Comma/space-separated tool deny-list\n                                       (headless)\n  --permission-mode <mode>             manual | auto | dontAsk | default | plan\n                                       | acceptEdits | bypassPermissions (plan\n                                       headless-only)\n  --no-file-refs                       Disable @path file-reference expansion\n                                       in the prompt (headless)\n  --no-slash-macros                    Disable /name custom-command\n                                       (.claude/commands) expansion in the\n                                       prompt (headless)\n  --system-prompt <text>               Replace the built-in system prompt\n                                       (literal text or @file)\n  --append-system-prompt <text>        Append extra guidance to the system\n                                       prompt (literal text or @file)\n  --no-project-memory                  Skip auto-loaded project memory (cc.md /\n                                       CLAUDE.md / AGENTS.md hierarchy,\n                                       .chainlesschain/rules.md,\n                                       .claude/rules/*.md) — a lean system\n                                       prompt for token-tight surfaces (e.g.\n                                       IDE chat). The agent can still read\n                                       those files with tools when it needs\n                                       them.\n  --output-style <name>                Apply a named output-style persona\n                                       (.claude/output-styles/<name>.md or a\n                                       built-in: concise | explanatory |\n                                       learning)\n  --input-format <fmt>                 Headless input: text | stream-json\n                                       (NDJSON user events on stdin,\n                                       multi-turn) (default: \"text\")\n  --trace-id <id>                      Correlation id stamped as `trace_id` on\n                                       every stream-json output line (also read\n                                       from CC_TRACE_ID). Lets an IDE/bridge\n                                       trace one run across its own logs, the\n                                       CLI, transcripts and diagnostics.\n                                       Auto-generated per run when omitted.\n  --fallback-model <model>             Backup model(s) to try in order when the\n                                       primary fails (transient error or\n                                       model-not-found). Repeatable or\n                                       comma-separated; up to 3. A\n                                       `provider:model` entry (e.g.\n                                       openai:gpt-4o) falls back\n                                       cross-provider, using that provider's\n                                       API key from its env var (skipped if\n                                       unset — never reuses the primary key).\n                                       Defaults to config llm.fallbackModels.\n  --include-partial-messages           Emit live assistant-text deltas as\n                                       stream_event lines (requires\n                                       --output-format stream-json)\n  --include-hook-events                Emit redacted hook and subagent\n                                       lifecycle events (requires\n                                       --output-format stream-json)\n  --goal [id]                          Bind a cc goal into the run (id, or omit\n                                       the value to auto-resolve the active\n                                       goal)\n  --goal-assess                        After the run, ask the model to assess\n                                       goal progress and persist it (opt-in;\n                                       costs one extra completion; requires\n                                       --goal)\n  --goal-condition <spec>              Session completion condition; re-drives\n                                       outer turns until met. Prefix\n                                       exit-zero:/file-exists:/contains:/regex:\n                                       (deterministic) or model:<desc>\n                                       (model-judged)\n  --max-outer-turns <n>                Max outer re-drive turns for\n                                       --goal-condition (default 10, hard cap\n                                       100)\n  --goal-max-tokens <n>                Token budget across --goal-condition\n                                       outer turns\n  --goal-max-cost <usd>                Cost budget (USD) across\n                                       --goal-condition outer turns\n  --goal-max-time <ms>                 Wall-clock budget (ms) across\n                                       --goal-condition outer turns\n  --mcp-config <file>                  Load ad-hoc MCP servers from a JSON file\n                                       for this run (headless); their tools\n                                       become callable (mcp__<server>__<tool>)\n  --no-mcp                             Don't auto-connect MCP servers\n                                       registered with `cc mcp add\n                                       --auto-connect` (--mcp-config still\n                                       loads)\n  --ide                                Force-enable IDE bridge auto-connect:\n                                       discover a running editor's MCP server\n                                       via ~/.chainlesschain/ide/*.json\n                                       (default: auto inside an IDE integrated\n                                       terminal)\n  --no-ide                             Disable IDE bridge auto-connect\n  --pdh                                Force-enable PDH bridge auto-connect:\n                                       discover the Android app's\n                                       device-capability MCP server via\n                                       ~/.chainlesschain/pdh-bridge/*.json\n                                       (default: auto when\n                                       CHAINLESSCHAIN_PDH_PORT is set)\n  --no-pdh                             Disable PDH bridge auto-connect\n  --jetbrains                          Force-enable IntelliJ IDEA built-in MCP\n                                       (IDEA >= 2025.2) as server `idea`\n                                       (default: auto when the ChainlessChain\n                                       JetBrains plugin injects\n                                       CHAINLESSCHAIN_JETBRAINS_MCP_URL)\n  --no-jetbrains                       Disable IDEA built-in MCP auto-connect\n  --interactive-approvals              Stream mode: confirm-tier approvals\n                                       become approval_request/approval\n                                       stdin-stdout events instead of failing\n                                       closed (chat-panel UX)\n  --permission-prompt-tool <tool>      Defer tool approvals to an MCP tool\n                                       (mcp__<server>__<tool>; requires\n                                       --mcp-config) instead of headless\n                                       fail-closed\n  --remote-control                     Route confirm-tier approvals to paired\n                                       mobile/web devices — requires a relay or\n                                       explicit LAN opt-in; headless waits\n                                       fail-closed, interactive races the\n                                       terminal prompt (also /remote-control)\n  --remote-control-allow-lan           Permit --remote-control to expose its\n                                       authenticated WS endpoint on a trusted\n                                       LAN\n  --channels <list>                    Inbound channels for the interactive\n                                       session (webhook[:port],telegram) —\n                                       external events enter as user turns;\n                                       webhook needs its bearer token, telegram\n                                       needs channels.telegram.allowFrom\n  --settings <file>                    Merge an extra\n                                       .claude/settings.json-shaped file for\n                                       this run: permission rules\n                                       (allow/ask/deny) + native config\n                                       overrides (model, env)\n  --max-budget-usd <amount>            Hard USD spend cap: stop the run before\n                                       the next paid LLM call once the\n                                       estimated cost reaches this (headless;\n                                       uses the cc cost price table)\n  --session-budget                     Enable the durable session-wide budget\n                                       authority (headless; requires\n                                       --session/--resume/--continue)\n  --session-max-concurrent <n>         Durable session cap for concurrent child\n                                       work\n  --session-max-spawns <n>             Durable session cap for total child-work\n                                       admissions\n  --session-max-depth <n>              Durable session cap for child-agent\n                                       nesting depth\n  --session-max-turns <n>              Durable session cap for model turns\n                                       across resumes\n  --session-max-tokens <n>             Durable session cap for\n                                       provider-reported tokens across resumes\n  --session-max-cost-usd <amount>      Durable session cost cap across resumes\n                                       (requires priced provider usage)\n  --session-max-wall-ms <n>            Durable session cap for cumulative\n                                       active wall time\n  --session-max-tool-ms <n>            Durable session cap for aggregate tool\n                                       execution time\n  --observability-workspace <id>       Persist a workspace scope on new session\n                                       authority for causal reports\n  --observability-team <id>            Persist a team scope on new session\n                                       authority for causal reports\n  --observability-policy <id>          Persist a policy scope on new session\n                                       authority for causal reports\n  --strict-mcp-config                  Use ONLY --mcp-config servers; ignore\n                                       registered (cc mcp add) and IDE-bridge\n                                       MCP for a reproducible tool surface\n  --project-mcp                        Opt in to loading a project-scoped\n                                       .mcp.json (default off; a checked-in\n                                       .mcp.json can spawn commands)\n  --replay-user-messages               Stream-input mode: echo each accepted\n                                       stdin user message back as a `user`\n                                       event (transcript/correlation)\n  --allow-dangerous-bypass             Bypass all permission prompts in\n                                       headless mode (DANGEROUS: auto-approves\n                                       all tool calls) (default: false)\n  -y, --yolo                           Alias for --allow-dangerous-bypass\n                                       (default: false)\n  --dangerously-skip-permissions       Alias for --allow-dangerous-bypass\n                                       (default: false)\n  -h, --help                           display help for command\n",
+    "agent": "Usage: chainlesschain agent|a [options] [task...]\n\nStart an agentic AI session (reads/writes files, runs commands)\n\nArguments:\n  task                                 Headless task 鈥?when given (or with -p /\n                                       piped stdin), runs non-interactively\n\nOptions:\n  --model <model>                      Model name\n  --provider <provider>                LLM provider (ollama, openai,\n                                       volcengine, deepseek, ...)\n  --base-url <url>                     API base URL\n  --api-key <key>                      API key\n  --think [level]                      Enable Anthropic extended thinking\n                                       (level: think | hard | ultra; Anthropic\n                                       models only)\n  --ultrathink                         Maximum Anthropic extended thinking (=\n                                       --think ultra)\n  --thinking-budget <n>                Thinking token budget for legacy Claude\n                                       models (Sonnet 4.5 / Opus 4.0-4.5 /\n                                       older); clamped below max_tokens.\n                                       Adaptive-thinking models ignore it (they\n                                       use --think's effort). Requires\n                                       --think/--ultrathink.\n  --image <path>                       Attach an image (png/jpg/jpeg/gif/webp)\n                                       to the prompt for a vision-capable model\n                                       (headless; repeatable)\n  --vision-model <id>                  Model to use when an image is attached\n                                       (default: config llm.visionModel or\n                                       doubao-seed-2-0-lite-260215)\n  --session <id>                       Resume a previous agent session\n  -c, --continue                       Resume the most recent session (no id\n                                       needed 鈥?claude --continue parity)\n  --resume [id]                        Resume a session by id (no id 鈫?most\n                                       recent 鈥?claude --resume parity)\n  --fork-session                       When resuming, branch into a NEW session\n                                       id and leave the original untouched\n                                       (claude --fork-session parity)\n  --fork-request-id <key>              Stable idempotency key for\n                                       --fork-session retries (omit for a new\n                                       fork each invocation)\n  --add-dir <dir>                      Extra working directory the agent may\n                                       read/search/edit (repeatable)\n  --checkpoint                         Auto-snapshot the work tree before each\n                                       mutating tool (DEFAULT inside a git\n                                       repo; cc checkpoint restore to roll\n                                       back)\n  --no-checkpoint                      Disable auto-checkpointing (it is on by\n                                       default inside git repos)\n  --managed-checkpoint                 Checkpoint bounded mutating tools with\n                                       Process Broker; unavailable writer\n                                       lifetimes are reported as coverage none\n  --managed-checkpoint-state <dir>     Durable managed-checkpoint state\n                                       directory (must be outside the\n                                       workspace)\n  --managed-checkpoint-exclude <path>  Explicit workspace path excluded from\n                                       managed checkpoints; repeatable and\n                                       reported as partial coverage\n  --safe-mode                          Run bare: disable project memory,\n                                       settings hooks, memory recall, IDE\n                                       context, status line and update notice\n                                       (permission rules STAY active)\n  --bare                               Everything --safe-mode disables PLUS\n                                       skills, plugins and MCP/IDE auto-connect\n                                       — minimal fast surface for scripted\n                                       calls (explicit --mcp-config still\n                                       loads; permission rules STAY active)\n  --ephemeral                          No session persistence: nothing is\n                                       written to the session store (headless;\n                                       a --resume id still replays history\n                                       read-only)\n  --decision-mode <mode>               Typed Skill-routing experiment for\n                                       durable headless sessions: off | shadow\n                                       | suggest (default: \"off\")\n  --decision-provider <provider>       Decision provider: typesafe | laya\n                                       (local) | system-one (compatible API)\n                                       (default: \"typesafe\")\n  --decision-model <model>             Decision model (defaults:\n                                       typesafe=jev-latest, laya=laya; required\n                                       for system-one)\n  --decision-base-url <url>            System One API base URL (laya: loopback\n                                       only; other providers: HTTPS or\n                                       loopback)\n  --decision-timeout-ms <ms>           Decision timeout in milliseconds\n                                       (50-30000; default: 800)\n  --capabilities                       Print a machine-readable capability\n                                       manifest (JSON: protocol version, tools,\n                                       permission modes, exit codes) and exit\n  --disable-slash-commands             Interactive REPL: don't dispatch '/'\n                                       input as slash commands — it reaches the\n                                       model verbatim (/exit and /quit stay\n                                       live)\n  --ax-screen-reader                   Screen-reader friendly output: no ANSI\n                                       colors, no in-place status line repaints\n                                       (also CC_SCREEN_READER=1)\n  --worktree                           Run this session in a fresh git worktree\n                                       (isolated branch; auto-removed when the\n                                       session changes nothing)\n  --no-worktree                        Background Git task: explicitly share\n                                       the current work tree (intended for\n                                       read-only tasks; writable runs are not\n                                       isolated)\n  --unattended                         Enable fail-closed shell action policy\n                                       for scheduled/event-driven runs\n  --unattended-allow <classes>         Comma-separated action classes\n                                       explicitly allowed for unattended shell\n                                       runs\n  --sandbox [image]                    Run shell commands in an ephemeral\n                                       Docker sandbox (network disabled by\n                                       default)\n  --sandbox-mode <mode>                Sandbox posture: off | workspace-write |\n                                       strict (explicit isolation modes fail\n                                       closed)\n  --sandbox-network                    Allow network access inside --sandbox\n  --otlp <file>                        Write the agent run's OpenTelemetry\n                                       spans (model/tool/retry) as OTLP/JSON to\n                                       <file>\n  --otlp-content                       Include prompt/response CONTENT in\n                                       --otlp spans (off by default; content is\n                                       redacted unless this is set)\n  --auto-rewake                        When an async `asyncRewake` hook (e.g. a\n                                       background test) fails at turn end,\n                                       re-engage the agent to fix it (bounded\n                                       by --max-rewakes)\n  --auto-pin                           Force-pin the original task (first user\n                                       turn) through compaction (ON by default;\n                                       disable with CC_AUTO_PIN=0 or config\n                                       context.autoPin=false)\n  --max-rewakes <n>                    Max auto-rewake re-drives per run\n                                       (default 1); implies --auto-rewake\n  --bg, --background                   Start as a detached background agent and\n                                       return its id immediately\n  --agent-id <id>                      Agent id for scoped memory recall\n  --recall-limit <n>                   Top-K memories to inject into system\n                                       prompt\n  --recall-query <q>                   Query string for startup memory recall\n  --no-recall-memory                   Disable startup memory recall\n  --vim                                Start the interactive REPL in vim-mode\n                                       line editing (toggle later with /vim; or\n                                       CC_VIM=1)\n  --no-stream                          Disable streamed response rendering\n  --no-park-on-exit                    Close the session-core handle on exit\n                                       instead of parking it\n  --bundle <path>                      Agent bundle directory (may execute\n                                       local MCP commands from mcp.json)\n  -p, --print [prompt]                 Headless: run one non-interactive turn\n                                       and exit\n  --output-format <fmt>                Headless output: text | json |\n                                       stream-json (default: \"text\")\n  --max-turns <n>                      Cap agent loop iterations (0 =\n                                       unlimited; interactive streams default\n                                       to unlimited, unattended runs to 50)\n  --json-schema <file>                 Headless structured output: final reply\n                                       must be JSON validating against this\n                                       schema (invalid replies retried)\n  --allowed-tools <list>               Comma/space-separated tool allow-list\n                                       (headless)\n  --disallowed-tools <list>            Comma/space-separated tool deny-list\n                                       (headless)\n  --permission-mode <mode>             manual | auto | dontAsk | default | plan\n                                       | acceptEdits | bypassPermissions (plan\n                                       headless-only)\n  --no-file-refs                       Disable @path file-reference expansion\n                                       in the prompt (headless)\n  --no-slash-macros                    Disable /name custom-command\n                                       (.claude/commands) expansion in the\n                                       prompt (headless)\n  --system-prompt <text>               Replace the built-in system prompt\n                                       (literal text or @file)\n  --append-system-prompt <text>        Append extra guidance to the system\n                                       prompt (literal text or @file)\n  --no-project-memory                  Skip auto-loaded project memory (cc.md /\n                                       CLAUDE.md / AGENTS.md hierarchy,\n                                       .chainlesschain/rules.md,\n                                       .claude/rules/*.md) — a lean system\n                                       prompt for token-tight surfaces (e.g.\n                                       IDE chat). The agent can still read\n                                       those files with tools when it needs\n                                       them.\n  --output-style <name>                Apply a named output-style persona\n                                       (.claude/output-styles/<name>.md or a\n                                       built-in: concise | explanatory |\n                                       learning)\n  --input-format <fmt>                 Headless input: text | stream-json\n                                       (NDJSON user events on stdin,\n                                       multi-turn) (default: \"text\")\n  --trace-id <id>                      Correlation id stamped as `trace_id` on\n                                       every stream-json output line (also read\n                                       from CC_TRACE_ID). Lets an IDE/bridge\n                                       trace one run across its own logs, the\n                                       CLI, transcripts and diagnostics.\n                                       Auto-generated per run when omitted.\n  --fallback-model <model>             Backup model(s) to try in order when the\n                                       primary fails (transient error or\n                                       model-not-found). Repeatable or\n                                       comma-separated; up to 3. A\n                                       `provider:model` entry (e.g.\n                                       openai:gpt-4o) falls back\n                                       cross-provider, using that provider's\n                                       API key from its env var (skipped if\n                                       unset — never reuses the primary key).\n                                       Defaults to config llm.fallbackModels.\n  --include-partial-messages           Emit live assistant-text deltas as\n                                       stream_event lines (requires\n                                       --output-format stream-json)\n  --include-hook-events                Emit redacted hook and subagent\n                                       lifecycle events (requires\n                                       --output-format stream-json)\n  --goal [id]                          Bind a cc goal into the run (id, or omit\n                                       the value to auto-resolve the active\n                                       goal)\n  --goal-assess                        After the run, ask the model to assess\n                                       goal progress and persist it (opt-in;\n                                       costs one extra completion; requires\n                                       --goal)\n  --goal-condition <spec>              Session completion condition; re-drives\n                                       outer turns until met. Prefix\n                                       exit-zero:/file-exists:/contains:/regex:\n                                       (deterministic) or model:<desc>\n                                       (model-judged)\n  --max-outer-turns <n>                Max outer re-drive turns for\n                                       --goal-condition (default 10, hard cap\n                                       100)\n  --goal-max-tokens <n>                Token budget across --goal-condition\n                                       outer turns\n  --goal-max-cost <usd>                Cost budget (USD) across\n                                       --goal-condition outer turns\n  --goal-max-time <ms>                 Wall-clock budget (ms) across\n                                       --goal-condition outer turns\n  --mcp-config <file>                  Load ad-hoc MCP servers from a JSON file\n                                       for this run (headless); their tools\n                                       become callable (mcp__<server>__<tool>)\n  --no-mcp                             Don't auto-connect MCP servers\n                                       registered with `cc mcp add\n                                       --auto-connect` (--mcp-config still\n                                       loads)\n  --ide                                Force-enable IDE bridge auto-connect:\n                                       discover a running editor's MCP server\n                                       via ~/.chainlesschain/ide/*.json\n                                       (default: auto inside an IDE integrated\n                                       terminal)\n  --no-ide                             Disable IDE bridge auto-connect\n  --pdh                                Force-enable PDH bridge auto-connect:\n                                       discover the Android app's\n                                       device-capability MCP server via\n                                       ~/.chainlesschain/pdh-bridge/*.json\n                                       (default: auto when\n                                       CHAINLESSCHAIN_PDH_PORT is set)\n  --no-pdh                             Disable PDH bridge auto-connect\n  --jetbrains                          Force-enable IntelliJ IDEA built-in MCP\n                                       (IDEA >= 2025.2) as server `idea`\n                                       (default: auto when the ChainlessChain\n                                       JetBrains plugin injects\n                                       CHAINLESSCHAIN_JETBRAINS_MCP_URL)\n  --no-jetbrains                       Disable IDEA built-in MCP auto-connect\n  --interactive-approvals              Stream mode: confirm-tier approvals\n                                       become approval_request/approval\n                                       stdin-stdout events instead of failing\n                                       closed (chat-panel UX)\n  --permission-prompt-tool <tool>      Defer tool approvals to an MCP tool\n                                       (mcp__<server>__<tool>; requires\n                                       --mcp-config) instead of headless\n                                       fail-closed\n  --remote-control                     Route confirm-tier approvals to paired\n                                       mobile/web devices — requires a relay or\n                                       explicit LAN opt-in; headless waits\n                                       fail-closed, interactive races the\n                                       terminal prompt (also /remote-control)\n  --remote-control-allow-lan           Permit --remote-control to expose its\n                                       authenticated WS endpoint on a trusted\n                                       LAN\n  --channels <list>                    Inbound channels for the interactive\n                                       session (webhook[:port],telegram) —\n                                       external events enter as user turns;\n                                       webhook needs its bearer token, telegram\n                                       needs channels.telegram.allowFrom\n  --settings <file>                    Merge an extra\n                                       .claude/settings.json-shaped file for\n                                       this run: permission rules\n                                       (allow/ask/deny) + native config\n                                       overrides (model, env)\n  --max-budget-usd <amount>            Hard USD spend cap: stop the run before\n                                       the next paid LLM call once the\n                                       estimated cost reaches this (headless;\n                                       uses the cc cost price table)\n  --session-budget                     Enable the durable session-wide budget\n                                       authority (headless; requires\n                                       --session/--resume/--continue)\n  --session-max-concurrent <n>         Durable session cap for concurrent child\n                                       work\n  --session-max-spawns <n>             Durable session cap for total child-work\n                                       admissions\n  --session-max-depth <n>              Durable session cap for child-agent\n                                       nesting depth\n  --session-max-turns <n>              Durable session cap for model turns\n                                       across resumes\n  --session-max-tokens <n>             Durable session cap for\n                                       provider-reported tokens across resumes\n  --session-max-cost-usd <amount>      Durable session cost cap across resumes\n                                       (requires priced provider usage)\n  --session-max-wall-ms <n>            Durable session cap for cumulative\n                                       active wall time\n  --session-max-tool-ms <n>            Durable session cap for aggregate tool\n                                       execution time\n  --observability-workspace <id>       Persist a workspace scope on new session\n                                       authority for causal reports\n  --observability-team <id>            Persist a team scope on new session\n                                       authority for causal reports\n  --observability-policy <id>          Persist a policy scope on new session\n                                       authority for causal reports\n  --strict-mcp-config                  Use ONLY --mcp-config servers; ignore\n                                       registered (cc mcp add) and IDE-bridge\n                                       MCP for a reproducible tool surface\n  --project-mcp                        Opt in to loading a project-scoped\n                                       .mcp.json (default off; a checked-in\n                                       .mcp.json can spawn commands)\n  --replay-user-messages               Stream-input mode: echo each accepted\n                                       stdin user message back as a `user`\n                                       event (transcript/correlation)\n  --allow-dangerous-bypass             Bypass all permission prompts in\n                                       headless mode (DANGEROUS: auto-approves\n                                       all tool calls) (default: false)\n  -y, --yolo                           Alias for --allow-dangerous-bypass\n                                       (default: false)\n  --dangerously-skip-permissions       Alias for --allow-dangerous-bypass\n                                       (default: false)\n  -h, --help                           display help for command\n",
     "agent-network": "Usage: chainlesschain agent-network|anet [options] [command]\n\nDecentralized Agent Network (Phase 24) — DID / registry / credentials / task\nrouting\n\nOptions:\n  -h, --help                                           display help for command\n\nCommands:\n  config [options]                                     Show network constants & reputation weights\n  dimensions [options]                                 List reputation dimensions\n  task-statuses [options]                              List task lifecycle statuses\n  did-create [options]                                 Create an Agent DID (Ed25519 + DID document)\n  did-resolve [options] <did>                          Resolve DID → DID document\n  dids [options]                                       List Agent DIDs\n  did-deactivate [options] <did>                       Deactivate a DID (also forces registry offline)\n  sign [options] <did> <data>                          Sign data with agent's Ed25519 key\n  verify [options] <did> <data> <signature>            Verify a signature from an agent\n  register [options] <did> <orgId>                     Register an Agent in the federated registry\n  unregister [options] <did>                           Remove an Agent from the registry\n  heartbeat [options] <did>                            Bump last_heartbeat (forces online)\n  discover [options]                                   Discover agents (capability / org / status)\n  sweep [options]                                      Mark stale online agents offline\n  peer-add [options] <peerId>                          Add/update a Kademlia peer (k-bucket auto-computed)\n  peer-remove [options] <peerId>                       Remove a peer\n  peers [options]                                      List peers (optionally by k-bucket)\n  auth-start [options] <did>                           Issue an auth challenge for a DID\n  auth-complete [options] <sessionId> <signature>      Complete auth with signature over challenge\n  auth-validate [options] <token>                      Validate a session token (returns agentDid or exits 1)\n  auth-sessions [options]                              List auth sessions\n  credential-issue [options] <issuerDid> <subjectDid>  Issue a VC with HMAC/Ed25519 proof\n  credential-verify [options] <id>                     Verify a VC (signature + expiry + revocation)\n  credential-revoke [options] <id>                     Revoke a credential\n  credential-show [options] <id>                       Show a credential\n  credentials [options]                                List credentials (filter by subject/issuer/status/type)\n  task-route [options] <sourceOrg> <taskType>          Route task → pick best-rep agent matching capability\n  task-show [options] <taskId>                         Show a task\n  task-status [options] <taskId> <status>              Update task status (terminal states set completedAt)\n  task-cancel [options] <taskId>                       Cancel a task (sets CANCELLED + reason)\n  tasks [options]                                      List tasks\n  rep-update [options] <did> <dimension> <score>       Record a reputation observation\n  rep-show [options] <did>                             Show reputation summary (weighted total + per-dim avg)\n  rep-history [options] <did>                          Show reputation history (newest first)\n  rep-top [options]                                    Top agents by dimension (or total)\n  stats [options]                                      Network-level statistics\n  agent-maturities-v2                                  List V2 agent maturity states\n  task-lifecycles-v2                                   List V2 task lifecycle states\n  stats-v2                                             V2 agent-network stats\n  get-max-active-agents-v2                             Get max active agents per network (V2)\n  set-max-active-agents-v2 <n>                         Set max active agents per network (V2)\n  get-max-pending-tasks-v2                             Get max pending tasks per agent (V2)\n  set-max-pending-tasks-v2 <n>                         Set max pending tasks per agent (V2)\n  get-agent-idle-ms-v2                                 Get agent idle threshold (V2)\n  set-agent-idle-ms-v2 <ms>                            Set agent idle threshold (V2)\n  get-task-stuck-ms-v2                                 Get task stuck threshold (V2)\n  set-task-stuck-ms-v2 <ms>                            Set task stuck threshold (V2)\n  active-agent-count-v2 <networkId>                    Active agent count for network (V2)\n  pending-task-count-v2 <agentId>                      Pending task count for agent (V2)\n  register-agent-v2 [options] <id>                     Register a V2 agent\n  get-agent-v2 <id>                                    Get a V2 agent\n  list-agents-v2 [options]                             List V2 agents\n  set-agent-status-v2 <id> <next>                      Set V2 agent status\n  activate-agent-v2 <id>                               Activate a V2 agent\n  suspend-agent-v2 <id>                                Suspend a V2 agent\n  revoke-agent-v2 <id>                                 Revoke a V2 agent\n  touch-agent-v2 <id>                                  Touch a V2 agent\n  create-task-v2 [options] <id>                        Create a V2 task\n  get-task-v2 <id>                                     Get a V2 task\n  list-tasks-v2 [options]                              List V2 tasks\n  set-task-status-v2 <id> <next>                       Set V2 task status\n  start-task-v2 <id>                                   Start a V2 task\n  complete-task-v2 <id>                                Complete a V2 task\n  fail-task-v2 <id>                                    Fail a V2 task\n  cancel-task-v2 <id>                                  Cancel a V2 task\n  auto-suspend-idle-agents-v2                          Auto-suspend idle V2 agents\n  auto-fail-stuck-tasks-v2                             Auto-fail stuck V2 tasks\n  help [command]                                       display help for command\n",
     "agents": "Usage: chainlesschain agents [options] [command]\n\nUser-defined subagents (.claude/agents/*.md)\n\nOptions:\n  -h, --help                        display help for command\n\nCommands:\n  background|bg [options]           List background agent sessions\n  logs [options] <id>               Print recent output from a background agent\n  view [options] <id>               Show a detailed background agent view\n  stop [options] <id>               Stop a running background agent\n  rename [options] <id> <title...>  Rename a background agent session\n  list|ls [options]                 List discovered subagents (project +\n                                    personal)\n  show [options] <name>             Show an agent's metadata + system prompt\n  run [options] <name> [task...]    Run a task headlessly as the named subagent\n  new [options] <name>              Scaffold a new agent file (project-native\n                                    .chainlesschain/agents/)\n  help [command]                    display help for command\n",
     "android": "Usage: chainlesschain android [options] [command]\n\nAndroid-native bridge: ContentResolver / SAF / Accessibility / Shizuku / root\n(Plan A A7)\n\nOptions:\n  -h, --help              display help for command\n\nCommands:\n  caps [options]          Probe what bridge capabilities are available on this\n                          device\n  contacts                ContentResolver: contacts\n  sms                     ContentResolver: SMS\n  calls                   ContentResolver: call log\n  app                     PackageManager: app inventory + Intent\n  fs                      SAF / sandbox filesystem\n  a11y                    Accessibility Service\n  shizuku                 Shizuku ADB-like privileges\n  root                    Magisk root su\n  perms [options] <name>  Check (and request) a runtime permission\n  help [command]          display help for command\n",

package/src/commands/agent.js

@@ -382,6 +382,28 @@ export function registerAgentCommand(program, dependencies = {}) {
       "--ephemeral",
       "No session persistence: nothing is written to the session store (headless; a --resume id still replays history read-only)",
     )
+    .option(
+      "--decision-mode <mode>",
+      "Typed Skill-routing experiment for durable headless sessions: off | shadow | suggest",
+      "off",
+    )
+    .option(
+      "--decision-provider <provider>",
+      "Decision provider: typesafe | laya (local) | system-one (compatible API)",
+      "typesafe",
+    )
+    .option(
+      "--decision-model <model>",
+      "Decision model (defaults: typesafe=jev-latest, laya=laya; required for system-one)",
+    )
+    .option(
+      "--decision-base-url <url>",
+      "System One API base URL (laya: loopback only; other providers: HTTPS or loopback)",
+    )
+    .option(
+      "--decision-timeout-ms <ms>",
+      "Decision timeout in milliseconds (50-30000; default: 800)",
+    )
     .option(
       "--capabilities",
       "Print a machine-readable capability manifest (JSON: protocol version, tools, permission modes, exit codes) and exit",
@@ -1498,6 +1520,59 @@ export function registerAgentCommand(program, dependencies = {}) {
         await _finishWorktree();
         process.exit(1);
       }
+      let decisionConfig;
+      try {
+        if (
+          (options.decisionMode || "off") === "off" &&
+          (options.decisionProvider || "typesafe") === "typesafe" &&
+          options.decisionModel === undefined &&
+          options.decisionBaseUrl === undefined &&
+          options.decisionTimeoutMs === undefined
+        ) {
+          decisionConfig = Object.freeze({ mode: "off" });
+        } else {
+          const { resolveHeadlessSkillDecisionOptions } =
+            await import("../runtime/headless-runner.js");
+          decisionConfig = resolveHeadlessSkillDecisionOptions(options);
+        }
+      } catch (error) {
+        process.stderr.write(`${error.message}\n`);
+        await _finishWorktree();
+        process.exit(1);
+      }
+      const decisionMode = decisionConfig.mode;
+      if (
+        decisionMode !== "off" &&
+        (!options.session || options.ephemeral === true)
+      ) {
+        process.stderr.write(
+          "--decision-mode shadow/suggest requires --session/--resume/--continue and cannot be combined with --ephemeral.\n",
+        );
+        await _finishWorktree();
+        process.exit(1);
+      }
+      let decisionApiKey;
+      if (decisionMode !== "off") {
+        try {
+          const credentialName =
+            decisionConfig.provider === "typesafe"
+              ? "TYPESAFE_API_KEY"
+              : "DECISION_API_KEY";
+          decisionApiKey =
+            (await resolveCredentialEnvironmentValue(credentialName, {
+              env: process.env,
+            })) || undefined;
+          if (decisionConfig.provider === "typesafe" && !decisionApiKey) {
+            throw new Error(
+              "TYPESAFE_API_KEY is required when --decision-mode is shadow or suggest",
+            );
+          }
+        } catch (error) {
+          process.stderr.write(`${error.message}\n`);
+          await _finishWorktree();
+          process.exit(1);
+        }
+      }
       if (maxCostUsd || sessionBudgetRoot.limits.maxUsd != null) {
         const { mergePricing } = await import("../lib/llm-pricing.js");
         priceTable = mergePricing(loadConfig().llm?.pricing);
@@ -1511,6 +1586,14 @@ export function registerAgentCommand(program, dependencies = {}) {
       // stdin; output is always NDJSON. Routed before single-prompt handling
       // so stdin is consumed as events, not as one prompt.
       if (options.inputFormat === "stream-json") {
+        if (decisionMode !== "off") {
+          process.stderr.write(
+            "--decision-mode shadow/suggest currently supports single-prompt headless runs only; --input-format stream-json is not yet supported.\n",
+          );
+          await _finishWorktree();
+          process.exit(1);
+          return;
+        }
         const { runAgentHeadlessStream } =
           await import("../runtime/headless-stream.js");
         const { parseToolList, validateHeadlessInvocationOptions } =
@@ -1943,6 +2026,12 @@ export function registerAgentCommand(program, dependencies = {}) {
           maxCostUsd,
           priceTable,
           sessionBudgetRoot,
+          decisionMode,
+          decisionProvider: options.decisionProvider,
+          decisionModel: options.decisionModel,
+          decisionBaseUrl: options.decisionBaseUrl,
+          decisionTimeoutMs: options.decisionTimeoutMs,
+          decisionApiKey,
           observabilityScope: hasObservabilityScope
             ? observabilityScope
             : undefined,
@@ -2039,6 +2128,14 @@ export function registerAgentCommand(program, dependencies = {}) {
           "--ephemeral is only used in headless mode (-p / a task / piped stdin); ignoring for the interactive session.\n",
         );
       }
+      if (decisionMode !== "off") {
+        process.stderr.write(
+          "--decision-mode shadow/suggest is only used in single-prompt headless mode (-p / a task / piped stdin).\n",
+        );
+        await _finishWorktree();
+        process.exitCode = 1;
+        return;
+      }
       // Reached only for an interactive session, where --image has no turn to
       // attach to 鈥?warn instead of silently dropping the attachment.
       if (images.length) {

package/src/data/changelog.json

@@ -1,6 +1,32 @@
 {
   "source": "CHANGELOG.md",
   "releases": [
+    {
+      "productVersion": null,
+      "cliVersion": "0.166.71",
+      "cliVersions": ["0.166.71"],
+      "date": null,
+      "title": "",
+      "sections": [
+        {
+          "heading": "Added - cc CLI 0.166.71: open local Skill decision providers",
+          "body": "- Add `--decision-provider` selection for the existing governed Skill decision\n  layer, with `typesafe`, loopback-only `laya`, and compatible `system-one`\n  providers.\n- Run Apache-2.0 Laya models behind a local `/v1/systemone` service without a\n  TypeSafe credential, while preserving the durable-session, candidate-binding,\n  budget, timeout, and observation boundaries introduced by the Jev pilot.\n- Keep TypeSafe and local-service credentials isolated: TypeSafe continues to\n  require `TYPESAFE_API_KEY`; authenticated Laya and compatible services may use\n  `DECISION_API_KEY` and never inherit the TypeSafe secret.\n- Reject redirects, URL credentials, remote plaintext endpoints, and non-loopback\n  Laya endpoints. Invalid or unavailable local decisions leave the existing\n  Skill retrieval result unchanged.\n- Document a pinned real-backend `laya-serve` setup and the limits of model\n  labels, multilingual routing, context windows, and upstream benchmark claims."
+        }
+      ]
+    },
+    {
+      "productVersion": null,
+      "cliVersion": "0.166.70",
+      "cliVersions": ["0.166.70"],
+      "date": null,
+      "title": "",
+      "sections": [
+        {
+          "heading": "Added - cc CLI 0.166.70: governed Jev Skill decision shadow pilot",
+          "body": "- Add an optional typed decision layer for `list_skills(query)` after the\n  existing allow-list, compatibility, revocation, and retrieval checks.\n- Support `off`, `shadow`, and `suggest` modes for durable single-prompt\n  headless Agent sessions. The default remains `off`; `shadow` records a\n  comparison without changing Agent-visible routing, while `suggest` only\n  adds a bounded recommendation and never executes a Skill.\n- Bind TypeSafe `/v1/systemone` requests and responses to the exact candidate\n  set, policy, session, and context revision; validate typed probabilities,\n  model identity, deadlines, and usage before accepting an observation.\n- Read the decision credential only from `TYPESAFE_API_KEY` or the managed\n  credential transport, require HTTPS or loopback endpoints, and settle each\n  request through the durable session budget and model-usage ledger.\n- Include an asynchronous benchmark for suggestion quality, no-match behavior,\n  latency, availability, and estimated cost. No real Jev quality or cost claim\n  is made until shadow evidence reaches the documented promotion gates."
+        }
+      ]
+    },
     {
       "productVersion": null,
       "cliVersion": "0.166.69",

package/src/lib/decision-layer/benchmark.js

@@ -0,0 +1,164 @@
+import { performance } from "node:perf_hooks";
+
+import { decisionDigest } from "./contracts.js";
+
+export const SKILL_DECISION_BENCHMARK_SCHEMA =
+  "chainlesschain.skill-decision-benchmark/v1";
+
+const DIGEST = /^sha256:[a-f0-9]{64}$/u;
+
+function ratio(value, label) {
+  const number = Number(value);
+  if (!Number.isFinite(number) || number < 0 || number > 1) {
+    throw new TypeError(`${label} must be between zero and one`);
+  }
+  return number;
+}
+
+function normalizeThresholds(input) {
+  const p95Ms = Number(input?.p95Ms);
+  if (!Number.isFinite(p95Ms) || p95Ms <= 0) {
+    throw new TypeError("p95Ms must be positive");
+  }
+  return Object.freeze({
+    acceptedSuggestionErrorRate: ratio(
+      input?.acceptedSuggestionErrorRate,
+      "acceptedSuggestionErrorRate",
+    ),
+    noMatchFalseSuggestionRate: ratio(
+      input?.noMatchFalseSuggestionRate,
+      "noMatchFalseSuggestionRate",
+    ),
+    affirmativeCoverage: ratio(
+      input?.affirmativeCoverage,
+      "affirmativeCoverage",
+    ),
+    p95Ms,
+  });
+}
+
+function normalizeCases(cases) {
+  if (!Array.isArray(cases) || cases.length < 1 || cases.length > 10_000) {
+    throw new TypeError("decision benchmark cases are invalid or unbounded");
+  }
+  return cases.map((item, index) => {
+    if (
+      !item ||
+      typeof item.query !== "string" ||
+      item.query.trim() === "" ||
+      !Array.isArray(item.candidates) ||
+      item.candidates.length < 1 ||
+      !Array.isArray(item.acceptableDigests) ||
+      item.acceptableDigests.some((digest) => !DIGEST.test(digest)) ||
+      new Set(item.acceptableDigests).size !== item.acceptableDigests.length
+    ) {
+      throw new TypeError(`decision benchmark case ${index} is invalid`);
+    }
+    const candidateDigests = new Set(
+      item.candidates.map(({ digest }) => digest),
+    );
+    if (
+      item.acceptableDigests.some((digest) => !candidateDigests.has(digest))
+    ) {
+      throw new TypeError(
+        `decision benchmark case ${index} has truth outside the candidates`,
+      );
+    }
+    return Object.freeze({
+      query: item.query.trim(),
+      candidates: Object.freeze(
+        item.candidates.map((candidate) => Object.freeze({ ...candidate })),
+      ),
+      acceptableDigests: Object.freeze([...item.acceptableDigests]),
+    });
+  });
+}
+
+export async function runSkillDecisionBenchmark({
+  runtime,
+  cases,
+  thresholds,
+  turnIdPrefix = "benchmark",
+  contextRevision = "benchmark-v1",
+  clock = () => performance.now(),
+} = {}) {
+  if (!runtime || typeof runtime.suggest !== "function") {
+    throw new TypeError("decision benchmark requires a runtime");
+  }
+  const normalizedCases = normalizeCases(cases);
+  const gate = normalizeThresholds(thresholds);
+  const latencies = [];
+  let accepted = 0;
+  let acceptedErrors = 0;
+  let positives = 0;
+  let affirmative = 0;
+  let noMatches = 0;
+  let noMatchFalseSuggestions = 0;
+  let abstentions = 0;
+  let unavailable = 0;
+  const rows = [];
+  for (const [index, item] of normalizedCases.entries()) {
+    const start = Number(clock());
+    const result = await runtime.suggest({
+      query: item.query,
+      candidates: item.candidates,
+      turnId: `${turnIdPrefix}-${index}`,
+      contextRevision,
+    });
+    const end = Number(clock());
+    if (!Number.isFinite(start) || !Number.isFinite(end) || end < start) {
+      throw new Error("decision benchmark clock is invalid");
+    }
+    latencies.push(end - start);
+    const isPositive = item.acceptableDigests.length > 0;
+    if (isPositive) positives += 1;
+    else noMatches += 1;
+    if (result.status === "suggestion") {
+      accepted += 1;
+      if (isPositive) affirmative += 1;
+      const correct = item.acceptableDigests.includes(result.selectedDigest);
+      if (!correct) acceptedErrors += 1;
+      if (!isPositive) noMatchFalseSuggestions += 1;
+    } else if (result.status === "abstain") abstentions += 1;
+    else if (result.status === "unavailable") unavailable += 1;
+    rows.push(
+      Object.freeze({
+        index,
+        status: result.status,
+        selectedDigest: result.selectedDigest,
+        acceptableDigests: item.acceptableDigests,
+        latencyMs: end - start,
+      }),
+    );
+  }
+  latencies.sort((left, right) => left - right);
+  const metrics = Object.freeze({
+    acceptedSuggestionErrorRate: acceptedErrors / Math.max(1, accepted),
+    noMatchFalseSuggestionRate:
+      noMatchFalseSuggestions / Math.max(1, noMatches),
+    affirmativeCoverage: affirmative / Math.max(1, positives),
+    abstentionRate: abstentions / normalizedCases.length,
+    unavailableRate: unavailable / normalizedCases.length,
+    p95Ms: latencies[Math.max(0, Math.ceil(latencies.length * 0.95) - 1)],
+  });
+  const core = {
+    schema: SKILL_DECISION_BENCHMARK_SCHEMA,
+    caseCount: normalizedCases.length,
+    caseDigest: decisionDigest(
+      "chainlesschain.skill-decision-benchmark-cases/v1",
+      normalizedCases,
+    ),
+    thresholds: gate,
+    metrics,
+    passed:
+      metrics.acceptedSuggestionErrorRate <= gate.acceptedSuggestionErrorRate &&
+      metrics.noMatchFalseSuggestionRate <= gate.noMatchFalseSuggestionRate &&
+      metrics.affirmativeCoverage >= gate.affirmativeCoverage &&
+      metrics.p95Ms <= gate.p95Ms,
+    rows: Object.freeze(rows),
+  };
+  return Object.freeze({
+    ...core,
+    reportDigest: decisionDigest(SKILL_DECISION_BENCHMARK_SCHEMA, core),
+  });
+}