chivgent 0.10.0 → 0.11.0

package/dist/extensions/decide-trust.d.ts

@@ -0,0 +1,28 @@
+import type { OutputStream } from "../render.js";
+import { TrustStore } from "./trust.js";
+export type TrustOutcome = {
+    readonly trusted: true;
+    readonly reason: "recorded" | "granted";
+} | {
+    readonly trusted: false;
+    readonly reason: "recorded" | "declined" | "no-tty" | "deferred";
+};
+export interface DecideTrustOptions {
+    readonly cwd: string;
+    readonly store: TrustStore;
+    readonly stderr: OutputStream;
+    /** Absent when there is nobody to ask, which is itself the answer: no. */
+    readonly input?: NodeJS.ReadableStream & {
+        isTTY?: boolean;
+    };
+    readonly listExtensions: () => Promise<readonly string[]>;
+}
+/**
+ * Decides whether this project's extensions may be loaded.
+ *
+ * The decision happens before anything is imported, because importing is
+ * already execution. When there is nobody to ask, the answer is no: a CI job
+ * or a piped run must never silently execute code from a checkout.
+ */
+export declare function decideTrust(options: DecideTrustOptions): Promise<TrustOutcome>;
+//# sourceMappingURL=decide-trust.d.ts.map

package/dist/extensions/decide-trust.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"decide-trust.d.ts","sourceRoot":"","sources":["../../src/extensions/decide-trust.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AACjD,OAAO,EAGL,UAAU,EAEX,MAAM,YAAY,CAAC;AAGpB,MAAM,MAAM,YAAY,GACpB;IAAE,QAAQ,CAAC,OAAO,EAAE,IAAI,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,UAAU,GAAG,SAAS,CAAA;CAAE,GACnE;IACE,QAAQ,CAAC,OAAO,EAAE,KAAK,CAAC;IACxB,QAAQ,CAAC,MAAM,EAAE,UAAU,GAAG,UAAU,GAAG,QAAQ,GAAG,UAAU,CAAC;CAClE,CAAC;AAEN,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC;IAC3B,QAAQ,CAAC,MAAM,EAAE,YAAY,CAAC;IAC9B,0EAA0E;IAC1E,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC,cAAc,GAAG;QAAE,KAAK,CAAC,EAAE,OAAO,CAAA;KAAE,CAAC;IAC7D,QAAQ,CAAC,cAAc,EAAE,MAAM,OAAO,CAAC,SAAS,MAAM,EAAE,CAAC,CAAC;CAC3D;AAqCD;;;;;;GAMG;AACH,wBAAsB,WAAW,CAC/B,OAAO,EAAE,kBAAkB,GAC1B,OAAO,CAAC,YAAY,CAAC,CAmEvB"}

package/dist/extensions/decide-trust.js

@@ -0,0 +1,96 @@
+import { createInterface } from "node:readline";
+import path from "node:path";
+import { canonicalDirectory, hasProjectExtensions, TrustStore, } from "./trust.js";
+import { projectExtensionsDirectory } from "./discover.js";
+function describeConsequences(cwd, files) {
+    const listed = files.map((file) => `  ${path.relative(cwd, file)}`).join("\n");
+    return [
+        "This project ships chivgent extensions:",
+        listed,
+        "",
+        "Extensions run as code inside chivgent, with your permissions. They are not",
+        "limited by the workspace boundary and do not need --allow-shell to run",
+        "commands or read your environment. Trusting this project means letting its",
+        "authors run code as you.",
+        "",
+    ].join("\n");
+}
+async function ask(input, output, question) {
+    const readline = createInterface({
+        input,
+        output: output,
+        terminal: false,
+    });
+    try {
+        return await new Promise((resolve) => {
+            output.write(question);
+            readline.once("line", (line) => resolve(line.trim().toLowerCase()));
+            readline.once("close", () => resolve(""));
+        });
+    }
+    finally {
+        readline.close();
+    }
+}
+/**
+ * Decides whether this project's extensions may be loaded.
+ *
+ * The decision happens before anything is imported, because importing is
+ * already execution. When there is nobody to ask, the answer is no: a CI job
+ * or a piped run must never silently execute code from a checkout.
+ */
+export async function decideTrust(options) {
+    if (!hasProjectExtensions(options.cwd)) {
+        // Nothing to gate: do not bother the user at all.
+        return { trusted: false, reason: "recorded" };
+    }
+    const existing = await options.store.lookup(options.cwd);
+    if (existing !== undefined) {
+        return existing.decision
+            ? { trusted: true, reason: "recorded" }
+            : { trusted: false, reason: "recorded" };
+    }
+    const input = options.input;
+    if (input === undefined || input.isTTY !== true) {
+        options.stderr.write(`Skipping project extensions in ${projectExtensionsDirectory(options.cwd)}: ` +
+            "no decision recorded and no terminal to ask. Run chivgent here interactively once, " +
+            "or use --no-extensions to silence this.\n");
+        return { trusted: false, reason: "no-tty" };
+    }
+    const files = await options.listExtensions();
+    options.stderr.write(describeConsequences(options.cwd, files));
+    const parent = path.dirname(await canonicalDirectory(options.cwd));
+    const answer = await ask(input, options.stderr, `  [t] trust this project   [p] trust ${parent}   [n] never   [o] not now: `);
+    const record = async (directory, decision) => {
+        try {
+            await options.store.set(directory, decision);
+        }
+        catch (error) {
+            const message = error instanceof Error ? error.message : String(error);
+            options.stderr.write(`Could not record the trust decision: ${message}\n`);
+        }
+    };
+    switch (answer) {
+        case "t":
+        case "trust":
+        case "y":
+        case "yes":
+            await record(options.cwd, true);
+            return { trusted: true, reason: "granted" };
+        case "p":
+        case "parent":
+            await record(parent, true);
+            return { trusted: true, reason: "granted" };
+        case "n":
+        case "never":
+        case "no":
+            await record(options.cwd, false);
+            return { trusted: false, reason: "declined" };
+        default:
+            // "not now" and anything unrecognised both mean: do not run it, and ask
+            // again next time rather than recording a decision the user did not make.
+            options.stderr.write("Not loading project extensions this time.\n");
+            return { trusted: false, reason: "deferred" };
+    }
+}
+//# sourceMappingURL=decide-trust.js.map

package/dist/extensions/decide-trust.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"decide-trust.js","sourceRoot":"","sources":["../../src/extensions/decide-trust.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAChD,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EACL,kBAAkB,EAClB,oBAAoB,EACpB,UAAU,GAEX,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,0BAA0B,EAAE,MAAM,eAAe,CAAC;AAkB3D,SAAS,oBAAoB,CAAC,GAAW,EAAE,KAAwB;IACjE,MAAM,MAAM,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,KAAK,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC/E,OAAO;QACL,yCAAyC;QACzC,MAAM;QACN,EAAE;QACF,6EAA6E;QAC7E,wEAAwE;QACxE,4EAA4E;QAC5E,0BAA0B;QAC1B,EAAE;KACH,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAED,KAAK,UAAU,GAAG,CAChB,KAA4B,EAC5B,MAAoB,EACpB,QAAgB;IAEhB,MAAM,QAAQ,GAAG,eAAe,CAAC;QAC/B,KAAK;QACL,MAAM,EAAE,MAA+B;QACvC,QAAQ,EAAE,KAAK;KAChB,CAAC,CAAC;IACH,IAAI,CAAC;QACH,OAAO,MAAM,IAAI,OAAO,CAAS,CAAC,OAAO,EAAE,EAAE;YAC3C,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;YACvB,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;YACpE,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC;QAC5C,CAAC,CAAC,CAAC;IACL,CAAC;YAAS,CAAC;QACT,QAAQ,CAAC,KAAK,EAAE,CAAC;IACnB,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,OAA2B;IAE3B,IAAI,CAAC,oBAAoB,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QACvC,kDAAkD;QAClD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;IAChD,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACzD,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC3B,OAAO,QAAQ,CAAC,QAAQ;YACtB,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE;YACvC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;IAC7C,CAAC;IAED,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;IAC5B,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,KAAK,KAAK,IAAI,EAAE,CAAC;QAChD,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,kCAAkC,0BAA0B,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI;YAC3E,qFAAqF;YACrF,2CAA2C,CAC9C,CAAC;QACF,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;IAC9C,CAAC;IAED,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,cAAc,EAAE,CAAC;IAC7C,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,oBAAoB,CAAC,OAAO,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC;IAE/D,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,kBAAkB,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;IACnE,MAAM,MAAM,GAAG,MAAM,GAAG,CACtB,KAAK,EACL,OAAO,CAAC,MAAM,EACd,wCAAwC,MAAM,8BAA8B,CAC7E,CAAC;IAEF,MAAM,MAAM,GAAG,KAAK,EAClB,SAAiB,EACjB,QAAuB,EACR,EAAE;QACjB,IAAI,CAAC;YACH,MAAM,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;QAC/C,CAAC;QAAC,OAAO,KAAc,EAAE,CAAC;YACxB,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACvE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,wCAAwC,OAAO,IAAI,CAAC,CAAC;QAC5E,CAAC;IACH,CAAC,CAAC;IAEF,QAAQ,MAAM,EAAE,CAAC;QACf,KAAK,GAAG,CAAC;QACT,KAAK,OAAO,CAAC;QACb,KAAK,GAAG,CAAC;QACT,KAAK,KAAK;YACR,MAAM,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;YAChC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;QAC9C,KAAK,GAAG,CAAC;QACT,KAAK,QAAQ;YACX,MAAM,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;YAC3B,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;QAC9C,KAAK,GAAG,CAAC;QACT,KAAK,OAAO,CAAC;QACb,KAAK,IAAI;YACP,MAAM,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YACjC,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;QAChD;YACE,wEAAwE;YACxE,0EAA0E;YAC1E,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,6CAA6C,CAAC,CAAC;YACpE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;IAClD,CAAC;AACH,CAAC"}

package/dist/extensions/discover.d.ts

@@ -0,0 +1,19 @@
+export type ExtensionOrigin = "user" | "project";
+export interface DiscoveredExtension {
+    readonly path: string;
+    readonly origin: ExtensionOrigin;
+}
+export declare function userExtensionsDirectory(environment?: NodeJS.ProcessEnv): string;
+export declare function projectExtensionsDirectory(cwd: string): string;
+export interface DiscoverOptions {
+    readonly cwd: string;
+    /** Project extensions are only discovered once trust has been granted. */
+    readonly includeProject: boolean;
+    readonly environment?: NodeJS.ProcessEnv;
+}
+/**
+ * User extensions come first so that a project cannot take a name the user
+ * already uses: the first registration of a name wins.
+ */
+export declare function discoverExtensions(options: DiscoverOptions): Promise<readonly DiscoveredExtension[]>;
+//# sourceMappingURL=discover.d.ts.map

package/dist/extensions/discover.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"discover.d.ts","sourceRoot":"","sources":["../../src/extensions/discover.ts"],"names":[],"mappings":"AAKA,MAAM,MAAM,eAAe,GAAG,MAAM,GAAG,SAAS,CAAC;AAEjD,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,eAAe,CAAC;CAClC;AAED,wBAAgB,uBAAuB,CACrC,WAAW,GAAE,MAAM,CAAC,UAAwB,GAC3C,MAAM,CAER;AAED,wBAAgB,0BAA0B,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAE9D;AAyCD,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,0EAA0E;IAC1E,QAAQ,CAAC,cAAc,EAAE,OAAO,CAAC;IACjC,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;CAC1C;AAED;;;GAGG;AACH,wBAAsB,kBAAkB,CACtC,OAAO,EAAE,eAAe,GACvB,OAAO,CAAC,SAAS,mBAAmB,EAAE,CAAC,CAWzC"}

package/dist/extensions/discover.js

@@ -0,0 +1,61 @@
+import { readdir, stat } from "node:fs/promises";
+import path from "node:path";
+import { CONFIG_DIRECTORY, EXTENSIONS_DIRECTORY } from "./trust.js";
+import { defaultSessionHome } from "../session-store.js";
+export function userExtensionsDirectory(environment = process.env) {
+    return path.join(defaultSessionHome(environment), EXTENSIONS_DIRECTORY);
+}
+export function projectExtensionsDirectory(cwd) {
+    return path.join(cwd, CONFIG_DIRECTORY, EXTENSIONS_DIRECTORY);
+}
+/**
+ * Lists the extension entry points in one directory.
+ *
+ * Two shapes are recognised: `name.js`, and `name/index.js`. Nesting stops
+ * there. Anything more elaborate is a package, and packaging is not what this
+ * stage is about.
+ */
+async function discoverIn(directory, origin) {
+    let entries;
+    try {
+        entries = await readdir(directory, { withFileTypes: true });
+    }
+    catch {
+        return [];
+    }
+    const found = [];
+    for (const entry of entries.sort((a, b) => a.name.localeCompare(b.name))) {
+        const entryPath = path.join(directory, entry.name);
+        if (entry.isFile() && entry.name.endsWith(".js")) {
+            found.push({ path: entryPath, origin });
+            continue;
+        }
+        if (entry.isDirectory()) {
+            const index = path.join(entryPath, "index.js");
+            try {
+                if ((await stat(index)).isFile()) {
+                    found.push({ path: index, origin });
+                }
+            }
+            catch {
+                // A directory without an index is not an extension.
+            }
+        }
+    }
+    return found;
+}
+/**
+ * User extensions come first so that a project cannot take a name the user
+ * already uses: the first registration of a name wins.
+ */
+export async function discoverExtensions(options) {
+    const environment = options.environment ?? process.env;
+    const found = [
+        ...(await discoverIn(userExtensionsDirectory(environment), "user")),
+    ];
+    if (options.includeProject) {
+        found.push(...(await discoverIn(projectExtensionsDirectory(options.cwd), "project")));
+    }
+    return found;
+}
+//# sourceMappingURL=discover.js.map

package/dist/extensions/discover.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"discover.js","sourceRoot":"","sources":["../../src/extensions/discover.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AACjD,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,gBAAgB,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC;AACpE,OAAO,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AASzD,MAAM,UAAU,uBAAuB,CACrC,WAAW,GAAsB,OAAO,CAAC,GAAG;IAE5C,OAAO,IAAI,CAAC,IAAI,CAAC,kBAAkB,CAAC,WAAW,CAAC,EAAE,oBAAoB,CAAC,CAAC;AAC1E,CAAC;AAED,MAAM,UAAU,0BAA0B,CAAC,GAAW;IACpD,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,gBAAgB,EAAE,oBAAoB,CAAC,CAAC;AAChE,CAAC;AAED;;;;;;GAMG;AACH,KAAK,UAAU,UAAU,CACvB,SAAiB,EACjB,MAAuB;IAEvB,IAAI,OAAO,CAAC;IACZ,IAAI,CAAC;QACH,OAAO,GAAG,MAAM,OAAO,CAAC,SAAS,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,MAAM,KAAK,GAA0B,EAAE,CAAC;IACxC,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;QACzE,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QACnD,IAAI,KAAK,CAAC,MAAM,EAAE,IAAI,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YACjD,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC;YACxC,SAAS;QACX,CAAC;QACD,IAAI,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;YACxB,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;YAC/C,IAAI,CAAC;gBACH,IAAI,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;oBACjC,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;gBACtC,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,oDAAoD;YACtD,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AASD;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,OAAwB;IAExB,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,IAAI,OAAO,CAAC,GAAG,CAAC;IACvD,MAAM,KAAK,GAAG;QACZ,GAAG,CAAC,MAAM,UAAU,CAAC,uBAAuB,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC,CAAC;KACpE,CAAC;IACF,IAAI,OAAO,CAAC,cAAc,EAAE,CAAC;QAC3B,KAAK,CAAC,IAAI,CACR,GAAG,CAAC,MAAM,UAAU,CAAC,0BAA0B,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,SAAS,CAAC,CAAC,CAC1E,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/extensions/loader.d.ts

@@ -0,0 +1,28 @@
+import type { DiscoveredExtension } from "./discover.js";
+import { ExtensionRegistry, type RegistryOptions } from "./registry.js";
+export interface LoadedExtension {
+    readonly path: string;
+    readonly origin: DiscoveredExtension["origin"];
+}
+export interface LoadResult {
+    readonly registry: ExtensionRegistry;
+    readonly loaded: readonly LoadedExtension[];
+    readonly failed: readonly {
+        readonly path: string;
+        readonly reason: string;
+    }[];
+}
+export interface LoadOptions extends RegistryOptions {
+    /** Injectable so tests do not have to write modules to disk to test loading. */
+    readonly importModule?: (path: string) => Promise<unknown>;
+}
+/**
+ * Imports each extension and lets it register.
+ *
+ * Importing a module runs its top-level code, so this is the point of no
+ * return: everything the caller wanted to gate must already have been decided.
+ * From here on the job is containment — one broken extension must leave
+ * chivgent working.
+ */
+export declare function loadExtensions(discovered: readonly DiscoveredExtension[], options: LoadOptions): Promise<LoadResult>;
+//# sourceMappingURL=loader.d.ts.map

package/dist/extensions/loader.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"loader.d.ts","sourceRoot":"","sources":["../../src/extensions/loader.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,eAAe,CAAC;AACzD,OAAO,EAAE,iBAAiB,EAAE,KAAK,eAAe,EAAE,MAAM,eAAe,CAAC;AAGxE,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,mBAAmB,CAAC,QAAQ,CAAC,CAAC;CAChD;AAED,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,QAAQ,EAAE,iBAAiB,CAAC;IACrC,QAAQ,CAAC,MAAM,EAAE,SAAS,eAAe,EAAE,CAAC;IAC5C,QAAQ,CAAC,MAAM,EAAE,SAAS;QAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;CAChF;AAED,MAAM,WAAW,WAAY,SAAQ,eAAe;IAClD,gFAAgF;IAChF,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;CAC5D;AAiBD;;;;;;;GAOG;AACH,wBAAsB,cAAc,CAClC,UAAU,EAAE,SAAS,mBAAmB,EAAE,EAC1C,OAAO,EAAE,WAAW,GACnB,OAAO,CAAC,UAAU,CAAC,CAuCrB"}

package/dist/extensions/loader.js

@@ -0,0 +1,60 @@
+import { pathToFileURL } from "node:url";
+import { ExtensionRegistry } from "./registry.js";
+async function defaultImport(modulePath) {
+    // A file URL is required on Windows and harmless elsewhere.
+    return import(pathToFileURL(modulePath).href);
+}
+function readFactory(module) {
+    if (typeof module !== "object" || module === null) {
+        return undefined;
+    }
+    const candidate = module.default;
+    return typeof candidate === "function"
+        ? candidate
+        : undefined;
+}
+/**
+ * Imports each extension and lets it register.
+ *
+ * Importing a module runs its top-level code, so this is the point of no
+ * return: everything the caller wanted to gate must already have been decided.
+ * From here on the job is containment — one broken extension must leave
+ * chivgent working.
+ */
+export async function loadExtensions(discovered, options) {
+    const registry = new ExtensionRegistry(options);
+    const importModule = options.importModule ?? defaultImport;
+    const loaded = [];
+    const failed = [];
+    for (const extension of discovered) {
+        let factory;
+        try {
+            factory = readFactory(await importModule(extension.path));
+        }
+        catch (error) {
+            const reason = error instanceof Error ? error.message : String(error);
+            failed.push({ path: extension.path, reason });
+            options.onWarning(`${extension.path}: failed to load (${reason}).`);
+            continue;
+        }
+        if (factory === undefined) {
+            const reason = "no default export function";
+            failed.push({ path: extension.path, reason });
+            options.onWarning(`${extension.path}: ${reason}; an extension must export default a function.`);
+            continue;
+        }
+        try {
+            await factory(registry.apiFor(extension.path));
+            loaded.push({ path: extension.path, origin: extension.origin });
+        }
+        catch (error) {
+            const reason = error instanceof Error ? error.message : String(error);
+            failed.push({ path: extension.path, reason });
+            // Whatever it registered before throwing stays: partial is better than
+            // discarding work that is already valid.
+            options.onWarning(`${extension.path}: threw while registering (${reason}).`);
+        }
+    }
+    return { registry, loaded, failed };
+}
+//# sourceMappingURL=loader.js.map

package/dist/extensions/loader.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"loader.js","sourceRoot":"","sources":["../../src/extensions/loader.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAEzC,OAAO,EAAE,iBAAiB,EAAwB,MAAM,eAAe,CAAC;AAmBxE,KAAK,UAAU,aAAa,CAAC,UAAkB;IAC7C,4DAA4D;IAC5D,OAAO,MAAM,CAAC,aAAa,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,CAAC;AAChD,CAAC;AAED,SAAS,WAAW,CAAC,MAAe;IAClC,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;QAClD,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,SAAS,GAAI,MAAgC,CAAC,OAAO,CAAC;IAC5D,OAAO,OAAO,SAAS,KAAK,UAAU;QACpC,CAAC,CAAE,SAA8B;QACjC,CAAC,CAAC,SAAS,CAAC;AAChB,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,UAA0C,EAC1C,OAAoB;IAEpB,MAAM,QAAQ,GAAG,IAAI,iBAAiB,CAAC,OAAO,CAAC,CAAC;IAChD,MAAM,YAAY,GAAG,OAAO,CAAC,YAAY,IAAI,aAAa,CAAC;IAC3D,MAAM,MAAM,GAAsB,EAAE,CAAC;IACrC,MAAM,MAAM,GAAuC,EAAE,CAAC;IAEtD,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;QACnC,IAAI,OAAqC,CAAC;QAC1C,IAAI,CAAC;YACH,OAAO,GAAG,WAAW,CAAC,MAAM,YAAY,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;QAC5D,CAAC;QAAC,OAAO,KAAc,EAAE,CAAC;YACxB,MAAM,MAAM,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACtE,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;YAC9C,OAAO,CAAC,SAAS,CAAC,GAAG,SAAS,CAAC,IAAI,qBAAqB,MAAM,IAAI,CAAC,CAAC;YACpE,SAAS;QACX,CAAC;QAED,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YAC1B,MAAM,MAAM,GAAG,4BAA4B,CAAC;YAC5C,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;YAC9C,OAAO,CAAC,SAAS,CACf,GAAG,SAAS,CAAC,IAAI,KAAK,MAAM,gDAAgD,CAC7E,CAAC;YACF,SAAS;QACX,CAAC;QAED,IAAI,CAAC;YACH,MAAM,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;YAC/C,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,CAAC,MAAM,EAAE,CAAC,CAAC;QAClE,CAAC;QAAC,OAAO,KAAc,EAAE,CAAC;YACxB,MAAM,MAAM,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACtE,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;YAC9C,uEAAuE;YACvE,yCAAyC;YACzC,OAAO,CAAC,SAAS,CAAC,GAAG,SAAS,CAAC,IAAI,8BAA8B,MAAM,IAAI,CAAC,CAAC;QAC/E,CAAC;IACH,CAAC;IAED,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;AACtC,CAAC"}

package/dist/extensions/registry.d.ts

@@ -0,0 +1,36 @@
+import type { AgentEvent } from "../events.js";
+import type { ExtensionAPI, RegisteredCommand, RegisteredTool } from "./api.js";
+export interface RegistryOptions {
+    /** Names an extension may not take, so a project cannot shadow read_file. */
+    readonly reservedToolNames: readonly string[];
+    readonly reservedCommandNames: readonly string[];
+    readonly onWarning: (message: string) => void;
+}
+/**
+ * Collects what extensions register.
+ *
+ * Every rejection is reported and survivable: a conflicting registration is
+ * dropped, the rest of the extension keeps whatever it registered before and
+ * after, and the built-in stays in place.
+ */
+export declare class ExtensionRegistry {
+    private readonly options;
+    private readonly tools;
+    private readonly commands;
+    private readonly listeners;
+    private readonly promptContributions;
+    constructor(options: RegistryOptions);
+    /** The API handed to one extension; `source` identifies it in diagnostics. */
+    apiFor(source: string): ExtensionAPI;
+    get registeredTools(): readonly RegisteredTool[];
+    get registeredCommands(): readonly RegisteredCommand[];
+    get systemPromptContributions(): readonly string[];
+    command(name: string): RegisteredCommand | undefined;
+    /** A single listener that fans one event out to every subscribed handler. */
+    get eventListener(): (event: AgentEvent) => void;
+    private addTool;
+    private addCommand;
+    private addListener;
+    private addPrompt;
+}
+//# sourceMappingURL=registry.d.ts.map

package/dist/extensions/registry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.d.ts","sourceRoot":"","sources":["../../src/extensions/registry.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAE/C,OAAO,KAAK,EACV,YAAY,EAEZ,iBAAiB,EACjB,cAAc,EACf,MAAM,UAAU,CAAC;AAIlB,MAAM,WAAW,eAAe;IAC9B,6EAA6E;IAC7E,QAAQ,CAAC,iBAAiB,EAAE,SAAS,MAAM,EAAE,CAAC;IAC9C,QAAQ,CAAC,oBAAoB,EAAE,SAAS,MAAM,EAAE,CAAC;IACjD,QAAQ,CAAC,SAAS,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;CAC/C;AAED;;;;;;GAMG;AACH,qBAAa,iBAAiB;IAShB,OAAO,CAAC,QAAQ,CAAC,OAAO;IARpC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAqC;IAC3D,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAwC;IACjE,OAAO,CAAC,QAAQ,CAAC,SAAS,CAGjB;IACT,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAAgB;IAEpD,YAA6B,OAAO,EAAE,eAAe,EAAI;IAEzD,8EAA8E;IAC9E,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,YAAY,CASnC;IAED,IAAI,eAAe,IAAI,SAAS,cAAc,EAAE,CAE/C;IAED,IAAI,kBAAkB,IAAI,SAAS,iBAAiB,EAAE,CAErD;IAED,IAAI,yBAAyB,IAAI,SAAS,MAAM,EAAE,CAEjD;IAED,OAAO,CAAC,IAAI,EAAE,MAAM,GAAG,iBAAiB,GAAG,SAAS,CAEnD;IAED,6EAA6E;IAC7E,IAAI,aAAa,IAAI,CAAC,KAAK,EAAE,UAAU,KAAK,IAAI,CAa/C;IAED,OAAO,CAAC,OAAO;IA2Bf,OAAO,CAAC,UAAU;IAoClB,OAAO,CAAC,WAAW;IAYnB,OAAO,CAAC,SAAS;CAOlB"}

package/dist/extensions/registry.js

@@ -0,0 +1,115 @@
+const COMMAND_NAME = /^[a-z][a-z0-9-]*$/;
+/**
+ * Collects what extensions register.
+ *
+ * Every rejection is reported and survivable: a conflicting registration is
+ * dropped, the rest of the extension keeps whatever it registered before and
+ * after, and the built-in stays in place.
+ */
+export class ExtensionRegistry {
+    options;
+    tools = new Map();
+    commands = new Map();
+    listeners = [];
+    promptContributions = [];
+    constructor(options) {
+        this.options = options;
+    }
+    /** The API handed to one extension; `source` identifies it in diagnostics. */
+    apiFor(source) {
+        return {
+            registerTool: (tool) => this.addTool(tool, source),
+            registerCommand: (name, command) => this.addCommand(name, command, source),
+            on: (type, handler) => this.addListener(type, handler, source),
+            contributeSystemPrompt: (text) => this.addPrompt(text, source),
+        };
+    }
+    get registeredTools() {
+        return [...this.tools.values()];
+    }
+    get registeredCommands() {
+        return [...this.commands.values()];
+    }
+    get systemPromptContributions() {
+        return this.promptContributions;
+    }
+    command(name) {
+        return this.commands.get(name);
+    }
+    /** A single listener that fans one event out to every subscribed handler. */
+    get eventListener() {
+        return (event) => {
+            for (const listener of this.listeners) {
+                if (listener.type !== event.type) {
+                    continue;
+                }
+                try {
+                    listener.handler(event);
+                }
+                catch {
+                    // An extension must not change the outcome of the run it observes.
+                }
+            }
+        };
+    }
+    addTool(tool, source) {
+        if (typeof tool !== "object" ||
+            tool === null ||
+            typeof tool.name !== "string" ||
+            tool.name.length === 0 ||
+            typeof tool.execute !== "function") {
+            this.options.onWarning(`${source}: registerTool needs a tool with a name and an execute function.`);
+            return;
+        }
+        if (this.options.reservedToolNames.includes(tool.name)) {
+            this.options.onWarning(`${source}: cannot register the tool "${tool.name}"; that name is built in.`);
+            return;
+        }
+        const existing = this.tools.get(tool.name);
+        if (existing !== undefined) {
+            this.options.onWarning(`${source}: the tool "${tool.name}" is already registered by ${existing.source}.`);
+            return;
+        }
+        this.tools.set(tool.name, { tool, source });
+    }
+    addCommand(name, command, source) {
+        if (typeof name !== "string" || !COMMAND_NAME.test(name)) {
+            this.options.onWarning(`${source}: "${String(name)}" is not a usable command name; use lowercase letters, digits and dashes.`);
+            return;
+        }
+        if (typeof command !== "object" || command === null || typeof command.run !== "function") {
+            this.options.onWarning(`${source}: the command "${name}" needs a run function.`);
+            return;
+        }
+        if (this.options.reservedCommandNames.includes(name)) {
+            this.options.onWarning(`${source}: cannot register "/${name}"; that command is built in.`);
+            return;
+        }
+        const existing = this.commands.get(name);
+        if (existing !== undefined) {
+            this.options.onWarning(`${source}: "/${name}" is already registered by ${existing.source}.`);
+            return;
+        }
+        this.commands.set(name, {
+            name,
+            source,
+            description: typeof command.description === "string" ? command.description : "",
+            run: command.run.bind(command),
+        });
+    }
+    addListener(type, handler, source) {
+        if (typeof handler !== "function") {
+            this.options.onWarning(`${source}: on("${String(type)}") needs a function.`);
+            return;
+        }
+        this.listeners.push({ type, handler });
+    }
+    addPrompt(text, source) {
+        if (typeof text !== "string" || text.trim().length === 0) {
+            this.options.onWarning(`${source}: contributeSystemPrompt needs a non-empty string.`);
+            return;
+        }
+        this.promptContributions.push(text.trim());
+    }
+}
+//# sourceMappingURL=registry.js.map

package/dist/extensions/registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.js","sourceRoot":"","sources":["../../src/extensions/registry.ts"],"names":[],"mappings":"AASA,MAAM,YAAY,GAAG,mBAAmB,CAAC;AASzC;;;;;;GAMG;AACH,MAAM,OAAO,iBAAiB;IASC,OAAO;IARnB,KAAK,GAAG,IAAI,GAAG,EAA0B,CAAC;IAC1C,QAAQ,GAAG,IAAI,GAAG,EAA6B,CAAC;IAChD,SAAS,GAGpB,EAAE,CAAC;IACQ,mBAAmB,GAAa,EAAE,CAAC;IAEpD,YAA6B,OAAwB;uBAAxB,OAAO;IAAoB,CAAC;IAEzD,8EAA8E;IAC9E,MAAM,CAAC,MAAc;QACnB,OAAO;YACL,YAAY,EAAE,CAAC,IAAU,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC;YACxD,eAAe,EAAE,CAAC,IAAY,EAAE,OAAyB,EAAE,EAAE,CAC3D,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC;YACxC,EAAE,EAAE,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC;YAC9D,sBAAsB,EAAE,CAAC,IAAY,EAAE,EAAE,CACvC,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,MAAM,CAAC;SAC/B,CAAC;IACJ,CAAC;IAED,IAAI,eAAe;QACjB,OAAO,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;IAClC,CAAC;IAED,IAAI,kBAAkB;QACpB,OAAO,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;IACrC,CAAC;IAED,IAAI,yBAAyB;QAC3B,OAAO,IAAI,CAAC,mBAAmB,CAAC;IAClC,CAAC;IAED,OAAO,CAAC,IAAY;QAClB,OAAO,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACjC,CAAC;IAED,6EAA6E;IAC7E,IAAI,aAAa;QACf,OAAO,CAAC,KAAiB,EAAQ,EAAE;YACjC,KAAK,MAAM,QAAQ,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;gBACtC,IAAI,QAAQ,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI,EAAE,CAAC;oBACjC,SAAS;gBACX,CAAC;gBACD,IAAI,CAAC;oBACH,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;gBAC1B,CAAC;gBAAC,MAAM,CAAC;oBACP,mEAAmE;gBACrE,CAAC;YACH,CAAC;QACH,CAAC,CAAC;IACJ,CAAC;IAEO,OAAO,CAAC,IAAU,EAAE,MAAc;QACxC,IACE,OAAO,IAAI,KAAK,QAAQ;YACxB,IAAI,KAAK,IAAI;YACb,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ;YAC7B,IAAI,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC;YACtB,OAAO,IAAI,CAAC,OAAO,KAAK,UAAU,EAClC,CAAC;YACD,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,GAAG,MAAM,kEAAkE,CAAC,CAAC;YACpG,OAAO;QACT,CAAC;QACD,IAAI,IAAI,CAAC,OAAO,CAAC,iBAAiB,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACvD,IAAI,CAAC,OAAO,CAAC,SAAS,CACpB,GAAG,MAAM,+BAA+B,IAAI,CAAC,IAAI,2BAA2B,CAC7E,CAAC;YACF,OAAO;QACT,CAAC;QACD,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC3C,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC3B,IAAI,CAAC,OAAO,CAAC,SAAS,CACpB,GAAG,MAAM,eAAe,IAAI,CAAC,IAAI,8BAA8B,QAAQ,CAAC,MAAM,GAAG,CAClF,CAAC;YACF,OAAO;QACT,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;IAC9C,CAAC;IAEO,UAAU,CAChB,IAAY,EACZ,OAAyB,EACzB,MAAc;QAEd,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACzD,IAAI,CAAC,OAAO,CAAC,SAAS,CACpB,GAAG,MAAM,MAAM,MAAM,CAAC,IAAI,CAAC,2EAA2E,CACvG,CAAC;YACF,OAAO;QACT,CAAC;QACD,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,IAAI,IAAI,OAAO,OAAO,CAAC,GAAG,KAAK,UAAU,EAAE,CAAC;YACzF,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,GAAG,MAAM,kBAAkB,IAAI,yBAAyB,CAAC,CAAC;YACjF,OAAO;QACT,CAAC;QACD,IAAI,IAAI,CAAC,OAAO,CAAC,oBAAoB,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YACrD,IAAI,CAAC,OAAO,CAAC,SAAS,CACpB,GAAG,MAAM,uBAAuB,IAAI,8BAA8B,CACnE,CAAC;YACF,OAAO;QACT,CAAC;QACD,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACzC,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC3B,IAAI,CAAC,OAAO,CAAC,SAAS,CACpB,GAAG,MAAM,OAAO,IAAI,8BAA8B,QAAQ,CAAC,MAAM,GAAG,CACrE,CAAC;YACF,OAAO;QACT,CAAC;QACD,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,EAAE;YACtB,IAAI;YACJ,MAAM;YACN,WAAW,EAAE,OAAO,OAAO,CAAC,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE;YAC/E,GAAG,EAAE,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC;SAC/B,CAAC,CAAC;IACL,CAAC;IAEO,WAAW,CACjB,IAAwB,EACxB,OAAoC,EACpC,MAAc;QAEd,IAAI,OAAO,OAAO,KAAK,UAAU,EAAE,CAAC;YAClC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,GAAG,MAAM,SAAS,MAAM,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;YAC7E,OAAO;QACT,CAAC;QACD,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;IACzC,CAAC;IAEO,SAAS,CAAC,IAAY,EAAE,MAAc;QAC5C,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACzD,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,GAAG,MAAM,oDAAoD,CAAC,CAAC;YACtF,OAAO;QACT,CAAC;QACD,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;IAC7C,CAAC;CACF"}

package/dist/extensions/trust.d.ts

@@ -0,0 +1,44 @@
+export declare const CONFIG_DIRECTORY = ".chivgent";
+export declare const EXTENSIONS_DIRECTORY = "extensions";
+export declare class TrustFileError extends Error {
+    constructor(message: string, options?: {
+        cause?: unknown;
+    });
+}
+export declare function defaultTrustFile(environment?: NodeJS.ProcessEnv): string;
+/**
+ * Resolves a directory the way the trust store keys it.
+ *
+ * Symlinks and `..` are resolved first so that two paths naming the same
+ * directory cannot produce two entries, one of which the user never sees.
+ */
+export declare function canonicalDirectory(directory: string): Promise<string>;
+export type TrustDecision = boolean;
+export interface TrustEntry {
+    /** The directory the decision was recorded against, which may be an ancestor. */
+    readonly path: string;
+    readonly decision: TrustDecision;
+}
+/**
+ * Records whether a project directory may contribute code to chivgent.
+ *
+ * Decisions are looked up by nearest ancestor, so trusting `~/work` covers
+ * every repository under it. A monorepo does not ask once per package.
+ */
+export declare class TrustStore {
+    private readonly filePath;
+    constructor(filePath?: string);
+    get location(): string;
+    lookup(directory: string): Promise<TrustEntry | undefined>;
+    set(directory: string, decision: TrustDecision): Promise<void>;
+    /**
+     * Removes the decision that covers this directory, including an ancestor's,
+     * so that forgetting actually makes chivgent ask again.
+     */
+    forget(directory: string): Promise<string | undefined>;
+    private read;
+    private write;
+}
+/** True when the project directory carries anything trust has to gate. */
+export declare function hasProjectExtensions(cwd: string): boolean;
+//# sourceMappingURL=trust.d.ts.map

package/dist/extensions/trust.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"trust.d.ts","sourceRoot":"","sources":["../../src/extensions/trust.ts"],"names":[],"mappings":"AAMA,eAAO,MAAM,gBAAgB,cAAc,CAAC;AAC5C,eAAO,MAAM,oBAAoB,eAAe,CAAC;AAGjD,qBAAa,cAAe,SAAQ,KAAK;IACvC,YAAY,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,OAAO,CAAA;KAAE,EAGzD;CACF;AAED,wBAAgB,gBAAgB,CAC9B,WAAW,GAAE,MAAM,CAAC,UAAwB,GAC3C,MAAM,CAER;AAED;;;;;GAKG;AACH,wBAAsB,kBAAkB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAS3E;AAED,MAAM,MAAM,aAAa,GAAG,OAAO,CAAC;AAEpC,MAAM,WAAW,UAAU;IACzB,iFAAiF;IACjF,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,QAAQ,EAAE,aAAa,CAAC;CAClC;AAED;;;;;GAKG;AACH,qBAAa,UAAU;IACT,OAAO,CAAC,QAAQ,CAAC,QAAQ;IAArC,YAA6B,QAAQ,GAAE,MAA2B,EAAI;IAEtE,IAAI,QAAQ,IAAI,MAAM,CAErB;IAEK,MAAM,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,GAAG,SAAS,CAAC,CAc/D;IAEK,GAAG,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,CAKnE;IAED;;;OAGG;IACG,MAAM,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAS3D;YAEa,IAAI;YAyCJ,KAAK;CAcpB;AAED,0EAA0E;AAC1E,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAEzD"}