chivgent 0.10.0 → 0.12.0

package/README.md

@@ -40,6 +40,11 @@ to study before adding production-harness complexity.
 - Ranged `read_file` output with continuation hints and bounded tool results.
 - Read-only by default; `--allow-writes` adds `write_file` and `edit_file`.
 - An opt-in `bash` tool behind `--allow-shell`, with streamed output.
+- Remote sessions: one process holds a session, others attach over a local socket.
+- Several clients can watch one session; any of them can interrupt the run.
+- Extensions that add tools, slash commands, event handlers and prompt text.
+- Project extensions gated by a per-directory trust decision, taken before any
+  module is imported and refused outright when there is no terminal to ask.
 - Commands run in their own process group, so cancelling kills the whole tree.
 - Command output is truncated from the tail; the full text goes to a temp file.
 - Exact-match `edit_file` that refuses missing or ambiguous edits.
@@ -144,6 +149,12 @@ Options:
   --allow-writes   Let the agent create and change files (default: read-only)
   --allow-shell    Let the agent run shell commands. This implies write access:
                    a shell is not bound by the workspace. Unix only.
+  --serve          Expose this session on a local socket and keep running
+  --connect TARGET Attach to a served session, by id or socket path
+  --servers        List the servers still answering, then exit
+  --no-extensions  Do not load any extension, and do not ask about trust
+  --extensions     List loaded extensions and what they register, then exit
+  --forget-trust   Forget the trust decision covering this workspace, then exit
   --context-window N  Token budget for the context (default: 128000)
   --no-compaction  Send the whole transcript instead of summarising old turns
   --no-session     Do not record this run
@@ -379,6 +390,20 @@ src/
     write-file.ts                Whole-file create and replace
     edit-file.ts                 Exact unique-match edit
     bash.ts                      Shell command execution
+  remote/
+    protocol.ts                  Message shapes and version negotiation
+    framing.ts                   JSON Lines framing with a bounded buffer
+    server.ts                    Serves one session on a Unix socket
+    client.ts                    Attaches to a served session
+    repl.ts                      The interactive loop for an attached client
+    socket-path.ts               Socket paths, staleness, and discovery
+  extensions/
+    trust.ts                     Per-directory trust store
+    decide-trust.ts              The prompt, and the refusal when nobody can answer
+    discover.ts                  Where extensions live and which files count
+    api.ts                       What an extension may register
+    registry.ts                  Collects registrations, rejects conflicts
+    loader.ts                    Imports modules and contains their failures
   shell/
     types.ts                     Execution contract and shell error types
     config.ts                    Shell resolution and the Windows guard
@@ -416,6 +441,104 @@ npm install -g ./chivgent-0.6.0.tgz
 Tests use scripted or mocked LLM clients. A real API smoke test is deliberately
 manual so the default test suite never consumes credits.
 
+## Remote sessions
+
+A session normally lives and dies with the terminal that started it. `--serve`
+keeps it in one process and lets others attach:
+
+```bash
+# One terminal
+chivgent --serve --allow-writes
+# chivgent 0.12.0 serving session 2026-09-06T...
+# socket:       ~/.chivgent/sockets/2026-09-06T....sock
+# capabilities: --allow-writes
+
+# Another terminal
+chivgent --servers                 # list what is running
+chivgent --connect <id>            # attach interactively
+chivgent --connect <id> "question" # ask once and leave
+```
+
+A client holds no state: it sends prompts and renders the event stream the
+server broadcasts. Several clients can attach at once — the extra ones watch the
+same run as it happens, and any of them can interrupt it, because the run
+belongs to the session rather than to whoever started it. A prompt sent while
+another is running is refused rather than queued, and a client that disconnects
+mid-run does not cancel it.
+
+Attaching does not replay history; the session log already holds that. The
+protocol is JSON Lines over a Unix socket, one object per line, the same shape
+`--json` writes.
+
+**Whoever can reach the socket has everything the server was started with.** If
+it was started with `--allow-shell`, anyone who can connect can make the model
+run commands, which is why the server prints its capabilities on startup: the
+person attaching cannot see the flags you typed. The boundary is filesystem
+permissions — sockets live in an owner-only directory under `CHIVGENT_HOME` —
+and there is no TCP listener. For another machine, forward the socket over SSH
+so that authentication is SSH's job.
+
+## Extensions
+
+An extension is an ES module that default-exports a function. It is called once
+at startup with an API that can add a tool, add a slash command, subscribe to
+runtime events, and append to the system prompt.
+
+```js
+// .chivgent/extensions/word-count.js
+export default function (api) {
+  api.registerTool({
+    name: "word_count",
+    description: "Count the words in a workspace file.",
+    inputSchema: {
+      type: "object",
+      properties: { path: { type: "string" } },
+      required: ["path"],
+      additionalProperties: false,
+    },
+    async execute(args, context) {
+      const file = await context.workspace.readTextFile(args.path);
+      return {
+        content: `${file.content.split(/\s+/).filter(Boolean).length} words`,
+        isError: false,
+      };
+    },
+  });
+
+  api.contributeSystemPrompt("Use word_count instead of reading a file to count words.");
+}
+```
+
+Extensions are loaded from two places:
+
+| Location | Loaded |
+| --- | --- |
+| `<CHIVGENT_HOME>/extensions/` | Always: it is your own machine's configuration |
+| `<workspace>/.chivgent/extensions/` | Only after you trust the project |
+
+Both accept `name.js` and `name/index.js`; nesting stops there. Plain JavaScript
+only — compiling TypeScript yourself is cheaper than making chivgent carry a
+TypeScript loader. A name already taken by a built-in tool or command is refused,
+so an extension cannot shadow `read_file` or `/clear`, and a broken extension is
+reported and skipped rather than taking chivgent down with it.
+
+`chivgent --extensions` lists what loaded and what each one registered.
+
+### Project trust
+
+The first time you run chivgent in a project that ships extensions, it describes
+what they are and asks once. The answer is stored in `<CHIVGENT_HOME>/trust.json`
+against the resolved directory path, and matched by nearest ancestor, so trusting
+`~/work` covers every repository under it. `--forget-trust` removes the decision
+covering the current workspace.
+
+**Trusting a project means letting its authors run code as you.** An extension
+executes inside the chivgent process: it is not bound by the workspace, it does
+not need `--allow-shell` to run a command, and it can read your environment
+including the API key. That is why the question is asked before anything is
+imported, and why the answer is no whenever there is nobody to ask — a CI job or
+a piped run never loads a checkout's extensions on its own.
+
 ## Security model
 
 - API keys come from `--api-key`, an environment variable, or an optional
@@ -444,6 +567,20 @@ manual so the default test suite never consumes credits.
   work.
 - Session logs record command output as well as file excerpts once
   `--allow-shell` is on.
+- Project extensions are loaded only after an explicit, recorded trust decision,
+  and never without a terminal to ask at. An extension runs in-process with your
+  permissions and is bound by none of the workspace limits above, so trusting a
+  project is the same order of authority as `--allow-shell`, reached by cloning
+  a repository rather than by typing a flag.
+- User extensions under `<CHIVGENT_HOME>/extensions/` are always loaded; that
+  directory is your own configuration.
+- Extensions cannot take the name of a built-in tool or command.
+- `trust.json`, like the session log and the auth file, is written owner-only.
+- A served session is reachable by anyone who can open its socket, and they get
+  every capability the server was started with. Sockets live in an owner-only
+  directory; the directory is the real gate, because a socket file exists
+  briefly with default permissions before it can be restricted.
+- chivgent never listens on TCP. Use SSH forwarding to reach another machine.
 - Writes resolve the deepest existing ancestor and reject a symlink at any
   segment, so a planted link cannot redirect a write out of the workspace.
 - Writes are staged in a sibling temp file and renamed into place, so an
@@ -489,8 +626,9 @@ project.
 - [x] Opt-in `write_file` and `edit_file` behind `--allow-writes`
 - [x] Provider registry and credential resolution chain
 - [x] `bash` tool with streaming output, behind `--allow-shell`
-- [ ] Extensions and project trust
-- [ ] TUI, remote sessions, telemetry, and evals
+- [x] Extensions and project trust
+- [x] Remote sessions over a local socket
+- [ ] TUI, telemetry, and evals
 
 Per-command confirmation prompts and command allowlists are deliberately not
 planned. Once a shell tool exists, `bash` can do anything `write_file` can and
@@ -509,6 +647,8 @@ session-level switches; the real boundary is a container.
 - [Stage 6: Provider registry and credential chain](docs/stage-6-provider-registry.md)
 - [Stage 7: Context budget and compaction](docs/stage-7-context-management.md)
 - [Stage 8: Shell tool and streaming subprocesses](docs/stage-8-shell-tool.md)
+- [Stage 9: Extensions and project trust](docs/stage-9-extensions.md)
+- [Stage 10: Remote sessions](docs/stage-10-remote-sessions.md)
 - [Release process](docs/releasing.md)
 
 ## Contributing

package/README.zh-CN.md

@@ -37,6 +37,11 @@
 - 支持带续读提示的分段 `read_file`，所有工具结果都有容量上限。
 - 默认只读；`--allow-writes` 才会启用 `write_file` 和 `edit_file`。
 - 通过 `--allow-shell` 选择性开启的 `bash` 工具，输出边跑边显示。
+- 远程会话：一个进程持有会话，其他进程通过本地 socket 接上来。
+- 多个客户端可以同时观察同一个会话，其中任何一个都能中断当前运行。
+- 扩展系统：可以添加工具、斜杠命令、事件订阅和 system prompt 片段。
+- 项目扩展受按目录记录的信任决定门控；判定发生在任何模块被 import 之前，
+  没有终端可问时一律拒绝。
 - 命令运行在独立进程组中，取消一次运行会杀掉整棵进程树。
 - 命令输出从尾部截断，完整内容写入临时文件供按需读取。
 - 精确匹配的 `edit_file`，命中缺失或不唯一时拒绝执行。
@@ -140,6 +145,12 @@ chivgent [选项]                   进入交互式会话
   --allow-writes   允许 Agent 创建和修改文件（默认只读）
   --allow-shell    允许 Agent 执行 Shell 命令。它蕴含写权限：Shell 不受工作区
                    边界约束。仅支持 Unix。
+  --serve          把当前会话暴露在本地 socket 上并常驻
+  --connect TARGET 接上一个已服务的会话，可用 id 或 socket 路径
+  --servers        列出仍在响应的服务端后退出
+  --no-extensions  不加载任何扩展，也不询问信任
+  --extensions     列出已加载的扩展及其注册内容后退出
+  --forget-trust   忘记覆盖当前工作区的信任决定后退出
   --context-window N  上下文的 Token 预算（默认：128000）
   --no-compaction  发送完整 transcript，不压缩较早的轮次
   --no-session     不记录本次运行
@@ -362,6 +373,20 @@ src/
     write-file.ts                整文件创建与替换
     edit-file.ts                 精确唯一匹配编辑
     bash.ts                      Shell 命令执行
+  remote/
+    protocol.ts                  消息形状与版本协商
+    framing.ts                   有界缓冲的 JSON Lines 分帧
+    server.ts                    在 Unix socket 上服务一个会话
+    client.ts                    接入一个已服务的会话
+    repl.ts                      接入端的交互循环
+    socket-path.ts               socket 路径、陈旧检测与发现
+  extensions/
+    trust.ts                     按目录记录的信任存储
+    decide-trust.ts              询问流程，以及无人可问时的拒绝
+    discover.ts                  扩展的位置与文件识别规则
+    api.ts                       扩展可以注册什么
+    registry.ts                  收集注册项并拒绝冲突
+    loader.ts                    import 模块并隔离其失败
   shell/
     types.ts                     执行契约与 Shell 错误类型
     config.ts                    Shell 解析与 Windows 拦截
@@ -399,6 +424,91 @@ npm install -g ./chivgent-0.6.0.tgz
 测试使用脚本化或 Mock LLM Client。真实 API Smoke Test 需要手工执行，因此默认
 测试不会消耗 API 额度。
 
+## 远程会话
+
+会话通常和启动它的那个终端同生共死。`--serve` 让它留在一个进程里，其他进程可以接上来：
+
+```bash
+# 终端 A
+chivgent --serve --allow-writes
+# chivgent 0.12.0 serving session 2026-09-06T...
+# socket:       ~/.chivgent/sockets/2026-09-06T....sock
+# capabilities: --allow-writes
+
+# 终端 B
+chivgent --servers                 # 列出正在运行的服务端
+chivgent --connect <id>            # 交互式接入
+chivgent --connect <id> "问题"      # 问一次就走
+```
+
+客户端不持有任何状态：它只负责发 prompt、渲染服务端广播的事件流。可以同时接入多个
+客户端——多出来的那些实时观察同一次运行，并且**任何一个都能中断它**，因为运行属于会话，
+不属于"谁发起的"。运行期间再来一个 prompt 会被拒绝而不是排队；客户端中途断开也不会
+取消正在跑的运行。
+
+接入时**不重放历史**——那是会话日志的职责。协议是 Unix socket 上的 JSON Lines，
+一行一个对象，和 `--json` 输出同一种形状。
+
+**能连上这个 socket 的人，拥有服务端启动时的全部能力。** 如果它是带 `--allow-shell`
+起来的，那么任何能连上的人都能让模型执行命令——这正是服务端启动时会打印本次能力的原因：
+接入的人看不到你敲了什么参数。边界是文件系统权限（socket 位于 `CHIVGENT_HOME` 下仅
+所有者可访问的目录），并且**不监听 TCP**。要跨机器访问请用 SSH 转发，让认证由 SSH 负责。
+
+## 扩展系统
+
+一个扩展就是默认导出一个函数的 ES 模块。启动时它会被调用一次，拿到的 API 可以注册
+工具、注册斜杠命令、订阅运行时事件、追加 system prompt。
+
+```js
+// .chivgent/extensions/word-count.js
+export default function (api) {
+  api.registerTool({
+    name: "word_count",
+    description: "统计工作区某个文件的词数。",
+    inputSchema: {
+      type: "object",
+      properties: { path: { type: "string" } },
+      required: ["path"],
+      additionalProperties: false,
+    },
+    async execute(args, context) {
+      const file = await context.workspace.readTextFile(args.path);
+      return {
+        content: `${file.content.split(/\s+/).filter(Boolean).length} words`,
+        isError: false,
+      };
+    },
+  });
+
+  api.contributeSystemPrompt("需要数词数时用 word_count，不要整篇读文件。");
+}
+```
+
+扩展从两个位置加载：
+
+| 位置 | 何时加载 |
+| --- | --- |
+| `<CHIVGENT_HOME>/extensions/` | 始终加载——那是你自己机器上的配置 |
+| `<工作区>/.chivgent/extensions/` | 只有在你信任该项目之后 |
+
+两处都接受 `name.js` 和 `name/index.js`，不再往下递归。**只支持纯 JavaScript**：
+用 TypeScript 写的话自己编译成 `.js` 即可，为此让 chivgent 背上一个 TS 运行时加载器
+不划算。与内置工具或命令重名的注册会被拒绝，所以扩展无法顶替 `read_file` 或
+`/clear`；某个扩展坏掉只会被报告并跳过，不会把 chivgent 一起带走。
+
+`chivgent --extensions` 可以列出加载了哪些扩展、各自注册了什么。
+
+### Project Trust
+
+第一次在带扩展的项目里运行 chivgent 时，它会说明这些扩展是什么并询问一次。答案记在
+`<CHIVGENT_HOME>/trust.json` 里，键是解析后的目录路径，**按最近祖先匹配**——信任
+`~/work` 就覆盖它下面所有仓库。`--forget-trust` 可以删掉覆盖当前工作区的那条决定。
+
+**信任一个项目，等于允许这个仓库的作者以你的身份执行代码。** 扩展在 chivgent 进程内
+运行：不受工作区边界约束，不需要 `--allow-shell` 就能执行命令，也能读到你环境变量里的
+API Key。这正是询问必须发生在 import 之前的原因，也是"没人可问时一律拒绝"的原因——
+CI 任务或管道运行永远不会自作主张去执行一个 clone 里的代码。
+
 ## 安全模型
 
 - API Key 依次从 `--api-key`、环境变量、可选的 `auth.json` 解析，绝不能提交到仓库。
@@ -417,6 +527,17 @@ npm install -g ./chivgent-0.6.0.tgz
 - 被截断的命令输出会写入临时文件供模型按需读取。该文件仅所有者可读，但运行结束后
   **不会自动删除**，其中可能包含命令打印的任何内容。处理敏感数据后请清理临时目录。
 - 开启 `--allow-shell` 后，会话日志除文件片段外还会记录命令输出。
+- 项目扩展只有在存在明确的、已记录的信任决定之后才会加载，且没有终端可问时绝不加载。
+  扩展以你的权限在进程内运行，上面那些工作区限制对它一概不适用——因此"信任一个项目"
+  与 `--allow-shell` 是同一量级的授权，区别只在于前者由 clone 一个仓库触发，
+  后者要你亲手敲一个参数。
+- `<CHIVGENT_HOME>/extensions/` 下的用户级扩展始终加载，那是你自己的配置。
+- 扩展无法占用内置工具或内置命令的名字。
+- `trust.json` 与会话日志、认证文件一样，以仅所有者可读的权限写入。
+- 被服务的会话对任何能打开其 socket 的人可达，且他们获得服务端启动时的全部能力。
+  socket 位于仅所有者可访问的目录中；**真正起作用的是目录权限**，因为 socket 文件在
+  能被收紧权限之前会短暂地以默认权限存在。
+- chivgent 从不监听 TCP。跨机器访问请使用 SSH 转发。
 - 写入会解析到最深层已存在的祖先目录，路径上任何一段是符号链接都会被拒绝，
   因此预先植入的链接无法把写入重定向到工作区之外。
 - 写入先落到同目录的临时文件再 rename 就位，中断的写入不会截断已有文件。
@@ -455,8 +576,9 @@ npm install -g ./chivgent-0.6.0.tgz
 - [x] 通过 `--allow-writes` 选择性开启的 `write_file` 和 `edit_file`
 - [x] Provider Registry 与凭据解析链
 - [x] 通过 `--allow-shell` 开启的 `bash` 工具，带流式输出
-- [ ] 扩展系统与 Project Trust
-- [ ] TUI、远程会话、Telemetry 和 Evals
+- [x] 扩展系统与 Project Trust
+- [x] 基于本地 socket 的远程会话
+- [ ] TUI、Telemetry 和 Evals
 
 逐条命令确认和命令白名单是**主动放弃**的方向。有了 Shell 工具之后，`bash` 能做的
 事是 `write_file` 的超集，任何白名单都能被一行 `sh -c` 绕开，而逐条弹确认只会训练
@@ -473,6 +595,8 @@ npm install -g ./chivgent-0.6.0.tgz
 - [Stage 6：Provider Registry 与凭证解析链](docs/stage-6-provider-registry.md)
 - [Stage 7：上下文预算与压缩](docs/stage-7-context-management.md)
 - [Stage 8：Shell 工具与流式子进程](docs/stage-8-shell-tool.md)
+- [Stage 9：扩展系统与 Project Trust](docs/stage-9-extensions.md)
+- [Stage 10：远程会话](docs/stage-10-remote-sessions.md)
 - [发布流程](docs/releasing.md)
 
 ## 参与贡献

package/dist/cli-options.d.ts

@@ -39,6 +39,18 @@ export interface CliOptions {
      * can do everything the write tools can and is not bound by the workspace.
      */
     readonly allowShell: boolean;
+    /** Load extensions from the user and (once trusted) the project directory. */
+    readonly extensions: boolean;
+    /** List loaded extensions and what they registered, then exit. */
+    readonly listExtensions: boolean;
+    /** Forget the trust decision covering this workspace and exit. */
+    readonly forgetTrust: boolean;
+    /** Expose this session on a local socket and stay running. */
+    readonly serve: boolean;
+    /** Attach to a session served elsewhere; a session id or a socket path. */
+    readonly connect?: string;
+    /** List the servers that are still answering, then exit. */
+    readonly listServers: boolean;
     /** API key supplied for this run only, overriding every other source. */
     readonly apiKey?: string;
     /** Token budget the context is kept inside. */

package/dist/cli-options.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cli-options.d.ts","sourceRoot":"","sources":["../src/cli-options.ts"],"names":[],"mappings":"AAKA,eAAO,MAAM,OAAO,QAC6D,CAAC;AAElF,OAAO,EAEL,gBAAgB,EACjB,MAAM,yBAAyB,CAAC;AAGjC,2CAA2C;AAC3C,MAAM,MAAM,QAAQ,GAAG,MAAM,CAAC;AAE9B,eAAO,MAAM,iBAAiB,IAAI,CAAC;AACnC;;;;GAIG;AACH,eAAO,MAAM,uBAAuB,KAAK,CAAC;AAI1C;;;GAGG;AACH,MAAM,MAAM,cAAc,GAAG,MAAM,CAAC,UAAU,CAAC;AAE/C,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC;IAC5B,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;IACzB,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;IACxB,0EAA0E;IAC1E,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IACvB,4DAA4D;IAC5D,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,8BAA8B;IAC9B,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,kEAAkE;IAClE,QAAQ,CAAC,eAAe,EAAE,OAAO,CAAC;IAClC,uCAAuC;IACvC,QAAQ,CAAC,YAAY,EAAE,OAAO,CAAC;IAC/B,mEAAmE;IACnE,QAAQ,CAAC,WAAW,EAAE,OAAO,CAAC;IAC9B;;;OAGG;IACH,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC;IAC7B,yEAAyE;IACzE,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,+CAA+C;IAC/C,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,oEAAoE;IACpE,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC;IAC7B,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IACvB,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;CAC3B;AAED,wBAAgB,YAAY,CAC1B,IAAI,EAAE,SAAS,MAAM,EAAE,EACvB,WAAW,EAAE,cAAc,EAC3B,QAAQ,GAAE,gBAA0C,GACnD,UAAU,CA2GZ;AAED,wBAAgB,QAAQ,CACtB,QAAQ,GAAE,gBAA0C,GACnD,MAAM,CAoCR"}
+{"version":3,"file":"cli-options.d.ts","sourceRoot":"","sources":["../src/cli-options.ts"],"names":[],"mappings":"AAKA,eAAO,MAAM,OAAO,QAC6D,CAAC;AAElF,OAAO,EAEL,gBAAgB,EACjB,MAAM,yBAAyB,CAAC;AAGjC,2CAA2C;AAC3C,MAAM,MAAM,QAAQ,GAAG,MAAM,CAAC;AAE9B,eAAO,MAAM,iBAAiB,IAAI,CAAC;AACnC;;;;GAIG;AACH,eAAO,MAAM,uBAAuB,KAAK,CAAC;AAI1C;;;GAGG;AACH,MAAM,MAAM,cAAc,GAAG,MAAM,CAAC,UAAU,CAAC;AAE/C,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC;IAC5B,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;IACzB,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;IACxB,0EAA0E;IAC1E,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IACvB,4DAA4D;IAC5D,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,8BAA8B;IAC9B,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,kEAAkE;IAClE,QAAQ,CAAC,eAAe,EAAE,OAAO,CAAC;IAClC,uCAAuC;IACvC,QAAQ,CAAC,YAAY,EAAE,OAAO,CAAC;IAC/B,mEAAmE;IACnE,QAAQ,CAAC,WAAW,EAAE,OAAO,CAAC;IAC9B;;;OAGG;IACH,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC;IAC7B,8EAA8E;IAC9E,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC;IAC7B,kEAAkE;IAClE,QAAQ,CAAC,cAAc,EAAE,OAAO,CAAC;IACjC,kEAAkE;IAClE,QAAQ,CAAC,WAAW,EAAE,OAAO,CAAC;IAC9B,8DAA8D;IAC9D,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;IACxB,2EAA2E;IAC3E,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,4DAA4D;IAC5D,QAAQ,CAAC,WAAW,EAAE,OAAO,CAAC;IAC9B,yEAAyE;IACzE,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,+CAA+C;IAC/C,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,oEAAoE;IACpE,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC;IAC7B,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IACvB,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;CAC3B;AAED,wBAAgB,YAAY,CAC1B,IAAI,EAAE,SAAS,MAAM,EAAE,EACvB,WAAW,EAAE,cAAc,EAC3B,QAAQ,GAAE,gBAA0C,GACnD,UAAU,CAoIZ;AAED,wBAAgB,QAAQ,CACtB,QAAQ,GAAE,gBAA0C,GACnD,MAAM,CAuDR"}

package/dist/cli-options.js

@@ -29,6 +29,12 @@ export function parseCliArgs(argv, environment, registry = defaultProviderRegist
     let listSessions = false;
     let allowWrites = false;
     let allowShell = false;
+    let extensions = true;
+    let serve = false;
+    let connect;
+    let listServers = false;
+    let listExtensions = false;
+    let forgetTrust = false;
     let maxTurnsExplicit = false;
     let help = false;
     let version = false;
@@ -87,6 +93,25 @@ export function parseCliArgs(argv, environment, registry = defaultProviderRegist
         else if (argument === "--allow-shell") {
             allowShell = true;
         }
+        else if (argument === "--serve") {
+            serve = true;
+        }
+        else if (argument === "--connect") {
+            connect = readOptionValue(argv, index, "--connect");
+            index += 1;
+        }
+        else if (argument === "--servers") {
+            listServers = true;
+        }
+        else if (argument === "--no-extensions") {
+            extensions = false;
+        }
+        else if (argument === "--extensions") {
+            listExtensions = true;
+        }
+        else if (argument === "--forget-trust") {
+            forgetTrust = true;
+        }
         else if (argument === "--context-window") {
             contextWindow = parseContextWindow(readOptionValue(argv, index, "--context-window"));
             index += 1;
@@ -124,6 +149,12 @@ export function parseCliArgs(argv, environment, registry = defaultProviderRegist
         listSessions,
         allowWrites,
         allowShell,
+        extensions,
+        serve,
+        ...(connect === undefined ? {} : { connect }),
+        listServers,
+        listExtensions,
+        forgetTrust,
         ...(apiKey === undefined ? {} : { apiKey }),
         contextWindow,
         compaction,
@@ -152,6 +183,12 @@ Options:
   --allow-writes   Let the agent create and change files (default: read-only)
   --allow-shell    Let the agent run shell commands. This implies write access:
                    a shell is not bound by the workspace. Unix only.
+  --serve          Expose this session on a local socket and keep running
+  --connect TARGET Attach to a served session, by id or socket path
+  --servers        List the servers still answering, then exit
+  --no-extensions  Do not load any extension, and do not ask about trust
+  --extensions     List loaded extensions and what they register, then exit
+  --forget-trust   Forget the trust decision covering this workspace, then exit
   --context-window N  Token budget for the context (default: ${DEFAULT_CONTEXT_WINDOW})
   --no-compaction  Send the whole transcript instead of summarising old turns
   --no-session     Do not record this run
@@ -163,9 +200,22 @@ API keys are resolved in this order, first match wins:
 
 Providers:
 ${describeProviders(registry)}
+Extensions:
+  <CHIVGENT_HOME>/extensions/*.js   Always loaded
+  <workspace>/.chivgent/extensions/*.js
+                   Loaded only after you trust the project. An extension runs
+                   as code inside chivgent, with your permissions, and is not
+                   limited by the workspace.
+
+Remote sessions:
+  chivgent --serve             Hold a session and expose it locally
+  chivgent --connect ID        Attach from another terminal
+  Anyone who can reach the socket gets everything the server was started with.
+  Sockets live in <CHIVGENT_HOME>/sockets, an owner-only directory.
+
 Environment:
   OPENAI_BASE_URL  Required when --provider openai-compatible
-  CHIVGENT_HOME    Session and auth directory (default: ~/.chivgent)
+  CHIVGENT_HOME    Session, auth, trust and extension directory (default: ~/.chivgent)
 `;
 }
 function describeProviders(registry) {

package/dist/cli-options.js.map

@@ -1 +1 @@
-{"version":3,"file":"cli-options.js","sourceRoot":"","sources":["../src/cli-options.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAE5C,MAAM,OAAO,GAAG,aAAa,CAAC,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC;AAC/C,MAAM,eAAe,GAAG,OAAO,CAAC,iBAAiB,CAAmC,CAAC;AAErF,MAAM,CAAC,MAAM,OAAO,GAClB,OAAO,eAAe,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC;AAElF,OAAO,EACL,uBAAuB,EACvB,gBAAgB,GACjB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,sBAAsB,EAAE,MAAM,8BAA8B,CAAC;AAKtE,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC;AACnC;;;;GAIG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,EAAE,CAAC;AAC1C,MAAM,kBAAkB,GAAG,KAAK,CAAC;AACjC,MAAM,aAAa,GAAG,GAAG,CAAC;AA2C1B,MAAM,UAAU,YAAY,CAC1B,IAAuB,EACvB,WAA2B,EAC3B,QAAQ,GAAqB,uBAAuB;IAEpD,IAAI,QAAQ,GAAa,QAAQ,CAAC;IAClC,IAAI,cAAkC,CAAC;IACvC,IAAI,MAA0B,CAAC;IAC/B,IAAI,aAAa,GAAG,sBAAsB,CAAC;IAC3C,IAAI,UAAU,GAAG,IAAI,CAAC;IACtB,IAAI,QAAQ,GAAG,iBAAiB,CAAC;IACjC,IAAI,MAAM,GAAG,IAAI,CAAC;IAClB,IAAI,KAAK,GAAG,KAAK,CAAC;IAClB,IAAI,IAAI,GAAG,KAAK,CAAC;IACjB,IAAI,OAAO,GAAG,IAAI,CAAC;IACnB,IAAI,MAA0B,CAAC;IAC/B,IAAI,eAAe,GAAG,KAAK,CAAC;IAC5B,IAAI,YAAY,GAAG,KAAK,CAAC;IACzB,IAAI,WAAW,GAAG,KAAK,CAAC;IACxB,IAAI,UAAU,GAAG,KAAK,CAAC;IACvB,IAAI,gBAAgB,GAAG,KAAK,CAAC;IAC7B,IAAI,IAAI,GAAG,KAAK,CAAC;IACjB,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,MAAM,WAAW,GAAa,EAAE,CAAC;IAEjC,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,IAAI,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QACpD,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC;QAC7B,IAAI,QAAQ,KAAK,QAAQ,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;YAC/C,IAAI,GAAG,IAAI,CAAC;QACd,CAAC;aAAM,IAAI,QAAQ,KAAK,WAAW,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;YACzD,OAAO,GAAG,IAAI,CAAC;QACjB,CAAC;aAAM,IAAI,QAAQ,KAAK,YAAY,EAAE,CAAC;YACrC,MAAM,KAAK,GAAG,eAAe,CAAC,IAAI,EAAE,KAAK,EAAE,YAAY,CAAC,CAAC;YACzD,QAAQ,GAAG,aAAa,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;YAC1C,KAAK,IAAI,CAAC,CAAC;QACb,CAAC;aAAM,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAClC,cAAc,GAAG,eAAe,CAAC,IAAI,EAAE,KAAK,EAAE,SAAS,CAAC,CAAC;YACzD,KAAK,IAAI,CAAC,CAAC;QACb,CAAC;aAAM,IAAI,QAAQ,KAAK,WAAW,EAAE,CAAC;YACpC,MAAM,GAAG,eAAe,CAAC,IAAI,EAAE,KAAK,EAAE,WAAW,CAAC,CAAC;YACnD,KAAK,IAAI,CAAC,CAAC;QACb,CAAC;aAAM,IAAI,QAAQ,KAAK,aAAa,EAAE,CAAC;YACtC,QAAQ,GAAG,aAAa,CAAC,eAAe,CAAC,IAAI,EAAE,KAAK,EAAE,aAAa,CAAC,CAAC,CAAC;YACtE,gBAAgB,GAAG,IAAI,CAAC;YACxB,KAAK,IAAI,CAAC,CAAC;QACb,CAAC;aAAM,IAAI,QAAQ,KAAK,aAAa,EAAE,CAAC;YACtC,MAAM,GAAG,KAAK,CAAC;QACjB,CAAC;aAAM,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;YACvD,KAAK,GAAG,IAAI,CAAC;QACf,CAAC;aAAM,IAAI,QAAQ,KAAK,QAAQ,EAAE,CAAC;YACjC,IAAI,GAAG,IAAI,CAAC;QACd,CAAC;aAAM,IAAI,QAAQ,KAAK,cAAc,EAAE,CAAC;YACvC,OAAO,GAAG,KAAK,CAAC;QAClB,CAAC;aAAM,IAAI,QAAQ,KAAK,UAAU,EAAE,CAAC;YACnC,MAAM,GAAG,eAAe,CAAC,IAAI,EAAE,KAAK,EAAE,UAAU,CAAC,CAAC;YAClD,KAAK,IAAI,CAAC,CAAC;QACb,CAAC;aAAM,IAAI,QAAQ,KAAK,YAAY,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;YAC1D,eAAe,GAAG,IAAI,CAAC;QACzB,CAAC;aAAM,IAAI,QAAQ,KAAK,YAAY,EAAE,CAAC;YACrC,YAAY,GAAG,IAAI,CAAC;QACtB,CAAC;aAAM,IAAI,QAAQ,KAAK,gBAAgB,EAAE,CAAC;YACzC,WAAW,GAAG,IAAI,CAAC;QACrB,CAAC;aAAM,IAAI,QAAQ,KAAK,eAAe,EAAE,CAAC;YACxC,UAAU,GAAG,IAAI,CAAC;QACpB,CAAC;aAAM,IAAI,QAAQ,KAAK,kBAAkB,EAAE,CAAC;YAC3C,aAAa,GAAG,kBAAkB,CAChC,eAAe,CAAC,IAAI,EAAE,KAAK,EAAE,kBAAkB,CAAC,CACjD,CAAC;YACF,KAAK,IAAI,CAAC,CAAC;QACb,CAAC;aAAM,IAAI,QAAQ,KAAK,iBAAiB,EAAE,CAAC;YAC1C,UAAU,GAAG,KAAK,CAAC;QACrB,CAAC;aAAM,IAAI,QAAQ,EAAE,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YACrC,MAAM,IAAI,SAAS,CAAC,mBAAmB,QAAQ,EAAE,CAAC,CAAC;QACrD,CAAC;aAAM,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAClC,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC7B,CAAC;IACH,CAAC;IAED,MAAM,UAAU,GAAG,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC1C,MAAM,KAAK,GACT,cAAc;QACd,qBAAqB,CAAC,WAAW,EAAE,UAAU,CAAC,YAAY,CAAC;QAC3D,UAAU,CAAC,YAAY,CAAC;IAC1B,MAAM,OAAO,GACX,qBAAqB,CAAC,WAAW,EAAE,UAAU,CAAC,cAAc,CAAC;QAC7D,UAAU,CAAC,cAAc,CAAC;IAE5B,OAAO;QACL,GAAG,CAAC,WAAW,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QACtE,QAAQ;QACR,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC;QACzC,GAAG,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC;QAC7C,QAAQ,EACN,CAAC,WAAW,IAAI,UAAU,CAAC,IAAI,CAAC,gBAAgB;YAC9C,CAAC,CAAC,uBAAuB;YACzB,CAAC,CAAC,QAAQ;QACd,MAAM;QACN,KAAK;QACL,IAAI;QACJ,OAAO;QACP,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC;QAC3C,eAAe;QACf,YAAY;QACZ,WAAW;QACX,UAAU;QACV,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC;QAC3C,aAAa;QACb,UAAU;QACV,IAAI;QACJ,OAAO;KACR,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,QAAQ,CACtB,QAAQ,GAAqB,uBAAuB;IAEpD,OAAO,YAAY,OAAO;;;;;;;qBAOP,QAAQ,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC;;;uDAGS,iBAAiB,KAAK,uBAAuB;;;;;;;;;;+DAUrC,sBAAsB;;;;;;;;;;EAUnF,iBAAiB,CAAC,QAAQ,CAAC;;;;CAI5B,CAAC;AACF,CAAC;AAED,SAAS,iBAAiB,CAAC,QAA0B;IACnD,MAAM,GAAG,GAAG,QAAQ,CAAC,GAAG,EAAE,CAAC;IAC3B,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC;IAC1D,OAAO,GAAG;SACP,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE;QACV,MAAM,UAAU,GAAG,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACpC,MAAM,KAAK,GACT,UAAU,CAAC,YAAY,KAAK,SAAS;YACnC,CAAC,CAAC,gBAAgB;YAClB,CAAC,CAAC,WAAW,UAAU,CAAC,YAAY,EAAE,CAAC;QAC3C,OAAO,KAAK,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,KAAK,GAAG,CAAC;IAC5E,CAAC,CAAC;SACD,IAAI,CAAC,IAAI,CAAC,CAAC;AAChB,CAAC;AAED,SAAS,eAAe,CACtB,IAAuB,EACvB,KAAa,EACb,MAAc;IAEd,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;IAC9B,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACjD,MAAM,IAAI,SAAS,CAAC,GAAG,MAAM,oBAAoB,CAAC,CAAC;IACrD,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAa;IACvC,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAC7B,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,kBAAkB,EAAE,CAAC;QACjE,MAAM,IAAI,SAAS,CACjB,mDAAmD,kBAAkB,GAAG,CACzE,CAAC;IACJ,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,aAAa,CAAC,KAAa;IAClC,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAC7B,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,CAAC,IAAI,MAAM,GAAG,aAAa,EAAE,CAAC;QAC1E,MAAM,IAAI,SAAS,CACjB,4CAA4C,aAAa,GAAG,CAC7D,CAAC;IACJ,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,aAAa,CAAC,KAAa,EAAE,QAA0B;IAC9D,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,IAAI,SAAS,CACjB,yBAAyB,KAAK,qBAAqB,QAAQ,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAChF,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,qBAAqB,CAC5B,WAA2B,EAC3B,IAAuB;IAEvB,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;QAC/B,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC5C,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC"}
+{"version":3,"file":"cli-options.js","sourceRoot":"","sources":["../src/cli-options.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAE5C,MAAM,OAAO,GAAG,aAAa,CAAC,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC;AAC/C,MAAM,eAAe,GAAG,OAAO,CAAC,iBAAiB,CAAmC,CAAC;AAErF,MAAM,CAAC,MAAM,OAAO,GAClB,OAAO,eAAe,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC;AAElF,OAAO,EACL,uBAAuB,EACvB,gBAAgB,GACjB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,sBAAsB,EAAE,MAAM,8BAA8B,CAAC;AAKtE,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC;AACnC;;;;GAIG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,EAAE,CAAC;AAC1C,MAAM,kBAAkB,GAAG,KAAK,CAAC;AACjC,MAAM,aAAa,GAAG,GAAG,CAAC;AAuD1B,MAAM,UAAU,YAAY,CAC1B,IAAuB,EACvB,WAA2B,EAC3B,QAAQ,GAAqB,uBAAuB;IAEpD,IAAI,QAAQ,GAAa,QAAQ,CAAC;IAClC,IAAI,cAAkC,CAAC;IACvC,IAAI,MAA0B,CAAC;IAC/B,IAAI,aAAa,GAAG,sBAAsB,CAAC;IAC3C,IAAI,UAAU,GAAG,IAAI,CAAC;IACtB,IAAI,QAAQ,GAAG,iBAAiB,CAAC;IACjC,IAAI,MAAM,GAAG,IAAI,CAAC;IAClB,IAAI,KAAK,GAAG,KAAK,CAAC;IAClB,IAAI,IAAI,GAAG,KAAK,CAAC;IACjB,IAAI,OAAO,GAAG,IAAI,CAAC;IACnB,IAAI,MAA0B,CAAC;IAC/B,IAAI,eAAe,GAAG,KAAK,CAAC;IAC5B,IAAI,YAAY,GAAG,KAAK,CAAC;IACzB,IAAI,WAAW,GAAG,KAAK,CAAC;IACxB,IAAI,UAAU,GAAG,KAAK,CAAC;IACvB,IAAI,UAAU,GAAG,IAAI,CAAC;IACtB,IAAI,KAAK,GAAG,KAAK,CAAC;IAClB,IAAI,OAA2B,CAAC;IAChC,IAAI,WAAW,GAAG,KAAK,CAAC;IACxB,IAAI,cAAc,GAAG,KAAK,CAAC;IAC3B,IAAI,WAAW,GAAG,KAAK,CAAC;IACxB,IAAI,gBAAgB,GAAG,KAAK,CAAC;IAC7B,IAAI,IAAI,GAAG,KAAK,CAAC;IACjB,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,MAAM,WAAW,GAAa,EAAE,CAAC;IAEjC,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,IAAI,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QACpD,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC;QAC7B,IAAI,QAAQ,KAAK,QAAQ,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;YAC/C,IAAI,GAAG,IAAI,CAAC;QACd,CAAC;aAAM,IAAI,QAAQ,KAAK,WAAW,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;YACzD,OAAO,GAAG,IAAI,CAAC;QACjB,CAAC;aAAM,IAAI,QAAQ,KAAK,YAAY,EAAE,CAAC;YACrC,MAAM,KAAK,GAAG,eAAe,CAAC,IAAI,EAAE,KAAK,EAAE,YAAY,CAAC,CAAC;YACzD,QAAQ,GAAG,aAAa,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;YAC1C,KAAK,IAAI,CAAC,CAAC;QACb,CAAC;aAAM,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAClC,cAAc,GAAG,eAAe,CAAC,IAAI,EAAE,KAAK,EAAE,SAAS,CAAC,CAAC;YACzD,KAAK,IAAI,CAAC,CAAC;QACb,CAAC;aAAM,IAAI,QAAQ,KAAK,WAAW,EAAE,CAAC;YACpC,MAAM,GAAG,eAAe,CAAC,IAAI,EAAE,KAAK,EAAE,WAAW,CAAC,CAAC;YACnD,KAAK,IAAI,CAAC,CAAC;QACb,CAAC;aAAM,IAAI,QAAQ,KAAK,aAAa,EAAE,CAAC;YACtC,QAAQ,GAAG,aAAa,CAAC,eAAe,CAAC,IAAI,EAAE,KAAK,EAAE,aAAa,CAAC,CAAC,CAAC;YACtE,gBAAgB,GAAG,IAAI,CAAC;YACxB,KAAK,IAAI,CAAC,CAAC;QACb,CAAC;aAAM,IAAI,QAAQ,KAAK,aAAa,EAAE,CAAC;YACtC,MAAM,GAAG,KAAK,CAAC;QACjB,CAAC;aAAM,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;YACvD,KAAK,GAAG,IAAI,CAAC;QACf,CAAC;aAAM,IAAI,QAAQ,KAAK,QAAQ,EAAE,CAAC;YACjC,IAAI,GAAG,IAAI,CAAC;QACd,CAAC;aAAM,IAAI,QAAQ,KAAK,cAAc,EAAE,CAAC;YACvC,OAAO,GAAG,KAAK,CAAC;QAClB,CAAC;aAAM,IAAI,QAAQ,KAAK,UAAU,EAAE,CAAC;YACnC,MAAM,GAAG,eAAe,CAAC,IAAI,EAAE,KAAK,EAAE,UAAU,CAAC,CAAC;YAClD,KAAK,IAAI,CAAC,CAAC;QACb,CAAC;aAAM,IAAI,QAAQ,KAAK,YAAY,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;YAC1D,eAAe,GAAG,IAAI,CAAC;QACzB,CAAC;aAAM,IAAI,QAAQ,KAAK,YAAY,EAAE,CAAC;YACrC,YAAY,GAAG,IAAI,CAAC;QACtB,CAAC;aAAM,IAAI,QAAQ,KAAK,gBAAgB,EAAE,CAAC;YACzC,WAAW,GAAG,IAAI,CAAC;QACrB,CAAC;aAAM,IAAI,QAAQ,KAAK,eAAe,EAAE,CAAC;YACxC,UAAU,GAAG,IAAI,CAAC;QACpB,CAAC;aAAM,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAClC,KAAK,GAAG,IAAI,CAAC;QACf,CAAC;aAAM,IAAI,QAAQ,KAAK,WAAW,EAAE,CAAC;YACpC,OAAO,GAAG,eAAe,CAAC,IAAI,EAAE,KAAK,EAAE,WAAW,CAAC,CAAC;YACpD,KAAK,IAAI,CAAC,CAAC;QACb,CAAC;aAAM,IAAI,QAAQ,KAAK,WAAW,EAAE,CAAC;YACpC,WAAW,GAAG,IAAI,CAAC;QACrB,CAAC;aAAM,IAAI,QAAQ,KAAK,iBAAiB,EAAE,CAAC;YAC1C,UAAU,GAAG,KAAK,CAAC;QACrB,CAAC;aAAM,IAAI,QAAQ,KAAK,cAAc,EAAE,CAAC;YACvC,cAAc,GAAG,IAAI,CAAC;QACxB,CAAC;aAAM,IAAI,QAAQ,KAAK,gBAAgB,EAAE,CAAC;YACzC,WAAW,GAAG,IAAI,CAAC;QACrB,CAAC;aAAM,IAAI,QAAQ,KAAK,kBAAkB,EAAE,CAAC;YAC3C,aAAa,GAAG,kBAAkB,CAChC,eAAe,CAAC,IAAI,EAAE,KAAK,EAAE,kBAAkB,CAAC,CACjD,CAAC;YACF,KAAK,IAAI,CAAC,CAAC;QACb,CAAC;aAAM,IAAI,QAAQ,KAAK,iBAAiB,EAAE,CAAC;YAC1C,UAAU,GAAG,KAAK,CAAC;QACrB,CAAC;aAAM,IAAI,QAAQ,EAAE,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YACrC,MAAM,IAAI,SAAS,CAAC,mBAAmB,QAAQ,EAAE,CAAC,CAAC;QACrD,CAAC;aAAM,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAClC,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC7B,CAAC;IACH,CAAC;IAED,MAAM,UAAU,GAAG,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC1C,MAAM,KAAK,GACT,cAAc;QACd,qBAAqB,CAAC,WAAW,EAAE,UAAU,CAAC,YAAY,CAAC;QAC3D,UAAU,CAAC,YAAY,CAAC;IAC1B,MAAM,OAAO,GACX,qBAAqB,CAAC,WAAW,EAAE,UAAU,CAAC,cAAc,CAAC;QAC7D,UAAU,CAAC,cAAc,CAAC;IAE5B,OAAO;QACL,GAAG,CAAC,WAAW,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QACtE,QAAQ;QACR,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC;QACzC,GAAG,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC;QAC7C,QAAQ,EACN,CAAC,WAAW,IAAI,UAAU,CAAC,IAAI,CAAC,gBAAgB;YAC9C,CAAC,CAAC,uBAAuB;YACzB,CAAC,CAAC,QAAQ;QACd,MAAM;QACN,KAAK;QACL,IAAI;QACJ,OAAO;QACP,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC;QAC3C,eAAe;QACf,YAAY;QACZ,WAAW;QACX,UAAU;QACV,UAAU;QACV,KAAK;QACL,GAAG,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC;QAC7C,WAAW;QACX,cAAc;QACd,WAAW;QACX,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC;QAC3C,aAAa;QACb,UAAU;QACV,IAAI;QACJ,OAAO;KACR,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,QAAQ,CACtB,QAAQ,GAAqB,uBAAuB;IAEpD,OAAO,YAAY,OAAO;;;;;;;qBAOP,QAAQ,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC;;;uDAGS,iBAAiB,KAAK,uBAAuB;;;;;;;;;;;;;;;;+DAgBrC,sBAAsB;;;;;;;;;;EAUnF,iBAAiB,CAAC,QAAQ,CAAC;;;;;;;;;;;;;;;;;CAiB5B,CAAC;AACF,CAAC;AAED,SAAS,iBAAiB,CAAC,QAA0B;IACnD,MAAM,GAAG,GAAG,QAAQ,CAAC,GAAG,EAAE,CAAC;IAC3B,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC;IAC1D,OAAO,GAAG;SACP,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE;QACV,MAAM,UAAU,GAAG,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACpC,MAAM,KAAK,GACT,UAAU,CAAC,YAAY,KAAK,SAAS;YACnC,CAAC,CAAC,gBAAgB;YAClB,CAAC,CAAC,WAAW,UAAU,CAAC,YAAY,EAAE,CAAC;QAC3C,OAAO,KAAK,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,KAAK,GAAG,CAAC;IAC5E,CAAC,CAAC;SACD,IAAI,CAAC,IAAI,CAAC,CAAC;AAChB,CAAC;AAED,SAAS,eAAe,CACtB,IAAuB,EACvB,KAAa,EACb,MAAc;IAEd,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;IAC9B,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACjD,MAAM,IAAI,SAAS,CAAC,GAAG,MAAM,oBAAoB,CAAC,CAAC;IACrD,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAa;IACvC,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAC7B,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,kBAAkB,EAAE,CAAC;QACjE,MAAM,IAAI,SAAS,CACjB,mDAAmD,kBAAkB,GAAG,CACzE,CAAC;IACJ,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,aAAa,CAAC,KAAa;IAClC,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAC7B,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,CAAC,IAAI,MAAM,GAAG,aAAa,EAAE,CAAC;QAC1E,MAAM,IAAI,SAAS,CACjB,4CAA4C,aAAa,GAAG,CAC7D,CAAC;IACJ,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,aAAa,CAAC,KAAa,EAAE,QAA0B;IAC9D,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,IAAI,SAAS,CACjB,yBAAyB,KAAK,qBAAqB,QAAQ,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAChF,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,qBAAqB,CAC5B,WAA2B,EAC3B,IAAuB;IAEvB,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;QAC/B,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC5C,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC"}