@andyqiu/codeforge 0.5.8 → 0.5.9

package/dist/index.js

@@ -10119,6 +10119,148 @@ var channelsServer = async (ctx) => {
 };
 var handler5 = channelsServer;
 
+// lib/agent-resolver.ts
+var chatAgentCacheReader = null;
+function setChatAgentCacheReader(reader) {
+  chatAgentCacheReader = reader;
+}
+async function resolveCurrentAgent(client, sessionID, log4) {
+  try {
+    const sessionApi = client?.session;
+    if (!sessionApi || typeof sessionApi.get !== "function") {
+      log4.warn(`client.session.get unavailable`, { sessionID });
+      return;
+    }
+    const res = await sessionApi.get({ path: { id: sessionID } });
+    const data = res?.data ?? res;
+    const rawAgent = data?.agent;
+    if (typeof rawAgent !== "string" || rawAgent === "") {
+      log4.warn(`client.session.get returned no string agent (返回 undefined)`, {
+        sessionID,
+        dataKeys: data && typeof data === "object" ? Object.keys(data) : null
+      });
+      return;
+    }
+    return rawAgent;
+  } catch (err) {
+    log4.warn(`client.session.get failed (返回 undefined)`, {
+      sessionID,
+      error: err instanceof Error ? err.message : String(err)
+    });
+    return;
+  }
+}
+async function resolveAgentForGuard(input, client, log4, opts = {}) {
+  if (typeof input.agent === "string" && input.agent.length > 0) {
+    return input.agent;
+  }
+  if (!opts.skipCache && chatAgentCacheReader) {
+    try {
+      const cached = chatAgentCacheReader(input.sessionID);
+      if (typeof cached === "string" && cached.length > 0) {
+        return cached;
+      }
+    } catch (err) {
+      log4.warn(`chat-agent-cache reader failed (降级到 L2 IPC)`, {
+        sessionID: input.sessionID,
+        error: err instanceof Error ? err.message : String(err)
+      });
+    }
+  }
+  if (!opts.skipIpcLookup) {
+    const viaSession = await resolveCurrentAgent(client, input.sessionID, log4);
+    if (typeof viaSession === "string" && viaSession.length > 0) {
+      return viaSession;
+    }
+  }
+  return null;
+}
+
+// plugins/chat-agent-cache.ts
+var PLUGIN_NAME6 = "chat-agent-cache";
+logLifecycle(PLUGIN_NAME6, "import", {});
+var SESSION_CAP = 500;
+var SESSION_TTL_MS = 24 * 60 * 60 * 1000;
+var sessionAgentMap = new Map;
+function pruneIfOversize() {
+  while (sessionAgentMap.size > SESSION_CAP) {
+    const oldestKey = sessionAgentMap.keys().next().value;
+    if (oldestKey === undefined)
+      break;
+    sessionAgentMap.delete(oldestKey);
+  }
+}
+function isExpired(entry, now = Date.now()) {
+  return now - entry.ts > SESSION_TTL_MS;
+}
+function rememberSessionAgent(sessionID, agent) {
+  if (typeof sessionID !== "string" || sessionID.length === 0)
+    return;
+  if (typeof agent !== "string" || agent.length === 0)
+    return;
+  sessionAgentMap.set(sessionID, { agent, ts: Date.now() });
+  pruneIfOversize();
+}
+function readSessionAgent(sessionID) {
+  if (typeof sessionID !== "string" || sessionID.length === 0)
+    return null;
+  const entry = sessionAgentMap.get(sessionID);
+  if (!entry)
+    return null;
+  if (isExpired(entry)) {
+    sessionAgentMap.delete(sessionID);
+    return null;
+  }
+  return entry.agent;
+}
+var chatAgentCachePlugin = async (ctx) => {
+  setChatAgentCacheReader(readSessionAgent);
+  logLifecycle(PLUGIN_NAME6, "activate", {
+    directory: ctx.directory,
+    session_cap: SESSION_CAP,
+    session_ttl_ms: SESSION_TTL_MS
+  });
+  return {
+    "chat.params": async (input, _output) => {
+      await safeAsync(PLUGIN_NAME6, "chat.params", async () => {
+        const sid = input?.sessionID;
+        const agent = input?.agent;
+        if (typeof sid !== "string" || sid.length === 0)
+          return;
+        if (typeof agent !== "string" || agent.length === 0)
+          return;
+        rememberSessionAgent(sid, agent);
+        safeWriteLog(PLUGIN_NAME6, {
+          hook: "chat.params",
+          sessionID: sid,
+          agent,
+          action: "cache",
+          map_size: sessionAgentMap.size
+        });
+      });
+    },
+    "chat.message": async (input, _output) => {
+      await safeAsync(PLUGIN_NAME6, "chat.message", async () => {
+        const sid = input?.sessionID;
+        const agent = input?.agent;
+        if (typeof sid !== "string" || sid.length === 0)
+          return;
+        if (typeof agent !== "string" || agent.length === 0)
+          return;
+        rememberSessionAgent(sid, agent);
+        safeWriteLog(PLUGIN_NAME6, {
+          hook: "chat.message",
+          sessionID: sid,
+          agent,
+          action: "cache",
+          map_size: sessionAgentMap.size
+        });
+      });
+    }
+  };
+};
+var handler6 = chatAgentCachePlugin;
+
 // plugins/codeforge-tools.ts
 import { tool } from "@opencode-ai/plugin";
 
@@ -14856,6 +14998,15 @@ ${r.text.slice(0, 800)}`
             err: describe5(err)
           });
         }
+        const mainRoot = this.opts.mainRoot ?? this.opts.directory;
+        if (mainRoot) {
+          const cid = childId;
+          discardSession({ sessionId: cid, mainRoot }).catch((err) => {
+            this.opts.log?.("warn", `[spawner] auto-discard 失败 ${cid}`, {
+              err: describe5(err)
+            });
+          });
+        }
       }
     }
   }
@@ -14955,7 +15106,6 @@ import { promises as fs14 } from "node:fs";
 import * as path17 from "node:path";
 var DEFAULT_RUNTIME = {
   autonomy: {
-    default_mode: "semi",
     downgrade_on_risky: true
   },
   runtime: {
@@ -15039,13 +15189,6 @@ function parseRuntime(raw, abs) {
   const cfg = cloneDefaults();
   if (root.autonomy && typeof root.autonomy === "object" && !Array.isArray(root.autonomy)) {
     const a = root.autonomy;
-    if (a.default_mode !== undefined) {
-      if (a.default_mode === "step" || a.default_mode === "semi" || a.default_mode === "full") {
-        cfg.autonomy.default_mode = a.default_mode;
-      } else {
-        warnings.push(`autonomy.default_mode invalid: ${String(a.default_mode)} (keep ${cfg.autonomy.default_mode})`);
-      }
-    }
     if (a.downgrade_on_risky !== undefined) {
       if (typeof a.downgrade_on_risky === "boolean") {
         cfg.autonomy.downgrade_on_risky = a.downgrade_on_risky;
@@ -15165,8 +15308,8 @@ function parseRuntime(raw, abs) {
 }
 
 // plugins/tool-heartbeat.ts
-var PLUGIN_NAME6 = "tool-heartbeat";
-logLifecycle(PLUGIN_NAME6, "import", {});
+var PLUGIN_NAME7 = "tool-heartbeat";
+logLifecycle(PLUGIN_NAME7, "import", {});
 var HEARTBEAT_INTERVAL_MS = 15000;
 var ALERT_30S_MS = 30000;
 var ALERT_60S_MS = 60000;
@@ -15248,15 +15391,15 @@ async function showToast(client, payload, log5) {
     return false;
   }
 }
-var log5 = makePluginLogger(PLUGIN_NAME6);
+var log5 = makePluginLogger(PLUGIN_NAME7);
 var toolHeartbeatServer = async (ctx) => {
-  logLifecycle(PLUGIN_NAME6, "activate", {
+  logLifecycle(PLUGIN_NAME7, "activate", {
     directory: ctx.directory,
     intervalMs: HEARTBEAT_INTERVAL_MS
   });
   const client = ctx.client;
   const interval = setInterval(() => {
-    safeAsync(PLUGIN_NAME6, "interval", async () => {
+    safeAsync(PLUGIN_NAME7, "interval", async () => {
       if (inflight.size === 0)
         return;
       const records = [...inflight.values()];
@@ -15266,7 +15409,7 @@ var toolHeartbeatServer = async (ctx) => {
           continue;
         const sent = await showToast(client, { message: alert.message, variant: alert.variant }, log5);
         r.alertsSent.add(alert.threshold);
-        safeWriteLog(PLUGIN_NAME6, {
+        safeWriteLog(PLUGIN_NAME7, {
           hook: "interval",
           tool: r.toolName,
           callID: r.callID,
@@ -15284,12 +15427,12 @@ var toolHeartbeatServer = async (ctx) => {
     event: async () => {}
   };
 };
-var handler6 = toolHeartbeatServer;
+var handler7 = toolHeartbeatServer;
 
 // plugins/codeforge-tools.ts
 var z30 = tool.schema;
-var PLUGIN_NAME7 = "codeforge-tools";
-logLifecycle(PLUGIN_NAME7, "import");
+var PLUGIN_NAME8 = "codeforge-tools";
+logLifecycle(PLUGIN_NAME8, "import");
 function wrap(output, metadata) {
   const text = typeof output === "string" ? output : JSON.stringify(output, null, 2);
   return metadata && Object.keys(metadata).length > 0 ? { output: text, metadata } : { output: text };
@@ -15299,7 +15442,7 @@ async function runSafe(toolName, fn) {
     return await fn();
   } catch (err) {
     const msg = err instanceof Error ? err.message : String(err);
-    safeWriteLog(PLUGIN_NAME7, {
+    safeWriteLog(PLUGIN_NAME8, {
       level: "error",
       tool: toolName,
       error: msg
@@ -15696,7 +15839,7 @@ var codeforgeToolsServer = async (ctx) => {
   const rt = loadRuntimeSync({ root: ctx.directory });
   const browserEnabled = rt.runtime.tools.browser.enabled;
   const activeTools = browserEnabled ? [...CORE_TOOL_NAMES, ...BROWSER_TOOL_NAMES] : [...CORE_TOOL_NAMES];
-  logLifecycle(PLUGIN_NAME7, "activate", {
+  logLifecycle(PLUGIN_NAME8, "activate", {
     directory: ctx.directory,
     tools: activeTools,
     count: activeTools.length,
@@ -15711,7 +15854,8 @@ var codeforgeToolsServer = async (ctx) => {
   const spawner = new ProductionSpawner({
     client: ctx.client,
     directory: ctx.directory ?? process.cwd(),
-    log: (level, msg, data) => safeWriteLog(PLUGIN_NAME7, { level, msg, data })
+    mainRoot: ctx.directory ?? process.cwd(),
+    log: (level, msg, data) => safeWriteLog(PLUGIN_NAME8, { level, msg, data })
   });
   __setContext({
     mainRoot: ctx.directory ?? process.cwd(),
@@ -16003,7 +16147,7 @@ var codeforgeToolsServer = async (ctx) => {
     }
   };
 };
-var handler7 = codeforgeToolsServer;
+var handler8 = codeforgeToolsServer;
 
 // plugins/discover-spec-suggest.ts
 import { readFileSync as readFileSync3, readdirSync, statSync as statSync3 } from "node:fs";
@@ -16185,26 +16329,26 @@ function isValidSlug(slug) {
 }
 
 // plugins/discover-spec-suggest.ts
-var PLUGIN_NAME8 = "discover-spec-suggest";
-logLifecycle(PLUGIN_NAME8, "import", {});
+var PLUGIN_NAME9 = "discover-spec-suggest";
+logLifecycle(PLUGIN_NAME9, "import", {});
 var TARGET_AGENT = "codeforge";
-var SESSION_CAP = 200;
-var SESSION_TTL_MS = 24 * 60 * 60 * 1000;
+var SESSION_CAP2 = 200;
+var SESSION_TTL_MS2 = 24 * 60 * 60 * 1000;
 var MATCH_THRESHOLD = 0.15;
 var MAX_CANDIDATES = 3;
 var NUDGE_MAX_LEN = 1500;
 var SPECS_REL_DIR = join14(".codeforge", "specs");
 var sessionMap = new Map;
-function pruneIfOversize() {
-  while (sessionMap.size > SESSION_CAP) {
+function pruneIfOversize2() {
+  while (sessionMap.size > SESSION_CAP2) {
     const oldestKey = sessionMap.keys().next().value;
     if (oldestKey === undefined)
       break;
     sessionMap.delete(oldestKey);
   }
 }
-function isExpired(entry, now = Date.now()) {
-  return now - entry.ts > SESSION_TTL_MS;
+function isExpired2(entry, now = Date.now()) {
+  return now - entry.ts > SESSION_TTL_MS2;
 }
 var specIndex = [];
 function defaultReader(p) {
@@ -16299,7 +16443,7 @@ function loadSpecs(rootDir, opts = {}) {
   const dirReader = opts.dirReader ?? defaultDirReader;
   const dirExists = opts.dirExists ?? defaultDirExists;
   const statReader = opts.statReader ?? defaultStatReader;
-  const log6 = makePluginLogger(PLUGIN_NAME8);
+  const log6 = makePluginLogger(PLUGIN_NAME9);
   const specsRoot = join14(rootDir, SPECS_REL_DIR);
   const records = [];
   if (!dirExists(specsRoot)) {
@@ -16427,7 +16571,7 @@ function renderCandidatesNudge(matched) {
   return body.slice(0, NUDGE_MAX_LEN - 4) + `
 …`;
 }
-var log6 = makePluginLogger(PLUGIN_NAME8);
+var log6 = makePluginLogger(PLUGIN_NAME9);
 var discoverSpecSuggestServer = async (ctx) => {
   try {
     const loaded = loadSpecs(ctx.directory ?? process.cwd());
@@ -16438,19 +16582,19 @@ var discoverSpecSuggestServer = async (ctx) => {
       error: err instanceof Error ? err.message : String(err)
     });
   }
-  logLifecycle(PLUGIN_NAME8, "activate", {
+  logLifecycle(PLUGIN_NAME9, "activate", {
     directory: ctx.directory,
     specs_loaded: specIndex.length,
     target_agent: TARGET_AGENT,
     match_threshold: MATCH_THRESHOLD,
     max_candidates: MAX_CANDIDATES,
-    session_cap: SESSION_CAP,
-    session_ttl_ms: SESSION_TTL_MS,
+    session_cap: SESSION_CAP2,
+    session_ttl_ms: SESSION_TTL_MS2,
     no_op: specIndex.length === 0
   });
   return {
     "chat.message": async (input, output) => {
-      await safeAsync(PLUGIN_NAME8, "chat.message", async () => {
+      await safeAsync(PLUGIN_NAME9, "chat.message", async () => {
         if (specIndex.length === 0)
           return;
         const text = extractUserText(output);
@@ -16461,11 +16605,11 @@ var discoverSpecSuggestServer = async (ctx) => {
         if (!sid)
           return;
         sessionMap.set(sid, { text, agent, ts: Date.now() });
-        pruneIfOversize();
+        pruneIfOversize2();
       });
     },
     "experimental.chat.system.transform": async (input, output) => {
-      await safeAsync(PLUGIN_NAME8, "experimental.chat.system.transform", async () => {
+      await safeAsync(PLUGIN_NAME9, "experimental.chat.system.transform", async () => {
         if (specIndex.length === 0)
           return;
         if (!output || !Array.isArray(output.system))
@@ -16476,7 +16620,7 @@ var discoverSpecSuggestServer = async (ctx) => {
         const entry = sessionMap.get(sid);
         if (!entry)
           return;
-        if (isExpired(entry)) {
+        if (isExpired2(entry)) {
           sessionMap.delete(sid);
           return;
         }
@@ -16491,7 +16635,7 @@ var discoverSpecSuggestServer = async (ctx) => {
         if (!nudge)
           return;
         output.system.push(nudge);
-        safeWriteLog(PLUGIN_NAME8, {
+        safeWriteLog(PLUGIN_NAME9, {
           hook: "experimental.chat.system.transform",
           sessionID: sid,
           agent: entry.agent,
@@ -16503,7 +16647,7 @@ var discoverSpecSuggestServer = async (ctx) => {
     }
   };
 };
-var handler8 = discoverSpecSuggestServer;
+var handler9 = discoverSpecSuggestServer;
 
 // plugins/kh-auto-context.ts
 init_kh_client();
@@ -16643,7 +16787,7 @@ class SessionScopedCache {
 var sharedKhCache = new SessionScopedCache;
 
 // plugins/kh-auto-context.ts
-var PLUGIN_NAME9 = "kh-auto-context";
+var PLUGIN_NAME10 = "kh-auto-context";
 var INJECTION_MODE = "observe-only";
 function resolveInjectionMode(client) {
   return client.hasTransport() ? "system-injected" : "observe-only";
@@ -16742,7 +16886,7 @@ var CODEFORGE_CONSTRAINTS = [
 ];
 async function seedConstraints(client, log7) {
   if (!client.hasTransport()) {
-    log7?.debug?.(`[${PLUGIN_NAME9}] seedConstraints: transport 不可用，跳过`, {});
+    log7?.debug?.(`[${PLUGIN_NAME10}] seedConstraints: transport 不可用，跳过`, {});
     return { ok: false, reason: "transport_unavailable" };
   }
   try {
@@ -16756,7 +16900,7 @@ async function seedConstraints(client, log7) {
     });
     if (result && typeof result === "object" && "ok" in result && result.ok === false) {
       const r = result;
-      log7?.warn(`[${PLUGIN_NAME9}] seedConstraints 降级`, {
+      log7?.warn(`[${PLUGIN_NAME10}] seedConstraints 降级`, {
         reason: r.reason,
         message: r.message
       });
@@ -16766,11 +16910,11 @@ async function seedConstraints(client, log7) {
         message: r.message
       };
     }
-    log7?.info(`[${PLUGIN_NAME9}] seedConstraints: 已写入 ${CODEFORGE_CONSTRAINTS.length} 条 constraints`, { count: CODEFORGE_CONSTRAINTS.length });
+    log7?.info(`[${PLUGIN_NAME10}] seedConstraints: 已写入 ${CODEFORGE_CONSTRAINTS.length} 条 constraints`, { count: CODEFORGE_CONSTRAINTS.length });
     return { ok: true, itemsWritten: CODEFORGE_CONSTRAINTS.length };
   } catch (err) {
     const message = err instanceof Error ? err.message : String(err);
-    log7?.warn(`[${PLUGIN_NAME9}] seedConstraints 失败（已静默）`, { error: message });
+    log7?.warn(`[${PLUGIN_NAME10}] seedConstraints 失败（已静默）`, { error: message });
     return { ok: false, reason: "exception", message };
   }
 }
@@ -16785,7 +16929,7 @@ function createSystemInjectedHook(client, sessionId, log7) {
       });
       if (result && typeof result === "object" && "ok" in result && result.ok === false) {
         const r = result;
-        log7?.warn(`[${PLUGIN_NAME9}] system-injected 降级到 observe-only：${r.reason ?? "unknown"}`, {
+        log7?.warn(`[${PLUGIN_NAME10}] system-injected 降级到 observe-only：${r.reason ?? "unknown"}`, {
           sessionId,
           section,
           preview: markdown.slice(0, 200),
@@ -16794,12 +16938,12 @@ function createSystemInjectedHook(client, sessionId, log7) {
         });
         return;
       }
-      log7?.info(`[${PLUGIN_NAME9}] system-injected: 写入 KH working_memory 成功 (${markdown.length} chars)`, {
+      log7?.info(`[${PLUGIN_NAME10}] system-injected: 写入 KH working_memory 成功 (${markdown.length} chars)`, {
         sessionId,
         section
       });
     } catch (err) {
-      log7?.warn(`[${PLUGIN_NAME9}] system-injected 抛异常，降级到 observe-only`, {
+      log7?.warn(`[${PLUGIN_NAME10}] system-injected 抛异常，降级到 observe-only`, {
         sessionId,
         section,
         preview: markdown.slice(0, 200),
@@ -16842,7 +16986,7 @@ async function runKhSearchAndInject(args) {
     });
     result = await racer(searchPromise, cfg.timeoutMs);
   } catch (err) {
-    log7?.warn(`[${PLUGIN_NAME9}] client.search threw (sync or async), return null`, {
+    log7?.warn(`[${PLUGIN_NAME10}] client.search threw (sync or async), return null`, {
       query,
       elapsedMs: Date.now() - startedAt,
       sessionId: ctx.sessionId,
@@ -16852,7 +16996,7 @@ async function runKhSearchAndInject(args) {
     return null;
   }
   if (result === "__timeout__") {
-    log7?.warn(`[${PLUGIN_NAME9}] timeout`, {
+    log7?.warn(`[${PLUGIN_NAME10}] timeout`, {
       query,
       ms: cfg.timeoutMs,
       elapsedMs: Date.now() - startedAt,
@@ -16862,7 +17006,7 @@ async function runKhSearchAndInject(args) {
     return null;
   }
   if (!result.ok) {
-    log7?.warn(`[${PLUGIN_NAME9}] kh degraded`, {
+    log7?.warn(`[${PLUGIN_NAME10}] kh degraded`, {
       reason: result.reason,
       query,
       elapsedMs: Date.now() - startedAt,
@@ -16874,7 +17018,7 @@ async function runKhSearchAndInject(args) {
   const filtered = result.insights.filter((i) => (i.confidence ?? 0) >= cfg.minConfidence);
   if (filtered.length === 0) {
     opts.cache.record(query, []);
-    log7?.debug?.(`[${PLUGIN_NAME9}] no candidate above threshold`, {
+    log7?.debug?.(`[${PLUGIN_NAME10}] no candidate above threshold`, {
       query,
       rawCount: result.insights.length,
       elapsedMs: Date.now() - startedAt,
@@ -16887,7 +17031,7 @@ async function runKhSearchAndInject(args) {
     try {
       await ctx.injectContext(payload.markdown);
     } catch (err) {
-      log7?.warn(`[${PLUGIN_NAME9}] injectContext threw`, {
+      log7?.warn(`[${PLUGIN_NAME10}] injectContext threw`, {
         error: err instanceof Error ? err.message : String(err),
         query,
         sessionId: ctx.sessionId
@@ -16895,7 +17039,7 @@ async function runKhSearchAndInject(args) {
     }
   }
   opts.cache.record(query, filtered);
-  log7?.info(`[${PLUGIN_NAME9}] inject complete (${mode})`, {
+  log7?.info(`[${PLUGIN_NAME10}] inject complete (${mode})`, {
     query,
     mode,
     candidateCount: filtered.length,
@@ -16911,18 +17055,18 @@ async function handleMessage2(raw, opts) {
   const log7 = ctx.log;
   const text = (ctx.content ?? "").trim();
   if (!shouldInject(text, cfg)) {
-    log7?.debug?.(`[${PLUGIN_NAME9}] skip (filter)`, { textLen: text.length });
+    log7?.debug?.(`[${PLUGIN_NAME10}] skip (filter)`, { textLen: text.length });
     return;
   }
   const query = extractQuery(text);
   if (!query)
     return;
   if (opts.cache.shouldSkip(query)) {
-    log7?.debug?.(`[${PLUGIN_NAME9}] cache hit, skip`, { query });
+    log7?.debug?.(`[${PLUGIN_NAME10}] cache hit, skip`, { query });
     return;
   }
   if (inflight2.size >= INFLIGHT_CAP) {
-    log7?.warn(`[${PLUGIN_NAME9}] inflight cap reached, skip`, {
+    log7?.warn(`[${PLUGIN_NAME10}] inflight cap reached, skip`, {
       query,
       inflightSize: inflight2.size,
       cap: INFLIGHT_CAP,
@@ -16933,7 +17077,7 @@ async function handleMessage2(raw, opts) {
   const key = inflightKey(ctx.sessionId, query);
   inflight2.add(key);
   runKhSearchAndInject({ query, ctx, opts, mode }).catch((err) => {
-    log7?.warn(`[${PLUGIN_NAME9}] runKhSearchAndInject 顶层兜底捕获`, {
+    log7?.warn(`[${PLUGIN_NAME10}] runKhSearchAndInject 顶层兜底捕获`, {
       error: err instanceof Error ? err.message : String(err),
       query,
       sessionId: ctx.sessionId
@@ -16942,13 +17086,13 @@ async function handleMessage2(raw, opts) {
     inflight2.delete(key);
   });
 }
-logLifecycle(PLUGIN_NAME9, "import");
+logLifecycle(PLUGIN_NAME10, "import");
 var sharedClient2 = new KhClient;
 var sharedCache = new QueryCache(DEFAULT_CONFIG4.cacheTtlMs);
 var khAutoContextServer = async (ctx) => {
-  const log7 = makePluginLogger(PLUGIN_NAME9);
+  const log7 = makePluginLogger(PLUGIN_NAME10);
   const runtimeMode = resolveInjectionMode(sharedClient2);
-  logLifecycle(PLUGIN_NAME9, "activate", {
+  logLifecycle(PLUGIN_NAME10, "activate", {
     directory: ctx.directory,
     minConfidence: DEFAULT_CONFIG4.minConfidence,
     timeoutMs: DEFAULT_CONFIG4.timeoutMs,
@@ -16962,7 +17106,7 @@ var khAutoContextServer = async (ctx) => {
   });
   return {
     "chat.message": async (input, output) => {
-      await safeAsync(PLUGIN_NAME9, "chat.message", async () => {
+      await safeAsync(PLUGIN_NAME10, "chat.message", async () => {
         const text = extractUserText(output);
         if (!text)
           return;
@@ -16982,7 +17126,7 @@ var khAutoContextServer = async (ctx) => {
       });
     },
     event: async ({ event }) => {
-      await safeAsync(PLUGIN_NAME9, "event", async () => {
+      await safeAsync(PLUGIN_NAME10, "event", async () => {
         const e = event;
         if (e.type !== "session.idle")
           return;
@@ -16991,14 +17135,14 @@ var khAutoContextServer = async (ctx) => {
         if (typeof sid !== "string" || !sid)
           return;
         sharedKhCache.onSessionEnd(sid);
-        log7.debug?.(`[${PLUGIN_NAME9}] session.idle: cleared shared cache`, {
+        log7.debug?.(`[${PLUGIN_NAME10}] session.idle: cleared shared cache`, {
           sessionID: sid
         });
       });
     }
   };
 };
-var handler9 = khAutoContextServer;
+var handler10 = khAutoContextServer;
 
 // lib/condenser.ts
 var DEFAULT_CONDENSE = {
@@ -17116,8 +17260,8 @@ async function condense(input, opts = {}) {
 }
 
 // plugins/kh-reminder.ts
-var PLUGIN_NAME10 = "kh-reminder";
-logLifecycle(PLUGIN_NAME10, "import", {});
+var PLUGIN_NAME11 = "kh-reminder";
+logLifecycle(PLUGIN_NAME11, "import", {});
 var TRIGGER_WORDS_ZH = [
   "怎么",
   "怎样",
@@ -17271,7 +17415,7 @@ function handleObserve(raw, log7) {
     const result = evaluate(ctx);
     if (result.triggered && result.reason) {
       const reasonStr = formatReason(result.reason);
-      log7?.info(`[${PLUGIN_NAME10}] ⚡ KH 提醒（observe-only） · session=${result.sessionId} · ${reasonStr}`, {
+      log7?.info(`[${PLUGIN_NAME11}] ⚡ KH 提醒（observe-only） · session=${result.sessionId} · ${reasonStr}`, {
         sessionId: result.sessionId,
         reason: result.reason,
         suggestion: "调用 smart_search 查项目历史；完成后用 save_chat_insight 沉淀"
@@ -17279,7 +17423,7 @@ function handleObserve(raw, log7) {
     }
     return result;
   } catch (err) {
-    log7?.warn(`[${PLUGIN_NAME10}] evaluate 异常（已隔离）`, {
+    log7?.warn(`[${PLUGIN_NAME11}] evaluate 异常（已隔离）`, {
       error: err instanceof Error ? err.message : String(err)
     });
     return null;
@@ -17295,9 +17439,9 @@ function formatReason(r) {
       return `no-search-in-recent-rounds (last ${r.rounds})`;
   }
 }
-var log7 = makePluginLogger(PLUGIN_NAME10);
+var log7 = makePluginLogger(PLUGIN_NAME11);
 var khReminderServer = async (ctx) => {
-  logLifecycle(PLUGIN_NAME10, "activate", {
+  logLifecycle(PLUGIN_NAME11, "activate", {
     directory: ctx.directory,
     threshold: DEFAULT_THRESHOLD,
     cooldown_ms: COOLDOWN_MS,
@@ -17305,7 +17449,7 @@ var khReminderServer = async (ctx) => {
   });
   return {
     "experimental.chat.messages.transform": async (_input, output) => {
-      await safeAsync(PLUGIN_NAME10, "experimental.chat.messages.transform", async () => {
+      await safeAsync(PLUGIN_NAME11, "experimental.chat.messages.transform", async () => {
         const list = output.messages;
         if (!Array.isArray(list) || list.length === 0)
           return;
@@ -17324,7 +17468,7 @@ var khReminderServer = async (ctx) => {
         const result = handleObserve({ messages: flat, sessionId }, log7);
         if (!result)
           return;
-        safeWriteLog(PLUGIN_NAME10, {
+        safeWriteLog(PLUGIN_NAME11, {
           hook: "experimental.chat.messages.transform",
           mode: "observe-only",
           sessionId: result.sessionId,
@@ -17337,7 +17481,7 @@ var khReminderServer = async (ctx) => {
     }
   };
 };
-var handler10 = khReminderServer;
+var handler11 = khReminderServer;
 
 // lib/memories.ts
 import { promises as fs15 } from "node:fs";
@@ -17538,7 +17682,7 @@ function bagOfWordsScore(query, doc) {
 }
 
 // plugins/memories-context.ts
-var PLUGIN_NAME11 = "memories-context";
+var PLUGIN_NAME12 = "memories-context";
 var INJECTION_MODE2 = "observe-only";
 var DEFAULT_CONFIG5 = {
   minTextLength: 8,
@@ -17636,14 +17780,14 @@ async function handleMessage3(raw, opts) {
     return await handleDirective(dir, ctx, opts.memCfg, log8);
   }
   if (!shouldRecall(text, cfg)) {
-    log8?.debug?.(`[${PLUGIN_NAME11}] skip (filter)`, { textLen: text.length });
+    log8?.debug?.(`[${PLUGIN_NAME12}] skip (filter)`, { textLen: text.length });
     return { kind: "noop", reason: "filtered", mode: INJECTION_MODE2 };
   }
   const query = extractQuery2(text);
   if (!query)
     return { kind: "noop", reason: "empty_query", mode: INJECTION_MODE2 };
   if (cache2.shouldSkip(query)) {
-    log8?.debug?.(`[${PLUGIN_NAME11}] cache hit`, { query });
+    log8?.debug?.(`[${PLUGIN_NAME12}] cache hit`, { query });
     return { kind: "noop", reason: "cache", mode: INJECTION_MODE2 };
   }
   const racer = opts.scheduler?.raceTimeout ?? (async (p, ms) => {
@@ -17668,7 +17812,7 @@ async function handleMessage3(raw, opts) {
   }, opts.memCfg);
   const result = await racer(injectPromise, cfg.timeoutMs);
   if (result === "__timeout__") {
-    log8?.warn(`[${PLUGIN_NAME11}] timeout`, { query, ms: cfg.timeoutMs });
+    log8?.warn(`[${PLUGIN_NAME12}] timeout`, { query, ms: cfg.timeoutMs });
     cache2.record(query, 0);
     return { kind: "noop", reason: "timeout", mode: INJECTION_MODE2 };
   }
@@ -17680,13 +17824,13 @@ async function handleMessage3(raw, opts) {
     try {
       await ctx.injectContext(result.text);
     } catch (err) {
-      log8?.warn(`[${PLUGIN_NAME11}] injectContext threw`, {
+      log8?.warn(`[${PLUGIN_NAME12}] injectContext threw`, {
         error: err instanceof Error ? err.message : String(err)
       });
     }
   }
   cache2.record(query, result.recalled);
-  log8?.info(`[${PLUGIN_NAME11}] observe-only: ${result.used}/${result.recalled} memories ready`, { query, mode: INJECTION_MODE2 });
+  log8?.info(`[${PLUGIN_NAME12}] observe-only: ${result.used}/${result.recalled} memories ready`, { query, mode: INJECTION_MODE2 });
   return { kind: "injected", payload: result, mode: INJECTION_MODE2 };
 }
 async function handleDirective(dir, ctx, memCfg, log8) {
@@ -17695,14 +17839,14 @@ async function handleDirective(dir, ctx, memCfg, log8) {
     if (r.ok) {
       const target = r.written_to === "kh" ? "KH" : "本地";
       await safeReply(ctx, `\uD83E\uDDE0 已记住（${dir.scope} / ${target}，id=${r.id}）`);
-      log8?.info(`[${PLUGIN_NAME11}] /remember ok`, {
+      log8?.info(`[${PLUGIN_NAME12}] /remember ok`, {
         scope: dir.scope,
         id: r.id,
         mode: INJECTION_MODE2
       });
     } else {
       await safeReply(ctx, `❌ 记忆失败：${r.error ?? "unknown"}`);
-      log8?.warn(`[${PLUGIN_NAME11}] /remember failed`, { error: r.error });
+      log8?.warn(`[${PLUGIN_NAME12}] /remember failed`, { error: r.error });
     }
     return { kind: "remembered", result: r, mode: INJECTION_MODE2 };
   }
@@ -17733,22 +17877,22 @@ async function safeReply(ctx, text) {
     await ctx.reply(text);
   } catch {}
 }
-logLifecycle(PLUGIN_NAME11, "import");
+logLifecycle(PLUGIN_NAME12, "import");
 var sharedCache2 = new QueryCache2(DEFAULT_CONFIG5.cacheTtlMs);
 function buildMemCfg(directory) {
   return { projectRoot: directory };
 }
 var memoriesContextServer = async (ctx) => {
-  const log8 = makePluginLogger(PLUGIN_NAME11);
+  const log8 = makePluginLogger(PLUGIN_NAME12);
   const memCfg = buildMemCfg(ctx.directory);
-  logLifecycle(PLUGIN_NAME11, "activate", {
+  logLifecycle(PLUGIN_NAME12, "activate", {
     directory: ctx.directory,
     projectRoot: memCfg.projectRoot,
     mode: INJECTION_MODE2
   });
   return {
     "chat.message": async (input, output) => {
-      await safeAsync(PLUGIN_NAME11, "chat.message", async () => {
+      await safeAsync(PLUGIN_NAME12, "chat.message", async () => {
         const text = extractUserText(output);
         if (!text)
           return;
@@ -17774,17 +17918,17 @@ var memoriesContextServer = async (ctx) => {
     }
   };
 };
-var handler11 = memoriesContextServer;
+var handler12 = memoriesContextServer;
 
 // plugins/model-fallback.ts
-var PLUGIN_NAME12 = "model-fallback";
+var PLUGIN_NAME13 = "model-fallback";
 var state = {
   config: null,
   configPath: null,
   warnings: [],
   error: null
 };
-logLifecycle(PLUGIN_NAME12, "import");
+logLifecycle(PLUGIN_NAME13, "import");
 function loadOnce(root) {
   if (state.config !== null || state.error !== null)
     return;
@@ -17794,11 +17938,11 @@ function loadOnce(root) {
     state.configPath = r.path ?? null;
     state.warnings = r.warnings;
     if (r.warnings.length > 0) {
-      safeWriteLog(PLUGIN_NAME12, { phase: "load.warnings", warnings: r.warnings });
+      safeWriteLog(PLUGIN_NAME13, { phase: "load.warnings", warnings: r.warnings });
     }
   } else {
     state.error = r.error ?? "unknown_load_error";
-    safeWriteLog(PLUGIN_NAME12, { phase: "load.failed", error: state.error, path: r.path });
+    safeWriteLog(PLUGIN_NAME13, { phase: "load.failed", error: state.error, path: r.path });
   }
 }
 var MODEL_ERR_PATTERNS = [
@@ -17843,9 +17987,9 @@ fallback 链已用尽：${meta.chain.join(" → ")}`;
 完整链：${meta.chain.join(" → ")}`;
 }
 var modelFallbackServer = async (ctx) => {
-  const log8 = makePluginLogger(PLUGIN_NAME12);
+  const log8 = makePluginLogger(PLUGIN_NAME13);
   loadOnce(ctx.directory ?? process.cwd());
-  logLifecycle(PLUGIN_NAME12, "activate", {
+  logLifecycle(PLUGIN_NAME13, "activate", {
     directory: ctx.directory,
     config_path: state.configPath,
     config_loaded: state.config !== null,
@@ -17855,7 +17999,7 @@ var modelFallbackServer = async (ctx) => {
   });
   return {
     "chat.params": async (input, output) => {
-      await safeAsync(PLUGIN_NAME12, "chat.params", async () => {
+      await safeAsync(PLUGIN_NAME13, "chat.params", async () => {
         if (!state.config)
           return;
         const agent = input.agent;
@@ -17876,7 +18020,7 @@ var modelFallbackServer = async (ctx) => {
           next: meta.next_fallback,
           source: meta.source
         };
-        safeWriteLog(PLUGIN_NAME12, {
+        safeWriteLog(PLUGIN_NAME13, {
           hook: "chat.params",
           agent,
           model: currentModel,
@@ -17886,7 +18030,7 @@ var modelFallbackServer = async (ctx) => {
       });
     },
     event: async ({ event }) => {
-      await safeAsync(PLUGIN_NAME12, "event", async () => {
+      await safeAsync(PLUGIN_NAME13, "event", async () => {
         if (!state.config)
           return;
         const e = event;
@@ -17902,8 +18046,8 @@ var modelFallbackServer = async (ctx) => {
         const model = props.model ?? "unknown/unknown";
         const meta = buildFallbackMeta(state.config, agent, model);
         const suggestion = meta ? buildSuggestion(meta, String(message)) : `⚠️ ${agent}/${model} 失败：${message}`;
-        log8.warn(`[${PLUGIN_NAME12}] ${suggestion}`);
-        safeWriteLog(PLUGIN_NAME12, {
+        log8.warn(`[${PLUGIN_NAME13}] ${suggestion}`);
+        safeWriteLog(PLUGIN_NAME13, {
           hook: "event.error",
           eventType: e.type,
           agent,
@@ -17915,7 +18059,7 @@ var modelFallbackServer = async (ctx) => {
     }
   };
 };
-var handler12 = modelFallbackServer;
+var handler13 = modelFallbackServer;
 
 // plugins/subtask-heartbeat.ts
 import { promises as fsPromises } from "node:fs";
@@ -17929,8 +18073,8 @@ var sweepExpiredSessionParents2 = sweepExpiredSessionParents;
 var _bulkInjectSessionParentMap2 = _bulkInjectSessionParentMap;
 var _capSessionParentMap2 = _capSessionParentMap;
 var _setPersistRootForTests2 = _setPersistRootForTests;
-var PLUGIN_NAME13 = "subtask-heartbeat";
-logLifecycle(PLUGIN_NAME13, "import", {});
+var PLUGIN_NAME14 = "subtask-heartbeat";
+logLifecycle(PLUGIN_NAME14, "import", {});
 var HEARTBEAT_INTERVAL_MS2 = 30000;
 var HEARTBEAT_DEBOUNCE_MS = 25000;
 var TOAST_DURATION_MS2 = 5000;
@@ -18272,9 +18416,9 @@ async function showToast2(client, payload, log8) {
     return false;
   }
 }
-var log8 = makePluginLogger(PLUGIN_NAME13);
+var log8 = makePluginLogger(PLUGIN_NAME14);
 var subtaskHeartbeatServer = async (ctx) => {
-  logLifecycle(PLUGIN_NAME13, "activate", {
+  logLifecycle(PLUGIN_NAME14, "activate", {
     directory: ctx.directory,
     intervalMs: HEARTBEAT_INTERVAL_MS2
   });
@@ -18291,7 +18435,7 @@ var subtaskHeartbeatServer = async (ctx) => {
       }));
       _bulkInjectSessionParentMap2(entries);
       const cappedOut = _capSessionParentMap2();
-      safeWriteLog(PLUGIN_NAME13, {
+      safeWriteLog(PLUGIN_NAME14, {
         hook: "activate",
         type: "parent-map.restore",
         restored: restored.size,
@@ -18304,14 +18448,14 @@ var subtaskHeartbeatServer = async (ctx) => {
     });
   }
   const interval = setInterval(() => {
-    safeAsync(PLUGIN_NAME13, "interval", async () => {
+    safeAsync(PLUGIN_NAME14, "interval", async () => {
       const swept = sweepExpiredPendingTasks();
       if (swept > 0) {
-        safeWriteLog(PLUGIN_NAME13, { hook: "interval", pending_task_swept: swept });
+        safeWriteLog(PLUGIN_NAME14, { hook: "interval", pending_task_swept: swept });
       }
       const sweptParents = sweepExpiredSessionParents2();
       if (sweptParents > 0) {
-        safeWriteLog(PLUGIN_NAME13, { hook: "interval", session_parent_swept: sweptParents });
+        safeWriteLog(PLUGIN_NAME14, { hook: "interval", session_parent_swept: sweptParents });
       }
       const beats = pickHeartbeats();
       if (beats.length === 0)
@@ -18319,7 +18463,7 @@ var subtaskHeartbeatServer = async (ctx) => {
       for (const r of beats) {
         const t = buildHeartbeatToast(r);
         const sent = await showToast2(client, t, log8);
-        safeWriteLog(PLUGIN_NAME13, {
+        safeWriteLog(PLUGIN_NAME14, {
           hook: "interval",
           child: r.childID,
           parent: r.parentID,
@@ -18336,7 +18480,7 @@ var subtaskHeartbeatServer = async (ctx) => {
   }
   return {
     event: async ({ event }) => {
-      await safeAsync(PLUGIN_NAME13, "event", async () => {
+      await safeAsync(PLUGIN_NAME14, "event", async () => {
         try {
           if (detectUnparsedParentID(event) && _parentParseFailLogged < PARENT_PARSE_FAIL_MAX_LOG) {
             _parentParseFailLogged++;
@@ -18344,7 +18488,7 @@ var subtaskHeartbeatServer = async (ctx) => {
               sample_count: _parentParseFailLogged,
               hint: "如频繁出现请检查 plugins/subtask-heartbeat.ts::extractCreatedChild 是否适配新 SDK"
             });
-            safeWriteLog(PLUGIN_NAME13, {
+            safeWriteLog(PLUGIN_NAME14, {
               hook: "event",
               type: "session.created.unparsed-parent-id",
               sample_count: _parentParseFailLogged
@@ -18367,7 +18511,7 @@ var subtaskHeartbeatServer = async (ctx) => {
             agent: pending?.agent ?? created.agent,
             description: pending?.description ?? null
           });
-          safeWriteLog(PLUGIN_NAME13, {
+          safeWriteLog(PLUGIN_NAME14, {
             hook: "event",
             type: "session.created",
             child: created.childID,
@@ -18378,7 +18522,7 @@ var subtaskHeartbeatServer = async (ctx) => {
           });
           const startToast = buildStartToast(record);
           const sent = await showToast2(client, { ...startToast, duration: START_TOAST_DURATION_MS }, log8);
-          safeWriteLog(PLUGIN_NAME13, {
+          safeWriteLog(PLUGIN_NAME14, {
             hook: "event",
             type: "session.created.toast",
             child: created.childID,
@@ -18398,7 +18542,7 @@ var subtaskHeartbeatServer = async (ctx) => {
           if (r) {
             const t = buildEndToast(r, ended.type);
             const sent = await showToast2(client, t, log8);
-            safeWriteLog(PLUGIN_NAME13, {
+            safeWriteLog(PLUGIN_NAME14, {
               hook: "event",
               type: ended.type,
               child: r.childID,
@@ -18418,12 +18562,12 @@ var subtaskHeartbeatServer = async (ctx) => {
       const isTaskTool = input?.tool === "task";
       if (inflight3.size === 0 && !isTaskTool)
         return;
-      await safeAsync(PLUGIN_NAME13, "tool.execute.before", async () => {
+      await safeAsync(PLUGIN_NAME14, "tool.execute.before", async () => {
         if (!input || typeof input.sessionID !== "string" || typeof input.tool !== "string")
           return;
         if (isTaskTool) {
           const args = output?.args ?? null;
-          safeWriteLog(PLUGIN_NAME13, {
+          safeWriteLog(PLUGIN_NAME14, {
             hook: "tool.execute.before.task",
             sessionID: input.sessionID,
             args_keys: args && typeof args === "object" ? Object.keys(args) : null,
@@ -18435,7 +18579,7 @@ var subtaskHeartbeatServer = async (ctx) => {
               agent: extracted.subagentType,
               description: extracted.description
             });
-            safeWriteLog(PLUGIN_NAME13, {
+            safeWriteLog(PLUGIN_NAME14, {
               hook: "tool.execute.before.task.enqueued",
               parent: input.sessionID,
               agent: extracted.subagentType,
@@ -18463,7 +18607,7 @@ var subtaskHeartbeatServer = async (ctx) => {
     "tool.execute.after": async (input, _output) => {
       if (inflight3.size === 0)
         return;
-      await safeAsync(PLUGIN_NAME13, "tool.execute.after", async () => {
+      await safeAsync(PLUGIN_NAME14, "tool.execute.after", async () => {
         if (!input || typeof input.sessionID !== "string" || typeof input.tool !== "string")
           return;
         const rec = inflight3.get(input.sessionID);
@@ -18486,11 +18630,11 @@ var subtaskHeartbeatServer = async (ctx) => {
     }
   };
 };
-var handler13 = subtaskHeartbeatServer;
+var handler14 = subtaskHeartbeatServer;
 
 // plugins/parallel-status.ts
-var PLUGIN_NAME14 = "parallel-status";
-logLifecycle(PLUGIN_NAME14, "import");
+var PLUGIN_NAME15 = "parallel-status";
+logLifecycle(PLUGIN_NAME15, "import");
 var ID_MAX_LEN = 16;
 var ID_KEEP_LEN = 13;
 function shortId(s) {
@@ -18522,8 +18666,8 @@ function formatInflightMarkdown(snapshot, now = Date.now()) {
 `);
 }
 var parallelStatusServer = async (ctx) => {
-  const log9 = makePluginLogger(PLUGIN_NAME14);
-  logLifecycle(PLUGIN_NAME14, "activate", { directory: ctx.directory });
+  const log9 = makePluginLogger(PLUGIN_NAME15);
+  logLifecycle(PLUGIN_NAME15, "activate", { directory: ctx.directory });
   return {
     "command.execute.before": async (input, output) => {
       try {
@@ -18542,23 +18686,23 @@ var parallelStatusServer = async (ctx) => {
             synthetic: false
           });
         }
-        log9.info(`[${PLUGIN_NAME14}] 已回写 ${snapshot.length} 条 inflight`);
+        log9.info(`[${PLUGIN_NAME15}] 已回写 ${snapshot.length} 条 inflight`);
       } catch (err) {
-        log9.error(`[${PLUGIN_NAME14}] command.execute.before 异常（已隔离）`, {
+        log9.error(`[${PLUGIN_NAME15}] command.execute.before 异常（已隔离）`, {
           error: err instanceof Error ? err.message : String(err)
         });
       }
     }
   };
 };
-var handler14 = parallelStatusServer;
+var handler15 = parallelStatusServer;
 
 // plugins/parallel-tool-nudge.ts
 import { readFileSync as readFileSync4, readdirSync as readdirSync2, statSync as statSync4 } from "node:fs";
 import { join as join16 } from "node:path";
 import { homedir as homedir6 } from "node:os";
-var PLUGIN_NAME15 = "parallel-tool-nudge";
-logLifecycle(PLUGIN_NAME15, "import", {});
+var PLUGIN_NAME16 = "parallel-tool-nudge";
+logLifecycle(PLUGIN_NAME16, "import", {});
 var PARALLEL_SAFE_TOOLS = [
   "read",
   "smart_search",
@@ -18620,7 +18764,7 @@ function loadAgentToolsMap(rootDir, opts = {}) {
   const result = new Map;
   const safeSet = new Set(PARALLEL_SAFE_TOOLS);
   const unionTools = new Set;
-  const log9 = makePluginLogger(PLUGIN_NAME15);
+  const log9 = makePluginLogger(PLUGIN_NAME16);
   for (const dir of candidateDirs) {
     if (!dirExists(dir))
       continue;
@@ -18670,33 +18814,33 @@ function loadAgentToolsMap(rootDir, opts = {}) {
   result.set(DEFAULT_AGENT_KEY, Array.from(unionTools));
   return result;
 }
-var sessionAgentMap = new Map;
-var SESSION_CAP2 = 200;
-var SESSION_TTL_MS2 = 24 * 60 * 60 * 1000;
-function pruneIfOversize2() {
-  while (sessionAgentMap.size > SESSION_CAP2) {
-    const oldestKey = sessionAgentMap.keys().next().value;
+var sessionAgentMap2 = new Map;
+var SESSION_CAP3 = 200;
+var SESSION_TTL_MS3 = 24 * 60 * 60 * 1000;
+function pruneIfOversize3() {
+  while (sessionAgentMap2.size > SESSION_CAP3) {
+    const oldestKey = sessionAgentMap2.keys().next().value;
     if (oldestKey === undefined)
       break;
-    sessionAgentMap.delete(oldestKey);
+    sessionAgentMap2.delete(oldestKey);
   }
 }
-function isExpired2(entry, now) {
-  return now - entry.ts > SESSION_TTL_MS2;
+function isExpired3(entry, now) {
+  return now - entry.ts > SESSION_TTL_MS3;
 }
 function resolveAgent(sessionID, nowFn = Date.now) {
   if (!sessionID)
     return "unknown";
-  const entry = sessionAgentMap.get(sessionID);
+  const entry = sessionAgentMap2.get(sessionID);
   if (!entry)
     return "unknown";
   const now = nowFn();
-  if (isExpired2(entry, now)) {
-    sessionAgentMap.delete(sessionID);
+  if (isExpired3(entry, now)) {
+    sessionAgentMap2.delete(sessionID);
     return "unknown";
   }
-  sessionAgentMap.delete(sessionID);
-  sessionAgentMap.set(sessionID, entry);
+  sessionAgentMap2.delete(sessionID);
+  sessionAgentMap2.set(sessionID, entry);
   return entry.agent;
 }
 function renderNudge(agent, tools) {
@@ -18728,7 +18872,7 @@ This directive is re-injected every turn — it is not optional advice.
   return body.slice(0, NUDGE_MAX_LEN2 - 4) + `
 …`;
 }
-var log9 = makePluginLogger(PLUGIN_NAME15);
+var log9 = makePluginLogger(PLUGIN_NAME16);
 var parallelToolNudgeServer = async (ctx) => {
   try {
     const loaded = loadAgentToolsMap(ctx.directory ?? process.cwd());
@@ -18748,30 +18892,30 @@ var parallelToolNudgeServer = async (ctx) => {
     });
   }
   const defaultTools = agentToolsMap.get(DEFAULT_AGENT_KEY) ?? [];
-  logLifecycle(PLUGIN_NAME15, "activate", {
+  logLifecycle(PLUGIN_NAME16, "activate", {
     directory: ctx.directory,
     real_agents_loaded: realAgentCount,
     default_tools_union: defaultTools,
     parallel_safe_whitelist: PARALLEL_SAFE_TOOLS,
-    session_cap: SESSION_CAP2,
-    session_ttl_ms: SESSION_TTL_MS2,
+    session_cap: SESSION_CAP3,
+    session_ttl_ms: SESSION_TTL_MS3,
     no_op: agentToolsMap.size === 0
   });
   return {
     "chat.params": async (input, _output) => {
-      await safeAsync(PLUGIN_NAME15, "chat.params", async () => {
+      await safeAsync(PLUGIN_NAME16, "chat.params", async () => {
         if (agentToolsMap.size === 0)
           return;
         const sid = input?.sessionID;
         const agent = input?.agent;
         if (!sid || !agent)
           return;
-        sessionAgentMap.set(sid, { agent, ts: Date.now() });
-        pruneIfOversize2();
+        sessionAgentMap2.set(sid, { agent, ts: Date.now() });
+        pruneIfOversize3();
       });
     },
     "experimental.chat.system.transform": async (input, output) => {
-      await safeAsync(PLUGIN_NAME15, "experimental.chat.system.transform", async () => {
+      await safeAsync(PLUGIN_NAME16, "experimental.chat.system.transform", async () => {
         if (agentToolsMap.size === 0)
           return;
         if (!output || !Array.isArray(output.system))
@@ -18781,7 +18925,7 @@ var parallelToolNudgeServer = async (ctx) => {
         const tools = agent !== "unknown" ? agentToolsMap.get(agent) ?? agentToolsMap.get(DEFAULT_AGENT_KEY) ?? [] : agentToolsMap.get(DEFAULT_AGENT_KEY) ?? [];
         const nudge = renderNudge(agent, tools);
         output.system.push(nudge);
-        safeWriteLog(PLUGIN_NAME15, {
+        safeWriteLog(PLUGIN_NAME16, {
           hook: "experimental.chat.system.transform",
           sessionID: sid,
           agent,
@@ -18793,11 +18937,11 @@ var parallelToolNudgeServer = async (ctx) => {
     }
   };
 };
-var handler15 = parallelToolNudgeServer;
+var handler16 = parallelToolNudgeServer;
 
 // plugins/pwsh-utf8.ts
-var PLUGIN_NAME16 = "pwsh-utf8";
-logLifecycle(PLUGIN_NAME16, "import", {});
+var PLUGIN_NAME17 = "pwsh-utf8";
+logLifecycle(PLUGIN_NAME17, "import", {});
 var PRELUDE = "chcp 65001 *> $null; " + "[Console]::OutputEncoding = [System.Text.UTF8Encoding]::new(); " + "$OutputEncoding = [System.Text.UTF8Encoding]::new(); ";
 function prependUtf8Prelude(command) {
   if (typeof command !== "string")
@@ -18810,15 +18954,15 @@ function prependUtf8Prelude(command) {
     return command;
   return PRELUDE + command;
 }
-var handler16 = async (_ctx3) => {
+var handler17 = async (_ctx3) => {
   const enabled = process.platform === "win32" && process.env.CODEFORGE_DISABLE_PWSH_UTF8 !== "1";
   const reason = enabled ? "win32" : process.platform !== "win32" ? "non-win32" : "disabled-by-env";
-  logLifecycle(PLUGIN_NAME16, "activate", { enabled, platform: process.platform, reason });
+  logLifecycle(PLUGIN_NAME17, "activate", { enabled, platform: process.platform, reason });
   if (!enabled)
     return {};
   return {
     "tool.execute.before": async (input, output) => {
-      await safeAsync(PLUGIN_NAME16, "tool.execute.before", async () => {
+      await safeAsync(PLUGIN_NAME17, "tool.execute.before", async () => {
         if (input.tool !== "bash")
           return;
         const args = output.args ?? {};
@@ -18827,7 +18971,7 @@ var handler16 = async (_ctx3) => {
         if (next !== undefined && next !== original) {
           args["command"] = next;
           output.args = args;
-          safeWriteLog(PLUGIN_NAME16, {
+          safeWriteLog(PLUGIN_NAME17, {
             hook: "tool.execute.before",
             tool: input.tool,
             callID: input.callID,
@@ -19243,8 +19387,8 @@ async function markBlocksConsumed(absRoot, entries) {
 }
 
 // plugins/session-recovery.ts
-var PLUGIN_NAME17 = "session-recovery";
-logLifecycle(PLUGIN_NAME17, "import", {});
+var PLUGIN_NAME18 = "session-recovery";
+logLifecycle(PLUGIN_NAME18, "import", {});
 async function processSessionStart(currentSessionId, opts = {}) {
   if (opts.disabled) {
     return { ok: true, injected: false, reason: "disabled" };
@@ -19254,7 +19398,7 @@ async function processSessionStart(currentSessionId, opts = {}) {
     excludeIds.add(currentSessionId);
   const r = await scanLastSession({ ...opts, excludeIds: [...excludeIds] });
   if (!r.ok) {
-    opts.log?.warn?.(`[${PLUGIN_NAME17}] 扫描失败：${r.error}`);
+    opts.log?.warn?.(`[${PLUGIN_NAME18}] 扫描失败：${r.error}`);
     return { ok: false, injected: false, reason: "scan_error", error: r.error };
   }
   const plan = r.plan;
@@ -19263,7 +19407,7 @@ async function processSessionStart(currentSessionId, opts = {}) {
     try {
       pendingBlocks = await scanBlockPending(opts.root);
     } catch (err) {
-      opts.log?.warn?.(`[${PLUGIN_NAME17}] scanBlockPending 异常：${err instanceof Error ? err.message : String(err)}`);
+      opts.log?.warn?.(`[${PLUGIN_NAME18}] scanBlockPending 异常：${err instanceof Error ? err.message : String(err)}`);
     }
   }
   const hasPendingBlocks = pendingBlocks.length > 0;
@@ -19281,7 +19425,7 @@ async function processSessionStart(currentSessionId, opts = {}) {
       await opts.injectRecovery(injection);
     } catch (err) {
       const msg = err instanceof Error ? err.message : String(err);
-      opts.log?.warn?.(`[${PLUGIN_NAME17}] injectRecovery 异常：${msg}`);
+      opts.log?.warn?.(`[${PLUGIN_NAME18}] injectRecovery 异常：${msg}`);
       return { ok: false, injected: false, plan, reason: "inject_error", error: msg, pendingBlocks };
     }
   }
@@ -19289,7 +19433,7 @@ async function processSessionStart(currentSessionId, opts = {}) {
     try {
       await markBlocksConsumed(opts.root, pendingBlocks);
     } catch (err) {
-      opts.log?.warn?.(`[${PLUGIN_NAME17}] markBlocksConsumed 异常：${err instanceof Error ? err.message : String(err)}`);
+      opts.log?.warn?.(`[${PLUGIN_NAME18}] markBlocksConsumed 异常：${err instanceof Error ? err.message : String(err)}`);
     }
   }
   return { ok: true, injected: true, plan, reason: "ok", pendingBlocks };
@@ -19336,13 +19480,13 @@ function renderPrompt(plan) {
   return lines.join(`
 `);
 }
-var log10 = makePluginLogger(PLUGIN_NAME17);
+var log10 = makePluginLogger(PLUGIN_NAME18);
 var _lastInjection = null;
 var sessionRecoveryServer = async (ctx) => {
-  logLifecycle(PLUGIN_NAME17, "activate", { directory: ctx.directory });
+  logLifecycle(PLUGIN_NAME18, "activate", { directory: ctx.directory });
   return {
     event: async ({ event }) => {
-      await safeAsync(PLUGIN_NAME17, "event", async () => {
+      await safeAsync(PLUGIN_NAME18, "event", async () => {
         const e = event;
         if (!e || typeof e.type !== "string")
           return;
@@ -19357,7 +19501,7 @@ var sessionRecoveryServer = async (ctx) => {
             _lastInjection = inj;
           }
         });
-        safeWriteLog(PLUGIN_NAME17, {
+        safeWriteLog(PLUGIN_NAME18, {
           hook: "event",
           type: "session.start",
           ok: r.ok,
@@ -19367,13 +19511,13 @@ var sessionRecoveryServer = async (ctx) => {
           pending_blocks_count: r.pendingBlocks?.length ?? 0
         });
         if (r.injected && r.plan) {
-          log10.info(`[${PLUGIN_NAME17}] 注入恢复提示（last=${r.plan.last_session_id?.slice(0, 8) ?? "?"}, reason=${r.plan.reason}, pending_blocks=${r.pendingBlocks?.length ?? 0}）`);
+          log10.info(`[${PLUGIN_NAME18}] 注入恢复提示（last=${r.plan.last_session_id?.slice(0, 8) ?? "?"}, reason=${r.plan.reason}, pending_blocks=${r.pendingBlocks?.length ?? 0}）`);
         }
       });
     }
   };
 };
-var handler17 = sessionRecoveryServer;
+var handler18 = sessionRecoveryServer;
 
 // plugins/subtasks.ts
 import { promises as fs18 } from "node:fs";
@@ -20200,7 +20344,7 @@ function sleep2(ms) {
 
 // plugins/subtasks.ts
 init_runtime_paths();
-var PLUGIN_NAME18 = "subtasks";
+var PLUGIN_NAME19 = "subtasks";
 function getLogFile(root = process.cwd()) {
   return path22.join(runtimeDir(root), "logs", "subtasks.log");
 }
@@ -20280,7 +20424,7 @@ async function handleParallelCommand(raw) {
     specs = splitDescriptions(args.description, { parentId });
   }
   if (specs.length === 0) {
-    log11?.warn(`[${PLUGIN_NAME18}] /parallel 缺有效子任务`);
+    log11?.warn(`[${PLUGIN_NAME19}] /parallel 缺有效子任务`);
     await safeReply2(ctx, "⚠ /parallel 需要至少 1 个子任务（用 ; 或换行分隔）");
     return { ok: false, reason: "no_subtasks" };
   }
@@ -20315,7 +20459,7 @@ async function handleParallelCommand(raw) {
   }
   const canNotice = Boolean(ctx.client && ctx.parentSessionID);
   if (specs.length === 1 && rawDescription.length >= 30 && ctx.client) {
-    log11?.info(`[${PLUGIN_NAME18}] 触发 AI 拆分（描述长度=${rawDescription.length}）`);
+    log11?.info(`[${PLUGIN_NAME19}] 触发 AI 拆分（描述长度=${rawDescription.length}）`);
     const dec = await decomposeTask(rawDescription, {
       client: ctx.client,
       directory: ctx.directory,
@@ -20336,7 +20480,7 @@ async function handleParallelCommand(raw) {
         timeout_ms: undefined,
         args: d.hintFiles && d.hintFiles.length > 0 ? { hintFiles: d.hintFiles } : undefined
       }));
-      log11?.info(`[${PLUGIN_NAME18}] AI 拆分成功 → ${specs.length} 个子任务`);
+      log11?.info(`[${PLUGIN_NAME19}] AI 拆分成功 → ${specs.length} 个子任务`);
       if (canNotice) {
         const lines = [
           `\uD83E\uDD16 AI 已自动拆为 ${specs.length} 个并行子任务：`,
@@ -20348,7 +20492,7 @@ async function handleParallelCommand(raw) {
         });
       }
     } else if (dec.reason === "llm_unavailable" || dec.reason === "parse_failed") {
-      log11?.warn(`[${PLUGIN_NAME18}] AI 拆分失败（${dec.reason}），按单任务执行`);
+      log11?.warn(`[${PLUGIN_NAME19}] AI 拆分失败（${dec.reason}），按单任务执行`);
     }
   }
   if (canNotice) {
@@ -20427,7 +20571,7 @@ async function handleParallelCommand(raw) {
     });
   } catch (err) {
     const msg = err instanceof Error ? err.message : String(err);
-    log11?.error(`[${PLUGIN_NAME18}] schedule 抛错`, { error: msg });
+    log11?.error(`[${PLUGIN_NAME19}] schedule 抛错`, { error: msg });
     await safeReply2(ctx, `❌ 并发调度失败：${msg}`);
     return { ok: false, reason: msg };
   }
@@ -20445,7 +20589,7 @@ async function handleParallelCommand(raw) {
   }
   await safeReply2(ctx, summaryLines.join(`
 `));
-  log11?.info(`[${PLUGIN_NAME18}] schedule 完成`, {
+  log11?.info(`[${PLUGIN_NAME19}] schedule 完成`, {
     parentId,
     success: result.digest.success,
     failed: result.digest.failed,
@@ -20458,7 +20602,7 @@ async function handleParallelCommand(raw) {
     try {
       await ctx.onCompleted(result);
     } catch (err) {
-      log11?.warn(`[${PLUGIN_NAME18}] onCompleted hook 抛错（已隔离）`, {
+      log11?.warn(`[${PLUGIN_NAME19}] onCompleted hook 抛错（已隔离）`, {
         error: err instanceof Error ? err.message : String(err)
       });
     }
@@ -20500,7 +20644,7 @@ async function writeLog(level, msg, data) {
   const line = JSON.stringify({
     ts: new Date().toISOString(),
     level,
-    plugin: PLUGIN_NAME18,
+    plugin: PLUGIN_NAME19,
     msg,
     data
   }) + `
@@ -20511,11 +20655,11 @@ async function writeLog(level, msg, data) {
     await fs18.appendFile(logFile, line, "utf8");
   } catch {}
 }
-logLifecycle(PLUGIN_NAME18, "import");
+logLifecycle(PLUGIN_NAME19, "import");
 var subtasksServer = async (ctx) => {
-  const log11 = makePluginLogger(PLUGIN_NAME18);
+  const log11 = makePluginLogger(PLUGIN_NAME19);
   const client = ctx?.client ?? undefined;
-  logLifecycle(PLUGIN_NAME18, "activate", {
+  logLifecycle(PLUGIN_NAME19, "activate", {
     directory: ctx.directory,
     hasClient: Boolean(client)
   });
@@ -20612,19 +20756,19 @@ var subtasksServer = async (ctx) => {
           });
         }
       } catch (err) {
-        log11.error(`[${PLUGIN_NAME18}] command.execute.before 异常（已隔离）`, {
+        log11.error(`[${PLUGIN_NAME19}] command.execute.before 异常（已隔离）`, {
           error: err instanceof Error ? err.message : String(err)
         });
       }
     }
   };
 };
-var handler18 = subtasksServer;
+var handler19 = subtasksServer;
 
 // plugins/terminal-monitor.ts
 import * as crypto5 from "node:crypto";
-var PLUGIN_NAME19 = "terminal-monitor";
-logLifecycle(PLUGIN_NAME19, "import", {});
+var PLUGIN_NAME20 = "terminal-monitor";
+logLifecycle(PLUGIN_NAME20, "import", {});
 var DEFAULT_CONFIG6 = {
   minScore: 0.6,
   cooldownMs: 30000,
@@ -20906,17 +21050,17 @@ function describeError(err) {
     return String(err);
   }
 }
-var log11 = makePluginLogger(PLUGIN_NAME19);
+var log11 = makePluginLogger(PLUGIN_NAME20);
 var lru = new FingerprintLRU2;
 var _lastNotification = null;
 var terminalMonitorServer = async (ctx) => {
-  logLifecycle(PLUGIN_NAME19, "activate", {
+  logLifecycle(PLUGIN_NAME20, "activate", {
     directory: ctx.directory,
     triggerEventTypes: ["terminal.output", "terminal.exit"]
   });
   return {
     event: async ({ event }) => {
-      await safeAsync(PLUGIN_NAME19, "event", async () => {
+      await safeAsync(PLUGIN_NAME20, "event", async () => {
         const e = event;
         if (!e || typeof e.type !== "string")
           return;
@@ -20930,7 +21074,7 @@ var terminalMonitorServer = async (ctx) => {
             _lastNotification = msg;
           }
         });
-        safeWriteLog(PLUGIN_NAME19, {
+        safeWriteLog(PLUGIN_NAME20, {
           hook: "event",
           type: e.type,
           notified: r.notified,
@@ -20938,17 +21082,17 @@ var terminalMonitorServer = async (ctx) => {
           findings: r.notification?.findings.length ?? 0
         });
         if (r.notified && r.notification) {
-          log11.info(`[${PLUGIN_NAME19}] 反馈 ${r.notification.findings.length} 条 → ${r.notification.summary}`);
+          log11.info(`[${PLUGIN_NAME20}] 反馈 ${r.notification.findings.length} 条 → ${r.notification.summary}`);
         }
       });
     }
   };
 };
-var handler19 = terminalMonitorServer;
+var handler20 = terminalMonitorServer;
 
 // plugins/token-manager.ts
-var PLUGIN_NAME20 = "token-manager";
-logLifecycle(PLUGIN_NAME20, "import", {});
+var PLUGIN_NAME21 = "token-manager";
+logLifecycle(PLUGIN_NAME21, "import", {});
 async function handleMessageBefore(raw, log12, defaults) {
   const ctx = raw ?? {};
   if (!Array.isArray(ctx.messages) || ctx.messages.length === 0)
@@ -20968,21 +21112,21 @@ async function handleMessageBefore(raw, log12, defaults) {
     };
     if (r.compressed) {
       ctx.messages = r.messages;
-      log12?.info(`[${PLUGIN_NAME20}] 压缩 ${r.before.count}→${r.after.count} 条 / ${r.before.tokens}→${r.after.tokens} tokens`);
+      log12?.info(`[${PLUGIN_NAME21}] 压缩 ${r.before.count}→${r.after.count} 条 / ${r.before.tokens}→${r.after.tokens} tokens`);
     }
     return r;
   } catch (err) {
-    log12?.warn(`[${PLUGIN_NAME20}] 压缩异常（已隔离）`, {
+    log12?.warn(`[${PLUGIN_NAME21}] 压缩异常（已隔离）`, {
       error: err instanceof Error ? err.message : String(err)
     });
     return null;
   }
 }
-var log12 = makePluginLogger(PLUGIN_NAME20);
+var log12 = makePluginLogger(PLUGIN_NAME21);
 var tokenManagerServer = async (ctx) => {
   const rt = loadRuntimeSync();
   const threshold = rt.runtime.context.condenser_threshold_ratio;
-  logLifecycle(PLUGIN_NAME20, "activate", {
+  logLifecycle(PLUGIN_NAME21, "activate", {
     directory: ctx.directory,
     threshold,
     target: DEFAULT_CONDENSE.target,
@@ -20991,7 +21135,7 @@ var tokenManagerServer = async (ctx) => {
   });
   return {
     "experimental.chat.messages.transform": async (_input, output) => {
-      await safeAsync(PLUGIN_NAME20, "experimental.chat.messages.transform", async () => {
+      await safeAsync(PLUGIN_NAME21, "experimental.chat.messages.transform", async () => {
         const list = output.messages;
         if (!Array.isArray(list) || list.length === 0)
           return;
@@ -21004,7 +21148,7 @@ var tokenManagerServer = async (ctx) => {
         const r = await handleMessageBefore({ messages: flat }, log12, { threshold });
         if (!r)
           return;
-        safeWriteLog(PLUGIN_NAME20, {
+        safeWriteLog(PLUGIN_NAME21, {
           hook: "experimental.chat.messages.transform",
           mode: "observe-only",
           before_msgs: r.before.count,
@@ -21015,13 +21159,13 @@ var tokenManagerServer = async (ctx) => {
           reason: r.reason
         });
         if (r.compressed) {
-          log12.warn(`[${PLUGIN_NAME20}] advise condense: ${r.before.count}→${r.after.count} msgs / ${r.before.tokens}→${r.after.tokens} tokens (observe-only, no write-back to avoid opencode message schema mismatch)`);
+          log12.warn(`[${PLUGIN_NAME21}] advise condense: ${r.before.count}→${r.after.count} msgs / ${r.before.tokens}→${r.after.tokens} tokens (observe-only, no write-back to avoid opencode message schema mismatch)`);
         }
       });
     }
   };
 };
-var handler20 = tokenManagerServer;
+var handler21 = tokenManagerServer;
 
 // plugins/tool-policy.ts
 import { promises as fs19 } from "node:fs";
@@ -21284,9 +21428,14 @@ function checkFileAccess(acl, file, op) {
 }
 
 // plugins/tool-policy.ts
-var PLUGIN_NAME21 = "tool-policy";
-logLifecycle(PLUGIN_NAME21, "import", {});
+var PLUGIN_NAME22 = "tool-policy";
+logLifecycle(PLUGIN_NAME22, "import", {});
 var EMPTY_ACL = { whitelistMode: false };
+function getAgentAcl(cfg, agent) {
+  if (!agent || !cfg.per_agent)
+    return;
+  return cfg.per_agent[agent];
+}
 var SUBAGENT_APPLY_DENY_LIST = new Set([
   "coder",
   "planner",
@@ -21350,7 +21499,7 @@ async function loadPolicy(root = process.cwd()) {
 function classifyToolKind(toolName) {
   return classifyTool(toolName);
 }
-async function resolveCurrentAgent(client, sessionID, log13) {
+async function resolveCurrentAgent2(client, sessionID, log13) {
   try {
     const sessionApi = client?.session;
     if (!sessionApi || typeof sessionApi.get !== "function") {
@@ -21376,24 +21525,24 @@ async function resolveCurrentAgent(client, sessionID, log13) {
     return;
   }
 }
-var log13 = makePluginLogger(PLUGIN_NAME21);
+var log13 = makePluginLogger(PLUGIN_NAME22);
 var toolPolicyServer = async (ctx) => {
   const directory = ctx.directory ?? process.cwd();
   const cfg = await loadPolicy(directory);
-  logLifecycle(PLUGIN_NAME21, "activate", {
+  logLifecycle(PLUGIN_NAME22, "activate", {
     directory,
     acl_loaded: !!cfg.acl
   });
   return {
     "tool.execute.before": async (input, output) => {
       let denied;
-      await safeAsync(PLUGIN_NAME21, "tool.execute.before", async () => {
+      await safeAsync(PLUGIN_NAME22, "tool.execute.before", async () => {
         const toolName = input.tool;
         const argsObj = output.args ?? {};
         const needsAgentDetection = toolName === "pending_changes" && (argsObj.action === "apply" || argsObj.action === "apply_all");
         let currentAgent = undefined;
         if (needsAgentDetection) {
-          currentAgent = await resolveCurrentAgent(ctx.client, input.sessionID, log13);
+          currentAgent = await resolveCurrentAgent2(ctx.client, input.sessionID, log13);
         }
         const files = [];
         const filePath = argsObj["path"] ?? argsObj["filePath"] ?? argsObj["file"];
@@ -21407,7 +21556,7 @@ var toolPolicyServer = async (ctx) => {
           args: argsObj,
           files: files.length ? files : undefined
         }, cfg, currentAgent);
-        safeWriteLog(PLUGIN_NAME21, {
+        safeWriteLog(PLUGIN_NAME22, {
           hook: "tool.execute.before",
           tool: toolName,
           callID: input.callID,
@@ -21418,7 +21567,7 @@ var toolPolicyServer = async (ctx) => {
           currentAgent
         });
         if (decision.action === "deny") {
-          log13.warn(`[${PLUGIN_NAME21}] DENY ${toolName}`, {
+          log13.warn(`[${PLUGIN_NAME22}] DENY ${toolName}`, {
             action: argsObj.action,
             currentAgent,
             reasons: decision.reasons,
@@ -21433,7 +21582,7 @@ var toolPolicyServer = async (ctx) => {
     }
   };
 };
-var handler21 = toolPolicyServer;
+var handler22 = toolPolicyServer;
 
 // plugins/update-checker.ts
 import { existsSync as existsSync5 } from "node:fs";
@@ -21463,7 +21612,7 @@ import * as zlib from "node:zlib";
 // lib/version-injected.ts
 function getInjectedVersion() {
   try {
-    const v = "0.5.8";
+    const v = "0.5.9";
     if (typeof v === "string" && /^\d+\.\d+\.\d+/.test(v)) {
       return v;
     }
@@ -21966,20 +22115,20 @@ function compareOpencodeVersion(opts) {
 }
 
 // plugins/update-checker.ts
-var PLUGIN_NAME22 = "update-checker";
+var PLUGIN_NAME23 = "update-checker";
 var PLUGIN_VERSION = "2.0.0";
-logLifecycle(PLUGIN_NAME22, "import", { version: PLUGIN_VERSION });
+logLifecycle(PLUGIN_NAME23, "import", { version: PLUGIN_VERSION });
 var updateCheckerServer = async (ctx) => {
   const yieldResult = shouldYieldToLocalPlugin({ directory: ctx.directory });
   if (yieldResult.yield) {
-    safeWriteLog(PLUGIN_NAME22, {
+    safeWriteLog(PLUGIN_NAME23, {
       level: "info",
       msg: "dev_mode_yield_skip",
       reason: yieldResult.reason,
       markerPath: yieldResult.markerPath,
       detail: formatYieldLog(yieldResult)
     });
-    logLifecycle(PLUGIN_NAME22, "activate", {
+    logLifecycle(PLUGIN_NAME23, "activate", {
       yield_to_local: true,
       yield_reason: yieldResult.reason,
       skipped: "auto_install + background_check"
@@ -21988,7 +22137,7 @@ var updateCheckerServer = async (ctx) => {
   }
   const rt = loadRuntimeSync();
   const u = rt.runtime.update;
-  logLifecycle(PLUGIN_NAME22, "activate", {
+  logLifecycle(PLUGIN_NAME23, "activate", {
     version: PLUGIN_VERSION,
     auto_check_enabled: u.auto_check_enabled,
     interval_hours: u.interval_hours,
@@ -22000,14 +22149,14 @@ var updateCheckerServer = async (ctx) => {
     repo_fallback: u.repo,
     config_source: "codeforge.json"
   });
-  await safeAsync(PLUGIN_NAME22, "opencode_version_check", async () => {
+  await safeAsync(PLUGIN_NAME23, "opencode_version_check", async () => {
     const compat = loadCompatibility();
     const opencodeVer = detectOpencodeVersion();
     const verdict = compareOpencodeVersion({
       currentOpencodeVer: opencodeVer,
       compat
     });
-    safeWriteLog(PLUGIN_NAME22, {
+    safeWriteLog(PLUGIN_NAME23, {
       level: "info",
       msg: "opencode_version_check",
       opencodeVer,
@@ -22024,14 +22173,14 @@ var updateCheckerServer = async (ctx) => {
     }
   });
   if (!u.auto_check_enabled) {
-    safeWriteLog(PLUGIN_NAME22, {
+    safeWriteLog(PLUGIN_NAME23, {
       level: "info",
       msg: "auto-check disabled (codeforge.json update.auto_check_enabled=false)"
     });
     return {};
   }
   setImmediate(() => {
-    safeAsync(PLUGIN_NAME22, "checkAndMaybeUpdate", async () => {
+    safeAsync(PLUGIN_NAME23, "checkAndMaybeUpdate", async () => {
       const local = readLocalVersion();
       let npmResult = null;
       try {
@@ -22042,7 +22191,7 @@ var updateCheckerServer = async (ctx) => {
           timeoutMs: 5000
         });
       } catch (e) {
-        safeWriteLog(PLUGIN_NAME22, {
+        safeWriteLog(PLUGIN_NAME23, {
           level: "warn",
           msg: "npm_fetch_failed",
           error: e.message
@@ -22051,7 +22200,7 @@ var updateCheckerServer = async (ctx) => {
         return;
       }
       if (!npmResult) {
-        safeWriteLog(PLUGIN_NAME22, {
+        safeWriteLog(PLUGIN_NAME23, {
           level: "info",
           msg: "npm_no_release",
           package: u.package,
@@ -22060,7 +22209,7 @@ var updateCheckerServer = async (ctx) => {
         return;
       }
       const hasUpdate = cmpVersion(local, npmResult.version) < 0;
-      safeWriteLog(PLUGIN_NAME22, {
+      safeWriteLog(PLUGIN_NAME23, {
         level: "info",
         msg: "npm_check_result",
         local,
@@ -22075,10 +22224,10 @@ var updateCheckerServer = async (ctx) => {
    更新命令：npx ${u.package} install --global`);
         return;
       }
-      await safeAsync(PLUGIN_NAME22, "auto_install_bundle", async () => {
+      await safeAsync(PLUGIN_NAME23, "auto_install_bundle", async () => {
         const target = getOpencodeBundlePath();
         if (!target) {
-          safeWriteLog(PLUGIN_NAME22, {
+          safeWriteLog(PLUGIN_NAME23, {
             level: "warn",
             msg: "auto_install_skip",
             reason: "无法定位 opencode bundle 路径"
@@ -22097,7 +22246,7 @@ var updateCheckerServer = async (ctx) => {
           oldVersion: local,
           keepBackups: u.backup_keep
         });
-        safeWriteLog(PLUGIN_NAME22, {
+        safeWriteLog(PLUGIN_NAME23, {
           level: "info",
           msg: "auto_install_success",
           local,
@@ -22137,7 +22286,7 @@ function getOpencodeBundlePath() {
   return candidates[0] ?? null;
 }
 async function fallbackToGitHubReleases(ctx, u) {
-  await safeAsync(PLUGIN_NAME22, "github_fallback", async () => {
+  await safeAsync(PLUGIN_NAME23, "github_fallback", async () => {
     const result = await checkUpdateOnce({
       repo: u.repo,
       intervalMs: u.interval_hours * 3600 * 1000
@@ -22147,7 +22296,7 @@ async function fallbackToGitHubReleases(ctx, u) {
 }
 async function reportLegacyResult(ctx, result, repo) {
   if (result.error && !result.fromCache) {
-    safeWriteLog(PLUGIN_NAME22, {
+    safeWriteLog(PLUGIN_NAME23, {
       level: "warn",
       msg: `update check failed: ${result.error}`,
       ...result
@@ -22155,7 +22304,7 @@ async function reportLegacyResult(ctx, result, repo) {
     return;
   }
   if (!result.hasUpdate) {
-    safeWriteLog(PLUGIN_NAME22, {
+    safeWriteLog(PLUGIN_NAME23, {
       level: "info",
       msg: `up-to-date (local=${result.local}, remote=${result.remote}${result.fromCache ? ", from_cache" : ""})`,
       ...result
@@ -22165,7 +22314,7 @@ async function reportLegacyResult(ctx, result, repo) {
   const updateCmd = `bunx --bun github:${repo} install`;
   const toast = `[CodeForge] 有新版本：${result.local} → ${result.remote}
   更新命令：${updateCmd}`;
-  safeWriteLog(PLUGIN_NAME22, {
+  safeWriteLog(PLUGIN_NAME23, {
     level: "info",
     msg: "new_version_available_github_fallback",
     local: result.local,
@@ -22176,17 +22325,17 @@ async function reportLegacyResult(ctx, result, repo) {
   await postToast(ctx, toast);
 }
 async function postToast(ctx, message) {
-  await safeAsync(PLUGIN_NAME22, "client.app.log", async () => {
+  await safeAsync(PLUGIN_NAME23, "client.app.log", async () => {
     await ctx.client.app.log({
       body: {
-        service: PLUGIN_NAME22,
+        service: PLUGIN_NAME23,
         level: "info",
         message
       }
     });
   });
 }
-var handler22 = updateCheckerServer;
+var handler23 = updateCheckerServer;
 
 // plugins/workflow-engine.ts
 import * as path26 from "node:path";
@@ -22641,9 +22790,9 @@ async function runStepAutoFeedback(step, adapter) {
 }
 
 // plugins/workflow-engine.ts
-var PLUGIN_NAME23 = "workflow-engine";
-logLifecycle(PLUGIN_NAME23, "import", {});
-var fallbackLog2 = makePluginLogger(PLUGIN_NAME23);
+var PLUGIN_NAME24 = "workflow-engine";
+logLifecycle(PLUGIN_NAME24, "import", {});
+var fallbackLog2 = makePluginLogger(PLUGIN_NAME24);
 var _registry = null;
 async function loadRegistry(workflowsDir) {
   const { loaded, failed } = await loadWorkflowsFromDir(workflowsDir);
@@ -22663,32 +22812,32 @@ async function handleCommandInvoked(raw, workflowsDir = "workflows") {
   const log14 = ctx.log ?? fallbackLog2;
   const command = typeof ctx.command === "string" ? ctx.command : null;
   if (!command) {
-    log14.warn(`[${PLUGIN_NAME23}] command.invoked 缺 command 字段`, ctx);
+    log14.warn(`[${PLUGIN_NAME24}] command.invoked 缺 command 字段`, ctx);
     return null;
   }
   const reg = await ensureRegistry(workflowsDir);
   if (reg.errors.length) {
-    log14.warn(`[${PLUGIN_NAME23}] 有 ${reg.errors.length} 个 workflow 加载失败`, reg.errors);
+    log14.warn(`[${PLUGIN_NAME24}] 有 ${reg.errors.length} 个 workflow 加载失败`, reg.errors);
   }
   const wf = reg.workflows.find((w) => matchesTrigger(w, command));
   if (!wf) {
-    log14.info(`[${PLUGIN_NAME23}] no workflow matches "${command}"`);
+    log14.info(`[${PLUGIN_NAME24}] no workflow matches "${command}"`);
     return null;
   }
-  log14.info(`[${PLUGIN_NAME23}] dispatch "${command}" → workflow "${wf.name}"`);
+  log14.info(`[${PLUGIN_NAME24}] dispatch "${command}" → workflow "${wf.name}"`);
   try {
     const result = await run(wf, {
       mode: ctx.adapter ? "real" : "dry_run",
       autonomy: ctx.autonomy ?? "semi",
       adapter: ctx.adapter
     });
-    log14.info(`[${PLUGIN_NAME23}] workflow "${wf.name}" 完成 (${result.plan.mode})`, {
+    log14.info(`[${PLUGIN_NAME24}] workflow "${wf.name}" 完成 (${result.plan.mode})`, {
       steps: result.plan.steps.length,
       results: result.results.length
     });
     return result;
   } catch (err) {
-    log14.error(`[${PLUGIN_NAME23}] workflow "${wf.name}" 执行失败`, {
+    log14.error(`[${PLUGIN_NAME24}] workflow "${wf.name}" 执行失败`, {
       error: err instanceof Error ? err.message : String(err)
     });
     throw err;
@@ -22697,15 +22846,15 @@ async function handleCommandInvoked(raw, workflowsDir = "workflows") {
 var workflowEngineServer = async (ctx) => {
   const directory = ctx.directory ?? process.cwd();
   const workflowsDir = path26.join(directory, "workflows");
-  ensureRegistry(workflowsDir).catch((err) => fallbackLog2.warn(`[${PLUGIN_NAME23}] preload workflows failed`, {
+  ensureRegistry(workflowsDir).catch((err) => fallbackLog2.warn(`[${PLUGIN_NAME24}] preload workflows failed`, {
     error: err instanceof Error ? err.message : String(err)
   }));
-  logLifecycle(PLUGIN_NAME23, "activate", { directory, workflowsDir });
+  logLifecycle(PLUGIN_NAME24, "activate", { directory, workflowsDir });
   return {
     "command.execute.before": async (input, output) => {
-      await safeAsync(PLUGIN_NAME23, "command.execute.before", async () => {
+      await safeAsync(PLUGIN_NAME24, "command.execute.before", async () => {
         const cmd = input.command.startsWith("/") ? input.command : `/${input.command}`;
-        safeWriteLog(PLUGIN_NAME23, {
+        safeWriteLog(PLUGIN_NAME24, {
           hook: "command.execute.before",
           command: cmd,
           sessionID: input.sessionID
@@ -22720,14 +22869,14 @@ var workflowEngineServer = async (ctx) => {
       });
     },
     "chat.message": async (input, output) => {
-      await safeAsync(PLUGIN_NAME23, "chat.message", async () => {
+      await safeAsync(PLUGIN_NAME24, "chat.message", async () => {
         const text = extractUserText(output).trim();
         if (!text.startsWith("/"))
           return;
         const cmd = text.split(/\s+/)[0];
         if (!cmd)
           return;
-        safeWriteLog(PLUGIN_NAME23, {
+        safeWriteLog(PLUGIN_NAME24, {
           hook: "chat.message",
           command: cmd,
           sessionID: input.sessionID
@@ -22737,12 +22886,12 @@ var workflowEngineServer = async (ctx) => {
     }
   };
 };
-var handler23 = workflowEngineServer;
+var handler24 = workflowEngineServer;
 
 // plugins/session-worktree-guard.ts
 import path27 from "node:path";
-var PLUGIN_NAME24 = "session-worktree-guard";
-logLifecycle(PLUGIN_NAME24, "import", {});
+var PLUGIN_NAME25 = "session-worktree-guard";
+logLifecycle(PLUGIN_NAME25, "import", {});
 var WRITE_INTENT_RE = />(?!=)|\btee\b|\brm\b|\bmv\b|\bcp\b|\bmkdir\b|\btouch\b|\bchmod\b|\bchown\b|\bln\b/;
 var READ_ONLY_COMMANDS = /^\s*(?:ls|cat|head|tail|grep|rg|find|fd|wc|stat|file|which|whereis|echo|pwd|cd|pushd|popd|env|printenv|type|less|more|sort|uniq|awk|tr|cut|jq|date|whoami|id|uname|git(?:\s+-C\s+\S+)?\s+(?:log|show|diff|status|branch|tag|remote|config\s+--get|rev-parse|rev-list|ls-files|ls-tree|cat-file|describe|reflog|blame|shortlog|name-rev|symbolic-ref|merge-base|worktree\s+list|stash\s+list|stash\s+show))\b/;
 var SIDE_EFFECT_TOKEN_RE = />(?!=)|\|\s*tee\b|\btee\b/;
@@ -22821,7 +22970,17 @@ function isWriteOperation(toolName, argsObj, mainRoot) {
     return true;
   return false;
 }
-var log14 = makePluginLogger(PLUGIN_NAME24);
+function collectWritePaths(toolName, argsObj, worktreeRoot) {
+  const out = [];
+  const candidate = toolName === "write" || toolName === "edit" ? argsObj["filePath"] : toolName === "ast_edit" ? argsObj["target"] : undefined;
+  if (typeof candidate !== "string" || candidate.length === 0)
+    return out;
+  const abs = path27.isAbsolute(candidate) ? candidate : path27.resolve(worktreeRoot, candidate);
+  const rel = path27.relative(worktreeRoot, abs).split(path27.sep).join("/");
+  out.push(rel);
+  return out;
+}
+var log14 = makePluginLogger(PLUGIN_NAME25);
 function resolveMainRoot2(rawDir) {
   const worktreeMarker = "/.git/codeforge-worktrees/";
   const idx = rawDir.indexOf(worktreeMarker);
@@ -22832,7 +22991,17 @@ function resolveMainRoot2(rawDir) {
 }
 var sessionWorktreeGuardPlugin = async (ctx) => {
   const mainRoot = resolveMainRoot2(ctx.directory ?? process.cwd());
-  logLifecycle(PLUGIN_NAME24, "activate", {
+  let policyCfg = {};
+  try {
+    policyCfg = await loadPolicy(mainRoot);
+  } catch (err) {
+    log14.warn("loadPolicy failed (class E skipped)", {
+      mainRoot,
+      error: err instanceof Error ? err.message : String(err)
+    });
+  }
+  const perAgentEnabled = !!policyCfg.per_agent && Object.keys(policyCfg.per_agent).length > 0;
+  logLifecycle(PLUGIN_NAME25, "activate", {
     mainRoot,
     CODEFORGE_SESSION_ID: process.env["CODEFORGE_SESSION_ID"] ?? "(not set)"
   });
@@ -22842,7 +23011,7 @@ var sessionWorktreeGuardPlugin = async (ctx) => {
       if (!sessionId)
         return;
       let denied;
-      await safeAsync(PLUGIN_NAME24, "tool.execute.before", async () => {
+      await safeAsync(PLUGIN_NAME25, "tool.execute.before", async () => {
         const toolName = input.tool;
         const argsObj = output.args ?? {};
         let entry = null;
@@ -22867,7 +23036,7 @@ var sessionWorktreeGuardPlugin = async (ctx) => {
               if (parentEntry && parentEntry.status === "active") {
                 entry = parentEntry;
                 log14.debug?.(`[child-inherit] session ${sessionId} 继承父 ${parentId} 的 worktree`, { parentSessionId: parentId, worktreePath: parentEntry.worktreePath });
-                safeWriteLog(PLUGIN_NAME24, {
+                safeWriteLog(PLUGIN_NAME25, {
                   hook: "tool.execute.before",
                   tool: toolName,
                   sessionID: input.sessionID,
@@ -22886,7 +23055,7 @@ var sessionWorktreeGuardPlugin = async (ctx) => {
           try {
             entry = await bindSessionWorktree({ sessionId, mainRoot });
             log14.info(`[lazy-bind] auto-created worktree for session ${sessionId}`, { branch: entry.branch, path: entry.worktreePath });
-            safeWriteLog(PLUGIN_NAME24, {
+            safeWriteLog(PLUGIN_NAME25, {
               hook: "tool.execute.before",
               tool: toolName,
               sessionID: input.sessionID,
@@ -22896,7 +23065,7 @@ var sessionWorktreeGuardPlugin = async (ctx) => {
             });
           } catch (err) {
             log14.warn(`[lazy-bind] failed (落到主仓写)`, { sessionId, error: err instanceof Error ? err.message : String(err) });
-            safeWriteLog(PLUGIN_NAME24, {
+            safeWriteLog(PLUGIN_NAME25, {
               hook: "tool.execute.before",
               tool: toolName,
               sessionID: input.sessionID,
@@ -22919,7 +23088,7 @@ var sessionWorktreeGuardPlugin = async (ctx) => {
                 action,
                 caller
               });
-              safeWriteLog(PLUGIN_NAME24, {
+              safeWriteLog(PLUGIN_NAME25, {
                 hook: "tool.execute.before",
                 tool: toolName,
                 sessionID: input.sessionID,
@@ -22933,6 +23102,56 @@ var sessionWorktreeGuardPlugin = async (ctx) => {
             }
           }
         }
+        if (perAgentEnabled && isWriteOperation(toolName, argsObj, mainRoot)) {
+          const caller = await resolveAgentForGuard({ sessionID: input.sessionID, agent: input.agent }, ctx.client, log14);
+          if (caller === null) {
+            const reason = `[session-worktree-guard] DENIED: per-agent ACL 启用但 agent 解析失败 ` + `(L1 input.agent 缺, L2a chat-agent-cache 无, L2 IPC 反查失败) — fail-closed 拒绝写 ${toolName} ` + `(ADR:discover-write-permission-acl)`;
+            log14.warn(reason, {
+              sessionId,
+              tool: toolName,
+              source: "per-agent-acl-fail-closed"
+            });
+            safeWriteLog(PLUGIN_NAME25, {
+              hook: "tool.execute.before",
+              tool: toolName,
+              sessionID: input.sessionID,
+              action: "deny",
+              source: "per-agent-acl-fail-closed",
+              caller: null
+            });
+            denied = new DeniedError(reason);
+            return;
+          }
+          const agentAcl = getAgentAcl(policyCfg, caller);
+          if (agentAcl) {
+            const writePaths = collectWritePaths(toolName, argsObj, worktreePath);
+            for (const relPath of writePaths) {
+              const dec = checkFileAccess(agentAcl, relPath, "write");
+              if (dec.action === "deny") {
+                const reason = `[session-worktree-guard] DENIED: agent='${caller}' 写路径不在 ACL 白名单 — ` + `${relPath} (${dec.reason})`;
+                log14.warn(reason, {
+                  sessionId,
+                  tool: toolName,
+                  caller,
+                  path: relPath,
+                  acl_decision: dec
+                });
+                safeWriteLog(PLUGIN_NAME25, {
+                  hook: "tool.execute.before",
+                  tool: toolName,
+                  sessionID: input.sessionID,
+                  action: "deny",
+                  source: "per-agent-acl",
+                  caller,
+                  path: relPath,
+                  acl_decision: dec
+                });
+                denied = new DeniedError(reason);
+                return;
+              }
+            }
+          }
+        }
         if (toolName !== "plan_read" && entry.requiredPlanId && entry.planReadOk !== true) {
           let isWriteOp = WRITE_TOOLS.has(toolName);
           if (!isWriteOp && toolName === "bash") {
@@ -22961,7 +23180,7 @@ var sessionWorktreeGuardPlugin = async (ctx) => {
               requiredPlanId: entry.requiredPlanId,
               inheritedFromParent: inherited ? entry.sessionId : undefined
             });
-            safeWriteLog(PLUGIN_NAME24, {
+            safeWriteLog(PLUGIN_NAME25, {
               hook: "tool.execute.before",
               tool: toolName,
               sessionID: input.sessionID,
@@ -22979,7 +23198,7 @@ var sessionWorktreeGuardPlugin = async (ctx) => {
             const snippet = command.length > 60 ? command.slice(0, 60) + "…" : command;
             const reason = `[session-worktree-guard] DENIED: bash.command 含主仓绝对路径写操作 (${snippet})，请在当前 session worktree (${worktreePath}) 内操作`;
             log14.warn(reason, { sessionId, command: command.slice(0, 200) });
-            safeWriteLog(PLUGIN_NAME24, {
+            safeWriteLog(PLUGIN_NAME25, {
               hook: "tool.execute.before",
               tool: toolName,
               sessionID: input.sessionID,
@@ -22997,7 +23216,7 @@ var sessionWorktreeGuardPlugin = async (ctx) => {
             const newPath = rewritePath(filePath, mainRoot, worktreePath);
             if (newPath !== null) {
               log14.info(`rewrote ${toolName}.filePath: ${filePath} → ${newPath}`);
-              safeWriteLog(PLUGIN_NAME24, {
+              safeWriteLog(PLUGIN_NAME25, {
                 hook: "tool.execute.before",
                 tool: toolName,
                 field: "filePath",
@@ -23015,7 +23234,7 @@ var sessionWorktreeGuardPlugin = async (ctx) => {
             const newTarget = rewritePath(target, mainRoot, worktreePath);
             if (newTarget !== null) {
               log14.info(`rewrote ast_edit.target: ${target} → ${newTarget}`);
-              safeWriteLog(PLUGIN_NAME24, {
+              safeWriteLog(PLUGIN_NAME25, {
                 hook: "tool.execute.before",
                 tool: toolName,
                 field: "target",
@@ -23031,7 +23250,7 @@ var sessionWorktreeGuardPlugin = async (ctx) => {
             const newRoot = rewritePath(root, mainRoot, worktreePath);
             if (newRoot !== null) {
               log14.info(`rewrote ast_edit.root: ${root} → ${newRoot}`);
-              safeWriteLog(PLUGIN_NAME24, {
+              safeWriteLog(PLUGIN_NAME25, {
                 hook: "tool.execute.before",
                 tool: toolName,
                 field: "root",
@@ -23049,7 +23268,7 @@ var sessionWorktreeGuardPlugin = async (ctx) => {
             const newWorkdir = rewritePath(workdir, mainRoot, worktreePath);
             if (newWorkdir !== null) {
               log14.info(`rewrote bash.workdir: ${workdir} → ${newWorkdir}`);
-              safeWriteLog(PLUGIN_NAME24, {
+              safeWriteLog(PLUGIN_NAME25, {
                 hook: "tool.execute.before",
                 tool: toolName,
                 field: "workdir",
@@ -23067,19 +23286,22 @@ var sessionWorktreeGuardPlugin = async (ctx) => {
     }
   };
 };
-var handler24 = sessionWorktreeGuardPlugin;
+var handler25 = sessionWorktreeGuardPlugin;
 
 // plugins/worktree-lifecycle.ts
-var PLUGIN_NAME25 = "worktree-lifecycle";
-logLifecycle(PLUGIN_NAME25, "import", {});
+var PLUGIN_NAME26 = "worktree-lifecycle";
+logLifecycle(PLUGIN_NAME26, "import", {});
 var IDLE_TOAST_THROTTLE_MS = 60 * 60000;
 var IDLE_TOAST_DURATION_MS = 8000;
 var IDLE_TOAST_REMINDER_INTERVAL_MS = 30 * 60000;
+var PRUNE_INTERVAL_MS = 30 * 60000;
 var lastIdleToastAt = new Map;
-var log15 = makePluginLogger(PLUGIN_NAME25);
+var pruneRunning = false;
+var _pruneTimer;
+var log15 = makePluginLogger(PLUGIN_NAME26);
 var worktreeLifecyclePlugin = async (ctx) => {
   const mainRoot = ctx.directory;
-  logLifecycle(PLUGIN_NAME25, "activate", {
+  logLifecycle(PLUGIN_NAME26, "activate", {
     mainRoot: mainRoot ?? "(not set)",
     idle_threshold_ms: IDLE_TOAST_THROTTLE_MS
   });
@@ -23088,11 +23310,11 @@ var worktreeLifecyclePlugin = async (ctx) => {
   }
   const client = ctx.client;
   setImmediate(() => {
-    safeAsync(PLUGIN_NAME25, "activate.pruneOrphan", async () => {
+    safeAsync(PLUGIN_NAME26, "activate.pruneOrphan", async () => {
       const result = await pruneOrphanWorktrees(mainRoot);
       if (result.cleaned.length > 0 || result.failed.length > 0) {
         log15.info(`[pruneOrphan] cleaned=${result.cleaned.length} failed=${result.failed.length} skipped=${result.skipped}`);
-        safeWriteLog(PLUGIN_NAME25, {
+        safeWriteLog(PLUGIN_NAME26, {
           hook: "activate.pruneOrphan",
           cleaned: result.cleaned,
           failed: result.failed,
@@ -23101,16 +23323,46 @@ var worktreeLifecyclePlugin = async (ctx) => {
       }
     });
   });
+  if (_pruneTimer)
+    clearInterval(_pruneTimer);
+  _pruneTimer = setInterval(() => {
+    if (pruneRunning) {
+      safeWriteLog(PLUGIN_NAME26, {
+        hook: "interval.pruneOrphan",
+        action: "skip",
+        reason: "previous prune still running"
+      });
+      return;
+    }
+    pruneRunning = true;
+    safeAsync(PLUGIN_NAME26, "interval.pruneOrphan", async () => {
+      try {
+        const result = await pruneOrphanWorktrees(mainRoot);
+        if (result.cleaned.length > 0 || result.failed.length > 0) {
+          log15.info(`[pruneOrphan interval] cleaned=${result.cleaned.length} failed=${result.failed.length} skipped=${result.skipped}`);
+          safeWriteLog(PLUGIN_NAME26, {
+            hook: "interval.pruneOrphan",
+            cleaned: result.cleaned,
+            failed: result.failed,
+            skipped: result.skipped
+          });
+        }
+      } finally {
+        pruneRunning = false;
+      }
+    });
+  }, PRUNE_INTERVAL_MS);
+  _pruneTimer.unref();
   return {
     event: async ({ event }) => {
-      await safeAsync(PLUGIN_NAME25, "event", async () => {
+      await safeAsync(PLUGIN_NAME26, "event", async () => {
         const ended = extractEndedSessionID(event);
         if (!ended)
           return;
         if (ended.type === "session.deleted") {
           const entry = await getSessionWorktree(ended.sessionID, mainRoot);
           if (!entry || entry.status !== "active") {
-            safeWriteLog(PLUGIN_NAME25, {
+            safeWriteLog(PLUGIN_NAME26, {
               hook: "event",
               type: ended.type,
               sessionID: ended.sessionID,
@@ -23125,7 +23377,7 @@ var worktreeLifecyclePlugin = async (ctx) => {
               const fastDirty = await isWorktreeDirty(entry.worktreePath);
               if (!fastDirty) {
                 await discardSession({ sessionId: ended.sessionID, mainRoot });
-                safeWriteLog(PLUGIN_NAME25, {
+                safeWriteLog(PLUGIN_NAME26, {
                   hook: "event",
                   type: ended.type,
                   sessionID: ended.sessionID,
@@ -23160,7 +23412,7 @@ var worktreeLifecyclePlugin = async (ctx) => {
           }
           try {
             await discardSession({ sessionId: ended.sessionID, mainRoot });
-            safeWriteLog(PLUGIN_NAME25, {
+            safeWriteLog(PLUGIN_NAME26, {
               hook: "event",
               type: ended.type,
               sessionID: ended.sessionID,
@@ -23194,7 +23446,7 @@ var worktreeLifecyclePlugin = async (ctx) => {
           const idleMin = Math.round(idleMs / 60000);
           const msg = `\uD83D\uDCA4 Session ${ended.sessionID.slice(0, 8)} worktree 已空闲 ${idleMin}min，` + `用 /merge 收尾或 /discard-session 放弃`;
           const sent = await showToast2(client, { message: msg, variant: "default", duration: IDLE_TOAST_DURATION_MS, title: "CodeForge" }, log15);
-          safeWriteLog(PLUGIN_NAME25, {
+          safeWriteLog(PLUGIN_NAME26, {
             hook: "event",
             type: ended.type,
             sessionID: ended.sessionID,
@@ -23207,7 +23459,7 @@ var worktreeLifecyclePlugin = async (ctx) => {
     }
   };
 };
-var handler25 = worktreeLifecyclePlugin;
+var handler26 = worktreeLifecyclePlugin;
 
 // src/index.ts
 var PLUGIN_ID = "codeforge";
@@ -23219,26 +23471,27 @@ var HANDLERS = [
   { name: "auto-commit", init: handler3 },
   { name: "auto-learning", init: handler4 },
   { name: "channels", init: handler5 },
-  { name: "codeforge-tools", init: handler7 },
-  { name: "discover-spec-suggest", init: handler8 },
-  { name: "kh-auto-context", init: handler9 },
-  { name: "kh-reminder", init: handler10 },
-  { name: "memories-context", init: handler11 },
-  { name: "model-fallback", init: handler12 },
-  { name: "parallel-tool-nudge", init: handler15 },
-  { name: "pwsh-utf8", init: handler16 },
-  { name: "session-recovery", init: handler17 },
-  { name: "subtask-heartbeat", init: handler13 },
-  { name: "subtasks", init: handler18 },
-  { name: "parallel-status", init: handler14 },
-  { name: "terminal-monitor", init: handler19 },
-  { name: "token-manager", init: handler20 },
-  { name: "tool-heartbeat", init: handler6 },
-  { name: "tool-policy", init: handler21 },
-  { name: "update-checker", init: handler22 },
-  { name: "workflow-engine", init: handler23 },
-  { name: "session-worktree-guard", init: handler24 },
-  { name: "worktree-lifecycle", init: handler25 }
+  { name: "chat-agent-cache", init: handler6 },
+  { name: "codeforge-tools", init: handler8 },
+  { name: "discover-spec-suggest", init: handler9 },
+  { name: "kh-auto-context", init: handler10 },
+  { name: "kh-reminder", init: handler11 },
+  { name: "memories-context", init: handler12 },
+  { name: "model-fallback", init: handler13 },
+  { name: "parallel-tool-nudge", init: handler16 },
+  { name: "pwsh-utf8", init: handler17 },
+  { name: "session-recovery", init: handler18 },
+  { name: "subtask-heartbeat", init: handler14 },
+  { name: "subtasks", init: handler19 },
+  { name: "parallel-status", init: handler15 },
+  { name: "terminal-monitor", init: handler20 },
+  { name: "token-manager", init: handler21 },
+  { name: "tool-heartbeat", init: handler7 },
+  { name: "tool-policy", init: handler22 },
+  { name: "update-checker", init: handler23 },
+  { name: "workflow-engine", init: handler24 },
+  { name: "session-worktree-guard", init: handler25 },
+  { name: "worktree-lifecycle", init: handler26 }
 ];
 function makeSerialHook(hookName, fns) {
   return async (input, output) => {