@epoch-agent/cli 0.1.0

package/dist/index.js

@@ -0,0 +1,4642 @@
+#!/usr/bin/env node
+import {
+  writeProviderKey
+} from "./chunk-3SCZQI5W.js";
+
+// src/index.ts
+import { Command } from "commander";
+
+// src/commands/agents.ts
+import { findRole, roleSourceLabel } from "@epoch-agent/core";
+
+// src/exit-codes.ts
+var EXIT_CODES = {
+  /** 任务完成 */
+  SUCCESS: 0,
+  /** 通用失败（provider 起不来、运行时报错……） */
+  FAILURE: 1,
+  /**
+   * 非交互下有操作因**缺少预授权**被拒。
+   *
+   * 只在非交互路径出现：交互模式下用户亲手点的「拒绝」是他的决定，
+   * 不算 agent 被卡住，仍然退 0。
+   */
+  PERMISSION_DENIED: 3,
+  /**
+   * 企业托管设置挡下了这次启动（方案 22）。
+   *
+   * 和 FAILURE 分开的理由同上：这不是「epoch 坏了」，是**策略生效了**。
+   * 管理员按机器批量铺开一条 `disableBypassPermissionsMode` 之后，
+   * 要能从退出码上一眼看出哪些机器是被自己的策略拦下的，
+   * 而不是去每台机器上读 stderr 猜。
+   */
+  MANAGED_POLICY: 4,
+  /**
+   * `--max-turns` / `--max-budget-usd` 触顶，任务**没做完**就停了（方案 28）。
+   *
+   * 和 FAILURE 分开：CI 里这不是「epoch 坏了」，是**限额生效了** ——
+   * 该做的是看一眼输出决定要不要加额重跑，而不是去查日志。
+   * 跨会话预算（`budget.maxCostUsd`）触顶**不走这个码**，仍然退 0：
+   * 那是长期配置，每次都退非 0 会让流水线天天红。
+   *
+   * ⚠️ 方案 28 立项时写的是 `4`，那是 2026-08-08 的现状（当时只有 0/1/3）。
+   * `4` 后来被企业托管策略（方案 22）占了，而那个码已经在根 README 和
+   * MDM 文档里对外承诺过，不能挪。所以这里往后排。
+   */
+  LIMIT_EXCEEDED: 5,
+  /**
+   * `--input-format stream-json` 的输入有坏行（方案 28）。
+   *
+   * **不是**用法错误（那是 1）：命令敲对了，是宿主写进 stdin 的那一行不合协议。
+   * 坏行会被报到 stderr 并**跳过**（NDJSON 是按行分帧的，跳一行不会失步），
+   * 进程接着跑；这个码在收尾时才落。
+   */
+  INPUT_ERROR: 6
+};
+
+// src/errors.ts
+var CliError = class extends Error {
+  constructor(message, exitCode = EXIT_CODES.FAILURE, hint) {
+    super(message);
+    this.exitCode = exitCode;
+    this.hint = hint;
+    this.name = "CliError";
+  }
+  exitCode;
+  hint;
+};
+function isCancellation(err2) {
+  if (!(err2 instanceof Error)) return false;
+  return err2.name === "ExitPromptError" || err2.name === "AbortError" || // AbortController.abort() 默认抛的就是这个
+  err2.name === "Error" && err2.message === "The operation was aborted.";
+}
+var EXPECTED_FAILURES = {
+  /** 企业托管策略挡下的启动（方案 22 §2.6）。不是故障，是策略生效了 */
+  ManagedPolicyError: EXIT_CODES.MANAGED_POLICY,
+  /** `--agent` 给了不认识的角色名（方案 29 验收 #13）。可用角色都在 message 里 */
+  AgentRoleError: EXIT_CODES.FAILURE,
+  /** `--settings` 指的文件不是合法 JSON（方案 29 验收 #16）。hint 里带行号 */
+  SettingsFileError: EXIT_CODES.FAILURE
+};
+function expectedFailureExitCode(err2) {
+  if (!(err2 instanceof Error)) return void 0;
+  return EXPECTED_FAILURES[err2.name];
+}
+function hintOf(err2) {
+  const hint = err2.hint;
+  return typeof hint === "string" && hint.length > 0 ? hint : void 0;
+}
+function reportFatal(err2) {
+  if (isCancellation(err2)) {
+    process.stderr.write("\n\u5DF2\u53D6\u6D88\n");
+    process.exit(130);
+  }
+  const exitCode = err2 instanceof CliError ? err2.exitCode : expectedFailureExitCode(err2);
+  if (exitCode !== void 0 && err2 instanceof Error) {
+    process.stderr.write(`\u9519\u8BEF: ${err2.message}
+`);
+    const hint = hintOf(err2);
+    if (hint) process.stderr.write(`${hint}
+`);
+    process.exit(exitCode);
+  }
+  process.stderr.write(`${err2 instanceof Error ? err2.stack ?? err2.message : String(err2)}
+`);
+  process.exit(EXIT_CODES.FAILURE);
+}
+
+// src/commands/agents.ts
+var log = (msg) => {
+  process.stdout.write(msg + "\n");
+};
+async function withRuntime(fn) {
+  const { buildRuntime: buildRuntime4 } = await import("@epoch-agent/runtime");
+  const rt = await buildRuntime4({ installSignalHandlers: true });
+  try {
+    fn(rt);
+  } finally {
+    await rt.dispose();
+  }
+}
+function renderRole(role) {
+  const lines = [];
+  lines.push(`  ${role.name}  [${roleSourceLabel(role.source)}]`);
+  lines.push(`    ${role.description}`);
+  if (role.tools) {
+    lines.push(`    \u5DE5\u5177\uFF08\u58F0\u660E\uFF09: ${role.tools.join(", ")}`);
+  } else {
+    lines.push("    \u5DE5\u5177\uFF08\u58F0\u660E\uFF09: \u7EE7\u627F\u4E3B agent \u7684\u5168\u90E8\u53EF\u7528\u5DE5\u5177");
+  }
+  if (role.maxTurns !== void 0) lines.push(`    \u8F6E\u6B21\u4E0A\u9650: ${role.maxTurns}`);
+  return lines;
+}
+function renderRoleDetail(role) {
+  const lines = [...renderRole(role), ""];
+  if (role.prompt) {
+    lines.push("  \u89D2\u8272 prompt:");
+    for (const line of role.prompt.split("\n")) lines.push(`    ${line}`);
+  } else {
+    lines.push("  \u89D2\u8272 prompt: \u65E0\uFF08\u53EA\u6362\u6389\u5B50 agent \u7684\u8EAB\u4EFD\u884C\uFF0C\u5176\u4F59\u6CBF\u7528\u901A\u7528 prompt\uFF09");
+  }
+  return lines;
+}
+function registerAgentsCommand(program2) {
+  const agents = program2.command("agents").description("\u5217\u51FA\u53EF\u6D3E\u7ED9\u5B50 agent \u7684\u89D2\u8272\uFF08delegate_task \u7684 role \u53D6\u503C\uFF09").action(async () => {
+    await withRuntime((rt) => {
+      if (rt.agentRoles.length === 0) {
+        log("\u6CA1\u6709\u53EF\u7528\u89D2\u8272\uFF08provider \u8D77\u4E0D\u6765\u65F6 delegate_task \u4E0D\u4F1A\u6CE8\u518C\uFF09");
+        log("\u8FD0\u884C epoch doctor \u770B\u5177\u4F53\u662F\u54EA\u4E2A\u6A21\u5757\u7684\u95EE\u9898\u3002");
+        return;
+      }
+      log(`\u53EF\u6D3E\u89D2\u8272\uFF08${rt.agentRoles.length} \u4E2A\uFF09:
+`);
+      for (const role of rt.agentRoles) {
+        for (const line of renderRole(role)) log(line);
+        log("");
+      }
+      const notes = rt.diagnosticList.filter((d) => d.module === "Agent \u89D2\u8272");
+      if (notes.length > 0) {
+        log("\u52A0\u8F7D\u8BF4\u660E:");
+        for (const d of notes) log(`  ${d.detail}`);
+        log("");
+      }
+      log("\u5B9A\u4E49\u81EA\u5DF1\u7684\u89D2\u8272\uFF1A~/.epoch/agents/<\u540D\u5B57>.md\uFF08\u9879\u76EE\u7EA7\u653E .epoch/agents/\uFF0C\u9700\u4FE1\u4EFB\u5DE5\u4F5C\u533A\uFF09");
+      log("\u26A0 \u5DE5\u5177\u767D\u540D\u5355\u5BF9\u542B terminal \u7684\u89D2\u8272\u4E0D\u662F\u5B89\u5168\u8FB9\u754C \u2014\u2014 \u6709 shell \u5C31\u80FD\u7ED5\u5F00\u300C\u6CA1\u6709\u5199\u5DE5\u5177\u300D\u3002");
+    });
+  });
+  agents.command("show <name>").description("\u770B\u67D0\u4E2A\u89D2\u8272\u7684\u5B8C\u6574\u5B9A\u4E49\uFF08\u542B\u89D2\u8272 prompt\uFF09").action(async (name) => {
+    await withRuntime((rt) => {
+      const role = findRole(rt.agentRoles, name);
+      if (!role) {
+        const available = rt.agentRoles.map((r) => r.name).join(", ");
+        throw new CliError(
+          `\u6CA1\u6709\u540D\u4E3A "${name}" \u7684 agent \u89D2\u8272`,
+          EXIT_CODES.FAILURE,
+          available ? `\u53EF\u7528\uFF1A${available}` : "\u4E00\u4E2A\u89D2\u8272\u90FD\u6CA1\u52A0\u8F7D\u51FA\u6765\uFF0C\u8FD0\u884C epoch doctor \u770B\u539F\u56E0"
+        );
+      }
+      for (const line of renderRoleDetail(role)) log(line);
+    });
+  });
+}
+
+// src/commands/completion.ts
+var SHELLS = ["bash", "zsh", "fish", "powershell"];
+function longFlags(cmd) {
+  return cmd.options.map((o) => o.long).filter((l) => !!l);
+}
+function visibleSubcommands(cmd) {
+  return cmd.createHelp().visibleCommands(cmd);
+}
+function toSpec(cmd) {
+  return {
+    name: cmd.name(),
+    description: cmd.description(),
+    // `--help` 要手工补：commander 把它存在 `_helpOption` 里单独处理，**不进**
+    // `cmd.options`，所以 longFlags 拿不到。`--version` 反过来是真选项
+    // （run.ts 注册的，或者 `program.version()` 注册的），已经在里面了。
+    // 过一次 Set 是防有人又显式声明了同名 flag —— 重复项在 bash 里表现为
+    // 同一个候选出现两遍
+    options: [.../* @__PURE__ */ new Set([...longFlags(cmd), "--help"])],
+    subcommands: visibleSubcommands(cmd).map((sub) => toSpec(sub))
+  };
+}
+function describeCommands(program2) {
+  return toSpec(program2);
+}
+function words(spec) {
+  return [...spec.subcommands.map((s) => s.name), ...spec.options].join(" ");
+}
+function q(text) {
+  return text.replace(/'/g, "'\\''");
+}
+function bashBranch(cmd) {
+  if (cmd.subcommands.length === 0) return `    ${cmd.name}) words='${words(cmd)}' ;;`;
+  const inner = cmd.subcommands.map((s) => `          ${s.name}) words='${words(s)}' ;;`);
+  return [
+    `    ${cmd.name})`,
+    `      if [[ $COMP_CWORD -eq 2 ]]; then`,
+    `        words='${words(cmd)}'`,
+    `      else`,
+    `        case "\${COMP_WORDS[2]}" in`,
+    ...inner,
+    `          *) words='' ;;`,
+    `        esac`,
+    `      fi ;;`
+  ].join("\n");
+}
+function bashScript(root) {
+  return `# epoch bash \u8865\u5168\u3002\u88C5\u6CD5\uFF1A
+#   epoch completion bash > /usr/local/etc/bash_completion.d/epoch
+# \u6216\u76F4\u63A5 eval "$(epoch completion bash)"
+_epoch_completion() {
+  local cur words
+  cur="\${COMP_WORDS[COMP_CWORD]}"
+
+  if [[ $COMP_CWORD -eq 1 ]]; then
+    COMPREPLY=($(compgen -W '${words(root)}' -- "$cur"))
+    return
+  fi
+
+  case "\${COMP_WORDS[1]}" in
+${root.subcommands.map(bashBranch).join("\n")}
+    *) words='' ;;
+  esac
+
+  # \u6CA1\u6709\u5019\u9009\u65F6\u4EA4\u8FD8\u7ED9\u9ED8\u8BA4\u7684\u6587\u4EF6\u540D\u8865\u5168\uFF1A\`epoch "\u5206\u6790 <\u6587\u4EF6>"\` \u8981\u80FD\u8865\u8DEF\u5F84
+  if [[ -z "$words" ]]; then
+    COMPREPLY=($(compgen -f -- "$cur"))
+  else
+    COMPREPLY=($(compgen -W "$words" -- "$cur"))
+  fi
+}
+complete -F _epoch_completion epoch
+`;
+}
+function zshBranch(cmd) {
+  if (cmd.subcommands.length === 0) return `    ${cmd.name}) opts=(${words(cmd)}) ;;`;
+  const inner = cmd.subcommands.map((s) => `          ${s.name}) opts=(${words(s)}) ;;`);
+  return [
+    `    ${cmd.name})`,
+    `      if (( CURRENT == 3 )); then`,
+    `        opts=(${words(cmd)})`,
+    `      else`,
+    `        case "\${words[3]}" in`,
+    ...inner,
+    `          *) opts=() ;;`,
+    `        esac`,
+    `      fi ;;`
+  ].join("\n");
+}
+function zshScript(root) {
+  const cmds = root.subcommands.map((c) => `    '${c.name}:${q(c.description)}'`).join("\n");
+  return `#compdef epoch
+# epoch zsh \u8865\u5168\u3002\u88C5\u6CD5\uFF1A\u628A\u672C\u6587\u4EF6\u5B58\u6210 fpath \u91CC\u7684 _epoch\uFF0C
+# \u6216\u5728 .zshrc \u91CC eval "$(epoch completion zsh)"
+_epoch_completion() {
+  local -a cmds opts
+  cmds=(
+${cmds}
+  )
+
+  if (( CURRENT == 2 )); then
+    _describe -t commands '\u547D\u4EE4' cmds
+    compadd -- ${root.options.join(" ")}
+    return
+  fi
+
+  case "\${words[2]}" in
+${root.subcommands.map(zshBranch).join("\n")}
+    *) opts=() ;;
+  esac
+
+  if (( \${#opts} )); then
+    compadd -a opts
+  else
+    _files
+  fi
+}
+compdef _epoch_completion epoch
+`;
+}
+function fishLines(cmd, seen) {
+  const lines = [];
+  for (const sub of cmd.subcommands) {
+    const desc = sub.description || sub.name;
+    lines.push(`complete -c epoch -n '${seen}' -a '${sub.name}' -d '${q(desc)}'`);
+    lines.push(...fishLines(sub, `__fish_seen_subcommand_from ${sub.name}`));
+  }
+  for (const opt of cmd.options) {
+    lines.push(`complete -c epoch -n '${seen}' -l ${opt.slice(2)}`);
+  }
+  return lines;
+}
+function fishScript(root) {
+  return [
+    "# epoch fish \u8865\u5168\u3002\u88C5\u6CD5\uFF1A",
+    "#   epoch completion fish > ~/.config/fish/completions/epoch.fish",
+    ...fishLines(root, "__fish_use_subcommand")
+  ].join("\n");
+}
+function powershellEntries(cmd, prefix) {
+  const lines = [`    '${prefix}' = '${words(cmd)}'`];
+  for (const sub of cmd.subcommands) {
+    lines.push(...powershellEntries(sub, prefix ? `${prefix} ${sub.name}` : sub.name));
+  }
+  return lines;
+}
+function powershellScript(root) {
+  return `# epoch PowerShell completion.
+# Install: epoch completion powershell >> $PROFILE
+# Or for the current session only: epoch completion powershell | Out-String | Invoke-Expression
+Register-ArgumentCompleter -Native -CommandName epoch -ScriptBlock {
+  param($wordToComplete, $commandAst, $cursorPosition)
+
+  $epochWords = @{
+${powershellEntries(root, "").join("\n")}
+  }
+
+  # Words already typed, minus the executable and the word being completed
+  $typed = @($commandAst.CommandElements | Select-Object -Skip 1 | ForEach-Object { $_.ToString() })
+  if ($wordToComplete -and $typed.Count -gt 0) {
+    $typed = @($typed | Select-Object -First ($typed.Count - 1))
+  }
+
+  # Longest known command path wins; stop at the first flag or unknown word
+  $key = ''
+  foreach ($word in $typed) {
+    if ($word.StartsWith('-')) { break }
+    $next = if ($key) { "$key $word" } else { $word }
+    if (-not $epochWords.ContainsKey($next)) { break }
+    $key = $next
+  }
+
+  $candidates = $epochWords[$key]
+  if (-not $candidates) { return }
+  $candidates -split ' ' | Where-Object { $_ -like "$wordToComplete*" } | Sort-Object | ForEach-Object {
+    [System.Management.Automation.CompletionResult]::new($_, $_, 'ParameterValue', $_)
+  }
+}
+`;
+}
+function renderCompletion(program2, shell) {
+  const root = describeCommands(program2);
+  if (shell === "bash") return bashScript(root);
+  if (shell === "zsh") return zshScript(root);
+  if (shell === "powershell") return powershellScript(root);
+  return fishScript(root) + "\n";
+}
+function isShellName(value) {
+  return SHELLS.includes(value);
+}
+function registerCompletionCommand(program2) {
+  program2.command("completion").description(`\u751F\u6210 shell \u8865\u5168\u811A\u672C\uFF08${SHELLS.join(" / ")}\uFF09`).argument("<shell>", SHELLS.join(" / ")).action((shell) => {
+    if (!isShellName(shell)) {
+      throw new CliError(`\u4E0D\u652F\u6301\u7684 shell: ${shell}`, 1, `\u53EF\u9009: ${SHELLS.join(" / ")}`);
+    }
+    process.stdout.write(renderCompletion(program2, shell));
+  });
+}
+
+// src/commands/config.ts
+import { existsSync as existsSync2, readFileSync } from "fs";
+import { maskApiKey, t } from "@epoch-agent/infra";
+import {
+  API_KEY_ENV_VARS,
+  isPermissionLevel,
+  isProviderType,
+  parseModelRef,
+  PERMISSION_LEVELS,
+  PROVIDER_TYPES,
+  SHELL_KINDS
+} from "@epoch-agent/protocol";
+
+// src/files/config-yaml.ts
+import {
+  DEFAULT_YAML,
+  readConfigYaml,
+  readKey,
+  setScalar,
+  setSectionField,
+  unsetScalar,
+  unsetSectionField,
+  writeConfigYaml
+} from "@epoch-agent/infra";
+
+// src/paths.ts
+import { existsSync, mkdirSync } from "fs";
+import { hasProviderCredentials } from "@epoch-agent/core";
+import { configPath, envPath, resolveHomeDir } from "@epoch-agent/infra";
+var EPOCH_HOME = resolveHomeDir();
+var CONFIG_PATH = configPath(EPOCH_HOME);
+var ENV_PATH = envPath(EPOCH_HOME);
+function ensureEpochHome() {
+  if (!existsSync(EPOCH_HOME)) mkdirSync(EPOCH_HOME, { recursive: true });
+}
+function hasCredentials() {
+  return hasProviderCredentials(EPOCH_HOME);
+}
+
+// src/commands/config.ts
+var log2 = (msg) => {
+  process.stdout.write(msg + "\n");
+};
+function isPositiveNumber(v) {
+  const n = Number(v);
+  return Number.isFinite(n) && n > 0;
+}
+var BUDGET_FIELDS = {
+  maxCostUsd: isPositiveNumber,
+  maxTokens: isPositiveNumber,
+  warnAtPercent: (v) => isPositiveNumber(v) && Number(v) <= 100,
+  onUnknownPricing: (v) => v === "block" || v === "warn"
+};
+function knownKeys() {
+  return `provider, model, models.utility, permission, shell, ` + Object.keys(BUDGET_FIELDS).map((f) => `budget.${f}`).join(", ");
+}
+function maskSecrets(yaml) {
+  return yaml.replace(/^(\s*(?:apiKey|api_key|token|secret)\s*:\s*)(.+)$/gim, (_m, head, raw) => {
+    const value = String(raw).trim().replace(/^["']|["']$/g, "");
+    if (!value) return `${head}${raw}`;
+    return `${head}${maskApiKey(value)}`;
+  });
+}
+function registerConfigCommand(program2) {
+  const cmd = program2.command("config").description(t("cli.config.summary"));
+  cmd.command("show").description(t("cli.config.show")).option("--raw", t("cli.config.opt_raw")).action((opts) => {
+    if (!existsSync2(CONFIG_PATH)) {
+      log2("\u5C1A\u672A\u914D\u7F6E\u3002\u8FD0\u884C epoch model \u521D\u59CB\u5316\u3002");
+    } else {
+      const yaml = readFileSync(CONFIG_PATH, "utf-8").trim();
+      log2(opts.raw ? yaml : maskSecrets(yaml));
+    }
+  });
+  cmd.command("path").description(t("cli.config.path")).action(() => log2(CONFIG_PATH));
+  cmd.command("get").description(t("cli.config.get")).argument("<key>", t("cli.config.keys")).action((key) => {
+    const value = readKey(
+      readConfigYaml(CONFIG_PATH),
+      key === "provider" ? "provider.type" : key
+    );
+    if (value === void 0) throw new CliError(`${key} \u672A\u8BBE\u7F6E`);
+    log2(value);
+  });
+  cmd.command("set").description(t("cli.config.set")).argument("<key>", t("cli.config.keys")).argument("<value>", t("cli.config.value")).action((key, value) => {
+    ensureEpochHome();
+    writeConfigYaml(CONFIG_PATH, applySet(readConfigYaml(CONFIG_PATH), key, value));
+    log2(`\u2705 ${key} = ${value}`);
+  });
+  cmd.command("unset").description(t("cli.config.unset")).argument("<key>", t("cli.config.keys_unset")).action((key) => {
+    ensureEpochHome();
+    writeConfigYaml(CONFIG_PATH, applyUnset(readConfigYaml(CONFIG_PATH), key));
+    log2(`\u2705 \u5DF2\u5220\u9664 ${key}`);
+  });
+  registerSchemaCommand(cmd);
+  registerSecretCommand(cmd);
+}
+function registerSchemaCommand(cmd) {
+  cmd.command("schema").description(t("cli.config.schema")).action(async () => {
+    const { resolveProjectRoot: resolveProjectRoot4 } = await import("@epoch-agent/core");
+    const root = resolveProjectRoot4(process.cwd());
+    const { writeProjectSchemas } = await import("./schema-file-DH6X4N4K.js");
+    const written = await writeProjectSchemas(root);
+    for (const entry of written) log2(`\u2705 ${entry.path}`);
+    log2("");
+    log2(t("cli.config.schema_paste_hint"));
+    log2(`  { "$schema": "${written[0]?.reference ?? ""}", \u2026 }`);
+  });
+}
+function registerSecretCommand(cmd) {
+  cmd.command("secret").description(t("cli.config.secret")).option("--export", t("cli.config.opt_export")).action(async (opts) => {
+    const { ensureSecretsReady } = await import("@epoch-agent/runtime");
+    await ensureSecretsReady();
+    const { getSecretStore } = await import("@epoch-agent/infra");
+    const store = getSecretStore();
+    if (!store) throw new CliError("\u51ED\u636E\u5B58\u50A8\u672A\u5C31\u7EEA");
+    if (opts.export) await exportSecrets(store);
+    else await printSecretStatus(store);
+  });
+}
+async function printSecretStatus(store) {
+  log2(`${store.encrypted ? "\u2713" : "\u26A0"} \u540E\u7AEF: ${store.backend} \u2014\u2014 ${store.detail}`);
+  const names = (await store.list()).filter((n) => API_KEY_ENV_VARS.includes(n));
+  if (names.length === 0) {
+    log2("  (\u8FD8\u6CA1\u5B58\u8FC7 provider \u51ED\u636E\uFF0C\u8DD1 epoch model \u914D\u4E00\u4E2A)");
+    return;
+  }
+  for (const name of names) log2(`  ${name}`);
+}
+async function exportSecrets(store) {
+  const { isNonInteractive: isNonInteractive9 } = await import("@epoch-agent/core");
+  if (isNonInteractive9()) {
+    throw new CliError(
+      "epoch config secret --export \u9700\u8981\u4EA4\u4E92\u5F0F\u7EC8\u7AEF",
+      1,
+      "\u5B83\u4F1A\u628A\u51ED\u636E\u5199\u6210\u660E\u6587\uFF0C\u5FC5\u987B\u7531\u4EBA\u786E\u8BA4\u4E24\u6B21\u3002CI / \u5BB9\u5668\u91CC\u8BF7\u6539\u7528\u73AF\u5883\u53D8\u91CF\uFF08\u4F18\u5148\u7EA7\u6700\u9AD8\uFF09\u3002"
+    );
+  }
+  const { confirm } = await import("@inquirer/prompts");
+  log2(`\u5373\u5C06\u628A\u51ED\u636E\u4EE5\u660E\u6587\u5199\u5165 ${ENV_PATH}\uFF08\u6743\u9650 0600\uFF09\u3002`);
+  if (!await confirm({ message: "\u786E\u8BA4\u8981\u628A\u51ED\u636E\u5012\u6210\u660E\u6587\u5417\uFF1F", default: false })) {
+    log2("\u5DF2\u53D6\u6D88");
+    return;
+  }
+  const again = await confirm({
+    message: `\u518D\u786E\u8BA4\u4E00\u6B21\uFF1A${ENV_PATH} \u5C06\u5305\u542B\u53EF\u76F4\u63A5\u4F7F\u7528\u7684 API key`,
+    default: false
+  });
+  if (!again) {
+    log2("\u5DF2\u53D6\u6D88");
+    return;
+  }
+  ensureEpochHome();
+  const { exportSecretsToEnv } = await import("./env-file-JUOFDESY.js");
+  const written = await exportSecretsToEnv(store, ENV_PATH, API_KEY_ENV_VARS);
+  if (written.length === 0) {
+    log2("\u6CA1\u6709\u53EF\u5012\u51FA\u7684\u51ED\u636E");
+    return;
+  }
+  log2(`\u2705 \u5DF2\u5199\u51FA ${written.length} \u4E2A\u51ED\u636E\u5230 ${ENV_PATH}\uFF080600\uFF09`);
+  log2("   \u94A5\u5319\u4E32\u91CC\u90A3\u4EFD\u6CA1\u6709\u5220 \u2014\u2014 \u89E3\u6790\u94FE\u91CC .env \u538B\u5728\u94A5\u5319\u4E32\u4E4B\u4E0A\uFF0C\u8FD9\u4EFD\u4F1A\u751F\u6548\u3002");
+}
+function applySet(yaml, key, value) {
+  switch (key) {
+    case "provider":
+      if (!isProviderType(value)) {
+        throw new CliError(`\u672A\u77E5 provider: ${value}`, 1, `\u652F\u6301: ${PROVIDER_TYPES.join(", ")}`);
+      }
+      return yaml.replace(/^(\s*)type:.*$/m, `$1type: ${value}`);
+    case "model":
+      return setScalar(yaml, "model", value);
+    case "permission":
+      if (!isPermissionLevel(value)) {
+        throw new CliError(`\u672A\u77E5\u6743\u9650\u7EA7\u522B: ${value}`, 1, `\u652F\u6301: ${PERMISSION_LEVELS.join(", ")}`);
+      }
+      return setScalar(yaml, "permission", value);
+    case "shell": {
+      if (!SHELL_KINDS.includes(value)) {
+        throw new CliError(`\u672A\u77E5 shell: ${value}`, 1, `\u652F\u6301: ${SHELL_KINDS.join(", ")}`);
+      }
+      return setScalar(yaml, "shell", value);
+    }
+    case "models.utility": {
+      if (!parseModelRef(value)) {
+        throw new CliError(
+          `models.utility \u4E0D\u80FD\u4E3A\u7A7A`,
+          1,
+          "\u5F62\u5982 gpt-4o-mini \u6216 deepseek/deepseek-chat"
+        );
+      }
+      return setSectionField(yaml, "models", "utility", value);
+    }
+    default: {
+      const field = budgetField(key);
+      const validate = BUDGET_FIELDS[field];
+      if (!validate) throw new CliError(`\u672A\u77E5\u914D\u7F6E\u9879: ${key}`, 1, `\u652F\u6301: ${knownKeys()}`);
+      if (!validate(value)) throw new CliError(`${key} \u7684\u503C\u4E0D\u5408\u6CD5: ${value}`);
+      return setSectionField(yaml, "budget", field, value);
+    }
+  }
+}
+function applyUnset(yaml, key) {
+  if (key === "model" || key === "permission" || key === "shell") return unsetScalar(yaml, key);
+  if (key === "models.utility") return unsetSectionField(yaml, "models", "utility");
+  const field = budgetField(key);
+  if (BUDGET_FIELDS[field]) return unsetSectionField(yaml, "budget", field);
+  throw new CliError(
+    `\u4E0D\u652F\u6301\u5220\u9664: ${key}`,
+    1,
+    `\u53EF\u5220\u9664: model, permission, shell, models.utility, budget.<\u5B57\u6BB5>`
+  );
+}
+function budgetField(key) {
+  return key.startsWith("budget.") ? key.slice("budget.".length) : "";
+}
+
+// src/commands/mcp.ts
+import {
+  listMcpServers,
+  mcpLogin,
+  mcpLogout,
+  probeMcpServer
+} from "@epoch-agent/runtime";
+var log3 = (msg) => process.stdout.write(msg + "\n");
+var warn = (msg) => process.stderr.write(msg + "\n");
+var STATE_LABEL = {
+  "not-applicable": "\u4E0D\u9700\u8981\uFF08stdio\uFF09",
+  "bearer-header": "\u9759\u6001 Authorization header",
+  authorized: "\u5DF2\u767B\u5F55",
+  refreshable: "token \u8FC7\u671F\uFF0C\u4E0B\u6B21\u8FDE\u63A5\u81EA\u52A8\u7EED\u671F",
+  "logged-out": "\u672A\u767B\u5F55"
+};
+function registerMcpCommand(program2) {
+  const cmd = program2.command("mcp").description("\u7BA1\u7406 MCP server\uFF08\u5217\u8868 / \u63A2\u6D3B / OAuth \u767B\u5F55\uFF09");
+  cmd.command("list", { isDefault: true }).description("\u5217\u51FA\u5DF2\u914D\u7F6E\u7684 MCP server \u548C\u5404\u81EA\u7684\u767B\u5F55\u6001\uFF08\u4E0D\u8054\u7F51\uFF09").action(() => guardAsync(() => printList()));
+  cmd.command("status").description("\u8FDE\u4E00\u6B21\u6307\u5B9A server\uFF0C\u770B\u771F\u5B9E\u7684\u8FDE\u63A5\u7ED3\u679C\u548C\u5DE5\u5177\u8868").argument("<name>", "server \u540D").action(
+    (name) => guardAsync(async () => {
+      log3(`\u6B63\u5728\u8FDE\u63A5 ${name} \u2026\u2026`);
+      const result = await probeMcpServer(name, { homeDir: EPOCH_HOME });
+      if (!result.connected) {
+        warn(`\u2717 \u8FDE\u63A5\u5931\u8D25${result.error ? `\uFF1A${result.error}` : ""}`);
+        if (result.needsLogin) warn(`  \u2192 \u8DD1 epoch mcp login ${name}`);
+        process.exit(1);
+      }
+      log3(`\u2713 \u5DF2\u8FDE\u63A5\uFF0C${result.toolNames.length} \u4E2A\u5DE5\u5177`);
+      for (const tool of result.toolNames) log3(`  ${tool}`);
+    })
+  );
+  cmd.command("login").description("\u5BF9\u8FDC\u7A0B MCP server \u505A OAuth \u6388\u6743\uFF08\u4F1A\u6253\u5F00\u6D4F\u89C8\u5668\uFF09").argument("<name>", "server \u540D").option("--port <port>", "\u56FA\u5B9A\u56DE\u8C03\u7AEF\u53E3\uFF08\u6388\u6743\u670D\u52A1\u5668\u8981\u6C42\u767B\u8BB0 redirect_uri \u65F6\u7528\uFF09").option("--scope <scope>", "\u7533\u8BF7\u7684 scope\uFF0C\u7A7A\u683C\u5206\u9694").action(
+    (name, opts) => guardAsync(async () => {
+      const port = opts.port === void 0 ? void 0 : parsePort(opts.port);
+      const { refreshedOnly } = await mcpLogin(name, {
+        homeDir: EPOCH_HOME,
+        ...port === void 0 ? {} : { port },
+        ...opts.scope === void 0 ? {} : { scope: opts.scope },
+        print: log3
+      });
+      log3(refreshedOnly ? `\u2713 ${name} \u7684\u51ED\u636E\u5DF2\u7EED\u671F\uFF08\u65E0\u9700\u91CD\u65B0\u6388\u6743\uFF09` : `\u2713 ${name} \u6388\u6743\u5B8C\u6210`);
+    })
+  );
+  cmd.command("logout").description("\u5220\u6389\u672C\u5730\u4FDD\u5B58\u7684 OAuth \u51ED\u636E").argument("<name>", "server \u540D").action(
+    (name) => guardAsync(async () => {
+      const removed = await mcpLogout(name, { homeDir: EPOCH_HOME });
+      log3(removed ? `\u2713 \u5DF2\u5220\u9664 ${name} \u7684\u672C\u5730\u51ED\u636E` : `${name} \u672C\u6765\u5C31\u6CA1\u6709\u4FDD\u5B58\u51ED\u636E`);
+    })
+  );
+}
+async function printList() {
+  const { servers, issues, configPath: configPath2 } = await listMcpServers({ homeDir: EPOCH_HOME });
+  for (const issue of issues) warn(`\u26A0 \u914D\u7F6E\u95EE\u9898 ${issue.path}\uFF1A${issue.message}`);
+  log3(`MCP servers\uFF08${configPath2}\uFF09`);
+  if (servers.length === 0) {
+    log3("  (\u65E0)");
+    return;
+  }
+  for (const s of servers) log3(`  ${describe(s)}`);
+}
+function describe(s) {
+  const target = s.config.transport === "stdio" ? s.config.command : s.config.url;
+  const parts = [
+    `${s.config.name}  [${s.config.transport}]  ${target ?? ""}`,
+    `    \u8BA4\u8BC1\uFF1A${STATE_LABEL[s.auth.state]}`
+  ];
+  if (s.auth.expiresAt) {
+    parts[1] += `\uFF08\u5230\u671F ${new Date(s.auth.expiresAt).toLocaleString("zh-CN")}\uFF09`;
+  }
+  return parts.join("\n");
+}
+function parsePort(raw) {
+  const port = Number(raw);
+  if (!Number.isInteger(port) || port < 1024 || port > 65535) {
+    throw new Error(`--port \u5FC5\u987B\u662F 1024\u201365535 \u7684\u6574\u6570\uFF0C\u6536\u5230 "${raw}"`);
+  }
+  return port;
+}
+function guardAsync(fn) {
+  fn().catch((err2) => {
+    warn(`\u9519\u8BEF: ${err2 instanceof Error ? err2.message : String(err2)}`);
+    process.exit(1);
+  });
+}
+
+// src/commands/model.ts
+import { input, password, select } from "@inquirer/prompts";
+import { isNonInteractive, readProviderKeyEnv } from "@epoch-agent/core";
+import {
+  apiKeyEnvVar,
+  PROVIDER_INFOS,
+  PROVIDER_TYPES as PROVIDER_TYPES2
+} from "@epoch-agent/protocol";
+var log4 = (msg) => process.stdout.write(msg + "\n");
+var CUSTOM = "__custom__";
+function registerModelCommand(program2) {
+  program2.command("model").description("\u4EA4\u4E92\u5F0F\u9009\u62E9 provider \u548C\u6A21\u578B").option("-r, --refresh", "\u6E05\u9664\u6A21\u578B\u7F13\u5B58").action(async (opts) => {
+    ensureEpochHome();
+    if (opts.refresh) return refreshCache();
+    if (isNonInteractive()) {
+      throw new CliError(
+        "epoch model \u9700\u8981\u4EA4\u4E92\u5F0F\u7EC8\u7AEF",
+        1,
+        "\u5728 CI / \u7BA1\u9053\u91CC\u8BF7\u6539\u7528 epoch config set provider <\u540D\u5B57> \u548C epoch config set model <\u540D\u5B57>\uFF0CAPI key \u8D70\u73AF\u5883\u53D8\u91CF\u3002"
+      );
+    }
+    await runWizard();
+  });
+}
+async function refreshCache() {
+  const { clearModelCache } = await import("@epoch-agent/core");
+  for (const t14 of PROVIDER_TYPES2) clearModelCache(EPOCH_HOME, t14);
+  log4("\u5DF2\u6E05\u9664\u5168\u90E8\u6A21\u578B\u7F13\u5B58");
+}
+function readCurrentSelection() {
+  const yaml = readConfigYaml(CONFIG_PATH);
+  return { provider: readKey(yaml, "provider.type"), model: readKey(yaml, "model") };
+}
+async function runWizard() {
+  await ensureSecrets();
+  const current = readCurrentSelection();
+  const provider = await select({
+    message: "\u9009\u62E9 Provider:",
+    choices: providerChoices(current.provider),
+    pageSize: listPageSize(PROVIDER_INFOS.filter((p) => p.interactive).length),
+    ...isKnownProvider(current.provider) ? { default: current.provider } : {}
+  });
+  const baseUrl = provider === "openai-compatible" ? await askBaseUrl() : void 0;
+  const keyForDiscover = await resolveApiKey(provider);
+  const { discoverModels } = await import("@epoch-agent/core");
+  const result = await discoverModels(EPOCH_HOME, provider, keyForDiscover, baseUrl);
+  log4(describeDiscovery(result.source, result.models.length, keyForDiscover !== ""));
+  const model = await pickModel(result.models, result.source, carriedModel(provider, current));
+  let yaml = readConfigYaml(CONFIG_PATH);
+  yaml = setSectionField(yaml, "provider", "type", provider);
+  if (baseUrl) yaml = setSectionField(yaml, "provider", "baseUrl", baseUrl);
+  yaml = setScalar(yaml, "model", model);
+  writeConfigYaml(CONFIG_PATH, yaml);
+  log4(`
+\u2705 ${provider} / ${model}
+\u5DF2\u5C31\u7EEA\uFF0C\u8F93\u5165 epoch "\u4F60\u597D" \u8BD5\u8BD5`);
+}
+async function ensureSecrets() {
+  try {
+    const { ensureSecretsReady } = await import("@epoch-agent/runtime");
+    await ensureSecretsReady();
+  } catch (err2) {
+    log4(`  \u26A0 \u51ED\u636E\u5B58\u50A8\u521D\u59CB\u5316\u5931\u8D25\uFF0C\u5DF2\u914D\u7F6E\u7684 key \u53EF\u80FD\u8BFB\u4E0D\u5230\uFF08${describeError(err2)}\uFF09`);
+  }
+}
+async function resolveApiKey(provider) {
+  const envKey = apiKeyEnvVar(provider);
+  if (!envKey) return "";
+  const existing = readProviderKeyEnv(EPOCH_HOME)[envKey];
+  const message = existing ? `API key (${envKey})\uFF08\u5DF2\u914D\u7F6E\uFF0C\u56DE\u8F66\u6CBF\u7528\uFF09:` : `API key (${envKey}):`;
+  const typed = (await password({ message, mask: "*" })).trim();
+  if (!typed) return existing ?? "";
+  await saveApiKey(envKey, typed);
+  return typed;
+}
+async function saveApiKey(envKey, apiKey) {
+  const result = await writeProviderKey(envKey, apiKey, ENV_PATH);
+  log4(result.encrypted ? `  \u5DF2\u5B58\u5165 ${result.detail}` : `  \u26A0 ${result.detail}`);
+}
+async function askBaseUrl() {
+  const answer = (await input({
+    message: "API base URL\uFF08\u5982 http://localhost:8080/v1\uFF09:",
+    default: "http://localhost:8080/v1"
+  })).trim();
+  return answer || void 0;
+}
+async function pickModel(models, source, currentModel) {
+  const choices = modelChoices(models, source, currentModel);
+  if (choices.length === 0) {
+    const fallback2 = currentModel ?? "gpt-4o-mini";
+    return await input({ message: "\u8F93\u5165\u6A21\u578B\u540D:", default: fallback2 }) || fallback2;
+  }
+  const picked = await select({
+    message: "\u9009\u62E9\u6A21\u578B:",
+    choices,
+    pageSize: listPageSize(choices.length),
+    ...currentModel && models.includes(currentModel) ? { default: currentModel } : {}
+  });
+  if (picked !== CUSTOM) return picked;
+  const fallback = currentModel ?? models[0] ?? "gpt-4o-mini";
+  return await input({ message: "\u8F93\u5165\u6A21\u578B\u540D:", default: fallback }) || fallback;
+}
+function isKnownProvider(value) {
+  return PROVIDER_INFOS.some((p) => p.interactive && p.type === value);
+}
+function carriedModel(chosenProvider, current) {
+  return chosenProvider === current.provider ? current.model : void 0;
+}
+function providerChoices(currentProvider) {
+  return PROVIDER_INFOS.filter((p) => p.interactive).map((p) => ({
+    name: p.type === currentProvider ? `${p.label}\uFF08\u5F53\u524D\uFF09` : p.label,
+    value: p.type
+  }));
+}
+function modelChoices(models, source, currentModel) {
+  if (models.length === 0) return [];
+  const choices = models.map((m) => ({
+    name: m === currentModel ? `${m}\uFF08\u5F53\u524D\uFF09` : m,
+    value: m
+  }));
+  if (currentModel && !models.includes(currentModel)) {
+    choices.unshift({ name: `${currentModel}\uFF08\u5F53\u524D\uFF0C\u4E0D\u5728\u6B64\u76EE\u5F55\u4E2D\uFF09`, value: currentModel });
+  }
+  if (source !== "live") choices.push({ name: "\u2500\u2500 \u81EA\u5B9A\u4E49\u8F93\u5165 \u2500\u2500", value: CUSTOM });
+  return choices;
+}
+function listPageSize(itemCount, rows = process.stdout.rows) {
+  const height = rows && rows > 0 ? rows : 24;
+  return Math.min(itemCount, Math.max(3, height - 3));
+}
+function describeDiscovery(source, count, hasKey) {
+  if (source === "live") return `  \u4ECE API \u62C9\u53D6\u5230 ${count} \u4E2A\u6A21\u578B`;
+  const why = hasKey ? "\u62C9\u53D6\u6A21\u578B\u5217\u8868\u5931\u8D25\uFF08\u7F51\u7EDC / key \u65E0\u6548 / \u8BE5 provider \u4E0D\u63D0\u4F9B\u5217\u8868\u63A5\u53E3\uFF09" : "\u6CA1\u6709\u53EF\u7528\u7684 API key";
+  const what = source === "cache" ? "\u4E0A\u6B21\u7F13\u5B58\u7684\u5217\u8868" : "\u5185\u7F6E\u7684\u9759\u6001\u76EE\u5F55\uFF08\u53EF\u80FD\u5DF2\u8FC7\u671F\uFF09";
+  return `  \u26A0 ${why}\uFF0C\u6539\u7528${what}\u3002\u5217\u8868\u91CC\u6CA1\u6709\u4F60\u8981\u7684\u6A21\u578B\u5C31\u9009\u300C\u81EA\u5B9A\u4E49\u8F93\u5165\u300D`;
+}
+function describeError(err2) {
+  return err2 instanceof Error ? err2.message : String(err2);
+}
+
+// src/commands/plugin.ts
+import {
+  addMarketplace,
+  currentEpochVersion,
+  installPlugin,
+  inventoryTotal,
+  isNonInteractive as isNonInteractive2,
+  loadPlugins,
+  readMarketplaces,
+  readPluginManifest,
+  removeMarketplace,
+  resolveMarketplaceRef,
+  scanPluginDir,
+  searchMarketplaces,
+  setPluginEnabled,
+  uninstallPlugin,
+  updateMarketplace,
+  updatePlugin
+} from "@epoch-agent/core";
+import {
+  issueDetails,
+  marketplacesPath,
+  pluginsDir,
+  pluginsStatePath,
+  t as t2
+} from "@epoch-agent/infra";
+var log5 = (msg) => {
+  process.stdout.write(msg + "\n");
+};
+function locations() {
+  return { pluginsDir: pluginsDir(EPOCH_HOME), statePath: pluginsStatePath(EPOCH_HOME) };
+}
+function registerPluginCommand(program2) {
+  const cmd = program2.command("plugin").description("\u7BA1\u7406\u63D2\u4EF6\uFF08\u4E00\u5305\u547D\u4EE4 / \u89D2\u8272 / \u6280\u80FD / hook / deny \u89C4\u5219 / MCP server\uFF09");
+  registerBasics(cmd);
+  registerLifecycle(cmd);
+  registerMarketplace(cmd);
+}
+function registerBasics(cmd) {
+  cmd.command("list", { isDefault: true }).alias("ls").description("\u5217\u51FA\u5DF2\u5B89\u88C5\u7684\u63D2\u4EF6").option("--verbose", "\u8FDE\u6BCF\u4E2A\u63D2\u4EF6\u5E26\u6765\u7684\u6269\u5C55\u7269\u4E00\u8D77\u5217\u51FA\u6765").action((opts) => {
+    printList2(opts.verbose === true);
+  });
+  cmd.command("install").alias("add").description(
+    "\u88C5\u4E00\u4E2A\u63D2\u4EF6\uFF08./\u672C\u5730\u76EE\u5F55 | github:owner/repo | npm:\u5305\u540D | https://\u2026.zip | <\u5E02\u573A>/<\u63D2\u4EF6>\uFF09"
+  ).argument("<source>", "\u63D2\u4EF6\u6765\u6E90").option("-y, --yes", "\u8DF3\u8FC7\u5B89\u88C5\u524D\u786E\u8BA4").action(async (source, opts) => {
+    await runInstall(source, opts.yes === true);
+  });
+  cmd.command("validate").description("\u81EA\u67E5\u4E00\u4E2A\u63D2\u4EF6\u76EE\u5F55\uFF08\u5199\u63D2\u4EF6\u65F6\u7528\uFF0C\u4E0D\u5B89\u88C5\uFF09").argument("[path]", "\u63D2\u4EF6\u76EE\u5F55\uFF08\u9ED8\u8BA4\u5F53\u524D\u76EE\u5F55\uFF09").action((path) => {
+    validateDir(path ?? process.cwd());
+  });
+}
+function registerLifecycle(cmd) {
+  cmd.command("uninstall").alias("rm").description("\u5378\u8F7D\u4E00\u4E2A\u63D2\u4EF6\uFF08\u672C\u5730\u8F6F\u94FE\u53EA\u89E3\u94FE\uFF0C\u4E0D\u5220\u4F60\u7684\u6E90\u7801\u76EE\u5F55\uFF09").argument("<name>", "\u63D2\u4EF6\u540D").action(async (name) => {
+    const outcome = await uninstallPlugin(name, { statePath: pluginsStatePath(EPOCH_HOME) });
+    if (!outcome.ok) throw new CliError(outcome.reason);
+    log5(`\u2713 ${outcome.message}`);
+  });
+  cmd.command("disable").description("\u505C\u7528\u4E00\u4E2A\u63D2\u4EF6\uFF08\u53EA\u6539\u8BB0\u5F55\uFF0C\u6587\u4EF6\u4E00\u4E2A\u5B57\u8282\u90FD\u4E0D\u52A8\uFF09").argument("<name>", "\u63D2\u4EF6\u540D").action(async (name) => {
+    await toggle(name, false);
+  });
+  cmd.command("enable").description("\u91CD\u65B0\u542F\u7528\u4E00\u4E2A\u63D2\u4EF6").argument("<name>", "\u63D2\u4EF6\u540D").action(async (name) => {
+    await toggle(name, true);
+  });
+  cmd.command("update").description("\u6309\u8BB0\u5F55\u91CC\u7684\u6765\u6E90\u91CD\u88C5\u4E00\u904D\uFF08\u8F6F\u94FE\u88C5\u7684\u4E0D\u7528\u66F4\u65B0\uFF09").argument("<name>", "\u63D2\u4EF6\u540D").option("-y, --yes", "\u8DF3\u8FC7\u786E\u8BA4").action(async (name, opts) => {
+    await runUpdate(name, opts.yes === true);
+  });
+}
+function registerMarketplace(cmd) {
+  const market = cmd.command("marketplace").alias("mp").description("\u7BA1\u7406\u63D2\u4EF6\u5E02\u573A");
+  market.command("add").description("\u52A0\u4E00\u4E2A\u5E02\u573A\uFF08github:owner/repo | https://\u2026/epoch-marketplace.json | \u672C\u5730\u76EE\u5F55\uFF09").argument("<source>", "\u5E02\u573A\u5730\u5740").action(async (source) => {
+    const outcome = await addMarketplace(source, { statePath: marketplacesPath(EPOCH_HOME) });
+    if (!outcome.ok) throw new CliError(outcome.reason);
+    const count = outcome.record.catalog.plugins.length;
+    log5(`\u2713 \u5DF2\u52A0\u5E02\u573A ${outcome.record.name}\uFF08${count} \u4E2A\u63D2\u4EF6\uFF09`);
+    log5(`  \u641C\u4E00\u4E0B\uFF1Aepoch plugin search <\u5173\u952E\u8BCD>`);
+  });
+  market.command("list", { isDefault: true }).alias("ls").description("\u5217\u51FA\u5DF2\u52A0\u7684\u5E02\u573A").action(printMarketplaces);
+  market.command("remove").alias("rm").description("\u5220\u6389\u4E00\u4E2A\u5E02\u573A\uFF08\u5DF2\u7ECF\u4ECE\u5B83\u88C5\u7684\u63D2\u4EF6\u4E0D\u53D7\u5F71\u54CD\uFF09").argument("<name>", "\u5E02\u573A\u540D").action(async (name) => {
+    const outcome = await removeMarketplace(name, { statePath: marketplacesPath(EPOCH_HOME) });
+    if (!outcome.ok) throw new CliError(outcome.reason ?? `\u5220\u4E0D\u6389 ${name}`);
+    log5(`\u2713 \u5DF2\u5220\u6389\u5E02\u573A ${name}`);
+  });
+  market.command("update").description("\u91CD\u62C9\u5E02\u573A\u76EE\u5F55\uFF08\u76EE\u5F55\u662F\u52A0\u8FDB\u6765\u90A3\u4E00\u523B\u7F13\u5B58\u7684\uFF0C\u641C\u7D22\u8D70\u7F13\u5B58\uFF09").argument("<name>", "\u5E02\u573A\u540D").action(async (name) => {
+    const outcome = await updateMarketplace(name, { statePath: marketplacesPath(EPOCH_HOME) });
+    if (!outcome.ok) throw new CliError(outcome.reason);
+    log5(`\u2713 ${name} \u5DF2\u66F4\u65B0\uFF08${outcome.record.catalog.plugins.length} \u4E2A\u63D2\u4EF6\uFF09`);
+  });
+  cmd.command("search").description("\u5728\u5DF2\u52A0\u7684\u5E02\u573A\u91CC\u641C\u63D2\u4EF6\uFF08\u4E0D\u7ED9\u5173\u952E\u8BCD\u5C31\u5217\u5168\u90E8\uFF09").argument("[keyword]", "\u5173\u952E\u8BCD").action((keyword) => {
+    printSearch(keyword ?? "");
+  });
+}
+function printList2(verbose) {
+  const artifacts = loadPlugins({ statePath: pluginsStatePath(EPOCH_HOME) });
+  if (artifacts.loaded.length === 0 && artifacts.skipped.length === 0) {
+    log5("\u6CA1\u6709\u5DF2\u5B89\u88C5\u7684\u63D2\u4EF6\u3002");
+    log5("\u88C5\u4E00\u4E2A\uFF1Aepoch plugin install ./my-plugin \u6216 epoch plugin install github:owner/repo");
+    return;
+  }
+  log5(`\u5DF2\u5B89\u88C5\u63D2\u4EF6\uFF08${pluginsStatePath(EPOCH_HOME)}\uFF09
+`);
+  for (const plugin of artifacts.loaded) {
+    log5(loadedLine(plugin));
+    if (!verbose) continue;
+    for (const line of renderInventory(scanPluginDir(plugin.dir, plugin.name))) {
+      log5(`    ${line}`);
+    }
+    log5("");
+  }
+  for (const skipped of artifacts.skipped) log5(skippedLine(skipped));
+  if (artifacts.skipped.length > 0) log5(`
+${PLUGIN_MARK_LEGEND}`);
+  for (const detail of issueDetails(artifacts.issues)) log5(`
+\u26A0 ${detail}`);
+}
+function loadedLine(plugin) {
+  return `  \u2713 ${plugin.name}@${plugin.version}  \u2190 ${plugin.source}  ${countsLine(plugin.counts)}`;
+}
+function countsLine(counts) {
+  const parts = [];
+  const add = (n, key) => {
+    if (n > 0) parts.push(t2(key, { count: n }));
+  };
+  add(counts.commands, "plugin.n_commands");
+  add(counts.roles, "plugin.n_roles");
+  add(counts.skills, "plugin.n_skills");
+  add(counts.hooks, "plugin.n_hooks");
+  add(counts.denyRules, "plugin.n_deny");
+  add(counts.mcpServers, "plugin.n_mcp");
+  return parts.length === 0 ? t2("plugin.brings_nothing") : parts.join(" \xB7 ");
+}
+var PLUGIN_MARK_LEGEND = "\u2713 \u5DF2\u52A0\u8F7D \xB7 \u25CB \u5DF2\u505C\u7528 \xB7 \u2717 \u542F\u7528\u4E86\u4F46\u8FD9\u6B21\u6CA1\u52A0\u8F7D";
+function skippedLine(skipped) {
+  return `  ${skipped.disabled ? "\u25CB" : "\u2717"} ${skipped.name}  ${skipped.reason}`;
+}
+async function runInstall(input2, yes) {
+  if (!yes && isNonInteractive2()) {
+    throw new CliError(
+      "epoch plugin install \u9700\u8981\u4EA4\u4E92\u5F0F\u7EC8\u7AEF\u6765\u786E\u8BA4\u8FD9\u6B21\u5B89\u88C5",
+      1,
+      "\u63D2\u4EF6\u53EF\u4EE5\u5E26 hook\uFF08\u4F1A\u6267\u884C shell \u547D\u4EE4\uFF09\u3002CI / \u811A\u672C\u91CC\u8BF7\u663E\u5F0F\u52A0 --yes \u8868\u793A\u4F60\u5DF2\u7ECF\u77E5\u9053\u88C5\u8FDB\u6765\u7684\u662F\u4EC0\u4E48\u3002"
+    );
+  }
+  const ref = resolveMarketplaceRef(input2, marketplacesPath(EPOCH_HOME));
+  if (ref && !ref.ok) throw new CliError(ref.reason);
+  const source = ref?.ok ? ref.ref.source : input2;
+  if (ref?.ok) log5(`${input2} \u2192 ${source}`);
+  const outcome = await installPlugin(source, {
+    ...locations(),
+    epochVersion: currentEpochVersion(),
+    onProgress: log5,
+    ...ref?.ok ? { marketplace: ref.ref.marketplace } : {},
+    ...yes ? {} : { confirm: askInstall }
+  });
+  if (!outcome.ok) {
+    if (outcome.reason === "\u5DF2\u53D6\u6D88") {
+      log5("\u5DF2\u53D6\u6D88\uFF0C\u4EC0\u4E48\u90FD\u6CA1\u88C5\u3002");
+      return;
+    }
+    throw new CliError(`\u88C5\u4E0D\u4E0A ${source}\uFF1A${outcome.reason}`);
+  }
+  log5(`
+\u2713 \u5DF2\u5B89\u88C5 ${outcome.record.name}@${outcome.record.version} \u2192 ${outcome.record.path}`);
+  if (outcome.record.linked) {
+    log5("  \u8FD9\u662F\u4E00\u6761\u8F6F\u94FE\uFF1A\u6539\u63D2\u4EF6\u6E90\u7801\u3001\u91CD\u542F epoch \u5C31\u751F\u6548\u3002");
+  }
+  log5("  \u91CD\u542F epoch \u4E4B\u540E\u751F\u6548\uFF08\u6269\u5C55\u7269\u5728\u542F\u52A8\u65F6\u52A0\u8F7D\uFF09\u3002");
+}
+async function runUpdate(name, yes) {
+  if (!yes && isNonInteractive2()) {
+    throw new CliError(
+      "epoch plugin update \u9700\u8981\u4EA4\u4E92\u5F0F\u7EC8\u7AEF\u6765\u786E\u8BA4\u65B0\u7248\u672C\u5E26\u6765\u7684\u4E1C\u897F",
+      1,
+      "\u65B0\u7248\u672C\u53EF\u80FD\u52A0\u4E86 hook\uFF08\u4F1A\u6267\u884C shell \u547D\u4EE4\uFF09\u3002CI / \u811A\u672C\u91CC\u8BF7\u663E\u5F0F\u52A0 --yes\u3002"
+    );
+  }
+  const outcome = await updatePlugin(name, {
+    ...locations(),
+    epochVersion: currentEpochVersion(),
+    onProgress: log5,
+    ...yes ? {} : { confirm: askInstall }
+  });
+  if (!outcome.ok) throw new CliError(outcome.reason);
+  log5(`\u2713 ${"message" in outcome ? outcome.message : `\u5DF2\u66F4\u65B0\u5230 ${outcome.record.version}`}`);
+}
+async function askInstall(preview2) {
+  for (const line of renderPreview(preview2)) log5(line);
+  const { confirm } = await import("@inquirer/prompts");
+  return confirm({ message: "\u786E\u8BA4\u5B89\u88C5\uFF1F", default: false });
+}
+function renderPreview(preview2) {
+  const { manifest, source, inventory } = preview2;
+  const lines = [""];
+  lines.push(`\u5C06\u5B89\u88C5 ${manifest.name}@${manifest.version}`);
+  if (manifest.description) lines.push(`  ${manifest.description}`);
+  lines.push(`  \u6765\u6E90: ${source.raw}\uFF08${source.type}\uFF09`);
+  if (source.sha256) lines.push(`  \u6821\u9A8C\u548C: sha256:${source.sha256}\uFF08\u5DF2\u6838\u5BF9\uFF09`);
+  if (manifest.author) lines.push(`  \u4F5C\u8005: ${manifest.author.name}`);
+  if (manifest.homepage) lines.push(`  \u4E3B\u9875: ${manifest.homepage}`);
+  lines.push("");
+  lines.push("  \u5B83\u4F1A\u5E26\u6765:");
+  for (const line of renderInventory(inventory)) lines.push(`  ${line}`);
+  lines.push("");
+  return lines;
+}
+function renderInventory(inv) {
+  const lines = [];
+  if (inventoryTotal(inv) === 0) {
+    lines.push("\uFF08\u6CA1\u6709\u4EFB\u4F55\u6269\u5C55\u7269 \u2014\u2014 \u88C5\u4E86\u7B49\u4E8E\u6CA1\u88C5\uFF0C\u786E\u8BA4\u4E00\u4E0B\u76EE\u5F55\u7ED3\u6784\u5BF9\u4E0D\u5BF9\uFF09");
+  }
+  if (inv.commands.length > 0) lines.push(`\u547D\u4EE4 ${inv.commands.length} \u6761: ${list(inv.commands)}`);
+  if (inv.roles.length > 0) lines.push(`\u89D2\u8272 ${inv.roles.length} \u4E2A: ${list(inv.roles)}`);
+  if (inv.skills.length > 0) lines.push(`\u6280\u80FD ${inv.skills.length} \u4E2A: ${list(inv.skills)}`);
+  if (inv.hooks.length > 0) {
+    const tally = inv.hooks.map((h) => `${h.type} \xD7 ${h.count}`).join("\uFF0C");
+    lines.push(`\u26A0 hook ${tally} \u2014\u2014 \u6BCF\u4E00\u6761\u90FD\u662F\u4F1A\u5728\u4F60\u673A\u5668\u4E0A\u6267\u884C\u7684 shell \u547D\u4EE4`);
+  }
+  if (inv.denyRules > 0) lines.push(`deny \u89C4\u5219 ${inv.denyRules} \u6761\uFF08\u53EA\u4F1A\u8BA9 agent \u80FD\u505A\u7684\u66F4\u5C11\uFF09`);
+  if (inv.mcpServers.length > 0) {
+    lines.push(
+      t2("plugin.preview_mcp", {
+        count: inv.mcpServers.length,
+        names: list(inv.mcpServers)
+      })
+    );
+  }
+  if (inv.ignoredBuckets.length > 0) {
+    lines.push(
+      `settings.json \u91CC\u7684 ${inv.ignoredBuckets.join(" / ")} \u4F1A\u88AB\u5FFD\u7565 \u2014\u2014 \u63D2\u4EF6\u4E0D\u80FD\u66FF\u4F60\u653E\u5F00\u6743\u9650`
+    );
+  }
+  if (inv.jsTools) {
+    lines.push("tools/ \u91CC\u7684 JS \u5DE5\u5177\u4E0D\u4F1A\u88AB\u52A0\u8F7D\uFF08\u7B2C\u4E00\u7248\u4E0D\u5728 epoch \u8FDB\u7A0B\u91CC\u8DD1\u7B2C\u4E09\u65B9\u4EE3\u7801\uFF09");
+  }
+  for (const detail of issueDetails(inv.issues)) lines.push(`\u26A0 ${detail}`);
+  return lines;
+}
+function list(names) {
+  const shown = names.slice(0, 8).join(", ");
+  return names.length > 8 ? `${shown} \u2026\uFF08\u8FD8\u6709 ${names.length - 8} \u4E2A\uFF09` : shown;
+}
+function printMarketplaces() {
+  const state = readMarketplaces(marketplacesPath(EPOCH_HOME));
+  for (const detail of issueDetails(state.issues)) log5(`\u26A0 ${detail}`);
+  if (state.records.length === 0) {
+    log5("\u6CA1\u6709\u5DF2\u52A0\u7684\u5E02\u573A\u3002");
+    log5("\u52A0\u4E00\u4E2A\uFF1Aepoch plugin marketplace add github:owner/repo");
+    return;
+  }
+  log5(`\u5DF2\u52A0\u5E02\u573A\uFF08${marketplacesPath(EPOCH_HOME)}\uFF09
+`);
+  for (const record of state.records) {
+    const owner = record.catalog.owner ? `  by ${record.catalog.owner.name}` : "";
+    log5(`  ${record.name}  ${record.catalog.plugins.length} \u4E2A\u63D2\u4EF6  \u2190 ${record.source}${owner}`);
+    if (record.catalog.description) log5(`    ${record.catalog.description}`);
+  }
+}
+function printSearch(keyword) {
+  const statePath = marketplacesPath(EPOCH_HOME);
+  if (readMarketplaces(statePath).records.length === 0) {
+    log5("\u8FD8\u6CA1\u6709\u52A0\u4EFB\u4F55\u5E02\u573A\uFF0C\u5148 epoch plugin marketplace add <\u5730\u5740>\u3002");
+    return;
+  }
+  const hits = searchMarketplaces(keyword, statePath);
+  if (hits.length === 0) {
+    log5(keyword ? `\u6CA1\u6709\u5339\u914D "${keyword}" \u7684\u63D2\u4EF6\u3002` : "\u5DF2\u52A0\u7684\u5E02\u573A\u91CC\u4E00\u4E2A\u63D2\u4EF6\u90FD\u6CA1\u6709\u3002");
+    return;
+  }
+  log5(`${hits.length} \u4E2A\u7ED3\u679C:
+`);
+  for (const hit of hits) {
+    const category = hit.entry.category ? `  [${hit.entry.category}]` : "";
+    log5(`  ${hit.ref}${category}`);
+    if (hit.entry.description) log5(`    ${hit.entry.description}`);
+  }
+  log5(`
+\u88C5\u4E00\u4E2A\uFF1Aepoch plugin install ${hits[0]?.ref ?? "<\u5E02\u573A>/<\u63D2\u4EF6>"}`);
+}
+async function toggle(name, enabled) {
+  const outcome = await setPluginEnabled(name, enabled, {
+    statePath: pluginsStatePath(EPOCH_HOME)
+  });
+  if (!outcome.ok) throw new CliError(outcome.reason);
+  log5(`\u2713 ${outcome.message}`);
+}
+function validateDir(dir) {
+  const read = readPluginManifest(dir);
+  if (!read.manifest) {
+    const detail = issueDetails(read.issues).map((d) => `  - ${d}`).join("\n");
+    throw new CliError(`${dir} \u4E0D\u662F\u4E00\u4E2A\u53EF\u7528\u7684\u63D2\u4EF6:
+${detail}`);
+  }
+  const manifest = read.manifest;
+  log5(`\u2713 \u6E05\u5355\u53EF\u7528: ${manifest.name}@${manifest.version}`);
+  if (manifest.epochVersion) log5(`  epochVersion: ${manifest.epochVersion}`);
+  for (const detail of issueDetails(read.issues)) log5(`\u26A0 ${detail}`);
+  log5("\n\u5B83\u4F1A\u5E26\u6765:");
+  const inventory = scanPluginDir(dir, manifest.name);
+  for (const line of renderInventory(inventory)) log5(`  ${line}`);
+  if (inventory.issues.length > 0) {
+    throw new CliError(`\u6709 ${inventory.issues.length} \u5904\u95EE\u9898\uFF0C\u4FEE\u5B8C\u518D\u88C5`);
+  }
+}
+
+// src/commands/run.ts
+import { existsSync as existsSync6 } from "fs";
+import { dirname as dirname3, join as join5 } from "path";
+import { fileURLToPath as fileURLToPath3 } from "url";
+import { isNonInteractive as isNonInteractive8, OPERATION_TYPES as OPERATION_TYPES3, PERMISSION_LEVELS as PERMISSION_LEVELS3 } from "@epoch-agent/core";
+import {
+  HEADLESS_INPUT_FORMATS as HEADLESS_INPUT_FORMATS2,
+  HEADLESS_OUTPUT_FORMATS as HEADLESS_OUTPUT_FORMATS2,
+  PROVIDER_TYPES as PROVIDER_TYPES4
+} from "@epoch-agent/protocol";
+
+// src/headless/session.ts
+import { OPERATION_TYPES } from "@epoch-agent/core";
+import { buildRuntime } from "@epoch-agent/runtime";
+
+// src/commands/run-flags.ts
+import { existsSync as existsSync3 } from "fs";
+import { delimiter, resolve } from "path";
+import { isOperationType, resolveWorkspace } from "@epoch-agent/core";
+import {
+  HEADLESS_INPUT_FORMATS,
+  HEADLESS_OUTPUT_FORMATS,
+  isHeadlessInputFormat,
+  isHeadlessOutputFormat
+} from "@epoch-agent/protocol";
+function looksLikeSessionId(value) {
+  return /^(ses_)?[0-9a-f][0-9a-f-]{3,}$/i.test(value);
+}
+function parseResumeArg(raw) {
+  if (raw === void 0 || raw === false) return { kind: "off" };
+  if (raw === true) return { kind: "pick" };
+  const value = raw.trim();
+  if (!value) return { kind: "pick" };
+  if (looksLikeSessionId(value)) return { kind: "id", id: value };
+  return { kind: "pick", query: value };
+}
+function assertResumeFlagsExclusive(opts) {
+  if (opts.continue === true && opts.resume !== void 0) {
+    throw new CliError(
+      "--continue \u548C --resume \u4E0D\u80FD\u4E00\u8D77\u7528",
+      1,
+      "--continue \u63A5\u672C\u9879\u76EE\u6700\u8FD1\u4E00\u4E2A\u4F1A\u8BDD\uFF1B--resume \u6307\u5B9A\u4E00\u4E2A\uFF08\u6216\u4EA4\u4E92\u5F0F\u9009\uFF09\u3002\u53EA\u7ED9\u4E00\u4E2A"
+    );
+  }
+}
+function applySettingsPath(path) {
+  if (!path) return;
+  const abs = resolve(path);
+  if (!existsSync3(abs)) {
+    throw new CliError(`--settings \u6307\u5411\u7684\u6587\u4EF6\u4E0D\u5B58\u5728: ${path}`, 1, `\u89E3\u6790\u6210: ${abs}`);
+  }
+  process.env.EPOCH_SETTINGS = abs;
+}
+function applyAddDirs(dirs) {
+  if (!dirs || dirs.length === 0) return [];
+  const abs = dirs.map((d) => resolve(d));
+  const { issues } = resolveWorkspace(process.cwd(), abs);
+  const fatal = issues.filter((i) => i.kind !== "redundant");
+  if (fatal.length > 0) {
+    throw new CliError(
+      `--add-dir \u6307\u5411\u7684\u76EE\u5F55\u4E0D\u53EF\u7528: ${fatal.map((i) => i.input).join(", ")}`,
+      1,
+      fatal.map((i) => i.detail).join("\uFF1B")
+    );
+  }
+  process.env.EPOCH_ADD_DIR = abs.join(delimiter);
+  return abs;
+}
+function applyAgentRole(role) {
+  const name = role?.trim();
+  if (!name) return;
+  process.env.EPOCH_AGENT = name;
+}
+function collect(value, previous) {
+  return [...previous, value];
+}
+function parseHeadlessFlags(opts) {
+  const tools = opts.allowTool ?? [];
+  const ops = opts.allowOperation ?? [];
+  if (tools.length === 0 && ops.length === 0) return { invalid: [] };
+  const invalid = ops.filter((o) => !isOperationType(o));
+  if (invalid.length > 0) return { invalid };
+  return {
+    policy: {
+      ...tools.length > 0 ? { allowTools: tools } : {},
+      ...ops.length > 0 ? { allowOperations: ops.filter(isOperationType) } : {}
+    },
+    invalid: []
+  };
+}
+function resolveOutputFormat(opts) {
+  const explicit = opts.outputFormat;
+  if (explicit !== void 0 && !isHeadlessOutputFormat(explicit)) {
+    throw new CliError(
+      `--output-format \u4E0D\u8BA4\u8BC6: ${explicit}`,
+      1,
+      `\u53EF\u9009: ${HEADLESS_OUTPUT_FORMATS.join(" / ")}`
+    );
+  }
+  if (explicit === void 0) return opts.json === true ? "json" : "text";
+  if (opts.json === true && explicit !== "json") {
+    throw new CliError(
+      `--json \u548C --output-format ${explicit} \u77DB\u76FE`,
+      1,
+      "--json \u5C31\u662F --output-format json \u7684\u522B\u540D\uFF0C\u53EA\u7ED9\u4E00\u4E2A"
+    );
+  }
+  return explicit;
+}
+function resolveHeadlessFormats(opts) {
+  const raw = opts.inputFormat;
+  if (raw !== void 0 && !isHeadlessInputFormat(raw)) {
+    throw new CliError(
+      `--input-format \u4E0D\u8BA4\u8BC6: ${raw}`,
+      1,
+      `\u53EF\u9009: ${HEADLESS_INPUT_FORMATS.join(" / ")}`
+    );
+  }
+  const input2 = raw ?? "text";
+  if (input2 === "text") return { input: input2, output: resolveOutputFormat(opts) };
+  if (opts.outputFormat === void 0 && opts.json !== true) {
+    return { input: input2, output: "stream-json" };
+  }
+  const output = resolveOutputFormat(opts);
+  if (output !== "stream-json") {
+    throw new CliError(
+      `--input-format stream-json \u53EA\u80FD\u914D --output-format stream-json\uFF08\u73B0\u5728\u662F ${output}\uFF09`,
+      1,
+      "\u957F\u9A7B\u6A21\u5F0F\u4E0B\u5BBF\u4E3B\u8981\u5728\u4E8B\u4EF6\u6D41\u91CC\u6536 approval-request \u5E76\u7B54\u590D\uFF0C\u53E6\u5916\u4E24\u79CD\u8F93\u51FA\u683C\u5F0F\u6CA1\u6709\u8FD9\u4E00\u5E27 \u2014\u2014 \u6536\u4E0D\u5230\u95EE\u9898\u5374\u8981\u56DE\u7B54\u3002\u4E0D\u7ED9 --output-format \u65F6\u4F1A\u81EA\u52A8\u8865\u4E0A"
+    );
+  }
+  return { input: input2, output };
+}
+function resolveApproverProgram(raw) {
+  const value = raw?.trim();
+  if (!value) return void 0;
+  if (/\s/.test(value) || !/[\\/]/.test(value)) return value;
+  const abs = resolve(value);
+  if (!existsSync3(abs)) {
+    throw new CliError(
+      `--permission-prompt-tool \u6307\u5411\u7684\u7A0B\u5E8F\u4E0D\u5B58\u5728: ${value}`,
+      1,
+      `\u89E3\u6790\u6210: ${abs}\u3002\u8981\u8DD1\u4E00\u4E2A\u89E3\u91CA\u5668\u5C31\u8FDE\u7740\u5199\uFF0C\u4F8B\u5982 --permission-prompt-tool "node ./approver.js"`
+    );
+  }
+  return `"${abs}"`;
+}
+function parseCallLimits(opts) {
+  const turns = parsePositive(opts.maxTurns, "--max-turns", (n) => Number.isInteger(n));
+  const usd = parsePositive(opts.maxBudgetUsd, "--max-budget-usd");
+  return {
+    ...turns !== void 0 ? { maxTurns: turns } : {},
+    ...usd !== void 0 ? { maxCallCostUsd: usd } : {}
+  };
+}
+function parsePositive(raw, flag, extra = () => true) {
+  if (raw === void 0) return void 0;
+  const n = Number(raw);
+  if (!Number.isFinite(n) || n <= 0 || !extra(n)) {
+    throw new CliError(
+      `${flag} \u4E0D\u662F\u5408\u6CD5\u7684\u503C: ${raw}`,
+      1,
+      flag === "--max-turns" ? "\u8981\u4E00\u4E2A\u6B63\u6574\u6570\uFF0C\u4F8B\u5982 --max-turns 5" : "\u8981\u4E00\u4E2A\u6B63\u6570\uFF0C\u4F8B\u5982 0.50"
+    );
+  }
+  return n;
+}
+
+// src/headless/emit.ts
+import {
+  HEADLESS_PROTOCOL_VERSION
+} from "@epoch-agent/protocol";
+import { ApprovalRelay, QuestionRelay, toSerializable } from "@epoch-agent/runtime";
+var HeadlessEmitter = class {
+  write;
+  clock;
+  /**
+   * 审批闭包的登记表。
+   *
+   * 复用 runtime 那一份而不是自己写个 Map：它把两个很容易写错的点封住了
+   * （答复一次就出账、**界面没了不等于用户拒绝**），而 headless 这边
+   * 「宿主把 stdin 关了」和 web 那边「浏览器断连」是同一件事。
+   */
+  relay = new ApprovalRelay();
+  /**
+   * 提问闭包的登记表（方案 34）。同样复用 runtime 那一份 ——
+   * 它比 `ApprovalRelay` 少一个「替用户答一个」的方法，而 headless 这边
+   * 「宿主把 stdin 关了」正是最容易顺手编一个答案的地方。
+   */
+  questions = new QuestionRelay();
+  /** 全局广播游标。0 是保留值（`init`），所以其余帧从 1 开始 */
+  seq = 0;
+  sessionId = "";
+  constructor(opts = {}) {
+    this.write = opts.write ?? ((line) => void process.stdout.write(line + "\n"));
+    this.clock = opts.clock ?? Date.now;
+  }
+  /**
+   * 第一帧。`seq: 0`、**不带 `sessionId`** —— 它描述的是这条流本身，
+   * 会话 id 在它自己的载荷里（同 hub 的 `connected`）。
+   */
+  init(info) {
+    this.sessionId = info.sessionId;
+    const event = {
+      type: "init",
+      protocolVersion: HEADLESS_PROTOCOL_VERSION,
+      ...info
+    };
+    this.write(JSON.stringify({ seq: 0, ts: this.clock(), event }));
+  }
+  /**
+   * 发一个引擎事件。
+   *
+   * 返回**摘出 `requestId` 之后**的那份视图 —— 调用方（长驻模式的驱动）要靠
+   * 它知道刚发出去的审批叫什么 id。非审批事件返回 undefined 那一格。
+   */
+  agentEvent(ev) {
+    const serialized = toSerializable(ev);
+    this.relay.track(serialized);
+    this.questions.track(serialized);
+    this.publish(stripArtifactData(serialized.event));
+    return serialized.event;
+  }
+  /** 一轮的收尾帧 */
+  result(result) {
+    this.publish({ type: "result", ...result });
+  }
+  /**
+   * 把宿主的答复接回引擎。
+   *
+   * @returns `false` = 这个 requestId 不认识（重复答复 / 上一轮的 id）。
+   *          调用方该把它当成 stderr 上的一行日志而不是错误：宿主的用户
+   *          在按钮上双击一下就会走到这里。
+   */
+  respondApproval(requestId, outcome, note) {
+    return this.relay.respond(requestId, outcome, note);
+  }
+  /**
+   * 把宿主的提问答复接回引擎（方案 34 验收 10）。
+   *
+   * @returns `false` = 这个 requestId 不认识。处置同 `respondApproval`：
+   *          stderr 上一行日志，不是错误。
+   */
+  respondQuestion(requestId, answer) {
+    return this.questions.respond(requestId, answer);
+  }
+  /** 还挂着几条审批没答复 */
+  get pendingApprovals() {
+    return this.relay.pendingCount;
+  }
+  /**
+   * 还挂着几条提问没答复。
+   *
+   * 和 `pendingApprovals` 分开数：驱动器要用它判「stdin 没了还有东西在等吗」，
+   * 而合成一个数之后，日志说不清放弃的是审批还是提问 —— 排查时那正是第一个问题。
+   */
+  get pendingQuestions() {
+    return this.questions.pendingCount;
+  }
+  /**
+   * 宿主没了（stdin 关了 / 收到 `abort`）：把挂起的审批**放弃**，返回放弃的个数。
+   *
+   * **一个 promise 都不 resolve** —— 逐个 `deny` 会让模型收到一串「用户拒绝」，
+   * 于是它认为这是有意否决，换个方式再试一遍。正确做法是放弃 + 中止整轮，
+   * 让 `AgentSession` 的 finally 去兜底。这条规矩写死在
+   * [runtime/src/serialize.ts](../../../runtime/src/serialize.ts) 的类注释里，
+   * hub 那边也守着同一条。
+   */
+  abandonApprovals() {
+    return this.relay.abandon();
+  }
+  /**
+   * 同上，提问那一半（方案 34 验收 8）。
+   *
+   * **一个 promise 都不 resolve。** 逐个塞一个 `skipped` 进去等于告诉模型
+   * 「用户看到了、选择不答」，而真相是宿主已经不在了 —— 那个问题从没被人看到过。
+   * 放弃 + 中止之后模型看到的是「这一轮被中止了」，那才是实话。
+   */
+  abandonQuestions() {
+    return this.questions.abandon();
+  }
+  /** 广播一帧：占一个序号、带上 sessionId、写出去 */
+  publish(event) {
+    const frame = {
+      seq: ++this.seq,
+      sessionId: this.sessionId,
+      ts: this.clock(),
+      event
+    };
+    this.write(JSON.stringify(frame));
+  }
+};
+function stripArtifactData(event) {
+  if (event.type !== "tool-result" || !event.artifacts) return event;
+  return { ...event, artifacts: event.artifacts.map(withoutData) };
+}
+function withoutData(artifact) {
+  if (artifact.data === void 0) return artifact;
+  const copy = { ...artifact };
+  delete copy.data;
+  return copy;
+}
+
+// src/headless/outcome.ts
+function emptyOutcome(diagnostics) {
+  return {
+    text: "",
+    reasoning: "",
+    budgetExceeded: false,
+    turns: 0,
+    diagnostics,
+    aborted: false
+  };
+}
+function resultReason(out2) {
+  if (out2.finishReason === void 0) return "no-finish";
+  if (out2.finishReason === "budget-exceeded" && out2.breach === "call-cost") {
+    return "call-budget-exceeded";
+  }
+  return out2.finishReason;
+}
+function toResult(out2) {
+  const reason = resultReason(out2);
+  return {
+    ok: reason === "stop",
+    reason,
+    text: out2.text,
+    turns: out2.turns,
+    ...out2.usage ? { usage: out2.usage } : {}
+  };
+}
+function limitExitCode(out2, limits) {
+  if (limits.maxTurns !== void 0 && out2.finishReason === "max-turns") {
+    return EXIT_CODES.LIMIT_EXCEEDED;
+  }
+  if (out2.breach === "call-cost") return EXIT_CODES.LIMIT_EXCEEDED;
+  return void 0;
+}
+function initInfoOf(runtime, cwd) {
+  const provider = runtime.providerInfo?.provider;
+  return {
+    sessionId: runtime.sessionId,
+    cwd,
+    model: runtime.config.model,
+    ...provider ? { provider } : {},
+    permissionLevel: runtime.permissions.level(),
+    tools: runtime.tools.map((t14) => t14.name),
+    usageScope: runtime.usageScope,
+    diagnostics: runtime.diagnostics
+  };
+}
+
+// src/headless/read.ts
+import { createInterface } from "readline";
+import {
+  APPROVAL_OUTCOMES,
+  HEADLESS_INPUT_EVENT_TYPES,
+  isApprovalOutcome,
+  isQuestionAnswerMap
+} from "@epoch-agent/protocol";
+function parseInputLine(line) {
+  const text = line.trim();
+  if (!text) return void 0;
+  let raw;
+  try {
+    raw = JSON.parse(text);
+  } catch (err2) {
+    return { ok: false, message: `\u4E0D\u662F\u5408\u6CD5 JSON\uFF08${describe2(err2)}\uFF09\uFF1A${preview(text)}` };
+  }
+  if (!isRecord(raw)) return { ok: false, message: `\u9876\u5C42\u5FC5\u987B\u662F\u5BF9\u8C61\uFF1A${preview(text)}` };
+  const type = raw["type"];
+  if (typeof type !== "string" || !HEADLESS_INPUT_EVENT_TYPES.has(type)) {
+    return {
+      ok: false,
+      message: `\u4E0D\u8BA4\u8BC6\u7684 type: ${JSON.stringify(type)}\uFF0C\u53EF\u9009 ${[...HEADLESS_INPUT_EVENT_TYPES].join(" / ")}`
+    };
+  }
+  if (type === "abort" || type === "close") return { ok: true, event: { type } };
+  if (type === "user-message") return parseUserMessage(raw);
+  if (type === "question-response") return parseQuestionResponse(raw);
+  return parseApprovalResponse(raw);
+}
+function parseUserMessage(raw) {
+  const content = raw["content"];
+  if (typeof content === "string") {
+    if (!content.trim()) return { ok: false, message: "user-message \u7684 content \u662F\u7A7A\u7684" };
+    return { ok: true, event: { type: "user-message", content } };
+  }
+  if (!Array.isArray(content) || content.length === 0) {
+    return { ok: false, message: "user-message \u7684 content \u8981\u4E48\u662F\u975E\u7A7A\u5B57\u7B26\u4E32\uFF0C\u8981\u4E48\u662F\u975E\u7A7A\u90E8\u4EF6\u6570\u7EC4" };
+  }
+  const bad = content.findIndex((p) => !isRecord(p) || typeof p["type"] !== "string");
+  if (bad >= 0) {
+    return { ok: false, message: `user-message \u7684 content[${bad}] \u4E0D\u662F\u5E26 type \u7684\u5BF9\u8C61` };
+  }
+  return {
+    ok: true,
+    event: { type: "user-message", content }
+  };
+}
+function parseApprovalResponse(raw) {
+  const requestId = raw["requestId"];
+  if (typeof requestId !== "string" || !requestId) {
+    return { ok: false, message: "approval-response \u7F3A requestId\uFF08\u8981\u4E00\u4E2A\u975E\u7A7A\u5B57\u7B26\u4E32\uFF09" };
+  }
+  const outcome = raw["outcome"];
+  if (typeof outcome !== "string" || !isApprovalOutcome(outcome)) {
+    return {
+      ok: false,
+      message: `approval-response \u7684 outcome \u4E0D\u8BA4\u8BC6: ${JSON.stringify(outcome)}\uFF0C\u53EF\u9009 ${APPROVAL_OUTCOMES.join(" / ")}`
+    };
+  }
+  const note = raw["note"];
+  if (note !== void 0 && typeof note !== "string") {
+    return { ok: false, message: "approval-response \u7684 note \u8981\u662F\u5B57\u7B26\u4E32" };
+  }
+  return {
+    ok: true,
+    event: {
+      type: "approval-response",
+      requestId,
+      outcome,
+      ...note !== void 0 ? { note } : {}
+    }
+  };
+}
+function parseQuestionResponse(raw) {
+  const requestId = raw["requestId"];
+  if (typeof requestId !== "string" || !requestId) {
+    return { ok: false, message: "question-response \u7F3A requestId\uFF08\u8981\u4E00\u4E2A\u975E\u7A7A\u5B57\u7B26\u4E32\uFF09" };
+  }
+  if (!isQuestionAnswerMap(raw["answers"])) {
+    return {
+      ok: false,
+      message: 'question-response \u7684 answers \u8981\u662F\u300C\u95EE\u53E5 \u2192 \u5B57\u7B26\u4E32\u6216\u5B57\u7B26\u4E32\u6570\u7EC4\u300D\u7684\u5BF9\u8C61\uFF08\u7B54\u4E0D\u4E0A\u6765\u5C31\u53D1 {"answers":{},"skipped":true}\uFF09'
+    };
+  }
+  const skipped = raw["skipped"];
+  if (skipped !== void 0 && typeof skipped !== "boolean") {
+    return { ok: false, message: "question-response \u7684 skipped \u8981\u662F\u5E03\u5C14" };
+  }
+  return {
+    ok: true,
+    event: {
+      type: "question-response",
+      requestId,
+      answers: raw["answers"],
+      ...skipped === true ? { skipped: true } : {}
+    }
+  };
+}
+async function* readInputLines(stream = process.stdin) {
+  const rl = createInterface({ input: stream, crlfDelay: Infinity });
+  try {
+    for await (const line of rl) yield line;
+  } finally {
+    rl.close();
+  }
+}
+function isRecord(v) {
+  return typeof v === "object" && v !== null && !Array.isArray(v);
+}
+function describe2(err2) {
+  return err2 instanceof Error ? err2.message : String(err2);
+}
+function preview(text) {
+  return text.length > 80 ? `${text.slice(0, 80)}\u2026` : text;
+}
+
+// src/headless/driver.ts
+async function driveStreamJson(opts) {
+  const { limits } = opts;
+  const warn4 = opts.warn ?? ((line) => void process.stderr.write(line + "\n"));
+  const emitter = new HeadlessEmitter({
+    ...opts.write ? { write: opts.write } : {},
+    ...opts.clock ? { clock: opts.clock } : {}
+  });
+  emitter.init(opts.init);
+  const state = new DriverState(opts.session, emitter, limits, warn4);
+  for await (const line of readInputLines(opts.input ?? process.stdin)) {
+    const parsed = parseInputLine(line);
+    if (parsed === void 0) continue;
+    if (!parsed.ok) {
+      warn4(`[\u8F93\u5165\u9519\u8BEF] ${parsed.message}`);
+      state.sawBadInput = true;
+      continue;
+    }
+    if (state.handle(parsed.event)) break;
+  }
+  await state.shutdown();
+  return state.exitCode();
+}
+var DriverState = class {
+  constructor(session, emitter, limits, warn4) {
+    this.session = session;
+    this.emitter = emitter;
+    this.limits = limits;
+    this.warn = warn4;
+  }
+  session;
+  emitter;
+  limits;
+  warn;
+  /** 当前这一轮，idle 时为 null —— 于是「空转时收到 abort」不会毒掉下一轮 */
+  turn = null;
+  controller = null;
+  /**
+   * 还没轮到的用户消息，先进先出。
+   *
+   * **排队而不是拒绝**：stdin 是一条有序的单写者通道，宿主完全可能一口气写完
+   * 三条就不管了（`printf '…\n…\n' | epoch --input-format stream-json` 正是
+   * 最容易上手的用法）。拒绝的话第二条起全部无声消失。
+   *
+   * 排队**不等于交织**：下一轮要等上一轮的 `result` 之后才开，历史累积的顺序
+   * 仍然是确定的 —— hub 那边用 409 挡的是「两个标签页同时发」，
+   * 那是并发，这里是排队，两回事。
+   */
+  queue = [];
+  /**
+   * stdin 已经没了（EOF 或宿主发了 `close`）。
+   *
+   * 之后再出现的审批请求没人答得了，得当场放弃 —— 否则那一轮会一直挂着。
+   */
+  inputClosed = false;
+  /**
+   * 累计的退出码，取**最先出现的非 0** 那个。
+   *
+   * 显式标 `number` 而不是让它推成 `0`：`EXIT_CODES` 是 `as const`，
+   * 不标的话这个字段的类型就是字面量 `0`，`raise()` 一行都赋不进来。
+   */
+  code = EXIT_CODES.SUCCESS;
+  /** 有过坏行。收尾时落 INPUT_ERROR，但不覆盖更主要的失败原因 */
+  sawBadInput = false;
+  /**
+   * 处理一条入站事件。
+   *
+   * **同步返回，绝不 await 那一轮** —— 这是整个文件最容易写错的一行：
+   * 在这里 await 就等于「跑的时候不读 stdin」，而审批答复正是从 stdin 来的，
+   * 于是第一次需要确认的操作就把双方锁死。开轮之后立刻回去读下一行。
+   *
+   * @returns 是否该停止读 stdin（收到 `close`）
+   */
+  handle(event) {
+    if (event.type === "close") return true;
+    if (event.type === "abort") {
+      this.queue.length = 0;
+      this.controller?.abort();
+      return false;
+    }
+    if (event.type === "approval-response") {
+      if (!this.emitter.respondApproval(event.requestId, event.outcome, event.note)) {
+        this.warn(`[\u5FFD\u7565] \u4E0D\u8BA4\u8BC6\u7684 requestId: ${event.requestId}\uFF08\u91CD\u590D\u7B54\u590D\uFF1F\u4E0A\u4E00\u8F6E\u7684\uFF1F\uFF09`);
+      }
+      return false;
+    }
+    if (event.type === "question-response") {
+      const answer = {
+        answers: event.answers,
+        ...event.skipped ? { skipped: true } : {}
+      };
+      if (!this.emitter.respondQuestion(event.requestId, answer)) {
+        this.warn(`[\u5FFD\u7565] \u4E0D\u8BA4\u8BC6\u7684 requestId: ${event.requestId}\uFF08\u91CD\u590D\u7B54\u590D\uFF1F\u4E0A\u4E00\u8F6E\u7684\uFF1F\uFF09`);
+      }
+      return false;
+    }
+    this.queue.push(event.content);
+    this.pump();
+    return false;
+  }
+  /**
+   * 队首那条开跑。已经有一轮在跑就什么都不做 —— 它收尾时会回来再叫一次。
+   *
+   * **同步返回，绝不 await 那一轮**：这是整个文件最容易写错的一行。在这里 await
+   * 就等于「跑的时候不读 stdin」，而审批答复正是从 stdin 来的，于是第一次需要
+   * 确认的操作就把双方锁死。
+   */
+  pump() {
+    if (this.turn) return;
+    const next = this.queue.shift();
+    if (next === void 0) return;
+    const controller = new AbortController();
+    this.controller = controller;
+    this.turn = this.runTurn(next, controller).finally(() => {
+      this.turn = null;
+      this.controller = null;
+      this.pump();
+    });
+  }
+  /** 跑一轮，把事件逐个上线，收尾发 result */
+  async runTurn(content, controller) {
+    const out2 = emptyOutcome([]);
+    try {
+      const run = this.session.run(content, {
+        signal: controller.signal,
+        ...this.limits.maxTurns !== void 0 ? { maxTurns: this.limits.maxTurns } : {},
+        ...this.limits.maxCallCostUsd !== void 0 ? { maxCallCostUsd: this.limits.maxCallCostUsd } : {}
+      });
+      for await (const ev of run) {
+        this.emitter.agentEvent(ev);
+        if ((ev.type === "approval-request" || ev.type === "question") && this.inputClosed) {
+          this.reapLostHost();
+        }
+        if (ev.type === "text-delta") out2.text += ev.text;
+        else if (ev.type === "turn-complete") out2.turns = ev.turn;
+        else if (ev.type === "usage") out2.usage = ev.cumulative;
+        else if (ev.type === "error") this.raise(EXIT_CODES.FAILURE);
+        else if (ev.type === "finish") {
+          out2.finishReason = ev.reason;
+          if (ev.breach) out2.breach = ev.breach;
+        }
+      }
+    } catch (err2) {
+      this.emitter.agentEvent({ type: "error", message: describe3(err2) });
+      out2.finishReason = "error";
+      this.raise(EXIT_CODES.FAILURE);
+    }
+    if (controller.signal.aborted) out2.aborted = true;
+    this.emitter.result(toResult(out2));
+    const limited = limitExitCode(out2, this.limits);
+    if (limited !== void 0) this.raise(limited);
+  }
+  /**
+   * 收摊：stdin 关了，或者宿主发了 `close`。
+   *
+   * **默认让在跑的那一轮跑完**，不是一关就杀。EOF 的含义是「没有更多输入」，
+   * 不是「把已经交代的活扔掉」—— 而 `echo '{"type":"user-message",…}' | epoch`
+   * 这种一次性用法里，stdin 恰好在消息发出的下一刻就 EOF 了，杀掉的话
+   * 这条命令永远只会吐一个 `aborted`。
+   *
+   * 唯一的例外是**有审批挂着**：那种情况下等下去是等一个永远不会来的答复。
+   * 见 `reapLostHost()`。
+   */
+  async shutdown() {
+    this.inputClosed = true;
+    if (this.emitter.pendingApprovals > 0 || this.emitter.pendingQuestions > 0) {
+      this.reapLostHost();
+    }
+    await this.drain();
+  }
+  /**
+   * 宿主没了但还有审批 / 提问挂着：**放弃**它们 + 丢掉排队的 + 中止本轮。
+   *
+   * 逐个 `deny` 会让模型收到一串「用户拒绝」，于是它认为这是有意否决，
+   * 换个方式再试一遍。提问那边逐个塞 `skipped` 是同一类错误的另一种形态：
+   * 那等于说「用户看到了、选择不答」，而真相是宿主已经不在了。
+   * 放弃 + 中止之后模型看到的是「这一轮被中止了」。
+   * 这条规矩在 serialize.ts / hub.ts / 这里各守一遍，三处都不许改回去。
+   *
+   * 两个数分开报：排查「进程为什么退不掉」时，第一个问题就是「卡在哪种请求上」。
+   */
+  reapLostHost() {
+    const approvals = this.emitter.abandonApprovals();
+    if (approvals > 0) {
+      this.warn(`[\u6536\u5C3E] \u653E\u5F03\u4E86 ${approvals} \u6761\u6CA1\u7B54\u590D\u7684\u5BA1\u6279\uFF0C\u672C\u8F6E\u4E2D\u6B62\uFF08\u4E0D\u6309\u62D2\u7EDD\u5904\u7406\uFF09`);
+    }
+    const questions = this.emitter.abandonQuestions();
+    if (questions > 0) {
+      this.warn(`[\u6536\u5C3E] \u653E\u5F03\u4E86 ${questions} \u6761\u6CA1\u7B54\u590D\u7684\u63D0\u95EE\uFF0C\u672C\u8F6E\u4E2D\u6B62\uFF08\u4E0D\u4F2A\u9020\u7B54\u6848\uFF09`);
+    }
+    this.queue.length = 0;
+    this.controller?.abort();
+  }
+  /**
+   * 等到一轮都不剩。
+   *
+   * 必须是循环：`pump()` 挂在上一轮的 `finally` 里，所以 `await this.turn` 回来时
+   * 队列里的下一条可能已经开跑了。只 await 一次会漏掉后面全部。
+   */
+  async drain() {
+    while (this.turn) await this.turn.catch(() => {
+    });
+  }
+  exitCode() {
+    if (this.sawBadInput) this.raise(EXIT_CODES.INPUT_ERROR);
+    return this.code;
+  }
+  /** 记一个失败码。**先到先得** —— 后面那个通常是前面那个的后果 */
+  raise(code) {
+    if (this.code === EXIT_CODES.SUCCESS) this.code = code;
+  }
+};
+function describe3(err2) {
+  return err2 instanceof Error ? err2.message : String(err2);
+}
+
+// src/headless/session.ts
+async function runStreamJsonSession(opts) {
+  const { policy: headless, invalid } = parseHeadlessFlags(opts);
+  if (invalid.length > 0) {
+    throw new CliError(
+      `--allow-operation \u4E0D\u8BA4\u8BC6: ${invalid.join(", ")}`,
+      EXIT_CODES.FAILURE,
+      `\u53EF\u9009\u503C: ${OPERATION_TYPES.join(" / ")}`
+    );
+  }
+  const limits = parseCallLimits(opts);
+  warnInertFlags(opts);
+  const runtime = await buildRuntime({
+    // 和 CLI 的其它入口一样显式传：Ctrl+C 要走 dispose() 关掉 SQLite 连接和
+    // MCP 子进程，不能因为库的默认值是 false 就退回「硬杀进程」。
+    // 守卫用例：cli/__tests__/signal-handlers.test.ts
+    installSignalHandlers: true,
+    // 见文件头第 3 条。**不传 onApprovalRequest** —— 让 runtime 用事件桥
+    interactive: true,
+    ...headless ? { headless } : {}
+  });
+  try {
+    if (!runtime.session) return reportDeadRuntime(runtime);
+    for (const d of runtime.diagnostics) process.stderr.write(`\xB7 ${d}
+`);
+    return await driveStreamJson({
+      session: runtime.session,
+      init: initInfoOf(runtime, process.cwd()),
+      limits
+    });
+  } finally {
+    await runtime.dispose();
+  }
+}
+function reportDeadRuntime(runtime) {
+  const emitter = new HeadlessEmitter();
+  emitter.init(initInfoOf(runtime, process.cwd()));
+  const detail = runtime.diagnostics.join("; ");
+  emitter.agentEvent({
+    type: "error",
+    message: `provider \u4E0D\u53EF\u7528\uFF0Cagent \u65E0\u6CD5\u542F\u52A8${detail ? `\uFF1A${detail}` : ""}`
+  });
+  emitter.result({ ok: false, reason: "error", text: "", turns: 0 });
+  return EXIT_CODES.FAILURE;
+}
+function warnInertFlags(opts) {
+  if ((opts.allowTool ?? []).length > 0 || (opts.allowOperation ?? []).length > 0) {
+    process.stderr.write(
+      '\xB7 --allow-tool / --allow-operation \u5728 --input-format stream-json \u4E0B\u4E0D\u53C2\u4E0E\u5224\u5B9A\uFF1A\u5BBF\u4E3B\u80FD\u7B54\u5BA1\u6279\uFF0C\u6240\u4EE5\u6BCF\u4E00\u6B21\u90FD\u4F1A\u95EE\u5B83\u3002\u8981\u7528\u9884\u6388\u6743\u5C31\u8D70 epoch "<\u4EFB\u52A1>" \u5355\u6B21\u95EE\u7B54\u90A3\u6761\u8DEF\n'
+    );
+  }
+  if ((opts.image ?? []).length > 0) {
+    process.stderr.write(
+      "\xB7 -i/--image \u5728 --input-format stream-json \u4E0B\u88AB\u5FFD\u7565\uFF1A\u56FE\u7247\u8D70 user-message \u7684 content \u90E8\u4EF6\u6570\u7EC4\n"
+    );
+  }
+}
+
+// src/update-check.ts
+import { spawn } from "child_process";
+import { existsSync as existsSync5, mkdirSync as mkdirSync2, readFileSync as readFileSync3, writeFileSync } from "fs";
+import { get } from "https";
+import { dirname as dirname2, join as join3 } from "path";
+import { fileURLToPath as fileURLToPath2 } from "url";
+
+// src/version.ts
+import { readFileSync as readFileSync2 } from "fs";
+import { dirname, join as join2 } from "path";
+import { fileURLToPath } from "url";
+
+// src/installation.ts
+import { execFileSync } from "child_process";
+import { existsSync as existsSync4, realpathSync } from "fs";
+import { join } from "path";
+import { normalizeForMatch } from "@epoch-agent/infra";
+var PATH_RULES = [
+  {
+    patterns: [
+      "/.npm/_npx",
+      "/npm/_npx",
+      // Windows：npm 的 cache 默认在 `%LocalAppData%\npm-cache`（老文档写
+      // `%AppData%\npm-cache`，两者都命中这一条），`_npx` 是它的子目录。
+      // 缺了它，Windows 上 npx 临时运行会被兜底成「npm 全局安装」。
+      "/npm-cache/_npx",
+      "/.cache/pnpm/dlx",
+      "/.pnpm/_pnpx",
+      "/.bun/install/cache"
+    ],
+    build: () => ({
+      packageManager: "npx",
+      isGlobal: false,
+      note: "\u901A\u8FC7 npx / pnpm dlx \u4E34\u65F6\u8FD0\u884C\uFF0C\u6BCF\u6B21\u90FD\u662F\u6700\u65B0\u7248\uFF0C\u65E0\u9700\u5347\u7EA7\u3002"
+    })
+  },
+  {
+    // Windows 上是 `%LocalAppData%\Volta`，小写化之后和 POSIX 的 `.volta` 同形
+    patterns: ["/.volta/", "/volta/"],
+    build: (pkg) => ({
+      packageManager: "volta",
+      isGlobal: true,
+      updateCommand: `volta install ${pkg}@latest`,
+      note: "\u901A\u8FC7 Volta \u5B89\u88C5\u3002"
+    })
+  },
+  {
+    patterns: [
+      "/.pnpm/global",
+      "/.local/share/pnpm",
+      "/library/pnpm/global/",
+      "/appdata/local/pnpm/global/"
+    ],
+    build: (pkg) => ({
+      packageManager: "pnpm",
+      isGlobal: true,
+      updateCommand: `pnpm add -g ${pkg}@latest`,
+      note: "\u901A\u8FC7 pnpm \u5168\u5C40\u5B89\u88C5\u3002"
+    })
+  },
+  {
+    patterns: [
+      "/.yarn/global",
+      "/yarn/global",
+      // Windows：yarn 1.5.1 起全局目录多了一层，变成 `Yarn\Data\global`；
+      // 更早的版本是 `Yarn\config\global`。两条都收，否则 yarn 全局装的用户
+      // 会被告知去跑 `npm install -g`。
+      "/yarn/data/global",
+      "/yarn/config/global"
+    ],
+    build: (pkg) => ({
+      packageManager: "yarn",
+      isGlobal: true,
+      updateCommand: `yarn global add ${pkg}@latest`,
+      note: "\u901A\u8FC7 yarn \u5168\u5C40\u5B89\u88C5\u3002"
+    })
+  },
+  {
+    patterns: ["/.bun/install/global"],
+    build: (pkg) => ({
+      packageManager: "bun",
+      isGlobal: true,
+      updateCommand: `bun add -g ${pkg}@latest`,
+      note: "\u901A\u8FC7 bun \u5168\u5C40\u5B89\u88C5\u3002"
+    })
+  }
+];
+function detectHomebrew(realPath, formula) {
+  if (process.platform !== "darwin") return null;
+  const prefixes = [process.env.HOMEBREW_PREFIX, "/opt/homebrew", "/usr/local"].filter(
+    Boolean
+  );
+  if (!prefixes.some((prefix) => realPath.startsWith(prefix))) return null;
+  try {
+    const prefix = execFileSync("brew", ["--prefix", formula], {
+      encoding: "utf-8",
+      stdio: ["ignore", "pipe", "ignore"]
+    }).trim();
+    if (prefix && realPath.startsWith(realpathSync(prefix))) {
+      return {
+        packageManager: "homebrew",
+        isGlobal: true,
+        updateCommand: `brew upgrade ${formula}`,
+        note: "\u901A\u8FC7 Homebrew \u5B89\u88C5\u3002"
+      };
+    }
+  } catch {
+  }
+  return null;
+}
+function isFromGitCheckout(realPath) {
+  if (realPath.includes("/node_modules/")) return false;
+  let dir = realPath;
+  for (let depth = 0; depth < 8; depth += 1) {
+    const parent = dir.slice(0, dir.lastIndexOf("/"));
+    if (!parent || parent === dir) break;
+    dir = parent;
+    if (existsSync4(join(dir, ".git"))) return true;
+  }
+  return false;
+}
+function detectLocalInstall(matchPath, cwd) {
+  const root = normalizeForMatch(cwd);
+  if (!matchPath.startsWith(`${root}/node_modules`)) return null;
+  const manager = existsSync4(join(cwd, "pnpm-lock.yaml")) ? "pnpm" : existsSync4(join(cwd, "yarn.lock")) ? "yarn" : existsSync4(join(cwd, "bun.lockb")) ? "bun" : "npm";
+  return {
+    packageManager: manager,
+    isGlobal: false,
+    note: "\u4F5C\u4E3A\u9879\u76EE\u4F9D\u8D56\u5B89\u88C5\uFF0C\u8BF7\u5728\u9879\u76EE\u7684 package.json \u91CC\u5347\u7EA7\u7248\u672C\u3002"
+  };
+}
+function getInstallationInfo(packageName, cliPath = process.argv[1]) {
+  if (!cliPath) return { packageManager: "unknown", isGlobal: false, note: "\u8BC6\u522B\u4E0D\u51FA\u5B89\u88C5\u65B9\u5F0F\u3002" };
+  try {
+    const realPath = realpathSync(cliPath).replace(/\\/g, "/");
+    const matchPath = normalizeForMatch(realPath);
+    for (const rule of PATH_RULES) {
+      if (rule.patterns.some((pattern) => matchPath.includes(pattern)))
+        return rule.build(packageName);
+    }
+    if (isFromGitCheckout(realPath)) {
+      return {
+        packageManager: "source",
+        isGlobal: false,
+        note: "\u76F4\u63A5\u4ECE\u4ED3\u5E93\u6E90\u7801\u8FD0\u884C\uFF0C\u7528 git pull \u66F4\u65B0\u3002"
+      };
+    }
+    const brew = detectHomebrew(realPath, packageName.replace(/^@[^/]+\//, ""));
+    if (brew) return brew;
+    const local = detectLocalInstall(matchPath, process.cwd());
+    if (local) return local;
+    return {
+      packageManager: "npm",
+      isGlobal: true,
+      updateCommand: `npm install -g ${packageName}@latest`,
+      note: "\u901A\u8FC7 npm \u5168\u5C40\u5B89\u88C5\u3002"
+    };
+  } catch {
+    return { packageManager: "unknown", isGlobal: false, note: "\u8BC6\u522B\u4E0D\u51FA\u5B89\u88C5\u65B9\u5F0F\u3002" };
+  }
+}
+
+// src/version.ts
+function readVersion() {
+  const here = dirname(fileURLToPath(import.meta.url));
+  for (const candidate of [
+    join2(here, "..", "package.json"),
+    join2(here, "..", "..", "package.json")
+  ]) {
+    try {
+      const raw = JSON.parse(readFileSync2(candidate, "utf-8"));
+      if (raw.version) return raw.version;
+    } catch {
+    }
+  }
+  return "0.0.0-unknown";
+}
+var VERSION = readVersion();
+function describeVersion(packageName) {
+  const info = getInstallationInfo(packageName);
+  return [
+    VERSION,
+    `Node: ${process.version} (${process.platform}/${process.arch})`,
+    `\u5B89\u88C5: ${info.packageManager}${info.isGlobal ? "\uFF08\u5168\u5C40\uFF09" : ""} \u2014\u2014 ${info.note}`
+  ].join("\n");
+}
+
+// src/update-check.ts
+var UPDATE_CHECK_SUBCOMMAND = "__update-check";
+var UPDATE_CACHE_TTL_MS = 24 * 60 * 60 * 1e3;
+var REQUEST_TIMEOUT_MS = 5e3;
+var MAX_RESPONSE_BYTES = 64 * 1024;
+function parseVersion(raw) {
+  const match = /^v?(\d+)\.(\d+)\.(\d+)(?:-([\dA-Za-z.-]+))?(?:\+[\dA-Za-z.-]+)?$/.exec(raw.trim());
+  if (!match) return null;
+  return {
+    parts: [Number(match[1]), Number(match[2]), Number(match[3])],
+    pre: match[4] ?? null
+  };
+}
+function comparePrerelease(a, b) {
+  const left = a.split(".");
+  const right = b.split(".");
+  for (let i = 0; i < Math.max(left.length, right.length); i += 1) {
+    const x = left[i];
+    const y = right[i];
+    if (x === void 0) return -1;
+    if (y === void 0) return 1;
+    const xn = /^\d+$/.test(x);
+    const yn = /^\d+$/.test(y);
+    if (xn && yn) {
+      if (Number(x) !== Number(y)) return Number(x) - Number(y);
+    } else if (xn !== yn) {
+      return xn ? -1 : 1;
+    } else if (x !== y) {
+      return x < y ? -1 : 1;
+    }
+  }
+  return 0;
+}
+function compareVersions(a, b) {
+  const left = parseVersion(a);
+  const right = parseVersion(b);
+  if (!left || !right) return 0;
+  for (let i = 0; i < 3; i += 1) {
+    const x = left.parts[i] ?? 0;
+    const y = right.parts[i] ?? 0;
+    if (x !== y) return x - y;
+  }
+  if (left.pre === right.pre) return 0;
+  if (left.pre === null) return 1;
+  if (right.pre === null) return -1;
+  return comparePrerelease(left.pre, right.pre);
+}
+function isUpdateCheckDisabled(env = process.env) {
+  const flag = env.EPOCH_NO_UPDATE_CHECK ?? env.NO_UPDATE_NOTIFIER;
+  if (flag !== void 0 && flag !== "" && flag !== "0" && flag !== "false") return true;
+  return env.CI !== void 0 && env.CI !== "" && env.CI !== "false";
+}
+function defaultCachePath(home = EPOCH_HOME) {
+  return join3(home, "update-check.json");
+}
+function selfPackage() {
+  const here = dirname2(fileURLToPath2(import.meta.url));
+  for (const candidate of [
+    join3(here, "..", "package.json"),
+    join3(here, "..", "..", "package.json")
+  ]) {
+    try {
+      const raw = JSON.parse(readFileSync3(candidate, "utf-8"));
+      if (raw.name) return { name: raw.name, version: raw.version ?? VERSION };
+    } catch {
+    }
+  }
+  return { name: "@epoch-agent/cli", version: VERSION };
+}
+function readCache(path) {
+  try {
+    const raw = JSON.parse(readFileSync3(path, "utf-8"));
+    if (typeof raw.name !== "string" || typeof raw.checkedAt !== "number") return null;
+    return {
+      name: raw.name,
+      latest: typeof raw.latest === "string" ? raw.latest : null,
+      checkedAt: raw.checkedAt
+    };
+  } catch {
+    return null;
+  }
+}
+function writeCache(path, cache) {
+  try {
+    mkdirSync2(dirname2(path), { recursive: true });
+    writeFileSync(path, `${JSON.stringify(cache)}
+`, "utf-8");
+  } catch {
+  }
+}
+function registryOf(env) {
+  return (env.EPOCH_NPM_REGISTRY ?? env.npm_config_registry ?? "https://registry.npmjs.org").replace(/\/+$/, "");
+}
+function fetchLatestFromRegistry(name, registry) {
+  const url = `${registry}/-/package/${name.replace("/", "%2F")}/dist-tags`;
+  return new Promise((resolve4) => {
+    const request = get(
+      url,
+      { timeout: REQUEST_TIMEOUT_MS, headers: { accept: "application/json" } },
+      (response) => {
+        if (response.statusCode !== 200) {
+          response.resume();
+          resolve4(null);
+          return;
+        }
+        let body = "";
+        response.setEncoding("utf-8");
+        response.on("data", (chunk) => {
+          body += chunk;
+          if (body.length > MAX_RESPONSE_BYTES) request.destroy();
+        });
+        response.on("end", () => {
+          try {
+            const tags = JSON.parse(body);
+            resolve4(typeof tags.latest === "string" ? tags.latest : null);
+          } catch {
+            resolve4(null);
+          }
+        });
+        response.on("error", () => resolve4(null));
+      }
+    );
+    request.on("timeout", () => request.destroy());
+    request.on("error", () => resolve4(null));
+  });
+}
+function readUpdateNotice(options = {}) {
+  const env = options.env ?? process.env;
+  if (isUpdateCheckDisabled(env)) return null;
+  const self = selfPackage();
+  const name = options.packageName ?? self.name;
+  const version = options.currentVersion ?? self.version;
+  const cache = readCache(options.cachePath ?? defaultCachePath());
+  if (!cache || cache.name !== name || !cache.latest) return null;
+  if (compareVersions(cache.latest, version) <= 0) return null;
+  return {
+    name,
+    current: version,
+    latest: cache.latest,
+    message: `${name} \u6709\u65B0\u7248\u672C\uFF1A${version} \u2192 ${cache.latest}\uFF08\u8FD0\u884C epoch upgrade \u67E5\u770B\u5347\u7EA7\u65B9\u5F0F\uFF09`
+  };
+}
+async function refreshUpdateCache(options = {}) {
+  const env = options.env ?? process.env;
+  if (isUpdateCheckDisabled(env)) return null;
+  const self = selfPackage();
+  const name = options.packageName ?? self.name;
+  const version = options.currentVersion ?? self.version;
+  const cachePath = options.cachePath ?? defaultCachePath();
+  const now = options.now ?? Date.now();
+  const ttl = options.ttlMs ?? UPDATE_CACHE_TTL_MS;
+  const cache = readCache(cachePath);
+  if (cache && cache.name === name && now - cache.checkedAt < ttl) {
+    return readUpdateNotice({ ...options, cachePath, packageName: name, currentVersion: version });
+  }
+  const fetchLatest = options.fetchLatest ?? fetchLatestFromRegistry;
+  let latest = null;
+  try {
+    latest = await fetchLatest(name, registryOf(env));
+  } catch {
+    latest = null;
+  }
+  writeCache(cachePath, { name, latest, checkedAt: now });
+  if (!latest || compareVersions(latest, version) <= 0) return null;
+  return {
+    name,
+    current: version,
+    latest,
+    message: `${name} \u6709\u65B0\u7248\u672C\uFF1A${version} \u2192 ${latest}\uFF08\u8FD0\u884C epoch upgrade \u67E5\u770B\u5347\u7EA7\u65B9\u5F0F\uFF09`
+  };
+}
+function scheduleUpdateCheck(options = {}) {
+  const env = options.env ?? process.env;
+  if (isUpdateCheckDisabled(env)) return;
+  if (process.argv.includes(UPDATE_CHECK_SUBCOMMAND)) return;
+  const cachePath = options.cachePath ?? defaultCachePath();
+  const now = options.now ?? Date.now();
+  const cache = readCache(cachePath);
+  if (cache && now - cache.checkedAt < (options.ttlMs ?? UPDATE_CACHE_TTL_MS)) return;
+  const self = process.argv[1];
+  if (!self || !existsSync5(self)) return;
+  try {
+    spawn(process.execPath, [self, UPDATE_CHECK_SUBCOMMAND], {
+      detached: true,
+      stdio: "ignore",
+      env: { ...env, EPOCH_UPDATE_CHECK_CHILD: "1" }
+    }).unref();
+  } catch {
+  }
+}
+function notifyUpdateOnExit(options = {}) {
+  process.on("exit", () => {
+    try {
+      const notice = readUpdateNotice(options);
+      if (notice) process.stderr.write(`
+${notice.message}
+`);
+    } catch {
+    }
+  });
+}
+
+// src/worktree.ts
+import { execFile } from "child_process";
+import { randomBytes } from "crypto";
+import { mkdirSync as mkdirSync3 } from "fs";
+import { basename, join as join4, resolve as resolve2 } from "path";
+import { worktreesDir } from "@epoch-agent/infra";
+var TIMEOUT_MS = 6e4;
+function git(args, cwd) {
+  return new Promise((done) => {
+    execFile(
+      "git",
+      args,
+      { cwd, timeout: TIMEOUT_MS, encoding: "utf-8", windowsHide: true },
+      (err2, stdout, stderr) => {
+        const code = err2?.code;
+        done({
+          ok: !err2,
+          stdout,
+          stderr: stderr || "",
+          missing: code === "ENOENT"
+        });
+      }
+    );
+  });
+}
+function firstLine(text) {
+  return text.trim().split("\n")[0]?.trim() ?? "\u672A\u77E5\u539F\u56E0";
+}
+async function createWorktree(cwd = process.cwd(), container = worktreesDir()) {
+  const repoRoot = await resolveRepoRoot(cwd);
+  const head = await git(["rev-parse", "HEAD"], repoRoot);
+  if (!head.ok) {
+    throw new CliError(
+      "\u8FD9\u4E2A\u4ED3\u5E93\u8FD8\u6CA1\u6709\u4EFB\u4F55\u63D0\u4EA4\uFF0C\u5EFA\u4E0D\u51FA worktree",
+      1,
+      "worktree \u5FC5\u987B\u4ECE\u67D0\u4E2A commit \u957F\u51FA\u6765\u3002\u5148 git commit \u4E00\u6B21\uFF0C\u6216\u8005\u53BB\u6389 --worktree"
+    );
+  }
+  const baseRef = head.stdout.trim();
+  const shortId = randomBytes(3).toString("hex");
+  const branch = `epoch/${shortId}`;
+  const path = join4(container, `${basename(repoRoot)}-${shortId}`);
+  mkdirSync3(container, { recursive: true });
+  const added = await git(["worktree", "add", "-b", branch, path, baseRef], repoRoot);
+  if (!added.ok) {
+    throw new CliError(`\u5EFA worktree \u5931\u8D25\uFF1A${path}`, 1, firstLine(added.stderr));
+  }
+  return { repoRoot, path, branch, baseRef };
+}
+async function resolveRepoRoot(cwd) {
+  const root = await git(["rev-parse", "--show-toplevel"], cwd);
+  if (root.missing) {
+    throw new CliError(
+      "--worktree \u8981\u7528 git\uFF0C\u4F46\u5B83\u4E0D\u5728 PATH \u91CC",
+      1,
+      "\u88C5\u4E00\u4E2A git\uFF0C\u6216\u8005\u53BB\u6389 --worktree"
+    );
+  }
+  if (!root.ok) {
+    throw new CliError(
+      "--worktree \u53EA\u80FD\u5728 git \u4ED3\u5E93\u91CC\u7528",
+      1,
+      `\u5F53\u524D\u76EE\u5F55 ${cwd} \u4E0D\u5728\u4EFB\u4F55 git \u4ED3\u5E93\u91CC\uFF08${firstLine(root.stderr)}\uFF09`
+    );
+  }
+  return resolve2(root.stdout.trim());
+}
+function countLines(text) {
+  return text.split("\n").filter((line) => line.trim() !== "").length;
+}
+async function inspectWorktree(session) {
+  const status = await git(["status", "--porcelain"], session.path);
+  const ahead = await git(["rev-list", "--count", `${session.baseRef}..HEAD`], session.path);
+  const count = Number(ahead.stdout.trim());
+  return {
+    dirty: status.ok ? countLines(status.stdout) : null,
+    ahead: ahead.ok && Number.isFinite(count) ? count : null
+  };
+}
+function worktreeKeepReason(state) {
+  if (state.dirty === null || state.ahead === null) return "\u67E5\u4E0D\u51FA\u5B83\u5E72\u51C0\u4E0D\u5E72\u51C0";
+  if (state.dirty > 0) return `\u8FD8\u6709 ${state.dirty} \u5904\u672A\u63D0\u4EA4\u6539\u52A8`;
+  if (state.ahead > 0) return `\u6709 ${state.ahead} \u4E2A\u63D0\u4EA4\u8FD8\u6CA1\u5408\u56DE\u53BB`;
+  return null;
+}
+function worktreeBanner(session) {
+  return `
+\u{1F33F} \u5728\u9694\u79BB\u7684 worktree \u91CC\u8DD1\u8FD9\u4E00\u6B21
+   \u76EE\u5F55 ${session.path}
+   \u5206\u652F ${session.branch}
+`;
+}
+async function finishWorktree(session, opts) {
+  const print = opts.print ?? ((msg) => process.stderr.write(msg + "\n"));
+  const state = await inspectWorktree(session);
+  const forced = worktreeKeepReason(state);
+  if (forced !== null) {
+    print(`
+\u{1F33F} worktree \u4FDD\u7559\uFF08${forced}\uFF09\uFF1A
+   ${session.path}
+   \u5206\u652F ${session.branch}`);
+    return;
+  }
+  const remove = opts.interactive ? await (opts.ask ?? askRemove)(session) : false;
+  if (!remove) {
+    print(`
+\u{1F33F} worktree \u4FDD\u7559\u5728 ${session.path}\uFF08\u5206\u652F ${session.branch}\uFF09`);
+    return;
+  }
+  const failure = await removeWorktree(session);
+  print(
+    failure === null ? `
+\u{1F33F} \u5DF2\u5220\u9664 worktree ${session.path}\uFF08\u5206\u652F ${session.branch}\uFF09` : `
+\u26A0 worktree \u6CA1\u5220\u5E72\u51C0\uFF0C\u7559\u7740\u4E86\uFF1A${session.path}
+   ${failure}`
+  );
+}
+async function removeWorktree(session) {
+  const removed = await git(["worktree", "remove", session.path], session.repoRoot);
+  if (!removed.ok) return firstLine(removed.stderr);
+  const branch = await git(["branch", "-D", session.branch], session.repoRoot);
+  return branch.ok ? null : `\u76EE\u5F55\u5220\u4E86\uFF0C\u5206\u652F ${session.branch} \u6CA1\u5220\u6389\uFF1A${firstLine(branch.stderr)}`;
+}
+async function askRemove(session) {
+  const { confirm } = await import("@inquirer/prompts");
+  try {
+    return await confirm({
+      message: `worktree ${session.path} \u6CA1\u6709\u4EFB\u4F55\u6539\u52A8\uFF0C\u5220\u6389\u5B83\u5417\uFF1F`,
+      default: false
+    });
+  } catch {
+    return false;
+  }
+}
+
+// src/commands/run-once.ts
+import { formatUsd, imageFromPath, OPERATION_TYPES as OPERATION_TYPES2 } from "@epoch-agent/core";
+import {
+  promptTokens
+} from "@epoch-agent/protocol";
+import { buildRuntime as buildRuntime2, listBackgroundTasks } from "@epoch-agent/runtime";
+
+// src/approval.ts
+import {
+  isNonInteractive as isNonInteractive3,
+  PLAN_OUTCOME_LABELS
+} from "@epoch-agent/core";
+var TYPE_LABEL = {
+  file_read: "\u8BFB\u6587\u4EF6",
+  file_write: "\u5199\u6587\u4EF6",
+  command: "\u6267\u884C\u547D\u4EE4",
+  network: "\u7F51\u7EDC\u8BF7\u6C42",
+  code_exec: "\u5728\u6C99\u7BB1\u5185\u6267\u884C\u4EE3\u7801"
+};
+function formatApprovalRequest(req) {
+  if (req.plan) {
+    return [
+      "\u25A3 \u6A21\u578B\u4EA4\u4E86\u4E00\u4EFD\u8BA1\u5212\uFF0C\u7B49\u4F60\u6279",
+      `   \u8FDB\u5165 plan \u6A21\u5F0F\u524D\u7684\u6743\u9650\u7EA7\u522B: ${req.plan.previousLevel}`,
+      "",
+      ...req.plan.markdown.split("\n").map((l) => `   ${l}`)
+    ];
+  }
+  const lines = [
+    `\u26A0\uFE0F  ${req.toolName} \u8BF7\u6C42${TYPE_LABEL[req.type]}`,
+    `   \u76EE\u6807: ${req.target || "(\u65E0)"}`
+  ];
+  if (req.detail && req.detail !== req.target) {
+    lines.push(`   \u8BE6\u60C5: ${req.detail.slice(0, 300)}`);
+  }
+  if (req.reason) lines.push(`   \u539F\u56E0: ${req.reason}`);
+  return lines;
+}
+function createInteractiveApproval(opts = {}) {
+  const interactive = opts.isInteractive ?? (() => !isNonInteractive3());
+  return async (req) => {
+    if (!interactive()) {
+      if (opts.permission?.()?.isPreauthorized(req.toolName, req.type)) {
+        console.error(`[\u5DF2\u653E\u884C] headless \u9884\u6388\u6743: ${req.toolName} ${req.target}`);
+        return "allow-once";
+      }
+      console.error(
+        `[\u5DF2\u62D2\u7EDD] \u975E\u4EA4\u4E92\u73AF\u5883\u65E0\u6CD5\u786E\u8BA4: ${req.toolName} ${req.target}
+\u5982\u9700\u653E\u884C\uFF0C\u52A0 --allow-tool ${req.toolName}\u3001\u5728 config.yaml \u91CC\u914D headless.allowTools\uFF0C\u6216\u5728 ~/.epoch/policies/ \u52A0\u7B56\u7565\u89C4\u5219\u3002`
+      );
+      return "deny";
+    }
+    console.log("\n" + formatApprovalRequest(req).join("\n"));
+    if (req.plan) return await askPlan(req.plan);
+    const { select: select2 } = await import("@inquirer/prompts");
+    try {
+      return await select2({
+        message: "\u662F\u5426\u5141\u8BB8\uFF1F",
+        choices: [
+          { name: "\u5141\u8BB8\u4E00\u6B21", value: "allow-once" },
+          { name: "\u672C\u4F1A\u8BDD\u5185\u59CB\u7EC8\u5141\u8BB8", value: "allow-session" },
+          { name: "\u6C38\u4E45\u5141\u8BB8\uFF08\u5199\u5165 approvals.json\uFF09", value: "allow-always" },
+          { name: "\u62D2\u7EDD", value: "deny" }
+        ],
+        default: "allow-once"
+      });
+    } catch {
+      return "deny";
+    }
+  };
+}
+async function askPlan(proposal) {
+  const { input: input2, select: select2 } = await import("@inquirer/prompts");
+  const choices = [
+    ...proposal.canExecute ? [
+      {
+        name: `${PLAN_OUTCOME_LABELS["plan-execute"]}\uFF08\u6743\u9650\u56DE\u5230 ${proposal.previousLevel}\uFF09`,
+        value: "plan-execute"
+      }
+    ] : [],
+    { name: PLAN_OUTCOME_LABELS["plan-readonly"], value: "plan-readonly" },
+    { name: PLAN_OUTCOME_LABELS["plan-revise"], value: "plan-revise" },
+    { name: PLAN_OUTCOME_LABELS.deny, value: "deny" }
+  ];
+  try {
+    const outcome = await select2({ message: "\u8FD9\u4EFD\u8BA1\u5212\uFF1F", choices });
+    if (outcome !== "plan-revise") return outcome;
+    const note = (await input2({ message: "\u8981\u6539\u4EC0\u4E48\uFF1F" })).trim();
+    return note ? { outcome, note } : outcome;
+  } catch {
+    return "deny";
+  }
+}
+
+// src/headless/approver.ts
+import { spawn as spawn2 } from "child_process";
+import {
+  isNonInteractive as isNonInteractive4,
+  matchPreauthorization,
+  mergeHeadlessPolicy
+} from "@epoch-agent/core";
+import { APPROVAL_OUTCOMES as APPROVAL_OUTCOMES2, isApprovalOutcome as isApprovalOutcome2 } from "@epoch-agent/protocol";
+var APPROVER_TIMEOUT_MS = 6e4;
+var MAX_STDOUT_BYTES = 64 * 1024;
+var CLIP = 200;
+function clip(s) {
+  return s.length > CLIP ? `${s.slice(0, CLIP)}\u2026` : s;
+}
+function parseApproverVerdict(stdout) {
+  const text = stdout.trim();
+  if (!text) return { ok: false, why: "\u5BA1\u6279\u7A0B\u5E8F\u6CA1\u6709\u8F93\u51FA" };
+  let raw;
+  try {
+    raw = JSON.parse(text);
+  } catch {
+    return { ok: false, why: `\u5BA1\u6279\u7A0B\u5E8F\u7684\u8F93\u51FA\u4E0D\u662F JSON: ${clip(text)}` };
+  }
+  if (typeof raw !== "object" || raw === null || Array.isArray(raw)) {
+    return { ok: false, why: `\u5BA1\u6279\u7A0B\u5E8F\u7684\u8F93\u51FA\u4E0D\u662F\u4E00\u4E2A JSON \u5BF9\u8C61: ${clip(text)}` };
+  }
+  const rec = raw;
+  const outcome = rec["outcome"];
+  if (typeof outcome !== "string" || !isApprovalOutcome2(outcome)) {
+    return {
+      ok: false,
+      why: `\u5BA1\u6279\u7A0B\u5E8F\u7ED9\u7684 outcome \u4E0D\u8BA4\u8BC6: ${clip(String(outcome))}\uFF08\u53EF\u9009: ${APPROVAL_OUTCOMES2.join(" / ")}\uFF09`
+    };
+  }
+  const note = rec["note"];
+  return {
+    ok: true,
+    answer: { outcome, ...typeof note === "string" && note ? { note } : {} }
+  };
+}
+function preauthorizedBy(configPolicy, cliPolicy, req) {
+  if (!isNonInteractive4()) return null;
+  return matchPreauthorization(mergeHeadlessPolicy(configPolicy, cliPolicy), {
+    type: req.type,
+    toolName: req.toolName
+  });
+}
+function askExternalApprover(program2, payload, opts = {}) {
+  const timeoutMs = opts.timeoutMs ?? APPROVER_TIMEOUT_MS;
+  return new Promise((resolve4) => {
+    let settled = false;
+    let out2 = "";
+    const settle = (v) => {
+      if (settled) return;
+      settled = true;
+      resolve4(v);
+    };
+    const child = spawn2(program2, {
+      shell: true,
+      ...opts.cwd ? { cwd: opts.cwd } : {},
+      // stdin/stdout 是这条问答的通道，stderr 让给它自己打日志
+      stdio: ["pipe", "pipe", "inherit"]
+    });
+    const timer = setTimeout(() => {
+      child.kill("SIGKILL");
+      settle({ ok: false, why: `\u5BA1\u6279\u7A0B\u5E8F ${timeoutMs}ms \u5185\u6CA1\u6709\u7B54\u590D` });
+    }, timeoutMs);
+    const done = (v) => {
+      clearTimeout(timer);
+      settle(v);
+    };
+    child.stdout?.on("data", (d) => {
+      out2 += d.toString("utf-8");
+      if (out2.length > MAX_STDOUT_BYTES) {
+        child.kill("SIGKILL");
+        done({ ok: false, why: `\u5BA1\u6279\u7A0B\u5E8F\u8F93\u51FA\u8D85\u8FC7 ${MAX_STDOUT_BYTES} \u5B57\u8282\u8FD8\u6CA1\u6536\u5C3E` });
+      }
+    });
+    child.on("error", (err2) => {
+      done({ ok: false, why: `\u5BA1\u6279\u7A0B\u5E8F\u8D77\u4E0D\u6765: ${err2.message}` });
+    });
+    child.on("close", (code) => {
+      if (code !== 0) {
+        done({ ok: false, why: `\u5BA1\u6279\u7A0B\u5E8F\u9000\u51FA\u7801 ${code ?? -1}` });
+        return;
+      }
+      done(parseApproverVerdict(out2));
+    });
+    child.stdin?.on("error", () => {
+    });
+    child.stdin?.end(JSON.stringify(payload));
+  });
+}
+function payloadOf(req, cwd, sessionId) {
+  return {
+    version: 1,
+    ...sessionId ? { sessionId } : {},
+    cwd,
+    toolName: req.toolName,
+    type: req.type,
+    target: req.target,
+    detail: req.detail,
+    ...req.reason ? { reason: req.reason } : {},
+    ...req.plan ? { plan: req.plan } : {}
+  };
+}
+function createExternalApproval(opts) {
+  const write = opts.write ?? ((s) => void process.stderr.write(s));
+  const cwd = opts.cwd ?? process.cwd();
+  const ask = opts.ask ?? ((p) => askExternalApprover(opts.program, p, {
+    cwd,
+    ...opts.timeoutMs !== void 0 ? { timeoutMs: opts.timeoutMs } : {}
+  }));
+  return async (req) => {
+    const hit = req.plan ? null : opts.preauth?.(req) ?? null;
+    if (hit) {
+      write(`[\u9884\u6388\u6743\u653E\u884C] ${req.toolName} ${req.target} \u2014\u2014 ${hit}\uFF08\u6CA1\u8D77\u5BA1\u6279\u7A0B\u5E8F\uFF09
+`);
+      return "allow-once";
+    }
+    const verdict = await ask(payloadOf(req, cwd, opts.sessionId?.()));
+    if (!verdict.ok) {
+      write(`[\u5916\u90E8\u5BA1\u6279\u62D2\u7EDD] ${req.toolName} ${req.target} \u2014\u2014 ${verdict.why}\uFF0C\u6309\u62D2\u7EDD\u5904\u7406
+`);
+      return "deny";
+    }
+    const { outcome } = verdict.answer;
+    const verb = outcome === "deny" ? "\u62D2\u7EDD" : "\u653E\u884C";
+    write(`[\u5916\u90E8\u5BA1\u6279${verb}] ${req.toolName} ${req.target} \u2014\u2014 ${outcome}
+`);
+    return verdict.answer;
+  };
+}
+
+// src/headless/tasks.ts
+import { describeBackgroundTask } from "@epoch-agent/core";
+function backgroundTaskSummary(tasks) {
+  if (tasks.length === 0) return "";
+  const running = tasks.filter((t14) => t14.status === "running").length;
+  const head = running > 0 ? `\u2699 \u540E\u53F0\u4EFB\u52A1 ${tasks.length} \u4E2A\uFF0C\u5176\u4E2D ${running} \u4E2A\u8FD8\u5728\u8DD1 \u2014\u2014 epoch \u9000\u51FA\u65F6\u4F1A\u4E00\u5E76\u7EC8\u6B62` : `\u2699 \u540E\u53F0\u4EFB\u52A1 ${tasks.length} \u4E2A\uFF0C\u90FD\u5DF2\u7ECF\u7ED3\u675F`;
+  return [head, ...tasks.map((t14) => `  ${describeBackgroundTask(t14)}`)].join("\n");
+}
+
+// src/import-prompt.ts
+import {
+  createImportGate,
+  ImportTrustStore,
+  isNonInteractive as isNonInteractive6,
+  loadConfig as loadConfig2,
+  resolveProjectRoot as resolveProjectRoot2,
+  scanInstructions,
+  setImportGate,
+  TrustManager as TrustManager2
+} from "@epoch-agent/core";
+import { trustedImportsPath, trustPath as trustPath2 } from "@epoch-agent/infra";
+
+// src/trust-prompt.ts
+import {
+  findProjectInstructions,
+  isNonInteractive as isNonInteractive5,
+  loadConfig,
+  resolveProjectRoot,
+  TrustManager
+} from "@epoch-agent/core";
+import { trustPath } from "@epoch-agent/infra";
+function trustPromptTarget(deps) {
+  if (!deps.gateEnabled) return null;
+  if (!deps.interactive) return null;
+  const root = resolveProjectRoot(deps.workDir);
+  if (deps.store.check(root) !== "unknown") return null;
+  const instructionsPath = findProjectInstructions(root, deps.workDir);
+  if (!instructionsPath) return null;
+  return { root, instructionsPath };
+}
+function applyTrustChoice(store, root, choice) {
+  if (choice.kind === "trust") {
+    store.record(root, "trusted", choice.scope);
+    const suffix = choice.scope === "directory-tree" ? "\uFF08\u542B\u5B50\u76EE\u5F55\uFF09" : "";
+    return `\u2713 \u5DF2\u4FE1\u4EFB ${root}${suffix}\uFF0C\u672C\u76EE\u5F55\u7684\u9879\u76EE\u6307\u4EE4\u4F1A\u52A0\u8F7D`;
+  }
+  if (choice.kind === "never") {
+    store.record(root, "untrusted", "directory");
+    return `\u2717 \u5DF2\u8BB0\u4E3A\u4E0D\u4FE1\u4EFB ${root}\uFF0C\u4E4B\u540E\u4E0D\u518D\u8BE2\u95EE\uFF08epoch trust rm ${root} \u53EF\u64A4\u9500\uFF09`;
+  }
+  return "\u672C\u6B21\u4E0D\u52A0\u8F7D\u9879\u76EE\u6307\u4EE4\u3002\u60F3\u8BA9\u5B83\u751F\u6548\u8FD0\u884C epoch trust add";
+}
+function trustPromptMessage(target) {
+  return [
+    `
+\u26A0 \u68C0\u6D4B\u5230\u9879\u76EE\u6307\u4EE4\u6587\u4EF6\uFF1A${target.instructionsPath}`,
+    "  \u5B83\u7531\u4ED3\u5E93\u4F5C\u8005\u7F16\u5199\uFF0C\u4E00\u65E6\u52A0\u8F7D\u5C31\u4F1A\u76F4\u63A5\u8FDB\u5165 system prompt\uFF0C\u7B49\u4E8E\u8BA9\u8FD9\u4E2A\u4ED3\u5E93",
+    "  \u6307\u6325\u4F60\u7684 agent\u3002\u6240\u4EE5\u672A\u7ECF\u786E\u8BA4\u4E0D\u4F1A\u52A0\u8F7D\u3002",
+    ""
+  ].join("\n");
+}
+var CHOICES = [
+  { name: "\u672C\u6B21\u4E0D\u52A0\u8F7D\uFF08\u4E0B\u6B21\u8FD8\u4F1A\u95EE\uFF09", value: { kind: "skip" } },
+  { name: `\u4FE1\u4EFB\u672C\u76EE\u5F55`, value: { kind: "trust", scope: "directory" } },
+  { name: "\u4FE1\u4EFB\u672C\u76EE\u5F55\u53CA\u5176\u6240\u6709\u5B50\u76EE\u5F55", value: { kind: "trust", scope: "directory-tree" } },
+  { name: "\u6C38\u4E0D\u4FE1\u4EFB\u672C\u76EE\u5F55\uFF08\u4E0D\u518D\u8BE2\u95EE\uFF09", value: { kind: "never" } }
+];
+function restoreStdinDefault() {
+  const stdin = process.stdin;
+  if (stdin.isTTY) stdin.setRawMode?.(false);
+  stdin.resume();
+}
+async function maybePromptForTrust(opts = {}) {
+  const config = opts.config ?? loadConfig();
+  const store = opts.store ?? new TrustManager(trustPath(config.homeDir));
+  const print = opts.print ?? ((msg) => process.stdout.write(msg + "\n"));
+  const target = trustPromptTarget({
+    store,
+    interactive: (opts.isInteractive ?? (() => !isNonInteractive5()))(),
+    gateEnabled: config.trust?.enabled !== false,
+    workDir: opts.workDir ?? process.cwd()
+  });
+  if (!target) return true;
+  print(trustPromptMessage(target));
+  let choice;
+  try {
+    choice = await (opts.ask ?? askTrustChoice)(target);
+  } finally {
+    (opts.restoreStdin ?? restoreStdinDefault)();
+  }
+  if (choice === null) return false;
+  try {
+    print(applyTrustChoice(store, target.root, choice));
+  } catch (err2) {
+    print(`\u26A0 \u4FE1\u4EFB\u8BB0\u5F55\u5199\u5165\u5931\u8D25\uFF0C\u672C\u6B21\u4ECD\u6309\u4E0D\u4FE1\u4EFB\u5904\u7406\uFF1A${err2 instanceof Error ? err2.message : err2}`);
+  }
+  return true;
+}
+async function askTrustChoice(_target) {
+  const { select: select2 } = await import("@inquirer/prompts");
+  try {
+    return await select2({
+      message: "\u662F\u5426\u4FE1\u4EFB\u672C\u76EE\u5F55\uFF1F",
+      choices: [...CHOICES],
+      default: CHOICES[0]?.value
+    });
+  } catch {
+    return null;
+  }
+}
+
+// src/import-prompt.ts
+function externalImportTargets(deps) {
+  if (!deps.gateEnabled) return [];
+  if (!deps.interactive) return [];
+  if (deps.store.deniedAll) return [];
+  const root = resolveProjectRoot2(deps.workDir);
+  if (deps.trust.check(root) !== "trusted") return [];
+  const scan = scanInstructions(root, deps.workDir, {
+    allowExternal: (p) => deps.store.isAllowed(p)
+  });
+  const out2 = [];
+  const seen = /* @__PURE__ */ new Set();
+  for (const src of scan.sources) {
+    for (const node of src.imports) {
+      if (node.skipped !== "external-denied") continue;
+      if (seen.has(node.path)) continue;
+      seen.add(node.path);
+      out2.push({ path: node.path, from: src.path, spec: node.spec });
+    }
+  }
+  return out2;
+}
+function importPromptMessage(target) {
+  return [
+    `
+\u26A0 ${target.from} \u5F15\u7528\u4E86\u9879\u76EE\u4E4B\u5916\u7684\u6587\u4EF6\uFF1A`,
+    `    ${target.path}`,
+    `  \uFF08\u6587\u4EF6\u91CC\u5199\u7684\u662F @${target.spec}\uFF09`,
+    "  \u5B83\u4E0D\u5728\u8FD9\u4E2A\u4ED3\u5E93\u91CC\uFF0C\u4E5F\u6CA1\u6709\u88AB\u300C\u4FE1\u4EFB\u8FD9\u4E2A\u76EE\u5F55\u300D\u90A3\u6B21\u5224\u5B9A\u8986\u76D6\u8FC7\u3002",
+    "  \u52A0\u8F7D\u5B83\u7B49\u4E8E\u628A\u4E00\u4EFD\u6CA1\u88AB\u5BA1\u8FC7\u7684\u5185\u5BB9\u62FC\u8FDB system prompt\u3002",
+    ""
+  ].join("\n");
+}
+function applyImportChoice(store, target, choice) {
+  if (choice.kind === "once") {
+    store.allowOnce(target.path);
+    return `\u2713 \u672C\u6B21\u52A0\u8F7D ${target.path}\uFF08\u4E0B\u6B21\u8FD8\u4F1A\u95EE\uFF09`;
+  }
+  if (choice.kind === "remember") {
+    store.remember(target.path);
+    return `\u2713 \u5DF2\u8BB0\u4F4F ${target.path}\uFF0C\u4E4B\u540E\u4E0D\u518D\u8BE2\u95EE`;
+  }
+  if (choice.kind === "never") {
+    store.denyAll();
+    return "\u2717 \u4E4B\u540E\u4E00\u5F8B\u4E0D\u52A0\u8F7D\u9879\u76EE\u5916\u7684 import\uFF08\u6539\u8FD9\u4E2A\u51B3\u5B9A\uFF1A\u5220\u6389 ~/.epoch/trusted-imports.json\uFF09";
+  }
+  return `\u672C\u6B21\u4E0D\u52A0\u8F7D ${target.path}`;
+}
+var CHOICES2 = [
+  { name: "\u672C\u6B21\u4E0D\u52A0\u8F7D\uFF08\u4E0B\u6B21\u8FD8\u4F1A\u95EE\uFF09", value: { kind: "skip" } },
+  { name: "\u52A0\u8F7D\u8FD9\u4E00\u4E2A\u6587\u4EF6", value: { kind: "once" } },
+  { name: "\u52A0\u8F7D\uFF0C\u5E76\u8BB0\u4F4F\u8FD9\u4E2A\u8DEF\u5F84\uFF08\u4E0B\u6B21\u4E0D\u95EE\uFF09", value: { kind: "remember" } },
+  { name: "\u6C38\u4E0D\u52A0\u8F7D\u9879\u76EE\u5916\u7684 import", value: { kind: "never" } }
+];
+async function maybePromptForExternalImports(opts = {}) {
+  const config = opts.config ?? loadConfig2();
+  const store = opts.store ?? new ImportTrustStore(trustedImportsPath(config.homeDir));
+  const print = opts.print ?? ((msg) => process.stdout.write(msg + "\n"));
+  const targets = externalImportTargets({
+    store,
+    trust: opts.trust ?? new TrustManager2(trustPath2(config.homeDir)),
+    interactive: (opts.isInteractive ?? (() => !isNonInteractive6()))(),
+    gateEnabled: config.trust?.enabled !== false,
+    workDir: opts.workDir ?? process.cwd()
+  });
+  if (targets.length === 0) {
+    setImportGate(createImportGate(store));
+    return true;
+  }
+  try {
+    for (const target of targets) {
+      print(importPromptMessage(target));
+      const choice = await (opts.ask ?? askImportChoice)(target);
+      if (choice === null) return false;
+      try {
+        print(applyImportChoice(store, target, choice));
+      } catch (err2) {
+        print(
+          `\u26A0 import \u653E\u884C\u8BB0\u5F55\u5199\u5165\u5931\u8D25\uFF0C\u672C\u6B21\u4ECD\u6309\u4E0D\u52A0\u8F7D\u5904\u7406\uFF1A${err2 instanceof Error ? err2.message : err2}`
+        );
+      }
+      if (choice.kind === "never") break;
+    }
+  } finally {
+    (opts.restoreStdin ?? restoreStdinDefault)();
+    setImportGate(createImportGate(store));
+  }
+  return true;
+}
+async function askImportChoice(_target) {
+  const { select: select2 } = await import("@inquirer/prompts");
+  try {
+    return await select2({
+      message: "\u662F\u5426\u52A0\u8F7D\u5B83\uFF1F",
+      choices: [...CHOICES2],
+      default: CHOICES2[0]?.value
+    });
+  } catch {
+    return null;
+  }
+}
+
+// src/commands/run-stream.ts
+var LIVE_PREFIX = "\u2502 ";
+function createStreamWriter(enabled, sink) {
+  const out2 = sink ? sink.out : (s) => void process.stdout.write(s);
+  const err2 = sink ? sink.err : (s) => void process.stderr.write(s);
+  let wroteText = false;
+  let midText = false;
+  let midLive = false;
+  return {
+    text(chunk) {
+      if (!enabled || !chunk) return;
+      if (midLive) {
+        err2("\n");
+        midLive = false;
+      }
+      out2(chunk);
+      wroteText = true;
+      midText = !chunk.endsWith("\n");
+    },
+    live(chunk) {
+      if (!enabled || !chunk) return;
+      if (midText) {
+        out2("\n");
+        midText = false;
+      }
+      const endsNl = chunk.endsWith("\n");
+      const segs = (endsNl ? chunk.slice(0, -1) : chunk).split("\n");
+      const body = segs.map((s, i) => i === 0 && midLive ? s : LIVE_PREFIX + s).join("\n");
+      err2(body + (endsNl ? "\n" : ""));
+      midLive = !endsNl;
+    },
+    end() {
+      if (!enabled) return;
+      if (midLive) {
+        err2("\n");
+        midLive = false;
+      }
+      if (wroteText) out2("\n");
+      midText = false;
+    }
+  };
+}
+
+// src/commands/run-once.ts
+async function readStdin() {
+  if (process.stdin.isTTY) return "";
+  const chunks = [];
+  for await (const chunk of process.stdin) chunks.push(Buffer.from(chunk));
+  return Buffer.concat(chunks).toString("utf-8");
+}
+function composePrompt(query, stdin) {
+  const piped = stdin.trim();
+  if (!piped) return query ?? "";
+  if (!query) return piped;
+  return `${query}
+
+--- \u4EE5\u4E0B\u662F\u6807\u51C6\u8F93\u5165\u7684\u5185\u5BB9 ---
+${piped}`;
+}
+function composeContent(query, images) {
+  if (images.length === 0) return query;
+  try {
+    return [
+      ...query ? [{ type: "text", text: query }] : [],
+      ...images.map((p) => imageFromPath(p))
+    ];
+  } catch (err2) {
+    throw new CliError(
+      err2 instanceof Error ? err2.message : String(err2),
+      EXIT_CODES.FAILURE,
+      "\u652F\u6301 png / jpeg / gif / webp\uFF0C\u4E5F\u53EF\u4EE5\u76F4\u63A5\u7ED9 http(s) \u56FE\u7247 URL"
+    );
+  }
+}
+var SHORT_ID_LEN = 8;
+async function runOnce(query, opts, resumeId) {
+  const { policy: headless, invalid } = parseHeadlessFlags(opts);
+  if (invalid.length > 0) {
+    throw new CliError(
+      `--allow-operation \u4E0D\u8BA4\u8BC6: ${invalid.join(", ")}`,
+      EXIT_CODES.FAILURE,
+      `\u53EF\u9009\u503C: ${OPERATION_TYPES2.join(" / ")}`
+    );
+  }
+  const format = resolveOutputFormat(opts);
+  const limits = parseCallLimits(opts);
+  const approver = resolveApproverProgram(opts.permissionPromptTool);
+  const content = composeContent(query, opts.image ?? []);
+  if (!await maybePromptForTrust()) {
+    process.exit(EXIT_CODES.FAILURE);
+  }
+  if (!await maybePromptForExternalImports()) {
+    process.exit(EXIT_CODES.FAILURE);
+  }
+  let rt = null;
+  const runtime = await buildRuntime2({
+    onApprovalRequest: approver ? createExternalApproval({
+      program: approver,
+      sessionId: () => rt?.sessionId,
+      preauth: (req) => preauthorizedBy(rt?.config.headless, headless, req)
+    }) : createInteractiveApproval({ permission: () => rt?.permission }),
+    // 必须显式传：`buildRuntime` 的默认值是 false（库不替宿主决定进程怎么退），
+    // 而 CLI **就是**那个该被决定的宿主 —— Ctrl+C 要走 dispose() 关掉 SQLite
+    // 连接和 MCP 子进程，不能因为默认值翻转就悄悄退回「硬杀进程」。
+    // 守卫用例：cli/__tests__/signal-handlers.test.ts
+    installSignalHandlers: true,
+    // 有外部审批器 = **有人能答**，所以告诉权限层按交互处理（方案 28）。
+    //
+    // 不这么做的话这个参数压根不会被调到：非交互下权限层的第 3 层会把每一次
+    // `ask_user` 直接收敛成 deny（见 manager.ts 的 applyPreauthorization），
+    // 审批回调连请求都收不到。这和长驻模式那条路是同一个决定、同一个理由
+    // （见 headless/session.ts 的文件头第 3 条）。
+    //
+    // 连带的三个后果，都是刻意的：
+    //   1. `--allow-tool` 那套预授权不再由权限层判 —— 所以下面 `preauth` 把
+    //      「预授权先命中就不起子进程」补在了审批回调里（验收 #18）
+    //   2. 混淆构造（`$(echo rm) -rf /`）从「非交互无人确认，拒绝」变成「问审批
+    //      程序」。那正是「有人能答」的含义，也是文档里要写明「等同于信任它」的
+    //      原因之一
+    //   3. 这条路上**不会出现退出码 3** —— 那个码的语义是「没人可问所以被卡住」，
+    //      而这里每一次都真的问过了。审批程序答 deny 是它自己的决定，退 0
+    ...approver ? { interactive: true } : {},
+    ...headless ? { headless } : {},
+    ...resumeId ? { resumeId } : {}
+  });
+  rt = runtime;
+  if (!runtime.session) {
+    const detail = runtime.diagnostics.join("\n  ");
+    await runtime.dispose();
+    throw new CliError(
+      "provider \u4E0D\u53EF\u7528\uFF0Cagent \u65E0\u6CD5\u542F\u52A8",
+      EXIT_CODES.FAILURE,
+      detail ? `\u8BCA\u65AD:
+  ${detail}` : "\u8FD0\u884C epoch model \u914D\u7F6E"
+    );
+  }
+  try {
+    if (format !== "json") reportDiagnostics(runtime.diagnostics, opts.verbose === true);
+    if (resumeId) {
+      const restored = runtime.session.getHistory().length;
+      process.stderr.write(
+        `\u21BB \u5DF2\u6062\u590D ${resumeId.slice(0, SHORT_ID_LEN)}\uFF08${restored} \u6761\u5386\u53F2\u6D88\u606F\uFF09
+`
+      );
+    }
+    const emitter = format === "stream-json" ? new HeadlessEmitter() : void 0;
+    emitter?.init(initInfoOf(runtime, process.cwd()));
+    const outcome = await consume(runtime, content, opts, format, limits, emitter);
+    const tasks = listBackgroundTasks(runtime.session?.sessionId ?? runtime.sessionId);
+    emitOutcome(outcome, opts, format, emitter, tasks);
+    for (const notice of runtime.model?.drainNotices() ?? []) {
+      process.stderr.write(`\xB7 ${notice}
+`);
+    }
+    const limited = limitExitCode(outcome, limits);
+    if (limited !== void 0 && !process.exitCode) process.exitCode = limited;
+    if (outcome.aborted && !process.exitCode) process.exitCode = 130;
+  } finally {
+    reportHeadlessAudit(runtime.permission);
+    await runtime.dispose();
+  }
+}
+async function consume(runtime, query, opts, format, limits, emitter) {
+  const out2 = emptyOutcome(runtime.diagnostics);
+  const streaming = opts.stream !== false && format === "text";
+  const w = createStreamWriter(streaming);
+  const controller = new AbortController();
+  const onSigint = () => {
+    out2.aborted = true;
+    controller.abort();
+  };
+  process.on("SIGINT", onSigint);
+  try {
+    const run = runtime.session.run(query, {
+      signal: controller.signal,
+      ...limits.maxTurns !== void 0 ? { maxTurns: limits.maxTurns } : {},
+      ...limits.maxCallCostUsd !== void 0 ? { maxCallCostUsd: limits.maxCallCostUsd } : {}
+    });
+    for await (const ev of run) {
+      emitter?.agentEvent(ev);
+      collect2(out2, ev, w);
+    }
+  } finally {
+    process.off("SIGINT", onSigint);
+    w.end();
+  }
+  return out2;
+}
+function collect2(out2, ev, w) {
+  if (ev.type === "text-delta") {
+    out2.text += ev.text;
+    w.text(ev.text);
+  } else if (ev.type === "tool-output-delta") {
+    w.live(ev.text);
+  } else if (ev.type === "reasoning-delta") {
+    out2.reasoning += ev.text;
+  } else if (ev.type === "turn-complete") {
+    out2.turns = ev.turn;
+  } else if (ev.type === "usage") {
+    out2.usage = ev.cumulative;
+  } else if (ev.type === "error") {
+    out2.text = `\u9519\u8BEF: ${ev.message}`;
+    process.exitCode = EXIT_CODES.FAILURE;
+  } else if (ev.type === "finish") {
+    out2.finishReason = ev.reason;
+    if (ev.breach) out2.breach = ev.breach;
+    if (ev.reason === "budget-exceeded") out2.budgetExceeded = true;
+  }
+}
+function emitOutcome(out2, opts, format, emitter, tasks = []) {
+  const taskLines = backgroundTaskSummary(tasks);
+  if (format === "stream-json") {
+    emitter?.result(toResult(out2));
+    if (taskLines) process.stderr.write(taskLines + "\n");
+    return;
+  }
+  if (format === "json") {
+    process.stdout.write(
+      JSON.stringify(
+        {
+          text: out2.text,
+          ...out2.reasoning ? { reasoning: out2.reasoning } : {},
+          ...out2.usage ? { usage: out2.usage } : {},
+          ...out2.finishReason ? { finishReason: out2.finishReason } : {},
+          budgetExceeded: out2.budgetExceeded,
+          aborted: out2.aborted,
+          diagnostics: out2.diagnostics,
+          // 一个后台任务都没起时**整个字段都不出现** —— 绝大多数调用是这样，
+          // 而验收 4.1 第 1 条要求 `--json` 的输出与改造前逐字节相同
+          ...tasks.length > 0 ? { backgroundTasks: tasks } : {}
+        },
+        null,
+        2
+      ) + "\n"
+    );
+    return;
+  }
+  if (out2.reasoning) process.stderr.write(`\u23FA \u601D\u8003\u8FC7\u7A0B:
+${out2.reasoning}
+
+`);
+  if (opts.stream === false && out2.text) process.stdout.write(out2.text + "\n");
+  if (out2.aborted) process.stderr.write("\n\u5DF2\u4E2D\u6B62\n");
+  if (taskLines) process.stderr.write(taskLines + "\n");
+  const summary = formatSummary(out2.usage, out2.budgetExceeded);
+  if (summary) process.stderr.write(summary + "\n");
+}
+function reportDiagnostics(diagnostics, verbose, write) {
+  const w = write ?? ((s) => void process.stderr.write(s));
+  for (const d of noteworthy(diagnostics, verbose)) w(`\xB7 ${d}
+`);
+}
+function noteworthy(diagnostics, verbose) {
+  if (verbose) return [...diagnostics];
+  return diagnostics.filter((d) => !/:\s*OK$/.test(d));
+}
+function formatSummary(usage, budgetExceeded) {
+  if (!usage) return "";
+  const cached = usage.cacheHitTokens ? `\uFF08\u7F13\u5B58\u547D\u4E2D ${usage.cacheHitTokens}\uFF09` : "";
+  const tokens = `${promptTokens(usage)} in${cached} / ${usage.outputTokens} out`;
+  const cost = usage.costUsd === void 0 ? "\u6210\u672C\u672A\u77E5\uFF08\u65E0\u5B9A\u4EF7\u6570\u636E\uFF09" : formatUsd(usage.costUsd);
+  const stopped = budgetExceeded ? "  \u26A0 \u5DF2\u89E6\u8FBE\u9884\u7B97\u4E0A\u9650" : "";
+  return `\u2500 ${tokens}  \xB7  ${cost}${stopped}`;
+}
+function reportHeadlessAudit(permission) {
+  const audit = permission?.getAudit("headless").entries ?? [];
+  if (audit.length === 0) return;
+  for (const e of audit) {
+    process.stderr.write(
+      e.outcome === "granted" ? `[\u9884\u6388\u6743\u653E\u884C] ${e.toolName} ${e.target} \u2014\u2014 ${e.reason}
+` : `[\u672A\u9884\u6388\u6743\u62D2\u7EDD] ${e.toolName} ${e.target} \u2014\u2014 ${e.reason}
+`
+    );
+  }
+  if (audit.some((e) => e.outcome === "denied") && !process.exitCode) {
+    process.exitCode = EXIT_CODES.PERMISSION_DENIED;
+  }
+}
+
+// src/commands/run-overrides.ts
+import { isPermissionLevel as isPermissionLevel2, PERMISSION_LEVELS as PERMISSION_LEVELS2 } from "@epoch-agent/core";
+import { t as t3 } from "@epoch-agent/infra";
+import { isProviderType as isProviderType2, PROVIDER_TYPES as PROVIDER_TYPES3 } from "@epoch-agent/protocol";
+function applyRunFlags(opts) {
+  applySettingsPath(opts.settings);
+  applyAddDirs(opts.addDir);
+  applyAgentRole(opts.agent);
+  applyOverrides(opts);
+  parseCallLimits(opts);
+  resolveApproverProgram(opts.permissionPromptTool);
+}
+function applyOverrides(opts) {
+  if (opts.model) process.env.EPOCH_MODEL = assertModelName(opts.model, "--model");
+  if (opts.fallbackModel) {
+    process.env.EPOCH_FALLBACK_MODEL = assertModelName(opts.fallbackModel, "--fallback-model");
+  }
+  if (opts.baseUrl) process.env.EPOCH_BASE_URL = assertHttpUrl(opts.baseUrl);
+  if (opts.provider) {
+    if (!isProviderType2(opts.provider)) {
+      throw new CliError(
+        t3("flags.provider_unknown", { value: opts.provider }),
+        1,
+        t3("flags.choices", { choices: PROVIDER_TYPES3.join(", ") })
+      );
+    }
+    process.env.EPOCH_PROVIDER = opts.provider;
+  }
+  if (opts.permission) {
+    if (!isPermissionLevel2(opts.permission)) {
+      throw new CliError(
+        t3("flags.permission_unknown", { value: opts.permission }),
+        1,
+        t3("flags.choices", { choices: PERMISSION_LEVELS2.join(", ") })
+      );
+    }
+    process.env.EPOCH_PERMISSION = opts.permission;
+  }
+}
+var MODEL_ID = /^[!-~]+$/;
+function assertModelName(value, flag) {
+  const spec = value.trim();
+  if (MODEL_ID.test(spec)) return value;
+  throw new CliError(
+    t3("flags.model_not_a_name", { flag, value }),
+    1,
+    t3("flags.model_not_a_name_hint", { value: spec })
+  );
+}
+function assertHttpUrl(value) {
+  try {
+    const url = new URL(value.trim());
+    if (url.protocol === "http:" || url.protocol === "https:") return value;
+  } catch {
+  }
+  throw new CliError(
+    t3("flags.base_url_invalid", { value }),
+    1,
+    t3("flags.base_url_invalid_hint", { value: value.trim() })
+  );
+}
+
+// src/commands/sessions.ts
+import { isNonInteractive as isNonInteractive7, resolveProjectRoot as resolveProjectRoot3, SessionManager } from "@epoch-agent/core";
+import { dbPath } from "@epoch-agent/infra";
+var log6 = (msg) => process.stdout.write(msg + "\n");
+var SHORT_ID_LEN2 = 8;
+var PICK_LIMIT = 20;
+function registerSessionsCommand(program2) {
+  const cmd = program2.command("sessions").alias("session").description("\u7BA1\u7406\u5386\u53F2\u4F1A\u8BDD");
+  cmd.command("list").description("\u5217\u51FA\u6700\u8FD1\u7684\u4F1A\u8BDD").option("-n, --limit <n>", "\u6570\u91CF", "10").action((opts) => {
+    withSessions((sm) => {
+      const r = sm.list({ limit: parseInt(opts.limit, 10) });
+      if (r.sessions.length === 0) {
+        log6("  (\u65E0)");
+        return;
+      }
+      for (const s of r.sessions) {
+        const when = s.startedAt ? new Date(s.startedAt).toLocaleString("zh-CN") : "\u672A\u77E5";
+        log6(`  ${s.id.slice(0, SHORT_ID_LEN2)}  ${when}  ${s.title || s.preview || "(\u65E0)"}`);
+      }
+    });
+  });
+  cmd.command("resume").description("\u6062\u590D\u4F1A\u8BDD\u7EE7\u7EED\u5BF9\u8BDD\uFF08id \u53EF\u4EE5\u53EA\u5199 list \u91CC\u663E\u793A\u7684\u524D 8 \u4F4D\uFF09").argument("[id]", "\u4F1A\u8BDD ID \u6216\u5176\u524D\u7F00\uFF08\u4E0D\u6307\u5B9A\u5219\u6062\u590D\u6700\u65B0\uFF09").argument("[query]", "\u8981\u53D1\u9001\u7684\u6D88\u606F\uFF08\u53EF\u9009\uFF09").action(async (id, query) => {
+    const resolved = resolveSessionId(id);
+    if (!resolved.ok) {
+      throw new CliError(resolved.error, EXIT_CODES.FAILURE);
+    }
+    await runOnce(query || "\u7EE7\u7EED", {}, resolved.id);
+  });
+}
+function resolveSessionId(input2) {
+  return withSessions((sm) => {
+    if (!input2) {
+      const latest = sm.getLatest()?.meta.id;
+      return latest ? { ok: true, id: latest } : { ok: false, error: "\u65E0\u53EF\u6062\u590D\u7684\u4F1A\u8BDD" };
+    }
+    if (sm.get(input2)) return { ok: true, id: input2 };
+    const candidates = sm.list({ limit: 200 }).sessions.filter((s) => s.id.startsWith(input2)).map((s) => s.id);
+    if (candidates.length === 1) return { ok: true, id: candidates[0] };
+    if (candidates.length === 0) {
+      return { ok: false, error: `\u627E\u4E0D\u5230\u4F1A\u8BDD: ${input2}\uFF08\u7528 epoch sessions list \u67E5\u770B\uFF09` };
+    }
+    return {
+      ok: false,
+      error: `\u4F1A\u8BDD\u524D\u7F00 ${input2} \u5339\u914D\u5230 ${candidates.length} \u4E2A\uFF0C\u8BF7\u5199\u66F4\u957F\u7684\u524D\u7F00`
+    };
+  });
+}
+function latestSessionIdForProject(cwd = process.cwd()) {
+  const root = resolveProjectRoot3(cwd);
+  return withSessions((sm) => sm.getLatestByCwd(root)?.meta.id);
+}
+async function pickSessionId() {
+  if (isNonInteractive7()) {
+    throw new CliError(
+      "\u975E\u4EA4\u4E92\u73AF\u5883\u4E0B --resume \u5FC5\u987B\u5E26\u4F1A\u8BDD id",
+      EXIT_CODES.FAILURE,
+      "\u7528 epoch sessions list \u67E5 id\uFF0C\u6216\u7528 --continue \u63A5\u672C\u9879\u76EE\u6700\u8FD1\u4E00\u4E2A"
+    );
+  }
+  const rows = withSessions(
+    (sm) => sm.list({ limit: PICK_LIMIT }).sessions.map((s) => ({
+      id: s.id,
+      title: s.title || s.preview || "(\u65E0\u6807\u9898)",
+      when: s.startedAt ? new Date(s.startedAt).toLocaleString("zh-CN") : "\u672A\u77E5",
+      // 老会话的 cwd 是 NULL（方案 29 之前没人写它），如实显示成「未记录」
+      where: s.cwd ?? "\u672A\u8BB0\u5F55",
+      messageCount: s.messageCount
+    }))
+  );
+  if (rows.length === 0) {
+    log6("\u6CA1\u6709\u5386\u53F2\u4F1A\u8BDD\uFF0C\u5C06\u5F00\u59CB\u4E00\u6BB5\u65B0\u5BF9\u8BDD\u3002");
+    return void 0;
+  }
+  const { select: select2 } = await import("@inquirer/prompts");
+  try {
+    return await select2({
+      message: "\u6062\u590D\u54EA\u4E00\u6BB5\u4F1A\u8BDD\uFF1F",
+      choices: rows.map((r) => ({
+        name: `${r.id.slice(0, SHORT_ID_LEN2)}  ${r.when}  ${r.title}`,
+        value: r.id,
+        description: `${r.messageCount} \u6761\u6D88\u606F \xB7 ${r.where}`
+      })),
+      pageSize: 12
+    });
+  } catch {
+    return void 0;
+  }
+}
+function withSessions(fn) {
+  const sm = new SessionManager(dbPath(EPOCH_HOME));
+  try {
+    return fn(sm);
+  } finally {
+    sm.close();
+  }
+}
+
+// src/commands/run.ts
+var log7 = (msg) => {
+  process.stdout.write(msg + "\n");
+};
+function registerRunCommand(program2) {
+  program2.argument("[query]", "\u8981\u6267\u884C\u7684\u4EFB\u52A1\uFF1B\u4E0D\u7ED9\u4E14 stdin \u6709\u5185\u5BB9\u65F6\u8BFB stdin").option("--allow-tool <name>", "\u975E\u4EA4\u4E92\uFF08CI / \u7BA1\u9053\uFF09\u4E0B\u9884\u6388\u6743\u7684\u5DE5\u5177\u540D\uFF0C\u53EF\u91CD\u590D", collect, []).option(
+    "--allow-operation <type>",
+    `\u975E\u4EA4\u4E92\u4E0B\u9884\u6388\u6743\u7684\u64CD\u4F5C\u7C7B\u578B\uFF08${OPERATION_TYPES3.join(" / ")}\uFF09\uFF0C\u53EF\u91CD\u590D`,
+    collect,
+    []
+  ).option(
+    "-i, --image <path>",
+    "\u9644\u52A0\u56FE\u7247\uFF08\u8DEF\u5F84\u6216 http(s) URL\uFF09\uFF0C\u53EF\u91CD\u590D\u3002\u9700\u8981\u6A21\u578B\u652F\u6301\u89C6\u89C9",
+    collect,
+    []
+  ).option("-c, --continue", "\u63A5\u4E0A\u672C\u9879\u76EE\u6700\u8FD1\u4E00\u4E2A\u4F1A\u8BDD\u7EE7\u7EED").option("-r, --resume [id]", "\u6062\u590D\u67D0\u4E2A\u4F1A\u8BDD\uFF1B\u4E0D\u5E26 id \u5219\u4EA4\u4E92\u5F0F\u9009").option("-m, --model <name>", "\u672C\u6B21\u4F7F\u7528\u7684\u6A21\u578B\uFF0C\u8986\u76D6\u914D\u7F6E\u6587\u4EF6").option("--fallback-model <name>", "\u4E3B\u6A21\u578B\u4E0D\u53EF\u7528\u65F6\uFF0C\u540C\u4E00\u4E2A provider \u5185\u5148\u964D\u7EA7\u5230\u5B83").option("-p, --provider <type>", `\u672C\u6B21\u4F7F\u7528\u7684 provider\uFF08${PROVIDER_TYPES4.join(" / ")}\uFF09`).option("--base-url <url>", "\u672C\u6B21\u4F7F\u7528\u7684 API base URL").option("--permission <level>", `\u672C\u6B21\u7684\u6743\u9650\u7EA7\u522B\uFF08${PERMISSION_LEVELS3.join(" / ")}\uFF09`).option("--settings <file>", "\u989D\u5916\u7684\u8BBE\u7F6E\u6587\u4EF6\uFF0C\u538B\u8FC7\u9879\u76EE\u7EA7\u548C\u7528\u6237\u7EA7\uFF08CI \u7528\uFF09").option(
+    "--add-dir <dir>",
+    "\u628A\u989D\u5916\u76EE\u5F55\u52A0\u8FDB\u5DE5\u4F5C\u533A\uFF08\u6587\u4EF6\u5DE5\u5177\u548C\u6743\u9650\u5224\u5B9A\u90FD\u653E\u884C\u5B83\uFF09\uFF0C\u53EF\u91CD\u590D",
+    collect,
+    []
+  ).option("--agent <role>", "\u7528\u67D0\u4E2A\u89D2\u8272\u8DD1\u4E3B agent\uFF08\u5B83\u7684\u5DE5\u5177\u767D\u540D\u5355\u548C maxTurns \u751F\u6548\uFF09").option("--worktree", "\u5728\u4E00\u4E2A\u65B0\u5EFA\u7684 git worktree\uFF08\u65B0\u5206\u652F\uFF09\u91CC\u8DD1\u8FD9\u4E00\u6B21\uFF0C\u9000\u51FA\u65F6\u95EE\u662F\u5426\u5220\u9664").option("--json", "\u4EE5 JSON \u8F93\u51FA\uFF08stdout \u6070\u597D\u4E00\u4E2A\u6587\u6863\uFF09\uFF0C\u7ED9 CI \u7528").option(
+    "--output-format <fmt>",
+    `stdout \u7684\u683C\u5F0F\uFF08${HEADLESS_OUTPUT_FORMATS2.join(" / ")}\uFF09\u3002--json \u662F json \u7684\u522B\u540D`
+  ).option(
+    "--input-format <fmt>",
+    `stdin \u7684\u683C\u5F0F\uFF08${HEADLESS_INPUT_FORMATS2.join(" / ")}\uFF09\u3002stream-json \u8FDB\u957F\u9A7B\u6A21\u5F0F`
+  ).option(
+    "--permission-prompt-tool <program>",
+    "\u628A\u6BCF\u4E00\u6B21\u9700\u8981\u786E\u8BA4\u7684\u64CD\u4F5C\u4EA4\u7ED9\u8FD9\u4E2A\u5916\u90E8\u7A0B\u5E8F\u88C1\u51B3\uFF08\u7B49\u540C\u4E8E\u5B8C\u5168\u4FE1\u4EFB\u5B83\uFF09"
+  ).option("--max-turns <n>", "\u672C\u6B21\u8C03\u7528\u6700\u591A\u51E0\u8F6E\u5DE5\u5177\u5FAA\u73AF\uFF0C\u538B\u8FC7\u914D\u7F6E\u91CC\u7684 maxTurns").option("--max-budget-usd <x>", "\u672C\u6B21\u8C03\u7528\u82B1\u8D85\u8FD9\u4E2A\u91D1\u989D\u5C31\u505C\uFF08\u4E0E\u8DE8\u4F1A\u8BDD\u9884\u7B97\u53E0\u52A0\uFF09").option("--no-stream", "\u4E0D\u6D41\u5F0F\u8F93\u51FA\uFF0C\u7B49\u8DD1\u5B8C\u4E00\u6B21\u6027\u6253\u5370").option("-v, --verbose", "\u6253\u5370\u5168\u90E8\u542F\u52A8\u8BCA\u65AD\uFF08\u9ED8\u8BA4\u53EA\u6253\u975E OK \u7684\uFF09").option("-V, --version", "\u6253\u5370\u7248\u672C\u3001Node\u3001\u5E73\u53F0\u4E0E\u5B89\u88C5\u65B9\u5F0F").action(async (query, opts) => {
+    if (opts.version === true) {
+      log7(describeVersion(selfPackage().name));
+      return;
+    }
+    applyRunFlags(opts);
+    assertResumeFlagsExclusive(opts);
+    const resumeArg = parseResumeArg(opts.resume);
+    const formats = resolveHeadlessFormats(opts);
+    if (formats.input === "stream-json") {
+      if (opts.continue === true || resumeArg.kind !== "off") {
+        throw new CliError(
+          "--continue / --resume \u4E0D\u80FD\u548C --input-format stream-json \u4E00\u8D77\u7528",
+          EXIT_CODES.FAILURE,
+          "\u957F\u9A7B\u6A21\u5F0F\u4E0B\u8981\u6062\u590D\u54EA\u6BB5\u4F1A\u8BDD\u7531\u5BBF\u4E3B\u5728 init \u5E27\u7684 sessionId \u91CC\u6307\u5B9A"
+        );
+      }
+      if (opts.worktree === true) {
+        throw new CliError(
+          "--worktree \u4E0D\u80FD\u548C --input-format stream-json \u4E00\u8D77\u7528",
+          EXIT_CODES.FAILURE,
+          "\u957F\u9A7B\u6A21\u5F0F\u4E0B stdout \u662F\u534F\u8BAE\u901A\u9053\uFF0Cworktree \u7684\u63D0\u793A\u548C\u8BE2\u95EE\u6CA1\u6709\u843D\u70B9\uFF1B\u5BBF\u4E3B\u53EF\u4EE5\u81EA\u5DF1 git worktree add \u518D\u7528\u90A3\u4E2A\u76EE\u5F55\u5F53 cwd \u542F\u52A8"
+        );
+      }
+      if (opts.permissionPromptTool !== void 0) {
+        throw new CliError(
+          "--permission-prompt-tool \u4E0D\u80FD\u548C --input-format stream-json \u4E00\u8D77\u7528",
+          EXIT_CODES.FAILURE,
+          "\u957F\u9A7B\u6A21\u5F0F\u4E0B\u5BA1\u6279\u5DF2\u7ECF\u662F\u6D41\u91CC\u7684 approval-request \u5E27\uFF0C\u4F60\u76F4\u63A5\u7B54\u5C31\u884C \u2014\u2014 \u90A3\u6761\u8DEF\u66F4\u5E72\u51C0\uFF08\u4E0D\u7528\u4E3A\u6BCF\u6B21\u5BA1\u6279\u8D77\u4E00\u4E2A\u5B50\u8FDB\u7A0B\uFF0C\u4E5F\u4E0D\u7528\u7F16\u89E3\u7801\uFF09"
+        );
+      }
+      if (!hasCredentials()) {
+        throw new CliError(
+          "\u6CA1\u6709\u914D\u7F6E\u6A21\u578B\u51ED\u636E\uFF0C\u957F\u9A7B\u6A21\u5F0F\u8D77\u4E0D\u6765",
+          EXIT_CODES.FAILURE,
+          "\u5148\u8FD0\u884C epoch model \u914D\u7F6E provider \u548C API key"
+        );
+      }
+      process.exitCode = await runStreamJsonSession(opts);
+      return;
+    }
+    const carried = resumeArg.kind === "pick" ? resumeArg.query : void 0;
+    const prompt = composePrompt(query ?? carried, await readStdin());
+    if (!hasCredentials()) {
+      log7("\u{1F44B} \u6B22\u8FCE\u4F7F\u7528 epoch-agent\uFF01\n\n\u8FD0\u884C epoch model \u914D\u7F6E\u6A21\u578B\u548C API key \u5373\u53EF\u5F00\u59CB\u5BF9\u8BDD\u3002");
+      return;
+    }
+    const resumeId = await resolveResumeTarget(opts, resumeArg);
+    const dispatch = async () => {
+      if (!prompt && (opts.image ?? []).length === 0) return launchTui(resumeId);
+      return runOnce(prompt, opts, resumeId);
+    };
+    if (opts.worktree !== true) return dispatch();
+    await inWorktree(!isNonInteractive8() && formats.output === "text", dispatch);
+  });
+}
+async function inWorktree(interactive, body) {
+  const session = await createWorktree();
+  process.stderr.write(worktreeBanner(session));
+  process.chdir(session.path);
+  try {
+    await body();
+  } finally {
+    await finishWorktree(session, { interactive });
+  }
+}
+async function resolveResumeTarget(opts, resumeArg) {
+  if (opts.continue === true) {
+    const latest = latestSessionIdForProject();
+    if (!latest) {
+      process.stderr.write("\u672C\u9879\u76EE\u8FD8\u6CA1\u6709\u5386\u53F2\u4F1A\u8BDD\uFF0C\u5F00\u59CB\u4E00\u6BB5\u65B0\u7684\u3002\n");
+    }
+    return latest;
+  }
+  if (resumeArg.kind === "id") {
+    const resolved = resolveSessionId(resumeArg.id);
+    if (!resolved.ok) {
+      throw new CliError(
+        resolved.error,
+        EXIT_CODES.FAILURE,
+        // `-r` 的值是纯十六进制的一句话时会走到这儿（见 looksLikeSessionId）
+        '\u5982\u679C\u90A3\u4E0D\u662F id \u800C\u662F\u8981\u53D1\u7684\u6D88\u606F\uFF0C\u5199\u6210 epoch --resume "\u6D88\u606F" \u4E4B\u5916\u7684\u5F62\u5F0F\uFF1Aepoch -r -- "\u6D88\u606F" \u4F1A\u628A\u5B83\u5F53\u4F4D\u7F6E\u53C2\u6570\uFF0C\u6216\u5148 epoch sessions list \u67E5 id'
+      );
+    }
+    return resolved.id;
+  }
+  if (resumeArg.kind === "pick") return pickSessionId();
+  return void 0;
+}
+function resolveTuiEntry(baseDir, exists = existsSync6) {
+  return [
+    join5(baseDir, "tui-entry.js"),
+    join5(baseDir, "tui-entry.ts"),
+    join5(baseDir, "..", "tui-entry.js"),
+    join5(baseDir, "..", "tui-entry.ts")
+  ].find(exists);
+}
+async function launchTui(resumeId) {
+  const target = resolveTuiEntry(dirname3(fileURLToPath3(import.meta.url)));
+  if (!target) {
+    process.stderr.write("\u542F\u52A8\u5931\u8D25\uFF1A\u627E\u4E0D\u5230 TUI \u5165\u53E3 tui-entry\uFF0C\u8BF7\u5148\u8FD0\u884C pnpm build\n");
+    process.exitCode = EXIT_CODES.FAILURE;
+    return;
+  }
+  const isSource = target.endsWith(".ts");
+  const cmd = process.execPath;
+  const args = isSource ? ["--import", "tsx", target] : [target];
+  const { spawn: spawn3 } = await import("child_process");
+  const child = spawn3(cmd, args, {
+    stdio: "inherit",
+    env: { ...process.env, ...resumeId ? { EPOCH_RESUME: resumeId } : {} }
+  });
+  await new Promise((done) => {
+    child.on("error", (err2) => {
+      process.stderr.write(`TUI \u542F\u52A8\u5931\u8D25: ${err2.message}
+`);
+      process.exitCode = EXIT_CODES.FAILURE;
+      done();
+    });
+    child.on("exit", (code, signal) => {
+      process.exitCode = signal ? EXIT_CODES.FAILURE : code ?? EXIT_CODES.SUCCESS;
+      done();
+    });
+  });
+}
+
+// src/commands/schedule.ts
+import { t as t11 } from "@epoch-agent/infra";
+
+// src/schedule/add.ts
+import {
+  SCHEDULE_DEFAULTS,
+  validateSchedule
+} from "@epoch-agent/core";
+import { automationWorkDir, t as t6 } from "@epoch-agent/infra";
+import {
+  isOperationType as isOperationType2,
+  isPermissionLevel as isPermissionLevel3,
+  OPERATION_TYPES as OPERATION_TYPES4,
+  PERMISSION_LEVELS as PERMISSION_LEVELS4,
+  SCHEDULE_INTERVAL_MINUTES
+} from "@epoch-agent/protocol";
+
+// src/schedule/labels.ts
+import { t as t4 } from "@epoch-agent/infra";
+var ISSUE_KEYS = {
+  "name-empty": "schedule.issue.name_empty",
+  "prompt-empty": "schedule.issue.prompt_empty",
+  "permission-unknown": "schedule.issue.permission_unknown",
+  "work-dir-missing": "schedule.issue.work_dir_missing",
+  "budget-missing": "schedule.issue.budget_missing",
+  "max-turns-invalid": "schedule.issue.max_turns_invalid",
+  "timeout-invalid": "schedule.issue.timeout_invalid",
+  "trigger-time-invalid": "schedule.issue.trigger_time_invalid",
+  "trigger-weekdays-empty": "schedule.issue.trigger_weekdays_empty",
+  "trigger-days-invalid": "schedule.issue.trigger_days_invalid",
+  "trigger-interval-invalid": "schedule.issue.trigger_interval_invalid",
+  "trigger-once-date-invalid": "schedule.issue.trigger_once_date_invalid",
+  "trigger-once-past": "schedule.issue.trigger_once_past",
+  "date-range-invalid": "schedule.issue.date_range_invalid",
+  "date-range-on-once": "schedule.issue.date_range_on_once",
+  "rule-invalid": "schedule.issue.rule_invalid",
+  "bypass-needs-workdir": "schedule.issue.bypass_needs_workdir",
+  "bypass-workdir-too-broad": "schedule.issue.bypass_workdir_too_broad",
+  "bypass-needs-limits": "schedule.issue.bypass_needs_limits",
+  "bypass-not-confirmed": "schedule.issue.bypass_not_confirmed"
+};
+var STATUS_KEYS = {
+  ok: "schedule.status.ok",
+  failed: "schedule.status.failed",
+  denied: "schedule.status.denied",
+  timeout: "schedule.status.timeout",
+  budget: "schedule.status.budget",
+  "skipped-overlap": "schedule.status.skipped_overlap",
+  "skipped-window": "schedule.status.skipped_window",
+  missed: "schedule.status.missed"
+};
+var WEEKDAY_KEYS = {
+  0: "schedule.weekday.sun",
+  1: "schedule.weekday.mon",
+  2: "schedule.weekday.tue",
+  3: "schedule.weekday.wed",
+  4: "schedule.weekday.thu",
+  5: "schedule.weekday.fri",
+  6: "schedule.weekday.sat"
+};
+var DRIFT_KEYS = {
+  "missing-in-os": "schedule.drift.missing_in_os",
+  "orphan-in-os": "schedule.drift.orphan_in_os",
+  "spec-mismatch": "schedule.drift.spec_mismatch",
+  "never-registered": "schedule.drift.never_registered"
+};
+function renderIssues(issues) {
+  return issues.map((i) => `  \xB7 ${t4(ISSUE_KEYS[i.code], { detail: i.detail ?? "" })}`).join("\n");
+}
+function statusLabel(status) {
+  const mark = status === "ok" ? "\u2705" : status === "failed" || status === "denied" ? "\u274C" : "\u26A0\uFE0F";
+  return `${mark} ${t4(STATUS_KEYS[status])}`;
+}
+function driftLabel(kind) {
+  return t4(DRIFT_KEYS[kind]);
+}
+function describeTrigger(trigger) {
+  if (trigger.kind === "interval") {
+    return trigger.everyMinutes < 60 ? t4("schedule.trigger.every_minutes", { n: trigger.everyMinutes }) : t4("schedule.trigger.every_hours", { n: trigger.everyMinutes / 60 });
+  }
+  if (trigger.kind === "once") {
+    return t4("schedule.trigger.once", { date: trigger.date, at: trigger.at });
+  }
+  if (trigger.cycle === "daily") return t4("schedule.trigger.daily", { at: trigger.at });
+  if (trigger.cycle === "weekly") {
+    const days = trigger.weekdays.map((d) => t4(WEEKDAY_KEYS[d])).join("/");
+    return t4("schedule.trigger.weekly", { days, at: trigger.at });
+  }
+  return t4("schedule.trigger.monthly", { days: trigger.days.join("/"), at: trigger.at });
+}
+function permissionLabel(level) {
+  if (level === "plan") return t4("schedule.permission.plan");
+  if (level === "acceptEdits") return t4("schedule.permission.accept_edits");
+  if (level === "bypass") return t4("schedule.permission.bypass");
+  if (level === "auto") return t4("schedule.permission.auto");
+  return t4("schedule.permission.default");
+}
+
+// src/schedule/shared.ts
+import { realpathSync as realpathSync2 } from "fs";
+import {
+  resolveScheduleBackend,
+  ScheduleRegistrar,
+  ScheduleStore
+} from "@epoch-agent/core";
+import { dbPath as dbPath2, t as t5 } from "@epoch-agent/infra";
+var log8 = (msg) => void process.stdout.write(`${msg}
+`);
+var warn2 = (msg) => void process.stderr.write(`${msg}
+`);
+async function openSchedule(homeDir = EPOCH_HOME) {
+  const store = new ScheduleStore(dbPath2(homeDir));
+  const backend = await resolveScheduleBackend();
+  const registrar = new ScheduleRegistrar({ store, backend, homeDir, cli: cliEntry() });
+  return { store, registrar, backend, homeDir, close: () => store.close() };
+}
+function cliEntry() {
+  const raw = process.argv[1] ?? "";
+  let entry = raw;
+  try {
+    entry = realpathSync2(raw);
+  } catch {
+  }
+  const info = getInstallationInfo("@epoch-agent/cli", raw);
+  const form = info.packageManager === "npx" ? "npx" : info.packageManager === "source" ? "source" : "installed";
+  return { execPath: process.execPath, entry, form, execArgv: process.execArgv };
+}
+function mustFind(store, idOrPrefix) {
+  const exact = store.get(idOrPrefix);
+  if (exact) return exact;
+  const hits = store.findByPrefix(idOrPrefix);
+  if (hits.length === 1) return hits[0];
+  if (hits.length === 0) {
+    throw new CliError(
+      t5("schedule.err_not_found", { id: idOrPrefix }),
+      EXIT_CODES.FAILURE,
+      t5("schedule.err_not_found_hint")
+    );
+  }
+  throw new CliError(
+    t5("schedule.err_ambiguous", { id: idOrPrefix }),
+    EXIT_CODES.FAILURE,
+    hits.map((h) => `  ${h.id}  ${h.name}`).join("\n")
+  );
+}
+function reportRegistration(outcome, fatal) {
+  if (outcome.ok) {
+    if (outcome.warnings.includes("source")) warn2(t5("schedule.warn_source_entry"));
+    return;
+  }
+  const message = outcome.reason === "unsupported-platform" ? t5("schedule.err_platform_unsupported") : outcome.reason === "backend-error" ? t5("schedule.err_backend", { detail: outcome.detail }) : outcome.refusal === "npx" ? t5("schedule.err_npx") : t5("schedule.err_no_host_runner");
+  const hint = outcome.reason === "refused" && outcome.refusal === "npx" ? t5("schedule.err_npx_hint") : outcome.reason === "refused" ? t5("schedule.err_no_host_runner_hint") : void 0;
+  if (!fatal) {
+    warn2(message);
+    if (hint) warn2(hint);
+    return;
+  }
+  throw new CliError(message, EXIT_CODES.FAILURE, hint);
+}
+function formatWhen(ms) {
+  if (ms === void 0) return "\u2014";
+  return new Date(ms).toLocaleString();
+}
+
+// src/schedule/add.ts
+var WEEKDAY_CODES = ["SUN", "MON", "TUE", "WED", "THU", "FRI", "SAT"];
+async function runAdd(opts) {
+  const filled = await fillInteractively(opts);
+  const trigger = parseTrigger(filled);
+  const permission = parsePermission(filled.permission);
+  const ctx = await openSchedule();
+  try {
+    const input2 = buildInput(filled, trigger, permission);
+    const validation = validateSchedule({
+      name: input2.name,
+      prompt: input2.prompt,
+      permission,
+      // 工作区留空时它会落到 `~/.epoch/automation/<id>/`，而那个目录要等 id
+      // 才算得出来 —— 校验这一步先用一个必然存在的替身（数据目录本身）。
+      // ⚠️ `bypass` 那一档下**不许**这么替：它的第 1 条硬约束就是「必须绑一个
+      // 工作区」，拿数据目录顶上等于把那条约束绕过去
+      workDir: input2.workDir ?? (permission === "bypass" ? "" : ctx.homeDir),
+      maxTurns: input2.maxTurns ?? SCHEDULE_DEFAULTS.maxTurns,
+      maxBudgetUsd: input2.maxBudgetUsd,
+      timeoutMs: input2.timeoutMs ?? SCHEDULE_DEFAULTS.timeoutMs,
+      trigger,
+      ...input2.startDate !== void 0 ? { startDate: input2.startDate } : {},
+      ...input2.endDate !== void 0 ? { endDate: input2.endDate } : {},
+      allowRules: input2.allowRules ?? [],
+      bypassAcknowledged: filled.iUnderstandBypass === true,
+      homeDir: ctx.homeDir
+    });
+    if (validation.issues.length > 0) {
+      throw new CliError(
+        t6("schedule.err_invalid"),
+        EXIT_CODES.FAILURE,
+        renderIssues(validation.issues)
+      );
+    }
+    for (const shadow of validation.shadows) warn2(`\u26A0 ${shadow.message}`);
+    const def = createWithWorkDir(ctx.store, input2, ctx.homeDir);
+    const withDefaults = applyDefaultAllowlist(ctx.store, def, filled);
+    const outcome = await registerOrRollback(
+      ctx.store,
+      withDefaults,
+      (d) => ctx.registrar.register(d)
+    );
+    reportRegistration(outcome, true);
+    printSummary(ctx.store.get(withDefaults.id) ?? withDefaults);
+  } finally {
+    ctx.close();
+  }
+}
+async function registerOrRollback(store, def, register) {
+  const outcome = await register(def);
+  if (!outcome.ok) store.remove(def.id);
+  return outcome;
+}
+async function fillInteractively(opts) {
+  const hasTrigger = Boolean(opts.daily ?? opts.weekly ?? opts.monthly ?? opts.every ?? opts.once);
+  const missing = !opts.name || !opts.prompt || !hasTrigger || !opts.budget;
+  if (!missing) return opts;
+  if (!process.stdin.isTTY || !process.stdout.isTTY) {
+    throw new CliError(
+      t6("schedule.err_missing_flags"),
+      EXIT_CODES.FAILURE,
+      t6("schedule.err_missing_flags_hint")
+    );
+  }
+  const { input: input2, select: select2 } = await import("@inquirer/prompts");
+  const next = { ...opts };
+  next.name ||= await input2({ message: t6("schedule.ask_name") });
+  next.prompt ||= await input2({ message: t6("schedule.ask_prompt") });
+  if (!hasTrigger) {
+    const at = await input2({ message: t6("schedule.ask_at"), default: "09:00" });
+    next.daily = at;
+  }
+  next.budget ||= await input2({ message: t6("schedule.ask_budget"), default: "0.50" });
+  next.permission ||= await select2({
+    message: t6("schedule.ask_permission"),
+    choices: [
+      { name: t6("schedule.permission.default"), value: "default" },
+      { name: t6("schedule.permission.plan"), value: "plan" },
+      { name: t6("schedule.permission.accept_edits"), value: "acceptEdits" }
+    ]
+  });
+  return next;
+}
+function parseTrigger(opts) {
+  const given = [opts.daily, opts.weekly, opts.monthly, opts.every, opts.once].filter(
+    (v) => v !== void 0
+  );
+  if (given.length === 0) throw new CliError(t6("schedule.err_no_trigger"), EXIT_CODES.FAILURE);
+  if (given.length > 1) throw new CliError(t6("schedule.err_many_triggers"), EXIT_CODES.FAILURE);
+  if (opts.daily !== void 0) return { kind: "cron", cycle: "daily", at: opts.daily };
+  if (opts.weekly !== void 0) {
+    return {
+      kind: "cron",
+      cycle: "weekly",
+      at: requireAt(opts),
+      weekdays: opts.weekly.split(",").map(parseWeekday)
+    };
+  }
+  if (opts.monthly !== void 0) {
+    return {
+      kind: "cron",
+      cycle: "monthly",
+      at: requireAt(opts),
+      days: opts.monthly.split(",").map((d) => Number(d.trim()))
+    };
+  }
+  if (opts.once !== void 0) {
+    return { kind: "once", date: opts.once, at: requireAt(opts) };
+  }
+  return { kind: "interval", everyMinutes: parseEvery(opts.every) };
+}
+function requireAt(opts) {
+  if (!opts.at) throw new CliError(t6("schedule.err_at_required"), EXIT_CODES.FAILURE);
+  return opts.at;
+}
+function parseWeekday(raw) {
+  const idx = WEEKDAY_CODES.indexOf(raw.trim().toUpperCase());
+  if (idx < 0) {
+    throw new CliError(
+      t6("schedule.err_weekday", { value: raw }),
+      EXIT_CODES.FAILURE,
+      WEEKDAY_CODES.join(",")
+    );
+  }
+  return idx;
+}
+function parseEvery(raw) {
+  const m = /^(\d+)\s*([mh])$/i.exec(raw.trim());
+  const minutes = m ? Number(m[1]) * (m[2]?.toLowerCase() === "h" ? 60 : 1) : Number.NaN;
+  if (!SCHEDULE_INTERVAL_MINUTES.includes(minutes)) {
+    throw new CliError(
+      t6("schedule.err_every", { value: raw }),
+      EXIT_CODES.FAILURE,
+      t6("schedule.err_every_hint", {
+        values: SCHEDULE_INTERVAL_MINUTES.map((n) => n < 60 ? `${n}m` : `${n / 60}h`).join(" / ")
+      })
+    );
+  }
+  return minutes;
+}
+function parsePermission(raw) {
+  if (raw === void 0) return "default";
+  if (!isPermissionLevel3(raw)) {
+    throw new CliError(
+      t6("schedule.err_permission", { value: raw }),
+      EXIT_CODES.FAILURE,
+      PERMISSION_LEVELS4.join(" / ")
+    );
+  }
+  return raw;
+}
+function parseOperations(raw) {
+  const out2 = [];
+  for (const value of raw ?? []) {
+    if (!isOperationType2(value)) {
+      throw new CliError(
+        t6("schedule.err_operation", { value }),
+        EXIT_CODES.FAILURE,
+        OPERATION_TYPES4.join(" / ")
+      );
+    }
+    out2.push(value);
+  }
+  return out2;
+}
+function buildInput(opts, trigger, permission) {
+  const budget = Number(opts.budget);
+  if (!Number.isFinite(budget) || budget <= 0) {
+    throw new CliError(
+      t6("schedule.err_budget", { value: opts.budget ?? "" }),
+      EXIT_CODES.FAILURE,
+      t6("schedule.err_budget_hint")
+    );
+  }
+  return {
+    name: opts.name ?? "",
+    prompt: opts.prompt ?? "",
+    ...opts.workdir ? { workDir: opts.workdir } : {},
+    ...opts.model ? { model: opts.model } : {},
+    permission,
+    ...opts.allowTool ? { allowTools: opts.allowTool } : {},
+    allowOperations: parseOperations(opts.allowOperation),
+    ...opts.allowRule ? { allowRules: opts.allowRule } : {},
+    ...opts.maxTurns ? { maxTurns: Number(opts.maxTurns) } : {},
+    maxBudgetUsd: budget,
+    ...opts.timeout ? { timeoutMs: Number(opts.timeout) * 6e4 } : {},
+    trigger,
+    ...opts.start ? { startDate: opts.start } : {},
+    ...opts.end ? { endDate: opts.end } : {},
+    ...opts.disabled ? { enabled: false } : {}
+  };
+}
+function createWithWorkDir(store, input2, homeDir) {
+  const created = store.create({ ...input2, workDir: input2.workDir ?? homeDir });
+  if (input2.workDir) return created;
+  const dir = automationWorkDir(created.id, homeDir);
+  return store.update(created.id, { workDir: dir }) ?? created;
+}
+function applyDefaultAllowlist(store, def, opts) {
+  const userGave = (opts.allowTool?.length ?? 0) > 0 || (opts.allowOperation?.length ?? 0) > 0 || (opts.allowRule?.length ?? 0) > 0;
+  if (userGave || def.permission === "plan" || def.permission === "bypass") return def;
+  return store.update(def.id, {
+    allowOperations: ["file_read"],
+    allowRules: [`file_write(${def.workDir}/**)`]
+  }) ?? def;
+}
+function printSummary(def) {
+  log8(t6("schedule.created", { id: def.id, name: def.name }));
+  log8("");
+  log8(t6("schedule.created_next", { id: def.id.slice(0, 12) }));
+}
+
+// src/schedule/doctor.ts
+import { diagnoseSchedules, pruneSchedules, repairSchedules } from "@epoch-agent/core";
+import { t as t7 } from "@epoch-agent/infra";
+async function runDoctor(opts) {
+  const ctx = await openSchedule();
+  try {
+    const deps = { store: ctx.store, backend: ctx.backend, registrar: ctx.registrar };
+    const report = await diagnoseSchedules(deps);
+    if (report.unsupported) {
+      warn2(t7("schedule.doctor_unsupported"));
+      return;
+    }
+    if (report.drifts.length === 0) {
+      log8(t7("schedule.doctor_clean", { n: report.checked }));
+      return;
+    }
+    log8(t7("schedule.doctor_found", { n: report.drifts.length }));
+    for (const drift of report.drifts) {
+      log8(
+        `  \xB7 ${driftLabel(drift.kind)}  ${drift.name ?? drift.scheduleId ?? ""} [${drift.osTaskId || "\u2014"}]${drift.detail ? `
+      ${drift.detail}` : ""}`
+      );
+    }
+    if (opts.repair !== true && opts.prune !== true) {
+      log8("");
+      log8(t7("schedule.doctor_hint"));
+      return;
+    }
+    if (opts.repair === true) {
+      for (const outcome of await repairSchedules(report.drifts, deps)) {
+        const label = outcome.drift.name ?? outcome.drift.scheduleId ?? "";
+        if (outcome.ok) log8(t7("schedule.doctor_repaired", { name: label }));
+        else
+          warn2(t7("schedule.doctor_repair_failed", { name: label, detail: outcome.detail ?? "" }));
+      }
+    }
+    if (opts.prune === true) {
+      for (const outcome of await pruneSchedules(report.drifts, deps)) {
+        if (outcome.ok) log8(t7("schedule.doctor_pruned", { id: outcome.drift.osTaskId }));
+        else {
+          warn2(
+            t7("schedule.doctor_prune_failed", {
+              id: outcome.drift.osTaskId,
+              detail: outcome.detail ?? ""
+            })
+          );
+          process.exitCode = EXIT_CODES.FAILURE;
+        }
+      }
+    }
+  } finally {
+    ctx.close();
+  }
+}
+
+// src/schedule/manage.ts
+import { automationLogsDir, t as t8 } from "@epoch-agent/infra";
+async function runSetEnabled(idOrPrefix, enabled) {
+  const ctx = await openSchedule();
+  try {
+    const def = mustFind(ctx.store, idOrPrefix);
+    const outcome = await ctx.registrar.setEnabled(def, enabled);
+    reportRegistration(outcome, false);
+    log8(
+      enabled ? t8("schedule.enabled_done", { name: def.name }) : t8("schedule.disabled_done", { name: def.name })
+    );
+  } finally {
+    ctx.close();
+  }
+}
+async function runRemove(idOrPrefix) {
+  const ctx = await openSchedule();
+  try {
+    const def = mustFind(ctx.store, idOrPrefix);
+    if (def.osTaskId) reportRegistration(await ctx.registrar.unregister(def), false);
+    ctx.store.remove(def.id);
+    log8(t8("schedule.removed", { name: def.name }));
+    log8(t8("schedule.removed_logs_kept", { dir: automationLogsDir(def.id, ctx.homeDir) }));
+  } finally {
+    ctx.close();
+  }
+}
+
+// src/schedule/run.ts
+import { t as t9 } from "@epoch-agent/infra";
+import { fireSchedule } from "@epoch-agent/runtime";
+async function runFire(scheduleId, homeDir) {
+  const home = homeDir ?? EPOCH_HOME;
+  const ctx = await openSchedule(home);
+  let result;
+  try {
+    result = await fireSchedule({ scheduleId, homeDir: home, registrar: ctx.registrar });
+  } finally {
+    ctx.close();
+  }
+  if (result.missing) {
+    warn2(t9("schedule.fire_missing", { id: scheduleId }));
+  } else if (result.disabled) {
+    warn2(t9("schedule.fire_disabled", { id: scheduleId }));
+  } else {
+    warn2(`${statusLabel(result.status)}${result.detail ? `  ${result.detail}` : ""}`);
+  }
+  process.exitCode = result.exitCode;
+}
+async function runManual(idOrPrefix, opts) {
+  const ctx = await openSchedule();
+  try {
+    const def = mustFind(ctx.store, idOrPrefix);
+    log8(t9("schedule.run_start", { name: def.name }));
+    const result = await fireSchedule({
+      scheduleId: def.id,
+      homeDir: ctx.homeDir,
+      manual: true,
+      registrar: ctx.registrar
+    });
+    log8(`${statusLabel(result.status)}${result.detail ? `  ${result.detail}` : ""}`);
+    const pending = result.run?.pendingApprovals ?? [];
+    if (pending.length === 0) {
+      process.exitCode = result.exitCode;
+      return;
+    }
+    printPending(pending);
+    if (opts.fix === true) {
+      const added = applyFix(ctx.store, def.id, pending);
+      log8(added.length > 0 ? t9("schedule.fix_done", { n: added.length }) : t9("schedule.fix_none"));
+      return;
+    }
+    log8(t9("schedule.fix_hint", { id: def.id.slice(0, 12) }));
+    process.exitCode = result.exitCode;
+  } finally {
+    ctx.close();
+  }
+}
+function printPending(pending) {
+  log8("");
+  log8(t9("schedule.pending_header", { n: pending.length }));
+  for (const item of pending) {
+    log8(`  \xB7 ${t9("schedule.pending_line", { tool: item.toolName, target: item.target })}`);
+    if (item.suggestedRule) log8(`    \u2192 ${item.suggestedRule}`);
+  }
+}
+function applyFix(store, scheduleId, pending) {
+  const def = store.get(scheduleId);
+  if (!def) return [];
+  const existing = new Set(def.allowRules);
+  const added = [];
+  for (const item of pending) {
+    if (!item.suggestedRule || existing.has(item.suggestedRule)) continue;
+    existing.add(item.suggestedRule);
+    added.push(item.suggestedRule);
+  }
+  if (added.length > 0) store.update(scheduleId, { allowRules: [...existing] });
+  return added;
+}
+
+// src/schedule/view.ts
+import { nextRunAt, readRecording } from "@epoch-agent/core";
+import { t as t10 } from "@epoch-agent/infra";
+async function runList() {
+  const ctx = await openSchedule();
+  try {
+    const defs = ctx.store.list();
+    if (defs.length === 0) {
+      log8(t10("schedule.list_empty"));
+      log8(t10("schedule.list_empty_hint"));
+      return;
+    }
+    log8(t10("schedule.list_header"));
+    for (const def of defs) {
+      const next = def.enabled ? formatWhen(nextRunAt(def.trigger, Date.now(), def.startDate, def.endDate) ?? void 0) : t10("schedule.disabled_mark");
+      const danger = def.permission === "bypass" ? " \u{1F534}" : "";
+      log8(
+        `  ${def.id.slice(0, 12)}  ${def.name}${danger}
+      ${describeTrigger(def.trigger)}  \xB7  ${t10("schedule.col_next")} ${next}  \xB7  ${t10("schedule.col_last")} ${def.lastStatus ? statusLabel(def.lastStatus) : "\u2014"}  \xB7  ${permissionLabel(def.permission)}`
+      );
+    }
+  } finally {
+    ctx.close();
+  }
+}
+async function runShow(idOrPrefix) {
+  const ctx = await openSchedule();
+  try {
+    const def = mustFind(ctx.store, idOrPrefix);
+    log8(`${def.name}  (${def.id})`);
+    log8(`  ${t10("schedule.field_enabled")}: ${def.enabled ? t10("schedule.yes") : t10("schedule.no")}`);
+    log8(`  ${t10("schedule.field_trigger")}: ${describeTrigger(def.trigger)}`);
+    if (def.startDate ?? def.endDate) {
+      log8(`  ${t10("schedule.field_window")}: ${def.startDate ?? "\u2014"} .. ${def.endDate ?? "\u2014"}`);
+    }
+    log8(
+      `  ${t10("schedule.field_next")}: ${formatWhen(
+        nextRunAt(def.trigger, Date.now(), def.startDate, def.endDate) ?? void 0
+      )}`
+    );
+    log8(`  ${t10("schedule.field_workdir")}: ${def.workDir}`);
+    if (def.model) log8(`  ${t10("schedule.field_model")}: ${def.model}`);
+    log8(`  ${t10("schedule.field_permission")}: ${permissionLabel(def.permission)}`);
+    log8(
+      `  ${t10("schedule.field_limits")}: ` + t10("schedule.limits_value", {
+        turns: def.maxTurns,
+        budget: def.maxBudgetUsd.toFixed(2),
+        minutes: Math.round(def.timeoutMs / 6e4)
+      })
+    );
+    log8(`  ${t10("schedule.field_backend")}: ${def.osBackend}  ${def.osTaskId || "\u2014"}`);
+    log8(`  ${t10("schedule.field_prompt")}:`);
+    for (const line of def.prompt.split("\n")) log8(`    ${line}`);
+    log8("");
+    printAllowlist(def);
+    log8("");
+    log8(t10("schedule.field_last_run", { when: formatWhen(def.lastRunAt) }));
+  } finally {
+    ctx.close();
+  }
+}
+function printAllowlist(def) {
+  if (def.permission === "bypass") {
+    log8(t10("schedule.allowlist_bypass"));
+    return;
+  }
+  if (def.permission === "plan") {
+    log8(t10("schedule.allowlist_readonly"));
+    return;
+  }
+  const lines = [
+    ...def.allowTools.map((v) => `    ${v}`),
+    ...def.allowOperations.map((v) => `    ${v}`),
+    ...def.allowRules.map((v) => `    ${v}`)
+  ];
+  log8(t10("schedule.allowlist_header"));
+  log8(lines.length > 0 ? lines.join("\n") : `    ${t10("schedule.allowlist_empty")}`);
+  log8(t10("schedule.allowlist_scope_note"));
+}
+async function runLogs(idOrPrefix, limit, tail) {
+  const ctx = await openSchedule();
+  try {
+    const def = mustFind(ctx.store, idOrPrefix);
+    const runs = ctx.store.listRuns(def.id, limit);
+    if (runs.length === 0) {
+      log8(t10("schedule.logs_empty"));
+      return;
+    }
+    for (const run of runs) printRun(run);
+    if (tail) printRecording(runs[0]);
+  } finally {
+    ctx.close();
+  }
+}
+function printRun(run) {
+  log8(
+    `  ${formatWhen(run.startedAt)}  ${statusLabel(run.status)}  ` + t10("schedule.run_meta", {
+      turns: run.turns,
+      cost: run.costUsd.toFixed(4),
+      manual: run.manual ? t10("schedule.run_manual") : ""
+    })
+  );
+  if (run.reason) log8(`      ${run.reason}`);
+  for (const pending of run.pendingApprovals) {
+    log8(
+      `      \u26A0 ${t10("schedule.pending_line", { tool: pending.toolName, target: pending.target })}`
+    );
+    if (pending.suggestedRule) {
+      log8(`        ${t10("schedule.pending_fix", { rule: pending.suggestedRule })}`);
+    }
+  }
+}
+function printRecording(run) {
+  if (!run.logPath) return;
+  log8("");
+  log8(t10("schedule.logs_recording", { path: run.logPath }));
+  for (const envelope of readRecording(run.logPath)) {
+    const event = envelope.event;
+    if (event.type === "text-delta" && event.text) process.stdout.write(event.text);
+    else if (event.type === "error" && event.message) log8(`
+[error] ${event.message}`);
+  }
+  process.stdout.write("\n");
+}
+
+// src/commands/schedule.ts
+var DEFAULT_LOG_LIMIT = 10;
+function registerScheduleCommand(program2) {
+  const cmd = program2.command("schedule").description(t11("cli.schedule.summary"));
+  cmd.command("add").description(t11("cli.schedule.add")).option("--name <name>", t11("cli.schedule.opt_name")).option("--prompt <text>", t11("cli.schedule.opt_prompt")).option("--daily <HH:mm>", t11("cli.schedule.opt_daily")).option("--weekly <days>", t11("cli.schedule.opt_weekly")).option("--monthly <days>", t11("cli.schedule.opt_monthly")).option("--every <interval>", t11("cli.schedule.opt_every")).option("--once <YYYY-MM-DD>", t11("cli.schedule.opt_once")).option("--at <HH:mm>", t11("cli.schedule.opt_at")).option("--start <YYYY-MM-DD>", t11("cli.schedule.opt_start")).option("--end <YYYY-MM-DD>", t11("cli.schedule.opt_end")).option("--workdir <dir>", t11("cli.schedule.opt_workdir")).option("--model <model>", t11("cli.schedule.opt_model")).option("--permission <level>", t11("cli.schedule.opt_permission")).option("--allow-tool <name>", t11("cli.schedule.opt_allow_tool"), collect3, []).option("--allow-operation <type>", t11("cli.schedule.opt_allow_operation"), collect3, []).option("--allow-rule <rule>", t11("cli.schedule.opt_allow_rule"), collect3, []).option("--max-turns <n>", t11("cli.schedule.opt_max_turns")).option("--budget <usd>", t11("cli.schedule.opt_budget")).option("--timeout <minutes>", t11("cli.schedule.opt_timeout")).option("--disabled", t11("cli.schedule.opt_disabled")).option("--i-understand-bypass", t11("cli.schedule.opt_bypass_ack")).action((opts) => runAdd(opts));
+  cmd.command("list", { isDefault: true }).description(t11("cli.schedule.list")).action(() => runList());
+  cmd.command("show").description(t11("cli.schedule.show")).argument("<id>", t11("cli.schedule.arg_id")).action((id) => runShow(id));
+  cmd.command("enable").description(t11("cli.schedule.enable")).argument("<id>", t11("cli.schedule.arg_id")).action((id) => runSetEnabled(id, true));
+  cmd.command("disable").description(t11("cli.schedule.disable")).argument("<id>", t11("cli.schedule.arg_id")).action((id) => runSetEnabled(id, false));
+  cmd.command("rm").alias("remove").description(t11("cli.schedule.rm")).argument("<id>", t11("cli.schedule.arg_id")).action((id) => runRemove(id));
+  cmd.command("run").description(t11("cli.schedule.run")).argument("<id>", t11("cli.schedule.arg_id")).option("--fix", t11("cli.schedule.opt_fix")).action((id, opts) => runManual(id, opts));
+  cmd.command("logs").description(t11("cli.schedule.logs")).argument("<id>", t11("cli.schedule.arg_id")).option("-n, --limit <n>", t11("cli.schedule.opt_limit"), String(DEFAULT_LOG_LIMIT)).option("--tail", t11("cli.schedule.opt_tail")).action(
+    (id, opts) => runLogs(id, Number(opts.limit ?? DEFAULT_LOG_LIMIT), opts.tail === true)
+  );
+  cmd.command("fire").description(t11("cli.schedule.fire")).argument("<id>", t11("cli.schedule.arg_id")).option("--home <dir>", t11("cli.schedule.opt_home")).action((id, opts) => runFire(id, opts.home));
+  cmd.command("doctor").description(t11("cli.schedule.doctor")).option("--repair", t11("cli.schedule.opt_repair")).option("--prune", t11("cli.schedule.opt_prune")).action((opts) => runDoctor(opts));
+}
+function collect3(value, previous) {
+  return [...previous, value];
+}
+
+// src/commands/status.ts
+import { existsSync as existsSync7 } from "fs";
+import { statfs } from "fs/promises";
+import {
+  describeIsolation,
+  getConfigIssues,
+  loadConfig as loadConfig3,
+  SANDBOX_COVERS,
+  SANDBOX_EXCLUDES
+} from "@epoch-agent/core";
+import { confine, resolveProfile, t as t12 } from "@epoch-agent/infra";
+import { hasFailure } from "@epoch-agent/protocol";
+
+// src/statusline.ts
+import { execFile as execFile2 } from "child_process";
+import { sanitizeToolOutput } from "@epoch-agent/core";
+import { shellSpawnArgs } from "@epoch-agent/infra";
+var TIMEOUT_MS2 = 2e3;
+var MAX_WIDTH = 60;
+var MAX_BUFFER = 64 * 1024;
+function formatStatusLine(stdout) {
+  const first = sanitizeToolOutput(stdout).split("\n")[0]?.trim() ?? "";
+  if (!first) return null;
+  return first.length > MAX_WIDTH ? first.slice(0, MAX_WIDTH - 1) + "\u2026" : first;
+}
+function runStatusLineCommand(command, cwd) {
+  const { file, args, options } = shellSpawnArgs(command);
+  return new Promise((settle) => {
+    execFile2(
+      file,
+      args,
+      {
+        ...options,
+        cwd,
+        timeout: TIMEOUT_MS2,
+        maxBuffer: MAX_BUFFER,
+        encoding: "utf-8",
+        // 不弹黑框：Windows 上每 5 秒闪一个控制台窗口是没法用的
+        windowsHide: true
+      },
+      (err2, stdout) => {
+        if (err2) {
+          const killed = err2.killed === true;
+          settle({
+            text: null,
+            error: killed ? `\u8D85\u8FC7 ${TIMEOUT_MS2}ms \u6CA1\u8FD4\u56DE` : err2.message.trim()
+          });
+          return;
+        }
+        settle({ text: formatStatusLine(stdout) });
+      }
+    );
+  });
+}
+async function probeStatusLine(config, cwd) {
+  const command = config.statusLine?.command?.trim();
+  if (!command) return null;
+  const result = await runStatusLineCommand(command, cwd);
+  if (result.text === null) {
+    return { command, ok: false, detail: result.error ?? "\u6CA1\u6709\u8F93\u51FA" };
+  }
+  return { command, ok: true, detail: result.text };
+}
+
+// src/commands/status.ts
+var log9 = (msg) => {
+  process.stdout.write(msg + "\n");
+};
+var STATUS_MARK = {
+  ok: "\u2713",
+  warn: "\u26A0",
+  failed: "\u2717",
+  skipped: "\u25CB"
+};
+function formatBytes(bytes) {
+  const units = ["B", "KB", "MB", "GB", "TB", "PB"];
+  let n = bytes;
+  let i = 0;
+  while (n >= 1e3 && i < units.length - 1) {
+    n /= 1e3;
+    i += 1;
+  }
+  return `${n < 10 && i > 0 ? n.toFixed(1) : Math.round(n)}${units[i]}`;
+}
+async function describeDisk(path = ".") {
+  try {
+    const fs = await statfs(path);
+    return formatBytes(fs.bavail * fs.bsize);
+  } catch {
+    return void 0;
+  }
+}
+function describeConfig() {
+  if (!existsSync7(CONFIG_PATH)) return "\u4E0D\u5B58\u5728";
+  loadConfig3();
+  const n = getConfigIssues().length;
+  return n === 0 ? "\u5B58\u5728" : `\u5B58\u5728\uFF0C\u4F46\u6709 ${n} \u5904\u95EE\u9898\uFF08\u8DD1 epoch doctor \u770B\u662F\u54EA\u4E9B\u5B57\u6BB5\uFF09`;
+}
+async function describeSecretBackend() {
+  try {
+    const { createSecretStore } = await import("@epoch-agent/infra");
+    const store = await createSecretStore();
+    return store.encrypted ? store.detail : `\u26A0 ${store.detail}`;
+  } catch (err2) {
+    return `\u63A2\u6D4B\u5931\u8D25\uFF08${err2 instanceof Error ? err2.message : String(err2)}\uFF09`;
+  }
+}
+function workspaceLines(rt) {
+  const lines = [`  \u9879\u76EE\u6839: ${rt.workspace.root}`];
+  lines.push(
+    rt.trusted ? "  \u4FE1\u4EFB\u72B6\u6001: \u5DF2\u4FE1\u4EFB\uFF08\u9879\u76EE\u6307\u4EE4\u6587\u4EF6\u4F1A\u52A0\u8F7D\uFF09" : "  \u4FE1\u4EFB\u72B6\u6001: \u672A\u4FE1\u4EFB\uFF08EPOCH.md / AGENTS.md / CLAUDE.md \u4E0D\u4F1A\u52A0\u8F7D\uFF0Cepoch trust add \u53EF\u6388\u6743\uFF09"
+  );
+  lines.push(
+    rt.workspace.extra.length === 0 ? "  \u989D\u5916\u76EE\u5F55: \u65E0\uFF08--add-dir \u53EF\u52A0\uFF09" : `  \u989D\u5916\u76EE\u5F55: ${rt.workspace.extra.length} \u4E2A`
+  );
+  for (const dir of rt.workspace.extra) lines.push(`    \xB7 ${dir}`);
+  return lines;
+}
+function sandboxLines(cwd) {
+  const iso = describeIsolation();
+  const lines = [`
+${t12("cli.doctor.sandbox_head")}`];
+  if (iso.backend === "none") {
+    lines.push(`  ${STATUS_MARK.skipped} ${iso.detail}`);
+    lines.push(`  ${STATUS_MARK.warn} ${t12("cli.doctor.sandbox_absent_tools")}`);
+    return lines;
+  }
+  lines.push(
+    `  ${STATUS_MARK.ok} ${t12("cli.doctor.sandbox_backend", { backend: iso.backend, platform: iso.platform })}`
+  );
+  lines.push(`  \xB7 ${t12("cli.doctor.sandbox_code_exec", { detail: iso.detail })}`);
+  const probe = (mode) => confine("/bin/sh", ["-c", "true"], { mode, workspaceRoot: cwd, allowNetwork: true });
+  for (const mode of ["workspace-write", "read-only"]) {
+    const c = probe(mode);
+    if (!c.confined) continue;
+    lines.push(`  \xB7 ${t12("cli.doctor.sandbox_terminal", { mode, enforcement: c.enforcement })}`);
+    if (c.enforcement === "partial") lines.push(`    ${t12("cli.doctor.sandbox_partial_devnull")}`);
+  }
+  const writable = probe("workspace-write");
+  if (writable.confined) {
+    lines.push(`  \xB7 ${t12("cli.doctor.sandbox_writable")}`);
+    for (const dir of writable.writableDirs) lines.push(`    \xB7 ${dir}`);
+  }
+  lines.push(`  \xB7 ${t12("cli.doctor.sandbox_covers", { tools: SANDBOX_COVERS.join(", ") })}`);
+  lines.push(
+    SANDBOX_EXCLUDES.length === 0 ? `  ${STATUS_MARK.ok} ${t12("cli.doctor.sandbox_excludes_none")}` : `  ${STATUS_MARK.warn} ${t12("cli.doctor.sandbox_excludes", { tools: SANDBOX_EXCLUDES.join(", ") })}`
+  );
+  return lines;
+}
+async function statusLineLines(config, cwd) {
+  const probe = await probeStatusLine(config, cwd);
+  if (!probe) return [];
+  return [
+    "\n\u81EA\u5B9A\u4E49\u72B6\u6001\u680F:",
+    `  \u547D\u4EE4: ${probe.command}`,
+    probe.ok ? `  \u2713 \u663E\u793A: ${probe.detail}` : `  \u26A0 \u8DD1\u4E0D\u8D77\u6765\uFF08\u72B6\u6001\u680F\u4F1A\u7559\u7A7A\uFF09: ${probe.detail}`
+  ];
+}
+function registerStatusCommands(program2) {
+  program2.command("status").description("\u663E\u793A\u7CFB\u7EDF\u72B6\u6001").action(async () => {
+    log9(
+      [
+        `\u7248\u672C: ${VERSION}`,
+        `Node: ${process.version} (${process.platform}/${process.arch})`,
+        `\u914D\u7F6E\u76EE\u5F55: ${EPOCH_HOME}`,
+        `Profile: ${resolveProfile()}`,
+        `\u51ED\u8BC1: ${hasCredentials() ? "\u5DF2\u914D\u7F6E" : "\u672A\u914D\u7F6E"}`,
+        `\u51ED\u636E\u5B58\u50A8: ${await describeSecretBackend()}`,
+        `config.yaml: ${describeConfig()}`,
+        `.env: ${existsSync7(ENV_PATH) ? "\u5B58\u5728" : "\u4E0D\u5B58\u5728"}`
+      ].join("\n")
+    );
+  });
+  program2.command("doctor").description("\u8BCA\u65AD\u7CFB\u7EDF\u73AF\u5883").action(async () => {
+    log9(`\u2713 Node.js: ${process.version}`);
+    const avail = await describeDisk();
+    if (avail) log9(`\u2713 \u78C1\u76D8: ${avail} \u53EF\u7528`);
+    log9(`${hasCredentials() ? "\u2713" : "\u25CB"} \u51ED\u8BC1`);
+    const configIssues = existsSync7(CONFIG_PATH) ? (loadConfig3(), getConfigIssues()) : [];
+    const configMark = !existsSync7(CONFIG_PATH) ? "\u25CB" : configIssues.length > 0 ? "\u26A0" : "\u2713";
+    log9(`${configMark} config: ${CONFIG_PATH}`);
+    try {
+      const { buildRuntime: buildRuntime4 } = await import("@epoch-agent/runtime");
+      const rt = await buildRuntime4({ installSignalHandlers: true });
+      log9("\n\u5DE5\u4F5C\u533A:");
+      for (const line of workspaceLines(rt)) log9(line);
+      for (const line of sandboxLines(rt.workspace.root)) log9(line);
+      for (const line of await statusLineLines(rt.config, process.cwd())) log9(line);
+      log9("\n\u6A21\u5757\u81EA\u68C0:");
+      const order = { failed: 0, warn: 1, skipped: 2, ok: 3 };
+      const sorted = [...rt.diagnosticList].sort(
+        (a, b) => (order[a.status] ?? 9) - (order[b.status] ?? 9)
+      );
+      for (const d of sorted) log9(`  ${STATUS_MARK[d.status]} ${d.module}: ${d.detail}`);
+      await rt.dispose();
+      if (hasFailure(rt.diagnosticList)) {
+        const bad = rt.diagnosticList.filter((d) => d.status === "failed").length;
+        log9(`
+\u2717 ${bad} \u4E2A\u6A21\u5757\u8D77\u4E0D\u6765`);
+        process.exitCode = EXIT_CODES.FAILURE;
+      }
+    } catch (err2) {
+      log9(`
+\u2717 \u88C5\u914D\u5931\u8D25: ${err2 instanceof Error ? err2.message : String(err2)}`);
+    }
+  });
+}
+
+// src/commands/trust.ts
+import { existsSync as existsSync8, realpathSync as realpathSync3 } from "fs";
+import { resolve as resolve3 } from "path";
+import { loadConfig as loadConfig4, TrustManager as TrustManager3 } from "@epoch-agent/core";
+import { trustPath as trustPath3 } from "@epoch-agent/infra";
+var log10 = (msg) => process.stdout.write(msg + "\n");
+var warn3 = (msg) => process.stderr.write(msg + "\n");
+var SCOPE_LABEL = {
+  directory: "\u4EC5\u6B64\u76EE\u5F55",
+  "directory-tree": "\u542B\u5B50\u76EE\u5F55"
+};
+var LEVEL_LABEL = {
+  trusted: "\u5DF2\u4FE1\u4EFB",
+  untrusted: "\u5DF2\u62D2\u7EDD",
+  unknown: "\u672A\u51B3\u5B9A"
+};
+function physicalPath(input2) {
+  const abs = resolve3(input2);
+  if (!existsSync8(abs)) return abs;
+  try {
+    return realpathSync3(abs);
+  } catch {
+    return abs;
+  }
+}
+function registerTrustCommand(program2) {
+  const cmd = program2.command("trust").description("\u7BA1\u7406\u5DE5\u4F5C\u533A\u4FE1\u4EFB\uFF08\u54EA\u4E9B\u76EE\u5F55\u53EF\u4EE5\u628A\u81EA\u5DF1\u7684\u9879\u76EE\u6307\u4EE4\u52A0\u8FDB system prompt\uFF09");
+  cmd.command("list", { isDefault: true }).description("\u5217\u51FA\u6240\u6709\u4FE1\u4EFB\u8BB0\u5F55").action(() => withTrust((tm) => printList3(tm)));
+  cmd.command("add").description("\u4FE1\u4EFB\u4E00\u4E2A\u76EE\u5F55").argument("[path]", "\u76EE\u5F55\u8DEF\u5F84\uFF08\u9ED8\u8BA4\u5F53\u524D\u76EE\u5F55\uFF09").option("--tree", "\u8FDE\u540C\u6240\u6709\u5B50\u76EE\u5F55\u4E00\u8D77\u4FE1\u4EFB\uFF08\u542B\u4EE5\u540E\u65B0\u5EFA / clone \u8FDB\u6765\u7684\uFF09").action((path, opts) => {
+    withTrust((tm) => {
+      const dir = physicalPath(path ?? process.cwd());
+      tm.record(dir, "trusted", opts.tree ? "directory-tree" : "directory");
+      log10(
+        `\u2713 \u5DF2\u4FE1\u4EFB ${dir}\uFF08${opts.tree ? SCOPE_LABEL["directory-tree"] : SCOPE_LABEL.directory}\uFF09`
+      );
+    });
+  });
+  cmd.command("deny").description("\u660E\u786E\u62D2\u7EDD\u4E00\u4E2A\u76EE\u5F55\uFF08\u4E4B\u540E\u4E0D\u518D\u8BE2\u95EE\uFF0C\u4E5F\u4E0D\u52A0\u8F7D\u5B83\u7684\u9879\u76EE\u6307\u4EE4\uFF09").argument("[path]", "\u76EE\u5F55\u8DEF\u5F84\uFF08\u9ED8\u8BA4\u5F53\u524D\u76EE\u5F55\uFF09").option("--tree", "\u8FDE\u540C\u6240\u6709\u5B50\u76EE\u5F55\u4E00\u8D77\u62D2\u7EDD").action((path, opts) => {
+    withTrust((tm) => {
+      const dir = physicalPath(path ?? process.cwd());
+      tm.record(dir, "untrusted", opts.tree ? "directory-tree" : "directory");
+      log10(
+        `\u2717 \u5DF2\u62D2\u7EDD ${dir}\uFF08${opts.tree ? SCOPE_LABEL["directory-tree"] : SCOPE_LABEL.directory}\uFF09`
+      );
+    });
+  });
+  cmd.command("remove").alias("rm").description("\u5220\u6389\u4E00\u6761\u8BB0\u5F55\uFF0C\u8BE5\u76EE\u5F55\u56DE\u5230\u300C\u672A\u51B3\u5B9A\u300D").argument("<path>", "\u76EE\u5F55\u8DEF\u5F84").action((path) => {
+    withTrust((tm) => {
+      const dir = physicalPath(path);
+      if (!tm.list().some((r) => resolve3(r.path) === dir)) {
+        warn3(`${dir} \u4E0A\u6CA1\u6709\u4FE1\u4EFB\u8BB0\u5F55\uFF08\u7528 epoch trust \u67E5\u770B\u73B0\u6709\u8BB0\u5F55\uFF09`);
+        process.exit(1);
+      }
+      tm.revoke(dir);
+      log10(`\u5DF2\u5220\u9664 ${dir} \u7684\u8BB0\u5F55\uFF0C\u73B0\u5728\u5224\u5B9A\u4E3A\uFF1A${LEVEL_LABEL[tm.check(dir)]}`);
+    });
+  });
+}
+function printList3(tm) {
+  if (loadConfig4().trust?.enabled === false) {
+    warn3(
+      "\u26A0 config.trust.enabled = false\uFF1A\u95F8\u95E8\u5DF2\u5173\u95ED\uFF0C\u4E0B\u9762\u7684\u8BB0\u5F55\u4E0D\u751F\u6548\uFF0C\u4EFB\u4F55\u76EE\u5F55\u7684\u9879\u76EE\u6307\u4EE4\u90FD\u4F1A\u52A0\u8F7D"
+    );
+  }
+  log10(`\u4FE1\u4EFB\u8BB0\u5F55\uFF08${trustPath3(EPOCH_HOME)}\uFF09`);
+  const records = [...tm.list()].sort((a, b) => a.path.localeCompare(b.path));
+  if (records.length === 0) {
+    log10("  (\u65E0)");
+  }
+  for (const r of records) {
+    const mark = r.level === "trusted" ? "\u2713" : "\u2717";
+    const when = r.decidedAt ? new Date(r.decidedAt).toLocaleString("zh-CN") : "\u672A\u77E5";
+    log10(`  ${mark} ${r.path}  [${SCOPE_LABEL[r.scope]}]  ${when}`);
+  }
+  const cwd = process.cwd();
+  log10(`
+\u5F53\u524D\u76EE\u5F55 ${cwd}
+  \u5224\u5B9A\uFF1A${LEVEL_LABEL[tm.check(cwd)]}`);
+}
+function withTrust(fn) {
+  const tm = new TrustManager3(trustPath3(EPOCH_HOME));
+  for (const err2 of tm.loadErrors) warn3(`\u26A0 ${err2}`);
+  try {
+    fn(tm);
+  } catch (err2) {
+    warn3(`\u9519\u8BEF: ${err2 instanceof Error ? err2.message : String(err2)}`);
+    process.exit(1);
+  }
+}
+
+// src/commands/upgrade.ts
+var log11 = (msg) => process.stdout.write(`${msg}
+`);
+function registerUpgradeCommand(program2) {
+  program2.command("upgrade").description("\u68C0\u67E5\u65B0\u7248\u672C\u5E76\u7ED9\u51FA\u5347\u7EA7\u547D\u4EE4").action(async () => {
+    const self = selfPackage();
+    const info = getInstallationInfo(self.name);
+    log11(`\u5F53\u524D\u7248\u672C: ${self.version}`);
+    log11(`\u5B89\u88C5\u65B9\u5F0F: ${info.packageManager}${info.isGlobal ? "\uFF08\u5168\u5C40\uFF09" : ""} \u2014\u2014 ${info.note}`);
+    const notice = isUpdateCheckDisabled() ? readUpdateNotice() : await refreshUpdateCache({ ttlMs: 0 }).catch(() => null);
+    if (notice) log11(`
+\u6709\u65B0\u7248\u672C: ${notice.current} \u2192 ${notice.latest}`);
+    else log11("\n\u6CA1\u6709\u67E5\u5230\u66F4\u65B0\uFF08\u5DF2\u662F\u6700\u65B0\uFF0C\u6216 registry \u6682\u65F6\u4E0D\u53EF\u8FBE\uFF09");
+    if (info.updateCommand) {
+      log11(`
+\u5347\u7EA7\u8BF7\u81EA\u5DF1\u6267\u884C:
+  ${info.updateCommand}`);
+      log11("\n\uFF08epoch \u4E0D\u4F1A\u81EA\u52A8\u66FF\u4F60\u5347\u7EA7\uFF1A\u5168\u5C40\u76EE\u5F55\u6743\u9650\u3001\u5305\u7BA1\u7406\u5668\u5DEE\u5F02\u3001\u8FDB\u7A0B\u81EA\u5DF1\u8986\u76D6\u81EA\u5DF1\u90FD\u662F\u5751\uFF09");
+    }
+  });
+  program2.command(UPDATE_CHECK_SUBCOMMAND, { hidden: true }).description("\u5185\u90E8\u547D\u4EE4\uFF1A\u540E\u53F0\u5237\u65B0\u7248\u672C\u7F13\u5B58").action(async () => {
+    await refreshUpdateCache().catch(() => null);
+  });
+}
+
+// src/commands/web.ts
+import { t as t13 } from "@epoch-agent/infra";
+import { buildRuntime as buildRuntime3 } from "@epoch-agent/runtime";
+import {
+  createWebServer,
+  decideBinding,
+  DEFAULT_WEB_HOST,
+  DEFAULT_WEB_PORT
+} from "@epoch-agent/server";
+
+// src/commands/web-open.ts
+import { execFile as execFile3 } from "child_process";
+function isBrowsableUrl(url) {
+  try {
+    const { protocol } = new URL(url);
+    return protocol === "http:" || protocol === "https:";
+  } catch {
+    return false;
+  }
+}
+function browserLaunchArgv(url, platform = process.platform) {
+  if (!isBrowsableUrl(url)) return null;
+  if (platform === "darwin") return { command: "open", args: [url] };
+  if (platform === "win32") {
+    return { command: "rundll32.exe", args: ["url.dll,FileProtocolHandler", url] };
+  }
+  return null;
+}
+function openInBrowser(url) {
+  const launch = browserLaunchArgv(url);
+  if (!launch) return false;
+  try {
+    execFile3(launch.command, launch.args, { windowsHide: true }, () => {
+    });
+    return true;
+  } catch {
+    return false;
+  }
+}
+
+// src/commands/web.ts
+var out = (msg) => {
+  process.stdout.write(`${msg}
+`);
+};
+var err = (msg) => {
+  process.stderr.write(`${msg}
+`);
+};
+function registerWebCommand(program2) {
+  program2.command("web").description(t13("cli.web.summary")).option("-p, --port <port>", t13("cli.web.opt_port", { port: DEFAULT_WEB_PORT })).option("--host <host>", t13("cli.web.opt_host", { host: DEFAULT_WEB_HOST })).option("--token <token>", t13("cli.web.opt_token")).option("--no-open", t13("cli.web.opt_no_open")).option("--json", t13("cli.web.opt_json")).action(async (opts, command) => {
+    await runWeb({ ...opts, json: jsonRequested(opts.json, command.parent?.opts()["json"]) });
+  });
+}
+function jsonRequested(own, fromProgram) {
+  return own === true || fromProgram === true;
+}
+async function runWeb(opts) {
+  const port = parsePort2(opts.port);
+  if (port === null) return fail(`\u7AEF\u53E3\u5FC5\u987B\u662F\u6570\u5B57\uFF1A${String(opts.port)}`);
+  const binding = decideBinding({
+    ...opts.host === void 0 ? {} : { host: opts.host },
+    ...port === void 0 ? {} : { port },
+    ...opts.token === void 0 ? {} : { token: opts.token }
+  });
+  if (!binding.ok) return fail(binding.error);
+  if (!await maybePromptForTrust()) process.exit(1);
+  if (!await maybePromptForExternalImports()) process.exit(1);
+  const server = await boot(binding);
+  if (!server) return;
+  const json = opts.json === true;
+  const say = json ? err : out;
+  const lines = announceLines({
+    url: server.url,
+    host: server.host,
+    port: server.port,
+    token: server.token,
+    lanExposed: binding.lanExposed,
+    placeholder: server.webRoot === void 0,
+    json
+  });
+  if (lines.machine) out(lines.machine);
+  for (const line of lines.human) say(line);
+  if (opts.open && !openInBrowser(server.url)) say(BROWSER_FAILED);
+  installShutdown(server, say);
+}
+var MISSING_WEB_ROOT = "\u524D\u7AEF\u4EA7\u7269\u6CA1\u627E\u5230\uFF0C\u672C\u6B21\u53EA\u63D0\u4F9B REST / SSE\uFF0C\u6253\u5F00\u662F\u5360\u4F4D\u9875\u3002\u8DD1\u4E00\u6B21 pnpm build \u518D\u8BD5";
+var BROWSER_FAILED = "  \uFF08\u6CA1\u80FD\u81EA\u52A8\u6253\u5F00\u6D4F\u89C8\u5668\uFF0C\u590D\u5236\u4E0A\u9762\u90A3\u6761\u5730\u5740\u5373\u53EF\uFF09";
+async function boot(binding) {
+  const runtime = await buildRuntime3({
+    // **显式 false，且不许改成 true。** runtime 装的那个处理器是
+    // `dispose(); process.exit(0)`，它注册得比下面 installShutdown() 早，
+    // 于是 Ctrl+C 会在 HTTP 服务关闭、挂起审批 abandon 之前就把进程打死。
+    // web 的收尾顺序是 §4.3 定的：abandon + abort → 断连接 → dispose
+    installSignalHandlers: false,
+    // 浏览器**能**弹审批框，所以这里是交互式的。不显式给的话
+    // `isNonInteractive()` 会去猜 TTY —— 从桌面启动器拉起时没有 TTY，
+    // 于是 `config.headless.allowTools` 这份只该在 CI 里生效的预授权白名单
+    // 会在一个完全能弹框的界面下悄悄生效，审批被跳过而没人知道
+    interactive: true
+  });
+  if (!runtime.session) {
+    await runtime.dispose();
+    fail(`\u542F\u52A8\u5931\u8D25\uFF1Aprovider \u4E0D\u53EF\u7528\uFF0C\u8FD0\u884C epoch model \u914D\u7F6E
+${runtime.diagnostics.join("\n")}`);
+    return null;
+  }
+  const created = await createWebServer({
+    runtime,
+    version: VERSION,
+    // **不再传 `artifactsRoot`**（方案 54 §二）：缺省就是 `runtime.artifactsRoot`，
+    // 也就是引擎这次真的往里写产物的那个目录。以前这里是
+    // `artifactsDir(undefined, runtime.config.homeDir)` —— 算得对，但它是**第二处**
+    // 在算同一个路径，而第二处存在本身就是那个 bug 的形状：嵌入宿主照抄这一行、
+    // 少传一个 homeDir，就是产物 404 而全链路 200。
+    // CLI 自己也走缺省，是为了让宿主走的那条路每天被跑到。
+    //
+    // **不再传 workDir**（决定 18）：工作区变成逐会话绑定之后，「这个服务的工作
+    // 目录」不再是一个能回答问题的事实。服务端问的是 `runtime.workspaces`，
+    // 而引导会话那份绑定就是 `buildRuntime()` 里的 workDir（默认 `process.cwd()`）——
+    // 同一个值，但只有一个真源
+    host: binding.host,
+    port: binding.port,
+    // 用上面那一次判定产出的 token，不让 server 再生成一个 ——
+    // 两个 token 里只有一个会被写进 URL，另一个就是纯粹的困惑来源
+    token: binding.token
+    // **不传 webRoot**：前端产物 2026-08-14 起随 server 一起发，由它自己定位
+    // （`server/src/web-root.ts`）。cli 原来那份探测是同一段逻辑的第二个副本，
+    // 而副本只有 cli 这一条路走得到 —— 嵌入宿主照样是占位页
+  });
+  if (!created.ok) {
+    await runtime.dispose();
+    fail(created.error);
+    return null;
+  }
+  return created.server;
+}
+function announceLines(input2) {
+  const human = [];
+  if (!input2.json) {
+    human.push(`  Epoch Web  http://${input2.host}:${input2.port}`);
+    human.push(`  \u6253\u5F00\u8FD9\u6761\uFF08\u542B\u4E00\u6B21\u6027 token\uFF09\uFF1A
+  ${input2.url}`);
+  }
+  if (input2.lanExposed) {
+    human.push("  \u26A0 \u5DF2\u66B4\u9732\u5230\u56DE\u73AF\u4E4B\u5916\uFF1A\u540C\u7F51\u6BB5\u7684\u4EFB\u4F55\u4EBA\u62FF\u5230\u8FD9\u6761 URL \u90FD\u80FD\u64CD\u4F5C\u4F60\u7684 agent");
+  }
+  if (input2.placeholder) human.push(`  \u26A0 ${MISSING_WEB_ROOT}`);
+  if (!input2.json) return { human };
+  const machine = JSON.stringify({
+    url: input2.url,
+    host: input2.host,
+    port: input2.port,
+    token: input2.token
+  });
+  return { machine, human };
+}
+function installShutdown(server, say) {
+  let shuttingDown = false;
+  const onSignal = () => {
+    if (shuttingDown) process.exit(1);
+    shuttingDown = true;
+    say("\n  \u6536\u5C3E\u4E2D\u2026");
+    server.close().then(
+      () => process.exit(0),
+      () => process.exit(1)
+    );
+  };
+  process.on("SIGINT", onSignal);
+  process.on("SIGTERM", onSignal);
+}
+function parsePort2(raw) {
+  if (raw === void 0) return void 0;
+  if (!/^\d+$/.test(raw.trim())) return null;
+  return Number.parseInt(raw.trim(), 10);
+}
+function fail(message) {
+  err(message);
+  process.exit(1);
+}
+
+// src/index.ts
+var program = new Command();
+program.name("epoch").description("Epoch Agent CLI \u667A\u80FD\u4F53");
+registerConfigCommand(program);
+registerMcpCommand(program);
+registerModelCommand(program);
+registerStatusCommands(program);
+registerSessionsCommand(program);
+registerAgentsCommand(program);
+registerPluginCommand(program);
+registerTrustCommand(program);
+registerScheduleCommand(program);
+registerUpgradeCommand(program);
+registerWebCommand(program);
+registerCompletionCommand(program);
+registerRunCommand(program);
+function isMetaInvocation(argv) {
+  return argv.slice(2).some((a) => ["-h", "--help", "-V", "--version", "help"].includes(a));
+}
+if (!isMetaInvocation(process.argv)) {
+  scheduleUpdateCheck();
+  notifyUpdateOnExit();
+}
+program.parseAsync().catch(reportFatal);
+export {
+  isMetaInvocation
+};
+/**
+ * @license
+ * Copyright 2025 Google LLC
+ * SPDX-License-Identifier: Apache-2.0
+ *
+ * 改编自 gemini-cli `packages/cli/src/utils/installationInfo.ts`，
+ * 按 epoch 的包名与目录形态调整，去掉了自动更新分支（epoch 只提示不代跑）。
+ * 另修掉了原版同样存在的三处 Windows 误判（见下方「Windows 上的坑」）。
+ */