@epoch-agent/cli 0.1.0

package/dist/tui-entry.js

@@ -0,0 +1,1106 @@
+// src/tui-entry.ts
+import { getCapability as getCapability2, loadKeybindings } from "@epoch-agent/core";
+import { keybindingsPath } from "@epoch-agent/infra";
+import { diagnosticToLine } from "@epoch-agent/protocol";
+import { buildRuntime, withModelScope, withToolScope } from "@epoch-agent/runtime";
+import { DEFAULT_KEYBINDINGS, renderApp } from "@epoch-agent/tui";
+
+// src/exit-codes.ts
+var EXIT_CODES = {
+  /** 任务完成 */
+  SUCCESS: 0,
+  /** 通用失败（provider 起不来、运行时报错……） */
+  FAILURE: 1,
+  /**
+   * 非交互下有操作因**缺少预授权**被拒。
+   *
+   * 只在非交互路径出现：交互模式下用户亲手点的「拒绝」是他的决定，
+   * 不算 agent 被卡住，仍然退 0。
+   */
+  PERMISSION_DENIED: 3,
+  /**
+   * 企业托管设置挡下了这次启动（方案 22）。
+   *
+   * 和 FAILURE 分开的理由同上：这不是「epoch 坏了」，是**策略生效了**。
+   * 管理员按机器批量铺开一条 `disableBypassPermissionsMode` 之后，
+   * 要能从退出码上一眼看出哪些机器是被自己的策略拦下的，
+   * 而不是去每台机器上读 stderr 猜。
+   */
+  MANAGED_POLICY: 4,
+  /**
+   * `--max-turns` / `--max-budget-usd` 触顶，任务**没做完**就停了（方案 28）。
+   *
+   * 和 FAILURE 分开：CI 里这不是「epoch 坏了」，是**限额生效了** ——
+   * 该做的是看一眼输出决定要不要加额重跑，而不是去查日志。
+   * 跨会话预算（`budget.maxCostUsd`）触顶**不走这个码**，仍然退 0：
+   * 那是长期配置，每次都退非 0 会让流水线天天红。
+   *
+   * ⚠️ 方案 28 立项时写的是 `4`，那是 2026-08-08 的现状（当时只有 0/1/3）。
+   * `4` 后来被企业托管策略（方案 22）占了，而那个码已经在根 README 和
+   * MDM 文档里对外承诺过，不能挪。所以这里往后排。
+   */
+  LIMIT_EXCEEDED: 5,
+  /**
+   * `--input-format stream-json` 的输入有坏行（方案 28）。
+   *
+   * **不是**用法错误（那是 1）：命令敲对了，是宿主写进 stdin 的那一行不合协议。
+   * 坏行会被报到 stderr 并**跳过**（NDJSON 是按行分帧的，跳一行不会失步），
+   * 进程接着跑；这个码在收尾时才落。
+   */
+  INPUT_ERROR: 6
+};
+
+// src/errors.ts
+var CliError = class extends Error {
+  constructor(message, exitCode = EXIT_CODES.FAILURE, hint) {
+    super(message);
+    this.exitCode = exitCode;
+    this.hint = hint;
+    this.name = "CliError";
+  }
+  exitCode;
+  hint;
+};
+function isCancellation(err) {
+  if (!(err instanceof Error)) return false;
+  return err.name === "ExitPromptError" || err.name === "AbortError" || // AbortController.abort() 默认抛的就是这个
+  err.name === "Error" && err.message === "The operation was aborted.";
+}
+var EXPECTED_FAILURES = {
+  /** 企业托管策略挡下的启动（方案 22 §2.6）。不是故障，是策略生效了 */
+  ManagedPolicyError: EXIT_CODES.MANAGED_POLICY,
+  /** `--agent` 给了不认识的角色名（方案 29 验收 #13）。可用角色都在 message 里 */
+  AgentRoleError: EXIT_CODES.FAILURE,
+  /** `--settings` 指的文件不是合法 JSON（方案 29 验收 #16）。hint 里带行号 */
+  SettingsFileError: EXIT_CODES.FAILURE
+};
+function expectedFailureExitCode(err) {
+  if (!(err instanceof Error)) return void 0;
+  return EXPECTED_FAILURES[err.name];
+}
+function hintOf(err) {
+  const hint = err.hint;
+  return typeof hint === "string" && hint.length > 0 ? hint : void 0;
+}
+function reportFatal(err) {
+  if (isCancellation(err)) {
+    process.stderr.write("\n\u5DF2\u53D6\u6D88\n");
+    process.exit(130);
+  }
+  const exitCode = err instanceof CliError ? err.exitCode : expectedFailureExitCode(err);
+  if (exitCode !== void 0 && err instanceof Error) {
+    process.stderr.write(`\u9519\u8BEF: ${err.message}
+`);
+    const hint = hintOf(err);
+    if (hint) process.stderr.write(`${hint}
+`);
+    process.exit(exitCode);
+  }
+  process.stderr.write(`${err instanceof Error ? err.stack ?? err.message : String(err)}
+`);
+  process.exit(EXIT_CODES.FAILURE);
+}
+
+// src/import-prompt.ts
+import {
+  createImportGate,
+  ImportTrustStore,
+  isNonInteractive as isNonInteractive2,
+  loadConfig as loadConfig2,
+  resolveProjectRoot as resolveProjectRoot2,
+  scanInstructions,
+  setImportGate,
+  TrustManager as TrustManager2
+} from "@epoch-agent/core";
+import { trustedImportsPath, trustPath as trustPath2 } from "@epoch-agent/infra";
+
+// src/trust-prompt.ts
+import {
+  findProjectInstructions,
+  isNonInteractive,
+  loadConfig,
+  resolveProjectRoot,
+  TrustManager
+} from "@epoch-agent/core";
+import { trustPath } from "@epoch-agent/infra";
+function trustPromptTarget(deps) {
+  if (!deps.gateEnabled) return null;
+  if (!deps.interactive) return null;
+  const root = resolveProjectRoot(deps.workDir);
+  if (deps.store.check(root) !== "unknown") return null;
+  const instructionsPath = findProjectInstructions(root, deps.workDir);
+  if (!instructionsPath) return null;
+  return { root, instructionsPath };
+}
+function applyTrustChoice(store, root, choice) {
+  if (choice.kind === "trust") {
+    store.record(root, "trusted", choice.scope);
+    const suffix = choice.scope === "directory-tree" ? "\uFF08\u542B\u5B50\u76EE\u5F55\uFF09" : "";
+    return `\u2713 \u5DF2\u4FE1\u4EFB ${root}${suffix}\uFF0C\u672C\u76EE\u5F55\u7684\u9879\u76EE\u6307\u4EE4\u4F1A\u52A0\u8F7D`;
+  }
+  if (choice.kind === "never") {
+    store.record(root, "untrusted", "directory");
+    return `\u2717 \u5DF2\u8BB0\u4E3A\u4E0D\u4FE1\u4EFB ${root}\uFF0C\u4E4B\u540E\u4E0D\u518D\u8BE2\u95EE\uFF08epoch trust rm ${root} \u53EF\u64A4\u9500\uFF09`;
+  }
+  return "\u672C\u6B21\u4E0D\u52A0\u8F7D\u9879\u76EE\u6307\u4EE4\u3002\u60F3\u8BA9\u5B83\u751F\u6548\u8FD0\u884C epoch trust add";
+}
+function trustPromptMessage(target) {
+  return [
+    `
+\u26A0 \u68C0\u6D4B\u5230\u9879\u76EE\u6307\u4EE4\u6587\u4EF6\uFF1A${target.instructionsPath}`,
+    "  \u5B83\u7531\u4ED3\u5E93\u4F5C\u8005\u7F16\u5199\uFF0C\u4E00\u65E6\u52A0\u8F7D\u5C31\u4F1A\u76F4\u63A5\u8FDB\u5165 system prompt\uFF0C\u7B49\u4E8E\u8BA9\u8FD9\u4E2A\u4ED3\u5E93",
+    "  \u6307\u6325\u4F60\u7684 agent\u3002\u6240\u4EE5\u672A\u7ECF\u786E\u8BA4\u4E0D\u4F1A\u52A0\u8F7D\u3002",
+    ""
+  ].join("\n");
+}
+var CHOICES = [
+  { name: "\u672C\u6B21\u4E0D\u52A0\u8F7D\uFF08\u4E0B\u6B21\u8FD8\u4F1A\u95EE\uFF09", value: { kind: "skip" } },
+  { name: `\u4FE1\u4EFB\u672C\u76EE\u5F55`, value: { kind: "trust", scope: "directory" } },
+  { name: "\u4FE1\u4EFB\u672C\u76EE\u5F55\u53CA\u5176\u6240\u6709\u5B50\u76EE\u5F55", value: { kind: "trust", scope: "directory-tree" } },
+  { name: "\u6C38\u4E0D\u4FE1\u4EFB\u672C\u76EE\u5F55\uFF08\u4E0D\u518D\u8BE2\u95EE\uFF09", value: { kind: "never" } }
+];
+function restoreStdinDefault() {
+  const stdin = process.stdin;
+  if (stdin.isTTY) stdin.setRawMode?.(false);
+  stdin.resume();
+}
+async function maybePromptForTrust(opts = {}) {
+  const config = opts.config ?? loadConfig();
+  const store = opts.store ?? new TrustManager(trustPath(config.homeDir));
+  const print = opts.print ?? ((msg) => process.stdout.write(msg + "\n"));
+  const target = trustPromptTarget({
+    store,
+    interactive: (opts.isInteractive ?? (() => !isNonInteractive()))(),
+    gateEnabled: config.trust?.enabled !== false,
+    workDir: opts.workDir ?? process.cwd()
+  });
+  if (!target) return true;
+  print(trustPromptMessage(target));
+  let choice;
+  try {
+    choice = await (opts.ask ?? askTrustChoice)(target);
+  } finally {
+    (opts.restoreStdin ?? restoreStdinDefault)();
+  }
+  if (choice === null) return false;
+  try {
+    print(applyTrustChoice(store, target.root, choice));
+  } catch (err) {
+    print(`\u26A0 \u4FE1\u4EFB\u8BB0\u5F55\u5199\u5165\u5931\u8D25\uFF0C\u672C\u6B21\u4ECD\u6309\u4E0D\u4FE1\u4EFB\u5904\u7406\uFF1A${err instanceof Error ? err.message : err}`);
+  }
+  return true;
+}
+async function askTrustChoice(_target) {
+  const { select } = await import("@inquirer/prompts");
+  try {
+    return await select({
+      message: "\u662F\u5426\u4FE1\u4EFB\u672C\u76EE\u5F55\uFF1F",
+      choices: [...CHOICES],
+      default: CHOICES[0]?.value
+    });
+  } catch {
+    return null;
+  }
+}
+
+// src/import-prompt.ts
+function externalImportTargets(deps) {
+  if (!deps.gateEnabled) return [];
+  if (!deps.interactive) return [];
+  if (deps.store.deniedAll) return [];
+  const root = resolveProjectRoot2(deps.workDir);
+  if (deps.trust.check(root) !== "trusted") return [];
+  const scan = scanInstructions(root, deps.workDir, {
+    allowExternal: (p) => deps.store.isAllowed(p)
+  });
+  const out = [];
+  const seen = /* @__PURE__ */ new Set();
+  for (const src of scan.sources) {
+    for (const node of src.imports) {
+      if (node.skipped !== "external-denied") continue;
+      if (seen.has(node.path)) continue;
+      seen.add(node.path);
+      out.push({ path: node.path, from: src.path, spec: node.spec });
+    }
+  }
+  return out;
+}
+function importPromptMessage(target) {
+  return [
+    `
+\u26A0 ${target.from} \u5F15\u7528\u4E86\u9879\u76EE\u4E4B\u5916\u7684\u6587\u4EF6\uFF1A`,
+    `    ${target.path}`,
+    `  \uFF08\u6587\u4EF6\u91CC\u5199\u7684\u662F @${target.spec}\uFF09`,
+    "  \u5B83\u4E0D\u5728\u8FD9\u4E2A\u4ED3\u5E93\u91CC\uFF0C\u4E5F\u6CA1\u6709\u88AB\u300C\u4FE1\u4EFB\u8FD9\u4E2A\u76EE\u5F55\u300D\u90A3\u6B21\u5224\u5B9A\u8986\u76D6\u8FC7\u3002",
+    "  \u52A0\u8F7D\u5B83\u7B49\u4E8E\u628A\u4E00\u4EFD\u6CA1\u88AB\u5BA1\u8FC7\u7684\u5185\u5BB9\u62FC\u8FDB system prompt\u3002",
+    ""
+  ].join("\n");
+}
+function applyImportChoice(store, target, choice) {
+  if (choice.kind === "once") {
+    store.allowOnce(target.path);
+    return `\u2713 \u672C\u6B21\u52A0\u8F7D ${target.path}\uFF08\u4E0B\u6B21\u8FD8\u4F1A\u95EE\uFF09`;
+  }
+  if (choice.kind === "remember") {
+    store.remember(target.path);
+    return `\u2713 \u5DF2\u8BB0\u4F4F ${target.path}\uFF0C\u4E4B\u540E\u4E0D\u518D\u8BE2\u95EE`;
+  }
+  if (choice.kind === "never") {
+    store.denyAll();
+    return "\u2717 \u4E4B\u540E\u4E00\u5F8B\u4E0D\u52A0\u8F7D\u9879\u76EE\u5916\u7684 import\uFF08\u6539\u8FD9\u4E2A\u51B3\u5B9A\uFF1A\u5220\u6389 ~/.epoch/trusted-imports.json\uFF09";
+  }
+  return `\u672C\u6B21\u4E0D\u52A0\u8F7D ${target.path}`;
+}
+var CHOICES2 = [
+  { name: "\u672C\u6B21\u4E0D\u52A0\u8F7D\uFF08\u4E0B\u6B21\u8FD8\u4F1A\u95EE\uFF09", value: { kind: "skip" } },
+  { name: "\u52A0\u8F7D\u8FD9\u4E00\u4E2A\u6587\u4EF6", value: { kind: "once" } },
+  { name: "\u52A0\u8F7D\uFF0C\u5E76\u8BB0\u4F4F\u8FD9\u4E2A\u8DEF\u5F84\uFF08\u4E0B\u6B21\u4E0D\u95EE\uFF09", value: { kind: "remember" } },
+  { name: "\u6C38\u4E0D\u52A0\u8F7D\u9879\u76EE\u5916\u7684 import", value: { kind: "never" } }
+];
+async function maybePromptForExternalImports(opts = {}) {
+  const config = opts.config ?? loadConfig2();
+  const store = opts.store ?? new ImportTrustStore(trustedImportsPath(config.homeDir));
+  const print = opts.print ?? ((msg) => process.stdout.write(msg + "\n"));
+  const targets = externalImportTargets({
+    store,
+    trust: opts.trust ?? new TrustManager2(trustPath2(config.homeDir)),
+    interactive: (opts.isInteractive ?? (() => !isNonInteractive2()))(),
+    gateEnabled: config.trust?.enabled !== false,
+    workDir: opts.workDir ?? process.cwd()
+  });
+  if (targets.length === 0) {
+    setImportGate(createImportGate(store));
+    return true;
+  }
+  try {
+    for (const target of targets) {
+      print(importPromptMessage(target));
+      const choice = await (opts.ask ?? askImportChoice)(target);
+      if (choice === null) return false;
+      try {
+        print(applyImportChoice(store, target, choice));
+      } catch (err) {
+        print(
+          `\u26A0 import \u653E\u884C\u8BB0\u5F55\u5199\u5165\u5931\u8D25\uFF0C\u672C\u6B21\u4ECD\u6309\u4E0D\u52A0\u8F7D\u5904\u7406\uFF1A${err instanceof Error ? err.message : err}`
+        );
+      }
+      if (choice.kind === "never") break;
+    }
+  } finally {
+    (opts.restoreStdin ?? restoreStdinDefault)();
+    setImportGate(createImportGate(store));
+  }
+  return true;
+}
+async function askImportChoice(_target) {
+  const { select } = await import("@inquirer/prompts");
+  try {
+    return await select({
+      message: "\u662F\u5426\u52A0\u8F7D\u5B83\uFF1F",
+      choices: [...CHOICES2],
+      default: CHOICES2[0]?.value
+    });
+  } catch {
+    return null;
+  }
+}
+
+// src/tui-host.ts
+import {
+  getCapability,
+  listWorkspaceFiles,
+  openArtifact,
+  resolveMentions,
+  setPluginEnabled,
+  suggestRuleFromApproval
+} from "@epoch-agent/core";
+import { pluginsStatePath as pluginsStatePath2 } from "@epoch-agent/infra";
+import { listBackgroundTasks } from "@epoch-agent/runtime";
+
+// src/clipboard.ts
+import { execFile } from "child_process";
+import { readImageSize, sniffMediaType } from "@epoch-agent/core";
+var MAX_BYTES = 32 * 1024 * 1024;
+var TIMEOUT_MS = 5e3;
+var WINDOWS_SCRIPT = [
+  '$ErrorActionPreference="Stop";',
+  "Add-Type -AssemblyName System.Windows.Forms,System.Drawing;",
+  "$img=[Windows.Forms.Clipboard]::GetImage();",
+  "if($img -eq $null){exit 3};",
+  "$ms=New-Object System.IO.MemoryStream;",
+  "$img.Save($ms,[System.Drawing.Imaging.ImageFormat]::Png);",
+  "[Convert]::ToBase64String($ms.ToArray())"
+].join("");
+function clipboardImageCandidates(platform = process.platform, env = process.env) {
+  if (platform === "darwin") {
+    return [
+      {
+        command: "osascript",
+        args: ["-e", "get the clipboard as \xABclass PNGf\xBB"],
+        decode: "applescript-hex",
+        install: "osascript \u662F macOS \u81EA\u5E26\u7684\uFF0C\u627E\u4E0D\u5230\u8BF4\u660E PATH \u6709\u95EE\u9898"
+      }
+    ];
+  }
+  if (platform === "win32") {
+    const flags = ["-NoProfile", "-NonInteractive", "-STA", "-Command", WINDOWS_SCRIPT];
+    return ["powershell.exe", "pwsh"].map((command) => ({
+      command,
+      args: flags,
+      decode: "base64",
+      install: "Windows \u81EA\u5E26 powershell.exe\uFF0C\u627E\u4E0D\u5230\u8BF4\u660E PATH \u88AB\u6539\u8FC7"
+    }));
+  }
+  const wayland = {
+    command: "wl-paste",
+    args: ["--no-newline", "--type", "image/png"],
+    decode: "raw",
+    install: "Wayland \u4E0B\u88C5 wl-clipboard\uFF08apt install wl-clipboard\uFF09"
+  };
+  const x11 = {
+    command: "xclip",
+    args: ["-selection", "clipboard", "-t", "image/png", "-o"],
+    decode: "raw",
+    install: "X11 \u4E0B\u88C5 xclip\uFF08apt install xclip\uFF09"
+  };
+  return env["WAYLAND_DISPLAY"] ? [wayland, x11] : [x11, wayland];
+}
+function runCandidate(cmd) {
+  return new Promise((done) => {
+    execFile(
+      cmd.command,
+      cmd.args,
+      { timeout: TIMEOUT_MS, maxBuffer: MAX_BYTES, encoding: "buffer", windowsHide: true },
+      (err, stdout) => {
+        const e = err;
+        if (e?.code === "ENOENT") {
+          done(null);
+          return;
+        }
+        done({ stdout: Buffer.from(stdout), code: typeof e?.code === "number" ? e.code : 0 });
+      }
+    );
+  });
+}
+function decodeClipboardStdout(stdout, decode) {
+  if (decode === "raw") return stdout.length > 0 ? stdout : void 0;
+  const text = stdout.toString("utf-8").replace(/\s+/g, "");
+  if (!text) return void 0;
+  if (decode === "base64") return Buffer.from(text, "base64");
+  const hex = /dataPNGf([0-9a-f]+)/i.exec(text)?.[1];
+  return hex ? Buffer.from(hex, "hex") : void 0;
+}
+function decodeImage(bytes) {
+  if (bytes.length === 0) return void 0;
+  const mediaType = sniffMediaType(bytes);
+  if (!mediaType) return void 0;
+  const size = readImageSize(bytes);
+  return {
+    base64: bytes.toString("base64"),
+    mediaType,
+    bytes: bytes.length,
+    ...size ? { width: size.width, height: size.height } : {}
+  };
+}
+async function readClipboardImage(platform = process.platform, env = process.env) {
+  const candidates = clipboardImageCandidates(platform, env);
+  let anyRan = false;
+  for (const candidate of candidates) {
+    const result = await runCandidate(candidate);
+    if (!result) continue;
+    anyRan = true;
+    const bytes = decodeClipboardStdout(result.stdout, candidate.decode);
+    if (!bytes) continue;
+    const image = decodeImage(bytes);
+    if (!image) continue;
+    if (image.bytes > MAX_BYTES) {
+      throw new Error(`\u526A\u8D34\u677F\u56FE\u7247\u8FC7\u5927\uFF08${Math.round(image.bytes / 1024 / 1024)} MB\uFF09`);
+    }
+    return image;
+  }
+  if (!anyRan) {
+    throw new Error(`\u8BFB\u4E0D\u4E86\u526A\u8D34\u677F\uFF1A${candidates.map((c) => c.install).join("\uFF1B")}`);
+  }
+  return null;
+}
+
+// src/goal-view.ts
+import {
+  DEFAULT_GOAL_MAX_ROUNDS,
+  MAX_GOAL_MAX_ROUNDS,
+  MAX_OBJECTIVE_CHARS
+} from "@epoch-agent/core";
+import { t } from "@epoch-agent/infra";
+var PHASE_LABEL_KEYS = {
+  active: "goal.phase_active",
+  paused: "goal.phase_paused",
+  blocked: "goal.phase_blocked",
+  complete: "goal.phase_complete"
+};
+function phaseLabel(phase) {
+  return t(PHASE_LABEL_KEYS[phase]);
+}
+function usage() {
+  return t("goal.usage", { rounds: DEFAULT_GOAL_MAX_ROUNDS, max: MAX_GOAL_MAX_ROUNDS });
+}
+function extraOf(goal) {
+  switch (goal.phase) {
+    case "blocked":
+      return t("goal.extra_blocked", {
+        code: goal.block?.code ?? "",
+        message: goal.block?.message ?? ""
+      });
+    case "complete":
+      return t("goal.extra_complete", { evidence: goal.completeEvidence ?? "" });
+    case "paused":
+      return t("goal.extra_paused");
+    case "active":
+      return t("goal.extra_active");
+  }
+}
+function describeGoal(goal) {
+  return t("goal.status", {
+    objective: goal.objective,
+    phase: phaseLabel(goal.phase),
+    used: goal.roundsUsed,
+    max: goal.maxRounds,
+    extra: extraOf(goal)
+  });
+}
+function refusalText(reason, phase) {
+  const at = phase ? phaseLabel(phase) : "";
+  switch (reason) {
+    case "busy":
+      return t("goal.refuse_busy", { phase: at });
+    case "no-goal":
+      return t("goal.refuse_no_goal");
+    case "empty-objective":
+      return t("goal.refuse_empty_objective");
+    case "objective-too-long":
+      return t("goal.refuse_objective_too_long", { max: MAX_OBJECTIVE_CHARS });
+    case "bad-budget":
+      return t("goal.refuse_bad_budget", { max: MAX_GOAL_MAX_ROUNDS });
+    case "empty-evidence":
+      return t("goal.refuse_empty_evidence");
+    case "wrong-phase":
+      return t("goal.refuse_wrong_phase", { phase: at });
+    case "unavailable":
+      return t("goal.refuse_unavailable");
+    // 这两个码只有**模型**那条路（`goal` 工具）产得出来 —— `/goal` 的
+    // 每一支都不带 block 参数。留着分支而不是 `never`：将来给人也开一个
+    // 「报卡住」的入口时，这里会是编译期就该改的地方，不是运行期才发现的
+    case "bad-block-code":
+    case "empty-block-message":
+      return t("goal.refuse_wrong_phase", { phase: at });
+  }
+}
+function report(control, outcome, toText) {
+  if (outcome.ok) return { ok: true, message: toText(outcome.goal) };
+  return { ok: false, message: refusalText(outcome.reason, control.current()?.phase) };
+}
+function buildGoalActions(control) {
+  if (!control) return void 0;
+  return {
+    describe: () => {
+      const goal = control.current();
+      return goal ? describeGoal(goal) : t("goal.none", { usage: usage() });
+    },
+    usage,
+    create: (objective) => report(
+      control,
+      control.create(objective),
+      (goal) => t("goal.created", { objective: goal.objective, max: goal.maxRounds })
+    ),
+    edit: (objective) => report(
+      control,
+      control.edit(objective),
+      (goal) => t("goal.edited", {
+        objective: goal.objective,
+        used: goal.roundsUsed,
+        max: goal.maxRounds
+      })
+    ),
+    budget: (rounds) => report(
+      control,
+      control.setBudget(rounds),
+      (goal) => (
+        // 调小到已用之下时引擎当场把它转成 blocked（`GoalService.setBudget`）——
+        // 这里照着**写完之后**那份 phase 说话，而不是照着用户的意图说
+        t(goal.phase === "blocked" ? "goal.budget_set_exhausted" : "goal.budget_set", {
+          used: goal.roundsUsed,
+          max: goal.maxRounds
+        })
+      )
+    ),
+    pause: () => report(control, control.pause(), () => t("goal.paused")),
+    resume: () => report(
+      control,
+      control.resume(),
+      (goal) => t("goal.resumed", { used: goal.roundsUsed, max: goal.maxRounds })
+    ),
+    done: (evidence) => report(
+      control,
+      control.complete(evidence),
+      (goal) => t("goal.completed", { evidence: goal.completeEvidence ?? "" })
+    ),
+    clear: () => {
+      const outcome = control.clear();
+      if (!outcome.ok) return { ok: false, message: refusalText(outcome.reason) };
+      return { ok: true, message: t(outcome.cleared ? "goal.cleared" : "goal.clear_noop") };
+    },
+    /**
+     * 开机那一行（验收 8）。**只有 blocked 才出现**：`active` / `paused` /
+     * `complete` 三档都不是「需要人现在做点什么」，而开机提示那一栏是给
+     * 「有事要你处理」用的，塞满常态信息会让真有事的那次被淹掉。
+     */
+    blockedNotice: () => {
+      const goal = control.current();
+      if (!goal || goal.phase !== "blocked" || !goal.block) return null;
+      return t("goal.startup_blocked", {
+        code: goal.block.code,
+        message: goal.block.message
+      });
+    }
+  };
+}
+
+// src/host-actions.ts
+import { execFile as execFile2 } from "child_process";
+import { writeFileSync } from "fs";
+import { isAbsolute, resolve } from "path";
+import { loadPlugins, readPluginRecords, scanPluginDir } from "@epoch-agent/core";
+import { pluginsStatePath } from "@epoch-agent/infra";
+var TIMEOUT_MS2 = 1e4;
+var MAX_BUFFER = 1024 * 1024;
+function run(command, args, cwd) {
+  return new Promise((done) => {
+    execFile2(
+      command,
+      args,
+      { cwd, timeout: TIMEOUT_MS2, maxBuffer: MAX_BUFFER, encoding: "utf-8", windowsHide: true },
+      (err, stdout, stderr) => {
+        const e = err;
+        if (e?.code === "ENOENT") {
+          done({ stdout: "", ok: false, missing: true, stderr: "" });
+          return;
+        }
+        done({ stdout, ok: !err, missing: false, stderr: stderr || "" });
+      }
+    );
+  });
+}
+function clipboardWriteCommand(platform = process.platform, env = process.env) {
+  if (platform === "darwin") return [{ command: "pbcopy", args: [] }];
+  if (platform === "win32") {
+    const script = "$input | Set-Clipboard";
+    return ["powershell.exe", "pwsh"].map((command) => ({
+      command,
+      args: ["-NoProfile", "-NonInteractive", "-Command", script]
+    }));
+  }
+  const wayland = { command: "wl-copy", args: [] };
+  const x11 = { command: "xclip", args: ["-selection", "clipboard"] };
+  return env["WAYLAND_DISPLAY"] ? [wayland, x11] : [x11, wayland];
+}
+async function writeClipboardText(text) {
+  const candidates = clipboardWriteCommand();
+  for (const cmd of candidates) {
+    const done = await new Promise((resolve_) => {
+      const child = execFile2(
+        cmd.command,
+        cmd.args,
+        { timeout: TIMEOUT_MS2, windowsHide: true },
+        (err) => {
+          const e = err;
+          if (e?.code === "ENOENT") return resolve_("missing");
+          resolve_(err ? err.message ?? "\u5199\u5165\u5931\u8D25" : "ok");
+        }
+      );
+      child.stdin?.end(text, "utf-8");
+    });
+    if (done === "ok") return;
+    if (done === "missing") continue;
+    throw new Error(done);
+  }
+  throw new Error(
+    process.platform === "linux" ? "\u526A\u8D34\u677F\u4E0D\u53EF\u7528\uFF1A\u88C5\u4E00\u4E2A xclip \u6216 wl-clipboard" : "\u526A\u8D34\u677F\u4E0D\u53EF\u7528\uFF1A\u7CFB\u7EDF\u81EA\u5E26\u7684\u590D\u5236\u547D\u4EE4\u4E0D\u5728 PATH \u91CC"
+  );
+}
+async function gitDiff(cwd) {
+  const result = await run("git", ["--no-pager", "diff", "HEAD"], cwd);
+  if (result.missing) return { text: "", ok: false, message: "git \u4E0D\u5728 PATH \u91CC" };
+  if (!result.ok) {
+    const why = result.stderr.trim().split("\n")[0] ?? "\u672A\u77E5\u539F\u56E0";
+    return { text: "", ok: false, message: `\u62FF\u4E0D\u5230 git diff\uFF1A${why}` };
+  }
+  return { text: result.stdout, ok: true };
+}
+async function gitDirty(cwd) {
+  const result = await run("git", ["status", "--porcelain"], cwd);
+  if (result.missing || !result.ok) return { ok: false, dirty: false, count: 0 };
+  const count = result.stdout.split("\n").filter((line) => line.trim() !== "").length;
+  return { ok: true, dirty: count > 0, count };
+}
+function renderSessionMarkdown(sessionId, messages, now) {
+  const ROLE_LABEL = {
+    user: "\u{1F464} \u7528\u6237",
+    assistant: "\u{1F916} \u52A9\u624B",
+    tool: "\u{1F527} \u5DE5\u5177",
+    system: "\u2699\uFE0F \u7CFB\u7EDF"
+  };
+  const lines = [
+    `# Epoch \u4F1A\u8BDD ${sessionId}`,
+    "",
+    `\u5BFC\u51FA\u4E8E ${now.toISOString()} \xB7 \u5171 ${messages.length} \u6761\u6D88\u606F`,
+    ""
+  ];
+  for (const m of messages) {
+    lines.push(`## ${ROLE_LABEL[m.role] ?? m.role}`, "");
+    lines.push(m.content.trim() || "\uFF08\u7A7A\uFF09", "");
+  }
+  return lines.join("\n");
+}
+function defaultExportName(sessionId, now) {
+  const stamp = now.toISOString().replace(/[:.]/g, "-").slice(0, 19);
+  return `epoch-session-${sessionId.slice(0, 8)}-${stamp}.md`;
+}
+function writeExport(cwd, file, markdown) {
+  const path = isAbsolute(file) ? file : resolve(cwd, file);
+  writeFileSync(path, markdown, "utf-8");
+  return path;
+}
+function describePlugins(homeDir) {
+  const statePath = pluginsStatePath(homeDir);
+  const artifacts = loadPlugins({ statePath });
+  const skipReason = new Map(artifacts.skipped.map((s) => [s.name, s.reason]));
+  const plugins = readPluginRecords(statePath).records.map((record) => {
+    const loaded = artifacts.loaded.some((p) => p.name === record.name);
+    const reason = skipReason.get(record.name);
+    return {
+      name: record.name,
+      version: record.version,
+      source: record.source,
+      enabled: record.enabled,
+      loaded,
+      ...loaded || reason === void 0 ? {} : { reason },
+      // 只给加载了的数扩展物：一个目录已经没了的插件扫出来必然是全零，
+      // 而「0 条命令」会被读成「这插件是空的」，那是另一个结论
+      contributes: loaded ? contributionLines(record.path, record.name) : []
+    };
+  });
+  return { statePath, plugins };
+}
+function contributionLines(dir, name) {
+  const inv = scanPluginDir(dir, name);
+  const hooks = inv.hooks.reduce((sum, h) => sum + h.count, 0);
+  const out = [
+    inv.commands.length > 0 ? `${inv.commands.length} \u6761\u547D\u4EE4` : "",
+    inv.roles.length > 0 ? `${inv.roles.length} \u4E2A\u89D2\u8272` : "",
+    inv.skills.length > 0 ? `${inv.skills.length} \u4E2A\u6280\u80FD` : "",
+    inv.denyRules > 0 ? `${inv.denyRules} \u6761 deny \u89C4\u5219` : "",
+    hooks > 0 ? `\u26A0 ${hooks} \u4E2A hook\uFF08\u4F1A\u6267\u884C shell \u547D\u4EE4\uFF09` : ""
+  ].filter(Boolean);
+  return out.length > 0 ? out : ["\uFF08\u6CA1\u5E26\u4EFB\u4F55\u6269\u5C55\u7269\uFF09"];
+}
+
+// src/statusline.ts
+import { execFile as execFile3 } from "child_process";
+import { sanitizeToolOutput } from "@epoch-agent/core";
+import { shellSpawnArgs } from "@epoch-agent/infra";
+var TIMEOUT_MS3 = 2e3;
+var MAX_WIDTH = 60;
+var DEFAULT_INTERVAL_MS = 5e3;
+var MAX_BUFFER2 = 64 * 1024;
+function formatStatusLine(stdout) {
+  const first = sanitizeToolOutput(stdout).split("\n")[0]?.trim() ?? "";
+  if (!first) return null;
+  return first.length > MAX_WIDTH ? first.slice(0, MAX_WIDTH - 1) + "\u2026" : first;
+}
+function runStatusLineCommand(command, cwd) {
+  const { file, args, options } = shellSpawnArgs(command);
+  return new Promise((settle) => {
+    execFile3(
+      file,
+      args,
+      {
+        ...options,
+        cwd,
+        timeout: TIMEOUT_MS3,
+        maxBuffer: MAX_BUFFER2,
+        encoding: "utf-8",
+        // 不弹黑框：Windows 上每 5 秒闪一个控制台窗口是没法用的
+        windowsHide: true
+      },
+      (err, stdout) => {
+        if (err) {
+          const killed = err.killed === true;
+          settle({
+            text: null,
+            error: killed ? `\u8D85\u8FC7 ${TIMEOUT_MS3}ms \u6CA1\u8FD4\u56DE` : err.message.trim()
+          });
+          return;
+        }
+        settle({ text: formatStatusLine(stdout) });
+      }
+    );
+  });
+}
+function createStatusLine(config, cwd) {
+  const command = config.statusLine?.command?.trim();
+  if (!command) return null;
+  const interval = config.statusLine?.intervalMs ?? DEFAULT_INTERVAL_MS;
+  let value = null;
+  let running = false;
+  let idleSince = 0;
+  let pending = null;
+  const refresh = () => {
+    running = true;
+    pending = runStatusLineCommand(command, cwd).then((result) => {
+      if (result.text !== null) value = result.text;
+    }).finally(() => {
+      running = false;
+      idleSince = Date.now();
+      pending = null;
+    });
+  };
+  return {
+    read: () => {
+      if (!running && Date.now() - idleSince >= interval) refresh();
+      return value;
+    },
+    // 循环而不是一次 await：`pending` 结束的那一刻别人可能已经又 read() 了一次
+    // （`intervalMs: 0` 时每次 read 都踢一次），只等一次会漏掉后面那个
+    settled: async () => {
+      while (pending) await pending;
+    }
+  };
+}
+
+// src/tui-host.ts
+function sessionHasImages(runtime) {
+  const history = runtime.session?.getHistory() ?? [];
+  return history.some((m) => m.parts?.some((p) => p.type === "image"));
+}
+function buildHostActions(runtime, supportsImages, workDir) {
+  const { permission, diagnostics, model } = runtime;
+  const statusLine = createStatusLine(runtime.config, workDir);
+  const goals = buildGoalActions(runtime.goals);
+  return {
+    getDiagnostics: () => diagnostics,
+    // **不能解构 `tools`**：它是个 getter，解构等于在这里拍一张快照，
+    // 之后 MCP 热更新（方案 15）了 `/tools` 还显示旧清单
+    listTools: () => runtime.tools,
+    // 多模态的两条宿主能力（方案 12 PR-3）。判定都不在 TUI 里：
+    // 能不能打开归 core 的 artifact-open，怎么读剪贴板归 cli 的 clipboard
+    openArtifact: (path) => openArtifact(path),
+    readClipboardImage: () => readClipboardImage(),
+    supportsImages: () => supportsImages,
+    // 自定义斜杠命令的展开（方案 23）。插值要用 infra 的 tokenizer，
+    // 而 tui 只依赖 protocol —— 所以这件事只能在宿主这一侧做
+    expandCommand: (name, args) => runtime.commands.expand(name, args),
+    // `@` 文件补全（方案 25）。清单和解析都在这一侧：前者要 spawn git，
+    // 后者要过工作区边界和**权限判定** —— 让 TUI 自己读文件等于给 `@`
+    // 开一条绕过 `file_read` 的通道
+    listWorkspaceFiles: () => Promise.resolve(listWorkspaceFiles(workDir).files),
+    // 后台任务（方案 36 PR-2）：状态栏计数和 `/tasks` 都读它。
+    // ⚠️ 会话 id 现在是必给的（表按会话分了），而且要给**活的**那个：
+    // `/resume` 会把 `session.sessionId` 换掉，用装配时那个 `runtime.sessionId`
+    // 的话，resume 之后状态栏数的是一个已经不存在的会话
+    listBackgroundTasks: () => listBackgroundTasks(runtime.session?.sessionId ?? runtime.sessionId),
+    // 用户自配的状态栏那一段（方案 29 §2.6）。没配就不注入这一项
+    ...statusLine ? { readStatusLine: () => statusLine.read() } : {},
+    // **不能解构** `contextBreakdown`：它是个 getter，解构等于拍快照，
+    // `/context` 会一直显示第一次看的那个数
+    getContextBreakdown: () => runtime.contextBreakdown,
+    // `!` 和 `#`（方案 25 PR-2）。判定和执行都在引擎侧，TUI 只提供确认框 ——
+    // 用户手打的命令和模型生成的命令在危险性上没有区别
+    runShellCommand: (command, approve) => runtime.userActions.runShell(command, approve),
+    writeMemory: (content, target, approve) => runtime.userActions.writeMemory(content, target, approve),
+    ...runtime.session ? { noteToSession: (text) => runtime.session.note(text) } : {},
+    resolveMentions: (paths) => resolveMentions(paths, {
+      root: workDir,
+      ...runtime.permission ? { permission: runtime.permission } : {}
+    }),
+    // ---- 方案 25 PR-4：把引擎里已有、但 TUI 没入口的东西露出来 ----
+    //
+    // 三个 getter（skills / mcpServers）**都不能解构**，理由同上面的 `tools`：
+    // 技能会被 SkillLearner 现学，MCP 会掉线重连，快照拿到的是启动那一刻的
+    listSkills: () => runtime.skills,
+    listAgentRoles: () => runtime.agentRoles,
+    listMcpServers: () => runtime.mcpServers.map((s) => ({
+      name: s.name,
+      // 三态而不是 connected 的布尔：「要重新登录」和「连不上」的下一步动作
+      // 完全不同（前者跑 epoch mcp login，后者查配置），合成一个字会让用户白折腾
+      status: s.needsLogin ? "\u8981\u767B\u5F55" : s.connected ? "\u5DF2\u8FDE\u63A5" : "\u672A\u8FDE\u63A5",
+      toolCount: s.toolCount,
+      ...s.lastError ? { error: s.lastError } : {}
+    })),
+    ...runtime.memory ? {
+      listMemories: () => runtime.memory.list(),
+      removeMemory: (content) => runtime.memory.remove(content)
+    } : {},
+    // 插件（方案 32）。**无条件注入**：插件系统起不来这回事不存在 ——
+    // 没装过插件时它就是一份空清单，而那正是 `/plugin` 要显示的东西之一
+    // （连带「装一个」的提示）。
+    //
+    // 两条都现读磁盘、不吃 `runtime.plugins` 那份启动快照，理由写在
+    // `describePlugins` 上：用户敲这条命令时，磁盘上的状态可能已经不是启动那一刻了。
+    listPlugins: () => describePlugins(runtime.config.homeDir),
+    setPluginEnabled: async (name, enabled) => {
+      const outcome = await setPluginEnabled(name, enabled, {
+        statePath: pluginsStatePath2(runtime.config.homeDir)
+      });
+      return outcome.ok ? { ok: true, message: outcome.message } : { ok: false, message: outcome.reason };
+    },
+    // 剪贴板写、git diff、会话导出：三样都要 spawn 或写文件，是宿主的活
+    copyToClipboard: (text) => writeClipboardText(text),
+    gitDiff: () => gitDiff(workDir),
+    gitDirty: () => gitDirty(workDir),
+    // 检查点与回退（方案 27 PR-3）。**无条件注入**：`runtime.checkpoints` 不可为
+    // null（它只是文件系统上的一个目录，不像 provider / SQLite 那样有起不来的可能）。
+    //
+    // 三个方法逐条转发而不是 `checkpoints: runtime.checkpoints`：TUI 那侧的形状
+    // 是 core 那几个类型的**结构性镜像**（tui 不许 import core），直接赋值等于
+    // 让两边的类型偷偷绑在一起 —— 而这一行的作用正是让漂移在编译期就红。
+    // `list` 的返回值收窄成 readonly 也是在这里发生的
+    checkpoints: {
+      list: () => runtime.checkpoints.list(),
+      preview: (turnIndex) => runtime.checkpoints.preview(turnIndex),
+      rewind: (turnIndex, opts) => runtime.checkpoints.rewind(turnIndex, opts)
+    },
+    // 权限规则的可解释性（方案 22 PR-4）。`permissions` 在 runtime 上**不可为 null**，
+    // 所以这两条无条件注入 —— 一条规则都没配时它是空表加一句「没配过」
+    listPermissions: () => ({
+      level: runtime.permissions.level(),
+      rules: runtime.permissions.rules(),
+      shadows: runtime.permissions.shadows(),
+      managed: runtime.permissions.managed()
+    }),
+    suggestRule: (request) => suggestRuleFromApproval(request),
+    // 手动压缩（`/compact`）。会话起不来时不注入 —— 那时压缩也无从谈起
+    ...runtime.session ? { compactContext: (instruction) => runtime.session.compact(instruction) } : {},
+    // `/resume` 和 Ctrl+R。三条一起给或一起不给：只给列表不给恢复的话，
+    // 用户能选中一段会话然后什么也不会发生
+    ...runtime.sessions ? {
+      listSessions: () => runtime.sessions.list(),
+      resumeSession: (sessionId) => runtime.sessions.resume(sessionId),
+      searchSessions: (query) => runtime.sessions.search(query)
+    } : {},
+    ...runtime.sessionStore ? {
+      exportSession: async (file) => {
+        const now = /* @__PURE__ */ new Date();
+        const messages = runtime.sessionStore.loadMessages(runtime.sessionId);
+        const markdown = renderSessionMarkdown(runtime.sessionId, messages, now);
+        const name = file ?? defaultExportName(runtime.sessionId, now);
+        return { path: writeExport(workDir, name, markdown), messages: messages.length };
+      }
+    } : {},
+    // **不能解构 `providerInfo`**：方案 26 之后它是个 getter（`/model` 能换
+    // provider），解构等于在这里拍快照，切完之后 `/model` 还显示原来那家和那把 key
+    ...runtime.providerInfo ? { getProviderInfo: () => runtime.providerInfo } : {},
+    ...model ? {
+      getModelSelection: () => {
+        const selection = model.get();
+        const { contextLength } = getCapability(selection.model, runtime.config.homeDir);
+        return { selection, contextLength };
+      },
+      // `hasImages` 由这一侧补，**不能让 TUI 自己判**：TUI 只看得见还没发出去
+      // 的那几张（`pendingImages`），已经发过的、以及 `-r` 恢复出来的历史里
+      // 那些，只有会话知道。判成 false 的后果很具体：切到不认图的模型，
+      // 下一轮把整段带图历史发出去，provider 报 400 且**已经计费**
+      setModel: (ref, ctx) => {
+        const merged = { ...ctx, hasImages: sessionHasImages(runtime) };
+        return ref === "reset" ? model.reset(merged) : model.set(ref, merged);
+      },
+      // 引擎攒下的提示（「这个模型连续失败太多次，本会话不再自动重试」）。
+      // 拉而不是推：router 在 loop.ts 底下，发不出 AgentEvent；TUI 在一轮
+      // 收尾时拉一次，攒着的话用户会在下一轮才看到上一轮的事
+      drainModelNotices: () => model.drainNotices()
+    } : {},
+    ...permission ? {
+      getPermissionLevel: () => permission.getLevel(),
+      /**
+       * 切档位。**判定本体 2026-08-15 搬进了 `runtime.permissions.setLevel()`**，
+       * 这里只剩「把码渲染成一句人话」。
+       *
+       * 搬走的三件事（托管挡 bypass → `setLevel` → `plan.forget()`）原来
+       * 逐字长在这儿，而 web 那一格要长出真菜单时需要同一段判定 ——
+       * 抄一份的具体代价是第三步会被漏掉，判据写在 `PermissionsControl`
+       * 的文件头。**行为一个字没变**：同样的挡、同样的作废、同样的回读确认。
+       *
+       * 这一层留下的只有那句中文：`LevelChangeResult.reason` 是**码**
+       * （它的消费方里有 web 服务端，而中文一律不上网线），而 TUI 这一侧
+       * 要的是能直接印在屏幕上的一句话，路径也只有本机这一份说得出来。
+       */
+      setPermissionLevel: (level) => {
+        const result = runtime.permissions.setLevel(level);
+        if (!result.ok) {
+          const managed = runtime.permissions.managed();
+          return {
+            ok: false,
+            reason: `\u4F01\u4E1A\u6258\u7BA1\u8BBE\u7F6E\u7981\u7528\u4E86 bypass\uFF08disableBypassPermissionsMode\uFF0C\u89C1 ${managed.path}\uFF09`
+          };
+        }
+        return permission.getLevel() === level ? { ok: true } : { ok: false, reason: `\u5207\u6362\u5230 ${level} \u5931\u8D25` };
+      }
+    } : {},
+    // 长任务的目标（`/goal`，方案 52）。会话库没起来时整组不注入 ——
+    // 那时 `/goal` 压根不注册（目标是**落盘**的状态，建了就没等于没有）。
+    //
+    // ⚠️ 措辞全在 `goal-view.ts` 里走 `t()`：tui 够不着 catalog，判据写在
+    // `HostActions.goals` 上那段。这里只负责把引擎那一份接过去
+    ...goals ? { goals } : {},
+    // Plan 模式的用户入口（`/plan`，方案 35）。**出口处那次审批不在这里** ——
+    // 它走 `approval-request`，TUI 接的是同一个审批队列
+    ...runtime.plan ? {
+      planMode: {
+        active: () => runtime.plan?.active() ?? false,
+        from: () => runtime.plan?.from() ?? null,
+        enter: () => runtime.plan?.enter() ?? { ok: false, reason: "plan \u6A21\u5F0F\u4E0D\u53EF\u7528" },
+        leave: () => runtime.plan?.leave() ?? null,
+        // `/plan show` 的数据源（方案 35 PR-2）。`--resume` 之后屏幕上是空的
+        // （那张卡片是上一个进程画的），而模型手上那份计划还在 ——
+        // 这是用户唯一能问出「现在照着什么在做」的地方
+        approvedPlan: () => runtime.plan?.approvedPlan() ?? null
+      }
+    } : {}
+  };
+}
+
+// src/version.ts
+import { readFileSync } from "fs";
+import { dirname, join as join2 } from "path";
+import { fileURLToPath } from "url";
+
+// src/installation.ts
+import { execFileSync } from "child_process";
+import { existsSync, realpathSync } from "fs";
+import { join } from "path";
+import { normalizeForMatch } from "@epoch-agent/infra";
+
+// src/version.ts
+function readVersion() {
+  const here = dirname(fileURLToPath(import.meta.url));
+  for (const candidate of [
+    join2(here, "..", "package.json"),
+    join2(here, "..", "..", "package.json")
+  ]) {
+    try {
+      const raw = JSON.parse(readFileSync(candidate, "utf-8"));
+      if (raw.version) return raw.version;
+    } catch {
+    }
+  }
+  return "0.0.0-unknown";
+}
+var VERSION = readVersion();
+
+// src/tui-entry.ts
+async function main() {
+  if (!await maybePromptForTrust()) {
+    process.exit(1);
+  }
+  if (!await maybePromptForExternalImports()) {
+    process.exit(1);
+  }
+  const resumeId = process.env.EPOCH_RESUME?.trim();
+  const runtime = await buildRuntime({
+    installSignalHandlers: true,
+    ...resumeId ? { resumeId } : {}
+  });
+  const { session, config } = runtime;
+  if (!session) {
+    process.stderr.write(
+      `\u542F\u52A8\u5931\u8D25\uFF1Aprovider \u4E0D\u53EF\u7528\uFF0C\u8FD0\u884C epoch model \u914D\u7F6E
+${runtime.diagnostics.join("\n")}
+`
+    );
+    process.exit(1);
+  }
+  const model = config.model || "unknown";
+  let contextLimit = 0;
+  let supportsImages = false;
+  try {
+    const capability = getCapability2(model, config.homeDir);
+    contextLimit = capability.contextLength;
+    supportsImages = capability.supportsImages;
+  } catch {
+    contextLimit = 0;
+  }
+  const keys = loadKeybindings({
+    path: keybindingsPath(config.homeDir),
+    defaults: DEFAULT_KEYBINDINGS
+  });
+  const host = buildHostActions(runtime, supportsImages, process.cwd());
+  const goalNotice = host.goals?.blockedNotice() ?? null;
+  const instance = renderApp({
+    sessionId: session.sessionId,
+    // 用量口径必须原样告诉 TUI：它没法从事件流里推出来，猜错就是账算错
+    usageScope: runtime.usageScope,
+    app: { version: VERSION, cwd: process.cwd() },
+    config: {
+      model,
+      workDir: process.cwd(),
+      permissionLevel: config.permission,
+      contextLimit,
+      getUseBackgroundColor: () => false
+    },
+    welcomeMessage: "\u4F60\u597D\uFF01\u6211\u662F Epoch Agent\u3002\u8F93\u5165\u6D88\u606F\u5F00\u59CB\u5BF9\u8BDD\uFF0C\u8F93\u5165 / \u770B\u53EF\u7528\u547D\u4EE4\u3002",
+    // 启动诊断以前在这里被整个丢掉：配置写错了、某个模块没起来，
+    // TUI 上完全静默，只有 `epoch status` 才看得见。
+    // 键位那几条接在后面 —— 它们和 runtime 的诊断是同一种东西（「你的配置有一处
+    // 没生效」），走同一个通道用户才只有一个地方要看
+    // 目标那一行**排在最后**：诊断说的是「你的配置有一处没生效」，
+    // 而它说的是「上次那个任务卡住了」—— 后者才是用户这一刻要接着干的事，
+    // 放在最靠近输入框的位置
+    startupNotices: [
+      ...runtime.diagnostics,
+      ...keys.diagnostics.map(diagnosticToLine),
+      ...goalNotice ? [goalNotice] : []
+    ],
+    keybindings: keys.table,
+    host,
+    // 自定义斜杠命令的表（方案 23）。**永远给**：加载不出来时它是空数组，
+    // 不是「没有这个能力」—— TUI 那侧因此不用为「有没有命令系统」分支
+    customCommands: runtime.commands.list,
+    // 入参是 EpochUserContent 而不是 string —— TUI 里 Ctrl+V 粘的图片
+    // 跟着这一次提交一路走到引擎，`session.run` 本来就收这个类型。
+    //
+    // 两层包装管的都是「这一轮」：工具白名单（方案 23）和临时模型（方案 26）。
+    // 进出成对、且**中断也会还原**，规矩和用例都在 runtime 那一侧。
+    // 模型那层在外面：它要在工具作用域退出之后才还原，顺序和进入时相反 ——
+    // 虽然这两件事眼下互不影响，但把嵌套写成不配对的形状，
+    // 早晚会有第三样东西掉进那个缝里
+    onRun: (userMessage, opts) => withModelScope(
+      runtime.model,
+      opts.model,
+      withToolScope(
+        runtime.commands,
+        opts.allowedTools,
+        session.run(userMessage, { signal: opts.signal })
+      )
+    ),
+    // onExit 是同步回调（ink 的键位处理里调），而 dispose 现在要等后台进程收尸。
+    // 先 unmount 把终端还给用户 —— 收尸最多 200ms，但那 200ms 里屏幕不该还挂着
+    // 一个已经退出的 TUI
+    onExit: () => {
+      instance.unmount();
+      void runtime.dispose().finally(() => process.exit(0));
+    }
+  });
+}
+main().catch((err) => {
+  if (expectedFailureExitCode(err) !== void 0) reportFatal(err);
+  process.stderr.write(`TUI \u542F\u52A8\u5931\u8D25: ${err}
+`);
+  process.exit(1);
+});
+/**
+ * @license
+ * Copyright 2025 Google LLC
+ * SPDX-License-Identifier: Apache-2.0
+ *
+ * 改编自 gemini-cli `packages/cli/src/utils/installationInfo.ts`，
+ * 按 epoch 的包名与目录形态调整，去掉了自动更新分支（epoch 只提示不代跑）。
+ * 另修掉了原版同样存在的三处 Windows 误判（见下方「Windows 上的坑」）。
+ */