@epoch-agent/core 0.10.0 → 0.11.0

package/dist/index.d.ts

@@ -4484,10 +4484,24 @@ declare function loadPlugins(opts: PluginLoadOptions): PluginArtifacts;
  *   "version": "1.0.0",
  *   "description": "团队约定的三条命令",
  *   "author": { "name": "…", "email": "…" },
- *   "epochVersion": ">=0.6.0"
+ *   "epochVersion": ">=0.6.0",
+ *   "displayName": "淘宝批量改价",
+ *   "category": "office",
+ *   "visibility": "private"
  * }
  * ```
  *
+ * ## 两族格子，别混着读
+ *
+ * | 族                                              | 谁读它                                   |
+ * | ----------------------------------------------- | ---------------------------------------- |
+ * | `name` / `version` / `epochVersion` / `author`  | **epoch 自己** —— 装不装得上、叫什么     |
+ * | `displayName` / `category` / `icon` / `visibility` / `changelog` | **上传那一屏的预填**，epoch 一个字不读 |
+ * | `description` / `homepage` / `keywords`         | 两边都读                                 |
+ *
+ * 第二族 2026-09-15 加的，判据在它们自己那几格上。要紧的一条：它们是**预填**，
+ * 用户在那一屏上改得动，改了之后发出去的是改后的 —— 包里这一份原地不动。
+ *
  * 文件名放在**插件根**，不学竞品的 `.claude-plugin/` 子目录 —— 多一层目录没带来
  * 任何好处，而「插件根下有没有 `epoch-plugin.json`」是判定「这是不是一个插件」
  * 最省事的问法。
@@ -4550,6 +4564,17 @@ declare const PluginAuthorSchema: z.ZodObject<{
     email: z.ZodOptional<z.ZodString>;
     url: z.ZodOptional<z.ZodString>;
 }, z.core.$strip>;
+/**
+ * 「谁装得到」的两档。
+ *
+ * ⚠️ **导出它，因为三处要用同一份名单**：这份清单的 {@link ManifestSchema}、
+ * 市场目录条目的 `EntrySchema`（`marketplace.ts`），以及 runtime 那一层把用户
+ * 填的值收窄成这两档的那一处。各写一份字面量的话，它们分家的那天没有任何东西
+ * 会红 —— 而分家的表现是一个在清单里合法的 `visibility` 到了上传那一屏上被
+ * 当成认不得的值落回 `private`。
+ */
+declare const PLUGIN_VISIBILITY: readonly ["private", "public"];
+type PluginVisibility = (typeof PLUGIN_VISIBILITY)[number];
 declare const ManifestSchema: z.ZodObject<{
     name: z.ZodString;
     version: z.ZodString;
@@ -4562,7 +4587,24 @@ declare const ManifestSchema: z.ZodObject<{
     epochVersion: z.ZodOptional<z.ZodString>;
     homepage: z.ZodOptional<z.ZodString>;
     keywords: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    displayName: z.ZodOptional<z.ZodString>;
+    category: z.ZodOptional<z.ZodString>;
+    icon: z.ZodOptional<z.ZodString>;
+    changelog: z.ZodOptional<z.ZodString>;
+    visibility: z.ZodCatch<z.ZodOptional<z.ZodEnum<{
+        private: "private";
+        public: "public";
+    }>>>;
 }, z.core.$strip>;
+/**
+ * 认识的顶层键，用来产出「未知配置项」提示。
+ *
+ * ⚠️ **导出它是为了让那道合并点门禁扫得到**：`PLUGIN_UPLOAD_FIELDS` 里每一格
+ * 都必须在这份名单里（判据在上面那段注释上）。加第八格上传字段而忘了在清单里
+ * 开一格的表现是「作者按文档写了、上传页还是空的」——
+ * 一条会红的用例比一句叮嘱可靠。
+ */
+declare const PLUGIN_MANIFEST_KEYS: readonly string[];
 type PluginAuthor = z.infer<typeof PluginAuthorSchema>;
 type PluginManifest = z.infer<typeof ManifestSchema>;
 interface ManifestReadOutcome {
@@ -7859,6 +7901,26 @@ interface CompressResult {
      * 让别人的实现编译不过不成比例。缺省按 `false` 读。
      */
     summarySkipped?: boolean;
+    /**
+     * 这一次**原样带过去**的头 / 尾各几条（方案 64 PR-1）。
+     *
+     * `messages` 的形状是 `head + 摘要一条 + tail`，而这两个数说的就是那个
+     * `head.length` 和 `tail.length`。存在的理由是**落库那一步要知道切在哪儿**：
+     * 归档侧要把「中间那一段」标成 `active = 0, compacted = 1` 并在原地插一条摘要行，
+     * 而它手上只有库里的行、没有压缩器的边界（`determineBoundaries` 是按 token
+     * 算的，落库那一层再算一遍必然对不上 —— 判据全文在方案 64 §4.1 第 1 条）。
+     *
+     * ⚠️ **只在能数准的时候给**。清理孤立对（`droppedOrphans > 0`）之后
+     * head / tail 里可能被删掉过消息，那时这两个数和 `messages` 对不上，
+     * **一律不给**。消费侧的规矩是「拿不到就不落库」，
+     * **不是**猜一个数去切 —— 切错了归档掉的就是错的那一段（方案 64 §4.4）。
+     *
+     * 可选（不是必填），理由逐字同上面的 `summarySkipped`：`ContextEngine`
+     * 是嵌入宿主也能自己实现的接口。
+     */
+    carriedHead?: number;
+    /** 同 {@link carriedHead}，结尾那一侧 */
+    carriedTail?: number;
     /**
      * 生成这份摘要花掉的 token 与模型 —— **压缩器自己不记账**，交给调用方
      * （AgentLoop 手上才有那次 run 的预算闸门）。summarize 没回 usage 时缺省。
@@ -9277,6 +9339,9 @@ declare class AgentLoop {
         usage?: TokenUsage;
         model?: string;
         ran: boolean;
+        /** 见 {@link CompressResult.carriedHead} —— 落库那一步要用（方案 64 PR-1） */
+        carriedHead?: number;
+        carriedTail?: number;
     }>;
     /**
      * 真正压一次。调用方负责决定「该不该压」。
@@ -9334,6 +9399,34 @@ interface ModelCapability {
      * 缺席 = `false` = 「这个答案是查到的，不用再探」。
      */
     imagesUnknown?: boolean;
+    /**
+     * **`contextLength` 那个数是兜底的，不是查到的**（2026-09-15）。
+     *
+     * ## 它修的是一个**静默失效的配置项**
+     *
+     * `EpochConfig.contextLength` 的定位一直写着「元数据查不到时的回落」
+     * （`agent-session.ts` 的 `autoCompact` 上逐字这么说）。而「查不到」在代码里
+     * 的唯一表达是 `resolveModelCapability` 那个 `catch` —— 它只在这个函数**抛异常**
+     * 时才走，而这个函数的设计恰恰是**永不抛**：第 3 层兜底回一个写死的
+     * `DEFAULT_CONTEXT_LENGTH`。
+     *
+     * 于是那条 `catch` 几乎永远走不到，**用户配的 `contextLength` 静默不生效**。
+     * 2026-09-15 端到端验收实测：配 `4000`，量出来是 `200000`。
+     *
+     * 后果不是「少一个旋钮」：压缩阈值按 200k 算，一个真窗口只有 8k 的自建模型
+     * 会一路聊到撞窗口才报错，而用户明明配对了。这正是仓库那条铁律要防的
+     * ——**一个配了、却不生效的开关，比压根没有这个开关坏得多**。
+     *
+     * ## 为什么是多一格布尔，而不是把 `contextLength` 改成可空
+     *
+     * 判据逐字同上面那个 `imagesUnknown`：可空（或三态）意味着每个读它的人都得
+     * 先判一次，而漏判的那一处会拿到 `undefined` 去做算术 —— `NaN` 比一个偏大的
+     * 默认值坏得多（阈值算出 `NaN`，`isContextNearlyFull` 恒假，压缩**整个不跑**）。
+     * 多一格布尔的话，漏读的那一处行为和这一轮之前逐字节相同。
+     *
+     * 缺席 = `false` = 「这个数是查到的」（静态表或磁盘缓存）。
+     */
+    contextLengthUnknown?: boolean;
     supportsStreaming: boolean;
     supportsPromptCaching: boolean;
     supportsReasoning: boolean;
@@ -11225,6 +11318,11 @@ declare const EpochConfigSchema: z.ZodObject<{
         maxAgeDays: z.ZodDefault<z.ZodInt>;
         maxTotalBytes: z.ZodDefault<z.ZodInt>;
     }, z.core.$strip>>;
+    sessions: z.ZodPrefault<z.ZodObject<{
+        autoPrune: z.ZodDefault<z.ZodBoolean>;
+        retentionDays: z.ZodDefault<z.ZodInt>;
+        vacuumAfterPrune: z.ZodDefault<z.ZodBoolean>;
+    }, z.core.$strip>>;
     budget: z.ZodOptional<z.ZodObject<{
         maxCostUsd: z.ZodOptional<z.ZodNumber>;
         maxTokens: z.ZodOptional<z.ZodInt>;
@@ -11280,9 +11378,11 @@ declare const EpochConfigSchema: z.ZodObject<{
     }, z.core.$strip>>;
     search: z.ZodOptional<z.ZodObject<{
         provider: z.ZodOptional<z.ZodEnum<{
+            native: "native";
             tavily: "tavily";
             brave: "brave";
             searxng: "searxng";
+            keyless: "keyless";
         }>>;
         baseUrl: z.ZodOptional<z.ZodString>;
         maxResults: z.ZodOptional<z.ZodInt>;
@@ -11574,7 +11674,7 @@ declare function isSettingWriteLayer(value: string): value is SettingWriteLayer;
  * 安全中心指两件事（「新会话从哪一档起」vs「这个会话此刻哪一档」），
  * 而那正是决定 20 ④ 拆开的那个歧义 —— 记住上一次那一档没有把这个歧义请回来。
  */
-declare const SETTING_WRITE_KEYS: readonly ["model", "maxTurns", "models.utility", "fallback.model", "contextLength", "compression.enabled", "compression.threshold", "memory.memoryCharLimit", "memory.userCharLimit", "memory.indexCharLimit", "budget.maxCostUsd", "budget.maxTokens", "budget.warnAtPercent", "budget.onUnknownPricing", "permission"];
+declare const SETTING_WRITE_KEYS: readonly ["model", "maxTurns", "models.utility", "fallback.model", "contextLength", "compression.enabled", "compression.threshold", "memory.memoryCharLimit", "memory.userCharLimit", "memory.indexCharLimit", "budget.maxCostUsd", "budget.maxTokens", "budget.warnAtPercent", "budget.onUnknownPricing", "sessions.autoPrune", "sessions.retentionDays", "sessions.vacuumAfterPrune", "permission"];
 type SettingWriteKey = (typeof SETTING_WRITE_KEYS)[number];
 /** 这个键写得进去吗。名单就是 {@link SETTING_WRITE_KEYS} 本身，别在别处抄一份字面量 */
 declare function isWritableSettingKey(value: string): value is SettingWriteKey;
@@ -13239,6 +13339,64 @@ declare class SessionManager implements SessionManager$1 {
     updateMeta(id: string, patch: Partial<SessionMeta>): void;
     archive(id: string): void;
     unarchive(id: string): void;
+    /**
+     * 按保留期清理会选中谁（方案 64 PR-4）。**只查不删。**
+     *
+     * 三条选择规则（只删已结束的 / `pinned` 豁免 / 归档的照删）逐条照 hermes，
+     * 判据全文在 {@link SessionDB.pruneCandidates} 上 —— 那三条是安全边界，
+     * 别在调用侧另加一层过滤。
+     */
+    pruneCandidates(input: {
+        olderThanMs: number;
+        archived?: boolean;
+        includePinned?: boolean;
+    }): SessionMeta[];
+    /** 同一个窗口里还有几段**开着**的会话（被那道 `ended_at` 闸挡下的）。只为看得见 */
+    openPruneMatches(input: {
+        olderThanMs: number;
+        includePinned?: boolean;
+    }): number;
+    /** `VACUUM` 能还回来的比例。判据在 {@link SessionDB.freelistRatio} 上 */
+    freelistRatio(): number;
+    /**
+     * 开机时的自动维护（方案 64 PR-4）—— **形状照 hermes 的
+     * `maybe_auto_prune_and_vacuum`**，包括它那条最要紧的性质：**从不抛**。
+     *
+     * ## 「从不抛」是这个方法的第一条约束，不是兜底
+     *
+     * hermes 那句注释逐字是 `Maintenance must never block startup.`
+     * 这里同理：它跑在每次启动的路径上，而清理失败（盘满、库被别的进程独占、
+     * 迁移还没跑完）**一条都不该让 agent 起不来**。所以整个身子包在 try 里，
+     * 失败时如实回一个 `{ error }`，由调用方决定要不要印一行诊断。
+     *
+     * ## 三道节流，各自挡一件事
+     *
+     * | 闸                        | 挡的是                                        |
+     * | ------------------------- | --------------------------------------------- |
+     * | `autoPrune: false`（缺省）| **它整个不跑** —— 判据在 `SessionsSchema` 上  |
+     * | 24 小时                   | 每次启动都全表扫一遍（开发时一天启动几十次）  |
+     * | VACUUM 的 30 天 + 25%     | 一次小清理在密实的大库上触发整库重写          |
+     *
+     * ⚠️ **第一道和后两道不是一回事**：关掉 `autoPrune` 之后手动那条
+     * （`epoch sessions prune`）照常能用，那条路上一道节流都没有 ——
+     * 给用户亲手敲的命令加「你上周刚跑过」说不通。
+     */
+    maybeAutoPrune(opts: {
+        enabled: boolean;
+        retentionDays: number;
+        vacuum: boolean;
+        /** 至多多久跑一次。缺省 24 小时，同 hermes 的 `min_interval_hours: 24` */
+        minIntervalMs?: number;
+        /** VACUUM 自己那道时间节流。缺省 30 天，同 hermes 的 `min_vacuum_interval_days: 30` */
+        minVacuumIntervalMs?: number;
+        /** 注入时钟，用例要拨快 25 小时而不是真等 */
+        now?: () => number;
+    }): {
+        skipped: boolean;
+        pruned: number;
+        vacuumed: boolean;
+        error?: string;
+    };
     /**
      * 真删一段会话（方案 30 §2.2）。**不可撤销**，调用方要先跟用户确认过。
      *
@@ -13301,6 +13459,22 @@ declare class SessionManager implements SessionManager$1 {
      * 那不是摘要，是残缺的原文，句子往往截在一半，喂回模型比不给更糟。
      */
     compact(sessionId: string, summarize?: (transcript: string) => Promise<string | null>): Promise<CompactionResult>;
+    /**
+     * 把引擎刚压完的那一次落进库里（方案 64 PR-1）。判据全文在
+     * {@link SessionDB.archiveAndCompact} 上 —— 这一层只是转发，**一个数都不算**。
+     *
+     * 和上面那个 {@link compact} 的分工：那个自己数边界、自己调摘要模型，
+     * 是「你来替我压一次」；这个收的是**已经压完的结果**，是「记下我刚压的那次」。
+     */
+    archiveAndCompact(sessionId: string, input: {
+        summary: string;
+        headCount: number;
+        tailCount: number;
+        watermark: number;
+    }): {
+        archived: number;
+        summaryId: number;
+    } | null;
     /** 有 LLM 就用 LLM，失败则返回 null 让调用方退回大纲 */
     private buildSummary;
     fork(input: ForkInput): Session;
@@ -13643,6 +13817,12 @@ declare class RecentWorkspaces {
      * 让宿主给一个友好名（「我的工作台」），而用户第一次真的在那个目录里干活时
      * 就会走到这个方法 —— 不沿用的话，那个名字在第一次使用的当场就被
      * `basename()` 顶掉了，宿主预置的效果只存在到用户点它之前。
+     *
+     * ⚠️ **比路径走 `samePath()` 而不是 `===`**（2026-09-15 补，判据全文在 infra 的
+     * `samePath` 上）。`resolve()` 不统一盘符大小写，而两种写法在 Windows 上同时流通 ——
+     * 字符串相等的话，「已经在清单里就提到最前」这句话在 `d:\ws` / `D:\ws` 之间不成立：
+     * 同一个项目会在「最近使用」里留下**两行**，而上面那条「沿用已经记着的名字」
+     * 也跟着失效（宿主预置的友好名被 `basename()` 顶掉）。
      */
     remember(dir: string, now: number, name?: string): void;
     /** 从清单里去掉一条。不在清单里是空操作（不写盘） */
@@ -13659,6 +13839,109 @@ declare class RecentWorkspaces {
     private save;
 }
 
+/**
+ * 「这个项目上次停在哪段会话」的记录（2026-09-14）。
+ *
+ * Web 首屏原来恒是一段刚 `randomUUID()` 出来的空会话 —— 每起一次 `epoch web`
+ * 都要自己去侧栏里把昨天那段翻出来。这份记录让首屏落回**上次停留的那一段**。
+ *
+ * ## 口径是「最后停留」，不是「最近说过话」
+ *
+ * 后者已经有了（`SessionManager.getLatestByCwd()`，`epoch -c` 用的就是它），
+ * 而它答不出这一个问题：翻开一段旧会话看了半天、一个字没发就关掉 ——
+ * 按「最近说过话」接回来的是另一段。所以这份记录由**界面在切会话那一刻**写，
+ * 不从会话库里推。
+ *
+ * ## 三条照抄 {@link RecentWorkspaces}（同一类东西，同一套策略）
+ *
+ * 1. **本机文件，不是服务**（方案 42 §三那条范围闸门）：落在 `~/.epoch/last-sessions.json`，
+ *    路径由 infra 的 `lastSessionsPath()` 给。
+ * 2. **写失败不抛。** 记不下来的代价是下次启动开一段新的 —— 让它去挡住主路径
+ *    （切会话）是拿次要功能换主要功能。失败原因收进 {@link writeErrors}。
+ * 3. **有上限，且是 LRU。** 一台机器上的项目数没有天然边界，不给配额它就只增不减。
+ *
+ * ## 一处和 `RecentWorkspaces` **不同**：结构对不上时不出声
+ *
+ * 那一份的 load 会为「顶层不是对象 / 版本不认 / 不是数组 / 有几条非法」各留一句诊断。
+ * 这一份只为**真的 I/O 失败**留话，结构问题一律当「还没记过」静静吞掉，判据是
+ * **两者的失败面不一样**：那一份失败了，界面上的「最近使用」菜单会**空着**，
+ * 用户看得见一个本该有东西的地方没东西；这一份失败了，用户得到的是一段新对话 ——
+ * 和「这个项目第一次用」逐字同形，而那本来就是最常见的正常情况。
+ * 为一个和正常情况长得一样的结果在每次启动时印一行黄字，只会教人忽略诊断。
+ *
+ * ⚠️ 那两句留下来的话存的是**闭包不是字符串**，理由逐字同 `workspace/recent.ts`
+ * 的文件头末节：它们要被装配层倒进启动诊断，而启动诊断得能按**这一次请求**的
+ * 语言重放一遍（`GET /api/config?lang=`）。
+ */
+
+/** 记录里的一行 */
+interface LastOpenSession {
+    /** 项目根，绝对路径（已 `resolve()`）。同 `sessions.cwd` 的口径 */
+    root: string;
+    /** 这个项目上次停留的会话 id */
+    sessionId: string;
+    /** 记下这一笔的时间（epoch 毫秒）。只用来排 LRU */
+    at: number;
+}
+/**
+ * 最多记几个项目。
+ *
+ * 20 同 `MAX_RECENT_WORKSPACES`，而这里的判据不是「菜单里翻得到」（这份记录
+ * 界面上一行都不显示），是**一个人同时在推进的项目数量级**。超了丢最久没碰的
+ * 那个：丢掉的后果是那个项目下次启动开一段新对话，而那个项目本来也几个月没开了。
+ */
+declare const MAX_LAST_OPEN_SESSIONS = 20;
+declare class LastOpenSessions {
+    private readonly filePath;
+    private entries;
+    /**
+     * 读取时真的发生了 I/O 失败（文件在、但读不动）。空数组 = 读取正常。
+     *
+     * ⚠️ **结构问题不进这里**，判据在文件头最后一节。每一项是一个还没渲染的闭包。
+     */
+    readonly loadErrors: LocalizedDetail[];
+    /** 写入失败的原因。见文件头第 2 条 —— 写不进去不抛，但也不装作写进去了 */
+    readonly writeErrors: LocalizedDetail[];
+    constructor(filePath?: string);
+    /**
+     * 这个项目上次停在哪段会话；没记过 `null`。
+     *
+     * ⚠️ **它不保证那段会话还在。** 这份文件和会话库是两回事（用户可以在界面上
+     * 删掉一段会话，也可以直接删掉整个 `sessions.db`），存在性由调用方按
+     * **自己那条 404 判据**去查 —— 让这个类去查会话库，等于给「这段会话还在不在」
+     * 造第二个说法。
+     *
+     * ⚠️ **比路径走 `samePath()` 而不是 `===`**（2026-09-15 真机实测补的，判据
+     * 全文在 infra 的 `samePath` 上）。`resolve()` **不统一盘符大小写**，而两种写法
+     * 在 Windows 上同时流通（`process.cwd()` 回 `D:\…`，git bash 的 `$PWD` 是 `d:\…`）——
+     * 字符串相等的话，同一个项目换个大小写报进来就查不到，表现是**首屏又开了一段
+     * 空会话**，和「这个项目第一次用」逐字同形，没人反推得回盘符上去。
+     */
+    get(root: string): string | null;
+    /**
+     * 记一笔「这个项目此刻停在这段会话上」。同一个项目只留最新的一条。
+     *
+     * `now` 由调用方给：这个类不读挂钟，于是用例能断言 LRU 顺序而不用 sleep
+     * （同 `RecentWorkspaces.remember` 那条理由）。
+     *
+     * **值没变就不写盘**：界面每切一次会话报一次，而 React 的 effect 会为
+     * 语言切换之类的事重跑 —— 不比一下的话，一次纯展示层的重渲染会变成一次磁盘写。
+     */
+    remember(root: string, sessionId: string, now: number): void;
+    /** 划掉一个项目的记录。没记过是空操作（不写盘） */
+    forget(root: string): void;
+    private load;
+    /** JSON → 记录。认不出来的一律当没记过，一个字都不说（判据在文件头末节） */
+    private adopt;
+    /**
+     * 原子写入：先写同目录的临时文件再 rename。判据逐字同 `RecentWorkspaces.save()` ——
+     * 写到一半崩溃只会留下一个 `.tmp`，而不是半个 JSON。
+     *
+     * 权限 0o600：这份文件是一张「这台机器上有哪些项目、各自聊到哪段」的清单。
+     */
+    private save;
+}
+
 /**
  * Policy Engine 类型定义 — 简单策略规则。
  */
@@ -15173,6 +15456,14 @@ type AcquireResult = {
     ok: false;
     holder: LockHolder | undefined;
 };
+/** 一条正在跑的任务（{@link listRunningSchedules} 的一行） */
+interface RunningSchedule {
+    scheduleId: string;
+    /** 抢到锁那一刻 —— 界面上那个走秒的数拿它减出来 */
+    startedAt: number;
+    pid: number;
+    host: string;
+}
 /**
  * 抢一把锁。抢不到时把当前持有者一起回去 —— 记 `skipped-overlap` 那条运行记录
  * 的 `reason` 要写清楚是被谁挡的，否则用户看到的只是「跳过了」。
@@ -15180,6 +15471,23 @@ type AcquireResult = {
  * @param clock 可注入的时钟。用例要造「心跳刚好差一毫秒过期」这种边界
  */
 declare function acquireScheduleLock(db: SqliteDatabase, scheduleId: string, clock?: () => number): AcquireResult;
+/**
+ * 现在有哪几条任务在跑（2026-09-15）。
+ *
+ * ## 它是「界面上那个转子」的唯一真源，而这不是随手挑的
+ *
+ * 一次到点触发跑在**另一个进程**里（OS 调度器起的执行器），服务进程完全不知道它
+ * 存在 —— SSE 上没有素材。而**手点「先跑一次」和到点触发跑的是同一段执行器、
+ * 抢的是同一把锁**，所以这张表是唯一一处两种来源都记账的地方。
+ *
+ * 换句话说：不查这张表的话，界面只画得出「你在这个标签页里按的那一下」。
+ *
+ * ⚠️ **只读，绝不写。** 过期的行留给下一次 `acquireScheduleLock` 去夺 ——
+ * 一个读端点顺手删别人的锁，是「查询有副作用」里最难查的那一种。
+ *
+ * @param clock 可注入的时钟，同 {@link acquireScheduleLock}
+ */
+declare function listRunningSchedules(db: SqliteDatabase, clock?: () => number): RunningSchedule[];
 
 /**
  * 触发器的校验、下一次触发时刻、以及生效区间（方案 45 §2.1）。
@@ -15898,6 +16206,30 @@ declare class ScheduleRegistrar {
      * 中间那个窗口里到点了也不会跑），**启用时先改库**（OS 那边启用成功但库里
      * 还写着停用的话，执行器第 1 步会看到 `enabled: false` 然后干净地退 0 ——
      * 表现成「明明启用了却不跑」）。
+     *
+     * ## 🔴 启用 = 「让它到点能跑」，所以 OS 那侧不在就**当场补注册**
+     *
+     * 这一条 2026-09-15 补的，用户那句话点破的：「不能启用就直接能用吗」。
+     *
+     * 在那之前，一条**没注册进 OS** 的任务（`osTaskId` 是空的：当初 `npx` 形态被
+     * 拒过、嵌入宿主当时没给无界面入口、或者用户自己清过 `LaunchAgents`）点「启用」
+     * 只会改库里那一位，然后回一句 `ok: true` —— 界面显示已启用，而它到点根本
+     * 不会被唤起。让用户去「编辑里再保存一次」来触发注册是**实现视角**：保存表单
+     * 会顺带 `register()`，纯属这条路径的巧合，用户没有任何理由知道。
+     *
+     * 所以启用这一支现在有两级兜底，都落在 {@link register} 上（它会重写 plist /
+     * `/F` 覆盖，然后按 `enabled` 把开关摆正）：
+     *
+     * 1. 压根没注册过（`osTaskId` 为空）→ 直接注册；
+     * 2. 注册过但翻不动（典型是 `plist-missing`：那个文件被人删了）→ 重新注册。
+     *
+     * ⚠️ **递给 `register()` 的那一份要把 `enabled` 改成 `true`**：它读的是参数上
+     * 那一格（`toRegisterInput`），而调用方手里的 `def` 是**翻之前**那一份 ——
+     * 原样递过去等于刚注册完又立刻把它 disable 掉。
+     *
+     * 停用那一支不这么办，而且刻意不对称：停用**永远写得下库**（`if (!enabled)`
+     * 那一行在 OS 之后无条件执行），而执行器第 1 步读的就是它 —— 所以 OS 那边失败
+     * 顶多留个壳，「到点不会再跑」仍然成立。启用没有这种兜底，它必须真的成。
      */
     setEnabled(def: ScheduleDefinition, enabled: boolean): Promise<RegisterOutcome>;
     /**
@@ -17099,6 +17431,30 @@ declare class SkillSystem implements SkillSystem$1 {
  *
  * 单个字段坏掉也只丢那个字段（`.catch(undefined)`），不影响同一份里的其余字段 ——
  * 一个写歪的 `prerequisites` 不该把 `description` 一起带走。
+ *
+ * ## 不认识的字段：**默认闭嘴**（2026-09-15 改）
+ *
+ * 原来这里是一张闭集白名单，凡是不在表上的顶层键都报一条「未知配置项」进启动
+ * 诊断。那条规矩把一件正常的事变成了告警：Agent Skills 规范自己的允许集是
+ * `name` / `description` / `license` / `allowed-tools` / `metadata` /
+ * `compatibility`，跟我们这 7 个只对得上 3 个，而 `~/.claude/skills` 正是
+ * `skill-import` 那一屏写死的头号来源（见 [import-source.ts](./import-source.ts)
+ * 文件头，那一轮刚把目录布局这一半打通）。于是**导入一份完全合法的别家技能，
+ * 之后每次启动都要挨几行黄字**，而它们一个都不需要用户做任何事。
+ *
+ * 规范原文就是这么要求运行时的：「spec-compliant runtimes ignore frontmatter
+ * keys they do not recognize」。那张闭集表是 Anthropic 给**写技能的人**用的
+ * 校验器（skill-creator 的 `quick_validate.py`），不是给运行时用的 —— 我们抄的
+ * 时候站错了边。
+ *
+ * 所以改成 {@link suggestKey}：**只报看着像拼错的**。`cli_version` /
+ * `license` / `when_to_use` 这些静默忽略，`descriptoin` 照样报。留着这道网是
+ * 因为 `description` 拼错的代价很具体 —— 技能带着空描述加载、从此不会被模型
+ * 选中，而屏幕上一个字都没有。理由全文在 `misspelledKeyIssues` 上。
+ *
+ * ⚠️ 近似匹配的语料**只有下面 schema 里那 7 个**，刻意不含 `license` /
+ * `allowed-tools` / `compatibility`：我们读了也不用它们，对一个不起作用的字段说
+ * 「是不是想写 license」等于承诺它有效果。拼错一个反正会被忽略的字段，后果是零。
  */
 
 interface SkillFrontmatter {
@@ -18867,4 +19223,4 @@ declare function resolveCodeModeWorker(baseDir: string, exists?: typeof existsSy
  */
 declare function codeModeWorkerPath(): string | undefined;
 
-export { AGENT_ROLE_DIAG_MODULE, ARTIFACT_MAX_TOTAL_BYTES, ARTIFACT_RETENTION_DEFAULTS, ATTACHMENT_MAX_TOTAL_BYTES, ATTACHMENT_RETENTION_DEFAULTS, type AcquireResult, type AgentConfig, AgentLoop, type AgentProvider, type AgentSite, type AgentSiteRef, type AppendMessageInput, ApprovalCache, type ApprovalDecision, type ApprovalScope, type ArtifactOpenRefusal, type ArtifactRetention, type AskQuestionDeps, type AttachmentRetention, BLOCKED_TOOLS, type BackendOptions, type BackendOutcome, type BackgroundTaskSource, type BaseOrigin, type BaseSlot, type BeginTurnInput, type BreakdownInput, BudgetGuard, type BudgetGuardOptions, type BudgetInfo, type BudgetLevel, type BudgetOptions, type BudgetStatus, BudgetStore, type BudgetStoreOptions, type BuildFireArgvInput, type BuildIndexOptions, CHECKPOINT_MAX_TOTAL_BYTES, CLAUDE_EVENT_NAMES, CLAUDE_TOOL_NAMES, CODE_MODE_LIMITS, CODE_MODE_SDK_TAG, CONFIG_KEYS, CURRENT_CONFIG_VERSION, type CachedApproval, type CachedDecision, type CheckpointCapture, type CheckpointFile, CheckpointManager, type CheckpointManagerOptions, type CheckpointManifest, CheckpointStore, type CheckpointStoreOptions, type CheckpointSummary, type ClaudeHooksParseOptions, type CodeModeLimits, type CodeRequest, type CodeResult, CodeSandbox, type CommandHookConfig, type CommandHookResult, type CommandLoadOutcome, type CommandLoadSummary, type CommandResult, type CommandRunner, type CompactionResult, type CompiledRules, type ComplianceDirSpec, type ComplianceDirsSummary, ComplianceEngine, type ComplianceEngineInput, type ComplianceGate, type ComplianceHit, type ComplianceRule, type ComplianceRuleSource, type ComplianceSettings, type ComplianceVerdict, type CompressConfig, type CompressResult, type ConfigMigration, type ConfigOrigins, ContextCompressor, type ContextEngine, type CreateScheduleInput, type CreateSessionInput, DEFAULT_COMPLIANCE_ACTIONS, DEFAULT_COMPLIANCE_SETTINGS, DEFAULT_COMPRESSION_THRESHOLD, DEFAULT_GOAL_MAX_ROUNDS, DEFAULT_MAX_HOLD_CHARS, type DelegateArgs, type DelegateConfig, DelegateManager, type DelegateTaskResult, type DiagnoseOptions, type DiscoverOutcome, type DiscoveredFile, type DoctorReport, type DraftParse, EMPTY_RULES, EPOCH_DISK_LEDGER, EpochConfigSchema, type ExpandOptions, type ExtractOutcome, FTS_TABLES, FTS_TRIGGERS, type FallbackEvent, type FileSlots, type FileSourceKind, type ForkInput, type FrontmatterParse, type FrontmatterSplit, type FtsHealth, type FtsReclaim, type FtsSpace, type FtsTableHealth, GOAL_BLOCK_CODES, type GateAxis, type GateVerdict, type GenerateInput, type GenerateOutput, type Goal, type GoalBlockReason, type GoalClear, type GoalPhase, type GoalPromptView, type GoalRefusal, type GoalRoundResult, GoalService, GoalStore, type GoalToolDeps, type GoalWrite, HEADLESS_AUDIT_CODES, type HeadlessPolicy, type HookConfigEntry, HookManager, type HookManagerOptions, type HookMatcher, type HookSourceKind, type HookSourceStatus, type HookSourcesOptions, type HookSourcesSummary, type HooksParseOutcome, type MemoryManager$1 as IMemoryManager, INSTRUCTION_BUDGET_CHARS, INSTRUCTION_FILES, type SessionManager$1 as ISessionManager, type SkillSystem$1 as ISkillSystem, ImageLoadError, type ImageSize, type ImportDecision, type ImportGate, type ImportNode, type ImportSkipReason, ImportTrustStore, type InstallOptions, type InstallOutcome, type InstallPreview, type InstructionScan, type InstructionSource, type IsolationReason, type IsolationReport, type JsonSchemaDocument, LAUNCHD_LABEL_PREFIX, LOCK_HEARTBEAT_MS, LOCK_STALE_MS, type LayerOutcome, type LayerScalars, type LayerStatus, type LearningContext, type LearningResult, type LearningSkipReason, type LexiconLoadOutcome, type LifecycleOutcome, type ListCandidatesInput, type ListSessionsInput, type ListSessionsOutput, type LoadCommandsOptions, type LoadConfigOptions, type LoadKeybindingsOptions, type LoadKeybindingsResult, type LoadRolesOptions, type LoadedPlugin, type LockHolder, MARKETPLACE_DISPLAY_FIELDS, MARKETPLACE_FILE, MAX_AUDIT_ENTRIES, MAX_COMMAND_DEPTH, MAX_GOAL_MAX_ROUNDS, MAX_IMPORT_DEPTH, MAX_OBJECTIVE_CHARS, MAX_REASON_CHARS, MAX_RECENT_WORKSPACES, MODEL_GIVE_UP_THRESHOLD, MULTIMODAL_DEFAULTS, type ManagedPolicy, ManagedPolicyError, type ManagedSettings, ManagedSettingsSchema, type MarketplaceCatalog, type MarketplaceDisplay, type MarketplaceDisplayField, type MarketplaceEntry, type MarketplaceOutcome, type MarketplaceRecord, type MarketplaceStatus, type MemoryConfig, type MemoryEntry, MemoryManager, MemoryReviewer, type MemorySearchResult, type MemoryTarget, type MemoryWriteResult, type MentionPart, type MentionResolution, type Message, type MessageHit, type MessageRecord, type MessageSurface, type ModelCapability, ModelFailureTracker, type ModelMetaEntry, type ModelPricing, type MultimodalPolicy, NOMINAL_TOTAL_BYTES, NO_REVEALED_TOOLS, type NonInteractiveProbe, type OsTaskSnapshot, type OutputGuard, PACK_EXCLUDES, PACK_MAX_BYTES, PACK_MAX_FILES, PERMISSION_AUDIT_CODES, PLUGIN_LAYOUT, PLUGIN_MANIFEST_FILE, PLUGIN_NAME_PATTERN, PLUGIN_ROOT_ENV, PLUGIN_ROOT_TOKEN, POLICY_DECISIONS, PROBE_VERSION, PROJECT_AGENTS_SUBDIR, PROVIDER_NO_CREDENTIAL, type PackFile, type PackLimits, type PackOutcome, type PackPlan, type PackPlanOutcome, type PermissionAuditCode, type PermissionAuditEntry, type PermissionAuditOutcome, type PermissionAuditScope, type PermissionAuditSnapshot, PermissionManager, type PersistedBudget, type PersistedPart, type PlanApprovalFn, type PlanEnterResult, type PlanModeDeps, PlanModeState, type PlanSettlement, type PluginArtifacts, type PluginAuthor, PluginAuthorSchema, type PluginCommandDir, type PluginCounts, type PluginHookFile, type PluginInventory, type PluginLoadOptions, type PluginManifest, type PluginPathRef, type PluginRecord, type PluginSettingsFile, type PluginSourceType, type PluginStateReadOutcome, PluginStore, type PolicyDirSpec, type PolicyDirsSummary, type PolicyLoadOutcome, type PolicyRule, PolicyRuleSchema, type PricingAt, type PricingOverride, type ProjectContext, type ProjectExtensionInventory, ProviderError, ProviderRouter, type ProviderStreamChunk, type ProviderToolCall$1 as ProviderToolCall, type ProviderWarning, type PruneResult, type QuestionAskFn, RECORDING_KEEP_RUNS, RECORDING_MAX_BYTES, ROLE_FRONTMATTER_SCHEMA, RUN_CODE_TOOL, type ReadMessagesInput, type ReadMessagesOutput, type RecentWorkspace, RecentWorkspaces, type RecordRunInput, type RecorderOptions, type RecoveryAction, type RegisterInput, type RegisterOutcome, type RegistrarOptions, type RegistrationPatch, type RepairOutcome, type ResolveMentionsOptions, type ResolveReferenceInput, type ResolveSettingsOptions, type ResolvedCompression, type ResolvedReference, type ResolvedSource, type ResponseFormat, type RestorePartsOptions, type ReviewIssue, type RewindAction, type RewindDrift, type RewindFilePlan, type RewindOptions, type RewindOutcome, type RewindPreview, type RoleCreateFailure, type RoleCreateInput, type RoleCreateOptions, type RoleCreateOutcome, type RoleLoadOutcome, type RoleLoadSummary, type RoleMergeNotice, type RoleMergeResult, type RoleScope, type RuleMatch, type RuleSuggestion, type RuleVerdict, type RunCodeFailure, type RunCodeInput, type RunCodeOutcome, type RunCodeToolDeps, type RunEstimateInput, type RunInput, type RunResult, SANDBOX_COVERS, SANDBOX_EXCLUDES, SCALAR_KEYS, SCHEDULE_DEFAULTS, SCHEDULE_DEFAULT_ALLOWLIST, SCHEDULE_ISSUE_CODES, SCHTASKS_FOLDER, SESSION_MESSAGES_READ_TOOL, SESSION_MESSAGES_SEARCH_TOOL, SESSION_QUERY_TOOLS, SESSION_SEARCH_TOOL, SESSION_TRACE_TOOL, SETTINGS_LAYER_ORDER, SETTING_WRITE_KEYS, SETTING_WRITE_LAYERS, SKILL_CREATE_TOOL, SKILL_EDIT_TOOL, SKILL_PATCH_TOOL, SKILL_VIEW_TOOL, SKILL_WRITE_FILE_TOOL, SLASH_COMMANDS_DIAG_MODULE, type ScalarKey, type ScanInstructionsOptions, type ScheduleArgvRefusal, type ScheduleArgvResult, type ScheduleArgvWarning, type ScheduleBackend, type ScheduleCliEntry, type ScheduleDraftDeps, type ScheduleDrift, type ScheduleDriftKind, type ScheduleInstallForm, type ScheduleIssue, type ScheduleIssueCode, type ScheduleLock, ScheduleRecorder, ScheduleRegistrar, ScheduleStore, type ScheduleValidation, type SchemaExport, type SearchHit, type SearchInput, type SearchMessagesInput, type SearchMessagesOutput, type SearchOutput, type SearchSessionsInput, type SelectionDeps, type SelfConnector, type SelfIndexInput, type SelfSettings, type Session, type SessionCandidate, type SessionHit, SessionManager, type SessionMentionDeps, type SessionMeta, SessionQueries, SessionReferences, type SessionSearchDeps, type SessionStats, type SessionSurface, type SessionTrace, type SessionVisibility, type SessionVisibilityInput, type SettingApply, type SettingApplyFacts, type SettingChain, type SettingFutile, type SettingLayer, type SettingStep, type SettingValue, type SettingValueKind, type SettingWriteFailure, type SettingWriteKey, type SettingWriteLayer, type SettingWriteOutcome, type SettingWriteRequest, type SettingWriteTarget, type SettingWriteTargetsOptions, type SettingsFile, SettingsFileError, SettingsFileSchema, type SettingsLayer, type SettingsResolution, type ShadowFinding, type ShadowKind, type Skill, type SkillDirSource, type SkillDirSpec, type SkillDirsSummary, type SkillImportConflict, type SkillImportDone, type SkillImportEntry, type SkillImportFailure, type SkillImportForm, type SkillImportOptions, type SkillImportPreview, type SkillImportResult, type SkillIndexEntry, type SkillIndexOptions, type SkillIndexResidency, type SkillIndexStats, SkillLearner, type SkillLearningProvider, type SkillMeta, type SkillStats, SkillSystem, type SkillSystemOptions, type SkillViewDeps, type SkillWriteDeps, type SubAgentRunner, type SubTask, type SubToolCaller, type SummarizeOutput, type SurfaceMessage, type SystemPromptParams, type SystemPromptSegments, TOOL_SEARCH_TOOL, TaskNoticeTracker, type TodoItem, type ToolCall, type ToolConflict, type ToolGate, type ToolNameFidelity, type ToolNameLookup, ToolRegistry, type ToolRevealState, type ToolScope, type ToolSearchDeps, type ToolTableCost, type TraceInput, type TraceNode, TrackerDB, type TrustDecision, type TrustGate, type TrustGateOptions, TrustManager, type TurnRecord, type TurnTiming, type UpdateScheduleInput, type UtilityModelInfo, type ValidateScheduleInput, type VersionCheck, Workspace, type WorkspaceFiles, type WorkspaceIssue, type WorkspaceIssueKind, acquireScheduleLock, addMarketplace, addUsage, admitArtifact, admitArtifacts, affectedPaths, artifactLaunchArgv, artifactOpenRefusal, assertLevelAllowed, blockedRoleTools, buildContextBreakdown, buildFireArgv, buildFtsMatchQuery, buildSchemaExports, buildSystemPrompt, buildTrigramMatchQuery, builtinRoles, checkEpochVersion, checkFtsHealth, checkShadowing, classifyProviderError, clearModelCache, coalesceRecording, codeModeWorkerPath, commandNameFromRelPath, compileRuleLists, compressionOptions, computeCost, computeCostMicros, computeExecHash, countRules, createAllowAllGate, createAllowAllImportGate, createAskQuestionTool, createCodeExecTool, createDelegateTool, createDenyAllGate, createDenyAllImportGate, createGoalTool, createImportGate, createMemoryTool, createPlanModeTools, createRoleFile, createRoleScope, createRunCodeTool, createScheduleDraftTool, createSessionMessagesReadTool, createSessionMessagesSearchTool, createSessionSearchTool, createSessionSearchTools, createSessionTraceTool, createSkillViewTool, createSkillWriteTools, createTodoTool, createToolRevealState, createToolScope, createToolSearchTool, createTrustGate, currentEpochVersion, decideImport, decideTrust, defaultConfig, defaultModelOf, describeArtifactRefusal, describeBackgroundTask, describeHeadlessPolicy, describeIsolation, describeJsonError, diagnoseSchedules, discoverMarkdown, discoverModels, discoverProject, displayCurrency, draftCommandLine, draftWidening, escapeRuleContent, estimateImageTokens, estimateRunTokens, estimateTokens, evaluateSelection, expandCommand, expandImports, explainSetting, extractArchive, findInstructionFiles, findProjectInstructions, findRole, formatBytes, formatSkillIndex, formatUsd, gateForTool, getCapability, getConfigIssues, getConfigOrigins, getImportGate, getTrustGate, hasDedicatedExecContent, hasExecTierContent, hasPromptCaching, hasProviderCredentials, hasReadTierContent, imageFromBase64, imageFromPath, imagePartTokens, importSkills, installPlugin, instructionDirs, instructionNotices, intervalSlots, inventoryProjectExtensions, inventoryTotal, isBlockCode, isCodeModeDeferred, isEmptyRules, isGoalPhase, isNonInteractive, isReadOnlySubCall, isSettingWriteLayer, isValidPluginName, isWithinWindow, isWritableSettingKey, labelSlug, layerRank, listSessionCandidates, listWorkspaceFiles, loadCommandDefinitions, loadCommandFile, loadCommands, loadConfig, loadHookSources, loadKeybindings, loadLexiconDir, loadLexiconFiles, loadPlugins, loadPolicyFiles, loadPolicyRules, loadRoleDefinitions, loadRoleDir, loadedImports, localDateString, managedSwitchNotes, mapClaudeToolName, mapEpochToolName, mapOperationType, matchPreauthorization, matchRuleLists, matchesHook, mentionsPluginRoot, mergeHeadlessPolicy, mergeRoles, mergeSchedulePatch, microsToUsd, modelListCandidates, needsAllowlist, nextFallbackModel, nextRunAt, noConfigOrigins, noManagedPolicy, noPlugins, openArtifact, originOf, packFileName, packPlugin, parseClaudeSettingsHooks, parseClock, parseDate, parseFrontmatter, parseHooksConfig, parseHooksConfigVerbose, parseImportLine, parseModelList, parseRoleDefinition, parseScheduleDraft, parseSkillFrontmatter, parseTrigger, pendingImageTokens, persistParts, persistToolResults, persistedUsage, planPack, previewSkillImport, pricingFor, projectEntryForDisplay, pruneArtifacts, pruneAttachments, pruneRecordings, pruneSchedules, readImageSize, readMarketplaces, readPluginManifest, readPluginRecords, readProviderKeyEnv, readRecording, readSessionSurface, reclaimFtsSpace, redactLine, refreshOpenRouterMetadata, removeMarketplace, removeSessionArtifacts, removeSessionAttachments, renderImportTree, renderProjectContext, renderSdkDeclaration, renderSelfIndex, repairSchedules, resolveArtifactRetention, resolveCodeModeWorker, resolveComplianceDirs, resolveEntrySource, resolveInWorkspace, resolveMarketplaceRef, resolveMentions, resolveMultimodalPolicy, resolvePolicyDirs, resolvePricingAt, resolveProjectRoot, resolveScheduleBackend, resolveSessionReference, resolveSessionVisibility, resolveSettings, resolveSkillDirs, resolveSource, resolveTar, resolveWorkspace, restoreParts, revealScopedProvider, roleScopedProvider, roleSourceLabel, ruleCovers, ruleFromString, ruleToString, runCode, runCommand, sanitizeArgNames, sanitizeCommand, sanitizeFtsQuery, sanitizePath, sanitizeToolOutput, scanInstructions, scanPluginDir, scanSkillDirs, searchMarketplaces, setDisplayCurrency, setImportGate, setPluginEnabled, setTrustGate, settingValueChoices, settingValueKind, settingWriteApply, settingWriteLayers, settingWriteTargets, skillIndexDescription, skillIndexResidency, skillIndexStats, sniffMediaType, splitFrontmatter, staticToolProvider, stripArtifactData, substitutePluginRoot, suggestRuleFromApproval, systemOpenArgv, systemPromptSegments, toPosix, toolDefinitionTokens, toolMatches, toolTableTokens, totalTokens, traceSession, triggerPeriodMs, unescapeRuleContent, uninstallPlugin, unknownRoleSkills, unknownRoleTools, unloadedInstructionFiles, updateMarketplace, updatePlugin, usdToMicros, validateSchedule, validateTrigger, validateWindow, withGoalCompression, withGoalPrompt, workspaceDisplayPath, writeSettingValue };
+export { AGENT_ROLE_DIAG_MODULE, ARTIFACT_MAX_TOTAL_BYTES, ARTIFACT_RETENTION_DEFAULTS, ATTACHMENT_MAX_TOTAL_BYTES, ATTACHMENT_RETENTION_DEFAULTS, type AcquireResult, type AgentConfig, AgentLoop, type AgentProvider, type AgentSite, type AgentSiteRef, type AppendMessageInput, ApprovalCache, type ApprovalDecision, type ApprovalScope, type ArtifactOpenRefusal, type ArtifactRetention, type AskQuestionDeps, type AttachmentRetention, BLOCKED_TOOLS, type BackendOptions, type BackendOutcome, type BackgroundTaskSource, type BaseOrigin, type BaseSlot, type BeginTurnInput, type BreakdownInput, BudgetGuard, type BudgetGuardOptions, type BudgetInfo, type BudgetLevel, type BudgetOptions, type BudgetStatus, BudgetStore, type BudgetStoreOptions, type BuildFireArgvInput, type BuildIndexOptions, CHECKPOINT_MAX_TOTAL_BYTES, CLAUDE_EVENT_NAMES, CLAUDE_TOOL_NAMES, CODE_MODE_LIMITS, CODE_MODE_SDK_TAG, CONFIG_KEYS, CURRENT_CONFIG_VERSION, type CachedApproval, type CachedDecision, type CheckpointCapture, type CheckpointFile, CheckpointManager, type CheckpointManagerOptions, type CheckpointManifest, CheckpointStore, type CheckpointStoreOptions, type CheckpointSummary, type ClaudeHooksParseOptions, type CodeModeLimits, type CodeRequest, type CodeResult, CodeSandbox, type CommandHookConfig, type CommandHookResult, type CommandLoadOutcome, type CommandLoadSummary, type CommandResult, type CommandRunner, type CompactionResult, type CompiledRules, type ComplianceDirSpec, type ComplianceDirsSummary, ComplianceEngine, type ComplianceEngineInput, type ComplianceGate, type ComplianceHit, type ComplianceRule, type ComplianceRuleSource, type ComplianceSettings, type ComplianceVerdict, type CompressConfig, type CompressResult, type ConfigMigration, type ConfigOrigins, ContextCompressor, type ContextEngine, type CreateScheduleInput, type CreateSessionInput, DEFAULT_COMPLIANCE_ACTIONS, DEFAULT_COMPLIANCE_SETTINGS, DEFAULT_COMPRESSION_THRESHOLD, DEFAULT_GOAL_MAX_ROUNDS, DEFAULT_MAX_HOLD_CHARS, type DelegateArgs, type DelegateConfig, DelegateManager, type DelegateTaskResult, type DiagnoseOptions, type DiscoverOutcome, type DiscoveredFile, type DoctorReport, type DraftParse, EMPTY_RULES, EPOCH_DISK_LEDGER, EpochConfigSchema, type ExpandOptions, type ExtractOutcome, FTS_TABLES, FTS_TRIGGERS, type FallbackEvent, type FileSlots, type FileSourceKind, type ForkInput, type FrontmatterParse, type FrontmatterSplit, type FtsHealth, type FtsReclaim, type FtsSpace, type FtsTableHealth, GOAL_BLOCK_CODES, type GateAxis, type GateVerdict, type GenerateInput, type GenerateOutput, type Goal, type GoalBlockReason, type GoalClear, type GoalPhase, type GoalPromptView, type GoalRefusal, type GoalRoundResult, GoalService, GoalStore, type GoalToolDeps, type GoalWrite, HEADLESS_AUDIT_CODES, type HeadlessPolicy, type HookConfigEntry, HookManager, type HookManagerOptions, type HookMatcher, type HookSourceKind, type HookSourceStatus, type HookSourcesOptions, type HookSourcesSummary, type HooksParseOutcome, type MemoryManager$1 as IMemoryManager, INSTRUCTION_BUDGET_CHARS, INSTRUCTION_FILES, type SessionManager$1 as ISessionManager, type SkillSystem$1 as ISkillSystem, ImageLoadError, type ImageSize, type ImportDecision, type ImportGate, type ImportNode, type ImportSkipReason, ImportTrustStore, type InstallOptions, type InstallOutcome, type InstallPreview, type InstructionScan, type InstructionSource, type IsolationReason, type IsolationReport, type JsonSchemaDocument, LAUNCHD_LABEL_PREFIX, LOCK_HEARTBEAT_MS, LOCK_STALE_MS, type LastOpenSession, LastOpenSessions, type LayerOutcome, type LayerScalars, type LayerStatus, type LearningContext, type LearningResult, type LearningSkipReason, type LexiconLoadOutcome, type LifecycleOutcome, type ListCandidatesInput, type ListSessionsInput, type ListSessionsOutput, type LoadCommandsOptions, type LoadConfigOptions, type LoadKeybindingsOptions, type LoadKeybindingsResult, type LoadRolesOptions, type LoadedPlugin, type LockHolder, MARKETPLACE_DISPLAY_FIELDS, MARKETPLACE_FILE, MAX_AUDIT_ENTRIES, MAX_COMMAND_DEPTH, MAX_GOAL_MAX_ROUNDS, MAX_IMPORT_DEPTH, MAX_LAST_OPEN_SESSIONS, MAX_OBJECTIVE_CHARS, MAX_REASON_CHARS, MAX_RECENT_WORKSPACES, MODEL_GIVE_UP_THRESHOLD, MULTIMODAL_DEFAULTS, type ManagedPolicy, ManagedPolicyError, type ManagedSettings, ManagedSettingsSchema, type MarketplaceCatalog, type MarketplaceDisplay, type MarketplaceDisplayField, type MarketplaceEntry, type MarketplaceOutcome, type MarketplaceRecord, type MarketplaceStatus, type MemoryConfig, type MemoryEntry, MemoryManager, MemoryReviewer, type MemorySearchResult, type MemoryTarget, type MemoryWriteResult, type MentionPart, type MentionResolution, type Message, type MessageHit, type MessageRecord, type MessageSurface, type ModelCapability, ModelFailureTracker, type ModelMetaEntry, type ModelPricing, type MultimodalPolicy, NOMINAL_TOTAL_BYTES, NO_REVEALED_TOOLS, type NonInteractiveProbe, type OsTaskSnapshot, type OutputGuard, PACK_EXCLUDES, PACK_MAX_BYTES, PACK_MAX_FILES, PERMISSION_AUDIT_CODES, PLUGIN_LAYOUT, PLUGIN_MANIFEST_FILE, PLUGIN_MANIFEST_KEYS, PLUGIN_NAME_PATTERN, PLUGIN_ROOT_ENV, PLUGIN_ROOT_TOKEN, PLUGIN_VISIBILITY, POLICY_DECISIONS, PROBE_VERSION, PROJECT_AGENTS_SUBDIR, PROVIDER_NO_CREDENTIAL, type PackFile, type PackLimits, type PackOutcome, type PackPlan, type PackPlanOutcome, type PermissionAuditCode, type PermissionAuditEntry, type PermissionAuditOutcome, type PermissionAuditScope, type PermissionAuditSnapshot, PermissionManager, type PersistedBudget, type PersistedPart, type PlanApprovalFn, type PlanEnterResult, type PlanModeDeps, PlanModeState, type PlanSettlement, type PluginArtifacts, type PluginAuthor, PluginAuthorSchema, type PluginCommandDir, type PluginCounts, type PluginHookFile, type PluginInventory, type PluginLoadOptions, type PluginManifest, type PluginPathRef, type PluginRecord, type PluginSettingsFile, type PluginSourceType, type PluginStateReadOutcome, PluginStore, type PluginVisibility, type PolicyDirSpec, type PolicyDirsSummary, type PolicyLoadOutcome, type PolicyRule, PolicyRuleSchema, type PricingAt, type PricingOverride, type ProjectContext, type ProjectExtensionInventory, ProviderError, ProviderRouter, type ProviderStreamChunk, type ProviderToolCall$1 as ProviderToolCall, type ProviderWarning, type PruneResult, type QuestionAskFn, RECORDING_KEEP_RUNS, RECORDING_MAX_BYTES, ROLE_FRONTMATTER_SCHEMA, RUN_CODE_TOOL, type ReadMessagesInput, type ReadMessagesOutput, type RecentWorkspace, RecentWorkspaces, type RecordRunInput, type RecorderOptions, type RecoveryAction, type RegisterInput, type RegisterOutcome, type RegistrarOptions, type RegistrationPatch, type RepairOutcome, type ResolveMentionsOptions, type ResolveReferenceInput, type ResolveSettingsOptions, type ResolvedCompression, type ResolvedReference, type ResolvedSource, type ResponseFormat, type RestorePartsOptions, type ReviewIssue, type RewindAction, type RewindDrift, type RewindFilePlan, type RewindOptions, type RewindOutcome, type RewindPreview, type RoleCreateFailure, type RoleCreateInput, type RoleCreateOptions, type RoleCreateOutcome, type RoleLoadOutcome, type RoleLoadSummary, type RoleMergeNotice, type RoleMergeResult, type RoleScope, type RuleMatch, type RuleSuggestion, type RuleVerdict, type RunCodeFailure, type RunCodeInput, type RunCodeOutcome, type RunCodeToolDeps, type RunEstimateInput, type RunInput, type RunResult, type RunningSchedule, SANDBOX_COVERS, SANDBOX_EXCLUDES, SCALAR_KEYS, SCHEDULE_DEFAULTS, SCHEDULE_DEFAULT_ALLOWLIST, SCHEDULE_ISSUE_CODES, SCHTASKS_FOLDER, SESSION_MESSAGES_READ_TOOL, SESSION_MESSAGES_SEARCH_TOOL, SESSION_QUERY_TOOLS, SESSION_SEARCH_TOOL, SESSION_TRACE_TOOL, SETTINGS_LAYER_ORDER, SETTING_WRITE_KEYS, SETTING_WRITE_LAYERS, SKILL_CREATE_TOOL, SKILL_EDIT_TOOL, SKILL_PATCH_TOOL, SKILL_VIEW_TOOL, SKILL_WRITE_FILE_TOOL, SLASH_COMMANDS_DIAG_MODULE, type ScalarKey, type ScanInstructionsOptions, type ScheduleArgvRefusal, type ScheduleArgvResult, type ScheduleArgvWarning, type ScheduleBackend, type ScheduleCliEntry, type ScheduleDraftDeps, type ScheduleDrift, type ScheduleDriftKind, type ScheduleInstallForm, type ScheduleIssue, type ScheduleIssueCode, type ScheduleLock, ScheduleRecorder, ScheduleRegistrar, ScheduleStore, type ScheduleValidation, type SchemaExport, type SearchHit, type SearchInput, type SearchMessagesInput, type SearchMessagesOutput, type SearchOutput, type SearchSessionsInput, type SelectionDeps, type SelfConnector, type SelfIndexInput, type SelfSettings, type Session, type SessionCandidate, type SessionHit, SessionManager, type SessionMentionDeps, type SessionMeta, SessionQueries, SessionReferences, type SessionSearchDeps, type SessionStats, type SessionSurface, type SessionTrace, type SessionVisibility, type SessionVisibilityInput, type SettingApply, type SettingApplyFacts, type SettingChain, type SettingFutile, type SettingLayer, type SettingStep, type SettingValue, type SettingValueKind, type SettingWriteFailure, type SettingWriteKey, type SettingWriteLayer, type SettingWriteOutcome, type SettingWriteRequest, type SettingWriteTarget, type SettingWriteTargetsOptions, type SettingsFile, SettingsFileError, SettingsFileSchema, type SettingsLayer, type SettingsResolution, type ShadowFinding, type ShadowKind, type Skill, type SkillDirSource, type SkillDirSpec, type SkillDirsSummary, type SkillImportConflict, type SkillImportDone, type SkillImportEntry, type SkillImportFailure, type SkillImportForm, type SkillImportOptions, type SkillImportPreview, type SkillImportResult, type SkillIndexEntry, type SkillIndexOptions, type SkillIndexResidency, type SkillIndexStats, SkillLearner, type SkillLearningProvider, type SkillMeta, type SkillStats, SkillSystem, type SkillSystemOptions, type SkillViewDeps, type SkillWriteDeps, type SubAgentRunner, type SubTask, type SubToolCaller, type SummarizeOutput, type SurfaceMessage, type SystemPromptParams, type SystemPromptSegments, TOOL_SEARCH_TOOL, TaskNoticeTracker, type TodoItem, type ToolCall, type ToolConflict, type ToolGate, type ToolNameFidelity, type ToolNameLookup, ToolRegistry, type ToolRevealState, type ToolScope, type ToolSearchDeps, type ToolTableCost, type TraceInput, type TraceNode, TrackerDB, type TrustDecision, type TrustGate, type TrustGateOptions, TrustManager, type TurnRecord, type TurnTiming, type UpdateScheduleInput, type UtilityModelInfo, type ValidateScheduleInput, type VersionCheck, Workspace, type WorkspaceFiles, type WorkspaceIssue, type WorkspaceIssueKind, acquireScheduleLock, addMarketplace, addUsage, admitArtifact, admitArtifacts, affectedPaths, artifactLaunchArgv, artifactOpenRefusal, assertLevelAllowed, blockedRoleTools, buildContextBreakdown, buildFireArgv, buildFtsMatchQuery, buildSchemaExports, buildSystemPrompt, buildTrigramMatchQuery, builtinRoles, checkEpochVersion, checkFtsHealth, checkShadowing, classifyProviderError, clearModelCache, coalesceRecording, codeModeWorkerPath, commandNameFromRelPath, compileRuleLists, compressionOptions, computeCost, computeCostMicros, computeExecHash, countRules, createAllowAllGate, createAllowAllImportGate, createAskQuestionTool, createCodeExecTool, createDelegateTool, createDenyAllGate, createDenyAllImportGate, createGoalTool, createImportGate, createMemoryTool, createPlanModeTools, createRoleFile, createRoleScope, createRunCodeTool, createScheduleDraftTool, createSessionMessagesReadTool, createSessionMessagesSearchTool, createSessionSearchTool, createSessionSearchTools, createSessionTraceTool, createSkillViewTool, createSkillWriteTools, createTodoTool, createToolRevealState, createToolScope, createToolSearchTool, createTrustGate, currentEpochVersion, decideImport, decideTrust, defaultConfig, defaultModelOf, describeArtifactRefusal, describeBackgroundTask, describeHeadlessPolicy, describeIsolation, describeJsonError, diagnoseSchedules, discoverMarkdown, discoverModels, discoverProject, displayCurrency, draftCommandLine, draftWidening, escapeRuleContent, estimateImageTokens, estimateRunTokens, estimateTokens, evaluateSelection, expandCommand, expandImports, explainSetting, extractArchive, findInstructionFiles, findProjectInstructions, findRole, formatBytes, formatSkillIndex, formatUsd, gateForTool, getCapability, getConfigIssues, getConfigOrigins, getImportGate, getTrustGate, hasDedicatedExecContent, hasExecTierContent, hasPromptCaching, hasProviderCredentials, hasReadTierContent, imageFromBase64, imageFromPath, imagePartTokens, importSkills, installPlugin, instructionDirs, instructionNotices, intervalSlots, inventoryProjectExtensions, inventoryTotal, isBlockCode, isCodeModeDeferred, isEmptyRules, isGoalPhase, isNonInteractive, isReadOnlySubCall, isSettingWriteLayer, isValidPluginName, isWithinWindow, isWritableSettingKey, labelSlug, layerRank, listRunningSchedules, listSessionCandidates, listWorkspaceFiles, loadCommandDefinitions, loadCommandFile, loadCommands, loadConfig, loadHookSources, loadKeybindings, loadLexiconDir, loadLexiconFiles, loadPlugins, loadPolicyFiles, loadPolicyRules, loadRoleDefinitions, loadRoleDir, loadedImports, localDateString, managedSwitchNotes, mapClaudeToolName, mapEpochToolName, mapOperationType, matchPreauthorization, matchRuleLists, matchesHook, mentionsPluginRoot, mergeHeadlessPolicy, mergeRoles, mergeSchedulePatch, microsToUsd, modelListCandidates, needsAllowlist, nextFallbackModel, nextRunAt, noConfigOrigins, noManagedPolicy, noPlugins, openArtifact, originOf, packFileName, packPlugin, parseClaudeSettingsHooks, parseClock, parseDate, parseFrontmatter, parseHooksConfig, parseHooksConfigVerbose, parseImportLine, parseModelList, parseRoleDefinition, parseScheduleDraft, parseSkillFrontmatter, parseTrigger, pendingImageTokens, persistParts, persistToolResults, persistedUsage, planPack, previewSkillImport, pricingFor, projectEntryForDisplay, pruneArtifacts, pruneAttachments, pruneRecordings, pruneSchedules, readImageSize, readMarketplaces, readPluginManifest, readPluginRecords, readProviderKeyEnv, readRecording, readSessionSurface, reclaimFtsSpace, redactLine, refreshOpenRouterMetadata, removeMarketplace, removeSessionArtifacts, removeSessionAttachments, renderImportTree, renderProjectContext, renderSdkDeclaration, renderSelfIndex, repairSchedules, resolveArtifactRetention, resolveCodeModeWorker, resolveComplianceDirs, resolveEntrySource, resolveInWorkspace, resolveMarketplaceRef, resolveMentions, resolveMultimodalPolicy, resolvePolicyDirs, resolvePricingAt, resolveProjectRoot, resolveScheduleBackend, resolveSessionReference, resolveSessionVisibility, resolveSettings, resolveSkillDirs, resolveSource, resolveTar, resolveWorkspace, restoreParts, revealScopedProvider, roleScopedProvider, roleSourceLabel, ruleCovers, ruleFromString, ruleToString, runCode, runCommand, sanitizeArgNames, sanitizeCommand, sanitizeFtsQuery, sanitizePath, sanitizeToolOutput, scanInstructions, scanPluginDir, scanSkillDirs, searchMarketplaces, setDisplayCurrency, setImportGate, setPluginEnabled, setTrustGate, settingValueChoices, settingValueKind, settingWriteApply, settingWriteLayers, settingWriteTargets, skillIndexDescription, skillIndexResidency, skillIndexStats, sniffMediaType, splitFrontmatter, staticToolProvider, stripArtifactData, substitutePluginRoot, suggestRuleFromApproval, systemOpenArgv, systemPromptSegments, toPosix, toolDefinitionTokens, toolMatches, toolTableTokens, totalTokens, traceSession, triggerPeriodMs, unescapeRuleContent, uninstallPlugin, unknownRoleSkills, unknownRoleTools, unloadedInstructionFiles, updateMarketplace, updatePlugin, usdToMicros, validateSchedule, validateTrigger, validateWindow, withGoalCompression, withGoalPrompt, workspaceDisplayPath, writeSettingValue };