@epoch-agent/core 0.10.0 → 0.11.0

package/dist/index.js

@@ -2,7 +2,7 @@ import { existsSync, statSync, readdirSync, readFileSync, mkdirSync, writeFileSy
 import { homedir, platform, tmpdir, hostname } from 'os';
 import { join, dirname, resolve, relative, isAbsolute, sep, extname, basename } from 'path';
 import { execFile, execSync, execFileSync, spawn } from 'child_process';
-import { createLogger, dbPath, resolveHomeDir, DEFAULT_MAX_TURNS, PROJECT_DIR_NAME, t, openDatabase, migrate, releaseDatabase, unknownKeyIssues, parseLenient, issueDetails, splitWords, checkpointsDir, pluginsDir, projectHooksPath, projectClaudeSettingsPath, projectClaudeLocalSettingsPath, projectSettingsPath, projectLocalSettingsPath, projectPoliciesDir, trustedImportsPath, budgetStatePath, artifactsDir, UNLIMITED_TURNS, turnLimitOf, configPath, managedSettingsPath, getSecretValues, listStoredSecretNames, maskApiKey, setSectionField, isInWorkspace, workspacesPath, automationLogsDir, projectComplianceDir, projectSkillsDir, attachmentsDir, trustPath, projectCommandsDir, detectBackend, EXEC_PATH_AS_NODE_ENV, isolate, createStreamDecoder, parseShellCommand, writeArtifact, envPath, checkDangerousCommand, checkObfuscation, countCodePoints, keepHeadAndTail, normalizeForMatch, isReadOnlyCommand, CODE_EXEC_ROOTS, headCodePoints, tailCodePoints } from '@epoch-agent/infra';
+import { createLogger, dbPath, resolveHomeDir, DEFAULT_MAX_TURNS, PROJECT_DIR_NAME, t, suggestKey, misspelledKeyIssues, openDatabase, migrate, releaseDatabase, parseLenient, issueDetails, splitWords, unknownKeyIssues, checkpointsDir, pluginsDir, projectHooksPath, projectClaudeSettingsPath, projectClaudeLocalSettingsPath, projectSettingsPath, projectLocalSettingsPath, projectPoliciesDir, trustedImportsPath, budgetStatePath, artifactsDir, UNLIMITED_TURNS, turnLimitOf, configPath, managedSettingsPath, getSecretValues, listStoredSecretNames, maskApiKey, setSectionField, isInWorkspace, workspacesPath, samePath, lastSessionsPath, automationLogsDir, projectComplianceDir, projectSkillsDir, attachmentsDir, trustPath, projectCommandsDir, detectBackend, EXEC_PATH_AS_NODE_ENV, isolate, createStreamDecoder, parseShellCommand, writeArtifact, envPath, checkDangerousCommand, checkObfuscation, countCodePoints, keepHeadAndTail, normalizeForMatch, isReadOnlyCommand, CODE_EXEC_ROOTS, headCodePoints, tailCodePoints } from '@epoch-agent/infra';
 export { IS_WINDOWS, WINDOWS_HIDE_FLAGS, buildBwrapArgs, buildProfile, checkDangerousCommand, checkObfuscation, createLogger, detectBackend, getDefaultShell, getPythonCommand, isInWorkspace, isReadOnlyCommand, isolate, maskApiKey, probeBubblewrap, probeSeatbelt, complianceDir as resolveComplianceDir, policiesDir as resolvePoliciesDir, setLogLevel } from '@epoch-agent/infra';
 import { PROVIDER_TYPES, OPERATION_TYPES as OPERATION_TYPES$1, COMPLIANCE_CATEGORIES, COMPLIANCE_ACTIONS, SEARCH_PROVIDER_TYPES, CURRENCIES, LANGS, PERMISSION_LEVELS, SHELL_KINDS, ToolExposure, MAX_OPTIONS, MIN_OPTIONS, MAX_HEADER_CHARS, MAX_QUESTIONS, SCHEDULE_INTERVAL_MINUTES, isPermissionLevel, SCHEDULE_DRAFT_TOOL, isValidAgentRoleName, DEFAULT_AGENT_ROLE, isValidCommandName, RESERVED_COMMAND_NAMES, parseModelRef, isWirePluginArchiveName, systemNote, formatMoney, totalUsageTokens, NOOP_TELEMETRY, METRIC, contentToText, GEN_AI, isPromptOversize, promptTokens, apiKeyEnvVar, PROVIDER_INFOS, isProviderType, API_KEY_ENV_VARS, KEY_ACTIONS, tableOf, perAction, isKeyAction, parseSequence, RESERVED_CHORDS, chordId, sequenceId, ACTION_CONTEXTS, SEQUENCE_CONTEXTS, assertNeverPart, MAX_ATTACH_FILES, MAX_ATTACH_TOTAL_BYTES, MAX_SESSION_REFS, utf8ByteLength, truncateToBudget, attachSessionSurface, isContextNearlyFull, isOperationType, normalizeApproval, imagePartOmittedSummary, MAX_ATTACH_BYTES, SIMULTANEOUS_CONTEXTS, SESSION_REFERENCE_ERROR_CODES, filePartSummary, sessionPartSummary } from '@epoch-agent/protocol';
 export { API_KEY_ENV_VARS, COMPLIANCE_ACTIONS, COMPLIANCE_CATEGORIES, MAX_ATTACH_BYTES, MAX_ATTACH_FILES, MAX_ATTACH_TOTAL_BYTES, MAX_SESSION_ATTACH_BYTES, MAX_SESSION_REFS, OPERATION_TYPES, PERMISSION_LEVELS, PLAN_OUTCOMES, PROVIDER_INFOS, PROVIDER_TYPES, ToolExposure, apiKeyEnvVar, extractAllMentions, extractMentions, extractSessionMentions, getProviderInfo, isOperationType, isPermissionLevel, isPlanOutcome, isProviderType, normalizeApproval } from '@epoch-agent/protocol';
@@ -264,7 +264,7 @@ function createLaunchdBackend(opts = {}) {
         mkdirSync(input.logDir, { recursive: true });
         writeFileSync(path, renderPlist(label, input), "utf-8");
       } catch (err) {
-        return { ok: false, detail: `plist-write-failed: ${describe6(err)}` };
+        return { ok: false, detail: `plist-write-failed: ${describe7(err)}` };
       }
       await run("launchctl", ["bootout", `${guiDomain()}/${label}`]);
       const toggle = await backend.setEnabled(label, input.enabled);
@@ -280,7 +280,7 @@ function createLaunchdBackend(opts = {}) {
       try {
         rmSync(plistPath(label), { force: true });
       } catch (err) {
-        return { ok: false, detail: `plist-remove-failed: ${describe6(err)}` };
+        return { ok: false, detail: `plist-remove-failed: ${describe7(err)}` };
       }
       return { ok: true };
     },
@@ -435,7 +435,7 @@ function detailOf2(what, res) {
   const msg = (res.stderr || res.stdout).trim();
   return `${what} exit ${res.code}${msg ? `: ${msg}` : ""}`;
 }
-function describe6(err) {
+function describe7(err) {
   return err instanceof Error ? err.message : String(err);
 }
 var LAUNCHD_LABEL_PREFIX;
@@ -475,10 +475,10 @@ function intervalSlots(everyMinutes) {
 var runCommand2;
 var init_backend = __esm({
   "src/schedule/os/backend.ts"() {
-    runCommand2 = (file, args) => new Promise((resolve15) => {
+    runCommand2 = (file, args) => new Promise((resolve16) => {
       execFile(file, [...args], { encoding: "buffer", windowsHide: true }, (err, stdout, stderr) => {
         const code = err && typeof err.code === "number" ? err.code ?? 1 : err ? 1 : 0;
-        resolve15({ code, stdout: decodeOutput(stdout), stderr: decodeOutput(stderr) });
+        resolve16({ code, stdout: decodeOutput(stdout), stderr: decodeOutput(stderr) });
       });
     });
   }
@@ -629,7 +629,7 @@ var ToolRegistry = class {
     this.addTool(tool, source);
   }
   registerTools(tools, source = "builtin") {
-    for (const t78 of tools) this.addTool(t78, source);
+    for (const t79 of tools) this.addTool(t79, source);
   }
   addTool(tool, source) {
     const existing = this.tools.get(tool.name);
@@ -678,14 +678,14 @@ var ToolRegistry = class {
     return isCodeModeDeferred(tool) ? ToolExposure.Deferred : declared;
   }
   exposed() {
-    return this.list().filter((t78) => this.exposureOf(t78) === ToolExposure.Direct);
+    return this.list().filter((t79) => this.exposureOf(t79) === ToolExposure.Direct);
   }
   byExposure(exposure) {
-    return this.list().filter((t78) => this.exposureOf(t78) === exposure);
+    return this.list().filter((t79) => this.exposureOf(t79) === exposure);
   }
   codeModeDeclared() {
     if (!this.codeMode) return [];
-    return this.list().filter((t78) => isCodeModeDeferred(t78));
+    return this.list().filter((t79) => isCodeModeDeferred(t79));
   }
   sourceOf(name) {
     return this.tools.get(name)?.source;
@@ -734,7 +734,7 @@ var ToolRegistry = class {
 function staticToolProvider(tools) {
   return {
     list: () => tools,
-    get: (name) => tools.find((t78) => t78.name === name)
+    get: (name) => tools.find((t79) => t79.name === name)
   };
 }
 var log = createLogger("tokenizer");
@@ -1146,7 +1146,7 @@ var DelegateManager = class {
   }
   normalizeTasks(args) {
     if (args.tasks && args.tasks.length > 0) {
-      return args.role ? args.tasks.map((t78) => ({ ...t78, role: t78.role ?? args.role })) : args.tasks;
+      return args.role ? args.tasks.map((t79) => ({ ...t79, role: t79.role ?? args.role })) : args.tasks;
     }
     if (args.goal) return [{ goal: args.goal, ...args.role ? { role: args.role } : {} }];
     return [];
@@ -1156,7 +1156,7 @@ var DelegateManager = class {
     for (let i = 0; i < tasks.length; i += maxConcurrent) {
       const batch = tasks.slice(i, i + maxConcurrent);
       const batchResults = await Promise.allSettled(
-        batch.map((t78) => this.runSingleTask(t78, parentSessionId))
+        batch.map((t79) => this.runSingleTask(t79, parentSessionId))
       );
       for (const r of batchResults) {
         if (r.status === "fulfilled") {
@@ -1297,21 +1297,21 @@ function createDelegateTool(runner, config, roles) {
     operation: "command",
     describeTarget: (args) => {
       const tasks = Array.isArray(args["tasks"]) ? args["tasks"] : [];
-      const goals = tasks.map((t78) => String(t78["goal"] ?? ""));
+      const goals = tasks.map((t79) => String(t79["goal"] ?? ""));
       const single = typeof args["goal"] === "string" ? args["goal"] : "";
       return [...goals, single].filter(Boolean).join(" | ");
     },
     async execute(args, ctx) {
       const start = Date.now();
       const rawTasks = Array.isArray(args["tasks"]) ? args["tasks"] : void 0;
-      const tasks = rawTasks?.map((t78) => {
-        const o = t78;
+      const tasks = rawTasks?.map((t79) => {
+        const o = t79;
         return {
           goal: String(o["goal"] ?? "").trim(),
           context: String(o["context"] ?? ""),
           ...typeof o["role"] === "string" && o["role"].trim() ? { role: o["role"].trim() } : {}
         };
-      }).filter((t78) => t78.goal.length > 0);
+      }).filter((t79) => t79.goal.length > 0);
       const goal = typeof args["goal"] === "string" ? args["goal"].trim() : "";
       const topRole = typeof args["role"] === "string" ? args["role"].trim() : "";
       if ((!tasks || tasks.length === 0) && !goal) {
@@ -1327,7 +1327,7 @@ function createDelegateTool(runner, config, roles) {
         };
       }
       const known = listRoles();
-      const requested = [...(tasks ?? []).map((t78) => t78.role), topRole].filter(
+      const requested = [...(tasks ?? []).map((t79) => t79.role), topRole].filter(
         (r) => Boolean(r)
       );
       const unknown = [...new Set(requested)].filter((r) => !known.some((k) => k.name === r));
@@ -1500,8 +1500,8 @@ function createGoalTool(deps) {
 }
 var VALID_TARGETS = ["memory", "user"];
 var VALID_ACTIONS = ["add", "replace", "remove", "search", "read", "budget"];
-function isValidTarget(t78) {
-  return typeof t78 === "string" && VALID_TARGETS.includes(t78);
+function isValidTarget(t79) {
+  return typeof t79 === "string" && VALID_TARGETS.includes(t79);
 }
 function isValidAction(a) {
   return VALID_ACTIONS.includes(a);
@@ -1755,17 +1755,25 @@ async function runCode(input) {
     resourceLimits: { maxOldGenerationSizeMb: limits.maxMemoryMb }
   });
   let printed = "";
-  const collect3 = (chunk) => {
-    if (printed.length >= limits.maxPrintChars) return;
-    printed = (printed + String(chunk)).slice(0, limits.maxPrintChars);
+  const take = (text) => {
+    if (!text || printed.length >= limits.maxPrintChars) return;
+    printed = (printed + text).slice(0, limits.maxPrintChars);
+  };
+  const attach = (stream) => {
+    let decoder = null;
+    stream.on("data", (chunk) => {
+      decoder ??= createStreamDecoder();
+      take(decoder.write(Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk)));
+    });
+    stream.on("end", () => take(decoder?.end() ?? ""));
   };
-  worker.stdout.on("data", collect3);
-  worker.stderr.on("data", collect3);
+  attach(worker.stdout);
+  attach(worker.stderr);
   const drained = Promise.all([streamEnd(worker.stdout), streamEnd(worker.stderr)]);
   let toolCalls = 0;
   let capped2 = false;
   let ending = null;
-  return await new Promise((resolve15) => {
+  return await new Promise((resolve16) => {
     let settled = false;
     const finish = () => {
       if (settled) return;
@@ -1774,7 +1782,7 @@ async function runCode(input) {
       clearInterval(abortWatch);
       void worker.terminate().catch(() => {
       }).then(() => Promise.race([drained, delay(STREAM_DRAIN_MS)])).then(() => {
-        resolve15(toOutcome(ending, { printed, toolCalls, capped: capped2, limits}));
+        resolve16(toOutcome(ending, { printed, toolCalls, capped: capped2, limits}));
       });
     };
     const timer = setTimeout(() => {
@@ -1845,14 +1853,14 @@ async function runCode(input) {
 var ABORT_POLL_MS = 100;
 var STREAM_DRAIN_MS = 500;
 function streamEnd(stream) {
-  return new Promise((resolve15) => {
-    stream.once("end", () => resolve15());
-    stream.once("close", () => resolve15());
+  return new Promise((resolve16) => {
+    stream.once("end", () => resolve16());
+    stream.once("close", () => resolve16());
   });
 }
 function delay(ms) {
-  return new Promise((resolve15) => {
-    setTimeout(resolve15, ms).unref();
+  return new Promise((resolve16) => {
+    setTimeout(resolve16, ms).unref();
   });
 }
 function timeoutMessage(timeoutMs, toolCalls) {
@@ -4197,6 +4205,7 @@ var SkillFrontmatterSchema = z.object({
   tags: looseStringList.optional().catch(void 0)
 });
 var FRONTMATTER_KEYS = Object.keys(SkillFrontmatterSchema.shape);
+var METADATA_KEYS = ["tags"];
 function parseSkillFrontmatter(raw, label) {
   const parsed = parseFrontmatter(raw);
   if ("error" in parsed) {
@@ -4224,7 +4233,13 @@ function parseSkillFrontmatter(raw, label) {
   const raw_ = isRecord3(data) ? data : {};
   for (const key of Object.keys(raw_)) {
     if (!FRONTMATTER_KEYS.includes(key)) {
-      issues.push({ path: `${label}.${key}`, message: t("skill_load.unknown_key", { key }) });
+      const suggest = suggestKey(key, FRONTMATTER_KEYS);
+      if (suggest !== void 0) {
+        issues.push({
+          path: `${label}.${key}`,
+          message: t("infra_misc.schema_misspelled_key", { suggest })
+        });
+      }
       continue;
     }
     if (raw_[key] !== void 0 && result.data[key] === void 0) {
@@ -4240,6 +4255,7 @@ function parseSkillFrontmatter(raw, label) {
       });
     }
   }
+  issues.push(...misspelledKeyIssues(METADATA_KEYS, raw_.metadata, `${label}.metadata`));
   const fm = {};
   if (result.data.name !== void 0) fm.name = result.data.name;
   if (result.data.description !== void 0) fm.description = result.data.description;
@@ -4491,7 +4507,7 @@ function available(tools) {
   if (tools.length === 0) {
     return "No deferred tools in this session \u2014 every tool is already in your tool list.";
   }
-  const names = tools.map((t78) => t78.name).sort();
+  const names = tools.map((t79) => t79.name).sort();
   const shown = names.slice(0, MAX_LISTED);
   const rest = names.length - shown.length;
   return `Searchable tools: ${shown.join(", ")}${rest > 0 ? ` (\u2026and ${rest} more)` : ""}.`;
@@ -4611,15 +4627,15 @@ var TrackerDB = class {
     );
     this.db.transaction(() => {
       this.db.prepare("DELETE FROM todos WHERE session_id = ?").run(sessionId);
-      for (const t78 of todos) {
+      for (const t79 of todos) {
         insertStmt.run({
-          id: t78.id,
+          id: t79.id,
           session_id: sessionId,
-          content: t78.content,
-          status: t78.status,
-          reason: t78.reason || null,
-          created_at: t78.created_at,
-          updated_at: t78.updated_at
+          content: t79.content,
+          status: t79.status,
+          reason: t79.reason || null,
+          created_at: t79.created_at,
+          updated_at: t79.updated_at
         });
       }
     })();
@@ -4641,9 +4657,9 @@ function formatTodoList(todos, pendingCount) {
     cancelled: "\u5DF2\u53D6\u6D88"
   };
   lines.push(`[todo] \u72B6\u6001\u6C47\u603B: ${pendingCount} \u4E2A\u5F85\u5B8C\u6210`);
-  for (const t78 of todos) {
-    const label = statusLabel[t78.status] || t78.status;
-    lines.push(`- [${label}]  ${t78.content}${t78.reason ? ` \u2014\u2014 ${t78.reason}` : ""}`);
+  for (const t79 of todos) {
+    const label = statusLabel[t79.status] || t79.status;
+    lines.push(`- [${label}]  ${t79.content}${t79.reason ? ` \u2014\u2014 ${t79.reason}` : ""}`);
   }
   return lines.join("\n");
 }
@@ -4717,14 +4733,14 @@ function createTodoTool(db) {
           };
         }
         const now = (/* @__PURE__ */ new Date()).toISOString();
-        const existing = new Map(db.listBySession(ctx.sessionId).map((t78) => [t78.id, t78]));
-        const todos = rawTodos.map((t78) => {
-          const prev = t78.id ? existing.get(t78.id) : void 0;
-          const status = isValidStatus(t78.status) ? t78.status : "pending";
-          const reason9 = normalizeReason(status, t78.reason);
+        const existing = new Map(db.listBySession(ctx.sessionId).map((t79) => [t79.id, t79]));
+        const todos = rawTodos.map((t79) => {
+          const prev = t79.id ? existing.get(t79.id) : void 0;
+          const status = isValidStatus(t79.status) ? t79.status : "pending";
+          const reason9 = normalizeReason(status, t79.reason);
           return {
-            id: t78.id || generateShortId(),
-            content: String(t78.content || "").slice(0, 500),
+            id: t79.id || generateShortId(),
+            content: String(t79.content || "").slice(0, 500),
             status,
             ...reason9 ? { reason: reason9 } : {},
             created_at: prev?.created_at || now,
@@ -4732,7 +4748,7 @@ function createTodoTool(db) {
           };
         });
         db.replaceAll(ctx.sessionId, todos);
-        const pendingCount = todos.filter((t78) => isOpenTodo(t78.status)).length;
+        const pendingCount = todos.filter((t79) => isOpenTodo(t79.status)).length;
         return {
           success: true,
           output: formatTodoList(todos, pendingCount),
@@ -4881,7 +4897,7 @@ function parseRoleDefinition(raw, file, source) {
     };
   }
   const parsed = split.data;
-  const issues = unknownKeyIssues(FRONTMATTER_KEYS2, parsed, file);
+  const issues = misspelledKeyIssues(FRONTMATTER_KEYS2, parsed, file);
   const outcome = parseLenient(FrontmatterSchema.optional(), parsed, void 0);
   if (!outcome.value) {
     issues.push(
@@ -5067,7 +5083,7 @@ function intersectNames(base, incoming) {
   if (!base) return incoming ? [...incoming] : void 0;
   if (!incoming) return [...base];
   const baseSet = new Set(base);
-  return incoming.filter((t78) => baseSet.has(t78));
+  return incoming.filter((t79) => baseSet.has(t79));
 }
 function findRole(roles, name) {
   return roles.find((r) => r.name === name);
@@ -5153,7 +5169,7 @@ function roleScopedProvider(base, role, blocked) {
     return allow ? allow.has(name) : true;
   };
   return {
-    list: () => base.list().filter((t78) => permitted(t78.name)),
+    list: () => base.list().filter((t79) => permitted(t79.name)),
     get: (name) => permitted(name) ? base.get(name) : void 0
   };
 }
@@ -5180,7 +5196,7 @@ function createRoleScope(base, sessionRole, blocked) {
 }
 function unknownRoleTools(base, role, blocked) {
   if (!role?.tools) return [];
-  const available2 = new Set(base.list().map((t78) => t78.name));
+  const available2 = new Set(base.list().map((t79) => t79.name));
   const blockedSet = new Set(blocked);
   return role.tools.filter((name) => !available2.has(name) && !blockedSet.has(name));
 }
@@ -5300,7 +5316,7 @@ function loadCommandFile(file, source, prefix) {
       ]
     };
   }
-  const issues = unknownKeyIssues(FRONTMATTER_KEYS3, parsed.data, at);
+  const issues = misspelledKeyIssues(FRONTMATTER_KEYS3, parsed.data, at);
   const checked = parseLenient(CommandFrontmatterSchema.optional(), parsed.data, void 0);
   if (!checked.value) {
     issues.push(
@@ -5516,7 +5532,7 @@ function createToolScope(base) {
   const permitted = (name) => allow ? allow.has(name) : true;
   return {
     provider: {
-      list: () => base.list().filter((t78) => permitted(t78.name)),
+      list: () => base.list().filter((t79) => permitted(t79.name)),
       get: (name) => permitted(name) ? base.get(name) : void 0
     },
     enter: (next) => {
@@ -5686,7 +5702,7 @@ function scanHooks(dir, issues) {
   return [...parsed.entries].map(([type, list]) => ({
     type,
     count: list.reduce((sum, entry) => sum + entry.hooks.length, 0)
-  })).filter((t78) => t78.count > 0).sort((a, b) => a.type.localeCompare(b.type));
+  })).filter((t79) => t79.count > 0).sort((a, b) => a.type.localeCompare(b.type));
 }
 function scanMcp(dir, plugin, issues) {
   const path = join(dir, PLUGIN_LAYOUT.mcp);
@@ -5773,6 +5789,7 @@ var PluginAuthorSchema = z.object({
   email: z.string().min(1).optional(),
   url: z.string().min(1).optional()
 });
+var PLUGIN_VISIBILITY = ["private", "public"];
 var ManifestSchema = z.object({
   name: z.string().min(1),
   version: z.string().min(1),
@@ -5780,9 +5797,14 @@ var ManifestSchema = z.object({
   author: PluginAuthorSchema.optional(),
   epochVersion: z.string().min(1).optional(),
   homepage: z.string().min(1).optional(),
-  keywords: z.array(z.string().min(1)).optional()
+  keywords: z.array(z.string().min(1)).optional(),
+  displayName: z.string().min(1).optional(),
+  category: z.string().min(1).optional(),
+  icon: z.string().min(1).optional(),
+  changelog: z.string().min(1).optional(),
+  visibility: z.enum(PLUGIN_VISIBILITY).optional().catch(void 0)
 });
-var MANIFEST_KEYS = Object.keys(ManifestSchema.shape);
+var PLUGIN_MANIFEST_KEYS = Object.keys(ManifestSchema.shape);
 function readPluginManifest(dir) {
   const path = join(dir, PLUGIN_MANIFEST_FILE);
   let raw;
@@ -5807,7 +5829,17 @@ function readPluginManifest(dir) {
       issues: [{ path, message: t("plugin_manifest.bad_json", { reason: firstLine2(err) }) }]
     };
   }
-  const issues = unknownKeyIssues(MANIFEST_KEYS, parsed, PLUGIN_MANIFEST_FILE);
+  const issues = unknownKeyIssues(PLUGIN_MANIFEST_KEYS, parsed, PLUGIN_MANIFEST_FILE);
+  const rawVisibility = parsed?.visibility;
+  if (rawVisibility !== void 0 && !PLUGIN_VISIBILITY.includes(rawVisibility)) {
+    issues.push({
+      path: `${path}.visibility`,
+      message: t("plugin_manifest.bad_visibility", {
+        raw: String(rawVisibility),
+        allowed: PLUGIN_VISIBILITY.join(" / ")
+      })
+    });
+  }
   const checked = parseLenient(ManifestSchema.optional(), parsed, void 0);
   if (!checked.value) {
     issues.push(
@@ -6087,7 +6119,7 @@ var PluginStore = class {
   }
 };
 function sleep(ms) {
-  return new Promise((resolve15) => setTimeout(resolve15, ms));
+  return new Promise((resolve16) => setTimeout(resolve16, ms));
 }
 // src/plugin/loader.ts
 var MODULE = "Plugin";
@@ -6892,7 +6924,7 @@ var EntrySchema = z.object({
   changelog: z.string().min(1).optional(),
   size: z.number().int().positive().optional(),
   homepage: z.string().min(1).optional(),
-  visibility: z.enum(["private", "public"]).optional().catch(void 0),
+  visibility: z.enum(PLUGIN_VISIBILITY).optional().catch(void 0),
   status: z.enum(["listed", "reviewing", "rejected", "offline"]).optional().catch(void 0)
 });
 var MARKETPLACE_DISPLAY_FIELDS = [
@@ -7395,14 +7427,14 @@ var CheckpointStore = class {
   }
   async enforceTotalSize(protectSession, protectTurnIndex) {
     const turns = await this.collectTurns();
-    let total = turns.reduce((sum, t78) => sum + t78.bytes, 0);
+    let total = turns.reduce((sum, t79) => sum + t79.bytes, 0);
     if (total <= this.maxTotalBytes) return;
     turns.sort((a, b) => a.createdAt - b.createdAt);
-    for (const t78 of turns) {
+    for (const t79 of turns) {
       if (total <= this.maxTotalBytes) return;
-      if (t78.sessionId === protectSession && t78.turnIndex === protectTurnIndex) continue;
-      await this.removeTurn(t78.sessionId, t78.turnIndex);
-      total -= t78.bytes;
+      if (t79.sessionId === protectSession && t79.turnIndex === protectTurnIndex) continue;
+      await this.removeTurn(t79.sessionId, t79.turnIndex);
+      total -= t79.bytes;
     }
   }
   async collectTurns() {
@@ -8108,8 +8140,8 @@ function sanitizeToolOutput(text) {
   if (!stripped.includes("\r")) return stripped;
   return stripped.split("\n").map((line) => line.includes("\r") ? line.slice(line.lastIndexOf("\r") + 1) : line).join("\n");
 }
-var sleep2 = (ms) => new Promise((resolve15) => {
-  setTimeout(resolve15, ms);
+var sleep2 = (ms) => new Promise((resolve16) => {
+  setTimeout(resolve16, ms);
 });
 async function* pumpToolOutput(target, start, options = {}) {
   const flushMs = options.flushMs ?? FLUSH_MS;
@@ -8177,8 +8209,8 @@ async function* pumpToolOutput(target, start, options = {}) {
       continue;
     }
     if (!running) break;
-    await new Promise((resolve15) => {
-      wake = resolve15;
+    await new Promise((resolve16) => {
+      wake = resolve16;
     });
     if (running && flushMs > 0) await sleep2(flushMs);
   }
@@ -10115,11 +10147,11 @@ var PromptBuilder = class {
   memoryInitialized = false;
   projectBlock(tools) {
     const permLevel = this.deps.permissionManager?.getLevel() || "default";
-    const hasPlanTool = tools.some((t78) => t78.name === "enter_plan_mode");
-    const hasLspTool = tools.some((t78) => t78.name === "lsp_diagnostics");
-    const hasAskTool = tools.some((t78) => t78.name === "ask_user_question");
-    const hasTodoTool = tools.some((t78) => t78.name === "todo");
-    const hasTerminal = tools.some((t78) => t78.name === "terminal");
+    const hasPlanTool = tools.some((t79) => t79.name === "enter_plan_mode");
+    const hasLspTool = tools.some((t79) => t79.name === "lsp_diagnostics");
+    const hasAskTool = tools.some((t79) => t79.name === "ask_user_question");
+    const hasTodoTool = tools.some((t79) => t79.name === "todo");
+    const hasTerminal = tools.some((t79) => t79.name === "terminal");
     const needsCommandApproval = hasTerminal && permLevel === "default";
     const plan = this.deps.approvedPlan?.()?.trim();
     const codeSdk = renderSdkDeclaration(this.deps.codeModeTools?.() ?? []);
@@ -10998,8 +11030,8 @@ function imageParts(content) {
   return typeof content === "string" ? [] : content.filter((p) => p.type === "image");
 }
 function toolSignatureOf(config, tools) {
-  const direct = tools.map((t78) => t78.name).join("\0");
-  const declared = (config.codeModeTools?.() ?? []).map((t78) => t78.name).join("\0");
+  const direct = tools.map((t79) => t79.name).join("\0");
+  const declared = (config.codeModeTools?.() ?? []).map((t79) => t79.name).join("\0");
   return declared ? `${direct}|${declared}` : direct;
 }
 function modelSignatureOf(info) {
@@ -11793,7 +11825,12 @@ ${finalText}` };
         "epoch.summary_skipped": compressed.summarySkipped === true,
         "epoch.pruned_tokens": compressed.prunedTokens
       });
-      return { messages: compressed.messages.map((m) => unflattenMessage(m)), ...bill };
+      return {
+        messages: compressed.messages.map((m) => unflattenMessage(m)),
+        ...bill,
+        ...compressed.carriedHead === void 0 ? {} : { carriedHead: compressed.carriedHead },
+        ...compressed.carriedTail === void 0 ? {} : { carriedTail: compressed.carriedTail }
+      };
     } catch {
       return { messages };
     }
@@ -11947,6 +11984,11 @@ var ArtifactsSchema = z.object({
   maxAgeDays: z.int().positive().max(3650).default(ARTIFACT_RETENTION_DEFAULTS.maxAgeDays),
   maxTotalBytes: z.int().positive().default(ARTIFACT_RETENTION_DEFAULTS.maxTotalBytes)
 });
+var SessionsSchema = z.object({
+  autoPrune: z.boolean().default(false),
+  retentionDays: z.int().positive().max(3650).default(90),
+  vacuumAfterPrune: z.boolean().default(true)
+});
 var TelemetrySchema = z.object({
   enabled: z.boolean().optional(),
   target: z.enum(["file", "console", "otlp"]).optional(),
@@ -11983,6 +12025,7 @@ var EpochConfigSchema = z.object({
   compression: CompressionSchema.prefault({}),
   memory: MemorySchema.prefault({}),
   artifacts: ArtifactsSchema.prefault({}),
+  sessions: SessionsSchema.prefault({}),
   budget: BudgetSchema.optional(),
   compliance: ComplianceSchema.optional(),
   headless: HeadlessSchema.optional(),
@@ -12468,7 +12511,11 @@ function parseRawConfig(raw, issues, track) {
   const migrated = migrateRawConfig(expanded);
   issues.push(...migrated.issues);
   issues.push(...unknownKeyIssues(CONFIG_KEYS, migrated.raw));
-  const outcome = parseLenient(EpochConfigSchema, dropEmptySections(migrated.raw), defaultConfig());
+  const outcome = parseLenient(
+    EpochConfigSchema,
+    dropEmptySections(migrated.raw),
+    EpochConfigSchema.parse({})
+  );
   issues.push(...outcome.issues);
   if (outcome.issues.length === 0) collectKeyPaths(migrated.raw, track.file);
   return outcome.value;
@@ -13078,6 +13125,7 @@ function getCapability(modelId, homeDir, provider) {
   }
   return {
     contextLength: DEFAULT_CONTEXT_LENGTH2,
+    contextLengthUnknown: true,
     maxOutputTokens: 4096,
     supportsTools: true,
     ...images,
@@ -14034,6 +14082,9 @@ var SETTING_WRITE_KEYS = [
   "budget.maxTokens",
   "budget.warnAtPercent",
   "budget.onUnknownPricing",
+  "sessions.autoPrune",
+  "sessions.retentionDays",
+  "sessions.vacuumAfterPrune",
   "permission"
 ];
 function isWritableSettingKey(value) {
@@ -14097,6 +14148,9 @@ var VALUE_SCHEMA = {
   "budget.maxTokens": EpochConfigSchema.shape.budget.unwrap().shape.maxTokens.unwrap(),
   "budget.warnAtPercent": EpochConfigSchema.shape.budget.unwrap().shape.warnAtPercent.unwrap(),
   "budget.onUnknownPricing": EpochConfigSchema.shape.budget.unwrap().shape.onUnknownPricing.unwrap(),
+  "sessions.autoPrune": EpochConfigSchema.shape.sessions.unwrap().shape.autoPrune.unwrap(),
+  "sessions.retentionDays": EpochConfigSchema.shape.sessions.unwrap().shape.retentionDays.unwrap(),
+  "sessions.vacuumAfterPrune": EpochConfigSchema.shape.sessions.unwrap().shape.vacuumAfterPrune.unwrap(),
   permission: EpochConfigSchema.shape.permission.unwrap()
 };
 function settingValueKind(key) {
@@ -14505,11 +14559,11 @@ function buildSearchQuery(query) {
   }
   const latinPart = cleaned.replace(CJK_RUN, " ");
   for (const w of latinPart.split(/\s+/)) {
-    const t78 = w.trim();
-    if (t78.length >= 2) terms.add(t78);
+    const t79 = w.trim();
+    if (t79.length >= 2) terms.add(t79);
   }
   if (terms.size === 0) return null;
-  return [...terms].map((t78) => `"${t78.replace(/"/g, "")}"`).join(" OR ");
+  return [...terms].map((t79) => `"${t79.replace(/"/g, "")}"`).join(" OR ");
 }
 // src/memory/db.ts
 var NS2 = "memory";
@@ -15838,6 +15892,19 @@ var SESSION_MIGRATIONS = [
     up: (db) => {
       db.exec(`ALTER TABLE sessions ADD COLUMN priced_call_count INTEGER NOT NULL DEFAULT 0;`);
     }
+  },
+  {
+    id: "session-meta-kv",
+    version: 11,
+    description: "\u7EF4\u62A4\u7528\u7684 key/value \u8868\uFF08\u81EA\u52A8\u6E05\u7406\u7684\u8282\u6D41\u65F6\u523B\uFF0C2026-09-15\uFF09",
+    up: (db) => {
+      db.exec(`
+    CREATE TABLE IF NOT EXISTS session_meta (
+      key   TEXT PRIMARY KEY,
+      value TEXT NOT NULL
+    );
+      `);
+    }
   }
 ];
 var FTS_EXTERNAL_SCHEMA = `
@@ -15888,7 +15955,7 @@ var FTS_EXTERNAL_SCHEMA = `
 var FTS_EXTERNAL_MIGRATIONS = [
   {
     id: "fts-external-content",
-    version: 10,
+    version: 12,
     description: "\u4E24\u5F20 FTS \u8868\u6539\u6210\u5916\u90E8\u5185\u5BB9\u8868\uFF08\u6B63\u6587\u4E0D\u518D\u5B58\u4E09\u4EFD\uFF0C2026-08-21\uFF09",
     up: (db) => {
       db.exec(FTS_EXTERNAL_SCHEMA);
@@ -16191,6 +16258,46 @@ var SessionDB = class {
     }
     return { results };
   }
+  pruneCandidates(input) {
+    const clauses = ["ended_at IS NOT NULL", "updated_at < @cutoff"];
+    const params = { cutoff: input.olderThanMs };
+    if (typeof input.archived === "boolean") {
+      clauses.push("archived = @archived");
+      params["archived"] = input.archived ? 1 : 0;
+    }
+    if (!input.includePinned) clauses.push("COALESCE(pinned, 0) = 0");
+    const rows = this.db.prepare(`SELECT * FROM sessions WHERE ${clauses.join(" AND ")} ORDER BY updated_at ASC`).all(params);
+    return rows.map((r) => this.rowToMeta(r));
+  }
+  openPruneMatches(input) {
+    const clauses = ["ended_at IS NULL", "updated_at < @cutoff"];
+    if (!input.includePinned) clauses.push("COALESCE(pinned, 0) = 0");
+    const row = this.db.prepare(`SELECT COUNT(*) AS n FROM sessions WHERE ${clauses.join(" AND ")}`).get({ cutoff: input.olderThanMs });
+    return row.n;
+  }
+  freelistRatio() {
+    const pages = Number(this.db.pragma("page_count", { simple: true }));
+    if (pages <= 0) return 0;
+    return Number(this.db.pragma("freelist_count", { simple: true })) / pages;
+  }
+  getMeta(key) {
+    const row = this.db.prepare("SELECT value FROM session_meta WHERE key = ?").get(key);
+    return row?.value ?? null;
+  }
+  setMeta(key, value) {
+    this.db.prepare(
+      "INSERT INTO session_meta (key, value) VALUES (@key, @value) ON CONFLICT(key) DO UPDATE SET value = @value"
+    ).run({ key, value });
+  }
+  claimMaintenanceSlot(key, minIntervalMs, now) {
+    const run = this.db.transaction(() => {
+      const last = this.getMeta(key);
+      if (last !== null && now - Number(last) < minIntervalMs) return false;
+      this.setMeta(key, String(now));
+      return true;
+    });
+    return run();
+  }
   compact(sessionId, summary, beforeCount, keep) {
     const messages = this.db.prepare(
       "SELECT id FROM messages WHERE session_id = ? AND active = 1 ORDER BY timestamp DESC"
@@ -16209,6 +16316,29 @@ var SessionDB = class {
       duration: 0
     };
   }
+  archiveAndCompact(sessionId, input) {
+    const run = this.db.transaction(() => {
+      const rows = this.db.prepare(
+        "SELECT id, timestamp FROM messages WHERE session_id = ? AND active = 1 AND id <= ? ORDER BY timestamp ASC, id ASC"
+      ).all(sessionId, input.watermark);
+      const end = rows.length - input.tailCount;
+      const middle = end > input.headCount ? rows.slice(input.headCount, end) : [];
+      if (middle.length === 0) return null;
+      const mark = this.db.prepare("UPDATE messages SET active = 0, compacted = 1 WHERE id = ?");
+      for (const row of middle) mark.run(row.id);
+      const summaryId = this.nextMessageId();
+      this.insertMessage({
+        sessionId,
+        id: summaryId,
+        role: "user",
+        content: input.summary,
+        timestamp: middle[0].timestamp
+      });
+      this.db.prepare("UPDATE sessions SET summary = @s WHERE id = @id").run({ s: input.summary, id: sessionId });
+      return { archived: middle.length, summaryId };
+    });
+    return run();
+  }
   getSummary(sessionId) {
     const row = this.db.prepare("SELECT summary FROM sessions WHERE id = ?").get(sessionId);
     return row?.summary ?? null;
@@ -16407,7 +16537,7 @@ function checkFtsHealth(db) {
     messages,
     tables,
     missingTriggers,
-    healthy: missingTriggers.length === 0 && tables.every((t78) => t78.error === null && t78.drift === null && t78.rows === messages),
+    healthy: missingTriggers.length === 0 && tables.every((t79) => t79.error === null && t79.drift === null && t79.rows === messages),
     indexBytes: indexBytesOf(db),
     space: spaceOf(db)
   };
@@ -16553,6 +16683,7 @@ var SessionReferences = class {
   }
 };
 // src/session/manager.ts
+var AUTO_VACUUM_MIN_FREELIST_RATIO = 0.25;
 var SessionManager = class {
   db;
   queries;
@@ -16647,6 +16778,44 @@ var SessionManager = class {
   unarchive(id) {
     this.db.unarchiveSession(id);
   }
+  pruneCandidates(input) {
+    return this.db.pruneCandidates(input);
+  }
+  openPruneMatches(input) {
+    return this.db.openPruneMatches(input);
+  }
+  freelistRatio() {
+    return this.db.freelistRatio();
+  }
+  maybeAutoPrune(opts) {
+    const result = { skipped: false, pruned: 0, vacuumed: false };
+    if (!opts.enabled) return { ...result, skipped: true };
+    const now = opts.now?.() ?? Date.now();
+    const minInterval = opts.minIntervalMs ?? 24 * 60 * 60 * 1e3;
+    const minVacuumInterval = opts.minVacuumIntervalMs ?? 30 * 24 * 60 * 60 * 1e3;
+    try {
+      if (!this.db.claimMaintenanceSlot("last_auto_prune", minInterval, now)) {
+        return { ...result, skipped: true };
+      }
+      const cutoff = now - opts.retentionDays * 24 * 60 * 60 * 1e3;
+      const victims = this.db.pruneCandidates({ olderThanMs: cutoff });
+      let pruned = 0;
+      for (const s of victims) if (this.db.deleteSession(s.id)) pruned++;
+      let vacuumed = false;
+      if (opts.vacuum && pruned > 0) {
+        const lastVacuum = this.db.getMeta("last_vacuum");
+        const vacuumDue = lastVacuum === null || now - Number(lastVacuum) >= minVacuumInterval;
+        if (vacuumDue && this.db.freelistRatio() > AUTO_VACUUM_MIN_FREELIST_RATIO) {
+          const report3 = reclaimFtsSpace(this.db.db, true);
+          vacuumed = report3.vacuumed;
+          if (vacuumed) this.db.setMeta("last_vacuum", String(now));
+        }
+      }
+      return { skipped: false, pruned, vacuumed };
+    } catch (cause) {
+      return { ...result, error: cause instanceof Error ? cause.message : String(cause) };
+    }
+  }
   delete(id) {
     return this.db.deleteSession(id);
   }
@@ -16697,6 +16866,9 @@ var SessionManager = class {
     const summary = toSummarize.length === 0 ? "" : await this.buildSummary(toSummarize, summarize3) ?? outlineOf(toSummarize);
     return this.db.compact(sessionId, summary, beforeCount, IMPORTANT_ROUNDS * 2);
   }
+  archiveAndCompact(sessionId, input) {
+    return this.db.archiveAndCompact(sessionId, input);
+  }
   async buildSummary(msgs, summarize3) {
     if (!summarize3) return null;
     const transcript = msgs.map((m) => `[${m.role}] ${m.content}`).join("\n\n");
@@ -17123,8 +17295,8 @@ var RecentWorkspaces = class {
   }
   remember(dir, now, name) {
     const root = resolve(dir);
-    const kept = this.entries.find((e) => e.root === root)?.name;
-    const rest = this.entries.filter((e) => e.root !== root);
+    const kept = this.entries.find((e) => samePath(e.root, root))?.name;
+    const rest = this.entries.filter((e) => !samePath(e.root, root));
     this.entries = [
       { root, name: name || kept || basename(root) || root, usedAt: now },
       ...rest
@@ -17133,7 +17305,7 @@ var RecentWorkspaces = class {
   }
   forget(dir) {
     const root = resolve(dir);
-    const next = this.entries.filter((e) => e.root !== root);
+    const next = this.entries.filter((e) => !samePath(e.root, root));
     if (next.length === this.entries.length) return;
     this.entries = next;
     this.save();
@@ -17209,6 +17381,84 @@ function isRecentWorkspace(value) {
   const v = value;
   return typeof v["root"] === "string" && v["root"].length > 0 && typeof v["name"] === "string" && typeof v["usedAt"] === "number";
 }
+var MAX_LAST_OPEN_SESSIONS = 20;
+var FILE_VERSION3 = 1;
+function describe6(err) {
+  return err instanceof Error ? err.message : String(err);
+}
+var LastOpenSessions = class {
+  constructor(filePath = lastSessionsPath()) {
+    this.filePath = filePath;
+    this.load();
+  }
+  filePath;
+  entries = [];
+  loadErrors = [];
+  writeErrors = [];
+  get(root) {
+    const key = resolve(root);
+    return this.entries.find((e) => samePath(e.root, key))?.sessionId ?? null;
+  }
+  remember(root, sessionId, now) {
+    const key = resolve(root);
+    const head = this.entries[0];
+    if (head && samePath(head.root, key) && head.sessionId === sessionId) return;
+    const rest = this.entries.filter((e) => !samePath(e.root, key));
+    this.entries = [{ root: key, sessionId, at: now }, ...rest].slice(0, MAX_LAST_OPEN_SESSIONS);
+    this.save();
+  }
+  forget(root) {
+    const key = resolve(root);
+    const next = this.entries.filter((e) => !samePath(e.root, key));
+    if (next.length === this.entries.length) return;
+    this.entries = next;
+    this.save();
+  }
+  load() {
+    this.entries = [];
+    if (!existsSync(this.filePath)) return;
+    let parsed;
+    try {
+      parsed = JSON.parse(readFileSync(this.filePath, "utf-8"));
+    } catch (err) {
+      this.loadErrors.push(
+        (lang) => t("last_session.unreadable", { path: this.filePath, reason: describe6(err) }, lang)
+      );
+      return;
+    }
+    this.adopt(parsed);
+  }
+  adopt(parsed) {
+    if (typeof parsed !== "object" || parsed === null || Array.isArray(parsed)) return;
+    const file = parsed;
+    if (file.version !== FILE_VERSION3) return;
+    if (!Array.isArray(file.sessions)) return;
+    this.entries = file.sessions.filter(isLastOpenSession).sort((a, b) => b.at - a.at).slice(0, MAX_LAST_OPEN_SESSIONS);
+  }
+  save() {
+    const body2 = JSON.stringify(
+      { version: FILE_VERSION3, sessions: this.entries },
+      null,
+      2
+    );
+    const tmp = `${this.filePath}.${process.pid}.tmp`;
+    try {
+      mkdirSync(dirname(this.filePath), { recursive: true });
+      writeFileSync(tmp, body2, { encoding: "utf-8", mode: 384 });
+      renameSync(tmp, this.filePath);
+    } catch (err) {
+      rmSync(tmp, { force: true });
+      this.writeErrors.push(
+        (lang) => t("last_session.write_failed", { path: this.filePath, reason: describe6(err) }, lang)
+      );
+    }
+  }
+};
+function isLastOpenSession(value) {
+  if (typeof value !== "object" || value === null) return false;
+  const v = value;
+  return typeof v["root"] === "string" && v["root"].length > 0 && typeof v["sessionId"] === "string" && v["sessionId"].length > 0 && typeof v["at"] === "number";
+}
 function checkCodeExec(isolation) {
   if (isolation === "os") {
     return { allowed: true, reason: t("permission_reason.sandbox_os"), code: "sandbox-isolation" };
@@ -17457,11 +17707,11 @@ var ApprovalCache = class {
     return !rel.startsWith("..") && !isAbsolute(rel);
   }
   normalizeTarget(target) {
-    const t78 = target.trim();
-    if (!t78) return "";
-    const unix = t78.replace(/\\/g, "/");
+    const t79 = target.trim();
+    if (!t79) return "";
+    const unix = t79.replace(/\\/g, "/");
     if (unix.startsWith("/") || /^[A-Za-z]:\//.test(unix)) return resolve(unix);
-    return t78;
+    return t79;
   }
   load() {
     try {
@@ -17564,9 +17814,9 @@ function createSharedPermissionState(cache) {
   };
 }
 function cacheKeyFor(raw) {
-  const t78 = raw.trim();
-  if (!t78) return null;
-  return t78.slice(0, 500);
+  const t79 = raw.trim();
+  if (!t79) return null;
+  return t79.slice(0, 500);
 }
 // src/permission/manager.ts
 var log3 = createLogger("permission");
@@ -18372,6 +18622,24 @@ function acquireScheduleLock(db, scheduleId, clock2 = Date.now) {
     }
   };
 }
+function isLive(holder, now) {
+  if (holder.heartbeatAt < now - LOCK_STALE_MS) return false;
+  return holder.host !== hostname() || pidAlive(holder.pid);
+}
+function listRunningSchedules(db, clock2 = Date.now) {
+  const now = clock2();
+  const rows = db.prepare(
+    `SELECT schedule_id AS scheduleId, pid, host,
+              acquired_at AS acquiredAt, heartbeat_at AS heartbeatAt
+         FROM schedule_locks`
+  ).all();
+  return rows.filter((row) => isLive(row, now)).map((row) => ({
+    scheduleId: row.scheduleId,
+    startedAt: row.acquiredAt,
+    pid: row.pid,
+    host: row.host
+  }));
+}
 function readHolder(db, scheduleId) {
   const row = db.prepare(
     "SELECT pid, host, acquired_at AS acquiredAt, heartbeat_at AS heartbeatAt FROM schedule_locks WHERE schedule_id = ?"
@@ -18612,9 +18880,15 @@ var ScheduleRegistrar = class {
       this.opts.store.setEnabled(def.id, enabled);
       return { ok: false, reason: "unsupported-platform" };
     }
-    if (enabled) this.opts.store.setEnabled(def.id, true);
-    const res = def.osTaskId ? await backend.setEnabled(def.osTaskId, enabled) : { ok: true };
-    if (!enabled) this.opts.store.setEnabled(def.id, false);
+    if (enabled) {
+      this.opts.store.setEnabled(def.id, true);
+      const on = { ...def, enabled: true };
+      if (!def.osTaskId) return this.register(on);
+      const res2 = await backend.setEnabled(def.osTaskId, true);
+      return res2.ok ? { ok: true, warnings: [] } : this.register(on);
+    }
+    const res = def.osTaskId ? await backend.setEnabled(def.osTaskId, false) : { ok: true };
+    this.opts.store.setEnabled(def.id, false);
     return res.ok ? { ok: true, warnings: [] } : { ok: false, reason: "backend-error", detail: res.detail };
   }
   async retire(def) {
@@ -19725,7 +19999,7 @@ function runCommandHook(config, event, workDir) {
   const baseEnv = sanitizeEnvironment(process.env);
   const injectedEnv = injectEpochEnv(event, config.pluginRoot);
   const hookEnv = { ...baseEnv, ...injectedEnv, ...config.env };
-  return new Promise((resolve15) => {
+  return new Promise((resolve16) => {
     const child = spawn(config.command, {
       shell: true,
       cwd: workDir,
@@ -19739,7 +20013,7 @@ function runCommandHook(config, event, workDir) {
       if (!settled) {
         settled = true;
         child.kill("SIGKILL");
-        resolve15({
+        resolve16({
           exitCode: -1,
           stdout,
           stderr,
@@ -19748,16 +20022,22 @@ function runCommandHook(config, event, workDir) {
         });
       }
     }, timeout);
+    let outDecoder = null;
+    let errDecoder = null;
     child.stdout?.on("data", (data) => {
-      stdout += data.toString("utf-8");
+      outDecoder ??= createStreamDecoder();
+      stdout += outDecoder.write(data);
     });
     child.stderr?.on("data", (data) => {
-      stderr += data.toString("utf-8");
+      errDecoder ??= createStreamDecoder();
+      stderr += errDecoder.write(data);
     });
     child.on("close", (code) => {
       clearTimeout(timer);
       if (settled) return;
       settled = true;
+      stdout += outDecoder?.end() ?? "";
+      stderr += errDecoder?.end() ?? "";
       const exitCode = code ?? -1;
       const blocked = exitCode === 2;
       const rejectReason = blocked ? stderr.trim() || t("hook_load.rejected_this") : void 0;
@@ -19769,7 +20049,7 @@ function runCommandHook(config, event, workDir) {
         }
       } catch {
       }
-      resolve15({
+      resolve16({
         exitCode,
         stdout: stdout.trim(),
         stderr: stderr.trim(),
@@ -19782,7 +20062,7 @@ function runCommandHook(config, event, workDir) {
       clearTimeout(timer);
       if (settled) return;
       settled = true;
-      resolve15({
+      resolve16({
         exitCode: -1,
         stdout,
         stderr,
@@ -19895,7 +20175,7 @@ var HookManager = class {
             return { blocked: true, reason: result.rejectReason || t("hook_load.rejected") };
           }
         } catch (err) {
-          this.log("warn", `[HookManager] ${type} \u7684 command hook \u6267\u884C\u5F02\u5E38: ${describe7(err)}`, {
+          this.log("warn", `[HookManager] ${type} \u7684 command hook \u6267\u884C\u5F02\u5E38: ${describe8(err)}`, {
             hookType: type,
             command: config.command
           });
@@ -19913,7 +20193,7 @@ var HookManager = class {
           (_, reject2) => setTimeout(() => reject2(new Error("Hook timeout")), HOOK_TIMEOUT_MS)
         )
       ]).catch((err) => {
-        this.log("warn", `[HookManager] ${type} (${reg.plugin}) \u5931\u8D25: ${describe7(err)}`, {
+        this.log("warn", `[HookManager] ${type} (${reg.plugin}) \u5931\u8D25: ${describe8(err)}`, {
           hookType: type,
           plugin: reg.plugin
         });
@@ -19925,7 +20205,7 @@ var HookManager = class {
         if (!matchesHook(entry.matcher, event)) continue;
         for (const config of entry.configs) {
           runCommandHook(config, event, ctx.workDir).then((result) => reportIfNeverRan(this.log, type, config, result)).catch((err) => {
-            this.log("warn", `[HookManager] ${type} \u7684 command hook \u5F02\u6B65\u5F02\u5E38: ${describe7(err)}`, {
+            this.log("warn", `[HookManager] ${type} \u7684 command hook \u5F02\u6B65\u5F02\u5E38: ${describe8(err)}`, {
               hookType: type,
               command: config.command
             });
@@ -19946,7 +20226,7 @@ var HookManager = class {
         ]);
         if (result !== null && result !== void 0) return result;
       } catch (err) {
-        this.log("warn", `[HookManager] ${type} (${reg.plugin}) \u5931\u8D25: ${describe7(err)}`, {
+        this.log("warn", `[HookManager] ${type} (${reg.plugin}) \u5931\u8D25: ${describe8(err)}`, {
           hookType: type,
           plugin: reg.plugin
         });
@@ -19967,7 +20247,7 @@ var HookManager = class {
         ]);
         if (result) results.push(result);
       } catch (err) {
-        this.log("warn", `[HookManager] ${type} (${reg.plugin}) \u5931\u8D25: ${describe7(err)}`, {
+        this.log("warn", `[HookManager] ${type} (${reg.plugin}) \u5931\u8D25: ${describe8(err)}`, {
           hookType: type,
           plugin: reg.plugin
         });
@@ -19984,7 +20264,7 @@ var HookManager = class {
             const verdict = verdictOf2(result);
             if (verdict) results.push(verdict);
           } catch (err) {
-            this.log("warn", `[HookManager] ${type} \u7684 command hook \u6267\u884C\u5F02\u5E38: ${describe7(err)}`, {
+            this.log("warn", `[HookManager] ${type} \u7684 command hook \u6267\u884C\u5F02\u5E38: ${describe8(err)}`, {
               hookType: type,
               command: config.command
             });
@@ -20000,7 +20280,7 @@ var HookManager = class {
     return [...list].sort((a, b) => a.priority - b.priority);
   }
 };
-function describe7(err) {
+function describe8(err) {
   return err instanceof Error ? err.message : String(err);
 }
 function verdictOf2(result) {
@@ -21297,7 +21577,7 @@ async function withStaged(source, opts, fn) {
       shape = existsSync(join(unpacked, SKILL_FILE)) ? "skill-dir" : "tree";
     }
     const staged = stageImport(root, staging, shape, opts.lang);
-    const preview3 = describe8(source, form, staged.skills, staged.issues, opts.existing, opts.lang);
+    const preview3 = describe9(source, form, staged.skills, staged.issues, opts.existing, opts.lang);
     if (preview3.skills.length === 0) {
       const detail = t("skill.import_empty", { path: source }, opts.lang);
       return { ok: false, reason: "empty", detail, issues: preview3.issues };
@@ -21308,7 +21588,7 @@ async function withStaged(source, opts, fn) {
     rmSync(unpacked, { recursive: true, force: true });
   }
 }
-function describe8(source, form, staged, issues, existing, lang) {
+function describe9(source, form, staged, issues, existing, lang) {
   const byName = new Map(existing.map((s) => [s.name, s.scope]));
   const entries2 = [];
   const taken = /* @__PURE__ */ new Set();
@@ -21978,6 +22258,19 @@ var ContextCompressor = class {
       };
     }
     const { head, middle, tail } = this.determineBoundaries(pruned.messages, config);
+    if (middle.length === 0) {
+      const kept = this.cleanupOrphans(pruned.messages);
+      this.turnsSinceCompress = 0;
+      return {
+        messages: kept,
+        summary: "",
+        ...prunedCounters,
+        summarizedMessages: 0,
+        newTokenCount: this.estimateTokens(kept),
+        droppedOrphans: pruned.messages.length - kept.length,
+        summarySkipped: true
+      };
+    }
     const nl = "\n";
     const middleText = middle.map((m) => `${m.role}: ${m.content}`).join(nl);
     const summarized = await this.generateSummary(
@@ -22013,6 +22306,7 @@ var ContextCompressor = class {
       summarizedMessages: middle.length,
       newTokenCount: this.estimateTokens(result),
       droppedOrphans,
+      ...summary && droppedOrphans === 0 && middle.length > 0 ? { carriedHead: head.length, carriedTail: tail.length } : {},
       ...summarized?.usage ? { usage: summarized.usage } : {},
       ...summarized?.model ? { model: summarized.model } : {}
     };
@@ -22144,10 +22438,10 @@ ${extra}` : withGoal;
     return messages.reduce((sum, m) => sum + estimateTokens(m.content), 0);
   }
 };
-var FILE_VERSION3 = 1;
+var FILE_VERSION4 = 1;
 var LEVELS = ["trusted", "untrusted"];
 var SCOPES = ["directory", "directory-tree"];
-function describe9(err) {
+function describe10(err) {
   return err instanceof Error ? err.message : String(err);
 }
 function covers(base, target, scope) {
@@ -22156,9 +22450,6 @@ function covers(base, target, scope) {
   const rel = relative(base, target);
   return !rel.startsWith("..") && !isAbsolute(rel);
 }
-function samePath(a, b) {
-  return relative(a, b) === "";
-}
 var TrustManager = class {
   constructor(filePath = trustPath()) {
     this.filePath = filePath;
@@ -22224,7 +22515,7 @@ var TrustManager = class {
       raw = readFileSync(this.filePath, "utf-8");
     } catch (err) {
       this.loadErrors.push(
-        t("trust_gate.record_read_failed", { path: this.filePath, reason: describe9(err) })
+        t("trust_gate.record_read_failed", { path: this.filePath, reason: describe10(err) })
       );
       return;
     }
@@ -22233,7 +22524,7 @@ var TrustManager = class {
       parsed = JSON.parse(raw);
     } catch (err) {
       this.loadErrors.push(
-        t("trust_gate.record_bad_json", { path: this.filePath, reason: describe9(err) })
+        t("trust_gate.record_bad_json", { path: this.filePath, reason: describe10(err) })
       );
       return;
     }
@@ -22245,12 +22536,12 @@ var TrustManager = class {
       return;
     }
     const file = parsed;
-    if (file.version !== FILE_VERSION3) {
+    if (file.version !== FILE_VERSION4) {
       this.loadErrors.push(
         t("trust_gate.record_bad_version", {
           path: this.filePath,
           found: String(file.version),
-          expected: FILE_VERSION3
+          expected: FILE_VERSION4
         })
       );
       return;
@@ -22271,7 +22562,7 @@ var TrustManager = class {
   save() {
     mkdirSync(dirname(this.filePath), { recursive: true });
     const body2 = JSON.stringify(
-      { version: FILE_VERSION3, records: this.records },
+      { version: FILE_VERSION4, records: this.records },
       null,
       2
     );
@@ -22282,7 +22573,7 @@ var TrustManager = class {
     } catch (err) {
       rmSync(tmp, { force: true });
       throw new Error(
-        t("trust_gate.record_write_failed", { path: this.filePath, reason: describe9(err) })
+        t("trust_gate.record_write_failed", { path: this.filePath, reason: describe10(err) })
       );
     }
   }
@@ -22525,13 +22816,16 @@ var CodeSandbox = class {
       ...IS_WINDOWS ? { windowsHide: true } : {}
     };
     const child = spawn(command, args, spawnOpts);
-    return new Promise((resolve15) => {
+    return new Promise((resolve16) => {
       let stdout = "";
       let stderr = "";
       let killedForOutput = false;
+      let outDecoder = null;
+      let errDecoder = null;
       child.stdout?.on("data", (c) => {
         if (killedForOutput) return;
-        stdout += c.toString();
+        outDecoder ??= createStreamDecoder();
+        stdout += outDecoder.write(c);
         if (stdout.length >= MAX_OUTPUT) {
           killedForOutput = true;
           stdout = stdout.slice(0, MAX_OUTPUT);
@@ -22540,14 +22834,15 @@ var CodeSandbox = class {
       });
       child.stderr?.on("data", (c) => {
         if (stderr.length >= MAX_OUTPUT) return;
-        stderr += c.toString();
+        errDecoder ??= createStreamDecoder();
+        stderr += errDecoder.write(c);
       });
       const onAbort = () => child.kill("SIGKILL");
       opts.signal?.addEventListener("abort", onAbort, { once: true });
       child.on("error", (err) => {
         opts.signal?.removeEventListener("abort", onAbort);
         if (err.code === "ENOENT") {
-          resolve15({
+          resolve16({
             success: false,
             output: "",
             error: `[\u9519\u8BEF] \u627E\u4E0D\u5230\u89E3\u91CA\u5668: ${command}`,
@@ -22556,7 +22851,7 @@ var CodeSandbox = class {
           });
           return;
         }
-        resolve15({
+        resolve16({
           success: false,
           output: "",
           error: `[\u9519\u8BEF] ${err.message}`,
@@ -22566,9 +22861,11 @@ var CodeSandbox = class {
       });
       child.on("close", (code, sig) => {
         opts.signal?.removeEventListener("abort", onAbort);
+        if (!killedForOutput) stdout += outDecoder?.end() ?? "";
+        if (stderr.length < MAX_OUTPUT) stderr += errDecoder?.end() ?? "";
         const duration = Date.now() - start;
         if (killedForOutput) {
-          resolve15({
+          resolve16({
             success: false,
             output: trunc(stdout, stderr),
             error: `[\u8F93\u51FA\u8D85\u9650] \u8D85\u8FC7 ${MAX_OUTPUT} \u5B57\u8282\uFF0C\u5DF2\u7EC8\u6B62`,
@@ -22578,7 +22875,7 @@ var CodeSandbox = class {
           return;
         }
         if (sig) {
-          resolve15({
+          resolve16({
             success: false,
             output: trunc(stdout, stderr),
             error: opts.signal?.aborted ? "[\u5DF2\u53D6\u6D88]" : "[\u8D85\u65F6] \u6267\u884C\u8D85\u65F6",
@@ -22590,7 +22887,7 @@ var CodeSandbox = class {
         const output = trunc(stdout, stderr);
         if (code !== 0 && code !== null) {
           const oom = /heap out of memory|allocation failed/i.test(stderr);
-          resolve15({
+          resolve16({
             success: false,
             output,
             error: oom ? `[\u5185\u5B58\u8D85\u9650] \u8D85\u8FC7 ${MAX_MEMORY}MB` : `[\u8FD0\u884C\u65F6\u9519\u8BEF] exit ${code}: ${stderr.slice(0, 200)}`,
@@ -22599,7 +22896,7 @@ var CodeSandbox = class {
           });
           return;
         }
-        resolve15({ success: true, output, duration });
+        resolve16({ success: true, output, duration });
       });
     });
   }
@@ -22659,4 +22956,4 @@ function trunc(stdout, stderr) {
  *    `--tree` 的命令帮助里，让用户自己知道 `--tree` 意味着什么。
  */
 
-export { AGENT_ROLE_DIAG_MODULE, ARTIFACT_MAX_TOTAL_BYTES, ARTIFACT_RETENTION_DEFAULTS, ATTACHMENT_MAX_TOTAL_BYTES, ATTACHMENT_RETENTION_DEFAULTS, AgentLoop, ApprovalCache, BLOCKED_TOOLS, BudgetGuard, BudgetStore, CHECKPOINT_MAX_TOTAL_BYTES, CLAUDE_EVENT_NAMES, CLAUDE_TOOL_NAMES, CODE_MODE_LIMITS, CODE_MODE_SDK_TAG, CONFIG_KEYS, CURRENT_CONFIG_VERSION, CheckpointManager, CheckpointStore, CodeSandbox, ComplianceEngine, ContextCompressor, DEFAULT_COMPLIANCE_ACTIONS, DEFAULT_COMPLIANCE_SETTINGS, DEFAULT_COMPRESSION_THRESHOLD, DEFAULT_GOAL_MAX_ROUNDS, DEFAULT_MAX_HOLD_CHARS, DelegateManager, EMPTY_RULES, EPOCH_DISK_LEDGER, EpochConfigSchema, FTS_TABLES, FTS_TRIGGERS, GOAL_BLOCK_CODES, GoalService, GoalStore, HEADLESS_AUDIT_CODES, HookManager, INSTRUCTION_BUDGET_CHARS, INSTRUCTION_FILES, ImageLoadError, ImportTrustStore, LAUNCHD_LABEL_PREFIX, LOCK_HEARTBEAT_MS, LOCK_STALE_MS, MARKETPLACE_DISPLAY_FIELDS, MARKETPLACE_FILE, MAX_AUDIT_ENTRIES, MAX_COMMAND_DEPTH, MAX_GOAL_MAX_ROUNDS, MAX_IMPORT_DEPTH, MAX_OBJECTIVE_CHARS, MAX_REASON_CHARS, MAX_RECENT_WORKSPACES, MODEL_GIVE_UP_THRESHOLD, MULTIMODAL_DEFAULTS, ManagedPolicyError, ManagedSettingsSchema, MemoryManager, MemoryReviewer, ModelFailureTracker, NOMINAL_TOTAL_BYTES, NO_REVEALED_TOOLS, PACK_EXCLUDES, PACK_MAX_BYTES, PACK_MAX_FILES, PERMISSION_AUDIT_CODES, PLUGIN_LAYOUT, PLUGIN_MANIFEST_FILE, PLUGIN_NAME_PATTERN, PLUGIN_ROOT_ENV, PLUGIN_ROOT_TOKEN, POLICY_DECISIONS, PROBE_VERSION, PROJECT_AGENTS_SUBDIR, PROVIDER_NO_CREDENTIAL, PermissionManager, PlanModeState, PluginAuthorSchema, PluginStore, PolicyRuleSchema, ProviderError, ProviderRouter, RECORDING_KEEP_RUNS, RECORDING_MAX_BYTES, ROLE_FRONTMATTER_SCHEMA, RUN_CODE_TOOL, RecentWorkspaces, SANDBOX_COVERS, SANDBOX_EXCLUDES, SCALAR_KEYS, SCHEDULE_DEFAULTS, SCHEDULE_DEFAULT_ALLOWLIST, SCHEDULE_ISSUE_CODES, SCHTASKS_FOLDER, SESSION_MESSAGES_READ_TOOL, SESSION_MESSAGES_SEARCH_TOOL, SESSION_QUERY_TOOLS, SESSION_SEARCH_TOOL, SESSION_TRACE_TOOL, SETTINGS_LAYER_ORDER, SETTING_WRITE_KEYS, SETTING_WRITE_LAYERS, SKILL_CREATE_TOOL, SKILL_EDIT_TOOL, SKILL_PATCH_TOOL, SKILL_VIEW_TOOL, SKILL_WRITE_FILE_TOOL, SLASH_COMMANDS_DIAG_MODULE, ScheduleRecorder, ScheduleRegistrar, ScheduleStore, SessionManager, SessionQueries, SessionReferences, SettingsFileError, SettingsFileSchema, SkillLearner, SkillSystem, TOOL_SEARCH_TOOL, TaskNoticeTracker, ToolRegistry, TrackerDB, TrustManager, Workspace, acquireScheduleLock, addMarketplace, addUsage, admitArtifact, admitArtifacts, affectedPaths, artifactLaunchArgv, artifactOpenRefusal, assertLevelAllowed, blockedRoleTools, buildContextBreakdown, buildFireArgv, buildFtsMatchQuery, buildSchemaExports, buildSystemPrompt, buildTrigramMatchQuery, builtinRoles, checkEpochVersion, checkFtsHealth, checkShadowing, classifyProviderError, clearModelCache, coalesceRecording, codeModeWorkerPath, commandNameFromRelPath, compileRuleLists, compressionOptions, computeCost, computeCostMicros, computeExecHash, countRules, createAllowAllGate, createAllowAllImportGate, createAskQuestionTool, createCodeExecTool, createDelegateTool, createDenyAllGate, createDenyAllImportGate, createGoalTool, createImportGate, createMemoryTool, createPlanModeTools, createRoleFile, createRoleScope, createRunCodeTool, createScheduleDraftTool, createSessionMessagesReadTool, createSessionMessagesSearchTool, createSessionSearchTool, createSessionSearchTools, createSessionTraceTool, createSkillViewTool, createSkillWriteTools, createTodoTool, createToolRevealState, createToolScope, createToolSearchTool, createTrustGate, currentEpochVersion, decideImport, decideTrust, defaultConfig, defaultModelOf, describeArtifactRefusal, describeBackgroundTask, describeHeadlessPolicy, describeIsolation, describeJsonError, diagnoseSchedules, discoverMarkdown, discoverModels, discoverProject, displayCurrency, draftCommandLine, draftWidening, escapeRuleContent, estimateImageTokens, estimateRunTokens, estimateTokens, evaluateSelection, expandCommand, expandImports, explainSetting, extractArchive, findInstructionFiles, findProjectInstructions, findRole, formatBytes, formatSkillIndex, formatUsd, gateForTool, getCapability, getConfigIssues, getConfigOrigins, getImportGate, getTrustGate, hasDedicatedExecContent, hasExecTierContent, hasPromptCaching, hasProviderCredentials, hasReadTierContent, imageFromBase64, imageFromPath, imagePartTokens, importSkills, installPlugin, instructionDirs, instructionNotices, intervalSlots, inventoryProjectExtensions, inventoryTotal, isBlockCode, isCodeModeDeferred, isEmptyRules, isGoalPhase, isNonInteractive, isReadOnlySubCall, isSettingWriteLayer, isValidPluginName, isWithinWindow, isWritableSettingKey, labelSlug, layerRank, listSessionCandidates, listWorkspaceFiles, loadCommandDefinitions, loadCommandFile, loadCommands, loadConfig, loadHookSources, loadKeybindings, loadLexiconDir, loadLexiconFiles, loadPlugins, loadPolicyFiles, loadPolicyRules, loadRoleDefinitions, loadRoleDir, loadedImports, localDateString, managedSwitchNotes, mapClaudeToolName, mapEpochToolName, mapOperationType, matchPreauthorization, matchRuleLists, matchesHook, mentionsPluginRoot, mergeHeadlessPolicy, mergeRoles, mergeSchedulePatch, microsToUsd, modelListCandidates, needsAllowlist, nextFallbackModel, nextRunAt, noConfigOrigins, noManagedPolicy, noPlugins, openArtifact, originOf, packFileName, packPlugin, parseClaudeSettingsHooks, parseClock, parseDate, parseFrontmatter, parseHooksConfig, parseHooksConfigVerbose, parseImportLine, parseModelList, parseRoleDefinition, parseScheduleDraft, parseSkillFrontmatter, parseTrigger, pendingImageTokens, persistParts, persistToolResults, persistedUsage, planPack, previewSkillImport, pricingFor, projectEntryForDisplay, pruneArtifacts, pruneAttachments, pruneRecordings, pruneSchedules, readImageSize, readMarketplaces, readPluginManifest, readPluginRecords, readProviderKeyEnv, readRecording, readSessionSurface, reclaimFtsSpace, redactLine, refreshOpenRouterMetadata, removeMarketplace, removeSessionArtifacts, removeSessionAttachments, renderImportTree, renderProjectContext, renderSdkDeclaration, renderSelfIndex, repairSchedules, resolveArtifactRetention, resolveCodeModeWorker, resolveComplianceDirs, resolveEntrySource, resolveInWorkspace, resolveMarketplaceRef, resolveMentions, resolveMultimodalPolicy, resolvePolicyDirs, resolvePricingAt, resolveProjectRoot, resolveScheduleBackend, resolveSessionReference, resolveSessionVisibility, resolveSettings, resolveSkillDirs, resolveSource, resolveTar, resolveWorkspace, restoreParts, revealScopedProvider, roleScopedProvider, roleSourceLabel, ruleCovers, ruleFromString, ruleToString, runCode, runCommand2 as runCommand, sanitizeArgNames, sanitizeCommand, sanitizeFtsQuery, sanitizePath, sanitizeToolOutput, scanInstructions, scanPluginDir, scanSkillDirs, searchMarketplaces, setDisplayCurrency, setImportGate, setPluginEnabled, setTrustGate, settingValueChoices, settingValueKind, settingWriteApply, settingWriteLayers, settingWriteTargets, skillIndexDescription, skillIndexResidency, skillIndexStats, sniffMediaType, splitFrontmatter, staticToolProvider, stripArtifactData, substitutePluginRoot, suggestRuleFromApproval, systemOpenArgv, systemPromptSegments, toPosix, toolDefinitionTokens, toolMatches, toolTableTokens, totalTokens, traceSession, triggerPeriodMs, unescapeRuleContent, uninstallPlugin, unknownRoleSkills, unknownRoleTools, unloadedInstructionFiles, updateMarketplace, updatePlugin, usdToMicros, validateSchedule, validateTrigger, validateWindow, withGoalCompression, withGoalPrompt, workspaceDisplayPath, writeSettingValue };
+export { AGENT_ROLE_DIAG_MODULE, ARTIFACT_MAX_TOTAL_BYTES, ARTIFACT_RETENTION_DEFAULTS, ATTACHMENT_MAX_TOTAL_BYTES, ATTACHMENT_RETENTION_DEFAULTS, AgentLoop, ApprovalCache, BLOCKED_TOOLS, BudgetGuard, BudgetStore, CHECKPOINT_MAX_TOTAL_BYTES, CLAUDE_EVENT_NAMES, CLAUDE_TOOL_NAMES, CODE_MODE_LIMITS, CODE_MODE_SDK_TAG, CONFIG_KEYS, CURRENT_CONFIG_VERSION, CheckpointManager, CheckpointStore, CodeSandbox, ComplianceEngine, ContextCompressor, DEFAULT_COMPLIANCE_ACTIONS, DEFAULT_COMPLIANCE_SETTINGS, DEFAULT_COMPRESSION_THRESHOLD, DEFAULT_GOAL_MAX_ROUNDS, DEFAULT_MAX_HOLD_CHARS, DelegateManager, EMPTY_RULES, EPOCH_DISK_LEDGER, EpochConfigSchema, FTS_TABLES, FTS_TRIGGERS, GOAL_BLOCK_CODES, GoalService, GoalStore, HEADLESS_AUDIT_CODES, HookManager, INSTRUCTION_BUDGET_CHARS, INSTRUCTION_FILES, ImageLoadError, ImportTrustStore, LAUNCHD_LABEL_PREFIX, LOCK_HEARTBEAT_MS, LOCK_STALE_MS, LastOpenSessions, MARKETPLACE_DISPLAY_FIELDS, MARKETPLACE_FILE, MAX_AUDIT_ENTRIES, MAX_COMMAND_DEPTH, MAX_GOAL_MAX_ROUNDS, MAX_IMPORT_DEPTH, MAX_LAST_OPEN_SESSIONS, MAX_OBJECTIVE_CHARS, MAX_REASON_CHARS, MAX_RECENT_WORKSPACES, MODEL_GIVE_UP_THRESHOLD, MULTIMODAL_DEFAULTS, ManagedPolicyError, ManagedSettingsSchema, MemoryManager, MemoryReviewer, ModelFailureTracker, NOMINAL_TOTAL_BYTES, NO_REVEALED_TOOLS, PACK_EXCLUDES, PACK_MAX_BYTES, PACK_MAX_FILES, PERMISSION_AUDIT_CODES, PLUGIN_LAYOUT, PLUGIN_MANIFEST_FILE, PLUGIN_MANIFEST_KEYS, PLUGIN_NAME_PATTERN, PLUGIN_ROOT_ENV, PLUGIN_ROOT_TOKEN, PLUGIN_VISIBILITY, POLICY_DECISIONS, PROBE_VERSION, PROJECT_AGENTS_SUBDIR, PROVIDER_NO_CREDENTIAL, PermissionManager, PlanModeState, PluginAuthorSchema, PluginStore, PolicyRuleSchema, ProviderError, ProviderRouter, RECORDING_KEEP_RUNS, RECORDING_MAX_BYTES, ROLE_FRONTMATTER_SCHEMA, RUN_CODE_TOOL, RecentWorkspaces, SANDBOX_COVERS, SANDBOX_EXCLUDES, SCALAR_KEYS, SCHEDULE_DEFAULTS, SCHEDULE_DEFAULT_ALLOWLIST, SCHEDULE_ISSUE_CODES, SCHTASKS_FOLDER, SESSION_MESSAGES_READ_TOOL, SESSION_MESSAGES_SEARCH_TOOL, SESSION_QUERY_TOOLS, SESSION_SEARCH_TOOL, SESSION_TRACE_TOOL, SETTINGS_LAYER_ORDER, SETTING_WRITE_KEYS, SETTING_WRITE_LAYERS, SKILL_CREATE_TOOL, SKILL_EDIT_TOOL, SKILL_PATCH_TOOL, SKILL_VIEW_TOOL, SKILL_WRITE_FILE_TOOL, SLASH_COMMANDS_DIAG_MODULE, ScheduleRecorder, ScheduleRegistrar, ScheduleStore, SessionManager, SessionQueries, SessionReferences, SettingsFileError, SettingsFileSchema, SkillLearner, SkillSystem, TOOL_SEARCH_TOOL, TaskNoticeTracker, ToolRegistry, TrackerDB, TrustManager, Workspace, acquireScheduleLock, addMarketplace, addUsage, admitArtifact, admitArtifacts, affectedPaths, artifactLaunchArgv, artifactOpenRefusal, assertLevelAllowed, blockedRoleTools, buildContextBreakdown, buildFireArgv, buildFtsMatchQuery, buildSchemaExports, buildSystemPrompt, buildTrigramMatchQuery, builtinRoles, checkEpochVersion, checkFtsHealth, checkShadowing, classifyProviderError, clearModelCache, coalesceRecording, codeModeWorkerPath, commandNameFromRelPath, compileRuleLists, compressionOptions, computeCost, computeCostMicros, computeExecHash, countRules, createAllowAllGate, createAllowAllImportGate, createAskQuestionTool, createCodeExecTool, createDelegateTool, createDenyAllGate, createDenyAllImportGate, createGoalTool, createImportGate, createMemoryTool, createPlanModeTools, createRoleFile, createRoleScope, createRunCodeTool, createScheduleDraftTool, createSessionMessagesReadTool, createSessionMessagesSearchTool, createSessionSearchTool, createSessionSearchTools, createSessionTraceTool, createSkillViewTool, createSkillWriteTools, createTodoTool, createToolRevealState, createToolScope, createToolSearchTool, createTrustGate, currentEpochVersion, decideImport, decideTrust, defaultConfig, defaultModelOf, describeArtifactRefusal, describeBackgroundTask, describeHeadlessPolicy, describeIsolation, describeJsonError, diagnoseSchedules, discoverMarkdown, discoverModels, discoverProject, displayCurrency, draftCommandLine, draftWidening, escapeRuleContent, estimateImageTokens, estimateRunTokens, estimateTokens, evaluateSelection, expandCommand, expandImports, explainSetting, extractArchive, findInstructionFiles, findProjectInstructions, findRole, formatBytes, formatSkillIndex, formatUsd, gateForTool, getCapability, getConfigIssues, getConfigOrigins, getImportGate, getTrustGate, hasDedicatedExecContent, hasExecTierContent, hasPromptCaching, hasProviderCredentials, hasReadTierContent, imageFromBase64, imageFromPath, imagePartTokens, importSkills, installPlugin, instructionDirs, instructionNotices, intervalSlots, inventoryProjectExtensions, inventoryTotal, isBlockCode, isCodeModeDeferred, isEmptyRules, isGoalPhase, isNonInteractive, isReadOnlySubCall, isSettingWriteLayer, isValidPluginName, isWithinWindow, isWritableSettingKey, labelSlug, layerRank, listRunningSchedules, listSessionCandidates, listWorkspaceFiles, loadCommandDefinitions, loadCommandFile, loadCommands, loadConfig, loadHookSources, loadKeybindings, loadLexiconDir, loadLexiconFiles, loadPlugins, loadPolicyFiles, loadPolicyRules, loadRoleDefinitions, loadRoleDir, loadedImports, localDateString, managedSwitchNotes, mapClaudeToolName, mapEpochToolName, mapOperationType, matchPreauthorization, matchRuleLists, matchesHook, mentionsPluginRoot, mergeHeadlessPolicy, mergeRoles, mergeSchedulePatch, microsToUsd, modelListCandidates, needsAllowlist, nextFallbackModel, nextRunAt, noConfigOrigins, noManagedPolicy, noPlugins, openArtifact, originOf, packFileName, packPlugin, parseClaudeSettingsHooks, parseClock, parseDate, parseFrontmatter, parseHooksConfig, parseHooksConfigVerbose, parseImportLine, parseModelList, parseRoleDefinition, parseScheduleDraft, parseSkillFrontmatter, parseTrigger, pendingImageTokens, persistParts, persistToolResults, persistedUsage, planPack, previewSkillImport, pricingFor, projectEntryForDisplay, pruneArtifacts, pruneAttachments, pruneRecordings, pruneSchedules, readImageSize, readMarketplaces, readPluginManifest, readPluginRecords, readProviderKeyEnv, readRecording, readSessionSurface, reclaimFtsSpace, redactLine, refreshOpenRouterMetadata, removeMarketplace, removeSessionArtifacts, removeSessionAttachments, renderImportTree, renderProjectContext, renderSdkDeclaration, renderSelfIndex, repairSchedules, resolveArtifactRetention, resolveCodeModeWorker, resolveComplianceDirs, resolveEntrySource, resolveInWorkspace, resolveMarketplaceRef, resolveMentions, resolveMultimodalPolicy, resolvePolicyDirs, resolvePricingAt, resolveProjectRoot, resolveScheduleBackend, resolveSessionReference, resolveSessionVisibility, resolveSettings, resolveSkillDirs, resolveSource, resolveTar, resolveWorkspace, restoreParts, revealScopedProvider, roleScopedProvider, roleSourceLabel, ruleCovers, ruleFromString, ruleToString, runCode, runCommand2 as runCommand, sanitizeArgNames, sanitizeCommand, sanitizeFtsQuery, sanitizePath, sanitizeToolOutput, scanInstructions, scanPluginDir, scanSkillDirs, searchMarketplaces, setDisplayCurrency, setImportGate, setPluginEnabled, setTrustGate, settingValueChoices, settingValueKind, settingWriteApply, settingWriteLayers, settingWriteTargets, skillIndexDescription, skillIndexResidency, skillIndexStats, sniffMediaType, splitFrontmatter, staticToolProvider, stripArtifactData, substitutePluginRoot, suggestRuleFromApproval, systemOpenArgv, systemPromptSegments, toPosix, toolDefinitionTokens, toolMatches, toolTableTokens, totalTokens, traceSession, triggerPeriodMs, unescapeRuleContent, uninstallPlugin, unknownRoleSkills, unknownRoleTools, unloadedInstructionFiles, updateMarketplace, updatePlugin, usdToMicros, validateSchedule, validateTrigger, validateWindow, withGoalCompression, withGoalPrompt, workspaceDisplayPath, writeSettingValue };