@epoch-agent/core 0.10.1 → 0.12.0

package/dist/index.js

@@ -2,7 +2,7 @@ import { existsSync, statSync, readdirSync, readFileSync, mkdirSync, writeFileSy
 import { homedir, platform, tmpdir, hostname } from 'os';
 import { join, dirname, resolve, relative, isAbsolute, sep, extname, basename } from 'path';
 import { execFile, execSync, execFileSync, spawn } from 'child_process';
-import { createLogger, dbPath, resolveHomeDir, DEFAULT_MAX_TURNS, PROJECT_DIR_NAME, t, openDatabase, migrate, releaseDatabase, unknownKeyIssues, parseLenient, issueDetails, splitWords, checkpointsDir, pluginsDir, projectHooksPath, projectClaudeSettingsPath, projectClaudeLocalSettingsPath, projectSettingsPath, projectLocalSettingsPath, projectPoliciesDir, trustedImportsPath, budgetStatePath, artifactsDir, UNLIMITED_TURNS, turnLimitOf, configPath, managedSettingsPath, getSecretValues, listStoredSecretNames, maskApiKey, setSectionField, isInWorkspace, workspacesPath, automationLogsDir, projectComplianceDir, projectSkillsDir, attachmentsDir, trustPath, projectCommandsDir, detectBackend, EXEC_PATH_AS_NODE_ENV, isolate, createStreamDecoder, parseShellCommand, writeArtifact, envPath, checkDangerousCommand, checkObfuscation, countCodePoints, keepHeadAndTail, normalizeForMatch, isReadOnlyCommand, CODE_EXEC_ROOTS, headCodePoints, tailCodePoints } from '@epoch-agent/infra';
+import { createLogger, dbPath, resolveHomeDir, DEFAULT_MAX_TURNS, PROJECT_DIR_NAME, t, suggestKey, misspelledKeyIssues, openDatabase, migrate, releaseDatabase, parseLenient, issueDetails, splitWords, unknownKeyIssues, checkpointsDir, pluginsDir, projectHooksPath, projectClaudeSettingsPath, projectClaudeLocalSettingsPath, projectSettingsPath, projectLocalSettingsPath, projectPoliciesDir, trustedImportsPath, budgetStatePath, artifactsDir, UNLIMITED_TURNS, turnLimitOf, configPath, managedSettingsPath, getSecretValues, listStoredSecretNames, maskApiKey, setSectionField, isInWorkspace, workspacesPath, samePath, lastSessionsPath, automationLogsDir, projectComplianceDir, projectSkillsDir, attachmentsDir, trustPath, projectCommandsDir, detectBackend, EXEC_PATH_AS_NODE_ENV, isolate, createStreamDecoder, parseShellCommand, writeArtifact, envPath, checkDangerousCommand, checkObfuscation, countCodePoints, keepHeadAndTail, normalizeForMatch, isReadOnlyCommand, CODE_EXEC_ROOTS, headCodePoints, tailCodePoints } from '@epoch-agent/infra';
 export { IS_WINDOWS, WINDOWS_HIDE_FLAGS, buildBwrapArgs, buildProfile, checkDangerousCommand, checkObfuscation, createLogger, detectBackend, getDefaultShell, getPythonCommand, isInWorkspace, isReadOnlyCommand, isolate, maskApiKey, probeBubblewrap, probeSeatbelt, complianceDir as resolveComplianceDir, policiesDir as resolvePoliciesDir, setLogLevel } from '@epoch-agent/infra';
 import { PROVIDER_TYPES, OPERATION_TYPES as OPERATION_TYPES$1, COMPLIANCE_CATEGORIES, COMPLIANCE_ACTIONS, SEARCH_PROVIDER_TYPES, CURRENCIES, LANGS, PERMISSION_LEVELS, SHELL_KINDS, ToolExposure, MAX_OPTIONS, MIN_OPTIONS, MAX_HEADER_CHARS, MAX_QUESTIONS, SCHEDULE_INTERVAL_MINUTES, isPermissionLevel, SCHEDULE_DRAFT_TOOL, isValidAgentRoleName, DEFAULT_AGENT_ROLE, isValidCommandName, RESERVED_COMMAND_NAMES, parseModelRef, isWirePluginArchiveName, systemNote, formatMoney, totalUsageTokens, NOOP_TELEMETRY, METRIC, contentToText, GEN_AI, isPromptOversize, promptTokens, apiKeyEnvVar, PROVIDER_INFOS, isProviderType, API_KEY_ENV_VARS, KEY_ACTIONS, tableOf, perAction, isKeyAction, parseSequence, RESERVED_CHORDS, chordId, sequenceId, ACTION_CONTEXTS, SEQUENCE_CONTEXTS, assertNeverPart, MAX_ATTACH_FILES, MAX_ATTACH_TOTAL_BYTES, MAX_SESSION_REFS, utf8ByteLength, truncateToBudget, attachSessionSurface, isContextNearlyFull, isOperationType, normalizeApproval, imagePartOmittedSummary, MAX_ATTACH_BYTES, SIMULTANEOUS_CONTEXTS, SESSION_REFERENCE_ERROR_CODES, filePartSummary, sessionPartSummary } from '@epoch-agent/protocol';
 export { API_KEY_ENV_VARS, COMPLIANCE_ACTIONS, COMPLIANCE_CATEGORIES, MAX_ATTACH_BYTES, MAX_ATTACH_FILES, MAX_ATTACH_TOTAL_BYTES, MAX_SESSION_ATTACH_BYTES, MAX_SESSION_REFS, OPERATION_TYPES, PERMISSION_LEVELS, PLAN_OUTCOMES, PROVIDER_INFOS, PROVIDER_TYPES, ToolExposure, apiKeyEnvVar, extractAllMentions, extractMentions, extractSessionMentions, getProviderInfo, isOperationType, isPermissionLevel, isPlanOutcome, isProviderType, normalizeApproval } from '@epoch-agent/protocol';
@@ -264,7 +264,7 @@ function createLaunchdBackend(opts = {}) {
         mkdirSync(input.logDir, { recursive: true });
         writeFileSync(path, renderPlist(label, input), "utf-8");
       } catch (err) {
-        return { ok: false, detail: `plist-write-failed: ${describe6(err)}` };
+        return { ok: false, detail: `plist-write-failed: ${describe8(err)}` };
       }
       await run("launchctl", ["bootout", `${guiDomain()}/${label}`]);
       const toggle = await backend.setEnabled(label, input.enabled);
@@ -280,7 +280,7 @@ function createLaunchdBackend(opts = {}) {
       try {
         rmSync(plistPath(label), { force: true });
       } catch (err) {
-        return { ok: false, detail: `plist-remove-failed: ${describe6(err)}` };
+        return { ok: false, detail: `plist-remove-failed: ${describe8(err)}` };
       }
       return { ok: true };
     },
@@ -435,7 +435,7 @@ function detailOf2(what, res) {
   const msg = (res.stderr || res.stdout).trim();
   return `${what} exit ${res.code}${msg ? `: ${msg}` : ""}`;
 }
-function describe6(err) {
+function describe8(err) {
   return err instanceof Error ? err.message : String(err);
 }
 var LAUNCHD_LABEL_PREFIX;
@@ -475,10 +475,10 @@ function intervalSlots(everyMinutes) {
 var runCommand2;
 var init_backend = __esm({
   "src/schedule/os/backend.ts"() {
-    runCommand2 = (file, args) => new Promise((resolve15) => {
+    runCommand2 = (file, args) => new Promise((resolve16) => {
       execFile(file, [...args], { encoding: "buffer", windowsHide: true }, (err, stdout, stderr) => {
         const code = err && typeof err.code === "number" ? err.code ?? 1 : err ? 1 : 0;
-        resolve15({ code, stdout: decodeOutput(stdout), stderr: decodeOutput(stderr) });
+        resolve16({ code, stdout: decodeOutput(stdout), stderr: decodeOutput(stderr) });
       });
     });
   }
@@ -629,7 +629,7 @@ var ToolRegistry = class {
     this.addTool(tool, source);
   }
   registerTools(tools, source = "builtin") {
-    for (const t78 of tools) this.addTool(t78, source);
+    for (const t81 of tools) this.addTool(t81, source);
   }
   addTool(tool, source) {
     const existing = this.tools.get(tool.name);
@@ -678,14 +678,14 @@ var ToolRegistry = class {
     return isCodeModeDeferred(tool) ? ToolExposure.Deferred : declared;
   }
   exposed() {
-    return this.list().filter((t78) => this.exposureOf(t78) === ToolExposure.Direct);
+    return this.list().filter((t81) => this.exposureOf(t81) === ToolExposure.Direct);
   }
   byExposure(exposure) {
-    return this.list().filter((t78) => this.exposureOf(t78) === exposure);
+    return this.list().filter((t81) => this.exposureOf(t81) === exposure);
   }
   codeModeDeclared() {
     if (!this.codeMode) return [];
-    return this.list().filter((t78) => isCodeModeDeferred(t78));
+    return this.list().filter((t81) => isCodeModeDeferred(t81));
   }
   sourceOf(name) {
     return this.tools.get(name)?.source;
@@ -734,7 +734,7 @@ var ToolRegistry = class {
 function staticToolProvider(tools) {
   return {
     list: () => tools,
-    get: (name) => tools.find((t78) => t78.name === name)
+    get: (name) => tools.find((t81) => t81.name === name)
   };
 }
 var log = createLogger("tokenizer");
@@ -1146,7 +1146,7 @@ var DelegateManager = class {
   }
   normalizeTasks(args) {
     if (args.tasks && args.tasks.length > 0) {
-      return args.role ? args.tasks.map((t78) => ({ ...t78, role: t78.role ?? args.role })) : args.tasks;
+      return args.role ? args.tasks.map((t81) => ({ ...t81, role: t81.role ?? args.role })) : args.tasks;
     }
     if (args.goal) return [{ goal: args.goal, ...args.role ? { role: args.role } : {} }];
     return [];
@@ -1156,7 +1156,7 @@ var DelegateManager = class {
     for (let i = 0; i < tasks.length; i += maxConcurrent) {
       const batch = tasks.slice(i, i + maxConcurrent);
       const batchResults = await Promise.allSettled(
-        batch.map((t78) => this.runSingleTask(t78, parentSessionId))
+        batch.map((t81) => this.runSingleTask(t81, parentSessionId))
       );
       for (const r of batchResults) {
         if (r.status === "fulfilled") {
@@ -1297,21 +1297,21 @@ function createDelegateTool(runner, config, roles) {
     operation: "command",
     describeTarget: (args) => {
       const tasks = Array.isArray(args["tasks"]) ? args["tasks"] : [];
-      const goals = tasks.map((t78) => String(t78["goal"] ?? ""));
+      const goals = tasks.map((t81) => String(t81["goal"] ?? ""));
       const single = typeof args["goal"] === "string" ? args["goal"] : "";
       return [...goals, single].filter(Boolean).join(" | ");
     },
     async execute(args, ctx) {
       const start = Date.now();
       const rawTasks = Array.isArray(args["tasks"]) ? args["tasks"] : void 0;
-      const tasks = rawTasks?.map((t78) => {
-        const o = t78;
+      const tasks = rawTasks?.map((t81) => {
+        const o = t81;
         return {
           goal: String(o["goal"] ?? "").trim(),
           context: String(o["context"] ?? ""),
           ...typeof o["role"] === "string" && o["role"].trim() ? { role: o["role"].trim() } : {}
         };
-      }).filter((t78) => t78.goal.length > 0);
+      }).filter((t81) => t81.goal.length > 0);
       const goal = typeof args["goal"] === "string" ? args["goal"].trim() : "";
       const topRole = typeof args["role"] === "string" ? args["role"].trim() : "";
       if ((!tasks || tasks.length === 0) && !goal) {
@@ -1327,7 +1327,7 @@ function createDelegateTool(runner, config, roles) {
         };
       }
       const known = listRoles();
-      const requested = [...(tasks ?? []).map((t78) => t78.role), topRole].filter(
+      const requested = [...(tasks ?? []).map((t81) => t81.role), topRole].filter(
         (r) => Boolean(r)
       );
       const unknown = [...new Set(requested)].filter((r) => !known.some((k) => k.name === r));
@@ -1500,8 +1500,8 @@ function createGoalTool(deps) {
 }
 var VALID_TARGETS = ["memory", "user"];
 var VALID_ACTIONS = ["add", "replace", "remove", "search", "read", "budget"];
-function isValidTarget(t78) {
-  return typeof t78 === "string" && VALID_TARGETS.includes(t78);
+function isValidTarget(t81) {
+  return typeof t81 === "string" && VALID_TARGETS.includes(t81);
 }
 function isValidAction(a) {
   return VALID_ACTIONS.includes(a);
@@ -1773,7 +1773,7 @@ async function runCode(input) {
   let toolCalls = 0;
   let capped2 = false;
   let ending = null;
-  return await new Promise((resolve15) => {
+  return await new Promise((resolve16) => {
     let settled = false;
     const finish = () => {
       if (settled) return;
@@ -1782,7 +1782,7 @@ async function runCode(input) {
       clearInterval(abortWatch);
       void worker.terminate().catch(() => {
       }).then(() => Promise.race([drained, delay(STREAM_DRAIN_MS)])).then(() => {
-        resolve15(toOutcome(ending, { printed, toolCalls, capped: capped2, limits}));
+        resolve16(toOutcome(ending, { printed, toolCalls, capped: capped2, limits}));
       });
     };
     const timer = setTimeout(() => {
@@ -1853,14 +1853,14 @@ async function runCode(input) {
 var ABORT_POLL_MS = 100;
 var STREAM_DRAIN_MS = 500;
 function streamEnd(stream) {
-  return new Promise((resolve15) => {
-    stream.once("end", () => resolve15());
-    stream.once("close", () => resolve15());
+  return new Promise((resolve16) => {
+    stream.once("end", () => resolve16());
+    stream.once("close", () => resolve16());
   });
 }
 function delay(ms) {
-  return new Promise((resolve15) => {
-    setTimeout(resolve15, ms).unref();
+  return new Promise((resolve16) => {
+    setTimeout(resolve16, ms).unref();
   });
 }
 function timeoutMessage(timeoutMs, toolCalls) {
@@ -4205,6 +4205,7 @@ var SkillFrontmatterSchema = z.object({
   tags: looseStringList.optional().catch(void 0)
 });
 var FRONTMATTER_KEYS = Object.keys(SkillFrontmatterSchema.shape);
+var METADATA_KEYS = ["tags"];
 function parseSkillFrontmatter(raw, label) {
   const parsed = parseFrontmatter(raw);
   if ("error" in parsed) {
@@ -4232,7 +4233,13 @@ function parseSkillFrontmatter(raw, label) {
   const raw_ = isRecord3(data) ? data : {};
   for (const key of Object.keys(raw_)) {
     if (!FRONTMATTER_KEYS.includes(key)) {
-      issues.push({ path: `${label}.${key}`, message: t("skill_load.unknown_key", { key }) });
+      const suggest = suggestKey(key, FRONTMATTER_KEYS);
+      if (suggest !== void 0) {
+        issues.push({
+          path: `${label}.${key}`,
+          message: t("infra_misc.schema_misspelled_key", { suggest })
+        });
+      }
       continue;
     }
     if (raw_[key] !== void 0 && result.data[key] === void 0) {
@@ -4248,6 +4255,7 @@ function parseSkillFrontmatter(raw, label) {
       });
     }
   }
+  issues.push(...misspelledKeyIssues(METADATA_KEYS, raw_.metadata, `${label}.metadata`));
   const fm = {};
   if (result.data.name !== void 0) fm.name = result.data.name;
   if (result.data.description !== void 0) fm.description = result.data.description;
@@ -4499,7 +4507,7 @@ function available(tools) {
   if (tools.length === 0) {
     return "No deferred tools in this session \u2014 every tool is already in your tool list.";
   }
-  const names = tools.map((t78) => t78.name).sort();
+  const names = tools.map((t81) => t81.name).sort();
   const shown = names.slice(0, MAX_LISTED);
   const rest = names.length - shown.length;
   return `Searchable tools: ${shown.join(", ")}${rest > 0 ? ` (\u2026and ${rest} more)` : ""}.`;
@@ -4619,15 +4627,15 @@ var TrackerDB = class {
     );
     this.db.transaction(() => {
       this.db.prepare("DELETE FROM todos WHERE session_id = ?").run(sessionId);
-      for (const t78 of todos) {
+      for (const t81 of todos) {
         insertStmt.run({
-          id: t78.id,
+          id: t81.id,
           session_id: sessionId,
-          content: t78.content,
-          status: t78.status,
-          reason: t78.reason || null,
-          created_at: t78.created_at,
-          updated_at: t78.updated_at
+          content: t81.content,
+          status: t81.status,
+          reason: t81.reason || null,
+          created_at: t81.created_at,
+          updated_at: t81.updated_at
         });
       }
     })();
@@ -4649,9 +4657,9 @@ function formatTodoList(todos, pendingCount) {
     cancelled: "\u5DF2\u53D6\u6D88"
   };
   lines.push(`[todo] \u72B6\u6001\u6C47\u603B: ${pendingCount} \u4E2A\u5F85\u5B8C\u6210`);
-  for (const t78 of todos) {
-    const label = statusLabel[t78.status] || t78.status;
-    lines.push(`- [${label}]  ${t78.content}${t78.reason ? ` \u2014\u2014 ${t78.reason}` : ""}`);
+  for (const t81 of todos) {
+    const label = statusLabel[t81.status] || t81.status;
+    lines.push(`- [${label}]  ${t81.content}${t81.reason ? ` \u2014\u2014 ${t81.reason}` : ""}`);
   }
   return lines.join("\n");
 }
@@ -4725,14 +4733,14 @@ function createTodoTool(db) {
           };
         }
         const now = (/* @__PURE__ */ new Date()).toISOString();
-        const existing = new Map(db.listBySession(ctx.sessionId).map((t78) => [t78.id, t78]));
-        const todos = rawTodos.map((t78) => {
-          const prev = t78.id ? existing.get(t78.id) : void 0;
-          const status = isValidStatus(t78.status) ? t78.status : "pending";
-          const reason9 = normalizeReason(status, t78.reason);
+        const existing = new Map(db.listBySession(ctx.sessionId).map((t81) => [t81.id, t81]));
+        const todos = rawTodos.map((t81) => {
+          const prev = t81.id ? existing.get(t81.id) : void 0;
+          const status = isValidStatus(t81.status) ? t81.status : "pending";
+          const reason9 = normalizeReason(status, t81.reason);
           return {
-            id: t78.id || generateShortId(),
-            content: String(t78.content || "").slice(0, 500),
+            id: t81.id || generateShortId(),
+            content: String(t81.content || "").slice(0, 500),
             status,
             ...reason9 ? { reason: reason9 } : {},
             created_at: prev?.created_at || now,
@@ -4740,7 +4748,7 @@ function createTodoTool(db) {
           };
         });
         db.replaceAll(ctx.sessionId, todos);
-        const pendingCount = todos.filter((t78) => isOpenTodo(t78.status)).length;
+        const pendingCount = todos.filter((t81) => isOpenTodo(t81.status)).length;
         return {
           success: true,
           output: formatTodoList(todos, pendingCount),
@@ -4889,7 +4897,7 @@ function parseRoleDefinition(raw, file, source) {
     };
   }
   const parsed = split.data;
-  const issues = unknownKeyIssues(FRONTMATTER_KEYS2, parsed, file);
+  const issues = misspelledKeyIssues(FRONTMATTER_KEYS2, parsed, file);
   const outcome = parseLenient(FrontmatterSchema.optional(), parsed, void 0);
   if (!outcome.value) {
     issues.push(
@@ -5075,7 +5083,7 @@ function intersectNames(base, incoming) {
   if (!base) return incoming ? [...incoming] : void 0;
   if (!incoming) return [...base];
   const baseSet = new Set(base);
-  return incoming.filter((t78) => baseSet.has(t78));
+  return incoming.filter((t81) => baseSet.has(t81));
 }
 function findRole(roles, name) {
   return roles.find((r) => r.name === name);
@@ -5152,6 +5160,64 @@ function driftOf(role, name, input) {
 function describe(err) {
   return err instanceof Error ? err.message : String(err);
 }
+function removeRoleFile(name, opts) {
+  const wanted = name.trim();
+  const hits = matchingFiles(opts.dir, wanted);
+  if (hits.length > 1) {
+    return {
+      ok: false,
+      reason: "ambiguous",
+      detail: t(
+        "role_write.ambiguous_files",
+        {
+          name: wanted,
+          paths: hits.join(t("role_write.path_sep", void 0, opts.lang))
+        },
+        opts.lang
+      )
+    };
+  }
+  const [path] = hits;
+  if (path === void 0) {
+    return {
+      ok: false,
+      reason: "not-found",
+      detail: t("role_write.no_such_file", { name: wanted }, opts.lang)
+    };
+  }
+  try {
+    rmSync(path);
+  } catch (err) {
+    return { ok: false, reason: "failed", detail: describe2(err, path, opts.lang) };
+  }
+  return { ok: true, path };
+}
+function matchingFiles(dir, name) {
+  if (!existsSync(dir)) return [];
+  let files;
+  try {
+    files = readdirSync(dir).filter((f) => f.endsWith(".md")).sort();
+  } catch {
+    return [];
+  }
+  const hits = [];
+  for (const file of files) {
+    const path = join(dir, file);
+    let raw;
+    try {
+      raw = readFileSync(path, "utf-8");
+    } catch {
+      continue;
+    }
+    const parsed = parseRoleDefinition(raw, file, "user");
+    if (parsed.role?.name === name) hits.push(path);
+  }
+  return hits;
+}
+function describe2(err, path, lang) {
+  const reason9 = err instanceof Error ? err.message : String(err);
+  return t("role_write.remove_failed", { path, reason: reason9 }, lang);
+}
 // src/agent-role/scope.ts
 function roleScopedProvider(base, role, blocked) {
   const blockedSet = new Set(blocked);
@@ -5161,7 +5227,7 @@ function roleScopedProvider(base, role, blocked) {
     return allow ? allow.has(name) : true;
   };
   return {
-    list: () => base.list().filter((t78) => permitted(t78.name)),
+    list: () => base.list().filter((t81) => permitted(t81.name)),
     get: (name) => permitted(name) ? base.get(name) : void 0
   };
 }
@@ -5188,7 +5254,7 @@ function createRoleScope(base, sessionRole, blocked) {
 }
 function unknownRoleTools(base, role, blocked) {
   if (!role?.tools) return [];
-  const available2 = new Set(base.list().map((t78) => t78.name));
+  const available2 = new Set(base.list().map((t81) => t81.name));
   const blockedSet = new Set(blocked);
   return role.tools.filter((name) => !available2.has(name) && !blockedSet.has(name));
 }
@@ -5308,7 +5374,7 @@ function loadCommandFile(file, source, prefix) {
       ]
     };
   }
-  const issues = unknownKeyIssues(FRONTMATTER_KEYS3, parsed.data, at);
+  const issues = misspelledKeyIssues(FRONTMATTER_KEYS3, parsed.data, at);
   const checked = parseLenient(CommandFrontmatterSchema.optional(), parsed.data, void 0);
   if (!checked.value) {
     issues.push(
@@ -5524,7 +5590,7 @@ function createToolScope(base) {
   const permitted = (name) => allow ? allow.has(name) : true;
   return {
     provider: {
-      list: () => base.list().filter((t78) => permitted(t78.name)),
+      list: () => base.list().filter((t81) => permitted(t81.name)),
       get: (name) => permitted(name) ? base.get(name) : void 0
     },
     enter: (next) => {
@@ -5694,7 +5760,7 @@ function scanHooks(dir, issues) {
   return [...parsed.entries].map(([type, list]) => ({
     type,
     count: list.reduce((sum, entry) => sum + entry.hooks.length, 0)
-  })).filter((t78) => t78.count > 0).sort((a, b) => a.type.localeCompare(b.type));
+  })).filter((t81) => t81.count > 0).sort((a, b) => a.type.localeCompare(b.type));
 }
 function scanMcp(dir, plugin, issues) {
   const path = join(dir, PLUGIN_LAYOUT.mcp);
@@ -5781,6 +5847,7 @@ var PluginAuthorSchema = z.object({
   email: z.string().min(1).optional(),
   url: z.string().min(1).optional()
 });
+var PLUGIN_VISIBILITY = ["private", "public"];
 var ManifestSchema = z.object({
   name: z.string().min(1),
   version: z.string().min(1),
@@ -5788,9 +5855,14 @@ var ManifestSchema = z.object({
   author: PluginAuthorSchema.optional(),
   epochVersion: z.string().min(1).optional(),
   homepage: z.string().min(1).optional(),
-  keywords: z.array(z.string().min(1)).optional()
+  keywords: z.array(z.string().min(1)).optional(),
+  displayName: z.string().min(1).optional(),
+  category: z.string().min(1).optional(),
+  icon: z.string().min(1).optional(),
+  changelog: z.string().min(1).optional(),
+  visibility: z.enum(PLUGIN_VISIBILITY).optional().catch(void 0)
 });
-var MANIFEST_KEYS = Object.keys(ManifestSchema.shape);
+var PLUGIN_MANIFEST_KEYS = Object.keys(ManifestSchema.shape);
 function readPluginManifest(dir) {
   const path = join(dir, PLUGIN_MANIFEST_FILE);
   let raw;
@@ -5815,7 +5887,17 @@ function readPluginManifest(dir) {
       issues: [{ path, message: t("plugin_manifest.bad_json", { reason: firstLine2(err) }) }]
     };
   }
-  const issues = unknownKeyIssues(MANIFEST_KEYS, parsed, PLUGIN_MANIFEST_FILE);
+  const issues = unknownKeyIssues(PLUGIN_MANIFEST_KEYS, parsed, PLUGIN_MANIFEST_FILE);
+  const rawVisibility = parsed?.visibility;
+  if (rawVisibility !== void 0 && !PLUGIN_VISIBILITY.includes(rawVisibility)) {
+    issues.push({
+      path: `${path}.visibility`,
+      message: t("plugin_manifest.bad_visibility", {
+        raw: String(rawVisibility),
+        allowed: PLUGIN_VISIBILITY.join(" / ")
+      })
+    });
+  }
   const checked = parseLenient(ManifestSchema.optional(), parsed, void 0);
   if (!checked.value) {
     issues.push(
@@ -6095,7 +6177,7 @@ var PluginStore = class {
   }
 };
 function sleep(ms) {
-  return new Promise((resolve15) => setTimeout(resolve15, ms));
+  return new Promise((resolve16) => setTimeout(resolve16, ms));
 }
 // src/plugin/loader.ts
 var MODULE = "Plugin";
@@ -6298,7 +6380,7 @@ function runCommand(file, args, opts = {}) {
           resolvePromise({ ok: true, stdout: out, stderr: errOut });
           return;
         }
-        const detail = describe2(file, err, errOut);
+        const detail = describe3(file, err, errOut);
         resolvePromise({
           ok: false,
           detail,
@@ -6317,7 +6399,7 @@ function escapeForCmd(arg) {
   const quoted = `"${arg.replace(/(\\*)"/g, '$1$1\\"').replace(/(\\*)$/, "$1$1")}"`;
   return quoted.replace(/([()%!^<>&|;,"])/g, "^$1");
 }
-function describe2(file, err, stderr) {
+function describe3(file, err, stderr) {
   if (err.code === "ENOENT") return t("plugin_cmd.not_found", { file });
   if (err.killed) return t("plugin_cmd.timeout", { file });
   const tail = stderr.trim().split("\n").slice(-4).join("\n").trim();
@@ -6900,7 +6982,7 @@ var EntrySchema = z.object({
   changelog: z.string().min(1).optional(),
   size: z.number().int().positive().optional(),
   homepage: z.string().min(1).optional(),
-  visibility: z.enum(["private", "public"]).optional().catch(void 0),
+  visibility: z.enum(PLUGIN_VISIBILITY).optional().catch(void 0),
   status: z.enum(["listed", "reviewing", "rejected", "offline"]).optional().catch(void 0)
 });
 var MARKETPLACE_DISPLAY_FIELDS = [
@@ -7403,14 +7485,14 @@ var CheckpointStore = class {
   }
   async enforceTotalSize(protectSession, protectTurnIndex) {
     const turns = await this.collectTurns();
-    let total = turns.reduce((sum, t78) => sum + t78.bytes, 0);
+    let total = turns.reduce((sum, t81) => sum + t81.bytes, 0);
     if (total <= this.maxTotalBytes) return;
     turns.sort((a, b) => a.createdAt - b.createdAt);
-    for (const t78 of turns) {
+    for (const t81 of turns) {
       if (total <= this.maxTotalBytes) return;
-      if (t78.sessionId === protectSession && t78.turnIndex === protectTurnIndex) continue;
-      await this.removeTurn(t78.sessionId, t78.turnIndex);
-      total -= t78.bytes;
+      if (t81.sessionId === protectSession && t81.turnIndex === protectTurnIndex) continue;
+      await this.removeTurn(t81.sessionId, t81.turnIndex);
+      total -= t81.bytes;
     }
   }
   async collectTurns() {
@@ -8116,8 +8198,8 @@ function sanitizeToolOutput(text) {
   if (!stripped.includes("\r")) return stripped;
   return stripped.split("\n").map((line) => line.includes("\r") ? line.slice(line.lastIndexOf("\r") + 1) : line).join("\n");
 }
-var sleep2 = (ms) => new Promise((resolve15) => {
-  setTimeout(resolve15, ms);
+var sleep2 = (ms) => new Promise((resolve16) => {
+  setTimeout(resolve16, ms);
 });
 async function* pumpToolOutput(target, start, options = {}) {
   const flushMs = options.flushMs ?? FLUSH_MS;
@@ -8185,8 +8267,8 @@ async function* pumpToolOutput(target, start, options = {}) {
       continue;
     }
     if (!running) break;
-    await new Promise((resolve15) => {
-      wake = resolve15;
+    await new Promise((resolve16) => {
+      wake = resolve16;
     });
     if (running && flushMs > 0) await sleep2(flushMs);
   }
@@ -8595,7 +8677,7 @@ function decideTrust(dir) {
   return ambient ? ambient.decide(dir) : noGate();
 }
 var FILE_VERSION = 1;
-function describe3(err) {
+function describe4(err) {
   return err instanceof Error ? err.message : String(err);
 }
 var ImportTrustStore = class {
@@ -8637,7 +8719,7 @@ var ImportTrustStore = class {
       raw = readFileSync(this.filePath, "utf-8");
     } catch (err) {
       this.loadErrors.push(
-        t("import_trust.read_failed", { path: this.filePath, reason: describe3(err) })
+        t("import_trust.read_failed", { path: this.filePath, reason: describe4(err) })
       );
       return;
     }
@@ -8646,7 +8728,7 @@ var ImportTrustStore = class {
       parsed = JSON.parse(raw);
     } catch (err) {
       this.loadErrors.push(
-        t("import_trust.bad_json", { path: this.filePath, reason: describe3(err) })
+        t("import_trust.bad_json", { path: this.filePath, reason: describe4(err) })
       );
       return;
     }
@@ -8704,7 +8786,7 @@ var ImportTrustStore = class {
     } catch (err) {
       rmSync(tmp, { force: true });
       throw new Error(
-        t("import_trust.write_failed", { path: this.filePath, reason: describe3(err) })
+        t("import_trust.write_failed", { path: this.filePath, reason: describe4(err) })
       );
     }
   }
@@ -9516,7 +9598,6 @@ ${this.describeWarning(status)}
     });
   }
 };
-// src/provider/errors.ts
 var ProviderError = class extends Error {
   constructor(message, code, recoverable, recovery = "abort") {
     super(message);
@@ -9544,6 +9625,40 @@ function isAbortError(err) {
   }
   return false;
 }
+function causeChain(err) {
+  const out = [];
+  for (let cur = err, depth = 0; cur && depth < 5; depth++) {
+    if (typeof cur !== "object") break;
+    const e = cur;
+    out.push({
+      message: typeof e.message === "string" ? e.message : "",
+      ...typeof e.code === "string" ? { code: e.code } : {}
+    });
+    cur = e.cause;
+  }
+  return out;
+}
+var NETWORK_ERROR_CODES = /* @__PURE__ */ new Set([
+  "ECONNRESET",
+  "ECONNREFUSED",
+  "ETIMEDOUT",
+  "ENOTFOUND",
+  "EPIPE",
+  "EAI_AGAIN",
+  "UND_ERR_SOCKET",
+  "UND_ERR_CONNECT_TIMEOUT",
+  "UND_ERR_HEADERS_TIMEOUT",
+  "UND_ERR_BODY_TIMEOUT",
+  "UND_ERR_RESPONSE_STATUS_CODE"
+]);
+var NETWORK_MESSAGE_RE = /timeout|timed.?out|etimedout|econnreset|enotfound|socket.?hang.?up|other.?side.?closed|terminated|network.?error|fetch.?failed/i;
+function describeProviderError(err) {
+  const chain = causeChain(err);
+  const head = chain[0]?.message ?? (typeof err === "string" ? err : String(err));
+  if (chain.length === 0) return head;
+  const root = [...chain].reverse().find((link) => link.message !== "" && link.message !== head)?.message;
+  return root ? t("provider_route.root_cause", { message: head, cause: root }) : head;
+}
 function extractStatus(err) {
   if (!err || typeof err !== "object") return void 0;
   const e = err;
@@ -9576,8 +9691,7 @@ function classifyProviderError(err) {
     return { code: 1040, recovery: "switch_model" };
   if (/overloaded|server.?error|bad.?gateway|service.?unavailable/i.test(msg))
     return { code: 1020, recovery: "retry" };
-  if (/timeout|timed.?out|etimedout|econnreset|enotfound|socket.?hang.?up/i.test(msg))
-    return { code: 1041, recovery: "retry" };
+  if (NETWORK_MESSAGE_RE.test(msg)) return { code: 1041, recovery: "retry" };
   const code = status ?? extractStatusFromMessage(msg);
   if (code !== void 0) {
     if (code === 401 || code === 403) return { code: 1001, recovery: "rotate_credential" };
@@ -9587,6 +9701,10 @@ function classifyProviderError(err) {
     if (code >= 500) return { code: 1020, recovery: "retry" };
     if (code >= 400) return { code: 1050, recovery: "abort" };
   }
+  for (const link of causeChain(err)) {
+    if (link.code && NETWORK_ERROR_CODES.has(link.code)) return { code: 1041, recovery: "retry" };
+    if (NETWORK_MESSAGE_RE.test(link.message)) return { code: 1041, recovery: "retry" };
+  }
   return { code: 9999, recovery: "retry" };
 }
 function toModelMessages(messages) {
@@ -9777,6 +9895,28 @@ function droppedUserContentParts(warnings) {
   });
 }
 var DROPPED_PART_HINTS = ["image", "file"];
+// src/agent/blank-turn-detector.ts
+var NEAR_BLANK_MAX_CHARS = 4;
+var ACKNOWLEDGEMENTS = [
+  {
+    zh: /^[一-鿿]{0,2}(?:完|好|到)(?:了|啦|的)?[。．.！!]?$/,
+    en: /^(?:done|finished|complete[d]?)[.!]?$/i
+  },
+  {
+    zh: /^(?:完成|搞定|收工|行|可以|嗯|是|是的|对|对的|没错)(?:了|啦)?[。．.！!]?$/,
+    en: /^(?:ok(?:ay)?|sure|yes|yep|yeah|right|no|nope)[.!]?$/i
+  }
+];
+function isAcknowledgement(text) {
+  return ACKNOWLEDGEMENTS.some((a) => a.zh.test(text) || a.en.test(text));
+}
+function blankFinish(text, didToolWork) {
+  if (!didToolWork) return false;
+  const trimmed = text.trim();
+  if (trimmed.length === 0) return true;
+  if (trimmed.length > NEAR_BLANK_MAX_CHARS) return false;
+  return !isAcknowledgement(trimmed);
+}
 // src/agent/hooks.ts
 var HookDispatcher = class {
   constructor(manager, workDir) {
@@ -10080,6 +10220,14 @@ function announcedButIdleNote() {
     "\u771F\u505A\u4E0D\u4E0B\u53BB\uFF08\u7F3A\u51ED\u636E\u3001\u8981\u82B1\u94B1\u3001\u53D6\u6570\u4E00\u76F4\u5931\u8D25\uFF09\u5C31\u8BF4\u6E05\u5361\u5728\u54EA\u4E00\u6B65\u7684\u54EA\u4E00\u73AF\u3002"
   ].join("\n");
 }
+function blankResponseNote(chars) {
+  return [
+    `\u4F60\u4E0A\u4E00\u8F6E\u628A\u5DE5\u5177\u8DD1\u5B8C\u4E86\uFF0C\u4F46\u4EA4\u5230\u7528\u6237\u5C4F\u5E55\u4E0A\u7684\u6B63\u6587\u53EA\u6709 ${chars} \u4E2A\u5B57 \u2014\u2014 \u5728\u7528\u6237\u90A3\u8FB9\uFF0C\u8FD9\u4E00\u8F6E\u7B49\u4E8E\u6CA1\u6709\u56DE\u590D\u3002`,
+    "\u73B0\u5728\u628A\u7ED3\u8BBA\u5B8C\u6574\u5199\u51FA\u6765\uFF1A\u7528\u6237\u95EE\u7684\u90A3\u4EF6\u4E8B\uFF0C\u7B54\u6848\u662F\u4EC0\u4E48\u3002\u522B\u53EA\u56DE\u4E00\u53E5\u300C\u597D\u7684\u300D\u300C\u5B8C\u6210\u4E86\u300D\u300C\u5DF2\u5904\u7406\u300D\u3002",
+    "\u5982\u679C\u4F60\u89C9\u5F97\u81EA\u5DF1\u4E0A\u4E00\u8F6E\u5176\u5B9E\u5DF2\u7ECF\u7B54\u5B8C\u4E86\uFF0C\u90A3\u5C31\u628A\u90A3\u6BB5\u7ED3\u8BBA\u5B8C\u6574\u5730\u518D\u8BF4\u4E00\u904D \u2014\u2014 \u5B83\u6CA1\u6709\u5230\u8FBE\u7528\u6237\u3002",
+    "\u4E0A\u4E00\u8F6E\u7684\u5DE5\u5177\u7ED3\u679C\u90FD\u8FD8\u5728\u4E0A\u9762\u7684\u4E0A\u4E0B\u6587\u91CC\uFF0C\u76F4\u63A5\u636E\u6B64\u4F5C\u7B54\uFF0C\u522B\u628A\u90A3\u4E9B\u5DE5\u5177\u91CD\u8DD1\u4E00\u904D\u3002"
+  ].join("\n");
+}
 var CODE_VERIFICATION_POLICY = [
   "<code_verification>",
   "\u6539\u5B8C\u4EE3\u7801\u3001\u5BA3\u5E03\u5B8C\u6210\u4E4B\u524D\uFF0C\u8C03\u4E00\u6B21 `lsp_diagnostics`\uFF0C\u628A\u672C\u8F6E\u65B0\u5EFA\u6216\u4FEE\u6539\u8FC7\u7684\u6E90\u6587\u4EF6\u5217\u8FDB\u53BB\u3002",
@@ -10123,11 +10271,11 @@ var PromptBuilder = class {
   memoryInitialized = false;
   projectBlock(tools) {
     const permLevel = this.deps.permissionManager?.getLevel() || "default";
-    const hasPlanTool = tools.some((t78) => t78.name === "enter_plan_mode");
-    const hasLspTool = tools.some((t78) => t78.name === "lsp_diagnostics");
-    const hasAskTool = tools.some((t78) => t78.name === "ask_user_question");
-    const hasTodoTool = tools.some((t78) => t78.name === "todo");
-    const hasTerminal = tools.some((t78) => t78.name === "terminal");
+    const hasPlanTool = tools.some((t81) => t81.name === "enter_plan_mode");
+    const hasLspTool = tools.some((t81) => t81.name === "lsp_diagnostics");
+    const hasAskTool = tools.some((t81) => t81.name === "ask_user_question");
+    const hasTodoTool = tools.some((t81) => t81.name === "todo");
+    const hasTerminal = tools.some((t81) => t81.name === "terminal");
     const needsCommandApproval = hasTerminal && permLevel === "default";
     const plan = this.deps.approvedPlan?.()?.trim();
     const codeSdk = renderSdkDeclaration(this.deps.codeModeTools?.() ?? []);
@@ -11006,8 +11154,8 @@ function imageParts(content) {
   return typeof content === "string" ? [] : content.filter((p) => p.type === "image");
 }
 function toolSignatureOf(config, tools) {
-  const direct = tools.map((t78) => t78.name).join("\0");
-  const declared = (config.codeModeTools?.() ?? []).map((t78) => t78.name).join("\0");
+  const direct = tools.map((t81) => t81.name).join("\0");
+  const declared = (config.codeModeTools?.() ?? []).map((t81) => t81.name).join("\0");
   return declared ? `${direct}|${declared}` : direct;
 }
 function modelSignatureOf(info) {
@@ -11126,6 +11274,15 @@ var AgentLoop = class {
   isAborted(signal) {
     return this.aborted || signal?.aborted === true;
   }
+  async *drainSteer(input, messages) {
+    const items = input.steer?.take() ?? [];
+    for (const item of items) {
+      const text = contentToText(item);
+      const parts = typeof item === "string" ? void 0 : item;
+      messages.push({ role: "user", content: text, ...parts ? { parts } : {} });
+      yield { type: "steer", text, ...parts ? { parts } : {} };
+    }
+  }
   contextBreakdown(opts) {
     const seg2 = this.prompt.segments();
     return buildContextBreakdown({
@@ -11310,6 +11467,8 @@ var AgentLoop = class {
       const taskNotice = new TaskNoticeTracker(this.config.backgroundTasks);
       let todoNudged = false;
       let idleNudged = false;
+      let blankNudged = false;
+      let blankAfterNudge = false;
       for (let turn = 1; turn <= maxTurns; turn++) {
         if (this.isAborted(input.signal)) {
           yield finish("aborted");
@@ -11332,6 +11491,7 @@ var AgentLoop = class {
         }
         const notice2 = taskNotice.notice();
         if (notice2) messages.push({ role: "user", content: notice2 });
+        if (turn > 1) yield* this.drainSteer(input, messages);
         this.hooks.fire("turn:before", {
           sessionId: input.sessionId,
           userMessage: transformed,
@@ -11409,7 +11569,8 @@ var AgentLoop = class {
             tools,
             system,
             maxSteps: 1,
-            ...isAbortSignal(input.signal) ? { signal: input.signal } : {}
+            ...isAbortSignal(input.signal) ? { signal: input.signal } : {},
+            ...this.config.maxOutputTokens ? { maxTokens: this.config.maxOutputTokens } : {}
           },
           streaming,
           ...guard ? { guard } : {},
@@ -11561,6 +11722,11 @@ ${finalText}` };
             usage: result.usage,
             turn
           });
+          if (turn < maxTurns && input.steer?.pending() === true) {
+            messages.push({ role: "assistant", content: finalText || NO_OUTPUT_TEXT });
+            yield* this.drainSteer(input, messages);
+            continue;
+          }
           const wantContinue = await this.hooks.wantsContinue(
             input.sessionId,
             finalText,
@@ -11578,6 +11744,23 @@ ${finalText}` };
             );
             continue;
           }
+          const didToolWork = turns.some((r) => r.toolCalls.length > 0);
+          if (!truncated && blankFinish(finalText, didToolWork)) {
+            if (!blankNudged && turn < maxTurns) {
+              blankNudged = true;
+              yield {
+                type: "notice",
+                code: "blank-response",
+                text: t("agent_run.blank_response")
+              };
+              messages.push(
+                { role: "assistant", content: finalText || NO_OUTPUT_TEXT },
+                { role: "user", content: systemNote(blankResponseNote(finalText.trim().length)) }
+              );
+              continue;
+            }
+            blankAfterNudge = blankNudged;
+          }
           if (!todoNudged && turn < maxTurns) {
             const open = this.config.pendingTodos?.(input.sessionId);
             if (open !== void 0 && open > 0) {
@@ -11606,8 +11789,8 @@ ${finalText}` };
             totalTokens: totalInput + totalOutput,
             turns
           });
-          this.maybeLearn(userText, finalText);
-          yield finish(truncated ? "length" : "stop");
+          if (!blankAfterNudge) this.maybeLearn(userText, finalText);
+          yield finish(truncated ? "length" : blankAfterNudge ? "blank" : "stop");
           return;
         }
         messages.push({
@@ -11801,7 +11984,12 @@ ${finalText}` };
         "epoch.summary_skipped": compressed.summarySkipped === true,
         "epoch.pruned_tokens": compressed.prunedTokens
       });
-      return { messages: compressed.messages.map((m) => unflattenMessage(m)), ...bill };
+      return {
+        messages: compressed.messages.map((m) => unflattenMessage(m)),
+        ...bill,
+        ...compressed.carriedHead === void 0 ? {} : { carriedHead: compressed.carriedHead },
+        ...compressed.carriedTail === void 0 ? {} : { carriedTail: compressed.carriedTail }
+      };
     } catch {
       return { messages };
     }
@@ -11955,6 +12143,11 @@ var ArtifactsSchema = z.object({
   maxAgeDays: z.int().positive().max(3650).default(ARTIFACT_RETENTION_DEFAULTS.maxAgeDays),
   maxTotalBytes: z.int().positive().default(ARTIFACT_RETENTION_DEFAULTS.maxTotalBytes)
 });
+var SessionsSchema = z.object({
+  autoPrune: z.boolean().default(false),
+  retentionDays: z.int().positive().max(3650).default(90),
+  vacuumAfterPrune: z.boolean().default(true)
+});
 var TelemetrySchema = z.object({
   enabled: z.boolean().optional(),
   target: z.enum(["file", "console", "otlp"]).optional(),
@@ -11968,6 +12161,7 @@ var EpochConfigSchema = z.object({
   shell: z.enum(SHELL_KINDS).optional(),
   maxTurns: z.int().nonnegative().default(DEFAULT_MAX_TURNS),
   contextLength: z.int().positive().default(2e5),
+  maxOutputTokens: z.int().positive().optional(),
   homeDir: z.string().min(1).default(() => resolveHomeDir()),
   dbPath: z.string().min(1).default(() => dbPath(resolveHomeDir())),
   permission: z.enum(PERMISSION_LEVELS).default("default"),
@@ -11991,6 +12185,7 @@ var EpochConfigSchema = z.object({
   compression: CompressionSchema.prefault({}),
   memory: MemorySchema.prefault({}),
   artifacts: ArtifactsSchema.prefault({}),
+  sessions: SessionsSchema.prefault({}),
   budget: BudgetSchema.optional(),
   compliance: ComplianceSchema.optional(),
   headless: HeadlessSchema.optional(),
@@ -12212,12 +12407,12 @@ function finishLayer(source, read, execTrusted, issues) {
       status: gated ? "gated" : "loaded",
       lists: checked.lists,
       scalars: {},
-      detail: describe4(layer, gated, checked.lists)
+      detail: describe5(layer, gated, checked.lists)
     },
     file: { ...file, permissions: checked.lists }
   };
 }
-function describe4(layer, gated, lists) {
+function describe5(layer, gated, lists) {
   const label = layerLabel(layer);
   if (gated) {
     const deny = lists.deny?.length ?? 0;
@@ -12476,7 +12671,11 @@ function parseRawConfig(raw, issues, track) {
   const migrated = migrateRawConfig(expanded);
   issues.push(...migrated.issues);
   issues.push(...unknownKeyIssues(CONFIG_KEYS, migrated.raw));
-  const outcome = parseLenient(EpochConfigSchema, dropEmptySections(migrated.raw), defaultConfig());
+  const outcome = parseLenient(
+    EpochConfigSchema,
+    dropEmptySections(migrated.raw),
+    EpochConfigSchema.parse({})
+  );
   issues.push(...outcome.issues);
   if (outcome.issues.length === 0) collectKeyPaths(migrated.raw, track.file);
   return outcome.value;
@@ -13086,6 +13285,7 @@ function getCapability(modelId, homeDir, provider) {
   }
   return {
     contextLength: DEFAULT_CONTEXT_LENGTH2,
+    contextLengthUnknown: true,
     maxOutputTokens: 4096,
     supportsTools: true,
     ...images,
@@ -13598,7 +13798,7 @@ var ProviderRouter = class {
   }
   async recover(err, state) {
     const { code, recovery } = classifyProviderError(err);
-    const message = err instanceof Error ? err.message : String(err);
+    const message = describeProviderError(err);
     const stay = { kind: "continue", ct: state.ct, cm: state.cm };
     if (code === PROVIDER_ABORTED) return { kind: "give-up", message, code };
     if (recovery === "rotate_credential" && this.rotateCredential())
@@ -13789,7 +13989,7 @@ var ProviderRouter = class {
       } catch (err) {
         const cause = streamPartError ?? err;
         if (emitted) {
-          yield { type: "error", error: cause instanceof Error ? cause.message : String(cause) };
+          yield { type: "error", error: describeProviderError(cause) };
           return;
         }
         const plan = await this.recover(cause, state);
@@ -14033,6 +14233,7 @@ var SETTING_WRITE_KEYS = [
   "models.utility",
   "fallback.model",
   "contextLength",
+  "maxOutputTokens",
   "compression.enabled",
   "compression.threshold",
   "memory.memoryCharLimit",
@@ -14042,6 +14243,9 @@ var SETTING_WRITE_KEYS = [
   "budget.maxTokens",
   "budget.warnAtPercent",
   "budget.onUnknownPricing",
+  "sessions.autoPrune",
+  "sessions.retentionDays",
+  "sessions.vacuumAfterPrune",
   "permission"
 ];
 function isWritableSettingKey(value) {
@@ -14096,6 +14300,7 @@ var VALUE_SCHEMA = {
   "models.utility": EpochConfigSchema.shape.models.unwrap().shape.utility.unwrap(),
   "fallback.model": EpochConfigSchema.shape.fallback.unwrap().shape.model.unwrap(),
   contextLength: EpochConfigSchema.shape.contextLength.unwrap(),
+  maxOutputTokens: EpochConfigSchema.shape.maxOutputTokens.unwrap(),
   "compression.enabled": EpochConfigSchema.shape.compression.unwrap().shape.enabled.unwrap(),
   "compression.threshold": EpochConfigSchema.shape.compression.unwrap().shape.threshold.unwrap(),
   "memory.memoryCharLimit": EpochConfigSchema.shape.memory.unwrap().shape.memoryCharLimit.unwrap(),
@@ -14105,6 +14310,9 @@ var VALUE_SCHEMA = {
   "budget.maxTokens": EpochConfigSchema.shape.budget.unwrap().shape.maxTokens.unwrap(),
   "budget.warnAtPercent": EpochConfigSchema.shape.budget.unwrap().shape.warnAtPercent.unwrap(),
   "budget.onUnknownPricing": EpochConfigSchema.shape.budget.unwrap().shape.onUnknownPricing.unwrap(),
+  "sessions.autoPrune": EpochConfigSchema.shape.sessions.unwrap().shape.autoPrune.unwrap(),
+  "sessions.retentionDays": EpochConfigSchema.shape.sessions.unwrap().shape.retentionDays.unwrap(),
+  "sessions.vacuumAfterPrune": EpochConfigSchema.shape.sessions.unwrap().shape.vacuumAfterPrune.unwrap(),
   permission: EpochConfigSchema.shape.permission.unwrap()
 };
 function settingValueKind(key) {
@@ -14513,11 +14721,11 @@ function buildSearchQuery(query) {
   }
   const latinPart = cleaned.replace(CJK_RUN, " ");
   for (const w of latinPart.split(/\s+/)) {
-    const t78 = w.trim();
-    if (t78.length >= 2) terms.add(t78);
+    const t81 = w.trim();
+    if (t81.length >= 2) terms.add(t81);
   }
   if (terms.size === 0) return null;
-  return [...terms].map((t78) => `"${t78.replace(/"/g, "")}"`).join(" OR ");
+  return [...terms].map((t81) => `"${t81.replace(/"/g, "")}"`).join(" OR ");
 }
 // src/memory/db.ts
 var NS2 = "memory";
@@ -15846,6 +16054,27 @@ var SESSION_MIGRATIONS = [
     up: (db) => {
       db.exec(`ALTER TABLE sessions ADD COLUMN priced_call_count INTEGER NOT NULL DEFAULT 0;`);
     }
+  },
+  {
+    id: "session-meta-kv",
+    version: 11,
+    description: "\u7EF4\u62A4\u7528\u7684 key/value \u8868\uFF08\u81EA\u52A8\u6E05\u7406\u7684\u8282\u6D41\u65F6\u523B\uFF0C2026-09-15\uFF09",
+    up: (db) => {
+      db.exec(`
+    CREATE TABLE IF NOT EXISTS session_meta (
+      key   TEXT PRIMARY KEY,
+      value TEXT NOT NULL
+    );
+      `);
+    }
+  },
+  {
+    id: "sessions-open-turn-from",
+    version: 13,
+    description: "\u4F1A\u8BDD\u8868\u52A0 open_turn_from \u4E00\u5217\uFF08\u88AB\u4E2D\u65AD\u7684\u90A3\u4E00\u8F6E\u8BA4\u5F97\u51FA\u6765\uFF0C2026-09-16\uFF09",
+    up: (db) => {
+      db.exec(`ALTER TABLE sessions ADD COLUMN open_turn_from INTEGER`);
+    }
   }
 ];
 var FTS_EXTERNAL_SCHEMA = `
@@ -15896,7 +16125,7 @@ var FTS_EXTERNAL_SCHEMA = `
 var FTS_EXTERNAL_MIGRATIONS = [
   {
     id: "fts-external-content",
-    version: 10,
+    version: 14,
     description: "\u4E24\u5F20 FTS \u8868\u6539\u6210\u5916\u90E8\u5185\u5BB9\u8868\uFF08\u6B63\u6587\u4E0D\u518D\u5B58\u4E09\u4EFD\uFF0C2026-08-21\uFF09",
     up: (db) => {
       db.exec(FTS_EXTERNAL_SCHEMA);
@@ -16092,12 +16321,27 @@ var SessionDB = class {
   }
   getMessages(sessionId, activeOnly = true) {
     const where = activeOnly ? "session_id = ? AND active = 1" : "session_id = ?";
-    const rows = this.db.prepare(`SELECT * FROM messages WHERE ${where} ORDER BY timestamp ASC`).all(sessionId);
+    const rows = this.db.prepare(`SELECT * FROM messages WHERE ${where} ORDER BY timestamp ASC, id ASC`).all(sessionId);
     return rows.map((r) => this.rowToMessage(r));
   }
   markObserved(sessionId, messageId) {
     this.db.prepare("UPDATE messages SET observed = 1 WHERE session_id = ? AND id <= ?").run(sessionId, messageId);
   }
+  attachTurnFacts(sessionId, messageId, input) {
+    const sets = [];
+    if (input.turnFacts !== void 0) sets.push("turn_facts = @turnFacts");
+    if (input.finishReason !== void 0) sets.push("finish_reason = @finishReason");
+    if (sets.length === 0) return;
+    this.db.prepare(`UPDATE messages SET ${sets.join(", ")} WHERE session_id = @sessionId AND id = @id`).run({
+      sessionId,
+      id: messageId,
+      turnFacts: encodeTurnFacts(input.turnFacts),
+      finishReason: input.finishReason ?? null
+    });
+  }
+  setOpenTurn(sessionId, from) {
+    this.db.prepare("UPDATE sessions SET open_turn_from = ? WHERE id = ?").run(from, sessionId);
+  }
   lastMessageId(sessionId) {
     const row = this.db.prepare("SELECT MAX(id) AS maxId FROM messages WHERE session_id = ?").get(sessionId);
     return row?.maxId ?? 0;
@@ -16199,6 +16443,46 @@ var SessionDB = class {
     }
     return { results };
   }
+  pruneCandidates(input) {
+    const clauses = ["ended_at IS NOT NULL", "updated_at < @cutoff"];
+    const params = { cutoff: input.olderThanMs };
+    if (typeof input.archived === "boolean") {
+      clauses.push("archived = @archived");
+      params["archived"] = input.archived ? 1 : 0;
+    }
+    if (!input.includePinned) clauses.push("COALESCE(pinned, 0) = 0");
+    const rows = this.db.prepare(`SELECT * FROM sessions WHERE ${clauses.join(" AND ")} ORDER BY updated_at ASC`).all(params);
+    return rows.map((r) => this.rowToMeta(r));
+  }
+  openPruneMatches(input) {
+    const clauses = ["ended_at IS NULL", "updated_at < @cutoff"];
+    if (!input.includePinned) clauses.push("COALESCE(pinned, 0) = 0");
+    const row = this.db.prepare(`SELECT COUNT(*) AS n FROM sessions WHERE ${clauses.join(" AND ")}`).get({ cutoff: input.olderThanMs });
+    return row.n;
+  }
+  freelistRatio() {
+    const pages = Number(this.db.pragma("page_count", { simple: true }));
+    if (pages <= 0) return 0;
+    return Number(this.db.pragma("freelist_count", { simple: true })) / pages;
+  }
+  getMeta(key) {
+    const row = this.db.prepare("SELECT value FROM session_meta WHERE key = ?").get(key);
+    return row?.value ?? null;
+  }
+  setMeta(key, value) {
+    this.db.prepare(
+      "INSERT INTO session_meta (key, value) VALUES (@key, @value) ON CONFLICT(key) DO UPDATE SET value = @value"
+    ).run({ key, value });
+  }
+  claimMaintenanceSlot(key, minIntervalMs, now) {
+    const run = this.db.transaction(() => {
+      const last = this.getMeta(key);
+      if (last !== null && now - Number(last) < minIntervalMs) return false;
+      this.setMeta(key, String(now));
+      return true;
+    });
+    return run();
+  }
   compact(sessionId, summary, beforeCount, keep) {
     const messages = this.db.prepare(
       "SELECT id FROM messages WHERE session_id = ? AND active = 1 ORDER BY timestamp DESC"
@@ -16217,6 +16501,29 @@ var SessionDB = class {
       duration: 0
     };
   }
+  archiveAndCompact(sessionId, input) {
+    const run = this.db.transaction(() => {
+      const rows = this.db.prepare(
+        "SELECT id, timestamp FROM messages WHERE session_id = ? AND active = 1 AND id <= ? ORDER BY timestamp ASC, id ASC"
+      ).all(sessionId, input.watermark);
+      const end = rows.length - input.tailCount;
+      const middle = end > input.headCount ? rows.slice(input.headCount, end) : [];
+      if (middle.length === 0) return null;
+      const mark = this.db.prepare("UPDATE messages SET active = 0, compacted = 1 WHERE id = ?");
+      for (const row of middle) mark.run(row.id);
+      const summaryId = this.nextMessageId();
+      this.insertMessage({
+        sessionId,
+        id: summaryId,
+        role: "user",
+        content: input.summary,
+        timestamp: middle[0].timestamp
+      });
+      this.db.prepare("UPDATE sessions SET summary = @s WHERE id = @id").run({ s: input.summary, id: sessionId });
+      return { archived: middle.length, summaryId };
+    });
+    return run();
+  }
   getSummary(sessionId) {
     const row = this.db.prepare("SELECT summary FROM sessions WHERE id = ?").get(sessionId);
     return row?.summary ?? null;
@@ -16303,6 +16610,7 @@ var SessionDB = class {
       workspaceRoot: row["workspace_root"] ?? void 0,
       startedAt: new Date(row["started_at"]),
       updatedAt: new Date(row["updated_at"] ?? row["started_at"]),
+      openTurnFrom: row["open_turn_from"] ?? null,
       endedAt: row["ended_at"] ? new Date(row["ended_at"]) : void 0,
       endReason: row["end_reason"]
     };
@@ -16415,7 +16723,7 @@ function checkFtsHealth(db) {
     messages,
     tables,
     missingTriggers,
-    healthy: missingTriggers.length === 0 && tables.every((t78) => t78.error === null && t78.drift === null && t78.rows === messages),
+    healthy: missingTriggers.length === 0 && tables.every((t81) => t81.error === null && t81.drift === null && t81.rows === messages),
     indexBytes: indexBytesOf(db),
     space: spaceOf(db)
   };
@@ -16561,6 +16869,7 @@ var SessionReferences = class {
   }
 };
 // src/session/manager.ts
+var AUTO_VACUUM_MIN_FREELIST_RATIO = 0.25;
 var SessionManager = class {
   db;
   queries;
@@ -16655,6 +16964,44 @@ var SessionManager = class {
   unarchive(id) {
     this.db.unarchiveSession(id);
   }
+  pruneCandidates(input) {
+    return this.db.pruneCandidates(input);
+  }
+  openPruneMatches(input) {
+    return this.db.openPruneMatches(input);
+  }
+  freelistRatio() {
+    return this.db.freelistRatio();
+  }
+  maybeAutoPrune(opts) {
+    const result = { skipped: false, pruned: 0, vacuumed: false };
+    if (!opts.enabled) return { ...result, skipped: true };
+    const now = opts.now?.() ?? Date.now();
+    const minInterval = opts.minIntervalMs ?? 24 * 60 * 60 * 1e3;
+    const minVacuumInterval = opts.minVacuumIntervalMs ?? 30 * 24 * 60 * 60 * 1e3;
+    try {
+      if (!this.db.claimMaintenanceSlot("last_auto_prune", minInterval, now)) {
+        return { ...result, skipped: true };
+      }
+      const cutoff = now - opts.retentionDays * 24 * 60 * 60 * 1e3;
+      const victims = this.db.pruneCandidates({ olderThanMs: cutoff });
+      let pruned = 0;
+      for (const s of victims) if (this.db.deleteSession(s.id)) pruned++;
+      let vacuumed = false;
+      if (opts.vacuum && pruned > 0) {
+        const lastVacuum = this.db.getMeta("last_vacuum");
+        const vacuumDue = lastVacuum === null || now - Number(lastVacuum) >= minVacuumInterval;
+        if (vacuumDue && this.db.freelistRatio() > AUTO_VACUUM_MIN_FREELIST_RATIO) {
+          const report3 = reclaimFtsSpace(this.db.db, true);
+          vacuumed = report3.vacuumed;
+          if (vacuumed) this.db.setMeta("last_vacuum", String(now));
+        }
+      }
+      return { skipped: false, pruned, vacuumed };
+    } catch (cause) {
+      return { ...result, error: cause instanceof Error ? cause.message : String(cause) };
+    }
+  }
   delete(id) {
     return this.db.deleteSession(id);
   }
@@ -16665,11 +17012,18 @@ var SessionManager = class {
     const id = this.db.nextMessageId();
     this.db.insertMessage({ ...msg, sessionId, id, timestamp: Date.now() });
     const meta = this.db.getSessionMeta(sessionId);
-    if (!meta) return;
+    if (!meta) return id;
     if (!meta.title && msg.role === "user") {
       const title = msg.content.slice(0, 50).replace(/\n/g, " ");
       this.db.updateSessionMeta(sessionId, { title });
     }
+    return id;
+  }
+  attachTurnFacts(sessionId, messageId, input) {
+    this.db.attachTurnFacts(sessionId, messageId, input);
+  }
+  setOpenTurn(sessionId, from) {
+    this.db.setOpenTurn(sessionId, from);
   }
   recordUsage(sessionId, usage) {
     this.db.recordUsage(sessionId, usage);
@@ -16705,6 +17059,9 @@ var SessionManager = class {
     const summary = toSummarize.length === 0 ? "" : await this.buildSummary(toSummarize, summarize3) ?? outlineOf(toSummarize);
     return this.db.compact(sessionId, summary, beforeCount, IMPORTANT_ROUNDS * 2);
   }
+  archiveAndCompact(sessionId, input) {
+    return this.db.archiveAndCompact(sessionId, input);
+  }
   async buildSummary(msgs, summarize3) {
     if (!summarize3) return null;
     const transcript = msgs.map((m) => `[${m.role}] ${m.content}`).join("\n\n");
@@ -17114,7 +17471,7 @@ function inspect(input, resolved, root, accepted) {
 }
 var MAX_RECENT_WORKSPACES = 20;
 var FILE_VERSION2 = 1;
-function describe5(err) {
+function describe6(err) {
   return err instanceof Error ? err.message : String(err);
 }
 var RecentWorkspaces = class {
@@ -17131,8 +17488,8 @@ var RecentWorkspaces = class {
   }
   remember(dir, now, name) {
     const root = resolve(dir);
-    const kept = this.entries.find((e) => e.root === root)?.name;
-    const rest = this.entries.filter((e) => e.root !== root);
+    const kept = this.entries.find((e) => samePath(e.root, root))?.name;
+    const rest = this.entries.filter((e) => !samePath(e.root, root));
     this.entries = [
       { root, name: name || kept || basename(root) || root, usedAt: now },
       ...rest
@@ -17141,7 +17498,7 @@ var RecentWorkspaces = class {
   }
   forget(dir) {
     const root = resolve(dir);
-    const next = this.entries.filter((e) => e.root !== root);
+    const next = this.entries.filter((e) => !samePath(e.root, root));
     if (next.length === this.entries.length) return;
     this.entries = next;
     this.save();
@@ -17154,7 +17511,7 @@ var RecentWorkspaces = class {
       parsed = JSON.parse(readFileSync(this.filePath, "utf-8"));
     } catch (err) {
       this.loadErrors.push(
-        (lang) => t("workspace.recent_unreadable", { path: this.filePath, reason: describe5(err) }, lang)
+        (lang) => t("workspace.recent_unreadable", { path: this.filePath, reason: describe6(err) }, lang)
       );
       return;
     }
@@ -17207,7 +17564,7 @@ var RecentWorkspaces = class {
     } catch (err) {
       rmSync(tmp, { force: true });
       this.writeErrors.push(
-        (lang) => t("workspace.recent_write_failed", { path: this.filePath, reason: describe5(err) }, lang)
+        (lang) => t("workspace.recent_write_failed", { path: this.filePath, reason: describe6(err) }, lang)
       );
     }
   }
@@ -17217,6 +17574,87 @@ function isRecentWorkspace(value) {
   const v = value;
   return typeof v["root"] === "string" && v["root"].length > 0 && typeof v["name"] === "string" && typeof v["usedAt"] === "number";
 }
+var MAX_LAST_OPEN_SESSIONS = 20;
+var FILE_VERSION3 = 1;
+function describe7(err) {
+  return err instanceof Error ? err.message : String(err);
+}
+var LastOpenSessions = class {
+  constructor(filePath = lastSessionsPath()) {
+    this.filePath = filePath;
+    this.load();
+  }
+  filePath;
+  entries = [];
+  loadErrors = [];
+  writeErrors = [];
+  get(root) {
+    const key = resolve(root);
+    return this.entries.find((e) => samePath(e.root, key))?.sessionId ?? null;
+  }
+  remember(root, sessionId, now) {
+    const key = resolve(root);
+    const head = this.entries[0];
+    if (head && samePath(head.root, key) && head.sessionId === sessionId) return;
+    const rest = this.entries.filter((e) => !samePath(e.root, key));
+    this.entries = [{ root: key, sessionId, at: now }, ...rest].slice(0, MAX_LAST_OPEN_SESSIONS);
+    this.save();
+  }
+  forget(root) {
+    const key = resolve(root);
+    const next = this.entries.filter((e) => !samePath(e.root, key));
+    if (next.length === this.entries.length) return;
+    this.entries = next;
+    this.save();
+  }
+  load() {
+    this.entries = [];
+    if (!existsSync(this.filePath)) return;
+    let parsed;
+    try {
+      parsed = JSON.parse(readFileSync(this.filePath, "utf-8"));
+    } catch (err) {
+      this.loadErrors.push(
+        (lang) => t("last_session.unreadable", { path: this.filePath, reason: describe7(err) }, lang)
+      );
+      return;
+    }
+    this.adopt(parsed);
+  }
+  adopt(parsed) {
+    if (typeof parsed !== "object" || parsed === null || Array.isArray(parsed)) return;
+    const file = parsed;
+    if (file.version !== FILE_VERSION3) return;
+    if (!Array.isArray(file.sessions)) return;
+    this.entries = file.sessions.filter(isLastOpenSession).sort((a, b) => b.at - a.at).slice(0, MAX_LAST_OPEN_SESSIONS);
+  }
+  save() {
+    const body2 = JSON.stringify(
+      { version: FILE_VERSION3, sessions: this.entries },
+      null,
+      2
+    );
+    const tmp = `${this.filePath}.${process.pid}.tmp`;
+    try {
+      mkdirSync(dirname(this.filePath), { recursive: true });
+      writeFileSync(tmp, body2, { encoding: "utf-8", mode: 384 });
+      renameSync(tmp, this.filePath);
+    } catch (err) {
+      rmSync(tmp, { force: true });
+      this.writeErrors.push(
+        (lang) => t("last_session.write_failed", { path: this.filePath, reason: describe7(err) }, lang)
+      );
+    }
+  }
+};
+function isLastOpenSession(value) {
+  if (typeof value !== "object" || value === null) return false;
+  const v = value;
+  return typeof v["root"] === "string" && v["root"].length > 0 && typeof v["sessionId"] === "string" && v["sessionId"].length > 0 && typeof v["at"] === "number";
+}
+function ruleAskActive(level) {
+  return level !== "bypass";
+}
 function checkCodeExec(isolation) {
   if (isolation === "os") {
     return { allowed: true, reason: t("permission_reason.sandbox_os"), code: "sandbox-isolation" };
@@ -17228,8 +17666,7 @@ function checkCodeExec(isolation) {
     code: "sandbox-isolation"
   };
 }
-function checkAuto(operation, isolation) {
-  if (operation.type === "code_exec") return checkCodeExec(isolation);
+function checkAuto() {
   return { allowed: true, code: "level-default" };
 }
 function checkPlan(operation) {
@@ -17287,7 +17724,7 @@ function decideByLevel(level, operation, isolation, extraRoots = []) {
     case "bypass":
       return { allowed: true, code: "level-default" };
     case "auto":
-      return checkAuto(operation, isolation);
+      return checkAuto();
     case "plan":
       return checkPlan(operation);
     case "acceptEdits":
@@ -17465,11 +17902,11 @@ var ApprovalCache = class {
     return !rel.startsWith("..") && !isAbsolute(rel);
   }
   normalizeTarget(target) {
-    const t78 = target.trim();
-    if (!t78) return "";
-    const unix = t78.replace(/\\/g, "/");
+    const t81 = target.trim();
+    if (!t81) return "";
+    const unix = t81.replace(/\\/g, "/");
     if (unix.startsWith("/") || /^[A-Za-z]:\//.test(unix)) return resolve(unix);
-    return t78;
+    return t81;
   }
   load() {
     try {
@@ -17572,9 +18009,9 @@ function createSharedPermissionState(cache) {
   };
 }
 function cacheKeyFor(raw) {
-  const t78 = raw.trim();
-  if (!t78) return null;
-  return t78.slice(0, 500);
+  const t81 = raw.trim();
+  if (!t81) return null;
+  return t81.slice(0, 500);
 }
 // src/permission/manager.ts
 var log3 = createLogger("permission");
@@ -17747,16 +18184,22 @@ var PermissionManager = class _PermissionManager {
     }
     const cached = this.approvalCacheActive() ? this.cachedDecision(operation) : null;
     if (cached) return cached;
-    if (listMatch?.verdict === "ask") {
-      return {
-        allowed: false,
-        requireApproval: true,
-        reason: t("permission_reason.rule_ask", { rule: listMatch.rule }),
-        code: "rule-match",
-        ...this.rememberFlag()
-      };
+    const asked = listMatch?.verdict === "ask" ? {
+      allowed: false,
+      requireApproval: true,
+      reason: t("permission_reason.rule_ask", { rule: listMatch.rule }),
+      code: "rule-match"
+    } : ruleDecision?.requireApproval ?? false ? ruleDecision : null;
+    if (asked) {
+      if (!ruleAskActive(this.level)) {
+        return {
+          allowed: true,
+          reason: t("permission_reason.bypass_rule_ask", { reason: asked.reason ?? "" }),
+          code: asked.code
+        };
+      }
+      return { ...asked, ...this.rememberFlag() };
     }
-    if (ruleDecision?.requireApproval) return { ...ruleDecision, ...this.rememberFlag() };
     if (listMatch?.verdict === "allow") {
       return {
         allowed: true,
@@ -17904,10 +18347,13 @@ function byRule(rules, probe) {
   }
   return hit ? { ...hit, conditional } : { verdict: null, conditional };
 }
+function effectiveRules(rules, level) {
+  return ruleAskActive(level) ? rules : { ...rules, ask: [] };
+}
 function gateForTool(tool, rules, level, isolation) {
   const type = mapOperation(tool);
   const probe = { type, toolName: tool.name };
-  const rule = byRule(rules, probe);
+  const rule = byRule(effectiveRules(rules, level), probe);
   if (rule.verdict) {
     return {
       type,
@@ -18380,6 +18826,24 @@ function acquireScheduleLock(db, scheduleId, clock2 = Date.now) {
     }
   };
 }
+function isLive(holder, now) {
+  if (holder.heartbeatAt < now - LOCK_STALE_MS) return false;
+  return holder.host !== hostname() || pidAlive(holder.pid);
+}
+function listRunningSchedules(db, clock2 = Date.now) {
+  const now = clock2();
+  const rows = db.prepare(
+    `SELECT schedule_id AS scheduleId, pid, host,
+              acquired_at AS acquiredAt, heartbeat_at AS heartbeatAt
+         FROM schedule_locks`
+  ).all();
+  return rows.filter((row) => isLive(row, now)).map((row) => ({
+    scheduleId: row.scheduleId,
+    startedAt: row.acquiredAt,
+    pid: row.pid,
+    host: row.host
+  }));
+}
 function readHolder(db, scheduleId) {
   const row = db.prepare(
     "SELECT pid, host, acquired_at AS acquiredAt, heartbeat_at AS heartbeatAt FROM schedule_locks WHERE schedule_id = ?"
@@ -18481,6 +18945,12 @@ function pruneRecordings(dir, opts = {}) {
   }
   return { removed: removed.filter((p) => !existsSync(p)), remainingBytes: Math.max(0, total) };
 }
+function removeRecordings(dir) {
+  try {
+    rmSync(dir, { recursive: true, force: true });
+  } catch {
+  }
+}
 function readRecording(path) {
   if (!existsSync(path)) return [];
   const out = [];
@@ -18620,9 +19090,15 @@ var ScheduleRegistrar = class {
       this.opts.store.setEnabled(def.id, enabled);
       return { ok: false, reason: "unsupported-platform" };
     }
-    if (enabled) this.opts.store.setEnabled(def.id, true);
-    const res = def.osTaskId ? await backend.setEnabled(def.osTaskId, enabled) : { ok: true };
-    if (!enabled) this.opts.store.setEnabled(def.id, false);
+    if (enabled) {
+      this.opts.store.setEnabled(def.id, true);
+      const on = { ...def, enabled: true };
+      if (!def.osTaskId) return this.register(on);
+      const res2 = await backend.setEnabled(def.osTaskId, true);
+      return res2.ok ? { ok: true, warnings: [] } : this.register(on);
+    }
+    const res = def.osTaskId ? await backend.setEnabled(def.osTaskId, false) : { ok: true };
+    this.opts.store.setEnabled(def.id, false);
     return res.ok ? { ok: true, warnings: [] } : { ok: false, reason: "backend-error", detail: res.detail };
   }
   async retire(def) {
@@ -19733,7 +20209,7 @@ function runCommandHook(config, event, workDir) {
   const baseEnv = sanitizeEnvironment(process.env);
   const injectedEnv = injectEpochEnv(event, config.pluginRoot);
   const hookEnv = { ...baseEnv, ...injectedEnv, ...config.env };
-  return new Promise((resolve15) => {
+  return new Promise((resolve16) => {
     const child = spawn(config.command, {
       shell: true,
       cwd: workDir,
@@ -19747,7 +20223,7 @@ function runCommandHook(config, event, workDir) {
       if (!settled) {
         settled = true;
         child.kill("SIGKILL");
-        resolve15({
+        resolve16({
           exitCode: -1,
           stdout,
           stderr,
@@ -19783,7 +20259,7 @@ function runCommandHook(config, event, workDir) {
         }
       } catch {
       }
-      resolve15({
+      resolve16({
         exitCode,
         stdout: stdout.trim(),
         stderr: stderr.trim(),
@@ -19796,7 +20272,7 @@ function runCommandHook(config, event, workDir) {
       clearTimeout(timer);
       if (settled) return;
       settled = true;
-      resolve15({
+      resolve16({
         exitCode: -1,
         stdout,
         stderr,
@@ -19909,7 +20385,7 @@ var HookManager = class {
             return { blocked: true, reason: result.rejectReason || t("hook_load.rejected") };
           }
         } catch (err) {
-          this.log("warn", `[HookManager] ${type} \u7684 command hook \u6267\u884C\u5F02\u5E38: ${describe7(err)}`, {
+          this.log("warn", `[HookManager] ${type} \u7684 command hook \u6267\u884C\u5F02\u5E38: ${describe9(err)}`, {
             hookType: type,
             command: config.command
           });
@@ -19927,7 +20403,7 @@ var HookManager = class {
           (_, reject2) => setTimeout(() => reject2(new Error("Hook timeout")), HOOK_TIMEOUT_MS)
         )
       ]).catch((err) => {
-        this.log("warn", `[HookManager] ${type} (${reg.plugin}) \u5931\u8D25: ${describe7(err)}`, {
+        this.log("warn", `[HookManager] ${type} (${reg.plugin}) \u5931\u8D25: ${describe9(err)}`, {
           hookType: type,
           plugin: reg.plugin
         });
@@ -19939,7 +20415,7 @@ var HookManager = class {
         if (!matchesHook(entry.matcher, event)) continue;
         for (const config of entry.configs) {
           runCommandHook(config, event, ctx.workDir).then((result) => reportIfNeverRan(this.log, type, config, result)).catch((err) => {
-            this.log("warn", `[HookManager] ${type} \u7684 command hook \u5F02\u6B65\u5F02\u5E38: ${describe7(err)}`, {
+            this.log("warn", `[HookManager] ${type} \u7684 command hook \u5F02\u6B65\u5F02\u5E38: ${describe9(err)}`, {
               hookType: type,
               command: config.command
             });
@@ -19960,7 +20436,7 @@ var HookManager = class {
         ]);
         if (result !== null && result !== void 0) return result;
       } catch (err) {
-        this.log("warn", `[HookManager] ${type} (${reg.plugin}) \u5931\u8D25: ${describe7(err)}`, {
+        this.log("warn", `[HookManager] ${type} (${reg.plugin}) \u5931\u8D25: ${describe9(err)}`, {
           hookType: type,
           plugin: reg.plugin
         });
@@ -19981,7 +20457,7 @@ var HookManager = class {
         ]);
         if (result) results.push(result);
       } catch (err) {
-        this.log("warn", `[HookManager] ${type} (${reg.plugin}) \u5931\u8D25: ${describe7(err)}`, {
+        this.log("warn", `[HookManager] ${type} (${reg.plugin}) \u5931\u8D25: ${describe9(err)}`, {
           hookType: type,
           plugin: reg.plugin
         });
@@ -19998,7 +20474,7 @@ var HookManager = class {
             const verdict = verdictOf2(result);
             if (verdict) results.push(verdict);
           } catch (err) {
-            this.log("warn", `[HookManager] ${type} \u7684 command hook \u6267\u884C\u5F02\u5E38: ${describe7(err)}`, {
+            this.log("warn", `[HookManager] ${type} \u7684 command hook \u6267\u884C\u5F02\u5E38: ${describe9(err)}`, {
               hookType: type,
               command: config.command
             });
@@ -20014,7 +20490,7 @@ var HookManager = class {
     return [...list].sort((a, b) => a.priority - b.priority);
   }
 };
-function describe7(err) {
+function describe9(err) {
   return err instanceof Error ? err.message : String(err);
 }
 function verdictOf2(result) {
@@ -21311,7 +21787,7 @@ async function withStaged(source, opts, fn) {
       shape = existsSync(join(unpacked, SKILL_FILE)) ? "skill-dir" : "tree";
     }
     const staged = stageImport(root, staging, shape, opts.lang);
-    const preview3 = describe8(source, form, staged.skills, staged.issues, opts.existing, opts.lang);
+    const preview3 = describe10(source, form, staged.skills, staged.issues, opts.existing, opts.lang);
     if (preview3.skills.length === 0) {
       const detail = t("skill.import_empty", { path: source }, opts.lang);
       return { ok: false, reason: "empty", detail, issues: preview3.issues };
@@ -21322,7 +21798,7 @@ async function withStaged(source, opts, fn) {
     rmSync(unpacked, { recursive: true, force: true });
   }
 }
-function describe8(source, form, staged, issues, existing, lang) {
+function describe10(source, form, staged, issues, existing, lang) {
   const byName = new Map(existing.map((s) => [s.name, s.scope]));
   const entries2 = [];
   const taken = /* @__PURE__ */ new Set();
@@ -21992,6 +22468,19 @@ var ContextCompressor = class {
       };
     }
     const { head, middle, tail } = this.determineBoundaries(pruned.messages, config);
+    if (middle.length === 0) {
+      const kept = this.cleanupOrphans(pruned.messages);
+      this.turnsSinceCompress = 0;
+      return {
+        messages: kept,
+        summary: "",
+        ...prunedCounters,
+        summarizedMessages: 0,
+        newTokenCount: this.estimateTokens(kept),
+        droppedOrphans: pruned.messages.length - kept.length,
+        summarySkipped: true
+      };
+    }
     const nl = "\n";
     const middleText = middle.map((m) => `${m.role}: ${m.content}`).join(nl);
     const summarized = await this.generateSummary(
@@ -22027,6 +22516,7 @@ var ContextCompressor = class {
       summarizedMessages: middle.length,
       newTokenCount: this.estimateTokens(result),
       droppedOrphans,
+      ...summary && droppedOrphans === 0 && middle.length > 0 ? { carriedHead: head.length, carriedTail: tail.length } : {},
       ...summarized?.usage ? { usage: summarized.usage } : {},
       ...summarized?.model ? { model: summarized.model } : {}
     };
@@ -22158,10 +22648,10 @@ ${extra}` : withGoal;
     return messages.reduce((sum, m) => sum + estimateTokens(m.content), 0);
   }
 };
-var FILE_VERSION3 = 1;
+var FILE_VERSION4 = 1;
 var LEVELS = ["trusted", "untrusted"];
 var SCOPES = ["directory", "directory-tree"];
-function describe9(err) {
+function describe11(err) {
   return err instanceof Error ? err.message : String(err);
 }
 function covers(base, target, scope) {
@@ -22170,9 +22660,6 @@ function covers(base, target, scope) {
   const rel = relative(base, target);
   return !rel.startsWith("..") && !isAbsolute(rel);
 }
-function samePath(a, b) {
-  return relative(a, b) === "";
-}
 var TrustManager = class {
   constructor(filePath = trustPath()) {
     this.filePath = filePath;
@@ -22238,7 +22725,7 @@ var TrustManager = class {
       raw = readFileSync(this.filePath, "utf-8");
     } catch (err) {
       this.loadErrors.push(
-        t("trust_gate.record_read_failed", { path: this.filePath, reason: describe9(err) })
+        t("trust_gate.record_read_failed", { path: this.filePath, reason: describe11(err) })
       );
       return;
     }
@@ -22247,7 +22734,7 @@ var TrustManager = class {
       parsed = JSON.parse(raw);
     } catch (err) {
       this.loadErrors.push(
-        t("trust_gate.record_bad_json", { path: this.filePath, reason: describe9(err) })
+        t("trust_gate.record_bad_json", { path: this.filePath, reason: describe11(err) })
       );
       return;
     }
@@ -22259,12 +22746,12 @@ var TrustManager = class {
       return;
     }
     const file = parsed;
-    if (file.version !== FILE_VERSION3) {
+    if (file.version !== FILE_VERSION4) {
       this.loadErrors.push(
         t("trust_gate.record_bad_version", {
           path: this.filePath,
           found: String(file.version),
-          expected: FILE_VERSION3
+          expected: FILE_VERSION4
         })
       );
       return;
@@ -22285,7 +22772,7 @@ var TrustManager = class {
   save() {
     mkdirSync(dirname(this.filePath), { recursive: true });
     const body2 = JSON.stringify(
-      { version: FILE_VERSION3, records: this.records },
+      { version: FILE_VERSION4, records: this.records },
       null,
       2
     );
@@ -22296,7 +22783,7 @@ var TrustManager = class {
     } catch (err) {
       rmSync(tmp, { force: true });
       throw new Error(
-        t("trust_gate.record_write_failed", { path: this.filePath, reason: describe9(err) })
+        t("trust_gate.record_write_failed", { path: this.filePath, reason: describe11(err) })
       );
     }
   }
@@ -22539,7 +23026,7 @@ var CodeSandbox = class {
       ...IS_WINDOWS ? { windowsHide: true } : {}
     };
     const child = spawn(command, args, spawnOpts);
-    return new Promise((resolve15) => {
+    return new Promise((resolve16) => {
       let stdout = "";
       let stderr = "";
       let killedForOutput = false;
@@ -22565,7 +23052,7 @@ var CodeSandbox = class {
       child.on("error", (err) => {
         opts.signal?.removeEventListener("abort", onAbort);
         if (err.code === "ENOENT") {
-          resolve15({
+          resolve16({
             success: false,
             output: "",
             error: `[\u9519\u8BEF] \u627E\u4E0D\u5230\u89E3\u91CA\u5668: ${command}`,
@@ -22574,7 +23061,7 @@ var CodeSandbox = class {
           });
           return;
         }
-        resolve15({
+        resolve16({
           success: false,
           output: "",
           error: `[\u9519\u8BEF] ${err.message}`,
@@ -22588,7 +23075,7 @@ var CodeSandbox = class {
         if (stderr.length < MAX_OUTPUT) stderr += errDecoder?.end() ?? "";
         const duration = Date.now() - start;
         if (killedForOutput) {
-          resolve15({
+          resolve16({
             success: false,
             output: trunc(stdout, stderr),
             error: `[\u8F93\u51FA\u8D85\u9650] \u8D85\u8FC7 ${MAX_OUTPUT} \u5B57\u8282\uFF0C\u5DF2\u7EC8\u6B62`,
@@ -22598,7 +23085,7 @@ var CodeSandbox = class {
           return;
         }
         if (sig) {
-          resolve15({
+          resolve16({
             success: false,
             output: trunc(stdout, stderr),
             error: opts.signal?.aborted ? "[\u5DF2\u53D6\u6D88]" : "[\u8D85\u65F6] \u6267\u884C\u8D85\u65F6",
@@ -22610,7 +23097,7 @@ var CodeSandbox = class {
         const output = trunc(stdout, stderr);
         if (code !== 0 && code !== null) {
           const oom = /heap out of memory|allocation failed/i.test(stderr);
-          resolve15({
+          resolve16({
             success: false,
             output,
             error: oom ? `[\u5185\u5B58\u8D85\u9650] \u8D85\u8FC7 ${MAX_MEMORY}MB` : `[\u8FD0\u884C\u65F6\u9519\u8BEF] exit ${code}: ${stderr.slice(0, 200)}`,
@@ -22619,7 +23106,7 @@ var CodeSandbox = class {
           });
           return;
         }
-        resolve15({ success: true, output, duration });
+        resolve16({ success: true, output, duration });
       });
     });
   }
@@ -22679,4 +23166,4 @@ function trunc(stdout, stderr) {
  *    `--tree` 的命令帮助里，让用户自己知道 `--tree` 意味着什么。
  */
 
-export { AGENT_ROLE_DIAG_MODULE, ARTIFACT_MAX_TOTAL_BYTES, ARTIFACT_RETENTION_DEFAULTS, ATTACHMENT_MAX_TOTAL_BYTES, ATTACHMENT_RETENTION_DEFAULTS, AgentLoop, ApprovalCache, BLOCKED_TOOLS, BudgetGuard, BudgetStore, CHECKPOINT_MAX_TOTAL_BYTES, CLAUDE_EVENT_NAMES, CLAUDE_TOOL_NAMES, CODE_MODE_LIMITS, CODE_MODE_SDK_TAG, CONFIG_KEYS, CURRENT_CONFIG_VERSION, CheckpointManager, CheckpointStore, CodeSandbox, ComplianceEngine, ContextCompressor, DEFAULT_COMPLIANCE_ACTIONS, DEFAULT_COMPLIANCE_SETTINGS, DEFAULT_COMPRESSION_THRESHOLD, DEFAULT_GOAL_MAX_ROUNDS, DEFAULT_MAX_HOLD_CHARS, DelegateManager, EMPTY_RULES, EPOCH_DISK_LEDGER, EpochConfigSchema, FTS_TABLES, FTS_TRIGGERS, GOAL_BLOCK_CODES, GoalService, GoalStore, HEADLESS_AUDIT_CODES, HookManager, INSTRUCTION_BUDGET_CHARS, INSTRUCTION_FILES, ImageLoadError, ImportTrustStore, LAUNCHD_LABEL_PREFIX, LOCK_HEARTBEAT_MS, LOCK_STALE_MS, MARKETPLACE_DISPLAY_FIELDS, MARKETPLACE_FILE, MAX_AUDIT_ENTRIES, MAX_COMMAND_DEPTH, MAX_GOAL_MAX_ROUNDS, MAX_IMPORT_DEPTH, MAX_OBJECTIVE_CHARS, MAX_REASON_CHARS, MAX_RECENT_WORKSPACES, MODEL_GIVE_UP_THRESHOLD, MULTIMODAL_DEFAULTS, ManagedPolicyError, ManagedSettingsSchema, MemoryManager, MemoryReviewer, ModelFailureTracker, NOMINAL_TOTAL_BYTES, NO_REVEALED_TOOLS, PACK_EXCLUDES, PACK_MAX_BYTES, PACK_MAX_FILES, PERMISSION_AUDIT_CODES, PLUGIN_LAYOUT, PLUGIN_MANIFEST_FILE, PLUGIN_NAME_PATTERN, PLUGIN_ROOT_ENV, PLUGIN_ROOT_TOKEN, POLICY_DECISIONS, PROBE_VERSION, PROJECT_AGENTS_SUBDIR, PROVIDER_NO_CREDENTIAL, PermissionManager, PlanModeState, PluginAuthorSchema, PluginStore, PolicyRuleSchema, ProviderError, ProviderRouter, RECORDING_KEEP_RUNS, RECORDING_MAX_BYTES, ROLE_FRONTMATTER_SCHEMA, RUN_CODE_TOOL, RecentWorkspaces, SANDBOX_COVERS, SANDBOX_EXCLUDES, SCALAR_KEYS, SCHEDULE_DEFAULTS, SCHEDULE_DEFAULT_ALLOWLIST, SCHEDULE_ISSUE_CODES, SCHTASKS_FOLDER, SESSION_MESSAGES_READ_TOOL, SESSION_MESSAGES_SEARCH_TOOL, SESSION_QUERY_TOOLS, SESSION_SEARCH_TOOL, SESSION_TRACE_TOOL, SETTINGS_LAYER_ORDER, SETTING_WRITE_KEYS, SETTING_WRITE_LAYERS, SKILL_CREATE_TOOL, SKILL_EDIT_TOOL, SKILL_PATCH_TOOL, SKILL_VIEW_TOOL, SKILL_WRITE_FILE_TOOL, SLASH_COMMANDS_DIAG_MODULE, ScheduleRecorder, ScheduleRegistrar, ScheduleStore, SessionManager, SessionQueries, SessionReferences, SettingsFileError, SettingsFileSchema, SkillLearner, SkillSystem, TOOL_SEARCH_TOOL, TaskNoticeTracker, ToolRegistry, TrackerDB, TrustManager, Workspace, acquireScheduleLock, addMarketplace, addUsage, admitArtifact, admitArtifacts, affectedPaths, artifactLaunchArgv, artifactOpenRefusal, assertLevelAllowed, blockedRoleTools, buildContextBreakdown, buildFireArgv, buildFtsMatchQuery, buildSchemaExports, buildSystemPrompt, buildTrigramMatchQuery, builtinRoles, checkEpochVersion, checkFtsHealth, checkShadowing, classifyProviderError, clearModelCache, coalesceRecording, codeModeWorkerPath, commandNameFromRelPath, compileRuleLists, compressionOptions, computeCost, computeCostMicros, computeExecHash, countRules, createAllowAllGate, createAllowAllImportGate, createAskQuestionTool, createCodeExecTool, createDelegateTool, createDenyAllGate, createDenyAllImportGate, createGoalTool, createImportGate, createMemoryTool, createPlanModeTools, createRoleFile, createRoleScope, createRunCodeTool, createScheduleDraftTool, createSessionMessagesReadTool, createSessionMessagesSearchTool, createSessionSearchTool, createSessionSearchTools, createSessionTraceTool, createSkillViewTool, createSkillWriteTools, createTodoTool, createToolRevealState, createToolScope, createToolSearchTool, createTrustGate, currentEpochVersion, decideImport, decideTrust, defaultConfig, defaultModelOf, describeArtifactRefusal, describeBackgroundTask, describeHeadlessPolicy, describeIsolation, describeJsonError, diagnoseSchedules, discoverMarkdown, discoverModels, discoverProject, displayCurrency, draftCommandLine, draftWidening, escapeRuleContent, estimateImageTokens, estimateRunTokens, estimateTokens, evaluateSelection, expandCommand, expandImports, explainSetting, extractArchive, findInstructionFiles, findProjectInstructions, findRole, formatBytes, formatSkillIndex, formatUsd, gateForTool, getCapability, getConfigIssues, getConfigOrigins, getImportGate, getTrustGate, hasDedicatedExecContent, hasExecTierContent, hasPromptCaching, hasProviderCredentials, hasReadTierContent, imageFromBase64, imageFromPath, imagePartTokens, importSkills, installPlugin, instructionDirs, instructionNotices, intervalSlots, inventoryProjectExtensions, inventoryTotal, isBlockCode, isCodeModeDeferred, isEmptyRules, isGoalPhase, isNonInteractive, isReadOnlySubCall, isSettingWriteLayer, isValidPluginName, isWithinWindow, isWritableSettingKey, labelSlug, layerRank, listSessionCandidates, listWorkspaceFiles, loadCommandDefinitions, loadCommandFile, loadCommands, loadConfig, loadHookSources, loadKeybindings, loadLexiconDir, loadLexiconFiles, loadPlugins, loadPolicyFiles, loadPolicyRules, loadRoleDefinitions, loadRoleDir, loadedImports, localDateString, managedSwitchNotes, mapClaudeToolName, mapEpochToolName, mapOperationType, matchPreauthorization, matchRuleLists, matchesHook, mentionsPluginRoot, mergeHeadlessPolicy, mergeRoles, mergeSchedulePatch, microsToUsd, modelListCandidates, needsAllowlist, nextFallbackModel, nextRunAt, noConfigOrigins, noManagedPolicy, noPlugins, openArtifact, originOf, packFileName, packPlugin, parseClaudeSettingsHooks, parseClock, parseDate, parseFrontmatter, parseHooksConfig, parseHooksConfigVerbose, parseImportLine, parseModelList, parseRoleDefinition, parseScheduleDraft, parseSkillFrontmatter, parseTrigger, pendingImageTokens, persistParts, persistToolResults, persistedUsage, planPack, previewSkillImport, pricingFor, projectEntryForDisplay, pruneArtifacts, pruneAttachments, pruneRecordings, pruneSchedules, readImageSize, readMarketplaces, readPluginManifest, readPluginRecords, readProviderKeyEnv, readRecording, readSessionSurface, reclaimFtsSpace, redactLine, refreshOpenRouterMetadata, removeMarketplace, removeSessionArtifacts, removeSessionAttachments, renderImportTree, renderProjectContext, renderSdkDeclaration, renderSelfIndex, repairSchedules, resolveArtifactRetention, resolveCodeModeWorker, resolveComplianceDirs, resolveEntrySource, resolveInWorkspace, resolveMarketplaceRef, resolveMentions, resolveMultimodalPolicy, resolvePolicyDirs, resolvePricingAt, resolveProjectRoot, resolveScheduleBackend, resolveSessionReference, resolveSessionVisibility, resolveSettings, resolveSkillDirs, resolveSource, resolveTar, resolveWorkspace, restoreParts, revealScopedProvider, roleScopedProvider, roleSourceLabel, ruleCovers, ruleFromString, ruleToString, runCode, runCommand2 as runCommand, sanitizeArgNames, sanitizeCommand, sanitizeFtsQuery, sanitizePath, sanitizeToolOutput, scanInstructions, scanPluginDir, scanSkillDirs, searchMarketplaces, setDisplayCurrency, setImportGate, setPluginEnabled, setTrustGate, settingValueChoices, settingValueKind, settingWriteApply, settingWriteLayers, settingWriteTargets, skillIndexDescription, skillIndexResidency, skillIndexStats, sniffMediaType, splitFrontmatter, staticToolProvider, stripArtifactData, substitutePluginRoot, suggestRuleFromApproval, systemOpenArgv, systemPromptSegments, toPosix, toolDefinitionTokens, toolMatches, toolTableTokens, totalTokens, traceSession, triggerPeriodMs, unescapeRuleContent, uninstallPlugin, unknownRoleSkills, unknownRoleTools, unloadedInstructionFiles, updateMarketplace, updatePlugin, usdToMicros, validateSchedule, validateTrigger, validateWindow, withGoalCompression, withGoalPrompt, workspaceDisplayPath, writeSettingValue };
+export { AGENT_ROLE_DIAG_MODULE, ARTIFACT_MAX_TOTAL_BYTES, ARTIFACT_RETENTION_DEFAULTS, ATTACHMENT_MAX_TOTAL_BYTES, ATTACHMENT_RETENTION_DEFAULTS, AgentLoop, ApprovalCache, BLOCKED_TOOLS, BudgetGuard, BudgetStore, CHECKPOINT_MAX_TOTAL_BYTES, CLAUDE_EVENT_NAMES, CLAUDE_TOOL_NAMES, CODE_MODE_LIMITS, CODE_MODE_SDK_TAG, CONFIG_KEYS, CURRENT_CONFIG_VERSION, CheckpointManager, CheckpointStore, CodeSandbox, ComplianceEngine, ContextCompressor, DEFAULT_COMPLIANCE_ACTIONS, DEFAULT_COMPLIANCE_SETTINGS, DEFAULT_COMPRESSION_THRESHOLD, DEFAULT_GOAL_MAX_ROUNDS, DEFAULT_MAX_HOLD_CHARS, DelegateManager, EMPTY_RULES, EPOCH_DISK_LEDGER, EpochConfigSchema, FTS_TABLES, FTS_TRIGGERS, GOAL_BLOCK_CODES, GoalService, GoalStore, HEADLESS_AUDIT_CODES, HookManager, INSTRUCTION_BUDGET_CHARS, INSTRUCTION_FILES, ImageLoadError, ImportTrustStore, LAUNCHD_LABEL_PREFIX, LOCK_HEARTBEAT_MS, LOCK_STALE_MS, LastOpenSessions, MARKETPLACE_DISPLAY_FIELDS, MARKETPLACE_FILE, MAX_AUDIT_ENTRIES, MAX_COMMAND_DEPTH, MAX_GOAL_MAX_ROUNDS, MAX_IMPORT_DEPTH, MAX_LAST_OPEN_SESSIONS, MAX_OBJECTIVE_CHARS, MAX_REASON_CHARS, MAX_RECENT_WORKSPACES, MODEL_GIVE_UP_THRESHOLD, MULTIMODAL_DEFAULTS, ManagedPolicyError, ManagedSettingsSchema, MemoryManager, MemoryReviewer, ModelFailureTracker, NOMINAL_TOTAL_BYTES, NO_REVEALED_TOOLS, PACK_EXCLUDES, PACK_MAX_BYTES, PACK_MAX_FILES, PERMISSION_AUDIT_CODES, PLUGIN_LAYOUT, PLUGIN_MANIFEST_FILE, PLUGIN_MANIFEST_KEYS, PLUGIN_NAME_PATTERN, PLUGIN_ROOT_ENV, PLUGIN_ROOT_TOKEN, PLUGIN_VISIBILITY, POLICY_DECISIONS, PROBE_VERSION, PROJECT_AGENTS_SUBDIR, PROVIDER_NO_CREDENTIAL, PermissionManager, PlanModeState, PluginAuthorSchema, PluginStore, PolicyRuleSchema, ProviderError, ProviderRouter, RECORDING_KEEP_RUNS, RECORDING_MAX_BYTES, ROLE_FRONTMATTER_SCHEMA, RUN_CODE_TOOL, RecentWorkspaces, SANDBOX_COVERS, SANDBOX_EXCLUDES, SCALAR_KEYS, SCHEDULE_DEFAULTS, SCHEDULE_DEFAULT_ALLOWLIST, SCHEDULE_ISSUE_CODES, SCHTASKS_FOLDER, SESSION_MESSAGES_READ_TOOL, SESSION_MESSAGES_SEARCH_TOOL, SESSION_QUERY_TOOLS, SESSION_SEARCH_TOOL, SESSION_TRACE_TOOL, SETTINGS_LAYER_ORDER, SETTING_WRITE_KEYS, SETTING_WRITE_LAYERS, SKILL_CREATE_TOOL, SKILL_EDIT_TOOL, SKILL_PATCH_TOOL, SKILL_VIEW_TOOL, SKILL_WRITE_FILE_TOOL, SLASH_COMMANDS_DIAG_MODULE, ScheduleRecorder, ScheduleRegistrar, ScheduleStore, SessionManager, SessionQueries, SessionReferences, SettingsFileError, SettingsFileSchema, SkillLearner, SkillSystem, TOOL_SEARCH_TOOL, TaskNoticeTracker, ToolRegistry, TrackerDB, TrustManager, Workspace, acquireScheduleLock, addMarketplace, addUsage, admitArtifact, admitArtifacts, affectedPaths, artifactLaunchArgv, artifactOpenRefusal, assertLevelAllowed, blockedRoleTools, buildContextBreakdown, buildFireArgv, buildFtsMatchQuery, buildSchemaExports, buildSystemPrompt, buildTrigramMatchQuery, builtinRoles, checkEpochVersion, checkFtsHealth, checkShadowing, classifyProviderError, clearModelCache, coalesceRecording, codeModeWorkerPath, commandNameFromRelPath, compileRuleLists, compressionOptions, computeCost, computeCostMicros, computeExecHash, countRules, createAllowAllGate, createAllowAllImportGate, createAskQuestionTool, createCodeExecTool, createDelegateTool, createDenyAllGate, createDenyAllImportGate, createGoalTool, createImportGate, createMemoryTool, createPlanModeTools, createRoleFile, createRoleScope, createRunCodeTool, createScheduleDraftTool, createSessionMessagesReadTool, createSessionMessagesSearchTool, createSessionSearchTool, createSessionSearchTools, createSessionTraceTool, createSkillViewTool, createSkillWriteTools, createTodoTool, createToolRevealState, createToolScope, createToolSearchTool, createTrustGate, currentEpochVersion, decideImport, decideTrust, defaultConfig, defaultModelOf, describeArtifactRefusal, describeBackgroundTask, describeHeadlessPolicy, describeIsolation, describeJsonError, diagnoseSchedules, discoverMarkdown, discoverModels, discoverProject, displayCurrency, draftCommandLine, draftWidening, escapeRuleContent, estimateImageTokens, estimateRunTokens, estimateTokens, evaluateSelection, expandCommand, expandImports, explainSetting, extractArchive, findInstructionFiles, findProjectInstructions, findRole, formatBytes, formatSkillIndex, formatUsd, gateForTool, getCapability, getConfigIssues, getConfigOrigins, getImportGate, getTrustGate, hasDedicatedExecContent, hasExecTierContent, hasPromptCaching, hasProviderCredentials, hasReadTierContent, imageFromBase64, imageFromPath, imagePartTokens, importSkills, installPlugin, instructionDirs, instructionNotices, intervalSlots, inventoryProjectExtensions, inventoryTotal, isBlockCode, isCodeModeDeferred, isEmptyRules, isGoalPhase, isNonInteractive, isReadOnlySubCall, isSettingWriteLayer, isValidPluginName, isWithinWindow, isWritableSettingKey, labelSlug, layerRank, listRunningSchedules, listSessionCandidates, listWorkspaceFiles, loadCommandDefinitions, loadCommandFile, loadCommands, loadConfig, loadHookSources, loadKeybindings, loadLexiconDir, loadLexiconFiles, loadPlugins, loadPolicyFiles, loadPolicyRules, loadRoleDefinitions, loadRoleDir, loadedImports, localDateString, managedSwitchNotes, mapClaudeToolName, mapEpochToolName, mapOperationType, matchPreauthorization, matchRuleLists, matchesHook, mentionsPluginRoot, mergeHeadlessPolicy, mergeRoles, mergeSchedulePatch, microsToUsd, modelListCandidates, needsAllowlist, nextFallbackModel, nextRunAt, noConfigOrigins, noManagedPolicy, noPlugins, openArtifact, originOf, packFileName, packPlugin, parseClaudeSettingsHooks, parseClock, parseDate, parseFrontmatter, parseHooksConfig, parseHooksConfigVerbose, parseImportLine, parseModelList, parseRoleDefinition, parseScheduleDraft, parseSkillFrontmatter, parseTrigger, pendingImageTokens, persistParts, persistToolResults, persistedUsage, planPack, previewSkillImport, pricingFor, projectEntryForDisplay, pruneArtifacts, pruneAttachments, pruneRecordings, pruneSchedules, readImageSize, readMarketplaces, readPluginManifest, readPluginRecords, readProviderKeyEnv, readRecording, readSessionSurface, reclaimFtsSpace, redactLine, refreshOpenRouterMetadata, removeMarketplace, removeRecordings, removeRoleFile, removeSessionArtifacts, removeSessionAttachments, renderImportTree, renderProjectContext, renderSdkDeclaration, renderSelfIndex, repairSchedules, resolveArtifactRetention, resolveCodeModeWorker, resolveComplianceDirs, resolveEntrySource, resolveInWorkspace, resolveMarketplaceRef, resolveMentions, resolveMultimodalPolicy, resolvePolicyDirs, resolvePricingAt, resolveProjectRoot, resolveScheduleBackend, resolveSessionReference, resolveSessionVisibility, resolveSettings, resolveSkillDirs, resolveSource, resolveTar, resolveWorkspace, restoreParts, revealScopedProvider, roleScopedProvider, roleSourceLabel, ruleCovers, ruleFromString, ruleToString, runCode, runCommand2 as runCommand, sanitizeArgNames, sanitizeCommand, sanitizeFtsQuery, sanitizePath, sanitizeToolOutput, scanInstructions, scanPluginDir, scanSkillDirs, searchMarketplaces, setDisplayCurrency, setImportGate, setPluginEnabled, setTrustGate, settingValueChoices, settingValueKind, settingWriteApply, settingWriteLayers, settingWriteTargets, skillIndexDescription, skillIndexResidency, skillIndexStats, sniffMediaType, splitFrontmatter, staticToolProvider, stripArtifactData, substitutePluginRoot, suggestRuleFromApproval, systemOpenArgv, systemPromptSegments, toPosix, toolDefinitionTokens, toolMatches, toolTableTokens, totalTokens, traceSession, triggerPeriodMs, unescapeRuleContent, uninstallPlugin, unknownRoleSkills, unknownRoleTools, unloadedInstructionFiles, updateMarketplace, updatePlugin, usdToMicros, validateSchedule, validateTrigger, validateWindow, withGoalCompression, withGoalPrompt, workspaceDisplayPath, writeSettingValue };