@epoch-agent/core 0.12.0 → 0.14.0

package/dist/index.d.ts

@@ -1342,9 +1342,12 @@ interface GoalToolDeps {
 declare function createGoalTool(deps: GoalToolDeps): EpochTool;
 
 /**
- * 记忆系统类型 — 对齐 docs/design/memory-system.md
+ * 记忆系统类型。
  *
- * 参考 Hermes tools/memory_tool.py + memory_provider.py
+ * 参考 Hermes tools/memory_tool.py + memory_provider.py。
+ * （原来这里写着「对齐 `docs/design/memory-system.md`」，而那整个目录已随
+ * `5bbf3c8c` 删掉 —— 今天面向用户那半边在
+ * [TOOLS.md](../../../../docs/TOOLS.md) 的「待办、目标、记忆、沙箱、委托」一节。）
  */
 type MemoryTarget = 'memory' | 'user';
 /** 配额信息 */
@@ -2569,7 +2572,7 @@ declare function createSessionTraceTool(deps: SessionSearchDeps): EpochTool;
  *
  * 两条，第二条是硬的：
  *
- * 1. [manager.ts](./manager.ts) 那时已经 501 行，压着 CLAUDE.md 铁律 3 的 500 行线。
+ * 1. [manager.ts](./manager.ts) 那时已经 501 行，压着 AGENTS.md 铁律 3 的 500 行线。
  *    往里再塞封顶和收窄是把违规做实，搬出来是**减**不是加；
  * 2. **`agent/` 不许 import 这一族**（技能索引接线那一轮的决定 2.2）：`agent/` 收的是
  *    拼好的成品串，不是技能列表。而 web 能力页那句「界面上显示的那一行 = 真进上下文
@@ -3314,19 +3317,14 @@ declare class TrackerDB {
  * 所以这个文件里加一个属性，`evals/*.eval.ts` 里**每一条**录像都会对不上 ——
  * 不是只有跟 todo 有关的那几条。这一轮改完 17 条全红，逐条按新值更新过了。
  *
- * ✅ 那张 📮 2026-08-17 合并那一轮照办了，原文留着 —— 它**下一次还成立**，
- * 所以从「给合并的人」改写成一条常驻规矩：
+ * ⚠️ **合并时那些 `fingerprint:` 行的值一个都别手挑。** 它们是**天然的冲突面**
+ * —— 任何一条也动了 prompt 或工具定义的分支，改的是同样那批行。冲突时合完之后
+ * 跑一次 `pnpm eval`，拿它打出来的当前值统一覆盖一遍（诊断里会逐条打印
+ * 「旧 → 新」）。手挑等于赌两边的改动恰好互不影响，而那正是这个安全阀要防的事。
  *
- * > 那 17 行 `fingerprint:` 是**天然的冲突面** —— 任何一条也动了 prompt 或
- * > 工具定义的分支，改的是同样这 17 行。冲突时**两边的值都别手挑**：合完之后
- * > 跑一次 `pnpm eval`，拿它打出来的当前值统一覆盖一遍（诊断里会逐条打印
- * > 「旧 → 新」）。手挑等于赌两边的改动恰好互不影响，而那正是这个安全阀要防的事。
- *
- * 那一轮四条分支里只有这一条动了指纹，**四次合并零冲突**，合完 `pnpm eval` 全绿
- * （10 个测试文件 51 条），所以一个值都没有手动挑过。⚠️ 同一轮还纠正了一处
- * 口口相传的错话：**指纹是 `evals/*.eval.ts` 里的内联字符串字面量** ——
- * 19 处、摊在 7 个 `.eval.ts` 里，全仓**没有** `.eval-recordings/` 这个目录，
- * 别照着那个名字去找（找不到就以为「录像不在仓里」，那是这条规矩最容易断的地方）。
+ * ⚠️ **指纹是 `evals/*.eval.ts` 里的内联字符串字面量**，全仓**没有**
+ * `.eval-recordings/` 这个目录 —— 别照那个名字去找。找不到就会以为「录像不在仓里」，
+ * 那是这条规矩最容易断的地方。
  */
 
 declare function createTodoTool(db: TrackerDB): EpochTool;
@@ -10123,7 +10121,7 @@ declare function classifyProviderError(err: unknown): {
  *
  * 单独一个文件而不是塞进 `router.ts`：
  *
- * 1. `router.ts` 已经 700 多行（CLAUDE.md 铁律 3 的上限是 500），不该再长
+ * 1. `router.ts` 已经 700 多行（AGENTS.md 铁律 3 的上限是 500），不该再长
  * 2. 这三道检查是**纯函数** —— 给它「有没有凭据」和「模型什么能力」，
  *    它就能算出换不换得成。抽出来之后单测不用造一个 `ProviderRouter`
  *    （那要真凭据、要碰 `readProviderKeyEnv()`），直接喂假事实就行
@@ -11507,6 +11505,10 @@ declare const EpochConfigSchema: z.ZodObject<{
         retentionDays: z.ZodDefault<z.ZodInt>;
         vacuumAfterPrune: z.ZodDefault<z.ZodBoolean>;
     }, z.core.$strip>>;
+    automation: z.ZodPrefault<z.ZodObject<{
+        keepRuns: z.ZodDefault<z.ZodInt>;
+        maxRecordingMb: z.ZodDefault<z.ZodInt>;
+    }, z.core.$strip>>;
     budget: z.ZodOptional<z.ZodObject<{
         maxCostUsd: z.ZodOptional<z.ZodNumber>;
         maxTokens: z.ZodOptional<z.ZodInt>;
@@ -11858,7 +11860,7 @@ declare function isSettingWriteLayer(value: string): value is SettingWriteLayer;
  * 安全中心指两件事（「新会话从哪一档起」vs「这个会话此刻哪一档」），
  * 而那正是决定 20 ④ 拆开的那个歧义 —— 记住上一次那一档没有把这个歧义请回来。
  */
-declare const SETTING_WRITE_KEYS: readonly ["model", "maxTurns", "models.utility", "fallback.model", "contextLength", "maxOutputTokens", "compression.enabled", "compression.threshold", "memory.memoryCharLimit", "memory.userCharLimit", "memory.indexCharLimit", "budget.maxCostUsd", "budget.maxTokens", "budget.warnAtPercent", "budget.onUnknownPricing", "sessions.autoPrune", "sessions.retentionDays", "sessions.vacuumAfterPrune", "permission"];
+declare const SETTING_WRITE_KEYS: readonly ["model", "maxTurns", "models.utility", "fallback.model", "contextLength", "maxOutputTokens", "compression.enabled", "compression.threshold", "memory.memoryCharLimit", "memory.userCharLimit", "memory.indexCharLimit", "budget.maxCostUsd", "budget.maxTokens", "budget.warnAtPercent", "budget.onUnknownPricing", "sessions.autoPrune", "sessions.retentionDays", "sessions.vacuumAfterPrune", "automation.keepRuns", "automation.maxRecordingMb", "permission"];
 type SettingWriteKey = (typeof SETTING_WRITE_KEYS)[number];
 /** 这个键写得进去吗。名单就是 {@link SETTING_WRITE_KEYS} 本身，别在别处抄一份字面量 */
 declare function isWritableSettingKey(value: string): value is SettingWriteKey;
@@ -12503,6 +12505,23 @@ declare class MemoryManager {
      *
      * 取首行而不是前 N 字符：条目是「一条一个事实」，第一行基本就是那句结论，
      * 而横跨换行去截会把下一行的开头黏上来，读起来像一句破句。
+     *
+     * ## 🔴 按**码点**切，不是按 `.length`
+     *
+     * 判据全文在 infra 的 `text-slice.ts` 上（「截断不许切出半个字符」全仓只实现
+     * 一次）。这里漏掉它的后果不是「显示成 `�`」那么轻：
+     *
+     * 首行第 79/80 个码元正好落在一个代理对中间时（首行超过 80 字、末尾带 emoji
+     * 的记忆条目，中文用户写起来很容易），裸 `.slice()` 切出一个**孤立的高代理**。
+     * 它随索引块进 system prompt，`JSON.stringify` 把它写成不配对的 `\ud83d`，
+     * 而严格的 JSON 解析器（serde_json）拒收 —— DeepSeek 回 400
+     * 「unexpected end of hex escape」，这一轮 0 token、**首次模型请求直接挂**。
+     * 一条记忆就能让整个会话开不了口，而且报错指向的是「网络/供应商」，
+     * 没人会想到是记忆索引切坏了。2026-09-20 复现确认。
+     *
+     * ⚠️ 长度那一比也要按码点。按 `.length`（码元）比的话，一条 41 个 emoji 的
+     * 首行会被判「超过 80」，然后 `headCodePoints` 原样还回来 —— 末尾多一个
+     * 没有截断任何东西的省略号。
      */
     private indexEntries;
     /**
@@ -13051,7 +13070,10 @@ declare function stripArtifactData(artifacts: readonly ToolArtifact[]): ToolArti
 declare function persistToolResults(results: readonly EpochToolResult[]): EpochToolResult[];
 
 /**
- * 会话管理类型 — 对齐 docs/design/session-manager.md
+ * 会话管理类型。
+ *
+ * （原来这里写着「对齐 `docs/design/session-manager.md`」，而那整个目录已随
+ * `5bbf3c8c` 删掉，这条指针一直悬着。）
  *
  * 参考来源：
  * - [Hermes] ~/.hermes/state.db schema
@@ -13224,7 +13246,30 @@ interface SessionMeta {
      * 缺席 = 这段会话没有开着的轮（正常态），以及 v13 之前的所有老库。
      */
     openTurnFrom?: number | null;
+    /**
+     * 这一段**这次运行**结束的时刻。缺席 = 还开着。
+     *
+     * ⚠️ **它不是「这段会话完了」** —— 会话是可恢复的，resume 回到一段已经关掉的
+     * 会话时这一格会被擦掉（`SessionManager.reopen()`）。语义同 `openTurnFrom`
+     * 那一对「开始写下、收尾擦掉」，只是尺度从一轮放大到一次运行。
+     *
+     * ⚠️ **打这一格不算活动**，所以它不推动 {@link updatedAt}（判据在那一格上）。
+     * 保留期清理同时看两格，判据在 `SessionDB.pruneCandidates` 的 ① / ①b。
+     */
     endedAt?: Date;
+    /**
+     * 为什么结束的。
+     *
+     * | 值              | 谁写的                                                   |
+     * | --------------- | -------------------------------------------------------- |
+     * | `user_stop`     | 用户显式停止                                             |
+     * | `max_turns`     | 撞上轮数上限                                             |
+     * | `error`         | 出错收尾                                                 |
+     * | `process_exit`  | 进程干净退出时统一打的（`SessionStore.endOpenSessions()`）|
+     * | `orphan_sweep`  | 维护扫除超期孤儿（`SessionDB.sweepOrphanedSessions()`）   |
+     *
+     * 后两个 2026-09-17 加的，判据见那两个方法。
+     */
     endReason?: string;
 }
 /**
@@ -13401,6 +13446,14 @@ interface SessionStats {
 interface SessionManager$1 {
     create(input?: CreateSessionInput): Session;
     get(id: string): Session | undefined;
+    /**
+     * 库里有没有这一行。**和 `get()` 不是一回事**：那个会把整段消息读出来，
+     * 而问「在不在」的调用方（`SessionStore.ensure()`）一条消息都不需要。
+     *
+     * 判据全文在 `SessionDB.hasSession` 上 —— 一句话：它是用来把「已经存在」
+     * 和「写不进去」分开的，而那两件事在 `catch` 里长得一模一样。
+     */
+    has(id: string): boolean;
     updateMeta(id: string, patch: Partial<SessionMeta>): void;
     archive(id: string): void;
     unarchive(id: string): void;
@@ -13410,6 +13463,10 @@ interface SessionManager$1 {
      */
     delete(id: string): boolean;
     endSession(id: string, reason?: string): void;
+    /** 擦掉结束标记（resume 回到一段已关闭的会话）。见 `SessionMeta.endedAt` */
+    reopen(id: string): void;
+    /** 退出时给本进程碰过的会话统一打结束标记。返回打了几段，**从不抛** */
+    endTouchedSessions(reason?: string): number;
     list(input?: ListSessionsInput): ListSessionsOutput;
     search(input: SearchInput): SearchOutput;
     /** @returns 这条消息的 DB id（按步增量落盘要它，见实现处） */
@@ -13445,6 +13502,20 @@ interface SessionManager$1 {
 
 declare class SessionManager implements SessionManager$1 {
     private db;
+    /**
+     * 这个进程**碰过**的会话 id —— {@link endTouchedSessions} 退出时照着它打标记。
+     *
+     * ## 口径：和 `SessionMeta.updatedAt` 那条「什么算活动」对齐
+     *
+     * 只有 {@link create}（建出来了）/ {@link appendMessage}（产生内容）/
+     * {@link recordUsage}（花掉钱）这三处往里加。**读不算**：`epoch sessions list`
+     * 逐个 `get()` 一遍之后，不该把全库都判成「这个进程开着的」，那样退出时会
+     * 给一百段陈年会话统统盖上今天的 `ended_at`，等于把它们的清理倒计时集体重置。
+     *
+     * ⚠️ 只活在内存里，也只该活在内存里：它回答的是「**本进程**手上有谁」，
+     * 而进程没了这个问题就不存在了 —— 那时该问的是库里那格 `ended_at`。
+     */
+    private readonly touched;
     /**
      * 开给**模型**那一侧的检索层（方案 48）。
      *
@@ -13504,6 +13575,8 @@ declare class SessionManager implements SessionManager$1 {
     private generateId;
     create(input?: CreateSessionInput): Session;
     get(id: string): Session | undefined;
+    /** 判据全文在 {@link SessionDB.hasSession} 上 */
+    has(id: string): boolean;
     /**
      * 最近的一个会话（`epoch -r` / `sessions resume` 不带 id 时落到这里）。
      *
@@ -13559,6 +13632,18 @@ declare class SessionManager implements SessionManager$1 {
         olderThanMs: number;
         includePinned?: boolean;
     }): number;
+    /**
+     * 关掉超期还开着的会话（崩溃残留）。判据全文在
+     * {@link SessionDB.sweepOrphanedSessions} 上 —— 尤其「凭什么敢关」那一节。
+     *
+     * @returns 关掉了几段
+     */
+    sweepOrphans(input: {
+        olderThanMs: number;
+        now: number;
+    }): number;
+    /** 擦掉结束标记（resume 回到一段已关闭的会话）。见 {@link SessionDB.reopenSession} */
+    reopen(id: string): void;
     /** `VACUUM` 能还回来的比例。判据在 {@link SessionDB.freelistRatio} 上 */
     freelistRatio(): number;
     /**
@@ -13583,6 +13668,11 @@ declare class SessionManager implements SessionManager$1 {
      * ⚠️ **第一道和后两道不是一回事**：关掉 `autoPrune` 之后手动那条
      * （`epoch sessions prune`）照常能用，那条路上一道节流都没有 ——
      * 给用户亲手敲的命令加「你上周刚跑过」说不通。
+     *
+     * ## 它做两件事，不是一件（2026-09-17）
+     *
+     * 先**扫孤儿**（{@link SessionDB.sweepOrphanedSessions}）再**选候选**。
+     * 顺序和「为什么这一轮扫到的这一轮删不掉」写在底下那段块注释上。
      */
     maybeAutoPrune(opts: {
         enabled: boolean;
@@ -13596,6 +13686,7 @@ declare class SessionManager implements SessionManager$1 {
         now?: () => number;
     }): {
         skipped: boolean;
+        swept: number;
         pruned: number;
         vacuumed: boolean;
         error?: string;
@@ -13628,6 +13719,38 @@ declare class SessionManager implements SessionManager$1 {
     delete(id: string): boolean;
     /** 标记会话结束，记录结束时间和原因 */
     endSession(id: string, reason?: SessionMeta['endReason']): void;
+    /**
+     * 进程干净退出时，把**本进程碰过的**会话全部打上结束标记（2026-09-17）。
+     *
+     * ## 它补的是一条断链，而那条断链让整个保留期清理成了空转
+     *
+     * {@link endSession} 从写下来那天起**一个生产调用点都没有** —— 2026-09-17
+     * 全仓 grep 只有用例在调，真库实测 **100 段会话里 `ended_at` 非空 0 段**。
+     * 而 {@link SessionDB.pruneCandidates} 的第一道硬闸是 `ended_at IS NOT NULL`，
+     * 于是 `epoch sessions prune` 和开机自动清理**恒选中 0 段**：方案 64 PR-4
+     * 那三格配置接是接上了，却一格都推不动任何东西。
+     *
+     * ⚠️ 这和方案 64 自己要修的那条是**同一个形状**（「读侧全在岗、
+     * 写侧零生产调用点」），只是换了一列 —— 那一份的 §零 逐字写着这句话。
+     *
+     * ## 为什么尺度是「进程退出」，不是「这轮完了」也不是「用户说删」
+     *
+     * 会话是可恢复的，所以 `ended_at` 只能记「**这次运行**结束了」。
+     * 再细一档（每轮收尾就写）会让它退化成 `updatedAt` 的冗余副本，「结束」这个词
+     * 失去含义；再粗一档（只有显式操作才写）等于要求用户手动收工，而没人会做 ——
+     * 那道闸就照旧近似永远关着。接回来的那一下由
+     * `SessionStore.ensure()` 擦掉标记（判据在那儿）。
+     *
+     * ## ⚠️ 它**从不抛**，而且挡不住 `kill -9`
+     *
+     * 它跑在退出路径上：一段会话没打上标记的代价只是「它晚一个保留期才被清理」，
+     * 而抛出去的代价是进程退不干净。所以逐个 try，坏一个不碍着其余。
+     * 强杀 / 崩溃那一档这里一行都跑不到 —— 那是 {@link sweepOrphans} 的差事，
+     * **两者合起来才盖得全**，缺哪一半都会让一批会话永远留在库里。
+     *
+     * @returns 打上标记的会话数
+     */
+    endTouchedSessions(reason?: SessionMeta['endReason']): number;
     /**
      * @returns 这条消息的 DB id。按步增量落盘（2026-09-16）之后两处要它：
      *   「在飞那一轮从哪条起」的水位线，以及收尾时把这一轮的账挂到**最后一条
@@ -15384,7 +15507,13 @@ type ScheduleIssueCode =
  | 'date-range-on-once'
 /** 清单里有一条规则写错了（`detail` 是 `rule-validate` 给的位置与原因） */
  | 'rule-invalid'
-/** 「跳过全部检查」+ 空工作区。`bypass` + 不确定的 cwd 就是「无边界」的字面意思 */
+/**
+ * 「跳过全部检查」+ 空工作区。
+ *
+ * ⚠️ **2026-09-18 起没有产出点了** —— 空着落到的是 `~/.epoch/automation/<id>/`，
+ * 一个确定、专属、隔离的目录，不是「不确定的 cwd」。判据全文在
+ * `validate.ts` 的 `bypassIssues()` 第 1 条上。保留这条 code 是为了不破坏协议。
+ */
  | 'bypass-needs-workdir'
 /** 「跳过全部检查」的工作区指到了家目录本身 —— 那和不绑定没有区别 */
  | 'bypass-workdir-too-broad'
@@ -15415,6 +15544,15 @@ interface CreateScheduleInput {
     /** 不给就落到 `~/.epoch/automation/<id>/`（协议上 `workDir` 那段写了理由） */
     workDir?: string;
     model?: string;
+    /**
+     * 「召唤专家」——这条任务用哪个身份跑（2026-09-17 接通）。
+     *
+     * ⚠️ **这一格以前不在这个类型上，而 `ScheduleDefinition.role` 一直在** ——
+     * 于是调用方用展开语法（`...(x ? { role: x } : {})`）写进来时 TS **不报**
+     * （多余属性检查对展开不生效），值走到这儿被**静默丢掉**。
+     * 那正是这一格「库里有列、类型里有位、就是永远没有值」的最后一段。
+     */
+    role?: string;
     permission: PermissionLevel;
     allowTools?: readonly string[];
     allowOperations?: readonly OperationType[];
@@ -15423,6 +15561,15 @@ interface CreateScheduleInput {
     /** **必填**，没有默认值 */
     maxBudgetUsd: number;
     timeoutMs?: number;
+    /**
+     * 跑完的会话直接进会话列表吗。缺省 `false` = 收起来（归档），
+     * 判据全文在 `ScheduleDefinition.showInSessionList` 上。
+     *
+     * ⚠️ **这一格必须在这个类型上**，不能只在 `ScheduleDefinition` 上有位 ——
+     * 判据逐字同上面 `role` 那段：调用方用展开语法写进来时 TS 不报，
+     * 值会被静默丢掉，而表现是「勾了没用」。
+     */
+    showInSessionList?: boolean;
     trigger: ScheduleTrigger;
     startDate?: string;
     endDate?: string;
@@ -15459,18 +15606,28 @@ interface CreateScheduleInput {
  * `ScheduleControl.update` 解析掉；**`ScheduleStore.update` 的入参不收它**
  * （同 `create(input & { workDir: string })` 那条契约，收窄在编译期）。
  */
-type UpdateScheduleInput = Partial<Omit<CreateScheduleInput, 'maxBudgetUsd' | 'workDir' | 'model' | 'startDate' | 'endDate'>> & {
+type UpdateScheduleInput = Partial<Omit<CreateScheduleInput, 'maxBudgetUsd' | 'workDir' | 'model' | 'role' | 'startDate' | 'endDate'>> & {
     maxBudgetUsd?: number;
     /** `null` = 不绑工作区了 → 落回 `~/.epoch/automation/<id>/`，**不是**删掉这一格 */
     workDir?: string | null;
     model?: string | null;
+    /** `null` = 回到默认 agent */
+    role?: string | null;
     startDate?: string | null;
     endDate?: string | null;
 };
 /**
- * 三把尺子的缺省值。
+ * 三把尺子的缺省值 —— **「调 API / CLI 没给这一格时引擎用什么」**。
  *
- * `maxBudgetUsd` **不在这里**，那是刻意的 —— 它没有缺省值。
+ * ## ⚠️ `maxBudgetUsd` **不在这里**，而 2026-09-18 之后这句话更要紧了
+ *
+ * 它没有引擎兜底：没给就是一条 `budget-required`（网线上 400，CLI 上必给 `--budget`）。
+ *
+ * 那一天新建**表单**上它开始预填 200 了，而那是**另一份缺省**
+ * （protocol 的 `WireScheduleDefaults.maxBudgetUsd`，判据全文在那个接口上）：
+ * 一份说「表单打开时格子里印什么」，一份说「没给值时引擎用什么」。
+ * 把 200 抄进这一份的表现是**网线那一道闸整个消失** —— 任何一个不经表单的调用方
+ * 从此都能建出一条没人想过预算的任务，而那正是这一格的缺席拦着的事。
  */
 declare const SCHEDULE_DEFAULTS: {
     /**
@@ -15494,9 +15651,40 @@ declare const SCHEDULE_DEFAULTS: {
      * 那一格自己填一个数。
      */
     readonly maxTurns: 0;
-    /** 15 分钟。唯一能拦住「一条命令挂住了」的那把尺子 */
+    /**
+     * 墙钟超时。唯一能拦住「一条命令挂住了」的那把尺子 —— 前两把在那种情形下
+     * 都不增长（轮次不动、花费不动）。
+     *
+     * ⚠️ **2026-09-18 从 15 分钟抬到 60 分钟**（用户定的）。15 分钟那条线当初是
+     * 照着「一次巡检」估的，而它砍掉的不是跑飞，是**本来就要跑久的那种任务**：
+     * 一条被这把尺子掐断的运行和跑飞长得一模一样（都是 `timeout`），
+     * 而定时任务的反馈回路按天算 —— 第二天早上看到的只有「超时了」三个字。
+     *
+     * 兜住真正跑飞的是必填的 `maxBudgetUsd`（钱是比时间准的尺子），
+     * 判据同上面 `maxTurns` 那一段。
+     *
+     * ⚠️ 这个数**两条路共用**（CLI 不给 `--timeout`、表单预填，都读它）——
+     * 在服务端那侧另写一份的表现，`runtime/schedule/control.ts` 那段注释记着：
+     * 「表单预填 200、直接调这个 API 却得到 20」。
+     */
     readonly timeoutMs: number;
 };
+/**
+ * 新建**表单**里预算那一格印什么（2026-09-18，用户定的 200 美元）。
+ *
+ * ## ⚠️ 它**刻意不在** {@link SCHEDULE_DEFAULTS} 里，这一条是承重的
+ *
+ * 那一份答的是「调 API / CLI 没给这一格时引擎用什么」，而这一格**没有**那种兜底：
+ * 网线上没给预算就是 400（`budget-required`），CLI 上 `--budget` 照旧必给。
+ *
+ * 这一份答的是另一个问题：「表单打开时那个格子里印着什么」。两者混成一份的表现是
+ * 网线那道闸整个消失 —— 任何一个不经表单的调用方从此都能建出一条没人想过预算的
+ * 任务，而定时任务是没人看着的（一觉醒来那笔账已经花完了）。
+ *
+ * 判据全文、以及这个数撤掉了方案 45 §3.5 的哪一半，写在 protocol 的
+ * `WireScheduleDefaults` 上。
+ */
+declare const SCHEDULE_FORM_BUDGET_USD = 200;
 /**
  * 新建任务时预填的最小清单（方案 45 §3.2 的落点）。
  *
@@ -15615,6 +15803,22 @@ declare class ScheduleStore {
     recordRun(input: RecordRunInput): ScheduleRun;
     /** 最近 N 次运行，最新的在前 */
     listRuns(scheduleId: string, limit?: number): ScheduleRun[];
+    /**
+     * 这个任务**最近 N 次运行留下的会话 id**，最新的在前。
+     *
+     * 执行器收尾时拿它去删（缺省不留会话，判据在 runtime 的 `dropSessions` 上）。
+     *
+     * ## 三件刻意的事
+     *
+     * 1. **只回有会话的那几次**（`session_id IS NOT NULL`）：三种 `skipped-*` 和
+     *    `missed` 压根没起过会话，让它们占掉名额的话，`limit: 2` 会在「昨天跳过
+     *    两次」之后**一条真会话都翻不到**，而那正是要收的残骸。
+     * 2. **回的是 id 不是整行**：调用方只拿它去 `delete()`，交出整行等于多给它
+     *    一堆用不着的字段（以及一个「顺手改点别的」的机会）。
+     * 3. **`schedule_runs` 那一行本身不删**：状态 / 花费 / 欠条永远留着 ——
+     *    被清掉的只是「点开能看的内容」。
+     */
+    recordedSessions(scheduleId: string, limit?: number): string[];
     /**
      * 全部任务的最近运行，最新的在前（运行记录那个 tab / TUI 启动提示要的那份）。
      */
@@ -18713,46 +18917,21 @@ declare function pendingImageTokens(messages: readonly EpochMessage[]): number;
  *
  * ---
  *
- * # ✅ 2026-08-16 合并时收掉了（原文是一张 📮，留着当判据）
- *
- * 那一行接上了：`runtime/src/services.ts` 的 `new ContextCompressor()` 现在带着
- * `...compressionOptions(config)`，收的那一笔在那儿的注释里点名回指了这张 📮。
- * **下面这一整段原文一个字没改** —— 它是判据（「不收的后果是一句谎话」），
- * 不是待办；哪天有人重构那个装配点，该重读的就是它。
- *
- * ---
- *
- * **写这张 📮 的那一轮的禁区是 `packages/runtime/**`，而这个类的装配点正在那儿。**
- * 所以「配置真的接到压缩器上」这最后一根线，我只做到了给它一个够不错的接头
- * （{@link compressionOptions}），没能接上去。
- *
- * ## 要收的是一处，一行
- *
- * [runtime/src/services.ts](../../../runtime/src/services.ts) 里那个
- * `new ContextCompressor({ summarize })`（`// ---- 上下文压缩 ----` 那一段）：
- *
- * ```ts
- * new ContextCompressor({
- *   ...compressionOptions(config),   // ← 加这一行
- *   summarize: async (prompt) => { … },
- * })
- * ```
- *
- * ## 为什么不能绕过去
- *
- * 三条路（方案 30 §12.1）：**绕过去**等于在 core 里自己读一遍配置 ——
- * 而 core 拿不到 `config`，`ContextCompressor` 的构造函数是它唯一的入口；
- * **伸手改**是直接动 runtime，合并必冲突。所以走第三条。
+ * ## ⚠️ 配置必须在装配点接上来，否则那两个开关是**一句谎话**
  *
- * ## ⚠️ 不收的后果是**一句谎话**，不是少一个功能
+ * `ContextCompressor` 的构造函数是配置进来的唯一入口（core 拿不到 `config`），
+ * 接头是 {@link compressionOptions}，装配点在
+ * [runtime/src/services.ts](../../../runtime/src/services.ts)：
+ * `new ContextCompressor({ ...compressionOptions(config), summarize })`。
+ * **别把那一行摘掉。**
  *
- * 不收的话：schema 认这两个键、`epoch config set compression.enabled false` 写得进去、
- * 设置页那一行也会把它印出来并标上「② 用户级」—— 而压缩**照压不误**。
+ * 摘掉之后：schema 照认这两个键、`epoch config set compression.enabled false`
+ * 照样写得进去、设置页那一行也会把它印出来并标上「② 用户级」—— 而压缩**照压不误**。
  * 一个配了、界面确认了、却不生效的开关，比压根没有这个开关坏得多：
  * 后者用户会去问，前者他会以为自己已经关掉了。
  *
  * 这正是设计稿连着两轮记「只记不改」时说的那个空壳（判据逐字：「没有配置项就别画
- * 开关」）—— 收掉这一行之前，它只是从「稿子上的空壳」搬成了「配置里的空壳」。
+ * 开关」）—— 那一行没接上之前，它只是从「稿子上的空壳」搬成了「配置里的空壳」。
  */
 
 interface ContextCompressorOptions {
@@ -19504,4 +19683,4 @@ declare function resolveCodeModeWorker(baseDir: string, exists?: typeof existsSy
  */
 declare function codeModeWorkerPath(): string | undefined;
 
-export { AGENT_ROLE_DIAG_MODULE, ARTIFACT_MAX_TOTAL_BYTES, ARTIFACT_RETENTION_DEFAULTS, ATTACHMENT_MAX_TOTAL_BYTES, ATTACHMENT_RETENTION_DEFAULTS, type AcquireResult, type AgentConfig, AgentLoop, type AgentProvider, type AgentSite, type AgentSiteRef, type AppendMessageInput, ApprovalCache, type ApprovalDecision, type ApprovalScope, type ArtifactOpenRefusal, type ArtifactRetention, type AskQuestionDeps, type AttachmentRetention, BLOCKED_TOOLS, type BackendOptions, type BackendOutcome, type BackgroundTaskSource, type BaseOrigin, type BaseSlot, type BeginTurnInput, type BreakdownInput, BudgetGuard, type BudgetGuardOptions, type BudgetInfo, type BudgetLevel, type BudgetOptions, type BudgetStatus, BudgetStore, type BudgetStoreOptions, type BuildFireArgvInput, type BuildIndexOptions, CHECKPOINT_MAX_TOTAL_BYTES, CLAUDE_EVENT_NAMES, CLAUDE_TOOL_NAMES, CODE_MODE_LIMITS, CODE_MODE_SDK_TAG, CONFIG_KEYS, CURRENT_CONFIG_VERSION, type CachedApproval, type CachedDecision, type CheckpointCapture, type CheckpointFile, CheckpointManager, type CheckpointManagerOptions, type CheckpointManifest, CheckpointStore, type CheckpointStoreOptions, type CheckpointSummary, type ClaudeHooksParseOptions, type CodeModeLimits, type CodeRequest, type CodeResult, CodeSandbox, type CommandHookConfig, type CommandHookResult, type CommandLoadOutcome, type CommandLoadSummary, type CommandResult, type CommandRunner, type CompactionResult, type CompiledRules, type ComplianceDirSpec, type ComplianceDirsSummary, ComplianceEngine, type ComplianceEngineInput, type ComplianceGate, type ComplianceHit, type ComplianceRule, type ComplianceRuleSource, type ComplianceSettings, type ComplianceVerdict, type CompressConfig, type CompressResult, type ConfigMigration, type ConfigOrigins, ContextCompressor, type ContextEngine, type CreateScheduleInput, type CreateSessionInput, DEFAULT_COMPLIANCE_ACTIONS, DEFAULT_COMPLIANCE_SETTINGS, DEFAULT_COMPRESSION_THRESHOLD, DEFAULT_GOAL_MAX_ROUNDS, DEFAULT_MAX_HOLD_CHARS, type DelegateArgs, type DelegateConfig, DelegateManager, type DelegateTaskResult, type DiagnoseOptions, type DiscoverOutcome, type DiscoveredFile, type DoctorReport, type DraftParse, EMPTY_RULES, EPOCH_DISK_LEDGER, EpochConfigSchema, type ExpandOptions, type ExtractOutcome, FTS_TABLES, FTS_TRIGGERS, type FallbackEvent, type FileSlots, type FileSourceKind, type ForkInput, type FrontmatterParse, type FrontmatterSplit, type FtsHealth, type FtsReclaim, type FtsSpace, type FtsTableHealth, GOAL_BLOCK_CODES, type GateAxis, type GateVerdict, type GenerateInput, type GenerateOutput, type Goal, type GoalBlockReason, type GoalClear, type GoalPhase, type GoalPromptView, type GoalRefusal, type GoalRoundResult, GoalService, GoalStore, type GoalToolDeps, type GoalWrite, HEADLESS_AUDIT_CODES, type HeadlessPolicy, type HookConfigEntry, HookManager, type HookManagerOptions, type HookMatcher, type HookSourceKind, type HookSourceStatus, type HookSourcesOptions, type HookSourcesSummary, type HooksParseOutcome, type MemoryManager$1 as IMemoryManager, INSTRUCTION_BUDGET_CHARS, INSTRUCTION_FILES, type SessionManager$1 as ISessionManager, type SkillSystem$1 as ISkillSystem, ImageLoadError, type ImageSize, type ImportDecision, type ImportGate, type ImportNode, type ImportSkipReason, ImportTrustStore, type InstallOptions, type InstallOutcome, type InstallPreview, type InstructionScan, type InstructionSource, type IsolationReason, type IsolationReport, type JsonSchemaDocument, LAUNCHD_LABEL_PREFIX, LOCK_HEARTBEAT_MS, LOCK_STALE_MS, type LastOpenSession, LastOpenSessions, type LayerOutcome, type LayerScalars, type LayerStatus, type LearningContext, type LearningResult, type LearningSkipReason, type LexiconLoadOutcome, type LifecycleOutcome, type ListCandidatesInput, type ListSessionsInput, type ListSessionsOutput, type LoadCommandsOptions, type LoadConfigOptions, type LoadKeybindingsOptions, type LoadKeybindingsResult, type LoadRolesOptions, type LoadedPlugin, type LockHolder, MARKETPLACE_DISPLAY_FIELDS, MARKETPLACE_FILE, MAX_AUDIT_ENTRIES, MAX_COMMAND_DEPTH, MAX_GOAL_MAX_ROUNDS, MAX_IMPORT_DEPTH, MAX_LAST_OPEN_SESSIONS, MAX_OBJECTIVE_CHARS, MAX_REASON_CHARS, MAX_RECENT_WORKSPACES, MODEL_GIVE_UP_THRESHOLD, MULTIMODAL_DEFAULTS, type ManagedPolicy, ManagedPolicyError, type ManagedSettings, ManagedSettingsSchema, type MarketplaceCatalog, type MarketplaceDisplay, type MarketplaceDisplayField, type MarketplaceEntry, type MarketplaceOutcome, type MarketplaceRecord, type MarketplaceStatus, type MemoryConfig, type MemoryEntry, MemoryManager, MemoryReviewer, type MemorySearchResult, type MemoryTarget, type MemoryWriteResult, type MentionPart, type MentionResolution, type Message, type MessageHit, type MessageRecord, type MessageSurface, type ModelCapability, ModelFailureTracker, type ModelMetaEntry, type ModelPricing, type MultimodalPolicy, NOMINAL_TOTAL_BYTES, NO_REVEALED_TOOLS, type NonInteractiveProbe, type OsTaskSnapshot, type OutputGuard, PACK_EXCLUDES, PACK_MAX_BYTES, PACK_MAX_FILES, PERMISSION_AUDIT_CODES, PLUGIN_LAYOUT, PLUGIN_MANIFEST_FILE, PLUGIN_MANIFEST_KEYS, PLUGIN_NAME_PATTERN, PLUGIN_ROOT_ENV, PLUGIN_ROOT_TOKEN, PLUGIN_VISIBILITY, POLICY_DECISIONS, PROBE_VERSION, PROJECT_AGENTS_SUBDIR, PROVIDER_NO_CREDENTIAL, type PackFile, type PackLimits, type PackOutcome, type PackPlan, type PackPlanOutcome, type PermissionAuditCode, type PermissionAuditEntry, type PermissionAuditOutcome, type PermissionAuditScope, type PermissionAuditSnapshot, PermissionManager, type PersistedBudget, type PersistedPart, type PlanApprovalFn, type PlanEnterResult, type PlanModeDeps, PlanModeState, type PlanSettlement, type PluginArtifacts, type PluginAuthor, PluginAuthorSchema, type PluginCommandDir, type PluginCounts, type PluginHookFile, type PluginInventory, type PluginLoadOptions, type PluginManifest, type PluginPathRef, type PluginRecord, type PluginSettingsFile, type PluginSourceType, type PluginStateReadOutcome, PluginStore, type PluginVisibility, type PolicyDirSpec, type PolicyDirsSummary, type PolicyLoadOutcome, type PolicyRule, PolicyRuleSchema, type PricingAt, type PricingOverride, type ProjectContext, type ProjectExtensionInventory, ProviderError, ProviderRouter, type ProviderStreamChunk, type ProviderToolCall$1 as ProviderToolCall, type ProviderWarning, type PruneResult, type QuestionAskFn, RECORDING_KEEP_RUNS, RECORDING_MAX_BYTES, ROLE_FRONTMATTER_SCHEMA, RUN_CODE_TOOL, type ReadMessagesInput, type ReadMessagesOutput, type RecentWorkspace, RecentWorkspaces, type RecordRunInput, type RecorderOptions, type RecoveryAction, type RegisterInput, type RegisterOutcome, type RegistrarOptions, type RegistrationPatch, type RepairOutcome, type ResolveMentionsOptions, type ResolveReferenceInput, type ResolveSettingsOptions, type ResolvedCompression, type ResolvedReference, type ResolvedSource, type ResponseFormat, type RestorePartsOptions, type ReviewIssue, type RewindAction, type RewindDrift, type RewindFilePlan, type RewindOptions, type RewindOutcome, type RewindPreview, type RoleCreateFailure, type RoleCreateInput, type RoleCreateOptions, type RoleCreateOutcome, type RoleLoadOutcome, type RoleLoadSummary, type RoleMergeNotice, type RoleMergeResult, type RoleRemoveFailure, type RoleRemoveOptions, type RoleRemoveOutcome, type RoleScope, type RuleMatch, type RuleSuggestion, type RuleVerdict, type RunCodeFailure, type RunCodeInput, type RunCodeOutcome, type RunCodeToolDeps, type RunEstimateInput, type RunInput, type RunResult, type RunningSchedule, SANDBOX_COVERS, SANDBOX_EXCLUDES, SCALAR_KEYS, SCHEDULE_DEFAULTS, SCHEDULE_DEFAULT_ALLOWLIST, SCHEDULE_ISSUE_CODES, SCHTASKS_FOLDER, SESSION_MESSAGES_READ_TOOL, SESSION_MESSAGES_SEARCH_TOOL, SESSION_QUERY_TOOLS, SESSION_SEARCH_TOOL, SESSION_TRACE_TOOL, SETTINGS_LAYER_ORDER, SETTING_WRITE_KEYS, SETTING_WRITE_LAYERS, SKILL_CREATE_TOOL, SKILL_EDIT_TOOL, SKILL_PATCH_TOOL, SKILL_VIEW_TOOL, SKILL_WRITE_FILE_TOOL, SLASH_COMMANDS_DIAG_MODULE, type ScalarKey, type ScanInstructionsOptions, type ScheduleArgvRefusal, type ScheduleArgvResult, type ScheduleArgvWarning, type ScheduleBackend, type ScheduleCliEntry, type ScheduleDraftDeps, type ScheduleDrift, type ScheduleDriftKind, type ScheduleInstallForm, type ScheduleIssue, type ScheduleIssueCode, type ScheduleLock, ScheduleRecorder, ScheduleRegistrar, ScheduleStore, type ScheduleValidation, type SchemaExport, type SearchHit, type SearchInput, type SearchMessagesInput, type SearchMessagesOutput, type SearchOutput, type SearchSessionsInput, type SelectionDeps, type SelfConnector, type SelfIndexInput, type SelfSettings, type Session, type SessionCandidate, type SessionHit, SessionManager, type SessionMentionDeps, type SessionMeta, SessionQueries, SessionReferences, type SessionSearchDeps, type SessionStats, type SessionSurface, type SessionTrace, type SessionVisibility, type SessionVisibilityInput, type SettingApply, type SettingApplyFacts, type SettingChain, type SettingFutile, type SettingLayer, type SettingStep, type SettingValue, type SettingValueKind, type SettingWriteFailure, type SettingWriteKey, type SettingWriteLayer, type SettingWriteOutcome, type SettingWriteRequest, type SettingWriteTarget, type SettingWriteTargetsOptions, type SettingsFile, SettingsFileError, SettingsFileSchema, type SettingsLayer, type SettingsResolution, type ShadowFinding, type ShadowKind, type Skill, type SkillDirSource, type SkillDirSpec, type SkillDirsSummary, type SkillImportConflict, type SkillImportDone, type SkillImportEntry, type SkillImportFailure, type SkillImportForm, type SkillImportOptions, type SkillImportPreview, type SkillImportResult, type SkillIndexEntry, type SkillIndexOptions, type SkillIndexResidency, type SkillIndexStats, SkillLearner, type SkillLearningProvider, type SkillMeta, type SkillStats, SkillSystem, type SkillSystemOptions, type SkillViewDeps, type SkillWriteDeps, type SteerSource, type SubAgentRunner, type SubTask, type SubToolCaller, type SummarizeOutput, type SurfaceMessage, type SystemPromptParams, type SystemPromptSegments, TOOL_SEARCH_TOOL, TaskNoticeTracker, type TodoItem, type ToolCall, type ToolConflict, type ToolGate, type ToolNameFidelity, type ToolNameLookup, ToolRegistry, type ToolRevealState, type ToolScope, type ToolSearchDeps, type ToolTableCost, type TraceInput, type TraceNode, TrackerDB, type TrustDecision, type TrustGate, type TrustGateOptions, TrustManager, type TurnRecord, type TurnTiming, type UpdateScheduleInput, type UtilityModelInfo, type ValidateScheduleInput, type VersionCheck, Workspace, type WorkspaceFiles, type WorkspaceIssue, type WorkspaceIssueKind, acquireScheduleLock, addMarketplace, addUsage, admitArtifact, admitArtifacts, affectedPaths, artifactLaunchArgv, artifactOpenRefusal, assertLevelAllowed, blockedRoleTools, buildContextBreakdown, buildFireArgv, buildFtsMatchQuery, buildSchemaExports, buildSystemPrompt, buildTrigramMatchQuery, builtinRoles, checkEpochVersion, checkFtsHealth, checkShadowing, classifyProviderError, clearModelCache, coalesceRecording, codeModeWorkerPath, commandNameFromRelPath, compileRuleLists, compressionOptions, computeCost, computeCostMicros, computeExecHash, countRules, createAllowAllGate, createAllowAllImportGate, createAskQuestionTool, createCodeExecTool, createDelegateTool, createDenyAllGate, createDenyAllImportGate, createGoalTool, createImportGate, createMemoryTool, createPlanModeTools, createRoleFile, createRoleScope, createRunCodeTool, createScheduleDraftTool, createSessionMessagesReadTool, createSessionMessagesSearchTool, createSessionSearchTool, createSessionSearchTools, createSessionTraceTool, createSkillViewTool, createSkillWriteTools, createTodoTool, createToolRevealState, createToolScope, createToolSearchTool, createTrustGate, currentEpochVersion, decideImport, decideTrust, defaultConfig, defaultModelOf, describeArtifactRefusal, describeBackgroundTask, describeHeadlessPolicy, describeIsolation, describeJsonError, diagnoseSchedules, discoverMarkdown, discoverModels, discoverProject, displayCurrency, draftCommandLine, draftWidening, escapeRuleContent, estimateImageTokens, estimateRunTokens, estimateTokens, evaluateSelection, expandCommand, expandImports, explainSetting, extractArchive, findInstructionFiles, findProjectInstructions, findRole, formatBytes, formatSkillIndex, formatUsd, gateForTool, getCapability, getConfigIssues, getConfigOrigins, getImportGate, getTrustGate, hasDedicatedExecContent, hasExecTierContent, hasPromptCaching, hasProviderCredentials, hasReadTierContent, imageFromBase64, imageFromPath, imagePartTokens, importSkills, installPlugin, instructionDirs, instructionNotices, intervalSlots, inventoryProjectExtensions, inventoryTotal, isBlockCode, isCodeModeDeferred, isEmptyRules, isGoalPhase, isNonInteractive, isReadOnlySubCall, isSettingWriteLayer, isValidPluginName, isWithinWindow, isWritableSettingKey, labelSlug, layerRank, listRunningSchedules, listSessionCandidates, listWorkspaceFiles, loadCommandDefinitions, loadCommandFile, loadCommands, loadConfig, loadHookSources, loadKeybindings, loadLexiconDir, loadLexiconFiles, loadPlugins, loadPolicyFiles, loadPolicyRules, loadRoleDefinitions, loadRoleDir, loadedImports, localDateString, managedSwitchNotes, mapClaudeToolName, mapEpochToolName, mapOperationType, matchPreauthorization, matchRuleLists, matchesHook, mentionsPluginRoot, mergeHeadlessPolicy, mergeRoles, mergeSchedulePatch, microsToUsd, modelListCandidates, needsAllowlist, nextFallbackModel, nextRunAt, noConfigOrigins, noManagedPolicy, noPlugins, openArtifact, originOf, packFileName, packPlugin, parseClaudeSettingsHooks, parseClock, parseDate, parseFrontmatter, parseHooksConfig, parseHooksConfigVerbose, parseImportLine, parseModelList, parseRoleDefinition, parseScheduleDraft, parseSkillFrontmatter, parseTrigger, pendingImageTokens, persistParts, persistToolResults, persistedUsage, planPack, previewSkillImport, pricingFor, projectEntryForDisplay, pruneArtifacts, pruneAttachments, pruneRecordings, pruneSchedules, readImageSize, readMarketplaces, readPluginManifest, readPluginRecords, readProviderKeyEnv, readRecording, readSessionSurface, reclaimFtsSpace, redactLine, refreshOpenRouterMetadata, removeMarketplace, removeRecordings, removeRoleFile, removeSessionArtifacts, removeSessionAttachments, renderImportTree, renderProjectContext, renderSdkDeclaration, renderSelfIndex, repairSchedules, resolveArtifactRetention, resolveCodeModeWorker, resolveComplianceDirs, resolveEntrySource, resolveInWorkspace, resolveMarketplaceRef, resolveMentions, resolveMultimodalPolicy, resolvePolicyDirs, resolvePricingAt, resolveProjectRoot, resolveScheduleBackend, resolveSessionReference, resolveSessionVisibility, resolveSettings, resolveSkillDirs, resolveSource, resolveTar, resolveWorkspace, restoreParts, revealScopedProvider, roleScopedProvider, roleSourceLabel, ruleCovers, ruleFromString, ruleToString, runCode, runCommand, sanitizeArgNames, sanitizeCommand, sanitizeFtsQuery, sanitizePath, sanitizeToolOutput, scanInstructions, scanPluginDir, scanSkillDirs, searchMarketplaces, setDisplayCurrency, setImportGate, setPluginEnabled, setTrustGate, settingValueChoices, settingValueKind, settingWriteApply, settingWriteLayers, settingWriteTargets, skillIndexDescription, skillIndexResidency, skillIndexStats, sniffMediaType, splitFrontmatter, staticToolProvider, stripArtifactData, substitutePluginRoot, suggestRuleFromApproval, systemOpenArgv, systemPromptSegments, toPosix, toolDefinitionTokens, toolMatches, toolTableTokens, totalTokens, traceSession, triggerPeriodMs, unescapeRuleContent, uninstallPlugin, unknownRoleSkills, unknownRoleTools, unloadedInstructionFiles, updateMarketplace, updatePlugin, usdToMicros, validateSchedule, validateTrigger, validateWindow, withGoalCompression, withGoalPrompt, workspaceDisplayPath, writeSettingValue };
+export { AGENT_ROLE_DIAG_MODULE, ARTIFACT_MAX_TOTAL_BYTES, ARTIFACT_RETENTION_DEFAULTS, ATTACHMENT_MAX_TOTAL_BYTES, ATTACHMENT_RETENTION_DEFAULTS, type AcquireResult, type AgentConfig, AgentLoop, type AgentProvider, type AgentSite, type AgentSiteRef, type AppendMessageInput, ApprovalCache, type ApprovalDecision, type ApprovalScope, type ArtifactOpenRefusal, type ArtifactRetention, type AskQuestionDeps, type AttachmentRetention, BLOCKED_TOOLS, type BackendOptions, type BackendOutcome, type BackgroundTaskSource, type BaseOrigin, type BaseSlot, type BeginTurnInput, type BreakdownInput, BudgetGuard, type BudgetGuardOptions, type BudgetInfo, type BudgetLevel, type BudgetOptions, type BudgetStatus, BudgetStore, type BudgetStoreOptions, type BuildFireArgvInput, type BuildIndexOptions, CHECKPOINT_MAX_TOTAL_BYTES, CLAUDE_EVENT_NAMES, CLAUDE_TOOL_NAMES, CODE_MODE_LIMITS, CODE_MODE_SDK_TAG, CONFIG_KEYS, CURRENT_CONFIG_VERSION, type CachedApproval, type CachedDecision, type CheckpointCapture, type CheckpointFile, CheckpointManager, type CheckpointManagerOptions, type CheckpointManifest, CheckpointStore, type CheckpointStoreOptions, type CheckpointSummary, type ClaudeHooksParseOptions, type CodeModeLimits, type CodeRequest, type CodeResult, CodeSandbox, type CommandHookConfig, type CommandHookResult, type CommandLoadOutcome, type CommandLoadSummary, type CommandResult, type CommandRunner, type CompactionResult, type CompiledRules, type ComplianceDirSpec, type ComplianceDirsSummary, ComplianceEngine, type ComplianceEngineInput, type ComplianceGate, type ComplianceHit, type ComplianceRule, type ComplianceRuleSource, type ComplianceSettings, type ComplianceVerdict, type CompressConfig, type CompressResult, type ConfigMigration, type ConfigOrigins, ContextCompressor, type ContextEngine, type CreateScheduleInput, type CreateSessionInput, DEFAULT_COMPLIANCE_ACTIONS, DEFAULT_COMPLIANCE_SETTINGS, DEFAULT_COMPRESSION_THRESHOLD, DEFAULT_GOAL_MAX_ROUNDS, DEFAULT_MAX_HOLD_CHARS, type DelegateArgs, type DelegateConfig, DelegateManager, type DelegateTaskResult, type DiagnoseOptions, type DiscoverOutcome, type DiscoveredFile, type DoctorReport, type DraftParse, EMPTY_RULES, EPOCH_DISK_LEDGER, EpochConfigSchema, type ExpandOptions, type ExtractOutcome, FTS_TABLES, FTS_TRIGGERS, type FallbackEvent, type FileSlots, type FileSourceKind, type ForkInput, type FrontmatterParse, type FrontmatterSplit, type FtsHealth, type FtsReclaim, type FtsSpace, type FtsTableHealth, GOAL_BLOCK_CODES, type GateAxis, type GateVerdict, type GenerateInput, type GenerateOutput, type Goal, type GoalBlockReason, type GoalClear, type GoalPhase, type GoalPromptView, type GoalRefusal, type GoalRoundResult, GoalService, GoalStore, type GoalToolDeps, type GoalWrite, HEADLESS_AUDIT_CODES, type HeadlessPolicy, type HookConfigEntry, HookManager, type HookManagerOptions, type HookMatcher, type HookSourceKind, type HookSourceStatus, type HookSourcesOptions, type HookSourcesSummary, type HooksParseOutcome, type MemoryManager$1 as IMemoryManager, INSTRUCTION_BUDGET_CHARS, INSTRUCTION_FILES, type SessionManager$1 as ISessionManager, type SkillSystem$1 as ISkillSystem, ImageLoadError, type ImageSize, type ImportDecision, type ImportGate, type ImportNode, type ImportSkipReason, ImportTrustStore, type InstallOptions, type InstallOutcome, type InstallPreview, type InstructionScan, type InstructionSource, type IsolationReason, type IsolationReport, type JsonSchemaDocument, LAUNCHD_LABEL_PREFIX, LOCK_HEARTBEAT_MS, LOCK_STALE_MS, type LastOpenSession, LastOpenSessions, type LayerOutcome, type LayerScalars, type LayerStatus, type LearningContext, type LearningResult, type LearningSkipReason, type LexiconLoadOutcome, type LifecycleOutcome, type ListCandidatesInput, type ListSessionsInput, type ListSessionsOutput, type LoadCommandsOptions, type LoadConfigOptions, type LoadKeybindingsOptions, type LoadKeybindingsResult, type LoadRolesOptions, type LoadedPlugin, type LockHolder, MARKETPLACE_DISPLAY_FIELDS, MARKETPLACE_FILE, MAX_AUDIT_ENTRIES, MAX_COMMAND_DEPTH, MAX_GOAL_MAX_ROUNDS, MAX_IMPORT_DEPTH, MAX_LAST_OPEN_SESSIONS, MAX_OBJECTIVE_CHARS, MAX_REASON_CHARS, MAX_RECENT_WORKSPACES, MODEL_GIVE_UP_THRESHOLD, MULTIMODAL_DEFAULTS, type ManagedPolicy, ManagedPolicyError, type ManagedSettings, ManagedSettingsSchema, type MarketplaceCatalog, type MarketplaceDisplay, type MarketplaceDisplayField, type MarketplaceEntry, type MarketplaceOutcome, type MarketplaceRecord, type MarketplaceStatus, type MemoryConfig, type MemoryEntry, MemoryManager, MemoryReviewer, type MemorySearchResult, type MemoryTarget, type MemoryWriteResult, type MentionPart, type MentionResolution, type Message, type MessageHit, type MessageRecord, type MessageSurface, type ModelCapability, ModelFailureTracker, type ModelMetaEntry, type ModelPricing, type MultimodalPolicy, NOMINAL_TOTAL_BYTES, NO_REVEALED_TOOLS, type NonInteractiveProbe, type OsTaskSnapshot, type OutputGuard, PACK_EXCLUDES, PACK_MAX_BYTES, PACK_MAX_FILES, PERMISSION_AUDIT_CODES, PLUGIN_LAYOUT, PLUGIN_MANIFEST_FILE, PLUGIN_MANIFEST_KEYS, PLUGIN_NAME_PATTERN, PLUGIN_ROOT_ENV, PLUGIN_ROOT_TOKEN, PLUGIN_VISIBILITY, POLICY_DECISIONS, PROBE_VERSION, PROJECT_AGENTS_SUBDIR, PROVIDER_NO_CREDENTIAL, type PackFile, type PackLimits, type PackOutcome, type PackPlan, type PackPlanOutcome, type PermissionAuditCode, type PermissionAuditEntry, type PermissionAuditOutcome, type PermissionAuditScope, type PermissionAuditSnapshot, PermissionManager, type PersistedBudget, type PersistedPart, type PlanApprovalFn, type PlanEnterResult, type PlanModeDeps, PlanModeState, type PlanSettlement, type PluginArtifacts, type PluginAuthor, PluginAuthorSchema, type PluginCommandDir, type PluginCounts, type PluginHookFile, type PluginInventory, type PluginLoadOptions, type PluginManifest, type PluginPathRef, type PluginRecord, type PluginSettingsFile, type PluginSourceType, type PluginStateReadOutcome, PluginStore, type PluginVisibility, type PolicyDirSpec, type PolicyDirsSummary, type PolicyLoadOutcome, type PolicyRule, PolicyRuleSchema, type PricingAt, type PricingOverride, type ProjectContext, type ProjectExtensionInventory, ProviderError, ProviderRouter, type ProviderStreamChunk, type ProviderToolCall$1 as ProviderToolCall, type ProviderWarning, type PruneResult, type QuestionAskFn, RECORDING_KEEP_RUNS, RECORDING_MAX_BYTES, ROLE_FRONTMATTER_SCHEMA, RUN_CODE_TOOL, type ReadMessagesInput, type ReadMessagesOutput, type RecentWorkspace, RecentWorkspaces, type RecordRunInput, type RecorderOptions, type RecoveryAction, type RegisterInput, type RegisterOutcome, type RegistrarOptions, type RegistrationPatch, type RepairOutcome, type ResolveMentionsOptions, type ResolveReferenceInput, type ResolveSettingsOptions, type ResolvedCompression, type ResolvedReference, type ResolvedSource, type ResponseFormat, type RestorePartsOptions, type ReviewIssue, type RewindAction, type RewindDrift, type RewindFilePlan, type RewindOptions, type RewindOutcome, type RewindPreview, type RoleCreateFailure, type RoleCreateInput, type RoleCreateOptions, type RoleCreateOutcome, type RoleLoadOutcome, type RoleLoadSummary, type RoleMergeNotice, type RoleMergeResult, type RoleRemoveFailure, type RoleRemoveOptions, type RoleRemoveOutcome, type RoleScope, type RuleMatch, type RuleSuggestion, type RuleVerdict, type RunCodeFailure, type RunCodeInput, type RunCodeOutcome, type RunCodeToolDeps, type RunEstimateInput, type RunInput, type RunResult, type RunningSchedule, SANDBOX_COVERS, SANDBOX_EXCLUDES, SCALAR_KEYS, SCHEDULE_DEFAULTS, SCHEDULE_DEFAULT_ALLOWLIST, SCHEDULE_FORM_BUDGET_USD, SCHEDULE_ISSUE_CODES, SCHTASKS_FOLDER, SESSION_MESSAGES_READ_TOOL, SESSION_MESSAGES_SEARCH_TOOL, SESSION_QUERY_TOOLS, SESSION_SEARCH_TOOL, SESSION_TRACE_TOOL, SETTINGS_LAYER_ORDER, SETTING_WRITE_KEYS, SETTING_WRITE_LAYERS, SKILL_CREATE_TOOL, SKILL_EDIT_TOOL, SKILL_PATCH_TOOL, SKILL_VIEW_TOOL, SKILL_WRITE_FILE_TOOL, SLASH_COMMANDS_DIAG_MODULE, type ScalarKey, type ScanInstructionsOptions, type ScheduleArgvRefusal, type ScheduleArgvResult, type ScheduleArgvWarning, type ScheduleBackend, type ScheduleCliEntry, type ScheduleDraftDeps, type ScheduleDrift, type ScheduleDriftKind, type ScheduleInstallForm, type ScheduleIssue, type ScheduleIssueCode, type ScheduleLock, ScheduleRecorder, ScheduleRegistrar, ScheduleStore, type ScheduleValidation, type SchemaExport, type SearchHit, type SearchInput, type SearchMessagesInput, type SearchMessagesOutput, type SearchOutput, type SearchSessionsInput, type SelectionDeps, type SelfConnector, type SelfIndexInput, type SelfSettings, type Session, type SessionCandidate, type SessionHit, SessionManager, type SessionMentionDeps, type SessionMeta, SessionQueries, SessionReferences, type SessionSearchDeps, type SessionStats, type SessionSurface, type SessionTrace, type SessionVisibility, type SessionVisibilityInput, type SettingApply, type SettingApplyFacts, type SettingChain, type SettingFutile, type SettingLayer, type SettingStep, type SettingValue, type SettingValueKind, type SettingWriteFailure, type SettingWriteKey, type SettingWriteLayer, type SettingWriteOutcome, type SettingWriteRequest, type SettingWriteTarget, type SettingWriteTargetsOptions, type SettingsFile, SettingsFileError, SettingsFileSchema, type SettingsLayer, type SettingsResolution, type ShadowFinding, type ShadowKind, type Skill, type SkillDirSource, type SkillDirSpec, type SkillDirsSummary, type SkillImportConflict, type SkillImportDone, type SkillImportEntry, type SkillImportFailure, type SkillImportForm, type SkillImportOptions, type SkillImportPreview, type SkillImportResult, type SkillIndexEntry, type SkillIndexOptions, type SkillIndexResidency, type SkillIndexStats, SkillLearner, type SkillLearningProvider, type SkillMeta, type SkillStats, SkillSystem, type SkillSystemOptions, type SkillViewDeps, type SkillWriteDeps, type SteerSource, type SubAgentRunner, type SubTask, type SubToolCaller, type SummarizeOutput, type SurfaceMessage, type SystemPromptParams, type SystemPromptSegments, TOOL_SEARCH_TOOL, TaskNoticeTracker, type TodoItem, type ToolCall, type ToolConflict, type ToolGate, type ToolNameFidelity, type ToolNameLookup, ToolRegistry, type ToolRevealState, type ToolScope, type ToolSearchDeps, type ToolTableCost, type TraceInput, type TraceNode, TrackerDB, type TrustDecision, type TrustGate, type TrustGateOptions, TrustManager, type TurnRecord, type TurnTiming, type UpdateScheduleInput, type UtilityModelInfo, type ValidateScheduleInput, type VersionCheck, Workspace, type WorkspaceFiles, type WorkspaceIssue, type WorkspaceIssueKind, acquireScheduleLock, addMarketplace, addUsage, admitArtifact, admitArtifacts, affectedPaths, artifactLaunchArgv, artifactOpenRefusal, assertLevelAllowed, blockedRoleTools, buildContextBreakdown, buildFireArgv, buildFtsMatchQuery, buildSchemaExports, buildSystemPrompt, buildTrigramMatchQuery, builtinRoles, checkEpochVersion, checkFtsHealth, checkShadowing, classifyProviderError, clearModelCache, coalesceRecording, codeModeWorkerPath, commandNameFromRelPath, compileRuleLists, compressionOptions, computeCost, computeCostMicros, computeExecHash, countRules, createAllowAllGate, createAllowAllImportGate, createAskQuestionTool, createCodeExecTool, createDelegateTool, createDenyAllGate, createDenyAllImportGate, createGoalTool, createImportGate, createMemoryTool, createPlanModeTools, createRoleFile, createRoleScope, createRunCodeTool, createScheduleDraftTool, createSessionMessagesReadTool, createSessionMessagesSearchTool, createSessionSearchTool, createSessionSearchTools, createSessionTraceTool, createSkillViewTool, createSkillWriteTools, createTodoTool, createToolRevealState, createToolScope, createToolSearchTool, createTrustGate, currentEpochVersion, decideImport, decideTrust, defaultConfig, defaultModelOf, describeArtifactRefusal, describeBackgroundTask, describeHeadlessPolicy, describeIsolation, describeJsonError, diagnoseSchedules, discoverMarkdown, discoverModels, discoverProject, displayCurrency, draftCommandLine, draftWidening, escapeRuleContent, estimateImageTokens, estimateRunTokens, estimateTokens, evaluateSelection, expandCommand, expandImports, explainSetting, extractArchive, findInstructionFiles, findProjectInstructions, findRole, formatBytes, formatSkillIndex, formatUsd, gateForTool, getCapability, getConfigIssues, getConfigOrigins, getImportGate, getTrustGate, hasDedicatedExecContent, hasExecTierContent, hasPromptCaching, hasProviderCredentials, hasReadTierContent, imageFromBase64, imageFromPath, imagePartTokens, importSkills, installPlugin, instructionDirs, instructionNotices, intervalSlots, inventoryProjectExtensions, inventoryTotal, isBlockCode, isCodeModeDeferred, isEmptyRules, isGoalPhase, isNonInteractive, isReadOnlySubCall, isSettingWriteLayer, isValidPluginName, isWithinWindow, isWritableSettingKey, labelSlug, layerRank, listRunningSchedules, listSessionCandidates, listWorkspaceFiles, loadCommandDefinitions, loadCommandFile, loadCommands, loadConfig, loadHookSources, loadKeybindings, loadLexiconDir, loadLexiconFiles, loadPlugins, loadPolicyFiles, loadPolicyRules, loadRoleDefinitions, loadRoleDir, loadedImports, localDateString, managedSwitchNotes, mapClaudeToolName, mapEpochToolName, mapOperationType, matchPreauthorization, matchRuleLists, matchesHook, mentionsPluginRoot, mergeHeadlessPolicy, mergeRoles, mergeSchedulePatch, microsToUsd, modelListCandidates, needsAllowlist, nextFallbackModel, nextRunAt, noConfigOrigins, noManagedPolicy, noPlugins, openArtifact, originOf, packFileName, packPlugin, parseClaudeSettingsHooks, parseClock, parseDate, parseFrontmatter, parseHooksConfig, parseHooksConfigVerbose, parseImportLine, parseModelList, parseRoleDefinition, parseScheduleDraft, parseSkillFrontmatter, parseTrigger, pendingImageTokens, persistParts, persistToolResults, persistedUsage, planPack, previewSkillImport, pricingFor, projectEntryForDisplay, pruneArtifacts, pruneAttachments, pruneRecordings, pruneSchedules, readImageSize, readMarketplaces, readPluginManifest, readPluginRecords, readProviderKeyEnv, readRecording, readSessionSurface, reclaimFtsSpace, redactLine, refreshOpenRouterMetadata, removeMarketplace, removeRecordings, removeRoleFile, removeSessionArtifacts, removeSessionAttachments, renderImportTree, renderProjectContext, renderSdkDeclaration, renderSelfIndex, repairSchedules, resolveArtifactRetention, resolveCodeModeWorker, resolveComplianceDirs, resolveEntrySource, resolveInWorkspace, resolveMarketplaceRef, resolveMentions, resolveMultimodalPolicy, resolvePolicyDirs, resolvePricingAt, resolveProjectRoot, resolveScheduleBackend, resolveSessionReference, resolveSessionVisibility, resolveSettings, resolveSkillDirs, resolveSource, resolveTar, resolveWorkspace, restoreParts, revealScopedProvider, roleScopedProvider, roleSourceLabel, ruleCovers, ruleFromString, ruleToString, runCode, runCommand, sanitizeArgNames, sanitizeCommand, sanitizeFtsQuery, sanitizePath, sanitizeToolOutput, scanInstructions, scanPluginDir, scanSkillDirs, searchMarketplaces, setDisplayCurrency, setImportGate, setPluginEnabled, setTrustGate, settingValueChoices, settingValueKind, settingWriteApply, settingWriteLayers, settingWriteTargets, skillIndexDescription, skillIndexResidency, skillIndexStats, sniffMediaType, splitFrontmatter, staticToolProvider, stripArtifactData, substitutePluginRoot, suggestRuleFromApproval, systemOpenArgv, systemPromptSegments, toPosix, toolDefinitionTokens, toolMatches, toolTableTokens, totalTokens, traceSession, triggerPeriodMs, unescapeRuleContent, uninstallPlugin, unknownRoleSkills, unknownRoleTools, unloadedInstructionFiles, updateMarketplace, updatePlugin, usdToMicros, validateSchedule, validateTrigger, validateWindow, withGoalCompression, withGoalPrompt, workspaceDisplayPath, writeSettingValue };

package/dist/index.js

@@ -2,7 +2,7 @@ import { existsSync, statSync, readdirSync, readFileSync, mkdirSync, writeFileSy
 import { homedir, platform, tmpdir, hostname } from 'os';
 import { join, dirname, resolve, relative, isAbsolute, sep, extname, basename } from 'path';
 import { execFile, execSync, execFileSync, spawn } from 'child_process';
-import { createLogger, dbPath, resolveHomeDir, DEFAULT_MAX_TURNS, PROJECT_DIR_NAME, t, suggestKey, misspelledKeyIssues, openDatabase, migrate, releaseDatabase, parseLenient, issueDetails, splitWords, unknownKeyIssues, checkpointsDir, pluginsDir, projectHooksPath, projectClaudeSettingsPath, projectClaudeLocalSettingsPath, projectSettingsPath, projectLocalSettingsPath, projectPoliciesDir, trustedImportsPath, budgetStatePath, artifactsDir, UNLIMITED_TURNS, turnLimitOf, configPath, managedSettingsPath, getSecretValues, listStoredSecretNames, maskApiKey, setSectionField, isInWorkspace, workspacesPath, samePath, lastSessionsPath, automationLogsDir, projectComplianceDir, projectSkillsDir, attachmentsDir, trustPath, projectCommandsDir, detectBackend, EXEC_PATH_AS_NODE_ENV, isolate, createStreamDecoder, parseShellCommand, writeArtifact, envPath, checkDangerousCommand, checkObfuscation, countCodePoints, keepHeadAndTail, normalizeForMatch, isReadOnlyCommand, CODE_EXEC_ROOTS, headCodePoints, tailCodePoints } from '@epoch-agent/infra';
+import { createLogger, dbPath, resolveHomeDir, DEFAULT_MAX_TURNS, PROJECT_DIR_NAME, guardSpawn, t, suggestKey, misspelledKeyIssues, openDatabase, migrate, releaseDatabase, parseLenient, issueDetails, splitWords, unknownKeyIssues, checkpointsDir, pluginsDir, projectHooksPath, projectClaudeSettingsPath, projectClaudeLocalSettingsPath, projectSettingsPath, projectLocalSettingsPath, projectPoliciesDir, trustedImportsPath, budgetStatePath, artifactsDir, UNLIMITED_TURNS, turnLimitOf, configPath, managedSettingsPath, getSecretValues, listStoredSecretNames, maskApiKey, setSectionField, countCodePoints, headCodePoints, isInWorkspace, workspacesPath, samePath, lastSessionsPath, automationLogsDir, projectComplianceDir, projectSkillsDir, attachmentsDir, trustPath, projectCommandsDir, detectBackend, EXEC_PATH_AS_NODE_ENV, isolate, createStreamDecoder, parseShellCommand, writeArtifact, envPath, checkDangerousCommand, checkObfuscation, keepHeadAndTail, normalizeForMatch, isReadOnlyCommand, CODE_EXEC_ROOTS, tailCodePoints } from '@epoch-agent/infra';
 export { IS_WINDOWS, WINDOWS_HIDE_FLAGS, buildBwrapArgs, buildProfile, checkDangerousCommand, checkObfuscation, createLogger, detectBackend, getDefaultShell, getPythonCommand, isInWorkspace, isReadOnlyCommand, isolate, maskApiKey, probeBubblewrap, probeSeatbelt, complianceDir as resolveComplianceDir, policiesDir as resolvePoliciesDir, setLogLevel } from '@epoch-agent/infra';
 import { PROVIDER_TYPES, OPERATION_TYPES as OPERATION_TYPES$1, COMPLIANCE_CATEGORIES, COMPLIANCE_ACTIONS, SEARCH_PROVIDER_TYPES, CURRENCIES, LANGS, PERMISSION_LEVELS, SHELL_KINDS, ToolExposure, MAX_OPTIONS, MIN_OPTIONS, MAX_HEADER_CHARS, MAX_QUESTIONS, SCHEDULE_INTERVAL_MINUTES, isPermissionLevel, SCHEDULE_DRAFT_TOOL, isValidAgentRoleName, DEFAULT_AGENT_ROLE, isValidCommandName, RESERVED_COMMAND_NAMES, parseModelRef, isWirePluginArchiveName, systemNote, formatMoney, totalUsageTokens, NOOP_TELEMETRY, METRIC, contentToText, GEN_AI, isPromptOversize, promptTokens, apiKeyEnvVar, PROVIDER_INFOS, isProviderType, API_KEY_ENV_VARS, KEY_ACTIONS, tableOf, perAction, isKeyAction, parseSequence, RESERVED_CHORDS, chordId, sequenceId, ACTION_CONTEXTS, SEQUENCE_CONTEXTS, assertNeverPart, MAX_ATTACH_FILES, MAX_ATTACH_TOTAL_BYTES, MAX_SESSION_REFS, utf8ByteLength, truncateToBudget, attachSessionSurface, isContextNearlyFull, isOperationType, normalizeApproval, imagePartOmittedSummary, MAX_ATTACH_BYTES, SIMULTANEOUS_CONTEXTS, SESSION_REFERENCE_ERROR_CODES, filePartSummary, sessionPartSummary } from '@epoch-agent/protocol';
 export { API_KEY_ENV_VARS, COMPLIANCE_ACTIONS, COMPLIANCE_CATEGORIES, MAX_ATTACH_BYTES, MAX_ATTACH_FILES, MAX_ATTACH_TOTAL_BYTES, MAX_SESSION_ATTACH_BYTES, MAX_SESSION_REFS, OPERATION_TYPES, PERMISSION_LEVELS, PLAN_OUTCOMES, PROVIDER_INFOS, PROVIDER_TYPES, ToolExposure, apiKeyEnvVar, extractAllMentions, extractMentions, extractSessionMentions, getProviderInfo, isOperationType, isPermissionLevel, isPlanOutcome, isProviderType, normalizeApproval } from '@epoch-agent/protocol';
@@ -476,10 +476,18 @@ var runCommand2;
 var init_backend = __esm({
   "src/schedule/os/backend.ts"() {
     runCommand2 = (file, args) => new Promise((resolve16) => {
-      execFile(file, [...args], { encoding: "buffer", windowsHide: true }, (err, stdout, stderr) => {
-        const code = err && typeof err.code === "number" ? err.code ?? 1 : err ? 1 : 0;
-        resolve16({ code, stdout: decodeOutput(stdout), stderr: decodeOutput(stderr) });
-      });
+      guardSpawn(
+        () => execFile(
+          file,
+          [...args],
+          { encoding: "buffer", windowsHide: true },
+          (err, stdout, stderr) => {
+            const code = err && typeof err.code === "number" ? err.code ?? 1 : err ? 1 : 0;
+            resolve16({ code, stdout: decodeOutput(stdout), stderr: decodeOutput(stderr) });
+          }
+        ),
+        (err) => resolve16({ code: 1, stdout: "", stderr: `${file}: ${err.message}` })
+      );
     });
   }
 });
@@ -2430,8 +2438,9 @@ var SCHEDULE_ISSUE_CODES = [
 ];
 var SCHEDULE_DEFAULTS = {
   maxTurns: DEFAULT_MAX_TURNS,
-  timeoutMs: 15 * 60 * 1e3
+  timeoutMs: 60 * 60 * 1e3
 };
+var SCHEDULE_FORM_BUDGET_USD = 200;
 var SCHEDULE_DEFAULT_ALLOWLIST = {
   allowTools: [],
   allowOperations: ["file_read"],
@@ -3039,9 +3048,7 @@ function validateSchedule(input) {
 }
 function bypassIssues(input) {
   const issues = [];
-  if (!input.workDir.trim()) {
-    issues.push({ code: "bypass-needs-workdir" });
-  } else if (isTooBroad(input.workDir, input.homeDir)) {
+  if (input.workDir.trim() && isTooBroad(input.workDir, input.homeDir)) {
     issues.push({ code: "bypass-workdir-too-broad", detail: input.workDir });
   }
   const missingRuler = !(input.maxBudgetUsd > 0) || !(input.timeoutMs > 0);
@@ -6363,30 +6370,41 @@ function runCommand(file, args, opts = {}) {
   const spawnFile = viaCmd ? process.env["ComSpec"] ?? "cmd.exe" : file;
   const spawnArgs = viaCmd ? ["/d", "/s", "/c", cmdLine(file, args)] : [...args];
   return new Promise((resolvePromise) => {
-    execFile(
-      spawnFile,
-      spawnArgs,
-      {
-        timeout: opts.timeoutMs ?? COMMAND_TIMEOUT_MS,
-        maxBuffer: MAX_OUTPUT_BYTES,
-        windowsHide: true,
-        windowsVerbatimArguments: viaCmd,
-        ...opts.cwd ? { cwd: opts.cwd } : {}
-      },
-      (err, stdout, stderr) => {
-        const out = String(stdout ?? "");
-        const errOut = String(stderr ?? "");
-        if (!err) {
-          resolvePromise({ ok: true, stdout: out, stderr: errOut });
-          return;
+    guardSpawn(
+      () => execFile(
+        spawnFile,
+        spawnArgs,
+        {
+          timeout: opts.timeoutMs ?? COMMAND_TIMEOUT_MS,
+          maxBuffer: MAX_OUTPUT_BYTES,
+          windowsHide: true,
+          windowsVerbatimArguments: viaCmd,
+          ...opts.cwd ? { cwd: opts.cwd } : {}
+        },
+        (err, stdout, stderr) => {
+          const out = String(stdout ?? "");
+          const errOut = String(stderr ?? "");
+          if (!err) {
+            resolvePromise({ ok: true, stdout: out, stderr: errOut });
+            return;
+          }
+          const detail = describe3(file, err, errOut);
+          resolvePromise({
+            ok: false,
+            detail,
+            stdout: out,
+            stderr: errOut,
+            ...err.code === "ENOENT" ? { notFound: true } : {}
+          });
         }
-        const detail = describe3(file, err, errOut);
+      ),
+      (err) => {
         resolvePromise({
           ok: false,
-          detail,
-          stdout: out,
-          stderr: errOut,
-          ...err.code === "ENOENT" ? { notFound: true } : {}
+          detail: describe3(file, err, ""),
+          stdout: "",
+          stderr: "",
+          ...err.code === "ENOENT" || err.code === "ENOTDIR" ? { notFound: true } : {}
         });
       }
     );
@@ -11471,6 +11489,9 @@ var AgentLoop = class {
       let blankAfterNudge = false;
       for (let turn = 1; turn <= maxTurns; turn++) {
         if (this.isAborted(input.signal)) {
+          if (turns.length > 0 || lastText) {
+            yield { type: "notice", code: "aborted", text: t("agent_run.aborted") };
+          }
           yield finish("aborted");
           await this.prompt.syncMemory(userText, lastText);
           return;
@@ -11902,6 +11923,12 @@ ${finalText}` };
       });
       yield finish("max-turns");
     } catch (err) {
+      if (this.isAborted(input.signal)) {
+        await this.prompt.syncMemory(userText, lastText);
+        yield { type: "notice", code: "aborted", text: t("agent_run.aborted") };
+        yield finish("aborted");
+        return;
+      }
       const msg = err instanceof Error ? err.message : String(err);
       runSpan.recordError(err);
       await this.prompt.syncMemory(userText, "");
@@ -12148,6 +12175,10 @@ var SessionsSchema = z.object({
   retentionDays: z.int().positive().max(3650).default(90),
   vacuumAfterPrune: z.boolean().default(true)
 });
+var AutomationSchema = z.object({
+  keepRuns: z.int().positive().max(1e4).default(200),
+  maxRecordingMb: z.int().positive().max(1e5).default(64)
+});
 var TelemetrySchema = z.object({
   enabled: z.boolean().optional(),
   target: z.enum(["file", "console", "otlp"]).optional(),
@@ -12186,6 +12217,7 @@ var EpochConfigSchema = z.object({
   memory: MemorySchema.prefault({}),
   artifacts: ArtifactsSchema.prefault({}),
   sessions: SessionsSchema.prefault({}),
+  automation: AutomationSchema.prefault({}),
   budget: BudgetSchema.optional(),
   compliance: ComplianceSchema.optional(),
   headless: HeadlessSchema.optional(),
@@ -14246,6 +14278,8 @@ var SETTING_WRITE_KEYS = [
   "sessions.autoPrune",
   "sessions.retentionDays",
   "sessions.vacuumAfterPrune",
+  "automation.keepRuns",
+  "automation.maxRecordingMb",
   "permission"
 ];
 function isWritableSettingKey(value) {
@@ -14313,6 +14347,8 @@ var VALUE_SCHEMA = {
   "sessions.autoPrune": EpochConfigSchema.shape.sessions.unwrap().shape.autoPrune.unwrap(),
   "sessions.retentionDays": EpochConfigSchema.shape.sessions.unwrap().shape.retentionDays.unwrap(),
   "sessions.vacuumAfterPrune": EpochConfigSchema.shape.sessions.unwrap().shape.vacuumAfterPrune.unwrap(),
+  "automation.keepRuns": EpochConfigSchema.shape.automation.unwrap().shape.keepRuns.unwrap(),
+  "automation.maxRecordingMb": EpochConfigSchema.shape.automation.unwrap().shape.maxRecordingMb.unwrap(),
   permission: EpochConfigSchema.shape.permission.unwrap()
 };
 function settingValueKind(key) {
@@ -15245,8 +15281,8 @@ var MemoryManager = class {
         return "";
       }
     }
-    if (content.length > MAX_ENTRY_CHARS) {
-      return content.slice(0, MAX_ENTRY_CHARS) + " \u2026[\u6761\u76EE\u8FC7\u957F\u5DF2\u622A\u65AD]";
+    if (countCodePoints(content) > MAX_ENTRY_CHARS) {
+      return headCodePoints(content, MAX_ENTRY_CHARS) + " \u2026[\u6761\u76EE\u8FC7\u957F\u5DF2\u622A\u65AD]";
     }
     return content;
   }
@@ -15256,7 +15292,7 @@ var MemoryManager = class {
       const id = this.idByContent.get(contentKey(target, content));
       if (!id) continue;
       const firstLine4 = (content.split("\n")[0] ?? "").trim();
-      const summary = firstLine4.length > INDEX_SUMMARY_CHARS ? `${firstLine4.slice(0, INDEX_SUMMARY_CHARS)}\u2026` : firstLine4;
+      const summary = countCodePoints(firstLine4) > INDEX_SUMMARY_CHARS ? `${headCodePoints(firstLine4, INDEX_SUMMARY_CHARS)}\u2026` : firstLine4;
       out.push({ id, target, summary, charLength: content.length });
     }
     return out;
@@ -16204,6 +16240,9 @@ var SessionDB = class {
     if (!row) return null;
     return this.rowToMeta(row);
   }
+  hasSession(id) {
+    return this.db.prepare("SELECT 1 FROM sessions WHERE id = ? LIMIT 1").get(id) !== void 0;
+  }
   listSessions(input) {
     const limit = input.limit ?? 20;
     const key = input.sortKey ?? "startedAt";
@@ -16444,7 +16483,7 @@ var SessionDB = class {
     return { results };
   }
   pruneCandidates(input) {
-    const clauses = ["ended_at IS NOT NULL", "updated_at < @cutoff"];
+    const clauses = ["ended_at IS NOT NULL", "updated_at < @cutoff", "ended_at < @cutoff"];
     const params = { cutoff: input.olderThanMs };
     if (typeof input.archived === "boolean") {
       clauses.push("archived = @archived");
@@ -16454,6 +16493,15 @@ var SessionDB = class {
     const rows = this.db.prepare(`SELECT * FROM sessions WHERE ${clauses.join(" AND ")} ORDER BY updated_at ASC`).all(params);
     return rows.map((r) => this.rowToMeta(r));
   }
+  sweepOrphanedSessions(input) {
+    const info = this.db.prepare(
+      "UPDATE sessions SET ended_at = @now, end_reason = 'orphan_sweep' WHERE ended_at IS NULL AND updated_at < @cutoff"
+    ).run({ now: input.now, cutoff: input.olderThanMs });
+    return info.changes;
+  }
+  reopenSession(id) {
+    this.db.prepare("UPDATE sessions SET ended_at = NULL, end_reason = NULL WHERE id = ?").run(id);
+  }
   openPruneMatches(input) {
     const clauses = ["ended_at IS NULL", "updated_at < @cutoff"];
     if (!input.includePinned) clauses.push("COALESCE(pinned, 0) = 0");
@@ -16872,6 +16920,7 @@ var SessionReferences = class {
 var AUTO_VACUUM_MIN_FREELIST_RATIO = 0.25;
 var SessionManager = class {
   db;
+  touched = /* @__PURE__ */ new Set();
   queries;
   goals;
   references;
@@ -16930,6 +16979,7 @@ var SessionManager = class {
       endReason: void 0
     };
     this.db.insertSession(meta);
+    this.touched.add(id);
     if (input?.systemPrompt) {
       this.appendMessage(id, { role: "system", content: input.systemPrompt });
     }
@@ -16942,6 +16992,9 @@ var SessionManager = class {
     const messages = this.db.getMessages(id);
     return this.buildSession(id, messages);
   }
+  has(id) {
+    return this.db.hasSession(id);
+  }
   getLatest() {
     const result = this.db.listSessions({ limit: 1, sortKey: "updatedAt", direction: "desc" });
     if (result.sessions.length === 0) return void 0;
@@ -16970,11 +17023,17 @@ var SessionManager = class {
   openPruneMatches(input) {
     return this.db.openPruneMatches(input);
   }
+  sweepOrphans(input) {
+    return this.db.sweepOrphanedSessions(input);
+  }
+  reopen(id) {
+    this.db.reopenSession(id);
+  }
   freelistRatio() {
     return this.db.freelistRatio();
   }
   maybeAutoPrune(opts) {
-    const result = { skipped: false, pruned: 0, vacuumed: false };
+    const result = { skipped: false, swept: 0, pruned: 0, vacuumed: false };
     if (!opts.enabled) return { ...result, skipped: true };
     const now = opts.now?.() ?? Date.now();
     const minInterval = opts.minIntervalMs ?? 24 * 60 * 60 * 1e3;
@@ -16984,6 +17043,7 @@ var SessionManager = class {
         return { ...result, skipped: true };
       }
       const cutoff = now - opts.retentionDays * 24 * 60 * 60 * 1e3;
+      const swept = this.db.sweepOrphanedSessions({ olderThanMs: cutoff, now });
       const victims = this.db.pruneCandidates({ olderThanMs: cutoff });
       let pruned = 0;
       for (const s of victims) if (this.db.deleteSession(s.id)) pruned++;
@@ -16997,7 +17057,7 @@ var SessionManager = class {
           if (vacuumed) this.db.setMeta("last_vacuum", String(now));
         }
       }
-      return { skipped: false, pruned, vacuumed };
+      return { skipped: false, swept, pruned, vacuumed };
     } catch (cause) {
       return { ...result, error: cause instanceof Error ? cause.message : String(cause) };
     }
@@ -17008,7 +17068,19 @@ var SessionManager = class {
   endSession(id, reason9 = "user_stop") {
     this.db.updateSessionMeta(id, { endedAt: /* @__PURE__ */ new Date(), endReason: reason9 });
   }
+  endTouchedSessions(reason9 = "process_exit") {
+    let ended = 0;
+    for (const id of this.touched) {
+      try {
+        this.endSession(id, reason9);
+        ended++;
+      } catch {
+      }
+    }
+    return ended;
+  }
   appendMessage(sessionId, msg) {
+    this.touched.add(sessionId);
     const id = this.db.nextMessageId();
     this.db.insertMessage({ ...msg, sessionId, id, timestamp: Date.now() });
     const meta = this.db.getSessionMeta(sessionId);
@@ -17026,6 +17098,7 @@ var SessionManager = class {
     this.db.setOpenTurn(sessionId, from);
   }
   recordUsage(sessionId, usage) {
+    this.touched.add(sessionId);
     this.db.recordUsage(sessionId, usage);
   }
   markObserved(sessionId, messageId) {
@@ -18456,6 +18529,14 @@ var MIGRATIONS3 = [
         );
       `);
     }
+  },
+  {
+    id: "schedule-show-in-session-list",
+    version: 2,
+    description: "\u4EFB\u52A1\u591A\u4E00\u683C\uFF1A\u8DD1\u5B8C\u7684\u4F1A\u8BDD\u76F4\u63A5\u8FDB\u4F1A\u8BDD\u5217\u8868\u5417\uFF08\u7F3A\u7701\u4E0D\u8FDB\uFF09",
+    up: (db) => {
+      db.exec(`ALTER TABLE schedules ADD COLUMN show_in_session_list INTEGER NOT NULL DEFAULT 0;`);
+    }
   }
 ];
 var ScheduleStore = class {
@@ -18480,6 +18561,7 @@ var ScheduleStore = class {
       prompt: input.prompt,
       workDir: input.workDir,
       ...input.model !== void 0 ? { model: input.model } : {},
+      ...input.role !== void 0 ? { role: input.role } : {},
       permission: input.permission,
       allowTools: input.allowTools ?? [],
       allowOperations: input.allowOperations ?? [],
@@ -18487,6 +18569,7 @@ var ScheduleStore = class {
       maxTurns: input.maxTurns ?? SCHEDULE_DEFAULTS.maxTurns,
       maxBudgetUsd: input.maxBudgetUsd,
       timeoutMs: input.timeoutMs ?? SCHEDULE_DEFAULTS.timeoutMs,
+      ...input.showInSessionList === true ? { showInSessionList: true } : {},
       trigger: input.trigger,
       ...input.startDate !== void 0 ? { startDate: input.startDate } : {},
       ...input.endDate !== void 0 ? { endDate: input.endDate } : {},
@@ -18498,13 +18581,15 @@ var ScheduleStore = class {
       `INSERT INTO schedules (
            id, name, enabled, created_at, updated_at, prompt, work_dir, model, role,
            skills, mcp_servers, permission, allow_tools, allow_operations, allow_rules,
-           max_turns, max_budget_usd, timeout_ms, trigger_kind, trigger_spec,
+           max_turns, max_budget_usd, timeout_ms, show_in_session_list,
+           trigger_kind, trigger_spec,
            start_date, end_date, os_backend, os_task_id, os_registered_at, os_command,
            last_run_at, last_status
          ) VALUES (
            @id, @name, @enabled, @created_at, @updated_at, @prompt, @work_dir, @model, @role,
            @skills, @mcp_servers, @permission, @allow_tools, @allow_operations, @allow_rules,
-           @max_turns, @max_budget_usd, @timeout_ms, @trigger_kind, @trigger_spec,
+           @max_turns, @max_budget_usd, @timeout_ms, @show_in_session_list,
+           @trigger_kind, @trigger_spec,
            @start_date, @end_date, @os_backend, @os_task_id, @os_registered_at, @os_command,
            @last_run_at, @last_status
          )`
@@ -18590,6 +18675,16 @@ var ScheduleStore = class {
     const rows = this.db.prepare("SELECT * FROM schedule_runs WHERE schedule_id = ? ORDER BY started_at DESC LIMIT ?").all(scheduleId, limit);
     return rows.map(runFromRow);
   }
+  recordedSessions(scheduleId, limit = 2) {
+    if (limit <= 0) return [];
+    const rows = this.db.prepare(
+      `SELECT session_id FROM schedule_runs
+           WHERE schedule_id = ? AND session_id IS NOT NULL
+           ORDER BY started_at DESC
+           LIMIT ?`
+    ).all(scheduleId, limit);
+    return rows.map((r) => r.session_id);
+  }
   listRecentRuns(limit = 50) {
     const rows = this.db.prepare("SELECT * FROM schedule_runs ORDER BY started_at DESC LIMIT ?").all(limit);
     return rows.map(runFromRow);
@@ -18611,6 +18706,7 @@ var ScheduleStore = class {
            mcp_servers = @mcp_servers, permission = @permission, allow_tools = @allow_tools,
            allow_operations = @allow_operations, allow_rules = @allow_rules,
            max_turns = @max_turns, max_budget_usd = @max_budget_usd, timeout_ms = @timeout_ms,
+           show_in_session_list = @show_in_session_list,
            trigger_kind = @trigger_kind, trigger_spec = @trigger_spec,
            start_date = @start_date, end_date = @end_date, os_backend = @os_backend,
            os_task_id = @os_task_id, os_registered_at = @os_registered_at,
@@ -18633,6 +18729,7 @@ function mergeSchedulePatch(current, patch) {
       "maxTurns",
       "maxBudgetUsd",
       "timeoutMs",
+      "showInSessionList",
       "trigger",
       "enabled"
     ])
@@ -18643,9 +18740,10 @@ function mergeSchedulePatch(current, patch) {
     if (value === null) delete next[key];
     else next[key] = value;
   }
+  if (next.showInSessionList !== true) delete next.showInSessionList;
   return next;
 }
-var CLEARABLE = ["model", "startDate", "endDate"];
+var CLEARABLE = ["model", "role", "startDate", "endDate"];
 function toRow(def) {
   return {
     id: def.id,
@@ -18666,6 +18764,7 @@ function toRow(def) {
     max_turns: def.maxTurns,
     max_budget_usd: def.maxBudgetUsd,
     timeout_ms: def.timeoutMs,
+    show_in_session_list: def.showInSessionList === true ? 1 : 0,
     trigger_kind: def.trigger.kind,
     trigger_spec: JSON.stringify(def.trigger),
     start_date: def.startDate ?? null,
@@ -18698,6 +18797,7 @@ function fromRow(row) {
     maxTurns: row.max_turns,
     maxBudgetUsd: row.max_budget_usd,
     timeoutMs: row.timeout_ms,
+    ...row.show_in_session_list !== 0 ? { showInSessionList: true } : {},
     trigger: JSON.parse(row.trigger_spec),
     ...row.start_date !== null ? { startDate: row.start_date } : {},
     ...row.end_date !== null ? { endDate: row.end_date } : {},
@@ -20210,15 +20310,30 @@ function runCommandHook(config, event, workDir) {
   const injectedEnv = injectEpochEnv(event, config.pluginRoot);
   const hookEnv = { ...baseEnv, ...injectedEnv, ...config.env };
   return new Promise((resolve16) => {
-    const child = spawn(config.command, {
-      shell: true,
-      cwd: workDir,
-      env: hookEnv,
-      stdio: ["pipe", "pipe", "pipe"]
-    });
     let stdout = "";
     let stderr = "";
     let settled = false;
+    const failToStart = (err) => {
+      if (settled) return;
+      settled = true;
+      resolve16({
+        exitCode: -1,
+        stdout,
+        stderr,
+        blocked: false,
+        rejectReason: t("hook_load.spawn_failed", { message: err.message })
+      });
+    };
+    const child = guardSpawn(
+      () => spawn(config.command, {
+        shell: true,
+        cwd: workDir,
+        env: hookEnv,
+        stdio: ["pipe", "pipe", "pipe"]
+      }),
+      failToStart
+    );
+    if (!child) return;
     const timer = setTimeout(() => {
       if (!settled) {
         settled = true;
@@ -20270,15 +20385,7 @@ function runCommandHook(config, event, workDir) {
     });
     child.on("error", (err) => {
       clearTimeout(timer);
-      if (settled) return;
-      settled = true;
-      resolve16({
-        exitCode: -1,
-        stdout,
-        stderr,
-        blocked: false,
-        rejectReason: t("hook_load.spawn_failed", { message: err.message })
-      });
+      failToStart(err);
     });
     const input = JSON.stringify({
       session_id: event.sessionId,
@@ -23025,31 +23132,15 @@ var CodeSandbox = class {
       stdio: ["ignore", "pipe", "pipe"],
       ...IS_WINDOWS ? { windowsHide: true } : {}
     };
-    const child = spawn(command, args, spawnOpts);
     return new Promise((resolve16) => {
       let stdout = "";
       let stderr = "";
       let killedForOutput = false;
-      let outDecoder = null;
-      let errDecoder = null;
-      child.stdout?.on("data", (c) => {
-        if (killedForOutput) return;
-        outDecoder ??= createStreamDecoder();
-        stdout += outDecoder.write(c);
-        if (stdout.length >= MAX_OUTPUT) {
-          killedForOutput = true;
-          stdout = stdout.slice(0, MAX_OUTPUT);
-          child.kill("SIGKILL");
-        }
-      });
-      child.stderr?.on("data", (c) => {
-        if (stderr.length >= MAX_OUTPUT) return;
-        errDecoder ??= createStreamDecoder();
-        stderr += errDecoder.write(c);
-      });
-      const onAbort = () => child.kill("SIGKILL");
-      opts.signal?.addEventListener("abort", onAbort, { once: true });
-      child.on("error", (err) => {
+      let child = null;
+      const onAbort = () => {
+        child?.kill("SIGKILL");
+      };
+      const failToStart = (err) => {
         opts.signal?.removeEventListener("abort", onAbort);
         if (err.code === "ENOENT") {
           resolve16({
@@ -23064,12 +23155,34 @@ var CodeSandbox = class {
         resolve16({
           success: false,
           output: "",
-          error: `[\u9519\u8BEF] ${err.message}`,
+          error: `[\u9519\u8BEF] ${err.message}\uFF08command=${command}\uFF0Ccwd=${spawnOpts.cwd ?? ""}\uFF09`,
           errorType: "runtime",
           duration: Date.now() - start
         });
+      };
+      child = guardSpawn(() => spawn(command, args, spawnOpts), failToStart);
+      if (!child) return;
+      const proc = child;
+      let outDecoder = null;
+      let errDecoder = null;
+      proc.stdout?.on("data", (c) => {
+        if (killedForOutput) return;
+        outDecoder ??= createStreamDecoder();
+        stdout += outDecoder.write(c);
+        if (stdout.length >= MAX_OUTPUT) {
+          killedForOutput = true;
+          stdout = stdout.slice(0, MAX_OUTPUT);
+          proc.kill("SIGKILL");
+        }
       });
-      child.on("close", (code, sig) => {
+      proc.stderr?.on("data", (c) => {
+        if (stderr.length >= MAX_OUTPUT) return;
+        errDecoder ??= createStreamDecoder();
+        stderr += errDecoder.write(c);
+      });
+      opts.signal?.addEventListener("abort", onAbort, { once: true });
+      proc.on("error", failToStart);
+      proc.on("close", (code, sig) => {
         opts.signal?.removeEventListener("abort", onAbort);
         if (!killedForOutput) stdout += outDecoder?.end() ?? "";
         if (stderr.length < MAX_OUTPUT) stderr += errDecoder?.end() ?? "";
@@ -23166,4 +23279,4 @@ function trunc(stdout, stderr) {
  *    `--tree` 的命令帮助里，让用户自己知道 `--tree` 意味着什么。
  */
 
-export { AGENT_ROLE_DIAG_MODULE, ARTIFACT_MAX_TOTAL_BYTES, ARTIFACT_RETENTION_DEFAULTS, ATTACHMENT_MAX_TOTAL_BYTES, ATTACHMENT_RETENTION_DEFAULTS, AgentLoop, ApprovalCache, BLOCKED_TOOLS, BudgetGuard, BudgetStore, CHECKPOINT_MAX_TOTAL_BYTES, CLAUDE_EVENT_NAMES, CLAUDE_TOOL_NAMES, CODE_MODE_LIMITS, CODE_MODE_SDK_TAG, CONFIG_KEYS, CURRENT_CONFIG_VERSION, CheckpointManager, CheckpointStore, CodeSandbox, ComplianceEngine, ContextCompressor, DEFAULT_COMPLIANCE_ACTIONS, DEFAULT_COMPLIANCE_SETTINGS, DEFAULT_COMPRESSION_THRESHOLD, DEFAULT_GOAL_MAX_ROUNDS, DEFAULT_MAX_HOLD_CHARS, DelegateManager, EMPTY_RULES, EPOCH_DISK_LEDGER, EpochConfigSchema, FTS_TABLES, FTS_TRIGGERS, GOAL_BLOCK_CODES, GoalService, GoalStore, HEADLESS_AUDIT_CODES, HookManager, INSTRUCTION_BUDGET_CHARS, INSTRUCTION_FILES, ImageLoadError, ImportTrustStore, LAUNCHD_LABEL_PREFIX, LOCK_HEARTBEAT_MS, LOCK_STALE_MS, LastOpenSessions, MARKETPLACE_DISPLAY_FIELDS, MARKETPLACE_FILE, MAX_AUDIT_ENTRIES, MAX_COMMAND_DEPTH, MAX_GOAL_MAX_ROUNDS, MAX_IMPORT_DEPTH, MAX_LAST_OPEN_SESSIONS, MAX_OBJECTIVE_CHARS, MAX_REASON_CHARS, MAX_RECENT_WORKSPACES, MODEL_GIVE_UP_THRESHOLD, MULTIMODAL_DEFAULTS, ManagedPolicyError, ManagedSettingsSchema, MemoryManager, MemoryReviewer, ModelFailureTracker, NOMINAL_TOTAL_BYTES, NO_REVEALED_TOOLS, PACK_EXCLUDES, PACK_MAX_BYTES, PACK_MAX_FILES, PERMISSION_AUDIT_CODES, PLUGIN_LAYOUT, PLUGIN_MANIFEST_FILE, PLUGIN_MANIFEST_KEYS, PLUGIN_NAME_PATTERN, PLUGIN_ROOT_ENV, PLUGIN_ROOT_TOKEN, PLUGIN_VISIBILITY, POLICY_DECISIONS, PROBE_VERSION, PROJECT_AGENTS_SUBDIR, PROVIDER_NO_CREDENTIAL, PermissionManager, PlanModeState, PluginAuthorSchema, PluginStore, PolicyRuleSchema, ProviderError, ProviderRouter, RECORDING_KEEP_RUNS, RECORDING_MAX_BYTES, ROLE_FRONTMATTER_SCHEMA, RUN_CODE_TOOL, RecentWorkspaces, SANDBOX_COVERS, SANDBOX_EXCLUDES, SCALAR_KEYS, SCHEDULE_DEFAULTS, SCHEDULE_DEFAULT_ALLOWLIST, SCHEDULE_ISSUE_CODES, SCHTASKS_FOLDER, SESSION_MESSAGES_READ_TOOL, SESSION_MESSAGES_SEARCH_TOOL, SESSION_QUERY_TOOLS, SESSION_SEARCH_TOOL, SESSION_TRACE_TOOL, SETTINGS_LAYER_ORDER, SETTING_WRITE_KEYS, SETTING_WRITE_LAYERS, SKILL_CREATE_TOOL, SKILL_EDIT_TOOL, SKILL_PATCH_TOOL, SKILL_VIEW_TOOL, SKILL_WRITE_FILE_TOOL, SLASH_COMMANDS_DIAG_MODULE, ScheduleRecorder, ScheduleRegistrar, ScheduleStore, SessionManager, SessionQueries, SessionReferences, SettingsFileError, SettingsFileSchema, SkillLearner, SkillSystem, TOOL_SEARCH_TOOL, TaskNoticeTracker, ToolRegistry, TrackerDB, TrustManager, Workspace, acquireScheduleLock, addMarketplace, addUsage, admitArtifact, admitArtifacts, affectedPaths, artifactLaunchArgv, artifactOpenRefusal, assertLevelAllowed, blockedRoleTools, buildContextBreakdown, buildFireArgv, buildFtsMatchQuery, buildSchemaExports, buildSystemPrompt, buildTrigramMatchQuery, builtinRoles, checkEpochVersion, checkFtsHealth, checkShadowing, classifyProviderError, clearModelCache, coalesceRecording, codeModeWorkerPath, commandNameFromRelPath, compileRuleLists, compressionOptions, computeCost, computeCostMicros, computeExecHash, countRules, createAllowAllGate, createAllowAllImportGate, createAskQuestionTool, createCodeExecTool, createDelegateTool, createDenyAllGate, createDenyAllImportGate, createGoalTool, createImportGate, createMemoryTool, createPlanModeTools, createRoleFile, createRoleScope, createRunCodeTool, createScheduleDraftTool, createSessionMessagesReadTool, createSessionMessagesSearchTool, createSessionSearchTool, createSessionSearchTools, createSessionTraceTool, createSkillViewTool, createSkillWriteTools, createTodoTool, createToolRevealState, createToolScope, createToolSearchTool, createTrustGate, currentEpochVersion, decideImport, decideTrust, defaultConfig, defaultModelOf, describeArtifactRefusal, describeBackgroundTask, describeHeadlessPolicy, describeIsolation, describeJsonError, diagnoseSchedules, discoverMarkdown, discoverModels, discoverProject, displayCurrency, draftCommandLine, draftWidening, escapeRuleContent, estimateImageTokens, estimateRunTokens, estimateTokens, evaluateSelection, expandCommand, expandImports, explainSetting, extractArchive, findInstructionFiles, findProjectInstructions, findRole, formatBytes, formatSkillIndex, formatUsd, gateForTool, getCapability, getConfigIssues, getConfigOrigins, getImportGate, getTrustGate, hasDedicatedExecContent, hasExecTierContent, hasPromptCaching, hasProviderCredentials, hasReadTierContent, imageFromBase64, imageFromPath, imagePartTokens, importSkills, installPlugin, instructionDirs, instructionNotices, intervalSlots, inventoryProjectExtensions, inventoryTotal, isBlockCode, isCodeModeDeferred, isEmptyRules, isGoalPhase, isNonInteractive, isReadOnlySubCall, isSettingWriteLayer, isValidPluginName, isWithinWindow, isWritableSettingKey, labelSlug, layerRank, listRunningSchedules, listSessionCandidates, listWorkspaceFiles, loadCommandDefinitions, loadCommandFile, loadCommands, loadConfig, loadHookSources, loadKeybindings, loadLexiconDir, loadLexiconFiles, loadPlugins, loadPolicyFiles, loadPolicyRules, loadRoleDefinitions, loadRoleDir, loadedImports, localDateString, managedSwitchNotes, mapClaudeToolName, mapEpochToolName, mapOperationType, matchPreauthorization, matchRuleLists, matchesHook, mentionsPluginRoot, mergeHeadlessPolicy, mergeRoles, mergeSchedulePatch, microsToUsd, modelListCandidates, needsAllowlist, nextFallbackModel, nextRunAt, noConfigOrigins, noManagedPolicy, noPlugins, openArtifact, originOf, packFileName, packPlugin, parseClaudeSettingsHooks, parseClock, parseDate, parseFrontmatter, parseHooksConfig, parseHooksConfigVerbose, parseImportLine, parseModelList, parseRoleDefinition, parseScheduleDraft, parseSkillFrontmatter, parseTrigger, pendingImageTokens, persistParts, persistToolResults, persistedUsage, planPack, previewSkillImport, pricingFor, projectEntryForDisplay, pruneArtifacts, pruneAttachments, pruneRecordings, pruneSchedules, readImageSize, readMarketplaces, readPluginManifest, readPluginRecords, readProviderKeyEnv, readRecording, readSessionSurface, reclaimFtsSpace, redactLine, refreshOpenRouterMetadata, removeMarketplace, removeRecordings, removeRoleFile, removeSessionArtifacts, removeSessionAttachments, renderImportTree, renderProjectContext, renderSdkDeclaration, renderSelfIndex, repairSchedules, resolveArtifactRetention, resolveCodeModeWorker, resolveComplianceDirs, resolveEntrySource, resolveInWorkspace, resolveMarketplaceRef, resolveMentions, resolveMultimodalPolicy, resolvePolicyDirs, resolvePricingAt, resolveProjectRoot, resolveScheduleBackend, resolveSessionReference, resolveSessionVisibility, resolveSettings, resolveSkillDirs, resolveSource, resolveTar, resolveWorkspace, restoreParts, revealScopedProvider, roleScopedProvider, roleSourceLabel, ruleCovers, ruleFromString, ruleToString, runCode, runCommand2 as runCommand, sanitizeArgNames, sanitizeCommand, sanitizeFtsQuery, sanitizePath, sanitizeToolOutput, scanInstructions, scanPluginDir, scanSkillDirs, searchMarketplaces, setDisplayCurrency, setImportGate, setPluginEnabled, setTrustGate, settingValueChoices, settingValueKind, settingWriteApply, settingWriteLayers, settingWriteTargets, skillIndexDescription, skillIndexResidency, skillIndexStats, sniffMediaType, splitFrontmatter, staticToolProvider, stripArtifactData, substitutePluginRoot, suggestRuleFromApproval, systemOpenArgv, systemPromptSegments, toPosix, toolDefinitionTokens, toolMatches, toolTableTokens, totalTokens, traceSession, triggerPeriodMs, unescapeRuleContent, uninstallPlugin, unknownRoleSkills, unknownRoleTools, unloadedInstructionFiles, updateMarketplace, updatePlugin, usdToMicros, validateSchedule, validateTrigger, validateWindow, withGoalCompression, withGoalPrompt, workspaceDisplayPath, writeSettingValue };
+export { AGENT_ROLE_DIAG_MODULE, ARTIFACT_MAX_TOTAL_BYTES, ARTIFACT_RETENTION_DEFAULTS, ATTACHMENT_MAX_TOTAL_BYTES, ATTACHMENT_RETENTION_DEFAULTS, AgentLoop, ApprovalCache, BLOCKED_TOOLS, BudgetGuard, BudgetStore, CHECKPOINT_MAX_TOTAL_BYTES, CLAUDE_EVENT_NAMES, CLAUDE_TOOL_NAMES, CODE_MODE_LIMITS, CODE_MODE_SDK_TAG, CONFIG_KEYS, CURRENT_CONFIG_VERSION, CheckpointManager, CheckpointStore, CodeSandbox, ComplianceEngine, ContextCompressor, DEFAULT_COMPLIANCE_ACTIONS, DEFAULT_COMPLIANCE_SETTINGS, DEFAULT_COMPRESSION_THRESHOLD, DEFAULT_GOAL_MAX_ROUNDS, DEFAULT_MAX_HOLD_CHARS, DelegateManager, EMPTY_RULES, EPOCH_DISK_LEDGER, EpochConfigSchema, FTS_TABLES, FTS_TRIGGERS, GOAL_BLOCK_CODES, GoalService, GoalStore, HEADLESS_AUDIT_CODES, HookManager, INSTRUCTION_BUDGET_CHARS, INSTRUCTION_FILES, ImageLoadError, ImportTrustStore, LAUNCHD_LABEL_PREFIX, LOCK_HEARTBEAT_MS, LOCK_STALE_MS, LastOpenSessions, MARKETPLACE_DISPLAY_FIELDS, MARKETPLACE_FILE, MAX_AUDIT_ENTRIES, MAX_COMMAND_DEPTH, MAX_GOAL_MAX_ROUNDS, MAX_IMPORT_DEPTH, MAX_LAST_OPEN_SESSIONS, MAX_OBJECTIVE_CHARS, MAX_REASON_CHARS, MAX_RECENT_WORKSPACES, MODEL_GIVE_UP_THRESHOLD, MULTIMODAL_DEFAULTS, ManagedPolicyError, ManagedSettingsSchema, MemoryManager, MemoryReviewer, ModelFailureTracker, NOMINAL_TOTAL_BYTES, NO_REVEALED_TOOLS, PACK_EXCLUDES, PACK_MAX_BYTES, PACK_MAX_FILES, PERMISSION_AUDIT_CODES, PLUGIN_LAYOUT, PLUGIN_MANIFEST_FILE, PLUGIN_MANIFEST_KEYS, PLUGIN_NAME_PATTERN, PLUGIN_ROOT_ENV, PLUGIN_ROOT_TOKEN, PLUGIN_VISIBILITY, POLICY_DECISIONS, PROBE_VERSION, PROJECT_AGENTS_SUBDIR, PROVIDER_NO_CREDENTIAL, PermissionManager, PlanModeState, PluginAuthorSchema, PluginStore, PolicyRuleSchema, ProviderError, ProviderRouter, RECORDING_KEEP_RUNS, RECORDING_MAX_BYTES, ROLE_FRONTMATTER_SCHEMA, RUN_CODE_TOOL, RecentWorkspaces, SANDBOX_COVERS, SANDBOX_EXCLUDES, SCALAR_KEYS, SCHEDULE_DEFAULTS, SCHEDULE_DEFAULT_ALLOWLIST, SCHEDULE_FORM_BUDGET_USD, SCHEDULE_ISSUE_CODES, SCHTASKS_FOLDER, SESSION_MESSAGES_READ_TOOL, SESSION_MESSAGES_SEARCH_TOOL, SESSION_QUERY_TOOLS, SESSION_SEARCH_TOOL, SESSION_TRACE_TOOL, SETTINGS_LAYER_ORDER, SETTING_WRITE_KEYS, SETTING_WRITE_LAYERS, SKILL_CREATE_TOOL, SKILL_EDIT_TOOL, SKILL_PATCH_TOOL, SKILL_VIEW_TOOL, SKILL_WRITE_FILE_TOOL, SLASH_COMMANDS_DIAG_MODULE, ScheduleRecorder, ScheduleRegistrar, ScheduleStore, SessionManager, SessionQueries, SessionReferences, SettingsFileError, SettingsFileSchema, SkillLearner, SkillSystem, TOOL_SEARCH_TOOL, TaskNoticeTracker, ToolRegistry, TrackerDB, TrustManager, Workspace, acquireScheduleLock, addMarketplace, addUsage, admitArtifact, admitArtifacts, affectedPaths, artifactLaunchArgv, artifactOpenRefusal, assertLevelAllowed, blockedRoleTools, buildContextBreakdown, buildFireArgv, buildFtsMatchQuery, buildSchemaExports, buildSystemPrompt, buildTrigramMatchQuery, builtinRoles, checkEpochVersion, checkFtsHealth, checkShadowing, classifyProviderError, clearModelCache, coalesceRecording, codeModeWorkerPath, commandNameFromRelPath, compileRuleLists, compressionOptions, computeCost, computeCostMicros, computeExecHash, countRules, createAllowAllGate, createAllowAllImportGate, createAskQuestionTool, createCodeExecTool, createDelegateTool, createDenyAllGate, createDenyAllImportGate, createGoalTool, createImportGate, createMemoryTool, createPlanModeTools, createRoleFile, createRoleScope, createRunCodeTool, createScheduleDraftTool, createSessionMessagesReadTool, createSessionMessagesSearchTool, createSessionSearchTool, createSessionSearchTools, createSessionTraceTool, createSkillViewTool, createSkillWriteTools, createTodoTool, createToolRevealState, createToolScope, createToolSearchTool, createTrustGate, currentEpochVersion, decideImport, decideTrust, defaultConfig, defaultModelOf, describeArtifactRefusal, describeBackgroundTask, describeHeadlessPolicy, describeIsolation, describeJsonError, diagnoseSchedules, discoverMarkdown, discoverModels, discoverProject, displayCurrency, draftCommandLine, draftWidening, escapeRuleContent, estimateImageTokens, estimateRunTokens, estimateTokens, evaluateSelection, expandCommand, expandImports, explainSetting, extractArchive, findInstructionFiles, findProjectInstructions, findRole, formatBytes, formatSkillIndex, formatUsd, gateForTool, getCapability, getConfigIssues, getConfigOrigins, getImportGate, getTrustGate, hasDedicatedExecContent, hasExecTierContent, hasPromptCaching, hasProviderCredentials, hasReadTierContent, imageFromBase64, imageFromPath, imagePartTokens, importSkills, installPlugin, instructionDirs, instructionNotices, intervalSlots, inventoryProjectExtensions, inventoryTotal, isBlockCode, isCodeModeDeferred, isEmptyRules, isGoalPhase, isNonInteractive, isReadOnlySubCall, isSettingWriteLayer, isValidPluginName, isWithinWindow, isWritableSettingKey, labelSlug, layerRank, listRunningSchedules, listSessionCandidates, listWorkspaceFiles, loadCommandDefinitions, loadCommandFile, loadCommands, loadConfig, loadHookSources, loadKeybindings, loadLexiconDir, loadLexiconFiles, loadPlugins, loadPolicyFiles, loadPolicyRules, loadRoleDefinitions, loadRoleDir, loadedImports, localDateString, managedSwitchNotes, mapClaudeToolName, mapEpochToolName, mapOperationType, matchPreauthorization, matchRuleLists, matchesHook, mentionsPluginRoot, mergeHeadlessPolicy, mergeRoles, mergeSchedulePatch, microsToUsd, modelListCandidates, needsAllowlist, nextFallbackModel, nextRunAt, noConfigOrigins, noManagedPolicy, noPlugins, openArtifact, originOf, packFileName, packPlugin, parseClaudeSettingsHooks, parseClock, parseDate, parseFrontmatter, parseHooksConfig, parseHooksConfigVerbose, parseImportLine, parseModelList, parseRoleDefinition, parseScheduleDraft, parseSkillFrontmatter, parseTrigger, pendingImageTokens, persistParts, persistToolResults, persistedUsage, planPack, previewSkillImport, pricingFor, projectEntryForDisplay, pruneArtifacts, pruneAttachments, pruneRecordings, pruneSchedules, readImageSize, readMarketplaces, readPluginManifest, readPluginRecords, readProviderKeyEnv, readRecording, readSessionSurface, reclaimFtsSpace, redactLine, refreshOpenRouterMetadata, removeMarketplace, removeRecordings, removeRoleFile, removeSessionArtifacts, removeSessionAttachments, renderImportTree, renderProjectContext, renderSdkDeclaration, renderSelfIndex, repairSchedules, resolveArtifactRetention, resolveCodeModeWorker, resolveComplianceDirs, resolveEntrySource, resolveInWorkspace, resolveMarketplaceRef, resolveMentions, resolveMultimodalPolicy, resolvePolicyDirs, resolvePricingAt, resolveProjectRoot, resolveScheduleBackend, resolveSessionReference, resolveSessionVisibility, resolveSettings, resolveSkillDirs, resolveSource, resolveTar, resolveWorkspace, restoreParts, revealScopedProvider, roleScopedProvider, roleSourceLabel, ruleCovers, ruleFromString, ruleToString, runCode, runCommand2 as runCommand, sanitizeArgNames, sanitizeCommand, sanitizeFtsQuery, sanitizePath, sanitizeToolOutput, scanInstructions, scanPluginDir, scanSkillDirs, searchMarketplaces, setDisplayCurrency, setImportGate, setPluginEnabled, setTrustGate, settingValueChoices, settingValueKind, settingWriteApply, settingWriteLayers, settingWriteTargets, skillIndexDescription, skillIndexResidency, skillIndexStats, sniffMediaType, splitFrontmatter, staticToolProvider, stripArtifactData, substitutePluginRoot, suggestRuleFromApproval, systemOpenArgv, systemPromptSegments, toPosix, toolDefinitionTokens, toolMatches, toolTableTokens, totalTokens, traceSession, triggerPeriodMs, unescapeRuleContent, uninstallPlugin, unknownRoleSkills, unknownRoleTools, unloadedInstructionFiles, updateMarketplace, updatePlugin, usdToMicros, validateSchedule, validateTrigger, validateWindow, withGoalCompression, withGoalPrompt, workspaceDisplayPath, writeSettingValue };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@epoch-agent/core",
-  "version": "0.12.0",
+  "version": "0.14.0",
   "private": false,
   "description": "epoch-agent 核心引擎：ReAct 循环、Provider 路由、工具调度、记忆管理",
   "repository": {
@@ -27,8 +27,8 @@
     "gpt-tokenizer": "^3.4.0",
     "js-yaml": "^5.2.3",
     "zod": "^4.4.3",
-    "@epoch-agent/infra": "0.12.0",
-    "@epoch-agent/protocol": "0.12.0"
+    "@epoch-agent/infra": "0.14.0",
+    "@epoch-agent/protocol": "0.14.0"
   },
   "devDependencies": {
     "@ai-sdk/amazon-bedrock": "^5.0.40",