@epoch-agent/core 0.13.0 → 0.15.0

package/dist/index.js

@@ -2,7 +2,7 @@ import { existsSync, statSync, readdirSync, readFileSync, mkdirSync, writeFileSy
 import { homedir, platform, tmpdir, hostname } from 'os';
 import { join, dirname, resolve, relative, isAbsolute, sep, extname, basename } from 'path';
 import { execFile, execSync, execFileSync, spawn } from 'child_process';
-import { createLogger, dbPath, resolveHomeDir, DEFAULT_MAX_TURNS, PROJECT_DIR_NAME, t, suggestKey, misspelledKeyIssues, openDatabase, migrate, releaseDatabase, parseLenient, issueDetails, splitWords, unknownKeyIssues, checkpointsDir, pluginsDir, projectHooksPath, projectClaudeSettingsPath, projectClaudeLocalSettingsPath, projectSettingsPath, projectLocalSettingsPath, projectPoliciesDir, trustedImportsPath, budgetStatePath, artifactsDir, UNLIMITED_TURNS, turnLimitOf, configPath, managedSettingsPath, getSecretValues, listStoredSecretNames, maskApiKey, setSectionField, isInWorkspace, workspacesPath, samePath, lastSessionsPath, automationLogsDir, projectComplianceDir, projectSkillsDir, attachmentsDir, trustPath, projectCommandsDir, detectBackend, EXEC_PATH_AS_NODE_ENV, isolate, createStreamDecoder, parseShellCommand, writeArtifact, envPath, checkDangerousCommand, checkObfuscation, countCodePoints, keepHeadAndTail, normalizeForMatch, isReadOnlyCommand, CODE_EXEC_ROOTS, headCodePoints, tailCodePoints } from '@epoch-agent/infra';
+import { createLogger, dbPath, resolveHomeDir, DEFAULT_MAX_TURNS, PROJECT_DIR_NAME, guardSpawn, t, suggestKey, misspelledKeyIssues, openDatabase, migrate, releaseDatabase, parseLenient, issueDetails, splitWords, unknownKeyIssues, checkpointsDir, pluginsDir, projectHooksPath, projectClaudeSettingsPath, projectClaudeLocalSettingsPath, projectSettingsPath, projectLocalSettingsPath, projectPoliciesDir, trustedImportsPath, canProbeGit, budgetStatePath, artifactsDir, UNLIMITED_TURNS, turnLimitOf, configPath, managedSettingsPath, getSecretValues, listStoredSecretNames, maskApiKey, setSectionField, countCodePoints, headCodePoints, attachmentsDir, isInWorkspace, workspacesPath, samePath, lastSessionsPath, automationLogsDir, projectComplianceDir, projectSkillsDir, trustPath, projectCommandsDir, detectBackend, EXEC_PATH_AS_NODE_ENV, isolate, createStreamDecoder, parseShellCommand, writeArtifact, envPath, checkDangerousCommand, checkObfuscation, keepHeadAndTail, normalizeForMatch, isReadOnlyCommand, CODE_EXEC_ROOTS, tailCodePoints } from '@epoch-agent/infra';
 export { IS_WINDOWS, WINDOWS_HIDE_FLAGS, buildBwrapArgs, buildProfile, checkDangerousCommand, checkObfuscation, createLogger, detectBackend, getDefaultShell, getPythonCommand, isInWorkspace, isReadOnlyCommand, isolate, maskApiKey, probeBubblewrap, probeSeatbelt, complianceDir as resolveComplianceDir, policiesDir as resolvePoliciesDir, setLogLevel } from '@epoch-agent/infra';
 import { PROVIDER_TYPES, OPERATION_TYPES as OPERATION_TYPES$1, COMPLIANCE_CATEGORIES, COMPLIANCE_ACTIONS, SEARCH_PROVIDER_TYPES, CURRENCIES, LANGS, PERMISSION_LEVELS, SHELL_KINDS, ToolExposure, MAX_OPTIONS, MIN_OPTIONS, MAX_HEADER_CHARS, MAX_QUESTIONS, SCHEDULE_INTERVAL_MINUTES, isPermissionLevel, SCHEDULE_DRAFT_TOOL, isValidAgentRoleName, DEFAULT_AGENT_ROLE, isValidCommandName, RESERVED_COMMAND_NAMES, parseModelRef, isWirePluginArchiveName, systemNote, formatMoney, totalUsageTokens, NOOP_TELEMETRY, METRIC, contentToText, GEN_AI, isPromptOversize, promptTokens, apiKeyEnvVar, PROVIDER_INFOS, isProviderType, API_KEY_ENV_VARS, KEY_ACTIONS, tableOf, perAction, isKeyAction, parseSequence, RESERVED_CHORDS, chordId, sequenceId, ACTION_CONTEXTS, SEQUENCE_CONTEXTS, assertNeverPart, MAX_ATTACH_FILES, MAX_ATTACH_TOTAL_BYTES, MAX_SESSION_REFS, utf8ByteLength, truncateToBudget, attachSessionSurface, isContextNearlyFull, isOperationType, normalizeApproval, imagePartOmittedSummary, MAX_ATTACH_BYTES, SIMULTANEOUS_CONTEXTS, SESSION_REFERENCE_ERROR_CODES, filePartSummary, sessionPartSummary } from '@epoch-agent/protocol';
 export { API_KEY_ENV_VARS, COMPLIANCE_ACTIONS, COMPLIANCE_CATEGORIES, MAX_ATTACH_BYTES, MAX_ATTACH_FILES, MAX_ATTACH_TOTAL_BYTES, MAX_SESSION_ATTACH_BYTES, MAX_SESSION_REFS, OPERATION_TYPES, PERMISSION_LEVELS, PLAN_OUTCOMES, PROVIDER_INFOS, PROVIDER_TYPES, ToolExposure, apiKeyEnvVar, extractAllMentions, extractMentions, extractSessionMentions, getProviderInfo, isOperationType, isPermissionLevel, isPlanOutcome, isProviderType, normalizeApproval } from '@epoch-agent/protocol';
@@ -476,10 +476,18 @@ var runCommand2;
 var init_backend = __esm({
   "src/schedule/os/backend.ts"() {
     runCommand2 = (file, args) => new Promise((resolve16) => {
-      execFile(file, [...args], { encoding: "buffer", windowsHide: true }, (err, stdout, stderr) => {
-        const code = err && typeof err.code === "number" ? err.code ?? 1 : err ? 1 : 0;
-        resolve16({ code, stdout: decodeOutput(stdout), stderr: decodeOutput(stderr) });
-      });
+      guardSpawn(
+        () => execFile(
+          file,
+          [...args],
+          { encoding: "buffer", windowsHide: true },
+          (err, stdout, stderr) => {
+            const code = err && typeof err.code === "number" ? err.code ?? 1 : err ? 1 : 0;
+            resolve16({ code, stdout: decodeOutput(stdout), stderr: decodeOutput(stderr) });
+          }
+        ),
+        (err) => resolve16({ code: 1, stdout: "", stderr: `${file}: ${err.message}` })
+      );
     });
   }
 });
@@ -534,6 +542,7 @@ var INTERNAL_TOOLS = /* @__PURE__ */ new Set([
   "session_messages_search",
   "session_messages_read",
   "session_trace",
+  "session_list",
   "goal",
   "skill_view",
   "tool_search",
@@ -1109,6 +1118,7 @@ var BLOCKED_TOOLS = Object.freeze([
   "session_messages_search",
   "session_messages_read",
   "session_trace",
+  "session_list",
   "goal"
 ]);
 var DelegateManager = class {
@@ -2430,8 +2440,9 @@ var SCHEDULE_ISSUE_CODES = [
 ];
 var SCHEDULE_DEFAULTS = {
   maxTurns: DEFAULT_MAX_TURNS,
-  timeoutMs: 15 * 60 * 1e3
+  timeoutMs: 60 * 60 * 1e3
 };
+var SCHEDULE_FORM_BUDGET_USD = 200;
 var SCHEDULE_DEFAULT_ALLOWLIST = {
   allowTools: [],
   allowOperations: ["file_read"],
@@ -3039,9 +3050,7 @@ function validateSchedule(input) {
 }
 function bypassIssues(input) {
   const issues = [];
-  if (!input.workDir.trim()) {
-    issues.push({ code: "bypass-needs-workdir" });
-  } else if (isTooBroad(input.workDir, input.homeDir)) {
+  if (input.workDir.trim() && isTooBroad(input.workDir, input.homeDir)) {
     issues.push({ code: "bypass-workdir-too-broad", detail: input.workDir });
   }
   const missingRuler = !(input.maxBudgetUsd > 0) || !(input.timeoutMs > 0);
@@ -3431,11 +3440,13 @@ var SESSION_SEARCH_TOOL = "session_search";
 var SESSION_MESSAGES_SEARCH_TOOL = "session_messages_search";
 var SESSION_MESSAGES_READ_TOOL = "session_messages_read";
 var SESSION_TRACE_TOOL = "session_trace";
+var SESSION_LIST_TOOL = "session_list";
 var SESSION_QUERY_TOOLS = Object.freeze([
   SESSION_SEARCH_TOOL,
   SESSION_MESSAGES_SEARCH_TOOL,
   SESSION_MESSAGES_READ_TOOL,
-  SESSION_TRACE_TOOL
+  SESSION_TRACE_TOOL,
+  SESSION_LIST_TOOL
 ]);
 var MAX_SNIPPET = 160;
 var CANDIDATE_FACTOR = 4;
@@ -3529,6 +3540,36 @@ var SessionQueries = class {
   trace(input) {
     return traceSession(this.db, input);
   }
+  listSessions(input) {
+    const vis = resolveSessionVisibility({ ...input, db: this.db });
+    const archivedClause = input.archived === "all" ? "" : input.archived === "only" ? "AND s.archived = 1" : "AND s.archived = 0";
+    const where = `${vis.clause} ${archivedClause}`;
+    const total = this.db.prepare(`SELECT count(*) AS n FROM sessions s WHERE ${where}`).get(vis.params).n;
+    const rows = this.db.prepare(
+      `SELECT s.id,
+                COALESCE(NULLIF(s.display_name, ''), s.title) AS title,
+                s.cwd,
+                COALESCE(s.updated_at, s.started_at) AS updated_at,
+                s.message_count,
+                s.archived
+           FROM sessions s
+          WHERE ${where}
+          ORDER BY COALESCE(s.updated_at, s.started_at) DESC
+          LIMIT @limit`
+    ).all({ ...vis.params, limit: input.limit });
+    return {
+      total,
+      sessions: rows.map((row) => ({
+        sessionId: row.id,
+        title: row.title,
+        cwd: row.cwd ?? void 0,
+        updatedAt: row.updated_at,
+        messageCount: row.message_count,
+        archived: row.archived === 1,
+        isCurrent: row.id === input.currentSessionId
+      }))
+    };
+  }
   contentRows(safe, limit, visClause, visParams) {
     const sql = (table) => `
       SELECT m.id, m.session_id, m.role, m.content, m.timestamp, m.active,
@@ -3594,7 +3635,123 @@ var SessionQueries = class {
     return this.db.prepare(sql("messages_fts_trigram")).all({ query: buildTrigramMatchQuery(safe), sid: sessionId, limit });
   }
 };
-// src/tools/builtin/session-read.ts
+// src/tools/builtin/session-list.ts
+var DEFAULT_LIMIT = 10;
+var MAX_LIMIT = 30;
+var MAX_TITLE = 80;
+function fail3(message, start, code, suggestion) {
+  return {
+    success: false,
+    output: "",
+    error: { code, message, ...{} },
+    duration: Date.now() - start
+  };
+}
+function clampLimit(raw) {
+  const n = Number(raw);
+  if (!Number.isFinite(n) || n <= 0) return DEFAULT_LIMIT;
+  return Math.min(Math.floor(n), MAX_LIMIT);
+}
+function stamp(ms) {
+  return new Date(ms).toISOString().slice(0, 16).replace("T", " ");
+}
+function archivedScopeOf(raw) {
+  return raw === "only" || raw === "all" ? raw : "exclude";
+}
+function scopeNote(allWorkspaces, archived) {
+  const where = allWorkspaces ? "all workspaces" : "current workspace + this session lineage";
+  const which = archived === "only" ? "archived only" : archived === "all" ? "archived included" : "archived excluded";
+  return `${where}, ${which}`;
+}
+function renderEntry(entry, index) {
+  const self = entry.isCurrent ? " (this session)" : "";
+  const title = entry.title.length > MAX_TITLE ? `${entry.title.slice(0, MAX_TITLE)}\u2026` : entry.title;
+  const where = entry.cwd ? ` \xB7 ${entry.cwd}` : "";
+  const archived = entry.archived ? " \xB7 archived" : "";
+  return [
+    `${index + 1}. ${entry.sessionId}${self} \u2014 ${title || "(untitled)"}`,
+    `   ${stamp(entry.updatedAt)} \xB7 ${entry.messageCount} messages${where}${archived}`
+  ].join("\n");
+}
+function render(out, note) {
+  const shown = out.sessions.length;
+  const head = shown < out.total ? `${out.total} session(s) (${note}), showing the ${shown} most recently active:` : `${out.total} session(s) (${note}):`;
+  return [
+    head,
+    "",
+    ...out.sessions.map(renderEntry),
+    "",
+    "Next: session_messages_search({ sessionId, query }) to look inside one, or session_messages_read({ sessionId, messageId }) once you have a hit."
+  ].join("\n");
+}
+function createSessionListTool(deps) {
+  return {
+    name: SESSION_LIST_TOOL,
+    description: "\u5217\u51FA\u4F60\u80FD\u8BFB\u5230\u7684\u5386\u53F2\u4F1A\u8BDD \u2014\u2014 \u68C0\u7D22\u90A3\u51E0\u4E2A\u90FD\u8981\u5148\u60F3\u51FA\u4E00\u4E2A\u8BCD\uFF0C\u8FD9\u4E2A\u4E0D\u8981\u3002\n\u7528\u5B83\u56DE\u7B54\u300C\u6211\u90FD\u6709\u54EA\u4E9B\u4F1A\u8BDD\u300D\u300C\u4E0A\u6B21\u90A3\u6BB5\u804A\u7684\u662F\u4EC0\u4E48\u300D\uFF0C\u4EE5\u53CA\u7528\u6237\u63D0\u8D77\u67D0\u6BB5\u8FC7\u53BB\u7684\u4F1A\u8BDD\u5374\u6CA1\u7ED9 id \u7684\u65F6\u5019\u3002\n\u6309\u6700\u540E\u6D3B\u52A8\u5012\u5E8F\uFF0C\u6BCF\u6BB5\u7ED9 sessionId + \u6807\u9898 + \u65F6\u95F4 + \u6D88\u606F\u6570\uFF1B\u62FF\u5230 id \u518D\u7528 session_messages_search \u8FDB\u53BB\u770B\u3002\n\u9ED8\u8BA4\u4E0D\u5217\u5F52\u6863\u7684\u4F1A\u8BDD\uFF08\u5F52\u6863\u662F\u300C\u7528\u6237\u628A\u5B83\u6536\u8D77\u6765\u4E86\u300D\uFF09\u2014\u2014 \u8981\u627E\u5F52\u6863\u7684\u5C31\u4F20 archived\u3002\n\u9ED8\u8BA4\u53EA\u5217\u5F53\u524D\u5DE5\u4F5C\u533A\u7684\u4F1A\u8BDD\uFF0C\u5916\u52A0\u672C\u4F1A\u8BDD fork \u51FA\u6765\u7684\u90A3\u6761\u8840\u7F18\u94FE\u3002",
+    get parameters() {
+      return {
+        type: "object",
+        properties: {
+          limit: {
+            type: "number",
+            description: `\u56DE\u51E0\u6BB5\uFF0C\u9ED8\u8BA4 ${DEFAULT_LIMIT}\uFF0C\u4E0A\u9650 ${MAX_LIMIT}\uFF08\u4F20\u5927\u4E86\u81EA\u52A8\u5939\u7D27\uFF0C\u4E0D\u62A5\u9519\uFF09`
+          },
+          archived: {
+            type: "string",
+            enum: ["exclude", "only", "all"],
+            description: "exclude \u4E0D\u5217\u5F52\u6863\u7684\uFF08\u9ED8\u8BA4\uFF09\uFF1Bonly \u53EA\u5217\u5F52\u6863\u7684\uFF1Ball \u4E24\u8FB9\u90FD\u5217\u3002\u7528\u6237\u63D0\u8D77\u4E00\u6BB5\u300C\u4EE5\u524D\u5F52\u6863\u6389\u7684\u4F1A\u8BDD\u300D\u65F6\u7528 only"
+          },
+          ...deps.allowAllWorkspaces ? {
+            allWorkspaces: {
+              type: "boolean",
+              description: "\u5217\u5168\u90E8\u5DE5\u4F5C\u533A\u7684\u4F1A\u8BDD\uFF08\u9ED8\u8BA4 false\uFF0C\u53EA\u5217\u5F53\u524D\u5DE5\u4F5C\u533A\uFF09"
+            }
+          } : {}
+        },
+        required: []
+      };
+    },
+    exposure: ToolExposure.Direct,
+    supportsParallel: true,
+    annotations: {
+      readOnlyHint: true,
+      destructiveHint: false,
+      idempotentHint: true,
+      openWorldHint: true
+    },
+    operation: "file_read",
+    describeTarget: (args) => `${SESSION_LIST_TOOL}:${archivedScopeOf(args["archived"])}`,
+    execute(args, ctx) {
+      const start = Date.now();
+      const allWorkspaces = deps.allowAllWorkspaces === true && args["allWorkspaces"] === true;
+      const archived = archivedScopeOf(args["archived"]);
+      try {
+        const out = deps.queries.listSessions({
+          limit: clampLimit(args["limit"]),
+          archived,
+          currentSessionId: ctx.sessionId,
+          workspaceCwd: deps.workspaceCwd,
+          allWorkspaces
+        });
+        if (out.sessions.length === 0) {
+          const hint = archived === "exclude" ? ' If the user is asking about a session they archived, retry with archived: "only".' : "";
+          return Promise.resolve({
+            success: true,
+            output: `No session in readable scope (${scopeNote(allWorkspaces, archived)}).${hint}`,
+            duration: Date.now() - start
+          });
+        }
+        return Promise.resolve({
+          success: true,
+          output: render(out, scopeNote(allWorkspaces, archived)),
+          duration: Date.now() - start
+        });
+      } catch (err) {
+        return Promise.resolve(fail3(err instanceof Error ? err.message : String(err), start, 8014));
+      }
+    }
+  };
+}
 var DEFAULT_WINDOW = 2;
 var MAX_WINDOW = 10;
 var DEFAULT_TRACE_LIMIT = 20;
@@ -3602,7 +3759,7 @@ var MAX_TRACE_LIMIT = 50;
 var BODY_BUDGET = 1500;
 var MIN_BODY = 60;
 var ANCHOR_SHARE = 4;
-function fail3(message, start, code, suggestion) {
+function fail4(message, start, code, suggestion) {
   return {
     success: false,
     output: "",
@@ -3616,7 +3773,7 @@ function clampWindow(raw, fallback2, max) {
   if (!Number.isFinite(n) || n < 0) return fallback2;
   return Math.min(Math.floor(n), max);
 }
-function stamp(ms) {
+function stamp2(ms) {
   return new Date(ms).toISOString().slice(0, 16).replace("T", " ");
 }
 function budgetOf(total) {
@@ -3638,7 +3795,7 @@ function surfaceOf(record, isCurrent) {
 function renderRecord(record, mark, budget, isCurrent) {
   const tool = record.toolName ? ` \xB7 ${record.toolName}` : "";
   return [
-    `${mark} #${record.messageId} [${record.role}${tool} \xB7 ${stamp(record.timestamp)} \xB7 ${surfaceOf(record, isCurrent)}]`,
+    `${mark} #${record.messageId} [${record.role}${tool} \xB7 ${stamp2(record.timestamp)} \xB7 ${surfaceOf(record, isCurrent)}]`,
     `   ${body(record.content, budget).split("\n").join("\n   ")}`
   ].join("\n");
 }
@@ -3704,11 +3861,11 @@ before / after \u5404\u9ED8\u8BA4 ${DEFAULT_WINDOW}\u3001\u4E0A\u9650 ${MAX_WIND
     execute(args, ctx) {
       const start = Date.now();
       const sessionId = String(args["sessionId"] ?? "").trim();
-      if (!sessionId) return Promise.resolve(fail3("sessionId must not be empty", start, 8007));
+      if (!sessionId) return Promise.resolve(fail4("sessionId must not be empty", start, 8007));
       const messageId = Number(args["messageId"]);
       if (!Number.isInteger(messageId) || messageId <= 0) {
         return Promise.resolve(
-          fail3(
+          fail4(
             "messageId must be a positive integer",
             start,
             8008,
@@ -3729,7 +3886,7 @@ before / after \u5404\u9ED8\u8BA4 ${DEFAULT_WINDOW}\u3001\u4E0A\u9650 ${MAX_WIND
         });
         if (!out.authorized) {
           return Promise.resolve(
-            fail3(
+            fail4(
               `session ${sessionId} is out of readable scope`,
               start,
               8009,
@@ -3739,7 +3896,7 @@ before / after \u5404\u9ED8\u8BA4 ${DEFAULT_WINDOW}\u3001\u4E0A\u9650 ${MAX_WIND
         }
         if (!out.anchor) {
           return Promise.resolve(
-            fail3(
+            fail4(
               `session ${sessionId} has no message #${messageId} (it has ${out.total})`,
               start,
               8010,
@@ -3753,7 +3910,7 @@ before / after \u5404\u9ED8\u8BA4 ${DEFAULT_WINDOW}\u3001\u4E0A\u9650 ${MAX_WIND
           duration: Date.now() - start
         });
       } catch (err) {
-        return Promise.resolve(fail3(err instanceof Error ? err.message : String(err), start, 8011));
+        return Promise.resolve(fail4(err instanceof Error ? err.message : String(err), start, 8011));
       }
     }
   };
@@ -3767,7 +3924,7 @@ function renderNode(node, isCurrent) {
   const where = node.cwd ? ` \xB7 ${node.cwd}` : "";
   const archived = node.archived ? " \xB7 archived" : "";
   return `${indent}${node.sessionId}${self} \u2014 ${node.title || "(untitled)"}
-${indent}   ${stamp(node.startedAt ?? 0)} \xB7 ${node.messageCount ?? 0} messages${where}${archived}`;
+${indent}   ${stamp2(node.startedAt ?? 0)} \xB7 ${node.messageCount ?? 0} messages${where}${archived}`;
 }
 function renderTrace(trace, currentSessionId) {
   const anchor = trace.anchor;
@@ -3846,7 +4003,7 @@ function createSessionTraceTool(deps) {
         });
         if (!trace.authorized) {
           return Promise.resolve(
-            fail3(
+            fail4(
               `session ${sessionId} is out of readable scope`,
               start,
               8012,
@@ -3860,14 +4017,14 @@ function createSessionTraceTool(deps) {
           duration: Date.now() - start
         });
       } catch (err) {
-        return Promise.resolve(fail3(err instanceof Error ? err.message : String(err), start, 8013));
+        return Promise.resolve(fail4(err instanceof Error ? err.message : String(err), start, 8013));
       }
     }
   };
 }
-var DEFAULT_LIMIT = 5;
-var MAX_LIMIT = 20;
-function fail4(message, start, code, suggestion) {
+var DEFAULT_LIMIT2 = 5;
+var MAX_LIMIT2 = 20;
+function fail5(message, start, code, suggestion) {
   return {
     success: false,
     output: "",
@@ -3878,12 +4035,12 @@ function fail4(message, start, code, suggestion) {
 function emptyHint(query) {
   return belowTrigramFloor(sanitizeFtsQuery(query)) ? ` Note: every word here is shorter than ${TRIGRAM_MIN_CHARS} characters, which the substring index cannot match at all \u2014 this is "cannot search", not "not found". Retry with a longer phrase.` : " Try fewer or different words.";
 }
-function clampLimit(raw) {
+function clampLimit2(raw) {
   const n = Number(raw);
-  if (!Number.isFinite(n) || n <= 0) return DEFAULT_LIMIT;
-  return Math.min(Math.floor(n), MAX_LIMIT);
+  if (!Number.isFinite(n) || n <= 0) return DEFAULT_LIMIT2;
+  return Math.min(Math.floor(n), MAX_LIMIT2);
 }
-function stamp2(ms) {
+function stamp3(ms) {
   return new Date(ms).toISOString().slice(0, 16).replace("T", " ");
 }
 function surfaceNote(hit, isCurrent) {
@@ -3897,14 +4054,14 @@ function renderSessionHit(hit, index) {
   const self = hit.isCurrent ? " (this session)" : "";
   return [
     `${index + 1}. ${hit.sessionId}${self} \u2014 ${hit.title || "(untitled)"}`,
-    `   ${stamp2(hit.startedAt)} \xB7 ${hit.messageCount} messages${where}`,
+    `   ${stamp3(hit.startedAt)} \xB7 ${hit.messageCount} messages${where}`,
     `   best match [${hit.best.role} #${hit.best.messageId}, ${surfaceNote(hit.best, hit.isCurrent)}]:`,
     `   ${hit.best.snippet}`
   ].join("\n");
 }
 function renderMessageHit(hit, isCurrent) {
   return [
-    `#${hit.messageId} [${hit.role} \xB7 ${stamp2(hit.timestamp)} \xB7 ${surfaceNote(hit, isCurrent)}]`,
+    `#${hit.messageId} [${hit.role} \xB7 ${stamp3(hit.timestamp)} \xB7 ${surfaceNote(hit, isCurrent)}]`,
     `   ${hit.snippet}`
   ].join("\n");
 }
@@ -3922,7 +4079,7 @@ function createSessionSearchTool(deps) {
           },
           limit: {
             type: "number",
-            description: `\u8FD4\u56DE\u51E0\u6BB5\u4F1A\u8BDD\uFF0C\u9ED8\u8BA4 ${DEFAULT_LIMIT}\uFF0C\u4E0A\u9650 ${MAX_LIMIT}`
+            description: `\u8FD4\u56DE\u51E0\u6BB5\u4F1A\u8BDD\uFF0C\u9ED8\u8BA4 ${DEFAULT_LIMIT2}\uFF0C\u4E0A\u9650 ${MAX_LIMIT2}`
           },
           scope: {
             type: "string",
@@ -3952,13 +4109,13 @@ function createSessionSearchTool(deps) {
     execute(args, ctx) {
       const start = Date.now();
       const query = String(args["query"] ?? "").trim();
-      if (!query) return Promise.resolve(fail4("query must not be empty", start, 8001));
+      if (!query) return Promise.resolve(fail5("query must not be empty", start, 8001));
       const allWorkspaces = deps.allowAllWorkspaces === true && args["allWorkspaces"] === true;
       const scope = args["scope"] === "title" ? "title" : "all";
       try {
         const hits = deps.queries.searchSessions({
           query,
-          limit: clampLimit(args["limit"]),
+          limit: clampLimit2(args["limit"]),
           scope,
           currentSessionId: ctx.sessionId,
           workspaceCwd: deps.workspaceCwd,
@@ -3985,7 +4142,7 @@ function createSessionSearchTool(deps) {
         });
       } catch (err) {
         return Promise.resolve(
-          fail4(
+          fail5(
             err instanceof Error ? err.message : String(err),
             start,
             8002,
@@ -4014,7 +4171,7 @@ function createSessionMessagesSearchTool(deps) {
           },
           limit: {
             type: "number",
-            description: `\u8FD4\u56DE\u51E0\u6761\uFF0C\u9ED8\u8BA4 ${DEFAULT_LIMIT}\uFF0C\u4E0A\u9650 ${MAX_LIMIT}`
+            description: `\u8FD4\u56DE\u51E0\u6761\uFF0C\u9ED8\u8BA4 ${DEFAULT_LIMIT2}\uFF0C\u4E0A\u9650 ${MAX_LIMIT2}`
           },
           ...deps.allowAllWorkspaces ? {
             allWorkspaces: {
@@ -4040,21 +4197,21 @@ function createSessionMessagesSearchTool(deps) {
       const start = Date.now();
       const sessionId = String(args["sessionId"] ?? "").trim();
       const query = String(args["query"] ?? "").trim();
-      if (!sessionId) return Promise.resolve(fail4("sessionId must not be empty", start, 8003));
-      if (!query) return Promise.resolve(fail4("query must not be empty", start, 8004));
+      if (!sessionId) return Promise.resolve(fail5("sessionId must not be empty", start, 8003));
+      if (!query) return Promise.resolve(fail5("query must not be empty", start, 8004));
       const allWorkspaces = deps.allowAllWorkspaces === true && args["allWorkspaces"] === true;
       try {
         const out = deps.queries.searchMessages({
           sessionId,
           query,
-          limit: clampLimit(args["limit"]),
+          limit: clampLimit2(args["limit"]),
           currentSessionId: ctx.sessionId,
           workspaceCwd: deps.workspaceCwd,
           allWorkspaces
         });
         if (!out.authorized) {
           return Promise.resolve(
-            fail4(
+            fail5(
               `session ${sessionId} is out of searchable scope`,
               start,
               8005,
@@ -4081,7 +4238,7 @@ function createSessionMessagesSearchTool(deps) {
         });
       } catch (err) {
         return Promise.resolve(
-          fail4(
+          fail5(
             err instanceof Error ? err.message : String(err),
             start,
             8006,
@@ -4097,12 +4254,13 @@ function createSessionSearchTools(deps) {
     createSessionSearchTool(deps),
     createSessionMessagesSearchTool(deps),
     createSessionMessagesReadTool(deps),
-    createSessionTraceTool(deps)
+    createSessionTraceTool(deps),
+    createSessionListTool(deps)
   ];
 }
 var SKILL_VIEW_TOOL = "skill_view";
 var MAX_SUGGESTED = 20;
-function fail5(message, start, code, suggestion) {
+function fail6(message, start, code, suggestion) {
   return {
     success: false,
     output: "",
@@ -4147,18 +4305,18 @@ function createSkillViewTool(deps) {
       const name = String(args["name"] ?? "").trim();
       if (!name) {
         return Promise.resolve(
-          fail5("name must not be empty", start, 3001, describeAvailableSkills(deps.skills))
+          fail6("name must not be empty", start, 3001, describeAvailableSkills(deps.skills))
         );
       }
       const body2 = deps.skills.view(name);
       if (body2 === null) {
         return Promise.resolve(
-          fail5(`skill "${name}" not found`, start, 3002, describeAvailableSkills(deps.skills))
+          fail6(`skill "${name}" not found`, start, 3002, describeAvailableSkills(deps.skills))
         );
       }
       if (body2.trim() === "") {
         return Promise.resolve(
-          fail5(
+          fail6(
             `skill "${name}" has an empty body \u2014 its SKILL.md is missing or empty`,
             start,
             3003,
@@ -4285,7 +4443,7 @@ var SKILL_EDIT_TOOL = "skill_edit";
 var SKILL_PATCH_TOOL = "skill_patch";
 var SKILL_WRITE_FILE_TOOL = "skill_write_file";
 var WRITABLE_SKILL_NAME = /^[A-Za-z0-9][A-Za-z0-9_-]{0,63}$/;
-function fail6(message, start, code, suggestion) {
+function fail7(message, start, code, suggestion) {
   return {
     success: false,
     output: "",
@@ -4297,7 +4455,7 @@ function done(output, start) {
   return { success: true, output, duration: Date.now() - start };
 }
 function fromThrow(err, start, suggestion) {
-  return fail6(err instanceof Error ? err.message : String(err), start, 3102, suggestion);
+  return fail7(err instanceof Error ? err.message : String(err), start, 3102, suggestion);
 }
 function str2(args, key) {
   const raw = args[key];
@@ -4353,13 +4511,13 @@ function createTool(deps) {
       const content = str2(args, "content");
       const category = str2(args, "category").trim() || "general";
       if (!WRITABLE_SKILL_NAME.test(name)) {
-        return fail6(`invalid skill name: ${JSON.stringify(name)}`, start, 3101, WRITABLE_HINT);
+        return fail7(`invalid skill name: ${JSON.stringify(name)}`, start, 3101, WRITABLE_HINT);
       }
       if (!WRITABLE_SKILL_NAME.test(category)) {
-        return fail6(`invalid category: ${JSON.stringify(category)}`, start, 3101, WRITABLE_HINT);
+        return fail7(`invalid category: ${JSON.stringify(category)}`, start, 3101, WRITABLE_HINT);
       }
       const bad2 = checkFrontmatter(name, content);
-      if (bad2 !== null) return fail6(bad2, start, 3103);
+      if (bad2 !== null) return fail7(bad2, start, 3103);
       try {
         const path = await deps.skills.create(name, content, category);
         return done(`created skill "${name}" at ${path}`, start);
@@ -4391,10 +4549,10 @@ function editTool(deps) {
       const name = str2(args, "name").trim();
       const content = str2(args, "content");
       if (!name) {
-        return fail6("name must not be empty", start, 3101, describeAvailableSkills(deps.skills));
+        return fail7("name must not be empty", start, 3101, describeAvailableSkills(deps.skills));
       }
       const bad2 = checkFrontmatter(name, content);
-      if (bad2 !== null) return fail6(bad2, start, 3103);
+      if (bad2 !== null) return fail7(bad2, start, 3103);
       try {
         await deps.skills.edit(name, content);
         return done(`rewrote SKILL.md of skill "${name}"`, start);
@@ -4432,10 +4590,10 @@ function patchTool(deps) {
       const oldString = str2(args, "old_string");
       const filePath = str2(args, "file_path").trim();
       if (!name) {
-        return fail6("name must not be empty", start, 3101, describeAvailableSkills(deps.skills));
+        return fail7("name must not be empty", start, 3101, describeAvailableSkills(deps.skills));
       }
       if (oldString === "") {
-        return fail6("old_string must not be empty", start, 3101);
+        return fail7("old_string must not be empty", start, 3101);
       }
       try {
         await deps.skills.patch(
@@ -4477,9 +4635,9 @@ function writeFileTool(deps) {
       const name = str2(args, "name").trim();
       const filePath = str2(args, "file_path").trim();
       if (!name) {
-        return fail6("name must not be empty", start, 3101, describeAvailableSkills(deps.skills));
+        return fail7("name must not be empty", start, 3101, describeAvailableSkills(deps.skills));
       }
-      if (!filePath) return fail6("file_path must not be empty", start, 3101);
+      if (!filePath) return fail7("file_path must not be empty", start, 3101);
       try {
         await deps.skills.writeFile(name, filePath, str2(args, "content"));
         return done(`wrote ${filePath} into skill "${name}"`, start);
@@ -4495,7 +4653,7 @@ function createSkillWriteTools(deps) {
 var TOOL_SEARCH_TOOL = "tool_search";
 var MAX_LISTED = 40;
 var MAX_REVEAL_PER_CALL = 10;
-function fail7(message, start, code, suggestion) {
+function fail8(message, start, code, suggestion) {
   return {
     success: false,
     output: "",
@@ -4545,12 +4703,12 @@ function createToolSearchTool(deps) {
       const pool = deps.deferred();
       const raw = String(args["query"] ?? "").trim();
       if (!raw) {
-        return Promise.resolve(fail7("query must not be empty", start, 3101, available(pool)));
+        return Promise.resolve(fail8("query must not be empty", start, 3101, available(pool)));
       }
       const terms = raw.toLowerCase().split(/\s+/).filter(Boolean);
       const hits = pool.filter((tool) => matches(tool, terms));
       if (hits.length === 0) {
-        return Promise.resolve(fail7(`No tool matches "${raw}"`, start, 3102, available(pool)));
+        return Promise.resolve(fail8(`No tool matches "${raw}"`, start, 3102, available(pool)));
       }
       const picked = hits.slice(0, MAX_REVEAL_PER_CALL);
       for (const tool of picked) deps.reveal.reveal(tool.name);
@@ -5106,7 +5264,7 @@ function createRoleFile(input, opts) {
     const detail = checked.error.issues.map((i) => `${i.path.join(".") || "(root)"}: ${i.message}`).join("; ");
     return { ok: false, reason: "invalid-field", detail };
   }
-  const text = render(fm, input.prompt ?? "");
+  const text = render2(fm, input.prompt ?? "");
   const file = `${name}.md`;
   const back = parseRoleDefinition(text, file, opts.source ?? "user");
   if (!back.role) {
@@ -5138,7 +5296,7 @@ function frontmatterOf(name, input) {
     ...input.maxTurns === void 0 ? {} : { maxTurns: input.maxTurns }
   };
 }
-function render(fm, prompt) {
+function render2(fm, prompt) {
   const head = dump(fm, { lineWidth: -1, noRefs: true });
   const body2 = prompt.trim();
   return `---
@@ -6363,30 +6521,41 @@ function runCommand(file, args, opts = {}) {
   const spawnFile = viaCmd ? process.env["ComSpec"] ?? "cmd.exe" : file;
   const spawnArgs = viaCmd ? ["/d", "/s", "/c", cmdLine(file, args)] : [...args];
   return new Promise((resolvePromise) => {
-    execFile(
-      spawnFile,
-      spawnArgs,
-      {
-        timeout: opts.timeoutMs ?? COMMAND_TIMEOUT_MS,
-        maxBuffer: MAX_OUTPUT_BYTES,
-        windowsHide: true,
-        windowsVerbatimArguments: viaCmd,
-        ...opts.cwd ? { cwd: opts.cwd } : {}
-      },
-      (err, stdout, stderr) => {
-        const out = String(stdout ?? "");
-        const errOut = String(stderr ?? "");
-        if (!err) {
-          resolvePromise({ ok: true, stdout: out, stderr: errOut });
-          return;
+    guardSpawn(
+      () => execFile(
+        spawnFile,
+        spawnArgs,
+        {
+          timeout: opts.timeoutMs ?? COMMAND_TIMEOUT_MS,
+          maxBuffer: MAX_OUTPUT_BYTES,
+          windowsHide: true,
+          windowsVerbatimArguments: viaCmd,
+          ...opts.cwd ? { cwd: opts.cwd } : {}
+        },
+        (err, stdout, stderr) => {
+          const out = String(stdout ?? "");
+          const errOut = String(stderr ?? "");
+          if (!err) {
+            resolvePromise({ ok: true, stdout: out, stderr: errOut });
+            return;
+          }
+          const detail = describe3(file, err, errOut);
+          resolvePromise({
+            ok: false,
+            detail,
+            stdout: out,
+            stderr: errOut,
+            ...err.code === "ENOENT" ? { notFound: true } : {}
+          });
         }
-        const detail = describe3(file, err, errOut);
+      ),
+      (err) => {
         resolvePromise({
           ok: false,
-          detail,
-          stdout: out,
-          stderr: errOut,
-          ...err.code === "ENOENT" ? { notFound: true } : {}
+          detail: describe3(file, err, ""),
+          stdout: "",
+          stderr: "",
+          ...err.code === "ENOENT" || err.code === "ENOTDIR" ? { notFound: true } : {}
         });
       }
     );
@@ -6999,11 +7168,29 @@ var MARKETPLACE_DISPLAY_FIELDS = [
 var DisplaySchema = z.object({
   fields: z.array(z.string().min(1)).optional()
 });
+var CategoryNodeSchema = z.lazy(
+  () => z.object({
+    id: z.string().min(1),
+    label: z.string().min(1).optional(),
+    children: z.array(CategoryNodeSchema).optional()
+  })
+);
+var CategoriesSchema = z.array(CategoryNodeSchema).refine(hasUniqueCategoryIds, { message: "category ids must be unique across the whole tree" }).optional().catch(void 0);
+function hasUniqueCategoryIds(nodes) {
+  const seen = /* @__PURE__ */ new Set();
+  const walk3 = (list) => list.every((node) => {
+    if (seen.has(node.id)) return false;
+    seen.add(node.id);
+    return node.children === void 0 || walk3(node.children);
+  });
+  return walk3(nodes);
+}
 var CatalogSchema = z.object({
   name: z.string().regex(NAME_PATTERN),
   description: z.string().min(1).optional(),
   owner: z.object({ name: z.string().min(1), url: z.string().min(1).optional() }).optional(),
   display: DisplaySchema.optional(),
+  categories: CategoriesSchema,
   plugins: z.array(EntrySchema)
 });
 var RecordSchema2 = z.object({
@@ -7019,13 +7206,17 @@ var StateSchema2 = z.object({
 function projectEntryForDisplay(entry, display) {
   const allowed = display?.fields;
   if (allowed === void 0) return entry;
-  const keep = new Set(allowed);
   const out = { ...entry };
   for (const field of MARKETPLACE_DISPLAY_FIELDS) {
-    if (!keep.has(field)) delete out[field];
+    if (!displayAllows(display, field)) delete out[field];
   }
   return out;
 }
+function displayAllows(display, field) {
+  const allowed = display?.fields;
+  if (allowed === void 0) return true;
+  return allowed.includes(field);
+}
 function readMarketplaces(statePath) {
   if (!existsSync(statePath)) return { records: [], issues: [] };
   let raw;
@@ -9246,7 +9437,18 @@ function gitProbeEnv() {
   delete env.GIT_WORK_TREE;
   return env;
 }
+function insideGitRepo(rootDir) {
+  let dir = rootDir;
+  for (; ; ) {
+    if (existsSync(join(dir, ".git"))) return true;
+    const parent = dirname(dir);
+    if (parent === dir) return false;
+    dir = parent;
+  }
+}
 function getGitStatus(rootDir) {
+  if (!insideGitRepo(rootDir)) return void 0;
+  if (!canProbeGit()) return void 0;
   const quiet = ["ignore", "pipe", "ignore"];
   const env = gitProbeEnv();
   try {
@@ -11471,6 +11673,9 @@ var AgentLoop = class {
       let blankAfterNudge = false;
       for (let turn = 1; turn <= maxTurns; turn++) {
         if (this.isAborted(input.signal)) {
+          if (turns.length > 0 || lastText) {
+            yield { type: "notice", code: "aborted", text: t("agent_run.aborted") };
+          }
           yield finish("aborted");
           await this.prompt.syncMemory(userText, lastText);
           return;
@@ -11902,6 +12107,12 @@ ${finalText}` };
       });
       yield finish("max-turns");
     } catch (err) {
+      if (this.isAborted(input.signal)) {
+        await this.prompt.syncMemory(userText, lastText);
+        yield { type: "notice", code: "aborted", text: t("agent_run.aborted") };
+        yield finish("aborted");
+        return;
+      }
       const msg = err instanceof Error ? err.message : String(err);
       runSpan.recordError(err);
       await this.prompt.syncMemory(userText, "");
@@ -12148,6 +12359,10 @@ var SessionsSchema = z.object({
   retentionDays: z.int().positive().max(3650).default(90),
   vacuumAfterPrune: z.boolean().default(true)
 });
+var AutomationSchema = z.object({
+  keepRuns: z.int().positive().max(1e4).default(200),
+  maxRecordingMb: z.int().positive().max(1e5).default(64)
+});
 var TelemetrySchema = z.object({
   enabled: z.boolean().optional(),
   target: z.enum(["file", "console", "otlp"]).optional(),
@@ -12186,6 +12401,7 @@ var EpochConfigSchema = z.object({
   memory: MemorySchema.prefault({}),
   artifacts: ArtifactsSchema.prefault({}),
   sessions: SessionsSchema.prefault({}),
+  automation: AutomationSchema.prefault({}),
   budget: BudgetSchema.optional(),
   compliance: ComplianceSchema.optional(),
   headless: HeadlessSchema.optional(),
@@ -14246,6 +14462,9 @@ var SETTING_WRITE_KEYS = [
   "sessions.autoPrune",
   "sessions.retentionDays",
   "sessions.vacuumAfterPrune",
+  "automation.keepRuns",
+  "automation.maxRecordingMb",
+  "sessionSearch.allWorkspaces",
   "permission"
 ];
 function isWritableSettingKey(value) {
@@ -14313,6 +14532,9 @@ var VALUE_SCHEMA = {
   "sessions.autoPrune": EpochConfigSchema.shape.sessions.unwrap().shape.autoPrune.unwrap(),
   "sessions.retentionDays": EpochConfigSchema.shape.sessions.unwrap().shape.retentionDays.unwrap(),
   "sessions.vacuumAfterPrune": EpochConfigSchema.shape.sessions.unwrap().shape.vacuumAfterPrune.unwrap(),
+  "automation.keepRuns": EpochConfigSchema.shape.automation.unwrap().shape.keepRuns.unwrap(),
+  "automation.maxRecordingMb": EpochConfigSchema.shape.automation.unwrap().shape.maxRecordingMb.unwrap(),
+  "sessionSearch.allWorkspaces": EpochConfigSchema.shape.sessionSearch.unwrap().shape.allWorkspaces.unwrap(),
   permission: EpochConfigSchema.shape.permission.unwrap()
 };
 function settingValueKind(key) {
@@ -15245,8 +15467,8 @@ var MemoryManager = class {
         return "";
       }
     }
-    if (content.length > MAX_ENTRY_CHARS) {
-      return content.slice(0, MAX_ENTRY_CHARS) + " \u2026[\u6761\u76EE\u8FC7\u957F\u5DF2\u622A\u65AD]";
+    if (countCodePoints(content) > MAX_ENTRY_CHARS) {
+      return headCodePoints(content, MAX_ENTRY_CHARS) + " \u2026[\u6761\u76EE\u8FC7\u957F\u5DF2\u622A\u65AD]";
     }
     return content;
   }
@@ -15256,7 +15478,7 @@ var MemoryManager = class {
       const id = this.idByContent.get(contentKey(target, content));
       if (!id) continue;
       const firstLine4 = (content.split("\n")[0] ?? "").trim();
-      const summary = firstLine4.length > INDEX_SUMMARY_CHARS ? `${firstLine4.slice(0, INDEX_SUMMARY_CHARS)}\u2026` : firstLine4;
+      const summary = countCodePoints(firstLine4) > INDEX_SUMMARY_CHARS ? `${headCodePoints(firstLine4, INDEX_SUMMARY_CHARS)}\u2026` : firstLine4;
       out.push({ id, target, summary, charLength: content.length });
     }
     return out;
@@ -15491,6 +15713,17 @@ function textSimilarity(a, b) {
   const union = /* @__PURE__ */ new Set([...wordsA, ...wordsB]);
   return intersection / union.size;
 }
+var ATTACHMENT_RETENTION_DEFAULTS = {
+  maxAgeDays: 7,
+  maxTotalBytes: ATTACHMENT_MAX_TOTAL_BYTES
+};
+function pruneAttachments(root, keepSession, retention = ATTACHMENT_RETENTION_DEFAULTS, now = Date.now()) {
+  const shared = retention;
+  return pruneArtifacts(root, keepSession, shared, now);
+}
+async function removeSessionAttachments(sessionId, homeDir) {
+  await rm(attachmentsDir(sessionId, homeDir), { recursive: true, force: true });
+}
 // src/goal/store.ts
 function toGoal(row) {
   const phase = isGoalPhase(row.phase) ? row.phase : "blocked";
@@ -15644,6 +15877,52 @@ function restoreParts(parts, opts) {
     }
   });
 }
+function importParts(parts) {
+  const out = [];
+  for (const part of parts) {
+    if (part.type === "text") {
+      out.push({ type: "text", text: part.text });
+      continue;
+    }
+    if (part.type === "file") {
+      out.push({
+        type: "file",
+        path: part.path,
+        ...part.omitted ? { omitted: part.omitted } : {},
+        ...part.bytes === void 0 ? {} : { bytes: part.bytes }
+      });
+      continue;
+    }
+    if (part.type === "session") {
+      out.push({
+        type: "session",
+        ref: part.ref,
+        ...part.sessionId ? { sessionId: part.sessionId } : {},
+        ...part.title ? { title: part.title } : {},
+        ...part.omitted ? { omitted: part.omitted } : {},
+        ...part.messageCount === void 0 ? {} : { messageCount: part.messageCount },
+        ...part.totalMessages === void 0 ? {} : { totalMessages: part.totalMessages }
+      });
+      continue;
+    }
+    if (part.type !== "image") {
+      assertNeverPart(part);
+      continue;
+    }
+    const { image, mediaType } = part;
+    const media = mediaType ? { mediaType } : {};
+    if (/^https?:/i.test(image)) {
+      out.push({ type: "image", url: image, ...media });
+      continue;
+    }
+    if (isAbsolute(image)) {
+      out.push({ type: "image", path: image, ...media });
+      continue;
+    }
+    return { ok: false, detail: DATA_URL.test(image) ? "image:data-url" : "image:base64" };
+  }
+  return { ok: true, parts: out };
+}
 function stripArtifactData(artifacts) {
   return artifacts.map(({ data: _data, ...rest }) => rest);
 }
@@ -16142,13 +16421,11 @@ var FTS_EXTERNAL_MIGRATIONS = [
 var SessionDB = class {
   db;
   path;
-  msgId = 0;
   constructor(dbPath$1) {
     this.path = dbPath$1 ?? dbPath();
     this.db = openDatabase(this.path);
     migrate(this.db, NS3, SESSION_MIGRATIONS);
     this.migrateFtsIndex();
-    this.refreshMsgId();
   }
   migrateFtsIndex() {
     try {
@@ -16160,9 +16437,8 @@ var SessionDB = class {
       );
     }
   }
-  refreshMsgId() {
-    const row = this.db.prepare("SELECT MAX(id) as maxId FROM messages").get();
-    this.msgId = row?.maxId ?? 0;
+  transaction(fn) {
+    return this.db.transaction(fn)();
   }
   insertSession(meta) {
     this.db.prepare(
@@ -16204,6 +16480,9 @@ var SessionDB = class {
     if (!row) return null;
     return this.rowToMeta(row);
   }
+  hasSession(id) {
+    return this.db.prepare("SELECT 1 FROM sessions WHERE id = ? LIMIT 1").get(id) !== void 0;
+  }
   listSessions(input) {
     const limit = input.limit ?? 20;
     const key = input.sortKey ?? "startedAt";
@@ -16213,7 +16492,7 @@ var SessionDB = class {
     const dir = input.direction ?? "desc";
     let where = "1=1";
     const params = {};
-    if (input.archived !== void 0) {
+    if (input.archived === "any") ; else if (input.archived !== void 0) {
       where += " AND archived = @archived";
       params["archived"] = input.archived ? 1 : 0;
     } else {
@@ -16226,6 +16505,10 @@ var SessionDB = class {
       where += " AND cwd = @cwd";
       params["cwd"] = input.cwd;
     }
+    if (input.updatedSince !== void 0) {
+      where += " AND COALESCE(updated_at, started_at) > @updatedSince";
+      params["updatedSince"] = input.updatedSince;
+    }
     if (input.cursor) {
       where += ` AND ${cursorCol} < @cursor`;
       params["cursor"] = Number(input.cursor);
@@ -16269,11 +16552,20 @@ var SessionDB = class {
   unarchiveSession(id) {
     this.db.prepare("UPDATE sessions SET archived = 0 WHERE id = ?").run(id);
   }
+  importSession(meta, messages) {
+    const run = this.db.transaction(
+      (m, list) => {
+        this.insertSession(m);
+        return list.map((msg) => this.insertMessage({ ...msg, sessionId: m.id }));
+      }
+    );
+    return run(meta, messages);
+  }
   insertMessage(msg) {
-    this.db.prepare(
+    const info = this.db.prepare(
       `
-      INSERT INTO messages (id, session_id, role, content, tool_call_id, tool_calls, tool_results, parts, tool_name, timestamp, token_count, finish_reason, reasoning, turn_facts, active, compacted, observed)
-      VALUES (@id, @sessionId, @role, @content, @toolCallId, @toolCalls, @toolResults, @parts, @toolName, @timestamp, @tokenCount, @finishReason, @reasoning, @turnFacts, 1, 0, 0)
+      INSERT INTO messages (session_id, role, content, tool_call_id, tool_calls, tool_results, parts, tool_name, timestamp, token_count, finish_reason, reasoning, turn_facts, active, compacted, observed)
+      VALUES (@sessionId, @role, @content, @toolCallId, @toolCalls, @toolResults, @parts, @toolName, @timestamp, @tokenCount, @finishReason, @reasoning, @turnFacts, 1, 0, 0)
     `
     ).run({
       ...msg,
@@ -16291,7 +16583,7 @@ var SessionDB = class {
     this.db.prepare(
       `UPDATE sessions SET message_count = message_count + 1, tool_call_count = tool_call_count + @toolCalls, updated_at = MAX(COALESCE(updated_at, 0), @timestamp) WHERE id = @id`
     ).run({ id: msg.sessionId, toolCalls, timestamp: msg.timestamp });
-    if (msg.id > this.msgId) this.msgId = msg.id;
+    return Number(info.lastInsertRowid);
   }
   recordUsage(sessionId, usage) {
     const priced = usage.costUsd !== void 0;
@@ -16353,9 +16645,6 @@ var SessionDB = class {
     }
     return info.changes;
   }
-  nextMessageId() {
-    return ++this.msgId;
-  }
   search(input) {
     const limit = input.limit ?? 5;
     const scope = input.scope ?? "all";
@@ -16444,7 +16733,7 @@ var SessionDB = class {
     return { results };
   }
   pruneCandidates(input) {
-    const clauses = ["ended_at IS NOT NULL", "updated_at < @cutoff"];
+    const clauses = ["ended_at IS NOT NULL", "updated_at < @cutoff", "ended_at < @cutoff"];
     const params = { cutoff: input.olderThanMs };
     if (typeof input.archived === "boolean") {
       clauses.push("archived = @archived");
@@ -16454,6 +16743,15 @@ var SessionDB = class {
     const rows = this.db.prepare(`SELECT * FROM sessions WHERE ${clauses.join(" AND ")} ORDER BY updated_at ASC`).all(params);
     return rows.map((r) => this.rowToMeta(r));
   }
+  sweepOrphanedSessions(input) {
+    const info = this.db.prepare(
+      "UPDATE sessions SET ended_at = @now, end_reason = 'orphan_sweep' WHERE ended_at IS NULL AND updated_at < @cutoff"
+    ).run({ now: input.now, cutoff: input.olderThanMs });
+    return info.changes;
+  }
+  reopenSession(id) {
+    this.db.prepare("UPDATE sessions SET ended_at = NULL, end_reason = NULL WHERE id = ?").run(id);
+  }
   openPruneMatches(input) {
     const clauses = ["ended_at IS NULL", "updated_at < @cutoff"];
     if (!input.includePinned) clauses.push("COALESCE(pinned, 0) = 0");
@@ -16511,10 +16809,8 @@ var SessionDB = class {
       if (middle.length === 0) return null;
       const mark = this.db.prepare("UPDATE messages SET active = 0, compacted = 1 WHERE id = ?");
       for (const row of middle) mark.run(row.id);
-      const summaryId = this.nextMessageId();
-      this.insertMessage({
+      const summaryId = this.insertMessage({
         sessionId,
-        id: summaryId,
         role: "user",
         content: input.summary,
         timestamp: middle[0].timestamp
@@ -16870,8 +17166,64 @@ var SessionReferences = class {
 };
 // src/session/manager.ts
 var AUTO_VACUUM_MIN_FREELIST_RATIO = 0.25;
+var IMPORT_ROLES = /* @__PURE__ */ new Set(["system", "user", "assistant", "tool"]);
+function validateImport(input) {
+  const { meta, messages } = input;
+  if (typeof meta.id !== "string" || meta.id.length === 0) return "meta.id";
+  if (!Number.isFinite(meta.startedAt)) return "meta.startedAt";
+  if (!Number.isFinite(meta.updatedAt)) return "meta.updatedAt";
+  if (meta.endedAt !== void 0 && !Number.isFinite(meta.endedAt)) return "meta.endedAt";
+  const seen = /* @__PURE__ */ new Set();
+  for (const [i, msg] of messages.entries()) {
+    if (!IMPORT_ROLES.has(msg.role)) return `messages[${i}].role`;
+    if (typeof msg.content !== "string") return `messages[${i}].content`;
+    if (!Number.isFinite(msg.timestamp)) return `messages[${i}].timestamp`;
+    if (!Number.isFinite(msg.id) || seen.has(msg.id)) return `messages[${i}].id`;
+    seen.add(msg.id);
+  }
+  return void 0;
+}
+function buildImportedMeta(meta, keepParent) {
+  return {
+    id: meta.id,
+    title: meta.title,
+    displayName: meta.displayName,
+    source: meta.source ?? "import",
+    cwd: meta.cwd,
+    workspaceState: meta.workspaceState,
+    workspaceRoot: meta.workspaceRoot,
+    gitBranch: meta.gitBranch,
+    gitRepoRoot: meta.gitRepoRoot,
+    model: meta.model,
+    tags: [],
+    preview: "",
+    pinned: meta.pinned ?? false,
+    archived: meta.archived ?? false,
+    rewindCount: 0,
+    parentId: keepParent ? meta.parentId : void 0,
+    messageCount: 0,
+    toolCallCount: 0,
+    apiCallCount: 0,
+    inputTokens: 0,
+    outputTokens: 0,
+    cacheReadTokens: 0,
+    cacheWriteTokens: 0,
+    reasoningTokens: 0,
+    estimatedCostUsd: void 0,
+    actualCostUsd: void 0,
+    compressionIneffectiveCount: 0,
+    expiryFinalized: 0,
+    summary: null,
+    plan: null,
+    startedAt: new Date(meta.startedAt),
+    updatedAt: new Date(meta.updatedAt),
+    endedAt: meta.endedAt === void 0 ? void 0 : new Date(meta.endedAt),
+    endReason: meta.endReason
+  };
+}
 var SessionManager = class {
   db;
+  touched = /* @__PURE__ */ new Set();
   queries;
   goals;
   references;
@@ -16930,6 +17282,7 @@ var SessionManager = class {
       endReason: void 0
     };
     this.db.insertSession(meta);
+    this.touched.add(id);
     if (input?.systemPrompt) {
       this.appendMessage(id, { role: "system", content: input.systemPrompt });
     }
@@ -16942,6 +17295,9 @@ var SessionManager = class {
     const messages = this.db.getMessages(id);
     return this.buildSession(id, messages);
   }
+  has(id) {
+    return this.db.hasSession(id);
+  }
   getLatest() {
     const result = this.db.listSessions({ limit: 1, sortKey: "updatedAt", direction: "desc" });
     if (result.sessions.length === 0) return void 0;
@@ -16955,6 +17311,56 @@ var SessionManager = class {
   list(input) {
     return this.db.listSessions(input ?? {});
   }
+  importSession(input) {
+    const { meta, messages } = input;
+    const id = meta.id;
+    const bad2 = validateImport(input);
+    if (bad2) return { ok: false, id, reason: "invalid", detail: bad2 };
+    if (this.db.hasSession(id)) return { ok: false, id, reason: "exists" };
+    const converted = [];
+    for (const [i, msg] of messages.entries()) {
+      const { id: _sourceId, parts, ...rest } = msg;
+      if (!parts) {
+        converted.push(rest);
+        continue;
+      }
+      const result = importParts(parts);
+      if (!result.ok) {
+        return {
+          ok: false,
+          id,
+          reason: "invalid",
+          detail: `messages[${i}].parts.${result.detail}`
+        };
+      }
+      converted.push({ ...rest, parts: result.parts });
+    }
+    const droppedParentId = meta.parentId !== void 0 && !this.db.hasSession(meta.parentId) ? meta.parentId : void 0;
+    try {
+      const newIds = this.db.importSession(
+        buildImportedMeta(meta, droppedParentId === void 0),
+        converted
+      );
+      const idMap = {};
+      messages.forEach((msg, i) => {
+        idMap[msg.id] = newIds[i];
+      });
+      return {
+        ok: true,
+        id,
+        messageCount: newIds.length,
+        idMap,
+        ...droppedParentId === void 0 ? {} : { droppedParentId }
+      };
+    } catch (err) {
+      return {
+        ok: false,
+        id,
+        reason: "failed",
+        ...err instanceof Error ? { detail: err.name } : {}
+      };
+    }
+  }
   updateMeta(id, patch) {
     this.db.updateSessionMeta(id, patch);
   }
@@ -16970,11 +17376,17 @@ var SessionManager = class {
   openPruneMatches(input) {
     return this.db.openPruneMatches(input);
   }
+  sweepOrphans(input) {
+    return this.db.sweepOrphanedSessions(input);
+  }
+  reopen(id) {
+    this.db.reopenSession(id);
+  }
   freelistRatio() {
     return this.db.freelistRatio();
   }
   maybeAutoPrune(opts) {
-    const result = { skipped: false, pruned: 0, vacuumed: false };
+    const result = { skipped: false, swept: 0, pruned: 0, vacuumed: false };
     if (!opts.enabled) return { ...result, skipped: true };
     const now = opts.now?.() ?? Date.now();
     const minInterval = opts.minIntervalMs ?? 24 * 60 * 60 * 1e3;
@@ -16984,6 +17396,7 @@ var SessionManager = class {
         return { ...result, skipped: true };
       }
       const cutoff = now - opts.retentionDays * 24 * 60 * 60 * 1e3;
+      const swept = this.db.sweepOrphanedSessions({ olderThanMs: cutoff, now });
       const victims = this.db.pruneCandidates({ olderThanMs: cutoff });
       let pruned = 0;
       for (const s of victims) if (this.db.deleteSession(s.id)) pruned++;
@@ -16997,27 +17410,50 @@ var SessionManager = class {
           if (vacuumed) this.db.setMeta("last_vacuum", String(now));
         }
       }
-      return { skipped: false, pruned, vacuumed };
+      return { skipped: false, swept, pruned, vacuumed };
     } catch (cause) {
       return { ...result, error: cause instanceof Error ? cause.message : String(cause) };
     }
   }
+  maybePruneAttachments(root, keepSession, opts = {}) {
+    const now = opts.now?.() ?? Date.now();
+    const minInterval = opts.minIntervalMs ?? 24 * 60 * 60 * 1e3;
+    try {
+      if (!this.db.claimMaintenanceSlot("last_attachment_prune", minInterval, now)) return 0;
+      return pruneAttachments(root, keepSession, ATTACHMENT_RETENTION_DEFAULTS, now);
+    } catch {
+      return 0;
+    }
+  }
   delete(id) {
     return this.db.deleteSession(id);
   }
   endSession(id, reason9 = "user_stop") {
     this.db.updateSessionMeta(id, { endedAt: /* @__PURE__ */ new Date(), endReason: reason9 });
   }
-  appendMessage(sessionId, msg) {
-    const id = this.db.nextMessageId();
-    this.db.insertMessage({ ...msg, sessionId, id, timestamp: Date.now() });
-    const meta = this.db.getSessionMeta(sessionId);
-    if (!meta) return id;
-    if (!meta.title && msg.role === "user") {
-      const title = msg.content.slice(0, 50).replace(/\n/g, " ");
-      this.db.updateSessionMeta(sessionId, { title });
+  endTouchedSessions(reason9 = "process_exit") {
+    let ended = 0;
+    for (const id of this.touched) {
+      try {
+        this.endSession(id, reason9);
+        ended++;
+      } catch {
+      }
     }
-    return id;
+    return ended;
+  }
+  appendMessage(sessionId, msg) {
+    this.touched.add(sessionId);
+    return this.db.transaction(() => {
+      const id = this.db.insertMessage({ ...msg, sessionId, timestamp: Date.now() });
+      const meta = this.db.getSessionMeta(sessionId);
+      if (!meta) return id;
+      if (!meta.title && msg.role === "user") {
+        const title = msg.content.slice(0, 50).replace(/\n/g, " ");
+        this.db.updateSessionMeta(sessionId, { title });
+      }
+      return id;
+    });
   }
   attachTurnFacts(sessionId, messageId, input) {
     this.db.attachTurnFacts(sessionId, messageId, input);
@@ -17026,6 +17462,7 @@ var SessionManager = class {
     this.db.setOpenTurn(sessionId, from);
   }
   recordUsage(sessionId, usage) {
+    this.touched.add(sessionId);
     this.db.recordUsage(sessionId, usage);
   }
   markObserved(sessionId, messageId) {
@@ -17195,6 +17632,30 @@ function firstSentence(text, maxLen) {
   const lastSpace = cut.lastIndexOf(" ");
   return (lastSpace > maxLen * 0.6 ? cut.slice(0, lastSpace) : cut) + "\u2026";
 }
+// src/session/persist-failure.ts
+function codeOf(cause) {
+  if (typeof cause !== "object" || cause === null) return "";
+  const code = cause.code;
+  return typeof code === "string" ? code : "";
+}
+function classifyPersistFailure(cause) {
+  const code = codeOf(cause);
+  if (!code) return "unknown";
+  if (code.startsWith("SQLITE_FULL") || code === "ENOSPC") return "disk-full";
+  if (code.startsWith("SQLITE_BUSY") || code.startsWith("SQLITE_LOCKED")) return "locked";
+  if (code.startsWith("SQLITE_READONLY") || code.startsWith("SQLITE_PERM") || code.startsWith("SQLITE_CANTOPEN") || code === "EACCES" || code === "EPERM" || code === "EROFS") {
+    return "read-only";
+  }
+  if (code.startsWith("SQLITE_CORRUPT") || code === "SQLITE_NOTADB") return "corrupt";
+  if (code.startsWith("SQLITE_IOERR") || code === "EIO") return "io-error";
+  return "unknown";
+}
+function isTransientPersistFailure(kind) {
+  return kind === "locked";
+}
+function persistFailureCode(cause) {
+  return codeOf(cause);
+}
 function isSettled(phase) {
   return phase === "complete";
 }
@@ -18456,6 +18917,14 @@ var MIGRATIONS3 = [
         );
       `);
     }
+  },
+  {
+    id: "schedule-show-in-session-list",
+    version: 2,
+    description: "\u4EFB\u52A1\u591A\u4E00\u683C\uFF1A\u8DD1\u5B8C\u7684\u4F1A\u8BDD\u76F4\u63A5\u8FDB\u4F1A\u8BDD\u5217\u8868\u5417\uFF08\u7F3A\u7701\u4E0D\u8FDB\uFF09",
+    up: (db) => {
+      db.exec(`ALTER TABLE schedules ADD COLUMN show_in_session_list INTEGER NOT NULL DEFAULT 0;`);
+    }
   }
 ];
 var ScheduleStore = class {
@@ -18480,6 +18949,7 @@ var ScheduleStore = class {
       prompt: input.prompt,
       workDir: input.workDir,
       ...input.model !== void 0 ? { model: input.model } : {},
+      ...input.role !== void 0 ? { role: input.role } : {},
       permission: input.permission,
       allowTools: input.allowTools ?? [],
       allowOperations: input.allowOperations ?? [],
@@ -18487,6 +18957,7 @@ var ScheduleStore = class {
       maxTurns: input.maxTurns ?? SCHEDULE_DEFAULTS.maxTurns,
       maxBudgetUsd: input.maxBudgetUsd,
       timeoutMs: input.timeoutMs ?? SCHEDULE_DEFAULTS.timeoutMs,
+      ...input.showInSessionList === true ? { showInSessionList: true } : {},
       trigger: input.trigger,
       ...input.startDate !== void 0 ? { startDate: input.startDate } : {},
       ...input.endDate !== void 0 ? { endDate: input.endDate } : {},
@@ -18498,13 +18969,15 @@ var ScheduleStore = class {
       `INSERT INTO schedules (
            id, name, enabled, created_at, updated_at, prompt, work_dir, model, role,
            skills, mcp_servers, permission, allow_tools, allow_operations, allow_rules,
-           max_turns, max_budget_usd, timeout_ms, trigger_kind, trigger_spec,
+           max_turns, max_budget_usd, timeout_ms, show_in_session_list,
+           trigger_kind, trigger_spec,
            start_date, end_date, os_backend, os_task_id, os_registered_at, os_command,
            last_run_at, last_status
          ) VALUES (
            @id, @name, @enabled, @created_at, @updated_at, @prompt, @work_dir, @model, @role,
            @skills, @mcp_servers, @permission, @allow_tools, @allow_operations, @allow_rules,
-           @max_turns, @max_budget_usd, @timeout_ms, @trigger_kind, @trigger_spec,
+           @max_turns, @max_budget_usd, @timeout_ms, @show_in_session_list,
+           @trigger_kind, @trigger_spec,
            @start_date, @end_date, @os_backend, @os_task_id, @os_registered_at, @os_command,
            @last_run_at, @last_status
          )`
@@ -18590,6 +19063,16 @@ var ScheduleStore = class {
     const rows = this.db.prepare("SELECT * FROM schedule_runs WHERE schedule_id = ? ORDER BY started_at DESC LIMIT ?").all(scheduleId, limit);
     return rows.map(runFromRow);
   }
+  recordedSessions(scheduleId, limit = 2) {
+    if (limit <= 0) return [];
+    const rows = this.db.prepare(
+      `SELECT session_id FROM schedule_runs
+           WHERE schedule_id = ? AND session_id IS NOT NULL
+           ORDER BY started_at DESC
+           LIMIT ?`
+    ).all(scheduleId, limit);
+    return rows.map((r) => r.session_id);
+  }
   listRecentRuns(limit = 50) {
     const rows = this.db.prepare("SELECT * FROM schedule_runs ORDER BY started_at DESC LIMIT ?").all(limit);
     return rows.map(runFromRow);
@@ -18611,6 +19094,7 @@ var ScheduleStore = class {
            mcp_servers = @mcp_servers, permission = @permission, allow_tools = @allow_tools,
            allow_operations = @allow_operations, allow_rules = @allow_rules,
            max_turns = @max_turns, max_budget_usd = @max_budget_usd, timeout_ms = @timeout_ms,
+           show_in_session_list = @show_in_session_list,
            trigger_kind = @trigger_kind, trigger_spec = @trigger_spec,
            start_date = @start_date, end_date = @end_date, os_backend = @os_backend,
            os_task_id = @os_task_id, os_registered_at = @os_registered_at,
@@ -18633,6 +19117,7 @@ function mergeSchedulePatch(current, patch) {
       "maxTurns",
       "maxBudgetUsd",
       "timeoutMs",
+      "showInSessionList",
       "trigger",
       "enabled"
     ])
@@ -18643,9 +19128,10 @@ function mergeSchedulePatch(current, patch) {
     if (value === null) delete next[key];
     else next[key] = value;
   }
+  if (next.showInSessionList !== true) delete next.showInSessionList;
   return next;
 }
-var CLEARABLE = ["model", "startDate", "endDate"];
+var CLEARABLE = ["model", "role", "startDate", "endDate"];
 function toRow(def) {
   return {
     id: def.id,
@@ -18666,6 +19152,7 @@ function toRow(def) {
     max_turns: def.maxTurns,
     max_budget_usd: def.maxBudgetUsd,
     timeout_ms: def.timeoutMs,
+    show_in_session_list: def.showInSessionList === true ? 1 : 0,
     trigger_kind: def.trigger.kind,
     trigger_spec: JSON.stringify(def.trigger),
     start_date: def.startDate ?? null,
@@ -18698,6 +19185,7 @@ function fromRow(row) {
     maxTurns: row.max_turns,
     maxBudgetUsd: row.max_budget_usd,
     timeoutMs: row.timeout_ms,
+    ...row.show_in_session_list !== 0 ? { showInSessionList: true } : {},
     trigger: JSON.parse(row.trigger_spec),
     ...row.start_date !== null ? { startDate: row.start_date } : {},
     ...row.end_date !== null ? { endDate: row.end_date } : {},
@@ -19983,9 +20471,9 @@ function buildAutomaton(patterns) {
   while (queue.length > 0) {
     const cur = queue.shift();
     for (const [ch, child] of nodes[cur].next) {
-      let fail8 = nodes[cur].fail;
-      while (fail8 !== 0 && !nodes[fail8].next.has(ch)) fail8 = nodes[fail8].fail;
-      const target = nodes[fail8].next.get(ch);
+      let fail9 = nodes[cur].fail;
+      while (fail9 !== 0 && !nodes[fail9].next.has(ch)) fail9 = nodes[fail9].fail;
+      const target = nodes[fail9].next.get(ch);
       nodes[child].fail = target !== void 0 && target !== child ? target : 0;
       nodes[child].out.push(...nodes[nodes[child].fail].out);
       queue.push(child);
@@ -20210,15 +20698,30 @@ function runCommandHook(config, event, workDir) {
   const injectedEnv = injectEpochEnv(event, config.pluginRoot);
   const hookEnv = { ...baseEnv, ...injectedEnv, ...config.env };
   return new Promise((resolve16) => {
-    const child = spawn(config.command, {
-      shell: true,
-      cwd: workDir,
-      env: hookEnv,
-      stdio: ["pipe", "pipe", "pipe"]
-    });
     let stdout = "";
     let stderr = "";
     let settled = false;
+    const failToStart = (err) => {
+      if (settled) return;
+      settled = true;
+      resolve16({
+        exitCode: -1,
+        stdout,
+        stderr,
+        blocked: false,
+        rejectReason: t("hook_load.spawn_failed", { message: err.message })
+      });
+    };
+    const child = guardSpawn(
+      () => spawn(config.command, {
+        shell: true,
+        cwd: workDir,
+        env: hookEnv,
+        stdio: ["pipe", "pipe", "pipe"]
+      }),
+      failToStart
+    );
+    if (!child) return;
     const timer = setTimeout(() => {
       if (!settled) {
         settled = true;
@@ -20270,15 +20773,7 @@ function runCommandHook(config, event, workDir) {
     });
     child.on("error", (err) => {
       clearTimeout(timer);
-      if (settled) return;
-      settled = true;
-      resolve16({
-        exitCode: -1,
-        stdout,
-        stderr,
-        blocked: false,
-        rejectReason: t("hook_load.spawn_failed", { message: err.message })
-      });
+      failToStart(err);
     });
     const input = JSON.stringify({
       session_id: event.sessionId,
@@ -22043,6 +22538,7 @@ function listWorkspaceFiles(root) {
 }
 function listFromGit(root) {
   if (!existsSync(join(root, ".git"))) return null;
+  if (!canProbeGit()) return null;
   try {
     const out = execFileSync("git", ["ls-files", "-co", "--exclude-standard", "-z"], {
       cwd: root,
@@ -22251,17 +22747,6 @@ function readSession(ref, opts, usedBytes) {
     })
   };
 }
-var ATTACHMENT_RETENTION_DEFAULTS = {
-  maxAgeDays: 7,
-  maxTotalBytes: ATTACHMENT_MAX_TOTAL_BYTES
-};
-function pruneAttachments(root, keepSession, retention = ATTACHMENT_RETENTION_DEFAULTS, now = Date.now()) {
-  const shared = retention;
-  return pruneArtifacts(root, keepSession, shared, now);
-}
-async function removeSessionAttachments(sessionId, homeDir) {
-  await rm(attachmentsDir(sessionId, homeDir), { recursive: true, force: true });
-}
 var OPENABLE_EXTENSIONS = /* @__PURE__ */ new Set([".png", ".jpg", ".jpeg", ".gif", ".webp"]);
 function artifactOpenRefusal(path, homeDir) {
   const root = homeDir === void 0 ? artifactsDir() : artifactsDir(void 0, homeDir);
@@ -22296,12 +22781,12 @@ async function openArtifact(path, homeDir) {
   if (refusal2) throw new Error(describeArtifactRefusal(refusal2));
   const launch = artifactLaunchArgv(path, process.platform, homeDir);
   if (!launch) throw new Error(describeArtifactRefusal("launch-failed"));
-  await new Promise((done2, fail8) => {
+  await new Promise((done2, fail9) => {
     try {
       const child = spawn(launch.command, launch.args, { stdio: "ignore", detached: true });
       child.on(
         "error",
-        (err) => fail8(
+        (err) => fail9(
           new Error(
             t("artifact.open_launch_failed_detail", {
               reason: describeArtifactRefusal("launch-failed"),
@@ -22315,7 +22800,7 @@ async function openArtifact(path, homeDir) {
         done2();
       });
     } catch (err) {
-      fail8(
+      fail9(
         new Error(
           t("artifact.open_launch_failed_detail", {
             reason: describeArtifactRefusal("launch-failed"),
@@ -23025,31 +23510,15 @@ var CodeSandbox = class {
       stdio: ["ignore", "pipe", "pipe"],
       ...IS_WINDOWS ? { windowsHide: true } : {}
     };
-    const child = spawn(command, args, spawnOpts);
     return new Promise((resolve16) => {
       let stdout = "";
       let stderr = "";
       let killedForOutput = false;
-      let outDecoder = null;
-      let errDecoder = null;
-      child.stdout?.on("data", (c) => {
-        if (killedForOutput) return;
-        outDecoder ??= createStreamDecoder();
-        stdout += outDecoder.write(c);
-        if (stdout.length >= MAX_OUTPUT) {
-          killedForOutput = true;
-          stdout = stdout.slice(0, MAX_OUTPUT);
-          child.kill("SIGKILL");
-        }
-      });
-      child.stderr?.on("data", (c) => {
-        if (stderr.length >= MAX_OUTPUT) return;
-        errDecoder ??= createStreamDecoder();
-        stderr += errDecoder.write(c);
-      });
-      const onAbort = () => child.kill("SIGKILL");
-      opts.signal?.addEventListener("abort", onAbort, { once: true });
-      child.on("error", (err) => {
+      let child = null;
+      const onAbort = () => {
+        child?.kill("SIGKILL");
+      };
+      const failToStart = (err) => {
         opts.signal?.removeEventListener("abort", onAbort);
         if (err.code === "ENOENT") {
           resolve16({
@@ -23064,12 +23533,34 @@ var CodeSandbox = class {
         resolve16({
           success: false,
           output: "",
-          error: `[\u9519\u8BEF] ${err.message}`,
+          error: `[\u9519\u8BEF] ${err.message}\uFF08command=${command}\uFF0Ccwd=${spawnOpts.cwd ?? ""}\uFF09`,
           errorType: "runtime",
           duration: Date.now() - start
         });
+      };
+      child = guardSpawn(() => spawn(command, args, spawnOpts), failToStart);
+      if (!child) return;
+      const proc = child;
+      let outDecoder = null;
+      let errDecoder = null;
+      proc.stdout?.on("data", (c) => {
+        if (killedForOutput) return;
+        outDecoder ??= createStreamDecoder();
+        stdout += outDecoder.write(c);
+        if (stdout.length >= MAX_OUTPUT) {
+          killedForOutput = true;
+          stdout = stdout.slice(0, MAX_OUTPUT);
+          proc.kill("SIGKILL");
+        }
       });
-      child.on("close", (code, sig) => {
+      proc.stderr?.on("data", (c) => {
+        if (stderr.length >= MAX_OUTPUT) return;
+        errDecoder ??= createStreamDecoder();
+        stderr += errDecoder.write(c);
+      });
+      opts.signal?.addEventListener("abort", onAbort, { once: true });
+      proc.on("error", failToStart);
+      proc.on("close", (code, sig) => {
         opts.signal?.removeEventListener("abort", onAbort);
         if (!killedForOutput) stdout += outDecoder?.end() ?? "";
         if (stderr.length < MAX_OUTPUT) stderr += errDecoder?.end() ?? "";
@@ -23166,4 +23657,4 @@ function trunc(stdout, stderr) {
  *    `--tree` 的命令帮助里，让用户自己知道 `--tree` 意味着什么。
  */
 
-export { AGENT_ROLE_DIAG_MODULE, ARTIFACT_MAX_TOTAL_BYTES, ARTIFACT_RETENTION_DEFAULTS, ATTACHMENT_MAX_TOTAL_BYTES, ATTACHMENT_RETENTION_DEFAULTS, AgentLoop, ApprovalCache, BLOCKED_TOOLS, BudgetGuard, BudgetStore, CHECKPOINT_MAX_TOTAL_BYTES, CLAUDE_EVENT_NAMES, CLAUDE_TOOL_NAMES, CODE_MODE_LIMITS, CODE_MODE_SDK_TAG, CONFIG_KEYS, CURRENT_CONFIG_VERSION, CheckpointManager, CheckpointStore, CodeSandbox, ComplianceEngine, ContextCompressor, DEFAULT_COMPLIANCE_ACTIONS, DEFAULT_COMPLIANCE_SETTINGS, DEFAULT_COMPRESSION_THRESHOLD, DEFAULT_GOAL_MAX_ROUNDS, DEFAULT_MAX_HOLD_CHARS, DelegateManager, EMPTY_RULES, EPOCH_DISK_LEDGER, EpochConfigSchema, FTS_TABLES, FTS_TRIGGERS, GOAL_BLOCK_CODES, GoalService, GoalStore, HEADLESS_AUDIT_CODES, HookManager, INSTRUCTION_BUDGET_CHARS, INSTRUCTION_FILES, ImageLoadError, ImportTrustStore, LAUNCHD_LABEL_PREFIX, LOCK_HEARTBEAT_MS, LOCK_STALE_MS, LastOpenSessions, MARKETPLACE_DISPLAY_FIELDS, MARKETPLACE_FILE, MAX_AUDIT_ENTRIES, MAX_COMMAND_DEPTH, MAX_GOAL_MAX_ROUNDS, MAX_IMPORT_DEPTH, MAX_LAST_OPEN_SESSIONS, MAX_OBJECTIVE_CHARS, MAX_REASON_CHARS, MAX_RECENT_WORKSPACES, MODEL_GIVE_UP_THRESHOLD, MULTIMODAL_DEFAULTS, ManagedPolicyError, ManagedSettingsSchema, MemoryManager, MemoryReviewer, ModelFailureTracker, NOMINAL_TOTAL_BYTES, NO_REVEALED_TOOLS, PACK_EXCLUDES, PACK_MAX_BYTES, PACK_MAX_FILES, PERMISSION_AUDIT_CODES, PLUGIN_LAYOUT, PLUGIN_MANIFEST_FILE, PLUGIN_MANIFEST_KEYS, PLUGIN_NAME_PATTERN, PLUGIN_ROOT_ENV, PLUGIN_ROOT_TOKEN, PLUGIN_VISIBILITY, POLICY_DECISIONS, PROBE_VERSION, PROJECT_AGENTS_SUBDIR, PROVIDER_NO_CREDENTIAL, PermissionManager, PlanModeState, PluginAuthorSchema, PluginStore, PolicyRuleSchema, ProviderError, ProviderRouter, RECORDING_KEEP_RUNS, RECORDING_MAX_BYTES, ROLE_FRONTMATTER_SCHEMA, RUN_CODE_TOOL, RecentWorkspaces, SANDBOX_COVERS, SANDBOX_EXCLUDES, SCALAR_KEYS, SCHEDULE_DEFAULTS, SCHEDULE_DEFAULT_ALLOWLIST, SCHEDULE_ISSUE_CODES, SCHTASKS_FOLDER, SESSION_MESSAGES_READ_TOOL, SESSION_MESSAGES_SEARCH_TOOL, SESSION_QUERY_TOOLS, SESSION_SEARCH_TOOL, SESSION_TRACE_TOOL, SETTINGS_LAYER_ORDER, SETTING_WRITE_KEYS, SETTING_WRITE_LAYERS, SKILL_CREATE_TOOL, SKILL_EDIT_TOOL, SKILL_PATCH_TOOL, SKILL_VIEW_TOOL, SKILL_WRITE_FILE_TOOL, SLASH_COMMANDS_DIAG_MODULE, ScheduleRecorder, ScheduleRegistrar, ScheduleStore, SessionManager, SessionQueries, SessionReferences, SettingsFileError, SettingsFileSchema, SkillLearner, SkillSystem, TOOL_SEARCH_TOOL, TaskNoticeTracker, ToolRegistry, TrackerDB, TrustManager, Workspace, acquireScheduleLock, addMarketplace, addUsage, admitArtifact, admitArtifacts, affectedPaths, artifactLaunchArgv, artifactOpenRefusal, assertLevelAllowed, blockedRoleTools, buildContextBreakdown, buildFireArgv, buildFtsMatchQuery, buildSchemaExports, buildSystemPrompt, buildTrigramMatchQuery, builtinRoles, checkEpochVersion, checkFtsHealth, checkShadowing, classifyProviderError, clearModelCache, coalesceRecording, codeModeWorkerPath, commandNameFromRelPath, compileRuleLists, compressionOptions, computeCost, computeCostMicros, computeExecHash, countRules, createAllowAllGate, createAllowAllImportGate, createAskQuestionTool, createCodeExecTool, createDelegateTool, createDenyAllGate, createDenyAllImportGate, createGoalTool, createImportGate, createMemoryTool, createPlanModeTools, createRoleFile, createRoleScope, createRunCodeTool, createScheduleDraftTool, createSessionMessagesReadTool, createSessionMessagesSearchTool, createSessionSearchTool, createSessionSearchTools, createSessionTraceTool, createSkillViewTool, createSkillWriteTools, createTodoTool, createToolRevealState, createToolScope, createToolSearchTool, createTrustGate, currentEpochVersion, decideImport, decideTrust, defaultConfig, defaultModelOf, describeArtifactRefusal, describeBackgroundTask, describeHeadlessPolicy, describeIsolation, describeJsonError, diagnoseSchedules, discoverMarkdown, discoverModels, discoverProject, displayCurrency, draftCommandLine, draftWidening, escapeRuleContent, estimateImageTokens, estimateRunTokens, estimateTokens, evaluateSelection, expandCommand, expandImports, explainSetting, extractArchive, findInstructionFiles, findProjectInstructions, findRole, formatBytes, formatSkillIndex, formatUsd, gateForTool, getCapability, getConfigIssues, getConfigOrigins, getImportGate, getTrustGate, hasDedicatedExecContent, hasExecTierContent, hasPromptCaching, hasProviderCredentials, hasReadTierContent, imageFromBase64, imageFromPath, imagePartTokens, importSkills, installPlugin, instructionDirs, instructionNotices, intervalSlots, inventoryProjectExtensions, inventoryTotal, isBlockCode, isCodeModeDeferred, isEmptyRules, isGoalPhase, isNonInteractive, isReadOnlySubCall, isSettingWriteLayer, isValidPluginName, isWithinWindow, isWritableSettingKey, labelSlug, layerRank, listRunningSchedules, listSessionCandidates, listWorkspaceFiles, loadCommandDefinitions, loadCommandFile, loadCommands, loadConfig, loadHookSources, loadKeybindings, loadLexiconDir, loadLexiconFiles, loadPlugins, loadPolicyFiles, loadPolicyRules, loadRoleDefinitions, loadRoleDir, loadedImports, localDateString, managedSwitchNotes, mapClaudeToolName, mapEpochToolName, mapOperationType, matchPreauthorization, matchRuleLists, matchesHook, mentionsPluginRoot, mergeHeadlessPolicy, mergeRoles, mergeSchedulePatch, microsToUsd, modelListCandidates, needsAllowlist, nextFallbackModel, nextRunAt, noConfigOrigins, noManagedPolicy, noPlugins, openArtifact, originOf, packFileName, packPlugin, parseClaudeSettingsHooks, parseClock, parseDate, parseFrontmatter, parseHooksConfig, parseHooksConfigVerbose, parseImportLine, parseModelList, parseRoleDefinition, parseScheduleDraft, parseSkillFrontmatter, parseTrigger, pendingImageTokens, persistParts, persistToolResults, persistedUsage, planPack, previewSkillImport, pricingFor, projectEntryForDisplay, pruneArtifacts, pruneAttachments, pruneRecordings, pruneSchedules, readImageSize, readMarketplaces, readPluginManifest, readPluginRecords, readProviderKeyEnv, readRecording, readSessionSurface, reclaimFtsSpace, redactLine, refreshOpenRouterMetadata, removeMarketplace, removeRecordings, removeRoleFile, removeSessionArtifacts, removeSessionAttachments, renderImportTree, renderProjectContext, renderSdkDeclaration, renderSelfIndex, repairSchedules, resolveArtifactRetention, resolveCodeModeWorker, resolveComplianceDirs, resolveEntrySource, resolveInWorkspace, resolveMarketplaceRef, resolveMentions, resolveMultimodalPolicy, resolvePolicyDirs, resolvePricingAt, resolveProjectRoot, resolveScheduleBackend, resolveSessionReference, resolveSessionVisibility, resolveSettings, resolveSkillDirs, resolveSource, resolveTar, resolveWorkspace, restoreParts, revealScopedProvider, roleScopedProvider, roleSourceLabel, ruleCovers, ruleFromString, ruleToString, runCode, runCommand2 as runCommand, sanitizeArgNames, sanitizeCommand, sanitizeFtsQuery, sanitizePath, sanitizeToolOutput, scanInstructions, scanPluginDir, scanSkillDirs, searchMarketplaces, setDisplayCurrency, setImportGate, setPluginEnabled, setTrustGate, settingValueChoices, settingValueKind, settingWriteApply, settingWriteLayers, settingWriteTargets, skillIndexDescription, skillIndexResidency, skillIndexStats, sniffMediaType, splitFrontmatter, staticToolProvider, stripArtifactData, substitutePluginRoot, suggestRuleFromApproval, systemOpenArgv, systemPromptSegments, toPosix, toolDefinitionTokens, toolMatches, toolTableTokens, totalTokens, traceSession, triggerPeriodMs, unescapeRuleContent, uninstallPlugin, unknownRoleSkills, unknownRoleTools, unloadedInstructionFiles, updateMarketplace, updatePlugin, usdToMicros, validateSchedule, validateTrigger, validateWindow, withGoalCompression, withGoalPrompt, workspaceDisplayPath, writeSettingValue };
+export { AGENT_ROLE_DIAG_MODULE, ARTIFACT_MAX_TOTAL_BYTES, ARTIFACT_RETENTION_DEFAULTS, ATTACHMENT_MAX_TOTAL_BYTES, ATTACHMENT_RETENTION_DEFAULTS, AgentLoop, ApprovalCache, BLOCKED_TOOLS, BudgetGuard, BudgetStore, CHECKPOINT_MAX_TOTAL_BYTES, CLAUDE_EVENT_NAMES, CLAUDE_TOOL_NAMES, CODE_MODE_LIMITS, CODE_MODE_SDK_TAG, CONFIG_KEYS, CURRENT_CONFIG_VERSION, CheckpointManager, CheckpointStore, CodeSandbox, ComplianceEngine, ContextCompressor, DEFAULT_COMPLIANCE_ACTIONS, DEFAULT_COMPLIANCE_SETTINGS, DEFAULT_COMPRESSION_THRESHOLD, DEFAULT_GOAL_MAX_ROUNDS, DEFAULT_MAX_HOLD_CHARS, DelegateManager, EMPTY_RULES, EPOCH_DISK_LEDGER, EpochConfigSchema, FTS_TABLES, FTS_TRIGGERS, GOAL_BLOCK_CODES, GoalService, GoalStore, HEADLESS_AUDIT_CODES, HookManager, INSTRUCTION_BUDGET_CHARS, INSTRUCTION_FILES, ImageLoadError, ImportTrustStore, LAUNCHD_LABEL_PREFIX, LOCK_HEARTBEAT_MS, LOCK_STALE_MS, LastOpenSessions, MARKETPLACE_DISPLAY_FIELDS, MARKETPLACE_FILE, MAX_AUDIT_ENTRIES, MAX_COMMAND_DEPTH, MAX_GOAL_MAX_ROUNDS, MAX_IMPORT_DEPTH, MAX_LAST_OPEN_SESSIONS, MAX_OBJECTIVE_CHARS, MAX_REASON_CHARS, MAX_RECENT_WORKSPACES, MODEL_GIVE_UP_THRESHOLD, MULTIMODAL_DEFAULTS, ManagedPolicyError, ManagedSettingsSchema, MemoryManager, MemoryReviewer, ModelFailureTracker, NOMINAL_TOTAL_BYTES, NO_REVEALED_TOOLS, PACK_EXCLUDES, PACK_MAX_BYTES, PACK_MAX_FILES, PERMISSION_AUDIT_CODES, PLUGIN_LAYOUT, PLUGIN_MANIFEST_FILE, PLUGIN_MANIFEST_KEYS, PLUGIN_NAME_PATTERN, PLUGIN_ROOT_ENV, PLUGIN_ROOT_TOKEN, PLUGIN_VISIBILITY, POLICY_DECISIONS, PROBE_VERSION, PROJECT_AGENTS_SUBDIR, PROVIDER_NO_CREDENTIAL, PermissionManager, PlanModeState, PluginAuthorSchema, PluginStore, PolicyRuleSchema, ProviderError, ProviderRouter, RECORDING_KEEP_RUNS, RECORDING_MAX_BYTES, ROLE_FRONTMATTER_SCHEMA, RUN_CODE_TOOL, RecentWorkspaces, SANDBOX_COVERS, SANDBOX_EXCLUDES, SCALAR_KEYS, SCHEDULE_DEFAULTS, SCHEDULE_DEFAULT_ALLOWLIST, SCHEDULE_FORM_BUDGET_USD, SCHEDULE_ISSUE_CODES, SCHTASKS_FOLDER, SESSION_MESSAGES_READ_TOOL, SESSION_MESSAGES_SEARCH_TOOL, SESSION_QUERY_TOOLS, SESSION_SEARCH_TOOL, SESSION_TRACE_TOOL, SETTINGS_LAYER_ORDER, SETTING_WRITE_KEYS, SETTING_WRITE_LAYERS, SKILL_CREATE_TOOL, SKILL_EDIT_TOOL, SKILL_PATCH_TOOL, SKILL_VIEW_TOOL, SKILL_WRITE_FILE_TOOL, SLASH_COMMANDS_DIAG_MODULE, ScheduleRecorder, ScheduleRegistrar, ScheduleStore, SessionManager, SessionQueries, SessionReferences, SettingsFileError, SettingsFileSchema, SkillLearner, SkillSystem, TOOL_SEARCH_TOOL, TaskNoticeTracker, ToolRegistry, TrackerDB, TrustManager, Workspace, acquireScheduleLock, addMarketplace, addUsage, admitArtifact, admitArtifacts, affectedPaths, artifactLaunchArgv, artifactOpenRefusal, assertLevelAllowed, blockedRoleTools, buildContextBreakdown, buildFireArgv, buildFtsMatchQuery, buildSchemaExports, buildSystemPrompt, buildTrigramMatchQuery, builtinRoles, checkEpochVersion, checkFtsHealth, checkShadowing, classifyPersistFailure, classifyProviderError, clearModelCache, coalesceRecording, codeModeWorkerPath, commandNameFromRelPath, compileRuleLists, compressionOptions, computeCost, computeCostMicros, computeExecHash, countRules, createAllowAllGate, createAllowAllImportGate, createAskQuestionTool, createCodeExecTool, createDelegateTool, createDenyAllGate, createDenyAllImportGate, createGoalTool, createImportGate, createMemoryTool, createPlanModeTools, createRoleFile, createRoleScope, createRunCodeTool, createScheduleDraftTool, createSessionMessagesReadTool, createSessionMessagesSearchTool, createSessionSearchTool, createSessionSearchTools, createSessionTraceTool, createSkillViewTool, createSkillWriteTools, createTodoTool, createToolRevealState, createToolScope, createToolSearchTool, createTrustGate, currentEpochVersion, decideImport, decideTrust, defaultConfig, defaultModelOf, describeArtifactRefusal, describeBackgroundTask, describeHeadlessPolicy, describeIsolation, describeJsonError, diagnoseSchedules, discoverMarkdown, discoverModels, discoverProject, displayAllows, displayCurrency, draftCommandLine, draftWidening, escapeRuleContent, estimateImageTokens, estimateRunTokens, estimateTokens, evaluateSelection, expandCommand, expandImports, explainSetting, extractArchive, findInstructionFiles, findProjectInstructions, findRole, formatBytes, formatSkillIndex, formatUsd, gateForTool, getCapability, getConfigIssues, getConfigOrigins, getImportGate, getTrustGate, hasDedicatedExecContent, hasExecTierContent, hasPromptCaching, hasProviderCredentials, hasReadTierContent, imageFromBase64, imageFromPath, imagePartTokens, importParts, importSkills, installPlugin, instructionDirs, instructionNotices, intervalSlots, inventoryProjectExtensions, inventoryTotal, isBlockCode, isCodeModeDeferred, isEmptyRules, isGoalPhase, isNonInteractive, isReadOnlySubCall, isSettingWriteLayer, isTransientPersistFailure, isValidPluginName, isWithinWindow, isWritableSettingKey, labelSlug, layerRank, listRunningSchedules, listSessionCandidates, listWorkspaceFiles, loadCommandDefinitions, loadCommandFile, loadCommands, loadConfig, loadHookSources, loadKeybindings, loadLexiconDir, loadLexiconFiles, loadPlugins, loadPolicyFiles, loadPolicyRules, loadRoleDefinitions, loadRoleDir, loadedImports, localDateString, managedSwitchNotes, mapClaudeToolName, mapEpochToolName, mapOperationType, matchPreauthorization, matchRuleLists, matchesHook, mentionsPluginRoot, mergeHeadlessPolicy, mergeRoles, mergeSchedulePatch, microsToUsd, modelListCandidates, needsAllowlist, nextFallbackModel, nextRunAt, noConfigOrigins, noManagedPolicy, noPlugins, openArtifact, originOf, packFileName, packPlugin, parseClaudeSettingsHooks, parseClock, parseDate, parseFrontmatter, parseHooksConfig, parseHooksConfigVerbose, parseImportLine, parseModelList, parseRoleDefinition, parseScheduleDraft, parseSkillFrontmatter, parseTrigger, pendingImageTokens, persistFailureCode, persistParts, persistToolResults, persistedUsage, planPack, previewSkillImport, pricingFor, projectEntryForDisplay, pruneArtifacts, pruneAttachments, pruneRecordings, pruneSchedules, readImageSize, readMarketplaces, readPluginManifest, readPluginRecords, readProviderKeyEnv, readRecording, readSessionSurface, reclaimFtsSpace, redactLine, refreshOpenRouterMetadata, removeMarketplace, removeRecordings, removeRoleFile, removeSessionArtifacts, removeSessionAttachments, renderImportTree, renderProjectContext, renderSdkDeclaration, renderSelfIndex, repairSchedules, resolveArtifactRetention, resolveCodeModeWorker, resolveComplianceDirs, resolveEntrySource, resolveInWorkspace, resolveMarketplaceRef, resolveMentions, resolveMultimodalPolicy, resolvePolicyDirs, resolvePricingAt, resolveProjectRoot, resolveScheduleBackend, resolveSessionReference, resolveSessionVisibility, resolveSettings, resolveSkillDirs, resolveSource, resolveTar, resolveWorkspace, restoreParts, revealScopedProvider, roleScopedProvider, roleSourceLabel, ruleCovers, ruleFromString, ruleToString, runCode, runCommand2 as runCommand, sanitizeArgNames, sanitizeCommand, sanitizeFtsQuery, sanitizePath, sanitizeToolOutput, scanInstructions, scanPluginDir, scanSkillDirs, searchMarketplaces, setDisplayCurrency, setImportGate, setPluginEnabled, setTrustGate, settingValueChoices, settingValueKind, settingWriteApply, settingWriteLayers, settingWriteTargets, skillIndexDescription, skillIndexResidency, skillIndexStats, sniffMediaType, splitFrontmatter, staticToolProvider, stripArtifactData, substitutePluginRoot, suggestRuleFromApproval, systemOpenArgv, systemPromptSegments, toPosix, toolDefinitionTokens, toolMatches, toolTableTokens, totalTokens, traceSession, triggerPeriodMs, unescapeRuleContent, uninstallPlugin, unknownRoleSkills, unknownRoleTools, unloadedInstructionFiles, updateMarketplace, updatePlugin, usdToMicros, validateSchedule, validateTrigger, validateWindow, withGoalCompression, withGoalPrompt, workspaceDisplayPath, writeSettingValue };