@epoch-agent/core 0.14.0 → 0.16.0

package/dist/index.js

@@ -2,9 +2,9 @@ import { existsSync, statSync, readdirSync, readFileSync, mkdirSync, writeFileSy
 import { homedir, platform, tmpdir, hostname } from 'os';
 import { join, dirname, resolve, relative, isAbsolute, sep, extname, basename } from 'path';
 import { execFile, execSync, execFileSync, spawn } from 'child_process';
-import { createLogger, dbPath, resolveHomeDir, DEFAULT_MAX_TURNS, PROJECT_DIR_NAME, guardSpawn, t, suggestKey, misspelledKeyIssues, openDatabase, migrate, releaseDatabase, parseLenient, issueDetails, splitWords, unknownKeyIssues, checkpointsDir, pluginsDir, projectHooksPath, projectClaudeSettingsPath, projectClaudeLocalSettingsPath, projectSettingsPath, projectLocalSettingsPath, projectPoliciesDir, trustedImportsPath, budgetStatePath, artifactsDir, UNLIMITED_TURNS, turnLimitOf, configPath, managedSettingsPath, getSecretValues, listStoredSecretNames, maskApiKey, setSectionField, countCodePoints, headCodePoints, isInWorkspace, workspacesPath, samePath, lastSessionsPath, automationLogsDir, projectComplianceDir, projectSkillsDir, attachmentsDir, trustPath, projectCommandsDir, detectBackend, EXEC_PATH_AS_NODE_ENV, isolate, createStreamDecoder, parseShellCommand, writeArtifact, envPath, checkDangerousCommand, checkObfuscation, keepHeadAndTail, normalizeForMatch, isReadOnlyCommand, CODE_EXEC_ROOTS, tailCodePoints } from '@epoch-agent/infra';
+import { createLogger, dbPath, resolveHomeDir, DEFAULT_MAX_TURNS, PROJECT_DIR_NAME, guardSpawn, t, suggestKey, misspelledKeyIssues, openDatabase, migrate, releaseDatabase, parseLenient, issueDetails, splitWords, unknownKeyIssues, checkpointsDir, pluginsDir, projectHooksPath, projectClaudeSettingsPath, projectClaudeLocalSettingsPath, projectSettingsPath, projectLocalSettingsPath, projectPoliciesDir, trustedImportsPath, canProbeGit, budgetStatePath, artifactsDir, UNLIMITED_TURNS, turnLimitOf, configPath, managedSettingsPath, getSecretValues, listStoredSecretNames, maskApiKey, setSectionField, countCodePoints, headCodePoints, attachmentsDir, isInWorkspace, workspacesPath, samePath, lastSessionsPath, automationLogsDir, projectComplianceDir, projectSkillsDir, trustPath, projectCommandsDir, detectBackend, EXEC_PATH_AS_NODE_ENV, isolate, createStreamDecoder, parseShellCommand, writeArtifact, envPath, checkDangerousCommand, checkObfuscation, keepHeadAndTail, normalizeForMatch, isReadOnlyCommand, CODE_EXEC_ROOTS, tailCodePoints } from '@epoch-agent/infra';
 export { IS_WINDOWS, WINDOWS_HIDE_FLAGS, buildBwrapArgs, buildProfile, checkDangerousCommand, checkObfuscation, createLogger, detectBackend, getDefaultShell, getPythonCommand, isInWorkspace, isReadOnlyCommand, isolate, maskApiKey, probeBubblewrap, probeSeatbelt, complianceDir as resolveComplianceDir, policiesDir as resolvePoliciesDir, setLogLevel } from '@epoch-agent/infra';
-import { PROVIDER_TYPES, OPERATION_TYPES as OPERATION_TYPES$1, COMPLIANCE_CATEGORIES, COMPLIANCE_ACTIONS, SEARCH_PROVIDER_TYPES, CURRENCIES, LANGS, PERMISSION_LEVELS, SHELL_KINDS, ToolExposure, MAX_OPTIONS, MIN_OPTIONS, MAX_HEADER_CHARS, MAX_QUESTIONS, SCHEDULE_INTERVAL_MINUTES, isPermissionLevel, SCHEDULE_DRAFT_TOOL, isValidAgentRoleName, DEFAULT_AGENT_ROLE, isValidCommandName, RESERVED_COMMAND_NAMES, parseModelRef, isWirePluginArchiveName, systemNote, formatMoney, totalUsageTokens, NOOP_TELEMETRY, METRIC, contentToText, GEN_AI, isPromptOversize, promptTokens, apiKeyEnvVar, PROVIDER_INFOS, isProviderType, API_KEY_ENV_VARS, KEY_ACTIONS, tableOf, perAction, isKeyAction, parseSequence, RESERVED_CHORDS, chordId, sequenceId, ACTION_CONTEXTS, SEQUENCE_CONTEXTS, assertNeverPart, MAX_ATTACH_FILES, MAX_ATTACH_TOTAL_BYTES, MAX_SESSION_REFS, utf8ByteLength, truncateToBudget, attachSessionSurface, isContextNearlyFull, isOperationType, normalizeApproval, imagePartOmittedSummary, MAX_ATTACH_BYTES, SIMULTANEOUS_CONTEXTS, SESSION_REFERENCE_ERROR_CODES, filePartSummary, sessionPartSummary } from '@epoch-agent/protocol';
+import { PROVIDER_TYPES, OPERATION_TYPES as OPERATION_TYPES$1, COMPLIANCE_CATEGORIES, COMPLIANCE_ACTIONS, SEARCH_PROVIDER_TYPES, CURRENCIES, LANGS, isSettingsPaneId, SETTINGS_PANE_IDS, PERMISSION_LEVELS, SHELL_KINDS, ToolExposure, MAX_OPTIONS, MIN_OPTIONS, MAX_HEADER_CHARS, MAX_QUESTIONS, SCHEDULE_INTERVAL_MINUTES, isPermissionLevel, SCHEDULE_DRAFT_TOOL, isValidAgentRoleName, DEFAULT_AGENT_ROLE, isValidCommandName, RESERVED_COMMAND_NAMES, parseModelRef, isWirePluginArchiveName, systemNote, formatMoney, totalUsageTokens, NOOP_TELEMETRY, METRIC, contentToText, GEN_AI, isPromptOversize, promptTokens, apiKeyEnvVar, PROVIDER_INFOS, isProviderType, API_KEY_ENV_VARS, KEY_ACTIONS, tableOf, perAction, isKeyAction, parseSequence, RESERVED_CHORDS, chordId, sequenceId, ACTION_CONTEXTS, SEQUENCE_CONTEXTS, assertNeverPart, MAX_ATTACH_FILES, MAX_ATTACH_TOTAL_BYTES, MAX_SESSION_REFS, utf8ByteLength, truncateToBudget, attachSessionSurface, isContextNearlyFull, isOperationType, normalizeApproval, imagePartOmittedSummary, MAX_ATTACH_BYTES, SIMULTANEOUS_CONTEXTS, SESSION_REFERENCE_ERROR_CODES, filePartSummary, sessionPartSummary } from '@epoch-agent/protocol';
 export { API_KEY_ENV_VARS, COMPLIANCE_ACTIONS, COMPLIANCE_CATEGORIES, MAX_ATTACH_BYTES, MAX_ATTACH_FILES, MAX_ATTACH_TOTAL_BYTES, MAX_SESSION_ATTACH_BYTES, MAX_SESSION_REFS, OPERATION_TYPES, PERMISSION_LEVELS, PLAN_OUTCOMES, PROVIDER_INFOS, PROVIDER_TYPES, ToolExposure, apiKeyEnvVar, extractAllMentions, extractMentions, extractSessionMentions, getProviderInfo, isOperationType, isPermissionLevel, isPlanOutcome, isProviderType, normalizeApproval } from '@epoch-agent/protocol';
 import { createRequire } from 'module';
 import { randomUUID, createHash, randomBytes } from 'crypto';
@@ -34,7 +34,8 @@ __export(schtasks_exports, {
   quoteTaskRun: () => quoteTaskRun,
   scheduleArgs: () => scheduleArgs,
   specFromTrigger: () => specFromTrigger,
-  specFromXml: () => specFromXml
+  specFromXml: () => specFromXml,
+  taskRunArgv: () => taskRunArgv
 });
 function createSchtasksBackend(opts = {}) {
   const run = opts.run ?? runCommand2;
@@ -99,9 +100,11 @@ function createSchtasksBackend(opts = {}) {
     async inspect(osTaskId) {
       const res = await run("schtasks", ["/Query", "/TN", osTaskId, "/XML"]);
       if (res.code !== 0) return null;
+      const commandLine = commandLineFromXml(res.stdout);
       return {
         osTaskId,
-        commandLine: commandLineFromXml(res.stdout),
+        commandLine,
+        argv: taskRunArgv(commandLine),
         spec: specFromXml(res.stdout),
         enabled: !/<Enabled>\s*false\s*<\/Enabled>/i.test(res.stdout)
       };
@@ -118,6 +121,13 @@ function createSchtasksBackend(opts = {}) {
 function quoteTaskRun(argv) {
   return argv.map((part) => `"${part.replace(/"/g, "")}"`).join(" ");
 }
+function taskRunArgv(commandLine) {
+  const out = [];
+  const re = /"([^"]*)"|(\S+)/g;
+  let m;
+  while ((m = re.exec(commandLine)) !== null) out.push(m[1] ?? m[2] ?? "");
+  return out;
+}
 function scheduleArgs(trigger) {
   if (trigger.kind === "interval") {
     const slots = intervalSlots(trigger.everyMinutes);
@@ -331,9 +341,11 @@ function createLaunchdBackend(opts = {}) {
         return null;
       }
       const disabled = await isDisabled(run, label);
+      const argv = extractProgramArguments(xml2);
       return {
         osTaskId: label,
-        commandLine: extractProgramArguments(xml2).join(" "),
+        commandLine: argv.join(" "),
+        argv,
         spec: extractCalendarSpec(xml2),
         enabled: !disabled
       };
@@ -542,6 +554,7 @@ var INTERNAL_TOOLS = /* @__PURE__ */ new Set([
   "session_messages_search",
   "session_messages_read",
   "session_trace",
+  "session_list",
   "goal",
   "skill_view",
   "tool_search",
@@ -1117,6 +1130,7 @@ var BLOCKED_TOOLS = Object.freeze([
   "session_messages_search",
   "session_messages_read",
   "session_trace",
+  "session_list",
   "goal"
 ]);
 var DelegateManager = class {
@@ -3438,11 +3452,13 @@ var SESSION_SEARCH_TOOL = "session_search";
 var SESSION_MESSAGES_SEARCH_TOOL = "session_messages_search";
 var SESSION_MESSAGES_READ_TOOL = "session_messages_read";
 var SESSION_TRACE_TOOL = "session_trace";
+var SESSION_LIST_TOOL = "session_list";
 var SESSION_QUERY_TOOLS = Object.freeze([
   SESSION_SEARCH_TOOL,
   SESSION_MESSAGES_SEARCH_TOOL,
   SESSION_MESSAGES_READ_TOOL,
-  SESSION_TRACE_TOOL
+  SESSION_TRACE_TOOL,
+  SESSION_LIST_TOOL
 ]);
 var MAX_SNIPPET = 160;
 var CANDIDATE_FACTOR = 4;
@@ -3536,6 +3552,36 @@ var SessionQueries = class {
   trace(input) {
     return traceSession(this.db, input);
   }
+  listSessions(input) {
+    const vis = resolveSessionVisibility({ ...input, db: this.db });
+    const archivedClause = input.archived === "all" ? "" : input.archived === "only" ? "AND s.archived = 1" : "AND s.archived = 0";
+    const where = `${vis.clause} ${archivedClause}`;
+    const total = this.db.prepare(`SELECT count(*) AS n FROM sessions s WHERE ${where}`).get(vis.params).n;
+    const rows = this.db.prepare(
+      `SELECT s.id,
+                COALESCE(NULLIF(s.display_name, ''), s.title) AS title,
+                s.cwd,
+                COALESCE(s.updated_at, s.started_at) AS updated_at,
+                s.message_count,
+                s.archived
+           FROM sessions s
+          WHERE ${where}
+          ORDER BY COALESCE(s.updated_at, s.started_at) DESC
+          LIMIT @limit`
+    ).all({ ...vis.params, limit: input.limit });
+    return {
+      total,
+      sessions: rows.map((row) => ({
+        sessionId: row.id,
+        title: row.title,
+        cwd: row.cwd ?? void 0,
+        updatedAt: row.updated_at,
+        messageCount: row.message_count,
+        archived: row.archived === 1,
+        isCurrent: row.id === input.currentSessionId
+      }))
+    };
+  }
   contentRows(safe, limit, visClause, visParams) {
     const sql = (table) => `
       SELECT m.id, m.session_id, m.role, m.content, m.timestamp, m.active,
@@ -3601,7 +3647,123 @@ var SessionQueries = class {
     return this.db.prepare(sql("messages_fts_trigram")).all({ query: buildTrigramMatchQuery(safe), sid: sessionId, limit });
   }
 };
-// src/tools/builtin/session-read.ts
+// src/tools/builtin/session-list.ts
+var DEFAULT_LIMIT = 10;
+var MAX_LIMIT = 30;
+var MAX_TITLE = 80;
+function fail3(message, start, code, suggestion) {
+  return {
+    success: false,
+    output: "",
+    error: { code, message, ...{} },
+    duration: Date.now() - start
+  };
+}
+function clampLimit(raw) {
+  const n = Number(raw);
+  if (!Number.isFinite(n) || n <= 0) return DEFAULT_LIMIT;
+  return Math.min(Math.floor(n), MAX_LIMIT);
+}
+function stamp(ms) {
+  return new Date(ms).toISOString().slice(0, 16).replace("T", " ");
+}
+function archivedScopeOf(raw) {
+  return raw === "only" || raw === "all" ? raw : "exclude";
+}
+function scopeNote(allWorkspaces, archived) {
+  const where = allWorkspaces ? "all workspaces" : "current workspace + this session lineage";
+  const which = archived === "only" ? "archived only" : archived === "all" ? "archived included" : "archived excluded";
+  return `${where}, ${which}`;
+}
+function renderEntry(entry, index) {
+  const self = entry.isCurrent ? " (this session)" : "";
+  const title = entry.title.length > MAX_TITLE ? `${entry.title.slice(0, MAX_TITLE)}\u2026` : entry.title;
+  const where = entry.cwd ? ` \xB7 ${entry.cwd}` : "";
+  const archived = entry.archived ? " \xB7 archived" : "";
+  return [
+    `${index + 1}. ${entry.sessionId}${self} \u2014 ${title || "(untitled)"}`,
+    `   ${stamp(entry.updatedAt)} \xB7 ${entry.messageCount} messages${where}${archived}`
+  ].join("\n");
+}
+function render(out, note) {
+  const shown = out.sessions.length;
+  const head = shown < out.total ? `${out.total} session(s) (${note}), showing the ${shown} most recently active:` : `${out.total} session(s) (${note}):`;
+  return [
+    head,
+    "",
+    ...out.sessions.map(renderEntry),
+    "",
+    "Next: session_messages_search({ sessionId, query }) to look inside one, or session_messages_read({ sessionId, messageId }) once you have a hit."
+  ].join("\n");
+}
+function createSessionListTool(deps) {
+  return {
+    name: SESSION_LIST_TOOL,
+    description: "\u5217\u51FA\u4F60\u80FD\u8BFB\u5230\u7684\u5386\u53F2\u4F1A\u8BDD \u2014\u2014 \u68C0\u7D22\u90A3\u51E0\u4E2A\u90FD\u8981\u5148\u60F3\u51FA\u4E00\u4E2A\u8BCD\uFF0C\u8FD9\u4E2A\u4E0D\u8981\u3002\n\u7528\u5B83\u56DE\u7B54\u300C\u6211\u90FD\u6709\u54EA\u4E9B\u4F1A\u8BDD\u300D\u300C\u4E0A\u6B21\u90A3\u6BB5\u804A\u7684\u662F\u4EC0\u4E48\u300D\uFF0C\u4EE5\u53CA\u7528\u6237\u63D0\u8D77\u67D0\u6BB5\u8FC7\u53BB\u7684\u4F1A\u8BDD\u5374\u6CA1\u7ED9 id \u7684\u65F6\u5019\u3002\n\u6309\u6700\u540E\u6D3B\u52A8\u5012\u5E8F\uFF0C\u6BCF\u6BB5\u7ED9 sessionId + \u6807\u9898 + \u65F6\u95F4 + \u6D88\u606F\u6570\uFF1B\u62FF\u5230 id \u518D\u7528 session_messages_search \u8FDB\u53BB\u770B\u3002\n\u9ED8\u8BA4\u4E0D\u5217\u5F52\u6863\u7684\u4F1A\u8BDD\uFF08\u5F52\u6863\u662F\u300C\u7528\u6237\u628A\u5B83\u6536\u8D77\u6765\u4E86\u300D\uFF09\u2014\u2014 \u8981\u627E\u5F52\u6863\u7684\u5C31\u4F20 archived\u3002\n\u9ED8\u8BA4\u53EA\u5217\u5F53\u524D\u5DE5\u4F5C\u533A\u7684\u4F1A\u8BDD\uFF0C\u5916\u52A0\u672C\u4F1A\u8BDD fork \u51FA\u6765\u7684\u90A3\u6761\u8840\u7F18\u94FE\u3002",
+    get parameters() {
+      return {
+        type: "object",
+        properties: {
+          limit: {
+            type: "number",
+            description: `\u56DE\u51E0\u6BB5\uFF0C\u9ED8\u8BA4 ${DEFAULT_LIMIT}\uFF0C\u4E0A\u9650 ${MAX_LIMIT}\uFF08\u4F20\u5927\u4E86\u81EA\u52A8\u5939\u7D27\uFF0C\u4E0D\u62A5\u9519\uFF09`
+          },
+          archived: {
+            type: "string",
+            enum: ["exclude", "only", "all"],
+            description: "exclude \u4E0D\u5217\u5F52\u6863\u7684\uFF08\u9ED8\u8BA4\uFF09\uFF1Bonly \u53EA\u5217\u5F52\u6863\u7684\uFF1Ball \u4E24\u8FB9\u90FD\u5217\u3002\u7528\u6237\u63D0\u8D77\u4E00\u6BB5\u300C\u4EE5\u524D\u5F52\u6863\u6389\u7684\u4F1A\u8BDD\u300D\u65F6\u7528 only"
+          },
+          ...deps.allowAllWorkspaces ? {
+            allWorkspaces: {
+              type: "boolean",
+              description: "\u5217\u5168\u90E8\u5DE5\u4F5C\u533A\u7684\u4F1A\u8BDD\uFF08\u9ED8\u8BA4 false\uFF0C\u53EA\u5217\u5F53\u524D\u5DE5\u4F5C\u533A\uFF09"
+            }
+          } : {}
+        },
+        required: []
+      };
+    },
+    exposure: ToolExposure.Direct,
+    supportsParallel: true,
+    annotations: {
+      readOnlyHint: true,
+      destructiveHint: false,
+      idempotentHint: true,
+      openWorldHint: true
+    },
+    operation: "file_read",
+    describeTarget: (args) => `${SESSION_LIST_TOOL}:${archivedScopeOf(args["archived"])}`,
+    execute(args, ctx) {
+      const start = Date.now();
+      const allWorkspaces = deps.allowAllWorkspaces === true && args["allWorkspaces"] === true;
+      const archived = archivedScopeOf(args["archived"]);
+      try {
+        const out = deps.queries.listSessions({
+          limit: clampLimit(args["limit"]),
+          archived,
+          currentSessionId: ctx.sessionId,
+          workspaceCwd: deps.workspaceCwd,
+          allWorkspaces
+        });
+        if (out.sessions.length === 0) {
+          const hint = archived === "exclude" ? ' If the user is asking about a session they archived, retry with archived: "only".' : "";
+          return Promise.resolve({
+            success: true,
+            output: `No session in readable scope (${scopeNote(allWorkspaces, archived)}).${hint}`,
+            duration: Date.now() - start
+          });
+        }
+        return Promise.resolve({
+          success: true,
+          output: render(out, scopeNote(allWorkspaces, archived)),
+          duration: Date.now() - start
+        });
+      } catch (err) {
+        return Promise.resolve(fail3(err instanceof Error ? err.message : String(err), start, 8014));
+      }
+    }
+  };
+}
 var DEFAULT_WINDOW = 2;
 var MAX_WINDOW = 10;
 var DEFAULT_TRACE_LIMIT = 20;
@@ -3609,7 +3771,7 @@ var MAX_TRACE_LIMIT = 50;
 var BODY_BUDGET = 1500;
 var MIN_BODY = 60;
 var ANCHOR_SHARE = 4;
-function fail3(message, start, code, suggestion) {
+function fail4(message, start, code, suggestion) {
   return {
     success: false,
     output: "",
@@ -3623,7 +3785,7 @@ function clampWindow(raw, fallback2, max) {
   if (!Number.isFinite(n) || n < 0) return fallback2;
   return Math.min(Math.floor(n), max);
 }
-function stamp(ms) {
+function stamp2(ms) {
   return new Date(ms).toISOString().slice(0, 16).replace("T", " ");
 }
 function budgetOf(total) {
@@ -3645,7 +3807,7 @@ function surfaceOf(record, isCurrent) {
 function renderRecord(record, mark, budget, isCurrent) {
   const tool = record.toolName ? ` \xB7 ${record.toolName}` : "";
   return [
-    `${mark} #${record.messageId} [${record.role}${tool} \xB7 ${stamp(record.timestamp)} \xB7 ${surfaceOf(record, isCurrent)}]`,
+    `${mark} #${record.messageId} [${record.role}${tool} \xB7 ${stamp2(record.timestamp)} \xB7 ${surfaceOf(record, isCurrent)}]`,
     `   ${body(record.content, budget).split("\n").join("\n   ")}`
   ].join("\n");
 }
@@ -3711,11 +3873,11 @@ before / after \u5404\u9ED8\u8BA4 ${DEFAULT_WINDOW}\u3001\u4E0A\u9650 ${MAX_WIND
     execute(args, ctx) {
       const start = Date.now();
       const sessionId = String(args["sessionId"] ?? "").trim();
-      if (!sessionId) return Promise.resolve(fail3("sessionId must not be empty", start, 8007));
+      if (!sessionId) return Promise.resolve(fail4("sessionId must not be empty", start, 8007));
       const messageId = Number(args["messageId"]);
       if (!Number.isInteger(messageId) || messageId <= 0) {
         return Promise.resolve(
-          fail3(
+          fail4(
             "messageId must be a positive integer",
             start,
             8008,
@@ -3736,7 +3898,7 @@ before / after \u5404\u9ED8\u8BA4 ${DEFAULT_WINDOW}\u3001\u4E0A\u9650 ${MAX_WIND
         });
         if (!out.authorized) {
           return Promise.resolve(
-            fail3(
+            fail4(
               `session ${sessionId} is out of readable scope`,
               start,
               8009,
@@ -3746,7 +3908,7 @@ before / after \u5404\u9ED8\u8BA4 ${DEFAULT_WINDOW}\u3001\u4E0A\u9650 ${MAX_WIND
         }
         if (!out.anchor) {
           return Promise.resolve(
-            fail3(
+            fail4(
               `session ${sessionId} has no message #${messageId} (it has ${out.total})`,
               start,
               8010,
@@ -3760,7 +3922,7 @@ before / after \u5404\u9ED8\u8BA4 ${DEFAULT_WINDOW}\u3001\u4E0A\u9650 ${MAX_WIND
           duration: Date.now() - start
         });
       } catch (err) {
-        return Promise.resolve(fail3(err instanceof Error ? err.message : String(err), start, 8011));
+        return Promise.resolve(fail4(err instanceof Error ? err.message : String(err), start, 8011));
       }
     }
   };
@@ -3774,7 +3936,7 @@ function renderNode(node, isCurrent) {
   const where = node.cwd ? ` \xB7 ${node.cwd}` : "";
   const archived = node.archived ? " \xB7 archived" : "";
   return `${indent}${node.sessionId}${self} \u2014 ${node.title || "(untitled)"}
-${indent}   ${stamp(node.startedAt ?? 0)} \xB7 ${node.messageCount ?? 0} messages${where}${archived}`;
+${indent}   ${stamp2(node.startedAt ?? 0)} \xB7 ${node.messageCount ?? 0} messages${where}${archived}`;
 }
 function renderTrace(trace, currentSessionId) {
   const anchor = trace.anchor;
@@ -3853,7 +4015,7 @@ function createSessionTraceTool(deps) {
         });
         if (!trace.authorized) {
           return Promise.resolve(
-            fail3(
+            fail4(
               `session ${sessionId} is out of readable scope`,
               start,
               8012,
@@ -3867,14 +4029,14 @@ function createSessionTraceTool(deps) {
           duration: Date.now() - start
         });
       } catch (err) {
-        return Promise.resolve(fail3(err instanceof Error ? err.message : String(err), start, 8013));
+        return Promise.resolve(fail4(err instanceof Error ? err.message : String(err), start, 8013));
       }
     }
   };
 }
-var DEFAULT_LIMIT = 5;
-var MAX_LIMIT = 20;
-function fail4(message, start, code, suggestion) {
+var DEFAULT_LIMIT2 = 5;
+var MAX_LIMIT2 = 20;
+function fail5(message, start, code, suggestion) {
   return {
     success: false,
     output: "",
@@ -3885,12 +4047,12 @@ function fail4(message, start, code, suggestion) {
 function emptyHint(query) {
   return belowTrigramFloor(sanitizeFtsQuery(query)) ? ` Note: every word here is shorter than ${TRIGRAM_MIN_CHARS} characters, which the substring index cannot match at all \u2014 this is "cannot search", not "not found". Retry with a longer phrase.` : " Try fewer or different words.";
 }
-function clampLimit(raw) {
+function clampLimit2(raw) {
   const n = Number(raw);
-  if (!Number.isFinite(n) || n <= 0) return DEFAULT_LIMIT;
-  return Math.min(Math.floor(n), MAX_LIMIT);
+  if (!Number.isFinite(n) || n <= 0) return DEFAULT_LIMIT2;
+  return Math.min(Math.floor(n), MAX_LIMIT2);
 }
-function stamp2(ms) {
+function stamp3(ms) {
   return new Date(ms).toISOString().slice(0, 16).replace("T", " ");
 }
 function surfaceNote(hit, isCurrent) {
@@ -3904,14 +4066,14 @@ function renderSessionHit(hit, index) {
   const self = hit.isCurrent ? " (this session)" : "";
   return [
     `${index + 1}. ${hit.sessionId}${self} \u2014 ${hit.title || "(untitled)"}`,
-    `   ${stamp2(hit.startedAt)} \xB7 ${hit.messageCount} messages${where}`,
+    `   ${stamp3(hit.startedAt)} \xB7 ${hit.messageCount} messages${where}`,
     `   best match [${hit.best.role} #${hit.best.messageId}, ${surfaceNote(hit.best, hit.isCurrent)}]:`,
     `   ${hit.best.snippet}`
   ].join("\n");
 }
 function renderMessageHit(hit, isCurrent) {
   return [
-    `#${hit.messageId} [${hit.role} \xB7 ${stamp2(hit.timestamp)} \xB7 ${surfaceNote(hit, isCurrent)}]`,
+    `#${hit.messageId} [${hit.role} \xB7 ${stamp3(hit.timestamp)} \xB7 ${surfaceNote(hit, isCurrent)}]`,
     `   ${hit.snippet}`
   ].join("\n");
 }
@@ -3929,7 +4091,7 @@ function createSessionSearchTool(deps) {
           },
           limit: {
             type: "number",
-            description: `\u8FD4\u56DE\u51E0\u6BB5\u4F1A\u8BDD\uFF0C\u9ED8\u8BA4 ${DEFAULT_LIMIT}\uFF0C\u4E0A\u9650 ${MAX_LIMIT}`
+            description: `\u8FD4\u56DE\u51E0\u6BB5\u4F1A\u8BDD\uFF0C\u9ED8\u8BA4 ${DEFAULT_LIMIT2}\uFF0C\u4E0A\u9650 ${MAX_LIMIT2}`
           },
           scope: {
             type: "string",
@@ -3959,13 +4121,13 @@ function createSessionSearchTool(deps) {
     execute(args, ctx) {
       const start = Date.now();
       const query = String(args["query"] ?? "").trim();
-      if (!query) return Promise.resolve(fail4("query must not be empty", start, 8001));
+      if (!query) return Promise.resolve(fail5("query must not be empty", start, 8001));
       const allWorkspaces = deps.allowAllWorkspaces === true && args["allWorkspaces"] === true;
       const scope = args["scope"] === "title" ? "title" : "all";
       try {
         const hits = deps.queries.searchSessions({
           query,
-          limit: clampLimit(args["limit"]),
+          limit: clampLimit2(args["limit"]),
           scope,
           currentSessionId: ctx.sessionId,
           workspaceCwd: deps.workspaceCwd,
@@ -3992,7 +4154,7 @@ function createSessionSearchTool(deps) {
         });
       } catch (err) {
         return Promise.resolve(
-          fail4(
+          fail5(
             err instanceof Error ? err.message : String(err),
             start,
             8002,
@@ -4021,7 +4183,7 @@ function createSessionMessagesSearchTool(deps) {
           },
           limit: {
             type: "number",
-            description: `\u8FD4\u56DE\u51E0\u6761\uFF0C\u9ED8\u8BA4 ${DEFAULT_LIMIT}\uFF0C\u4E0A\u9650 ${MAX_LIMIT}`
+            description: `\u8FD4\u56DE\u51E0\u6761\uFF0C\u9ED8\u8BA4 ${DEFAULT_LIMIT2}\uFF0C\u4E0A\u9650 ${MAX_LIMIT2}`
           },
           ...deps.allowAllWorkspaces ? {
             allWorkspaces: {
@@ -4047,21 +4209,21 @@ function createSessionMessagesSearchTool(deps) {
       const start = Date.now();
       const sessionId = String(args["sessionId"] ?? "").trim();
       const query = String(args["query"] ?? "").trim();
-      if (!sessionId) return Promise.resolve(fail4("sessionId must not be empty", start, 8003));
-      if (!query) return Promise.resolve(fail4("query must not be empty", start, 8004));
+      if (!sessionId) return Promise.resolve(fail5("sessionId must not be empty", start, 8003));
+      if (!query) return Promise.resolve(fail5("query must not be empty", start, 8004));
       const allWorkspaces = deps.allowAllWorkspaces === true && args["allWorkspaces"] === true;
       try {
         const out = deps.queries.searchMessages({
           sessionId,
           query,
-          limit: clampLimit(args["limit"]),
+          limit: clampLimit2(args["limit"]),
           currentSessionId: ctx.sessionId,
           workspaceCwd: deps.workspaceCwd,
           allWorkspaces
         });
         if (!out.authorized) {
           return Promise.resolve(
-            fail4(
+            fail5(
               `session ${sessionId} is out of searchable scope`,
               start,
               8005,
@@ -4088,7 +4250,7 @@ function createSessionMessagesSearchTool(deps) {
         });
       } catch (err) {
         return Promise.resolve(
-          fail4(
+          fail5(
             err instanceof Error ? err.message : String(err),
             start,
             8006,
@@ -4104,12 +4266,13 @@ function createSessionSearchTools(deps) {
     createSessionSearchTool(deps),
     createSessionMessagesSearchTool(deps),
     createSessionMessagesReadTool(deps),
-    createSessionTraceTool(deps)
+    createSessionTraceTool(deps),
+    createSessionListTool(deps)
   ];
 }
 var SKILL_VIEW_TOOL = "skill_view";
 var MAX_SUGGESTED = 20;
-function fail5(message, start, code, suggestion) {
+function fail6(message, start, code, suggestion) {
   return {
     success: false,
     output: "",
@@ -4154,18 +4317,18 @@ function createSkillViewTool(deps) {
       const name = String(args["name"] ?? "").trim();
       if (!name) {
         return Promise.resolve(
-          fail5("name must not be empty", start, 3001, describeAvailableSkills(deps.skills))
+          fail6("name must not be empty", start, 3001, describeAvailableSkills(deps.skills))
         );
       }
       const body2 = deps.skills.view(name);
       if (body2 === null) {
         return Promise.resolve(
-          fail5(`skill "${name}" not found`, start, 3002, describeAvailableSkills(deps.skills))
+          fail6(`skill "${name}" not found`, start, 3002, describeAvailableSkills(deps.skills))
         );
       }
       if (body2.trim() === "") {
         return Promise.resolve(
-          fail5(
+          fail6(
             `skill "${name}" has an empty body \u2014 its SKILL.md is missing or empty`,
             start,
             3003,
@@ -4292,7 +4455,7 @@ var SKILL_EDIT_TOOL = "skill_edit";
 var SKILL_PATCH_TOOL = "skill_patch";
 var SKILL_WRITE_FILE_TOOL = "skill_write_file";
 var WRITABLE_SKILL_NAME = /^[A-Za-z0-9][A-Za-z0-9_-]{0,63}$/;
-function fail6(message, start, code, suggestion) {
+function fail7(message, start, code, suggestion) {
   return {
     success: false,
     output: "",
@@ -4304,7 +4467,7 @@ function done(output, start) {
   return { success: true, output, duration: Date.now() - start };
 }
 function fromThrow(err, start, suggestion) {
-  return fail6(err instanceof Error ? err.message : String(err), start, 3102, suggestion);
+  return fail7(err instanceof Error ? err.message : String(err), start, 3102, suggestion);
 }
 function str2(args, key) {
   const raw = args[key];
@@ -4360,13 +4523,13 @@ function createTool(deps) {
       const content = str2(args, "content");
       const category = str2(args, "category").trim() || "general";
       if (!WRITABLE_SKILL_NAME.test(name)) {
-        return fail6(`invalid skill name: ${JSON.stringify(name)}`, start, 3101, WRITABLE_HINT);
+        return fail7(`invalid skill name: ${JSON.stringify(name)}`, start, 3101, WRITABLE_HINT);
       }
       if (!WRITABLE_SKILL_NAME.test(category)) {
-        return fail6(`invalid category: ${JSON.stringify(category)}`, start, 3101, WRITABLE_HINT);
+        return fail7(`invalid category: ${JSON.stringify(category)}`, start, 3101, WRITABLE_HINT);
       }
       const bad2 = checkFrontmatter(name, content);
-      if (bad2 !== null) return fail6(bad2, start, 3103);
+      if (bad2 !== null) return fail7(bad2, start, 3103);
       try {
         const path = await deps.skills.create(name, content, category);
         return done(`created skill "${name}" at ${path}`, start);
@@ -4398,10 +4561,10 @@ function editTool(deps) {
       const name = str2(args, "name").trim();
       const content = str2(args, "content");
       if (!name) {
-        return fail6("name must not be empty", start, 3101, describeAvailableSkills(deps.skills));
+        return fail7("name must not be empty", start, 3101, describeAvailableSkills(deps.skills));
       }
       const bad2 = checkFrontmatter(name, content);
-      if (bad2 !== null) return fail6(bad2, start, 3103);
+      if (bad2 !== null) return fail7(bad2, start, 3103);
       try {
         await deps.skills.edit(name, content);
         return done(`rewrote SKILL.md of skill "${name}"`, start);
@@ -4439,10 +4602,10 @@ function patchTool(deps) {
       const oldString = str2(args, "old_string");
       const filePath = str2(args, "file_path").trim();
       if (!name) {
-        return fail6("name must not be empty", start, 3101, describeAvailableSkills(deps.skills));
+        return fail7("name must not be empty", start, 3101, describeAvailableSkills(deps.skills));
       }
       if (oldString === "") {
-        return fail6("old_string must not be empty", start, 3101);
+        return fail7("old_string must not be empty", start, 3101);
       }
       try {
         await deps.skills.patch(
@@ -4484,9 +4647,9 @@ function writeFileTool(deps) {
       const name = str2(args, "name").trim();
       const filePath = str2(args, "file_path").trim();
       if (!name) {
-        return fail6("name must not be empty", start, 3101, describeAvailableSkills(deps.skills));
+        return fail7("name must not be empty", start, 3101, describeAvailableSkills(deps.skills));
       }
-      if (!filePath) return fail6("file_path must not be empty", start, 3101);
+      if (!filePath) return fail7("file_path must not be empty", start, 3101);
       try {
         await deps.skills.writeFile(name, filePath, str2(args, "content"));
         return done(`wrote ${filePath} into skill "${name}"`, start);
@@ -4502,7 +4665,7 @@ function createSkillWriteTools(deps) {
 var TOOL_SEARCH_TOOL = "tool_search";
 var MAX_LISTED = 40;
 var MAX_REVEAL_PER_CALL = 10;
-function fail7(message, start, code, suggestion) {
+function fail8(message, start, code, suggestion) {
   return {
     success: false,
     output: "",
@@ -4552,12 +4715,12 @@ function createToolSearchTool(deps) {
       const pool = deps.deferred();
       const raw = String(args["query"] ?? "").trim();
       if (!raw) {
-        return Promise.resolve(fail7("query must not be empty", start, 3101, available(pool)));
+        return Promise.resolve(fail8("query must not be empty", start, 3101, available(pool)));
       }
       const terms = raw.toLowerCase().split(/\s+/).filter(Boolean);
       const hits = pool.filter((tool) => matches(tool, terms));
       if (hits.length === 0) {
-        return Promise.resolve(fail7(`No tool matches "${raw}"`, start, 3102, available(pool)));
+        return Promise.resolve(fail8(`No tool matches "${raw}"`, start, 3102, available(pool)));
       }
       const picked = hits.slice(0, MAX_REVEAL_PER_CALL);
       for (const tool of picked) deps.reveal.reveal(tool.name);
@@ -5113,7 +5276,7 @@ function createRoleFile(input, opts) {
     const detail = checked.error.issues.map((i) => `${i.path.join(".") || "(root)"}: ${i.message}`).join("; ");
     return { ok: false, reason: "invalid-field", detail };
   }
-  const text = render(fm, input.prompt ?? "");
+  const text = render2(fm, input.prompt ?? "");
   const file = `${name}.md`;
   const back = parseRoleDefinition(text, file, opts.source ?? "user");
   if (!back.role) {
@@ -5145,7 +5308,7 @@ function frontmatterOf(name, input) {
     ...input.maxTurns === void 0 ? {} : { maxTurns: input.maxTurns }
   };
 }
-function render(fm, prompt) {
+function render2(fm, prompt) {
   const head = dump(fm, { lineWidth: -1, noRefs: true });
   const body2 = prompt.trim();
   return `---
@@ -7017,11 +7180,29 @@ var MARKETPLACE_DISPLAY_FIELDS = [
 var DisplaySchema = z.object({
   fields: z.array(z.string().min(1)).optional()
 });
+var CategoryNodeSchema = z.lazy(
+  () => z.object({
+    id: z.string().min(1),
+    label: z.string().min(1).optional(),
+    children: z.array(CategoryNodeSchema).optional()
+  })
+);
+var CategoriesSchema = z.array(CategoryNodeSchema).refine(hasUniqueCategoryIds, { message: "category ids must be unique across the whole tree" }).optional().catch(void 0);
+function hasUniqueCategoryIds(nodes) {
+  const seen = /* @__PURE__ */ new Set();
+  const walk3 = (list) => list.every((node) => {
+    if (seen.has(node.id)) return false;
+    seen.add(node.id);
+    return node.children === void 0 || walk3(node.children);
+  });
+  return walk3(nodes);
+}
 var CatalogSchema = z.object({
   name: z.string().regex(NAME_PATTERN),
   description: z.string().min(1).optional(),
   owner: z.object({ name: z.string().min(1), url: z.string().min(1).optional() }).optional(),
   display: DisplaySchema.optional(),
+  categories: CategoriesSchema,
   plugins: z.array(EntrySchema)
 });
 var RecordSchema2 = z.object({
@@ -7037,13 +7218,17 @@ var StateSchema2 = z.object({
 function projectEntryForDisplay(entry, display) {
   const allowed = display?.fields;
   if (allowed === void 0) return entry;
-  const keep = new Set(allowed);
   const out = { ...entry };
   for (const field of MARKETPLACE_DISPLAY_FIELDS) {
-    if (!keep.has(field)) delete out[field];
+    if (!displayAllows(display, field)) delete out[field];
   }
   return out;
 }
+function displayAllows(display, field) {
+  const allowed = display?.fields;
+  if (allowed === void 0) return true;
+  return allowed.includes(field);
+}
 function readMarketplaces(statePath) {
   if (!existsSync(statePath)) return { records: [], issues: [] };
   let raw;
@@ -9264,7 +9449,18 @@ function gitProbeEnv() {
   delete env.GIT_WORK_TREE;
   return env;
 }
+function insideGitRepo(rootDir) {
+  let dir = rootDir;
+  for (; ; ) {
+    if (existsSync(join(dir, ".git"))) return true;
+    const parent = dirname(dir);
+    if (parent === dir) return false;
+    dir = parent;
+  }
+}
 function getGitStatus(rootDir) {
+  if (!insideGitRepo(rootDir)) return void 0;
+  if (!canProbeGit()) return void 0;
   const quiet = ["ignore", "pipe", "ignore"];
   const env = gitProbeEnv();
   try {
@@ -12237,8 +12433,48 @@ var EpochConfigSchema = z.object({
     message: "blankCards: id must be unique"
   }).optional(),
   blankGreeting: BlankGreetingSchema.optional(),
-  user: HostUserSchema.optional()
+  user: HostUserSchema.optional(),
+  settingsHidden: z.array(z.string().min(1)).min(1).optional(),
+  settingsPanes: z.array(
+    z.object({
+      id: z.string().min(1).refine((id) => !isSettingsPaneId(id), {
+        message: `id must not collide with a built-in pane (${SETTINGS_PANE_IDS.join(", ")})`
+      }),
+      label: z.string().min(1),
+      icon: z.string().min(1).optional(),
+      url: z.string().min(1).refine(
+        (url) => {
+          try {
+            const scheme = new URL(url).protocol;
+            return scheme === "http:" || scheme === "https:";
+          } catch {
+            return false;
+          }
+        },
+        { message: "url must be an absolute http(s) URL" }
+      ),
+      before: z.string().min(1).optional()
+    })
+  ).min(1).refine((items) => new Set(items.map((item) => item.id)).size === items.length, {
+    message: "settingsPanes: id must be unique"
+  }).optional()
 });
+function settingsHiddenIssues(config) {
+  const hidden = config.settingsHidden;
+  if (hidden === void 0) return [];
+  return hidden.filter((id) => !isSettingsPaneId(id)).map((id) => ({
+    path: "settingsHidden",
+    message: `unknown settings pane id: ${id} (known: ${SETTINGS_PANE_IDS.join(", ")})`
+  }));
+}
+function settingsPaneBeforeIssues(config) {
+  const panes = config.settingsPanes;
+  if (panes === void 0) return [];
+  return panes.filter((pane) => pane.before !== void 0 && !isSettingsPaneId(pane.before)).map((pane) => ({
+    path: `settingsPanes.${pane.id}.before`,
+    message: `unknown settings pane id: ${String(pane.before)} (known: ${SETTINGS_PANE_IDS.join(", ")})`
+  }));
+}
 function defaultConfig() {
   return EpochConfigSchema.parse({});
 }
@@ -12709,6 +12945,8 @@ function parseRawConfig(raw, issues, track) {
     EpochConfigSchema.parse({})
   );
   issues.push(...outcome.issues);
+  issues.push(...settingsHiddenIssues(outcome.value));
+  issues.push(...settingsPaneBeforeIssues(outcome.value));
   if (outcome.issues.length === 0) collectKeyPaths(migrated.raw, track.file);
   return outcome.value;
 }
@@ -14280,6 +14518,7 @@ var SETTING_WRITE_KEYS = [
   "sessions.vacuumAfterPrune",
   "automation.keepRuns",
   "automation.maxRecordingMb",
+  "sessionSearch.allWorkspaces",
   "permission"
 ];
 function isWritableSettingKey(value) {
@@ -14349,6 +14588,7 @@ var VALUE_SCHEMA = {
   "sessions.vacuumAfterPrune": EpochConfigSchema.shape.sessions.unwrap().shape.vacuumAfterPrune.unwrap(),
   "automation.keepRuns": EpochConfigSchema.shape.automation.unwrap().shape.keepRuns.unwrap(),
   "automation.maxRecordingMb": EpochConfigSchema.shape.automation.unwrap().shape.maxRecordingMb.unwrap(),
+  "sessionSearch.allWorkspaces": EpochConfigSchema.shape.sessionSearch.unwrap().shape.allWorkspaces.unwrap(),
   permission: EpochConfigSchema.shape.permission.unwrap()
 };
 function settingValueKind(key) {
@@ -15527,6 +15767,17 @@ function textSimilarity(a, b) {
   const union = /* @__PURE__ */ new Set([...wordsA, ...wordsB]);
   return intersection / union.size;
 }
+var ATTACHMENT_RETENTION_DEFAULTS = {
+  maxAgeDays: 7,
+  maxTotalBytes: ATTACHMENT_MAX_TOTAL_BYTES
+};
+function pruneAttachments(root, keepSession, retention = ATTACHMENT_RETENTION_DEFAULTS, now = Date.now()) {
+  const shared = retention;
+  return pruneArtifacts(root, keepSession, shared, now);
+}
+async function removeSessionAttachments(sessionId, homeDir) {
+  await rm(attachmentsDir(sessionId, homeDir), { recursive: true, force: true });
+}
 // src/goal/store.ts
 function toGoal(row) {
   const phase = isGoalPhase(row.phase) ? row.phase : "blocked";
@@ -15680,6 +15931,52 @@ function restoreParts(parts, opts) {
     }
   });
 }
+function importParts(parts) {
+  const out = [];
+  for (const part of parts) {
+    if (part.type === "text") {
+      out.push({ type: "text", text: part.text });
+      continue;
+    }
+    if (part.type === "file") {
+      out.push({
+        type: "file",
+        path: part.path,
+        ...part.omitted ? { omitted: part.omitted } : {},
+        ...part.bytes === void 0 ? {} : { bytes: part.bytes }
+      });
+      continue;
+    }
+    if (part.type === "session") {
+      out.push({
+        type: "session",
+        ref: part.ref,
+        ...part.sessionId ? { sessionId: part.sessionId } : {},
+        ...part.title ? { title: part.title } : {},
+        ...part.omitted ? { omitted: part.omitted } : {},
+        ...part.messageCount === void 0 ? {} : { messageCount: part.messageCount },
+        ...part.totalMessages === void 0 ? {} : { totalMessages: part.totalMessages }
+      });
+      continue;
+    }
+    if (part.type !== "image") {
+      assertNeverPart(part);
+      continue;
+    }
+    const { image, mediaType } = part;
+    const media = mediaType ? { mediaType } : {};
+    if (/^https?:/i.test(image)) {
+      out.push({ type: "image", url: image, ...media });
+      continue;
+    }
+    if (isAbsolute(image)) {
+      out.push({ type: "image", path: image, ...media });
+      continue;
+    }
+    return { ok: false, detail: DATA_URL.test(image) ? "image:data-url" : "image:base64" };
+  }
+  return { ok: true, parts: out };
+}
 function stripArtifactData(artifacts) {
   return artifacts.map(({ data: _data, ...rest }) => rest);
 }
@@ -16178,13 +16475,11 @@ var FTS_EXTERNAL_MIGRATIONS = [
 var SessionDB = class {
   db;
   path;
-  msgId = 0;
   constructor(dbPath$1) {
     this.path = dbPath$1 ?? dbPath();
     this.db = openDatabase(this.path);
     migrate(this.db, NS3, SESSION_MIGRATIONS);
     this.migrateFtsIndex();
-    this.refreshMsgId();
   }
   migrateFtsIndex() {
     try {
@@ -16196,9 +16491,8 @@ var SessionDB = class {
       );
     }
   }
-  refreshMsgId() {
-    const row = this.db.prepare("SELECT MAX(id) as maxId FROM messages").get();
-    this.msgId = row?.maxId ?? 0;
+  transaction(fn) {
+    return this.db.transaction(fn)();
   }
   insertSession(meta) {
     this.db.prepare(
@@ -16252,7 +16546,7 @@ var SessionDB = class {
     const dir = input.direction ?? "desc";
     let where = "1=1";
     const params = {};
-    if (input.archived !== void 0) {
+    if (input.archived === "any") ; else if (input.archived !== void 0) {
       where += " AND archived = @archived";
       params["archived"] = input.archived ? 1 : 0;
     } else {
@@ -16265,6 +16559,10 @@ var SessionDB = class {
       where += " AND cwd = @cwd";
       params["cwd"] = input.cwd;
     }
+    if (input.updatedSince !== void 0) {
+      where += " AND COALESCE(updated_at, started_at) > @updatedSince";
+      params["updatedSince"] = input.updatedSince;
+    }
     if (input.cursor) {
       where += ` AND ${cursorCol} < @cursor`;
       params["cursor"] = Number(input.cursor);
@@ -16308,11 +16606,20 @@ var SessionDB = class {
   unarchiveSession(id) {
     this.db.prepare("UPDATE sessions SET archived = 0 WHERE id = ?").run(id);
   }
+  importSession(meta, messages) {
+    const run = this.db.transaction(
+      (m, list) => {
+        this.insertSession(m);
+        return list.map((msg) => this.insertMessage({ ...msg, sessionId: m.id }));
+      }
+    );
+    return run(meta, messages);
+  }
   insertMessage(msg) {
-    this.db.prepare(
+    const info = this.db.prepare(
       `
-      INSERT INTO messages (id, session_id, role, content, tool_call_id, tool_calls, tool_results, parts, tool_name, timestamp, token_count, finish_reason, reasoning, turn_facts, active, compacted, observed)
-      VALUES (@id, @sessionId, @role, @content, @toolCallId, @toolCalls, @toolResults, @parts, @toolName, @timestamp, @tokenCount, @finishReason, @reasoning, @turnFacts, 1, 0, 0)
+      INSERT INTO messages (session_id, role, content, tool_call_id, tool_calls, tool_results, parts, tool_name, timestamp, token_count, finish_reason, reasoning, turn_facts, active, compacted, observed)
+      VALUES (@sessionId, @role, @content, @toolCallId, @toolCalls, @toolResults, @parts, @toolName, @timestamp, @tokenCount, @finishReason, @reasoning, @turnFacts, 1, 0, 0)
     `
     ).run({
       ...msg,
@@ -16330,7 +16637,7 @@ var SessionDB = class {
     this.db.prepare(
       `UPDATE sessions SET message_count = message_count + 1, tool_call_count = tool_call_count + @toolCalls, updated_at = MAX(COALESCE(updated_at, 0), @timestamp) WHERE id = @id`
     ).run({ id: msg.sessionId, toolCalls, timestamp: msg.timestamp });
-    if (msg.id > this.msgId) this.msgId = msg.id;
+    return Number(info.lastInsertRowid);
   }
   recordUsage(sessionId, usage) {
     const priced = usage.costUsd !== void 0;
@@ -16392,9 +16699,6 @@ var SessionDB = class {
     }
     return info.changes;
   }
-  nextMessageId() {
-    return ++this.msgId;
-  }
   search(input) {
     const limit = input.limit ?? 5;
     const scope = input.scope ?? "all";
@@ -16559,10 +16863,8 @@ var SessionDB = class {
       if (middle.length === 0) return null;
       const mark = this.db.prepare("UPDATE messages SET active = 0, compacted = 1 WHERE id = ?");
       for (const row of middle) mark.run(row.id);
-      const summaryId = this.nextMessageId();
-      this.insertMessage({
+      const summaryId = this.insertMessage({
         sessionId,
-        id: summaryId,
         role: "user",
         content: input.summary,
         timestamp: middle[0].timestamp
@@ -16918,6 +17220,61 @@ var SessionReferences = class {
 };
 // src/session/manager.ts
 var AUTO_VACUUM_MIN_FREELIST_RATIO = 0.25;
+var IMPORT_ROLES = /* @__PURE__ */ new Set(["system", "user", "assistant", "tool"]);
+function validateImport(input) {
+  const { meta, messages } = input;
+  if (typeof meta.id !== "string" || meta.id.length === 0) return "meta.id";
+  if (!Number.isFinite(meta.startedAt)) return "meta.startedAt";
+  if (!Number.isFinite(meta.updatedAt)) return "meta.updatedAt";
+  if (meta.endedAt !== void 0 && !Number.isFinite(meta.endedAt)) return "meta.endedAt";
+  const seen = /* @__PURE__ */ new Set();
+  for (const [i, msg] of messages.entries()) {
+    if (!IMPORT_ROLES.has(msg.role)) return `messages[${i}].role`;
+    if (typeof msg.content !== "string") return `messages[${i}].content`;
+    if (!Number.isFinite(msg.timestamp)) return `messages[${i}].timestamp`;
+    if (!Number.isFinite(msg.id) || seen.has(msg.id)) return `messages[${i}].id`;
+    seen.add(msg.id);
+  }
+  return void 0;
+}
+function buildImportedMeta(meta, keepParent) {
+  return {
+    id: meta.id,
+    title: meta.title,
+    displayName: meta.displayName,
+    source: meta.source ?? "import",
+    cwd: meta.cwd,
+    workspaceState: meta.workspaceState,
+    workspaceRoot: meta.workspaceRoot,
+    gitBranch: meta.gitBranch,
+    gitRepoRoot: meta.gitRepoRoot,
+    model: meta.model,
+    tags: [],
+    preview: "",
+    pinned: meta.pinned ?? false,
+    archived: meta.archived ?? false,
+    rewindCount: 0,
+    parentId: keepParent ? meta.parentId : void 0,
+    messageCount: 0,
+    toolCallCount: 0,
+    apiCallCount: 0,
+    inputTokens: 0,
+    outputTokens: 0,
+    cacheReadTokens: 0,
+    cacheWriteTokens: 0,
+    reasoningTokens: 0,
+    estimatedCostUsd: void 0,
+    actualCostUsd: void 0,
+    compressionIneffectiveCount: 0,
+    expiryFinalized: 0,
+    summary: null,
+    plan: null,
+    startedAt: new Date(meta.startedAt),
+    updatedAt: new Date(meta.updatedAt),
+    endedAt: meta.endedAt === void 0 ? void 0 : new Date(meta.endedAt),
+    endReason: meta.endReason
+  };
+}
 var SessionManager = class {
   db;
   touched = /* @__PURE__ */ new Set();
@@ -17008,6 +17365,56 @@ var SessionManager = class {
   list(input) {
     return this.db.listSessions(input ?? {});
   }
+  importSession(input) {
+    const { meta, messages } = input;
+    const id = meta.id;
+    const bad2 = validateImport(input);
+    if (bad2) return { ok: false, id, reason: "invalid", detail: bad2 };
+    if (this.db.hasSession(id)) return { ok: false, id, reason: "exists" };
+    const converted = [];
+    for (const [i, msg] of messages.entries()) {
+      const { id: _sourceId, parts, ...rest } = msg;
+      if (!parts) {
+        converted.push(rest);
+        continue;
+      }
+      const result = importParts(parts);
+      if (!result.ok) {
+        return {
+          ok: false,
+          id,
+          reason: "invalid",
+          detail: `messages[${i}].parts.${result.detail}`
+        };
+      }
+      converted.push({ ...rest, parts: result.parts });
+    }
+    const droppedParentId = meta.parentId !== void 0 && !this.db.hasSession(meta.parentId) ? meta.parentId : void 0;
+    try {
+      const newIds = this.db.importSession(
+        buildImportedMeta(meta, droppedParentId === void 0),
+        converted
+      );
+      const idMap = {};
+      messages.forEach((msg, i) => {
+        idMap[msg.id] = newIds[i];
+      });
+      return {
+        ok: true,
+        id,
+        messageCount: newIds.length,
+        idMap,
+        ...droppedParentId === void 0 ? {} : { droppedParentId }
+      };
+    } catch (err) {
+      return {
+        ok: false,
+        id,
+        reason: "failed",
+        ...err instanceof Error ? { detail: err.name } : {}
+      };
+    }
+  }
   updateMeta(id, patch) {
     this.db.updateSessionMeta(id, patch);
   }
@@ -17062,6 +17469,16 @@ var SessionManager = class {
       return { ...result, error: cause instanceof Error ? cause.message : String(cause) };
     }
   }
+  maybePruneAttachments(root, keepSession, opts = {}) {
+    const now = opts.now?.() ?? Date.now();
+    const minInterval = opts.minIntervalMs ?? 24 * 60 * 60 * 1e3;
+    try {
+      if (!this.db.claimMaintenanceSlot("last_attachment_prune", minInterval, now)) return 0;
+      return pruneAttachments(root, keepSession, ATTACHMENT_RETENTION_DEFAULTS, now);
+    } catch {
+      return 0;
+    }
+  }
   delete(id) {
     return this.db.deleteSession(id);
   }
@@ -17081,15 +17498,16 @@ var SessionManager = class {
   }
   appendMessage(sessionId, msg) {
     this.touched.add(sessionId);
-    const id = this.db.nextMessageId();
-    this.db.insertMessage({ ...msg, sessionId, id, timestamp: Date.now() });
-    const meta = this.db.getSessionMeta(sessionId);
-    if (!meta) return id;
-    if (!meta.title && msg.role === "user") {
-      const title = msg.content.slice(0, 50).replace(/\n/g, " ");
-      this.db.updateSessionMeta(sessionId, { title });
-    }
-    return id;
+    return this.db.transaction(() => {
+      const id = this.db.insertMessage({ ...msg, sessionId, timestamp: Date.now() });
+      const meta = this.db.getSessionMeta(sessionId);
+      if (!meta) return id;
+      if (!meta.title && msg.role === "user") {
+        const title = msg.content.slice(0, 50).replace(/\n/g, " ");
+        this.db.updateSessionMeta(sessionId, { title });
+      }
+      return id;
+    });
   }
   attachTurnFacts(sessionId, messageId, input) {
     this.db.attachTurnFacts(sessionId, messageId, input);
@@ -17268,6 +17686,30 @@ function firstSentence(text, maxLen) {
   const lastSpace = cut.lastIndexOf(" ");
   return (lastSpace > maxLen * 0.6 ? cut.slice(0, lastSpace) : cut) + "\u2026";
 }
+// src/session/persist-failure.ts
+function codeOf(cause) {
+  if (typeof cause !== "object" || cause === null) return "";
+  const code = cause.code;
+  return typeof code === "string" ? code : "";
+}
+function classifyPersistFailure(cause) {
+  const code = codeOf(cause);
+  if (!code) return "unknown";
+  if (code.startsWith("SQLITE_FULL") || code === "ENOSPC") return "disk-full";
+  if (code.startsWith("SQLITE_BUSY") || code.startsWith("SQLITE_LOCKED")) return "locked";
+  if (code.startsWith("SQLITE_READONLY") || code.startsWith("SQLITE_PERM") || code.startsWith("SQLITE_CANTOPEN") || code === "EACCES" || code === "EPERM" || code === "EROFS") {
+    return "read-only";
+  }
+  if (code.startsWith("SQLITE_CORRUPT") || code === "SQLITE_NOTADB") return "corrupt";
+  if (code.startsWith("SQLITE_IOERR") || code === "EIO") return "io-error";
+  return "unknown";
+}
+function isTransientPersistFailure(kind) {
+  return kind === "locked";
+}
+function persistFailureCode(cause) {
+  return codeOf(cause);
+}
 function isSettled(phase) {
   return phase === "complete";
 }
@@ -19136,6 +19578,9 @@ var ScheduleRegistrar = class {
     this.opts = opts;
   }
   opts;
+  get homeDir() {
+    return this.opts.homeDir;
+  }
   osTaskIdFor(taskId) {
     const backend = this.opts.backend;
     if (!backend) return "";
@@ -19206,7 +19651,6 @@ var ScheduleRegistrar = class {
     if (this.opts.backend && def.osTaskId) await this.opts.backend.retire(def.osTaskId);
   }
 };
-// src/schedule/doctor.ts
 async function diagnoseSchedules(opts) {
   const { store, backend, registrar } = opts;
   if (!backend) return { checked: 0, drifts: [], unsupported: true };
@@ -19243,8 +19687,18 @@ async function diagnoseSchedules(opts) {
       });
     }
   }
+  let foreign = 0;
   for (const osTaskId of osTaskIds) {
     if (seen.has(osTaskId)) continue;
+    const snapshot = await backend.inspect(osTaskId);
+    if (!snapshot) {
+      foreign++;
+      continue;
+    }
+    if (!ownedByThisHome(snapshot.argv, registrar.homeDir)) {
+      foreign++;
+      continue;
+    }
     const taskId = backend.taskIdFrom(osTaskId);
     drifts.push({
       kind: "orphan-in-os",
@@ -19252,7 +19706,17 @@ async function diagnoseSchedules(opts) {
       ...taskId ? { scheduleId: taskId } : {}
     });
   }
-  return { checked: defs.length + osTaskIds.length - seen.size, drifts, unsupported: false };
+  return {
+    checked: defs.length + osTaskIds.length - seen.size - foreign,
+    drifts,
+    unsupported: false
+  };
+}
+function ownedByThisHome(argv, homeDir) {
+  const at = argv.indexOf("--home");
+  const home = at >= 0 ? argv[at + 1] : void 0;
+  if (home === void 0 || home.length === 0) return true;
+  return samePath(home, homeDir);
 }
 function compare2(def, snapshot, backend, registrar) {
   const expected = backend.expectedSnapshot(registrar.toRegisterInput(def, def.osCommand));
@@ -20083,9 +20547,9 @@ function buildAutomaton(patterns) {
   while (queue.length > 0) {
     const cur = queue.shift();
     for (const [ch, child] of nodes[cur].next) {
-      let fail8 = nodes[cur].fail;
-      while (fail8 !== 0 && !nodes[fail8].next.has(ch)) fail8 = nodes[fail8].fail;
-      const target = nodes[fail8].next.get(ch);
+      let fail9 = nodes[cur].fail;
+      while (fail9 !== 0 && !nodes[fail9].next.has(ch)) fail9 = nodes[fail9].fail;
+      const target = nodes[fail9].next.get(ch);
       nodes[child].fail = target !== void 0 && target !== child ? target : 0;
       nodes[child].out.push(...nodes[nodes[child].fail].out);
       queue.push(child);
@@ -22150,6 +22614,7 @@ function listWorkspaceFiles(root) {
 }
 function listFromGit(root) {
   if (!existsSync(join(root, ".git"))) return null;
+  if (!canProbeGit()) return null;
   try {
     const out = execFileSync("git", ["ls-files", "-co", "--exclude-standard", "-z"], {
       cwd: root,
@@ -22358,17 +22823,6 @@ function readSession(ref, opts, usedBytes) {
     })
   };
 }
-var ATTACHMENT_RETENTION_DEFAULTS = {
-  maxAgeDays: 7,
-  maxTotalBytes: ATTACHMENT_MAX_TOTAL_BYTES
-};
-function pruneAttachments(root, keepSession, retention = ATTACHMENT_RETENTION_DEFAULTS, now = Date.now()) {
-  const shared = retention;
-  return pruneArtifacts(root, keepSession, shared, now);
-}
-async function removeSessionAttachments(sessionId, homeDir) {
-  await rm(attachmentsDir(sessionId, homeDir), { recursive: true, force: true });
-}
 var OPENABLE_EXTENSIONS = /* @__PURE__ */ new Set([".png", ".jpg", ".jpeg", ".gif", ".webp"]);
 function artifactOpenRefusal(path, homeDir) {
   const root = homeDir === void 0 ? artifactsDir() : artifactsDir(void 0, homeDir);
@@ -22403,12 +22857,12 @@ async function openArtifact(path, homeDir) {
   if (refusal2) throw new Error(describeArtifactRefusal(refusal2));
   const launch = artifactLaunchArgv(path, process.platform, homeDir);
   if (!launch) throw new Error(describeArtifactRefusal("launch-failed"));
-  await new Promise((done2, fail8) => {
+  await new Promise((done2, fail9) => {
     try {
       const child = spawn(launch.command, launch.args, { stdio: "ignore", detached: true });
       child.on(
         "error",
-        (err) => fail8(
+        (err) => fail9(
           new Error(
             t("artifact.open_launch_failed_detail", {
               reason: describeArtifactRefusal("launch-failed"),
@@ -22422,7 +22876,7 @@ async function openArtifact(path, homeDir) {
         done2();
       });
     } catch (err) {
-      fail8(
+      fail9(
         new Error(
           t("artifact.open_launch_failed_detail", {
             reason: describeArtifactRefusal("launch-failed"),
@@ -23279,4 +23733,4 @@ function trunc(stdout, stderr) {
  *    `--tree` 的命令帮助里，让用户自己知道 `--tree` 意味着什么。
  */
 
-export { AGENT_ROLE_DIAG_MODULE, ARTIFACT_MAX_TOTAL_BYTES, ARTIFACT_RETENTION_DEFAULTS, ATTACHMENT_MAX_TOTAL_BYTES, ATTACHMENT_RETENTION_DEFAULTS, AgentLoop, ApprovalCache, BLOCKED_TOOLS, BudgetGuard, BudgetStore, CHECKPOINT_MAX_TOTAL_BYTES, CLAUDE_EVENT_NAMES, CLAUDE_TOOL_NAMES, CODE_MODE_LIMITS, CODE_MODE_SDK_TAG, CONFIG_KEYS, CURRENT_CONFIG_VERSION, CheckpointManager, CheckpointStore, CodeSandbox, ComplianceEngine, ContextCompressor, DEFAULT_COMPLIANCE_ACTIONS, DEFAULT_COMPLIANCE_SETTINGS, DEFAULT_COMPRESSION_THRESHOLD, DEFAULT_GOAL_MAX_ROUNDS, DEFAULT_MAX_HOLD_CHARS, DelegateManager, EMPTY_RULES, EPOCH_DISK_LEDGER, EpochConfigSchema, FTS_TABLES, FTS_TRIGGERS, GOAL_BLOCK_CODES, GoalService, GoalStore, HEADLESS_AUDIT_CODES, HookManager, INSTRUCTION_BUDGET_CHARS, INSTRUCTION_FILES, ImageLoadError, ImportTrustStore, LAUNCHD_LABEL_PREFIX, LOCK_HEARTBEAT_MS, LOCK_STALE_MS, LastOpenSessions, MARKETPLACE_DISPLAY_FIELDS, MARKETPLACE_FILE, MAX_AUDIT_ENTRIES, MAX_COMMAND_DEPTH, MAX_GOAL_MAX_ROUNDS, MAX_IMPORT_DEPTH, MAX_LAST_OPEN_SESSIONS, MAX_OBJECTIVE_CHARS, MAX_REASON_CHARS, MAX_RECENT_WORKSPACES, MODEL_GIVE_UP_THRESHOLD, MULTIMODAL_DEFAULTS, ManagedPolicyError, ManagedSettingsSchema, MemoryManager, MemoryReviewer, ModelFailureTracker, NOMINAL_TOTAL_BYTES, NO_REVEALED_TOOLS, PACK_EXCLUDES, PACK_MAX_BYTES, PACK_MAX_FILES, PERMISSION_AUDIT_CODES, PLUGIN_LAYOUT, PLUGIN_MANIFEST_FILE, PLUGIN_MANIFEST_KEYS, PLUGIN_NAME_PATTERN, PLUGIN_ROOT_ENV, PLUGIN_ROOT_TOKEN, PLUGIN_VISIBILITY, POLICY_DECISIONS, PROBE_VERSION, PROJECT_AGENTS_SUBDIR, PROVIDER_NO_CREDENTIAL, PermissionManager, PlanModeState, PluginAuthorSchema, PluginStore, PolicyRuleSchema, ProviderError, ProviderRouter, RECORDING_KEEP_RUNS, RECORDING_MAX_BYTES, ROLE_FRONTMATTER_SCHEMA, RUN_CODE_TOOL, RecentWorkspaces, SANDBOX_COVERS, SANDBOX_EXCLUDES, SCALAR_KEYS, SCHEDULE_DEFAULTS, SCHEDULE_DEFAULT_ALLOWLIST, SCHEDULE_FORM_BUDGET_USD, SCHEDULE_ISSUE_CODES, SCHTASKS_FOLDER, SESSION_MESSAGES_READ_TOOL, SESSION_MESSAGES_SEARCH_TOOL, SESSION_QUERY_TOOLS, SESSION_SEARCH_TOOL, SESSION_TRACE_TOOL, SETTINGS_LAYER_ORDER, SETTING_WRITE_KEYS, SETTING_WRITE_LAYERS, SKILL_CREATE_TOOL, SKILL_EDIT_TOOL, SKILL_PATCH_TOOL, SKILL_VIEW_TOOL, SKILL_WRITE_FILE_TOOL, SLASH_COMMANDS_DIAG_MODULE, ScheduleRecorder, ScheduleRegistrar, ScheduleStore, SessionManager, SessionQueries, SessionReferences, SettingsFileError, SettingsFileSchema, SkillLearner, SkillSystem, TOOL_SEARCH_TOOL, TaskNoticeTracker, ToolRegistry, TrackerDB, TrustManager, Workspace, acquireScheduleLock, addMarketplace, addUsage, admitArtifact, admitArtifacts, affectedPaths, artifactLaunchArgv, artifactOpenRefusal, assertLevelAllowed, blockedRoleTools, buildContextBreakdown, buildFireArgv, buildFtsMatchQuery, buildSchemaExports, buildSystemPrompt, buildTrigramMatchQuery, builtinRoles, checkEpochVersion, checkFtsHealth, checkShadowing, classifyProviderError, clearModelCache, coalesceRecording, codeModeWorkerPath, commandNameFromRelPath, compileRuleLists, compressionOptions, computeCost, computeCostMicros, computeExecHash, countRules, createAllowAllGate, createAllowAllImportGate, createAskQuestionTool, createCodeExecTool, createDelegateTool, createDenyAllGate, createDenyAllImportGate, createGoalTool, createImportGate, createMemoryTool, createPlanModeTools, createRoleFile, createRoleScope, createRunCodeTool, createScheduleDraftTool, createSessionMessagesReadTool, createSessionMessagesSearchTool, createSessionSearchTool, createSessionSearchTools, createSessionTraceTool, createSkillViewTool, createSkillWriteTools, createTodoTool, createToolRevealState, createToolScope, createToolSearchTool, createTrustGate, currentEpochVersion, decideImport, decideTrust, defaultConfig, defaultModelOf, describeArtifactRefusal, describeBackgroundTask, describeHeadlessPolicy, describeIsolation, describeJsonError, diagnoseSchedules, discoverMarkdown, discoverModels, discoverProject, displayCurrency, draftCommandLine, draftWidening, escapeRuleContent, estimateImageTokens, estimateRunTokens, estimateTokens, evaluateSelection, expandCommand, expandImports, explainSetting, extractArchive, findInstructionFiles, findProjectInstructions, findRole, formatBytes, formatSkillIndex, formatUsd, gateForTool, getCapability, getConfigIssues, getConfigOrigins, getImportGate, getTrustGate, hasDedicatedExecContent, hasExecTierContent, hasPromptCaching, hasProviderCredentials, hasReadTierContent, imageFromBase64, imageFromPath, imagePartTokens, importSkills, installPlugin, instructionDirs, instructionNotices, intervalSlots, inventoryProjectExtensions, inventoryTotal, isBlockCode, isCodeModeDeferred, isEmptyRules, isGoalPhase, isNonInteractive, isReadOnlySubCall, isSettingWriteLayer, isValidPluginName, isWithinWindow, isWritableSettingKey, labelSlug, layerRank, listRunningSchedules, listSessionCandidates, listWorkspaceFiles, loadCommandDefinitions, loadCommandFile, loadCommands, loadConfig, loadHookSources, loadKeybindings, loadLexiconDir, loadLexiconFiles, loadPlugins, loadPolicyFiles, loadPolicyRules, loadRoleDefinitions, loadRoleDir, loadedImports, localDateString, managedSwitchNotes, mapClaudeToolName, mapEpochToolName, mapOperationType, matchPreauthorization, matchRuleLists, matchesHook, mentionsPluginRoot, mergeHeadlessPolicy, mergeRoles, mergeSchedulePatch, microsToUsd, modelListCandidates, needsAllowlist, nextFallbackModel, nextRunAt, noConfigOrigins, noManagedPolicy, noPlugins, openArtifact, originOf, packFileName, packPlugin, parseClaudeSettingsHooks, parseClock, parseDate, parseFrontmatter, parseHooksConfig, parseHooksConfigVerbose, parseImportLine, parseModelList, parseRoleDefinition, parseScheduleDraft, parseSkillFrontmatter, parseTrigger, pendingImageTokens, persistParts, persistToolResults, persistedUsage, planPack, previewSkillImport, pricingFor, projectEntryForDisplay, pruneArtifacts, pruneAttachments, pruneRecordings, pruneSchedules, readImageSize, readMarketplaces, readPluginManifest, readPluginRecords, readProviderKeyEnv, readRecording, readSessionSurface, reclaimFtsSpace, redactLine, refreshOpenRouterMetadata, removeMarketplace, removeRecordings, removeRoleFile, removeSessionArtifacts, removeSessionAttachments, renderImportTree, renderProjectContext, renderSdkDeclaration, renderSelfIndex, repairSchedules, resolveArtifactRetention, resolveCodeModeWorker, resolveComplianceDirs, resolveEntrySource, resolveInWorkspace, resolveMarketplaceRef, resolveMentions, resolveMultimodalPolicy, resolvePolicyDirs, resolvePricingAt, resolveProjectRoot, resolveScheduleBackend, resolveSessionReference, resolveSessionVisibility, resolveSettings, resolveSkillDirs, resolveSource, resolveTar, resolveWorkspace, restoreParts, revealScopedProvider, roleScopedProvider, roleSourceLabel, ruleCovers, ruleFromString, ruleToString, runCode, runCommand2 as runCommand, sanitizeArgNames, sanitizeCommand, sanitizeFtsQuery, sanitizePath, sanitizeToolOutput, scanInstructions, scanPluginDir, scanSkillDirs, searchMarketplaces, setDisplayCurrency, setImportGate, setPluginEnabled, setTrustGate, settingValueChoices, settingValueKind, settingWriteApply, settingWriteLayers, settingWriteTargets, skillIndexDescription, skillIndexResidency, skillIndexStats, sniffMediaType, splitFrontmatter, staticToolProvider, stripArtifactData, substitutePluginRoot, suggestRuleFromApproval, systemOpenArgv, systemPromptSegments, toPosix, toolDefinitionTokens, toolMatches, toolTableTokens, totalTokens, traceSession, triggerPeriodMs, unescapeRuleContent, uninstallPlugin, unknownRoleSkills, unknownRoleTools, unloadedInstructionFiles, updateMarketplace, updatePlugin, usdToMicros, validateSchedule, validateTrigger, validateWindow, withGoalCompression, withGoalPrompt, workspaceDisplayPath, writeSettingValue };
+export { AGENT_ROLE_DIAG_MODULE, ARTIFACT_MAX_TOTAL_BYTES, ARTIFACT_RETENTION_DEFAULTS, ATTACHMENT_MAX_TOTAL_BYTES, ATTACHMENT_RETENTION_DEFAULTS, AgentLoop, ApprovalCache, BLOCKED_TOOLS, BudgetGuard, BudgetStore, CHECKPOINT_MAX_TOTAL_BYTES, CLAUDE_EVENT_NAMES, CLAUDE_TOOL_NAMES, CODE_MODE_LIMITS, CODE_MODE_SDK_TAG, CONFIG_KEYS, CURRENT_CONFIG_VERSION, CheckpointManager, CheckpointStore, CodeSandbox, ComplianceEngine, ContextCompressor, DEFAULT_COMPLIANCE_ACTIONS, DEFAULT_COMPLIANCE_SETTINGS, DEFAULT_COMPRESSION_THRESHOLD, DEFAULT_GOAL_MAX_ROUNDS, DEFAULT_MAX_HOLD_CHARS, DelegateManager, EMPTY_RULES, EPOCH_DISK_LEDGER, EpochConfigSchema, FTS_TABLES, FTS_TRIGGERS, GOAL_BLOCK_CODES, GoalService, GoalStore, HEADLESS_AUDIT_CODES, HookManager, INSTRUCTION_BUDGET_CHARS, INSTRUCTION_FILES, ImageLoadError, ImportTrustStore, LAUNCHD_LABEL_PREFIX, LOCK_HEARTBEAT_MS, LOCK_STALE_MS, LastOpenSessions, MARKETPLACE_DISPLAY_FIELDS, MARKETPLACE_FILE, MAX_AUDIT_ENTRIES, MAX_COMMAND_DEPTH, MAX_GOAL_MAX_ROUNDS, MAX_IMPORT_DEPTH, MAX_LAST_OPEN_SESSIONS, MAX_OBJECTIVE_CHARS, MAX_REASON_CHARS, MAX_RECENT_WORKSPACES, MODEL_GIVE_UP_THRESHOLD, MULTIMODAL_DEFAULTS, ManagedPolicyError, ManagedSettingsSchema, MemoryManager, MemoryReviewer, ModelFailureTracker, NOMINAL_TOTAL_BYTES, NO_REVEALED_TOOLS, PACK_EXCLUDES, PACK_MAX_BYTES, PACK_MAX_FILES, PERMISSION_AUDIT_CODES, PLUGIN_LAYOUT, PLUGIN_MANIFEST_FILE, PLUGIN_MANIFEST_KEYS, PLUGIN_NAME_PATTERN, PLUGIN_ROOT_ENV, PLUGIN_ROOT_TOKEN, PLUGIN_VISIBILITY, POLICY_DECISIONS, PROBE_VERSION, PROJECT_AGENTS_SUBDIR, PROVIDER_NO_CREDENTIAL, PermissionManager, PlanModeState, PluginAuthorSchema, PluginStore, PolicyRuleSchema, ProviderError, ProviderRouter, RECORDING_KEEP_RUNS, RECORDING_MAX_BYTES, ROLE_FRONTMATTER_SCHEMA, RUN_CODE_TOOL, RecentWorkspaces, SANDBOX_COVERS, SANDBOX_EXCLUDES, SCALAR_KEYS, SCHEDULE_DEFAULTS, SCHEDULE_DEFAULT_ALLOWLIST, SCHEDULE_FORM_BUDGET_USD, SCHEDULE_ISSUE_CODES, SCHTASKS_FOLDER, SESSION_MESSAGES_READ_TOOL, SESSION_MESSAGES_SEARCH_TOOL, SESSION_QUERY_TOOLS, SESSION_SEARCH_TOOL, SESSION_TRACE_TOOL, SETTINGS_LAYER_ORDER, SETTING_WRITE_KEYS, SETTING_WRITE_LAYERS, SKILL_CREATE_TOOL, SKILL_EDIT_TOOL, SKILL_PATCH_TOOL, SKILL_VIEW_TOOL, SKILL_WRITE_FILE_TOOL, SLASH_COMMANDS_DIAG_MODULE, ScheduleRecorder, ScheduleRegistrar, ScheduleStore, SessionManager, SessionQueries, SessionReferences, SettingsFileError, SettingsFileSchema, SkillLearner, SkillSystem, TOOL_SEARCH_TOOL, TaskNoticeTracker, ToolRegistry, TrackerDB, TrustManager, Workspace, acquireScheduleLock, addMarketplace, addUsage, admitArtifact, admitArtifacts, affectedPaths, artifactLaunchArgv, artifactOpenRefusal, assertLevelAllowed, blockedRoleTools, buildContextBreakdown, buildFireArgv, buildFtsMatchQuery, buildSchemaExports, buildSystemPrompt, buildTrigramMatchQuery, builtinRoles, checkEpochVersion, checkFtsHealth, checkShadowing, classifyPersistFailure, classifyProviderError, clearModelCache, coalesceRecording, codeModeWorkerPath, commandNameFromRelPath, compileRuleLists, compressionOptions, computeCost, computeCostMicros, computeExecHash, countRules, createAllowAllGate, createAllowAllImportGate, createAskQuestionTool, createCodeExecTool, createDelegateTool, createDenyAllGate, createDenyAllImportGate, createGoalTool, createImportGate, createMemoryTool, createPlanModeTools, createRoleFile, createRoleScope, createRunCodeTool, createScheduleDraftTool, createSessionMessagesReadTool, createSessionMessagesSearchTool, createSessionSearchTool, createSessionSearchTools, createSessionTraceTool, createSkillViewTool, createSkillWriteTools, createTodoTool, createToolRevealState, createToolScope, createToolSearchTool, createTrustGate, currentEpochVersion, decideImport, decideTrust, defaultConfig, defaultModelOf, describeArtifactRefusal, describeBackgroundTask, describeHeadlessPolicy, describeIsolation, describeJsonError, diagnoseSchedules, discoverMarkdown, discoverModels, discoverProject, displayAllows, displayCurrency, draftCommandLine, draftWidening, escapeRuleContent, estimateImageTokens, estimateRunTokens, estimateTokens, evaluateSelection, expandCommand, expandImports, explainSetting, extractArchive, findInstructionFiles, findProjectInstructions, findRole, formatBytes, formatSkillIndex, formatUsd, gateForTool, getCapability, getConfigIssues, getConfigOrigins, getImportGate, getTrustGate, hasDedicatedExecContent, hasExecTierContent, hasPromptCaching, hasProviderCredentials, hasReadTierContent, imageFromBase64, imageFromPath, imagePartTokens, importParts, importSkills, installPlugin, instructionDirs, instructionNotices, intervalSlots, inventoryProjectExtensions, inventoryTotal, isBlockCode, isCodeModeDeferred, isEmptyRules, isGoalPhase, isNonInteractive, isReadOnlySubCall, isSettingWriteLayer, isTransientPersistFailure, isValidPluginName, isWithinWindow, isWritableSettingKey, labelSlug, layerRank, listRunningSchedules, listSessionCandidates, listWorkspaceFiles, loadCommandDefinitions, loadCommandFile, loadCommands, loadConfig, loadHookSources, loadKeybindings, loadLexiconDir, loadLexiconFiles, loadPlugins, loadPolicyFiles, loadPolicyRules, loadRoleDefinitions, loadRoleDir, loadedImports, localDateString, managedSwitchNotes, mapClaudeToolName, mapEpochToolName, mapOperationType, matchPreauthorization, matchRuleLists, matchesHook, mentionsPluginRoot, mergeHeadlessPolicy, mergeRoles, mergeSchedulePatch, microsToUsd, modelListCandidates, needsAllowlist, nextFallbackModel, nextRunAt, noConfigOrigins, noManagedPolicy, noPlugins, openArtifact, originOf, packFileName, packPlugin, parseClaudeSettingsHooks, parseClock, parseDate, parseFrontmatter, parseHooksConfig, parseHooksConfigVerbose, parseImportLine, parseModelList, parseRoleDefinition, parseScheduleDraft, parseSkillFrontmatter, parseTrigger, pendingImageTokens, persistFailureCode, persistParts, persistToolResults, persistedUsage, planPack, previewSkillImport, pricingFor, projectEntryForDisplay, pruneArtifacts, pruneAttachments, pruneRecordings, pruneSchedules, readImageSize, readMarketplaces, readPluginManifest, readPluginRecords, readProviderKeyEnv, readRecording, readSessionSurface, reclaimFtsSpace, redactLine, refreshOpenRouterMetadata, removeMarketplace, removeRecordings, removeRoleFile, removeSessionArtifacts, removeSessionAttachments, renderImportTree, renderProjectContext, renderSdkDeclaration, renderSelfIndex, repairSchedules, resolveArtifactRetention, resolveCodeModeWorker, resolveComplianceDirs, resolveEntrySource, resolveInWorkspace, resolveMarketplaceRef, resolveMentions, resolveMultimodalPolicy, resolvePolicyDirs, resolvePricingAt, resolveProjectRoot, resolveScheduleBackend, resolveSessionReference, resolveSessionVisibility, resolveSettings, resolveSkillDirs, resolveSource, resolveTar, resolveWorkspace, restoreParts, revealScopedProvider, roleScopedProvider, roleSourceLabel, ruleCovers, ruleFromString, ruleToString, runCode, runCommand2 as runCommand, sanitizeArgNames, sanitizeCommand, sanitizeFtsQuery, sanitizePath, sanitizeToolOutput, scanInstructions, scanPluginDir, scanSkillDirs, searchMarketplaces, setDisplayCurrency, setImportGate, setPluginEnabled, setTrustGate, settingValueChoices, settingValueKind, settingWriteApply, settingWriteLayers, settingWriteTargets, skillIndexDescription, skillIndexResidency, skillIndexStats, sniffMediaType, splitFrontmatter, staticToolProvider, stripArtifactData, substitutePluginRoot, suggestRuleFromApproval, systemOpenArgv, systemPromptSegments, toPosix, toolDefinitionTokens, toolMatches, toolTableTokens, totalTokens, traceSession, triggerPeriodMs, unescapeRuleContent, uninstallPlugin, unknownRoleSkills, unknownRoleTools, unloadedInstructionFiles, updateMarketplace, updatePlugin, usdToMicros, validateSchedule, validateTrigger, validateWindow, withGoalCompression, withGoalPrompt, workspaceDisplayPath, writeSettingValue };