@epoch-agent/core 0.15.0 → 0.16.0

package/dist/index.d.ts

@@ -11791,6 +11791,14 @@ declare const EpochConfigSchema: z.ZodObject<{
         label: z.ZodString;
         icon: z.ZodOptional<z.ZodString>;
     }, z.core.$strip>>;
+    settingsHidden: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    settingsPanes: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        id: z.ZodString;
+        label: z.ZodString;
+        icon: z.ZodOptional<z.ZodString>;
+        url: z.ZodString;
+        before: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>>>;
 }, z.core.$strip>;
 /**
  * 全默认配置 —— 从 schema 派生，不是第二份字面量。
@@ -16964,8 +16972,8 @@ type BackendOutcome = {
 /**
  * OS 侧那条任务此刻的样子。`null` = 那儿没有这条任务。
  *
- * 两个字段都是**给 `doctor` 比对用的字符串**，不是结构 —— 两个平台能拿到的
- * 东西形状完全不同（Windows 是 `schtasks /Query` 的一行文本，macOS 是我们
+ * `commandLine` / `spec` 都是**给 `doctor` 比对用的字符串**，不是结构 —— 两个平台
+ * 能拿到的东西形状完全不同（Windows 是 `schtasks /Query` 的一行文本，macOS 是我们
  * 自己写的那份 plist），硬拗成同一个结构只会让两边各塞一半空字段。
  * 比对的另一半由 `expectedSnapshot()` 用**同一套算法**从库里那行算出来。
  */
@@ -16973,6 +16981,20 @@ interface OsTaskSnapshot {
     osTaskId: string;
     /** 那条命令行 */
     commandLine: string;
+    /**
+     * 同一条命令行**切成段**。
+     *
+     * ⚠️ **它不是 `commandLine` 的便利副本，是一件 `commandLine` 答不了的事。**
+     * `doctor` 判一条孤儿归不归自己管，靠的是命令行里 `--home` 后面那一段
+     * （规矩见 [argv.ts](./argv.ts) 第 2 条：数据目录固化进命令行）。而从拼好的
+     * 那一串里把它切回来，两个平台都不可靠：launchd 那侧 `commandLine` 是
+     * `argv.join(' ')`，home 路径带空格就切不开；Windows 那侧每段带引号，
+     * 按空白切又会把 `"C:\Program Files\..."` 劈成两半。
+     *
+     * 所以由**后端**交出来 —— 它手上有没拼之前的那份：launchd 本来就是数组，
+     * schtasks 用 `taskRunArgv()` 做 `quoteTaskRun()` 的逆。
+     */
+    argv: string[];
     /** 触发规格 */
     spec: string;
     /** 停用了没有 */
@@ -17095,6 +17117,15 @@ type RegisterOutcome = {
 declare class ScheduleRegistrar {
     private readonly opts;
     constructor(opts: RegistrarOptions);
+    /**
+     * 固化进命令行的那个数据目录。
+     *
+     * **公开出来是给 `doctor` 用的**（同下面 `toRegisterInput` 那一处的理由）：
+     * 它要判「OS 侧这条没主的任务是不是我们这个 home 的」，而那个比较的另一头
+     * 必须和注册时真的写进命令行的那个值**同源**。让调用方自己再传一个 home 进来
+     * 的话，两者对不上时不会有任何地方报错 —— 只会安静地把别人的任务判成孤儿。
+     */
+    get homeDir(): string;
     /** 这条任务在 OS 侧叫什么。没有后端时是空串 */
     osTaskIdFor(taskId: string): string;
     /**
@@ -17177,6 +17208,11 @@ declare class ScheduleRegistrar {
  * 第三类的判据要写清楚：**DB 是真源。** 反过来（以 OS 为准）意味着我们要把
  * `schtasks` 的时间语法反解析回三档，那是一条只输不赢的路。
  *
+ * ⚠️ **第二类先过一道 home 闸**：OS 侧的枚举是刻意跨 home 的，所以「库里没有」
+ * 不等于「没人认领」—— 同一台机器上另一个数据目录（嵌入宿主 / 另一个
+ * `EPOCH_PROFILE`）的活任务也在同一个前缀底下。判据全文在 {@link ownedByThisHome}，
+ * 那儿记着它拦下的那次真实误删。
+ *
  * ⚠️ **第三类在两个平台上都是逐字比的，而 Windows 那侧曾经不是**（2026-08-18
  * 真机那一轮改的）。两头各自归一到同一个串（`DAILY|09:00` / `EVERY|15` /
  * `ONCE|2026-12-31T23:00`…）：一头从 `/Query /XML` 算（`specFromXml`），

package/dist/index.js

@@ -4,7 +4,7 @@ import { join, dirname, resolve, relative, isAbsolute, sep, extname, basename }
 import { execFile, execSync, execFileSync, spawn } from 'child_process';
 import { createLogger, dbPath, resolveHomeDir, DEFAULT_MAX_TURNS, PROJECT_DIR_NAME, guardSpawn, t, suggestKey, misspelledKeyIssues, openDatabase, migrate, releaseDatabase, parseLenient, issueDetails, splitWords, unknownKeyIssues, checkpointsDir, pluginsDir, projectHooksPath, projectClaudeSettingsPath, projectClaudeLocalSettingsPath, projectSettingsPath, projectLocalSettingsPath, projectPoliciesDir, trustedImportsPath, canProbeGit, budgetStatePath, artifactsDir, UNLIMITED_TURNS, turnLimitOf, configPath, managedSettingsPath, getSecretValues, listStoredSecretNames, maskApiKey, setSectionField, countCodePoints, headCodePoints, attachmentsDir, isInWorkspace, workspacesPath, samePath, lastSessionsPath, automationLogsDir, projectComplianceDir, projectSkillsDir, trustPath, projectCommandsDir, detectBackend, EXEC_PATH_AS_NODE_ENV, isolate, createStreamDecoder, parseShellCommand, writeArtifact, envPath, checkDangerousCommand, checkObfuscation, keepHeadAndTail, normalizeForMatch, isReadOnlyCommand, CODE_EXEC_ROOTS, tailCodePoints } from '@epoch-agent/infra';
 export { IS_WINDOWS, WINDOWS_HIDE_FLAGS, buildBwrapArgs, buildProfile, checkDangerousCommand, checkObfuscation, createLogger, detectBackend, getDefaultShell, getPythonCommand, isInWorkspace, isReadOnlyCommand, isolate, maskApiKey, probeBubblewrap, probeSeatbelt, complianceDir as resolveComplianceDir, policiesDir as resolvePoliciesDir, setLogLevel } from '@epoch-agent/infra';
-import { PROVIDER_TYPES, OPERATION_TYPES as OPERATION_TYPES$1, COMPLIANCE_CATEGORIES, COMPLIANCE_ACTIONS, SEARCH_PROVIDER_TYPES, CURRENCIES, LANGS, PERMISSION_LEVELS, SHELL_KINDS, ToolExposure, MAX_OPTIONS, MIN_OPTIONS, MAX_HEADER_CHARS, MAX_QUESTIONS, SCHEDULE_INTERVAL_MINUTES, isPermissionLevel, SCHEDULE_DRAFT_TOOL, isValidAgentRoleName, DEFAULT_AGENT_ROLE, isValidCommandName, RESERVED_COMMAND_NAMES, parseModelRef, isWirePluginArchiveName, systemNote, formatMoney, totalUsageTokens, NOOP_TELEMETRY, METRIC, contentToText, GEN_AI, isPromptOversize, promptTokens, apiKeyEnvVar, PROVIDER_INFOS, isProviderType, API_KEY_ENV_VARS, KEY_ACTIONS, tableOf, perAction, isKeyAction, parseSequence, RESERVED_CHORDS, chordId, sequenceId, ACTION_CONTEXTS, SEQUENCE_CONTEXTS, assertNeverPart, MAX_ATTACH_FILES, MAX_ATTACH_TOTAL_BYTES, MAX_SESSION_REFS, utf8ByteLength, truncateToBudget, attachSessionSurface, isContextNearlyFull, isOperationType, normalizeApproval, imagePartOmittedSummary, MAX_ATTACH_BYTES, SIMULTANEOUS_CONTEXTS, SESSION_REFERENCE_ERROR_CODES, filePartSummary, sessionPartSummary } from '@epoch-agent/protocol';
+import { PROVIDER_TYPES, OPERATION_TYPES as OPERATION_TYPES$1, COMPLIANCE_CATEGORIES, COMPLIANCE_ACTIONS, SEARCH_PROVIDER_TYPES, CURRENCIES, LANGS, isSettingsPaneId, SETTINGS_PANE_IDS, PERMISSION_LEVELS, SHELL_KINDS, ToolExposure, MAX_OPTIONS, MIN_OPTIONS, MAX_HEADER_CHARS, MAX_QUESTIONS, SCHEDULE_INTERVAL_MINUTES, isPermissionLevel, SCHEDULE_DRAFT_TOOL, isValidAgentRoleName, DEFAULT_AGENT_ROLE, isValidCommandName, RESERVED_COMMAND_NAMES, parseModelRef, isWirePluginArchiveName, systemNote, formatMoney, totalUsageTokens, NOOP_TELEMETRY, METRIC, contentToText, GEN_AI, isPromptOversize, promptTokens, apiKeyEnvVar, PROVIDER_INFOS, isProviderType, API_KEY_ENV_VARS, KEY_ACTIONS, tableOf, perAction, isKeyAction, parseSequence, RESERVED_CHORDS, chordId, sequenceId, ACTION_CONTEXTS, SEQUENCE_CONTEXTS, assertNeverPart, MAX_ATTACH_FILES, MAX_ATTACH_TOTAL_BYTES, MAX_SESSION_REFS, utf8ByteLength, truncateToBudget, attachSessionSurface, isContextNearlyFull, isOperationType, normalizeApproval, imagePartOmittedSummary, MAX_ATTACH_BYTES, SIMULTANEOUS_CONTEXTS, SESSION_REFERENCE_ERROR_CODES, filePartSummary, sessionPartSummary } from '@epoch-agent/protocol';
 export { API_KEY_ENV_VARS, COMPLIANCE_ACTIONS, COMPLIANCE_CATEGORIES, MAX_ATTACH_BYTES, MAX_ATTACH_FILES, MAX_ATTACH_TOTAL_BYTES, MAX_SESSION_ATTACH_BYTES, MAX_SESSION_REFS, OPERATION_TYPES, PERMISSION_LEVELS, PLAN_OUTCOMES, PROVIDER_INFOS, PROVIDER_TYPES, ToolExposure, apiKeyEnvVar, extractAllMentions, extractMentions, extractSessionMentions, getProviderInfo, isOperationType, isPermissionLevel, isPlanOutcome, isProviderType, normalizeApproval } from '@epoch-agent/protocol';
 import { createRequire } from 'module';
 import { randomUUID, createHash, randomBytes } from 'crypto';
@@ -34,7 +34,8 @@ __export(schtasks_exports, {
   quoteTaskRun: () => quoteTaskRun,
   scheduleArgs: () => scheduleArgs,
   specFromTrigger: () => specFromTrigger,
-  specFromXml: () => specFromXml
+  specFromXml: () => specFromXml,
+  taskRunArgv: () => taskRunArgv
 });
 function createSchtasksBackend(opts = {}) {
   const run = opts.run ?? runCommand2;
@@ -99,9 +100,11 @@ function createSchtasksBackend(opts = {}) {
     async inspect(osTaskId) {
       const res = await run("schtasks", ["/Query", "/TN", osTaskId, "/XML"]);
       if (res.code !== 0) return null;
+      const commandLine = commandLineFromXml(res.stdout);
       return {
         osTaskId,
-        commandLine: commandLineFromXml(res.stdout),
+        commandLine,
+        argv: taskRunArgv(commandLine),
         spec: specFromXml(res.stdout),
         enabled: !/<Enabled>\s*false\s*<\/Enabled>/i.test(res.stdout)
       };
@@ -118,6 +121,13 @@ function createSchtasksBackend(opts = {}) {
 function quoteTaskRun(argv) {
   return argv.map((part) => `"${part.replace(/"/g, "")}"`).join(" ");
 }
+function taskRunArgv(commandLine) {
+  const out = [];
+  const re = /"([^"]*)"|(\S+)/g;
+  let m;
+  while ((m = re.exec(commandLine)) !== null) out.push(m[1] ?? m[2] ?? "");
+  return out;
+}
 function scheduleArgs(trigger) {
   if (trigger.kind === "interval") {
     const slots = intervalSlots(trigger.everyMinutes);
@@ -331,9 +341,11 @@ function createLaunchdBackend(opts = {}) {
         return null;
       }
       const disabled = await isDisabled(run, label);
+      const argv = extractProgramArguments(xml2);
       return {
         osTaskId: label,
-        commandLine: extractProgramArguments(xml2).join(" "),
+        commandLine: argv.join(" "),
+        argv,
         spec: extractCalendarSpec(xml2),
         enabled: !disabled
       };
@@ -12421,8 +12433,48 @@ var EpochConfigSchema = z.object({
     message: "blankCards: id must be unique"
   }).optional(),
   blankGreeting: BlankGreetingSchema.optional(),
-  user: HostUserSchema.optional()
+  user: HostUserSchema.optional(),
+  settingsHidden: z.array(z.string().min(1)).min(1).optional(),
+  settingsPanes: z.array(
+    z.object({
+      id: z.string().min(1).refine((id) => !isSettingsPaneId(id), {
+        message: `id must not collide with a built-in pane (${SETTINGS_PANE_IDS.join(", ")})`
+      }),
+      label: z.string().min(1),
+      icon: z.string().min(1).optional(),
+      url: z.string().min(1).refine(
+        (url) => {
+          try {
+            const scheme = new URL(url).protocol;
+            return scheme === "http:" || scheme === "https:";
+          } catch {
+            return false;
+          }
+        },
+        { message: "url must be an absolute http(s) URL" }
+      ),
+      before: z.string().min(1).optional()
+    })
+  ).min(1).refine((items) => new Set(items.map((item) => item.id)).size === items.length, {
+    message: "settingsPanes: id must be unique"
+  }).optional()
 });
+function settingsHiddenIssues(config) {
+  const hidden = config.settingsHidden;
+  if (hidden === void 0) return [];
+  return hidden.filter((id) => !isSettingsPaneId(id)).map((id) => ({
+    path: "settingsHidden",
+    message: `unknown settings pane id: ${id} (known: ${SETTINGS_PANE_IDS.join(", ")})`
+  }));
+}
+function settingsPaneBeforeIssues(config) {
+  const panes = config.settingsPanes;
+  if (panes === void 0) return [];
+  return panes.filter((pane) => pane.before !== void 0 && !isSettingsPaneId(pane.before)).map((pane) => ({
+    path: `settingsPanes.${pane.id}.before`,
+    message: `unknown settings pane id: ${String(pane.before)} (known: ${SETTINGS_PANE_IDS.join(", ")})`
+  }));
+}
 function defaultConfig() {
   return EpochConfigSchema.parse({});
 }
@@ -12893,6 +12945,8 @@ function parseRawConfig(raw, issues, track) {
     EpochConfigSchema.parse({})
   );
   issues.push(...outcome.issues);
+  issues.push(...settingsHiddenIssues(outcome.value));
+  issues.push(...settingsPaneBeforeIssues(outcome.value));
   if (outcome.issues.length === 0) collectKeyPaths(migrated.raw, track.file);
   return outcome.value;
 }
@@ -19524,6 +19578,9 @@ var ScheduleRegistrar = class {
     this.opts = opts;
   }
   opts;
+  get homeDir() {
+    return this.opts.homeDir;
+  }
   osTaskIdFor(taskId) {
     const backend = this.opts.backend;
     if (!backend) return "";
@@ -19594,7 +19651,6 @@ var ScheduleRegistrar = class {
     if (this.opts.backend && def.osTaskId) await this.opts.backend.retire(def.osTaskId);
   }
 };
-// src/schedule/doctor.ts
 async function diagnoseSchedules(opts) {
   const { store, backend, registrar } = opts;
   if (!backend) return { checked: 0, drifts: [], unsupported: true };
@@ -19631,8 +19687,18 @@ async function diagnoseSchedules(opts) {
       });
     }
   }
+  let foreign = 0;
   for (const osTaskId of osTaskIds) {
     if (seen.has(osTaskId)) continue;
+    const snapshot = await backend.inspect(osTaskId);
+    if (!snapshot) {
+      foreign++;
+      continue;
+    }
+    if (!ownedByThisHome(snapshot.argv, registrar.homeDir)) {
+      foreign++;
+      continue;
+    }
     const taskId = backend.taskIdFrom(osTaskId);
     drifts.push({
       kind: "orphan-in-os",
@@ -19640,7 +19706,17 @@ async function diagnoseSchedules(opts) {
       ...taskId ? { scheduleId: taskId } : {}
     });
   }
-  return { checked: defs.length + osTaskIds.length - seen.size, drifts, unsupported: false };
+  return {
+    checked: defs.length + osTaskIds.length - seen.size - foreign,
+    drifts,
+    unsupported: false
+  };
+}
+function ownedByThisHome(argv, homeDir) {
+  const at = argv.indexOf("--home");
+  const home = at >= 0 ? argv[at + 1] : void 0;
+  if (home === void 0 || home.length === 0) return true;
+  return samePath(home, homeDir);
 }
 function compare2(def, snapshot, backend, registrar) {
   const expected = backend.expectedSnapshot(registrar.toRegisterInput(def, def.osCommand));

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@epoch-agent/core",
-  "version": "0.15.0",
+  "version": "0.16.0",
   "private": false,
   "description": "epoch-agent 核心引擎：ReAct 循环、Provider 路由、工具调度、记忆管理",
   "repository": {
@@ -27,8 +27,8 @@
     "gpt-tokenizer": "^3.4.0",
     "js-yaml": "^5.2.3",
     "zod": "^4.4.3",
-    "@epoch-agent/infra": "0.15.0",
-    "@epoch-agent/protocol": "0.15.0"
+    "@epoch-agent/infra": "0.16.0",
+    "@epoch-agent/protocol": "0.16.0"
   },
   "devDependencies": {
     "@ai-sdk/amazon-bedrock": "^5.0.40",