@epoch-agent/core 0.18.0 → 0.20.0

package/dist/index.js

@@ -650,7 +650,7 @@ var ToolRegistry = class {
     this.addTool(tool, source);
   }
   registerTools(tools, source = "builtin") {
-    for (const t81 of tools) this.addTool(t81, source);
+    for (const t80 of tools) this.addTool(t80, source);
   }
   addTool(tool, source) {
     const existing = this.tools.get(tool.name);
@@ -699,14 +699,14 @@ var ToolRegistry = class {
     return isCodeModeDeferred(tool) ? ToolExposure.Deferred : declared;
   }
   exposed() {
-    return this.list().filter((t81) => this.exposureOf(t81) === ToolExposure.Direct);
+    return this.list().filter((t80) => this.exposureOf(t80) === ToolExposure.Direct);
   }
   byExposure(exposure) {
-    return this.list().filter((t81) => this.exposureOf(t81) === exposure);
+    return this.list().filter((t80) => this.exposureOf(t80) === exposure);
   }
   codeModeDeclared() {
     if (!this.codeMode) return [];
-    return this.list().filter((t81) => isCodeModeDeferred(t81));
+    return this.list().filter((t80) => isCodeModeDeferred(t80));
   }
   sourceOf(name) {
     return this.tools.get(name)?.source;
@@ -755,7 +755,7 @@ var ToolRegistry = class {
 function staticToolProvider(tools) {
   return {
     list: () => tools,
-    get: (name) => tools.find((t81) => t81.name === name)
+    get: (name) => tools.find((t80) => t80.name === name)
   };
 }
 var log = createLogger("tokenizer");
@@ -1388,7 +1388,7 @@ var DelegateManager = class {
   }
   normalizeTasks(args) {
     if (args.tasks && args.tasks.length > 0) {
-      return args.role ? args.tasks.map((t81) => ({ ...t81, role: t81.role ?? args.role })) : args.tasks;
+      return args.role ? args.tasks.map((t80) => ({ ...t80, role: t80.role ?? args.role })) : args.tasks;
     }
     if (args.goal) return [{ goal: args.goal, ...args.role ? { role: args.role } : {} }];
     return [];
@@ -1398,7 +1398,7 @@ var DelegateManager = class {
     for (let i = 0; i < tasks.length; i += maxConcurrent) {
       const batch = tasks.slice(i, i + maxConcurrent);
       const batchResults = await Promise.allSettled(
-        batch.map((t81) => this.runSingleTask(t81, parentSessionId, signal))
+        batch.map((t80) => this.runSingleTask(t80, parentSessionId, signal))
       );
       for (const r of batchResults) {
         if (r.status === "fulfilled") {
@@ -1556,21 +1556,21 @@ function createDelegateTool(runner, config, roles) {
     operation: "command",
     describeTarget: (args) => {
       const tasks = Array.isArray(args["tasks"]) ? args["tasks"] : [];
-      const goals = tasks.map((t81) => String(t81["goal"] ?? ""));
+      const goals = tasks.map((t80) => String(t80["goal"] ?? ""));
       const single = typeof args["goal"] === "string" ? args["goal"] : "";
       return [...goals, single].filter(Boolean).join(" | ");
     },
     async execute(args, ctx) {
       const start = Date.now();
       const rawTasks = Array.isArray(args["tasks"]) ? args["tasks"] : void 0;
-      const tasks = rawTasks?.map((t81) => {
-        const o = t81;
+      const tasks = rawTasks?.map((t80) => {
+        const o = t80;
         return {
           goal: String(o["goal"] ?? "").trim(),
           context: String(o["context"] ?? ""),
           ...typeof o["role"] === "string" && o["role"].trim() ? { role: o["role"].trim() } : {}
         };
-      }).filter((t81) => t81.goal.length > 0);
+      }).filter((t80) => t80.goal.length > 0);
       const goal = typeof args["goal"] === "string" ? args["goal"].trim() : "";
       const topRole = typeof args["role"] === "string" ? args["role"].trim() : "";
       if ((!tasks || tasks.length === 0) && !goal) {
@@ -1586,7 +1586,7 @@ function createDelegateTool(runner, config, roles) {
         };
       }
       const known = listRoles();
-      const requested = [...(tasks ?? []).map((t81) => t81.role), topRole].filter(
+      const requested = [...(tasks ?? []).map((t80) => t80.role), topRole].filter(
         (r) => Boolean(r)
       );
       const unknown = [...new Set(requested)].filter((r) => !known.some((k) => k.name === r));
@@ -1760,8 +1760,8 @@ function createGoalTool(deps) {
 }
 var VALID_TARGETS = ["memory", "user"];
 var VALID_ACTIONS = ["add", "replace", "remove", "search", "read", "budget"];
-function isValidTarget(t81) {
-  return typeof t81 === "string" && VALID_TARGETS.includes(t81);
+function isValidTarget(t80) {
+  return typeof t80 === "string" && VALID_TARGETS.includes(t80);
 }
 function isValidAction(a) {
   return VALID_ACTIONS.includes(a);
@@ -4915,7 +4915,7 @@ function available(tools) {
   if (tools.length === 0) {
     return "No deferred tools in this session \u2014 every tool is already in your tool list.";
   }
-  const names = tools.map((t81) => t81.name).sort();
+  const names = tools.map((t80) => t80.name).sort();
   const shown = names.slice(0, MAX_LISTED);
   const rest = names.length - shown.length;
   return `Searchable tools: ${shown.join(", ")}${rest > 0 ? ` (\u2026and ${rest} more)` : ""}.`;
@@ -5035,15 +5035,15 @@ var TrackerDB = class {
     );
     this.db.transaction(() => {
       this.db.prepare("DELETE FROM todos WHERE session_id = ?").run(sessionId);
-      for (const t81 of todos) {
+      for (const t80 of todos) {
         insertStmt.run({
-          id: t81.id,
+          id: t80.id,
           session_id: sessionId,
-          content: t81.content,
-          status: t81.status,
-          reason: t81.reason || null,
-          created_at: t81.created_at,
-          updated_at: t81.updated_at
+          content: t80.content,
+          status: t80.status,
+          reason: t80.reason || null,
+          created_at: t80.created_at,
+          updated_at: t80.updated_at
         });
       }
     })();
@@ -5065,9 +5065,9 @@ function formatTodoList(todos, pendingCount) {
     cancelled: "\u5DF2\u53D6\u6D88"
   };
   lines.push(`[todo] \u72B6\u6001\u6C47\u603B: ${pendingCount} \u4E2A\u5F85\u5B8C\u6210`);
-  for (const t81 of todos) {
-    const label = statusLabel[t81.status] || t81.status;
-    lines.push(`- [${label}]  ${t81.content}${t81.reason ? ` \u2014\u2014 ${t81.reason}` : ""}`);
+  for (const t80 of todos) {
+    const label = statusLabel[t80.status] || t80.status;
+    lines.push(`- [${label}]  ${t80.content}${t80.reason ? ` \u2014\u2014 ${t80.reason}` : ""}`);
   }
   return lines.join("\n");
 }
@@ -5141,14 +5141,14 @@ function createTodoTool(db) {
           };
         }
         const now = (/* @__PURE__ */ new Date()).toISOString();
-        const existing = new Map(db.listBySession(ctx.sessionId).map((t81) => [t81.id, t81]));
-        const todos = rawTodos.map((t81) => {
-          const prev = t81.id ? existing.get(t81.id) : void 0;
-          const status = isValidStatus(t81.status) ? t81.status : "pending";
-          const reason9 = normalizeReason(status, t81.reason);
+        const existing = new Map(db.listBySession(ctx.sessionId).map((t80) => [t80.id, t80]));
+        const todos = rawTodos.map((t80) => {
+          const prev = t80.id ? existing.get(t80.id) : void 0;
+          const status = isValidStatus(t80.status) ? t80.status : "pending";
+          const reason9 = normalizeReason(status, t80.reason);
           return {
-            id: t81.id || generateShortId(),
-            content: String(t81.content || "").slice(0, 500),
+            id: t80.id || generateShortId(),
+            content: String(t80.content || "").slice(0, 500),
             status,
             ...reason9 ? { reason: reason9 } : {},
             created_at: prev?.created_at || now,
@@ -5156,7 +5156,7 @@ function createTodoTool(db) {
           };
         });
         db.replaceAll(ctx.sessionId, todos);
-        const pendingCount = todos.filter((t81) => isOpenTodo(t81.status)).length;
+        const pendingCount = todos.filter((t80) => isOpenTodo(t80.status)).length;
         return {
           success: true,
           output: formatTodoList(todos, pendingCount),
@@ -5491,7 +5491,7 @@ function intersectNames(base, incoming) {
   if (!base) return incoming ? [...incoming] : void 0;
   if (!incoming) return [...base];
   const baseSet = new Set(base);
-  return incoming.filter((t81) => baseSet.has(t81));
+  return incoming.filter((t80) => baseSet.has(t80));
 }
 function findRole(roles, name) {
   return roles.find((r) => r.name === name);
@@ -5635,7 +5635,7 @@ function roleScopedProvider(base, role, blocked) {
     return allow ? allow.has(name) : true;
   };
   return {
-    list: () => base.list().filter((t81) => permitted(t81.name)),
+    list: () => base.list().filter((t80) => permitted(t80.name)),
     get: (name) => permitted(name) ? base.get(name) : void 0
   };
 }
@@ -5662,7 +5662,7 @@ function createRoleScope(base, sessionRole, blocked) {
 }
 function unknownRoleTools(base, role, blocked) {
   if (!role?.tools) return [];
-  const available2 = new Set(base.list().map((t81) => t81.name));
+  const available2 = new Set(base.list().map((t80) => t80.name));
   const blockedSet = new Set(blocked);
   return role.tools.filter((name) => !available2.has(name) && !blockedSet.has(name));
 }
@@ -5998,7 +5998,7 @@ function createToolScope(base) {
   const permitted = (name) => allow ? allow.has(name) : true;
   return {
     provider: {
-      list: () => base.list().filter((t81) => permitted(t81.name)),
+      list: () => base.list().filter((t80) => permitted(t80.name)),
       get: (name) => permitted(name) ? base.get(name) : void 0
     },
     enter: (next) => {
@@ -6168,7 +6168,7 @@ function scanHooks(dir, issues) {
   return [...parsed.entries].map(([type, list]) => ({
     type,
     count: list.reduce((sum, entry) => sum + entry.hooks.length, 0)
-  })).filter((t81) => t81.count > 0).sort((a, b) => a.type.localeCompare(b.type));
+  })).filter((t80) => t80.count > 0).sort((a, b) => a.type.localeCompare(b.type));
 }
 function scanMcp(dir, plugin, issues) {
   const path = join(dir, PLUGIN_LAYOUT.mcp);
@@ -7386,11 +7386,12 @@ async function updatePlugin(name, opts) {
 }
 var MARKETPLACE_FILE = "epoch-marketplace.json";
 var NAME_PATTERN = PLUGIN_NAME_PATTERN;
-var EntrySchema = z.object({
+var EntryCategoryInput = z.union([z.string().min(1), z.array(z.string().min(1))]).optional().catch(void 0);
+var EntryShape = z.object({
   name: z.string().regex(NAME_PATTERN),
   description: z.string().min(1).optional(),
   source: z.string().min(1),
-  category: z.string().min(1).optional(),
+  category: EntryCategoryInput,
   keywords: z.array(z.string().min(1)).optional(),
   author: PluginAuthorSchema.optional(),
   downloads: z.number().int().nonnegative().optional(),
@@ -7404,6 +7405,10 @@ var EntrySchema = z.object({
   visibility: z.enum(PLUGIN_VISIBILITY).optional().catch(void 0),
   status: z.enum(["listed", "reviewing", "rejected", "offline"]).optional().catch(void 0)
 });
+var EntrySchema = EntryShape.transform(({ category, ...rest }) => {
+  const picked = category === void 0 ? [] : typeof category === "string" ? [category] : category;
+  return { ...rest, ...picked.length === 0 ? {} : { category: [...picked] } };
+});
 var MARKETPLACE_DISPLAY_FIELDS = [
   "status",
   "downloads",
@@ -7554,7 +7559,7 @@ function searchMarketplaces(keyword, statePath) {
       const haystack = [
         entry.name,
         entry.description ?? "",
-        entry.category ?? "",
+        ...entry.category ?? [],
         entry.author?.name ?? "",
         ...entry.keywords ?? []
       ].join(" ").toLowerCase();
@@ -7926,14 +7931,14 @@ var CheckpointStore = class {
   }
   async enforceTotalSize(protectSession, protectTurnIndex) {
     const turns = await this.collectTurns();
-    let total = turns.reduce((sum, t81) => sum + t81.bytes, 0);
+    let total = turns.reduce((sum, t80) => sum + t80.bytes, 0);
     if (total <= this.maxTotalBytes) return;
     turns.sort((a, b) => a.createdAt - b.createdAt);
-    for (const t81 of turns) {
+    for (const t80 of turns) {
       if (total <= this.maxTotalBytes) return;
-      if (t81.sessionId === protectSession && t81.turnIndex === protectTurnIndex) continue;
-      await this.removeTurn(t81.sessionId, t81.turnIndex);
-      total -= t81.bytes;
+      if (t80.sessionId === protectSession && t80.turnIndex === protectTurnIndex) continue;
+      await this.removeTurn(t80.sessionId, t80.turnIndex);
+      total -= t80.bytes;
     }
   }
   async collectTurns() {
@@ -10734,11 +10739,11 @@ var PromptBuilder = class {
   memoryInitialized = false;
   projectBlock(tools) {
     const permLevel = this.deps.permissionManager?.getLevel() || "default";
-    const hasPlanTool = tools.some((t81) => t81.name === "enter_plan_mode");
-    const hasLspTool = tools.some((t81) => t81.name === "lsp_diagnostics");
-    const hasAskTool = tools.some((t81) => t81.name === "ask_user_question");
-    const hasTodoTool = tools.some((t81) => t81.name === "todo");
-    const hasTerminal = tools.some((t81) => t81.name === "terminal");
+    const hasPlanTool = tools.some((t80) => t80.name === "enter_plan_mode");
+    const hasLspTool = tools.some((t80) => t80.name === "lsp_diagnostics");
+    const hasAskTool = tools.some((t80) => t80.name === "ask_user_question");
+    const hasTodoTool = tools.some((t80) => t80.name === "todo");
+    const hasTerminal = tools.some((t80) => t80.name === "terminal");
     const needsCommandApproval = hasTerminal && permLevel === "default";
     const plan = this.deps.approvedPlan?.()?.trim();
     const codeSdk = renderSdkDeclaration(this.deps.codeModeTools?.() ?? []);
@@ -10775,7 +10780,7 @@ ${approvedPlanBlock(plan)}` : "");
     return systemPromptSegments({
       workDir: this.deps.site().workDir,
       os: platform(),
-      date: (/* @__PURE__ */ new Date()).toISOString().split("T")[0] ?? "",
+      date: localDateString(/* @__PURE__ */ new Date()),
       ...role ? { role } : {},
       ...skillIndex ? { skillIndex } : {},
       ...model ? { model } : {},
@@ -11428,8 +11433,8 @@ function imageParts(content) {
   return typeof content === "string" ? [] : content.filter((p) => p.type === "image");
 }
 function toolSignatureOf(config, tools) {
-  const direct = tools.map((t81) => t81.name).join("\0");
-  const declared = (config.codeModeTools?.() ?? []).map((t81) => t81.name).join("\0");
+  const direct = tools.map((t80) => t80.name).join("\0");
+  const declared = (config.codeModeTools?.() ?? []).map((t80) => t80.name).join("\0");
   return declared ? `${direct}|${declared}` : direct;
 }
 function modelSignatureOf(info) {
@@ -11676,6 +11681,7 @@ var AgentLoop = class {
     let toolSignature = toolSignatureOf(this.config, this.toolProvider.list());
     let modelSignature = modelSignatureOf(this.modelInfo());
     let planSignature = this.config.approvedPlan?.() ?? "";
+    let dateSignature = localDateString(/* @__PURE__ */ new Date());
     const streaming = this.config.streaming ?? true;
     let totalInput = 0;
     let totalOutput = 0;
@@ -11779,10 +11785,12 @@ var AgentLoop = class {
         const signature = toolSignatureOf(this.config, tools);
         const planNow = this.config.approvedPlan?.() ?? "";
         const modelNow = modelSignatureOf(this.modelInfo());
-        if (signature !== toolSignature || planNow !== planSignature || modelNow !== modelSignature) {
+        const dateNow = localDateString(/* @__PURE__ */ new Date());
+        if (signature !== toolSignature || planNow !== planSignature || modelNow !== modelSignature || dateNow !== dateSignature) {
           toolSignature = signature;
           planSignature = planNow;
           modelSignature = modelNow;
+          dateSignature = dateNow;
           system = await this.prompt.buildSystem(input.sessionId);
         }
         if (turn === 1) {
@@ -11826,6 +11834,9 @@ var AgentLoop = class {
               };
             }
           }
+          for (const notice3 of this.config.memory?.takeNotices?.() ?? []) {
+            yield { type: "notice", code: notice3.code, text: notice3.text };
+          }
         }
         const turnStart = Date.now();
         const llmSpan = this.telemetry.startSpan(
@@ -15068,11 +15079,11 @@ function buildSearchQuery(query) {
   }
   const latinPart = cleaned.replace(CJK_RUN, " ");
   for (const w of latinPart.split(/\s+/)) {
-    const t81 = w.trim();
-    if (t81.length >= 2) terms.add(t81);
+    const t80 = w.trim();
+    if (t80.length >= 2) terms.add(t80);
   }
   if (terms.size === 0) return null;
-  return [...terms].map((t81) => `"${t81.replace(/"/g, "")}"`).join(" OR ");
+  return [...terms].map((t80) => `"${t80.replace(/"/g, "")}"`).join(" OR ");
 }
 // src/memory/db.ts
 var NS2 = "memory";
@@ -15105,6 +15116,14 @@ var MIGRATIONS2 = [
         );
       `);
     }
+  },
+  {
+    id: "memory-blocked-flag",
+    version: 2,
+    description: "\u6761\u76EE\u52A0 blocked \u6807\u8BB0\uFF1A\u547D\u4E2D\u6CE8\u5165\u6A21\u5F0F\u7684\u539F\u6587\u7559\u5728\u76D8\u4E0A\uFF0C\u53EA\u5728\u6E32\u67D3\u7ED9\u6A21\u578B\u65F6\u906E\u7F69",
+    up: (db) => {
+      db.exec("ALTER TABLE memory_entries ADD COLUMN blocked INTEGER NOT NULL DEFAULT 0");
+    }
   }
 ];
 var MemoryDB = class {
@@ -15151,14 +15170,15 @@ var MemoryDB = class {
   insert(entry) {
     this.db.prepare(
       `
-      INSERT INTO memory_entries (id, target, content, position, char_length, access_count, last_accessed_at, created_at, updated_at)
-      VALUES (@id, @target, @content, @position, @charLength, @accessCount, @lastAccessedAt, @createdAt, @updatedAt)
+      INSERT INTO memory_entries (id, target, content, position, char_length, access_count, last_accessed_at, created_at, updated_at, blocked)
+      VALUES (@id, @target, @content, @position, @charLength, @accessCount, @lastAccessedAt, @createdAt, @updatedAt, @blocked)
     `
     ).run({
       ...entry,
       createdAt: entry.createdAt.getTime(),
       updatedAt: entry.updatedAt.getTime(),
-      lastAccessedAt: entry.lastAccessedAt.getTime()
+      lastAccessedAt: entry.lastAccessedAt.getTime(),
+      blocked: entry.blocked ? 1 : 0
     });
     if (entry.position >= this.nextPosition[entry.target]) {
       this.nextPosition[entry.target] = entry.position + 1;
@@ -15196,11 +15216,12 @@ var MemoryDB = class {
     const existing = this.db.prepare("SELECT rowid FROM memory_entries WHERE target = ? AND content = ?").get(target, oldContent);
     if (!existing) return;
     this.db.prepare(
-      "UPDATE memory_entries SET content = @content, char_length = @charLength, updated_at = @updatedAt WHERE rowid = @rowid"
+      "UPDATE memory_entries SET content = @content, char_length = @charLength, updated_at = @updatedAt, blocked = @blocked WHERE rowid = @rowid"
     ).run({
       content: newEntry.content,
       charLength: newEntry.charLength,
       updatedAt: newEntry.updatedAt.getTime(),
+      blocked: newEntry.blocked ? 1 : 0,
       rowid: existing.rowid
     });
     this.unsyncFts(existing.rowid);
@@ -15212,6 +15233,9 @@ var MemoryDB = class {
     this.db.prepare("DELETE FROM memory_entries WHERE rowid = ?").run(existing.rowid);
     this.unsyncFts(existing.rowid);
   }
+  setBlocked(id, blocked) {
+    this.db.prepare("UPDATE memory_entries SET blocked = @blocked WHERE id = @id").run({ id, blocked: blocked ? 1 : 0 });
+  }
   updatePosition(id, position) {
     this.db.prepare("UPDATE memory_entries SET position = @position WHERE id = @id").run({
       id,
@@ -15280,7 +15304,8 @@ var MemoryDB = class {
       createdAt: new Date(row["created_at"]),
       updatedAt: new Date(row["updated_at"]),
       accessCount: row["access_count"],
-      lastAccessedAt: new Date(row["last_accessed_at"] ?? 0)
+      lastAccessedAt: new Date(row["last_accessed_at"] ?? 0),
+      blocked: Number(row["blocked"] ?? 0) !== 0
     };
   }
 };
@@ -15298,6 +15323,7 @@ var MEM_DIR = join(homedir(), ".epoch", "memories");
 var ENTRY_DELIMITER = "\n\xA7 ";
 var MAX_ENTRY_CHARS = 4e3;
 var MAX_CONSOLIDATION_FAILURES_PER_TURN = 3;
+var QUOTA_WARN_PCT = 90;
 var SHORT_ID_HEX = 6;
 var INDEX_SUMMARY_CHARS = 80;
 var INJECTION_PATTERNS = [
@@ -15309,6 +15335,9 @@ var INJECTION_PATTERNS = [
   { pattern: /^assistant:/im, label: "role prefix" },
   { pattern: /^user:/im, label: "role prefix" }
 ];
+function injectionLabelOf(content) {
+  return INJECTION_PATTERNS.find((p) => p.pattern.test(content))?.label;
+}
 function contentKey(target, content) {
   return `${target}\0${content}`;
 }
@@ -15326,6 +15355,9 @@ var MemoryManager = class {
   initialized = false;
   consolidationFailures = 0;
   reviewIssues = [];
+  notices = [];
+  notifiedBlocked = false;
+  notifiedQuota = false;
   constructor(dbPath, memDir, config) {
     const dp = dbPath ?? DB_PATH;
     const md = memDir ?? MEM_DIR;
@@ -15353,55 +15385,103 @@ var MemoryManager = class {
     await this.flushToDisk();
   }
   async reloadFromDisk() {
+    let blockedCount = 0;
     for (const target of ["memory", "user"]) {
       const file = target === "memory" ? "MEMORY.md" : "USER.md";
       const fromDisk = this.readFile(join(this.memDir, file));
       const deduped = [...new Set(fromDisk)];
-      const safe = deduped.map((c) => this.scanInjection(c)).filter((c) => c.length > 0);
-      this.syncTarget(target, safe);
+      const classified = deduped.map((c) => this.classifyEntry(c));
+      blockedCount += classified.filter((e) => e.blocked).length;
+      this.syncTarget(target, classified);
     }
     this.assignIds();
     this.snapshot = this.renderIndexBlock();
+    if (blockedCount > 0 && !this.notifiedBlocked) {
+      this.notifiedBlocked = true;
+      this.notices.push({
+        code: "memory-blocked",
+        text: t("memory_review.blocked_notice", {
+          count: blockedCount,
+          path: join(this.memDir, "MEMORY.md")
+        })
+      });
+    }
+    this.checkQuota();
+  }
+  blockedPlaceholder(content) {
+    return t("memory_review.blocked_placeholder", {
+      pattern: injectionLabelOf(content) ?? "unknown"
+    });
+  }
+  refuseInjection(label) {
+    this.reviewIssues.push({
+      type: "injection",
+      severity: "high",
+      message: t("memory_review.injection", { pattern: label }),
+      suggestion: t("memory_review.injection_suggestion")
+    });
+    return {
+      success: false,
+      done: true,
+      error: t("memory_review.write_blocked", { pattern: label })
+    };
+  }
+  takeNotices() {
+    const out = this.notices;
+    this.notices = [];
+    return out;
+  }
+  checkQuota() {
+    if (this.notifiedQuota) return;
+    const b = this.getBudget().memory;
+    if (b.percent < QUOTA_WARN_PCT) return;
+    this.notifiedQuota = true;
+    this.notices.push({
+      code: "memory-quota",
+      text: t("memory_review.quota", { percent: b.percent, current: b.current, limit: b.limit })
+    });
   }
   assignIds() {
     this.ids.clear();
     this.idByContent.clear();
     for (const target of ["memory", "user"]) {
       const prefix = target === "memory" ? "m" : "u";
-      for (const content of this.db.getAllContent(target)) {
-        const hash = createHash("sha256").update(content).digest("hex");
+      for (const entry of this.db.getAll(target)) {
+        const hash = createHash("sha256").update(entry.content).digest("hex");
         let id = `${prefix}:${hash.slice(0, SHORT_ID_HEX)}`;
         for (let len = SHORT_ID_HEX + 4; this.ids.has(id) && len <= hash.length; len += 4) {
           id = `${prefix}:${hash.slice(0, len)}`;
         }
-        this.ids.set(id, { target, content });
-        this.idByContent.set(contentKey(target, content), id);
+        this.ids.set(id, { target, content: entry.content, blocked: entry.blocked });
+        this.idByContent.set(contentKey(target, entry.content), id);
       }
     }
   }
   syncTarget(target, desired) {
     const existing = new Map(this.db.getAll(target).map((e) => [e.content, e]));
-    const desiredSet = new Set(desired);
+    const desiredSet = new Set(desired.map((d) => d.content));
     for (const [content, entry] of existing) {
       if (!desiredSet.has(content)) this.db.removeById(entry.id);
     }
-    for (const [i, content] of desired.entries()) {
-      const prev = existing.get(content);
+    for (const [i, item] of desired.entries()) {
+      const prev = existing.get(item.content);
       if (prev) {
         if (prev.position !== i) this.db.updatePosition(prev.id, i);
+        if (prev.blocked !== item.blocked) this.db.setBlocked(prev.id, item.blocked);
         continue;
       }
       const now = /* @__PURE__ */ new Date();
       this.db.insert({
         id: randomUUID(),
         target,
-        content,
+        content: item.content,
         position: i,
-        charLength: content.length,
+        charLength: item.content.length,
         accessCount: 0,
         lastAccessedAt: now,
         createdAt: now,
-        updatedAt: now
+        updatedAt: now,
+        blocked: item.blocked
       });
     }
   }
@@ -15420,7 +15500,7 @@ var MemoryManager = class {
     for (const r of results) this.db.markAccessed(r.id);
     return results.map((r) => ({
       id: this.idByContent.get(contentKey(r.target, r.content)) ?? r.id,
-      content: r.content,
+      content: r.blocked ? this.blockedPlaceholder(r.content) : r.content,
       target: r.target,
       score: r.score
     }));
@@ -15438,22 +15518,27 @@ var MemoryManager = class {
         missing.push(id);
         continue;
       }
-      found.push({ id, target: hit.target, content: hit.content });
+      found.push({
+        id,
+        target: hit.target,
+        content: hit.blocked ? this.blockedPlaceholder(hit.content) : hit.content
+      });
       const entry = this.db.findByContent(hit.target, hit.content);
       if (entry) this.db.markAccessed(entry.id);
     }
     return { found, missing };
   }
   getAllEntries() {
-    return [
-      ...this.db.getAllContent("memory").map((c) => ({ content: c })),
-      ...this.db.getAllContent("user").map((c) => ({ content: c }))
-    ];
+    return ["memory", "user"].flatMap(
+      (target) => this.db.getAll(target).map((e) => ({ content: e.content, target, blocked: e.blocked }))
+    );
   }
   async semanticSearch(query, limit) {
     return this.search(query, limit);
   }
   async add(target, content) {
+    const label = injectionLabelOf(content);
+    if (label !== void 0) return this.refuseInjection(label);
     const budget = this.getBudget()[target];
     if (budget.current + content.length > budget.limit) {
       this.consolidationFailures++;
@@ -15487,7 +15572,8 @@ var MemoryManager = class {
       accessCount: 0,
       lastAccessedAt: /* @__PURE__ */ new Date(),
       createdAt: /* @__PURE__ */ new Date(),
-      updatedAt: /* @__PURE__ */ new Date()
+      updatedAt: /* @__PURE__ */ new Date(),
+      blocked: false
     };
     this.db.insert(entry);
     this.consolidationFailures = 0;
@@ -15499,6 +15585,8 @@ var MemoryManager = class {
     if (!existing) {
       return { success: false, done: true, error: this.notFoundHint(target, oldText) };
     }
+    const label = injectionLabelOf(content);
+    if (label !== void 0) return this.refuseInjection(label);
     const budget = this.getBudget()[target];
     const delta = content.length - existing.charLength;
     if (budget.current + delta > budget.limit) {
@@ -15516,7 +15604,8 @@ var MemoryManager = class {
       ...existing,
       content,
       charLength: content.length,
-      updatedAt: /* @__PURE__ */ new Date()
+      updatedAt: /* @__PURE__ */ new Date(),
+      blocked: false
     });
     this.consolidationFailures = 0;
     await this.flushToDisk();
@@ -15580,31 +15669,42 @@ var MemoryManager = class {
     if (current) entries2.push(current.join("\n").trim());
     return entries2.filter((e) => e.length > 0);
   }
-  scanInjection(content) {
-    for (const { pattern, label } of INJECTION_PATTERNS) {
-      if (pattern.test(content)) {
-        this.reviewIssues.push({
-          type: "injection",
-          severity: "high",
-          message: t("memory_review.injection", { pattern: label }),
-          suggestion: t("memory_review.injection_suggestion")
-        });
-        return "";
-      }
+  classifyEntry(content) {
+    const label = injectionLabelOf(content);
+    if (label !== void 0) {
+      this.reviewIssues.push({
+        type: "injection",
+        severity: "high",
+        message: t("memory_review.injection", { pattern: label }),
+        suggestion: t("memory_review.injection_suggestion")
+      });
+      return { content, blocked: true };
     }
     if (countCodePoints(content) > MAX_ENTRY_CHARS) {
-      return headCodePoints(content, MAX_ENTRY_CHARS) + " \u2026[\u6761\u76EE\u8FC7\u957F\u5DF2\u622A\u65AD]";
+      return {
+        content: headCodePoints(content, MAX_ENTRY_CHARS) + " \u2026[\u6761\u76EE\u8FC7\u957F\u5DF2\u622A\u65AD]",
+        blocked: false
+      };
     }
-    return content;
+    return { content, blocked: false };
   }
   indexEntries(target) {
     const out = [];
-    for (const content of this.db.getAllContent(target)) {
-      const id = this.idByContent.get(contentKey(target, content));
+    for (const entry of this.db.getAll(target)) {
+      const id = this.idByContent.get(contentKey(target, entry.content));
       if (!id) continue;
-      const firstLine4 = (content.split("\n")[0] ?? "").trim();
+      if (entry.blocked) {
+        out.push({
+          id,
+          target,
+          summary: this.blockedPlaceholder(entry.content),
+          charLength: entry.content.length
+        });
+        continue;
+      }
+      const firstLine4 = (entry.content.split("\n")[0] ?? "").trim();
       const summary = countCodePoints(firstLine4) > INDEX_SUMMARY_CHARS ? `${headCodePoints(firstLine4, INDEX_SUMMARY_CHARS)}\u2026` : firstLine4;
-      out.push({ id, target, summary, charLength: content.length });
+      out.push({ id, target, summary, charLength: entry.content.length });
     }
     return out;
   }
@@ -15696,148 +15796,6 @@ var MemoryManager = class {
     ].join("\n");
   }
 };
-var DEFAULT_INTERVAL = 5 * 60 * 1e3;
-var QUOTA_WARN_PCT = 90;
-var MemoryReviewer = class {
-  manager;
-  timer = null;
-  issues = [];
-  interval;
-  constructor(manager, interval = DEFAULT_INTERVAL) {
-    this.manager = manager;
-    this.interval = interval;
-  }
-  start() {
-    if (this.timer) return;
-    this.scanForIssues().catch(() => {
-    });
-    this.timer = setInterval(() => {
-      this.scanForIssues().catch(() => {
-      });
-    }, this.interval);
-  }
-  stop() {
-    if (this.timer) {
-      clearInterval(this.timer);
-      this.timer = null;
-    }
-  }
-  getIssues() {
-    return [...this.issues];
-  }
-  clearIssues() {
-    this.issues = [];
-  }
-  async scanForIssues() {
-    const newIssues = [];
-    const dups = await this.checkDuplicates();
-    newIssues.push(...dups);
-    const contras = await this.checkContradictions();
-    newIssues.push(...contras);
-    const warns = this.checkQuota();
-    newIssues.push(...warns);
-    this.issues = newIssues;
-    return newIssues;
-  }
-  async checkDuplicates() {
-    const issues = [];
-    const allEntries = this.manager.getAllEntries();
-    const seen = /* @__PURE__ */ new Set();
-    for (let i = 0; i < allEntries.length; i++) {
-      if (seen.has(i)) continue;
-      const entryI = allEntries[i];
-      if (!entryI) continue;
-      for (let j = i + 1; j < allEntries.length; j++) {
-        if (seen.has(j)) continue;
-        const entryJ = allEntries[j];
-        if (!entryJ) continue;
-        const sim = textSimilarity(entryI.content, entryJ.content);
-        if (sim > 0.7) {
-          seen.add(i);
-          seen.add(j);
-          issues.push({
-            type: "duplicate",
-            severity: sim > 0.95 ? "high" : "medium",
-            message: t("memory_review.duplicate", { percent: (sim * 100).toFixed(0) }),
-            entries: [entryI.content, entryJ.content],
-            suggestion: t("memory_review.duplicate_suggestion")
-          });
-        }
-      }
-    }
-    return issues;
-  }
-  async checkContradictions() {
-    const issues = [];
-    const entries2 = this.manager.getAllEntries();
-    const contents = entries2.map((e) => e.content.toLowerCase());
-    const patterns = [
-      {
-        a: /pnpm|yarn|npm/,
-        b: /pnpm|yarn|npm/,
-        label: t("memory_review.label_package_manager")
-      },
-      {
-        a: /typescript|javascript|ts|js/,
-        b: /typescript|javascript|ts|js/,
-        label: t("memory_review.label_language")
-      },
-      {
-        a: /node\s*(18|20|22)/,
-        b: /node\s*(18|20|22)/,
-        label: t("memory_review.label_node_version")
-      }
-    ];
-    for (let i = 0; i < contents.length; i++) {
-      for (let j = i + 1; j < contents.length; j++) {
-        const contI = contents[i];
-        const contJ = contents[j];
-        if (!contI || !contJ) continue;
-        for (const { a, b, label } of patterns) {
-          const ma = a.exec(contI), mb = b.exec(contJ);
-          if (ma && mb && ma[0] !== mb[0]) {
-            issues.push({
-              type: "contradiction",
-              severity: "medium",
-              message: t("memory_review.contradiction", { label }),
-              entries: [entries2[i]?.content ?? "", entries2[j]?.content ?? ""],
-              suggestion: t("memory_review.contradiction_suggestion", { label })
-            });
-          }
-        }
-      }
-    }
-    return issues;
-  }
-  checkQuota() {
-    const budget = this.manager.getBudget();
-    const issues = [];
-    if (budget.memory.percent >= QUOTA_WARN_PCT) {
-      issues.push({
-        type: "quota_warning",
-        severity: budget.memory.percent >= 98 ? "high" : "medium",
-        message: t("memory_review.quota", {
-          percent: budget.memory.percent,
-          current: budget.memory.current,
-          limit: budget.memory.limit
-        }),
-        suggestion: t("memory_review.quota_suggestion")
-      });
-    }
-    return issues;
-  }
-};
-function textSimilarity(a, b) {
-  const wordsA = new Set(a.toLowerCase().split(/\s+/));
-  const wordsB = new Set(b.toLowerCase().split(/\s+/));
-  if (wordsA.size === 0 && wordsB.size === 0) return 1;
-  let intersection = 0;
-  for (const w of wordsA) {
-    if (wordsB.has(w)) intersection++;
-  }
-  const union = /* @__PURE__ */ new Set([...wordsA, ...wordsB]);
-  return intersection / union.size;
-}
 var ATTACHMENT_RETENTION_DEFAULTS = {
   maxAgeDays: 7,
   maxTotalBytes: ATTACHMENT_MAX_TOTAL_BYTES
@@ -17144,7 +17102,7 @@ function checkFtsHealth(db) {
     messages,
     tables,
     missingTriggers,
-    healthy: missingTriggers.length === 0 && tables.every((t81) => t81.error === null && t81.drift === null && t81.rows === messages),
+    healthy: missingTriggers.length === 0 && tables.every((t80) => t80.error === null && t80.drift === null && t80.rows === messages),
     indexBytes: indexBytesOf(db),
     space: spaceOf(db)
   };
@@ -18488,11 +18446,11 @@ var ApprovalCache = class {
     return !rel.startsWith("..") && !isAbsolute(rel);
   }
   normalizeTarget(target) {
-    const t81 = target.trim();
-    if (!t81) return "";
-    const unix = t81.replace(/\\/g, "/");
+    const t80 = target.trim();
+    if (!t80) return "";
+    const unix = t80.replace(/\\/g, "/");
     if (unix.startsWith("/") || /^[A-Za-z]:\//.test(unix)) return resolve(unix);
-    return t81;
+    return t80;
   }
   load() {
     try {
@@ -18595,9 +18553,9 @@ function createSharedPermissionState(cache) {
   };
 }
 function cacheKeyFor(raw) {
-  const t81 = raw.trim();
-  if (!t81) return null;
-  return t81.slice(0, 500);
+  const t80 = raw.trim();
+  if (!t80) return null;
+  return t80.slice(0, 500);
 }
 // src/permission/manager.ts
 var log3 = createLogger("permission");
@@ -22044,7 +22002,8 @@ function loadOne(mdFile, catPath, category, dirName, spec, skills, issues) {
   }
   const parsed = parseSkillFrontmatter(raw, label);
   issues.push(...parsed.issues);
-  const base = parsed.fm.name ?? dirName;
+  const declared = parsed.fm.name?.trim();
+  const base = declared ? declared : dirName;
   const name = spec.prefix ? `${spec.prefix}:${base}` : base;
   const previous = skills.get(name);
   if (previous && previous.scope !== scope) {
@@ -22094,6 +22053,18 @@ function normalizeDirs(input) {
   }
   return dirs.length > 0 ? dirs : [{ dir: SKILLS_DIR, source: "user" }];
 }
+function realpathOfDeepestExisting(target) {
+  const tail = [];
+  let cur = target;
+  while (!existsSync(cur)) {
+    const parent = dirname(cur);
+    if (parent === cur) return target;
+    tail.unshift(basename(cur));
+    cur = parent;
+  }
+  const real = realpathSync(cur);
+  return tail.length === 0 ? real : join(real, ...tail);
+}
 var SkillSystem = class {
   dirs;
   skillsDir;
@@ -22186,12 +22157,16 @@ var SkillSystem = class {
   }
   async create(name, content, category = "general") {
     this.scanIfNeeded();
-    if (this.skills.has(name)) throw new Error(`Skill "${name}" already exists`);
-    const dir = join(this.skillsDir, category, name);
+    const declared = parseSkillFrontmatter(content, name).fm.name?.trim();
+    const indexName = declared ? declared : name;
+    if (this.skills.has(indexName)) throw new Error(`Skill "${indexName}" already exists`);
+    const dir = join(this.skillsDir, category, indexName);
     const base = resolve(this.skillsDir);
     const resolved = resolve(dir);
     if (resolved === base || !resolved.startsWith(base + sep)) {
-      throw new Error(`Skill name or category escapes the skills directory: ${category}/${name}`);
+      throw new Error(
+        `Skill name or category escapes the skills directory: ${category}/${indexName}`
+      );
     }
     mkdirSync(dir, { recursive: true });
     writeFileSync(join(dir, "SKILL.md"), content, "utf-8");
@@ -22205,7 +22180,7 @@ var SkillSystem = class {
   }
   async patch(name, oldString, newString, filePath) {
     const skill = this.requireWritable(name);
-    const targetPath = filePath ? join(skill.path, filePath) : join(skill.path, "SKILL.md");
+    const targetPath = this.resolveInsideSkill(skill.path, filePath ?? "SKILL.md");
     const raw = readFileSync(targetPath, "utf-8");
     if (!raw.includes(oldString)) throw new Error("old_string not found");
     writeFileSync(targetPath, raw.replace(oldString, newString), "utf-8");
@@ -22225,21 +22200,30 @@ var SkillSystem = class {
         `filePath must be under references/templates/scripts/assets, got: ${filePath}`
       );
     }
-    const resolved = resolve(join(skill.path, filePath));
-    const baseDir = resolve(skill.path);
-    if (resolved !== baseDir && !resolved.startsWith(baseDir + sep)) {
-      throw new Error("Path traversal denied");
-    }
+    const resolved = this.resolveInsideSkill(skill.path, filePath);
     mkdirSync(dirname(resolved), { recursive: true });
     writeFileSync(resolved, content, "utf-8");
     this.invalidateCache();
   }
   async removeFile(name, filePath) {
     const skill = this.requireWritable(name);
-    const resolved = join(skill.path, filePath);
+    const resolved = this.resolveInsideSkill(skill.path, filePath);
     rmSync(resolved);
     this.invalidateCache();
   }
+  resolveInsideSkill(skillPath, relPath) {
+    const base = resolve(skillPath);
+    const resolved = resolve(join(skillPath, relPath));
+    if (resolved !== base && !resolved.startsWith(base + sep)) {
+      throw new Error("Path traversal denied");
+    }
+    const realBase = realpathSync(base);
+    const realTarget = realpathOfDeepestExisting(resolved);
+    if (realTarget !== realBase && !realTarget.startsWith(realBase + sep)) {
+      throw new Error("Path traversal denied");
+    }
+    return resolved;
+  }
   requireWritable(name) {
     this.scanIfNeeded();
     const skill = this.skills.get(name);
@@ -22648,12 +22632,21 @@ var SkillLearner = class {
     if (!parsed.name || !parsed.content) {
       return { created: false, reason: "missing-name-or-content" };
     }
-    if (!parsed.content.includes("---")) {
+    const { fm } = parseSkillFrontmatter(parsed.content, parsed.name);
+    const declared = fm.name?.trim();
+    if (!declared) {
       return { created: false, reason: "missing-frontmatter" };
     }
+    if ((fm.description ?? "").trim() === "") {
+      return { created: false, reason: "missing-description" };
+    }
+    const category = parsed.category?.trim() || "general";
+    if (skillSegmentIssue(declared) !== void 0 || skillSegmentIssue(category) !== void 0) {
+      return { created: false, reason: "invalid-name" };
+    }
     try {
-      await this.skillSystem.create(parsed.name, parsed.content, parsed.category || "general");
-      return { created: true, skillName: parsed.name };
+      await this.skillSystem.create(declared, parsed.content, category);
+      return { created: true, skillName: declared };
     } catch (err) {
       return { created: false, reason: "create-failed", error: messageOf2(err) };
     }
@@ -23804,4 +23797,4 @@ function trunc(stdout, stderr) {
  *    `--tree` 的命令帮助里，让用户自己知道 `--tree` 意味着什么。
  */
 
-export { AGENT_ROLE_DIAG_MODULE, ARTIFACT_MAX_TOTAL_BYTES, ARTIFACT_RETENTION_DEFAULTS, ATTACHMENT_MAX_TOTAL_BYTES, ATTACHMENT_RETENTION_DEFAULTS, AgentLoop, ApprovalCache, BLOCKED_TOOLS, BudgetGuard, BudgetStore, CHECKPOINT_MAX_TOTAL_BYTES, CLAUDE_EVENT_NAMES, CLAUDE_TOOL_NAMES, CODE_MODE_LIMITS, CODE_MODE_SDK_TAG, CONFIG_KEYS, CURRENT_CONFIG_VERSION, CheckpointManager, CheckpointStore, CodeSandbox, ComplianceEngine, ContextCompressor, DEFAULT_COMPLIANCE_ACTIONS, DEFAULT_COMPLIANCE_SETTINGS, DEFAULT_COMPRESSION_THRESHOLD, DEFAULT_GOAL_MAX_ROUNDS, DEFAULT_MAX_HOLD_CHARS, DelegateManager, EMPTY_RULES, EPOCH_DISK_LEDGER, EpochConfigSchema, FTS_TABLES, FTS_TRIGGERS, GOAL_BLOCK_CODES, GoalService, GoalStore, HEADLESS_AUDIT_CODES, HookManager, INSTRUCTION_BUDGET_CHARS, INSTRUCTION_FILES, ImageLoadError, ImportTrustStore, LAUNCHD_LABEL_PREFIX, LOCK_HEARTBEAT_MS, LOCK_STALE_MS, LastOpenSessions, MARKETPLACE_DISPLAY_FIELDS, MARKETPLACE_FILE, MAX_AUDIT_ENTRIES, MAX_COMMAND_DEPTH, MAX_GOAL_MAX_ROUNDS, MAX_IMPORT_DEPTH, MAX_LAST_OPEN_SESSIONS, MAX_OBJECTIVE_CHARS, MAX_REASON_CHARS, MAX_RECENT_WORKSPACES, MODEL_GIVE_UP_THRESHOLD, MULTIMODAL_DEFAULTS, ManagedPolicyError, ManagedSettingsSchema, MemoryManager, MemoryReviewer, ModelFailureTracker, NOMINAL_TOTAL_BYTES, NO_REVEALED_TOOLS, PACK_EXCLUDES, PACK_MAX_BYTES, PACK_MAX_FILES, PERMISSION_AUDIT_CODES, PLUGIN_LAYOUT, PLUGIN_MANIFEST_FILE, PLUGIN_MANIFEST_KEYS, PLUGIN_NAME_PATTERN, PLUGIN_ROOT_ENV, PLUGIN_ROOT_TOKEN, PLUGIN_VISIBILITY, POLICY_DECISIONS, PROBE_VERSION, PROJECT_AGENTS_SUBDIR, PROVIDER_NO_CREDENTIAL, PermissionManager, PlanModeState, PluginAuthorSchema, PluginStore, PolicyRuleSchema, ProviderError, ProviderRouter, RECORDING_KEEP_RUNS, RECORDING_MAX_BYTES, ROLE_FRONTMATTER_SCHEMA, RUN_CODE_TOOL, RecentWorkspaces, SANDBOX_COVERS, SANDBOX_EXCLUDES, SCALAR_KEYS, SCHEDULE_DEFAULTS, SCHEDULE_DEFAULT_ALLOWLIST, SCHEDULE_FORM_BUDGET_USD, SCHEDULE_ISSUE_CODES, SCHTASKS_FOLDER, SESSION_MESSAGES_READ_TOOL, SESSION_MESSAGES_SEARCH_TOOL, SESSION_QUERY_TOOLS, SESSION_SEARCH_TOOL, SESSION_TRACE_TOOL, SETTINGS_LAYER_ORDER, SETTING_WRITE_KEYS, SETTING_WRITE_LAYERS, SKILL_CREATE_TOOL, SKILL_EDIT_TOOL, SKILL_PATCH_TOOL, SKILL_VIEW_TOOL, SKILL_WRITE_FILE_TOOL, SLASH_COMMANDS_DIAG_MODULE, ScheduleRecorder, ScheduleRegistrar, ScheduleStore, SessionManager, SessionQueries, SessionReferences, SettingsFileError, SettingsFileSchema, SkillLearner, SkillSystem, TOOL_SEARCH_TOOL, TaskNoticeTracker, ToolRegistry, TrackerDB, TrustManager, Workspace, acquireScheduleLock, addMarketplace, addUsage, admitArtifact, admitArtifacts, affectedPaths, artifactLaunchArgv, artifactOpenRefusal, assertLevelAllowed, blockedRoleTools, buildContextBreakdown, buildFireArgv, buildFtsMatchQuery, buildSchemaExports, buildSystemPrompt, buildTrigramMatchQuery, builtinRoles, checkEpochVersion, checkFtsHealth, checkShadowing, classifyPersistFailure, classifyProviderError, clearModelCache, coalesceRecording, codeModeWorkerPath, commandNameFromRelPath, compileRuleLists, compressionOptions, computeCost, computeCostMicros, computeExecHash, countRules, createAllowAllGate, createAllowAllImportGate, createAskQuestionTool, createCodeExecTool, createDelegateTool, createDenyAllGate, createDenyAllImportGate, createGoalTool, createImportGate, createMemoryTool, createPlanModeTools, createRoleFile, createRoleScope, createRunCodeTool, createScheduleDraftTool, createSessionMessagesReadTool, createSessionMessagesSearchTool, createSessionSearchTool, createSessionSearchTools, createSessionTraceTool, createSkillViewTool, createSkillWriteTools, createTodoTool, createToolRevealState, createToolScope, createToolSearchTool, createTrustGate, currentEpochVersion, decideImport, decideTrust, defaultConfig, defaultModelOf, describeArtifactRefusal, describeBackgroundTask, describeHeadlessPolicy, describeIsolation, describeJsonError, diagnoseSchedules, discoverMarkdown, discoverModels, discoverProject, displayAllows, displayCurrency, draftCommandLine, draftWidening, escapeRuleContent, estimateImageTokens, estimateRunTokens, estimateTokens, evaluateSelection, expandCommand, expandImports, explainSetting, extractArchive, findInstructionFiles, findProjectInstructions, findRole, formatBytes, formatSkillIndex, formatUsd, gateForTool, getCapability, getConfigIssues, getConfigOrigins, getImportGate, getTrustGate, hasDedicatedExecContent, hasExecTierContent, hasPromptCaching, hasProviderCredentials, hasReadTierContent, imageFromBase64, imageFromPath, imagePartTokens, importParts, importSkills, installPlugin, instructionDirs, instructionNotices, intervalSlots, inventoryProjectExtensions, inventoryTotal, isBlockCode, isCodeModeDeferred, isEmptyRules, isGoalPhase, isNonInteractive, isReadOnlySubCall, isSettingWriteLayer, isTransientPersistFailure, isValidPluginName, isWithinWindow, isWritableSettingKey, labelSlug, layerRank, listRunningSchedules, listSessionCandidates, listWorkspaceFiles, loadCommandDefinitions, loadCommandFile, loadCommands, loadConfig, loadHookSources, loadKeybindings, loadLexiconDir, loadLexiconFiles, loadPlugins, loadPolicyFiles, loadPolicyRules, loadRoleDefinitions, loadRoleDir, loadedImports, localDateString, managedSwitchNotes, mapClaudeToolName, mapEpochToolName, mapOperationType, matchPreauthorization, matchRuleLists, matchesHook, mentionsPluginRoot, mergeHeadlessPolicy, mergeRoles, mergeSchedulePatch, microsToUsd, modelListCandidates, needsAllowlist, nextFallbackModel, nextRunAt, noConfigOrigins, noManagedPolicy, noPlugins, openArtifact, originOf, packFileName, packPlugin, parseClaudeSettingsHooks, parseClock, parseDate, parseFrontmatter, parseHooksConfig, parseHooksConfigVerbose, parseImportLine, parseModelList, parseRoleDefinition, parseScheduleDraft, parseSkillFrontmatter, parseTrigger, pendingImageTokens, persistFailureCode, persistParts, persistToolResults, persistedUsage, planPack, previewSkillImport, pricingFor, projectEntryForDisplay, pruneArtifacts, pruneAttachments, pruneRecordings, pruneSchedules, readImageSize, readMarketplaces, readPluginManifest, readPluginRecords, readProviderKeyEnv, readRecording, readSessionSurface, reclaimFtsSpace, redactLine, refreshOpenRouterMetadata, removeMarketplace, removeRecordings, removeRoleFile, removeSessionArtifacts, removeSessionAttachments, renderImportTree, renderProjectContext, renderSdkDeclaration, renderSelfIndex, repairSchedules, resolveArtifactRetention, resolveCodeModeWorker, resolveComplianceDirs, resolveEntrySource, resolveInWorkspace, resolveMarketplaceRef, resolveMentions, resolveMultimodalPolicy, resolvePolicyDirs, resolvePricingAt, resolveProjectRoot, resolveScheduleBackend, resolveSessionReference, resolveSessionVisibility, resolveSettings, resolveSkillDirs, resolveSource, resolveTar, resolveWorkspace, restoreParts, revealScopedProvider, roleScopedProvider, roleSourceLabel, ruleCovers, ruleFromString, ruleToString, runCode, runCommand2 as runCommand, sanitizeArgNames, sanitizeCommand, sanitizeFtsQuery, sanitizePath, sanitizeToolOutput, scanInstructions, scanPluginDir, scanSkillDirs, searchMarketplaces, setDisplayCurrency, setImportGate, setPluginEnabled, setTrustGate, settingValueChoices, settingValueKind, settingWriteApply, settingWriteLayers, settingWriteTargets, skillIndexDescription, skillIndexResidency, skillIndexStats, sniffMediaType, splitFrontmatter, staticToolProvider, stripArtifactData, substitutePluginRoot, suggestRuleFromApproval, systemOpenArgv, systemPromptSegments, toPosix, toolDefinitionTokens, toolMatches, toolTableTokens, totalTokens, traceSession, triggerPeriodMs, unescapeRuleContent, uninstallPlugin, unknownRoleSkills, unknownRoleTools, unloadedInstructionFiles, updateMarketplace, updatePlugin, usdToMicros, validateSchedule, validateTrigger, validateWindow, withGoalCompression, withGoalPrompt, workspaceDisplayPath, writeSettingValue };
+export { AGENT_ROLE_DIAG_MODULE, ARTIFACT_MAX_TOTAL_BYTES, ARTIFACT_RETENTION_DEFAULTS, ATTACHMENT_MAX_TOTAL_BYTES, ATTACHMENT_RETENTION_DEFAULTS, AgentLoop, ApprovalCache, BLOCKED_TOOLS, BudgetGuard, BudgetStore, CHECKPOINT_MAX_TOTAL_BYTES, CLAUDE_EVENT_NAMES, CLAUDE_TOOL_NAMES, CODE_MODE_LIMITS, CODE_MODE_SDK_TAG, CONFIG_KEYS, CURRENT_CONFIG_VERSION, CheckpointManager, CheckpointStore, CodeSandbox, ComplianceEngine, ContextCompressor, DEFAULT_COMPLIANCE_ACTIONS, DEFAULT_COMPLIANCE_SETTINGS, DEFAULT_COMPRESSION_THRESHOLD, DEFAULT_GOAL_MAX_ROUNDS, DEFAULT_MAX_HOLD_CHARS, DelegateManager, EMPTY_RULES, EPOCH_DISK_LEDGER, EpochConfigSchema, FTS_TABLES, FTS_TRIGGERS, GOAL_BLOCK_CODES, GoalService, GoalStore, HEADLESS_AUDIT_CODES, HookManager, INSTRUCTION_BUDGET_CHARS, INSTRUCTION_FILES, ImageLoadError, ImportTrustStore, LAUNCHD_LABEL_PREFIX, LOCK_HEARTBEAT_MS, LOCK_STALE_MS, LastOpenSessions, MARKETPLACE_DISPLAY_FIELDS, MARKETPLACE_FILE, MAX_AUDIT_ENTRIES, MAX_COMMAND_DEPTH, MAX_GOAL_MAX_ROUNDS, MAX_IMPORT_DEPTH, MAX_LAST_OPEN_SESSIONS, MAX_OBJECTIVE_CHARS, MAX_REASON_CHARS, MAX_RECENT_WORKSPACES, MODEL_GIVE_UP_THRESHOLD, MULTIMODAL_DEFAULTS, ManagedPolicyError, ManagedSettingsSchema, MemoryManager, ModelFailureTracker, NOMINAL_TOTAL_BYTES, NO_REVEALED_TOOLS, PACK_EXCLUDES, PACK_MAX_BYTES, PACK_MAX_FILES, PERMISSION_AUDIT_CODES, PLUGIN_LAYOUT, PLUGIN_MANIFEST_FILE, PLUGIN_MANIFEST_KEYS, PLUGIN_NAME_PATTERN, PLUGIN_ROOT_ENV, PLUGIN_ROOT_TOKEN, PLUGIN_VISIBILITY, POLICY_DECISIONS, PROBE_VERSION, PROJECT_AGENTS_SUBDIR, PROVIDER_NO_CREDENTIAL, PermissionManager, PlanModeState, PluginAuthorSchema, PluginStore, PolicyRuleSchema, ProviderError, ProviderRouter, RECORDING_KEEP_RUNS, RECORDING_MAX_BYTES, ROLE_FRONTMATTER_SCHEMA, RUN_CODE_TOOL, RecentWorkspaces, SANDBOX_COVERS, SANDBOX_EXCLUDES, SCALAR_KEYS, SCHEDULE_DEFAULTS, SCHEDULE_DEFAULT_ALLOWLIST, SCHEDULE_FORM_BUDGET_USD, SCHEDULE_ISSUE_CODES, SCHTASKS_FOLDER, SESSION_MESSAGES_READ_TOOL, SESSION_MESSAGES_SEARCH_TOOL, SESSION_QUERY_TOOLS, SESSION_SEARCH_TOOL, SESSION_TRACE_TOOL, SETTINGS_LAYER_ORDER, SETTING_WRITE_KEYS, SETTING_WRITE_LAYERS, SKILL_CREATE_TOOL, SKILL_EDIT_TOOL, SKILL_PATCH_TOOL, SKILL_VIEW_TOOL, SKILL_WRITE_FILE_TOOL, SLASH_COMMANDS_DIAG_MODULE, ScheduleRecorder, ScheduleRegistrar, ScheduleStore, SessionManager, SessionQueries, SessionReferences, SettingsFileError, SettingsFileSchema, SkillLearner, SkillSystem, TOOL_SEARCH_TOOL, TaskNoticeTracker, ToolRegistry, TrackerDB, TrustManager, Workspace, acquireScheduleLock, addMarketplace, addUsage, admitArtifact, admitArtifacts, affectedPaths, artifactLaunchArgv, artifactOpenRefusal, assertLevelAllowed, blockedRoleTools, buildContextBreakdown, buildFireArgv, buildFtsMatchQuery, buildSchemaExports, buildSystemPrompt, buildTrigramMatchQuery, builtinRoles, checkEpochVersion, checkFtsHealth, checkShadowing, classifyPersistFailure, classifyProviderError, clearModelCache, coalesceRecording, codeModeWorkerPath, commandNameFromRelPath, compileRuleLists, compressionOptions, computeCost, computeCostMicros, computeExecHash, countRules, createAllowAllGate, createAllowAllImportGate, createAskQuestionTool, createCodeExecTool, createDelegateTool, createDenyAllGate, createDenyAllImportGate, createGoalTool, createImportGate, createMemoryTool, createPlanModeTools, createRoleFile, createRoleScope, createRunCodeTool, createScheduleDraftTool, createSessionMessagesReadTool, createSessionMessagesSearchTool, createSessionSearchTool, createSessionSearchTools, createSessionTraceTool, createSkillViewTool, createSkillWriteTools, createTodoTool, createToolRevealState, createToolScope, createToolSearchTool, createTrustGate, currentEpochVersion, decideImport, decideTrust, defaultConfig, defaultModelOf, describeArtifactRefusal, describeBackgroundTask, describeHeadlessPolicy, describeIsolation, describeJsonError, diagnoseSchedules, discoverMarkdown, discoverModels, discoverProject, displayAllows, displayCurrency, draftCommandLine, draftWidening, escapeRuleContent, estimateImageTokens, estimateRunTokens, estimateTokens, evaluateSelection, expandCommand, expandImports, explainSetting, extractArchive, findInstructionFiles, findProjectInstructions, findRole, formatBytes, formatSkillIndex, formatUsd, gateForTool, getCapability, getConfigIssues, getConfigOrigins, getImportGate, getTrustGate, hasDedicatedExecContent, hasExecTierContent, hasPromptCaching, hasProviderCredentials, hasReadTierContent, imageFromBase64, imageFromPath, imagePartTokens, importParts, importSkills, installPlugin, instructionDirs, instructionNotices, intervalSlots, inventoryProjectExtensions, inventoryTotal, isBlockCode, isCodeModeDeferred, isEmptyRules, isGoalPhase, isNonInteractive, isReadOnlySubCall, isSettingWriteLayer, isTransientPersistFailure, isValidPluginName, isWithinWindow, isWritableSettingKey, labelSlug, layerRank, listRunningSchedules, listSessionCandidates, listWorkspaceFiles, loadCommandDefinitions, loadCommandFile, loadCommands, loadConfig, loadHookSources, loadKeybindings, loadLexiconDir, loadLexiconFiles, loadPlugins, loadPolicyFiles, loadPolicyRules, loadRoleDefinitions, loadRoleDir, loadedImports, localDateString, managedSwitchNotes, mapClaudeToolName, mapEpochToolName, mapOperationType, matchPreauthorization, matchRuleLists, matchesHook, mentionsPluginRoot, mergeHeadlessPolicy, mergeRoles, mergeSchedulePatch, microsToUsd, modelListCandidates, needsAllowlist, nextFallbackModel, nextRunAt, noConfigOrigins, noManagedPolicy, noPlugins, openArtifact, originOf, packFileName, packPlugin, parseClaudeSettingsHooks, parseClock, parseDate, parseFrontmatter, parseHooksConfig, parseHooksConfigVerbose, parseImportLine, parseModelList, parseRoleDefinition, parseScheduleDraft, parseSkillFrontmatter, parseTrigger, pendingImageTokens, persistFailureCode, persistParts, persistToolResults, persistedUsage, planPack, previewSkillImport, pricingFor, projectEntryForDisplay, pruneArtifacts, pruneAttachments, pruneRecordings, pruneSchedules, readImageSize, readMarketplaces, readPluginManifest, readPluginRecords, readProviderKeyEnv, readRecording, readSessionSurface, reclaimFtsSpace, redactLine, refreshOpenRouterMetadata, removeMarketplace, removeRecordings, removeRoleFile, removeSessionArtifacts, removeSessionAttachments, renderImportTree, renderProjectContext, renderSdkDeclaration, renderSelfIndex, repairSchedules, resolveArtifactRetention, resolveCodeModeWorker, resolveComplianceDirs, resolveEntrySource, resolveInWorkspace, resolveMarketplaceRef, resolveMentions, resolveMultimodalPolicy, resolvePolicyDirs, resolvePricingAt, resolveProjectRoot, resolveScheduleBackend, resolveSessionReference, resolveSessionVisibility, resolveSettings, resolveSkillDirs, resolveSource, resolveTar, resolveWorkspace, restoreParts, revealScopedProvider, roleScopedProvider, roleSourceLabel, ruleCovers, ruleFromString, ruleToString, runCode, runCommand2 as runCommand, sanitizeArgNames, sanitizeCommand, sanitizeFtsQuery, sanitizePath, sanitizeToolOutput, scanInstructions, scanPluginDir, scanSkillDirs, searchMarketplaces, setDisplayCurrency, setImportGate, setPluginEnabled, setTrustGate, settingValueChoices, settingValueKind, settingWriteApply, settingWriteLayers, settingWriteTargets, skillIndexDescription, skillIndexResidency, skillIndexStats, sniffMediaType, splitFrontmatter, staticToolProvider, stripArtifactData, substitutePluginRoot, suggestRuleFromApproval, systemOpenArgv, systemPromptSegments, toPosix, toolDefinitionTokens, toolMatches, toolTableTokens, totalTokens, traceSession, triggerPeriodMs, unescapeRuleContent, uninstallPlugin, unknownRoleSkills, unknownRoleTools, unloadedInstructionFiles, updateMarketplace, updatePlugin, usdToMicros, validateSchedule, validateTrigger, validateWindow, withGoalCompression, withGoalPrompt, workspaceDisplayPath, writeSettingValue };