@epoch-agent/core 0.20.0 → 0.21.0

package/README.md

@@ -60,6 +60,19 @@ A 的预算上、把文件快照落进 A 的检查点目录。
 **这不是破坏性改动**：参数少的函数可以赋给参数多的函数类型，所以单会话调用方
 （CLI / TUI / 用例）写 `(req) => …` 照旧编译得过，一行不用改。
 
+**`ask_user_question` 的页面位只收本机回环，而这不是抄设置页那条口径**（2026-09-29）。
+参数里多了一格 `questions[].page = { url, label? }` —— 插件在本机起一张页、
+而那个选择用选项说不清时，模型把地址放进这一格，带界面的宿主会把它嵌在那一问旁边。
+⚠️ **闸在 `parseQuestion` 里**（`new URL` parse 得动 + scheme 是 http/https +
+host 是 `127.0.0.1` / `localhost`），而它**和 `EpochConfig.settingsPanes` 那一个
+量的一样宽、口径相反**：那一边的 url 是**用户自己写的 `config.yaml`**，所以
+「给什么嵌什么」站得住；这一格来自**模型参数**，而模型的上下文里有工具输出和网页
+—— 那是可注入的。判据全文在 [protocol 的 question.ts](../protocol/src/question.ts) 文件头。
+
+**坏 page 只丢那一格，不拒整条提问。** 同 `icon` 那条「认不出来的当没给」：
+`page` 是锦上添花，而选项是必填的 —— 为它把整问打回，用户看到的是「这个问题根本
+没弹出来」，代价和收益完全不成比例。
+
 **`AgentConfig.site` 是「在哪儿干活」的现读出口，给了它 `workDir` /
 `projectContext` 就不再被读。**（迟绑，2026-08-20）循环内部只认 `site()` 这一个真源，
 不存在「workDir 是新的、projectContext 还是旧的」这种状态。不给时它按那两格折一个

package/dist/index.d.ts

@@ -11578,7 +11578,9 @@ declare function explainSetting(key: string, base: BaseSlot, file?: FileSlots):
  * 3. ${ENV_VAR} 模板展开（递归，最多 10 层）
  * 3.5 SecretStore（系统钥匙串，装配层预取后注入 —— 见 `readProviderKeyEnv`）
  * 4. .env 文件（secrets）
- * 5. process.env 直接覆盖（最高优先级）
+ * 5. process.env 直接覆盖（最高优先级）—— `EPOCH_PROVIDER` / `EPOCH_BASE_URL`
+ *    这两个例外：它们**读一次、落两次**（第 3.5~4 层取 secrets 的前后各一次），
+ *    理由见 `readProviderOverride` / `applyProviderOverride`
  * 6. 损坏回退（last-known-good → 默认值）
  * 7. 损坏备份（config.yaml.corrupt.<ts>.bak）
  * 8. 缓存（mtime + size + env_snapshot）
@@ -14987,6 +14989,126 @@ declare class LastOpenSessions {
     private save;
 }
 
+/**
+ * 界面外观偏好（主题 / 语言）的落盘（2026-09-29）。`~/.epoch/appearance.json`。
+ *
+ * ## 它治的是什么
+ *
+ * 在这之前 `epoch.theme` / `epoch.lang` **只**写在浏览器的 `localStorage` 里
+ * （[web/src/prefs.ts](../../web/src/prefs.ts)），而 localStorage 按 origin 隔离。
+ * 嵌入宿主按 [EMBEDDING.md §9](../../../docs/EMBEDDING.md) 的建议用 `port: 0` 时，
+ * 每次启动都是一个新的 `http://127.0.0.1:<新端口>` —— 上次那份读不到。
+ * 症状：设置里选了深色，关掉再开又回到「跟随系统」（升级必然重启一次，
+ * 所以它在升级那里最显眼）。这份文件就是那条跨重启、跨 origin 的路。
+ *
+ * ## 为什么不是 `config.yaml` 里的 `display.*`
+ *
+ * 这一条是**逐条核对过**的，不是「JSON 更顺手」：
+ *
+ * 1. **`display.language` 的值域是 `LANGS`（`zh|en`），没有 `system`。**
+ *    而外观那一格是三档（`system | zh | en`）—— 写一个 `system` 进去会让
+ *    `parseLenient` 产出一条 `config-invalid`，然后**整份配置退默认值**
+ *    （provider 和 apiKey 一起没）。本机实测：`display.language: dracula` /
+ *    `system` / 空串三种写法都是 `apiKey: ""` + `model: gpt-4o-mini`。
+ * 2. **写盘那条链刻意没有「删键」**（[core/config/write.ts](./config/write.ts) 文件头
+ *    第三节 + protocol 的 `WireSettingsWriteRequest`）。而「选回跟随系统」如果
+ *    要复用 `display.language`，就只能靠删键 —— 因为「键不写」是它唯一表达得出
+ *    「跟随系统」的形状。
+ * 3. **那个形状本身也表达不了三档。** 宿主每次启动都带自己的初值（`ui`），
+ *    而「键不写 = 跟随系统」和「键不写 = 用户从没选过」逐字同形 ⇒ 用户显式选的
+ *    「跟随系统」会被宿主初值盖掉 —— 正是这一轮要修的那个症状换个方向。
+ * 4. 它还会顺手改掉 CLI / TUI 的语言（`cli/src/language.ts` 读的就是
+ *    `display.language`）。那在 EMBEDDING 里是**刻意分开的两件事**
+ *    （「界面初值」vs「进程语言」，两张表都在 §9），不该被一个界面偏好偷偷合并。
+ *
+ * 所以这份偏好住自己那一格：三档**原样**存（`system` 也在盘上，因此「没选过」
+ * 和「选了跟随系统」是两件事），值域自由，一个字节都不碰 `config.yaml`。
+ *
+ * ## 值域谁说了算：**这一层不说**
+ *
+ * 这个类只做「把两条字符串存下来、读回去」，不判字面值。判定在两处，而且都在
+ * 消费侧：
+ *
+ * - **写入口**：`POST /api/appearance` 用 server `bind.ts` 的两个 guard
+ *   （`isUiThemePref` / `isUiLangPref`）挡 —— 那正是宿主初值走的那一道关，
+ *   两处合一处就不会出现「宿主给的认得出、盘上存回来的认不出」。
+ * - **消费侧**：第一方界面那段内联脚本对 query 的坏值策略本来就是
+ *   「认不出来当没给」（`index.html` 里的 `allowed`）。
+ *
+ * 所以手改出来的 `"theme": "dracula"` 是一个**惰性**的坏值：它读得出来、
+ * 用不上、也不报错，逐字同 `prefs.ts` 的 `readPref` 那条
+ * 「认不出来的值 = 当没设，不写回、不清理」。在这一层再抄一份值域，
+ * 只会多一个「四份字面量」的走散点。
+ *
+ * ## 三条照抄 {@link RecentWorkspaces} / {@link LastOpenSessions}（同一类东西）
+ *
+ * 1. **本机文件，不是服务**（方案 42 §三那条范围闸门）。
+ * 2. **写失败不抛。** 记不下来的代价是下次启动回到默认外观 —— 它不该把
+ *    「切主题」这个主路径顶掉（判据同上，那一份是「切会话」）。
+ * 3. **原子写 + 0o600**：那是这台机器上这个人挑了哪个主题，不是组内共享的东西。
+ *    写到一半崩溃只会留下一个 `.tmp`，而不是半个 JSON。
+ *
+ * ⚠️ **只为真的 I/O 失败出声**（结构问题一律当「还没选过」，静静吞掉）——
+ * 判据逐字同 `LastOpenSessions` 的文件头末节：一份读不出来的偏好和一份
+ * 「他还没选过」在界面上长得一模一样，为它在每次启动时印一行黄字，
+ * 只会教人忽略诊断。
+ */
+
+/**
+ * 盘上那一份偏好。
+ *
+ * **两个键都缺席 = 用户从没选过**（宿主给的初值这时才生效）；写了一个字面值
+ * （包括 `'system'`）就是用户自己选过的那一档，此后宿主给的初值不再覆盖它。
+ * 这一条是整份文件存在的理由，判据在文件头。
+ *
+ * ⚠️ 类型是 `string` 而不是那三档的联合，理由见文件头「值域谁说了算」——
+ * 这一层不做值域判断，于是它也不该在类型上装作自己做过。
+ */
+interface StoredAppearance {
+    /** 主题偏好（`system | light | dark`）。缺席 = 没选过 */
+    theme?: string;
+    /** 语言偏好（`system | zh | en`）。缺席 = 没选过 */
+    lang?: string;
+}
+declare class AppearanceStore {
+    private readonly filePath;
+    private prefs;
+    /**
+     * 读取时真的发生了 I/O 失败（文件在、但读不动）。空数组 = 读取正常。
+     *
+     * ⚠️ **结构问题不进这里**，判据在文件头最后一段。每一项是一个还没渲染的闭包
+     * （理由逐字同 `RecentWorkspaces` 的文件头末节：它要进启动诊断，而诊断得能按
+     * 这一次请求的语言重放一遍，在装配期渲染成字符串等于把进程语言钉死在里面）。
+     */
+    readonly loadErrors: LocalizedDetail[];
+    /** 写入失败的原因。见文件头第 2 条 —— 写不进去不抛，但也不装作写进去了 */
+    readonly writeErrors: LocalizedDetail[];
+    constructor(filePath?: string);
+    /** 盘上现在那一份。返回副本 —— 调用方改它不该改到存储 */
+    get(): StoredAppearance;
+    /**
+     * 写一次。**只覆盖 `patch` 里真的给了的那几格**，其余原样留着。
+     *
+     * 空串和 `undefined` 一个待遇（当没给）：这个文件里那两个键的语义是
+     * 「用户选过哪一档」，而空串不是任何一档 —— 写一个空的 `theme` 下去，
+     * 下一次读出来要么当没选过（对），要么变成一个要另写一条判据的第四种状态。
+     *
+     * **值没变就不写盘**：界面切一次主题报一次，而 React 那边同一件事可能报两遍
+     * （同 `LastOpenSessions.remember` 那条理由）。
+     */
+    set(patch: StoredAppearance): void;
+    private load;
+    /** JSON → 偏好。认不出来的一律当没选过，一个字都不说（判据在文件头末段） */
+    private adopt;
+    /**
+     * 原子写入：先写同目录的临时文件再 rename。判据逐字同 `RecentWorkspaces.save()`。
+     *
+     * 权限 0o600：这份文件说的是这个人挑了深色还是浅色、界面说中文还是英文 ——
+     * 它一个秘密都没有，但它也没有任何理由让同机的别人读。
+     */
+    private save;
+}
+
 /**
  * Policy Engine 类型定义 — 简单策略规则。
  */
@@ -20477,4 +20599,4 @@ declare function resolveCodeModeWorker(baseDir: string, exists?: typeof existsSy
  */
 declare function codeModeWorkerPath(): string | undefined;
 
-export { AGENT_ROLE_DIAG_MODULE, ARTIFACT_MAX_TOTAL_BYTES, ARTIFACT_RETENTION_DEFAULTS, ATTACHMENT_MAX_TOTAL_BYTES, ATTACHMENT_RETENTION_DEFAULTS, type AcquireResult, type AgentConfig, AgentLoop, type AgentProvider, type AgentSite, type AgentSiteRef, type AppendMessageInput, ApprovalCache, type ApprovalDecision, type ApprovalScope, type ArtifactOpenRefusal, type ArtifactRetention, type AskQuestionDeps, type AttachmentRetention, BLOCKED_TOOLS, type BackendOptions, type BackendOutcome, type BackgroundTaskSource, type BaseOrigin, type BaseSlot, type BeginTurnInput, type BreakdownInput, BudgetGuard, type BudgetGuardOptions, type BudgetInfo, type BudgetLevel, type BudgetOptions, type BudgetStatus, BudgetStore, type BudgetStoreOptions, type BuildFireArgvInput, type BuildIndexOptions, CHECKPOINT_MAX_TOTAL_BYTES, CLAUDE_EVENT_NAMES, CLAUDE_TOOL_NAMES, CODE_MODE_LIMITS, CODE_MODE_SDK_TAG, CONFIG_KEYS, CURRENT_CONFIG_VERSION, type CachedApproval, type CachedDecision, type CheckpointCapture, type CheckpointFile, CheckpointManager, type CheckpointManagerOptions, type CheckpointManifest, CheckpointStore, type CheckpointStoreOptions, type CheckpointSummary, type ClaudeHooksParseOptions, type CodeModeLimits, type CodeRequest, type CodeResult, CodeSandbox, type CommandHookConfig, type CommandHookResult, type CommandLoadOutcome, type CommandLoadSummary, type CommandResult, type CommandRunner, type CompactionResult, type CompiledRules, type ComplianceDirSpec, type ComplianceDirsSummary, ComplianceEngine, type ComplianceEngineInput, type ComplianceGate, type ComplianceHit, type ComplianceRule, type ComplianceRuleSource, type ComplianceSettings, type ComplianceVerdict, type CompressConfig, type CompressResult, type ConfigMigration, type ConfigOrigins, ContextCompressor, type ContextEngine, type CreateScheduleInput, type CreateSessionInput, DEFAULT_COMPLIANCE_ACTIONS, DEFAULT_COMPLIANCE_SETTINGS, DEFAULT_COMPRESSION_THRESHOLD, DEFAULT_GOAL_MAX_ROUNDS, DEFAULT_MAX_HOLD_CHARS, type DelegateArgs, type DelegateConfig, DelegateManager, type DelegateTaskResult, type DiagnoseOptions, type DiscoverOutcome, type DiscoveredFile, type DoctorReport, type DraftParse, EMPTY_RULES, EPOCH_DISK_LEDGER, EpochConfigSchema, type ExpandOptions, type ExtractOutcome, FTS_TABLES, FTS_TRIGGERS, type FallbackEvent, type FileSlots, type FileSourceKind, type ForkInput, type FrontmatterParse, type FrontmatterSplit, type FtsHealth, type FtsReclaim, type FtsSpace, type FtsTableHealth, GOAL_BLOCK_CODES, type GateAxis, type GateVerdict, type GenerateInput, type GenerateOutput, type Goal, type GoalBlockReason, type GoalClear, type GoalPhase, type GoalPromptView, type GoalRefusal, type GoalRoundResult, GoalService, GoalStore, type GoalToolDeps, type GoalWrite, HEADLESS_AUDIT_CODES, type HeadlessPolicy, type HookConfigEntry, HookManager, type HookManagerOptions, type HookMatcher, type HookSourceKind, type HookSourceStatus, type HookSourcesOptions, type HookSourcesSummary, type HooksParseOutcome, type MemoryManager$1 as IMemoryManager, INSTRUCTION_BUDGET_CHARS, INSTRUCTION_FILES, type SessionManager$1 as ISessionManager, type SkillSystem$1 as ISkillSystem, ImageLoadError, type ImageSize, type ImportDecision, type ImportGate, type ImportMessage, type ImportNode, type ImportPartsResult, type ImportSessionInput, type ImportSessionMeta, type ImportSessionResult, type ImportSkipReason, ImportTrustStore, type InstallOptions, type InstallOutcome, type InstallPreview, type InstructionScan, type InstructionSource, type IsolationReason, type IsolationReport, type JsonSchemaDocument, LAUNCHD_LABEL_PREFIX, LOCK_HEARTBEAT_MS, LOCK_STALE_MS, type LastOpenSession, LastOpenSessions, type LayerOutcome, type LayerScalars, type LayerStatus, type LearningContext, type LearningResult, type LearningSkipReason, type LexiconLoadOutcome, type LifecycleOutcome, type ListCandidatesInput, type ListSessionsInput, type ListSessionsOutput, type LoadCommandsOptions, type LoadConfigOptions, type LoadKeybindingsOptions, type LoadKeybindingsResult, type LoadRolesOptions, type LoadedPlugin, type LockHolder, MARKETPLACE_DISPLAY_FIELDS, MARKETPLACE_FILE, MAX_AUDIT_ENTRIES, MAX_COMMAND_DEPTH, MAX_GOAL_MAX_ROUNDS, MAX_IMPORT_DEPTH, MAX_LAST_OPEN_SESSIONS, MAX_OBJECTIVE_CHARS, MAX_REASON_CHARS, MAX_RECENT_WORKSPACES, MODEL_GIVE_UP_THRESHOLD, MULTIMODAL_DEFAULTS, type ManagedPolicy, ManagedPolicyError, type ManagedSettings, ManagedSettingsSchema, type MarketplaceCatalog, type MarketplaceCategory, type MarketplaceDisplay, type MarketplaceDisplayField, type MarketplaceEntry, type MarketplaceOutcome, type MarketplaceRecord, type MarketplaceStatus, type MemoryConfig, type MemoryEntry, MemoryManager, type MemoryNotice, type MemorySearchResult, type MemoryTarget, type MemoryWriteResult, type MentionPart, type MentionResolution, type Message, type MessageHit, type MessageRecord, type MessageSurface, type ModelCapability, ModelFailureTracker, type ModelMetaEntry, type ModelPricing, type MultimodalPolicy, NOMINAL_TOTAL_BYTES, NO_REVEALED_TOOLS, type NonInteractiveProbe, type OsTaskSnapshot, type OutputGuard, PACK_EXCLUDES, PACK_MAX_BYTES, PACK_MAX_FILES, PERMISSION_AUDIT_CODES, PLUGIN_LAYOUT, PLUGIN_MANIFEST_FILE, PLUGIN_MANIFEST_KEYS, PLUGIN_NAME_PATTERN, PLUGIN_ROOT_ENV, PLUGIN_ROOT_TOKEN, PLUGIN_VISIBILITY, POLICY_DECISIONS, PROBE_VERSION, PROJECT_AGENTS_SUBDIR, PROVIDER_NO_CREDENTIAL, type PackFile, type PackLimits, type PackOutcome, type PackPlan, type PackPlanOutcome, type PermissionAuditCode, type PermissionAuditEntry, type PermissionAuditOutcome, type PermissionAuditScope, type PermissionAuditSnapshot, PermissionManager, type PersistFailureKind, type PersistedBudget, type PersistedPart, type PlanApprovalFn, type PlanEnterResult, type PlanModeDeps, PlanModeState, type PlanSettlement, type PluginArtifacts, type PluginAuthor, PluginAuthorSchema, type PluginCommandDir, type PluginCounts, type PluginHookFile, type PluginInventory, type PluginLoadOptions, type PluginManifest, type PluginPathRef, type PluginRecord, type PluginSettingsFile, type PluginSourceType, type PluginStateReadOutcome, PluginStore, type PluginVisibility, type PolicyDirSpec, type PolicyDirsSummary, type PolicyLoadOutcome, type PolicyRule, PolicyRuleSchema, type PricingAt, type PricingOverride, type ProjectContext, type ProjectExtensionInventory, ProviderError, ProviderRouter, type ProviderStreamChunk, type ProviderToolCall$1 as ProviderToolCall, type ProviderWarning, type PruneResult, type QuestionAskFn, RECORDING_KEEP_RUNS, RECORDING_MAX_BYTES, ROLE_FRONTMATTER_SCHEMA, RUN_CODE_TOOL, type ReadMessagesInput, type ReadMessagesOutput, type RecentWorkspace, RecentWorkspaces, type RecordRunInput, type RecorderOptions, type RecoveryAction, type RegisterInput, type RegisterOutcome, type RegistrarOptions, type RegistrationPatch, type RepairOutcome, type ResolveMentionsOptions, type ResolveReferenceInput, type ResolveSettingsOptions, type ResolvedCompression, type ResolvedReference, type ResolvedSource, type ResponseFormat, type RestorePartsOptions, type RewindAction, type RewindDrift, type RewindFilePlan, type RewindOptions, type RewindOutcome, type RewindPreview, type RoleCreateFailure, type RoleCreateInput, type RoleCreateOptions, type RoleCreateOutcome, type RoleLoadOutcome, type RoleLoadSummary, type RoleMergeNotice, type RoleMergeResult, type RoleRemoveFailure, type RoleRemoveOptions, type RoleRemoveOutcome, type RoleScope, type RuleMatch, type RuleSuggestion, type RuleVerdict, type RunCodeFailure, type RunCodeInput, type RunCodeOutcome, type RunCodeToolDeps, type RunEstimateInput, type RunInput, type RunResult, type RunningSchedule, SANDBOX_COVERS, SANDBOX_EXCLUDES, SCALAR_KEYS, SCHEDULE_DEFAULTS, SCHEDULE_DEFAULT_ALLOWLIST, SCHEDULE_FORM_BUDGET_USD, SCHEDULE_ISSUE_CODES, SCHTASKS_FOLDER, SESSION_MESSAGES_READ_TOOL, SESSION_MESSAGES_SEARCH_TOOL, SESSION_QUERY_TOOLS, SESSION_SEARCH_TOOL, SESSION_TRACE_TOOL, SETTINGS_LAYER_ORDER, SETTING_WRITE_KEYS, SETTING_WRITE_LAYERS, SKILL_CREATE_TOOL, SKILL_EDIT_TOOL, SKILL_PATCH_TOOL, SKILL_VIEW_TOOL, SKILL_WRITE_FILE_TOOL, SLASH_COMMANDS_DIAG_MODULE, type ScalarKey, type ScanInstructionsOptions, type ScheduleArgvRefusal, type ScheduleArgvResult, type ScheduleArgvWarning, type ScheduleBackend, type ScheduleCliEntry, type ScheduleDraftDeps, type ScheduleDrift, type ScheduleDriftKind, type ScheduleInstallForm, type ScheduleIssue, type ScheduleIssueCode, type ScheduleLock, ScheduleRecorder, ScheduleRegistrar, ScheduleStore, type ScheduleValidation, type SchemaExport, type SearchHit, type SearchInput, type SearchMessagesInput, type SearchMessagesOutput, type SearchOutput, type SearchSessionsInput, type SelectionDeps, type SelfConnector, type SelfIndexInput, type SelfSettings, type Session, type SessionCandidate, type SessionHit, SessionManager, type SessionMentionDeps, type SessionMeta, SessionQueries, SessionReferences, type SessionSearchDeps, type SessionStats, type SessionSurface, type SessionTrace, type SessionVisibility, type SessionVisibilityInput, type SettingApply, type SettingApplyFacts, type SettingChain, type SettingFutile, type SettingLayer, type SettingStep, type SettingValue, type SettingValueKind, type SettingWriteFailure, type SettingWriteKey, type SettingWriteLayer, type SettingWriteOutcome, type SettingWriteRequest, type SettingWriteTarget, type SettingWriteTargetsOptions, type SettingsFile, SettingsFileError, SettingsFileSchema, type SettingsLayer, type SettingsResolution, type ShadowFinding, type ShadowKind, type Skill, type SkillDirSource, type SkillDirSpec, type SkillDirsSummary, type SkillImportConflict, type SkillImportDone, type SkillImportEntry, type SkillImportFailure, type SkillImportForm, type SkillImportOptions, type SkillImportPreview, type SkillImportResult, type SkillIndexEntry, type SkillIndexOptions, type SkillIndexResidency, type SkillIndexStats, SkillLearner, type SkillLearningProvider, type SkillMeta, type SkillStats, SkillSystem, type SkillSystemOptions, type SkillViewDeps, type SkillWriteDeps, type SteerSource, type SubAgentRunner, type SubTask, type SubToolCaller, type SummarizeOutput, type SurfaceMessage, type SystemPromptParams, type SystemPromptSegments, TOOL_SEARCH_TOOL, TaskNoticeTracker, type TodoItem, type ToolCall, type ToolConflict, type ToolGate, type ToolNameFidelity, type ToolNameLookup, ToolRegistry, type ToolRevealState, type ToolScope, type ToolSearchDeps, type ToolTableCost, type TraceInput, type TraceNode, TrackerDB, type TrustDecision, type TrustGate, type TrustGateOptions, TrustManager, type TurnRecord, type TurnTiming, type UpdateScheduleInput, type UtilityModelInfo, type ValidateScheduleInput, type VersionCheck, Workspace, type WorkspaceFiles, type WorkspaceIssue, type WorkspaceIssueKind, acquireScheduleLock, addMarketplace, addUsage, admitArtifact, admitArtifacts, affectedPaths, artifactLaunchArgv, artifactOpenRefusal, assertLevelAllowed, blockedRoleTools, buildContextBreakdown, buildFireArgv, buildFtsMatchQuery, buildSchemaExports, buildSystemPrompt, buildTrigramMatchQuery, builtinRoles, checkEpochVersion, checkFtsHealth, checkShadowing, classifyPersistFailure, classifyProviderError, clearModelCache, coalesceRecording, codeModeWorkerPath, commandNameFromRelPath, compileRuleLists, compressionOptions, computeCost, computeCostMicros, computeExecHash, countRules, createAllowAllGate, createAllowAllImportGate, createAskQuestionTool, createCodeExecTool, createDelegateTool, createDenyAllGate, createDenyAllImportGate, createGoalTool, createImportGate, createMemoryTool, createPlanModeTools, createRoleFile, createRoleScope, createRunCodeTool, createScheduleDraftTool, createSessionMessagesReadTool, createSessionMessagesSearchTool, createSessionSearchTool, createSessionSearchTools, createSessionTraceTool, createSkillViewTool, createSkillWriteTools, createTodoTool, createToolRevealState, createToolScope, createToolSearchTool, createTrustGate, currentEpochVersion, decideImport, decideTrust, defaultConfig, defaultModelOf, describeArtifactRefusal, describeBackgroundTask, describeHeadlessPolicy, describeIsolation, describeJsonError, diagnoseSchedules, discoverMarkdown, discoverModels, discoverProject, displayAllows, displayCurrency, draftCommandLine, draftWidening, escapeRuleContent, estimateImageTokens, estimateRunTokens, estimateTokens, evaluateSelection, expandCommand, expandImports, explainSetting, extractArchive, findInstructionFiles, findProjectInstructions, findRole, formatBytes, formatSkillIndex, formatUsd, gateForTool, getCapability, getConfigIssues, getConfigOrigins, getImportGate, getTrustGate, hasDedicatedExecContent, hasExecTierContent, hasPromptCaching, hasProviderCredentials, hasReadTierContent, imageFromBase64, imageFromPath, imagePartTokens, importParts, importSkills, installPlugin, instructionDirs, instructionNotices, intervalSlots, inventoryProjectExtensions, inventoryTotal, isBlockCode, isCodeModeDeferred, isEmptyRules, isGoalPhase, isNonInteractive, isReadOnlySubCall, isSettingWriteLayer, isTransientPersistFailure, isValidPluginName, isWithinWindow, isWritableSettingKey, labelSlug, layerRank, listRunningSchedules, listSessionCandidates, listWorkspaceFiles, loadCommandDefinitions, loadCommandFile, loadCommands, loadConfig, loadHookSources, loadKeybindings, loadLexiconDir, loadLexiconFiles, loadPlugins, loadPolicyFiles, loadPolicyRules, loadRoleDefinitions, loadRoleDir, loadedImports, localDateString, managedSwitchNotes, mapClaudeToolName, mapEpochToolName, mapOperationType, matchPreauthorization, matchRuleLists, matchesHook, mentionsPluginRoot, mergeHeadlessPolicy, mergeRoles, mergeSchedulePatch, microsToUsd, modelListCandidates, needsAllowlist, nextFallbackModel, nextRunAt, noConfigOrigins, noManagedPolicy, noPlugins, openArtifact, originOf, packFileName, packPlugin, parseClaudeSettingsHooks, parseClock, parseDate, parseFrontmatter, parseHooksConfig, parseHooksConfigVerbose, parseImportLine, parseModelList, parseRoleDefinition, parseScheduleDraft, parseSkillFrontmatter, parseTrigger, pendingImageTokens, persistFailureCode, persistParts, persistToolResults, persistedUsage, planPack, previewSkillImport, pricingFor, projectEntryForDisplay, pruneArtifacts, pruneAttachments, pruneRecordings, pruneSchedules, readImageSize, readMarketplaces, readPluginManifest, readPluginRecords, readProviderKeyEnv, readRecording, readSessionSurface, reclaimFtsSpace, redactLine, refreshOpenRouterMetadata, removeMarketplace, removeRecordings, removeRoleFile, removeSessionArtifacts, removeSessionAttachments, renderImportTree, renderProjectContext, renderSdkDeclaration, renderSelfIndex, repairSchedules, resolveArtifactRetention, resolveCodeModeWorker, resolveComplianceDirs, resolveEntrySource, resolveInWorkspace, resolveMarketplaceRef, resolveMentions, resolveMultimodalPolicy, resolvePolicyDirs, resolvePricingAt, resolveProjectRoot, resolveScheduleBackend, resolveSessionReference, resolveSessionVisibility, resolveSettings, resolveSkillDirs, resolveSource, resolveTar, resolveWorkspace, restoreParts, revealScopedProvider, roleScopedProvider, roleSourceLabel, ruleCovers, ruleFromString, ruleToString, runCode, runCommand, sanitizeArgNames, sanitizeCommand, sanitizeFtsQuery, sanitizePath, sanitizeToolOutput, scanInstructions, scanPluginDir, scanSkillDirs, searchMarketplaces, setDisplayCurrency, setImportGate, setPluginEnabled, setTrustGate, settingValueChoices, settingValueKind, settingWriteApply, settingWriteLayers, settingWriteTargets, skillIndexDescription, skillIndexResidency, skillIndexStats, sniffMediaType, splitFrontmatter, staticToolProvider, stripArtifactData, substitutePluginRoot, suggestRuleFromApproval, systemOpenArgv, systemPromptSegments, toPosix, toolDefinitionTokens, toolMatches, toolTableTokens, totalTokens, traceSession, triggerPeriodMs, unescapeRuleContent, uninstallPlugin, unknownRoleSkills, unknownRoleTools, unloadedInstructionFiles, updateMarketplace, updatePlugin, usdToMicros, validateSchedule, validateTrigger, validateWindow, withGoalCompression, withGoalPrompt, workspaceDisplayPath, writeSettingValue };
+export { AGENT_ROLE_DIAG_MODULE, ARTIFACT_MAX_TOTAL_BYTES, ARTIFACT_RETENTION_DEFAULTS, ATTACHMENT_MAX_TOTAL_BYTES, ATTACHMENT_RETENTION_DEFAULTS, type AcquireResult, type AgentConfig, AgentLoop, type AgentProvider, type AgentSite, type AgentSiteRef, AppearanceStore, type AppendMessageInput, ApprovalCache, type ApprovalDecision, type ApprovalScope, type ArtifactOpenRefusal, type ArtifactRetention, type AskQuestionDeps, type AttachmentRetention, BLOCKED_TOOLS, type BackendOptions, type BackendOutcome, type BackgroundTaskSource, type BaseOrigin, type BaseSlot, type BeginTurnInput, type BreakdownInput, BudgetGuard, type BudgetGuardOptions, type BudgetInfo, type BudgetLevel, type BudgetOptions, type BudgetStatus, BudgetStore, type BudgetStoreOptions, type BuildFireArgvInput, type BuildIndexOptions, CHECKPOINT_MAX_TOTAL_BYTES, CLAUDE_EVENT_NAMES, CLAUDE_TOOL_NAMES, CODE_MODE_LIMITS, CODE_MODE_SDK_TAG, CONFIG_KEYS, CURRENT_CONFIG_VERSION, type CachedApproval, type CachedDecision, type CheckpointCapture, type CheckpointFile, CheckpointManager, type CheckpointManagerOptions, type CheckpointManifest, CheckpointStore, type CheckpointStoreOptions, type CheckpointSummary, type ClaudeHooksParseOptions, type CodeModeLimits, type CodeRequest, type CodeResult, CodeSandbox, type CommandHookConfig, type CommandHookResult, type CommandLoadOutcome, type CommandLoadSummary, type CommandResult, type CommandRunner, type CompactionResult, type CompiledRules, type ComplianceDirSpec, type ComplianceDirsSummary, ComplianceEngine, type ComplianceEngineInput, type ComplianceGate, type ComplianceHit, type ComplianceRule, type ComplianceRuleSource, type ComplianceSettings, type ComplianceVerdict, type CompressConfig, type CompressResult, type ConfigMigration, type ConfigOrigins, ContextCompressor, type ContextEngine, type CreateScheduleInput, type CreateSessionInput, DEFAULT_COMPLIANCE_ACTIONS, DEFAULT_COMPLIANCE_SETTINGS, DEFAULT_COMPRESSION_THRESHOLD, DEFAULT_GOAL_MAX_ROUNDS, DEFAULT_MAX_HOLD_CHARS, type DelegateArgs, type DelegateConfig, DelegateManager, type DelegateTaskResult, type DiagnoseOptions, type DiscoverOutcome, type DiscoveredFile, type DoctorReport, type DraftParse, EMPTY_RULES, EPOCH_DISK_LEDGER, EpochConfigSchema, type ExpandOptions, type ExtractOutcome, FTS_TABLES, FTS_TRIGGERS, type FallbackEvent, type FileSlots, type FileSourceKind, type ForkInput, type FrontmatterParse, type FrontmatterSplit, type FtsHealth, type FtsReclaim, type FtsSpace, type FtsTableHealth, GOAL_BLOCK_CODES, type GateAxis, type GateVerdict, type GenerateInput, type GenerateOutput, type Goal, type GoalBlockReason, type GoalClear, type GoalPhase, type GoalPromptView, type GoalRefusal, type GoalRoundResult, GoalService, GoalStore, type GoalToolDeps, type GoalWrite, HEADLESS_AUDIT_CODES, type HeadlessPolicy, type HookConfigEntry, HookManager, type HookManagerOptions, type HookMatcher, type HookSourceKind, type HookSourceStatus, type HookSourcesOptions, type HookSourcesSummary, type HooksParseOutcome, type MemoryManager$1 as IMemoryManager, INSTRUCTION_BUDGET_CHARS, INSTRUCTION_FILES, type SessionManager$1 as ISessionManager, type SkillSystem$1 as ISkillSystem, ImageLoadError, type ImageSize, type ImportDecision, type ImportGate, type ImportMessage, type ImportNode, type ImportPartsResult, type ImportSessionInput, type ImportSessionMeta, type ImportSessionResult, type ImportSkipReason, ImportTrustStore, type InstallOptions, type InstallOutcome, type InstallPreview, type InstructionScan, type InstructionSource, type IsolationReason, type IsolationReport, type JsonSchemaDocument, LAUNCHD_LABEL_PREFIX, LOCK_HEARTBEAT_MS, LOCK_STALE_MS, type LastOpenSession, LastOpenSessions, type LayerOutcome, type LayerScalars, type LayerStatus, type LearningContext, type LearningResult, type LearningSkipReason, type LexiconLoadOutcome, type LifecycleOutcome, type ListCandidatesInput, type ListSessionsInput, type ListSessionsOutput, type LoadCommandsOptions, type LoadConfigOptions, type LoadKeybindingsOptions, type LoadKeybindingsResult, type LoadRolesOptions, type LoadedPlugin, type LockHolder, MARKETPLACE_DISPLAY_FIELDS, MARKETPLACE_FILE, MAX_AUDIT_ENTRIES, MAX_COMMAND_DEPTH, MAX_GOAL_MAX_ROUNDS, MAX_IMPORT_DEPTH, MAX_LAST_OPEN_SESSIONS, MAX_OBJECTIVE_CHARS, MAX_REASON_CHARS, MAX_RECENT_WORKSPACES, MODEL_GIVE_UP_THRESHOLD, MULTIMODAL_DEFAULTS, type ManagedPolicy, ManagedPolicyError, type ManagedSettings, ManagedSettingsSchema, type MarketplaceCatalog, type MarketplaceCategory, type MarketplaceDisplay, type MarketplaceDisplayField, type MarketplaceEntry, type MarketplaceOutcome, type MarketplaceRecord, type MarketplaceStatus, type MemoryConfig, type MemoryEntry, MemoryManager, type MemoryNotice, type MemorySearchResult, type MemoryTarget, type MemoryWriteResult, type MentionPart, type MentionResolution, type Message, type MessageHit, type MessageRecord, type MessageSurface, type ModelCapability, ModelFailureTracker, type ModelMetaEntry, type ModelPricing, type MultimodalPolicy, NOMINAL_TOTAL_BYTES, NO_REVEALED_TOOLS, type NonInteractiveProbe, type OsTaskSnapshot, type OutputGuard, PACK_EXCLUDES, PACK_MAX_BYTES, PACK_MAX_FILES, PERMISSION_AUDIT_CODES, PLUGIN_LAYOUT, PLUGIN_MANIFEST_FILE, PLUGIN_MANIFEST_KEYS, PLUGIN_NAME_PATTERN, PLUGIN_ROOT_ENV, PLUGIN_ROOT_TOKEN, PLUGIN_VISIBILITY, POLICY_DECISIONS, PROBE_VERSION, PROJECT_AGENTS_SUBDIR, PROVIDER_NO_CREDENTIAL, type PackFile, type PackLimits, type PackOutcome, type PackPlan, type PackPlanOutcome, type PermissionAuditCode, type PermissionAuditEntry, type PermissionAuditOutcome, type PermissionAuditScope, type PermissionAuditSnapshot, PermissionManager, type PersistFailureKind, type PersistedBudget, type PersistedPart, type PlanApprovalFn, type PlanEnterResult, type PlanModeDeps, PlanModeState, type PlanSettlement, type PluginArtifacts, type PluginAuthor, PluginAuthorSchema, type PluginCommandDir, type PluginCounts, type PluginHookFile, type PluginInventory, type PluginLoadOptions, type PluginManifest, type PluginPathRef, type PluginRecord, type PluginSettingsFile, type PluginSourceType, type PluginStateReadOutcome, PluginStore, type PluginVisibility, type PolicyDirSpec, type PolicyDirsSummary, type PolicyLoadOutcome, type PolicyRule, PolicyRuleSchema, type PricingAt, type PricingOverride, type ProjectContext, type ProjectExtensionInventory, ProviderError, ProviderRouter, type ProviderStreamChunk, type ProviderToolCall$1 as ProviderToolCall, type ProviderWarning, type PruneResult, type QuestionAskFn, RECORDING_KEEP_RUNS, RECORDING_MAX_BYTES, ROLE_FRONTMATTER_SCHEMA, RUN_CODE_TOOL, type ReadMessagesInput, type ReadMessagesOutput, type RecentWorkspace, RecentWorkspaces, type RecordRunInput, type RecorderOptions, type RecoveryAction, type RegisterInput, type RegisterOutcome, type RegistrarOptions, type RegistrationPatch, type RepairOutcome, type ResolveMentionsOptions, type ResolveReferenceInput, type ResolveSettingsOptions, type ResolvedCompression, type ResolvedReference, type ResolvedSource, type ResponseFormat, type RestorePartsOptions, type RewindAction, type RewindDrift, type RewindFilePlan, type RewindOptions, type RewindOutcome, type RewindPreview, type RoleCreateFailure, type RoleCreateInput, type RoleCreateOptions, type RoleCreateOutcome, type RoleLoadOutcome, type RoleLoadSummary, type RoleMergeNotice, type RoleMergeResult, type RoleRemoveFailure, type RoleRemoveOptions, type RoleRemoveOutcome, type RoleScope, type RuleMatch, type RuleSuggestion, type RuleVerdict, type RunCodeFailure, type RunCodeInput, type RunCodeOutcome, type RunCodeToolDeps, type RunEstimateInput, type RunInput, type RunResult, type RunningSchedule, SANDBOX_COVERS, SANDBOX_EXCLUDES, SCALAR_KEYS, SCHEDULE_DEFAULTS, SCHEDULE_DEFAULT_ALLOWLIST, SCHEDULE_FORM_BUDGET_USD, SCHEDULE_ISSUE_CODES, SCHTASKS_FOLDER, SESSION_MESSAGES_READ_TOOL, SESSION_MESSAGES_SEARCH_TOOL, SESSION_QUERY_TOOLS, SESSION_SEARCH_TOOL, SESSION_TRACE_TOOL, SETTINGS_LAYER_ORDER, SETTING_WRITE_KEYS, SETTING_WRITE_LAYERS, SKILL_CREATE_TOOL, SKILL_EDIT_TOOL, SKILL_PATCH_TOOL, SKILL_VIEW_TOOL, SKILL_WRITE_FILE_TOOL, SLASH_COMMANDS_DIAG_MODULE, type ScalarKey, type ScanInstructionsOptions, type ScheduleArgvRefusal, type ScheduleArgvResult, type ScheduleArgvWarning, type ScheduleBackend, type ScheduleCliEntry, type ScheduleDraftDeps, type ScheduleDrift, type ScheduleDriftKind, type ScheduleInstallForm, type ScheduleIssue, type ScheduleIssueCode, type ScheduleLock, ScheduleRecorder, ScheduleRegistrar, ScheduleStore, type ScheduleValidation, type SchemaExport, type SearchHit, type SearchInput, type SearchMessagesInput, type SearchMessagesOutput, type SearchOutput, type SearchSessionsInput, type SelectionDeps, type SelfConnector, type SelfIndexInput, type SelfSettings, type Session, type SessionCandidate, type SessionHit, SessionManager, type SessionMentionDeps, type SessionMeta, SessionQueries, SessionReferences, type SessionSearchDeps, type SessionStats, type SessionSurface, type SessionTrace, type SessionVisibility, type SessionVisibilityInput, type SettingApply, type SettingApplyFacts, type SettingChain, type SettingFutile, type SettingLayer, type SettingStep, type SettingValue, type SettingValueKind, type SettingWriteFailure, type SettingWriteKey, type SettingWriteLayer, type SettingWriteOutcome, type SettingWriteRequest, type SettingWriteTarget, type SettingWriteTargetsOptions, type SettingsFile, SettingsFileError, SettingsFileSchema, type SettingsLayer, type SettingsResolution, type ShadowFinding, type ShadowKind, type Skill, type SkillDirSource, type SkillDirSpec, type SkillDirsSummary, type SkillImportConflict, type SkillImportDone, type SkillImportEntry, type SkillImportFailure, type SkillImportForm, type SkillImportOptions, type SkillImportPreview, type SkillImportResult, type SkillIndexEntry, type SkillIndexOptions, type SkillIndexResidency, type SkillIndexStats, SkillLearner, type SkillLearningProvider, type SkillMeta, type SkillStats, SkillSystem, type SkillSystemOptions, type SkillViewDeps, type SkillWriteDeps, type SteerSource, type StoredAppearance, type SubAgentRunner, type SubTask, type SubToolCaller, type SummarizeOutput, type SurfaceMessage, type SystemPromptParams, type SystemPromptSegments, TOOL_SEARCH_TOOL, TaskNoticeTracker, type TodoItem, type ToolCall, type ToolConflict, type ToolGate, type ToolNameFidelity, type ToolNameLookup, ToolRegistry, type ToolRevealState, type ToolScope, type ToolSearchDeps, type ToolTableCost, type TraceInput, type TraceNode, TrackerDB, type TrustDecision, type TrustGate, type TrustGateOptions, TrustManager, type TurnRecord, type TurnTiming, type UpdateScheduleInput, type UtilityModelInfo, type ValidateScheduleInput, type VersionCheck, Workspace, type WorkspaceFiles, type WorkspaceIssue, type WorkspaceIssueKind, acquireScheduleLock, addMarketplace, addUsage, admitArtifact, admitArtifacts, affectedPaths, artifactLaunchArgv, artifactOpenRefusal, assertLevelAllowed, blockedRoleTools, buildContextBreakdown, buildFireArgv, buildFtsMatchQuery, buildSchemaExports, buildSystemPrompt, buildTrigramMatchQuery, builtinRoles, checkEpochVersion, checkFtsHealth, checkShadowing, classifyPersistFailure, classifyProviderError, clearModelCache, coalesceRecording, codeModeWorkerPath, commandNameFromRelPath, compileRuleLists, compressionOptions, computeCost, computeCostMicros, computeExecHash, countRules, createAllowAllGate, createAllowAllImportGate, createAskQuestionTool, createCodeExecTool, createDelegateTool, createDenyAllGate, createDenyAllImportGate, createGoalTool, createImportGate, createMemoryTool, createPlanModeTools, createRoleFile, createRoleScope, createRunCodeTool, createScheduleDraftTool, createSessionMessagesReadTool, createSessionMessagesSearchTool, createSessionSearchTool, createSessionSearchTools, createSessionTraceTool, createSkillViewTool, createSkillWriteTools, createTodoTool, createToolRevealState, createToolScope, createToolSearchTool, createTrustGate, currentEpochVersion, decideImport, decideTrust, defaultConfig, defaultModelOf, describeArtifactRefusal, describeBackgroundTask, describeHeadlessPolicy, describeIsolation, describeJsonError, diagnoseSchedules, discoverMarkdown, discoverModels, discoverProject, displayAllows, displayCurrency, draftCommandLine, draftWidening, escapeRuleContent, estimateImageTokens, estimateRunTokens, estimateTokens, evaluateSelection, expandCommand, expandImports, explainSetting, extractArchive, findInstructionFiles, findProjectInstructions, findRole, formatBytes, formatSkillIndex, formatUsd, gateForTool, getCapability, getConfigIssues, getConfigOrigins, getImportGate, getTrustGate, hasDedicatedExecContent, hasExecTierContent, hasPromptCaching, hasProviderCredentials, hasReadTierContent, imageFromBase64, imageFromPath, imagePartTokens, importParts, importSkills, installPlugin, instructionDirs, instructionNotices, intervalSlots, inventoryProjectExtensions, inventoryTotal, isBlockCode, isCodeModeDeferred, isEmptyRules, isGoalPhase, isNonInteractive, isReadOnlySubCall, isSettingWriteLayer, isTransientPersistFailure, isValidPluginName, isWithinWindow, isWritableSettingKey, labelSlug, layerRank, listRunningSchedules, listSessionCandidates, listWorkspaceFiles, loadCommandDefinitions, loadCommandFile, loadCommands, loadConfig, loadHookSources, loadKeybindings, loadLexiconDir, loadLexiconFiles, loadPlugins, loadPolicyFiles, loadPolicyRules, loadRoleDefinitions, loadRoleDir, loadedImports, localDateString, managedSwitchNotes, mapClaudeToolName, mapEpochToolName, mapOperationType, matchPreauthorization, matchRuleLists, matchesHook, mentionsPluginRoot, mergeHeadlessPolicy, mergeRoles, mergeSchedulePatch, microsToUsd, modelListCandidates, needsAllowlist, nextFallbackModel, nextRunAt, noConfigOrigins, noManagedPolicy, noPlugins, openArtifact, originOf, packFileName, packPlugin, parseClaudeSettingsHooks, parseClock, parseDate, parseFrontmatter, parseHooksConfig, parseHooksConfigVerbose, parseImportLine, parseModelList, parseRoleDefinition, parseScheduleDraft, parseSkillFrontmatter, parseTrigger, pendingImageTokens, persistFailureCode, persistParts, persistToolResults, persistedUsage, planPack, previewSkillImport, pricingFor, projectEntryForDisplay, pruneArtifacts, pruneAttachments, pruneRecordings, pruneSchedules, readImageSize, readMarketplaces, readPluginManifest, readPluginRecords, readProviderKeyEnv, readRecording, readSessionSurface, reclaimFtsSpace, redactLine, refreshOpenRouterMetadata, removeMarketplace, removeRecordings, removeRoleFile, removeSessionArtifacts, removeSessionAttachments, renderImportTree, renderProjectContext, renderSdkDeclaration, renderSelfIndex, repairSchedules, resolveArtifactRetention, resolveCodeModeWorker, resolveComplianceDirs, resolveEntrySource, resolveInWorkspace, resolveMarketplaceRef, resolveMentions, resolveMultimodalPolicy, resolvePolicyDirs, resolvePricingAt, resolveProjectRoot, resolveScheduleBackend, resolveSessionReference, resolveSessionVisibility, resolveSettings, resolveSkillDirs, resolveSource, resolveTar, resolveWorkspace, restoreParts, revealScopedProvider, roleScopedProvider, roleSourceLabel, ruleCovers, ruleFromString, ruleToString, runCode, runCommand, sanitizeArgNames, sanitizeCommand, sanitizeFtsQuery, sanitizePath, sanitizeToolOutput, scanInstructions, scanPluginDir, scanSkillDirs, searchMarketplaces, setDisplayCurrency, setImportGate, setPluginEnabled, setTrustGate, settingValueChoices, settingValueKind, settingWriteApply, settingWriteLayers, settingWriteTargets, skillIndexDescription, skillIndexResidency, skillIndexStats, sniffMediaType, splitFrontmatter, staticToolProvider, stripArtifactData, substitutePluginRoot, suggestRuleFromApproval, systemOpenArgv, systemPromptSegments, toPosix, toolDefinitionTokens, toolMatches, toolTableTokens, totalTokens, traceSession, triggerPeriodMs, unescapeRuleContent, uninstallPlugin, unknownRoleSkills, unknownRoleTools, unloadedInstructionFiles, updateMarketplace, updatePlugin, usdToMicros, validateSchedule, validateTrigger, validateWindow, withGoalCompression, withGoalPrompt, workspaceDisplayPath, writeSettingValue };

package/dist/index.js

@@ -2,7 +2,7 @@ import { existsSync, statSync, readdirSync, readFileSync, mkdirSync, writeFileSy
 import { homedir, platform, tmpdir, hostname } from 'os';
 import { join, dirname, resolve, relative, isAbsolute, sep, extname, basename } from 'path';
 import { execFile, execSync, execFileSync, spawn } from 'child_process';
-import { createLogger, dbPath, resolveHomeDir, DEFAULT_MAX_TURNS, PROJECT_DIR_NAME, guardSpawn, t, suggestKey, misspelledKeyIssues, openDatabase, migrate, releaseDatabase, parseLenient, issueDetails, splitWords, unknownKeyIssues, checkpointsDir, pluginsDir, projectHooksPath, projectClaudeSettingsPath, projectClaudeLocalSettingsPath, projectSettingsPath, projectLocalSettingsPath, projectPoliciesDir, trustedImportsPath, canProbeGit, budgetStatePath, artifactsDir, UNLIMITED_TURNS, turnLimitOf, configPath, managedSettingsPath, getSecretValues, listStoredSecretNames, maskApiKey, setSectionField, countCodePoints, headCodePoints, attachmentsDir, isInWorkspace, workspacesPath, samePath, lastSessionsPath, automationLogsDir, projectComplianceDir, projectSkillsDir, trustPath, projectCommandsDir, detectBackend, EXEC_PATH_AS_NODE_ENV, isolate, createStreamDecoder, parseShellCommand, writeArtifact, envPath, checkDangerousCommand, checkObfuscation, keepHeadAndTail, normalizeForMatch, isReadOnlyCommand, CODE_EXEC_ROOTS, tailCodePoints } from '@epoch-agent/infra';
+import { createLogger, dbPath, resolveHomeDir, DEFAULT_MAX_TURNS, PROJECT_DIR_NAME, guardSpawn, t, suggestKey, misspelledKeyIssues, openDatabase, migrate, releaseDatabase, parseLenient, issueDetails, splitWords, unknownKeyIssues, checkpointsDir, pluginsDir, projectHooksPath, projectClaudeSettingsPath, projectClaudeLocalSettingsPath, projectSettingsPath, projectLocalSettingsPath, projectPoliciesDir, trustedImportsPath, canProbeGit, budgetStatePath, artifactsDir, UNLIMITED_TURNS, turnLimitOf, configPath, managedSettingsPath, getSecretValues, listStoredSecretNames, maskApiKey, setSectionField, countCodePoints, headCodePoints, attachmentsDir, isInWorkspace, workspacesPath, samePath, lastSessionsPath, appearancePath, automationLogsDir, projectComplianceDir, projectSkillsDir, trustPath, projectCommandsDir, detectBackend, EXEC_PATH_AS_NODE_ENV, isolate, createStreamDecoder, parseShellCommand, writeArtifact, envPath, checkDangerousCommand, checkObfuscation, keepHeadAndTail, normalizeForMatch, isReadOnlyCommand, CODE_EXEC_ROOTS, tailCodePoints } from '@epoch-agent/infra';
 export { IS_WINDOWS, WINDOWS_HIDE_FLAGS, buildBwrapArgs, buildProfile, checkDangerousCommand, checkObfuscation, createLogger, detectBackend, getDefaultShell, getPythonCommand, isInWorkspace, isReadOnlyCommand, isolate, maskApiKey, probeBubblewrap, probeSeatbelt, complianceDir as resolveComplianceDir, policiesDir as resolvePoliciesDir, setLogLevel } from '@epoch-agent/infra';
 import { PROVIDER_TYPES, OPERATION_TYPES as OPERATION_TYPES$1, COMPLIANCE_CATEGORIES, COMPLIANCE_ACTIONS, SEARCH_PROVIDER_TYPES, CURRENCIES, LANGS, isSettingsPaneId, SETTINGS_PANE_IDS, PERMISSION_LEVELS, SHELL_KINDS, ToolExposure, MAX_OPTIONS, MIN_OPTIONS, MAX_HEADER_CHARS, MAX_QUESTIONS, SCHEDULE_INTERVAL_MINUTES, isPermissionLevel, SCHEDULE_DRAFT_TOOL, isValidAgentRoleName, DEFAULT_AGENT_ROLE, isValidCommandName, RESERVED_COMMAND_NAMES, parseModelRef, isWirePluginArchiveName, systemNote, formatMoney, totalUsageTokens, NOOP_TELEMETRY, METRIC, contentToText, GEN_AI, isPromptOversize, promptTokens, apiKeyEnvVar, PROVIDER_INFOS, isProviderType, API_KEY_ENV_VARS, KEY_ACTIONS, tableOf, perAction, isKeyAction, parseSequence, RESERVED_CHORDS, chordId, sequenceId, ACTION_CONTEXTS, SEQUENCE_CONTEXTS, assertNeverPart, MAX_ATTACH_FILES, MAX_ATTACH_TOTAL_BYTES, MAX_SESSION_REFS, utf8ByteLength, truncateToBudget, attachSessionSurface, isContextNearlyFull, isOperationType, normalizeApproval, imagePartOmittedSummary, MAX_ATTACH_BYTES, SIMULTANEOUS_CONTEXTS, SESSION_REFERENCE_ERROR_CODES, filePartSummary, sessionPartSummary } from '@epoch-agent/protocol';
 export { API_KEY_ENV_VARS, COMPLIANCE_ACTIONS, COMPLIANCE_CATEGORIES, MAX_ATTACH_BYTES, MAX_ATTACH_FILES, MAX_ATTACH_TOTAL_BYTES, MAX_SESSION_ATTACH_BYTES, MAX_SESSION_REFS, OPERATION_TYPES, PERMISSION_LEVELS, PLAN_OUTCOMES, PROVIDER_INFOS, PROVIDER_TYPES, ToolExposure, apiKeyEnvVar, extractAllMentions, extractMentions, extractSessionMentions, getProviderInfo, isOperationType, isPermissionLevel, isPlanOutcome, isProviderType, normalizeApproval } from '@epoch-agent/protocol';
@@ -274,7 +274,7 @@ function createLaunchdBackend(opts = {}) {
         mkdirSync(input.logDir, { recursive: true });
         writeFileSync(path, renderPlist(label, input), "utf-8");
       } catch (err) {
-        return { ok: false, detail: `plist-write-failed: ${describe8(err)}` };
+        return { ok: false, detail: `plist-write-failed: ${describe9(err)}` };
       }
       await run("launchctl", ["bootout", `${guiDomain()}/${label}`]);
       const toggle = await backend.setEnabled(label, input.enabled);
@@ -290,7 +290,7 @@ function createLaunchdBackend(opts = {}) {
       try {
         rmSync(plistPath(label), { force: true });
       } catch (err) {
-        return { ok: false, detail: `plist-remove-failed: ${describe8(err)}` };
+        return { ok: false, detail: `plist-remove-failed: ${describe9(err)}` };
       }
       return { ok: true };
     },
@@ -447,7 +447,7 @@ function detailOf2(what, res) {
   const msg = (res.stderr || res.stdout).trim();
   return `${what} exit ${res.code}${msg ? `: ${msg}` : ""}`;
 }
-function describe8(err) {
+function describe9(err) {
   return err instanceof Error ? err.message : String(err);
 }
 var LAUNCHD_LABEL_PREFIX;
@@ -650,7 +650,7 @@ var ToolRegistry = class {
     this.addTool(tool, source);
   }
   registerTools(tools, source = "builtin") {
-    for (const t80 of tools) this.addTool(t80, source);
+    for (const t81 of tools) this.addTool(t81, source);
   }
   addTool(tool, source) {
     const existing = this.tools.get(tool.name);
@@ -699,14 +699,14 @@ var ToolRegistry = class {
     return isCodeModeDeferred(tool) ? ToolExposure.Deferred : declared;
   }
   exposed() {
-    return this.list().filter((t80) => this.exposureOf(t80) === ToolExposure.Direct);
+    return this.list().filter((t81) => this.exposureOf(t81) === ToolExposure.Direct);
   }
   byExposure(exposure) {
-    return this.list().filter((t80) => this.exposureOf(t80) === exposure);
+    return this.list().filter((t81) => this.exposureOf(t81) === exposure);
   }
   codeModeDeclared() {
     if (!this.codeMode) return [];
-    return this.list().filter((t80) => isCodeModeDeferred(t80));
+    return this.list().filter((t81) => isCodeModeDeferred(t81));
   }
   sourceOf(name) {
     return this.tools.get(name)?.source;
@@ -755,7 +755,7 @@ var ToolRegistry = class {
 function staticToolProvider(tools) {
   return {
     list: () => tools,
-    get: (name) => tools.find((t80) => t80.name === name)
+    get: (name) => tools.find((t81) => t81.name === name)
   };
 }
 var log = createLogger("tokenizer");
@@ -861,6 +861,21 @@ function parseOption(raw) {
   const description = typeof raw["description"] === "string" ? raw["description"].trim() : "";
   return { label, description };
 }
+function parsePage(raw) {
+  if (!isRecord(raw)) return void 0;
+  const rawUrl = typeof raw["url"] === "string" ? raw["url"].trim() : "";
+  if (!rawUrl) return void 0;
+  let url;
+  try {
+    url = new URL(rawUrl);
+  } catch {
+    return void 0;
+  }
+  if (url.protocol !== "http:" && url.protocol !== "https:") return void 0;
+  if (url.hostname !== "127.0.0.1" && url.hostname !== "localhost") return void 0;
+  const label = typeof raw["label"] === "string" ? raw["label"].trim() : "";
+  return label ? { url: rawUrl, label } : { url: rawUrl };
+}
 function parseQuestion(raw, at) {
   if (!isRecord(raw)) return `questions[${at}] \u4E0D\u662F\u5BF9\u8C61`;
   const question = typeof raw["question"] === "string" ? raw["question"].trim() : "";
@@ -878,11 +893,13 @@ function parseQuestion(raw, at) {
   if (options.length < MIN_OPTIONS || options.length > MAX_OPTIONS) {
     return `questions[${at}] \u6709 ${options.length} \u4E2A\u9009\u9879\uFF0C\u8981 ${MIN_OPTIONS}\u2013${MAX_OPTIONS} \u4E2A\u3002**\u4E0D\u8981**\u81EA\u5DF1\u52A0\u300C\u5176\u4ED6\u300D\u9009\u9879 \u2014\u2014 \u81EA\u7531\u8F93\u5165\u7531\u754C\u9762\u81EA\u52A8\u63D0\u4F9B`;
   }
+  const page = parsePage(raw["page"]);
   return {
     question,
     header,
     options,
-    multiSelect: raw["multiSelect"] === true
+    multiSelect: raw["multiSelect"] === true,
+    ...page ? { page } : {}
   };
 }
 function parseQuestions(raw) {
@@ -957,7 +974,19 @@ var PARAMETERS = {
               required: ["label", "description"]
             }
           },
-          multiSelect: { type: "boolean", description: "\u80FD\u4E0D\u80FD\u591A\u9009\u3002\u9ED8\u8BA4 false" }
+          multiSelect: { type: "boolean", description: "\u80FD\u4E0D\u80FD\u591A\u9009\u3002\u9ED8\u8BA4 false" },
+          page: {
+            type: "object",
+            description: "\u8FD9\u4E00\u95EE\u8FD8\u53EF\u4EE5\u5D4C\u4E00\u5F20\u63D2\u4EF6\u9875\u9762\uFF08\u53EA\u5728\u5E26\u754C\u9762\u7684\u5BBF\u4E3B\u91CC\u6709 \u2014\u2014 \u7EC8\u7AEF\u91CC\u4F1A\u88AB\u8BF4\u6210\u4E00\u53E5\u8BDD\uFF0C\u7528\u6237\u81EA\u5DF1\u5F00\uFF09\u3002\u26A0\uFE0F url \u53EA\u6536\u672C\u673A\u56DE\u73AF\uFF08127.0.0.1 / localhost\uFF09\uFF0C\u522B\u7684\u4F1A\u88AB\u4E22\u6389",
+            properties: {
+              url: {
+                type: "string",
+                description: "\u90A3\u4E00\u9875\u7684\u5730\u5740\uFF0C\u5F62\u5982 http://127.0.0.1:52341/confirm?t=\u2026"
+              },
+              label: { type: "string", description: "\u9875\u9762\u4E0A\u90A3\u51E0\u4E2A\u5B57\u3002\u4E0D\u7ED9\u5C31\u7528\u4E00\u53E5\u901A\u7528\u6587\u6848" }
+            },
+            required: ["url"]
+          }
         },
         required: ["question", "header", "options", "multiSelect"]
       }
@@ -972,7 +1001,10 @@ var DESCRIPTION = [
   "**\u6709\u660E\u663E\u9ED8\u8BA4\u7B54\u6848\u65F6\u4E0D\u8981\u95EE**\uFF0C\u76F4\u63A5\u505A\u5E76\u8BF4\u660E \u2014\u2014 \u4ED3\u5E93\u91CC\u5DF2\u7ECF\u6709 vitest.config \u7684\u65F6\u5019",
   "\u300C\u7528\u54EA\u4E2A\u6D4B\u8BD5\u6846\u67B6\u300D\u4E0D\u662F\u4E00\u4E2A\u95EE\u9898\u3002",
   "\u4E0D\u8981\u7528\u5B83\u95EE\u300C\u6211\u7684\u65B9\u6848\u884C\u4E0D\u884C\u300D\uFF08\u90A3\u662F exit_plan_mode\uFF09\uFF0C\u4E5F\u4E0D\u8981\u7528\u5B83\u6C47\u62A5\u8FDB\u5EA6\u3002",
-  "\u9009\u9879\u91CC**\u4E0D\u8981**\u81EA\u5DF1\u653E\u300C\u5176\u4ED6\u300D\uFF1A\u754C\u9762\u4F1A\u81EA\u52A8\u63D0\u4F9B\u81EA\u7531\u8F93\u5165\u3002"
+  "\u9009\u9879\u91CC**\u4E0D\u8981**\u81EA\u5DF1\u653E\u300C\u5176\u4ED6\u300D\uFF1A\u754C\u9762\u4F1A\u81EA\u52A8\u63D0\u4F9B\u81EA\u7531\u8F93\u5165\u3002",
+  "\u26A0\uFE0F \u63D2\u4EF6\u7684\u5DE5\u5177\u7ED9\u4E86\u4F60\u4E00\u4E2A**\u672C\u673A\u5730\u5740**\u3001\u800C\u90A3\u4E2A\u9009\u62E9\u7528\u51E0\u4E2A\u9009\u9879\u8BF4\u4E0D\u6E05\u65F6\uFF08\u51E0\u5341\u5F20\u56FE\u91CC\u6311\u4E00\u5F20\u3001",
+  "\u4E00\u5F20\u8868\u91CC\u5708\u51E0\u884C\uFF09\uFF0C\u628A\u5730\u5740\u653E\u8FDB `questions[].page` \u2014\u2014 \u7528\u6237\u4F1A\u5728\u5F39\u7A97\u91CC\u76F4\u63A5\u770B\u5230\u90A3\u4E00\u9875\u3002",
+  "\u5B83**\u9644\u52A0\u5728\u9009\u9879\u4E4B\u5916**\uFF0C\u9009\u9879\u7167\u65E7\u8981\u7ED9\uFF1A\u7EC8\u7AEF\u91CC\u753B\u4E0D\u51FA\u9875\u9762\uFF0C\u90A3\u65F6\u7528\u6237\u770B\u5230\u7684\u53EA\u6709\u4F60\u5199\u7684\u9009\u9879\u3002"
 ].join("");
 function createAskQuestionTool(deps) {
   return {
@@ -1388,7 +1420,7 @@ var DelegateManager = class {
   }
   normalizeTasks(args) {
     if (args.tasks && args.tasks.length > 0) {
-      return args.role ? args.tasks.map((t80) => ({ ...t80, role: t80.role ?? args.role })) : args.tasks;
+      return args.role ? args.tasks.map((t81) => ({ ...t81, role: t81.role ?? args.role })) : args.tasks;
     }
     if (args.goal) return [{ goal: args.goal, ...args.role ? { role: args.role } : {} }];
     return [];
@@ -1398,7 +1430,7 @@ var DelegateManager = class {
     for (let i = 0; i < tasks.length; i += maxConcurrent) {
       const batch = tasks.slice(i, i + maxConcurrent);
       const batchResults = await Promise.allSettled(
-        batch.map((t80) => this.runSingleTask(t80, parentSessionId, signal))
+        batch.map((t81) => this.runSingleTask(t81, parentSessionId, signal))
       );
       for (const r of batchResults) {
         if (r.status === "fulfilled") {
@@ -1556,21 +1588,21 @@ function createDelegateTool(runner, config, roles) {
     operation: "command",
     describeTarget: (args) => {
       const tasks = Array.isArray(args["tasks"]) ? args["tasks"] : [];
-      const goals = tasks.map((t80) => String(t80["goal"] ?? ""));
+      const goals = tasks.map((t81) => String(t81["goal"] ?? ""));
       const single = typeof args["goal"] === "string" ? args["goal"] : "";
       return [...goals, single].filter(Boolean).join(" | ");
     },
     async execute(args, ctx) {
       const start = Date.now();
       const rawTasks = Array.isArray(args["tasks"]) ? args["tasks"] : void 0;
-      const tasks = rawTasks?.map((t80) => {
-        const o = t80;
+      const tasks = rawTasks?.map((t81) => {
+        const o = t81;
         return {
           goal: String(o["goal"] ?? "").trim(),
           context: String(o["context"] ?? ""),
           ...typeof o["role"] === "string" && o["role"].trim() ? { role: o["role"].trim() } : {}
         };
-      }).filter((t80) => t80.goal.length > 0);
+      }).filter((t81) => t81.goal.length > 0);
       const goal = typeof args["goal"] === "string" ? args["goal"].trim() : "";
       const topRole = typeof args["role"] === "string" ? args["role"].trim() : "";
       if ((!tasks || tasks.length === 0) && !goal) {
@@ -1586,7 +1618,7 @@ function createDelegateTool(runner, config, roles) {
         };
       }
       const known = listRoles();
-      const requested = [...(tasks ?? []).map((t80) => t80.role), topRole].filter(
+      const requested = [...(tasks ?? []).map((t81) => t81.role), topRole].filter(
         (r) => Boolean(r)
       );
       const unknown = [...new Set(requested)].filter((r) => !known.some((k) => k.name === r));
@@ -1760,8 +1792,8 @@ function createGoalTool(deps) {
 }
 var VALID_TARGETS = ["memory", "user"];
 var VALID_ACTIONS = ["add", "replace", "remove", "search", "read", "budget"];
-function isValidTarget(t80) {
-  return typeof t80 === "string" && VALID_TARGETS.includes(t80);
+function isValidTarget(t81) {
+  return typeof t81 === "string" && VALID_TARGETS.includes(t81);
 }
 function isValidAction(a) {
   return VALID_ACTIONS.includes(a);
@@ -4915,7 +4947,7 @@ function available(tools) {
   if (tools.length === 0) {
     return "No deferred tools in this session \u2014 every tool is already in your tool list.";
   }
-  const names = tools.map((t80) => t80.name).sort();
+  const names = tools.map((t81) => t81.name).sort();
   const shown = names.slice(0, MAX_LISTED);
   const rest = names.length - shown.length;
   return `Searchable tools: ${shown.join(", ")}${rest > 0 ? ` (\u2026and ${rest} more)` : ""}.`;
@@ -5035,15 +5067,15 @@ var TrackerDB = class {
     );
     this.db.transaction(() => {
       this.db.prepare("DELETE FROM todos WHERE session_id = ?").run(sessionId);
-      for (const t80 of todos) {
+      for (const t81 of todos) {
         insertStmt.run({
-          id: t80.id,
+          id: t81.id,
           session_id: sessionId,
-          content: t80.content,
-          status: t80.status,
-          reason: t80.reason || null,
-          created_at: t80.created_at,
-          updated_at: t80.updated_at
+          content: t81.content,
+          status: t81.status,
+          reason: t81.reason || null,
+          created_at: t81.created_at,
+          updated_at: t81.updated_at
         });
       }
     })();
@@ -5065,9 +5097,9 @@ function formatTodoList(todos, pendingCount) {
     cancelled: "\u5DF2\u53D6\u6D88"
   };
   lines.push(`[todo] \u72B6\u6001\u6C47\u603B: ${pendingCount} \u4E2A\u5F85\u5B8C\u6210`);
-  for (const t80 of todos) {
-    const label = statusLabel[t80.status] || t80.status;
-    lines.push(`- [${label}]  ${t80.content}${t80.reason ? ` \u2014\u2014 ${t80.reason}` : ""}`);
+  for (const t81 of todos) {
+    const label = statusLabel[t81.status] || t81.status;
+    lines.push(`- [${label}]  ${t81.content}${t81.reason ? ` \u2014\u2014 ${t81.reason}` : ""}`);
   }
   return lines.join("\n");
 }
@@ -5141,14 +5173,14 @@ function createTodoTool(db) {
           };
         }
         const now = (/* @__PURE__ */ new Date()).toISOString();
-        const existing = new Map(db.listBySession(ctx.sessionId).map((t80) => [t80.id, t80]));
-        const todos = rawTodos.map((t80) => {
-          const prev = t80.id ? existing.get(t80.id) : void 0;
-          const status = isValidStatus(t80.status) ? t80.status : "pending";
-          const reason9 = normalizeReason(status, t80.reason);
+        const existing = new Map(db.listBySession(ctx.sessionId).map((t81) => [t81.id, t81]));
+        const todos = rawTodos.map((t81) => {
+          const prev = t81.id ? existing.get(t81.id) : void 0;
+          const status = isValidStatus(t81.status) ? t81.status : "pending";
+          const reason9 = normalizeReason(status, t81.reason);
           return {
-            id: t80.id || generateShortId(),
-            content: String(t80.content || "").slice(0, 500),
+            id: t81.id || generateShortId(),
+            content: String(t81.content || "").slice(0, 500),
             status,
             ...reason9 ? { reason: reason9 } : {},
             created_at: prev?.created_at || now,
@@ -5156,7 +5188,7 @@ function createTodoTool(db) {
           };
         });
         db.replaceAll(ctx.sessionId, todos);
-        const pendingCount = todos.filter((t80) => isOpenTodo(t80.status)).length;
+        const pendingCount = todos.filter((t81) => isOpenTodo(t81.status)).length;
         return {
           success: true,
           output: formatTodoList(todos, pendingCount),
@@ -5491,7 +5523,7 @@ function intersectNames(base, incoming) {
   if (!base) return incoming ? [...incoming] : void 0;
   if (!incoming) return [...base];
   const baseSet = new Set(base);
-  return incoming.filter((t80) => baseSet.has(t80));
+  return incoming.filter((t81) => baseSet.has(t81));
 }
 function findRole(roles, name) {
   return roles.find((r) => r.name === name);
@@ -5635,7 +5667,7 @@ function roleScopedProvider(base, role, blocked) {
     return allow ? allow.has(name) : true;
   };
   return {
-    list: () => base.list().filter((t80) => permitted(t80.name)),
+    list: () => base.list().filter((t81) => permitted(t81.name)),
     get: (name) => permitted(name) ? base.get(name) : void 0
   };
 }
@@ -5662,7 +5694,7 @@ function createRoleScope(base, sessionRole, blocked) {
 }
 function unknownRoleTools(base, role, blocked) {
   if (!role?.tools) return [];
-  const available2 = new Set(base.list().map((t80) => t80.name));
+  const available2 = new Set(base.list().map((t81) => t81.name));
   const blockedSet = new Set(blocked);
   return role.tools.filter((name) => !available2.has(name) && !blockedSet.has(name));
 }
@@ -5998,7 +6030,7 @@ function createToolScope(base) {
   const permitted = (name) => allow ? allow.has(name) : true;
   return {
     provider: {
-      list: () => base.list().filter((t80) => permitted(t80.name)),
+      list: () => base.list().filter((t81) => permitted(t81.name)),
       get: (name) => permitted(name) ? base.get(name) : void 0
     },
     enter: (next) => {
@@ -6168,7 +6200,7 @@ function scanHooks(dir, issues) {
   return [...parsed.entries].map(([type, list]) => ({
     type,
     count: list.reduce((sum, entry) => sum + entry.hooks.length, 0)
-  })).filter((t80) => t80.count > 0).sort((a, b) => a.type.localeCompare(b.type));
+  })).filter((t81) => t81.count > 0).sort((a, b) => a.type.localeCompare(b.type));
 }
 function scanMcp(dir, plugin, issues) {
   const path = join(dir, PLUGIN_LAYOUT.mcp);
@@ -7931,14 +7963,14 @@ var CheckpointStore = class {
   }
   async enforceTotalSize(protectSession, protectTurnIndex) {
     const turns = await this.collectTurns();
-    let total = turns.reduce((sum, t80) => sum + t80.bytes, 0);
+    let total = turns.reduce((sum, t81) => sum + t81.bytes, 0);
     if (total <= this.maxTotalBytes) return;
     turns.sort((a, b) => a.createdAt - b.createdAt);
-    for (const t80 of turns) {
+    for (const t81 of turns) {
       if (total <= this.maxTotalBytes) return;
-      if (t80.sessionId === protectSession && t80.turnIndex === protectTurnIndex) continue;
-      await this.removeTurn(t80.sessionId, t80.turnIndex);
-      total -= t80.bytes;
+      if (t81.sessionId === protectSession && t81.turnIndex === protectTurnIndex) continue;
+      await this.removeTurn(t81.sessionId, t81.turnIndex);
+      total -= t81.bytes;
     }
   }
   async collectTurns() {
@@ -10739,11 +10771,11 @@ var PromptBuilder = class {
   memoryInitialized = false;
   projectBlock(tools) {
     const permLevel = this.deps.permissionManager?.getLevel() || "default";
-    const hasPlanTool = tools.some((t80) => t80.name === "enter_plan_mode");
-    const hasLspTool = tools.some((t80) => t80.name === "lsp_diagnostics");
-    const hasAskTool = tools.some((t80) => t80.name === "ask_user_question");
-    const hasTodoTool = tools.some((t80) => t80.name === "todo");
-    const hasTerminal = tools.some((t80) => t80.name === "terminal");
+    const hasPlanTool = tools.some((t81) => t81.name === "enter_plan_mode");
+    const hasLspTool = tools.some((t81) => t81.name === "lsp_diagnostics");
+    const hasAskTool = tools.some((t81) => t81.name === "ask_user_question");
+    const hasTodoTool = tools.some((t81) => t81.name === "todo");
+    const hasTerminal = tools.some((t81) => t81.name === "terminal");
     const needsCommandApproval = hasTerminal && permLevel === "default";
     const plan = this.deps.approvedPlan?.()?.trim();
     const codeSdk = renderSdkDeclaration(this.deps.codeModeTools?.() ?? []);
@@ -11433,8 +11465,8 @@ function imageParts(content) {
   return typeof content === "string" ? [] : content.filter((p) => p.type === "image");
 }
 function toolSignatureOf(config, tools) {
-  const direct = tools.map((t80) => t80.name).join("\0");
-  const declared = (config.codeModeTools?.() ?? []).map((t80) => t80.name).join("\0");
+  const direct = tools.map((t81) => t81.name).join("\0");
+  const declared = (config.codeModeTools?.() ?? []).map((t81) => t81.name).join("\0");
   return declared ? `${direct}|${declared}` : direct;
 }
 function modelSignatureOf(info) {
@@ -12982,8 +13014,10 @@ function _loadImpl(overrideHomeDir) {
     return cached.config;
   }
   const config = parseRawConfig(read.raw, issues, track);
-  const pinned = applyProviderOverride(config, issues, track);
+  const override = readProviderOverride(issues);
+  const pinned = applyProviderOverride(config, track, override);
   const secretSource = applySecretsFromEnv(config, homeDir, track);
+  if (pinned) applyProviderOverride(config, track, override);
   applyEnvOverrides(config, issues, track);
   if (secretSource === "config-file" && !pinned) detectProviderFromKey(config);
   if (overrideHomeDir) {
@@ -13054,19 +13088,30 @@ function applySecretsFromEnv(config, homeDir, track) {
   }
   return "config-file";
 }
-function applyProviderOverride(config, issues, track) {
-  const raw = process.env.EPOCH_BASE_URL;
-  if (raw) {
-    config.provider.baseUrl = raw;
-    track.env.add("provider.baseUrl");
+function readProviderOverride(issues) {
+  const override = {};
+  const baseUrl = process.env.EPOCH_BASE_URL;
+  if (baseUrl) {
+    override.baseUrl = baseUrl;
+    override.type = "openai-compatible";
   }
   const type = process.env.EPOCH_PROVIDER;
-  if (!type) return false;
-  if (!isProviderType(type)) {
-    issues.push(envIssue("EPOCH_PROVIDER", type, PROVIDER_TYPES.join(" / ")));
-    return false;
+  if (type) {
+    if (isProviderType(type)) {
+      override.type ??= type;
+    } else {
+      issues.push(envIssue("EPOCH_PROVIDER", type, PROVIDER_TYPES.join(" / ")));
+    }
   }
-  config.provider.type = type;
+  return override;
+}
+function applyProviderOverride(config, track, override) {
+  if (override.baseUrl) {
+    config.provider.baseUrl = override.baseUrl;
+    track.env.add("provider.baseUrl");
+  }
+  if (!override.type) return false;
+  config.provider.type = override.type;
   track.env.add("provider.type");
   return true;
 }
@@ -15079,11 +15124,11 @@ function buildSearchQuery(query) {
   }
   const latinPart = cleaned.replace(CJK_RUN, " ");
   for (const w of latinPart.split(/\s+/)) {
-    const t80 = w.trim();
-    if (t80.length >= 2) terms.add(t80);
+    const t81 = w.trim();
+    if (t81.length >= 2) terms.add(t81);
   }
   if (terms.size === 0) return null;
-  return [...terms].map((t80) => `"${t80.replace(/"/g, "")}"`).join(" OR ");
+  return [...terms].map((t81) => `"${t81.replace(/"/g, "")}"`).join(" OR ");
 }
 // src/memory/db.ts
 var NS2 = "memory";
@@ -17102,7 +17147,7 @@ function checkFtsHealth(db) {
     messages,
     tables,
     missingTriggers,
-    healthy: missingTriggers.length === 0 && tables.every((t80) => t80.error === null && t80.drift === null && t80.rows === messages),
+    healthy: missingTriggers.length === 0 && tables.every((t81) => t81.error === null && t81.drift === null && t81.rows === messages),
     indexBytes: indexBytesOf(db),
     space: spaceOf(db)
   };
@@ -18196,6 +18241,72 @@ function isLastOpenSession(value) {
   const v = value;
   return typeof v["root"] === "string" && v["root"].length > 0 && typeof v["sessionId"] === "string" && v["sessionId"].length > 0 && typeof v["at"] === "number";
 }
+var FILE_VERSION4 = 1;
+function describe8(err) {
+  return err instanceof Error ? err.message : String(err);
+}
+var AppearanceStore = class {
+  constructor(filePath = appearancePath()) {
+    this.filePath = filePath;
+    this.load();
+  }
+  filePath;
+  prefs = {};
+  loadErrors = [];
+  writeErrors = [];
+  get() {
+    return { ...this.prefs };
+  }
+  set(patch) {
+    const next = { ...this.prefs };
+    for (const key of ["theme", "lang"]) {
+      const value = patch[key];
+      if (typeof value === "string" && value.length > 0) next[key] = value;
+    }
+    if (next.theme === this.prefs.theme && next.lang === this.prefs.lang) return;
+    this.prefs = next;
+    this.save();
+  }
+  load() {
+    this.prefs = {};
+    if (!existsSync(this.filePath)) return;
+    let parsed;
+    try {
+      parsed = JSON.parse(readFileSync(this.filePath, "utf-8"));
+    } catch (err) {
+      this.loadErrors.push(
+        (lang) => t("appearance.unreadable", { path: this.filePath, reason: describe8(err) }, lang)
+      );
+      return;
+    }
+    this.adopt(parsed);
+  }
+  adopt(parsed) {
+    if (typeof parsed !== "object" || parsed === null || Array.isArray(parsed)) return;
+    const file = parsed;
+    if (file.version !== FILE_VERSION4) return;
+    if (typeof file.theme === "string" && file.theme.length > 0) this.prefs.theme = file.theme;
+    if (typeof file.lang === "string" && file.lang.length > 0) this.prefs.lang = file.lang;
+  }
+  save() {
+    const body2 = JSON.stringify(
+      { version: FILE_VERSION4, ...this.prefs },
+      null,
+      2
+    );
+    const tmp = `${this.filePath}.${process.pid}.tmp`;
+    try {
+      mkdirSync(dirname(this.filePath), { recursive: true });
+      writeFileSync(tmp, body2, { encoding: "utf-8", mode: 384 });
+      renameSync(tmp, this.filePath);
+    } catch (err) {
+      rmSync(tmp, { force: true });
+      this.writeErrors.push(
+        (lang) => t("appearance.write_failed", { path: this.filePath, reason: describe8(err) }, lang)
+      );
+    }
+  }
+};
 function ruleAskActive(level) {
   return level !== "bypass";
 }
@@ -18446,11 +18557,11 @@ var ApprovalCache = class {
     return !rel.startsWith("..") && !isAbsolute(rel);
   }
   normalizeTarget(target) {
-    const t80 = target.trim();
-    if (!t80) return "";
-    const unix = t80.replace(/\\/g, "/");
+    const t81 = target.trim();
+    if (!t81) return "";
+    const unix = t81.replace(/\\/g, "/");
     if (unix.startsWith("/") || /^[A-Za-z]:\//.test(unix)) return resolve(unix);
-    return t80;
+    return t81;
   }
   load() {
     try {
@@ -18553,9 +18664,9 @@ function createSharedPermissionState(cache) {
   };
 }
 function cacheKeyFor(raw) {
-  const t80 = raw.trim();
-  if (!t80) return null;
-  return t80.slice(0, 500);
+  const t81 = raw.trim();
+  if (!t81) return null;
+  return t81.slice(0, 500);
 }
 // src/permission/manager.ts
 var log3 = createLogger("permission");
@@ -20985,7 +21096,7 @@ var HookManager = class {
             return { blocked: true, reason: result.rejectReason || t("hook_load.rejected") };
           }
         } catch (err) {
-          this.log("warn", `[HookManager] ${type} \u7684 command hook \u6267\u884C\u5F02\u5E38: ${describe9(err)}`, {
+          this.log("warn", `[HookManager] ${type} \u7684 command hook \u6267\u884C\u5F02\u5E38: ${describe10(err)}`, {
             hookType: type,
             command: config.command
           });
@@ -21003,7 +21114,7 @@ var HookManager = class {
           (_, reject2) => setTimeout(() => reject2(new Error("Hook timeout")), HOOK_TIMEOUT_MS)
         )
       ]).catch((err) => {
-        this.log("warn", `[HookManager] ${type} (${reg.plugin}) \u5931\u8D25: ${describe9(err)}`, {
+        this.log("warn", `[HookManager] ${type} (${reg.plugin}) \u5931\u8D25: ${describe10(err)}`, {
           hookType: type,
           plugin: reg.plugin
         });
@@ -21015,7 +21126,7 @@ var HookManager = class {
         if (!matchesHook(entry.matcher, event)) continue;
         for (const config of entry.configs) {
           runCommandHook(config, event, ctx.workDir).then((result) => reportIfNeverRan(this.log, type, config, result)).catch((err) => {
-            this.log("warn", `[HookManager] ${type} \u7684 command hook \u5F02\u6B65\u5F02\u5E38: ${describe9(err)}`, {
+            this.log("warn", `[HookManager] ${type} \u7684 command hook \u5F02\u6B65\u5F02\u5E38: ${describe10(err)}`, {
               hookType: type,
               command: config.command
             });
@@ -21036,7 +21147,7 @@ var HookManager = class {
         ]);
         if (result !== null && result !== void 0) return result;
       } catch (err) {
-        this.log("warn", `[HookManager] ${type} (${reg.plugin}) \u5931\u8D25: ${describe9(err)}`, {
+        this.log("warn", `[HookManager] ${type} (${reg.plugin}) \u5931\u8D25: ${describe10(err)}`, {
           hookType: type,
           plugin: reg.plugin
         });
@@ -21057,7 +21168,7 @@ var HookManager = class {
         ]);
         if (result) results.push(result);
       } catch (err) {
-        this.log("warn", `[HookManager] ${type} (${reg.plugin}) \u5931\u8D25: ${describe9(err)}`, {
+        this.log("warn", `[HookManager] ${type} (${reg.plugin}) \u5931\u8D25: ${describe10(err)}`, {
           hookType: type,
           plugin: reg.plugin
         });
@@ -21074,7 +21185,7 @@ var HookManager = class {
             const verdict = verdictOf2(result);
             if (verdict) results.push(verdict);
           } catch (err) {
-            this.log("warn", `[HookManager] ${type} \u7684 command hook \u6267\u884C\u5F02\u5E38: ${describe9(err)}`, {
+            this.log("warn", `[HookManager] ${type} \u7684 command hook \u6267\u884C\u5F02\u5E38: ${describe10(err)}`, {
               hookType: type,
               command: config.command
             });
@@ -21090,7 +21201,7 @@ var HookManager = class {
     return [...list].sort((a, b) => a.priority - b.priority);
   }
 };
-function describe9(err) {
+function describe10(err) {
   return err instanceof Error ? err.message : String(err);
 }
 function verdictOf2(result) {
@@ -22413,7 +22524,7 @@ async function withStaged(source, opts, fn) {
       shape = existsSync(join(unpacked, SKILL_FILE)) ? "skill-dir" : "tree";
     }
     const staged = stageImport(root, staging, shape, opts.lang);
-    const preview3 = describe10(source, form, staged.skills, staged.issues, opts.existing, opts.lang);
+    const preview3 = describe11(source, form, staged.skills, staged.issues, opts.existing, opts.lang);
     if (preview3.skills.length === 0) {
       const detail = t("skill.import_empty", { path: source }, opts.lang);
       return { ok: false, reason: "empty", detail, issues: preview3.issues };
@@ -22424,7 +22535,7 @@ async function withStaged(source, opts, fn) {
     rmSync(unpacked, { recursive: true, force: true });
   }
 }
-function describe10(source, form, staged, issues, existing, lang) {
+function describe11(source, form, staged, issues, existing, lang) {
   const byName = new Map(existing.map((s) => [s.name, s.scope]));
   const entries2 = [];
   const taken = /* @__PURE__ */ new Set();
@@ -23273,10 +23384,10 @@ ${extra}` : withGoal;
     return messages.reduce((sum, m) => sum + estimateTokens(m.content), 0);
   }
 };
-var FILE_VERSION4 = 1;
+var FILE_VERSION5 = 1;
 var LEVELS = ["trusted", "untrusted"];
 var SCOPES = ["directory", "directory-tree"];
-function describe11(err) {
+function describe12(err) {
   return err instanceof Error ? err.message : String(err);
 }
 function covers(base, target, scope) {
@@ -23350,7 +23461,7 @@ var TrustManager = class {
       raw = readFileSync(this.filePath, "utf-8");
     } catch (err) {
       this.loadErrors.push(
-        t("trust_gate.record_read_failed", { path: this.filePath, reason: describe11(err) })
+        t("trust_gate.record_read_failed", { path: this.filePath, reason: describe12(err) })
       );
       return;
     }
@@ -23359,7 +23470,7 @@ var TrustManager = class {
       parsed = JSON.parse(raw);
     } catch (err) {
       this.loadErrors.push(
-        t("trust_gate.record_bad_json", { path: this.filePath, reason: describe11(err) })
+        t("trust_gate.record_bad_json", { path: this.filePath, reason: describe12(err) })
       );
       return;
     }
@@ -23371,12 +23482,12 @@ var TrustManager = class {
       return;
     }
     const file = parsed;
-    if (file.version !== FILE_VERSION4) {
+    if (file.version !== FILE_VERSION5) {
       this.loadErrors.push(
         t("trust_gate.record_bad_version", {
           path: this.filePath,
           found: String(file.version),
-          expected: FILE_VERSION4
+          expected: FILE_VERSION5
         })
       );
       return;
@@ -23397,7 +23508,7 @@ var TrustManager = class {
   save() {
     mkdirSync(dirname(this.filePath), { recursive: true });
     const body2 = JSON.stringify(
-      { version: FILE_VERSION4, records: this.records },
+      { version: FILE_VERSION5, records: this.records },
       null,
       2
     );
@@ -23408,7 +23519,7 @@ var TrustManager = class {
     } catch (err) {
       rmSync(tmp, { force: true });
       throw new Error(
-        t("trust_gate.record_write_failed", { path: this.filePath, reason: describe11(err) })
+        t("trust_gate.record_write_failed", { path: this.filePath, reason: describe12(err) })
       );
     }
   }
@@ -23797,4 +23908,4 @@ function trunc(stdout, stderr) {
  *    `--tree` 的命令帮助里，让用户自己知道 `--tree` 意味着什么。
  */
 
-export { AGENT_ROLE_DIAG_MODULE, ARTIFACT_MAX_TOTAL_BYTES, ARTIFACT_RETENTION_DEFAULTS, ATTACHMENT_MAX_TOTAL_BYTES, ATTACHMENT_RETENTION_DEFAULTS, AgentLoop, ApprovalCache, BLOCKED_TOOLS, BudgetGuard, BudgetStore, CHECKPOINT_MAX_TOTAL_BYTES, CLAUDE_EVENT_NAMES, CLAUDE_TOOL_NAMES, CODE_MODE_LIMITS, CODE_MODE_SDK_TAG, CONFIG_KEYS, CURRENT_CONFIG_VERSION, CheckpointManager, CheckpointStore, CodeSandbox, ComplianceEngine, ContextCompressor, DEFAULT_COMPLIANCE_ACTIONS, DEFAULT_COMPLIANCE_SETTINGS, DEFAULT_COMPRESSION_THRESHOLD, DEFAULT_GOAL_MAX_ROUNDS, DEFAULT_MAX_HOLD_CHARS, DelegateManager, EMPTY_RULES, EPOCH_DISK_LEDGER, EpochConfigSchema, FTS_TABLES, FTS_TRIGGERS, GOAL_BLOCK_CODES, GoalService, GoalStore, HEADLESS_AUDIT_CODES, HookManager, INSTRUCTION_BUDGET_CHARS, INSTRUCTION_FILES, ImageLoadError, ImportTrustStore, LAUNCHD_LABEL_PREFIX, LOCK_HEARTBEAT_MS, LOCK_STALE_MS, LastOpenSessions, MARKETPLACE_DISPLAY_FIELDS, MARKETPLACE_FILE, MAX_AUDIT_ENTRIES, MAX_COMMAND_DEPTH, MAX_GOAL_MAX_ROUNDS, MAX_IMPORT_DEPTH, MAX_LAST_OPEN_SESSIONS, MAX_OBJECTIVE_CHARS, MAX_REASON_CHARS, MAX_RECENT_WORKSPACES, MODEL_GIVE_UP_THRESHOLD, MULTIMODAL_DEFAULTS, ManagedPolicyError, ManagedSettingsSchema, MemoryManager, ModelFailureTracker, NOMINAL_TOTAL_BYTES, NO_REVEALED_TOOLS, PACK_EXCLUDES, PACK_MAX_BYTES, PACK_MAX_FILES, PERMISSION_AUDIT_CODES, PLUGIN_LAYOUT, PLUGIN_MANIFEST_FILE, PLUGIN_MANIFEST_KEYS, PLUGIN_NAME_PATTERN, PLUGIN_ROOT_ENV, PLUGIN_ROOT_TOKEN, PLUGIN_VISIBILITY, POLICY_DECISIONS, PROBE_VERSION, PROJECT_AGENTS_SUBDIR, PROVIDER_NO_CREDENTIAL, PermissionManager, PlanModeState, PluginAuthorSchema, PluginStore, PolicyRuleSchema, ProviderError, ProviderRouter, RECORDING_KEEP_RUNS, RECORDING_MAX_BYTES, ROLE_FRONTMATTER_SCHEMA, RUN_CODE_TOOL, RecentWorkspaces, SANDBOX_COVERS, SANDBOX_EXCLUDES, SCALAR_KEYS, SCHEDULE_DEFAULTS, SCHEDULE_DEFAULT_ALLOWLIST, SCHEDULE_FORM_BUDGET_USD, SCHEDULE_ISSUE_CODES, SCHTASKS_FOLDER, SESSION_MESSAGES_READ_TOOL, SESSION_MESSAGES_SEARCH_TOOL, SESSION_QUERY_TOOLS, SESSION_SEARCH_TOOL, SESSION_TRACE_TOOL, SETTINGS_LAYER_ORDER, SETTING_WRITE_KEYS, SETTING_WRITE_LAYERS, SKILL_CREATE_TOOL, SKILL_EDIT_TOOL, SKILL_PATCH_TOOL, SKILL_VIEW_TOOL, SKILL_WRITE_FILE_TOOL, SLASH_COMMANDS_DIAG_MODULE, ScheduleRecorder, ScheduleRegistrar, ScheduleStore, SessionManager, SessionQueries, SessionReferences, SettingsFileError, SettingsFileSchema, SkillLearner, SkillSystem, TOOL_SEARCH_TOOL, TaskNoticeTracker, ToolRegistry, TrackerDB, TrustManager, Workspace, acquireScheduleLock, addMarketplace, addUsage, admitArtifact, admitArtifacts, affectedPaths, artifactLaunchArgv, artifactOpenRefusal, assertLevelAllowed, blockedRoleTools, buildContextBreakdown, buildFireArgv, buildFtsMatchQuery, buildSchemaExports, buildSystemPrompt, buildTrigramMatchQuery, builtinRoles, checkEpochVersion, checkFtsHealth, checkShadowing, classifyPersistFailure, classifyProviderError, clearModelCache, coalesceRecording, codeModeWorkerPath, commandNameFromRelPath, compileRuleLists, compressionOptions, computeCost, computeCostMicros, computeExecHash, countRules, createAllowAllGate, createAllowAllImportGate, createAskQuestionTool, createCodeExecTool, createDelegateTool, createDenyAllGate, createDenyAllImportGate, createGoalTool, createImportGate, createMemoryTool, createPlanModeTools, createRoleFile, createRoleScope, createRunCodeTool, createScheduleDraftTool, createSessionMessagesReadTool, createSessionMessagesSearchTool, createSessionSearchTool, createSessionSearchTools, createSessionTraceTool, createSkillViewTool, createSkillWriteTools, createTodoTool, createToolRevealState, createToolScope, createToolSearchTool, createTrustGate, currentEpochVersion, decideImport, decideTrust, defaultConfig, defaultModelOf, describeArtifactRefusal, describeBackgroundTask, describeHeadlessPolicy, describeIsolation, describeJsonError, diagnoseSchedules, discoverMarkdown, discoverModels, discoverProject, displayAllows, displayCurrency, draftCommandLine, draftWidening, escapeRuleContent, estimateImageTokens, estimateRunTokens, estimateTokens, evaluateSelection, expandCommand, expandImports, explainSetting, extractArchive, findInstructionFiles, findProjectInstructions, findRole, formatBytes, formatSkillIndex, formatUsd, gateForTool, getCapability, getConfigIssues, getConfigOrigins, getImportGate, getTrustGate, hasDedicatedExecContent, hasExecTierContent, hasPromptCaching, hasProviderCredentials, hasReadTierContent, imageFromBase64, imageFromPath, imagePartTokens, importParts, importSkills, installPlugin, instructionDirs, instructionNotices, intervalSlots, inventoryProjectExtensions, inventoryTotal, isBlockCode, isCodeModeDeferred, isEmptyRules, isGoalPhase, isNonInteractive, isReadOnlySubCall, isSettingWriteLayer, isTransientPersistFailure, isValidPluginName, isWithinWindow, isWritableSettingKey, labelSlug, layerRank, listRunningSchedules, listSessionCandidates, listWorkspaceFiles, loadCommandDefinitions, loadCommandFile, loadCommands, loadConfig, loadHookSources, loadKeybindings, loadLexiconDir, loadLexiconFiles, loadPlugins, loadPolicyFiles, loadPolicyRules, loadRoleDefinitions, loadRoleDir, loadedImports, localDateString, managedSwitchNotes, mapClaudeToolName, mapEpochToolName, mapOperationType, matchPreauthorization, matchRuleLists, matchesHook, mentionsPluginRoot, mergeHeadlessPolicy, mergeRoles, mergeSchedulePatch, microsToUsd, modelListCandidates, needsAllowlist, nextFallbackModel, nextRunAt, noConfigOrigins, noManagedPolicy, noPlugins, openArtifact, originOf, packFileName, packPlugin, parseClaudeSettingsHooks, parseClock, parseDate, parseFrontmatter, parseHooksConfig, parseHooksConfigVerbose, parseImportLine, parseModelList, parseRoleDefinition, parseScheduleDraft, parseSkillFrontmatter, parseTrigger, pendingImageTokens, persistFailureCode, persistParts, persistToolResults, persistedUsage, planPack, previewSkillImport, pricingFor, projectEntryForDisplay, pruneArtifacts, pruneAttachments, pruneRecordings, pruneSchedules, readImageSize, readMarketplaces, readPluginManifest, readPluginRecords, readProviderKeyEnv, readRecording, readSessionSurface, reclaimFtsSpace, redactLine, refreshOpenRouterMetadata, removeMarketplace, removeRecordings, removeRoleFile, removeSessionArtifacts, removeSessionAttachments, renderImportTree, renderProjectContext, renderSdkDeclaration, renderSelfIndex, repairSchedules, resolveArtifactRetention, resolveCodeModeWorker, resolveComplianceDirs, resolveEntrySource, resolveInWorkspace, resolveMarketplaceRef, resolveMentions, resolveMultimodalPolicy, resolvePolicyDirs, resolvePricingAt, resolveProjectRoot, resolveScheduleBackend, resolveSessionReference, resolveSessionVisibility, resolveSettings, resolveSkillDirs, resolveSource, resolveTar, resolveWorkspace, restoreParts, revealScopedProvider, roleScopedProvider, roleSourceLabel, ruleCovers, ruleFromString, ruleToString, runCode, runCommand2 as runCommand, sanitizeArgNames, sanitizeCommand, sanitizeFtsQuery, sanitizePath, sanitizeToolOutput, scanInstructions, scanPluginDir, scanSkillDirs, searchMarketplaces, setDisplayCurrency, setImportGate, setPluginEnabled, setTrustGate, settingValueChoices, settingValueKind, settingWriteApply, settingWriteLayers, settingWriteTargets, skillIndexDescription, skillIndexResidency, skillIndexStats, sniffMediaType, splitFrontmatter, staticToolProvider, stripArtifactData, substitutePluginRoot, suggestRuleFromApproval, systemOpenArgv, systemPromptSegments, toPosix, toolDefinitionTokens, toolMatches, toolTableTokens, totalTokens, traceSession, triggerPeriodMs, unescapeRuleContent, uninstallPlugin, unknownRoleSkills, unknownRoleTools, unloadedInstructionFiles, updateMarketplace, updatePlugin, usdToMicros, validateSchedule, validateTrigger, validateWindow, withGoalCompression, withGoalPrompt, workspaceDisplayPath, writeSettingValue };
+export { AGENT_ROLE_DIAG_MODULE, ARTIFACT_MAX_TOTAL_BYTES, ARTIFACT_RETENTION_DEFAULTS, ATTACHMENT_MAX_TOTAL_BYTES, ATTACHMENT_RETENTION_DEFAULTS, AgentLoop, AppearanceStore, ApprovalCache, BLOCKED_TOOLS, BudgetGuard, BudgetStore, CHECKPOINT_MAX_TOTAL_BYTES, CLAUDE_EVENT_NAMES, CLAUDE_TOOL_NAMES, CODE_MODE_LIMITS, CODE_MODE_SDK_TAG, CONFIG_KEYS, CURRENT_CONFIG_VERSION, CheckpointManager, CheckpointStore, CodeSandbox, ComplianceEngine, ContextCompressor, DEFAULT_COMPLIANCE_ACTIONS, DEFAULT_COMPLIANCE_SETTINGS, DEFAULT_COMPRESSION_THRESHOLD, DEFAULT_GOAL_MAX_ROUNDS, DEFAULT_MAX_HOLD_CHARS, DelegateManager, EMPTY_RULES, EPOCH_DISK_LEDGER, EpochConfigSchema, FTS_TABLES, FTS_TRIGGERS, GOAL_BLOCK_CODES, GoalService, GoalStore, HEADLESS_AUDIT_CODES, HookManager, INSTRUCTION_BUDGET_CHARS, INSTRUCTION_FILES, ImageLoadError, ImportTrustStore, LAUNCHD_LABEL_PREFIX, LOCK_HEARTBEAT_MS, LOCK_STALE_MS, LastOpenSessions, MARKETPLACE_DISPLAY_FIELDS, MARKETPLACE_FILE, MAX_AUDIT_ENTRIES, MAX_COMMAND_DEPTH, MAX_GOAL_MAX_ROUNDS, MAX_IMPORT_DEPTH, MAX_LAST_OPEN_SESSIONS, MAX_OBJECTIVE_CHARS, MAX_REASON_CHARS, MAX_RECENT_WORKSPACES, MODEL_GIVE_UP_THRESHOLD, MULTIMODAL_DEFAULTS, ManagedPolicyError, ManagedSettingsSchema, MemoryManager, ModelFailureTracker, NOMINAL_TOTAL_BYTES, NO_REVEALED_TOOLS, PACK_EXCLUDES, PACK_MAX_BYTES, PACK_MAX_FILES, PERMISSION_AUDIT_CODES, PLUGIN_LAYOUT, PLUGIN_MANIFEST_FILE, PLUGIN_MANIFEST_KEYS, PLUGIN_NAME_PATTERN, PLUGIN_ROOT_ENV, PLUGIN_ROOT_TOKEN, PLUGIN_VISIBILITY, POLICY_DECISIONS, PROBE_VERSION, PROJECT_AGENTS_SUBDIR, PROVIDER_NO_CREDENTIAL, PermissionManager, PlanModeState, PluginAuthorSchema, PluginStore, PolicyRuleSchema, ProviderError, ProviderRouter, RECORDING_KEEP_RUNS, RECORDING_MAX_BYTES, ROLE_FRONTMATTER_SCHEMA, RUN_CODE_TOOL, RecentWorkspaces, SANDBOX_COVERS, SANDBOX_EXCLUDES, SCALAR_KEYS, SCHEDULE_DEFAULTS, SCHEDULE_DEFAULT_ALLOWLIST, SCHEDULE_FORM_BUDGET_USD, SCHEDULE_ISSUE_CODES, SCHTASKS_FOLDER, SESSION_MESSAGES_READ_TOOL, SESSION_MESSAGES_SEARCH_TOOL, SESSION_QUERY_TOOLS, SESSION_SEARCH_TOOL, SESSION_TRACE_TOOL, SETTINGS_LAYER_ORDER, SETTING_WRITE_KEYS, SETTING_WRITE_LAYERS, SKILL_CREATE_TOOL, SKILL_EDIT_TOOL, SKILL_PATCH_TOOL, SKILL_VIEW_TOOL, SKILL_WRITE_FILE_TOOL, SLASH_COMMANDS_DIAG_MODULE, ScheduleRecorder, ScheduleRegistrar, ScheduleStore, SessionManager, SessionQueries, SessionReferences, SettingsFileError, SettingsFileSchema, SkillLearner, SkillSystem, TOOL_SEARCH_TOOL, TaskNoticeTracker, ToolRegistry, TrackerDB, TrustManager, Workspace, acquireScheduleLock, addMarketplace, addUsage, admitArtifact, admitArtifacts, affectedPaths, artifactLaunchArgv, artifactOpenRefusal, assertLevelAllowed, blockedRoleTools, buildContextBreakdown, buildFireArgv, buildFtsMatchQuery, buildSchemaExports, buildSystemPrompt, buildTrigramMatchQuery, builtinRoles, checkEpochVersion, checkFtsHealth, checkShadowing, classifyPersistFailure, classifyProviderError, clearModelCache, coalesceRecording, codeModeWorkerPath, commandNameFromRelPath, compileRuleLists, compressionOptions, computeCost, computeCostMicros, computeExecHash, countRules, createAllowAllGate, createAllowAllImportGate, createAskQuestionTool, createCodeExecTool, createDelegateTool, createDenyAllGate, createDenyAllImportGate, createGoalTool, createImportGate, createMemoryTool, createPlanModeTools, createRoleFile, createRoleScope, createRunCodeTool, createScheduleDraftTool, createSessionMessagesReadTool, createSessionMessagesSearchTool, createSessionSearchTool, createSessionSearchTools, createSessionTraceTool, createSkillViewTool, createSkillWriteTools, createTodoTool, createToolRevealState, createToolScope, createToolSearchTool, createTrustGate, currentEpochVersion, decideImport, decideTrust, defaultConfig, defaultModelOf, describeArtifactRefusal, describeBackgroundTask, describeHeadlessPolicy, describeIsolation, describeJsonError, diagnoseSchedules, discoverMarkdown, discoverModels, discoverProject, displayAllows, displayCurrency, draftCommandLine, draftWidening, escapeRuleContent, estimateImageTokens, estimateRunTokens, estimateTokens, evaluateSelection, expandCommand, expandImports, explainSetting, extractArchive, findInstructionFiles, findProjectInstructions, findRole, formatBytes, formatSkillIndex, formatUsd, gateForTool, getCapability, getConfigIssues, getConfigOrigins, getImportGate, getTrustGate, hasDedicatedExecContent, hasExecTierContent, hasPromptCaching, hasProviderCredentials, hasReadTierContent, imageFromBase64, imageFromPath, imagePartTokens, importParts, importSkills, installPlugin, instructionDirs, instructionNotices, intervalSlots, inventoryProjectExtensions, inventoryTotal, isBlockCode, isCodeModeDeferred, isEmptyRules, isGoalPhase, isNonInteractive, isReadOnlySubCall, isSettingWriteLayer, isTransientPersistFailure, isValidPluginName, isWithinWindow, isWritableSettingKey, labelSlug, layerRank, listRunningSchedules, listSessionCandidates, listWorkspaceFiles, loadCommandDefinitions, loadCommandFile, loadCommands, loadConfig, loadHookSources, loadKeybindings, loadLexiconDir, loadLexiconFiles, loadPlugins, loadPolicyFiles, loadPolicyRules, loadRoleDefinitions, loadRoleDir, loadedImports, localDateString, managedSwitchNotes, mapClaudeToolName, mapEpochToolName, mapOperationType, matchPreauthorization, matchRuleLists, matchesHook, mentionsPluginRoot, mergeHeadlessPolicy, mergeRoles, mergeSchedulePatch, microsToUsd, modelListCandidates, needsAllowlist, nextFallbackModel, nextRunAt, noConfigOrigins, noManagedPolicy, noPlugins, openArtifact, originOf, packFileName, packPlugin, parseClaudeSettingsHooks, parseClock, parseDate, parseFrontmatter, parseHooksConfig, parseHooksConfigVerbose, parseImportLine, parseModelList, parseRoleDefinition, parseScheduleDraft, parseSkillFrontmatter, parseTrigger, pendingImageTokens, persistFailureCode, persistParts, persistToolResults, persistedUsage, planPack, previewSkillImport, pricingFor, projectEntryForDisplay, pruneArtifacts, pruneAttachments, pruneRecordings, pruneSchedules, readImageSize, readMarketplaces, readPluginManifest, readPluginRecords, readProviderKeyEnv, readRecording, readSessionSurface, reclaimFtsSpace, redactLine, refreshOpenRouterMetadata, removeMarketplace, removeRecordings, removeRoleFile, removeSessionArtifacts, removeSessionAttachments, renderImportTree, renderProjectContext, renderSdkDeclaration, renderSelfIndex, repairSchedules, resolveArtifactRetention, resolveCodeModeWorker, resolveComplianceDirs, resolveEntrySource, resolveInWorkspace, resolveMarketplaceRef, resolveMentions, resolveMultimodalPolicy, resolvePolicyDirs, resolvePricingAt, resolveProjectRoot, resolveScheduleBackend, resolveSessionReference, resolveSessionVisibility, resolveSettings, resolveSkillDirs, resolveSource, resolveTar, resolveWorkspace, restoreParts, revealScopedProvider, roleScopedProvider, roleSourceLabel, ruleCovers, ruleFromString, ruleToString, runCode, runCommand2 as runCommand, sanitizeArgNames, sanitizeCommand, sanitizeFtsQuery, sanitizePath, sanitizeToolOutput, scanInstructions, scanPluginDir, scanSkillDirs, searchMarketplaces, setDisplayCurrency, setImportGate, setPluginEnabled, setTrustGate, settingValueChoices, settingValueKind, settingWriteApply, settingWriteLayers, settingWriteTargets, skillIndexDescription, skillIndexResidency, skillIndexStats, sniffMediaType, splitFrontmatter, staticToolProvider, stripArtifactData, substitutePluginRoot, suggestRuleFromApproval, systemOpenArgv, systemPromptSegments, toPosix, toolDefinitionTokens, toolMatches, toolTableTokens, totalTokens, traceSession, triggerPeriodMs, unescapeRuleContent, uninstallPlugin, unknownRoleSkills, unknownRoleTools, unloadedInstructionFiles, updateMarketplace, updatePlugin, usdToMicros, validateSchedule, validateTrigger, validateWindow, withGoalCompression, withGoalPrompt, workspaceDisplayPath, writeSettingValue };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@epoch-agent/core",
-  "version": "0.20.0",
+  "version": "0.21.0",
   "private": false,
   "description": "epoch-agent 核心引擎：ReAct 循环、Provider 路由、工具调度、记忆管理",
   "repository": {
@@ -27,8 +27,8 @@
     "gpt-tokenizer": "^3.4.0",
     "js-yaml": "^5.2.3",
     "zod": "^4.4.3",
-    "@epoch-agent/infra": "0.20.0",
-    "@epoch-agent/protocol": "0.20.0"
+    "@epoch-agent/infra": "0.21.0",
+    "@epoch-agent/protocol": "0.21.0"
   },
   "devDependencies": {
     "@ai-sdk/amazon-bedrock": "^5.0.40",