@epoch-agent/core 0.20.1 → 0.22.0

package/dist/index.js

@@ -2,7 +2,7 @@ import { existsSync, statSync, readdirSync, readFileSync, mkdirSync, writeFileSy
 import { homedir, platform, tmpdir, hostname } from 'os';
 import { join, dirname, resolve, relative, isAbsolute, sep, extname, basename } from 'path';
 import { execFile, execSync, execFileSync, spawn } from 'child_process';
-import { createLogger, dbPath, resolveHomeDir, DEFAULT_MAX_TURNS, PROJECT_DIR_NAME, guardSpawn, t, suggestKey, misspelledKeyIssues, openDatabase, migrate, releaseDatabase, parseLenient, issueDetails, splitWords, unknownKeyIssues, checkpointsDir, pluginsDir, projectHooksPath, projectClaudeSettingsPath, projectClaudeLocalSettingsPath, projectSettingsPath, projectLocalSettingsPath, projectPoliciesDir, trustedImportsPath, canProbeGit, budgetStatePath, artifactsDir, UNLIMITED_TURNS, turnLimitOf, configPath, managedSettingsPath, getSecretValues, listStoredSecretNames, maskApiKey, setSectionField, countCodePoints, headCodePoints, attachmentsDir, isInWorkspace, workspacesPath, samePath, lastSessionsPath, automationLogsDir, projectComplianceDir, projectSkillsDir, trustPath, projectCommandsDir, detectBackend, EXEC_PATH_AS_NODE_ENV, isolate, createStreamDecoder, parseShellCommand, writeArtifact, envPath, checkDangerousCommand, checkObfuscation, keepHeadAndTail, normalizeForMatch, isReadOnlyCommand, CODE_EXEC_ROOTS, tailCodePoints } from '@epoch-agent/infra';
+import { createLogger, dbPath, resolveHomeDir, DEFAULT_MAX_TURNS, PROJECT_DIR_NAME, guardSpawn, t, suggestKey, misspelledKeyIssues, openDatabase, migrate, releaseDatabase, parseLenient, issueDetails, splitWords, unknownKeyIssues, checkpointsDir, pluginsDir, projectHooksPath, projectClaudeSettingsPath, projectClaudeLocalSettingsPath, projectSettingsPath, projectLocalSettingsPath, projectPoliciesDir, trustedImportsPath, canProbeGit, budgetStatePath, artifactsDir, UNLIMITED_TURNS, turnLimitOf, configPath, managedSettingsPath, getSecretValues, listStoredSecretNames, maskApiKey, setSectionField, countCodePoints, headCodePoints, attachmentsDir, isInWorkspace, workspacesPath, samePath, lastSessionsPath, appearancePath, automationLogsDir, projectComplianceDir, projectSkillsDir, trustPath, projectCommandsDir, detectBackend, EXEC_PATH_AS_NODE_ENV, isolate, createStreamDecoder, parseShellCommand, writeArtifact, envPath, checkDangerousCommand, checkObfuscation, keepHeadAndTail, normalizeForMatch, isReadOnlyCommand, CODE_EXEC_ROOTS, tailCodePoints } from '@epoch-agent/infra';
 export { IS_WINDOWS, WINDOWS_HIDE_FLAGS, buildBwrapArgs, buildProfile, checkDangerousCommand, checkObfuscation, createLogger, detectBackend, getDefaultShell, getPythonCommand, isInWorkspace, isReadOnlyCommand, isolate, maskApiKey, probeBubblewrap, probeSeatbelt, complianceDir as resolveComplianceDir, policiesDir as resolvePoliciesDir, setLogLevel } from '@epoch-agent/infra';
 import { PROVIDER_TYPES, OPERATION_TYPES as OPERATION_TYPES$1, COMPLIANCE_CATEGORIES, COMPLIANCE_ACTIONS, SEARCH_PROVIDER_TYPES, CURRENCIES, LANGS, isSettingsPaneId, SETTINGS_PANE_IDS, PERMISSION_LEVELS, SHELL_KINDS, ToolExposure, MAX_OPTIONS, MIN_OPTIONS, MAX_HEADER_CHARS, MAX_QUESTIONS, SCHEDULE_INTERVAL_MINUTES, isPermissionLevel, SCHEDULE_DRAFT_TOOL, isValidAgentRoleName, DEFAULT_AGENT_ROLE, isValidCommandName, RESERVED_COMMAND_NAMES, parseModelRef, isWirePluginArchiveName, systemNote, formatMoney, totalUsageTokens, NOOP_TELEMETRY, METRIC, contentToText, GEN_AI, isPromptOversize, promptTokens, apiKeyEnvVar, PROVIDER_INFOS, isProviderType, API_KEY_ENV_VARS, KEY_ACTIONS, tableOf, perAction, isKeyAction, parseSequence, RESERVED_CHORDS, chordId, sequenceId, ACTION_CONTEXTS, SEQUENCE_CONTEXTS, assertNeverPart, MAX_ATTACH_FILES, MAX_ATTACH_TOTAL_BYTES, MAX_SESSION_REFS, utf8ByteLength, truncateToBudget, attachSessionSurface, isContextNearlyFull, isOperationType, normalizeApproval, imagePartOmittedSummary, MAX_ATTACH_BYTES, SIMULTANEOUS_CONTEXTS, SESSION_REFERENCE_ERROR_CODES, filePartSummary, sessionPartSummary } from '@epoch-agent/protocol';
 export { API_KEY_ENV_VARS, COMPLIANCE_ACTIONS, COMPLIANCE_CATEGORIES, MAX_ATTACH_BYTES, MAX_ATTACH_FILES, MAX_ATTACH_TOTAL_BYTES, MAX_SESSION_ATTACH_BYTES, MAX_SESSION_REFS, OPERATION_TYPES, PERMISSION_LEVELS, PLAN_OUTCOMES, PROVIDER_INFOS, PROVIDER_TYPES, ToolExposure, apiKeyEnvVar, extractAllMentions, extractMentions, extractSessionMentions, getProviderInfo, isOperationType, isPermissionLevel, isPlanOutcome, isProviderType, normalizeApproval } from '@epoch-agent/protocol';
@@ -274,7 +274,7 @@ function createLaunchdBackend(opts = {}) {
         mkdirSync(input.logDir, { recursive: true });
         writeFileSync(path, renderPlist(label, input), "utf-8");
       } catch (err) {
-        return { ok: false, detail: `plist-write-failed: ${describe8(err)}` };
+        return { ok: false, detail: `plist-write-failed: ${describe9(err)}` };
       }
       await run("launchctl", ["bootout", `${guiDomain()}/${label}`]);
       const toggle = await backend.setEnabled(label, input.enabled);
@@ -290,7 +290,7 @@ function createLaunchdBackend(opts = {}) {
       try {
         rmSync(plistPath(label), { force: true });
       } catch (err) {
-        return { ok: false, detail: `plist-remove-failed: ${describe8(err)}` };
+        return { ok: false, detail: `plist-remove-failed: ${describe9(err)}` };
       }
       return { ok: true };
     },
@@ -447,7 +447,7 @@ function detailOf2(what, res) {
   const msg = (res.stderr || res.stdout).trim();
   return `${what} exit ${res.code}${msg ? `: ${msg}` : ""}`;
 }
-function describe8(err) {
+function describe9(err) {
   return err instanceof Error ? err.message : String(err);
 }
 var LAUNCHD_LABEL_PREFIX;
@@ -650,7 +650,7 @@ var ToolRegistry = class {
     this.addTool(tool, source);
   }
   registerTools(tools, source = "builtin") {
-    for (const t80 of tools) this.addTool(t80, source);
+    for (const t81 of tools) this.addTool(t81, source);
   }
   addTool(tool, source) {
     const existing = this.tools.get(tool.name);
@@ -699,14 +699,14 @@ var ToolRegistry = class {
     return isCodeModeDeferred(tool) ? ToolExposure.Deferred : declared;
   }
   exposed() {
-    return this.list().filter((t80) => this.exposureOf(t80) === ToolExposure.Direct);
+    return this.list().filter((t81) => this.exposureOf(t81) === ToolExposure.Direct);
   }
   byExposure(exposure) {
-    return this.list().filter((t80) => this.exposureOf(t80) === exposure);
+    return this.list().filter((t81) => this.exposureOf(t81) === exposure);
   }
   codeModeDeclared() {
     if (!this.codeMode) return [];
-    return this.list().filter((t80) => isCodeModeDeferred(t80));
+    return this.list().filter((t81) => isCodeModeDeferred(t81));
   }
   sourceOf(name) {
     return this.tools.get(name)?.source;
@@ -755,7 +755,7 @@ var ToolRegistry = class {
 function staticToolProvider(tools) {
   return {
     list: () => tools,
-    get: (name) => tools.find((t80) => t80.name === name)
+    get: (name) => tools.find((t81) => t81.name === name)
   };
 }
 var log = createLogger("tokenizer");
@@ -861,6 +861,21 @@ function parseOption(raw) {
   const description = typeof raw["description"] === "string" ? raw["description"].trim() : "";
   return { label, description };
 }
+function parsePage(raw) {
+  if (!isRecord(raw)) return void 0;
+  const rawUrl = typeof raw["url"] === "string" ? raw["url"].trim() : "";
+  if (!rawUrl) return void 0;
+  let url;
+  try {
+    url = new URL(rawUrl);
+  } catch {
+    return void 0;
+  }
+  if (url.protocol !== "http:" && url.protocol !== "https:") return void 0;
+  if (url.hostname !== "127.0.0.1" && url.hostname !== "localhost") return void 0;
+  const label = typeof raw["label"] === "string" ? raw["label"].trim() : "";
+  return label ? { url: rawUrl, label } : { url: rawUrl };
+}
 function parseQuestion(raw, at) {
   if (!isRecord(raw)) return `questions[${at}] \u4E0D\u662F\u5BF9\u8C61`;
   const question = typeof raw["question"] === "string" ? raw["question"].trim() : "";
@@ -878,11 +893,13 @@ function parseQuestion(raw, at) {
   if (options.length < MIN_OPTIONS || options.length > MAX_OPTIONS) {
     return `questions[${at}] \u6709 ${options.length} \u4E2A\u9009\u9879\uFF0C\u8981 ${MIN_OPTIONS}\u2013${MAX_OPTIONS} \u4E2A\u3002**\u4E0D\u8981**\u81EA\u5DF1\u52A0\u300C\u5176\u4ED6\u300D\u9009\u9879 \u2014\u2014 \u81EA\u7531\u8F93\u5165\u7531\u754C\u9762\u81EA\u52A8\u63D0\u4F9B`;
   }
+  const page = parsePage(raw["page"]);
   return {
     question,
     header,
     options,
-    multiSelect: raw["multiSelect"] === true
+    multiSelect: raw["multiSelect"] === true,
+    ...page ? { page } : {}
   };
 }
 function parseQuestions(raw) {
@@ -957,7 +974,19 @@ var PARAMETERS = {
               required: ["label", "description"]
             }
           },
-          multiSelect: { type: "boolean", description: "\u80FD\u4E0D\u80FD\u591A\u9009\u3002\u9ED8\u8BA4 false" }
+          multiSelect: { type: "boolean", description: "\u80FD\u4E0D\u80FD\u591A\u9009\u3002\u9ED8\u8BA4 false" },
+          page: {
+            type: "object",
+            description: "\u8FD9\u4E00\u95EE\u8FD8\u53EF\u4EE5\u5D4C\u4E00\u5F20\u63D2\u4EF6\u9875\u9762\uFF08\u53EA\u5728\u5E26\u754C\u9762\u7684\u5BBF\u4E3B\u91CC\u6709 \u2014\u2014 \u7EC8\u7AEF\u91CC\u4F1A\u88AB\u8BF4\u6210\u4E00\u53E5\u8BDD\uFF0C\u7528\u6237\u81EA\u5DF1\u5F00\uFF09\u3002\u26A0\uFE0F url \u53EA\u6536\u672C\u673A\u56DE\u73AF\uFF08127.0.0.1 / localhost\uFF09\uFF0C\u522B\u7684\u4F1A\u88AB\u4E22\u6389",
+            properties: {
+              url: {
+                type: "string",
+                description: "\u90A3\u4E00\u9875\u7684\u5730\u5740\uFF0C\u5F62\u5982 http://127.0.0.1:52341/confirm?t=\u2026"
+              },
+              label: { type: "string", description: "\u9875\u9762\u4E0A\u90A3\u51E0\u4E2A\u5B57\u3002\u4E0D\u7ED9\u5C31\u7528\u4E00\u53E5\u901A\u7528\u6587\u6848" }
+            },
+            required: ["url"]
+          }
         },
         required: ["question", "header", "options", "multiSelect"]
       }
@@ -972,7 +1001,10 @@ var DESCRIPTION = [
   "**\u6709\u660E\u663E\u9ED8\u8BA4\u7B54\u6848\u65F6\u4E0D\u8981\u95EE**\uFF0C\u76F4\u63A5\u505A\u5E76\u8BF4\u660E \u2014\u2014 \u4ED3\u5E93\u91CC\u5DF2\u7ECF\u6709 vitest.config \u7684\u65F6\u5019",
   "\u300C\u7528\u54EA\u4E2A\u6D4B\u8BD5\u6846\u67B6\u300D\u4E0D\u662F\u4E00\u4E2A\u95EE\u9898\u3002",
   "\u4E0D\u8981\u7528\u5B83\u95EE\u300C\u6211\u7684\u65B9\u6848\u884C\u4E0D\u884C\u300D\uFF08\u90A3\u662F exit_plan_mode\uFF09\uFF0C\u4E5F\u4E0D\u8981\u7528\u5B83\u6C47\u62A5\u8FDB\u5EA6\u3002",
-  "\u9009\u9879\u91CC**\u4E0D\u8981**\u81EA\u5DF1\u653E\u300C\u5176\u4ED6\u300D\uFF1A\u754C\u9762\u4F1A\u81EA\u52A8\u63D0\u4F9B\u81EA\u7531\u8F93\u5165\u3002"
+  "\u9009\u9879\u91CC**\u4E0D\u8981**\u81EA\u5DF1\u653E\u300C\u5176\u4ED6\u300D\uFF1A\u754C\u9762\u4F1A\u81EA\u52A8\u63D0\u4F9B\u81EA\u7531\u8F93\u5165\u3002",
+  "\u26A0\uFE0F \u63D2\u4EF6\u7684\u5DE5\u5177\u7ED9\u4E86\u4F60\u4E00\u4E2A**\u672C\u673A\u5730\u5740**\u3001\u800C\u90A3\u4E2A\u9009\u62E9\u7528\u51E0\u4E2A\u9009\u9879\u8BF4\u4E0D\u6E05\u65F6\uFF08\u51E0\u5341\u5F20\u56FE\u91CC\u6311\u4E00\u5F20\u3001",
+  "\u4E00\u5F20\u8868\u91CC\u5708\u51E0\u884C\uFF09\uFF0C\u628A\u5730\u5740\u653E\u8FDB `questions[].page` \u2014\u2014 \u7528\u6237\u4F1A\u5728\u5F39\u7A97\u91CC\u76F4\u63A5\u770B\u5230\u90A3\u4E00\u9875\u3002",
+  "\u5B83**\u9644\u52A0\u5728\u9009\u9879\u4E4B\u5916**\uFF0C\u9009\u9879\u7167\u65E7\u8981\u7ED9\uFF1A\u7EC8\u7AEF\u91CC\u753B\u4E0D\u51FA\u9875\u9762\uFF0C\u90A3\u65F6\u7528\u6237\u770B\u5230\u7684\u53EA\u6709\u4F60\u5199\u7684\u9009\u9879\u3002"
 ].join("");
 function createAskQuestionTool(deps) {
   return {
@@ -1388,7 +1420,7 @@ var DelegateManager = class {
   }
   normalizeTasks(args) {
     if (args.tasks && args.tasks.length > 0) {
-      return args.role ? args.tasks.map((t80) => ({ ...t80, role: t80.role ?? args.role })) : args.tasks;
+      return args.role ? args.tasks.map((t81) => ({ ...t81, role: t81.role ?? args.role })) : args.tasks;
     }
     if (args.goal) return [{ goal: args.goal, ...args.role ? { role: args.role } : {} }];
     return [];
@@ -1398,7 +1430,7 @@ var DelegateManager = class {
     for (let i = 0; i < tasks.length; i += maxConcurrent) {
       const batch = tasks.slice(i, i + maxConcurrent);
       const batchResults = await Promise.allSettled(
-        batch.map((t80) => this.runSingleTask(t80, parentSessionId, signal))
+        batch.map((t81) => this.runSingleTask(t81, parentSessionId, signal))
       );
       for (const r of batchResults) {
         if (r.status === "fulfilled") {
@@ -1556,21 +1588,21 @@ function createDelegateTool(runner, config, roles) {
     operation: "command",
     describeTarget: (args) => {
       const tasks = Array.isArray(args["tasks"]) ? args["tasks"] : [];
-      const goals = tasks.map((t80) => String(t80["goal"] ?? ""));
+      const goals = tasks.map((t81) => String(t81["goal"] ?? ""));
       const single = typeof args["goal"] === "string" ? args["goal"] : "";
       return [...goals, single].filter(Boolean).join(" | ");
     },
     async execute(args, ctx) {
       const start = Date.now();
       const rawTasks = Array.isArray(args["tasks"]) ? args["tasks"] : void 0;
-      const tasks = rawTasks?.map((t80) => {
-        const o = t80;
+      const tasks = rawTasks?.map((t81) => {
+        const o = t81;
         return {
           goal: String(o["goal"] ?? "").trim(),
           context: String(o["context"] ?? ""),
           ...typeof o["role"] === "string" && o["role"].trim() ? { role: o["role"].trim() } : {}
         };
-      }).filter((t80) => t80.goal.length > 0);
+      }).filter((t81) => t81.goal.length > 0);
       const goal = typeof args["goal"] === "string" ? args["goal"].trim() : "";
       const topRole = typeof args["role"] === "string" ? args["role"].trim() : "";
       if ((!tasks || tasks.length === 0) && !goal) {
@@ -1586,7 +1618,7 @@ function createDelegateTool(runner, config, roles) {
         };
       }
       const known = listRoles();
-      const requested = [...(tasks ?? []).map((t80) => t80.role), topRole].filter(
+      const requested = [...(tasks ?? []).map((t81) => t81.role), topRole].filter(
         (r) => Boolean(r)
       );
       const unknown = [...new Set(requested)].filter((r) => !known.some((k) => k.name === r));
@@ -1760,8 +1792,8 @@ function createGoalTool(deps) {
 }
 var VALID_TARGETS = ["memory", "user"];
 var VALID_ACTIONS = ["add", "replace", "remove", "search", "read", "budget"];
-function isValidTarget(t80) {
-  return typeof t80 === "string" && VALID_TARGETS.includes(t80);
+function isValidTarget(t81) {
+  return typeof t81 === "string" && VALID_TARGETS.includes(t81);
 }
 function isValidAction(a) {
   return VALID_ACTIONS.includes(a);
@@ -4915,7 +4947,7 @@ function available(tools) {
   if (tools.length === 0) {
     return "No deferred tools in this session \u2014 every tool is already in your tool list.";
   }
-  const names = tools.map((t80) => t80.name).sort();
+  const names = tools.map((t81) => t81.name).sort();
   const shown = names.slice(0, MAX_LISTED);
   const rest = names.length - shown.length;
   return `Searchable tools: ${shown.join(", ")}${rest > 0 ? ` (\u2026and ${rest} more)` : ""}.`;
@@ -5035,15 +5067,15 @@ var TrackerDB = class {
     );
     this.db.transaction(() => {
       this.db.prepare("DELETE FROM todos WHERE session_id = ?").run(sessionId);
-      for (const t80 of todos) {
+      for (const t81 of todos) {
         insertStmt.run({
-          id: t80.id,
+          id: t81.id,
           session_id: sessionId,
-          content: t80.content,
-          status: t80.status,
-          reason: t80.reason || null,
-          created_at: t80.created_at,
-          updated_at: t80.updated_at
+          content: t81.content,
+          status: t81.status,
+          reason: t81.reason || null,
+          created_at: t81.created_at,
+          updated_at: t81.updated_at
         });
       }
     })();
@@ -5065,9 +5097,9 @@ function formatTodoList(todos, pendingCount) {
     cancelled: "\u5DF2\u53D6\u6D88"
   };
   lines.push(`[todo] \u72B6\u6001\u6C47\u603B: ${pendingCount} \u4E2A\u5F85\u5B8C\u6210`);
-  for (const t80 of todos) {
-    const label = statusLabel[t80.status] || t80.status;
-    lines.push(`- [${label}]  ${t80.content}${t80.reason ? ` \u2014\u2014 ${t80.reason}` : ""}`);
+  for (const t81 of todos) {
+    const label = statusLabel[t81.status] || t81.status;
+    lines.push(`- [${label}]  ${t81.content}${t81.reason ? ` \u2014\u2014 ${t81.reason}` : ""}`);
   }
   return lines.join("\n");
 }
@@ -5141,14 +5173,14 @@ function createTodoTool(db) {
           };
         }
         const now = (/* @__PURE__ */ new Date()).toISOString();
-        const existing = new Map(db.listBySession(ctx.sessionId).map((t80) => [t80.id, t80]));
-        const todos = rawTodos.map((t80) => {
-          const prev = t80.id ? existing.get(t80.id) : void 0;
-          const status = isValidStatus(t80.status) ? t80.status : "pending";
-          const reason9 = normalizeReason(status, t80.reason);
+        const existing = new Map(db.listBySession(ctx.sessionId).map((t81) => [t81.id, t81]));
+        const todos = rawTodos.map((t81) => {
+          const prev = t81.id ? existing.get(t81.id) : void 0;
+          const status = isValidStatus(t81.status) ? t81.status : "pending";
+          const reason9 = normalizeReason(status, t81.reason);
           return {
-            id: t80.id || generateShortId(),
-            content: String(t80.content || "").slice(0, 500),
+            id: t81.id || generateShortId(),
+            content: String(t81.content || "").slice(0, 500),
             status,
             ...reason9 ? { reason: reason9 } : {},
             created_at: prev?.created_at || now,
@@ -5156,7 +5188,7 @@ function createTodoTool(db) {
           };
         });
         db.replaceAll(ctx.sessionId, todos);
-        const pendingCount = todos.filter((t80) => isOpenTodo(t80.status)).length;
+        const pendingCount = todos.filter((t81) => isOpenTodo(t81.status)).length;
         return {
           success: true,
           output: formatTodoList(todos, pendingCount),
@@ -5491,7 +5523,7 @@ function intersectNames(base, incoming) {
   if (!base) return incoming ? [...incoming] : void 0;
   if (!incoming) return [...base];
   const baseSet = new Set(base);
-  return incoming.filter((t80) => baseSet.has(t80));
+  return incoming.filter((t81) => baseSet.has(t81));
 }
 function findRole(roles, name) {
   return roles.find((r) => r.name === name);
@@ -5635,7 +5667,7 @@ function roleScopedProvider(base, role, blocked) {
     return allow ? allow.has(name) : true;
   };
   return {
-    list: () => base.list().filter((t80) => permitted(t80.name)),
+    list: () => base.list().filter((t81) => permitted(t81.name)),
     get: (name) => permitted(name) ? base.get(name) : void 0
   };
 }
@@ -5662,7 +5694,7 @@ function createRoleScope(base, sessionRole, blocked) {
 }
 function unknownRoleTools(base, role, blocked) {
   if (!role?.tools) return [];
-  const available2 = new Set(base.list().map((t80) => t80.name));
+  const available2 = new Set(base.list().map((t81) => t81.name));
   const blockedSet = new Set(blocked);
   return role.tools.filter((name) => !available2.has(name) && !blockedSet.has(name));
 }
@@ -5998,7 +6030,7 @@ function createToolScope(base) {
   const permitted = (name) => allow ? allow.has(name) : true;
   return {
     provider: {
-      list: () => base.list().filter((t80) => permitted(t80.name)),
+      list: () => base.list().filter((t81) => permitted(t81.name)),
       get: (name) => permitted(name) ? base.get(name) : void 0
     },
     enter: (next) => {
@@ -6168,7 +6200,7 @@ function scanHooks(dir, issues) {
   return [...parsed.entries].map(([type, list]) => ({
     type,
     count: list.reduce((sum, entry) => sum + entry.hooks.length, 0)
-  })).filter((t80) => t80.count > 0).sort((a, b) => a.type.localeCompare(b.type));
+  })).filter((t81) => t81.count > 0).sort((a, b) => a.type.localeCompare(b.type));
 }
 function scanMcp(dir, plugin, issues) {
   const path = join(dir, PLUGIN_LAYOUT.mcp);
@@ -6264,6 +6296,7 @@ var ManifestSchema = z.object({
   epochVersion: z.string().min(1).optional(),
   homepage: z.string().min(1).optional(),
   keywords: z.array(z.string().min(1)).optional(),
+  dependencies: z.array(z.string().min(1)).optional().catch(void 0),
   displayName: z.string().min(1).optional(),
   category: z.string().min(1).optional(),
   icon: z.string().min(1).optional(),
@@ -6306,6 +6339,23 @@ function readPluginManifest(dir) {
       })
     });
   }
+  const rawDependencies = parsed?.dependencies;
+  if (rawDependencies !== void 0 && !Array.isArray(rawDependencies)) {
+    issues.push({
+      path: `${path}.dependencies`,
+      message: t("plugin_manifest.bad_dependencies", { raw: JSON.stringify(rawDependencies) })
+    });
+  }
+  if (Array.isArray(rawDependencies)) {
+    for (const item of rawDependencies) {
+      if (typeof item !== "string" || !isValidPluginName(item)) {
+        issues.push({
+          path: `${path}.dependencies`,
+          message: t("plugin_manifest.bad_dependency_name", { name: String(item) })
+        });
+      }
+    }
+  }
   const checked = parseLenient(ManifestSchema.optional(), parsed, void 0);
   if (!checked.value) {
     issues.push(
@@ -6607,6 +6657,7 @@ function loadPlugins(opts) {
   const state = readPluginRecords(statePath);
   const out = noPlugins();
   out.issues.push(...state.issues);
+  const declared = /* @__PURE__ */ new Map();
   const epochVersion = opts.epochVersion ?? currentEpochVersion();
   for (const record of state.records) {
     const outcome = admit(record, epochVersion);
@@ -6625,6 +6676,21 @@ function loadPlugins(opts) {
       continue;
     }
     collect(record, out);
+    if (outcome.manifest?.dependencies?.length) {
+      declared.set(record.name, outcome.manifest.dependencies);
+    }
+  }
+  const present = new Set(out.loaded.map((plugin) => plugin.name));
+  for (const [name, dependencies] of declared) {
+    if (!present.has(name)) continue;
+    for (const dependency of dependencies) {
+      if (present.has(dependency)) continue;
+      diags?.warn(
+        MODULE,
+        t("plugin_load.dependency_missing", { name, dependency }),
+        "plugin-dependency-missing"
+      );
+    }
   }
   for (const detail of issueDetails(out.issues)) {
     diags?.warn(MODULE, detail, "plugin-invalid");
@@ -6651,7 +6717,7 @@ function admit(record, epochVersion) {
   if (!version.ok) {
     return { reason: version.reason, code: "plugin-version-mismatch" };
   }
-  return {};
+  return { manifest: manifest.manifest };
 }
 function collect(record, out) {
   const { name, path: dir } = record;
@@ -6997,99 +7063,426 @@ function firstLine3(err) {
   const message = err instanceof Error ? err.message : String(err);
   return message.split("\n")[0] ?? message;
 }
-var NPM_SPEC = /^(?:@[a-z0-9][a-z0-9._-]*\/)?[a-z0-9][a-z0-9._-]*(?:@[a-zA-Z0-9.^~*+-]+)?$/;
-var REMOTE_URL = /^https?:\/\/[^\s'"\\^|<>]+$/;
-function resolveSource(raw) {
-  const input = raw.trim();
-  if (!input) return void 0;
-  if (input.startsWith("github:")) {
-    const [slug = "", fragment] = input.slice("github:".length).split("#", 2);
-    if (!/^[\w.-]+\/[\w.-]+$/.test(slug)) return void 0;
-    const sub = subdirOf(fragment);
-    if (!sub.ok) return void 0;
+var MARKETPLACE_FILE = "epoch-marketplace.json";
+var NAME_PATTERN = PLUGIN_NAME_PATTERN;
+var EntryCategoryInput = z.union([z.string().min(1), z.array(z.string().min(1))]).optional().catch(void 0);
+var EntryShape = z.object({
+  name: z.string().regex(NAME_PATTERN),
+  description: z.string().min(1).optional(),
+  source: z.string().min(1),
+  category: EntryCategoryInput,
+  keywords: z.array(z.string().min(1)).optional(),
+  author: PluginAuthorSchema.optional(),
+  downloads: z.number().int().nonnegative().optional(),
+  likes: z.number().int().nonnegative().optional(),
+  displayName: z.string().min(1).optional(),
+  icon: z.string().min(1).optional(),
+  version: z.string().min(1).optional(),
+  changelog: z.string().min(1).optional(),
+  size: z.number().int().positive().optional(),
+  homepage: z.string().min(1).optional(),
+  visibility: z.enum(PLUGIN_VISIBILITY).optional().catch(void 0),
+  status: z.enum(["listed", "reviewing", "rejected", "offline"]).optional().catch(void 0)
+});
+var EntrySchema = EntryShape.transform(({ category, ...rest }) => {
+  const picked = category === void 0 ? [] : typeof category === "string" ? [category] : category;
+  return { ...rest, ...picked.length === 0 ? {} : { category: [...picked] } };
+});
+var MARKETPLACE_DISPLAY_FIELDS = [
+  "status",
+  "downloads",
+  "likes",
+  "author",
+  "category",
+  "visibility",
+  "icon",
+  "homepage",
+  "size"
+];
+var DisplaySchema = z.object({
+  fields: z.array(z.string().min(1)).optional()
+});
+var CategoryNodeSchema = z.lazy(
+  () => z.object({
+    id: z.string().min(1),
+    label: z.string().min(1).optional(),
+    children: z.array(CategoryNodeSchema).optional()
+  })
+);
+var CategoriesSchema = z.array(CategoryNodeSchema).refine(hasUniqueCategoryIds, { message: "category ids must be unique across the whole tree" }).optional().catch(void 0);
+function hasUniqueCategoryIds(nodes) {
+  const seen = /* @__PURE__ */ new Set();
+  const walk3 = (list) => list.every((node) => {
+    if (seen.has(node.id)) return false;
+    seen.add(node.id);
+    return node.children === void 0 || walk3(node.children);
+  });
+  return walk3(nodes);
+}
+var CatalogSchema = z.object({
+  name: z.string().regex(NAME_PATTERN),
+  description: z.string().min(1).optional(),
+  owner: z.object({ name: z.string().min(1), url: z.string().min(1).optional() }).optional(),
+  display: DisplaySchema.optional(),
+  categories: CategoriesSchema,
+  plugins: z.array(EntrySchema)
+});
+var RecordSchema2 = z.object({
+  name: z.string().regex(NAME_PATTERN),
+  source: z.string().min(1),
+  addedAt: z.number(),
+  catalog: CatalogSchema
+});
+var StateSchema2 = z.object({
+  version: z.literal(1).optional(),
+  marketplaces: z.array(RecordSchema2)
+});
+function projectEntryForDisplay(entry, display) {
+  const allowed = display?.fields;
+  if (allowed === void 0) return entry;
+  const out = { ...entry };
+  for (const field of MARKETPLACE_DISPLAY_FIELDS) {
+    if (!displayAllows(display, field)) delete out[field];
+  }
+  return out;
+}
+function displayAllows(display, field) {
+  const allowed = display?.fields;
+  if (allowed === void 0) return true;
+  return allowed.includes(field);
+}
+function readMarketplaces(statePath) {
+  if (!existsSync(statePath)) return { records: [], issues: [] };
+  let raw;
+  try {
+    raw = JSON.parse(readFileSync(statePath, "utf-8"));
+  } catch (err) {
     return {
-      type: "git",
-      raw: input,
-      target: `https://github.com/${slug}.git`,
-      ...sub.subdir ? { subdir: sub.subdir } : {}
+      records: [],
+      issues: [
+        { path: statePath, message: t("plugin_marketplace.bad_json", { reason: first(err) }) }
+      ]
     };
   }
-  if (input.startsWith("git+")) {
-    const [url = "", fragment] = input.slice("git+".length).split("#", 2);
-    if (!REMOTE_URL.test(url)) return void 0;
-    const sub = subdirOf(fragment);
-    if (!sub.ok) return void 0;
-    return { type: "git", raw: input, target: url, ...sub.subdir ? { subdir: sub.subdir } : {} };
-  }
-  if (input.startsWith("npm:")) {
-    const pkg = input.slice("npm:".length);
-    if (!NPM_SPEC.test(pkg)) return void 0;
-    return { type: "npm", raw: input, target: pkg };
-  }
-  if (input.startsWith("host:")) {
-    const opaque = input.slice("host:".length).trim();
-    if (!opaque) return void 0;
-    return { type: "host", raw: input, target: opaque };
-  }
-  if (input.startsWith("https://") || input.startsWith("http://")) {
-    const [url = "", fragment] = input.split("#", 2);
-    if (!REMOTE_URL.test(url)) return void 0;
-    const sha = fragment?.startsWith("sha256=") ? fragment.slice("sha256=".length) : void 0;
-    if (isArchiveUrl(url)) {
-      if (sha !== void 0 && !/^[a-f0-9]{64}$/i.test(sha)) return void 0;
-      return {
-        type: "archive",
-        raw: input,
-        target: url,
-        ...sha ? { sha256: sha.toLowerCase() } : {}
-      };
-    }
-    return { type: "git", raw: input, target: url };
-  }
-  const abs = isAbsolute(input) ? input : resolve(input);
-  if (isArchiveUrl(abs)) {
-    return { type: "archive", raw: input, target: abs, localFile: true };
+  const checked = parseLenient(StateSchema2.optional(), raw, void 0);
+  if (!checked.value) {
+    return {
+      records: [],
+      issues: checked.issues.map((i) => ({
+        path: statePath,
+        message: t("plugin_marketplace.issue", { path: i.path, message: i.message })
+      }))
+    };
   }
-  return { type: "local", raw: input, target: abs };
+  return { records: checked.value.marketplaces, issues: [] };
 }
-function isArchiveUrl(url) {
-  return isWirePluginArchiveName(url);
+async function mutate(statePath, fn) {
+  const release = await acquireStateLock(statePath);
+  try {
+    const next = fn(readMarketplaces(statePath).records);
+    if (!next) return false;
+    writeStateFile(statePath, JSON.stringify({ version: 1, marketplaces: next }, null, 2));
+    return true;
+  } finally {
+    release();
+  }
 }
-function subdirOf(fragment) {
-  if (fragment === void 0 || fragment === "") return { ok: true };
-  if (!fragment.startsWith("subdir=")) return { ok: false };
-  const rel = fragment.slice("subdir=".length).replace(/\/+$/, "");
-  if (!/^[\w.-]+(?:\/[\w.-]+)*$/.test(rel)) return { ok: false };
-  if (rel.split("/").includes("..")) return { ok: false };
-  return { ok: true, subdir: rel };
+async function addMarketplace(source, opts) {
+  const fetched = await fetchCatalog(source);
+  if (!fetched.ok) return fetched;
+  const record = {
+    name: fetched.catalog.name,
+    source: source.trim(),
+    addedAt: Date.now(),
+    catalog: fetched.catalog
+  };
+  const written = await mutate(
+    opts.statePath,
+    (records) => records.some((r) => r.name === record.name) ? void 0 : [...records, record].sort((a, b) => a.name.localeCompare(b.name))
+  );
+  return written ? { ok: true, record } : {
+    ok: false,
+    reason: t("plugin_marketplace.already_added", { name: record.name })
+  };
 }
-function pluginRoot(source, staging) {
-  return source.subdir ? join(staging, source.subdir) : staging;
+async function removeMarketplace(name, opts) {
+  const written = await mutate(
+    opts.statePath,
+    (records) => records.some((r) => r.name === name) ? records.filter((r) => r.name !== name) : void 0
+  );
+  return written ? { ok: true } : { ok: false, reason: t("plugin_marketplace.not_added", { name }) };
 }
-// src/plugin/install.ts
-async function installPlugin(source, opts) {
-  const resolved = resolveSource(source);
-  if (!resolved) {
+async function updateMarketplace(name, opts) {
+  const existing = readMarketplaces(opts.statePath).records.find((r) => r.name === name);
+  if (!existing) return { ok: false, reason: t("plugin_marketplace.not_added", { name }) };
+  const fetched = await fetchCatalog(existing.source);
+  if (!fetched.ok) return fetched;
+  if (fetched.catalog.name !== name) {
     return {
       ok: false,
-      reason: t("plugin_install.bad_source", { source })
+      reason: t("plugin_marketplace.renamed", {
+        source: existing.source,
+        name: fetched.catalog.name
+      })
     };
   }
-  mkdirSync(opts.pluginsDir, { recursive: true });
-  const staging = join(opts.pluginsDir, `.staging-${randomUUID().slice(0, 8)}`);
-  try {
-    return await runInstall(resolved, staging, opts);
-  } finally {
-    rmSync(staging, { recursive: true, force: true });
-  }
+  const record = { ...existing, catalog: fetched.catalog };
+  await mutate(opts.statePath, (records) => records.map((r) => r.name === name ? record : r));
+  return { ok: true, record };
 }
-async function runInstall(resolved, staging, opts) {
-  const fetched = await fetchInto(resolved, staging, opts);
-  if (!fetched.ok) return { ok: false, reason: fetched.reason };
-  const readDir = resolved.type === "local" ? resolved.target : pluginRoot(resolved, staging);
-  const read = readPluginManifest(readDir);
-  const manifest = read.manifest;
-  if (!manifest) {
+function searchMarketplaces(keyword, statePath) {
+  const needle = keyword.trim().toLowerCase();
+  const hits = [];
+  for (const record of readMarketplaces(statePath).records) {
+    for (const entry of record.catalog.plugins) {
+      const haystack = [
+        entry.name,
+        entry.description ?? "",
+        ...entry.category ?? [],
+        entry.author?.name ?? "",
+        ...entry.keywords ?? []
+      ].join(" ").toLowerCase();
+      if (needle && !haystack.includes(needle)) continue;
+      hits.push({
+        marketplace: record.name,
+        entry: projectEntryForDisplay(entry, record.catalog.display),
+        ref: `${record.name}/${entry.name}`
+      });
+    }
+  }
+  return hits;
+}
+function resolveMarketplaceRef(input, statePath) {
+  const parts = input.trim().split("/");
+  if (parts.length !== 2) return void 0;
+  const [market = "", plugin = ""] = parts;
+  if (!NAME_PATTERN.test(market) || !NAME_PATTERN.test(plugin)) return void 0;
+  const record = readMarketplaces(statePath).records.find((r) => r.name === market);
+  if (!record) {
+    return {
+      ok: false,
+      reason: t("plugin_marketplace.market_not_added", { market, input })
+    };
+  }
+  const entry = record.catalog.plugins.find((p) => p.name === plugin);
+  if (!entry) {
+    return {
+      ok: false,
+      reason: t("plugin_marketplace.plugin_not_in_market", { market, plugin })
+    };
+  }
+  const source = resolveEntrySource(entry.source, record.source);
+  if (!source) {
+    return {
+      ok: false,
+      reason: t("plugin_marketplace.entry_unresolvable", {
+        market,
+        plugin,
+        source: entry.source
+      })
+    };
+  }
+  return { ok: true, ref: { marketplace: market, source } };
+}
+function resolveEntrySource(entry, marketSource) {
+  const spec = entry.trim();
+  if (!spec.startsWith(".") && !spec.startsWith("/")) return spec;
+  const rel = spec.replace(/^\.\//, "").replace(/^\//, "");
+  if (rel === "" || rel.split("/").includes("..")) return void 0;
+  const market = marketSource.trim();
+  if (market.startsWith("github:") || market.startsWith("git+")) {
+    const [base = "", fragment] = market.split("#", 2);
+    const prefix = fragment?.startsWith("subdir=") ? `${fragment.slice("subdir=".length)}/` : "";
+    return `${base}#subdir=${prefix}${rel}`;
+  }
+  if (market.startsWith("https://") || market.startsWith("http://")) {
+    return `${market.replace(/\/[^/]*$/, "")}/${rel}`;
+  }
+  return join(marketDir(market), rel);
+}
+function findMarketplaceEntryByName(name, statePath) {
+  for (const record of readMarketplaces(statePath).records) {
+    const entry = record.catalog.plugins.find((plugin) => plugin.name === name);
+    if (!entry) continue;
+    const source = resolveEntrySource(entry.source, record.source);
+    if (!source) continue;
+    return { marketplace: record.name, source };
+  }
+  return void 0;
+}
+async function fetchCatalog(source) {
+  const input = source.trim();
+  if (!input) return { ok: false, reason: t("plugin_marketplace.source_empty") };
+  const local = localCatalogPath(input);
+  if (local) {
+    if (!existsSync(local)) {
+      return { ok: false, reason: t("plugin_marketplace.local_missing", { path: local }) };
+    }
+    try {
+      return parseCatalog(readFileSync(local, "utf-8"), local);
+    } catch (err) {
+      return { ok: false, reason: t("plugin_marketplace.read_failed", { reason: first(err) }) };
+    }
+  }
+  const url = catalogUrl(input);
+  if (!url) {
+    return {
+      ok: false,
+      reason: t("plugin_marketplace.bad_url", { input, file: MARKETPLACE_FILE })
+    };
+  }
+  try {
+    const response = await fetch(url, { redirect: "follow" });
+    if (!response.ok) {
+      const vars = { url, status: response.status };
+      return {
+        ok: false,
+        reason: looksPrivate(response.status) ? t("marketplace.fetch_failed_private", vars) : t("marketplace.fetch_failed", vars)
+      };
+    }
+    return parseCatalog(await response.text(), url);
+  } catch (err) {
+    return { ok: false, reason: t("marketplace.fetch_error", { url, reason: first(err) }) };
+  }
+}
+function looksPrivate(status) {
+  return status === 401 || status === 403 || status === 404;
+}
+function catalogUrl(input) {
+  if (input.startsWith("github:")) {
+    const slug = input.slice("github:".length);
+    if (!/^[\w.-]+\/[\w.-]+$/.test(slug)) return void 0;
+    return `https://raw.githubusercontent.com/${slug}/HEAD/${MARKETPLACE_FILE}`;
+  }
+  if (!input.startsWith("https://") && !input.startsWith("http://")) return void 0;
+  return input.endsWith(".json") ? input : `${input.replace(/\/+$/, "")}/${MARKETPLACE_FILE}`;
+}
+function localCatalogPath(input) {
+  if (/^[a-z][a-z0-9+.-]+:/i.test(input) || input.startsWith("//")) return void 0;
+  const abs = isAbsolute(input) ? input : resolve(input);
+  if (existsSync(abs) && statSync(abs).isDirectory()) return join(abs, MARKETPLACE_FILE);
+  return abs;
+}
+function marketDir(market) {
+  const abs = isAbsolute(market) ? market : resolve(market);
+  if (existsSync(abs) && statSync(abs).isDirectory()) return abs;
+  return abs.replace(/[/\\][^/\\]*$/, "");
+}
+function parseCatalog(body2, where) {
+  let raw;
+  try {
+    raw = JSON.parse(body2);
+  } catch (err) {
+    return {
+      ok: false,
+      reason: t("plugin_marketplace.catalog_bad_json", { where, reason: first(err) })
+    };
+  }
+  const checked = parseLenient(CatalogSchema.optional(), raw, void 0);
+  if (!checked.value) {
+    const detail = checked.issues.map((i) => t("plugin_marketplace.issue", { path: i.path, message: i.message })).join(t("plugin_marketplace.catalog_issue_sep"));
+    return { ok: false, reason: t("plugin_marketplace.catalog_invalid", { where, detail }) };
+  }
+  return { ok: true, catalog: checked.value };
+}
+function first(err) {
+  const message = err instanceof Error ? err.message : String(err);
+  return message.split("\n")[0] ?? t("plugin_marketplace.unknown_error");
+}
+var NPM_SPEC = /^(?:@[a-z0-9][a-z0-9._-]*\/)?[a-z0-9][a-z0-9._-]*(?:@[a-zA-Z0-9.^~*+-]+)?$/;
+var REMOTE_URL = /^https?:\/\/[^\s'"\\^|<>]+$/;
+function resolveSource(raw) {
+  const input = raw.trim();
+  if (!input) return void 0;
+  if (input.startsWith("github:")) {
+    const [slug = "", fragment] = input.slice("github:".length).split("#", 2);
+    if (!/^[\w.-]+\/[\w.-]+$/.test(slug)) return void 0;
+    const sub = subdirOf(fragment);
+    if (!sub.ok) return void 0;
+    return {
+      type: "git",
+      raw: input,
+      target: `https://github.com/${slug}.git`,
+      ...sub.subdir ? { subdir: sub.subdir } : {}
+    };
+  }
+  if (input.startsWith("git+")) {
+    const [url = "", fragment] = input.slice("git+".length).split("#", 2);
+    if (!REMOTE_URL.test(url)) return void 0;
+    const sub = subdirOf(fragment);
+    if (!sub.ok) return void 0;
+    return { type: "git", raw: input, target: url, ...sub.subdir ? { subdir: sub.subdir } : {} };
+  }
+  if (input.startsWith("npm:")) {
+    const pkg = input.slice("npm:".length);
+    if (!NPM_SPEC.test(pkg)) return void 0;
+    return { type: "npm", raw: input, target: pkg };
+  }
+  if (input.startsWith("host:")) {
+    const opaque = input.slice("host:".length).trim();
+    if (!opaque) return void 0;
+    return { type: "host", raw: input, target: opaque };
+  }
+  if (input.startsWith("https://") || input.startsWith("http://")) {
+    const [url = "", fragment] = input.split("#", 2);
+    if (!REMOTE_URL.test(url)) return void 0;
+    const sha = fragment?.startsWith("sha256=") ? fragment.slice("sha256=".length) : void 0;
+    if (isArchiveUrl(url)) {
+      if (sha !== void 0 && !/^[a-f0-9]{64}$/i.test(sha)) return void 0;
+      return {
+        type: "archive",
+        raw: input,
+        target: url,
+        ...sha ? { sha256: sha.toLowerCase() } : {}
+      };
+    }
+    return { type: "git", raw: input, target: url };
+  }
+  const abs = isAbsolute(input) ? input : resolve(input);
+  if (isArchiveUrl(abs)) {
+    return { type: "archive", raw: input, target: abs, localFile: true };
+  }
+  return { type: "local", raw: input, target: abs };
+}
+function isArchiveUrl(url) {
+  return isWirePluginArchiveName(url);
+}
+function subdirOf(fragment) {
+  if (fragment === void 0 || fragment === "") return { ok: true };
+  if (!fragment.startsWith("subdir=")) return { ok: false };
+  const rel = fragment.slice("subdir=".length).replace(/\/+$/, "");
+  if (!/^[\w.-]+(?:\/[\w.-]+)*$/.test(rel)) return { ok: false };
+  if (rel.split("/").includes("..")) return { ok: false };
+  return { ok: true, subdir: rel };
+}
+function pluginRoot(source, staging) {
+  return source.subdir ? join(staging, source.subdir) : staging;
+}
+// src/plugin/install.ts
+async function installPlugin(source, opts) {
+  const resolved = resolveSource(source);
+  if (!resolved) {
+    return {
+      ok: false,
+      reason: t("plugin_install.bad_source", { source })
+    };
+  }
+  mkdirSync(opts.pluginsDir, { recursive: true });
+  const staging = join(opts.pluginsDir, `.staging-${randomUUID().slice(0, 8)}`);
+  try {
+    return await runInstall(resolved, staging, opts);
+  } finally {
+    rmSync(staging, { recursive: true, force: true });
+  }
+}
+async function runInstall(resolved, staging, opts) {
+  const rootStaging = join(staging, "root");
+  const fetched = await fetchInto(resolved, rootStaging, opts);
+  if (!fetched.ok) return { ok: false, reason: fetched.reason };
+  const readDir = resolved.type === "local" ? resolved.target : pluginRoot(resolved, rootStaging);
+  const read = readPluginManifest(readDir);
+  const manifest = read.manifest;
+  if (!manifest) {
     const detail = read.issues.map((i) => t("plugin_install.issue_line", { path: i.path, message: i.message })).join("\n");
     return { ok: false, reason: t("plugin_install.manifest_unusable", { detail: `
 ${detail}` }) };
@@ -7099,12 +7492,20 @@ ${detail}` }) };
   const current = opts.epochVersion ?? currentEpochVersion();
   const version = checkEpochVersion(manifest.epochVersion, current);
   const versionUnmet = !version.ok && manifest.epochVersion ? { required: manifest.epochVersion, current, reason: version.reason } : void 0;
+  const closure = await resolveClosure({
+    root: manifest.name,
+    declared: manifest.dependencies ?? [],
+    installed: new Set(new PluginStore(opts.statePath).read().records.map((r) => r.name)),
+    staging,
+    opts
+  });
   const preview3 = {
     manifest,
     source: resolved,
     inventory: scanPluginDir(readDir, manifest.name),
     ...conflict ? { conflict } : {},
-    ...versionUnmet ? { versionUnmet } : {}
+    ...versionUnmet ? { versionUnmet } : {},
+    ...closure.report.length > 0 ? { dependencies: closure.report } : {}
   };
   if (opts.replace !== void 0 && manifest.name !== opts.replace) {
     return {
@@ -7127,52 +7528,199 @@ ${detail}` }) };
   if (opts.confirm && !await opts.confirm(preview3)) {
     return { ok: false, reason: t("plugin.install_cancelled"), cancelled: true, preview: preview3 };
   }
-  const record = await commit(resolved, staging, preview3, opts);
+  const records = await commitAll(
+    [
+      {
+        name: manifest.name,
+        version: manifest.version,
+        source: resolved,
+        stagingDir: rootStaging,
+        ...opts.marketplace ? { marketplace: opts.marketplace } : {}
+      },
+      ...closure.plans.map((plan) => ({
+        name: plan.name,
+        version: plan.manifest.version,
+        source: plan.source,
+        stagingDir: plan.stagingDir,
+        ...plan.marketplace ? { marketplace: plan.marketplace } : {}
+      }))
+    ],
+    opts
+  );
+  const record = records?.find((r) => r.name === manifest.name);
   return record ? { ok: true, record, preview: preview3 } : {
     ok: false,
     preview: preview3,
     reason: t("plugin_install.raced", { name: manifest.name })
   };
 }
-async function commit(source, staging, preview3, opts) {
-  const name = preview3.manifest.name;
-  const dest = join(opts.pluginsDir, name);
-  removeInstallDest(dest);
-  const linked = source.type === "local";
-  if (linked) {
-    try {
-      symlinkSync(source.target, dest, "junction");
-    } catch {
-      opts.onProgress?.(t("plugin_install.symlink_failed"));
-      cpSync(source.target, dest, { recursive: true });
-      return write(false);
-    }
-  } else {
-    renameSync(pluginRoot(source, staging), dest);
-  }
-  return write(linked);
-  function write(isLink) {
-    const record = {
-      name,
-      version: preview3.manifest.version,
-      source: source.raw,
-      sourceType: source.type,
+var DEPENDENCY_LIMIT = 32;
+async function commitAll(entries2, opts) {
+  const records = [];
+  for (const entry of entries2) {
+    const dest = join(opts.pluginsDir, entry.name);
+    removeInstallDest(dest);
+    let linked = entry.source.type === "local";
+    if (linked) {
+      try {
+        symlinkSync(entry.source.target, dest, "junction");
+      } catch {
+        opts.onProgress?.(t("plugin_install.symlink_failed"));
+        cpSync(entry.source.target, dest, { recursive: true });
+        linked = false;
+      }
+    } else {
+      renameSync(pluginRoot(entry.source, entry.stagingDir), dest);
+    }
+    records.push({
+      name: entry.name,
+      version: entry.version,
+      source: entry.source.raw,
+      sourceType: entry.source.type,
       path: dest,
-      linked: isLink,
+      linked,
       enabled: true,
       installedAt: Date.now(),
-      ...opts.marketplace ? { marketplace: opts.marketplace } : {},
-      ...source.sha256 ? { checksum: `sha256:${source.sha256}` } : {}
-    };
-    return new PluginStore(opts.statePath).mutate((records) => {
-      const taken = records.some((r) => r.name === name);
-      if (taken && opts.replace !== name) return void 0;
-      return {
-        records: taken ? records.map((r) => r.name === name ? record : r) : [...records, record],
-        result: record
-      };
+      ...entry.marketplace ? { marketplace: entry.marketplace } : {},
+      ...entry.source.sha256 ? { checksum: `sha256:${entry.source.sha256}` } : {}
     });
   }
+  return new PluginStore(opts.statePath).mutate((existing) => {
+    for (const record of records) {
+      const taken = existing.some((r) => r.name === record.name);
+      if (taken && opts.replace !== record.name) return void 0;
+    }
+    let next = existing;
+    for (const record of records) {
+      const taken = next.some((r) => r.name === record.name);
+      next = taken ? next.map((r) => r.name === record.name ? record : r) : [...next, record];
+    }
+    return { records: next, result: records };
+  });
+}
+async function resolveClosure(input) {
+  const { opts, staging } = input;
+  const seen = /* @__PURE__ */ new Set([input.root]);
+  const queue = input.declared.map((name) => ({
+    name,
+    requiredBy: input.root
+  }));
+  const report3 = [];
+  const plans = [];
+  while (queue.length > 0) {
+    const next = queue.shift();
+    if (!next) break;
+    const { name, requiredBy } = next;
+    if (seen.has(name)) continue;
+    seen.add(name);
+    if (input.installed.has(name)) {
+      report3.push({ name, status: "installed", requiredBy });
+      continue;
+    }
+    if (plans.length >= DEPENDENCY_LIMIT) {
+      report3.push({
+        name,
+        status: "unresolved",
+        requiredBy,
+        reason: t("plugin_install.dep_too_many", { limit: DEPENDENCY_LIMIT, root: input.root })
+      });
+      continue;
+    }
+    const located = await locateDependency(name, opts);
+    if (!located) {
+      report3.push({
+        name,
+        status: "unresolved",
+        requiredBy,
+        reason: t("plugin_install.dep_no_source", { name })
+      });
+      continue;
+    }
+    const source = resolveSource(located.source);
+    if (!source) {
+      report3.push({
+        name,
+        status: "unresolved",
+        requiredBy,
+        source: located.source,
+        reason: t("plugin_install.dep_bad_source", { name, source: located.source })
+      });
+      continue;
+    }
+    opts.onProgress?.(t("plugin_install.dep_fetching", { name, source: located.source }));
+    const stagingDir = join(staging, `dep-${plans.length}`);
+    const fetched = await fetchInto(source, stagingDir, opts);
+    if (!fetched.ok) {
+      report3.push({
+        name,
+        status: "unresolved",
+        requiredBy,
+        source: located.source,
+        reason: fetched.reason
+      });
+      continue;
+    }
+    const readDir = source.type === "local" ? source.target : pluginRoot(source, stagingDir);
+    const read = readPluginManifest(readDir);
+    const manifest = read.manifest;
+    if (!manifest) {
+      report3.push({
+        name,
+        status: "unresolved",
+        requiredBy,
+        source: located.source,
+        reason: t("plugin_install.dep_bad_manifest", {
+          name,
+          detail: read.issues.map((issue) => issue.message).join("; ")
+        })
+      });
+      continue;
+    }
+    if (manifest.name !== name) {
+      report3.push({
+        name,
+        status: "unresolved",
+        requiredBy,
+        source: located.source,
+        reason: t("plugin_install.dep_name_mismatch", { name, found: manifest.name })
+      });
+      continue;
+    }
+    const current = opts.epochVersion ?? currentEpochVersion();
+    const version = checkEpochVersion(manifest.epochVersion, current);
+    const versionUnmet = !version.ok && manifest.epochVersion ? { required: manifest.epochVersion, current, reason: version.reason } : void 0;
+    report3.push({
+      name,
+      status: "plan",
+      requiredBy,
+      source: located.source,
+      manifest,
+      inventory: scanPluginDir(readDir, manifest.name),
+      ...versionUnmet ? { versionUnmet } : {}
+    });
+    plans.push({
+      name: manifest.name,
+      source,
+      stagingDir,
+      manifest,
+      ...located.marketplace ? { marketplace: located.marketplace } : {}
+    });
+    for (const nested of manifest.dependencies ?? []) {
+      queue.push({ name: nested, requiredBy: manifest.name });
+    }
+  }
+  return { report: report3, plans };
+}
+async function locateDependency(name, opts) {
+  const local = opts.marketplacesStatePath ? findMarketplaceEntryByName(name, opts.marketplacesStatePath) : void 0;
+  if (local) return { source: local.source, marketplace: local.marketplace };
+  if (!opts.resolveDependency) return void 0;
+  try {
+    const answer = await opts.resolveDependency(name);
+    return answer ? { source: answer } : void 0;
+  } catch {
+    return void 0;
+  }
 }
 function removeInstallDest(dest) {
   let link = false;
@@ -7236,469 +7784,153 @@ async function fetchFromHost(source, staging, opts) {
         reason: t("plugin_install.host_fetch_no_file", { path: answer.archivePath })
       };
     }
-    return extractArchive(answer.archivePath, staging);
-  });
-}
-function fetchLocal(source) {
-  if (!existsSync(source.target)) {
-    return { ok: false, reason: t("plugin_install.local_missing", { path: source.target }) };
-  }
-  return { ok: true };
-}
-async function fetchGit(source, staging, opts) {
-  opts.onProgress?.(t("plugin_install.cloning", { target: source.target }));
-  const result = await runCommand("git", ["clone", "--depth", "1", source.target, staging]);
-  if (!result.ok) {
-    return { ok: false, reason: t("plugin_install.clone_failed", { detail: result.detail }) };
-  }
-  rmSync(join(staging, ".git"), { recursive: true, force: true });
-  return { ok: true };
-}
-async function fetchNpm(source, staging, opts) {
-  opts.onProgress?.(t("plugin_install.npm_fetching", { target: source.target }));
-  mkdirSync(staging, { recursive: true });
-  return withDownloadDir(async (dl) => {
-    const packed = await runCommand(
-      "npm",
-      ["pack", source.target, "--pack-destination", dl, "--silent"],
-      { cwd: dl, windowsShell: true }
-    );
-    if (!packed.ok) {
-      return { ok: false, reason: t("plugin_install.npm_pack_failed", { detail: packed.detail }) };
-    }
-    const tarball = packed.stdout.trim().split("\n").pop()?.trim();
-    if (!tarball) return { ok: false, reason: t("plugin_install.npm_no_tarball") };
-    return extractArchive(isAbsolute(tarball) ? tarball : join(dl, tarball), staging);
-  });
-}
-async function fetchArchive(source, staging, opts) {
-  opts.onProgress?.(t("plugin_install.downloading", { target: source.target }));
-  mkdirSync(staging, { recursive: true });
-  let bytes;
-  try {
-    const response = await fetch(source.target, { redirect: "follow" });
-    if (!response.ok) {
-      return {
-        ok: false,
-        reason: t("plugin_install.download_http", {
-          status: response.status,
-          statusText: response.statusText
-        })
-      };
-    }
-    bytes = Buffer.from(await response.arrayBuffer());
-  } catch (err) {
-    return {
-      ok: false,
-      reason: t("plugin_install.download_failed", {
-        message: err instanceof Error ? err.message : String(err)
-      })
-    };
-  }
-  if (source.sha256) {
-    const actual = createHash("sha256").update(bytes).digest("hex");
-    if (actual !== source.sha256) {
-      return {
-        ok: false,
-        reason: [
-          t("plugin_install.sha_mismatch"),
-          t("plugin_install.sha_expected", { expected: source.sha256 }),
-          t("plugin_install.sha_actual", { actual })
-        ].join("\n")
-      };
-    }
-  }
-  return withDownloadDir(async (dl) => {
-    const archive = join(dl, `download${archiveExt(source.target)}`);
-    writeFileSync(archive, bytes);
-    return extractArchive(archive, staging);
-  });
-}
-function archiveExt(url) {
-  const path = (url.split("?")[0] ?? "").toLowerCase();
-  if (path.endsWith(".tgz")) return ".tgz";
-  if (path.endsWith(".tar.gz")) return ".tar.gz";
-  return ".zip";
-}
-async function withDownloadDir(fn) {
-  const dir = mkdtempSync(join(tmpdir(), "epoch-plugin-dl-"));
-  try {
-    return await fn(dir);
-  } finally {
-    rmSync(dir, { recursive: true, force: true });
-  }
-}
-// src/plugin/root-token.ts
-var PLUGIN_ROOT_TOKEN = "${EPOCH_PLUGIN_ROOT}";
-var PLUGIN_ROOT_ENV = "EPOCH_PLUGIN_ROOT";
-function mentionsPluginRoot(text) {
-  return text.includes(PLUGIN_ROOT_TOKEN);
-}
-function substitutePluginRoot(text, root) {
-  return text.split(PLUGIN_ROOT_TOKEN).join(root);
-}
-async function uninstallPlugin(name, opts) {
-  const removed = await new PluginStore(opts.statePath).mutate((records) => {
-    const hit = records.find((r) => r.name === name);
-    if (!hit) return void 0;
-    return { records: records.filter((r) => r.name !== name), result: hit };
-  });
-  if (!removed) return { ok: false, reason: t("plugin_lifecycle.not_installed", { name }) };
-  if (removed.linked) {
-    rmSync(removed.path, { force: true });
-    return { ok: true, message: t("plugin_lifecycle.uninstalled_link", { name }) };
-  }
-  rmSync(removed.path, { recursive: true, force: true });
-  return { ok: true, message: t("plugin_lifecycle.uninstalled", { name }) };
-}
-async function setPluginEnabled(name, enabled, opts) {
-  const changed = await new PluginStore(opts.statePath).mutate((records) => {
-    const hit = records.find((r) => r.name === name);
-    if (!hit) return void 0;
-    return {
-      records: records.map((r) => r.name === name ? { ...r, enabled } : r),
-      result: hit.enabled !== enabled
-    };
-  });
-  if (changed === void 0) {
-    return { ok: false, reason: t("plugin_lifecycle.not_installed", { name }) };
-  }
-  const verb = enabled ? t("plugin_lifecycle.verb_enable") : t("plugin_lifecycle.verb_disable");
-  return {
-    ok: true,
-    message: changed ? t("plugin_lifecycle.toggled", { verb, name }) : t("plugin_lifecycle.already", { name, verb })
-  };
-}
-async function updatePlugin(name, opts) {
-  const existing = new PluginStore(opts.statePath).read().records.find((r) => r.name === name);
-  if (!existing) return { ok: false, reason: t("plugin_lifecycle.not_installed", { name }) };
-  if (existing.linked) {
-    return {
-      ok: true,
-      message: t("plugin_lifecycle.linked_no_update", { name, source: existing.source })
-    };
-  }
-  return installPlugin(existing.source, {
-    ...opts,
-    replace: name,
-    ...existing.marketplace ? { marketplace: existing.marketplace } : {}
-  });
-}
-var MARKETPLACE_FILE = "epoch-marketplace.json";
-var NAME_PATTERN = PLUGIN_NAME_PATTERN;
-var EntryCategoryInput = z.union([z.string().min(1), z.array(z.string().min(1))]).optional().catch(void 0);
-var EntryShape = z.object({
-  name: z.string().regex(NAME_PATTERN),
-  description: z.string().min(1).optional(),
-  source: z.string().min(1),
-  category: EntryCategoryInput,
-  keywords: z.array(z.string().min(1)).optional(),
-  author: PluginAuthorSchema.optional(),
-  downloads: z.number().int().nonnegative().optional(),
-  likes: z.number().int().nonnegative().optional(),
-  displayName: z.string().min(1).optional(),
-  icon: z.string().min(1).optional(),
-  version: z.string().min(1).optional(),
-  changelog: z.string().min(1).optional(),
-  size: z.number().int().positive().optional(),
-  homepage: z.string().min(1).optional(),
-  visibility: z.enum(PLUGIN_VISIBILITY).optional().catch(void 0),
-  status: z.enum(["listed", "reviewing", "rejected", "offline"]).optional().catch(void 0)
-});
-var EntrySchema = EntryShape.transform(({ category, ...rest }) => {
-  const picked = category === void 0 ? [] : typeof category === "string" ? [category] : category;
-  return { ...rest, ...picked.length === 0 ? {} : { category: [...picked] } };
-});
-var MARKETPLACE_DISPLAY_FIELDS = [
-  "status",
-  "downloads",
-  "likes",
-  "author",
-  "category",
-  "visibility",
-  "icon",
-  "homepage",
-  "size"
-];
-var DisplaySchema = z.object({
-  fields: z.array(z.string().min(1)).optional()
-});
-var CategoryNodeSchema = z.lazy(
-  () => z.object({
-    id: z.string().min(1),
-    label: z.string().min(1).optional(),
-    children: z.array(CategoryNodeSchema).optional()
-  })
-);
-var CategoriesSchema = z.array(CategoryNodeSchema).refine(hasUniqueCategoryIds, { message: "category ids must be unique across the whole tree" }).optional().catch(void 0);
-function hasUniqueCategoryIds(nodes) {
-  const seen = /* @__PURE__ */ new Set();
-  const walk3 = (list) => list.every((node) => {
-    if (seen.has(node.id)) return false;
-    seen.add(node.id);
-    return node.children === void 0 || walk3(node.children);
-  });
-  return walk3(nodes);
-}
-var CatalogSchema = z.object({
-  name: z.string().regex(NAME_PATTERN),
-  description: z.string().min(1).optional(),
-  owner: z.object({ name: z.string().min(1), url: z.string().min(1).optional() }).optional(),
-  display: DisplaySchema.optional(),
-  categories: CategoriesSchema,
-  plugins: z.array(EntrySchema)
-});
-var RecordSchema2 = z.object({
-  name: z.string().regex(NAME_PATTERN),
-  source: z.string().min(1),
-  addedAt: z.number(),
-  catalog: CatalogSchema
-});
-var StateSchema2 = z.object({
-  version: z.literal(1).optional(),
-  marketplaces: z.array(RecordSchema2)
-});
-function projectEntryForDisplay(entry, display) {
-  const allowed = display?.fields;
-  if (allowed === void 0) return entry;
-  const out = { ...entry };
-  for (const field of MARKETPLACE_DISPLAY_FIELDS) {
-    if (!displayAllows(display, field)) delete out[field];
-  }
-  return out;
-}
-function displayAllows(display, field) {
-  const allowed = display?.fields;
-  if (allowed === void 0) return true;
-  return allowed.includes(field);
-}
-function readMarketplaces(statePath) {
-  if (!existsSync(statePath)) return { records: [], issues: [] };
-  let raw;
-  try {
-    raw = JSON.parse(readFileSync(statePath, "utf-8"));
-  } catch (err) {
-    return {
-      records: [],
-      issues: [
-        { path: statePath, message: t("plugin_marketplace.bad_json", { reason: first(err) }) }
-      ]
-    };
-  }
-  const checked = parseLenient(StateSchema2.optional(), raw, void 0);
-  if (!checked.value) {
-    return {
-      records: [],
-      issues: checked.issues.map((i) => ({
-        path: statePath,
-        message: t("plugin_marketplace.issue", { path: i.path, message: i.message })
-      }))
-    };
-  }
-  return { records: checked.value.marketplaces, issues: [] };
-}
-async function mutate(statePath, fn) {
-  const release = await acquireStateLock(statePath);
-  try {
-    const next = fn(readMarketplaces(statePath).records);
-    if (!next) return false;
-    writeStateFile(statePath, JSON.stringify({ version: 1, marketplaces: next }, null, 2));
-    return true;
-  } finally {
-    release();
-  }
-}
-async function addMarketplace(source, opts) {
-  const fetched = await fetchCatalog(source);
-  if (!fetched.ok) return fetched;
-  const record = {
-    name: fetched.catalog.name,
-    source: source.trim(),
-    addedAt: Date.now(),
-    catalog: fetched.catalog
-  };
-  const written = await mutate(
-    opts.statePath,
-    (records) => records.some((r) => r.name === record.name) ? void 0 : [...records, record].sort((a, b) => a.name.localeCompare(b.name))
-  );
-  return written ? { ok: true, record } : {
-    ok: false,
-    reason: t("plugin_marketplace.already_added", { name: record.name })
-  };
-}
-async function removeMarketplace(name, opts) {
-  const written = await mutate(
-    opts.statePath,
-    (records) => records.some((r) => r.name === name) ? records.filter((r) => r.name !== name) : void 0
-  );
-  return written ? { ok: true } : { ok: false, reason: t("plugin_marketplace.not_added", { name }) };
-}
-async function updateMarketplace(name, opts) {
-  const existing = readMarketplaces(opts.statePath).records.find((r) => r.name === name);
-  if (!existing) return { ok: false, reason: t("plugin_marketplace.not_added", { name }) };
-  const fetched = await fetchCatalog(existing.source);
-  if (!fetched.ok) return fetched;
-  if (fetched.catalog.name !== name) {
-    return {
-      ok: false,
-      reason: t("plugin_marketplace.renamed", {
-        source: existing.source,
-        name: fetched.catalog.name
-      })
-    };
-  }
-  const record = { ...existing, catalog: fetched.catalog };
-  await mutate(opts.statePath, (records) => records.map((r) => r.name === name ? record : r));
-  return { ok: true, record };
-}
-function searchMarketplaces(keyword, statePath) {
-  const needle = keyword.trim().toLowerCase();
-  const hits = [];
-  for (const record of readMarketplaces(statePath).records) {
-    for (const entry of record.catalog.plugins) {
-      const haystack = [
-        entry.name,
-        entry.description ?? "",
-        ...entry.category ?? [],
-        entry.author?.name ?? "",
-        ...entry.keywords ?? []
-      ].join(" ").toLowerCase();
-      if (needle && !haystack.includes(needle)) continue;
-      hits.push({
-        marketplace: record.name,
-        entry: projectEntryForDisplay(entry, record.catalog.display),
-        ref: `${record.name}/${entry.name}`
-      });
-    }
-  }
-  return hits;
-}
-function resolveMarketplaceRef(input, statePath) {
-  const parts = input.trim().split("/");
-  if (parts.length !== 2) return void 0;
-  const [market = "", plugin = ""] = parts;
-  if (!NAME_PATTERN.test(market) || !NAME_PATTERN.test(plugin)) return void 0;
-  const record = readMarketplaces(statePath).records.find((r) => r.name === market);
-  if (!record) {
-    return {
-      ok: false,
-      reason: t("plugin_marketplace.market_not_added", { market, input })
-    };
-  }
-  const entry = record.catalog.plugins.find((p) => p.name === plugin);
-  if (!entry) {
-    return {
-      ok: false,
-      reason: t("plugin_marketplace.plugin_not_in_market", { market, plugin })
-    };
-  }
-  const source = resolveEntrySource(entry.source, record.source);
-  if (!source) {
-    return {
-      ok: false,
-      reason: t("plugin_marketplace.entry_unresolvable", {
-        market,
-        plugin,
-        source: entry.source
-      })
-    };
-  }
-  return { ok: true, ref: { marketplace: market, source } };
-}
-function resolveEntrySource(entry, marketSource) {
-  const spec = entry.trim();
-  if (!spec.startsWith(".") && !spec.startsWith("/")) return spec;
-  const rel = spec.replace(/^\.\//, "").replace(/^\//, "");
-  if (rel === "" || rel.split("/").includes("..")) return void 0;
-  const market = marketSource.trim();
-  if (market.startsWith("github:") || market.startsWith("git+")) {
-    const [base = "", fragment] = market.split("#", 2);
-    const prefix = fragment?.startsWith("subdir=") ? `${fragment.slice("subdir=".length)}/` : "";
-    return `${base}#subdir=${prefix}${rel}`;
+    return extractArchive(answer.archivePath, staging);
+  });
+}
+function fetchLocal(source) {
+  if (!existsSync(source.target)) {
+    return { ok: false, reason: t("plugin_install.local_missing", { path: source.target }) };
   }
-  if (market.startsWith("https://") || market.startsWith("http://")) {
-    return `${market.replace(/\/[^/]*$/, "")}/${rel}`;
+  return { ok: true };
+}
+async function fetchGit(source, staging, opts) {
+  opts.onProgress?.(t("plugin_install.cloning", { target: source.target }));
+  const result = await runCommand("git", ["clone", "--depth", "1", source.target, staging]);
+  if (!result.ok) {
+    return { ok: false, reason: t("plugin_install.clone_failed", { detail: result.detail }) };
   }
-  return join(marketDir(market), rel);
+  rmSync(join(staging, ".git"), { recursive: true, force: true });
+  return { ok: true };
 }
-async function fetchCatalog(source) {
-  const input = source.trim();
-  if (!input) return { ok: false, reason: t("plugin_marketplace.source_empty") };
-  const local = localCatalogPath(input);
-  if (local) {
-    if (!existsSync(local)) {
-      return { ok: false, reason: t("plugin_marketplace.local_missing", { path: local }) };
+async function fetchNpm(source, staging, opts) {
+  opts.onProgress?.(t("plugin_install.npm_fetching", { target: source.target }));
+  mkdirSync(staging, { recursive: true });
+  return withDownloadDir(async (dl) => {
+    const packed = await runCommand(
+      "npm",
+      ["pack", source.target, "--pack-destination", dl, "--silent"],
+      { cwd: dl, windowsShell: true }
+    );
+    if (!packed.ok) {
+      return { ok: false, reason: t("plugin_install.npm_pack_failed", { detail: packed.detail }) };
     }
-    try {
-      return parseCatalog(readFileSync(local, "utf-8"), local);
-    } catch (err) {
-      return { ok: false, reason: t("plugin_marketplace.read_failed", { reason: first(err) }) };
+    const tarball = packed.stdout.trim().split("\n").pop()?.trim();
+    if (!tarball) return { ok: false, reason: t("plugin_install.npm_no_tarball") };
+    return extractArchive(isAbsolute(tarball) ? tarball : join(dl, tarball), staging);
+  });
+}
+async function fetchArchive(source, staging, opts) {
+  opts.onProgress?.(t("plugin_install.downloading", { target: source.target }));
+  mkdirSync(staging, { recursive: true });
+  let bytes;
+  try {
+    const response = await fetch(source.target, { redirect: "follow" });
+    if (!response.ok) {
+      return {
+        ok: false,
+        reason: t("plugin_install.download_http", {
+          status: response.status,
+          statusText: response.statusText
+        })
+      };
     }
-  }
-  const url = catalogUrl(input);
-  if (!url) {
+    bytes = Buffer.from(await response.arrayBuffer());
+  } catch (err) {
     return {
       ok: false,
-      reason: t("plugin_marketplace.bad_url", { input, file: MARKETPLACE_FILE })
+      reason: t("plugin_install.download_failed", {
+        message: err instanceof Error ? err.message : String(err)
+      })
     };
   }
-  try {
-    const response = await fetch(url, { redirect: "follow" });
-    if (!response.ok) {
-      const vars = { url, status: response.status };
+  if (source.sha256) {
+    const actual = createHash("sha256").update(bytes).digest("hex");
+    if (actual !== source.sha256) {
       return {
         ok: false,
-        reason: looksPrivate(response.status) ? t("marketplace.fetch_failed_private", vars) : t("marketplace.fetch_failed", vars)
+        reason: [
+          t("plugin_install.sha_mismatch"),
+          t("plugin_install.sha_expected", { expected: source.sha256 }),
+          t("plugin_install.sha_actual", { actual })
+        ].join("\n")
       };
     }
-    return parseCatalog(await response.text(), url);
-  } catch (err) {
-    return { ok: false, reason: t("marketplace.fetch_error", { url, reason: first(err) }) };
   }
+  return withDownloadDir(async (dl) => {
+    const archive = join(dl, `download${archiveExt(source.target)}`);
+    writeFileSync(archive, bytes);
+    return extractArchive(archive, staging);
+  });
 }
-function looksPrivate(status) {
-  return status === 401 || status === 403 || status === 404;
+function archiveExt(url) {
+  const path = (url.split("?")[0] ?? "").toLowerCase();
+  if (path.endsWith(".tgz")) return ".tgz";
+  if (path.endsWith(".tar.gz")) return ".tar.gz";
+  return ".zip";
 }
-function catalogUrl(input) {
-  if (input.startsWith("github:")) {
-    const slug = input.slice("github:".length);
-    if (!/^[\w.-]+\/[\w.-]+$/.test(slug)) return void 0;
-    return `https://raw.githubusercontent.com/${slug}/HEAD/${MARKETPLACE_FILE}`;
+async function withDownloadDir(fn) {
+  const dir = mkdtempSync(join(tmpdir(), "epoch-plugin-dl-"));
+  try {
+    return await fn(dir);
+  } finally {
+    rmSync(dir, { recursive: true, force: true });
   }
-  if (!input.startsWith("https://") && !input.startsWith("http://")) return void 0;
-  return input.endsWith(".json") ? input : `${input.replace(/\/+$/, "")}/${MARKETPLACE_FILE}`;
 }
-function localCatalogPath(input) {
-  if (/^[a-z][a-z0-9+.-]+:/i.test(input) || input.startsWith("//")) return void 0;
-  const abs = isAbsolute(input) ? input : resolve(input);
-  if (existsSync(abs) && statSync(abs).isDirectory()) return join(abs, MARKETPLACE_FILE);
-  return abs;
+// src/plugin/root-token.ts
+var PLUGIN_ROOT_TOKEN = "${EPOCH_PLUGIN_ROOT}";
+var PLUGIN_ROOT_ENV = "EPOCH_PLUGIN_ROOT";
+function mentionsPluginRoot(text) {
+  return text.includes(PLUGIN_ROOT_TOKEN);
 }
-function marketDir(market) {
-  const abs = isAbsolute(market) ? market : resolve(market);
-  if (existsSync(abs) && statSync(abs).isDirectory()) return abs;
-  return abs.replace(/[/\\][^/\\]*$/, "");
+function substitutePluginRoot(text, root) {
+  return text.split(PLUGIN_ROOT_TOKEN).join(root);
 }
-function parseCatalog(body2, where) {
-  let raw;
-  try {
-    raw = JSON.parse(body2);
-  } catch (err) {
+async function uninstallPlugin(name, opts) {
+  const removed = await new PluginStore(opts.statePath).mutate((records) => {
+    const hit = records.find((r) => r.name === name);
+    if (!hit) return void 0;
+    return { records: records.filter((r) => r.name !== name), result: hit };
+  });
+  if (!removed) return { ok: false, reason: t("plugin_lifecycle.not_installed", { name }) };
+  if (removed.linked) {
+    rmSync(removed.path, { force: true });
+    return { ok: true, message: t("plugin_lifecycle.uninstalled_link", { name }) };
+  }
+  rmSync(removed.path, { recursive: true, force: true });
+  return { ok: true, message: t("plugin_lifecycle.uninstalled", { name }) };
+}
+async function setPluginEnabled(name, enabled, opts) {
+  const changed = await new PluginStore(opts.statePath).mutate((records) => {
+    const hit = records.find((r) => r.name === name);
+    if (!hit) return void 0;
     return {
-      ok: false,
-      reason: t("plugin_marketplace.catalog_bad_json", { where, reason: first(err) })
+      records: records.map((r) => r.name === name ? { ...r, enabled } : r),
+      result: hit.enabled !== enabled
     };
+  });
+  if (changed === void 0) {
+    return { ok: false, reason: t("plugin_lifecycle.not_installed", { name }) };
   }
-  const checked = parseLenient(CatalogSchema.optional(), raw, void 0);
-  if (!checked.value) {
-    const detail = checked.issues.map((i) => t("plugin_marketplace.issue", { path: i.path, message: i.message })).join(t("plugin_marketplace.catalog_issue_sep"));
-    return { ok: false, reason: t("plugin_marketplace.catalog_invalid", { where, detail }) };
-  }
-  return { ok: true, catalog: checked.value };
+  const verb = enabled ? t("plugin_lifecycle.verb_enable") : t("plugin_lifecycle.verb_disable");
+  return {
+    ok: true,
+    message: changed ? t("plugin_lifecycle.toggled", { verb, name }) : t("plugin_lifecycle.already", { name, verb })
+  };
 }
-function first(err) {
-  const message = err instanceof Error ? err.message : String(err);
-  return message.split("\n")[0] ?? t("plugin_marketplace.unknown_error");
+async function updatePlugin(name, opts) {
+  const existing = new PluginStore(opts.statePath).read().records.find((r) => r.name === name);
+  if (!existing) return { ok: false, reason: t("plugin_lifecycle.not_installed", { name }) };
+  if (existing.linked) {
+    return {
+      ok: true,
+      message: t("plugin_lifecycle.linked_no_update", { name, source: existing.source })
+    };
+  }
+  return installPlugin(existing.source, {
+    ...opts,
+    replace: name,
+    ...existing.marketplace ? { marketplace: existing.marketplace } : {}
+  });
 }
 var TMP_SUFFIX = ".epoch-rewind";
 function planFor(entry, current) {
@@ -7746,7 +7978,7 @@ async function applyRewind(store, sessionId, manifest, apply, skippedConflicts)
   } catch (err) {
     return { ...empty, failed: t("rewind.stage_failed", { message: messageOf(err) }) };
   }
-  return commitAll(staged, skippedConflicts);
+  return commitAll2(staged, skippedConflicts);
 }
 async function stageAll(store, sessionId, manifest, todo, byPath) {
   const staged = [];
@@ -7774,7 +8006,7 @@ async function stageAll(store, sessionId, manifest, todo, byPath) {
   }
   return staged;
 }
-async function commitAll(staged, skippedConflicts) {
+async function commitAll2(staged, skippedConflicts) {
   const outcome = {
     restored: [],
     deleted: [],
@@ -7931,14 +8163,14 @@ var CheckpointStore = class {
   }
   async enforceTotalSize(protectSession, protectTurnIndex) {
     const turns = await this.collectTurns();
-    let total = turns.reduce((sum, t80) => sum + t80.bytes, 0);
+    let total = turns.reduce((sum, t81) => sum + t81.bytes, 0);
     if (total <= this.maxTotalBytes) return;
     turns.sort((a, b) => a.createdAt - b.createdAt);
-    for (const t80 of turns) {
+    for (const t81 of turns) {
       if (total <= this.maxTotalBytes) return;
-      if (t80.sessionId === protectSession && t80.turnIndex === protectTurnIndex) continue;
-      await this.removeTurn(t80.sessionId, t80.turnIndex);
-      total -= t80.bytes;
+      if (t81.sessionId === protectSession && t81.turnIndex === protectTurnIndex) continue;
+      await this.removeTurn(t81.sessionId, t81.turnIndex);
+      total -= t81.bytes;
     }
   }
   async collectTurns() {
@@ -10739,11 +10971,11 @@ var PromptBuilder = class {
   memoryInitialized = false;
   projectBlock(tools) {
     const permLevel = this.deps.permissionManager?.getLevel() || "default";
-    const hasPlanTool = tools.some((t80) => t80.name === "enter_plan_mode");
-    const hasLspTool = tools.some((t80) => t80.name === "lsp_diagnostics");
-    const hasAskTool = tools.some((t80) => t80.name === "ask_user_question");
-    const hasTodoTool = tools.some((t80) => t80.name === "todo");
-    const hasTerminal = tools.some((t80) => t80.name === "terminal");
+    const hasPlanTool = tools.some((t81) => t81.name === "enter_plan_mode");
+    const hasLspTool = tools.some((t81) => t81.name === "lsp_diagnostics");
+    const hasAskTool = tools.some((t81) => t81.name === "ask_user_question");
+    const hasTodoTool = tools.some((t81) => t81.name === "todo");
+    const hasTerminal = tools.some((t81) => t81.name === "terminal");
     const needsCommandApproval = hasTerminal && permLevel === "default";
     const plan = this.deps.approvedPlan?.()?.trim();
     const codeSdk = renderSdkDeclaration(this.deps.codeModeTools?.() ?? []);
@@ -11433,8 +11665,8 @@ function imageParts(content) {
   return typeof content === "string" ? [] : content.filter((p) => p.type === "image");
 }
 function toolSignatureOf(config, tools) {
-  const direct = tools.map((t80) => t80.name).join("\0");
-  const declared = (config.codeModeTools?.() ?? []).map((t80) => t80.name).join("\0");
+  const direct = tools.map((t81) => t81.name).join("\0");
+  const declared = (config.codeModeTools?.() ?? []).map((t81) => t81.name).join("\0");
   return declared ? `${direct}|${declared}` : direct;
 }
 function modelSignatureOf(info) {
@@ -12982,8 +13214,10 @@ function _loadImpl(overrideHomeDir) {
     return cached.config;
   }
   const config = parseRawConfig(read.raw, issues, track);
-  const pinned = applyProviderOverride(config, issues, track);
+  const override = readProviderOverride(issues);
+  const pinned = applyProviderOverride(config, track, override);
   const secretSource = applySecretsFromEnv(config, homeDir, track);
+  if (pinned) applyProviderOverride(config, track, override);
   applyEnvOverrides(config, issues, track);
   if (secretSource === "config-file" && !pinned) detectProviderFromKey(config);
   if (overrideHomeDir) {
@@ -13054,19 +13288,30 @@ function applySecretsFromEnv(config, homeDir, track) {
   }
   return "config-file";
 }
-function applyProviderOverride(config, issues, track) {
-  const raw = process.env.EPOCH_BASE_URL;
-  if (raw) {
-    config.provider.baseUrl = raw;
-    track.env.add("provider.baseUrl");
+function readProviderOverride(issues) {
+  const override = {};
+  const baseUrl = process.env.EPOCH_BASE_URL;
+  if (baseUrl) {
+    override.baseUrl = baseUrl;
+    override.type = "openai-compatible";
   }
   const type = process.env.EPOCH_PROVIDER;
-  if (!type) return false;
-  if (!isProviderType(type)) {
-    issues.push(envIssue("EPOCH_PROVIDER", type, PROVIDER_TYPES.join(" / ")));
-    return false;
+  if (type) {
+    if (isProviderType(type)) {
+      override.type ??= type;
+    } else {
+      issues.push(envIssue("EPOCH_PROVIDER", type, PROVIDER_TYPES.join(" / ")));
+    }
+  }
+  return override;
+}
+function applyProviderOverride(config, track, override) {
+  if (override.baseUrl) {
+    config.provider.baseUrl = override.baseUrl;
+    track.env.add("provider.baseUrl");
   }
-  config.provider.type = type;
+  if (!override.type) return false;
+  config.provider.type = override.type;
   track.env.add("provider.type");
   return true;
 }
@@ -13326,6 +13571,10 @@ var DEFAULT_MODELS = {
   groq: "llama-3.3-70b-versatile",
   mistral: "ministral-8b-latest",
   moonshotai: "kimi-latest",
+  zhipu: "glm-4.5-flash",
+  dashscope: "qwen-flash",
+  bytedance: "doubao-seed-2.0-mini",
+  qianfan: "ernie-speed-128k",
   cohere: "command-r7b-12-2024",
   xai: "grok-vision-beta",
   perplexity: "sonar",
@@ -13738,6 +13987,10 @@ var PACKAGES = {
   groq: "@ai-sdk/groq",
   mistral: "@ai-sdk/mistral",
   moonshotai: "@ai-sdk/moonshotai",
+  zhipu: "@ai-sdk/openai-compatible",
+  dashscope: "@ai-sdk/alibaba",
+  bytedance: "@ai-sdk/openai-compatible",
+  qianfan: "@ai-sdk/openai-compatible",
   cohere: "@ai-sdk/cohere",
   xai: "@ai-sdk/xai",
   perplexity: "@ai-sdk/perplexity",
@@ -13747,6 +14000,17 @@ var PACKAGES = {
   ollama: "ollama-ai-provider-v2",
   "openai-compatible": "@ai-sdk/openai-compatible"
 };
+function openaiCompatibleFactory(name, defaultBaseUrl) {
+  return async ({ apiKey, baseUrl }) => {
+    const { createOpenAICompatible } = await import('@ai-sdk/openai-compatible');
+    return createOpenAICompatible({
+      apiKey,
+      baseURL: baseUrl || defaultBaseUrl,
+      name,
+      includeUsage: true
+    });
+  };
+}
 var LOADERS = {
   openai: async ({ apiKey, baseUrl }) => {
     const { createOpenAI } = await import('@ai-sdk/openai');
@@ -13778,6 +14042,17 @@ var LOADERS = {
     const { createMoonshotAI } = await import('@ai-sdk/moonshotai');
     return createMoonshotAI({ apiKey });
   },
+  zhipu: openaiCompatibleFactory("zhipu", "https://open.bigmodel.cn/api/paas/v4"),
+  dashscope: async ({ apiKey, baseUrl }) => {
+    const { createAlibaba } = await import('@ai-sdk/alibaba');
+    const provider = createAlibaba({
+      apiKey,
+      baseURL: baseUrl || "https://dashscope.aliyuncs.com/compatible-mode/v1"
+    });
+    return (model) => provider.languageModel(model);
+  },
+  bytedance: openaiCompatibleFactory("bytedance", "https://ark.cn-beijing.volces.com/api/v3"),
+  qianfan: openaiCompatibleFactory("qianfan", "https://qianfan.baidubce.com/v2"),
   cohere: async ({ apiKey }) => {
     const { createCohere } = await import('@ai-sdk/cohere');
     return createCohere({ apiKey });
@@ -13806,15 +14081,7 @@ var LOADERS = {
     const { createOllama } = await import('ollama-ai-provider-v2');
     return createOllama();
   },
-  "openai-compatible": async ({ apiKey, baseUrl }) => {
-    const { createOpenAICompatible } = await import('@ai-sdk/openai-compatible');
-    return createOpenAICompatible({
-      apiKey,
-      baseURL: baseUrl || "http://localhost:8080/v1",
-      name: "custom",
-      includeUsage: true
-    });
-  }
+  "openai-compatible": openaiCompatibleFactory("custom", "http://localhost:8080/v1")
 };
 var ProviderSdkMissingError = class extends Error {
   constructor(providerType, packageName, cause) {
@@ -14446,6 +14713,10 @@ var STATIC_MODEL_CATALOG = {
   ],
   mistral: ["mistral-large-latest", "mistral-small-latest", "codestral-latest"],
   moonshotai: ["kimi-latest"],
+  zhipu: ["glm-4.6", "glm-4.5-flash", "glm-4.5-air", "glm-4.5"],
+  dashscope: ["qwen3-max", "qwen-plus", "qwen-flash", "qwen-turbo", "qwen-max-latest"],
+  bytedance: ["doubao-seed-2.1-pro", "doubao-seed-2.0-mini", "doubao-seed-1.6-flash"],
+  qianfan: ["ernie-5.0", "ernie-speed-128k", "ernie-4.0-turbo-8k"],
   cohere: ["command-r-plus-04-2024", "command-r7b-12-2024", "command-a-03-2025"],
   xai: ["grok-vision-beta"],
   perplexity: ["sonar", "sonar-pro", "sonar-reasoning"],
@@ -14461,6 +14732,10 @@ var PROVIDER_DISCOVERY = {
   groq: { baseUrl: "https://api.groq.com/openai/v1", auth: "bearer" },
   mistral: { baseUrl: "https://api.mistral.ai/v1", auth: "bearer" },
   moonshotai: { baseUrl: "https://api.moonshot.ai/v1", auth: "bearer" },
+  zhipu: { baseUrl: "https://open.bigmodel.cn/api/paas/v4", auth: "bearer" },
+  dashscope: { baseUrl: "https://dashscope.aliyuncs.com/compatible-mode/v1", auth: "bearer" },
+  bytedance: { baseUrl: "https://ark.cn-beijing.volces.com/api/v3", auth: "bearer" },
+  qianfan: { baseUrl: "https://qianfan.baidubce.com/v2", auth: "bearer" },
   xai: { baseUrl: "https://api.x.ai/v1", auth: "bearer" },
   perplexity: { baseUrl: "https://api.perplexity.ai", auth: "bearer" },
   togetherai: { baseUrl: "https://api.together.xyz/v1", auth: "bearer" }
@@ -14711,7 +14986,7 @@ function writeUserYaml(path, key, value) {
   const after = asMapping(parseYaml(next));
   const intact = after !== null && (dot < 0 ? onlyChanged(before, after, key, value) : onlyChangedNested(before, after, key.slice(0, dot), key.slice(dot + 1), value));
   if (!intact) return { ok: false, reason: "unwritable-file" };
-  return commit2(path, next, 384, value);
+  return commit(path, next, 384, value);
 }
 function writeSettingsJson(path, key, value) {
   let before = {};
@@ -14731,7 +15006,7 @@ function writeSettingsJson(path, key, value) {
   }
   const body2 = `${JSON.stringify({ ...before, [key]: value }, null, 2)}
 `;
-  return commit2(path, body2, 420, value);
+  return commit(path, body2, 420, value);
 }
 function scalarText(value) {
   return dump(value, { lineWidth: -1 }).trimEnd();
@@ -14788,7 +15063,7 @@ function sameKeysAndValues(before, after, except) {
 function sameData(a, b) {
   return JSON.stringify(a ?? null) === JSON.stringify(b ?? null);
 }
-function commit2(path, body2, createMode, value) {
+function commit(path, body2, createMode, value) {
   const tmp = `${path}.${process.pid}.tmp`;
   try {
     mkdirSync(dirname(path), { recursive: true });
@@ -15079,11 +15354,11 @@ function buildSearchQuery(query) {
   }
   const latinPart = cleaned.replace(CJK_RUN, " ");
   for (const w of latinPart.split(/\s+/)) {
-    const t80 = w.trim();
-    if (t80.length >= 2) terms.add(t80);
+    const t81 = w.trim();
+    if (t81.length >= 2) terms.add(t81);
   }
   if (terms.size === 0) return null;
-  return [...terms].map((t80) => `"${t80.replace(/"/g, "")}"`).join(" OR ");
+  return [...terms].map((t81) => `"${t81.replace(/"/g, "")}"`).join(" OR ");
 }
 // src/memory/db.ts
 var NS2 = "memory";
@@ -17102,7 +17377,7 @@ function checkFtsHealth(db) {
     messages,
     tables,
     missingTriggers,
-    healthy: missingTriggers.length === 0 && tables.every((t80) => t80.error === null && t80.drift === null && t80.rows === messages),
+    healthy: missingTriggers.length === 0 && tables.every((t81) => t81.error === null && t81.drift === null && t81.rows === messages),
     indexBytes: indexBytesOf(db),
     space: spaceOf(db)
   };
@@ -18196,6 +18471,72 @@ function isLastOpenSession(value) {
   const v = value;
   return typeof v["root"] === "string" && v["root"].length > 0 && typeof v["sessionId"] === "string" && v["sessionId"].length > 0 && typeof v["at"] === "number";
 }
+var FILE_VERSION4 = 1;
+function describe8(err) {
+  return err instanceof Error ? err.message : String(err);
+}
+var AppearanceStore = class {
+  constructor(filePath = appearancePath()) {
+    this.filePath = filePath;
+    this.load();
+  }
+  filePath;
+  prefs = {};
+  loadErrors = [];
+  writeErrors = [];
+  get() {
+    return { ...this.prefs };
+  }
+  set(patch) {
+    const next = { ...this.prefs };
+    for (const key of ["theme", "lang"]) {
+      const value = patch[key];
+      if (typeof value === "string" && value.length > 0) next[key] = value;
+    }
+    if (next.theme === this.prefs.theme && next.lang === this.prefs.lang) return;
+    this.prefs = next;
+    this.save();
+  }
+  load() {
+    this.prefs = {};
+    if (!existsSync(this.filePath)) return;
+    let parsed;
+    try {
+      parsed = JSON.parse(readFileSync(this.filePath, "utf-8"));
+    } catch (err) {
+      this.loadErrors.push(
+        (lang) => t("appearance.unreadable", { path: this.filePath, reason: describe8(err) }, lang)
+      );
+      return;
+    }
+    this.adopt(parsed);
+  }
+  adopt(parsed) {
+    if (typeof parsed !== "object" || parsed === null || Array.isArray(parsed)) return;
+    const file = parsed;
+    if (file.version !== FILE_VERSION4) return;
+    if (typeof file.theme === "string" && file.theme.length > 0) this.prefs.theme = file.theme;
+    if (typeof file.lang === "string" && file.lang.length > 0) this.prefs.lang = file.lang;
+  }
+  save() {
+    const body2 = JSON.stringify(
+      { version: FILE_VERSION4, ...this.prefs },
+      null,
+      2
+    );
+    const tmp = `${this.filePath}.${process.pid}.tmp`;
+    try {
+      mkdirSync(dirname(this.filePath), { recursive: true });
+      writeFileSync(tmp, body2, { encoding: "utf-8", mode: 384 });
+      renameSync(tmp, this.filePath);
+    } catch (err) {
+      rmSync(tmp, { force: true });
+      this.writeErrors.push(
+        (lang) => t("appearance.write_failed", { path: this.filePath, reason: describe8(err) }, lang)
+      );
+    }
+  }
+};
 function ruleAskActive(level) {
   return level !== "bypass";
 }
@@ -18446,11 +18787,11 @@ var ApprovalCache = class {
     return !rel.startsWith("..") && !isAbsolute(rel);
   }
   normalizeTarget(target) {
-    const t80 = target.trim();
-    if (!t80) return "";
-    const unix = t80.replace(/\\/g, "/");
+    const t81 = target.trim();
+    if (!t81) return "";
+    const unix = t81.replace(/\\/g, "/");
     if (unix.startsWith("/") || /^[A-Za-z]:\//.test(unix)) return resolve(unix);
-    return t80;
+    return t81;
   }
   load() {
     try {
@@ -18553,9 +18894,9 @@ function createSharedPermissionState(cache) {
   };
 }
 function cacheKeyFor(raw) {
-  const t80 = raw.trim();
-  if (!t80) return null;
-  return t80.slice(0, 500);
+  const t81 = raw.trim();
+  if (!t81) return null;
+  return t81.slice(0, 500);
 }
 // src/permission/manager.ts
 var log3 = createLogger("permission");
@@ -19854,7 +20195,7 @@ function parseSimpleToml(content, file) {
     const at = `${file}:${i + 1}`;
     if (!trimmed || trimmed.startsWith("#")) continue;
     if (trimmed === "[[rule]]") {
-      if (current) commit3(current, file, rules, issues);
+      if (current) commit2(current, file, rules, issues);
       current = { raw: {}, line: i + 1 };
       continue;
     }
@@ -19877,7 +20218,7 @@ function parseSimpleToml(content, file) {
       current.raw[kv.key] = kv.value;
     }
   }
-  if (current) commit3(current, file, rules, issues);
+  if (current) commit2(current, file, rules, issues);
   return { rules, issues };
 }
 function readKeyValue(line) {
@@ -19891,7 +20232,7 @@ function readKeyValue(line) {
   const sq = rawVal.match(/^'(.*)'$/);
   return { key, value: sq && sq[1] ? sq[1] : rawVal };
 }
-function commit3(draft, file, rules, issues) {
+function commit2(draft, file, rules, issues) {
   const at = `${file}:${draft.line}`;
   issues.push(...unknownKeyIssues(POLICY_RULE_KEYS, draft.raw, at));
   const raw = { ...draft.raw };
@@ -20985,7 +21326,7 @@ var HookManager = class {
             return { blocked: true, reason: result.rejectReason || t("hook_load.rejected") };
           }
         } catch (err) {
-          this.log("warn", `[HookManager] ${type} \u7684 command hook \u6267\u884C\u5F02\u5E38: ${describe9(err)}`, {
+          this.log("warn", `[HookManager] ${type} \u7684 command hook \u6267\u884C\u5F02\u5E38: ${describe10(err)}`, {
             hookType: type,
             command: config.command
           });
@@ -21003,7 +21344,7 @@ var HookManager = class {
           (_, reject2) => setTimeout(() => reject2(new Error("Hook timeout")), HOOK_TIMEOUT_MS)
         )
       ]).catch((err) => {
-        this.log("warn", `[HookManager] ${type} (${reg.plugin}) \u5931\u8D25: ${describe9(err)}`, {
+        this.log("warn", `[HookManager] ${type} (${reg.plugin}) \u5931\u8D25: ${describe10(err)}`, {
           hookType: type,
           plugin: reg.plugin
         });
@@ -21015,7 +21356,7 @@ var HookManager = class {
         if (!matchesHook(entry.matcher, event)) continue;
         for (const config of entry.configs) {
           runCommandHook(config, event, ctx.workDir).then((result) => reportIfNeverRan(this.log, type, config, result)).catch((err) => {
-            this.log("warn", `[HookManager] ${type} \u7684 command hook \u5F02\u6B65\u5F02\u5E38: ${describe9(err)}`, {
+            this.log("warn", `[HookManager] ${type} \u7684 command hook \u5F02\u6B65\u5F02\u5E38: ${describe10(err)}`, {
               hookType: type,
               command: config.command
             });
@@ -21036,7 +21377,7 @@ var HookManager = class {
         ]);
         if (result !== null && result !== void 0) return result;
       } catch (err) {
-        this.log("warn", `[HookManager] ${type} (${reg.plugin}) \u5931\u8D25: ${describe9(err)}`, {
+        this.log("warn", `[HookManager] ${type} (${reg.plugin}) \u5931\u8D25: ${describe10(err)}`, {
           hookType: type,
           plugin: reg.plugin
         });
@@ -21057,7 +21398,7 @@ var HookManager = class {
         ]);
         if (result) results.push(result);
       } catch (err) {
-        this.log("warn", `[HookManager] ${type} (${reg.plugin}) \u5931\u8D25: ${describe9(err)}`, {
+        this.log("warn", `[HookManager] ${type} (${reg.plugin}) \u5931\u8D25: ${describe10(err)}`, {
           hookType: type,
           plugin: reg.plugin
         });
@@ -21074,7 +21415,7 @@ var HookManager = class {
             const verdict = verdictOf2(result);
             if (verdict) results.push(verdict);
           } catch (err) {
-            this.log("warn", `[HookManager] ${type} \u7684 command hook \u6267\u884C\u5F02\u5E38: ${describe9(err)}`, {
+            this.log("warn", `[HookManager] ${type} \u7684 command hook \u6267\u884C\u5F02\u5E38: ${describe10(err)}`, {
               hookType: type,
               command: config.command
             });
@@ -21090,7 +21431,7 @@ var HookManager = class {
     return [...list].sort((a, b) => a.priority - b.priority);
   }
 };
-function describe9(err) {
+function describe10(err) {
   return err instanceof Error ? err.message : String(err);
 }
 function verdictOf2(result) {
@@ -22379,7 +22720,7 @@ async function importSkills(source, opts) {
         detail: t("skill.import_stale", void 0, opts.lang)
       };
     }
-    return { ok: true, ...commit4(preview3, staged, opts.skillsDir, opts.lang) };
+    return { ok: true, ...commit3(preview3, staged, opts.skillsDir, opts.lang) };
   });
 }
 async function withStaged(source, opts, fn) {
@@ -22413,7 +22754,7 @@ async function withStaged(source, opts, fn) {
       shape = existsSync(join(unpacked, SKILL_FILE)) ? "skill-dir" : "tree";
     }
     const staged = stageImport(root, staging, shape, opts.lang);
-    const preview3 = describe10(source, form, staged.skills, staged.issues, opts.existing, opts.lang);
+    const preview3 = describe11(source, form, staged.skills, staged.issues, opts.existing, opts.lang);
     if (preview3.skills.length === 0) {
       const detail = t("skill.import_empty", { path: source }, opts.lang);
       return { ok: false, reason: "empty", detail, issues: preview3.issues };
@@ -22424,7 +22765,7 @@ async function withStaged(source, opts, fn) {
     rmSync(unpacked, { recursive: true, force: true });
   }
 }
-function describe10(source, form, staged, issues, existing, lang) {
+function describe11(source, form, staged, issues, existing, lang) {
   const byName = new Map(existing.map((s) => [s.name, s.scope]));
   const entries2 = [];
   const taken = /* @__PURE__ */ new Set();
@@ -22498,7 +22839,7 @@ function digest(entries2, staged) {
   }
   return hash.digest("hex").slice(0, 32);
 }
-function commit4(preview3, staged, skillsDir, lang) {
+function commit3(preview3, staged, skillsDir, lang) {
   const byName = new Map(staged.map((s) => [s.name, s.dir]));
   const imported = [];
   const skipped = [];
@@ -23273,10 +23614,10 @@ ${extra}` : withGoal;
     return messages.reduce((sum, m) => sum + estimateTokens(m.content), 0);
   }
 };
-var FILE_VERSION4 = 1;
+var FILE_VERSION5 = 1;
 var LEVELS = ["trusted", "untrusted"];
 var SCOPES = ["directory", "directory-tree"];
-function describe11(err) {
+function describe12(err) {
   return err instanceof Error ? err.message : String(err);
 }
 function covers(base, target, scope) {
@@ -23350,7 +23691,7 @@ var TrustManager = class {
       raw = readFileSync(this.filePath, "utf-8");
     } catch (err) {
       this.loadErrors.push(
-        t("trust_gate.record_read_failed", { path: this.filePath, reason: describe11(err) })
+        t("trust_gate.record_read_failed", { path: this.filePath, reason: describe12(err) })
       );
       return;
     }
@@ -23359,7 +23700,7 @@ var TrustManager = class {
       parsed = JSON.parse(raw);
     } catch (err) {
       this.loadErrors.push(
-        t("trust_gate.record_bad_json", { path: this.filePath, reason: describe11(err) })
+        t("trust_gate.record_bad_json", { path: this.filePath, reason: describe12(err) })
       );
       return;
     }
@@ -23371,12 +23712,12 @@ var TrustManager = class {
       return;
     }
     const file = parsed;
-    if (file.version !== FILE_VERSION4) {
+    if (file.version !== FILE_VERSION5) {
       this.loadErrors.push(
         t("trust_gate.record_bad_version", {
           path: this.filePath,
           found: String(file.version),
-          expected: FILE_VERSION4
+          expected: FILE_VERSION5
         })
       );
       return;
@@ -23397,7 +23738,7 @@ var TrustManager = class {
   save() {
     mkdirSync(dirname(this.filePath), { recursive: true });
     const body2 = JSON.stringify(
-      { version: FILE_VERSION4, records: this.records },
+      { version: FILE_VERSION5, records: this.records },
       null,
       2
     );
@@ -23408,7 +23749,7 @@ var TrustManager = class {
     } catch (err) {
       rmSync(tmp, { force: true });
       throw new Error(
-        t("trust_gate.record_write_failed", { path: this.filePath, reason: describe11(err) })
+        t("trust_gate.record_write_failed", { path: this.filePath, reason: describe12(err) })
       );
     }
   }
@@ -23797,4 +24138,4 @@ function trunc(stdout, stderr) {
  *    `--tree` 的命令帮助里，让用户自己知道 `--tree` 意味着什么。
  */
 
-export { AGENT_ROLE_DIAG_MODULE, ARTIFACT_MAX_TOTAL_BYTES, ARTIFACT_RETENTION_DEFAULTS, ATTACHMENT_MAX_TOTAL_BYTES, ATTACHMENT_RETENTION_DEFAULTS, AgentLoop, ApprovalCache, BLOCKED_TOOLS, BudgetGuard, BudgetStore, CHECKPOINT_MAX_TOTAL_BYTES, CLAUDE_EVENT_NAMES, CLAUDE_TOOL_NAMES, CODE_MODE_LIMITS, CODE_MODE_SDK_TAG, CONFIG_KEYS, CURRENT_CONFIG_VERSION, CheckpointManager, CheckpointStore, CodeSandbox, ComplianceEngine, ContextCompressor, DEFAULT_COMPLIANCE_ACTIONS, DEFAULT_COMPLIANCE_SETTINGS, DEFAULT_COMPRESSION_THRESHOLD, DEFAULT_GOAL_MAX_ROUNDS, DEFAULT_MAX_HOLD_CHARS, DelegateManager, EMPTY_RULES, EPOCH_DISK_LEDGER, EpochConfigSchema, FTS_TABLES, FTS_TRIGGERS, GOAL_BLOCK_CODES, GoalService, GoalStore, HEADLESS_AUDIT_CODES, HookManager, INSTRUCTION_BUDGET_CHARS, INSTRUCTION_FILES, ImageLoadError, ImportTrustStore, LAUNCHD_LABEL_PREFIX, LOCK_HEARTBEAT_MS, LOCK_STALE_MS, LastOpenSessions, MARKETPLACE_DISPLAY_FIELDS, MARKETPLACE_FILE, MAX_AUDIT_ENTRIES, MAX_COMMAND_DEPTH, MAX_GOAL_MAX_ROUNDS, MAX_IMPORT_DEPTH, MAX_LAST_OPEN_SESSIONS, MAX_OBJECTIVE_CHARS, MAX_REASON_CHARS, MAX_RECENT_WORKSPACES, MODEL_GIVE_UP_THRESHOLD, MULTIMODAL_DEFAULTS, ManagedPolicyError, ManagedSettingsSchema, MemoryManager, ModelFailureTracker, NOMINAL_TOTAL_BYTES, NO_REVEALED_TOOLS, PACK_EXCLUDES, PACK_MAX_BYTES, PACK_MAX_FILES, PERMISSION_AUDIT_CODES, PLUGIN_LAYOUT, PLUGIN_MANIFEST_FILE, PLUGIN_MANIFEST_KEYS, PLUGIN_NAME_PATTERN, PLUGIN_ROOT_ENV, PLUGIN_ROOT_TOKEN, PLUGIN_VISIBILITY, POLICY_DECISIONS, PROBE_VERSION, PROJECT_AGENTS_SUBDIR, PROVIDER_NO_CREDENTIAL, PermissionManager, PlanModeState, PluginAuthorSchema, PluginStore, PolicyRuleSchema, ProviderError, ProviderRouter, RECORDING_KEEP_RUNS, RECORDING_MAX_BYTES, ROLE_FRONTMATTER_SCHEMA, RUN_CODE_TOOL, RecentWorkspaces, SANDBOX_COVERS, SANDBOX_EXCLUDES, SCALAR_KEYS, SCHEDULE_DEFAULTS, SCHEDULE_DEFAULT_ALLOWLIST, SCHEDULE_FORM_BUDGET_USD, SCHEDULE_ISSUE_CODES, SCHTASKS_FOLDER, SESSION_MESSAGES_READ_TOOL, SESSION_MESSAGES_SEARCH_TOOL, SESSION_QUERY_TOOLS, SESSION_SEARCH_TOOL, SESSION_TRACE_TOOL, SETTINGS_LAYER_ORDER, SETTING_WRITE_KEYS, SETTING_WRITE_LAYERS, SKILL_CREATE_TOOL, SKILL_EDIT_TOOL, SKILL_PATCH_TOOL, SKILL_VIEW_TOOL, SKILL_WRITE_FILE_TOOL, SLASH_COMMANDS_DIAG_MODULE, ScheduleRecorder, ScheduleRegistrar, ScheduleStore, SessionManager, SessionQueries, SessionReferences, SettingsFileError, SettingsFileSchema, SkillLearner, SkillSystem, TOOL_SEARCH_TOOL, TaskNoticeTracker, ToolRegistry, TrackerDB, TrustManager, Workspace, acquireScheduleLock, addMarketplace, addUsage, admitArtifact, admitArtifacts, affectedPaths, artifactLaunchArgv, artifactOpenRefusal, assertLevelAllowed, blockedRoleTools, buildContextBreakdown, buildFireArgv, buildFtsMatchQuery, buildSchemaExports, buildSystemPrompt, buildTrigramMatchQuery, builtinRoles, checkEpochVersion, checkFtsHealth, checkShadowing, classifyPersistFailure, classifyProviderError, clearModelCache, coalesceRecording, codeModeWorkerPath, commandNameFromRelPath, compileRuleLists, compressionOptions, computeCost, computeCostMicros, computeExecHash, countRules, createAllowAllGate, createAllowAllImportGate, createAskQuestionTool, createCodeExecTool, createDelegateTool, createDenyAllGate, createDenyAllImportGate, createGoalTool, createImportGate, createMemoryTool, createPlanModeTools, createRoleFile, createRoleScope, createRunCodeTool, createScheduleDraftTool, createSessionMessagesReadTool, createSessionMessagesSearchTool, createSessionSearchTool, createSessionSearchTools, createSessionTraceTool, createSkillViewTool, createSkillWriteTools, createTodoTool, createToolRevealState, createToolScope, createToolSearchTool, createTrustGate, currentEpochVersion, decideImport, decideTrust, defaultConfig, defaultModelOf, describeArtifactRefusal, describeBackgroundTask, describeHeadlessPolicy, describeIsolation, describeJsonError, diagnoseSchedules, discoverMarkdown, discoverModels, discoverProject, displayAllows, displayCurrency, draftCommandLine, draftWidening, escapeRuleContent, estimateImageTokens, estimateRunTokens, estimateTokens, evaluateSelection, expandCommand, expandImports, explainSetting, extractArchive, findInstructionFiles, findProjectInstructions, findRole, formatBytes, formatSkillIndex, formatUsd, gateForTool, getCapability, getConfigIssues, getConfigOrigins, getImportGate, getTrustGate, hasDedicatedExecContent, hasExecTierContent, hasPromptCaching, hasProviderCredentials, hasReadTierContent, imageFromBase64, imageFromPath, imagePartTokens, importParts, importSkills, installPlugin, instructionDirs, instructionNotices, intervalSlots, inventoryProjectExtensions, inventoryTotal, isBlockCode, isCodeModeDeferred, isEmptyRules, isGoalPhase, isNonInteractive, isReadOnlySubCall, isSettingWriteLayer, isTransientPersistFailure, isValidPluginName, isWithinWindow, isWritableSettingKey, labelSlug, layerRank, listRunningSchedules, listSessionCandidates, listWorkspaceFiles, loadCommandDefinitions, loadCommandFile, loadCommands, loadConfig, loadHookSources, loadKeybindings, loadLexiconDir, loadLexiconFiles, loadPlugins, loadPolicyFiles, loadPolicyRules, loadRoleDefinitions, loadRoleDir, loadedImports, localDateString, managedSwitchNotes, mapClaudeToolName, mapEpochToolName, mapOperationType, matchPreauthorization, matchRuleLists, matchesHook, mentionsPluginRoot, mergeHeadlessPolicy, mergeRoles, mergeSchedulePatch, microsToUsd, modelListCandidates, needsAllowlist, nextFallbackModel, nextRunAt, noConfigOrigins, noManagedPolicy, noPlugins, openArtifact, originOf, packFileName, packPlugin, parseClaudeSettingsHooks, parseClock, parseDate, parseFrontmatter, parseHooksConfig, parseHooksConfigVerbose, parseImportLine, parseModelList, parseRoleDefinition, parseScheduleDraft, parseSkillFrontmatter, parseTrigger, pendingImageTokens, persistFailureCode, persistParts, persistToolResults, persistedUsage, planPack, previewSkillImport, pricingFor, projectEntryForDisplay, pruneArtifacts, pruneAttachments, pruneRecordings, pruneSchedules, readImageSize, readMarketplaces, readPluginManifest, readPluginRecords, readProviderKeyEnv, readRecording, readSessionSurface, reclaimFtsSpace, redactLine, refreshOpenRouterMetadata, removeMarketplace, removeRecordings, removeRoleFile, removeSessionArtifacts, removeSessionAttachments, renderImportTree, renderProjectContext, renderSdkDeclaration, renderSelfIndex, repairSchedules, resolveArtifactRetention, resolveCodeModeWorker, resolveComplianceDirs, resolveEntrySource, resolveInWorkspace, resolveMarketplaceRef, resolveMentions, resolveMultimodalPolicy, resolvePolicyDirs, resolvePricingAt, resolveProjectRoot, resolveScheduleBackend, resolveSessionReference, resolveSessionVisibility, resolveSettings, resolveSkillDirs, resolveSource, resolveTar, resolveWorkspace, restoreParts, revealScopedProvider, roleScopedProvider, roleSourceLabel, ruleCovers, ruleFromString, ruleToString, runCode, runCommand2 as runCommand, sanitizeArgNames, sanitizeCommand, sanitizeFtsQuery, sanitizePath, sanitizeToolOutput, scanInstructions, scanPluginDir, scanSkillDirs, searchMarketplaces, setDisplayCurrency, setImportGate, setPluginEnabled, setTrustGate, settingValueChoices, settingValueKind, settingWriteApply, settingWriteLayers, settingWriteTargets, skillIndexDescription, skillIndexResidency, skillIndexStats, sniffMediaType, splitFrontmatter, staticToolProvider, stripArtifactData, substitutePluginRoot, suggestRuleFromApproval, systemOpenArgv, systemPromptSegments, toPosix, toolDefinitionTokens, toolMatches, toolTableTokens, totalTokens, traceSession, triggerPeriodMs, unescapeRuleContent, uninstallPlugin, unknownRoleSkills, unknownRoleTools, unloadedInstructionFiles, updateMarketplace, updatePlugin, usdToMicros, validateSchedule, validateTrigger, validateWindow, withGoalCompression, withGoalPrompt, workspaceDisplayPath, writeSettingValue };
+export { AGENT_ROLE_DIAG_MODULE, ARTIFACT_MAX_TOTAL_BYTES, ARTIFACT_RETENTION_DEFAULTS, ATTACHMENT_MAX_TOTAL_BYTES, ATTACHMENT_RETENTION_DEFAULTS, AgentLoop, AppearanceStore, ApprovalCache, BLOCKED_TOOLS, BudgetGuard, BudgetStore, CHECKPOINT_MAX_TOTAL_BYTES, CLAUDE_EVENT_NAMES, CLAUDE_TOOL_NAMES, CODE_MODE_LIMITS, CODE_MODE_SDK_TAG, CONFIG_KEYS, CURRENT_CONFIG_VERSION, CheckpointManager, CheckpointStore, CodeSandbox, ComplianceEngine, ContextCompressor, DEFAULT_COMPLIANCE_ACTIONS, DEFAULT_COMPLIANCE_SETTINGS, DEFAULT_COMPRESSION_THRESHOLD, DEFAULT_GOAL_MAX_ROUNDS, DEFAULT_MAX_HOLD_CHARS, DelegateManager, EMPTY_RULES, EPOCH_DISK_LEDGER, EpochConfigSchema, FTS_TABLES, FTS_TRIGGERS, GOAL_BLOCK_CODES, GoalService, GoalStore, HEADLESS_AUDIT_CODES, HookManager, INSTRUCTION_BUDGET_CHARS, INSTRUCTION_FILES, ImageLoadError, ImportTrustStore, LAUNCHD_LABEL_PREFIX, LOCK_HEARTBEAT_MS, LOCK_STALE_MS, LastOpenSessions, MARKETPLACE_DISPLAY_FIELDS, MARKETPLACE_FILE, MAX_AUDIT_ENTRIES, MAX_COMMAND_DEPTH, MAX_GOAL_MAX_ROUNDS, MAX_IMPORT_DEPTH, MAX_LAST_OPEN_SESSIONS, MAX_OBJECTIVE_CHARS, MAX_REASON_CHARS, MAX_RECENT_WORKSPACES, MODEL_GIVE_UP_THRESHOLD, MULTIMODAL_DEFAULTS, ManagedPolicyError, ManagedSettingsSchema, MemoryManager, ModelFailureTracker, NOMINAL_TOTAL_BYTES, NO_REVEALED_TOOLS, PACK_EXCLUDES, PACK_MAX_BYTES, PACK_MAX_FILES, PERMISSION_AUDIT_CODES, PLUGIN_LAYOUT, PLUGIN_MANIFEST_FILE, PLUGIN_MANIFEST_KEYS, PLUGIN_NAME_PATTERN, PLUGIN_ROOT_ENV, PLUGIN_ROOT_TOKEN, PLUGIN_VISIBILITY, POLICY_DECISIONS, PROBE_VERSION, PROJECT_AGENTS_SUBDIR, PROVIDER_NO_CREDENTIAL, PermissionManager, PlanModeState, PluginAuthorSchema, PluginStore, PolicyRuleSchema, ProviderError, ProviderRouter, RECORDING_KEEP_RUNS, RECORDING_MAX_BYTES, ROLE_FRONTMATTER_SCHEMA, RUN_CODE_TOOL, RecentWorkspaces, SANDBOX_COVERS, SANDBOX_EXCLUDES, SCALAR_KEYS, SCHEDULE_DEFAULTS, SCHEDULE_DEFAULT_ALLOWLIST, SCHEDULE_FORM_BUDGET_USD, SCHEDULE_ISSUE_CODES, SCHTASKS_FOLDER, SESSION_MESSAGES_READ_TOOL, SESSION_MESSAGES_SEARCH_TOOL, SESSION_QUERY_TOOLS, SESSION_SEARCH_TOOL, SESSION_TRACE_TOOL, SETTINGS_LAYER_ORDER, SETTING_WRITE_KEYS, SETTING_WRITE_LAYERS, SKILL_CREATE_TOOL, SKILL_EDIT_TOOL, SKILL_PATCH_TOOL, SKILL_VIEW_TOOL, SKILL_WRITE_FILE_TOOL, SLASH_COMMANDS_DIAG_MODULE, ScheduleRecorder, ScheduleRegistrar, ScheduleStore, SessionManager, SessionQueries, SessionReferences, SettingsFileError, SettingsFileSchema, SkillLearner, SkillSystem, TOOL_SEARCH_TOOL, TaskNoticeTracker, ToolRegistry, TrackerDB, TrustManager, Workspace, acquireScheduleLock, addMarketplace, addUsage, admitArtifact, admitArtifacts, affectedPaths, artifactLaunchArgv, artifactOpenRefusal, assertLevelAllowed, blockedRoleTools, buildContextBreakdown, buildFireArgv, buildFtsMatchQuery, buildSchemaExports, buildSystemPrompt, buildTrigramMatchQuery, builtinRoles, checkEpochVersion, checkFtsHealth, checkShadowing, classifyPersistFailure, classifyProviderError, clearModelCache, coalesceRecording, codeModeWorkerPath, commandNameFromRelPath, compileRuleLists, compressionOptions, computeCost, computeCostMicros, computeExecHash, countRules, createAllowAllGate, createAllowAllImportGate, createAskQuestionTool, createCodeExecTool, createDelegateTool, createDenyAllGate, createDenyAllImportGate, createGoalTool, createImportGate, createMemoryTool, createPlanModeTools, createRoleFile, createRoleScope, createRunCodeTool, createScheduleDraftTool, createSessionMessagesReadTool, createSessionMessagesSearchTool, createSessionSearchTool, createSessionSearchTools, createSessionTraceTool, createSkillViewTool, createSkillWriteTools, createTodoTool, createToolRevealState, createToolScope, createToolSearchTool, createTrustGate, currentEpochVersion, decideImport, decideTrust, defaultConfig, defaultModelOf, describeArtifactRefusal, describeBackgroundTask, describeHeadlessPolicy, describeIsolation, describeJsonError, diagnoseSchedules, discoverMarkdown, discoverModels, discoverProject, displayAllows, displayCurrency, draftCommandLine, draftWidening, escapeRuleContent, estimateImageTokens, estimateRunTokens, estimateTokens, evaluateSelection, expandCommand, expandImports, explainSetting, extractArchive, findInstructionFiles, findProjectInstructions, findRole, formatBytes, formatSkillIndex, formatUsd, gateForTool, getCapability, getConfigIssues, getConfigOrigins, getImportGate, getTrustGate, hasDedicatedExecContent, hasExecTierContent, hasPromptCaching, hasProviderCredentials, hasReadTierContent, imageFromBase64, imageFromPath, imagePartTokens, importParts, importSkills, installPlugin, instructionDirs, instructionNotices, intervalSlots, inventoryProjectExtensions, inventoryTotal, isBlockCode, isCodeModeDeferred, isEmptyRules, isGoalPhase, isNonInteractive, isReadOnlySubCall, isSettingWriteLayer, isTransientPersistFailure, isValidPluginName, isWithinWindow, isWritableSettingKey, labelSlug, layerRank, listRunningSchedules, listSessionCandidates, listWorkspaceFiles, loadCommandDefinitions, loadCommandFile, loadCommands, loadConfig, loadHookSources, loadKeybindings, loadLexiconDir, loadLexiconFiles, loadPlugins, loadPolicyFiles, loadPolicyRules, loadRoleDefinitions, loadRoleDir, loadedImports, localDateString, managedSwitchNotes, mapClaudeToolName, mapEpochToolName, mapOperationType, matchPreauthorization, matchRuleLists, matchesHook, mentionsPluginRoot, mergeHeadlessPolicy, mergeRoles, mergeSchedulePatch, microsToUsd, modelListCandidates, needsAllowlist, nextFallbackModel, nextRunAt, noConfigOrigins, noManagedPolicy, noPlugins, openArtifact, originOf, packFileName, packPlugin, parseClaudeSettingsHooks, parseClock, parseDate, parseFrontmatter, parseHooksConfig, parseHooksConfigVerbose, parseImportLine, parseModelList, parseRoleDefinition, parseScheduleDraft, parseSkillFrontmatter, parseTrigger, pendingImageTokens, persistFailureCode, persistParts, persistToolResults, persistedUsage, planPack, previewSkillImport, pricingFor, projectEntryForDisplay, pruneArtifacts, pruneAttachments, pruneRecordings, pruneSchedules, readImageSize, readMarketplaces, readPluginManifest, readPluginRecords, readProviderKeyEnv, readRecording, readSessionSurface, reclaimFtsSpace, redactLine, refreshOpenRouterMetadata, removeMarketplace, removeRecordings, removeRoleFile, removeSessionArtifacts, removeSessionAttachments, renderImportTree, renderProjectContext, renderSdkDeclaration, renderSelfIndex, repairSchedules, resolveArtifactRetention, resolveCodeModeWorker, resolveComplianceDirs, resolveEntrySource, resolveInWorkspace, resolveMarketplaceRef, resolveMentions, resolveMultimodalPolicy, resolvePolicyDirs, resolvePricingAt, resolveProjectRoot, resolveScheduleBackend, resolveSessionReference, resolveSessionVisibility, resolveSettings, resolveSkillDirs, resolveSource, resolveTar, resolveWorkspace, restoreParts, revealScopedProvider, roleScopedProvider, roleSourceLabel, ruleCovers, ruleFromString, ruleToString, runCode, runCommand2 as runCommand, sanitizeArgNames, sanitizeCommand, sanitizeFtsQuery, sanitizePath, sanitizeToolOutput, scanInstructions, scanPluginDir, scanSkillDirs, searchMarketplaces, setDisplayCurrency, setImportGate, setPluginEnabled, setTrustGate, settingValueChoices, settingValueKind, settingWriteApply, settingWriteLayers, settingWriteTargets, skillIndexDescription, skillIndexResidency, skillIndexStats, sniffMediaType, splitFrontmatter, staticToolProvider, stripArtifactData, substitutePluginRoot, suggestRuleFromApproval, systemOpenArgv, systemPromptSegments, toPosix, toolDefinitionTokens, toolMatches, toolTableTokens, totalTokens, traceSession, triggerPeriodMs, unescapeRuleContent, uninstallPlugin, unknownRoleSkills, unknownRoleTools, unloadedInstructionFiles, updateMarketplace, updatePlugin, usdToMicros, validateSchedule, validateTrigger, validateWindow, withGoalCompression, withGoalPrompt, workspaceDisplayPath, writeSettingValue };