@epoch-agent/core 0.22.0 → 0.23.0

package/dist/index.d.ts

@@ -1,5 +1,5 @@
-import { ToolProvider, EpochTool, EpochPlugin, ToolExposure, EpochSkill, HookType, EpochHook, PluginContext, QuestionRequest, QuestionAnswer, ComplianceCategory, ComplianceAction, ToolArtifactInput, ToolArtifact, TrustLevel, TrustManager as TrustManager$1, TokenUsage, EpochConfig, BudgetBreach, NoticeCode, ProviderType, EpochMessage, JsonSchema, ModelSelection, BackgroundTaskInfo, EpochToolCall, Telemetry, HookManager as HookManager$1, Lang, PermissionManager as PermissionManager$1, ApprovalRequest, ApprovalReply, AgentRoleScope, AgentRoleSource, EpochUserContent, EpochContentPart, AgentRole, PermissionLevel, PlanProposal, ScheduleDefinition, DiagnosticSink, CustomCommandDef, ModelRef, ExpandedCommand, CustomCommandSource, ContextBreakdown, WireMcpConnector, AgentEvent, SelectionContext, SetSelectionResult, MoneyDigits, CurrencyDisplay, PermissionRuleLists, KeybindingTable, Diagnostic, KeybindingReport, FileOmitReason, SessionOmitReason, EpochToolResult, EpochTurnFacts, LocalizedDetail, OperationType, RuleValue, Operation, ApprovalOutcome, PermissionDecision, ScheduleTrigger, ScheduleAllowlist, ScheduleBackendKind, ScheduleRunStatus, ScheduleRun, SchedulePendingApproval, ScheduleDraft, ScheduleWideningKind, WireAgentEvent, WireAgentEnvelope, ScheduleRunnerSpec, HookEvent, LogFn, HookRegistration, HookHandler, HookContext, VerifyResult, EpochFilePart, EpochSessionPart, MentionSet, EpochImagePart, TrustExecGrant, DecidedTrustLevel, TrustScope, TrustGrant, TrustRecord } from '@epoch-agent/protocol';
-export { API_KEY_ENV_VARS, AgentEvent, AgentEventOf, AgentEventType, ApprovalAnswer, ApprovalOutcome, ApprovalReply, ApprovalRequest, BudgetBreach, COMPLIANCE_ACTIONS, COMPLIANCE_CATEGORIES, ComplianceAction, ComplianceCategory, DecidedTrustLevel, EpochConfig, EpochHook, EpochPlugin, EpochSkill, EpochTool, FinishReason, HookContext, HookEvent, HookHandler, HookRegistration, HookType, HookManager as IHookManager, PermissionManager as IPermissionManager, TrustManager as ITrustManager, JsonSchema, MAX_ATTACH_BYTES, MAX_ATTACH_FILES, MAX_ATTACH_TOTAL_BYTES, MAX_SESSION_ATTACH_BYTES, MAX_SESSION_REFS, OPERATION_TYPES, Operation, OperationType, PERMISSION_LEVELS, PLAN_OUTCOMES, PROVIDER_INFOS, PROVIDER_TYPES, PermissionDecision, PermissionLevel, PlanApprovalOutcome, PlanProposal, PluginContext, ProviderInfo, ProviderType, TokenUsage, ToolContext, ToolDefinition, ToolExposure, ToolResult, TrustExecGrant, TrustGrant, TrustLevel, TrustRecord, TrustScope, TrustTier, VerifyResult, apiKeyEnvVar, extractAllMentions, extractMentions, extractSessionMentions, getProviderInfo, isOperationType, isPermissionLevel, isPlanOutcome, isProviderType, normalizeApproval } from '@epoch-agent/protocol';
+import { ToolProvider, EpochTool, EpochPlugin, ToolExposure, EpochSkill, HookType, EpochHook, PluginContext, QuestionRequest, QuestionAnswer, ComplianceCategory, ComplianceAction, ToolArtifactInput, ToolArtifact, TrustLevel, TrustManager as TrustManager$1, TokenUsage, EpochConfig, BudgetBreach, NoticeCode, ProviderType, EpochMessage, JsonSchema, ModelSelection, BackgroundTaskInfo, EpochToolCall, Telemetry, HookManager as HookManager$1, Lang, PermissionManager as PermissionManager$1, ApprovalRequest, ApprovalReply, AgentRoleScope, AgentRoleSource, EpochUserContent, EpochContentPart, AgentRole, PermissionLevel, PlanProposal, ScheduleDefinition, DiagnosticSink, CustomCommandDef, ModelRef, ExpandedCommand, CustomCommandSource, ContextBreakdown, WireMcpConnector, AgentEvent, SelectionContext, SetSelectionResult, MoneyDigits, CurrencyDisplay, PermissionRuleLists, KeybindingTable, Diagnostic, KeybindingReport, FileOmitReason, SessionOmitReason, EpochToolResult, EpochTurnFacts, LocalizedDetail, ApprovalScope, OperationType, RuleValue, Operation, ApprovalOutcome, PermissionDecision, ScheduleTrigger, ScheduleAllowlist, ScheduleBackendKind, ScheduleRunStatus, ScheduleRun, SchedulePendingApproval, ScheduleDraft, ScheduleWideningKind, WireAgentEvent, WireAgentEnvelope, ScheduleRunnerSpec, HookEvent, LogFn, HookRegistration, HookHandler, HookContext, VerifyResult, EpochFilePart, EpochSessionPart, MentionSet, EpochImagePart, TrustExecGrant, DecidedTrustLevel, TrustScope, TrustGrant, TrustRecord } from '@epoch-agent/protocol';
+export { API_KEY_ENV_VARS, AgentEvent, AgentEventOf, AgentEventType, ApprovalAnswer, ApprovalOutcome, ApprovalReply, ApprovalRequest, ApprovalScope, BudgetBreach, COMPLIANCE_ACTIONS, COMPLIANCE_CATEGORIES, ComplianceAction, ComplianceCategory, DecidedTrustLevel, EpochConfig, EpochHook, EpochPlugin, EpochSkill, EpochTool, FinishReason, HookContext, HookEvent, HookHandler, HookRegistration, HookType, HookManager as IHookManager, PermissionManager as IPermissionManager, TrustManager as ITrustManager, JsonSchema, MAX_ATTACH_BYTES, MAX_ATTACH_FILES, MAX_ATTACH_TOTAL_BYTES, MAX_SESSION_ATTACH_BYTES, MAX_SESSION_REFS, OPERATION_TYPES, Operation, OperationType, PERMISSION_LEVELS, PLAN_OUTCOMES, PROVIDER_INFOS, PROVIDER_TYPES, PermissionDecision, PermissionLevel, PlanApprovalOutcome, PlanProposal, PluginContext, ProviderInfo, ProviderType, TokenUsage, ToolContext, ToolDefinition, ToolExposure, ToolResult, TrustExecGrant, TrustGrant, TrustLevel, TrustRecord, TrustScope, TrustTier, VerifyResult, apiKeyEnvVar, extractAllMentions, extractMentions, extractSessionMentions, getProviderInfo, isOperationType, isPermissionLevel, isPlanOutcome, isProviderType, normalizeApproval } from '@epoch-agent/protocol';
 import { IsolationBackend, SqliteDatabase, ParseIssue, ShellFlavor } from '@epoch-agent/infra';
 export { BubblewrapOptions, DangerMatch, IS_WINDOWS, IsolationBackend, IsolationOptions, LogLevel, SeatbeltOptions, WINDOWS_HIDE_FLAGS, buildBwrapArgs, buildProfile, checkDangerousCommand, checkObfuscation, createLogger, detectBackend, getDefaultShell, getPythonCommand, isInWorkspace, isReadOnlyCommand, isolate, maskApiKey, probeBubblewrap, probeSeatbelt, complianceDir as resolveComplianceDir, policiesDir as resolvePoliciesDir, setLogLevel } from '@epoch-agent/infra';
 import { z } from 'zod';
@@ -3020,6 +3020,22 @@ interface AgentConfig {
      */
     role?: () => {
         name: string;
+        /**
+         * 给人看的称呼（`AgentRole.displayName`，2026-10-08）。**缺省回落
+         * `name`**（判据在 protocol 的 `AgentRole.displayName` 上）。
+         *
+         * 消费点只有两个，都在这一格的叙述半径内：身份行那一句
+         * （`message-utils.ts` 的 `identityLine()`）和 `run-start` 那枚徽标。
+         *
+         * ⚠️ **同下面 `source`：纯展示，引擎一处都不许据此分叉。** 它当不了
+         * 标识 —— `delegate_task` 的取值、同名合并的 key、`--agent` 的取值
+         * 用的全是 `name`，这一格换了它们一个都不动。
+         *
+         * 拿不到就不给（没写过 `displayName` 的角色）。**别在这一层拿 `name`
+         * 兜底**：填一个等于 `name` 的值会让「他有没有自己的称呼」这件事在
+         * 这一格上消失，而 `run-start` 那边的投影正是按有没有来分叉的。
+         */
+        displayName?: string;
         prompt?: string;
         /**
          * 这一份角色是谁在扮演。**缺省 `'delegate'`** —— 那是这个字段出现之前
@@ -5907,6 +5923,7 @@ declare function createTodoTool(db: TrackerDB): EpochTool;
  * ```markdown
  * ---
  * name: explore
+ * displayName: 检索
  * description: 只读检索。找文件、找符号、回答"X 在哪实现的"
  * tools: [file_read, file_multi_read, file_list, file_search]
  * maxTurns: 8
@@ -5971,6 +5988,7 @@ declare const AGENT_ROLE_DIAG_MODULE = "AgentRole";
  */
 declare const ROLE_FRONTMATTER_SCHEMA: z.ZodObject<{
     name: z.ZodOptional<z.ZodString>;
+    displayName: z.ZodOptional<z.ZodString>;
     description: z.ZodString;
     tools: z.ZodOptional<z.ZodArray<z.ZodString>>;
     skills: z.ZodOptional<z.ZodArray<z.ZodString>>;
@@ -6103,8 +6121,15 @@ interface RoleMergeResult {
  * 就换个名字（换了名字也仍然受 `roleScopedProvider` 的父可用集约束，
  * 所以这不是一个绕过口子，只是让「叫 explore 的东西一定只读」成立）。
  *
- * `prompt` / `description` / `maxTurns` 允许整体替换 —— 它们是文案和预算，
- * 不是边界。
+ * `prompt` / `description` / `maxTurns` / `displayName` 允许整体替换 —— 它们是文案、
+ * 预算和称呼，不是边界。
+ *
+ * ⚠️ **`displayName` 不写就沿用被覆盖的那一份**（下面 `...existing` 那个展开）。
+ * 内置三个现在都带展示名，所以一份只改了 prompt 的 `explore.md` 在屏幕上仍然是
+ * 「检索」。这是**刻意**的，和 `description` 一条口径：同名就是同一个角色，
+ * 覆盖方只改它关心的那几格，其余的跟着原样；要换称呼就自己写一行 `displayName:`。
+ * （反过来的代价是：一个项目级 `explore` 如果完全是另一回事，屏幕上仍然叫
+ * 「检索」—— 那种情况正确动作是换个名字，不是靠展示名区分。）
  *
  * @param overrides 外部定义，按优先级**从低到高**排列（user 在前，project 在后）
  */
@@ -6183,18 +6208,34 @@ declare function roleSourceLabel(source: AgentRoleSource): string;
  */
 
 /**
- * 要建的那一份。**六格和 frontmatter 逐格对上**（`name` / `description` /
- * `tools` / `skills` / `maxTurns` 五个键 + 正文就是 `prompt`），一格不多。
+ * 要建的那一份。**和 frontmatter 逐格对上，一格不多**（`name` / `description` /
+ * `displayName` / `tools` / `skills` / `maxTurns` 六个键 + 正文就是 `prompt`）。
  *
  * > ⚠️ **`skills` 是 2026-08-27 补的，而补它的那一轮同时补了界面上那一格。**
  * > 2026-08-26 加 `AgentRole.skills` 时这里刻意没加，理由逐字是「加了就是一个
  * > 界面写得出、引擎读得到、但**没有一张表单会填它**的字段」——
- * > 那条理由现在被满足了，不是被推翻了。往这里加第七格的人照旧受它约束：
+ * > 那条理由现在被满足了，不是被推翻了。往这里加一格的人照旧受它约束：
  * > 要么连写口一路加到界面，要么别加。
+ * >
+ * > 📮 **2026-10-08 的 `displayName` 是照那条规矩加的第三例**：读口、
+ * > 这一份、wire 请求体、`role-add.tsx` 那张表单、两条 catalog 文案，同一天一起落。
+ * > 「六个键」这个数是那天起的，**别拿它当门禁** —— 真源是
+ * > `ROLE_FRONTMATTER_SCHEMA` 的 `shape`。
  */
 interface RoleCreateInput {
     /** slug，`[a-z0-9-]`。同时是文件名（`<name>.md`）和 `delegate_task` 的 `role` 取值 */
     name: string;
+    /**
+     * 给人看的称呼（2026-10-08）。**不给 = 回落 `name`**。
+     *
+     * ⚠️ 它**不参与任何标识语义**：不改文件名、不进 `delegate_task` 的取值、
+     * 不参与同名合并。判据和分工在 protocol 的 `AgentRole.displayName` 上。
+     *
+     * 空串 / 全空白 = 没写这一格（整个不发）—— 判据同下面 `tools` 那一格：
+     * 写一个空串进去是替他做了一个他没做过的表态，而读口那边 `min(1)` 会**整份
+     * 拒掉这个角色**，两份口径在这儿劈叉的表现是「建好了但列表里没有它」。
+     */
+    displayName?: string;
     /** 给**主 agent** 看的「什么时候该派给我」。缺了它读口会整份跳过这个角色 */
     description: string;
     /** 角色段正文。空着 = 这份 md 只有 frontmatter，那是合法的一档 */
@@ -8094,6 +8135,15 @@ interface InstallDependency {
     source?: string;
     /** `unresolved` 的原因，给人看 */
     reason?: string;
+    /**
+     * 给人看的名字（清单里的 `displayName`）。
+     *
+     * ⚠️ **两档有、一档没有**：`plan` 从刚取回来的那份清单里拿，`installed` 从那个
+     * 已装目录现读一份；`unresolved` 那个包压根没取到，所以那一档没有。
+     * ⚠️ 它是**可选**的（`ManifestSchema.displayName` 本来就可选），所以界面得分开
+     * 「没有」和「有」—— 拿标识串顶上去假装有，用户看到的是「b-kit（b-kit）」。
+     */
+    displayName?: string;
     /** `plan` 专有：这个包自己的清单 */
     manifest?: PluginManifest;
     /** `plan` 专有：它会带来什么（那一屏照根那一份的画法画） */
@@ -9224,6 +9274,7 @@ interface SystemPromptParams {
     date: string;
     role?: {
         name: string;
+        displayName?: string;
         prompt?: string;
         scope?: AgentRoleScope;
     };
@@ -15239,12 +15290,7 @@ type ApprovalDecision = 'deny' | 'allow-once' | 'allow-always' | 'allow-session'
  * 变的只有「**存下来之后**那一格可能是什么」。
  */
 type CachedDecision = Exclude<ApprovalDecision, 'allow-once'>;
-/** 授权范围 */
-type ApprovalScope = 
-/** 只对这一个目标生效（默认） */
-'exact'
-/** 对该目录及其子树生效——只有用户明确选择时才用 */
- | 'prefix';
+
 /** 单条审批缓存储存 */
 interface CachedApproval {
     id: string;
@@ -15479,9 +15525,15 @@ declare const MAX_AUDIT_ENTRIES = 500;
  * | ------------- | -------------------------------------------------- |
  * | `bypass`      | 全放行 —— 但**挡不住第 1 层那两条 deny**，那层在前面 |
  * | `auto`        | 信任 agent：这一档自己不拦，边界全在第 1 层         |
- * | `plan`        | 只读：写入 / 命令 / 网络 / 执行代码一律拒           |
+ * | `plan`        | 只读：写入 / 命令 / 网络 / 执行代码一律拒；区外**读**要问 |
  * | `acceptEdits` | 同 `auto`，但**工作区外的文件**要确认               |
- * | `default`     | 只读操作免确认，其余一律确认                       |
+ * | `default`     | 只读操作免确认（**工作区外的读除外**），其余一律确认 |
+ *
+ * ⚠️ **「工作区外」那一格是 `plan` / `default` / `acceptEdits` 三档共用的**
+ * （2026-10-08）：`auto` / `bypass` 放行，其余三档问一句，判据在
+ * {@link outsideWorkspace} 上。**档位管的是「问了之后算不算数」，不是「要不要问」**
+ * —— 而「算不算数」由权限层算出来的 `grantedPaths` 兑现，工具层照它放行
+ * （判据在 protocol 的 `ToolContext.grantedPaths` 上）。
  *
  * ⚠️ 这一层**只负责「没有规则命中时怎么办」**。它给出的 allow 不是最终答案 ——
  * 回到 `check()` 之后还要过第 3 层 headless 预授权。
@@ -16114,6 +16166,100 @@ declare class PermissionManager implements PermissionManager$1 {
 type OperationSource = Pick<EpochTool, 'name'> & Partial<Pick<EpochTool, 'operation' | 'annotations'>>;
 declare function mapOperationType(toolName: string): OperationType;
 
+/**
+ * 「这一次放行了工作区外的哪些路径」—— 权限层给工具层的那**唯一一个答案**
+ * （2026-10-08）。
+ *
+ * ## 它要解决的是哪一件事
+ *
+ * 边界这回事在 2026-10-08 之前有三处各说各话：
+ *
+ *   - 权限层按档位判「要不要问」（`by-level.ts`）；
+ *   - 工具层（`plugin-file` / `plugin-terminal`）自己判「越界就拒」；
+ *   - 两者**互相看不见**，于是 `acceptEdits` 下用户点了「允许」，工具层照旧
+ *     抛 `PathEscapeError` —— 那次批准批的是权限层，管不到工具层那道闸。
+ *
+ * 治法不是让工具层也去读档位（那是第二张档位表，分叉了同样没人抓得到），
+ * 而是**权限层把结论算出来交下去**：这个函数算出「这次操作涉及、且在工作区外
+ * 的路径」，`tool-executor` 把它填进 `ToolContext.grantedPaths`，工具层拿它当
+ * 额外的根用（判据在 protocol 的 `ToolContext.grantedPaths` 上）。
+ *
+ * ## ⚠️ 它是纯计算，但**不是纯函数** —— 它读文件系统
+ *
+ * {@link approvalRootFor} 要 `statSync` 一下才知道某个目标是目录还是文件，
+ * 而这一下决定放开的范围差一整层。所以别把它塞进 `by-level.ts`（那个文件的
+ * 文件头写着「纯函数：只看级别 + 这次操作 + 沙箱」，而且它自己已经很长）。
+ *
+ * ## 为什么按「目录」放行，而不是精确到那一个文件
+ *
+ * 2026-10-08 用户拍的：**批准一次 = 打开这个目标所在的那一层**。理由是一次点击
+ * 换来的是「这个目录别再问了」，而精确到文件的话，同一个目录读第二个文件要再点
+ * 一次 —— 那正是弹窗疲劳的成因（`ruleAskActive` 的 JSDoc 里那句「会让用户学会
+ * 闭眼点允许」是同一个判据）。
+ *
+ * 规则的形状**不按工具名写死**，只问一句「这个目标是不是一个已经存在的目录」：
+ *
+ * | 目标                        | 放开的根        |
+ * | --------------------------- | --------------- |
+ * | `file_write('/out/a.txt')`  | `/out`          |
+ * | `file_list('/out')`         | `/out`（不是 `/`） |
+ * | `file_read('/out/a/b.txt')` | `/out/a`        |
+ *
+ * 按工具名写死（「`file_list` 的目标是目录、`file_write` 的是文件」）会漏掉
+ * `file_read` 读目录里任何一个文件这一族，而漏掉的表现是**静默地少放一格**。
+ */
+/**
+ * 这次调用要放行的工作区外路径 —— 已经按「目录」展开过，供
+ * `ToolContext.grantedPaths` 直接使用。
+ *
+ * @param args 工具参数原文。路径从 `affectedPaths()` 抽（`path` / `paths` /
+ *   `files` / V4A 补丁头），**和检查点快照用的是同一份抽取** —— 「这次调用会碰
+ *   哪些文件」只该有一个答案，两份分头实现的下场是「快照覆盖到 3 个、
+ *   放行的却是另外 5 个」
+ * @param workDir 主根
+ * @param extraRoots `--add-dir` 的额外根。**它们里的路径不算「工作区外」**，
+ *   所以不进 grantedPaths（进了也不出错，但会让这个字段名不副实）
+ * @returns 去重后的绝对路径列表。**在工作区内、或抽不出路径时是空数组** ——
+ *   空数组和 undefined 在 `ToolContext` 上是两回事（后者 = 宿主没实现这一格）
+ */
+declare function grantedPathsFor(args: Record<string, unknown>, workDir: string, extraRoots?: readonly string[]): readonly string[];
+/**
+ * 放开的根：**目标本身是目录就用它，否则用它的父目录**。
+ *
+ * `statSync` 失败（路径不存在）时按文件处理 —— 那是绝大多数写类调用的形状
+ * （`file_write` 的目标常常还不存在），而把它当目录会放开一个不存在的路径，
+ * 等于什么都没放开，下一次照样弹窗。
+ */
+declare function approvalRootFor(target: string, workDir: string): string;
+/**
+ * 一次批准**该往缓存里记什么** —— 记哪个 target、管多大范围。
+ *
+ * ## ⚠️ 这个函数存在的唯一理由：别的目标不许被「路径化」
+ *
+ * 直觉写法是「用户批准了，就把 `approvalRootFor(opTarget)` 记进去」。它错在
+ * `opTarget` **不一定是路径** —— `terminal` 的 target 是整条命令串，
+ * 猜不出目标的 MCP 工具给的是参数 JSON（`argsKey()` 的产物）。把那些东西喂给
+ * `approvalRootFor`，`toAbsolute` 会把它们当成相对路径 resolve 到主工作目录下，
+ * 于是：
+ *
+ *   - `recordApproval` 记下的 target 与下一次 `check()` 查的 target **不是同一个
+ *     值**，那条缓存永远命不中 —— 症状是「同一个问题问不完」，读起来像缓存坏了；
+ *   - 更糟的是它顺手产出一条 `scope: 'prefix'`、target 是**整个工作目录**的
+ *     条目 —— 批准一条 `ls` 等于给整个工作区开了一张通行证。
+ *
+ * 2026-10-08 抓到的就是前者（`tool-executor.test.ts` 的「批准过的 target 与下次
+ * 查询的 target 是同一个值」）。后者当时还没发生，但它离前者只差一个
+ * `scope` 参数，所以判据写成一条：**只有真的落在某个放行根里的目标才记成
+ * 目录**，其余一律原样记、`exact`。
+ *
+ * @param opTarget `resolveTarget()` 给的那个值（命令串 / 路径 / 参数 JSON）
+ * @param grantedRoots {@link grantedPathsFor} 这次算出来的放行根
+ */
+declare function approvalEntryFor(opTarget: string, workDir: string, grantedRoots: readonly string[]): {
+    target: string;
+    scope: 'exact' | 'prefix';
+};
+
 /**
  * 紧凑权限规则的字符串语法 —— `Tool(content)`（方案 22 §2.1）。
  *
@@ -20695,4 +20841,4 @@ declare function resolveCodeModeWorker(baseDir: string, exists?: typeof existsSy
  */
 declare function codeModeWorkerPath(): string | undefined;
 
-export { AGENT_ROLE_DIAG_MODULE, ARTIFACT_MAX_TOTAL_BYTES, ARTIFACT_RETENTION_DEFAULTS, ATTACHMENT_MAX_TOTAL_BYTES, ATTACHMENT_RETENTION_DEFAULTS, type AcquireResult, type AgentConfig, AgentLoop, type AgentProvider, type AgentSite, type AgentSiteRef, AppearanceStore, type AppendMessageInput, ApprovalCache, type ApprovalDecision, type ApprovalScope, type ArtifactOpenRefusal, type ArtifactRetention, type AskQuestionDeps, type AttachmentRetention, BLOCKED_TOOLS, type BackendOptions, type BackendOutcome, type BackgroundTaskSource, type BaseOrigin, type BaseSlot, type BeginTurnInput, type BreakdownInput, BudgetGuard, type BudgetGuardOptions, type BudgetInfo, type BudgetLevel, type BudgetOptions, type BudgetStatus, BudgetStore, type BudgetStoreOptions, type BuildFireArgvInput, type BuildIndexOptions, CHECKPOINT_MAX_TOTAL_BYTES, CLAUDE_EVENT_NAMES, CLAUDE_TOOL_NAMES, CODE_MODE_LIMITS, CODE_MODE_SDK_TAG, CONFIG_KEYS, CURRENT_CONFIG_VERSION, type CachedApproval, type CachedDecision, type CheckpointCapture, type CheckpointFile, CheckpointManager, type CheckpointManagerOptions, type CheckpointManifest, CheckpointStore, type CheckpointStoreOptions, type CheckpointSummary, type ClaudeHooksParseOptions, type CodeModeLimits, type CodeRequest, type CodeResult, CodeSandbox, type CommandHookConfig, type CommandHookResult, type CommandLoadOutcome, type CommandLoadSummary, type CommandResult, type CommandRunner, type CompactionResult, type CompiledRules, type ComplianceDirSpec, type ComplianceDirsSummary, ComplianceEngine, type ComplianceEngineInput, type ComplianceGate, type ComplianceHit, type ComplianceRule, type ComplianceRuleSource, type ComplianceSettings, type ComplianceVerdict, type CompressConfig, type CompressResult, type ConfigMigration, type ConfigOrigins, ContextCompressor, type ContextEngine, type CreateScheduleInput, type CreateSessionInput, DEFAULT_COMPLIANCE_ACTIONS, DEFAULT_COMPLIANCE_SETTINGS, DEFAULT_COMPRESSION_THRESHOLD, DEFAULT_GOAL_MAX_ROUNDS, DEFAULT_MAX_HOLD_CHARS, type DelegateArgs, type DelegateConfig, DelegateManager, type DelegateTaskResult, type DiagnoseOptions, type DiscoverOutcome, type DiscoveredFile, type DoctorReport, type DraftParse, EMPTY_RULES, EPOCH_DISK_LEDGER, EpochConfigSchema, type ExpandOptions, type ExtractOutcome, FTS_TABLES, FTS_TRIGGERS, type FallbackEvent, type FileSlots, type FileSourceKind, type ForkInput, type FrontmatterParse, type FrontmatterSplit, type FtsHealth, type FtsReclaim, type FtsSpace, type FtsTableHealth, GOAL_BLOCK_CODES, type GateAxis, type GateVerdict, type GenerateInput, type GenerateOutput, type Goal, type GoalBlockReason, type GoalClear, type GoalPhase, type GoalPromptView, type GoalRefusal, type GoalRoundResult, GoalService, GoalStore, type GoalToolDeps, type GoalWrite, HEADLESS_AUDIT_CODES, type HeadlessPolicy, type HookConfigEntry, HookManager, type HookManagerOptions, type HookMatcher, type HookSourceKind, type HookSourceStatus, type HookSourcesOptions, type HookSourcesSummary, type HooksParseOutcome, type MemoryManager$1 as IMemoryManager, INSTRUCTION_BUDGET_CHARS, INSTRUCTION_FILES, type SessionManager$1 as ISessionManager, type SkillSystem$1 as ISkillSystem, ImageLoadError, type ImageSize, type ImportDecision, type ImportGate, type ImportMessage, type ImportNode, type ImportPartsResult, type ImportSessionInput, type ImportSessionMeta, type ImportSessionResult, type ImportSkipReason, ImportTrustStore, type InstallDependency, type InstallOptions, type InstallOutcome, type InstallPreview, type InstructionScan, type InstructionSource, type IsolationReason, type IsolationReport, type JsonSchemaDocument, LAUNCHD_LABEL_PREFIX, LOCK_HEARTBEAT_MS, LOCK_STALE_MS, type LastOpenSession, LastOpenSessions, type LayerOutcome, type LayerScalars, type LayerStatus, type LearningContext, type LearningResult, type LearningSkipReason, type LexiconLoadOutcome, type LifecycleOutcome, type ListCandidatesInput, type ListSessionsInput, type ListSessionsOutput, type LoadCommandsOptions, type LoadConfigOptions, type LoadKeybindingsOptions, type LoadKeybindingsResult, type LoadRolesOptions, type LoadedPlugin, type LockHolder, MARKETPLACE_DISPLAY_FIELDS, MARKETPLACE_FILE, MAX_AUDIT_ENTRIES, MAX_COMMAND_DEPTH, MAX_GOAL_MAX_ROUNDS, MAX_IMPORT_DEPTH, MAX_LAST_OPEN_SESSIONS, MAX_OBJECTIVE_CHARS, MAX_REASON_CHARS, MAX_RECENT_WORKSPACES, MODEL_GIVE_UP_THRESHOLD, MULTIMODAL_DEFAULTS, type ManagedPolicy, ManagedPolicyError, type ManagedSettings, ManagedSettingsSchema, type MarketplaceCatalog, type MarketplaceCategory, type MarketplaceDisplay, type MarketplaceDisplayField, type MarketplaceEntry, type MarketplaceOutcome, type MarketplaceRecord, type MarketplaceStatus, type MemoryConfig, type MemoryEntry, MemoryManager, type MemoryNotice, type MemorySearchResult, type MemoryTarget, type MemoryWriteResult, type MentionPart, type MentionResolution, type Message, type MessageHit, type MessageRecord, type MessageSurface, type ModelCapability, ModelFailureTracker, type ModelMetaEntry, type ModelPricing, type MultimodalPolicy, NOMINAL_TOTAL_BYTES, NO_REVEALED_TOOLS, type NonInteractiveProbe, type OsTaskSnapshot, type OutputGuard, PACK_EXCLUDES, PACK_MAX_BYTES, PACK_MAX_FILES, PERMISSION_AUDIT_CODES, PLUGIN_LAYOUT, PLUGIN_MANIFEST_FILE, PLUGIN_MANIFEST_KEYS, PLUGIN_NAME_PATTERN, PLUGIN_ROOT_ENV, PLUGIN_ROOT_TOKEN, PLUGIN_VISIBILITY, POLICY_DECISIONS, PROBE_VERSION, PROJECT_AGENTS_SUBDIR, PROVIDER_NO_CREDENTIAL, type PackFile, type PackLimits, type PackOutcome, type PackPlan, type PackPlanOutcome, type PermissionAuditCode, type PermissionAuditEntry, type PermissionAuditOutcome, type PermissionAuditScope, type PermissionAuditSnapshot, PermissionManager, type PersistFailureKind, type PersistedBudget, type PersistedPart, type PlanApprovalFn, type PlanEnterResult, type PlanModeDeps, PlanModeState, type PlanSettlement, type PluginArtifacts, type PluginAuthor, PluginAuthorSchema, type PluginCommandDir, type PluginCounts, type PluginHookFile, type PluginInventory, type PluginLoadOptions, type PluginManifest, type PluginPathRef, type PluginRecord, type PluginSettingsFile, type PluginSourceType, type PluginStateReadOutcome, PluginStore, type PluginVisibility, type PolicyDirSpec, type PolicyDirsSummary, type PolicyLoadOutcome, type PolicyRule, PolicyRuleSchema, type PricingAt, type PricingOverride, type ProjectContext, type ProjectExtensionInventory, ProviderError, ProviderRouter, type ProviderStreamChunk, type ProviderToolCall$1 as ProviderToolCall, type ProviderWarning, type PruneResult, type QuestionAskFn, RECORDING_KEEP_RUNS, RECORDING_MAX_BYTES, ROLE_FRONTMATTER_SCHEMA, RUN_CODE_TOOL, type ReadMessagesInput, type ReadMessagesOutput, type RecentWorkspace, RecentWorkspaces, type RecordRunInput, type RecorderOptions, type RecoveryAction, type RegisterInput, type RegisterOutcome, type RegistrarOptions, type RegistrationPatch, type RepairOutcome, type ResolveMentionsOptions, type ResolveReferenceInput, type ResolveSettingsOptions, type ResolvedCompression, type ResolvedReference, type ResolvedSource, type ResponseFormat, type RestorePartsOptions, type RewindAction, type RewindDrift, type RewindFilePlan, type RewindOptions, type RewindOutcome, type RewindPreview, type RoleCreateFailure, type RoleCreateInput, type RoleCreateOptions, type RoleCreateOutcome, type RoleLoadOutcome, type RoleLoadSummary, type RoleMergeNotice, type RoleMergeResult, type RoleRemoveFailure, type RoleRemoveOptions, type RoleRemoveOutcome, type RoleScope, type RuleMatch, type RuleSuggestion, type RuleVerdict, type RunCodeFailure, type RunCodeInput, type RunCodeOutcome, type RunCodeToolDeps, type RunEstimateInput, type RunInput, type RunResult, type RunningSchedule, SANDBOX_COVERS, SANDBOX_EXCLUDES, SCALAR_KEYS, SCHEDULE_DEFAULTS, SCHEDULE_DEFAULT_ALLOWLIST, SCHEDULE_FORM_BUDGET_USD, SCHEDULE_ISSUE_CODES, SCHTASKS_FOLDER, SESSION_MESSAGES_READ_TOOL, SESSION_MESSAGES_SEARCH_TOOL, SESSION_QUERY_TOOLS, SESSION_SEARCH_TOOL, SESSION_TRACE_TOOL, SETTINGS_LAYER_ORDER, SETTING_WRITE_KEYS, SETTING_WRITE_LAYERS, SKILL_CREATE_TOOL, SKILL_EDIT_TOOL, SKILL_PATCH_TOOL, SKILL_VIEW_TOOL, SKILL_WRITE_FILE_TOOL, SLASH_COMMANDS_DIAG_MODULE, type ScalarKey, type ScanInstructionsOptions, type ScheduleArgvRefusal, type ScheduleArgvResult, type ScheduleArgvWarning, type ScheduleBackend, type ScheduleCliEntry, type ScheduleDraftDeps, type ScheduleDrift, type ScheduleDriftKind, type ScheduleInstallForm, type ScheduleIssue, type ScheduleIssueCode, type ScheduleLock, ScheduleRecorder, ScheduleRegistrar, ScheduleStore, type ScheduleValidation, type SchemaExport, type SearchHit, type SearchInput, type SearchMessagesInput, type SearchMessagesOutput, type SearchOutput, type SearchSessionsInput, type SelectionDeps, type SelfConnector, type SelfIndexInput, type SelfSettings, type Session, type SessionCandidate, type SessionHit, SessionManager, type SessionMentionDeps, type SessionMeta, SessionQueries, SessionReferences, type SessionSearchDeps, type SessionStats, type SessionSurface, type SessionTrace, type SessionVisibility, type SessionVisibilityInput, type SettingApply, type SettingApplyFacts, type SettingChain, type SettingFutile, type SettingLayer, type SettingStep, type SettingValue, type SettingValueKind, type SettingWriteFailure, type SettingWriteKey, type SettingWriteLayer, type SettingWriteOutcome, type SettingWriteRequest, type SettingWriteTarget, type SettingWriteTargetsOptions, type SettingsFile, SettingsFileError, SettingsFileSchema, type SettingsLayer, type SettingsResolution, type ShadowFinding, type ShadowKind, type Skill, type SkillDirSource, type SkillDirSpec, type SkillDirsSummary, type SkillImportConflict, type SkillImportDone, type SkillImportEntry, type SkillImportFailure, type SkillImportForm, type SkillImportOptions, type SkillImportPreview, type SkillImportResult, type SkillIndexEntry, type SkillIndexOptions, type SkillIndexResidency, type SkillIndexStats, SkillLearner, type SkillLearningProvider, type SkillMeta, type SkillStats, SkillSystem, type SkillSystemOptions, type SkillViewDeps, type SkillWriteDeps, type SteerSource, type StoredAppearance, type SubAgentRunner, type SubTask, type SubToolCaller, type SummarizeOutput, type SurfaceMessage, type SystemPromptParams, type SystemPromptSegments, TOOL_SEARCH_TOOL, TaskNoticeTracker, type TodoItem, type ToolCall, type ToolConflict, type ToolGate, type ToolNameFidelity, type ToolNameLookup, ToolRegistry, type ToolRevealState, type ToolScope, type ToolSearchDeps, type ToolTableCost, type TraceInput, type TraceNode, TrackerDB, type TrustDecision, type TrustGate, type TrustGateOptions, TrustManager, type TurnRecord, type TurnTiming, type UpdateScheduleInput, type UtilityModelInfo, type ValidateScheduleInput, type VersionCheck, Workspace, type WorkspaceFiles, type WorkspaceIssue, type WorkspaceIssueKind, acquireScheduleLock, addMarketplace, addUsage, admitArtifact, admitArtifacts, affectedPaths, artifactLaunchArgv, artifactOpenRefusal, assertLevelAllowed, blockedRoleTools, buildContextBreakdown, buildFireArgv, buildFtsMatchQuery, buildSchemaExports, buildSystemPrompt, buildTrigramMatchQuery, builtinRoles, checkEpochVersion, checkFtsHealth, checkShadowing, classifyPersistFailure, classifyProviderError, clearModelCache, coalesceRecording, codeModeWorkerPath, commandNameFromRelPath, compileRuleLists, compressionOptions, computeCost, computeCostMicros, computeExecHash, countRules, createAllowAllGate, createAllowAllImportGate, createAskQuestionTool, createCodeExecTool, createDelegateTool, createDenyAllGate, createDenyAllImportGate, createGoalTool, createImportGate, createMemoryTool, createPlanModeTools, createRoleFile, createRoleScope, createRunCodeTool, createScheduleDraftTool, createSessionMessagesReadTool, createSessionMessagesSearchTool, createSessionSearchTool, createSessionSearchTools, createSessionTraceTool, createSkillViewTool, createSkillWriteTools, createTodoTool, createToolRevealState, createToolScope, createToolSearchTool, createTrustGate, currentEpochVersion, decideImport, decideTrust, defaultConfig, defaultModelOf, describeArtifactRefusal, describeBackgroundTask, describeHeadlessPolicy, describeIsolation, describeJsonError, diagnoseSchedules, discoverMarkdown, discoverModels, discoverProject, displayAllows, displayCurrency, draftCommandLine, draftWidening, escapeRuleContent, estimateImageTokens, estimateRunTokens, estimateTokens, evaluateSelection, expandCommand, expandImports, explainSetting, extractArchive, findInstructionFiles, findProjectInstructions, findRole, formatBytes, formatSkillIndex, formatUsd, gateForTool, getCapability, getConfigIssues, getConfigOrigins, getImportGate, getTrustGate, hasDedicatedExecContent, hasExecTierContent, hasPromptCaching, hasProviderCredentials, hasReadTierContent, imageFromBase64, imageFromPath, imagePartTokens, importParts, importSkills, installPlugin, instructionDirs, instructionNotices, intervalSlots, inventoryProjectExtensions, inventoryTotal, isBlockCode, isCodeModeDeferred, isEmptyRules, isGoalPhase, isNonInteractive, isReadOnlySubCall, isSettingWriteLayer, isTransientPersistFailure, isValidPluginName, isWithinWindow, isWritableSettingKey, labelSlug, layerRank, listRunningSchedules, listSessionCandidates, listWorkspaceFiles, loadCommandDefinitions, loadCommandFile, loadCommands, loadConfig, loadHookSources, loadKeybindings, loadLexiconDir, loadLexiconFiles, loadPlugins, loadPolicyFiles, loadPolicyRules, loadRoleDefinitions, loadRoleDir, loadedImports, localDateString, managedSwitchNotes, mapClaudeToolName, mapEpochToolName, mapOperationType, matchPreauthorization, matchRuleLists, matchesHook, mentionsPluginRoot, mergeHeadlessPolicy, mergeRoles, mergeSchedulePatch, microsToUsd, modelListCandidates, needsAllowlist, nextFallbackModel, nextRunAt, noConfigOrigins, noManagedPolicy, noPlugins, openArtifact, originOf, packFileName, packPlugin, parseClaudeSettingsHooks, parseClock, parseDate, parseFrontmatter, parseHooksConfig, parseHooksConfigVerbose, parseImportLine, parseModelList, parseRoleDefinition, parseScheduleDraft, parseSkillFrontmatter, parseTrigger, pendingImageTokens, persistFailureCode, persistParts, persistToolResults, persistedUsage, planPack, previewSkillImport, pricingFor, projectEntryForDisplay, pruneArtifacts, pruneAttachments, pruneRecordings, pruneSchedules, readImageSize, readMarketplaces, readPluginManifest, readPluginRecords, readProviderKeyEnv, readRecording, readSessionSurface, reclaimFtsSpace, redactLine, refreshOpenRouterMetadata, removeMarketplace, removeRecordings, removeRoleFile, removeSessionArtifacts, removeSessionAttachments, renderImportTree, renderProjectContext, renderSdkDeclaration, renderSelfIndex, repairSchedules, resolveArtifactRetention, resolveCodeModeWorker, resolveComplianceDirs, resolveEntrySource, resolveInWorkspace, resolveMarketplaceRef, resolveMentions, resolveMultimodalPolicy, resolvePolicyDirs, resolvePricingAt, resolveProjectRoot, resolveScheduleBackend, resolveSessionReference, resolveSessionVisibility, resolveSettings, resolveSkillDirs, resolveSource, resolveTar, resolveWorkspace, restoreParts, revealScopedProvider, roleScopedProvider, roleSourceLabel, ruleCovers, ruleFromString, ruleToString, runCode, runCommand, sanitizeArgNames, sanitizeCommand, sanitizeFtsQuery, sanitizePath, sanitizeToolOutput, scanInstructions, scanPluginDir, scanSkillDirs, searchMarketplaces, setDisplayCurrency, setImportGate, setPluginEnabled, setTrustGate, settingValueChoices, settingValueKind, settingWriteApply, settingWriteLayers, settingWriteTargets, skillIndexDescription, skillIndexResidency, skillIndexStats, sniffMediaType, splitFrontmatter, staticToolProvider, stripArtifactData, substitutePluginRoot, suggestRuleFromApproval, systemOpenArgv, systemPromptSegments, toPosix, toolDefinitionTokens, toolMatches, toolTableTokens, totalTokens, traceSession, triggerPeriodMs, unescapeRuleContent, uninstallPlugin, unknownRoleSkills, unknownRoleTools, unloadedInstructionFiles, updateMarketplace, updatePlugin, usdToMicros, validateSchedule, validateTrigger, validateWindow, withGoalCompression, withGoalPrompt, workspaceDisplayPath, writeSettingValue };
+export { AGENT_ROLE_DIAG_MODULE, ARTIFACT_MAX_TOTAL_BYTES, ARTIFACT_RETENTION_DEFAULTS, ATTACHMENT_MAX_TOTAL_BYTES, ATTACHMENT_RETENTION_DEFAULTS, type AcquireResult, type AgentConfig, AgentLoop, type AgentProvider, type AgentSite, type AgentSiteRef, AppearanceStore, type AppendMessageInput, ApprovalCache, type ApprovalDecision, type ArtifactOpenRefusal, type ArtifactRetention, type AskQuestionDeps, type AttachmentRetention, BLOCKED_TOOLS, type BackendOptions, type BackendOutcome, type BackgroundTaskSource, type BaseOrigin, type BaseSlot, type BeginTurnInput, type BreakdownInput, BudgetGuard, type BudgetGuardOptions, type BudgetInfo, type BudgetLevel, type BudgetOptions, type BudgetStatus, BudgetStore, type BudgetStoreOptions, type BuildFireArgvInput, type BuildIndexOptions, CHECKPOINT_MAX_TOTAL_BYTES, CLAUDE_EVENT_NAMES, CLAUDE_TOOL_NAMES, CODE_MODE_LIMITS, CODE_MODE_SDK_TAG, CONFIG_KEYS, CURRENT_CONFIG_VERSION, type CachedApproval, type CachedDecision, type CheckpointCapture, type CheckpointFile, CheckpointManager, type CheckpointManagerOptions, type CheckpointManifest, CheckpointStore, type CheckpointStoreOptions, type CheckpointSummary, type ClaudeHooksParseOptions, type CodeModeLimits, type CodeRequest, type CodeResult, CodeSandbox, type CommandHookConfig, type CommandHookResult, type CommandLoadOutcome, type CommandLoadSummary, type CommandResult, type CommandRunner, type CompactionResult, type CompiledRules, type ComplianceDirSpec, type ComplianceDirsSummary, ComplianceEngine, type ComplianceEngineInput, type ComplianceGate, type ComplianceHit, type ComplianceRule, type ComplianceRuleSource, type ComplianceSettings, type ComplianceVerdict, type CompressConfig, type CompressResult, type ConfigMigration, type ConfigOrigins, ContextCompressor, type ContextEngine, type CreateScheduleInput, type CreateSessionInput, DEFAULT_COMPLIANCE_ACTIONS, DEFAULT_COMPLIANCE_SETTINGS, DEFAULT_COMPRESSION_THRESHOLD, DEFAULT_GOAL_MAX_ROUNDS, DEFAULT_MAX_HOLD_CHARS, type DelegateArgs, type DelegateConfig, DelegateManager, type DelegateTaskResult, type DiagnoseOptions, type DiscoverOutcome, type DiscoveredFile, type DoctorReport, type DraftParse, EMPTY_RULES, EPOCH_DISK_LEDGER, EpochConfigSchema, type ExpandOptions, type ExtractOutcome, FTS_TABLES, FTS_TRIGGERS, type FallbackEvent, type FileSlots, type FileSourceKind, type ForkInput, type FrontmatterParse, type FrontmatterSplit, type FtsHealth, type FtsReclaim, type FtsSpace, type FtsTableHealth, GOAL_BLOCK_CODES, type GateAxis, type GateVerdict, type GenerateInput, type GenerateOutput, type Goal, type GoalBlockReason, type GoalClear, type GoalPhase, type GoalPromptView, type GoalRefusal, type GoalRoundResult, GoalService, GoalStore, type GoalToolDeps, type GoalWrite, HEADLESS_AUDIT_CODES, type HeadlessPolicy, type HookConfigEntry, HookManager, type HookManagerOptions, type HookMatcher, type HookSourceKind, type HookSourceStatus, type HookSourcesOptions, type HookSourcesSummary, type HooksParseOutcome, type MemoryManager$1 as IMemoryManager, INSTRUCTION_BUDGET_CHARS, INSTRUCTION_FILES, type SessionManager$1 as ISessionManager, type SkillSystem$1 as ISkillSystem, ImageLoadError, type ImageSize, type ImportDecision, type ImportGate, type ImportMessage, type ImportNode, type ImportPartsResult, type ImportSessionInput, type ImportSessionMeta, type ImportSessionResult, type ImportSkipReason, ImportTrustStore, type InstallDependency, type InstallOptions, type InstallOutcome, type InstallPreview, type InstructionScan, type InstructionSource, type IsolationReason, type IsolationReport, type JsonSchemaDocument, LAUNCHD_LABEL_PREFIX, LOCK_HEARTBEAT_MS, LOCK_STALE_MS, type LastOpenSession, LastOpenSessions, type LayerOutcome, type LayerScalars, type LayerStatus, type LearningContext, type LearningResult, type LearningSkipReason, type LexiconLoadOutcome, type LifecycleOutcome, type ListCandidatesInput, type ListSessionsInput, type ListSessionsOutput, type LoadCommandsOptions, type LoadConfigOptions, type LoadKeybindingsOptions, type LoadKeybindingsResult, type LoadRolesOptions, type LoadedPlugin, type LockHolder, MARKETPLACE_DISPLAY_FIELDS, MARKETPLACE_FILE, MAX_AUDIT_ENTRIES, MAX_COMMAND_DEPTH, MAX_GOAL_MAX_ROUNDS, MAX_IMPORT_DEPTH, MAX_LAST_OPEN_SESSIONS, MAX_OBJECTIVE_CHARS, MAX_REASON_CHARS, MAX_RECENT_WORKSPACES, MODEL_GIVE_UP_THRESHOLD, MULTIMODAL_DEFAULTS, type ManagedPolicy, ManagedPolicyError, type ManagedSettings, ManagedSettingsSchema, type MarketplaceCatalog, type MarketplaceCategory, type MarketplaceDisplay, type MarketplaceDisplayField, type MarketplaceEntry, type MarketplaceOutcome, type MarketplaceRecord, type MarketplaceStatus, type MemoryConfig, type MemoryEntry, MemoryManager, type MemoryNotice, type MemorySearchResult, type MemoryTarget, type MemoryWriteResult, type MentionPart, type MentionResolution, type Message, type MessageHit, type MessageRecord, type MessageSurface, type ModelCapability, ModelFailureTracker, type ModelMetaEntry, type ModelPricing, type MultimodalPolicy, NOMINAL_TOTAL_BYTES, NO_REVEALED_TOOLS, type NonInteractiveProbe, type OsTaskSnapshot, type OutputGuard, PACK_EXCLUDES, PACK_MAX_BYTES, PACK_MAX_FILES, PERMISSION_AUDIT_CODES, PLUGIN_LAYOUT, PLUGIN_MANIFEST_FILE, PLUGIN_MANIFEST_KEYS, PLUGIN_NAME_PATTERN, PLUGIN_ROOT_ENV, PLUGIN_ROOT_TOKEN, PLUGIN_VISIBILITY, POLICY_DECISIONS, PROBE_VERSION, PROJECT_AGENTS_SUBDIR, PROVIDER_NO_CREDENTIAL, type PackFile, type PackLimits, type PackOutcome, type PackPlan, type PackPlanOutcome, type PermissionAuditCode, type PermissionAuditEntry, type PermissionAuditOutcome, type PermissionAuditScope, type PermissionAuditSnapshot, PermissionManager, type PersistFailureKind, type PersistedBudget, type PersistedPart, type PlanApprovalFn, type PlanEnterResult, type PlanModeDeps, PlanModeState, type PlanSettlement, type PluginArtifacts, type PluginAuthor, PluginAuthorSchema, type PluginCommandDir, type PluginCounts, type PluginHookFile, type PluginInventory, type PluginLoadOptions, type PluginManifest, type PluginPathRef, type PluginRecord, type PluginSettingsFile, type PluginSourceType, type PluginStateReadOutcome, PluginStore, type PluginVisibility, type PolicyDirSpec, type PolicyDirsSummary, type PolicyLoadOutcome, type PolicyRule, PolicyRuleSchema, type PricingAt, type PricingOverride, type ProjectContext, type ProjectExtensionInventory, ProviderError, ProviderRouter, type ProviderStreamChunk, type ProviderToolCall$1 as ProviderToolCall, type ProviderWarning, type PruneResult, type QuestionAskFn, RECORDING_KEEP_RUNS, RECORDING_MAX_BYTES, ROLE_FRONTMATTER_SCHEMA, RUN_CODE_TOOL, type ReadMessagesInput, type ReadMessagesOutput, type RecentWorkspace, RecentWorkspaces, type RecordRunInput, type RecorderOptions, type RecoveryAction, type RegisterInput, type RegisterOutcome, type RegistrarOptions, type RegistrationPatch, type RepairOutcome, type ResolveMentionsOptions, type ResolveReferenceInput, type ResolveSettingsOptions, type ResolvedCompression, type ResolvedReference, type ResolvedSource, type ResponseFormat, type RestorePartsOptions, type RewindAction, type RewindDrift, type RewindFilePlan, type RewindOptions, type RewindOutcome, type RewindPreview, type RoleCreateFailure, type RoleCreateInput, type RoleCreateOptions, type RoleCreateOutcome, type RoleLoadOutcome, type RoleLoadSummary, type RoleMergeNotice, type RoleMergeResult, type RoleRemoveFailure, type RoleRemoveOptions, type RoleRemoveOutcome, type RoleScope, type RuleMatch, type RuleSuggestion, type RuleVerdict, type RunCodeFailure, type RunCodeInput, type RunCodeOutcome, type RunCodeToolDeps, type RunEstimateInput, type RunInput, type RunResult, type RunningSchedule, SANDBOX_COVERS, SANDBOX_EXCLUDES, SCALAR_KEYS, SCHEDULE_DEFAULTS, SCHEDULE_DEFAULT_ALLOWLIST, SCHEDULE_FORM_BUDGET_USD, SCHEDULE_ISSUE_CODES, SCHTASKS_FOLDER, SESSION_MESSAGES_READ_TOOL, SESSION_MESSAGES_SEARCH_TOOL, SESSION_QUERY_TOOLS, SESSION_SEARCH_TOOL, SESSION_TRACE_TOOL, SETTINGS_LAYER_ORDER, SETTING_WRITE_KEYS, SETTING_WRITE_LAYERS, SKILL_CREATE_TOOL, SKILL_EDIT_TOOL, SKILL_PATCH_TOOL, SKILL_VIEW_TOOL, SKILL_WRITE_FILE_TOOL, SLASH_COMMANDS_DIAG_MODULE, type ScalarKey, type ScanInstructionsOptions, type ScheduleArgvRefusal, type ScheduleArgvResult, type ScheduleArgvWarning, type ScheduleBackend, type ScheduleCliEntry, type ScheduleDraftDeps, type ScheduleDrift, type ScheduleDriftKind, type ScheduleInstallForm, type ScheduleIssue, type ScheduleIssueCode, type ScheduleLock, ScheduleRecorder, ScheduleRegistrar, ScheduleStore, type ScheduleValidation, type SchemaExport, type SearchHit, type SearchInput, type SearchMessagesInput, type SearchMessagesOutput, type SearchOutput, type SearchSessionsInput, type SelectionDeps, type SelfConnector, type SelfIndexInput, type SelfSettings, type Session, type SessionCandidate, type SessionHit, SessionManager, type SessionMentionDeps, type SessionMeta, SessionQueries, SessionReferences, type SessionSearchDeps, type SessionStats, type SessionSurface, type SessionTrace, type SessionVisibility, type SessionVisibilityInput, type SettingApply, type SettingApplyFacts, type SettingChain, type SettingFutile, type SettingLayer, type SettingStep, type SettingValue, type SettingValueKind, type SettingWriteFailure, type SettingWriteKey, type SettingWriteLayer, type SettingWriteOutcome, type SettingWriteRequest, type SettingWriteTarget, type SettingWriteTargetsOptions, type SettingsFile, SettingsFileError, SettingsFileSchema, type SettingsLayer, type SettingsResolution, type ShadowFinding, type ShadowKind, type Skill, type SkillDirSource, type SkillDirSpec, type SkillDirsSummary, type SkillImportConflict, type SkillImportDone, type SkillImportEntry, type SkillImportFailure, type SkillImportForm, type SkillImportOptions, type SkillImportPreview, type SkillImportResult, type SkillIndexEntry, type SkillIndexOptions, type SkillIndexResidency, type SkillIndexStats, SkillLearner, type SkillLearningProvider, type SkillMeta, type SkillStats, SkillSystem, type SkillSystemOptions, type SkillViewDeps, type SkillWriteDeps, type SteerSource, type StoredAppearance, type SubAgentRunner, type SubTask, type SubToolCaller, type SummarizeOutput, type SurfaceMessage, type SystemPromptParams, type SystemPromptSegments, TOOL_SEARCH_TOOL, TaskNoticeTracker, type TodoItem, type ToolCall, type ToolConflict, type ToolGate, type ToolNameFidelity, type ToolNameLookup, ToolRegistry, type ToolRevealState, type ToolScope, type ToolSearchDeps, type ToolTableCost, type TraceInput, type TraceNode, TrackerDB, type TrustDecision, type TrustGate, type TrustGateOptions, TrustManager, type TurnRecord, type TurnTiming, type UpdateScheduleInput, type UtilityModelInfo, type ValidateScheduleInput, type VersionCheck, Workspace, type WorkspaceFiles, type WorkspaceIssue, type WorkspaceIssueKind, acquireScheduleLock, addMarketplace, addUsage, admitArtifact, admitArtifacts, affectedPaths, approvalEntryFor, approvalRootFor, artifactLaunchArgv, artifactOpenRefusal, assertLevelAllowed, blockedRoleTools, buildContextBreakdown, buildFireArgv, buildFtsMatchQuery, buildSchemaExports, buildSystemPrompt, buildTrigramMatchQuery, builtinRoles, checkEpochVersion, checkFtsHealth, checkShadowing, classifyPersistFailure, classifyProviderError, clearModelCache, coalesceRecording, codeModeWorkerPath, commandNameFromRelPath, compileRuleLists, compressionOptions, computeCost, computeCostMicros, computeExecHash, countRules, createAllowAllGate, createAllowAllImportGate, createAskQuestionTool, createCodeExecTool, createDelegateTool, createDenyAllGate, createDenyAllImportGate, createGoalTool, createImportGate, createMemoryTool, createPlanModeTools, createRoleFile, createRoleScope, createRunCodeTool, createScheduleDraftTool, createSessionMessagesReadTool, createSessionMessagesSearchTool, createSessionSearchTool, createSessionSearchTools, createSessionTraceTool, createSkillViewTool, createSkillWriteTools, createTodoTool, createToolRevealState, createToolScope, createToolSearchTool, createTrustGate, currentEpochVersion, decideImport, decideTrust, defaultConfig, defaultModelOf, describeArtifactRefusal, describeBackgroundTask, describeHeadlessPolicy, describeIsolation, describeJsonError, diagnoseSchedules, discoverMarkdown, discoverModels, discoverProject, displayAllows, displayCurrency, draftCommandLine, draftWidening, escapeRuleContent, estimateImageTokens, estimateRunTokens, estimateTokens, evaluateSelection, expandCommand, expandImports, explainSetting, extractArchive, findInstructionFiles, findProjectInstructions, findRole, formatBytes, formatSkillIndex, formatUsd, gateForTool, getCapability, getConfigIssues, getConfigOrigins, getImportGate, getTrustGate, grantedPathsFor, hasDedicatedExecContent, hasExecTierContent, hasPromptCaching, hasProviderCredentials, hasReadTierContent, imageFromBase64, imageFromPath, imagePartTokens, importParts, importSkills, installPlugin, instructionDirs, instructionNotices, intervalSlots, inventoryProjectExtensions, inventoryTotal, isBlockCode, isCodeModeDeferred, isEmptyRules, isGoalPhase, isNonInteractive, isReadOnlySubCall, isSettingWriteLayer, isTransientPersistFailure, isValidPluginName, isWithinWindow, isWritableSettingKey, labelSlug, layerRank, listRunningSchedules, listSessionCandidates, listWorkspaceFiles, loadCommandDefinitions, loadCommandFile, loadCommands, loadConfig, loadHookSources, loadKeybindings, loadLexiconDir, loadLexiconFiles, loadPlugins, loadPolicyFiles, loadPolicyRules, loadRoleDefinitions, loadRoleDir, loadedImports, localDateString, managedSwitchNotes, mapClaudeToolName, mapEpochToolName, mapOperationType, matchPreauthorization, matchRuleLists, matchesHook, mentionsPluginRoot, mergeHeadlessPolicy, mergeRoles, mergeSchedulePatch, microsToUsd, modelListCandidates, needsAllowlist, nextFallbackModel, nextRunAt, noConfigOrigins, noManagedPolicy, noPlugins, openArtifact, originOf, packFileName, packPlugin, parseClaudeSettingsHooks, parseClock, parseDate, parseFrontmatter, parseHooksConfig, parseHooksConfigVerbose, parseImportLine, parseModelList, parseRoleDefinition, parseScheduleDraft, parseSkillFrontmatter, parseTrigger, pendingImageTokens, persistFailureCode, persistParts, persistToolResults, persistedUsage, planPack, previewSkillImport, pricingFor, projectEntryForDisplay, pruneArtifacts, pruneAttachments, pruneRecordings, pruneSchedules, readImageSize, readMarketplaces, readPluginManifest, readPluginRecords, readProviderKeyEnv, readRecording, readSessionSurface, reclaimFtsSpace, redactLine, refreshOpenRouterMetadata, removeMarketplace, removeRecordings, removeRoleFile, removeSessionArtifacts, removeSessionAttachments, renderImportTree, renderProjectContext, renderSdkDeclaration, renderSelfIndex, repairSchedules, resolveArtifactRetention, resolveCodeModeWorker, resolveComplianceDirs, resolveEntrySource, resolveInWorkspace, resolveMarketplaceRef, resolveMentions, resolveMultimodalPolicy, resolvePolicyDirs, resolvePricingAt, resolveProjectRoot, resolveScheduleBackend, resolveSessionReference, resolveSessionVisibility, resolveSettings, resolveSkillDirs, resolveSource, resolveTar, resolveWorkspace, restoreParts, revealScopedProvider, roleScopedProvider, roleSourceLabel, ruleCovers, ruleFromString, ruleToString, runCode, runCommand, sanitizeArgNames, sanitizeCommand, sanitizeFtsQuery, sanitizePath, sanitizeToolOutput, scanInstructions, scanPluginDir, scanSkillDirs, searchMarketplaces, setDisplayCurrency, setImportGate, setPluginEnabled, setTrustGate, settingValueChoices, settingValueKind, settingWriteApply, settingWriteLayers, settingWriteTargets, skillIndexDescription, skillIndexResidency, skillIndexStats, sniffMediaType, splitFrontmatter, staticToolProvider, stripArtifactData, substitutePluginRoot, suggestRuleFromApproval, systemOpenArgv, systemPromptSegments, toPosix, toolDefinitionTokens, toolMatches, toolTableTokens, totalTokens, traceSession, triggerPeriodMs, unescapeRuleContent, uninstallPlugin, unknownRoleSkills, unknownRoleTools, unloadedInstructionFiles, updateMarketplace, updatePlugin, usdToMicros, validateSchedule, validateTrigger, validateWindow, withGoalCompression, withGoalPrompt, workspaceDisplayPath, writeSettingValue };

package/dist/index.js

@@ -2,7 +2,7 @@ import { existsSync, statSync, readdirSync, readFileSync, mkdirSync, writeFileSy
 import { homedir, platform, tmpdir, hostname } from 'os';
 import { join, dirname, resolve, relative, isAbsolute, sep, extname, basename } from 'path';
 import { execFile, execSync, execFileSync, spawn } from 'child_process';
-import { createLogger, dbPath, resolveHomeDir, DEFAULT_MAX_TURNS, PROJECT_DIR_NAME, guardSpawn, t, suggestKey, misspelledKeyIssues, openDatabase, migrate, releaseDatabase, parseLenient, issueDetails, splitWords, unknownKeyIssues, checkpointsDir, pluginsDir, projectHooksPath, projectClaudeSettingsPath, projectClaudeLocalSettingsPath, projectSettingsPath, projectLocalSettingsPath, projectPoliciesDir, trustedImportsPath, canProbeGit, budgetStatePath, artifactsDir, UNLIMITED_TURNS, turnLimitOf, configPath, managedSettingsPath, getSecretValues, listStoredSecretNames, maskApiKey, setSectionField, countCodePoints, headCodePoints, attachmentsDir, isInWorkspace, workspacesPath, samePath, lastSessionsPath, appearancePath, automationLogsDir, projectComplianceDir, projectSkillsDir, trustPath, projectCommandsDir, detectBackend, EXEC_PATH_AS_NODE_ENV, isolate, createStreamDecoder, parseShellCommand, writeArtifact, envPath, checkDangerousCommand, checkObfuscation, keepHeadAndTail, normalizeForMatch, isReadOnlyCommand, CODE_EXEC_ROOTS, tailCodePoints } from '@epoch-agent/infra';
+import { createLogger, dbPath, resolveHomeDir, DEFAULT_MAX_TURNS, PROJECT_DIR_NAME, guardSpawn, t, suggestKey, misspelledKeyIssues, openDatabase, migrate, releaseDatabase, parseLenient, issueDetails, splitWords, unknownKeyIssues, checkpointsDir, expandPath, pluginsDir, projectHooksPath, projectClaudeSettingsPath, projectClaudeLocalSettingsPath, projectSettingsPath, projectLocalSettingsPath, projectPoliciesDir, trustedImportsPath, canProbeGit, budgetStatePath, artifactsDir, isInWorkspace, UNLIMITED_TURNS, turnLimitOf, configPath, managedSettingsPath, getSecretValues, listStoredSecretNames, maskApiKey, setSectionField, countCodePoints, headCodePoints, attachmentsDir, workspacesPath, samePath, lastSessionsPath, appearancePath, automationLogsDir, projectComplianceDir, projectSkillsDir, trustPath, projectCommandsDir, detectBackend, EXEC_PATH_AS_NODE_ENV, isolate, createStreamDecoder, parseShellCommand, writeArtifact, envPath, checkDangerousCommand, checkObfuscation, keepHeadAndTail, normalizeForMatch, isReadOnlyCommand, CODE_EXEC_ROOTS, tailCodePoints } from '@epoch-agent/infra';
 export { IS_WINDOWS, WINDOWS_HIDE_FLAGS, buildBwrapArgs, buildProfile, checkDangerousCommand, checkObfuscation, createLogger, detectBackend, getDefaultShell, getPythonCommand, isInWorkspace, isReadOnlyCommand, isolate, maskApiKey, probeBubblewrap, probeSeatbelt, complianceDir as resolveComplianceDir, policiesDir as resolvePoliciesDir, setLogLevel } from '@epoch-agent/infra';
 import { PROVIDER_TYPES, OPERATION_TYPES as OPERATION_TYPES$1, COMPLIANCE_CATEGORIES, COMPLIANCE_ACTIONS, SEARCH_PROVIDER_TYPES, CURRENCIES, LANGS, isSettingsPaneId, SETTINGS_PANE_IDS, PERMISSION_LEVELS, SHELL_KINDS, ToolExposure, MAX_OPTIONS, MIN_OPTIONS, MAX_HEADER_CHARS, MAX_QUESTIONS, SCHEDULE_INTERVAL_MINUTES, isPermissionLevel, SCHEDULE_DRAFT_TOOL, isValidAgentRoleName, DEFAULT_AGENT_ROLE, isValidCommandName, RESERVED_COMMAND_NAMES, parseModelRef, isWirePluginArchiveName, systemNote, formatMoney, totalUsageTokens, NOOP_TELEMETRY, METRIC, contentToText, GEN_AI, isPromptOversize, promptTokens, apiKeyEnvVar, PROVIDER_INFOS, isProviderType, API_KEY_ENV_VARS, KEY_ACTIONS, tableOf, perAction, isKeyAction, parseSequence, RESERVED_CHORDS, chordId, sequenceId, ACTION_CONTEXTS, SEQUENCE_CONTEXTS, assertNeverPart, MAX_ATTACH_FILES, MAX_ATTACH_TOTAL_BYTES, MAX_SESSION_REFS, utf8ByteLength, truncateToBudget, attachSessionSurface, isContextNearlyFull, isOperationType, normalizeApproval, imagePartOmittedSummary, MAX_ATTACH_BYTES, SIMULTANEOUS_CONTEXTS, SESSION_REFERENCE_ERROR_CODES, filePartSummary, sessionPartSummary } from '@epoch-agent/protocol';
 export { API_KEY_ENV_VARS, COMPLIANCE_ACTIONS, COMPLIANCE_CATEGORIES, MAX_ATTACH_BYTES, MAX_ATTACH_FILES, MAX_ATTACH_TOTAL_BYTES, MAX_SESSION_ATTACH_BYTES, MAX_SESSION_REFS, OPERATION_TYPES, PERMISSION_LEVELS, PLAN_OUTCOMES, PROVIDER_INFOS, PROVIDER_TYPES, ToolExposure, apiKeyEnvVar, extractAllMentions, extractMentions, extractSessionMentions, getProviderInfo, isOperationType, isPermissionLevel, isPlanOutcome, isProviderType, normalizeApproval } from '@epoch-agent/protocol';
@@ -487,7 +487,7 @@ function intervalSlots(everyMinutes) {
 var runCommand2;
 var init_backend = __esm({
   "src/schedule/os/backend.ts"() {
-    runCommand2 = (file, args) => new Promise((resolve16) => {
+    runCommand2 = (file, args) => new Promise((resolve17) => {
       guardSpawn(
         () => execFile(
           file,
@@ -495,10 +495,10 @@ var init_backend = __esm({
           { encoding: "buffer", windowsHide: true },
           (err, stdout, stderr) => {
             const code = err && typeof err.code === "number" ? err.code ?? 1 : err ? 1 : 0;
-            resolve16({ code, stdout: decodeOutput(stdout), stderr: decodeOutput(stderr) });
+            resolve17({ code, stdout: decodeOutput(stdout), stderr: decodeOutput(stderr) });
           }
         ),
-        (err) => resolve16({ code: 1, stdout: "", stderr: `${file}: ${err.message}` })
+        (err) => resolve17({ code: 1, stdout: "", stderr: `${file}: ${err.message}` })
       );
     });
   }
@@ -2065,7 +2065,7 @@ async function runCode(input) {
   let toolCalls = 0;
   let capped2 = false;
   let ending = null;
-  return await new Promise((resolve16) => {
+  return await new Promise((resolve17) => {
     let settled = false;
     const finish = () => {
       if (settled) return;
@@ -2074,7 +2074,7 @@ async function runCode(input) {
       clearInterval(abortWatch);
       void worker.terminate().catch(() => {
       }).then(() => Promise.race([drained, delay(STREAM_DRAIN_MS)])).then(() => {
-        resolve16(toOutcome(ending, { printed, toolCalls, capped: capped2, limits}));
+        resolve17(toOutcome(ending, { printed, toolCalls, capped: capped2, limits}));
       });
     };
     const timer = setTimeout(() => {
@@ -2145,14 +2145,14 @@ async function runCode(input) {
 var ABORT_POLL_MS = 100;
 var STREAM_DRAIN_MS = 500;
 function streamEnd(stream) {
-  return new Promise((resolve16) => {
-    stream.once("end", () => resolve16());
-    stream.once("close", () => resolve16());
+  return new Promise((resolve17) => {
+    stream.once("end", () => resolve17());
+    stream.once("close", () => resolve17());
   });
 }
 function delay(ms) {
-  return new Promise((resolve16) => {
-    setTimeout(resolve16, ms).unref();
+  return new Promise((resolve17) => {
+    setTimeout(resolve17, ms).unref();
   });
 }
 function timeoutMessage(timeoutMs, toolCalls) {
@@ -5287,6 +5287,7 @@ var PROJECT_AGENTS_SUBDIR = join(".epoch", "agents");
 var AGENT_ROLE_DIAG_MODULE = "AgentRole";
 var ROLE_FRONTMATTER_SCHEMA = z.object({
   name: z.string().min(1).optional(),
+  displayName: z.string().min(1).optional(),
   description: z.string().min(1),
   tools: z.array(z.string().min(1)).optional(),
   skills: z.array(z.string().min(1)).optional(),
@@ -5361,6 +5362,7 @@ function parseRoleDefinition(raw, file, source) {
   return {
     role: {
       name,
+      ...fm.displayName ? { displayName: fm.displayName } : {},
       description: fm.description,
       ...prompt ? { prompt } : {},
       ...fm.tools ? { tools: fm.tools } : {},
@@ -5463,8 +5465,17 @@ var BUILTIN_ROLES = [
     source: "builtin"
   }
 ];
+var BUILTIN_DISPLAY_NAME_KEYS = {
+  [DEFAULT_AGENT_ROLE]: "agent_role.display_general",
+  explore: "agent_role.display_explore",
+  review: "agent_role.display_review"
+};
 function builtinRoles() {
-  return BUILTIN_ROLES.map((r) => cloneRole(r));
+  return BUILTIN_ROLES.map((role) => {
+    const copied = cloneRole(role);
+    const key = BUILTIN_DISPLAY_NAME_KEYS[role.name];
+    return key ? { ...copied, displayName: t(key) } : copied;
+  });
 }
 function cloneRole(role) {
   return {
@@ -5490,6 +5501,7 @@ function mergeRoles(overrides) {
     merged.set(incoming.name, {
       ...existing,
       ...incoming.description ? { description: incoming.description } : {},
+      ...incoming.displayName ? { displayName: incoming.displayName } : {},
       ...incoming.prompt ? { prompt: incoming.prompt } : {},
       ...incoming.maxTurns !== void 0 ? { maxTurns: incoming.maxTurns } : {},
       ...tools ? { tools } : {},
@@ -5569,9 +5581,15 @@ function createRoleFile(input, opts) {
   }
   return { ok: true, path, role: back.role };
 }
+function displayNameOf(value) {
+  const trimmed = value?.trim();
+  return trimmed ? trimmed : void 0;
+}
 function frontmatterOf(name, input) {
+  const displayName = displayNameOf(input.displayName);
   return {
     name,
+    ...displayName ? { displayName } : {},
     description: input.description.trim(),
     ...input.tools === void 0 ? {} : { tools: [...input.tools] },
     ...input.skills === void 0 ? {} : { skills: [...input.skills] },
@@ -5588,6 +5606,8 @@ ${body2}${body2 ? "\n" : ""}`;
 }
 function driftOf(role, name, input) {
   if (role.name !== name) return `name: ${role.name} \u2260 ${name}`;
+  if ((role.displayName ?? null) !== (displayNameOf(input.displayName) ?? null))
+    return "displayName";
   if (role.description !== input.description.trim()) return "description";
   if ((role.prompt ?? "") !== (input.prompt ?? "").trim()) return "prompt";
   const tools = input.tools === void 0 ? void 0 : [...input.tools];
@@ -6635,7 +6655,7 @@ var PluginStore = class {
   }
 };
 function sleep(ms) {
-  return new Promise((resolve16) => setTimeout(resolve16, ms));
+  return new Promise((resolve17) => setTimeout(resolve17, ms));
 }
 // src/plugin/loader.ts
 var MODULE = "Plugin";
@@ -7495,7 +7515,9 @@ ${detail}` }) };
   const closure = await resolveClosure({
     root: manifest.name,
     declared: manifest.dependencies ?? [],
-    installed: new Set(new PluginStore(opts.statePath).read().records.map((r) => r.name)),
+    installed: new Map(
+      new PluginStore(opts.statePath).read().records.map((r) => [r.name, r.path])
+    ),
     staging,
     opts
   });
@@ -7613,8 +7635,14 @@ async function resolveClosure(input) {
     const { name, requiredBy } = next;
     if (seen.has(name)) continue;
     seen.add(name);
-    if (input.installed.has(name)) {
-      report3.push({ name, status: "installed", requiredBy });
+    const installedAt = input.installed.get(name);
+    if (installedAt !== void 0) {
+      report3.push({
+        name,
+        status: "installed",
+        requiredBy,
+        ...installedDisplayName(installedAt)
+      });
       continue;
     }
     if (plans.length >= DEPENDENCY_LIMIT) {
@@ -7694,6 +7722,7 @@ async function resolveClosure(input) {
       status: "plan",
       requiredBy,
       source: located.source,
+      ...manifest.displayName ? { displayName: manifest.displayName } : {},
       manifest,
       inventory: scanPluginDir(readDir, manifest.name),
       ...versionUnmet ? { versionUnmet } : {}
@@ -7711,6 +7740,10 @@ async function resolveClosure(input) {
   }
   return { report: report3, plans };
 }
+function installedDisplayName(dir) {
+  const displayName = readPluginManifest(dir).manifest?.displayName;
+  return displayName ? { displayName } : {};
+}
 async function locateDependency(name, opts) {
   const local = opts.marketplacesStatePath ? findMarketplaceEntryByName(name, opts.marketplacesStatePath) : void 0;
   if (local) return { source: local.source, marketplace: local.marketplace };
@@ -8465,7 +8498,8 @@ function asStringList(value) {
   return value.filter((v) => typeof v === "string" && v.length > 0);
 }
 function toAbsolute(path, workDir) {
-  return isAbsolute(path) ? resolve(path) : resolve(workDir, path);
+  const expanded = expandPath(path);
+  return isAbsolute(expanded) ? resolve(expanded) : resolve(workDir, expanded);
 }
 var MAX_FILE_BYTES2 = 128 * 1024;
 var MAX_CALL_BYTES = 512 * 1024;
@@ -8876,8 +8910,8 @@ function sanitizeToolOutput(text) {
   if (!stripped.includes("\r")) return stripped;
   return stripped.split("\n").map((line) => line.includes("\r") ? line.slice(line.lastIndexOf("\r") + 1) : line).join("\n");
 }
-var sleep2 = (ms) => new Promise((resolve16) => {
-  setTimeout(resolve16, ms);
+var sleep2 = (ms) => new Promise((resolve17) => {
+  setTimeout(resolve17, ms);
 });
 async function* pumpToolOutput(target, start, options = {}) {
   const flushMs = options.flushMs ?? FLUSH_MS;
@@ -8945,8 +8979,8 @@ async function* pumpToolOutput(target, start, options = {}) {
       continue;
     }
     if (!running) break;
-    await new Promise((resolve16) => {
-      wake = resolve16;
+    await new Promise((resolve17) => {
+      wake = resolve17;
     });
     if (running && flushMs > 0) await sleep2(flushMs);
   }
@@ -8962,10 +8996,11 @@ var REPLY_LANG_RULE = {
 var REPLY_LANG_MATCH_USER = "- \u7528\u7528\u6237\u8DDF\u4F60\u8BF4\u8BDD\u7684\u90A3\u79CD\u8BED\u8A00\u56DE\u590D\u4ED6\uFF1A\u6B63\u6587\u548C\u601D\u8003\u90FD\u7528\u90A3\u79CD\u8BED\u8A00\u3002\u4EE3\u7801\u5E93\u3001\u5DE5\u5177\u8F93\u51FA\u3001\u62A5\u9519\u662F\u4EC0\u4E48\u8BED\u8A00\uFF0C\u90FD\u4E0D\u6539\u53D8\u8FD9\u4E00\u6761";
 function identityLine(role) {
   if (!role) return "\u4F60\u662F\u4E00\u4E2A\u672C\u5730\u667A\u80FD\u4F53\uFF0C\u53EF\u4EE5\u6267\u884C\u7EC8\u7AEF\u547D\u4EE4\u548C\u64CD\u4F5C\u6587\u4EF6\u3002";
+  const who = role.displayName ?? role.name;
   if (role.scope === "session") {
-    return `\u4F60\u662F\u4E00\u4E2A\u672C\u5730\u667A\u80FD\u4F53\uFF0C\u8FD9\u4E00\u6B21\u4EE5\u300C${role.name}\u300D\u7684\u8EAB\u4EFD\u5DE5\u4F5C\u3002`;
+    return `\u4F60\u662F\u4E00\u4E2A\u672C\u5730\u667A\u80FD\u4F53\uFF0C\u8FD9\u4E00\u6B21\u4EE5\u300C${who}\u300D\u7684\u8EAB\u4EFD\u5DE5\u4F5C\u3002`;
   }
-  return `\u4F60\u662F\u300C${role.name}\u300D\u5B50\u667A\u80FD\u4F53\uFF0C\u7531\u4E3B\u667A\u80FD\u4F53\u6D3E\u6765\u5B8C\u6210\u4E00\u4E2A\u72EC\u7ACB\u5B50\u4EFB\u52A1\u3002`;
+  return `\u4F60\u662F\u300C${who}\u300D\u5B50\u667A\u80FD\u4F53\uFF0C\u7531\u4E3B\u667A\u80FD\u4F53\u6D3E\u6765\u5B8C\u6210\u4E00\u4E2A\u72EC\u7ACB\u5B50\u4EFB\u52A1\u3002`;
 }
 function systemPromptSegments(params) {
   return {
@@ -11219,6 +11254,37 @@ function pruneArtifacts(root, keepSession, retention = ARTIFACT_RETENTION_DEFAUL
 async function removeSessionArtifacts(sessionId, homeDir) {
   await rm(artifactsDir(sessionId, homeDir), { recursive: true, force: true });
 }
+function grantedPathsFor(args, workDir, extraRoots = []) {
+  const out = /* @__PURE__ */ new Set();
+  const add = (raw) => {
+    if (isInWorkspace(toAbsolute2(raw, workDir), workDir, extraRoots)) return;
+    out.add(approvalRootFor(raw, workDir));
+  };
+  for (const p of affectedPaths(args, workDir)) add(p);
+  const workdir = args["workdir"];
+  if (typeof workdir === "string" && workdir) add(workdir);
+  return [...out];
+}
+function approvalRootFor(target, workDir) {
+  const abs = toAbsolute2(target, workDir);
+  try {
+    if (statSync(abs).isDirectory()) return abs;
+  } catch {
+  }
+  return dirname(abs);
+}
+function approvalEntryFor(opTarget, workDir, grantedRoots) {
+  const abs = toAbsolute2(opTarget, workDir);
+  if (isInWorkspace(abs, workDir, [])) return { target: opTarget, scope: "exact" };
+  for (const root of grantedRoots) {
+    if (isInWorkspace(abs, workDir, [root])) return { target: root, scope: "prefix" };
+  }
+  return { target: opTarget, scope: "exact" };
+}
+function toAbsolute2(path, workDir) {
+  const expanded = expandPath(path);
+  return isAbsolute(expanded) ? resolve(expanded) : resolve(workDir, expanded);
+}
 var MAX_TOOL_OUTPUT = 3e4;
 var MAX_SUB_CALL_OUTPUT = CODE_MODE_LIMITS.maxValueChars;
 function budgetOf2(tool, depth, path = "success") {
@@ -11466,6 +11532,7 @@ var ToolExecutor = class {
         sessionId,
         workDir: this.deps.workDir(),
         ...extraRoots?.length ? { extraRoots } : {},
+        ...gate.grantedPaths?.length ? { grantedPaths: gate.grantedPaths } : {},
         ...homeDir ? { homeDir } : {},
         ...this.deps.sandboxTerminal !== void 0 ? { sandboxTerminal: this.deps.sandboxTerminal } : {},
         permissionLevel: this.deps.permissionManager?.getLevel() || "auto",
@@ -11600,6 +11667,11 @@ var ToolExecutor = class {
     const pm = this.deps.permissionManager;
     if (!pm) return { allowed: true };
     const toolName = et.name;
+    const granted = () => grantedPathsFor(args, this.deps.workDir(), pm.getExtraRoots?.() ?? []);
+    const allow = () => {
+      const paths = granted();
+      return paths.length > 0 ? { allowed: true, grantedPaths: paths } : { allowed: true };
+    };
     const opType = mapOperation(et);
     const opTarget = this.resolveTarget(et, args);
     const opDetail = (typeof args["command"] === "string" ? args["command"] : typeof args["path"] === "string" ? args["path"] : opTarget) || argsKey(args);
@@ -11610,7 +11682,7 @@ var ToolExecutor = class {
       target: opTarget,
       toolName
     });
-    if (decision.allowed) return { allowed: true };
+    if (decision.allowed) return allow();
     if (!decision.requireApproval) {
       return { allowed: false, output: `\u64CD\u4F5C\u88AB\u62E6\u622A [\u6743\u9650]: ${decision.reason || "\u9700\u8981\u6388\u6743"}` };
     }
@@ -11649,9 +11721,10 @@ var ToolExecutor = class {
       };
     }
     if (outcome === "allow-session" || outcome === "allow-always") {
-      pm.recordApproval(toolName, opTarget, outcome);
+      const entry = approvalEntryFor(opTarget, this.deps.workDir(), granted());
+      pm.recordApproval(toolName, entry.target, outcome, entry.scope);
     }
-    return { allowed: true };
+    return allow();
   }
 };
 // src/agent/loop.ts
@@ -12053,7 +12126,13 @@ var AgentLoop = class {
           const role = this.config.role?.();
           yield {
             type: "run-start",
-            ...role ? { role: { name: role.name, ...role.source ? { source: role.source } : {} } } : {},
+            ...role ? {
+              role: {
+                name: role.name,
+                ...role.displayName ? { displayName: role.displayName } : {},
+                ...role.source ? { source: role.source } : {}
+              }
+            } : {},
             estimatedTokens: estimated
           };
           if (learned.length > 0) {
@@ -18554,7 +18633,17 @@ function checkCodeExec(isolation) {
 function checkAuto() {
   return { allowed: true, code: "level-default" };
 }
-function checkPlan(operation) {
+function outsideWorkspace(operation, extraRoots) {
+  if (operation.type !== "file_read" && operation.type !== "file_write") return null;
+  if (isInWorkspace(operation.target, operation.workDir, extraRoots)) return null;
+  return {
+    allowed: false,
+    requireApproval: true,
+    reason: t("permission_reason.outside_workspace"),
+    code: "level-default"
+  };
+}
+function checkPlan(operation, extraRoots) {
   if (operation.type === "code_exec") {
     return {
       allowed: false,
@@ -18572,25 +18661,16 @@ function checkPlan(operation) {
       code: "level-default"
     };
   }
-  return { allowed: true, code: "level-default" };
+  return outsideWorkspace(operation, extraRoots) ?? { allowed: true, code: "level-default" };
 }
 function checkAcceptEdits(operation, isolation, extraRoots) {
   if (operation.type === "code_exec") return checkCodeExec(isolation);
-  if (operation.type === "file_read" || operation.type === "file_write") {
-    if (isInWorkspace(operation.target, operation.workDir, extraRoots)) {
-      return { allowed: true, code: "level-default" };
-    }
-    return {
-      allowed: false,
-      requireApproval: true,
-      reason: t("permission_reason.outside_workspace"),
-      code: "level-default"
-    };
-  }
-  return { allowed: true, code: "level-default" };
+  return outsideWorkspace(operation, extraRoots) ?? { allowed: true, code: "level-default" };
 }
-function checkDefault(operation) {
-  if (operation.type === "file_read") return { allowed: true, code: "level-default" };
+function checkDefault(operation, extraRoots) {
+  if (operation.type === "file_read") {
+    return outsideWorkspace(operation, extraRoots) ?? { allowed: true, code: "level-default" };
+  }
   if (operation.type === "command" && isReadOnlyCommand(operation.detail)) {
     return { allowed: true, code: "level-default" };
   }
@@ -18611,12 +18691,12 @@ function decideByLevel(level, operation, isolation, extraRoots = []) {
     case "auto":
       return checkAuto();
     case "plan":
-      return checkPlan(operation);
+      return checkPlan(operation, extraRoots);
     case "acceptEdits":
       return checkAcceptEdits(operation, isolation, extraRoots);
     case "default":
     default:
-      return checkDefault(operation);
+      return checkDefault(operation, extraRoots);
   }
 }
 var SENSITIVE_PATHS = [
@@ -21143,14 +21223,14 @@ function runCommandHook(config, event, workDir) {
   const baseEnv = sanitizeEnvironment(process.env);
   const injectedEnv = injectEpochEnv(event, config.pluginRoot);
   const hookEnv = { ...baseEnv, ...injectedEnv, ...config.env };
-  return new Promise((resolve16) => {
+  return new Promise((resolve17) => {
     let stdout = "";
     let stderr = "";
     let settled = false;
     const failToStart = (err) => {
       if (settled) return;
       settled = true;
-      resolve16({
+      resolve17({
         exitCode: -1,
         stdout,
         stderr,
@@ -21172,7 +21252,7 @@ function runCommandHook(config, event, workDir) {
       if (!settled) {
         settled = true;
         child.kill("SIGKILL");
-        resolve16({
+        resolve17({
           exitCode: -1,
           stdout,
           stderr,
@@ -21208,7 +21288,7 @@ function runCommandHook(config, event, workDir) {
         }
       } catch {
       }
-      resolve16({
+      resolve17({
         exitCode,
         stdout: stdout.trim(),
         stderr: stderr.trim(),
@@ -23991,7 +24071,7 @@ var CodeSandbox = class {
       stdio: ["ignore", "pipe", "pipe"],
       ...IS_WINDOWS ? { windowsHide: true } : {}
     };
-    return new Promise((resolve16) => {
+    return new Promise((resolve17) => {
       let stdout = "";
       let stderr = "";
       let killedForOutput = false;
@@ -24002,7 +24082,7 @@ var CodeSandbox = class {
       const failToStart = (err) => {
         opts.signal?.removeEventListener("abort", onAbort);
         if (err.code === "ENOENT") {
-          resolve16({
+          resolve17({
             success: false,
             output: "",
             error: `[\u9519\u8BEF] \u627E\u4E0D\u5230\u89E3\u91CA\u5668: ${command}`,
@@ -24011,7 +24091,7 @@ var CodeSandbox = class {
           });
           return;
         }
-        resolve16({
+        resolve17({
           success: false,
           output: "",
           error: `[\u9519\u8BEF] ${err.message}\uFF08command=${command}\uFF0Ccwd=${spawnOpts.cwd ?? ""}\uFF09`,
@@ -24047,7 +24127,7 @@ var CodeSandbox = class {
         if (stderr.length < MAX_OUTPUT) stderr += errDecoder?.end() ?? "";
         const duration = Date.now() - start;
         if (killedForOutput) {
-          resolve16({
+          resolve17({
             success: false,
             output: trunc(stdout, stderr),
             error: `[\u8F93\u51FA\u8D85\u9650] \u8D85\u8FC7 ${MAX_OUTPUT} \u5B57\u8282\uFF0C\u5DF2\u7EC8\u6B62`,
@@ -24057,7 +24137,7 @@ var CodeSandbox = class {
           return;
         }
         if (sig) {
-          resolve16({
+          resolve17({
             success: false,
             output: trunc(stdout, stderr),
             error: opts.signal?.aborted ? "[\u5DF2\u53D6\u6D88]" : "[\u8D85\u65F6] \u6267\u884C\u8D85\u65F6",
@@ -24069,7 +24149,7 @@ var CodeSandbox = class {
         const output = trunc(stdout, stderr);
         if (code !== 0 && code !== null) {
           const oom = /heap out of memory|allocation failed/i.test(stderr);
-          resolve16({
+          resolve17({
             success: false,
             output,
             error: oom ? `[\u5185\u5B58\u8D85\u9650] \u8D85\u8FC7 ${MAX_MEMORY}MB` : `[\u8FD0\u884C\u65F6\u9519\u8BEF] exit ${code}: ${stderr.slice(0, 200)}`,
@@ -24078,7 +24158,7 @@ var CodeSandbox = class {
           });
           return;
         }
-        resolve16({ success: true, output, duration });
+        resolve17({ success: true, output, duration });
       });
     });
   }
@@ -24138,4 +24218,4 @@ function trunc(stdout, stderr) {
  *    `--tree` 的命令帮助里，让用户自己知道 `--tree` 意味着什么。
  */
 
-export { AGENT_ROLE_DIAG_MODULE, ARTIFACT_MAX_TOTAL_BYTES, ARTIFACT_RETENTION_DEFAULTS, ATTACHMENT_MAX_TOTAL_BYTES, ATTACHMENT_RETENTION_DEFAULTS, AgentLoop, AppearanceStore, ApprovalCache, BLOCKED_TOOLS, BudgetGuard, BudgetStore, CHECKPOINT_MAX_TOTAL_BYTES, CLAUDE_EVENT_NAMES, CLAUDE_TOOL_NAMES, CODE_MODE_LIMITS, CODE_MODE_SDK_TAG, CONFIG_KEYS, CURRENT_CONFIG_VERSION, CheckpointManager, CheckpointStore, CodeSandbox, ComplianceEngine, ContextCompressor, DEFAULT_COMPLIANCE_ACTIONS, DEFAULT_COMPLIANCE_SETTINGS, DEFAULT_COMPRESSION_THRESHOLD, DEFAULT_GOAL_MAX_ROUNDS, DEFAULT_MAX_HOLD_CHARS, DelegateManager, EMPTY_RULES, EPOCH_DISK_LEDGER, EpochConfigSchema, FTS_TABLES, FTS_TRIGGERS, GOAL_BLOCK_CODES, GoalService, GoalStore, HEADLESS_AUDIT_CODES, HookManager, INSTRUCTION_BUDGET_CHARS, INSTRUCTION_FILES, ImageLoadError, ImportTrustStore, LAUNCHD_LABEL_PREFIX, LOCK_HEARTBEAT_MS, LOCK_STALE_MS, LastOpenSessions, MARKETPLACE_DISPLAY_FIELDS, MARKETPLACE_FILE, MAX_AUDIT_ENTRIES, MAX_COMMAND_DEPTH, MAX_GOAL_MAX_ROUNDS, MAX_IMPORT_DEPTH, MAX_LAST_OPEN_SESSIONS, MAX_OBJECTIVE_CHARS, MAX_REASON_CHARS, MAX_RECENT_WORKSPACES, MODEL_GIVE_UP_THRESHOLD, MULTIMODAL_DEFAULTS, ManagedPolicyError, ManagedSettingsSchema, MemoryManager, ModelFailureTracker, NOMINAL_TOTAL_BYTES, NO_REVEALED_TOOLS, PACK_EXCLUDES, PACK_MAX_BYTES, PACK_MAX_FILES, PERMISSION_AUDIT_CODES, PLUGIN_LAYOUT, PLUGIN_MANIFEST_FILE, PLUGIN_MANIFEST_KEYS, PLUGIN_NAME_PATTERN, PLUGIN_ROOT_ENV, PLUGIN_ROOT_TOKEN, PLUGIN_VISIBILITY, POLICY_DECISIONS, PROBE_VERSION, PROJECT_AGENTS_SUBDIR, PROVIDER_NO_CREDENTIAL, PermissionManager, PlanModeState, PluginAuthorSchema, PluginStore, PolicyRuleSchema, ProviderError, ProviderRouter, RECORDING_KEEP_RUNS, RECORDING_MAX_BYTES, ROLE_FRONTMATTER_SCHEMA, RUN_CODE_TOOL, RecentWorkspaces, SANDBOX_COVERS, SANDBOX_EXCLUDES, SCALAR_KEYS, SCHEDULE_DEFAULTS, SCHEDULE_DEFAULT_ALLOWLIST, SCHEDULE_FORM_BUDGET_USD, SCHEDULE_ISSUE_CODES, SCHTASKS_FOLDER, SESSION_MESSAGES_READ_TOOL, SESSION_MESSAGES_SEARCH_TOOL, SESSION_QUERY_TOOLS, SESSION_SEARCH_TOOL, SESSION_TRACE_TOOL, SETTINGS_LAYER_ORDER, SETTING_WRITE_KEYS, SETTING_WRITE_LAYERS, SKILL_CREATE_TOOL, SKILL_EDIT_TOOL, SKILL_PATCH_TOOL, SKILL_VIEW_TOOL, SKILL_WRITE_FILE_TOOL, SLASH_COMMANDS_DIAG_MODULE, ScheduleRecorder, ScheduleRegistrar, ScheduleStore, SessionManager, SessionQueries, SessionReferences, SettingsFileError, SettingsFileSchema, SkillLearner, SkillSystem, TOOL_SEARCH_TOOL, TaskNoticeTracker, ToolRegistry, TrackerDB, TrustManager, Workspace, acquireScheduleLock, addMarketplace, addUsage, admitArtifact, admitArtifacts, affectedPaths, artifactLaunchArgv, artifactOpenRefusal, assertLevelAllowed, blockedRoleTools, buildContextBreakdown, buildFireArgv, buildFtsMatchQuery, buildSchemaExports, buildSystemPrompt, buildTrigramMatchQuery, builtinRoles, checkEpochVersion, checkFtsHealth, checkShadowing, classifyPersistFailure, classifyProviderError, clearModelCache, coalesceRecording, codeModeWorkerPath, commandNameFromRelPath, compileRuleLists, compressionOptions, computeCost, computeCostMicros, computeExecHash, countRules, createAllowAllGate, createAllowAllImportGate, createAskQuestionTool, createCodeExecTool, createDelegateTool, createDenyAllGate, createDenyAllImportGate, createGoalTool, createImportGate, createMemoryTool, createPlanModeTools, createRoleFile, createRoleScope, createRunCodeTool, createScheduleDraftTool, createSessionMessagesReadTool, createSessionMessagesSearchTool, createSessionSearchTool, createSessionSearchTools, createSessionTraceTool, createSkillViewTool, createSkillWriteTools, createTodoTool, createToolRevealState, createToolScope, createToolSearchTool, createTrustGate, currentEpochVersion, decideImport, decideTrust, defaultConfig, defaultModelOf, describeArtifactRefusal, describeBackgroundTask, describeHeadlessPolicy, describeIsolation, describeJsonError, diagnoseSchedules, discoverMarkdown, discoverModels, discoverProject, displayAllows, displayCurrency, draftCommandLine, draftWidening, escapeRuleContent, estimateImageTokens, estimateRunTokens, estimateTokens, evaluateSelection, expandCommand, expandImports, explainSetting, extractArchive, findInstructionFiles, findProjectInstructions, findRole, formatBytes, formatSkillIndex, formatUsd, gateForTool, getCapability, getConfigIssues, getConfigOrigins, getImportGate, getTrustGate, hasDedicatedExecContent, hasExecTierContent, hasPromptCaching, hasProviderCredentials, hasReadTierContent, imageFromBase64, imageFromPath, imagePartTokens, importParts, importSkills, installPlugin, instructionDirs, instructionNotices, intervalSlots, inventoryProjectExtensions, inventoryTotal, isBlockCode, isCodeModeDeferred, isEmptyRules, isGoalPhase, isNonInteractive, isReadOnlySubCall, isSettingWriteLayer, isTransientPersistFailure, isValidPluginName, isWithinWindow, isWritableSettingKey, labelSlug, layerRank, listRunningSchedules, listSessionCandidates, listWorkspaceFiles, loadCommandDefinitions, loadCommandFile, loadCommands, loadConfig, loadHookSources, loadKeybindings, loadLexiconDir, loadLexiconFiles, loadPlugins, loadPolicyFiles, loadPolicyRules, loadRoleDefinitions, loadRoleDir, loadedImports, localDateString, managedSwitchNotes, mapClaudeToolName, mapEpochToolName, mapOperationType, matchPreauthorization, matchRuleLists, matchesHook, mentionsPluginRoot, mergeHeadlessPolicy, mergeRoles, mergeSchedulePatch, microsToUsd, modelListCandidates, needsAllowlist, nextFallbackModel, nextRunAt, noConfigOrigins, noManagedPolicy, noPlugins, openArtifact, originOf, packFileName, packPlugin, parseClaudeSettingsHooks, parseClock, parseDate, parseFrontmatter, parseHooksConfig, parseHooksConfigVerbose, parseImportLine, parseModelList, parseRoleDefinition, parseScheduleDraft, parseSkillFrontmatter, parseTrigger, pendingImageTokens, persistFailureCode, persistParts, persistToolResults, persistedUsage, planPack, previewSkillImport, pricingFor, projectEntryForDisplay, pruneArtifacts, pruneAttachments, pruneRecordings, pruneSchedules, readImageSize, readMarketplaces, readPluginManifest, readPluginRecords, readProviderKeyEnv, readRecording, readSessionSurface, reclaimFtsSpace, redactLine, refreshOpenRouterMetadata, removeMarketplace, removeRecordings, removeRoleFile, removeSessionArtifacts, removeSessionAttachments, renderImportTree, renderProjectContext, renderSdkDeclaration, renderSelfIndex, repairSchedules, resolveArtifactRetention, resolveCodeModeWorker, resolveComplianceDirs, resolveEntrySource, resolveInWorkspace, resolveMarketplaceRef, resolveMentions, resolveMultimodalPolicy, resolvePolicyDirs, resolvePricingAt, resolveProjectRoot, resolveScheduleBackend, resolveSessionReference, resolveSessionVisibility, resolveSettings, resolveSkillDirs, resolveSource, resolveTar, resolveWorkspace, restoreParts, revealScopedProvider, roleScopedProvider, roleSourceLabel, ruleCovers, ruleFromString, ruleToString, runCode, runCommand2 as runCommand, sanitizeArgNames, sanitizeCommand, sanitizeFtsQuery, sanitizePath, sanitizeToolOutput, scanInstructions, scanPluginDir, scanSkillDirs, searchMarketplaces, setDisplayCurrency, setImportGate, setPluginEnabled, setTrustGate, settingValueChoices, settingValueKind, settingWriteApply, settingWriteLayers, settingWriteTargets, skillIndexDescription, skillIndexResidency, skillIndexStats, sniffMediaType, splitFrontmatter, staticToolProvider, stripArtifactData, substitutePluginRoot, suggestRuleFromApproval, systemOpenArgv, systemPromptSegments, toPosix, toolDefinitionTokens, toolMatches, toolTableTokens, totalTokens, traceSession, triggerPeriodMs, unescapeRuleContent, uninstallPlugin, unknownRoleSkills, unknownRoleTools, unloadedInstructionFiles, updateMarketplace, updatePlugin, usdToMicros, validateSchedule, validateTrigger, validateWindow, withGoalCompression, withGoalPrompt, workspaceDisplayPath, writeSettingValue };
+export { AGENT_ROLE_DIAG_MODULE, ARTIFACT_MAX_TOTAL_BYTES, ARTIFACT_RETENTION_DEFAULTS, ATTACHMENT_MAX_TOTAL_BYTES, ATTACHMENT_RETENTION_DEFAULTS, AgentLoop, AppearanceStore, ApprovalCache, BLOCKED_TOOLS, BudgetGuard, BudgetStore, CHECKPOINT_MAX_TOTAL_BYTES, CLAUDE_EVENT_NAMES, CLAUDE_TOOL_NAMES, CODE_MODE_LIMITS, CODE_MODE_SDK_TAG, CONFIG_KEYS, CURRENT_CONFIG_VERSION, CheckpointManager, CheckpointStore, CodeSandbox, ComplianceEngine, ContextCompressor, DEFAULT_COMPLIANCE_ACTIONS, DEFAULT_COMPLIANCE_SETTINGS, DEFAULT_COMPRESSION_THRESHOLD, DEFAULT_GOAL_MAX_ROUNDS, DEFAULT_MAX_HOLD_CHARS, DelegateManager, EMPTY_RULES, EPOCH_DISK_LEDGER, EpochConfigSchema, FTS_TABLES, FTS_TRIGGERS, GOAL_BLOCK_CODES, GoalService, GoalStore, HEADLESS_AUDIT_CODES, HookManager, INSTRUCTION_BUDGET_CHARS, INSTRUCTION_FILES, ImageLoadError, ImportTrustStore, LAUNCHD_LABEL_PREFIX, LOCK_HEARTBEAT_MS, LOCK_STALE_MS, LastOpenSessions, MARKETPLACE_DISPLAY_FIELDS, MARKETPLACE_FILE, MAX_AUDIT_ENTRIES, MAX_COMMAND_DEPTH, MAX_GOAL_MAX_ROUNDS, MAX_IMPORT_DEPTH, MAX_LAST_OPEN_SESSIONS, MAX_OBJECTIVE_CHARS, MAX_REASON_CHARS, MAX_RECENT_WORKSPACES, MODEL_GIVE_UP_THRESHOLD, MULTIMODAL_DEFAULTS, ManagedPolicyError, ManagedSettingsSchema, MemoryManager, ModelFailureTracker, NOMINAL_TOTAL_BYTES, NO_REVEALED_TOOLS, PACK_EXCLUDES, PACK_MAX_BYTES, PACK_MAX_FILES, PERMISSION_AUDIT_CODES, PLUGIN_LAYOUT, PLUGIN_MANIFEST_FILE, PLUGIN_MANIFEST_KEYS, PLUGIN_NAME_PATTERN, PLUGIN_ROOT_ENV, PLUGIN_ROOT_TOKEN, PLUGIN_VISIBILITY, POLICY_DECISIONS, PROBE_VERSION, PROJECT_AGENTS_SUBDIR, PROVIDER_NO_CREDENTIAL, PermissionManager, PlanModeState, PluginAuthorSchema, PluginStore, PolicyRuleSchema, ProviderError, ProviderRouter, RECORDING_KEEP_RUNS, RECORDING_MAX_BYTES, ROLE_FRONTMATTER_SCHEMA, RUN_CODE_TOOL, RecentWorkspaces, SANDBOX_COVERS, SANDBOX_EXCLUDES, SCALAR_KEYS, SCHEDULE_DEFAULTS, SCHEDULE_DEFAULT_ALLOWLIST, SCHEDULE_FORM_BUDGET_USD, SCHEDULE_ISSUE_CODES, SCHTASKS_FOLDER, SESSION_MESSAGES_READ_TOOL, SESSION_MESSAGES_SEARCH_TOOL, SESSION_QUERY_TOOLS, SESSION_SEARCH_TOOL, SESSION_TRACE_TOOL, SETTINGS_LAYER_ORDER, SETTING_WRITE_KEYS, SETTING_WRITE_LAYERS, SKILL_CREATE_TOOL, SKILL_EDIT_TOOL, SKILL_PATCH_TOOL, SKILL_VIEW_TOOL, SKILL_WRITE_FILE_TOOL, SLASH_COMMANDS_DIAG_MODULE, ScheduleRecorder, ScheduleRegistrar, ScheduleStore, SessionManager, SessionQueries, SessionReferences, SettingsFileError, SettingsFileSchema, SkillLearner, SkillSystem, TOOL_SEARCH_TOOL, TaskNoticeTracker, ToolRegistry, TrackerDB, TrustManager, Workspace, acquireScheduleLock, addMarketplace, addUsage, admitArtifact, admitArtifacts, affectedPaths, approvalEntryFor, approvalRootFor, artifactLaunchArgv, artifactOpenRefusal, assertLevelAllowed, blockedRoleTools, buildContextBreakdown, buildFireArgv, buildFtsMatchQuery, buildSchemaExports, buildSystemPrompt, buildTrigramMatchQuery, builtinRoles, checkEpochVersion, checkFtsHealth, checkShadowing, classifyPersistFailure, classifyProviderError, clearModelCache, coalesceRecording, codeModeWorkerPath, commandNameFromRelPath, compileRuleLists, compressionOptions, computeCost, computeCostMicros, computeExecHash, countRules, createAllowAllGate, createAllowAllImportGate, createAskQuestionTool, createCodeExecTool, createDelegateTool, createDenyAllGate, createDenyAllImportGate, createGoalTool, createImportGate, createMemoryTool, createPlanModeTools, createRoleFile, createRoleScope, createRunCodeTool, createScheduleDraftTool, createSessionMessagesReadTool, createSessionMessagesSearchTool, createSessionSearchTool, createSessionSearchTools, createSessionTraceTool, createSkillViewTool, createSkillWriteTools, createTodoTool, createToolRevealState, createToolScope, createToolSearchTool, createTrustGate, currentEpochVersion, decideImport, decideTrust, defaultConfig, defaultModelOf, describeArtifactRefusal, describeBackgroundTask, describeHeadlessPolicy, describeIsolation, describeJsonError, diagnoseSchedules, discoverMarkdown, discoverModels, discoverProject, displayAllows, displayCurrency, draftCommandLine, draftWidening, escapeRuleContent, estimateImageTokens, estimateRunTokens, estimateTokens, evaluateSelection, expandCommand, expandImports, explainSetting, extractArchive, findInstructionFiles, findProjectInstructions, findRole, formatBytes, formatSkillIndex, formatUsd, gateForTool, getCapability, getConfigIssues, getConfigOrigins, getImportGate, getTrustGate, grantedPathsFor, hasDedicatedExecContent, hasExecTierContent, hasPromptCaching, hasProviderCredentials, hasReadTierContent, imageFromBase64, imageFromPath, imagePartTokens, importParts, importSkills, installPlugin, instructionDirs, instructionNotices, intervalSlots, inventoryProjectExtensions, inventoryTotal, isBlockCode, isCodeModeDeferred, isEmptyRules, isGoalPhase, isNonInteractive, isReadOnlySubCall, isSettingWriteLayer, isTransientPersistFailure, isValidPluginName, isWithinWindow, isWritableSettingKey, labelSlug, layerRank, listRunningSchedules, listSessionCandidates, listWorkspaceFiles, loadCommandDefinitions, loadCommandFile, loadCommands, loadConfig, loadHookSources, loadKeybindings, loadLexiconDir, loadLexiconFiles, loadPlugins, loadPolicyFiles, loadPolicyRules, loadRoleDefinitions, loadRoleDir, loadedImports, localDateString, managedSwitchNotes, mapClaudeToolName, mapEpochToolName, mapOperationType, matchPreauthorization, matchRuleLists, matchesHook, mentionsPluginRoot, mergeHeadlessPolicy, mergeRoles, mergeSchedulePatch, microsToUsd, modelListCandidates, needsAllowlist, nextFallbackModel, nextRunAt, noConfigOrigins, noManagedPolicy, noPlugins, openArtifact, originOf, packFileName, packPlugin, parseClaudeSettingsHooks, parseClock, parseDate, parseFrontmatter, parseHooksConfig, parseHooksConfigVerbose, parseImportLine, parseModelList, parseRoleDefinition, parseScheduleDraft, parseSkillFrontmatter, parseTrigger, pendingImageTokens, persistFailureCode, persistParts, persistToolResults, persistedUsage, planPack, previewSkillImport, pricingFor, projectEntryForDisplay, pruneArtifacts, pruneAttachments, pruneRecordings, pruneSchedules, readImageSize, readMarketplaces, readPluginManifest, readPluginRecords, readProviderKeyEnv, readRecording, readSessionSurface, reclaimFtsSpace, redactLine, refreshOpenRouterMetadata, removeMarketplace, removeRecordings, removeRoleFile, removeSessionArtifacts, removeSessionAttachments, renderImportTree, renderProjectContext, renderSdkDeclaration, renderSelfIndex, repairSchedules, resolveArtifactRetention, resolveCodeModeWorker, resolveComplianceDirs, resolveEntrySource, resolveInWorkspace, resolveMarketplaceRef, resolveMentions, resolveMultimodalPolicy, resolvePolicyDirs, resolvePricingAt, resolveProjectRoot, resolveScheduleBackend, resolveSessionReference, resolveSessionVisibility, resolveSettings, resolveSkillDirs, resolveSource, resolveTar, resolveWorkspace, restoreParts, revealScopedProvider, roleScopedProvider, roleSourceLabel, ruleCovers, ruleFromString, ruleToString, runCode, runCommand2 as runCommand, sanitizeArgNames, sanitizeCommand, sanitizeFtsQuery, sanitizePath, sanitizeToolOutput, scanInstructions, scanPluginDir, scanSkillDirs, searchMarketplaces, setDisplayCurrency, setImportGate, setPluginEnabled, setTrustGate, settingValueChoices, settingValueKind, settingWriteApply, settingWriteLayers, settingWriteTargets, skillIndexDescription, skillIndexResidency, skillIndexStats, sniffMediaType, splitFrontmatter, staticToolProvider, stripArtifactData, substitutePluginRoot, suggestRuleFromApproval, systemOpenArgv, systemPromptSegments, toPosix, toolDefinitionTokens, toolMatches, toolTableTokens, totalTokens, traceSession, triggerPeriodMs, unescapeRuleContent, uninstallPlugin, unknownRoleSkills, unknownRoleTools, unloadedInstructionFiles, updateMarketplace, updatePlugin, usdToMicros, validateSchedule, validateTrigger, validateWindow, withGoalCompression, withGoalPrompt, workspaceDisplayPath, writeSettingValue };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@epoch-agent/core",
-  "version": "0.22.0",
+  "version": "0.23.0",
   "private": false,
   "description": "epoch-agent 核心引擎：ReAct 循环、Provider 路由、工具调度、记忆管理",
   "repository": {
@@ -27,8 +27,8 @@
     "gpt-tokenizer": "^3.4.0",
     "js-yaml": "^5.2.3",
     "zod": "^4.4.3",
-    "@epoch-agent/protocol": "0.22.0",
-    "@epoch-agent/infra": "0.22.0"
+    "@epoch-agent/protocol": "0.23.0",
+    "@epoch-agent/infra": "0.23.0"
   },
   "devDependencies": {
     "@ai-sdk/alibaba": "^2.0.59",