@epoch-agent/core 0.7.1 → 0.9.0

package/dist/index.js

@@ -1,10 +1,10 @@
-import { existsSync, statSync, readdirSync, readFileSync, mkdirSync, writeFileSync, rmSync, symlinkSync, cpSync, renameSync, mkdtempSync, realpathSync, copyFileSync, unlinkSync, openSync, writeSync, closeSync, readSync, lstatSync } from 'fs';
+import { existsSync, statSync, readdirSync, readFileSync, mkdirSync, writeFileSync, renameSync, rmSync, symlinkSync, cpSync, mkdtempSync, realpathSync, copyFileSync, unlinkSync, openSync, writeSync, closeSync, readSync, lstatSync } from 'fs';
 import { homedir, platform, tmpdir, hostname } from 'os';
-import { join, dirname, resolve, isAbsolute, relative, sep, extname, basename } from 'path';
+import { join, dirname, resolve, relative, isAbsolute, sep, extname, basename } from 'path';
 import { execFile, execSync, execFileSync, spawn } from 'child_process';
-import { createLogger, dbPath, resolveHomeDir, DEFAULT_MAX_TURNS, t, unknownKeyIssues, parseLenient, issueDetails, splitWords, checkpointsDir, trustedImportsPath, budgetStatePath, artifactsDir, UNLIMITED_TURNS, turnLimitOf, configPath, managedSettingsPath, projectSettingsPath, projectLocalSettingsPath, getSecretValues, listStoredSecretNames, maskApiKey, setSectionField, isInWorkspace, workspacesPath, openDatabase, migrate, releaseDatabase, automationLogsDir, projectPoliciesDir, projectComplianceDir, projectHooksPath, projectClaudeSettingsPath, projectClaudeLocalSettingsPath, projectSkillsDir, trustPath, detectBackend, EXEC_PATH_AS_NODE_ENV, isolate, createStreamDecoder, parseShellCommand, writeArtifact, envPath, checkDangerousCommand, checkObfuscation, countCodePoints, keepHeadAndTail, normalizeForMatch, isReadOnlyCommand, CODE_EXEC_ROOTS } from '@epoch-agent/infra';
+import { createLogger, dbPath, resolveHomeDir, DEFAULT_MAX_TURNS, t, openDatabase, migrate, releaseDatabase, unknownKeyIssues, parseLenient, issueDetails, splitWords, checkpointsDir, trustedImportsPath, budgetStatePath, artifactsDir, UNLIMITED_TURNS, turnLimitOf, configPath, managedSettingsPath, projectSettingsPath, projectLocalSettingsPath, getSecretValues, listStoredSecretNames, maskApiKey, setSectionField, isInWorkspace, workspacesPath, automationLogsDir, projectPoliciesDir, projectComplianceDir, projectHooksPath, projectClaudeSettingsPath, projectClaudeLocalSettingsPath, projectSkillsDir, trustPath, detectBackend, EXEC_PATH_AS_NODE_ENV, isolate, createStreamDecoder, parseShellCommand, writeArtifact, envPath, checkDangerousCommand, checkObfuscation, countCodePoints, keepHeadAndTail, normalizeForMatch, isReadOnlyCommand, CODE_EXEC_ROOTS, headCodePoints, tailCodePoints } from '@epoch-agent/infra';
 export { IS_WINDOWS, WINDOWS_HIDE_FLAGS, buildBwrapArgs, buildProfile, checkDangerousCommand, checkObfuscation, createLogger, detectBackend, getDefaultShell, getPythonCommand, isInWorkspace, isReadOnlyCommand, isolate, maskApiKey, probeBubblewrap, probeSeatbelt, complianceDir as resolveComplianceDir, policiesDir as resolvePoliciesDir, setLogLevel } from '@epoch-agent/infra';
-import { PROVIDER_TYPES, OPERATION_TYPES as OPERATION_TYPES$1, COMPLIANCE_CATEGORIES, COMPLIANCE_ACTIONS, SEARCH_PROVIDER_TYPES, LANGS, PERMISSION_LEVELS, SHELL_KINDS, ToolExposure, MAX_OPTIONS, MIN_OPTIONS, MAX_HEADER_CHARS, MAX_QUESTIONS, SCHEDULE_INTERVAL_MINUTES, isPermissionLevel, SCHEDULE_DRAFT_TOOL, isValidAgentRoleName, DEFAULT_AGENT_ROLE, isValidCommandName, RESERVED_COMMAND_NAMES, parseModelRef, systemNote, totalUsageTokens, NOOP_TELEMETRY, METRIC, contentToText, GEN_AI, promptTokens, apiKeyEnvVar, PROVIDER_INFOS, isProviderType, API_KEY_ENV_VARS, KEY_ACTIONS, tableOf, perAction, isKeyAction, parseSequence, RESERVED_CHORDS, chordId, sequenceId, ACTION_CONTEXTS, SEQUENCE_CONTEXTS, assertNeverPart, MAX_ATTACH_FILES, MAX_ATTACH_TOTAL_BYTES, MAX_SESSION_REFS, utf8ByteLength, attachSessionSurface, isContextNearlyFull, isOperationType, normalizeApproval, MAX_ATTACH_BYTES, SIMULTANEOUS_CONTEXTS, SESSION_REFERENCE_ERROR_CODES, filePartSummary, sessionPartSummary } from '@epoch-agent/protocol';
+import { PROVIDER_TYPES, OPERATION_TYPES as OPERATION_TYPES$1, COMPLIANCE_CATEGORIES, COMPLIANCE_ACTIONS, SEARCH_PROVIDER_TYPES, LANGS, PERMISSION_LEVELS, SHELL_KINDS, ToolExposure, MAX_OPTIONS, MIN_OPTIONS, MAX_HEADER_CHARS, MAX_QUESTIONS, SCHEDULE_INTERVAL_MINUTES, isPermissionLevel, SCHEDULE_DRAFT_TOOL, isValidAgentRoleName, DEFAULT_AGENT_ROLE, isValidCommandName, RESERVED_COMMAND_NAMES, parseModelRef, systemNote, totalUsageTokens, NOOP_TELEMETRY, METRIC, contentToText, GEN_AI, isPromptOversize, promptTokens, apiKeyEnvVar, PROVIDER_INFOS, isProviderType, API_KEY_ENV_VARS, KEY_ACTIONS, tableOf, perAction, isKeyAction, parseSequence, RESERVED_CHORDS, chordId, sequenceId, ACTION_CONTEXTS, SEQUENCE_CONTEXTS, assertNeverPart, MAX_ATTACH_FILES, MAX_ATTACH_TOTAL_BYTES, MAX_SESSION_REFS, utf8ByteLength, attachSessionSurface, isContextNearlyFull, isOperationType, normalizeApproval, MAX_ATTACH_BYTES, SIMULTANEOUS_CONTEXTS, SESSION_REFERENCE_ERROR_CODES, filePartSummary, sessionPartSummary } from '@epoch-agent/protocol';
 export { API_KEY_ENV_VARS, COMPLIANCE_ACTIONS, COMPLIANCE_CATEGORIES, MAX_ATTACH_BYTES, MAX_ATTACH_FILES, MAX_ATTACH_TOTAL_BYTES, MAX_SESSION_ATTACH_BYTES, MAX_SESSION_REFS, OPERATION_TYPES, PERMISSION_LEVELS, PLAN_OUTCOMES, PROVIDER_INFOS, PROVIDER_TYPES, ToolExposure, apiKeyEnvVar, extractAllMentions, extractMentions, extractSessionMentions, getProviderInfo, isOperationType, isPermissionLevel, isPlanOutcome, isProviderType, normalizeApproval } from '@epoch-agent/protocol';
 import { createRequire } from 'module';
 import { randomUUID, createHash, randomBytes } from 'crypto';
@@ -561,8 +561,9 @@ function mapOperation(tool) {
   if (tool.operation && isOperationType(tool.operation)) return tool.operation;
   return fromAnnotations(tool.annotations) ?? mapOperationType(tool.name);
 }
+var MCP_TOOL_PREFIX = "mcp__";
 function isOpenWorldTool(tool) {
-  return tool.annotations?.openWorldHint === true;
+  return tool.annotations?.openWorldHint === true || tool.name.startsWith(MCP_TOOL_PREFIX);
 }
 // src/code-mode/readonly.ts
 var BLOCKED_OPERATIONS = /* @__PURE__ */ new Set(["command", "code_exec"]);
@@ -628,7 +629,7 @@ var ToolRegistry = class {
     this.addTool(tool, source);
   }
   registerTools(tools, source = "builtin") {
-    for (const t76 of tools) this.addTool(t76, source);
+    for (const t78 of tools) this.addTool(t78, source);
   }
   addTool(tool, source) {
     const existing = this.tools.get(tool.name);
@@ -677,14 +678,14 @@ var ToolRegistry = class {
     return isCodeModeDeferred(tool) ? ToolExposure.Deferred : declared;
   }
   exposed() {
-    return this.list().filter((t76) => this.exposureOf(t76) === ToolExposure.Direct);
+    return this.list().filter((t78) => this.exposureOf(t78) === ToolExposure.Direct);
   }
   byExposure(exposure) {
-    return this.list().filter((t76) => this.exposureOf(t76) === exposure);
+    return this.list().filter((t78) => this.exposureOf(t78) === exposure);
   }
   codeModeDeclared() {
     if (!this.codeMode) return [];
-    return this.list().filter((t76) => isCodeModeDeferred(t76));
+    return this.list().filter((t78) => isCodeModeDeferred(t78));
   }
   sourceOf(name) {
     return this.tools.get(name)?.source;
@@ -733,7 +734,7 @@ var ToolRegistry = class {
 function staticToolProvider(tools) {
   return {
     list: () => tools,
-    get: (name) => tools.find((t76) => t76.name === name)
+    get: (name) => tools.find((t78) => t78.name === name)
   };
 }
 var log = createLogger("tokenizer");
@@ -1145,7 +1146,7 @@ var DelegateManager = class {
   }
   normalizeTasks(args) {
     if (args.tasks && args.tasks.length > 0) {
-      return args.role ? args.tasks.map((t76) => ({ ...t76, role: t76.role ?? args.role })) : args.tasks;
+      return args.role ? args.tasks.map((t78) => ({ ...t78, role: t78.role ?? args.role })) : args.tasks;
     }
     if (args.goal) return [{ goal: args.goal, ...args.role ? { role: args.role } : {} }];
     return [];
@@ -1155,7 +1156,7 @@ var DelegateManager = class {
     for (let i = 0; i < tasks.length; i += maxConcurrent) {
       const batch = tasks.slice(i, i + maxConcurrent);
       const batchResults = await Promise.allSettled(
-        batch.map((t76) => this.runSingleTask(t76, parentSessionId))
+        batch.map((t78) => this.runSingleTask(t78, parentSessionId))
       );
       for (const r of batchResults) {
         if (r.status === "fulfilled") {
@@ -1296,21 +1297,21 @@ function createDelegateTool(runner, config, roles) {
     operation: "command",
     describeTarget: (args) => {
       const tasks = Array.isArray(args["tasks"]) ? args["tasks"] : [];
-      const goals = tasks.map((t76) => String(t76["goal"] ?? ""));
+      const goals = tasks.map((t78) => String(t78["goal"] ?? ""));
       const single = typeof args["goal"] === "string" ? args["goal"] : "";
       return [...goals, single].filter(Boolean).join(" | ");
     },
     async execute(args, ctx) {
       const start = Date.now();
       const rawTasks = Array.isArray(args["tasks"]) ? args["tasks"] : void 0;
-      const tasks = rawTasks?.map((t76) => {
-        const o = t76;
+      const tasks = rawTasks?.map((t78) => {
+        const o = t78;
         return {
           goal: String(o["goal"] ?? "").trim(),
           context: String(o["context"] ?? ""),
           ...typeof o["role"] === "string" && o["role"].trim() ? { role: o["role"].trim() } : {}
         };
-      }).filter((t76) => t76.goal.length > 0);
+      }).filter((t78) => t78.goal.length > 0);
       const goal = typeof args["goal"] === "string" ? args["goal"].trim() : "";
       const topRole = typeof args["role"] === "string" ? args["role"].trim() : "";
       if ((!tasks || tasks.length === 0) && !goal) {
@@ -1326,7 +1327,7 @@ function createDelegateTool(runner, config, roles) {
         };
       }
       const known = listRoles();
-      const requested = [...(tasks ?? []).map((t76) => t76.role), topRole].filter(
+      const requested = [...(tasks ?? []).map((t78) => t78.role), topRole].filter(
         (r) => Boolean(r)
       );
       const unknown = [...new Set(requested)].filter((r) => !known.some((k) => k.name === r));
@@ -1498,9 +1499,9 @@ function createGoalTool(deps) {
   };
 }
 var VALID_TARGETS = ["memory", "user"];
-var VALID_ACTIONS = ["add", "replace", "remove", "search", "budget"];
-function isValidTarget(t76) {
-  return typeof t76 === "string" && VALID_TARGETS.includes(t76);
+var VALID_ACTIONS = ["add", "replace", "remove", "search", "read", "budget"];
+function isValidTarget(t78) {
+  return typeof t78 === "string" && VALID_TARGETS.includes(t78);
 }
 function isValidAction(a) {
   return VALID_ACTIONS.includes(a);
@@ -1521,9 +1522,10 @@ function createMemoryTool(memory) {
     name: "memory",
     description: [
       "\u8BFB\u5199\u957F\u671F\u8BB0\u5FC6\u3002\u8DE8\u4F1A\u8BDD\u6301\u4E45\u5316\uFF0C\u7528\u4E8E\u8BB0\u4F4F\u7528\u6237\u504F\u597D\u3001\u9879\u76EE\u7EA6\u5B9A\u3001\u8E29\u8FC7\u7684\u5751\u3002",
-      "action=add \u65B0\u589E\u6761\u76EE\uFF1Breplace \u66FF\u6362\u5DF2\u6709\u6761\u76EE\uFF1Bremove \u5220\u9664\uFF1Bsearch \u68C0\u7D22\uFF1Bbudget \u67E5\u770B\u914D\u989D\u3002",
+      "action=add \u65B0\u589E\u6761\u76EE\uFF1Breplace \u66FF\u6362\u5DF2\u6709\u6761\u76EE\uFF1Bremove \u5220\u9664\uFF1Bsearch \u68C0\u7D22\uFF1Bread \u6309 id \u53D6\u5168\u6587\uFF1Bbudget \u67E5\u770B\u914D\u989D\u3002",
       'target=user \u5B58"\u7528\u6237\u662F\u8C01/\u504F\u597D\u4EC0\u4E48"\uFF1Btarget=memory \u5B58"\u6211\u9700\u8981\u8BB0\u4F4F\u7684\u9879\u76EE\u77E5\u8BC6"\u3002',
-      "\u53EA\u8BB0\u5F55\u975E\u663E\u800C\u6613\u89C1\u3001\u4EE5\u540E\u8FD8\u4F1A\u7528\u5230\u7684\u4FE1\u606F\u2014\u2014\u4E0D\u8981\u8BB0\u5F55\u80FD\u4ECE\u4EE3\u7801\u6216 git \u5386\u53F2\u8BFB\u51FA\u6765\u7684\u5185\u5BB9\u3002"
+      "\u53EA\u8BB0\u5F55\u975E\u663E\u800C\u6613\u89C1\u3001\u4EE5\u540E\u8FD8\u4F1A\u7528\u5230\u7684\u4FE1\u606F\u2014\u2014\u4E0D\u8981\u8BB0\u5F55\u80FD\u4ECE\u4EE3\u7801\u6216 git \u5386\u53F2\u8BFB\u51FA\u6765\u7684\u5185\u5BB9\u3002",
+      "system prompt \u91CC\u7684 MEMORY INDEX \u53EA\u6709\u6BCF\u6761\u7684\u9996\u884C\u6458\u8981\uFF1B\u8981\u5168\u6587\u7528 read\uFF0C\u627E\u4E0D\u5230\u7684\u7528 search\u3002"
     ].join("\n"),
     parameters: {
       type: "object",
@@ -1531,7 +1533,7 @@ function createMemoryTool(memory) {
         action: {
           type: "string",
           description: "\u64CD\u4F5C\u7C7B\u578B",
-          enum: ["add", "replace", "remove", "search", "budget"]
+          enum: ["add", "replace", "remove", "search", "read", "budget"]
         },
         target: {
           type: "string",
@@ -1544,7 +1546,11 @@ function createMemoryTool(memory) {
         },
         old_text: {
           type: "string",
-          description: "replace/remove \u8981\u5B9A\u4F4D\u7684\u539F\u6761\u76EE\u5185\u5BB9\uFF08\u9700\u5B8C\u6574\u5339\u914D\uFF09\u3002"
+          description: "replace/remove \u5B9A\u4F4D\u6761\u76EE\u7684**\u5168\u6587**\uFF08\u9700\u5B8C\u5168\u76F8\u540C\uFF09\u3002\u624B\u4E0A\u53EA\u6709\u7D22\u5F15\u65F6\u7528 id\uFF0C\u522B\u7528\u8FD9\u4E2A\u2014\u2014\u7D22\u5F15\u91CC\u7684\u6458\u8981\u662F\u622A\u65AD\u7684\uFF0C\u5339\u914D\u4E0D\u4E0A\u3002"
+        },
+        id: {
+          type: "string",
+          description: "replace/remove \u8981\u5B9A\u4F4D\u7684\u6761\u76EE id\uFF0C\u5F62\u5982 m:a1b2c3\uFF08\u6765\u81EA MEMORY INDEX \u6216 search\uFF09\u3002\u4E0E old_text \u4E8C\u9009\u4E00\uFF0C\u4F18\u5148\u7528\u5B83\u3002"
         },
         query: {
           type: "string",
@@ -1553,6 +1559,11 @@ function createMemoryTool(memory) {
         limit: {
           type: "number",
           description: "search \u8FD4\u56DE\u6761\u6570\u4E0A\u9650\uFF0C\u9ED8\u8BA4 5\u3002"
+        },
+        ids: {
+          type: "array",
+          items: { type: "string" },
+          description: "read \u8981\u53D6\u7684\u6761\u76EE id\uFF0C\u5F62\u5982 m:a1b2c3 / u:0b22e9\uFF08\u6765\u81EA MEMORY INDEX \u6216 search \u7ED3\u679C\uFF09\u3002"
         }
       },
       required: ["action"]
@@ -1590,7 +1601,21 @@ function createMemoryTool(memory) {
           const limit = typeof args["limit"] === "number" ? args["limit"] : 5;
           const results = await memory.search(query, limit);
           if (results.length === 0) return ok("(\u65E0\u5339\u914D\u8BB0\u5FC6)", start);
-          return ok(results.map((r) => `[${r.target}] ${r.content}`).join("\n"), start);
+          return ok(results.map((r) => `${r.id} [${r.target}] ${r.content}`).join("\n"), start);
+        }
+        if (action === "read") {
+          const raw = args["ids"];
+          const ids = Array.isArray(raw) ? raw.map((v) => String(v)) : [];
+          if (ids.length === 0) return fail("read \u9700\u8981\u975E\u7A7A ids \u6570\u7EC4", start);
+          const { found, missing } = await memory.read(ids);
+          const lines = found.map((f) => `${f.id} [${f.target}]
+${f.content}`);
+          if (missing.length > 0) {
+            lines.push(
+              `(\u8BA4\u4E0D\u51FA\u7684 id: ${missing.join(", ")} \u2014\u2014 \u5B83\u4EEC\u4E0D\u5728\u5F53\u524D\u8BB0\u5FC6\u5E93\u91CC\uFF0C\u7528 search \u91CD\u65B0\u627E)`
+            );
+          }
+          return ok(lines.join("\n\n"), start);
         }
         const target = args["target"];
         if (!isValidTarget(target)) {
@@ -1605,18 +1630,24 @@ function createMemoryTool(memory) {
           return fail(r.error ?? "\u5199\u5165\u5931\u8D25", start);
         }
         if (action === "replace") {
-          const oldText2 = String(args["old_text"] ?? "").trim();
+          const ref2 = String(args["id"] ?? args["old_text"] ?? "").trim();
           const content = String(args["content"] ?? "").trim();
-          if (!oldText2) return fail("replace \u9700\u8981 old_text", start);
+          if (!ref2) return fail("replace \u9700\u8981 id \u6216 old_text", start);
           if (!content) return fail("replace \u9700\u8981\u975E\u7A7A content", start);
-          const r = await memory.replace(target, oldText2, content);
+          const r = await memory.replace(target, ref2, content);
           if (r.success) return ok(`\u5DF2\u66FF\u6362 ${target} \u8BB0\u5FC6\u6761\u76EE`, start);
           if (r.consolidateHint) return ok(r.consolidateHint, start);
           return fail(r.error ?? "\u66FF\u6362\u5931\u8D25", start);
         }
-        const oldText = String(args["old_text"] ?? "").trim();
-        if (!oldText) return fail("remove \u9700\u8981 old_text", start);
-        await memory.remove(target, oldText);
+        const ref = String(args["id"] ?? args["old_text"] ?? "").trim();
+        if (!ref) return fail("remove \u9700\u8981 id \u6216 old_text", start);
+        const done2 = await memory.remove(target, ref);
+        if (!done2) {
+          return fail(
+            `${target} \u91CC\u6CA1\u6709\u5339\u914D "${ref}" \u7684\u6761\u76EE\u3002\u7528 MEMORY INDEX \u91CC\u7684 id\uFF08\u5982 id="m:a1b2c3"\uFF09\uFF0C\u6216\u5148 memory(action="search") \u627E\u4E00\u904D \u2014\u2014 old_text \u8981\u6C42\u5168\u6587\u5B8C\u5168\u76F8\u540C\uFF0C\u7D22\u5F15\u91CC\u90A3\u884C\u662F\u622A\u65AD\u8FC7\u7684\u3002`,
+            start
+          );
+        }
         return ok(`\u5DF2\u5220\u9664 ${target} \u8BB0\u5FC6\u6761\u76EE`, start);
       } catch (err) {
         return fail(err instanceof Error ? err.message : String(err), start, 4002);
@@ -2398,6 +2429,57 @@ var SCHEDULE_DEFAULT_ALLOWLIST = {
   allowOperations: ["file_read"],
   allowRules: []
 };
+// src/schedule/unattended-lint.ts
+var ANCHORS = [
+  { kind: "asks-human", zh: /问(?:一下|下)?我/, en: /\bask\s+(?:me|us)\b/i },
+  {
+    kind: "asks-human",
+    zh: /(?:告诉我|让我知道)[^\n]{0,8}(?:要不要|是否|该不该|需不需要)/,
+    en: /\blet\s+(?:me|us)\s+know\s+(?:if|whether|before)\b/i
+  },
+  {
+    kind: "asks-human",
+    zh: /(?:请(?:先)?确认|(?:跟|向|和)我确认|征求我)/,
+    en: /\b(?:confirm|check)\s+with\s+(?:me|us)\b/i
+  },
+  {
+    kind: "asks-human",
+    zh: /等(?:我|用户)[^\n]{0,6}(?:确认|回复|答复|决定|批)/,
+    en: /\bwait\s+for\s+(?:my|your|user)\w*\s+(?:confirmation|approval|reply|response)\b/i
+  },
+  {
+    kind: "asks-human",
+    zh: /(?:不确定|拿不准|有疑问)(?:的话|时|就|再)?[^\n]{0,6}(?:问|确认一下|找我)/,
+    en: /\bif\s+(?:you'?re\s+)?(?:unsure|not\s+sure|in\s+doubt)\b[^\n]{0,24}\bask\b/i
+  },
+  {
+    kind: "needs-context",
+    zh: /(?:刚才|上面(?:那|说|提到|的))/,
+    en: /\b(?:the\s+\w+\s+above|we\s+just\s+(?:did|said|discussed))\b/i
+  },
+  {
+    kind: "needs-context",
+    zh: /我们(?:之前|刚|前面|上次)[^\n]{0,4}(?:说|聊|讨论|定|提)/,
+    en: /\bas\s+(?:we\s+)?(?:discussed|agreed|mentioned)\b/i
+  },
+  {
+    kind: "needs-context",
+    zh: /(?:按|照|接着|继续)上(?:次|一次|轮|回)/,
+    en: /\b(?:like|same\s+as|per)\s+last\s+time\b/i
+  }
+];
+function lintUnattendedPrompt(prompt) {
+  const out = [];
+  const seen = /* @__PURE__ */ new Set();
+  for (const anchor of ANCHORS) {
+    if (seen.has(anchor.kind)) continue;
+    const hit = anchor.zh.exec(prompt) ?? anchor.en.exec(prompt);
+    if (!hit) continue;
+    seen.add(anchor.kind);
+    out.push({ kind: anchor.kind, matched: hit[0] });
+  }
+  return out;
+}
 // src/permission/rule-syntax.ts
 var ESCAPABLE = /* @__PURE__ */ new Set(["(", ")", "\\"]);
 function isEscaped(s, index) {
@@ -2524,8 +2606,8 @@ function resolvePathPattern(content, workDir) {
   const head = wildcardAt === -1 ? raw : raw.slice(0, wildcardAt);
   const tail = wildcardAt === -1 ? "" : raw.slice(wildcardAt);
   const resolvedHead = base === "" && isAbsolute(head) ? resolve(head) : resolve(base || ".", head);
-  const sep6 = head.endsWith("/") || head.endsWith("\\") ? "/" : "";
-  return `${resolvedHead}${sep6}${tail}`;
+  const sep7 = head.endsWith("/") || head.endsWith("\\") ? "/" : "";
+  return `${resolvedHead}${sep7}${tail}`;
 }
 function contentMatchesPath(content, operation) {
   if (!operation.target) return false;
@@ -3017,6 +3099,32 @@ function validateDraft(draft, homeDir, current) {
     (x) => x.detail ? `${x.code}\uFF08${x.detail}\uFF09` : x.code
   );
 }
+var UNATTENDED_TEXT = {
+  "asks-human": "\u8FD9\u6BB5\u8BDD\u5728\u51B2\u7740\u4E00\u4E2A\u4EBA\u8BF4\uFF0C\u800C\u5230\u70B9\u4E86\u6CA1\u6709\u4EBA\u5728 \u2014\u2014 \u65E0\u4EBA\u503C\u5B88\u4E0B\u5BA1\u6279\u4F1A\u88AB\u76F4\u63A5\u62D2\uFF08\u8BB0\u4E00\u6761\u6B20\u6761\uFF09\u3001`ask_question` \u4E5F\u6CA1\u6709\u95EE\u51FA\u53BB\u7684\u90A3\u6761\u8DEF\u3002\u628A\u6BCF\u4E00\u4E2A\u5C94\u8DEF\u53E3\u5C31\u5730\u5B9A\u6B7B\uFF1A\u4E0E\u5176\u300C\u4E0D\u786E\u5B9A\u5C31\u95EE\u6211\u300D\uFF0C\u4E0D\u5982\u5199\u300C\u4E0D\u786E\u5B9A\u5C31\u6309 X \u529E\uFF0C\u5E76\u5728\u62A5\u544A\u91CC\u5355\u5217\u4E00\u8282\u8BF4\u660E\u4E3A\u4EC0\u4E48\u62FF\u4E0D\u51C6\u300D",
+  "needs-context": "\u8FD9\u6BB5\u8BDD\u6307\u671B\u7740\u4E0A\u4E00\u8F6E\u7684\u4E0A\u4E0B\u6587\uFF0C\u800C**\u6BCF\u4E00\u6B21\u89E6\u53D1\u90FD\u662F\u4E00\u6761\u5168\u65B0\u4F1A\u8BDD** \u2014\u2014 \u6CA1\u6709\u300C\u521A\u624D\u300D\u3001\u6CA1\u6709\u300C\u4E0A\u9762\u90A3\u4E2A\u300D\uFF0C\u4F60\u73B0\u5728\u77E5\u9053\u7684\u4E1C\u897F\u5B83\u4E00\u4E2A\u5B57\u90FD\u4E0D\u77E5\u9053\u3002\u628A\u6307\u4EE3\u6362\u6210\u5199\u6B7B\u7684\u4E1C\u897F\uFF1A\u5177\u4F53\u7684\u8DEF\u5F84\u3001\u5177\u4F53\u7684\u5206\u652F\u540D\u3001\u5177\u4F53\u7684\u5224\u636E"
+};
+function unattendedIssues(draft) {
+  const prompt = draft.prompt;
+  if (prompt === void 0 || prompt === "") return [];
+  return lintUnattendedPrompt(prompt).map((x) => `\u300C${x.matched}\u300D\u2014\u2014 ${UNATTENDED_TEXT[x.kind]}`);
+}
+function structuralNotes(draft, current) {
+  const out = [];
+  const workDir = draft.workDir ?? current?.workDir;
+  if (workDir === void 0 || workDir === "") {
+    out.push(
+      "\u8FD9\u6761\u4EFB\u52A1**\u6CA1\u6709\u7ED1\u5DE5\u4F5C\u76EE\u5F55**\uFF0C\u6240\u4EE5\u5230\u70B9\u4E86\u5B83\u8DD1\u5728 `~/.epoch/automation/<id>/` \u91CC \u2014\u2014 \u4E0D\u662F\u4F60\u6B64\u523B\u6240\u5728\u7684\u8FD9\u4E2A\u9879\u76EE\u3002\u63D0\u793A\u8BCD\u91CC\u51E1\u662F\u6307\u7740\u7528\u6237\u4ED3\u5E93\u7684\u8DEF\u5F84\u90FD\u8981\u5199\u6210**\u7EDD\u5BF9\u8DEF\u5F84**\uFF0C\u6216\u8005\u5E72\u8106\u7ED9 `workDir`\uFF1B\u76F8\u5BF9\u8DEF\u5F84\u4F1A\u843D\u5728\u90A3\u4E2A\u4EFB\u52A1\u81EA\u5DF1\u7684\u76EE\u5F55\u4E0B\u9762\uFF08\u62A5\u544A\u843D\u90A3\u513F\u6B63\u597D\uFF0C\u522B\u7684\u591A\u534A\u4E0D\u662F\u4F60\u8981\u7684\uFF09\u3002"
+    );
+  }
+  const permission2 = draft.permission ?? current?.permission;
+  const listed = (draft.allowRules ?? current?.allowRules ?? []).length + (draft.allowTools ?? current?.allowTools ?? []).length + (draft.allowOperations ?? current?.allowOperations ?? []).length;
+  if (permission2 !== void 0 && needsAllowlist(permission2) && listed === 0) {
+    out.push(
+      `\u6743\u9650\u6863\u662F ${permission2}\uFF0C\u800C\u4E09\u4EFD\u6E05\u5355\u4E00\u6761\u90FD\u6CA1\u6709 \u2014\u2014 \u8FD9\u6761\u4EFB\u52A1\u9664\u4E86\u8BFB\u4E4B\u5916**\u4EC0\u4E48\u90FD\u505A\u4E0D\u4E86**\uFF1A\u5199\u6587\u4EF6\u548C\u8DD1\u547D\u4EE4\u5728\u8FD9\u4E00\u6863\u4E0B\u90FD\u8981\u786E\u8BA4\uFF0C\u800C\u6CA1\u4EBA\u53EF\u786E\u8BA4\u65F6\u662F\u76F4\u63A5\u62D2 + \u8BB0\u4E00\u6761\u6B20\u6761\u3002\u628A\u5B83\u5230\u70B9\u4E86\u771F\u8981\u505A\u7684\u4E8B\u9010\u6761\u5217\u8FDB \`allowRules\`\uFF08\u8FDE\u843D\u62A5\u544A\u90A3\u6761 \`file_write\` \u4E00\u8D77\uFF09\u3002`
+    );
+  }
+  return out;
+}
 function summarize(draft, current) {
   const lines = [];
   lines.push(
@@ -3031,6 +3139,7 @@ function summarize(draft, current) {
       `\u26A0\uFE0F \u8FD9\u4EFD\u63D0\u6848\u653E\u5BBD\u4E86\u6388\u6743\u9762\uFF1A${widening.map((k) => WIDENING_TEXT[k]).join("\uFF1B")}\u3002\u5728\u4F60\u7684\u56DE\u590D\u91CC\u4E3B\u52A8\u628A\u8FD9\u4E00\u70B9\u8BF4\u7ED9\u7528\u6237\u542C\uFF0C\u522B\u8BA9\u4ED6\u4ECE\u5361\u7247\u4E0A\u81EA\u5DF1\u53D1\u73B0\u3002`
     );
   }
+  for (const note of structuralNotes(draft, current)) lines.push(`\u26A0\uFE0F ${note}`);
   const cli = draftCommandLine(draft);
   lines.push(
     cli === void 0 ? "\uFF08\u6CA1\u6709\u754C\u9762\u7684\u5BBF\u4E3B\u4E0A\uFF1A\u6539\u4E00\u6761\u5DF2\u6709\u4EFB\u52A1\u4ECA\u5929\u53EA\u6709\u754C\u9762\u90A3\u6761\u8DEF \u2014\u2014 `epoch schedule` \u5E95\u4E0B\u6CA1\u6709\u6539\u5B57\u6BB5\u7684\u5B50\u547D\u4EE4\uFF0C\u53EA\u6709 enable / disable / rm\u3002\u522B\u7F16\u4E00\u6761 update \u51FA\u6765\u3002\uFF09" : `\u6CA1\u6709\u754C\u9762\u7684\u5BBF\u4E3B\u4E0A\uFF0C\u7B49\u4EF7\u7684\u547D\u4EE4\u884C\u662F\uFF08\u9884\u7B97\u90A3\u4E00\u683C\u8981\u7528\u6237\u81EA\u5DF1\u586B\uFF09\uFF1A
@@ -3148,6 +3257,17 @@ ${rows.map(describeRow).join("\n")}`,
           )
         );
       }
+      const unattended = unattendedIssues(draft);
+      if (unattended.length > 0) {
+        return Promise.resolve(
+          say4(
+            `\u8FD9\u4EFD\u8349\u7A3F\u4FDD\u5B58\u5F97\u4E86\uFF0C\u4F46\u5B83\u5230\u70B9\u4E86**\u8DD1\u4E0D\u51FA\u7ED3\u679C** \u2014\u2014 \u5B9A\u65F6\u4EFB\u52A1\u662F\u65E0\u4EBA\u503C\u5B88\u7684\uFF0C\u6CA1\u4EBA\u5728\u65C1\u8FB9\u56DE\u8BDD\u3002\u6539\u5B8C\u518D\u4EA4\uFF1A
+${unattended.map((x) => `\xB7 ${x}`).join("\n")}`,
+            false,
+            startedAt
+          )
+        );
+      }
       return Promise.resolve(say4(summarize(draft, current), true, startedAt));
     }
   };
@@ -4005,6 +4125,7 @@ function createSkillViewTool(deps) {
     },
     exposure: ToolExposure.Direct,
     supportsParallel: true,
+    governsOwnOutput: true,
     annotations: {
       readOnlyHint: true,
       destructiveHint: false,
@@ -4370,7 +4491,7 @@ function available(tools) {
   if (tools.length === 0) {
     return "No deferred tools in this session \u2014 every tool is already in your tool list.";
   }
-  const names = tools.map((t76) => t76.name).sort();
+  const names = tools.map((t78) => t78.name).sort();
   const shown = names.slice(0, MAX_LISTED);
   const rest = names.length - shown.length;
   return `Searchable tools: ${shown.join(", ")}${rest > 0 ? ` (\u2026and ${rest} more)` : ""}.`;
@@ -4431,6 +4552,83 @@ ${lines.join("\n")}${truncated}`,
     }
   };
 }
+function isOpenTodo(status) {
+  return status === "pending" || status === "in_progress";
+}
+var NS = "tracker";
+var MIGRATIONS = [
+  {
+    id: "tracker-baseline",
+    version: 1,
+    description: "TODO \u8868\uFF08\u57FA\u7EBF\uFF09",
+    up: (db) => {
+      db.exec(`
+        CREATE TABLE IF NOT EXISTS todos (
+          id          TEXT PRIMARY KEY,
+          session_id  TEXT NOT NULL,
+          content     TEXT NOT NULL,
+          status      TEXT NOT NULL DEFAULT 'pending'
+                        CHECK(status IN ('pending','in_progress','completed','cancelled')),
+          created_at  TEXT NOT NULL,
+          updated_at  TEXT NOT NULL
+        );
+        CREATE INDEX IF NOT EXISTS idx_todos_session ON todos(session_id);
+      `);
+    }
+  },
+  {
+    id: "todos-reason-column",
+    version: 2,
+    description: "TODO \u8868\u52A0 reason \u5217\uFF08\u53D6\u6D88\u7406\u7531\uFF0C\u53EA\u6709 cancelled \u90A3\u4E00\u6863\u4F1A\u6709\uFF09",
+    up: (db) => {
+      db.exec(`ALTER TABLE todos ADD COLUMN reason TEXT;`);
+    }
+  }
+];
+var TrackerDB = class {
+  db;
+  path;
+  constructor(dbPath) {
+    this.path = dbPath;
+    this.db = openDatabase(this.path);
+    migrate(this.db, NS, MIGRATIONS);
+  }
+  listBySession(sessionId) {
+    const rows = this.db.prepare(
+      "SELECT id, content, status, reason, created_at, updated_at FROM todos WHERE session_id = ? ORDER BY updated_at ASC"
+    ).all(sessionId);
+    return rows.map(({ reason: reason9, ...rest }) => reason9 ? { ...rest, reason: reason9 } : rest);
+  }
+  countOpen(sessionId) {
+    const row = this.db.prepare(
+      "SELECT COUNT(*) AS n FROM todos WHERE session_id = ? AND status IN ('pending','in_progress')"
+    ).get(sessionId);
+    return row.n;
+  }
+  replaceAll(sessionId, todos) {
+    const insertStmt = this.db.prepare(
+      "INSERT INTO todos (id, session_id, content, status, reason, created_at, updated_at) VALUES (@id, @session_id, @content, @status, @reason, @created_at, @updated_at)"
+    );
+    this.db.transaction(() => {
+      this.db.prepare("DELETE FROM todos WHERE session_id = ?").run(sessionId);
+      for (const t78 of todos) {
+        insertStmt.run({
+          id: t78.id,
+          session_id: sessionId,
+          content: t78.content,
+          status: t78.status,
+          reason: t78.reason || null,
+          created_at: t78.created_at,
+          updated_at: t78.updated_at
+        });
+      }
+    })();
+  }
+  close() {
+    releaseDatabase(this.path);
+  }
+};
+// src/tools/builtin/todo.ts
 function generateShortId() {
   return randomBytes(3).toString("hex");
 }
@@ -4443,9 +4641,9 @@ function formatTodoList(todos, pendingCount) {
     cancelled: "\u5DF2\u53D6\u6D88"
   };
   lines.push(`[todo] \u72B6\u6001\u6C47\u603B: ${pendingCount} \u4E2A\u5F85\u5B8C\u6210`);
-  for (const t76 of todos) {
-    const label = statusLabel[t76.status] || t76.status;
-    lines.push(`- [${label}]  ${t76.content}${t76.reason ? ` \u2014\u2014 ${t76.reason}` : ""}`);
+  for (const t78 of todos) {
+    const label = statusLabel[t78.status] || t78.status;
+    lines.push(`- [${label}]  ${t78.content}${t78.reason ? ` \u2014\u2014 ${t78.reason}` : ""}`);
   }
   return lines.join("\n");
 }
@@ -4519,14 +4717,14 @@ function createTodoTool(db) {
           };
         }
         const now = (/* @__PURE__ */ new Date()).toISOString();
-        const existing = new Map(db.listBySession(ctx.sessionId).map((t76) => [t76.id, t76]));
-        const todos = rawTodos.map((t76) => {
-          const prev = t76.id ? existing.get(t76.id) : void 0;
-          const status = isValidStatus(t76.status) ? t76.status : "pending";
-          const reason9 = normalizeReason(status, t76.reason);
+        const existing = new Map(db.listBySession(ctx.sessionId).map((t78) => [t78.id, t78]));
+        const todos = rawTodos.map((t78) => {
+          const prev = t78.id ? existing.get(t78.id) : void 0;
+          const status = isValidStatus(t78.status) ? t78.status : "pending";
+          const reason9 = normalizeReason(status, t78.reason);
           return {
-            id: t76.id || generateShortId(),
-            content: String(t76.content || "").slice(0, 500),
+            id: t78.id || generateShortId(),
+            content: String(t78.content || "").slice(0, 500),
             status,
             ...reason9 ? { reason: reason9 } : {},
             created_at: prev?.created_at || now,
@@ -4534,9 +4732,7 @@ function createTodoTool(db) {
           };
         });
         db.replaceAll(ctx.sessionId, todos);
-        const pendingCount = todos.filter(
-          (t76) => t76.status === "pending" || t76.status === "in_progress"
-        ).length;
+        const pendingCount = todos.filter((t78) => isOpenTodo(t78.status)).length;
         return {
           success: true,
           output: formatTodoList(todos, pendingCount),
@@ -4871,7 +5067,7 @@ function intersectNames(base, incoming) {
   if (!base) return incoming ? [...incoming] : void 0;
   if (!incoming) return [...base];
   const baseSet = new Set(base);
-  return incoming.filter((t76) => baseSet.has(t76));
+  return incoming.filter((t78) => baseSet.has(t78));
 }
 function findRole(roles, name) {
   return roles.find((r) => r.name === name);
@@ -4957,7 +5153,7 @@ function roleScopedProvider(base, role, blocked) {
     return allow ? allow.has(name) : true;
   };
   return {
-    list: () => base.list().filter((t76) => permitted(t76.name)),
+    list: () => base.list().filter((t78) => permitted(t78.name)),
     get: (name) => permitted(name) ? base.get(name) : void 0
   };
 }
@@ -4984,7 +5180,7 @@ function createRoleScope(base, sessionRole, blocked) {
 }
 function unknownRoleTools(base, role, blocked) {
   if (!role?.tools) return [];
-  const available2 = new Set(base.list().map((t76) => t76.name));
+  const available2 = new Set(base.list().map((t78) => t78.name));
   const blockedSet = new Set(blocked);
   return role.tools.filter((name) => !available2.has(name) && !blockedSet.has(name));
 }
@@ -5320,7 +5516,7 @@ function createToolScope(base) {
   const permitted = (name) => allow ? allow.has(name) : true;
   return {
     provider: {
-      list: () => base.list().filter((t76) => permitted(t76.name)),
+      list: () => base.list().filter((t78) => permitted(t78.name)),
       get: (name) => permitted(name) ? base.get(name) : void 0
     },
     enter: (next) => {
@@ -5490,7 +5686,7 @@ function scanHooks(dir, issues) {
   return [...parsed.entries].map(([type, list]) => ({
     type,
     count: list.reduce((sum, entry) => sum + entry.hooks.length, 0)
-  })).filter((t76) => t76.count > 0).sort((a, b) => a.type.localeCompare(b.type));
+  })).filter((t78) => t78.count > 0).sort((a, b) => a.type.localeCompare(b.type));
 }
 function scanMcp(dir, plugin, issues) {
   const path = join(dir, PLUGIN_LAYOUT.mcp);
@@ -5568,11 +5764,11 @@ function firstLine(err) {
   return message.split("\n")[0] ?? t("plugin_inventory.unknown_error");
 }
 var PLUGIN_MANIFEST_FILE = "epoch-plugin.json";
-var PLUGIN_NAME_PATTERN = /^[a-z0-9][a-z0-9-]*$/;
+var PLUGIN_NAME_PATTERN = /^[a-z0-9][a-z0-9_-]*$/;
 function isValidPluginName(name) {
   return PLUGIN_NAME_PATTERN.test(name);
 }
-var AuthorSchema = z.object({
+var PluginAuthorSchema = z.object({
   name: z.string().min(1),
   email: z.string().min(1).optional(),
   url: z.string().min(1).optional()
@@ -5581,7 +5777,7 @@ var ManifestSchema = z.object({
   name: z.string().min(1),
   version: z.string().min(1),
   description: z.string().min(1).optional(),
-  author: AuthorSchema.optional(),
+  author: PluginAuthorSchema.optional(),
   epochVersion: z.string().min(1).optional(),
   homepage: z.string().min(1).optional(),
   keywords: z.array(z.string().min(1)).optional()
@@ -5750,7 +5946,7 @@ var RecordSchema = z.object({
   name: z.string().regex(PLUGIN_NAME_PATTERN),
   version: z.string().min(1),
   source: z.string().min(1),
-  sourceType: z.enum(["local", "git", "npm", "archive"]),
+  sourceType: z.enum(["local", "git", "npm", "archive", "host"]),
   path: z.string().min(1),
   linked: z.boolean(),
   enabled: z.boolean(),
@@ -6148,6 +6344,144 @@ function flattenSingleRoot(dest) {
   }
   rmSync(inner, { recursive: true, force: true });
 }
+var PACK_EXCLUDES = [
+  ".git",
+  "node_modules",
+  ".DS_Store",
+  "__pycache__"
+];
+var SECRET_LOOKING = [
+  /^\.env(\..+)?$/i,
+  /\.pem$/i,
+  /\.key$/i,
+  /^id_(rsa|dsa|ecdsa|ed25519)$/i
+];
+var PACK_MAX_BYTES = 50 * 1024 * 1024;
+var PACK_MAX_FILES = 2e3;
+function planPack(dir, limits = {}) {
+  const read = readPluginManifest(dir);
+  if (!read.manifest) {
+    const detail = read.issues.map((i) => `${i.path}: ${i.message}`).join("\n");
+    return { ok: false, reason: t("plugin_pack.not_a_plugin", { detail: `
+${detail}` }) };
+  }
+  const maxFiles = limits.maxFiles ?? PACK_MAX_FILES;
+  const maxBytes = limits.maxBytes ?? PACK_MAX_BYTES;
+  const files = [];
+  const skippedLinks = [];
+  let totalBytes = 0;
+  const walk3 = (current) => {
+    let entries;
+    try {
+      entries = readdirSync(current, { withFileTypes: true });
+    } catch (err) {
+      return t("plugin_pack.read_failed", { path: current, reason: firstLine3(err) });
+    }
+    for (const entry of entries) {
+      if (PACK_EXCLUDES.includes(entry.name)) continue;
+      const abs = join(current, entry.name);
+      const rel = relative(dir, abs).split(sep).join("/");
+      if (entry.isSymbolicLink()) {
+        skippedLinks.push(rel);
+        continue;
+      }
+      if (entry.isDirectory()) {
+        if (isVirtualenv(abs)) continue;
+        const failed = walk3(abs);
+        if (failed) return failed;
+        continue;
+      }
+      if (!entry.isFile()) continue;
+      if (rel.includes("\n") || rel.includes("\r")) {
+        return t("plugin_pack.bad_name", { path: rel });
+      }
+      let stat5;
+      try {
+        stat5 = statSync(abs);
+      } catch (err) {
+        return t("plugin_pack.read_failed", { path: abs, reason: firstLine3(err) });
+      }
+      files.push({ path: rel, bytes: stat5.size, mtimeMs: Math.floor(stat5.mtimeMs) });
+      totalBytes += stat5.size;
+      if (files.length > maxFiles) {
+        return t("plugin_pack.too_many_files", { max: maxFiles });
+      }
+      if (totalBytes > maxBytes) {
+        return t("plugin_pack.too_large", { max: Math.floor(maxBytes / (1024 * 1024)) });
+      }
+    }
+    return void 0;
+  };
+  const failure = walk3(dir);
+  if (failure) return { ok: false, reason: failure };
+  if (files.length === 0) return { ok: false, reason: t("plugin_pack.empty") };
+  files.sort((a, b) => a.path.localeCompare(b.path));
+  const suspicious = files.map((f) => f.path).filter((p) => SECRET_LOOKING.some((re) => re.test(p.split("/").pop() ?? "")));
+  return {
+    ok: true,
+    plan: { dir, manifest: read.manifest, files, totalBytes, suspicious, skippedLinks }
+  };
+}
+function packFileName(manifest) {
+  return `${manifest.name}-${manifest.version}.zip`;
+}
+async function packPlugin(plan, destDir) {
+  const rel = relative(plan.dir, destDir);
+  const outside = rel !== "" && (rel.startsWith("..") || isAbsolute(rel));
+  if (!outside) {
+    return { ok: false, reason: t("plugin_pack.dest_inside", { dir: plan.dir }) };
+  }
+  const listFile = join(destDir, "epoch-pack-files.txt");
+  const archivePath = join(destDir, packFileName(plan.manifest));
+  try {
+    writeFileSync(listFile, `${plan.files.map((f) => f.path).join("\n")}
+`, "utf-8");
+  } catch (err) {
+    return {
+      ok: false,
+      reason: t("plugin_pack.read_failed", { path: listFile, reason: firstLine3(err) })
+    };
+  }
+  let result;
+  try {
+    result = await runCommand(resolveTar(), [
+      "-c",
+      "-f",
+      archivePath,
+      "--format",
+      "zip",
+      "-C",
+      plan.dir,
+      "-T",
+      listFile
+    ]);
+  } finally {
+    rmSync(listFile, { force: true });
+  }
+  if (!result.ok) {
+    return {
+      ok: false,
+      reason: t("plugin_pack.tar_failed", { detail: result.detail }) + (result.notFound ? t("plugin_archive.no_tar_hint") : "")
+    };
+  }
+  let bytes;
+  try {
+    bytes = statSync(archivePath).size;
+  } catch (err) {
+    return {
+      ok: false,
+      reason: t("plugin_pack.read_failed", { path: archivePath, reason: firstLine3(err) })
+    };
+  }
+  return { ok: true, archivePath, bytes };
+}
+function isVirtualenv(dir) {
+  return existsSync(join(dir, "pyvenv.cfg"));
+}
+function firstLine3(err) {
+  const message = err instanceof Error ? err.message : String(err);
+  return message.split("\n")[0] ?? message;
+}
 var NPM_SPEC = /^(?:@[a-z0-9][a-z0-9._-]*\/)?[a-z0-9][a-z0-9._-]*(?:@[a-zA-Z0-9.^~*+-]+)?$/;
 var REMOTE_URL = /^https?:\/\/[^\s'"\\^|<>]+$/;
 function resolveSource(raw) {
@@ -6177,6 +6511,11 @@ function resolveSource(raw) {
     if (!NPM_SPEC.test(pkg)) return void 0;
     return { type: "npm", raw: input, target: pkg };
   }
+  if (input.startsWith("host:")) {
+    const opaque = input.slice("host:".length).trim();
+    if (!opaque) return void 0;
+    return { type: "host", raw: input, target: opaque };
+  }
   if (input.startsWith("https://") || input.startsWith("http://")) {
     const [url = "", fragment] = input.split("#", 2);
     if (!REMOTE_URL.test(url)) return void 0;
@@ -6192,7 +6531,11 @@ function resolveSource(raw) {
     }
     return { type: "git", raw: input, target: url };
   }
-  return { type: "local", raw: input, target: isAbsolute(input) ? input : resolve(input) };
+  const abs = isAbsolute(input) ? input : resolve(input);
+  if (isArchiveUrl(abs)) {
+    return { type: "archive", raw: input, target: abs, localFile: true };
+  }
+  return { type: "local", raw: input, target: abs };
 }
 function isArchiveUrl(url) {
   const path = url.split("?")[0] ?? "";
@@ -6237,7 +6580,8 @@ async function runInstall(resolved, staging, opts) {
     return { ok: false, reason: t("plugin_install.manifest_unusable", { detail: `
 ${detail}` }) };
   }
-  const conflict = new PluginStore(opts.statePath).read().records.find((r) => r.name === manifest.name);
+  const taken = new PluginStore(opts.statePath).read().records.find((r) => r.name === manifest.name);
+  const conflict = taken && taken.name !== opts.replace ? taken : void 0;
   const current = opts.epochVersion ?? currentEpochVersion();
   const version = checkEpochVersion(manifest.epochVersion, current);
   const versionUnmet = !version.ok && manifest.epochVersion ? { required: manifest.epochVersion, current, reason: version.reason } : void 0;
@@ -6255,7 +6599,7 @@ ${detail}` }) };
       reason: t("plugin_install.renamed", { found: manifest.name, expected: opts.replace })
     };
   }
-  if (conflict && opts.replace === void 0) {
+  if (conflict) {
     return {
       ok: false,
       preview: preview3,
@@ -6320,8 +6664,51 @@ async function fetchInto(source, staging, opts) {
   if (source.type === "local") return fetchLocal(source);
   if (source.type === "git") return fetchGit(source, staging, opts);
   if (source.type === "npm") return fetchNpm(source, staging, opts);
+  if (source.type === "host") return fetchFromHost(source, staging, opts);
+  if (source.localFile) return fetchLocalArchive(source, staging);
   return fetchArchive(source, staging, opts);
 }
+async function fetchLocalArchive(source, staging) {
+  if (!existsSync(source.target)) {
+    return { ok: false, reason: t("plugin_install.archive_missing", { path: source.target }) };
+  }
+  mkdirSync(staging, { recursive: true });
+  return extractArchive(source.target, staging);
+}
+async function fetchFromHost(source, staging, opts) {
+  const ask = opts.fetchFromHost;
+  if (!ask) {
+    return { ok: false, reason: t("plugin_install.host_fetch_unavailable") };
+  }
+  opts.onProgress?.(t("plugin_install.host_fetching", { target: source.target }));
+  mkdirSync(staging, { recursive: true });
+  return withDownloadDir(async (dl) => {
+    let answer;
+    try {
+      answer = await ask({ target: source.target, destDir: dl });
+    } catch (err) {
+      return {
+        ok: false,
+        reason: t("plugin_install.host_fetch_threw", {
+          reason: (err instanceof Error ? err.message : String(err)).split("\n")[0] ?? ""
+        })
+      };
+    }
+    if (!answer.ok) {
+      return {
+        ok: false,
+        reason: answer.reason ?? t("plugin_install.host_fetch_failed", { target: source.target })
+      };
+    }
+    if (!existsSync(answer.archivePath)) {
+      return {
+        ok: false,
+        reason: t("plugin_install.host_fetch_no_file", { path: answer.archivePath })
+      };
+    }
+    return extractArchive(answer.archivePath, staging);
+  });
+}
 function fetchLocal(source) {
   if (!existsSync(source.target)) {
     return { ok: false, reason: t("plugin_install.local_missing", { path: source.target }) };
@@ -6468,18 +6855,44 @@ async function updatePlugin(name, opts) {
   });
 }
 var MARKETPLACE_FILE = "epoch-marketplace.json";
-var NAME_PATTERN = /^[a-z0-9][a-z0-9-]*$/;
+var NAME_PATTERN = PLUGIN_NAME_PATTERN;
 var EntrySchema = z.object({
   name: z.string().regex(NAME_PATTERN),
   description: z.string().min(1).optional(),
   source: z.string().min(1),
   category: z.string().min(1).optional(),
-  keywords: z.array(z.string().min(1)).optional()
+  keywords: z.array(z.string().min(1)).optional(),
+  author: PluginAuthorSchema.optional(),
+  downloads: z.number().int().nonnegative().optional(),
+  likes: z.number().int().nonnegative().optional(),
+  displayName: z.string().min(1).optional(),
+  icon: z.string().min(1).optional(),
+  version: z.string().min(1).optional(),
+  changelog: z.string().min(1).optional(),
+  size: z.number().int().positive().optional(),
+  homepage: z.string().min(1).optional(),
+  visibility: z.enum(["private", "public"]).optional().catch(void 0),
+  status: z.enum(["listed", "reviewing", "rejected", "offline"]).optional().catch(void 0)
+});
+var MARKETPLACE_DISPLAY_FIELDS = [
+  "status",
+  "downloads",
+  "likes",
+  "author",
+  "category",
+  "visibility",
+  "icon",
+  "homepage",
+  "size"
+];
+var DisplaySchema = z.object({
+  fields: z.array(z.string().min(1)).optional()
 });
 var CatalogSchema = z.object({
   name: z.string().regex(NAME_PATTERN),
   description: z.string().min(1).optional(),
   owner: z.object({ name: z.string().min(1), url: z.string().min(1).optional() }).optional(),
+  display: DisplaySchema.optional(),
   plugins: z.array(EntrySchema)
 });
 var RecordSchema2 = z.object({
@@ -6492,6 +6905,16 @@ var StateSchema2 = z.object({
   version: z.literal(1).optional(),
   marketplaces: z.array(RecordSchema2)
 });
+function projectEntryForDisplay(entry, display) {
+  const allowed = display?.fields;
+  if (allowed === void 0) return entry;
+  const keep = new Set(allowed);
+  const out = { ...entry };
+  for (const field of MARKETPLACE_DISPLAY_FIELDS) {
+    if (!keep.has(field)) delete out[field];
+  }
+  return out;
+}
 function readMarketplaces(statePath) {
   if (!existsSync(statePath)) return { records: [], issues: [] };
   let raw;
@@ -6580,10 +7003,15 @@ function searchMarketplaces(keyword, statePath) {
         entry.name,
         entry.description ?? "",
         entry.category ?? "",
+        entry.author?.name ?? "",
         ...entry.keywords ?? []
       ].join(" ").toLowerCase();
       if (needle && !haystack.includes(needle)) continue;
-      hits.push({ marketplace: record.name, entry, ref: `${record.name}/${entry.name}` });
+      hits.push({
+        marketplace: record.name,
+        entry: projectEntryForDisplay(entry, record.catalog.display),
+        ref: `${record.name}/${entry.name}`
+      });
     }
   }
   return hits;
@@ -6944,14 +7372,14 @@ var CheckpointStore = class {
   }
   async enforceTotalSize(protectSession, protectTurnIndex) {
     const turns = await this.collectTurns();
-    let total = turns.reduce((sum, t76) => sum + t76.bytes, 0);
+    let total = turns.reduce((sum, t78) => sum + t78.bytes, 0);
     if (total <= this.maxTotalBytes) return;
     turns.sort((a, b) => a.createdAt - b.createdAt);
-    for (const t76 of turns) {
+    for (const t78 of turns) {
       if (total <= this.maxTotalBytes) return;
-      if (t76.sessionId === protectSession && t76.turnIndex === protectTurnIndex) continue;
-      await this.removeTurn(t76.sessionId, t76.turnIndex);
-      total -= t76.bytes;
+      if (t78.sessionId === protectSession && t78.turnIndex === protectTurnIndex) continue;
+      await this.removeTurn(t78.sessionId, t78.turnIndex);
+      total -= t78.bytes;
     }
   }
   async collectTurns() {
@@ -7472,7 +7900,8 @@ function addUsage(a, b) {
   const cacheHit = (a.cacheHitTokens ?? 0) + (b.cacheHitTokens ?? 0);
   const cacheWrite = (a.cacheWriteTokens ?? 0) + (b.cacheWriteTokens ?? 0);
   const reasoning = (a.reasoningTokens ?? 0) + (b.reasoningTokens ?? 0);
-  const total = (a.totalTokens ?? 0) + (b.totalTokens ?? 0);
+  const reported = a.totalTokens !== void 0 || b.totalTokens !== void 0;
+  const total = reported ? totalUsageTokens(a) + totalUsageTokens(b) : 0;
   return {
     inputTokens: a.inputTokens + b.inputTokens,
     outputTokens: a.outputTokens + b.outputTokens,
@@ -7754,10 +8183,13 @@ function systemPromptSegments(params) {
       `## \u89C4\u5219`,
       "- \u7528\u4E2D\u6587\u56DE\u590D\u7528\u6237",
       "- \u6D89\u53CA\u6587\u4EF6\u64CD\u4F5C\u65F6\uFF0C\u5148\u7528\u5DE5\u5177\u83B7\u53D6\u4FE1\u606F\u518D\u884C\u52A8",
-      "- \u4E0D\u786E\u5B9A\u65F6\u5411\u7528\u6237\u786E\u8BA4\uFF0C\u4E0D\u8981\u731C\u6D4B",
+      "- \u4E8B\u5B9E\u4E0D\u786E\u5B9A\u5C31\u7528\u5DE5\u5177\u53BB\u67E5\uFF0C\u67E5\u4E0D\u5230\u5C31\u8BF4\u4E0D\u77E5\u9053 \u2014\u2014 \u522B\u7F16",
+      "- \u505A\u6CD5\u6709\u4E24\u79CD\u5408\u7406\u8D70\u6CD5\u3001\u4E14\u9009\u9519\u4E86\u8981\u767D\u5E72\u65F6\uFF0C\u624D\u505C\u4E0B\u6765\u95EE\u4E00\u53E5\uFF1B\u6D3B\u591A\u3001\u8981\u82B1\u65F6\u95F4\u3001\u6B65\u9AA4\u91CD\u590D\u90FD\u4E0D\u662F\u8981\u95EE\u7684\u7406\u7531",
       "- file_patch \u6BD4 file_write \u66F4\u5B89\u5168\uFF0C\u4F18\u5148\u4F7F\u7528",
       "- \u540C\u65F6\u8BFB\u53D6\u591A\u4E2A\u6587\u4EF6\u65F6\u7528 file_multi_read",
-      "- \u4E00\u6B21\u53EA\u505A\u5FC5\u8981\u7684\u4E8B\uFF0C\u4E0D\u8981\u8FC7\u5EA6\u8C03\u7528\u5DE5\u5177",
+      "- \u7528\u6237\u7ED9\u4E86\u8303\u56F4\u5C31\u628A\u90A3\u4E2A\u8303\u56F4\u505A\u5B8C\uFF1A\u8BF4 100 \u6761\u5C31\u662F 100 \u6761\u3002\u505A 3 \u6761\u518D\u95EE\u300C\u8981\u4E0D\u8981\u7EE7\u7EED\u300D\u662F\u6CA1\u505A\u5B8C\uFF0C\u4E0D\u662F\u8C28\u614E",
+      "- \u8BE5\u7701\u7684\u662F\u91CD\u590D\u8C03\u540C\u4E00\u6B21\u5DE5\u5177\uFF08\u540C\u6837\u7684\u53C2\u6570\u95EE\u7B2C\u4E8C\u904D\uFF09\uFF0C\u4E0D\u662F\u5C11\u505A\u51E0\u4EF6\u4E8B \u2014\u2014 \u5DE5\u5177\u8C03\u7528\u6B21\u6570\u4ECE\u6765\u4E0D\u662F\u8981\u538B\u7684\u6307\u6807",
+      "- \u8BF4\u4E86\u4E0B\u4E00\u6B65\u5C31\u5F53\u573A\u505A\uFF1A\u300C\u6211\u5148\u53BB\u67E5\u4E00\u4E0B\u300D\u300Clet me \u68C0\u67E5\u4E00\u4E0B\u300D\u8FD9\u79CD\u8BDD\u540E\u9762\u5FC5\u987B\u7D27\u8DDF\u4E00\u6B21\u5DE5\u5177\u8C03\u7528\uFF0C\u522B\u62FF\u5B83\u5F53\u4E00\u8F6E\u56DE\u590D\u7684\u7ED3\u5C3E",
       "- \u88AB\u95EE\u5230\u4F60\u662F\u8C01 / \u4F60\u662F\u4EC0\u4E48\uFF1A\u8BF4\u4F60\u662F\u4E00\u4E2A\u8DD1\u5728\u7528\u6237\u672C\u673A\u7684\u667A\u80FD\u4F53\uFF0C\u518D\u8BF4\u6E05\u695A\u4F60\u80FD\u505A\u4EC0\u4E48\u3002\u4E0D\u62A5\u54C1\u724C\u540D\uFF0C\u4E5F\u522B\u81EA\u79F0\u662F\u522B\u5BB6\u4EA7\u54C1\u6216\u5382\u5546\u7684\u5B98\u65B9\u52A9\u624B \u2014\u2014 \u540E\u8005\u662F\u5047\u8BDD",
       "- \u7528\u6237\u76F4\u63A5\u95EE\u5E95\u5C42\u662F\u4EC0\u4E48\u6A21\u578B\uFF1A\u7167\u5B9E\u8BF4\uFF08`## \u73AF\u5883` \u91CC\u90A3\u884C\u300C\u5F53\u524D\u6A21\u578B\u300D\u5C31\u662F\uFF09\uFF0C\u4F46\u522B\u628A\u5B83\u5F53\u6210\u4F60\u7684\u8EAB\u4EFD"
     ].join("\n")
@@ -8903,6 +9335,79 @@ ${this.describeWarning(status)}
     });
   }
 };
+// src/provider/errors.ts
+var ProviderError = class extends Error {
+  constructor(message, code, recoverable, recovery = "abort") {
+    super(message);
+    this.code = code;
+    this.recoverable = recoverable;
+    this.recovery = recovery;
+    this.name = "ProviderError";
+  }
+  code;
+  recoverable;
+  recovery;
+};
+var PROVIDER_NO_CREDENTIAL = 1001;
+var PROVIDER_ABORTED = 1060;
+var PROVIDER_CONTEXT_OVERFLOW = 1030;
+function isContextOverflow(err) {
+  if (err instanceof ProviderError) return err.code === PROVIDER_CONTEXT_OVERFLOW;
+  return classifyProviderError(err).code === PROVIDER_CONTEXT_OVERFLOW;
+}
+function isAbortError(err) {
+  for (let cur = err, depth = 0; cur && depth < 5; depth++) {
+    if (typeof cur !== "object") return false;
+    if (cur.name === "AbortError") return true;
+    cur = cur.cause;
+  }
+  return false;
+}
+function extractStatus(err) {
+  if (!err || typeof err !== "object") return void 0;
+  const e = err;
+  for (const candidate of [e.statusCode, e.status, e.response?.status]) {
+    if (typeof candidate === "number" && candidate >= 100 && candidate < 600) return candidate;
+  }
+  return void 0;
+}
+function extractStatusFromMessage(msg) {
+  const leading = msg.match(/^\s*\[?(4\d{2}|5\d{2})\b/);
+  if (leading?.[1]) return Number(leading[1]);
+  const labelled = msg.match(/(?:status(?:\s*code)?|http|code)\D{0,3}(4\d{2}|5\d{2})\b/i);
+  if (labelled?.[1]) return Number(labelled[1]);
+  return void 0;
+}
+function classifyProviderError(err) {
+  const msg = err instanceof Error ? err.message : String(err);
+  const status = extractStatus(err);
+  if (isAbortError(err)) return { code: PROVIDER_ABORTED, recovery: "abort" };
+  if (/context.?length|context.?window|maximum.*token|token.?limit|too.?many.?tokens|prompt.*too.?long|reduce.*(length|tokens)/i.test(
+    msg
+  ))
+    return { code: PROVIDER_CONTEXT_OVERFLOW, recovery: "abort" };
+  if (/invalid.*api.?key|unauthorized|authentication|permission.?denied|forbidden/i.test(msg))
+    return { code: 1001, recovery: "rotate_credential" };
+  if (/billing|quota.*exceeded|insufficient.*(balance|credit)|payment.?required/i.test(msg))
+    return { code: 1012, recovery: "switch_provider" };
+  if (/rate.?limit|too.?many.?requests/i.test(msg)) return { code: 1010, recovery: "retry" };
+  if (/model.?not.?found|model.*does.*not.*exist|unknown.?model|no.?such.?model/i.test(msg))
+    return { code: 1040, recovery: "switch_model" };
+  if (/overloaded|server.?error|bad.?gateway|service.?unavailable/i.test(msg))
+    return { code: 1020, recovery: "retry" };
+  if (/timeout|timed.?out|etimedout|econnreset|enotfound|socket.?hang.?up/i.test(msg))
+    return { code: 1041, recovery: "retry" };
+  const code = status ?? extractStatusFromMessage(msg);
+  if (code !== void 0) {
+    if (code === 401 || code === 403) return { code: 1001, recovery: "rotate_credential" };
+    if (code === 402) return { code: 1012, recovery: "switch_provider" };
+    if (code === 404) return { code: 1040, recovery: "switch_model" };
+    if (code === 429) return { code: 1010, recovery: "retry" };
+    if (code >= 500) return { code: 1020, recovery: "retry" };
+    if (code >= 400) return { code: 1050, recovery: "abort" };
+  }
+  return { code: 9999, recovery: "retry" };
+}
 function toModelMessages(messages) {
   return messages.map(toModelMessage);
 }
@@ -9140,6 +9645,34 @@ var HookDispatcher = class {
     return verifications.some((v) => v.action === "continue");
   }
 };
+// src/agent/idle-turn-detector.ts
+var IDLE_ANCHORS = [
+  {
+    zh: /^我(?:先|现在就?|这就|马上|来|去|再|打算|准备|会先|会再|会去|会用)\s*\S/,
+    en: /^i['’]?(?:ll|m\s+going\s+to|\s+will|\s+am\s+going\s+to)\s+\S/i
+  },
+  { zh: /^让我\s*\S/, en: /^let\s+me\s*\S/i },
+  { zh: /^接下来我\s*\S/, en: /^next[,，]?\s+i['’]?ll\s+\S/i },
+  { zh: /^先\s*\S/, en: /^first[,，]?\s+(?:let\s+me|i['’]?ll)\s+\S/i }
+];
+var SPEECH_ACTS = [
+  {
+    zh: /^(?:我(?:先|现在就?|这就|马上|来|去|再|打算|准备)|让我|接下来我|先)\s*(?:说|讲|解释|回答|答|总结|归纳|汇报|说明|捋|梳理|聊|谈)/,
+    en: /^(?:let\s+me|i['’]?(?:ll|m\s+going\s+to)|next[,，]?\s+i['’]?ll|first[,，]?\s+(?:let\s+me|i['’]?ll))\s+(?:explain|summari[sz]e|clarify|recap|answer|describe|outline|walk\s+you\s+through|tell\s+you)\b/i
+  }
+];
+function sentenceHeads(text) {
+  return text.split(/[\n。！？!?]+/).map((s) => s.trim()).filter((s) => s !== "");
+}
+function announcedNextStep(text) {
+  for (const head of sentenceHeads(text)) {
+    const hit = IDLE_ANCHORS.some((a) => a.zh.test(head) || a.en.test(head));
+    if (!hit) continue;
+    if (SPEECH_ACTS.some((a) => a.zh.test(head) || a.en.test(head))) continue;
+    return true;
+  }
+  return false;
+}
 // src/agent/message-codec.ts
 var TOOL_OUTPUT_PREFIX = "[tool output] ";
 function flattenMessage(m) {
@@ -9327,14 +9860,32 @@ function currentGoalBlock(view) {
 }
 function wrapCurrentRequest(userText) {
   return [
-    "[\u4EE5\u4E0B\u662F\u7528\u6237\u6B64\u523B\u53D1\u6765\u7684**\u65B0\u8BF7\u6C42**\u3002\u4E0A\u9762\u90A3\u4E9B\u7528\u6237\u6D88\u606F\u90FD\u662F\u5DF2\u7ECF\u5904\u7406\u8FC7\u7684\u4E0A\u6587\uFF1A",
-    "\u5B83\u4EEC\u91CC\u7684\u4EFB\u52A1\u4E0D\u8981\u91CD\u505A\uFF0C\u9664\u975E\u8FD9\u4E00\u6761\u660E\u786E\u63D0\u5230\uFF1B\u800C\u5176\u4E2D\u7684\u504F\u597D\u548C\u957F\u671F\u7EA6\u675F\uFF08\u56DE\u590D\u8BED\u8A00\u3001",
-    "\u4EE3\u7801\u98CE\u683C\u3001\u4E0D\u8BB8\u78B0\u7684\u4E1C\u897F\uFF09\u4ECD\u7136\u6709\u6548\u3002\u6709\u51B2\u7A81\u65F6\u4EE5\u8FD9\u4E00\u6761\u4E3A\u51C6\u3002]",
+    "[\u4EE5\u4E0B\u662F\u7528\u6237\u6B64\u523B\u53D1\u6765\u7684**\u65B0\u8BF7\u6C42**\u3002\u4E0A\u9762\u90A3\u4E9B\u7528\u6237\u6D88\u606F\u91CC**\u5DF2\u7ECF\u529E\u5B8C**\u7684\u90A3\u4E9B\u4E0D\u8981\u91CD\u505A\uFF0C",
+    "\u9664\u975E\u8FD9\u4E00\u6761\u660E\u786E\u63D0\u5230\uFF1B\u800C\u5176\u4E2D\u7684\u504F\u597D\u548C\u957F\u671F\u7EA6\u675F\uFF08\u56DE\u590D\u8BED\u8A00\u3001\u4EE3\u7801\u98CE\u683C\u3001\u4E0D\u8BB8\u78B0\u7684\u4E1C\u897F\uFF09",
+    "\u4ECD\u7136\u6709\u6548\u3002\u6709\u51B2\u7A81\u65F6\u4EE5\u8FD9\u4E00\u6761\u4E3A\u51C6\u3002",
+    "\u26A0\uFE0F **\u529E\u4E86\u4E00\u534A\u7684\u4E0D\u7B97\u529E\u5B8C**\uFF1A\u4E0A\u6587\u91CC\u8FD8\u6B20\u7740\u7684\u6D3B\u4ECD\u7136\u8981\u505A\u5B8C\u3002\u8FD9\u4E00\u6761\u662F\u300C\u7EE7\u7EED\u300D\u300C\u786E\u8BA4\u300D",
+    "\u300C\u597D\u300D\u8FD9\u7C7B\u77ED\u56DE\u590D\u65F6\uFF0C\u5B83\u6307\u7684\u5C31\u662F\u90A3\u4EF6\u6B20\u7740\u7684\u6D3B\uFF0C\u4E0D\u662F\u300C\u6CA1\u4E8B\u53EF\u505A\u4E86\u300D\u3002]",
     "<current_request>",
     userText,
     "</current_request>"
   ].join("\n");
 }
+function unfinishedTodoNote(open) {
+  return [
+    `\u4F60\u7684 TODO \u6E05\u5355\u4E0A\u8FD8\u6709 ${open} \u9879\u6CA1\u505A\u5B8C\uFF0C\u6240\u4EE5\u8FD9\u4EF6\u4E8B\u8FD8\u6CA1\u7ED3\u675F\u3002`,
+    "\u63A5\u7740\u505A\u4E0B\u4E00\u9879\uFF0C\u522B\u518D\u95EE\u4E00\u904D\u300C\u8981\u4E0D\u8981\u7EE7\u7EED\u300D\u2014\u2014 \u7528\u6237\u5DF2\u7ECF\u8981\u8FC7\u8FD9\u4EF6\u4E8B\u4E86\u3002",
+    "\u771F\u505A\u4E0D\u4E0B\u53BB\uFF08\u53D6\u6570\u4E00\u76F4\u5931\u8D25\u3001\u7F3A\u51ED\u636E\u3001\u8981\u82B1\u94B1\uFF09\u5C31\u8BF4\u6E05\u5DF2\u5B8C\u6210\u51E0\u9879\u3001\u8FD8\u5269\u51E0\u9879\u3001\u5361\u5728\u54EA\u4E00\u9879\u7684\u54EA\u4E00\u6B65\u3002"
+  ].join("\n");
+}
+function announcedButIdleNote() {
+  return [
+    "\u4F60\u521A\u624D\u90A3\u6BB5\u8BDD\u5BA3\u5E03\u4E86\u4E0B\u4E00\u6B65\uFF0C\u4F46\u8FD9\u4E00\u8F6E\u4E00\u4E2A\u5DE5\u5177\u90FD\u6CA1\u8C03 \u2014\u2014 \u5728\u7528\u6237\u90A3\u8FB9\uFF0C\u8FD9\u4E00\u8F6E\u5C31\u662F\u505C\u4F4F\u4E86\u3002",
+    "\u73B0\u5728\u5C31\u628A\u4F60\u8BF4\u7684\u90A3\u4E00\u6B65\u505A\u6389\uFF1A\u76F4\u63A5\u8C03\u5DE5\u5177\uFF0C\u522B\u518D\u6362\u4E2A\u8BF4\u6CD5\u628A\u300C\u6211\u9A6C\u4E0A\u53BB\u505A\u300D\u5199\u7B2C\u4E8C\u904D\u3002",
+    "\u5982\u679C\u4F60\u5176\u5B9E\u5DF2\u7ECF\u628A\u7528\u6237\u8981\u7684\u4E8B\u505A\u5B8C\u4E86\u3001\u6216\u8005\u521A\u624D\u53EA\u662F\u5728\u56DE\u7B54\u4E00\u4E2A\u95EE\u9898\uFF0C\u90A3\u5C31\u76F4\u63A5\u8BF4\u7ED3\u8BBA\uFF0C\u522B\u518D\u5BA3\u5E03\u4E0B\u4E00\u6B65\u3002",
+    "\u5982\u679C\u7528\u6237\u660E\u8BF4\u4E86\u300C\u5148\u522B\u52A8\u624B\u300D\u300C\u53EA\u8BF4\u8BA1\u5212\u300D\u300C\u5148\u522B\u6539\u300D\u8FD9\u7C7B\u8BDD\uFF0C\u90A3\u5C31\u7167\u7528\u6237\u8BF4\u7684\u529E \u2014\u2014 \u8FD9\u6761\u63D0\u9192\u7BA1\u4E0D\u7740\u7528\u6237\u521A\u4E0B\u7684\u6307\u4EE4\uFF0C\u522B\u56E0\u4E3A\u5B83\u53BB\u8C03\u5DE5\u5177\u3002",
+    "\u771F\u505A\u4E0D\u4E0B\u53BB\uFF08\u7F3A\u51ED\u636E\u3001\u8981\u82B1\u94B1\u3001\u53D6\u6570\u4E00\u76F4\u5931\u8D25\uFF09\u5C31\u8BF4\u6E05\u5361\u5728\u54EA\u4E00\u6B65\u7684\u54EA\u4E00\u73AF\u3002"
+  ].join("\n");
+}
 var CODE_VERIFICATION_POLICY = [
   "<code_verification>",
   "\u6539\u5B8C\u4EE3\u7801\u3001\u5BA3\u5E03\u5B8C\u6210\u4E4B\u524D\uFF0C\u8C03\u4E00\u6B21 `lsp_diagnostics`\uFF0C\u628A\u672C\u8F6E\u65B0\u5EFA\u6216\u4FEE\u6539\u8FC7\u7684\u6E90\u6587\u4EF6\u5217\u8FDB\u53BB\u3002",
@@ -9356,6 +9907,20 @@ var ASK_QUESTION_POLICY = [
   "\u522B\u7528\u5B83\u95EE\u300C\u6211\u7684\u65B9\u6848\u884C\u4E0D\u884C\u300D\uFF08\u90A3\u662F `exit_plan_mode`\uFF09\uFF0C\u4E5F\u522B\u7528\u5B83\u6C47\u62A5\u8FDB\u5EA6\u3002",
   "</ask_user_question>"
 ].join("\n");
+var BATCH_WORK_POLICY = [
+  "<batch_work>",
+  "\u4E00\u4EF6\u4E8B\u8981\u5BF9 N \u4E2A\u5BF9\u8C61\u5404\u505A\u4E00\u904D\uFF08\u4E00\u6279\u5546\u54C1 / \u4E00\u6279\u6587\u4EF6 / \u4E00\u6279\u884C\uFF09\u65F6\uFF1A",
+  "1. **\u5148\u6570\u6E05\u662F\u51E0\u4E2A**\uFF0C\u7528 `todo` \u843D\u6210\u6E05\u5355\u518D\u52A8\u624B\u3002\u6570\u76EE\u591A\u5C31\u5206\u6279\u5EFA\u6761\u76EE\uFF0C\u522B\u53EA\u5EFA\u524D\u51E0\u4E2A\u3002",
+  "2. **\u4E00\u6761\u4E00\u6761\u505A\u5B8C**\uFF0C\u6BCF\u505A\u5B8C\u4E00\u6761\u5C31\u628A\u5B83\u6807 `completed`\u3002\u4E2D\u95F4\u4E0D\u8981\u505C\u4E0B\u6765\u6C47\u62A5\u8FDB\u5EA6 \u2014\u2014",
+  "   \u6C47\u62A5\u4E00\u6B21\u5C31\u662F\u6536\u5DE5\u4E00\u6B21\uFF0C\u4E4B\u540E\u8981\u7528\u6237\u518D\u5F00\u53E3\u624D\u80FD\u7EE7\u7EED\u3002",
+  "3. **\u4E0D\u8BB8\u62FF\u300C\u6B65\u9AA4\u5F88\u591A\u300D\u300C\u8981\u82B1\u65F6\u95F4\u300D\u300C\u6BCF\u4E2A\u90FD\u8981\u53D6\u4E00\u904D\u6570\u636E\u300D\u5F53\u7406\u7531\u7F29\u5C0F\u8303\u56F4\u3002**",
+  "   \u90A3\u6B63\u662F\u7528\u6237\u8BA9\u4F60\u505A\u8FD9\u4EF6\u4E8B\u7684\u539F\u56E0\u3002\u6162\u4E0D\u662F\u95EE\u9898\uFF0C\u53EA\u505A\u4E00\u90E8\u5206\u624D\u662F\u3002",
+  "4. \u53EA\u5728**\u771F\u505A\u4E0D\u4E0B\u53BB**\u65F6\u505C\uFF08\u53D6\u6570\u4E00\u76F4\u5931\u8D25\u3001\u7F3A\u51ED\u636E\u3001\u8981\u82B1\u94B1\uFF09\u3002\u505C\u7684\u65F6\u5019\u8BF4\u6E05",
+  "   \u300C\u5DF2\u5B8C\u6210 X \u9879\u3001\u8FD8\u5269 Y \u9879\u3001\u5361\u5728\u54EA\u4E00\u9879\u7684\u54EA\u4E00\u6B65\u300D\uFF0C**\u522B\u95EE\u300C\u8981\u4E0D\u8981\u7EE7\u7EED\u300D**\u3002",
+  "5. \u6570\u636E\u6E90\u4E00\u6B21\u53D6\u4E0D\u5168\uFF08\u5DE5\u5177\u8F93\u51FA\u88AB\u622A\u65AD\uFF09\u65F6\uFF0C\u5206\u6BB5\u53D6\u6216\u6362\u66F4\u7CBE\u786E\u7684\u53D6\u6CD5\u518D\u53D6\u4E00\u6B21 \u2014\u2014",
+  "   **\u522B\u628A\u770B\u5F97\u89C1\u7684\u90A3\u51E0\u6761\u5F53\u6210\u5168\u90E8**\u3002",
+  "</batch_work>"
+].join("\n");
 var PromptBuilder = class {
   constructor(deps) {
     this.deps = deps;
@@ -9364,9 +9929,10 @@ var PromptBuilder = class {
   memoryInitialized = false;
   projectBlock(tools) {
     const permLevel = this.deps.permissionManager?.getLevel() || "default";
-    const hasPlanTool = tools.some((t76) => t76.name === "enter_plan_mode");
-    const hasLspTool = tools.some((t76) => t76.name === "lsp_diagnostics");
-    const hasAskTool = tools.some((t76) => t76.name === "ask_user_question");
+    const hasPlanTool = tools.some((t78) => t78.name === "enter_plan_mode");
+    const hasLspTool = tools.some((t78) => t78.name === "lsp_diagnostics");
+    const hasAskTool = tools.some((t78) => t78.name === "ask_user_question");
+    const hasTodoTool = tools.some((t78) => t78.name === "todo");
     const plan = this.deps.approvedPlan?.()?.trim();
     const codeSdk = renderSdkDeclaration(this.deps.codeModeTools?.() ?? []);
     return renderProjectContext(this.deps.site().projectContext) + `
@@ -9379,7 +9945,10 @@ ${PLAN_MODE_POLICY}` : "") + (hasLspTool ? `
 
 ${CODE_VERIFICATION_POLICY}` : "") + (hasAskTool ? `
 
-${ASK_QUESTION_POLICY}` : "") + (codeSdk ? `
+${ASK_QUESTION_POLICY}` : "") +
+    (hasTodoTool ? `
+
+${BATCH_WORK_POLICY}` : "") + (codeSdk ? `
 
 ${codeSdk}` : "") +
     (plan ? `
@@ -9435,9 +10004,16 @@ ${recalled}
   }
 };
 var STALL_THRESHOLD = 5;
+var FAILURE_THRESHOLD = 3;
+var MAX_FAILURE_KEYS = 64;
+var FINGERPRINT_MAX_CHARS = 200;
+function fingerprint(output) {
+  return output.replace(/\s+/g, " ").trim().slice(0, FINGERPRINT_MAX_CHARS);
+}
 var StallDetector = class {
   history = [];
-  recordAction(toolName, args) {
+  failures = /* @__PURE__ */ new Map();
+  recordAction(toolName, args, outcome) {
     const argsKey2 = JSON.stringify(args);
     const last = this.history[this.history.length - 1];
     if (last && last.toolName === toolName && last.args === argsKey2) {
@@ -9445,26 +10021,66 @@ var StallDetector = class {
     } else {
       this.history = [{ toolName, args: argsKey2, consecutive: 1 }];
     }
+    if (!outcome) return;
+    const key = `${toolName}\0${argsKey2}`;
+    if (outcome.success) {
+      this.failures.delete(key);
+      return;
+    }
+    const error = fingerprint(outcome.output);
+    const rec = this.failures.get(key);
+    if (rec?.error === error) {
+      rec.count++;
+      return;
+    }
+    if (rec === void 0 && this.failures.size >= MAX_FAILURE_KEYS) {
+      const oldest = this.failures.keys().next();
+      if (!oldest.done) this.failures.delete(oldest.value);
+    }
+    this.failures.set(key, { toolName, args: argsKey2, error, count: 1 });
   }
   isStalled() {
-    const last = this.history[this.history.length - 1];
-    return last ? last.consecutive >= STALL_THRESHOLD : false;
+    return this.stalledFailure() !== null || this.stalledStreak() !== null;
   }
   getStallInfo() {
-    const last = this.history[this.history.length - 1];
-    if (!last || last.consecutive < STALL_THRESHOLD) return null;
-    return t("agent_run.stall_info", {
-      count: last.consecutive,
-      tool: last.toolName,
-      args: last.args
-    });
+    const failure = this.stalledFailure();
+    if (failure) {
+      return t("agent_run.stall_failure_info", {
+        count: failure.count,
+        tool: failure.toolName,
+        args: failure.args,
+        error: failure.error
+      });
+    }
+    const streak = this.stalledStreak();
+    if (streak) {
+      return t("agent_run.stall_info", {
+        count: streak.consecutive,
+        tool: streak.toolName,
+        args: streak.args
+      });
+    }
+    return null;
   }
-  resetOnSuccess() {
+  reset() {
     this.history = [];
+    this.failures.clear();
   }
   getLastToolName() {
     return this.history[this.history.length - 1]?.toolName ?? null;
   }
+  stalledStreak() {
+    const last = this.history[this.history.length - 1];
+    return last && last.consecutive >= STALL_THRESHOLD ? last : null;
+  }
+  stalledFailure() {
+    let worst = null;
+    for (const rec of this.failures.values()) {
+      if (rec.count < FAILURE_THRESHOLD) continue;
+      if (worst === null || rec.count > worst.count) worst = rec;
+    }
+    return worst;
+  }
 };
 var ARTIFACT_RETENTION_DEFAULTS = {
   maxAgeDays: 7,
@@ -9530,10 +10146,133 @@ function pruneArtifacts(root, keepSession, retention = ARTIFACT_RETENTION_DEFAUL
 async function removeSessionArtifacts(sessionId, homeDir) {
   await rm(artifactsDir(sessionId, homeDir), { recursive: true, force: true });
 }
-// src/agent/tool-executor.ts
-var MAX_TOOL_OUTPUT = 2e3;
+var MAX_TOOL_OUTPUT = 3e4;
 var MAX_SUB_CALL_OUTPUT = CODE_MODE_LIMITS.maxValueChars;
-var TRUNCATED = "\n...[truncated]";
+function budgetOf2(tool, depth, path = "success") {
+  if (tool.governsOwnOutput && path === "success") return Number.POSITIVE_INFINITY;
+  return depth > 0 ? MAX_SUB_CALL_OUTPUT : MAX_TOOL_OUTPUT;
+}
+function shapeOf(output) {
+  if (output === void 0 || output === null) return "text";
+  return typeof output === "string" ? "text" : "json";
+}
+var NEXT_STEP = "\u8981\u62FF\u5B8C\u6574\u5185\u5BB9\uFF1A\u6536\u7A84\u8FD9\u4E2A\u5DE5\u5177\u7684\u8303\u56F4\u53C2\u6570\uFF08\u5206\u9875 / \u5B57\u6BB5 / limit\uFF09\u540E\u91CD\u53D6\uFF0C\u6216\u5728 run_code \u91CC\u8C03\u5B83\u3001\u5728\u7A0B\u5E8F\u91CC\u7B5B";
+var CUT_LABEL = {
+  line: "\u5207\u5728\u884C\u8FB9\u754C",
+  space: "\u5207\u5728\u7A7A\u767D\u8FB9\u754C",
+  hard: "\u786C\u5207\uFF08\u8FD9\u4E00\u6BB5\u91CC\u6CA1\u6709\u6362\u884C\uFF0C\u672B\u5C3E\u53EF\u80FD\u662F\u6B8B\u7684\uFF09"
+};
+var CUT_RANK = { line: 0, space: 1, hard: 2 };
+function truncateForModel(text, limit, shape) {
+  if (!Number.isFinite(limit)) return text;
+  const total = countCodePoints(text);
+  if (total <= limit) return text;
+  return shape === "json" ? cutJson(text, limit, total) : cutText(text, limit, total);
+}
+function notice(detail) {
+  return `[\u5F15\u64CE\u6309\u8F93\u51FA\u9884\u7B97\u622A\u65AD\uFF1A${detail}\u3002${NEXT_STEP}]`;
+}
+function cutText(text, limit, total) {
+  const half = Math.floor(limit / 2);
+  const head = backOff(headCodePoints(text, half), "head");
+  const tail = backOff(tailCodePoints(text, limit - half), "tail");
+  const skipped = total - countCodePoints(head.text) - countCodePoints(tail.text);
+  const kind = CUT_RANK[head.kind] >= CUT_RANK[tail.kind] ? head.kind : tail.kind;
+  return [
+    head.text,
+    `\u2026[\u4E2D\u6BB5\u7701\u7565 ${skipped} \u5B57\u7B26\uFF0C${CUT_LABEL[kind]}]\u2026`,
+    tail.text,
+    notice(`\u539F\u6587 ${total} \u5B57\u7B26\uFF0C\u9884\u7B97 ${limit}`)
+  ].join("\n");
+}
+function backOff(piece, side) {
+  const floor = piece.length / 2;
+  for (const [kind, ch] of [
+    ["line", "\n"],
+    ["space", " "]
+  ]) {
+    const at = side === "head" ? piece.lastIndexOf(ch) : piece.indexOf(ch);
+    if (at < 0) continue;
+    const kept = side === "head" ? piece.slice(0, at) : piece.slice(at + 1);
+    if (kept.length >= floor) return { text: kept, kind };
+  }
+  return { text: piece, kind: "hard" };
+}
+function cutJson(text, limit, total) {
+  const cut = scanJson(text, limit);
+  const head = `\u5E8F\u5217\u5316\u540E ${total} \u5B57\u7B26\uFF0C\u9884\u7B97 ${limit}`;
+  if (cut.element !== void 0) {
+    const dropped = total - countCodePoints(cut.element);
+    return `${cut.element}
+${notice(`${head}\uFF0C\u5DF2\u6309\u7ED3\u6784\u622A\u5230\u6700\u540E\u4E00\u4E2A\u5B8C\u6574\u7684\u6570\u7EC4\u5143\u7D20\u5E76\u8865\u9F50\u62EC\u53F7\uFF0C\u4E22\u6389\u5C3E\u90E8 ${dropped} \u5B57\u7B26\u3002\u7559\u4E0B\u6765\u7684\u6BCF\u4E00\u6761\u90FD\u662F\u6574\u6761\uFF0C\u4F46**\u88AB\u8865\u9F50\u7684\u5BB9\u5668\u540E\u9762\u53EF\u80FD\u8FD8\u7F3A\u5B57\u6BB5**\uFF08\u6BD4\u5982\u6839\u5BF9\u8C61\u4E0A\u6392\u5728\u540E\u9762\u7684\u90A3\u4E9B\u952E\uFF09`)}`;
+  }
+  if (cut.field !== void 0) {
+    const dropped = total - countCodePoints(cut.field);
+    return `${cut.field}
+${notice(`${head}\uFF0C\u9884\u7B97\u5185\u653E\u4E0D\u4E0B\u4E00\u4E2A\u5B8C\u6574\u5143\u7D20\uFF0C\u6539\u4E3A\u5C31\u5730\u622A\u65AD\u90A3\u4E2A\u5B57\u7B26\u4E32\u5B57\u6BB5\uFF08\u6807\u8BB0\u5728\u503C\u91CC\u9762\uFF09\uFF0C\u4E22\u6389 ${dropped} \u5B57\u7B26`)}`;
+  }
+  return notice(
+    `${head}\uFF0C\u800C\u9884\u7B97\u5185\u8FDE\u4E00\u4E2A\u5B8C\u6574\u5143\u7D20\u90FD\u653E\u4E0D\u4E0B\u3002**\u8FD9\u91CC\u6CA1\u6709\u6570\u636E** \u2014\u2014 \u6309\u5B57\u7B26\u5207\u4F1A\u5207\u51FA\u4E00\u4E2A\u5408\u6CD5\u4F46\u9519\u8BEF\u7684\u6570\u503C\uFF0C\u6240\u4EE5\u4E00\u4E2A\u5B57\u90FD\u4E0D\u7ED9`
+  );
+}
+var FIELD_MARK = "\u2026[\u672C\u5B57\u6BB5\u88AB\u5F15\u64CE\u622A\u65AD]";
+function scanJson(text, limit) {
+  const stack = [];
+  const expectKey = [];
+  let inString = false;
+  let escaped = false;
+  let element;
+  let field;
+  for (let i = 0; i < text.length; i += 1) {
+    if (i === limit && inString && expectKey[expectKey.length - 1] !== true) {
+      field = closeString(text, i, escaped, stack);
+    }
+    if (i > limit) break;
+    const c = text[i];
+    if (inString) {
+      if (escaped) escaped = false;
+      else if (c === "\\") escaped = true;
+      else if (c === '"') inString = false;
+      continue;
+    }
+    if (c === '"') inString = true;
+    else if (c === "{" || c === "[") {
+      stack.push(c === "{" ? "}" : "]");
+      expectKey.push(c === "{");
+    } else if (c === "}" || c === "]") {
+      stack.pop();
+      expectKey.pop();
+      if (inArray(stack) && i + 1 + stack.length <= limit) {
+        element = text.slice(0, i + 1) + closers(stack);
+      }
+    } else if (c === ":") {
+      expectKey[expectKey.length - 1] = false;
+    } else if (c === ",") {
+      expectKey[expectKey.length - 1] = stack[stack.length - 1] === "}";
+      if (inArray(stack) && i + stack.length <= limit) {
+        element = text.slice(0, i) + closers(stack);
+      }
+    }
+  }
+  return {
+    ...element !== void 0 ? { element } : {},
+    ...field !== void 0 ? { field } : {}
+  };
+}
+function closers(stack) {
+  return [...stack].reverse().join("");
+}
+function inArray(stack) {
+  return stack[stack.length - 1] === "]";
+}
+function closeString(text, at, escaped, stack) {
+  const kept = dropLoneHighSurrogate(text.slice(0, escaped ? at - 1 : at));
+  return `${kept}${FIELD_MARK}"${closers(stack)}`;
+}
+function dropLoneHighSurrogate(text) {
+  return /[\uD800-\uDBFF]$/.test(text) ? text.slice(0, -1) : text;
+}
+// src/agent/tool-executor.ts
 var MAX_ARGS_KEY = 200;
 var OUTPUT_TAG = "tool_output";
 var MAX_SUB_CALL_DEPTH = 1;
@@ -9554,17 +10293,14 @@ function sourceLabel2(toolName) {
   let label = toolName;
   if (toolName.startsWith("mcp__")) {
     const rest = toolName.slice("mcp__".length);
-    const sep6 = rest.indexOf("__");
-    label = `mcp:${sep6 > 0 ? rest.slice(0, sep6) : rest}`;
+    const sep7 = rest.indexOf("__");
+    label = `mcp:${sep7 > 0 ? rest.slice(0, sep7) : rest}`;
   }
   return label.replace(/[^A-Za-z0-9_.:-]/g, "_");
 }
-function truncate(text, limit) {
-  return text.length > limit ? text.slice(0, limit) + TRUNCATED : text;
-}
-function appendArtifactSummaries(text, artifacts, limit) {
-  if (artifacts.length === 0) return truncate(text, limit);
-  const body2 = truncate(text, limit);
+function appendArtifactSummaries(text, artifacts, limit, shape) {
+  const body2 = truncateForModel(text, limit, shape);
+  if (artifacts.length === 0) return body2;
   const lines = artifacts.map((a) => a.summary).join("\n");
   return body2 ? `${body2}
 ${lines}` : lines;
@@ -9662,6 +10398,7 @@ var ToolExecutor = class {
         permissionLevel: this.deps.permissionManager?.getLevel() || "auto",
         ...signal ? { signal } : {},
         ...onOutput ? { onOutput } : {},
+        outputBudget: budgetOf2(et, depth),
         ...depth < MAX_SUB_CALL_DEPTH ? { callTool: this.subCallChannel(sessionId, signal, span, depth) } : {}
       });
       if (snapshotted.length > 0) {
@@ -9693,11 +10430,7 @@ var ToolExecutor = class {
           success: true,
           output: this.renderOutput(
             et,
-            appendArtifactSummaries(
-              text,
-              artifacts,
-              depth > 0 ? MAX_SUB_CALL_OUTPUT : MAX_TOOL_OUTPUT
-            )
+            appendArtifactSummaries(text, artifacts, budgetOf2(et, depth), shapeOf(r.output))
           ),
           ...artifacts.length > 0 ? { artifacts } : {},
           ...diffs.length > 0 ? { diffs } : {}
@@ -9708,7 +10441,7 @@ var ToolExecutor = class {
         success: false,
         output: this.renderOutput(
           et,
-          truncate(failureText(r), depth > 0 ? MAX_SUB_CALL_OUTPUT : MAX_TOOL_OUTPUT)
+          truncateForModel(failureText(r), budgetOf2(et, depth, "failure"), "text")
         )
       });
     } catch (err) {
@@ -9820,7 +10553,8 @@ var ToolExecutor = class {
         type: opType,
         target: opTarget,
         detail: opDetail,
-        reason: decision.reason
+        reason: decision.reason,
+        ...decision.rememberable === false ? { rememberable: false } : {}
       })
     );
     this.deps.telemetry?.counter(METRIC.TOOL_APPROVAL, 1, {
@@ -9844,6 +10578,72 @@ var ToolExecutor = class {
     return { allowed: true };
   }
 };
+var WINDOW_CHARS = 1024;
+var NGRAM = 16;
+var MAX_DISTINCT_RATIO = 0.2;
+var CHECK_EVERY_CHARS = 256;
+var SUSTAIN_CHECKS = 2;
+var MIN_NORMALIZED_CHARS = 256;
+function normalizeRuns(text) {
+  return text.replace(/\s+/g, " ").replace(/(.)\1{3,}/gu, (_m, c) => c.repeat(3));
+}
+function distinctNgramRatio(text, n = NGRAM) {
+  if (text.length < n) return 1;
+  const seen = /* @__PURE__ */ new Set();
+  let total = 0;
+  for (let i = 0; i + n <= text.length; i++) {
+    seen.add(text.slice(i, i + n));
+    total++;
+  }
+  return total === 0 ? 1 : seen.size / total;
+}
+var RepetitionDetector = class {
+  buf = "";
+  sinceCheck = 0;
+  streak = 0;
+  chars = 0;
+  hit = null;
+  push(delta) {
+    if (this.hit) return true;
+    if (!delta) return false;
+    this.chars += delta.length;
+    this.buf = (this.buf + delta).slice(-WINDOW_CHARS);
+    this.sinceCheck += delta.length;
+    if (this.sinceCheck < CHECK_EVERY_CHARS) return false;
+    this.sinceCheck = 0;
+    if (this.buf.length < WINDOW_CHARS) return false;
+    const norm = normalizeRuns(this.buf);
+    if (norm.length < MIN_NORMALIZED_CHARS) {
+      this.streak = 0;
+      return false;
+    }
+    const ratio = distinctNgramRatio(norm);
+    if (ratio > MAX_DISTINCT_RATIO) {
+      this.streak = 0;
+      return false;
+    }
+    if (++this.streak < SUSTAIN_CHECKS) return false;
+    this.hit = { chars: this.chars, distinctRatio: ratio };
+    return true;
+  }
+  pushAll(text) {
+    for (let i = 0; i < text.length; i += CHECK_EVERY_CHARS) {
+      if (this.push(text.slice(i, i + CHECK_EVERY_CHARS))) return true;
+    }
+    return false;
+  }
+  isLooping() {
+    return this.hit !== null;
+  }
+  getInfo() {
+    if (!this.hit) return null;
+    return t("agent_run.looping_info", {
+      chars: this.hit.chars,
+      percent: Math.round(this.hit.distinctRatio * 100)
+    });
+  }
+};
+// src/agent/turn.ts
 async function* runTurn(opts) {
   if (opts.streaming) {
     return yield* runTurnStreaming(opts);
@@ -9852,55 +10652,72 @@ async function* runTurn(opts) {
 }
 async function* runTurnStreaming(opts) {
   const { provider, input, guard, reasoningGuard } = opts;
+  const repetition = new RepetitionDetector();
+  const reasoningRepetition = new RepetitionDetector();
   let text = "";
   let reasoningText = "";
   let finishReason = "stop";
+  let looping;
   let usage;
   const toolCalls = [];
   let streamError;
   let model;
   let warnings;
-  for await (const chunk of provider.stream(input)) {
-    switch (chunk.type) {
-      case "text-delta": {
-        const raw = chunk.textDelta ?? "";
-        if (!raw) break;
-        const delta = guard ? guard.push(raw) : raw;
-        if (!delta) break;
-        text += delta;
-        yield { type: "text-delta", text: delta };
-        break;
+  const ac = new AbortController();
+  const unlink = linkAbort(input.signal, ac);
+  try {
+    for await (const chunk of provider.stream({ ...input, signal: ac.signal })) {
+      switch (chunk.type) {
+        case "text-delta": {
+          const raw = chunk.textDelta ?? "";
+          if (!raw) break;
+          const delta = guard ? guard.push(raw) : raw;
+          if (!delta) break;
+          text += delta;
+          yield { type: "text-delta", text: delta };
+          if (repetition.push(delta)) looping = repetition;
+          break;
+        }
+        case "reasoning-delta": {
+          const raw = chunk.textDelta ?? "";
+          if (!raw) break;
+          const delta = reasoningGuard ? reasoningGuard.push(raw) : raw;
+          if (!delta) break;
+          reasoningText += delta;
+          yield { type: "reasoning-delta", text: delta };
+          if (reasoningRepetition.push(delta)) looping = reasoningRepetition;
+          break;
+        }
+        case "tool-call":
+          if (chunk.toolCall) {
+            toolCalls.push({
+              toolCallId: chunk.toolCall.toolCallId,
+              toolName: chunk.toolCall.toolName,
+              input: chunk.toolCall.input
+            });
+          }
+          break;
+        case "finish":
+          if (chunk.usage) usage = chunk.usage;
+          if (chunk.finishReason) finishReason = chunk.finishReason;
+          if (chunk.model) model = chunk.model;
+          if (chunk.warnings) warnings = chunk.warnings;
+          break;
+        case "error":
+          streamError = chunk.error ?? t("agent_run.unknown_provider_error");
+          break;
+        case "tool-result":
+          break;
       }
-      case "reasoning-delta": {
-        const raw = chunk.textDelta ?? "";
-        if (!raw) break;
-        const delta = reasoningGuard ? reasoningGuard.push(raw) : raw;
-        if (!delta) break;
-        reasoningText += delta;
-        yield { type: "reasoning-delta", text: delta };
+      if (looping) {
+        ac.abort();
         break;
       }
-      case "tool-call":
-        if (chunk.toolCall) {
-          toolCalls.push({
-            toolCallId: chunk.toolCall.toolCallId,
-            toolName: chunk.toolCall.toolName,
-            input: chunk.toolCall.input
-          });
-        }
-        break;
-      case "finish":
-        if (chunk.usage) usage = chunk.usage;
-        if (chunk.finishReason) finishReason = chunk.finishReason;
-        if (chunk.model) model = chunk.model;
-        if (chunk.warnings) warnings = chunk.warnings;
-        break;
-      case "error":
-        streamError = chunk.error ?? t("agent_run.unknown_provider_error");
-        break;
     }
+  } finally {
+    unlink();
   }
-  if (streamError) throw new Error(streamError);
+  if (streamError && !looping) throw new Error(streamError);
   if (guard) {
     const tail = guard.flush();
     if (tail) {
@@ -9918,7 +10735,8 @@ async function* runTurnStreaming(opts) {
   return {
     text,
     ...usage ? { usage } : {},
-    finishReason,
+    finishReason: looping ? "looping" : finishReason,
+    ...looping ? { loopingInfo: looping.getInfo() ?? "" } : {},
     ...toolCalls.length > 0 ? { toolCalls } : {},
     ...reasoningText ? { reasoningText } : {},
     ...model ? { model } : {},
@@ -9937,20 +10755,53 @@ async function* runTurnBuffered(opts) {
     yield { type: "text-delta", text };
   }
   const { reasoningText: _replaced, ...rest } = result;
-  return { ...rest, text, ...reasoningText ? { reasoningText } : {} };
+  const textLoop = new RepetitionDetector();
+  const reasoningLoop = new RepetitionDetector();
+  textLoop.pushAll(text);
+  if (reasoningText) reasoningLoop.pushAll(reasoningText);
+  let looping;
+  if (textLoop.isLooping()) looping = textLoop;
+  else if (reasoningLoop.isLooping()) looping = reasoningLoop;
+  return {
+    ...rest,
+    text,
+    ...reasoningText ? { reasoningText } : {},
+    ...looping ? { finishReason: "looping", loopingInfo: looping.getInfo() ?? "" } : {}
+  };
+}
+function linkAbort(outer, ac) {
+  if (!outer) return () => {
+  };
+  if (outer.aborted) {
+    ac.abort(outer.reason);
+    return () => {
+    };
+  }
+  const onAbort = () => ac.abort(outer.reason);
+  outer.addEventListener("abort", onAbort, { once: true });
+  return () => outer.removeEventListener("abort", onAbort);
 }
 function filterWhole(guard, text) {
   if (!guard || !text) return text;
   return guard.push(text) + guard.flush();
 }
+// src/agent/types.ts
+function isAbortSignal(signal) {
+  return !!signal && typeof signal.addEventListener === "function" && typeof signal.removeEventListener === "function";
+}
 // src/agent/loop.ts
 var DEFAULT_CONTEXT_LENGTH = 128e3;
+function shrank(before, after) {
+  const chars = (list) => list.reduce((sum, m) => sum + m.content.length, 0);
+  return chars(after) < chars(before);
+}
+var NO_OUTPUT_TEXT = "(\u65E0\u8F93\u51FA)";
 function imageParts(content) {
   return typeof content === "string" ? [] : content.filter((p) => p.type === "image");
 }
 function toolSignatureOf(config, tools) {
-  const direct = tools.map((t76) => t76.name).join("\0");
-  const declared = (config.codeModeTools?.() ?? []).map((t76) => t76.name).join("\0");
+  const direct = tools.map((t78) => t78.name).join("\0");
+  const declared = (config.codeModeTools?.() ?? []).map((t78) => t78.name).join("\0");
   return declared ? `${direct}|${declared}` : direct;
 }
 function modelSignatureOf(info) {
@@ -10110,7 +10961,7 @@ var AgentLoop = class {
   }
   async *runTurns(input, turns) {
     const maxTurns = turnLimitOf(input.maxTurns ?? this.config.maxTurns);
-    this.stallDetector.resetOnSuccess();
+    this.stallDetector.reset();
     const rawUserText = contentToText(input.userMessage, { imagesCarriedAsParts: true });
     const images = imageParts(input.userMessage);
     const inputGate = this.config.compliance?.checkInput(rawUserText);
@@ -10152,6 +11003,7 @@ var AgentLoop = class {
     let lastPromptTokens = 0;
     let lastText = "";
     let imagesDroppedReported = false;
+    let overflowRescued = false;
     let runUsage;
     let lastModel;
     const addRun = (u) => {
@@ -10194,6 +11046,8 @@ var AgentLoop = class {
         { role: "user", content: userContent, ...userParts ? { parts: userParts } : {} }
       ];
       const taskNotice = new TaskNoticeTracker(this.config.backgroundTasks);
+      let todoNudged = false;
+      let idleNudged = false;
       for (let turn = 1; turn <= maxTurns; turn++) {
         if (this.isAborted(input.signal)) {
           yield finish("aborted");
@@ -10214,8 +11068,8 @@ var AgentLoop = class {
           yield finish("budget-exceeded", stop.breach);
           return;
         }
-        const notice = taskNotice.notice();
-        if (notice) messages.push({ role: "user", content: notice });
+        const notice2 = taskNotice.notice();
+        if (notice2) messages.push({ role: "user", content: notice2 });
         this.hooks.fire("turn:before", {
           sessionId: input.sessionId,
           userMessage: transformed,
@@ -10232,11 +11086,35 @@ var AgentLoop = class {
           system = await this.prompt.buildSystem(input.sessionId);
         }
         if (turn === 1) {
+          const contextLength = this.config.contextLength;
+          let estimated = estimateRunTokens({ system, messages, tools });
+          if (this.config.contextEngine && isPromptOversize(estimated, contextLength)) {
+            const rescued = await this.compressNow(messages, {
+              promptTokens: estimated,
+              totalTokens: totalInput + totalOutput
+            });
+            if (rescued.messages !== messages) {
+              messages = rescued.messages;
+              estimated = estimateRunTokens({ system, messages, tools });
+              yield {
+                type: "notice",
+                code: "context-compacted",
+                text: t("agent_run.context_compacted")
+              };
+            }
+            if (rescued.usage) {
+              addRun(rescued.usage);
+              yield* budget.toEvents(
+                budget.add(rescued.usage, this.rateOf(rescued.model)),
+                runUsage
+              );
+            }
+          }
           const role = this.config.role?.();
           yield {
             type: "run-start",
             ...role ? { role: { name: role.name, ...role.source ? { source: role.source } : {} } } : {},
-            estimatedTokens: estimateRunTokens({ system, messages, tools })
+            estimatedTokens: estimated
           };
           if (learned.length > 0) {
             this.learnedSkills.splice(0, learned.length);
@@ -10260,17 +11138,24 @@ var AgentLoop = class {
           },
           runSpan
         );
-        const guard = this.config.compliance?.outputGuard();
-        const reasoningGuard = this.config.compliance?.outputGuard();
+        let guard = this.config.compliance?.outputGuard();
+        let reasoningGuard = this.config.compliance?.outputGuard();
+        const requestFor = (msgs) => ({
+          provider: this.config.provider,
+          input: {
+            messages: msgs,
+            tools,
+            system,
+            maxSteps: 1,
+            ...isAbortSignal(input.signal) ? { signal: input.signal } : {}
+          },
+          streaming,
+          ...guard ? { guard } : {},
+          ...reasoningGuard ? { reasoningGuard } : {}
+        });
         let result;
         try {
-          result = yield* runTurn({
-            provider: this.config.provider,
-            input: { messages, tools, system, maxSteps: 1 },
-            streaming,
-            ...guard ? { guard } : {},
-            ...reasoningGuard ? { reasoningGuard } : {}
-          });
+          result = yield* runTurn(requestFor(messages));
           if (result.usage) {
             llmSpan.setAttribute(GEN_AI.USAGE_INPUT_TOKENS, result.usage.inputTokens);
             llmSpan.setAttribute(GEN_AI.USAGE_OUTPUT_TOKENS, result.usage.outputTokens);
@@ -10278,7 +11163,26 @@ var AgentLoop = class {
           llmSpan.setAttribute("epoch.finish_reason", result.finishReason);
         } catch (err) {
           llmSpan.recordError(err);
-          throw err;
+          const engine = this.config.contextEngine;
+          if (overflowRescued || !engine || !isContextOverflow(err)) throw err;
+          overflowRescued = true;
+          const rescued = await this.compressNow(messages, {
+            totalTokens: totalInput + totalOutput
+          });
+          if (rescued.usage) {
+            addRun(rescued.usage);
+            yield* budget.toEvents(budget.add(rescued.usage, this.rateOf(rescued.model)), runUsage);
+          }
+          if (!shrank(messages, rescued.messages)) throw err;
+          messages = rescued.messages;
+          yield {
+            type: "notice",
+            code: "context-compacted",
+            text: t("agent_run.context_compacted")
+          };
+          guard = this.config.compliance?.outputGuard();
+          reasoningGuard = this.config.compliance?.outputGuard();
+          result = yield* runTurn(requestFor(messages));
         } finally {
           llmSpan.end();
           this.telemetry.histogram(METRIC.LLM_CALL_LATENCY, Date.now() - turnStart);
@@ -10314,6 +11218,16 @@ var AgentLoop = class {
           this.telemetry.histogram(METRIC.TOKEN_USAGE, usage.outputTokens, {
             "epoch.token_type": "output"
           });
+          if (usage.cacheHitTokens !== void 0) {
+            this.telemetry.histogram(METRIC.TOKEN_USAGE, usage.cacheHitTokens, {
+              "epoch.token_type": "cache_read"
+            });
+          }
+          if (usage.cacheWriteTokens !== void 0) {
+            this.telemetry.histogram(METRIC.TOKEN_USAGE, usage.cacheWriteTokens, {
+              "epoch.token_type": "cache_write"
+            });
+          }
           input.onTurnUsage?.(usage);
           addRun(usage);
           lastModel = result.model;
@@ -10343,6 +11257,19 @@ var AgentLoop = class {
           await this.prompt.syncMemory(userText, msg2);
           return;
         }
+        if (result.finishReason === "looping") {
+          const msg2 = t("agent_run.looping", { info: result.loopingInfo ?? "" });
+          yield { type: "text-delta", text: msg2 };
+          await this.prompt.syncMemory(userText, msg2);
+          this.hooks.fire("stop", {
+            sessionId: input.sessionId,
+            response: msg2,
+            totalTokens: totalInput + totalOutput,
+            turns
+          });
+          yield finish("looping");
+          return;
+        }
         const toolCalls = result.toolCalls ?? [];
         const truncated = result.finishReason === "length" && toolCalls.length === 0;
         if (truncated) {
@@ -10375,7 +11302,7 @@ ${finalText}` };
           );
           if (wantContinue && turn < maxTurns) {
             messages.push(
-              { role: "assistant", content: finalText || "(\u65E0\u8F93\u51FA)" },
+              { role: "assistant", content: finalText || NO_OUTPUT_TEXT },
               {
                 role: "user",
                 content: systemNote(
@@ -10385,6 +11312,28 @@ ${finalText}` };
             );
             continue;
           }
+          if (!todoNudged && turn < maxTurns) {
+            const open = this.config.pendingTodos?.(input.sessionId);
+            if (open !== void 0 && open > 0) {
+              todoNudged = true;
+              messages.push(
+                { role: "assistant", content: finalText || NO_OUTPUT_TEXT },
+                {
+                  role: "user",
+                  content: systemNote(unfinishedTodoNote(open))
+                }
+              );
+              continue;
+            }
+          }
+          if (!idleNudged && turn < maxTurns && !truncated && announcedNextStep(finalText)) {
+            idleNudged = true;
+            messages.push(
+              { role: "assistant", content: finalText || NO_OUTPUT_TEXT },
+              { role: "user", content: systemNote(announcedButIdleNote()) }
+            );
+            continue;
+          }
           this.hooks.fire("stop", {
             sessionId: input.sessionId,
             response: finalText,
@@ -10418,7 +11367,10 @@ ${finalText}` };
             (onOutput) => this.toolExecutor.execute(tc, input.sessionId, input.signal, runSpan, onOutput)
           );
           executions.push(exec);
-          this.stallDetector.recordAction(exec.toolName, exec.args);
+          this.stallDetector.recordAction(exec.toolName, exec.args, {
+            success: exec.success,
+            output: exec.output
+          });
           for (const d of exec.diffs ?? []) {
             yield {
               type: "diff",
@@ -10543,7 +11495,11 @@ ${finalText}` };
   }
   async maybeCompress(messages, lastPromptTokens, totalTokens2) {
     const engine = this.config.contextEngine;
-    if (!engine?.shouldCompress(lastPromptTokens, this.config.contextLength)) return { messages };
+    if (!engine) return { messages };
+    const oversize = isPromptOversize(lastPromptTokens, this.config.contextLength);
+    if (!oversize && !engine.shouldCompress(lastPromptTokens, this.config.contextLength)) {
+      return { messages };
+    }
     return this.compressNow(messages, { totalTokens: totalTokens2, promptTokens: lastPromptTokens });
   }
   async compactNow(messages, instruction) {
@@ -10643,6 +11599,14 @@ var CompressionSchema = z.object({
   enabled: z.boolean().default(true),
   threshold: z.number().gt(0).max(1).default(DEFAULT_COMPRESSION_THRESHOLD)
 });
+var DEFAULT_MEMORY_CHAR_LIMIT = 2e4;
+var DEFAULT_USER_CHAR_LIMIT = 6e3;
+var DEFAULT_MEMORY_INDEX_CHAR_LIMIT = 4e3;
+var MemorySchema = z.object({
+  memoryCharLimit: z.int().min(1).default(DEFAULT_MEMORY_CHAR_LIMIT),
+  userCharLimit: z.int().min(1).default(DEFAULT_USER_CHAR_LIMIT),
+  indexCharLimit: z.int().min(1).default(DEFAULT_MEMORY_INDEX_CHAR_LIMIT)
+});
 var SandboxSchema = z.object({
   terminal: z.boolean().default(true)
 });
@@ -10686,7 +11650,7 @@ var StatusLineSchema = z.object({
   command: z.string().min(1).optional(),
   intervalMs: z.int().min(500).max(3e5).optional()
 });
-var DisplaySchema = z.object({
+var DisplaySchema2 = z.object({
   language: z.enum(LANGS).optional()
 });
 var SidebarMenuItemSchema = z.object({
@@ -10754,6 +11718,7 @@ var EpochConfigSchema = z.object({
   tools: ToolsSchema.prefault({}),
   skills: SkillsSchema.optional(),
   compression: CompressionSchema.prefault({}),
+  memory: MemorySchema.prefault({}),
   artifacts: ArtifactsSchema.prefault({}),
   budget: BudgetSchema.optional(),
   compliance: ComplianceSchema.optional(),
@@ -10762,7 +11727,7 @@ var EpochConfigSchema = z.object({
   search: SearchSchema.optional(),
   sessionSearch: SessionSearchSchema.optional(),
   statusLine: StatusLineSchema.optional(),
-  display: DisplaySchema.optional(),
+  display: DisplaySchema2.optional(),
   brand: z.string().min(1).optional(),
   sidebarMenu: z.array(SidebarMenuItemSchema).min(1).refine((items) => new Set(items.map((item) => item.id)).size === items.length, {
     message: "sidebarMenu: id must be unique"
@@ -11447,64 +12412,6 @@ function fileStamp(path) {
 function parseKeys(raw) {
   return raw.split(",").map((s) => s.trim()).filter(Boolean).map((k) => ({ apiKey: k }));
 }
-// src/provider/errors.ts
-var ProviderError = class extends Error {
-  constructor(message, code, recoverable, recovery = "abort") {
-    super(message);
-    this.code = code;
-    this.recoverable = recoverable;
-    this.recovery = recovery;
-    this.name = "ProviderError";
-  }
-  code;
-  recoverable;
-  recovery;
-};
-var PROVIDER_NO_CREDENTIAL = 1001;
-function extractStatus(err) {
-  if (!err || typeof err !== "object") return void 0;
-  const e = err;
-  for (const candidate of [e.statusCode, e.status, e.response?.status]) {
-    if (typeof candidate === "number" && candidate >= 100 && candidate < 600) return candidate;
-  }
-  return void 0;
-}
-function extractStatusFromMessage(msg) {
-  const leading = msg.match(/^\s*\[?(4\d{2}|5\d{2})\b/);
-  if (leading?.[1]) return Number(leading[1]);
-  const labelled = msg.match(/(?:status(?:\s*code)?|http|code)\D{0,3}(4\d{2}|5\d{2})\b/i);
-  if (labelled?.[1]) return Number(labelled[1]);
-  return void 0;
-}
-function classifyProviderError(err) {
-  const msg = err instanceof Error ? err.message : String(err);
-  const status = extractStatus(err);
-  if (/context.?length|context.?window|maximum.*token|token.?limit|too.?many.?tokens|prompt.*too.?long|reduce.*(length|tokens)/i.test(
-    msg
-  ))
-    return { code: 1030, recovery: "abort" };
-  if (/invalid.*api.?key|unauthorized|authentication|permission.?denied|forbidden/i.test(msg))
-    return { code: 1001, recovery: "rotate_credential" };
-  if (/billing|quota.*exceeded|insufficient.*(balance|credit)|payment.?required/i.test(msg))
-    return { code: 1012, recovery: "switch_provider" };
-  if (/rate.?limit|too.?many.?requests/i.test(msg)) return { code: 1010, recovery: "retry" };
-  if (/model.?not.?found|model.*does.*not.*exist|unknown.?model|no.?such.?model/i.test(msg))
-    return { code: 1040, recovery: "switch_model" };
-  if (/overloaded|server.?error|bad.?gateway|service.?unavailable/i.test(msg))
-    return { code: 1020, recovery: "retry" };
-  if (/timeout|timed.?out|etimedout|econnreset|enotfound|socket.?hang.?up/i.test(msg))
-    return { code: 1041, recovery: "retry" };
-  const code = status ?? extractStatusFromMessage(msg);
-  if (code !== void 0) {
-    if (code === 401 || code === 403) return { code: 1001, recovery: "rotate_credential" };
-    if (code === 402) return { code: 1012, recovery: "switch_provider" };
-    if (code === 404) return { code: 1040, recovery: "switch_model" };
-    if (code === 429) return { code: 1010, recovery: "retry" };
-    if (code >= 500) return { code: 1020, recovery: "retry" };
-    if (code >= 400) return { code: 1050, recovery: "abort" };
-  }
-  return { code: 9999, recovery: "retry" };
-}
 // src/provider/fallback.ts
 var DEFAULT_MODELS = {
   openai: "gpt-4o-mini",
@@ -12256,6 +13163,7 @@ var ProviderRouter = class {
     const { code, recovery } = classifyProviderError(err);
     const message = err instanceof Error ? err.message : String(err);
     const stay = { kind: "continue", ct: state.ct, cm: state.cm };
+    if (code === PROVIDER_ABORTED) return { kind: "give-up", message, code };
     if (recovery === "rotate_credential" && this.rotateCredential())
       return { ...stay, attempt: state.attempt + 1 };
     if (recovery === "retry") {
@@ -12326,6 +13234,7 @@ var ProviderRouter = class {
           system: input.system,
           stopWhen: isStepCount(input.maxSteps ?? 1),
           ...input.maxTokens ? { maxOutputTokens: input.maxTokens } : {},
+          ...input.signal ? { abortSignal: input.signal } : {},
           output,
           providerOptions: toSdkProviderOptions(input.providerOptions)
         });
@@ -12382,6 +13291,7 @@ var ProviderRouter = class {
           system: input.system,
           stopWhen: isStepCount(input.maxSteps ?? 1),
           ...input.maxTokens ? { maxOutputTokens: input.maxTokens } : {},
+          ...input.signal ? { abortSignal: input.signal } : {},
           output,
           providerOptions: toSdkProviderOptions(input.providerOptions)
         });
@@ -12661,6 +13571,9 @@ var SETTING_WRITE_KEYS = [
   "contextLength",
   "compression.enabled",
   "compression.threshold",
+  "memory.memoryCharLimit",
+  "memory.userCharLimit",
+  "memory.indexCharLimit",
   "budget.maxCostUsd",
   "budget.maxTokens",
   "budget.warnAtPercent",
@@ -12719,6 +13632,9 @@ var VALUE_SCHEMA = {
   contextLength: EpochConfigSchema.shape.contextLength.unwrap(),
   "compression.enabled": EpochConfigSchema.shape.compression.unwrap().shape.enabled.unwrap(),
   "compression.threshold": EpochConfigSchema.shape.compression.unwrap().shape.threshold.unwrap(),
+  "memory.memoryCharLimit": EpochConfigSchema.shape.memory.unwrap().shape.memoryCharLimit.unwrap(),
+  "memory.userCharLimit": EpochConfigSchema.shape.memory.unwrap().shape.userCharLimit.unwrap(),
+  "memory.indexCharLimit": EpochConfigSchema.shape.memory.unwrap().shape.indexCharLimit.unwrap(),
   "budget.maxCostUsd": EpochConfigSchema.shape.budget.unwrap().shape.maxCostUsd.unwrap(),
   "budget.maxTokens": EpochConfigSchema.shape.budget.unwrap().shape.maxTokens.unwrap(),
   "budget.warnAtPercent": EpochConfigSchema.shape.budget.unwrap().shape.warnAtPercent.unwrap(),
@@ -13131,16 +14047,16 @@ function buildSearchQuery(query) {
   }
   const latinPart = cleaned.replace(CJK_RUN, " ");
   for (const w of latinPart.split(/\s+/)) {
-    const t76 = w.trim();
-    if (t76.length >= 2) terms.add(t76);
+    const t78 = w.trim();
+    if (t78.length >= 2) terms.add(t78);
   }
   if (terms.size === 0) return null;
-  return [...terms].map((t76) => `"${t76.replace(/"/g, "")}"`).join(" OR ");
+  return [...terms].map((t78) => `"${t78.replace(/"/g, "")}"`).join(" OR ");
 }
 // src/memory/db.ts
-var NS = "memory";
+var NS2 = "memory";
 var FTS_SCHEMA_VERSION = 2;
-var MIGRATIONS = [
+var MIGRATIONS2 = [
   {
     id: "memory-baseline",
     version: 1,
@@ -13177,7 +14093,7 @@ var MemoryDB = class {
   constructor(dbPath) {
     this.path = dbPath;
     this.db = openDatabase(this.path);
-    migrate(this.db, NS, MIGRATIONS);
+    migrate(this.db, NS2, MIGRATIONS2);
     this.migrateFts();
     for (const target of ["memory", "user"]) {
       const row = this.db.prepare(
@@ -13348,12 +14264,12 @@ var MemoryDB = class {
   }
 };
 // src/memory/types.ts
-var DEFAULT_CONFIG = {
-  memoryCharLimit: 2200,
-  userCharLimit: 1375
-};
 function defaultMemoryConfig() {
-  return { ...DEFAULT_CONFIG };
+  return {
+    memoryCharLimit: DEFAULT_MEMORY_CHAR_LIMIT,
+    userCharLimit: DEFAULT_USER_CHAR_LIMIT,
+    indexCharLimit: DEFAULT_MEMORY_INDEX_CHAR_LIMIT
+  };
 }
 // src/memory/manager.ts
 var DB_PATH = join(homedir(), ".epoch", "memory.db");
@@ -13361,6 +14277,8 @@ var MEM_DIR = join(homedir(), ".epoch", "memories");
 var ENTRY_DELIMITER = "\n\xA7 ";
 var MAX_ENTRY_CHARS = 4e3;
 var MAX_CONSOLIDATION_FAILURES_PER_TURN = 3;
+var SHORT_ID_HEX = 6;
+var INDEX_SUMMARY_CHARS = 80;
 var INJECTION_PATTERNS = [
   { pattern: /<\|im_start\|>/i, label: "role injection" },
   { pattern: /<\|im_end\|>/i, label: "role injection" },
@@ -13370,27 +14288,36 @@ var INJECTION_PATTERNS = [
   { pattern: /^assistant:/im, label: "role prefix" },
   { pattern: /^user:/im, label: "role prefix" }
 ];
+function contentKey(target, content) {
+  return `${target}\0${content}`;
+}
+function stripUndefined(obj) {
+  if (!obj) return {};
+  return Object.fromEntries(Object.entries(obj).filter(([, v]) => v !== void 0));
+}
 var MemoryManager = class {
   db;
   config;
   memDir;
-  snapshot = { memory: "", user: "" };
+  snapshot = "";
+  ids = /* @__PURE__ */ new Map();
+  idByContent = /* @__PURE__ */ new Map();
   initialized = false;
   consolidationFailures = 0;
   reviewIssues = [];
-  constructor(dbPath, memDir) {
+  constructor(dbPath, memDir, config) {
     const dp = dbPath ?? DB_PATH;
     const md = memDir ?? MEM_DIR;
     this.memDir = md;
     mkdirSync(dirname(dp), { recursive: true });
     mkdirSync(this.memDir, { recursive: true });
     this.db = new MemoryDB(dp);
-    this.config = defaultMemoryConfig();
+    this.config = { ...defaultMemoryConfig(), ...stripUndefined(config) };
   }
   async initialize(_sessionId) {
     this.initialized = true;
     await this.reloadFromDisk();
-    return this.buildSnapshotBlock();
+    return this.snapshot;
   }
   async prefetch(userQuery) {
     if (!this.initialized) return "";
@@ -13412,10 +14339,24 @@ var MemoryManager = class {
       const safe = deduped.map((c) => this.scanInjection(c)).filter((c) => c.length > 0);
       this.syncTarget(target, safe);
     }
-    this.snapshot = {
-      memory: this.renderBlock("memory", this.db.getAllContent("memory")),
-      user: this.renderBlock("user", this.db.getAllContent("user"))
-    };
+    this.assignIds();
+    this.snapshot = this.renderIndexBlock();
+  }
+  assignIds() {
+    this.ids.clear();
+    this.idByContent.clear();
+    for (const target of ["memory", "user"]) {
+      const prefix = target === "memory" ? "m" : "u";
+      for (const content of this.db.getAllContent(target)) {
+        const hash = createHash("sha256").update(content).digest("hex");
+        let id = `${prefix}:${hash.slice(0, SHORT_ID_HEX)}`;
+        for (let len = SHORT_ID_HEX + 4; this.ids.has(id) && len <= hash.length; len += 4) {
+          id = `${prefix}:${hash.slice(0, len)}`;
+        }
+        this.ids.set(id, { target, content });
+        this.idByContent.set(contentKey(target, content), id);
+      }
+    }
   }
   syncTarget(target, desired) {
     const existing = new Map(this.db.getAll(target).map((e) => [e.content, e]));
@@ -13446,6 +14387,7 @@ var MemoryManager = class {
   async flushToDisk() {
     writeFileSync(join(this.memDir, "MEMORY.md"), this.renderFile("memory"), "utf-8");
     writeFileSync(join(this.memDir, "USER.md"), this.renderFile("user"), "utf-8");
+    this.assignIds();
   }
   renderFile(target) {
     const entries = this.db.getAllContent(target);
@@ -13456,7 +14398,7 @@ var MemoryManager = class {
     const results = this.db.searchFts(query, void 0, limit);
     for (const r of results) this.db.markAccessed(r.id);
     return results.map((r) => ({
-      id: r.id,
+      id: this.idByContent.get(contentKey(r.target, r.content)) ?? r.id,
       content: r.content,
       target: r.target,
       score: r.score
@@ -13465,6 +14407,22 @@ var MemoryManager = class {
   async keywordSearch(query, limit) {
     return this.search(query, limit);
   }
+  async read(ids) {
+    const found = [];
+    const missing = [];
+    for (const raw of ids) {
+      const id = raw.trim();
+      const hit = this.ids.get(id);
+      if (!hit) {
+        missing.push(id);
+        continue;
+      }
+      found.push({ id, target: hit.target, content: hit.content });
+      const entry = this.db.findByContent(hit.target, hit.content);
+      if (entry) this.db.markAccessed(entry.id);
+    }
+    return { found, missing };
+  }
   getAllEntries() {
     return [
       ...this.db.getAllContent("memory").map((c) => ({ content: c })),
@@ -13516,9 +14474,9 @@ var MemoryManager = class {
     return { success: true, done: true };
   }
   async replace(target, oldText, content) {
-    const existing = this.db.findByContent(target, oldText);
+    const existing = this.locate(target, oldText);
     if (!existing) {
-      return { success: false, done: true, error: "Entry not found" };
+      return { success: false, done: true, error: this.notFoundHint(target, oldText) };
     }
     const budget = this.getBudget()[target];
     const delta = content.length - existing.charLength;
@@ -13533,7 +14491,7 @@ var MemoryManager = class {
         consolidateHint: this.buildConsolidateHint(target)
       };
     }
-    this.db.replace(target, oldText, {
+    this.db.replace(target, existing.content, {
       ...existing,
       content,
       charLength: content.length,
@@ -13544,8 +14502,24 @@ var MemoryManager = class {
     return { success: true, done: true };
   }
   async remove(target, oldText) {
-    this.db.remove(target, oldText);
+    const existing = this.locate(target, oldText);
+    if (!existing) return false;
+    this.db.remove(target, existing.content);
+    this.consolidationFailures = 0;
     await this.flushToDisk();
+    return true;
+  }
+  locate(target, ref) {
+    const key = ref.trim();
+    const byId = this.ids.get(key);
+    if (byId && byId.target === target) {
+      return this.db.findByContent(target, byId.content);
+    }
+    return this.db.findByContent(target, key);
+  }
+  notFoundHint(target, ref) {
+    const looksLikeId = /^[mu]:[0-9a-f]{6,}$/.test(ref.trim());
+    return looksLikeId ? `No entry with id "${ref}" in ${target}. The index is frozen at session start; this entry may have been changed or removed since. Use memory(action="search") to find it again.` : `No entry in ${target} matches that exact text. \u26A0\uFE0F old_text must be the FULL text of an entry \u2014 the MEMORY INDEX only shows a truncated first line, so copying from it will not match. Pass the entry's id instead (e.g. id="m:a1b2c3"), or memory(action="read") it first to get the full text.`;
   }
   getBudget() {
     const mem = this.db.getBudget("memory");
@@ -13602,35 +14576,101 @@ var MemoryManager = class {
     }
     return content;
   }
-  renderBlock(target, entries) {
-    if (entries.length === 0) return "";
-    const content = entries.join(ENTRY_DELIMITER);
-    const budget = this.getBudget()[target];
-    const header = target === "user" ? `USER PROFILE (who the user is) [${budget.percent}% \u2014 ${budget.current.toLocaleString()}/${budget.limit.toLocaleString()} chars]` : `MEMORY (your personal notes) [${budget.percent}% \u2014 ${budget.current.toLocaleString()}/${budget.limit.toLocaleString()} chars]`;
+  indexEntries(target) {
+    const out = [];
+    for (const content of this.db.getAllContent(target)) {
+      const id = this.idByContent.get(contentKey(target, content));
+      if (!id) continue;
+      const firstLine4 = (content.split("\n")[0] ?? "").trim();
+      const summary = firstLine4.length > INDEX_SUMMARY_CHARS ? `${firstLine4.slice(0, INDEX_SUMMARY_CHARS)}\u2026` : firstLine4;
+      out.push({ id, target, summary, charLength: content.length });
+    }
+    return out;
+  }
+  renderIndexBlock() {
+    const all = [...this.indexEntries("memory"), ...this.indexEntries("user")];
+    if (all.length === 0) return "";
+    const order = new Map(all.map((e, i) => [e.id, i]));
+    const heat = /* @__PURE__ */ new Map();
+    for (const row of this.db.getAll()) {
+      const id = this.idByContent.get(contentKey(row.target, row.content));
+      if (id) heat.set(id, { count: row.accessCount, at: row.lastAccessedAt?.getTime() ?? 0 });
+    }
+    const rank = (id) => heat.get(id) ?? { count: 0, at: 0 };
+    const ranked = [...all].sort(
+      (a, b) => rank(b.id).count - rank(a.id).count || rank(b.id).at - rank(a.id).at || order.get(a.id) - order.get(b.id)
+    );
+    const kept = [];
+    let used = 0;
+    for (const e of ranked) {
+      const line = this.indexLine(e);
+      if (used + line.length + 1 > this.config.indexCharLimit) continue;
+      used += line.length + 1;
+      kept.push(e);
+    }
+    kept.sort((a, b) => order.get(a.id) - order.get(b.id));
+    const omitted = all.length - kept.length;
+    const sections = [];
+    for (const target of ["memory", "user"]) {
+      const rows = kept.filter((e) => e.target === target);
+      if (rows.length === 0) continue;
+      const budget = this.getBudget()[target];
+      const label = target === "user" ? "USER PROFILE (who the user is)" : "MEMORY (your personal notes)";
+      sections.push(
+        [
+          `${label} [${rows.length} entries \xB7 ${budget.current.toLocaleString()}/${budget.limit.toLocaleString()} chars]`,
+          ...rows.map((e) => this.indexLine(e))
+        ].join("\n")
+      );
+    }
     const separator = "\u2550".repeat(46);
-    const note = "[System note: The following is recalled memory context, NOT new user input. Treat as authoritative reference data.]";
-    return `${separator}
-${header}
-${separator}
-${note}
-<memory-context>
-\xA7 ${content}
-</memory-context>`;
-  }
-  buildSnapshotBlock() {
-    const parts = [];
-    if (this.snapshot.memory) parts.push(this.snapshot.memory);
-    if (this.snapshot.user) parts.push(this.snapshot.user);
-    return parts.join("\n\n");
+    const note = "[System note: This is an INDEX of your stored memory, NOT new user input. Only one-line summaries are listed here \u2014 the full text is not in this prompt.]";
+    const how = [
+      'To read an entry in full: memory(action="read", ids=["m:a1b2c3"]).',
+      'To find something not listed: memory(action="search", query="...").'
+    ];
+    if (omitted > 0) {
+      how.unshift(
+        `\u26A0\uFE0F ${omitted} more ${omitted === 1 ? "entry is" : "entries are"} stored but NOT listed above (index budget). Do not conclude something is absent from memory without searching first.`
+      );
+    }
+    return [
+      separator,
+      "MEMORY INDEX",
+      separator,
+      note,
+      "<memory-index>",
+      sections.join("\n\n"),
+      "</memory-index>",
+      ...how
+    ].join("\n");
+  }
+  indexLine(e) {
+    return `${e.id}  ${e.summary}  (${e.charLength} chars)`;
   }
   buildConsolidateHint(target) {
     const budget = this.getBudget()[target];
+    const heat = /* @__PURE__ */ new Map();
+    for (const row of this.db.getAll(target)) {
+      const id = this.idByContent.get(contentKey(row.target, row.content));
+      if (id) heat.set(id, row.accessCount);
+    }
+    const candidates2 = this.indexEntries(target).sort((a, b) => (heat.get(a.id) ?? 0) - (heat.get(b.id) ?? 0) || b.charLength - a.charLength).slice(0, 5);
     return [
       `Memory at ${budget.current.toLocaleString()}/${budget.limit.toLocaleString()} chars (${budget.percent}%) for ${target}. Cannot add new entry.`,
-      "To make room, use replace() to combine or shorten existing entries. For example:",
-      "- Merge '\u7528\u6237\u7528 pnpm' and '\u7528\u6237\u7528 pnpm v9' into '\u7528\u6237\u4F7F\u7528 pnpm v9'",
-      "- Shorten verbose entries to their essence",
       "",
+      "To make room, work by id \u2014 NOT by old_text. The MEMORY INDEX only shows a truncated",
+      "first line, so text copied from it will never match an entry exactly.",
+      "",
+      `  memory(action="remove",  target="${target}", id="m:a1b2c3")                  drop an obsolete entry`,
+      `  memory(action="replace", target="${target}", id="m:a1b2c3", content="...")   shorten or merge one`,
+      '  memory(action="read",    ids=["m:a1b2c3"])                             see the full text first',
+      "",
+      ...candidates2.length > 0 ? [
+        "Least-used entries in this store (cheapest to drop or shorten):",
+        ...candidates2.map((e) => `  ${e.id}  ${e.summary}  (${e.charLength} chars)`),
+        ""
+      ] : [],
       `Per-turn consolidation limit: ${MAX_CONSOLIDATION_FAILURES_PER_TURN} attempts. After that, stop and proceed.`
     ].join("\n");
   }
@@ -14115,7 +15155,7 @@ function encodeTurnFacts(facts) {
   return facts ? JSON.stringify(facts) : null;
 }
 // src/session/db.ts
-var NS2 = "session";
+var NS3 = "session";
 var log2 = createLogger("session-db");
 var META_COL_MAP = {
   displayName: "display_name",
@@ -14401,13 +15441,13 @@ var SessionDB = class {
   constructor(dbPath$1) {
     this.path = dbPath$1 ?? dbPath();
     this.db = openDatabase(this.path);
-    migrate(this.db, NS2, SESSION_MIGRATIONS);
+    migrate(this.db, NS3, SESSION_MIGRATIONS);
     this.migrateFtsIndex();
     this.refreshMsgId();
   }
   migrateFtsIndex() {
     try {
-      migrate(this.db, NS2, FTS_EXTERNAL_MIGRATIONS);
+      migrate(this.db, NS3, FTS_EXTERNAL_MIGRATIONS);
     } catch (err) {
       log2.warn(
         "FTS index rebuild (v8) failed; keeping the legacy schema for now (content stored three times, ~36% larger). Will retry on next start.",
@@ -14892,7 +15932,7 @@ function checkFtsHealth(db) {
     messages,
     tables,
     missingTriggers,
-    healthy: missingTriggers.length === 0 && tables.every((t76) => t76.error === null && t76.drift === null && t76.rows === messages),
+    healthy: missingTriggers.length === 0 && tables.every((t78) => t78.error === null && t78.drift === null && t78.rows === messages),
     indexBytes: indexBytesOf(db),
     space: spaceOf(db)
   };
@@ -15707,18 +16747,7 @@ function checkCodeExec(isolation) {
 }
 function checkAuto(operation, isolation) {
   if (operation.type === "code_exec") return checkCodeExec(isolation);
-  if (operation.type === "file_read") return { allowed: true, code: "level-default" };
-  if (operation.type === "file_write") return { allowed: true, code: "level-default" };
-  if (operation.type === "network") return { allowed: true, code: "level-default" };
-  if (operation.type === "command" && isReadOnlyCommand(operation.detail)) {
-    return { allowed: true, code: "level-default" };
-  }
-  return {
-    allowed: false,
-    requireApproval: true,
-    reason: t("permission_reason.write_command", { command: operation.detail.slice(0, 50) }),
-    code: "level-default"
-  };
+  return { allowed: true, code: "level-default" };
 }
 function checkPlan(operation) {
   if (operation.type === "code_exec") {
@@ -15825,9 +16854,17 @@ function isSensitivePath(target) {
 function checkHardLimits(operation) {
   const danger = checkDangerousCommand(operation.detail);
   if (danger.dangerous) {
+    if (danger.hardline) {
+      return {
+        allowed: false,
+        reason: t("permission_reason.dangerous", { desc: danger.desc ?? "" }),
+        code: "dangerous-command"
+      };
+    }
     return {
       allowed: false,
-      reason: t("permission_reason.dangerous", { desc: danger.desc ?? "" }),
+      requireApproval: true,
+      reason: t("permission_reason.dangerous_recoverable", { desc: danger.desc ?? "" }),
       code: "dangerous-command"
     };
   }
@@ -15960,11 +16997,11 @@ var ApprovalCache = class {
     return !rel.startsWith("..") && !isAbsolute(rel);
   }
   normalizeTarget(target) {
-    const t76 = target.trim();
-    if (!t76) return "";
-    const unix = t76.replace(/\\/g, "/");
+    const t78 = target.trim();
+    if (!t78) return "";
+    const unix = t78.replace(/\\/g, "/");
     if (unix.startsWith("/") || /^[A-Za-z]:\//.test(unix)) return resolve(unix);
-    return t76;
+    return t78;
   }
   load() {
     try {
@@ -16067,9 +17104,9 @@ function createSharedPermissionState(cache) {
   };
 }
 function cacheKeyFor(raw) {
-  const t76 = raw.trim();
-  if (!t76) return null;
-  return t76.slice(0, 500);
+  const t78 = raw.trim();
+  if (!t78) return null;
+  return t78.slice(0, 500);
 }
 // src/permission/manager.ts
 var log3 = createLogger("permission");
@@ -16164,12 +17201,9 @@ var PermissionManager = class _PermissionManager {
   decide(operation) {
     const hard = checkHardLimits(operation);
     if (hard) {
-      if (hard.requireApproval && this.shared.nonInteractive) {
-        return {
-          allowed: false,
-          reason: t("permission_reason.non_interactive_denied", { reason: hard.reason ?? "" }),
-          code: hard.code
-        };
+      if (hard.requireApproval) {
+        const settled = this.settleUnaskable(operation, hard);
+        if (settled) return settled;
       }
       return hard;
     }
@@ -16177,6 +17211,58 @@ var PermissionManager = class _PermissionManager {
     if (decision.allowed || !decision.requireApproval) return decision;
     return this.applyPreauthorization(operation, decision);
   }
+  settleUnaskable(operation, hard) {
+    if (this.level === "plan") {
+      return {
+        allowed: false,
+        reason: t("permission_reason.plan_no_write"),
+        code: hard.code
+      };
+    }
+    if (this.level === "bypass" && hard.code === "obfuscated") {
+      return {
+        allowed: true,
+        reason: t("permission_reason.bypass_unaskable", { reason: hard.reason ?? "" }),
+        code: hard.code
+      };
+    }
+    const cached = this.cachedDecision(operation);
+    if (cached) return cached;
+    if (this.shared.nonInteractive) {
+      return {
+        allowed: false,
+        reason: t("permission_reason.non_interactive_denied", { reason: hard.reason ?? "" }),
+        code: hard.code
+      };
+    }
+    return null;
+  }
+  approvalCacheActive() {
+    return this.level !== "bypass";
+  }
+  rememberFlag() {
+    return this.approvalCacheActive() ? {} : { rememberable: false };
+  }
+  cachedDecision(operation) {
+    const cacheTool = operation.toolName ?? operation.type;
+    const cacheKey = cacheKeyFor(operation.target || operation.detail);
+    const cached = cacheKey ? this.shared.cache.get(cacheTool, cacheKey) : null;
+    if (cached === "allow-always" || cached === "allow-session") {
+      return {
+        allowed: true,
+        reason: t("permission_reason.cached_allow"),
+        code: "approval-cache"
+      };
+    }
+    if (cached === "deny") {
+      return {
+        allowed: false,
+        reason: t("permission_reason.cached_deny"),
+        code: "approval-cache"
+      };
+    }
+    return null;
+  }
   checkRulesAndCache(operation) {
     const listMatch = matchRuleLists(this.shared.ruleLists, operation);
     if (listMatch?.verdict === "deny") {
@@ -16191,34 +17277,18 @@ var PermissionManager = class _PermissionManager {
     if (ruleDecision && !ruleDecision.allowed && !ruleDecision.requireApproval) {
       return ruleDecision;
     }
-    if (this.level !== "bypass") {
-      const cacheTool = operation.toolName ?? operation.type;
-      const cacheKey = cacheKeyFor(operation.target || operation.detail);
-      const cached = cacheKey ? this.shared.cache.get(cacheTool, cacheKey) : null;
-      if (cached === "allow-always" || cached === "allow-session") {
-        return {
-          allowed: true,
-          reason: t("permission_reason.cached_allow"),
-          code: "approval-cache"
-        };
-      }
-      if (cached === "deny") {
-        return {
-          allowed: false,
-          reason: t("permission_reason.cached_deny"),
-          code: "approval-cache"
-        };
-      }
-    }
+    const cached = this.approvalCacheActive() ? this.cachedDecision(operation) : null;
+    if (cached) return cached;
     if (listMatch?.verdict === "ask") {
       return {
         allowed: false,
         requireApproval: true,
         reason: t("permission_reason.rule_ask", { rule: listMatch.rule }),
-        code: "rule-match"
+        code: "rule-match",
+        ...this.rememberFlag()
       };
     }
-    if (ruleDecision?.requireApproval) return ruleDecision;
+    if (ruleDecision?.requireApproval) return { ...ruleDecision, ...this.rememberFlag() };
     if (listMatch?.verdict === "allow") {
       return {
         allowed: true,
@@ -16405,8 +17475,8 @@ function suggestRuleFromApproval(request) {
     ].join("\n")
   };
 }
-var NS3 = "schedule";
-var MIGRATIONS2 = [
+var NS4 = "schedule";
+var MIGRATIONS3 = [
   {
     id: "schedule-baseline",
     version: 1,
@@ -16480,7 +17550,7 @@ var ScheduleStore = class {
   constructor(dbPath) {
     this.path = dbPath;
     this.db = openDatabase(this.path);
-    migrate(this.db, NS3, MIGRATIONS2);
+    migrate(this.db, NS4, MIGRATIONS3);
   }
   get connection() {
     return this.db;
@@ -20916,73 +21986,6 @@ function trunc(stdout, stderr) {
   const skipped = out.length - TRUNCATE_HEAD - TRUNCATE_TAIL;
   return `${head}${nl}...[\u5DF2\u622A\u65AD ${(skipped / 1024).toFixed(1)} KB]...${nl}${tail}`;
 }
-var NS4 = "tracker";
-var MIGRATIONS3 = [
-  {
-    id: "tracker-baseline",
-    version: 1,
-    description: "TODO \u8868\uFF08\u57FA\u7EBF\uFF09",
-    up: (db) => {
-      db.exec(`
-        CREATE TABLE IF NOT EXISTS todos (
-          id          TEXT PRIMARY KEY,
-          session_id  TEXT NOT NULL,
-          content     TEXT NOT NULL,
-          status      TEXT NOT NULL DEFAULT 'pending'
-                        CHECK(status IN ('pending','in_progress','completed','cancelled')),
-          created_at  TEXT NOT NULL,
-          updated_at  TEXT NOT NULL
-        );
-        CREATE INDEX IF NOT EXISTS idx_todos_session ON todos(session_id);
-      `);
-    }
-  },
-  {
-    id: "todos-reason-column",
-    version: 2,
-    description: "TODO \u8868\u52A0 reason \u5217\uFF08\u53D6\u6D88\u7406\u7531\uFF0C\u53EA\u6709 cancelled \u90A3\u4E00\u6863\u4F1A\u6709\uFF09",
-    up: (db) => {
-      db.exec(`ALTER TABLE todos ADD COLUMN reason TEXT;`);
-    }
-  }
-];
-var TrackerDB = class {
-  db;
-  path;
-  constructor(dbPath) {
-    this.path = dbPath;
-    this.db = openDatabase(this.path);
-    migrate(this.db, NS4, MIGRATIONS3);
-  }
-  listBySession(sessionId) {
-    const rows = this.db.prepare(
-      "SELECT id, content, status, reason, created_at, updated_at FROM todos WHERE session_id = ? ORDER BY updated_at ASC"
-    ).all(sessionId);
-    return rows.map(({ reason: reason9, ...rest }) => reason9 ? { ...rest, reason: reason9 } : rest);
-  }
-  replaceAll(sessionId, todos) {
-    const insertStmt = this.db.prepare(
-      "INSERT INTO todos (id, session_id, content, status, reason, created_at, updated_at) VALUES (@id, @session_id, @content, @status, @reason, @created_at, @updated_at)"
-    );
-    this.db.transaction(() => {
-      this.db.prepare("DELETE FROM todos WHERE session_id = ?").run(sessionId);
-      for (const t76 of todos) {
-        insertStmt.run({
-          id: t76.id,
-          session_id: sessionId,
-          content: t76.content,
-          status: t76.status,
-          reason: t76.reason || null,
-          created_at: t76.created_at,
-          updated_at: t76.updated_at
-        });
-      }
-    })();
-  }
-  close() {
-    releaseDatabase(this.path);
-  }
-};
 /**
  * @license
  * Copyright 2025 Google LLC
@@ -21028,4 +22031,4 @@ var TrackerDB = class {
  *    `--tree` 的命令帮助里，让用户自己知道 `--tree` 意味着什么。
  */
 
-export { AGENT_ROLE_DIAG_MODULE, ARTIFACT_MAX_TOTAL_BYTES, ARTIFACT_RETENTION_DEFAULTS, AgentLoop, ApprovalCache, BLOCKED_TOOLS, BudgetGuard, BudgetStore, CHECKPOINT_MAX_TOTAL_BYTES, CLAUDE_EVENT_NAMES, CLAUDE_TOOL_NAMES, CODE_MODE_LIMITS, CODE_MODE_SDK_TAG, CONFIG_KEYS, CURRENT_CONFIG_VERSION, CheckpointManager, CheckpointStore, CodeSandbox, ComplianceEngine, ContextCompressor, DEFAULT_COMPLIANCE_ACTIONS, DEFAULT_COMPLIANCE_SETTINGS, DEFAULT_GOAL_MAX_ROUNDS, DEFAULT_MAX_HOLD_CHARS, DelegateManager, EMPTY_RULES, EPOCH_DISK_LEDGER, EpochConfigSchema, FTS_TABLES, FTS_TRIGGERS, GOAL_BLOCK_CODES, GoalService, GoalStore, HEADLESS_AUDIT_CODES, HookManager, INSTRUCTION_BUDGET_CHARS, INSTRUCTION_FILES, ImageLoadError, ImportTrustStore, LAUNCHD_LABEL_PREFIX, LOCK_HEARTBEAT_MS, LOCK_STALE_MS, MARKETPLACE_FILE, MAX_AUDIT_ENTRIES, MAX_COMMAND_DEPTH, MAX_GOAL_MAX_ROUNDS, MAX_IMPORT_DEPTH, MAX_OBJECTIVE_CHARS, MAX_REASON_CHARS, MAX_RECENT_WORKSPACES, MODEL_GIVE_UP_THRESHOLD, MULTIMODAL_DEFAULTS, ManagedPolicyError, ManagedSettingsSchema, MemoryManager, MemoryReviewer, ModelFailureTracker, NOMINAL_TOTAL_BYTES, NO_REVEALED_TOOLS, PERMISSION_AUDIT_CODES, PLUGIN_LAYOUT, PLUGIN_MANIFEST_FILE, PLUGIN_NAME_PATTERN, PLUGIN_ROOT_ENV, PLUGIN_ROOT_TOKEN, POLICY_DECISIONS, PROJECT_AGENTS_SUBDIR, PROVIDER_NO_CREDENTIAL, PermissionManager, PlanModeState, PluginStore, PolicyRuleSchema, ProviderError, ProviderRouter, RECORDING_KEEP_RUNS, RECORDING_MAX_BYTES, ROLE_FRONTMATTER_SCHEMA, RUN_CODE_TOOL, RecentWorkspaces, SANDBOX_COVERS, SANDBOX_EXCLUDES, SCALAR_KEYS, SCHEDULE_DEFAULTS, SCHEDULE_DEFAULT_ALLOWLIST, SCHEDULE_ISSUE_CODES, SCHTASKS_FOLDER, SESSION_MESSAGES_READ_TOOL, SESSION_MESSAGES_SEARCH_TOOL, SESSION_QUERY_TOOLS, SESSION_SEARCH_TOOL, SESSION_TRACE_TOOL, SETTINGS_LAYER_ORDER, SETTING_WRITE_APPLY, SETTING_WRITE_KEYS, SETTING_WRITE_LAYERS, SKILL_CREATE_TOOL, SKILL_EDIT_TOOL, SKILL_PATCH_TOOL, SKILL_VIEW_TOOL, SKILL_WRITE_FILE_TOOL, SLASH_COMMANDS_DIAG_MODULE, ScheduleRecorder, ScheduleRegistrar, ScheduleStore, SessionManager, SessionQueries, SessionReferences, SettingsFileError, SettingsFileSchema, SkillLearner, SkillSystem, TOOL_SEARCH_TOOL, TaskNoticeTracker, ToolRegistry, TrackerDB, TrustManager, Workspace, acquireScheduleLock, addMarketplace, addUsage, admitArtifact, admitArtifacts, affectedPaths, artifactLaunchArgv, artifactOpenRefusal, assertLevelAllowed, blockedRoleTools, buildContextBreakdown, buildFireArgv, buildFtsMatchQuery, buildSchemaExports, buildSystemPrompt, buildTrigramMatchQuery, builtinRoles, checkEpochVersion, checkFtsHealth, checkShadowing, classifyProviderError, clearModelCache, coalesceRecording, codeModeWorkerPath, commandNameFromRelPath, compileRuleLists, compressionOptions, computeCost, computeCostMicros, countRules, createAllowAllGate, createAllowAllImportGate, createAskQuestionTool, createCodeExecTool, createDelegateTool, createDenyAllGate, createDenyAllImportGate, createGoalTool, createImportGate, createMemoryTool, createPlanModeTools, createRoleFile, createRoleScope, createRunCodeTool, createScheduleDraftTool, createSessionMessagesReadTool, createSessionMessagesSearchTool, createSessionSearchTool, createSessionSearchTools, createSessionTraceTool, createSkillViewTool, createSkillWriteTools, createTodoTool, createToolRevealState, createToolScope, createToolSearchTool, createTrustGate, currentEpochVersion, decideImport, decideTrust, defaultConfig, defaultModelOf, describeArtifactRefusal, describeBackgroundTask, describeHeadlessPolicy, describeIsolation, describeJsonError, diagnoseSchedules, discoverMarkdown, discoverModels, discoverProject, draftCommandLine, draftWidening, escapeRuleContent, estimateImageTokens, estimateRunTokens, estimateTokens, evaluateSelection, expandCommand, expandImports, explainSetting, findInstructionFiles, findProjectInstructions, findRole, formatBytes, formatSkillIndex, formatUsd, gateForTool, getCapability, getConfigIssues, getConfigOrigins, getImportGate, getTrustGate, hasPromptCaching, hasProviderCredentials, imageFromBase64, imageFromPath, imagePartTokens, importSkills, installPlugin, instructionDirs, instructionNotices, intervalSlots, inventoryTotal, isBlockCode, isCodeModeDeferred, isEmptyRules, isGoalPhase, isNonInteractive, isReadOnlySubCall, isSettingWriteLayer, isValidPluginName, isWithinWindow, isWritableSettingKey, labelSlug, layerRank, listSessionCandidates, listWorkspaceFiles, loadCommandDefinitions, loadCommandFile, loadCommands, loadConfig, loadHookSources, loadKeybindings, loadLexiconDir, loadLexiconFiles, loadPlugins, loadPolicyFiles, loadPolicyRules, loadRoleDefinitions, loadRoleDir, loadedImports, localDateString, managedSwitchNotes, mapClaudeToolName, mapEpochToolName, mapOperationType, matchPreauthorization, matchRuleLists, matchesHook, mentionsPluginRoot, mergeHeadlessPolicy, mergeRoles, mergeSchedulePatch, microsToUsd, modelListCandidates, needsAllowlist, nextFallbackModel, nextRunAt, noConfigOrigins, noManagedPolicy, noPlugins, openArtifact, originOf, parseClaudeSettingsHooks, parseClock, parseDate, parseFrontmatter, parseHooksConfig, parseHooksConfigVerbose, parseImportLine, parseModelList, parseRoleDefinition, parseScheduleDraft, parseSkillFrontmatter, parseTrigger, pendingImageTokens, persistParts, persistToolResults, persistedUsage, previewSkillImport, pruneArtifacts, pruneRecordings, pruneSchedules, readImageSize, readMarketplaces, readPluginManifest, readPluginRecords, readProviderKeyEnv, readRecording, readSessionSurface, reclaimFtsSpace, redactLine, refreshOpenRouterMetadata, removeMarketplace, removeSessionArtifacts, renderImportTree, renderProjectContext, renderSdkDeclaration, repairSchedules, resolveArtifactRetention, resolveCodeModeWorker, resolveComplianceDirs, resolveEntrySource, resolveInWorkspace, resolveMarketplaceRef, resolveMentions, resolveMultimodalPolicy, resolvePolicyDirs, resolveProjectRoot, resolveScheduleBackend, resolveSessionReference, resolveSessionVisibility, resolveSettings, resolveSkillDirs, resolveSource, resolveWorkspace, restoreParts, revealScopedProvider, roleScopedProvider, roleSourceLabel, ruleCovers, ruleFromString, ruleToString, runCode, runCommand2 as runCommand, sanitizeArgNames, sanitizeCommand, sanitizeFtsQuery, sanitizePath, sanitizeToolOutput, scanInstructions, scanPluginDir, scanSkillDirs, searchMarketplaces, setImportGate, setPluginEnabled, setTrustGate, settingValueChoices, settingValueKind, settingWriteLayers, settingWriteTargets, skillIndexDescription, skillIndexResidency, skillIndexStats, sniffMediaType, splitFrontmatter, staticToolProvider, stripArtifactData, substitutePluginRoot, suggestRuleFromApproval, systemOpenArgv, systemPromptSegments, toPosix, toolDefinitionTokens, toolMatches, toolTableTokens, totalTokens, traceSession, triggerPeriodMs, unescapeRuleContent, uninstallPlugin, unknownRoleSkills, unknownRoleTools, unloadedInstructionFiles, updateMarketplace, updatePlugin, usdToMicros, validateSchedule, validateTrigger, validateWindow, withGoalCompression, withGoalPrompt, workspaceDisplayPath, writeSettingValue };
+export { AGENT_ROLE_DIAG_MODULE, ARTIFACT_MAX_TOTAL_BYTES, ARTIFACT_RETENTION_DEFAULTS, AgentLoop, ApprovalCache, BLOCKED_TOOLS, BudgetGuard, BudgetStore, CHECKPOINT_MAX_TOTAL_BYTES, CLAUDE_EVENT_NAMES, CLAUDE_TOOL_NAMES, CODE_MODE_LIMITS, CODE_MODE_SDK_TAG, CONFIG_KEYS, CURRENT_CONFIG_VERSION, CheckpointManager, CheckpointStore, CodeSandbox, ComplianceEngine, ContextCompressor, DEFAULT_COMPLIANCE_ACTIONS, DEFAULT_COMPLIANCE_SETTINGS, DEFAULT_COMPRESSION_THRESHOLD, DEFAULT_GOAL_MAX_ROUNDS, DEFAULT_MAX_HOLD_CHARS, DelegateManager, EMPTY_RULES, EPOCH_DISK_LEDGER, EpochConfigSchema, FTS_TABLES, FTS_TRIGGERS, GOAL_BLOCK_CODES, GoalService, GoalStore, HEADLESS_AUDIT_CODES, HookManager, INSTRUCTION_BUDGET_CHARS, INSTRUCTION_FILES, ImageLoadError, ImportTrustStore, LAUNCHD_LABEL_PREFIX, LOCK_HEARTBEAT_MS, LOCK_STALE_MS, MARKETPLACE_DISPLAY_FIELDS, MARKETPLACE_FILE, MAX_AUDIT_ENTRIES, MAX_COMMAND_DEPTH, MAX_GOAL_MAX_ROUNDS, MAX_IMPORT_DEPTH, MAX_OBJECTIVE_CHARS, MAX_REASON_CHARS, MAX_RECENT_WORKSPACES, MODEL_GIVE_UP_THRESHOLD, MULTIMODAL_DEFAULTS, ManagedPolicyError, ManagedSettingsSchema, MemoryManager, MemoryReviewer, ModelFailureTracker, NOMINAL_TOTAL_BYTES, NO_REVEALED_TOOLS, PACK_EXCLUDES, PACK_MAX_BYTES, PACK_MAX_FILES, PERMISSION_AUDIT_CODES, PLUGIN_LAYOUT, PLUGIN_MANIFEST_FILE, PLUGIN_NAME_PATTERN, PLUGIN_ROOT_ENV, PLUGIN_ROOT_TOKEN, POLICY_DECISIONS, PROJECT_AGENTS_SUBDIR, PROVIDER_NO_CREDENTIAL, PermissionManager, PlanModeState, PluginAuthorSchema, PluginStore, PolicyRuleSchema, ProviderError, ProviderRouter, RECORDING_KEEP_RUNS, RECORDING_MAX_BYTES, ROLE_FRONTMATTER_SCHEMA, RUN_CODE_TOOL, RecentWorkspaces, SANDBOX_COVERS, SANDBOX_EXCLUDES, SCALAR_KEYS, SCHEDULE_DEFAULTS, SCHEDULE_DEFAULT_ALLOWLIST, SCHEDULE_ISSUE_CODES, SCHTASKS_FOLDER, SESSION_MESSAGES_READ_TOOL, SESSION_MESSAGES_SEARCH_TOOL, SESSION_QUERY_TOOLS, SESSION_SEARCH_TOOL, SESSION_TRACE_TOOL, SETTINGS_LAYER_ORDER, SETTING_WRITE_APPLY, SETTING_WRITE_KEYS, SETTING_WRITE_LAYERS, SKILL_CREATE_TOOL, SKILL_EDIT_TOOL, SKILL_PATCH_TOOL, SKILL_VIEW_TOOL, SKILL_WRITE_FILE_TOOL, SLASH_COMMANDS_DIAG_MODULE, ScheduleRecorder, ScheduleRegistrar, ScheduleStore, SessionManager, SessionQueries, SessionReferences, SettingsFileError, SettingsFileSchema, SkillLearner, SkillSystem, TOOL_SEARCH_TOOL, TaskNoticeTracker, ToolRegistry, TrackerDB, TrustManager, Workspace, acquireScheduleLock, addMarketplace, addUsage, admitArtifact, admitArtifacts, affectedPaths, artifactLaunchArgv, artifactOpenRefusal, assertLevelAllowed, blockedRoleTools, buildContextBreakdown, buildFireArgv, buildFtsMatchQuery, buildSchemaExports, buildSystemPrompt, buildTrigramMatchQuery, builtinRoles, checkEpochVersion, checkFtsHealth, checkShadowing, classifyProviderError, clearModelCache, coalesceRecording, codeModeWorkerPath, commandNameFromRelPath, compileRuleLists, compressionOptions, computeCost, computeCostMicros, countRules, createAllowAllGate, createAllowAllImportGate, createAskQuestionTool, createCodeExecTool, createDelegateTool, createDenyAllGate, createDenyAllImportGate, createGoalTool, createImportGate, createMemoryTool, createPlanModeTools, createRoleFile, createRoleScope, createRunCodeTool, createScheduleDraftTool, createSessionMessagesReadTool, createSessionMessagesSearchTool, createSessionSearchTool, createSessionSearchTools, createSessionTraceTool, createSkillViewTool, createSkillWriteTools, createTodoTool, createToolRevealState, createToolScope, createToolSearchTool, createTrustGate, currentEpochVersion, decideImport, decideTrust, defaultConfig, defaultModelOf, describeArtifactRefusal, describeBackgroundTask, describeHeadlessPolicy, describeIsolation, describeJsonError, diagnoseSchedules, discoverMarkdown, discoverModels, discoverProject, draftCommandLine, draftWidening, escapeRuleContent, estimateImageTokens, estimateRunTokens, estimateTokens, evaluateSelection, expandCommand, expandImports, explainSetting, extractArchive, findInstructionFiles, findProjectInstructions, findRole, formatBytes, formatSkillIndex, formatUsd, gateForTool, getCapability, getConfigIssues, getConfigOrigins, getImportGate, getTrustGate, hasPromptCaching, hasProviderCredentials, imageFromBase64, imageFromPath, imagePartTokens, importSkills, installPlugin, instructionDirs, instructionNotices, intervalSlots, inventoryTotal, isBlockCode, isCodeModeDeferred, isEmptyRules, isGoalPhase, isNonInteractive, isReadOnlySubCall, isSettingWriteLayer, isValidPluginName, isWithinWindow, isWritableSettingKey, labelSlug, layerRank, listSessionCandidates, listWorkspaceFiles, loadCommandDefinitions, loadCommandFile, loadCommands, loadConfig, loadHookSources, loadKeybindings, loadLexiconDir, loadLexiconFiles, loadPlugins, loadPolicyFiles, loadPolicyRules, loadRoleDefinitions, loadRoleDir, loadedImports, localDateString, managedSwitchNotes, mapClaudeToolName, mapEpochToolName, mapOperationType, matchPreauthorization, matchRuleLists, matchesHook, mentionsPluginRoot, mergeHeadlessPolicy, mergeRoles, mergeSchedulePatch, microsToUsd, modelListCandidates, needsAllowlist, nextFallbackModel, nextRunAt, noConfigOrigins, noManagedPolicy, noPlugins, openArtifact, originOf, packFileName, packPlugin, parseClaudeSettingsHooks, parseClock, parseDate, parseFrontmatter, parseHooksConfig, parseHooksConfigVerbose, parseImportLine, parseModelList, parseRoleDefinition, parseScheduleDraft, parseSkillFrontmatter, parseTrigger, pendingImageTokens, persistParts, persistToolResults, persistedUsage, planPack, previewSkillImport, projectEntryForDisplay, pruneArtifacts, pruneRecordings, pruneSchedules, readImageSize, readMarketplaces, readPluginManifest, readPluginRecords, readProviderKeyEnv, readRecording, readSessionSurface, reclaimFtsSpace, redactLine, refreshOpenRouterMetadata, removeMarketplace, removeSessionArtifacts, renderImportTree, renderProjectContext, renderSdkDeclaration, repairSchedules, resolveArtifactRetention, resolveCodeModeWorker, resolveComplianceDirs, resolveEntrySource, resolveInWorkspace, resolveMarketplaceRef, resolveMentions, resolveMultimodalPolicy, resolvePolicyDirs, resolveProjectRoot, resolveScheduleBackend, resolveSessionReference, resolveSessionVisibility, resolveSettings, resolveSkillDirs, resolveSource, resolveTar, resolveWorkspace, restoreParts, revealScopedProvider, roleScopedProvider, roleSourceLabel, ruleCovers, ruleFromString, ruleToString, runCode, runCommand2 as runCommand, sanitizeArgNames, sanitizeCommand, sanitizeFtsQuery, sanitizePath, sanitizeToolOutput, scanInstructions, scanPluginDir, scanSkillDirs, searchMarketplaces, setImportGate, setPluginEnabled, setTrustGate, settingValueChoices, settingValueKind, settingWriteLayers, settingWriteTargets, skillIndexDescription, skillIndexResidency, skillIndexStats, sniffMediaType, splitFrontmatter, staticToolProvider, stripArtifactData, substitutePluginRoot, suggestRuleFromApproval, systemOpenArgv, systemPromptSegments, toPosix, toolDefinitionTokens, toolMatches, toolTableTokens, totalTokens, traceSession, triggerPeriodMs, unescapeRuleContent, uninstallPlugin, unknownRoleSkills, unknownRoleTools, unloadedInstructionFiles, updateMarketplace, updatePlugin, usdToMicros, validateSchedule, validateTrigger, validateWindow, withGoalCompression, withGoalPrompt, workspaceDisplayPath, writeSettingValue };