@epoch-agent/core 1.1.0 → 2.0.0

package/dist/index.js

@@ -1,10 +1,10 @@
-import { PROVIDER_TYPES, OPERATION_TYPES as OPERATION_TYPES$1, COMPLIANCE_CATEGORIES, COMPLIANCE_ACTIONS, SEARCH_PROVIDER_TYPES, CURRENCIES, LANGS, isSettingsPaneId, SETTINGS_PANE_IDS, BRAND_WHEN_SIDEBAR_COLLAPSED, PERMISSION_LEVELS, SHELL_KINDS, cronTimes, SCHEDULE_MAX_TIMES_PER_DAY, SCHEDULE_INTERVAL_MIN_MINUTES, SCHEDULE_INTERVAL_MAX_MINUTES, ToolExposure, MAX_OPTIONS, MIN_OPTIONS, MAX_HEADER_CHARS, MAX_QUESTIONS, isPermissionLevel, SCHEDULE_DRAFT_TOOL, isValidAgentRoleName, DEFAULT_AGENT_ROLE, isValidCommandName, RESERVED_COMMAND_NAMES, parseModelRef, isWirePluginArchiveName, systemNote, formatMoney, totalUsageTokens, NOOP_TELEMETRY, METRIC, contentToText, GEN_AI, isPromptOversize, promptTokens, apiKeyEnvVar, PROVIDER_INFOS, isProviderType, API_KEY_ENV_VARS, KEY_ACTIONS, tableOf, perAction, isKeyAction, parseSequence, RESERVED_CHORDS, chordId, sequenceId, ACTION_CONTEXTS, SEQUENCE_CONTEXTS, assertNeverPart, MAX_ATTACH_FILES, MAX_ATTACH_TOTAL_BYTES, MAX_SESSION_REFS, utf8ByteLength, truncateToBudget, attachSessionSurface, isContextNearlyFull, isOperationType, normalizeApproval, imagePartOmittedSummary, MAX_ATTACH_BYTES, SIMULTANEOUS_CONTEXTS, SESSION_REFERENCE_ERROR_CODES, filePartSummary, sessionPartSummary } from '@epoch-agent/protocol';
+import { REASONING_EFFORTS, MODEL_ENTRY_PROTOCOLS, PROVIDER_TYPES, isModelEntryId, parseModelRef, OPERATION_TYPES as OPERATION_TYPES$1, COMPLIANCE_CATEGORIES, COMPLIANCE_ACTIONS, SEARCH_PROVIDER_TYPES, CURRENCIES, LANGS, isSettingsPaneId, SETTINGS_PANE_IDS, BRAND_WHEN_SIDEBAR_COLLAPSED, PERMISSION_LEVELS, SHELL_KINDS, cronTimes, SCHEDULE_MAX_TIMES_PER_DAY, SCHEDULE_INTERVAL_MIN_MINUTES, SCHEDULE_INTERVAL_MAX_MINUTES, ToolExposure, MIN_OPTIONS, MAX_OPTIONS, MAX_HEADER_CHARS, MAX_QUESTIONS, isPermissionLevel, SCHEDULE_DRAFT_TOOL, isValidAgentRoleName, DEFAULT_AGENT_ROLE, isValidCommandName, RESERVED_COMMAND_NAMES, isWirePluginArchiveName, systemNote, formatMoney, totalUsageTokens, NOOP_TELEMETRY, METRIC, contentToText, GEN_AI, isPromptOversize, promptTokens, entrySecretName, isEntrySecretName, entryRef, KEY_ACTIONS, tableOf, perAction, isKeyAction, parseSequence, RESERVED_CHORDS, chordId, sequenceId, ACTION_CONTEXTS, SEQUENCE_CONTEXTS, assertNeverPart, MAX_ATTACH_FILES, MAX_ATTACH_TOTAL_BYTES, MAX_SESSION_REFS, utf8ByteLength, truncateToBudget, attachSessionSurface, isContextNearlyFull, isOperationType, normalizeApproval, imagePartOmittedSummary, ENTRY_REF_PREFIX, MAX_ATTACH_BYTES, SIMULTANEOUS_CONTEXTS, SESSION_REFERENCE_ERROR_CODES, filePartSummary, sessionPartSummary } from '@epoch-agent/protocol';
 export { API_KEY_ENV_VARS, COMPLIANCE_ACTIONS, COMPLIANCE_CATEGORIES, MAX_ATTACH_BYTES, MAX_ATTACH_FILES, MAX_ATTACH_TOTAL_BYTES, MAX_SESSION_ATTACH_BYTES, MAX_SESSION_REFS, OPERATION_TYPES, PERMISSION_LEVELS, PLAN_OUTCOMES, PROVIDER_INFOS, PROVIDER_TYPES, ToolExposure, apiKeyEnvVar, extractAllMentions, extractMentions, extractSessionMentions, getProviderInfo, isOperationType, isPermissionLevel, isPlanOutcome, isProviderType, normalizeApproval } from '@epoch-agent/protocol';
 import { existsSync, statSync, readdirSync, readFileSync, mkdirSync, writeFileSync, rmSync, renameSync, realpathSync, symlinkSync, cpSync, lstatSync, unlinkSync, rmdirSync, mkdtempSync, copyFileSync, openSync, writeSync, closeSync, readSync } from 'fs';
 import { homedir, platform, tmpdir, hostname } from 'os';
 import { join, dirname, resolve, relative, isAbsolute, extname, sep, basename } from 'path';
 import { execFile, execSync, execFileSync, spawn } from 'child_process';
-import { createLogger, dbPath, resolveHomeDir, DEFAULT_MAX_TURNS, PROJECT_DIR_NAME, guardSpawn, t, suggestKey, misspelledKeyIssues, openDatabase, migrate, releaseDatabase, parseLenient, issueDetails, splitWords, unknownKeyIssues, checkpointsDir, expandPath, pluginsDir, projectHooksPath, projectClaudeSettingsPath, projectClaudeLocalSettingsPath, projectSettingsPath, projectLocalSettingsPath, projectPoliciesDir, trustedImportsPath, canProbeGit, budgetStatePath, artifactsDir, isInWorkspace, UNLIMITED_TURNS, turnLimitOf, configPath, managedSettingsPath, getSecretValues, listStoredSecretNames, maskApiKey, setSectionField, countCodePoints, headCodePoints, attachmentsDir, workspacesPath, samePath, lastSessionsPath, appearancePath, automationLogsDir, projectComplianceDir, projectSkillsDir, trustPath, projectCommandsDir, detectBackend, EXEC_PATH_AS_NODE_ENV, isolate, createStreamDecoder, parseShellCommand, writeArtifact, envPath, checkDangerousCommand, checkObfuscation, keepHeadAndTail, normalizeForMatch, isReadOnlyCommand, CODE_EXEC_ROOTS, tailCodePoints } from '@epoch-agent/infra';
+import { createLogger, dbPath, resolveHomeDir, DEFAULT_MAX_TURNS, PROJECT_DIR_NAME, guardSpawn, t, suggestKey, misspelledKeyIssues, openDatabase, migrate, releaseDatabase, parseLenient, issueDetails, splitWords, unknownKeyIssues, checkpointsDir, expandPath, pluginsDir, projectHooksPath, projectClaudeSettingsPath, projectClaudeLocalSettingsPath, projectSettingsPath, projectLocalSettingsPath, projectPoliciesDir, trustedImportsPath, canProbeGit, budgetStatePath, artifactsDir, isInWorkspace, UNLIMITED_TURNS, turnLimitOf, configPath, managedSettingsPath, listStoredSecretNames, maskApiKey, unsetSectionField, setSectionField, countCodePoints, headCodePoints, attachmentsDir, workspacesPath, samePath, lastSessionsPath, appearancePath, automationLogsDir, projectComplianceDir, projectSkillsDir, trustPath, projectCommandsDir, detectBackend, EXEC_PATH_AS_NODE_ENV, isolate, createStreamDecoder, parseShellCommand, writeArtifact, getSecretValues, envPath, checkDangerousCommand, checkObfuscation, keepHeadAndTail, normalizeForMatch, isReadOnlyCommand, CODE_EXEC_ROOTS, tailCodePoints } from '@epoch-agent/infra';
 export { IS_WINDOWS, WINDOWS_HIDE_FLAGS, buildBwrapArgs, buildProfile, checkDangerousCommand, checkObfuscation, createLogger, detectBackend, getDefaultShell, getPythonCommand, isInWorkspace, isReadOnlyCommand, isolate, maskApiKey, probeBubblewrap, probeSeatbelt, complianceDir as resolveComplianceDir, policiesDir as resolvePoliciesDir, setLogLevel } from '@epoch-agent/infra';
 import { createRequire } from 'module';
 import { randomUUID, createHash, randomBytes } from 'crypto';
@@ -87,9 +87,9 @@ function isValidInterval(everyMinutes) {
 function normalizeTrigger(trigger) {
   if (trigger.kind !== "cron") return trigger;
   const [at = trigger.at, ...rest] = cronTimes(trigger);
-  const base = { ...trigger };
-  delete base.alsoAt;
-  return rest.length > 0 ? { ...base, at, alsoAt: rest } : { ...base, at };
+  const base2 = { ...trigger };
+  delete base2.alsoAt;
+  return rest.length > 0 ? { ...base2, at, alsoAt: rest } : { ...base2, at };
 }
 function validateWindow(trigger, startDate, endDate) {
   const issues = [];
@@ -421,21 +421,21 @@ function triggerShape(tag, body2) {
   const start = tagText(body2, "StartBoundary");
   const time = /T(\d{2}:\d{2})/.exec(start)?.[1] ?? "";
   const date = /^(\d{4}-\d{2}-\d{2})/.exec(start)?.[1] ?? "";
-  const base = { time, date, days: "", everyMinutes: 0 };
+  const base2 = { time, date, days: "", everyMinutes: 0 };
   const interval = tagText(body2, "Interval");
-  if (interval) return { ...base, kind: "EVERY", everyMinutes: isoDurationMinutes(interval) };
-  if (/<ScheduleByDay>/i.test(body2)) return { ...base, kind: "DAILY" };
+  if (interval) return { ...base2, kind: "EVERY", everyMinutes: isoDurationMinutes(interval) };
+  if (/<ScheduleByDay>/i.test(body2)) return { ...base2, kind: "DAILY" };
   if (/<ScheduleByWeek>/i.test(body2)) {
     const days = WEEKDAY_NAMES.flatMap(
       (name, idx) => new RegExp(`<${name}\\s*/>`, "i").test(body2) ? [WEEKDAY_CODES[idx]] : []
     );
-    return { ...base, kind: "WEEKLY", days: days.join(",") };
+    return { ...base2, kind: "WEEKLY", days: days.join(",") };
   }
   if (/<ScheduleByMonth>/i.test(body2)) {
     const days = [...body2.matchAll(/<Day>\s*(\d+)\s*<\/Day>/gi)].map((m) => Number(m[1]));
-    return { ...base, kind: "MONTHLY", days: days.sort((a, b) => a - b).join(",") };
+    return { ...base2, kind: "MONTHLY", days: days.sort((a, b) => a - b).join(",") };
   }
-  return { ...base, kind: /^TimeTrigger$/i.test(tag) && date ? "ONCE" : "" };
+  return { ...base2, kind: /^TimeTrigger$/i.test(tag) && date ? "ONCE" : "" };
 }
 function cronSpec(kind, times, days) {
   const at = times.join(",");
@@ -903,11 +903,11 @@ var NO_REVEALED_TOOLS = {
   isRevealed: () => false,
   names: () => []
 };
-function revealScopedProvider(base, deferred, reveal) {
+function revealScopedProvider(base2, deferred, reveal) {
   const revealed = () => deferred().filter((tool) => reveal.isRevealed(tool.name));
   return {
-    list: () => [...base.list(), ...revealed()],
-    get: (name) => base.get(name) ?? revealed().find((tool) => tool.name === name)
+    list: () => [...base2.list(), ...revealed()],
+    get: (name) => base2.get(name) ?? revealed().find((tool) => tool.name === name)
   };
 }
 // src/tools/registry.ts
@@ -1158,6 +1158,14 @@ function parsePage(raw) {
   const label = typeof raw["label"] === "string" ? raw["label"].trim() : "";
   return label ? { url: rawUrl, label } : { url: rawUrl };
 }
+function checkOptionCount(count, at, page, rawPage) {
+  if (count === 0 && page) return void 0;
+  if (count === 0 && rawPage !== void 0 && rawPage !== null) {
+    return `questions[${at}] \u7684 page \u6CA1\u88AB\u6536\u4E0B\uFF08url \u53EA\u6536\u672C\u673A\u56DE\u73AF http(s)://127.0.0.1 \u6216 localhost\uFF09\uFF0C\u800C\u8FD9\u4E00\u95EE\u6CA1\u6709\u9009\u9879\u3002\u8981\u4E48\u628A url \u6539\u5BF9\uFF0C\u8981\u4E48\u7ED9 ${MIN_OPTIONS}\u2013${MAX_OPTIONS} \u4E2A\u9009\u9879`;
+  }
+  if (count >= MIN_OPTIONS && count <= MAX_OPTIONS) return void 0;
+  return `questions[${at}] \u6709 ${count} \u4E2A\u9009\u9879\uFF0C\u8981 ${MIN_OPTIONS}\u2013${MAX_OPTIONS} \u4E2A\uFF08\u53EA\u6709\u5E26 page \u7684\u90A3\u4E00\u95EE\u53EF\u4EE5\u4E00\u4E2A\u90FD\u4E0D\u7ED9\uFF09\u3002**\u4E0D\u8981**\u81EA\u5DF1\u52A0\u300C\u5176\u4ED6\u300D\u9009\u9879 \u2014\u2014 \u81EA\u7531\u8F93\u5165\u7531\u754C\u9762\u81EA\u52A8\u63D0\u4F9B`;
+}
 function parseQuestion(raw, at) {
   if (!isRecord(raw)) return `questions[${at}] \u4E0D\u662F\u5BF9\u8C61`;
   const question = typeof raw["question"] === "string" ? raw["question"].trim() : "";
@@ -1167,15 +1175,14 @@ function parseQuestion(raw, at) {
   if (header.length > MAX_HEADER_CHARS) {
     return `questions[${at}] \u7684 header \u6709 ${header.length} \u5B57\uFF0C\u8D85\u8FC7 ${MAX_HEADER_CHARS} \u4E0A\u9650`;
   }
-  const rawOptions = raw["options"];
+  const page = parsePage(raw["page"]);
+  const rawOptions = raw["options"] ?? (page ? [] : void 0);
   if (!Array.isArray(rawOptions)) return `questions[${at}] \u7684 options \u4E0D\u662F\u6570\u7EC4`;
   const options = rawOptions.map(parseOption);
   const badAt = options.indexOf(null);
   if (badAt >= 0) return `questions[${at}].options[${badAt}] \u7F3A label`;
-  if (options.length < MIN_OPTIONS || options.length > MAX_OPTIONS) {
-    return `questions[${at}] \u6709 ${options.length} \u4E2A\u9009\u9879\uFF0C\u8981 ${MIN_OPTIONS}\u2013${MAX_OPTIONS} \u4E2A\u3002**\u4E0D\u8981**\u81EA\u5DF1\u52A0\u300C\u5176\u4ED6\u300D\u9009\u9879 \u2014\u2014 \u81EA\u7531\u8F93\u5165\u7531\u754C\u9762\u81EA\u52A8\u63D0\u4F9B`;
-  }
-  const page = parsePage(raw["page"]);
+  const optionError = checkOptionCount(options.length, at, page, raw["page"]);
+  if (optionError !== void 0) return optionError;
   return {
     question,
     header,
@@ -1244,9 +1251,8 @@ var PARAMETERS = {
           },
           options: {
             type: "array",
-            minItems: MIN_OPTIONS,
             maxItems: MAX_OPTIONS,
-            description: "\u4E0D\u8981\u81EA\u5DF1\u52A0\u300C\u5176\u4ED6\u300D\u2014\u2014 \u754C\u9762\u4F1A\u81EA\u52A8\u63D0\u4F9B\u81EA\u7531\u8F93\u5165",
+            description: `${MIN_OPTIONS}\u2013${MAX_OPTIONS} \u4E2A\uFF1B\u5E26 page \u65F6\u53EF\u4EE5\u4E0D\u7ED9\u3002\u4E0D\u8981\u81EA\u5DF1\u52A0\u300C\u5176\u4ED6\u300D\u2014\u2014 \u754C\u9762\u4F1A\u81EA\u52A8\u63D0\u4F9B\u81EA\u7531\u8F93\u5165`,
             items: {
               type: "object",
               properties: {
@@ -1270,7 +1276,7 @@ var PARAMETERS = {
             required: ["url"]
           }
         },
-        required: ["question", "header", "options", "multiSelect"]
+        required: ["question", "header", "multiSelect"]
       }
     }
   },
@@ -1286,7 +1292,7 @@ var DESCRIPTION = [
   "\u9009\u9879\u91CC**\u4E0D\u8981**\u81EA\u5DF1\u653E\u300C\u5176\u4ED6\u300D\uFF1A\u754C\u9762\u4F1A\u81EA\u52A8\u63D0\u4F9B\u81EA\u7531\u8F93\u5165\u3002",
   "\u26A0\uFE0F \u63D2\u4EF6\u7684\u5DE5\u5177\u7ED9\u4E86\u4F60\u4E00\u4E2A**\u672C\u673A\u5730\u5740**\u3001\u800C\u90A3\u4E2A\u9009\u62E9\u7528\u51E0\u4E2A\u9009\u9879\u8BF4\u4E0D\u6E05\u65F6\uFF08\u51E0\u5341\u5F20\u56FE\u91CC\u6311\u4E00\u5F20\u3001",
   "\u4E00\u5F20\u8868\u91CC\u5708\u51E0\u884C\uFF09\uFF0C\u628A\u5730\u5740\u653E\u8FDB `questions[].page` \u2014\u2014 \u7528\u6237\u4F1A\u5728\u5F39\u7A97\u91CC\u76F4\u63A5\u770B\u5230\u90A3\u4E00\u9875\u3002",
-  "\u5B83**\u9644\u52A0\u5728\u9009\u9879\u4E4B\u5916**\uFF0C\u9009\u9879\u7167\u65E7\u8981\u7ED9\uFF1A\u7EC8\u7AEF\u91CC\u753B\u4E0D\u51FA\u9875\u9762\uFF0C\u90A3\u65F6\u7528\u6237\u770B\u5230\u7684\u53EA\u6709\u4F60\u5199\u7684\u9009\u9879\u3002"
+  "\u5E26\u4E86 page \u7684\u90A3\u4E00\u95EE\uFF0C`options` \u53EF\u4EE5\u4E0D\u7ED9\u3002"
 ].join("");
 function createAskQuestionTool(deps) {
   return {
@@ -1314,7 +1320,9 @@ function createAskQuestionTool(deps) {
             "**\u6309\u4F60\u81EA\u5DF1\u7684\u5224\u65AD\u6311\u6700\u5408\u7406\u7684\u9ED8\u8BA4\u7EE7\u7EED\u505A**\uFF0C\u5E76\u5728\u56DE\u7B54\u91CC\u8BF4\u660E\u4F60\u9009\u4E86\u4EC0\u4E48\u3001\u4E3A\u4EC0\u4E48\u3002",
             "\u4F60\u672C\u6765\u60F3\u95EE\u7684\u662F\uFF1A",
             ...parsed.questions.map(
-              (q) => `- ${q.question}\uFF08${q.options.map((o) => o.label).join(" / ")}\uFF09`
+              (q) => (
+                `- ${q.question}\uFF08${q.options.length > 0 ? q.options.map((o) => o.label).join(" / ") : q.page?.url}\uFF09`
+              )
             ),
             "",
             "\u4E0B\u6B21\u9047\u5230\u540C\u7C7B\u5206\u53C9\uFF0C\u628A\u9700\u8981\u7684\u4FE1\u606F\u5199\u8FDB\u63D0\u793A\u8BCD\u4F1A\u66F4\u7701\u4E00\u8F6E\u3002"
@@ -2441,22 +2449,22 @@ function timeoutMessage(timeoutMs, toolCalls) {
   return timeoutNotice(Math.round(timeoutMs / 1e3), toolCalls);
 }
 function toOutcome(ending, ctx) {
-  const base = { value: "", printed: ctx.printed, toolCalls: ctx.toolCalls };
+  const base2 = { value: "", printed: ctx.printed, toolCalls: ctx.toolCalls };
   if (ctx.capped) {
     return {
-      ...base,
+      ...base2,
       ok: false,
       error: { kind: "cap", message: capNotice(ctx.limits.maxToolCalls) }
     };
   }
   if (!ending) {
-    return { ...base, ok: false, error: { kind: "throw", message: noResultNotice() } };
+    return { ...base2, ok: false, error: { kind: "throw", message: noResultNotice() } };
   }
-  if (ending.kind === "done") return { ...base, ok: true, value: ending.value };
+  if (ending.kind === "done") return { ...base2, ok: true, value: ending.value };
   if (ending.kind === "failed") {
-    return { ...base, ok: false, error: { kind: "throw", message: ending.message } };
+    return { ...base2, ok: false, error: { kind: "throw", message: ending.message } };
   }
-  return { ...base, ok: false, error: { kind: ending.kind, message: ending.message } };
+  return { ...base2, ok: false, error: { kind: ending.kind, message: ending.message } };
 }
 // src/tools/builtin/run-code.ts
 var RUN_CODE_TOOL = "run_code";
@@ -2940,9 +2948,9 @@ function parseScheduleDraft(raw) {
 }
 function draftWidening(draft, current) {
   const out = [];
-  const base = draft.action === "update" && current ? current.permission === "bypass" ? "auto" : current.permission : "default";
+  const base2 = draft.action === "update" && current ? current.permission === "bypass" ? "auto" : current.permission : "default";
   const level = draft.permission;
-  if (level !== void 0 && PERMISSION_ORDER.indexOf(level) > PERMISSION_ORDER.indexOf(base)) {
+  if (level !== void 0 && PERMISSION_ORDER.indexOf(level) > PERMISSION_ORDER.indexOf(base2)) {
     out.push("permission");
   }
   const has = (list, x) => list?.includes(x) ?? false;
@@ -3195,18 +3203,18 @@ function contentMatchesCommand(content, text) {
 }
 function resolvePathPattern(content, workDir) {
   let raw = content;
-  let base = workDir;
+  let base2 = workDir;
   if (raw.startsWith("//")) {
     raw = raw.slice(1);
-    base = "";
+    base2 = "";
   } else if (raw.startsWith("~/")) {
     raw = raw.slice(2);
-    base = homedir();
+    base2 = homedir();
   }
   const wildcardAt = raw.search(/[*?]/);
   const head = wildcardAt === -1 ? raw : raw.slice(0, wildcardAt);
   const tail = wildcardAt === -1 ? "" : raw.slice(wildcardAt);
-  const resolvedHead = base === "" && isAbsolute(head) ? resolve(head) : resolve(base || ".", head);
+  const resolvedHead = base2 === "" && isAbsolute(head) ? resolve(head) : resolve(base2 || ".", head);
   const sep8 = head.endsWith("/") || head.endsWith("\\") ? "/" : "";
   return `${resolvedHead}${sep8}${tail}`;
 }
@@ -3807,10 +3815,10 @@ function belowTrigramFloor(safeQuery) {
 // src/session/trace.ts
 var NODE_COLUMNS = `id, title, cwd, started_at, message_count, archived, parent_id`;
 function toNode(ctx, row, depth) {
-  const base = { sessionId: row.id, depth, parentId: row.parent_id ?? void 0 };
-  if (!ctx.visible(row.id)) return { ...base, visible: false };
+  const base2 = { sessionId: row.id, depth, parentId: row.parent_id ?? void 0 };
+  if (!ctx.visible(row.id)) return { ...base2, visible: false };
   return {
-    ...base,
+    ...base2,
     visible: true,
     title: row.title,
     cwd: row.cwd ?? void 0,
@@ -3970,11 +3978,11 @@ var SessionQueries = class {
     const meta = this.db.prepare(`SELECT s.title FROM sessions s WHERE s.id = @sid AND ${vis.clause}`).get({ ...vis.params, sid: input.sessionId });
     if (!meta) return { authorized: false, title: "", before: [], after: [], total: 0 };
     const total = this.db.prepare(`SELECT count(*) AS n FROM messages WHERE session_id = @sid`).get({ sid: input.sessionId }).n;
-    const base = { authorized: true, title: meta.title, total };
+    const base2 = { authorized: true, title: meta.title, total };
     const anchor = this.recordRow(input.sessionId, input.messageId);
-    if (!anchor) return { ...base, before: [], after: [] };
+    if (!anchor) return { ...base2, before: [], after: [] };
     return {
-      ...base,
+      ...base2,
       anchor: toRecord(anchor),
       before: this.neighbourRows(input.sessionId, input.messageId, "before", input.before).reverse().map(toRecord),
       after: this.neighbourRows(input.sessionId, input.messageId, "after", input.after).map(
@@ -5693,11 +5701,11 @@ function pushNarrowed(notices, kind, incoming, wanted, kept) {
     cut: wanted.filter((n) => !keptSet.has(n))
   });
 }
-function intersectNames(base, incoming) {
-  if (!base && !incoming) return void 0;
-  if (!base) return incoming ? [...incoming] : void 0;
-  if (!incoming) return [...base];
-  const baseSet = new Set(base);
+function intersectNames(base2, incoming) {
+  if (!base2 && !incoming) return void 0;
+  if (!base2) return incoming ? [...incoming] : void 0;
+  if (!incoming) return [...base2];
+  const baseSet = new Set(base2);
   return incoming.filter((t81) => baseSet.has(t81));
 }
 function findRole(roles, name) {
@@ -5842,7 +5850,7 @@ function describe2(err, path, lang) {
   return t("role_write.remove_failed", { path, reason: reason9 }, lang);
 }
 // src/agent-role/scope.ts
-function roleScopedProvider(base, role, blocked) {
+function roleScopedProvider(base2, role, blocked) {
   const blockedSet = new Set(blocked);
   const allow = role?.tools ? new Set(role.tools) : void 0;
   const permitted = (name) => {
@@ -5850,14 +5858,14 @@ function roleScopedProvider(base, role, blocked) {
     return allow ? allow.has(name) : true;
   };
   return {
-    list: () => base.list().filter((t81) => permitted(t81.name)),
-    get: (name) => permitted(name) ? base.get(name) : void 0
+    list: () => base2.list().filter((t81) => permitted(t81.name)),
+    get: (name) => permitted(name) ? base2.get(name) : void 0
   };
 }
-function createRoleScope(base, sessionRole, blocked) {
+function createRoleScope(base2, sessionRole, blocked) {
   let perMessage;
   const current = () => perMessage ?? sessionRole;
-  const scoped = () => roleScopedProvider(base, current(), blocked);
+  const scoped = () => roleScopedProvider(base2, current(), blocked);
   return {
     provider: {
       list: () => scoped().list(),
@@ -5875,9 +5883,9 @@ function createRoleScope(base, sessionRole, blocked) {
     }
   };
 }
-function unknownRoleTools(base, role, blocked) {
+function unknownRoleTools(base2, role, blocked) {
   if (!role?.tools) return [];
-  const available2 = new Set(base.list().map((t81) => t81.name));
+  const available2 = new Set(base2.list().map((t81) => t81.name));
   const blockedSet = new Set(blocked);
   return role.tools.filter((name) => !available2.has(name) && !blockedSet.has(name));
 }
@@ -5965,23 +5973,23 @@ function loadCommands(files, source, prefix) {
 }
 function loadCommandFile(file, source, prefix) {
   const at = file.relPath;
-  const base = commandNameFromRelPath(file.relPath);
-  if (!isValidCommandName(base)) {
+  const base2 = commandNameFromRelPath(file.relPath);
+  if (!isValidCommandName(base2)) {
     return {
       issues: [
         {
           path: at,
-          message: t("custom_command.bad_name", { name: base })
+          message: t("custom_command.bad_name", { name: base2 })
         }
       ]
     };
   }
-  if (!prefix && RESERVED_COMMAND_NAMES.includes(base)) {
+  if (!prefix && RESERVED_COMMAND_NAMES.includes(base2)) {
     return {
-      issues: [{ path: at, message: t("custom_command.reserved", { name: base }) }]
+      issues: [{ path: at, message: t("custom_command.reserved", { name: base2 }) }]
     };
   }
-  const name = prefix ? `${prefix}:${base}` : base;
+  const name = prefix ? `${prefix}:${base2}` : base2;
   let raw;
   try {
     raw = readFileSync(file.path, "utf8");
@@ -6209,14 +6217,14 @@ function sortByName(commands) {
   return [...commands].sort((a, b) => a.name.localeCompare(b.name));
 }
 // src/extensions/tool-scope.ts
-function createToolScope(base) {
+function createToolScope(base2) {
   let allow;
   let names;
   const permitted = (name) => allow ? allow.has(name) : true;
   return {
     provider: {
-      list: () => base.list().filter((t81) => permitted(t81.name)),
-      get: (name) => permitted(name) ? base.get(name) : void 0
+      list: () => base2.list().filter((t81) => permitted(t81.name)),
+      get: (name) => permitted(name) ? base2.get(name) : void 0
     },
     enter: (next) => {
       const prevAllow = allow;
@@ -6608,11 +6616,11 @@ function expandToken(token) {
   const tilde = token.startsWith("~");
   const body2 = caret || tilde ? token.slice(1) : token;
   if (caret || tilde) {
-    const base = parseVersion(body2);
-    if (!base) return null;
+    const base2 = parseVersion(body2);
+    if (!base2) return null;
     return [
-      { op: ">=", version: base },
-      { op: "<", version: caret ? caretUpper(base) : tildeUpper(base) }
+      { op: ">=", version: base2 },
+      { op: "<", version: caret ? caretUpper(base2) : tildeUpper(base2) }
     ];
   }
   const match = /^(>=|<=|>|<|=)?\s*(.+)$/.exec(body2);
@@ -7634,9 +7642,9 @@ function resolveEntrySource(entry, marketSource) {
   if (rel === "" || rel.split("/").includes("..")) return void 0;
   const market = marketSource.trim();
   if (market.startsWith("github:") || market.startsWith("git+")) {
-    const [base = "", fragment] = market.split("#", 2);
+    const [base2 = "", fragment] = market.split("#", 2);
     const prefix = fragment?.startsWith("subdir=") ? `${fragment.slice("subdir=".length)}/` : "";
-    return `${base}#subdir=${prefix}${rel}`;
+    return `${base2}#subdir=${prefix}${rel}`;
   }
   if (market.startsWith("https://") || market.startsWith("http://")) {
     return `${market.replace(/\/[^/]*$/, "")}/${rel}`;
@@ -9627,7 +9635,7 @@ function admitArtifact(raw, policy) {
   const dims = size ? ` ${size.width}\xD7${size.height}` : "";
   const head = raw.note ? `${raw.note} ` : "";
   const reason9 = rejectionReason(raw, policy, byteLen, size);
-  const base = {
+  const base2 = {
     kind: raw.kind,
     mediaType: raw.mediaType,
     bytes: byteLen,
@@ -9636,13 +9644,13 @@ function admitArtifact(raw, policy) {
   };
   if (reason9) {
     return {
-      ...base,
+      ...base2,
       summary: `${head}[${raw.mediaType}${dims}\uFF0C${formatBytes(byteLen)}] \u672A\u8FDB\u5165\u4E0A\u4E0B\u6587\uFF1A${reason9}${storedAt(path)}\u3002\u8BF7\u636E\u6B64\u544A\u77E5\u7528\u6237\uFF0C\u5FC5\u8981\u65F6\u8BA9\u7528\u6237\u63D0\u4F9B\u66F4\u5C0F\u7684\u56FE\u3002`
     };
   }
   const tokens = size ? estimateImageTokens(size.width, size.height) : void 0;
   return {
-    ...base,
+    ...base2,
     data: raw.base64,
     summary: `${head}[${raw.mediaType}${dims}\uFF0C${formatBytes(byteLen)}]${storedAt(path)}`,
     ...tokens === void 0 ? {} : { estimatedTokens: tokens }
@@ -10016,8 +10024,8 @@ function isReachable(real, state) {
   if (within(state.rootReal, real) || within(state.epochHomeReal, real)) return true;
   return state.allowExternal(real);
 }
-function within(base, target) {
-  const rel = relative(base, target);
+function within(base2, target) {
+  const rel = relative(base2, target);
   return !rel.startsWith("..") && !isAbsolute(rel);
 }
 function resolveSpec(spec, fromFile) {
@@ -10795,13 +10803,54 @@ function classifyProviderError(err) {
   }
   return { code: 9999, recovery: "retry" };
 }
-function toModelMessages(messages) {
-  return messages.map(toModelMessage);
+function toModelMessages(messages, opts = {}) {
+  if (opts.toolMediaInline !== false) return messages.map(toModelMessage);
+  return hoistToolMedia(messages);
+}
+function hoistToolMedia(messages) {
+  const out = [];
+  let pending = [];
+  for (const [i, m] of messages.entries()) {
+    if (m.role !== "tool") {
+      out.push(toModelMessage(m));
+      continue;
+    }
+    const results = (m.toolResults ?? []).map((r) => {
+      const inline = inlineArtifacts(r);
+      if (inline.length === 0) return r;
+      for (const artifact of inline) {
+        pending.push({ label: `${r.toolName} (${r.toolCallId})`, artifact });
+      }
+      const note = `(${inline.length} image(s) from this tool call are attached in the next message.)`;
+      return {
+        ...r,
+        output: r.output ? `${r.output}
+${note}` : note,
+        artifacts: (r.artifacts ?? []).map(({ data: _data, ...rest }) => rest)
+      };
+    });
+    out.push(toModelMessage({ ...m, toolResults: results }));
+    if (pending.length > 0 && messages[i + 1]?.role !== "tool") {
+      out.push({
+        role: "user",
+        content: [
+          { type: "text", text: "Images returned by the tool call(s) above:" },
+          ...pending.flatMap(({ label, artifact }) => [
+            { type: "text", text: label },
+            { type: "file", mediaType: artifact.mediaType, data: artifact.data }
+          ])
+        ]
+      });
+      pending = [];
+    }
+  }
+  return out;
+}
+function inlineArtifacts(r) {
+  return (r.artifacts ?? []).filter((a) => Boolean(a.data));
 }
 function toToolOutput(r) {
-  const inline = (r.artifacts ?? []).filter(
-    (a) => Boolean(a.data)
-  );
+  const inline = inlineArtifacts(r);
   if (inline.length === 0) return { type: "text", value: r.output };
   return {
     type: "content",
@@ -11570,17 +11619,25 @@ function resolveArtifactRetention(partial) {
 function measure(dir) {
   let bytes = 0;
   let mtimeMs = 0;
-  try {
-    for (const name of readdirSync(dir)) {
+  const pending = [dir];
+  while (pending.length > 0) {
+    const at = pending.pop();
+    let names;
+    try {
+      names = readdirSync(at);
+    } catch {
+      continue;
+    }
+    for (const name of names) {
       try {
-        const st = statSync(join(dir, name));
+        const st = lstatSync(join(at, name));
+        if (st.isDirectory()) pending.push(join(at, name));
         if (!st.isFile()) continue;
         bytes += st.size;
         mtimeMs = Math.max(mtimeMs, st.mtimeMs);
       } catch {
       }
     }
-  } catch {
   }
   return { path: dir, bytes, mtimeMs };
 }
@@ -11834,7 +11891,7 @@ var ToolExecutor = class {
   pruned = false;
   async execute(tc, sessionId, signal, parentSpan, onOutput, depth = 0) {
     const et = this.toolFor(tc.toolName, depth);
-    const base = { toolCallId: tc.toolCallId, toolName: tc.toolName, args: tc.input };
+    const base2 = { toolCallId: tc.toolCallId, toolName: tc.toolName, args: tc.input };
     const telemetry = this.deps.telemetry ?? NOOP_TELEMETRY;
     const startedAt = Date.now();
     const span = telemetry.startSpan(
@@ -11862,7 +11919,7 @@ var ToolExecutor = class {
     if (!et) {
       const declared = this.codeModeDeclared(tc.toolName);
       return finish({
-        ...base,
+        ...base2,
         success: false,
         output: declared ? codeModeDeclaredNotice(tc.toolName) : `\u5DE5\u5177 ${tc.toolName} \u5F53\u524D\u4E0D\u53EF\u7528\uFF08\u53EF\u80FD\u5DF2\u88AB MCP server \u64A4\u4E0B\uFF09\u3002\u8BF7\u7528\u5F53\u524D\u5DE5\u5177\u8868\u91CC\u7684\u5DE5\u5177\u91CD\u8BD5\u3002`
       });
@@ -11881,14 +11938,14 @@ var ToolExecutor = class {
       );
       if (blocked?.blocked) {
         return finish({
-          ...base,
+          ...base2,
           success: false,
           output: `\u64CD\u4F5C\u88AB hook \u963B\u6B62: ${blocked.reason || "\u672A\u77E5\u539F\u56E0"}`
         });
       }
       const gate = await this.checkPermission(et, tc.input, signal);
       if (!gate.allowed) {
-        return finish({ ...base, success: false, output: gate.output });
+        return finish({ ...base2, success: false, output: gate.output });
       }
       const targets = this.writeTargets(et, tc.input);
       const snapshotted = await this.snapshot(sessionId, targets);
@@ -11933,7 +11990,7 @@ var ToolExecutor = class {
         const artifacts = r.artifacts ? admitArtifacts(r.artifacts, this.policy(sessionId)) : [];
         const diffs = before ? await collectDiffs(before, this.deps.workDir()) : [];
         return finish({
-          ...base,
+          ...base2,
           success: true,
           output: this.renderOutput(
             et,
@@ -11944,7 +12001,7 @@ var ToolExecutor = class {
         });
       }
       return finish({
-        ...base,
+        ...base2,
         success: false,
         output: this.renderOutput(
           et,
@@ -11954,7 +12011,7 @@ var ToolExecutor = class {
     } catch (err) {
       span.recordError(err);
       return finish({
-        ...base,
+        ...base2,
         success: false,
         output: `\u5DE5\u5177\u6267\u884C\u5F02\u5E38: ${err instanceof Error ? err.message : String(err)}`
       });
@@ -12009,10 +12066,10 @@ var ToolExecutor = class {
     return text;
   }
   policy(sessionId) {
-    const base = this.deps.multimodal?.() ?? resolveMultimodalPolicy();
-    if (base.artifactsDir) return base;
-    this.pruneOnce(base.homeDir);
-    return { ...base, artifactsDir: artifactsDir(sessionId, base.homeDir) };
+    const base2 = this.deps.multimodal?.() ?? resolveMultimodalPolicy();
+    if (base2.artifactsDir) return base2;
+    this.pruneOnce(base2.homeDir);
+    return { ...base2, artifactsDir: artifactsDir(sessionId, base2.homeDir) };
   }
   pruneOnce(homeDir) {
     if (this.pruned) return;
@@ -13013,16 +13070,147 @@ function readVersion(raw, issues) {
 function isPlainObject(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
-var CredentialSchema = z.object({
-  apiKey: z.string(),
-  model: z.string().optional()
-});
-var ProviderSchema = z.object({
-  type: z.enum(PROVIDER_TYPES).default("openai"),
-  apiKey: z.string().default(""),
-  credentials: z.array(CredentialSchema).default(() => []),
-  baseUrl: z.string().optional()
+var MODEL_ENTRIES_FILE = "models.json";
+var FORMAT_VERSION = 1;
+function modelEntriesPath(homeDir) {
+  return join(homeDir, MODEL_ENTRIES_FILE);
+}
+var positiveInt = z.int().positive();
+var ModelEntrySchema = z.object({
+  id: z.string().refine(isModelEntryId, { message: "invalid id" }),
+  name: z.string().optional(),
+  provider: z.enum(PROVIDER_TYPES),
+  protocol: z.enum(MODEL_ENTRY_PROTOCOLS).optional(),
+  baseUrl: z.url({ protocol: /^https?$/ }).optional(),
+  rawUrl: z.boolean().optional(),
+  model: z.string().trim().min(1),
+  capabilities: z.object({
+    tools: z.boolean().optional(),
+    images: z.boolean().optional(),
+    reasoning: z.boolean().optional(),
+    reasoningOnly: z.boolean().optional(),
+    reasoningToggle: z.boolean().optional()
+  }).optional(),
+  reasoning: z.object({
+    levels: z.array(z.enum(REASONING_EFFORTS)),
+    default: z.enum(REASONING_EFFORTS).optional()
+  }).optional(),
+  contextLength: positiveInt.optional(),
+  maxOutputTokens: positiveInt.optional(),
+  host: z.literal(true).optional()
 });
+function normalizeModelEntry(entry) {
+  const custom = entry.provider === "openai-compatible";
+  const protocol = custom ? entry.protocol ?? "openai-chat" : void 0;
+  const out = { id: entry.id, provider: entry.provider, model: entry.model.trim() };
+  const name = entry.name?.trim();
+  if (name) out.name = name;
+  if (protocol) out.protocol = protocol;
+  const rawUrl = Boolean(entry.rawUrl && protocol === "openai-chat" && entry.baseUrl?.trim());
+  const baseUrl = entry.baseUrl?.trim();
+  if (baseUrl) out.baseUrl = rawUrl ? baseUrl : toBaseUrl(baseUrl, entry);
+  if (rawUrl) out.rawUrl = true;
+  const caps = entry.capabilities;
+  if (caps && Object.values(caps).some((v) => v !== void 0)) {
+    out.capabilities = Object.fromEntries(
+      Object.entries(caps).filter(([, v]) => v !== void 0)
+    );
+  }
+  if (entry.reasoning) {
+    const levels = REASONING_EFFORTS.filter((l) => entry.reasoning?.levels.includes(l));
+    if (levels.length > 0) {
+      const def = entry.reasoning.default;
+      out.reasoning = def && levels.includes(def) ? { levels, default: def } : { levels };
+    }
+  }
+  if (entry.contextLength) out.contextLength = entry.contextLength;
+  if (entry.maxOutputTokens) out.maxOutputTokens = entry.maxOutputTokens;
+  if (entry.host) out.host = true;
+  return out;
+}
+function toBaseUrl(url, entry) {
+  const anthropic = entry.provider === "anthropic" || entry.provider === "openai-compatible" && entry.protocol === "anthropic-messages";
+  const suffix = anthropic ? /\/messages\/?$/ : /\/chat\/completions\/?$/;
+  return url.replace(suffix, "").replace(/\/+$/, "");
+}
+function parseModelEntry(raw) {
+  const parsed = ModelEntrySchema.safeParse(raw);
+  if (!parsed.success) {
+    const first2 = parsed.error.issues[0];
+    return {
+      ok: false,
+      reason: first2 ? `${first2.path.join(".") || "(root)"}: ${first2.message}` : ""
+    };
+  }
+  return { ok: true, entry: normalizeModelEntry(parsed.data) };
+}
+function loadModelEntries(homeDir) {
+  const path = modelEntriesPath(homeDir);
+  if (!existsSync(path)) return { entries: [], issues: [] };
+  const hostLabelOf = (raw2) => {
+    const label = raw2?.hostLabel;
+    return typeof label === "string" && label.trim() !== "" ? label.trim() : void 0;
+  };
+  let raw;
+  try {
+    raw = JSON.parse(readFileSync(path, "utf-8"));
+  } catch (err) {
+    return {
+      entries: [],
+      issues: [`${path}: ${err instanceof Error ? err.message : String(err)}`]
+    };
+  }
+  const list = raw?.models;
+  if (!Array.isArray(list)) {
+    return { entries: [], issues: [`${path}: "models" is not an array`] };
+  }
+  const hostLabel = hostLabelOf(raw);
+  const entries2 = [];
+  const issues = [];
+  const seen = /* @__PURE__ */ new Set();
+  list.forEach((item, i) => {
+    const parsed = parseModelEntry(item);
+    if (!parsed.ok) {
+      issues.push(`${path} models[${i}]: ${parsed.reason}`);
+      return;
+    }
+    if (seen.has(parsed.entry.id)) {
+      issues.push(`${path} models[${i}]: duplicate id "${parsed.entry.id}"`);
+      return;
+    }
+    seen.add(parsed.entry.id);
+    entries2.push(parsed.entry);
+  });
+  return hostLabel ? { entries: entries2, issues, hostLabel } : { entries: entries2, issues };
+}
+function saveModelEntries(homeDir, entries2, hostLabel) {
+  const path = modelEntriesPath(homeDir);
+  if (loadModelEntries(homeDir).issues.length > 0) {
+    const ts = (/* @__PURE__ */ new Date()).toISOString().replace(/[:.]/g, "-");
+    copyFileSync(path, `${path}.corrupt.${ts}.bak`);
+  }
+  const label = hostLabel !== void 0 ? hostLabel : loadModelEntries(homeDir).hostLabel;
+  const body2 = `${JSON.stringify(
+    {
+      version: FORMAT_VERSION,
+      ...label ? { hostLabel: label } : {},
+      models: entries2.map(normalizeModelEntry)
+    },
+    null,
+    2
+  )}
+`;
+  const tmp = `${path}.${process.pid}.tmp`;
+  mkdirSync(dirname(path), { recursive: true });
+  try {
+    writeFileSync(tmp, body2, { encoding: "utf-8", mode: 384 });
+    renameSync(tmp, path);
+  } catch (err) {
+    rmSync(tmp, { force: true });
+    throw err;
+  }
+}
+var EntryRefSchema = z.string().refine((v) => parseModelRef(v) !== void 0, { message: "expected @<model-entry-id>" });
 var RetrySchema = z.object({
   maxRetries: z.int().min(0).default(3),
   baseBackoffMs: z.int().min(0).default(1e3),
@@ -13145,9 +13333,9 @@ var TelemetrySchema = z.object({
   endpoint: z.string().optional()
 });
 var EpochConfigSchema = z.object({
-  provider: ProviderSchema.prefault({}),
-  model: z.string().min(1).default("gpt-4o-mini"),
-  models: z.object({ utility: z.string().min(1).optional() }).optional(),
+  model: EntryRefSchema.optional(),
+  models: z.object({ utility: EntryRefSchema.optional() }).optional(),
+  modelEntries: z.array(ModelEntrySchema).optional(),
   shell: z.enum(SHELL_KINDS).optional(),
   maxTurns: z.int().nonnegative().default(DEFAULT_MAX_TURNS),
   contextLength: z.int().positive().default(2e5),
@@ -13163,10 +13351,7 @@ var EpochConfigSchema = z.object({
   logLevel: z.enum(["debug", "info", "warn", "error"]).default("info"),
   profile: z.string().min(1).default("default"),
   retry: RetrySchema.prefault({}),
-  fallback: z.object({
-    providers: z.array(z.enum(PROVIDER_TYPES)).default([]),
-    model: z.string().min(1).optional()
-  }).optional(),
+  fallback: z.object({ model: EntryRefSchema.optional() }).optional(),
   hooks: z.record(z.string(), z.unknown()).optional(),
   trust: TrustSchema.optional(),
   sandbox: SandboxSchema.prefault({}),
@@ -13187,13 +13372,15 @@ var EpochConfigSchema = z.object({
   display: DisplaySchema2.optional(),
   brand: z.string().min(1).optional(),
   brandWhenSidebarCollapsed: z.enum(BRAND_WHEN_SIDEBAR_COLLAPSED).optional(),
+  brandMenuId: z.string().min(1).optional(),
   sidebarMenu: z.array(SidebarNavItemSchema).min(1).refine((items) => new Set(items.map((item) => item.id)).size === items.length, {
     message: "sidebarMenu: id must be unique"
   }).refine((items) => items.filter((item) => item.primary === true).length <= 1, {
     message: "sidebarMenu: at most one item can be primary"
   }).optional(),
-  userMenu: z.array(SidebarMenuItemSchema).min(1).refine((items) => new Set(items.map((item) => item.id)).size === items.length, {
-    message: "userMenu: id must be unique"
+  userMenuHost: z.boolean().optional(),
+  sidebarHeadMenu: z.array(SidebarMenuItemSchema).min(1).refine((items) => new Set(items.map((item) => item.id)).size === items.length, {
+    message: "sidebarHeadMenu: id must be unique"
   }).optional(),
   blankCards: z.array(BlankCardSchema).min(1).refine((items) => new Set(items.map((item) => item.id)).size === items.length, {
     message: "blankCards: id must be unique"
@@ -13277,7 +13464,7 @@ function describeJsonError(err, text) {
   const reason9 = message.replace(/\s*in JSON at position \d+.*$/, "");
   return t("config_load.json_at", { reason: reason9, line, column });
 }
-function readSettingsFile(path, schema, known, empty, issues) {
+function readSettingsFile(path, schema, known, empty, issues, sanitize = (raw) => raw) {
   if (!existsSync(path)) return void 0;
   const text = readFileSync(path, "utf-8");
   let raw;
@@ -13288,11 +13475,27 @@ function readSettingsFile(path, schema, known, empty, issues) {
     issues.push({ path, message: t("config_load.json_invalid", { reason: reason9 }) });
     return { failed: reason9 };
   }
-  issues.push(...atFile(path, unknownKeyIssues(known, raw)));
-  const parsed = parseLenient(schema, raw, empty);
+  const cleaned = sanitize(raw, issues);
+  issues.push(...atFile(path, unknownKeyIssues(known, cleaned)));
+  const parsed = parseLenient(schema, cleaned, empty);
   issues.push(...atFile(path, parsed.issues));
   return { file: parsed.value };
 }
+function stripLegacyModelValue(raw, issues) {
+  if (!raw || typeof raw !== "object" || Array.isArray(raw)) return raw;
+  const out = { ...raw };
+  const value = out["model"];
+  if (value === void 0 || typeof value === "string" && parseModelRef(value)) return out;
+  delete out["model"];
+  issues.push({
+    path: "model",
+    message: t("config_load.legacy_ignored", {
+      key: "model",
+      hint: t("config_load.legacy_hint_main")
+    })
+  });
+  return out;
+}
 // src/config/managed.ts
 var ManagedSettingsSchema = SettingsFileSchema.extend({
   allowManagedPermissionRulesOnly: z.boolean().optional(),
@@ -13318,7 +13521,8 @@ function readManagedSettings(path, issues) {
     ManagedSettingsSchema,
     MANAGED_KEYS,
     {},
-    issues
+    issues,
+    stripLegacyModelValue
   );
   if (!read || "failed" in read) return { policy: noManagedPolicy(path), read };
   return { policy: policyOf(path, read.file), read };
@@ -13378,11 +13582,11 @@ function countRules(lists) {
   if (!lists) return 0;
   return BUCKETS2.reduce((sum, b) => sum + (lists[b]?.length ?? 0), 0);
 }
-function mergeLists(base, add) {
+function mergeLists(base2, add) {
   const out = {};
   for (const bucket of BUCKETS2) {
-    const merged = [...base[bucket] ?? [], ...add[bucket] ?? []];
-    if (merged.length === 0 && base[bucket] === void 0 && add[bucket] === void 0) continue;
+    const merged = [...base2[bucket] ?? [], ...add[bucket] ?? []];
+    if (merged.length === 0 && base2[bucket] === void 0 && add[bucket] === void 0) continue;
     out[bucket] = [...new Set(merged)];
   }
   return out;
@@ -13413,7 +13617,8 @@ function loadLayer(source, execTrusted, issues) {
     SettingsFileSchema,
     SETTINGS_KEYS,
     {},
-    issues
+    issues,
+    stripLegacyModelValue
   );
   return finishLayer(source, read, execTrusted, issues);
 }
@@ -13456,8 +13661,8 @@ function describe6(layer, gated, lists) {
   const parts = BUCKETS2.map((b) => `${b} ${lists[b]?.length ?? 0}`).join(" / ");
   return t("config_load.loaded", { label, parts });
 }
-function resolveSettings(base, projectRoot, execTrusted, opts = {}) {
-  const config = structuredClone(base);
+function resolveSettings(base2, projectRoot, execTrusted, opts = {}) {
+  const config = structuredClone(base2);
   const issues = [];
   const layers = [];
   let lists = {};
@@ -13486,12 +13691,19 @@ function resolveSettings(base, projectRoot, execTrusted, opts = {}) {
     lists = managed.policy.allowManagedPermissionRulesOnly ? managed.outcome.lists : mergeLists(lists, managed.outcome.lists);
     layers.push({ ...managed.outcome, scalars: applyScalars(config, managed.file) });
   }
-  if (countRules(lists) > 0 || base.permissions !== void 0) config.permissions = lists;
+  if (countRules(lists) > 0 || base2.permissions !== void 0) config.permissions = lists;
   return { config, layers, issues, managed: managed.policy };
 }
 function loadPluginLayer(entry, issues) {
   const { plugin, path } = entry;
-  const read = readSettingsFile(path, SettingsFileSchema, SETTINGS_KEYS, {}, issues);
+  const read = readSettingsFile(
+    path,
+    SettingsFileSchema,
+    SETTINGS_KEYS,
+    {},
+    issues,
+    stripLegacyModelValue
+  );
   const label = t("config_load.layer_plugin_named", { plugin });
   if (!read) return { layer: "plugin", path, status: "missing", lists: {}, scalars: {} };
   if ("failed" in read) {
@@ -13567,11 +13779,11 @@ function originOf(origins, key) {
   if (origins.file.has(key)) return "user";
   return "builtin";
 }
-function explainSetting(key, base, file) {
-  const baseLayer = baseLayerOf(base);
+function explainSetting(key, base2, file) {
+  const baseLayer = baseLayerOf(base2);
   const steps = [
-    step("builtin", base.builtin),
-    baseLayer === "builtin" ? { layer: "user" } : step(baseLayer, base.value)
+    step("builtin", base2.builtin),
+    baseLayer === "builtin" ? { layer: "user" } : step(baseLayer, base2.value)
   ];
   if (file) {
     for (const layer of SETTINGS_LAYER_ORDER) {
@@ -13588,10 +13800,10 @@ function explainSetting(key, base, file) {
     chain: file ? steps : []
   };
 }
-function baseLayerOf(base) {
-  if (base.origin === "env") return "env";
-  if (base.origin === "user") return "user";
-  return sameValue(base.value, base.builtin) ? "builtin" : "unknown";
+function baseLayerOf(base2) {
+  if (base2.origin === "env") return "env";
+  if (base2.origin === "user") return "user";
+  return sameValue(base2.value, base2.builtin) ? "builtin" : "unknown";
 }
 function valueOf(file, layer) {
   return file.layers.find((l) => l.layer === layer)?.scalars[file.key];
@@ -13641,8 +13853,9 @@ function _loadImpl(overrideHomeDir) {
   mkdirSync(homeDir, { recursive: true });
   const configPath2 = getConfigPath(homeDir);
   const { mtime, size } = fileStamp(configPath2);
+  const entriesStamp = stampKey(modelEntriesPath(homeDir));
   const envSnapshot = snapshotEnv();
-  if (_cache && _cache.homeDir === homeDir && _cache.mtime === mtime && _cache.size === size && sameEnv(_cache.envSnapshot, envSnapshot)) {
+  if (_cache && _cache.homeDir === homeDir && _cache.mtime === mtime && _cache.size === size && _cache.entriesStamp === entriesStamp && sameEnv(_cache.envSnapshot, envSnapshot)) {
     _lastIssues = _cache.issues;
     _lastOrigins = _cache.origins;
     return _cache.config;
@@ -13658,6 +13871,7 @@ function _loadImpl(overrideHomeDir) {
       homeDir,
       mtime,
       size,
+      entriesStamp,
       envSnapshot,
       config: cached.config,
       issues,
@@ -13666,12 +13880,9 @@ function _loadImpl(overrideHomeDir) {
     return cached.config;
   }
   const config = parseRawConfig(read.raw, issues, track);
-  const override = readProviderOverride(issues);
-  const pinned = applyProviderOverride(config, track, override);
-  const secretSource = applySecretsFromEnv(config, homeDir, track);
-  if (pinned) applyProviderOverride(config, track, override);
+  reportDroppedEnv(issues);
   applyEnvOverrides(config, issues, track);
-  if (secretSource === "config-file" && !pinned) detectProviderFromKey(config);
+  applyModelEntries(config, homeDir, issues);
   if (overrideHomeDir) {
     config.homeDir = overrideHomeDir;
     config.dbPath = dbPath(overrideHomeDir);
@@ -13680,7 +13891,16 @@ function _loadImpl(overrideHomeDir) {
   _lastIssues = issues;
   _lastOrigins = origins;
   _lastKnownGood = { homeDir, config: structuredClone(config), origins };
-  _cache = { homeDir, mtime, size, envSnapshot, config: structuredClone(config), issues, origins };
+  _cache = {
+    homeDir,
+    mtime,
+    size,
+    entriesStamp,
+    envSnapshot,
+    config: structuredClone(config),
+    issues,
+    origins
+  };
   return config;
 }
 function readRawConfig(configPath2, issues) {
@@ -13706,106 +13926,122 @@ function parseRawConfig(raw, issues, track) {
   const expanded = expandEnvVars(raw);
   const migrated = migrateRawConfig(expanded);
   issues.push(...migrated.issues);
-  issues.push(...unknownKeyIssues(CONFIG_KEYS, migrated.raw));
-  const outcome = parseLenient(
-    EpochConfigSchema,
-    dropEmptySections(migrated.raw),
-    EpochConfigSchema.parse({})
-  );
+  const legacyStripped = stripLegacyModelConfig(migrated.raw, issues);
+  issues.push(...unknownKeyIssues(CONFIG_KEYS, legacyStripped));
+  const cleaned = dropEmptySections(legacyStripped);
+  const outcome = parseLenient(EpochConfigSchema, cleaned, EpochConfigSchema.parse({}));
   issues.push(...outcome.issues);
   issues.push(...settingsHiddenIssues(outcome.value));
   issues.push(...settingsPaneBeforeIssues(outcome.value));
-  if (outcome.issues.length === 0) collectKeyPaths(migrated.raw, track.file);
+  if (outcome.issues.length === 0) collectKeyPaths(cleaned, track.file);
   return outcome.value;
 }
+function stripLegacyModelConfig(raw, issues) {
+  if (!raw || typeof raw !== "object" || Array.isArray(raw)) return raw;
+  const out = { ...raw };
+  const drop = (path, hintKey, messageKey = "config_load.legacy_ignored") => {
+    issues.push({
+      path,
+      message: t(messageKey, { key: path, hint: t(hintKey) })
+    });
+  };
+  for (const key of ["provider", "gateway"]) {
+    if (key in out) {
+      delete out[key];
+      drop(key, "config_load.legacy_hint_endpoint");
+    }
+  }
+  const notEntry = (v) => v !== void 0 && (typeof v !== "string" || parseModelRef(v) === void 0);
+  const dropModel = (path, hintKey, value) => {
+    if (typeof value === "string" && value.trimStart().startsWith(ENTRY_REF_PREFIX))
+      drop(path, hintKey, "config_load.entry_ref_invalid");
+    else drop(path, hintKey);
+  };
+  if (notEntry(out.model)) {
+    const raw2 = out.model;
+    delete out.model;
+    dropModel("model", "config_load.legacy_hint_main", raw2);
+  }
+  const section = (key) => {
+    const v = out[key];
+    if (!v || typeof v !== "object" || Array.isArray(v)) return void 0;
+    const copy = { ...v };
+    out[key] = copy;
+    return copy;
+  };
+  const models = section("models");
+  if (models && notEntry(models.utility)) {
+    const raw2 = models.utility;
+    delete models.utility;
+    dropModel("models.utility", "config_load.legacy_hint_utility", raw2);
+  }
+  const fallback2 = section("fallback");
+  if (fallback2 && notEntry(fallback2.model)) {
+    const raw2 = fallback2.model;
+    delete fallback2.model;
+    dropModel("fallback.model", "config_load.legacy_hint_fallback", raw2);
+  }
+  if (fallback2 && "providers" in fallback2) {
+    delete fallback2.providers;
+    drop("fallback.providers", "config_load.legacy_hint_fallback");
+  }
+  return out;
+}
 function dropEmptySections(raw) {
   if (!raw || typeof raw !== "object" || Array.isArray(raw)) return raw;
   const entries2 = Object.entries(raw);
   if (!entries2.some(([, v]) => v === null)) return raw;
   return Object.fromEntries(entries2.filter(([, v]) => v !== null));
 }
-function applySecretsFromEnv(config, homeDir, track) {
-  const env = readProviderKeyEnv(homeDir);
-  const lookup = (name) => env[name];
-  const ownVar = apiKeyEnvVar(config.provider.type);
-  const raw = ownVar ? lookup(ownVar) : void 0;
-  if (raw) return finishSecrets(config, raw, "explicit", track);
-  for (const info of PROVIDER_INFOS) {
-    if (!info.apiKeyEnv) continue;
-    const value = lookup(info.apiKeyEnv);
-    if (!value) continue;
-    config.provider.type = info.type;
-    track.env.add("provider.type");
-    return finishSecrets(config, value, "explicit", track);
-  }
-  return "config-file";
-}
-function readProviderOverride(issues) {
-  const override = {};
-  const baseUrl = process.env.EPOCH_BASE_URL;
-  if (baseUrl) {
-    override.baseUrl = baseUrl;
-    override.type = "openai-compatible";
-  }
-  const type = process.env.EPOCH_PROVIDER;
-  if (type) {
-    if (isProviderType(type)) {
-      override.type ??= type;
-    } else {
-      issues.push(envIssue("EPOCH_PROVIDER", type, PROVIDER_TYPES.join(" / ")));
-    }
+function reportDroppedEnv(issues) {
+  for (const name of ["EPOCH_PROVIDER", "EPOCH_BASE_URL"]) {
+    if (!process.env[name]) continue;
+    issues.push({
+      path: name,
+      message: t("config_load.legacy_ignored", {
+        key: name,
+        hint: t("config_load.legacy_hint_endpoint")
+      })
+    });
   }
-  return override;
 }
-function applyProviderOverride(config, track, override) {
-  if (override.baseUrl) {
-    config.provider.baseUrl = override.baseUrl;
-    track.env.add("provider.baseUrl");
-  }
-  if (!override.type) return false;
-  config.provider.type = override.type;
-  track.env.add("provider.type");
-  return true;
+function readSecret(name, homeDir) {
+  return process.env[name] || loadEnvFile(getEnvPath(homeDir))[name] || getSecretValues()[name] || void 0;
 }
-function readProviderKeyEnv(homeDir = resolveHomeDir()) {
-  const dotEnv = loadEnvFile(getEnvPath(homeDir));
-  const fromStore = getSecretValues();
-  const result = {};
-  for (const name of API_KEY_ENV_VARS) {
-    const value = process.env[name] || dotEnv[name] || fromStore[name];
-    if (value) result[name] = value;
-  }
-  return result;
+function readEntryKey(id, homeDir = resolveHomeDir()) {
+  return readSecret(entrySecretName(id), homeDir);
 }
-function hasProviderCredentials(homeDir = resolveHomeDir()) {
-  if (Object.keys(readProviderKeyEnv(homeDir)).length > 0) return true;
-  return listStoredSecretNames(homeDir).some((n) => API_KEY_ENV_VARS.includes(n));
+function hasUsableModel(homeDir = resolveHomeDir()) {
+  if (hasProviderCredentials(homeDir)) return true;
+  return loadModelEntries(homeDir).entries.some(
+    (e) => e.host === true || e.provider === "ollama" || e.provider === "openai-compatible"
+  );
 }
-function finishSecrets(config, raw, source, track) {
-  const first2 = raw.split(",")[0]?.trim();
-  if (first2) config.provider.apiKey = first2;
-  config.provider.credentials = parseKeys(raw);
-  track.env.add("provider.apiKey");
-  track.env.add("provider.credentials");
-  return source;
+function hasProviderCredentials(homeDir = resolveHomeDir()) {
+  const dotEnv = loadEnvFile(getEnvPath(homeDir));
+  const named = (n) => isEntrySecretName(n) && Boolean(process.env[n] || dotEnv[n]);
+  return Object.keys(process.env).some(named) || Object.keys(dotEnv).some(named) || listStoredSecretNames(homeDir).some(isEntrySecretName);
 }
 function applyEnvOverrides(config, issues, track) {
   const env = process.env;
   if (env.EPOCH_MODEL) {
-    config.model = env.EPOCH_MODEL;
-    track.env.add("model");
+    if (parseModelRef(env.EPOCH_MODEL)) {
+      config.model = env.EPOCH_MODEL;
+      track.env.add("model");
+    } else issues.push(envIssue("EPOCH_MODEL", env.EPOCH_MODEL, "@<model-entry-id>"));
   }
   if (env.EPOCH_PROFILE) {
     config.profile = env.EPOCH_PROFILE;
     track.env.add("profile");
   }
   if (env.EPOCH_FALLBACK_MODEL) {
-    config.fallback = {
-      providers: config.fallback?.providers ?? [],
-      model: env.EPOCH_FALLBACK_MODEL
-    };
-    track.env.add("fallback");
-    track.env.add("fallback.model");
+    if (parseModelRef(env.EPOCH_FALLBACK_MODEL)) {
+      config.fallback = { model: env.EPOCH_FALLBACK_MODEL };
+      track.env.add("fallback");
+      track.env.add("fallback.model");
+    } else {
+      issues.push(envIssue("EPOCH_FALLBACK_MODEL", env.EPOCH_FALLBACK_MODEL, "@<model-entry-id>"));
+    }
   }
   if (env.EPOCH_MAX_TURNS) {
     const turns = Number(env.EPOCH_MAX_TURNS);
@@ -13847,11 +14083,6 @@ function applyEnvOverrides(config, issues, track) {
 function envIssue(name, value, expected) {
   return { path: name, message: t("config_load.env_expected", { expected, value }) };
 }
-function detectProviderFromKey(config) {
-  const key = config.provider.apiKey;
-  if (key.startsWith("sk-ant")) config.provider.type = "anthropic";
-  else if (key.startsWith("sk-d")) config.provider.type = "deepseek";
-}
 function backupCorruptConfig(path) {
   try {
     const ts = (/* @__PURE__ */ new Date()).toISOString().replace(/[:.]/g, "-");
@@ -13864,7 +14095,6 @@ function backupCorruptConfig(path) {
 }
 function snapshotEnv() {
   const keys = [
-    ...API_KEY_ENV_VARS,
     "EPOCH_HOME",
     "EPOCH_PROFILE",
     "EPOCH_MODEL",
@@ -13879,8 +14109,6 @@ function snapshotEnv() {
   const snapshot = Object.fromEntries(
     keys.map((k) => [k, process.env[k]])
   );
-  const fromStore = getSecretValues();
-  for (const name of API_KEY_ENV_VARS) snapshot[`secret:${name}`] = fromStore[name];
   return snapshot;
 }
 function sameEnv(a, b) {
@@ -13920,6 +14148,19 @@ function loadEnvFile(path) {
     return {};
   }
 }
+function applyModelEntries(config, homeDir, issues) {
+  if (config.modelEntries !== void 0) {
+    issues.push({ path: "modelEntries", message: t("config_load.model_entries_in_yaml") });
+  }
+  const loaded = loadModelEntries(homeDir);
+  for (const message of loaded.issues) issues.push({ path: "models.json", message });
+  if (loaded.entries.length > 0) config.modelEntries = loaded.entries;
+  else delete config.modelEntries;
+}
+function stampKey(path) {
+  const { mtime, size } = fileStamp(path);
+  return `${mtime}:${size}`;
+}
 function fileStamp(path) {
   try {
     const st = statSync(path);
@@ -13928,9 +14169,6 @@ function fileStamp(path) {
     return { mtime: 0, size: 0 };
   }
 }
-function parseKeys(raw) {
-  return raw.split(",").map((s) => s.trim()).filter(Boolean).map((k) => ({ apiKey: k }));
-}
 var PROBE_IMAGE_PNG_BASE64 = "iVBORw0KGgoAAAANSUhEUgAAAEAAAABACAIAAAAlC+aJAAAAS0lEQVR42u3PQQkAAAgAsetfWiP4FgYrsKZeS0BAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEDgsqnc8OJg6Ln3AAAAAElFTkSuQmCC";
 var PROBE_PROMPT = "What color is this image? Answer with one word.";
 var MIN_IMAGE_TOKEN_DELTA = 16;
@@ -13968,14 +14206,14 @@ async function runImageProbe(model) {
     };
   }
   const shot = withImage.inputTokens;
-  const base = baseline.inputTokens;
-  if (shot === void 0 || base === void 0 || shot <= 0 || base <= 0) {
-    return { verdict: "inconclusive", detail: `(usage \u4E0D\u53EF\u7528\uFF1A\u5E26\u56FE ${shot} / \u57FA\u7EBF ${base})` };
+  const base2 = baseline.inputTokens;
+  if (shot === void 0 || base2 === void 0 || shot <= 0 || base2 <= 0) {
+    return { verdict: "inconclusive", detail: `(usage \u4E0D\u53EF\u7528\uFF1A\u5E26\u56FE ${shot} / \u57FA\u7EBF ${base2})` };
   }
-  const delta = shot - base;
+  const delta = shot - base2;
   return {
     verdict: delta >= MIN_IMAGE_TOKEN_DELTA ? "yes" : "no",
-    detail: `+${delta} token\uFF08\u5E26\u56FE ${shot} / \u57FA\u7EBF ${base}\uFF09\uFF1B\u5B83\u8BF4\u300C${withImage.text.slice(0, 40)}\u300D`
+    detail: `+${delta} token\uFF08\u5E26\u56FE ${shot} / \u57FA\u7EBF ${base2}\uFF09\uFF1B\u5B83\u8BF4\u300C${withImage.text.slice(0, 40)}\u300D`
   };
 }
 var PROBE_VERSION = 2;
@@ -14014,67 +14252,6 @@ function writeImageProbe(homeDir, provider, model, supportsImages) {
   } catch {
   }
 }
-// src/provider/fallback.ts
-var DEFAULT_MODELS = {
-  openai: "gpt-4o-mini",
-  anthropic: "claude-haiku-4-5",
-  google: "gemini-2.0-flash",
-  deepseek: "deepseek-chat",
-  groq: "llama-3.3-70b-versatile",
-  mistral: "ministral-8b-latest",
-  moonshotai: "kimi-latest",
-  zhipu: "glm-4.5-flash",
-  dashscope: "qwen-flash",
-  bytedance: "doubao-seed-2.0-mini",
-  qianfan: "ernie-speed-128k",
-  cohere: "command-r7b-12-2024",
-  xai: "grok-vision-beta",
-  perplexity: "sonar",
-  "amazon-bedrock": "anthropic.claude-instant-v1",
-  azure: "gpt-4o-mini",
-  togetherai: "meta-llama/Llama-3.3-70B-Instruct-Turbo",
-  ollama: "llama3.2",
-  "openai-compatible": "gpt-4o-mini"
-};
-function defaultModelOf(type) {
-  return DEFAULT_MODELS[type];
-}
-function modelKey(provider, model) {
-  return `${provider}/${model}`;
-}
-function nextFallbackModel(provider, current, tried, configured) {
-  for (const candidate of [configured, DEFAULT_MODELS[provider]]) {
-    if (!candidate || candidate === current) continue;
-    if (tried.has(modelKey(provider, candidate))) continue;
-    return candidate;
-  }
-  return void 0;
-}
-var MODEL_GIVE_UP_THRESHOLD = 3;
-var ModelFailureTracker = class {
-  counts = /* @__PURE__ */ new Map();
-  abandoned = /* @__PURE__ */ new Set();
-  recordFailure(provider, model) {
-    const key = modelKey(provider, model);
-    if (this.abandoned.has(key)) return false;
-    const next = (this.counts.get(key) ?? 0) + 1;
-    this.counts.set(key, next);
-    if (next < MODEL_GIVE_UP_THRESHOLD) return false;
-    this.abandoned.add(key);
-    return true;
-  }
-  recordSuccess(provider, model) {
-    this.counts.delete(modelKey(provider, model));
-  }
-  isAbandoned(provider, model) {
-    return this.abandoned.has(modelKey(provider, model));
-  }
-  clear(provider, model) {
-    const key = modelKey(provider, model);
-    this.counts.delete(key);
-    this.abandoned.delete(key);
-  }
-};
 var DEFAULT_CONTEXT_LENGTH2 = 2e5;
 var STATIC_CAPABILITIES = {
   "gpt-4o": {
@@ -14463,6 +14640,9 @@ function openaiCompatibleFactory(name, defaultBaseUrl) {
     });
   };
 }
+function base(baseUrl) {
+  return baseUrl ? { baseURL: baseUrl } : {};
+}
 var LOADERS = {
   openai: async ({ apiKey, baseUrl }) => {
     const { createOpenAI } = await import('@ai-sdk/openai');
@@ -14470,29 +14650,29 @@ var LOADERS = {
     if (baseUrl) opts["baseURL"] = baseUrl;
     return createOpenAI(opts);
   },
-  anthropic: async ({ apiKey }) => {
+  anthropic: async ({ apiKey, baseUrl }) => {
     const { createAnthropic } = await import('@ai-sdk/anthropic');
-    return createAnthropic({ apiKey });
+    return createAnthropic({ apiKey, ...base(baseUrl) });
   },
-  google: async ({ apiKey }) => {
+  google: async ({ apiKey, baseUrl }) => {
     const { createGoogleGenerativeAI } = await import('@ai-sdk/google');
-    return createGoogleGenerativeAI({ apiKey });
+    return createGoogleGenerativeAI({ apiKey, ...base(baseUrl) });
   },
-  deepseek: async ({ apiKey }) => {
+  deepseek: async ({ apiKey, baseUrl }) => {
     const { createDeepSeek } = await import('@ai-sdk/deepseek');
-    return createDeepSeek({ apiKey });
+    return createDeepSeek({ apiKey, ...base(baseUrl) });
   },
-  groq: async ({ apiKey }) => {
+  groq: async ({ apiKey, baseUrl }) => {
     const { createGroq } = await import('@ai-sdk/groq');
-    return createGroq({ apiKey });
+    return createGroq({ apiKey, ...base(baseUrl) });
   },
-  mistral: async ({ apiKey }) => {
+  mistral: async ({ apiKey, baseUrl }) => {
     const { createMistral } = await import('@ai-sdk/mistral');
-    return createMistral({ apiKey });
+    return createMistral({ apiKey, ...base(baseUrl) });
   },
-  moonshotai: async ({ apiKey }) => {
+  moonshotai: async ({ apiKey, baseUrl }) => {
     const { createMoonshotAI } = await import('@ai-sdk/moonshotai');
-    return createMoonshotAI({ apiKey });
+    return createMoonshotAI({ apiKey, ...base(baseUrl) });
   },
   zhipu: openaiCompatibleFactory("zhipu", "https://open.bigmodel.cn/api/paas/v4"),
   dashscope: async ({ apiKey, baseUrl }) => {
@@ -14505,17 +14685,17 @@ var LOADERS = {
   },
   bytedance: openaiCompatibleFactory("bytedance", "https://ark.cn-beijing.volces.com/api/v3"),
   qianfan: openaiCompatibleFactory("qianfan", "https://qianfan.baidubce.com/v2"),
-  cohere: async ({ apiKey }) => {
+  cohere: async ({ apiKey, baseUrl }) => {
     const { createCohere } = await import('@ai-sdk/cohere');
-    return createCohere({ apiKey });
+    return createCohere({ apiKey, ...base(baseUrl) });
   },
-  xai: async ({ apiKey }) => {
+  xai: async ({ apiKey, baseUrl }) => {
     const { createXai } = await import('@ai-sdk/xai');
-    return createXai({ apiKey });
+    return createXai({ apiKey, ...base(baseUrl) });
   },
-  perplexity: async ({ apiKey }) => {
+  perplexity: async ({ apiKey, baseUrl }) => {
     const { createPerplexity } = await import('@ai-sdk/perplexity');
-    return createPerplexity({ apiKey });
+    return createPerplexity({ apiKey, ...base(baseUrl) });
   },
   "amazon-bedrock": async ({ apiKey }) => {
     const { createAmazonBedrock } = await import('@ai-sdk/amazon-bedrock');
@@ -14525,13 +14705,13 @@ var LOADERS = {
     const { createAzure } = await import('@ai-sdk/azure');
     return createAzure({ apiKey });
   },
-  togetherai: async ({ apiKey }) => {
+  togetherai: async ({ apiKey, baseUrl }) => {
     const { createTogetherAI } = await import('@ai-sdk/togetherai');
-    return createTogetherAI({ apiKey });
+    return createTogetherAI({ apiKey, ...base(baseUrl) });
   },
-  ollama: async () => {
+  ollama: async ({ baseUrl }) => {
     const { createOllama } = await import('ollama-ai-provider-v2');
-    return createOllama();
+    return createOllama(base(baseUrl));
   },
   "openai-compatible": openaiCompatibleFactory("custom", "http://localhost:8080/v1")
 };
@@ -14559,6 +14739,62 @@ async function createModelFactory(type, opts) {
     throw err;
   }
 }
+async function createEntryFactory(entry, apiKey) {
+  const type = entry.provider;
+  const pkg = type === "openai-compatible" && entry.protocol === "anthropic-messages" ? "@ai-sdk/anthropic" : PACKAGES[type];
+  try {
+    return await loadEntry(entry, apiKey);
+  } catch (err) {
+    if (isModuleNotFound(err)) throw new ProviderSdkMissingError(type, pkg, err);
+    throw err;
+  }
+}
+async function loadEntry(entry, apiKey) {
+  const baseURL = entry.baseUrl;
+  if (entry.provider === "openai-compatible") {
+    if (entry.protocol === "anthropic-messages") {
+      const { createAnthropic } = await import('@ai-sdk/anthropic');
+      return createAnthropic({ apiKey: apiKey ?? "", ...baseURL ? { baseURL } : {} });
+    }
+    const { createOpenAICompatible } = await import('@ai-sdk/openai-compatible');
+    return createOpenAICompatible({
+      ...apiKey ? { apiKey } : {},
+      baseURL: baseURL || "http://localhost:8080/v1",
+      name: "custom",
+      includeUsage: true,
+      ...entry.rawUrl && baseURL ? { fetch: rawUrlFetch(baseURL) } : {}
+    });
+  }
+  const key = apiKey ?? "";
+  return LOADERS[entry.provider](baseURL ? { apiKey: key, baseUrl: baseURL } : { apiKey: key });
+}
+function rawUrlFetch(url) {
+  return (input, init) => globalThis.fetch(input instanceof Request ? new Request(url, input) : url, init);
+}
+var TOOL_RESULT_MEDIA = {
+  anthropic: true,
+  openai: true,
+  google: true,
+  azure: true,
+  "amazon-bedrock": true,
+  deepseek: false,
+  "openai-compatible": false,
+  zhipu: false,
+  bytedance: false,
+  qianfan: false,
+  groq: false,
+  mistral: false,
+  dashscope: false,
+  xai: false,
+  cohere: false,
+  moonshotai: false,
+  togetherai: false,
+  perplexity: false,
+  ollama: false
+};
+function acceptsToolResultMedia(type) {
+  return TOOL_RESULT_MEDIA[type];
+}
 function isModuleNotFound(err) {
   if (!err || typeof err !== "object") return false;
   const code = err.code;
@@ -14566,21 +14802,127 @@ function isModuleNotFound(err) {
   const msg = err instanceof Error ? err.message : "";
   return /Cannot find (module|package)|Failed to resolve/i.test(msg);
 }
+// src/provider/entry-route.ts
+function buildEntryTable(entries2) {
+  return {
+    entries: new Map((entries2 ?? []).map((e) => [e.id, e]))
+  };
+}
+function entryProvider(_table, entry) {
+  return entry.provider;
+}
+function entrySelection(table, entry, origin) {
+  return { provider: entryProvider(table, entry), model: entry.model, origin, entry: entry.id };
+}
+function routeKey(table, provider, entry) {
+  if (!table.entries.has(entry)) return provider;
+  return `${ENTRY_REF_PREFIX}${entry}`;
+}
+function applyEntryCapability(base2, entry) {
+  if (!entry) return base2;
+  const caps = entry.capabilities ?? {};
+  const out = { ...base2 };
+  if (caps.tools !== void 0) out.supportsTools = caps.tools;
+  if (caps.images !== void 0) {
+    out.supportsImages = caps.images;
+    delete out.imagesUnknown;
+  }
+  if (caps.reasoning !== void 0) out.supportsReasoning = caps.reasoning;
+  if (entry.contextLength) {
+    out.contextLength = entry.contextLength;
+    delete out.contextLengthUnknown;
+  }
+  if (entry.maxOutputTokens) out.maxOutputTokens = entry.maxOutputTokens;
+  return out;
+}
+function entryAcceptsToolMedia(table, provider, entry) {
+  const e = table.entries.get(entry);
+  if (e?.provider === "openai-compatible" && e.protocol === "anthropic-messages") return true;
+  return acceptsToolResultMedia(provider);
+}
+function capabilityOfRef(config, ref = config.model) {
+  const parsed = ref ? parseModelRef(ref) : void 0;
+  const entry = parsed ? config.modelEntries?.find((e) => e.id === parsed.entry) : void 0;
+  if (!entry) return void 0;
+  return applyEntryCapability(getCapability(entry.model, config.homeDir, entry.provider), entry);
+}
+// src/provider/fallback.ts
+function modelKey(provider, model) {
+  return `${provider}/${model}`;
+}
+var MODEL_GIVE_UP_THRESHOLD = 3;
+var ModelFailureTracker = class {
+  counts = /* @__PURE__ */ new Map();
+  abandoned = /* @__PURE__ */ new Set();
+  recordFailure(key) {
+    if (this.abandoned.has(key)) return false;
+    const next = (this.counts.get(key) ?? 0) + 1;
+    this.counts.set(key, next);
+    if (next < MODEL_GIVE_UP_THRESHOLD) return false;
+    this.abandoned.add(key);
+    return true;
+  }
+  recordSuccess(key) {
+    this.counts.delete(key);
+  }
+  isAbandoned(key) {
+    return this.abandoned.has(key);
+  }
+  clear(key) {
+    this.counts.delete(key);
+    this.abandoned.delete(key);
+  }
+};
+// src/provider/reasoning-options.ts
+function maxOptions(dialect) {
+  switch (dialect) {
+    case "anthropic":
+      return { anthropic: { effort: "max" } };
+    case "deepseek":
+      return { deepseek: { reasoningEffort: "max" } };
+    case "openai":
+      return { openai: { reasoningEffort: "max" } };
+    case "openai-compatible":
+      return { openaiCompatible: { reasoningEffort: "max" } };
+    default:
+      return void 0;
+  }
+}
+function dialectOf(provider, entry) {
+  if (provider === "openai-compatible") {
+    return entry?.protocol === "anthropic-messages" ? "anthropic" : "openai-compatible";
+  }
+  if (provider === "zhipu" || provider === "bytedance" || provider === "qianfan") {
+    return "openai-compatible";
+  }
+  if (provider === "anthropic" || provider === "deepseek" || provider === "openai") return provider;
+  return "other";
+}
+function reasoningArgs(choice, dialect) {
+  if (choice === void 0) return void 0;
+  if (choice === "off") return { reasoning: "none" };
+  if (choice !== "max") return { reasoning: choice };
+  const extra = maxOptions(dialect);
+  return extra ? { reasoning: "xhigh", providerOptions: extra } : { reasoning: "xhigh" };
+}
+function mergeProviderOptions(base2, extra) {
+  if (!extra) return base2;
+  const out = { ...base2 };
+  for (const [key, value] of Object.entries(extra)) out[key] = { ...out[key], ...value };
+  return out;
+}
 var CONTEXT_WARN_RATIO = 0.8;
 function fmtTokens(n) {
   return n >= 1e3 ? `${Math.round(n / 1e3)}k` : String(n);
 }
 function checkCredential(want, deps) {
   if (deps.hasCredential(want.provider)) return null;
-  return { code: "no-credential", provider: want.provider, envVar: apiKeyEnvVar(want.provider) };
+  return { code: "no-credential", entry: want.entry };
 }
 function describeRejection(rejection) {
   switch (rejection.code) {
     case "no-credential":
-      return t("provider_switch.no_credential", {
-        provider: rejection.provider,
-        hint: rejection.envVar ? t("provider_switch.no_credential_env", { envVar: rejection.envVar }) : t("provider_switch.no_credential_plain")
-      });
+      return t("provider_switch.no_credential", { entry: rejection.entry });
     case "images-unsupported":
       return t("provider_switch.images_unsupported", { model: rejection.model });
     case "context-overflow":
@@ -14589,6 +14931,8 @@ function describeRejection(rejection) {
         model: rejection.model,
         limit: fmtTokens(rejection.contextLength)
       });
+    case "unknown-entry":
+      return t("provider_switch.unknown_entry", { entry: rejection.entry });
   }
 }
 function describeWarning(warning) {
@@ -14640,15 +14984,13 @@ function evaluateSelection(want, deps, ctx = {}) {
 function reject(rejection) {
   return { ok: false, reason: describeRejection(rejection), rejection };
 }
-// src/provider/types.ts
-var DEFAULT_MODEL = "gpt-4o-mini";
 // src/provider/router.ts
 var ProviderRouter = class {
   config;
   available = /* @__PURE__ */ new Map();
   factories = /* @__PURE__ */ new Map();
-  credentialIndex = 0;
-  keyEnv;
+  entryTable;
+  effort;
   telemetry = NOOP_TELEMETRY;
   selection;
   configSelection;
@@ -14659,44 +15001,28 @@ var ProviderRouter = class {
   }
   constructor(config) {
     this.config = config;
-    this.keyEnv = readProviderKeyEnv();
-    this.initFactories(config);
-    this.configSelection = {
-      provider: config.provider.type,
-      model: config.model ?? DEFAULT_MODEL,
-      origin: "config"
-    };
+    this.entryTable = buildEntryTable(config.modelEntries);
+    this.configSelection = this.resolveConfigured(config);
+    this.initFactories();
     this.selection = { ...this.configSelection };
   }
   getSelection() {
     return { ...this.selection };
   }
   getConfiguredModel() {
-    return this.configSelection.model;
+    return entryRef(this.configSelection.entry);
   }
   setSelection(next, ctx = {}) {
-    return this.applySelection(
-      {
-        provider: next.provider ?? this.selection.provider,
-        model: next.model,
-        origin: "user-switch"
-      },
-      ctx
-    );
+    const want = this.resolveRef(next, "user-switch");
+    return "ok" in want ? want : this.applySelection(want, ctx);
   }
   resetSelection(ctx = {}) {
     return this.applySelection({ ...this.configSelection }, ctx);
   }
   enterTurn(ref, ctx = {}) {
     const previous = { ...this.selection };
-    const result = this.applySelection(
-      {
-        provider: ref.provider ?? this.selection.provider,
-        model: ref.model,
-        origin: "command-frontmatter"
-      },
-      ctx
-    );
+    const want = this.resolveRef(ref, "command-frontmatter");
+    const result = "ok" in want ? want : this.applySelection(want, ctx);
     return {
       result,
       restore: () => {
@@ -14708,15 +15034,16 @@ var ProviderRouter = class {
     const result = evaluateSelection(
       want,
       {
-        hasCredential: (p) => this.available.has(p),
-        capability: (model) => getCapability(model, this.config.homeDir, want.provider)
+        hasCredential: (p) => this.available.has(this.routeOf(p, want.entry)),
+        capability: (model) => this.capabilityFor(want.provider, model, want.entry)
       },
       ctx
     );
     if (!result.ok) return result;
     const from = this.selection;
     this.selection = want;
-    this.failures.clear(want.provider, want.model);
+    this.effort = void 0;
+    this.failures.clear(this.routeOf(want.provider, want.entry));
     this.telemetry.counter(METRIC.MODEL_SWITCH, 1, {
       "epoch.model.from": modelKey(from.provider, from.model),
       "epoch.model.to": modelKey(want.provider, want.model),
@@ -14724,9 +15051,77 @@ var ProviderRouter = class {
     });
     return result;
   }
+  reloadModelEntries(entries2) {
+    this.entryTable = buildEntryTable(entries2);
+    for (const [route, opts] of [...this.available]) {
+      if (!opts.entry) continue;
+      this.available.delete(route);
+      this.factories.delete(route);
+    }
+    this.registerEntries();
+    const configured = this.refreshedSelection(this.configSelection);
+    if (configured) this.configSelection = configured;
+    else if (this.entryTable.entries.has(this.configSelection.entry))
+      this.notices.push(
+        t("provider_route.entry_no_credential", { entry: this.configSelection.entry })
+      );
+    else
+      this.notices.push(t("provider_route.entry_missing", { entry: this.configSelection.entry }));
+    const selection = this.refreshedSelection(this.selection);
+    if (selection) {
+      this.selection = selection;
+    } else if (configured) {
+      const gone = this.selection.entry;
+      this.selection = { ...configured };
+      this.effort = void 0;
+      this.notices.push(
+        this.entryTable.entries.has(gone) ? t("provider_route.entry_unusable", { entry: gone, model: entryRef(configured.entry) }) : t("provider_route.entry_removed", { entry: gone, model: entryRef(configured.entry) })
+      );
+    }
+    if (this.effort !== void 0) {
+      const state = this.getEffort();
+      const ok2 = this.effort === "off" ? state.canTurnOff : state.levels.includes(this.effort);
+      if (!ok2) this.effort = void 0;
+    }
+  }
+  refreshedSelection(sel) {
+    const entry = this.entryTable.entries.get(sel.entry);
+    if (!entry) return void 0;
+    const next = entrySelection(this.entryTable, entry, sel.origin);
+    return this.available.has(this.routeOf(next.provider, next.entry)) ? next : void 0;
+  }
   drainNotices() {
     return this.notices.splice(0, this.notices.length);
   }
+  getEffort() {
+    const entry = this.entryTable.entries.get(this.selection.entry);
+    const caps = entry?.capabilities;
+    if (!entry || !caps?.reasoning)
+      return { levels: [], canTurnOff: false, choice: null, default: null };
+    return {
+      levels: entry.reasoning?.levels ?? [],
+      canTurnOff: caps.reasoningToggle === true && caps.reasoningOnly !== true,
+      choice: this.effort ?? null,
+      default: entry.reasoning?.default ?? null
+    };
+  }
+  setEffort(choice) {
+    const state = this.getEffort();
+    if (choice === null) {
+      this.effort = void 0;
+      return true;
+    }
+    const ok2 = choice === "off" ? state.canTurnOff : state.levels.includes(choice);
+    if (ok2) this.effort = choice;
+    return ok2;
+  }
+  reasoningFor(input, ct, entry) {
+    if (input.entry || entry !== this.selection.entry) return void 0;
+    const e = this.entryTable.entries.get(entry);
+    if (!e?.capabilities?.reasoning) return void 0;
+    const choice = this.effort ?? e.reasoning?.default;
+    return reasoningArgs(choice, dialectOf(ct, e));
+  }
   getUtilityInfo() {
     const raw = this.config.models?.utility;
     if (!raw) return { selection: this.getSelection(), configured: false };
@@ -14738,149 +15133,129 @@ var ProviderRouter = class {
         issue: t("provider_route.utility_unparsable", { raw })
       };
     }
-    const provider = ref.provider ?? this.selection.provider;
-    if (!this.available.has(provider)) {
-      return {
-        selection: this.getSelection(),
-        configured: true,
-        issue: t("provider_route.utility_no_credential", { provider })
-      };
-    }
-    return {
-      selection: { provider, model: ref.model, origin: this.selection.origin },
-      configured: true
-    };
+    return this.entryUtilityInfo(ref.entry);
   }
-  initFactories(config) {
-    const haveCred = config.provider.credentials[0]?.apiKey || config.provider.apiKey;
-    if (!haveCred) {
-      throw new ProviderError(t("provider_route.no_credential"), PROVIDER_NO_CREDENTIAL, false);
-    }
-    for (const type of PROVIDER_TYPES) {
-      const key = this.resolveKey(type, config);
-      if (!key) continue;
-      const isPrimary = type === config.provider.type;
-      this.register(type, key, isPrimary ? config.provider.baseUrl : void 0);
-    }
-    if (!this.available.has(config.provider.type)) {
+  initFactories() {
+    this.registerEntries();
+    const { provider, entry } = this.configSelection;
+    if (!this.available.has(this.routeOf(provider, entry))) {
       throw new ProviderError(
-        t("provider_route.provider_no_credential", { provider: config.provider.type }),
+        t("provider_route.entry_no_credential", { entry }),
         PROVIDER_NO_CREDENTIAL,
         false
       );
     }
-    if (config.fallback) {
-      for (const fbType of config.fallback.providers) {
-        if (this.available.has(fbType)) continue;
-        const fbKey = this.getFallbackKey(fbType);
-        if (fbKey) this.register(fbType, fbKey);
-      }
+  }
+  registerEntries() {
+    for (const entry of this.entryTable.entries.values()) {
+      const key = readEntryKey(entry.id, this.config.homeDir);
+      if (!key && !entry.host && entry.provider !== "openai-compatible" && entry.provider !== "ollama")
+        continue;
+      this.available.set(this.routeOf(entry.provider, entry.id), { apiKey: key ?? "", entry });
     }
   }
-  register(type, apiKey, baseUrl) {
-    this.available.set(type, baseUrl ? { apiKey, baseUrl } : { apiKey });
-    this.factories.delete(type);
+  routeOf(provider, entry) {
+    return routeKey(this.entryTable, provider, entry);
+  }
+  capabilityFor(provider, model, entry) {
+    return applyEntryCapability(
+      getCapability(model, this.config.homeDir, provider),
+      this.entryTable.entries.get(entry)
+    );
   }
-  resolveKey(type, config) {
-    if (type === config.provider.type) {
-      return config.provider.apiKey || config.provider.credentials[0]?.apiKey;
+  resolveConfigured(config) {
+    const ref = config.model ? parseModelRef(config.model) : void 0;
+    const entry = ref ? this.entryTable.entries.get(ref.entry) : void 0;
+    if (entry) return entrySelection(this.entryTable, entry, "config");
+    throw new ProviderError(
+      ref ? t("provider_route.entry_missing", { entry: ref.entry }) : t("provider_route.no_model"),
+      PROVIDER_NO_CREDENTIAL,
+      false
+    );
+  }
+  resolveRef(ref, origin) {
+    const entry = this.entryTable.entries.get(ref.entry);
+    if (!entry) {
+      const rejection = { code: "unknown-entry", entry: ref.entry };
+      return { ok: false, reason: describeRejection(rejection), rejection };
     }
-    return this.getFallbackKey(type);
+    return entrySelection(this.entryTable, entry, origin);
   }
-  getFallbackKey(type) {
-    if (type === "ollama") return "local";
-    const envName = apiKeyEnvVar(type);
-    if (!envName) return void 0;
-    return this.keyEnv[envName]?.split(",")[0]?.trim() || void 0;
+  entryUtilityInfo(id) {
+    const entry = this.entryTable.entries.get(id);
+    if (!entry) {
+      return {
+        selection: this.getSelection(),
+        configured: true,
+        issue: t("provider_route.utility_unknown_entry", { entry: id })
+      };
+    }
+    const selection = entrySelection(this.entryTable, entry, this.selection.origin);
+    if (!this.available.has(this.routeOf(selection.provider, selection.entry))) {
+      return {
+        selection: this.getSelection(),
+        configured: true,
+        issue: t("provider_route.entry_no_credential", { entry: id })
+      };
+    }
+    return { selection, configured: true };
   }
-  async getModel(type, modelId) {
-    const cached = this.factories.get(type);
+  async getModel(route, modelId) {
+    const cached = this.factories.get(route);
     if (cached) return cached(modelId ?? this.selection.model);
-    const opts = this.available.get(type);
+    const opts = this.available.get(route);
     if (!opts) {
-      throw new ProviderError(t("provider_route.not_initialized", { provider: type }), 1004, false);
+      throw new ProviderError(
+        t("provider_route.not_initialized", { provider: route }),
+        1004,
+        false
+      );
     }
     let factory;
     try {
-      factory = await createModelFactory(type, opts);
+      factory = opts.entry ? await createEntryFactory(opts.entry, opts.apiKey || void 0) : await createModelFactory(route, opts);
     } catch (err) {
       throw new ProviderError(err instanceof Error ? err.message : String(err), 1005, false);
     }
-    this.factories.set(type, factory);
+    this.factories.set(route, factory);
     return factory(modelId ?? this.selection.model);
   }
-  rotateCredential() {
-    const creds = this.config.provider.credentials;
-    if (this.credentialIndex + 1 < creds.length) {
-      this.credentialIndex++;
-      const newCred = creds[this.credentialIndex];
-      if (!newCred) return false;
-      this.register(this.config.provider.type, newCred.apiKey, this.config.provider.baseUrl);
-      return true;
-    }
-    return false;
-  }
-  fallbackProvider(currentType, tried) {
-    if (!this.config.fallback) return null;
-    for (const fbType of this.config.fallback.providers) {
-      if (fbType === currentType) continue;
-      if (tried?.has(modelKey(fbType, defaultModelOf(fbType)))) continue;
-      if (this.available.has(fbType)) {
-        this.telemetry.counter(METRIC.PROVIDER_FALLBACK, 1, {
-          "epoch.provider.from": currentType,
-          "epoch.provider.to": fbType
-        });
-        return {
-          from: currentType,
-          fromModel: this.getModelId(),
-          to: fbType,
-          toModel: defaultModelOf(fbType),
-          reason: t("provider_route.fallback_reason")
-        };
-      }
-    }
-    return null;
-  }
   startPoint(input) {
     if (input.responseFormat && input.tools?.length) {
       throw new ProviderError(t("provider.response_format_with_tools"), 1002, false);
     }
-    const ct = input.provider ?? this.selection.provider;
-    if (input.provider && !this.available.has(input.provider)) {
-      throw new ProviderError(
-        t("provider_route.cannot_use", { provider: input.provider }),
-        1001,
-        false
-      );
+    const id = input.entry ?? this.selection.entry;
+    const entry = this.entryTable.entries.get(id);
+    const sel = entry ? entrySelection(this.entryTable, entry, "config") : void 0;
+    if (!sel || !this.available.has(this.routeOf(sel.provider, sel.entry))) {
+      throw new ProviderError(t("provider_route.cannot_use", { entry: id }), 1001, false);
     }
-    const wanted = input.model ?? (input.provider && input.provider !== this.selection.provider ? defaultModelOf(input.provider) : this.selection.model);
-    const cm = input.model ? wanted : this.avoidAbandoned(ct, wanted);
-    return { ct, cm, attempt: 0, tried: /* @__PURE__ */ new Set([modelKey(ct, cm)]) };
+    const start = input.entry ? sel : this.avoidAbandoned(sel);
+    return {
+      ct: start.provider,
+      cm: start.model,
+      entry: start.entry,
+      attempt: 0,
+      tried: /* @__PURE__ */ new Set([entryTried(start.entry)])
+    };
   }
-  avoidAbandoned(ct, cm) {
-    if (!this.failures.isAbandoned(ct, cm)) return cm;
-    const seen = /* @__PURE__ */ new Set([modelKey(ct, cm)]);
-    for (; ; ) {
-      const next = nextFallbackModel(ct, cm, seen, this.configuredFallbackModel(ct));
-      if (!next) return cm;
-      if (!this.failures.isAbandoned(ct, next)) return next;
-      seen.add(modelKey(ct, next));
-    }
+  avoidAbandoned(sel) {
+    if (!this.failures.isAbandoned(this.routeOf(sel.provider, sel.entry))) return sel;
+    const fb = this.fallbackEntry(sel.entry, /* @__PURE__ */ new Set([entryTried(sel.entry)]));
+    return fb && !this.failures.isAbandoned(this.routeOf(fb.provider, fb.entry)) ? fb : sel;
   }
   async recover(err, state) {
     const { code, recovery } = classifyProviderError(err);
     const message = describeProviderError(err);
-    const stay = { kind: "continue", ct: state.ct, cm: state.cm };
+    const stay = { kind: "continue", ct: state.ct, cm: state.cm, entry: state.entry };
     if (code === PROVIDER_ABORTED) return { kind: "give-up", message, code };
-    if (recovery === "rotate_credential" && this.rotateCredential())
-      return { ...stay, attempt: state.attempt + 1 };
     if (recovery === "retry") {
       await this.backoff(state.attempt);
       return { ...stay, attempt: state.attempt + 1 };
     }
-    this.noteFailure(state.ct, state.cm);
+    this.noteFailure(state);
     if (recovery === "abort") return { kind: "give-up", message, code };
-    const next = this.escalate(state, { sameProviderFirst: recovery === "switch_model" });
+    const next = this.escalate(state);
     if (next) return next;
     return {
       kind: "give-up",
@@ -14891,36 +15266,40 @@ var ProviderRouter = class {
       code
     };
   }
-  escalate(state, opts) {
-    if (opts.sameProviderFirst) {
-      const next = nextFallbackModel(
-        state.ct,
-        state.cm,
-        state.tried,
-        this.configuredFallbackModel(state.ct)
-      );
-      if (next) {
-        this.telemetry.counter(METRIC.MODEL_FALLBACK, 1, {
-          "epoch.model.from": modelKey(state.ct, state.cm),
-          "epoch.model.to": modelKey(state.ct, next)
-        });
-        state.tried.add(modelKey(state.ct, next));
-        return { kind: "continue", ct: state.ct, cm: next, attempt: 0 };
-      }
-    }
-    const fb = this.fallbackProvider(state.ct, state.tried);
-    if (!fb) return null;
-    state.tried.add(modelKey(fb.to, fb.toModel));
-    return { kind: "continue", ct: fb.to, cm: fb.toModel, attempt: 0 };
+  escalate(state) {
+    const target = this.fallbackEntry(state.entry, state.tried);
+    if (!target) return null;
+    this.telemetry.counter(METRIC.MODEL_FALLBACK, 1, {
+      "epoch.model.from": modelKey(state.ct, state.cm),
+      "epoch.model.to": modelKey(target.provider, target.model)
+    });
+    state.tried.add(entryTried(target.entry));
+    return {
+      kind: "continue",
+      ct: target.provider,
+      cm: target.model,
+      entry: target.entry,
+      attempt: 0
+    };
   }
-  configuredFallbackModel(ct) {
-    return ct === this.config.provider.type ? this.config.fallback?.model : void 0;
+  afterRetries(state) {
+    this.noteFailure(state);
+    return this.escalate(state);
   }
-  noteFailure(provider, model) {
-    if (!this.failures.recordFailure(provider, model)) return;
+  fallbackEntry(current, tried) {
+    const raw = this.config.fallback?.model;
+    const id = raw ? parseModelRef(raw)?.entry : void 0;
+    const entry = id ? this.entryTable.entries.get(id) : void 0;
+    if (!entry || entry.id === current || tried.has(entryTried(entry.id))) return void 0;
+    const sel = entrySelection(this.entryTable, entry, "fallback");
+    return this.available.has(this.routeOf(sel.provider, sel.entry)) ? sel : void 0;
+  }
+  noteFailure(state) {
+    if (!this.failures.recordFailure(this.routeOf(state.ct, state.entry))) return;
     this.notices.push(
       t("provider_route.give_up_model", {
-        model: modelKey(provider, model),
+        entry: state.entry,
+        model: state.cm,
         count: MODEL_GIVE_UP_THRESHOLD
       })
     );
@@ -14932,30 +15311,50 @@ var ProviderRouter = class {
   async generate(input) {
     const state = this.startPoint(input);
     const requestedModel = state.cm;
-    const messages = toModelMessages(input.messages);
+    const messagesFor = messageTranslator(input.messages, this.entryTable);
     const tools = input.tools ? toSdkTools(input.tools) : void 0;
     const output = input.responseFormat ? toOutputSpec(input.responseFormat) : void 0;
-    while (state.attempt <= this.config.retry.maxRetries) {
-      const { ct, cm } = state;
+    for (; ; ) {
+      if (state.attempt > this.config.retry.maxRetries) {
+        const next = this.afterRetries(state);
+        if (!next) {
+          throw new ProviderError(
+            t("provider_route.retries_exhausted", { count: this.config.retry.maxRetries }),
+            9999,
+            false
+          );
+        }
+        state.ct = next.ct;
+        state.cm = next.cm;
+        state.entry = next.entry;
+        state.attempt = next.attempt;
+        continue;
+      }
+      const { ct, cm, entry } = state;
       try {
-        const model = await this.getModel(ct, cm);
+        const model = await this.getModel(this.routeOf(ct, entry), cm);
+        const maxTokens = this.maxTokensFor(input, entry);
+        const effort = this.reasoningFor(input, ct, entry);
         const result = await generateText({
           model,
-          messages,
+          messages: messagesFor(ct, entry),
           tools,
           system: input.system,
           stopWhen: isStepCount(input.maxSteps ?? 1),
-          ...input.maxTokens ? { maxOutputTokens: input.maxTokens } : {},
+          ...maxTokens ? { maxOutputTokens: maxTokens } : {},
           ...input.signal ? { abortSignal: input.signal } : {},
           output,
-          providerOptions: toSdkProviderOptions(input.providerOptions)
+          providerOptions: toSdkProviderOptions(
+            mergeProviderOptions(input.providerOptions, effort?.providerOptions)
+          ),
+          ...effort ? { reasoning: effort.reasoning } : {}
         });
         const toolCalls = normalizeToolCalls(
           result.toolCalls
         );
         const steps = result.steps;
         const reasoningText = steps?.map((s) => s.reasoningText).filter(Boolean).join("\n") || void 0;
-        this.failures.recordSuccess(ct, cm);
+        this.failures.recordSuccess(this.routeOf(ct, entry));
         const usage = toTokenUsage(result.usage);
         const warnings = toProviderWarnings(result.warnings);
         const applied = input.responseFormat ? didApplyResponseFormat(result.warnings) : void 0;
@@ -14977,39 +15376,54 @@ var ProviderRouter = class {
         if (plan.kind === "give-up") throw new ProviderError(plan.message, plan.code, false);
         state.ct = plan.ct;
         state.cm = plan.cm;
+        state.entry = plan.entry;
         state.attempt = plan.attempt;
       }
     }
-    this.noteFailure(state.ct, state.cm);
-    throw new ProviderError(
-      t("provider_route.retries_exhausted", { count: this.config.retry.maxRetries }),
-      9999,
-      false
-    );
   }
   async *stream(input) {
     const state = this.startPoint(input);
     const requestedModel = state.cm;
     let emitted = false;
-    const messages = toModelMessages(input.messages);
+    const messagesFor = messageTranslator(input.messages, this.entryTable);
     const tools = input.tools ? toSdkTools(input.tools) : void 0;
     const output = input.responseFormat ? toOutputSpec(input.responseFormat) : void 0;
     let streamPartError;
-    while (state.attempt <= this.config.retry.maxRetries) {
-      const { ct, cm } = state;
+    for (; ; ) {
+      if (state.attempt > this.config.retry.maxRetries) {
+        const next = this.afterRetries(state);
+        if (!next) {
+          yield {
+            type: "error",
+            error: t("provider_route.retries_exhausted", { count: this.config.retry.maxRetries })
+          };
+          return;
+        }
+        state.ct = next.ct;
+        state.cm = next.cm;
+        state.entry = next.entry;
+        state.attempt = next.attempt;
+        continue;
+      }
+      const { ct, cm, entry } = state;
       streamPartError = void 0;
       try {
-        const model = await this.getModel(ct, cm);
+        const model = await this.getModel(this.routeOf(ct, entry), cm);
+        const maxTokens = this.maxTokensFor(input, entry);
+        const effort = this.reasoningFor(input, ct, entry);
         const result = streamText({
           model,
-          messages,
+          messages: messagesFor(ct, entry),
           tools,
           system: input.system,
           stopWhen: isStepCount(input.maxSteps ?? 1),
-          ...input.maxTokens ? { maxOutputTokens: input.maxTokens } : {},
+          ...maxTokens ? { maxOutputTokens: maxTokens } : {},
           ...input.signal ? { abortSignal: input.signal } : {},
           output,
-          providerOptions: toSdkProviderOptions(input.providerOptions)
+          providerOptions: toSdkProviderOptions(
+            mergeProviderOptions(input.providerOptions, effort?.providerOptions)
+          ),
+          ...effort ? { reasoning: effort.reasoning } : {}
         });
         for await (const part of result.fullStream) {
           const typed = part;
@@ -15048,7 +15462,7 @@ var ProviderRouter = class {
         const warnings = toProviderWarnings(raw);
         const applied = input.responseFormat ? didApplyResponseFormat(raw) : void 0;
         this.noteResponseFormat(input, applied ?? true, state);
-        this.failures.recordSuccess(ct, cm);
+        this.failures.recordSuccess(this.routeOf(ct, entry));
         yield {
           type: "finish",
           ...usage ? { usage } : {},
@@ -15073,14 +15487,15 @@ var ProviderRouter = class {
         }
         state.ct = plan.ct;
         state.cm = plan.cm;
+        state.entry = plan.entry;
         state.attempt = plan.attempt;
       }
     }
-    this.noteFailure(state.ct, state.cm);
-    yield {
-      type: "error",
-      error: t("provider_route.retries_exhausted", { count: this.config.retry.maxRetries })
-    };
+  }
+  maxTokensFor(input, entry) {
+    const cap = entry ? this.entryTable.entries.get(entry)?.maxOutputTokens : void 0;
+    if (!cap) return input.maxTokens;
+    return input.maxTokens ? Math.min(input.maxTokens, cap) : cap;
   }
   async backoff(n) {
     await new Promise(
@@ -15097,24 +15512,22 @@ var ProviderRouter = class {
     return this.selection.provider;
   }
   getApiKeyHint() {
-    if (this.selection.provider === this.config.provider.type) {
-      const c = this.config.provider.credentials[this.credentialIndex];
-      return c ? maskApiKey(c.apiKey) : "none";
-    }
-    const opts = this.available.get(this.selection.provider);
-    return opts ? maskApiKey(opts.apiKey) : "none";
+    const { provider, entry } = this.selection;
+    const opts = this.available.get(this.routeOf(provider, entry));
+    return opts?.apiKey ? maskApiKey(opts.apiKey) : "none";
   }
   getCapability() {
-    return getCapability(this.selection.model, this.config.homeDir, this.selection.provider);
+    const { provider, model, entry } = this.selection;
+    return this.capabilityFor(provider, model, entry);
   }
   async probeImageSupport() {
-    const { provider, model } = this.selection;
+    const { provider, model, entry } = this.selection;
     const home = this.config.homeDir;
     const cached = readImageProbe(home, provider, model);
     if (cached !== void 0) return cached;
     let lm;
     try {
-      lm = await this.getModel(provider, model);
+      lm = await this.getModel(this.routeOf(provider, entry), model);
     } catch {
       return false;
     }
@@ -15135,6 +15548,21 @@ var ProviderRouter = class {
     });
   }
 };
+function messageTranslator(messages, table) {
+  const cache = /* @__PURE__ */ new Map();
+  return (type, entry) => {
+    const inline = entryAcceptsToolMedia(table, type, entry);
+    let hit = cache.get(inline);
+    if (!hit) {
+      hit = toModelMessages(messages, { toolMediaInline: inline });
+      cache.set(inline, hit);
+    }
+    return hit;
+  };
+}
+function entryTried(id) {
+  return `@${id}`;
+}
 var STATIC_MODEL_CATALOG = {
   openai: [
     "gpt-4o",
@@ -15195,6 +15623,9 @@ var PROVIDER_DISCOVERY = {
   perplexity: { baseUrl: "https://api.perplexity.ai", auth: "bearer" },
   togetherai: { baseUrl: "https://api.together.xyz/v1", auth: "bearer" }
 };
+function discoverySpec(provider) {
+  return PROVIDER_DISCOVERY[provider];
+}
 function cachePath(homeDir, provider) {
   return join(homeDir, "cache", `models_${provider}.json`);
 }
@@ -15223,14 +15654,14 @@ function saveCache2(homeDir, provider, models) {
   }
 }
 function modelListCandidates(baseUrl) {
-  const base = baseUrl.trim().replace(/\/+$/, "");
-  if (!base) return [];
-  const alt = base.endsWith("/v1") ? base.slice(0, -"/v1".length) : `${base}/v1`;
-  return alt === base ? [base] : [base, alt];
+  const base2 = baseUrl.trim().replace(/\/+$/, "");
+  if (!base2) return [];
+  const alt = base2.endsWith("/v1") ? base2.slice(0, -"/v1".length) : `${base2}/v1`;
+  return alt === base2 ? [base2] : [base2, alt];
 }
-function buildRequest(base, auth, apiKey) {
+function buildRequest(base2, auth, apiKey) {
   const headers = { Accept: "application/json" };
-  let url = `${base}/models`;
+  let url = `${base2}/models`;
   if (auth === "x-api-key") {
     headers["x-api-key"] = apiKey;
     headers["anthropic-version"] = "2023-06-01";
@@ -15253,9 +15684,9 @@ function parseModelList(payload) {
   return [...ids, ...names].filter((v) => typeof v === "string" && v.length > 0).map((id) => id.startsWith("models/") ? id.slice("models/".length) : id);
 }
 async function fetchFromApi(baseUrl, apiKey, auth) {
-  for (const base of modelListCandidates(baseUrl)) {
+  for (const base2 of modelListCandidates(baseUrl)) {
     try {
-      const { url, headers } = buildRequest(base, auth, apiKey);
+      const { url, headers } = buildRequest(base2, auth, apiKey);
       const resp = await fetch(url, { headers, signal: AbortSignal.timeout(1e4) });
       if (!resp.ok) continue;
       const models = parseModelList(await resp.json());
@@ -15268,8 +15699,8 @@ async function fetchFromApi(baseUrl, apiKey, auth) {
 }
 async function fetchOllamaModels() {
   try {
-    const base = process.env.OLLAMA_BASE_URL || "http://localhost:11434";
-    const resp = await fetch(`${base}/api/tags`, { signal: AbortSignal.timeout(5e3) });
+    const base2 = process.env.OLLAMA_BASE_URL || "http://localhost:11434";
+    const resp = await fetch(`${base2}/api/tags`, { signal: AbortSignal.timeout(5e3) });
     if (!resp.ok) return [];
     const data = await resp.json();
     return (data.models ?? []).map((m) => m.name).filter((n) => !!n);
@@ -15285,9 +15716,9 @@ async function discoverModels(homeDir, provider, apiKey, baseUrl) {
   }
   if (apiKey) {
     const spec = PROVIDER_DISCOVERY[provider];
-    const base = baseUrl?.trim() || spec?.baseUrl || "";
-    if (base) {
-      const models = await fetchFromApi(base, apiKey, spec?.auth ?? "bearer");
+    const base2 = baseUrl?.trim() || spec?.baseUrl || "";
+    if (base2) {
+      const models = await fetchFromApi(base2, apiKey, spec?.auth ?? "bearer");
       if (models) {
         saveCache2(homeDir, provider, models);
         return { models, source: "live" };
@@ -15305,6 +15736,102 @@ function clearModelCache(homeDir, provider) {
   } catch {
   }
 }
+// src/provider/entry-probe.ts
+function listTarget(entry) {
+  if (entry.rawUrl) return void 0;
+  if (entry.provider === "ollama") return void 0;
+  const spec = discoverySpec(entry.provider);
+  const base2 = entry.baseUrl?.trim() || spec?.baseUrl;
+  if (!base2) return void 0;
+  const anthropicLike = entry.provider === "anthropic" || entry.provider === "openai-compatible" && entry.protocol === "anthropic-messages";
+  const auth = anthropicLike ? "x-api-key" : spec?.auth ?? "bearer";
+  return { base: base2, auth };
+}
+async function listAt(base2, auth, apiKey) {
+  let last = { models: null };
+  for (const candidate of modelListCandidates(base2)) {
+    try {
+      const { url, headers } = buildRequest(candidate, auth, apiKey);
+      const resp = await fetch(url, { headers, signal: AbortSignal.timeout(1e4) });
+      if (!resp.ok) {
+        last = { models: null, httpStatus: resp.status };
+        if (resp.status === 401 || resp.status === 403) return last;
+        continue;
+      }
+      return { models: parseModelList(await resp.json()), httpStatus: resp.status };
+    } catch {
+      last = { models: null, network: true };
+    }
+  }
+  return last;
+}
+async function listEntryModels(entry, apiKey) {
+  const target = listTarget(entry);
+  if (!target) return [];
+  const got = await listAt(target.base, target.auth, apiKey ?? "");
+  return got.models ?? [];
+}
+function redact(text, apiKey) {
+  if (!apiKey || apiKey.length < 8) return text;
+  return text.split(apiKey).join(maskApiKey(apiKey));
+}
+async function testModelEntry(entry, apiKey) {
+  const started = Date.now();
+  const elapsed = () => Date.now() - started;
+  const target = listTarget(entry);
+  let models = [];
+  let listed = false;
+  if (target) {
+    const got = await listAt(target.base, target.auth, apiKey ?? "");
+    listed = got.models !== null;
+    if (got.httpStatus === 401 || got.httpStatus === 403) {
+      return { code: "auth", models: [], httpStatus: got.httpStatus, latencyMs: elapsed() };
+    }
+    if (got.network) return { code: "network", models: [], latencyMs: elapsed() };
+    if (got.models) {
+      models = got.models;
+      if (models.includes(entry.model)) {
+        return { code: "ok", models, ...httpOf(got), latencyMs: elapsed() };
+      }
+    }
+  }
+  if (!entry.model) {
+    return listed ? { code: "ok", models, latencyMs: elapsed() } : { code: "need-model", models: [], latencyMs: elapsed() };
+  }
+  try {
+    const factory = await createEntryFactory(entry, apiKey);
+    await generateText({
+      model: factory(entry.model),
+      messages: [{ role: "user", content: "ping" }],
+      maxOutputTokens: 1,
+      abortSignal: AbortSignal.timeout(2e4)
+    });
+    return { code: "ok", models, latencyMs: elapsed() };
+  } catch (err) {
+    const status = extractStatus(err);
+    const detail = redact(describeProviderError(err), apiKey);
+    return {
+      code: classify(status, detail),
+      models,
+      ...status ? { httpStatus: status } : {},
+      latencyMs: elapsed(),
+      detail
+    };
+  }
+}
+function httpOf(got) {
+  return got.httpStatus ? { httpStatus: got.httpStatus } : {};
+}
+function classify(status, detail) {
+  if (status === 401 || status === 403) return "auth";
+  if (status === 404 || /model[^.]*not.?(found|exist)|no such model|does not exist/i.test(detail)) {
+    return "model-not-found";
+  }
+  if (status === void 0 && /fetch failed|ECONNREFUSED|ENOTFOUND|ETIMEDOUT|timeout|aborted/i.test(detail)) {
+    return "network";
+  }
+  return "error";
+}
 var SETTING_WRITE_LAYERS = ["user", "projectLocal"];
 function isSettingWriteLayer(value) {
   return SETTING_WRITE_LAYERS.includes(value);
@@ -15429,6 +15956,25 @@ function writeSettingValue(req) {
   }
   return req.layer === "user" ? writeUserYaml(req.path, req.key, value) : writeSettingsJson(req.path, req.key, value);
 }
+var UNSETTABLE_USER_KEYS = ["models.utility", "fallback.model"];
+function unsetUserSetting(path, key) {
+  const text = existsSync(path) ? readFileSync(path, "utf-8") : "";
+  const before = asMapping(parseYaml(text));
+  if (before === null) return { ok: false, reason: "unwritable-file" };
+  const dot = key.indexOf(".");
+  const section = key.slice(0, dot);
+  const field = key.slice(dot + 1);
+  const beforeSection = section in before ? asMapping(before[section]) : {};
+  if (beforeSection === null) return { ok: false, reason: "unwritable-file" };
+  if (!(field in beforeSection)) return { ok: true, value: "" };
+  const next = unsetSectionField(text, section, field);
+  const after = asMapping(parseYaml(next));
+  if (after === null) return { ok: false, reason: "unwritable-file" };
+  const afterSection = section in after ? asMapping(after[section]) : {};
+  const intact = afterSection !== null && !(field in afterSection) && sameKeysAndValues(before, after, section) && sameKeysAndValues(beforeSection, afterSection, field);
+  if (!intact) return { ok: false, reason: "unwritable-file" };
+  return commit(path, next, 384, "");
+}
 function writeUserYaml(path, key, value) {
   const text = existsSync(path) ? readFileSync(path, "utf-8") : "";
   const before = asMapping(parseYaml(text));
@@ -18819,7 +19365,7 @@ var GoalService = class {
   }
 };
 // src/goal/provider.ts
-function withGoalPrompt(base, view) {
+function withGoalPrompt(base2, view) {
   const decorate = (input) => {
     const now = view();
     if (!now) return input;
@@ -18828,9 +19374,9 @@ function withGoalPrompt(base, view) {
 
 ${block}` } : input;
   };
-  const wrapped = Object.create(base);
-  wrapped.generate = (input) => base.generate(decorate(input));
-  wrapped.stream = (input) => base.stream(decorate(input));
+  const wrapped = Object.create(base2);
+  wrapped.generate = (input) => base2.generate(decorate(input));
+  wrapped.stream = (input) => base2.stream(decorate(input));
   return wrapped;
 }
 // src/goal/engine.ts
@@ -19339,9 +19885,9 @@ function matchPreauthorization(policy, target) {
   }
   return null;
 }
-function mergeHeadlessPolicy(base, override) {
+function mergeHeadlessPolicy(base2, override) {
   return {
-    ...base,
+    ...base2,
     ...override?.allowTools ? { allowTools: override.allowTools } : {},
     ...override?.allowOperations ? { allowOperations: override.allowOperations } : {}
   };
@@ -21097,14 +21643,14 @@ var TextGuard = class {
   }
   consume(unit) {
     const hits = this.host.scan(this.host.skipCodeBlocks ? this.blankCode(unit) : unit);
-    const base = this.consumed;
+    const base2 = this.consumed;
     this.consumed += unit.length;
     if (hits.length === 0) {
       this.out += unit;
       return unit;
     }
     for (const hit of hits) {
-      this.hits.push({ ...hit, start: hit.start + base, end: hit.end + base });
+      this.hits.push({ ...hit, start: hit.start + base2, end: hit.end + base2 });
     }
     const action = strongestOf(hits);
     if (action === "block") {
@@ -21729,7 +22275,7 @@ function loadLexiconDir(dir, source) {
   }
   const out = { rules: [], exempt: [], issues: [] };
   for (const file of files.sort()) {
-    const spec = classify(file);
+    const spec = classify2(file);
     if (!spec) {
       out.issues.push({
         path: file,
@@ -21753,14 +22299,14 @@ function loadLexiconDir(dir, source) {
   }
   return out;
 }
-function classify(file) {
-  const base = file.slice(0, -".txt".length);
-  if (base === "exempt") return { kind: "exempt" };
-  if (base.endsWith(".regex")) {
-    const category = base.slice(0, -".regex".length);
+function classify2(file) {
+  const base2 = file.slice(0, -".txt".length);
+  if (base2 === "exempt") return { kind: "exempt" };
+  if (base2.endsWith(".regex")) {
+    const category = base2.slice(0, -".regex".length);
     return CATEGORY_SET.has(category) ? { kind: "regex", category } : null;
   }
-  return CATEGORY_SET.has(base) ? { kind: "terms", category: base } : null;
+  return CATEGORY_SET.has(base2) ? { kind: "terms", category: base2 } : null;
 }
 function collect3(content, file, spec, source, out) {
   const lines = content.split("\n");
@@ -22859,8 +23405,8 @@ function copyTree(from, to, label, budget, issues, lang) {
   return left;
 }
 function defaultName(source) {
-  const base = basename(source);
-  return extname(base).toLowerCase() === ".md" ? base.slice(0, -3) : base;
+  const base2 = basename(source);
+  return extname(base2).toLowerCase() === ".md" ? base2.slice(0, -3) : base2;
 }
 function skillSegmentIssue(segment, lang) {
   if (segment.length === 0) return t("skill.import_bad_name_empty", void 0, lang);
@@ -23043,8 +23589,8 @@ function loadOne(mdFile, catPath, category, dirName, spec, skills, issues) {
   const parsed = parseSkillFrontmatter(raw, label);
   issues.push(...parsed.issues);
   const declared = parsed.fm.name?.trim();
-  const base = declared ? declared : dirName;
-  const name = spec.prefix ? `${spec.prefix}:${base}` : base;
+  const base2 = declared ? declared : dirName;
+  const name = spec.prefix ? `${spec.prefix}:${base2}` : base2;
   const previous = skills.get(name);
   if (previous && previous.scope !== scope) {
     issues.push({
@@ -23201,9 +23747,9 @@ var SkillSystem = class {
     const indexName = declared ? declared : name;
     if (this.skills.has(indexName)) throw new Error(`Skill "${indexName}" already exists`);
     const dir = join(this.skillsDir, category, indexName);
-    const base = resolve(this.skillsDir);
+    const base2 = resolve(this.skillsDir);
     const resolved = resolve(dir);
-    if (resolved === base || !resolved.startsWith(base + sep)) {
+    if (resolved === base2 || !resolved.startsWith(base2 + sep)) {
       throw new Error(
         `Skill name or category escapes the skills directory: ${category}/${indexName}`
       );
@@ -23252,12 +23798,12 @@ var SkillSystem = class {
     this.invalidateCache();
   }
   resolveInsideSkill(skillPath, relPath) {
-    const base = resolve(skillPath);
+    const base2 = resolve(skillPath);
     const resolved = resolve(join(skillPath, relPath));
-    if (resolved !== base && !resolved.startsWith(base + sep)) {
+    if (resolved !== base2 && !resolved.startsWith(base2 + sep)) {
       throw new Error("Path traversal denied");
     }
-    const realBase = realpathSync(base);
+    const realBase = realpathSync(base2);
     const realTarget = realpathOfDeepestExisting(resolved);
     if (realTarget !== realBase && !realTarget.startsWith(realBase + sep)) {
       throw new Error("Path traversal denied");
@@ -24281,7 +24827,7 @@ var ContextCompressor = class {
   }
   async generateSummary(middleText, instruction, plan, goal) {
     try {
-      const base = this.lastSummary ? `Update the following summary with new conversation content. Keep the same structure.
+      const base2 = this.lastSummary ? `Update the following summary with new conversation content. Keep the same structure.
 
 ## Previous Summary
 ${this.lastSummary}
@@ -24293,9 +24839,9 @@ ${SUMMARY_TEMPLATE}
 
 ## Conversation
 ${middleText}`;
-      const withPlan = plan?.trim() ? `${base}
+      const withPlan = plan?.trim() ? `${base2}
 
-${planSection(plan.trim())}` : base;
+${planSection(plan.trim())}` : base2;
       const withGoal = goal?.trim() ? `${withPlan}
 
 ${goalSection(goal.trim())}` : withPlan;
@@ -24365,10 +24911,10 @@ var SCOPES = ["directory", "directory-tree"];
 function describe14(err) {
   return err instanceof Error ? err.message : String(err);
 }
-function covers(base, target, scope) {
-  if (samePath(base, target)) return true;
+function covers(base2, target, scope) {
+  if (samePath(base2, target)) return true;
   if (scope === "directory") return false;
-  const rel = relative(base, target);
+  const rel = relative(base2, target);
   return !rel.startsWith("..") && !isAbsolute(rel);
 }
 var TrustManager = class {
@@ -24384,10 +24930,10 @@ var TrustManager = class {
     let bestLen = -1;
     let best;
     for (const record of this.records) {
-      const base = resolve(record.path);
-      if (!covers(base, target, record.scope)) continue;
-      if (base.length > bestLen || base.length === bestLen && record.level === "untrusted") {
-        bestLen = base.length;
+      const base2 = resolve(record.path);
+      if (!covers(base2, target, record.scope)) continue;
+      if (base2.length > bestLen || base2.length === bestLen && record.level === "untrusted") {
+        bestLen = base2.length;
         best = record;
       }
     }
@@ -24883,4 +25429,4 @@ function trunc(stdout, stderr) {
  *    `--tree` 的命令帮助里，让用户自己知道 `--tree` 意味着什么。
  */
 
-export { ABOUT_DESC_MAX_CHARS, ABOUT_README_MAX_CHARS, AGENT_ROLE_DIAG_MODULE, ARTIFACT_MAX_TOTAL_BYTES, ARTIFACT_RETENTION_DEFAULTS, ATTACHMENT_MAX_TOTAL_BYTES, ATTACHMENT_RETENTION_DEFAULTS, AgentLoop, AppearanceStore, ApprovalCache, BLOCKED_TOOLS, BudgetGuard, BudgetStore, CHECKPOINT_MAX_TOTAL_BYTES, CLAUDE_EVENT_NAMES, CLAUDE_TOOL_NAMES, CODE_MODE_LIMITS, CODE_MODE_SDK_TAG, CONFIG_KEYS, CURRENT_CONFIG_VERSION, CheckpointManager, CheckpointStore, CodeSandbox, ComplianceEngine, ContextCompressor, DEFAULT_COMPLIANCE_ACTIONS, DEFAULT_COMPLIANCE_SETTINGS, DEFAULT_COMPRESSION_THRESHOLD, DEFAULT_GOAL_MAX_ROUNDS, DEFAULT_MAX_HOLD_CHARS, DelegateManager, EMPTY_RULES, EPOCH_DISK_LEDGER, EpochConfigSchema, FTS_TABLES, FTS_TRIGGERS, GOAL_BLOCK_CODES, GoalService, GoalStore, HEADLESS_AUDIT_CODES, HookManager, INSTRUCTION_BUDGET_CHARS, INSTRUCTION_FILES, ImageLoadError, ImportTrustStore, LAUNCHD_LABEL_PREFIX, LOCK_HEARTBEAT_MS, LOCK_STALE_MS, LastOpenSessions, MARKETPLACE_DISPLAY_FIELDS, MARKETPLACE_FILE, MAX_AUDIT_ENTRIES, MAX_COMMAND_DEPTH, MAX_GOAL_MAX_ROUNDS, MAX_IMPORT_DEPTH, MAX_LAST_OPEN_SESSIONS, MAX_OBJECTIVE_CHARS, MAX_REASON_CHARS, MAX_RECENT_WORKSPACES, MODEL_GIVE_UP_THRESHOLD, MULTIMODAL_DEFAULTS, ManagedPolicyError, ManagedSettingsSchema, MemoryManager, ModelFailureTracker, NOMINAL_TOTAL_BYTES, NO_REVEALED_TOOLS, PACK_EXCLUDES, PACK_MAX_BYTES, PACK_MAX_FILES, PERMISSION_AUDIT_CODES, PLUGIN_ICON_MAX_BYTES, PLUGIN_LAYOUT, PLUGIN_MANIFEST_FILE, PLUGIN_MANIFEST_KEYS, PLUGIN_NAME_PATTERN, PLUGIN_ROOT_ENV, PLUGIN_ROOT_TOKEN, PLUGIN_VISIBILITY, POLICY_DECISIONS, PROBE_VERSION, PROJECT_AGENTS_SUBDIR, PROVIDER_NO_CREDENTIAL, PermissionManager, PlanModeState, PluginAuthorSchema, PluginStore, PolicyRuleSchema, ProviderError, ProviderRouter, RECORDING_KEEP_RUNS, RECORDING_MAX_BYTES, ROLE_FRONTMATTER_SCHEMA, RUN_CODE_TOOL, RecentWorkspaces, SANDBOX_COVERS, SANDBOX_EXCLUDES, SCALAR_KEYS, SCHEDULE_DEFAULTS, SCHEDULE_DEFAULT_ALLOWLIST, SCHEDULE_FORM_BUDGET_USD, SCHEDULE_ISSUE_CODES, SCHTASKS_FOLDER, SESSION_MESSAGES_READ_TOOL, SESSION_MESSAGES_SEARCH_TOOL, SESSION_QUERY_TOOLS, SESSION_SEARCH_TOOL, SESSION_TRACE_TOOL, SETTINGS_LAYER_ORDER, SETTING_WRITE_KEYS, SETTING_WRITE_LAYERS, SKILL_ASSET_DIRS, SKILL_CREATE_TOOL, SKILL_EDIT_TOOL, SKILL_FILE, SKILL_PATCH_TOOL, SKILL_VIEW_TOOL, SKILL_WRITE_FILE_TOOL, SLASH_COMMANDS_DIAG_MODULE, ScheduleRecorder, ScheduleRegistrar, ScheduleStore, SessionManager, SessionQueries, SessionReferences, SettingsFileError, SettingsFileSchema, SkillLearner, SkillSystem, TOOL_SEARCH_TOOL, TaskNoticeTracker, ToolRegistry, TrackerDB, TrustManager, Workspace, acquireScheduleLock, addMarketplace, addUsage, admitArtifact, admitArtifacts, affectedPaths, approvalEntryFor, approvalRootFor, artifactLaunchArgv, artifactOpenRefusal, assertLevelAllowed, blockedRoleTools, buildContextBreakdown, buildFireArgv, buildFtsMatchQuery, buildSchemaExports, buildSystemPrompt, buildTrigramMatchQuery, builtinRoles, checkEpochVersion, checkFtsHealth, checkShadowing, classifyPersistFailure, classifyProviderError, clearModelCache, coalesceRecording, codeModeWorkerPath, commandNameFromRelPath, compileRuleLists, compressionOptions, computeCost, computeCostMicros, computeExecHash, countRules, createAllowAllGate, createAllowAllImportGate, createAskQuestionTool, createCodeExecTool, createDelegateTool, createDenyAllGate, createDenyAllImportGate, createGoalTool, createImportGate, createMemoryTool, createPlanModeTools, createRoleFile, createRoleScope, createRunCodeTool, createScheduleDraftTool, createSessionMessagesReadTool, createSessionMessagesSearchTool, createSessionSearchTool, createSessionSearchTools, createSessionTraceTool, createSkillViewTool, createSkillWriteTools, createTodoTool, createToolRevealState, createToolScope, createToolSearchTool, createTrustGate, currentEpochVersion, decideImport, decideTrust, defaultConfig, defaultModelOf, describeArtifactRefusal, describeBackgroundTask, describeHeadlessPolicy, describeIsolation, describeJsonError, diagnoseSchedules, discoverMarkdown, discoverModels, discoverProject, displayAllows, displayCurrency, draftCommandLine, draftWidening, escapeRuleContent, estimateImageTokens, estimateRunTokens, estimateTokens, evaluateSelection, expandCommand, expandImports, explainSetting, extractArchive, findInstructionFiles, findProjectInstructions, findRole, formatBytes, formatSkillIndex, formatUsd, gateForTool, getCapability, getConfigIssues, getConfigOrigins, getImportGate, getTrustGate, grantedPathsFor, hasDedicatedExecContent, hasExecTierContent, hasPromptCaching, hasProviderCredentials, hasReadTierContent, imageFromBase64, imageFromPath, imagePartTokens, importParts, importSkills, installPlugin, instructionDirs, instructionNotices, intervalSlots, inventoryProjectExtensions, inventoryTotal, isBlockCode, isCodeModeDeferred, isEmptyRules, isGoalPhase, isNonInteractive, isReadOnlySubCall, isSettingWriteLayer, isTransientPersistFailure, isValidInterval, isValidPluginName, isWithinWindow, isWritableSettingKey, labelSlug, layerRank, listRunningSchedules, listSessionCandidates, listWorkspaceFiles, loadCommandDefinitions, loadCommandFile, loadCommands, loadConfig, loadHookSources, loadKeybindings, loadLexiconDir, loadLexiconFiles, loadPlugins, loadPolicyFiles, loadPolicyRules, loadRoleDefinitions, loadRoleDir, loadedImports, localDateString, managedSwitchNotes, mapClaudeToolName, mapEpochToolName, mapOperationType, matchPreauthorization, matchRuleLists, matchesHook, mentionsPluginRoot, mergeHeadlessPolicy, mergeRoles, mergeSchedulePatch, microsToUsd, modelListCandidates, needsAllowlist, nextFallbackModel, nextRunAt, noConfigOrigins, noManagedPolicy, noPlugins, normalizeTrigger, openArtifact, originOf, packFileName, packPlugin, parseClaudeSettingsHooks, parseClock, parseDate, parseFrontmatter, parseHooksConfig, parseHooksConfigVerbose, parseImportLine, parseModelList, parseRoleDefinition, parseScheduleDraft, parseSkillFrontmatter, parseTrigger, pendingImageTokens, persistFailureCode, persistParts, persistToolResults, persistedUsage, planPack, previewSkillImport, pricingFor, projectEntryForDisplay, pruneArtifacts, pruneAttachments, pruneRecordings, pruneSchedules, readImageSize, readMarketplaces, readPluginAbout, readPluginIcon, readPluginManifest, readPluginRecords, readProviderKeyEnv, readRecording, readSessionSurface, reclaimFtsSpace, redactLine, refreshOpenRouterMetadata, removeMarketplace, removeRecordings, removeRoleFile, removeSessionArtifacts, removeSessionAttachments, renderImportTree, renderProjectContext, renderSdkDeclaration, renderSelfIndex, repairSchedules, resolveArtifactRetention, resolveCodeModeWorker, resolveComplianceDirs, resolveEntrySource, resolveInWorkspace, resolveMarketplaceRef, resolveMentions, resolveMultimodalPolicy, resolvePolicyDirs, resolvePricingAt, resolveProjectRoot, resolveScheduleBackend, resolveSessionReference, resolveSessionVisibility, resolveSettings, resolveSkillDirs, resolveSource, resolveTar, resolveWorkspace, restoreParts, revealScopedProvider, roleScopedProvider, roleSourceLabel, ruleCovers, ruleFromString, ruleToString, runCode, runCommand2 as runCommand, sanitizeArgNames, sanitizeCommand, sanitizeFtsQuery, sanitizePath, sanitizeToolOutput, scanInstructions, scanPluginDir, scanSkillDirs, searchMarketplaces, setDisplayCurrency, setImportGate, setPluginEnabled, setTrustGate, settingValueChoices, settingValueKind, settingWriteApply, settingWriteLayers, settingWriteTargets, skillIndexDescription, skillIndexResidency, skillIndexStats, sniffMediaType, splitFrontmatter, staticToolProvider, stripArtifactData, substitutePluginRoot, suggestRuleFromApproval, systemOpenArgv, systemPromptSegments, toPosix, toolDefinitionTokens, toolMatches, toolTableTokens, totalTokens, traceSession, triggerPeriodMs, unescapeRuleContent, uninstallPlugin, unknownRoleSkills, unknownRoleTools, unloadedInstructionFiles, updateMarketplace, updatePlugin, usdToMicros, validateSchedule, validateTrigger, validateWindow, withGoalCompression, withGoalPrompt, workspaceDisplayPath, writeSettingValue };
+export { ABOUT_DESC_MAX_CHARS, ABOUT_README_MAX_CHARS, AGENT_ROLE_DIAG_MODULE, ARTIFACT_MAX_TOTAL_BYTES, ARTIFACT_RETENTION_DEFAULTS, ATTACHMENT_MAX_TOTAL_BYTES, ATTACHMENT_RETENTION_DEFAULTS, AgentLoop, AppearanceStore, ApprovalCache, BLOCKED_TOOLS, BudgetGuard, BudgetStore, CHECKPOINT_MAX_TOTAL_BYTES, CLAUDE_EVENT_NAMES, CLAUDE_TOOL_NAMES, CODE_MODE_LIMITS, CODE_MODE_SDK_TAG, CONFIG_KEYS, CURRENT_CONFIG_VERSION, CheckpointManager, CheckpointStore, CodeSandbox, ComplianceEngine, ContextCompressor, DEFAULT_COMPLIANCE_ACTIONS, DEFAULT_COMPLIANCE_SETTINGS, DEFAULT_COMPRESSION_THRESHOLD, DEFAULT_GOAL_MAX_ROUNDS, DEFAULT_MAX_HOLD_CHARS, DelegateManager, EMPTY_RULES, EPOCH_DISK_LEDGER, EpochConfigSchema, FTS_TABLES, FTS_TRIGGERS, GOAL_BLOCK_CODES, GoalService, GoalStore, HEADLESS_AUDIT_CODES, HookManager, INSTRUCTION_BUDGET_CHARS, INSTRUCTION_FILES, ImageLoadError, ImportTrustStore, LAUNCHD_LABEL_PREFIX, LOCK_HEARTBEAT_MS, LOCK_STALE_MS, LastOpenSessions, MARKETPLACE_DISPLAY_FIELDS, MARKETPLACE_FILE, MAX_AUDIT_ENTRIES, MAX_COMMAND_DEPTH, MAX_GOAL_MAX_ROUNDS, MAX_IMPORT_DEPTH, MAX_LAST_OPEN_SESSIONS, MAX_OBJECTIVE_CHARS, MAX_REASON_CHARS, MAX_RECENT_WORKSPACES, MODEL_ENTRIES_FILE, MODEL_GIVE_UP_THRESHOLD, MULTIMODAL_DEFAULTS, ManagedPolicyError, ManagedSettingsSchema, MemoryManager, ModelFailureTracker, NOMINAL_TOTAL_BYTES, NO_REVEALED_TOOLS, PACK_EXCLUDES, PACK_MAX_BYTES, PACK_MAX_FILES, PERMISSION_AUDIT_CODES, PLUGIN_ICON_MAX_BYTES, PLUGIN_LAYOUT, PLUGIN_MANIFEST_FILE, PLUGIN_MANIFEST_KEYS, PLUGIN_NAME_PATTERN, PLUGIN_ROOT_ENV, PLUGIN_ROOT_TOKEN, PLUGIN_VISIBILITY, POLICY_DECISIONS, PROBE_VERSION, PROJECT_AGENTS_SUBDIR, PROVIDER_NO_CREDENTIAL, PermissionManager, PlanModeState, PluginAuthorSchema, PluginStore, PolicyRuleSchema, ProviderError, ProviderRouter, RECORDING_KEEP_RUNS, RECORDING_MAX_BYTES, ROLE_FRONTMATTER_SCHEMA, RUN_CODE_TOOL, RecentWorkspaces, SANDBOX_COVERS, SANDBOX_EXCLUDES, SCALAR_KEYS, SCHEDULE_DEFAULTS, SCHEDULE_DEFAULT_ALLOWLIST, SCHEDULE_FORM_BUDGET_USD, SCHEDULE_ISSUE_CODES, SCHTASKS_FOLDER, SESSION_MESSAGES_READ_TOOL, SESSION_MESSAGES_SEARCH_TOOL, SESSION_QUERY_TOOLS, SESSION_SEARCH_TOOL, SESSION_TRACE_TOOL, SETTINGS_LAYER_ORDER, SETTING_WRITE_KEYS, SETTING_WRITE_LAYERS, SKILL_ASSET_DIRS, SKILL_CREATE_TOOL, SKILL_EDIT_TOOL, SKILL_FILE, SKILL_PATCH_TOOL, SKILL_VIEW_TOOL, SKILL_WRITE_FILE_TOOL, SLASH_COMMANDS_DIAG_MODULE, ScheduleRecorder, ScheduleRegistrar, ScheduleStore, SessionManager, SessionQueries, SessionReferences, SettingsFileError, SettingsFileSchema, SkillLearner, SkillSystem, TOOL_SEARCH_TOOL, TaskNoticeTracker, ToolRegistry, TrackerDB, TrustManager, UNSETTABLE_USER_KEYS, Workspace, acquireScheduleLock, addMarketplace, addUsage, admitArtifact, admitArtifacts, affectedPaths, approvalEntryFor, approvalRootFor, artifactLaunchArgv, artifactOpenRefusal, assertLevelAllowed, blockedRoleTools, buildContextBreakdown, buildFireArgv, buildFtsMatchQuery, buildSchemaExports, buildSystemPrompt, buildTrigramMatchQuery, builtinRoles, capabilityOfRef, checkEpochVersion, checkFtsHealth, checkShadowing, classifyPersistFailure, classifyProviderError, clearModelCache, coalesceRecording, codeModeWorkerPath, commandNameFromRelPath, compileRuleLists, compressionOptions, computeCost, computeCostMicros, computeExecHash, countRules, createAllowAllGate, createAllowAllImportGate, createAskQuestionTool, createCodeExecTool, createDelegateTool, createDenyAllGate, createDenyAllImportGate, createGoalTool, createImportGate, createMemoryTool, createPlanModeTools, createRoleFile, createRoleScope, createRunCodeTool, createScheduleDraftTool, createSessionMessagesReadTool, createSessionMessagesSearchTool, createSessionSearchTool, createSessionSearchTools, createSessionTraceTool, createSkillViewTool, createSkillWriteTools, createTodoTool, createToolRevealState, createToolScope, createToolSearchTool, createTrustGate, currentEpochVersion, decideImport, decideTrust, defaultConfig, describeArtifactRefusal, describeBackgroundTask, describeHeadlessPolicy, describeIsolation, describeJsonError, diagnoseSchedules, discoverMarkdown, discoverModels, discoverProject, discoverySpec, displayAllows, displayCurrency, draftCommandLine, draftWidening, escapeRuleContent, estimateImageTokens, estimateRunTokens, estimateTokens, evaluateSelection, expandCommand, expandImports, explainSetting, extractArchive, findInstructionFiles, findProjectInstructions, findRole, formatBytes, formatSkillIndex, formatUsd, gateForTool, getCapability, getConfigIssues, getConfigOrigins, getImportGate, getTrustGate, grantedPathsFor, hasDedicatedExecContent, hasExecTierContent, hasPromptCaching, hasProviderCredentials, hasReadTierContent, hasUsableModel, imageFromBase64, imageFromPath, imagePartTokens, importParts, importSkills, installPlugin, instructionDirs, instructionNotices, intervalSlots, inventoryProjectExtensions, inventoryTotal, isBlockCode, isCodeModeDeferred, isEmptyRules, isGoalPhase, isNonInteractive, isReadOnlySubCall, isSettingWriteLayer, isTransientPersistFailure, isValidInterval, isValidPluginName, isWithinWindow, isWritableSettingKey, labelSlug, layerRank, listEntryModels, listRunningSchedules, listSessionCandidates, listWorkspaceFiles, loadCommandDefinitions, loadCommandFile, loadCommands, loadConfig, loadHookSources, loadKeybindings, loadLexiconDir, loadLexiconFiles, loadModelEntries, loadPlugins, loadPolicyFiles, loadPolicyRules, loadRoleDefinitions, loadRoleDir, loadedImports, localDateString, managedSwitchNotes, mapClaudeToolName, mapEpochToolName, mapOperationType, matchPreauthorization, matchRuleLists, matchesHook, mentionsPluginRoot, mergeHeadlessPolicy, mergeRoles, mergeSchedulePatch, microsToUsd, modelEntriesPath, modelListCandidates, needsAllowlist, nextRunAt, noConfigOrigins, noManagedPolicy, noPlugins, normalizeModelEntry, normalizeTrigger, openArtifact, originOf, packFileName, packPlugin, parseClaudeSettingsHooks, parseClock, parseDate, parseFrontmatter, parseHooksConfig, parseHooksConfigVerbose, parseImportLine, parseModelEntry, parseModelList, parseRoleDefinition, parseScheduleDraft, parseSkillFrontmatter, parseTrigger, pendingImageTokens, persistFailureCode, persistParts, persistToolResults, persistedUsage, planPack, previewSkillImport, pricingFor, projectEntryForDisplay, pruneArtifacts, pruneAttachments, pruneRecordings, pruneSchedules, readEntryKey, readImageSize, readMarketplaces, readPluginAbout, readPluginIcon, readPluginManifest, readPluginRecords, readRecording, readSessionSurface, reclaimFtsSpace, redactLine, refreshOpenRouterMetadata, removeMarketplace, removeRecordings, removeRoleFile, removeSessionArtifacts, removeSessionAttachments, renderImportTree, renderProjectContext, renderSdkDeclaration, renderSelfIndex, repairSchedules, resolveArtifactRetention, resolveCodeModeWorker, resolveComplianceDirs, resolveEntrySource, resolveInWorkspace, resolveMarketplaceRef, resolveMentions, resolveMultimodalPolicy, resolvePolicyDirs, resolvePricingAt, resolveProjectRoot, resolveScheduleBackend, resolveSessionReference, resolveSessionVisibility, resolveSettings, resolveSkillDirs, resolveSource, resolveTar, resolveWorkspace, restoreParts, revealScopedProvider, roleScopedProvider, roleSourceLabel, ruleCovers, ruleFromString, ruleToString, runCode, runCommand2 as runCommand, sanitizeArgNames, sanitizeCommand, sanitizeFtsQuery, sanitizePath, sanitizeToolOutput, saveModelEntries, scanInstructions, scanPluginDir, scanSkillDirs, searchMarketplaces, setDisplayCurrency, setImportGate, setPluginEnabled, setTrustGate, settingValueChoices, settingValueKind, settingWriteApply, settingWriteLayers, settingWriteTargets, skillIndexDescription, skillIndexResidency, skillIndexStats, sniffMediaType, splitFrontmatter, staticToolProvider, stripArtifactData, substitutePluginRoot, suggestRuleFromApproval, systemOpenArgv, systemPromptSegments, testModelEntry, toPosix, toolDefinitionTokens, toolMatches, toolTableTokens, totalTokens, traceSession, triggerPeriodMs, unescapeRuleContent, uninstallPlugin, unknownRoleSkills, unknownRoleTools, unloadedInstructionFiles, unsetUserSetting, updateMarketplace, updatePlugin, usdToMicros, validateSchedule, validateTrigger, validateWindow, withGoalCompression, withGoalPrompt, workspaceDisplayPath, writeSettingValue };