@epoch-agent/core 2.8.0 → 3.0.0

package/dist/index.js

@@ -1,10 +1,10 @@
-import { REASONING_EFFORTS, MODEL_ENTRY_PROTOCOLS, PROVIDER_TYPES, isModelEntryId, parseModelRef, OPERATION_TYPES as OPERATION_TYPES$1, COMPLIANCE_CATEGORIES, COMPLIANCE_ACTIONS, SEARCH_PROVIDER_TYPES, CURRENCIES, LANGS, isSettingsPaneId, SETTINGS_PANE_IDS, BRAND_WHEN_SIDEBAR_COLLAPSED, PERMISSION_LEVELS, SHELL_KINDS, cronTimes, SCHEDULE_MAX_TIMES_PER_DAY, SCHEDULE_INTERVAL_MIN_MINUTES, SCHEDULE_INTERVAL_MAX_MINUTES, ToolExposure, MIN_OPTIONS, MAX_OPTIONS, MAX_HEADER_CHARS, MAX_QUESTIONS, isPermissionLevel, SCHEDULE_DRAFT_TOOL, isValidAgentRoleName, DEFAULT_AGENT_ROLE, isValidCommandName, RESERVED_COMMAND_NAMES, isWirePluginArchiveName, systemNote, formatMoney, totalUsageTokens, NOOP_TELEMETRY, METRIC, contentToText, GEN_AI, isPromptOversize, promptTokens, entrySecretName, isEntrySecretName, entryRef, KEY_ACTIONS, tableOf, perAction, isKeyAction, parseSequence, RESERVED_CHORDS, chordId, sequenceId, ACTION_CONTEXTS, SEQUENCE_CONTEXTS, assertNeverPart, normalizeAppearanceTranslucent, MAX_ATTACH_FILES, MAX_ATTACH_TOTAL_BYTES, MAX_SESSION_REFS, utf8ByteLength, truncateToBudget, attachSessionSurface, isContextNearlyFull, isOperationType, normalizeApproval, SCHEDULE_DRAFT_SAVED_MARK, imagePartOmittedSummary, ENTRY_REF_PREFIX, MAX_ATTACH_BYTES, SIMULTANEOUS_CONTEXTS, SESSION_REFERENCE_ERROR_CODES, filePartSummary, sessionPartSummary } from '@epoch-agent/protocol';
-export { API_KEY_ENV_VARS, COMPLIANCE_ACTIONS, COMPLIANCE_CATEGORIES, MAX_ATTACH_BYTES, MAX_ATTACH_FILES, MAX_ATTACH_TOTAL_BYTES, MAX_SESSION_ATTACH_BYTES, MAX_SESSION_REFS, OPERATION_TYPES, PERMISSION_LEVELS, PLAN_OUTCOMES, PROVIDER_INFOS, PROVIDER_TYPES, ToolExposure, apiKeyEnvVar, extractAllMentions, extractMentions, extractSessionMentions, getProviderInfo, isOperationType, isPermissionLevel, isPlanOutcome, isProviderType, normalizeApproval } from '@epoch-agent/protocol';
-import { existsSync, statSync, readdirSync, readFileSync, mkdirSync, writeFileSync, rmSync, renameSync, realpathSync, symlinkSync, cpSync, lstatSync, unlinkSync, rmdirSync, mkdtempSync, copyFileSync, openSync, writeSync, closeSync, readSync } from 'fs';
-import { homedir, platform, tmpdir, hostname } from 'os';
-import { join, dirname, resolve, relative, isAbsolute, extname, sep, basename, delimiter } from 'path';
-import { execFile, execSync, execFileSync, spawn } from 'child_process';
-import { createLogger, dbPath, resolveHomeDir, DEFAULT_MAX_TURNS, PROJECT_DIR_NAME, guardSpawn, t, suggestKey, misspelledKeyIssues, openDatabase, migrate, releaseDatabase, parseLenient, issueDetails, splitWords, unknownKeyIssues, checkpointsDir, expandPath, pluginsDir, projectHooksPath, projectClaudeSettingsPath, projectClaudeLocalSettingsPath, projectSettingsPath, projectLocalSettingsPath, projectPoliciesDir, trustedImportsPath, canProbeGit, budgetStatePath, artifactsDir, isInWorkspace, UNLIMITED_TURNS, turnLimitOf, configPath, managedSettingsPath, listStoredSecretNames, maskApiKey, unsetSectionField, setSectionField, countCodePoints, headCodePoints, attachmentsDir, workspacesPath, samePath, lastSessionsPath, appearancePath, automationLogsDir, projectComplianceDir, projectSkillsDir, trustPath, projectCommandsDir, detectBackend, EXEC_PATH_AS_NODE_ENV, isolate, createStreamDecoder, parseShellCommand, writeArtifact, getSecretValues, envPath, checkDangerousCommand, checkObfuscation, keepHeadAndTail, normalizeForMatch, isReadOnlyCommand, CODE_EXEC_ROOTS, tailCodePoints } from '@epoch-agent/infra';
+import { REASONING_EFFORTS, MODEL_ENTRY_PROTOCOLS, PROVIDER_TYPES, isModelEntryId, parseModelRef, OPERATION_TYPES as OPERATION_TYPES$1, COMPLIANCE_CATEGORIES, COMPLIANCE_ACTIONS, SEARCH_PROVIDER_TYPES, CURRENCIES, LANGS, isSettingsPaneId, SETTINGS_PANE_IDS, BRAND_WHEN_SIDEBAR_COLLAPSED, DEFAULT_PERMISSION_LEVEL, resolvePermissionLevel, PERMISSION_LEVELS, SHELL_KINDS, cronTimes, SCHEDULE_MAX_TIMES_PER_DAY, SCHEDULE_INTERVAL_MIN_MINUTES, SCHEDULE_INTERVAL_MAX_MINUTES, ToolExposure, MIN_OPTIONS, MAX_OPTIONS, MAX_HEADER_CHARS, MAX_QUESTIONS, SCHEDULE_DEFAULT_PERMISSION, approvalPolicyForLevel, SCHEDULE_DRAFT_TOOL, isValidAgentRoleName, DEFAULT_AGENT_ROLE, isValidCommandName, RESERVED_COMMAND_NAMES, isWirePluginArchiveName, systemNote, formatMoney, totalUsageTokens, OFFLOADED_IMAGE_NOTE, NOOP_TELEMETRY, METRIC, contentToText, GEN_AI, isPromptOversize, promptTokens, entrySecretName, isEntrySecretName, entryRef, KEY_ACTIONS, tableOf, perAction, isKeyAction, parseSequence, RESERVED_CHORDS, chordId, sequenceId, ACTION_CONTEXTS, SEQUENCE_CONTEXTS, assertNeverPart, normalizeAppearanceTranslucent, MAX_ATTACH_FILES, MAX_ATTACH_TOTAL_BYTES, MAX_SESSION_REFS, utf8ByteLength, truncateToBudget, attachSessionSurface, isContextNearlyFull, isOperationType, normalizeApproval, SCHEDULE_DRAFT_SAVED_MARK, imagePartOmittedSummary, ENTRY_REF_PREFIX, placeholdersOf, SCHEDULE_CONFIRM_PLACEHOLDER, MAX_ATTACH_BYTES, SIMULTANEOUS_CONTEXTS, SESSION_REFERENCE_ERROR_CODES, filePartSummary, sessionPartSummary } from '@epoch-agent/protocol';
+export { API_KEY_ENV_VARS, COMPLIANCE_ACTIONS, COMPLIANCE_CATEGORIES, LEGACY_LEVEL_ALIASES, MAX_ATTACH_BYTES, MAX_ATTACH_FILES, MAX_ATTACH_TOTAL_BYTES, MAX_SESSION_ATTACH_BYTES, MAX_SESSION_REFS, OPERATION_TYPES, PERMISSION_LEVELS, PLAN_OUTCOMES, PROVIDER_INFOS, PROVIDER_TYPES, ToolExposure, apiKeyEnvVar, approvalPolicyForLevel, extractAllMentions, extractMentions, extractSessionMentions, getProviderInfo, isOperationType, isPermissionLevel, isPlanOutcome, isProviderType, normalizeApproval, resolvePermissionLevel } from '@epoch-agent/protocol';
+import { existsSync, mkdirSync, rmSync, writeFileSync, statSync, readdirSync, readFileSync, renameSync, realpathSync, symlinkSync, cpSync, lstatSync, unlinkSync, rmdirSync, mkdtempSync, copyFileSync, openSync, writeSync, closeSync, readSync } from 'fs';
+import { platform, tmpdir, homedir, hostname } from 'os';
+import { join, resolve, dirname, relative, isAbsolute, extname, sep, basename, delimiter } from 'path';
+import { execFile, spawn, execSync, execFileSync } from 'child_process';
+import { createLogger, t, dbPath, resolveHomeDir, DEFAULT_MAX_TURNS, PROJECT_DIR_NAME, guardSpawn, detectBackend, EXEC_PATH_AS_NODE_ENV, isolate, createStreamDecoder, registerJob, JOB_OUTPUT_LIMIT, artifactsDir, suggestKey, misspelledKeyIssues, openDatabase, migrate, releaseDatabase, parseLenient, issueDetails, splitWords, unknownKeyIssues, checkpointsDir, expandPath, pluginsDir, projectHooksPath, projectClaudeSettingsPath, projectClaudeLocalSettingsPath, projectSettingsPath, projectLocalSettingsPath, projectPoliciesDir, trustedImportsPath, canProbeGit, budgetStatePath, isInWorkspace, UNLIMITED_TURNS, turnLimitOf, configPath, managedSettingsPath, listStoredSecretNames, maskApiKey, unsetSectionField, setSectionField, countCodePoints, headCodePoints, attachmentsDir, workspacesPath, samePath, lastSessionsPath, appearancePath, automationLogsDir, projectComplianceDir, projectSkillsDir, trustPath, projectCommandsDir, parseShellCommand, writeArtifact, sandboxModeForLevel, planEscalation, getSecretValues, envPath, checkDangerousCommand, checkObfuscation, shellSpawnArgs, confine, classifyFailure, keepHeadAndTail, SANDBOX_PERMISSIONS_PARAM, JUSTIFICATION_PARAM, widerTargets, normalizeForMatch, isReadOnlyCommand, CODE_EXEC_ROOTS, tailCodePoints } from '@epoch-agent/infra';
 export { IS_WINDOWS, WINDOWS_HIDE_FLAGS, buildBwrapArgs, buildProfile, checkDangerousCommand, checkObfuscation, createLogger, detectBackend, getDefaultShell, getPythonCommand, isInWorkspace, isReadOnlyCommand, isolate, maskApiKey, probeBubblewrap, probeSeatbelt, complianceDir as resolveComplianceDir, policiesDir as resolvePoliciesDir, setLogLevel } from '@epoch-agent/infra';
 import { createRequire } from 'module';
 import { randomUUID, createHash, randomBytes } from 'crypto';
@@ -932,7 +932,7 @@ var ToolRegistry = class {
     this.addTool(tool, source);
   }
   registerTools(tools, source = "builtin") {
-    for (const t81 of tools) this.addTool(t81, source);
+    for (const t83 of tools) this.addTool(t83, source);
   }
   addTool(tool, source) {
     const existing = this.tools.get(tool.name);
@@ -942,6 +942,30 @@ var ToolRegistry = class {
     }
     this.tools.set(tool.name, { tool, source });
   }
+  replaceBySource(tools, source = "builtin") {
+    const incoming = /* @__PURE__ */ new Map();
+    for (const tool of tools) {
+      if (!incoming.has(tool.name)) incoming.set(tool.name, tool);
+    }
+    let removed = 0;
+    for (const [name, entry] of this.tools) {
+      if (entry.source !== source || incoming.has(name)) continue;
+      this.tools.delete(name);
+      removed++;
+    }
+    this.conflicts = this.conflicts.filter(
+      (c) => c.keptFrom !== source && c.droppedFrom !== source
+    );
+    for (const tool of incoming.values()) {
+      const existing = this.tools.get(tool.name);
+      if (existing && existing.source === source) {
+        this.tools.set(tool.name, { tool, source });
+        continue;
+      }
+      this.addTool(tool, source);
+    }
+    return removed;
+  }
   unregisterBySource(source) {
     let removed = 0;
     for (const [name, entry] of this.tools) {
@@ -981,14 +1005,14 @@ var ToolRegistry = class {
     return isCodeModeDeferred(tool) ? ToolExposure.Deferred : declared;
   }
   exposed() {
-    return this.list().filter((t81) => this.exposureOf(t81) === ToolExposure.Direct);
+    return this.list().filter((t83) => this.exposureOf(t83) === ToolExposure.Direct);
   }
   byExposure(exposure) {
-    return this.list().filter((t81) => this.exposureOf(t81) === exposure);
+    return this.list().filter((t83) => this.exposureOf(t83) === exposure);
   }
   codeModeDeclared() {
     if (!this.codeMode) return [];
-    return this.list().filter((t81) => isCodeModeDeferred(t81));
+    return this.list().filter((t83) => isCodeModeDeferred(t83));
   }
   sourceOf(name) {
     return this.tools.get(name)?.source;
@@ -1037,7 +1061,7 @@ var ToolRegistry = class {
 function staticToolProvider(tools) {
   return {
     list: () => tools,
-    get: (name) => tools.find((t81) => t81.name === name)
+    get: (name) => tools.find((t83) => t83.name === name)
   };
 }
 var log = createLogger("tokenizer");
@@ -1054,8 +1078,8 @@ function fallbackCount(text) {
   return Math.ceil(text.length / 4);
 }
 function encoderFor(encoding) {
-  const cached = encoders.get(encoding);
-  if (cached) return cached;
+  const cached2 = encoders.get(encoding);
+  if (cached2) return cached2;
   const entry = { counter: null, memo: /* @__PURE__ */ new Map(), memoChars: 0 };
   try {
     const mod = loadEncoding(encoding);
@@ -1339,6 +1363,285 @@ function createAskQuestionTool(deps) {
 function isAbortSignal(signal) {
   return !!signal && typeof signal.addEventListener === "function" && typeof signal.removeEventListener === "function";
 }
+function describeIsolation() {
+  const backend = detectBackend();
+  const os = platform();
+  if (backend === "seatbelt") {
+    return {
+      level: "os",
+      backend,
+      detail: t("sandbox_isolation.seatbelt"),
+      reason: "os-isolated",
+      platform: os
+    };
+  }
+  if (backend === "bubblewrap") {
+    return {
+      level: "os",
+      backend,
+      detail: t("sandbox_isolation.bubblewrap"),
+      reason: "os-isolated",
+      platform: os
+    };
+  }
+  const [why, reason9] = os === "darwin" ? [t("sandbox_isolation.no_seatbelt"), "backend-unavailable"] : os === "linux" ? [t("sandbox_isolation.no_bubblewrap"), "backend-missing"] : (
+    [t("sandbox_isolation.by_design", { platform: os }), "platform-unsupported"]
+  );
+  return {
+    level: "process",
+    backend,
+    detail: t("sandbox_isolation.process_only", { why }),
+    reason: reason9,
+    platform: os
+  };
+}
+var SANDBOX_COVERS = ["code_exec", "terminal"];
+var SANDBOX_EXCLUDES = [];
+// src/sandbox/node-permission.ts
+var NODE_PERMISSION_MIN = [22, 5];
+function nodePermissionSupported(platformName, nodeVersion) {
+  if (platformName !== "win32") return false;
+  const [major = Number.NaN, minor = Number.NaN] = nodeVersion.split(".").map((part) => Number.parseInt(part, 10));
+  if (!Number.isFinite(major) || !Number.isFinite(minor)) return false;
+  if (major > NODE_PERMISSION_MIN[0]) return true;
+  if (major < NODE_PERMISSION_MIN[0]) return false;
+  return minor >= NODE_PERMISSION_MIN[1];
+}
+function nodePermissionArgs(input) {
+  if (!nodePermissionSupported(input.platformName, input.nodeVersion)) return [];
+  const readable = [.../* @__PURE__ */ new Set([input.sandboxDir, ...input.readableDirs])];
+  return [
+    "--permission",
+    `--allow-fs-read=${readable.join(",")}`,
+    `--allow-fs-write=${input.sandboxDir}`
+  ];
+}
+// src/sandbox/sandbox.ts
+var IS_WINDOWS = platform() === "win32";
+var SANDBOX_ROOT = join(tmpdir(), "epoch-sandbox");
+var DEFAULT_TIMEOUT = 3e4;
+var MAX_OUTPUT = 1e5;
+var MAX_MEMORY = 512;
+var TRUNCATE_HEAD = 2e3;
+var TRUNCATE_TAIL = 2e3;
+function resolveExecutable(name) {
+  if (IS_WINDOWS || name.includes("/") || name.includes("\\")) return name;
+  for (const dir of (process.env["PATH"] ?? "").split(delimiter)) {
+    if (!dir) continue;
+    const candidate = join(dir, name);
+    if (existsSync(candidate)) return candidate;
+  }
+  return name;
+}
+var CodeSandbox = class {
+  sandboxDir;
+  readableDirs;
+  constructor(sessionId, workDir) {
+    const safeId = sessionId.replace(/[^A-Za-z0-9_-]/g, "_").slice(0, 128) || "default";
+    this.sandboxDir = join(SANDBOX_ROOT, safeId);
+    mkdirSync(this.sandboxDir, { recursive: true });
+    this.readableDirs = [];
+    if (workDir) {
+      const abs = resolve(workDir);
+      if (abs !== resolve(homedir()) && abs !== "/") this.readableDirs.push(abs);
+    }
+  }
+  getIsolation() {
+    return describeIsolation();
+  }
+  async execute(req) {
+    const start = Date.now();
+    const timeout = req.timeout ?? DEFAULT_TIMEOUT;
+    const isolation = describeIsolation().level;
+    try {
+      const spec = req.language === "javascript" ? this.jsSpec(req.code) : this.pySpec(req.code);
+      const result = await this.run(spec, {
+        timeout,
+        allowNetwork: req.allowNetwork === true,
+        ...req.signal ? { signal: req.signal } : {}
+      });
+      return { ...result, isolation };
+    } catch (err) {
+      const msg = err instanceof Error ? err.message : String(err);
+      if (msg.includes("timed out") || msg.includes("killed")) {
+        return {
+          success: false,
+          output: "",
+          error: `[\u8D85\u65F6] \u8D85\u8FC7 ${timeout / 1e3} \u79D2`,
+          errorType: "timeout",
+          duration: Date.now() - start,
+          isolation
+        };
+      }
+      return {
+        success: false,
+        output: "",
+        error: `[\u9519\u8BEF] ${msg}`,
+        errorType: "runtime",
+        duration: Date.now() - start,
+        isolation
+      };
+    }
+  }
+  destroy() {
+    try {
+      rmSync(this.sandboxDir, { recursive: true });
+    } catch {
+    }
+  }
+  getDir() {
+    return this.sandboxDir;
+  }
+  jsSpec(code) {
+    const tmpFile = join(this.sandboxDir, "code.js");
+    writeFileSync(tmpFile, code, "utf-8");
+    return {
+      command: process.execPath,
+      args: [
+        `--max-old-space-size=${MAX_MEMORY}`,
+        ...nodePermissionArgs({
+          platformName: platform(),
+          nodeVersion: process.versions.node,
+          sandboxDir: this.sandboxDir,
+          readableDirs: this.readableDirs
+        }),
+        tmpFile
+      ],
+      env: EXEC_PATH_AS_NODE_ENV
+    };
+  }
+  pySpec(code) {
+    const tmpFile = join(this.sandboxDir, "code.py");
+    writeFileSync(tmpFile, code, "utf-8");
+    return {
+      command: resolveExecutable(IS_WINDOWS ? "python" : "python3"),
+      args: ["-I", tmpFile]
+    };
+  }
+  run(spec, opts) {
+    const start = Date.now();
+    const wrapped = isolate(spec.command, spec.args, {
+      writableDirs: [this.sandboxDir, tmpdir()],
+      readableDirs: this.readableDirs,
+      allowNetwork: opts.allowNetwork,
+      cwd: this.sandboxDir
+    });
+    const { command, args } = wrapped ?? spec;
+    const spawnOpts = {
+      cwd: this.sandboxDir,
+      timeout: opts.timeout,
+      env: {
+        PATH: process.env["PATH"] ?? "",
+        HOME: process.env["HOME"] ?? "",
+        TMPDIR: this.sandboxDir,
+        LANG: process.env["LANG"] ?? "en_US.UTF-8",
+        ...spec.env
+      },
+      stdio: ["ignore", "pipe", "pipe"],
+      ...IS_WINDOWS ? { windowsHide: true } : {}
+    };
+    return new Promise((resolve17) => {
+      let stdout = "";
+      let stderr = "";
+      let killedForOutput = false;
+      let child = null;
+      const onAbort = () => {
+        child?.kill("SIGKILL");
+      };
+      const failToStart = (err) => {
+        opts.signal?.removeEventListener("abort", onAbort);
+        if (err.code === "ENOENT") {
+          resolve17({
+            success: false,
+            output: "",
+            error: `[\u9519\u8BEF] \u627E\u4E0D\u5230\u89E3\u91CA\u5668: ${command}`,
+            errorType: "compile",
+            duration: Date.now() - start
+          });
+          return;
+        }
+        resolve17({
+          success: false,
+          output: "",
+          error: `[\u9519\u8BEF] ${err.message}\uFF08command=${command}\uFF0Ccwd=${spawnOpts.cwd ?? ""}\uFF09`,
+          errorType: "runtime",
+          duration: Date.now() - start
+        });
+      };
+      child = guardSpawn(() => spawn(command, args, spawnOpts), failToStart);
+      if (!child) return;
+      const proc = child;
+      let outDecoder = null;
+      let errDecoder = null;
+      proc.stdout?.on("data", (c) => {
+        if (killedForOutput) return;
+        outDecoder ??= createStreamDecoder();
+        stdout += outDecoder.write(c);
+        if (stdout.length >= MAX_OUTPUT) {
+          killedForOutput = true;
+          stdout = stdout.slice(0, MAX_OUTPUT);
+          proc.kill("SIGKILL");
+        }
+      });
+      proc.stderr?.on("data", (c) => {
+        if (stderr.length >= MAX_OUTPUT) return;
+        errDecoder ??= createStreamDecoder();
+        stderr += errDecoder.write(c);
+      });
+      opts.signal?.addEventListener("abort", onAbort, { once: true });
+      proc.on("error", failToStart);
+      proc.on("close", (code, sig) => {
+        opts.signal?.removeEventListener("abort", onAbort);
+        if (!killedForOutput) stdout += outDecoder?.end() ?? "";
+        if (stderr.length < MAX_OUTPUT) stderr += errDecoder?.end() ?? "";
+        const duration = Date.now() - start;
+        if (killedForOutput) {
+          resolve17({
+            success: false,
+            output: trunc(stdout, stderr),
+            error: `[\u8F93\u51FA\u8D85\u9650] \u8D85\u8FC7 ${MAX_OUTPUT} \u5B57\u8282\uFF0C\u5DF2\u7EC8\u6B62`,
+            errorType: "runtime",
+            duration
+          });
+          return;
+        }
+        if (sig) {
+          resolve17({
+            success: false,
+            output: trunc(stdout, stderr),
+            error: opts.signal?.aborted ? "[\u5DF2\u53D6\u6D88]" : "[\u8D85\u65F6] \u6267\u884C\u8D85\u65F6",
+            errorType: "timeout",
+            duration
+          });
+          return;
+        }
+        const output = trunc(stdout, stderr);
+        if (code !== 0 && code !== null) {
+          const oom = /heap out of memory|allocation failed/i.test(stderr);
+          resolve17({
+            success: false,
+            output,
+            error: oom ? `[\u5185\u5B58\u8D85\u9650] \u8D85\u8FC7 ${MAX_MEMORY}MB` : `[\u8FD0\u884C\u65F6\u9519\u8BEF] exit ${code}: ${stderr.slice(0, 200)}`,
+            errorType: oom ? "oom" : "runtime",
+            duration
+          });
+          return;
+        }
+        resolve17({ success: true, output, duration });
+      });
+    });
+  }
+};
+function trunc(stdout, stderr) {
+  const nl = "\n";
+  let out = stdout;
+  if (stderr) out += (out ? nl : "") + stderr;
+  if (out.length <= MAX_OUTPUT) return out || "(\u65E0\u8F93\u51FA)";
+  const head = out.slice(0, TRUNCATE_HEAD);
+  const tail = out.slice(-TRUNCATE_TAIL);
+  const skipped = out.length - TRUNCATE_HEAD - TRUNCATE_TAIL;
+  return `${head}${nl}...[\u5DF2\u622A\u65AD ${(skipped / 1024).toFixed(1)} KB]...${nl}${tail}`;
+}
 // src/tools/builtin/code-exec.ts
 var MAX_CODE_LENGTH = 1e5;
 function createCodeExecTool(sandbox) {
@@ -1349,7 +1652,9 @@ function createCodeExecTool(sandbox) {
       "\u5728\u9694\u79BB\u73AF\u5883\u91CC\u6267\u884C\u4E00\u6BB5 JavaScript \u6216 Python\uFF0C\u8FD4\u56DE stdout/stderr\u3002",
       "\u9002\u5408\uFF1A\u7B97\u6570\u503C\u3001\u9A8C\u8BC1\u4E00\u6BB5\u903B\u8F91\u3001\u5904\u7406\u6570\u636E\u3001\u5FEB\u901F\u8BD5\u8BED\u6CD5\u3002",
       `\u5F53\u524D\u9694\u79BB\u7EA7\u522B\uFF1A${iso.level === "os" ? "OS \u7EA7" : "\u4EC5\u8FDB\u7A0B\u7EA7"}\u2014\u2014${iso.detail}`,
-      iso.level === "os" ? "\u9694\u79BB\u5F71\u54CD\uFF1A\u9ED8\u8BA4\u65E0\u7F51\u7EDC\uFF1B\u786E\u5B9E\u9700\u8981\u8054\u7F51\u65F6\u4F20 allow_network=true\uFF08\u4F1A\u653E\u5F00\u7F51\u7EDC\u9650\u5236\uFF09\u3002" : "\u9694\u79BB\u5F71\u54CD\uFF1A\u672C\u5E73\u53F0\u6CA1\u6709 OS \u7EA7\u9694\u79BB\uFF0C\u4EE3\u7801\u80FD\u8BFB\u5199\u6574\u4E2A\u6587\u4EF6\u7CFB\u7EDF\u5E76\u8054\u7F51\uFF0C\u522B\u6267\u884C\u4E0D\u53EF\u4FE1\u4EE3\u7801\u3002",
+      iso.level === "os" ? "\u9694\u79BB\u5F71\u54CD\uFF1A\u9ED8\u8BA4\u65E0\u7F51\u7EDC\uFF1B\u786E\u5B9E\u9700\u8981\u8054\u7F51\u65F6\u4F20 allow_network=true\uFF08\u4F1A\u653E\u5F00\u7F51\u7EDC\u9650\u5236\uFF09\u3002" : (
+        nodePermissionSupported(iso.platform, process.versions.node) ? "\u9694\u79BB\u5F71\u54CD\uFF1AJavaScript \u90A3\u6863\u7531 Node \u6743\u9650\u6A21\u578B\u6536\u7A84 \u2014\u2014 \u5199\u4E0D\u51FA\u6C99\u7BB1\u76EE\u5F55\u3001\u8D77\u4E0D\u4E86\u5B50\u8FDB\u7A0B\uFF0C\u8BFB\u53D6\u9650\u4E8E\u6C99\u7BB1\u76EE\u5F55\u548C\u5DE5\u4F5C\u533A\uFF1B\u7F51\u7EDC\u4ECD\u7136\u901A\uFF0CPython \u90A3\u6863\u6CA1\u6709\u8FD9\u5C42\u9650\u5236\u3002" : "\u9694\u79BB\u5F71\u54CD\uFF1A\u672C\u5E73\u53F0\u6CA1\u6709 OS \u7EA7\u9694\u79BB\uFF0C\u4EE3\u7801\u80FD\u8BFB\u5199\u6574\u4E2A\u6587\u4EF6\u7CFB\u7EDF\u5E76\u8054\u7F51\uFF0C\u522B\u6267\u884C\u4E0D\u53EF\u4FE1\u4EE3\u7801\u3002"
+      ),
       "\u5DE5\u4F5C\u76EE\u5F55\u662F\u4E00\u4E2A\u4E34\u65F6\u6C99\u7BB1\u76EE\u5F55\uFF0C\u8FDB\u7A0B\u7ED3\u675F\u540E\u76EE\u5F55\u4F1A\u88AB\u6E05\u7406\u2014\u2014\u9700\u8981\u7559\u5B58\u7684\u7ED3\u679C\u8BF7\u6253\u5370\u51FA\u6765\u3002"
     ].join("\n"),
     parameters: {
@@ -1660,6 +1965,15 @@ function filterWhole(guard, text) {
 }
 // src/delegate/manager.ts
 var ABORTED = "\u5DF2\u4E2D\u6B62\uFF1A\u7528\u6237\u7EC8\u6B62\u4E86\u8FD9\u4E00\u8F6E";
+var LABEL_LIMIT = 80;
+function backgroundNotice(id, count) {
+  return [
+    `\u5DF2\u6D3E\u5230\u540E\u53F0\uFF1A${id}\uFF08${count} \u4E2A\u5B50\u4EFB\u52A1\uFF09\u3002\u8FD9\u4E00\u8F6E\u4F60\u53EF\u4EE5\u63A5\u7740\u5E72\u522B\u7684\u3002`,
+    `\u53D6\u7ED3\u8BBA\uFF1Atask_wait ${id}\uFF08\u963B\u585E\u7B49\u5B83\u7ED3\u675F\uFF09\u6216 task_output ${id}\uFF08\u770B\u8FDB\u5EA6\uFF09\u3002`,
+    `\u5B83\u4EEC\u8DD1\u5B8C\u4F1A\u5728\u4E0B\u4E00\u8F6E\u63D0\u793A\u4F60\u3002`,
+    `\u26A0\uFE0F \u7528\u6237\u6309\u505C\u6B62\u53EA\u505C\u4F60\u81EA\u5DF1\u8FD9\u4E00\u8F6E\uFF0C**\u4E0D\u4F1A**\u505C\u6389\u5B83\u4EEC\uFF1B\u8981\u6536\u8D70\u7528 task_stop ${id}\u3002`
+  ].join("\n");
+}
 var BLOCKED_TOOLS = Object.freeze([
   "delegate_task",
   "clarify",
@@ -1685,7 +1999,7 @@ var DelegateManager = class {
     this.config = {
       max_concurrent_children: 3,
       max_spawn_depth: 1,
-      task_timeout: 3e5,
+      task_timeout: 9e5,
       ...config
     };
   }
@@ -1700,27 +2014,93 @@ var DelegateManager = class {
         duration: 0
       };
     }
-    const results = await this.runWithConcurrency(tasks, maxConcurrent, parentSessionId, signal);
-    const summary = this.buildSummary(results, Date.now() - start);
-    return {
-      success: results.every((r) => r.success),
-      output: summary,
-      duration: Date.now() - start
-    };
+    if (tasks.length === 0) {
+      return { success: true, output: this.buildSummary([], Date.now() - start), duration: 0 };
+    }
+    const background = args.background === true;
+    if (signal?.aborted) {
+      return { success: false, output: ABORTED, duration: 0 };
+    }
+    const controller = new AbortController();
+    const job = background ? this.registerJob(parentSessionId, tasks, controller) : void 0;
+    const unlink = background ? () => {
+    } : linkAbort(isAbortSignal(signal) ? signal : void 0, controller);
+    const run = this.runWithConcurrency(
+      tasks,
+      maxConcurrent,
+      parentSessionId,
+      controller.signal,
+      job ? (r) => job.append(`${r.success ? "\u2705" : "\u274C"} ${this.describeResult(r)}
+`) : void 0,
+      job ? (line) => job.append(`${line}
+`) : void 0
+    ).then((results) => {
+      const total = Date.now() - start;
+      const summary = this.buildSummary(results, total);
+      const ok2 = results.every((r) => r.success);
+      if (job) {
+        job.append(`
+${summary}`);
+        job.finish(ok2 ? "exited" : "failed");
+      }
+      return { results, summary, total, ok: ok2 };
+    });
+    if (background && job) {
+      void run.catch(() => void 0);
+      return {
+        success: true,
+        output: backgroundNotice(job.id, tasks.length),
+        duration: Date.now() - start,
+        jobId: job.id,
+        background: true
+      };
+    }
+    try {
+      const r = await run;
+      return {
+        success: r.ok,
+        output: r.summary,
+        duration: r.total,
+        ...job ? { jobId: job.id } : {}
+      };
+    } finally {
+      unlink();
+    }
+  }
+  registerJob(parentSessionId, tasks, controller) {
+    const label = tasks.map((t83) => t83.goal).join(" | ");
+    return registerJob({
+      sessionId: parentSessionId,
+      kind: "agent",
+      label: label.length > LABEL_LIMIT ? `${label.slice(0, LABEL_LIMIT)}\u2026` : label,
+      maxOutput: JOB_OUTPUT_LIMIT,
+      artifactsDir: artifactsDir(parentSessionId),
+      artifactLabel: "agent",
+      stop: async () => {
+        controller.abort();
+      },
+      terminates: true,
+      detail: { abort: controller }
+    });
   }
   normalizeTasks(args) {
     if (args.tasks && args.tasks.length > 0) {
-      return args.role ? args.tasks.map((t81) => ({ ...t81, role: t81.role ?? args.role })) : args.tasks;
+      return args.role ? args.tasks.map((t83) => ({ ...t83, role: t83.role ?? args.role })) : args.tasks;
     }
     if (args.goal) return [{ goal: args.goal, ...args.role ? { role: args.role } : {} }];
     return [];
   }
-  async runWithConcurrency(tasks, maxConcurrent, parentSessionId, signal) {
+  async runWithConcurrency(tasks, maxConcurrent, parentSessionId, signal, onDone, onProgress) {
     const results = [];
     for (let i = 0; i < tasks.length; i += maxConcurrent) {
       const batch = tasks.slice(i, i + maxConcurrent);
       const batchResults = await Promise.allSettled(
-        batch.map((t81) => this.runSingleTask(t81, parentSessionId, signal))
+        batch.map(
+          (t83) => this.runSingleTask(t83, parentSessionId, signal, onProgress).then((r) => {
+            onDone?.(r);
+            return r;
+          })
+        )
       );
       for (const r of batchResults) {
         if (r.status === "fulfilled") {
@@ -1738,7 +2118,7 @@ var DelegateManager = class {
     }
     return results;
   }
-  async runSingleTask(task, parentSessionId, signal) {
+  async runSingleTask(task, parentSessionId, signal, onProgress) {
     const start = Date.now();
     const sessionId = `delegate-${randomUUID().slice(0, 8)}`;
     const failed = (error, summary = "") => ({
@@ -1755,22 +2135,24 @@ var DelegateManager = class {
     const ms = this.config.task_timeout;
     let timer;
     try {
-      const result = await Promise.race([
-        this.runner(
-          task.goal,
-          task.context ?? "",
-          sessionId,
-          task.role,
-          parentSessionId,
-          controller.signal
-        ),
+      const work = this.runner(
+        task.goal,
+        task.context ?? "",
+        sessionId,
+        task.role,
+        parentSessionId,
+        controller.signal,
+        onProgress
+      );
+      const result = await (ms > 0 ? Promise.race([
+        work,
         new Promise((_, reject2) => {
           timer = setTimeout(() => {
             reject2(new Error(`\u8D85\u65F6 (${ms / 1e3}s)`));
             controller.abort();
           }, ms);
         })
-      ]);
+      ]) : work);
       if (controller.signal.aborted) return failed(ABORTED, result.text);
       return {
         goal: task.goal,
@@ -1789,6 +2171,10 @@ var DelegateManager = class {
       unlink();
     }
   }
+  describeResult(r) {
+    const who = r.role ? `[${r.role}] ` : "";
+    return `${who}${r.goal} (${r.duration}ms)`;
+  }
   buildSummary(results, totalDuration) {
     const lines = [];
     const succeeded = results.filter((r) => r.success).length;
@@ -1835,8 +2221,15 @@ function createDelegateTool(runner, config, roles) {
         "\u628A\u4E00\u6279\u76F8\u4E92\u72EC\u7ACB\u7684\u5B50\u4EFB\u52A1\u6D3E\u7ED9\u5B50 agent \u5E76\u884C\u6267\u884C\uFF0C\u62FF\u56DE\u5404\u81EA\u7684\u7ED3\u8BBA\u3002",
         "\u9002\u5408\uFF1A\u9700\u8981\u5206\u522B\u8C03\u7814\u591A\u4E2A\u6A21\u5757\u3001\u540C\u65F6\u9A8C\u8BC1\u591A\u4E2A\u5047\u8BBE\u3001\u6279\u91CF\u5904\u7406\u4E92\u4E0D\u4F9D\u8D56\u7684\u6539\u52A8\u3002",
         "\u4E0D\u9002\u5408\uFF1A\u6709\u5148\u540E\u4F9D\u8D56\u7684\u6B65\u9AA4\uFF08\u81EA\u5DF1\u6309\u987A\u5E8F\u505A\u5C31\u884C\uFF09\u3001\u9700\u8981\u6765\u56DE\u8FFD\u95EE\u7684\u4EFB\u52A1\u3002",
+        "\u9ED8\u8BA4**\u7B49\u5B83\u4EEC\u5168\u90E8\u8DD1\u5B8C**\u518D\u8FD4\u56DE\uFF08\u5341\u51E0\u6B21\u5DE5\u5177\u8C03\u7528\u5C31\u56DE\u6765\u4E86\uFF0C\u5E38\u89C1\u60C5\u5F62\u7528\u8FD9\u4E2A\uFF09\u3002",
+        "\u4F60\u81EA\u5DF1\u8FD8\u6709\u522B\u7684\u6D3B\u8981\u5E72\u3001\u4E0D\u5FC5\u7B49\u7ED3\u8BBA\u65F6\u4F20 background: true\uFF1A\u7ACB\u523B\u8FD4\u56DE\u4E00\u4E2A\u4F5C\u4E1A id\uFF08\u6BD4\u5982 a1\uFF09\uFF0C",
+        "\u8FD9\u4E00\u8F6E\u63A5\u7740\u5E72\u522B\u7684\u3002\u4E4B\u540E\u7528 task_wait a1 \u7B49\u7ED3\u679C\u3001task_output a1 \u770B\u8FDB\u5EA6\u3001task_stop a1 \u6536\u6389\u5B83\uFF1B",
+        "\u5B83\u4EEC\u8DD1\u5B8C\u4E5F\u4F1A\u5728\u4E0B\u4E00\u8F6E\u63D0\u793A\u4F60\u3002",
+        "\u26A0\uFE0F \u540E\u53F0\u5B50\u4EFB\u52A1\u4E0D\u8DDF\u7740\u7236\u56DE\u5408\u8D70 \u2014\u2014 \u7528\u6237\u6309\u505C\u6B62\u53EA\u505C\u7236\u56DE\u5408\uFF0C\u5B83\u4EEC\u4F1A\u7EE7\u7EED\u8DD1\uFF08\u8981\u6536\u5F97 task_stop\uFF09\u3002",
         `\u5B50 agent \u62FF\u4E0D\u5230\u8FD9\u4E9B\u5DE5\u5177\uFF1A${BLOCKED_TOOLS.join(", ")}\uFF0C\u4E5F\u4E0D\u80FD\u518D\u5F80\u4E0B\u6D3E\u6D3B\u3002`,
         "\u5B50 agent \u770B\u4E0D\u5230\u5F53\u524D\u5BF9\u8BDD\uFF0C\u6240\u6709\u5FC5\u8981\u4FE1\u606F\u90FD\u8981\u5199\u8FDB goal \u548C context\u3002",
+        "\u8D85\u65F6\uFF1A\u5355\u4E2A\u5B50\u4EFB\u52A1\u9ED8\u8BA4 15 \u5206\u949F\uFF08\u914D\u7F6E delegate.taskTimeoutSec \u53EF\u8C03\uFF0C0 = \u4E0D\u9650\u65F6\uFF09\uFF1B\u649E\u4E0A\u5C31\u6390\u6389\uFF0C\u90A3\u534A\u622A\u7ED3\u8BBA\u4E0D\u4FDD\u7559\u3002",
+        "\u5B83\u8DD1\u5B8C\u4E4B\u540E\u8FD9\u4E00\u8F6E\u4F1A\u843D\u8FDB\u4F1A\u8BDD\u5E93\uFF08\u5E26 parent_id\uFF09\uFF1A\u60F3\u77E5\u9053\u5B83\u4E2D\u95F4\u8BFB\u4E86\u4EC0\u4E48\u3001\u8BD5\u8FC7\u54EA\u4E9B\u8DEF\uFF0C\u7528 session_trace \u627E\u5230\u5B83\u7684\u4F1A\u8BDD\u518D session_messages_read \u8FDB\u53BB\u770B\u3002",
         ...renderRoles(listRoles())
       ].join("\n");
     },
@@ -1863,7 +2256,11 @@ function createDelegateTool(runner, config, roles) {
           },
           goal: { type: "string", description: "\u5355\u4E2A\u4EFB\u52A1\u7684\u76EE\u6807\uFF08tasks \u7684\u7B80\u5199\u5F62\u5F0F\uFF09" },
           ...role ? { role } : {},
-          max_concurrent: { type: "number", description: "\u6700\u5927\u5E76\u53D1\u6570\uFF08\u9ED8\u8BA4 3\uFF09" }
+          max_concurrent: { type: "number", description: "\u6700\u5927\u5E76\u53D1\u6570\uFF08\u9ED8\u8BA4 3\uFF09" },
+          background: {
+            type: "boolean",
+            description: "true = \u6D3E\u5230\u540E\u53F0\u7ACB\u523B\u8FD4\u56DE\u4F5C\u4E1A id\uFF08a1\uFF09\uFF1B\u4E0D\u7ED9 = \u7B49\u5B83\u4EEC\u5168\u90E8\u8DD1\u5B8C\u518D\u8FD4\u56DE\u3002"
+          }
         }
       };
     },
@@ -1878,21 +2275,21 @@ function createDelegateTool(runner, config, roles) {
     operation: "command",
     describeTarget: (args) => {
       const tasks = Array.isArray(args["tasks"]) ? args["tasks"] : [];
-      const goals = tasks.map((t81) => String(t81["goal"] ?? ""));
+      const goals = tasks.map((t83) => String(t83["goal"] ?? ""));
       const single = typeof args["goal"] === "string" ? args["goal"] : "";
       return [...goals, single].filter(Boolean).join(" | ");
     },
     async execute(args, ctx) {
       const start = Date.now();
       const rawTasks = Array.isArray(args["tasks"]) ? args["tasks"] : void 0;
-      const tasks = rawTasks?.map((t81) => {
-        const o = t81;
+      const tasks = rawTasks?.map((t83) => {
+        const o = t83;
         return {
           goal: String(o["goal"] ?? "").trim(),
           context: String(o["context"] ?? ""),
           ...typeof o["role"] === "string" && o["role"].trim() ? { role: o["role"].trim() } : {}
         };
-      }).filter((t81) => t81.goal.length > 0);
+      }).filter((t83) => t83.goal.length > 0);
       const goal = typeof args["goal"] === "string" ? args["goal"].trim() : "";
       const topRole = typeof args["role"] === "string" ? args["role"].trim() : "";
       if ((!tasks || tasks.length === 0) && !goal) {
@@ -1908,7 +2305,7 @@ function createDelegateTool(runner, config, roles) {
         };
       }
       const known = listRoles();
-      const requested = [...(tasks ?? []).map((t81) => t81.role), topRole].filter(
+      const requested = [...(tasks ?? []).map((t83) => t83.role), topRole].filter(
         (r) => Boolean(r)
       );
       const unknown = [...new Set(requested)].filter((r) => !known.some((k) => k.name === r));
@@ -1930,7 +2327,8 @@ function createDelegateTool(runner, config, roles) {
           ...tasks && tasks.length > 0 ? { tasks } : {},
           ...goal ? { goal } : {},
           ...topRole ? { role: topRole } : {},
-          ...maxConcurrent ? { max_concurrent: maxConcurrent } : {}
+          ...maxConcurrent ? { max_concurrent: maxConcurrent } : {},
+          ...args["background"] === true ? { background: true } : {}
         },
         ctx.sessionId,
         ctx.signal
@@ -2082,8 +2480,8 @@ function createGoalTool(deps) {
 }
 var VALID_TARGETS = ["memory", "user"];
 var VALID_ACTIONS = ["add", "replace", "remove", "search", "read", "budget"];
-function isValidTarget(t81) {
-  return typeof t81 === "string" && VALID_TARGETS.includes(t81);
+function isValidTarget(t83) {
+  return typeof t83 === "string" && VALID_TARGETS.includes(t83);
 }
 function isValidAction(a) {
   return VALID_ACTIONS.includes(a);
@@ -2278,6 +2676,9 @@ function unknownToolNotice(name) {
 function codeModeDeclaredNotice(name) {
   return `\u5DE5\u5177 ${name} \u4E0D\u5728\u4F60\u7684\u5DE5\u5177\u8868\u91CC\uFF0C\u4F46\u5B83**\u5B58\u5728** \u2014\u2014 \u5F53\u524D\u662F code \u6863\uFF0C\u5B83\u548C\u5176\u4F59\u8BFB\u7C7B\u5DE5\u5177\u4E00\u8D77\u6539\u4EE5 <code_mode_sdk> \u90A3\u6BB5\u58F0\u660E\u5B58\u5728\u3002\u8BF7\u7528 run_code \u5199\u4E00\u6BB5\u7A0B\u5E8F\u3001\u5728\u91CC\u9762 \`await tools.${name}({ ... })\` \u8C03\u5B83\u3002`;
 }
+function policyNotice() {
+  return "run_code \u7684\u8FD0\u884C\u65F6\u6743\u9650\u7B56\u7565\u6CA1\u80FD\u542F\u52A8\u5B83\u81EA\u5DF1\u7684\u5165\u53E3\uFF08\u5185\u90E8\u914D\u7F6E\u95EE\u9898\uFF09\u3002\u8FD9\u4E0D\u662F\u4F60\u7684\u7A0B\u5E8F\u7684\u95EE\u9898\uFF0C\u8BF7\u6539\u7528\u76F4\u63A5\u8C03\u7528\u5DE5\u5177\u3002";
+}
 function noChannelNotice() {
   return "run_code \u5728\u5F53\u524D\u5BBF\u4E3B\u91CC\u4E0D\u53EF\u7528\uFF1A\u5B50\u8C03\u7528\u901A\u9053\u6CA1\u6709\u63A5\u4E0A\u3002\u8BF7\u6539\u7528\u76F4\u63A5\u8C03\u7528\u5DE5\u5177\u3002";
 }
@@ -2297,6 +2698,47 @@ ${outcome.value}`);
   if (parts.length === 1 && outcome.ok) parts.push("(\u7A0B\u5E8F\u6CA1\u6709\u6253\u5370\u4E5F\u6CA1\u6709\u8FD4\u56DE\u4EFB\u4F55\u4E1C\u897F)");
   return parts.join("\n");
 }
+function workerExecArgv(input) {
+  const flag = permissionFlag();
+  if (!flag) return void 0;
+  const entryDirs = bothForms(parentOf(realOrSame(input.entry)));
+  const cwds = bothForms(input.cwd);
+  const tmps = bothForms(tmpdir());
+  const args = [flag];
+  for (const dir of unique([...entryDirs, ...cwds, ...tmps])) args.push(`--allow-fs-read=${dir}`);
+  for (const dir of unique([...cwds, ...tmps])) args.push(`--allow-fs-write=${dir}`);
+  return args;
+}
+function bothForms(path) {
+  const real = realOrSame(path);
+  return real === path ? [path] : [path, real];
+}
+function workerEnv() {
+  const kept = {};
+  for (const key of TEMP_ENV_KEYS) {
+    const value = process.env[key];
+    if (value) kept[key] = value;
+  }
+  return kept;
+}
+var TEMP_ENV_KEYS = ["TMPDIR", "TMP", "TEMP"];
+function permissionFlag() {
+  return process.allowedNodeEnvironmentFlags.has("--permission") ? "--permission" : void 0;
+}
+function realOrSame(path) {
+  try {
+    return realpathSync(path);
+  } catch {
+    return path;
+  }
+}
+function parentOf(path) {
+  const cut = Math.max(path.lastIndexOf("/"), path.lastIndexOf("\\"));
+  return cut > 0 ? path.slice(0, cut) : path;
+}
+function unique(paths) {
+  return [...new Set(paths.filter((p) => p.length > 0))];
+}
 var WORKER_BASENAME = "worker";
 var WORKER_DIR = "code-mode";
 function resolveCodeModeWorker(baseDir, exists2 = existsSync) {
@@ -2330,11 +2772,14 @@ async function runCode(input) {
     maxValueChars: limits.maxValueChars,
     cwd: input.cwd
   };
+  const execArgv = workerExecArgv({ entry, cwd: input.cwd });
   const worker = new Worker(entry, {
     workerData,
     stdout: true,
     stderr: true,
-    resourceLimits: { maxOldGenerationSizeMb: limits.maxMemoryMb }
+    resourceLimits: { maxOldGenerationSizeMb: limits.maxMemoryMb },
+    env: workerEnv(),
+    ...execArgv ? { execArgv } : {}
   });
   let printed = "";
   const take = (text) => {
@@ -2394,7 +2839,7 @@ async function runCode(input) {
     });
     worker.on("error", (err) => {
       if (settled) return;
-      ending = err.code === "ERR_WORKER_OUT_OF_MEMORY" ? { kind: "oom", message: oomNotice(limits.maxMemoryMb) } : { kind: "failed", message: err.message };
+      ending = err.code === "ERR_WORKER_OUT_OF_MEMORY" ? { kind: "oom", message: oomNotice(limits.maxMemoryMb) } : err.code === "ERR_ACCESS_DENIED" ? { kind: "policy", message: policyNotice() } : { kind: "failed", message: err.message };
       finish();
     });
     worker.on("exit", () => {
@@ -2482,6 +2927,7 @@ function createRunCodeTool(deps = {}) {
       "**\u53EA\u6709\u4F60 print \u51FA\u6765\u7684\u548C return \u7684\u4F1A\u56DE\u5230\u5BF9\u8BDD\u91CC** \u2014\u2014 \u81EA\u5DF1\u7B5B\u3002",
       "",
       `\u9650\u5236\uFF1A\`tools.*\` \u53EA\u653E\u884C**\u53EA\u8BFB**\u5DE5\u5177\uFF08\u5199\u6587\u4EF6\u3001\u8DD1\u547D\u4EE4\u8BF7\u5728\u7A0B\u5E8F\u5916\u76F4\u63A5\u8C03\u90A3\u4E9B\u5DE5\u5177\uFF09\uFF1B\u6700\u591A ${limits.maxToolCalls} \u6B21\u5B50\u8C03\u7528\uFF1B\u9ED8\u8BA4 ${Math.round(limits.timeoutMs / 1e3)} \u79D2\u8D85\u65F6\uFF08timeout \u53C2\u6570\u53EF\u8C03\uFF09\u3002`,
+      "\u7A0B\u5E8F\u672C\u8EAB\u4E5F\u53D7\u9650\u5236\uFF1A\u53EA\u80FD\u8BFB\u5199\u8FD9\u6BB5\u4F1A\u8BDD\u7684\u5DE5\u4F5C\u76EE\u5F55\uFF08\u548C\u7CFB\u7EDF\u4E34\u65F6\u76EE\u5F55\uFF09\uFF0C\u8D77\u4E0D\u4E86\u5B50\u8FDB\u7A0B\uFF0C\u770B\u4E0D\u5230\u73AF\u5883\u53D8\u91CF\uFF1B\u8054\u7F51\u4ECD\u7136\u53EF\u4EE5\u3002",
       "\u6BCF\u4E00\u6B21 `tools.*` \u5B50\u8C03\u7528\u90FD\u7167\u5E38\u8D70\u6743\u9650\u5224\u5B9A\u548C\u5BA1\u6279\u3002",
       "**\u6574\u6BB5\u7A0B\u5E8F\u81EA\u5DF1\u4E5F\u8981\u5148\u8FC7\u4E00\u6B21\u5BA1\u6279** \u2014\u2014 \u7528\u6237\u770B\u5230\u7684\u662F\u7A0B\u5E8F\u5168\u6587\uFF0C\u6279\u7684\u662F\u300C\u8FD9\u6BB5\u7A0B\u5E8F\u53EF\u4EE5\u8DD1\u300D\u3002",
       "\u7A0B\u5E8F\u91CC\u7684\u5B50\u8C03\u7528**\u770B\u5F97\u5230\u5B8C\u6574\u8F93\u51FA**\uFF08\u6BD4\u4F60\u76F4\u63A5\u8C03\u90A3\u4E2A\u5DE5\u5177\u770B\u5230\u7684\u591A\u5F97\u591A\uFF09\u2014\u2014 \u6240\u4EE5\u7B5B\u5728\u7A0B\u5E8F\u91CC\u505A\u3002"
@@ -2707,48 +3153,13 @@ function createExitTool(deps) {
 function createPlanModeTools(deps) {
   return [createEnterTool(deps), createExitTool(deps)];
 }
-var SCHEDULE_ISSUE_CODES = [
-  "name-empty",
-  "prompt-empty",
-  "permission-unknown",
-  "work-dir-missing",
-  "budget-missing",
-  "max-turns-invalid",
-  "timeout-invalid",
-  "trigger-time-invalid",
-  "trigger-times-too-many",
-  "trigger-weekdays-empty",
-  "trigger-days-invalid",
-  "trigger-interval-invalid",
-  "trigger-once-date-invalid",
-  "trigger-once-past",
-  "date-range-invalid",
-  "date-range-on-once",
-  "rule-invalid",
-  "bypass-needs-workdir",
-  "bypass-workdir-too-broad",
-  "bypass-needs-limits",
-  "bypass-not-confirmed"
-];
-var SCHEDULE_DEFAULTS = {
-  maxTurns: DEFAULT_MAX_TURNS,
-  timeoutMs: 60 * 60 * 1e3
-};
-var SCHEDULE_FORM_BUDGET_USD = 200;
-var SCHEDULE_DEFAULT_ALLOWLIST = {
-  allowTools: [],
-  allowOperations: ["file_read"],
-  allowRules: []
-};
-// src/schedule/draft.ts
 var bad = (message) => ({ ok: false, message });
 var good = (value) => ({ ok: true, value });
 var PERMISSION_ORDER = [
   "plan",
   "default",
   "acceptEdits",
-  "auto",
-  "bypass"
+  "auto"
 ];
 var OPERATION_TYPES = [
   "file_read",
@@ -2790,17 +3201,11 @@ function operationList(v) {
 function permission(v) {
   const s = str(v);
   if (s === void 0) return bad("permission \u662F\u7A7A\u7684");
-  if (!PERMISSION_ORDER.includes(s)) {
+  const normalized = resolvePermissionLevel(s) ?? s;
+  if (!PERMISSION_ORDER.includes(normalized)) {
     return bad(`permission \u53EA\u80FD\u662F ${PERMISSION_ORDER.join(" / ")} \u4E4B\u4E00\uFF0C\u6536\u5230\u7684\u662F ${s}`);
   }
-  return good(s);
-}
-function budget(v) {
-  if (v === void 0) return good(void 0);
-  if (typeof v !== "number" || !Number.isFinite(v) || v <= 0) {
-    return bad("maxBudgetUsd \u8981\u662F\u5927\u4E8E 0 \u7684\u6570\uFF08\u5355\u4F4D\u7F8E\u5143\uFF09\u3002\u4E0D\u7ED9\u5C31\u6309\u65B0\u5EFA\u8868\u5355\u90A3\u4E2A\u7F3A\u7701\uFF08200\uFF09");
-  }
-  return good(v);
+  return good(normalized);
 }
 function clock(v) {
   const s = str(v);
@@ -2913,13 +3318,11 @@ function parseCreate(raw, note) {
   }
   const trigger = parseTrigger(raw["trigger"]);
   if (!trigger.ok) return trigger;
-  const level = permission(raw["permission"]);
+  const level = raw["permission"] === void 0 ? good(SCHEDULE_DEFAULT_PERMISSION) : permission(raw["permission"]);
   if (!level.ok) return level;
   const allow = parseAllowlist(raw);
   if (!allow.ok) return allow;
   const workDir = str(raw["workDir"]);
-  const usd = budget(raw["maxBudgetUsd"]);
-  if (!usd.ok) return usd;
   return good({
     action: "create",
     name,
@@ -2928,7 +3331,6 @@ function parseCreate(raw, note) {
     permission: level.value,
     note,
     ...workDir === void 0 ? {} : { workDir },
-    ...usd.value === void 0 ? {} : { maxBudgetUsd: usd.value },
     ...allow.value
   });
 }
@@ -2963,9 +3365,6 @@ function parseUpdate(raw, note) {
   const timeout = posInt(raw["timeoutMs"], "timeoutMs");
   if (!timeout.ok) return timeout;
   if (timeout.value !== void 0) patch.timeoutMs = timeout.value;
-  const usd = budget(raw["maxBudgetUsd"]);
-  if (!usd.ok) return usd;
-  if (usd.value !== void 0) patch.maxBudgetUsd = usd.value;
   if (Object.keys(patch).length === 0) {
     return bad(
       "update \u4E00\u683C\u90FD\u6CA1\u6539\u3002\u4E00\u4EFD\u4EC0\u4E48\u90FD\u4E0D\u6539\u7684\u63D0\u6848\u4F1A\u767D\u5360\u7528\u6237\u4E00\u6B21\u70B9\u51FB \u2014\u2014 \u8981\u4E48\u7ED9\u51FA\u5177\u4F53\u6539\u54EA\u51E0\u683C\uFF0C\u8981\u4E48\u522B\u63D0"
@@ -2991,7 +3390,7 @@ function parseScheduleDraft(raw) {
 }
 function draftWidening(draft, current) {
   const out = [];
-  const base2 = draft.action === "update" && current ? current.permission : "default";
+  const base2 = draft.action === "update" && current ? current.permission : SCHEDULE_DEFAULT_PERMISSION;
   const level = draft.permission;
   if (level !== void 0 && PERMISSION_ORDER.indexOf(level) > PERMISSION_ORDER.indexOf(base2)) {
     out.push("permission");
@@ -3045,9 +3444,39 @@ function draftCommandLine(draft) {
   for (const tool of draft.allowTools ?? []) argv.push("--allow-tool", shellArg(tool));
   for (const op2 of draft.allowOperations ?? []) argv.push("--allow-operation", op2);
   for (const rule of draft.allowRules ?? []) argv.push("--allow-rule", shellArg(rule));
-  argv.push("--budget", String(draft.maxBudgetUsd ?? SCHEDULE_FORM_BUDGET_USD));
   return argv.join(" ");
 }
+var SCHEDULE_ISSUE_CODES = [
+  "name-empty",
+  "prompt-empty",
+  "permission-unknown",
+  "work-dir-missing",
+  "max-turns-invalid",
+  "timeout-invalid",
+  "trigger-time-invalid",
+  "trigger-times-too-many",
+  "trigger-weekdays-empty",
+  "trigger-days-invalid",
+  "trigger-interval-invalid",
+  "trigger-once-date-invalid",
+  "trigger-once-past",
+  "date-range-invalid",
+  "date-range-on-once",
+  "rule-invalid",
+  "bypass-needs-workdir",
+  "bypass-workdir-too-broad",
+  "bypass-needs-limits",
+  "bypass-not-confirmed"
+];
+var SCHEDULE_DEFAULTS = {
+  maxTurns: DEFAULT_MAX_TURNS,
+  timeoutMs: 60 * 60 * 1e3
+};
+var SCHEDULE_DEFAULT_ALLOWLIST = {
+  allowTools: [],
+  allowOperations: ["file_read"],
+  allowRules: []
+};
 // src/schedule/unattended-lint.ts
 var ANCHORS = [
   { kind: "asks-human", zh: /问(?:一下|下)?我/, en: /\bask\s+(?:me|us)\b/i },
@@ -3477,15 +3906,12 @@ function validateSchedule(input) {
   const now = input.now ?? Date.now();
   if (!input.name.trim()) issues.push({ code: "name-empty" });
   if (!input.prompt.trim()) issues.push({ code: "prompt-empty" });
-  if (!isPermissionLevel(input.permission)) {
+  if (!resolvePermissionLevel(input.permission)) {
     issues.push({ code: "permission-unknown", detail: input.permission });
   }
   if (input.workDir && !isExistingDir(input.workDir)) {
     issues.push({ code: "work-dir-missing", detail: input.workDir });
   }
-  if (!Number.isFinite(input.maxBudgetUsd) || input.maxBudgetUsd <= 0) {
-    issues.push({ code: "budget-missing", detail: String(input.maxBudgetUsd) });
-  }
   if (!Number.isInteger(input.maxTurns) || input.maxTurns < 0) {
     issues.push({ code: "max-turns-invalid", detail: String(input.maxTurns) });
   }
@@ -3498,7 +3924,8 @@ function validateSchedule(input) {
   for (const issue of rules.issues) {
     issues.push({ code: "rule-invalid", detail: issue.message });
   }
-  if (input.permission === "bypass") {
+  const level = resolvePermissionLevel(input.permission);
+  if (level && approvalPolicyForLevel(level) === "never") {
     issues.push(...bypassIssues(input));
   }
   return {
@@ -3511,7 +3938,7 @@ function bypassIssues(input) {
   if (input.workDir.trim() && isTooBroad(input.workDir, input.homeDir)) {
     issues.push({ code: "bypass-workdir-too-broad", detail: input.workDir });
   }
-  const missingRuler = !(input.maxBudgetUsd > 0) || !(input.timeoutMs > 0);
+  const missingRuler = !(input.timeoutMs > 0);
   if (missingRuler) issues.push({ code: "bypass-needs-limits" });
   if (input.bypassAcknowledged !== true) issues.push({ code: "bypass-not-confirmed" });
   return issues;
@@ -3529,7 +3956,7 @@ function isExistingDir(path) {
   }
 }
 function needsAllowlist(permission2) {
-  return permission2 !== "plan" && permission2 !== "bypass";
+  return permission2 !== "plan" && approvalPolicyForLevel(permission2) !== "never";
 }
 // src/tools/builtin/schedule-draft.ts
 function say4(text, ok2, startedAt) {
@@ -3545,22 +3972,18 @@ var WIDENING_TEXT = {
   allowlist: "\u6E05\u5355\u591A\u4E86\u6761\u76EE\uFF08= \u591A\u4E86\u51E0\u4EF6\u4E0D\u7ECF\u786E\u8BA4\u5C31\u4F1A\u505A\u7684\u4E8B\uFF09",
   enabled: "\u628A\u4E00\u6761\u505C\u7528\u7684\u4EFB\u52A1\u6539\u6210\u542F\u7528"
 };
-function budgetOf(draft, current) {
-  return draft.maxBudgetUsd ?? current?.maxBudgetUsd ?? SCHEDULE_FORM_BUDGET_USD;
-}
 function validateDraft(draft, homeDir, current) {
-  const permission2 = draft.permission ?? current?.permission ?? "default";
+  const permission2 = draft.permission ?? current?.permission ?? SCHEDULE_DEFAULT_PERMISSION;
   const merged = draft.action === "create" ? {
     name: draft.name,
     prompt: draft.prompt,
     permission: permission2,
     workDir: draft.workDir ?? "",
     maxTurns: SCHEDULE_DEFAULTS.maxTurns,
-    maxBudgetUsd: budgetOf(draft),
     timeoutMs: SCHEDULE_DEFAULTS.timeoutMs,
     trigger: draft.trigger,
     allowRules: draft.allowRules ?? [],
-    bypassAcknowledged: permission2 === "bypass",
+    bypassAcknowledged: approvalPolicyForLevel(permission2) === "never",
     homeDir
   } : {
     name: draft.name ?? current?.name ?? "",
@@ -3568,11 +3991,10 @@ function validateDraft(draft, homeDir, current) {
     permission: permission2,
     workDir: draft.workDir ?? current?.workDir ?? "",
     maxTurns: draft.maxTurns ?? current?.maxTurns ?? SCHEDULE_DEFAULTS.maxTurns,
-    maxBudgetUsd: budgetOf(draft, current),
     timeoutMs: draft.timeoutMs ?? current?.timeoutMs ?? SCHEDULE_DEFAULTS.timeoutMs,
     trigger: draft.trigger ?? current?.trigger ?? { kind: "cron", cycle: "daily", at: "09:00" },
     allowRules: draft.allowRules ?? current?.allowRules ?? [],
-    bypassAcknowledged: permission2 === "bypass",
+    bypassAcknowledged: approvalPolicyForLevel(permission2) === "never",
     homeDir
   };
   return validateSchedule(merged).issues.map(
@@ -3666,15 +4088,14 @@ function summarizeSaved(draft, def, registration, current) {
   return lines.join("\n");
 }
 async function persist(save, draft, current) {
-  const permission2 = draft.permission ?? current?.permission ?? "default";
-  const acknowledged = { bypassAcknowledged: permission2 === "bypass" };
+  const permission2 = draft.permission ?? current?.permission ?? SCHEDULE_DEFAULT_PERMISSION;
+  const acknowledged = { bypassAcknowledged: approvalPolicyForLevel(permission2) === "never" };
   if (draft.action === "create") {
     return save.create(
       {
         name: draft.name,
         prompt: draft.prompt,
-        permission: draft.permission,
-        maxBudgetUsd: budgetOf(draft),
+        permission: permission2,
         trigger: draft.trigger,
         ...draft.workDir === void 0 ? {} : { workDir: draft.workDir },
         ...draft.allowTools === void 0 ? {} : { allowTools: draft.allowTools },
@@ -3695,7 +4116,6 @@ async function persist(save, draft, current) {
       ...draft.enabled === void 0 ? {} : { enabled: draft.enabled },
       ...draft.maxTurns === void 0 ? {} : { maxTurns: draft.maxTurns },
       ...draft.timeoutMs === void 0 ? {} : { timeoutMs: draft.timeoutMs },
-      ...draft.maxBudgetUsd === void 0 ? {} : { maxBudgetUsd: draft.maxBudgetUsd },
       ...draft.allowTools === void 0 ? {} : { allowTools: draft.allowTools },
       ...draft.allowOperations === void 0 ? {} : { allowOperations: draft.allowOperations },
       ...draft.allowRules === void 0 ? {} : { allowRules: draft.allowRules }
@@ -3706,7 +4126,7 @@ async function persist(save, draft, current) {
 function createScheduleDraftTool(deps) {
   return {
     name: SCHEDULE_DRAFT_TOOL,
-    description: "\u5EFA\u4E00\u6761\u5B9A\u65F6\u4EFB\u52A1\uFF0C\u6216\u8005\u6539\u4E00\u6761\u5DF2\u6709\u7684\u3002\u5B9A\u65F6\u4EFB\u52A1\u662F\u300C\u5230\u70B9\u4E86\u81EA\u5DF1\u8DD1\u4E00\u6B21\u300D\u2014\u2014\u7528\u6237\u8BF4\u300C\u4EE5\u540E\u6BCF\u5929/\u6BCF\u5468\u5E2E\u6211\u505A\u67D0\u4EF6\u4E8B\u300D\u300C\u5B9A\u671F\u68C0\u67E5\u67D0\u67D0\u300D\uFF0C\u6216\u8005\u4F60\u53D1\u73B0\u67D0\u4EF6\u4E8B\u4ED6\u6BCF\u6B21\u90FD\u8981\u624B\u52A8\u505A\u4E00\u904D\u65F6\uFF0C\u7528\u5B83\u3002action=list \u770B\u73B0\u6709\u4EFB\u52A1\uFF08\u8981\u6539\u67D0\u6761\u5FC5\u987B\u5148 list \u62FF\u5230 id\uFF09\uFF1Baction=create \u76F4\u63A5\u5EFA\u4E00\u6761\uFF1Baction=update \u76F4\u63A5\u6539\u4E00\u6761\u3002\u26A0\uFE0F **\u5B83\u4EA4\u4E0A\u53BB\u5C31\u751F\u6548**\uFF08plan \u53EA\u8BFB\u6863\u4E0B\u9664\u5916\uFF0C\u90A3\u4E00\u6863\u53EA\u4EA4\u63D0\u6848\uFF09\u2014\u2014 \u5EFA\u5B8C\u5728\u4F60\u7684\u56DE\u590D\u91CC\u4EA4\u4EE3\u4E00\u53E5\u5C31\u884C\uFF0C\u522B\u95EE\u300C\u8981\u4E0D\u8981\u6211\u5EFA\u300D\u3002\u9884\u7B97\u4E0D\u7ED9\u5C31\u662F 200 \u7F8E\u5143\uFF1B\u8FD9\u6D3B\u660E\u663E\u66F4\u8F7B\u6216\u66F4\u91CD\u65F6\u81EA\u5DF1\u7ED9 maxBudgetUsd\u3002\u6743\u9650\u6863 plan/default/acceptEdits/auto/bypass \u90FD\u80FD\u63D0 \u2014\u2014 \u4F46**\u9ED8\u8BA4\u7528 plan**\uFF1A\u53EA\u8BFB\u6863\u5929\u7136\u96F6\u6388\u6743\u9762\uFF0C\u9700\u8981\u5199\u4E1C\u897F\u518D\u7528 default \u52A0\u4E00\u4EFD\u7CBE\u786E\u7684 allowRules\uFF08\u6BD4\u5982 terminal(git status)\uFF09\uFF0C\u522B\u4E00\u4E0A\u6765\u5C31 bypass\u3002",
+    description: "\u5EFA\u4E00\u6761\u5B9A\u65F6\u4EFB\u52A1\uFF0C\u6216\u8005\u6539\u4E00\u6761\u5DF2\u6709\u7684\u3002\u5B9A\u65F6\u4EFB\u52A1\u662F\u300C\u5230\u70B9\u4E86\u81EA\u5DF1\u8DD1\u4E00\u6B21\u300D\u2014\u2014\u7528\u6237\u8BF4\u300C\u4EE5\u540E\u6BCF\u5929/\u6BCF\u5468\u5E2E\u6211\u505A\u67D0\u4EF6\u4E8B\u300D\u300C\u5B9A\u671F\u68C0\u67E5\u67D0\u67D0\u300D\uFF0C\u6216\u8005\u4F60\u53D1\u73B0\u67D0\u4EF6\u4E8B\u4ED6\u6BCF\u6B21\u90FD\u8981\u624B\u52A8\u505A\u4E00\u904D\u65F6\uFF0C\u7528\u5B83\u3002action=list \u770B\u73B0\u6709\u4EFB\u52A1\uFF08\u8981\u6539\u67D0\u6761\u5FC5\u987B\u5148 list \u62FF\u5230 id\uFF09\uFF1Baction=create \u76F4\u63A5\u5EFA\u4E00\u6761\uFF1Baction=update \u76F4\u63A5\u6539\u4E00\u6761\u3002\u26A0\uFE0F **\u5B83\u4EA4\u4E0A\u53BB\u5C31\u751F\u6548**\uFF08plan \u53EA\u8BFB\u6863\u4E0B\u9664\u5916\uFF0C\u90A3\u4E00\u6863\u53EA\u4EA4\u63D0\u6848\uFF09\u2014\u2014 \u5EFA\u5B8C\u5728\u4F60\u7684\u56DE\u590D\u91CC\u4EA4\u4EE3\u4E00\u53E5\u5C31\u884C\uFF0C\u522B\u95EE\u300C\u8981\u4E0D\u8981\u6211\u5EFA\u300D\u3002\u6743\u9650\u6863\u4E0D\u7ED9\u5C31\u662F auto\uFF08\u65B0\u5EFA\u4EFB\u52A1\u7684\u7F3A\u7701\uFF09\u2014\u2014 \u5B9A\u65F6\u4EFB\u52A1\u6CA1\u4EBA\u53EF\u95EE\uFF0C\u4F4E\u6863\u5728\u8FD9\u91CC\u7B49\u4E8E\u300C\u5230\u70B9\u5FC5\u7136\u5931\u8D25\u300D\u3002\u53EA\u6709\u7528\u6237\u660E\u786E\u8981\u6C42\u300C\u53EA\u8BFB / \u522B\u52A8\u4E1C\u897F\u300D\u65F6\u624D\u7528 plan\uFF0C\u90A3\u7C7B\u4EFB\u52A1\u5929\u7136\u96F6\u6388\u6743\u9762\u3002",
     parameters: {
       type: "object",
       properties: {
@@ -3750,12 +4170,8 @@ function createScheduleDraftTool(deps) {
         },
         permission: {
           type: "string",
-          description: "\u6743\u9650\u6863\u3002plan=\u53EA\u8BFB\uFF08\u8BFB\u4E00\u904D\u5199\u4EFD\u62A5\u544A\u7684\u4EFB\u52A1\u5C31\u8BE5\u7528\u5B83\uFF0C\u5929\u7136\u96F6\u6388\u6743\u9762\uFF09\uFF1Bdefault=\u6309\u9700\u786E\u8BA4\uFF1BacceptEdits=\u81EA\u52A8\u63A5\u53D7\u6539\u52A8\uFF1Bauto=\u4E0D\u518D\u786E\u8BA4\uFF1Bbypass=\u8DF3\u8FC7\u5168\u90E8\u68C0\u67E5\uFF08**\u6700\u540E\u624B\u6BB5**\uFF1A\u5230\u70B9\u4E86\u5B83\u60F3\u8DD1\u4EC0\u4E48\u5C31\u8DD1\u4EC0\u4E48\uFF09",
-          enum: ["plan", "default", "acceptEdits", "auto", "bypass"]
-        },
-        maxBudgetUsd: {
-          type: "number",
-          description: "\u6BCF\u6B21\u6700\u591A\u82B1\u591A\u5C11\u94B1\uFF08\u7F8E\u5143\uFF0C\u8981\u5927\u4E8E 0\uFF09\u3002\u4E0D\u7ED9\u5C31\u662F 200\u3002\u8FD9\u6D3B\u660E\u663E\u66F4\u8F7B\uFF08\u8BFB\u4E00\u4E2A\u6587\u4EF6\u3001\u53D1\u4E00\u6761\u6D88\u606F\uFF09\u5C31\u7ED9\u5C0F\u4E00\u70B9\uFF0C\u660E\u663E\u66F4\u91CD\uFF08\u626B\u5927\u4ED3\u3001\u591A\u8F6E\u8C03\u7814\uFF09\u5C31\u653E\u5927 \u2014\u2014 \u82B1\u8D85\u4E86\u90A3\u4E00\u8F6E\u4F1A\u505C\u4F4F"
+          description: "\u6743\u9650\u6863\u3002\u4E0D\u7ED9\u5C31\u662F auto\uFF08**\u65B0\u5EFA\u4EFB\u52A1\u7684\u7F3A\u7701**\uFF0C2026-10-27 \u8D77\uFF1A\u5B9A\u65F6\u4EFB\u52A1\u6CA1\u4EBA\u53EF\u95EE\uFF0C\u4F4E\u6863\u5728\u8FD9\u91CC\u7B49\u4E8E\u300C\u5230\u70B9\u5FC5\u7136\u5931\u8D25\u300D\uFF09\u3002auto=\u5B8C\u5168\u8BBF\u95EE\uFF08\u4E0D\u518D\u786E\u8BA4\uFF0C\u53EA\u5269\u707E\u96BE\u7EA7\u4F1A\u88AB\u62E6\u4E0B\uFF09\uFF1BacceptEdits=\u8BF7\u6C42\u6279\u51C6\uFF1Bdefault=\u9010\u6761\u786E\u8BA4\uFF1Bplan=\u53EA\u8BFB\uFF08\u8BFB\u4E00\u904D\u5199\u4EFD\u62A5\u544A\u7684\u4EFB\u52A1\u7528\u5B83\uFF0C\u5929\u7136\u96F6\u6388\u6743\u9762\uFF09\u3002**\u53EA\u6709\u5728\u7528\u6237\u660E\u786E\u8BF4\u4E86\u8981\u7A84\u4E00\u6863\u65F6\u624D\u964D**",
+          enum: ["plan", "default", "acceptEdits", "auto"]
         },
         allowTools: {
           type: "array",
@@ -4010,12 +4426,15 @@ function traceSession(db, input) {
     truncated
   };
 }
+// src/session/types.ts
+var DELEGATE_SESSION_SOURCE = "delegate";
 // src/session/query.ts
 var SESSION_SEARCH_TOOL = "session_search";
 var SESSION_MESSAGES_SEARCH_TOOL = "session_messages_search";
 var SESSION_MESSAGES_READ_TOOL = "session_messages_read";
 var SESSION_TRACE_TOOL = "session_trace";
 var SESSION_LIST_TOOL = "session_list";
+var DELEGATE_CLAUSE = "AND COALESCE(s.source, '') != @delegateSource";
 var SESSION_QUERY_TOOLS = Object.freeze([
   SESSION_SEARCH_TOOL,
   SESSION_MESSAGES_SEARCH_TOOL,
@@ -4118,8 +4537,9 @@ var SessionQueries = class {
   listSessions(input) {
     const vis = resolveSessionVisibility({ ...input, db: this.db });
     const archivedClause = input.archived === "all" ? "" : input.archived === "only" ? "AND s.archived = 1" : "AND s.archived = 0";
-    const where = `${vis.clause} ${archivedClause}`;
-    const total = this.db.prepare(`SELECT count(*) AS n FROM sessions s WHERE ${where}`).get(vis.params).n;
+    const where = `${vis.clause} ${archivedClause} ${DELEGATE_CLAUSE}`;
+    const params = { ...vis.params, delegateSource: DELEGATE_SESSION_SOURCE };
+    const total = this.db.prepare(`SELECT count(*) AS n FROM sessions s WHERE ${where}`).get(params).n;
     const rows = this.db.prepare(
       `SELECT s.id,
                 COALESCE(NULLIF(s.display_name, ''), s.title) AS title,
@@ -4131,7 +4551,7 @@ var SessionQueries = class {
           WHERE ${where}
           ORDER BY COALESCE(s.updated_at, s.started_at) DESC
           LIMIT @limit`
-    ).all({ ...vis.params, limit: input.limit });
+    ).all({ ...params, limit: input.limit });
     return {
       total,
       sessions: rows.map((row) => ({
@@ -4359,41 +4779,41 @@ function clampWindow(raw, fallback2, max) {
 function stamp2(ms) {
   return new Date(ms).toISOString().slice(0, 16).replace("T", " ");
 }
-function budgetOf2(total) {
+function budgetOf(total) {
   const shares = ANCHOR_SHARE + Math.max(0, total - 1);
   const unit = Math.max(MIN_BODY, Math.floor(BODY_BUDGET / shares));
   return { anchor: unit * ANCHOR_SHARE, other: unit };
 }
-function body(text, budget2) {
+function body(text, budget) {
   const flat = text.replace(/\r\n/g, "\n").trimEnd();
-  if (flat.length <= budget2) return flat;
-  const rest = flat.length - budget2;
-  return `${flat.slice(0, budget2)}
+  if (flat.length <= budget) return flat;
+  const rest = flat.length - budget;
+  return `${flat.slice(0, budget)}
    \u2026[cut ${rest} more chars \u2014 lower before/after to spend the budget on fewer messages]`;
 }
 function surfaceOf(record, isCurrent) {
   if (!isCurrent) return record.surface === "active" ? "active there" : "compacted there";
   return record.surface === "active" ? "still in your context" : "compacted out of your context";
 }
-function renderRecord(record, mark, budget2, isCurrent) {
+function renderRecord(record, mark, budget, isCurrent) {
   const tool = record.toolName ? ` \xB7 ${record.toolName}` : "";
   return [
     `${mark} #${record.messageId} [${record.role}${tool} \xB7 ${stamp2(record.timestamp)} \xB7 ${surfaceOf(record, isCurrent)}]`,
-    `   ${body(record.content, budget2).split("\n").join("\n   ")}`
+    `   ${body(record.content, budget).split("\n").join("\n   ")}`
   ].join("\n");
 }
 function renderWindow(out, sessionId, isCurrent) {
   const anchor = out.anchor;
   if (!anchor) return "";
   const count = out.before.length + out.after.length + 1;
-  const budget2 = budgetOf2(count);
+  const budget = budgetOf(count);
   return [
     `Session ${sessionId}${isCurrent ? " (this session)" : ""} \u2014 ${out.title || "(untitled)"}`,
     `${count} of ${out.total} message(s), around #${anchor.messageId}:`,
     "",
-    ...out.before.map((r) => renderRecord(r, " ", budget2.other, isCurrent)),
-    renderRecord(anchor, "\xBB", budget2.anchor, isCurrent),
-    ...out.after.map((r) => renderRecord(r, " ", budget2.other, isCurrent))
+    ...out.before.map((r) => renderRecord(r, " ", budget.other, isCurrent)),
+    renderRecord(anchor, "\xBB", budget.anchor, isCurrent),
+    ...out.after.map((r) => renderRecord(r, " ", budget.other, isCurrent))
   ].join("\n");
 }
 function createSessionMessagesReadTool(deps) {
@@ -5248,7 +5668,7 @@ function available(tools) {
   if (tools.length === 0) {
     return "No deferred tools in this session \u2014 every tool is already in your tool list.";
   }
-  const names = tools.map((t81) => t81.name).sort();
+  const names = tools.map((t83) => t83.name).sort();
   const shown = names.slice(0, MAX_LISTED);
   const rest = names.length - shown.length;
   return `Searchable tools: ${shown.join(", ")}${rest > 0 ? ` (\u2026and ${rest} more)` : ""}.`;
@@ -5368,19 +5788,22 @@ var TrackerDB = class {
     );
     this.db.transaction(() => {
       this.db.prepare("DELETE FROM todos WHERE session_id = ?").run(sessionId);
-      for (const t81 of todos) {
+      for (const t83 of todos) {
         insertStmt.run({
-          id: t81.id,
+          id: t83.id,
           session_id: sessionId,
-          content: t81.content,
-          status: t81.status,
-          reason: t81.reason || null,
-          created_at: t81.created_at,
-          updated_at: t81.updated_at
+          content: t83.content,
+          status: t83.status,
+          reason: t83.reason || null,
+          created_at: t83.created_at,
+          updated_at: t83.updated_at
         });
       }
     })();
   }
+  deleteBySession(sessionId) {
+    return this.db.prepare("DELETE FROM todos WHERE session_id = ?").run(sessionId).changes;
+  }
   close() {
     releaseDatabase(this.path);
   }
@@ -5398,9 +5821,9 @@ function formatTodoList(todos, pendingCount) {
     cancelled: "\u5DF2\u53D6\u6D88"
   };
   lines.push(`[todo] \u72B6\u6001\u6C47\u603B: ${pendingCount} \u4E2A\u5F85\u5B8C\u6210`);
-  for (const t81 of todos) {
-    const label = statusLabel[t81.status] || t81.status;
-    lines.push(`- [${label}]  ${t81.content}${t81.reason ? ` \u2014\u2014 ${t81.reason}` : ""}`);
+  for (const t83 of todos) {
+    const label = statusLabel[t83.status] || t83.status;
+    lines.push(`- [${label}]  ${t83.content}${t83.reason ? ` \u2014\u2014 ${t83.reason}` : ""}`);
   }
   return lines.join("\n");
 }
@@ -5474,14 +5897,14 @@ function createTodoTool(db) {
           };
         }
         const now = (/* @__PURE__ */ new Date()).toISOString();
-        const existing = new Map(db.listBySession(ctx.sessionId).map((t81) => [t81.id, t81]));
-        const todos = rawTodos.map((t81) => {
-          const prev = t81.id ? existing.get(t81.id) : void 0;
-          const status = isValidStatus(t81.status) ? t81.status : "pending";
-          const reason9 = normalizeReason(status, t81.reason);
+        const existing = new Map(db.listBySession(ctx.sessionId).map((t83) => [t83.id, t83]));
+        const todos = rawTodos.map((t83) => {
+          const prev = t83.id ? existing.get(t83.id) : void 0;
+          const status = isValidStatus(t83.status) ? t83.status : "pending";
+          const reason9 = normalizeReason(status, t83.reason);
           return {
-            id: t81.id || generateShortId(),
-            content: String(t81.content || "").slice(0, 500),
+            id: t83.id || generateShortId(),
+            content: String(t83.content || "").slice(0, 500),
             status,
             ...reason9 ? { reason: reason9 } : {},
             created_at: prev?.created_at || now,
@@ -5489,7 +5912,7 @@ function createTodoTool(db) {
           };
         });
         db.replaceAll(ctx.sessionId, todos);
-        const pendingCount = todos.filter((t81) => isOpenTodo(t81.status)).length;
+        const pendingCount = todos.filter((t83) => isOpenTodo(t83.status)).length;
         return {
           success: true,
           output: formatTodoList(todos, pendingCount),
@@ -5836,7 +6259,7 @@ function intersectNames(base2, incoming) {
   if (!base2) return incoming ? [...incoming] : void 0;
   if (!incoming) return [...base2];
   const baseSet = new Set(base2);
-  return incoming.filter((t81) => baseSet.has(t81));
+  return incoming.filter((t83) => baseSet.has(t83));
 }
 function findRole(roles, name) {
   return roles.find((r) => r.name === name);
@@ -5988,7 +6411,7 @@ function roleScopedProvider(base2, role, blocked) {
     return allow ? allow.has(name) : true;
   };
   return {
-    list: () => base2.list().filter((t81) => permitted(t81.name)),
+    list: () => base2.list().filter((t83) => permitted(t83.name)),
     get: (name) => permitted(name) ? base2.get(name) : void 0
   };
 }
@@ -6015,7 +6438,7 @@ function createRoleScope(base2, sessionRole, blocked) {
 }
 function unknownRoleTools(base2, role, blocked) {
   if (!role?.tools) return [];
-  const available2 = new Set(base2.list().map((t81) => t81.name));
+  const available2 = new Set(base2.list().map((t83) => t83.name));
   const blockedSet = new Set(blocked);
   return role.tools.filter((name) => !available2.has(name) && !blockedSet.has(name));
 }
@@ -6378,7 +6801,7 @@ function createToolScope(base2) {
   const permitted = (name) => allow ? allow.has(name) : true;
   return {
     provider: {
-      list: () => base2.list().filter((t81) => permitted(t81.name)),
+      list: () => base2.list().filter((t83) => permitted(t83.name)),
       get: (name) => permitted(name) ? base2.get(name) : void 0
     },
     enter: (next) => {
@@ -6399,6 +6822,8 @@ function createToolScope(base2) {
 var HOOK_TYPE_FLAGS = {
   "session:start": true,
   "session:end": true,
+  "subagent:start": true,
+  "subagent:stop": true,
   "turn:before": true,
   "turn:after": true,
   "tool:before": true,
@@ -6548,7 +6973,7 @@ function scanHooks(dir, issues) {
   return [...parsed.entries].map(([type, list]) => ({
     type,
     count: list.reduce((sum, entry) => sum + entry.hooks.length, 0)
-  })).filter((t81) => t81.count > 0).sort((a, b) => a.type.localeCompare(b.type));
+  })).filter((t83) => t83.count > 0).sort((a, b) => a.type.localeCompare(b.type));
 }
 function scanMcp(dir, plugin, issues) {
   const path = join(dir, PLUGIN_LAYOUT.mcp);
@@ -8737,14 +9162,14 @@ var CheckpointStore = class {
   }
   async enforceTotalSize(protectSession, protectTurnIndex) {
     const turns = await this.collectTurns();
-    let total = turns.reduce((sum, t81) => sum + t81.bytes, 0);
+    let total = turns.reduce((sum, t83) => sum + t83.bytes, 0);
     if (total <= this.maxTotalBytes) return;
     turns.sort((a, b) => a.createdAt - b.createdAt);
-    for (const t81 of turns) {
+    for (const t83 of turns) {
       if (total <= this.maxTotalBytes) return;
-      if (t81.sessionId === protectSession && t81.turnIndex === protectTurnIndex) continue;
-      await this.removeTurn(t81.sessionId, t81.turnIndex);
-      total -= t81.bytes;
+      if (t83.sessionId === protectSession && t83.turnIndex === protectTurnIndex) continue;
+      await this.removeTurn(t83.sessionId, t83.turnIndex);
+      total -= t83.bytes;
     }
   }
   async collectTurns() {
@@ -9064,7 +9489,7 @@ async function snapshotFiles(paths) {
 }
 async function collectDiffs(before, workDir) {
   const out = [];
-  let budget2 = MAX_CALL_BYTES;
+  let budget = MAX_CALL_BYTES;
   for (const [path, old] of before) {
     if (old.kind === "opaque") continue;
     const now = await readSnapshot(path);
@@ -9072,8 +9497,8 @@ async function collectDiffs(before, workDir) {
     if (old.kind === "absent" && now.kind === "absent") continue;
     if (old.kind === "text" && now.kind === "text" && old.text === now.text) continue;
     const bytes = (old.kind === "text" ? old.bytes : 0) + (now.kind === "text" ? now.bytes : 0);
-    if (bytes > budget2) continue;
-    budget2 -= bytes;
+    if (bytes > budget) continue;
+    budget -= bytes;
     out.push({
       filePath: workspaceDisplayPath(path, workDir),
       ...old.kind === "text" ? { oldContent: old.text } : {},
@@ -9118,10 +9543,11 @@ var TaskNoticeTracker = class {
     }
     const lines = [];
     for (const task of tasks) {
-      if (task.kind !== "command") continue;
+      if (task.kind === "shell") continue;
       const before = this.seen.get(task.id);
       if (before === task.status) continue;
       this.seen.set(task.id, task.status);
+      if (task.kind === "agent" && task.status === "running") continue;
       lines.push(describeBackgroundTask(task));
     }
     if (lines.length === 0) return null;
@@ -9131,15 +9557,16 @@ var TaskNoticeTracker = class {
 function describeBackgroundTask(task) {
   const text = task.label;
   const cmd = text.length > 60 ? `${text.slice(0, 60)}\u2026` : text;
+  const agent = task.kind === "agent";
   switch (task.status) {
     case "running":
       return `- ${task.id} \u8FD0\u884C\u4E2D\uFF1A${cmd}`;
     case "exited":
-      return `- ${task.id} \u5DF2\u7ED3\u675F\uFF0C\u9000\u51FA\u7801 ${task.exitCode}\uFF1A${cmd}`;
+      return agent ? `- ${task.id} \u5DF2\u7ED3\u675F\uFF1A${cmd}` : `- ${task.id} \u5DF2\u7ED3\u675F\uFF0C\u9000\u51FA\u7801 ${task.exitCode}\uFF1A${cmd}`;
     case "killed":
       return `- ${task.id} \u5DF2\u88AB\u505C\u6B62\uFF1A${cmd}`;
     case "failed":
-      return `- ${task.id} \u542F\u52A8\u5931\u8D25\uFF1A${cmd}`;
+      return agent ? `- ${task.id} \u5931\u8D25\uFF1A${cmd}` : `- ${task.id} \u542F\u52A8\u5931\u8D25\uFF1A${cmd}`;
     case "closed":
       return `- ${task.id} \u5DF2\u5173\u95ED\uFF1A${cmd}`;
     case "reaped":
@@ -9232,6 +9659,19 @@ function skillNotes(input, skillTokens) {
   }
   return notes;
 }
+function cacheStats(usage) {
+  if (!usage) return void 0;
+  const hit = usage.cacheHitTokens;
+  const write = usage.cacheWriteTokens;
+  if (hit === void 0 && write === void 0) return void 0;
+  const prompt = promptTokens(usage);
+  return {
+    hit: hit ?? 0,
+    write: write ?? 0,
+    prompt,
+    hitPercent: prompt > 0 ? Math.round((hit ?? 0) / prompt * 100) : 0
+  };
+}
 function buildContextBreakdown(input) {
   const toolTokens = input.tools.reduce((sum, { tool }) => sum + toolDefinitionTokens(tool), 0);
   const { detail, counts, notes } = toolDetail(input, toolTokens);
@@ -9253,7 +9693,16 @@ ${input.system.rules}`),
     notes.push({ code: "near_limit", params: { percent: Math.round(used / input.limit * 100) } });
   }
   const hints = notes.map((note) => t(NOTE_KEY[note.code], note.params));
-  return { limit: input.limit, used, remaining, segments, hints, notes };
+  const cache = cacheStats(input.lastUsage);
+  return {
+    limit: input.limit,
+    used,
+    remaining,
+    segments,
+    hints,
+    notes,
+    ...cache ? { cache } : {}
+  };
 }
 // src/cost/display.ts
 var currency;
@@ -9581,6 +10030,7 @@ function systemPromptSegments(params) {
       "- \u505A\u6CD5\u6709\u4E24\u79CD\u5408\u7406\u8D70\u6CD5\u3001\u4E14\u9009\u9519\u4E86\u8981\u767D\u5E72\u65F6\uFF0C\u624D\u505C\u4E0B\u6765\u95EE\u4E00\u53E5\uFF1B\u6D3B\u591A\u3001\u8981\u82B1\u65F6\u95F4\u3001\u6B65\u9AA4\u91CD\u590D\u90FD\u4E0D\u662F\u8981\u95EE\u7684\u7406\u7531",
       "- \u6539\u5B8C\u4EE3\u7801\u522B\u76F4\u63A5\u8BF4\u300C\u5B8C\u6210\u4E86\u300D\uFF1A\u5148\u8DD1\u4E00\u904D\u8FD9\u4E2A\u9879\u76EE\u81EA\u5DF1\u7684\u68C0\u67E5\uFF08\u6D4B\u8BD5 / \u6784\u5EFA / \u7C7B\u578B\u68C0\u67E5\uFF0C\u547D\u4EE4\u4E00\u822C\u5728 README \u6216 package.json \u91CC\uFF09\u3002\u8DD1\u4E0D\u4E86\u6216\u8005\u6CA1\u8DD1\u5C31\u7167\u5B9E\u8BF4\u4F60\u6CA1\u9A8C\u8BC1\u8FC7\uFF0C\u522B\u5199\u300C\u5E94\u8BE5\u6CA1\u95EE\u9898\u300D",
       "- \u88AB\u6743\u9650\u62E6\u4E0B\u4E4B\u540E**\u522B\u6362\u6761\u8DEF\u518D\u6765**\uFF1A\u4E0D\u8BB8\u6539\u7528 terminal / code_exec \u53BB\u5199\u540C\u4E00\u6837\u4E1C\u897F\uFF0C\u4E5F\u4E0D\u8BB8\u62FF\u300C\u4EA4\u4E00\u4EFD\u8BA1\u5212\u300D\u53BB\u6362\u6743\u9650\u3002\u5C31\u5730\u6536\u624B\uFF0C\u8BF4\u6E05\u4F60\u8981\u505A\u4EC0\u4E48\u3001\u5361\u5728\u54EA\uFF0C\u8BF7\u7528\u6237\u653E\u6743\u3002\u7ED5\u8FC7\u5BA1\u6279\u6BD4\u8FD9\u4EF6\u4E8B\u505A\u4E0D\u6210\u4E25\u91CD\u5F97\u591A",
+      "- \u547D\u4EE4\u88AB**\u6C99\u7BB1**\u6321\u4E0B\uFF08\u9519\u8BEF\u7801 2008 / 2009\uFF0C\u4E0D\u662F\u5BA1\u6279\u62D2\u7EDD\uFF09\u65F6\u6709\u4E00\u6B21\u6B63\u89C4\u7684\u51FA\u8DEF\uFF1A\u786E\u8BA4\u8FD9\u4E00\u6B21\u5FC5\u987B\u8D8A\u754C\uFF0C\u5C31\u5E26\u4E0A `sandbox_permissions` \u548C `justification`\uFF08\u4E00\u53E5\u8BDD\u8BF4\u660E\u4E3A\u4EC0\u4E48\uFF09\u518D\u8C03\u4E00\u6B21\uFF0C\u7528\u6237\u4F1A\u5355\u72EC\u6279 \u2014\u2014 \u53EA\u653E\u5F00\u8FD9\u4E00\u6B21\u3002\u522B\u62FF\u5B83\u5F53\u4E07\u7528\u5F00\u5173\uFF1A\u80FD\u632A\u8FDB\u5DE5\u4F5C\u533A\u3001\u80FD\u6362\u4E2A\u4E0D\u9700\u8981\u8D8A\u754C\u7684\u5199\u6CD5\uFF0C\u5C31\u5148\u90A3\u4E48\u529E\uFF0C\u88AB\u7528\u6237\u62D2\u4E86\u5C31\u6536\u624B",
       "- \u7528\u6237\u7ED9\u4E86\u8303\u56F4\u5C31\u628A\u90A3\u4E2A\u8303\u56F4\u505A\u5B8C\uFF1A\u8BF4 100 \u6761\u5C31\u662F 100 \u6761\u3002\u505A 3 \u6761\u518D\u95EE\u300C\u8981\u4E0D\u8981\u7EE7\u7EED\u300D\u662F\u6CA1\u505A\u5B8C\uFF0C\u4E0D\u662F\u8C28\u614E",
       "- \u8BE5\u7701\u7684\u662F\u91CD\u590D\u8C03\u540C\u4E00\u6B21\u5DE5\u5177\uFF08\u540C\u6837\u7684\u53C2\u6570\u95EE\u7B2C\u4E8C\u904D\uFF09\uFF0C\u4E0D\u662F\u5C11\u505A\u51E0\u4EF6\u4E8B \u2014\u2014 \u5DE5\u5177\u8C03\u7528\u6B21\u6570\u4ECE\u6765\u4E0D\u662F\u8981\u538B\u7684\u6307\u6807",
       "- \u8BF4\u4E86\u4E0B\u4E00\u6B65\u5C31\u5F53\u573A\u505A\uFF1A\u300C\u6211\u5148\u53BB\u67E5\u4E00\u4E0B\u300D\u300Clet me \u68C0\u67E5\u4E00\u4E0B\u300D\u8FD9\u79CD\u8BDD\u540E\u9762\u5FC5\u987B\u7D27\u8DDF\u4E00\u6B21\u5DE5\u5177\u8C03\u7528\uFF0C\u522B\u62FF\u5B83\u5F53\u4E00\u8F6E\u56DE\u590D\u7684\u7ED3\u5C3E",
@@ -9661,10 +10111,10 @@ function renderSettings(s) {
   bits.push(`\u4E0A\u4E0B\u6587\u7A97\u53E3 ${s.contextLength}`);
   bits.push(`\u81EA\u52A8\u538B\u7F29 ${s.compression.enabled ? `\u5F00\uFF08${s.compression.threshold}\uFF09` : "\u5173"}`);
   bits.push(`\u7EC8\u7AEF\u6C99\u7BB1 ${s.sandboxTerminal ? "\u5F00" : "\u5173"}`);
-  const budget2 = [];
-  if (s.budget?.maxCostUsd !== void 0) budget2.push(`$${s.budget.maxCostUsd}`);
-  if (s.budget?.maxTokens !== void 0) budget2.push(`${s.budget.maxTokens} tokens`);
-  bits.push(`\u9884\u7B97\u4E0A\u9650 ${budget2.length > 0 ? budget2.join(" / ") : "\u672A\u8BBE"}`);
+  const budget = [];
+  if (s.budget?.maxCostUsd !== void 0) budget.push(`$${s.budget.maxCostUsd}`);
+  if (s.budget?.maxTokens !== void 0) budget.push(`${s.budget.maxTokens} tokens`);
+  bits.push(`\u9884\u7B97\u4E0A\u9650 ${budget.length > 0 ? budget.join(" / ") : "\u672A\u8BBE"}`);
   return [
     "<settings>",
     bits.join(" \xB7 "),
@@ -10562,6 +11012,111 @@ function getGitStatus(rootDir) {
 function findProjectInstructions(rootDir, workDir = rootDir) {
   return findInstructionFiles(rootDir, workDir)[0];
 }
+var DATA_URL_PREFIX2 = /^data:[^;,]*;base64,/i;
+var encoder = new TextEncoder();
+function imageBytes(image) {
+  if (/^https?:/i.test(image)) return 0;
+  return encoder.encode(image.replace(DATA_URL_PREFIX2, "")).length;
+}
+function requestImageBytes(messages) {
+  let total = 0;
+  for (const message of messages) {
+    for (const part of message.parts ?? []) {
+      if (part.type !== "image") continue;
+      total += imageBytes(part.image);
+    }
+    for (const result of message.toolResults ?? []) {
+      for (const artifact of result.artifacts ?? []) {
+        if (!artifact.data) continue;
+        total += encoder.encode(artifact.data).length;
+      }
+    }
+  }
+  return total;
+}
+function imageSites(messages) {
+  const sites = [];
+  for (const [messageIndex, message] of messages.entries()) {
+    const parts = message.parts ?? [];
+    for (const [partIndex, part] of parts.entries()) {
+      if (part.type !== "image") continue;
+      sites.push({ messageIndex, partIndex, bytes: imageBytes(part.image) });
+    }
+    const results = message.toolResults ?? [];
+    for (const [resultIndex, result] of results.entries()) {
+      const artifacts = result.artifacts ?? [];
+      for (const [artifactIndex, artifact] of artifacts.entries()) {
+        if (!artifact.data) continue;
+        sites.push({
+          messageIndex,
+          resultIndex,
+          artifactIndex,
+          bytes: encoder.encode(artifact.data).length
+        });
+      }
+    }
+  }
+  return sites;
+}
+function offloadOldestImages(messages, opts = { budgetBytes: 0 }) {
+  const keepFresh = Math.max(1, opts.keepFresh ?? 1);
+  const sites = imageSites(messages);
+  const total = sites.reduce((sum, s) => sum + s.bytes, 0);
+  if (total <= opts.budgetBytes) {
+    return { messages: [...messages], offloaded: 0, remainingBytes: total };
+  }
+  const freshFrom = Math.max(0, messages.length - keepFresh);
+  const picked = { parts: /* @__PURE__ */ new Set(), artifacts: /* @__PURE__ */ new Set() };
+  let running = total;
+  for (const site of sites) {
+    if (running <= opts.budgetBytes) break;
+    if (site.messageIndex >= freshFrom) continue;
+    if (site.partIndex !== void 0) {
+      picked.parts.add(`${site.messageIndex}:${site.partIndex}`);
+    } else {
+      picked.artifacts.add(`${site.messageIndex}:${site.resultIndex}:${site.artifactIndex}`);
+    }
+    running -= site.bytes;
+  }
+  const count = picked.parts.size + picked.artifacts.size;
+  if (count === 0) return { messages: [...messages], offloaded: 0, remainingBytes: total };
+  const out = messages.map((message, messageIndex) => {
+    const parts = message.parts ?? [];
+    const results = message.toolResults ?? [];
+    const hitParts = parts.some((_, i) => picked.parts.has(`${messageIndex}:${i}`));
+    const hitArtifacts = results.some(
+      (r, ri) => (r.artifacts ?? []).some((_, ai) => picked.artifacts.has(`${messageIndex}:${ri}:${ai}`))
+    );
+    if (!hitParts && !hitArtifacts) return message;
+    const nextResults = hitArtifacts ? results.map((result, ri) => {
+      const artifacts = result.artifacts ?? [];
+      if (!artifacts.some((_, ai) => picked.artifacts.has(`${messageIndex}:${ri}:${ai}`))) {
+        return result;
+      }
+      return {
+        ...result,
+        artifacts: artifacts.map(
+          (artifact, ai) => picked.artifacts.has(`${messageIndex}:${ri}:${ai}`) ? withoutData(artifact) : artifact
+        )
+      };
+    }) : message.toolResults;
+    const nextParts = hitParts ? parts.map(
+      (part, i) => picked.parts.has(`${messageIndex}:${i}`) ? (
+        { type: "text", text: OFFLOADED_IMAGE_NOTE }
+      ) : part
+    ) : message.parts;
+    return {
+      ...message,
+      ...nextParts ? { parts: nextParts } : {},
+      ...nextResults ? { toolResults: nextResults } : {}
+    };
+  });
+  return { messages: out, offloaded: count, remainingBytes: requestImageBytes(out) };
+}
+function withoutData(artifact) {
+  const { data: _data, ...rest } = artifact;
+  return rest;
+}
 function persistedUsage(entry) {
   return {
     ...entry.usage,
@@ -10881,6 +11436,50 @@ ${this.describeWarning(status)}
     });
   }
 };
+var DEFAULT_MAX_REQUEST_IMAGE_BYTES = 8 * 1024 * 1024;
+var LEARN_SHRINK = 0.8;
+var TTL_MS = 30 * 24 * 60 * 60 * 1e3;
+var BODY_LIMIT_VERSION = 1;
+function cachePath(homeDir) {
+  return join(homeDir, "cache", "body_limit.json");
+}
+function limitKey(provider, model) {
+  return `${provider}:${model}`;
+}
+function loadFile(homeDir) {
+  const empty = { version: BODY_LIMIT_VERSION, entries: {} };
+  try {
+    const path = cachePath(homeDir);
+    if (!existsSync(path)) return empty;
+    const data = JSON.parse(readFileSync(path, "utf-8"));
+    if (data.version !== BODY_LIMIT_VERSION) return empty;
+    return { version: BODY_LIMIT_VERSION, entries: data.entries ?? {} };
+  } catch {
+    return empty;
+  }
+}
+function readLearnedImageBudget(homeDir, provider, model) {
+  const entry = loadFile(homeDir).entries[limitKey(provider, model)];
+  if (!entry) return void 0;
+  if (Date.now() - entry.at > TTL_MS) return void 0;
+  return entry.bytes;
+}
+function learnImageBudget(homeDir, provider, model, usedBytes) {
+  if (!(usedBytes > 0)) return;
+  try {
+    const file = loadFile(homeDir);
+    const learned = Math.max(1, Math.floor(usedBytes * LEARN_SHRINK));
+    const prev = file.entries[limitKey(provider, model)];
+    if (prev && prev.bytes <= learned && Date.now() - prev.at <= TTL_MS) return;
+    file.entries[limitKey(provider, model)] = { bytes: learned, at: Date.now() };
+    mkdirSync(join(homeDir, "cache"), { recursive: true });
+    writeFileSync(cachePath(homeDir), JSON.stringify(file, null, 2), "utf-8");
+  } catch {
+  }
+}
+function effectiveImageBudget(configured, learned) {
+  return learned !== void 0 && learned < configured ? learned : configured;
+}
 var ProviderError = class extends Error {
   constructor(message, code, recoverable, recovery = "abort") {
     super(message);
@@ -10901,6 +11500,10 @@ function isContextOverflow(err) {
   if (err instanceof ProviderError) return err.code === PROVIDER_CONTEXT_OVERFLOW;
   return classifyProviderError(err).code === PROVIDER_CONTEXT_OVERFLOW;
 }
+function isBodyTooLarge(err) {
+  if (err instanceof ProviderError) return err.code === PROVIDER_BODY_TOO_LARGE;
+  return classifyProviderError(err).code === PROVIDER_BODY_TOO_LARGE;
+}
 function isAbortError(err) {
   for (let cur = err, depth = 0; cur && depth < 5; depth++) {
     if (typeof cur !== "object") return false;
@@ -11000,16 +11603,17 @@ function classifyProviderError(err) {
   }
   return { code: 9999, recovery: "retry" };
 }
+var EMPTY_REASONING = { providerOptions: { openaiCompatible: { reasoning_content: "" } } };
 function toModelMessages(messages, opts = {}) {
-  if (opts.toolMediaInline !== false) return messages.map(toModelMessage);
-  return hoistToolMedia(messages);
+  if (opts.toolMediaInline === false) return hoistToolMedia(messages, opts);
+  return messages.map((m) => toModelMessage(m, opts));
 }
-function hoistToolMedia(messages) {
+function hoistToolMedia(messages, opts = {}) {
   const out = [];
   let pending = [];
   for (const [i, m] of messages.entries()) {
     if (m.role !== "tool") {
-      out.push(toModelMessage(m));
+      out.push(toModelMessage(m, opts));
       continue;
     }
     const results = (m.toolResults ?? []).map((r) => {
@@ -11026,7 +11630,7 @@ ${note}` : note,
         artifacts: (r.artifacts ?? []).map(({ data: _data, ...rest }) => rest)
       };
     });
-    out.push(toModelMessage({ ...m, toolResults: results }));
+    out.push(toModelMessage({ ...m, toolResults: results }, opts));
     if (pending.length > 0 && messages[i + 1]?.role !== "tool") {
       out.push({
         role: "user",
@@ -11109,7 +11713,7 @@ function toSdkPart(p) {
   }
   return assertNeverPart(p);
 }
-function toModelMessage(m) {
+function toModelMessage(m, opts = {}) {
   if (m.role === "tool") {
     return {
       role: "tool",
@@ -11124,10 +11728,13 @@ function toModelMessage(m) {
   if (m.role === "user" && m.parts && m.parts.length > 0) {
     return { role: "user", content: m.parts.map(toSdkPart) };
   }
+  const reasoningPart = opts.reasoning && m.reasoning ? [{ type: "reasoning", text: m.reasoning }] : [];
+  const emptyReasoning = opts.reasoning && !m.reasoning ? EMPTY_REASONING : {};
   if (m.role === "assistant" && m.toolCalls && m.toolCalls.length > 0) {
     return {
       role: "assistant",
       content: [
+        ...reasoningPart,
         ...m.content ? [{ type: "text", text: m.content }] : [],
         ...m.toolCalls.map((tc) => ({
           type: "tool-call",
@@ -11135,19 +11742,35 @@ function toModelMessage(m) {
           toolName: tc.toolName,
           input: tc.input
         }))
-      ]
+      ],
+      ...emptyReasoning
+    };
+  }
+  if (m.role === "assistant" && (reasoningPart.length > 0 || opts.reasoning)) {
+    return {
+      role: "assistant",
+      content: [
+        ...reasoningPart,
+        ...m.content ? [{ type: "text", text: m.content }] : []
+      ],
+      ...emptyReasoning
     };
   }
   return { role: m.role, content: m.content };
 }
-function toSdkTools(tools) {
+var ANTHROPIC_CACHE_BREAKPOINT = {
+  anthropic: { cacheControl: { type: "ephemeral" } }
+};
+function toSdkTools(tools, opts = {}) {
   const result = {};
-  for (const et of tools) {
+  const breakpointAt = opts.cacheBreakpoint === true ? tools.length - 1 : -1;
+  tools.forEach((et, i) => {
     result[et.name] = tool({
       description: et.description,
-      inputSchema: jsonSchema(et.parameters)
+      inputSchema: jsonSchema(et.parameters),
+      ...i === breakpointAt ? { providerOptions: ANTHROPIC_CACHE_BREAKPOINT } : {}
     });
-  }
+  });
   return result;
 }
 function toOutputSpec(rf) {
@@ -11347,12 +11970,17 @@ function flattenMessage(m) {
   return {
     role: m.role,
     content: m.content,
-    ...toolCallIds.length > 0 ? { toolCallIds } : {}
+    ...toolCallIds.length > 0 ? { toolCallIds } : {},
+    ...m.reasoning ? { reasoning: m.reasoning } : {}
   };
 }
 function unflattenMessage(m) {
   if (m.role === "assistant") {
-    return { role: "assistant", content: m.content || "(\u65E0\u8F93\u51FA)" };
+    return {
+      role: "assistant",
+      content: m.content || "(\u65E0\u8F93\u51FA)",
+      ...m.reasoning ? { reasoning: m.reasoning } : {}
+    };
   }
   if (m.role === "system") {
     return { role: "system", content: m.content };
@@ -11624,11 +12252,11 @@ var PromptBuilder = class {
   memoryInitialized = false;
   projectBlock(tools) {
     const permLevel = this.deps.permissionManager?.getLevel() || "default";
-    const hasPlanTool = tools.some((t81) => t81.name === "enter_plan_mode");
-    const hasLspTool = tools.some((t81) => t81.name === "lsp_diagnostics");
-    const hasAskTool = tools.some((t81) => t81.name === "ask_user_question");
-    const hasTodoTool = tools.some((t81) => t81.name === "todo");
-    const hasTerminal = tools.some((t81) => t81.name === "terminal");
+    const hasPlanTool = tools.some((t83) => t83.name === "enter_plan_mode");
+    const hasLspTool = tools.some((t83) => t83.name === "lsp_diagnostics");
+    const hasAskTool = tools.some((t83) => t83.name === "ask_user_question");
+    const hasTodoTool = tools.some((t83) => t83.name === "todo");
+    const hasTerminal = tools.some((t83) => t83.name === "terminal");
     const needsCommandApproval = hasTerminal && permLevel === "default";
     const plan = this.deps.approvedPlan?.()?.trim();
     const codeSdk = renderSdkDeclaration(this.deps.codeModeTools?.() ?? []);
@@ -11911,9 +12539,50 @@ function toAbsolute2(path, workDir) {
   const expanded = expandPath(path);
   return isAbsolute(expanded) ? resolve(expanded) : resolve(workDir, expanded);
 }
+function declaresEscalation(et) {
+  return Boolean(et.parameters.properties?.[SANDBOX_PERMISSIONS_PARAM]);
+}
+function stripEscalationArgs(args) {
+  if (!(SANDBOX_PERMISSIONS_PARAM in args) && !(JUSTIFICATION_PARAM in args)) return args;
+  const rest = { ...args };
+  delete rest[SANDBOX_PERMISSIONS_PARAM];
+  delete rest[JUSTIFICATION_PARAM];
+  return rest;
+}
+var PARAM_HINT = `${SANDBOX_PERMISSIONS_PARAM} \u548C ${JUSTIFICATION_PARAM}`;
+function escalationRefusal(rejection, current) {
+  const reason9 = rejection.reason;
+  const target = rejection.target ?? "";
+  switch (reason9) {
+    case "unpaired":
+      return {
+        message: `\u5347\u6743\u8BF7\u6C42\u65E0\u6548\uFF1A${PARAM_HINT} \u5FC5\u987B\u6210\u5BF9\u51FA\u73B0\uFF0C\u8FD9\u6B21\u53EA\u7ED9\u4E86\u5176\u4E2D\u4E00\u4E2A\u3002\u547D\u4EE4\u6CA1\u6709\u6267\u884C\u3002`,
+        suggestion: "\u8981\u4E48\u4E24\u683C\u90FD\u7ED9\uFF08sandbox_permissions \u5199\u76EE\u6807\u6863\u3001justification \u5199\u4E3A\u4EC0\u4E48\u5FC5\u987B\u8D8A\u754C\uFF09\uFF0C\u8981\u4E48\u4E24\u683C\u90FD\u4E0D\u7ED9\u3002\u53EA\u7ED9 justification \u4E5F\u4E00\u6837\u4F1A\u88AB\u62D2 \u2014\u2014 \u5F15\u64CE\u4E0D\u4F1A\u66FF\u4F60\u731C\u4E00\u4E2A\u76EE\u6807\u3002"
+      };
+    case "unknown-target":
+      return {
+        message: `\u5347\u6743\u8BF7\u6C42\u65E0\u6548\uFF1A\u4E0D\u8BA4\u8BC6\u7684\u6C99\u7BB1\u76EE\u6807\u300C${target}\u300D\u3002\u547D\u4EE4\u6CA1\u6709\u6267\u884C\u3002`,
+        suggestion: `\u5F53\u524D\u6863\uFF08${current}\uFF09\u80FD\u5347\u5230\u7684\u76EE\u6807\u53EA\u6709\uFF1A${widerTargets(current).join(" / ") || "(\u6CA1\u6709 \u2014\u2014 \u8FD9\u4E00\u6863\u5DF2\u7ECF\u662F\u6700\u5BBD\u7684)"}\u3002`
+      };
+    case "not-wider":
+      return {
+        message: `\u5347\u6743\u8BF7\u6C42\u65E0\u6548\uFF1A\u76EE\u6807\u300C${target}\u300D\u4E0D\u6BD4\u5F53\u524D\u6863\uFF08${current}\uFF09\u66F4\u5BBD\uFF0C\u800C\u5347\u6743\u53EA\u80FD\u5F80\u66F4\u5BBD\u7684\u65B9\u5411\u8D70\u3002\u547D\u4EE4\u6CA1\u6709\u6267\u884C\u3002`,
+        suggestion: "\u7B49\u4E8E\u5F53\u524D\u6863\u7684\u8BF7\u6C42\u4E0D\u4F1A\u751F\u6548\uFF08\u5B83\u53EA\u4F1A\u8BA9\u7528\u6237\u591A\u70B9\u4E00\u6B21\u5F39\u7A97\uFF09\u3002\u5F53\u524D\u6863\u5DF2\u7ECF\u591F\u7528\u65F6\uFF0C\u76F4\u63A5\u53BB\u6389\u8FD9\u4E24\u683C\u91CD\u8DD1\u8FD9\u6761\u547D\u4EE4\u3002"
+      };
+    case "no-wider":
+    default:
+      return {
+        message: `\u5347\u6743\u8BF7\u6C42\u65E0\u6548\uFF1A\u5F53\u524D\u6863\uFF08${current}\uFF09\u672C\u6765\u5C31\u4E0D\u4E0A\u6C99\u7BB1\uFF0C\u6CA1\u6709\u66F4\u5BBD\u7684\u8FB9\u754C\u53EF\u5347\u3002\u547D\u4EE4\u6CA1\u6709\u6267\u884C\u3002`,
+        suggestion: "\u8FD9\u4E00\u6863\u4E0B\u6C99\u7BB1\u4E0D\u662F\u62E6\u4F4F\u4F60\u7684\u539F\u56E0 \u2014\u2014 \u56DE\u53BB\u770B\u4F60\u90A3\u6761\u547D\u4EE4\u672C\u8EAB\uFF08\u8DEF\u5F84\u5B58\u4E0D\u5B58\u5728\u3001\u6743\u9650\u591F\u4E0D\u591F\uFF09\uFF0C\u6216\u8005\u8BFB\u4E00\u4E0B\u4E0A\u4E00\u6B21\u7684\u9519\u8BEF\u7801\u3002"
+      };
+  }
+}
+function escalationApprovalReason(from, to, justification) {
+  return t("permission_reason.sandbox_escalation", { from, to, justification });
+}
 var MAX_TOOL_OUTPUT = 3e4;
 var MAX_SUB_CALL_OUTPUT = CODE_MODE_LIMITS.maxValueChars;
-function budgetOf3(tool, depth, path = "success") {
+function budgetOf2(tool, depth, path = "success") {
   if (tool.governsOwnOutput && path === "success") return Number.POSITIVE_INFINITY;
   return depth > 0 ? MAX_SUB_CALL_OUTPUT : MAX_TOOL_OUTPUT;
 }
@@ -12149,22 +12818,28 @@ var ToolExecutor = class {
       if (!gate.allowed) {
         return finish({ ...base2, success: false, output: gate.output });
       }
+      const escalation = await this.resolveEscalation(et, tc.input, signal);
+      if (escalation.kind === "refused") {
+        return finish({ ...base2, success: false, output: escalation.output });
+      }
+      const toolArgs = stripEscalationArgs(tc.input);
       const targets = this.writeTargets(et, tc.input);
       const snapshotted = await this.snapshot(sessionId, targets);
       const before = targets.length > 0 ? await snapshotFiles(targets) : void 0;
       const extraRoots = this.deps.permissionManager?.getExtraRoots?.();
       const homeDir = (this.deps.multimodal?.() ?? resolveMultimodalPolicy()).homeDir;
-      const r = await et.execute(tc.input, {
+      const r = await et.execute(toolArgs, {
         sessionId,
         workDir: this.deps.workDir(),
         ...extraRoots?.length ? { extraRoots } : {},
         ...gate.grantedPaths?.length ? { grantedPaths: gate.grantedPaths } : {},
         ...homeDir ? { homeDir } : {},
         ...this.deps.sandboxTerminal !== void 0 ? { sandboxTerminal: this.deps.sandboxTerminal } : {},
+        ...escalation.kind === "approved" ? { sandboxEscalation: escalation.target } : {},
         permissionLevel: this.deps.permissionManager?.getLevel() || "auto",
         ...signal ? { signal } : {},
         ...onOutput ? { onOutput } : {},
-        outputBudget: budgetOf3(et, depth),
+        outputBudget: budgetOf2(et, depth),
         ...depth < MAX_SUB_CALL_DEPTH ? { callTool: this.subCallChannel(sessionId, signal, span, depth) } : {}
       });
       if (snapshotted.length > 0) {
@@ -12196,7 +12871,7 @@ var ToolExecutor = class {
           success: true,
           output: this.renderOutput(
             et,
-            appendArtifactSummaries(text, artifacts, budgetOf3(et, depth), shapeOf(r.output))
+            appendArtifactSummaries(text, artifacts, budgetOf2(et, depth), shapeOf(r.output))
           ),
           ...artifacts.length > 0 ? { artifacts } : {},
           ...diffs.length > 0 ? { diffs } : {}
@@ -12207,7 +12882,7 @@ var ToolExecutor = class {
         success: false,
         output: this.renderOutput(
           et,
-          truncateForModel(failureText(r), budgetOf3(et, depth, "failure"), "text")
+          truncateForModel(failureText(r), budgetOf2(et, depth, "failure"), "text")
         )
       });
     } catch (err) {
@@ -12289,6 +12964,56 @@ var ToolExecutor = class {
     );
     return guessed || argsKey(args);
   }
+  async resolveEscalation(et, args, signal) {
+    const level = this.deps.permissionManager?.getLevel() ?? "auto";
+    const current = sandboxModeForLevel(level);
+    const plan = planEscalation(args, current);
+    if (plan.kind === "none") return { kind: "none" };
+    if (plan.kind === "rejected") {
+      const { message, suggestion } = escalationRefusal(plan, current);
+      return { kind: "refused", output: `\u5347\u6743\u88AB\u62D2 [\u6C99\u7BB1]: ${message}
+${suggestion}` };
+    }
+    if (!declaresEscalation(et)) {
+      return {
+        kind: "refused",
+        output: `\u5347\u6743\u88AB\u62D2 [\u6C99\u7BB1]: \u5DE5\u5177 ${et.name} \u4E0D\u63A5\u53D7 sandbox_permissions \u2014\u2014 \u5B83\u7684\u6C99\u7BB1\u8FB9\u754C\u4E0D\u7531\u8FD9\u4E00\u683C\u63A7\u5236\u3002
+\u547D\u4EE4\u6CA1\u6709\u6267\u884C\u3002\u53BB\u6389\u8FD9\u4E24\u683C\u91CD\u8DD1\uFF1B\u5982\u679C\u5B83\u786E\u5B9E\u9700\u8981\u8D8A\u754C\uFF0C\u90A3\u8BF4\u660E\u8BE5\u6362\u4E00\u4E2A\u80FD\u8868\u8FBE\u8FD9\u4EF6\u4E8B\u7684\u5DE5\u5177\u3002`
+      };
+    }
+    if (!this.deps.onApprovalRequest || this.deps.permissionManager?.isNonInteractive?.()) {
+      return {
+        kind: "refused",
+        output: "\u5347\u6743\u88AB\u62D2 [\u6C99\u7BB1]: \u5F53\u524D\u73AF\u5883\u65E0\u6CD5\u4EA4\u4E92\u786E\u8BA4\uFF0C\u800C\u5347\u6743\u6309\u5B9A\u4E49\u9700\u8981\u4EBA\u70B9\u4E00\u6B21\u3002\u547D\u4EE4\u6CA1\u6709\u6267\u884C\u3002\n\u65E0\u4EBA\u503C\u5B88\u4E0B\u6CA1\u6709\u522B\u7684\u8DEF\uFF1A\u628A\u8981\u505A\u7684\u6539\u52A8\u632A\u8FDB\u5DE5\u4F5C\u533A\uFF0C\u6216\u8005\u8BA9\u7528\u6237\u5728\u4EA4\u4E92\u4F1A\u8BDD\u91CC\u8DD1\u3002"
+      };
+    }
+    const opType = mapOperation(et);
+    const opTarget = this.resolveTarget(et, args);
+    const { outcome } = normalizeApproval(
+      await this.deps.onApprovalRequest({
+        toolName: et.name,
+        type: opType,
+        target: opTarget,
+        detail: typeof args["command"] === "string" ? String(args["command"]) : opTarget,
+        reason: escalationApprovalReason(current, plan.target, plan.justification),
+        rememberable: false
+      })
+    );
+    if (signal?.aborted) {
+      return { kind: "refused", output: "\u64CD\u4F5C\u5DF2\u4E2D\u6B62\uFF1A\u7528\u6237\u7EC8\u6B62\u4E86\u8FD9\u4E00\u8F6E\u3002" };
+    }
+    this.deps.permissionManager?.auditUserDecision?.(
+      { type: opType, target: opTarget, toolName: et.name },
+      outcome
+    );
+    if (outcome !== "allow-once" && outcome !== "allow-session" && outcome !== "allow-always") {
+      return {
+        kind: "refused",
+        output: "\u5347\u6743\u88AB\u62D2 [\u6C99\u7BB1]: \u7528\u6237\u6CA1\u6709\u6279\u51C6\u8FD9\u4E00\u6B21\u653E\u5F00\u8FB9\u754C\uFF0C\u547D\u4EE4\u6CA1\u6709\u6267\u884C\u3002\n\u522B\u6362\u4E2A\u5199\u6CD5\u518D\u8BD5\uFF0C\u4E5F\u522B\u5207\u6863\uFF08\u90A3\u662F\u6574\u4E2A\u4F1A\u8BDD\u7684\u4E8B\uFF09\u3002\u628A\u8FD9\u4EF6\u4E8B\u4F5C\u4E3A\u300C\u9700\u8981\u4ED6\u653E\u6743\u624D\u80FD\u505A\u300D\u62A5\u7ED9\u4ED6\uFF0C\u6216\u8005\u6362\u4E00\u6761\u4E0D\u9700\u8981\u8D8A\u754C\u7684\u505A\u6CD5\u3002"
+      };
+    }
+    return { kind: "approved", target: plan.target };
+  }
   async checkPermission(et, args, signal) {
     const pm = this.deps.permissionManager;
     if (!pm) return { allowed: true };
@@ -12357,15 +13082,16 @@ var ToolExecutor = class {
 var DEFAULT_CONTEXT_LENGTH = 128e3;
 function shrank(before, after) {
   const chars = (list) => list.reduce((sum, m) => sum + m.content.length, 0);
-  return chars(after) < chars(before);
+  if (chars(after) < chars(before)) return true;
+  return requestImageBytes(after) < requestImageBytes(before);
 }
 var NO_OUTPUT_TEXT = "(\u65E0\u8F93\u51FA)";
 function imageParts(content) {
   return typeof content === "string" ? [] : content.filter((p) => p.type === "image");
 }
 function toolSignatureOf(config, tools) {
-  const direct = tools.map((t81) => t81.name).join("\0");
-  const declared = (config.codeModeTools?.() ?? []).map((t81) => t81.name).join("\0");
+  const direct = tools.map((t83) => t83.name).join("\0");
+  const declared = (config.codeModeTools?.() ?? []).map((t83) => t83.name).join("\0");
   return declared ? `${direct}|${declared}` : direct;
 }
 function modelSignatureOf(info) {
@@ -12384,13 +13110,13 @@ function stripHistoryImages(history) {
   });
   return { messages, stripped };
 }
-function budgetStop(budget2, messages) {
-  const breach = budget2.breachReason();
-  if (breach) return { message: budget2.describeBreach(breach), breach };
+function budgetStop(budget, messages) {
+  const breach = budget.breachReason();
+  if (breach) return { message: budget.describeBreach(breach), breach };
   const imageTokens = pendingImageTokens(messages);
-  const projected = budget2.projectedBreach(imageTokens);
+  const projected = budget.projectedBreach(imageTokens);
   if (!projected) return void 0;
-  return { message: budget2.describeProjectedBreach(projected, imageTokens), breach: projected };
+  return { message: budget.describeProjectedBreach(projected, imageTokens), breach: projected };
 }
 var AgentLoop = class {
   config;
@@ -12456,12 +13182,34 @@ var AgentLoop = class {
   abort() {
     this.aborted = true;
   }
+  tryOffloadForBodyLimit(messages) {
+    const sent = requestImageBytes(messages);
+    this.learnBodyLimit(sent);
+    const saved = offloadOldestImages(messages, {
+      budgetBytes: Math.max(1, Math.floor(sent * 0.8))
+    });
+    return saved.offloaded > 0 ? { messages: saved.messages, offloaded: saved.offloaded } : null;
+  }
   multimodal() {
     return resolveMultimodalPolicy({
       ...this.config.multimodal,
       supportsImages: this.config.provider.capabilities?.supportsImages ?? false
     });
   }
+  imageBudget() {
+    const configured = this.config.maxRequestImageBytes ?? DEFAULT_MAX_REQUEST_IMAGE_BYTES;
+    const key = this.imageLimitKey();
+    return key ? effectiveImageBudget(configured, readLearnedImageBudget(...key)) : configured;
+  }
+  learnBodyLimit(sentBytes) {
+    const key = this.imageLimitKey();
+    if (key) learnImageBudget(...key, sentBytes);
+  }
+  imageLimitKey() {
+    const homeDir = this.config.homeDir;
+    if (!homeDir) return void 0;
+    return [homeDir, "", this.config.provider.modelId ?? "unknown"];
+  }
   modelInfo() {
     const id = this.config.provider.modelId;
     if (!id) return void 0;
@@ -12501,6 +13249,7 @@ var AgentLoop = class {
       projectBlock: seg2.projectBlock,
       memoryBlock: seg2.memoryBlock,
       historyText: opts.historyText,
+      ...opts.lastUsage ? { lastUsage: opts.lastUsage } : {},
       tools: this.toolProvider.list().map((tool) => ({ tool, source: opts.toolSource?.(tool.name) ?? "builtin" })),
       skillIndex: this.config.skillSystem?.indexStats?.({
         only: this.config.roleSkills?.()
@@ -12518,6 +13267,7 @@ var AgentLoop = class {
     let errored;
     const started = Date.now();
     for await (const ev of this.runTurns(input, turns)) {
+      input.onEvent?.(ev);
       if (ev.type === "finish") {
         usage = ev.usage;
         if (ev.reason === "stalled") stalled = true;
@@ -12620,13 +13370,15 @@ var AgentLoop = class {
     let lastText = "";
     let imagesDroppedReported = false;
     let overflowRescued = false;
+    let imagesRescue = { offloaded: 0 };
+    let imagesOffloaded = false;
     let runUsage;
     let lastModel;
     let lastRequestedModel;
     const addRun = (u) => {
       runUsage = runUsage ? addUsage(runUsage, u) : u;
     };
-    const budget2 = new BudgetGuard({
+    const budget = new BudgetGuard({
       ...this.config.budget ? { budget: this.config.budget } : {},
       ...this.config.modelPricing ? { pricing: this.config.modelPricing } : {},
       ...input.maxCallCostUsd !== void 0 ? { maxCallCostUsd: input.maxCallCostUsd } : {},
@@ -12638,7 +13390,7 @@ var AgentLoop = class {
     const finish = (reason9, breach) => ({
       type: "finish",
       reason: reason9,
-      usage: budget2.snapshot(),
+      usage: budget.snapshot(),
       ...runUsage ? { runUsage } : {},
       ...lastModel ? { model: lastModel } : {},
       ...lastRequestedModel ? { requestedModel: lastRequestedModel } : {},
@@ -12690,8 +13442,8 @@ var AgentLoop = class {
           await this.prompt.syncMemory(userText, lastText);
           return;
         }
-        budget2.syncFromStore();
-        const stop = budgetStop(budget2, messages);
+        budget.syncFromStore();
+        const stop = budgetStop(budget, messages);
         if (stop) {
           yield { type: "text-delta", text: stop.message };
           await this.prompt.syncMemory(userText, lastText || stop.message);
@@ -12743,8 +13495,8 @@ var AgentLoop = class {
             }
             if (rescued.usage) {
               addRun(rescued.usage);
-              yield* budget2.toEvents(
-                budget2.add(rescued.usage, this.rateOf(rescued.model)),
+              yield* budget.toEvents(
+                budget.add(rescued.usage, this.rateOf(rescued.model)),
                 runUsage
               );
             }
@@ -12776,6 +13528,7 @@ var AgentLoop = class {
           }
         }
         const turnStart = Date.now();
+        imagesRescue = { offloaded: 0 };
         const llmSpan = this.telemetry.startSpan(
           "llm_call",
           {
@@ -12788,6 +13541,24 @@ var AgentLoop = class {
         );
         let guard = this.config.compliance?.outputGuard();
         let reasoningGuard = this.config.compliance?.outputGuard();
+        const imageBudget = this.imageBudget();
+        const beforeBytes = requestImageBytes(messages);
+        if (beforeBytes > imageBudget) {
+          const offloadedResult = offloadOldestImages(messages, { budgetBytes: imageBudget });
+          if (offloadedResult.offloaded > 0) {
+            messages = offloadedResult.messages;
+            if (!imagesOffloaded) {
+              imagesOffloaded = true;
+              yield {
+                type: "notice",
+                code: "images-offloaded",
+                text: t("agent_run.images_offloaded", {
+                  count: offloadedResult.offloaded
+                })
+              };
+            }
+          }
+        }
         const requestFor = (msgs) => ({
           provider: this.config.provider,
           input: {
@@ -12804,34 +13575,59 @@ var AgentLoop = class {
         });
         let result;
         try {
-          result = yield* runTurn(requestFor(messages));
-          if (result.usage) {
-            llmSpan.setAttribute(GEN_AI.USAGE_INPUT_TOKENS, result.usage.inputTokens);
-            llmSpan.setAttribute(GEN_AI.USAGE_OUTPUT_TOKENS, result.usage.outputTokens);
-          }
-          llmSpan.setAttribute("epoch.finish_reason", result.finishReason);
-        } catch (err) {
-          llmSpan.recordError(err);
-          const engine = this.config.contextEngine;
-          if (overflowRescued || !engine || !isContextOverflow(err)) throw err;
-          overflowRescued = true;
-          const rescued = await this.compressNow(messages, {
-            totalTokens: totalInput + totalOutput
-          });
-          if (rescued.usage) {
-            addRun(rescued.usage);
-            yield* budget2.toEvents(budget2.add(rescued.usage, this.rateOf(rescued.model)), runUsage);
+          for (; ; ) {
+            try {
+              result = yield* runTurn(requestFor(messages));
+              if (result.usage) {
+                llmSpan.setAttribute(GEN_AI.USAGE_INPUT_TOKENS, result.usage.inputTokens);
+                llmSpan.setAttribute(GEN_AI.USAGE_OUTPUT_TOKENS, result.usage.outputTokens);
+              }
+              llmSpan.setAttribute("epoch.finish_reason", result.finishReason);
+              break;
+            } catch (err) {
+              llmSpan.recordError(err);
+              if (isBodyTooLarge(err) && imagesRescue.offloaded === 0) {
+                const saved = this.tryOffloadForBodyLimit(messages);
+                if (saved) {
+                  messages = saved.messages;
+                  imagesRescue = { offloaded: saved.offloaded };
+                  yield {
+                    type: "notice",
+                    code: "images-offloaded",
+                    text: t("agent_run.images_offloaded", { count: saved.offloaded })
+                  };
+                  guard = this.config.compliance?.outputGuard();
+                  reasoningGuard = this.config.compliance?.outputGuard();
+                  continue;
+                }
+              }
+              const engine = this.config.contextEngine;
+              const retriable = isContextOverflow(err) || isBodyTooLarge(err);
+              if (overflowRescued || !engine || !retriable) throw err;
+              overflowRescued = true;
+              const rescued = await this.compressNow(messages, {
+                totalTokens: totalInput + totalOutput,
+                force: true
+              });
+              if (rescued.usage) {
+                addRun(rescued.usage);
+                yield* budget.toEvents(
+                  budget.add(rescued.usage, this.rateOf(rescued.model)),
+                  runUsage
+                );
+              }
+              if (!shrank(messages, rescued.messages)) throw err;
+              messages = rescued.messages;
+              yield {
+                type: "notice",
+                code: "context-compacted",
+                text: t("agent_run.context_compacted")
+              };
+              guard = this.config.compliance?.outputGuard();
+              reasoningGuard = this.config.compliance?.outputGuard();
+              continue;
+            }
           }
-          if (!shrank(messages, rescued.messages)) throw err;
-          messages = rescued.messages;
-          yield {
-            type: "notice",
-            code: "context-compacted",
-            text: t("agent_run.context_compacted")
-          };
-          guard = this.config.compliance?.outputGuard();
-          reasoningGuard = this.config.compliance?.outputGuard();
-          result = yield* runTurn(requestFor(messages));
         } finally {
           llmSpan.end();
           this.telemetry.histogram(METRIC.LLM_CALL_LATENCY, Date.now() - turnStart);
@@ -12877,14 +13673,14 @@ var AgentLoop = class {
               "epoch.token_type": "cache_write"
             });
           }
-          const status = budget2.add(usage, this.rateOf(result.model));
+          const status = budget.add(usage, this.rateOf(result.model));
           input.onTurnUsage?.(
             status.turnCostUsd === void 0 ? usage : { ...usage, costUsd: status.turnCostUsd }
           );
           addRun(usage);
           lastModel = result.model;
           lastRequestedModel = result.requestedModel;
-          yield* budget2.toEvents(status, runUsage);
+          yield* budget.toEvents(status, runUsage);
         }
         const verdict = mergeVerdicts(guard?.verdict(), reasoningGuard?.verdict());
         if (verdict) this.reportCompliance(verdict, "output");
@@ -12949,7 +13745,11 @@ ${finalText}` };
             turn
           });
           if (turn < maxTurns && input.steer?.pending() === true) {
-            messages.push({ role: "assistant", content: finalText || NO_OUTPUT_TEXT });
+            messages.push({
+              role: "assistant",
+              content: finalText || NO_OUTPUT_TEXT,
+              ...result.reasoningText ? { reasoning: result.reasoningText } : {}
+            });
             yield* this.drainSteer(input, messages);
             continue;
           }
@@ -12960,7 +13760,11 @@ ${finalText}` };
           );
           if (wantContinue && turn < maxTurns) {
             messages.push(
-              { role: "assistant", content: finalText || NO_OUTPUT_TEXT },
+              {
+                role: "assistant",
+                content: finalText || NO_OUTPUT_TEXT,
+                ...result.reasoningText ? { reasoning: result.reasoningText } : {}
+              },
               {
                 role: "user",
                 content: systemNote(
@@ -12980,7 +13784,11 @@ ${finalText}` };
                 text: t("agent_run.blank_response")
               };
               messages.push(
-                { role: "assistant", content: finalText || NO_OUTPUT_TEXT },
+                {
+                  role: "assistant",
+                  content: finalText || NO_OUTPUT_TEXT,
+                  ...result.reasoningText ? { reasoning: result.reasoningText } : {}
+                },
                 { role: "user", content: systemNote(blankResponseNote(finalText.trim().length)) }
               );
               continue;
@@ -12992,7 +13800,11 @@ ${finalText}` };
             if (open !== void 0 && open > 0) {
               todoNudged = true;
               messages.push(
-                { role: "assistant", content: finalText || NO_OUTPUT_TEXT },
+                {
+                  role: "assistant",
+                  content: finalText || NO_OUTPUT_TEXT,
+                  ...result.reasoningText ? { reasoning: result.reasoningText } : {}
+                },
                 {
                   role: "user",
                   content: systemNote(unfinishedTodoNote(open))
@@ -13004,7 +13816,11 @@ ${finalText}` };
           if (!idleNudged && turn < maxTurns && !truncated && announcedNextStep(finalText)) {
             idleNudged = true;
             messages.push(
-              { role: "assistant", content: finalText || NO_OUTPUT_TEXT },
+              {
+                role: "assistant",
+                content: finalText || NO_OUTPUT_TEXT,
+                ...result.reasoningText ? { reasoning: result.reasoningText } : {}
+              },
               { role: "user", content: systemNote(announcedButIdleNote()) }
             );
             continue;
@@ -13022,6 +13838,7 @@ ${finalText}` };
         messages.push({
           role: "assistant",
           content: result.text,
+          ...result.reasoningText ? { reasoning: result.reasoningText } : {},
           toolCalls: toolCalls.map((tc) => ({
             toolCallId: tc.toolCallId,
             toolName: tc.toolName,
@@ -13121,8 +13938,8 @@ ${finalText}` };
         messages = compacted.messages;
         if (compacted.usage) {
           addRun(compacted.usage);
-          yield* budget2.toEvents(
-            budget2.add(compacted.usage, this.rateOf(compacted.model)),
+          yield* budget.toEvents(
+            budget.add(compacted.usage, this.rateOf(compacted.model)),
             runUsage
           );
         }
@@ -13199,7 +14016,7 @@ ${finalText}` };
     return { ...result, ran: true };
   }
   async compressNow(messages, opts = {}) {
-    const { instruction, totalTokens: totalTokens2, promptTokens: promptTokens2 } = opts;
+    const { instruction, totalTokens: totalTokens2, promptTokens: promptTokens3, force } = opts;
     const engine = this.config.contextEngine;
     if (!engine) return { messages };
     try {
@@ -13209,7 +14026,8 @@ ${finalText}` };
         contextLength: this.config.contextLength,
         ...instruction ? { instruction } : {},
         ...plan ? { plan } : {},
-        ...promptTokens2 === void 0 ? {} : { promptTokens: promptTokens2 }
+        ...force ? { force } : {},
+        ...promptTokens3 === void 0 ? {} : { promptTokens: promptTokens3 }
       });
       const bill = {
         ...compressed.usage ? { usage: compressed.usage } : {},
@@ -13426,6 +14244,9 @@ var CompressionSchema = z.object({
   enabled: z.boolean().default(true),
   threshold: z.number().gt(0).max(1).default(DEFAULT_COMPRESSION_THRESHOLD)
 });
+var LimitsSchema = z.object({
+  maxRequestImageBytes: z.int().positive().optional()
+});
 var DEFAULT_MEMORY_CHAR_LIMIT = 2e4;
 var DEFAULT_USER_CHAR_LIMIT = 6e3;
 var DEFAULT_MEMORY_INDEX_CHAR_LIMIT = 4e3;
@@ -13437,6 +14258,9 @@ var MemorySchema = z.object({
 var SandboxSchema = z.object({
   terminal: z.boolean().default(true)
 });
+var DelegateSchema = z.object({
+  taskTimeoutSec: z.int().nonnegative().default(900)
+});
 var ToolsSchema = z.object({
   deferMcp: z.boolean().default(false),
   mode: z.enum(["tools", "both", "code"]).default("tools")
@@ -13545,7 +14369,17 @@ var EpochConfigSchema = z.object({
   maxOutputTokens: z.int().positive().optional(),
   homeDir: z.string().min(1).default(() => resolveHomeDir()),
   dbPath: z.string().min(1).default(() => dbPath(resolveHomeDir())),
-  permission: z.enum(PERMISSION_LEVELS).default("default"),
+  permission: z.string().default(DEFAULT_PERMISSION_LEVEL).superRefine((raw, ctx) => {
+    if (resolvePermissionLevel(raw) === void 0) {
+      ctx.addIssue({
+        code: "custom",
+        message: t("config_load.bad_permission_level", {
+          raw,
+          levels: PERMISSION_LEVELS.join(" / ")
+        })
+      });
+    }
+  }).transform((raw) => resolvePermissionLevel(raw) ?? DEFAULT_PERMISSION_LEVEL),
   permissions: z.object({
     allow: z.array(z.string().min(1)).optional(),
     ask: z.array(z.string().min(1)).optional(),
@@ -13558,9 +14392,11 @@ var EpochConfigSchema = z.object({
   hooks: z.record(z.string(), z.unknown()).optional(),
   trust: TrustSchema.optional(),
   sandbox: SandboxSchema.prefault({}),
+  delegate: DelegateSchema.prefault({}),
   tools: ToolsSchema.prefault({}),
   skills: SkillsSchema.optional(),
   compression: CompressionSchema.prefault({}),
+  limits: LimitsSchema.prefault({}),
   memory: MemorySchema.prefault({}),
   artifacts: ArtifactsSchema.prefault({}),
   sessions: SessionsSchema.prefault({}),
@@ -13592,6 +14428,7 @@ var EpochConfigSchema = z.object({
     message: "blankCards: id must be unique"
   }).optional(),
   blankGreeting: BlankGreetingSchema.optional(),
+  scheduleRemoveConfirm: HostTextSchema.optional(),
   user: HostUserSchema.optional(),
   settingsHidden: z.array(z.string().min(1)).min(1).optional(),
   settingsPanes: z.array(
@@ -13634,6 +14471,22 @@ function settingsPaneBeforeIssues(config) {
     message: `unknown settings pane id: ${String(pane.before)} (known: ${SETTINGS_PANE_IDS.join(", ")})`
   }));
 }
+function scheduleRemoveConfirmIssues(config) {
+  const texts = config.scheduleRemoveConfirm;
+  if (texts === void 0) return [];
+  const issues = [];
+  for (const [lang, text] of Object.entries(texts)) {
+    if (text === void 0) continue;
+    for (const name of placeholdersOf(text)) {
+      if (name === SCHEDULE_CONFIRM_PLACEHOLDER) continue;
+      issues.push({
+        path: `scheduleRemoveConfirm.${lang}`,
+        message: `unknown placeholder: {${name}} (only {${SCHEDULE_CONFIRM_PLACEHOLDER}} is substituted; write {{${SCHEDULE_CONFIRM_PLACEHOLDER}}} if you meant it literally)`
+      });
+    }
+  }
+  return issues;
+}
 function defaultConfig() {
   return EpochConfigSchema.parse({});
 }
@@ -13767,7 +14620,7 @@ var ManagedPolicyError = class extends Error {
   }
 };
 function assertLevelAllowed(level, policy) {
-  if (level !== "bypass" || !policy.disableBypassPermissionsMode) return;
+  if (approvalPolicyForLevel(level) !== "never" || !policy.disableBypassPermissionsMode) return;
   throw new ManagedPolicyError(
     t("managed_settings.bypass_blocked"),
     t("managed_settings.bypass_blocked_hint", { path: policy.path })
@@ -14072,18 +14925,18 @@ function _loadImpl(overrideHomeDir) {
   if (read.kind === "corrupt" && _lastKnownGood?.homeDir === homeDir) {
     _lastIssues = issues;
     _lastOrigins = _lastKnownGood.origins;
-    const cached = _lastKnownGood;
+    const cached2 = _lastKnownGood;
     _cache = {
       homeDir,
       mtime,
       size,
       entriesStamp,
       envSnapshot,
-      config: cached.config,
+      config: cached2.config,
       issues,
-      origins: cached.origins
+      origins: cached2.origins
     };
-    return cached.config;
+    return cached2.config;
   }
   const config = parseRawConfig(read.raw, issues, track);
   reportDroppedEnv(issues);
@@ -14139,6 +14992,7 @@ function parseRawConfig(raw, issues, track) {
   issues.push(...outcome.issues);
   issues.push(...settingsHiddenIssues(outcome.value));
   issues.push(...settingsPaneBeforeIssues(outcome.value));
+  issues.push(...scheduleRemoveConfirmIssues(outcome.value));
   if (outcome.issues.length === 0) collectKeyPaths(cleaned, track.file);
   return outcome.value;
 }
@@ -14269,8 +15123,9 @@ function applyEnvOverrides(config, issues, track) {
     } else issues.push(envIssue("EPOCH_LOG_LEVEL", env.EPOCH_LOG_LEVEL, levels.join(" / ")));
   }
   if (env.EPOCH_PERMISSION) {
-    if (isPermissionLevel(env.EPOCH_PERMISSION)) {
-      config.permission = env.EPOCH_PERMISSION;
+    const level = resolvePermissionLevel(env.EPOCH_PERMISSION);
+    if (level) {
+      config.permission = level;
       track.env.add("permission");
     } else {
       issues.push(
@@ -14780,11 +15635,11 @@ function buildPricing(prompt, completion, cacheRead) {
   const output = Number.parseFloat(completion) * 1e6;
   if (!Number.isFinite(input) || !Number.isFinite(output)) return void 0;
   if (input <= 0 && output <= 0) return void 0;
-  const cached = cacheRead ? Number.parseFloat(cacheRead) * 1e6 : NaN;
+  const cached2 = cacheRead ? Number.parseFloat(cacheRead) * 1e6 : NaN;
   return {
     inputPerMTok: input,
     outputPerMTok: output,
-    ...Number.isFinite(cached) && cached > 0 ? { cachedInputPerMTok: cached } : {}
+    ...Number.isFinite(cached2) && cached2 > 0 ? { cachedInputPerMTok: cached2 } : {}
   };
 }
 function matchesWindow(o, at) {
@@ -15001,6 +15856,30 @@ var TOOL_RESULT_MEDIA = {
 function acceptsToolResultMedia(type) {
   return TOOL_RESULT_MEDIA[type];
 }
+var CARRIES_REASONING_BACK = {
+  "openai-compatible": true,
+  deepseek: true,
+  openai: false,
+  anthropic: false,
+  google: false,
+  groq: false,
+  mistral: false,
+  moonshotai: false,
+  zhipu: true,
+  dashscope: false,
+  bytedance: true,
+  qianfan: true,
+  cohere: false,
+  xai: false,
+  perplexity: false,
+  togetherai: false,
+  azure: false,
+  "amazon-bedrock": false,
+  ollama: false
+};
+function carriesReasoningBack(type) {
+  return CARRIES_REASONING_BACK[type];
+}
 function isModuleNotFound(err) {
   if (!err || typeof err !== "object") return false;
   const code = err.code;
@@ -15009,9 +15888,10 @@ function isModuleNotFound(err) {
   return /Cannot find (module|package)|Failed to resolve/i.test(msg);
 }
 // src/provider/entry-route.ts
-function buildEntryTable(entries2) {
+function buildEntryTable(entries2, homeDir) {
   return {
-    entries: new Map((entries2 ?? []).map((e) => [e.id, e]))
+    entries: new Map((entries2 ?? []).map((e) => [e.id, e])),
+    ...homeDir ? { homeDir } : {}
   };
 }
 function entryProvider(_table, entry) {
@@ -15046,6 +15926,14 @@ function entryAcceptsToolMedia(table, provider, entry) {
   if (e?.provider === "openai-compatible" && e.protocol === "anthropic-messages") return true;
   return acceptsToolResultMedia(provider);
 }
+function entryCarriesReasoningBack(table, provider, entry) {
+  const e = table.entries.get(entry);
+  if (e?.provider === "openai-compatible" && e.protocol === "anthropic-messages") return false;
+  if (!carriesReasoningBack(provider)) return false;
+  if (!e) return false;
+  if (!table.homeDir) return false;
+  return applyEntryCapability(getCapability(e.model, table.homeDir, e.provider), e).supportsReasoning;
+}
 function capabilityOfRef(config, ref = config.model) {
   const parsed = ref ? parseModelRef(ref) : void 0;
   const entry = parsed ? config.modelEntries?.find((e) => e.id === parsed.entry) : void 0;
@@ -15213,7 +16101,7 @@ var ProviderRouter = class {
   }
   constructor(config) {
     this.config = config;
-    this.entryTable = buildEntryTable(config.modelEntries);
+    this.entryTable = buildEntryTable(config.modelEntries, config.homeDir);
     this.configSelection = this.resolveConfigured(config);
     this.initFactories();
     this.selection = { ...this.configSelection };
@@ -15264,7 +16152,7 @@ var ProviderRouter = class {
     return result;
   }
   reloadModelEntries(entries2) {
-    this.entryTable = buildEntryTable(entries2);
+    this.entryTable = buildEntryTable(entries2, this.config.homeDir);
     for (const [route, opts] of [...this.available]) {
       if (!opts.entry) continue;
       this.available.delete(route);
@@ -15413,8 +16301,8 @@ var ProviderRouter = class {
     return { selection, configured: true };
   }
   async getModel(route, modelId) {
-    const cached = this.factories.get(route);
-    if (cached) return cached(modelId ?? this.selection.model);
+    const cached2 = this.factories.get(route);
+    if (cached2) return cached2(modelId ?? this.selection.model);
     const opts = this.available.get(route);
     if (!opts) {
       throw new ProviderError(
@@ -15524,7 +16412,7 @@ var ProviderRouter = class {
     const state = this.startPoint(input);
     const requestedModel = state.cm;
     const messagesFor = messageTranslator(input.messages, this.entryTable);
-    const tools = input.tools ? toSdkTools(input.tools) : void 0;
+    const tools = input.tools ? toSdkTools(input.tools, { cacheBreakpoint: true }) : void 0;
     const output = input.responseFormat ? toOutputSpec(input.responseFormat) : void 0;
     for (; ; ) {
       if (state.attempt > this.config.retry.maxRetries) {
@@ -15598,7 +16486,7 @@ var ProviderRouter = class {
     const requestedModel = state.cm;
     let emitted = false;
     const messagesFor = messageTranslator(input.messages, this.entryTable);
-    const tools = input.tools ? toSdkTools(input.tools) : void 0;
+    const tools = input.tools ? toSdkTools(input.tools, { cacheBreakpoint: true }) : void 0;
     const output = input.responseFormat ? toOutputSpec(input.responseFormat) : void 0;
     let streamPartError;
     for (; ; ) {
@@ -15735,8 +16623,8 @@ var ProviderRouter = class {
   async probeImageSupport() {
     const { provider, model, entry } = this.selection;
     const home = this.config.homeDir;
-    const cached = readImageProbe(home, provider, model);
-    if (cached !== void 0) return cached;
+    const cached2 = readImageProbe(home, provider, model);
+    if (cached2 !== void 0) return cached2;
     let lm;
     try {
       lm = await this.getModel(this.routeOf(provider, entry), model);
@@ -15764,10 +16652,12 @@ function messageTranslator(messages, table) {
   const cache = /* @__PURE__ */ new Map();
   return (type, entry) => {
     const inline = entryAcceptsToolMedia(table, type, entry);
-    let hit = cache.get(inline);
+    const reasoning = entryCarriesReasoningBack(table, type, entry);
+    const key = `${inline}|${reasoning}`;
+    let hit = cache.get(key);
     if (!hit) {
-      hit = toModelMessages(messages, { toolMediaInline: inline });
-      cache.set(inline, hit);
+      hit = toModelMessages(messages, { toolMediaInline: inline, reasoning });
+      cache.set(key, hit);
     }
     return hit;
   };
@@ -15838,12 +16728,12 @@ var PROVIDER_DISCOVERY = {
 function discoverySpec(provider) {
   return PROVIDER_DISCOVERY[provider];
 }
-function cachePath(homeDir, provider) {
+function cachePath2(homeDir, provider) {
   return join(homeDir, "cache", `models_${provider}.json`);
 }
 function loadCache2(homeDir, provider) {
   try {
-    const path = cachePath(homeDir, provider);
+    const path = cachePath2(homeDir, provider);
     if (!existsSync(path)) return null;
     const data = JSON.parse(readFileSync(path, "utf-8"));
     const age = Date.now() - (data._cachedAt ?? 0);
@@ -15858,7 +16748,7 @@ function saveCache2(homeDir, provider, models) {
     const dir = join(homeDir, "cache");
     mkdirSync(dir, { recursive: true });
     writeFileSync(
-      cachePath(homeDir, provider),
+      cachePath2(homeDir, provider),
       JSON.stringify({ models, _cachedAt: Date.now() }),
       "utf-8"
     );
@@ -15937,13 +16827,13 @@ async function discoverModels(homeDir, provider, apiKey, baseUrl) {
       }
     }
   }
-  const cached = loadCache2(homeDir, provider);
-  if (cached) return { models: cached, source: "cache" };
+  const cached2 = loadCache2(homeDir, provider);
+  if (cached2) return { models: cached2, source: "cache" };
   return { models: STATIC_MODEL_CATALOG[provider] ?? [], source: "static" };
 }
 function clearModelCache(homeDir, provider) {
   try {
-    const path = cachePath(homeDir, provider);
+    const path = cachePath2(homeDir, provider);
     if (existsSync(path)) writeFileSync(path, "{}", "utf-8");
   } catch {
   }
@@ -16140,7 +17030,10 @@ var VALUE_SCHEMA = {
   "automation.keepRuns": EpochConfigSchema.shape.automation.unwrap().shape.keepRuns.unwrap(),
   "automation.maxRecordingMb": EpochConfigSchema.shape.automation.unwrap().shape.maxRecordingMb.unwrap(),
   "sessionSearch.allWorkspaces": EpochConfigSchema.shape.sessionSearch.unwrap().shape.allWorkspaces.unwrap(),
-  permission: EpochConfigSchema.shape.permission.unwrap()
+  permission: EpochConfigSchema.shape.permission
+};
+var ENUM_CHOICES = {
+  permission: PERMISSION_LEVELS
 };
 function settingValueKind(key) {
   if (!isWritableSettingKey(key)) return null;
@@ -16151,6 +17044,8 @@ function settingValueKind(key) {
 }
 function settingValueChoices(key) {
   if (!isWritableSettingKey(key)) return null;
+  const explicit = ENUM_CHOICES[key];
+  if (explicit) return explicit;
   const schema = VALUE_SCHEMA[key];
   if (schema.def.type !== "enum") return null;
   return Object.values(schema.def.entries).map(String);
@@ -16293,6 +17188,7 @@ function commit(path, body2, createMode, value) {
   }
   return { ok: true, value };
 }
+var MACHINE_DEPENDENT_DEFAULTS = ["homeDir", "dbPath"];
 var DESCRIPTIONS = {
   $schema: "\u8FD9\u4EFD\u6587\u4EF6\u7684 JSON Schema \u5730\u5740\u3002\u53EA\u5F71\u54CD\u7F16\u8F91\u5668\u7684\u8865\u5168\u4E0E\u6821\u9A8C\uFF0Cepoch \u672C\u8EAB\u5FFD\u7565\u5B83\uFF08\u4E0D\u7B97\u672A\u77E5\u914D\u7F6E\u9879\uFF09\u3002",
   permissions: "\u6743\u9650\u89C4\u5219\u7684\u4E09\u5F20\u5217\u8868\u3002\u4F18\u5148\u7EA7 deny > ask > allow\uFF0C\u4E14\u4E24\u4E2A deny \u90FD\u538B\u8FC7\u5BA1\u6279\u5F39\u7A97\u91CC\u70B9\u8FC7\u7684\u300C\u603B\u662F\u5141\u8BB8\u300D\u3002",
@@ -16303,7 +17199,112 @@ var DESCRIPTIONS = {
   maxTurns: "\u5355\u6B21\u4F1A\u8BDD\u6700\u591A\u51E0\u8F6E\uFF08\u4E00\u8F6E = \u4E00\u6B21\u6A21\u578B\u8C03\u7528 + \u5B83\u89E6\u53D1\u7684\u5DE5\u5177\u6267\u884C\uFF09\u30020 \u6216\u6B63\u6574\u6570\uFF0C**0 = \u4E0D\u8BBE\u4E0A\u9650**\uFF08\u7F3A\u7701\uFF09\u3002",
   allowManagedPermissionRulesOnly: "\u6253\u5F00\u540E\uFF0C\u5176\u4F59\u5404\u5C42\uFF08\u7528\u6237\u7EA7 / \u9879\u76EE\u7EA7 / \u9879\u76EE\u672C\u5730 / --settings\uFF09\u7684 allow / ask / deny **\u6574\u4EFD\u5FFD\u7565**\uFF0C\u53EA\u6709\u8FD9\u4EFD\u6258\u7BA1\u6587\u4EF6\u91CC\u7684\u89C4\u5219\u7B97\u6570\u3002\u8FD9\u662F\u5168\u6D41\u7A0B\u552F\u4E00\u4E00\u5904\u66FF\u6362\u8BED\u4E49\uFF0C\u4E0D\u662F\u5E76\u96C6\u3002\u9ED8\u8BA4 false\u3002",
   allowManagedHooksOnly: "\u6253\u5F00\u540E\uFF0C\u7528\u6237\u7EA7 hook \u4E00\u6761\u90FD\u4E0D\u52A0\u8F7D\uFF08hook \u80FD spawn \u4EFB\u610F\u5B50\u8FDB\u7A0B\uFF09\u3002\u9ED8\u8BA4 false\u3002",
-  disableBypassPermissionsMode: "\u6253\u5F00\u540E\uFF0C`permission: bypass` **\u62D2\u7EDD\u542F\u52A8**\uFF08\u9000\u51FA\u7801 4\uFF09\uFF0C\u8FD0\u884C\u671F\u5207\u5230 bypass \u4E5F\u4F1A\u88AB\u6321\u4E0B\u3002\u9ED8\u8BA4 false\u3002"
+  disableBypassPermissionsMode: "\u6253\u5F00\u540E\uFF0C`permission: bypass` **\u62D2\u7EDD\u542F\u52A8**\uFF08\u9000\u51FA\u7801 4\uFF09\uFF0C\u8FD0\u884C\u671F\u5207\u5230 bypass \u4E5F\u4F1A\u88AB\u6321\u4E0B\u3002\u9ED8\u8BA4 false\u3002",
+  version: "\u914D\u7F6E\u6587\u4EF6\u7684\u683C\u5F0F\u7248\u672C\uFF0C\u7531\u8FC1\u79FB\u6D41\u7A0B\u8BFB\u8D70\uFF08\u4E0D\u8FDB EpochConfig\uFF09\u3002\u4E00\u822C\u4E0D\u7528\u624B\u5199 \u2014\u2014 \u8001\u6587\u4EF6\u6CA1\u6709\u8FD9\u4E00\u884C\u65F6\u6309\u5F53\u524D\u7248\u672C\u5904\u7406\u3002",
+  models: "\u5185\u90E8\u4EFB\u52A1\u4E13\u7528\u7684\u6A21\u578B\u3002\u7F3A\u7701 = \u5168\u90E8\u8D70\u4E3B\u6A21\u578B\u3002",
+  "models.utility": "\u5C0F\u5DE5\u5177\u4EFB\u52A1\uFF08\u751F\u6210\u6807\u9898\u3001\u6458\u8981\u8FD9\u7C7B\uFF09\u7528\u7684\u6A21\u578B\uFF0C\u5199 `@<id>`\uFF08\u300C\u6211\u7684\u6A21\u578B\u300D\u91CC\u7684\u4E00\u6761\uFF09\u3002\u4E0D\u914D = \u7528\u4E3B\u6A21\u578B\u3002",
+  modelEntries: "\u300C\u6211\u7684\u6A21\u578B\u300D\u7684\u6761\u76EE\u6E05\u5355\u3002**\u5199\u5728 config.yaml \u91CC\u4E0D\u751F\u6548** \u2014\u2014 \u771F\u6E90\u662F `models.json`\uFF0C\u8FD9\u4E00\u683C\u8BFB\u5230\u53EA\u4F1A\u62A5\u4E00\u6761 `legacy_ignored`\u3002",
+  shell: "`terminal` \u7528\u54EA\u79CD shell\uFF1A`cmd` / `powershell` / `pwsh`\u3002\u4E0D\u5199 = \u81EA\u52A8\u63A2\u6D4B\uFF08Windows \u4E0A\u4F18\u5148 pwsh\uFF09\u3002",
+  contextLength: "\u6A21\u578B\u7684\u4E0A\u4E0B\u6587\u7A97\u53E3\u5927\u5C0F\uFF08token\uFF09\u3002\u7F3A\u7701 200000\u3002",
+  maxOutputTokens: "\u5355\u6B21\u6A21\u578B\u8BF7\u6C42\u6700\u591A\u751F\u6210\u591A\u5C11 token\u3002\u4E0D\u914D = \u4E0D\u53D1 `max_tokens`\uFF0C\u7528\u5404\u5BB6\u670D\u52A1\u7AEF\u81EA\u5DF1\u7684\u9ED8\u8BA4\u503C\u3002",
+  homeDir: "\u6570\u636E\u76EE\u5F55\u3002\u26A0\uFE0F **\u8BF7\u6539\u7528\u73AF\u5883\u53D8\u91CF `EPOCH_HOME`** \u2014\u2014 \u8FD9\u4E00\u683C\u6709\u4E24\u5957\u89E3\u6790\u771F\u6E90\uFF08`paths.ts` \u53EA\u770B\u73AF\u5883\u53D8\u91CF\uFF0Cruntime \u8BFB `config.homeDir`\uFF09\uFF0C\u5199\u5B83\u53EA\u4F1A\u8BA9\u6570\u636E\u8DD1\u53BB\u65B0\u76EE\u5F55\u800C\u914D\u7F6E\u6587\u4EF6\u7559\u5728\u65E7\u5BB6\u3002",
+  dbPath: "\u4F1A\u8BDD\u5E93\u8DEF\u5F84\uFF08\u7F3A\u7701 `<homeDir>/sessions.db`\uFF09\u3002\u26A0\uFE0F \u540C `homeDir` \u4E00\u65CF\uFF0C\u800C\u4E14\u5207\u5F97\u66F4\u788E\uFF1Aruntime \u7684\u4F1A\u8BDD\u5E93\u8BFB\u5B83\uFF0C\u5B9A\u65F6\u4EFB\u52A1\u90A3\u8FB9\u6309 `homeDir` \u63A8\u3002",
+  permission: "\u65B0\u4F1A\u8BDD\u7684\u9ED8\u8BA4\u6743\u9650\u6863\uFF1A`plan` / `default` / `acceptEdits` / `auto`\u3002\u4E0D\u5199\u65F6\u662F `acceptEdits`\uFF08\u8BF7\u6C42\u6279\u51C6\uFF09\u3002\u8001\u540D\u5B57 `bypass` \u4ECD\u80FD\u8BFB\uFF0C\u4F1A\u9759\u9ED8\u5F53\u4F5C `auto`\u3002\u5DE5\u4F5C\u533A\u4FE1\u4EFB\u90A3\u4E00\u5C42\u4E0D\u6539\u53D8\u8FD9\u4E00\u683C\u3002",
+  logLevel: "\u65E5\u5FD7\u7EA7\u522B\uFF1A`debug` / `info` / `warn` / `error`\u3002",
+  profile: "\u5F53\u524D\u914D\u7F6E\u6863\u540D\u3002\u26A0\uFE0F **\u8FD9\u4E00\u683C\u53EA\u7528\u4E8E\u5C55\u793A** \u2014\u2014 \u771F\u6B63\u51B3\u5B9A\u76EE\u5F55\u7684\u662F\u73AF\u5883\u53D8\u91CF `EPOCH_PROFILE`\uFF0C\u5199\u5728\u8FD9\u91CC\u4E0D\u4F1A\u5207\u6362\u3002",
+  retry: "\u6A21\u578B\u8BF7\u6C42\u7684\u91CD\u8BD5\u7B56\u7565\u3002",
+  "retry.maxRetries": "\u6700\u591A\u91CD\u8BD5\u51E0\u6B21\uFF08\u7F3A\u7701 3\uFF09\u3002",
+  "retry.baseBackoffMs": "\u7B2C\u4E00\u6B21\u91CD\u8BD5\u7B49\u591A\u4E45\uFF08\u6BEB\u79D2\uFF0C\u7F3A\u7701 1000\uFF09\uFF0C\u4E4B\u540E\u6307\u6570\u9000\u907F\u3002",
+  "retry.maxBackoffMs": "\u9000\u907F\u7684\u4E0A\u9650\uFF08\u6BEB\u79D2\uFF0C\u7F3A\u7701 30000\uFF09\u3002",
+  fallback: "\u4E3B\u6A21\u578B\u5931\u8D25\u65F6\u7684\u964D\u7EA7\u76EE\u6807\u3002",
+  "fallback.model": "\u964D\u7EA7\u7528\u7684\u6A21\u578B\uFF0C\u5199 `@<id>`\uFF08\u300C\u6211\u7684\u6A21\u578B\u300D\u91CC\u7684\u4E00\u6761\uFF09\u3002",
+  hooks: "\u65E7\u683C\u5F0F\u7684 hook \u914D\u7F6E\uFF0C\u5DF2\u642C\u53BB `~/.epoch/hooks.json`\u3002\u8FD9\u91CC\u4ECD\u7136\u7167\u5E38\u52A0\u8F7D\uFF08\u5220\u6389\u8FD9\u4E00\u952E\u7B49\u4E8E\u8BA9\u6240\u6709\u4EBA\u7684 hook \u9759\u9ED8\u5931\u6548\uFF09\uFF0C\u53EA\u662F\u542F\u52A8\u65F6\u591A\u4E00\u6761\u8FC1\u79FB\u63D0\u793A\u3002",
+  trust: "\u5DE5\u4F5C\u533A\u4FE1\u4EFB\u95F8\u95E8\u3002\u26A0\uFE0F \u7F3A\u7701\u662F**\u5F00\u7740**\u7684 \u2014\u2014 `enabled: false` \u624D\u662F\u5173\u6389\u3002",
+  "trust.enabled": "`false` = \u5173\u6389\u5DE5\u4F5C\u533A\u4FE1\u4EFB\u6821\u9A8C\u3002**\u4E0D\u5199\u8FD9\u4E2A\u952E = \u4FE1\u4EFB\u95F8\u95E8\u5F00\u7740**\uFF0C\u522B\u7528\u771F\u5047\u503C\u5224\u65AD\u8FD9\u4E00\u683C\u3002",
+  sandbox: "OS \u7EA7\u6C99\u7BB1\u3002",
+  "sandbox.terminal": "`terminal` \u5BB6\u65CF\u7684\u5199\u5165\u6C99\u7BB1\u5F00\u5173\uFF08\u7F3A\u7701 true\uFF09\u3002\u5173\u6389\u4E4B\u540E\u547D\u4EE4\u80FD\u5199\u6574\u4E2A\u6587\u4EF6\u7CFB\u7EDF \u2014\u2014 \u6B63\u5F53\u7406\u7531\u53EA\u6709\u300C\u7F13\u5B58\u76EE\u5F55\u8868\u6CA1\u8986\u76D6\u5230\u3001\u628A\u80FD\u8DD1\u7684\u547D\u4EE4\u6321\u4F4F\u4E86\u300D\u3002",
+  delegate: "`delegate_task` \u6D3E\u51FA\u53BB\u7684\u5B50\u4EFB\u52A1\u3002",
+  "delegate.taskTimeoutSec": "\u4E00\u4E2A\u5B50\u4EFB\u52A1\u6700\u591A\u8DD1\u591A\u4E45\uFF08\u79D2\uFF0C\u7F3A\u7701 900\uFF09\u3002`0` = \u4E0D\u9650\u65F6\u3002\u649E\u4E0A\u53BB\u4E4B\u540E\u5B50 agent \u5F53\u573A\u88AB\u6390\uFF0C\u534A\u622A\u7ED3\u8BBA\u4E0D\u4FDD\u7559\u3002",
+  tools: "\u6309\u9700\u53D1\u73B0\u5DE5\u5177\u3002",
+  "tools.deferMcp": "MCP \u5DE5\u5177\u4E0D\u8FDB\u521D\u59CB\u5DE5\u5177\u5217\u8868\uFF0C\u6A21\u578B\u8981\u7528 `tool_search` \u624D\u627E\u5F97\u56DE\u6765\uFF08\u7F3A\u7701 false\uFF09\u3002\u6253\u5F00\u662F\u4E00\u6B21\u9759\u9ED8\u7684\u80FD\u529B\u7F29\u51CF\u3002",
+  "tools.mode": "code mode \u4E09\u6863\uFF1A`tools`\uFF08\u6CA1\u6709 `run_code`\uFF09/ `both`\uFF08\u5168\u90E8\u5DE5\u5177 + `run_code`\uFF09/ `code`\uFF08\u80FD\u7A0B\u5E8F\u8C03\u7684\u5207\u8D70\uFF09\u3002\u7F3A\u7701 `tools`\u3002",
+  skills: "\u6280\u80FD\u7D22\u5F15\u3002",
+  "skills.maxIndexed": "\u7D22\u5F15\u91CC\u6700\u591A\u5217\u51E0\u6761\u6280\u80FD\u3002\u4E0D\u914D = \u4E0D\u5C01\u9876\uFF08\u88AB\u622A\u6389\u7684\u6280\u80FD\u6A21\u578B\u6C38\u8FDC\u4E0D\u77E5\u9053\u5B83\u5B58\u5728\uFF0C\u6240\u4EE5\u9ED8\u8BA4\u4E0D\u5C01\uFF09\u3002",
+  compression: "\u4E0A\u4E0B\u6587\u5FEB\u6EE1\u65F6\u81EA\u52A8\u538B\u7F29\u3002",
+  "compression.enabled": "\u5F00\u5173\uFF08\u7F3A\u7701 true\uFF09\u3002",
+  "compression.threshold": "\u63D0\u793A\u8BCD\u5360\u5230\u4E0A\u4E0B\u6587\u7A97\u53E3\u7684\u51E0\u6210\u65F6\u5F00\u59CB\u538B\uFF0C\u53D6\u503C (0, 1]\uFF0C\u7F3A\u7701 0.8\u30020 \u7B49\u4E8E\u6BCF\u8F6E\u90FD\u538B\uFF08\u4E00\u53F0\u70E7\u94B1\u673A\u5668\uFF09\uFF0C\u6240\u4EE5\u4E0D\u542B 0\u3002",
+  limits: "\u5355\u6B21\u8BF7\u6C42\u7684\u4F53\u79EF\u4E0A\u9650\uFF08**\u5B57\u8282**\u8FD9\u6761\u7EBF\uFF0C\u548C\u4E0A\u9762 compression \u7684 token \u90A3\u6761\u662F\u4E24\u4E2A\u91CF\u7EB2\uFF09\u3002",
+  "limits.maxRequestImageBytes": "\u5355\u6B21\u8BF7\u6C42\u91CC\u6240\u6709\u56FE\u7247 base64 \u7684\u5408\u8BA1\u4E0A\u9650\uFF08\u5B57\u8282\uFF09\u3002\u8D85\u4E86\u5C31\u81EA\u52A8\u628A\u6700\u8001\u7684\u51E0\u5F20\u56FE\u4E0B\u653E\u6210\u5360\u4F4D\u3001\u4F1A\u8BDD\u7EE7\u7EED\u3002\u4E0D\u914D = 8 MiB\uFF08\u8FD9\u4E2A\u6570\u6CA1\u6709\u6743\u5A01\u51FA\u5904\uFF0C\u649E\u4E00\u6B21\u4E4B\u540E\u4F1A\u6309\u5B9E\u6D4B\u6536\u7D27\uFF09\u3002",
+  memory: "\u957F\u671F\u8BB0\u5FC6\u7684\u914D\u989D\u3002",
+  "memory.memoryCharLimit": "\u8BB0\u5FC6\u6B63\u6587\u7684\u5B58\u50A8\u914D\u989D\uFF08\u5B57\u7B26\uFF0C\u7F3A\u7701 20000\uFF09\u3002**\u8FD9\u662F\u5B58\u50A8\uFF0C\u4E0D\u662F\u6BCF\u8F6E\u5F00\u9500\u3002**",
+  "memory.userCharLimit": "\u7528\u6237\u753B\u50CF\u7684\u5B58\u50A8\u914D\u989D\uFF08\u5B57\u7B26\uFF0C\u7F3A\u7701 6000\uFF09\u3002\u540C\u6837\u662F\u5B58\u50A8\u3002",
+  "memory.indexCharLimit": "\u8BB0\u5FC6\u7D22\u5F15\u5757\u7684\u914D\u989D\uFF08\u5B57\u7B26\uFF0C\u7F3A\u7701 4000\uFF09\u3002\u4E09\u4E2A\u91CC\u552F\u4E00\u6309\u8F6E\u8BA1\u8D39\u7684 \u2014\u2014 \u8FD9\u4E00\u5757\u6BCF\u8F6E\u90FD\u5728 system prompt \u91CC\u3002",
+  artifacts: "artifact \u7684\u4FDD\u7559\u7B56\u7565\u3002",
+  "artifacts.maxAgeDays": "\u591A\u5C11\u5929\u6CA1\u52A8\u8FC7\u7684 artifact \u5220\u6389\uFF08\u7F3A\u7701 7\uFF0C\u4E0A\u9650 3650\uFF09\u3002",
+  "artifacts.maxTotalBytes": "artifact \u603B\u91CF\u4E0A\u9650\uFF08\u5B57\u8282\uFF0C\u7F3A\u7701 512MB\uFF09\u3002\u8D85\u4E86\u6309\u5E74\u9F84\u4ECE\u65E7\u5230\u65B0\u5220\uFF0C\u5F53\u524D\u4F1A\u8BDD\u7684\u76EE\u5F55\u6C38\u4E0D\u5220\u3002",
+  sessions: "\u4F1A\u8BDD\u5E93\u7684\u4FDD\u7559\u671F\u6E05\u7406\u3002",
+  "sessions.autoPrune": "\u6BCF\u6B21\u542F\u52A8\u65F6\u81EA\u52A8\u6E05\u7406\u4E00\u6B21\uFF0C\u81F3\u591A\u4E00\u5929\u4E00\u6B21\uFF08\u7F3A\u7701 false\uFF09\u3002\u5173\u7740\u65F6\u624B\u52A8\u7684 `epoch sessions prune` \u7167\u5E38\u80FD\u7528\u3002",
+  "sessions.retentionDays": "\u591A\u5C11\u5929\u6CA1\u52A8\u8FC7\u7B97\u65E7\uFF08\u7F3A\u7701 90\uFF0C\u4E0A\u9650 3650\uFF09\u3002",
+  "sessions.vacuumAfterPrune": "\u6E05\u5B8C\u4E4B\u540E `VACUUM` \u56DE\u6536\u78C1\u76D8\uFF08\u7F3A\u7701 true\uFF09\u3002\u8FD8\u8981\u8FC7\u300C\u771F\u5220\u6389\u4E86\u4E1C\u897F\u300D\u548C\u300C\u7A7A\u9875\u8D85\u8FC7 25%\u300D\u4E24\u9053\u624D\u771F\u8DD1\u3002",
+  automation: "\u5B9A\u65F6\u4EFB\u52A1\u3002",
+  "automation.keepRuns": "\u4E00\u4E2A\u4EFB\u52A1\u7559\u6700\u8FD1\u591A\u5C11\u6B21\u8FD0\u884C\u7684\u5F55\u50CF\uFF08\u7F3A\u7701 200\uFF0C\u4E0A\u9650 10000\uFF09\u3002",
+  "automation.maxRecordingMb": "\u5355\u4E2A\u4EFB\u52A1\u7684\u5F55\u50CF\u603B\u91CF\u4E0A\u9650\uFF08MB\uFF0C\u7F3A\u7701 64\uFF09\u3002\u548C `keepRuns` \u5148\u649E\u54EA\u6761\u7B97\u54EA\u6761\u3002",
+  budget: "\u82B1\u8D39\u4E0E token \u7684\u95F8\u95E8\u3002**\u7F3A\u7701\u65E0\u4E0A\u9650**\uFF08\u7B49\u4E8E\u4E0D\u542F\u7528\uFF09\u3002",
+  "budget.maxCostUsd": "\u4E00\u6B21\u4F1A\u8BDD\u6700\u591A\u82B1\u591A\u5C11\u7F8E\u5143\u3002\u4E0D\u914D = \u4E0D\u8BBE\u4E0A\u9650\u3002",
+  "budget.maxTokens": "\u4E00\u6B21\u4F1A\u8BDD\u6700\u591A\u7528\u591A\u5C11 token\u3002\u4E0D\u914D = \u4E0D\u8BBE\u4E0A\u9650\u3002",
+  "budget.warnAtPercent": "\u82B1\u5230\u4E0A\u9650\u7684\u767E\u5206\u4E4B\u51E0\u65F6\u5F00\u59CB\u63D0\u9192\uFF080~100\uFF09\u3002",
+  "budget.onUnknownPricing": "\u9047\u5230\u4EF7\u683C\u672A\u77E5\u7684\u6A21\u578B\u600E\u4E48\u529E\uFF1A`block`\uFF08\u62D2\u7EDD\u8C03\u7528\uFF09/ `warn`\uFF08\u7167\u8DD1\uFF0C\u53EA\u8BB0\u4E00\u6761\uFF09\u3002",
+  compliance: "\u5185\u5BB9\u5408\u89C4\u68C0\u67E5\u3002",
+  "compliance.enabled": "\u603B\u5F00\u5173\u3002\u7F3A\u7701 = \u5F00\uFF08\u8FD9\u662F\u4EA7\u54C1\u8981\u6C42\uFF0C\u4E0D\u662F\u53EF\u9009\u589E\u5F3A\uFF09\u3002",
+  "compliance.scope": "\u68C0\u67E5\u54EA\u51E0\u6761\u8DEF\u3002\u4E09\u683C\u5404\u81EA\u7684\u7F3A\u7701\u4E0D\u540C\uFF0C\u89C1\u4E0B\u9762\u4E09\u6761\u3002",
+  "compliance.scope.output": "\u6A21\u578B\u8F93\u51FA\u3002\u7F3A\u7701\u5173 \u2014\u2014 \u8BEF\u4F24\u548C\u6D41\u5F0F\u5EF6\u8FDF\u7684\u5927\u5934\u3002",
+  "compliance.scope.input": "\u7528\u6237\u8F93\u5165\u3002\u7F3A\u7701\u5F00\uFF0C\u8FD9\u4E00\u4FA7\u662F\u5408\u89C4\u7684\u4E3B\u6218\u573A\u3002",
+  "compliance.scope.toolArgs": "\u6A21\u578B\u751F\u6210\u7684\u5DE5\u5177\u5165\u53C2\u3002\u7F3A\u7701\u5173 \u2014\u2014 \u62E6\u4E00\u6B21 `file_write` \u7684\u8BEF\u4F24\u4EE3\u4EF7\u592A\u5927\u3002",
+  "compliance.skipCodeBlocks": "\u56F4\u680F\u4EE3\u7801\u5757\u548C\u884C\u5185 code \u4E0D\u5224\uFF08\u7F3A\u7701\u5F00\uFF09\u3002",
+  "compliance.maxHoldChars": "\u6D41\u5F0F\u68C0\u67E5\u7684\u7F13\u51B2\u533A\u4E0A\u9650\uFF08\u5B57\u7B26\uFF0C\u4E0A\u9650 10000\uFF09\u3002\u8D85\u8FC7\u5C31\u5F3A\u5236\u5224\u4E00\u6B21\uFF0C\u522B\u4E3A\u4E86\u7B49\u4E00\u4E2A\u53E5\u53F7\u628A\u6574\u6BB5\u618B\u4F4F\u3002",
+  "compliance.actions": "\u7C7B\u522B \u2192 \u52A8\u4F5C\u3002\u6CA1\u5217\u5230\u7684\u7C7B\u522B\u8D70\u9ED8\u8BA4\u6863 \u2014\u2014 \u53EA\u5199\u4E86\u4E00\u884C\u4E0D\u4F1A\u628A\u5176\u4F59\u7C7B\u522B\u4E00\u8D77\u53D8\u6210\u7A7A\u3002",
+  headless: "`epoch --print` \u8FD9\u7C7B\u975E\u4EA4\u4E92\u6A21\u5F0F\u7684\u5DE5\u5177\u767D\u540D\u5355\u3002\u7F3A\u7701 = \u8D70\u5404\u81EA\u7684\u5185\u7F6E\u9ED8\u8BA4\u6E05\u5355\u3002",
+  "headless.allowTools": "\u5141\u8BB8\u5728\u975E\u4EA4\u4E92\u6A21\u5F0F\u4E0B\u4F7F\u7528\u7684\u5DE5\u5177\u540D\u6E05\u5355\u3002",
+  "headless.allowOperations": "\u5141\u8BB8\u5728\u975E\u4EA4\u4E92\u6A21\u5F0F\u4E0B\u4F7F\u7528\u7684\u64CD\u4F5C\u7C7B\u522B\u6E05\u5355\u3002",
+  telemetry: "\u8FD0\u884C\u9065\u6D4B\u3002\u7F3A\u7701 = \u4E0D\u542F\u7528\u3002",
+  "telemetry.enabled": "\u5F00\u5173\u3002",
+  "telemetry.target": "\u8F93\u51FA\u5230\u54EA\u513F\uFF1A`file` / `console` / `otlp`\u3002",
+  "telemetry.outfile": "`target: file` \u65F6\u5199\u5230\u54EA\u4E2A\u6587\u4EF6\u3002",
+  "telemetry.endpoint": "`target: otlp` \u65F6\u7684\u4E0A\u62A5\u5730\u5740\u3002",
+  search: "web \u641C\u7D22\u3002\u7F3A\u7701 = \u4E0D\u542F\u7528\uFF08`web_search` \u5DE5\u5177\u6839\u672C\u4E0D\u4F1A\u6CE8\u518C\uFF09\u3002",
+  "search.provider": "\u7528\u54EA\u5BB6\uFF1A`native` / `tavily` / `brave` / `searxng` / `keyless`\u3002\u4E0D\u914D = \u6309\u624B\u91CC\u6709\u54EA\u4E9B\u51ED\u636E\u81EA\u52A8\u6311\u3002",
+  "search.baseUrl": "`searxng` \u8FD9\u4E00\u7C7B\u81EA\u5EFA\u670D\u52A1\u7684\u57FA\u7840\u5730\u5740\u3002",
+  "search.maxResults": "\u4E00\u6B21\u6700\u591A\u8FD4\u56DE\u51E0\u6761\uFF08\u4E0A\u9650 20\uFF09\u3002",
+  sessionSearch: "\u8DE8\u4F1A\u8BDD\u68C0\u7D22\uFF08`session_search`\uFF09\u3002",
+  "sessionSearch.allWorkspaces": "\u5141\u8BB8\u68C0\u7D22\u5176\u4ED6\u5DE5\u4F5C\u533A\u7684\u4F1A\u8BDD\uFF08\u7F3A\u7701 false = \u53EA\u641C\u5F53\u524D\u5DE5\u4F5C\u533A\uFF09\u3002\u26A0\uFE0F \u653E\u5F00\u5B83\u7B49\u4E8E\u8BA9\u540C\u4E00\u4E2A agent \u8BFB\u5230\u4F60\u522B\u7684\u9879\u76EE\u7684\u5BF9\u8BDD\u3002",
+  statusLine: "\u81EA\u5B9A\u4E49\u72B6\u6001\u680F\u3002\u7F3A\u7701 = \u4E0D\u663E\u793A\u3002",
+  "statusLine.command": "\u53D6\u72B6\u6001\u7684\u90A3\u6761\u547D\u4EE4\u3002\u5B83\u6BCF\u6B21\u5237\u65B0\u90FD\u4F1A spawn \u4E00\u4E2A shell\uFF0C\u522B\u5199\u6210\u5E38\u9A7B\u8FDB\u7A0B\u3002",
+  "statusLine.intervalMs": "\u5237\u65B0\u95F4\u9694\uFF08\u6BEB\u79D2\uFF0C500~300000\uFF09\u3002\u4F4E\u4E8E 500 \u53EA\u662F\u5728\u70E7\u5B50\u8FDB\u7A0B\u3002",
+  display: "\u754C\u9762\u4E0A\u7684\u663E\u793A\u504F\u597D\u3002",
+  "display.language": "\u754C\u9762\u8BED\u8A00\uFF1A`zh` / `en`\u3002\u4E0D\u914D = \u6309\u7CFB\u7EDF locale \u63A2\u6D4B\uFF08\u522B\u9ED8\u8BA4\u5199\u6210 zh\uFF0C\u90A3\u4F1A\u628A\u975E\u4E2D\u6587\u7528\u6237\u63A8\u8FDB\u4E2D\u6587\u754C\u9762\uFF09\u3002",
+  "display.currency": "\u5C4F\u5E55\u4E0A\u90A3\u4E9B\u91D1\u989D\u5370\u6210\u4EC0\u4E48\u5E01\u79CD\u3002**\u53EA\u7BA1\u5370\uFF0C\u4E0D\u6539\u53D8\u4EFB\u4F55\u8BA1\u7B97** \u2014\u2014 \u5355\u4EF7\u8868\u3001\u95F8\u95E8\u6BD4\u8F83\u3001\u843D\u76D8\u7684\u6BCF\u4E00\u5217\u3001\u4F60\u8F93\u8FDB\u6765\u7684\u6BCF\u4E00\u683C\u5168\u662F\u7F8E\u5143\u3002",
+  "display.currency.code": "\u5E01\u79CD\u4EE3\u7801\uFF1A`USD` / `CNY`\u3002",
+  "display.currency.rate": "1 \u7F8E\u5143\u7B49\u4E8E\u591A\u5C11\u8FD9\u4E2A\u5E01\u79CD\u3002**\u6CA1\u6709\u9ED8\u8BA4\u503C\uFF0C\u4E5F\u4E0D\u8054\u7F51\u6293** \u2014\u2014 \u6309 1 \u7B97\u7B49\u4E8E\u628A\u7F8E\u5143\u6570\u5B57\u6362\u4E0A\u4EBA\u6C11\u5E01\u7B26\u53F7\uFF0C\u6BD4\u4E0D\u6362\u66F4\u7CDF\u3002",
+  brand: "\u5BBF\u4E3B\u54C1\u724C\u8BCD\u6807\uFF08\u4FA7\u680F\u90A3\u4E00\u683C\uFF09\u3002\u7F3A\u7701 = \u4EC0\u4E48\u90FD\u4E0D\u663E\u793A\uFF0C\u4E0D\u662F\u56DE\u843D\u5230 `epoch`\u3002",
+  brandWhenSidebarCollapsed: "\u4FA7\u680F\u6536\u8D77\u65F6\u54C1\u724C\u90A3\u4E00\u683C\u7684\u53BB\u7559\uFF1A`hide` / `show`\uFF08\u7F3A\u7701 hide\uFF09\u3002",
+  brandMenuId: "\u70B9\u54C1\u724C\u90A3\u4E00\u683C\u56DE\u7ED9\u5BBF\u4E3B\u7684 `id`\u3002\u6CA1\u914D `brand` \u65F6\u5199\u4E86\u4E5F\u4E0D\u7B97\u9519\uFF0C\u53EA\u662F\u4E0D\u8D77\u4F5C\u7528\u3002",
+  sidebarMenu: "\u5BBF\u4E3B\u81EA\u5B9A\u4E49\u7684\u4FA7\u680F\u5E95\u90E8\u5E38\u9A7B\u6309\u94AE\u3002\u7F3A\u7701 = \u4E00\u884C\u90FD\u4E0D\u591A\u3002`id` \u4E0D\u8BB8\u91CD\u590D\uFF0C`primary: true` \u6700\u591A\u4E00\u9879\u3002",
+  userMenuHost: "\u300C\u7528\u6237\u300D\u90A3\u4E00\u683C\u6574\u5F20\u83DC\u5355\u5F52\u5BBF\u4E3B\u81EA\u5DF1\u753B\u3002\u7F3A\u7701 false = \u7167\u65E7\u6211\u4EEC\u753B\u3002",
+  sidebarHeadMenu: "\u5BBF\u4E3B\u81EA\u5B9A\u4E49\u7684\u4FA7\u680F\u5934\u90A3\u51E0\u679A\u56FE\u6807\u3002\u7F3A\u7701 = \u4E00\u679A\u90FD\u4E0D\u591A\uFF1B`id` \u4E0D\u8BB8\u91CD\u590D\uFF08\u90A3\u4E00\u6392\u4E0D\u5206\u91CC\u5916\uFF0C\u5199 `primary` \u4F1A\u88AB\u5265\u6389\uFF09\u3002",
+  topbarMenu: "\u5BBF\u4E3B\u81EA\u5B9A\u4E49\u7684\u9876\u680F\u53F3\u4E0A\u56FE\u6807\u3002\u7F3A\u7701 = \u4E00\u679A\u90FD\u4E0D\u591A\uFF1B\u754C\u9762\u4E0A\u53EA\u628A\u7B2C\u4E00\u9879\u9732\u5728\u5916\u9762\uFF0C\u5176\u4F59\u6536\u8FDB\u300C\u22EF\u300D\u3002",
+  blankCards: "\u5BBF\u4E3B\u81EA\u5B9A\u4E49\u7684\u5F00\u573A\u5361\u7247\u3002\u7F3A\u7701 = \u65B0\u4F1A\u8BDD\u7A7A\u5C4F\u4E0A\u4E00\u5F20\u90FD\u6CA1\u6709\u3002",
+  blankGreeting: "\u5BBF\u4E3B\u81EA\u5B9A\u4E49\u7684\u90A3\u53E5\u5F00\u573A\u62DB\u547C\u3002\u7F3A\u7701 = \u7528\u6211\u4EEC\u90A3\u53E5\uFF08\u548C\u4E0A\u9762\u51E0\u4E2A\u5BBF\u4E3B\u952E\u7684\u9ED8\u8BA4\u6863\u76F8\u53CD\uFF09\u3002",
+  "blankGreeting.eyebrow": "\u62DB\u547C\u4E0A\u65B9\u90A3\u884C\u5C0F\u5B57\uFF0C\u6309\u8BED\u8A00\u7ED9\uFF08`zh` / `en`\uFF09\uFF0C\u81F3\u5C11\u7ED9\u4E00\u79CD\u3002",
+  "blankGreeting.title": "\u62DB\u547C\u7684\u6807\u9898\uFF0C\u6309\u8BED\u8A00\u7ED9\uFF08`zh` / `en`\uFF09\u3002",
+  "blankGreeting.subtitle": "\u62DB\u547C\u7684\u526F\u6807\u9898\uFF0C\u6309\u8BED\u8A00\u7ED9\uFF08`zh` / `en`\uFF09\u3002",
+  "blankGreeting.hidden": "`true` = \u4E0D\u663E\u793A\u90A3\u53E5\u62DB\u547C\uFF08\u6587\u6848\u53EF\u4EE5\u7559\u7740\uFF0C\u4E0D\u4F1A\u56E0\u4E3A\u85CF\u8D77\u6765\u5C31\u903C\u4EBA\u5220\u6389\uFF09\u3002",
+  scheduleRemoveConfirm: "\u5220\u4E00\u6761\u5B9A\u65F6\u4EFB\u52A1\u65F6\u90A3\u53E5\u786E\u8BA4\uFF0C\u6574\u53E5\u5F52\u4F60\uFF08\u6309\u8BED\u8A00\u7ED9 `zh` / `en`\uFF0C`{name}` \u4F1A\u6362\u6210\u4EFB\u52A1\u540D\uFF09\u3002\u7F3A\u7701 = \u6211\u4EEC\u90A3\u53E5\u3002\u26A0\uFE0F \u8FDE\u540C\u300C\u8BB0\u5F55\u548C\u5F55\u50CF\u627E\u4E0D\u56DE\u6765\u300D\u90A3\u534A\u53E5\u4E5F\u4E00\u8D77\u5F52\u4F60\u3002",
+  user: "\u4FA7\u680F\u6700\u4E0B\u9762\u90A3\u4E00\u884C\u300C\u7528\u6237\u300D\u7684\u540D\u5B57\u548C\u5934\u50CF\u3002\u7F3A\u7701 = \u300C\u7528\u6237\u300D+ \u4E00\u679A `user-round`\uFF0C\u90A3\u4E00\u884C\u6C38\u8FDC\u5728\u3002",
+  "user.label": "\u90A3\u4E00\u884C\u663E\u793A\u7684\u540D\u5B57\u3002\u5FC5\u586B \u2014\u2014 \u53EA\u7ED9\u56FE\u6807\u4E0D\u5199\u5B83\u6CA1\u6CD5\u56DE\u7B54\u300C\u8C01\u5728\u7528\u8FD9\u4E2A agent\u300D\u3002",
+  "user.icon": "\u56FE\u6807\u540D\u3002\u53EA\u6821\u9A8C\u975E\u7A7A\u5B57\u7B26\u4E32\uFF0C\u8BA4\u4E0D\u51FA\u6765\u7684\u843D\u4E00\u679A\u515C\u5E95\u7684\u3002",
+  "user.avatar": "\u5934\u50CF\uFF1A`data:image/\u2026` \u6216 `https://\u2026`\u3002\u8D85\u5927\u7684\u56FE\u5F53\u6CA1\u7ED9\u3001\u753B\u56FE\u6807\uFF0C\u4E0D\u4F1A\u5224\u6210\u914D\u7F6E\u9519\u8BEF\u3002",
+  settingsHidden: "\u8BBE\u7F6E\u9875\u91CC\u4E0D\u753B\u54EA\u51E0\u4E2A\u5206\u533A\u3002\u7F3A\u7701 = \u5341\u4E2A\u5168\u753B\u3002\u62FC\u9519\u7684 id \u53EA\u4EA7\u4E00\u6761\u8B66\u544A\uFF0C\u4E0D\u4F1A\u8BA9\u6574\u4EFD\u914D\u7F6E\u5931\u6548\u3002",
+  settingsPanes: "\u5BBF\u4E3B\u81EA\u5DF1\u7684\u8BBE\u7F6E\u5206\u533A\uFF08\u4F1A\u51FA\u73B0\u5728\u8BBE\u7F6E\u9875\u91CC\uFF09\u3002`id` \u4E0D\u8BB8\u548C\u5185\u7F6E\u5341\u4E2A\u649E\u540D\uFF1B`url` \u53EA\u6536 http(s) \u2014\u2014 \u5B83\u662F\u4E00\u6761\u6267\u884C\u5165\u53E3\u3002"
 };
 function buildSchemaExports() {
   const used = /* @__PURE__ */ new Set();
@@ -16329,6 +17330,24 @@ function buildSchemaExports() {
         },
         used
       )
+    },
+    {
+      file: "config.schema.json",
+      document: document(
+        EpochConfigSchema,
+        {
+          title: "epoch \u7528\u6237\u7EA7\u914D\u7F6E\uFF08config.yaml\uFF09",
+          description: "\u7528\u6237\u7EA7\u4E3B\u914D\u7F6E `~/.epoch/config.yaml`\uFF08\u591A profile \u65F6\u5728 `~/.epoch/profiles/<\u540D\u5B57>/`\uFF09\u3002\u4F18\u5148\u7EA7\u89C1 docs/SETTINGS.md \u90A3\u5F20\u5C42\u8868\uFF1A\u73AF\u5883\u53D8\u91CF\u538B\u8FC7\u8FD9\u4E00\u4EFD\uFF0C\u8FD9\u4E00\u4EFD\u538B\u8FC7\u5185\u7F6E\u9ED8\u8BA4\u503C\uFF1B\u9879\u76EE\u7EA7 `settings.json` \u53EA\u8BA4\u5F97\u5176\u4E2D\u4E09\u4E2A\u952E\u3002",
+          io: "input",
+          extra: {
+            version: {
+              type: "integer",
+              description: `\u914D\u7F6E\u6587\u4EF6\u7684\u683C\u5F0F\u7248\u672C\uFF0C\u7531\u8FC1\u79FB\u6D41\u7A0B\u8BFB\u8D70\uFF08\u5F53\u524D ${CURRENT_CONFIG_VERSION}\uFF09\u3002\u4E00\u822C\u4E0D\u7528\u624B\u5199 \u2014\u2014 \u8001\u6587\u4EF6\u6CA1\u6709\u8FD9\u4E00\u884C\u65F6\u6309\u5F53\u524D\u7248\u672C\u5904\u7406\u3002`
+            }
+          }
+        },
+        used
+      )
     }
   ];
   const stale = Object.keys(DESCRIPTIONS).filter((key) => !used.has(key));
@@ -16339,13 +17358,22 @@ function buildSchemaExports() {
   }
   return exports;
 }
+var EXPLICIT_ENUMS = {
+  permission: PERMISSION_LEVELS
+};
 function document(schema, meta, used) {
-  const generated = z.toJSONSchema(schema);
+  const generated = meta.io ? z.toJSONSchema(schema, { io: meta.io }) : z.toJSONSchema(schema);
   const dialect = generated.$schema;
   const properties = {
     $schema: { type: "string" },
+    ...meta.extra,
     ...generated.properties
   };
+  for (const [key, values] of Object.entries(EXPLICIT_ENUMS)) {
+    const node = properties[key];
+    if (node === void 0 || node.type !== "string") continue;
+    properties[key] = { ...node, enum: [...values] };
+  }
   const doc = {
     $schema: dialect,
     title: meta.title,
@@ -16369,10 +17397,138 @@ function annotate(node, path, used) {
       );
     }
     child.description = text;
+    if (MACHINE_DEPENDENT_DEFAULTS.includes(full)) delete child.default;
     used.add(full);
     annotate(child, full, used);
   }
 }
+var BLOCKED = /* @__PURE__ */ new Set(["homeDir", "dbPath", "profile"]);
+var cached;
+function configKeyTable() {
+  cached ??= buildTable();
+  return cached;
+}
+function configKeyByPath(path) {
+  return configKeyTable().find((entry) => entry.path === path);
+}
+function writableConfigKeys() {
+  return configKeyTable().filter((entry) => entry.write === "scalar");
+}
+function buildTable() {
+  const tree = z.toJSONSchema(EpochConfigSchema, { io: "input" });
+  const top = tree.properties;
+  const permission2 = top?.["permission"];
+  if (permission2 !== void 0) permission2.enum = [...PERMISSION_LEVELS];
+  const out = [];
+  collect3(tree, "", 0, out);
+  return out;
+}
+function collect3(node, path, depth, out) {
+  const properties = node.properties;
+  if (properties) {
+    for (const [key, child] of Object.entries(properties)) {
+      collect3(child, path ? `${path}.${key}` : key, depth + 1, out);
+    }
+    return;
+  }
+  const kind = scalarKindOf(node.type);
+  const entry = baseEntry(node, path, depth, kind);
+  out.push(entry);
+}
+function scalarKindOf(type) {
+  const kinds = Array.isArray(type) ? type : [type];
+  for (const kind of kinds) {
+    if (kind === "string" || kind === "integer" || kind === "number" || kind === "boolean") {
+      return kind;
+    }
+  }
+  return void 0;
+}
+function baseEntry(node, path, depth, kind) {
+  const dot = depth === 2 ? path.indexOf(".") : -1;
+  const entry = {
+    path,
+    ...dot < 0 ? {} : { section: path.slice(0, dot), field: path.slice(dot + 1) },
+    kind: kind ?? "string",
+    write: "manual",
+    ...numericBounds(node),
+    ...node.minLength === void 0 ? {} : { minLength: node.minLength },
+    ...Array.isArray(node.enum) ? {
+      choices: node.enum.filter((v) => typeof v === "string")
+    } : {},
+    ...isSettingValue(node.default) ? { builtin: node.default } : {}
+  };
+  if (BLOCKED.has(path)) return { ...entry, write: "blocked", reason: "position" };
+  if (kind === void 0) return { ...entry, reason: "structured" };
+  if (depth > 2) return { ...entry, reason: "nested" };
+  return { ...entry, write: "scalar" };
+}
+function numericBounds(node) {
+  return {
+    ...typeof node.minimum === "number" ? { minimum: node.minimum } : {},
+    ...typeof node.exclusiveMinimum === "number" ? { exclusiveMinimum: node.exclusiveMinimum } : {},
+    ...typeof node.maximum === "number" ? { maximum: node.maximum } : {},
+    ...typeof node.exclusiveMaximum === "number" ? { exclusiveMaximum: node.exclusiveMaximum } : {}
+  };
+}
+function isSettingValue(value) {
+  return typeof value === "string" || typeof value === "number" || typeof value === "boolean";
+}
+function checkConfigValue(entry, raw) {
+  const text = raw.trim();
+  switch (entry.kind) {
+    case "boolean": {
+      if (text !== "true" && text !== "false") {
+        return { ok: false, problem: { code: "not-a-kind", kind: "boolean" } };
+      }
+      return { ok: true, literal: text };
+    }
+    case "integer":
+    case "number": {
+      const value = Number(text);
+      if (text === "" || !Number.isFinite(value)) {
+        return { ok: false, problem: { code: "not-a-kind", kind: entry.kind } };
+      }
+      if (entry.kind === "integer" && !Number.isInteger(value)) {
+        return { ok: false, problem: { code: "not-a-kind", kind: "integer" } };
+      }
+      const bounds = checkBounds(entry, value);
+      if (bounds) return { ok: false, problem: bounds };
+      return { ok: true, literal: String(value) };
+    }
+  }
+  const choices = entry.choices;
+  if (choices !== void 0) {
+    if (!choices.includes(text)) {
+      return { ok: false, problem: { code: "not-in-choices", choices } };
+    }
+    return { ok: true, literal: text };
+  }
+  const minLength = entry.minLength ?? 1;
+  if (text.length < minLength) {
+    return { ok: false, problem: { code: "too-short", minLength } };
+  }
+  return { ok: true, literal: quoteIfNeeded(text) };
+}
+function checkBounds(entry, value) {
+  if (entry.exclusiveMinimum !== void 0 && value <= entry.exclusiveMinimum) {
+    return { code: "below-minimum", bound: entry.exclusiveMinimum, exclusive: true };
+  }
+  if (entry.minimum !== void 0 && value < entry.minimum) {
+    return { code: "below-minimum", bound: entry.minimum, exclusive: false };
+  }
+  if (entry.exclusiveMaximum !== void 0 && value >= entry.exclusiveMaximum) {
+    return { code: "above-maximum", bound: entry.exclusiveMaximum, exclusive: true };
+  }
+  if (entry.maximum !== void 0 && value > entry.maximum) {
+    return { code: "above-maximum", bound: entry.maximum, exclusive: false };
+  }
+  return void 0;
+}
+function quoteIfNeeded(value) {
+  if (/^[A-Za-z0-9_][A-Za-z0-9_./+=:-]*$/.test(value)) return value;
+  return `'${value.replaceAll("'", "''")}'`;
+}
 var MODULE2 = "Keybindings";
 var VIM_MODE_KEY = "vimMode";
 var FileSchema = z.record(z.string(), z.array(z.string()));
@@ -16567,11 +17723,11 @@ function buildSearchQuery(query) {
   }
   const latinPart = cleaned.replace(CJK_RUN, " ");
   for (const w of latinPart.split(/\s+/)) {
-    const t81 = w.trim();
-    if (t81.length >= 2) terms.add(t81);
+    const t83 = w.trim();
+    if (t83.length >= 2) terms.add(t83);
   }
   if (terms.size === 0) return null;
-  return [...terms].map((t81) => `"${t81.replace(/"/g, "")}"`).join(" OR ");
+  return [...terms].map((t83) => `"${t83.replace(/"/g, "")}"`).join(" OR ");
 }
 // src/memory/db.ts
 var NS2 = "memory";
@@ -17062,8 +18218,8 @@ var MemoryManager = class {
   async add(target, content) {
     const label = injectionLabelOf(content);
     if (label !== void 0) return this.refuseInjection(label);
-    const budget2 = this.getBudget()[target];
-    if (budget2.current + content.length > budget2.limit) {
+    const budget = this.getBudget()[target];
+    if (budget.current + content.length > budget.limit) {
       this.consolidationFailures++;
       if (this.consolidationFailures > MAX_CONSOLIDATION_FAILURES_PER_TURN) {
         return {
@@ -17110,9 +18266,9 @@ var MemoryManager = class {
     }
     const label = injectionLabelOf(content);
     if (label !== void 0) return this.refuseInjection(label);
-    const budget2 = this.getBudget()[target];
+    const budget = this.getBudget()[target];
     const delta = content.length - existing.charLength;
-    if (budget2.current + delta > budget2.limit) {
+    if (budget.current + delta > budget.limit) {
       this.consolidationFailures++;
       if (this.consolidationFailures > MAX_CONSOLIDATION_FAILURES_PER_TURN) {
         return { success: false, done: true, error: "Consolidation limit reached" };
@@ -17317,11 +18473,11 @@ var MemoryManager = class {
     for (const target of ["memory", "user"]) {
       const rows = kept.filter((e) => e.target === target);
       if (rows.length === 0) continue;
-      const budget2 = this.getBudget()[target];
+      const budget = this.getBudget()[target];
       const label = target === "user" ? "USER PROFILE (who the user is)" : "MEMORY (your personal notes)";
       sections.push(
         [
-          `${label} [${rows.length} entries \xB7 ${budget2.current.toLocaleString()}/${budget2.limit.toLocaleString()} chars]`,
+          `${label} [${rows.length} entries \xB7 ${budget.current.toLocaleString()}/${budget.limit.toLocaleString()} chars]`,
           ...rows.map((e) => this.indexLine(e))
         ].join("\n")
       );
@@ -17352,7 +18508,7 @@ var MemoryManager = class {
     return `${e.id}  ${e.summary}  (${e.charLength} chars)`;
   }
   buildConsolidateHint(target) {
-    const budget2 = this.getBudget()[target];
+    const budget = this.getBudget()[target];
     const heat = /* @__PURE__ */ new Map();
     for (const row of this.db.getAll(target)) {
       const id = this.idByContent.get(contentKey(row.target, row.content));
@@ -17360,7 +18516,7 @@ var MemoryManager = class {
     }
     const candidates2 = this.indexEntries(target).sort((a, b) => (heat.get(a.id) ?? 0) - (heat.get(b.id) ?? 0) || b.charLength - a.charLength).slice(0, 5);
     return [
-      `Memory at ${budget2.current.toLocaleString()}/${budget2.limit.toLocaleString()} chars (${budget2.percent}%) for ${target}. Cannot add new entry.`,
+      `Memory at ${budget.current.toLocaleString()}/${budget.limit.toLocaleString()} chars (${budget.percent}%) for ${target}. Cannot add new entry.`,
       "",
       "To make room, work by id \u2014 NOT by old_text. The MEMORY INDEX only shows a truncated",
       "first line, so text copied from it will never match an entry exactly.",
@@ -18202,6 +19358,10 @@ var SessionDB = class {
       where += " AND cwd = @cwd";
       params["cwd"] = input.cwd;
     }
+    if (!input.includeDelegate) {
+      where += " AND COALESCE(source, '') != @delegateSource";
+      params["delegateSource"] = DELEGATE_SESSION_SOURCE;
+    }
     if (input.updatedSince !== void 0) {
       where += " AND COALESCE(updated_at, started_at) > @updatedSince";
       params["updatedSince"] = input.updatedSince;
@@ -18262,8 +19422,8 @@ var SessionDB = class {
           const todo = this.db.prepare(
             "INSERT INTO todos (id, session_id, content, status, reason, created_at, updated_at) VALUES (@id, @sessionId, @content, @status, @reason, @createdAt, @updatedAt)"
           );
-          for (const t81 of extras.todos ?? []) {
-            todo.run({ ...t81, sessionId: m.id, reason: t81.reason || null });
+          for (const t83 of extras.todos ?? []) {
+            todo.run({ ...t83, sessionId: m.id, reason: t83.reason || null });
           }
         }
         const g = extras.goal;
@@ -18521,6 +19681,26 @@ var SessionDB = class {
       duration: 0
     };
   }
+  offloadImageParts(sessionId) {
+    const rows = this.db.prepare(
+      `SELECT id, parts FROM messages WHERE session_id = ? AND active = 1 AND parts IS NOT NULL AND parts LIKE '%"image"%'`
+    ).all(sessionId);
+    const update = this.db.prepare("UPDATE messages SET parts = @parts WHERE id = @id");
+    let changed = 0;
+    const run = this.db.transaction(() => {
+      for (const row of rows) {
+        const parts = parseParts(row.parts);
+        if (!parts || !parts.some((p) => p.type === "image")) continue;
+        const next = parts.map(
+          (p) => p.type === "image" ? { type: "text", text: OFFLOADED_IMAGE_NOTE } : p
+        );
+        update.run({ parts: JSON.stringify(next), id: row.id });
+        changed += 1;
+      }
+    });
+    run();
+    return changed;
+  }
   archiveAndCompact(sessionId, input) {
     const run = this.db.transaction(() => {
       const rows = this.db.prepare(
@@ -18743,7 +19923,7 @@ function checkFtsHealth(db) {
     messages,
     tables,
     missingTriggers,
-    healthy: missingTriggers.length === 0 && tables.every((t81) => t81.error === null && t81.drift === null && t81.rows === messages),
+    healthy: missingTriggers.length === 0 && tables.every((t83) => t83.error === null && t83.drift === null && t83.rows === messages),
     indexBytes: indexBytesOf(db),
     space: spaceOf(db)
   };
@@ -18893,10 +20073,10 @@ var AUTO_VACUUM_MIN_FREELIST_RATIO = 0.25;
 var IMPORT_ROLES = /* @__PURE__ */ new Set(["system", "user", "assistant", "tool"]);
 var TODO_STATUSES = /* @__PURE__ */ new Set(["pending", "in_progress", "completed", "cancelled"]);
 function validateImportExtras(input) {
-  for (const [i, t81] of (input.todos ?? []).entries()) {
-    if (typeof t81.content !== "string" || t81.content === "") return `todos[${i}].content`;
-    if (!TODO_STATUSES.has(t81.status)) return `todos[${i}].status`;
-    if (typeof t81.createdAt !== "string" || typeof t81.updatedAt !== "string") return `todos[${i}].at`;
+  for (const [i, t83] of (input.todos ?? []).entries()) {
+    if (typeof t83.content !== "string" || t83.content === "") return `todos[${i}].content`;
+    if (!TODO_STATUSES.has(t83.status)) return `todos[${i}].status`;
+    if (typeof t83.createdAt !== "string" || typeof t83.updatedAt !== "string") return `todos[${i}].at`;
   }
   const g = input.goal;
   if (g === void 0) return void 0;
@@ -19085,7 +20265,7 @@ var SessionManager = class {
       converted.push({ ...rest, parts: result.parts });
     }
     const droppedParentId = meta.parentId !== void 0 && !this.db.hasSession(meta.parentId) ? meta.parentId : void 0;
-    const todos = (input.todos ?? []).map((t81) => ({ ...t81, id: this.db.freshTodoId() }));
+    const todos = (input.todos ?? []).map((t83) => ({ ...t83, id: this.db.freshTodoId() }));
     const goal = input.goal === void 0 ? void 0 : { ...input.goal, id: `goal_${randomUUID().replace(/-/g, "")}` };
     try {
       const newIds = this.db.importSession(
@@ -19103,7 +20283,7 @@ var SessionManager = class {
         messageCount: newIds.length,
         idMap,
         ...droppedParentId === void 0 ? {} : { droppedParentId },
-        ...input.todos === void 0 ? {} : { todoIds: todos.map((t81) => t81.id) },
+        ...input.todos === void 0 ? {} : { todoIds: todos.map((t83) => t83.id) },
         ...goal === void 0 ? {} : { goalId: goal.id }
       };
     } catch (err) {
@@ -19250,6 +20430,9 @@ var SessionManager = class {
     const summary = toSummarize.length === 0 ? "" : await this.buildSummary(toSummarize, summarize2) ?? outlineOf(toSummarize);
     return this.db.compact(sessionId, summary, beforeCount, IMPORTANT_ROUNDS * 2);
   }
+  offloadImageParts(sessionId) {
+    return this.db.offloadImageParts(sessionId);
+  }
   archiveAndCompact(sessionId, input) {
     return this.db.archiveAndCompact(sessionId, input);
   }
@@ -19445,8 +20628,8 @@ var GoalService = class {
     const text = objective.trim();
     if (!text) return { ok: false, reason: "empty-objective" };
     if (text.length > MAX_OBJECTIVE_CHARS) return { ok: false, reason: "objective-too-long" };
-    const budget2 = maxRounds ?? DEFAULT_GOAL_MAX_ROUNDS;
-    if (!Number.isInteger(budget2) || budget2 < 1 || budget2 > MAX_GOAL_MAX_ROUNDS) {
+    const budget = maxRounds ?? DEFAULT_GOAL_MAX_ROUNDS;
+    if (!Number.isInteger(budget) || budget < 1 || budget > MAX_GOAL_MAX_ROUNDS) {
       return { ok: false, reason: "bad-budget" };
     }
     const existing = this.current(sessionId);
@@ -19458,7 +20641,7 @@ var GoalService = class {
       objective: text,
       phase: "active",
       block: void 0,
-      maxRounds: budget2,
+      maxRounds: budget,
       roundsUsed: 0,
       completeEvidence: void 0,
       createdAt: at,
@@ -19603,7 +20786,7 @@ function withGoalCompression(engine, view) {
       if (!now) return engine.compress(messages, config);
       return engine.compress(messages, { ...config, goal: now.objective });
     },
-    shouldCompress: (promptTokens2, contextLength) => engine.shouldCompress(promptTokens2, contextLength),
+    shouldCompress: (promptTokens3, contextLength) => engine.shouldCompress(promptTokens3, contextLength),
     trackUsage: (usage) => engine.trackUsage(usage),
     getTotalTokens: () => engine.getTotalTokens(),
     reset: () => engine.reset()
@@ -19998,7 +21181,7 @@ var AppearanceStore = class {
   }
 };
 function ruleAskActive(level) {
-  return level !== "bypass";
+  return approvalPolicyForLevel(level) === "ask";
 }
 function checkCodeExec(isolation) {
   if (isolation === "os") {
@@ -20032,7 +21215,7 @@ function checkPlan(operation, extraRoots) {
       code: "level-default"
     };
   }
-  if (operation.type === "file_write" || operation.type === "command") {
+  if (operation.type === "file_write") {
     return { allowed: false, reason: t("permission_reason.plan_no_write"), code: "level-default" };
   }
   if (operation.type === "network") {
@@ -20042,6 +21225,10 @@ function checkPlan(operation, extraRoots) {
       code: "level-default"
     };
   }
+  if (operation.type === "command") {
+    if (isReadOnlyCommand(operation.detail)) return { allowed: true, code: "level-default" };
+    return { allowed: false, reason: t("permission_reason.plan_no_write"), code: "level-default" };
+  }
   return outsideWorkspace(operation, extraRoots) ?? { allowed: true, code: "level-default" };
 }
 function checkAcceptEdits(operation, isolation, extraRoots) {
@@ -20067,8 +21254,6 @@ function checkDefault(operation, extraRoots) {
 }
 function decideByLevel(level, operation, isolation, extraRoots = []) {
   switch (level) {
-    case "bypass":
-      return { allowed: true, code: "level-default" };
     case "auto":
       return checkAuto();
     case "plan":
@@ -20248,11 +21433,11 @@ var ApprovalCache = class {
     return !rel.startsWith("..") && !isAbsolute(rel);
   }
   normalizeTarget(target) {
-    const t81 = target.trim();
-    if (!t81) return "";
-    const unix = t81.replace(/\\/g, "/");
+    const t83 = target.trim();
+    if (!t83) return "";
+    const unix = t83.replace(/\\/g, "/");
     if (unix.startsWith("/") || /^[A-Za-z]:\//.test(unix)) return resolve(unix);
-    return t81;
+    return t83;
   }
   load() {
     try {
@@ -20355,9 +21540,9 @@ function createSharedPermissionState(cache) {
   };
 }
 function cacheKeyFor(raw) {
-  const t81 = raw.trim();
-  if (!t81) return null;
-  return t81.slice(0, 500);
+  const t83 = raw.trim();
+  if (!t83) return null;
+  return t83.slice(0, 500);
 }
 // src/permission/manager.ts
 var log3 = createLogger("permission");
@@ -20470,15 +21655,23 @@ var PermissionManager = class _PermissionManager {
         code: hard.code
       };
     }
-    if (this.level === "bypass" && hard.code === "obfuscated") {
+    const neverAsk = approvalPolicyForLevel(this.level) === "never";
+    if (neverAsk && hard.code === "obfuscated") {
       return {
         allowed: true,
         reason: t("permission_reason.bypass_unaskable", { reason: hard.reason ?? "" }),
         code: hard.code
       };
     }
-    const cached = this.cachedDecision(operation);
-    if (cached) return cached;
+    const cached2 = this.cachedDecision(operation);
+    if (cached2) return cached2;
+    if (neverAsk) {
+      return {
+        allowed: false,
+        reason: t("permission_reason.forbidden_unaskable", { reason: hard.reason ?? "" }),
+        code: hard.code
+      };
+    }
     if (this.shared.nonInteractive) {
       return {
         allowed: false,
@@ -20489,7 +21682,7 @@ var PermissionManager = class _PermissionManager {
     return null;
   }
   approvalCacheActive() {
-    return this.level !== "bypass";
+    return approvalPolicyForLevel(this.level) === "ask";
   }
   rememberFlag() {
     return this.approvalCacheActive() ? {} : { rememberable: false };
@@ -20497,15 +21690,15 @@ var PermissionManager = class _PermissionManager {
   cachedDecision(operation) {
     const cacheTool = operation.toolName ?? operation.type;
     const cacheKey = cacheKeyFor(operation.target || operation.detail);
-    const cached = cacheKey ? this.shared.cache.get(cacheTool, cacheKey) : null;
-    if (cached === "allow-always" || cached === "allow-session") {
+    const cached2 = cacheKey ? this.shared.cache.get(cacheTool, cacheKey) : null;
+    if (cached2 === "allow-always" || cached2 === "allow-session") {
       return {
         allowed: true,
         reason: t("permission_reason.cached_allow"),
         code: "approval-cache"
       };
     }
-    if (cached === "deny") {
+    if (cached2 === "deny") {
       return {
         allowed: false,
         reason: t("permission_reason.cached_deny"),
@@ -20528,8 +21721,8 @@ var PermissionManager = class _PermissionManager {
     if (ruleDecision && !ruleDecision.allowed && !ruleDecision.requireApproval) {
       return ruleDecision;
     }
-    const cached = this.approvalCacheActive() ? this.cachedDecision(operation) : null;
-    if (cached) return cached;
+    const cached2 = this.approvalCacheActive() ? this.cachedDecision(operation) : null;
+    if (cached2) return cached2;
     const asked = listMatch?.verdict === "ask" ? {
       allowed: false,
       requireApproval: true,
@@ -20812,6 +22005,14 @@ var MIGRATIONS3 = [
     up: (db) => {
       db.exec(`ALTER TABLE schedules ADD COLUMN show_in_session_list INTEGER NOT NULL DEFAULT 0;`);
     }
+  },
+  {
+    id: "schedule-drop-budget",
+    version: 3,
+    description: "\u64A4\u6389\u300C\u8FD9\u4E00\u6B21\u6700\u591A\u82B1\u591A\u5C11\u300D\u90A3\u4E00\u5217\uFF08\u9884\u7B97\u4E0D\u518D\u662F\u4E00\u628A\u5C3A\u5B50\uFF09",
+    up: (db) => {
+      db.exec(`ALTER TABLE schedules DROP COLUMN max_budget_usd;`);
+    }
   }
 ];
 var ScheduleStore = class {
@@ -20842,7 +22043,6 @@ var ScheduleStore = class {
       allowOperations: input.allowOperations ?? [],
       allowRules: input.allowRules ?? [],
       maxTurns: input.maxTurns ?? SCHEDULE_DEFAULTS.maxTurns,
-      maxBudgetUsd: input.maxBudgetUsd,
       timeoutMs: input.timeoutMs ?? SCHEDULE_DEFAULTS.timeoutMs,
       ...input.showInSessionList === true ? { showInSessionList: true } : {},
       trigger: normalizeTrigger(input.trigger),
@@ -20868,7 +22068,6 @@ var ScheduleStore = class {
       allowOperations: [...input.allowOperations],
       allowRules: [...input.allowRules],
       maxTurns: input.maxTurns,
-      maxBudgetUsd: input.maxBudgetUsd,
       timeoutMs: input.timeoutMs,
       ...input.showInSessionList === true ? { showInSessionList: true } : {},
       trigger: normalizeTrigger(input.trigger),
@@ -20910,14 +22109,14 @@ var ScheduleStore = class {
       `INSERT INTO schedules (
            id, name, enabled, created_at, updated_at, prompt, work_dir, model, role,
            skills, mcp_servers, permission, allow_tools, allow_operations, allow_rules,
-           max_turns, max_budget_usd, timeout_ms, show_in_session_list,
+           max_turns, timeout_ms, show_in_session_list,
            trigger_kind, trigger_spec,
            start_date, end_date, os_backend, os_task_id, os_registered_at, os_command,
            last_run_at, last_status
          ) VALUES (
            @id, @name, @enabled, @created_at, @updated_at, @prompt, @work_dir, @model, @role,
            @skills, @mcp_servers, @permission, @allow_tools, @allow_operations, @allow_rules,
-           @max_turns, @max_budget_usd, @timeout_ms, @show_in_session_list,
+           @max_turns, @timeout_ms, @show_in_session_list,
            @trigger_kind, @trigger_spec,
            @start_date, @end_date, @os_backend, @os_task_id, @os_registered_at, @os_command,
            @last_run_at, @last_status
@@ -21033,7 +22232,7 @@ var ScheduleStore = class {
            work_dir = @work_dir, model = @model, role = @role, skills = @skills,
            mcp_servers = @mcp_servers, permission = @permission, allow_tools = @allow_tools,
            allow_operations = @allow_operations, allow_rules = @allow_rules,
-           max_turns = @max_turns, max_budget_usd = @max_budget_usd, timeout_ms = @timeout_ms,
+           max_turns = @max_turns, timeout_ms = @timeout_ms,
            show_in_session_list = @show_in_session_list,
            trigger_kind = @trigger_kind, trigger_spec = @trigger_spec,
            start_date = @start_date, end_date = @end_date, os_backend = @os_backend,
@@ -21055,7 +22254,6 @@ function mergeSchedulePatch(current, patch) {
       "allowOperations",
       "allowRules",
       "maxTurns",
-      "maxBudgetUsd",
       "timeoutMs",
       "showInSessionList",
       "trigger",
@@ -21086,12 +22284,11 @@ function toRow(def) {
     role: def.role ?? null,
     skills: def.skills ? JSON.stringify(def.skills) : null,
     mcp_servers: def.mcpServers ? JSON.stringify(def.mcpServers) : null,
-    permission: def.permission,
+    permission: permissionOfRow(def.permission),
     allow_tools: JSON.stringify(def.allowTools),
     allow_operations: JSON.stringify(def.allowOperations),
     allow_rules: JSON.stringify(def.allowRules),
     max_turns: def.maxTurns,
-    max_budget_usd: def.maxBudgetUsd,
     timeout_ms: def.timeoutMs,
     show_in_session_list: def.showInSessionList === true ? 1 : 0,
     trigger_kind: def.trigger.kind,
@@ -21106,6 +22303,9 @@ function toRow(def) {
     last_status: def.lastStatus ?? null
   };
 }
+function permissionOfRow(raw) {
+  return resolvePermissionLevel(raw) ?? SCHEDULE_DEFAULT_PERMISSION;
+}
 function fromRow(row) {
   return {
     id: row.id,
@@ -21119,12 +22319,11 @@ function fromRow(row) {
     ...row.role !== null ? { role: row.role } : {},
     ...row.skills !== null ? { skills: parseArray2(row.skills) } : {},
     ...row.mcp_servers !== null ? { mcpServers: parseArray2(row.mcp_servers) } : {},
-    permission: row.permission,
+    permission: permissionOfRow(row.permission),
     allowTools: parseArray2(row.allow_tools),
     allowOperations: parseArray2(row.allow_operations),
     allowRules: parseArray2(row.allow_rules),
     maxTurns: row.max_turns,
-    maxBudgetUsd: row.max_budget_usd,
     timeoutMs: row.timeout_ms,
     ...row.show_in_session_list !== 0 ? { showInSessionList: true } : {},
     trigger: JSON.parse(row.trigger_spec),
@@ -22570,7 +23769,7 @@ function loadLexiconDir(dir, source) {
       });
       continue;
     }
-    collect3(content, file, spec, source, out);
+    collect4(content, file, spec, source, out);
   }
   return out;
 }
@@ -22583,7 +23782,7 @@ function classify2(file) {
   }
   return CATEGORY_SET.has(base2) ? { kind: "terms", category: base2 } : null;
 }
-function collect3(content, file, spec, source, out) {
+function collect4(content, file, spec, source, out) {
   const lines = content.split("\n");
   for (let i = 0; i < lines.length; i++) {
     const line = (lines[i] ?? "").trim();
@@ -22635,6 +23834,18 @@ function resolveComplianceDirs(opts) {
   dirs.push({ dir: projectDir, source: "project" });
   return { dirs, projectSkipped: false };
 }
+function hookSkipReason(reason9) {
+  if (reason9 === "escalated") return "mode-disabled";
+  return reason9;
+}
+function hookSandboxPolicy(workDir) {
+  return {
+    mode: "workspace-write",
+    workspaceRoot: workDir,
+    allowNetwork: true,
+    cwd: workDir
+  };
+}
 function sanitizeEnvironment(env) {
   const sensitivePrefixes = [
     "EPOCH_API_KEY",
@@ -22663,6 +23874,15 @@ function runCommandHook(config, event, workDir) {
   const baseEnv = sanitizeEnvironment(process.env);
   const injectedEnv = injectEpochEnv(event, config.pluginRoot);
   const hookEnv = { ...baseEnv, ...injectedEnv, ...config.env };
+  const policy = hookSandboxPolicy(workDir);
+  const raw = shellSpawnArgs(config.command);
+  const confinement = confine(raw.file, raw.args, policy);
+  const sandbox = confinement.confined ? { confined: true, mode: confinement.mode, backend: confinement.backend } : {
+    confined: false,
+    mode: confinement.mode,
+    backend: confinement.backend,
+    skipped: hookSkipReason(confinement.reason)
+  };
   return new Promise((resolve17) => {
     let stdout = "";
     let stderr = "";
@@ -22675,11 +23895,16 @@ function runCommandHook(config, event, workDir) {
         stdout,
         stderr,
         blocked: false,
-        rejectReason: t("hook_load.spawn_failed", { message: err.message })
+        rejectReason: t("hook_load.spawn_failed", { message: err.message }),
+        sandbox
       });
     };
     const child = guardSpawn(
-      () => spawn(config.command, {
+      () => confinement.confined ? spawn(confinement.command, confinement.args, {
+        cwd: workDir,
+        env: hookEnv,
+        stdio: ["pipe", "pipe", "pipe"]
+      }) : spawn(config.command, {
         shell: true,
         cwd: workDir,
         env: hookEnv,
@@ -22697,7 +23922,8 @@ function runCommandHook(config, event, workDir) {
           stdout,
           stderr,
           blocked: false,
-          rejectReason: t("hook_load.timeout")
+          rejectReason: t("hook_load.timeout"),
+          sandbox
         });
       }
     }, timeout);
@@ -22728,13 +23954,21 @@ function runCommandHook(config, event, workDir) {
         }
       } catch {
       }
+      const failure = confinement.confined ? classifyFailure({
+        exitCode,
+        stderr,
+        denialSignatures: confinement.denialSignatures,
+        runnerFailureRules: confinement.runnerFailureRules
+      }) : void 0;
       resolve17({
         exitCode,
         stdout: stdout.trim(),
         stderr: stderr.trim(),
         blocked,
         rejectReason,
-        output
+        output,
+        sandbox,
+        ...failure ? { failure } : {}
       });
     });
     child.on("error", (err) => {
@@ -22841,7 +24075,7 @@ var HookManager = class {
       for (const config of entry.configs) {
         try {
           const result = await runCommandHook(config, event, workDir);
-          reportIfNeverRan(this.log, type, config, result);
+          reportIfNotRun(this.log, type, config, result);
           if (result.blocked) {
             return { blocked: true, reason: result.rejectReason || t("hook_load.rejected") };
           }
@@ -22875,7 +24109,7 @@ var HookManager = class {
       for (const entry of cmdEntries) {
         if (!matchesHook(entry.matcher, event)) continue;
         for (const config of entry.configs) {
-          runCommandHook(config, event, ctx.workDir).then((result) => reportIfNeverRan(this.log, type, config, result)).catch((err) => {
+          runCommandHook(config, event, ctx.workDir).then((result) => reportIfNotRun(this.log, type, config, result)).catch((err) => {
             this.log("warn", `[HookManager] ${type} \u7684 command hook \u5F02\u6B65\u5F02\u5E38: ${describe12(err)}`, {
               hookType: type,
               command: config.command
@@ -22931,7 +24165,7 @@ var HookManager = class {
         for (const config of entry.configs) {
           try {
             const result = await runCommandHook(config, event, ctx.workDir);
-            reportIfNeverRan(this.log, type, config, result);
+            reportIfNotRun(this.log, type, config, result);
             const verdict = verdictOf2(result);
             if (verdict) results.push(verdict);
           } catch (err) {
@@ -22965,12 +24199,25 @@ function verdictOf2(result) {
   }
   return void 0;
 }
-function reportIfNeverRan(log5, type, config, result) {
-  if (result.exitCode !== -1) return;
+function reportIfNotRun(log5, type, config, result) {
+  if (result.exitCode === -1) {
+    log5(
+      "warn",
+      `[HookManager] ${type} \u7684 command hook \u6CA1\u80FD\u6267\u884C\uFF0C\u672C\u6B21\u6309\u653E\u884C\u5904\u7406: ${result.rejectReason ?? t("hook_load.unknown_reason")}`,
+      { hookType: type, command: config.command }
+    );
+    return;
+  }
+  const kind = result.failure?.kind;
+  if (kind !== "sandbox-denied" && kind !== "runner-failed") return;
   log5(
     "warn",
-    `[HookManager] ${type} \u7684 command hook \u6CA1\u80FD\u6267\u884C\uFF0C\u672C\u6B21\u6309\u653E\u884C\u5904\u7406: ${result.rejectReason ?? "\u672A\u77E5\u539F\u56E0"}`,
-    { hookType: type, command: config.command }
+    t(kind === "sandbox-denied" ? "hook_load.sandbox_denied" : "hook_load.sandbox_runner_failed", {
+      type,
+      command: config.command,
+      detail: result.failure?.evidence ?? result.stderr.split("\n")[0] ?? ""
+    }),
+    { hookType: type, command: config.command, failure: kind }
   );
 }
 var MAPPINGS = {
@@ -23137,6 +24384,8 @@ var EVENT_MAP = {
   SessionStart: "session:start",
   SessionEnd: "session:end",
   Stop: "stop",
+  SubagentStart: "subagent:start",
+  SubagentStop: "subagent:stop",
   PostCompact: "compress:after"
 };
 var UNRUNNABLE_EVENTS = {
@@ -23586,7 +24835,7 @@ function stageSkillDir(source, staging, category, name, skills, issues, lang) {
   const dir = join(staging, category, name);
   mkdirSync(dir, { recursive: true });
   copyFileSync(join(source, SKILL_FILE), join(dir, SKILL_FILE));
-  let budget2 = MAX_FILES_PER_SKILL - 1;
+  let budget = MAX_FILES_PER_SKILL - 1;
   for (const entry of readEntries2(source, label, issues, lang)) {
     if (entry.name === SKILL_FILE) continue;
     if (!entry.isDir || !SKILL_ASSET_DIRS.includes(entry.name)) {
@@ -23596,7 +24845,7 @@ function stageSkillDir(source, staging, category, name, skills, issues, lang) {
       });
       continue;
     }
-    budget2 = copyTree(join(source, entry.name), join(dir, entry.name), label, budget2, issues, lang);
+    budget = copyTree(join(source, entry.name), join(dir, entry.name), label, budget, issues, lang);
   }
   skills.push({ name, category, dir });
 }
@@ -23655,8 +24904,8 @@ function placeOf(root, parts, lang) {
   const category = parts.at(-2) ?? "general";
   return { name, category: skillSegmentIssue(category, lang) === void 0 ? category : "general" };
 }
-function copyTree(from, to, label, budget2, issues, lang) {
-  let left = budget2;
+function copyTree(from, to, label, budget, issues, lang) {
+  let left = budget;
   mkdirSync(to, { recursive: true });
   for (const entry of readEntries2(from, label, issues, lang)) {
     if (left <= 0) {
@@ -24202,9 +25451,9 @@ var SkillSystem = class {
     );
   }
 };
-function sameDirs(cached, current) {
-  if (cached.length !== current.length) return false;
-  return cached.every((dir, i) => dir === current[i]?.dir);
+function sameDirs(cached2, current) {
+  if (cached2.length !== current.length) return false;
+  return cached2.every((dir, i) => dir === current[i]?.dir);
 }
 var MODULE6 = "Skill";
 function resolveSkillDirs(opts) {
@@ -24720,11 +25969,11 @@ function readOne(path, opts, usedBytes) {
   }
   const remaining = MAX_ATTACH_TOTAL_BYTES - usedBytes;
   if (remaining <= 0) return { part: { type: "file", path, omitted: "over-limit", bytes: size } };
-  const budget2 = Math.min(MAX_ATTACH_BYTES, remaining);
-  if (raw.length <= budget2) {
+  const budget = Math.min(MAX_ATTACH_BYTES, remaining);
+  if (raw.length <= budget) {
     return { part: { type: "file", path, text: raw.toString("utf8"), bytes: size } };
   }
-  const { text, truncatedTo } = truncateToBudget(raw, budget2);
+  const { text, truncatedTo } = truncateToBudget(raw, budget);
   return {
     part: { type: "file", path, text, truncatedTo, bytes: size },
     notice: t("mentions.truncated", {
@@ -24938,6 +26187,9 @@ function goalSection(goal) {
   ].join("\n");
 }
 var DEFAULT_THRESHOLD = DEFAULT_COMPRESSION_THRESHOLD;
+function messageTokens(m) {
+  return estimateTokens(m.content) + (m.reasoning ? estimateTokens(m.reasoning) : 0);
+}
 var COOLDOWN_TURNS = 5;
 var MAX_FAILURES = 3;
 var DEFAULT_CONTEXT_LENGTH3 = 128e3;
@@ -24968,11 +26220,11 @@ var ContextCompressor = class {
       enabled: opts.enabled !== false
     };
   }
-  shouldCompress(promptTokens2, contextLength) {
+  shouldCompress(promptTokens3, contextLength) {
     if (!this.opts.enabled) return false;
     if (this.turnsSinceCompress < COOLDOWN_TURNS) return false;
     if (this.failureCount >= MAX_FAILURES) return false;
-    return isContextNearlyFull(promptTokens2, contextLength, this.opts.threshold);
+    return isContextNearlyFull(promptTokens3, contextLength, this.opts.threshold);
   }
   async compress(messages, partial = {}) {
     const config = {
@@ -25014,7 +26266,11 @@ var ContextCompressor = class {
       };
     }
     const nl = "\n";
-    const middleText = middle.map((m) => `${m.role}: ${m.content}`).join(nl);
+    const middleText = middle.map((m) => {
+      const body2 = `${m.role}: ${m.content}`;
+      return m.reasoning ? `${body2}
+[thinking] ${m.reasoning}` : body2;
+    }).join(nl);
     const summarized = await this.generateSummary(
       middleText,
       config.instruction,
@@ -25071,13 +26327,13 @@ var ContextCompressor = class {
   determineBoundaries(messages, config) {
     const head = messages.slice(0, config.protectFirstN);
     const thresholdTokens = config.threshold * config.contextLength;
-    const tailBudget = thresholdTokens * config.targetRatio;
+    const tailBudget = config.force ? 0 : thresholdTokens * config.targetRatio;
     let tailTokens = 0;
     let tailStart = messages.length;
     let userCount = 0;
     for (let i = messages.length - 1; i >= config.protectFirstN; i--) {
       const msg = messages[i];
-      tailTokens += estimateTokens(msg.content);
+      tailTokens += messageTokens(msg);
       if (msg.role === "user") userCount++;
       tailStart = i;
       const enoughTokens = tailTokens >= tailBudget;
@@ -25177,7 +26433,7 @@ ${extra}` : withGoal;
     return result;
   }
   estimateTokens(messages) {
-    return messages.reduce((sum, m) => sum + estimateTokens(m.content), 0);
+    return messages.reduce((sum, m) => sum + messageTokens(m), 0);
   }
 };
 var FILE_VERSION5 = 1;
@@ -25417,257 +26673,6 @@ function hasExecTierContent(inv) {
 function hasDedicatedExecContent(inv) {
   return inv.hookFiles.includes(EPOCH_HOOKS_RELPATH) || inv.policies > 0;
 }
-function describeIsolation() {
-  const backend = detectBackend();
-  const os = platform();
-  if (backend === "seatbelt") {
-    return {
-      level: "os",
-      backend,
-      detail: t("sandbox_isolation.seatbelt"),
-      reason: "os-isolated",
-      platform: os
-    };
-  }
-  if (backend === "bubblewrap") {
-    return {
-      level: "os",
-      backend,
-      detail: t("sandbox_isolation.bubblewrap"),
-      reason: "os-isolated",
-      platform: os
-    };
-  }
-  const [why, reason9] = os === "darwin" ? [t("sandbox_isolation.no_seatbelt"), "backend-unavailable"] : os === "linux" ? [t("sandbox_isolation.no_bubblewrap"), "backend-missing"] : (
-    [t("sandbox_isolation.by_design", { platform: os }), "platform-unsupported"]
-  );
-  return {
-    level: "process",
-    backend,
-    detail: t("sandbox_isolation.process_only", { why }),
-    reason: reason9,
-    platform: os
-  };
-}
-var SANDBOX_COVERS = ["code_exec", "terminal"];
-var SANDBOX_EXCLUDES = [];
-// src/sandbox/sandbox.ts
-var IS_WINDOWS = platform() === "win32";
-var SANDBOX_ROOT = join(tmpdir(), "epoch-sandbox");
-var DEFAULT_TIMEOUT = 3e4;
-var MAX_OUTPUT = 1e5;
-var MAX_MEMORY = 512;
-var TRUNCATE_HEAD = 2e3;
-var TRUNCATE_TAIL = 2e3;
-function resolveExecutable(name) {
-  if (IS_WINDOWS || name.includes("/") || name.includes("\\")) return name;
-  for (const dir of (process.env["PATH"] ?? "").split(delimiter)) {
-    if (!dir) continue;
-    const candidate = join(dir, name);
-    if (existsSync(candidate)) return candidate;
-  }
-  return name;
-}
-var CodeSandbox = class {
-  sandboxDir;
-  readableDirs;
-  constructor(sessionId, workDir) {
-    const safeId = sessionId.replace(/[^A-Za-z0-9_-]/g, "_").slice(0, 128) || "default";
-    this.sandboxDir = join(SANDBOX_ROOT, safeId);
-    mkdirSync(this.sandboxDir, { recursive: true });
-    this.readableDirs = [];
-    if (workDir) {
-      const abs = resolve(workDir);
-      if (abs !== resolve(homedir()) && abs !== "/") this.readableDirs.push(abs);
-    }
-  }
-  getIsolation() {
-    return describeIsolation();
-  }
-  async execute(req) {
-    const start = Date.now();
-    const timeout = req.timeout ?? DEFAULT_TIMEOUT;
-    const isolation = describeIsolation().level;
-    try {
-      const spec = req.language === "javascript" ? this.jsSpec(req.code) : this.pySpec(req.code);
-      const result = await this.run(spec, {
-        timeout,
-        allowNetwork: req.allowNetwork === true,
-        ...req.signal ? { signal: req.signal } : {}
-      });
-      return { ...result, isolation };
-    } catch (err) {
-      const msg = err instanceof Error ? err.message : String(err);
-      if (msg.includes("timed out") || msg.includes("killed")) {
-        return {
-          success: false,
-          output: "",
-          error: `[\u8D85\u65F6] \u8D85\u8FC7 ${timeout / 1e3} \u79D2`,
-          errorType: "timeout",
-          duration: Date.now() - start,
-          isolation
-        };
-      }
-      return {
-        success: false,
-        output: "",
-        error: `[\u9519\u8BEF] ${msg}`,
-        errorType: "runtime",
-        duration: Date.now() - start,
-        isolation
-      };
-    }
-  }
-  destroy() {
-    try {
-      rmSync(this.sandboxDir, { recursive: true });
-    } catch {
-    }
-  }
-  getDir() {
-    return this.sandboxDir;
-  }
-  jsSpec(code) {
-    const tmpFile = join(this.sandboxDir, "code.js");
-    writeFileSync(tmpFile, code, "utf-8");
-    return {
-      command: process.execPath,
-      args: [`--max-old-space-size=${MAX_MEMORY}`, tmpFile],
-      env: EXEC_PATH_AS_NODE_ENV
-    };
-  }
-  pySpec(code) {
-    const tmpFile = join(this.sandboxDir, "code.py");
-    writeFileSync(tmpFile, code, "utf-8");
-    return {
-      command: resolveExecutable(IS_WINDOWS ? "python" : "python3"),
-      args: ["-I", tmpFile]
-    };
-  }
-  run(spec, opts) {
-    const start = Date.now();
-    const wrapped = isolate(spec.command, spec.args, {
-      writableDirs: [this.sandboxDir, tmpdir()],
-      readableDirs: this.readableDirs,
-      allowNetwork: opts.allowNetwork,
-      cwd: this.sandboxDir
-    });
-    const { command, args } = wrapped ?? spec;
-    const spawnOpts = {
-      cwd: this.sandboxDir,
-      timeout: opts.timeout,
-      env: {
-        PATH: process.env["PATH"] ?? "",
-        HOME: process.env["HOME"] ?? "",
-        TMPDIR: this.sandboxDir,
-        LANG: process.env["LANG"] ?? "en_US.UTF-8",
-        ...spec.env
-      },
-      stdio: ["ignore", "pipe", "pipe"],
-      ...IS_WINDOWS ? { windowsHide: true } : {}
-    };
-    return new Promise((resolve17) => {
-      let stdout = "";
-      let stderr = "";
-      let killedForOutput = false;
-      let child = null;
-      const onAbort = () => {
-        child?.kill("SIGKILL");
-      };
-      const failToStart = (err) => {
-        opts.signal?.removeEventListener("abort", onAbort);
-        if (err.code === "ENOENT") {
-          resolve17({
-            success: false,
-            output: "",
-            error: `[\u9519\u8BEF] \u627E\u4E0D\u5230\u89E3\u91CA\u5668: ${command}`,
-            errorType: "compile",
-            duration: Date.now() - start
-          });
-          return;
-        }
-        resolve17({
-          success: false,
-          output: "",
-          error: `[\u9519\u8BEF] ${err.message}\uFF08command=${command}\uFF0Ccwd=${spawnOpts.cwd ?? ""}\uFF09`,
-          errorType: "runtime",
-          duration: Date.now() - start
-        });
-      };
-      child = guardSpawn(() => spawn(command, args, spawnOpts), failToStart);
-      if (!child) return;
-      const proc = child;
-      let outDecoder = null;
-      let errDecoder = null;
-      proc.stdout?.on("data", (c) => {
-        if (killedForOutput) return;
-        outDecoder ??= createStreamDecoder();
-        stdout += outDecoder.write(c);
-        if (stdout.length >= MAX_OUTPUT) {
-          killedForOutput = true;
-          stdout = stdout.slice(0, MAX_OUTPUT);
-          proc.kill("SIGKILL");
-        }
-      });
-      proc.stderr?.on("data", (c) => {
-        if (stderr.length >= MAX_OUTPUT) return;
-        errDecoder ??= createStreamDecoder();
-        stderr += errDecoder.write(c);
-      });
-      opts.signal?.addEventListener("abort", onAbort, { once: true });
-      proc.on("error", failToStart);
-      proc.on("close", (code, sig) => {
-        opts.signal?.removeEventListener("abort", onAbort);
-        if (!killedForOutput) stdout += outDecoder?.end() ?? "";
-        if (stderr.length < MAX_OUTPUT) stderr += errDecoder?.end() ?? "";
-        const duration = Date.now() - start;
-        if (killedForOutput) {
-          resolve17({
-            success: false,
-            output: trunc(stdout, stderr),
-            error: `[\u8F93\u51FA\u8D85\u9650] \u8D85\u8FC7 ${MAX_OUTPUT} \u5B57\u8282\uFF0C\u5DF2\u7EC8\u6B62`,
-            errorType: "runtime",
-            duration
-          });
-          return;
-        }
-        if (sig) {
-          resolve17({
-            success: false,
-            output: trunc(stdout, stderr),
-            error: opts.signal?.aborted ? "[\u5DF2\u53D6\u6D88]" : "[\u8D85\u65F6] \u6267\u884C\u8D85\u65F6",
-            errorType: "timeout",
-            duration
-          });
-          return;
-        }
-        const output = trunc(stdout, stderr);
-        if (code !== 0 && code !== null) {
-          const oom = /heap out of memory|allocation failed/i.test(stderr);
-          resolve17({
-            success: false,
-            output,
-            error: oom ? `[\u5185\u5B58\u8D85\u9650] \u8D85\u8FC7 ${MAX_MEMORY}MB` : `[\u8FD0\u884C\u65F6\u9519\u8BEF] exit ${code}: ${stderr.slice(0, 200)}`,
-            errorType: oom ? "oom" : "runtime",
-            duration
-          });
-          return;
-        }
-        resolve17({ success: true, output, duration });
-      });
-    });
-  }
-};
-function trunc(stdout, stderr) {
-  const nl = "\n";
-  let out = stdout;
-  if (stderr) out += (out ? nl : "") + stderr;
-  if (out.length <= MAX_OUTPUT) return out || "(\u65E0\u8F93\u51FA)";
-  const head = out.slice(0, TRUNCATE_HEAD);
-  const tail = out.slice(-TRUNCATE_TAIL);
-  const skipped = out.length - TRUNCATE_HEAD - TRUNCATE_TAIL;
-  return `${head}${nl}...[\u5DF2\u622A\u65AD ${(skipped / 1024).toFixed(1)} KB]...${nl}${tail}`;
-}
 /**
  * @license
  * Copyright 2025 Google LLC
@@ -25713,4 +26718,4 @@ function trunc(stdout, stderr) {
  *    `--tree` 的命令帮助里，让用户自己知道 `--tree` 意味着什么。
  */
 
-export { ABOUT_DESC_MAX_CHARS, ABOUT_README_MAX_CHARS, AGENT_ROLE_DIAG_MODULE, ARTIFACT_MAX_TOTAL_BYTES, ARTIFACT_RETENTION_DEFAULTS, ATTACHMENT_MAX_TOTAL_BYTES, ATTACHMENT_RETENTION_DEFAULTS, AgentLoop, AppearanceStore, ApprovalCache, BLOCKED_TOOLS, BudgetGuard, BudgetStore, CHECKPOINT_MAX_TOTAL_BYTES, CLAUDE_EVENT_NAMES, CLAUDE_TOOL_NAMES, CODE_MODE_LIMITS, CODE_MODE_SDK_TAG, CONFIG_KEYS, CURRENT_CONFIG_VERSION, CheckpointManager, CheckpointStore, CodeSandbox, ComplianceEngine, ContextCompressor, DEFAULT_COMPLIANCE_ACTIONS, DEFAULT_COMPLIANCE_SETTINGS, DEFAULT_COMPRESSION_THRESHOLD, DEFAULT_GOAL_MAX_ROUNDS, DEFAULT_MAX_HOLD_CHARS, DelegateManager, EMPTY_RULES, EPOCH_DISK_LEDGER, EpochConfigSchema, FTS_TABLES, FTS_TRIGGERS, GOAL_BLOCK_CODES, GoalService, GoalStore, HEADLESS_AUDIT_CODES, HookManager, INSTRUCTION_BUDGET_CHARS, INSTRUCTION_FILES, ImageLoadError, ImportTrustStore, LAUNCHD_LABEL_PREFIX, LOCK_HEARTBEAT_MS, LOCK_STALE_MS, LastOpenSessions, MARKETPLACE_DISPLAY_FIELDS, MARKETPLACE_FILE, MAX_AUDIT_ENTRIES, MAX_COMMAND_DEPTH, MAX_GOAL_MAX_ROUNDS, MAX_IMPORT_DEPTH, MAX_LAST_OPEN_SESSIONS, MAX_OBJECTIVE_CHARS, MAX_REASON_CHARS, MAX_RECENT_WORKSPACES, MODEL_ENTRIES_FILE, MODEL_GIVE_UP_THRESHOLD, MULTIMODAL_DEFAULTS, ManagedPolicyError, ManagedSettingsSchema, MemoryManager, ModelFailureTracker, NOMINAL_TOTAL_BYTES, NO_REVEALED_TOOLS, PACK_EXCLUDES, PERMISSION_AUDIT_CODES, PLUGIN_ICON_MAX_BYTES, PLUGIN_LAYOUT, PLUGIN_MANIFEST_FILE, PLUGIN_MANIFEST_KEYS, PLUGIN_NAME_PATTERN, PLUGIN_ROOT_ENV, PLUGIN_ROOT_TOKEN, PLUGIN_VISIBILITY, POLICY_DECISIONS, PROBE_VERSION, PROJECT_AGENTS_SUBDIR, PROVIDER_NO_CREDENTIAL, PermissionManager, PlanModeState, PluginAuthorSchema, PluginStore, PolicyRuleSchema, ProviderError, ProviderRouter, RECORDING_KEEP_RUNS, RECORDING_MAX_BYTES, ROLE_FRONTMATTER_SCHEMA, RUN_CODE_TOOL, RecentWorkspaces, SANDBOX_COVERS, SANDBOX_EXCLUDES, SCALAR_KEYS, SCHEDULE_DEFAULTS, SCHEDULE_DEFAULT_ALLOWLIST, SCHEDULE_FORM_BUDGET_USD, SCHEDULE_ISSUE_CODES, SCHTASKS_FOLDER, SESSION_MESSAGES_READ_TOOL, SESSION_MESSAGES_SEARCH_TOOL, SESSION_QUERY_TOOLS, SESSION_SEARCH_TOOL, SESSION_TRACE_TOOL, SETTINGS_LAYER_ORDER, SETTING_WRITE_KEYS, SETTING_WRITE_LAYERS, SKILL_ASSET_DIRS, SKILL_CREATE_TOOL, SKILL_EDIT_TOOL, SKILL_FILE, SKILL_PATCH_TOOL, SKILL_VIEW_TOOL, SKILL_WRITE_FILE_TOOL, SLASH_COMMANDS_DIAG_MODULE, ScheduleRecorder, ScheduleRegistrar, ScheduleStore, SessionManager, SessionQueries, SessionReferences, SettingsFileError, SettingsFileSchema, SkillLearner, SkillSystem, TOOL_SEARCH_TOOL, TaskNoticeTracker, ToolRegistry, TrackerDB, TrustManager, UNSETTABLE_USER_KEYS, Workspace, acquireScheduleLock, addMarketplace, addUsage, admitArtifact, admitArtifacts, affectedPaths, approvalEntryFor, approvalRootFor, artifactLaunchArgv, artifactOpenRefusal, assertLevelAllowed, blockedRoleTools, buildContextBreakdown, buildFireArgv, buildFtsMatchQuery, buildSchemaExports, buildSystemPrompt, buildTrigramMatchQuery, builtinRoles, capabilityOfRef, checkEpochVersion, checkFtsHealth, checkShadowing, classifyPersistFailure, classifyProviderError, clearModelCache, coalesceRecording, codeModeWorkerPath, commandNameFromRelPath, compileRuleLists, compressionOptions, computeCost, computeCostMicros, computeExecHash, countRules, createAllowAllGate, createAllowAllImportGate, createAskQuestionTool, createCodeExecTool, createDelegateTool, createDenyAllGate, createDenyAllImportGate, createGoalTool, createImportGate, createMemoryTool, createPlanModeTools, createPluginScope, createRoleFile, createRoleScope, createRunCodeTool, createScheduleDraftTool, createSessionMessagesReadTool, createSessionMessagesSearchTool, createSessionSearchTool, createSessionSearchTools, createSessionTraceTool, createSkillViewTool, createSkillWriteTools, createTodoTool, createToolRevealState, createToolScope, createToolSearchTool, createTrustGate, currentEpochVersion, decideImport, decideTrust, defaultConfig, describeArtifactRefusal, describeBackgroundTask, describeHeadlessPolicy, describeIsolation, describeJsonError, diagnoseSchedules, discoverMarkdown, discoverModels, discoverProject, discoverySpec, displayAllows, displayCurrency, draftCommandLine, draftWidening, escapeRuleContent, estimateImageTokens, estimateRunTokens, estimateTokens, evaluateSelection, expandCommand, expandImports, explainSetting, extractArchive, findInstructionFiles, findProjectInstructions, findRole, formatBytes, formatSkillIndex, formatUsd, gateForTool, getCapability, getConfigIssues, getConfigOrigins, getImportGate, getTrustGate, grantedPathsFor, hasDedicatedExecContent, hasExecTierContent, hasPromptCaching, hasProviderCredentials, hasReadTierContent, hasUsableModel, imageFromBase64, imageFromPath, imagePartTokens, importParts, importSkills, installPlugin, instructionDirs, instructionNotices, intervalSlots, inventoryProjectExtensions, inventoryTotal, isBlockCode, isCodeModeDeferred, isEmptyRules, isGoalPhase, isNonInteractive, isReadOnlySubCall, isSettingWriteLayer, isTransientPersistFailure, isValidInterval, isValidPluginName, isWithinWindow, isWritableSettingKey, labelSlug, layerRank, listEntryModels, listRunningSchedules, listSessionCandidates, listWorkspaceFiles, loadCommandDefinitions, loadCommandFile, loadCommands, loadConfig, loadHookSources, loadKeybindings, loadLexiconDir, loadLexiconFiles, loadModelEntries, loadPlugins, loadPolicyFiles, loadPolicyRules, loadRoleDefinitions, loadRoleDir, loadedImports, localDateString, managedSwitchNotes, mapClaudeToolName, mapEpochToolName, mapOperationType, matchPreauthorization, matchRuleLists, matchesHook, mentionsPluginRoot, mergeHeadlessPolicy, mergeRoles, mergeSchedulePatch, microsToUsd, modelEntriesPath, modelListCandidates, needsAllowlist, nextRunAt, noConfigOrigins, noManagedPolicy, noPlugins, normalizeModelEntry, normalizeTrigger, openArtifact, originOf, packFileName, packPlugin, parseClaudeSettingsHooks, parseClock, parseDate, parseFrontmatter, parseHooksConfig, parseHooksConfigVerbose, parseImportLine, parseModelEntry, parseModelList, parseRoleDefinition, parseScheduleDraft, parseSkillFrontmatter, parseTrigger, pendingImageTokens, persistFailureCode, persistParts, persistToolResults, persistedUsage, planPack, previewSkillImport, pricingFor, projectEntryForDisplay, pruneArtifacts, pruneAttachments, pruneRecordings, pruneSchedules, readEntryKey, readImageSize, readMarketplaces, readPluginAbout, readPluginIcon, readPluginManifest, readPluginRecords, readRecording, readSessionSurface, reclaimFtsSpace, redactLine, refreshOpenRouterMetadata, removeMarketplace, removeRecordings, removeRoleFile, removeSessionArtifacts, removeSessionAttachments, renderImportTree, renderProjectContext, renderSdkDeclaration, renderSelfIndex, repairSchedules, resolveArtifactRetention, resolveCodeModeWorker, resolveComplianceDirs, resolveEntrySource, resolveInWorkspace, resolveMarketplaceRef, resolveMentions, resolveMultimodalPolicy, resolvePolicyDirs, resolvePricingAt, resolveProjectRoot, resolveScheduleBackend, resolveSessionReference, resolveSessionVisibility, resolveSettings, resolveSkillDirs, resolveSource, resolveTar, resolveWorkspace, restoreParts, revealScopedProvider, roleScopedProvider, roleSourceLabel, ruleCovers, ruleFromString, ruleToString, runCode, runCommand2 as runCommand, sanitizeArgNames, sanitizeCommand, sanitizeFtsQuery, sanitizePath, sanitizeToolOutput, saveModelEntries, scanInstructions, scanPluginDir, scanSkillDirs, searchMarketplaces, setDisplayCurrency, setImportGate, setPluginEnabled, setTrustGate, settingValueChoices, settingValueKind, settingWriteApply, settingWriteLayers, settingWriteTargets, skillIndexDescription, skillIndexResidency, skillIndexStats, sniffMediaType, splitFrontmatter, staticToolProvider, stripArtifactData, substitutePluginRoot, suggestRuleFromApproval, systemOpenArgv, systemPromptSegments, testModelEntry, toPosix, toolDefinitionTokens, toolMatches, toolTableTokens, totalTokens, traceSession, triggerPeriodMs, unescapeRuleContent, uninstallPlugin, unknownRoleSkills, unknownRoleTools, unloadedInstructionFiles, unsetUserSetting, updateMarketplace, updatePlugin, usdToMicros, validateSchedule, validateTrigger, validateWindow, withGoalCompression, withGoalPrompt, workspaceDisplayPath, writeSettingValue };
+export { ABOUT_DESC_MAX_CHARS, ABOUT_README_MAX_CHARS, AGENT_ROLE_DIAG_MODULE, ARTIFACT_MAX_TOTAL_BYTES, ARTIFACT_RETENTION_DEFAULTS, ATTACHMENT_MAX_TOTAL_BYTES, ATTACHMENT_RETENTION_DEFAULTS, AgentLoop, AppearanceStore, ApprovalCache, BLOCKED_TOOLS, BudgetGuard, BudgetStore, CHECKPOINT_MAX_TOTAL_BYTES, CLAUDE_EVENT_NAMES, CLAUDE_TOOL_NAMES, CODE_MODE_LIMITS, CODE_MODE_SDK_TAG, CONFIG_KEYS, CURRENT_CONFIG_VERSION, CheckpointManager, CheckpointStore, CodeSandbox, ComplianceEngine, ContextCompressor, DEFAULT_COMPLIANCE_ACTIONS, DEFAULT_COMPLIANCE_SETTINGS, DEFAULT_COMPRESSION_THRESHOLD, DEFAULT_GOAL_MAX_ROUNDS, DEFAULT_MAX_HOLD_CHARS, DELEGATE_SESSION_SOURCE, DelegateManager, EMPTY_RULES, EPOCH_DISK_LEDGER, EpochConfigSchema, FTS_TABLES, FTS_TRIGGERS, GOAL_BLOCK_CODES, GoalService, GoalStore, HEADLESS_AUDIT_CODES, HookManager, INSTRUCTION_BUDGET_CHARS, INSTRUCTION_FILES, ImageLoadError, ImportTrustStore, LAUNCHD_LABEL_PREFIX, LOCK_HEARTBEAT_MS, LOCK_STALE_MS, LastOpenSessions, MARKETPLACE_DISPLAY_FIELDS, MARKETPLACE_FILE, MAX_AUDIT_ENTRIES, MAX_COMMAND_DEPTH, MAX_GOAL_MAX_ROUNDS, MAX_IMPORT_DEPTH, MAX_LAST_OPEN_SESSIONS, MAX_OBJECTIVE_CHARS, MAX_REASON_CHARS, MAX_RECENT_WORKSPACES, MODEL_ENTRIES_FILE, MODEL_GIVE_UP_THRESHOLD, MULTIMODAL_DEFAULTS, ManagedPolicyError, ManagedSettingsSchema, MemoryManager, ModelFailureTracker, NOMINAL_TOTAL_BYTES, NO_REVEALED_TOOLS, PACK_EXCLUDES, PERMISSION_AUDIT_CODES, PLUGIN_ICON_MAX_BYTES, PLUGIN_LAYOUT, PLUGIN_MANIFEST_FILE, PLUGIN_MANIFEST_KEYS, PLUGIN_NAME_PATTERN, PLUGIN_ROOT_ENV, PLUGIN_ROOT_TOKEN, PLUGIN_VISIBILITY, POLICY_DECISIONS, PROBE_VERSION, PROJECT_AGENTS_SUBDIR, PROVIDER_NO_CREDENTIAL, PermissionManager, PlanModeState, PluginAuthorSchema, PluginStore, PolicyRuleSchema, ProviderError, ProviderRouter, RECORDING_KEEP_RUNS, RECORDING_MAX_BYTES, ROLE_FRONTMATTER_SCHEMA, RUN_CODE_TOOL, RecentWorkspaces, SANDBOX_COVERS, SANDBOX_EXCLUDES, SCALAR_KEYS, SCHEDULE_DEFAULTS, SCHEDULE_DEFAULT_ALLOWLIST, SCHEDULE_ISSUE_CODES, SCHTASKS_FOLDER, SESSION_MESSAGES_READ_TOOL, SESSION_MESSAGES_SEARCH_TOOL, SESSION_QUERY_TOOLS, SESSION_SEARCH_TOOL, SESSION_TRACE_TOOL, SETTINGS_LAYER_ORDER, SETTING_WRITE_KEYS, SETTING_WRITE_LAYERS, SKILL_ASSET_DIRS, SKILL_CREATE_TOOL, SKILL_EDIT_TOOL, SKILL_FILE, SKILL_PATCH_TOOL, SKILL_VIEW_TOOL, SKILL_WRITE_FILE_TOOL, SLASH_COMMANDS_DIAG_MODULE, ScheduleRecorder, ScheduleRegistrar, ScheduleStore, SessionManager, SessionQueries, SessionReferences, SettingsFileError, SettingsFileSchema, SkillLearner, SkillSystem, TOOL_SEARCH_TOOL, TaskNoticeTracker, ToolRegistry, TrackerDB, TrustManager, UNSETTABLE_USER_KEYS, Workspace, acquireScheduleLock, addMarketplace, addUsage, admitArtifact, admitArtifacts, affectedPaths, approvalEntryFor, approvalRootFor, artifactLaunchArgv, artifactOpenRefusal, assertLevelAllowed, blockedRoleTools, buildContextBreakdown, buildFireArgv, buildFtsMatchQuery, buildSchemaExports, buildSystemPrompt, buildTrigramMatchQuery, builtinRoles, capabilityOfRef, checkConfigValue, checkEpochVersion, checkFtsHealth, checkShadowing, classifyPersistFailure, classifyProviderError, clearModelCache, coalesceRecording, codeModeWorkerPath, commandNameFromRelPath, compileRuleLists, compressionOptions, computeCost, computeCostMicros, computeExecHash, configKeyByPath, configKeyTable, countRules, createAllowAllGate, createAllowAllImportGate, createAskQuestionTool, createCodeExecTool, createDelegateTool, createDenyAllGate, createDenyAllImportGate, createGoalTool, createImportGate, createMemoryTool, createPlanModeTools, createPluginScope, createRoleFile, createRoleScope, createRunCodeTool, createScheduleDraftTool, createSessionMessagesReadTool, createSessionMessagesSearchTool, createSessionSearchTool, createSessionSearchTools, createSessionTraceTool, createSkillViewTool, createSkillWriteTools, createTodoTool, createToolRevealState, createToolScope, createToolSearchTool, createTrustGate, currentEpochVersion, decideImport, decideTrust, defaultConfig, describeArtifactRefusal, describeBackgroundTask, describeHeadlessPolicy, describeIsolation, describeJsonError, diagnoseSchedules, discoverMarkdown, discoverModels, discoverProject, discoverySpec, displayAllows, displayCurrency, draftCommandLine, draftWidening, escapeRuleContent, estimateImageTokens, estimateRunTokens, estimateTokens, evaluateSelection, expandCommand, expandImports, explainSetting, extractArchive, findInstructionFiles, findProjectInstructions, findRole, formatBytes, formatSkillIndex, formatUsd, gateForTool, getCapability, getConfigIssues, getConfigOrigins, getImportGate, getTrustGate, grantedPathsFor, hasDedicatedExecContent, hasExecTierContent, hasPromptCaching, hasProviderCredentials, hasReadTierContent, hasUsableModel, imageFromBase64, imageFromPath, imagePartTokens, importParts, importSkills, installPlugin, instructionDirs, instructionNotices, intervalSlots, inventoryProjectExtensions, inventoryTotal, isBlockCode, isCodeModeDeferred, isEmptyRules, isGoalPhase, isNonInteractive, isReadOnlySubCall, isSettingWriteLayer, isTransientPersistFailure, isValidInterval, isValidPluginName, isWithinWindow, isWritableSettingKey, labelSlug, layerRank, listEntryModels, listRunningSchedules, listSessionCandidates, listWorkspaceFiles, loadCommandDefinitions, loadCommandFile, loadCommands, loadConfig, loadHookSources, loadKeybindings, loadLexiconDir, loadLexiconFiles, loadModelEntries, loadPlugins, loadPolicyFiles, loadPolicyRules, loadRoleDefinitions, loadRoleDir, loadedImports, localDateString, managedSwitchNotes, mapClaudeToolName, mapEpochToolName, mapOperationType, matchPreauthorization, matchRuleLists, matchesHook, mentionsPluginRoot, mergeHeadlessPolicy, mergeRoles, mergeSchedulePatch, microsToUsd, modelEntriesPath, modelListCandidates, needsAllowlist, nextRunAt, noConfigOrigins, noManagedPolicy, noPlugins, normalizeModelEntry, normalizeTrigger, offloadOldestImages, openArtifact, originOf, packFileName, packPlugin, parseClaudeSettingsHooks, parseClock, parseDate, parseFrontmatter, parseHooksConfig, parseHooksConfigVerbose, parseImportLine, parseModelEntry, parseModelList, parseRoleDefinition, parseScheduleDraft, parseSkillFrontmatter, parseTrigger, pendingImageTokens, persistFailureCode, persistParts, persistToolResults, persistedUsage, planPack, previewSkillImport, pricingFor, projectEntryForDisplay, pruneArtifacts, pruneAttachments, pruneRecordings, pruneSchedules, readEntryKey, readImageSize, readMarketplaces, readPluginAbout, readPluginIcon, readPluginManifest, readPluginRecords, readRecording, readSessionSurface, reclaimFtsSpace, redactLine, refreshOpenRouterMetadata, removeMarketplace, removeRecordings, removeRoleFile, removeSessionArtifacts, removeSessionAttachments, renderImportTree, renderProjectContext, renderSdkDeclaration, renderSelfIndex, repairSchedules, requestImageBytes, resolveArtifactRetention, resolveCodeModeWorker, resolveComplianceDirs, resolveEntrySource, resolveInWorkspace, resolveMarketplaceRef, resolveMentions, resolveMultimodalPolicy, resolvePolicyDirs, resolvePricingAt, resolveProjectRoot, resolveScheduleBackend, resolveSessionReference, resolveSessionVisibility, resolveSettings, resolveSkillDirs, resolveSource, resolveTar, resolveWorkspace, restoreParts, revealScopedProvider, roleScopedProvider, roleSourceLabel, ruleCovers, ruleFromString, ruleToString, runCode, runCommand2 as runCommand, sanitizeArgNames, sanitizeCommand, sanitizeFtsQuery, sanitizePath, sanitizeToolOutput, saveModelEntries, scanInstructions, scanPluginDir, scanSkillDirs, searchMarketplaces, setDisplayCurrency, setImportGate, setPluginEnabled, setTrustGate, settingValueChoices, settingValueKind, settingWriteApply, settingWriteLayers, settingWriteTargets, skillIndexDescription, skillIndexResidency, skillIndexStats, sniffMediaType, splitFrontmatter, staticToolProvider, stripArtifactData, substitutePluginRoot, suggestRuleFromApproval, systemOpenArgv, systemPromptSegments, testModelEntry, toPosix, toolDefinitionTokens, toolMatches, toolTableTokens, totalTokens, traceSession, triggerPeriodMs, unescapeRuleContent, uninstallPlugin, unknownRoleSkills, unknownRoleTools, unloadedInstructionFiles, unsetUserSetting, updateMarketplace, updatePlugin, usdToMicros, validateSchedule, validateTrigger, validateWindow, withGoalCompression, withGoalPrompt, workspaceDisplayPath, writableConfigKeys, writeSettingValue };