@epoch-agent/core 3.1.1 → 3.2.0

package/README.md

@@ -30,6 +30,7 @@ Agent 引擎。ReAct 循环、Provider 路由、权限、记忆、技能、Hook
 | `context/`      | 上下文压缩（工具结果裁剪是**摘要之前的独立一步**，头中尾保留，裁完够了就不调模型；2026-08-16 起认 `compression.*` 两个配置项，见下）、项目发现、指令文件与它的 `@import` 展开 + 项目外放行闸门、artifact 闸门与清理、图片 token 估算、`@` 提及的候选清单与解析（**文件和 `@:` 会话共享同一本 200KB 的账**，方案 53）                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                               |
 | `sandbox/`      | `CodeSandbox`（`code_exec` 的执行器）+ 隔离能力的**对外说法**：`describeIsolation()` 那句中文、以及「哪些工具走沙箱」两份清单。**机制那一半 2026-08-16 搬去了 [infra](../infra) 的 `sandbox/`**（消费者不止 core 一个了，`plugin-terminal` 够不着 core）；既有 import 路径靠再导出保住                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                             |
 | `delegate/`     | 子 agent 任务委托（`delegate_task` 的后端；`background: true` 时登记成一格 `agent` 作业，见 [infra/jobs.ts](../infra/src/jobs.ts)）。⚠️ 2026-10-27 起两件事变了：**子任务跑完把整轮按步落进会话库**（带 `parent_id`，`source` 是 `delegate`，所以它不出现在「接着哪一段聊」的列表里 —— 判据在 `DELEGATE_SESSION_SOURCE` 上），以及**超时来自 `delegate.taskTimeoutSec`**（缺省 15 分钟，`0` = 不限时；在此之前是写死的 5 分钟）                                                                                                                                                                                                                                                                                                                                                                                                                    |
+| `goal/`         | **目标**（方案 52）：一段会话的完成判据 + 那几把尺子。`engine` / `provider` / `service` / `store` / `types` / `wording` 六份；`goal` 工具与 `report_goal` 那一路都接在这儿。2026-11-03 补进这张表（上一版漏了）                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    |
 | `team/`         | 团队通信里**住在进程内**的那一半：`registry.ts`（名册 + 共享任务 DAG，写入带 `expectedRevision` compare-and-set，过期就拒）、`inbox.ts`（成员收件箱，实现 `SteerSource` —— 引擎在步骤边界 `take()`，所以插话当轮生效而不是等下一轮）、`board.ts`（讨论板：频道 / 线程 / 帖子 / 订阅）。⚠️ **名册和板子的持久性故意不同**：名册只在内存（进程退出即散，成员本来就活在进程里），板子挂 `sessions.db` 的 `board` namespace（**多个 `epoch` 进程共用同一份库就共享同一块板**，2026-10-30 用两个真进程验收过）。别把两者混成一层 —— 判据在这两个文件头。**2026-11-02 起主会话在名册里有身份**：`registerSession` 登记每一段活会话（建会话 / 复活 / 每轮 `run()`），`send_message` 因此能寻址**另一段主会话**，成员回给 `lead` 的消息按 `parentSessionId` 投回派它出来的那一段 —— 在这之前所有主会话共用一个 `lead` 收件箱，谁先发请求谁把别人的回话吃掉 |
 | `agent-role/`   | agent 角色定义、注册与工具作用域收窄（子 agent 和**顶层会话**两条来路走同一个 `roleScopedProvider`）；`createRoleScope` 把它包成**可变槽** —— 身份行和工具表从同一个变量读，好让「这一条消息换个专家」有地方落。⚠️ 2026-08-18 起这里多了一条**写**的路（`create.ts`，全仓第一条建角色的路）：它和读口共用同一份 frontmatter schema、同一个解析器，写完**先读回来验一遍**再落盘。⚠️ 2026-09-16 又多了它的反面（`remove.ts`，「能加就得能删」）：**落点靠读口解析出来的 `name` 找，不是拿名字拼路径** —— frontmatter 的 `name` 优先于文件名，拼路径要么删不到一份界面上明明列着的身份，要么删掉另一个，而两种错法都不报错；同名两份时**一个字节都不删**。那道「什么样的客户端才准写」的闸门**两条都不在这儿**，在 `@epoch-agent/server`（判据见那两个文件头第三节）                                                                                  |
 | `agent-plugin/` | **插件面板那个可变槽**（2026-10-20）：`createPluginScope` —— 「这一条消息是点着哪个插件面板发的」，`<self>` 段从它读。⚠️ **和 `agent-role/` 有同一个形状、少两样东西**：没有 `provider`（插件名不换工具表）、没有身份 —— 它只影响 system prompt 里一句话，判据在那份文件头那张对照表上。别照着 `createRoleScope` 全抄一遍                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          |
@@ -45,9 +46,14 @@ Agent 引擎。ReAct 循环、Provider 路由、权限、记忆、技能、Hook
 | `trust/`        | 工作区信任判定与闸门                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                               |
 | `telemetry/`    | span 属性脱敏                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      |
 
-另外 10 个工具在四个 plugin 里，不在这里：见
+另外 **21 个工具在五个 plugin 里**，不在这里：见
 [plugin-file](../plugins/plugin-file) / [plugin-terminal](../plugins/plugin-terminal) /
-[plugin-web](../plugins/plugin-web) / [plugin-mcp](../plugins/plugin-mcp)。
+[plugin-web](../plugins/plugin-web) / [plugin-lsp](../plugins/plugin-lsp) /
+[plugin-mcp](../plugins/plugin-mcp)。
+
+> **2026-11-03 核出来的数**：file 8 + terminal 10 + web 2 + lsp 1 = **21**。
+> 上一版这里写的是「10 个工具在四个 plugin 里」（lsp 的 `lsp_diagnostics`
+> 和那 8 个都没算）。plugin-mcp 的工具是运行时从 MCP server 拉来的，数不出来也不该数。
 
 ## 几个刻意的取舍
 

package/dist/index.d.ts

@@ -2706,6 +2706,65 @@ type DeliveryResult = {
     to: string;
     reason: string;
 };
+/**
+ * 宿主交给成员表的两样能力（2026-11-02）。
+ *
+ * 成员表住在 core 里，而「这段主会话在本进程 / 库里存在吗」「把它叫起来跑一轮」
+ * 只有宿主知道 —— core 不许 import runtime / server。所以照
+ * `SubAgentRunner` 的形状：core 定义接口，宿主实现之后注入。
+ *
+ * 没注入（CLI 单会话 / 嵌入宿主）= 这两件事都答不出，所有判据落回
+ * 「没在跑就当它不在」那一档：**宁可报错，也不报一个假的成功**。
+ */
+interface SessionBridge {
+    /** 这段主会话在本进程里活着、或者会话库里还有吗 */
+    exists(sessionId: string): boolean;
+    /**
+     * 把它叫起来跑一轮。**不等它跑完** —— 喂进去就返回，和 codex 的
+     * `TriggerTurn` 一样是异步的。
+     *
+     * `ok: false` 时 `reason` 要能原样给模型看（目录没了 / 接不回来 / 队列满了）。
+     */
+    wake(sessionId: string, text: string): Promise<{
+        ok: boolean;
+        reason?: string;
+    }>;
+    /**
+     * 这段会话的**标题**（2026-11-03）。答不出就 `undefined`。
+     *
+     * 只用来拼「这条消息是谁发的」那一句（`sessionSenderLabel`）—— 被叫醒
+     * 的一方看到裸 UUID 没法一眼认出是谁，得再 `session_list` 去对一次。
+     * 可选：不提供就回落成裸 id，和加这一格之前逐字节相同。
+     */
+    title?(sessionId: string): string | undefined;
+}
+/**
+ * 一次能并行到多少（2026-11-03）。
+ *
+ * 两档数的都是**同时在跑**，不是「一共叫过几次」：
+ * - `maxRunningMembers`：一个主会话同时能有多少个子 agent 在干活；
+ * - `maxWokenSessions`：智能体同时能叫醒多少段别的主会话。
+ *
+ * 为什么要有：这两个动作都是模型自己就能发的（`delegate_task` /
+ * `spawn_teammate` / `followup_task`），而每一次都是一份完整的模型调用。
+ * 没有上限时，一句话让模型「并行调研五个模块」可以轻易变成二十个同时在跑的
+ * 子 agent —— codex 那边对应的护栏是 `max_concurrent_threads_per_session`
+ * 与 `AgentLimitReached`（超了直接报错，不排队）。
+ */
+interface TeamLimits {
+    maxRunningMembers: number;
+    maxWokenSessions: number;
+}
+/**
+ * 一个会话同时能跑几个成员。
+ *
+ * **3** 而不是更大：和 `DelegateManager` 的 `max_concurrent_children` 缺省值
+ * 对齐（同一个数在两处不一致时，用户会看到「一批 3 个能跑、再派一个就被拒」），
+ * 也和 codex 的 4 线程 / 给 root 留 1 个同一个量级。
+ */
+declare const DEFAULT_MAX_RUNNING_MEMBERS = 3;
+/** 智能体同时能叫起来几段会话。判据同 {@link DEFAULT_MAX_RUNNING_MEMBERS} */
+declare const DEFAULT_MAX_WOKEN_SESSIONS = 3;
 declare class TeamRegistry {
     private readonly inboxCapacity;
     private readonly members;
@@ -2720,6 +2779,30 @@ declare class TeamRegistry {
     private readonly mainInboxes;
     /** 登记过的主会话 id（判据在 `registerSession` 上） */
     private readonly sessions;
+    /**
+     * 此刻真有一轮在跑的主会话（2026-11-02）。
+     *
+     * 和 `sessions` 是两个集合，别合并：`sessions` 的意思是「这个 id 是本进程
+     * 认识的主会话」（跑过至少一轮，只增不删），而 `send_message` 要判的是
+     * 「它现在真在跑吗」—— 拿前者当后者，消息会投进一个休眠会话的内存收件箱，
+     * 而没有任何一轮会来读它。
+     *
+     * 引用计数而不是布尔：同一会话重入（`runTurns` 嵌套 / 排队紧接着开下一轮）
+     * 时，早退的那一层不该把计数清零。
+     */
+    private readonly activeTurns;
+    /**
+     * 被智能体叫起来、还没跑完的那几段主会话 → 叫起来的时刻（2026-11-03）。
+     *
+     * 用途只有两个：数「同时在跑几段被叫醒的会话」（`maxWokenSessions`），
+     * 以及挡住 {@link WAKE_RAMP_MS} 那段缝里的重复唤醒。**跑完就删** ——
+     * 删除点在 `endSessionTurn`（目标会话那一轮的最外层 `finally`）。
+     */
+    private readonly wokenSessions;
+    /** 并发上限。判据和缺省值都在 {@link TeamLimits} 上 */
+    private readonly limits;
+    /** 宿主注入的那两样能力（判据在 {@link SessionBridge} 上） */
+    private bridge;
     /**
      * 打断用的回调（`interrupt_agent` 拉的就是它们）。
      *
@@ -2732,7 +2815,7 @@ declare class TeamRegistry {
     private readonly listeners;
     /** 共享任务板（阶段 2）。它也变动时也会叫醒 `wait_agent` */
     readonly tasks: TeamTaskBoard;
-    constructor(inboxCapacity?: number);
+    constructor(inboxCapacity?: number, limits?: Partial<TeamLimits>);
     /** 订阅「团队变了」。返回取消订阅 */
     onChange(cb: () => void): () => void;
     /**
@@ -2804,6 +2887,71 @@ declare class TeamRegistry {
     registerSession(sessionId: string): void;
     /** 这个 id 是不是一段登记过的主会话（诊断和 `list_agents --all` 用） */
     hasSession(sessionId: string): boolean;
+    /**
+     * 这一轮开跑了。
+     *
+     * 调用点只有 `AgentLoop.runTurns()`：它开跑时登记、最外层 `finally` 里注销。
+     * 子 agent 的 `AgentLoop` 没有 `team`（判据在 `session-factory` 的 `subRunner`
+     * 那一格），所以这里不会出现 `delegate-xxxx`。
+     */
+    beginSessionTurn(sessionId: string): void;
+    /**
+     * 这一轮结束了。多调用一次是空操作。
+     *
+     * **不 `notify()`**：一轮结束不是 `wait_agent` 等的那种变化（判据在
+     * `notify()` 上），叫醒它只会在每个回合边界白返回一次。
+     */
+    endSessionTurn(sessionId: string): void;
+    /** 这段主会话此刻真有一轮在跑吗 */
+    isSessionActive(sessionId: string): boolean;
+    /** 宿主注入「这段会话在不在」「把它叫起来」两件事。传 `undefined` = 撤掉 */
+    setSessionBridge(bridge: SessionBridge | undefined): void;
+    /**
+     * 唤醒一段没在跑的主会话。
+     *
+     * 没注入 bridge 时**明说「这个宿主不支持」**，不假装成功：CLI 单会话模式
+     * 里确实没有可唤醒的对象，而调用方（模型）会照着回执决定要不要等回音。
+     */
+    wakeSession(sessionId: string, text: string): Promise<{
+        ok: boolean;
+        reason?: string;
+    }>;
+    /**
+     * 清掉「叫过但始终没跑起来」的旧条目。
+     *
+     * 真跑起来的会在 `endSessionTurn` 里被删；这里管的是另一种：`wake` 报了
+     * 成功、但那一轮根本没开（引擎起不来 / 排队排到一半被丢掉）。不清理的话
+     * 一条这种记录会永久占掉一个名额，或者把那一段会话永久钉在「别重复叫」上。
+     * 只清「不在跑且过了宽限」的 —— 真在跑的一直算在内。
+     */
+    private reapWokenSessions;
+    /** 同时能跑几个成员（给派活那一侧的报错文案用） */
+    get memberLimit(): number;
+    /**
+     * 这个会话此刻还能再起几个成员。
+     *
+     * 判据是**同一个 `parentSessionId` 名下 `status === 'running'` 的成员数**，
+     * 不是「一共派过几个」：收工的不占名额（`markFinished` 把状态翻掉），
+     * 于是长时间使用的会话不会被历史成员卡死。
+     *
+     * `0` = 一个都起不了，调用方要把它当成一次失败告诉模型（codex 那边叫
+     * `AgentLimitReached`，超了也是报错而不是排队）。
+     */
+    availableMemberSlots(parentSessionId: string): number;
+    /**
+     * 这个 id 指向一段**真实存在**的主会话吗。
+     *
+     * 有 bridge 时问宿主（它能看到会话库），没有时回落成「登记过」——
+     * 和加这个判据之前逐字节相同。
+     */
+    sessionExists(sessionId: string): boolean;
+    /**
+     * 这段主会话的标题，答不出就 `undefined`。
+     *
+     * 没注入 bridge / 宿主不提供标题 = 永远答不出，调用方回落成裸 id ——
+     * 和加这一格之前逐字节相同。
+     */
+    sessionTitle(sessionId: string): string | undefined;
     /** 登记过的全部主会话 id，按登记先后 */
     sessionIds(): string[];
     /**
@@ -2859,6 +3007,8 @@ declare class TeamRegistry {
         from: string;
         to: string;
         text: string;
+        /** `from` 的可读写法（主会话之间才需要，判据在 `AgentMessage.fromLabel`） */
+        fromLabel?: string;
     }): AgentMessage;
 }
 
@@ -4664,7 +4814,7 @@ declare function createGoalTool(deps: GoalToolDeps): EpochTool;
  *
  * ---
  *
- * # ⚠️ 改这个文件里的 `description` / `parameters` = 34 段 eval 录像作废
+ * # ⚠️ 改这个文件里的 `description` / `parameters` = 23 份 eval 录像作废
  *
  * 工具定义（名字 / 描述 / 参数）进 eval 的新鲜度指纹
  * （`evals/harness/fingerprint.ts`，那个文件头说得很清楚为什么必须进）。
@@ -4682,6 +4832,29 @@ declare function createGoalTool(deps: GoalToolDeps): EpochTool;
  * 数 `memory` 在 `toolCalls` 里出现几次，必须是 0。
  *
  * ⚠️ 下次再想在这儿加一句话之前先问：**非说在工具描述里不可吗**。
+ *
+ * ---
+ *
+ * # 2026-11-03：写入纪律进描述（明知代价改的第二轮）
+ *
+ * 加的是「写之前先分清三件事」那五行：范围 / 归属 / 证据。来路是 codex 的
+ * `memories/write/templates/memories/stage_one_system_v2.md`（那份原文是它们的
+ * 每会话摘要管道，**只有纪律可搬、管道不可搬** —— 它那句「Write task history,
+ * not a user profile」在这里是要反过来读的，本工具的 `target=user` 本来就是
+ * 用户画像）。
+ *
+ * 为什么落在描述里而不是技能正文：纪律要在**模型准备写记忆那一刻**被看到，
+ * 而那一刻它手上没有任何技能（技能正文要先 `skill_view` 才进上下文）。描述是
+ * 唯一常驻在决策点上的位置 —— 这也是 09-10 那一轮同样的判断。
+ *
+ * 措辞刻意压成三件事、不写成禁令清单：`evals/README.md:261` 记着
+ * `ask_user_question` 描述写长两句之后命中率 8/9 → 5/9 的先例。写成「别记这个
+ * 别记那个」的话，最可能的副作用是该记的也少记了 —— 而这条纪律要治的是
+ * **记偏**（一次性的要求被升格成长期偏好，会一直留在后面每一轮里），不是记多。
+ *
+ * 收账同 09-10：`evals/README.md` 第三行那个窄例外，两条举证
+ * （witness 逐对 diff + 真 key 活体数 `memory` 被选中几次）。改动前的基线是
+ * **0 次**（`grep -c "name: 'memory'" evals/*.eval.ts` 零命中）。
  */
 
 declare function createMemoryTool(memory: MemoryManager$1): EpochTool;
@@ -6108,13 +6281,19 @@ declare function createScheduleDraftTool(deps: ScheduleDraftDeps): EpochTool;
  *
  * - **发给一个 running 成员**：进它的收件箱，引擎在**下一个步骤边界**取走
  *   （`loop.ts:723` 的 `steer.take()`）。它当轮就会看到，不用等这一轮跑完
- * - **发给 `lead`**：进主会话的收件箱，下一轮 `TaskNoticeTracker` 在请求前
- *   拼成一条 note（`loop.ts:1367`）。**父会话没在跑时它待在那儿不动**
+ * - **发给 `lead`**：进主会话的收件箱。父会话在跑时，`TaskNoticeTracker` 在它
+ *   **下一次请求之前**把它拼成一条 note（`loop.ts:1405`）；父会话没在跑时这条
+ *   只是**排在那里**，要等它下次跑起来才读得到 —— 回执照这两种情形分开写
+ * - **发给另一段主会话**：只有它**此刻真有一轮在跑**时才送得到（2026-11-02）。
+ *   休眠的那一段会收到一句明说的失败，而不是一条扔进没人读的箱子的消息
  * - **发给已经收工的成员**：直接失败。收进一个永远不会有下一轮读它的箱子
  *   等于给调用方一个假成功 —— 父 agent 会照着它继续等回音
  *
- * 第三条是 codex `api.rs:35-36` 那条规矩的本地版：通知**不唤醒**已终结的 agent。
- * 阶段 2 有了 `followup_task`，唤醒才会变成一条显式的路。
+ * 后三条是同一个判据：**消息只在对方真会读到它的前提下才算「送到了」**。
+ * 差别落在收件人休眠时的那一档：主会话能自己把对方叫醒（`followup_task`），
+ * 所以直接失败并指路；**成员叫不醒**（那个工具在 `BLOCKED_TOOLS` 里），所以
+ * 排队 + 说清「要等它下次跑起来」。两者都是 codex `api.rs:35-36` 那条规矩
+ * （通知不唤醒已终结的 agent）的本地版 —— 叫醒走的是另一条显式路。
  */
 
 /** 工具名。`BLOCKED_TOOLS` 那边按这个名字放行，别各写各的 */
@@ -6681,12 +6860,21 @@ interface SearchMessagesOutput {
 interface ReadMessagesInput extends Omit<SessionVisibilityInput, 'db'> {
     /** 读哪段会话 */
     sessionId: string;
-    /** 锚点消息（`messages.id`，来自两个检索工具的命中） */
-    messageId: number;
+    /**
+     * 锚点消息（`messages.id`，来自两个检索工具的命中）。
+     *
+     * **省略 = 「这段会话最近在说什么」**。这一档是 2026-11-03 加的，理由是现场：
+     * 模型要找一段没有独特可搜词的会话，拿不到任何 id，于是照着错误里的「it has 9」
+     * 去猜 #9、再猜 #1，三次调用换回三次 8010 —— 而 `messages.id` 是**全库自增**的，
+     * 本来就不可能猜得中。省略时改看 {@link tail}。
+     */
+    messageId?: number | undefined;
     /** 锚点之前取几条。调用方负责夹紧 */
     before: number;
     /** 锚点之后取几条。调用方负责夹紧 */
     after: number;
+    /** 省略 `messageId` 时读最近几条（时间正序由这一层翻好）。调用方负责夹紧 */
+    tail?: number | undefined;
 }
 /**
  * 一条消息的**原文**（不是片段）。
@@ -6718,6 +6906,14 @@ interface ReadMessagesOutput {
     before: MessageRecord[];
     /** 锚点之后那几条，同样正序 */
     after: MessageRecord[];
+    /**
+     * 省略 `messageId` 时给「最近几条」，**时间正序**。
+     *
+     * 这一档存在时 `anchor` 必然缺席 —— 两条路要的不一样：一个是「围绕这一条看」，
+     * 一个是「尾部长什么样」。合进 `after` 会让渲染那一侧分不清「锚点之后」和
+     * 「整段会话的最后几条」。
+     */
+    tail?: MessageRecord[] | undefined;
     /** 这段会话一共多少条。让模型知道自己这个窗口在整段里占多少 */
     total: number;
 }
@@ -6821,6 +7017,8 @@ declare class SessionQueries {
      *   就能探出别的工作区有哪些会话，所以连「它存不存在」都不能泄露）
      * - 在范围里、但这段会话没有这个 messageId → `authorized: true` + `anchor`
      *   缺席。这是模型自己传错了 id，该告诉它，而不是含混成「不可读」
+     * - **根本没传 messageId** → `authorized: true` + `tail` 那几条。这不是错误，
+     *   是「不知道从哪条读起」时唯一还能用的读法（判据在 `ReadMessagesInput.messageId`）
      */
     readMessages(input: ReadMessagesInput): ReadMessagesOutput;
     /**
@@ -6888,6 +7086,14 @@ declare class SessionQueries {
      * （`before: 0` 是合法用法：只要后面那几条）。
      */
     private neighbourRows;
+    /**
+     * 会话最后 n 条（**倒序取，调用方翻**）。
+     *
+     * 不塞进 {@link neighbourRows}：那一份的 WHERE 以锚点为界，而这一条压根没有锚点
+     * —— 合成一份就得给 `anchorId` 编一个哨兵值（0 或 -1），那正是「读着像同一件事、
+     * 其实不是」的开头，而它会在某个 id 真的小于哨兵时静默出错。
+     */
+    private tailRows;
     /**
      * 会话内的逐条命中。授权已经在 `searchMessages` 里判过，这里只按 sessionId 收窄
      * —— 不重复拼 `visClause`：同一个判定在一次调用里做两遍，将来改一处漏一处。
@@ -12353,6 +12559,15 @@ declare class AgentLoop {
         /** 见 {@link CompressResult.carriedHead} —— 落库那一步要用（方案 64 PR-1） */
         carriedHead?: number;
         carriedTail?: number;
+        /**
+         * 这一次**一发摘要请求都没打**（中段为空 / 裁完就够）—— 见
+         * {@link CompressResult.summarySkipped}。
+         *
+         * 手动 `/compact` 那一侧靠它把「没压动」分两档说：
+         * `after === before` 现在有两种来路，**一种花了钱、一种一分没花**，
+         * 而界面上原来只有一种说法（「那笔钱花掉了」），在短会话上就是假话。
+         */
+        summarySkipped?: boolean;
     }>;
     /**
      * 真正压一次。调用方负责决定「该不该压」。
@@ -14787,6 +15002,22 @@ declare const EpochConfigSchema: z.ZodObject<{
         label: z.ZodString;
         icon: z.ZodOptional<z.ZodString>;
     }, z.core.$strip>>>;
+    trayMenuLeft: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        id: z.ZodString;
+        label: z.ZodString;
+        icon: z.ZodOptional<z.ZodString>;
+        activeLabel: z.ZodOptional<z.ZodString>;
+        activeIcon: z.ZodOptional<z.ZodString>;
+        closable: z.ZodOptional<z.ZodBoolean>;
+    }, z.core.$strip>>>;
+    trayMenuRight: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        id: z.ZodString;
+        label: z.ZodString;
+        icon: z.ZodOptional<z.ZodString>;
+        activeLabel: z.ZodOptional<z.ZodString>;
+        activeIcon: z.ZodOptional<z.ZodString>;
+        closable: z.ZodOptional<z.ZodBoolean>;
+    }, z.core.$strip>>>;
     blankCards: z.ZodOptional<z.ZodArray<z.ZodObject<{
         id: z.ZodString;
         title: z.ZodString;
@@ -15427,10 +15658,15 @@ declare function buildSchemaExports(): SchemaExport[];
  *
  * | 档 | 判据 | 今天几个 |
  * | --- | --- | --- |
- * | `scalar` | 顶层标量，或**一层** `段.字段`，且不是 {@link BLOCKED} 里那三个 | 37 |
- * | `manual` | 两层以上的路径，或数组 / 对象 | 40 |
+ * | `scalar` | 顶层标量，或**一层** `段.字段`，且不是 {@link BLOCKED} 里那三个 | 57 |
+ * | `manual` | 两层以上的路径，或数组 / 对象 | 23 |
  * | `blocked` | 「位置 / 身份」类的三个键 | 3 |
  *
+ * （合计 **83** 个叶子。这三个数 2026-11-03 对 `configKeyTable()` 当场重数过 ——
+ * 本注释上一版写的是 `37 / 40 / 3`，合计 80，而实际表里是 83；
+ * `docs/CLI.md` 与 `docs/CONFIGURATION.md` 那两份文档当时**是对的**，错的是这里。
+ * 改 schema 的叶子数时三处要一起改，`config-key-table.test.ts` 只守「表 ↔ schema 一致」。）
+ *
  * ### 为什么两层以上的路径不开放
  *
  * `setSectionField` 的就地改写只做一层（`infra/src/config-yaml.ts` 文件头那句
@@ -16629,6 +16865,18 @@ interface SessionMeta {
     workspaceRoot?: string;
     gitBranch?: string;
     gitRepoRoot?: string;
+    /**
+     * **建行那一刻生效的模型**（`AgentProvider.modelId`，如 `deepseek-flash`）。
+     *
+     * 口径是「开始时用的」，不是「最后用的」 —— 和 {@link source}「一段会话是被谁
+     * 开出来的，是它开始那一刻的事实」同一条规矩。`/model` 中途换过**不回写**：
+     * 「最后用的是什么」在每条 assistant 行的 `turnFacts.model` 上，那一份逐轮记。
+     *
+     * 空串 = **没记过**，不是「没有模型」。2026-11-03 之前本机新建的会话全是这一档
+     * （`ensure()` 那时根本没传这一格，只有 `importSession` 搬进来的那些有值）。
+     * 读侧要「不知道」就按真值判，导出那条路已经退回占位符
+     * （`session_manage.export_model_unknown`）。
+     */
     model: string;
     tags: string[];
     preview: string;
@@ -16839,6 +17087,15 @@ interface Message {
      * **只给 `getContext()` 截断上下文用**，不再汇总进 `SessionMeta` 的 token 列
      * （方案 42 PR-0：那五列改由 `recordUsage()` 记 provider 的真实用量，
      * 两个写入方往同一列累加就是双份记账）。
+     *
+     * ⚠️ **生产路径没有任何写入点，库里恒为 NULL**（2026-11-03 核实：本机 1676 行
+     * 全是 NULL）。`insertMessage` 照写 `msg.tokenCount ?? null`，而
+     * `SessionStore.record()` / `appendSteps()` 从来不传这一格 —— 只有用例塞过数。
+     * 所以 `getContext()` 事实上永远走它自己那条 `content.length / 3` 的兜底。
+     *
+     * 为什么不去接线：provider 只报**整轮**用量（`TokenUsage`），摊不到单条；
+     * 拿字符数估一个值写进名叫 `token_count` 的列，等于把估算冒充真值 ——
+     * 正是 v9 那次「0 = 免费」的反面教材。
      */
     tokenCount?: number;
     finishReason?: string;
@@ -19696,6 +19953,14 @@ interface RunningSchedule {
     startedAt: number;
     pid: number;
     host: string;
+    /**
+     * 有人请求终止这一次运行（2026-11-04）。`undefined` = 没请求过。
+     *
+     * ⚠️ **这是一个「请求」而不是「已停」** —— 执行器要等下一次事件循环才看得到。
+     * 界面拿它把「停止」那颗按钮换成「正在停止…」，而**不能**因此就把转子撤掉：
+     * 那一次真的还在跑。
+     */
+    cancelRequestedAt?: number;
 }
 /**
  * 抢一把锁。抢不到时把当前持有者一起回去 —— 记 `skipped-overlap` 那条运行记录
@@ -19721,6 +19986,35 @@ declare function acquireScheduleLock(db: SqliteDatabase, scheduleId: string, clo
  * @param clock 可注入的时钟，同 {@link acquireScheduleLock}
  */
 declare function listRunningSchedules(db: SqliteDatabase, clock?: () => number): RunningSchedule[];
+/**
+ * 「请这一次运行停下来」—— 往锁行上写一个时间戳（2026-11-04）。
+ *
+ * ## 返回 false 是什么意思
+ *
+ * **此刻没有活着的锁**：那一次已经跑完了，或者压根没在跑。调用方（控制面 /
+ * 端点）据此回 `no-active-run`，**不许假装成功** —— 界面上那颗按钮是按着
+ * 「我刚看到它在跑」按下去的，而它看到的是一枚过期的转子。
+ *
+ * ## 为什么先判活再写
+ *
+ * 锁行可能是上一次被 `kill -9` 留下的残骸（心跳早就停了）。那时写标记等于
+ * 给一条不存在的运行排队：下一次抢锁会把它盖掉（`acquireScheduleLock` 的
+ * `ON CONFLICT … cancel_requested_at = NULL`），但「写了却永远不会被处理」
+ * 本身仍然是一句假话。
+ *
+ * @param clock 可注入的时钟，用法同 {@link acquireScheduleLock}
+ */
+declare function requestScheduleCancel(db: SqliteDatabase, scheduleId: string, clock?: () => number): boolean;
+/**
+ * 执行器那一侧：有人请求取消吗。看到了就 `abort()`。
+ *
+ * 收尾时锁行被 `release()` 删掉，标记跟着一起消失，所以这里**没有对应的
+ * 「清除」函数** —— 写一处、删一处，中间没有第三种状态要维护。
+ *
+ * ⚠️ **调用方必须节流**（执行器那边是 1 秒一次）：事件流是逐 token 的，
+ * 每个 delta 都查一次库会让一小时的运行多出十几万次查询。
+ */
+declare function readCancelRequest(db: SqliteDatabase, scheduleId: string): number | undefined;
 
 /**
  * 触发器的校验、下一次触发时刻、以及生效区间（方案 45 §2.1）。
@@ -23354,4 +23648,4 @@ declare function resolveCodeModeWorker(baseDir: string, exists?: typeof existsSy
  */
 declare function codeModeWorkerPath(): string | undefined;
 
-export { ABOUT_DESC_MAX_CHARS, ABOUT_README_MAX_CHARS, AGENT_ROLE_DIAG_MODULE, ARTIFACT_MAX_TOTAL_BYTES, ARTIFACT_RETENTION_DEFAULTS, ATTACHMENT_MAX_TOTAL_BYTES, ATTACHMENT_RETENTION_DEFAULTS, type AcquireResult, type ActivePlugin, type AgentConfig, AgentInbox, AgentLoop, type AgentProvider, type AgentSite, type AgentSiteRef, AppearanceStore, type AppendMessageInput, ApprovalCache, type ApprovalDecision, type ArtifactOpenRefusal, type ArtifactRetention, type AskQuestionDeps, type AttachmentRetention, BLOCKED_TOOLS, BOARD_TOOL_NAMES, type BackendOptions, type BackendOutcome, type BackgroundTaskSource, type BaseOrigin, type BaseSlot, type BeginTurnInput, type BoardPending, BoardStore, type BoardTarget, type BreakdownInput, BudgetGuard, type BudgetGuardOptions, type BudgetInfo, type BudgetLevel, type BudgetOptions, type BudgetStatus, BudgetStore, type BudgetStoreOptions, type BuildFireArgvInput, type BuildIndexOptions, CHECKPOINT_MAX_TOTAL_BYTES, CLAUDE_EVENT_NAMES, CLAUDE_TOOL_NAMES, CODE_MODE_LIMITS, CODE_MODE_SDK_TAG, CONFIG_KEYS, CURRENT_CONFIG_VERSION, type CachedApproval, type CachedDecision, type CheckpointCapture, type CheckpointFile, CheckpointManager, type CheckpointManagerOptions, type CheckpointManifest, CheckpointStore, type CheckpointStoreOptions, type CheckpointSummary, type ClaudeHooksParseOptions, type CodeModeLimits, type CodeRequest, type CodeResult, CodeSandbox, type CommandHookConfig, type CommandHookResult, type CommandLoadOutcome, type CommandLoadSummary, type CommandResult, type CommandRunner, type CompactionResult, type CompiledRules, type ComplianceDirSpec, type ComplianceDirsSummary, ComplianceEngine, type ComplianceEngineInput, type ComplianceGate, type ComplianceHit, type ComplianceRule, type ComplianceRuleSource, type ComplianceSettings, type ComplianceVerdict, type CompressConfig, type CompressResult, type ConfigKeyEntry, type ConfigKeyKind, type ConfigKeyReason, type ConfigKeyWrite, type ConfigMigration, type ConfigOrigins, type ConfigValueCheck, type ConfigValueProblem, ContextCompressor, type ContextEngine, type CreateScheduleInput, type CreateSessionInput, DEFAULT_COMPLIANCE_ACTIONS, DEFAULT_COMPLIANCE_SETTINGS, DEFAULT_COMPRESSION_THRESHOLD, DEFAULT_GOAL_MAX_ROUNDS, DEFAULT_INBOX_CAPACITY, DEFAULT_MAX_HOLD_CHARS, DELEGATE_SESSION_SOURCE, type DelegateArgs, type DelegateConfig, DelegateManager, type DelegateTaskResult, type DeliveryResult, type DiagnoseOptions, type DiscoverOutcome, type DiscoveredFile, type DoctorReport, type DraftParse, EMPTY_RULES, EPOCH_DISK_LEDGER, type EntryProbeCode, type EntryProbeResult, EpochConfigSchema, type ExpandOptions, type ExtractOutcome, FTS_TABLES, FTS_TRIGGERS, type FallbackEvent, type FileSlots, type FileSourceKind, type ForkInput, type FrontmatterParse, type FrontmatterSplit, type FtsHealth, type FtsReclaim, type FtsSpace, type FtsTableHealth, GOAL_BLOCK_CODES, type GateAxis, type GateVerdict, type GenerateInput, type GenerateOutput, type Goal, type GoalBlockReason, type GoalClear, type GoalPhase, type GoalPromptView, type GoalRefusal, type GoalRoundResult, GoalService, GoalStore, type GoalToolDeps, type GoalWrite, HEADLESS_AUDIT_CODES, type HeadlessPolicy, type HookConfigEntry, HookManager, type HookManagerOptions, type HookMatcher, type HookSourceKind, type HookSourceStatus, type HookSourcesOptions, type HookSourcesSummary, type HooksParseOutcome, type MemoryManager$1 as IMemoryManager, INSTRUCTION_BUDGET_CHARS, INSTRUCTION_FILES, type SessionManager$1 as ISessionManager, type SkillSystem$1 as ISkillSystem, ImageLoadError, type ImageSize, type ImportDecision, type ImportGate, type ImportGoal, type ImportMessage, type ImportNode, type ImportPartsResult, type ImportSessionInput, type ImportSessionMeta, type ImportSessionResult, type ImportSkipReason, type ImportTodo, ImportTrustStore, type InstallDependency, type InstallOptions, type InstallOutcome, type InstallPreview, type InstallStep, type InstructionScan, type InstructionSource, type IsolationReason, type IsolationReport, type JsonSchemaDocument, LAUNCHD_LABEL_PREFIX, LOCK_HEARTBEAT_MS, LOCK_STALE_MS, type LastOpenSession, LastOpenSessions, type LayerOutcome, type LayerScalars, type LayerStatus, type LearningContext, type LearningResult, type LearningSkipReason, type LexiconLoadOutcome, type LifecycleOutcome, type ListCandidatesInput, type ListSessionsInput, type ListSessionsOutput, type LoadCommandsOptions, type LoadConfigOptions, type LoadKeybindingsOptions, type LoadKeybindingsResult, type LoadRolesOptions, type LoadedPlugin, type LockHolder, MARKETPLACE_DISPLAY_FIELDS, MARKETPLACE_FILE, MAX_AUDIT_ENTRIES, MAX_COMMAND_DEPTH, MAX_GOAL_MAX_ROUNDS, MAX_IMPORT_DEPTH, MAX_LAST_OPEN_SESSIONS, MAX_OBJECTIVE_CHARS, MAX_POST_CHARS, MAX_REASON_CHARS, MAX_RECENT_WORKSPACES, MODEL_ENTRIES_FILE, MODEL_GIVE_UP_THRESHOLD, MULTIMODAL_DEFAULTS, type ManagedPolicy, ManagedPolicyError, type ManagedSettings, ManagedSettingsSchema, type MarketplaceCatalog, type MarketplaceCategory, type MarketplaceDisplay, type MarketplaceDisplayField, type MarketplaceEntry, type MarketplaceOutcome, type MarketplaceRecord, type MarketplaceStatus, type MemoryConfig, type MemoryEntry, type MemoryImportRecord, type MemoryImportResult, MemoryManager, type MemoryManagerOptions, type MemoryNotice, type MemoryRemoval, type MemorySearchResult, type MemoryTarget, type MemoryWriteResult, type MentionPart, type MentionResolution, type Message, type MessageHit, type MessageRecord, type MessageSurface, type ModelCapability, ModelFailureTracker, type ModelMetaEntry, type ModelPricing, type MultimodalPolicy, NOMINAL_TOTAL_BYTES, NO_REVEALED_TOOLS, type NonInteractiveProbe, type OsTaskSnapshot, type OutputGuard, PACK_EXCLUDES, PERMISSION_AUDIT_CODES, PLUGIN_ICON_MAX_BYTES, PLUGIN_LAYOUT, PLUGIN_MANIFEST_FILE, PLUGIN_MANIFEST_KEYS, PLUGIN_NAME_PATTERN, PLUGIN_ROOT_ENV, PLUGIN_ROOT_TOKEN, PLUGIN_VISIBILITY, POLICY_DECISIONS, PROBE_VERSION, PROJECT_AGENTS_SUBDIR, PROVIDER_NO_CREDENTIAL, type PackFile, type PackLimits, type PackOutcome, type PackPlan, type PackPlanOutcome, type PermissionAuditCode, type PermissionAuditEntry, type PermissionAuditOutcome, type PermissionAuditScope, type PermissionAuditSnapshot, PermissionManager, type PersistFailureKind, type PersistedBudget, type PersistedPart, type PlanApprovalFn, type PlanEnterResult, type PlanModeDeps, PlanModeState, type PlanSettlement, type PluginAbout, type PluginArtifacts, type PluginAuthor, PluginAuthorSchema, type PluginCommandDir, type PluginCounts, type PluginDoc, type PluginHookFile, type PluginInventory, type PluginLoadOptions, type PluginManifest, type PluginPathRef, type PluginRecord, type PluginScope, type PluginSettingsFile, type PluginSourceType, type PluginStateReadOutcome, PluginStore, type PluginVisibility, type PolicyDirSpec, type PolicyDirsSummary, type PolicyLoadOutcome, type PolicyRule, PolicyRuleSchema, type PricingAt, type PricingOverride, type ProjectContext, type ProjectExtensionInventory, ProviderError, ProviderRouter, type ProviderStreamChunk, type ProviderToolCall$1 as ProviderToolCall, type ProviderWarning, type PruneResult, type QuestionAskFn, RECORDING_KEEP_RUNS, RECORDING_MAX_BYTES, ROLE_FRONTMATTER_SCHEMA, RUN_CODE_TOOL, type ReadMessagesInput, type ReadMessagesOutput, type RecentWorkspace, RecentWorkspaces, type RecordRunInput, type RecorderOptions, type RecoveryAction, type RegisterInput, type RegisterOutcome, type RegistrarOptions, type RegistrationPatch, type RepairOutcome, type ResolveMentionsOptions, type ResolveReferenceInput, type ResolveSettingsOptions, type ResolvedCompression, type ResolvedReference, type ResolvedSource, type ResponseFormat, type RestorePartsOptions, type RewindAction, type RewindDrift, type RewindFilePlan, type RewindOptions, type RewindOutcome, type RewindPreview, type RoleCreateFailure, type RoleCreateInput, type RoleCreateOptions, type RoleCreateOutcome, type RoleLoadOutcome, type RoleLoadSummary, type RoleMergeNotice, type RoleMergeResult, type RoleRemoveFailure, type RoleRemoveOptions, type RoleRemoveOutcome, type RoleScope, type RuleMatch, type RuleSuggestion, type RuleVerdict, type RunCodeFailure, type RunCodeInput, type RunCodeOutcome, type RunCodeToolDeps, type RunEstimateInput, type RunInput, type RunResult, type RunningSchedule, SANDBOX_COVERS, SANDBOX_EXCLUDES, SCALAR_KEYS, SCHEDULE_DEFAULTS, SCHEDULE_DEFAULT_ALLOWLIST, SCHEDULE_ISSUE_CODES, SCHTASKS_FOLDER, SEND_MESSAGE_TOOL, SESSION_MESSAGES_READ_TOOL, SESSION_MESSAGES_SEARCH_TOOL, SESSION_QUERY_TOOLS, SESSION_SEARCH_TOOL, SESSION_TRACE_TOOL, SETTINGS_LAYER_ORDER, SETTING_WRITE_KEYS, SETTING_WRITE_LAYERS, SKILL_ASSET_DIRS, SKILL_CREATE_TOOL, SKILL_EDIT_TOOL, SKILL_FILE, SKILL_PATCH_TOOL, SKILL_VIEW_TOOL, SKILL_WRITE_FILE_TOOL, SLASH_COMMANDS_DIAG_MODULE, type ScalarKey, type ScanInstructionsOptions, type ScheduleArgvRefusal, type ScheduleArgvResult, type ScheduleArgvWarning, type ScheduleBackend, type ScheduleCliEntry, type ScheduleDraftDeps, type ScheduleDrift, type ScheduleDriftKind, type ScheduleImportInput, type ScheduleInstallForm, type ScheduleIssue, type ScheduleIssueCode, type ScheduleLock, ScheduleRecorder, ScheduleRegistrar, ScheduleStore, type ScheduleValidation, type SchemaExport, type SearchHit, type SearchInput, type SearchMessagesInput, type SearchMessagesOutput, type SearchOutput, type SearchSessionsInput, type SelectionDeps, type SelfConnector, type SelfIndexInput, type SelfSettings, type Session, type SessionCandidate, type SessionHit, SessionManager, type SessionMentionDeps, type SessionMeta, SessionQueries, SessionReferences, type SessionSearchDeps, type SessionStats, type SessionSurface, type SessionTrace, type SessionVisibility, type SessionVisibilityInput, type SettingApply, type SettingApplyFacts, type SettingChain, type SettingFutile, type SettingLayer, type SettingStep, type SettingValue, type SettingValueKind, type SettingWriteFailure, type SettingWriteKey, type SettingWriteLayer, type SettingWriteOutcome, type SettingWriteRequest, type SettingWriteTarget, type SettingWriteTargetsOptions, type SettingsFile, SettingsFileError, SettingsFileSchema, type SettingsLayer, type SettingsResolution, type ShadowFinding, type ShadowKind, type Skill, type SkillDirSource, type SkillDirSpec, type SkillDirsSummary, type SkillImportConflict, type SkillImportDone, type SkillImportEntry, type SkillImportFailure, type SkillImportForm, type SkillImportOptions, type SkillImportPreview, type SkillImportResult, type SkillIndexEntry, type SkillIndexOptions, type SkillIndexResidency, type SkillIndexStats, SkillLearner, type SkillLearningProvider, type SkillMeta, type SkillStats, SkillSystem, type SkillSystemOptions, type SkillViewDeps, type SkillWriteDeps, type SteerSource, type StoredAppearance, type SubAgentRunner, type SubTask, type SubToolCaller, type SummarizeOutput, type SurfaceMessage, type SystemPromptParams, type SystemPromptSegments, TEAM_TOOL_NAMES, TOOL_SEARCH_TOOL, TaskNoticeTracker, TeamRegistry, type TodoItem, type ToggleOutcome, type ToolCall, type ToolConflict, type ToolGate, type ToolNameFidelity, type ToolNameLookup, ToolRegistry, type ToolRevealState, type ToolScope, type ToolSearchDeps, type ToolTableCost, type TraceInput, type TraceNode, TrackerDB, type TrustDecision, type TrustGate, type TrustGateOptions, TrustManager, type TurnRecord, type TurnTiming, UNSETTABLE_USER_KEYS, type UpdateScheduleInput, type UtilityModelInfo, type ValidateScheduleInput, type VersionCheck, Workspace, type WorkspaceFiles, type WorkspaceIssue, type WorkspaceIssueKind, acquireScheduleLock, addMarketplace, addUsage, admitArtifact, admitArtifacts, affectedPaths, approvalEntryFor, approvalRootFor, artifactLaunchArgv, artifactOpenRefusal, assertLevelAllowed, blockedRoleTools, buildContextBreakdown, buildFireArgv, buildFtsMatchQuery, buildSchemaExports, buildSystemPrompt, buildTrigramMatchQuery, builtinRoles, capabilityOfRef, checkConfigValue, checkEpochVersion, checkFtsHealth, checkShadowing, classifyPersistFailure, classifyProviderError, clearModelCache, coalesceRecording, codeModeWorkerPath, commandNameFromRelPath, compileRuleLists, compressionOptions, computeCost, computeCostMicros, computeExecHash, configKeyByPath, configKeyTable, countRules, createAllowAllGate, createAllowAllImportGate, createAskQuestionTool, createBoardTools, createCodeExecTool, createDelegateTool, createDenyAllGate, createDenyAllImportGate, createGoalTool, createImportGate, createMemoryTool, createPlanModeTools, createPluginScope, createRoleFile, createRoleScope, createRunCodeTool, createScheduleDraftTool, createSendMessageTool, createSessionMessagesReadTool, createSessionMessagesSearchTool, createSessionSearchTool, createSessionSearchTools, createSessionTraceTool, createSkillViewTool, createSkillWriteTools, createTeamTools, createTodoTool, createToolRevealState, createToolScope, createToolSearchTool, createTrustGate, currentEpochVersion, decideImport, decideTrust, defaultConfig, describeArtifactRefusal, describeBackgroundTask, describeHeadlessPolicy, describeIsolation, describeJsonError, diagnoseSchedules, discoverMarkdown, discoverModels, discoverProject, discoverySpec, displayAllows, displayCurrency, draftCommandLine, draftWidening, escapeRuleContent, estimateImageTokens, estimateRunTokens, estimateTokens, evaluateSelection, expandCommand, expandImports, explainSetting, extractArchive, findInstructionFiles, findProjectInstructions, findRole, formatBytes, formatSkillIndex, formatUsd, gateForTool, getCapability, getConfigIssues, getConfigOrigins, getImportGate, getTrustGate, grantedPathsFor, hasDedicatedExecContent, hasExecTierContent, hasPromptCaching, hasProviderCredentials, hasReadTierContent, hasUsableModel, imageFromBase64, imageFromPath, imagePartTokens, importParts, importSkills, installPlugin, instructionDirs, instructionNotices, intervalSlots, inventoryProjectExtensions, inventoryTotal, isBlockCode, isCodeModeDeferred, isEmptyRules, isGoalPhase, isNonInteractive, isReadOnlySubCall, isSettingWriteLayer, isTransientPersistFailure, isValidInterval, isValidPluginName, isWithinWindow, isWritableSettingKey, labelSlug, layerRank, listEntryModels, listRunningSchedules, listSessionCandidates, listWorkspaceFiles, loadCommandDefinitions, loadCommandFile, loadCommands, loadConfig, loadHookSources, loadKeybindings, loadLexiconDir, loadLexiconFiles, loadModelEntries, loadPlugins, loadPolicyFiles, loadPolicyRules, loadRoleDefinitions, loadRoleDir, loadedImports, localDateString, managedSwitchNotes, mapClaudeToolName, mapEpochToolName, mapOperationType, matchPreauthorization, matchRuleLists, matchesHook, mentionsPluginRoot, mergeHeadlessPolicy, mergeRoles, mergeSchedulePatch, microsToUsd, modelEntriesPath, modelListCandidates, needsAllowlist, nextRunAt, noConfigOrigins, noManagedPolicy, noPlugins, normalizeModelEntry, normalizeTrigger, offloadOldestImages, openArtifact, originOf, packFileName, packPlugin, parseClaudeSettingsHooks, parseClock, parseDate, parseFrontmatter, parseHooksConfig, parseHooksConfigVerbose, parseImportLine, parseModelEntry, parseModelList, parseRoleDefinition, parseScheduleDraft, parseSkillFrontmatter, parseTrigger, pendingImageTokens, persistFailureCode, persistParts, persistToolResults, persistedUsage, planPack, previewSkillImport, pricingFor, projectEntryForDisplay, pruneArtifacts, pruneAttachments, pruneRecordings, pruneSchedules, readEntryKey, readImageSize, readMarketplaces, readPluginAbout, readPluginIcon, readPluginManifest, readPluginRecords, readRecording, readSessionSurface, reclaimFtsSpace, redactLine, refreshOpenRouterMetadata, removeMarketplace, removeRecordings, removeRoleFile, removeSessionArtifacts, removeSessionAttachments, renderImportTree, renderProjectContext, renderSdkDeclaration, renderSelfIndex, repairSchedules, requestImageBytes, resolveArtifactRetention, resolveCodeModeWorker, resolveComplianceDirs, resolveEntrySource, resolveInWorkspace, resolveMarketplaceRef, resolveMentions, resolveMultimodalPolicy, resolvePolicyDirs, resolvePricingAt, resolveProjectRoot, resolveScheduleBackend, resolveSessionReference, resolveSessionVisibility, resolveSettings, resolveSkillDirs, resolveSource, resolveTar, resolveWorkspace, restoreParts, revealScopedProvider, roleScopedProvider, roleSourceLabel, ruleCovers, ruleFromString, ruleToString, runCode, runCommand, sanitizeArgNames, sanitizeCommand, sanitizeFtsQuery, sanitizePath, sanitizeToolOutput, saveModelEntries, scanInstructions, scanPluginDir, scanSkillDirs, searchMarketplaces, setDisplayCurrency, setImportGate, setPluginEnabled, setTrustGate, settingValueChoices, settingValueKind, settingWriteApply, settingWriteLayers, settingWriteTargets, skillIndexDescription, skillIndexResidency, skillIndexStats, sniffMediaType, splitFrontmatter, staticToolProvider, stripArtifactData, substitutePluginRoot, suggestRuleFromApproval, systemOpenArgv, systemPromptSegments, testModelEntry, toPosix, toolDefinitionTokens, toolMatches, toolTableTokens, totalTokens, traceSession, triggerPeriodMs, unescapeRuleContent, uninstallPlugin, unknownRoleSkills, unknownRoleTools, unloadedInstructionFiles, unsetUserSetting, updateMarketplace, updatePlugin, usdToMicros, validateSchedule, validateTrigger, validateWindow, withGoalCompression, withGoalPrompt, workspaceDisplayPath, writableConfigKeys, writeSettingValue };
+export { ABOUT_DESC_MAX_CHARS, ABOUT_README_MAX_CHARS, AGENT_ROLE_DIAG_MODULE, ARTIFACT_MAX_TOTAL_BYTES, ARTIFACT_RETENTION_DEFAULTS, ATTACHMENT_MAX_TOTAL_BYTES, ATTACHMENT_RETENTION_DEFAULTS, type AcquireResult, type ActivePlugin, type AgentConfig, AgentInbox, AgentLoop, type AgentProvider, type AgentSite, type AgentSiteRef, AppearanceStore, type AppendMessageInput, ApprovalCache, type ApprovalDecision, type ArtifactOpenRefusal, type ArtifactRetention, type AskQuestionDeps, type AttachmentRetention, BLOCKED_TOOLS, BOARD_TOOL_NAMES, type BackendOptions, type BackendOutcome, type BackgroundTaskSource, type BaseOrigin, type BaseSlot, type BeginTurnInput, type BoardPending, BoardStore, type BoardTarget, type BreakdownInput, BudgetGuard, type BudgetGuardOptions, type BudgetInfo, type BudgetLevel, type BudgetOptions, type BudgetStatus, BudgetStore, type BudgetStoreOptions, type BuildFireArgvInput, type BuildIndexOptions, CHECKPOINT_MAX_TOTAL_BYTES, CLAUDE_EVENT_NAMES, CLAUDE_TOOL_NAMES, CODE_MODE_LIMITS, CODE_MODE_SDK_TAG, CONFIG_KEYS, CURRENT_CONFIG_VERSION, type CachedApproval, type CachedDecision, type CheckpointCapture, type CheckpointFile, CheckpointManager, type CheckpointManagerOptions, type CheckpointManifest, CheckpointStore, type CheckpointStoreOptions, type CheckpointSummary, type ClaudeHooksParseOptions, type CodeModeLimits, type CodeRequest, type CodeResult, CodeSandbox, type CommandHookConfig, type CommandHookResult, type CommandLoadOutcome, type CommandLoadSummary, type CommandResult, type CommandRunner, type CompactionResult, type CompiledRules, type ComplianceDirSpec, type ComplianceDirsSummary, ComplianceEngine, type ComplianceEngineInput, type ComplianceGate, type ComplianceHit, type ComplianceRule, type ComplianceRuleSource, type ComplianceSettings, type ComplianceVerdict, type CompressConfig, type CompressResult, type ConfigKeyEntry, type ConfigKeyKind, type ConfigKeyReason, type ConfigKeyWrite, type ConfigMigration, type ConfigOrigins, type ConfigValueCheck, type ConfigValueProblem, ContextCompressor, type ContextEngine, type CreateScheduleInput, type CreateSessionInput, DEFAULT_COMPLIANCE_ACTIONS, DEFAULT_COMPLIANCE_SETTINGS, DEFAULT_COMPRESSION_THRESHOLD, DEFAULT_GOAL_MAX_ROUNDS, DEFAULT_INBOX_CAPACITY, DEFAULT_MAX_HOLD_CHARS, DEFAULT_MAX_RUNNING_MEMBERS, DEFAULT_MAX_WOKEN_SESSIONS, DELEGATE_SESSION_SOURCE, type DelegateArgs, type DelegateConfig, DelegateManager, type DelegateTaskResult, type DeliveryResult, type DiagnoseOptions, type DiscoverOutcome, type DiscoveredFile, type DoctorReport, type DraftParse, EMPTY_RULES, EPOCH_DISK_LEDGER, type EntryProbeCode, type EntryProbeResult, EpochConfigSchema, type ExpandOptions, type ExtractOutcome, FTS_TABLES, FTS_TRIGGERS, type FallbackEvent, type FileSlots, type FileSourceKind, type ForkInput, type FrontmatterParse, type FrontmatterSplit, type FtsHealth, type FtsReclaim, type FtsSpace, type FtsTableHealth, GOAL_BLOCK_CODES, type GateAxis, type GateVerdict, type GenerateInput, type GenerateOutput, type Goal, type GoalBlockReason, type GoalClear, type GoalPhase, type GoalPromptView, type GoalRefusal, type GoalRoundResult, GoalService, GoalStore, type GoalToolDeps, type GoalWrite, HEADLESS_AUDIT_CODES, type HeadlessPolicy, type HookConfigEntry, HookManager, type HookManagerOptions, type HookMatcher, type HookSourceKind, type HookSourceStatus, type HookSourcesOptions, type HookSourcesSummary, type HooksParseOutcome, type MemoryManager$1 as IMemoryManager, INSTRUCTION_BUDGET_CHARS, INSTRUCTION_FILES, type SessionManager$1 as ISessionManager, type SkillSystem$1 as ISkillSystem, ImageLoadError, type ImageSize, type ImportDecision, type ImportGate, type ImportGoal, type ImportMessage, type ImportNode, type ImportPartsResult, type ImportSessionInput, type ImportSessionMeta, type ImportSessionResult, type ImportSkipReason, type ImportTodo, ImportTrustStore, type InstallDependency, type InstallOptions, type InstallOutcome, type InstallPreview, type InstallStep, type InstructionScan, type InstructionSource, type IsolationReason, type IsolationReport, type JsonSchemaDocument, LAUNCHD_LABEL_PREFIX, LOCK_HEARTBEAT_MS, LOCK_STALE_MS, type LastOpenSession, LastOpenSessions, type LayerOutcome, type LayerScalars, type LayerStatus, type LearningContext, type LearningResult, type LearningSkipReason, type LexiconLoadOutcome, type LifecycleOutcome, type ListCandidatesInput, type ListSessionsInput, type ListSessionsOutput, type LoadCommandsOptions, type LoadConfigOptions, type LoadKeybindingsOptions, type LoadKeybindingsResult, type LoadRolesOptions, type LoadedPlugin, type LockHolder, MARKETPLACE_DISPLAY_FIELDS, MARKETPLACE_FILE, MAX_AUDIT_ENTRIES, MAX_COMMAND_DEPTH, MAX_GOAL_MAX_ROUNDS, MAX_IMPORT_DEPTH, MAX_LAST_OPEN_SESSIONS, MAX_OBJECTIVE_CHARS, MAX_POST_CHARS, MAX_REASON_CHARS, MAX_RECENT_WORKSPACES, MODEL_ENTRIES_FILE, MODEL_GIVE_UP_THRESHOLD, MULTIMODAL_DEFAULTS, type ManagedPolicy, ManagedPolicyError, type ManagedSettings, ManagedSettingsSchema, type MarketplaceCatalog, type MarketplaceCategory, type MarketplaceDisplay, type MarketplaceDisplayField, type MarketplaceEntry, type MarketplaceOutcome, type MarketplaceRecord, type MarketplaceStatus, type MemoryConfig, type MemoryEntry, type MemoryImportRecord, type MemoryImportResult, MemoryManager, type MemoryManagerOptions, type MemoryNotice, type MemoryRemoval, type MemorySearchResult, type MemoryTarget, type MemoryWriteResult, type MentionPart, type MentionResolution, type Message, type MessageHit, type MessageRecord, type MessageSurface, type ModelCapability, ModelFailureTracker, type ModelMetaEntry, type ModelPricing, type MultimodalPolicy, NOMINAL_TOTAL_BYTES, NO_REVEALED_TOOLS, type NonInteractiveProbe, type OsTaskSnapshot, type OutputGuard, PACK_EXCLUDES, PERMISSION_AUDIT_CODES, PLUGIN_ICON_MAX_BYTES, PLUGIN_LAYOUT, PLUGIN_MANIFEST_FILE, PLUGIN_MANIFEST_KEYS, PLUGIN_NAME_PATTERN, PLUGIN_ROOT_ENV, PLUGIN_ROOT_TOKEN, PLUGIN_VISIBILITY, POLICY_DECISIONS, PROBE_VERSION, PROJECT_AGENTS_SUBDIR, PROVIDER_NO_CREDENTIAL, type PackFile, type PackLimits, type PackOutcome, type PackPlan, type PackPlanOutcome, type PermissionAuditCode, type PermissionAuditEntry, type PermissionAuditOutcome, type PermissionAuditScope, type PermissionAuditSnapshot, PermissionManager, type PersistFailureKind, type PersistedBudget, type PersistedPart, type PlanApprovalFn, type PlanEnterResult, type PlanModeDeps, PlanModeState, type PlanSettlement, type PluginAbout, type PluginArtifacts, type PluginAuthor, PluginAuthorSchema, type PluginCommandDir, type PluginCounts, type PluginDoc, type PluginHookFile, type PluginInventory, type PluginLoadOptions, type PluginManifest, type PluginPathRef, type PluginRecord, type PluginScope, type PluginSettingsFile, type PluginSourceType, type PluginStateReadOutcome, PluginStore, type PluginVisibility, type PolicyDirSpec, type PolicyDirsSummary, type PolicyLoadOutcome, type PolicyRule, PolicyRuleSchema, type PricingAt, type PricingOverride, type ProjectContext, type ProjectExtensionInventory, ProviderError, ProviderRouter, type ProviderStreamChunk, type ProviderToolCall$1 as ProviderToolCall, type ProviderWarning, type PruneResult, type QuestionAskFn, RECORDING_KEEP_RUNS, RECORDING_MAX_BYTES, ROLE_FRONTMATTER_SCHEMA, RUN_CODE_TOOL, type ReadMessagesInput, type ReadMessagesOutput, type RecentWorkspace, RecentWorkspaces, type RecordRunInput, type RecorderOptions, type RecoveryAction, type RegisterInput, type RegisterOutcome, type RegistrarOptions, type RegistrationPatch, type RepairOutcome, type ResolveMentionsOptions, type ResolveReferenceInput, type ResolveSettingsOptions, type ResolvedCompression, type ResolvedReference, type ResolvedSource, type ResponseFormat, type RestorePartsOptions, type RewindAction, type RewindDrift, type RewindFilePlan, type RewindOptions, type RewindOutcome, type RewindPreview, type RoleCreateFailure, type RoleCreateInput, type RoleCreateOptions, type RoleCreateOutcome, type RoleLoadOutcome, type RoleLoadSummary, type RoleMergeNotice, type RoleMergeResult, type RoleRemoveFailure, type RoleRemoveOptions, type RoleRemoveOutcome, type RoleScope, type RuleMatch, type RuleSuggestion, type RuleVerdict, type RunCodeFailure, type RunCodeInput, type RunCodeOutcome, type RunCodeToolDeps, type RunEstimateInput, type RunInput, type RunResult, type RunningSchedule, SANDBOX_COVERS, SANDBOX_EXCLUDES, SCALAR_KEYS, SCHEDULE_DEFAULTS, SCHEDULE_DEFAULT_ALLOWLIST, SCHEDULE_ISSUE_CODES, SCHTASKS_FOLDER, SEND_MESSAGE_TOOL, SESSION_MESSAGES_READ_TOOL, SESSION_MESSAGES_SEARCH_TOOL, SESSION_QUERY_TOOLS, SESSION_SEARCH_TOOL, SESSION_TRACE_TOOL, SETTINGS_LAYER_ORDER, SETTING_WRITE_KEYS, SETTING_WRITE_LAYERS, SKILL_ASSET_DIRS, SKILL_CREATE_TOOL, SKILL_EDIT_TOOL, SKILL_FILE, SKILL_PATCH_TOOL, SKILL_VIEW_TOOL, SKILL_WRITE_FILE_TOOL, SLASH_COMMANDS_DIAG_MODULE, type ScalarKey, type ScanInstructionsOptions, type ScheduleArgvRefusal, type ScheduleArgvResult, type ScheduleArgvWarning, type ScheduleBackend, type ScheduleCliEntry, type ScheduleDraftDeps, type ScheduleDrift, type ScheduleDriftKind, type ScheduleImportInput, type ScheduleInstallForm, type ScheduleIssue, type ScheduleIssueCode, type ScheduleLock, ScheduleRecorder, ScheduleRegistrar, ScheduleStore, type ScheduleValidation, type SchemaExport, type SearchHit, type SearchInput, type SearchMessagesInput, type SearchMessagesOutput, type SearchOutput, type SearchSessionsInput, type SelectionDeps, type SelfConnector, type SelfIndexInput, type SelfSettings, type Session, type SessionBridge, type SessionCandidate, type SessionHit, SessionManager, type SessionMentionDeps, type SessionMeta, SessionQueries, SessionReferences, type SessionSearchDeps, type SessionStats, type SessionSurface, type SessionTrace, type SessionVisibility, type SessionVisibilityInput, type SettingApply, type SettingApplyFacts, type SettingChain, type SettingFutile, type SettingLayer, type SettingStep, type SettingValue, type SettingValueKind, type SettingWriteFailure, type SettingWriteKey, type SettingWriteLayer, type SettingWriteOutcome, type SettingWriteRequest, type SettingWriteTarget, type SettingWriteTargetsOptions, type SettingsFile, SettingsFileError, SettingsFileSchema, type SettingsLayer, type SettingsResolution, type ShadowFinding, type ShadowKind, type Skill, type SkillDirSource, type SkillDirSpec, type SkillDirsSummary, type SkillImportConflict, type SkillImportDone, type SkillImportEntry, type SkillImportFailure, type SkillImportForm, type SkillImportOptions, type SkillImportPreview, type SkillImportResult, type SkillIndexEntry, type SkillIndexOptions, type SkillIndexResidency, type SkillIndexStats, SkillLearner, type SkillLearningProvider, type SkillMeta, type SkillStats, SkillSystem, type SkillSystemOptions, type SkillViewDeps, type SkillWriteDeps, type SteerSource, type StoredAppearance, type SubAgentRunner, type SubTask, type SubToolCaller, type SummarizeOutput, type SurfaceMessage, type SystemPromptParams, type SystemPromptSegments, TEAM_TOOL_NAMES, TOOL_SEARCH_TOOL, TaskNoticeTracker, type TeamLimits, TeamRegistry, type TodoItem, type ToggleOutcome, type ToolCall, type ToolConflict, type ToolGate, type ToolNameFidelity, type ToolNameLookup, ToolRegistry, type ToolRevealState, type ToolScope, type ToolSearchDeps, type ToolTableCost, type TraceInput, type TraceNode, TrackerDB, type TrustDecision, type TrustGate, type TrustGateOptions, TrustManager, type TurnRecord, type TurnTiming, UNSETTABLE_USER_KEYS, type UpdateScheduleInput, type UtilityModelInfo, type ValidateScheduleInput, type VersionCheck, Workspace, type WorkspaceFiles, type WorkspaceIssue, type WorkspaceIssueKind, acquireScheduleLock, addMarketplace, addUsage, admitArtifact, admitArtifacts, affectedPaths, approvalEntryFor, approvalRootFor, artifactLaunchArgv, artifactOpenRefusal, assertLevelAllowed, blockedRoleTools, buildContextBreakdown, buildFireArgv, buildFtsMatchQuery, buildSchemaExports, buildSystemPrompt, buildTrigramMatchQuery, builtinRoles, capabilityOfRef, checkConfigValue, checkEpochVersion, checkFtsHealth, checkShadowing, classifyPersistFailure, classifyProviderError, clearModelCache, coalesceRecording, codeModeWorkerPath, commandNameFromRelPath, compileRuleLists, compressionOptions, computeCost, computeCostMicros, computeExecHash, configKeyByPath, configKeyTable, countRules, createAllowAllGate, createAllowAllImportGate, createAskQuestionTool, createBoardTools, createCodeExecTool, createDelegateTool, createDenyAllGate, createDenyAllImportGate, createGoalTool, createImportGate, createMemoryTool, createPlanModeTools, createPluginScope, createRoleFile, createRoleScope, createRunCodeTool, createScheduleDraftTool, createSendMessageTool, createSessionMessagesReadTool, createSessionMessagesSearchTool, createSessionSearchTool, createSessionSearchTools, createSessionTraceTool, createSkillViewTool, createSkillWriteTools, createTeamTools, createTodoTool, createToolRevealState, createToolScope, createToolSearchTool, createTrustGate, currentEpochVersion, decideImport, decideTrust, defaultConfig, describeArtifactRefusal, describeBackgroundTask, describeHeadlessPolicy, describeIsolation, describeJsonError, diagnoseSchedules, discoverMarkdown, discoverModels, discoverProject, discoverySpec, displayAllows, displayCurrency, draftCommandLine, draftWidening, escapeRuleContent, estimateImageTokens, estimateRunTokens, estimateTokens, evaluateSelection, expandCommand, expandImports, explainSetting, extractArchive, findInstructionFiles, findProjectInstructions, findRole, formatBytes, formatSkillIndex, formatUsd, gateForTool, getCapability, getConfigIssues, getConfigOrigins, getImportGate, getTrustGate, grantedPathsFor, hasDedicatedExecContent, hasExecTierContent, hasPromptCaching, hasProviderCredentials, hasReadTierContent, hasUsableModel, imageFromBase64, imageFromPath, imagePartTokens, importParts, importSkills, installPlugin, instructionDirs, instructionNotices, intervalSlots, inventoryProjectExtensions, inventoryTotal, isBlockCode, isCodeModeDeferred, isEmptyRules, isGoalPhase, isNonInteractive, isReadOnlySubCall, isSettingWriteLayer, isTransientPersistFailure, isValidInterval, isValidPluginName, isWithinWindow, isWritableSettingKey, labelSlug, layerRank, listEntryModels, listRunningSchedules, listSessionCandidates, listWorkspaceFiles, loadCommandDefinitions, loadCommandFile, loadCommands, loadConfig, loadHookSources, loadKeybindings, loadLexiconDir, loadLexiconFiles, loadModelEntries, loadPlugins, loadPolicyFiles, loadPolicyRules, loadRoleDefinitions, loadRoleDir, loadedImports, localDateString, managedSwitchNotes, mapClaudeToolName, mapEpochToolName, mapOperationType, matchPreauthorization, matchRuleLists, matchesHook, mentionsPluginRoot, mergeHeadlessPolicy, mergeRoles, mergeSchedulePatch, microsToUsd, modelEntriesPath, modelListCandidates, needsAllowlist, nextRunAt, noConfigOrigins, noManagedPolicy, noPlugins, normalizeModelEntry, normalizeTrigger, offloadOldestImages, openArtifact, originOf, packFileName, packPlugin, parseClaudeSettingsHooks, parseClock, parseDate, parseFrontmatter, parseHooksConfig, parseHooksConfigVerbose, parseImportLine, parseModelEntry, parseModelList, parseRoleDefinition, parseScheduleDraft, parseSkillFrontmatter, parseTrigger, pendingImageTokens, persistFailureCode, persistParts, persistToolResults, persistedUsage, planPack, previewSkillImport, pricingFor, projectEntryForDisplay, pruneArtifacts, pruneAttachments, pruneRecordings, pruneSchedules, readCancelRequest, readEntryKey, readImageSize, readMarketplaces, readPluginAbout, readPluginIcon, readPluginManifest, readPluginRecords, readRecording, readSessionSurface, reclaimFtsSpace, redactLine, refreshOpenRouterMetadata, removeMarketplace, removeRecordings, removeRoleFile, removeSessionArtifacts, removeSessionAttachments, renderImportTree, renderProjectContext, renderSdkDeclaration, renderSelfIndex, repairSchedules, requestImageBytes, requestScheduleCancel, resolveArtifactRetention, resolveCodeModeWorker, resolveComplianceDirs, resolveEntrySource, resolveInWorkspace, resolveMarketplaceRef, resolveMentions, resolveMultimodalPolicy, resolvePolicyDirs, resolvePricingAt, resolveProjectRoot, resolveScheduleBackend, resolveSessionReference, resolveSessionVisibility, resolveSettings, resolveSkillDirs, resolveSource, resolveTar, resolveWorkspace, restoreParts, revealScopedProvider, roleScopedProvider, roleSourceLabel, ruleCovers, ruleFromString, ruleToString, runCode, runCommand, sanitizeArgNames, sanitizeCommand, sanitizeFtsQuery, sanitizePath, sanitizeToolOutput, saveModelEntries, scanInstructions, scanPluginDir, scanSkillDirs, searchMarketplaces, setDisplayCurrency, setImportGate, setPluginEnabled, setTrustGate, settingValueChoices, settingValueKind, settingWriteApply, settingWriteLayers, settingWriteTargets, skillIndexDescription, skillIndexResidency, skillIndexStats, sniffMediaType, splitFrontmatter, staticToolProvider, stripArtifactData, substitutePluginRoot, suggestRuleFromApproval, systemOpenArgv, systemPromptSegments, testModelEntry, toPosix, toolDefinitionTokens, toolMatches, toolTableTokens, totalTokens, traceSession, triggerPeriodMs, unescapeRuleContent, uninstallPlugin, unknownRoleSkills, unknownRoleTools, unloadedInstructionFiles, unsetUserSetting, updateMarketplace, updatePlugin, usdToMicros, validateSchedule, validateTrigger, validateWindow, withGoalCompression, withGoalPrompt, workspaceDisplayPath, writableConfigKeys, writeSettingValue };