@epoch-agent/infra 0.2.0 → 0.3.2

package/dist/index.d.ts

@@ -41,6 +41,14 @@ declare function memoriesDir(homeDir?: string): string;
  */
 declare function skillsDir(homeDir?: string): string;
 declare function policiesDir(homeDir?: string): string;
+/**
+ * 用户级合规词库目录（`~/.epoch/compliance/<类别>.txt`）。
+ *
+ * 一行一个词的纯文本，文件名就是类别名 —— 格式和「文件名为什么是类别名」的
+ * 判据在 `core/compliance/loader.ts` 的文件头。**只读**：这个目录里的东西
+ * 由部署方维护，引擎从不往里写。
+ */
+declare function complianceDir(homeDir?: string): string;
 /**
  * 用户级 hook 配置（方案 23 §2.6）。`~/.epoch/hooks.json`。
  *
@@ -234,7 +242,8 @@ declare function projectCommandsDir(projectRoot: string): string;
  * 项目级技能目录（方案 23 §2.5）。同名时压过用户级那份，且**要过信任闸门**。
  *
  * 与命令目录的区别只有一个：技能是**只读**的。写操作（`SkillLearner` 的自动
- * 创建、`skill_manager` 工具的编辑）永远落在 `skillsDir()`，不碰用户的仓库。
+ * 创建、模型那四个写工具 —— `skill_create` / `skill_edit` / `skill_patch` /
+ * `skill_write_file` —— 的编辑）永远落在 `skillsDir()`，不碰用户的仓库。
  */
 declare function projectSkillsDir(projectRoot: string): string;
 /**
@@ -253,6 +262,14 @@ declare function projectHooksPath(projectRoot: string): string;
  * 「哪些操作不用问就放行」。判定在 `core/policy/sources.ts`。
  */
 declare function projectPoliciesDir(projectRoot: string): string;
+/**
+ * 项目级合规词库目录。`<项目根>/.epoch/compliance/*.txt`。
+ *
+ * 和项目级 hook 同一档闸门（未信任一律不加载），但**理由和策略规则相反**：
+ * 一份词库里的 `exempt.txt` 有能力把内置规则一条条豁免掉，也就是说它
+ * **能放松**合规，而不只是「多拦几个词」。判定在 `core/compliance/sources.ts`。
+ */
+declare function projectComplianceDir(projectRoot: string): string;
 /**
  * Claude Code 的配置目录名。**不是我们的目录**，我们只读、从不写
  * （方案 50 §七：往别人的配置文件里写东西是越界）。
@@ -341,6 +358,12 @@ declare function setScalar(yaml: string, key: string, value: string): string;
  * 就地设置 `<section>:` 段下的一个字段。
  *
  * 段不存在就在文件末尾追加一个新段；段内已有该字段就替换，否则插在段首。
+ *
+ * ⚠️ **空输入不留那个前导空行**（2026-08-31 补的）。`epoch config set` 走
+ * {@link readConfigYaml}，文件不存在时拿到的是 {@link DEFAULT_YAML}，所以它这条路
+ * 上永远看不见空串；而 core 的设置页写那一支**看得见** —— 它读的是真文件，
+ * 不存在就是 `''`。少这一句的表现是新建出来的 `config.yaml` 头上多一个空行，
+ * 而 {@link setScalar} 那一支（`text.length === 0 ? …`）早就防着这件事了。
  */
 declare function setSectionField(yaml: string, section: string, field: string, value: string): string;
 /**
@@ -835,17 +858,31 @@ interface StreamDecoder {
 declare function createStreamDecoder(fallbackEncoding?: string): StreamDecoder;
 
 /**
- * ripgrep 的三级解析（方案 24）—— 回答「`rg` 从哪来」这一个问题。
+ * ripgrep 的解析（方案 24）—— 回答「`rg` 从哪来」这一个问题。
  *
  *   1. `system`  —— PATH 里有 `rg` 就用它。用户自己装的通常比我们内置的新
  *   2. `builtin` —— 用 `@epoch-agent/vendor-ripgrep-<platform>-<arch>` 里带的那个
- *   3. `missing` —— 两个都没有。**保持内置之前的行为**：启动诊断一条 warn，
- *      `file_search` 仍然注册，调用时报错并给安装提示
+ *   3. `not-executable` —— **包装下来了、文件也在，只是它没有执行位而我们补不上**
+ *   4. `missing` —— 上面都不成立
  *
- * 第 3 级不是兜底摆设，是真的会走到：`npm install --ignore-scripts`、
+ * 第 3/4 级不是兜底摆设，是真的会走到：`npm install --ignore-scripts`、
  * 内网私服重打包、以及我们没出包的平台（Linux 现阶段就是）。那种情况下退回旧行为
  * 比崩掉好得多 —— 少一个工具，不是起不来。
  *
+ * ## ⚠️ 第 3 档 2026-09-01 才从 `missing` 里拆出来，判据在这儿
+ *
+ * 拆之前这两档合成一句话：「未安装，file_search 不可用（brew install ripgrep）」。
+ * 那句话在「装了但没有执行位」这一档上是**假的**，而且它给的出路是错的 ——
+ * 让用户再装一个 ripgrep，而真正要做的是一条 `chmod`。
+ *
+ * 这不是理论上的：用户 2026-09-01 报的就是它。`npm i -g @epoch-agent/cli` 之后
+ * vendor 包**装下来了**（实测），但 tarball 里那个二进制是 644（见下面
+ * `ensureExecutable`），而 `sudo npm i -g` 装出来的 node_modules 归 root ——
+ * 以自己身份跑的 `epoch` chmod 不动它，于是屏幕上说「未安装」。
+ *
+ * 分档之后 `command` 那一格**两档仍然一样**（都是 `'rg'`，不返回那个注定 EACCES
+ * 的路径）—— 变的只有「屏幕上说什么」。判据见 {@link RipgrepResolution.command}。
+ *
  * 放 infra 而不是 plugin-file：将来 `file_list`（`rg --files`）和 `@` 文件补全
  * 都要用它，而 plugin 之间不许互相依赖。
  *
@@ -854,8 +891,15 @@ declare function createStreamDecoder(fallbackEncoding?: string): StreamDecoder;
  * `system` 给的是**命令名 `'rg'`**，`builtin` 给的是**绝对路径**。这不是疏漏，
  * 两边是刻意不对称的，改之前先读下面两段。
  */
-/** 解析结果的三档。`missing` 也是一种正常结果，不是错误 */
-type RipgrepMode = 'system' | 'builtin' | 'missing';
+/**
+ * 解析结果的四档。`not-executable` / `missing` 也是正常结果，不是错误。
+ *
+ * ⚠️ **`not-executable` 是 2026-09-01 加的第四档**，加它是因为它和 `missing`
+ * 该对用户说的话完全不同（一条 `chmod` vs 装一个 ripgrep）。判据在文件头。
+ * 对做穷尽 `switch` 的消费方这是破坏性的 —— 那正是想要的：漏掉这一档的人
+ * 会在编译期看到，而不是让用户看到一句假话。
+ */
+type RipgrepMode = 'system' | 'builtin' | 'not-executable' | 'missing';
 interface RipgrepResolution {
     mode: RipgrepMode;
     /**
@@ -863,13 +907,42 @@ interface RipgrepResolution {
      *
      * - `system`：**故意是 `'rg'` 而不是探测到的绝对路径**。见下面 `probeSystem` 的注释
      * - `builtin`：vendor 包里那个文件的绝对路径
-     * - `missing`：仍然是 `'rg'`，让调用方照旧 spawn 并拿到 ENOENT ——
-     *   这样「没装」这条路径与内置之前**逐字同构**，错误信息和 suggestion 都不用改
+     * - `not-executable` / `missing`：仍然是 `'rg'`，让调用方照旧 spawn 并拿到
+     *   ENOENT —— 这样这两条路径与内置之前**逐字同构**，错误处理一行都不用改
+     *
+     * ⚠️ `not-executable` 这一档**尤其不许**把那个绝对路径交出去：它就在手上、
+     * 看着像个好答案，但 spawn 它必然 EACCES —— 那时用户拿到的是一句
+     * 「permission denied」加一条我们自己给的路径，比 ENOENT 更难懂。
+     * 路径要给的地方是 {@link hint}，那儿它是**说明的一部分**而不是一个会被执行的值。
      */
     command: string;
-    /** 内置那份的版本号（vendor 包的 `version`，与上游 ripgrep 版本对齐）。只有 `builtin` 有 */
+    /**
+     * 内置那份 **ripgrep 自己**的版本号。只有 `builtin` 有。
+     *
+     * ⚠️ **读的是 vendor 包的 `ripgrepVersion` 字段，不是它的 `version`**
+     * （2026-09-01 改）。两者曾经被当成一回事，而实测它们**早就不是**了：
+     * 包 `version` 是 `14.2.0`，`bin/rg --version` 说的是 **14.1.1**
+     * （`scripts/fetch-ripgrep.mjs` 钉的也是 14.1.1）。也就是说这一格从落地起
+     * 就在屏幕上印一个假版本号。
+     *
+     * 两者必须分开的理由不止于纠正这一次：包版本要为**打包问题**而升
+     * （这一轮加 `bin` 字段就是），而那种升级一个字节的二进制都没换。
+     * 合成一格的话，每修一次包装就多印一次假话。
+     *
+     * 读不出来就不给 —— 诊断里少一个版本号，不值得为此失败。
+     */
     version?: string;
-    /** 安装提示。只有 `missing` 有 —— 另外两档不需要用户做任何事 */
+    /**
+     * 给用户的下一步。**只有 `not-executable` / `missing` 有** —— 另外两档不需要
+     * 用户做任何事。
+     *
+     * ⚠️ 两档给的是**两条不同的命令**，这正是拆档的全部意义：
+     *
+     * | 档 | hint |
+     * | ---------------- | ------------------------------ |
+     * | `missing` | 装一个 ripgrep（`ripgrepInstallHint()`） |
+     * | `not-executable` | `chmod +x "<那个文件的真实路径>"` |
+     */
     hint?: string;
 }
 /**
@@ -3065,5 +3138,48 @@ declare function setSecretValues(next: Record<string, string>): void;
 declare function getSecretValues(): Record<string, string>;
 /** 仅供测试：把进程级状态复位 */
 declare function resetSecretState(): void;
+/** 一次凭据写入的落点。**必须回显给用户**，理由见 {@link writeProviderSecret} */
+interface SecretWriteResult {
+    /** `keychain` / `dpapi` / `libsecret` / `plaintext` */
+    backend: string;
+    encrypted: boolean;
+    /** 一行人类可读说明，直接给命令回显。⚠️ 它按**本进程**语言渲染，见下 */
+    detail: string;
+    /** 明文降级时那个 `.env` 在哪儿；进了加密后端就是 `null` */
+    envPath: string | null;
+}
+/**
+ * 写一个 provider 的 API key —— **全仓唯一一份写入实现**。
+ *
+ * ## 它 2026-08-31 从 cli 搬到了这儿
+ *
+ * 原来住在 `cli/src/files/env-file.ts`（那边现在只剩一句转出，`epoch model` 一行没动）。
+ * 搬家的理由是**又多了一个调用方**：Web UI 上配 key（`POST /api/providers/:type/key`）
+ * 走 server → runtime，而 `check-layers.mjs` 里 server 只许依赖 `protocol + runtime`、
+ * runtime 够不着 cli。原地不动的话就得在 runtime 里再写一份 —— 而这个文件的前身
+ * 头一句话就是「本文件只转出、**不再有第二份实现**」。
+ *
+ * ## 三件事，一件都不能省
+ *
+ * 1. **交给 `SecretStore`**（钥匙串 → DPAPI → libsecret → 明文 0600 的降级链已经封在里面）；
+ * 2. **回显落点** —— 「我的 key 进了钥匙串还是明文文件」是用户有权当场知道的事，
+ *    这正是方案 3.3「降级必须响亮」在写入侧的对应物；
+ * 3. **就地补进预取表** —— 见下面那段。
+ *
+ * ## ⚠️ 第 3 件是这次搬家新加的，少了它 Web UI 那条路当场失效
+ *
+ * `readProviderKeyEnv()`（引擎和模型探测共用的那份判据）读的是
+ * `process.env` > `.env` > **启动时预取的那张 map**。刚写进钥匙串的那把 key
+ * 三处一处都不在 —— 于是「在设置页配完 key、立刻探模型」还是 `no-key`，
+ * 而用户面前的证据是他刚刚才按过保存。
+ *
+ * `epoch model` 撞不到这个坑只是因为它写完就退了，不代表这一步以前不该有。
+ * 补在这个函数里（而不是各调用方）是因为**两条路径要的是同一件事**。
+ *
+ * @param name  环境变量名（`DEEPSEEK_API_KEY` 这种），**不是** provider 类型
+ * @param value 那把 key 的原文
+ * @param fallbackEnvPath 装配层还没跑过时兜底写哪个 `.env`
+ */
+declare function writeProviderSecret(name: string, value: string, fallbackEnvPath: string): Promise<SecretWriteResult>;
 
-export { type ArtifactHandle, type BubblewrapOptions, CLAUDE_DIR_NAME, CODE_EXEC_ROOTS, type CatalogLoad, type CommandSegment, type Confinement, type CreateSecretStoreOptions, DEFAULT_LANG, DEFAULT_YAML, DENIAL_SIGNATURES, type DangerCheckOptions, type DangerMatch, type DangerPlatform, type DiagnosticCollector, ENVELOPE_PREFIX, EXEC_PATH_AS_NODE_ENV, type FailureKind, type FailureVerdict, type I18nDiagnostic, IS_WINDOWS, type IsolatedCommand, type IsolationBackend, type IsolationOptions, type JobHandle, type JobInfo, type JobKind, type JobReadResult, type JobSpec, type JobStatus, type JobWaitResult, type KillProcessTreeOptions, type KillSignalOptions, type KillablePty, LANGS, type Lang, type LogEntry, type LogLevel, type MigrateOptions, type MigrateResult, type Migration, type OnExisting, type OwnedProcessTable, PROJECT_DIR_NAME, type ParseIssue, type ParseOutcome, type ParsedCommand, PlaintextStore, type ProcessTable, RUNNER_FAILURE_RULES, type ResolveRipgrepOptions, type RipgrepMode, type RipgrepResolution, type RunnerFailureRules, SECRET_MODE, SECRET_SERVICE, SHELL_KINDS, SIGKILL_TIMEOUT_MS, type SandboxEnforcement, type SandboxMode, type SandboxPolicy, type SeatbeltOptions, type SecretBackendId, SecretCatalog, type SecretStore, type ShellFlavor, type ShellInvocation, type ShellKind, type SqliteDatabase, type StampedPid, type StartLongLivedOptions, type StreamDecoder, TOOLCHAIN_CACHE_DIRS, type TrackedProcess, WINDOWS_HIDE_FLAGS, agentsDir, allJobs, appendJob, approvalsPath, artifactsDir, assertValidSecretName, automationDir, automationLogsDir, automationWorkDir, budgetStatePath, buildBwrapArgs, buildProfile, checkDangerousCommand, checkObfuscation, checkpointsDir, classifyFailure, claudeUserSettingsPath, clearAllJobs, closeAllDatabases, collectProcessTree, collectProcessTreeStamped, commandsDir, configPath, confine, countCodePoints, createLogger, createProcessTable, createSecretStore, createStreamDecoder, currentLang, dbPath, detectBackend, detectConsoleEncoding, encodingForCodePage, envPath, formatIssues, generateDataKey, getDataKey, getDefaultShell, getJob, getPythonCommand, getSecretStore, getSecretValues, hasSideEffectChannel, headCodePoints, hooksPath, i18nDiagnostics, isEnvelope, isInWorkspace, isLang, isReadOnlyCommand, isSensitiveKey, isolate, issueDetails, jobDetail, keepHeadAndTail, keybindingsPath, killAllTrackedProcesses, killPids, killProcessTree, killStampedPids, killTrackedProcess, listJobs, listStoredSecretNames, loadCatalog, localesDir, managedSettingsPath, marketplacesPath, maskApiKey, maskSensitive, mcpAuthPath, mcpConfigPath, mcpSchemaCachePath, memoriesDir, migrate, migrateEnvSecrets, normalizeForMatch, openArtifact, openDatabase, openEnvelope, parseDataKey, parseEnvText, parseLenient, parseShellCommand, parseStrict, placeholdersOf, pluginsDir, pluginsStatePath, policiesDir, powershellCommandArg, prefetchProviderSecrets, probeBubblewrap, probeSeatbelt, probeShell, processFallbackTable, processTableFor, projectClaudeLocalSettingsPath, projectClaudeSettingsPath, projectCommandsDir, projectHooksPath, projectLocalSettingsPath, projectPoliciesDir, projectSchemasDir, projectSettingsPath, projectSkillsDir, readConfigYaml, readJob, readKey, refCount, registerJob, rekeyJobs, releaseDatabase, removeEnvVarText, resetI18n, resetRipgrepCache, resetSecretState, resolveHomeDir, resolveLang, resolveProfile, resolveRipgrep, resolveShellKind, ripgrepInstallHint, safeInit, sandboxModeForLevel, schemaVersion, sealEnvelope, setDataKey, setEnvVarText, setLang, setLogLevel, setScalar, setSecretStore, setSecretValues, setSectionField, setShell, shellPtyArgs, shellSpawnArgs, skillsDir, splitWords, startLongLivedProcess, stopJob, stripShellWrapper, systemLocaleSignals, t, tailCodePoints, touchJob, trackForeignProcess, trackedProcessCount, trustPath, trustedImportsPath, uiDateLocale, unknownKeyIssues, unsetScalar, unsetSectionField, waitJob, withTimeout, workspacesPath, worktreesDir, writeArtifact, writeConfigYaml, writeEnvFile };
+export { type ArtifactHandle, type BubblewrapOptions, CLAUDE_DIR_NAME, CODE_EXEC_ROOTS, type CatalogLoad, type CommandSegment, type Confinement, type CreateSecretStoreOptions, DEFAULT_LANG, DEFAULT_YAML, DENIAL_SIGNATURES, type DangerCheckOptions, type DangerMatch, type DangerPlatform, type DiagnosticCollector, ENVELOPE_PREFIX, EXEC_PATH_AS_NODE_ENV, type FailureKind, type FailureVerdict, type I18nDiagnostic, IS_WINDOWS, type IsolatedCommand, type IsolationBackend, type IsolationOptions, type JobHandle, type JobInfo, type JobKind, type JobReadResult, type JobSpec, type JobStatus, type JobWaitResult, type KillProcessTreeOptions, type KillSignalOptions, type KillablePty, LANGS, type Lang, type LogEntry, type LogLevel, type MigrateOptions, type MigrateResult, type Migration, type OnExisting, type OwnedProcessTable, PROJECT_DIR_NAME, type ParseIssue, type ParseOutcome, type ParsedCommand, PlaintextStore, type ProcessTable, RUNNER_FAILURE_RULES, type ResolveRipgrepOptions, type RipgrepMode, type RipgrepResolution, type RunnerFailureRules, SECRET_MODE, SECRET_SERVICE, SHELL_KINDS, SIGKILL_TIMEOUT_MS, type SandboxEnforcement, type SandboxMode, type SandboxPolicy, type SeatbeltOptions, type SecretBackendId, SecretCatalog, type SecretStore, type SecretWriteResult, type ShellFlavor, type ShellInvocation, type ShellKind, type SqliteDatabase, type StampedPid, type StartLongLivedOptions, type StreamDecoder, TOOLCHAIN_CACHE_DIRS, type TrackedProcess, WINDOWS_HIDE_FLAGS, agentsDir, allJobs, appendJob, approvalsPath, artifactsDir, assertValidSecretName, automationDir, automationLogsDir, automationWorkDir, budgetStatePath, buildBwrapArgs, buildProfile, checkDangerousCommand, checkObfuscation, checkpointsDir, classifyFailure, claudeUserSettingsPath, clearAllJobs, closeAllDatabases, collectProcessTree, collectProcessTreeStamped, commandsDir, complianceDir, configPath, confine, countCodePoints, createLogger, createProcessTable, createSecretStore, createStreamDecoder, currentLang, dbPath, detectBackend, detectConsoleEncoding, encodingForCodePage, envPath, formatIssues, generateDataKey, getDataKey, getDefaultShell, getJob, getPythonCommand, getSecretStore, getSecretValues, hasSideEffectChannel, headCodePoints, hooksPath, i18nDiagnostics, isEnvelope, isInWorkspace, isLang, isReadOnlyCommand, isSensitiveKey, isolate, issueDetails, jobDetail, keepHeadAndTail, keybindingsPath, killAllTrackedProcesses, killPids, killProcessTree, killStampedPids, killTrackedProcess, listJobs, listStoredSecretNames, loadCatalog, localesDir, managedSettingsPath, marketplacesPath, maskApiKey, maskSensitive, mcpAuthPath, mcpConfigPath, mcpSchemaCachePath, memoriesDir, migrate, migrateEnvSecrets, normalizeForMatch, openArtifact, openDatabase, openEnvelope, parseDataKey, parseEnvText, parseLenient, parseShellCommand, parseStrict, placeholdersOf, pluginsDir, pluginsStatePath, policiesDir, powershellCommandArg, prefetchProviderSecrets, probeBubblewrap, probeSeatbelt, probeShell, processFallbackTable, processTableFor, projectClaudeLocalSettingsPath, projectClaudeSettingsPath, projectCommandsDir, projectComplianceDir, projectHooksPath, projectLocalSettingsPath, projectPoliciesDir, projectSchemasDir, projectSettingsPath, projectSkillsDir, readConfigYaml, readJob, readKey, refCount, registerJob, rekeyJobs, releaseDatabase, removeEnvVarText, resetI18n, resetRipgrepCache, resetSecretState, resolveHomeDir, resolveLang, resolveProfile, resolveRipgrep, resolveShellKind, ripgrepInstallHint, safeInit, sandboxModeForLevel, schemaVersion, sealEnvelope, setDataKey, setEnvVarText, setLang, setLogLevel, setScalar, setSecretStore, setSecretValues, setSectionField, setShell, shellPtyArgs, shellSpawnArgs, skillsDir, splitWords, startLongLivedProcess, stopJob, stripShellWrapper, systemLocaleSignals, t, tailCodePoints, touchJob, trackForeignProcess, trackedProcessCount, trustPath, trustedImportsPath, uiDateLocale, unknownKeyIssues, unsetScalar, unsetSectionField, waitJob, withTimeout, workspacesPath, worktreesDir, writeArtifact, writeConfigYaml, writeEnvFile, writeProviderSecret };

package/dist/index.js

@@ -38,6 +38,9 @@ function skillsDir(homeDir = resolveHomeDir()) {
 function policiesDir(homeDir = resolveHomeDir()) {
   return join(homeDir, "policies");
 }
+function complianceDir(homeDir = resolveHomeDir()) {
+  return join(homeDir, "compliance");
+}
 function hooksPath(homeDir = resolveHomeDir()) {
   return join(homeDir, "hooks.json");
 }
@@ -132,6 +135,9 @@ function projectHooksPath(projectRoot) {
 function projectPoliciesDir(projectRoot) {
   return join(projectRoot, PROJECT_DIR_NAME, "policies");
 }
+function projectComplianceDir(projectRoot) {
+  return join(projectRoot, PROJECT_DIR_NAME, "compliance");
+}
 var CLAUDE_DIR_NAME = ".claude";
 function claudeUserSettingsPath(home = homedir()) {
   return join(home, CLAUDE_DIR_NAME, "settings.json");
@@ -162,8 +168,9 @@ function setSectionField(yaml, section, field, value) {
   const entry = `  ${field}: ${value}`;
   const header = new RegExp(`^${section}:[ \\t]*$`, "m");
   if (!header.test(yaml)) {
-    return `${yaml.trimEnd()}
-${section}:
+    const head = yaml.trimEnd();
+    return `${head === "" ? "" : `${head}
+`}${section}:
 ${entry}
 `;
   }
@@ -919,6 +926,7 @@ function defaultResolveVendor(specifier) {
 function readVendorVersion(manifestPath) {
   try {
     const pkg = require_(manifestPath);
+    if (typeof pkg.ripgrepVersion === "string") return pkg.ripgrepVersion;
     return typeof pkg.version === "string" ? pkg.version : void 0;
   } catch {
     return void 0;
@@ -945,9 +953,16 @@ function resolve(options) {
     if (manifest) {
       const api = platform10 === "win32" ? win32 : posix;
       const binary = api.join(api.dirname(manifest), "bin", platform10 === "win32" ? "rg.exe" : "rg");
-      if (exists(binary) && (platform10 === "win32" || makeExecutable(binary))) {
-        const version = readVendorVersion(manifest);
-        return { mode: "builtin", command: binary, ...version ? { version } : {} };
+      if (exists(binary)) {
+        if (platform10 === "win32" || makeExecutable(binary)) {
+          const version = readVendorVersion(manifest);
+          return { mode: "builtin", command: binary, ...version ? { version } : {} };
+        }
+        return {
+          mode: "not-executable",
+          command: "rg",
+          hint: t("infra_misc.ripgrep_chmod_hint", { path: binary })
+        };
       }
     }
   }
@@ -3448,6 +3463,37 @@ function resetSecretState() {
   current = null;
   values = {};
 }
+async function writeProviderSecret(name, value, fallbackEnvPath) {
+  const store = getSecretStore();
+  const result = await writeThrough(store, name, value, fallbackEnvPath);
+  setSecretValues({ ...getSecretValues(), [name]: value });
+  return result;
+}
+async function writeThrough(store, name, value, fallbackEnvPath) {
+  if (!store) {
+    writeEnvFile(fallbackEnvPath, setEnvVarText(readEnvOrEmpty(fallbackEnvPath), name, value));
+    return {
+      backend: "plaintext",
+      encrypted: false,
+      detail: t("cli.config.secret_plaintext_write", { path: fallbackEnvPath }),
+      envPath: fallbackEnvPath
+    };
+  }
+  await store.set(name, value);
+  return {
+    backend: store.backend,
+    encrypted: store.encrypted,
+    detail: store.detail,
+    envPath: store.backend === "plaintext" ? fallbackEnvPath : null
+  };
+}
+function readEnvOrEmpty(path) {
+  try {
+    return readFileSync(path, "utf-8");
+  } catch {
+    return "";
+  }
+}
 function message2(err) {
   return err instanceof Error ? err.message : String(err);
 }
@@ -3506,4 +3552,4 @@ function message2(err) {
  * Modifications Copyright 2024-2026 bowen
  */
 
-export { CLAUDE_DIR_NAME, CODE_EXEC_ROOTS, DEFAULT_LANG, DEFAULT_YAML, DENIAL_SIGNATURES, ENVELOPE_PREFIX, EXEC_PATH_AS_NODE_ENV, IS_WINDOWS, LANGS, PROJECT_DIR_NAME, PlaintextStore, RUNNER_FAILURE_RULES, SECRET_MODE, SECRET_SERVICE, SHELL_KINDS, SIGKILL_TIMEOUT_MS, SecretCatalog, TOOLCHAIN_CACHE_DIRS, WINDOWS_HIDE_FLAGS, agentsDir, allJobs, appendJob, approvalsPath, artifactsDir, assertValidSecretName, automationDir, automationLogsDir, automationWorkDir, budgetStatePath, buildBwrapArgs, buildProfile, checkDangerousCommand, checkObfuscation, checkpointsDir, classifyFailure, claudeUserSettingsPath, clearAllJobs, closeAllDatabases, collectProcessTree, collectProcessTreeStamped, commandsDir, configPath, confine, countCodePoints, createLogger, createProcessTable, createSecretStore, createStreamDecoder, currentLang, dbPath, detectBackend, detectConsoleEncoding, encodingForCodePage, envPath, formatIssues, generateDataKey, getDataKey, getDefaultShell, getJob, getPythonCommand, getSecretStore, getSecretValues, hasSideEffectChannel, headCodePoints, hooksPath, i18nDiagnostics, isEnvelope, isInWorkspace, isLang, isReadOnlyCommand, isSensitiveKey, isolate, issueDetails, jobDetail, keepHeadAndTail, keybindingsPath, killAllTrackedProcesses, killPids, killProcessTree, killStampedPids, killTrackedProcess, listJobs, listStoredSecretNames, loadCatalog, localesDir, managedSettingsPath, marketplacesPath, maskApiKey, maskSensitive, mcpAuthPath, mcpConfigPath, mcpSchemaCachePath, memoriesDir, migrate, migrateEnvSecrets, normalizeForMatch, openArtifact, openDatabase, openEnvelope, parseDataKey, parseEnvText, parseLenient, parseShellCommand, parseStrict, placeholdersOf, pluginsDir, pluginsStatePath, policiesDir, powershellCommandArg, prefetchProviderSecrets, probeBubblewrap, probeSeatbelt, probeShell, processFallbackTable, processTableFor, projectClaudeLocalSettingsPath, projectClaudeSettingsPath, projectCommandsDir, projectHooksPath, projectLocalSettingsPath, projectPoliciesDir, projectSchemasDir, projectSettingsPath, projectSkillsDir, readConfigYaml, readJob, readKey, refCount, registerJob, rekeyJobs, releaseDatabase, removeEnvVarText, resetI18n, resetRipgrepCache, resetSecretState, resolveHomeDir, resolveLang, resolveProfile, resolveRipgrep, resolveShellKind, ripgrepInstallHint, safeInit, sandboxModeForLevel, schemaVersion, sealEnvelope, setDataKey, setEnvVarText, setLang, setLogLevel, setScalar, setSecretStore, setSecretValues, setSectionField, setShell, shellPtyArgs, shellSpawnArgs, skillsDir, splitWords, startLongLivedProcess, stopJob, stripShellWrapper, systemLocaleSignals, t, tailCodePoints, touchJob, trackForeignProcess, trackedProcessCount, trustPath, trustedImportsPath, uiDateLocale, unknownKeyIssues, unsetScalar, unsetSectionField, waitJob, withTimeout, workspacesPath, worktreesDir, writeArtifact, writeConfigYaml, writeEnvFile };
+export { CLAUDE_DIR_NAME, CODE_EXEC_ROOTS, DEFAULT_LANG, DEFAULT_YAML, DENIAL_SIGNATURES, ENVELOPE_PREFIX, EXEC_PATH_AS_NODE_ENV, IS_WINDOWS, LANGS, PROJECT_DIR_NAME, PlaintextStore, RUNNER_FAILURE_RULES, SECRET_MODE, SECRET_SERVICE, SHELL_KINDS, SIGKILL_TIMEOUT_MS, SecretCatalog, TOOLCHAIN_CACHE_DIRS, WINDOWS_HIDE_FLAGS, agentsDir, allJobs, appendJob, approvalsPath, artifactsDir, assertValidSecretName, automationDir, automationLogsDir, automationWorkDir, budgetStatePath, buildBwrapArgs, buildProfile, checkDangerousCommand, checkObfuscation, checkpointsDir, classifyFailure, claudeUserSettingsPath, clearAllJobs, closeAllDatabases, collectProcessTree, collectProcessTreeStamped, commandsDir, complianceDir, configPath, confine, countCodePoints, createLogger, createProcessTable, createSecretStore, createStreamDecoder, currentLang, dbPath, detectBackend, detectConsoleEncoding, encodingForCodePage, envPath, formatIssues, generateDataKey, getDataKey, getDefaultShell, getJob, getPythonCommand, getSecretStore, getSecretValues, hasSideEffectChannel, headCodePoints, hooksPath, i18nDiagnostics, isEnvelope, isInWorkspace, isLang, isReadOnlyCommand, isSensitiveKey, isolate, issueDetails, jobDetail, keepHeadAndTail, keybindingsPath, killAllTrackedProcesses, killPids, killProcessTree, killStampedPids, killTrackedProcess, listJobs, listStoredSecretNames, loadCatalog, localesDir, managedSettingsPath, marketplacesPath, maskApiKey, maskSensitive, mcpAuthPath, mcpConfigPath, mcpSchemaCachePath, memoriesDir, migrate, migrateEnvSecrets, normalizeForMatch, openArtifact, openDatabase, openEnvelope, parseDataKey, parseEnvText, parseLenient, parseShellCommand, parseStrict, placeholdersOf, pluginsDir, pluginsStatePath, policiesDir, powershellCommandArg, prefetchProviderSecrets, probeBubblewrap, probeSeatbelt, probeShell, processFallbackTable, processTableFor, projectClaudeLocalSettingsPath, projectClaudeSettingsPath, projectCommandsDir, projectComplianceDir, projectHooksPath, projectLocalSettingsPath, projectPoliciesDir, projectSchemasDir, projectSettingsPath, projectSkillsDir, readConfigYaml, readJob, readKey, refCount, registerJob, rekeyJobs, releaseDatabase, removeEnvVarText, resetI18n, resetRipgrepCache, resetSecretState, resolveHomeDir, resolveLang, resolveProfile, resolveRipgrep, resolveShellKind, ripgrepInstallHint, safeInit, sandboxModeForLevel, schemaVersion, sealEnvelope, setDataKey, setEnvVarText, setLang, setLogLevel, setScalar, setSecretStore, setSecretValues, setSectionField, setShell, shellPtyArgs, shellSpawnArgs, skillsDir, splitWords, startLongLivedProcess, stopJob, stripShellWrapper, systemLocaleSignals, t, tailCodePoints, touchJob, trackForeignProcess, trackedProcessCount, trustPath, trustedImportsPath, uiDateLocale, unknownKeyIssues, unsetScalar, unsetSectionField, waitJob, withTimeout, workspacesPath, worktreesDir, writeArtifact, writeConfigYaml, writeEnvFile, writeProviderSecret };