@linghun/tui 0.1.0

package/dist/chunk-PGNALDEH.js

@@ -0,0 +1,2003 @@
+// src/natural-command-bridge.ts
+import { randomUUID } from "crypto";
+var SLASH_COMMAND_REGISTRY = [
+  { slash: "/help", capabilityId: "help", userVisible: true },
+  { slash: "/features", capabilityId: "features", userVisible: true },
+  { slash: "/capabilities", capabilityId: "capabilities", userVisible: true },
+  { slash: "/apps", capabilityId: "apps", userVisible: true },
+  { slash: "/language", capabilityId: "language", userVisible: true },
+  { slash: "/model", capabilityId: "model", userVisible: true },
+  { slash: "/vision", capabilityId: "vision", userVisible: true },
+  { slash: "/image", capabilityId: "image", userVisible: true },
+  { slash: "/skills", capabilityId: "skills", userVisible: true },
+  { slash: "/workflows", capabilityId: "workflows", userVisible: true },
+  { slash: "/plugins", capabilityId: "plugins", userVisible: true },
+  { slash: "/doctor", capabilityId: "readiness", userVisible: true },
+  { slash: "/problems", capabilityId: "problems", userVisible: true },
+  { slash: "/sessions", capabilityId: "sessions", userVisible: true },
+  { slash: "/resume", capabilityId: "resume", userVisible: true },
+  { slash: "/branch", capabilityId: "branch", userVisible: true },
+  // D.13R Git Readiness — 只读发现层入口（commit/reset/checkout/worktree add/remove
+  // 仍由用户通过 Bash 工具走现有 permission-policy-engine 四档权限链）。
+  { slash: "/git", capabilityId: "git", userVisible: true },
+  { slash: "/worktree", capabilityId: "worktree", userVisible: true },
+  { slash: "/checkpoint", capabilityId: "checkpoint", userVisible: true },
+  { slash: "/memory", capabilityId: "memory", userVisible: true },
+  { slash: "/mode", capabilityId: "mode", userVisible: true },
+  { slash: "/tab", capabilityId: "tab", userVisible: true },
+  { slash: "/esc", capabilityId: "esc", userVisible: true },
+  { slash: "/enter", capabilityId: "enter", userVisible: true },
+  { slash: "/trust", capabilityId: "trust", userVisible: true },
+  { slash: "/autopilot", capabilityId: "autopilot", userVisible: true },
+  { slash: "/brief", capabilityId: "brief", userVisible: true },
+  { slash: "/plan", capabilityId: "plan", userVisible: true },
+  { slash: "/permissions", capabilityId: "permissions", userVisible: true },
+  { slash: "/background", capabilityId: "background", userVisible: true },
+  { slash: "/job", capabilityId: "job", userVisible: true },
+  { slash: "/batch", capabilityId: "job", userVisible: true },
+  { slash: "/remote", capabilityId: "remote", userVisible: true },
+  { slash: "/details", capabilityId: "details", userVisible: true },
+  { slash: "/agents", capabilityId: "agents", userVisible: true },
+  { slash: "/fork", capabilityId: "fork", userVisible: true },
+  { slash: "/rewind", capabilityId: "rewind", userVisible: true },
+  { slash: "/btw", capabilityId: "btw", userVisible: true },
+  { slash: "/interrupt", capabilityId: "interrupt", userVisible: true },
+  { slash: "/claim-check", capabilityId: "claim-check", userVisible: true },
+  { slash: "/verify", capabilityId: "verify", userVisible: true },
+  { slash: "/review", capabilityId: "review", userVisible: true },
+  { slash: "/commit", capabilityId: "commit", userVisible: true, promptCommand: true },
+  { slash: "/init", capabilityId: "init", userVisible: true, promptCommand: true },
+  {
+    slash: "/security-review",
+    capabilityId: "security-review",
+    userVisible: true,
+    promptCommand: true
+  },
+  {
+    slash: "/commit-push-pr",
+    capabilityId: "commit-push-pr",
+    userVisible: true,
+    promptCommand: true
+  },
+  {
+    slash: "/init-verifiers",
+    capabilityId: "init-verifiers",
+    userVisible: true,
+    promptCommand: true
+  },
+  { slash: "/cache-log", capabilityId: "cache-log", userVisible: true },
+  { slash: "/cache", capabilityId: "cache", userVisible: true },
+  { slash: "/compact", capabilityId: "compact", userVisible: true },
+  { slash: "/context", capabilityId: "compact", userVisible: true },
+  { slash: "/break-cache", capabilityId: "break-cache", userVisible: true },
+  { slash: "/mcp", capabilityId: "mcp", userVisible: true },
+  { slash: "/index", capabilityId: "index", userVisible: true },
+  { slash: "/usage", capabilityId: "usage", userVisible: true },
+  { slash: "/stats", capabilityId: "stats", userVisible: true },
+  { slash: "/read", capabilityId: "read", userVisible: true },
+  { slash: "/write", capabilityId: "write", userVisible: true },
+  { slash: "/edit", capabilityId: "edit", userVisible: true },
+  { slash: "/multiedit", capabilityId: "multiedit", userVisible: true },
+  { slash: "/grep", capabilityId: "grep", userVisible: true },
+  { slash: "/glob", capabilityId: "glob", userVisible: true },
+  { slash: "/bash", capabilityId: "bash", userVisible: true },
+  { slash: "/todo", capabilityId: "todo", userVisible: true },
+  { slash: "/diff", capabilityId: "diff", userVisible: true },
+  { slash: "/config", capabilityId: "config", userVisible: true },
+  { slash: "/exit", capabilityId: "exit", userVisible: true },
+  { slash: "/shortcuts", capabilityId: "shortcuts", userVisible: true },
+  { slash: "/terminal-setup", capabilityId: "terminal-setup", userVisible: true },
+  {
+    slash: "/status",
+    capabilityId: "status",
+    userVisible: false,
+    hiddenReason: "status bar is emitted automatically"
+  }
+];
+var USER_VISIBLE_SLASH_COMMANDS = SLASH_COMMAND_REGISTRY.filter((item) => item.userVisible).map(
+  (item) => item.slash
+);
+function findSlashCommandRegistryEntry(slash) {
+  return SLASH_COMMAND_REGISTRY.find((item) => item.slash === slash);
+}
+var COMMAND_CAPABILITY_DATA = [
+  cap(
+    "help",
+    "/help",
+    ["help", "\u5E2E\u52A9", "commands"],
+    "\u5E2E\u52A9",
+    "Help",
+    "\u663E\u793A\u547D\u4EE4\u6E05\u5355\u3002",
+    "Shows the command list.",
+    "\u4E86\u89E3\u53EF\u7528\u547D\u4EE4\u6216\u81EA\u7136\u8BED\u8A00\u6865\u80FD\u529B\u3002",
+    "Use for available commands or bridge capabilities.",
+    "readonly"
+  ),
+  cap(
+    "features",
+    "/features",
+    ["features", "feature policy", "\u529F\u80FD\u5F00\u5173", "\u9ED8\u8BA4\u529F\u80FD"],
+    "\u529F\u80FD\u7B56\u7565",
+    "Feature policy",
+    "\u663E\u793A\u9ED8\u8BA4\u529F\u80FD\u7B56\u7565\u3001\u63A8\u8350\u5E95\u5EA7\u3001\u9AD8\u7EA7/\u5371\u9669/\u672A\u652F\u6301\u8FB9\u754C\u3002",
+    "Shows default feature policy, recommended foundation, advanced/dangerous/unsupported boundaries.",
+    "\u6838\u5BF9\u9ED8\u8BA4\u529F\u80FD\u5F00\u5173\u3001\u81EA\u52A8\u6267\u884C\u8FB9\u754C\u548C\u6743\u9650\u98CE\u9669\u3002",
+    "Use to audit default feature switches, auto-run boundaries, and permission risk.",
+    "readonly"
+  ),
+  cap(
+    "capabilities",
+    "/capabilities",
+    ["capabilities", "capability", "app bridge", "\u5916\u90E8\u80FD\u529B", "\u5E94\u7528\u6865"],
+    "\u5916\u90E8\u80FD\u529B",
+    "Capabilities",
+    "\u67E5\u770B Capability Runtime \u7684\u53EF\u7528\u80FD\u529B\u3001\u8FDE\u63A5\u72B6\u6001\u548C mock \u6267\u884C\u5165\u53E3\u3002",
+    "Shows Capability Runtime entries, connection status, and mock execution entry.",
+    "\u9700\u8981\u67E5\u770B\u5916\u90E8 app/plugin/MCP \u80FD\u529B\u6865\u63A5\u3001doctor \u6216 mock capability \u65F6\u4F7F\u7528\u3002",
+    "Use for external app/plugin/MCP capability bridge discovery, doctor, or mock capability checks.",
+    "readonly",
+    { group: "diagnostics" }
+  ),
+  cap(
+    "apps",
+    "/apps",
+    ["apps", "connect app", "connector", "http connector", "\u8FDE\u63A5\u5E94\u7528", "\u5E94\u7528\u6865"],
+    "\u5E94\u7528\u8FDE\u63A5",
+    "Apps",
+    "\u8FDE\u63A5\u3001\u67E5\u770B\u3001\u8BCA\u65AD\u6216\u65AD\u5F00 Local HTTP Connector app\u3002",
+    "Connects, lists, diagnoses, or disconnects Local HTTP Connector apps.",
+    "\u9700\u8981\u628A\u672C\u5730\u5916\u90E8\u5E94\u7528\u63A5\u5165 Capability Runtime \u65F6\u4F7F\u7528\u3002",
+    "Use when connecting a local external app into Capability Runtime.",
+    "readonly",
+    { group: "diagnostics" }
+  ),
+  cap(
+    "language",
+    "/language",
+    ["\u8BED\u8A00", "language"],
+    "\u8BED\u8A00",
+    "Language",
+    "\u67E5\u770B\u6216\u5207\u6362\u754C\u9762\u8BED\u8A00\u3002",
+    "Shows or switches UI language.",
+    "\u9700\u8981\u4E2D\u82F1\u6587\u4F53\u9A8C\u8DDF\u968F\u504F\u597D\u65F6\u4F7F\u7528\u3002",
+    "Use when changing Chinese/English UI preference.",
+    "config_write",
+    { writesConfig: true }
+  ),
+  cap(
+    "model",
+    "/model",
+    ["\u6A21\u578B", "provider", "route", "what model", "current model"],
+    "\u6A21\u578B",
+    "Model",
+    "\u67E5\u770B\u5F53\u524D\u6A21\u578B\u4E0E\u89D2\u8272\u8DEF\u7531\uFF1B\u5207\u6362\u8DEF\u7531\u9700\u8981\u786E\u8BA4\u3002",
+    "Shows current model and role routes; route changes need confirmation.",
+    "\u8BE2\u95EE\u5F53\u524D\u6A21\u578B\u3001provider\u3001\u6A21\u578B\u98CE\u9669\u6216\u8DEF\u7531\u3002",
+    "Use for current model, provider, or model routing questions.",
+    "start_gate"
+  ),
+  cap(
+    "vision",
+    "/vision",
+    ["vision", "\u56FE\u7247", "image input"],
+    "\u89C6\u89C9\u8F93\u5165",
+    "Vision",
+    "\u8BB0\u5F55\u56FE\u7247\u89C2\u5BDF\u8BC1\u636E\uFF0C\u4E0D\u76F4\u63A5\u5199\u4EE3\u7801\u3002",
+    "Records vision evidence without direct code writes.",
+    "\u9700\u8981\u57FA\u4E8E\u56FE\u7247\u8DEF\u5F84\u751F\u6210 evidence\u3002",
+    "Use for image-path evidence capture.",
+    "start_gate"
+  ),
+  cap(
+    "image",
+    "/image",
+    ["generate image", "\u751F\u6210\u56FE\u7247"],
+    "\u56FE\u7247\u751F\u6210",
+    "Image",
+    "\u751F\u6210\u672C\u5730\u56FE\u7247\u8D44\u4EA7 metadata\u3002",
+    "Generates local image asset metadata.",
+    "\u9700\u8981\u56FE\u7247\u89D2\u8272\u751F\u6210\u8D44\u4EA7\u3002",
+    "Use for image-role asset generation.",
+    "start_gate"
+  ),
+  cap(
+    "skills",
+    "/skills",
+    ["skill", "skills", "\u6280\u80FD", "\u80FD\u529B"],
+    "\u6280\u80FD",
+    "Skills",
+    "\u5217\u51FA\u672C\u5730 skill \u6458\u8981\uFF1B\u542F\u7528\u7B2C\u4E09\u65B9 skill \u4E0D\u76F4\u901A\u3002",
+    "Lists local skill summaries; enabling third-party skills is not direct.",
+    "\u67E5\u770B\u6280\u80FD\u662F\u5426\u542F\u7528\u3001\u6709\u4EC0\u4E48\u6280\u80FD\u3001\u5982\u4F55\u6CE8\u518C\u6280\u80FD\u3002",
+    "Use to inspect skills or local registration paths.",
+    "start_gate"
+  ),
+  cap(
+    "workflows",
+    "/workflows",
+    [
+      "workflow",
+      "workflows",
+      "\u5DE5\u4F5C\u6D41",
+      "bug-fix",
+      "bug fix",
+      "plan workflow",
+      "workflow plan",
+      "\u5DE5\u4F5C\u6D41\u8BA1\u5212"
+    ],
+    "\u5DE5\u4F5C\u6D41",
+    "Workflows",
+    "\u5217\u51FA\u5DE5\u4F5C\u6D41\u6A21\u677F\uFF1B/workflows plan <\u76EE\u6807> \u751F\u6210\u8BA1\u5212\u9884\u89C8\u3002\u542F\u52A8\u6A21\u677F\u53EA\u5C55\u793A Start Gate\u3002",
+    "Lists workflow templates; /workflows plan <goal> generates a plan preview. Starting one only shows a Start Gate.",
+    "\u60F3\u77E5\u9053\u6709\u54EA\u4E9B\u5DE5\u4F5C\u6D41\u6216\u542F\u52A8 bug-fix/review \u6A21\u677F\uFF0C\u6216\u7528 /workflows plan \u751F\u6210\u8BA1\u5212\u9884\u89C8\u3002",
+    "Use to discover or start bug-fix/review workflows, or /workflows plan to generate a plan preview.",
+    "start_gate",
+    { runtimeStatusSubject: "workflow" }
+  ),
+  cap(
+    "plugins",
+    "/plugins",
+    ["plugin", "plugins", "\u63D2\u4EF6"],
+    "\u63D2\u4EF6",
+    "Plugins",
+    "\u5217\u51FA\u672C\u5730 plugin manifest \u4E0E\u8BCA\u65AD\uFF1B\u542F\u7528\u7B2C\u4E09\u65B9 plugin \u4E0D\u76F4\u901A\u3002",
+    "Lists local plugin manifests and doctor output; third-party enable is not direct.",
+    "\u67E5\u770B\u63D2\u4EF6\u72B6\u6001\u3001\u8D21\u732E\u9879\u3001\u52A0\u8F7D\u9519\u8BEF\u548C\u4FE1\u4EFB\u8FB9\u754C\u3002",
+    "Use for plugin state, contributions, load errors, and trust boundaries.",
+    "start_gate"
+  ),
+  cap(
+    "readiness",
+    "/doctor",
+    [
+      "doctor",
+      "doctor project",
+      "doctor runner",
+      "runner doctor",
+      "native runner",
+      "\u539F\u751F runner",
+      "readiness",
+      "ready",
+      "terminal readiness",
+      "project doctor",
+      "context picker",
+      "rollback coach",
+      "cost preview",
+      "drift linter",
+      "\u4F53\u68C0",
+      "\u5C31\u7EEA\u68C0\u67E5",
+      "\u9879\u76EE\u8BCA\u65AD",
+      "\u56DE\u6EDA\u5EFA\u8BAE",
+      "\u6210\u672C\u9884\u4F30",
+      "\u6F02\u79FB\u68C0\u67E5"
+    ],
+    "\u7EC8\u7AEF\u5C31\u7EEA\u8BCA\u65AD",
+    "Readiness doctor",
+    "\u663E\u793A\u672C\u5730/\u9759\u6001\u7EC8\u7AEF\u5C31\u7EEA\u3001Project Doctor\u3001drift/context/rollback/cost \u68C0\u67E5\uFF1B\u4E0D\u8FD0\u884C\u771F\u5B9E smoke\uFF0C\u4E5F\u4E0D\u58F0\u660E Beta PASS\u3002",
+    "Shows local/static terminal readiness plus Project Doctor, drift/context/rollback/cost checks; does not run real smoke or claim Beta PASS.",
+    "\u68C0\u67E5 provider\u3001index\u3001cache\u3001memory\u3001MCP\u3001background\u3001verification\u3001freshness\u3001project facts\u3001source-of-truth drift\u3001context refs\u3001rollback advice \u548C task cost \u8FB9\u754C\u3002",
+    "Use for provider, index, cache, memory, MCP, background, verification, freshness, project facts, source-of-truth drift, context refs, rollback advice, and task cost boundaries.",
+    "readonly"
+  ),
+  cap(
+    "problems",
+    "/problems",
+    ["problems", "problem panel", "\u95EE\u9898", "\u8BCA\u65AD\u95EE\u9898"],
+    "\u95EE\u9898\u9762\u677F",
+    "Problems",
+    "\u663E\u793A\u6765\u81EA verification/provider/background/freshness/index/project/drift/context/rollback/cost \u7684\u8F7B\u91CF\u95EE\u9898\u6458\u8981\u3002",
+    "Shows a lightweight problem summary from verification/provider/background/freshness/index/project/drift/context/rollback/cost.",
+    "\u67E5\u770B\u5F53\u524D\u963B\u585E\u3001\u8D85\u65F6\u3001stale\u3001provider failure\u3001\u9879\u76EE\u4E8B\u5B9E\u7F3A\u53E3\u3001\u6587\u6863\u6F02\u79FB\u6216\u7F3A\u5C11\u6765\u6E90\u8BC1\u636E\u7684\u95EE\u9898\u3002",
+    "Use for current blockers, timeouts, stale tasks, provider failures, project fact gaps, doc drift, or missing source evidence.",
+    "readonly"
+  ),
+  cap(
+    "hooks",
+    "/doctor",
+    ["hook", "hooks", "\u94A9\u5B50", "doctor hooks"],
+    "Hooks \u8BCA\u65AD",
+    "Hooks doctor",
+    "\u8BCA\u65AD hooks \u662F\u5426\u5F00\u542F\u3001\u6765\u6E90\u3001timeout\u3001\u65E5\u5FD7\u548C\u6743\u9650\u8FB9\u754C\uFF1B\u542F\u7528\u6216\u6267\u884C hook \u4E0D\u76F4\u901A\u3002",
+    "Diagnoses hook enablement, sources, timeout, logs, and permission boundary; hook enable/run is not direct.",
+    "\u8BE2\u95EE hook \u5F00\u6CA1\u5F00\u6216 hook \u98CE\u9669\u3002",
+    "Use when asking whether hooks are enabled or risky.",
+    "start_gate",
+    { hiddenReason: "listed as /doctor hooks in the readiness doctor help" }
+  ),
+  cap(
+    "sessions",
+    "/sessions",
+    ["sessions", "session list", "\u4F1A\u8BDD", "\u5386\u53F2\u4F1A\u8BDD"],
+    "\u4F1A\u8BDD\u5217\u8868",
+    "Sessions",
+    "\u5217\u51FA\u5F53\u524D\u9879\u76EE\u4F1A\u8BDD\u3002",
+    "Lists project sessions.",
+    "\u67E5\u770B\u5386\u53F2\u4F1A\u8BDD\u6216\u6062\u590D\u5165\u53E3\u3002",
+    "Use to inspect session history and resume options.",
+    "readonly"
+  ),
+  cap(
+    "resume",
+    "/resume",
+    ["resume", "\u6062\u590D", "continue", "last session"],
+    "\u6062\u590D\u4F1A\u8BDD",
+    "Resume",
+    "\u4ECE\u7ED3\u6784\u5316 handoff \u6062\u590D\u4F1A\u8BDD\uFF0C\u4E0D\u6CE8\u5165\u5B8C\u6574 transcript\u3002",
+    "Resumes from structured handoff without full transcript injection.",
+    "\u60F3\u6062\u590D\u4E0A\u6B21\u4F1A\u8BDD\u3002",
+    "Use to resume a prior session after a Start Gate.",
+    "start_gate"
+  ),
+  cap(
+    "branch",
+    "/branch",
+    ["branch", "\u5206\u652F", "branch session"],
+    "\u5206\u652F\u4F1A\u8BDD",
+    "Branch session",
+    "\u57FA\u4E8E handoff \u521B\u5EFA\u5206\u652F\u4F1A\u8BDD\u3002",
+    "Creates a branch session from handoff.",
+    "\u60F3\u8BD5\u9A8C\u53E6\u4E00\u6761\u601D\u8DEF\u3002",
+    "Use to try an alternate path after a Start Gate.",
+    "start_gate"
+  ),
+  cap(
+    "memory",
+    "/memory",
+    ["memory", "\u8BB0\u5FC6", "\u81EA\u52A8\u8BB0\u5FC6", "linghun.md"],
+    "\u8BB0\u5FC6",
+    "Memory",
+    "\u67E5\u770B LINGHUN.md\u3001\u5019\u9009/\u5DF2\u63A5\u53D7/\u7981\u7528\u8BB0\u5FC6\u3001\u53D7\u63A7\u6CE8\u5165\u7EDF\u8BA1\u548C\u5B58\u50A8\u8DEF\u5F84\uFF1Baccept/delete/disable \u9700\u660E\u786E\u547D\u4EE4\u3002",
+    "Shows LINGHUN.md, candidate/accepted/disabled memories, controlled injection stats, and storage paths; accept/delete/disable need explicit commands.",
+    "\u8BE2\u95EE\u8BB0\u5FC6\u662F\u5426\u5F00\u542F\u3001\u8BB0\u5FC6\u6570\u91CF\u3001\u5BA1\u67E5\u3001stats \u6216\u5B58\u50A8\u3002",
+    "Use for memory status, review, stats, and storage questions.",
+    "start_gate"
+  ),
+  cap(
+    "failures",
+    "/failures",
+    ["failures", "\u5931\u8D25\u5B66\u4E60", "failure learning", "lessons", "\u6559\u8BAD", "\u8E29\u5751"],
+    "\u5931\u8D25\u5B66\u4E60",
+    "Failure learning",
+    "\u67E5\u770B\u4ECE\u771F\u5B9E\u5931\u8D25\uFF08provider/\u5DE5\u5177/\u9A8C\u8BC1/git/\u6700\u7EC8\u56DE\u7B54\u964D\u7EA7/\u62A5\u544A\u5B88\u536B/\u5E76\u53D1\u4E0A\u9650\uFF09\u63D0\u53D6\u7684\u53EF\u590D\u7528\u6559\u8BAD\uFF1Bresolve/ignore \u9700\u660E\u786E\u547D\u4EE4\u3002",
+    "Shows reusable lessons from real failures (provider/tool/verification/git/final-gate/report-guard/resource-cap); resolve/ignore need explicit commands.",
+    "\u60F3\u67E5\u770B\u5386\u53F2\u5931\u8D25\u6559\u8BAD\u3001\u907F\u514D\u91CD\u590D\u8E29\u5751\uFF0C\u6216\u6807\u8BB0\u67D0\u6761\u5DF2\u89E3\u51B3/\u5FFD\u7565\u3002",
+    "Use to review past failure lessons or mark one resolved/ignored.",
+    "start_gate"
+  ),
+  cap(
+    "mode",
+    "/mode",
+    [
+      "mode",
+      "\u6743\u9650\u6A21\u5F0F",
+      "permission mode",
+      "full-access",
+      "full access",
+      "\u5B8C\u5168\u8BBF\u95EE",
+      "auto-review",
+      "auto review",
+      "auto mode",
+      "\u81EA\u52A8\u5BA1\u67E5",
+      "\u81EA\u52A8\u6A21\u5F0F",
+      "bypass",
+      "dontAsk",
+      "don't ask",
+      "\u514D\u786E\u8BA4"
+    ],
+    "\u6743\u9650\u6A21\u5F0F",
+    "Permission mode",
+    "\u67E5\u770B\u6216\u5207\u6362\u6743\u9650\u6A21\u5F0F\uFF1Bfull-access \u4E0D\u80FD\u81EA\u7136\u8BED\u8A00\u76F4\u901A\u3002",
+    "Shows or switches permission mode; full-access is never natural-language direct.",
+    "\u8BE2\u95EE\u5F53\u524D\u6743\u9650\u6A21\u5F0F\u6216\u60F3\u5207\u6362\u6A21\u5F0F\u3002",
+    "Use for current permission mode or switching mode.",
+    "start_gate"
+  ),
+  cap(
+    "tab",
+    "/tab",
+    ["shift tab", "tab", "\u5207\u6A21\u5F0F"],
+    "\u6A21\u5F0F\u5FAA\u73AF",
+    "Mode cycle",
+    "\u5FAA\u73AF\u5E38\u7528\u6743\u9650\u6A21\u5F0F\u3002",
+    "Cycles common permission modes.",
+    "\u53EA\u5728\u7528\u6237\u660E\u786E\u8981\u5207\u6362\u5E38\u7528\u6A21\u5F0F\u65F6\u4F7F\u7528\u3002",
+    "Use only when explicitly cycling common modes.",
+    "start_gate"
+  ),
+  cap(
+    "esc",
+    "/esc",
+    ["esc", "escape", "\u53D6\u6D88\u5F53\u524D\u4EA4\u4E92", "cancel pending"],
+    "\u53D6\u6D88\u5F53\u524D\u4EA4\u4E92",
+    "Cancel pending",
+    "\u53D6\u6D88\u7B49\u5F85\u4E2D\u7684\u8F93\u5165\u3001\u786E\u8BA4\u3001\u6743\u9650\u3001\u8BA1\u5212\u6216\u6301\u7EED\u63A8\u8FDB\u786E\u8BA4\uFF1B\u4E0D\u4F1A\u53D6\u6D88\u5DF2\u6267\u884C\u5DE5\u5177\u3002",
+    "Cancels pending input, confirmation, permission, plan, or autopilot approval; does not cancel tools that already ran.",
+    "\u9700\u8981\u53D6\u6D88\u5F53\u524D\u7B49\u5F85\u786E\u8BA4\u7684\u4EA4\u4E92\u3002",
+    "Use to cancel the current pending interaction.",
+    "start_gate"
+  ),
+  cap(
+    "enter",
+    "/enter",
+    ["enter", "\u786E\u8BA4\u5F53\u524D\u9009\u62E9", "confirm pending"],
+    "\u786E\u8BA4\u5F53\u524D\u9009\u62E9",
+    "Confirm pending",
+    "\u786E\u8BA4\u5F53\u524D\u663E\u5F0F\u9009\u62E9\uFF1B\u9700\u8981\u7CBE\u786E\u786E\u8BA4\u7684\u5371\u9669\u52A8\u4F5C\u4ECD\u4E0D\u4F1A\u653E\u884C\u3002",
+    "Confirms the current explicit choice; exact-confirmation actions remain protected.",
+    "\u9700\u8981\u7528\u7B49\u4EF7 Enter \u8DEF\u5F84\u786E\u8BA4\u5F53\u524D\u9009\u62E9\u3002",
+    "Use as the Enter-equivalent confirmation path.",
+    "start_gate"
+  ),
+  cap(
+    "trust",
+    "/trust",
+    [
+      "trust",
+      "workspace trust",
+      "trust this folder",
+      "trust this project",
+      "\u4FE1\u4EFB\u5DE5\u4F5C\u533A",
+      "\u4FE1\u4EFB\u8FD9\u4E2A\u9879\u76EE",
+      "\u8C03\u6574\u5DE5\u4F5C\u533A\u4FE1\u4EFB",
+      "restricted",
+      "untrust"
+    ],
+    "\u5DE5\u4F5C\u533A\u4FE1\u4EFB",
+    "Workspace trust",
+    "\u67E5\u770B\u6216\u8BBE\u7F6E\u5F53\u524D\u5DE5\u4F5C\u533A trust / restricted / untrusted \u8FB9\u754C\u3002",
+    "Shows or sets workspace trust / restricted / untrusted boundaries.",
+    "\u9700\u8981\u67E5\u770B\u6216\u8C03\u6574\u5F53\u524D\u9879\u76EE\u7684\u4FE1\u4EFB\u72B6\u6001\u3002",
+    "Use for workspace trust state and boundaries.",
+    "start_gate"
+  ),
+  cap(
+    "autopilot",
+    "/autopilot",
+    ["autopilot", "\u6301\u7EED\u63A8\u8FDB", "\u7EE7\u7EED\u505A", "\u4E0D\u7528\u6BCF\u6B65\u90FD\u95EE"],
+    "\u6301\u7EED\u63A8\u8FDB",
+    "Bounded autopilot",
+    "\u57FA\u4E8E\u73B0\u6709 durable job \u542F\u52A8\u6709\u9884\u7B97\u3001\u53EF\u6682\u505C/\u53D6\u6D88\u7684\u6301\u7EED\u63A8\u8FDB\u3002",
+    "Starts bounded progress on existing durable jobs with budgets and pause/cancel controls.",
+    "\u7528\u6237\u660E\u786E\u8981\u6C42\u6301\u7EED\u63A8\u8FDB\u6216\u4E0D\u7528\u6BCF\u6B65\u90FD\u95EE\u3002",
+    "Use only when the user explicitly asks for bounded continued progress.",
+    "start_gate"
+  ),
+  cap(
+    "brief",
+    "/brief",
+    ["brief", "\u7B80\u6D01\u6A21\u5F0F", "quiet mode", "less noise"],
+    "\u7B80\u6D01\u6A21\u5F0F",
+    "Brief mode",
+    "\u5207\u6362 TUI \u7B80\u6D01\u6A21\u5F0F\uFF1A\u6291\u5236 thinking spinner\u3001\u9690\u85CF\u6D41\u5F0F\u9884\u89C8\u3001\u51CF\u5C11\u89C6\u89C9\u566A\u97F3\u3002",
+    "Toggles brief mode: suppresses thinking spinner, hides streaming preview, reduces visual noise.",
+    "\u9700\u8981\u51CF\u5C11 TUI \u8F93\u51FA\u566A\u97F3\u6216\u4E13\u6CE8\u6A21\u5F0F\u3002",
+    "Use to reduce TUI output noise or focus mode.",
+    "readonly",
+    { modelInvocable: false, bridgeSafe: false }
+  ),
+  cap(
+    "plan",
+    "/plan",
+    ["plan", "\u8BA1\u5212", "\u65B9\u6848"],
+    "\u8BA1\u5212\u6A21\u5F0F",
+    "Plan",
+    "\u751F\u6210\u6216\u786E\u8BA4\u7ED3\u6784\u5316\u65B9\u6848\u3002",
+    "Generates or accepts structured plans.",
+    "\u9700\u8981\u5148\u89C4\u5212\u518D\u6267\u884C\u3002",
+    "Use when planning before execution.",
+    "start_gate"
+  ),
+  cap(
+    "permissions",
+    "/permissions",
+    ["permission", "permissions", "\u6743\u9650", "allow", "deny"],
+    "\u6743\u9650\u89C4\u5219",
+    "Permissions",
+    "\u67E5\u770B\u6743\u9650\u89C4\u5219\uFF1B\u589E\u5220\u89C4\u5219\u5FC5\u987B\u8D70\u914D\u7F6E\u5199\u5165/\u5BA1\u6279\u8FB9\u754C\u3002",
+    "Shows permission rules; add/remove follows config-write/approval boundary.",
+    "\u67E5\u770B\u6743\u9650\u3001\u6700\u8FD1\u62D2\u7EDD\u6216\u89C4\u5219\u98CE\u9669\u3002",
+    "Use for permissions, recent denials, and rule risks.",
+    "dangerous",
+    { entersPermissionPipeline: true }
+  ),
+  cap(
+    "background",
+    "/background",
+    ["background", "\u540E\u53F0", "long task", "\u957F\u4EFB\u52A1"],
+    "\u540E\u53F0\u4EFB\u52A1",
+    "Background",
+    "\u67E5\u770B\u540E\u53F0\u4EFB\u52A1\u6458\u8981\u3001\u8F93\u51FA\u8DEF\u5F84\u548C\u53D6\u6D88\u5165\u53E3\u3002",
+    "Shows background task summaries, output paths, and cancellation entry.",
+    "\u8BE2\u95EE\u957F\u4EFB\u52A1\u72B6\u6001\u3001\u65E5\u5FD7\u3001\u53D6\u6D88\u65B9\u5F0F\u3002",
+    "Use for long-task state, logs, and cancel hints.",
+    "readonly",
+    { runtimeStatusSubject: "background" }
+  ),
+  cap(
+    "job",
+    "/job",
+    ["job", "durable job", "\u957F\u671F\u4EFB\u52A1", "\u672C\u5730\u4EFB\u52A1", "\u4EFB\u52A1\u62A5\u544A"],
+    "\u672C\u5730 Job",
+    "Local job",
+    "\u7BA1\u7406\u672C\u5730 durable job \u7684 list/run/pause/resume/cancel/status/logs/report\uFF1B\u590D\u7528\u540E\u53F0\u4EFB\u52A1\u548C evidence \u8FB9\u754C\u3002",
+    "Manages local durable job list/run/pause/resume/cancel/status/logs/report while reusing background-task and evidence boundaries.",
+    "\u67E5\u770B\u6216\u63A7\u5236\u957F\u671F job\u3001\u9884\u7B97\u3001agent \u5206\u914D\u3001\u6682\u505C\u539F\u56E0\u548C\u65E5\u5FD7\u3002",
+    "Use for long-running job state, budget, agent assignment, pause reason, and logs.",
+    "start_gate",
+    { runtimeStatusSubject: "job" }
+  ),
+  cap(
+    "remote",
+    "/remote",
+    ["remote", "\u8FDC\u7A0B", "\u98DE\u4E66", "lark", "feishu", "\u9489\u9489", "dingtalk", "\u4F01\u4E1A\u5FAE\u4FE1", "wecom"],
+    "\u8FDC\u7A0B\u901A\u9053",
+    "Remote channels",
+    "\u8BBE\u7F6E\u3001\u8BCA\u65AD\u6216\u6D4B\u8BD5\u4F01\u4E1A\u5FAE\u4FE1/\u98DE\u4E66/\u9489\u9489\u8FDC\u7A0B\u901A\u9053\uFF1B\u9ED8\u8BA4\u5173\u95ED\uFF0C\u53EA\u53D1\u9001\u8131\u654F\u6458\u8981\u3001\u5BA1\u6279\u8BF7\u6C42\u548C\u7ED3\u679C\u62A5\u544A\u3002",
+    "Sets up, diagnoses, or tests WeCom/Feishu/DingTalk remote channels; disabled by default and sends redacted summaries, approvals, and reports only.",
+    "\u9700\u8981\u8FDE\u63A5\u6216\u6392\u67E5\u8FDC\u7A0B\u901A\u77E5/\u5BA1\u6279\u901A\u9053\u3002",
+    "Use for remote notification/approval setup or diagnostics.",
+    "start_gate"
+  ),
+  cap(
+    "details",
+    "/details",
+    ["details", "\u8BE6\u60C5", "evidence", "\u8BC1\u636E"],
+    "\u8BE6\u60C5",
+    "Details",
+    "\u67E5\u770B evidence\u3001\u540E\u53F0\u4EFB\u52A1\u548C\u88C1\u526A\u8BE6\u60C5\u6458\u8981\uFF0C\u4E0D\u628A\u5927\u8F93\u51FA\u585E\u56DE\u4E3B\u5C4F\u3002",
+    "Shows evidence, background tasks, and trimmed details without dumping large output into the main view.",
+    "\u67E5\u770B\u8BC1\u636E\u3001\u5DE5\u5177\u8BE6\u60C5\u6216\u540E\u53F0\u8BE6\u60C5\u3002",
+    "Use to inspect evidence, tool details, or background details.",
+    "readonly"
+  ),
+  cap(
+    "agents",
+    "/agents",
+    ["agent", "agents", "\u667A\u80FD\u4F53", "subagent", "stop all agents", "\u505C\u6B62\u6240\u6709\u667A\u80FD\u4F53"],
+    "Agent",
+    "Agents",
+    "\u67E5\u770B agent \u72B6\u6001\u3001transcript\u3001usage \u548C\u53D6\u6D88\u5165\u53E3\u3002",
+    "Lists agent state, transcript, usage, and cancel entry.",
+    "\u67E5\u770B\u6216\u89E3\u91CA agent \u72B6\u6001\u3002",
+    "Use to inspect or explain agent state.",
+    "readonly",
+    { runtimeStatusSubject: "agent" }
+  ),
+  cap(
+    "fork",
+    "/fork",
+    ["fork", "\u5F00 agent", "start agent", "verifier agent", "planner agent"],
+    "\u6D3E\u751F Agent",
+    "Fork agent",
+    "\u4ECE\u88C1\u526A handoff \u6D3E\u751F agent\uFF1B\u957F\u4EFB\u52A1\u5FC5\u987B Start Gate\u3002",
+    "Forks an agent from trimmed handoff; long tasks require Start Gate.",
+    "\u60F3\u5F00 explorer/planner/verifier/worker agent\u3002",
+    "Use to start explorer/planner/verifier/worker agents.",
+    "start_gate"
+  ),
+  cap(
+    "rewind",
+    "/rewind",
+    ["rewind", "restore", "\u56DE\u6EDA", "\u6062\u590D\u68C0\u67E5\u70B9"],
+    "\u56DE\u6EDA",
+    "Rewind",
+    "\u5217\u51FA\u6216\u6062\u590D checkpoint\uFF1Brestore \u4E0D\u81EA\u7136\u8BED\u8A00\u76F4\u901A\u3002",
+    "Lists or restores checkpoints; restore is never direct through natural language.",
+    "\u67E5\u770B checkpoint \u6216\u7406\u89E3\u6062\u590D\u98CE\u9669\u3002",
+    "Use for checkpoints and restore risk explanation.",
+    "dangerous"
+  ),
+  // D.13R Git / Worktree / Stable Point Maturity Sweep — 三个只读发现入口。
+  // 与 /index、/cache 同级别 readonly 状态命令；不会执行任何 git mutating 操作。
+  // 真正的 git commit / reset / checkout / worktree add/remove 由用户通过 Bash
+  // 工具触发，走 permission-policy-engine 现有四档权限链（Bash + decidePermission）。
+  cap(
+    "git",
+    "/git",
+    ["git", "git status", "git stable", "git worktree", "\u7A33\u5B9A\u70B9", "stable point"],
+    "Git \u72B6\u6001",
+    "Git status",
+    "\u53EA\u8BFB\u63A2\u6D4B\uFF1A\u5F53\u524D branch\u3001clean/dirty\u3001\u6539\u52A8\u6570\u3001HEAD\u3001\u7A33\u5B9A\u70B9\u5EFA\u8BAE\u3001worktree \u6458\u8981\u3002",
+    "Read-only probe: current branch, clean/dirty, change count, HEAD, stable-point hint, worktree summary.",
+    "\u67E5\u770B git \u72B6\u6001\u3001\u51B3\u5B9A\u8981\u4E0D\u8981\u505A\u7A33\u5B9A\u70B9\u63D0\u4EA4\u3002",
+    "Use to inspect git status and decide whether to record a stable point.",
+    "readonly"
+  ),
+  cap(
+    "worktree",
+    "/worktree",
+    ["worktree", "git worktree", "\u5DE5\u4F5C\u6811"],
+    "Git Worktree",
+    "Git Worktree",
+    "\u53EA\u8BFB\u5217\u51FA git worktree\uFF1Badd/remove/switch \u4E0D\u5728\u6B64\u5904\u6267\u884C\uFF08\u8D70 Bash + \u6743\u9650\uFF09\u3002",
+    "Read-only listing of git worktrees; add/remove/switch are not performed here (use Bash + permission).",
+    "\u67E5\u770B\u5F53\u524D worktree\u3001\u5176\u4ED6 worktree \u5217\u8868\u3002",
+    "Use to inspect current and sibling worktrees.",
+    "readonly"
+  ),
+  cap(
+    "checkpoint",
+    "/checkpoint",
+    ["checkpoint", "snapshot", "stable point", "\u7A33\u5B9A\u70B9", "checkpoint stable"],
+    "Linghun \u5FEB\u7167",
+    "Linghun checkpoint",
+    "\u67E5\u770B Linghun snapshot checkpoint \u5217\u8868\u4E0E stable-point \u5EFA\u8BAE\uFF1B\u4E0D\u662F git reset\u3002",
+    "Inspect Linghun snapshot checkpoints and stable-point hints; not a git reset.",
+    "\u67E5\u770B Linghun \u5185\u90E8\u5FEB\u7167\u6216\u83B7\u53D6\u7A33\u5B9A\u70B9\u5EFA\u8BAE\u3002",
+    "Use to inspect Linghun internal snapshots or get stable-point hints.",
+    "readonly"
+  ),
+  cap(
+    "btw",
+    "/btw",
+    ["btw", "\u4E34\u65F6\u63D2\u95EE", "side question"],
+    "\u4E34\u65F6\u63D2\u95EE",
+    "Temporary question",
+    "\u56DE\u7B54\u4E34\u65F6\u95EE\u9898\uFF0C\u4E0D\u6539 Todo/Plan/checkpoint\u3002",
+    "Answers a side question without changing Todo/Plan/checkpoints.",
+    "\u957F\u4EFB\u52A1\u4E2D\u4E34\u65F6\u95EE\u4E00\u4E2A\u4E0D\u6539\u53D8\u72B6\u6001\u7684\u95EE\u9898\u3002",
+    "Use for a side question that should not alter state.",
+    "readonly"
+  ),
+  cap(
+    "interrupt",
+    "/interrupt",
+    ["interrupt", "cancel", "\u4E2D\u65AD", "\u505C\u6B62"],
+    "\u4E2D\u65AD",
+    "Interrupt",
+    "\u6807\u8BB0\u5F53\u524D\u957F\u4EFB\u52A1\u53D6\u6D88\u3002",
+    "Marks the current long task cancelled.",
+    "\u8981\u4E2D\u65AD\u6B63\u5728\u8FD0\u884C\u7684\u957F\u4EFB\u52A1\u3002",
+    "Use to cancel a running long task.",
+    "start_gate"
+  ),
+  cap(
+    "claim-check",
+    "/claim-check",
+    ["claim", "\u6838\u67E5", "\u8BC1\u636E"],
+    "\u7ED3\u8BBA\u6838\u67E5",
+    "Claim check",
+    "\u964D\u7EA7\u7F3A\u8BC1\u636E\u7ED3\u8BBA\u3002",
+    "Downgrades unsupported claims.",
+    "\u9700\u8981\u6838\u67E5\u56DE\u7B54\u662F\u5426\u6709\u8BC1\u636E\u3002",
+    "Use to check whether a claim has evidence.",
+    "readonly"
+  ),
+  cap(
+    "verify",
+    "/verify",
+    ["verify", "\u9A8C\u8BC1", "test", "typecheck"],
+    "\u9A8C\u8BC1",
+    "Verify",
+    "\u751F\u6210\u6216\u8FD0\u884C\u9A8C\u8BC1\u8BA1\u5212\u3002",
+    "Generates or runs verification.",
+    "\u60F3\u8DD1\u6D4B\u8BD5\u3001typecheck\u3001build \u6216 verifier\u3002",
+    "Use for tests, typecheck, build, or verifier checks.",
+    "start_gate"
+  ),
+  cap(
+    "review",
+    "/review",
+    ["review", "\u4EE3\u7801\u5BA1\u67E5", "\u5BA1\u67E5"],
+    "\u5BA1\u67E5",
+    "Review",
+    "\u5BA1\u67E5 diff\u3001\u98CE\u9669\u548C\u9A8C\u8BC1\u8BC1\u636E\u3002",
+    "Reviews diff, risks, and verification evidence.",
+    "\u60F3\u505A\u4E00\u6B21 review \u6216\u770B\u98CE\u9669\u3002",
+    "Use for review or risk inspection.",
+    "start_gate"
+  ),
+  cap(
+    "commit",
+    "/commit",
+    ["commit", "git commit", "\u63D0\u4EA4"],
+    "\u63D0\u4EA4\u52A9\u624B",
+    "Commit assistant",
+    "\u6A21\u578B\u9A71\u52A8\u68C0\u67E5 diff \u5E76\u51C6\u5907\u63D0\u4EA4\u8BA1\u5212\u3002",
+    "Model-driven diff review and commit planning.",
+    "\u60F3\u68C0\u67E5\u5F53\u524D\u6539\u52A8\u5E76\u51C6\u5907\u63D0\u4EA4\u3002",
+    "Use to inspect current changes and prepare a commit.",
+    "start_gate",
+    { modelInvocable: true }
+  ),
+  cap(
+    "init",
+    "/init",
+    ["init", "\u521D\u59CB\u5316", "\u9879\u76EE\u8BF4\u660E"],
+    "\u521D\u59CB\u5316\u9879\u76EE\u8BF4\u660E",
+    "Init project instructions",
+    "\u6A21\u578B\u9A71\u52A8\u63A2\u7D22\u9879\u76EE\u5E76\u8349\u62DF Linghun \u9879\u76EE\u8BF4\u660E\u3002",
+    "Model-driven project exploration and instruction drafting.",
+    "\u9700\u8981\u521D\u59CB\u5316\u9879\u76EE\u89C4\u5219\u6216\u8BF4\u660E\u6587\u4EF6\u3002",
+    "Use to initialize project rules or instruction files.",
+    "start_gate",
+    { modelInvocable: true }
+  ),
+  cap(
+    "security-review",
+    "/security-review",
+    ["security review", "\u5B89\u5168\u5BA1\u67E5", "\u5B89\u5168"],
+    "\u5B89\u5168\u5BA1\u67E5",
+    "Security review",
+    "\u6A21\u578B\u9A71\u52A8\u5BA1\u67E5 diff \u4E2D\u7684\u5B89\u5168\u98CE\u9669\u3002",
+    "Model-driven security review of the current diff.",
+    "\u9700\u8981\u68C0\u67E5\u6CE8\u5165\u3001XSS\u3001RCE\u3001\u9274\u6743\u6216\u5BC6\u94A5\u6CC4\u6F0F\u98CE\u9669\u3002",
+    "Use to check injection, XSS, RCE, auth, or secret leakage risks.",
+    "start_gate",
+    { modelInvocable: true }
+  ),
+  cap(
+    "commit-push-pr",
+    "/commit-push-pr",
+    ["commit push pr", "pr", "pull request"],
+    "\u63D0\u4EA4\u63A8\u9001 PR",
+    "Commit, push, PR",
+    "\u6A21\u578B\u9A71\u52A8\u5206\u652F\u3001\u63D0\u4EA4\u3001\u63A8\u9001\u4E0E PR \u521B\u5EFA\u6D41\u7A0B\u3002",
+    "Model-driven branch, commit, push, and PR flow.",
+    "\u9700\u8981\u628A\u5F53\u524D\u6539\u52A8\u6574\u7406\u6210 PR\u3002",
+    "Use to package current changes into a PR.",
+    "start_gate",
+    { modelInvocable: true }
+  ),
+  cap(
+    "init-verifiers",
+    "/init-verifiers",
+    ["init verifiers", "\u9A8C\u8BC1\u5668", "verification setup"],
+    "\u521D\u59CB\u5316\u9A8C\u8BC1\u5668",
+    "Init verifiers",
+    "\u6A21\u578B\u9A71\u52A8\u53D1\u73B0\u9879\u76EE\u9A8C\u8BC1\u547D\u4EE4\u5E76\u8349\u62DF\u9A8C\u8BC1\u5668\u8BF4\u660E\u3002",
+    "Model-driven verifier discovery and instruction drafting.",
+    "\u9700\u8981\u5EFA\u7ACB\u9879\u76EE\u9A8C\u8BC1\u5165\u53E3\u6216 verifier \u8BF4\u660E\u3002",
+    "Use to set up project verification entries or verifier instructions.",
+    "start_gate",
+    { modelInvocable: true }
+  ),
+  cap(
+    "cache-log",
+    "/cache-log",
+    ["cache log", "\u7F13\u5B58\u65E5\u5FD7"],
+    "\u7F13\u5B58\u65E5\u5FD7",
+    "Cache log",
+    "\u67E5\u770B\u6216\u5BFC\u51FA\u6700\u8FD1 cache usage \u8BB0\u5F55\u3002",
+    "Shows or exports recent cache usage records.",
+    "\u9700\u8981\u5BF9\u8D26 cache usage \u6216\u5BFC\u51FA\u65E5\u5FD7\u3002",
+    "Use for cache usage reconciliation or export.",
+    "config_write",
+    { writesConfig: true }
+  ),
+  cap(
+    "cache",
+    "/cache",
+    ["cache", "\u7F13\u5B58", "hit rate", "cache hit rate", "\u547D\u4E2D\u7387"],
+    "\u7F13\u5B58",
+    "Cache",
+    "\u67E5\u770B cache \u547D\u4E2D\u7387\u4E0E freshness\uFF1Brefresh \u9700\u786E\u8BA4\u3002",
+    "Shows cache hit rate and freshness; refresh needs confirmation.",
+    "\u8BE2\u95EE\u7F13\u5B58\u547D\u4E2D\u7387\u3001\u9884\u70ED\u6216\u5237\u65B0\u3002",
+    "Use for cache hit rate, warmup, or refresh.",
+    "start_gate"
+  ),
+  cap(
+    "compact",
+    "/compact",
+    ["compact", "\u538B\u7F29", "\u4E0A\u4E0B\u6587\u538B\u7F29", "microcompact"],
+    "\u4E0A\u4E0B\u6587\u538B\u7F29",
+    "Compact",
+    "\u67E5\u770B\u6216\u6267\u884C\u53D7\u63A7 Context Compact\uFF1Aprovider \u8BF7\u6C42\u524D\u53EF\u5199\u5165\u8131\u654F\u6458\u8981\u548C\u8FB9\u754C\uFF0C\u4E0D\u6267\u884C\u5DE5\u5177\u3001\u4E0D\u5199\u9879\u76EE\u6587\u4EF6\u3001\u4E0D\u5199\u957F\u671F\u8BB0\u5FC6\u3002",
+    "Shows or runs controlled Context Compact: provider preflight can inject a redacted summary and boundary; no tools, project file writes, or long-term memory writes.",
+    "\u9700\u8981\u67E5\u770B\u4E0A\u4E0B\u6587\u538B\u529B\u3001\u538B\u7F29\u6458\u8981\u3001pairing \u5B89\u5168\u6216 compact \u8FB9\u754C\u3002",
+    "Use for context pressure, compact summary, pairing safety, or compact boundary status.",
+    "readonly"
+  ),
+  cap(
+    "break-cache",
+    "/break-cache",
+    ["break cache", "freshness", "\u7F13\u5B58\u7834\u574F"],
+    "\u7F13\u5B58\u7834\u574F\u8BCA\u65AD",
+    "Break-cache",
+    "\u67E5\u770B cache freshness hash \u53D8\u5316\u3002",
+    "Shows cache freshness hash changes.",
+    "\u6392\u67E5\u4E3A\u4EC0\u4E48\u7F13\u5B58\u547D\u4E2D\u4E0B\u964D\u3002",
+    "Use to diagnose cache hit-rate drops.",
+    "readonly"
+  ),
+  cap(
+    "mcp",
+    "/mcp",
+    ["mcp", "server", "tools"],
+    "MCP",
+    "MCP",
+    "\u67E5\u770B MCP server \u72B6\u6001\u548C\u7A33\u5B9A\u5DE5\u5177\u6458\u8981\u3002",
+    "Shows MCP server status and stable tool summaries.",
+    "\u8BE2\u95EE MCP \u662F\u5426\u53EF\u7528\u6216\u6709\u54EA\u4E9B\u5DE5\u5177\u3002",
+    "Use for MCP availability and tool summaries.",
+    "readonly"
+  ),
+  cap(
+    "index",
+    "/index",
+    [
+      "index",
+      "\u7D22\u5F15",
+      "codebase",
+      "architecture",
+      "search code",
+      "build index",
+      "\u66F4\u65B0\u7D22\u5F15",
+      "\u5237\u65B0\u7D22\u5F15",
+      "\u91CD\u5EFA\u7D22\u5F15"
+    ],
+    "\u4EE3\u7801\u7D22\u5F15",
+    "Index",
+    "status/search/architecture \u4E3A\u53EA\u8BFB\uFF1Binit fast/refresh \u662F\u5E26\u5B89\u5168\u626B\u63CF\u7684\u672C\u5730\u5B89\u5168\u52A8\u4F5C\uFF1Brebuild/force \u9700\u8981\u7CBE\u786E\u786E\u8BA4\u3002",
+    "Status/search/architecture are read-only; init fast/refresh are safe local actions with a safety scan; rebuild/force requires exact confirmation.",
+    "\u8BE2\u95EE\u53EA\u8BFB\u7D22\u5F15\u72B6\u6001\u3001\u641C\u7D22\u4EE3\u7801\u3001\u67B6\u6784\u6458\u8981\uFF1B\u666E\u901A init fast/refresh \u53EF\u5B89\u5168\u6267\u884C\uFF0C\u91CD\u5EFA\u6216 force \u9700\u7CBE\u786E\u786E\u8BA4\u3002",
+    "Use for read-only index status/search/architecture; normal init fast/refresh can run safely, while rebuild or force needs exact confirmation.",
+    "start_gate"
+  ),
+  cap(
+    "usage",
+    "/usage",
+    ["usage", "token", "tokens", "\u7528\u91CF"],
+    "\u7528\u91CF",
+    "Usage",
+    "\u67E5\u770B token/cache usage \u6458\u8981\u3002",
+    "Shows token/cache usage summary.",
+    "\u8BE2\u95EE token\u3001usage \u6216\u8D26\u5355\u53E3\u5F84\u3002",
+    "Use for token/cache usage questions.",
+    "readonly"
+  ),
+  cap(
+    "stats",
+    "/stats",
+    ["stats", "statistics", "\u7EDF\u8BA1"],
+    "\u7EDF\u8BA1",
+    "Stats",
+    "\u67E5\u770B\u672C\u5730 cache/cost \u7EDF\u8BA1\u3002",
+    "Shows local cache/cost statistics.",
+    "\u67E5\u770B\u603B\u4F53\u7EDF\u8BA1\u6216 endpoint \u805A\u5408\u3002",
+    "Use for overall stats or endpoint grouping.",
+    "readonly"
+  ),
+  cap(
+    "read",
+    "/read",
+    [
+      "read",
+      "\u8BFB\u53D6",
+      "\u770B\u6587\u4EF6",
+      "open file",
+      "\u9879\u76EE\u89C4\u5219",
+      "\u672C\u4ED3\u5E93\u89C4\u5219",
+      "linghun.md",
+      "project rules"
+    ],
+    "\u8BFB\u53D6\u6587\u4EF6",
+    "Read file",
+    "\u8BFB\u53D6\u6587\u4EF6\u5185\u5BB9\u3002",
+    "Reads file content.",
+    "\u81EA\u7136\u8BED\u8A00\u8BE2\u95EE\u600E\u4E48\u770B\u6587\u4EF6\u65F6\u89E3\u91CA\uFF1B\u9879\u76EE\u89C4\u5219\u8BFB\u53D6\u8D70\u53EA\u8BFB\u8DEF\u5F84\u3002",
+    "Explain file reading; project-rules reads use a read-only path.",
+    "tool_permission",
+    { entersPermissionPipeline: true }
+  ),
+  cap(
+    "write",
+    "/write",
+    ["write", "\u5199\u6587\u4EF6", "create file"],
+    "\u5199\u6587\u4EF6",
+    "Write file",
+    "\u5199\u5165\u6587\u4EF6\uFF0C\u5FC5\u987B\u8D70\u6743\u9650\u7BA1\u9053\u3002",
+    "Writes files through the permission pipeline.",
+    "\u53EA\u7528\u4E8E\u89E3\u91CA\u98CE\u9669\u6216\u663E\u5F0F slash \u547D\u4EE4\uFF1B\u81EA\u7136\u8BED\u8A00\u4E0D\u80FD\u76F4\u901A\u3002",
+    "Use only for risk explanation or explicit slash commands; no natural direct execution.",
+    "dangerous",
+    { entersPermissionPipeline: true }
+  ),
+  cap(
+    "edit",
+    "/edit",
+    ["edit", "\u4FEE\u6539", "replace"],
+    "\u7F16\u8F91",
+    "Edit",
+    "\u552F\u4E00\u66FF\u6362\u7F16\u8F91\uFF0C\u5FC5\u987B\u8D70\u6743\u9650\u7BA1\u9053\u3002",
+    "Performs unique replacement edits through the permission pipeline.",
+    "\u53EA\u7528\u4E8E\u89E3\u91CA\u7F16\u8F91\u98CE\u9669\u6216\u663E\u5F0F slash \u547D\u4EE4\u3002",
+    "Use only to explain edit risk or explicit slash commands.",
+    "dangerous",
+    { entersPermissionPipeline: true }
+  ),
+  cap(
+    "multiedit",
+    "/multiedit",
+    ["multiedit", "multi edit", "\u6279\u91CF\u7F16\u8F91"],
+    "\u6279\u91CF\u7F16\u8F91",
+    "MultiEdit",
+    "\u591A\u5904\u7F16\u8F91\uFF0C\u5FC5\u987B\u8D70\u6743\u9650\u7BA1\u9053\u3002",
+    "Performs multiple edits through the permission pipeline.",
+    "\u53EA\u7528\u4E8E\u89E3\u91CA\u6279\u91CF\u7F16\u8F91\u98CE\u9669\u6216\u663E\u5F0F slash \u547D\u4EE4\u3002",
+    "Use only to explain multi-edit risk or explicit slash commands.",
+    "dangerous",
+    { entersPermissionPipeline: true }
+  ),
+  cap(
+    "grep",
+    "/grep",
+    ["grep", "search", "\u641C\u7D22", "\u67E5\u627E", "TODO"],
+    "\u641C\u7D22\u6587\u672C",
+    "Search text",
+    "\u641C\u7D22\u6587\u672C\u5339\u914D\u3002",
+    "Searches text matches.",
+    "\u60F3\u641C\u7D22\u4EE3\u7801\u3001TODO \u6216\u9519\u8BEF\u4FE1\u606F\u3002",
+    "Use to search code, TODOs, or error messages.",
+    "tool_permission",
+    { entersPermissionPipeline: true }
+  ),
+  cap(
+    "glob",
+    "/glob",
+    ["glob", "find files", "\u5339\u914D\u6587\u4EF6", "\u6587\u4EF6\u5217\u8868", "\u6309\u6A21\u5F0F\u627E\u6587\u4EF6", "\u6A21\u5F0F\u627E\u6587\u4EF6"],
+    "\u5339\u914D\u6587\u4EF6",
+    "Match files",
+    "\u6309 glob \u5339\u914D\u6587\u4EF6\u8DEF\u5F84\u3002",
+    "Matches file paths by glob.",
+    "\u60F3\u627E\u6587\u4EF6\u540D\u6216\u6309\u6A21\u5F0F\u5217\u6587\u4EF6\u3002",
+    "Use to find files by name or pattern.",
+    "tool_permission",
+    { entersPermissionPipeline: true }
+  ),
+  cap(
+    "bash",
+    "/bash",
+    ["bash", "run command", "\u8FD0\u884C\u547D\u4EE4", "npm install", "install dependency"],
+    "Shell \u547D\u4EE4",
+    "Shell command",
+    "\u6267\u884C shell \u547D\u4EE4\uFF0C\u5FC5\u987B\u6743\u9650\u5BA1\u6279\u3002",
+    "Runs shell commands through approval.",
+    "\u81EA\u7136\u8BED\u8A00\u53EA\u80FD\u89E3\u91CA\u98CE\u9669\u548C\u5BA1\u6279\u8981\u6C42\uFF0C\u4E0D\u80FD\u76F4\u901A\u6267\u884C\u3002",
+    "Natural language may only explain risk and approval requirements.",
+    "dangerous",
+    { entersPermissionPipeline: true }
+  ),
+  cap(
+    "todo",
+    "/todo",
+    ["todo", "\u4EFB\u52A1", "task list"],
+    "\u4EFB\u52A1",
+    "Todo",
+    "\u67E5\u770B\u6216\u66F4\u65B0\u4F1A\u8BDD\u4EFB\u52A1\u5217\u8868\u3002",
+    "Shows or updates the session task list.",
+    "\u9700\u8981\u53EF\u89C1\u4EFB\u52A1\u8FDB\u5EA6\u3002",
+    "Use for visible task progress.",
+    "start_gate"
+  ),
+  cap(
+    "diff",
+    "/diff",
+    ["diff", "changed files", "\u5DEE\u5F02", "\u6539\u52A8"],
+    "Diff",
+    "Diff",
+    "\u663E\u793A\u672C\u8F6E\u5DE5\u5177\u6539\u52A8\u6458\u8981\u3002",
+    "Shows current tool-change summary.",
+    "\u60F3\u770B\u6539\u4E86\u4EC0\u4E48\u6216 show me the diff\u3002",
+    "Use to inspect current changes.",
+    "readonly"
+  ),
+  cap(
+    "exit",
+    "/exit",
+    ["exit", "quit", "\u9000\u51FA"],
+    "\u9000\u51FA",
+    "Exit",
+    "\u9000\u51FA REPL\u3002",
+    "Exits the REPL.",
+    "\u9700\u8981\u7ED3\u675F\u5F53\u524D REPL\u3002",
+    "Use to end the REPL.",
+    "start_gate"
+  ),
+  cap(
+    "config",
+    "/config",
+    ["config", "\u914D\u7F6E", "settings", "\u8BBE\u7F6E", "configuration"],
+    "\u914D\u7F6E\u6982\u89C8",
+    "Config overview",
+    "\u6982\u89C8\u5F53\u524D model/permission/language/index/MCP/memory/cache/background/remote/hooks/plugins/skills/workflows \u7684\u73B0\u72B6\u4E0E\u4E0B\u4E00\u6B65\u3002",
+    "Shows the current state and next actions for model/permission/language/index/MCP/memory/cache/background/remote/hooks/plugins/skills/workflows.",
+    "\u60F3\u4E00\u6B21\u770B\u6E05\u695A LingHun \u7684\u5F53\u524D\u914D\u7F6E\u6001\u52BF\u3002",
+    "Use when surveying current LingHun configuration posture.",
+    "readonly"
+  ),
+  cap(
+    "status",
+    "/status",
+    ["status", "\u72B6\u6001\u680F"],
+    "\u72B6\u6001\u680F",
+    "Status",
+    "\u5185\u90E8\u72B6\u6001\u680F\u8F93\u51FA\u5165\u53E3\u3002",
+    "Internal status-bar output entry.",
+    "\u901A\u5E38\u7531\u7CFB\u7EDF\u81EA\u52A8\u8F93\u51FA\uFF1B\u53EF\u7528\u4E8E\u8C03\u8BD5\u77ED\u72B6\u6001\u3002",
+    "Usually emitted automatically; useful for short status debugging.",
+    "readonly",
+    {
+      hiddenReason: "not listed in /help; status bar is emitted automatically",
+      runtimeStatusSubject: "current_work"
+    }
+  ),
+  cap(
+    "shortcuts",
+    "/shortcuts",
+    ["shortcuts", "\u5FEB\u6377\u952E", "keybindings", "keys", "bindings"],
+    "\u5FEB\u6377\u952E",
+    "Shortcuts",
+    "\u663E\u793A\u5F53\u524D\u53EF\u7528\u7684\u952E\u76D8\u5FEB\u6377\u952E\u3002",
+    "Shows available keyboard shortcuts.",
+    "\u60F3\u67E5\u770B\u5FEB\u6377\u952E\u6216\u4E0D\u8BB0\u5F97\u67D0\u4E2A\u7ED1\u5B9A\u3002",
+    "Use when looking up keybindings or a forgotten shortcut.",
+    "readonly",
+    { group: "diagnostics" }
+  ),
+  cap(
+    "terminal-setup",
+    "/terminal-setup",
+    ["terminal-setup", "\u7EC8\u7AEF\u914D\u7F6E", "terminal setup", "keybinding config"],
+    "\u7EC8\u7AEF\u914D\u7F6E",
+    "Terminal setup",
+    "\u68C0\u6D4B\u7EC8\u7AEF\u73AF\u5883\u5E76\u8F93\u51FA\u914D\u7F6E\u5EFA\u8BAE\u3002",
+    "Detects terminal environment and outputs configuration guidance.",
+    "\u7EC8\u7AEF\u884C\u4E3A\u5F02\u5E38\u6216\u9700\u8981\u914D\u7F6E\u5FEB\u6377\u952E\u3002",
+    "Use when terminal behavior is unexpected or keybindings need configuring.",
+    "readonly",
+    { group: "diagnostics" }
+  )
+];
+var _sortedCatalogCache;
+function getCommandCapabilityCatalog() {
+  if (!_sortedCatalogCache) {
+    _sortedCatalogCache = [...COMMAND_CAPABILITY_DATA].sort(
+      (a, b) => a.slash.localeCompare(b.slash) || a.id.localeCompare(b.id)
+    );
+  }
+  return [..._sortedCatalogCache];
+}
+function validateCommandCapabilityCoverage(dispatchSlashes = USER_VISIBLE_SLASH_COMMANDS) {
+  const catalog = getCommandCapabilityCatalog();
+  const registry = SLASH_COMMAND_REGISTRY;
+  const missingFromRegistry = dispatchSlashes.filter(
+    (slash) => !registry.some((item) => item.slash === slash && item.userVisible)
+  );
+  const missingFromCatalog = dispatchSlashes.filter((slash) => {
+    const entry = registry.find((item) => item.slash === slash && item.userVisible);
+    return !entry || !catalog.some((item) => item.id === entry.capabilityId && item.userInvocable);
+  });
+  const registryWithoutCatalog = registry.filter(
+    (entry) => !catalog.some((item) => item.id === entry.capabilityId)
+  );
+  const invalidHidden = catalog.filter((item) => item.hiddenReason !== void 0 && item.hiddenReason.trim() === "").map((item) => item.id);
+  return [
+    ...missingFromRegistry.map((slash) => `dispatch missing registry ${slash}`),
+    ...missingFromCatalog.map((slash) => `dispatch missing catalog ${slash}`),
+    ...registryWithoutCatalog.map((entry) => `registry missing catalog ${entry.slash}`),
+    ...invalidHidden.map((id) => `hidden reason missing ${id}`)
+  ];
+}
+function inferCommandGroup(id, slash) {
+  if (["read", "write", "edit", "multiedit", "grep", "glob", "bash", "todo", "diff"].includes(id)) {
+    return "edit";
+  }
+  if (["index", "mcp"].includes(id)) {
+    return "index-mcp";
+  }
+  if (["memory", "permissions"].includes(id)) {
+    return "memory-rules";
+  }
+  if (["agents", "fork", "background", "job", "remote", "sessions", "resume", "branch"].includes(id)) {
+    return "agents-jobs";
+  }
+  if ([
+    "readiness",
+    "problems",
+    "details",
+    "verify",
+    "review",
+    "cache",
+    "cache-log",
+    "break-cache",
+    "usage",
+    "stats",
+    "claim-check",
+    "hooks",
+    "rewind",
+    // D.13R: git readiness 的三个只读发现入口归到 diagnostics 组，
+    // 与 /cache、/cache-log 同级（status 类只读命令）。
+    "git",
+    "worktree",
+    "checkpoint"
+  ].includes(id)) {
+    return "diagnostics";
+  }
+  if (slash === "/exit") {
+    return "exit";
+  }
+  return "core";
+}
+function getUserVisibleCommandCapabilities() {
+  const visible = new Set(
+    SLASH_COMMAND_REGISTRY.filter((item) => item.userVisible).map((item) => item.capabilityId)
+  );
+  return getCommandCapabilityCatalog().filter(
+    (item) => visible.has(item.id) && item.userInvocable && !item.hiddenReason
+  );
+}
+function buildRuntimeStatusForModel(context) {
+  const latest = context.cache.history.at(-1);
+  const freshness = latest?.freshness ?? context.cache.lastFreshness;
+  return {
+    memory: {
+      linghunMd: context.memory.projectRulesError ? "unreadable" : context.memory.projectRulesExists ? "found" : "missing",
+      candidates: context.memory.candidates.length,
+      accepted: context.memory.accepted.length,
+      autoAccept: false
+    },
+    index: {
+      status: context.index.status,
+      projectName: context.index.projectName ?? null,
+      changedFiles: context.index.changedFiles ?? null
+    },
+    cache: {
+      latestHitRate: latest?.hitRate ?? null,
+      changedKeys: (freshness?.changedKeys ?? []).slice(0, 8)
+    },
+    model: { provider: context.provider ?? "unknown", name: context.model },
+    permissionMode: context.permissionMode,
+    extensions: {
+      skills: { enabled: context.skills.enabled, count: context.skills.skills.length },
+      plugins: { enabled: context.plugins.enabled, count: context.plugins.plugins.length },
+      hooks: { enabled: context.hooks.enabled, count: context.hooks.hooks.length }
+    }
+  };
+}
+var _capabilitySummaryCache = /* @__PURE__ */ new Map();
+function createModelCapabilitySummary(limit = 30) {
+  const cached = _capabilitySummaryCache.get(limit);
+  if (cached !== void 0) return cached;
+  const result = getCommandCapabilityCatalog().filter((item) => item.modelInvocable || item.bridgeSafe).slice(0, limit).map((item) => `${item.slash} ${item.titleEn}: risk ${item.risk}; ${item.whenToUseEn}`).join("\n");
+  _capabilitySummaryCache.set(limit, result);
+  return result;
+}
+function routeNaturalIntent(text, preferredLanguage = "zh-CN") {
+  const language = detectInputLanguage(text, preferredLanguage);
+  const normalized = normalizeIntentText(text);
+  const mentionedSlash = /\/[a-z-]+/iu.exec(text)?.[0];
+  const catalog = getCommandCapabilityCatalog();
+  const explicit = mentionedSlash ? findExplicitSlashCapability(catalog, mentionedSlash, normalized) : void 0;
+  const classification = classifyNaturalControlIntent(normalized);
+  const inquiry = classification.inquiry;
+  const dangerous = classification.dangerousReason;
+  const scored = catalog.map((capability2) => ({ capability: capability2, score: scoreCapability(capability2, normalized, text) })).filter((item) => item.score > 0).sort((a, b) => b.score - a.score || a.capability.slash.localeCompare(b.capability.slash));
+  let scoredAdjusted = scored;
+  if (!explicit && inquiry === "doctor" && scored.length >= 2 && scored[0]?.capability.id === "config") {
+    const doctorTarget = scored.find(
+      (item) => isFirstBatchStatusCapability(item.capability.id) && scored[0] !== void 0 && scored[0].score - item.score < 1.5
+    );
+    if (doctorTarget) {
+      scoredAdjusted = [
+        doctorTarget,
+        ...scored.filter((item) => item.capability.id !== doctorTarget.capability.id)
+      ];
+    }
+  }
+  const candidates = uniqueCapabilities([
+    ...explicit ? [explicit] : [],
+    ...scoredAdjusted.map((item) => item.capability)
+  ]).slice(0, 5);
+  const capability = explicit ?? candidates[0];
+  const topScore = explicit ? Math.max(8, scoredAdjusted[0]?.score ?? 0) : scoredAdjusted[0]?.score ?? 0;
+  const secondScore = scoredAdjusted[1]?.score ?? 0;
+  const currentWorkCapability = findCurrentWorkStatusCapability(catalog, normalized, inquiry);
+  if (!explicit && currentWorkCapability) {
+    return createIntent(
+      "execute_readonly",
+      currentWorkCapability,
+      0.9,
+      "current work runtime status",
+      uniqueCapabilities([currentWorkCapability, ...candidates]),
+      language,
+      inquiry,
+      normalized
+    );
+  }
+  if (!capability) {
+    return {
+      action: "model",
+      confidence: 0,
+      reason: "no catalog match",
+      candidates: [],
+      language,
+      inquiry,
+      runtimeIntent: extractRuntimeIntent(void 0, inquiry),
+      riskHandler: "model"
+    };
+  }
+  if (inquiry === "status" && isFirstBatchStatusCapability(capability.id)) {
+    return createIntent(
+      "execute_readonly",
+      capability,
+      Math.min(1, Math.max(0.7, topScore / 5)),
+      "readonly status",
+      candidates,
+      language,
+      inquiry,
+      normalized
+    );
+  }
+  if (inquiry === "doctor" && isFirstBatchStatusCapability(capability.id)) {
+    return createIntent(
+      "execute_readonly",
+      capability,
+      Math.min(1, Math.max(0.75, topScore / 5)),
+      "readonly doctor",
+      candidates,
+      language,
+      inquiry,
+      normalized
+    );
+  }
+  if (inquiry === "read" && capability.id === "read") {
+    return createIntent(
+      "execute_readonly",
+      capability,
+      Math.min(1, Math.max(0.75, topScore / 5)),
+      "readonly project rules",
+      candidates,
+      language,
+      inquiry,
+      normalized
+    );
+  }
+  if (!explicit && isMcpIndexControlRequest(normalized, capability.id)) {
+    return createIntent(
+      "answer",
+      capability,
+      Math.min(1, Math.max(0.82, topScore / 5)),
+      "mcp index control plane handled locally",
+      candidates,
+      language,
+      "usage",
+      normalized
+    );
+  }
+  if (!explicit && capability.id === "index" && classification.indexAction === "rebuild") {
+    return createIntent(
+      "start_gate",
+      capability,
+      Math.min(1, Math.max(0.85, topScore / 5)),
+      "rebuild index requires exact confirmation",
+      candidates,
+      language,
+      "execute",
+      normalized
+    );
+  }
+  if (capability.id === "mode" && extractPermissionMode(normalized) === "full-access") {
+    return createIntent(
+      "start_gate",
+      capability,
+      0.95,
+      "full-access requires exact confirmation",
+      candidates,
+      language,
+      "execute",
+      normalized
+    );
+  }
+  if (dangerous && isDangerousNaturalTarget(capability.id)) {
+    return createIntent(
+      "permission_pipeline",
+      capability,
+      0.92,
+      dangerous,
+      candidates,
+      language,
+      "execute",
+      normalized
+    );
+  }
+  if (!explicit && capability.id === "index" && !["usage", "risk"].includes(inquiry) && classification.indexAction === "safe") {
+    return createIntent(
+      "safe_local_action",
+      capability,
+      Math.min(1, Math.max(0.8, topScore / 5)),
+      "safe local index action",
+      candidates,
+      language,
+      "execute",
+      normalized
+    );
+  }
+  if (!explicit && capability.id === "agents" && isAgentCancelIntent(normalized)) {
+    return createIntent(
+      "start_gate",
+      capability,
+      Math.min(1, Math.max(0.85, topScore / 5)),
+      "agent cancel requires confirmation",
+      candidates,
+      language,
+      "execute",
+      normalized
+    );
+  }
+  if (!explicit && !isNaturalControlPlaneIntent(capability.id, normalized, inquiry)) {
+    return {
+      action: "model",
+      confidence: Math.min(1, topScore / 5),
+      reason: "ordinary development request",
+      candidates,
+      language,
+      inquiry,
+      runtimeIntent: extractRuntimeIntent(void 0, inquiry),
+      riskHandler: "model"
+    };
+  }
+  if (!explicit && ["autopilot", "job", "background"].includes(capability.id) && topScore >= 5) {
+    const action = capability.id === "autopilot" ? "start_gate" : "execute_readonly";
+    return createIntent(
+      action,
+      capability,
+      Math.min(1, topScore / 8),
+      `${capability.id} natural route`,
+      candidates,
+      language,
+      inquiry,
+      normalized
+    );
+  }
+  if (!explicit && topScore < 2.2) {
+    return createIntent(
+      "ask_clarify",
+      capability,
+      topScore / 5,
+      "low confidence",
+      candidates,
+      language,
+      inquiry,
+      normalized
+    );
+  }
+  if (!explicit && candidates.length > 1 && Math.abs(topScore - secondScore) < 0.6) {
+    return createIntent(
+      "ask_clarify",
+      capability,
+      topScore / 6,
+      "multiple close candidates",
+      candidates,
+      language,
+      inquiry,
+      normalized
+    );
+  }
+  if (!explicit && isAmbiguousCapabilityList(normalized, candidates)) {
+    return createIntent(
+      "ask_clarify",
+      capability,
+      Math.min(0.8, topScore / 6),
+      "ambiguous capability list",
+      candidates,
+      language,
+      inquiry,
+      normalized
+    );
+  }
+  if (isUsageOrRiskQuestion(normalized, inquiry) || explicit) {
+    return createIntent(
+      "answer",
+      capability,
+      1,
+      "catalog question",
+      candidates,
+      language,
+      inquiry,
+      normalized
+    );
+  }
+  if (capability.readonly && isStatusLike(normalized, capability)) {
+    return createIntent(
+      "execute_readonly",
+      capability,
+      Math.min(1, topScore / 5),
+      "readonly status",
+      candidates,
+      language,
+      inquiry,
+      normalized
+    );
+  }
+  if (capability.risk === "dangerous") {
+    return createIntent(
+      "permission_pipeline",
+      capability,
+      Math.min(1, topScore / 5),
+      "dangerous natural language cannot execute directly",
+      candidates,
+      language,
+      "execute",
+      normalized
+    );
+  }
+  return createIntent(
+    "start_gate",
+    capability,
+    Math.min(1, topScore / 5),
+    capability.risk === "tool_permission" ? "tool permission path requires confirmation" : "start gate required",
+    candidates,
+    language,
+    "execute",
+    normalized
+  );
+}
+function formatNaturalClarification(intent) {
+  const zh = intent.language === "zh-CN";
+  const lines = zh ? ["\u6211\u4E0D\u786E\u5B9A\u4F60\u60F3\u505A\u54EA\u4EF6\u4E8B\u3002\u8BF7\u9009\u62E9\u4E00\u4E2A\u81EA\u7136\u8BED\u8A00\u65B9\u5411\uFF1A"] : ["I am not sure which action you want. Please choose one natural-language direction:"];
+  for (const item of intent.candidates.slice(0, 3)) {
+    const title = zh ? item.titleZh : item.titleEn;
+    const when = zh ? item.whenToUseZh : item.whenToUseEn;
+    const risk = formatHumanRisk(item, intent.language);
+    lines.push(
+      zh ? `- \u67E5\u770B/\u5904\u7406\u300C${title}\u300D\uFF1A${when} \u98CE\u9669\uFF1A${risk}` : `- View/handle ${title}: ${when} Risk: ${risk}`
+    );
+  }
+  lines.push(
+    zh ? "\u5982\u679C\u4F60\u53EA\u662F\u60F3\u804A\u5929\u6216\u8BF4\u660E\u9700\u6C42\uFF0C\u53EF\u4EE5\u76F4\u63A5\u8865\u5145\u4E00\u53E5\u76EE\u6807\uFF1B\u6211\u4E0D\u4F1A\u731C\u6D4B\u6267\u884C\u3002" : "If you only want to chat or describe a task, add the goal in plain language; I will not guess and execute."
+  );
+  return lines.join("\n");
+}
+function formatCapabilityAnswer(intent) {
+  const c = intent.capability;
+  if (!c) return "";
+  const zh = intent.language === "zh-CN";
+  const description = zh ? c.descriptionZh : c.descriptionEn;
+  const when = zh ? c.whenToUseZh : c.whenToUseEn;
+  const risk = formatRiskLine(c, intent.language);
+  const equivalent = intent.command ?? createNaturalEquivalentCommand(c, "");
+  return zh ? [
+    `${c.slash}\uFF1A${c.titleZh}`,
+    `- \u7528\u9014\uFF1A${description}`,
+    `- \u4F55\u65F6\u4F7F\u7528\uFF1A${when}`,
+    `- \u98CE\u9669\uFF1A${risk}`,
+    `- \u7B49\u4EF7\u547D\u4EE4\uFF1A${equivalent}`,
+    `- \u81EA\u7136\u8BED\u8A00\u6865\uFF1A${c.bridgeSafe ? "\u53EF\u89E3\u91CA/\u53EF\u8FDB\u5165\u5B89\u5168\u8DEF\u5F84" : "\u4E0D\u53EF\u76F4\u901A"}`
+  ].join("\n") : [
+    `${c.slash}: ${c.titleEn}`,
+    `- Purpose: ${description}`,
+    `- When to use: ${when}`,
+    `- Risk: ${risk}`,
+    `- Equivalent command: ${equivalent}`,
+    `- Natural bridge: ${c.bridgeSafe ? "can explain / enter safe path" : "not direct"}`
+  ].join("\n");
+}
+function formatNaturalPermissionBlock(intent) {
+  const c = intent.capability;
+  if (!c) return "";
+  const command = intent.command ?? createNaturalEquivalentCommand(c, "");
+  if (intent.language === "en-US") {
+    return [
+      `Blocked natural-language direct execution: ${c.titleEn}`,
+      `- Exact action: ${command}`,
+      `- Risk: ${formatHumanRisk(c, intent.language)}`,
+      "- Scope: current project or the command-specific target; config/permission/tool effects must be reviewed before execution.",
+      "- Reason: request came from the Natural Command Bridge; bridge/workflow/agent/plugin/hook/remote paths can only create gates or permission requests.",
+      "- Rollback: inspect /diff, checkpoint, config state, or disable the affected extension before accepting follow-up changes.",
+      "- Choices: type the explicit slash command locally, enter a Start Gate, or reject and provide feedback; plain natural-language confirmation is not enough.",
+      "- Start Gate does not replace the existing permission pipeline.",
+      "- I did not execute it."
+    ].join("\n");
+  }
+  return [
+    `\u5DF2\u963B\u6B62\u81EA\u7136\u8BED\u8A00\u76F4\u901A\uFF1A${c.titleZh}`,
+    `- \u7CBE\u786E\u52A8\u4F5C\uFF1A${command}`,
+    `- \u98CE\u9669\uFF1A${formatHumanRisk(c, intent.language)}`,
+    "- \u8303\u56F4\uFF1A\u5F53\u524D\u9879\u76EE\u6216\u547D\u4EE4\u6307\u5B9A\u76EE\u6807\uFF1B\u914D\u7F6E\u3001\u6743\u9650\u3001\u5DE5\u5177\u5F71\u54CD\u5FC5\u987B\u5728\u6267\u884C\u524D\u590D\u6838\u3002",
+    "- \u539F\u56E0\uFF1A\u8BF7\u6C42\u6765\u81EA Natural Command Bridge\uFF1B\u81EA\u7136\u8BED\u8A00\u6865\u3001workflow\u3001agent\u3001plugin\u3001hook\u3001remote \u53EA\u80FD\u751F\u6210\u786E\u8BA4\u95E8\u6216\u6743\u9650\u8BF7\u6C42\u3002",
+    "- \u56DE\u6EDA\u65B9\u5F0F\uFF1A\u5148\u67E5\u770B /diff\u3001checkpoint\u3001\u914D\u7F6E\u72B6\u6001\uFF0C\u6216\u7981\u7528\u53D7\u5F71\u54CD\u6269\u5C55\uFF0C\u518D\u63A5\u53D7\u540E\u7EED\u53D8\u66F4\u3002",
+    "- \u9009\u62E9\uFF1A\u5728\u672C\u5730\u663E\u5F0F\u8F93\u5165 slash command\u3001\u8FDB\u5165 Start Gate\uFF0C\u6216\u62D2\u7EDD\u5E76\u63D0\u4F9B\u53CD\u9988\uFF1B\u666E\u901A\u81EA\u7136\u8BED\u8A00\u786E\u8BA4\u4E0D\u591F\u3002",
+    "- Start Gate \u4E0D\u66FF\u4EE3\u73B0\u6709\u6743\u9650\u5BA1\u6279\u7BA1\u9053\u3002",
+    "- \u672C\u6B21\u6CA1\u6709\u6267\u884C\u3002"
+  ].join("\n");
+}
+function createPendingNaturalCommand(intent, context, now = /* @__PURE__ */ new Date()) {
+  const c = intent.capability;
+  const command = intent.command ?? (c ? createNaturalEquivalentCommand(c, "") : "");
+  if (!c || !command || intent.action !== "start_gate") return null;
+  const createdAt = now.toISOString();
+  const expiresAt = new Date(now.getTime() + 9e4).toISOString();
+  return {
+    gateId: `ng-${randomUUID().slice(0, 8)}`,
+    capabilityId: c.id,
+    source: "natural",
+    exactCommand: command,
+    command,
+    risk: c.risk,
+    scope: `current project ${context.projectPath}`,
+    createdAt,
+    expiresAt,
+    requiresExactConfirmation: requiresExactNaturalConfirmation(c, command)
+  };
+}
+function formatNaturalStartGate(intent, context, gate = createPendingNaturalCommand(intent, context)) {
+  const c = intent.capability;
+  const exactHint = gate?.requiresExactConfirmation ? intent.language === "en-US" ? "To continue, type the exact slash command; plain `yes` is not accepted for this action." : "\u5982\u8981\u7EE7\u7EED\uFF0C\u8BF7\u8F93\u5165\u7CBE\u786E slash command\uFF1B\u8FD9\u4E2A\u52A8\u4F5C\u4E0D\u80FD\u53EA\u56DE\u590D\u201C\u786E\u8BA4\u201D\u6216 yes\u3002" : intent.language === "en-US" ? "Reply `yes` to continue, or type anything else to cancel." : "\u56DE\u590D `\u786E\u8BA4` \u7EE7\u7EED\uFF1B\u8F93\u5165\u5176\u4ED6\u5185\u5BB9\u5219\u53D6\u6D88\u3002";
+  if (c?.id === "trust") {
+    return intent.language === "en-US" ? [
+      "I recognized that you want to adjust workspace trust. Authorize?",
+      "- Yes: continue to the safe confirmation path.",
+      "- No: cancel; no workspace trust change is made.",
+      "- Details: show what workspace trust can allow and which safety boundaries still apply."
+    ].join("\n") : [
+      "\u6211\u8BC6\u522B\u5230\u4F60\u60F3\u8C03\u6574\u5DE5\u4F5C\u533A\u4FE1\u4EFB\u3002\u662F\u5426\u6388\u6743\uFF1F",
+      "- Yes\uFF1A\u7EE7\u7EED\u8FDB\u5165\u5B89\u5168\u786E\u8BA4\u8DEF\u5F84\u3002",
+      "- No\uFF1A\u53D6\u6D88\uFF1B\u4E0D\u6539\u53D8\u5DE5\u4F5C\u533A\u4FE1\u4EFB\u3002",
+      "- Details\uFF1A\u67E5\u770B workspace trust \u53EF\u5141\u8BB8\u4EC0\u4E48\uFF0C\u4EE5\u53CA\u54EA\u4E9B\u5B89\u5168\u8FB9\u754C\u4ECD\u7136\u751F\u6548\u3002"
+    ].join("\n");
+  }
+  if (intent.language === "en-US") {
+    return [
+      `Ready to prepare: ${c?.titleEn ?? "command"}.`,
+      "Protected follow-up actions still require their own approval.",
+      exactHint
+    ].join("\n");
+  }
+  return [
+    `\u53EF\u4EE5\u51C6\u5907\u6267\u884C\uFF1A${c?.titleZh ?? "\u547D\u4EE4"}\u3002`,
+    "\u540E\u7EED\u53D7\u4FDD\u62A4\u64CD\u4F5C\u4ECD\u4F1A\u5355\u72EC\u5BA1\u6279\u3002",
+    exactHint
+  ].join("\n");
+}
+function isNaturalGateExpired(gate, now = /* @__PURE__ */ new Date()) {
+  return Date.parse(gate.expiresAt) <= now.getTime();
+}
+function matchesNaturalGateConfirmation(gate, text, now = /* @__PURE__ */ new Date()) {
+  if (isNaturalGateExpired(gate, now)) return "expired";
+  const normalized = text.trim();
+  if (gate.requiresExactConfirmation) {
+    return normalized === gate.exactCommand ? "confirmed" : "exact_required";
+  }
+  return /^(yes|y|confirm|确认|是|执行|继续)$/iu.test(normalized) ? "confirmed" : "cancelled";
+}
+function requiresExactNaturalConfirmation(c, command) {
+  return c.risk === "dangerous" || c.writesConfig || c.entersPermissionPipeline || ["workflows", "fork"].includes(c.id) || /\b(refresh|init|enable|accept|delete|restore|bypass|full-access|dontask|dontAsk|add|remove|install|job|remote|hook)\b|刷新|建立|启用|接受|删除|恢复|完全访问|免确认|安装依赖/u.test(
+    command
+  );
+}
+function formatHumanRisk(c, language) {
+  if (!c)
+    return language === "en-US" ? "Unknown risk; do not continue if unsure." : "\u98CE\u9669\u672A\u77E5\uFF1B\u4E0D\u786E\u5B9A\u65F6\u4E0D\u8981\u7EE7\u7EED\u3002";
+  if (c.risk === "dangerous") {
+    return language === "en-US" ? "High risk. This cannot run directly from natural language and must stay behind explicit confirmation and the permission pipeline." : "\u9AD8\u98CE\u9669\u3002\u4E0D\u80FD\u7531\u81EA\u7136\u8BED\u8A00\u76F4\u901A\u6267\u884C\uFF0C\u5FC5\u987B\u4FDD\u7559\u7CBE\u786E\u786E\u8BA4\u548C\u6743\u9650\u7BA1\u9053\u3002";
+  }
+  if (c.risk === "tool_permission") {
+    return language === "en-US" ? "May use tools or touch project state. It will still enter the tool permission flow before any protected action." : "\u53EF\u80FD\u4F7F\u7528\u5DE5\u5177\u6216\u89E6\u53CA\u9879\u76EE\u72B6\u6001\uFF1B\u4EFB\u4F55\u53D7\u4FDD\u62A4\u52A8\u4F5C\u4ECD\u4F1A\u8FDB\u5165\u5DE5\u5177\u6743\u9650\u5BA1\u6279\u3002";
+  }
+  if (c.risk === "config_write") {
+    return language === "en-US" ? "May change Linghun configuration. Review the exact command and keep a rollback path before continuing." : "\u53EF\u80FD\u4FEE\u6539 Linghun \u914D\u7F6E\uFF1B\u7EE7\u7EED\u524D\u8BF7\u786E\u8BA4\u7CBE\u786E\u547D\u4EE4\uFF0C\u5E76\u4FDD\u7559\u56DE\u6EDA\u8DEF\u5F84\u3002";
+  }
+  if (c.risk === "start_gate") {
+    if (c.id === "index") {
+      return language === "en-US" ? "Status/search/architecture are read-only. Init fast/refresh are safe local actions that run a safety scan before building the local code index. Rebuild/force requires exact confirmation. It should not modify source files." : "status/search/architecture \u4E3A\u53EA\u8BFB\uFF1Binit fast/refresh \u662F\u5E26\u5B89\u5168\u626B\u63CF\u7684\u672C\u5730\u5B89\u5168\u52A8\u4F5C\uFF0C\u4F1A\u751F\u6210\u672C\u5730\u4EE3\u7801\u7D22\u5F15\uFF1Brebuild/force \u9700\u8981\u7CBE\u786E\u786E\u8BA4\uFF1B\u4E0D\u5E94\u4FEE\u6539\u6E90\u7801\u3002";
+    }
+    return language === "en-US" ? "Requires a Start Gate before the equivalent command starts; later protected actions still need approval." : "\u9700\u8981\u5148\u901A\u8FC7 Start Gate \u624D\u4F1A\u542F\u52A8\u7B49\u4EF7\u547D\u4EE4\uFF1B\u540E\u7EED\u53D7\u4FDD\u62A4\u52A8\u4F5C\u4ECD\u9700\u5BA1\u6279\u3002";
+  }
+  return language === "en-US" ? "Read-only local state check." : "\u53EA\u8BFB\u672C\u5730\u72B6\u6001\u68C0\u67E5\u3002";
+}
+function formatRiskLine(c, language) {
+  const details = [
+    `risk ${c.risk}`,
+    `readonly ${c.readonly ? "yes" : "no"}`,
+    `start gate ${c.requiresStartGate ? "yes" : "no"}`,
+    `writes config ${c.writesConfig ? "yes" : "no"}`,
+    `permission pipeline ${c.entersPermissionPipeline ? "yes" : "no"}`
+  ];
+  const reason = c.risk === "dangerous" ? language === "en-US" ? "cannot run directly from natural language" : "\u4E0D\u80FD\u7531\u81EA\u7136\u8BED\u8A00\u76F4\u901A\u6267\u884C" : c.risk === "tool_permission" ? language === "en-US" ? "must enter tool permission pipeline" : "\u5FC5\u987B\u8FDB\u5165\u5DE5\u5177\u6743\u9650\u7BA1\u9053" : c.risk === "start_gate" ? language === "en-US" ? "requires Start Gate confirmation" : "\u9700\u8981 Start Gate \u786E\u8BA4" : language === "en-US" ? "read-only local state" : "\u53EA\u8BFB\u672C\u5730\u72B6\u6001";
+  return `${details.join(", ")} \xB7 ${reason}`;
+}
+function cap(id, slash, aliases, titleZh, titleEn, descriptionZh, descriptionEn, whenToUseZh, whenToUseEn, risk, options = {}) {
+  const readonly = risk === "readonly" || options.readonly === true;
+  return {
+    id,
+    slash,
+    aliases,
+    group: options.group ?? inferCommandGroup(id, slash),
+    titleZh,
+    titleEn,
+    descriptionZh,
+    descriptionEn,
+    whenToUseZh,
+    whenToUseEn,
+    risk,
+    readonly,
+    modelInvocable: options.modelInvocable ?? readonly,
+    userInvocable: options.userInvocable ?? true,
+    requiresStartGate: options.requiresStartGate ?? ["start_gate", "config_write", "dangerous"].includes(risk),
+    writesConfig: options.writesConfig ?? risk === "config_write",
+    entersPermissionPipeline: options.entersPermissionPipeline ?? (risk === "tool_permission" || risk === "dangerous"),
+    bridgeSafe: options.bridgeSafe ?? (readonly || risk === "start_gate" || risk === "tool_permission"),
+    hiddenReason: options.hiddenReason,
+    runtimeStatusSubject: options.runtimeStatusSubject
+  };
+}
+function createIntent(action, capability, confidence, reason, candidates, language, inquiry, normalized = "") {
+  return {
+    action,
+    capability,
+    confidence,
+    command: createNaturalEquivalentCommand(capability, normalized),
+    reason,
+    candidates,
+    language,
+    inquiry,
+    runtimeIntent: extractRuntimeIntent(capability, inquiry),
+    riskHandler: action === "ask_clarify" ? "clarify" : action === "safe_local_action" ? "safe_local_action" : capability.risk
+  };
+}
+function extractRuntimeIntent(capability, inquiry) {
+  if (inquiry !== "status") return { kind: "none" };
+  return capability?.runtimeStatusSubject ? { kind: "runtime_status_query", subject: capability.runtimeStatusSubject } : { kind: "none" };
+}
+function findCurrentWorkStatusCapability(catalog, normalized, inquiry) {
+  if (inquiry !== "status" || !isCurrentWorkStatusQuestion(normalized)) return void 0;
+  return catalog.find((item) => item.id === "status");
+}
+function isCurrentWorkStatusQuestion(text) {
+  return /(?:当前|现在|目前).*(?:在做什么|做什么|在做|做到哪|进展|进度|任务状态|工作状态)|^(?:当前|现在|目前)状态$|(?:进展|进度).*(?:怎么样|如何|到哪|状态)|(?:current|latest)\s+(?:work|task|status|progress)|(?:what|where).*(?:doing|working on|progress)/u.test(
+    text
+  ) && !/模型|model|provider|权限|permission|cache|缓存|index|索引|memory|记忆/u.test(text);
+}
+function detectInputLanguage(text, preferred) {
+  if (preferred === "en-US") return "en-US";
+  return /[\u4e00-\u9fff]/u.test(text) ? "zh-CN" : "en-US";
+}
+function normalizeIntentText(text) {
+  return text.toLowerCase().replace(/[？?。！!,，:：()（）]/gu, " ").replace(/\s+/gu, " ").trim();
+}
+function classifyNaturalControlIntent(text) {
+  const projectRulesRead = /项目规则|本仓库规则|linghun\.md|project rules/u.test(text);
+  const indexAction = classifyIndexAction(text);
+  const actionRequest = isActionRequest(text);
+  return {
+    inquiry: classifyInquiry(text, projectRulesRead, actionRequest),
+    dangerousReason: classifyDangerousReason(text),
+    indexAction,
+    projectRulesRead,
+    actionRequest
+  };
+}
+function classifyInquiry(text, projectRulesRead, actionRequest) {
+  if (isCurrentWorkStatusQuestion(text)) return "status";
+  if (/是否|开了吗|enabled|status|状态|当前|现在|什么模型|哪个模型|用的哪个|命中|hit rate|list|有哪些|what model|current model|好了没|好了么|已经.*是吧|已经.*了吗|ready|就绪/u.test(
+    text
+  )) {
+    return "status";
+  }
+  if (/key|api key|configured|connected|working|doctor|诊断|配好了吗|配置正常|配置.*问题|为什么不能用|不能用|连上了吗|可用吗/u.test(
+    text
+  )) {
+    return "doctor";
+  }
+  if (projectRulesRead) return "read";
+  if (/风险|危险|safe|risk|danger/u.test(text)) return "risk";
+  if (/怎么|如何|用途|干什么|what does|how do i|how to|what is/u.test(text)) return "usage";
+  return actionRequest ? "execute" : "howto";
+}
+function detectInquiry(text) {
+  return classifyNaturalControlIntent(text).inquiry;
+}
+function findExplicitSlashCapability(catalog, slash, normalized) {
+  if (slash === "/doctor" && /hook|hooks|钩子/u.test(normalized)) {
+    return catalog.find((item) => item.id === "hooks");
+  }
+  const registryEntry = SLASH_COMMAND_REGISTRY.find(
+    (item) => item.slash === slash && item.userVisible
+  );
+  return catalog.find((item) => item.id === registryEntry?.capabilityId) ?? catalog.find((item) => item.slash === slash);
+}
+function classifyDangerousReason(text) {
+  if (/直接|force|强制|full-access|full access|完全访问|bypass|npm install|pnpm add|install dependency|安装依赖|接受所有|accept all|delete memory|restore|hook|remote|job/u.test(
+    text
+  )) {
+    return "high-risk wording";
+  }
+  return null;
+}
+function isDangerousNaturalTarget(id) {
+  return [
+    "write",
+    "edit",
+    "multiedit",
+    "bash",
+    "permissions",
+    "rewind",
+    "plugins",
+    "skills",
+    "index",
+    "cache",
+    "memory",
+    "hooks",
+    "mode"
+  ].includes(id);
+}
+function isMcpIndexControlRequest(text, capabilityId) {
+  return (capabilityId === "mcp" || capabilityId === "index") && /mcp/u.test(text) && /索引|index/u.test(text) && /打开|开启|启用|enable|turn on/u.test(text);
+}
+function classifyIndexAction(text) {
+  if (/重建|重新索引|重做索引|清空.*重建|force rebuild|rebuild|reindex/u.test(text)) {
+    return "rebuild";
+  }
+  if (/(?:帮我|请)?.*(?:更新|刷新|同步).*索引|refresh the project index|update the project index|sync the project index/u.test(
+    text
+  ) || /(?:帮我|请)?.*(?:建立|初始化|创建).*索引|build the index|init index|create index/u.test(text)) {
+    return "safe";
+  }
+  return null;
+}
+function isNaturalControlPlaneIntent(id, text, inquiry) {
+  const classification = classifyNaturalControlIntent(text);
+  if (["status", "doctor", "usage", "risk", "read"].includes(inquiry)) return true;
+  if (id === "read") return classification.projectRulesRead;
+  if (id === "index") return classification.indexAction === "safe";
+  if (id === "mode" && extractPermissionMode(text)) return true;
+  if (id === "trust") return true;
+  if (id === "workflows" && /plan|计划|规划/u.test(text)) return true;
+  if (["autopilot", "job", "background"].includes(id)) {
+    return /持续推进|继续做|不用每步都问|autopilot|本地任务|长期任务|任务报告|durable job|job report|后台|background|长任务|long task/u.test(
+      text
+    );
+  }
+  if (id === "agents") {
+    return /agent|agents|智能体|subagent|停止|停掉|取消|interrupt|cancel|stop|kill|有哪些|list|状态|status/u.test(
+      text
+    );
+  }
+  return ["model", "cache", "memory", "mode", "readiness"].includes(id) && !classification.actionRequest;
+}
+function isFirstBatchStatusCapability(id) {
+  return [
+    "memory",
+    "index",
+    "cache",
+    "model",
+    "mode",
+    "workflows",
+    "skills",
+    "plugins",
+    "hooks",
+    "readiness",
+    "sessions",
+    "resume",
+    "branch"
+  ].includes(id);
+}
+function isActionRequest(text) {
+  if (/好了没|好了么|已经.*是吧|已经.*了吗|ready/u.test(text)) return false;
+  return /帮我|请|直接|打开|建立|恢复|停止|停掉|取消|build|start|create|run|enable|accept|force|switch|set|resume|stop|cancel|kill|interrupt/u.test(
+    text
+  );
+}
+function scoreCapability(capability, normalized, original) {
+  let score = 0;
+  const hay = `${capability.id} ${capability.slash} ${capability.aliases.join(" ")} ${capability.titleZh} ${capability.titleEn} ${capability.descriptionZh} ${capability.descriptionEn} ${capability.whenToUseZh} ${capability.whenToUseEn}`.toLowerCase();
+  for (const token of splitIntentTokens(normalized)) {
+    if (token.length < 2) continue;
+    if (hay.includes(token)) score += token.length > 4 ? 1.2 : 0.7;
+  }
+  if (original.includes(capability.slash)) score += 6;
+  for (const alias of capability.aliases) {
+    const lower = alias.toLowerCase();
+    if (normalized.includes(lower)) score += 3;
+  }
+  if (capability.id === "readiness" && /readiness|就绪|体检|terminal readiness|project doctor|doctor project|context picker|rollback coach|cost preview|drift linter|项目诊断|回滚建议|成本预估|漂移检查/u.test(
+    normalized
+  ))
+    score += 6;
+  if (capability.id === "hooks" && /hook|钩子/u.test(normalized)) score += 3;
+  if (capability.id === "workflows" && /bug-fix|bug fix|工作流|workflow|workflow plan|工作流计划/u.test(normalized))
+    score += 3;
+  if (capability.id === "workflows" && /plan|计划|规划/u.test(normalized) && /workflow|工作流/u.test(normalized))
+    score += 5;
+  if (capability.id === "cache" && /缓存|命中|hit rate|cache/u.test(normalized)) score += 3;
+  if (capability.id === "memory" && /记忆|memory/u.test(normalized)) score += 3;
+  if (capability.id === "index" && /索引|index|搜索代码|search code|architecture|更新|刷新|重建|重新索引|重做索引|同步索引/u.test(
+    normalized
+  ))
+    score += 3;
+  if (capability.id === "read" && /项目规则|本仓库规则|linghun\.md|project rules/u.test(normalized))
+    score += 8;
+  if (capability.id === "model" && /模型|model|provider|claude|deepseek|gpt|route|路由/u.test(normalized))
+    score += 4;
+  if (capability.id === "mode" && /权限模式|permission mode|full-access|full access|完全访问|bypass|auto-review|auto review|自动审查|自动模式|accept edits|acceptedits|auto|dontask|don't ask|plan mode/u.test(
+    normalized
+  ))
+    score += 5;
+  if (capability.id === "diff" && /diff|改动|差异/u.test(normalized)) score += 3;
+  if (capability.id === "review" && /review|审查/u.test(normalized)) score += 3;
+  if (capability.id === "grep" && /搜索代码|search code|搜索.*todo/u.test(normalized)) score += 5;
+  if (capability.id === "todo" && /todo|任务|task/u.test(normalized) && !/搜索代码|search code|搜索.*todo|本地任务|长期任务|任务报告|后台任务|长任务|durable job|job/u.test(
+    normalized
+  ))
+    score += 4;
+  if (capability.id === "background" && /后台|background|长任务|long task/u.test(normalized))
+    score += 6;
+  if (capability.id === "autopilot" && /持续推进|继续做|不用每步都问|autopilot/u.test(normalized))
+    score += 6;
+  if (capability.id === "job" && /本地任务|长期任务|durable job|job report/u.test(normalized))
+    score += 6;
+  if (capability.id === "job" && /^任务报告$/u.test(normalized)) score += 6;
+  if (capability.id === "remote" && /远程|remote|飞书|lark|feishu|钉钉|dingtalk|企业微信|wecom/u.test(normalized))
+    score += 6;
+  if (capability.id === "glob" && /按模式找文件|模式找文件|find files|匹配文件/u.test(normalized))
+    score += 4;
+  if (capability.id === "fork" && /agent|智能体|verifier/u.test(normalized)) score += 2;
+  return score;
+}
+function splitIntentTokens(text) {
+  const ascii = text.match(/[a-z0-9_.\/-]+/giu) ?? [];
+  const zh = text.match(/[\u4e00-\u9fff]{2,}/gu) ?? [];
+  return [...ascii, ...zh];
+}
+function uniqueCapabilities(items) {
+  const seen = /* @__PURE__ */ new Set();
+  return items.filter((item) => {
+    if (seen.has(item.id)) return false;
+    seen.add(item.id);
+    return true;
+  });
+}
+function isUsageOrRiskQuestion(text, inquiry) {
+  return inquiry === "usage" || inquiry === "risk" || /干什么|what does|危险|risk|how do i|怎么/u.test(text);
+}
+function isAmbiguousCapabilityList(text, candidates) {
+  const inquiry = detectInquiry(text);
+  if (candidates.length < 2 || inquiry === "status" || inquiry === "doctor" || inquiry === "read" || isActionRequest(text) || Boolean(extractPermissionMode(text)) || isUsageOrRiskQuestion(text, inquiry) || !/^[\u4e00-\u9fff]{4,}$/u.test(text)) {
+    return false;
+  }
+  const matched = candidates.filter(
+    (item) => item.aliases.some((alias) => alias.length >= 2 && text.includes(alias.toLowerCase()))
+  );
+  return matched.length >= 2;
+}
+function isStatusLike(text, capability) {
+  return capability.readonly || /状态|status|当前|enabled|开了吗|命中|hit rate|list|有哪些|what model/u.test(text);
+}
+function isAgentCancelIntent(text) {
+  return /停止|停掉|取消|interrupt|cancel|stop|kill/u.test(text);
+}
+function createNaturalEquivalentCommand(capability, normalized) {
+  if (capability.id === "hooks") return "/doctor hooks";
+  if (capability.id === "cache") {
+    return normalized.includes("refresh") || normalized.includes("\u5237\u65B0") || normalized.includes("\u9884\u70ED") ? "/cache refresh" : "/cache status";
+  }
+  if (capability.id === "index") {
+    if (/好了没|好了么|已经.*是吧|已经.*了吗|已经建立了吗|ready|status|状态/u.test(normalized)) {
+      return "/index status";
+    }
+    if (/重建|重新索引|重做索引|rebuild|reindex/u.test(normalized))
+      return "/index refresh --confirm-rebuild";
+    if (/更新|刷新|同步索引|refresh|update|sync/u.test(normalized)) return "/index refresh";
+    if (/build|建立|初始化|创建|init|create/u.test(normalized)) return "/index init fast";
+    if (/architecture|架构/u.test(normalized)) return "/index architecture";
+    if (/search|搜索|查找|todo/u.test(normalized)) return "/index search <query>";
+    return "/index status";
+  }
+  if (capability.id === "workflows") {
+    if (/plan|计划|规划/u.test(normalized)) {
+      const planGoal = normalized.replace(/.*(?:plan|计划|规划)\s*/u, "").trim();
+      return planGoal ? `/workflows plan ${planGoal}` : "/workflows plan";
+    }
+    const workflow = extractWorkflowName(normalized);
+    return workflow ? `/workflows ${workflow}` : "/workflows";
+  }
+  if (capability.id === "fork") {
+    const role = extractAgentRole(normalized);
+    return role ? `/fork ${role} <task>` : "/fork <explorer|planner|verifier|worker> <task>";
+  }
+  if (capability.id === "agents") {
+    if (/停止所有|全部停止|停掉所有|取消所有|全部取消|stop all|cancel all|kill all/u.test(normalized)) {
+      return "/agents cancel all";
+    }
+    if (/停止|停掉|取消|interrupt|cancel|stop|kill/u.test(normalized)) return "/agents cancel <id>";
+    return "/agents";
+  }
+  if (capability.id === "permissions" && /add|remove|添加|删除/u.test(normalized))
+    return "/permissions add|remove ...";
+  if (capability.id === "mode") {
+    const mode = extractPermissionMode(normalized);
+    return mode ? `/mode ${mode}` : "/mode";
+  }
+  if (capability.id === "trust") {
+    return "/trust status";
+  }
+  if (capability.id === "autopilot") {
+    return "/autopilot";
+  }
+  if (capability.id === "model") {
+    if (/key|api key|configured|connected|working|doctor|诊断|配好了吗|配置正常|配置.*问题|为什么不能用|不能用|连上了吗|可用吗/u.test(
+      normalized
+    )) {
+      return "/model route doctor";
+    }
+    if (/route|路由/u.test(normalized)) return "/model route";
+    const candidate = extractModelCandidate(normalized);
+    return candidate ? `/model route set executor ${candidate}` : "/model";
+  }
+  if (capability.id === "branch") {
+    const purpose = extractBranchPurpose(normalized);
+    return purpose ? `/branch ${purpose}` : "/branch";
+  }
+  if (capability.id === "bash" && /npm install/u.test(normalized)) return "/bash npm install";
+  if (capability.id === "read" && /项目规则|本仓库规则|linghun\.md|project rules/u.test(normalized))
+    return "/read LINGHUN.md";
+  return capability.slash;
+}
+function extractPermissionMode(text) {
+  if (/full-access|full access|完全访问|bypass|绕过/u.test(text)) return "full-access";
+  if (/auto-review|auto review|自动审查|自动模式|自动审批|acceptedits|accept edits|接受编辑|\bauto\b/u.test(
+    text
+  ))
+    return "auto-review";
+  if (/dontask|don't ask|dont ask|不询问/u.test(text)) return "default";
+  if (/plan|计划/u.test(text)) return "plan";
+  if (/default|默认/u.test(text)) return "default";
+  return null;
+}
+function extractWorkflowName(text) {
+  const names = [
+    "bug-fix",
+    "review",
+    "refactor-plan",
+    "doc-to-code",
+    "design-to-code",
+    "release-note"
+  ];
+  for (const name of names) {
+    if (text.includes(name)) return name;
+  }
+  if (/bug fix|修 bug|修复 bug/u.test(text)) return "bug-fix";
+  if (/审查|代码审查/u.test(text)) return "review";
+  if (/重构/u.test(text)) return "refactor-plan";
+  if (/文档.*代码|doc to code/u.test(text)) return "doc-to-code";
+  if (/设计.*代码|design to code/u.test(text)) return "design-to-code";
+  if (/release|发布说明/u.test(text)) return "release-note";
+  return null;
+}
+function extractAgentRole(text) {
+  if (/explorer|探索|查代码/u.test(text)) return "explorer";
+  if (/planner|计划|规划/u.test(text)) return "planner";
+  if (/verifier|验证|复检/u.test(text)) return "verifier";
+  if (/worker|执行|实现/u.test(text)) return "worker";
+  return null;
+}
+function extractModelCandidate(text) {
+  const match = /(?:set|switch to|切到|换到|使用)\s+([a-z0-9_.:-]+)/iu.exec(text);
+  return match?.[1] && !["model", "route"].includes(match[1]) ? match[1] : null;
+}
+function extractBranchPurpose(text) {
+  const match = /(?:branch|分支)(?: session)?\s+(.+)$/iu.exec(text);
+  if (!match?.[1]) return null;
+  return match[1].trim().slice(0, 80) || null;
+}
+
+export {
+  SLASH_COMMAND_REGISTRY,
+  findSlashCommandRegistryEntry,
+  getCommandCapabilityCatalog,
+  validateCommandCapabilityCoverage,
+  getUserVisibleCommandCapabilities,
+  buildRuntimeStatusForModel,
+  createModelCapabilitySummary,
+  routeNaturalIntent,
+  formatNaturalClarification,
+  formatCapabilityAnswer,
+  formatNaturalPermissionBlock,
+  createPendingNaturalCommand,
+  formatNaturalStartGate,
+  isNaturalGateExpired,
+  matchesNaturalGateConfirmation,
+  formatRiskLine
+};