@cjhyy/code-shell-core 0.7.1 → 0.8.1

package/dist/cli/agent-server-stdio.js

@@ -29,6 +29,7 @@
  * transport is stdio NDJSON and the protocol surface is unchanged, this
  * bootstrap is invisible to them.
  */
+import { join } from "node:path";
 import { Engine } from "../engine/engine.js";
 import { EngineRuntime } from "../engine/runtime.js";
 import { ChatSessionManager } from "../protocol/chat-session-manager.js";
@@ -36,8 +37,9 @@ import { SessionManager } from "../session/session-manager.js";
 import { validateSettings } from "../settings/schema.js";
 import { AgentServer } from "../protocol/server.js";
 import { StdioTransport } from "../protocol/transport.js";
-import { createNotification } from "../protocol/types.js";
+import { createNotification, Methods } from "../protocol/types.js";
 import { setCronChangedSink } from "../tool-system/builtin/cron.js";
+import { setModelCatalogChangedSink } from "../tool-system/builtin/edit-model-catalog.js";
 import { SettingsManager, noRepoDir } from "../settings/manager.js";
 import { personalizationFrom } from "../settings/personalization.js";
 import { MCPManager } from "../tool-system/mcp-manager.js";
@@ -51,6 +53,34 @@ import { cronScheduler } from "../automation/scheduler.js";
 import { CronStore, defaultCronStorePath } from "../automation/store.js";
 import { resolveLLMConfigForTag } from "../engine/resolve-llm-config.js";
 import { createIpcCredentialAccess, setDefaultCredentialAccess } from "../credentials/access.js";
+async function loadConfiguredExtensionModules() {
+    const specs = (process.env.CODE_SHELL_CAPABILITY_MODULES ?? "")
+        .split(",")
+        .map((entry) => entry.trim())
+        .filter(Boolean);
+    const modules = [];
+    for (const spec of specs) {
+        const [moduleId, exportName = "createCapability"] = spec.split("#", 2);
+        if (!moduleId)
+            continue;
+        try {
+            const loaded = (await import(moduleId));
+            const factory = loaded[exportName];
+            if (typeof factory !== "function") {
+                throw new Error(`export ${exportName} is not a capability factory`);
+            }
+            modules.push(factory());
+        }
+        catch (err) {
+            logger.warn("capability.module_unavailable", {
+                moduleId,
+                exportName,
+                error: err instanceof Error ? err.message : String(err),
+            });
+        }
+    }
+    return modules;
+}
 /**
  * Resolve per-session agent config: protocol slice overrides win, else fall
  * back to disk settings.agent.*. Fixes the bug where settings.agent.* never
@@ -58,7 +88,7 @@ import { createIpcCredentialAccess, setDefaultCredentialAccess } from "../creden
  */
 export function resolveSessionAgentConfig(slice, settings) {
     return {
-        preset: slice.preset ?? settings.agent.preset,
+        preset: slice.preset ?? settings.agent.preset ?? settings.profile?.preset,
         customSystemPrompt: slice.customSystemPrompt ?? settings.agent.customSystemPrompt,
         appendSystemPrompt: slice.appendSystemPrompt ?? settings.agent.appendSystemPrompt,
     };
@@ -81,6 +111,15 @@ export function resolveSessionCwd(slice) {
 }
 // ─── Read base config from environment / settings ─────────────────
 const cwd = process.env.AGENT_CWD ?? process.cwd();
+const extensionModules = await loadConfiguredExtensionModules();
+// Injectable data root (identity dimension foundations, Task 3). Server
+// Phase 2 per-user workers spawn this entry with CODE_SHELL_DATA_ROOT set to
+// the user's isolated data root; session persistence (engine session store,
+// the disk goal/wakeup readers) and cron persistence then live under it.
+// Unset (every existing host today) keeps the default `~/.code-shell` layout
+// byte-for-byte.
+const dataRoot = process.env.CODE_SHELL_DATA_ROOT?.trim() || undefined;
+const dataSessionsDir = dataRoot ? join(dataRoot, "sessions") : undefined;
 // Load settings once to derive llm config for the seed engine.
 // Desktop is a host application: read the full disk hierarchy (incl. the
 // user's ~/.code-shell). The SDK default 'project' would skip user config.
@@ -115,16 +154,17 @@ const llmConfig = seedLlm;
 const seedEngine = new Engine({
     llm: llmConfig,
     cwd,
-    preset: settings.agent.preset,
+    preset: settings.agent.preset ?? settings.profile?.preset,
     enabledBuiltinTools: settings.agent.enabledBuiltinTools,
     disabledBuiltinTools: settings.agent.disabledBuiltinTools,
     builtinToolHost: "desktop",
+    extensionModules,
     settingsScope: "full",
     // No runtime — Engine.populateModelPoolFromSettings() runs in ctor.
 });
 // ─── Step 2: extract shared resources ────────────────────────────
 const modelPool = seedEngine.getModelPool();
-const toolRegistry = seedEngine.getToolRegistry();
+const toolRegistry = seedEngine.getRuntimeToolRegistry();
 // Capture the seed engine's resolved llmConfig + clientDefaults
 // (post-populateModelPoolFromSettings). Session engines inherit defaults so
 // the temperature ClientDefault / images.detail apply uniformly without each
@@ -222,6 +262,7 @@ const chatManager = new ChatSessionManager({
             // session it creates is a desktop-origin session.
             origin: "desktop",
             builtinToolHost: "desktop",
+            extensionModules,
             // Inherit full scope so spawned subagents read user config too.
             settingsScope: "full",
             // MCP servers from settings — the worker reads the full disk
@@ -252,11 +293,17 @@ const chatManager = new ChatSessionManager({
             ...personalizationFrom(live.agent),
             maxTurns: slice.maxTurns,
             maxContextTokens: slice.maxContextTokens,
+            // Session persistence root: an identity-derived manager passes an
+            // explicit per-identity dir through the slice; otherwise the worker's
+            // injected data root (CODE_SHELL_DATA_ROOT) applies; otherwise
+            // undefined keeps the engine's default sessions root (today's path).
+            sessionStorageDir: slice.sessionStorageDir ?? dataSessionsDir,
             // cwd already set to sessionCwd above (slice.cwd → no-repo fallback).
         });
     },
     maxSessions: 16,
     idleTtlMs: 30 * 60 * 1000,
+    ...(dataRoot ? { dataRoot } : {}),
 });
 chatManager.startIdleSweeper();
 // ─── Cron persistence ────────────────────────────────────────────
@@ -270,7 +317,7 @@ chatManager.startIdleSweeper();
 // main process owns execution); persistence is its only cron role. Without
 // this, loadJobs()/CronCreate would arm timers in this process too, double-
 // running jobs and corrupting run stats.
-cronScheduler.setStore(new CronStore(defaultCronStorePath()));
+cronScheduler.setStore(new CronStore(defaultCronStorePath(dataRoot)));
 cronScheduler.setExecutionEnabled(false);
 cronScheduler.loadJobs();
 // ─── Step 5: AgentServer over stdio ──────────────────────────────
@@ -283,21 +330,34 @@ setDefaultCredentialAccess(createIpcCredentialAccess(stdioTransport));
 setCronChangedSink(() => {
     stdioTransport.send(createNotification("agent/cronChanged", {}));
 });
+// EditModelCatalog writes in this worker process, while the mounted settings
+// and connection pages live in the desktop renderer. Notify them immediately
+// after a successful write instead of relying on a later turn_complete event.
+setModelCatalogChangedSink(() => {
+    stdioTransport.send(createNotification(Methods.SettingsChanged, {}));
+});
 // Disk-only active-goal reader for agent/goalGet. In worker mode there is no
 // legacyEngine, and reopening a session after restart doesn't create a live
 // ChatSession (that only happens on a send), so chatManager.get() misses. This
 // reads the same ~/.code-shell/sessions/<id>/state.json every Engine writes, so
 // the goal block re-surfaces on load ("goal 还在但页面不显示" fix).
-const goalDiskReader = new SessionManager();
+const goalDiskReader = new SessionManager(dataSessionsDir);
 const agentServer = new AgentServer({
     chatManager,
     transport: stdioTransport,
+    extensionModules,
     workspaceBridge: true,
+    panelBridge: true,
+    // Cold background-wakeup rehydrate must read the same sessions store the
+    // engines write when the data root is relocated (undefined → default root).
+    sessionDiskRoot: dataSessionsDir,
     // Config hot-reload (layer 2) reads disk through the SAME closure the
     // engineFactory uses for new sessions, so a reloaded running session and a
     // newly-created session converge on identical disk config (no divergence).
     settingsReader: freshSettings,
     readActiveGoalFromDisk: (sessionId) => goalDiskReader.readActiveGoal(sessionId),
+    updateActiveGoalOnDisk: (sessionId, patch) => goalDiskReader.updateActiveGoal(sessionId, patch)?.goal,
+    clearActiveGoalOnDisk: (sessionId, expected) => goalDiskReader.clearActiveGoal(sessionId, expected),
 });
 // Clean up on termination signals. Without this, SIGTERM (parent kill),
 // SIGINT (Ctrl+C), or SIGHUP would drop the process without closing sessions,

package/dist/cli/agent-server-tcp.js

@@ -35,6 +35,7 @@ import { CronStore, defaultCronStorePath } from "../automation/store.js";
 import { resolveLLMConfigForTag } from "../engine/resolve-llm-config.js";
 import { randomUUID } from "node:crypto";
 import { getApprovalRouter } from "../tool-system/permission.js";
+import { SessionManager } from "../session/session-manager.js";
 const cwd = process.env.AGENT_CWD ?? process.cwd();
 const port = Number(process.env.AGENT_TCP_PORT ?? "4321");
 const host = process.env.AGENT_TCP_HOST ?? "127.0.0.1";
@@ -47,15 +48,14 @@ const settingsManager = new SettingsManager(cwd, "full");
 const settings = settingsManager.get();
 const seedLlm = resolveLLMConfigForTag(settings, "text", settings.defaults?.text);
 if (!seedLlm) {
-    console.error(`[agent-server] 没有可用的文本模型连接(defaults.text=${settings.defaults?.text ?? "未设置"})。` +
-        `请在「连接」页添加并填写凭证。`);
+    console.error(`[agent-server] 没有可用的文本模型连接(defaults.text=${settings.defaults?.text ?? "未设置"})。` + `请在「连接」页添加并填写凭证。`);
     process.exit(1);
 }
 const llmConfig = seedLlm;
 // ── Shared runtime (same bootstrap as stdio) ─────────────────────
 const seedEngine = new Engine({ llm: llmConfig, cwd, settingsScope: "full" });
 const modelPool = seedEngine.getModelPool();
-const toolRegistry = seedEngine.getToolRegistry();
+const toolRegistry = seedEngine.getRuntimeToolRegistry();
 const resolvedLlmConfig = seedEngine.getConfig().llm;
 const resolvedClientDefaults = seedEngine.getConfig().clientDefaults;
 const mcpPool = new MCPManager(toolRegistry);
@@ -115,12 +115,16 @@ const automation = startAutomation({
 // ── Serve over TCP ──────────────────────────────────────────────
 // One AgentServer per accepted connection, all sharing the same chatManager.
 const servers = new Set();
+const goalDiskManager = new SessionManager();
 listenTcp({ port, host }, (transport, socket) => {
     const server = new AgentServer({
         chatManager,
         transport,
         connectionId: randomUUID(),
         approvalRouter: getApprovalRouter(),
+        readActiveGoalFromDisk: (sessionId) => goalDiskManager.readActiveGoal(sessionId),
+        updateActiveGoalOnDisk: (sessionId, patch) => goalDiskManager.updateActiveGoal(sessionId, patch)?.goal,
+        clearActiveGoalOnDisk: (sessionId, expected) => goalDiskManager.clearActiveGoal(sessionId, expected),
     });
     servers.add(server);
     socket.once("close", () => {

package/dist/context/compaction.d.ts

@@ -177,12 +177,48 @@ export declare function applyToolResultBudget(messages: Message[], maxTotalChars
  * Returns the truncated string with a notice.
  */
 export declare function truncateToolResult(result: string, maxChars?: number): string;
+export declare function buildSummarizationPrompt(messagesToSummarize: Message[], priorSummary?: string, options?: {
+    maxTextChars?: number;
+}): string;
+/** Target size for a portable context package (roughly one background page). */
+export declare const CONTEXT_PACKAGE_TARGET_TOKENS = 1500;
+/** Hard output ceiling; the design allows a 1,500-2,000 token final package. */
+export declare const CONTEXT_PACKAGE_MAX_OUTPUT_TOKENS = 2000;
+export interface SerializedContextPackage {
+    /** Complete textual representation. Image bytes are replaced by explicit metadata placeholders. */
+    text: string;
+    /** False when the selection contains images/placeholders but no facts a text model can summarize. */
+    hasSummarizableContent: boolean;
+}
+/**
+ * Serialize a selected context range without head-only truncation. Text, tool
+ * arguments/results, nested structured results, and reasoning are retained in
+ * full. Raw image bytes are intentionally not copied into a text prompt; an
+ * explicit metadata placeholder makes that conversion visible and bounded.
+ */
+export declare function serializeContextPackageMessages(messages: Message[]): SerializedContextPackage;
+export declare function buildContextPackagePromptFromSerialized(serializedConversation: string, priorSummary?: string): string;
 /**
- * Build a structured summarization prompt from messages to be compacted.
- * Produces a 9-section summary preserving key details.
+ * Build the session-transfer variant on top of the same structured prompt used
+ * by /compact. Keeping this wrapper small makes changes to the canonical nine
+ * sections flow into both compaction and context packaging.
  */
-export declare function buildSummarizationPrompt(messagesToSummarize: Message[], priorSummary?: string): string;
+export declare function buildContextPackagePrompt(messagesToSummarize: Message[], priorSummary?: string): string;
 export declare function extractAnchoredSummary(messages: Message[]): string | undefined;
+/**
+ * Build the single anchored-summary message that replaces a compacted span.
+ * Emits the same `<anchored-summary>` marker `extractAnchoredSummary` reads, so
+ * a later compaction pass can feed it back for a rolling merge-update. The
+ * optional referenced-file list points the model at paths it may want to Read
+ * back; the transcript path lets it recover exact detail on demand. Shared by
+ * applySummaryCompaction (recency-window compaction) and any caller that
+ * collapses a specific span into one summary, keeping the marker format
+ * identical across both.
+ */
+export declare function buildAnchoredSummaryMessage(summary: string, options?: {
+    transcriptPath?: string;
+    referencedFiles?: string[];
+}): Message;
 /**
  * Apply LLM-generated summary compaction (hybrid mode).
  *

package/dist/context/compaction.js

@@ -251,11 +251,7 @@ export function snipCompact(messages, keepFirstN = 3, keepLastM = 8) {
         content: `<system-reminder>[${snippedCount} messages snipped to save context. ` +
             `Use the transcript file to review details if needed.]</system-reminder>`,
     };
-    return [
-        ...messages.slice(0, keepFirstN),
-        snipMarker,
-        ...messages.slice(lastStart),
-    ];
+    return [...messages.slice(0, keepFirstN), snipMarker, ...messages.slice(lastStart)];
 }
 /**
  * Window strategy: keep first message + last N messages.
@@ -669,19 +665,27 @@ export function truncateToolResult(result, maxChars = 30_000) {
     const tailSize = Math.floor(maxChars * 0.2);
     const head = result.slice(0, headSize);
     const tail = result.slice(-tailSize);
-    return (head +
-        `\n\n... [${result.length - headSize - tailSize} characters truncated] ...\n\n` +
-        tail);
+    return (head + `\n\n... [${result.length - headSize - tailSize} characters truncated] ...\n\n` + tail);
 }
 /**
  * Build a structured summarization prompt from messages to be compacted.
  * Produces a 9-section summary preserving key details.
  */
-export function buildSummarizationPrompt(messagesToSummarize, priorSummary) {
+const SUMMARY_SECTION_LIST = "1. **Primary Request**: What the user originally asked for\n" +
+    "2. **Key Concepts**: Important technical terms, patterns, file paths\n" +
+    "3. **Files Referenced**: List of files read/edited with key content\n" +
+    "4. **Errors & Fixes**: Any errors encountered and how they were resolved\n" +
+    "5. **Actions Taken**: Tools used and their outcomes\n" +
+    "6. **User Messages**: All distinct user requests (verbatim if short)\n" +
+    "7. **Pending Tasks**: Anything started but not finished\n" +
+    "8. **Current State**: Where things stand right now\n" +
+    "9. **Next Steps**: What should happen next\n";
+export function buildSummarizationPrompt(messagesToSummarize, priorSummary, options = {}) {
     const parts = [];
+    const maxTextChars = options.maxTextChars ?? 3_000;
     for (const msg of messagesToSummarize) {
         if (typeof msg.content === "string") {
-            parts.push(`[${msg.role}]: ${msg.content.slice(0, 3000)}`);
+            parts.push(`[${msg.role}]: ${msg.content.slice(0, maxTextChars)}`);
         }
         else {
             for (const block of msg.content) {
@@ -699,15 +703,6 @@ export function buildSummarizationPrompt(messagesToSummarize, priorSummary) {
             }
         }
     }
-    const sectionList = "1. **Primary Request**: What the user originally asked for\n" +
-        "2. **Key Concepts**: Important technical terms, patterns, file paths\n" +
-        "3. **Files Referenced**: List of files read/edited with key content\n" +
-        "4. **Errors & Fixes**: Any errors encountered and how they were resolved\n" +
-        "5. **Actions Taken**: Tools used and their outcomes\n" +
-        "6. **User Messages**: All distinct user requests (verbatim if short)\n" +
-        "7. **Pending Tasks**: Anything started but not finished\n" +
-        "8. **Current State**: Where things stand right now\n" +
-        "9. **Next Steps**: What should happen next\n";
     if (priorSummary) {
         return ("You are updating an anchored conversation summary. A prior summary is " +
             "shown first, followed by NEW conversation that occurred after that " +
@@ -719,7 +714,7 @@ export function buildSummarizationPrompt(messagesToSummarize, priorSummary) {
             "- Stays in the same 9-section structure below\n" +
             "- Is factual; preserves file paths, function names, and error " +
             "messages exactly\n\n" +
-            sectionList +
+            SUMMARY_SECTION_LIST +
             "\n=== Prior summary ===\n" +
             priorSummary +
             "\n\n=== New conversation ===\n\n" +
@@ -727,10 +722,110 @@ export function buildSummarizationPrompt(messagesToSummarize, priorSummary) {
     }
     return ("Summarize the following conversation into these sections. " +
         "Be factual. Preserve file paths, function names, and error messages exactly.\n\n" +
-        sectionList +
+        SUMMARY_SECTION_LIST +
         "\nConversation:\n\n" +
         parts.join("\n"));
 }
+/** Target size for a portable context package (roughly one background page). */
+export const CONTEXT_PACKAGE_TARGET_TOKENS = 1_500;
+/** Hard output ceiling; the design allows a 1,500-2,000 token final package. */
+export const CONTEXT_PACKAGE_MAX_OUTPUT_TOKENS = 2_000;
+function serializeContextPackageBlock(block) {
+    switch (block.type) {
+        case "text": {
+            const text = block.text ?? "";
+            return { text, hasSummarizableContent: text.trim().length > 0 };
+        }
+        case "reasoning": {
+            const text = block.reasoningContent ?? block.text ?? "";
+            return {
+                text: `[reasoning]: ${text}`,
+                hasSummarizableContent: text.trim().length > 0,
+            };
+        }
+        case "tool_use": {
+            const args = JSON.stringify(block.input ?? {});
+            const name = block.name ?? "unknown_tool";
+            return {
+                text: `[tool_use id=${block.id ?? "unknown"}]: ${name}(${args})`,
+                hasSummarizableContent: name !== "unknown_tool" || args !== "{}",
+            };
+        }
+        case "tool_result": {
+            if (typeof block.content === "string") {
+                return {
+                    text: `[tool_result tool_use_id=${block.tool_use_id ?? "unknown"}${block.is_error ? " is_error=true" : ""}]: ${block.content}`,
+                    hasSummarizableContent: block.content.trim().length > 0,
+                };
+            }
+            const nested = (block.content ?? []).map(serializeContextPackageBlock);
+            return {
+                text: `[tool_result tool_use_id=${block.tool_use_id ?? "unknown"}${block.is_error ? " is_error=true" : ""}]:\n` +
+                    nested.map((item) => item.text).join("\n"),
+                hasSummarizableContent: nested.some((item) => item.hasSummarizableContent),
+            };
+        }
+        case "image": {
+            const source = block.source;
+            const mediaType = source?.media_type ?? "unknown";
+            const encoding = source?.type ?? "unknown";
+            const encodedChars = source?.data.length ?? 0;
+            return {
+                text: `[image media_type=${mediaType} encoding=${encoding} encoded_chars=${encodedChars}; binary payload intentionally represented by metadata]`,
+                hasSummarizableContent: false,
+            };
+        }
+        default: {
+            return {
+                text: `[unknown content block]: ${JSON.stringify(block)}`,
+                hasSummarizableContent: true,
+            };
+        }
+    }
+}
+/**
+ * Serialize a selected context range without head-only truncation. Text, tool
+ * arguments/results, nested structured results, and reasoning are retained in
+ * full. Raw image bytes are intentionally not copied into a text prompt; an
+ * explicit metadata placeholder makes that conversion visible and bounded.
+ */
+export function serializeContextPackageMessages(messages) {
+    const lines = [];
+    let hasSummarizableContent = false;
+    for (const message of messages) {
+        if (typeof message.content === "string") {
+            lines.push(`[${message.role}]: ${message.content}`);
+            if (message.content.trim())
+                hasSummarizableContent = true;
+            continue;
+        }
+        for (const block of message.content) {
+            const serialized = serializeContextPackageBlock(block);
+            lines.push(`[${message.role}] ${serialized.text}`);
+            hasSummarizableContent ||= serialized.hasSummarizableContent;
+        }
+    }
+    return { text: lines.join("\n"), hasSummarizableContent };
+}
+export function buildContextPackagePromptFromSerialized(serializedConversation, priorSummary) {
+    const instruction = "Create a portable background context package for a new session. " +
+        "Target about 1,500 tokens (never more than 2,000). Preserve the selected " +
+        "range's questions, conclusions, failed attempts, files and symbols, commands, " +
+        "exact errors, unresolved items, and concrete next steps. Do not imply that work " +
+        "outside the supplied range occurred. Be factual and retain explicit image placeholders.\n\n";
+    return (instruction +
+        buildSummarizationPrompt([{ role: "user", content: serializedConversation }], priorSummary, {
+            maxTextChars: Number.POSITIVE_INFINITY,
+        }));
+}
+/**
+ * Build the session-transfer variant on top of the same structured prompt used
+ * by /compact. Keeping this wrapper small makes changes to the canonical nine
+ * sections flow into both compaction and context packaging.
+ */
+export function buildContextPackagePrompt(messagesToSummarize, priorSummary) {
+    return buildContextPackagePromptFromSerialized(serializeContextPackageMessages(messagesToSummarize).text, priorSummary);
+}
 // ─── Anchored summary marker ────────────────────────────────────────
 //
 // applySummaryCompaction wraps the LLM-generated summary in these tags so the
@@ -757,6 +852,37 @@ export function extractAnchoredSummary(messages) {
     }
     return undefined;
 }
+/**
+ * Build the single anchored-summary message that replaces a compacted span.
+ * Emits the same `<anchored-summary>` marker `extractAnchoredSummary` reads, so
+ * a later compaction pass can feed it back for a rolling merge-update. The
+ * optional referenced-file list points the model at paths it may want to Read
+ * back; the transcript path lets it recover exact detail on demand. Shared by
+ * applySummaryCompaction (recency-window compaction) and any caller that
+ * collapses a specific span into one summary, keeping the marker format
+ * identical across both.
+ */
+export function buildAnchoredSummaryMessage(summary, options = {}) {
+    const { transcriptPath, referencedFiles = [] } = options;
+    let body = `This session is being continued from a previous conversation that ran out of context. ` +
+        `The summary below covers the earlier portion of the conversation.\n\n` +
+        `${ANCHORED_OPEN}\n${summary}\n${ANCHORED_CLOSE}`;
+    if (transcriptPath) {
+        body +=
+            `\n\nIf you need specific details from before compaction (like exact code snippets, ` +
+                `error messages, or content you generated), read the full transcript at: ${transcriptPath}`;
+    }
+    if (referencedFiles.length > 0) {
+        body +=
+            `\n\nFiles referenced before compaction (use Read tool if you need their current content):\n` +
+                referencedFiles.map((f) => `- ${f}`).join("\n");
+    }
+    body += `\n\nRecent messages are preserved verbatim below. Continue from where you left off.`;
+    return {
+        role: "user",
+        content: `<system-reminder>${body}</system-reminder>`,
+    };
+}
 /**
  * Apply LLM-generated summary compaction (hybrid mode).
  *
@@ -777,24 +903,10 @@ export function applySummaryCompaction(messages, summary, keepRecentN, transcrip
     const recent = messages.slice(startIndex);
     // Extract file paths (not contents) that were referenced before compaction
     const referencedFiles = extractReferencedFilePaths(compactedMessages);
-    let body = `This session is being continued from a previous conversation that ran out of context. ` +
-        `The summary below covers the earlier portion of the conversation.\n\n` +
-        `${ANCHORED_OPEN}\n${summary}\n${ANCHORED_CLOSE}`;
-    if (transcriptPath) {
-        body +=
-            `\n\nIf you need specific details from before compaction (like exact code snippets, ` +
-                `error messages, or content you generated), read the full transcript at: ${transcriptPath}`;
-    }
-    if (referencedFiles.length > 0) {
-        body +=
-            `\n\nFiles referenced before compaction (use Read tool if you need their current content):\n` +
-                referencedFiles.map((f) => `- ${f}`).join("\n");
-    }
-    body += `\n\nRecent messages are preserved verbatim below. Continue from where you left off.`;
-    const summaryMsg = {
-        role: "user",
-        content: `<system-reminder>${body}</system-reminder>`,
-    };
+    const summaryMsg = buildAnchoredSummaryMessage(summary, {
+        ...(transcriptPath ? { transcriptPath } : {}),
+        referencedFiles,
+    });
     return [first, summaryMsg, ...recent];
 }
 // ─── API Round Grouping & Progressive Recovery ──────────────────────

package/dist/context/manager.d.ts

@@ -31,7 +31,7 @@ export interface ContextManagerConfig {
  * Injected by the Engine so the ContextManager doesn't depend on LLM directly.
  */
 export type SummarizeFn = (prompt: string, signal?: AbortSignal) => Promise<string>;
-export type CompactStrategy = "micro" | "summary" | "window" | "snip" | "emergency";
+export type CompactStrategy = "micro" | "summary" | "window" | "snip" | "emergency" | "range";
 export type OnCompactFn = (info: {
     strategy: CompactStrategy;
     before: number;
@@ -127,6 +127,22 @@ export declare class ContextManager {
      * gets summarized here.
      */
     forceSummarize(messages: Message[], signal?: AbortSignal): Promise<Message[]>;
+    /**
+     * Generic range archival: summarize a caller-chosen contiguous index window
+     * `[range.start, range.end)` into a single anchored summary message, leaving
+     * everything outside the window untouched. Unlike manage()/forceSummarize,
+     * the window is caller-specified, not derived from a pressure heuristic — the
+     * caller decides which span to collapse. Returns the input unchanged when no
+     * summarizeFn is set, when the (clamped) window is empty, or when the summary
+     * is empty/too short. The emitted summary uses the same anchored marker the
+     * rolling-summary path reads, so a later compaction can merge-update it.
+     */
+    summarizeRange(messages: Message[], range: {
+        start: number;
+        end: number;
+    }, opts?: {
+        signal?: AbortSignal;
+    }): Promise<Message[]>;
     /**
      * Persist large tool_result blocks to disk and replace them with a
      * preview + filepath. No-op when transcript path hasn't been set

package/dist/context/manager.js

@@ -5,7 +5,7 @@
  * Tier 2: LLM summary (async) — generate summary of older messages via model call
  * Tier 3: window compact (sync, emergency) — aggressive truncation fallback
  */
-import { estimateTokens, microcompact, dedupeFileReads, maskOldObservations, snipCompact, windowCompact, truncateToolResult, buildSummarizationPrompt, applySummaryCompaction, applyToolResultBudget, extractAnchoredSummary, } from "./compaction.js";
+import { estimateTokens, microcompact, dedupeFileReads, maskOldObservations, snipCompact, windowCompact, truncateToolResult, buildSummarizationPrompt, applySummaryCompaction, applyToolResultBudget, extractAnchoredSummary, buildAnchoredSummaryMessage, extractReferencedFilePaths, } from "./compaction.js";
 import { applyToolResultPersistence, createContentReplacementState, reconstructContentReplacementState, resolveToolResultsDir, } from "./tool-result-storage.js";
 import { logger } from "../logging/logger.js";
 const DEFAULT_CONFIG = {
@@ -529,6 +529,41 @@ export class ContextManager {
         }
         return result;
     }
+    /**
+     * Generic range archival: summarize a caller-chosen contiguous index window
+     * `[range.start, range.end)` into a single anchored summary message, leaving
+     * everything outside the window untouched. Unlike manage()/forceSummarize,
+     * the window is caller-specified, not derived from a pressure heuristic — the
+     * caller decides which span to collapse. Returns the input unchanged when no
+     * summarizeFn is set, when the (clamped) window is empty, or when the summary
+     * is empty/too short. The emitted summary uses the same anchored marker the
+     * rolling-summary path reads, so a later compaction can merge-update it.
+     */
+    async summarizeRange(messages, range, opts = {}) {
+        const start = Math.max(0, Math.min(range.start, messages.length));
+        const end = Math.max(start, Math.min(range.end, messages.length));
+        if (!this.summarizeFn || end - start < 1)
+            return messages;
+        const window = messages.slice(start, end);
+        // Feed a prior anchored summary back so the LLM merge-updates rather than
+        // re-summarizes from scratch, matching the rolling-summary behavior of
+        // trySummaryCompact().
+        const priorSummary = extractAnchoredSummary(messages) ?? this.lastSummary;
+        const prompt = buildSummarizationPrompt(window, priorSummary);
+        const summary = await this.summarizeFn(prompt, opts.signal);
+        if (!summary || summary.length <= 50)
+            return messages;
+        this.lastSummary = summary;
+        const summaryMessage = buildAnchoredSummaryMessage(summary, {
+            ...(this.transcriptPath ? { transcriptPath: this.transcriptPath } : {}),
+            referencedFiles: extractReferencedFilePaths(window),
+        });
+        const before = this.estimateTokensHybrid(messages);
+        const out = [...messages.slice(0, start), summaryMessage, ...messages.slice(end)];
+        const after = this.estimateTokensHybrid(out);
+        this.onCompact?.({ strategy: "range", before, after });
+        return out;
+    }
     /**
      * Persist large tool_result blocks to disk and replace them with a
      * preview + filepath. No-op when transcript path hasn't been set

package/dist/credentials/access.d.ts

@@ -18,11 +18,13 @@ export interface CredentialAccess {
     listMasked(cwd: string | undefined, scope: CredentialAccessScope): CredentialMetadata[];
     resolveMeta(cwd: string | undefined, id: string, scope: CredentialAccessScope): CredentialMetadata | undefined;
     envExposures(cwd: string | undefined, scope: CredentialAccessScope): Record<string, string>;
+    /** Subscribe to host credential snapshot changes (desktop worker uses this to cancel in-flight Links). */
+    subscribe?(listener: () => void): () => void;
     resolveValue?(req: {
         cwd?: string;
         id: string;
         scope: CredentialAccessScope;
-        purpose: "use" | "mcp";
+        purpose: "use" | "mcp" | "link";
     }): Promise<string>;
     /** Resolve only the bearer material needed by an MCP request. */
     resolveOAuthAccess?(req: {