@downcity/agent 1.1.408 → 1.1.437

package/bin/executor/Executor.js

@@ -9,7 +9,6 @@
 import { CoreEngineRunner } from "./core-engine/CoreEngineRunner.js";
 import { ExecutorRecoveryPolicy } from "./services/ExecutorRecoveryPolicy.js";
 import { is_action_result } from "../types/action/ActionResult.js";
-import { generate_id } from "../utils/Id.js";
 /**
  * Executor 单实例实现。
  */
@@ -20,10 +19,9 @@ export class Executor {
     session_id;
     composer;
     get_compose_input;
+    recover_context;
     apply_system_snapshot;
-    compact_history;
-    get_model;
-    get_plugins;
+    get_hooks;
     logger;
     recovery_policy;
     core_engine_runner;
@@ -36,20 +34,21 @@ export class Executor {
         this.session_id = session_id;
         this.composer = options.composer;
         this.get_compose_input = options.get_compose_input;
+        this.recover_context = options.recover_context;
         this.apply_system_snapshot = options.apply_system_snapshot;
-        this.compact_history = options.compact_history;
-        this.get_model = options.get_model;
-        this.get_plugins = options.get_plugins;
+        this.get_hooks = options.get_hooks;
         this.logger = options.logger;
         this.recovery_policy = new ExecutorRecoveryPolicy({
             session_id: this.session_id,
-            should_compact: (error) => this.composer.should_compact(error),
+            recover_context: async (error) => is_provider_context_limit_error(error)
+                ? await this.recover_context("provider_context_limit")
+                : false,
             logger: this.logger,
         });
         this.core_engine_runner = new CoreEngineRunner({
             session_id: this.session_id,
             logger: this.logger,
-            should_compact_on_error: (error) => this.composer.should_compact(error),
+            should_compact_on_error: (error) => is_provider_context_limit_error(error),
         });
     }
     /**
@@ -71,114 +70,70 @@ export class Executor {
             // 否则 step 回调、scope 与执行器状态都会互相污染。
             throw new Error("Executor.execute does not support concurrent execution");
         }
-        const query = String(params.query || "").trim();
         const turn_context = params.turn_context;
         this.executing = true;
-        this.recovery_policy.reset_execution_state();
         try {
             const result = await this.recovery_policy.execute_with_retry({
-                query,
-                model: this.resolve_model_or_throw(),
-                turn_context,
-                prepare_execute_input: async ({ query: next_query, model, turn_context: next_turn_context, retry_count, }) => await this.prepare_execute_input(next_query, model, next_turn_context, retry_count),
-                execute_prepared_input: async ({ execute_input, model, turn_context: next_turn_context, }) => await this.execute_prepared_input(execute_input, model, next_turn_context),
+                execute_turn: async (retry_count) => await this.core_engine_runner.execute({
+                    turn_context,
+                    resolve_step_input: async () => await this.resolve_step_input(turn_context, retry_count),
+                }),
             });
             return result;
         }
         finally {
-            this.recovery_policy.reset_execution_state();
             this.executing = false;
         }
     }
     /**
-     * 调用 Composer 组装当前轮执行输入。
-     */
-    async prepare_execute_input(query, _model, turn_context, retry_count) {
-        if (retry_count > 0) {
-            await this.logger.log("info", "[agent] compacting", {
-                retryCount: retry_count,
-            });
-            await this.compact_history({
-                turn_id: turn_context.session.turn_id,
-            });
-        }
-        const step = await this.compose_step(turn_context, retry_count, true);
-        return {
-            query,
-            system: step.input.system,
-            messages: step.input.messages,
-            ...(step.compose_input.history.summary?.summary_id
-                ? { history_summary_id: step.compose_input.history.summary.summary_id }
-                : {}),
-            tools: step.input.tools,
-        };
-    }
-    /**
-     * 执行一次已装配完成的 Step 输入。
-     */
-    async execute_prepared_input(input, model, turn_context) {
-        return await this.core_engine_runner.execute({
-            execute_input: input,
-            model,
-            turn_context,
-            resolve_step_inputs: async () => await this.resolve_step_inputs(turn_context),
-            reload_history: async () => {
-                const step = await this.compose_step(turn_context, 0, false);
-                return {
-                    messages: step.input.messages,
-                    ...(step.compose_input.history.summary?.summary_id
-                        ? { summary_id: step.compose_input.history.summary.summary_id }
-                        : {}),
-                };
-            },
-        });
-    }
-    /**
-     * 解析下一 Session step 实际使用的运行配置。
+     * 为下一 Provider Step 生成唯一一份完整输入。
      *
      * 关键点（中文）
      * - 调用方必须先提交 Session 统一输入队列，再调用本方法。
      * - 每次调用只读取一次 model、system 与 tools，并把它们传给同一个模型 step。
      */
-    async resolve_step_inputs(turn_context) {
-        const composed = await this.compose_step(turn_context, 0, true);
+    async resolve_step_input(turn_context, retry_count) {
+        const composed = await this.compose_step(turn_context, retry_count);
         return {
             model: composed.model,
             system: composed.input.system,
+            messages: composed.input.messages,
             tools: this.bind_turn_context_to_tools(composed.input.tools, turn_context),
-            ...(composed.compose_input.state.model_context_window !== undefined
+            ...(composed.context_window !== undefined
                 ? {
-                    context_window: composed.compose_input.state.model_context_window,
+                    context_window: composed.context_window,
                 }
                 : {}),
         };
     }
     /** 读取只读 Session 快照并交给统一 Composer。 */
-    async compose_step(turn_context, retry_count, refresh_plugins) {
-        if (refresh_plugins && turn_context)
-            await this.refresh_step_runtime(turn_context);
+    async compose_step(turn_context, retry_count) {
+        await this.refresh_step_runtime(turn_context);
         const compose_input = await this.get_compose_input(turn_context, retry_count);
         const model = compose_input.state.model;
         if (!model)
             throw new Error("requires a configured model.");
-        turn_context?.step.commit({
+        turn_context.step.commit({
             workspace_env: compose_input.state.env,
             agent_systems: compose_input.state.systems,
         });
         const raw_input = await this.composer.compose(compose_input);
         return {
-            compose_input,
             input: this.apply_system_snapshot
                 ? this.apply_system_snapshot(raw_input)
                 : raw_input,
             model,
+            ...(compose_input.state.model_context_window !== undefined
+                ? { context_window: compose_input.state.model_context_window }
+                : {}),
         };
     }
     /**
      * 刷新当前 Session step 的 effective Agent 运行视图。
      */
     async refresh_step_runtime(turn_context) {
-        await turn_context.step.replace_plugins(this.get_plugins?.().acquire());
+        const hooks = await this.get_hooks?.().open();
+        await turn_context.step.replace_hooks(hooks);
     }
     /**
      * 为所有 tool execute callback 绑定显式 Session 运行上下文。
@@ -249,50 +204,15 @@ export class Executor {
                     });
                     if (!is_action_result(output))
                         return output;
+                    if (Array.isArray(output.effects)) {
+                        turn_context.effects.append(output.effects);
+                    }
                     for (const message of output.messages) {
-                        if (message.role === "assistant") {
+                        if (message.role === "agent") {
                             turn_context.output.enqueue_assistant_parts(message.parts);
                             continue;
                         }
-                        const now = Date.now();
-                        turn_context.input.inject_user_message({
-                            message_id: `runtime-user:${turn_context.session.session_id}:${generate_id()}`,
-                            session_id: turn_context.session.session_id,
-                            turn_id: turn_context.session.turn_id,
-                            sequence: 0,
-                            revision: 1,
-                            visibility: "internal",
-                            created_at: now,
-                            updated_at: now,
-                            type: "user",
-                            input_type: "steer",
-                            parts: message.parts.map((part, index) => {
-                                if (part.type === "text") {
-                                    return {
-                                        part_id: `runtime-text:${index + 1}`,
-                                        type: "text",
-                                        text: part.text,
-                                        state: "done",
-                                    };
-                                }
-                                if (part.type === "file") {
-                                    return {
-                                        part_id: `runtime-file:${index + 1}`,
-                                        type: "file",
-                                        media_type: part.media_type,
-                                        url: part.url,
-                                        ...(part.filename ? { filename: part.filename } : {}),
-                                    };
-                                }
-                                return {
-                                    part_id: `runtime-data:${index + 1}`,
-                                    type: "data",
-                                    data_type: part.data_type,
-                                    data: part.data,
-                                    ...(part.data_id ? { data_id: part.data_id } : {}),
-                                };
-                            }),
-                        });
+                        await turn_context.input.append_internal(message.parts);
                     }
                     return output.output;
                 },
@@ -300,15 +220,13 @@ export class Executor {
         }
         return wrapped;
     }
-    /**
-     * 读取当前 session 模型。
-     */
-    resolve_model_or_throw() {
-        const model = this.get_model();
-        if (!model) {
-            throw new Error("requires a configured model.");
-        }
-        return model;
-    }
+}
+/** Core Engine 的单 Step 内恢复仍需同步识别 Provider 上下文错误。 */
+function is_provider_context_limit_error(error) {
+    const message = String(error ?? "").toLowerCase();
+    return message.includes("context_length") ||
+        message.includes("too long") ||
+        message.includes("maximum context") ||
+        message.includes("context window");
 }
 //# sourceMappingURL=Executor.js.map

package/bin/executor/Executor.js.map

@@ -1 +1 @@
-{"version":3,"file":"Executor.js","sourceRoot":"","sources":["../../src/executor/Executor.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAOH,OAAO,EAAE,gBAAgB,EAAE,MAAM,2CAA2C,CAAC;AAC7E,OAAO,EAAE,sBAAsB,EAAE,MAAM,8CAA8C,CAAC;AAStF,OAAO,EAAE,gBAAgB,EAAE,MAAM,gCAAgC,CAAC;AAClE,OAAO,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AA8C5C;;GAEG;AACH,MAAM,OAAO,QAAQ;IACnB;;OAEG;IACM,UAAU,CAAS;IAEX,QAAQ,CAAkB;IAC1B,iBAAiB,CAAuC;IACxD,qBAAqB,CAA4C;IACjE,eAAe,CAAqC;IACpD,SAAS,CAA+B;IACxC,WAAW,CAAiC;IAC5C,MAAM,CAAS;IACf,eAAe,CAAyB;IACxC,kBAAkB,CAAmB;IAE9C,SAAS,GAAG,KAAK,CAAC;IAE1B,YAAY,OAAwB;QAClC,MAAM,UAAU,GAAG,MAAM,CAAC,OAAO,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QAC3D,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;QAC9D,CAAC;QAED,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;QAC7B,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;QACjC,IAAI,CAAC,iBAAiB,GAAG,OAAO,CAAC,iBAAiB,CAAC;QACnD,IAAI,CAAC,qBAAqB,GAAG,OAAO,CAAC,qBAAqB,CAAC;QAC3D,IAAI,CAAC,eAAe,GAAG,OAAO,CAAC,eAAe,CAAC;QAC/C,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC;QACnC,IAAI,CAAC,WAAW,GAAG,OAAO,CAAC,WAAW,CAAC;QACvC,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;QAC7B,IAAI,CAAC,eAAe,GAAG,IAAI,sBAAsB,CAAC;YAChD,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,cAAc,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,cAAc,CAAC,KAAK,CAAC;YAC9D,MAAM,EAAE,IAAI,CAAC,MAAM;SACpB,CAAC,CAAC;QACH,IAAI,CAAC,kBAAkB,GAAG,IAAI,gBAAgB,CAAC;YAC7C,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,uBAAuB,EAAE,CAAC,KAAK,EAAE,EAAE,CACjC,IAAI,CAAC,QAAQ,CAAC,cAAc,CAAC,KAAK,CAAC;SACtC,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,YAAY;QACV,OAAO,IAAI,CAAC,SAAS,CAAC;IACxB,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,OAAO,CAAC,MAGb;QACC,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YACnB,yCAAyC;YACzC,iCAAiC;YACjC,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;QAC5E,CAAC;QACD,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QAChD,MAAM,YAAY,GAAG,MAAM,CAAC,YAAY,CAAC;QACzC,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;QACtB,IAAI,CAAC,eAAe,CAAC,qBAAqB,EAAE,CAAC;QAC7C,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,kBAAkB,CAAC;gBAC3D,KAAK;gBACL,KAAK,EAAE,IAAI,CAAC,sBAAsB,EAAE;gBACpC,YAAY;gBACZ,qBAAqB,EAAE,KAAK,EAAE,EAC5B,KAAK,EAAE,UAAU,EACjB,KAAK,EACL,YAAY,EAAE,iBAAiB,EAC/B,WAAW,GACZ,EAAE,EAAE,CACH,MAAM,IAAI,CAAC,qBAAqB,CAC9B,UAAU,EACV,KAAK,EACL,iBAAiB,EACjB,WAAW,CACZ;gBACH,sBAAsB,EAAE,KAAK,EAAE,EAC7B,aAAa,EACb,KAAK,EACL,YAAY,EAAE,iBAAiB,GAChC,EAAE,EAAE,CACH,MAAM,IAAI,CAAC,sBAAsB,CAC/B,aAAa,EACb,KAAK,EACL,iBAAiB,CAClB;aACJ,CAAC,CAAC;YACH,OAAO,MAAM,CAAC;QAChB,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC,eAAe,CAAC,qBAAqB,EAAE,CAAC;YAC7C,IAAI,CAAC,SAAS,GAAG,KAAK,CAAC;QACzB,CAAC;IACH,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,qBAAqB,CACjC,KAAa,EACb,MAAmB,EACnB,YAAgC,EAChC,WAAmB;QAEnB,IAAI,WAAW,GAAG,CAAC,EAAE,CAAC;YACpB,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE,oBAAoB,EAAE;gBAClD,UAAU,EAAE,WAAW;aACxB,CAAC,CAAC;YACH,MAAM,IAAI,CAAC,eAAe,CAAC;gBACzB,OAAO,EAAE,YAAY,CAAC,OAAO,CAAC,OAAO;aACtC,CAAC,CAAC;QACL,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,YAAY,EAAE,WAAW,EAAE,IAAI,CAAC,CAAC;QACtE,OAAO;YACL,KAAK;YACL,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM;YACzB,QAAQ,EAAE,IAAI,CAAC,KAAK,CAAC,QAAQ;YAC7B,GAAG,CAAC,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,OAAO,EAAE,UAAU;gBAChD,CAAC,CAAC,EAAE,kBAAkB,EAAE,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,OAAO,CAAC,UAAU,EAAE;gBACvE,CAAC,CAAC,EAAE,CAAC;YACP,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK;SACxB,CAAC;IACJ,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,sBAAsB,CAClC,KAAgC,EAChC,KAAkB,EAClB,YAAgC;QAEhC,OAAO,MAAM,IAAI,CAAC,kBAAkB,CAAC,OAAO,CAAC;YAC3C,aAAa,EAAE,KAAK;YACpB,KAAK;YACL,YAAY;YACZ,mBAAmB,EAAE,KAAK,IAAI,EAAE,CAC9B,MAAM,IAAI,CAAC,mBAAmB,CAAC,YAAY,CAAC;YAC9C,cAAc,EAAE,KAAK,IAAI,EAAE;gBACzB,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,YAAY,EAAE,CAAC,EAAE,KAAK,CAAC,CAAC;gBAC7D,OAAO;oBACL,QAAQ,EAAE,IAAI,CAAC,KAAK,CAAC,QAAQ;oBAC7B,GAAG,CAAC,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,OAAO,EAAE,UAAU;wBAChD,CAAC,CAAC,EAAE,UAAU,EAAE,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,OAAO,CAAC,UAAU,EAAE;wBAC/D,CAAC,CAAC,EAAE,CAAC;iBACR,CAAC;YACJ,CAAC;SACF,CAAC,CAAC;IACL,CAAC;IAED;;;;;;OAMG;IACK,KAAK,CAAC,mBAAmB,CAAC,YAAgC;QAMhE,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,YAAY,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC;QAChE,OAAO;YACL,KAAK,EAAE,QAAQ,CAAC,KAAK;YACrB,MAAM,EAAE,QAAQ,CAAC,KAAK,CAAC,MAAM;YAC7B,KAAK,EAAE,IAAI,CAAC,0BAA0B,CACpC,QAAQ,CAAC,KAAK,CAAC,KAAK,EACpB,YAAY,CACb;YACD,GAAG,CAAC,QAAQ,CAAC,aAAa,CAAC,KAAK,CAAC,oBAAoB,KAAK,SAAS;gBACjE,CAAC,CAAC;oBACE,cAAc,EACZ,QAAQ,CAAC,aAAa,CAAC,KAAK,CAAC,oBAAoB;iBACpD;gBACH,CAAC,CAAC,EAAE,CAAC;SACR,CAAC;IACJ,CAAC;IAED,qCAAqC;IAC7B,KAAK,CAAC,YAAY,CACxB,YAA4C,EAC5C,WAAmB,EACnB,eAAwB;QAMxB,IAAI,eAAe,IAAI,YAAY;YAAE,MAAM,IAAI,CAAC,oBAAoB,CAAC,YAAY,CAAC,CAAC;QACnF,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAChD,YAAY,EACZ,WAAW,CACZ,CAAC;QACF,MAAM,KAAK,GAAG,aAAa,CAAC,KAAK,CAAC,KAAK,CAAC;QACxC,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;QAC5D,YAAY,EAAE,IAAI,CAAC,MAAM,CAAC;YACxB,aAAa,EAAE,aAAa,CAAC,KAAK,CAAC,GAAG;YACtC,aAAa,EAAE,aAAa,CAAC,KAAK,CAAC,OAAO;SAC3C,CAAC,CAAC;QACH,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;QAC7D,OAAO;YACL,aAAa;YACb,KAAK,EAAE,IAAI,CAAC,qBAAqB;gBAC/B,CAAC,CAAC,IAAI,CAAC,qBAAqB,CAAC,SAAS,CAAC;gBACvC,CAAC,CAAC,SAAS;YACb,KAAK;SACN,CAAC;IACJ,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,oBAAoB,CAChC,YAAgC;QAEhC,MAAM,YAAY,CAAC,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;IAC1E,CAAC;IAED;;;;;;OAMG;IACK,0BAA0B,CAChC,KAA2B,EAC3B,YAAgC;QAEhC,MAAM,OAAO,GAAyB,EAAE,CAAC;QACzC,KAAK,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACjD,MAAM,gBAAgB,GAAG,IAAI,CAAC,OAAO,CAAC;YACtC,IAAI,OAAO,gBAAgB,KAAK,UAAU,EAAE,CAAC;gBAC3C,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;gBACrB,SAAS;YACX,CAAC;YACD,OAAO,CAAC,IAAI,CAAC,GAAG;gBACd,GAAG,IAAI;gBACP,OAAO,EAAE,KAAK,EAAE,IAAa,EAAE,OAA6B,EAAE,EAAE;oBAC9D,MAAM,YAAY,GAAG,MAAM,CAAC,OAAO,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;oBAC/D,IAAI,CAAC,YAAY,EAAE,CAAC;wBAClB,MAAM,IAAI,KAAK,CAAC,uCAAuC,IAAI,EAAE,CAAC,CAAC;oBACjE,CAAC;oBACD,IAAI,YAAY,IAAI,YAAY,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;wBAClD,MAAM,YAAY,CAAC,MAAM,CAAC,SAAS,CAAC,kBAAkB,CAAC;4BACrD,YAAY;4BACZ,SAAS,EAAE,IAAI;4BACf,KAAK,EAAE,IAAI;yBACZ,CAAC,CAAC;oBACL,CAAC;oBACD,MAAM,YAAY,GAAG,OAAO,CAAC,YAAY;wBACvC,YAAY,CAAC,SAAS,CAAC,YAAY,CAAC;oBACtC,MAAM,iBAAiB,GAAgC;wBACrD,oBAAoB,EAAE,YAAY;wBAClC,wBAAwB,EAAE;4BACxB,OAAO,EAAE,YAAY;4BACrB,YAAY;4BACZ,OAAO,EAAE;gCACP,UAAU,EAAE,YAAY,CAAC,OAAO,CAAC,UAAU;gCAC3C,OAAO,EAAE,YAAY,CAAC,OAAO,CAAC,OAAO;gCACrC,YAAY,EAAE,YAAY,CAAC,YAAY;6BACxC;4BACD,GAAG,CAAC,YAAY,CAAC,OAAO,CAAC,YAAY;gCACnC,CAAC,CAAC,EAAE,cAAc,EAAE,YAAY,CAAC,OAAO,CAAC,YAAY,EAAE;gCACvD,CAAC,CAAC,EAAE,CAAC;4BACP,GAAG,CAAC,YAAY,CAAC,IAAI,CAAC,aAAa;gCACjC,CAAC,CAAC,EAAE,aAAa,EAAE,YAAY,CAAC,IAAI,CAAC,aAAa,EAAE;gCACpD,CAAC,CAAC,EAAE,CAAC;yBACR;wBACD,uBAAuB,EAAE;4BACvB,OAAO,EAAE;gCACP,UAAU,EAAE,YAAY,CAAC,OAAO,CAAC,UAAU;gCAC3C,OAAO,EAAE,YAAY,CAAC,OAAO,CAAC,OAAO;6BACtC;4BACD,OAAO,EAAE,YAAY;4BACrB,YAAY;4BACZ,GAAG,CAAC,YAAY,CAAC,IAAI,CAAC,aAAa;gCACjC,CAAC,CAAC,EAAE,aAAa,EAAE,YAAY,CAAC,IAAI,CAAC,aAAa,EAAE;gCACpD,CAAC,CAAC,EAAE,CAAC;4BACP,GAAG,CAAC,YAAY,CAAC,KAAK,CAAC,gBAAgB;gCACrC,CAAC,CAAC,EAAE,gBAAgB,EAAE,YAAY,CAAC,KAAK,CAAC,gBAAgB,EAAE;gCAC3D,CAAC,CAAC,EAAE,CAAC;yBACR;qBACF,CAAC;oBACF,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,IAAI,EAAE;wBAC1C,GAAG,OAAO;wBACV,OAAO,EAAE,iBAAiB;qBAC3B,CAAC,CAAC;oBACH,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC;wBAAE,OAAO,MAAM,CAAC;oBAC7C,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;wBACtC,IAAI,OAAO,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;4BACjC,YAAY,CAAC,MAAM,CAAC,uBAAuB,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;4BAC3D,SAAS;wBACX,CAAC;wBACD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;wBACvB,YAAY,CAAC,KAAK,CAAC,mBAAmB,CAAC;4BACrC,UAAU,EAAE,gBAAgB,YAAY,CAAC,OAAO,CAAC,UAAU,IAAI,WAAW,EAAE,EAAE;4BAC9E,UAAU,EAAE,YAAY,CAAC,OAAO,CAAC,UAAU;4BAC3C,OAAO,EAAE,YAAY,CAAC,OAAO,CAAC,OAAO;4BACrC,QAAQ,EAAE,CAAC;4BACX,QAAQ,EAAE,CAAC;4BACX,UAAU,EAAE,UAAU;4BACtB,UAAU,EAAE,GAAG;4BACf,UAAU,EAAE,GAAG;4BACf,IAAI,EAAE,MAAM;4BACZ,UAAU,EAAE,OAAO;4BACnB,KAAK,EAAE,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE;gCACvC,IAAI,IAAI,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;oCACzB,OAAO;wCACL,OAAO,EAAE,gBAAgB,KAAK,GAAG,CAAC,EAAE;wCACpC,IAAI,EAAE,MAAe;wCACrB,IAAI,EAAE,IAAI,CAAC,IAAI;wCACf,KAAK,EAAE,MAAe;qCACvB,CAAC;gCACJ,CAAC;gCACD,IAAI,IAAI,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;oCACzB,OAAO;wCACL,OAAO,EAAE,gBAAgB,KAAK,GAAG,CAAC,EAAE;wCACpC,IAAI,EAAE,MAAe;wCACrB,UAAU,EAAE,IAAI,CAAC,UAAU;wCAC3B,GAAG,EAAE,IAAI,CAAC,GAAG;wCACb,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;qCACtD,CAAC;gCACJ,CAAC;gCACD,OAAO;oCACL,OAAO,EAAE,gBAAgB,KAAK,GAAG,CAAC,EAAE;oCACpC,IAAI,EAAE,MAAe;oCACrB,SAAS,EAAE,IAAI,CAAC,SAAS;oCACzB,IAAI,EAAE,IAAI,CAAC,IAAI;oCACf,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iCACnD,CAAC;4BACJ,CAAC,CAAC;yBACH,CAAC,CAAC;oBACL,CAAC;oBACD,OAAO,MAAM,CAAC,MAAM,CAAC;gBACvB,CAAC;aACF,CAAC;QACJ,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IAED;;OAEG;IACK,sBAAsB;QAC5B,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;QAC/B,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;QAClD,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;CACF"}
+{"version":3,"file":"Executor.js","sourceRoot":"","sources":["../../src/executor/Executor.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAQH,OAAO,EAAE,gBAAgB,EAAE,MAAM,2CAA2C,CAAC;AAC7E,OAAO,EAAE,sBAAsB,EAAE,MAAM,8CAA8C,CAAC;AAKtF,OAAO,EAAE,gBAAgB,EAAE,MAAM,gCAAgC,CAAC;AA0ClE;;GAEG;AACH,MAAM,OAAO,QAAQ;IACnB;;OAEG;IACM,UAAU,CAAS;IAEX,QAAQ,CAAkB;IAC1B,iBAAiB,CAAuC;IACxD,eAAe,CAAqC;IACpD,qBAAqB,CAA4C;IACjE,SAAS,CAA+B;IACxC,MAAM,CAAS;IACf,eAAe,CAAyB;IACxC,kBAAkB,CAAmB;IAE9C,SAAS,GAAG,KAAK,CAAC;IAE1B,YAAY,OAAwB;QAClC,MAAM,UAAU,GAAG,MAAM,CAAC,OAAO,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QAC3D,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;QAC9D,CAAC;QAED,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;QAC7B,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;QACjC,IAAI,CAAC,iBAAiB,GAAG,OAAO,CAAC,iBAAiB,CAAC;QACnD,IAAI,CAAC,eAAe,GAAG,OAAO,CAAC,eAAe,CAAC;QAC/C,IAAI,CAAC,qBAAqB,GAAG,OAAO,CAAC,qBAAqB,CAAC;QAC3D,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC;QACnC,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;QAC7B,IAAI,CAAC,eAAe,GAAG,IAAI,sBAAsB,CAAC;YAChD,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,eAAe,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,CAC/B,+BAA+B,CAAC,KAAK,CAAC;gBACpC,CAAC,CAAC,MAAM,IAAI,CAAC,eAAe,CAAC,wBAAwB,CAAC;gBACtD,CAAC,CAAC,KAAK;YACX,MAAM,EAAE,IAAI,CAAC,MAAM;SACpB,CAAC,CAAC;QACH,IAAI,CAAC,kBAAkB,GAAG,IAAI,gBAAgB,CAAC;YAC7C,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,uBAAuB,EAAE,CAAC,KAAK,EAAE,EAAE,CACjC,+BAA+B,CAAC,KAAK,CAAC;SACzC,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,YAAY;QACV,OAAO,IAAI,CAAC,SAAS,CAAC;IACxB,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,OAAO,CAAC,MAEb;QACC,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YACnB,yCAAyC;YACzC,iCAAiC;YACjC,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;QAC5E,CAAC;QACD,MAAM,YAAY,GAAG,MAAM,CAAC,YAAY,CAAC;QACzC,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;QACtB,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,kBAAkB,CAAC;gBAC3D,YAAY,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE,CAClC,MAAM,IAAI,CAAC,kBAAkB,CAAC,OAAO,CAAC;oBACpC,YAAY;oBACZ,kBAAkB,EAAE,KAAK,IAAI,EAAE,CAC7B,MAAM,IAAI,CAAC,kBAAkB,CAAC,YAAY,EAAE,WAAW,CAAC;iBAC3D,CAAC;aACL,CAAC,CAAC;YACH,OAAO,MAAM,CAAC;QAChB,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC,SAAS,GAAG,KAAK,CAAC;QACzB,CAAC;IACH,CAAC;IAED;;;;;;OAMG;IACK,KAAK,CAAC,kBAAkB,CAC9B,YAAgC,EAChC,WAAmB;QAEnB,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,YAAY,EAAE,WAAW,CAAC,CAAC;QACpE,OAAO;YACL,KAAK,EAAE,QAAQ,CAAC,KAAK;YACrB,MAAM,EAAE,QAAQ,CAAC,KAAK,CAAC,MAAM;YAC7B,QAAQ,EAAE,QAAQ,CAAC,KAAK,CAAC,QAAQ;YACjC,KAAK,EAAE,IAAI,CAAC,0BAA0B,CACpC,QAAQ,CAAC,KAAK,CAAC,KAAK,EACpB,YAAY,CACb;YACD,GAAG,CAAC,QAAQ,CAAC,cAAc,KAAK,SAAS;gBACvC,CAAC,CAAC;oBACE,cAAc,EAAE,QAAQ,CAAC,cAAc;iBACxC;gBACH,CAAC,CAAC,EAAE,CAAC;SACR,CAAC;IACJ,CAAC;IAED,qCAAqC;IAC7B,KAAK,CAAC,YAAY,CACxB,YAAgC,EAChC,WAAmB;QAMnB,MAAM,IAAI,CAAC,oBAAoB,CAAC,YAAY,CAAC,CAAC;QAC9C,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAChD,YAAY,EACZ,WAAW,CACZ,CAAC;QACF,MAAM,KAAK,GAAG,aAAa,CAAC,KAAK,CAAC,KAAK,CAAC;QACxC,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;QAC5D,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC;YACvB,aAAa,EAAE,aAAa,CAAC,KAAK,CAAC,GAAG;YACtC,aAAa,EAAE,aAAa,CAAC,KAAK,CAAC,OAAO;SAC3C,CAAC,CAAC;QACH,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;QAC7D,OAAO;YACL,KAAK,EAAE,IAAI,CAAC,qBAAqB;gBAC/B,CAAC,CAAC,IAAI,CAAC,qBAAqB,CAAC,SAAS,CAAC;gBACvC,CAAC,CAAC,SAAS;YACb,KAAK;YACL,GAAG,CAAC,aAAa,CAAC,KAAK,CAAC,oBAAoB,KAAK,SAAS;gBACxD,CAAC,CAAC,EAAE,cAAc,EAAE,aAAa,CAAC,KAAK,CAAC,oBAAoB,EAAE;gBAC9D,CAAC,CAAC,EAAE,CAAC;SACR,CAAC;IACJ,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,oBAAoB,CAChC,YAAgC;QAEhC,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,SAAS,EAAE,EAAE,CAAC,IAAI,EAAE,CAAC;QAC9C,MAAM,YAAY,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;IAC/C,CAAC;IAED;;;;;;OAMG;IACK,0BAA0B,CAChC,KAA2B,EAC3B,YAAgC;QAEhC,MAAM,OAAO,GAAyB,EAAE,CAAC;QACzC,KAAK,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACjD,MAAM,gBAAgB,GAAG,IAAI,CAAC,OAAO,CAAC;YACtC,IAAI,OAAO,gBAAgB,KAAK,UAAU,EAAE,CAAC;gBAC3C,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;gBACrB,SAAS;YACX,CAAC;YACD,OAAO,CAAC,IAAI,CAAC,GAAG;gBACd,GAAG,IAAI;gBACP,OAAO,EAAE,KAAK,EAAE,IAAa,EAAE,OAA6B,EAAE,EAAE;oBAC9D,MAAM,YAAY,GAAG,MAAM,CAAC,OAAO,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;oBAC/D,IAAI,CAAC,YAAY,EAAE,CAAC;wBAClB,MAAM,IAAI,KAAK,CAAC,uCAAuC,IAAI,EAAE,CAAC,CAAC;oBACjE,CAAC;oBACD,IAAI,YAAY,IAAI,YAAY,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;wBAClD,MAAM,YAAY,CAAC,MAAM,CAAC,SAAS,CAAC,kBAAkB,CAAC;4BACrD,YAAY;4BACZ,SAAS,EAAE,IAAI;4BACf,KAAK,EAAE,IAAI;yBACZ,CAAC,CAAC;oBACL,CAAC;oBACD,MAAM,YAAY,GAAG,OAAO,CAAC,YAAY;wBACvC,YAAY,CAAC,SAAS,CAAC,YAAY,CAAC;oBACtC,MAAM,iBAAiB,GAAgC;wBACrD,oBAAoB,EAAE,YAAY;wBAClC,wBAAwB,EAAE;4BACxB,OAAO,EAAE,YAAY;4BACrB,YAAY;4BACZ,OAAO,EAAE;gCACP,UAAU,EAAE,YAAY,CAAC,OAAO,CAAC,UAAU;gCAC3C,OAAO,EAAE,YAAY,CAAC,OAAO,CAAC,OAAO;gCACrC,YAAY,EAAE,YAAY,CAAC,YAAY;6BACxC;4BACD,GAAG,CAAC,YAAY,CAAC,OAAO,CAAC,YAAY;gCACnC,CAAC,CAAC,EAAE,cAAc,EAAE,YAAY,CAAC,OAAO,CAAC,YAAY,EAAE;gCACvD,CAAC,CAAC,EAAE,CAAC;4BACP,GAAG,CAAC,YAAY,CAAC,IAAI,CAAC,aAAa;gCACjC,CAAC,CAAC,EAAE,aAAa,EAAE,YAAY,CAAC,IAAI,CAAC,aAAa,EAAE;gCACpD,CAAC,CAAC,EAAE,CAAC;yBACR;wBACD,uBAAuB,EAAE;4BACvB,OAAO,EAAE;gCACP,UAAU,EAAE,YAAY,CAAC,OAAO,CAAC,UAAU;gCAC3C,OAAO,EAAE,YAAY,CAAC,OAAO,CAAC,OAAO;6BACtC;4BACD,OAAO,EAAE,YAAY;4BACrB,YAAY;4BACZ,GAAG,CAAC,YAAY,CAAC,IAAI,CAAC,aAAa;gCACjC,CAAC,CAAC,EAAE,aAAa,EAAE,YAAY,CAAC,IAAI,CAAC,aAAa,EAAE;gCACpD,CAAC,CAAC,EAAE,CAAC;4BACP,GAAG,CAAC,YAAY,CAAC,KAAK,CAAC,gBAAgB;gCACrC,CAAC,CAAC,EAAE,gBAAgB,EAAE,YAAY,CAAC,KAAK,CAAC,gBAAgB,EAAE;gCAC3D,CAAC,CAAC,EAAE,CAAC;yBACR;qBACF,CAAC;oBACF,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,IAAI,EAAE;wBAC1C,GAAG,OAAO;wBACV,OAAO,EAAE,iBAAiB;qBAC3B,CAAC,CAAC;oBACH,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC;wBAAE,OAAO,MAAM,CAAC;oBAC7C,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;wBAClC,YAAY,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;oBAC9C,CAAC;oBACD,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;wBACtC,IAAI,OAAO,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;4BAC7B,YAAY,CAAC,MAAM,CAAC,uBAAuB,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;4BAC3D,SAAS;wBACX,CAAC;wBACD,MAAM,YAAY,CAAC,KAAK,CAAC,eAAe,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;oBAC1D,CAAC;oBACD,OAAO,MAAM,CAAC,MAAM,CAAC;gBACvB,CAAC;aACF,CAAC;QACJ,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;CAEF;AAED,oDAAoD;AACpD,SAAS,+BAA+B,CAAC,KAAc;IACrD,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;IAClD,OAAO,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAC;QACvC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC;QAC5B,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAC;QACnC,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAAC;AACvC,CAAC"}

package/bin/executor/composer/system/default/SystemPromptAssets.d.ts

@@ -9,8 +9,4 @@
  * 默认 core system prompt。
  */
 export declare const CORE_SYSTEM_PROMPT: string;
-/**
- * task 模式专用 system prompt。
- */
-export declare const TASK_SYSTEM_PROMPT: string;
 //# sourceMappingURL=SystemPromptAssets.d.ts.map

package/bin/executor/composer/system/default/SystemPromptAssets.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"SystemPromptAssets.d.ts","sourceRoot":"","sources":["../../../../../src/executor/composer/system/default/SystemPromptAssets.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAKH;;GAEG;AACH,eAAO,MAAM,kBAAkB,QAA8B,CAAC;AAE9D;;GAEG;AACH,eAAO,MAAM,kBAAkB,QAA8B,CAAC"}
+{"version":3,"file":"SystemPromptAssets.d.ts","sourceRoot":"","sources":["../../../../../src/executor/composer/system/default/SystemPromptAssets.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAIH;;GAEG;AACH,eAAO,MAAM,kBAAkB,QAA8B,CAAC"}

package/bin/executor/composer/system/default/SystemPromptAssets.js

@@ -5,14 +5,9 @@
  * - prompt 文本真实来源是 `*.ts.txt`，build 时自动生成对应 TS 模块。
  * - 这里负责统一做 `trim()`，保证运行时行为稳定。
  */
-import coreSystemPromptText from "./assets/core.prompt.js";
-import taskSystemPromptText from "./assets/task.prompt.js";
+import coreSystemPromptText from "../../../composer/system/default/assets/core.prompt.js";
 /**
  * 默认 core system prompt。
  */
 export const CORE_SYSTEM_PROMPT = coreSystemPromptText.trim();
-/**
- * task 模式专用 system prompt。
- */
-export const TASK_SYSTEM_PROMPT = taskSystemPromptText.trim();
 //# sourceMappingURL=SystemPromptAssets.js.map

package/bin/executor/composer/system/default/SystemPromptAssets.js.map

@@ -1 +1 @@
-{"version":3,"file":"SystemPromptAssets.js","sourceRoot":"","sources":["../../../../../src/executor/composer/system/default/SystemPromptAssets.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,oBAAoB,MAAM,yDAAyD,CAAC;AAC3F,OAAO,oBAAoB,MAAM,yDAAyD,CAAC;AAE3F;;GAEG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,oBAAoB,CAAC,IAAI,EAAE,CAAC;AAE9D;;GAEG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,oBAAoB,CAAC,IAAI,EAAE,CAAC"}
+{"version":3,"file":"SystemPromptAssets.js","sourceRoot":"","sources":["../../../../../src/executor/composer/system/default/SystemPromptAssets.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,oBAAoB,MAAM,yDAAyD,CAAC;AAE3F;;GAEG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,oBAAoB,CAAC,IAAI,EAAE,CAAC"}

package/bin/executor/composer/system/default/assets/core.prompt.d.ts

@@ -2,6 +2,6 @@
  * 自动生成文件，请勿手改。
  * 源文件：由同路径 `*.ts.txt` 生成。
  */
-declare const TEXT_MODULE_CONTENT = "# Harness Design\n\nYou are a Downcity Agent.  is a harness around an existing human-owned workspace, not a replacement platform or a detached autonomous worker.\n\n- The harness lets the Agent enter the user's existing project instead of forcing the user to migrate work into a new AI platform.\n- The project structure is the control surface. Files, directories, scripts, docs, configuration, and existing workflows define the practical business boundary.\n- The Agent inherits the workspace's knowledge topology. Read and follow the existing structure before creating new abstractions, stores, or process layers.\n- The harness keeps the human in control. The user owns intent, boundaries, approvals, and final judgment; the Agent supplies high-density execution inside those boundaries.\n- Agent state should remain observable and handoff-friendly. Prefer outputs, changes, and explanations that a human can inspect, resume, or correct through normal project artifacts.\n- Autonomy should be progressive. Execute low-risk, reversible work directly; pause for clarification or approval when the boundary, consequence, or owner is unclear.\n- Tools and plugins are harness surfaces. Use them to act precisely in the current execution context without treating any tool as a reason to ignore the user's native workflow.\n- Prefer project-native, maintainable changes over clever platform-shaped abstractions. The best result should feel like it naturally belongs in the existing workspace.\n\n# Shell Commands\n\nCommand execution tools:\n- Prefer `shell_exec` for short, one-off commands.\n- Use `shell_session` for long-running tasks, tasks that need status checks, or processes that need stdin interaction.\n- For long-running tasks, use `wait_ms` with `shell_session` to wait for output or state changes and avoid frequent polling overhead.\n- Start a long-running command with `shell_session({ action: \"start\", cmd })` and keep the returned `shell_id`.\n- `shell_id` identifies a shell session; it is not a chat `session_id`.\n- During long-running tasks, read new output with `shell_session({ action: \"read\", shell_id })`. Do not implement your own high-frequency empty polling loop.\n- When a process needs stdin, use `shell_session({ action: \"send\", shell_id, input })`.\n- When sending stdin to an unrestricted shell session, every `send` call must include a clear `reason`. Invoke the tool directly; the runtime pauses the call and requests user approval before writing. Approval for `start` only authorizes starting the process; it does not authorize later stdin writes.\n- When a command session is complete and no longer needed, release it with `shell_session({ action: \"stop\", shell_id })`.\n- Do not forward very long raw shell output directly to the user. Summarize it first.\n- Shell commands run in the Safe Sandbox by default: the project directory is readable/writable, network is available, HOME points to the current Agent private runtime directory's private Sandbox directory, and the real user HOME plus system directories are not writable.\n- When installing Python dependencies, prefer a project-local `.venv`; do not use `pip install --user`.\n- If a task requires global installation, host-directory writes, or host-level capabilities, invoke the appropriate shell tool directly with `sandbox: \"unrestricted\"` and a clear `reason`. The runtime pauses before execution and presents the approval request to the user.\n- Do not ask for a separate chat confirmation before issuing an unrestricted tool call when the command and reason are already clear. Do not claim that an approval request was sent unless you actually emitted the tool call.\n- Do not attempt `sudo`, Xcode Command Line Tools installation, SSH/keychain/shell profile modification, or obviously destructive commands. These requests are rejected even with unrestricted sandbox access.\n- If the user rejects an unrestricted sandbox request, do not keep asking for the same command. Explain the impact and provide a project-local alternative when possible.\n- Downloads for models, tool caches, and temporary state should naturally live under the current Agent private runtime directory's private Sandbox directory or the project directory. Do not assume access to the real user's cache.\n\n# File Operations\n\nStructured file tools:\n- Use `grep` to search project file contents instead of running `rg` through the shell.\n- Use `find` to discover project files by glob pattern instead of running shell `find`.\n- Use `read` to examine project files instead of `cat`, `head`, `tail`, or `sed`. Continue with the returned `next_offset` when `truncated` is true.\n- Use `write` for new files or complete rewrites. Existing files are not overwritten unless `overwrite: true` is explicit.\n- Use `edit` for precise changes. Every `edits[].old_text` must match exactly once in the original file.\n- When changing multiple separate locations in one file, use one `edit` call with multiple non-overlapping entries.\n- Pass the SHA-256 returned by `read` as `edit.expected_sha256` when the file may be changed concurrently.\n- File and search tools only operate inside the current project root and never support unrestricted access. Use the approved shell workflow only when the user explicitly authorizes a broader action.\n\n# Plugin System\n\nYou are working in a plugin-based execution environment.\n\nPlugin call rules:\n- When you need plugin capabilities, prefer invoking the plugin action through the available tools.\n- If `plugin_read` is available, call `plugin_read({})` to list the plugins actually registered in the current Agent before choosing one. Use `plugin_read({ plugin, action? })` to inspect its action schema and examples.\n- If `plugin_call` is available, call the action with `plugin_call({ plugin, action, payload })`.\n- `plugin_call.plugin` must be a plugin name returned by `plugin_read({})`.\n- `plugin_call.action` must be an action name returned by `plugin_read({ plugin })`.\n- `plugin_call.payload` is a structured JSON payload. Pass `{}` when there are no parameters. If the action metadata declares an input schema, the payload must conform to that schema.\n- `ActionSchedule` is an internal Agent capability for delayed plugin actions. It is not a standalone plugin.\n\nSpecific plugin capabilities are defined by the action metadata returned by `plugin_read` and by each plugin's system prompt.\n\n# Default Decisions And Clarification\n\n- Execute first and communicate second by default: for low-risk, reversible requests where the user's intent is clear enough, use the current date, timezone, chat context, and common defaults to proceed. Do not repeatedly ask about obvious event titles, default platforms, or clear time expressions.\n- Ask a clarification only when missing information would materially change the outcome, such as the date, target object, amount, account, recipient, or when an action is irreversible, high-risk, or privacy-sensitive.\n- When handling relative time expressions, prefer the runtime-provided `current_date`, `current_time`, and `timezone`. If inbound `<info>` explicitly provides `user_timezone`, use that first; otherwise use the runtime clock timezone. For expressions such as \"today\", \"tomorrow\", \"2 PM\", or \"two hours earlier\", resolve them to absolute times before acting, and state the absolute date and time in your reply.\n- When a task depends on external permissions, system capabilities, or third-party connections such as calendars, reminders, chat channels, or system authorization, probe availability first before promising to create, send, or write anything.\n- If probing shows a blocker caused by system permissions, host environment, or connection state, state the real blocker and next step directly. Do not first promise that you can do it and then spend multiple turns asking follow-up questions.\n- If you have enough information to complete several low-risk default actions in one pass, complete them and briefly state which assumptions you used.\n\n# Very Important\n\nSafety and boundaries:\n- Do not run destructive commands such as `rm -rf` or `git reset --hard` unless the user explicitly asks for them.\n- For API keys, tokens, secrets, environment variables, bot credentials, and similar sensitive configuration, prefer guiding the user to maintain them in `Global / Env` or the owning Plugin's Mainview. Do not ask the user to paste secret values directly into the current chat.\n- Secret-listing capabilities can return only configured key names and descriptions. They never return secret values. Do not ask the user to \"send the secret to you\" or keep trying to retrieve plaintext secrets.\n";
+declare const TEXT_MODULE_CONTENT = "# Harness Design\n\nYou are a Downcity Agent.  is a harness around an existing human-owned workspace, not a replacement platform or a detached autonomous worker.\n\n- The harness lets the Agent enter the user's existing project instead of forcing the user to migrate work into a new AI platform.\n- The project structure is the control surface. Files, directories, scripts, docs, configuration, and existing workflows define the practical business boundary.\n- The Agent inherits the workspace's knowledge topology. Read and follow the existing structure before creating new abstractions, stores, or process layers.\n- The harness keeps the human in control. The user owns intent, boundaries, approvals, and final judgment; the Agent supplies high-density execution inside those boundaries.\n- Agent state should remain observable and handoff-friendly. Prefer outputs, changes, and explanations that a human can inspect, resume, or correct through normal project artifacts.\n- Autonomy should be progressive. Execute low-risk, reversible work directly; pause for clarification or approval when the boundary, consequence, or owner is unclear.\n- Tools and plugins are harness surfaces. Use them to act precisely in the current execution context without treating any tool as a reason to ignore the user's native workflow.\n- Prefer project-native, maintainable changes over clever platform-shaped abstractions. The best result should feel like it naturally belongs in the existing workspace.\n\n# Shell Commands\n\nCommand execution tools:\n- Prefer `shell_exec` for short, one-off commands.\n- Use `shell_session` for long-running tasks, tasks that need status checks, or processes that need stdin interaction.\n- For long-running tasks, use `wait_ms` with `shell_session` to wait for output or state changes and avoid frequent polling overhead.\n- Start a long-running command with `shell_session({ action: \"start\", cmd })` and keep the returned `shell_id`.\n- `shell_id` identifies a shell session; it is not a chat `session_id`.\n- During long-running tasks, read new output with `shell_session({ action: \"read\", shell_id })`. Do not implement your own high-frequency empty polling loop.\n- When a process needs stdin, use `shell_session({ action: \"send\", shell_id, input })`.\n- When sending stdin to a host shell session, every `send` call must include a clear `reason`. Invoke the tool directly; the runtime pauses the call and requests user approval before writing. Approval for `start` only authorizes starting the process; it does not authorize later stdin writes.\n- When a command session is complete and no longer needed, release it with `shell_session({ action: \"stop\", shell_id })`.\n- Do not forward very long raw shell output directly to the user. Summarize it first.\n- Shell commands use the Workspace's persistent isolated Sandbox by default. The project is mounted at `/workspace`; HOME, installed tools, and caches persist across chat sessions that use the same Workspace. Different Workspaces do not share writable Sandbox state.\n- When installing Python dependencies, prefer a project-local `.venv`; do not use `pip install --user`.\n- If a task requires host-directory writes or host-level capabilities, invoke the appropriate shell tool directly with `target: \"host\"` and a clear `reason`. The runtime pauses before execution and presents the approval request to the user.\n- Do not ask for a separate chat confirmation before issuing a host tool call when the command and reason are already clear. Do not claim that an approval request was sent unless you actually emitted the tool call.\n- Do not attempt `sudo`, Xcode Command Line Tools installation, SSH/keychain/shell profile modification, or obviously destructive commands. These requests are rejected even for host execution.\n- If the user rejects a host execution request, do not keep asking for the same command. Explain the impact and provide a Sandbox alternative when possible.\n- Downloads, tool caches, global package installs, and temporary state should normally live in the current Workspace Sandbox HOME. Do not assume access to the real user's HOME or cache.\n\n# File Operations\n\nStructured file tools:\n- Use `grep` to search project file contents instead of running `rg` through the shell.\n- Use `find` to discover project files by glob pattern instead of running shell `find`.\n- Use `read` to examine project files instead of `cat`, `head`, `tail`, or `sed`. Continue with the returned `next_offset` when `truncated` is true.\n- Use `write` for new files or complete rewrites. Existing files are not overwritten unless `overwrite: true` is explicit.\n- Use `edit` for precise changes. Every `edits[].old_text` must match exactly once in the original file.\n- When changing multiple separate locations in one file, use one `edit` call with multiple non-overlapping entries.\n- Pass the SHA-256 returned by `read` as `edit.expected_sha256` when the file may be changed concurrently.\n- File and search tools only operate inside the current project root and never support host access. Use the approved host shell workflow only when the user explicitly authorizes a broader action.\n\n# Plugin System\n\nYou are working in a plugin-based execution environment.\n\nPlugin call rules:\n- When you need plugin capabilities, prefer invoking the plugin action through the available tools.\n- If `plugin_read` is available, call `plugin_read({})` to list the plugins actually registered in the current Agent before choosing one. Use `plugin_read({ plugin, action? })` to inspect its action schema and examples.\n- If `plugin_call` is available, call the action with `plugin_call({ plugin, action, payload })`.\n- `plugin_call.plugin` must be a plugin name returned by `plugin_read({})`.\n- `plugin_call.action` must be an action name returned by `plugin_read({ plugin })`.\n- `plugin_call.payload` is a structured JSON payload. Pass `{}` when there are no parameters. If the action metadata declares an input schema, the payload must conform to that schema.\n- `ActionSchedule` is an internal Agent capability for delayed plugin actions. It is not a standalone plugin.\n\nSpecific plugin capabilities are defined by the action metadata returned by `plugin_read` and by each plugin's system prompt.\n\n# Default Decisions And Clarification\n\n- Execute first and communicate second by default: for low-risk, reversible requests where the user's intent is clear enough, use the current date, timezone, chat context, and common defaults to proceed. Do not repeatedly ask about obvious event titles, default platforms, or clear time expressions.\n- Ask a clarification only when missing information would materially change the outcome, such as the date, target object, amount, account, recipient, or when an action is irreversible, high-risk, or privacy-sensitive.\n- When handling relative time expressions, prefer the runtime-provided `current_date`, `current_time`, and `timezone`. If inbound `<info>` explicitly provides `user_timezone`, use that first; otherwise use the runtime clock timezone. For expressions such as \"today\", \"tomorrow\", \"2 PM\", or \"two hours earlier\", resolve them to absolute times before acting, and state the absolute date and time in your reply.\n- When a task depends on external permissions, system capabilities, or third-party connections such as calendars, reminders, chat channels, or system authorization, probe availability first before promising to create, send, or write anything.\n- If probing shows a blocker caused by system permissions, host environment, or connection state, state the real blocker and next step directly. Do not first promise that you can do it and then spend multiple turns asking follow-up questions.\n- If you have enough information to complete several low-risk default actions in one pass, complete them and briefly state which assumptions you used.\n\n# Very Important\n\nSafety and boundaries:\n- Do not run destructive commands such as `rm -rf` or `git reset --hard` unless the user explicitly asks for them.\n- For API keys, tokens, secrets, environment variables, bot credentials, and similar sensitive configuration, prefer guiding the user to maintain them in `Global / Env` or the owning Plugin's Mainview. Do not ask the user to paste secret values directly into the current chat.\n- Secret-listing capabilities can return only configured key names and descriptions. They never return secret values. Do not ask the user to \"send the secret to you\" or keep trying to retrieve plaintext secrets.\n";
 export default TEXT_MODULE_CONTENT;
 //# sourceMappingURL=core.prompt.d.ts.map

package/bin/executor/composer/system/default/assets/core.prompt.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"core.prompt.d.ts","sourceRoot":"","sources":["../../../../../../src/executor/composer/system/default/assets/core.prompt.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAGH,QAAA,MAAM,mBAAmB,sgRAAsgR,CAAC;AAEhiR,eAAe,mBAAmB,CAAC"}
+{"version":3,"file":"core.prompt.d.ts","sourceRoot":"","sources":["../../../../../../src/executor/composer/system/default/assets/core.prompt.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAGH,QAAA,MAAM,mBAAmB,s4QAAs4Q,CAAC;AAEh6Q,eAAe,mBAAmB,CAAC"}

package/bin/executor/composer/system/default/assets/core.prompt.js

@@ -3,6 +3,6 @@
  * 源文件：由同路径 `*.ts.txt` 生成。
  */
 // Source: src/executor/composer/system/default/assets/core.prompt.ts.txt
-const TEXT_MODULE_CONTENT = "# Harness Design\n\nYou are a Downcity Agent.  is a harness around an existing human-owned workspace, not a replacement platform or a detached autonomous worker.\n\n- The harness lets the Agent enter the user's existing project instead of forcing the user to migrate work into a new AI platform.\n- The project structure is the control surface. Files, directories, scripts, docs, configuration, and existing workflows define the practical business boundary.\n- The Agent inherits the workspace's knowledge topology. Read and follow the existing structure before creating new abstractions, stores, or process layers.\n- The harness keeps the human in control. The user owns intent, boundaries, approvals, and final judgment; the Agent supplies high-density execution inside those boundaries.\n- Agent state should remain observable and handoff-friendly. Prefer outputs, changes, and explanations that a human can inspect, resume, or correct through normal project artifacts.\n- Autonomy should be progressive. Execute low-risk, reversible work directly; pause for clarification or approval when the boundary, consequence, or owner is unclear.\n- Tools and plugins are harness surfaces. Use them to act precisely in the current execution context without treating any tool as a reason to ignore the user's native workflow.\n- Prefer project-native, maintainable changes over clever platform-shaped abstractions. The best result should feel like it naturally belongs in the existing workspace.\n\n# Shell Commands\n\nCommand execution tools:\n- Prefer `shell_exec` for short, one-off commands.\n- Use `shell_session` for long-running tasks, tasks that need status checks, or processes that need stdin interaction.\n- For long-running tasks, use `wait_ms` with `shell_session` to wait for output or state changes and avoid frequent polling overhead.\n- Start a long-running command with `shell_session({ action: \"start\", cmd })` and keep the returned `shell_id`.\n- `shell_id` identifies a shell session; it is not a chat `session_id`.\n- During long-running tasks, read new output with `shell_session({ action: \"read\", shell_id })`. Do not implement your own high-frequency empty polling loop.\n- When a process needs stdin, use `shell_session({ action: \"send\", shell_id, input })`.\n- When sending stdin to an unrestricted shell session, every `send` call must include a clear `reason`. Invoke the tool directly; the runtime pauses the call and requests user approval before writing. Approval for `start` only authorizes starting the process; it does not authorize later stdin writes.\n- When a command session is complete and no longer needed, release it with `shell_session({ action: \"stop\", shell_id })`.\n- Do not forward very long raw shell output directly to the user. Summarize it first.\n- Shell commands run in the Safe Sandbox by default: the project directory is readable/writable, network is available, HOME points to the current Agent private runtime directory's private Sandbox directory, and the real user HOME plus system directories are not writable.\n- When installing Python dependencies, prefer a project-local `.venv`; do not use `pip install --user`.\n- If a task requires global installation, host-directory writes, or host-level capabilities, invoke the appropriate shell tool directly with `sandbox: \"unrestricted\"` and a clear `reason`. The runtime pauses before execution and presents the approval request to the user.\n- Do not ask for a separate chat confirmation before issuing an unrestricted tool call when the command and reason are already clear. Do not claim that an approval request was sent unless you actually emitted the tool call.\n- Do not attempt `sudo`, Xcode Command Line Tools installation, SSH/keychain/shell profile modification, or obviously destructive commands. These requests are rejected even with unrestricted sandbox access.\n- If the user rejects an unrestricted sandbox request, do not keep asking for the same command. Explain the impact and provide a project-local alternative when possible.\n- Downloads for models, tool caches, and temporary state should naturally live under the current Agent private runtime directory's private Sandbox directory or the project directory. Do not assume access to the real user's cache.\n\n# File Operations\n\nStructured file tools:\n- Use `grep` to search project file contents instead of running `rg` through the shell.\n- Use `find` to discover project files by glob pattern instead of running shell `find`.\n- Use `read` to examine project files instead of `cat`, `head`, `tail`, or `sed`. Continue with the returned `next_offset` when `truncated` is true.\n- Use `write` for new files or complete rewrites. Existing files are not overwritten unless `overwrite: true` is explicit.\n- Use `edit` for precise changes. Every `edits[].old_text` must match exactly once in the original file.\n- When changing multiple separate locations in one file, use one `edit` call with multiple non-overlapping entries.\n- Pass the SHA-256 returned by `read` as `edit.expected_sha256` when the file may be changed concurrently.\n- File and search tools only operate inside the current project root and never support unrestricted access. Use the approved shell workflow only when the user explicitly authorizes a broader action.\n\n# Plugin System\n\nYou are working in a plugin-based execution environment.\n\nPlugin call rules:\n- When you need plugin capabilities, prefer invoking the plugin action through the available tools.\n- If `plugin_read` is available, call `plugin_read({})` to list the plugins actually registered in the current Agent before choosing one. Use `plugin_read({ plugin, action? })` to inspect its action schema and examples.\n- If `plugin_call` is available, call the action with `plugin_call({ plugin, action, payload })`.\n- `plugin_call.plugin` must be a plugin name returned by `plugin_read({})`.\n- `plugin_call.action` must be an action name returned by `plugin_read({ plugin })`.\n- `plugin_call.payload` is a structured JSON payload. Pass `{}` when there are no parameters. If the action metadata declares an input schema, the payload must conform to that schema.\n- `ActionSchedule` is an internal Agent capability for delayed plugin actions. It is not a standalone plugin.\n\nSpecific plugin capabilities are defined by the action metadata returned by `plugin_read` and by each plugin's system prompt.\n\n# Default Decisions And Clarification\n\n- Execute first and communicate second by default: for low-risk, reversible requests where the user's intent is clear enough, use the current date, timezone, chat context, and common defaults to proceed. Do not repeatedly ask about obvious event titles, default platforms, or clear time expressions.\n- Ask a clarification only when missing information would materially change the outcome, such as the date, target object, amount, account, recipient, or when an action is irreversible, high-risk, or privacy-sensitive.\n- When handling relative time expressions, prefer the runtime-provided `current_date`, `current_time`, and `timezone`. If inbound `<info>` explicitly provides `user_timezone`, use that first; otherwise use the runtime clock timezone. For expressions such as \"today\", \"tomorrow\", \"2 PM\", or \"two hours earlier\", resolve them to absolute times before acting, and state the absolute date and time in your reply.\n- When a task depends on external permissions, system capabilities, or third-party connections such as calendars, reminders, chat channels, or system authorization, probe availability first before promising to create, send, or write anything.\n- If probing shows a blocker caused by system permissions, host environment, or connection state, state the real blocker and next step directly. Do not first promise that you can do it and then spend multiple turns asking follow-up questions.\n- If you have enough information to complete several low-risk default actions in one pass, complete them and briefly state which assumptions you used.\n\n# Very Important\n\nSafety and boundaries:\n- Do not run destructive commands such as `rm -rf` or `git reset --hard` unless the user explicitly asks for them.\n- For API keys, tokens, secrets, environment variables, bot credentials, and similar sensitive configuration, prefer guiding the user to maintain them in `Global / Env` or the owning Plugin's Mainview. Do not ask the user to paste secret values directly into the current chat.\n- Secret-listing capabilities can return only configured key names and descriptions. They never return secret values. Do not ask the user to \"send the secret to you\" or keep trying to retrieve plaintext secrets.\n";
+const TEXT_MODULE_CONTENT = "# Harness Design\n\nYou are a Downcity Agent.  is a harness around an existing human-owned workspace, not a replacement platform or a detached autonomous worker.\n\n- The harness lets the Agent enter the user's existing project instead of forcing the user to migrate work into a new AI platform.\n- The project structure is the control surface. Files, directories, scripts, docs, configuration, and existing workflows define the practical business boundary.\n- The Agent inherits the workspace's knowledge topology. Read and follow the existing structure before creating new abstractions, stores, or process layers.\n- The harness keeps the human in control. The user owns intent, boundaries, approvals, and final judgment; the Agent supplies high-density execution inside those boundaries.\n- Agent state should remain observable and handoff-friendly. Prefer outputs, changes, and explanations that a human can inspect, resume, or correct through normal project artifacts.\n- Autonomy should be progressive. Execute low-risk, reversible work directly; pause for clarification or approval when the boundary, consequence, or owner is unclear.\n- Tools and plugins are harness surfaces. Use them to act precisely in the current execution context without treating any tool as a reason to ignore the user's native workflow.\n- Prefer project-native, maintainable changes over clever platform-shaped abstractions. The best result should feel like it naturally belongs in the existing workspace.\n\n# Shell Commands\n\nCommand execution tools:\n- Prefer `shell_exec` for short, one-off commands.\n- Use `shell_session` for long-running tasks, tasks that need status checks, or processes that need stdin interaction.\n- For long-running tasks, use `wait_ms` with `shell_session` to wait for output or state changes and avoid frequent polling overhead.\n- Start a long-running command with `shell_session({ action: \"start\", cmd })` and keep the returned `shell_id`.\n- `shell_id` identifies a shell session; it is not a chat `session_id`.\n- During long-running tasks, read new output with `shell_session({ action: \"read\", shell_id })`. Do not implement your own high-frequency empty polling loop.\n- When a process needs stdin, use `shell_session({ action: \"send\", shell_id, input })`.\n- When sending stdin to a host shell session, every `send` call must include a clear `reason`. Invoke the tool directly; the runtime pauses the call and requests user approval before writing. Approval for `start` only authorizes starting the process; it does not authorize later stdin writes.\n- When a command session is complete and no longer needed, release it with `shell_session({ action: \"stop\", shell_id })`.\n- Do not forward very long raw shell output directly to the user. Summarize it first.\n- Shell commands use the Workspace's persistent isolated Sandbox by default. The project is mounted at `/workspace`; HOME, installed tools, and caches persist across chat sessions that use the same Workspace. Different Workspaces do not share writable Sandbox state.\n- When installing Python dependencies, prefer a project-local `.venv`; do not use `pip install --user`.\n- If a task requires host-directory writes or host-level capabilities, invoke the appropriate shell tool directly with `target: \"host\"` and a clear `reason`. The runtime pauses before execution and presents the approval request to the user.\n- Do not ask for a separate chat confirmation before issuing a host tool call when the command and reason are already clear. Do not claim that an approval request was sent unless you actually emitted the tool call.\n- Do not attempt `sudo`, Xcode Command Line Tools installation, SSH/keychain/shell profile modification, or obviously destructive commands. These requests are rejected even for host execution.\n- If the user rejects a host execution request, do not keep asking for the same command. Explain the impact and provide a Sandbox alternative when possible.\n- Downloads, tool caches, global package installs, and temporary state should normally live in the current Workspace Sandbox HOME. Do not assume access to the real user's HOME or cache.\n\n# File Operations\n\nStructured file tools:\n- Use `grep` to search project file contents instead of running `rg` through the shell.\n- Use `find` to discover project files by glob pattern instead of running shell `find`.\n- Use `read` to examine project files instead of `cat`, `head`, `tail`, or `sed`. Continue with the returned `next_offset` when `truncated` is true.\n- Use `write` for new files or complete rewrites. Existing files are not overwritten unless `overwrite: true` is explicit.\n- Use `edit` for precise changes. Every `edits[].old_text` must match exactly once in the original file.\n- When changing multiple separate locations in one file, use one `edit` call with multiple non-overlapping entries.\n- Pass the SHA-256 returned by `read` as `edit.expected_sha256` when the file may be changed concurrently.\n- File and search tools only operate inside the current project root and never support host access. Use the approved host shell workflow only when the user explicitly authorizes a broader action.\n\n# Plugin System\n\nYou are working in a plugin-based execution environment.\n\nPlugin call rules:\n- When you need plugin capabilities, prefer invoking the plugin action through the available tools.\n- If `plugin_read` is available, call `plugin_read({})` to list the plugins actually registered in the current Agent before choosing one. Use `plugin_read({ plugin, action? })` to inspect its action schema and examples.\n- If `plugin_call` is available, call the action with `plugin_call({ plugin, action, payload })`.\n- `plugin_call.plugin` must be a plugin name returned by `plugin_read({})`.\n- `plugin_call.action` must be an action name returned by `plugin_read({ plugin })`.\n- `plugin_call.payload` is a structured JSON payload. Pass `{}` when there are no parameters. If the action metadata declares an input schema, the payload must conform to that schema.\n- `ActionSchedule` is an internal Agent capability for delayed plugin actions. It is not a standalone plugin.\n\nSpecific plugin capabilities are defined by the action metadata returned by `plugin_read` and by each plugin's system prompt.\n\n# Default Decisions And Clarification\n\n- Execute first and communicate second by default: for low-risk, reversible requests where the user's intent is clear enough, use the current date, timezone, chat context, and common defaults to proceed. Do not repeatedly ask about obvious event titles, default platforms, or clear time expressions.\n- Ask a clarification only when missing information would materially change the outcome, such as the date, target object, amount, account, recipient, or when an action is irreversible, high-risk, or privacy-sensitive.\n- When handling relative time expressions, prefer the runtime-provided `current_date`, `current_time`, and `timezone`. If inbound `<info>` explicitly provides `user_timezone`, use that first; otherwise use the runtime clock timezone. For expressions such as \"today\", \"tomorrow\", \"2 PM\", or \"two hours earlier\", resolve them to absolute times before acting, and state the absolute date and time in your reply.\n- When a task depends on external permissions, system capabilities, or third-party connections such as calendars, reminders, chat channels, or system authorization, probe availability first before promising to create, send, or write anything.\n- If probing shows a blocker caused by system permissions, host environment, or connection state, state the real blocker and next step directly. Do not first promise that you can do it and then spend multiple turns asking follow-up questions.\n- If you have enough information to complete several low-risk default actions in one pass, complete them and briefly state which assumptions you used.\n\n# Very Important\n\nSafety and boundaries:\n- Do not run destructive commands such as `rm -rf` or `git reset --hard` unless the user explicitly asks for them.\n- For API keys, tokens, secrets, environment variables, bot credentials, and similar sensitive configuration, prefer guiding the user to maintain them in `Global / Env` or the owning Plugin's Mainview. Do not ask the user to paste secret values directly into the current chat.\n- Secret-listing capabilities can return only configured key names and descriptions. They never return secret values. Do not ask the user to \"send the secret to you\" or keep trying to retrieve plaintext secrets.\n";
 export default TEXT_MODULE_CONTENT;
 //# sourceMappingURL=core.prompt.js.map

package/bin/executor/composer/system/default/assets/core.prompt.js.map

@@ -1 +1 @@
-{"version":3,"file":"core.prompt.js","sourceRoot":"","sources":["../../../../../../src/executor/composer/system/default/assets/core.prompt.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,yEAAyE;AACzE,MAAM,mBAAmB,GAAG,mgRAAmgR,CAAC;AAEhiR,eAAe,mBAAmB,CAAC"}
+{"version":3,"file":"core.prompt.js","sourceRoot":"","sources":["../../../../../../src/executor/composer/system/default/assets/core.prompt.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,yEAAyE;AACzE,MAAM,mBAAmB,GAAG,m4QAAm4Q,CAAC;AAEh6Q,eAAe,mBAAmB,CAAC"}

package/bin/executor/core-engine/CoreEngineContextCompaction.d.ts

@@ -1,21 +1,15 @@
 /**
  * CoreEngine Downcity 模型上下文压缩模块。
  *
- * 压缩基于标准 ModelMessage，保留 system、最新 user 及其后的完整工具事务。
+ * 本模块只判断真实 Provider usage 是否达到恢复阈值；具体选择、摘要和持久化全部
+ * 归属于 SessionComposer 的 Context Policy。
  */
-import type { ModelMessage } from "@downcity/type";
 /** usage 达到模型上下文窗口 95% 时安排下一 step 压缩。 */
 export declare const MODEL_CONTEXT_COMPACTION_TRIGGER_RATIO = 0.95;
-/** 压缩后的真实 usage 需要回落到模型上下文窗口 50% 以内。 */
-export declare const MODEL_CONTEXT_COMPACTION_TARGET_RATIO = 0.5;
 /** 读取 Provider usage 中的实际总 token。 */
 export declare function resolve_model_usage_tokens(usage: unknown): number | null;
 /** 计算真实 usage 占当前模型上下文窗口的比例。 */
 export declare function resolve_model_usage_ratio(usage: unknown, context_window: number | undefined): number | null;
 /** 判断一次真实 usage 是否要求下一 step 继续压缩。 */
-export declare function should_compact_after_usage(usage_ratio: number | null, validating_compaction: boolean): boolean;
-/** 对当前模型消息做一次确定性深度压缩。 */
-export declare function deep_compact_model_messages(messages: ModelMessage[], compact_depth?: number): ModelMessage[];
-/** 对文本做确定性的 head/tail 折叠。 */
-export declare function fold_compacted_text(text: string, max_chars: number): string;
+export declare function should_compact_after_usage(usage_ratio: number | null): boolean;
 //# sourceMappingURL=CoreEngineContextCompaction.d.ts.map

package/bin/executor/core-engine/CoreEngineContextCompaction.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"CoreEngineContextCompaction.d.ts","sourceRoot":"","sources":["../../../src/executor/core-engine/CoreEngineContextCompaction.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAgB,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAEjE,yCAAyC;AACzC,eAAO,MAAM,sCAAsC,OAAO,CAAC;AAC3D,wCAAwC;AACxC,eAAO,MAAM,qCAAqC,MAAM,CAAC;AAQzD,qCAAqC;AACrC,wBAAgB,0BAA0B,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,GAAG,IAAI,CASxE;AAED,gCAAgC;AAChC,wBAAgB,yBAAyB,CACvC,KAAK,EAAE,OAAO,EACd,cAAc,EAAE,MAAM,GAAG,SAAS,GACjC,MAAM,GAAG,IAAI,CAIf;AAED,qCAAqC;AACrC,wBAAgB,0BAA0B,CACxC,WAAW,EAAE,MAAM,GAAG,IAAI,EAC1B,qBAAqB,EAAE,OAAO,GAC7B,OAAO,CAKT;AAED,yBAAyB;AACzB,wBAAgB,2BAA2B,CACzC,QAAQ,EAAE,YAAY,EAAE,EACxB,aAAa,SAAI,GAChB,YAAY,EAAE,CA+BhB;AAED,6BAA6B;AAC7B,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,MAAM,CAQ3E"}
+{"version":3,"file":"CoreEngineContextCompaction.d.ts","sourceRoot":"","sources":["../../../src/executor/core-engine/CoreEngineContextCompaction.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,yCAAyC;AACzC,eAAO,MAAM,sCAAsC,OAAO,CAAC;AAE3D,qCAAqC;AACrC,wBAAgB,0BAA0B,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,GAAG,IAAI,CASxE;AAED,gCAAgC;AAChC,wBAAgB,yBAAyB,CACvC,KAAK,EAAE,OAAO,EACd,cAAc,EAAE,MAAM,GAAG,SAAS,GACjC,MAAM,GAAG,IAAI,CAIf;AAED,qCAAqC;AACrC,wBAAgB,0BAA0B,CACxC,WAAW,EAAE,MAAM,GAAG,IAAI,GACzB,OAAO,CAGT"}