@springbrand/agent-runtime 0.2.0-alpha.55 → 0.2.0-alpha.57

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@springbrand/agent-runtime",
-  "version": "0.2.0-alpha.55",
+  "version": "0.2.0-alpha.57",
   "type": "module",
   "files": [
     "src",

package/src/adapter/cloudflare/workspace/scoped-workspace.ts

@@ -356,6 +356,7 @@ export class ScopedWorkspace implements WorkspacePort, WorkspaceAdminPort {
     }
     return files.map((file) => this.project(file)!);
   }
+
 }
 
 /**

package/src/kernel/bindings.ts

@@ -41,8 +41,24 @@ export interface WorkspaceFileInfo {
   createdAt: number;
   updatedAt: number;
   target?: string;
+  attachmentId?: string;
+  contentVersion?: string;
+  cdnUrl?: string;
+  origin?: "user_upload" | "https_import" | "action" | "agent" | "userspace";
+  understandingStatus?: "not_requested" | "pending" | "ready" | "failed" | "unsupported";
 }
 
+export interface WorkspaceFileEvidence {
+  summary: string;
+  body: string;
+  warnings: string[];
+  truncated: boolean;
+}
+
+export type WorkspaceFileInspection = WorkspaceFileInfo & {
+  evidence?: WorkspaceFileEvidence;
+};
+
 /**
  * 向 Runtime 提供已限定作用域的文件操作。
  *

package/src/pi/message/conversion.ts

@@ -21,6 +21,19 @@ function attachmentText(
   part: Extract<UIMessage["parts"][number], { type: "file" }>,
 ): string {
   const name = part.filename?.trim() || "attachment";
+  const springbrand = recordOf(recordOf(part.providerMetadata).springbrand);
+  if (
+    typeof springbrand.attachmentId === "string" &&
+    typeof springbrand.contentVersion === "string" &&
+    typeof springbrand.path === "string"
+  ) {
+    const evidence = recordOf(springbrand.evidence);
+    const evidenceText = springbrand.untrustedFileEvidence === true &&
+        typeof evidence.summary === "string" && typeof evidence.body === "string"
+      ? `\n[Untrusted file evidence]\n${evidence.summary}\n${evidence.body}\n[/Untrusted file evidence]`
+      : "";
+    return `[Attachment: ${name} (${part.mediaType}) attachmentId=${springbrand.attachmentId} contentVersion=${springbrand.contentVersion} workspacePath=${springbrand.path} cdnUrl=${part.url}]${evidenceText}`;
+  }
   let attachmentId: string | undefined;
   try {
     attachmentId = /^\/attachments\/([^/]+)$/u
@@ -91,8 +104,26 @@ export function captureUIUserSidecar(
 ): UIUserSidecar {
   return {
     ...(message.metadata === undefined ? {} : { metadata: message.metadata }),
-    parts: message.parts.filter(
-      (part) => part.type === "text" || part.type === "file",
-    ),
+    parts: message.parts.flatMap<UIMessage["parts"][number]>((part) => {
+      if (part.type === "text") return [part];
+      if (part.type !== "file") return [];
+      const providerMetadata = recordOf(part.providerMetadata);
+      const springbrand = recordOf(providerMetadata.springbrand);
+      if (
+        typeof springbrand.attachmentId !== "string" ||
+        typeof springbrand.contentVersion !== "string"
+      ) return [part];
+      return [{
+        ...part,
+        providerMetadata: {
+          ...providerMetadata,
+          springbrand: {
+            attachmentId: springbrand.attachmentId,
+            contentVersion: springbrand.contentVersion,
+            ...(typeof springbrand.size === "number" ? { size: springbrand.size } : {}),
+          },
+        },
+      }];
+    }),
   };
 }

package/src/pi/runtime-adapter/execution.ts

@@ -45,6 +45,7 @@ import {
 } from "./assembly";
 import {
   isRecoverableAssistantError,
+  isOpenRouterServerToolTimeout,
   isModelStreamStallMessage,
   withProviderRetry,
   type PiGenerationLifecycleObserver,
@@ -490,7 +491,7 @@ export interface PiTurnDurability {
 export interface CreatePreparedPiTurnOptions {
   readonly prepared: PreparedPiRuntime;
   readonly pinnedDescriptor: string;
-  /** 同一 Session 的所有 Submission 共用的稳定 Provider 路由身份。 */
+  /** Session 当前的稳定 Provider 路由身份；终态 Provider 故障可在下一 Submission 前旋转它。 */
   readonly modelSessionId: string;
   readonly submission: {
     readonly id: string;
@@ -609,6 +610,7 @@ export type PiCanonicalMessageCommit =
 export interface PiTurnTerminalIntent {
   readonly outcome: "succeeded" | "failed" | "aborted";
   readonly message?: string;
+  readonly resetModelSession?: boolean;
 }
 
 export interface PiPreparedTurnRunOptions {
@@ -1134,6 +1136,9 @@ export class PreparedPiTurnAdapter {
           );
           this.terminalIntent = {
             outcome: terminal.outcome,
+            ...(isOpenRouterServerToolTimeout(authoritativeMessage)
+              ? { resetModelSession: true }
+              : {}),
             ...(authoritativeMessage.errorMessage
               ? { message: authoritativeMessage.errorMessage }
               : terminal.message

package/src/pi/runtime-adapter/models.ts

@@ -182,6 +182,32 @@ export function readModelStreamStallDetails(
   }
 }
 
+export function isOpenRouterServerToolTimeout(
+  message: AssistantMessage,
+): boolean {
+  if (
+    message.stopReason !== "error" ||
+    !message.provider.startsWith("model-api-openrouter-messages-") ||
+    !message.errorMessage
+  ) return false;
+  try {
+    const payload = JSON.parse(message.errorMessage) as {
+      type?: unknown;
+      error?: {
+        type?: unknown;
+        message?: unknown;
+        error_type?: unknown;
+      };
+    };
+    return payload.type === "error" &&
+      payload.error?.type === "timeout_error" &&
+      payload.error.message === "Server tool request failed" &&
+      payload.error.error_type === "timeout";
+  } catch {
+    return false;
+  }
+}
+
 export function isRecoverableAssistantError(
   message: AssistantMessage,
 ): boolean {
@@ -189,6 +215,7 @@ export function isRecoverableAssistantError(
     message.stopReason === "error" &&
     /thought[_ ]signature/i.test(message.errorMessage ?? "")
   ) return false;
+  if (isOpenRouterServerToolTimeout(message)) return false;
   return isRetryableAssistantError(message) ||
     (message.stopReason === "error" &&
       /upstream http\/2 stream failed/i.test(message.errorMessage ?? ""));

package/src/pi/tool/core-host.ts

@@ -88,7 +88,7 @@ state.writeFileBytes is not available. Use state.writeFile or state.appendFile f
 
 Bundled Skill resources are not Workspace files. Read text with tools.read_skill_resource, run bundled scripts with tools.run_skill_script, and copy templates or assets with tools.materialize_skill_resource.
 
-User Attachments are not Workspace files until copied with tools.copy_attachment_to_workspace({ id }).
+User Attachments are already Workspace files below /inputs. Inspect their exact path and immutable cdnUrl before using them.
 
 When an asset already exists in Workspace, use state.cp to copy it into the current Website directory. Use actual task paths and reference the destination with a relative URL.
 

package/src/runtime.ts

@@ -134,6 +134,7 @@ import {
 const SCHEDULED_STABLE_TIMEOUT_MS = 30_000;
 const TURN_EVENT_RETRY_SECONDS = 10;
 const RUNTIME_EVENT_MAX_ATTEMPTS = 5;
+const MODEL_SESSION_ID_STORAGE_KEY = "universal-agent:model-session-id";
 
 // 计划续跑丢失多久后由看门狗接手。必须显著长于一个正常执行片的时长，
 // 否则会在健康的长执行片上误判并派发出重复的一片。
@@ -442,6 +443,8 @@ export abstract class AgentRuntimeKernel<
   private readonly approvals: ApprovalLifecycle<StoredSubmission>;
   private readonly interactions: InteractionLifecycle<StoredSubmission>;
   private runtimeLoadTracker?: RuntimeLoadTracker;
+  private modelSessionId?: string;
+  private readonly modelSessionIdReady?: Promise<void>;
   private runtimeEventDrainTail?: Promise<void>;
   private readonly streamBySubmission = new Map<string, string>();
   private migratedSubmissionIds?: Set<string>;
@@ -521,6 +524,11 @@ export abstract class AgentRuntimeKernel<
       snapshotKey: "__cfPiFiberSnapshot",
       snapshotKind: "pi-turn",
     });
+    this.modelSessionIdReady = ctx.storage.get<string>(
+      MODEL_SESSION_ID_STORAGE_KEY,
+    ).then((stored) => {
+      this.modelSessionId = stored;
+    });
     this.piAdapter = pi;
     this.db = new RuntimeDatabase(
       this.sql.bind(this),
@@ -734,6 +742,7 @@ export abstract class AgentRuntimeKernel<
   }
 
   protected async initCandidate(candidate: RuntimeCandidate): Promise<void> {
+    await this.modelSessionIdReady;
     const previous = this.activeRuntime;
     const candidateSnapshot = candidate.snapshot;
     this.runtimeLoad.advance("assembly");
@@ -870,6 +879,7 @@ export abstract class AgentRuntimeKernel<
         terminal: {
           outcome: "succeeded" | "failed" | "aborted";
           message?: string;
+          resetModelSession?: boolean;
         },
       ) => void | Promise<void>;
     } = {},
@@ -909,7 +919,7 @@ export abstract class AgentRuntimeKernel<
     return this.pi.createTurn({
       prepared: this.preparedPi(),
       pinnedDescriptor: submission.assemblyDescriptor,
-      modelSessionId: this.name,
+      modelSessionId: this.modelSessionId ?? this.name,
       submission: {
         id: submission.submissionId,
         requestId: submission.requestId,
@@ -3038,6 +3048,7 @@ export abstract class AgentRuntimeKernel<
       | {
           outcome: "succeeded" | "failed" | "aborted";
           message?: string;
+          resetModelSession?: boolean;
         }
       | undefined;
     const startedAt = ready.createdAt;
@@ -3050,13 +3061,20 @@ export abstract class AgentRuntimeKernel<
         this.migratedSubmissions.has(submissionId)
           ? undefined
           : this.persistAndBroadcastRecord(turn, record),
-      onTerminal: (intent) => {
+      onTerminal: async (intent) => {
         terminalIntent = intent;
         this.appendTerminalIntent(
           submission,
           intent.outcome,
           intent.message,
         );
+        if (intent.resetModelSession) {
+          this.modelSessionId = crypto.randomUUID();
+          await this.ctx.storage.put(
+            MODEL_SESSION_ID_STORAGE_KEY,
+            this.modelSessionId,
+          );
+        }
       },
     });
     for (const pending of this.db.steers.listForSubmission(submissionId)) {
@@ -3605,7 +3623,12 @@ export abstract class AgentRuntimeKernel<
     const messages = await this.getMessages();
     const running = this.db.submissions.findRunning();
     return running?.assistantMessageId
-      ? messages.filter(({ id }) => id !== running.assistantMessageId)
+      ? messages.filter((message) =>
+          message.role !== "assistant" ||
+          (message.id !== running.assistantMessageId &&
+            (message.metadata as { turnId?: unknown } | undefined)?.turnId !==
+              running.submissionId)
+        )
       : messages;
   }
 

package/src/skills/springbrand-worker-website/index.ts

@@ -1,15 +1,32 @@
 export const SPRINGBRAND_WORKER_WEBSITE_SKILL = {
   name: "springbrand-worker-website",
   description:
-    "Use when an Agent creates, restructures, previews, verifies, or deploys a Website in a SpringBrand Workspace; provide the complete Cloudflare Worker project layout, asset conventions, and browser validation workflow.",
+    "Use when an Agent creates, restructures, previews, verifies, saves, or publishes a Website in a SpringBrand Workspace; covers static multi-page sites, SPAs, App Facet backends, deployment-safe paths, and end-to-end browser validation.",
   body: [
     "# SpringBrand Worker Website",
     "",
-    "Keep the Website in one stable project directory under `/creations/<website-name>/`. Treat that directory as the complete deployable Website project, not as a directory containing only one HTML file.",
+    "Build one complete, deployable Website project in one stable directory under `/creations/<website-name>/`. Do not scatter one Website across several Creation directories, and do not treat a single entry HTML file as the whole project when it references other files.",
+    "",
+    "## Delivery pipeline",
+    "",
+    "1. Workspace files below `/creations/<website-name>/` are the editable source of the Website.",
+    "2. `deploy_workspace_preview` builds that directory into one target-neutral Deployment Bundle. Static assets are copied to the immutable Workspace Site data plane; Worker modules run through the matching SpringBrand App Facet.",
+    "3. The Workspace Site gateway resolves multi-page HTML routes and prefixes root-relative HTML navigation with the immutable deployment path. Static bytes do not pass through the App Facet.",
+    "4. Browser evidence verifies the deployed Website, not merely its source files.",
+    "5. `save_creation` saves the verified Website bundle as a Creation Version. Saving does not publish it.",
+    "6. Public production publication is a separate, explicit, person-approved operation. It promotes the Deployment Bundle to Workers Static Assets and replaces only the deployment-specific Runtime Config.",
+    "",
+    "## Choose one project shape",
+    "",
+    "- Static multi-page Website (MPA): several HTML documents, such as `public/index.html`, `public/about/index.html`, and `public/trails/index.html`. Use `404-page` handling so broken links remain visible.",
+    "- Single-page application (SPA): one `public/index.html` with client-side routing. Use `single-page-application` fallback so browser deep links return the entry document.",
+    "- Full-stack Website: either MPA or SPA assets plus `src/worker.ts`, which exports the SpringBrand `App` Durable Object for `/api/*`, WebSocket, or persistent SQLite behavior.",
+    "",
+    "Do not combine MPA and SPA fallback accidentally. A multi-page Website hidden behind an SPA fallback can return the home page for a missing child document and make a broken link look successful.",
     "",
     "## Recommended layout",
     "",
-    "When creating a new Website and no existing project structure needs to be preserved, prefer:",
+    "Preserve an existing valid framework or build layout. For a new Website, prefer:",
     "",
     "```text",
     "/creations/<website-name>/",
@@ -18,14 +35,14 @@ export const SPRINGBRAND_WORKER_WEBSITE_SKILL = {
     "├── src/",
     "│   ├── worker.ts",
     "│   ├── routes/",
-    "│   ├── lib/",
-    "│   └── client/",
+    "│   └── lib/",
     "└── public/",
     "    ├── index.html",
     "    ├── about/",
     "    │   └── index.html",
     "    ├── products/",
-    "    │   └── index.html",
+    "    │   ├── index.html",
+    "    │   └── detail.html",
     "    ├── assets/",
     "    │   ├── css/",
     "    │   ├── js/",
@@ -38,36 +55,141 @@ export const SPRINGBRAND_WORKER_WEBSITE_SKILL = {
     "    └── manifest.webmanifest",
     "```",
     "",
-    "This is a recommended default, not a required layout. Preserve an existing valid framework or project convention such as `dist/`, `build/`, another Worker entry path, or another static asset directory, and configure Wrangler accordingly.",
-    "",
-    "## Project rules",
-    "",
-    "- Keep Worker configuration, package metadata, and build configuration at the Website project root.",
-    "- Keep Worker code, routes, application logic, and editable source files under `src/`.",
-    "- Keep browser-accessible, deployment-ready static files under `public/`.",
-    "- Use `public/index.html` as the recommended home page. Put additional pages under clear routes such as `public/about/index.html` and `public/products/index.html`.",
-    "- Put stylesheets, browser scripts, images, fonts, icons, and other static resources under the corresponding `public/assets/` subdirectory.",
-    "- Put publicly accessible static data under `public/data/` when needed.",
-    "- Keep every file required to build and deploy the Website inside its project directory.",
-    "- Do not duplicate the same entry page at both the project root and `public/`.",
-    "- Do not place secrets, temporary files, logs, raw tool output, or unprocessed attachments inside the Website project.",
-    "",
-    "## Worker and browser requirements",
-    "",
-    "- Configure Wrangler `main` to point to the actual Worker source file.",
-    "- Export `class App extends DurableObject` from that module when the Website uses the SpringBrand App Facet.",
-    "- Configure `assets.directory` to point to the actual browser asset directory, preferably `public/`.",
-    "- Use `./` or `../` for local Website files, never a root-relative Workspace path, so preview and deployed URL prefixes both work.",
-    "- Load CSS from HTML instead of importing it from browser JavaScript.",
-    "- Without a build step, load browser-native third-party ESM through a full pinned HTTPS URL or an import map to a pinned CORS-enabled CDN.",
-    "- With a build step, produce deployment-ready assets before preview instead of depending on a development server.",
-    "",
-    "## Workflow",
-    "",
-    "1. Inspect the existing Website directory before changing it and preserve valid conventions.",
-    "2. Create or update the complete project rather than only an entry HTML file.",
-    "3. Build when the project requires a build step.",
-    "4. Preview the Website through the available Workspace or Space capability.",
-    "5. Open the previewed Website with the browser tools you have and check runtime errors, failed resources, CSP violations, responsive layout, clipping, overlap, and visual hierarchy. Capture a screenshot when visual appearance matters, fix discovered problems, and verify once more.",
+    "Keep configuration and editable Worker code at the project root or under `src/`. Keep every browser-addressable, deployment-ready file under the configured assets directory. Do not duplicate the entry document at both the project root and `public/`.",
+    "",
+    "## Wrangler configuration",
+    "",
+    "### Static multi-page Website",
+    "",
+    "```json",
+    "{",
+    "  \"main\": \"src/worker.ts\",",
+    "  \"compatibility_date\": \"2026-08-01\",",
+    "  \"assets\": {",
+    "    \"directory\": \"public\",",
+    "    \"html_handling\": \"auto-trailing-slash\",",
+    "    \"not_found_handling\": \"404-page\"",
+    "  }",
+    "}",
+    "```",
+    "",
+    "With `auto-trailing-slash`, `/about/` serves `public/about/index.html`, `/about` serves `public/about.html`, and `/` serves `public/index.html`. Pick one route shape and use it consistently in navigation.",
+    "",
+    "### Single-page application",
+    "",
+    "```json",
+    "{",
+    "  \"main\": \"src/worker.ts\",",
+    "  \"compatibility_date\": \"2026-08-01\",",
+    "  \"assets\": {",
+    "    \"directory\": \"public\",",
+    "    \"html_handling\": \"auto-trailing-slash\",",
+    "    \"not_found_handling\": \"single-page-application\"",
+    "  }",
+    "}",
+    "```",
+    "",
+    "Use SPA fallback only when the client router owns those paths. If the Website is plain HTML and has no Worker behavior, the platform can configure it automatically; keep an explicit Wrangler file when route policy or an App Facet matters.",
+    "",
+    "## Static-only Worker entry",
+    "",
+    "Every explicit Wrangler `main` must name a real file. When a static MPA needs explicit asset routing but no backend behavior, use this minimal App Facet entry instead of inventing API routes:",
+    "",
+    "```ts",
+    "import { DurableObject } from \"cloudflare:workers\";",
+    "",
+    "export class App extends DurableObject {",
+    "  fetch() {",
+    "    return new Response(\"Not Found\", { status: 404 });",
+    "  }",
+    "}",
+    "```",
+    "",
+    "Static assets are served before this class. A request reaches it only when no asset route matched.",
+    "",
+    "## Multi-page navigation contract",
+    "",
+    "- The portable default is an explicit document-relative HTML path. From `public/index.html`, use `href=\"./about/index.html\"` and `href=\"./contact.html\"`.",
+    "- From `public/about/index.html`, use `href=\"../index.html\"` for home, `href=\"../products/index.html\"` for another root directory, and `href=\"./team.html\"` for a file in the same directory.",
+    "- Clean links such as `href=\"./about/\"` are valid in Workspace Site preview and Workers Static Assets publication when `auto-trailing-slash` is active. Use them only when that clean URL is part of the requested public design; explicit HTML paths also work when an immutable Creation Version is opened directly from object storage.",
+    "- Every primary page must contain working navigation back to the home page. Do not create visual cards that look clickable but have no link or handler.",
+    "- Preserve query strings and fragments when they carry page state, for example `./products/index.html?category=books` and `./about/index.html#team`.",
+    "- Never use a Workspace path such as `/creations/site/public/about/index.html` in browser code. Workspace identity and Website URL identity are different.",
+    "",
+    "## URL behavior under preview and publication",
+    "",
+    "Root-relative HTML attributes (`href`, `src`, and `action` values beginning with one `/`) are rewritten by the Workspace Site gateway so they retain the deployment prefix. Protocol-relative URLs beginning with `//` are external and are not rewritten.",
+    "",
+    "Prefer explicit `./` and `../` file URLs for local Website pages and assets. They remain valid in Workspace preview, immutable Creation Version content, and production publication, while a root-relative or directory-only URL depends on the delivery host providing routing or prefix rewriting.",
+    "",
+    "JavaScript strings are not rewritten. Do not use `fetch(\"/api/items\")`, `new URL(\"/asset\", location.origin)`, or dynamic `import(\"/module.js\")` in generated browser code. CSS `url(...)` values are not HTML attributes either; make them relative to the CSS file.",
+    "",
+    "Do not add a `<base>` element merely to repair incorrect links. Use correct document-relative URLs first. If an existing framework requires `<base href=\"/\">`, verify every route in the real preview because it changes how all relative URLs resolve.",
+    "",
+    "## App Facet and Deployment Runtime Config",
+    "",
+    "A Website backend exports one `class App extends DurableObject` from the configured Worker main module. Do not declare your own Durable Object, D1, R2, or KV bindings in the generated Wrangler file. Persistent Website state belongs in the App Facet's `this.ctx.storage`.",
+    "",
+    "Full-stack browser code must load the generated Deployment Runtime Config before application code and construct HTTP or WebSocket URLs from `globalThis.__APP_CONFIG__.apiBaseUrl`. Use the correct relative depth on every HTML page: `./.springbrand/runtime-config.js` from the root entry and `../.springbrand/runtime-config.js` from `about/index.html`.",
+    "",
+    "```html",
+    "<script src=\"../.springbrand/runtime-config.js\"></script>",
+    "<script type=\"module\" src=\"../assets/js/about.js\"></script>",
+    "```",
+    "",
+    "```js",
+    "const apiBaseUrl = globalThis.__APP_CONFIG__.apiBaseUrl;",
+    "const response = await fetch(new URL(\"items\", apiBaseUrl));",
+    "```",
+    "",
+    "Never compile a preview URL, user ID, Chat ID, branch, or production host into the main static bundle. Preview and production use the same main assets and different Runtime Config values.",
+    "",
+    "## Browser asset rules",
+    "",
+    "- Copy every local image, video, audio file, font, icon, and downloadable asset into the Website directory and reference it by a Website-relative URL.",
+    "- Never embed binary assets as base64 or `data:` URLs. Never use a Workspace `cdnUrl` in final HTML.",
+    "- Load CSS from HTML. Keep CSS URLs relative to the CSS file.",
+    "- Browser-loaded JavaScript must already be browser-executable. Do not ship raw TypeScript or JSX in ordinary `<script>` elements.",
+    "- When a build step exists, run it and deploy only its completed output directory. Do not depend on a Vite or framework development server.",
+    "- Without a build step, use browser-native JavaScript and full, pinned, CORS-enabled HTTPS module URLs or a complete import map.",
+    "- Do not place secrets, logs, temporary build output, raw uploads, or unrelated Tool output inside the Website project.",
+    "",
+    "## Build, preview, verify, and save",
+    "",
+    "1. Inspect the current Website directory and preserve valid framework conventions.",
+    "2. Create or update the complete project in its stable `/creations/<website-name>/` directory.",
+    "3. Build when required and confirm the configured assets directory contains the final entry document and every referenced local file.",
+    "4. Call `deploy_workspace_preview` with the Website project directory, then use the returned Workspace Site URL as the browser source of truth.",
+    "5. Call `get_browser_console_logs` for the home page and for every primary internal page. Check navigation responses, missing assets, exceptions, CSP or CORS failures, and client fetch failures.",
+    "6. Open the Website with the available browser evidence tools. For a multi-page Website, follow real links from the home page to every primary internal page and verify navigation back to the home page. Check at least the normal desktop viewport and one narrow viewport; capture and inspect a screenshot when visual appearance matters.",
+    "7. Fix every failure, redeploy, and repeat the same checks. A clean home page does not prove a multi-page Website works.",
+    "8. After browser verification succeeds, call `save_creation` exactly once with the existing entry HTML Working Copy path. For the recommended layout, that is `/creations/<website-name>/public/index.html`.",
+    "9. Do not call the Website complete until `save_creation` returns an `artifactId`. Do not save referenced assets as separate Creations.",
+    "",
+    "## Publication contract",
+    "",
+    "`deploy_workspace_preview` does not publish the Website. `save_creation` does not publish the Website. They create a public-by-address Workspace preview and a persistent private Creation Version respectively.",
+    "",
+    "Only call `propose_publication` when the person explicitly asks to publish. The Tool starts the platform's explicit publication approval and its returned result is the only authority for publication success; never invent a public URL or claim that a preview URL is the published Website.",
+    "",
+    "Production publication consumes the same Deployment Bundle, including `html_handling` and `not_found_handling`, through Workers Static Assets. The platform supplies the production Runtime Config; do not rebuild the main browser bundle merely to change `apiBaseUrl`.",
+    "",
+    "If publication is not requested, unavailable, denied, or fails, leave the verified Creation intact and say precisely that it was saved but not published.",
+    "",
+    "## Pre-flight checklist",
+    "",
+    "Before the final response, confirm all of the following:",
+    "",
+    "- One stable Website project exists below `/creations/`, with exactly one entry document selected for `save_creation`.",
+    "- `wrangler.json` points to the real Worker main and browser assets directory when explicit configuration is needed.",
+    "- MPA uses `auto-trailing-slash` plus `404-page`; SPA uses `single-page-application` only when a client router owns the routes.",
+    "- Every local page, stylesheet, script, image, font, and media URL resolves inside the Website bundle; direct Creation Version viewing uses explicit relative HTML paths unless a clean URL target was explicitly chosen.",
+    "- JavaScript and CSS do not depend on root-relative prefix rewriting.",
+    "- Full-stack pages load Deployment Runtime Config at the correct relative depth and use its `apiBaseUrl`.",
+    "- The deployed home page and every primary internal page were opened successfully in a real browser.",
+    "- Every primary internal page can navigate back to the home page.",
+    "- Browser console, failed-request evidence, responsive layout, and important interactions are clean.",
+    "- The verified entry HTML was saved once and returned an `artifactId`.",
+    "- The final response distinguishes previewed, saved, and published states accurately.",
   ].join("\n"),
 };