@tea-agent/loop-agent 0.43.0-next.1 → 0.43.0-next.10

package/dist/worker/console/chat/sdd-data-alignment.js

@@ -1,4 +1,4 @@
-import { randomBytes } from "node:crypto";
+import { createDecipheriv, randomBytes } from "node:crypto";
 import { readFile, stat } from "node:fs/promises";
 import os from "node:os";
 import path from "node:path";
@@ -10,8 +10,49 @@ export const SDD_SKILL_NAMES = [
 /** Backward-compatible name for callers that need a stable representative value. */
 export const SDD_DEFAULT_SKILL_NAME = "SDD-implementation-test-review";
 export const SDD_TELEMETRY_URL = "https://wizard-ai.paic.com.cn/code_pilot/api/skill-usage-log";
-export const SDD_TELEMETRY_SIGN = "52aad0c09e6b46818a11ee702d6fe0ba";
+/** SM4 key hex; also the SDD telemetry `ws-sign` value. */
+export const DEFAULT_AI_MA_PUB_SALT_KEY = "52aad0c09e6b46818a11ee702d6fe0ba";
+export const SDD_TELEMETRY_SIGN = DEFAULT_AI_MA_PUB_SALT_KEY;
+export const AIMAX_AUTH_TOKEN_ENV = "AIMAX_AUTH_TOKEN";
 export const WIZARD_LOCAL_DEFAULT_USER_AGENT = "Builder/OpenCode ai-sdk/provider-utils/4.0.21 runtime/bun/1.3.11";
+const SM4_V1_PREFIX = "sm4:v1:";
+/** Decode a plaintext ticket or `sm4:v1:` ciphertext. Unknown prefixes and crypto errors fail closed. */
+export function decodeAimaxAuthToken(raw, keyHex = DEFAULT_AI_MA_PUB_SALT_KEY) {
+    const candidate = raw.trim();
+    if (!candidate)
+        return undefined;
+    if (!candidate.startsWith("sm4:"))
+        return candidate;
+    if (!candidate.startsWith(SM4_V1_PREFIX))
+        return undefined;
+    const hex = candidate.slice(SM4_V1_PREFIX.length);
+    if (!hex || hex.length % 2 !== 0 || /[^0-9a-fA-F]/.test(hex))
+        return undefined;
+    const key = Buffer.from(keyHex.trim(), "hex");
+    if (key.length !== 16)
+        return undefined;
+    try {
+        const encrypted = Buffer.from(hex, "hex");
+        if (encrypted.length === 0 || encrypted.length % 16 !== 0)
+            return undefined;
+        const decipher = createDecipheriv("sm4-ecb", key, null);
+        decipher.setAutoPadding(true);
+        const plain = Buffer.concat([decipher.update(encrypted), decipher.final()])
+            .toString("utf8")
+            .trim();
+        return plain || undefined;
+    }
+    catch {
+        return undefined;
+    }
+}
+/** Set or delete `AIMAX_AUTH_TOKEN`. Empty string is treated as absent. */
+export function syncAimaxAuthTokenEnv(env, token) {
+    if (token)
+        env[AIMAX_AUTH_TOKEN_ENV] = token;
+    else
+        delete env[AIMAX_AUTH_TOKEN_ENV];
+}
 function sameAuthFileVersion(left, right) {
     if (!left.exists || !right.exists)
         return left.exists === right.exists;
@@ -21,9 +62,22 @@ function sameAuthFileVersion(left, right) {
 /** Reads ~/.aima-go/auth.json with metadata-based parse caching and fail-closed semantics. */
 export class AimaxAuthReader {
     authFile;
+    env;
     cached;
-    constructor(authFile = path.join(os.homedir(), ".aima-go", "auth.json")) {
+    constructor(authFile = path.join(os.homedir(), ".aima-go", "auth.json"), env = process.env) {
         this.authFile = authFile;
+        this.env = env;
+    }
+    resolveKeyHex() {
+        const injected = typeof this.env.AI_MA_PUB_SALT_KEY === "string" ? this.env.AI_MA_PUB_SALT_KEY.trim() : "";
+        if (injected)
+            return injected;
+        const host = process.env.AI_MA_PUB_SALT_KEY?.trim();
+        return host || DEFAULT_AI_MA_PUB_SALT_KEY;
+    }
+    finish(token) {
+        syncAimaxAuthTokenEnv(this.env, token);
+        return token;
     }
     async getToken() {
         let version;
@@ -34,22 +88,24 @@ export class AimaxAuthReader {
         }
         catch {
             this.cached = { version: { exists: false } };
-            return undefined;
+            return this.finish(undefined);
+        }
+        if (this.cached && sameAuthFileVersion(this.cached.version, version)) {
+            return this.finish(this.cached.token);
         }
-        if (this.cached && sameAuthFileVersion(this.cached.version, version))
-            return this.cached.token;
         let token;
         try {
             const parsed = JSON.parse(await readFile(this.authFile, "utf8"));
             const candidate = parsed["aimax-auth-token"];
-            if (typeof candidate === "string" && candidate.trim())
-                token = candidate;
+            if (typeof candidate === "string" && candidate.trim()) {
+                token = decodeAimaxAuthToken(candidate, this.resolveKeyHex());
+            }
         }
         catch {
             // Malformed or unreadable files are intentionally ineligible.
         }
         this.cached = { version, ...(token ? { token } : {}) };
-        return token;
+        return this.finish(token);
     }
     async isEligible() {
         return Boolean(await this.getToken());

package/dist/worker/console/chat/session-catalog.js

@@ -1,5 +1,36 @@
 import { isBlankChatSession } from "./session-store.js";
 import { projectDeferredTurnSummaries, projectDeferredTurnSummary, } from "./deferred-turn.js";
+/** Sidebar / global GET /chat/sessions projection. Must include sessionMode. */
+export function projectChatSessionCatalogListItem(entry, active) {
+    return {
+        sessionId: entry.sessionId,
+        ...(entry.workspaceId ? { workspaceId: entry.workspaceId } : {}),
+        state: entry.state,
+        createdAt: entry.createdAt,
+        updatedAt: entry.updatedAt,
+        ...(entry.title !== undefined ? { title: entry.title } : {}),
+        ...(entry.displayTitle !== undefined
+            ? { displayTitle: entry.displayTitle }
+            : {}),
+        ...(entry.modelProvider !== undefined
+            ? { modelProvider: entry.modelProvider }
+            : {}),
+        ...(entry.modelId !== undefined ? { modelId: entry.modelId } : {}),
+        ...(entry.thinkingLevel !== undefined
+            ? { thinkingLevel: entry.thinkingLevel }
+            : {}),
+        sessionMode: entry.sessionMode,
+        activeTurnId: active?.turnId,
+        turnPhase: active?.abortRequestedAt
+            ? "stopping"
+            : active
+                ? "running"
+                : "idle",
+        deferredTurn: entry.deferredTurn,
+        deferredTurns: entry.deferredTurns,
+        isBlank: entry.isBlank && !active,
+    };
+}
 /**
  * Process-wide Session baseline, mirroring DSH's independent session.list.
  * Full records stay in their fingerprint-isolated stores; this catalog only
@@ -36,6 +67,7 @@ export class ChatSessionCatalog {
             deferredTurns: projectDeferredTurnSummaries(record.deferredTurns ?? []),
             isBlank: isBlankChatSession(record),
             ...(workspaceId ? { workspaceId } : {}),
+            sessionMode: record.sessionMode,
         });
     }
     remove(sessionId) {

package/dist/worker/console/chat/session-mode-view.js

@@ -0,0 +1,48 @@
+/**
+ * Browser-safe session-mode types and copy.
+ *
+ * Keep this module free of Node/runtime tool policy so the Console UI
+ * bundle can import it without pulling operator registries.
+ */
+export const CONSOLE_CHAT_SESSION_MODES = ["workflow", "pi"];
+export const DEFAULT_CONSOLE_CHAT_SESSION_MODE = "workflow";
+export const SESSION_MODE_COPY = {
+    workflow: {
+        id: "workflow",
+        label: "工作流",
+        shortLabel: "工作流",
+        description: "规划并推进工作流",
+        createLabel: "新建工作流会话",
+        bannerTitle: "工作流",
+        bannerBody: "用自然语言编排 loop-agent / agent-worker 的全部能力。这是 Operator 面：默认具备完整 Pi 工具与受策略约束的 operator action。软约束：大改与高风险变更优先走受治 DAG。",
+        landingTitle: "开始一段新的对话",
+        landingBody: "用自然语言编排 loop-agent：查询状态、诊断问题、创建与恢复任务。可先点选下方建议，或在输入框描述目标。工作流或 Pi 在输入框上方选择。",
+        emptyTitle: "今天想推进什么？",
+        emptyBody: "会话已就绪。输入框上方可切换工作区或工作流 / Pi。点选建议快速开场，或直接描述目标。业务写入仍经受治理 DAG。",
+    },
+    pi: {
+        id: "pi",
+        label: "Pi",
+        shortLabel: "Pi",
+        description: "保留压缩与 Explore，直接协作编码",
+        createLabel: "新建 Pi 会话",
+        bannerTitle: "Pi",
+        bannerBody: "保留 Console 压缩与 Explore，直接协作编码。不注入工作流业务指令、业务工具或 Goal 驱动。",
+        landingTitle: "开始一段 Pi 协作",
+        landingBody: "Pi 模式保留压缩、Explore、认证与 SDD 接入，取消工作流业务注入。适合有人监督的直接编码与调试。",
+        emptyTitle: "直接协作编码",
+        emptyBody: "会话已就绪。输入框上方可切换工作区或模式。使用 Pi 工具读写仓库；Explore 负责只读深挖。本会话不加载任务 / DAG 工作流工具。",
+    },
+};
+/** Slash actions that only exist in workflow sessions. Browser-safe: pure
+ *  string constants, no runtime/tool policy imports. */
+export const WORKFLOW_EXCLUSIVE_SLASH_ACTIONS = Object.freeze([
+    "focus-panel:task",
+    "focus-panel:contract",
+    "focus-panel:dag",
+    "focus:interview",
+    "goal",
+]);
+export function isWorkflowExclusiveSlashAction(action) {
+    return WORKFLOW_EXCLUSIVE_SLASH_ACTIONS.includes(action);
+}

package/dist/worker/console/chat/session-mode.js

@@ -0,0 +1,218 @@
+/**
+ * Console Chat session modes (workflow | pi).
+ *
+ * sessionMode is a durable session identity, independent of per-turn
+ * operator | requirement-interview and of UI layout mode. Record is the
+ * source of truth; runtime, catalog, list/detail and the browser cache
+ * all project this field.
+ */
+import { OPERATOR_CHAT_ALLOWED_TOOLS, OPERATOR_CHAT_BUILTIN_CUSTOM_TOOLS, OPERATOR_CHAT_PI_BUILTIN_TOOLS, authorizeOperatorChatTool, isOperatorChatToolDenied, } from "./tools.js";
+import { OPERATOR_CHAT_AGENT_TOOL_NAME } from "./subagents/types.js";
+import { CONSOLE_CHAT_SESSION_MODES, DEFAULT_CONSOLE_CHAT_SESSION_MODE, } from "./session-mode-view.js";
+export { CONSOLE_CHAT_SESSION_MODES, DEFAULT_CONSOLE_CHAT_SESSION_MODE, SESSION_MODE_COPY, } from "./session-mode-view.js";
+export const SESSION_MODE_INVALID_CODE = "INVALID_SESSION_MODE";
+export const SESSION_MODE_UNKNOWN_CODE = "UNKNOWN_SESSION_MODE";
+export const SESSION_MODE_ACTION_DENIED_CODE = "SESSION_MODE_ACTION_DENIED";
+export const SESSION_MODE_IMMUTABLE_CODE = "SESSION_MODE_IMMUTABLE";
+export class InvalidChatSessionModeError extends Error {
+    value;
+    code = SESSION_MODE_INVALID_CODE;
+    constructor(value) {
+        super(`sessionMode must be "workflow" or "pi"${value === undefined || value === null || value === ""
+            ? ""
+            : `; got ${String(value)}`}`);
+        this.value = value;
+        this.name = "InvalidChatSessionModeError";
+    }
+}
+export class UnknownChatSessionModeError extends Error {
+    value;
+    code = SESSION_MODE_UNKNOWN_CODE;
+    constructor(value) {
+        super(`chat session record has unknown sessionMode ${JSON.stringify(value)}; refusing to run as workflow`);
+        this.value = value;
+        this.name = "UnknownChatSessionModeError";
+    }
+}
+const MODE_SET = new Set(CONSOLE_CHAT_SESSION_MODES);
+function isSessionMode(value) {
+    return typeof value === "string" && MODE_SET.has(value);
+}
+/**
+ * Create-path parser. Missing / null / "" → workflow. Explicit illegal
+ * values fail closed and must not silently degrade.
+ */
+export function parseCreateSessionMode(value) {
+    if (value === undefined || value === null || value === "") {
+        return DEFAULT_CONSOLE_CHAT_SESSION_MODE;
+    }
+    if (isSessionMode(value))
+        return value;
+    throw new InvalidChatSessionModeError(value);
+}
+/**
+ * Restore-path parser. Missing field → workflow (stock-data rule, not a
+ * compatibility shim). Present but unknown → fail closed.
+ */
+export function readStoredSessionMode(value) {
+    if (value === undefined || value === null || value === "") {
+        return DEFAULT_CONSOLE_CHAT_SESSION_MODE;
+    }
+    if (isSessionMode(value))
+        return value;
+    throw new UnknownChatSessionModeError(value);
+}
+export function isWorkflowSessionMode(mode) {
+    return mode === "workflow";
+}
+export function isPiSessionMode(mode) {
+    return mode === "pi";
+}
+/** Shared Console foundations that both modes keep. Not a native-only prompt. */
+export const PI_CHAT_SYSTEM_PROMPT_BASE = [
+    "You are Console Chat in Pi mode: a coding assistant with Pi tools plus Console shared foundations.",
+    "Use read/write/edit/bash/grep/find/ls to inspect and change the workspace. apply_patch, full-tools, shell and coding-chat are denied.",
+    "Agent (Explore) is a built-in read-only subagent for path-uncertain codebase search. Do not use it for a known single-file read. Prefer safe-read/safe-grep for secret-safe probes.",
+    "ask_user_question pauses for a real user answer. todo_write tracks the current work and is restored after compression; it is not a workflow auto-continue signal. The persistent terminal tool is available.",
+    "This session keeps Console compression (L0/L1/L2, sift, strict checkpoint) and existing Aimax / SDD access. Do not create tasks, run DAGs, drive Goals, or start requirement interviews from this session.",
+    "Obey repository AGENTS.md, skills and extensions when they apply. Choosing Pi mode is not extra write authorization and does not bypass Console access control or output scrubbing.",
+].join("\n");
+export const CHAT_SAFE_EXPLORE_TOOL_IDS = Object.freeze([
+    "safe-read",
+    "safe-grep",
+    "git-status",
+    "git-diff",
+]);
+export const PI_CHAT_GENERIC_HELPER_TOOLS = Object.freeze([
+    "ask_user_question",
+    "todo_write",
+]);
+export const PI_CHAT_WORKFLOW_TOOL_IDS = Object.freeze([
+    "get_goal",
+    "create_goal",
+    "update_goal",
+]);
+const CHAT_EXTENSION_DENIED_TOOL_IDS = new Set([
+    "apply_patch",
+    "apply-patch",
+    "full-tools",
+    "full_tools",
+    "coding-chat",
+    "coding_chat",
+    "shell",
+].map((name) => name.toLowerCase()));
+const WORKFLOW_OPERATOR_TOOL_IDS = new Set(OPERATOR_CHAT_ALLOWED_TOOLS.map((name) => name.toLowerCase()));
+const PI_GOAL_TOOL_IDS = new Set(PI_CHAT_WORKFLOW_TOOL_IDS.map((name) => name.toLowerCase()));
+export function workflowActiveToolBaseline() {
+    return [
+        ...OPERATOR_CHAT_ALLOWED_TOOLS,
+        ...OPERATOR_CHAT_PI_BUILTIN_TOOLS,
+        ...CHAT_SAFE_EXPLORE_TOOL_IDS,
+        ...OPERATOR_CHAT_BUILTIN_CUSTOM_TOOLS,
+    ];
+}
+export function piActiveToolBaseline() {
+    return [
+        ...OPERATOR_CHAT_PI_BUILTIN_TOOLS,
+        ...CHAT_SAFE_EXPLORE_TOOL_IDS,
+        ...OPERATOR_CHAT_BUILTIN_CUSTOM_TOOLS,
+        ...PI_CHAT_GENERIC_HELPER_TOOLS,
+    ];
+}
+export function chatActiveToolBaseline(sessionMode) {
+    return sessionMode === "pi"
+        ? piActiveToolBaseline()
+        : workflowActiveToolBaseline();
+}
+/**
+ * Gate 2 pin: mode baseline plus user/project extension tools. Pi mode must
+ * not re-add operator actions or Goal tools via the extras pass.
+ */
+export function computeChatActiveToolNames(session, sessionMode) {
+    const baseline = chatActiveToolBaseline(sessionMode);
+    if (!session?.getAllTools)
+        return baseline;
+    const baselineLower = new Set(baseline.map((name) => name.toLowerCase()));
+    const extras = [];
+    for (const tool of session.getAllTools()) {
+        const name = tool?.name;
+        if (!name || typeof name !== "string")
+            continue;
+        const lower = name.toLowerCase();
+        if (baselineLower.has(lower))
+            continue;
+        if (CHAT_EXTENSION_DENIED_TOOL_IDS.has(lower))
+            continue;
+        if (sessionMode === "pi" && WORKFLOW_OPERATOR_TOOL_IDS.has(lower))
+            continue;
+        if (sessionMode === "pi" && PI_GOAL_TOOL_IDS.has(lower))
+            continue;
+        extras.push(name);
+    }
+    return extras.length > 0 ? [...baseline, ...extras] : baseline;
+}
+export function authorizeChatSessionTool(toolId, sessionMode) {
+    if (sessionMode === "workflow")
+        return authorizeOperatorChatTool(toolId);
+    const id = toolId.trim();
+    if (!id) {
+        return {
+            ok: false,
+            code: "tool-unknown",
+            toolId: id,
+            message: "empty tool id is not allowed in Pi mode",
+        };
+    }
+    if (isOperatorChatToolDenied(id)) {
+        return {
+            ok: false,
+            code: "tool-denied",
+            toolId: id,
+            message: `tool "${id}" is denied in Pi mode (no apply_patch/full-tools/shell/coding-chat)`,
+        };
+    }
+    const lower = id.toLowerCase();
+    if (WORKFLOW_OPERATOR_TOOL_IDS.has(lower) || PI_GOAL_TOOL_IDS.has(lower)) {
+        return {
+            ok: false,
+            code: "tool-denied",
+            toolId: id,
+            message: `tool "${id}" is a workflow action and is not available in Pi mode`,
+        };
+    }
+    const authorized = new Set(piActiveToolBaseline().map((name) => name.toLowerCase()));
+    if (authorized.has(lower))
+        return { ok: true, toolId: id };
+    return {
+        ok: false,
+        code: "tool-unknown",
+        toolId: id,
+        message: `tool "${id}" is not registered for Pi mode`,
+    };
+}
+export function composeChatSystemPromptParts(input) {
+    const base = input.sessionMode === "pi"
+        ? PI_CHAT_SYSTEM_PROMPT_BASE
+        : input.workflowPrompt;
+    const suffix = input.sessionMode === "workflow" ? input.systemPromptSuffix?.trim() : "";
+    return suffix ? [base, suffix] : [base];
+}
+export function composeChatSystemPrompt(input) {
+    return composeChatSystemPromptParts(input).join("\n\n");
+}
+export const PI_TODO_WRITE_DESCRIPTION = "Record and update a structured task list for the current work. Send the ENTIRE list every call — it REPLACES the previous list (no partial updates, no per-item edits). Before starting multi-step work, add one todo per concrete step. Keep at least one todo `in_progress` while work remains. Mark a todo `completed` immediately when it is done (do not batch completions) and resend the full list as progress advances. Skip the list for simple Q&A, read-only lookups, and single-step tasks. Statuses: `pending` / `in_progress` / `completed`.";
+// Slash gating lives in the browser-safe view module (shortcuts.ts is in the
+// UI bundle); re-export here for Node-side consumers.
+export { WORKFLOW_EXCLUSIVE_SLASH_ACTIONS, isWorkflowExclusiveSlashAction, } from "./session-mode-view.js";
+export function shouldLoadWorkflowBusinessTools(sessionMode) {
+    return sessionMode === "workflow";
+}
+export function shouldInjectGoalContinuation(sessionMode) {
+    return sessionMode === "workflow";
+}
+export function shouldAcceptOperatorSnapshot(sessionMode) {
+    return sessionMode === "workflow";
+}
+export const SESSION_MODE_ACTION_DENIED_MESSAGE = "this action is only available in workflow sessions";
+/** Stable tool name used by tests and catalogs for the Explore subagent. */
+export const PI_CHAT_AGENT_TOOL_NAME = OPERATOR_CHAT_AGENT_TOOL_NAME;

package/dist/worker/console/chat/session-store.js

@@ -15,6 +15,7 @@ import { readdir, rm } from "node:fs/promises";
 import { readJsonIfExists, writeSecureJson, } from "../../../infrastructure/console/app-data.js";
 import { dispatchOperatorAction } from "../operator-actions.js";
 import { authorizeOperatorChatTool } from "./tools.js";
+import { authorizeChatSessionTool, DEFAULT_CONSOLE_CHAT_SESSION_MODE, readStoredSessionMode, } from "./session-mode.js";
 import { projectOperationForChat } from "./chat-event-store.js";
 import { scrubSecrets } from "./explore-tools.js";
 import { hashDeferredTurnPayload, parseDeferredTurns, } from "./deferred-turn.js";
@@ -106,6 +107,7 @@ export class ChatSessionStore {
             ...(typeof raw.workspaceId === "string" && raw.workspaceId
                 ? { workspaceId: raw.workspaceId }
                 : {}),
+            sessionMode: readStoredSessionMode(raw.sessionMode),
             deferredTurns: normalizedDeferredTurns,
             ...(normalizedDeferredTurns[0] ? { deferredTurn: normalizedDeferredTurns[0] } : {}),
             deferredQueueRevision: Number.isSafeInteger(raw.deferredQueueRevision) && (raw.deferredQueueRevision ?? 0) >= 0
@@ -143,7 +145,17 @@ export class ChatSessionStore {
         }
         const records = await Promise.all(names
             .filter((name) => name.endsWith(".json"))
-            .map((name) => this.get(name.slice(0, -".json".length))));
+            .map(async (name) => {
+            try {
+                return await this.get(name.slice(0, -".json".length));
+            }
+            catch (error) {
+                // Skip corrupt records (e.g. unknown sessionMode) but stay
+                // diagnosable: silent disappearance is untraceable otherwise.
+                process.stderr.write(`[console] chat session record skipped in list: ${name.slice(0, -".json".length)}: ${error instanceof Error ? error.message : String(error)}\n`);
+                return undefined;
+            }
+        }));
         return records
             .filter((record) => Boolean(record) && (options?.includeArchived || record.state === "active"))
             .sort((a, b) => b.updatedAt.localeCompare(a.updatedAt));
@@ -172,6 +184,7 @@ export class ChatSessionStore {
                 updatedAt: now,
                 modelProvider: input.modelProvider,
                 modelId: input.modelId,
+                sessionMode: input.sessionMode ?? DEFAULT_CONSOLE_CHAT_SESSION_MODE,
                 messages: [],
                 toolInvocations: [],
             };
@@ -497,9 +510,10 @@ export class ChatSessionStore {
 /**
  * Dispatch a Chat tool invocation into the operator action layer.
  *
- * Gate 3 (per-call): authorizeOperatorChatTool is re-checked here. Even if a
- * malicious or drifted session somehow requested a denied tool, this gate
- * refuses before any operator action runs (V12 / V15).
+ * Gate 3 (per-call): authorizeChatSessionTool is re-checked here with the
+ * session mode. Even if a malicious or drifted session somehow requested a
+ * denied or workflow-exclusive tool, this gate refuses before any operator
+ * action runs (V12 / V15).
  *
  * High-risk actions (contractApply / runDag / etc.) are NOT registered as
  * tools, so they never reach here; but we still deny defensively.
@@ -514,8 +528,10 @@ function redactHumanGateToken(value) {
     delete clone.humanGateToken;
     return clone;
 }
-export async function dispatchChatToolCall(ctx, toolName, args, clientRequestId) {
-    const decision = authorizeOperatorChatTool(toolName);
+export async function dispatchChatToolCall(ctx, toolName, args, clientRequestId, sessionMode) {
+    const decision = sessionMode === undefined
+        ? authorizeOperatorChatTool(toolName)
+        : authorizeChatSessionTool(toolName, sessionMode);
     if (!decision.ok) {
         return {
             ok: false,

package/dist/worker/console/chat/shortcuts.js

@@ -5,6 +5,7 @@
  * prompt / skill commands are merged via mergeSlashCommands with conflict
  * priority: operator/web > extension > skill > prompt.
  */
+import { isWorkflowExclusiveSlashAction } from "./session-mode-view.js";
 export const SHORTCUTS = [
     {
         command: "/task",
@@ -138,7 +139,10 @@ export function mergeSlashCommands(dynamic = [], capabilities = {}) {
             byName.set(key, { ...item, command: key });
         }
     };
+    const hideWorkflow = capabilities.sessionMode === "pi";
     for (const item of SHORTCUTS) {
+        if (hideWorkflow && isWorkflowExclusiveSlashAction(item.action))
+            continue;
         upsert({
             command: item.command,
             label: item.label,
@@ -148,6 +152,8 @@ export function mergeSlashCommands(dynamic = [], capabilities = {}) {
         });
     }
     for (const item of WEB_SLASH_COMMANDS) {
+        if (hideWorkflow && isWorkflowExclusiveSlashAction(item.action))
+            continue;
         upsert({
             command: item.command,
             label: item.label,