@thincoder/core 0.10.10 → 0.10.12

package/CHANGELOG.md

@@ -3,7 +3,39 @@
 All notable changes to the core package are documented here.
 Format: Keep a Changelog · 中文 · 号在发布时定（CalVer——见 `docs/RELEASE.md` §4）。
 
-## [Unreleased]
+## [0.10.12] — 2026-10-26
+
+### Changed
+
+- **台账在无根目录从「静默空集」改为「抛明」**：项目根推导不出来时，`query` / `count` / `add` / `update` / `close` 一律抛错并说明「自哪个路径、向上找到哪里为止」，不再返回空集。空集与「记到别的项目」在回执上分不开，静默空集等于让人以为没有台账。
+- **多根工作区下建批档：报明项目并给路径，不再落锚目录**：工作目录本身没有项目、直接子目录里有项目（1 个同判、多个同判），此时建批档会列全下辖项目并给显式路径指引；目标属于某个项目时照常落该项目的声明基底。
+- **项目根解析：多根工作区一律「≥1 同判」**：取消此前「恰一个子项目」与「多个」的区别——工作目录下直接子目录带项目清单，不论 1 个还是多个，都是多根工作区，逻辑一致。
+
+## [0.10.11] — 2026-10-25
+
+### Added
+
+- **`providers[].modelContext`（按模型的人工上下文声明，单位 K）**：键 = 模型 ID（末段归一等价——`qwen/ZHIPU/GLM-5.3` ≡ `glm-5.3`），值 = 正整数 K（`128` = 128K）。
+- **模型上下文五级解析链**：`modelContext` > 旧键 `providers[].context` > 渠道 `/models` 自报（`context_window` / `context_length` / `max_model_len`，取第一个合法值）> `MODEL_SPECS` 静态表 > 默认 128K；列表自报值是 token（直接采用），人工声明是 K（核内唯一乘点 ×1024）。
+- **核导出 `providerSpecResolution(provider)` / `formatContextK(tokens)`**：来源五值（`modelContext` / `provider-override` / `list` / `spec` / `default`）与三端同一展示格式器。
+
+### Changed
+
+- **旧键 `providers[].context` 退役为只读过渡层（A7 兼容）**：仍可读（L2，K 单位，仅未被 `modelContext` 点名的模型），但不再写入新配置——K 单位旧编辑命令退役，三端写面改用 `modelContext`（三端同批，随各端包发布）；实际用到 L2 时告警一次并给出迁移形 `modelContext: { "<模型>": <K> }`（单位同为 K）。
+- **`requestBudget().windowSource` 扩为五值**：读 `providerSpecResolution().source`（原二值 `provider-override` / `spec`），五个枚举值原样入 `Request budget:` 行（不并类）。
+- **模型名匹配改「末段唯一」**：按 `/` 拆分后只取最后一段查表，不再先扫完整名——`glm-5.3/zzz` 由误命中 `glm-5.3`（1M 上下文）改为未命中（`DEFAULT_SPEC` + 告警）；`kimi/kimi-k3` 表行退役（末段 `kimi-k3` 已有同值行，含 `/` 的键不可达）。
+
+## [0.10.10] — 2026-10-22
+
+### Added
+
+- **子代理 `manifest` 只读面**：同名工具、`action` 枚举只剩 `read`（schema 级不可达 + execute 入口再拒一次），挂全部 depth>0 角色段；写面仍归主 agent——`init` / `write` 不在其装配，只读位也不落在全量变体上，审批门不被绕过。`readAction` 增 `canInit`：子代理侧缺档 / 无项目两态的引导行不再指向它调不到的 `init`。
+- **`thincoder-core/prompts/common.md` 新增「动手前先查文档」一节**：代码只记形状，理由与后果住在文档里；一次会话只完成大任务的一步、上下文只是项目已知内容的一小部分，不先查就是拿局部当整体。
+
+### Changed
+
+- **提示词面 16 档重写（一条规则一行）**：`>300` 字符行 290 → **0**（最长 1,486 → 300，为未改动原行）；整句加粗 / 回查指代 / 出处括注 / 写死配置值 / 本仓路径 / 中文评审面六类残留清零。判据 = 「换个仓还成立吗」——规则只写行为，不写归属、不写配置值、不写本仓路径（配置值改教模型用 `settings` 读，路径改教用 `manifest` 取 `docRoot`）。
+- **`tool-docs` 计数随动**：53 → 54 档（枚举工具 52 → 53）。
 
 ## [0.10.9] — 2026-10-19
 
@@ -191,7 +223,9 @@ Format: Keep a Changelog · 中文 · 号在发布时定（CalVer——见 `docs
 
 ### Added
 
-- **规格表覆盖扩面（新名专行）**：`qwen-flash` / `qwen-vl-max`（实测输出上限 32_768——服务端直报 `[1, 32768]`；前者思考默认可开、后者不支持）、`claude-fable-5.1`（1_000_000 / 128_000）、`gemini-3.1-pro`（1_048_576 / 65_536）、`stepfun/step-3.7-flash`（262_144）；kimi-code 平台三行（`kimi-for-coding` / `kimi-for-coding-highspeed` / `k3-256k`——含 effort 枚举与默认档）——掉兜底名不再退默认。
+- **规格表覆盖扩面（新名专行）**：`qwen-flash` / `qwen-vl-max`（实测输出上限 32_768——服务端直报 `[1, 32768]`；前者思考默认可开、后者不支持）、
+  `claude-fable-5.1`（1_000_000 / 128_000）、`gemini-3.1-pro`（1_048_576 / 65_536）、`stepfun/step-3.7-flash`（262_144）；
+  kimi-code 平台三行（`kimi-for-coding` / `kimi-for-coding-highspeed` / `k3-256k`——含 effort 枚举与默认档）——掉兜底名不再退默认。
 - **bench 受测 10 档规格行**：此前经泛前缀/兜底解析的受测模型补独立行 + 视觉声明分态登记。
 - **跨实例意图认领层（P1）**：`peers/{sessionId}.json` 增 claims 意图域（TTL 30 分钟租约 · 进程死亡即失效）；写前命中他实例活认领 ⇒ 软提示（不阻写；与写后足迹登记分开存）。
 

package/advisor/messages.mjs

@@ -12,7 +12,7 @@ import { loadAdvisorMd, extractConversationBackground, extractAgentResponseTable
 import { injectProjectGuide, injectDocumentMap, injectProjectStandards, NO_GIT_NOTICE } from "./project-context.mjs"
 
 // Structural split (not an authority migration): the moved helpers stay reachable here.
-export { findProjectRoot, injectProjectGuide } from "./project-context.mjs"
+export { findGuideRoot, injectProjectGuide } from "./project-context.mjs"
 
 /**
  * Build the mechanical review-object declaration block (AGENT-LOOP-ASYNC-POOL.md §6.18

package/advisor/project-context.mjs

@@ -51,7 +51,7 @@ export const NO_GIT_NOTICE = "(No git repository detected — change-set context
  * @param {string[]} scopeFiles — cwd-relative review-scope paths (may be empty)
  * @returns {string|null} absolute project root with an AGENTS.md, or null
  */
-export function findProjectRoot(cwd, scopeFiles) {
+export function findGuideRoot(cwd, scopeFiles) {
   // Normalize separators before comparing: input paths may use either
   // convention (join() → "\\" on Windows; tool args / tests → "/"). Mixed
   // styles made isInside(cwd + sep) miss legitimately nested paths.
@@ -88,7 +88,7 @@ export function findProjectRoot(cwd, scopeFiles) {
  */
 export function injectProjectGuide(agent, parts, scopeFiles = []) {
   parts.push("## Project Guide (AGENTS.md)")
-  const root = findProjectRoot(agent.cwd, scopeFiles)
+  const root = findGuideRoot(agent.cwd, scopeFiles)
   const path = root ? join(root, "AGENTS.md") : null
   let text
   if (!path) {

package/agent/completion.mjs

@@ -8,6 +8,7 @@
 import { hasCodeMutations } from "../advisor/repos.mjs"
 import { pushReal } from "../context.mjs"
 import { advisorReviewPending, effectiveAdvisorRound } from "../agent-tools/advisor-async.mjs"
+import { poolLive } from "./suspension.mjs"
 
 const MAX_VERIFY_PUSHBACKS = 2
 const MAX_VERIFY_RETRIES = 3
@@ -59,7 +60,9 @@ export function handleCompletion(agent, response, depth, turn, guardPushbacks, h
   // list state earns one fresh reminder.
   // F10（催更门连带）：工程模式下 task 工具机械停用（装配摘除 + execute 拒）⇒ 不再发指向被拒
   // 工具的提醒（死胡同提醒防线）；列表本体与 `_taskPushbacks` 预算语义零改。
-  if (depth === 0 && !agent.config?.agent?.engineering && agent.tasks.some((t) => t.status === "pending") && (agent._taskPushbacks ?? 0) < 1) {
+  // TIMEOUT-DIGEST.md §2.3（#29）：后台池 live 时不推回——池在飞时回合本就还会被 settle 唤醒，
+  // 此时催 task 只会拖回合；判据复用 `poolLive`（与挂起尾巴同一口径，不立第二处）。
+  if (depth === 0 && !agent.config?.agent?.engineering && !poolLive(agent) && agent.tasks.some((t) => t.status === "pending") && (agent._taskPushbacks ?? 0) < 1) {
     agent._taskPushbacks = (agent._taskPushbacks ?? 0) + 1
     const pending = agent.tasks.filter((t) => t.status === "pending").map((t) => t.title).join(", ")
     pushReal(agent, { role: "assistant", content: response.content })

package/agent/family-tools.mjs

@@ -95,8 +95,8 @@ export async function assembleFamilyTools({
         // async, the check/status params (id/n), the eng-coder token params
         // (designToken/designId are meaningless for a read-only spawn; the parent
         // spawn already carried the token) and batchDoc (an audit child derives no
-        // batch parameter — its task book rides the mechanical summary of the
-        // parent's _engTaskInput instead). Schema noise would invite the
+        // batch parameter — its task book rides the parent's batch record §2 instead
+        // (the audit block carries the batchDoc path)). Schema noise would invite the
         // model to pass irrelevant args.
         delete props.async // sync only — the parent blocks on the child's report
         delete props.id
@@ -126,7 +126,7 @@ export async function assembleFamilyTools({
           name: "subagent",
           description: designer
             ? "Spawn a read-only `explore` sub-agent to SURVEY the current state for the design: it reads code / docs / existing designs and reports evidence with file:line. BLOCKING ONLY (no async) and action:'spawn' ONLY — the survey channel is read-only; escalate/status/cancel/panel/consume-design/observe/send are not available. Survey budget: ≤6 explore spawns per batch — the main agent's survey result is reference only; do your own. The spawn carries the five task-book parameters (four core: goal / knownFacts / acceptance / reportFormat + `scope`); a task-only spawn is refused."
-            : "Spawn a read-only `explore` sub-agent to AUDIT your delivery against the design: it compares the delivered code with the design for divergence — partially implemented acceptance criteria, silent simplifications, doc drift, changes outside the approved file list. BLOCKING ONLY (no async — the audit report decides your next protocol step). action:'spawn' ONLY — the audit channel is a read-only spawn; escalate/status/cancel/panel/consume-design/observe/send are not available. The audit task book is appended MECHANICALLY — your own spawn task (docs involved / acceptance criteria / file list) plus the files you actually touched; never hand the audit a self-written file list (a self-report could omit exactly the out-of-scope file it must catch). The spawn carries the five task-book parameters (four core: goal / knownFacts / acceptance / reportFormat + `scope`); a task-only spawn is refused.",
+            : "Spawn a read-only `explore` sub-agent to AUDIT your delivery against the design: it compares the delivered code with the design for divergence — partially implemented acceptance criteria, silent simplifications, doc drift, changes outside the approved file list. BLOCKING ONLY (no async — the audit report decides your next protocol step). action:'spawn' ONLY — the audit channel is a read-only spawn; escalate/status/cancel/panel/consume-design/observe/send are not available. The audit context is appended MECHANICALLY — the batch record path (its §2 is the delivery's task book, read it before judging) plus the files you actually touched; never hand the audit a self-written file list (a self-report could omit exactly the out-of-scope file it must catch). The spawn carries the five task-book parameters (four core: goal / knownFacts / acceptance / reportFormat + `scope`); a task-only spawn is refused.",
           parameters: { ...subagentTool.parameters, properties: props },
         }
       })()

package/agent/helpers.mjs

@@ -150,24 +150,26 @@ export async function cleanupOldToolResults(dir) {
   }
 }
 
-/** Offload oversized tool results (>64K chars) to disk, returning a head+tail preview + file path
- *  (2026-09-04 §5 — dual-end preview; the failed-offload fallback uses the same dual-end slice).
- *  Writes trigger write-time self-cleanup of the offload dir first (dir param overridable for tests). */
-export async function offloadToolResult(text, callId, dir = join(configDir, "tool-results")) {
-  if (text.length <= TOOL_RESULT_OFFLOAD_LIMIT) return text
+/** Offload a tool result / report to disk (§2.2): `force` = write regardless of size (async
+ *  subagent reports must survive the parent turn). Rendering splits on the SAME constant as the old
+ *  gate: ≤ TOOL_RESULT_OFFLOAD_LIMIT ⇒ body once + path (never dual-end — a short body would come
+ *  out twice with `middle omitted: 0 chars`); > ⇒ dual-end preview + path. Writes self-clean first. */
+export async function offloadToolResult(text, callId, dir = join(configDir, "tool-results"), { force = false } = {}) {
+  const overLimit = text.length > TOOL_RESULT_OFFLOAD_LIMIT
+  if (!force && !overLimit) return text
   try {
     await cleanupOldToolResults(dir)
     await mkdir(dir, { recursive: true })
     const file = join(dir, `${Date.now()}-${String(callId).replace(/[^a-zA-Z0-9_-]/g, "_")}.log`)
     await writeFile(file, text, "utf8")
-    return (
-      buildDualEndPreview(text) +
-      `\n\n[... output too large (${text.length} chars total), full content saved to: ${file}\n` +
+    if (!overLimit) return `${text}\n\n[... full content saved to: ${file}\nPage through it with the read tool (offset/limit) if you need the full text later.]`
+    return buildDualEndPreview(text) + `\n\n[... output too large (${text.length} chars total), full content saved to: ${file}\n` +
       `Page through it with the read tool (offset/limit) or sed -n 'START,ENDp' — do NOT re-run the tool blindly.]`
-    )
   } catch {
-    // review #3: fallback uses the same dual-end slice (head + omitted note + tail, no path hint)
-    return buildDualEndPreview(text) + `\n\n[... truncated: ${text.length} chars total, offload to disk failed]`
+    // 写盘失败不吞报告：>LIMIT 走双端预览 + 原文案；≤LIMIT 正文整段在前（不谎称 truncated）
+    const body = overLimit ? buildDualEndPreview(text) : text
+    return body + (overLimit ? `\n\n[... truncated: ${text.length} chars total, offload to disk failed]`
+      : `\n\n[... full text kept inline above (${text.length} chars), offload to disk failed]`)
   }
 }
 

package/agent/light-round.mjs

@@ -21,9 +21,6 @@ import { projectRootView, resolveProjectRoot } from "../manifest.mjs"
 import { resolveDeclaredRef } from "../declaration.mjs"
 import { readBatchStatusLine } from "../agent-tools/batch-skeleton.mjs"
 
-/** 轮型标记（§2.3 开轮形升格为闸凭据；全链批行无此标记 ⇒ 不构成信号）。 */
-const ROUND_MARKER = "收尾链待跑"
-
 /** 轻通道轮在盘谓词（异步 · 只读 · fail-closed）。契约见头注。
  * @param {object} agent — 会话 agent（读 `cwd`）
  * @returns {Promise<boolean>} true = 放行（在盘轮次）；读错 ∥ 不可判 ⇒ false（照拦）
@@ -33,7 +30,7 @@ export async function lightRoundOpen(agent) {
     const cwd = agent?.cwd
     if (typeof cwd !== "string" || cwd.trim() === "") return false
     // W8 契约②：node:sqlite 链只经动态 import 进入（勿升静态）——候选枚举与逐候选查行同取本档公共面。
-    const { ledgerChildren, ledgerQuery } = await import("../ledger.mjs")
+    const { ledgerChildren, ledgerQuery, ROUND_MARKER } = await import("../ledger.mjs")
     const anchor = resolve(cwd)
     // 候选面 = 锚自身 + 直接子目录一层（纯向下；子项枚举单源 = `ledgerChildren`）。
     const candidates = [anchor, ...ledgerChildren(anchor).map((p) => p.root)]

package/agent/record-results.mjs

@@ -26,6 +26,8 @@
 import { pushReal } from "../context.mjs"
 import { specForModel } from "../config.mjs"
 import { FILE_MUTATORS, toolTouchPaths } from "./helpers.mjs"
+// F-LC6（LIGHT-CHANNEL §2.9 · 台账 #1753）：无账之笔提醒叶（谓词 + 文案 + 闩单源）。
+import { unbookedPenNotice } from "./unbooked-pen.mjs"
 import { capHistoryImages } from "../provider/normalize.mjs"
 import { resolve } from "node:path"
 import { advisorRuns, stripApprovedSuffix } from "../agent-tools/advisor-async.mjs"
@@ -82,7 +84,10 @@ export async function recordToolResults(agent, toolByName, results) {
         }
       } catch { /* Parse failure doesn't affect normal tool messages */ }
     }
-    pushReal(agent, { role: "tool", tool_call_id: toolCall.id, name: toolCall.name, content: result })
+    // F-LC6（LIGHT-CHANNEL §2.9）：主 agent 会话首笔产品源文件笔 ⇒ 回执末尾追加一行通道提醒
+    // （零拦截——只拼回执文本、入史时机不变；命中后本会话不再提示）。
+    const penNotice = unbookedPenNotice(agent, toolCall, ok, tool)
+    pushReal(agent, { role: "tool", tool_call_id: toolCall.id, name: toolCall.name, content: penNotice ? result + penNotice : result })
     if (tool && ok) {
       if (FILE_MUTATORS.has(toolCall.name)) {
         // Direct file edit — code was changed. The prior advisor review and

package/agent/setup-reminders.mjs

@@ -88,7 +88,7 @@ export function manifestStateLine({ phase }) {
  */
 export function manifestReportLine({ state, cwd, root, path, candidates, errors, matched } = {}) {
   if (state === "no-project") {
-    return `${MANIFEST_LINE_PREFIX}none — no project at ${cwd} (no manifest on the ancestor chain, none below). ` +
+    return `${MANIFEST_LINE_PREFIX}none — no project at ${cwd} (no manifest at this directory, none in the direct children). ` +
       `Parameters fall back to defaults. Create PROJECT-MANIFEST.json here to land a project (git optional).]`
   }
   if (state === "workspace") {

package/agent/unbooked-pen.mjs

@@ -0,0 +1,62 @@
+/**
+ * unbooked-pen.mjs — 无账之笔提醒叶（批 unbooked-pen · 台账 #1753）。
+ * 设计权威 = `docs/core/design/LIGHT-CHANNEL.md` §2.9（F-LC6）；需求 = `docs/core/requirements/LIGHT-CHANNEL.md` §2.6。
+ *
+ * 机制：每会话**首次**由主 agent 落下**产品源文件**笔时，在工具回执末尾追加一行通道确认提醒。
+ * 只提示——不拦、不放行、不改任何判据；文案为条件句（轻通道笔须先挂轮，全链笔交 eng-coder）。
+ * 承载形对齐先例 `agent-tools/zero-write-watch.mjs`（谓词叶 + 文案函数 + 闩 + 非阻塞）。
+ * 零环：只 import 既有单源（`FILE_MUTATORS` ∥ `toolTouchPaths` ∥ `isCodePath` ∥ `declarationForTarget`），
+ * 只被 `agent/record-results.mjs` import（不反向引）。
+ */
+import { resolve } from "node:path"
+import { FILE_MUTATORS, toolTouchPaths } from "./helpers.mjs"
+import { declarationForTarget } from "../declaration.mjs"
+import { isCodePath } from "../conventions.mjs"
+
+/** 笔集（§2.9 ②）：`FILE_MUTATORS` **减** `delete`——减式派生，不另抄第二份工具名清单
+ *  （`FILE_MUTATORS` 增删成员时本集自动跟上）。`delete` 不入集：删产品源文件须 `force`、
+ *  是显式动作，本批无场景（K20）。 */
+export const PEN_TOOLS = new Set([...FILE_MUTATORS].filter((name) => name !== "delete"))
+
+/** 文案单源（§2.9 文案块逐字——条件句 + 后果句；改文案只改这一处）。 */
+export function unbookedPenText() {
+  return "[pen check] first product-source write this session — confirm the channel before it lands: a light-channel pen needs its round booked first (batch record + an in-flight ledger row pointing at the record); a full-chain pen goes to eng-coder. A pen with no account is invisible at closeout, so the ledger settlement misses it."
+}
+
+/**
+ * 四合取 + 一闩判定（§2.9 触发面）——命中：置闩并返回回执后缀（`\n` + 文案行）；未中：空串。
+ * ① 身份 = 主 agent（`_role == null`——主会话装配不传 role，子代理 spawn 面统一传角色）
+ * ② 工具 ∈ `PEN_TOOLS` ③ `ok === true` ④ 任一目标分类为产品源文件
+ *    （逐目标 `resolve(cwd, p)` → `declarationForTarget(abs)` → `isCodePath(abs, conv)`——与父侧门
+ *     `agent/dispatch.mjs:111-118` 同式；出辖目标不判，任一命中即触发）
+ * 闩 = `agent._unbookedPenNotified`（每会话一次——不按轮、不按文件）。
+ * @param {object} agent 主 agent（读 `cwd` ∥ `_role` ∥ 闩位）
+ * @param {{name: string, arguments?: string}} toolCall
+ * @param {boolean} ok 工具结果成功位（被拒的笔没有落盘，提醒无对象）
+ * @param {object} [tool] 工具对象——只用于 `toolTouchPaths` 的可选钩子 `touchedPaths`
+ *   （`apply_patch` ∥ 多目标 `edit` 的目标解析靠它；缺省按单参 `path`）
+ * @returns {string} 命中 = 回执后缀；未中 = ""
+ */
+export function unbookedPenNotice(agent, toolCall, ok, tool) {
+  if (!agent || agent._role != null) return ""
+  if (!tool) return ""
+  if (ok !== true) return ""
+  if (agent._unbookedPenNotified) return ""
+  if (!PEN_TOOLS.has(toolCall?.name)) return ""
+  try {
+    const args = JSON.parse(toolCall.arguments || "{}")
+    const hit = toolTouchPaths(tool, args).some((p) => {
+      if (typeof p !== "string" || !p.trim()) return false
+      const abs = resolve(agent.cwd, p)
+      const conv = declarationForTarget(abs)
+      return !!conv && isCodePath(abs, conv)
+    })
+    if (!hit) return ""
+  } catch {
+    // 恒零抛（先例 zero-write-watch.mjs 同款）：提醒是兜底面——判定失败不得中断回执提交
+    // （畸形 args ∥ 非标准装配的 cwd）。退回空串 = 本笔不提示，判据面零变。
+    return ""
+  }
+  agent._unbookedPenNotified = true
+  return `\n${unbookedPenText()}`
+}

package/agent-tools/advisor.mjs

@@ -9,10 +9,9 @@
  */
 import { runAdvisorReview, advisorIncompleteMarker, ADVISOR_LAUNCH_REFUSAL_PREFIX } from "../advisor/run.mjs"
 import { resolveBatchDocPath } from "./batch.mjs"
-// M6（模块设计 §2.1 F3）：评审对象来源读 manifest docRoot（声明面）——单一权威源 =
-// review-facts.mjs 的 resolveReviewDocPaths（2026-10-04 · #921 · KD-2——分类四分支 + B 文案
-// 诊断数据单源；write-gate 同名再出口保 normAbs 面）。不 import dispatch.mjs（簇间回边，环风险）。
-import { normAbs } from "../agent/write-gate.mjs"
+// 设计评审的文档受理面单源 = review-facts.mjs 的 resolveReviewDocPaths（判据正文 =
+// docs/core/design/ADVISOR-GUARDS.md §12：相对形按会话项目根 / 绝对形照用 / 受理 = 项目内现存 `.md`）。
+import { projectRootView } from "../manifest-discovery.mjs"
 import { resolveReviewDocPaths } from "./review-facts.mjs"
 import {
   generateDesignToken,
@@ -62,7 +61,7 @@ export const advisorTool = {
       documents: {
         type: "array",
         items: { type: "string" },
-        description: "Doc paths to review (design / requirements / referenced docs). Relative paths resolve against the session cwd first, then candidate project roots (project-root-relative e.g. <repo>/docs/…, or absolute). The advisor reviews ONLY these — no git diff scan. Use for both review types to pass the task's docs list.",
+        description: "Doc paths to review (design / requirements / referenced docs). One rule: a relative path resolves against the session project root (e.g. docs/core/design/ADVISOR-GUARDS.md); an absolute path is used as-is. Accepted = an existing .md file anywhere inside a project (a repo-root doc such as METHODOLOGY.md counts); anything else is refused with the resolved path, the reason, and the two expected forms. The advisor reviews ONLY these — no git diff scan. Use for both review types to pass the task's docs list.",
       },
       batchDoc: {
         type: "string",
@@ -111,36 +110,21 @@ export const advisorTool = {
       )
     }
 
-    // Design review: the review scope must be documentation files. Classification =
-    // resolveReviewDocPaths (2026-10-04 · #921 · the four-leg single authority in
-    // review-facts.mjs): legs ① session-root set / ② owning-project root set keep the
-    // legacy behavior verbatim; leg ③ probes candidate project roots for bare
-    // project-root-relative forms; leg ④ disambiguates by readable-file uniqueness
-    // (fail-closed — criterion=scope-doc-ambiguous when ≥2 candidates are readable).
+    // 设计评审：受理面 = 项目内现存 `.md`——相对形按会话项目根解析（越根 ⇒ 拒）· 绝对形照用 · 解析不出 ⇒ 拒并说清期望形；零试探、零歧义归一。
     if (reviewType === "design" && documents) {
-      const { resolved, invalid, ambiguous, candidates } = resolveReviewDocPaths(documents, agent.cwd)
-      if (invalid.length > 0 || ambiguous) {
+      const { invalid } = resolveReviewDocPaths(documents, agent.cwd)
+      if (invalid.length > 0) {
         if (ctx._toolCallId !== undefined) (agent._advisorRefusals ??= new Set()).add(ctx._toolCallId)
-        if (ambiguous) {
-          // 歧义拒（KD-4 独立判据——不混入 not-doc；列全部可读命中——fail-closed 不静默挑一）。
-          return withIdentityLine(
-            `Advisor: design review document "${ambiguous.doc}" matches several projects: ${ambiguous.hits.join(", ")}. Pass an absolute path to select one.`,
-            { type: reviewType, scope: scopeSummary(documents), round: "—", criterion: "scope-doc-ambiguous" },
-          )
+        // 拒发文案：既有稳定前缀逐字（行首）+ 逐文档「输入 → 解析后绝对路径 ∥ 拒因」+ 锚态（仅无项目根）+ 期望形两句。
+        const lines = invalid.map((v) => `- ${v.doc} → ${v.resolved ?? "(no base)"} ∥ reason=${v.reason}`)
+        if (invalid.some((v) => v.reason === "no-project-root")) {
+          const view = projectRootView(agent.cwd)
+          const where = view.state === "workspace" ? `workspace (${view.candidates.join(", ")})` : "none (no PROJECT-MANIFEST.json here or above)"
+          lines.push(`Session anchor is ${where} — no project root, so a relative path has no base to resolve against.`)
         }
-        // not-doc 拒：既有稳定前缀逐字（行首）+ 解析诊断尾（B 面根治——逐文档「解析后绝对
-        // 路径 ← 基面 = 会话 cwd」+ 候选项目根提示 cap 5 + 重试指引——纠正「误报因」缺陷）。
-        const invalidList = invalid.map((v) => v.doc).join(", ")
-        const attemptedList = invalid
-          .map((v) => `${v.doc} → ${v.attempted.length > 0 ? v.attempted.join(" | ") : normAbs(v.doc, agent.cwd)}`)
-          .join("; ")
-        const shown = candidates.slice(0, 5)
-        const more = candidates.length - shown.length
-        const candidateNote = shown.length > 0
-          ? `(candidates: ${shown.join(", ")}${more > 0 ? ` +${more} more` : ""}) — pass project-root-relative (e.g. ${shown[0]}/docs/…) or absolute paths`
-          : "— pass project-root-relative or absolute paths"
+        lines.push("Expected form 1 — project-root-relative: docs/core/design/ADVISOR-GUARDS.md (resolved against the session project root).", "Expected form 2 — absolute: D:\\repo\\docs\\core\\design\\ADVISOR-GUARDS.md (used as-is).")
         return withIdentityLine(
-          `Advisor: design review documents must be documentation files (per the project's conventions). Invalid: ${invalidList}\nDiagnosis: resolved against session cwd ${agent.cwd} → ${attemptedList}; no candidate project docRoot contains it ${candidateNote}.`,
+          `Advisor: design review documents must be documentation files (per the project's conventions). Invalid:\n${lines.join("\n")}`,
           { type: reviewType, scope: scopeSummary(documents), round: "—", criterion: "scope-not-doc" },
         )
       }

package/agent-tools/audit-block.mjs

@@ -3,74 +3,26 @@
  *
  * 自 `subagent-spawn.mjs` **逐字搬移**（D23-3 外提：spawn 档越 300 软线 + 块构造成纯函数
  * ⇒ 判据可直测；D23-4：块内文本零改——含块内自指词，整块搬移不改真值）。本档承载
- * spawn 级固定机制性指令的第二块（审计模板 + A2 任务书摘要 + touched 快照）：
+ * spawn 级固定机制性指令的第二块（审计模板 + 批档 §2 指向 + touched 快照）：
  * 装配侧只收集（`thincoder-core/agent-tools/subagent-spawn.mjs`），下发面 = system 固块
  * （`child._spawnSystemBlock` → 核 `prepareRun` 拼接——`thincoder-core/agent/setup.mjs`）。
+ *
+ * 2026-10-24（§6.22 KD-SC6）：任务书 = 批次档 §2（子代理自读）；A2 拼装摘要面（按 marker 抽取
+ * 设计档 / 文件清单 / 验收三段）已随 KD-SC6 删除——审计块只注入批档路径行 + §2 指向句（路径取
+ * `ctx.agent._batchDoc`）。理由：工程角色 `_engTaskInput` 只剩一行机械文本，摘要失去来源。
  */
 
-/**
- * AGENT-LOOP-SUBAGENT.md §6.7.6 D-TS5 (A2): mechanically summarize the parent spawn task book for the
- * audit spawn — the three audit-relevant elements VERBATIM (design doc paths /
- * affected-file list / acceptance criteria); verbose context/background is
- * dropped (the auditor can read the design docs themselves — they stay
- * available outside this input). Independence preserved: the input is
- * _engTaskInput (mechanically kept by the parent spawn) — never the
- * eng-coder's self-report. Sections are located by header marker, prioritizing
- * header lines (structured task books: "## 文件清单 …") and falling back to
- * inline markers (flat one-line task books); a section runs to the next header
- * of the SAME OR HIGHER level ("## 文件清单" survives a "### 修改" sub-header).
- * Marker not found → the section is reported as missing (never fabricate).
- */
-export function summarizeEngTaskBook(taskInput) {
-  if (!taskInput) return "(unavailable)"
-  // 五项拼装形下，`designPoints` 一段同时承载「设计档落点」与「受影响文件清单」——
-  // 前两段同取该块是有意的（语义都在其中）；代价 = 摘要里该块出现两次，不是抽取失败。
-  const SECTIONS = [
-    { name: "Design docs involved", markers: [/Docs? involved/i, /涉及文档/, /^Design points/i] },
-    { name: "Affected-file list", markers: [/Files? (?:list|to (?:modify|change)|modified)/i, /受影响文件/, /文件清单/, /涉及文件/, /^Design points/i] },
-    { name: "Acceptance criteria", markers: [/Acceptance(?: criteria)?/i, /验收标准/] },
-  ]
-  const lines = taskInput.split("\n")
-  const headerLevel = (l) => {
-    const m = l.match(/^\s*(#{1,6})\s/)
-    return m ? m[1].length : 0
-  }
-  const headerIdx = lines.map((l, i) => (headerLevel(l) > 0 ? i : -1)).filter((i) => i >= 0)
-  const boundsFor = (from, level) => {
-    for (const j of headerIdx) {
-      if (j > from && (level === 0 || headerLevel(lines[j]) <= level)) return j
-    }
-    return lines.length
-  }
-  const out = []
-  for (const { name, markers } of SECTIONS) {
-    let from = -1
-    let level = 0
-    for (const i of headerIdx) {
-      if (markers.some((m) => m.test(lines[i]))) { from = i; level = headerLevel(lines[i]); break }
-    }
-    if (from === -1) {
-      for (let i = 0; i < lines.length; i++) {
-        if (markers.some((m) => m.test(lines[i]))) { from = i; level = 0; break }
-      }
-    }
-    if (from === -1) { out.push(`${name}: (not found in the parent task book)`); continue }
-    const body = lines.slice(from, boundsFor(from, level)).join("\n").trim()
-    out.push(body || `${name}: (empty section)`)
-  }
-  return out.join("\n\n")
-}
-
 /**
  * 审计块（spawn 级固定 ⇒ system 固块——§6.26 分类裁定表「审计块」行）：纯函数——touched 快照
- * （`ctx.agent._touchedFiles`——机制面证据，非 eng-coder 自述）+ A2 任务书摘要
- * （`summarizeEngTaskBook(ctx.agent._engTaskInput)`）+ 指令 / 范围 / 零 git 权威 / 预算 /
- * 报告格式五段模板**逐字**。零副作用（只读 ctx）；块内文本与搬移前逐字节一致。
- * @param {{ agent?: { _touchedFiles?: string[], _engTaskInput?: string } }} ctx
+ * （`ctx.agent._touchedFiles`——机制面证据，非 eng-coder 自述）+ 批档路径行与 §2 指向句
+ * （`ctx.agent._batchDoc`——任务书由审计子代理自读 §2）+ 指令 / 范围 / 零 git 权威 / 预算 /
+ * 报告格式五段模板**逐字**。零副作用（只读 ctx）。
+ * @param {{ agent?: { _touchedFiles?: string[], _batchDoc?: string } }} ctx
  * @returns {string} 块文本（不含与其它块之间的分隔符——分隔由装配侧 `join("\n\n")` 施加）
  */
 export function buildAuditBlock(ctx) {
   const touched = (ctx.agent._touchedFiles ?? []).map((f) => `- ${f}`).join("\n") || "- (none yet)"
+  const batchDoc = typeof ctx.agent?._batchDoc === "string" ? ctx.agent._batchDoc : "(unavailable)"
   return `[Audit scope — mechanical context, independent of the eng-coder's self-report:]\n` +
     // §6.7.6 D-TS4 A1：审计指令模板（四类偏差 + 范围限制 + 校验清单格式）——审计语义
     // 不再靠模型自悟；范围限制是 §6.7.4 D-AG3 声明（下方 Zero-git scope authority）
@@ -85,9 +37,11 @@ export function buildAuditBlock(ctx) {
     `workspace changes not listed there are unrelated to this delivery and are NOT grounds for an out-of-list finding.\n` +
     `Scope discipline (F-TS6 A1): read ONLY the audited files and the design-doc sections relevant to this delivery — do NOT re-read whole documents.\n` +
     `Every deviation item MUST be fieldized: file:line + design reference (doc path + section/AC id) + severity + evidence (quoted code or doc text).\n` +
-    // §6.7.6 D-TS5 A2：任务书从全量 verbatim 改机械摘要块（三要素逐字——排除冗长上下文）。
-    `[Parent spawn task book — mechanical summary: design docs + affected-file list + acceptance criteria verbatim; verbose context/background dropped — the design docs are still available for reading outside this input:]\n` +
-    `${summarizeEngTaskBook(ctx.agent._engTaskInput)}\n` +
+    // §6.22 KD-SC6：任务书 = 批次档 §2（审计子代理自读）——审计块注入批档路径 + §2 指向句
+    // （A2 拼装摘要面已删：工程角色 _engTaskInput = 一行机械文本，摘要无来源）。审计子代理本身是
+    // explore（任务书 = 父侧五项）——故指向句限定为「**交付**的任务书 = §2」，不冒称本 child 的唯一通道。
+    `Batch record (batchDoc): ${batchDoc}\n` +
+    `Delivery task book: §2 of the batch record at ${batchDoc} — read it before judging the delivery; it is the criterion source for this audit.\n` +
     `Files actually touched by the eng-coder (mechanical union — audit these against the file list):\n${touched}\n` +
     // §18.5 D-AG3（2026-09-04）：审计零 git 范围权威声明——本审计任务零 git（不注入
     // git 上下文——§6.7.4 全角色零 git）；_touchedFiles 为审计范围；工作区未列于
@@ -95,7 +49,7 @@ export function buildAuditBlock(ctx) {
     "Zero-git scope authority: this audit task receives NO git context — nothing is injected. " +
     "The evidence base is the design documents, the current disk state (read/glob/grep), and the _touchedFiles list above. " +
     "Workspace changes NOT listed in _touchedFiles are unrelated to this delivery — they are NOT grounds for an out-of-file-list finding." +
-    // §6.7.6 D-A1.2：审计预算句——A1 指令模板 + A2 摘要块之后、A3 报告模板之前（定序——评审 #7）。
+    // §6.7.6 D-A1.2：审计预算句——A1 指令模板 + 批档指向块之后、A3 报告模板之前（定序——评审 #7）。
     // 逐字设计锚（D-A1.2 代码块）：只读该读的——10 轮机械预算——超时报 PROBLEM 下结论。
     // 前导 \n 与 A3 同款块分隔约定（上一句 Zero-git 句末无换行——不触碰既有句）。
     `\n[Audit budget — mechanical]: read ONLY the touched files listed above and the design-doc sections the parent task book names (affected-files table, acceptance criteria, status line). Do NOT read whole documents. Budget = 10 tool rounds max — if you cannot conclude within it, report PROBLEM (inconclusive) rather than continuing to explore.\n` +