@thincoder/core 0.9.2 → 0.9.3

package/agent-tools/read-history.mjs

@@ -1,9 +1,10 @@
 /**
- * agent-tools/read-history.mjs — read_history tool (SESSION.md §6.9 + §6.13 R19 cross-session).
+ * agent-tools/read-history.mjs — read_history tool (SESSION.md §6.9 + §6.13 R19 cross-session + §6.19).
  *
  * Query message history — THIS session by default, any session on disk with `path`
  * (SESSION.md §6.13 R19): an explicit session file path deep-queries that file's
- * history line; "cwd:<dir>" discovers the sessions stored for that directory.
+ * history line; "cwd:<dir>" discovers the sessions stored for that directory; "all"
+ * searches every indexed session across projects (§6.19 D-SE47).
  *
  * Default (no path) — THIS session's full human-readable record (record store when bound
  * — disk-backed, SESSION.md §6.14; agent._fullHistory memory fallback otherwise:
@@ -19,22 +20,25 @@
  * Returns a JSON array in chronological order. Every message without ts comes
  * back as ts:null and can never match a time window (legacy sessions). Content
  * is truncated to ~500 chars with an explicit marker — full text lives in the
- * session file. assistant tool_calls are summarized to a name list (arguments
- * never expanded).
+ * session file. assistant tool_calls come back as [{name, arguments}] with the
+ * stored argument string capped at 300 chars (matches the stored precision).
  *
- * Cross-session (SESSION.md §6.13 D-R19a): path = a session file path (absolute, or
- * relative to the project cwd) → read that file's history line and apply the SAME
- * filter surface; path = "cwd:<dir>" → list every slot stored for that directory
- * (slot number + full file path + title/message count/updatedAt — no dead-slot
- * filtering, v1 decision). Single-file retrieval is guarded by a line-scan cap
- * (READ_HISTORY_SCAN_MAX — an oversized file is refused before it is read whole)
- * plus a message-count cap (READ_HISTORY_MAX_MESSAGES = 50,000 — L24 双保险第二道).
+ * Cross-session (SESSION.md §6.13 D-R19a + §6.19 D-SE47 — 索引优先 + 主存回落):
+ * path = a session file path (absolute, or relative to the project cwd) → when the derived
+ * session index covers that session the query runs as SQL (no line-scan / message-count
+ * guards ⇒ oversized sessions answer); otherwise the pre-existing JSON path with BOTH
+ * guards, verbatim (not a sessions-tree file / index unavailable / no such row). path =
+ * "cwd:<dir>" → list every slot stored for that directory (slot number + full file path +
+ * title/message count/updatedAt — no dead-slot filtering, v1 decision). path = "all" →
+ * cross-session search over every INDEXED session (keyword = FTS words / phrases; rows carry
+ * session.file as the follow-up anchor).
+ * The index face enters load-time via dynamic import (W8 contract②: node:sqlite must never
+ * join the assembly-time static closure) — a host without node:sqlite falls back to the file
+ * path silently, and an index write failure never endangers the session files (zero authority).
  *
  * readonly: true — planMode pass / no permission ask. Registered depth-0 only:
  * subagents get their own throwaway history, so querying "the session" from a
  * child would be semantically confusing (SESSION.md §6.9 refinement 1 + §6.13 T-R19.4).
- * §6.13 R19 extension mirrored per SESSION.md §6.13 — double-end isomorphic, no
- * cross-end byte test (thincoder-vscode/src/agent-tools/read-history.mjs).
  */
 
 import { openSync, readSync, closeSync, readFileSync, existsSync, statSync } from "node:fs"
@@ -44,7 +48,10 @@ import { listSlots, slotPath } from "../session-slots.mjs"
 const DEFAULT_LIMIT = 50
 const MAX_LIMIT = 200
 const CONTENT_CAP = 500
+const ARG_CAP = 300
 const VALID_ROLES = new Set(["user", "assistant", "tool"])
+/** 跨会话检索字面量（§6.19 D-SE47——全部**已索引**会话）。 */
+const ALL_PATH = "all"
 
 /** 单槽检索行扫护栏（SESSION.md §6.13 D-R19a——评审 #3 定稿：超限不再读全文，返回定稿错误文案）。 */
 export const READ_HISTORY_SCAN_MAX = 200_000
@@ -89,6 +96,19 @@ function toolCallName(tc) {
   return tc?.function?.name ?? tc?.name ?? ""
 }
 
+/** Assistant tool_calls output shape: [{name, arguments}] — `arguments` = the STORED string
+ *  (SESSION.md §6.19 D-SE47: 上限 300 字符 = 存储面同值——不虚构超出存储的精度). */
+function toolCallEntries(tcs) {
+  return tcs.map((tc) => {
+    const name = toolCallName(tc)
+    const args = typeof tc?.function?.arguments === "string" ? tc.function.arguments
+      : typeof tc?.arguments === "string" ? tc.arguments : null
+    const out = { name }
+    if (args !== null) out.arguments = args.length <= ARG_CAP ? args : args.slice(0, ARG_CAP) + "…"
+    return out
+  }).filter((t) => t.name)
+}
+
 /** Parse a ts window boundary (epoch ms number; numeric strings tolerated). Returns the number or an error string. */
 function parseTs(value, label) {
   if (value === undefined || value === null) return null
@@ -107,7 +127,8 @@ function toEntry(m) {
   if (m.tool_call_id !== undefined) entry.tool_call_id = m.tool_call_id
   entry.content = truncateContent(messageText(m))
   if (Array.isArray(m.tool_calls) && m.tool_calls.length > 0) {
-    entry.tool_calls = m.tool_calls.map(toolCallName).filter(Boolean)
+    const calls = toolCallEntries(m.tool_calls)
+    if (calls.length > 0) entry.tool_calls = calls
   }
   return entry
 }
@@ -168,7 +189,7 @@ function exceedsScanMax(file) {
   }
 }
 
-/** Cross-session deep query: one session file, same filter surface (§6.13 D-R19a). */
+/** 跨会话深查（回落面）：单个槽文件，同 filter 面（§6.13 D-R19a——两道护栏逐字保留）。 */
 function querySessionFile(pathArg, { role, kwRe, tool, since, until, direction, limit }, baseCwd) {
   const file = isAbsolute(pathArg) ? pathArg : resolve(baseCwd ?? process.cwd(), pathArg)
   if (!existsSync(file)) return `Error: session file not found: ${file}`
@@ -219,6 +240,74 @@ function discoverCwd(raw, baseCwd) {
   return `Session slots for cwd: ${dir} (newest first):\n${lines.join("\n")}`
 }
 
+// ── 索引面（§6.19 D-SE47：索引优先 + 主存回落；动态装载——W8 契约②）─────────────────
+
+/** 索引面模块（动态 import：node:sqlite 不进装配期静态闭包）；宿主不具备（无 node:sqlite / 装配失败）⇒ null。 */
+async function loadIndexFace() {
+  try {
+    const [idx, query, build] = await Promise.all([
+      import("../session-index.mjs"),
+      import("../session-index-query.mjs"),
+      import("../session-index-build.mjs"),
+    ])
+    return { idx, query, build }
+  } catch { return null }
+}
+
+/** 索引行 → 输出条目（与 JSON 面 `toEntry` 同形——两条路径结果逐条相等，T-11 等价面）。 */
+function indexEntry(r) {
+  const entry = { ts: typeof r.ts === "number" ? r.ts : null, role: r.role ?? null }
+  if (r.name !== undefined && r.name !== null) entry.name = r.name
+  if (r.tool_call_id !== undefined && r.tool_call_id !== null) entry.tool_call_id = r.tool_call_id
+  entry.content = truncateContent(r.content ?? "")
+  if (Array.isArray(r.tool_calls) && r.tool_calls.length > 0) entry.tool_calls = r.tool_calls
+  return entry
+}
+
+/** 单会话：索引命中 ⇒ SQL 检索结果；未命中（非 sessions 树 / 库不可用 / 库内无此会话）⇒ `null` = 回落。
+ *  懒保证射程 = 有段档（`src=sidecar`——`session-index-build` 内判；`src=json` 档免 ensure）。 */
+async function queryIndexedSession(file, filters) {
+  const face = await loadIndexFace()
+  if (!face) return null
+  let db = null
+  try {
+    db = face.idx.openSessionIndex()
+    if (!db) return null
+    try { face.build.ensureSessionIndexed(db, file) } catch { /* 懒保证失败 ⇒ 用现有行判命中（回落路径兜住） */ }
+    const rows = face.query.querySessionRows(db, file, filters)
+    return rows === null ? null : JSON.stringify(rows.map(indexEntry))
+  } catch { return null } finally { if (db) db.close() }
+}
+
+/** 当前会话槽文件（`all` 面懒保证目标——触发点①：`SESSION.md` §6.19「查询前对目标会话（`path=<文件>`）/
+ *  当前会话（`all`）`ensure`」；射程仍 = 有段档 ⇒ `src=json` 档零动作；无绑定 / 无槽 ⇒ null）。 */
+function currentSessionFile(ctx) {
+  const cwd = ctx.agent?.cwd
+  const slot = ctx.agent?._slot
+  if (!cwd || !Number.isInteger(slot) || slot < 1) return null
+  try { return slotPath(cwd, slot) } catch { return null }
+}
+
+/** 跨会话检索（`path:"all"`——全部已索引会话）：行携 `session.file` 回查锚 + `idx`。 */
+async function queryAllSessions(filters, current = null) {
+  const face = await loadIndexFace()
+  if (!face) return "Error: session index unavailable — this host has no node:sqlite; query one session with path=<file> instead"
+  let db = null
+  try {
+    db = face.idx.openSessionIndex()
+    if (!db) return "Error: session index unavailable — the derived index could not be opened; query one session with path=<file> instead"
+    if (current !== null) { try { face.build.ensureSessionIndexed(db, current) } catch { /* 懒保证失败 ⇒ 用现有行（回落面零影响） */ } }
+    const rows = face.query.queryAllRows(db, filters)
+    return JSON.stringify(rows.map((r) => ({
+      session: { slot: r.slot, cwd: r.cwd ?? null, file: r.file, title: r.title ?? null },
+      idx: r.idx,
+      ...indexEntry(r),
+    })))
+  } catch (e) {
+    return `Error: session index query failed — ${e.message}`
+  } finally { if (db) db.close() }
+}
+
 export const readHistoryTool = {
   name: "read_history",
   description:
@@ -228,27 +317,32 @@ export const readHistoryTool = {
     "Filters combine with AND: role / keyword (case-insensitive substring of message text) / " +
     "tool (tool result messages by name AND the assistant messages that declared the call — pair with tool_call_id / ts for timing) / " +
     "since-until (epoch ms time window; only messages with ts can match) / limit (default 50, clamped to 200) / direction (which end of the matches to take). " +
-    "Returns a JSON array in chronological order: [{ts, role, name?, tool_call_id?, content (≈500 chars, truncated marker), tool_calls (names only)}]. " +
+    "Returns a JSON array in chronological order: [{ts, role, name?, tool_call_id?, content (≈500 chars, truncated marker), tool_calls ([{name, arguments}] — arguments capped at 300 chars)}]. " +
     "Messages without ts return ts:null. Content is truncated — the full text is in the session file. " +
     "Cross-session (path, optional): a session file path deep-queries THAT session's history with the same filters " +
-    "(relative paths resolve against the project cwd); \"cwd:<dir>\" lists every session slot stored for that directory — " +
-    "one line per slot: slot number + full session file path + title + message count + updatedAt; copy a listed file path into path= to deep-query it. " +
-    "A session file over 50,000 messages or 200,000 lines is refused (\"session too large\") instead of being read whole.\n" +
+    "(relative paths resolve against the project cwd) — answered from the derived session index when it covers that session, " +
+    "otherwise from the session file itself (a file over 50,000 messages or 200,000 lines is refused as \"session too large\"). " +
+    "\"cwd:<dir>\" lists every session slot stored for that directory — one line per slot: slot number + full session file path + " +
+    "title + message count + updatedAt; copy a listed file path into path= to deep-query it. " +
+    "\"all\" searches EVERY INDEXED session at once (cross-project; keyword = FTS words / phrases; each row carries session.file for the follow-up deep query) — " +
+    "`all` covers the derived index only: sessions never indexed yet are invisible there (query them with path=<file>, or index everything first with the CLI `thincoder session index --rebuild`).\n" +
     SEARCH_FAMILY_GUIDE,
   parameters: {
     type: "object",
     properties: {
       role: { type: "string", enum: ["user", "assistant", "tool"], description: "Only messages with this role." },
-      keyword: { type: "string", description: "Case-insensitive substring of the message text (multimodal messages match on their text parts)." },
+      keyword: { type: "string", description: "Case-insensitive substring of the message text (multimodal messages match on their text parts); with path=\"all\" it is matched as FTS words / phrases over the indexed text." },
       tool: { type: "string", description: "Only messages for this tool: role=tool messages with name=tool, plus assistant messages that declared a call to it." },
       since: { type: "integer", description: "Earliest ts to match, epoch ms, INCLUSIVE. Messages without ts never match a time window." },
       until: { type: "integer", description: "Latest ts to match, epoch ms, INCLUSIVE. since > until yields an empty result." },
       limit: { type: "integer", description: "Maximum messages to return (default 50; larger values are clamped to 200)." },
       direction: { type: "string", enum: ["oldest", "newest"], description: "Take the limit window from the oldest or newest end of the matched set (default newest)." },
-      path: { type: "string", description: "Optional — query another session instead of this one: a session file path (as listed by a \"cwd:<dir>\" call) deep-queries that session; \"cwd:<dir>\" lists that directory's session slots (slot number + full file path + title + message count + updatedAt)." },
+      path: { type: "string", description: "Optional — query another session instead of this one: a session file path (as listed by a \"cwd:<dir>\" call) deep-queries that session; \"cwd:<dir>\" lists that directory's session slots (slot number + full file path + title + message count + updatedAt); \"all\" searches every indexed session across projects (FTS words / phrases; rows carry session.file)." },
     },
   },
   readonly: true,
+  // 返回类型 = `string`（本会话缺省 / `cwd:` 发现面——与修前逐字同形）∥ `Promise<string>`（索引面：
+  // `path=<文件>` 索引优先 / `path:"all"`——需动态装载核索引面）。装配面一律 `await`（dispatch.js 同款）。
   execute(args, ctx) {
     const a = args ?? {}
     if (a.path !== undefined && (typeof a.path !== "string" || a.path.trim().length === 0)) {
@@ -284,9 +378,13 @@ export const readHistoryTool = {
 
     const pathArg = typeof a.path === "string" && a.path.trim().length > 0 ? a.path.trim() : null
     if (pathArg !== null) {
-      return pathArg.startsWith("cwd:")
-        ? discoverCwd(pathArg.slice("cwd:".length), baseCwd)
-        : querySessionFile(pathArg, { role, kwRe, tool, since, until, direction, limit }, baseCwd)
+      if (pathArg.startsWith("cwd:")) return discoverCwd(pathArg.slice("cwd:".length), baseCwd)
+      const filters = { keyword, role, tool, since, until, limit, direction }
+      if (pathArg === ALL_PATH) return queryAllSessions(filters, currentSessionFile(ctx))
+      const file = isAbsolute(pathArg) ? pathArg : resolve(baseCwd, pathArg)
+      // 索引优先（命中 ⇒ SQL 检索）；未命中 ⇒ 既有 JSON 路径 + 两道护栏（逐字保留——回落面）
+      return queryIndexedSession(file, filters)
+        .then((indexed) => (indexed !== null ? indexed : querySessionFile(pathArg, { role, kwRe, tool, since, until, direction, limit }, baseCwd)))
     }
 
     // 本会话（无 path）：绑定记录存储 → 方向流式迭代（磁盘为准——全量可见、内存窗口外

package/agent-tools/settings.mjs

@@ -18,7 +18,8 @@ const SENSITIVE_SEGMENT = /(^|[._-])(api[_-]?key|key|token|secret|password|autho
 const SENSITIVE_FAMILY = /(^|[._-])(headers|env)($|[._-])/i
 const MASKED = "••••（masked）"
 
-function isSensitiveKey(path) {
+/** #58（hygiene-sweep 批）：谓词/标记导出——CLI `/mcp` 表单现值脱敏同源（`cmd-mcp-form.mjs`）。 */
+export function isSensitiveKey(path) {
   return SENSITIVE_SEGMENT.test(path) || SENSITIVE_FAMILY.test(path)
 }
 
@@ -184,7 +185,8 @@ function flatten(obj, prefix = "", out = []) {
 
 /** 行格式化：`key = value (type)`——敏感键值遮罩 */
 function formatLine({ path, value }) {
-  const shown = isSensitiveKey(path) ? MASKED : value
+  // #58（hygiene-sweep 批）：对象值渲染收正（原 `[object Object]`——JSON 化；敏感键仍恒遮）
+  const shown = isSensitiveKey(path) ? MASKED : value !== null && typeof value === "object" ? JSON.stringify(value) : value
   return `${path} = ${shown} (${Array.isArray(value) ? "array" : typeof value})`
 }
 

package/agent-tools/subagent-async.mjs

@@ -43,7 +43,7 @@ export function enqueueAsk(owner, key, ask) {
   return chain
 }
 
-// Async pool limits per role domain (AGENT-LOOP-SUBAGENT.md §6.10 — R14, 2026-09-06):
+// Async pool limits per role domain (AGENT-LOOP-ASYNC-POOL.md §6.10 — R14, 2026-09-06):
 // the old single cap (ASYNC_SUBAGENT_LIMIT = 4, §15 D-A4) evolved into two
 // independent pools — eng-coder 4 / other roles 4 (user ruling "eng-coder 四路，
 // 其他 4 路") — a full engCoder pool never blocks an explore spawn and vice versa
@@ -57,8 +57,8 @@ export const ASYNC_POOL_LIMITS = { engCoder: 4, other: 4 }
 
 /**
  * Role → pool domain (single source of truth — §11.1 修正 #8): the CLI role
- * enum/assembly table is subagent.mjs's ROLES = { explore, plan, coder, eng-coder }
- * (mode-filtered: normal → explore/plan/coder, engineering → explore/plan/eng-coder).
+ * whitelist is subagent.mjs's ROLES = { explore, plan, coder, eng-coder, eng-designer }
+ * (mode-filtered: normal → explore/plan/coder, engineering → explore/eng-designer/eng-coder).
  * eng-coder → engCoder pool; every other role (including unknown roles — fail-safe)
  * → other pool. escalate spawns its expert internally (role "coder" — other pool).
  */

package/agent-tools/subagent-spawn.mjs

@@ -1,11 +1,14 @@
 /**
  * subagent-spawn.mjs — spawn 路径装配（2026-09-05 module-split：subagent.mjs 726
- * > 500 硬限——spawn 前置 helpers（summarizeEngTaskBook/effectiveSubagentModel/
- * resolveDesignSlot）+ §20 调度参数准入（prepareScheduling）+ child 装配
+ * > 500 硬限——spawn 前置 helpers（effectiveSubagentModel/resolveDesignSlot——审计块
+ * 构造器 2026-09-22 起另立 ./audit-block.mjs）+ §20 调度参数准入（prepareScheduling）+ child 装配
  * （buildSpawnChild）verbatim 迁入（仅闭包变量参数化），语义零变；executeAsyncSpawn
  * 另在 subagent-run.mjs。subagent.mjs execute 经本文件 import 调用。
  * 2026-09-07：executeConsumeDesignAction 消费执行器（token 链终消费制——与 spawn 侧
  * slot 族同域——ENGINEERING-MODE.md §2.6 F1——removeDesignTokenSlot 自 token-ttl.mjs）。
+ * 2026-09-22（台账 #23 · AGENT-LOOP-SUBAGENT.md §6.26）：审计块构造器（summarizeEngTaskBook
+ * + buildAuditBlock）外提 `./audit-block.mjs`；spawn 级固定机制性指令改走 system 固块
+ * （`child._spawnSystemBlock` 单点绑定——消费点 = 核 `prepareRun`），`input` 只留任务书。
  */
 
 import { resolve } from "node:path"
@@ -27,57 +30,9 @@ import {
 // M5 F2（ENGINEERING-MODE-V2-MODULE-DELEGATION §2.3）：任务书六强制字段校验本体落
 // spawn-gates.mjs（纯谓词零依赖）——本处只加 import 调用。
 import { validateTaskBookFields } from "./spawn-gates.mjs"
-
-/**
- * §18.7 D-TS5 (A2): mechanically summarize the parent spawn task book for the
- * audit spawn — the three audit-relevant elements VERBATIM (design doc paths /
- * affected-file list / acceptance criteria); verbose context/background is
- * dropped (the auditor can read the design docs themselves — they stay
- * available outside this input). Independence preserved: the input is
- * _engTaskInput (mechanically kept by the parent spawn) — never the
- * eng-coder's self-report. Sections are located by header marker, prioritizing
- * header lines (structured task books: "## 文件清单 …") and falling back to
- * inline markers (flat one-line task books); a section runs to the next header
- * of the SAME OR HIGHER level ("## 文件清单" survives a "### 修改" sub-header).
- * Marker not found → the section is reported as missing (never fabricate).
- */
-function summarizeEngTaskBook(taskInput) {
-  if (!taskInput) return "(unavailable)"
-  const SECTIONS = [
-    { name: "Design docs involved", markers: [/Docs? involved/i, /涉及文档/] },
-    { name: "Affected-file list", markers: [/Files? (?:list|to (?:modify|change)|modified)/i, /受影响文件/, /文件清单/, /涉及文件/] },
-    { name: "Acceptance criteria", markers: [/Acceptance(?: criteria)?/i, /验收标准/] },
-  ]
-  const lines = taskInput.split("\n")
-  const headerLevel = (l) => {
-    const m = l.match(/^\s*(#{1,6})\s/)
-    return m ? m[1].length : 0
-  }
-  const headerIdx = lines.map((l, i) => (headerLevel(l) > 0 ? i : -1)).filter((i) => i >= 0)
-  const boundsFor = (from, level) => {
-    for (const j of headerIdx) {
-      if (j > from && (level === 0 || headerLevel(lines[j]) <= level)) return j
-    }
-    return lines.length
-  }
-  const out = []
-  for (const { name, markers } of SECTIONS) {
-    let from = -1
-    let level = 0
-    for (const i of headerIdx) {
-      if (markers.some((m) => m.test(lines[i]))) { from = i; level = headerLevel(lines[i]); break }
-    }
-    if (from === -1) {
-      for (let i = 0; i < lines.length; i++) {
-        if (markers.some((m) => m.test(lines[i]))) { from = i; level = 0; break }
-      }
-    }
-    if (from === -1) { out.push(`${name}: (not found in the parent task book)`); continue }
-    const body = lines.slice(from, boundsFor(from, level)).join("\n").trim()
-    out.push(body || `${name}: (empty section)`)
-  }
-  return out.join("\n\n")
-}
+// 台账 #23（AGENT-LOOP-SUBAGENT.md §6.26 · D23-3）：审计块构造器外提（`summarizeEngTaskBook`
+// + `buildAuditBlock` 纯函数）——spawn 档只做「收集 + 绑定」；块文本逐字搬移（D23-4）。
+import { buildAuditBlock } from "./audit-block.mjs"
 
 /**
  * Effective subagent model override for a role (CLI parity shared with VS Code):
@@ -238,8 +193,8 @@ export function prepareScheduling(parent, filesRaw, dependsRaw, wantAsync) {
 /**
  * §20 准入通过后的 child 装配（2026-09-05 module-split——自 execute 参数化提取，
  * 原 318-488 段 verbatim——语义零变）。副作用保留：relay 取号（sync 支 allocRelay——
- * `[model]` 出生声明归 SYNC-CANCEL 单点，#133）/ 子代理 _logId / _engTaskInput 携带
- * 全部在此发生。返回阻塞/异步两路径共用的
+ * `[model]` 出生声明归 SYNC-CANCEL 单点，#133）/ 子代理 _logId / _engTaskInput 携带 /
+ * _spawnSystemBlock 绑定（台账 #23——spawn 固块单点）全部在此发生。返回阻塞/异步两路径共用的
  * { child, input, childOpts, childRunOpts, relayPrefix, childProvider }。
  */
 export function buildSpawnChild(parent, ctx, args, role, wantAsync, files, dependsOn, engAuditAttempt) {
@@ -386,60 +341,33 @@ export function buildSpawnChild(parent, ctx, args, role, wantAsync, files, depen
   // git 只读变体亦随裁定废弃——D-AG5）。顶层主 agent 注入保留（§3 prepareRun——
   // setup.mjs depth===0——D-AG7 范围边界）。
   let input = args.context ? `Context:\n${args.context}\n\nTask:\n${args.task}` : args.task
-  // §2.11 第 1 点（FR16 载体 + FR17 铁律 #5 的机械面）：批次档**绝对路径**随任务输入
-  // 下发给工程角色（eng-coder 实现 / eng-designer 写稿）——追加一行，任务文本本身不动
-  // （批次档 §2 才是任务书本体；本行让子代理"拿到本档路径"）。行文不含
-  // summarizeEngTaskBook 的三组段 marker（Docs involved / Files list / Acceptance
-  // criteria）——段匹配不受影响。仅工程角色注入。
-  if (engineeringRole) input += `\n\nBatch record (batchDoc): ${batchDocAbs}`
+  // 台账 #23（AGENT-LOOP-SUBAGENT.md §6.26 · D23-1）：**spawn 级固定机制性指令改走 system 固块**——
+  // 两处（批次档路径行 + 审计模板块）原随 user 首条下发，压缩把首条并入摘要即丢（长任务中后期
+  // 既看不到批次档路径、也看不到审计模板 ⇒ 过度勘察的真病根）；固块值在 child 生命周期内恒定
+  // ⇒ run 内 system 前缀逐字节稳定（前缀缓存不破），且不在 `agent.history` 内 ⇒ 压缩结构上吞不掉。
+  // 收集序 = 原拼接序（批次档行 → 审计块）；空数组 ⇒ 不绑定（depth-0 / explore / plan / consult
+  // 的 system 逐字节同改前——§6.26 缓存契约兼容证明）。
+  const spawnBlocks = []
+  // §2.11 第 1 点（FR16 载体 + FR17 铁律 #5 的机械面）：批次档**绝对路径**下发给工程角色
+  // （eng-coder 实现 / eng-designer 写稿）——任务文本本身不动（批次档 §2 才是任务书本体；
+  // 本行让子代理"拿到本档路径"）。行文不含 summarizeEngTaskBook 的三组段 marker
+  // （Docs involved / Files list / Acceptance criteria）——段匹配不受影响。仅工程角色注入。
+  if (engineeringRole) spawnBlocks.push(`Batch record (batchDoc): ${batchDocAbs}`)
   // §18 D-E2 ③ (round4 #4, T-E13/T-E15): an eng-coder audit spawn's task book is
   // the eng-coder's OWN spawn task — mechanically kept as _engTaskInput by the
   // parent spawn and injected as the D-TS5 A2 mechanical summary (design docs /
   // affected-file list / acceptance criteria verbatim, verbose context dropped)
   // — ∪ the mechanically tracked _touchedFiles — NEVER the eng-coder's
   // self-written list: a self-report could omit exactly the out-of-scope file
-  // the audit must catch.
-  if (engAuditAttempt !== null) {
-    const touched = (ctx.agent._touchedFiles ?? []).map((f) => `- ${f}`).join("\n") || "- (none yet)"
-    input += `\n\n[Audit scope — mechanical context, independent of the eng-coder's self-report:]\n` +
-      // §18.7 D-TS4 A1：审计指令模板（四类偏差 + 范围限制 + 校验清单格式）——审计语义
-      // 不再靠模型自悟；范围限制是 §18.5 D-AG3 声明（下方 Zero-git scope authority）
-      // 的同源一句指注，不重复声明。
-      `[Audit instructions — mechanical template:]\n` +
-      `You are auditing an eng-coder delivery against its approved design — audit for EXACTLY these four deviation categories:\n` +
-      `- PARTIAL: an acceptance criterion implemented partially or not at all;\n` +
-      `- SILENT-SIMPLIFICATION: a "simpler approximation" of a specified behavior substituted for the spec;\n` +
-      `- DOC-DRIFT: code changed without the owning design-doc section (module map / affected-files table) updated in the same delivery;\n` +
-      `- OUT-OF-LIST: changes outside the approved file list.\n` +
-      `Audit scope = _touchedFiles above UNION the files confirmed by the parent task book (single source — the Zero-git scope authority note below; NOT a second copy): ` +
-      `workspace changes not listed there are unrelated to this delivery and are NOT grounds for an out-of-list finding.\n` +
-      `Scope discipline (F-TS6 A1): read ONLY the audited files and the design-doc sections relevant to this delivery — do NOT re-read whole documents.\n` +
-      `Every deviation item MUST be fieldized: file:line + design reference (doc path + section/AC id) + severity + evidence (quoted code or doc text).\n` +
-      // §18.7 D-TS5 A2：任务书从全量 verbatim 改机械摘要块（三要素逐字——排除冗长上下文）。
-      `[Parent spawn task book — mechanical summary: design docs + affected-file list + acceptance criteria verbatim; verbose context/background dropped — the design docs are still available for reading outside this input:]\n` +
-      `${summarizeEngTaskBook(ctx.agent._engTaskInput)}\n` +
-      `Files actually touched by the eng-coder (mechanical union — audit these against the file list):\n${touched}\n` +
-      // §18.5 D-AG3（2026-09-04）：审计零 git 范围权威声明——本审计任务零 git（不注入
-      // git 上下文——§18.5 全角色零 git）；_touchedFiles 为审计范围；工作区未列于
-      // _touchedFiles 的改动与本任务无关，不作超清单依据（VS Code auditTaskBook 同款措辞）。
-      "Zero-git scope authority: this audit task receives NO git context — nothing is injected. " +
-      "The evidence base is the design documents, the current disk state (read/glob/grep), and the _touchedFiles list above. " +
-      "Workspace changes NOT listed in _touchedFiles are unrelated to this delivery — they are NOT grounds for an out-of-file-list finding." +
-      // §18.13 D-A1.2：审计预算句——A1 指令模板 + A2 摘要块之后、A3 报告模板之前（定序——评审 #7）。
-      // 逐字设计锚（D-A1.2 代码块）：只读该读的——10 轮机械预算——超时报 PROBLEM 下结论。
-      // 前导 \n 与 A3 同款块分隔约定（上一句 Zero-git 句末无换行——不触碰既有句）。
-      `\n[Audit budget — mechanical]: read ONLY the touched files listed above and the design-doc sections the parent task book names (affected-files table, acceptance criteria, status line). Do NOT read whole documents. Budget = 10 tool rounds max — if you cannot conclude within it, report PROBLEM (inconclusive) rather than continuing to explore.\n` +
-      // §18.7 D-TS6 A3：审计输出报告格式模板（三态——字段化行——不让模型自由发挥）。
-      `\n[Audit report format — mechanical template:]\n` +
-      `Report EXACTLY one of three states:\n` +
-      `- CLEAN — no deviation across the four categories: reply the line "Four deviation categories: none found." (四类偏差均未发现);\n` +
-      `- DEVIATIONS — one row per deviation, every row fieldized: | category | file:line | design reference | severity | evidence |;\n` +
-      `- PROBLEM — the audit itself could not run / inconclusive: state what blocked it.\n`
-  }
+  // the audit must catch. 块文本（含模板逐字）住 `./audit-block.mjs`（D23-3 外提）。
+  if (engAuditAttempt !== null) spawnBlocks.push(buildAuditBlock(ctx))
   // The child's own task input rides the child object: an eng-coder's audit
   // spawns reuse it as the task-book SOURCE — injected as the D-TS5 A2
-  // mechanical summary, not verbatim (see above).
+  // mechanical summary, not verbatim (see above). D23-6：语义 = **纯任务书**（不含固块）。
   if (role === "eng-coder") child._engTaskInput = input
+  // spawn 固块单点绑定（sync / async 同点——buildSpawnChild 唯一调用点）：此后只读 ⇒ 同一
+  // child 的任意 run（resume 续跑 / 报告追问重跑）逐字节恒定；消费点 = 核 `prepareRun`。
+  if (spawnBlocks.length > 0) child._spawnSystemBlock = spawnBlocks.join("\n\n")
 
   // Relay content/reasoning/tool/output to the parent TUI via the unified spawn-child
   // pipeline (AGENT-LOOP.md §7.2 D3). Prefix includes a unique id: parallel child agents
@@ -466,7 +394,7 @@ export function buildSpawnChild(parent, ctx, args, role, wantAsync, files, depen
   // LOGGING（LOGGING.md）：子代理内部事件（子内 llm:*/tool:*）以 childId 归属——
   // agent._logId 随 runAgent 的 logCtx 透出（主文件单文件全记、按 childId grep）。
   child._logId = relayPrefix.slice(0, -1)
-  // SUBAGENT-UPSTREAM-CHANNEL（AGENT-LOOP-SUBAGENT.md §6.27.4 W1——spawn 主路径，sync + async
+  // SUBAGENT-UPSTREAM-CHANNEL（AGENT-LOOP-UPSTREAM.md §6.27.4 W1——spawn 主路径，sync + async
   // 共用）：子 → 父在飞通道装配单点（label = relay 前缀去尾；`sync` 供工具返回注分形）。
   child._upstream = { parent, label: relayPrefix.slice(0, -1), sync: !wantAsync }
   const childOpts = {

package/agent-tools/task.mjs

@@ -1,3 +1,6 @@
+// F-CC4（CONTEXT-COMPACTION.md §6.16.5）：task 列表变更 ⇒ 方向转换轻推（本档只调用；文案/去重单源 = agent-tools/context.mjs）
+import { pushContextNudge } from "./context.mjs"
+
 /** Common synonyms LLMs tend to use — normalize to canonical values */
 const STATUS_ALIASES = {
   completed: "done",
@@ -54,6 +57,13 @@ export const taskTool = {
   },
   readonly: true,
   async execute(args, ctx) {
+    // F10（工程模式机械停用——双层门的 **execute 层兜底**；先例 = escalate `subagent-actions.mjs:349`）：
+    // 前置位 = 本行以下全部副作用之前（alias 归一 / `_taskPushbacks` 归零 / `_onTaskUpdate` / 轻推）
+    // ⇒ 零副作用（列表不变）；装配层已摘（`agent/family-tools.mjs` 工程分支不入表，KD8）。
+    // 普通模式（engineering 非真）逐字走原路径。
+    if (ctx?.agent?.config?.agent?.engineering) {
+      return "Error: engineering mode is ON — task is unavailable (the batch record + the ledger are the tracking authority in engineering mode). Update progress in the batch record (§5/§6) or the ledger (`/ledger`); task lists go stale in this mode's parallel structure."
+    }
     // Keep only non-done items + the 3 most recently completed (for context reference), max 20 to prevent accumulation
     const warnings = []
     const raw = (args.items ?? []).map((it) => {
@@ -78,6 +88,7 @@ export const taskTool = {
     ctx.agent.tasks = items
     ctx.agent._taskPushbacks = 0 // task list changed — the completion gate earns a fresh reminder
     ctx.agent._onTaskUpdate?.(items)
+    if (ctx.depth === 0) pushContextNudge(ctx.agent) // F-CC4 轻推（§6.16.5——depth-0 门：子代理拿不到 context 工具）
     const done = items.filter((i) => i.status === "done").length
     const open = items.length - done
     const warningText = warnings.length > 0 ? ` ⚠️ ${warnings.join("; ")}` : ""

package/agent-tools.mjs

@@ -14,6 +14,9 @@ export { timerTool } from "./agent-tools/timer.mjs"
 export { advisorTool } from "./agent-tools/advisor.mjs"
 export { engTool } from "./agent-tools/eng.mjs"
 export { readHistoryTool } from "./agent-tools/read-history.mjs"
+// 模型主动整理上下文（CONTEXT-COMPACTION.md §6.16 · F-CC5）：单工具三操作 stats / prune / compact
+// ——depth-0 段挂载（子代理面裁见 §6.16.6 `family-tools.mjs` `depthOnly`）。
+export { contextTool } from "./agent-tools/context.mjs"
 export { batchTool } from "./agent-tools/batch.mjs"
 // 批次档生命周期工具（BATCH-RECORD §4.3 挂载表——主名 `batch` 单工具四 action：depth-0 主 agent
 // create/close + append §1/§4/§6 + status §1（轮 2 裁定②：§4/§6 状态面走普通文档写）（D-BR18）；
@@ -22,6 +25,6 @@ export { batchTool } from "./agent-tools/batch.mjs"
 // CORE-UNIFICATION TOOLS #83（统一登记册——VSC `agent-tools/index.mjs:15` 含 consult 家族；
 // CLI 原把 consult 另挂 `agent/setup.mjs:173` ⇒ 归位：登记册即单一来源，装配方只读本档）。
 export { consultStartTool, consultStopTool } from "./agent-tools/consult.mjs"
-// SUBAGENT-UPSTREAM-CHANNEL（AGENT-LOOP-SUBAGENT.md §6.27.4 装配接线）：子代理上行通道工具
+// SUBAGENT-UPSTREAM-CHANNEL（AGENT-LOOP-UPSTREAM.md §6.27.4 装配接线）：子代理上行通道工具
 // （depth>0 段装配——`agent/family-tools.mjs`；depth-0 / consult 不装配）。
 export { parentChannelTool } from "./agent-tools/parent-channel.mjs"

package/agent.mjs

@@ -26,8 +26,9 @@ import {
   DEFAULT_MAX_TURNS, DEFAULT_SUBAGENT_TURNS,
   MIN_REPORT_CHARS, REPORT_CONTINUATION,
   AUTO_TURN_DIGEST_DOMAIN,
+  AUTO_TURN_DIGEST_DOMAIN_ENG, // §6.15.3（F10 第三面）：工程模式 digest 基座变体（task 指针改批次档 + 台账）
   UPSTREAM_TURN_DOMAIN, // §6.27.12.8：上行唤醒轮域文本（手动档——ask 轮不沿用 digest 域文本）
-  restoreGuard, // §17 D-S6 读侧单点（P2 机制层端差批 §2.18——键清单归核）
+  restoreGuard, // digest D-S6 读侧单点（AGENT-LOOP-ASYNC-POOL.md §6.8；P2 机制层端差批 §2.18——键清单归核）
 } from "./agent/helpers.mjs"
 // ENG 提醒族 + auto-turn domain 2026-09-05 迁 agent/helpers.mjs（agent.mjs 530 > 500 硬限）
 // PROMPT-SYSTEM 施工② G1（2026-09-10）：六件槽位常量装载收口 prompt-overlays.mjs
@@ -159,13 +160,15 @@ export async function runAgent(agent, input, callbacks = {}, { depth = 0, signal
       agent._advisorSession = null // advisor session is per-run: discard when the task ends, next task starts fresh
       agent._emptyRetries = 0 // empty-response retry budget is per-run: a fresh user turn restarts from zero
       agent._compressFailures = 0 // compaction summary-failure counter is per-run: a fresh user turn restarts from zero
+      // F-CC2（§6.16.2）：模型主动压缩的排队槽也是回合级——上一回合末尾未被安全点消费的请求不得跨回合生效
+      agent._pendingCompact = null
     }
   }
-  // §17 D-S6 manual tier: digest action-domain reminder (system-driven turn — organize only).
+  // digest D-S6 manual tier（AGENT-LOOP-ASYNC-POOL.md §6.8）: action-domain reminder (system-driven turn — organize only).
   // §6.27.12.4 ②: an up-stream wake turn answers a RUNNING subagent waiting for the reply — it
   // must not reuse the digest text ("no one is waiting" is the opposite of the truth).
   if ((autoTurn || upstreamTurn) && !agent.autoApprove) {
-    agent.history.push({ role: "user", content: upstreamTurn ? UPSTREAM_TURN_DOMAIN : AUTO_TURN_DIGEST_DOMAIN, transient: true })
+    agent.history.push({ role: "user", content: upstreamTurn ? UPSTREAM_TURN_DOMAIN : (agent.config?.agent?.engineering === true ? AUTO_TURN_DIGEST_DOMAIN_ENG : AUTO_TURN_DIGEST_DOMAIN), transient: true })
   }
   // eng-coder authorization (_engDesignReviewed) is eng-coder-only: set by subagent-spawn.mjs
   // (spawn gate) / design-token.mjs (design review pass) BEFORE the child runAgent — the
@@ -192,8 +195,11 @@ export async function runAgent(agent, input, callbacks = {}, { depth = 0, signal
     // context.mjs compressIfNeeded 经 extras 透出到 logCtx）
     traceDepth: depth,
   }
+  // F-CC1（§6.16.4 阈值单源接线）：本回合压缩判定所用的阈值 + 固定开销面暂存——
+  // `context` 工具的 stats 报**同一口径**（不自行重算第二口径；VSC checkAndCompact 同款暂存）。
+  agent._ctxBasis = { threshold, overhead: compactionOverhead }
 
-  // SUBAGENT-UPSTREAM-CHANNEL（AGENT-LOOP-SUBAGENT.md §6.27.4 消费点）：子 → 父在飞消息的
+  // SUBAGENT-UPSTREAM-CHANNEL（AGENT-LOOP-UPSTREAM.md §6.27.4 消费点）：子 → 父在飞消息的
   // 回合边界注入单点取用一次（模块缓存 ⇒ 每 run 一次代价）；动态 import = 零新增静态边
   // （先例 = 上方 injectAsyncResult :113-117）。
   const { drainChildUpstream } = await import("./agent-tools/parent-channel.mjs")

package/config.mjs

@@ -49,7 +49,7 @@ export const DEFAULTS = {
     advisor: { guard: false },  // code review is always available; guard: true pushes completion back until reviewed (opt-in). Also accepts provider/model/thinking/reasoningEffort/timeoutMs overrides. Deprecated: enabled (2026-08-21)
     autoThink: false,     // auto-classify task difficulty and set reasoning effort per-turn
     engineering: false,   // strict methodology enforcement — design-before-code (design review + user approval before code)
-    // Async pool limits (AGENT-LOOP-SUBAGENT.md §6.10 D-24a/R14 + R13 — POOL-CONFIG-
+    // Async pool limits (AGENT-LOOP-ASYNC-POOL.md §6.10 D-24a/R14 + R13 — POOL-CONFIG-
     // UNIFIED 2026-09-09): { engCoder, other, advisor } — eng-coder pool / other-role
     // pool / advisor-review pool, defaults 4/4/4 (user ruling "eng-coder 四路，其他
     // 4 路" + advisor 评审池并入同一可配体系——三池统一默认 4)。engCoder/other