@vionwilliams/agent-os 1.0.0-alpha.23 → 1.0.0-alpha.25

package/README.md

@@ -2,7 +2,7 @@
 
 > 智能任务通用工作系统 · 多模型路由 + 意图编排 + 多智能体协调 + DataHub + 可编程面板 + LLM 知识编译器
 
-**Status**: `1.0.0-alpha.23` · Beta 测试版 · npm 公共包可用
+**Status**: `1.0.0-alpha.25` · Beta 测试版 · npm 公共包可用
 
 ---
 
@@ -64,7 +64,7 @@ bash install-agent-os-mac.sh
 agent-os --version
 ```
 
-成功时会显示 `1.0.0-alpha.23 (Agent-OS)` 或更新版本。
+成功时会显示 `1.0.0-alpha.25 (Agent-OS)` 或更新版本。
 
 然后打开 Agent-OS：
 

package/dist/cli.js

@@ -93314,7 +93314,7 @@ var init_system = __esm(() => {
     AGENT_SDK_CLAUDE_CODE_PRESET_PREFIX,
     AGENT_SDK_PREFIX
   ];
-  AGENT_OS_VERSION = typeof MACRO !== "undefined" ? "1.0.0-alpha.23" : "dev";
+  AGENT_OS_VERSION = typeof MACRO !== "undefined" ? "1.0.0-alpha.25" : "dev";
   CLI_SYSPROMPT_PREFIXES = new Set(CLI_SYSPROMPT_PREFIX_VALUES);
 });
 
@@ -93758,7 +93758,7 @@ function getClaudeCodeUserAgent() {
 }
 var AGENT_OS_VERSION2;
 var init_userAgent = __esm(() => {
-  AGENT_OS_VERSION2 = typeof MACRO !== "undefined" ? "1.0.0-alpha.23" : "dev";
+  AGENT_OS_VERSION2 = typeof MACRO !== "undefined" ? "1.0.0-alpha.25" : "dev";
 });
 
 // src/utils/http.ts
@@ -93839,7 +93839,7 @@ var init_http2 = __esm(() => {
   init_auth();
   init_userAgent();
   init_workloadContext();
-  AGENT_OS_VERSION3 = typeof MACRO !== "undefined" ? "1.0.0-alpha.23" : "dev";
+  AGENT_OS_VERSION3 = typeof MACRO !== "undefined" ? "1.0.0-alpha.25" : "dev";
 });
 
 // src/services/api/router/userProviders.ts
@@ -108404,11 +108404,13 @@ var WEB_FETCH_TOOL_NAME = "WebFetch", DESCRIPTION2 = `
 
 Usage notes:
   - IMPORTANT: If an MCP-provided web fetch tool is available, prefer using that tool instead of this one, as it may have fewer restrictions.
+  - For market research or other current-public-data tasks, use WebSearch first to find current accessible URLs, then use WebFetch only on URLs that look valid.
   - The URL must be a fully-formed valid URL
   - HTTP URLs will be automatically upgraded to HTTPS
   - The prompt should describe what information you want to extract from the page
   - This tool is read-only and does not modify any files
   - Results may be summarized if the content is very large
+  - Public web pages can expire, redirect, block automation, or time out. When WebFetch returns ok:false, treat that source as unavailable, use the recoveryHint, and continue with other sources instead of stopping the task.
   - Includes a self-cleaning 15-minute cache for faster responses when repeatedly accessing the same URL
   - When a URL redirects to a different host, the tool will inform you and provide the redirect URL in a special format. You should then make a new WebFetch request with the redirect URL to fetch the content.
   - For GitHub URLs, prefer using the gh CLI via Bash instead (e.g., gh pr view, gh issue view, gh api).
@@ -207175,7 +207177,7 @@ var init_sessionStorage = __esm(() => {
   init_settings2();
   init_slowOperations();
   init_uuid();
-  VERSION4 = typeof MACRO !== "undefined" ? "1.0.0-alpha.23" : "unknown";
+  VERSION4 = typeof MACRO !== "undefined" ? "1.0.0-alpha.25" : "unknown";
   MAX_TOMBSTONE_REWRITE_BYTES = 50 * 1024 * 1024;
   SKIP_FIRST_PROMPT_PATTERN = /^(?:\s*<[a-z][\w-]*[\s>]|\[Request interrupted by user[^\]]*\])/;
   EPHEMERAL_PROGRESS_TYPES = new Set([
@@ -207305,7 +207307,7 @@ function Feedback({
       platform: env3.platform,
       gitRepo: envInfo.isGit,
       terminal: env3.terminal,
-      version: "1.0.0-alpha.23",
+      version: "1.0.0-alpha.25",
       transcript: normalizeMessagesForAPI(messages),
       errors: sanitizedErrors,
       lastApiRequest: getLastAPIRequest(),
@@ -207489,7 +207491,7 @@ function Feedback({
                       ", ",
                       env3.terminal,
                       ", v",
-                      "1.0.0-alpha.23"
+                      "1.0.0-alpha.25"
                     ]
                   })
                 ]
@@ -207595,7 +207597,7 @@ ${sanitizedDescription}
 ` + `**Environment Info**
 ` + `- Platform: ${env3.platform}
 ` + `- Terminal: ${env3.terminal}
-` + `- Version: ${"1.0.0-alpha.23"}
+` + `- Version: ${"1.0.0-alpha.25"}
 ` + `- Feedback ID: ${feedbackId}
 ` + `
 **Errors**
@@ -259980,8 +259982,8 @@ var init_toolAnalytics = __esm(() => {
   init_agentContext();
   init_slowOperations();
   init_teammate();
-  AGENT_OS_VERSION4 = typeof MACRO !== "undefined" ? "1.0.0-alpha.23" : "dev";
-  AGENT_OS_BUILD_TIME = typeof MACRO !== "undefined" ? "2026-05-21T08:38:17Z" : undefined;
+  AGENT_OS_VERSION4 = typeof MACRO !== "undefined" ? "1.0.0-alpha.25" : "dev";
+  AGENT_OS_BUILD_TIME = typeof MACRO !== "undefined" ? "2026-05-21T15:45:55Z" : undefined;
   BUILTIN_MCP_SERVER_NAMES = new Set([]);
   TOOL_INPUT_MAX_JSON_CHARS = 4 * 1024;
   FILE_COMMANDS = new Set([
@@ -262593,7 +262595,8 @@ function formatInputValidationSummary(error41) {
 `).map((line) => line.trim()).filter(Boolean);
   const firstLine = lines2[0] ?? "";
   const toolMatch = firstLine.match(/^InputValidationError:\s+(.+?)\s+failed\b/);
-  const prefix = toolMatch?.[1] ? `Invalid ${toolMatch[1]} tool parameters` : "Invalid tool parameters";
+  const toolName = toolMatch?.[1];
+  const prefix = toolName && /^Task(Create|Update)$/.test(toolName) ? `${toolName} parameters do not match the task schema. Agent-OS tried safe normalization; retry with the fields below.` : toolName ? `${toolName} parameters do not match the current schema. Retry with the fields below.` : "Tool parameters do not match the current schema. Retry with the fields below.";
   const details = lines2.filter((line) => line.startsWith("The required parameter") || line.startsWith("An unexpected parameter")).slice(0, 4);
   return [prefix, ...details].join(`
 `);
@@ -274627,7 +274630,7 @@ function getInstallationEnv() {
   return;
 }
 function getClaudeCodeVersion() {
-  return "1.0.0-alpha.23";
+  return "1.0.0-alpha.25";
 }
 async function getInstalledVSCodeExtensionVersion(command) {
   const { stdout } = await execFileNoThrow(command, ["--list-extensions", "--show-versions"], {
@@ -297345,7 +297348,7 @@ async function setupSdkMcpClients(sdkMcpConfigs, sendMcpMessage) {
     const client = new Client({
       name: "claude-code",
       title: "Agent-OS",
-      version: "1.0.0-alpha.23",
+      version: "1.0.0-alpha.25",
       description: "Anthropic's agentic coding tool",
       websiteUrl: PRODUCT_URL
     }, {
@@ -297698,7 +297701,7 @@ var init_client4 = __esm(() => {
       const client = new Client({
         name: "claude-code",
         title: "Agent-OS",
-        version: "1.0.0-alpha.23",
+        version: "1.0.0-alpha.25",
         description: "Anthropic's agentic coding tool",
         websiteUrl: PRODUCT_URL
       }, {
@@ -344508,8 +344511,10 @@ __export(exports_utils2, {
   getURLMarkdownContent: () => getURLMarkdownContent,
   formatWebFetchHttpError: () => formatWebFetchHttpError,
   clearWebFetchCache: () => clearWebFetchCache,
+  classifyRecoverableWebFetchError: () => classifyRecoverableWebFetchError,
   checkDomainBlocklist: () => checkDomainBlocklist,
   applyPromptToMarkdown: () => applyPromptToMarkdown,
+  WebFetchHttpError: () => WebFetchHttpError,
   MAX_MARKDOWN_LENGTH: () => MAX_MARKDOWN_LENGTH
 });
 function clearWebFetchCache() {
@@ -344611,6 +344616,76 @@ function formatWebFetchHttpError(params) {
   }
   return message;
 }
+function recoverableMessage(url3, reason) {
+  return {
+    result: `WebFetch could not retrieve ${url3}: ${reason}`,
+    recoveryHint: "Use WebSearch to find a current accessible source, try the redirected/current URL, or skip this source and continue with other evidence."
+  };
+}
+function classifyRecoverableWebFetchError(error41, url3) {
+  if (error41 instanceof DomainBlockedError)
+    return null;
+  if (error41 instanceof DomainCheckFailedError)
+    return null;
+  const message = error41 instanceof Error ? error41.message : String(error41);
+  const name = error41 instanceof Error ? error41.name : "";
+  const codeValue = error41?.code;
+  const code = typeof codeValue === "string" ? codeValue : "";
+  if (name === "AbortError" || name === "CanceledError" || code === "ERR_CANCELED") {
+    return null;
+  }
+  if (error41 instanceof WebFetchHttpError && [404, 410].includes(error41.status)) {
+    const { result, recoveryHint } = recoverableMessage(url3, `HTTP ${error41.status} ${error41.statusText}`);
+    return {
+      errorKind: "not_found",
+      code: error41.status,
+      codeText: error41.statusText,
+      result,
+      recoveryHint
+    };
+  }
+  if (/too many redirects/i.test(message)) {
+    const { result, recoveryHint } = recoverableMessage(url3, "the page redirects too many times");
+    return {
+      errorKind: "redirect_loop",
+      code: 0,
+      codeText: "Too Many Redirects",
+      result,
+      recoveryHint
+    };
+  }
+  if (code === "ERR_TLS_CERT_ALTNAME_INVALID" || /ERR_TLS_CERT_ALTNAME_INVALID|certificate|cert altname/i.test(message)) {
+    const { result, recoveryHint } = recoverableMessage(url3, "the site TLS certificate does not match the requested host");
+    return {
+      errorKind: "tls_error",
+      code: 0,
+      codeText: "TLS Certificate Error",
+      result,
+      recoveryHint
+    };
+  }
+  if (code === "ETIMEDOUT" || code === "ECONNABORTED" || /timeout of \d+ms exceeded|timed out|timeout/i.test(message)) {
+    const { result, recoveryHint } = recoverableMessage(url3, "the request timed out");
+    return {
+      errorKind: "timeout",
+      code: 0,
+      codeText: "Timeout",
+      result,
+      recoveryHint
+    };
+  }
+  if (error41 instanceof EgressBlockedError || ["ENOTFOUND", "EAI_AGAIN", "ECONNRESET", "ECONNREFUSED", "EPIPE"].includes(code) || /network|egress|unreachable|getaddrinfo|socket hang up/i.test(message)) {
+    const { result, recoveryHint } = recoverableMessage(url3, "the host is blocked or unreachable from this network");
+    return {
+      errorKind: "network_error",
+      code: 0,
+      codeText: "Network Error",
+      result,
+      recoveryHint
+    };
+  }
+  return null;
+}
 async function getWithPermittedRedirects(url3, signal, redirectChecker, depth = 0) {
   if (depth > MAX_REDIRECTS) {
     throw new Error(`Too many redirects (exceeded ${MAX_REDIRECTS})`);
@@ -344650,12 +344725,12 @@ async function getWithPermittedRedirects(url3, signal, redirectChecker, depth =
       throw new EgressBlockedError(hostname2);
     }
     if (axios_default.isAxiosError(error41) && error41.response) {
-      throw new Error(formatWebFetchHttpError({
+      throw new WebFetchHttpError({
         url: url3,
         status: error41.response.status,
         statusText: error41.response.statusText,
         body: error41.response.data
-      }));
+      });
     }
     throw error41;
   }
@@ -344776,7 +344851,7 @@ async function applyPromptToMarkdown(prompt, markdownContent, signal, isNonInter
   }
   return "No response from model";
 }
-var DomainBlockedError, DomainCheckFailedError, EgressBlockedError, CACHE_TTL_MS, MAX_CACHE_SIZE_BYTES, URL_CACHE, DOMAIN_CHECK_CACHE, turndownServicePromise, MAX_URL_LENGTH = 2000, MAX_HTTP_CONTENT_LENGTH = 10485760, FETCH_TIMEOUT_MS2 = 60000, DOMAIN_CHECK_TIMEOUT_MS = 1e4, MAX_REDIRECTS = 10, MAX_MARKDOWN_LENGTH = 1e5;
+var DomainBlockedError, DomainCheckFailedError, EgressBlockedError, WebFetchHttpError, CACHE_TTL_MS, MAX_CACHE_SIZE_BYTES, URL_CACHE, DOMAIN_CHECK_CACHE, turndownServicePromise, MAX_URL_LENGTH = 2000, MAX_HTTP_CONTENT_LENGTH = 10485760, FETCH_TIMEOUT_MS2 = 60000, DOMAIN_CHECK_TIMEOUT_MS = 1e4, MAX_REDIRECTS = 10, MAX_MARKDOWN_LENGTH = 1e5;
 var init_utils9 = __esm(() => {
   init_axios2();
   init_index_min();
@@ -344812,6 +344887,18 @@ var init_utils9 = __esm(() => {
       this.name = "EgressBlockedError";
     }
   };
+  WebFetchHttpError = class WebFetchHttpError extends Error {
+    url;
+    status;
+    statusText;
+    constructor(params) {
+      super(formatWebFetchHttpError(params));
+      this.name = "WebFetchHttpError";
+      this.url = params.url;
+      this.status = params.status;
+      this.statusText = params.statusText?.trim() || "HTTP Error";
+    }
+  };
   CACHE_TTL_MS = 15 * 60 * 1000;
   MAX_CACHE_SIZE_BYTES = 50 * 1024 * 1024;
   URL_CACHE = new L({
@@ -344862,6 +344949,9 @@ var init_WebFetchTool = __esm(() => {
     prompt: exports_external.string().describe("The prompt to run on the fetched content")
   }));
   outputSchema15 = lazySchema(() => exports_external.object({
+    ok: exports_external.boolean().optional().describe("Whether the URL was fetched successfully"),
+    errorKind: exports_external.enum(["not_found", "redirect_loop", "tls_error", "timeout", "network_error"]).optional().describe("Recoverable fetch failure category"),
+    recoveryHint: exports_external.string().optional().describe("Suggested next step when ok is false"),
     bytes: exports_external.number().describe("Size of the fetched content in bytes"),
     code: exports_external.number().describe("HTTP response code"),
     codeText: exports_external.string().describe("HTTP response code text"),
@@ -344984,7 +345074,30 @@ ${DESCRIPTION2}`;
     renderToolResultMessage: renderToolResultMessage14,
     async call({ url: url3, prompt }, { abortController, options: { isNonInteractiveSession } }) {
       const start = Date.now();
-      const response = await getURLMarkdownContent(url3, abortController);
+      let response;
+      try {
+        response = await getURLMarkdownContent(url3, abortController);
+      } catch (error41) {
+        const failure = classifyRecoverableWebFetchError(error41, url3);
+        if (!failure) {
+          throw error41;
+        }
+        return {
+          data: {
+            ok: false,
+            bytes: 0,
+            code: failure.code,
+            codeText: failure.codeText,
+            result: `${failure.result}
+
+${failure.recoveryHint}`,
+            durationMs: Date.now() - start,
+            url: url3,
+            errorKind: failure.errorKind,
+            recoveryHint: failure.recoveryHint
+          }
+        };
+      }
       if ("type" in response && response.type === "redirect") {
         const statusText = response.statusCode === 301 ? "Moved Permanently" : response.statusCode === 308 ? "Permanent Redirect" : response.statusCode === 307 ? "Temporary Redirect" : "Found";
         const message = `REDIRECT DETECTED: The URL redirects to a different host.
@@ -344997,6 +345110,7 @@ To complete your request, I need to fetch content from the redirected URL. Pleas
 - url: "${response.redirectUrl}"
 - prompt: "${prompt}"`;
         const output2 = {
+          ok: true,
           bytes: Buffer.byteLength(message),
           code: response.statusCode,
           codeText: statusText,
@@ -345030,6 +345144,7 @@ To complete your request, I need to fetch content from the redirected URL. Pleas
 [Binary content (${contentType}, ${formatFileSize(persistedSize ?? bytes)}) also saved to ${persistedPath}]`;
       }
       const output = {
+        ok: true,
         bytes,
         code,
         codeText,
@@ -406253,11 +406368,29 @@ Skip using this tool when:
 
 NOTE that you should not use this tool if there is only one trivial task to do. In this case you are better off just doing the task directly.
 
+## Accepted Input Shapes
+
+Create one task:
+\`\`\`json
+{"subject": "Fix login redirect", "description": "Reproduce and patch the redirect loop after OAuth login"}
+\`\`\`
+
+Create multiple tasks atomically:
+\`\`\`json
+{"tasks": [
+  {"subject": "Collect market sources", "description": "Find current ecommerce market reports"},
+  {"subject": "Draft HTML report", "description": "Compile the findings into a local HTML report"}
+]}
+\`\`\`
+
+Do not pass a top-level \`tasks\` array unless you are creating multiple tasks. Completion notes belong in TaskUpdate \`metadata.completionNote\`, not in TaskCreate.
+
 ## Task Fields
 
 - **subject**: A brief, actionable title in imperative form (e.g., "Fix authentication bug in login flow")
 - **description**: What needs to be done
 - **activeForm** (optional): Present continuous form shown in the spinner when the task is in_progress (e.g., "Fixing authentication bug"). If omitted, the spinner shows the subject instead.
+- **metadata** (optional): Extra structured context that should stay attached to the task
 
 All tasks are created with status \`pending\`.
 
@@ -406274,7 +406407,32 @@ var init_prompt23 = __esm(() => {
 });
 
 // src/tools/TaskCreateTool/TaskCreateTool.ts
-var inputSchema32, outputSchema27, TaskCreateTool;
+async function createOneTask(taskListId, task, context) {
+  const taskId = await createTask(taskListId, {
+    subject: task.subject,
+    description: task.description,
+    activeForm: task.activeForm,
+    status: "pending",
+    owner: undefined,
+    blocks: [],
+    blockedBy: [],
+    metadata: task.metadata
+  });
+  const blockingErrors = [];
+  const generator = executeTaskCreatedHooks(taskId, task.subject, task.description, getAgentName(), getTeamName(), undefined, context?.abortController?.signal, undefined, context);
+  for await (const result of generator) {
+    if (result.blockingError) {
+      blockingErrors.push(getTaskCreatedHookMessage(result.blockingError));
+    }
+  }
+  if (blockingErrors.length > 0) {
+    await deleteTask(taskListId, taskId);
+    throw new Error(blockingErrors.join(`
+`));
+  }
+  return { id: taskId, subject: task.subject };
+}
+var taskInputSchema, inputSchema32, createdTaskSchema, outputSchema27, TaskCreateTool;
 var init_TaskCreateTool = __esm(() => {
   init_v4();
   init_Tool();
@@ -406282,17 +406440,43 @@ var init_TaskCreateTool = __esm(() => {
   init_tasks();
   init_teammate();
   init_prompt23();
-  inputSchema32 = lazySchema(() => exports_external.strictObject({
+  taskInputSchema = exports_external.strictObject({
     subject: exports_external.string().describe("A brief title for the task"),
     description: exports_external.string().describe("What needs to be done"),
     activeForm: exports_external.string().optional().describe('Present continuous form shown in spinner when in_progress (e.g., "Running tests")'),
     metadata: exports_external.record(exports_external.string(), exports_external.unknown()).optional().describe("Arbitrary metadata to attach to the task")
+  });
+  inputSchema32 = lazySchema(() => exports_external.strictObject({
+    subject: exports_external.string().optional().describe("A brief title for the task"),
+    description: exports_external.string().optional().describe("What needs to be done"),
+    activeForm: exports_external.string().optional().describe('Present continuous form shown in spinner when in_progress (e.g., "Running tests")'),
+    metadata: exports_external.record(exports_external.string(), exports_external.unknown()).optional().describe("Arbitrary metadata to attach to the task"),
+    tasks: exports_external.array(taskInputSchema).min(1).optional().describe("Optional batch of tasks to create atomically")
+  }).superRefine((input2, ctx) => {
+    if (input2.tasks && input2.tasks.length > 0)
+      return;
+    if (!input2.subject) {
+      ctx.addIssue({
+        code: "custom",
+        path: ["subject"],
+        message: "TaskCreate requires subject when tasks is not provided"
+      });
+    }
+    if (!input2.description) {
+      ctx.addIssue({
+        code: "custom",
+        path: ["description"],
+        message: "TaskCreate requires description when tasks is not provided"
+      });
+    }
   }));
+  createdTaskSchema = exports_external.object({
+    id: exports_external.string(),
+    subject: exports_external.string()
+  });
   outputSchema27 = lazySchema(() => exports_external.object({
-    task: exports_external.object({
-      id: exports_external.string(),
-      subject: exports_external.string()
-    })
+    task: createdTaskSchema,
+    tasks: exports_external.array(createdTaskSchema).optional()
   }));
   TaskCreateTool = buildTool({
     name: TASK_CREATE_TOOL_NAME,
@@ -406321,33 +406505,34 @@ var init_TaskCreateTool = __esm(() => {
       return true;
     },
     toAutoClassifierInput(input2) {
-      return input2.subject;
+      if (Array.isArray(input2.tasks)) {
+        return input2.tasks.map((task) => task.subject).join(" ");
+      }
+      return input2.subject ?? "";
     },
     renderToolUseMessage() {
       return null;
     },
-    async call({ subject, description, activeForm, metadata }, context) {
-      const taskId = await createTask(getTaskListId(), {
-        subject,
-        description,
-        activeForm,
-        status: "pending",
-        owner: undefined,
-        blocks: [],
-        blockedBy: [],
-        metadata
-      });
-      const blockingErrors = [];
-      const generator = executeTaskCreatedHooks(taskId, subject, description, getAgentName(), getTeamName(), undefined, context?.abortController?.signal, undefined, context);
-      for await (const result of generator) {
-        if (result.blockingError) {
-          blockingErrors.push(getTaskCreatedHookMessage(result.blockingError));
+    async call(input2, context) {
+      const taskListId = getTaskListId();
+      const tasks = input2.tasks?.length ? input2.tasks : [
+        {
+          subject: input2.subject,
+          description: input2.description,
+          activeForm: input2.activeForm,
+          metadata: input2.metadata
         }
-      }
-      if (blockingErrors.length > 0) {
-        await deleteTask(getTaskListId(), taskId);
-        throw new Error(blockingErrors.join(`
-`));
+      ];
+      const createdTasks = [];
+      try {
+        for (const task of tasks) {
+          createdTasks.push(await createOneTask(taskListId, task, context));
+        }
+      } catch (error41) {
+        for (const task of createdTasks) {
+          await deleteTask(taskListId, task.id);
+        }
+        throw error41;
       }
       context.setAppState((prev) => {
         if (prev.expandedView === "tasks")
@@ -406356,19 +406541,18 @@ var init_TaskCreateTool = __esm(() => {
       });
       return {
         data: {
-          task: {
-            id: taskId,
-            subject
-          }
+          task: createdTasks[0],
+          tasks: createdTasks
         }
       };
     },
     mapToolResultToToolResultBlockParam(content, toolUseID) {
-      const { task } = content;
+      const { task, tasks } = content;
+      const createdTasks = tasks?.length ? tasks : [task];
       return {
         tool_use_id: toolUseID,
         type: "tool_result",
-        content: `Task #${task.id} created successfully: ${task.subject}`
+        content: createdTasks.length === 1 ? `Task #${task.id} created successfully: ${task.subject}` : `Created ${createdTasks.length} tasks successfully: ${createdTasks.map((item) => `#${item.id} ${item.subject}`).join(", ")}`
       };
     }
   });
@@ -406544,6 +406728,13 @@ var DESCRIPTION17 = "Update a task in the task list", PROMPT7 = `Use this tool t
 - **addBlocks**: Mark tasks that cannot start until this one completes
 - **addBlockedBy**: Mark tasks that must complete before this one can start
 
+Completion notes must be stored as metadata:
+\`\`\`json
+{"taskId": "1", "status": "completed", "metadata": {"completionNote": "Verified with bun test"}}
+\`\`\`
+
+If a provider emits \`completionNote\`, \`note\`, \`result\`, or \`summary\`, Agent-OS will normalize it into \`metadata.completionNote\`.
+
 ## Status Workflow
 
 Status progresses: \`pending\` \u2192 \`in_progress\` \u2192 \`completed\`
@@ -406566,6 +406757,11 @@ Mark task as completed after finishing work:
 {"taskId": "1", "status": "completed"}
 \`\`\`
 
+Mark task as completed with a note:
+\`\`\`json
+{"taskId": "1", "status": "completed", "metadata": {"completionNote": "Generated the final report and checked the output file"}}
+\`\`\`
+
 Delete a task:
 \`\`\`json
 {"taskId": "1", "status": "deleted"}
@@ -416343,7 +416539,7 @@ function getInvokedBinary() {
 async function getDoctorDiagnostic() {
   return {
     installationType: "package-manager",
-    version: "1.0.0-alpha.23",
+    version: "1.0.0-alpha.25",
     installationPath: process.argv[1] ?? "",
     invokedBinary: getInvokedBinary(),
     configInstallMethod: "not set",
@@ -416748,7 +416944,7 @@ function buildPrimarySection() {
   });
   return [{
     label: "Version",
-    value: "1.0.0-alpha.23"
+    value: "1.0.0-alpha.25"
   }, {
     label: "Session name",
     value: nameValue
@@ -420391,7 +420587,7 @@ function Config({
         }
       })
     }) : showSubmenu === "ChannelDowngrade" ? /* @__PURE__ */ jsx_runtime169.jsx(ChannelDowngradeDialog, {
-      currentVersion: "1.0.0-alpha.23",
+      currentVersion: "1.0.0-alpha.25",
       onChoice: (choice) => {
         setShowSubmenu(null);
         setTabsHidden(false);
@@ -420403,7 +420599,7 @@ function Config({
           autoUpdatesChannel: "stable"
         };
         if (choice === "stay") {
-          newSettings.minimumVersion = "1.0.0-alpha.23";
+          newSettings.minimumVersion = "1.0.0-alpha.25";
         }
         updateSettingsForSource("userSettings", newSettings);
         setSettingsData((prev_27) => ({
@@ -428394,7 +428590,7 @@ function HelpV2(t0) {
   let t6;
   if ($3[31] !== tabs) {
     t6 = /* @__PURE__ */ jsx_runtime195.jsx(Tabs, {
-      title: `Agent-OS v${"1.0.0-alpha.23"}`,
+      title: `Agent-OS v${"1.0.0-alpha.25"}`,
       color: "professionalBlue",
       defaultTab: "general",
       children: tabs
@@ -431522,7 +431718,7 @@ var init_user = __esm(() => {
       deviceId,
       sessionId: getSessionId(),
       email: getEmail(),
-      appVersion: "1.0.0-alpha.23",
+      appVersion: "1.0.0-alpha.25",
       platform: getHostPlatformForAnalytics(),
       organizationUuid,
       accountUuid,
@@ -451773,7 +451969,7 @@ function getAllReleaseNotes(changelogContent = getStoredChangelogFromMemory()) {
     return [];
   }
 }
-async function checkForReleaseNotes(lastSeenVersion, currentVersion = "1.0.0-alpha.23") {
+async function checkForReleaseNotes(lastSeenVersion, currentVersion = "1.0.0-alpha.25") {
   if (process.env.USER_TYPE === "ant") {
     const changelog = "";
     if (changelog) {
@@ -451800,7 +451996,7 @@ async function checkForReleaseNotes(lastSeenVersion, currentVersion = "1.0.0-alp
     releaseNotes
   };
 }
-function checkForReleaseNotesSync(lastSeenVersion, currentVersion = "1.0.0-alpha.23") {
+function checkForReleaseNotesSync(lastSeenVersion, currentVersion = "1.0.0-alpha.25") {
   if (process.env.USER_TYPE === "ant") {
     const changelog = "";
     if (changelog) {
@@ -452927,7 +453123,7 @@ function getRecentActivitySync() {
   return cachedActivity;
 }
 function getLogoDisplayData() {
-  const version2 = process.env.DEMO_VERSION ?? "1.0.0-alpha.23";
+  const version2 = process.env.DEMO_VERSION ?? "1.0.0-alpha.25";
   const serverUrl = getDirectConnectServerUrl();
   const displayPath = process.env.DEMO_VERSION ? "/code/claude" : getDisplayPath(getCwd());
   const cwd2 = serverUrl ? `${displayPath} in ${serverUrl.replace(/^https?:\/\//, "")}` : displayPath;
@@ -454142,7 +454338,7 @@ function LogoV2() {
   if ($3[2] === Symbol.for("react.memo_cache_sentinel")) {
     t2 = () => {
       const currentConfig = getGlobalConfig();
-      if (currentConfig.lastReleaseNotesSeen === "1.0.0-alpha.23") {
+      if (currentConfig.lastReleaseNotesSeen === "1.0.0-alpha.25") {
         return;
       }
       saveGlobalConfig(_temp328);
@@ -454808,12 +455004,12 @@ function AgentOsPoster() {
   });
 }
 function _temp328(current) {
-  if (current.lastReleaseNotesSeen === "1.0.0-alpha.23") {
+  if (current.lastReleaseNotesSeen === "1.0.0-alpha.25") {
     return current;
   }
   return {
     ...current,
-    lastReleaseNotesSeen: "1.0.0-alpha.23"
+    lastReleaseNotesSeen: "1.0.0-alpha.25"
   };
 }
 function _temp245(s_0) {
@@ -481390,7 +481586,7 @@ async function captureMemoryDiagnostics(trigger, dumpNumber = 0) {
     smapsRollup,
     platform: process.platform,
     nodeVersion: process.version,
-    ccVersion: "1.0.0-alpha.23"
+    ccVersion: "1.0.0-alpha.25"
   };
 }
 async function performHeapDump(trigger = "manual", dumpNumber = 0) {
@@ -481963,7 +482159,7 @@ var init_bridge_kick = __esm(() => {
 var call58 = async () => {
   return {
     type: "text",
-    value: `${"1.0.0-alpha.23"} (built ${"2026-05-21T08:38:17Z"})`
+    value: `${"1.0.0-alpha.25"} (built ${"2026-05-21T15:45:55Z"})`
   };
 }, version2, version_default;
 var init_version = __esm(() => {
@@ -491455,7 +491651,7 @@ function generateHtmlReport(data, insights) {
 </html>`;
 }
 function buildExportData(data, insights, facets, remoteStats) {
-  const version3 = typeof MACRO !== "undefined" ? "1.0.0-alpha.23" : "unknown";
+  const version3 = typeof MACRO !== "undefined" ? "1.0.0-alpha.25" : "unknown";
   const remote_hosts_collected = remoteStats?.hosts.filter((h3) => h3.sessionCount > 0).map((h3) => h3.name);
   const facets_summary = {
     total: facets.size,
@@ -495320,9 +495516,81 @@ function moveToMetadata(input2, keys2) {
     input2.metadata = metadata;
   }
 }
+function moveFirstValueToMetadataKey(input2, keys2, metadataKey) {
+  const metadata = isRecord4(input2.metadata) ? { ...input2.metadata } : {};
+  let moved = false;
+  for (const key2 of keys2) {
+    const value = input2[key2];
+    if (value !== undefined) {
+      if (!moved) {
+        metadata[metadataKey] = value;
+        moved = true;
+      }
+      delete input2[key2];
+    }
+  }
+  if (moved) {
+    input2.metadata = metadata;
+  }
+}
 function firstMeaningfulLine(value) {
   return value.split(/\r?\n/).map((line) => line.trim()).find(Boolean) ?? value.trim();
 }
+function normalizeTaskStatus2(value) {
+  if (typeof value !== "string")
+    return value;
+  const normalized = value.trim().toLowerCase();
+  if (["done", "resolved", "complete", "completed"].includes(normalized)) {
+    return "completed";
+  }
+  if (["doing", "running", "started", "active", "in-progress"].includes(normalized)) {
+    return "in_progress";
+  }
+  if (["todo", "open", "new"].includes(normalized)) {
+    return "pending";
+  }
+  return value;
+}
+function normalizeTaskCreateEntry(entry, commonMetadata) {
+  const normalized = typeof entry === "string" ? { subject: firstMeaningfulLine(entry).slice(0, 120), description: entry } : isRecord4(entry) ? { ...entry } : entry;
+  if (!isRecord4(normalized))
+    return normalized;
+  normalized.subject ??= takeString(normalized, ["title", "task", "name"]);
+  normalized.description ??= takeString(normalized, [
+    "description",
+    "details",
+    "content",
+    "prompt"
+  ]);
+  if (!normalized.subject && typeof normalized.description === "string") {
+    normalized.subject = firstMeaningfulLine(normalized.description).slice(0, 120);
+  }
+  if (!normalized.description && typeof normalized.subject === "string") {
+    normalized.description = normalized.subject;
+  }
+  if (commonMetadata && Object.keys(commonMetadata).length > 0) {
+    normalized.metadata = {
+      ...commonMetadata,
+      ...isRecord4(normalized.metadata) ? normalized.metadata : {}
+    };
+  }
+  moveToMetadata(normalized, [
+    "parentTaskId",
+    "state",
+    "status",
+    "subagent_type",
+    "subtasks"
+  ]);
+  removeKeys(normalized, [
+    "title",
+    "task",
+    "name",
+    "details",
+    "content",
+    "prompt"
+  ]);
+  return normalized;
+}
 function normalizeProviderToolInput(toolName, input2) {
   if (!isRecord4(input2))
     return input2;
@@ -495417,40 +495685,51 @@ function normalizeProviderToolInput(toolName, input2) {
     }
     removeKeys(normalized, ["toolName", "tool", "name", "raw"]);
   } else if (toolName === TASK_CREATE_TOOL_NAME) {
-    normalized.subject ??= takeString(normalized, ["title", "task", "name"]);
-    normalized.description ??= takeString(normalized, [
-      "description",
-      "details",
-      "content",
-      "prompt"
-    ]);
-    if (!normalized.subject && typeof normalized.description === "string") {
-      normalized.subject = firstMeaningfulLine(normalized.description).slice(0, 120);
-    }
-    if (!normalized.description && typeof normalized.subject === "string") {
-      normalized.description = normalized.subject;
-    }
-    moveToMetadata(normalized, [
+    const taskContextKeys = [
       "parentTaskId",
       "state",
       "status",
       "subagent_type",
       "subtasks"
-    ]);
-    removeKeys(normalized, [
-      "title",
-      "task",
-      "name",
-      "details",
-      "content",
-      "prompt"
-    ]);
+    ];
+    if (Array.isArray(normalized.tasks)) {
+      const commonMetadata = {};
+      for (const key2 of taskContextKeys) {
+        if (normalized[key2] !== undefined) {
+          commonMetadata[key2] = normalized[key2];
+        }
+      }
+      normalized.tasks = normalized.tasks.map((task) => normalizeTaskCreateEntry(task, commonMetadata));
+      removeKeys(normalized, [
+        "subject",
+        "description",
+        "activeForm",
+        "metadata",
+        "title",
+        "task",
+        "name",
+        "details",
+        "content",
+        "prompt",
+        ...taskContextKeys
+      ]);
+    } else {
+      const singleTask = normalizeTaskCreateEntry(normalized);
+      if (isRecord4(singleTask)) {
+        for (const key2 of Object.keys(normalized)) {
+          delete normalized[key2];
+        }
+        Object.assign(normalized, singleTask);
+      }
+    }
   } else if (toolName === TASK_UPDATE_TOOL_NAME) {
     normalized.taskId ??= takeString(normalized, ["id", "task_id", "task"]);
     normalized.status ??= takeString(normalized, ["state"]);
+    normalized.status = normalizeTaskStatus2(normalized.status);
     normalized.subject ??= takeString(normalized, ["title"]);
     normalized.description ??= takeString(normalized, ["details", "content"]);
     moveToMetadata(normalized, ["parentTaskId"]);
+    moveFirstValueToMetadataKey(normalized, ["completionNote", "note", "result", "summary"], "completionNote");
     removeKeys(normalized, [
       "id",
       "task_id",
@@ -495458,7 +495737,11 @@ function normalizeProviderToolInput(toolName, input2) {
       "state",
       "title",
       "details",
-      "content"
+      "content",
+      "completionNote",
+      "note",
+      "result",
+      "summary"
     ]);
   } else if (toolName === WEB_FETCH_TOOL_NAME) {
     normalized.url ??= takeString(normalized, ["href", "link", "website"]);
@@ -505265,6 +505548,7 @@ function getSimplePrompt() {
     `Read files: Use ${FILE_READ_TOOL_NAME} (NOT cat/head/tail)`,
     `Edit files: Use ${FILE_EDIT_TOOL_NAME} (NOT sed/awk)`,
     `Write files: Use ${FILE_WRITE_TOOL_NAME} (NOT echo >/cat <<EOF)`,
+    `Create reports/HTML/JSON/Markdown files: Use ${FILE_WRITE_TOOL_NAME} for the full content (NOT eval, node -e, python -c, echo, or printf with large inline strings)`,
     "Communication: Output text directly (NOT echo/printf)"
   ];
   const avoidCommands = embedded ? "`cat`, `head`, `tail`, `sed`, `awk`, or `echo`" : "`find`, `grep`, `cat`, `head`, `tail`, `sed`, `awk`, or `echo`";
@@ -505297,6 +505581,7 @@ function getSimplePrompt() {
     "Try to maintain your current working directory throughout the session by using absolute paths and avoiding usage of `cd`. You may use `cd` if the User explicitly requests it.",
     `You may specify an optional timeout in milliseconds (up to ${getMaxTimeoutMs2()}ms / ${getMaxTimeoutMs2() / 60000} minutes). By default, your command will timeout after ${getDefaultTimeoutMs2()}ms (${getDefaultTimeoutMs2() / 60000} minutes).`,
     ...backgroundNote !== null ? [backgroundNote] : [],
+    "Do not compose large HTML, Markdown, or JSON artifacts through shell inline strings. If the content spans multiple lines or contains document markup like <!DOCTYPE html>, use the Write tool to create the file, then use Bash only to inspect or validate it.",
     "When issuing multiple commands:",
     multipleCommandsSubitems,
     "For git commands:",
@@ -505456,6 +505741,18 @@ function isSilentBashCommand(command8) {
   }
   return hasNonFallbackCommand;
 }
+function getInlineArtifactCommandBlockReason(command8) {
+  const lower = command8.toLowerCase();
+  const usesInlineExecution = /\beval\b/.test(lower) || /\b(?:node|bun|python3?|perl|ruby)\s+(?:-[a-z]*e|--eval|--print)\b/.test(lower) || /^\s*(?:echo|printf)\b/.test(lower);
+  if (!usesInlineExecution)
+    return null;
+  const hasArtifactMarker = /<!doctype\s+html|<html[\s>]|<\/html>|<body[\s>]|<script[\s>]|<style[\s>]|```/i.test(command8);
+  const quoteCount = (command8.match(/["']/g) ?? []).length;
+  const looksLikeLargeInlineArtifact = command8.length > 1200 && quoteCount > 20;
+  if (!hasArtifactMarker && !looksLikeLargeInlineArtifact)
+    return null;
+  return `Blocked: large HTML, Markdown, or JSON artifacts should be written with ${FILE_WRITE_TOOL_NAME}, not composed through Bash/eval/inline code. Use ${FILE_WRITE_TOOL_NAME} for the file content, then use Bash only for validation commands.`;
+}
 function isAutobackgroundingAllowed2(command8) {
   const parts = splitCommand_DEPRECATED(command8);
   if (parts.length === 0)
@@ -505758,6 +506055,7 @@ var init_BashTool = __esm(() => {
   init_readOnlyValidation2();
   init_sedEditParser();
   init_shouldUseSandbox();
+  init_prompt4();
   init_UI3();
   init_utils5();
   jsx_runtime336 = __toESM(require_jsx_runtime(), 1);
@@ -505929,6 +506227,14 @@ For commands that are harder to parse at a glance (piped commands, obscure flags
       return `Running ${desc}`;
     },
     async validateInput(input2) {
+      const inlineArtifactBlockReason = getInlineArtifactCommandBlockReason(input2.command);
+      if (inlineArtifactBlockReason !== null) {
+        return {
+          result: false,
+          message: inlineArtifactBlockReason,
+          errorCode: 12
+        };
+      }
       if (false) {}
       return {
         result: true
@@ -515677,7 +515983,7 @@ var init_filesystem = __esm(() => {
   });
   getBundledSkillsRoot = memoize_default(function getBundledSkillsRoot2() {
     const nonce = randomBytes18(16).toString("hex");
-    return join146(getClaudeTempDir(), "bundled-skills", "1.0.0-alpha.23", nonce);
+    return join146(getClaudeTempDir(), "bundled-skills", "1.0.0-alpha.25", nonce);
   });
   getResolvedWorkingDirPaths = memoize_default(getPathsForPermissionCheck);
 });
@@ -521607,7 +521913,7 @@ function computeFingerprintFromMessages(messages) {
 }
 var AGENT_OS_VERSION5, FINGERPRINT_SALT = "59cf53e54c78";
 var init_fingerprint = __esm(() => {
-  AGENT_OS_VERSION5 = typeof MACRO !== "undefined" ? "1.0.0-alpha.23" : "dev";
+  AGENT_OS_VERSION5 = typeof MACRO !== "undefined" ? "1.0.0-alpha.25" : "dev";
 });
 
 // src/services/compact/apiMicrocompact.ts
@@ -523361,7 +523667,7 @@ async function sideQuery(opts) {
     betas.push(STRUCTURED_OUTPUTS_BETA_HEADER);
   }
   const messageText = extractFirstUserMessageText(messages);
-  const fingerprint = computeFingerprint(messageText, "1.0.0-alpha.23");
+  const fingerprint = computeFingerprint(messageText, "1.0.0-alpha.25");
   const attributionHeader = getAttributionHeader(fingerprint);
   const systemBlocks = [
     attributionHeader ? { type: "text", text: attributionHeader } : null,
@@ -525280,7 +525586,7 @@ function appendToLog(path24, message) {
     cwd: getFsImplementation().cwd(),
     userType: process.env.USER_TYPE,
     sessionId: getSessionId(),
-    version: "1.0.0-alpha.23"
+    version: "1.0.0-alpha.25"
   };
   getLogWriter(path24).write(messageWithTimestamp);
 }
@@ -528258,7 +528564,7 @@ function getTelemetryAttributes() {
     attributes["session.id"] = sessionId;
   }
   if (shouldIncludeAttribute("OTEL_METRICS_INCLUDE_VERSION")) {
-    attributes["app.version"] = "1.0.0-alpha.23";
+    attributes["app.version"] = "1.0.0-alpha.25";
   }
   if (envDynamic.terminal) {
     attributes["terminal.type"] = envDynamic.terminal;
@@ -538402,7 +538708,7 @@ function buildSystemInitMessage(inputs) {
     slash_commands: inputs.commands.filter((c5) => c5.userInvocable !== false).map((c5) => c5.name),
     apiKeySource: getAnthropicApiKeyWithSource().source,
     betas: getSdkBetas(),
-    claude_code_version: "1.0.0-alpha.23",
+    claude_code_version: "1.0.0-alpha.25",
     output_style: outputStyle2,
     agents: inputs.agents.map((agent) => agent.agentType),
     skills: inputs.skills.filter((s2) => s2.userInvocable !== false).map((skill) => skill.name),
@@ -560871,7 +561177,7 @@ function buildStatusLineCommandInput(permissionMode, exceeds200kTokens, settings
       project_dir: getOriginalCwd(),
       added_dirs: addedDirs
     },
-    version: "1.0.0-alpha.23",
+    version: "1.0.0-alpha.25",
     output_style: {
       name: outputStyleName
     },
@@ -584227,7 +584533,7 @@ function WelcomeV2() {
             dimColor: true,
             children: [
               "v",
-              "1.0.0-alpha.23",
+              "1.0.0-alpha.25",
               " "
             ]
           })
@@ -584427,7 +584733,7 @@ function WelcomeV2() {
           dimColor: true,
           children: [
             "v",
-            "1.0.0-alpha.23",
+            "1.0.0-alpha.25",
             " "
           ]
         })
@@ -584653,7 +584959,7 @@ function AppleTerminalWelcomeV2(t0) {
         dimColor: true,
         children: [
           "v",
-          "1.0.0-alpha.23",
+          "1.0.0-alpha.25",
           " "
         ]
       });
@@ -584907,7 +585213,7 @@ function AppleTerminalWelcomeV2(t0) {
       dimColor: true,
       children: [
         "v",
-        "1.0.0-alpha.23",
+        "1.0.0-alpha.25",
         " "
       ]
     });
@@ -586373,7 +586679,7 @@ function completeOnboarding() {
   saveGlobalConfig((current) => ({
     ...current,
     hasCompletedOnboarding: true,
-    lastOnboardingVersion: "1.0.0-alpha.23"
+    lastOnboardingVersion: "1.0.0-alpha.25"
   }));
 }
 function showDialog(root3, renderer) {
@@ -594836,8 +595142,8 @@ async function getEnvLessBridgeConfig() {
 }
 async function checkEnvLessBridgeMinVersion() {
   const cfg = await getEnvLessBridgeConfig();
-  if (cfg.min_version && lt("1.0.0-alpha.23", cfg.min_version)) {
-    return `Your version of Agent-OS (${"1.0.0-alpha.23"}) is too old for Remote Control.
+  if (cfg.min_version && lt("1.0.0-alpha.25", cfg.min_version)) {
+    return `Your version of Agent-OS (${"1.0.0-alpha.25"}) is too old for Remote Control.
 Version ${cfg.min_version} or higher is required. Run \`agent-os update\` to update.`;
   }
   return null;
@@ -595310,7 +595616,7 @@ async function initBridgeCore(params) {
   const rawApi = createBridgeApiClient({
     baseUrl,
     getAccessToken,
-    runnerVersion: "1.0.0-alpha.23",
+    runnerVersion: "1.0.0-alpha.25",
     onDebug: logForDebugging,
     onAuth401,
     getTrustedDeviceToken
@@ -600989,7 +601295,7 @@ async function startMCPServer(cwd3, debug2, verbose) {
   setCwd(cwd3);
   const server = new Server({
     name: "claude/tengu",
-    version: "1.0.0-alpha.23"
+    version: "1.0.0-alpha.25"
   }, {
     capabilities: {
       tools: {}
@@ -606500,7 +606806,7 @@ ${customInstructions}` : customInstructions;
       }
     }
     logForDiagnosticsNoPII("info", "started", {
-      version: "1.0.0-alpha.23",
+      version: "1.0.0-alpha.25",
       is_native_binary: isInBundledMode()
     });
     registerCleanup(async () => {
@@ -607292,7 +607598,7 @@ Usage: agent-os --remote "your task description"`, () => gracefulShutdown(1));
         pendingHookMessages
       }, renderAndRun);
     }
-  }).version("1.0.0-alpha.23 (Agent-OS)", "-v, --version", "Output the version number");
+  }).version("1.0.0-alpha.25 (Agent-OS)", "-v, --version", "Output the version number");
   program2.option("-w, --worktree [name]", "Create a new git worktree for this session (optionally specify a name)");
   program2.option("--tmux", "Create a tmux session for the worktree (requires --worktree). Uses iTerm2 native panes when available; use --tmux=classic for traditional tmux.");
   if (canUserConfigureAdvisor()) {
@@ -609130,7 +609436,7 @@ if (false) {}
 async function main2() {
   const args = process.argv.slice(2);
   if (args.length === 1 && (args[0] === "--version" || args[0] === "-v" || args[0] === "-V")) {
-    console.log(`${"1.0.0-alpha.23"} (Agent-OS)`);
+    console.log(`${"1.0.0-alpha.25"} (Agent-OS)`);
     return;
   }
   const {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@vionwilliams/agent-os",
-  "version": "1.0.0-alpha.23",
+  "version": "1.0.0-alpha.25",
   "description": "Agent-OS — 智能任务通用工作系统：多模型路由、意图编排、多智能体协调、DataHub 与可编程面板。",
   "type": "module",
   "private": false,