@xcanwin/manyoyo 8.6.7 → 8.6.9

package/lib/web/server.js

@@ -12,7 +12,10 @@ const JSON5 = require('json5');
 const { buildContainerRunArgs, hasNetworkArg } = require('../container-run');
 const { buildContainerIntegration, mergeIntegration } = require('../plugin');
 const { applyAptMirror } = require('../mirrors');
+const { BUILTIN_AGENT_INSTRUCTIONS, buildAgentInstructions, toTomlBasicString } = require('../agent-instructions');
 const containerState = require('../container-state');
+const sessionMeta = require('./session-meta');
+const gitChanges = require('./git-changes');
 const { buildExecArgs, resolveContainerId, readMergedEnv } = require('../container-exec');
 const { createNetworkManager, NETWORK_NAME } = require('../container-network');
 const { normalizePolicy, isUnrestricted: isUnrestrictedPolicy } = require('../network-policy');
@@ -34,7 +37,7 @@ const { resolveRuntimeConfig } = require('../runtime-resolver');
 const { AGENT_ENV_SCHEMA } = require('../init-config');
 const { ensureImagePresent, pullImageProcess } = require('../image-pull');
 const { waitForImport } = require('../offline-import');
-const { baseRawOf, buildAgentConfigRaw, buildPasswordConfigRaw, shouldWriteMirrors, buildMirrorsConfigRaw } = require('../setup-config');
+const { baseRawOf, buildAgentConfigRaw, buildPasswordConfigRaw, shouldWriteMirrors, buildMirrorsConfigRaw, buildAgentInstructionsConfigRaw } = require('../setup-config');
 const { listSetupAgents, getConfiguredAgents, buildAgentRunProfile, classifyConnectionResult, redactSecrets, validateSetupPassword, listMirrorPresets } = require('../setup');
 const { applyDoctorFixes } = require('../doctor');
 const { writeConfigFileSecure } = require('../secure-file');
@@ -96,6 +99,7 @@ const NATIVE_SESSION_RESUME_PROGRAMS = new Set(['claude', 'codex', 'opencode']);
 const WEB_FILE_PREVIEW_MAX_BYTES = 512 * 1024;
 const WEB_FILE_EDIT_MAX_BYTES = 2 * 1024 * 1024;
 const WEB_FILE_RAW_MAX_CONCURRENT_PER_CONTAINER = 4;
+const WEB_FS_LIST_MAX_LIMIT = 200;
 const IMAGE_EXTENSION_CONTENT_TYPES = {
     '.png': 'image/png',
     '.jpg': 'image/jpeg',
@@ -221,7 +225,11 @@ function createEmptyWebAgentSession(agentId, agentName) {
         usageTotal: null,
         model: '',
         queue: [],
-        queuePaused: false
+        queuePaused: false,
+        title: '',
+        firstPrompt: '',
+        pinned: false,
+        slashCommands: null
     };
 }
 
@@ -275,7 +283,23 @@ function normalizeWebAgentSessionRecord(agentId, rawAgent) {
         usageTotal: normalizeWebAgentUsageTotal(source.usageTotal),
         model: normalizeStoredAgentModelValue(source.model),
         queue: agentQueue.normalizeStoredQueue(source.queue),
-        queuePaused: source.queuePaused === true
+        queuePaused: source.queuePaused === true,
+        title: sessionMeta.normalizeTitle(source.title),
+        firstPrompt: sessionMeta.normalizeFirstPrompt(source.firstPrompt),
+        pinned: source.pinned === true,
+        slashCommands: normalizeStoredSlashCommands(source.slashCommands)
+    };
+}
+
+// claude 每次运行开头的 init 事件里带的命令列表：all 是全部，skills 是其中的 skill，terminal 是只在终端里可用的
+function normalizeStoredSlashCommands(value) {
+    if (!value || typeof value !== 'object' || Array.isArray(value)) {
+        return null;
+    }
+    return {
+        all: sessionMeta.normalizeSlashCommands(value.all),
+        skills: sessionMeta.normalizeSlashCommands(value.skills),
+        terminal: sessionMeta.normalizeSlashCommands(value.terminal)
     };
 }
 
@@ -570,6 +594,10 @@ function appendWebSessionMessage(webHistoryDir, sessionRefOrContainerName, role,
     if (!agentSession.createdAt) {
         agentSession.createdAt = timestamp;
     }
+    // 首条 Agent 对话消息只记一次，作为没有标题时的会话名（消息会被裁剪，不能现算）
+    if (role === 'user' && extra.mode !== 'command' && !agentSession.firstPrompt) {
+        agentSession.firstPrompt = sessionMeta.normalizeFirstPrompt(content);
+    }
     agentSession.messages.push(message);
 
     if (agentSession.messages.length > WEB_HISTORY_MAX_MESSAGES) {
@@ -835,6 +863,44 @@ function stripAnsi(text) {
     return text.replace(/\x1b\[[0-9;]*m/g, '');
 }
 
+// Agent 原始输出只保留开头 AGENT_RAW_OUTPUT_MAX_CHARS（会话 id 在开头），另外保留一份结尾：
+// 最终回复和用量都在输出末尾，超过上限后只看开头会把截断点之前的某条中间说明当成最终回复
+const AGENT_RAW_OUTPUT_MAX_CHARS = 32 * 1024 * 1024;
+const AGENT_OUTPUT_TAIL_MAX_CHARS = 8 * 1024 * 1024;
+// 最终回复的上限：远大于正常回复，只挡住把整个文件当回复打出来的极端情况
+const AGENT_FINAL_REPLY_MAX_CHARS = 1000000;
+
+function createTailBuffer(maxChars) {
+    let parts = [];
+    let size = 0;
+    return {
+        push(text) {
+            if (!text) return;
+            parts.push(text);
+            size += text.length;
+            if (size > maxChars * 2) {
+                const joined = parts.join('').slice(-maxChars);
+                parts = [joined];
+                size = joined.length;
+            }
+        },
+        text() {
+            return parts.join('').slice(-maxChars);
+        }
+    };
+}
+
+// 结束后的回复文本：结构化输出里提取到的最终回复按 AGENT_FINAL_REPLY_MAX_CHARS（远大于正常回复）保留；
+// 提取不到才退回原始输出，原始输出按 WEB_OUTPUT_MAX_CHARS 截断
+function resolveAgentFinalOutput(agentProgram, { stdout, stdoutTruncated, stdoutTail, raw }) {
+    const extracted = (stdoutTruncated ? extractAgentMessageFromStructuredOutput(agentProgram, stdoutTail) : '')
+        || extractAgentMessageFromStructuredOutput(agentProgram, stdout);
+    if (extracted) {
+        return clipText(stripAnsi(extracted).trim(), AGENT_FINAL_REPLY_MAX_CHARS);
+    }
+    return clipText(stripAnsi(raw).trim() || '(无输出)');
+}
+
 function clipText(text, maxChars = WEB_OUTPUT_MAX_CHARS) {
     if (typeof text !== 'string') return '';
     if (text.length <= maxChars) return text;
@@ -873,7 +939,8 @@ function quoteBashSingleValue(value) {
 function renderAgentPromptCommand(template, prompt) {
     const templateText = normalizeAgentPromptCommandTemplate(template, 'agentPromptCommand');
     const safePrompt = quoteBashSingleValue(prompt);
-    return templateText.replace(/\{prompt\}/g, safePrompt);
+    // 用函数返回替换值：字符串形式会把提示词里的 $' $` $& 当成替换模式
+    return templateText.replace(/\{prompt\}/g, () => safePrompt);
 }
 
 function buildCodexAgentExecCommand(template, prompt, options = {}) {
@@ -891,12 +958,17 @@ function buildCodexAgentExecCommand(template, prompt, options = {}) {
         const injectedFlags = hasJson ? '' : ' --json';
         const hasModel = /(?:^|\s)(?:-m|--model)(?:\s|$)/.test(suffix);
         const modelFlag = model && !hasModel ? ` --model ${quoteBashSingleValue(model)}` : '';
+        // 环境说明：模板里已经写了 developer_instructions 就以用户的为准
+        const instructions = options && typeof options.instructions === 'string' ? options.instructions : '';
+        const instructionsFlag = instructions && !/developer_instructions/.test(suffix)
+            ? ` -c ${quoteBashSingleValue(`developer_instructions=${toTomlBasicString(instructions)}`)}`
+            : '';
         if (sessionId) {
             const promptIndex = suffix.indexOf('{prompt}');
             const resumeSuffix = `${suffix.slice(0, promptIndex)}${quoteBashSingleValue(sessionId)} ${suffix.slice(promptIndex)}`;
-            codexTemplate = `${prefix}codex exec resume${injectedFlags}${modelFlag}${resumeSuffix}`;
+            codexTemplate = `${prefix}codex exec resume${injectedFlags}${modelFlag}${instructionsFlag}${resumeSuffix}`;
         } else {
-            codexTemplate = `${prefix}codex exec${injectedFlags}${modelFlag}${suffix}`;
+            codexTemplate = `${prefix}codex exec${injectedFlags}${modelFlag}${instructionsFlag}${suffix}`;
         }
     }
     return codexTemplate === templateText
@@ -910,10 +982,12 @@ function prependAgentFlags(commandText, matchPattern, flagSpecs) {
         return String(commandText || '');
     }
     const prefix = matched[1] || '';
-    let suffix = matched[matched.length - 1] || '';
+    // “模板里是否已经写了这个参数”只看原模板：插进去的参数值（比如环境说明正文里的 “-r”）不能让后面的参数被跳过
+    const original = matched[matched.length - 1] || '';
+    let suffix = original;
     for (let i = flagSpecs.length - 1; i >= 0; i -= 1) {
         const spec = flagSpecs[i];
-        if (!spec || !spec.flag || !(spec.pattern instanceof RegExp) || spec.pattern.test(suffix)) {
+        if (!spec || !spec.flag || !(spec.pattern instanceof RegExp) || spec.pattern.test(original)) {
             continue;
         }
         suffix = ` ${spec.flag}${suffix}`;
@@ -940,6 +1014,14 @@ function buildClaudeAgentExecCommand(template, prompt, options = {}) {
     if (model) {
         flagSpecs.push({ flag: `--model ${quoteBashSingleValue(model)}`, pattern: /(?:^|\s)--model(?:\s|$)/ });
     }
+    // 环境说明：追加在内置系统提示之后；模板里已经写了 --append-system-prompt(-file) 就以用户的为准
+    const instructions = options && typeof options.instructions === 'string' ? options.instructions : '';
+    if (instructions) {
+        flagSpecs.push({
+            flag: `--append-system-prompt ${quoteBashSingleValue(instructions)}`,
+            pattern: /(?:^|\s)--append-system-prompt(?:-file)?(?:\s|$)/
+        });
+    }
     // 子 Agent 说的话和思考默认不转发（v2.1.211+ 才有 --forward-subagent-text，旧版本不认这个参数会直接报错）。
     // 'auto'：在容器里随命令探测（claude --help 约 50ms），支持就展开成这个参数、不支持展开成空；true：直接加。
     // 'auto' 的参数放在整条命令末尾，不改变前面已有参数的相对顺序
@@ -997,14 +1079,20 @@ function buildOpenCodeAgentExecCommand(template, prompt, options = {}) {
     if (model) {
         flagSpecs.push({ flag: `--model ${quoteBashSingleValue(model)}`, pattern: /(?:^|\s)(?:-m|--model)(?:\s|$)/ });
     }
-    const opencodeTemplate = prependAgentFlags(
-        templateText,
-        /^(((?:(?:[A-Za-z_][A-Za-z0-9_]*=)(?:"(?:\\.|[^"])*"|'(?:\\.|[^'])*'|[^\s]+)\s+)*)opencode\b.*?\s+run\b)(.*)$/,
-        flagSpecs
-    );
-    return opencodeTemplate === templateText
+    const opencodePattern = /^(((?:(?:[A-Za-z_][A-Za-z0-9_]*=)(?:"(?:\\.|[^"])*"|'(?:\\.|[^'])*'|[^\s]+)\s+)*)opencode\b.*?\s+run\b)(.*)$/;
+    const opencodeTemplate = prependAgentFlags(templateText, opencodePattern, flagSpecs);
+    const rendered = opencodeTemplate === templateText
         ? renderAgentPromptCommand(templateText, prompt)
         : renderAgentPromptCommand(opencodeTemplate, prompt);
+    // 环境说明：opencode 的 instructions 只认文件路径。OPENCODE_CONFIG_CONTENT 会与用户自己的配置合并
+    //（instructions 数组拼接，实测 1.19.3），用户已经设置了这个变量或在模板里写了它时不动
+    const instructions = options && typeof options.instructions === 'string' ? options.instructions : '';
+    if (!instructions || !opencodePattern.test(templateText) || /OPENCODE_CONFIG_CONTENT/.test(templateText)) {
+        return rendered;
+    }
+    const file = '/tmp/manyoyo-agent-instructions.md';
+    const content = quoteBashSingleValue(JSON.stringify({ instructions: [file] }));
+    return `if [ -z "\${OPENCODE_CONFIG_CONTENT:-}" ]; then printf '%s' ${quoteBashSingleValue(instructions)} > ${file} && export OPENCODE_CONFIG_CONTENT=${content}; fi; ${rendered}`;
 }
 
 function buildWebAgentExecCommand(template, prompt, agentProgram, options = {}) {
@@ -1062,6 +1150,11 @@ function extractClaudeAgentMessage(text) {
     let lastMessage = '';
     for (const rawLine of String(text || '').split('\n')) {
         const payload = parseJsonObjectLine(rawLine);
+        // result 事件带权威的最终文本；后台任务场景结尾有两个 result（第一个是中间结论），取最后一个
+        if (payload && payload.type === 'result' && typeof payload.result === 'string' && payload.result.trim()) {
+            lastMessage = payload.result.trim();
+            continue;
+        }
         if (!payload || payload.type !== 'assistant' || pickFirstString(payload.parent_tool_use_id)) {
             continue;
         }
@@ -1171,6 +1264,23 @@ function extractClaudeSessionId(text) {
     return '';
 }
 
+function extractClaudeInitSlashCommands(text) {
+    for (const rawLine of String(text || '').split('\n')) {
+        const payload = parseJsonObjectLine(rawLine);
+        if (payload && payload.type === 'system' && payload.subtype === 'init') {
+            if (!Array.isArray(payload.slash_commands)) {
+                return null;
+            }
+            return normalizeStoredSlashCommands({
+                all: payload.slash_commands,
+                skills: payload.skills,
+                terminal: payload.terminal_slash_commands
+            });
+        }
+    }
+    return null;
+}
+
 function extractOpenCodeSessionId(text) {
     for (const rawLine of String(text || '').split('\n')) {
         const payload = parseJsonObjectLine(rawLine);
@@ -2270,10 +2380,14 @@ async function prepareWebAgentExecution(ctx, state, sessionRef, prompt) {
     const effectivePrompt = resumeSucceeded
         ? prompt
         : buildAgentPromptWithHistory(agentSession, prompt);
+    // 环境说明每次执行时现读配置：改了设置不用重建容器；运行配置名记在创建时的快照里（旧会话没有，用全局配置）
+    const configSnapshot = readWebConfigSnapshot(state.webConfigPath);
+    const runName = history.runtimeSnapshot && typeof history.runtimeSnapshot.run === 'string' ? history.runtimeSnapshot.run : '';
     const command = buildWebAgentExecCommand(effectiveTemplate, effectivePrompt, agentMeta.agentProgram, {
         sessionId: sessionIdForRun,
         model: agentSession.model || '',
-        forwardSubagentText: agentMeta.agentProgram === 'claude' ? 'auto' : false
+        forwardSubagentText: agentMeta.agentProgram === 'claude' ? 'auto' : false,
+        instructions: buildAgentInstructions(configSnapshot.parseError ? {} : configSnapshot.parsed, runName)
     });
     const contextMode = resumeSucceeded ? 'resume' : (hasPriorConversation ? 'history-injected' : 'first-turn');
 
@@ -2291,7 +2405,8 @@ async function prepareWebAgentExecution(ctx, state, sessionRef, prompt) {
 }
 
 function finalizeWebAgentExecution(state, sessionRef, agentSession, agentMeta, meta, result) {
-    const turnUsage = extractTurnUsage(agentMeta.agentProgram, result.stdout);
+    // 用量在输出末尾：原始输出超过上限时开头里没有它
+    const turnUsage = extractTurnUsage(agentMeta.agentProgram, result.stdoutTail || result.stdout);
     const replyMessage = appendWebSessionMessage(state.webHistoryDir, sessionRef, 'assistant', result.output, {
         exitCode: result.exitCode,
         mode: 'agent',
@@ -2313,10 +2428,66 @@ function finalizeWebAgentExecution(state, sessionRef, agentSession, agentMeta, m
     if (turnUsage) {
         patch.usageTotal = accumulateUsageTotal(agentSession.usageTotal, turnUsage);
     }
+    if (agentMeta.agentProgram === 'claude') {
+        const slashCommands = extractClaudeInitSlashCommands(result.stdout);
+        if (slashCommands) {
+            patch.slashCommands = slashCommands;
+        }
+    }
     patchWebAgentSessionState(state.webHistoryDir, sessionRef, patch);
     return replyMessage;
 }
 
+function resolveWebSessionWorkDir(state, sessionRef) {
+    const history = loadWebSessionHistory(state.webHistoryDir, sessionRef.containerName);
+    const applied = history.applied && typeof history.applied === 'object' ? history.applied : {};
+    return typeof applied.containerPath === 'string' && applied.containerPath ? applied.containerPath : '/';
+}
+
+async function readWebGitChanges(ctx, state, sessionRef) {
+    const result = await execCommandInWebContainer(
+        ctx,
+        sessionRef.containerName,
+        gitChanges.buildGitChangesCommand(resolveWebSessionWorkDir(state, sessionRef)),
+        { withEnv: false }
+    );
+    return gitChanges.parseGitChangesOutput(result.stdout);
+}
+
+// 每轮结束后在后台读一次 Agent 自己生成的标题（目前只有 claude 会写 ai-title，交互模式实测；
+// 其他 Agent 只用首条消息）。不阻塞本轮结果；读不到或失败都静默——每轮都会触发，属于高频路径，不写日志
+async function refreshWebAgentTitle(ctx, state, sessionRef, agentProgram) {
+    if (agentProgram !== 'claude') {
+        return '';
+    }
+    try {
+        const history = loadWebSessionHistory(state.webHistoryDir, sessionRef.containerName);
+        const agentSession = getWebAgentSession(history, sessionRef.agentId, { includeArchived: true });
+        const command = sessionMeta.buildClaudeTitleReadCommand(agentSession && agentSession.engineSessionId);
+        if (!command) {
+            return '';
+        }
+        const sessionId = agentSession.engineSessionId;
+        const result = await execCommandInWebContainer(ctx, sessionRef.containerName, command);
+        const title = sessionMeta.parseClaudeTitleOutput(result.stdout);
+        // 读标题期间 AGENT 可能被删除或换了引擎会话：写回前重新读一次，不在了就放弃（不能把它重新建出来）
+        const fresh = getWebAgentSession(
+            loadWebSessionHistory(state.webHistoryDir, sessionRef.containerName),
+            sessionRef.agentId,
+            { includeArchived: true }
+        );
+        if (!fresh || fresh.engineSessionId !== sessionId) {
+            return '';
+        }
+        if (title && title !== fresh.title) {
+            patchWebAgentSessionState(state.webHistoryDir, sessionRef, { title });
+        }
+        return title;
+    } catch (e) {
+        return '';
+    }
+}
+
 function appendWebAgentTraceMessage(webHistoryDir, sessionRefOrContainerName, content, extra = {}) {
     const text = String(content || '').trim();
     if (!text) {
@@ -2797,6 +2968,9 @@ function validateWebConfigShape(configObject) {
     if (hasOwn(config, 'agentPromptCommand')) {
         normalizeAgentPromptCommandTemplate(config.agentPromptCommand, 'agentPromptCommand');
     }
+    if (hasOwn(config, 'agentInstructions') && typeof config.agentInstructions !== 'string') {
+        throw new Error('agentInstructions 必须是字符串');
+    }
     if (hasOwn(config, 'runs')) {
         const runs = config.runs;
         if (runs !== undefined && (typeof runs !== 'object' || runs === null || Array.isArray(runs))) {
@@ -2807,6 +2981,9 @@ function validateWebConfigShape(configObject) {
             if (hasOwn(normalizedRun, 'agentPromptCommand')) {
                 normalizeAgentPromptCommandTemplate(normalizedRun.agentPromptCommand, `runs.${runName}.agentPromptCommand`);
             }
+            if (hasOwn(normalizedRun, 'agentInstructions') && typeof normalizedRun.agentInstructions !== 'string') {
+                throw new Error(`runs.${runName}.agentInstructions 必须是字符串`);
+            }
         });
     }
 }
@@ -3141,6 +3318,7 @@ function buildCreateRuntime(ctx, state, payload) {
         // 仅供服务端内部复用（如"创建相同配置容器"/"复制容器"），绝不能透传给任何对外响应字段，
         // 因为 env/volumes/ports 可能包含密钥原始值（对外响应不暴露它们）。
         runtimeSnapshot: {
+            run: runName || '',
             hostPath,
             containerPath,
             imageName,
@@ -3778,7 +3956,8 @@ async function execCommandInWebContainer(ctx, containerName, command, options =
             { stdio: ['ignore', 'pipe', 'pipe'] }
         );
 
-        const MAX_RAW_OUTPUT_CHARS = 32 * 1024 * 1024;
+        const MAX_RAW_OUTPUT_CHARS = ctx.agentRawOutputMaxChars || AGENT_RAW_OUTPUT_MAX_CHARS;
+        const stdoutTail = createTailBuffer(Math.min(MAX_RAW_OUTPUT_CHARS, AGENT_OUTPUT_TAIL_MAX_CHARS));
         let stdoutOutput = '';
         let stderrOutput = '';
         let stdoutTruncated = false;
@@ -3788,6 +3967,7 @@ async function execCommandInWebContainer(ctx, containerName, command, options =
             if (!chunk) return;
             const text = chunk.toString('utf-8');
             if (!text) return;
+            if (target.tail) target.tail.push(text);
             if (target.value.length >= MAX_RAW_OUTPUT_CHARS) {
                 target.truncated = true;
                 return;
@@ -3801,7 +3981,11 @@ async function execCommandInWebContainer(ctx, containerName, command, options =
             target.value += text;
         }
 
+        // 按流解码：逐块 toString 会把跨块的多字节字符（中文）拆成乱码
+        process.stdout.setEncoding('utf8');
+        process.stderr.setEncoding('utf8');
         process.stdout.on('data', chunk => appendChunk(chunk, {
+            tail: stdoutTail,
             get value() { return stdoutOutput; },
             set value(nextValue) { stdoutOutput = nextValue; },
             get truncated() { return stdoutTruncated; },
@@ -3820,13 +4004,14 @@ async function execCommandInWebContainer(ctx, containerName, command, options =
             const clippedStdout = stdoutTruncated ? `${stdoutOutput}\n...[stdout-truncated]` : stdoutOutput;
             const clippedStderr = stderrTruncated ? `${stderrOutput}\n...[stderr-truncated]` : stderrOutput;
             const clippedRaw = `${clippedStdout}${clippedStdout && clippedStderr ? '\n' : ''}${clippedStderr}`;
-            const extractedAgentMessage = extractAgentMessageFromStructuredOutput(agentProgram, clippedStdout);
-            const cleanOutputSource = extractedAgentMessage || clippedRaw;
-            const output = clipText(stripAnsi(cleanOutputSource).trim() || '(无输出)');
+            // 结尾只在开头被截断时才需要（拼接最多 16MB，只算一次）
+            const tailText = stdoutTruncated ? stdoutTail.text() : '';
+            const output = resolveAgentFinalOutput(agentProgram, { stdout: clippedStdout, stdoutTruncated, stdoutTail: tailText, raw: clippedRaw });
             resolve({
                 exitCode,
                 output,
                 stdout: clippedStdout,
+                ...(stdoutTruncated ? { stdoutTail: tailText } : {}),
                 stderr: clippedStderr
             });
         });
@@ -3885,13 +4070,19 @@ async function execJsonCommandInWebContainer(ctx, containerName, command) {
     }
 }
 
-function buildContainerFileListCommand(requestedPath) {
+// options.limit / options.prefix 供输入框 @ 补全用：先按名字前缀过滤、按“目录在前 + 名字”排序后只取前 limit 项，
+// 只对这些项做 lstat（大目录里全量 lstat 才是慢的部分）
+function buildContainerFileListCommand(requestedPath, options = {}) {
+    const limit = Number.isInteger(options.limit) && options.limit > 0 ? options.limit : 0;
+    const prefix = typeof options.prefix === 'string' ? options.prefix.toLowerCase() : '';
     return buildWebContainerNodeCommand(`
 // __MANYOYO_FS_LIST__
 const fs = require('fs');
 const path = require('path');
 
 const requestedPath = ${JSON.stringify(String(requestedPath || '/'))};
+const limit = ${JSON.stringify(limit)};
+const prefix = ${JSON.stringify(prefix)};
 
 try {
     const realPath = fs.realpathSync(requestedPath);
@@ -3902,7 +4093,20 @@ try {
 
     const root = path.parse(realPath).root;
     const parentPath = realPath === root ? '' : path.dirname(realPath);
-    const entries = fs.readdirSync(realPath, { withFileTypes: true })
+    let dirents = fs.readdirSync(realPath, { withFileTypes: true });
+    if (prefix) {
+        dirents = dirents.filter(entry => entry.name.toLowerCase().startsWith(prefix));
+    }
+    let truncated = false;
+    if (limit > 0 && dirents.length > limit) {
+        dirents.sort((a, b) => {
+            if (a.isDirectory() !== b.isDirectory()) return a.isDirectory() ? -1 : 1;
+            return a.name.localeCompare(b.name, 'zh-CN');
+        });
+        dirents = dirents.slice(0, limit);
+        truncated = true;
+    }
+    const entries = dirents
         .map(entry => {
             const fullPath = path.join(realPath, entry.name);
             let itemStat = null;
@@ -3951,7 +4155,8 @@ try {
     process.stdout.write(JSON.stringify({
         path: realPath,
         parentPath,
-        entries
+        entries,
+        ...(truncated ? { truncated: true } : {})
     }));
 } catch (e) {
     process.stdout.write(JSON.stringify({
@@ -4230,7 +4435,8 @@ async function execAgentInWebContainerStream(ctx, state, sessionRefOrContainerNa
     }
 
     return await new Promise((resolve, reject) => {
-        const MAX_RAW_OUTPUT_CHARS = 32 * 1024 * 1024;
+        const MAX_RAW_OUTPUT_CHARS = ctx.agentRawOutputMaxChars || AGENT_RAW_OUTPUT_MAX_CHARS;
+        const stdoutTail = createTailBuffer(Math.min(MAX_RAW_OUTPUT_CHARS, AGENT_OUTPUT_TAIL_MAX_CHARS));
         let stdoutOutput = '';
         let stderrOutput = '';
         let stdoutTruncated = false;
@@ -4245,6 +4451,7 @@ async function execAgentInWebContainerStream(ctx, state, sessionRefOrContainerNa
             if (!chunk) return;
             const text = chunk.toString('utf-8');
             if (!text) return;
+            if (target.tail) target.tail.push(text);
             if (target.value.length >= MAX_RAW_OUTPUT_CHARS) {
                 target.truncated = true;
                 return;
@@ -4325,8 +4532,12 @@ async function execAgentInWebContainerStream(ctx, state, sessionRefOrContainerNa
             return pending;
         }
 
+        // 按流解码：逐块 toString 会把跨块的多字节字符（中文）拆成乱码
+        process.stdout.setEncoding('utf8');
+        process.stderr.setEncoding('utf8');
         process.stdout.on('data', chunk => {
             appendChunk(chunk, {
+                tail: stdoutTail,
                 get value() { return stdoutOutput; },
                 set value(nextValue) { stdoutOutput = nextValue; },
                 get truncated() { return stdoutTruncated; },
@@ -4364,13 +4575,14 @@ async function execAgentInWebContainerStream(ctx, state, sessionRefOrContainerNa
             const clippedStdout = stdoutTruncated ? `${stdoutOutput}\n...[stdout-truncated]` : stdoutOutput;
             const clippedStderr = stderrTruncated ? `${stderrOutput}\n...[stderr-truncated]` : stderrOutput;
             const clippedRaw = `${clippedStdout}${clippedStdout && clippedStderr ? '\n' : ''}${clippedStderr}`;
-            const extractedAgentMessage = extractAgentMessageFromStructuredOutput(agentProgram, clippedStdout);
-            const cleanOutputSource = extractedAgentMessage || clippedRaw;
-            const output = clipText(stripAnsi(cleanOutputSource).trim() || '(无输出)');
+            // 结尾只在开头被截断时才需要（拼接最多 16MB，只算一次）
+            const tailText = stdoutTruncated ? stdoutTail.text() : '';
+            const output = resolveAgentFinalOutput(agentProgram, { stdout: clippedStdout, stdoutTruncated, stdoutTail: tailText, raw: clippedRaw });
             resolve({
                 exitCode,
                 output,
                 stdout: clippedStdout,
+                ...(stdoutTruncated ? { stdoutTail: tailText } : {}),
                 // 真实的 claude 收到 SIGINT 会正常收尾、退出码为 0（L3 实测）：发过信号就算被打断，不能只看退出码
                 interrupted: runState.stopping === true && (exitCode !== 0 || runState.signaled === true)
             });
@@ -5069,6 +5281,7 @@ async function runWebAgentStreamTurn(ctx, state, sessionRef, prompt, clientMessa
             resumeError,
             engineSessionId
         }, result);
+        void refreshWebAgentTitle(ctx, state, sessionRef, agentMeta.agentProgram);
         emitStreamEvent({
             type: 'result',
             exitCode: result.exitCode,
@@ -5393,6 +5606,9 @@ function buildSessionSummary(ctx, state, containerMap, sessionRef, preloadedHist
         agentId,
         agentName: agentSession.agentName,
         agentRemark: agentSession.remark || '',
+        agentTitle: agentSession.title || '',
+        firstPrompt: agentSession.firstPrompt || '',
+        pinned: agentSession.pinned === true,
         containerRemark: history.remark || '',
         status: containerInfo.status || 'history',
         image: containerInfo.image || '',
@@ -6165,6 +6381,51 @@ async function handleWebApi(req, res, pathname, ctx, state) {
                 });
             }
         },
+        {
+            // 系统设置“Agent 环境说明”：内置说明（只读）+ 全局配置里用户追加的说明
+            method: 'GET',
+            match: currentPath => currentPath === '/api/agent-instructions' ? [] : null,
+            handler: async () => {
+                const snapshot = readWebConfigSnapshot(state.webConfigPath);
+                const config = snapshot.parseError ? {} : snapshot.parsed;
+                sendJson(res, 200, {
+                    builtin: BUILTIN_AGENT_INSTRUCTIONS,
+                    custom: typeof config.agentInstructions === 'string' ? config.agentInstructions : ''
+                });
+            }
+        },
+        {
+            method: 'POST',
+            match: currentPath => currentPath === '/api/agent-instructions' ? [] : null,
+            handler: async () => {
+                const payload = toPlainObject(await readJsonBody(req));
+                if (typeof payload.custom !== 'string') {
+                    sendJson(res, 400, { error: 'custom 必须是字符串' });
+                    return;
+                }
+                const custom = payload.custom.slice(0, 4000);
+                const snapshot = readWebConfigSnapshot(state.webConfigPath);
+                if (snapshot.parseError) {
+                    sendJson(res, 400, { error: '当前配置解析失败，无法继续', detail: snapshot.parseError });
+                    return;
+                }
+                // 没写过、也没填内容时不动配置文件
+                if (!custom.trim() && !hasOwn(snapshot.parsed, 'agentInstructions')) {
+                    sendJson(res, 200, { saved: false, custom });
+                    return;
+                }
+                let nextRaw;
+                try {
+                    nextRaw = buildAgentInstructionsConfigRaw(baseRawOf(snapshot), custom);
+                    parseAndValidateConfigRaw(nextRaw);
+                } catch (e) {
+                    sendJson(res, 400, { error: '配置写入失败' });
+                    return;
+                }
+                writeConfigFileSecure(path.resolve(state.webConfigPath), nextRaw);
+                sendJson(res, 200, { saved: true, custom });
+            }
+        },
         {
             method: 'GET',
             match: currentPath => currentPath === '/api/config' ? [] : null,
@@ -6669,6 +6930,26 @@ async function handleWebApi(req, res, pathname, ctx, state) {
                 sendJson(res, 200, { name: buildWebSessionKey(sessionRef.containerName, sessionRef.agentId), remark });
             }
         },
+        {
+            method: 'POST',
+            match: currentPath => currentPath.match(/^\/api\/sessions\/([^/]+)\/agent-pin$/),
+            handler: async match => {
+                const sessionRef = getValidSessionRef(ctx, res, match[1]);
+                if (!sessionRef) {
+                    return;
+                }
+                const payload = await readJsonBody(req);
+                const pinned = payload.pinned === true;
+                const history = loadWebSessionHistory(state.webHistoryDir, sessionRef.containerName);
+                // 默认 AGENT 在还没有任何消息时也会出现在列表里（历史里还没有它的记录），允许置顶
+                if (sessionRef.agentId !== WEB_DEFAULT_AGENT_ID && !getWebAgentSession(history, sessionRef.agentId, { includeArchived: true })) {
+                    sendJson(res, 404, { error: 'AGENT 不存在' });
+                    return;
+                }
+                patchWebAgentSessionState(state.webHistoryDir, sessionRef, { pinned });
+                sendJson(res, 200, { name: buildWebSessionKey(sessionRef.containerName, sessionRef.agentId), pinned });
+            }
+        },
         {
             method: 'GET',
             match: currentPath => currentPath.match(/^\/api\/sessions\/([^/]+)\/messages$/),
@@ -6748,12 +7029,17 @@ async function handleWebApi(req, res, pathname, ctx, state) {
                 }
                 const requestUrl = new URL(req.url || '/api/sessions/x/fs/list', 'http://localhost');
                 const targetPath = String(requestUrl.searchParams.get('path') || '/').trim() || '/';
+                const limitParam = Number.parseInt(requestUrl.searchParams.get('limit') || '', 10);
+                const listOptions = {
+                    limit: Number.isInteger(limitParam) && limitParam > 0 ? Math.min(limitParam, WEB_FS_LIST_MAX_LIMIT) : 0,
+                    prefix: String(requestUrl.searchParams.get('prefix') || '').slice(0, 255)
+                };
 
                 await ensureWebContainer(ctx, state, sessionRef.containerName, sessionRef);
                 const payload = await execJsonCommandInWebContainer(
                     ctx,
                     sessionRef.containerName,
-                    buildContainerFileListCommand(targetPath)
+                    buildContainerFileListCommand(targetPath, listOptions)
                 );
                 if (payload && payload.error) {
                     sendJson(res, 400, { error: payload.error });
@@ -6982,6 +7268,68 @@ async function handleWebApi(req, res, pathname, ctx, state) {
                 sendJson(res, 200, { name: buildWebSessionKey(sessionRef.containerName, sessionRef.agentId), detail }, {}, { autoEtag: true });
             }
         },
+        {
+            // “改动”视图：工作目录所在 git 仓库的改动列表（按需请求，前端不轮询）
+            method: 'GET',
+            match: currentPath => currentPath.match(/^\/api\/sessions\/([^/]+)\/git\/changes$/),
+            handler: async match => {
+                const sessionRef = getValidSessionRef(ctx, res, match[1]);
+                if (!sessionRef) {
+                    return;
+                }
+                await ensureWebContainer(ctx, state, sessionRef.containerName, sessionRef);
+                const changes = await readWebGitChanges(ctx, state, sessionRef);
+                sendJson(res, 200, changes);
+            }
+        },
+        {
+            method: 'GET',
+            match: currentPath => currentPath.match(/^\/api\/sessions\/([^/]+)\/git\/diff$/),
+            handler: async match => {
+                const sessionRef = getValidSessionRef(ctx, res, match[1]);
+                if (!sessionRef) {
+                    return;
+                }
+                const requestUrl = new URL(req.url || '/', 'http://localhost');
+                const filePath = String(requestUrl.searchParams.get('path') || '');
+                if (!gitChanges.isAcceptableDiffPath(filePath)) {
+                    sendJson(res, 400, { error: '文件路径不合法' });
+                    return;
+                }
+                await ensureWebContainer(ctx, state, sessionRef.containerName, sessionRef);
+                // 只给改动列表里出现过的文件看 diff：路径由服务端重新取一次核对，不信任请求
+                const changes = await readWebGitChanges(ctx, state, sessionRef);
+                const entry = changes.files.find(file => file.path === filePath);
+                if (!entry || entry.status === 'untracked') {
+                    sendJson(res, 404, { error: '该文件不在改动列表里' });
+                    return;
+                }
+                const result = await execCommandInWebContainer(
+                    ctx,
+                    sessionRef.containerName,
+                    gitChanges.buildGitDiffCommand(resolveWebSessionWorkDir(state, sessionRef), filePath),
+                    { withEnv: false }
+                );
+                sendJson(res, 200, { path: filePath, ...gitChanges.parseGitDiffOutput(result.stdout) });
+            }
+        },
+        {
+            // 输入框里打 / 时的候选：只列实测能在 Web 端执行的（见 lib/web/session-meta.js）
+            method: 'GET',
+            match: currentPath => currentPath.match(/^\/api\/sessions\/([^/]+)\/slash-commands$/),
+            handler: async match => {
+                const sessionRef = getValidSessionRef(ctx, res, match[1]);
+                if (!sessionRef) {
+                    return;
+                }
+                const history = loadWebSessionHistory(state.webHistoryDir, sessionRef.containerName);
+                const agentSession = getWebAgentSession(history, sessionRef.agentId, { includeArchived: true });
+                sendJson(res, 200, {
+                    name: buildWebSessionKey(sessionRef.containerName, sessionRef.agentId),
+                    commands: sessionMeta.listUsableSlashCommands(agentSession && agentSession.slashCommands)
+                });
+            }
+        },
         {
             method: 'GET',
             match: currentPath => currentPath.match(/^\/api\/sessions\/([^/]+)\/models$/),
@@ -7221,6 +7569,7 @@ async function handleWebApi(req, res, pathname, ctx, state) {
                     resumeError,
                     engineSessionId
                 }, result);
+                void refreshWebAgentTitle(ctx, state, sessionRef, agentMeta.agentProgram);
                 sendJson(res, 200, {
                     exitCode: result.exitCode,
                     output: result.output,
@@ -7532,6 +7881,10 @@ async function startWebServer(options) {
         agentStopGraceMs: Number.isFinite(options.agentStopGraceMs) && options.agentStopGraceMs > 0
             ? options.agentStopGraceMs
             : agentRunControl.DEFAULT_GRACE_MS,
+        // Agent 原始输出保留开头的上限（测试可调小）；结尾另留一份，见 createTailBuffer
+        agentRawOutputMaxChars: Number.isFinite(options.agentRawOutputMaxChars) && options.agentRawOutputMaxChars > 0
+            ? options.agentRawOutputMaxChars
+            : AGENT_RAW_OUTPUT_MAX_CHARS,
         // 追加提示词“当前步骤结束后插入”等不到步骤边界时，退化成立即打断的等待时间
         agentStepFallbackMs: Number.isFinite(options.agentStepFallbackMs) && options.agentStepFallbackMs > 0
             ? options.agentStepFallbackMs
@@ -7821,6 +8174,8 @@ module.exports = {
     __testing: {
         prepareStructuredTraceEvents,
         buildClaudeAgentExecCommand,
+        buildWebAgentExecCommand,
+        buildContainerFileListCommand,
         extractContentDeltaFromPayload,
         extractAgentMessageFromStructuredOutput,
         appendWebSessionMessage,