pi-web-ui 0.76.0 → 0.78.0

package/dist/server/delegate-task.js

@@ -0,0 +1,174 @@
+/**
+ * delegate_task —— 结构化派单工具（oh-my-pi 委派协议的代码级硬化）。
+ *
+ * 背景：单纯靠提示词要求模型“派单写详细”是没有强制力的——模型糊弄也不会有
+ * 任何后果。本工具把六段式派单格式写进参数 schema + 服务端校验：缺段/太短/
+ * 模板不可用直接报错打回（错误文本留在上下文里，模型补全后重试）。
+ *
+ * 与 subagent_spawn 的关系：并存。subagent_spawn 是通用自由派单；delegate_task
+ * 是走 specialist 模板的结构化派单（agent 必填且必须是启用的模板）。执行体复用
+ * 同一条 spawn 通道（SubagentToolHost.spawnSubagent）：真子代理会话、白名单、
+ * 模型优先级、左栏徽标、等待/改向/停止全套机制都不用重写。
+ *
+ * 纯函数（validateDelegation / buildDelegationPrompt）可单测；语言按 ServerLang
+ * 切中英（section 头固定英文——子代理侧各模板早已习惯英文段头；面向派单者的
+ * 错误文本走 pick，key 缺失时自动回落英文，见 server/i18n.ts）。
+ */
+import { Type } from "typebox";
+import { defineTool } from "@earendil-works/pi-coding-agent";
+import { bilingual, pick } from "./i18n.js";
+import { subagentTitle } from "./subagents.js";
+/** 工具名（前端 ToolCallBlock 派单卡片靠它识别；改名需同步改前端）。 */
+export const DELEGATE_TOOL_NAME = "delegate_task";
+/** 各段最小长度（trim 后字符数）：TASK 必须具体，OUTCOME 必须可验收，其余段不许空着。 */
+const MIN_TASK = 20;
+const MIN_OUTCOME = 10;
+/** 六段的固定英文名（校验报错与拼装 prompt 共用，子代理侧无需翻译）。 */
+const SECTIONS = ["TASK", "EXPECTED OUTCOME", "REQUIRED TOOLS", "MUST DO", "MUST NOT DO", "CONTEXT"];
+function str(v) {
+    return typeof v === "string" ? v : "";
+}
+/** 把模型传进来的脏参数归一化（缺字段/错类型不抛错，交给校验报错）。 */
+export function normalizeDelegation(params) {
+    const p = (params && typeof params === "object" ? params : {});
+    return {
+        agent: str(p.agent).trim(),
+        task: str(p.task),
+        expected_outcome: str(p.expected_outcome),
+        required_tools: str(p.required_tools),
+        must_do: str(p.must_do),
+        must_not_do: str(p.must_not_do),
+        context: str(p.context),
+        model: str(p.model).trim() || undefined,
+    };
+}
+/**
+ * 校验派单输入；通过返回 null，否则返回直接回给模型的错误文本（已按 lang 选好语言）。
+ * `usableNames` = 当前可用模板名（host.listTemplates()，只含 enabled 的）。
+ */
+export function validateDelegation(input, usableNames, lang = "en") {
+    if (!input.agent || !usableNames.includes(input.agent)) {
+        const shown = usableNames.slice(0, 12).join(" · ") + (usableNames.length > 12 ? " · …" : "");
+        return pick(lang, `派单被驳回：模板 "${input.agent || "(空)"}" 不可用（不存在或已停用）。可用模板：${shown || "(无)"}。用 subagent_templates 查简介再选；不要编造模板名。`, `Delegation rejected: template "${input.agent || "(empty)"}" is unavailable (missing or disabled). Available templates: ${shown || "(none)"}. Use subagent_templates for descriptions; do not invent template names.`, "delegate.validate.agent", { agent: input.agent, available: shown });
+    }
+    const checks = [
+        { section: "TASK", text: input.task, min: MIN_TASK },
+        { section: "EXPECTED OUTCOME", text: input.expected_outcome, min: MIN_OUTCOME },
+        { section: "REQUIRED TOOLS", text: input.required_tools, min: 1 },
+        { section: "MUST DO", text: input.must_do, min: 1 },
+        { section: "MUST NOT DO", text: input.must_not_do, min: 1 },
+        { section: "CONTEXT", text: input.context, min: 1 },
+    ];
+    for (const c of checks) {
+        if (c.text.trim().length < c.min) {
+            return pick(lang, `派单被驳回：${c.section} 段太短（至少 ${c.min} 字，当前 ${c.text.trim().length} 字）。六段缺一不可、含糊不得：补全后重试，不要改用 subagent_spawn 绕过校验。`, `Delegation rejected: section ${c.section} is too short (minimum ${c.min} chars, got ${c.text.trim().length}). All six sections are mandatory and vague prompts fail: complete it and retry; do not bypass validation via subagent_spawn.`, "delegate.validate.short", { section: c.section, min: c.min });
+        }
+    }
+    return null;
+}
+/** 拼装发给子代理的标准六段 prompt（段头固定英文；收尾一行为汇报纪律）。 */
+export function buildDelegationPrompt(input, lang = "en") {
+    const firstLine = input.task.split("\n")[0]?.trim().slice(0, 80) || input.agent;
+    const closer = lang === "zh"
+        ? "汇报要简洁：做了什么、证据（路径/行号/输出）、遇到的问题、下一步建议。不扩大范围。"
+        : "Report back concisely: what was done, evidence (paths/line numbers/output), problems, suggested next steps. Do not expand scope.";
+    return [
+        `# ${input.agent}: ${firstLine}`,
+        ``,
+        `## TASK`,
+        input.task.trim(),
+        ``,
+        `## EXPECTED OUTCOME`,
+        input.expected_outcome.trim(),
+        ``,
+        `## REQUIRED TOOLS`,
+        input.required_tools.trim(),
+        ``,
+        `## MUST DO`,
+        input.must_do.trim(),
+        ``,
+        `## MUST NOT DO`,
+        input.must_not_do.trim(),
+        ``,
+        `## CONTEXT`,
+        input.context.trim(),
+        ``,
+        `---`,
+        closer,
+    ].join("\n");
+}
+const delegateSchema = Type.Object({
+    agent: Type.String({
+        description: bilingual("Specialist template to delegate to (e.g. oracle, metis, momus, explore, librarian, sisyphus-junior, multimodal-looker, review). Must be an enabled template — use subagent_templates to see descriptions and pick the domain match.", "派单的目标 specialist 模板（如 oracle、metis、momus、explore、librarian、sisyphus-junior、multimodal-looker、review）。必须是启用的模板——先用 subagent_templates 看简介、按任务领域匹配。"),
+    }),
+    task: Type.String({
+        description: bilingual("Atomic, specific goal: ONE action per delegation (minimum 20 chars). Vague tasks are rejected.", "原子化具体目标：一次派单只做一件事（至少 20 字）。含糊的任务会被驳回。"),
+    }),
+    expected_outcome: Type.String({
+        description: bilingual("Concrete deliverables with done criteria: what does success look like (minimum 10 chars).", "具体交付物 + 完成标准：什么样算做完（至少 10 字）。"),
+    }),
+    required_tools: Type.String({
+        description: bilingual("Explicit tool whitelist for the subagent (prevents tool sprawl).", "子代理可用工具白名单（防工具乱用）。"),
+    }),
+    must_do: Type.String({
+        description: bilingual("Exhaustive requirements — leave NOTHING implicit.", "必须做的要求——写尽，不要留隐含项。"),
+    }),
+    must_not_do: Type.String({
+        description: bilingual("Forbidden actions — anticipate and block rogue behavior.", "禁止事项——预判并堵住乱发挥。"),
+    }),
+    context: Type.String({
+        description: bilingual("File paths, existing patterns, constraints the subagent must know.", "子代理必须知道的文件路径、既有模式、约束。"),
+    }),
+    model: Type.Optional(Type.String({
+        description: bilingual('Optional model "provider/id" for this delegation; omit = template model → panel default → follow the main conversation model.', "可选：本次派单的子代理模型（provider/id）；不传 = 模板模型 → 面板默认 → 跟随主对话模型。"),
+    })),
+});
+/** 结构化派单工具：校验六段 → 拼装标准 prompt → 走 host.spawnSubagent 真子代理。 */
+export function makeDelegateTaskTool(host, lang) {
+    const getLang = lang ?? host.lang ?? (() => "en");
+    const text = (t, details = {}) => ({
+        content: [{ type: "text", text: t }],
+        details,
+    });
+    return defineTool({
+        name: DELEGATE_TOOL_NAME,
+        label: "Delegate task",
+        description: bilingual("Delegate ONE well-defined task to a specialist subagent template with a structured six-section brief " +
+            "(TASK / EXPECTED OUTCOME / REQUIRED TOOLS / MUST DO / MUST NOT DO / CONTEXT). The brief is validated " +
+            "server-side: missing or vague sections are rejected with an error, so fill every section concretely. " +
+            "Prefer this over subagent_spawn when the work fits a specialist template. The delegation spawns a real " +
+            "subagent conversation (visible in the left running list); use subagent_wait_all / subagent_get_result to " +
+            "collect results, subagent_steer to redirect, subagent_stop to stop. For follow-ups continue the SAME " +
+            "subagent session instead of delegating again.", "把一个定义清楚的任务派给 specialist 子代理模板，派单文本是结构化六段 " +
+            "（TASK / EXPECTED OUTCOME / REQUIRED TOOLS / MUST DO / MUST NOT DO / CONTEXT）。六段在服务端校验：" +
+            "缺段或含糊直接报错打回，所以每段都要写实在。任务适合 specialist 模板时优先用它而不是 subagent_spawn。" +
+            "派单会启动真实子代理会话（左栏运行列表可见）；用 subagent_wait_all / subagent_get_result 收结果、" +
+            "subagent_steer 改向、subagent_stop 停止。追问要在同一子代理会话里继续，不要重复派单。"),
+        promptSnippet: bilingual("Delegate a well-defined task to a specialist template with a validated six-section brief", "把定义清楚的任务派给 specialist 模板，六段派单文本带服务端校验"),
+        promptGuidelines: [
+            bilingual("Prefer delegate_task over subagent_spawn when the work matches a specialist template's domain", "任务落在 specialist 模板领域内时，优先用 delegate_task 而不是 subagent_spawn"),
+            bilingual("Before delegating, declare which template you chose and WHY its description matches the task", "派单前先声明选了哪个模板、它的简介与任务哪里匹配"),
+            bilingual("After delegation ALWAYS verify the result: does it work, does it follow codebase patterns, did it respect MUST DO / MUST NOT DO", "拿到派单结果必须验证：能跑吗、符合代码库模式吗、遵守 MUST DO / MUST NOT DO 了吗"),
+            bilingual("Never start implementing work that a pending delegated result was asked to decide", "已派出去待定的结论回来之前，不准先把相关的实现写了"),
+        ],
+        parameters: delegateSchema,
+        execute: async (_id, params, _signal, _onUpdate, ctx) => {
+            const input = normalizeDelegation(params);
+            const usable = host.listTemplates().map((t) => t.name);
+            const err = validateDelegation(input, usable, getLang());
+            if (err)
+                return text(err, { delegated: false, agent: input.agent });
+            const prompt = buildDelegationPrompt(input, getLang());
+            const convId = await host.spawnSubagent(prompt, "delegate", ctx.cwd, input.agent, input.model);
+            const title = subagentTitle(prompt);
+            const modelLineZh = input.model ? `\n模型：${input.model}` : "";
+            const modelLineEn = input.model ? `\nModel: ${input.model}` : "";
+            return text(pick(getLang(), `已派单：${convId}\n模板：${input.agent} · 标题：${title}${modelLineZh}` +
+                `\n子代理已在左栏运行列表中。用 subagent_wait_all 一次等全部完成（不用轮询）、subagent_get_result 取单个结果；` +
+                `追问请在同一子代理会话里继续（subagent_steer），不要重复派单。拿到结果后必须验证再汇报。`, `Delegated: ${convId}\nTemplate: ${input.agent} · Title: ${title}${modelLineEn}` +
+                `\nThe subagent is in the left running list. Use subagent_wait_all to wait for all at once (no polling), ` +
+                `subagent_get_result for a single result; continue follow-ups in the SAME subagent session (subagent_steer), ` +
+                `do not delegate again. Verify the result before reporting.`, "delegate.started", { convId: convId, agent: input.agent, title: title, "input.model": input.model }), { convId, agent: input.agent, template: input.agent, model: input.model });
+        },
+    });
+}

package/dist/server/dsh/dsh-agent-service.js

@@ -134,6 +134,9 @@ export class DshClientSession {
     convs = new Map();
     activeId = "";
     convSeq = 0;
+    /** 待答问卷快照（见 attachRuntimeEvents 的 question.pending 与
+     *  UiState.pendingQuestion）：重连/刷新后由快照恢复对话框。 */
+    pendingQuestion = null;
     /** 客户端级目标/审查偏好（跨会话共享的默认值，per-conversation goal 用它初始化）。 */
     goalPrefs = { reviewModel: null, maxRounds: 2, locked: false };
     sinks = new Set();
@@ -454,30 +457,39 @@ export class DshClientSession {
                         void this.answerQuestion(params0.id, [], true);
                         return;
                     }
+                    const mapped = (params0.questions ?? []).map((q) => ({
+                        id: String(q.id ?? ""),
+                        question: String(q.question ?? ""),
+                        ...(typeof q.detail === "string"
+                            ? { detail: q.detail }
+                            : {}),
+                        ...(typeof q.header === "string"
+                            ? { header: q.header }
+                            : {}),
+                        ...(Array.isArray(q.options)
+                            ? {
+                                options: q.options.map((o) => ({
+                                    label: String(o.label ?? ""),
+                                    ...(typeof o.description === "string" ? { description: o.description } : {}),
+                                    ...(typeof o.preview === "string" ? { preview: o.preview } : {}),
+                                })),
+                            }
+                            : {}),
+                        ...(q.multiSelect ? { multiSelect: true } : {}),
+                    }));
+                    // 记下待答问卷：`question_pending` 只推给「当时在线」的连接，刷新页面
+                    // /WS 重连后靠快照（UiState.pendingQuestion）把对话框恢复出来。
+                    // DSH 的提问桥是 runtime 级的（无 conversationId），故不分对话。
+                    this.pendingQuestion = {
+                        id: params0.id,
+                        ...(typeof params0.deadline === "number" ? { deadline: params0.deadline } : {}),
+                        questions: mapped,
+                    };
                     this.emit({
                         type: "question_pending",
                         id: params0.id,
                         ...(typeof params0.deadline === "number" ? { deadline: params0.deadline } : {}),
-                        questions: (params0.questions ?? []).map((q) => ({
-                            id: String(q.id ?? ""),
-                            question: String(q.question ?? ""),
-                            ...(typeof q.detail === "string"
-                                ? { detail: q.detail }
-                                : {}),
-                            ...(typeof q.header === "string"
-                                ? { header: q.header }
-                                : {}),
-                            ...(Array.isArray(q.options)
-                                ? {
-                                    options: q.options.map((o) => ({
-                                        label: String(o.label ?? ""),
-                                        ...(typeof o.description === "string" ? { description: o.description } : {}),
-                                        ...(typeof o.preview === "string" ? { preview: o.preview } : {}),
-                                    })),
-                                }
-                                : {}),
-                            ...(q.multiSelect ? { multiSelect: true } : {}),
-                        })),
+                        questions: mapped,
                     });
                 }
                 else if (method === "tools.call.request") {
@@ -490,8 +502,24 @@ export class DshClientSession {
             }
         });
     }
+    /** 快照侧的待答问卷（UiState.pendingQuestion）：重连/刷新后靠它恢复对话框。
+     *  DSH 的提问自带超时（goal-rpc 到点 reject），deadline 已过的不再下发——
+     *  否则已经没人等的问卷会被重连的客户端当成活的弹出来。标准引擎不限时，
+     *  没有 deadline，生命周期由回答/取消/dispose 精确终止。 */
+    pendingQuestionForSnapshot() {
+        const p = this.pendingQuestion;
+        if (!p)
+            return null;
+        if (p.deadline !== undefined && p.deadline <= Date.now())
+            return null;
+        return p;
+    }
     /** 前端回答模型提问（question/answer → runtime 恢复工具结果）。 */
     async answerQuestion(id, answers, cancelled) {
+        // 无论成功失败都清掉待答快照：同 id 不会再有下一次，留着会让重连的客户端
+        // 恢复到一张已经没人在等的问卷。
+        if (this.pendingQuestion?.id === id)
+            this.pendingQuestion = null;
         try {
             await this.runtime.answerQuestion(id, answers, cancelled);
         }
@@ -1028,6 +1056,7 @@ export class DshClientSession {
             thinkingLevel: this.thinkingLevel,
             availableThinkingLevels: ["high"],
             queue: { steering: conv.queue.steering, followUp: conv.queue.followUp },
+            pendingQuestion: this.pendingQuestionForSnapshot(),
             tools: [],
             version: ++this.version,
             piConfigured: !!loadDeepSeekKey(),
@@ -2191,6 +2220,8 @@ export class DshClientSession {
             customSystemPrompt: this.settings.customSystemPrompt,
             disabledSkills: this.settings.disabledSkills,
             disabledExtensions: this.settings.disabledExtensions,
+            // DSH engine: no unified tool gating (no subagent/edit_soft); empty keeps protocol complete.
+            disabledAgentTools: [],
             terminalToolsEnabled: this.settings.terminalToolsEnabled,
             terminalBash: this.settings.terminalBash,
             terminalBashIdleMs: this.settings.terminalBashIdleMs,
@@ -2201,6 +2232,8 @@ export class DshClientSession {
             goalModeEnabled: this.settings.goalModeEnabled,
             thinkingWrap: this.settings.thinkingWrap,
             toolsWrap: this.settings.toolsWrap,
+            // DSH 无 skill 全文注入概念，给空保协议完整。
+            skillsFullText: [],
             visionBridgeEnabled: false,
             visionBridgeModel: null,
             visionBridgePromptMode: "append",
@@ -2342,11 +2375,15 @@ export class DshClientSession {
             promptOverrides: {},
             disabledSkills: this.settings.disabledSkills,
             disabledExtensions: this.settings.disabledExtensions,
+            // DSH engine: no unified tool gating (no subagent/edit_soft); empty keeps protocol complete.
+            disabledAgentTools: [],
             terminalToolsEnabled: this.settings.terminalToolsEnabled,
             terminalBash: this.settings.terminalBash,
             terminalBashIdleMs: this.settings.terminalBashIdleMs,
             editSoftEnabled: this.settings.editSoftEnabled,
             // DSH 无独立重试配置，预设沿用默认值。
+            // DSH 无 skill 全文注入概念，给空保预设类型完整。
+            skillsFullText: [],
             retryMaxAttempts: DEFAULT_RETRY_MAX_ATTEMPTS,
             visionBridgePromptMode: "append",
             visionBridgePrompt: "",

package/dist/server/edit-soft-tool.js

@@ -23,7 +23,9 @@ import { isAbsolute, join, resolve as nodeResolve } from "node:path";
 import { Type } from "typebox";
 import { defineTool, generateDiffString, generateUnifiedPatch, withFileMutationQueue, } from "@earendil-works/pi-coding-agent";
 import { bilingual, pick } from "./i18n.js";
-export const SOFT_EDIT_TOOL_NAME = "edit_soft";
+import { EDIT_SOFT_TOOL_NAME } from "./tool-manager.js";
+/** 独立宽松编辑工具名（唯一登记见 tool-manager.ts；此处别名保兼容）。 */
+export const SOFT_EDIT_TOOL_NAME = EDIT_SOFT_TOOL_NAME;
 const replaceEditSchema = Type.Object({
     oldText: Type.String({
         description: bilingual("Text to replace. Loose matching: the content of each non-empty line (trimmed of leading/trailing whitespace) must match the corresponding file lines; leading-indentation (spaces/tabs) differences are ignored. Prefer whole lines/blocks.", "要替换的文本。宽松匹配：每个非空行的内容（去掉首尾空白）需与文件中对应行一致；行首缩进（空格/制表符）的差异会被忽略。建议按整行/整块提供。"),

package/dist/server/index.js

@@ -236,7 +236,12 @@ app.get("/api/file", async (req, res) => {
         const name = basename(abs);
         const kind = previewKind(name);
         const isDownload = req.query.download === "1";
-        if (!isDownload && kind !== "image" && kind !== "video") {
+        // HTML files preview through a sandboxed <iframe> in the file modal
+        // (FilePreview.tsx). They are text as far as previewKind goes, so
+        // allowlist them explicitly here.
+        const lower = name.toLowerCase();
+        const isHtmlPreview = lower.endsWith(".html") || lower.endsWith(".htm") || lower.endsWith(".xhtml");
+        if (!isDownload && kind !== "image" && kind !== "video" && !isHtmlPreview) {
             res.status(400).end("not a previewable media file");
             return;
         }
@@ -251,6 +256,20 @@ app.get("/api/file", async (req, res) => {
             res.download(abs, name);
         }
         else {
+            if (isHtmlPreview) {
+                // Sandbox even a top-level navigation to this URL: a workspace
+                // HTML file must never get our origin (it could otherwise read
+                // the token cookie). The modal iframe carries its own sandbox
+                // attribute as well (defense in depth).
+                //
+                // ?allowJs=1 is the explicit per-file opt-in from the preview
+                // modal ("启用脚本"): scripts run, but still in an opaque
+                // origin — no DOM/cookie/storage access to our app, no forms,
+                // no top-navigation. NEVER add allow-same-origin here.
+                const allowJs = req.query.allowJs === "1";
+                res.setHeader("Content-Security-Policy", allowJs ? "sandbox allow-scripts" : "sandbox");
+                res.setHeader("X-Content-Type-Options", "nosniff");
+            }
             res.sendFile(abs);
         }
     }
@@ -258,6 +277,68 @@ app.get("/api/file", async (req, res) => {
         res.status(404).end("not found");
     }
 });
+/**
+ * Directory-mapped preview: serves a workspace file at a URL that mirrors its
+ * directory location, so an HTML preview's RELATIVE subresources
+ * (<link href="../web/src/styles.css">, <img src="./x.png">, <script
+ * src="./app.js">, …) resolve and load with normal browser semantics. The
+ * iframe document URL itself carries the file's directory — no HTML rewriting.
+ *
+ *   /api/preview/<workspace-rel-path>?clientId=…[&allowJs=1]
+ *   /api/preview/__abs__/<absolute-wire-path>?clientId=…[&allowJs=1]
+ *   (each path segment URI-encoded; ".." is normalized by the browser before
+ *   the request is sent, workspace containment is still re-checked here)
+ *
+ * Same footing as /api/file: workspace containment enforced, HTML documents
+ * get a sandboxed CSP (?allowJs=1 relaxes scripts only — never same-origin),
+ * everything else streams with its real content type.
+ */
+app.get("/api/preview/*", async (req, res) => {
+    try {
+        const captured = String(req.params[0] ?? "");
+        const ABS_MARKER = "__abs__/";
+        const cid = typeof req.query.clientId === "string" ? req.query.clientId : "";
+        const cs = cid ? service.get(cid) : undefined;
+        const root = cs?.cwd ?? CWD;
+        // Express decodes %XX in the wildcard, so this is back to the wire
+        // form (filenames never contain "/", so per-segment encoding from
+        // the client round-trips exactly).
+        let abs;
+        if (captured === "__abs__" || captured.startsWith(ABS_MARKER)) {
+            // Machine browsing: absolute wire path ("C:/..." / "/...").
+            const wire = captured.slice(ABS_MARKER.length);
+            if (!isAbsoluteWirePath(wire)) {
+                res.status(400).end("bad absolute preview path");
+                return;
+            }
+            abs = wireToAbs(wire);
+        }
+        else {
+            const wp = workspacePath(root, captured);
+            if (!wp) {
+                res.status(400).end("path outside workspace");
+                return;
+            }
+            abs = wp.abs;
+        }
+        const name = basename(abs);
+        const st = await stat(abs);
+        if (!st.isFile()) {
+            res.status(400).end("not a file");
+            return;
+        }
+        res.setHeader("X-Content-Type-Options", "nosniff");
+        const lower = name.toLowerCase();
+        if (lower.endsWith(".html") || lower.endsWith(".htm") || lower.endsWith(".xhtml")) {
+            const allowJs = req.query.allowJs === "1";
+            res.setHeader("Content-Security-Policy", allowJs ? "sandbox allow-scripts" : "sandbox");
+        }
+        res.sendFile(abs);
+    }
+    catch {
+        res.status(404).end("not found");
+    }
+});
 // Production: serve the built frontend from web/dist. Resolve relative to this
 // module so it works when installed as a package (global/npx/Docker), not just
 // from the repo root. In dev, Vite serves the UI on :5173 and proxies /ws.
@@ -402,6 +483,21 @@ if (existsSync(webDist)) {
             }
         },
     }));
+    // 缺失的静态文件必须 404（不能落进下面的 SPA catch-all）：缺少的 hash 产物若
+    // 回 index.html（200），浏览器会把 HTML 当 JS/CSS 执行失败黑屏，SW 还会把
+    // 它按 200 缓进 STATIC_CACHE，之后即使文件恢复也要清缓存才能好。
+    app.use((req, res, next) => {
+        const p = req.path;
+        if (p.startsWith("/assets/") ||
+            p.startsWith("/icons/") ||
+            p === "/favicon.svg" ||
+            p === "/icon.ico" ||
+            p === "/manifest.webmanifest") {
+            res.status(404).end();
+            return;
+        }
+        next();
+    });
     app.get(/^\/(?!api\/|ws).*/, (_req, res) => {
         // Callback form: a failed stat here (npm i -g is mid-replacement of the
         // package dir) responds 503 instead of crashing the request pipeline
@@ -936,6 +1032,7 @@ wss.on("connection", (ws) => {
                     promptOverrides: msg.promptOverrides,
                     disabledSkills: msg.disabledSkills,
                     disabledExtensions: msg.disabledExtensions,
+                    disabledAgentTools: msg.disabledAgentTools,
                     disabledPlugins: msg.disabledPlugins,
                     terminalToolsEnabled: msg.terminalToolsEnabled,
                     terminalBash: msg.terminalBash,
@@ -945,6 +1042,7 @@ wss.on("connection", (ws) => {
                     goalModeEnabled: msg.goalModeEnabled,
                     thinkingWrap: msg.thinkingWrap,
                     toolsWrap: msg.toolsWrap,
+                    skillsFullText: msg.skillsFullText,
                     visionBridgeEnabled: msg.visionBridgeEnabled,
                     visionBridgeModel: msg.visionBridgeModel,
                     visionBridgePromptMode: msg.visionBridgePromptMode,

package/dist/server/markers/builtins/todo.js

@@ -43,14 +43,14 @@ const TODO_GUIDANCE_ZH = [
     "# 内联标记工具（状态类操作请写在回答正文，不要调用工具）",
     "- 标记语法：[[todo:new:<主题>]] 新建；[[todo:set:<id>,completed|in_progress|pending]] 状态；[[todo:remove:<id>]] 删除；[[todo:dep:<id>,blocks=<依赖id,逗号分隔>]] 设依赖。",
     "- 状态变化全部用上面的 [[todo:...]] 内联标记表达，不会中断回答，无需等待返回。",
-    "- 想查看/list 当前任务列表时，才用 `markers_list` 工具（读操作走工具）。",
+    "- 想查看/list 当前任务列表时，才用 `todo_list` 工具（读操作走工具）。",
     "- 不要编造不存在的任务 id；id 由 [[todo:new:...]] 分配，首次分配是自增整数。",
 ];
 const TODO_GUIDANCE_EN = [
     "# Inline marker tools (express state changes inline in your reply text — never call a tool for them)",
     "- Marker syntax: [[todo:new:<subject>]] to create; [[todo:set:<id>,completed|in_progress|pending]] for status; [[todo:remove:<id>]] to delete; [[todo:dep:<id>,blocks=<dep ids, comma-separated>]] to set dependencies.",
     "- Express all status changes with the [[todo:...]] inline markers above; they never interrupt your reply and need no waiting for a result.",
-    "- Only use the `markers_list` tool (the read path goes through the tool) when you want to list the current tasks.",
+    "- Only use the `todo_list` tool (the read path goes through the tool) when you want to list the current tasks.",
     "- Never invent task ids; ids are assigned by [[todo:new:...]], starting from incrementing integers.",
 ];
 /** 语言感知的 todo guidance（issue #91）：en 用英译、zh 用中文，默认英文。 */

package/dist/server/orchestrator.js

@@ -0,0 +1,109 @@
+const EN = [
+    "<orchestrator>",
+    "You are an orchestrator, not just an implementer. Your value is decomposition,",
+    "delegation, and quality control. Default bias: DELEGATE. Work directly only when",
+    "the task is trivially small (single file, known location, direct answer).",
+    "",
+    "## Intent gate (every message)",
+    "- Check skills FIRST: if the request matches a skill trigger, read that skill file",
+    "  before classifying or acting. Skills handle their tasks better than ad-hoc work.",
+    "- Verbalize routing BEFORE acting: state the detected intent (research /",
+    "  implementation / investigation / evaluation / fix / open-ended) and your approach",
+    "  (e.g. explore recon first, then answer; plan then delegate).",
+    "- Implement ONLY when the current message explicitly asks for implementation",
+    "  (implement/add/create/fix/change/write), the scope is concrete, and no pending",
+    "  specialist result blocks you. Otherwise research/clarify and wait.",
+    "- Reclassify intent from the CURRENT message only; never auto-carry",
+    "  implementation mode from prior turns.",
+    "",
+    "## Delegation protocol",
+    "Available specialist templates (subagent_spawn template=):",
+    "- oracle: architecture decisions, hard debugging, multi-system tradeoffs",
+    "- metis: pre-planning analysis when scope is unclear",
+    "- momus: review a work plan for gaps before implementing",
+    "- explore: codebase recon (where is X, which file has Y)",
+    "- librarian: external docs / library usage / open-source examples",
+    "- sisyphus-junior: well-defined single-scope implementation (already researched)",
+    "- multimodal-looker: PDFs, images, diagrams needing interpretation",
+    "- review / implement / research / scout / audit: built-in execution and review roles",
+    "Match the task domain to the template. Visual work goes to frontend-capable",
+    "execution; hard logic and architecture go to oracle; unclear scope goes to metis first.",
+    "BEFORE each delegation, declare: which template, WHY its description matches the",
+    "task domain, and the expected outcome. Then call subagent_spawn.",
+    "Delegation prompts MUST include all six sections:",
+    "1. TASK (atomic, one action) 2. EXPECTED OUTCOME (concrete deliverables +",
+    "done criteria) 3. REQUIRED TOOLS (explicit whitelist) 4. MUST DO (leave nothing",
+    "implicit) 5. MUST NOT DO (forbidden actions) 6. CONTEXT (file paths, patterns,",
+    "constraints). Vague prompts fail; if your prompt is shorter than 5 lines it is too vague.",
+    "For follow-ups continue the SAME subagent session instead of starting fresh.",
+    "After delegation ALWAYS verify: does it work, does it follow codebase patterns,",
+    "did it respect MUST DO / MUST NOT DO. Never start implementing work that a",
+    "pending oracle/momus result was asked to decide.",
+    "Anti-duplication: once explore/librarian are tasked, do NOT redo their search yourself.",
+    "",
+    "## Task management",
+    "Multi-step task (2+ steps) -> create a todo list IMMEDIATELY, in detail.",
+    "Mark exactly ONE item in_progress before starting it; mark completed IMMEDIATELY",
+    "after (never batch). If scope changes, update todos before proceeding.",
+    "No todos on non-trivial work = incomplete work.",
+    "",
+    "## Constraints",
+    "NEVER: suppress type errors (as any, @ts-ignore); commit without an explicit",
+    "request; speculate about unread code; leave code broken after failures;",
+    "use empty catch blocks; delete failing tests to pass.",
+    "Prefer existing libraries, small focused changes, and minimal bugfixes",
+    "(never refactor while fixing). Run diagnostics/build/tests on changed files",
+    "before reporting completion.",
+    "</orchestrator>",
+].join("\n");
+const ZH = [
+    "<orchestrator>",
+    "你是编排者（orchestrator），而不只是一个执行者。你的价值在于任务分解、",
+    "委派和质量把关。默认倾向：能委派就委派。只有任务极小（单文件、位置明确、",
+    "直接可答）时才亲自动手。",
+    "",
+    "## 意图门（每条消息先过这一关）",
+    "- 先查技能：请求命中某技能触发条件时，先用 read 读该技能文件，再分类或动手。",
+    "  技能覆盖的任务，照技能流程做比临场发挥更可靠。",
+    "- 先说路由再动手：明确本轮意图（调研 / 实现 / 排查 / 评估 / 修 bug / 开放式），",
+    "  并说出你的路线（例如先 explore 摸底再回答、先计划再委派）。",
+    "- 只有同时满足才实现：本轮消息有明确的实现动词（实现/加/创建/修/改/写）、",
+    "  范围足够具体、不依赖尚未返回的 specialist 结果。否则只做调研/澄清然后等待。",
+    "- 每轮只按当前消息重判意图，不把上一轮的“实现模式”自动带过来。",
+    "",
+    "## 委派协议",
+    "可用 specialist 模板（subagent_spawn 的 template 参数）：",
+    "- oracle：架构决策、难调的 bug、多系统权衡",
+    "- metis：范围不清时先做预分析",
+    "- momus：实现前先评审计划查缺补漏",
+    "- explore：代码库侦察（X 在哪、Y 在哪个文件）",
+    "- librarian：外部文档 / 第三方库用法 / 开源实现参考",
+    "- sisyphus-junior：已调研清楚的单点实现任务",
+    "- multimodal-looker：需要解读的 PDF / 图片 / 图表",
+    "- review / implement / research / scout / audit：内置的执行与审查角色",
+    "按任务领域选模板：界面视觉走前端执行、硬逻辑与架构走 oracle、范围不清先走 metis。",
+    "每次委派前必须声明：选哪个模板、它的简介与任务哪里匹配、期望产出，然后再调 subagent_spawn。",
+    "派单词必须包含六段：1. TASK（原子目标） 2. EXPECTED OUTCOME（交付物+完成标准）",
+    "3. REQUIRED TOOLS（可用工具白名单） 4. MUST DO（要求写尽） 5. MUST NOT DO（禁区）",
+    "6. CONTEXT（文件路径、既有模式、约束）。派单词短于 5 行就是太含糊，一定失败。",
+    "追问要在同一个子代理会话里继续，不要另起炉灶。",
+    "委派后必须验证：能跑吗、符合代码库既有模式吗、遵守 MUST DO / MUST NOT DO 了吗。",
+    "oracle/momus 还没回来之前，不准先把它们要定的实现写了。",
+    "禁重复劳动：explore/librarian 已经在查的东西，自己不要再查一遍。",
+    "",
+    "## 任务管理",
+    "多步任务（2 步以上）→ 立刻建 todo 列表，越细越好。",
+    "一次只把一项标 in_progress，做完立刻标 completed（不批量）。范围变了先更新 todo 再动手。",
+    "复杂任务没有 todo = 没做完。",
+    "",
+    "## 禁区",
+    "绝不：压类型错误（as any、@ts-ignore）；未经明确要求就 commit；臆测没读过的代码；",
+    "失败后留下一堆 broken 代码；空 catch；删掉失败的测试来“通过”。",
+    "优先用现成库、小而聚焦的改动、最小化修 bug（修 bug 时不顺手重构）。",
+    "汇报完成前，先对改动过的文件跑一遍诊断/构建/测试。",
+    "</orchestrator>",
+].join("\n");
+/** 编排指导块（按语言选；Oh-my-pi Behavior/Delegation/Task/Constraints 的原生改写版）。 */
+export function buildOrchestratorText(lang = "en") {
+    return lang === "zh" ? ZH : EN;
+}

package/dist/server/prompt-composer.js

@@ -140,8 +140,10 @@ function escapeXml(s) {
         .replace(/"/g, """)
         .replace(/'/g, "'");
 }
-/** 技能段文本（不含前导空行）。与 SDK formatSkillsForPrompt 一致。 */
-export function buildSkillsText(skills, lang = "en") {
+/** 技能段文本（不含前导空行）。与 SDK formatSkillsForPrompt 一致。
+ * fullText = true 全员全文注入（oh-my-pi 式：标题 + 引用描述 + body 全文）；
+ * 传技能名数组 = 只注入名单里的；content 缺失的条目回落列表行，不中断渲染。 */
+export function buildSkillsText(skills, lang = "en", fullText = false) {
     const visible = skills.filter((s) => !s.disableModelInvocation);
     if (visible.length === 0)
         return "";
@@ -153,6 +155,15 @@ export function buildSkillsText(skills, lang = "en") {
         "<available_skills>",
     ];
     for (const skill of visible) {
+        // 全文模式且有内容：oh-my-pi 注入格式（### Skill: 名 / > 描述 / 全文）。
+        const inject = fullText === true || (Array.isArray(fullText) && fullText.includes(skill.name));
+        if (inject && skill.content?.trim()) {
+            lines.push(`### Skill: ${skill.name}`);
+            if (skill.description.trim())
+                lines.push(`> ${skill.description.trim()}`);
+            lines.push("", skill.content.trim(), "");
+            continue;
+        }
         lines.push("  <skill>");
         lines.push(`    <name>${escapeXml(skill.name)}</name>`);
         lines.push(`    <description>${escapeXml(skill.description)}</description>`);
@@ -220,7 +231,7 @@ export function resolveSectionTexts(inputs) {
         terminal: inputs.terminalGuidance,
         markers: inputs.markersGuidance,
         context: buildContextText(inputs.contextFiles, lang),
-        skills: buildSkillsText(inputs.skills, lang),
+        skills: buildSkillsText(inputs.skills, lang, inputs.skillsFullText ?? false),
         cwd: `Current working directory: ${cwd}`,
     };
 }