tower-studio 0.2.44 → 0.2.45

package/dist/mcp-server.cjs

@@ -14365,6 +14365,11 @@ function getTowerDbFilePath() {
   const root = process.env.TOWER_DATA_DIR || (0, import_node_path2.join)((0, import_node_os2.homedir)(), ".tower");
   return (0, import_node_path2.join)(root, "database", "tower.db");
 }
+function getSignalDir() {
+  const root = process.env.TOWER_DATA_DIR || (0, import_node_path2.join)((0, import_node_os2.homedir)(), ".tower");
+  const hash2 = (0, import_node_crypto.createHash)("sha256").update(root).digest("hex").slice(0, 16);
+  return (0, import_node_path2.join)((0, import_node_os2.tmpdir)(), "tower-signals", hash2);
+}
 function getDefaultStorageDir() {
   return (0, import_node_path2.join)(getTowerDir(), "storage");
 }
@@ -14385,12 +14390,13 @@ function getStorageDir() {
   if (!(0, import_node_fs.existsSync)(dir)) (0, import_node_fs.mkdirSync)(dir, { recursive: true });
   return dir;
 }
-var import_node_path2, import_node_os2, import_node_fs, _dir;
+var import_node_path2, import_node_os2, import_node_crypto, import_node_fs, _dir;
 var init_tower_dir = __esm({
   "src/lib/tower-dir.ts"() {
     "use strict";
     import_node_path2 = require("node:path");
     import_node_os2 = require("node:os");
+    import_node_crypto = require("node:crypto");
     import_node_fs = require("node:fs");
   }
 });
@@ -26590,7 +26596,12 @@ var init_config_defaults = __esm({
           "",
           "## Scope Boundary",
           "If the user asks you to write code, explain code, debug, search the web, read/write files, or anything outside Tower task management, reply:",
-          '"\u62B1\u6B49\uFF0C\u6211\u53EA\u80FD\u5E2E\u4F60\u7BA1\u7406\u5DE5\u4F5C\u533A\u3001\u9879\u76EE\u548C\u4EFB\u52A1\u3002\u7F16\u7801\u3001\u8C03\u8BD5\u7B49\u64CD\u4F5C\u8BF7\u5728\u4EFB\u52A1\u7EC8\u7AEF\u4E2D\u5B8C\u6210\u3002"'
+          '"\u62B1\u6B49\uFF0C\u6211\u53EA\u80FD\u5E2E\u4F60\u7BA1\u7406\u5DE5\u4F5C\u533A\u3001\u9879\u76EE\u548C\u4EFB\u52A1\u3002\u7F16\u7801\u3001\u8C03\u8BD5\u7B49\u64CD\u4F5C\u8BF7\u5728\u4EFB\u52A1\u7EC8\u7AEF\u4E2D\u5B8C\u6210\u3002"',
+          "",
+          "## \u4EFB\u52A1\u6765\u6E90\u6807\u6CE8",
+          "\u6BCF\u6B21\u901A\u8FC7 create_task \u521B\u5EFA\u4EFB\u52A1\u65F6\uFF0C\u5728 description \u672B\u5C3E\u8FFD\u52A0\u4E00\u6BB5\u6765\u6E90\u6807\u6CE8\uFF08\u4E0E\u4EFB\u52A1\u7EC8\u7AEF\u3001\u98DE\u4E66\u7684\u6765\u6E90\u89C4\u8303\u4E00\u81F4\uFF09\uFF1A",
+          "## \u6765\u6E90",
+          "Tower Assistant"
         ].join("\n"),
         type: "string",
         label: "Assistant System Prompt"
@@ -26622,6 +26633,74 @@ var init_config_defaults = __esm({
         defaultValue: false,
         type: "boolean",
         label: "MCP Task Defaults Configured"
+      },
+      // 内置系统声明：所有任务启动时作为 --append-system-prompt 注入（与任务自选的
+      // AgentPrompt merge，内置在前）。built-in：默认值在代码里删不掉（不可删），但可经
+      // SystemConfig 覆盖（可修改）。
+      "task.systemDirective": {
+        defaultValue: [
+          "## Tower \u7CFB\u7EDF\u8BF4\u660E",
+          "\u4F60\u8FD0\u884C\u5728 Tower\uFF08\u4E00\u4E2A AI \u4EFB\u52A1\u8C03\u5EA6\u5E73\u53F0\uFF09\u7684\u4EFB\u52A1\u7EC8\u7AEF\u91CC\uFF0C\u4E3A\u67D0\u4E2A\u5177\u4F53\u4EFB\u52A1\u800C\u542F\u52A8\u3002\u4F60\u7684\u4EA7\u51FA\u4F1A\u88AB Tower \u8BB0\u5F55\u4E3A\u300C\u4EFB\u52A1\u6267\u884C\u300D\uFF0C\u4EFB\u52A1\u7ED3\u675F\u540E\u8FDB\u5165 review \u72B6\u6001\uFF0C\u53EF\u80FD\u88AB\u6D3E\u751F\u4F60\u7684\u7236\u4EFB\u52A1\u6216\u7528\u6237\u5BA1\u9605\u3002\u73AF\u5883\u53D8\u91CF\u91CC\u6709 TOWER_TASK_ID\uFF08\u5F53\u524D\u4EFB\u52A1 id\uFF09\u3001TOWER_TASK_TITLE\uFF08\u4EFB\u52A1\u6807\u9898\uFF09\u7B49\uFF0C\u53EF\u7528\u6765\u8BC6\u522B\u81EA\u5DF1\u3002",
+          "",
+          "## \u9996\u8981\u539F\u5219",
+          "- **\u9879\u76EE\u81EA\u8EAB\u89C4\u5219\u4F18\u5148**\uFF1A\u5DE5\u4F5C\u76EE\u5F55\u91CC\u9879\u76EE\u7684 CLAUDE.md / AGENTS.md \u7B49\u7EA6\u5B9A\u4F18\u5148\u7EA7\u6700\u9AD8\uFF0C\u4E0E\u672C\u58F0\u660E\u51B2\u7A81\u65F6\u4EE5\u9879\u76EE\u89C4\u5219\u4E3A\u51C6\u3002\u672C\u58F0\u660E\u53EA\u89C4\u5B9A\u300C\u4F5C\u4E3A\u4E00\u4E2A Tower \u4EFB\u52A1\u300D\u7684\u901A\u7528\u884C\u4E3A\uFF0C\u4E0D\u8986\u76D6\u5177\u4F53\u9879\u76EE\u7684\u6280\u672F\u89C4\u8303\u3002",
+          "- **\u53EA\u505A\u4EFB\u52A1\u8303\u56F4\u5185\u7684\u4E8B**\uFF1A\u7D27\u6263\u5F53\u524D\u4EFB\u52A1\u76EE\u6807\uFF0C\u4E0D\u987A\u624B\u6539\u65E0\u5173\u4EE3\u7801\u3001\u4E0D\u64C5\u81EA\u6269\u5927\u6539\u52A8\u9762\u3002",
+          "- **\u5B8C\u6210\u5373\u9A8C\u8BC1**\uFF1A\u6709\u6D4B\u8BD5 / \u6784\u5EFA / lint / \u7C7B\u578B\u68C0\u67E5\u5C31\u5148\u8DD1\u4E00\u904D\u518D\u5BA3\u79F0\u300C\u505A\u5B8C\u300D\uFF1B\u5931\u8D25\u5982\u5B9E\u62A5\u544A\uFF0C\u4E0D\u786E\u5B9A\u5C31\u8BF4\u4E0D\u786E\u5B9A\uFF0C\u522B\u628A\u6CA1\u9A8C\u8BC1\u7684\u5F53\u6210\u529F\u3002",
+          "- **\u957F\u8FDB\u7A0B\u522B\u5360\u4F4F\u7EC8\u7AEF**\uFF1Adev server\u3001watch \u7B49\u9700\u957F\u65F6\u95F4\u524D\u53F0\u8FD0\u884C\u7684\u547D\u4EE4\uFF0C\u7528\u5B8C\u5373\u505C\u6216\u653E\u540E\u53F0\uFF0C\u522B\u8BA9\u4EFB\u52A1\u7EC8\u7AEF\u88AB\u6C38\u4E45\u5361\u4F4F\uFF08Tower \u7684 Preview \u6709\u72EC\u7ACB\u7BA1\u7406\uFF0C\u901A\u5E38\u4E0D\u9700\u8981\u4F60\u624B\u52A8\u8D77 dev server\uFF09\u3002",
+          "- **\u9ED8\u8BA4\u7528\u4E2D\u6587\u56DE\u590D**\uFF08\u9664\u975E\u9879\u76EE\u6216\u7528\u6237\u53E6\u6709\u8981\u6C42\uFF09\u3002",
+          "",
+          "## Git \u5DE5\u4F5C\u89C4\u5219",
+          "- \u5B8C\u6210\u4E00\u6BB5\u6709\u610F\u4E49\u7684\u6539\u52A8\u540E\uFF0C\u4E3B\u52A8\u7528\u6E05\u6670\u7684 message \u521B\u5EFA commit\uFF08\u7EA6\u5B9A\u5F0F\uFF1Afeat / fix / refactor / docs / chore\u2026\uFF09\uFF0C\u4E0D\u8981\u7559\u4E00\u5806\u672A\u63D0\u4EA4\u7684\u6539\u52A8\u3002",
+          "- \u82E5\u5F53\u524D\u4EFB\u52A1\u8FD0\u884C\u5728 Git worktree \u9694\u79BB\u5206\u652F\u91CC\uFF08worktree \u4EFB\u52A1\uFF09\uFF1A**\u53EA commit\uFF0C\u4E0D\u8981 push** \u2014\u2014 worktree \u5206\u652F\u7531 Tower \u7EDF\u4E00\u7BA1\u7406\u4E0E\u5408\u5E76\u3002",
+          "- \u82E5\u5F53\u524D\u4EFB\u52A1\u76F4\u63A5\u5728\u9879\u76EE\u4E3B\u5DE5\u4F5C\u533A\u91CC\uFF08\u975E worktree \u4EFB\u52A1\uFF09\uFF1A\u53EF\u4EE5 push\u3002",
+          "- \u4E0D\u786E\u5B9A\u81EA\u5DF1\u662F\u4E0D\u662F worktree \u4EFB\u52A1\u65F6\uFF0C\u9ED8\u8BA4\u53EA commit\u3001\u4E0D push\u3002",
+          "",
+          "## \u5E76\u53D1\u4E0E\u534F\u4F5C\uFF08\u591A\u4EFB\u52A1\u53EF\u80FD\u540C\u6539\u4E00\u4E2A\u4ED3\u5E93\uFF09",
+          "- Tower \u5E38\u540C\u65F6\u8DD1\u591A\u4E2A\u4EFB\u52A1\u3001\u751A\u81F3\u540C\u4E00\u4ED3\u5E93\u591A\u4E2A worktree\u3002**\u53EA stage / commit \u4F60\u8FD9\u8F6E\u4EB2\u624B\u6539\u7684\u6587\u4EF6**\uFF0C\u4E00\u5F8B `git add <\u660E\u786E\u8DEF\u5F84>`\uFF1B\u7981\u6B62 `git add .` / `-A` / `-u` / `git commit -a`\uFF0C\u522B\u628A\u522B\u7684\u7A97\u53E3\u6216\u7528\u6237\u624B\u52A8\u7684\u6539\u52A8\u4E00\u5E76\u63D0\u4EA4\u3002",
+          "- `git status` \u91CC\u4E0D\u8BA4\u8BC6\u3001\u4E0D\u662F\u4F60\u6539\u7684\u6587\u4EF6\u4E00\u5F8B\u4E0D\u78B0\u3001\u4E0D\u63D0\u4EA4\uFF0C\u9700\u8981\u65F6\u5728\u5C0F\u7ED3\u91CC\u63D0\u4E00\u53E5\u5373\u53EF\u3002",
+          "- \u4E0D force-push\u3001\u4E0D\u6539\u5199\u5171\u4EAB\u5206\u652F\u5386\u53F2\uFF1B\u4E0D\u5BF9\u4E0D\u5C5E\u4E8E\u4F60\u7684\u6539\u52A8\u505A `git reset --hard` / `git clean -fd`\u3002",
+          "",
+          "## Worktree \u7EAA\u5F8B\uFF08\u52A1\u5FC5\u9632\u6B62\u6539\u5230\u4E3B\u4ED3\u5E93\uFF09",
+          "- \u5F00\u5DE5\u7B2C\u4E00\u4EF6\u4E8B\u5148\u8DD1 `pwd`\uFF1A\u5B83\u5C31\u662F\u4F60\u7684\u5DE5\u4F5C\u6839\u3002\u4E4B\u540E\u6240\u6709 Read/Edit/Write/Bash \u8DEF\u5F84\u90FD\u4EE5\u5B83\u4E3A\u57FA\u51C6\uFF0C\u4F18\u5148\u7528\u76F8\u5BF9\u8DEF\u5F84\uFF1B\u7528\u7EDD\u5BF9\u8DEF\u5F84\u65F6\u5FC5\u987B\u4EE5\u8FD9\u4E2A\u6839\u5F00\u5934\uFF0C**\u7EDD\u4E0D**\u51ED\u4E0A\u4E0B\u6587/\u8BB0\u5FC6\u91CC\u7684\u4E3B\u4ED3\u5E93\u8DEF\u5F84\u53BB\u62FC\u7EDD\u5BF9\u8DEF\u5F84\u2014\u2014\u8FD9\u6B63\u662F\u5386\u6B21\u300Cworktree \u91CC\u770B\u4EC0\u4E48\u90FD\u6CA1\u53D8\u300D\u7684\u6839\u56E0\u3002",
+          "- \u5224\u65AD\u81EA\u5DF1\u662F\u4E0D\u662F worktree \u4EFB\u52A1\uFF1A`pwd` \u843D\u5728 `.worktrees/task-$TOWER_TASK_ID` \u4E0B\u3001\u6216 `git branch --show-current` \u4E3A `task/$TOWER_TASK_ID`\uFF0C\u5373\u662F\u3002\u662F\u5219\u4E25\u683C\u8D70\u672C\u8282\u7EAA\u5F8B\u3002",
+          "- \u52A8\u4EFB\u4F55\u6587\u4EF6 / \u63D0\u4EA4\u524D\uFF0C\u5148\u6838\u5BF9\u4E09\u4EF6\u4E8B\u90FD\u6210\u7ACB\uFF1A\u2460 `git rev-parse --show-toplevel` \u7B49\u4E8E\u5F53\u524D worktree \u6839\uFF08\u4E0D\u662F\u4E3B\u4ED3\u5E93\u8DEF\u5F84\uFF09\uFF1B\u2461 `git branch --show-current` \u4E3A `task/$TOWER_TASK_ID`\uFF08\u4E0D\u662F main / feature / \u5176\u5B83\u5206\u652F\uFF09\uFF1B\u2462 \u8981\u6539\u7684\u6587\u4EF6\u7EDD\u5BF9\u8DEF\u5F84\u542B `.worktrees/task-$TOWER_TASK_ID/` \u6BB5\u3002\u4EFB\u4E00\u4E0D\u6EE1\u8DB3\uFF0C\u8BF4\u660E\u4F60\u64CD\u4F5C\u5230\u4E3B\u4ED3\u5E93\u4E86\uFF0C**\u7ACB\u5373\u505C\u6B62\u3001\u4E0D\u8981\u63D0\u4EA4**\uFF0C\u5148\u7EA0\u6B63\u76EE\u5F55\u3002",
+          "- \u7EDD\u4E0D `cd` \u5230\u4E3B\u4ED3\u5E93\u6216 worktree \u4E4B\u5916\u53BB\u6539\u6587\u4EF6 / \u8DD1 git\uFF1B\u6240\u6709 git \u547D\u4EE4\u90FD\u5728\u5F53\u524D worktree \u6839\u5185\u6267\u884C\uFF08\u8DE8\u76EE\u5F55\u65F6\u7528 `git -C <worktree \u6839>` \u663E\u5F0F\u6307\u5B9A\uFF0C\u522B\u9760\u9ED8\u8BA4 cwd \u731C\uFF09\u3002",
+          "- \u4E07\u4E00\u5DF2\u7ECF\u6539\u9519\u5230\u4E3B\u4ED3\u5E93\uFF1A\u628A\u6539\u52A8\u642C\u56DE worktree\uFF08`git -C <worktree \u6839> cherry-pick <\u8BEF\u63D0\u4EA4>` \u6216\u91CD\u6253\u4E00\u904D\uFF09\uFF0C\u4E3B\u4ED3\u5E93\u5DE5\u4F5C\u533A\u7528 `git restore` \u590D\u539F\u3001\u8BEF\u63D0\u4EA4\u6309\u60C5\u51B5\u5904\u7406\u2014\u2014\u5DF2\u88AB\u522B\u7684\u63D0\u4EA4\u53E0\u5728\u4E0A\u9762\u5C31\u7528 `git revert`\uFF08\u4FDD\u5386\u53F2\u3001\u4E0D\u52A8\u522B\u4EBA\u7684\u63D0\u4EA4\uFF09\uFF0C\u786E\u8BA4\u72EC\u5360\u4E14\u672A push \u624D\u7528 `git reset`\uFF1B\u6700\u540E\u5982\u5B9E\u62A5\u544A\u4E24\u8FB9\u6700\u7EC8\u72B6\u6001\uFF0C\u4E0D\u8981\u9690\u7792\u3002",
+          "",
+          "## \u6C47\u62A5\u4E0E\u4EA4\u63A5",
+          "- \u4EA7\u51FA\u4F1A\u88AB review\uFF0C\u7ED3\u5C3E\u7ED9\u4E00\u6BB5\u53EF\u901F\u8BFB\u7684\u5C0F\u7ED3\uFF1A\u505A\u4E86\u4EC0\u4E48\u3001\u6539\u4E86\u54EA\u4E9B\u5173\u952E\u6587\u4EF6\u3001\u9A8C\u8BC1\u7ED3\u679C\u3001\u8FD8\u5269\u4EC0\u4E48\u6CA1\u505A / \u88AB\u4EC0\u4E48\u963B\u585E\u3001\u6709\u6CA1\u6709\u9700\u8981\u7528\u6237\u6216\u7236\u4EFB\u52A1\u62CD\u677F\u7684\u51B3\u7B56\u3002",
+          "- \u771F\u88AB\u5916\u90E8\u56E0\u7D20\u963B\u585E\uFF08\u5F85\u63A5\u53E3\u3001\u5F85\u7D20\u6750\u3001\u5F85\u4EBA\u51B3\u7B56\uFF09\u5C31**\u660E\u786E\u8BF4\u660E\u5E76\u505C\u4E0B**\uFF0C\u522B\u53CD\u590D\u7A7A\u8F6C\u6216\u81EA\u884C\u81C6\u6D4B\u786C\u505A\u3002",
+          "- \u5371\u9669 / \u4E0D\u53EF\u9006\u64CD\u4F5C\uFF08\u5220\u6570\u636E\u5E93\u3001\u5220\u5927\u76EE\u5F55\u3001`rm -rf`\u3001`drop table`\u3001\u5BF9\u5916\u53D1\u5E03 / \u90E8\u7F72\uFF09\u5148\u8BF4\u660E\u5E76\u5F81\u5F97\u786E\u8BA4\u518D\u6267\u884C\u3002",
+          "",
+          "## \u65E0\u4EBA\u503C\u5B88\uFF08\u73AF\u5883\u53D8\u91CF TOWER_UNATTENDED=1 \u65F6\u5C24\u5176\u91CD\u8981\uFF09",
+          "- \u4F60\u53EF\u80FD\u5728\u65E0\u4EBA\u76EF\u5B88\u4E0B\u8FD0\u884C\u3002\u4E24\u4E2A\u4E0E\u4EBA\u6C9F\u901A\u7684 MCP \u5DE5\u5177\uFF1A`ask_human`\uFF08\u963B\u585E\uFF1A**\u8BB0\u5F55**\u95EE\u9898\u5E76\u6302\u8D77\u4EFB\u52A1\u2014\u2014\u672C\u56DE\u5408\u5230\u6B64\u4E3A\u6B62\uFF0C\u4EBA\u56DE\u590D\u540E\u81EA\u52A8\u5524\u9192\u3001\u5E26\u7B54\u6848\u7EED\u8DD1\uFF09\u548C `notify_human`\uFF08\u975E\u963B\u585E\uFF1A**\u8BB0\u5F55**\u4E00\u6761\u8FDB\u5EA6/FYI \u540E\u7ACB\u5373\u7EE7\u7EED\uFF0C\u4E0D\u5FC5\u7B49\u56DE\u590D\u3001\u4E0D\u6302\u8D77\uFF09\u3002**\u6CE8\u610F\uFF1A\u8FD9\u4E24\u4E2A\u5DE5\u5177\u53EA\u5728 Tower \u5185\u8BB0\u5F55\uFF08/harness \u9762\u677F\u53EF\u89C1\uFF09\uFF0C\u672C\u8EAB\u4E0D\u628A\u6D88\u606F\u53D1\u7ED9\u4EBA**\uFF1B\u65E0\u4EBA\u503C\u5B88\u4E0B\u8981\u771F\u6B63\u901A\u77E5\u5230\u4EBA\uFF0C\u987B\u6309\u7CFB\u7EDF\u63D0\u793A\u91CC\u300C\u65E0\u4EBA\u503C\u5B88\u5916\u63A8\u300D\u6BB5\u5148\u7ECF\u5E73\u53F0\u6E20\u9053\u628A\u6D88\u606F\u53D1\u51FA\u53BB\uFF0C\u518D\u8C03\u8FD9\u4E24\u4E2A\u5DE5\u5177\u7559\u6863\u3002",
+          "- \u9700\u8981\u4EBA\u62CD\u677F\u624D\u80FD\u63A8\u8FDB\uFF08\u9009\u578B\u3001\u4E8C\u4E49\u9700\u6C42\u3001\u7F3A\u5173\u952E\u4FE1\u606F\u3001\u5BF9\u5916\u53D1\u5E03/\u90E8\u7F72\u7B49\uFF09\u2192 \u7528 `ask_human` \u628A\u95EE\u9898\u548C\u53EF\u9009\u9879\u8BB2\u6E05\u695A\uFF0C\u7136\u540E\u505C\u4E0B\u7B49\u5F85\uFF0C\u522B\u81EA\u884C\u81C6\u6D4B\u786C\u505A\u3002",
+          "- \u5371\u9669 / \u4E0D\u53EF\u9006\u64CD\u4F5C\uFF08\u5220\u5E93\u3001\u5220\u5927\u76EE\u5F55\u3001`rm -rf`\u3001`drop table`\u3001force-push\u3001\u5BF9\u5916\u53D1\u5E03\uFF09\u2192 \u4E00\u5F8B\u5148 `ask_human` \u5F81\u5F97\u540C\u610F\u518D\u6267\u884C\uFF0C\u5373\u4F7F\u7EC8\u7AEF\u5DF2\u653E\u5F00\u6743\u9650\u4E5F\u4E0D\u4F8B\u5916\u3002",
+          "- \u53EA\u662F\u60F3\u540C\u6B65\u8FDB\u5C55\u6216\u629B\u4E2A FYI\u3001\u65E0\u9700\u56DE\u590D \u2192 \u7528 `notify_human`\uFF0C\u53D1\u5B8C\u7EE7\u7EED\u5E72\u3002",
+          "- \u8C03\u7528 `ask_human` \u540E\u7ACB\u5373\u7ED3\u675F\u672C\u56DE\u5408\u3001\u4E0D\u8981\u518D\u7EE7\u7EED\u64CD\u4F5C\uFF1B\u5B83\u4F1A\u5173\u95ED\u7EC8\u7AEF\u7701\u8D44\u6E90\uFF0C\u4EBA\u56DE\u590D\u540E\u4EFB\u52A1\u81EA\u52A8\u6062\u590D\u3002",
+          "",
+          "## \u672C\u8F6E commit \u56DE\u663E",
+          "- **\u6BCF\u8F6E\u56DE\u590D\u7684\u6700\u540E\uFF0C\u5FC5\u987B\u628A\u672C\u8F6E\u521B\u5EFA\u7684 commit \u5217\u51FA\u6765\u8BA9\u7528\u6237\u4E00\u773C\u770B\u5230**\u3002\u683C\u5F0F\u56FA\u5B9A\uFF1A\u5148\u4E00\u884C\u52A0\u7C97\u5C0F\u6807\u9898 `**\u672C\u8F6E commit**`\uFF08\u4E0D\u8981\u7528 `---` \u5206\u9694\u7EBF\u3001\u4E0D\u8981\u7528 emoji\uFF09\uFF0C\u6362\u884C\u540E\u6BCF\u6761 commit \u5355\u72EC\u4E00\u884C\u3001\u4EE5 `- ` \u5F00\u5934\uFF0C\u5F62\u5982 `` - `<\u77ED hash>` <message \u9996\u884C> ``\uFF08hash \u7528\u884C\u5185\u4EE3\u7801\u5305\u4F4F\uFF09\u3002\u672C\u8F6E\u6CA1\u6709\u521B\u5EFA\u4EFB\u4F55 commit \u65F6\uFF0C\u53EA\u56DE\u4E00\u884C `\u672C\u8F6E\u65E0 commit`\u3002"
+        ].join("\n"),
+        type: "string",
+        label: "Task System Directive (built-in)"
+      },
+      // ── 无人值守 harness ──────────────────────────────────────────────
+      // Tower 只记录 ask/notify/done/failed（/harness 面板可见），**不发送消息**：外推给人由 agent
+      // 按注入的「无人值守外推」协议用平台 MCP（飞书/微信/…）完成。故这里不再有平台凭据/渠道绑定配置。
+      // 无人值守发送渠道注册表：agent 据「生效」的那条决定走哪条「网关→下游」把消息发出去。
+      // 每项形如 { id, label, gateway: "feishu"|"openclaw"|"hermes", downstream: "wechat"|"feishu"|... }
+      // （downstream 也可是自定义文本）。目的地(群/人)在发送时由消息说明，不在此预设。Tower 只存不发。
+      "harness.targets": {
+        defaultValue: [],
+        type: "object",
+        label: "Harness Notify Targets (multi-platform registry)"
+      },
+      // 待回复 ask 的 TTL 兜底：超过这么多天仍 OPEN 的 ask 被周期 sweep 转 EXPIRED。
+      "harness.pendingTtlDays": {
+        defaultValue: 14,
+        type: "number",
+        label: "Harness Pending Ask TTL (days)"
       }
     };
   }
@@ -29270,7 +29349,7 @@ var require_websocket = __commonJS({
     var http = require("http");
     var net = require("net");
     var tls = require("tls");
-    var { randomBytes, createHash } = require("crypto");
+    var { randomBytes, createHash: createHash2 } = require("crypto");
     var { Duplex, Readable } = require("stream");
     var { URL: URL2 } = require("url");
     var PerMessageDeflate2 = require_permessage_deflate();
@@ -29930,7 +30009,7 @@ var require_websocket = __commonJS({
           abortHandshake(websocket, socket, "Invalid Upgrade header");
           return;
         }
-        const digest = createHash("sha1").update(key + GUID).digest("base64");
+        const digest = createHash2("sha1").update(key + GUID).digest("base64");
         if (res.headers["sec-websocket-accept"] !== digest) {
           abortHandshake(websocket, socket, "Invalid Sec-WebSocket-Accept header");
           return;
@@ -30297,7 +30376,7 @@ var require_websocket_server = __commonJS({
     var EventEmitter = require("events");
     var http = require("http");
     var { Duplex } = require("stream");
-    var { createHash } = require("crypto");
+    var { createHash: createHash2 } = require("crypto");
     var extension2 = require_extension();
     var PerMessageDeflate2 = require_permessage_deflate();
     var subprotocol2 = require_subprotocol();
@@ -30598,7 +30677,7 @@ var require_websocket_server = __commonJS({
           );
         }
         if (this._state > RUNNING) return abortHandshake(socket, 503);
-        const digest = createHash("sha1").update(key + GUID).digest("base64");
+        const digest = createHash2("sha1").update(key + GUID).digest("base64");
         const headers = [
           "HTTP/1.1 101 Switching Protocols",
           "Upgrade: websocket",
@@ -32216,14 +32295,14 @@ async function clearSessionPid(sessionKey) {
   } catch {
   }
 }
-var import_promises, import_node_os3, import_node_path4, SIGNAL_DIR, PID_PREFIX;
+var import_promises, import_node_path4, SIGNAL_DIR, PID_PREFIX;
 var init_orphan_reaper = __esm({
   "src/lib/pty/orphan-reaper.ts"() {
     "use strict";
     import_promises = require("node:fs/promises");
-    import_node_os3 = require("node:os");
     import_node_path4 = require("node:path");
-    SIGNAL_DIR = (0, import_node_path4.join)((0, import_node_os3.tmpdir)(), "tower-signals");
+    init_tower_dir();
+    SIGNAL_DIR = getSignalDir();
     PID_PREFIX = "pid-";
   }
 });
@@ -32295,6 +32374,13 @@ var init_session_store = __esm({
   }
 });
 
+// src/lib/pty/strip-device-queries.ts
+var init_strip_device_queries = __esm({
+  "src/lib/pty/strip-device-queries.ts"() {
+    "use strict";
+  }
+});
+
 // src/lib/assistant-constants.ts
 var init_assistant_constants = __esm({
   "src/lib/assistant-constants.ts"() {
@@ -32370,6 +32456,7 @@ var init_ws_server = __esm({
     "use strict";
     init_wrapper();
     init_session_store();
+    init_strip_device_queries();
     init_config_reader();
     init_assistant_constants();
     init_session_store2();
@@ -32483,9 +32570,9 @@ var init_claude_cli_adapter = __esm({
           const settings = this.readSettings();
           const hooks = settings["hooks"] ?? {};
           const root = getPackageRoot().replace(/\\/g, "/");
-          const sessionStart = path4.join(root, "scripts", "session-start-hook.js").replace(/\\/g, "/");
-          const postTool = path4.join(root, "scripts", "post-tool-hook.js").replace(/\\/g, "/");
-          const stop = path4.join(root, "scripts", "stop-hook.js").replace(/\\/g, "/");
+          const sessionStart = path4.join(root, "scripts", "tower-session-start-hook.js").replace(/\\/g, "/");
+          const postTool = path4.join(root, "scripts", "tower-post-tool-hook.js").replace(/\\/g, "/");
+          const stop = path4.join(root, "scripts", "tower-stop-hook.js").replace(/\\/g, "/");
           let changed = false;
           changed = this.upsertHook(hooks, "SessionStart", "session-start-hook.js", {
             hooks: [{ command: `node "${sessionStart}"`, timeout: 5, type: "command" }]
@@ -32524,18 +32611,18 @@ var init_claude_cli_adapter = __esm({
           const hooks = settings["hooks"] ?? {};
           const root = getPackageRoot().replace(/\\/g, "/");
           const map2 = [
-            ["SessionStart", "session-start-hook.js"],
-            ["PostToolUse", "post-tool-hook.js"],
-            ["Stop", "stop-hook.js"]
+            ["SessionStart", "session-start-hook.js", "tower-session-start-hook.js"],
+            ["PostToolUse", "post-tool-hook.js", "tower-post-tool-hook.js"],
+            ["Stop", "stop-hook.js", "tower-stop-hook.js"]
           ];
           let changed = false;
-          for (const [event, filename] of map2) {
+          for (const [event, matchName, wantedName] of map2) {
             const entries = this.getHookArray(hooks, event);
             const idx = entries.findIndex(
-              (e2) => e2?.hooks?.some?.((h10) => h10.command?.includes(filename))
+              (e2) => e2?.hooks?.some?.((h10) => h10.command?.includes(matchName))
             );
             if (idx < 0) continue;
-            const wantedPath = path4.join(root, "scripts", filename).replace(/\\/g, "/");
+            const wantedPath = path4.join(root, "scripts", wantedName).replace(/\\/g, "/");
             const wantedCmd = `node "${wantedPath}"`;
             const hookCmd = entries[idx]?.hooks?.[0];
             if (!hookCmd || hookCmd.command === wantedCmd) continue;
@@ -54309,7 +54396,8 @@ var taskTools = {
       useWorktree: external_exports.boolean().optional().describe("Use a Git worktree for branch isolation. Omit to use the user's saved default; pass explicitly to override this task."),
       baseBranch: external_exports.string().optional().describe("Base branch for worktree checkout. Only used when useWorktree resolves to true. If omitted, auto-detects the project's current branch."),
       autoStart: external_exports.boolean().optional().describe("Start execution immediately after creating. Omit to use the user's saved default; pass explicitly to override this task."),
-      references: external_exports.array(external_exports.string()).max(20).optional()
+      references: external_exports.array(external_exports.string()).max(20).optional(),
+      unattended: external_exports.boolean().optional().describe("Run in unattended mode \u2014 the task's agent uses tower-ask to push ask_human / notify_human / done-failed to a configured channel (Settings \u2192 Notifications). Defaults false.")
     }),
     handler: async (args) => {
       const explicitWorktree = args.useWorktree !== void 0;
@@ -54350,6 +54438,15 @@ var taskTools = {
           }
         }
       }
+      const envParentTaskId = process.env.TOWER_TASK_ID || null;
+      let resolvedParentId = null;
+      if (envParentTaskId) {
+        const parent = await db.task.findUnique({
+          where: { id: envParentTaskId },
+          select: { id: true }
+        });
+        if (parent) resolvedParentId = envParentTaskId;
+      }
       const task = await db.task.create({
         data: {
           title: args.title,
@@ -54359,7 +54456,9 @@ var taskTools = {
           status: args.status ?? "TODO",
           baseBranch,
           versionId,
-          subPath: args.subPath ?? null
+          subPath: args.subPath ?? null,
+          parentTaskId: resolvedParentId,
+          unattended: args.unattended ?? false
         }
       });
       if (args.labelIds && args.labelIds.length > 0) {
@@ -54441,10 +54540,10 @@ ${refText}`;
       }
       const attachmentInfo = attachmentFailures.length > 0 ? { attachmentFailures } : {};
       if (autoStart) {
-        const PORT2 = process.env.PORT ?? "3000";
+        const PORT3 = process.env.PORT ?? "3000";
         const prompt = args.title;
         try {
-          const res = await fetch(`http://localhost:${PORT2}/api/internal/terminal/${task.id}/start`, {
+          const res = await fetch(`http://localhost:${PORT3}/api/internal/terminal/${task.id}/start`, {
             method: "POST",
             headers: { "Content-Type": "application/json" },
             body: JSON.stringify({ prompt })
@@ -55581,6 +55680,89 @@ var reportTools = {
   }
 };
 
+// src/mcp/tools/harness-tools.ts
+init_zod();
+var PORT2 = process.env.PORT ?? "3000";
+var BRIDGE = `http://localhost:${PORT2}/api/internal/harness`;
+var CUID_RE2 = /^c[a-z0-9]{20,30}$/;
+function validateMcpTaskId2(taskId) {
+  if (!CUID_RE2.test(taskId)) return "Invalid taskId format \u2014 expected CUID";
+  return null;
+}
+var harnessTools = {
+  ask_human: {
+    description: "Ask the human operator a question and PARK the task until they reply. Call this ONLY when you are blocked on a decision you cannot make yourself, or before a dangerous/irreversible action that needs sign-off. This ENDS your turn \u2014 do NOT keep working after calling it. The task is suspended (its terminal is closed to save resources) and later resumed with the human's answer as your next message. In unattended mode the question is pushed to the operator's channel (e.g. Feishu); otherwise it waits visibly in the Tower UI.",
+    schema: external_exports.object({
+      taskId: external_exports.string().describe("The current task id (TOWER_TASK_ID)"),
+      question: external_exports.string().min(1).max(4e3).describe("The question / options for the human")
+    }),
+    handler: async (args) => {
+      const err = validateMcpTaskId2(args.taskId);
+      if (err) return { error: err, taskId: args.taskId };
+      const res = await fetch(`${BRIDGE}/ask`, {
+        method: "POST",
+        headers: { "content-type": "application/json" },
+        body: JSON.stringify({ taskId: args.taskId, question: args.question })
+      });
+      const data = await res.json().catch(() => ({}));
+      if (!res.ok) return { error: data?.error ?? "ask failed", status: res.status };
+      const base = {
+        parked: true,
+        requestId: data.requestId,
+        message: "Question recorded and task parked. Your turn is over \u2014 stop now and wait. You will be resumed with the human's answer as your next message."
+      };
+      if (data.noChannelConfigured) {
+        return {
+          ...base,
+          noChannelConfigured: true,
+          message: "Question recorded (visible in Tower's /harness panel) and task parked, but NO notify channel is configured, so it cannot be pushed to any external channel. Before stopping, tell the user: \u8BF7\u5230\u300C\u8BBE\u7F6E \u2192 \u901A\u77E5 \u2192 \u65E0\u4EBA\u503C\u5B88\u53D1\u9001\u6E20\u9053\u300D\u914D\u7F6E\u4E00\u4E2A\u6E20\u9053\uFF0C\u5426\u5219\u65E0\u6CD5\u5916\u53D1\u3002"
+        };
+      }
+      return base;
+    }
+  },
+  notify_human: {
+    description: "Send a NON-BLOCKING progress update / heads-up to the human operator, then KEEP WORKING. Unlike ask_human this does not park the task or end your turn \u2014 use it for milestones, status reports, or FYI notes that need no reply. In unattended mode it is pushed to the operator's channel (no @mention); otherwise it is a no-op.",
+    schema: external_exports.object({
+      taskId: external_exports.string().describe("The current task id (TOWER_TASK_ID)"),
+      message: external_exports.string().min(1).max(4e3).describe("The progress update for the human")
+    }),
+    handler: async (args) => {
+      const err = validateMcpTaskId2(args.taskId);
+      if (err) return { error: err, taskId: args.taskId };
+      const res = await fetch(`${BRIDGE}/notify`, {
+        method: "POST",
+        headers: { "content-type": "application/json" },
+        body: JSON.stringify({ taskId: args.taskId, message: args.message })
+      });
+      const data = await res.json().catch(() => ({}));
+      if (!res.ok) return { error: data?.error ?? "notify failed", status: res.status };
+      return { ok: true, messageId: data.messageId };
+    }
+  },
+  reply_to_ask: {
+    description: "Deliver a human's reply back to a task that is PARKED waiting on ask_human, then RESUME it. Use this (not send_task_terminal_input) when relaying an operator's answer from a channel (Feishu/WeChat/etc.) so Tower records what was replied and shows the full round-trip in its log. It marks the open question as answered, resumes the task's session, and injects the reply as the task's next message. If the task has NO pending question, it does nothing and returns { no_pending: true } \u2014 in that case treat the message as an ordinary request and handle it normally (create_task / search / etc.).",
+    schema: external_exports.object({
+      taskId: external_exports.string().describe("The task that is parked waiting for a reply (its TOWER_TASK_ID)"),
+      text: external_exports.string().min(1).max(8e3).describe("The human's reply to inject into the task")
+    }),
+    handler: async (args) => {
+      const err = validateMcpTaskId2(args.taskId);
+      if (err) return { error: err, taskId: args.taskId };
+      const res = await fetch(`${BRIDGE}/reply`, {
+        method: "POST",
+        headers: { "content-type": "application/json" },
+        // allowRetry:false —— 只应答仍 OPEN 的问题；答后的新消息返回 no_pending 交 bridge 按普通消息处理。
+        body: JSON.stringify({ taskId: args.taskId, text: args.text, allowRetry: false })
+      });
+      const data = await res.json().catch(() => ({}));
+      if (res.status === 409) return { no_pending: true, taskId: args.taskId };
+      if (!res.ok) return { error: data?.error ?? "reply failed", status: res.status };
+      return { ok: true, taskId: args.taskId, mode: data.mode, injected: data.injected, deduped: data.deduped };
+    }
+  }
+};
+
 // src/mcp/server.ts
 function createServer() {
   const server = new import_mcp.McpServer({ name: "tower", version: "0.1.0" });
@@ -55593,7 +55775,8 @@ function createServer() {
     ...knowledgeTools,
     ...noteAssetTools,
     ...terminalTools,
-    ...reportTools
+    ...reportTools,
+    ...harnessTools
   };
   for (const [name, tool] of Object.entries(allTools)) {
     server.tool(

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "tower-studio",
-  "version": "0.2.44",
+  "version": "0.2.45",
   "description": "AI Task Orchestration Platform — Kanban + Terminal + Code Editor + MCP",
   "bin": {
     "tower": "bin/tower.mjs"
@@ -20,9 +20,9 @@
     "scripts/migrate-data.ts",
     "scripts/run-migrations.ts",
     "scripts/migrations/",
-    "scripts/post-tool-hook.js",
-    "scripts/session-start-hook.js",
-    "scripts/stop-hook.js",
+    "scripts/tower-post-tool-hook.js",
+    "scripts/tower-session-start-hook.js",
+    "scripts/tower-stop-hook.js",
     "dist/mcp-server.cjs",
     "skills/",
     "next.config.ts",
@@ -30,7 +30,7 @@
   ],
   "scripts": {
     "predev": "TOWER_DATA_DIR=\"$HOME/.tower-dev\" DATABASE_URL=\"file:$HOME/.tower-dev/database/tower.db\" node scripts/ensure-dev-db.js && pnpm db:migrate && pnpm mcp:build",
-    "dev": "NEXT_DISTDIR=.next-dev TOWER_DATA_DIR=\"$HOME/.tower-dev\" DATABASE_URL=\"file:$HOME/.tower-dev/database/tower.db\" next dev --webpack -p 9022",
+    "dev": "NEXT_DISTDIR=.next-dev TOWER_DATA_DIR=\"$HOME/.tower-dev\" DATABASE_URL=\"file:$HOME/.tower-dev/database/tower.db\" env -u TURBOPACK next dev --webpack -p 9022",
     "build": "pnpm mcp:build && rm -rf .next && next build && find .next -name '*.map' -delete && cp -R .next/static .next/standalone/.next/ && cp -R public .next/standalone/ && node scripts/prune-standalone-natives.js",
     "release": "pnpm build && npm pack",
     "release:smoke": "node scripts/release-smoke.js",

package/prisma/schema.prisma

@@ -83,6 +83,7 @@ model Task {
   promptId    String?
   baseBranch  String?
   subPath     String?
+  parentTaskId String?   // 派生来源：派生此任务的父任务 id（父任务终端注入的 TOWER_TASK_ID）。裸字符串无 relation，与 promptId 同惯例
   previewCommandOverride String?
   previewPortOverride    Int?
   projectId   String
@@ -91,17 +92,23 @@ model Task {
   updatedAt   DateTime   @updatedAt
   doneAt      DateTime?  // 进入 DONE 的时间戳，用于「归档期限」判定（离开 DONE 时清空）
 
+  // 无人值守：开启后 agent 遇阻塞主动 ask_human/notify_human（经 tower-ask 技能用平台 MCP 外推）；
+  // 关闭则只在 /harness 面板内显示等待。Tower 只记录+park/resume，不发消息、不存平台绑定。
+  unattended    Boolean   @default(false)
+
   project    Project         @relation(fields: [projectId], references: [id], onDelete: Cascade)
   executions TaskExecution[]
   messages   TaskMessage[]
   labels     TaskLabel[]
   notes      ProjectNote[]
   assets     ProjectAsset[]
+  harnessMessages HarnessMessage[]
   version    Version?        @relation(fields: [versionId], references: [id], onDelete: SetNull)
 
   @@index([projectId])
   @@index([status])
   @@index([versionId])
+  @@index([parentTaskId])
 }
 
 model TaskExecution {
@@ -137,6 +144,36 @@ model TaskExecution {
   @@index([insightNoteId])
 }
 
+// 无人值守：一张表记所有 harness→人 的消息（ask/notify/done/failed）—— 纯记录/日志，Tower 不发送。
+// - kind='ask' 是 park/resume 闭环载体，带生命周期 state：OPEN→ANSWERED|CANCELLED|IGNORED|EXPIRED。
+// - notify/done/failed 是日志行，出生即 CLOSED，不参与「待回复」过滤。
+// - 不变量：待回复 = kind='ask' AND state='OPEN'。回复内容记在 replyText（reply_to_ask 写入）。
+model HarnessMessage {
+  id           String   @id @default(cuid())
+  taskId       String
+  executionId  String?
+  kind         String   // "ask" | "notify" | "done" | "failed"（映射 OutboundKind）
+  content      String
+  replyText    String?
+  repliedAt    DateTime?
+  state        HarnessState @default(OPEN)
+  createdAt    DateTime @default(now())
+
+  task Task @relation(fields: [taskId], references: [id], onDelete: Cascade)
+
+  @@index([taskId, kind, state])
+  @@index([state])
+}
+
+enum HarnessState {
+  OPEN
+  ANSWERED
+  CANCELLED
+  IGNORED
+  EXPIRED
+  CLOSED
+}
+
 model TaskMessage {
   id          String      @id @default(cuid())
   role        MessageRole

package/scripts/migrations/0005-add-parent-task-id.ts

@@ -0,0 +1,29 @@
+/**
+ * Add Task.parentTaskId — 派生中枢的父任务链。
+ *
+ * 子任务由父任务终端的 claude 调 create_task 创建时，写入派生它的父任务 id
+ * （父任务 PTY 注入的 TOWER_TASK_ID）。用于完成回推（子任务 stop → 通知父任务
+ * review）及将来的派生子任务展示。裸字符串列、无 FK relation（与 promptId 同惯例）。
+ *
+ * 加性 raw SQL —— 绝不碰 notes_fts 虚表（prisma db push 会卡死）。
+ * 幂等：SQLite 无 ADD COLUMN IF NOT EXISTS，先 PRAGMA 检查列是否存在。
+ *
+ * Table/column names hardcoded on purpose — a migration is a point-in-time
+ * snapshot and must keep doing exactly what it did the day it shipped.
+ */
+
+import type { PrismaClient } from "@prisma/client";
+
+export async function up(prisma: PrismaClient): Promise<void> {
+  const cols = await prisma.$queryRawUnsafe<Array<{ name: string }>>(
+    `PRAGMA table_info("Task")`
+  );
+  const hasCol = Array.isArray(cols) && cols.some((c) => c.name === "parentTaskId");
+  if (!hasCol) {
+    await prisma.$executeRawUnsafe(`ALTER TABLE "Task" ADD COLUMN "parentTaskId" TEXT`);
+    console.log("  added Task.parentTaskId");
+  }
+  await prisma.$executeRawUnsafe(
+    `CREATE INDEX IF NOT EXISTS "Task_parentTaskId_idx" ON "Task"("parentTaskId")`
+  );
+}

package/scripts/{stop-hook.js → tower-stop-hook.js}

@@ -3,13 +3,14 @@
  * Tower Stop Hook
  *
  * Claude Code Stop hook that fires when Claude finishes responding.
- * Notifies Tower so the UI can show a "response complete" indicator.
+ * Notifies Tower so the UI can show a "response complete" indicator, and so a
+ * derived child task can hand its turn back to the parent task for review.
  *
  * Environment:
  *   TOWER_TASK_ID  - Required. Skip if absent (not a Tower session).
  *   TOWER_API_URL  - Required. Base URL of the Tower server.
  *
- * Stdin: JSON object from Claude Code with { session_id, cwd, ... }
+ * Stdin: JSON object from Claude Code with { session_id, transcript_path, cwd, ... }
  */
 
 "use strict";
@@ -17,6 +18,43 @@
 const http = require("http");
 const https = require("https");
 
+/**
+ * 从 Claude Code 的 transcript 提取最后一条 assistant 回复（截断 2000 字）。
+ * 用于完成回推：父任务据此 review，不必读整个终端缓冲。best-effort，失败返回空串。
+ * transcript 是 jsonl，行格式随 CC 版本略有差异，这里兼容 obj.message.content / obj.content。
+ */
+function extractLastAssistantText(transcriptPath) {
+  if (!transcriptPath) return "";
+  try {
+    const fs = require("fs");
+    const raw = fs.readFileSync(transcriptPath, "utf8");
+    const lines = raw.split("\n");
+    for (let i = lines.length - 1; i >= 0; i--) {
+      const line = lines[i].trim();
+      if (!line) continue;
+      let obj;
+      try { obj = JSON.parse(line); } catch { continue; }
+      const msg = obj.message || obj;
+      const role = msg.role || obj.type;
+      if (role !== "assistant" || !msg.content) continue;
+      let text = "";
+      if (Array.isArray(msg.content)) {
+        text = msg.content
+          .filter((c) => c && c.type === "text" && typeof c.text === "string")
+          .map((c) => c.text)
+          .join("\n")
+          .trim();
+      } else if (typeof msg.content === "string") {
+        text = msg.content.trim();
+      }
+      if (text) return text.slice(0, 2000);
+    }
+  } catch {
+    /* best effort — transcript unreadable */
+  }
+  return "";
+}
+
 function main() {
   // Always drain stdin first — Claude Code writes the hook payload there
   // and if we exit before reading it, Windows libuv can crash the parent
@@ -52,10 +90,11 @@ function main() {
     try { data = JSON.parse(input); } catch { process.exit(0); }
 
     const sessionId = data.session_id || "";
+    const lastReply = extractLastAssistantText(data.transcript_path);
 
     // POST to Tower
     const url = new URL("/api/internal/hooks/stop", apiUrl);
-    const payload = JSON.stringify({ taskId, sessionId });
+    const payload = JSON.stringify({ taskId, sessionId, lastReply });
     const mod = url.protocol === "https:" ? https : http;
 
     const req = mod.request({

package/skills/tower/SKILL.md

@@ -39,6 +39,7 @@ Use Tower tools when the user wants to:
 - Organize tasks with labels or status changes
 - Get daily work summary or pending todo list
 - Check what was done today or what's left to do
+- **Run or relay unattended tasks** — when `TOWER_UNATTENDED=1`, or you need to push an `ask_human` / `notify_human` to a person, or relay a human's reply back into a parked task (`reply_to_ask`): read [`references/unattended-messaging.md`](references/unattended-messaging.md) for the send/receive contract.
 
 ---
 
@@ -255,6 +256,23 @@ section so we can always trace **why** a task exists and **who** asked for it.
 hard locators (chat id / message id / link) verbatim — they are what makes the
 task traceable later.
 
+#### Parent task derivation (派生子任务)
+
+If `TOWER_TASK_ID` is set in your environment (run `echo $TOWER_TASK_ID` to check),
+you are operating **inside a Tower task terminal** — so any task you create here is
+a **child task derived from the current (parent) task**. Render its source as:
+
+```
+## 来源
+
+- 渠道：父任务派生
+- 父任务：{当前任务标题，知道就填}（id: $TOWER_TASK_ID）
+```
+
+Tower also records this link structurally on the new task's `parentTaskId`
+automatically (used for parent→child completion notifications) — this `## 来源`
+is just the human-readable mirror. The id alone is enough if you don't know the title.
+
 #### Bridge metadata contract (`<task-source>` block)
 
 External bridges (Feishu/Lark, etc.) inject a machine-readable block into the
@@ -468,6 +486,19 @@ Categories: `task`, `project`, `repository`, `note`, `asset`, `all`. Result coun
 
 ---
 
+## 无人值守收发消息（Unattended messaging）
+
+When operating in unattended mode (`TOWER_UNATTENDED=1`) or acting as the bridge that relays a
+human's reply back to a parked task, follow the send/receive contract in
+[`references/unattended-messaging.md`](references/unattended-messaging.md). Key points:
+
+- Tower **only records + parks/resumes** — it never sends platform messages. You (the agent/bridge)
+  send via the platform's own MCP (Feishu/WeChat/OpenClaw…).
+- Every outbound ask/notify **must** carry the correlation token `[[tower:task=<taskId>]]`.
+- Relay a human's reply with the **`reply_to_ask(taskId, text)`** MCP tool (not raw
+  `send_task_terminal_input`) so Tower records the reply. If it returns `{ no_pending: true }`,
+  handle the message as an ordinary request.
+
 ## Important Rules
 
 - **Scope boundary**: You are a **task management operator only**. If the user asks you to write code, explain code, debug, search the web, read/write files, or anything outside Tower task management, reply: "抱歉，我只能帮你管理工作区、项目和任务。编码、调试等操作请在任务终端中完成。" Do NOT attempt to answer out-of-scope questions.