u1s1-cli 1.13.2 → 1.14.0

package/dist/agent-setup.d.ts

@@ -141,11 +141,8 @@ export declare function toProviderModels(models: ModelDef[], options?: {
 export declare function endpointProviderEntry(ep: CustomEndpoint, options?: {
     literalKey?: boolean;
 }): Record<string, unknown>;
-/**
- * 生成 /workflow 提示词模板到 <agentDir>/prompts/workflow.md:引导主 agent
- * 拆解任务 → 生成沙箱脚本 → 调 run_workflow 执行。每次启动重写,便于随版迭代文案。
- */
-export declare function ensureWorkflowPromptTemplate(): void;
+/** run_workflow 已下线:清掉旧版本每次启动写入的 /workflow 提示词模板,免得它引导模型调用不存在的工具。 */
+export declare function removeLegacyWorkflowPromptTemplate(): void;
 export declare function scrubForeignProviderEnv(): void;
 /** 把各端点密钥放进环境(TUI 直接 process.env;web 传给子进程)。 */
 export declare function endpointKeyEnv(): Record<string, string>;

package/dist/agent-setup.js

@@ -314,7 +314,7 @@ export function writeWebToolsExtension(cfg, features) {
     const imageLine = features.imageGen
         ? `  pi.registerTool(tools.createImageTool({ baseUrl, apiKey: process.env.U1S1_API_KEY }));\n`
         : "";
-    // spawn_subagent / run_workflow 只给主会话注册;子 agent 环境里跳过,杜绝孙 agent 递归 spawn
+    // spawn_subagent 只给主会话注册;子 agent 环境里跳过,杜绝孙 agent 递归 spawn
     const subagentBlock = `  if (process.env.U1S1_IN_SUBAGENT !== "1") {\n` +
         `    let getParentModel = () => undefined;\n` +
         `    pi.on("session_start", (_event, ctx) => {\n` +
@@ -324,10 +324,6 @@ export function writeWebToolsExtension(cfg, features) {
         `      }\n` +
         `    });\n` +
         `    pi.registerTool(tools.createSubagentTool(getParentModel));\n` +
-        `    try {\n` +
-        `      const workflow = await import(${JSON.stringify(new URL("./workflow/tool.js", import.meta.url).href)});\n` +
-        `      pi.registerTool(workflow.createRunWorkflowTool(getParentModel));\n` +
-        `    } catch {}\n` +
         `  }\n`;
     // 密钥剥离守卫也从这里装:Desktop App 的 pi 跑在 pi-web-ui 子进程里,没有
     // 启动器代码,只有扩展能替它把 U1S1_API_KEY / U1S1_EP_KEY_* 挡在子进程之外
@@ -699,45 +695,12 @@ export function endpointProviderEntry(ep, options = {}) {
         models: toProviderModels(ep.models),
     };
 }
-/**
- * 生成 /workflow 提示词模板到 <agentDir>/prompts/workflow.md:引导主 agent
- * 拆解任务 → 生成沙箱脚本 → 调 run_workflow 执行。每次启动重写,便于随版迭代文案。
- */
-export function ensureWorkflowPromptTemplate() {
-    const dir = join(agentDir, "prompts");
-    mkdirSync(dir, { recursive: true });
-    const content = `---
-description: Orchestrate many sub-agents for a large parallelizable task via run_workflow
-argument-hint: "<task description>"
----
-# Workflow: $ARGUMENTS
-
-First decide whether this task really needs a workflow. Good fit: many independent pieces (e.g. translating each locale file, renaming across hundreds of files, reviewing many modules). Bad fit: a few small edits — just do them directly with your own tools.
-
-If it is a fit:
-
-0. **Prefer a built-in template** when one matches — call \`run_workflow\` with \`template\` + \`input\` instead of writing a script:
-   - \`i18n\` — translate locale file(s) to N languages: { "langs": ["en", "ja"], "source": "src/locales/zh.json" }
-   - \`review\` — per-file review + adversarial verification: { "files": [...] } or omit for git-diff files
-   - \`research\` — parallel investigation + synthesis: { "questions": ["..."], "context": "..." }
-   - \`refactor\` — rule-first batch refactor in isolated worktrees: { "instruction": "...", "files": [...] }
-1. Otherwise decompose the task and write a JavaScript orchestration script. Top-level await and return are allowed. The script runs in a sandbox where ONLY these are available:
-   - \`subagent(task)\` or \`subagent({ task, model })\` — runs one sub-agent, resolves to its final output text
-   - \`parallel([() => ..., ...])\` — concurrent fan-out; each thunk's error becomes \`null\`; barrier semantics
-   - \`pipeline(items, [stage1, stage2, ...])\` — each item flows through all stages independently (prefer over parallel)
-   - \`judge(question)\` — cheap tool-free model call returning true/false; use for loop-until-done checks
-   - \`subagent({ task, worktree: true })\` — run in an isolated temp git worktree (auto-cleaned) when tasks would write conflicting files
-   - \`log(...)\`, \`setTimeout/clearTimeout\`, standard JS builtins (Promise/JSON/Math/...)
-   - NO require/import/process/fetch/fs access — the static validator rejects scripts that try
-2. Every task string must be fully self-contained: which files to read/write, what "done" means, how to self-verify.
-3. Call the \`run_workflow\` tool with the full source as \`script\`. Read its report carefully; on failures fix the script, or rerun with \`script_path\` + \`resume: true\` to continue from saved progress. For workflows worth rerunning (e.g. recurring i18n syncs), pass a memorable \`save_as\` name — rerun later with just \`script_path\`.
-
-Keep scripts deterministic (same order of subagent calls every run) so resume works. Summarize the outcome to the user afterwards in their language.
-`;
-    const p = join(dir, "workflow.md");
-    if (!existsSync(p) || readFileSync(p, "utf8") !== content) {
-        writeFileSync(p, content);
+/** run_workflow 已下线:清掉旧版本每次启动写入的 /workflow 提示词模板,免得它引导模型调用不存在的工具。 */
+export function removeLegacyWorkflowPromptTemplate() {
+    try {
+        rmSync(join(agentDir, "prompts", "workflow.md"), { force: true });
     }
+    catch { }
 }
 /**
  * pi 会把环境里的厂商密钥(ANTHROPIC_API_KEY 等)当作「已配置的 provider」,

package/dist/index.js

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import { execSync, spawnSync } from "node:child_process";
 import { writeFileSync } from "node:fs";
-import { cleanupBrandThemes, endpointKeyEnv, endpointProviderEntry, ensureBrandPrompt, ensureDefaultSettings, ensureProviderModels, ensureWorkflowPromptTemplate, scrubForeignProviderEnv, toProviderModels, writeAnnouncementsExtension, writeAttributionExtension, writeMcpExtension, writeCompactUiExtension, writeErrorHumanizeExtension, writeWebToolsExtension, } from "./agent-setup.js";
+import { cleanupBrandThemes, endpointKeyEnv, endpointProviderEntry, ensureBrandPrompt, ensureDefaultSettings, ensureProviderModels, removeLegacyWorkflowPromptTemplate, scrubForeignProviderEnv, toProviderModels, writeAnnouncementsExtension, writeAttributionExtension, writeMcpExtension, writeCompactUiExtension, writeErrorHumanizeExtension, writeWebToolsExtension, } from "./agent-setup.js";
 import { Text } from "@earendil-works/pi-tui";
 import { printConsoleBanner } from "./brand.js";
 import { activeSite, agentDir, apiModelToDef, CUSTOM_ENDPOINTS, isPortableInstall, loadConfig, MODELS, persistPreferredModel, PROVIDER_ID, readCompactionBudgetSetting, readCompactionReserveTokens, readSettings, refValid, resolvePreferredModel, setModelsFromApi, VERSION, } from "./config.js";
@@ -245,7 +245,7 @@ async function runAgent(cfg, args) {
     const officialCfg = { ...cfg, baseUrl: signing.baseUrl, apiKey: signing.localKey };
     ensureBrandPrompt(await shellReady);
     ensureProviderModels(officialCfg);
-    ensureWorkflowPromptTemplate();
+    removeLegacyWorkflowPromptTemplate();
     // 联网工具经 agentDir/extensions 投影,TUI 和 Desktop App 共用一份注册
     writeWebToolsExtension(officialCfg, {
         webSearch: webSearchEnabled,

package/dist/subagent.js

@@ -1,6 +1,6 @@
 import { createAgentSession, DefaultResourceLoader, getAgentDir, hasTrustRequiringProjectResources, ModelRuntime, ProjectTrustStore, SessionManager, SettingsManager, } from "@earendil-works/pi-coding-agent";
 import { tr } from "./i18n.js";
-// ---- 子 agent spawn 基础设施:spawn_subagent 工具与 workflow runner 共用 ----
+// ---- 子 agent spawn 基础设施:spawn_subagent 工具使用 ----
 /** 同时在跑的子 agent 上限;超额排队,防止打爆网关。 */
 export const SUBAGENT_CONCURRENCY = 4;
 /** 单个子任务默认超时;到点 abort,不让一个卡死的任务拖住整批。 */

package/dist/tools.js

@@ -209,7 +209,7 @@ export function createSearchTool(cfg) {
         },
     });
 }
-// ---- spawn_subagent 工具:spawn 设施在 ./subagent.ts,与 workflow runner 共用 ----
+// ---- spawn_subagent 工具:spawn 设施在 ./subagent.ts ----
 /** 单次调用最多并行任务数;再多模型也看不过来,让主 agent 分批调。 */
 const SUBAGENT_MAX_TASKS = 10;
 /** 子 agent 工具:独立上下文窗口干活,只把结果摘要带回主对话,不污染主 token 预算。 */

package/dist/web.js

@@ -1,7 +1,7 @@
 import { mkdirSync, mkdtempSync, rmSync } from "node:fs";
 import { tmpdir } from "node:os";
 import { join } from "node:path";
-import { cleanupBrandThemes, endpointKeyEnv, ensureAuthCredential, ensureBrandPrompt, ensureWorkflowPromptTemplate, ensureDefaultSettings, ensureProviderModels, scrubForeignProviderEnv, writeAttributionExtension, writeMcpExtension, writeWebToolsExtension, } from "./agent-setup.js";
+import { cleanupBrandThemes, endpointKeyEnv, ensureAuthCredential, ensureBrandPrompt, removeLegacyWorkflowPromptTemplate, ensureDefaultSettings, ensureProviderModels, scrubForeignProviderEnv, writeAttributionExtension, writeMcpExtension, writeWebToolsExtension, } from "./agent-setup.js";
 import { agentDir, apiModelToDef, MODELS, resolvePreferredModel, setModelsFromApi, u1s1Dir, writeAgentDefaultModel, } from "./config.js";
 import { ensureSearchTools } from "./search-tools.js";
 import { ensureUsableShell } from "./shell-doctor.js";
@@ -87,8 +87,8 @@ export async function prepareWebEnv(cfg) {
     webOfficialCfg = officialCfg;
     const modelsPath = refreshWebModels();
     ensureBrandPrompt(await shellReady);
-    // /workflow 提示词模板与 TUI 同源,Desktop App 也要有
-    ensureWorkflowPromptTemplate();
+    // 清理旧版 /workflow 提示词模板
+    removeLegacyWorkflowPromptTemplate();
     // pi-web-ui 靠 auth.json 判断「已配置」,否则网页会弹 pi 安装引导
     ensureAuthCredential();
     // 联网工具经 agentDir/extensions 投影,和 TUI 共用一份注册

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "u1s1-cli",
-  "version": "1.13.2",
+  "version": "1.14.0",
   "description": "u1s1 — 有一说一,最省心的 AI 编程搭子。终端里用中文说需求,AI 帮你读文件、改代码、跑命令。",
   "type": "module",
   "bin": {

package/dist/workflow/runner.d.ts

@@ -1,67 +0,0 @@
-import { type ParentModelRef } from "../subagent.js";
-/** 整个 run 的默认墙钟上限。 */
-export declare const WORKFLOW_TIMEOUT_MS: number;
-/** 默认整个 run 的 token 预算;0 或负数表示不设限。 */
-export declare const WORKFLOW_DEFAULT_BUDGET_TOKENS = 20000000;
-interface ProgressEntry {
-    key: string;
-    /** 任务摘要(前 120 字),调试/排查用,key 才是身份。 */
-    task: string;
-    ok: boolean;
-    text: string;
-    ms: number;
-}
-/** JSONL 进度存档:一行一个已完成的子任务,断点续跑时按 key 跳过。 */
-export declare class ProgressStore {
-    #private;
-    readonly path: string;
-    constructor(path: string);
-    getSuccessful(key: string): ProgressEntry | undefined;
-    append(entry: ProgressEntry): void;
-}
-/** 静态白名单校验:语法能编译 + 不碰沙箱之外的任何能力。 */
-export declare function validateScript(code: string): string[];
-export interface WorkflowRunResult {
-    /** 给主 agent 的完整报告(markdown)。 */
-    report: string;
-    details: {
-        spawns: number;
-        ok: number;
-        failed: number;
-        cached: number;
-        seconds: number;
-        aborted: boolean;
-    };
-}
-export interface WorkflowProgress {
-    spawns: number;
-    ok: number;
-    failed: number;
-    cached: number;
-    running: number;
-    spentTokens: number;
-    budgetTokens: number;
-}
-export interface WorkflowRunOptions {
-    /** 脚本源码(调用方负责落盘)。 */
-    code: string;
-    /** 进度存档路径;同名文件存在且 resume=true 时跳过已完成任务。 */
-    progressPath: string;
-    resume?: boolean;
-    parentModel: ParentModelRef;
-    /** 主会话的项目信任裁决;子 agent 与临时 worktree 都沿用它,缺省按 trust.json 非交互裁决。 */
-    projectTrusted?: boolean;
-    signal?: AbortSignal;
-    timeoutMs?: number;
-    /** 整个 run 的 token 上限;缺省 WORKFLOW_DEFAULT_BUDGET_TOKENS,<=0 不限。 */
-    budgetTokens?: number;
-    /** 每次子任务状态变化时回调(工具层节流后转成流式进度)。 */
-    onProgress?: (p: WorkflowProgress) => void;
-}
-/** 执行一个 workflow 脚本,返回给主对话的报告。不抛错——失败也进报告让模型自行修复。 */
-export declare function runWorkflow(opts: WorkflowRunOptions): Promise<WorkflowRunResult>;
-/** 工作区目录:项目根 .u1s1/workflows/(脚本 + 进度存档都在这里)。 */
-export declare function workflowsDir(): string;
-/** 内联脚本落盘,返回脚本路径(进度存档按同名约定派生)。 */
-export declare function saveWorkflowScript(code: string): string;
-export {};

package/dist/workflow/runner.js

@@ -1,349 +0,0 @@
-import { createHash } from "node:crypto";
-import { execFileSync } from "node:child_process";
-import { appendFileSync, existsSync, mkdirSync, readFileSync, rmSync, writeFileSync } from "node:fs";
-import vm from "node:vm";
-import { dirname, resolve } from "node:path";
-import { tr } from "../i18n.js";
-import { runPool, runSubagent, SUBAGENT_CONCURRENCY } from "../subagent.js";
-// ---- WorkflowRunner:执行模型生成的编排脚本(路线 A:主进程 vm 上下文) ----
-// 定位「防误不防恶」:vm 非硬安全边界,靠白名单注入 + 静态校验 + 脚本落盘可审查兜底。
-/** 整个 run 的默认墙钟上限。 */
-export const WORKFLOW_TIMEOUT_MS = 30 * 60_000;
-/** 单个子任务的超时(与 spawn_subagent 工具一致)。 */
-const PER_TASK_TIMEOUT_MS = 15 * 60_000;
-/** 报告里最多保留多少行脚本 log 输出。 */
-const MAX_LOG_LINES = 60;
-/** 默认整个 run 的 token 预算;0 或负数表示不设限。 */
-export const WORKFLOW_DEFAULT_BUDGET_TOKENS = 20_000_000;
-/** JSONL 进度存档:一行一个已完成的子任务,断点续跑时按 key 跳过。 */
-export class ProgressStore {
-    path;
-    #cache = new Map();
-    constructor(path) {
-        this.path = path;
-        mkdirSync(dirname(path), { recursive: true });
-        if (!existsSync(path))
-            return;
-        for (const line of readFileSync(path, "utf8").split("\n")) {
-            if (!line.trim())
-                continue;
-            try {
-                const e = JSON.parse(line);
-                if (typeof e.key === "string")
-                    this.#cache.set(e.key, e);
-            }
-            catch {
-                // 尾部半行(进程被杀)直接忽略
-            }
-        }
-    }
-    getSuccessful(key) {
-        const entry = this.#cache.get(key);
-        return entry?.ok === true && typeof entry.text === "string" ? entry : undefined;
-    }
-    append(entry) {
-        this.#cache.set(entry.key, entry);
-        appendFileSync(this.path, `${JSON.stringify(entry)}\n`);
-    }
-}
-/**
- * 断点续跑的任务标识:任务内容 + 模型的哈希。
- * 前提是脚本确定性好 —— 相同任务串在续跑时视为同一任务(循环里重复相同任务串
- * 的场景续跑粒度不精确,W1 接受此限制;i18n 这类每项任务内容唯一的场景完全够用)。
- */
-function taskKey(task, model) {
-    return createHash("sha1").update(`${task}|${model ?? ""}`).digest("hex").slice(0, 16);
-}
-/** 去掉注释和字符串字面量后再扫禁用模式,避免文档式注释误报。 */
-function stripCommentsAndStrings(code) {
-    return code
-        .replace(/\/\*[\s\S]*?\*\//g, " ")
-        .replace(/(^|[^:])\/\/[^\n]*/g, "$1 ")
-        .replace(/"(?:[^"\\\n]|\\.)*"/g, '""')
-        .replace(/'(?:[^'\\\n]|\\.)*'/g, "''")
-        .replace(/`(?:[^`\\]|\\.)*`/g, "``");
-}
-/** 静态白名单校验:语法能编译 + 不碰沙箱之外的任何能力。 */
-export function validateScript(code) {
-    const errors = [];
-    try {
-        // 与执行时同款包装,保证报错行号一致
-        new vm.Script(`(async () => {\n${code}\n})()`, { filename: "workflow.mjs" });
-    }
-    catch (e) {
-        errors.push(tr(`语法错误:${e.message}`, `Syntax error: ${e.message}`));
-        return errors;
-    }
-    const bare = stripCommentsAndStrings(code);
-    const forbidden = [
-        [/\brequire\s*\(/, "require()"],
-        [/\bimport\s*\(/, tr("动态 import()", "dynamic import()")],
-        [/^\s*import\s/m, tr("静态 import", "static import")],
-        [/\bprocess\b/, tr("process 对象", "the process object")],
-        [/\bglobalThis\b/, "globalThis"],
-        [/\bfetch\s*\(/, "fetch()"],
-        [/\beval\s*\(/, "eval()"],
-        [/\bFunction\s*\(/, "new Function()"],
-        [/\.constructor\b/, tr(".constructor(原型链逃逸)", ".constructor (prototype-chain escape)")],
-        [/\bprototype\b/, tr("prototype(原型链逃逸)", "prototype (prototype-chain escape)")],
-        [/\b__proto__\b/, "__proto__"],
-        [/\bWebAssembly\b/, "WebAssembly"],
-        [/node:/, tr("node: 内置模块", "node: built-in modules")],
-        [/child_process/, "child_process"],
-        [/\bfs\b\s*\./, tr("fs 模块", "the fs module")],
-    ];
-    for (const [re, label] of forbidden) {
-        if (re.test(bare))
-            errors.push(tr(`脚本使用了沙箱之外的能力:${label}`, `The script uses something outside the sandbox: ${label}`));
-    }
-    return errors;
-}
-/** 执行一个 workflow 脚本,返回给主对话的报告。不抛错——失败也进报告让模型自行修复。 */
-export async function runWorkflow(opts) {
-    const started = Date.now();
-    const logs = [];
-    const stats = { spawns: 0, ok: 0, failed: 0, cached: 0 };
-    // 内部中止控制器:父会话 ESC 或整体超时都会触发,并传导到每个子 session
-    const internal = new AbortController();
-    const onParentAbort = () => internal.abort(opts.signal?.reason);
-    opts.signal?.addEventListener("abort", onParentAbort, { once: true });
-    let timedOut = false;
-    const overallTimer = setTimeout(() => {
-        timedOut = true;
-        const minutes = Math.round((opts.timeoutMs ?? WORKFLOW_TIMEOUT_MS) / 60_000);
-        internal.abort(new Error(tr(`整个工作流超时(${minutes} 分钟)`, `The workflow timed out (${minutes} minutes)`)));
-    }, opts.timeoutMs ?? WORKFLOW_TIMEOUT_MS);
-    const store = new ProgressStore(opts.progressPath);
-    const budgetTokens = opts.budgetTokens ?? WORKFLOW_DEFAULT_BUDGET_TOKENS;
-    let spentTokens = 0;
-    let running = 0;
-    const progress = { spawns: 0, ok: 0, failed: 0, cached: 0, running: 0, spentTokens: 0, budgetTokens };
-    const reportProgress = () => {
-        progress.spentTokens = spentTokens;
-        opts.onProgress?.({ ...progress });
-    };
-    /** git worktree 隔离:在 .u1s1/worktrees/ 下建临时工作树,返回其路径。 */
-    let worktreeSeq = 0;
-    function createTempWorktree() {
-        const dir = resolve(workflowsDir(), "../../.u1s1-worktrees", `wf-${Date.now()}-${++worktreeSeq}`);
-        execFileSync("git", ["worktree", "add", "--detach", dir], { stdio: "pipe" });
-        return dir;
-    }
-    function removeWorktree(dir) {
-        try {
-            execFileSync("git", ["worktree", "remove", "--force", dir], { stdio: "pipe" });
-        }
-        catch {
-            rmSync(dir, { recursive: true, force: true });
-            try {
-                execFileSync("git", ["worktree", "prune"], { stdio: "pipe" });
-            }
-            catch {
-                // 尽力清理即可
-            }
-        }
-    }
-    /** 注入沙箱的 subagent():字符串或 {task, model, worktree} 都行,返回最终输出文本。 */
-    async function subagentImpl(input) {
-        const o = typeof input === "string" ? { task: input } : (input ?? {});
-        const task = typeof o.task === "string" ? o.task.trim() : "";
-        if (!task)
-            throw new Error(tr("subagent() 需要 task 字符串", "subagent() needs a task string"));
-        const model = typeof o.model === "string" && o.model ? o.model : undefined;
-        if (internal.signal.aborted)
-            throw new Error(tr("工作流已中止,不再派发新子任务", "The workflow was aborted; no new subtasks will be started"));
-        if (budgetTokens > 0 && spentTokens >= budgetTokens) {
-            throw new Error(tr(`token 预算已用尽(已用 ${spentTokens.toLocaleString()} / 上限 ${budgetTokens.toLocaleString()}),不再派发新子任务`, `Token budget exhausted (used ${spentTokens.toLocaleString()} / limit ${budgetTokens.toLocaleString()}); no new subtasks will be started`));
-        }
-        const key = taskKey(task, model);
-        if (opts.resume) {
-            const prev = store.getSuccessful(key);
-            if (prev) {
-                stats.cached++;
-                progress.cached = stats.cached;
-                reportProgress();
-                return prev.text;
-            }
-        }
-        stats.spawns++;
-        progress.spawns = stats.spawns;
-        running++;
-        progress.running = running;
-        reportProgress();
-        const t0 = Date.now();
-        let worktreeDir;
-        if (o.worktree === true)
-            worktreeDir = createTempWorktree();
-        try {
-            const out = await runSubagent({
-                task,
-                model,
-                parentModel: opts.parentModel,
-                timeoutMs: PER_TASK_TIMEOUT_MS,
-                signal: internal.signal,
-                cwd: worktreeDir,
-                // 临时 worktree 永远不在 trust.json 里:信任裁决按源仓库(主进程 cwd)算
-                projectTrusted: opts.projectTrusted,
-                trustCwd: process.cwd(),
-                noTools: o.noTools === true,
-            });
-            stats.ok++;
-            progress.ok = stats.ok;
-            spentTokens += out.usage.totalTokens;
-            store.append({ key, task: task.slice(0, 120), ok: true, text: out.text, ms: Date.now() - t0 });
-            return out.text;
-        }
-        catch (error) {
-            stats.failed++;
-            progress.failed = stats.failed;
-            const msg = error.message || tr("未知错误", "Unknown error");
-            store.append({ key, task: task.slice(0, 120), ok: false, text: msg, ms: Date.now() - t0 });
-            throw new Error(msg, { cause: error });
-        }
-        finally {
-            if (worktreeDir)
-                removeWorktree(worktreeDir);
-            running--;
-            progress.running = running;
-            reportProgress();
-        }
-    }
-    /** 注入沙箱的 judge():廉价无工具模型调用,严格回答 PASS/FAIL,转成布尔。 */
-    async function judgeImpl(question) {
-        if (typeof question !== "string" || !question.trim())
-            throw new Error(tr("judge() 需要问题字符串", "judge() needs a question string"));
-        const answer = await subagentImpl({
-            task: tr(`回答以下判定问题。只允许回答一个词:PASS 或 FAIL,不要任何其他内容。\n\n判定问题:${question.trim()}`, `Answer the following yes/no check. Reply with exactly one word, PASS or FAIL, and nothing else.\n\nCheck: ${question.trim()}`),
-            noTools: true,
-        });
-        const pass = /\bPASS\b/i.test(answer) && !/\bFAIL\b/i.test(answer);
-        if (!pass && !/\bFAIL\b/i.test(answer))
-            logs.push(tr(`⚠ judge 回答无法解析,按 FAIL 处理:${answer.slice(0, 120)}`, `⚠ Couldn't parse the judge answer; treating it as FAIL: ${answer.slice(0, 120)}`));
-        return pass;
-    }
-    /** barrier 扇出:全部并发(封顶排队),单个失败该项为 null,不拖垮整批。 */
-    async function parallel(thunks) {
-        if (!Array.isArray(thunks))
-            throw new Error(tr("parallel() 需要一个 thunk 数组", "parallel() needs an array of thunks"));
-        const results = [];
-        await runPool({
-            items: thunks,
-            limit: SUBAGENT_CONCURRENCY,
-            run: async (thunk, i) => {
-                results[i] = await Promise.resolve()
-                    .then(thunk)
-                    .catch((e) => {
-                    logs.push(tr(`✗ 任务 ${i + 1} 失败:${e.message}`, `✗ Task ${i + 1} failed: ${e.message}`));
-                    return null;
-                });
-            },
-            signal: internal.signal,
-        });
-        return results;
-    }
-    /** 无屏障流水线:每个 item 独立穿过所有 stage,item 失败只废自己。 */
-    async function pipeline(items, stages) {
-        if (!Array.isArray(items))
-            throw new Error(tr("pipeline() 第一个参数需要数组", "pipeline() needs an array as its first argument"));
-        if (!Array.isArray(stages) || stages.length === 0)
-            throw new Error(tr("pipeline() 第二个参数需要非空 stage 数组", "pipeline() needs a non-empty array of stages as its second argument"));
-        const results = [];
-        await runPool({
-            items: items,
-            limit: SUBAGENT_CONCURRENCY,
-            run: async (item, i) => {
-                let current = item;
-                for (let s = 0; s < stages.length; s++) {
-                    try {
-                        current = await stages[s](current);
-                    }
-                    catch (e) {
-                        logs.push(tr(`✗ item ${i + 1} 在第 ${s + 1} 阶段失败:${e.message}`, `✗ Item ${i + 1} failed at stage ${s + 1}: ${e.message}`));
-                        current = null;
-                        break;
-                    }
-                }
-                results[i] = current;
-            },
-            signal: internal.signal,
-        });
-        return results;
-    }
-    // 沙箱:只有编排原语 + 受限 log/timer,标准 JS 内建(Promise/JSON/Math…)天然可用
-    const fmtLogArg = (a) => typeof a === "string" ? a : (() => { try {
-        return JSON.stringify(a);
-    }
-    catch {
-        return String(a);
-    } })();
-    const pushLog = (...args) => {
-        if (logs.length < 500)
-            logs.push(args.map(fmtLogArg).join(" "));
-    };
-    const sandbox = {
-        subagent: subagentImpl,
-        parallel,
-        pipeline,
-        judge: judgeImpl,
-        log: pushLog,
-        console: { log: pushLog, info: pushLog, warn: pushLog, error: pushLog },
-        setTimeout: (fn, ms) => setTimeout(fn, Math.max(0, Math.min(Number(ms) || 0, 120_000))),
-        clearTimeout,
-    };
-    let scriptError;
-    let completionValue;
-    try {
-        // 包成 async IIFE:支持顶层 await 和 return;line 数与校验时一致
-        const script = new vm.Script(`(async () => {\n${opts.code}\n})()`, { filename: "workflow.mjs" });
-        const ctx = vm.createContext(sandbox);
-        completionValue = await Promise.resolve().then(() => script.runInContext(ctx));
-    }
-    catch (e) {
-        scriptError = e.stack?.split("\n").slice(0, 3).join("\n") || e.message;
-    }
-    finally {
-        clearTimeout(overallTimer);
-        opts.signal?.removeEventListener("abort", onParentAbort);
-    }
-    const seconds = Math.round((Date.now() - started) / 1000);
-    const aborted = internal.signal.aborted;
-    const budgetExhausted = budgetTokens > 0 && spentTokens >= budgetTokens;
-    const details = { ...stats, seconds, aborted, spentTokens, budgetExhausted };
-    const header = tr(`工作流结束,用时 ${seconds}s · 子任务 ✓${stats.ok} ✗${stats.failed}${stats.cached ? ` · 续跑命中 ${stats.cached}` : ""} · 用 ${spentTokens.toLocaleString()} tokens${budgetTokens > 0 ? ` / 预算 ${budgetTokens.toLocaleString()}` : " (不限)"}${timedOut ? " · ⏱ 整体超时" : ""}${aborted && !timedOut ? " · 已中止" : ""}`, `Workflow finished in ${seconds}s · subtasks ✓${stats.ok} ✗${stats.failed}${stats.cached ? ` · resumed from cache ${stats.cached}` : ""} · used ${spentTokens.toLocaleString()} tokens${budgetTokens > 0 ? ` / budget ${budgetTokens.toLocaleString()}` : " (no limit)"}${timedOut ? " · ⏱ timed out" : ""}${aborted && !timedOut ? " · aborted" : ""}`);
-    const lines = [header, ""];
-    if (completionValue !== undefined) {
-        let shown;
-        try {
-            shown = JSON.stringify(completionValue, null, 2) ?? String(completionValue);
-        }
-        catch {
-            shown = String(completionValue);
-        }
-        lines.push(tr("**返回值**", "**Return value**"), "", shown.slice(0, 3000), "");
-    }
-    if (scriptError)
-        lines.push(tr("**脚本报错**", "**Script error**"), "", "```", scriptError, "```", "");
-    if (logs.length > 0) {
-        lines.push(tr("**运行日志**", "**Run log**"), "", ...logs.slice(0, MAX_LOG_LINES).map((l) => `- ${l.slice(0, 300)}`));
-        if (logs.length > MAX_LOG_LINES) {
-            lines.push(tr(`- …(另有 ${logs.length - MAX_LOG_LINES} 条省略)`, `- … (${logs.length - MAX_LOG_LINES} more omitted)`));
-        }
-        lines.push("");
-    }
-    lines.push(tr(`进度存档:${opts.progressPath}(失败重跑可加 resume=true 续跑)`, `Progress saved to: ${opts.progressPath} (to rerun after failures, add resume=true to continue)`));
-    return { report: lines.join("\n").trim(), details };
-}
-/** 工作区目录:项目根 .u1s1/workflows/(脚本 + 进度存档都在这里)。 */
-export function workflowsDir() {
-    const dir = resolve(process.cwd(), ".u1s1/workflows");
-    mkdirSync(dir, { recursive: true });
-    return dir;
-}
-/** 内联脚本落盘,返回脚本路径(进度存档按同名约定派生)。 */
-export function saveWorkflowScript(code) {
-    const stamp = new Date().toISOString().replace(/[-:]/g, "").replace(/T(\d{6}).*/, "-$1");
-    const path = resolve(workflowsDir(), `wf-${stamp}.mjs`);
-    mkdirSync(dirname(path), { recursive: true });
-    writeFileSync(path, code);
-    return path;
-}

package/dist/workflow/templates.d.ts

@@ -1,11 +0,0 @@
-export interface WorkflowTemplate {
-    name: string;
-    description: string;
-    /** 生成脚本源码;input 已由调用方做过形状校验。 */
-    build: (input: Record<string, unknown>) => string;
-    /** 给模型看的 input 说明。 */
-    inputHint: string;
-}
-export declare const TEMPLATES: Record<string, WorkflowTemplate>;
-/** 按模板名生成脚本;生成后自检必须过静态校验(防模板本身写出不合规代码)。 */
-export declare function buildFromTemplate(template: string, input: Record<string, unknown>): string;

package/dist/workflow/templates.js

@@ -1,200 +0,0 @@
-import { execFileSync } from "node:child_process";
-import { tr } from "../i18n.js";
-import { validateScript } from "./runner.js";
-function str(v, fallback = "") {
-    return typeof v === "string" && v.trim() ? v.trim() : fallback;
-}
-function strArray(v) {
-    return Array.isArray(v)
-        ? v.filter((x) => typeof x === "string" && !!x.trim()).map((x) => x.trim())
-        : [];
-}
-/** JSON.stringify 后内插进脚本;保证引号安全。 */
-function lit(v) {
-    return JSON.stringify(v ?? null);
-}
-/** 脚本里给子 agent 的任务文案:按界面语言取中/英,再经 lit() 成为脚本里的字符串字面量。 */
-function q(zh, en) {
-    return lit(tr(zh, en));
-}
-/** git 改动文件列表(模板构建期在主进程执行,不进沙箱)。
- * 剔除已删除文件(评审/重构 agent 没法打开),并入未跟踪的新文件。 */
-function gitDiffFiles() {
-    const run = (args) => {
-        const out = execFileSync("git", args, { encoding: "utf8", stdio: ["pipe", "pipe", "pipe"] });
-        return out.split("\n").map((s) => s.trim()).filter(Boolean);
-    };
-    try {
-        const changed = run(["diff", "--name-only", "--diff-filter=d", "HEAD"]);
-        const untracked = run(["ls-files", "--others", "--exclude-standard"]);
-        return [...new Set([...changed, ...untracked])];
-    }
-    catch {
-        return [];
-    }
-}
-export const TEMPLATES = {
-    i18n: {
-        name: "i18n",
-        get description() {
-            return tr("批量多语言翻译:每个语言一个子 agent 并行翻译,完成后统一校验 key 对齐并自动修复", "Batch translation: one sub-agent per language translates in parallel, then a final pass checks key alignment and fixes issues");
-        },
-        get inputHint() {
-            return tr('{ "langs": ["en", "ja", "de"], "source": "src/locales/zh.json", "dir": "src/locales" } — source/dir 可省略(默认 src/locales/zh.json 与同目录)', '{ "langs": ["en", "ja", "de"], "source": "src/locales/zh.json", "dir": "src/locales" } — source/dir are optional (default: src/locales/zh.json and its directory)');
-        },
-        build(input) {
-            const langs = strArray(input.langs);
-            if (langs.length === 0) {
-                throw new Error(tr('i18n 模板需要 langs 数组,例如 { "langs": ["en", "ja"] }', 'The i18n template needs a langs array, e.g. { "langs": ["en", "ja"] }'));
-            }
-            const source = str(input.source, "src/locales/zh.json");
-            const dir = str(input.dir, source.includes("/") ? source.slice(0, source.lastIndexOf("/")) : "src/locales");
-            // 用户输入一律经 lit() 进脚本,再在运行期拼接——裸内插遇到引号/反斜杠/换行会把生成的脚本弄成语法错误
-            return `
-const langs = ${lit(langs)};
-const source = ${lit(source)};
-const dir = ${lit(dir)};
-log(${q("i18n:翻译 ", "i18n: translating ")} + langs.length + ${q(" 个语言,源文件 ", " languages, source file ")} + source);
-const results = await parallel(langs.map(lang => () =>
-  subagent({
-    task: ${q("读取 ", "Read ")} + source + ${q(",把所有文案翻译成对应语言(保持所有 key 不变、输出合法 JSON、译文自然地道),", " and translate all strings into the target language (keep every key unchanged, output valid JSON, make the translation natural and idiomatic), ")} +
-      ${q("写入 ", "and write it to ")} + dir + "/" + lang + ${q(".json。写完后重新读一遍文件,确认是合法 JSON 且 key 与源文件完全一致。", ".json. After writing, re-read the file to confirm it is valid JSON and its keys exactly match the source file. ")} +
-      ${q("目标语言代码:", "Target language code: ")} + lang
-  })
-));
-const okLangs = langs.filter((_, i) => results[i] !== null);
-if (okLangs.length > 0) {
-  await subagent({
-    task: ${q("对照 ", "Compare against ")} + source + ${q(" 检查 ", " and check the translation files under ")} + dir + ${q("/ 目录下这些语言的翻译文件:", "/ for these languages: ")} + okLangs.join(",") + "." +
-      ${q("逐个核对 key 是否与源文件完全一致、JSON 是否合法、译文是否有明显机翻痕迹,发现问题直接修复。最后汇报每个语言的状态", " For each one, verify the keys exactly match the source, the JSON is valid, and the translation doesn't read like obvious machine translation; fix any problems directly. Finally, report the status of each language")}
-  });
-}
-return { translated: okLangs, failed: langs.filter(l => !okLangs.includes(l)) };
-`;
-        },
-    },
-    review: {
-        name: "review",
-        get description() {
-            return tr("全面代码审查:每个文件一个评审 agent 并行审查,发现项再交独立 agent 对抗性验证,只保留核实为真的问题", "Thorough code review: one reviewer agent per file in parallel, then an independent agent adversarially verifies the findings and keeps only confirmed issues");
-        },
-        get inputHint() {
-            return tr('{ "files": ["src/a.ts", "src/b.ts"] } — files 可省略,默认取 git diff --name-only HEAD 的改动文件', '{ "files": ["src/a.ts", "src/b.ts"] } — files is optional; defaults to the changed files from git diff --name-only HEAD');
-        },
-        build(input) {
-            let files = strArray(input.files);
-            if (files.length === 0)
-                files = gitDiffFiles();
-            if (files.length === 0) {
-                throw new Error(tr("review 模板需要 files 数组,或当前仓库有未提交改动", "The review template needs a files array, or uncommitted changes in the current repository"));
-            }
-            return `
-const files = ${lit(files)};
-log(${q("review:评审 ", "review: reviewing ")} + files.length + ${q(" 个文件,发现项将做对抗性验证", " files; findings will be adversarially verified")});
-const reports = await parallel(files.map(f => () =>
-  subagent({
-    task: ${q("通读 ", "Read ")} + f + ${q(" 及其直接依赖,做代码审查:正确性 bug、安全漏洞、明显的性能问题。", " and its direct dependencies, and review the code for correctness bugs, security vulnerabilities, and obvious performance problems. ")} +
-      ${q("只报告有把握的问题,每条给出文件、行号、严重程度(高/中/低)、问题描述和建议修法。没有问题就明确说无发现。", "Only report issues you are confident about; for each, give the file, line number, severity (high/medium/low), a description, and a suggested fix. If there are none, say explicitly that there are no findings.")}
-  })
-));
-const findings = reports.filter(Boolean).join("\\n\\n---\\n\\n");
-if (!findings.trim()) return { verified: ${q("(所有文件均无发现)", "(no findings in any file)")} };
-const verified = await subagent({
-  task: ${q("下面是一份代码审查发现列表。逐条对抗性验证:打开涉及的文件核对,剔除不成立、夸大或已过时的条目,", "Below is a list of code review findings. Adversarially verify each one: open the files involved to check, drop entries that are wrong, exaggerated, or outdated, ")} +
-    ${q("只保留核实为真的问题,按严重程度排序输出完整清单。\n\n", "keep only issues confirmed to be real, and output the complete list sorted by severity.\n\n")} + findings
-});
-return { verified };
-`;
-        },
-    },
-    research: {
-        name: "research",
-        get description() {
-            return tr("并行研究:每个方向一个子 agent 独立调查(可联网),最后汇总成一份综合报告", "Parallel research: one sub-agent investigates each question independently (with web access), then the results are merged into one report");
-        },
-        get inputHint() {
-            return tr('{ "questions": ["方向一", "方向二"], "context": "可选背景" }', '{ "questions": ["question 1", "question 2"], "context": "optional background" }');
-        },
-        build(input) {
-            const questions = strArray(input.questions);
-            if (questions.length === 0)
-                throw new Error(tr('research 模板需要 questions 数组,例如 { "questions": ["竞品A的定价", "竞品B的功能"] }', 'The research template needs a questions array, e.g. { "questions": ["Competitor A pricing", "Competitor B features"] }'));
-            const context = str(input.context);
-            const contextLine = context ? tr(`调查背景:${context}。`, `Background: ${context}. `) : "";
-            return `
-const questions = ${lit(questions)};
-const contextLine = ${lit(contextLine)};
-log(${q("research:并行调查 ", "research: investigating ")} + questions.length + ${q(" 个方向", " questions in parallel")});
-const reports = await parallel(questions.map(q => () =>
-  subagent({
-    task: ${q("调查以下问题,可以用 web_search/web_fetch 联网,也可以读本地代码和文档。", "Investigate the question below. You can use web_search/web_fetch to search the web, and you can also read local code and docs. ")} +
-      ${q("输出:关键事实(带来源)、不同观点、你的结论。", "Output: key facts (with sources), differing views, and your conclusion. ")} + contextLine + ${q("问题:", "Question: ")} + q
-  })
-));
-const merged = reports
-  .map((r, i) => (r ? ${q("## 方向 ", "## Question ")} + (i + 1) + ${q(":", ": ")} + questions[i] + "\\n\\n" + r : null))
-  .filter(Boolean)
-  .join("\\n\\n");
-if (!merged.trim()) return { synthesis: ${q("(所有方向都失败了)", "(all questions failed)")}, failed: questions.length };
-const synthesis = await subagent({
-  task: ${q("把以下几份调查报告综合成一份结论性报告:先给核心结论(不超过 5 条),再给分方向要点,", "Synthesize the following research reports into one conclusive report: start with the core conclusions (at most 5), then key points per question, ")} +
-    ${q("最后列分歧点和待确认项。不要编造报告里没有的信息。\n\n", "and finally list disagreements and open items. Do not invent information that isn't in the reports.\n\n")} + merged
-});
-return { synthesis };
-`;
-        },
-    },
-    refactor: {
-        name: "refactor",
-        get description() {
-            return tr("批量重构/迁移:先由一个 agent 读代表文件制定统一规则,然后每个文件一个子 agent 在当前工作区套用规则", "Batch refactor/migration: one agent reads representative files and writes a single set of rules, then one sub-agent per file applies them in the current working tree");
-        },
-        get inputHint() {
-            return tr('{ "instruction": "把所有 var 改为 const", "files": ["src/a.ts", ...] } — files 省略时用 git diff 改动文件', '{ "instruction": "change every var to const", "files": ["src/a.ts", ...] } — if files is omitted, the git diff changed files are used');
-        },
-        build(input) {
-            const instruction = str(input.instruction);
-            if (!instruction) {
-                throw new Error(tr('refactor 模板需要 instruction,例如 { "instruction": "把 var 全部改为 const" }', 'The refactor template needs an instruction, e.g. { "instruction": "change every var to const" }'));
-            }
-            // 与 review 模板一致:构建期取 git 改动文件,不花一个 subagent 在沙箱里跑 git
-            let files = [...new Set(strArray(input.files))];
-            if (files.length === 0)
-                files = gitDiffFiles();
-            if (files.length === 0) {
-                throw new Error(tr("refactor 模板需要 files 数组,或当前仓库有未提交改动", "The refactor template needs a files array, or uncommitted changes in the current repository"));
-            }
-            return `
-const instruction = ${lit(instruction)};
-const targetFiles = ${lit(files)};
-log(${q("refactor:共 ", "refactor: ")} + targetFiles.length + ${q(" 个文件,先制定统一规则", " files; drafting a common set of rules first")});
-const rule = await subagent({
-  task: ${q("我们要对一批文件做统一重构:", "We are applying the same refactor to a batch of files: ")} + instruction + ${q("。", ". ")} +
-    ${q("先读其中 1-2 个代表性文件了解现状,然后输出一份精确的重构规则清单(每条:什么模式改成什么、边界情况怎么处理)。", "First read 1-2 representative files to understand the current state, then output a precise list of refactoring rules (each: which pattern becomes what, and how to handle edge cases). ")} +
-    ${q("规则要具体到可以直接照做,不要空话。涉及文件:", "Make the rules concrete enough to follow directly; no vague advice. Files involved: ")} + targetFiles.slice(0, 10).join(",")
-});
-const results = await parallel(targetFiles.map(f => () =>
-  subagent({
-    task: ${q("按以下重构规则处理文件 ", "Apply the refactoring rules below to the file ")} + f + ${q("。只修改这个目标文件,不要改动其他文件,避免与并行任务冲突。", ". Only modify this target file; do not change any other files, to avoid conflicts with parallel tasks. ")} +
-      ${q("改完检查该文件语法正确(必要时运行 tsc 或构建验证)。\n\n重构规则:\n", "When done, check that the file's syntax is correct (run tsc or a build to verify if needed).\n\nRefactoring rules:\n")} + rule
-  })
-));
-const done = targetFiles.filter((_, i) => results[i] !== null);
-return { applied: done, failed: targetFiles.filter(f => !done.includes(f)), rule };
-`;
-        },
-    },
-};
-/** 按模板名生成脚本;生成后自检必须过静态校验(防模板本身写出不合规代码)。 */
-export function buildFromTemplate(template, input) {
-    const t = TEMPLATES[template];
-    if (!t) {
-        throw new Error(tr(`未知模板 "${template}",可用:${Object.keys(TEMPLATES).join(", ")}`, `Unknown template "${template}"; available: ${Object.keys(TEMPLATES).join(", ")}`));
-    }
-    const code = t.build(input ?? {});
-    const errors = validateScript(code);
-    if (errors.length > 0) {
-        throw new Error(tr(`模板 ${template} 生成的脚本未通过静态校验(模板 bug,请反馈):${errors.join(";")}`, `The script generated by template ${template} failed static validation (template bug, please report it): ${errors.join("; ")}`));
-    }
-    return code;
-}

package/dist/workflow/tool.d.ts

@@ -1,16 +0,0 @@
-import { Type } from "typebox";
-import { type ParentModelRef } from "../subagent.js";
-/**
- * run_workflow 工具:主 agent 把模型生成的编排脚本交给 WorkflowRunner 执行。
- * 脚本在 vm 沙箱里跑,只能用注入的 subagent/parallel/pipeline 原语。
- */
-export declare function createRunWorkflowTool(getParentModel: () => ParentModelRef): import("@earendil-works/pi-coding-agent").ToolDefinition<Type.TObject<{
-    script: Type.TOptional<Type.TString>;
-    template: Type.TOptional<Type.TString>;
-    input: Type.TOptional<Type.TRecord<"^.*$", Type.TUnknown>>;
-    script_path: Type.TOptional<Type.TString>;
-    save_as: Type.TOptional<Type.TString>;
-    resume: Type.TOptional<Type.TBoolean>;
-    timeout_minutes: Type.TOptional<Type.TNumber>;
-    budget_tokens: Type.TOptional<Type.TNumber>;
-}>, unknown, any> & import("@earendil-works/pi-coding-agent").ToolDefinition<any, any, any>;

package/dist/workflow/tool.js

@@ -1,179 +0,0 @@
-import { existsSync, mkdirSync, readFileSync, writeFileSync } from "node:fs";
-import { dirname, resolve } from "node:path";
-import { defineTool } from "@earendil-works/pi-coding-agent";
-import { Text } from "@earendil-works/pi-tui";
-import { Type } from "typebox";
-import { tr } from "../i18n.js";
-import { contextProjectTrust } from "../subagent.js";
-import { compactResultRender, truncate } from "../tools.js";
-import { runWorkflow, saveWorkflowScript, validateScript, workflowsDir, WORKFLOW_DEFAULT_BUDGET_TOKENS, WORKFLOW_TIMEOUT_MS, } from "./runner.js";
-import { buildFromTemplate, TEMPLATES } from "./templates.js";
-function assertValidWorkflowCode(code) {
-    const errors = validateScript(code);
-    if (errors.length > 0) {
-        throw new Error(tr(`脚本未通过静态校验,请修复后重试:\n- ${errors.join("\n- ")}`, `The script failed static validation; fix it and try again:\n- ${errors.join("\n- ")}`));
-    }
-}
-function buildTemplateSource(template, input) {
-    try {
-        return buildFromTemplate(template, input);
-    }
-    catch (error) {
-        throw new Error(tr(`${error.message}\n模板 input 说明:${TEMPLATES[template]?.inputHint ?? "—"}`, `${error.message}\nTemplate input: ${TEMPLATES[template]?.inputHint ?? "—"}`), { cause: error });
-    }
-}
-function readWorkflowSource(scriptPath) {
-    try {
-        return readFileSync(scriptPath, "utf8");
-    }
-    catch {
-        throw new Error(tr(`读不到脚本文件:${scriptPath}`, `Can't read the script file: ${scriptPath}`));
-    }
-}
-function resolveWorkflowSource(params) {
-    const saveAs = params.save_as?.trim();
-    if (saveAs && !/^[a-zA-Z0-9_-]+$/.test(saveAs)) {
-        throw new Error(tr("save_as 只允许字母、数字、横线和下划线", "save_as may only contain letters, digits, hyphens, and underscores"));
-    }
-    if (saveAs && params.script_path?.trim()) {
-        throw new Error(tr("script_path 指向的脚本已经落盘,不能再配 save_as;要另存新名字请用 script 传入源码", "The script at script_path is already saved, so save_as can't be used with it; to save under a new name, pass the source via script"));
-    }
-    const inlineCode = params.script?.trim();
-    if (inlineCode) {
-        assertValidWorkflowCode(inlineCode);
-        return { code: inlineCode, saveAs };
-    }
-    const template = params.template?.trim();
-    if (template) {
-        return { code: buildTemplateSource(template, params.input ?? {}), saveAs };
-    }
-    const requestedPath = params.script_path?.trim();
-    if (requestedPath) {
-        const scriptPath = resolve(requestedPath);
-        return { code: readWorkflowSource(scriptPath), scriptPath };
-    }
-    throw new Error(tr("script、template、script_path 至少填一个", "Provide at least one of script, template, or script_path"));
-}
-function persistWorkflowSource(source) {
-    if (source.scriptPath)
-        return source.scriptPath;
-    if (!source.saveAs)
-        return saveWorkflowScript(source.code);
-    const scriptPath = resolve(workflowsDir(), `${source.saveAs}.mjs`);
-    if (existsSync(scriptPath)) {
-        throw new Error(tr(`工作流 "${source.saveAs}" 已存在(${scriptPath})。要重跑它请用 script_path 指向该文件(可加 resume:true 续跑);要新建请换个名字`, `Workflow "${source.saveAs}" already exists (${scriptPath}). To rerun it, point script_path at that file (add resume:true to continue); to create a new one, pick another name`));
-    }
-    mkdirSync(dirname(scriptPath), { recursive: true });
-    writeFileSync(scriptPath, source.code);
-    return scriptPath;
-}
-/**
- * run_workflow 工具:主 agent 把模型生成的编排脚本交给 WorkflowRunner 执行。
- * 脚本在 vm 沙箱里跑,只能用注入的 subagent/parallel/pipeline 原语。
- */
-export function createRunWorkflowTool(getParentModel) {
-    return defineTool({
-        name: "run_workflow",
-        label: tr("工作流", "Workflow"),
-        description: "Execute a JavaScript orchestration script that runs many sub-agents in structured patterns (fan-out/pipeline/loop). " +
-            "The script runs in a sandbox with ONLY these APIs: `subagent(task | {task, model})` returns the sub-agent's final output; " +
-            "`parallel([thunks])` fans out concurrently, a failed item becomes null (barrier); " +
-            "`pipeline(items, [stageFns])` streams each item through stages independently; plus `log(...)` and standard JS builtins. " +
-            "No require/import/process/fetch/fs access. Use for large parallelizable work (e.g. translate N locale files); " +
-            "don't use it for small tasks — write the script, pass it as `script`, then verify the report.",
-        promptSnippet: "Run a generated orchestration script that drives many sub-agents in parallel/pipeline patterns",
-        promptGuidelines: [
-            "Use run_workflow only when a task decomposes into many independent self-contained pieces; small jobs are cheaper done directly.",
-            "Every task string inside the script must be fully self-contained — sub-agents start with zero conversation context.",
-            "If the report shows failures, fix the script or call again with script_path + resume:true to continue from saved progress.",
-        ],
-        parameters: Type.Object({
-            script: Type.Optional(Type.String({ description: "Full JavaScript source of the orchestration script (top-level await allowed)." })),
-            template: Type.Optional(Type.String({
-                description: `Use a built-in template instead of writing a script: ${Object.keys(TEMPLATES).join(" / ")}. ` +
-                    "Provide `input` to parametrize it. Prefer this over hand-writing a script when a template fits.",
-            })),
-            input: Type.Optional(Type.Record(Type.String(), Type.Unknown(), {
-                description: 'Parameters for `template`, e.g. i18n: { "langs": ["en", "ja"] }; review/refactor: { "files": [...] } or omit for git-diff files; research: { "questions": [...] }.',
-            })),
-            script_path: Type.Optional(Type.String({
-                description: "Path to an existing workflow script under .u1s1/workflows/ — rerun it instead of passing `script`.",
-            })),
-            save_as: Type.Optional(Type.String({
-                description: 'Save this run\'s script as .u1s1/workflows/<name>.mjs (letters/digits/-/_) for easy reuse; rerun later via script_path. Fails if the name already exists. Only valid with `script` or `template`, not `script_path`.',
-                pattern: "^[a-zA-Z0-9_-]+$",
-            })),
-            resume: Type.Optional(Type.Boolean({
-                description: "Skip sub-tasks already recorded as succeeded in the progress file (for crash/interrupt recovery).",
-            })),
-            timeout_minutes: Type.Optional(Type.Number({
-                description: `Wall-clock limit for the whole run in minutes (default ${WORKFLOW_TIMEOUT_MS / 60_000}, max 180).`,
-                minimum: 1,
-                maximum: 180,
-            })),
-            budget_tokens: Type.Optional(Type.Number({
-                description: `Total token ceiling for the whole run across all sub-agents (default ${WORKFLOW_DEFAULT_BUDGET_TOKENS}). Once exceeded, no new sub-agents are spawned; running ones finish. Use 0 for unlimited.`,
-                minimum: 0,
-                maximum: 1_000_000_000,
-            })),
-        }),
-        // 精简展示与 spawn_subagent 同款:收起一行摘要,ctrl+o 展开报告
-        renderShell: "self",
-        renderCall() {
-            return new Text("", 0, 0);
-        },
-        renderResult(...args) {
-            const [result, options, theme, context] = args;
-            const d = result.details;
-            const summary = d && typeof d.ok === "number"
-                ? tr("🧭 工作流", "🧭 Workflow") +
-                    ` · ✓${d.ok}${d.failed ? ` ✗${d.failed}` : ""}` +
-                    (typeof d.seconds === "number" ? ` · ${d.seconds}s` : "") +
-                    (d.aborted ? tr(" · 已中止", " · aborted") : "")
-                : tr("🧭 工作流", "🧭 Workflow");
-            return compactResultRender({ result, options, theme, context, summaryLine: summary });
-        },
-        async execute(...args) {
-            const [, params, signal, onUpdate, ctx] = args;
-            const source = resolveWorkflowSource(params);
-            const scriptPath = persistWorkflowSource(source);
-            const progressPath = scriptPath.replace(/\.mjs$/, ".progress.jsonl");
-            // 流式进度:onProgress 高频触发,节流到 ≥2s 一次才推给 TUI
-            let lastPush = 0;
-            const onProgress = onUpdate
-                ? (p) => {
-                    const now = Date.now();
-                    if (now - lastPush < 2_000)
-                        return;
-                    lastPush = now;
-                    onUpdate({
-                        content: [
-                            {
-                                type: "text",
-                                text: tr(`🧭 子任务 ✓${p.ok} ✗${p.failed}${p.cached ? ` 缓存${p.cached}` : ""} · 在跑 ${p.running}`, `🧭 Subtasks ✓${p.ok} ✗${p.failed}${p.cached ? ` cached ${p.cached}` : ""} · running ${p.running}`) +
-                                    ` · ${(p.spentTokens / 1000).toFixed(0)}k${p.budgetTokens > 0 ? ` / ${(p.budgetTokens / 1000).toFixed(0)}k tokens` : ""}`,
-                            },
-                        ],
-                        details: p,
-                    });
-                }
-                : undefined;
-            const result = await runWorkflow({
-                code: source.code,
-                progressPath,
-                resume: params.resume === true,
-                parentModel: getParentModel(),
-                // 子 agent(含临时 worktree)沿用主会话的项目信任裁决
-                projectTrusted: contextProjectTrust(ctx),
-                signal,
-                timeoutMs: Math.min(180, params.timeout_minutes ?? WORKFLOW_TIMEOUT_MS / 60_000) * 60_000,
-                budgetTokens: params.budget_tokens,
-                onProgress,
-            });
-            return {
-                content: [{ type: "text", text: truncate(result.report) }],
-                details: { ...result.details, scriptPath, workflowsDir: workflowsDir() },
-            };
-        },
-    });
-}