windcode 0.1.1__tar.gz → 0.1.3__tar.gz

{windcode-0.1.1 → windcode-0.1.3}/.gitignore

@@ -14,6 +14,12 @@ tests/
 
 .windcode/config.toml
 .windcode/state/
+.windcode/skill/
+.windcode/memory/
+.windcode/sessions/
+.windcode/traces/
+.windcode/extensions/
+.windcode/worktrees/
 
 
 spec/

{windcode-0.1.1 → windcode-0.1.3}/.windcode/config.toml.example

@@ -54,8 +54,8 @@ url =
 required = true
 
 [storage]
-project_state_root = ".windcode/state"
-user_storage_root = "~/.local/state/windcode/state"
+project_state_root = ".windcode"
+user_storage_root = "~/.local/state/windcode"
 
 [memory]
 enabled = true

{windcode-0.1.1 → windcode-0.1.3}/AGENTS.md

@@ -56,8 +56,9 @@ explicit SDK state_root
 -> user_storage_root
 ```
 
-The root contains `memory/`, `sessions/`, `traces/`, `extensions/`, and `worktrees/`.
-`.windcode/config.toml`, `.windcode/state/`, `tests/`, and `spec/` are local-only ignored paths.
+The root contains `skill/`, `memory/`, `sessions/`, `traces/`, `extensions/`, and `worktrees/`.
+`.windcode/config.toml`, runtime directories under `.windcode/`, `tests/`, and `spec/` are local-only
+ignored paths.
 Never remove, rewrite, force-add, or commit them without an explicit user request.
 
 For MCP servers, `enable` controls discovery and runtime visibility; `required` only controls startup

{windcode-0.1.1 → windcode-0.1.3}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: windcode
-Version: 0.1.1
+Version: 0.1.3
 Summary: A safe, extensible terminal coding agent
 Project-URL: Homepage, https://github.com/tingfeng347/windcode
 Project-URL: Repository, https://github.com/tingfeng347/windcode
@@ -149,12 +149,13 @@ Windcode 将记忆、会话、trace、扩展状态和 Worktree 统一存放在
 
 ```toml
 [storage]
-project_state_root = ".windcode/state"
-user_storage_root = "~/.local/state/windcode/state"
+project_state_root = ".windcode"
+user_storage_root = "~/.local/state/windcode"
 ```
 
-配置项目状态根时优先使用项目目录；未配置时使用用户状态目录。`.windcode/config.toml` 和
-`.windcode/state/` 都不应提交到 Git。
+配置项目状态根时优先使用项目目录；未配置时使用用户状态目录。Skill 会同时扫描两边的
+`skill/`，同名时项目级覆盖用户级。`.windcode/config.toml` 和 `.windcode/` 下的运行状态都
+不应提交到 Git。
 
 ## 开发
 

{windcode-0.1.1 → windcode-0.1.3}/README.md

@@ -114,12 +114,13 @@ Windcode 将记忆、会话、trace、扩展状态和 Worktree 统一存放在
 
 ```toml
 [storage]
-project_state_root = ".windcode/state"
-user_storage_root = "~/.local/state/windcode/state"
+project_state_root = ".windcode"
+user_storage_root = "~/.local/state/windcode"
 ```
 
-配置项目状态根时优先使用项目目录；未配置时使用用户状态目录。`.windcode/config.toml` 和
-`.windcode/state/` 都不应提交到 Git。
+配置项目状态根时优先使用项目目录；未配置时使用用户状态目录。Skill 会同时扫描两边的
+`skill/`，同名时项目级覆盖用户级。`.windcode/config.toml` 和 `.windcode/` 下的运行状态都
+不应提交到 Git。
 
 ## 开发
 

{windcode-0.1.1 → windcode-0.1.3}/examples/README.md

@@ -61,7 +61,7 @@ uv run python examples/07_bash_approval.py
 
 ```toml
 [storage]
-project_state_root = ".windcode/state"
+project_state_root = ".windcode"
 ```
 
 ## MCP 示例配置

{windcode-0.1.1 → windcode-0.1.3}/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "windcode"
-version = "0.1.1"
+version = "0.1.3"
 description = "A safe, extensible terminal coding agent"
 readme = "README.md"
 requires-python = ">=3.12"

{windcode-0.1.1 → windcode-0.1.3}/src/windcode/__init__.py

@@ -3,4 +3,4 @@
 from windcode.sdk import Windcode
 
 __all__ = ["Windcode"]
-__version__ = "0.1.1"
+__version__ = "0.1.3"

{windcode-0.1.1 → windcode-0.1.3}/src/windcode/cli.py

@@ -8,7 +8,7 @@ from collections.abc import Sequence
 from dataclasses import dataclass
 from pathlib import Path
 
-from windcode.config import AppConfig, ConfigError, PermissionMode, load_config
+from windcode.config import AppConfig, ConfigError, PermissionMode, ensure_user_config, load_config
 
 
 @dataclass(frozen=True, slots=True)
@@ -156,8 +156,9 @@ def run(argv: Sequence[str] | None = None) -> int:
         options = parse_options(arguments)
         if not options.workspace.is_dir():
             raise ConfigError(options.workspace, "workspace is not a directory")
+        write_config_file = options.config_file or ensure_user_config()
         config = resolve_config(options)
-    except ConfigError as exc:
+    except (ConfigError, OSError) as exc:
         print(f"windcode: {exc}", file=sys.stderr)
         return 2
 
@@ -171,7 +172,7 @@ def run(argv: Sequence[str] | None = None) -> int:
         permission_mode=(
             options.permission_mode.value if options.permission_mode is not None else None
         ),
-        config_file=options.config_file,
+        config_file=write_config_file,
     )
     app.run()
     return 0

{windcode-0.1.1 → windcode-0.1.3}/src/windcode/config/__init__.py

@@ -1,4 +1,9 @@
-from windcode.config.loader import ConfigError, load_config
+from windcode.config.loader import (
+    ConfigError,
+    default_user_config_path,
+    ensure_user_config,
+    load_config,
+)
 from windcode.config.models import (
     HARD_MAX_CONCURRENT_SUBAGENTS,
     HARD_MAX_SUBAGENT_TASKS,
@@ -35,6 +40,8 @@ __all__ = [
     "StorageConfig",
     "SubagentConfig",
     "TraceConfig",
+    "default_user_config_path",
+    "ensure_user_config",
     "load_config",
     "save_memory_config",
     "save_model_config",

{windcode-0.1.1 → windcode-0.1.3}/src/windcode/config/loader.py

@@ -1,11 +1,13 @@
 from __future__ import annotations
 
 import copy
+import os
 import tomllib
 from collections.abc import Mapping
 from pathlib import Path
 from typing import Any, cast
 
+import tomli_w
 from platformdirs import user_config_path
 from pydantic import ValidationError
 
@@ -18,6 +20,30 @@ class ConfigError(ValueError):
         super().__init__(f"{source}: {message}")
 
 
+def default_user_config_path() -> Path:
+    return user_config_path("windcode") / "config.toml"
+
+
+def ensure_user_config(path: Path | None = None) -> Path:
+    """Create the default user configuration once without overwriting an existing file."""
+    target = (path or default_user_config_path()).expanduser().resolve()
+    if target.exists():
+        return target
+
+    content = tomli_w.dumps(AppConfig().model_dump(mode="json", exclude_none=True)).encode()
+    target.parent.mkdir(parents=True, exist_ok=True)
+    try:
+        descriptor = os.open(target, os.O_WRONLY | os.O_CREAT | os.O_EXCL, 0o600)
+    except FileExistsError:
+        return target
+
+    with os.fdopen(descriptor, "wb") as stream:
+        stream.write(content)
+        stream.flush()
+        os.fsync(stream.fileno())
+    return target
+
+
 def _deep_merge(base: dict[str, Any], overlay: Mapping[str, Any]) -> dict[str, Any]:
     merged = copy.deepcopy(base)
     for key, value in overlay.items():
@@ -52,7 +78,7 @@ def load_config(
     overrides: Mapping[str, Any] | None = None,
 ) -> AppConfig:
     workspace = workspace.expanduser().resolve()
-    default_user = user_config_path("windcode") / "config.toml"
+    default_user = default_user_config_path()
     default_project = workspace / ".windcode" / "config.toml"
     layers: list[tuple[Path | str, dict[str, Any]]] = [
         (

{windcode-0.1.1 → windcode-0.1.3}/src/windcode/domain/subagents.py

@@ -48,7 +48,9 @@ TERMINAL_SUBAGENT_STATUSES = frozenset(
 )
 
 _ALLOWED_TRANSITIONS: dict[SubagentStatus, frozenset[SubagentStatus]] = {
-    SubagentStatus.QUEUED: frozenset({SubagentStatus.RUNNING, SubagentStatus.CANCELLED}),
+    SubagentStatus.QUEUED: frozenset(
+        {SubagentStatus.RUNNING, SubagentStatus.FAILED, SubagentStatus.CANCELLED}
+    ),
     SubagentStatus.RUNNING: frozenset(
         {
             SubagentStatus.BLOCKED,

{windcode-0.1.1 → windcode-0.1.3}/src/windcode/extensions/mcp/tools.py

@@ -439,13 +439,18 @@ class SearchMcpToolsTool:
         selected_tools: set[str],
     ) -> None:
         self.service = service
-        self.registry = registry
+        self.registries = [registry]
         self.selected_tools = selected_tools
 
+    def add_registry(self, registry: ToolRegistry) -> None:
+        if all(item is not registry for item in self.registries):
+            self.registries.append(registry)
+
     async def _select(self, stable_id: str) -> tuple[McpToolAdapter, bool]:
         already_selected = stable_id in self.selected_tools
         adapter = await self.service.adapter(stable_id)
-        self.registry.register(adapter, replace=True)
+        for registry in self.registries:
+            registry.register(adapter, replace=True)
         self.selected_tools.add(stable_id)
         return adapter, already_selected
 

{windcode-0.1.1 → windcode-0.1.3}/src/windcode/extensions/service.py

@@ -8,6 +8,7 @@ from pathlib import Path
 from typing import cast
 from uuid import uuid4
 
+from platformdirs import user_state_path
 from pydantic import TypeAdapter, ValidationError
 
 from windcode.config.models import (
@@ -57,13 +58,23 @@ class ExtensionService:
         workspace: Path,
         state_store: ExtensionStateStore,
         plugins_root: Path,
+        *,
+        user_skill_root: Path | None = None,
     ) -> None:
         self.config = config
         self.workspace = workspace.expanduser().resolve()
         self.state_store = state_store
         self.plugins_root = plugins_root
-        self._user_skill_roots = tuple(Path(path).expanduser() for path in config.skill_roots)
-        self._project_skill_root = self.workspace / ".windcode" / "skills"
+        default_user_skill_root = user_skill_root or user_state_path("windcode") / "skill"
+        self._user_skill_roots = tuple(
+            dict.fromkeys(
+                (
+                    default_user_skill_root.expanduser().resolve(),
+                    *(Path(path).expanduser().resolve() for path in config.skill_roots),
+                )
+            )
+        )
+        self._project_skill_root = self.workspace / ".windcode" / "skill"
         loaded = state_store.load()
         self._state = loaded.state
         self._state_diagnostics = loaded.diagnostics

{windcode-0.1.1 → windcode-0.1.3}/src/windcode/runtime/prompts.py

@@ -77,6 +77,8 @@ def build_system_prompt(
             "\n\n## 委派策略: explicit\n"
             "仅当用户明确要求委派、并行或使用子智能体时, 才可调用子智能体工具。"
             "创建后调用 wait_subagents 一次等待结果; 禁止循环调用 list_subagents。"
+            "写任务使用基于当前 HEAD 的独立 Git Worktree; 不得为创建子智能体而暂存、提交、"
+            "还原、移动或删除父工作区的未提交修改。"
             "子智能体可按运行网络策略和权限审批访问外部网络。"
         )
     elif delegation_mode is DelegationMode.PROACTIVE:
@@ -84,6 +86,8 @@ def build_system_prompt(
             "\n\n## 委派策略: proactive\n"
             "可在任务确实独立且适合并行时主动委派; 必须保持任务有界、状态可见并统一汇总。"
             "创建后调用 wait_subagents 一次等待结果; 禁止循环调用 list_subagents。"
+            "写任务使用基于当前 HEAD 的独立 Git Worktree; 不得为创建子智能体而暂存、提交、"
+            "还原、移动或删除父工作区的未提交修改。"
             "子智能体可按运行网络策略和权限审批访问外部网络。"
         )
     if memory_enabled:

{windcode-0.1.1 → windcode-0.1.3}/src/windcode/runtime/subagents/coordinator.py

@@ -46,7 +46,7 @@ from windcode.runtime.subagents.approvals import ApprovalRouter
 from windcode.runtime.subagents.budgets import AggregateBudget
 from windcode.runtime.subagents.factory import ChildRuntime, ChildRuntimeFactory
 from windcode.runtime.subagents.verification import VerificationRunner
-from windcode.worktrees import GitBaseline, WorktreeLease, WorktreeManager
+from windcode.worktrees import GitBaseline, WorktreeError, WorktreeLease, WorktreeManager
 
 
 class SubagentCoordinatorError(RuntimeError):
@@ -98,6 +98,7 @@ class SubagentCoordinator:
         self._runtimes: dict[str, ChildRuntime] = {}
         self._tasks: dict[str, asyncio.Task[None]] = {}
         self._completion: dict[str, asyncio.Future[SubagentResult]] = {}
+        self._startup: dict[str, asyncio.Future[None]] = {}
         self._usage: dict[str, Usage] = {}
         self._queue: deque[str] = deque()
         self._active = 0
@@ -168,7 +169,10 @@ class SubagentCoordinator:
             baseline: GitBaseline | None = None
             if any(spec.kind is SubagentTaskKind.WRITE for spec in specs):
                 try:
-                    baseline = await self.worktrees.validate_parent(self.workspace)
+                    baseline = await self.worktrees.validate_parent(
+                        self.workspace,
+                        require_clean=False,
+                    )
                 except Exception as exc:
                     raise SubagentCoordinatorError("write_workspace_blocked", str(exc)) from exc
 
@@ -190,12 +194,22 @@ class SubagentCoordinator:
                 )
                 self._records[record.subagent_id] = record
                 self._completion[record.subagent_id] = loop.create_future()
+                self._startup[record.subagent_id] = loop.create_future()
                 self._queue.append(record.subagent_id)
                 await self._persist(record)
                 await self._publish_record_event(record, SubagentQueued)
                 created.append(record)
             self._schedule_locked()
-            return tuple(created)
+            scheduled_ids = tuple(
+                record.subagent_id for record in created if record.subagent_id in self._tasks
+            )
+        # Do not report a successful spawn while every child is merely a queued
+        # record. Yield outside the coordinator lock until each scheduled task has
+        # either published its running state or reached a terminal failure.
+        await asyncio.gather(
+            *(asyncio.shield(self._startup[subagent_id]) for subagent_id in scheduled_ids)
+        )
+        return tuple(self._records[record.subagent_id] for record in created)
 
     def _schedule_locked(self) -> None:
         while self._queue and self._active < self.config.max_concurrent:
@@ -309,7 +323,10 @@ class SubagentCoordinator:
                     "",
                     record.base_commit,
                 )
-                validated = await self.worktrees.validate_parent(self.workspace)
+                validated = await self.worktrees.validate_parent(
+                    self.workspace,
+                    require_clean=False,
+                )
                 baseline = replace(
                     baseline, repository=validated.repository, branch=validated.branch
                 )
@@ -339,6 +356,9 @@ class SubagentCoordinator:
                 summary="subagent started",
                 workspace=str(workspace),
             )
+            startup = self._startup[subagent_id]
+            if not startup.done():
+                startup.set_result(None)
             forwarding = asyncio.create_task(self._forward_child_events(runtime))
             try:
                 run_result = await runtime.loop.run(runtime.prompt, runtime.workspace)
@@ -429,6 +449,9 @@ class SubagentCoordinator:
             if record.status in {SubagentStatus.QUEUED, SubagentStatus.RUNNING}:
                 await self._finish_failed(record, type(exc).__name__, str(exc))
         finally:
+            startup = self._startup.get(subagent_id)
+            if startup is not None and not startup.done():
+                startup.set_result(None)
             self._runtimes.pop(subagent_id, None)
             self.approvals.cancel(subagent_id)
             async with self._lock:
@@ -566,7 +589,14 @@ class SubagentCoordinator:
             raise SubagentCoordinatorError(
                 "not_integratable", "subagent must be a completed clean write task"
             )
-        integration = await self.worktrees.integrate(self._leases[subagent_id], self.workspace)
+        try:
+            integration = await self.worktrees.integrate(self._leases[subagent_id], self.workspace)
+        except WorktreeError as exc:
+            raise SubagentCoordinatorError(
+                "integration_workspace_blocked",
+                "subagent work is safely committed in its Worktree, but integration is blocked: "
+                f"{exc}",
+            ) from exc
         if not integration.integrated:
             conflict = await self._transition(record, SubagentStatus.CONFLICT)
             result = replace(

{windcode-0.1.1 → windcode-0.1.3}/src/windcode/runtime/subagents/factory.py

@@ -135,12 +135,19 @@ class ChildRuntime:
 def build_child_prompt(record: SubagentRecord) -> str:
     spec = record.spec
     verification = "\n".join(f"- {item}" for item in spec.verification)
+    delivery = (
+        "This is a read-only task. Return all findings in your final response for the parent "
+        "agent to consume. Do not create, edit, or save a report file, including through shell."
+        if spec.kind is SubagentTaskKind.READ
+        else "Complete file changes in the assigned worktree and commit them before responding."
+    )
     return (
         f"Task: {spec.task_name}\n"
         f"Goal: {spec.goal}\n\n"
         f"Context:\n{spec.context}\n\n"
         f"Expected output:\n{spec.expected_output}\n\n"
         f"Verification requirements:\n{verification}\n\n"
+        f"Delivery constraint:\n{delivery}\n\n"
         "Complete only this task. Do not delegate and do not ask the user questions."
     )
 

{windcode-0.1.1 → windcode-0.1.3}/src/windcode/runtime/subagents/roles.py

@@ -65,10 +65,19 @@ def resolve_role_tools(
         if "__" in name
         or name in {"list_mcp_servers", "search_mcp_tools", "read_mcp_resource", "get_mcp_prompt"}
     )
-    allowed_tools = policy.default_tools | network_tools
-    if requested_tools is not None:
-        unknown = requested_tools - allowed_tools
-        if unknown:
-            raise ValueError(f"requested tools exceed role policy: {', '.join(sorted(unknown))}")
-    selected = allowed_tools if requested_tools is None else requested_tools
+    # Task kind is an independent capability boundary. In particular, a worker
+    # may perform either kind of task, but a worker/read task must remain just as
+    # read-only as researcher/read and verifier/read.
+    kind_tools = (
+        policy.default_tools & _READ_TOOLS
+        if kind is SubagentTaskKind.READ
+        else policy.default_tools
+    )
+    allowed_tools = kind_tools | network_tools
+    # ``requested_tools`` is model-authored input, so treat it as a narrowing
+    # hint rather than a second policy boundary. A model can accidentally copy a
+    # write tool into a read-only researcher task; denying that tool is enough to
+    # preserve the role boundary and should not prevent the remaining research
+    # tools from starting.
+    selected = allowed_tools if requested_tools is None else requested_tools & allowed_tools
     return selected & parent_tools

{windcode-0.1.1 → windcode-0.1.3}/src/windcode/sdk.py

@@ -1,7 +1,6 @@
 from __future__ import annotations
 
 import asyncio
-import shutil
 from collections.abc import AsyncIterator, Mapping
 from dataclasses import replace
 from pathlib import Path
@@ -35,6 +34,7 @@ from windcode.extensions.commands import CommandRoute
 from windcode.extensions.hooks.models import HookContext, HookEvent
 from windcode.extensions.mcp.catalog import McpToolDefinition
 from windcode.extensions.mcp.tools import (
+    SearchMcpToolsTool,
     register_mcp_management_tools,
     register_mcp_status_tool,
 )
@@ -226,21 +226,13 @@ class Windcode:
     def _resolve_state_root(self, explicit_root: Path | None) -> Path:
         if explicit_root is not None:
             return explicit_root.expanduser().resolve()
-        legacy_root = user_state_path("windcode").expanduser().resolve()
+        configured_project_root = self.config.storage.project_state_root
+        if configured_project_root is not None:
+            return self._configured_state_path(configured_project_root)
         configured_user_root = self.config.storage.user_storage_root
-        user_root = (
-            self._configured_state_path(configured_user_root)
-            if configured_user_root is not None
-            else legacy_root / "state"
-        )
-        source_root = user_root if user_root.exists() else legacy_root
-        configured = self.config.storage.project_state_root
-        if configured is None:
-            self._migrate_state_root(source_root, user_root)
-            return user_root
-        project_root = self._configured_state_path(configured)
-        self._migrate_state_root(source_root, project_root)
-        return project_root
+        if configured_user_root is not None:
+            return self._configured_state_path(configured_user_root)
+        return user_state_path("windcode").expanduser().resolve()
 
     def _configured_state_path(self, value: str) -> Path:
         project_root = Path(value).expanduser()
@@ -248,33 +240,11 @@ class Windcode:
             project_root = self.workspace / project_root
         return project_root.resolve()
 
-    @staticmethod
-    def _state_manifest(root: Path) -> dict[str, int]:
-        return {
-            str(path.relative_to(root)): path.stat().st_size
-            for path in root.rglob("*")
-            if path.is_file() and not path.is_symlink()
-        }
-
-    @classmethod
-    def _migrate_state_root(cls, source: Path, target: Path) -> None:
-        """Copy the complete legacy state once, validate it, then atomically install it."""
-        if source == target or target.exists():
-            return
-        target.parent.mkdir(parents=True, exist_ok=True)
-        temporary_parent = source.parent if target.is_relative_to(source) else target.parent
-        temporary = temporary_parent / f".{target.name}.migrate-{uuid4().hex}"
-        try:
-            if source.exists():
-                shutil.copytree(source, temporary, copy_function=shutil.copy2)
-                if cls._state_manifest(source) != cls._state_manifest(temporary):
-                    raise OSError("project state migration validation failed")
-            else:
-                temporary.mkdir(parents=True)
-            temporary.replace(target)
-        finally:
-            if temporary.exists():
-                shutil.rmtree(temporary)
+    def _user_storage_root(self) -> Path:
+        configured = self.config.storage.user_storage_root
+        if configured is not None:
+            return self._configured_state_path(configured)
+        return user_state_path("windcode").expanduser().resolve()
 
     @classmethod
     def open(
@@ -749,6 +719,10 @@ class Windcode:
                 continue
             policy.restore_session_approval(tool_name, effects)
         child_tools = run_registry.clone()
+        if "search_mcp_tools" in run_registry.names():
+            search_mcp_tools = run_registry.get("search_mcp_tools")
+            if isinstance(search_mcp_tools, SearchMcpToolsTool):
+                search_mcp_tools.add_registry(child_tools)
         instructions = load_instructions(workspace, workspace_root=workspace)
         run_memory = (
             MemoryService(self.state_root, workspace) if self.config.memory.enabled else None
@@ -830,7 +804,10 @@ class Windcode:
             config=self.config.subagents,
             event_bus=bus,
             factory=factory,
-            worktrees=WorktreeManager(worktrees_root=self.state_root / "worktrees"),
+            worktrees=WorktreeManager(
+                worktrees_root=self.state_root / "worktrees",
+                fallback_worktrees_root=self._user_storage_root() / "worktrees",
+            ),
             verification=VerificationRunner(
                 sandbox=sandbox,
                 timeout_seconds=self.config.budgets.shell_timeout_seconds,

{windcode-0.1.1 → windcode-0.1.3}/src/windcode/tools/subagents/spawn.py

@@ -14,13 +14,26 @@ class SubagentTaskInput(BaseModel):
     model_config = ConfigDict(extra="forbid", frozen=True)
 
     task_name: str = Field(pattern=r"^[a-z0-9]+(?:_[a-z0-9]+)*$")
-    role: SubagentRole
-    kind: SubagentTaskKind
+    role: SubagentRole = Field(
+        description=(
+            "researcher and verifier are read-only; use worker only when the child itself must "
+            "modify files"
+        )
+    )
+    kind: SubagentTaskKind = Field(
+        description="Use read for research/verification and write only for a worker editing files."
+    )
     goal: str = Field(min_length=1)
     context: str = Field(min_length=1)
     expected_output: str = Field(min_length=1)
     verification: tuple[str, ...] = Field(min_length=1)
-    allowed_tools: frozenset[str] | None = None
+    allowed_tools: frozenset[str] | None = Field(
+        default=None,
+        description=(
+            "Optional tool restriction. Omit it to use role defaults. Never request write_file, "
+            "edit_file, or apply_patch for researcher/verifier read tasks."
+        ),
+    )
     model: str | None = None
     requires_network: bool = Field(
         default=False,
@@ -51,8 +64,14 @@ class SpawnSubagentsInput(BaseModel):
 class SpawnSubagentsTool:
     name = "spawn_subagents"
     description = (
-        "Create bounded temporary subagents. Declare requires_network for network-dependent "
-        "tasks; network access follows the parent run's network policy and permission workflow."
+        "Create bounded temporary subagents. Researchers and verifiers are read-only and return "
+        "their findings to the parent; use a worker/write task only when that child must edit "
+        "files. Write tasks use an isolated Git Worktree based on the current parent HEAD, so "
+        "never stash, commit, revert, move, or discard parent workspace changes before spawning; "
+        "uncommitted parent changes are intentionally not copied into the child Worktree. Omit "
+        "allowed_tools unless a narrower tool set is required. Declare "
+        "requires_network for network-dependent tasks; network access follows the parent run's "
+        "network policy and permission workflow."
     )
     input_model = SpawnSubagentsInput
     effects = frozenset({ToolEffect.PROCESS, ToolEffect.WORKSPACE_WRITE})

{windcode-0.1.1 → windcode-0.1.3}/src/windcode/tui/app.py

@@ -16,7 +16,7 @@ from textual.theme import Theme
 from textual.widgets import Static
 
 from windcode.auth import CredentialStore, CredentialStoreError
-from windcode.config import AppConfig, PermissionMode, ProviderConfig
+from windcode.config import AppConfig, PermissionMode, ProviderConfig, default_user_config_path
 from windcode.domain.events import (
     ApprovalRequested,
     ApprovalResponse,
@@ -86,9 +86,7 @@ class WindcodeApp(App[None]):
         super().__init__()
         self.config = config
         self.workspace = workspace
-        self.config_file = (
-            (config_file or self.workspace / ".windcode" / "config.toml").expanduser().resolve()
-        )
+        self.config_file = (config_file or default_user_config_path()).expanduser().resolve()
         self.model = model
         self.session_id = session_id
         self.permission_mode = permission_mode or config.permission.mode.value