qqqys 22bb5e8b9f feat(core): require an explicit user opt-in before the model launches a workflow (#9806) ... * feat(core): require an explicit user opt-in before the model launches a workflow The Workflow tool description carried judgement heuristics for orchestrating well, but no rule about when not to orchestrate at all. Read on its own the prose is encouragement, and a run that can dispatch up to the per-run agent cap is a large spend to enter on inference rather than on a request. Prepend a gate above the existing guidance: do not call the tool unless the user asked for multi-agent orchestration, with the five forms that count as asking under this project's own triggers -- the `workflow` keyword, the user's own words, a skill or slash command, a named saved workflow reached through `workflow('<name>')` or `scriptPath`, and a resume. Upstream's `ultracode` marker is deliberately not among them: it does not exist here, and naming it would enumerate a trigger no user can pull. The fallback path is the load-bearing half. Without an offer-and-ask route the model reads a refusal rule as "refuse", and a user who would have said yes never gets asked, so the text ends by telling it to say what a workflow would fan out over and let the user decide. The agent cap is interpolated from `DEFAULT_MAX_AGENTS_PER_RUN` rather than pasted, matching the rest of the description. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01MDuRWMhKbqEYZXbbLhn3en * chore: keep agent-core.ts as it is on main The merge commit's pre-commit hook ran prettier over every file the merge staged, not just the ones this branch changes, and reformatted a type union in agent-core.ts. main's copy does not satisfy the repo's pinned prettier 3.6.1, so the hook produced a real diff in a file this PR has no business touching. Restore main's bytes to keep the PR scoped. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01MDuRWMhKbqEYZXbbLhn3en * test(core): pin workflow opt-in contract --------- Co-authored-by: Claude Opus 5 (1M context) <noreply@anthropic.com> Co-authored-by: Shaojin Wen <shaojin.wensj@alibaba-inc.com> Co-authored-by: qqqys <266654365+qqqys@users.noreply.github.com>		2026-08-24 17:39:04 +00:00
..
scripts
src	feat(core): require an explicit user opt-in before the model launches a workflow (#9806)	2026-08-24 17:39:04 +00:00
vendor	feat test tool permissions	2026-03-10 16:30:22 +08:00
index.ts	fix: Remove remaining ClearcutLogger export from packages/core/index.ts	2026-02-01 14:52:14 +08:00
package.json	feat(mcp): add MCP 2026 core and WebShell Apps host (#8992)	2026-08-23 18:34:30 +00:00
test-setup.ts	feat(memory): managed auto-memory and auto-dream system (#3087)	2026-04-16 20:05:45 +08:00
tsconfig.json	fix: upgrade @lydell/node-pty to 1.2.0-beta.10 to fix PTY FD leak	2026-04-01 07:55:56 +08:00
vitest.config.ts	fix(devx): fail with actionable message when unit-test build prerequisites are missing (#9149) (#9171)	2026-08-18 13:19:09 +00:00