AnyBot/src
AnyBot Dev 9b68017a19 System prompt speaks the one-tool shape (H2 follow-up)
- 「網頁上的事一律用 browser 一個工具」: the guidance lines now name
  action=open/read/click/type/table/find/wait/download and action=profiles —
  the model reads one vocabulary in the system prompt, the schema and the
  loop-guard messages (browser_read/browser_open mentions gone from those)
- H3, light: usage rules were already in the system prompt (and C1 caches
  the tools block too, so moving descriptions there saves little) — the
  browser schema shed its duplicated safety sentence to the click line;
  wholesale description-slimming deliberately not done: the guidance that
  reads as noise is what keeps a small model out of trouble
2026-11-09 18:12:18 +08:00
..
app Rewrite decompilation comments as behaviour specs; move reverse-engineering docs out of the repo; drop third-party marks from UI strings (i18n tables synced) 2026-11-09 16:37:33 +08:00
agent.rs System prompt speaks the one-tool shape (H2 follow-up) 2026-11-09 18:12:18 +08:00
app.rs System prompt speaks the one-tool shape (H2 follow-up) 2026-11-09 18:12:18 +08:00
appctl.rs Bots work like someone who knows the computer: they know each machine, reach what they see, plan, and hand the planned steps to a quick model 2026-11-09 09:01:03 +08:00
attach.rs Real-use fixes: the person sees the screens the bot shows, files reach the phone, no blank-tab loops 2026-11-06 19:37:45 +08:00
avatar.rs AnyBot: first commit of the working desktop app 2026-11-04 16:51:51 +08:00
axread.rs Rewrite decompilation comments as behaviour specs; move reverse-engineering docs out of the repo; drop third-party marks from UI strings (i18n tables synced) 2026-11-09 16:37:33 +08:00
axwrite.rs High-level semantic actions: menu_click, fill_form, wait_for, batch expect (C3) 2026-11-09 17:15:58 +08:00
bidi.rs AnyBot's browser drives Firefox too, the person's own Firefox profiles included 2026-11-08 00:55:17 +08:00
botbrowser.rs Rewrite decompilation comments as behaviour specs; move reverse-engineering docs out of the repo; drop third-party marks from UI strings (i18n tables synced) 2026-11-09 16:37:33 +08:00
browser.rs System prompt speaks the one-tool shape (H2 follow-up) 2026-11-09 18:12:18 +08:00
channels.rs Routines follow the clock in each timezone; channels resume where they stopped; pages find checks the bot 2026-11-05 15:48:22 +08:00
cloudbox.rs Merge c4/tree-diff: screenshot diffs (C4) 2026-11-09 17:12:25 +08:00
computer.rs Merge s3/injection: injection defences + red-team bench (S3) 2026-11-09 17:20:10 +08:00
desk.rs Linux: the front app is found by its program, and accessibility is switched on when it's off 2026-11-08 00:58:18 +08:00
desktop.rs The quick model runs again, the Mac's own menus get numbers, and an unread window is said 2026-11-09 14:58:40 +08:00
diagram.rs Clippy is clean on macOS and Linux, for the app and the relay 2026-11-07 10:10:28 +08:00
egress.rs Egress proxy: bind loopback + detected Docker bridge gateways, never 0.0.0.0 2026-11-09 16:46:47 +08:00
facts.rs The quick model runs again, the Mac's own menus get numbers, and an unread window is said 2026-11-09 14:58:40 +08:00
httpd.rs Relay 2FA: TOTP + recovery codes, argon2id, one-page logout (S2) 2026-11-09 17:52:42 +08:00
i18n.rs Rewrite decompilation comments as behaviour specs; move reverse-engineering docs out of the repo; drop third-party marks from UI strings (i18n tables synced) 2026-11-09 16:37:33 +08:00
i18n_table.rs Rewrite decompilation comments as behaviour specs; move reverse-engineering docs out of the repo; drop third-party marks from UI strings (i18n tables synced) 2026-11-09 16:37:33 +08:00
icons.rs Remove what nothing uses and keep one copy of what was written several times 2026-11-05 23:21:47 +08:00
lock.rs One AnyBot per data folder: a second copy says so instead of opening 2026-11-09 00:49:42 +08:00
macapps.rs Rewrite decompilation comments as behaviour specs; move reverse-engineering docs out of the repo; drop third-party marks from UI strings (i18n tables synced) 2026-11-09 16:37:33 +08:00
main.rs wip: sqlite audit trail 2026-11-09 18:00:56 +08:00
marks.rs Merge s3/injection: injection defences + red-team bench (S3) 2026-11-09 17:20:10 +08:00
mcp.rs Compaction keeps tool pairs; MCP locks per server; the chosen computer needs whole words to move 2026-11-05 15:48:20 +08:00
memory.rs Bots work like someone who knows the computer: they know each machine, reach what they see, plan, and hand the planned steps to a quick model 2026-11-09 09:01:03 +08:00
mic.rs Demo recording keeps its last events off the UI thread; dialogs, screensaver probe and installer traps fixed 2026-11-05 15:48:22 +08:00
model.rs Rewrite decompilation comments as behaviour specs; move reverse-engineering docs out of the repo; drop third-party marks from UI strings (i18n tables synced) 2026-11-09 16:37:33 +08:00
notify.rs Rewrite decompilation comments as behaviour specs; move reverse-engineering docs out of the repo; drop third-party marks from UI strings (i18n tables synced) 2026-11-09 16:37:33 +08:00
oplog.rs wip: sqlite audit trail 2026-11-09 18:00:56 +08:00
pages.rs Clippy is clean on macOS and Linux, for the app and the relay 2026-11-07 10:10:28 +08:00
phone.rs Clippy is clean on macOS and Linux, for the app and the relay 2026-11-07 10:10:28 +08:00
platform.rs Clippy is clean on macOS and Linux, for the app and the relay 2026-11-07 10:10:28 +08:00
policy.rs Rewrite decompilation comments as behaviour specs; move reverse-engineering docs out of the repo; drop third-party marks from UI strings (i18n tables synced) 2026-11-09 16:37:33 +08:00
portal.rs Stream deltas keep tool-call slots; chunked bodies accepted; portal sessions race-safe 2026-11-05 15:48:20 +08:00
preview.rs Clippy is clean on macOS and Linux, for the app and the relay 2026-11-07 10:10:28 +08:00
providers.rs Merge c1/prompt-cache: Anthropic prompt caching 2026-11-09 16:44:57 +08:00
remote.rs Audit timeline: what this turn did, on the phone (S5) 2026-11-09 17:59:26 +08:00
routines.rs Clippy is clean on macOS and Linux, for the app and the relay 2026-11-07 10:10:28 +08:00
setup.rs One AnyBot per data folder: a second copy says so instead of opening 2026-11-09 00:49:42 +08:00
share.rs Export drops threads; a broken keyring stops with the secret recoverable 2026-11-05 15:48:20 +08:00
store.rs SQLite layer: the audit trail becomes queryable history (P4, step 1) 2026-11-09 18:02:56 +08:00
teach.rs Clippy is clean on macOS and Linux, for the app and the relay 2026-11-07 10:10:28 +08:00
teams.rs Remove what nothing uses and keep one copy of what was written several times 2026-11-05 23:21:47 +08:00
theme.rs Remove what nothing uses and keep one copy of what was written several times 2026-11-05 23:21:47 +08:00
tools.rs One computer tool with an action enum replaces twelve computer_use_* specs 2026-11-09 16:50:18 +08:00
triggers.rs Rewrite decompilation comments as behaviour specs; move reverse-engineering docs out of the repo; drop third-party marks from UI strings (i18n tables synced) 2026-11-09 16:37:33 +08:00
tunnel.rs HTTPS on the local network's own IP, with a certificate the server signs itself 2026-11-07 21:27:07 +08:00
vault.rs Clippy is clean on macOS and Linux, for the app and the relay 2026-11-07 10:10:28 +08:00
vault_store.rs Clippy is clean on macOS and Linux, for the app and the relay 2026-11-07 10:10:28 +08:00
vnc.rs Whole control flow checked against real chats: what the bot sees is what is there, every step lands, nothing done twice 2026-11-06 17:44:59 +08:00
voice.rs Clippy is clean on macOS and Linux, for the app and the relay 2026-11-07 10:10:28 +08:00
web.rs One browser tool: 25 schemas → 2, actions like the CUA prior (H2) 2026-11-09 18:11:36 +08:00
wire.rs Remove what nothing uses and keep one copy of what was written several times 2026-11-05 23:21:47 +08:00
wl.rs Clippy is clean on macOS and Linux, for the app and the relay 2026-11-07 10:10:28 +08:00
x11.rs Clippy is clean on macOS and Linux, for the app and the relay 2026-11-07 10:10:28 +08:00