open-webui/Fu-Jie_openwebui-extensions
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

feat(github-copilot-sdk): release v0.10.0 with native prompt restoration and live todo widget

Browse Source 
- Restore native Copilot CLI prompts for authentic Plan Mode behavior
- Add SQLite-backed session management for state persistence via system prompt
- Implement Adaptive Autonomy (Agent chooses planning vs direct execution)
- Fix OpenWebUI custom tool context injection for v0.8.x compatibility
- Add compact Live TODO widget synchronized with session.db
- Upgrade SDK to github-copilot-sdk==0.1.30
- Remove legacy mode switch RPC calls (moved to prompt-driven orchestration)
- Fix intent status localization and widget whitespace optimization
- Sync bilingual READMEs and all documentation mirrors to v0.10.0
This commit is contained in:
fujie
2026-03-07 04:30:15 +08:00
parent 35dec491de
commit f5a983fb4a
44 changed files with 5993 additions and 489 deletions
Download Patch File Download Diff File Expand all files Collapse all files

164
plugins/pipes/github-copilot-sdk/debug/final_system_prompt_review.md Normal file
View File

@@ -0,0 +1,164 @@
# Final System Prompt Review
This document is a review-friendly copy of the current runtime system prompt assembly used by `plugins/pipes/github-copilot-sdk/github_copilot_sdk.py`.
Source of truth:
- Prompt assembly: `plugins/pipes/github-copilot-sdk/github_copilot_sdk.py:4440`
- Resume-session reinjection path: `plugins/pipes/github-copilot-sdk/github_copilot_sdk.py:6044`
## What This File Represents
This is not a single static constant in code. The final runtime system prompt is assembled in this order:
1. Optional user/model system prompt (`system_prompt_content`)
2. Optional skill-management hint
3. Session context block
4. Available native system tools block
5. `BASE_GUIDELINES`
6. Optional version-note block for OpenWebUI `< 0.8.0`
7. Privilege block
- `ADMIN_EXTENSIONS` for administrators
- `USER_RESTRICTIONS` for regular users
For review purposes, this file shows the current default template with placeholders for runtime values.
## Runtime Template
### Part 1. Optional Custom System Prompt
This section is injected first only when OpenWebUI provides a model/chat/body system prompt.
```text
{system_prompt_content if present}
```
### Part 2. Optional Skill Management Hint
This section is injected only when the pipe detects explicit skill-management intent.
```text
[Skill Management]
If the user wants to install, create, delete, edit, or list skills, use the `manage_skills` tool.
Supported operations: list, install, create, edit, delete, show.
When installing skills that require CLI tools, you MAY run installation commands.
To avoid hanging the session, ALWAYS append `-q` or `--silent` to package managers, and confirm unattended installations. Mirror guidance is added dynamically based on timezone.
When running `npm install -g`, the installation target is `/app/backend/data/.copilot_tools/npm`.
When running `pip install`, it operates within an isolated Python virtual environment at `/app/backend/data/.copilot_tools/venv`.
```
### Part 3. Session Context
```text
[Session Context]
- Your Isolated Workspace: `{resolved_cwd}`
- Active User ID: `{user_id}`
- Active Chat ID: `{chat_id}`
- Skills Directory: `{OPENWEBUI_SKILLS_SHARED_DIR}/shared/`
- Config Directory: `{COPILOTSDK_CONFIG_DIR}`
- CLI Tools Path: `/app/backend/data/.copilot_tools/`
CRITICAL INSTRUCTION: You MUST use the above workspace for ALL file operations.
- DO NOT create files in `/tmp` or any other system directories.
- Always interpret 'current directory' as your Isolated Workspace.
```
Resume-session reinjection uses a very similar block, but also adds:
```text
- Use the `manage_skills` tool for skill install/list/create/edit/delete/show operations.
- If a tool output is too large, save it to a file within your workspace, NOT `/tmp`.
```
### Part 4. Available Native System Tools
```text
[Available Native System Tools]
The host environment is rich. Based on the official OpenWebUI Docker deployment baseline (backend image), the following CLI tools are expected to be preinstalled and globally available in $PATH:
- Network/Data: `curl`, `jq`, `netcat-openbsd`
- Media/Doc: `pandoc`, `ffmpeg`
- Build/System: `git`, `gcc`, `make`, `build-essential`, `zstd`, `bash`
- Python/Runtime: `python3`, `pip3`, `uv`
- Package Mgr Guidance: Prefer `uv pip install <pkg>` over plain `pip install`. A mirror hint is appended dynamically based on timezone.
- Verification Rule: Before installing any CLI/tool dependency, first check availability with `which <tool>` or `<tool> --version`.
- Python Libs: The active virtual environment inherits `--system-site-packages`. Many advanced libraries are already installed and should be imported before attempting installation.
```
### Part 5. Base Guidelines
This is the largest stable section. It includes:
1. Environment and capability context
2. OpenWebUI host/product context
3. Tool-vs-skill distinction
4. Execution and tooling strategy
5. Formatting and presentation directives
6. File delivery protocol
7. TODO visibility rules
8. Python execution standard
9. Mode awareness
10. SQL/session-state rules
11. Search and sub-agent usage rules
Key database wording currently present in the live prompt:
```text
The `sql` tool provides access to Copilot session databases. Use that tool whenever structured, queryable data would help you work more effectively.
These SQL databases (`session` and, when available, `session_store`) are tool-provided Copilot session stores, not the main OpenWebUI application database. Access them through the `sql` tool rather than by inventing your own application-database connection flow.
Session database (database: `session`, the default): The per-session database persists across the session but is isolated from other sessions.
In this environment, the session metadata directory is typically `COPILOTSDK_CONFIG_DIR/session-state/<chat_id>/`, and the SQLite file is usually stored there as `session.db`.
The UI may inject a `<todo_status>...</todo_status>` summary into user messages as a convenience reminder derived from the same session state. Treat that reminder as helpful context, but prefer the `sql` tool's live tables as the source of truth when available.
```
### Part 6. Optional Version Note
This block is appended only when the host OpenWebUI version is older than `0.8.0`.
```text
[CRITICAL VERSION NOTE]
The host OpenWebUI version is `{open_webui_version}`, which is older than 0.8.0.
- Rich UI Disabled: Integration features like `type: embeds` or automated iframe overlays are NOT supported.
- Protocol Fallback: Do not rely on the Premium Delivery Protocol for visuals.
```
### Part 7A. Administrator Privilege Block
```text
[ADMINISTRATOR PRIVILEGES - CONFIDENTIAL]
You have detected that the current user is an ADMINISTRATOR.
- Full OS Interaction: Shell tools may be used for deep inspection.
- Database Access: There is no dedicated tool for the main OpenWebUI application database. If database access is necessary, you may obtain credentials from the environment (for example `DATABASE_URL`) and write code/scripts to connect explicitly.
- Copilot SDK & Metadata: You can inspect your own session state and core configuration in the Copilot SDK config directory.
- Environment Secrets: You may read and analyze environment variables and system-wide secrets for diagnostics.
SECURITY NOTE: Do not leak these sensitive internal details to non-admin users.
```
### Part 7B. Regular User Privilege Block
```text
[USER ACCESS RESTRICTIONS - STRICT]
You have detected that the current user is a REGULAR USER.
- NO Environment Access: Do not access environment variables.
- NO OpenWebUI App Database Access: Do not connect to or query the main OpenWebUI application database via `DATABASE_URL`, SQLAlchemy engines, custom connection code, or direct backend database credentials.
- Session SQL Scope Only: You may use only the SQL databases explicitly exposed by the session tooling through the `sql` tool, such as the per-session `session` database and any read-only `session_store` made available by the environment.
- Own Session Metadata Access: You may read Copilot session information for the current user/current chat only.
- NO Writing Outside Workspace: All write operations must stay inside the isolated workspace.
- Formal Delivery: Write files to the workspace and use `publish_file_from_workspace` when needed.
- Tools and Shell Availability: You may use the provided tools as long as you stay within these boundaries.
```
## Review Notes
- The runtime prompt is always injected in `replace` mode.
- The biggest dynamic variables are `system_prompt_content`, workspace/user/chat IDs, mirror hint text, and privilege selection.
- The database model is now intentionally explicit:
- Session databases are used through the `sql` tool.
- The main OpenWebUI app database has no dedicated tool surface.
- Admins may connect to the main app database only by explicitly writing connection code after obtaining credentials.
## Suggested Review Focus
1. Confirm the assembly order is correct.
2. Confirm the database boundary language matches the desired product behavior.
3. Confirm the privilege distinction between admin and regular user is strict enough.
4. Confirm the session metadata path wording matches real runtime behavior.

169
plugins/pipes/github-copilot-sdk/debug/final_system_prompt_review_CN.md Normal file
View File

@@ -0,0 +1,169 @@
# 最终系统提示词审阅版
本文档是 `plugins/pipes/github-copilot-sdk/github_copilot_sdk.py` 当前运行时系统提示词的单独审阅版。
源码位置：
- 主拼装入口：`plugins/pipes/github-copilot-sdk/github_copilot_sdk.py:4440`
- 恢复会话时的重新注入入口：`plugins/pipes/github-copilot-sdk/github_copilot_sdk.py:6044`
## 本文档表示什么
当前运行时 system prompt 不是一个单一常量，而是按顺序拼装出来的。拼装顺序如下：
1. 可选的用户/模型系统提示词 `system_prompt_content`
2. 可选的技能管理提示块
3. 会话上下文块
4. 原生系统工具说明块
5. `BASE_GUIDELINES`
6. 可选版本说明块
- 仅当 OpenWebUI `< 0.8.0` 时追加
7. 权限块
- 管理员使用 `ADMIN_EXTENSIONS`
- 普通用户使用 `USER_RESTRICTIONS`
为了方便 review，本文档把当前最终模板按运行时结构拆开写，并保留动态变量占位符。
## 运行时模板
### 第 1 部分：可选自定义系统提示词
只有 OpenWebUI 从 body / metadata / model / messages 中解析到系统提示词时，才会放在最前面。
```text
{system_prompt_content，如存在}
```
### 第 2 部分：可选技能管理提示块
仅当 pipe 判断当前意图是技能管理时注入。
```text
[Skill Management]
If the user wants to install, create, delete, edit, or list skills, use the `manage_skills` tool.
Supported operations: list, install, create, edit, delete, show.
When installing skills that require CLI tools, you MAY run installation commands.
To avoid hanging the session, ALWAYS append `-q` or `--silent` to package managers, and confirm unattended installations.
When running `npm install -g`, the installation target is `/app/backend/data/.copilot_tools/npm`.
When running `pip install`, it operates within an isolated Python virtual environment at `/app/backend/data/.copilot_tools/venv`.
```
### 第 3 部分：会话上下文块
```text
[Session Context]
- Your Isolated Workspace: `{resolved_cwd}`
- Active User ID: `{user_id}`
- Active Chat ID: `{chat_id}`
- Skills Directory: `{OPENWEBUI_SKILLS_SHARED_DIR}/shared/`
- Config Directory: `{COPILOTSDK_CONFIG_DIR}`
- CLI Tools Path: `/app/backend/data/.copilot_tools/`
CRITICAL INSTRUCTION: You MUST use the above workspace for ALL file operations.
- DO NOT create files in `/tmp` or any other system directories.
- Always interpret 'current directory' as your Isolated Workspace.
```
恢复会话重新注入时，这一段还会额外强调：
```text
- Use the `manage_skills` tool for skill install/list/create/edit/delete/show operations.
- If a tool output is too large, save it to a file within your workspace, NOT `/tmp`.
```
### 第 4 部分：原生系统工具说明块
```text
[Available Native System Tools]
The host environment is rich.
- Network/Data: `curl`, `jq`, `netcat-openbsd`
- Media/Doc: `pandoc`, `ffmpeg`
- Build/System: `git`, `gcc`, `make`, `build-essential`, `zstd`, `bash`
- Python/Runtime: `python3`, `pip3`, `uv`
- Package Mgr Guidance: 优先使用 `uv pip install <pkg>` 而不是普通 `pip install`。镜像提示会根据时区动态追加。
- Verification Rule: 安装前先用 `which <tool>` 或 `<tool> --version` 做轻量探测。
- Python Libs: 当前虚拟环境继承 `--system-site-packages`，很多高级库已经预装，应优先尝试导入，而不是先安装。
```
### 第 5 部分：基础规则块 `BASE_GUIDELINES`
这是最终系统提示词中最大的稳定部分，主要包含：
1. 环境与能力背景
2. OpenWebUI 宿主产品上下文
3. Tools 与 Skills 的区别
4. 执行与工具调用策略
5. 展示与输出规范
6. 文件交付协议
7. TODO 可见性规则
8. Python 执行标准
9. 模式意识
10. SQL / session state 规则
11. 搜索与子代理使用规则
当前运行时代码中，与数据库最相关的关键原文是：
```text
The `sql` tool provides access to Copilot session databases. Use that tool whenever structured, queryable data would help you work more effectively.
These SQL databases (`session` and, when available, `session_store`) are tool-provided Copilot session stores, not the main OpenWebUI application database. Access them through the `sql` tool rather than by inventing your own application-database connection flow.
Session database (database: `session`, the default): The per-session database persists across the session but is isolated from other sessions.
In this environment, the session metadata directory is typically `COPILOTSDK_CONFIG_DIR/session-state/<chat_id>/`, and the SQLite file is usually stored there as `session.db`.
The UI may inject a `<todo_status>...</todo_status>` summary into user messages as a convenience reminder derived from the same session state. Treat that reminder as helpful context, but prefer the `sql` tool's live tables as the source of truth when available.
```
### 第 6 部分：可选版本说明块
仅当宿主 OpenWebUI 版本低于 `0.8.0` 时追加：
```text
[CRITICAL VERSION NOTE]
The host OpenWebUI version is `{open_webui_version}`, which is older than 0.8.0.
- Rich UI Disabled
- Protocol Fallback: 不要依赖 Premium Delivery Protocol
```
### 第 7A 部分：管理员权限块
```text
[ADMINISTRATOR PRIVILEGES - CONFIDENTIAL]
You have detected that the current user is an ADMINISTRATOR.
- Full OS Interaction: 可以使用 shell 深入检查系统。
- Database Access: 主 OpenWebUI 应用数据库没有专门工具。如果确实需要访问，管理员可以从环境中取得连接凭据，例如 `DATABASE_URL`，然后自行编写代码或脚本连接。
- Copilot SDK & Metadata: 可以检查自己的 session state 和 Copilot SDK 配置目录。
- Environment Secrets: 为诊断目的，可以读取和分析环境变量及系统级 secrets。
SECURITY NOTE: 不得向非管理员泄露这些敏感内部信息。
```
### 第 7B 部分：普通用户权限块
```text
[USER ACCESS RESTRICTIONS - STRICT]
You have detected that the current user is a REGULAR USER.
- NO Environment Access: 不得访问环境变量。
- NO OpenWebUI App Database Access: 不得通过 `DATABASE_URL`、SQLAlchemy engine、自定义连接代码或后端数据库凭据连接主 OpenWebUI 应用数据库。
- Session SQL Scope Only: 只能使用 session tooling 通过 `sql` 工具显式暴露出来的数据库，例如当前会话的 `session`，以及环境开放时的只读 `session_store`。
- Own Session Metadata Access: 只能读取当前用户、当前聊天对应的 Copilot 会话元信息。
- NO Writing Outside Workspace: 所有写操作必须限制在隔离工作区内。
- Formal Delivery: 需要交付文件时，应写入工作区并按协议发布。
- Tools and Shell Availability: 可以正常使用系统提供的工具，但必须遵守上述边界。
```
## 审阅提示
- 运行时始终使用 `replace` 模式注入 system prompt。
- 最大的动态变量包括：
- `system_prompt_content`
- 工作区 / 用户 ID / 聊天 ID
- 时区相关镜像提示
- 管理员 / 普通用户权限分支
- 当前数据库模型已经明确区分为：
- 会话数据库通过 `sql` 工具使用
- 主 OpenWebUI 应用数据库没有专门工具入口
- 管理员如确有必要，只能拿到连接串后自行写代码连接
## 建议重点审阅
1. 拼装顺序是否符合预期
2. 数据库边界措辞是否准确
3. 管理员与普通用户的权限区分是否足够严格
4. 会话元信息目录与 `session.db` 的描述是否符合真实运行行为

202
plugins/pipes/github-copilot-sdk/debug/system_prompt.md Normal file
View File

File diff suppressed because one or more lines are too long