# refly-monorepo - Doramagic AI Context Pack

> 定位：安装前体验与判断资产。它帮助宿主 AI 有一个好的开始，但不代表已经安装、执行或验证目标项目。

## 充分原则

- **充分原则，不是压缩原则**：AI Context Pack 应该充分到让宿主 AI 在开工前理解项目价值、能力边界、使用入口、风险和证据来源；它可以分层组织，但不以最短摘要为目标。
- **压缩策略**：只压缩噪声和重复内容，不压缩会影响判断和开工质量的上下文。

## 给宿主 AI 的使用方式

你正在读取 Doramagic 为 refly-monorepo 编译的 AI Context Pack。请把它当作开工前上下文：帮助用户理解适合谁、能做什么、如何开始、哪些必须安装后验证、风险在哪里。不要声称你已经安装、运行或执行了目标项目。

## Claim 消费规则

- **事实来源**：Repo Evidence + Claim/Evidence Graph；Human Wiki 只提供显著性、术语和叙事结构。
- **事实最低状态**：`supported`
- `supported`：可以作为项目事实使用，但回答中必须引用 claim_id 和证据路径。
- `weak`：只能作为低置信度线索，必须要求用户继续核实。
- `inferred`：只能用于风险提示或待确认问题，不能包装成项目事实。
- `unverified`：不得作为事实使用，应明确说证据不足。
- `contradicted`：必须展示冲突来源，不得替用户强行选择一个版本。

## 它最适合谁

- **正在使用 Claude/Codex/Cursor/Gemini 等宿主 AI 的开发者**：README 或插件配置提到多个宿主 AI。 证据：`README.md` Claim：`clm_0003` supported 0.86
- **希望把专业流程带进宿主 AI 的用户**：仓库包含 Skill 文档。 证据：`packages/cli/skill/SKILL.md` Claim：`clm_0004` supported 0.86

## 它能做什么

- **AI Skill / Agent 指令资产库**（可做安装前预览）：项目包含可被宿主 AI 读取的 Skill 或 Agent 指令文件，可用于把专业流程带入 Claude、Codex、Cursor 等宿主。 证据：`packages/cli/skill/references/skill.md`, `packages/cli/skill/SKILL.md` Claim：`clm_0001` supported 0.86
- **命令行启动或安装流程**（需要安装后验证）：项目文档中存在可执行命令，真实使用需要在本地或宿主环境中运行这些命令。 证据：`README.md`, `packages/cli/README.md` Claim：`clm_0002` supported 0.86

## 怎么开始

- `curl -X POST https://your-refly-instance.com/api/v1/workflows/{WORKFLOW_ID}/execute \` 证据：`README.md` Claim：`clm_0005` supported 0.86
- `curl https://your-refly-instance.com/api/v1/executions/{execution_id} \` 证据：`README.md` Claim：`clm_0006` supported 0.86
- `npm install -g @powerformer/refly-cli` 证据：`README.md` Claim：`clm_0007` supported 0.86
- `npx skills add refly-ai/<skill-name>` 证据：`README.md` Claim：`clm_0008` supported 0.86
- `npm install -g @refly/cli` 证据：`packages/cli/README.md` Claim：`clm_0009` supported 0.86

## 继续前判断卡

- **当前建议**：仅建议沙盒试装
- **为什么**：项目存在安装命令、宿主配置或本地写入线索，不建议直接进入主力环境，应先在隔离环境试装。

### 30 秒判断

- **现在怎么做**：仅建议沙盒试装
- **最小安全下一步**：先跑 Prompt Preview；若仍要安装，只在隔离环境试装
- **先别相信**：真实输出质量不能在安装前相信。
- **继续会触碰**：命令执行、宿主 AI 配置、本地环境或项目文件

### 现在可以相信

- **适合人群线索：正在使用 Claude/Codex/Cursor/Gemini 等宿主 AI 的开发者**（supported）：有 supported claim 或项目证据支撑，但仍不等于真实安装效果。 证据：`README.md` Claim：`clm_0003` supported 0.86
- **适合人群线索：希望把专业流程带进宿主 AI 的用户**（supported）：有 supported claim 或项目证据支撑，但仍不等于真实安装效果。 证据：`packages/cli/skill/SKILL.md` Claim：`clm_0004` supported 0.86
- **能力存在：AI Skill / Agent 指令资产库**（supported）：可以相信项目包含这类能力线索；是否适合你的具体任务仍要试用或安装后验证。 证据：`packages/cli/skill/references/skill.md`, `packages/cli/skill/SKILL.md` Claim：`clm_0001` supported 0.86
- **能力存在：命令行启动或安装流程**（supported）：可以相信项目包含这类能力线索；是否适合你的具体任务仍要试用或安装后验证。 证据：`README.md`, `packages/cli/README.md` Claim：`clm_0002` supported 0.86
- **存在 Quick Start / 安装命令线索**（supported）：可以相信项目文档出现过启动或安装入口；不要因此直接在主力环境运行。 证据：`README.md` Claim：`clm_0005` supported 0.86

### 现在还不能相信

- **真实输出质量不能在安装前相信。**（unverified）：Prompt Preview 只能展示引导方式，不能证明真实项目中的结果质量。
- **宿主 AI 版本兼容性不能在安装前相信。**（unverified）：Claude、Cursor、Codex、Gemini 等宿主加载规则和版本差异必须在真实环境验证。
- **不会污染现有宿主 AI 行为，不能直接相信。**（inferred）：Skill、plugin、AGENTS/CLAUDE/GEMINI 指令可能改变宿主 AI 的默认行为。 证据：`packages/cli/skill/SKILL.md`, `packages/cli/skill/references/skill.md`
- **可安全回滚不能默认相信。**（unverified）：除非项目明确提供卸载和恢复说明，否则必须先在隔离环境验证。
- **真实安装后是否与用户当前宿主 AI 版本兼容？**（unverified）：兼容性只能通过实际宿主环境验证。
- **项目输出质量是否满足用户具体任务？**（unverified）：安装前预览只能展示流程和边界，不能替代真实评测。
- **安装命令是否需要网络、权限或全局写入？**（unverified）：这影响企业环境和个人环境的安装风险。 证据：`README.md`

### 继续会触碰什么

- **命令执行**：包管理器、网络下载、本地插件目录、项目配置或用户主目录。 原因：运行第一条命令就可能产生环境改动；必须先判断是否值得跑。 证据：`README.md`, `packages/cli/README.md`
- **宿主 AI 配置**：Claude/Codex/Cursor/Gemini/OpenCode 等宿主的 plugin、Skill 或规则加载配置。 原因：宿主配置会改变 AI 后续工作方式，可能和用户已有规则冲突。 证据：`packages/cli/skill/SKILL.md`, `packages/cli/skill/references/skill.md`
- **本地环境或项目文件**：安装结果、插件缓存、项目配置或本地依赖目录。 原因：安装前无法证明写入范围和回滚方式，需要隔离验证。 证据：`README.md`, `packages/cli/README.md`
- **宿主 AI 上下文**：AI Context Pack、Prompt Preview、Skill 路由、风险规则和项目事实。 原因：导入上下文会影响宿主 AI 后续判断，必须避免把未验证项包装成事实。

### 最小安全下一步

- **先跑 Prompt Preview**：用安装前交互式试用判断工作方式是否匹配，不需要授权或改环境。（适用：任何项目都适用，尤其是输出质量未知时。）
- **只在隔离目录或测试账号试装**：避免安装命令污染主力宿主 AI、真实项目或用户主目录。（适用：存在命令执行、插件配置或本地写入线索时。）
- **先备份宿主 AI 配置**：Skill、plugin、规则文件可能改变 Claude/Cursor/Codex 的默认行为。（适用：存在插件 manifest、Skill 或宿主规则入口时。）
- **安装后只验证一个最小任务**：先验证加载、兼容、输出质量和回滚，再决定是否深用。（适用：准备从试用进入真实工作流时。）

### 退出方式

- **保留安装前状态**：记录原始宿主配置和项目状态，后续才能判断是否可恢复。
- **准备移除宿主 plugin / Skill / 规则入口**：如果试装后行为异常，可以把宿主 AI 恢复到试装前状态。
- **记录安装命令和写入路径**：没有明确卸载说明时，至少要知道哪些目录或配置需要手动清理。
- **如果没有回滚路径，不进入主力环境**：不可回滚是继续前阻断项，不应靠信任或运气继续。

## 哪些只能预览

- 解释项目适合谁和能做什么
- 基于项目文档演示典型对话流程
- 帮助用户判断是否值得安装或继续研究

## 哪些必须安装后验证

- 真实安装 Skill、插件或 CLI
- 执行脚本、修改本地文件或访问外部服务
- 验证真实输出质量、性能和兼容性

## 边界与风险判断卡

- **把安装前预览误认为真实运行**：用户可能高估项目已经完成的配置、权限和兼容性验证。 处理方式：明确区分 prompt_preview_can_do 与 runtime_required。 Claim：`clm_0010` inferred 0.45
- **命令执行会修改本地环境**：安装命令可能写入用户主目录、宿主插件目录或项目配置。 处理方式：先在隔离环境或测试账号中运行。 证据：`README.md`, `packages/cli/README.md` Claim：`clm_0011` supported 0.86
- **待确认**：真实安装后是否与用户当前宿主 AI 版本兼容？。原因：兼容性只能通过实际宿主环境验证。
- **待确认**：项目输出质量是否满足用户具体任务？。原因：安装前预览只能展示流程和边界，不能替代真实评测。
- **待确认**：安装命令是否需要网络、权限或全局写入？。原因：这影响企业环境和个人环境的安装风险。

## 开工前工作上下文

### 加载顺序

- 先读取 how_to_use.host_ai_instruction，建立安装前判断资产的边界。
- 读取 claim_graph_summary，确认事实来自 Claim/Evidence Graph，而不是 Human Wiki 叙事。
- 再读取 intended_users、capabilities 和 quick_start_candidates，判断用户是否匹配。
- 需要执行具体任务时，优先查 role_skill_index，再查 evidence_index。
- 遇到真实安装、文件修改、网络访问、性能或兼容性问题时，转入 risk_card 和 boundaries.runtime_required。

### 任务路由

- **AI Skill / Agent 指令资产库**：先基于 role_skill_index / evidence_index 帮用户挑选可用角色、Skill 或工作流。 边界：可做安装前 Prompt 体验。 证据：`packages/cli/skill/references/skill.md`, `packages/cli/skill/SKILL.md` Claim：`clm_0001` supported 0.86
- **命令行启动或安装流程**：先说明这是安装后验证能力，再给出安装前检查清单。 边界：必须真实安装或运行后验证。 证据：`README.md`, `packages/cli/README.md` Claim：`clm_0002` supported 0.86

### 上下文规模

- 文件总数：1940
- 重要文件覆盖：40/1940
- 证据索引条目：80
- 角色 / Skill 条目：2

### 证据不足时的处理

- **missing_evidence**：说明证据不足，要求用户提供目标文件、README 段落或安装后验证记录；不要补全事实。
- **out_of_scope_request**：说明该任务超出当前 AI Context Pack 证据范围，并建议用户先查看 Human Manual 或真实安装后验证。
- **runtime_request**：给出安装前检查清单和命令来源，但不要替用户执行命令或声称已执行。
- **source_conflict**：同时展示冲突来源，标记为待核实，不要强行选择一个版本。

## Prompt Recipes

### 适配判断

- 目标：判断这个项目是否适合用户当前任务。
- 预期输出：适配结论、关键理由、证据引用、安装前可预览内容、必须安装后验证内容、下一步建议。

```text
请基于 refly-monorepo 的 AI Context Pack，先问我 3 个必要问题，然后判断它是否适合我的任务。回答必须包含：适合谁、能做什么、不能做什么、是否值得安装、证据来自哪里。所有项目事实必须引用 evidence_refs、source_paths 或 claim_id。
```

### 安装前体验

- 目标：让用户在安装前感受核心工作流，同时避免把预览包装成真实能力或营销承诺。
- 预期输出：一段带边界标签的体验剧本、安装后验证清单和谨慎建议；不含真实运行承诺或强营销表述。

```text
请把 refly-monorepo 当作安装前体验资产，而不是已安装工具或真实运行环境。

请严格输出四段：
1. 先问我 3 个必要问题。
2. 给出一段“体验剧本”：用 [安装前可预览]、[必须安装后验证]、[证据不足] 三种标签展示它可能如何引导工作流。
3. 给出安装后验证清单：列出哪些能力只有真实安装、真实宿主加载、真实项目运行后才能确认。
4. 给出谨慎建议：只能说“值得继续研究/试装”“先补充信息后再判断”或“不建议继续”，不得替项目背书。

硬性边界：
- 不要声称已经安装、运行、执行测试、修改文件或产生真实结果。
- 不要写“自动适配”“确保通过”“完美适配”“强烈建议安装”等承诺性表达。
- 如果描述安装后的工作方式，必须使用“如果安装成功且宿主正确加载 Skill，它可能会……”这种条件句。
- 体验剧本只能写成“示例台词/假设流程”：使用“可能会询问/可能会建议/可能会展示”，不要写“已写入、已生成、已通过、正在运行、正在生成”。
- Prompt Preview 不负责给安装命令；如用户准备试装，只能提示先阅读 Quick Start 和 Risk Card，并在隔离环境验证。
- 所有项目事实必须来自 supported claim、evidence_refs 或 source_paths；inferred/unverified 只能作风险或待确认项。

```

### 角色 / Skill 选择

- 目标：从项目里的角色或 Skill 中挑选最匹配的资产。
- 预期输出：候选角色或 Skill 列表，每项包含适用场景、证据路径、风险边界和是否需要安装后验证。

```text
请读取 role_skill_index，根据我的目标任务推荐 3-5 个最相关的角色或 Skill。每个推荐都要说明适用场景、可能输出、风险边界和 evidence_refs。
```

### 风险预检

- 目标：安装或引入前识别环境、权限、规则冲突和质量风险。
- 预期输出：环境、权限、依赖、许可、宿主冲突、质量风险和未知项的检查清单。

```text
请基于 risk_card、boundaries 和 quick_start_candidates，给我一份安装前风险预检清单。不要替我执行命令，只说明我应该检查什么、为什么检查、失败会有什么影响。
```

### 宿主 AI 开工指令

- 目标：把项目上下文转成一次对话开始前的宿主 AI 指令。
- 预期输出：一段边界明确、证据引用明确、适合复制给宿主 AI 的开工前指令。

```text
请基于 refly-monorepo 的 AI Context Pack，生成一段我可以粘贴给宿主 AI 的开工前指令。这段指令必须遵守 not_runtime=true，不能声称项目已经安装、运行或产生真实结果。
```


## 角色 / Skill 索引

- 共索引 2 个角色 / Skill / 项目文档条目。

- **refly**（skill）：Base skill for Refly ecosystem: creates, discovers, and runs domain-specific skills bound to workflows. Routes user intent to matching domain skills via symlinks, delegates execution to Refly backend. Use when user asks to: create skills, run workflows, automate multi-step tasks, or manage pipelines. Triggers: refly, skill, workflow, run skill, create skill, automation, pipeline. Requires: @refly/cli installed and a… 激活提示：当用户任务与“refly”描述的流程高度相关时，先用它做安装前体验，再决定是否安装。 证据：`packages/cli/skill/SKILL.md`
- **Skill Reference**（skill）：bash List skill packages refly skill list options --status Filter: draft, published, deprecated --mine Show only my packages --tags Filter by tags comma-separated --page Page number default: 1 --page-size Page size default: 20 激活提示：当用户任务与“Skill Reference”描述的流程高度相关时，先用它做安装前体验，再决定是否安装。 证据：`packages/cli/skill/references/skill.md`

## 证据索引

- 共索引 80 条证据。

- **Refly.AI Documentation**（documentation）：This repository contains the official documentation for Refly.AI https://refly.ai , an AI-native content creation platform built on the concept of "Free Canvas". The documentation site is built using VitePress https://vitepress.dev/ , a static site generator powered by Vue. 证据：`docs/README.md`
- **Refly — Agent Skills Builder Powered by Vibe Workflow**（documentation）：Refly — Agent Skills Builder Powered by Vibe Workflow English · 中文 证据：`README.md`
- **Refly API**（documentation）：Visit minio console on http://localhost:9001, with username and password specified in docker-compose.yml. 证据：`apps/api/README.md`
- **Vector Search Service**（documentation）：A flexible, backend-agnostic vector search service that supports multiple vector database backends including Qdrant and LanceDB. 证据：`apps/api/src/modules/common/vector-search/README.md`
- **Enhanced VectorFilter System**（documentation）：This document describes the enhanced VectorFilter system that provides compatibility with both Qdrant and LanceDB vector search backends. 证据：`apps/api/src/modules/common/vector-search/backend/README.md`
- **Trace Stack - Local Observability Infrastructure**（documentation）：Trace Stack - Local Observability Infrastructure 证据：`deploy/docker/trace/README.md`
- **React + TypeScript + Vite**（documentation）：This template provides a minimal setup to get React working in Vite with HMR and some ESLint rules. 证据：`packages/ai-workspace-common/README.md`
- **@refly/cli**（documentation）：Refly CLI - Workflow orchestration for Claude Code 证据：`packages/cli/README.md`
- **@refly/layout**（documentation）：A core layout component package for Refly AI Workspace, providing a complete page layout solution. This package adopts a slot-based rendering mode, supporting flexible layout configuration and context management. 证据：`packages/layout/README.md`
- **@refly/utils**（documentation）：Refly Code Utils - A collection of utility functions for the Refly project. 证据：`packages/utils/README.md`
- **Refly CLI One-Click Deployment**（documentation）：This directory contains scripts for quickly deploying and setting up Refly CLI for local development. 证据：`scripts/cli-deploy/README.md`
- **PTC Debug Scripts**（documentation）：Python scripts for inspecting PTC Programmatic Tool Calling agent runs in the Refly database. 证据：`specs/current/ptc/scripts/README.md`
- **Package**（package_manifest）：{ "name": "refly-docs", "private": true, "type": "module", "scripts": { "dev": "vitepress dev", "build": "vitepress build", "preview": "vitepress preview", "convert-images": "node scripts/convert-webp.js" }, "devDependencies": { "@biomejs/biome": "^1.9.0", "sharp": "^0.33.5", "vitepress": "^1.5.0" }, "packageManager": "pnpm@10.30.2" } 证据：`docs/package.json`
- **Package**（package_manifest）：{ "name": "refly-monorepo", "description": "Refly AI Monorepo", "version": "0.8.0", "private": true, "engines": { "pnpm": " =10", "node": " =24.0.0" }, "repository": { "type": "git", "url": "git+https://github.com/refly-ai/refly.git" }, "scripts": { "commit": "cz", "dev": "turbo run dev", "start": "turbo run start", "build": "turbo run build", "build:api": "turbo run build --filter=@refly/api", "build:api:fast": "turbo run build:fast --filter=@refly/api", "build:web": "turbo run build --filter=@refly/web", "copy-package-dist": "node scripts/copy-package-dist.js", "copy-env": "turbo run copy-env", "copy-env:develop": "turbo run copy-env:develop", "codegen": "turbo run codegen", "generate:doc… 证据：`package.json`
- **CONTRIBUTING**（documentation）：So you're looking to contribute to Refly - that's awesome, we can't wait to see what you do. Refly is the first open-source platform for building stable, atomic, and versioned agent skills. As an AI-native creation engine, we provide an intuitive free-form canvas interface to codify business logic into structured agent skills that any agent can invoke with 100% reliability. Any help from the community counts, truly. 证据：`CONTRIBUTING.md`
- **Package**（package_manifest）：{ "name": "@refly/api", "version": "0.8.0", "description": "API server for Refly", "author": "", "private": true, "license": "ReflyAI OpenSource License", "repository": { "type": "git", "url": "git+https://github.com/refly-ai/refly.git" }, "main": "src/index.ts", "types": "src/index.ts", "files": "dist/", "prisma/", "seed-data/", "scripts/", ".env.development", ".env.example", ".node-options", ".swcrc" , "scripts": { "copy-env": "ncp .env.example .env", "copy-env:develop": "ncp .env.development .env", "build": "prisma generate && node scripts/build.js --verbose && ncp prisma/ dist/prisma/", "build:fast": "prisma generate && node scripts/build.js --fast && ncp prisma/ dist/prisma/", "prisma:… 证据：`apps/api/package.json`
- **Package**（package_manifest）：{ "name": "@refly/web", "version": "1.0.0", "private": true, "type": "module", "scripts": { "build": "rsbuild build && npm run generate:sitemap", "build:analyze": "ANALYZE=true rsbuild build", "dev": "rsbuild dev", "preview": "rsbuild preview", "update:tokens": "node token/generate-css.cjs", "copy-env": "ncp .env.example .env", "copy-env:develop": "ncp .env.example .env", "generate:sitemap": "node scripts/generate-sitemap.js", "analyze:chunks": "node scripts/analyze-chunks.cjs" }, "dependencies": { "@ant-design/cssinjs": "^1.23.0", "@refly/stores": "workspace: ", "@refly/telemetry-web": "workspace: ", "@refly/ui-kit": "workspace: ", "@refly/utils": "workspace: ", "@refly/web-core": "workspa… 证据：`apps/web/package.json`
- **Package**（package_manifest）：{ "name": "@refly/agent-tools", "version": "0.1.0", "description": "Agent tools used by Refly", "main": "src/index.ts", "types": "src/index.ts", "scripts": { "clean": "rimraf dist", "test": "vitest run" }, "keywords": , "author": "", "license": "ISC", "dependencies": { "@langchain/core": "1.1.4", "@notionhq/client": "^5.1.0", "@refly/common-types": "workspace: ", "@refly/openapi-schema": "workspace: ", "@refly/canvas-common": "workspace: ", "@refly/utils": "workspace: ", "apify-client": "^2.19.0", "zod": "^3.25.76" }, "devDependencies": { "@types/node": "^20.19.0" } } 证据：`packages/agent-tools/package.json`
- **Package**（package_manifest）：{ "name": "@refly/ai-workspace-common", "private": true, "version": "0.8.0", "description": "Common components for Refly AI Workspace", "type": "module", "main": "src/index.ts", "types": "src/index.ts", "sideEffects": " .css", " .scss", " .less", " .sass", " / .css", " / .scss", " / .less", " / .sass" , "exports": { ".": "./src/index.ts", "./components": "./src/components/index.ts", "./components/ ": "./src/components/ /index.ts", "./components/sider/ ": "./src/components/sider/ .tsx", "./components/common/ ": "./src/components/common/ .tsx", "./components/settings": "./src/components/settings/index.tsx", "./components/settings/ ": "./src/components/settings/ .tsx", "./components/canvas": "… 证据：`packages/ai-workspace-common/package.json`
- **Package**（package_manifest）：{ "name": "@refly/canvas-common", "version": "0.7.0", "description": "Common canvas utilitized shared by UI and server", "main": "src/index.ts", "types": "src/index.ts", "scripts": { "clean": "rimraf dist", "test": "vitest run" }, "keywords": , "author": "", "license": "ISC", "dependencies": { "@dagrejs/dagre": "^1.1.4", "@refly/common-types": "workspace: ", "@refly/openapi-schema": "workspace: ", "@refly/utils": "workspace: ", "@xyflow/react": "^12.3.5", "zod": "^3.25.76" }, "devDependencies": { "@types/react": "^18.2.56" } } 证据：`packages/canvas-common/package.json`
- **Package**（package_manifest）：{ "name": "@powerformer/refly-cli", "version": "0.1.26", "description": "Refly CLI - Command-line interface for Refly workflow orchestration", "bin": { "refly": "./dist/bin/refly.js" }, "main": "dist/index.js", "types": "dist/index.d.ts", "scripts": { "build": "tsup", "build:dev": "REFLY BUILD ENV=dev tsup", "build:test": "REFLY BUILD ENV=test tsup", "build:staging": "REFLY BUILD ENV=staging tsup", "build:prod": "REFLY BUILD ENV=production tsup", "dev": "tsup --watch", "clean": "rimraf dist", "typecheck": "tsc --noEmit", "test": "vitest run", "prepublishOnly": "pnpm run build" }, "keywords": "refly", "cli", "workflow", "automation" , "author": "Refly AI", "license": "MIT", "dependencies": {… 证据：`packages/cli/package.json`
- **Package**（package_manifest）：{ "name": "@refly/common-types", "version": "0.8.0", "description": "Refly Common Types", "main": "src/index.ts", "types": "src/index.ts", "scripts": { "test": "echo \"Error: no test specified\" && exit 1" }, "keywords": , "author": "", "license": "ISC", "dependencies": { "@refly/openapi-schema": "workspace: " }, "devDependencies": { "react-scripts": "^5.0.1" } } 证据：`packages/common-types/package.json`
- **Package**（package_manifest）：{ "name": "@refly/errors", "version": "0.8.0", "description": "Refly Predefined Errors", "main": "src/index.ts", "types": "src/index.ts", "scripts": { "clean": "rimraf dist", "test": "echo \"Error: no test specified\" && exit 1" }, "keywords": , "author": "", "license": "ISC", "dependencies": {}, "devDependencies": {} } 证据：`packages/errors/package.json`
- **Package**（package_manifest）：{ "name": "@refly/i18n", "version": "0.8.0", "description": "Refly product translations", "author": "", "license": "ISC", "exports": { "./en-US": { "import": "./src/en-US/index.ts", "require": "./src/en-US/index.ts", "types": "./src/en-US/index.ts" }, "./zh-Hans": { "import": "./src/zh-Hans/index.ts", "require": "./src/zh-Hans/index.ts", "types": "./src/zh-Hans/index.ts" } } } 证据：`packages/i18n/package.json`
- **Package**（package_manifest）：{ "name": "@refly/layout", "private": true, "version": "0.0.1", "description": "Layout for Refly AI Workspace", "type": "module", "main": "src/index.ts", "types": "src/index.ts", "dependencies": { "react": "^18.2.0", "react-dom": "^18.2.0", "react-router-dom": "^6.22.1", "antd": "^5.20.0", "clsx": "^2.1.0", "@sentry/react": "^9.1.0" }, "devDependencies": { "@types/react": "^18.2.56", "@types/react-dom": "^18.2.19", "@refly/tsconfig": "workspace: " } } 证据：`packages/layout/package.json`
- **Package**（package_manifest）：{ "name": "@refly/observability", "version": "0.1.0", "description": "Observability package for Refly with Langfuse integration", "main": "src/index.ts", "types": "src/index.ts", "scripts": { "build": "tsc", "dev": "tsc --watch", "clean": "rm -rf dist" }, "dependencies": { "@langfuse/langchain": "^4.4.2", "@nestjs/common": "~10.3.9", "@opentelemetry/api": "^1.8.0", "@paralleldrive/cuid2": "^2.2.2", "langfuse": "^3.30.0" }, "peerDependencies": { "@langchain/core": " =0.3.0" } } 证据：`packages/observability/package.json`
- **Package**（package_manifest）：{ "name": "@refly/openapi-schema", "version": "0.8.0", "description": "Refly OpenAPI Schema", "main": "src/index.ts", "types": "src/index.ts", "scripts": { "dev": "nodemon", "codegen": "openapi-ts && tsc --build --verbose", "generate:docs": "tsx scripts/generate-docs.ts", "clean": "rimraf dist && rimraf tsconfig.tsbuildinfo", "test": "echo \"Error: no test specified\" && exit 1", "postinstall": "tsc --build --verbose" }, "devDependencies": { "@hey-api/openapi-ts": "0.53.8", "tsx": "^4.19.4", "yaml": "^2.6.1" }, "keywords": , "author": "", "license": "ISC", "dependencies": { "@hey-api/client-fetch": "0.4.0" } } 证据：`packages/openapi-schema/package.json`
- **Package**（package_manifest）：{ "name": "@refly/providers", "version": "0.8.0", "description": "Implementation of Refly providers", "main": "src/index.ts", "types": "src/index.ts", "scripts": { "clean": "rimraf dist && rimraf tsconfig.tsbuildinfo", "test": "echo \"Error: no test specified\" && exit 1" }, "keywords": , "author": "", "license": "ISC", "dependencies": { "@langchain/aws": "1.1.0", "@langchain/community": "0.3.50", "@langchain/core": "1.1.4", "@langchain/ollama": "^0.2.0", "@langchain/openai": "0.6.7", "@langchain/google-vertexai": "^2.1.2", "@refly/errors": "workspace: ", "@refly/openapi-schema": "workspace: ", "@refly/utils": "workspace: ", "langfuse": "^3.6.0" } } 证据：`packages/providers/package.json`
- **Package**（package_manifest）：{ "name": "@refly/sandbox-agent", "version": "1.0.0", "description": "TypeScript implementation of code interpreter with LangChain", "main": "dist/src/index.js", "types": "dist/src/index.d.ts", "scripts": { "build": "tsc", "dev": "tsx watch src/index.ts", "start": "node dist/index.js", "test": "jest", "lint": "eslint . --ext .ts", "format": "prettier --write \" / .ts\"", "run-example": "tsx ./examples/example.ts" }, "keywords": "code-interpreter", "langchain", "typescript", "ai", "llm" , "author": "", "license": "MIT", "dependencies": { "@langchain/anthropic": "0.3.33", "@langchain/core": "1.1.4", "@langchain/openai": "0.6.7", "axios": "^1.7.0", "dotenv": "^16.4.0", "langchain": "0.3.30", "… 证据：`packages/sandbox-agent/package.json`
- **Package**（package_manifest）：{ "name": "@refly/skill-template", "version": "0.8.0", "description": "Refly Skill Template", "main": "src/index.ts", "types": "src/index.ts", "scripts": { "clean": "rimraf dist && rimraf tsconfig.tsbuildinfo", "test": "echo \"Error: no test specified\" && exit 1" }, "keywords": , "author": "", "license": "ISC", "dependencies": { "@dmitryrechkin/json-schema-to-zod": "^1.0.1", "@langchain/core": "1.1.4", "@langchain/langgraph": "0.2.45", "@langchain/openai": "0.6.7", "@modelcontextprotocol/sdk": "^1.10.1", "@refly/agent-tools": "workspace: ", "@refly/openapi-schema": "workspace: ", "@refly/providers": "workspace: ", "@refly/utils": "workspace: ", "debug": "^4.3.5", "eventsource": "^3.0.6", "… 证据：`packages/skill-template/package.json`
- **Package**（package_manifest）：{ "name": "@refly/stores", "private": true, "version": "0.0.1", "description": "Stores for Refly AI Workspace", "type": "module", "main": "src/index.ts", "types": "src/index.ts", "dependencies": { "@refly/common-types": "workspace: ", "@refly/openapi-schema": "workspace: ", "@refly/canvas-common": "workspace: ", "zustand": "~4.5.1", "immer": "^10.1.1", "react": "^18.2.0", "@xyflow/react": "^12.3.5" }, "devDependencies": { "@refly/tsconfig": "workspace: ", "@types/react": "^18.2.66", "typescript": "^5.4.5" } } 证据：`packages/stores/package.json`
- **Package**（package_manifest）：{ "name": "@refly/telemetry-node", "private": true, "version": "0.0.1", "description": "Telemetry utilities for Refly.AI Node.js App", "main": "src/index.ts", "types": "src/index.ts", "dependencies": { "@statsig/statsig-node-core": "^0.6.1" }, "devDependencies": { "@refly/tsconfig": "workspace: " } } 证据：`packages/telemetry-node/package.json`
- **Package**（package_manifest）：{ "name": "@refly/telemetry-web", "private": true, "version": "0.0.1", "description": "Telemetry utilities for Refly.AI Web App", "type": "module", "main": "src/index.ts", "types": "src/index.ts", "dependencies": { "@refly/utils": "workspace: ", "@statsig/js-client": "^3.19.0", "@statsig/session-replay": "^3.19.0", "@statsig/web-analytics": "^3.19.0", "js-cookie": "^3.0.5" }, "devDependencies": { "@refly/tsconfig": "workspace: ", "@types/js-cookie": "^3.0.6" } } 证据：`packages/telemetry-web/package.json`
- **Package**（package_manifest）：{ "name": "@refly/tsconfig", "version": "0.0.0", "private": true, "license": "MIT", "publishConfig": { "access": "public" }, "devDependencies": {} } 证据：`packages/tsconfig/package.json`
- **Package**（package_manifest）：{ "name": "@refly/ui-kit", "private": true, "version": "0.0.1", "description": "UI Kit for Refly AI Workspace", "type": "module", "main": "src/index.ts", "types": "src/index.ts", "dependencies": { "@ant-design/cssinjs": "^1.23.0", "@ant-design/icons": "^5.5.2", "@refly/common-types": "workspace: ", "@refly/utils": "workspace: ", "antd": "^5.21.5", "clsx": "^2.1.0", "react": "^18.2.0", "react-dom": "^18.2.0", "react-i18next": "^15.6.0", "react-use": "^17.5.0", "zustand": "~4.5.1" }, "devDependencies": { "@refly/tsconfig": "workspace: ", "@types/react": "^18.2.56", "@types/react-dom": "^18.2.19" } } 证据：`packages/ui-kit/package.json`
- **Package**（package_manifest）：{ "name": "@refly/utils", "version": "0.8.0", "description": "Refly Code Utils", "main": "src/index.ts", "types": "src/index.ts", "exports": { ".": "./src/index.ts", "./token": "./src/token.ts" }, "typesVersions": { " ": { "token": "src/token.ts" } }, "scripts": { "clean": "rimraf dist && rimraf tsconfig.tsbuildinfo", "test": "vitest run", "test:run": "vitest run", "test:coverage": "vitest run --coverage" }, "keywords": , "author": "", "license": "ISC", "dependencies": { "@paralleldrive/cuid2": "^2.2.2", "@refly/common-types": "workspace: ", "@refly/openapi-schema": "workspace: ", "@tiptap/pm": "2.7.4", "cheerio": "~1.0.0", "clsx": "^2.1.0", "deepmerge": "^4.3.1", "linkify-it": "^5.0.0", "m… 证据：`packages/utils/package.json`
- **Package**（package_manifest）：{ "name": "@refly/web-core", "private": true, "version": "0.0.1", "description": "Web Core for Refly AI Workspace", "type": "module", "main": "src/index.ts", "types": "src/index.ts", "sideEffects": " .css", " .scss", " .less", " .sass", " / .css", " / .scss", " / .less", " / .sass" , "dependencies": { "@ant-design/icons": "^5.5.2", "@refly/canvas-common": "workspace: ", "@rjsf/validator-ajv8": "^6.1.1", "@rjsf/utils": "^6.1.1", "@refly/common-types": "workspace: ", "@refly/errors": "workspace: ", "@refly/i18n": "workspace: ", "@refly/openapi-schema": "workspace: ", "@refly/stores": "workspace: ", "@refly/telemetry-web": "workspace: ", "@refly/ui-kit": "workspace: ", "@refly/utils": "workspa… 证据：`packages/web-core/package.json`
- **Refly**（skill_instruction）：1. CLI only - Use refly , never call API directly. 2. Trust JSON - Only trust CLI JSON ok , payload , error , hint . 3. No fabricated IDs - Never invent workflow/run/node IDs. 4. No tokens - Never print or request auth tokens. 5. Stop on error - If ok=false , stop and show hint . 证据：`packages/cli/skill/SKILL.md`
- **Skill Reference**（skill_instruction）：bash List skill packages refly skill list options --status Filter: draft, published, deprecated --mine Show only my packages --tags Filter by tags comma-separated --page Page number default: 1 --page-size Page size default: 20 证据：`packages/cli/skill/references/skill.md`
- **Open Source License**（source_file）：Refly is licensed under the Apache License 2.0, with the following additional conditions: 证据：`LICENSE`
- **Refly — The First Open-Source Agent Skills Builder Powered by Vibe Workflow**（documentation）：! Refly Cover /images/refly-cover.webp 证据：`docs/index.md`
- **FAQ: Accessing via IP address**（documentation）：If you are deploying Refly on a cloud server and accessing it via http:// :5700 , you might encounter issues with redirection after login. This is caused by mismatched Cookie domain configurations. 证据：`docs/community-version/self-deploy/faq-ip-access.md`
- **Self Deploy**（documentation）：Hardware Requirements { hardware-requirements} 证据：`docs/community-version/self-deploy/index.md`
- **Refly AI Privacy Policy**（documentation）：Effective Date: September 26, 2025 Last Updated: October 16, 2025 Updated for Google Workspace Restricted Scopes Review 证据：`docs/en/about/privacy-policy.md`
- **Terms of Service**（documentation）：Please read these Terms of Service "Terms" carefully before using the Refly AI Content Creation Engine the "Service" operated by ReflyAI "us", "we", "our", or "Company" . 证据：`docs/en/about/terms-of-service.md`
- **v0.1.1 Release Notes**（documentation）：- Canvas Management in Sidebar : The sidebar now supports the deletion of canvases and can expand to display up to 10 canvases. It also includes hover functionality to display list element menus. - Node Connection Management : Default node connections can be hidden, with connections still visible when hovering over a node. Users can toggle node connections on or off to reduce clutter on the canvas. - Canvas Update Synchronization : The canvas now displays update synchronization status, reducing user concerns about unclear data saving. - Enhanced Text Import : The limit for plain text copy and paste import has been increased from 6,000 to 100,000 characters, supporting the import of larger t… 证据：`docs/en/changelog/v0.1.1.md`
- **v0.1.2 Release Notes**（documentation）：- Supports deleting canvases from the sidebar and expanding to display up to 10 canvases, with hover display of list element menus. - Supports default hiding of node connections, with connections still visible when hovering over nodes, and toggleable node connections to reduce canvas clutter. - Supports displaying the update synchronization status of canvases to alleviate user concerns about data saving. - Supports expanding the import of plain text from 6,000 to 100,000 characters, enabling the import of larger text content. 证据：`docs/en/changelog/v0.1.2.md`
- **🚀 Refly 0.10.0 Release Notes**（documentation）：A milestone update focused on seamless creativity, intelligent workflows, and uninterrupted creation. 证据：`docs/en/changelog/v0.10.0.md`
- **v0.2.0 Release Notes**（documentation）：Refly is about to release a new major version v0.2.0, which supports 8+ significant new capabilities. It fully supports AI + canvas for a more intuitive and easy-to-understand operation experience, and greatly optimizes the canvas performance, aiming to match the usage experience of Native/local Apps. Here are some introductions to the core capabilities: 证据：`docs/en/changelog/v0.2.0.md`
- **v0.2.1 Release Notes**（documentation）：Refly has released 5+ new features in version 0.2.1, optimized 10+ core key issues, and resolved 7+ basic problems/Bugs. The core focus of this release is: the official launch of tiered paid subscription features Free/Pro/Max , with a 2-month gift for the first year and an additional 50% discount 🔥, unlimited use of Claude 3.5 Sonnet/GPT-4o for just $8.3 per month, time is limited, so those who need it can hurry up and subscribe 🐛; at the same time, the AI interaction capabilities of Memo nodes have been significantly enhanced, multiple user experiences have been optimized such as multi-select nodes, canvas renaming, etc. , and key issues such as login status, network connection, and white… 证据：`docs/en/changelog/v0.2.1.md`
- **v0.2.2 Release Notes**（documentation）：Refly has introduced several important updates in version 0.2.2, including product pricing, documentation experience, and core functionality optimizations . 证据：`docs/en/changelog/v0.2.2.md`
- **v0.2.2 Release Notes**（documentation）：🌟 Completely upgraded product onboarding experience, optimized pricing plans, and provided more intuitive knowledge base display, while fixing multiple core usage issues to make the product simpler and more stable! 证据：`docs/en/changelog/v0.2.3.md`
- **v0.2.4 Release Notes**（documentation）：🌟 Introducing the powerful DeepSeek R1 inference model, enhancing knowledge Q&A, AI deep search, and document generation capabilities. Special offer: Subscribe now to lock in permanent discount pricing! 证据：`docs/en/changelog/v0.2.4.md`
- **v0.3.0 Changelog**（documentation）：🎉 Major Refly update! Comprehensive upgrades include enhanced knowledge base file processing supporting 7+ mainstream formats , AI multimodal interaction supporting multiple image inputs , new DeepSeek R1 chain-of-thought visualization, and improved canvas editing with undo/redo . Experience smoother and more efficient knowledge management and content creation! 证据：`docs/en/changelog/v0.3.0.md`
- **v0.4.0 Release Notes**（documentation）：::: warning ⚠️ Important Notice: Refly Price Adjustment Coming Soon! Buy Now for Better Value! 证据：`docs/en/changelog/v0.4.0.md`
- **v0.4.1 Release Notes**（documentation）：🚀 Experience the power of next-generation AI creation with Refly v0.4.1! This game-changing update revolutionizes how you interact with AI through: 证据：`docs/en/changelog/v0.4.1.md`
- **v0.4.2 Release Notes**（documentation）：🚀 Refly v0.4.2 has arrived with major feature upgrades and experience improvements: 证据：`docs/en/changelog/v0.4.2.md`
- **v0.5.0 Release Notes**（documentation）：Refly Major Update: Added 2+ open source contributors, 10+ practical templates, comprehensive upgrades to knowledge base partition management, linear conversations, mind maps, and document outline features, while optimizing canvas performance to support dozens of nodes with smooth operation, creating a more powerful AI-native creation platform! 证据：`docs/en/changelog/v0.5.0.md`
- **v0.6.0 Release Notes**（documentation）：Refly Major Update: Added custom model configuration, one-click cloud deployment, redesigned homepage, presentation functionality, batch image processing and document export features, while optimizing performance and user experience to create a more efficient and stable AI-native creation platform! 证据：`docs/en/changelog/v0.6.0.md`
- **v0.7.0 Release Notes**（documentation）：We're thrilled to announce the official release of Refly v0.7.0, marking an exciting new chapter for our platform! 🎉 证据：`docs/en/changelog/v0.7.0.md`
- 其余 20 条证据见 `AI_CONTEXT_PACK.json` 或 `EVIDENCE_INDEX.json`。

## 宿主 AI 必须遵守的规则

- **把本资产当作开工前上下文，而不是运行环境。**：AI Context Pack 只包含证据化项目理解，不包含目标项目的可执行状态。 证据：`docs/README.md`, `README.md`, `apps/api/README.md`
- **回答用户时区分可预览内容与必须安装后才能验证的内容。**：安装前体验的消费者价值来自降低误装和误判，而不是伪装成真实运行。 证据：`docs/README.md`, `README.md`, `apps/api/README.md`

## 用户开工前应该回答的问题

- 你准备在哪个宿主 AI 或本地环境中使用它？
- 你只是想先体验工作流，还是准备真实安装？
- 你最在意的是安装成本、输出质量、还是和现有规则的冲突？

## 验收标准

- 所有能力声明都能回指到 evidence_refs 中的文件路径。
- AI_CONTEXT_PACK.md 没有把预览包装成真实运行。
- 用户能在 3 分钟内看懂适合谁、能做什么、如何开始和风险边界。

---

## Doramagic Context Augmentation

下面内容用于强化 Repomix/AI Context Pack 主体。Human Manual 只提供阅读骨架；踩坑日志会被转成宿主 AI 必须遵守的工作约束。

## Human Manual 骨架

使用规则：这里只是项目阅读路线和显著性信号，不是事实权威。具体事实仍必须回到 repo evidence / Claim Graph。

宿主 AI 硬性规则：
- 不得把页标题、章节顺序、摘要或 importance 当作项目事实证据。
- 解释 Human Manual 骨架时，必须明确说它只是阅读路线/显著性信号。
- 能力、安装、兼容性、运行状态和风险判断必须引用 repo evidence、source path 或 Claim Graph。

- **Refly 项目介绍**：importance `high`
  - source_paths: README.md, README_CN.md
- **技术栈概览**：importance `high`
  - source_paths: apps/api/package.json, apps/web/package.json, packages/tsconfig/base.json
- **系统整体架构**：importance `high`
  - source_paths: apps/api/src/modules/app.module.ts, apps/web/src/App.tsx, pnpm-workspace.yaml, turbo.json
- **API 模块总览**：importance `high`
  - source_paths: apps/api/src/modules, apps/api/prisma/schema.prisma
- **工作流系统**：importance `high`
  - source_paths: apps/api/src/modules/workflow/workflow.service.ts, apps/api/src/modules/workflow/workflow.processor.ts, apps/api/src/modules/schedule/schedule.service.ts, packages/canvas-common/src/workflow.ts
- **工具系统**：importance `high`
  - source_paths: apps/api/src/modules/tool/tool.service.ts, apps/api/src/modules/tool/ptc/ptc-sdk.service.ts, apps/api/src/modules/tool/sandbox/scalebox.service.ts, apps/api/src/modules/tool/handlers/handlers.module.ts, packages/agent-tools/src/index.ts
- **认证与授权系统**：importance `high`
  - source_paths: apps/api/src/modules/auth/auth.service.ts, apps/api/src/modules/auth/api-key.service.ts, apps/api/src/modules/auth/strategy/google-oauth.strategy.ts, apps/api/src/modules/auth/guard/jwt-auth.guard.ts
- **Canvas 画布组件**：importance `high`
  - source_paths: packages/ai-workspace-common/src/components/canvas/index.tsx, packages/ai-workspace-common/src/components/canvas/nodes/index.ts, packages/ai-workspace-common/src/components/canvas/copilot/index.tsx, packages/canvas-common/src/data.ts

## Repo Inspection Evidence / 源码检查证据

- repo_clone_verified: true
- repo_inspection_verified: true
- repo_commit: `330c01b123b85c8245d2e093eca4bb71585bbc6f`
- inspected_files: `pnpm-lock.yaml`, `package.json`, `README.md`, `docs/index.md`, `docs/pnpm-lock.yaml`, `docs/package.json`, `docs/README.md`, `docs/scripts/convert-webp.js`, `docs/.vitepress/config.ts`, `docs/zh/index.md`, `docs/.vitepress/theme/index.ts`, `docs/zh/about/privacy-policy.md`, `docs/zh/about/terms-of-service.md`, `docs/zh/community/contact-us.md`, `docs/zh/changelog/v0.4.2.md`, `docs/zh/changelog/v0.7.0.md`, `docs/zh/changelog/v0.2.3.md`, `docs/zh/changelog/v0.4.0.md`, `docs/zh/changelog/v1.1.0.md`, `docs/zh/changelog/v0.2.2.md`

宿主 AI 硬性规则：
- 没有 repo_clone_verified=true 时，不得声称已经读过源码。
- 没有 repo_inspection_verified=true 时，不得把 README/docs/package 文件判断写成事实。
- 没有 quick_start_verified=true 时，不得声称 Quick Start 已跑通。

## Doramagic Pitfall Constraints / 踩坑约束

这些规则来自 Doramagic 发现、验证或编译过程中的项目专属坑点。宿主 AI 必须把它们当作工作约束，而不是普通说明文字。

### Constraint 1: 来源证据：[Question] Sandbox deployment fails with "AggregateError: All promises were rejected" - Scalebox template and setup inq…

- Trigger: GitHub 社区证据显示该项目存在一个安全/权限相关的待验证问题：[Question] Sandbox deployment fails with "AggregateError: All promises were rejected" - Scalebox template and setup inquiry
- Host AI rule: 来源问题仍为 open，Pack Agent 需要复核是否仍影响当前版本。
- Why it matters: 可能影响授权、密钥配置或安全边界。
- Evidence: community_evidence:github | cevd_0805b730bc2b4c5787cea36e55a118cd | https://github.com/refly-ai/refly/issues/2088 | 来源讨论提到 docker 相关条件，需在安装/试用前复核。
- Hard boundary: 不要把这个坑点包装成已解决、已验证或可忽略，除非后续验证证据明确证明它已经关闭。

### Constraint 2: 来源证据：v0.5.0

- Trigger: GitHub 社区证据显示该项目存在一个安装相关的待验证问题：v0.5.0
- Host AI rule: 来源显示可能已有修复、规避或版本变化，说明书中必须标注适用版本。
- Why it matters: 可能增加新用户试用和生产接入成本。
- Evidence: community_evidence:github | cevd_0c49752e8b10439aa5eda23446563b9f | https://github.com/refly-ai/refly/releases/tag/v0.5.0 | 来源讨论提到 node 相关条件，需在安装/试用前复核。
- Hard boundary: 不要把这个坑点包装成已解决、已验证或可忽略，除非后续验证证据明确证明它已经关闭。

### Constraint 3: 来源证据：v0.7.0

- Trigger: GitHub 社区证据显示该项目存在一个安装相关的待验证问题：v0.7.0
- Host AI rule: 来源显示可能已有修复、规避或版本变化，说明书中必须标注适用版本。
- Why it matters: 可能阻塞安装或首次运行。
- Evidence: community_evidence:github | cevd_9680da63e17747a5afdc985701b56111 | https://github.com/refly-ai/refly/releases/tag/v0.7.0 | 来源讨论提到 node 相关条件，需在安装/试用前复核。
- Hard boundary: 不要把这个坑点包装成已解决、已验证或可忽略，除非后续验证证据明确证明它已经关闭。

### Constraint 4: 来源证据：v0.8.0

- Trigger: GitHub 社区证据显示该项目存在一个安装相关的待验证问题：v0.8.0
- Host AI rule: 来源显示可能已有修复、规避或版本变化，说明书中必须标注适用版本。
- Why it matters: 可能增加新用户试用和生产接入成本。
- Evidence: community_evidence:github | cevd_bde62a80a1994e2b89a9741dabace272 | https://github.com/refly-ai/refly/releases/tag/v0.8.0 | 来源讨论提到 node 相关条件，需在安装/试用前复核。
- Hard boundary: 不要把这个坑点包装成已解决、已验证或可忽略，除非后续验证证据明确证明它已经关闭。

### Constraint 5: 可能修改宿主 AI 配置

- Trigger: 项目面向 Claude/Cursor/Codex/Gemini/OpenCode 等宿主，或安装命令涉及用户配置目录。
- Host AI rule: 列出会写入的配置文件、目录和卸载/回滚步骤。
- Why it matters: 安装可能改变本机 AI 工具行为，用户需要知道写入位置和回滚方法。
- Evidence: capability.host_targets | github_repo:759799529 | https://github.com/refly-ai/refly | host_targets=claude, claude_code, cursor
- Hard boundary: 不要把这个坑点包装成已解决、已验证或可忽略，除非后续验证证据明确证明它已经关闭。

### Constraint 6: 来源证据：translate/index.ts — 429 retries at 1s, 2s, 4s ignore Retry-After, retry budget exhausted in 7 seconds

- Trigger: GitHub 社区证据显示该项目存在一个配置相关的待验证问题：translate/index.ts — 429 retries at 1s, 2s, 4s ignore Retry-After, retry budget exhausted in 7 seconds
- Host AI rule: 来源问题仍为 open，Pack Agent 需要复核是否仍影响当前版本。
- Why it matters: 可能增加新用户试用和生产接入成本。
- Evidence: community_evidence:github | cevd_91f612b63eef439ba150bafe81966117 | https://github.com/refly-ai/refly/issues/2278 | 来源类型 github_issue 暴露的待验证使用条件。
- Hard boundary: 不要把这个坑点包装成已解决、已验证或可忽略，除非后续验证证据明确证明它已经关闭。

### Constraint 7: 能力判断依赖假设

- Trigger: README/documentation is current enough for a first validation pass.
- Host AI rule: 将假设转成下游验证清单。
- Why it matters: 假设不成立时，用户拿不到承诺的能力。
- Evidence: capability.assumptions | github_repo:759799529 | https://github.com/refly-ai/refly | README/documentation is current enough for a first validation pass.
- Hard boundary: 不要把这个坑点包装成已解决、已验证或可忽略，除非后续验证证据明确证明它已经关闭。

### Constraint 8: 维护活跃度未知

- Trigger: 未记录 last_activity_observed。
- Host AI rule: 补 GitHub 最近 commit、release、issue/PR 响应信号。
- Why it matters: 新项目、停更项目和活跃项目会被混在一起，推荐信任度下降。
- Evidence: evidence.maintainer_signals | github_repo:759799529 | https://github.com/refly-ai/refly | last_activity_observed missing
- Hard boundary: 不要把这个坑点包装成已解决、已验证或可忽略，除非后续验证证据明确证明它已经关闭。

### Constraint 9: 下游验证发现风险项

- Trigger: no_demo
- Host AI rule: 进入安全/权限治理复核队列。
- Why it matters: 下游已经要求复核，不能在页面中弱化。
- Evidence: downstream_validation.risk_items | github_repo:759799529 | https://github.com/refly-ai/refly | no_demo; severity=medium
- Hard boundary: 不要把这个坑点包装成已解决、已验证或可忽略，除非后续验证证据明确证明它已经关闭。

### Constraint 10: 存在安全注意事项

- Trigger: No sandbox install has been executed yet; downstream must verify before user use.
- Host AI rule: 转成明确权限清单和安全审查提示。
- Why it matters: 用户安装前需要知道权限边界和敏感操作。
- Evidence: risks.safety_notes | github_repo:759799529 | https://github.com/refly-ai/refly | No sandbox install has been executed yet; downstream must verify before user use.
- Hard boundary: 不要把这个坑点包装成已解决、已验证或可忽略，除非后续验证证据明确证明它已经关闭。