u

src/services/conversationManager.js

@@ -131,6 +131,7 @@ async function buildSystemPrompt(vfsRoot, googleAuthId) {
         '- Persistent per-company VFS. Paths are root-relative forward-slash (e.g. "labels/sheet1.png").',
         '- Text: list with find_files, read with read_file, write with patch.',
         '- User attachments are saved to VFS (e.g. "attachments/...") and tagged in user messages as `[ATTACHMENT name= path= type=]`. Inspect attachments with appropriate tools: `read_file` (text/csv/json), `pdf_read` (PDFs), or `analyze_image` (images).',
+        '- Markdown links: Internet links are "https://..." or simply "hostname.com" / "hostname.com/filename". A pure relative path with no dotted hostname is always a VFS relative path (e.g. `[download](report.csv)` or `![preview](images/photo.png)`).',
         '',
         'SKILL FILES:',
         '- Reusable instruction docs: "<slug>.SKILL" at VFS root. First line is title, followed by markdown.',

src/tools/javascript.js

@@ -58,16 +58,16 @@ function runInWorker({ code, timeoutMs, vfsRoot, googleAuthId }) {
             // result made the sandbox appear to run for 0ms and return nothing.
             if (!msg || msg.__sandboxReport !== true) {
                 // Those loader notices fire many times per run, so warn ONCE per key rather
-    // than on every message — expected, benign noise while running under --watch.
-          for (const key of Object.keys(msg || {})) {
-            if (!WATCH_NOISE_WARNED.has(key)) {
-  WATCH_NOISE_WARNED.add(key);
-        console.warn(
-       `[javascript_execute] ignoring non-sandbox worker message "${key}" ` +
-      '(expected under `node --watch`; logged once per key).'
-       );
-        }
-            }
+                // than on every message — expected, benign noise while running under --watch.
+                for (const key of Object.keys(msg || {})) {
+                    if (!WATCH_NOISE_WARNED.has(key)) {
+                        WATCH_NOISE_WARNED.add(key);
+                        console.warn(
+                            `[javascript_execute] ignoring non-sandbox worker message "${key}" ` +
+                            '(expected under `node --watch`; logged once per key).'
+                        );
+                    }
+                }
                 return;
             }
             finish(msg);
@@ -122,11 +122,11 @@ export function createJavascriptExecuteTool({ googleAuthId }) {
     return defineTool({
         name: 'javascript_execute',
         description:
-            'Execute JS in isolated Node worker sandbox. Assign `module.exports` to return value (sync value or Promise; no bare top-level await — wrap async in IIFE: `module.exports = (async () => { ... })()`). ' +
+            'Execute JS in isolated worker sandbox. Assign `module.exports` to return value (sync value or Promise; wrap async in IIFE: `module.exports = (async () => { ... })()`). ' +
             'REST API: `await fetch("/path")` (authenticated). ' +
-            'VFS: `fs.readFileSync`/`writeFileSync` for binary artifacts/buffers/images (`image/` is read-only). ' +
-            'Embed generated images in markdown: `![alt](path)`. Use find_files/read_file/patch for text. ' +
-            'Globals: `fs`/`vfs`, `sharp`, WebCrypto `crypto` (`subtle`, `randomUUID`), web standard globals. Node built-ins unavailable (`require` fails).',
+            'VFS: directly use global `fs.readFileSync`/`writeFileSync` for binary artifacts/buffers/images (`image/` is read-only; paths must be relative paths, root is not allowed). ' +
+            'Embed generated images/links in markdown: `![alt](relative/path)`. Internet links use `https://...` or `hostname.com`/`hostname.com/filename`; a pure relative file with no dotted hostname is always a VFS relative path. Use find_files/read_file/patch for text. ' +
+            'All APIs are pre-injected globals: `fs`/`vfs` (virtual filesystem), `sharp` (image processing), WebCrypto `crypto` (`subtle`, `randomUUID`), and standard web globals. Do NOT use `require()` or `import` (disabled; all necessary APIs are already in global scope).',
         strict: false,
         parameters: {
             type: 'object',
@@ -135,7 +135,7 @@ export function createJavascriptExecuteTool({ googleAuthId }) {
             properties: {
                 code: {
                     type: 'string',
-                    description: 'CommonJS JS code. Assign result to `module.exports`. Async code must use IIFE.',
+                    description: 'JavaScript code. Assign result to `module.exports`. Async code must use IIFE. Do not use require() or import.',
                 },
                 timeout: {
                     type: 'number',