feat(protocol): 保留调用方 auto compact 窗口

[dofastted]

摘要

从已关闭的厨房水槽 #606 拆出的仅 auto_compact_window 变更（基于 main 670dd027）。

• 协议页配置 routing.compatibility.auto_compact_window（100K–1M 或跟随模型）
• 入站在 sanitizeInboundBody 前提取 CLAUDE_CODE_AUTO_COMPACT_WINDOW，经内部字段进入 CLI hop / native body
• writeKernelConfig 写入 kernel 配置；清理后的 body 不再携带该 env

明确不包含

• 种子页 UI / seed-settings API 行为
• egress / migration / slot-bin

CHANGELOG

「未发布」一条；未改 VERSION。

  

---

Note

Medium Risk
Changes inbound sanitization order and outbound CLI/kernel job shape for context-window sizing; bounded validation limits blast radius, but misconfiguration could affect compaction behavior for Claude Code hops.

^{Reviewed by Cursor Bugbot for commit 6ed5560. Configure here.}

[cursor]

Cursor Bugbot has reviewed your changes and found 1 potential issue.

^{❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.}

^{Reviewed by Cursor Bugbot for commit 6ed5560. Configure here.}

[cursor]

Inbound compact window not sanitized

Medium Severity

auto_compact_window is now a privileged job field, but inbound copies of it are never stripped. callerAutoCompactWindow only reads env, and prepareCliHopBody writes a validated value only when that env is in range. Otherwise officialMessagesBody still forwards a client-supplied top-level field, so it can override the panel/kernel default or reach the CLI with an unchecked number.

Additional Locations (1)

• src/lib/protocol/seed-policy.mjs#L119-L128

 

^{Reviewed by Cursor Bugbot for commit 6ed5560. Configure here.}