refactor(prompt): 移除工具调用与技能注入的引导提示词

实测 DSML 工具调用会被上游风控识别（封号风险），且高频调用容易触发限速，
prompt 侧不再做任何引导：
- 不再生成 context_tools.txt 工具说明文件，也不再输出 DSML 调用格式要求
（You have access to these tools / TOOL CALL SCHEME / 必须调用工具）；
只保留工具名提取，供 tools.enabled=true 时的响应侧 tool_calls 解析
- 技能块去掉引导语，只保留 <skill> 标签与正文，避免引导模型使用技能
- 历史拆分只上传对话记录文件；相关测试与文档同步更新

docs/prompt-compatibility.md

@@ -1,4 +1,4 @@
-# API → 纯文本 web-chat 上下文兼容流程
+# API → 纯文本 web-chat 上下文兼容流程
 
 本文是本仓库「把结构化 API 请求翻译成 DeepSeek web-chat 纯文本 prompt，再把上游回答翻译回目标协议」这条链路的源文档。AGENTS.md 规定：任何影响消息归一化、工具提示词注入、提示词可见的工具历史、文件/引用处理、历史拆分、完成载荷组装的改动，都要在同一变更里更新本文。
 
@@ -119,11 +119,17 @@ DeepSeek web-chat 只接受一段 prompt 字符串和一组文件引用，没有
 
 标题刻意不用文件名形式（历史版本是 `# context_context.txt`），避免模型把它当成一份待分析文档。旧格式里 `[r=0]`…`[r=9]` 的数字角色行不再生成；管理台读旧记录时仍能识别这种数字角色行（兼容读取），后端只把它当普通正文，不报错。
 
-### 工具说明文件格式
+### 工具说明与调用引导（已移除）
 
-工具定义单独上传为 `context_tools.txt`，标题是 `# 可用工具说明`，正文按工具逐条列出名称、描述、参数 JSON Schema。prompt 里只保留一句「本轮可用的工具与参数说明已附加在 context_tools.txt 中，请只使用该文件列出的工具与参数」，并附带调用格式要求。
+历史上工具定义会单独上传为 `context_tools.txt`，并在 prompt 里补一句「可用工具与参数说明在 context_tools.txt 中」外加 DSML 调用格式要求。
 
-两个文件分工明确：对话记录是「发生过什么」，工具说明是「能用什么」。把工具定义塞进对话记录会让模型分不清哪些是历史调用、哪些是可用工具。
+实测这条路不可行：上游对 DSML 结构化输出风控严格，命中后账号会被封；工具调用本身高频也会撞限速。所以现在 prompt 侧**不再输出任何工具引导**：
+
+- 不生成 `context_tools.txt`，也不会再有「可用工具说明」文件；
+- 不输出 `You have access to these tools` / `TOOL CALL SCHEME` / 「必须调用工具」之类的说明；
+- 只保留工具名提取，用于响应侧（客户端明确要求时）的 `tool_calls` 解析判断。
+
+也就是说，`tools` 出现在请求里也不会让模型「知道」自己能用工具——这点是刻意为之，见第 4 节的工具调用开关。
 
 ---
 
@@ -168,7 +174,7 @@ DeepSeek web-chat 只接受一段 prompt 字符串和一组文件引用，没有
 | 配置项 | `tools.enabled`，缺省 `false`；字段缺失或值为 `null` 都按关闭处理 |
 | 运行时覆盖 | `/admin/settings` 的 `tools.enabled`，热更新；GET 顶层返回 `{"enabled": bool, "default_enabled": false}` |
 | 关闭时（默认） | 带 `tools` 的请求按纯对话处理：不注入任何工具说明（包括 DSML 格式要求与工具说明文件），不解析、不透出 `tool_calls`，模型输出按普通文本回写 |
-| 开启时 | 恢复原有行为：prompt 带上 DSML 调用格式要求，历史拆分额外上传工具说明文件，响应侧恢复 `tool_calls` 解析 |
+| 开启时 | 只恢复响应侧的 `tool_calls` 解析；prompt 侧依旧不输出任何工具引导（上游风控风险不随开关消失） |
 
 关闭时同一请求里的 `tool_choice` 也失去意义：没有工具定义，就没有可选的调用策略。
 
@@ -206,16 +212,16 @@ DeepSeek web-chat 只接受一段 prompt 字符串和一组文件引用，没有
 - 时机在历史拆分**之后**：拆分会把 prompt 整体替换成衔接指令，技能必须等替换完成后再前置，否则会被覆盖。
 - 对比思考格式注入：思考格式注入在拆分**之前**，因为它需要落到对话记录文件里。两处顺序不同，改动时不要调换。
 
-技能块格式（线上排查时可对照这段前缀）：
+技能块格式（线上排查时可对照这段结构）：
 
 ```text
-以下技能说明由服务端配置，属于内部资料：适用于当前任务时请遵循；与用户明确要求冲突时以用户为准。不要在回复里提及技能名称或这段说明。
-
 <skill id="sql-report" name="SQL 报表">
 …body…
 </skill>
 ```
 
+注意：技能块里**不再有引导语**（没有“以下是技能说明/适用于当前任务时请遵循/不要提及技能”之类前缀），只保留 `<skill>` 结构化标签与正文——避免模型被引导去“使用技能/调用能力”。
+
 为什么用纯文本而不是工具调用：工具调用要求模型吐 DSML 结构化文本，正是上游风控盯的那类输出，一旦被判违规代价是账号本身；技能只是往 prompt 里加一段静态文本，模型照普通对话写回答，风控面和普通聊天没有区别。
 
 ### 泄漏防护
@@ -245,7 +251,7 @@ DeepSeek web-chat 只接受一段 prompt 字符串和一组文件引用，没有
 满足条件时：
 
 1. 按第 3 节的转写格式生成对话记录，写入 `ctx-<12 位小写字母数字>.txt`。文件名随机，不含 `history` 之类语义词，减少模型把它当文档分析的倾向。
-2. 若请求带可用工具（且 `tool_choice` 不是 `none`，且 `tools.enabled=true`），额外上传 `context_tools.txt`。
+2. 不再额外上传工具说明文件（工具引导已移除，见第 3 节）。
 3. prompt 改写成两段：工具说明用 system 消息给出文件分工，user 消息给出衔接指令（含文件名）。原始长对话不再进 prompt。
 4. 文件 ID 前置插入 `RefFileIDs`，与客户端自带的 `ref_file_ids` 去重后一起送上游。
 5. `PromptTokenText` 保留「对话记录 + 工具说明」全文，用于 token 估算，与实际 prompt 长度解耦。
@@ -347,7 +353,8 @@ Kelivo 这类客户端把界面上的「思维强度」翻译成 `reasoning_effo
 | `model_type` 只剩 `default` | 旧配置里出现 `expert` / `vision` 也不会让请求失败，解析时按 `default` 处理 |
 | 上下文文件标题从 `# context_context.txt` 改为 `# 对话记录` | 旧文件是纯文本，读回不报错；新文件不再使用文件名式标题 |
 | 对话记录角色行从 `[r=0]`…`[r=9]` 改为 `[role=user]` 等 | 管理台解析同时接受 `[role=...]` 与旧 `[r=N]`；后端只把记录当纯文本 |
-| 工具说明文件标题改为 `# 可用工具说明` | 文件名仍是 `context_tools.txt`，prompt 里的引用文案不变 |
+| 移除工具说明文件与调用引导 | 不再生成 `context_tools.txt`、不输出 DSML 格式要求；`tools` 只影响响应侧解析，取决于 `tools.enabled` |
+| 移除技能注入的引导语 | 技能块只保留 `<skill>` 标签与正文，不再有“请遵循技能”这类前缀 |
 | 思考格式注入从 `internal/httpapi/openai/shared` 移到 `internal/promptcompat` | 四个对话接口共用同一实现，配置项与字段名不变 |
 | 联网信号改为「模型默认 + 客户端显式覆盖」 | 只在客户端发显式信号时改变行为；不发信号的客户端表现与之前一致 |
 | 新增 `tools.enabled`，缺省 `false` | 默认行为变化：未显式开启时不再注入工具说明、不再返回 `tool_calls`；老客户端带 `tools` 的请求会退化为纯对话，需要工具能力请在 `/admin/settings` 或配置文件显式开启 |

internal/httpapi/claude/current_input_file_test.go

@@ -163,7 +163,7 @@ func TestClaudeDirectAppliesCurrentInputFile(t *testing.T) {
 	}
 }
 
-func TestClaudeCurrentInputFileUploadsToolsSeparately(t *testing.T) {
+func TestClaudeCurrentInputFileIgnoresToolGuidance(t *testing.T) {
 	ds := &claudeCurrentInputDS{}
 	h := &Handler{
 		Store: mockClaudeConfig{aliases: map[string]string{"claude-sonnet-4-6": "deepseek-v4-flash"}},
@@ -180,29 +180,24 @@ func TestClaudeCurrentInputFileUploadsToolsSeparately(t *testing.T) {
 	if rec.Code != http.StatusOK {
 		t.Fatalf("expected 200, got %d body=%s", rec.Code, rec.Body.String())
 	}
-	if len(ds.uploads) != 2 {
-		t.Fatalf("expected history and tools uploads, got %d", len(ds.uploads))
+	// 工具调用引导（工具说明文件 + 调用格式说明）已整体移除：
+	// 只上传对话记录文件，prompt 里也不再出现任何工具相关文案。
+	if len(ds.uploads) != 1 {
+		t.Fatalf("expected only history upload, got %d", len(ds.uploads))
 	}
-	if strings.Contains(strings.ToLower(ds.uploads[0].Filename), "history") || !strings.HasSuffix(ds.uploads[0].Filename, ".txt") || ds.uploads[1].Filename != "context_tools.txt" {
-		t.Fatalf("unexpected upload filenames: %#v", ds.uploads)
+	if !strings.HasSuffix(ds.uploads[0].Filename, ".txt") {
+		t.Fatalf("unexpected upload filename: %#v", ds.uploads)
 	}
 	historyText := string(ds.uploads[0].Data)
 	if strings.Contains(historyText, "You have access to these tools") || strings.Contains(historyText, "Description: Search docs") {
 		t.Fatalf("history transcript should not embed tool descriptions, got %q", historyText)
 	}
-	toolsText := string(ds.uploads[1].Data)
-	if !strings.Contains(toolsText, "# 可用工具说明") || !strings.Contains(toolsText, "Tool: search") || !strings.Contains(toolsText, "Description: Search docs") {
-		t.Fatalf("expected tools transcript to include tool schema, got %q", toolsText)
-	}
 	refIDs, _ := ds.payload["ref_file_ids"].([]any)
-	if len(refIDs) < 2 || refIDs[0] != "file-claude-history" || refIDs[1] != "file-claude-tools" {
-		t.Fatalf("expected history and tools ref ids first, got %#v", ds.payload["ref_file_ids"])
+	if len(refIDs) != 1 || refIDs[0] != "file-claude-history" {
+		t.Fatalf("expected only history ref id, got %#v", ds.payload["ref_file_ids"])
 	}
 	prompt, _ := ds.payload["prompt"].(string)
-	if !strings.Contains(prompt, "context_tools.txt") || !strings.Contains(prompt, "TOOL CALL SCHEME") {
-		t.Fatalf("expected live prompt to reference tools file and retain format instructions, got %q", prompt)
-	}
-	if strings.Contains(prompt, "Description: Search docs") {
-		t.Fatalf("live prompt should not inline tool descriptions, got %q", prompt)
+	if strings.Contains(prompt, "context_tools.txt") || strings.Contains(prompt, "TOOL CALL SCHEME") || strings.Contains(prompt, "Description: Search docs") {
+		t.Fatalf("expected no tool guidance in prompt, got %q", prompt)
 	}
 }

internal/httpapi/gemini/handler_test.go

@@ -207,7 +207,7 @@ func TestGeminiDirectAppliesCurrentInputFile(t *testing.T) {
 	}
 }
 
-func TestGeminiCurrentInputFileUploadsToolsSeparately(t *testing.T) {
+func TestGeminiCurrentInputFileIgnoresToolGuidance(t *testing.T) {
 	ds := &testGeminiDS{
 		resp: makeGeminiUpstreamResponse(`data: {"p":"response/content","v":"ok"}`),
 	}
@@ -231,30 +231,24 @@ func TestGeminiCurrentInputFileUploadsToolsSeparately(t *testing.T) {
 	if rec.Code != http.StatusOK {
 		t.Fatalf("expected 200, got %d body=%s", rec.Code, rec.Body.String())
 	}
-	if len(ds.uploadCalls) != 2 {
-		t.Fatalf("expected history and tools uploads, got %d", len(ds.uploadCalls))
+	// 工具调用引导已整体移除：只上传对话记录，prompt 不再引用工具说明文件。
+	if len(ds.uploadCalls) != 1 {
+		t.Fatalf("expected only history upload, got %d", len(ds.uploadCalls))
 	}
-	if strings.Contains(strings.ToLower(ds.uploadCalls[0].Filename), "history") || !strings.HasSuffix(ds.uploadCalls[0].Filename, ".txt") || ds.uploadCalls[1].Filename != "context_tools.txt" {
-		t.Fatalf("unexpected upload filenames: %#v", ds.uploadCalls)
+	if !strings.HasSuffix(ds.uploadCalls[0].Filename, ".txt") {
+		t.Fatalf("unexpected upload filename: %#v", ds.uploadCalls)
 	}
 	historyText := string(ds.uploadCalls[0].Data)
 	if strings.Contains(historyText, "Description: eval") {
 		t.Fatalf("history transcript should not embed tool descriptions, got %q", historyText)
 	}
-	toolsText := string(ds.uploadCalls[1].Data)
-	if !strings.Contains(toolsText, "# 可用工具说明") || !strings.Contains(toolsText, "Tool: eval_javascript") || !strings.Contains(toolsText, "Description: eval") {
-		t.Fatalf("expected tools transcript to include Gemini tool schema, got %q", toolsText)
-	}
 	refIDs, _ := ds.payloads[0]["ref_file_ids"].([]any)
-	if len(refIDs) < 2 || refIDs[0] != "file-gemini-history" || refIDs[1] != "file-gemini-tools" {
-		t.Fatalf("expected history and tools ref ids first, got %#v", ds.payloads[0]["ref_file_ids"])
+	if len(refIDs) != 1 || refIDs[0] != "file-gemini-history" {
+		t.Fatalf("expected only history ref id, got %#v", ds.payloads[0]["ref_file_ids"])
 	}
 	prompt, _ := ds.payloads[0]["prompt"].(string)
-	if !strings.Contains(prompt, "context_tools.txt") || !strings.Contains(prompt, "TOOL CALL SCHEME") {
-		t.Fatalf("expected live prompt to reference tools file and retain format instructions, got %q", prompt)
-	}
-	if strings.Contains(prompt, "Description: eval") {
-		t.Fatalf("live prompt should not inline tool descriptions, got %q", prompt)
+	if strings.Contains(prompt, "context_tools.txt") || strings.Contains(prompt, "TOOL CALL SCHEME") || strings.Contains(prompt, "Description: eval") {
+		t.Fatalf("expected no tool guidance in prompt, got %q", prompt)
 	}
 }
 

internal/httpapi/openai/chat/vercel_prepare_test.go

@@ -324,7 +324,7 @@ func TestHandleVercelStreamReleaseTriggersAutoDelete(t *testing.T) {
 	}
 }
 
-func TestHandleVercelStreamPrepareUploadsToolsSeparately(t *testing.T) {
+func TestHandleVercelStreamPrepareIgnoresToolGuidance(t *testing.T) {
 	t.Setenv("VERCEL", "1")
 	t.Setenv("DS2API_VERCEL_INTERNAL_SECRET", "stream-secret")
 
@@ -363,11 +363,12 @@ func TestHandleVercelStreamPrepareUploadsToolsSeparately(t *testing.T) {
 	if rec.Code != http.StatusOK {
 		t.Fatalf("expected 200, got %d body=%s", rec.Code, rec.Body.String())
 	}
-	if len(ds.uploadCalls) != 2 {
-		t.Fatalf("expected history and tools uploads, got %d", len(ds.uploadCalls))
+	// 工具调用引导已整体移除：只上传对话记录，不再有 context_tools.txt。
+	if len(ds.uploadCalls) != 1 {
+		t.Fatalf("expected only history upload, got %d", len(ds.uploadCalls))
 	}
-	if strings.Contains(strings.ToLower(ds.uploadCalls[0].Filename), "history") || !strings.HasSuffix(ds.uploadCalls[0].Filename, ".txt") || ds.uploadCalls[1].Filename != "context_tools.txt" {
-		t.Fatalf("unexpected upload filenames: %#v", ds.uploadCalls)
+	if !strings.HasSuffix(ds.uploadCalls[0].Filename, ".txt") {
+		t.Fatalf("unexpected upload filename: %#v", ds.uploadCalls)
 	}
 	if strings.Contains(string(ds.uploadCalls[0].Data), "Description: search docs") {
 		t.Fatalf("history transcript should not embed tool descriptions, got %q", string(ds.uploadCalls[0].Data))
@@ -381,16 +382,13 @@ func TestHandleVercelStreamPrepareUploadsToolsSeparately(t *testing.T) {
 	payload, _ := body["payload"].(map[string]any)
 	payloadPrompt, _ := payload["prompt"].(string)
 	for label, promptText := range map[string]string{"final_prompt": finalPrompt, "payload.prompt": payloadPrompt} {
-		if !strings.Contains(promptText, "context_tools.txt") || !strings.Contains(promptText, "TOOL CALL SCHEME") {
-			t.Fatalf("expected %s to reference tools file and retain tool instructions, got %q", label, promptText)
-		}
-		if strings.Contains(promptText, "Description: search docs") {
-			t.Fatalf("expected %s not to inline tool descriptions, got %q", label, promptText)
+		if strings.Contains(promptText, "context_tools.txt") || strings.Contains(promptText, "TOOL CALL SCHEME") || strings.Contains(promptText, "Description: search docs") {
+			t.Fatalf("expected %s to carry no tool guidance, got %q", label, promptText)
 		}
 	}
 	refIDs, _ := payload["ref_file_ids"].([]any)
-	if len(refIDs) < 2 || refIDs[0] != "file-inline-1" || refIDs[1] != "file-inline-2" {
-		t.Fatalf("expected history and tools ref ids first, got %#v", payload["ref_file_ids"])
+	if len(refIDs) != 1 || refIDs[0] != "file-inline-1" {
+		t.Fatalf("expected only history ref id, got %#v", payload["ref_file_ids"])
 	}
 }
 
@@ -463,9 +461,9 @@ func TestHandleVercelStreamSwitchReuploadsCurrentInputFile(t *testing.T) {
 		ResolvedModel:           "deepseek-v4-flash",
 		ResponseModel:           "deepseek-v4-flash",
 		CurrentInputFilename:    "ctx-fixed-1234.txt",
-		FinalPrompt:             "已附上下文文件「ctx-fixed-1234.txt」。直接基于该文件完成当前请求，不要重复之前内容。 可用工具与参数说明在 context_tools.txt 中，仅可依据该文件调用工具。",
-		PromptTokenText:         "# context_context.txt\n\n=== 1 ===\n[r=1]\nhello\n\n# context_tools.txt\nTool descriptions and parameter schemas for this request.\n\nYou have access to these tools:\n\nTool: search\nDescription: search docs\nParameters: {\"type\":\"object\"}\n",
-		HistoryText:             "# context_context.txt\n\n=== 1 ===\n[r=1]\nhello\n",
+		FinalPrompt:             "本会话此前的对话已完整保存在附件「ctx-fixed-1234.txt」中。请把它当成你自己刚刚说过的话，直接回答最新一条用户消息。",
+		PromptTokenText:         "# 对话记录\n\n=== 1 ===\n[role=user]\nhello\n",
+		HistoryText:             "# 对话记录\n\n=== 1 ===\n[role=user]\nhello\n",
 		CurrentInputFileApplied: true,
 		CurrentInputFileID:      "file-old",
 		CurrentToolsFileID:      "file-old-tools",
@@ -492,11 +490,11 @@ func TestHandleVercelStreamSwitchReuploadsCurrentInputFile(t *testing.T) {
 	if rec.Code != http.StatusOK {
 		t.Fatalf("expected 200, got %d body=%s", rec.Code, rec.Body.String())
 	}
-	if len(ds.uploadCalls) != 2 {
-		t.Fatalf("expected current input and tools reupload on switched account, got %d", len(ds.uploadCalls))
+	if len(ds.uploadCalls) != 1 {
+		t.Fatalf("expected only current input reupload on switched account, got %d", len(ds.uploadCalls))
 	}
-	if strings.Contains(strings.ToLower(ds.uploadCalls[0].Filename), "history") || !strings.HasSuffix(ds.uploadCalls[0].Filename, ".txt") || ds.uploadCalls[1].Filename != "context_tools.txt" {
-		t.Fatalf("unexpected reupload filenames: %#v", ds.uploadCalls)
+	if !strings.HasSuffix(ds.uploadCalls[0].Filename, ".txt") {
+		t.Fatalf("unexpected reupload filename: %#v", ds.uploadCalls)
 	}
 	var body map[string]any
 	if err := json.NewDecoder(rec.Body).Decode(&body); err != nil {
@@ -507,11 +505,11 @@ func TestHandleVercelStreamSwitchReuploadsCurrentInputFile(t *testing.T) {
 	}
 	payload, _ := body["payload"].(map[string]any)
 	refIDs, _ := payload["ref_file_ids"].([]any)
-	if len(refIDs) != 3 || refIDs[0] != "file-inline-1" || refIDs[1] != "file-inline-2" || refIDs[2] != "client-file" {
+	if len(refIDs) != 2 || refIDs[0] != "file-inline-1" || refIDs[1] != "client-file" {
 		t.Fatalf("expected reuploaded current input ref plus client ref, got %#v", payload["ref_file_ids"])
 	}
 	promptText, _ := payload["prompt"].(string)
-	if !strings.Contains(promptText, "context_tools.txt") {
-		t.Fatalf("expected switched payload prompt to retain tools file reference, got %q", promptText)
+	if strings.Contains(promptText, "context_tools.txt") {
+		t.Fatalf("expected switched payload prompt to carry no tool guidance, got %q", promptText)
 	}
 }

internal/httpapi/openai/history_split_test.go

@@ -335,7 +335,7 @@ func TestApplyCurrentInputFileSplitsLegacyProAndVisionModels(t *testing.T) {
 	}
 }
 
-func TestApplyCurrentInputFileUploadsToolsContextSeparately(t *testing.T) {
+func TestApplyCurrentInputFileIgnoresToolGuidance(t *testing.T) {
 	ds := &inlineUploadDSStub{}
 	h := &openAITestSurface{
 		Store: mockOpenAIConfig{
@@ -369,22 +369,20 @@ func TestApplyCurrentInputFileUploadsToolsContextSeparately(t *testing.T) {
 	if err != nil {
 		t.Fatalf("apply current input file failed: %v", err)
 	}
-	if len(ds.uploadCalls) != 2 {
-		t.Fatalf("expected history and tools uploads, got %d", len(ds.uploadCalls))
+	// 工具调用引导已整体移除：只有对话记录文件，没有工具说明文件，
+	// prompt 里也不再出现任何工具相关文案。
+	if len(ds.uploadCalls) != 1 {
+		t.Fatalf("expected only history upload, got %d", len(ds.uploadCalls))
 	}
-	if strings.Contains(strings.ToLower(ds.uploadCalls[0].Filename), "history") || !strings.HasSuffix(ds.uploadCalls[0].Filename, ".txt") || ds.uploadCalls[1].Filename != "context_tools.txt" {
-		t.Fatalf("unexpected upload filenames: %#v", ds.uploadCalls)
+	if !strings.HasSuffix(ds.uploadCalls[0].Filename, ".txt") {
+		t.Fatalf("unexpected upload filename: %#v", ds.uploadCalls)
 	}
 	historyText := string(ds.uploadCalls[0].Data)
 	if strings.Contains(historyText, "Description: search docs") {
 		t.Fatalf("history transcript should not embed tool descriptions, got %q", historyText)
 	}
-	toolsText := string(ds.uploadCalls[1].Data)
-	if !strings.Contains(toolsText, "# 可用工具说明") || !strings.Contains(toolsText, "Tool: search") || !strings.Contains(toolsText, "Description: search docs") {
-		t.Fatalf("expected tools transcript to include schema, got %q", toolsText)
-	}
-	if !strings.Contains(out.FinalPrompt, "context_tools.txt") || !strings.Contains(out.FinalPrompt, "TOOL CALL SCHEME") {
-		t.Fatalf("expected prompt to reference tools file and include tool instructions, got %q", out.FinalPrompt)
+	if strings.Contains(out.FinalPrompt, "context_tools.txt") || strings.Contains(out.FinalPrompt, "TOOL CALL SCHEME") {
+		t.Fatalf("expected no tool guidance in prompt, got %q", out.FinalPrompt)
 	}
 }
 
@@ -545,7 +543,7 @@ func TestResponsesCurrentInputFileUploadsContextAndKeepsNeutralPrompt(t *testing
 	}
 }
 
-func TestResponsesCurrentInputFileUploadsToolsSeparately(t *testing.T) {
+func TestResponsesCurrentInputFileIgnoresToolGuidance(t *testing.T) {
 	ds := &inlineUploadDSStub{}
 	h := &openAITestSurface{
 		Store: mockOpenAIConfig{
@@ -581,30 +579,24 @@ func TestResponsesCurrentInputFileUploadsToolsSeparately(t *testing.T) {
 	if rec.Code != http.StatusOK {
 		t.Fatalf("expected 200, got %d body=%s", rec.Code, rec.Body.String())
 	}
-	if len(ds.uploadCalls) != 2 {
-		t.Fatalf("expected history and tools uploads, got %d", len(ds.uploadCalls))
+	// 工具调用引导已整体移除：只上传对话记录，prompt 不再引用工具。
+	if len(ds.uploadCalls) != 1 {
+		t.Fatalf("expected only history upload, got %d", len(ds.uploadCalls))
 	}
-	if strings.Contains(strings.ToLower(ds.uploadCalls[0].Filename), "history") || !strings.HasSuffix(ds.uploadCalls[0].Filename, ".txt") || ds.uploadCalls[1].Filename != "context_tools.txt" {
-		t.Fatalf("unexpected upload filenames: %#v", ds.uploadCalls)
+	if !strings.HasSuffix(ds.uploadCalls[0].Filename, ".txt") {
+		t.Fatalf("unexpected upload filename: %#v", ds.uploadCalls)
 	}
 	historyText := string(ds.uploadCalls[0].Data)
 	if strings.Contains(historyText, "Description: search docs") {
 		t.Fatalf("history transcript should not embed tool descriptions, got %q", historyText)
 	}
-	toolsText := string(ds.uploadCalls[1].Data)
-	if !strings.Contains(toolsText, "# 可用工具说明") || !strings.Contains(toolsText, "Tool: search") || !strings.Contains(toolsText, "Description: search docs") {
-		t.Fatalf("expected tools transcript to include schema, got %q", toolsText)
-	}
 	promptText, _ := ds.completionReq["prompt"].(string)
-	if !strings.Contains(promptText, "context_tools.txt") || !strings.Contains(promptText, "TOOL CALL SCHEME") {
-		t.Fatalf("expected live prompt to reference tools file and retain format instructions, got %q", promptText)
-	}
-	if strings.Contains(promptText, "Description: search docs") {
-		t.Fatalf("live prompt should not inline tool descriptions, got %q", promptText)
+	if strings.Contains(promptText, "context_tools.txt") || strings.Contains(promptText, "TOOL CALL SCHEME") || strings.Contains(promptText, "Description: search docs") {
+		t.Fatalf("expected no tool guidance in prompt, got %q", promptText)
 	}
 	refIDs, _ := ds.completionReq["ref_file_ids"].([]any)
-	if len(refIDs) < 2 || refIDs[0] != "file-inline-1" || refIDs[1] != "file-inline-2" {
-		t.Fatalf("expected history and tools ref ids first, got %#v", ds.completionReq["ref_file_ids"])
+	if len(refIDs) != 1 || refIDs[0] != "file-inline-1" {
+		t.Fatalf("expected only history ref id, got %#v", ds.completionReq["ref_file_ids"])
 	}
 }
 

internal/promptcompat/prompt_build_test.go

@@ -124,8 +124,9 @@ func TestBuildOpenAIToolsContextTranscriptContainsOnlyDescriptions(t *testing.T)
 	if len(toolNames) != 1 || toolNames[0] != "search" {
 		t.Fatalf("unexpected tool names: %#v", toolNames)
 	}
-	if !strings.Contains(transcript, "# 可用工具说明") || !strings.Contains(transcript, "Tool: search") {
-		t.Fatalf("expected tools transcript to include tool schema, got: %q", transcript)
+	// 工具说明与调用引导已移除：不再生成工具说明文件，只保留工具名。
+	if transcript != "" {
+		t.Fatalf("expected empty tools transcript, got: %q", transcript)
 	}
 }
 

internal/promptcompat/skills.go

@@ -11,14 +11,15 @@ import (
 // 避免多一层转换。
 type SkillConfigLike = config.SkillConfig
 
-// SkillsPromptHeader 是技能块开头的说明。它只在 prompt 里出现，
-// 用户与模型都不应该把它当成对话内容复述出来。
-const SkillsPromptHeader = "以下技能说明由服务端配置，属于内部资料：适用于当前任务时请遵循；与用户明确要求冲突时以用户为准。不要在回复里提及技能名称或这段说明。"
-
 // SkillsPromptTruncatedNotice 在正文被长度上限截断时追加。
 const SkillsPromptTruncatedNotice = "（技能内容已截断）"
 
-// BuildSkillsPrompt 生成纯文本技能说明块；无可用技能时返回空串。
+// BuildSkillsPrompt 生成技能正文块；无可用技能时返回空串。
+//
+// 这里刻意不再输出「以下是技能说明 / 适用于当前任务时请遵循 / 不要提及技能」
+// 之类引导文案：技能只是运营方提供的参考资料，直接作为正文注入即可，
+// 避免模型被引导去“使用技能/调用能力”。
+//
 // maxChars 是整块注入的字符上限（按 rune 计），0 或负数表示不限制。
 func BuildSkillsPrompt(items []SkillConfigLike, maxChars int) string {
 	blocks := make([]string, 0, len(items))
@@ -39,7 +40,7 @@ func BuildSkillsPrompt(items []SkillConfigLike, maxChars int) string {
 	if len(blocks) == 0 {
 		return ""
 	}
-	block := SkillsPromptHeader + "\n\n" + strings.Join(blocks, "\n\n")
+	block := strings.Join(blocks, "\n\n")
 	if maxChars > 0 {
 		block = truncateRunes(block, maxChars)
 	}

internal/promptcompat/skills_test.go

@@ -26,8 +26,9 @@ func TestBuildSkillsPromptFormat(t *testing.T) {
 		{ID: "sql-report", Name: "SQL 报表", Description: "按固定口径写 SQL", Body: "# 说明\n先对齐口径"},
 	}
 	block := BuildSkillsPrompt(items, 0)
-	if !strings.Contains(block, SkillsPromptHeader) {
-		t.Fatalf("expected header in block, got %q", block)
+	// 引导文案已移除：块里只应出现技能正文与结构化标签。
+	if strings.Contains(block, "适用于当前任务时请遵循") {
+		t.Fatalf("expected no skill guidance header, got %q", block)
 	}
 	if !strings.Contains(block, `<skill id="sql-report" name="SQL 报表">`) {
 		t.Fatalf("expected skill open tag, got %q", block)
@@ -117,7 +118,7 @@ func TestApplySkillsToRequestIsIdempotent(t *testing.T) {
 	block := BuildSkillsPrompt([]SkillConfigLike{{ID: "a", Body: "body"}}, 0)
 	once := ApplySkillsToRequest(stdReq, block)
 	twice := ApplySkillsToRequest(once, block)
-	if strings.Count(twice.FinalPrompt, SkillsPromptHeader) != 1 {
+	if strings.Count(twice.FinalPrompt, `<skill id="a">`) != 1 {
 		t.Fatalf("expected single injection, got %q", twice.FinalPrompt)
 	}
 }

internal/promptcompat/tool_prompt.go

@@ -1,119 +1,51 @@
 package promptcompat
 
 import (
-	"encoding/json"
-	"fmt"
 	"strings"
-	"unicode"
 
 	"ds2api/internal/toolcall"
 )
 
+// CurrentToolsContextFilename 保留历史文件名常量：即使当前不再往 prompt 注入
+// 工具说明，旧的对话记录里仍可能出现这个名字。
 const CurrentToolsContextFilename = "context_tools.txt"
 
-const toolsTranscriptTitle = "# 可用工具说明"
-const toolsTranscriptSummary = "以下是本轮请求可用的工具、用途与参数定义；调用工具时严格使用这里的工具名与参数。"
+// 工具调用在上游（DeepSeek）会被风控识别，而且高频调用很容易触发限速，
+// 实测不可行。因此 prompt 侧不再输出任何「可用工具 / 调用格式 / 必须调用」
+// 之类的引导文案：既不生成工具说明文件，也不生成调用格式说明。
+//
+// 这里仍然保留工具名提取，因为响应侧的 tool_call 解析（客户端明确要求时）
+// 需要知道本轮声明了哪些工具；prompt 里则完全不提。
 
-type toolPromptParts struct {
-	Descriptions string
-	Instructions string
-	Names        []string
-}
-
-func injectToolPrompt(messages []map[string]any, tools []any, policy ToolChoicePolicy) ([]map[string]any, []string) {
-	return injectToolPromptWithDescriptions(messages, tools, policy, true)
+// BuildOpenAIToolsContextTranscript 现在恒返回空串（不再生成工具说明文件），
+// 只返回提取到的工具名，供上层判断可用工具集合。
+func BuildOpenAIToolsContextTranscript(toolsRaw any, policy ToolChoicePolicy) (string, []string) {
+	return "", toolNamesForPolicy(toolsRaw, policy)
 }
 
-func injectToolPromptInstructionsOnly(messages []map[string]any, tools []any, policy ToolChoicePolicy) ([]map[string]any, []string) {
-	return injectToolPromptWithDescriptions(messages, tools, policy, false)
+// BuildOpenAIToolPromptInstructions 现在恒返回空串（不再注入工具调用引导），
+// 只返回提取到的工具名。
+func BuildOpenAIToolPromptInstructions(toolsRaw any, policy ToolChoicePolicy) (string, []string) {
+	return "", toolNamesForPolicy(toolsRaw, policy)
 }
 
-func injectToolPromptWithDescriptions(messages []map[string]any, tools []any, policy ToolChoicePolicy, includeDescriptions bool) ([]map[string]any, []string) {
+// injectToolPrompt 不再向消息里注入任何工具引导，只回收工具名。
+func injectToolPrompt(messages []map[string]any, tools []any, policy ToolChoicePolicy) ([]map[string]any, []string) {
 	return messages, extractToolNames(tools, policy)
 }
 
-func buildToolPromptParts(tools []any, policy ToolChoicePolicy) toolPromptParts {
-	toolSchemas := make([]string, 0, len(tools))
-	names := make([]string, 0, len(tools))
-	isAllowed := func(name string) bool {
-		if strings.TrimSpace(name) == "" {
-			return false
-		}
-		if len(policy.Allowed) == 0 {
-			return true
-		}
-		_, ok := policy.Allowed[name]
-		return ok
-	}
-
-	for _, t := range tools {
-		tool, ok := t.(map[string]any)
-		if !ok {
-			continue
-		}
-		name, desc, schema := toolcall.ExtractToolMeta(tool)
-		name = strings.TrimSpace(name)
-		if !isAllowed(name) {
-			continue
-		}
-		names = append(names, name)
-		if desc == "" {
-			desc = "No description available"
-		}
-		b, _ := json.Marshal(schema)
-		toolSchemas = append(toolSchemas, fmt.Sprintf("Tool: %s\nDescription: %s\nParameters: %s", name, desc, string(b)))
-	}
-	if len(toolSchemas) == 0 {
-		return toolPromptParts{Names: names}
-	}
-	descriptions := "You have access to these tools:\n\n" + strings.Join(toolSchemas, "\n\n")
-	instructions := toolcall.BuildToolCallInstructions(names)
-	if hasReadLikeTool(names) {
-		instructions += "\n\nRead-tool cache guard: If a Read/read_file-style tool result says the file is unchanged, already available in history, should be referenced from previous context, or otherwise provides no file body, treat that result as missing content. Do not repeatedly call the same read request for that missing body. Request a full-content read if the tool supports it, or tell the user that the file contents need to be provided again."
-	}
-	if policy.Mode == ToolChoiceRequired {
-		instructions += "\n7) For this response, you MUST call at least one tool from the allowed list."
-	}
-	if policy.Mode == ToolChoiceForced && strings.TrimSpace(policy.ForcedName) != "" {
-		instructions += "\n7) For this response, you MUST call exactly this tool name: " + strings.TrimSpace(policy.ForcedName)
-		instructions += "\n8) Do not call any other tool."
-	}
-	return toolPromptParts{
-		Descriptions: descriptions,
-		Instructions: instructions,
-		Names:        names,
-	}
-}
-
-func BuildOpenAIToolsContextTranscript(toolsRaw any, policy ToolChoicePolicy) (string, []string) {
-	tools, ok := toolsRaw.([]any)
-	if !ok || len(tools) == 0 || policy.IsNone() {
-		return "", nil
-	}
-	parts := buildToolPromptParts(tools, policy)
-	if strings.TrimSpace(parts.Descriptions) == "" {
-		return "", parts.Names
-	}
-	var b strings.Builder
-	b.WriteString(toolsTranscriptTitle)
-	b.WriteString("\n")
-	b.WriteString(toolsTranscriptSummary)
-	b.WriteString("\n\n")
-	b.WriteString(strings.TrimSpace(parts.Descriptions))
-	b.WriteString("\n")
-	return b.String(), parts.Names
+// injectToolPromptInstructionsOnly 与 injectToolPrompt 行为一致：
+// 工具说明与调用引导都已移除，两者不再有区别。
+func injectToolPromptInstructionsOnly(messages []map[string]any, tools []any, policy ToolChoicePolicy) ([]map[string]any, []string) {
+	return messages, extractToolNames(tools, policy)
 }
 
-func BuildOpenAIToolPromptInstructions(toolsRaw any, policy ToolChoicePolicy) (string, []string) {
+func toolNamesForPolicy(toolsRaw any, policy ToolChoicePolicy) []string {
 	tools, ok := toolsRaw.([]any)
 	if !ok || len(tools) == 0 || policy.IsNone() {
-		return "", nil
-	}
-	parts := buildToolPromptParts(tools, policy)
-	if strings.TrimSpace(parts.Instructions) == "" {
-		return "", parts.Names
+		return nil
 	}
-	return strings.TrimSpace(parts.Instructions), parts.Names
+	return extractToolNames(tools, policy)
 }
 
 func extractToolNames(tools []any, policy ToolChoicePolicy) []string {
@@ -138,23 +70,3 @@ func extractToolNames(tools []any, policy ToolChoicePolicy) []string {
 	}
 	return names
 }
-
-func hasReadLikeTool(names []string) bool {
-	for _, name := range names {
-		switch normalizeToolNameForGuard(name) {
-		case "read", "readfile":
-			return true
-		}
-	}
-	return false
-}
-
-func normalizeToolNameForGuard(name string) string {
-	var b strings.Builder
-	for _, r := range strings.ToLower(strings.TrimSpace(name)) {
-		if unicode.IsLetter(r) || unicode.IsDigit(r) {
-			b.WriteRune(r)
-		}
-	}
-	return b.String()
-}