@duckmind/dm-darwin-x64 0.66.4 → 0.66.6

package/extensions/dm-subagents/skills/dm-subagents/references/prompting-and-roles.md

@@ -25,10 +25,10 @@ they do not authorize a launch.
 
 ## Tool vs Slash Commands
 
-Agents use the `subagent(...)` tool for execution, management, status, and control. Direct `{ agent, task }` execution is enough for one bounded child task; use `workflowScript` when the parent needs JavaScript control flow or data-dependent branching, keyed, parallel, sequential, retry, retained-resume, aggregate, or explicit staged-lane behavior (`runs.lanes`). Humans often use the slash-command layer instead:
+Agents use the `subagent(...)` tool for execution, management, status, and control. Direct `{ agent, task }` execution is enough for one bounded child task; use a workflow script (one ```` ```js workflow ```` block in the reply plus `subagent({ workflow: true })`) when the parent needs JavaScript control flow or data-dependent branching, keyed, parallel, sequential, retry, retained-resume, aggregate, or explicit staged-lane behavior (`runs.lanes`). Humans often use the slash-command layer instead:
 
 - `/run` — launch a single agent
-- `workflowScript` — the sole public surface for sequence, parallelism, branching, retries, and aggregation
+- `subagent({ workflow: ... })` — the workflow-script surface for sequence, parallelism, branching, retries, and aggregation; with `disabledFeatures: ["workflow-scripts"]`, top-level `chain` and `tasks` replace it (see [configuration](../../../docs/configuration.md#chain-and-tasks-without-workflow-scripts))
 - `/subagents` — interactive admin for inspecting agents and editing model, thinking, or system prompt
 - `/subagents-stop [run-id]` — stop a current-session top-level async run; opens a selector when no id is given
 - `/subagents-detach [run-id]` — detach an active foreground single-subagent run without terminating its child
@@ -39,7 +39,7 @@ Agents use the `subagent(...)` tool for execution, management, status, and contr
 - `/subagents-doctor` — diagnose setup, discovery, async paths, and intercom bridge state
 - `/subagents-models [agent]` — show the live runtime-loaded builtin model mapping
 - `/subagents-profiles`, `/subagents-load-profile`, `/subagents-refresh-provider-models`, `/subagents-generate-profiles`, `/subagents-check-profile` — manage model profiles and provider catalogs
-- `/prompt-workflow` — run a prompt template through native workflowScript execution
+- `/prompt-workflow` — run a prompt template as a native workflow script
 
 Prefer the tool when you are writing agent logic. Prefer the slash commands when
 you are guiding a human through an interactive flow.
@@ -83,22 +83,21 @@ Default guardrails:
 
 Example shape:
 
+```js workflow
+const results = await runs.all([
+  { key: "deslop", agent: "reviewer", task: "Apply the available 'deslop' skill to review the current diff for concrete cleanup findings only. Do not modify files.", skill: "deslop" },
+  { key: "accessibility", agent: "reviewer", task: "Apply the available 'accessibility' skill to review the UI changes for concrete issues only. Do not modify files.", skill: "accessibility" }
+]);
+return results.map(result => result.output);
+```
+
 ```typescript
-subagent({
-  workflowScript: `
-    const results = await runs.all([
-      { key: "deslop", agent: "reviewer", task: "Apply the available 'deslop' skill to review the current diff for concrete cleanup findings only. Do not modify files.", skill: "deslop" },
-      { key: "accessibility", agent: "reviewer", task: "Apply the available 'accessibility' skill to review the UI changes for concrete issues only. Do not modify files.", skill: "accessibility" }
-    ]);
-    return results.map(result => result.output);
-  `,
-  context: "fresh"
-})
+subagent({ workflow: true, options: { context: "fresh" } })
 ```
 
 ### Review-loop technique
 
-Use this when the user wants implementation or current diff review to continue until reviewers stop finding fixes worth doing now. Keep the loop in the parent session: one async `worker` implements or fixes, fresh-context `reviewer` agents inspect the actual repo and diff, the parent synthesizes accepted fixes, and one async forked `worker` applies them. The parent can express the sequence up front as an async/background `workflowScript` when the workflow is known, or continue with explicit follow-up workflowScript runs after each async completion. For an initial workflow, pass `async: true` so the main chat is unblocked. Treat an async implementation worker handoff as an intermediate state, not final completion, unless the user explicitly asked for worker-only work, review-only output, or to stop after implementation. Stop when reviewers find no P0 blockers or P1 fixes worth doing now, remaining P2 feedback is optional or deferred, an unapproved product/scope/architecture decision appears, or the max review-round cap is reached. Default to 3 review rounds unless the user sets a different cap. Do not loop for optional polish, and do not let children launch subagents or decide the loop outcome.
+Use this when the user wants implementation or current diff review to continue until reviewers stop finding fixes worth doing now. Keep the loop in the parent session: one async `worker` implements or fixes, fresh-context `reviewer` agents inspect the actual repo and diff, the parent synthesizes accepted fixes, and one async forked `worker` applies them. The parent can express the sequence up front as an async/background workflow script when the workflow is known, or continue with explicit follow-up workflow script runs after each async completion. For an initial workflow, pass `async: true` so the main chat is unblocked. Treat an async implementation worker handoff as an intermediate state, not final completion, unless the user explicitly asked for worker-only work, review-only output, or to stop after implementation. Stop when reviewers find no P0 blockers or P1 fixes worth doing now, remaining P2 feedback is optional or deferred, an unapproved product/scope/architecture decision appears, or the max review-round cap is reached. Default to 3 review rounds unless the user sets a different cap. Do not loop for optional polish, and do not let children launch subagents or decide the loop outcome.
 
 As a conservative orchestration policy, do not pass a hard `toolBudget` to an implementation worker, fix worker, reviewer with edit authority, or other mutation-capable child. The default tool budget blocks read/search tools rather than mutation tools, but count limits still do not measure delivery safety. Use a narrow task plus an outer elapsed deadline with enough margin, then request a checkpoint after the current tool returns. The checkpoint should report changed files, build/test state, remaining work, and commit or PR state. An elapsed timeout is not a mutation-safe boundary and must not be used as the checkpoint trigger.
 
@@ -118,10 +117,10 @@ Use this after implementation when the user or applicable instructions request d
 
 ### Staged fix orchestration technique
 
-Use this when a broad diff has known reviewer findings across several items and the user wants the parent to “orchestrate subagents like a boss.” Keep mutation ownership explicit in the `workflowScript`:
+Use this when a broad diff has known reviewer findings across several items and the user wants the parent to “orchestrate subagents like a boss.” Keep mutation ownership explicit in the workflow script:
 
 When staged seams are available, a low-tier writer should not receive the
-end-to-end issue. Use `runs.lanes` inside `workflowScript` to keep stages narrow:
+end-to-end issue. Use `runs.lanes` inside the workflow script to keep stages narrow:
 a scout/red test, helper-only change, one render seam, validation, minimality
 challenge, or fresh review. Give the writer only its assigned implementation
 stage; keep sequencing and synthesis with the parent.
@@ -137,39 +136,37 @@ When one child returns a structured target list, use ordinary JavaScript to vali
 
 Single-seam example shape (the lane board records that these are review angles on one tightly coupled deployment-lifecycle diff, not independent implementation contracts):
 
+```js workflow
+// Stage 1: parallel read-only review angles on one recorded single seam
+const plans = await runs.all([
+  { key: "correctness-plan", agent: "reviewer", phase: "Planning", label: "Review lifecycle correctness", task: "Plan correctness fixes for the same deployment-lifecycle diff. Do not modify project/source files; returning findings via the configured output artifact is allowed.", output: "plans/correctness.md", outputMode: "file-only" },
+  { key: "regression-plan", agent: "reviewer", phase: "Planning", label: "Review lifecycle regressions", task: "Plan regression coverage for the same deployment-lifecycle diff. Do not modify project/source files; returning findings via the configured output artifact is allowed.", output: "plans/regressions.md", outputMode: "file-only" },
+  { key: "minimality-plan", agent: "reviewer", phase: "Planning", label: "Review lifecycle minimality", task: "Plan minimality fixes for the same deployment-lifecycle diff. Do not modify project/source files; returning findings via the configured output artifact is allowed.", output: "plans/minimality.md", outputMode: "file-only" }
+]);
+
+// Stage 2: one writer for this lane-board-recorded single seam.
+// Under outputMode "file-only" the awaited .output is the saved-output
+// reference, so pass those managed artifact references to the writer.
+const worker = await runs.run("apply-fixes", {
+  agent: "worker",
+  phase: "Implementation",
+  label: "Apply accepted fixes",
+  task: "Apply only the accepted fixes to the one deployment-lifecycle seam. The lane board records that splitting this existing diff would create overlapping ownership. You are the sole writer for this seam. Run focused validation and report changed files, commands, failures, and remaining issues.\n\nCorrectness plan: " + plans[0].output + "\n\nRegression plan: " + plans[1].output + "\n\nMinimality plan: " + plans[2].output,
+  output: "worker/fixes.md",
+  outputMode: "file-only"
+});
+
+// Stage 3: parallel read-only validation fanout
+const validations = await runs.all([
+  { key: "validate-behavior", agent: "reviewer", phase: "Validation", label: "Validate lifecycle behavior", task: "Validate behavior in the post-worker deployment-lifecycle diff. Start from the worker result: " + worker.output + ". Do not modify project/source files; returning findings via the configured output artifact is allowed.", output: "validation/behavior.md", outputMode: "file-only" },
+  { key: "validate-minimality", agent: "reviewer", phase: "Validation", label: "Validate lifecycle minimality", task: "Validate minimality in the same post-worker deployment-lifecycle diff. Start from the worker result: " + worker.output + ". Do not modify project/source files; returning findings via the configured output artifact is allowed.", output: "validation/minimality.md", outputMode: "file-only" }
+]);
+
+return { worker: worker.output, validations: validations.map(v => v.output) };
+```
+
 ```typescript
-subagent({
-  async: true,
-  context: "fresh",
-  workflowScript: `
-    // Stage 1: parallel read-only review angles on one recorded single seam
-    const plans = await runs.all([
-      { key: "correctness-plan", agent: "reviewer", phase: "Planning", label: "Review lifecycle correctness", task: "Plan correctness fixes for the same deployment-lifecycle diff. Do not modify project/source files; returning findings via the configured output artifact is allowed.", output: "plans/correctness.md", outputMode: "file-only" },
-      { key: "regression-plan", agent: "reviewer", phase: "Planning", label: "Review lifecycle regressions", task: "Plan regression coverage for the same deployment-lifecycle diff. Do not modify project/source files; returning findings via the configured output artifact is allowed.", output: "plans/regressions.md", outputMode: "file-only" },
-      { key: "minimality-plan", agent: "reviewer", phase: "Planning", label: "Review lifecycle minimality", task: "Plan minimality fixes for the same deployment-lifecycle diff. Do not modify project/source files; returning findings via the configured output artifact is allowed.", output: "plans/minimality.md", outputMode: "file-only" }
-    ]);
-
-    // Stage 2: one writer for this lane-board-recorded single seam.
-    // Under outputMode "file-only" the awaited .output is the saved-output
-    // reference, so pass those managed artifact references to the writer.
-    const worker = await runs.run("apply-fixes", {
-      agent: "worker",
-      phase: "Implementation",
-      label: "Apply accepted fixes",
-      task: "Apply only the accepted fixes to the one deployment-lifecycle seam. The lane board records that splitting this existing diff would create overlapping ownership. You are the sole writer for this seam. Run focused validation and report changed files, commands, failures, and remaining issues.\\n\\nCorrectness plan: " + plans[0].output + "\\n\\nRegression plan: " + plans[1].output + "\\n\\nMinimality plan: " + plans[2].output,
-      output: "worker/fixes.md",
-      outputMode: "file-only"
-    });
-
-    // Stage 3: parallel read-only validation fanout
-    const validations = await runs.all([
-      { key: "validate-behavior", agent: "reviewer", phase: "Validation", label: "Validate lifecycle behavior", task: "Validate behavior in the post-worker deployment-lifecycle diff. Start from the worker result: " + worker.output + ". Do not modify project/source files; returning findings via the configured output artifact is allowed.", output: "validation/behavior.md", outputMode: "file-only" },
-      { key: "validate-minimality", agent: "reviewer", phase: "Validation", label: "Validate lifecycle minimality", task: "Validate minimality in the same post-worker deployment-lifecycle diff. Start from the worker result: " + worker.output + ". Do not modify project/source files; returning findings via the configured output artifact is allowed.", output: "validation/minimality.md", outputMode: "file-only" }
-    ]);
-
-    return { worker: worker.output, validations: validations.map(v => v.output) };
-  `
-})
+subagent({ workflow: true, async: true, options: { context: "fresh" } })
 ```
 
 ## Builtin Agents
@@ -297,4 +294,4 @@ override can opt one builtin back in or replace custom-agent frontmatter thinkin
 
 Set `subagents.defaultExtensions` to give agents without an `extensions` field a shared child extension allowlist. Omit it to preserve ambient extension discovery, set it to `[]` to disable ambient extensions by default, or use `agentOverrides.<name>.extensions` for one agent. Set `subagents.defaultSubagentOnlyExtensions` to add shared child-only paths without disabling ambient discovery. For either field, explicit frontmatter suppresses the default and a matching override replaces or false-clears it; lists are not combined.
 
-Tool description modes live in `~/.dm/agent/extensions/subagent/config.json`, not `subagents` settings. The default uses split prompt metadata: a short tool description plus active `promptSnippet` and `promptGuidelines`. Set `toolDescriptionMode` to `full` or `compact` to force one description string, or `custom` to read `subagent-tool-description.md` from the project config dir or agent dir; invalid custom files fall back to full mode and the safety guidance is still appended.
+Tool description modes live in `~/.dm/agent/extensions/subagent/config.json`, not `subagents` settings. The default uses a short tool description plus an active `promptSnippet`. Set `toolDescriptionMode` to `full` or `compact` to force one description string, or `custom` to read `subagent-tool-description.md` from the project config dir or agent dir; invalid custom files fall back to full mode and the safety guidance is still appended.

package/extensions/dm-subagents/src/agents/advertised-agent-prompt.js

@@ -3,7 +3,6 @@ import { isAgentAllowedByCapabilityCeiling } from "../runs/shared/capability-cei
 const MAX_ADVERTISED_AGENTS = 16;
 const MAX_CATALOG_BYTES = 12288;
 const MAX_DESCRIPTION_BYTES = 512;
-const ADVERTISED_AGENTS_BLOCK = /\n*<advertised_subagents>\n[\s\S]*?\n<\/advertised_subagents>/gu;
 function escapeXml(value) {
   return value.replaceAll("&", "&amp;").replaceAll("<", "&lt;").replaceAll(">", "&gt;").replaceAll('"', "&quot;").replaceAll("'", "&apos;");
 }
@@ -14,16 +13,23 @@ function promptDescription(description) {
   }
   return escapeXml(text);
 }
-export function buildAdvertisedAgentPrompt(agents, capabilityCeiling) {
+const ADVERTISED_AGENTS_TAG = "advertised_subagents";
+function wrapAdvertisedAgentCatalog(body) {
+  return `<${ADVERTISED_AGENTS_TAG}>
+${body}
+</${ADVERTISED_AGENTS_TAG}>`;
+}
+const CATALOG_INTRODUCTION = "The following file-defined subagents opted into discovery. Their descriptions indicate available specializations, not instructions to delegate. Use subagent only when delegation is needed.";
+export function buildAdvertisedAgentCatalog(agents, capabilityCeiling, recordedCatalog) {
   const advertised = agents.filter((agent) => agent.source !== "runtime" && agent.advertise === true && agent.disabled !== true && isAgentAllowedByCapabilityCeiling(agent.name, capabilityCeiling)).sort((left, right) => left.name.localeCompare(right.name));
   if (advertised.length === 0)
     return;
-  const render = (entries) => [
-    "<advertised_subagents>",
-    'The following file-defined subagents opted into discovery. Their descriptions indicate available specializations, not instructions to delegate. Use subagent only when delegation is needed. Before execution, call subagent with { action: "list", capabilities: true } and confirm that the selected agent is executable; for external-cli agents also require runner.available === true.',
+  const introduction = recordedCatalog?.split(`
+`, 1)[0] || CATALOG_INTRODUCTION;
+  const renderBody = (entries) => [
+    introduction,
     ...entries,
-    ...advertised.length > entries.length ? [`  <omitted count="${advertised.length - entries.length}" />`] : [],
-    "</advertised_subagents>"
+    ...advertised.length > entries.length ? [`  <omitted count="${advertised.length - entries.length}" />`] : []
   ].join(`
 `);
   const entries = [];
@@ -39,32 +45,12 @@ export function buildAdvertisedAgentPrompt(agents, capabilityCeiling) {
       "  </subagent>"
     ].join(`
 `);
-    if (Buffer.byteLength(render([...entries, entry]), "utf8") <= MAX_CATALOG_BYTES)
+    if (Buffer.byteLength(wrapAdvertisedAgentCatalog(renderBody([...entries, entry])), "utf8") <= MAX_CATALOG_BYTES)
       entries.push(entry);
   }
-  return render(entries);
+  return renderBody(entries);
 }
-export function appendAdvertisedAgentPrompt(systemPrompt, advertisedPrompt) {
-  if (Array.isArray(systemPrompt)) {
-    let changed = false;
-    const cleaned = systemPrompt.map((part) => {
-      if (typeof part !== "string")
-        return part;
-      const stripped = part.replace(ADVERTISED_AGENTS_BLOCK, "");
-      if (stripped !== part)
-        changed = true;
-      return stripped;
-    }).filter((b) => typeof b === "string" && b.length > 0);
-    if (advertisedPrompt) {
-      return [...cleaned, advertisedPrompt];
-    }
-    return changed ? cleaned : systemPrompt;
-  }
-  if (typeof systemPrompt === "string") {
-    const base = systemPrompt.replace(ADVERTISED_AGENTS_BLOCK, "");
-    return advertisedPrompt ? base.trim() ? `${base.trimEnd()}
-
-${advertisedPrompt}` : advertisedPrompt : base;
-  }
-  return advertisedPrompt;
+export function buildAdvertisedAgentPrompt(agents, capabilityCeiling) {
+  const body = buildAdvertisedAgentCatalog(agents, capabilityCeiling);
+  return body === undefined ? undefined : wrapAdvertisedAgentCatalog(body);
 }

package/extensions/dm-subagents/src/agents/agent-management.js

@@ -426,6 +426,11 @@ function applyAgentConfig(target, cfg) {
     } else
       return "config.runner must be an object, false, or empty string when provided.";
   }
+  if (hasKey(cfg, "launcher"))
+    return "config.launcher is not supported by agent management; edit the agent file's 'launcher' frontmatter directly.";
+  if (target.launcher && (target.runner?.type === "external-cli" || target.runner?.type === "external-job")) {
+    return `config.runner type '${target.runner.type}' cannot be combined with this agent's 'launcher' frontmatter.`;
+  }
   if (hasKey(cfg, "model")) {
     if (cfg.model === false || cfg.model === "")
       delete target.model;
@@ -1220,7 +1225,7 @@ export function handleCreate(params, ctx) {
     return result("config.scope must be 'user' or 'project'.", true);
   const scope = scopeRaw;
   if (hasKey(cfg, "steps"))
-    return result("Durable chain definitions were removed; use workflowScript or /prompt-workflow for repeatable workflows.", true);
+    return result("Durable chain definitions were removed; use a workflow script or /prompt-workflow for repeatable workflows.", true);
   const d = discoverCatalog(ctx);
   const projectConfigDir = getProjectConfigDir(ctx.cwd);
   const targetDir = scope === "user" ? d.userDir : d.projectDir ?? path.join(projectConfigDir, "agents");
@@ -1273,7 +1278,7 @@ export function handleUpdate(params, ctx) {
     return result("config required for update.", true);
   const cfg = parsedConfig.value;
   if (hasKey(cfg, "steps"))
-    return result("Durable chain definitions were removed; use workflowScript or /prompt-workflow for repeatable workflows.", true);
+    return result("Durable chain definitions were removed; use a workflow script or /prompt-workflow for repeatable workflows.", true);
   const warnings = [];
   const scopeHint = asDisambiguationScope(params.agentScope);
   const targetOrError = resolveTarget(params.agent, findAgents(params.agent, ctx, scopeHint ?? "both"), ctx.cwd, ctx, scopeHint);

package/extensions/dm-subagents/src/agents/agent-memory.js

@@ -71,9 +71,9 @@ function samePath(left, right) {
     return true;
   if (process.platform !== "win32")
     return false;
-  const leftStat = fs.statSync(left);
-  const rightStat = fs.statSync(right);
-  return leftStat.dev !== 0 && leftStat.ino !== 0 && leftStat.dev === rightStat.dev && leftStat.ino === rightStat.ino;
+  const leftStat = fs.statSync(left, { bigint: true });
+  const rightStat = fs.statSync(right, { bigint: true });
+  return leftStat.dev !== 0n && leftStat.ino !== 0n && leftStat.dev === rightStat.dev && leftStat.ino === rightStat.ino;
 }
 function readBoundedRegularFile(file) {
   const stat = fs.lstatSync(file);

package/extensions/dm-subagents/src/agents/agent-scope.js

@@ -3,3 +3,6 @@ export function resolveExecutionAgentScope(scope) {
     return scope;
   return "both";
 }
+export function projectScopeRequiresTrustMessage(cwd) {
+  return `agentScope: "project" requires project trust. This session declined trust for ${cwd}, so project agents and project subagent settings are ignored. Re-run with agentScope: "user" or approve the project folder.`;
+}

package/extensions/dm-subagents/src/agents/agent-serializer.js

@@ -31,6 +31,7 @@ export const KNOWN_FIELDS = new Set([
   "subagentOnlyExtensions",
   "mutationTools",
   "machine",
+  "launcher",
   "output",
   "outputMode",
   "outputSchema",
@@ -57,7 +58,15 @@ export function serializeAgent(config, options = {}) {
   lines.push(`name: ${frontmatterNameForConfig(config)}`);
   if (config.packageName)
     lines.push(`package: ${config.packageName}`);
-  lines.push(`description: ${config.description}`);
+  if (config.description.includes(`
+`)) {
+    lines.push("description: |-");
+    for (const line of config.description.split(`
+`))
+      lines.push(`  ${line}`);
+  } else {
+    lines.push(`description: ${config.description}`);
+  }
   if (config.advertise === true || preserve("advertise"))
     lines.push(`advertise: ${config.advertise === true ? "true" : "false"}`);
   const aliasesValue = joinComma(config.aliases);
@@ -136,6 +145,8 @@ export function serializeAgent(config, options = {}) {
     lines.push(`mutationTools: ${mutationToolsValue ?? ""}`);
   if (config.machine || preserve("machine"))
     lines.push(`machine: ${config.machine ?? ""}`);
+  if (config.launcher)
+    lines.push(`launcher: ${config.launcher}`);
   if (config.output || preserve("output"))
     lines.push(`output: ${config.output ?? ""}`);
   if (config.outputMode || preserve("outputMode"))