dominds 0.6.2 → 0.6.4

package/dist/tools/pending-tellask-reminder.js

@@ -0,0 +1,185 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.pendingTellaskReminderOwner = void 0;
+exports.syncPendingTellaskReminderState = syncPendingTellaskReminderState;
+const persistence_1 = require("../persistence");
+const runtime_language_1 = require("../shared/runtime-language");
+const time_1 = require("../shared/utils/time");
+function isRecord(value) {
+    return typeof value === 'object' && value !== null;
+}
+function isPendingTellaskReminderMeta(value) {
+    if (!isRecord(value))
+        return false;
+    if (value.kind !== 'pending_tellask')
+        return false;
+    if (typeof value.pendingCount !== 'number')
+        return false;
+    if (typeof value.pendingSignature !== 'string')
+        return false;
+    if (typeof value.updatedAt !== 'string')
+        return false;
+    return true;
+}
+function callTypeLabel(language, callType) {
+    if (language === 'zh') {
+        if (callType === 'A')
+            return '回问诉请';
+        if (callType === 'B')
+            return '长线诉请';
+        return '一次性诉请';
+    }
+    if (callType === 'A')
+        return 'TellaskBack';
+    if (callType === 'B')
+        return 'Tellask Session';
+    return 'Fresh Tellask';
+}
+function summarizeTellaskHead(tellaskHead) {
+    const normalized = tellaskHead.replace(/\s+/g, ' ').trim();
+    if (!normalized)
+        return '(empty tellaskHead)';
+    const max = 140;
+    if (normalized.length <= max)
+        return normalized;
+    return `${normalized.slice(0, max).trimEnd()}...`;
+}
+function makePendingSignature(pending) {
+    return pending
+        .map((p) => [
+        p.subdialogId,
+        p.targetAgentId,
+        p.callType,
+        p.tellaskSession ?? '',
+        summarizeTellaskHead(p.tellaskHead),
+    ].join('|'))
+        .sort()
+        .join('||');
+}
+function buildReminderMeta(pending) {
+    return {
+        kind: 'pending_tellask',
+        pendingCount: pending.length,
+        pendingSignature: makePendingSignature(pending),
+        updatedAt: (0, time_1.formatUnifiedTimestamp)(new Date()),
+    };
+}
+function buildReminderContent(language, pending) {
+    const heading = language === 'zh' ? '⏳ 进行中诉请（自动维护）' : '⏳ In-flight Tellasks (auto-managed)';
+    const summary = language === 'zh'
+        ? '以下诉请仍在执行中；除这些条目外，当前没有其它仍在执行中的诉请。'
+        : 'Only the Tellasks listed below are still in flight; besides them, no other Tellasks are currently executing.';
+    const lines = pending.map((p, idx) => {
+        const base = language === 'zh'
+            ? `${idx + 1}. @${p.targetAgentId} | ${callTypeLabel(language, p.callType)} | ${summarizeTellaskHead(p.tellaskHead)}`
+            : `${idx + 1}. @${p.targetAgentId} | ${callTypeLabel(language, p.callType)} | ${summarizeTellaskHead(p.tellaskHead)}`;
+        if (!p.tellaskSession)
+            return base;
+        return language === 'zh'
+            ? `${base} | 会话: ${p.tellaskSession}`
+            : `${base} | session: ${p.tellaskSession}`;
+    });
+    return [heading, '', summary, '', ...lines].join('\n');
+}
+function findOwnedReminderIndices(dlg) {
+    const indices = [];
+    for (let i = 0; i < dlg.reminders.length; i++) {
+        if (dlg.reminders[i]?.owner === exports.pendingTellaskReminderOwner) {
+            indices.push(i);
+        }
+    }
+    return indices;
+}
+function assertSingleOwnedReminder(dlg) {
+    const indices = findOwnedReminderIndices(dlg);
+    if (indices.length === 0)
+        return null;
+    if (indices.length === 1)
+        return indices[0] ?? null;
+    throw new Error(`pendingTellask reminder invariant violated: expected <=1 owner reminder, got ${indices.length} (dialog=${dlg.id.valueOf()})`);
+}
+async function loadPendingSubdialogView(dlg) {
+    const pending = await persistence_1.DialogPersistence.loadPendingSubdialogs(dlg.id, dlg.status);
+    return pending.map((p) => ({
+        subdialogId: p.subdialogId,
+        tellaskHead: p.tellaskHead,
+        targetAgentId: p.targetAgentId,
+        callType: p.callType,
+        tellaskSession: p.tellaskSession,
+    }));
+}
+async function withDialogLockIfNeeded(dlg, fn) {
+    if (dlg.isLocked()) {
+        return await fn();
+    }
+    return await dlg.withLock(fn);
+}
+async function syncPendingTellaskReminderState(dlg) {
+    const pending = await loadPendingSubdialogView(dlg);
+    return await withDialogLockIfNeeded(dlg, async () => {
+        const reminderIndex = assertSingleOwnedReminder(dlg);
+        const language = (0, runtime_language_1.getWorkLanguage)();
+        if (pending.length === 0) {
+            if (reminderIndex === null)
+                return false;
+            dlg.deleteReminder(reminderIndex);
+            return true;
+        }
+        const content = buildReminderContent(language, pending);
+        const nextMeta = buildReminderMeta(pending);
+        if (reminderIndex === null) {
+            dlg.addReminder(content, exports.pendingTellaskReminderOwner, nextMeta, 0);
+            return true;
+        }
+        const current = dlg.reminders[reminderIndex];
+        const currentMeta = current?.meta;
+        const unchanged = current?.content === content &&
+            isPendingTellaskReminderMeta(currentMeta) &&
+            currentMeta.pendingSignature === nextMeta.pendingSignature &&
+            currentMeta.pendingCount === nextMeta.pendingCount;
+        if (unchanged)
+            return false;
+        dlg.updateReminder(reminderIndex, content, nextMeta);
+        return true;
+    });
+}
+exports.pendingTellaskReminderOwner = {
+    name: 'pendingTellask',
+    async updateReminder(dlg, reminder) {
+        if (reminder.owner !== exports.pendingTellaskReminderOwner) {
+            return { treatment: 'keep' };
+        }
+        const pending = await loadPendingSubdialogView(dlg);
+        if (pending.length === 0) {
+            return { treatment: 'drop' };
+        }
+        const language = (0, runtime_language_1.getWorkLanguage)();
+        const updatedContent = buildReminderContent(language, pending);
+        const updatedMeta = buildReminderMeta(pending);
+        const unchanged = reminder.content === updatedContent &&
+            isPendingTellaskReminderMeta(reminder.meta) &&
+            reminder.meta.pendingSignature === updatedMeta.pendingSignature &&
+            reminder.meta.pendingCount === updatedMeta.pendingCount;
+        if (unchanged) {
+            return { treatment: 'keep' };
+        }
+        return { treatment: 'update', updatedContent, updatedMeta };
+    },
+    async renderReminder(_dlg, reminder, index) {
+        if (reminder.owner !== exports.pendingTellaskReminderOwner) {
+            const language = (0, runtime_language_1.getWorkLanguage)();
+            return {
+                type: 'transient_guide_msg',
+                role: 'assistant',
+                content: language === 'zh'
+                    ? `系统提醒 #${index + 1}\n\n${reminder.content}`
+                    : `System reminder #${index + 1}\n\n${reminder.content}`,
+            };
+        }
+        return {
+            type: 'transient_guide_msg',
+            role: 'assistant',
+            content: reminder.content,
+        };
+    },
+};

package/dist/tools/plan.js

@@ -66,6 +66,7 @@ exports.updatePlanTool = {
                         step: { type: 'string', description: 'Step description.' },
                         status: {
                             type: 'string',
+                            enum: ['pending', 'in_progress', 'completed'],
                             description: 'One of: pending, in_progress, completed',
                         },
                     },

package/dist/tools/ripgrep.js

@@ -109,13 +109,122 @@ function buildAccessControlGlobs(member) {
     }
     // Taskdocs are encapsulated and forbidden to all general file tools.
     exclude.push('**/*.tsk');
+    exclude.push('**/*.tsk/*');
     exclude.push('**/*.tsk/**');
-    // `.minds/**` is reserved rtws state and is hard-denied for general file tools.
-    // Dedicated `.minds/`-scoped tools (team-mgmt) should be used for managing it.
-    exclude.push('.minds');
-    exclude.push('.minds/**');
+    // `.dialogs/**` at rtws root is reserved runtime persistence state and hard-denied.
+    exclude.push('.dialogs');
+    exclude.push('.dialogs/**');
+    // `.minds/**` is reserved rtws state and hard-denied for general file tools.
+    // Dedicated `.minds/`-scoped tools (team-mgmt) may bypass this with internal_allow_minds=true.
+    if (member.internal_allow_minds !== true) {
+        exclude.push('.minds');
+        exclude.push('.minds/**');
+    }
     return { include, exclude };
 }
+function normalizeRelFromRtwsRoot(relPath) {
+    return relPath.replace(/\\/g, '/').replace(/^\/+/, '');
+}
+function isEncapsulatedTaskPath(relFromRoot) {
+    const normalized = normalizeRelFromRtwsRoot(relFromRoot);
+    return /(^|\/)[^/]+\.tsk(\/|$)/.test(normalized);
+}
+function detectRootReservedPath(relFromRoot) {
+    const normalized = normalizeRelFromRtwsRoot(relFromRoot);
+    if (normalized === '.minds' || normalized.startsWith('.minds/'))
+        return '.minds';
+    if (normalized === '.dialogs' || normalized.startsWith('.dialogs/'))
+        return '.dialogs';
+    return null;
+}
+function detectForbiddenRipgrepSearchPath(member, searchPath) {
+    const cwd = path_1.default.resolve(process.cwd());
+    const abs = path_1.default.resolve(cwd, searchPath);
+    const relFromRoot = path_1.default.relative(cwd, abs);
+    if (isEncapsulatedTaskPath(relFromRoot))
+        return '*.tsk/';
+    const reserved = detectRootReservedPath(relFromRoot);
+    if (!reserved)
+        return null;
+    if (reserved === '.minds' && member.internal_allow_minds === true)
+        return null;
+    return reserved;
+}
+function normalizeGlobToken(glob) {
+    return glob
+        .trim()
+        .replace(/\\/g, '/')
+        .replace(/^!+/, '')
+        .replace(/^\.\/+/, '')
+        .replace(/^\/+/, '');
+}
+function detectForbiddenPathFromGlob(member, glob) {
+    const normalized = normalizeGlobToken(glob);
+    if (normalized === '')
+        return null;
+    if (/(^|\/)[^/]*\.tsk(\/|$)/.test(normalized))
+        return '*.tsk/';
+    if (normalized === '.dialogs' || normalized.startsWith('.dialogs/'))
+        return '.dialogs';
+    if ((normalized === '.minds' || normalized.startsWith('.minds/')) &&
+        member.internal_allow_minds !== true) {
+        return '.minds';
+    }
+    return null;
+}
+function detectForbiddenRipgrepGlobs(member, globs) {
+    for (const glob of globs) {
+        const forbidden = detectForbiddenPathFromGlob(member, glob);
+        if (forbidden)
+            return forbidden;
+    }
+    return null;
+}
+function detectForbiddenRipgrepRawArgs(member, rawRgArgs) {
+    for (let i = 0; i < rawRgArgs.length; i++) {
+        const tok = rawRgArgs[i] ?? '';
+        let globPattern = null;
+        if (tok === '--glob' || tok === '--iglob' || tok === '-g') {
+            const next = rawRgArgs[i + 1];
+            if (typeof next === 'string') {
+                globPattern = next;
+                i += 1;
+            }
+        }
+        else if (tok.startsWith('--glob=')) {
+            globPattern = tok.slice('--glob='.length);
+        }
+        else if (tok.startsWith('--iglob=')) {
+            globPattern = tok.slice('--iglob='.length);
+        }
+        else if (tok.startsWith('-g') && tok.length > 2) {
+            globPattern = tok.slice(2);
+        }
+        if (!globPattern)
+            continue;
+        const forbidden = detectForbiddenPathFromGlob(member, globPattern);
+        if (forbidden)
+            return forbidden;
+    }
+    return null;
+}
+function formatForbiddenSearchPathAccessDeniedYaml(mode, pattern, searchPath, forbiddenPath) {
+    const summary = forbiddenPath === '.minds'
+        ? 'ACCESS_DENIED: `.minds/**` is reserved rtws state for team config/memory/assets. Use `team_mgmt_ripgrep_*` (or other `team_mgmt_*`) for `.minds/**`.'
+        : forbiddenPath === '.dialogs'
+            ? 'ACCESS_DENIED: `.dialogs/**` at rtws root is reserved dialog/runtime persistence and is not searchable by general `ripgrep_*` tools. For Dominds debugging, reproduce under a nested rtws (e.g. `ux-rtws/.dialogs/**`).'
+            : 'ACCESS_DENIED: `*.tsk/` is an encapsulated Taskdoc path and is hard-denied for general `ripgrep_*` tools.';
+    const yaml = [
+        `status: error`,
+        `pattern: ${yamlQuote(pattern)}`,
+        `mode: ${mode}`,
+        `path: ${yamlQuote(searchPath)}`,
+        `error: ACCESS_DENIED`,
+        `reserved_path: ${yamlQuote(forbiddenPath)}`,
+        `summary: ${yamlQuote(summary)}`,
+    ].join('\n');
+    return formatYamlCodeBlock(yaml);
+}
 function defaultBaseOptions() {
     return {
         globs: [],
@@ -184,6 +293,14 @@ async function loadFileLines(relPath) {
     return parts;
 }
 async function runRipgrepFiles(caller, pattern, searchPath, options) {
+    const forbiddenPath = detectForbiddenRipgrepSearchPath(caller, searchPath);
+    if (forbiddenPath) {
+        return formatForbiddenSearchPathAccessDeniedYaml('files', pattern, searchPath, forbiddenPath);
+    }
+    const forbiddenGlob = detectForbiddenRipgrepGlobs(caller, options.globs);
+    if (forbiddenGlob) {
+        return formatForbiddenSearchPathAccessDeniedYaml('files', pattern, searchPath, forbiddenGlob);
+    }
     const args = [...baseRgArgs(options, caller), '--files-with-matches', '--', pattern, searchPath];
     try {
         const { stdoutLines } = await runRgLines(args);
@@ -272,6 +389,14 @@ exports.ripgrepFilesTool = {
     },
 };
 async function runRipgrepCount(caller, pattern, searchPath, options) {
+    const forbiddenPath = detectForbiddenRipgrepSearchPath(caller, searchPath);
+    if (forbiddenPath) {
+        return formatForbiddenSearchPathAccessDeniedYaml('count', pattern, searchPath, forbiddenPath);
+    }
+    const forbiddenGlob = detectForbiddenRipgrepGlobs(caller, options.globs);
+    if (forbiddenGlob) {
+        return formatForbiddenSearchPathAccessDeniedYaml('count', pattern, searchPath, forbiddenGlob);
+    }
     const args = [...baseRgArgs(options, caller), '--count-matches', '--', pattern, searchPath];
     try {
         const { stdoutLines } = await runRgLines(args);
@@ -371,6 +496,14 @@ exports.ripgrepCountTool = {
     },
 };
 async function runRipgrepSnippets(caller, pattern, searchPath, options) {
+    const forbiddenPath = detectForbiddenRipgrepSearchPath(caller, searchPath);
+    if (forbiddenPath) {
+        return formatForbiddenSearchPathAccessDeniedYaml('snippets', pattern, searchPath, forbiddenPath);
+    }
+    const forbiddenGlob = detectForbiddenRipgrepGlobs(caller, options.globs);
+    if (forbiddenGlob) {
+        return formatForbiddenSearchPathAccessDeniedYaml('snippets', pattern, searchPath, forbiddenGlob);
+    }
     const args = [...baseRgArgs(options, caller), '--vimgrep', '--', pattern, searchPath];
     try {
         const { stdoutLines } = await runRgLines(args);
@@ -561,6 +694,14 @@ exports.ripgrepFixedTool = {
 };
 const DISALLOWED_RG_ARGS = new Set(['--pre', '--pre-glob']);
 async function runRipgrepSearch(caller, pattern, searchPath, rawRgArgs) {
+    const forbiddenPath = detectForbiddenRipgrepSearchPath(caller, searchPath);
+    if (forbiddenPath) {
+        return formatForbiddenSearchPathAccessDeniedYaml('snippets', pattern, searchPath, forbiddenPath);
+    }
+    const forbiddenInArgs = detectForbiddenRipgrepRawArgs(caller, rawRgArgs);
+    if (forbiddenInArgs) {
+        return formatForbiddenSearchPathAccessDeniedYaml('snippets', pattern, searchPath, forbiddenInArgs);
+    }
     for (const tok of rawRgArgs) {
         if (DISALLOWED_RG_ARGS.has(tok)) {
             return formatYamlCodeBlock(`status: error\nerror: DISALLOWED_ARG\nsummary: ${yamlQuote(`Disallowed rg arg: ${tok}`)}`);

package/dist/tools/shell-tools.js

@@ -0,0 +1,21 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SHELL_TOOL_NAMES = void 0;
+exports.isShellToolName = isShellToolName;
+exports.listShellSpecialistMemberIds = listShellSpecialistMemberIds;
+exports.SHELL_TOOL_NAMES = ['shell_cmd', 'stop_daemon', 'get_daemon_output'];
+function isShellToolName(name) {
+    return exports.SHELL_TOOL_NAMES.includes(name);
+}
+function listShellSpecialistMemberIds(team) {
+    const out = [];
+    for (const id of team.shellSpecialists) {
+        const member = team.getMember(id);
+        if (!member)
+            continue;
+        if (member.hidden === true)
+            continue;
+        out.push(id);
+    }
+    return out;
+}

package/dist/tools/team-mgmt.js

@@ -2724,7 +2724,7 @@ function renderTeamManual(language) {
                 '风格提醒：保持 `team.yaml` 的可读性。推荐用空行分隔段落/成员块，避免连续多行空行；每次修改后运行 `team_mgmt_validate_team_cfg({})` 以便在 Problems 面板看到错误与风格提醒。',
                 '默认策略（可被用户覆盖）：\n' +
                     '1) 新增成员时，`diligence-push-max` 默认设为 `3`（除非用户明确要求其他值）。\n' +
-                    '2) 切换成员的 LLM `provider/model` 时，应同步切换到与该 provider 习惯匹配的工具集（例如 Codex 风格 vs Dominds 原生工具），除非用户明确要求保留原工具集。',
+                    '2) 切换成员的 LLM `provider/model` 时，默认保留 `ws_read` / `ws_mod` 作为基线；当目标是 `provider: codex` 时，在基线上追加 `codex_style_tools`（而不是替代），除非用户明确要求其他组合。',
                 '成员配置通过 prototype 继承 `member_defaults`（省略字段会继承默认值）。',
                 '修改 provider/model 前请务必确认该 provider 可用（至少 env var 已配置）。可用 `team_mgmt_check_provider({ provider_key: \"<providerKey>\", model: \"\", all_models: false, live: false, max_models: 0 })` 做检查，避免把系统刷成板砖。',
                 '想快速查看有哪些 provider / models / model_param_options：用 `team_mgmt_list_providers({})` 和 `team_mgmt_list_models({ provider_pattern: \"*\", model_pattern: \"*\" })`。',
@@ -2784,7 +2784,7 @@ function renderTeamManual(language) {
             'Per-role default models: set global defaults via `member_defaults.provider/model`, then override `members.<id>.provider/model` per member (e.g. use `gpt-5.2` by default, and `gpt-5.2-codex` for code-writing members).',
             'Model params (e.g. `reasoning_effort` / `verbosity` / `temperature`) must be nested under `member_defaults.model_params.codex.*` or `members.<id>.model_params.codex.*` (for the built-in `codex` provider). Do not put them directly under `member_defaults`/`members.<id>` root.',
             'Style reminder: keep `team.yaml` readable. Prefer single blank lines between sections/member blocks; avoid long runs of blank lines. Run `team_mgmt_validate_team_cfg({})` after edits to surface errors and style warnings in the Problems panel.',
-            'Default policy (override only when requested):\n1) When adding a member, set `diligence-push-max` to `3` unless the user explicitly asks otherwise.\n2) When switching a member’s LLM `provider/model`, also switch to the provider-appropriate toolsets (Codex-style vs Dominds-native) unless the user explicitly asks to keep the existing toolsets.',
+            'Default policy (override only when requested):\n1) When adding a member, set `diligence-push-max` to `3` unless the user explicitly asks otherwise.\n2) When switching a member’s LLM `provider/model`, keep `ws_read` / `ws_mod` as the baseline; when the target is `provider: codex`, add `codex_style_tools` on top (not as a replacement), unless the user explicitly asks for a different combination.',
             'Deployment/org suggestion (optional): if you do not want a visible team manager, keep `team-mgmt` only on a hidden/shadow member and have a human trigger it when needed; Dominds does not require this organizational setup.',
             'Recommended editing workflow: use `team_mgmt_read_file({ path: \"team.yaml\", range: \"<start~end>\", max_lines: 0, show_linenos: true })` to find line numbers; for small edits, run `team_mgmt_prepare_file_range_edit({ path: \"team.yaml\", range: \"<line~range>\", existing_hunk_id: \"\", content: \"<new content>\" })` to get a diff (the tool returns hunk_id), then confirm with `team_mgmt_apply_file_modification({ hunk_id: \"<hunk_id>\" })`; to revise the same prepared diff, call `team_mgmt_prepare_file_range_edit({ path: \"team.yaml\", range: \"<line~range>\", existing_hunk_id: \"<hunk_id>\", content: \"<new content>\" })` again; if you truly need a full overwrite: first `team_mgmt_read_file({ path: \"team.yaml\", range: \"\", max_lines: 0, show_linenos: true })` and read total_lines/size_bytes from the YAML header, then use `team_mgmt_overwrite_entire_file({ path: \"team.yaml\", known_old_total_lines: <n>, known_old_total_bytes: <n>, content_format: \"\", content: \"...\" })`.',
         ])) +
@@ -3139,7 +3139,7 @@ async function renderToolsets(language) {
             '`control`：对话控制类工具属于“内建必备能力”，运行时会自动包含给所有成员；因此不需要（也不建议）在 `members.<id>.toolsets` 里显式列出，本页也默认不展示它。',
             '`diag`：诊断类工具集不应默认授予任何成员；仅当用户明确要求“诊断/排查/验证解析/流式分段”等能力时才添加。',
             '多数情况下推荐用 `members.<id>.toolsets` 做粗粒度授权；`members.<id>.tools` 更适合做少量补充/收敛。',
-            '按 provider 选择匹配的 toolsets：当 `provider: codex`（偏 Codex CLI 风格提示/工具名）时，优先给 `codex_style_tools`（`apply_patch`）；如果还需要“读 rtws”，通常要再给 `os`（`shell_cmd`）并严格限制在少数专员成员手里。其他 provider 或采用 Dominds 原生工具习惯时，优先给 `ws_read` / `ws_mod`（txt prepare→apply 工作流：prepare_* → apply_file_modification）。',
+            '按 provider 选择匹配的 toolsets：默认把 `ws_read` / `ws_mod` 作为通用基线；当 `provider: codex`（偏 Codex CLI 风格提示/工具名）时，在基线上追加 `codex_style_tools`（`apply_patch` 等），不是替换 `ws_read` / `ws_mod`。如果还需要“读/探测 rtws”，通常要再给 `os`（`shell_cmd`）并严格限制在少数专员成员手里。',
             '最佳实践：把 `os`（尤其 `shell_cmd`）只授予具备良好纪律/风控意识的人设成员（例如 “cmdr/ops”）。对不具备 shell 工具的成员，系统提示会明确要求其将 shell 执行委派给这类专员，并提供可审查的命令提案与理由。',
             '常见三种模式（示例写在 `.minds/team.yaml` 的 `members.<id>.toolsets` 下）：',
         ])
@@ -3147,7 +3147,7 @@ async function renderToolsets(language) {
             '`control`: dialog-control tools are intrinsic and automatically included for all members at runtime; you do not need (and should not) list it under `members.<id>.toolsets`. It is omitted from the list below.',
             '`diag`: diagnostics tools should not be granted by default; only add it when the user explicitly asks for diagnostics/troubleshooting/streaming-parse verification.',
             'Typically use `members.<id>.toolsets` for coarse-grained access; use `members.<id>.tools` for a small number of additions/limits.',
-            'Pick toolsets to match the provider: for `provider: codex` (Codex CLI-style prompts/tool names), prefer `codex_style_tools` (`apply_patch`); if you also need “read the rtws”, you typically must grant `os` (`shell_cmd`) and keep it restricted to a small number of specialist operators. For other providers or when using Dominds-native tool habits, prefer `ws_read` / `ws_mod` (txt prepare→apply workflow: prepare_* → apply_file_modification).',
+            'Pick toolsets to match the provider: keep `ws_read` / `ws_mod` as the general baseline; for `provider: codex` (Codex CLI-style prompts/tool names), add `codex_style_tools` (`apply_patch`, etc.) on top rather than replacing `ws_read` / `ws_mod`. If you also need to read/probe the rtws, you typically must grant `os` (`shell_cmd`) and keep it restricted to a small number of specialist operators.',
             'Best practice: grant `os` (especially `shell_cmd`) only to a disciplined, risk-aware operator persona (e.g. “cmdr/ops”). For members without shell tools, the system prompt explicitly tells them to delegate shell execution to such a specialist, with a reviewable command proposal and justification.',
             'Three common patterns (in `.minds/team.yaml` under `members.<id>.toolsets`):',
         ]);

package/dist/tools/toolset-manual.js

@@ -0,0 +1,74 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.buildToolsetManualTools = buildToolsetManualTools;
+exports.formatToolsetManualIntro = formatToolsetManualIntro;
+const tool_names_1 = require("../mcp/tool-names");
+const text_1 = require("../shared/i18n/text");
+const runtime_language_1 = require("../shared/runtime-language");
+const registry_1 = require("./registry");
+function buildToolsetManualTools(options) {
+    const tools = [];
+    const toolNames = [];
+    const seen = new Set();
+    for (const toolsetName of options.toolsetNames) {
+        if (seen.has(toolsetName))
+            continue;
+        seen.add(toolsetName);
+        if (!(0, registry_1.getToolsetPromptI18n)(toolsetName)) {
+            continue;
+        }
+        const toolName = `man_${toolsetName}`;
+        if (!(0, tool_names_1.isValidProviderToolName)(toolName)) {
+            continue;
+        }
+        if (options.existingToolNames.has(toolName)) {
+            continue;
+        }
+        const tool = buildToolsetManualTool(toolsetName, toolName);
+        tools.push(tool);
+        toolNames.push(toolName);
+        options.existingToolNames.add(toolName);
+    }
+    return { tools, toolNames };
+}
+function formatToolsetManualIntro(language, toolNames) {
+    const names = toolNames.map((name) => `\`${name}\``).join(', ');
+    const calls = toolNames.map((name) => `\`${name}({})\``).join(', ');
+    if (toolNames.length === 0) {
+        return language === 'zh' ? '（无可用 toolset 手册）' : '(no toolset manuals available)';
+    }
+    return language === 'zh'
+        ? `手册：${names}（调用：${calls}）`
+        : `Manuals: ${names} (call: ${calls})`;
+}
+function buildToolsetManualTool(toolsetName, toolName) {
+    return {
+        type: 'func',
+        name: toolName,
+        description: `Show manual for toolset '${toolsetName}'.`,
+        descriptionI18n: {
+            en: `Show manual for toolset '${toolsetName}'.`,
+            zh: `查看 toolset '${toolsetName}' 的使用手册。`,
+        },
+        parameters: {
+            type: 'object',
+            additionalProperties: false,
+            properties: {},
+        },
+        argsValidation: 'dominds',
+        async call() {
+            const language = (0, runtime_language_1.getWorkLanguage)();
+            const promptI18n = (0, registry_1.getToolsetPromptI18n)(toolsetName);
+            const prompt = (0, text_1.getTextForLanguage)({ i18n: promptI18n, fallback: '' }, language).trim();
+            if (prompt === '') {
+                return language === 'zh'
+                    ? `未找到 toolset '${toolsetName}' 的说明。`
+                    : `No manual available for toolset '${toolsetName}'.`;
+            }
+            const title = language === 'zh'
+                ? `**toolset 手册：${toolsetName}**`
+                : `**Toolset manual: ${toolsetName}**`;
+            return `${title}\n\n${prompt}`;
+        },
+    };
+}

package/dist/utils/task-doc.js

@@ -120,33 +120,33 @@ If you provided a regular file path (e.g. a \`.md\`), that is unexpected. Please
                 return [
                     `**差遣牒结构（封装差遣牒 \`*.tsk/\`）：**`,
                     `- 我们的差遣牒是一个 \`*.tsk/\` 目录，分为 3 个分段：\`goals\` / \`constraints\` / \`progress\`。`,
-                    `- 维护方式：每次 \`!?@change_mind\` 必须指定一个分段（\`!goals\` / \`!constraints\` / \`!progress\`）；可在同一条消息中连续发出多个 \`!?@change_mind\` 来一次更新多个分段。`,
+                    `- 维护方式：每次调用函数工具 \`change_mind\` 必须指定一个分段（selector: \`!goals\` / \`!constraints\` / \`!progress\`）；可在同一轮中多次调用 \`change_mind\` 来一次更新多个分段。`,
                     ``,
                     `**分段状态：**`,
                     `- \`goals.md\`：${goalsZh}`,
                     `- \`constraints.md\`：${constraintsZh}`,
                     `- \`progress.md\`：${progressZh}`,
                     ``,
-                    `若某个分段缺失，请用 \`!?@change_mind\` 创建（不要用通用文件工具）：`,
-                    `- \`!?@change_mind !goals\\n!?<content>\``,
-                    `- \`!?@change_mind !constraints\\n!?<content>\``,
-                    `- \`!?@change_mind !progress\\n!?<content>\``,
+                    `若某个分段缺失，请用函数工具 \`change_mind\` 创建（不要用通用文件工具）：`,
+                    `- \`change_mind({\"selector\":\"!goals\",\"content\":\"...\"})\``,
+                    `- \`change_mind({\"selector\":\"!constraints\",\"content\":\"...\"})\``,
+                    `- \`change_mind({\"selector\":\"!progress\",\"content\":\"...\"})\``,
                 ].join('\n');
             }
             return [
                 `**Task Doc Constitution (Encapsulated \`*.tsk/\`):**`,
                 `- Our Task Doc is a \`*.tsk/\` directory with exactly 3 sections: \`goals\` / \`constraints\` / \`progress\`.`,
-                `- Maintenance: each \`!?@change_mind\` call must target one section (\`!goals\` / \`!constraints\` / \`!progress\`). You may include multiple \`!?@change_mind\` calls in a single message to update multiple sections.`,
+                `- Maintenance: each function tool call \`change_mind\` must target one section (selector: \`!goals\` / \`!constraints\` / \`!progress\`). You may call \`change_mind\` multiple times in a single turn to update multiple sections.`,
                 ``,
                 `**Sections:**`,
                 `- \`goals.md\`: ${goalsStatus}`,
                 `- \`constraints.md\`: ${constraintsStatus}`,
                 `- \`progress.md\`: ${progressStatus}`,
                 ``,
-                `If any section is missing, create it with \`!?@change_mind\` (never via general file tools):`,
-                `- \`!?@change_mind !goals\\n!?<content>\``,
-                `- \`!?@change_mind !constraints\\n!?<content>\``,
-                `- \`!?@change_mind !progress\\n!?<content>\``,
+                `If any section is missing, create it with the function tool \`change_mind\` (never via general file tools):`,
+                `- \`change_mind({\"selector\":\"!goals\",\"content\":\"...\"})\``,
+                `- \`change_mind({\"selector\":\"!constraints\",\"content\":\"...\"})\``,
+                `- \`change_mind({\"selector\":\"!progress\",\"content\":\"...\"})\``,
             ].join('\n');
         })();
         const effectiveDoc = (0, task_package_1.formatEffectiveTaskDocFromSections)(language, sections);
@@ -164,7 +164,7 @@ If you provided a regular file path (e.g. a \`.md\`), that is unexpected. Please
 ${statusBlock}
 
 ⚠️ **注意：** 差遣牒是封装的。不要用文件工具去读/写/列目录 \`*.tsk/\` 下的任何路径。
-请用 \`!?@change_mind !goals\` / \`!?@change_mind !constraints\` / \`!?@change_mind !progress\` 来更新（每次调用只更新一个分段；你可以在同一条消息里写多个 \`!?@change_mind\` 调用来批量更新）。`,
+请用函数工具 \`change_mind\` 来更新（每次调用只更新一个分段；你可以在同一轮中多次调用来批量更新），例如：\`change_mind({\"selector\":\"!goals\",\"content\":\"...\"})\` / \`change_mind({\"selector\":\"!constraints\",\"content\":\"...\"})\` / \`change_mind({\"selector\":\"!progress\",\"content\":\"...\"})\`。`,
                 };
             }
             return {
@@ -177,7 +177,7 @@ ${statusBlock}
 ${statusBlock}
 
 ⚠️ **Note:** Task Docs are encapsulated. Do not use file tools to read/write/list anything under \`*.tsk/\`.
-Use \`!?@change_mind !goals\` / \`!?@change_mind !constraints\` / \`!?@change_mind !progress\` to update (each call updates one section; you may include multiple \`!?@change_mind\` calls in a single message to batch updates).`,
+Use the function tool \`change_mind\` to update (each call updates one section; you may call it multiple times in a single turn to batch updates), e.g. \`change_mind({\"selector\":\"!goals\",\"content\":\"...\"})\` / \`change_mind({\"selector\":\"!constraints\",\"content\":\"...\"})\` / \`change_mind({\"selector\":\"!progress\",\"content\":\"...\"})\`.`,
             };
         }
         if (language === 'zh') {
@@ -194,9 +194,9 @@ ${statusBlock}
 ${effectiveDoc}
 ---
 
-*用 \`!?@change_mind !goals\` / \`!?@change_mind !constraints\` / \`!?@change_mind !progress\` 来替换分段（每次调用只替换一个分段；你可以在同一条消息里写多个 \`!?@change_mind\` 调用来批量替换）。*
+*用函数工具 \`change_mind\` 来替换分段（每次调用只替换一个分段；你可以在同一轮中多次调用来批量替换）。*
 
-指令：不要对 \`*.tsk/\` 下的任何路径调用通用文件工具（\`!?@read_file\`, \`!?@replace_file_contents\`, \`!?@plan_file_modification\`, \`!?@apply_file_modification\`, \`!?@list_dir\`, \`!?@rm_file\`, \`!?@rm_dir\`）。差遣牒状态只能通过显式的差遣牒操作进行管理。`,
+指令：不要对 \`*.tsk/\` 下的任何路径调用通用文件工具（\`read_file\`, \`overwrite_entire_file\`, \`preview_file_modification\`, \`apply_file_modification\`, \`list_dir\`, \`rm_file\`, \`rm_dir\`）。差遣牒状态只能通过显式的差遣牒操作进行管理。`,
             };
         }
         return {
@@ -212,9 +212,9 @@ ${statusBlock}
 ${effectiveDoc}
 ---
 
-*Use \`!?@change_mind !goals\` / \`!?@change_mind !constraints\` / \`!?@change_mind !progress\` to replace sections (each call replaces one section; you may include multiple \`!?@change_mind\` calls in a single message to batch replacements).*
+*Use the function tool \`change_mind\` to replace sections (each call replaces one section; you may call it multiple times in a single turn to batch replacements).*
 
-Directive: Do not invoke any general file tools (\`!?@read_file\`, \`!?@replace_file_contents\`, \`!?@plan_file_modification\`, \`!?@apply_file_modification\`, \`!?@list_dir\`, \`!?@rm_file\`, \`!?@rm_dir\`) on any path under \`*.tsk/\`. Task package state is managed only through explicit task-doc actions.`,
+Directive: Do not invoke any general file tools (\`read_file\`, \`overwrite_entire_file\`, \`preview_file_modification\`, \`apply_file_modification\`, \`list_dir\`, \`rm_file\`, \`rm_dir\`) on any path under \`*.tsk/\`. Task package state is managed only through explicit task-doc actions.`,
         };
     }
     catch (error) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dominds",
-  "version": "0.6.2",
+  "version": "0.6.4",
   "description": "in-tree developer team with self-improving mindsets",
   "type": "commonjs",
   "private": false,

package/dist/minds/builtin/cmdr/persona.md

@@ -1,3 +0,0 @@
-You are the commander, in charge of os shell command execution.
-
-Be caucious to execute dangerous/destructive commands, ask human confirmation when not sure, but never bother them for daily trivialities.