dominds 1.25.5 → 1.25.6

package/dist/server/dominds-self-update.js

@@ -22,6 +22,7 @@ const BACKGROUND_CHECK_INTERVAL_MS = 30 * 60 * 1000;
 const LATEST_VERSION_CHECK_TIMEOUT_MS = 15000;
 const RESTART_PORT_RELEASE_TIMEOUT_MS = 15000;
 const RESTART_PORT_PROBE_INTERVAL_MS = 150;
+const COMMAND_OUTPUT_LOG_LIMIT = 2000;
 const IDLE_RESTART_STATE = { kind: 'idle' };
 let runtimeConfig = null;
 let latestObservation = { kind: 'unknown' };
@@ -84,6 +85,90 @@ function getRestartPortProbeHost(host) {
         return '::1';
     return host;
 }
+function truncateCommandOutput(value) {
+    const raw = typeof value === 'string' ? value.trim() : '';
+    if (raw.length <= COMMAND_OUTPUT_LOG_LIMIT)
+        return raw;
+    return `${raw.slice(0, COMMAND_OUTPUT_LOG_LIMIT)}...[truncated ${raw.length - COMMAND_OUTPUT_LOG_LIMIT} chars]`;
+}
+function formatPathEnvExcerpt(pathEnv) {
+    if (pathEnv === null || pathEnv.trim() === '')
+        return null;
+    const parts = pathEnv.split(path_1.default.delimiter).filter((part) => part.trim() !== '');
+    if (parts.length === 0)
+        return null;
+    const visibleParts = parts.slice(0, 8);
+    const preview = visibleParts.join(path_1.default.delimiter);
+    if (parts.length <= visibleParts.length)
+        return preview;
+    return `${preview}${path_1.default.delimiter}...[+${parts.length - visibleParts.length} more]`;
+}
+function getErrorProp(error, key) {
+    if (typeof error !== 'object' || error === null)
+        return undefined;
+    return error[key];
+}
+function extractCommandFailureDiagnostics(error) {
+    const code = getErrorProp(error, 'code');
+    const signal = getErrorProp(error, 'signal');
+    const killed = getErrorProp(error, 'killed');
+    const cmd = getErrorProp(error, 'cmd');
+    return {
+        message: error instanceof Error ? error.message : String(error),
+        cmd: typeof cmd === 'string' && cmd.trim() !== '' ? cmd : null,
+        code: typeof code === 'string' || typeof code === 'number' ? code : null,
+        signal: typeof signal === 'string' && signal.trim() !== '' ? signal : null,
+        killed: typeof killed === 'boolean' ? killed : null,
+        stdout: truncateCommandOutput(getErrorProp(error, 'stdout')),
+        stderr: truncateCommandOutput(getErrorProp(error, 'stderr')),
+        cwd: process.cwd(),
+        pathEnv: typeof process.env.PATH === 'string' ? process.env.PATH : null,
+    };
+}
+function formatCommandFailureForUi(diagnostics) {
+    const lines = [diagnostics.message];
+    if (diagnostics.cmd !== null) {
+        lines.push(`cmd: ${diagnostics.cmd}`);
+    }
+    if (diagnostics.code !== null) {
+        lines.push(`exit: ${String(diagnostics.code)}`);
+    }
+    if (diagnostics.signal !== null) {
+        lines.push(`signal: ${diagnostics.signal}`);
+    }
+    lines.push(`cwd: ${diagnostics.cwd}`);
+    if (diagnostics.stderr !== '') {
+        lines.push(`stderr: ${diagnostics.stderr}`);
+        return lines.join('\n');
+    }
+    if (diagnostics.stdout !== '') {
+        lines.push(`stdout: ${diagnostics.stdout}`);
+        return lines.join('\n');
+    }
+    const pathEnvExcerpt = formatPathEnvExcerpt(diagnostics.pathEnv);
+    if (pathEnvExcerpt !== null) {
+        lines.push(`PATH: ${pathEnvExcerpt}`);
+    }
+    const lowerMessage = diagnostics.message.toLowerCase();
+    if (diagnostics.code === 'ENOENT' ||
+        lowerMessage.includes('not recognized as an internal or external command') ||
+        lowerMessage.includes('spawn npm enoent')) {
+        lines.push('hint: npm is not available to the server process on PATH');
+    }
+    else if (lowerMessage.includes('econn') ||
+        lowerMessage.includes('etimedout') ||
+        lowerMessage.includes('certificate') ||
+        lowerMessage.includes('self signed') ||
+        lowerMessage.includes('registry')) {
+        lines.push('hint: this looks like a registry, network, proxy, or certificate problem');
+    }
+    else if (diagnostics.code === 1 &&
+        diagnostics.stderr === '' &&
+        diagnostics.stdout === '') {
+        lines.push('hint: npm exited without output; check registry access and npm config in the same shell');
+    }
+    return lines.join('\n');
+}
 async function queryLatestVersion() {
     const checkedAt = (0, time_1.formatUnifiedTimestamp)(new Date());
     try {
@@ -124,12 +209,11 @@ async function queryLatestVersion() {
         return { kind: 'ok', latestVersion, checkedAt };
     }
     catch (error) {
+        const diagnostics = extractCommandFailureDiagnostics(error);
         const errorText = error instanceof Error && error.name === 'AbortError'
             ? 'npm view dominds version timed out'
-            : error instanceof Error
-                ? error.message
-                : String(error);
-        log.warn('Dominds latest-version check failed', error, { checkedAt, errorText });
+            : formatCommandFailureForUi(diagnostics);
+        log.warn('Dominds latest-version check failed', error, { checkedAt, errorText, diagnostics });
         return {
             kind: 'error',
             errorText,

package/dist/tools/os.d.ts

@@ -4,6 +4,7 @@
  * Operating system interaction tools for shell command execution.
  * Provides shell_cmd and stop_daemon FuncTools with advanced process management.
  */
+import type { LanguageCode } from '@longrun-ai/kernel/types/language';
 import type { FuncTool, ReminderOwner } from '../tool';
 export declare function resetTrackedDaemonsForTests(): void;
 type ShellSpawnSpec = Readonly<{
@@ -13,6 +14,7 @@ type ShellSpawnSpec = Readonly<{
     windowsVerbatimArguments?: boolean;
 }>;
 export declare function resolveShellCmdSpawnSpecForTests(command: string, shell: string | undefined, platform: NodeJS.Platform): ShellSpawnSpec;
+export declare function detectWindowsShellUsageWarningForTests(command: string, shell: string | undefined, language: LanguageCode, platform: NodeJS.Platform): string | undefined;
 export declare function resolveReadonlyShellSpawnSpecForTests(command: string, platform: NodeJS.Platform): ShellSpawnSpec;
 export declare const shellCmdReminderOwner: ReminderOwner;
 export declare const shellCmdTool: FuncTool;

package/dist/tools/os.js

@@ -12,6 +12,7 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.getDaemonOutputTool = exports.stopDaemonTool = exports.readonlyShellTool = exports.shellCmdTool = exports.shellCmdReminderOwner = void 0;
 exports.resetTrackedDaemonsForTests = resetTrackedDaemonsForTests;
 exports.resolveShellCmdSpawnSpecForTests = resolveShellCmdSpawnSpecForTests;
+exports.detectWindowsShellUsageWarningForTests = detectWindowsShellUsageWarningForTests;
 exports.resolveReadonlyShellSpawnSpecForTests = resolveReadonlyShellSpawnSpecForTests;
 const time_1 = require("@longrun-ai/kernel/utils/time");
 const child_process_1 = require("child_process");
@@ -645,7 +646,7 @@ async function spawnCmdRunner(init) {
         runnerProcess.send(init);
     });
 }
-function formatCompletedShellCommandOutput(message, t) {
+function formatCompletedShellCommandOutput(message, t, warning) {
     const stdoutHasScrolled = message.stdout.linesScrolledOut > 0;
     const stderrHasScrolled = message.stderr.linesScrolledOut > 0;
     let scrollNotice = '';
@@ -667,7 +668,7 @@ function formatCompletedShellCommandOutput(message, t) {
     if (stderrContent !== '') {
         result += `${t.stderrLabel}\n${fenceConsole}\n${stderrContent}\n${fenceEnd}`;
     }
-    const content = result.trim();
+    const content = prependShellWarning(result.trim(), warning);
     return message.exitCode === 0 ? (0, tool_1.toolSuccess)(content) : (0, tool_1.toolPartialFailure)(content);
 }
 async function removeDaemonRemindersForPid(dlg, pid) {
@@ -818,76 +819,42 @@ function parseGetDaemonOutputArgs(args) {
     }
     return { pid, stdout, stderr };
 }
-function encodePowerShellCommand(command) {
-    return Buffer.from(command, 'utf16le').toString('base64');
-}
-function stripMatchingOuterQuotes(value) {
-    const trimmed = value.trim();
-    if (trimmed.length < 2) {
-        return trimmed;
-    }
-    const first = trimmed[0] ?? '';
-    const last = trimmed[trimmed.length - 1] ?? '';
-    if ((first === '"' && last === '"') || (first === "'" && last === "'")) {
-        return trimmed.slice(1, -1);
-    }
-    return trimmed;
-}
-function resolveDirectWindowsPowerShellCommand(command) {
-    const match = /^\s*(powershell(?:\.exe)?|pwsh(?:\.exe)?)\s+(?:-(?:NoLogo|NoProfile|NonInteractive)\s+)*(?:-|\/)(?:Command|c)\s+([\s\S]+?)\s*$/iu.exec(command);
-    if (match === null) {
-        return null;
+function getWindowsShellLabel(shell) {
+    if (typeof shell !== 'string') {
+        return 'cmd.exe';
     }
-    const shellCommand = match[1] ?? '';
-    const encodedCommand = encodePowerShellCommand(stripMatchingOuterQuotes(match[2] ?? ''));
-    return {
-        command: shellCommand,
-        args: ['-NoLogo', '-NoProfile', '-EncodedCommand', encodedCommand],
-        shellLabel: shellCommand,
-    };
+    const trimmed = shell.trim();
+    return trimmed === '' ? 'cmd.exe' : trimmed;
 }
-function unwrapNestedWindowsCmd(command) {
-    const match = /^\s*cmd(?:\.exe)?\s+(?:\/d\s+)?(?:\/s\s+)?\/c\s+([\s\S]+?)\s*$/iu.exec(command);
-    if (match === null) {
-        return null;
-    }
-    const inner = (match[1] ?? '').trim();
-    if (inner.length < 2) {
-        return inner;
-    }
-    const first = inner[0] ?? '';
-    const last = inner[inner.length - 1] ?? '';
-    if ((first === '"' && last === '"') || (first === "'" && last === "'")) {
-        return inner.slice(1, -1);
+function detectWindowsShellUsageWarning(command, shell, language, platform = process.platform) {
+    if (platform !== 'win32') {
+        return undefined;
     }
-    return inner;
-}
-function normalizeWindowsCmdCommand(command) {
-    const directPowerShell = resolveDirectWindowsPowerShellCommand(command);
-    if (directPowerShell !== null) {
-        return command;
+    const trimmedCommand = command.trimStart();
+    const nestedCmd = /^cmd(?:\.exe)?\s+(?:\/d\s+)?(?:\/s\s+)?\/c\b/iu.test(trimmedCommand);
+    const nestedPowerShell = /^(?:powershell(?:\.exe)?|pwsh(?:\.exe)?)\s+(?:-(?:NoLogo|NoProfile|NonInteractive)\s+)*(?:-|\/)(?:Command|c)\b/iu.test(trimmedCommand);
+    if (!nestedCmd && !nestedPowerShell) {
+        return undefined;
     }
-    const nestedCmd = unwrapNestedWindowsCmd(command);
-    if (nestedCmd !== null) {
-        return nestedCmd.replace(/\\"/g, '"').replace(/^(\s*if\s+(?:not\s+)?exist\s+)'([^'\r\n]+)'/iu, (_whole, prefix, quotedPath) => `${prefix}"${normalizeWindowsPathLiteral(quotedPath)}"`);
+    const shellLabel = getWindowsShellLabel(shell);
+    if (language === 'zh') {
+        return nestedCmd
+            ? `⚠️ 检测到嵌套 shell 写法：${trimmedCommand.startsWith('cmd.exe') ? 'cmd.exe /c' : 'cmd /c'}。shell 参数只负责选择外层执行环境；请直接传入 cmd 原生命令，不要再套一层 cmd /c。当前 shell：${shellLabel}`
+            : `⚠️ 检测到嵌套 shell 写法：${trimmedCommand.startsWith('pwsh') ? 'pwsh -Command' : 'powershell -Command'}。shell 参数只负责选择外层执行环境；请直接传入 PowerShell 原生命令，不要再套一层 -Command。当前 shell：${shellLabel}`;
     }
-    return command.replace(/\\"/g, '"').replace(/^(\s*if\s+(?:not\s+)?exist\s+)'([^'\r\n]+)'/iu, (_whole, prefix, quotedPath) => `${prefix}"${normalizeWindowsPathLiteral(quotedPath)}"`);
+    return nestedCmd
+        ? `⚠️ Nested shell syntax detected: ${trimmedCommand.startsWith('cmd.exe') ? 'cmd.exe /c' : 'cmd /c'}. The shell parameter selects the outer execution environment only; pass a native cmd command and do not add another cmd /c layer. Current shell: ${shellLabel}`
+        : `⚠️ Nested shell syntax detected: ${trimmedCommand.startsWith('pwsh') ? 'pwsh -Command' : 'powershell -Command'}. The shell parameter selects the outer execution environment only; pass a native PowerShell command and do not add another -Command wrapper. Current shell: ${shellLabel}`;
 }
-function normalizeWindowsPathLiteral(pathLiteral) {
-    if (pathLiteral.startsWith('\\\\')) {
-        return pathLiteral;
+function prependShellWarning(content, warning) {
+    if (!warning) {
+        return content;
     }
-    return pathLiteral.replace(/\\{2,}/g, '\\');
+    return `${warning}\n\n${content}`;
 }
 function resolveShellCmdSpawnSpec(command, shell, platform = process.platform) {
     const preferredShell = typeof shell === 'string' && shell.trim() !== '' ? shell.trim() : undefined;
     if (platform === 'win32') {
-        if (!preferredShell) {
-            const directPowerShell = resolveDirectWindowsPowerShellCommand(command);
-            if (directPowerShell !== null) {
-                return directPowerShell;
-            }
-        }
         if (preferredShell) {
             const base = path_1.default.basename(preferredShell).toLowerCase();
             if (base === 'powershell' ||
@@ -896,14 +863,14 @@ function resolveShellCmdSpawnSpec(command, shell, platform = process.platform) {
                 base === 'pwsh.exe') {
                 return {
                     command: preferredShell,
-                    args: ['-NoLogo', '-NoProfile', '-EncodedCommand', encodePowerShellCommand(command)],
+                    args: ['-NoLogo', '-NoProfile', '-Command', command],
                     shellLabel: preferredShell,
                 };
             }
             if (base === 'cmd' || base === 'cmd.exe') {
                 return {
                     command: preferredShell,
-                    args: ['/d', '/c', normalizeWindowsCmdCommand(command)],
+                    args: ['/d', '/c', command],
                     shellLabel: preferredShell,
                     windowsVerbatimArguments: true,
                 };
@@ -916,7 +883,7 @@ function resolveShellCmdSpawnSpec(command, shell, platform = process.platform) {
         }
         return {
             command: 'cmd.exe',
-            args: ['/d', '/c', normalizeWindowsCmdCommand(command)],
+            args: ['/d', '/c', command],
             shellLabel: 'cmd.exe',
             windowsVerbatimArguments: true,
         };
@@ -931,11 +898,14 @@ function resolveShellCmdSpawnSpec(command, shell, platform = process.platform) {
 function resolveShellCmdSpawnSpecForTests(command, shell, platform) {
     return resolveShellCmdSpawnSpec(command, shell, platform);
 }
+function detectWindowsShellUsageWarningForTests(command, shell, language, platform) {
+    return detectWindowsShellUsageWarning(command, shell, language, platform);
+}
 function resolveReadonlyShellSpawnSpec(command, platform = process.platform) {
     if (platform === 'win32') {
         return {
             command: 'cmd.exe',
-            args: ['/d', '/c', normalizeWindowsCmdCommand(command)],
+            args: ['/d', '/c', command],
             shellLabel: 'cmd.exe',
             windowsVerbatimArguments: true,
         };
@@ -1187,7 +1157,7 @@ const shellCmdSchema = {
         },
         shell: {
             type: 'string',
-            description: 'Shell to use for execution (default: bash on Linux/macOS; cmd.exe on Windows). On Windows, powershell.exe/pwsh commands are passed via -EncodedCommand.',
+            description: 'Shell to use for execution (default: bash on Linux/macOS; cmd.exe on Windows). On Windows, choose cmd.exe, powershell.exe, or pwsh explicitly; command must be native to the selected shell.',
         },
         scrollbackLines: {
             type: 'number',
@@ -1536,10 +1506,10 @@ ${statusInfo}`,
 exports.shellCmdTool = {
     type: 'func',
     name: 'shell_cmd',
-    description: 'Execute shell commands with optional timeout. If timeoutSeconds > 0 and command runs longer, it becomes a tracked daemon process. Daemons persist across messages and require explicit stop_daemon or get_daemon_output calls.',
+    description: 'Execute shell commands with optional timeout. If timeoutSeconds > 0 and command runs longer, it becomes a tracked daemon process. On Windows, use shell to choose cmd.exe, powershell.exe, or pwsh, and pass a command that is native to that shell. Do not nest cmd /c or powershell -Command inside another shell command. Daemons persist across messages and require explicit stop_daemon or get_daemon_output calls.',
     descriptionI18n: {
-        en: 'Execute shell commands with optional timeout. If timeoutSeconds > 0 and command runs longer, it becomes a tracked daemon process. Daemons persist across messages and require explicit stop_daemon or get_daemon_output calls.',
-        zh: '执行 shell 命令（支持超时）。如果 timeoutSeconds > 0 且命令运行时间超过超时，将转为可追踪的后台守护进程。守护进程会跨消息持续存在，需要显式调用 stop_daemon 或 get_daemon_output 来管理与查看输出。',
+        en: 'Execute shell commands with optional timeout. If timeoutSeconds > 0 and command runs longer, it becomes a tracked daemon process. On Windows, use shell to choose cmd.exe, powershell.exe, or pwsh, and pass a command that is native to that shell. Do not nest cmd /c or powershell -Command inside another shell command. Daemons persist across messages and require explicit stop_daemon or get_daemon_output calls.',
+        zh: '执行 shell 命令（支持超时）。如果 timeoutSeconds > 0 且命令运行时间超过超时，将转为可追踪的后台守护进程。Windows 上请用 shell 明确选择 cmd.exe、powershell.exe 或 pwsh，并传入该 shell 的原生命令。不要在另一个 shell 命令里再嵌套 cmd /c 或 powershell -Command。守护进程会跨消息持续存在，需要显式调用 stop_daemon 或 get_daemon_output 来管理与查看输出。',
     },
     parameters: shellCmdSchema,
     async call(dlg, caller, args) {
@@ -1548,6 +1518,7 @@ exports.shellCmdTool = {
         const parsedArgs = parseShellCmdArgs(args);
         const { command, shell, scrollbackLines = 500, timeoutSeconds = 5 } = parsedArgs;
         const spawnSpec = resolveShellCmdSpawnSpec(command, shell);
+        const warning = detectWindowsShellUsageWarning(command, shell, language);
         try {
             const { runnerProcess, initialMessage } = await spawnCmdRunner({
                 type: 'init',
@@ -1564,11 +1535,11 @@ exports.shellCmdTool = {
                 scrollbackLines,
             });
             if (initialMessage.type === 'completed') {
-                return formatCompletedShellCommandOutput(initialMessage, t);
+                return formatCompletedShellCommandOutput(initialMessage, t, warning);
             }
             if (initialMessage.type === 'failed') {
                 disconnectRunnerProcess(runnerProcess);
-                return (0, tool_1.toolFailure)(t.failedToExecute(initialMessage.errorText));
+                return (0, tool_1.toolFailure)(prependShellWarning(t.failedToExecute(initialMessage.errorText), warning));
             }
             const daemon = {
                 pid: initialMessage.daemonPid,
@@ -1620,15 +1591,15 @@ exports.shellCmdTool = {
             catch (error) {
                 await bestEffortKillDaemonProcessGroup(reminderSeedMeta);
                 disconnectRunnerProcess(runnerProcess);
-                return (0, tool_1.toolFailure)(t.failedToExecute(error instanceof Error
+                return (0, tool_1.toolFailure)(prependShellWarning(t.failedToExecute(error instanceof Error
                     ? `daemon reminder persistence failed: ${error.message}`
-                    : `daemon reminder persistence failed: ${String(error)}`));
+                    : `daemon reminder persistence failed: ${String(error)}`), warning));
             }
             disconnectRunnerProcess(runnerProcess);
-            return (0, tool_1.toolSuccess)(t.daemonStarted(initialMessage.daemonPid, timeoutSeconds, command));
+            return (0, tool_1.toolSuccess)(prependShellWarning(t.daemonStarted(initialMessage.daemonPid, timeoutSeconds, command), warning));
         }
         catch (error) {
-            return (0, tool_1.toolFailure)(t.failedToExecute(error instanceof Error ? error.message : String(error)));
+            return (0, tool_1.toolFailure)(prependShellWarning(t.failedToExecute(error instanceof Error ? error.message : String(error)), warning));
         }
     },
 };
@@ -2209,10 +2180,11 @@ exports.readonlyShellTool = {
         const t = getOsToolMessages(language);
         const parsedArgs = parseReadonlyShellArgs(args);
         const { command, timeoutMs = 10000 } = parsedArgs;
+        const warning = detectWindowsShellUsageWarning(command, undefined, language);
         if (command.includes('\n') || command.includes('\r')) {
-            return (0, tool_1.toolFailure)(language === 'zh'
+            return (0, tool_1.toolFailure)(prependShellWarning(language === 'zh'
                 ? `❌ readonly_shell 不建议执行多行脚本式命令（检测到换行符）。请用单行命令（允许 |、&&、||）。\n收到：${command}`
-                : `❌ readonly_shell does not allow multi-line script-style commands (newline detected). Use a single-line command (|, &&, || are allowed).\nGot: ${command}`);
+                : `❌ readonly_shell does not allow multi-line script-style commands (newline detected). Use a single-line command (|, &&, || are allowed).\nGot: ${command}`, warning));
         }
         const validation = validateReadonlyShellCommand(command);
         if (!validation.ok) {
@@ -2222,9 +2194,9 @@ exports.readonlyShellTool = {
             const suggestion = language === 'zh'
                 ? getReadonlyShellSuggestionZh(validation.failure)
                 : getReadonlyShellSuggestionEn(validation.failure);
-            return (0, tool_1.toolFailure)(language === 'zh'
+            return (0, tool_1.toolFailure)(prependShellWarning(language === 'zh'
                 ? `❌ readonly_shell 仅允许以下命令前缀：${allowedList}\n另外允许（仅版本探针）：node --version|-v、python3 --version|-V\n脚本执行（如 node -e / python3 -c）一律拒绝。\n另外允许：git -C <相对路径> <show|status|diff|log|blame> ...\n另外允许：cd <相对路径> && <允许命令...>（或 ||）\n说明：通过 |/&&/|| 串联时会按子命令逐段校验。\n被拒子命令段：${rejectedSegmentOrCommand}\n允许的等价写法：${suggestion}\n收到：${command}`
-                : `❌ readonly_shell only allows these command prefixes: ${allowedList}\nAlso allowed (exact version probes only): node --version|-v, python3 --version|-V\nNode/python scripts (for example: node -e, python3 -c) are rejected.\nAlso allowed: git -C <relative-path> <show|status|diff|log|blame> ...\nAlso allowed: cd <relative-path> && <allowed command...> (or ||)\nNote: chains via |/&&/|| are validated segment-by-segment.\nRejected segment: ${rejectedSegmentOrCommand}\nAllowed equivalent: ${suggestion}\nGot: ${command}`);
+                : `❌ readonly_shell only allows these command prefixes: ${allowedList}\nAlso allowed (exact version probes only): node --version|-v, python3 --version|-V\nNode/python scripts (for example: node -e, python3 -c) are rejected.\nAlso allowed: git -C <relative-path> <show|status|diff|log|blame> ...\nAlso allowed: cd <relative-path> && <allowed command...> (or ||)\nNote: chains via |/&&/|| are validated segment-by-segment.\nRejected segment: ${rejectedSegmentOrCommand}\nAllowed equivalent: ${suggestion}\nGot: ${command}`, warning));
         }
         const forbiddenHiddenDir = detectReadonlyShellForbiddenHiddenDirAccess(path_1.default.resolve(process.cwd()), command);
         if (forbiddenHiddenDir) {
@@ -2277,7 +2249,7 @@ exports.readonlyShellTool = {
                         ? `⚠️  输出已截断，约省略 ${omittedBytes} 字节\n`
                         : `⚠️  Output truncated; ~${omittedBytes} bytes omitted\n`
                     : '';
-                let result = `${timeoutMsg}${truncationNotice}`.trimEnd();
+                let result = prependShellWarning(`${timeoutMsg}${truncationNotice}`.trimEnd(), warning);
                 const stdoutContent = (0, output_limit_1.truncateToolOutputText)(stdoutBuffer.getContent(), {
                     toolName: 'readonly_shell_stdout',
                 }).text;
@@ -2308,7 +2280,7 @@ exports.readonlyShellTool = {
                 }).text;
                 const fenceConsole = '```console';
                 const fenceEnd = '```';
-                let result = t.commandCompleted(code, truncationNotice);
+                let result = prependShellWarning(t.commandCompleted(code, truncationNotice), warning);
                 if (stdoutContent) {
                     result += `${t.stdoutLabel}\n${fenceConsole}\n${stdoutContent}\n${fenceEnd}\n\n`;
                 }
@@ -2319,7 +2291,7 @@ exports.readonlyShellTool = {
             });
             childProcess.on('error', (error) => {
                 clearTimeout(timeoutHandle);
-                finish((0, tool_1.toolFailure)(t.failedToExecute(error.message)));
+                finish((0, tool_1.toolFailure)(prependShellWarning(t.failedToExecute(error.message), warning)));
             });
         });
     },

package/dist/tools/prompts/codex_inspect_and_patch_tools/en/tools.md

@@ -15,7 +15,8 @@ Typical uses:
 Windows notes:
 
 - Prefer no-space forward-slash paths such as `D:/path/to/file`
-- Avoid nested `cmd /c "..."`
+- `readonly_shell` runs through the platform default shell; pass native commands for that shell
+- Avoid nested `cmd /c` or `powershell -Command`; obvious nested-shell patterns may only warn and are not rewritten
 
 Example:
 

package/dist/tools/prompts/codex_inspect_and_patch_tools/zh/tools.md

@@ -15,7 +15,8 @@
 Windows 注意：
 
 - 优先使用不带空格的正斜杠路径，如 `D:/path/to/file`
-- 避免嵌套 `cmd /c "..."`
+- `readonly_shell` 通过平台默认 shell 执行；请传入该 shell 的原生命令
+- 避免嵌套 `cmd /c` 或 `powershell -Command`；明显混套模式最多只会警告，不会被改写
 
 示例：
 

package/dist/tools/prompts/os/en/scenarios.md

@@ -194,7 +194,7 @@ shell_cmd({
   command: 'if exist D:/AiWorks/chatgpt-workstation/dist/app.exe echo exists',
 });
 
-// Complex PowerShell command: choose PowerShell explicitly; Dominds encodes the command automatically
+// Complex PowerShell command: choose PowerShell explicitly and keep the command native to that shell
 shell_cmd({
   command: 'Test-Path D:/AiWorks/chatgpt-workstation/dist/app.exe',
   shell: 'powershell.exe',

package/dist/tools/prompts/os/en/tools.md

@@ -32,9 +32,10 @@ Execute Shell command.
 
 **Windows notes:**
 
+- Use `shell` to choose the outer execution environment: `cmd.exe`, `powershell.exe`, or `pwsh`
+- Pass a command that is native to the selected shell; do not nest `cmd /c` or `powershell -Command` inside another shell command
 - With the default `cmd.exe` path, prefer no-space forward-slash paths such as `D:/path/to/file`
-- For complex PowerShell commands, pass `shell: 'powershell.exe'` or `shell: 'pwsh'`; the command is encoded automatically to avoid quote and backslash ambiguity
-- Do not rely on nested `cmd /c "..."`
+- Only very obvious nested-shell patterns may trigger a warning; the tool does not rewrite mixed shell syntax for you
 
 **Returns:**
 

package/dist/tools/prompts/os/zh/scenarios.md

@@ -194,7 +194,7 @@ shell_cmd({
   command: 'if exist D:/AiWorks/chatgpt-workstation/dist/app.exe echo exists',
 });
 
-// 复杂 PowerShell 命令：显式选择 PowerShell，系统会自动编码传递命令
+// 复杂 PowerShell 命令：显式选择 PowerShell，并保持命令为该 shell 的原生命令
 shell_cmd({
   command: 'Test-Path D:/AiWorks/chatgpt-workstation/dist/app.exe',
   shell: 'powershell.exe',

package/dist/tools/prompts/os/zh/tools.md

@@ -32,9 +32,10 @@
 
 **Windows 提示：**
 
+- 使用 `shell` 选择外层执行环境：`cmd.exe`、`powershell.exe` 或 `pwsh`
+- `command` 必须是所选 shell 的原生命令；不要在另一个 shell 命令里嵌套 `cmd /c` 或 `powershell -Command`
 - 默认 `cmd.exe` 路径下，优先使用不带空格的正斜杠路径，如 `D:/path/to/file`
-- 复杂 PowerShell 命令建议显式传 `shell: 'powershell.exe'` 或 `shell: 'pwsh'`；系统会自动用编码方式传递命令，避免引号和反斜杠歧义
-- 不要依赖 `cmd /c "..."`
+- 只有非常明显的混套模式可能触发警告；工具不会替你改写混合 shell 语法
 
 **返回：**
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dominds",
-  "version": "1.25.5",
+  "version": "1.25.6",
   "description": "Dominds CLI and aggregation shell for the LongRun AI kernel/runtime packages.",
   "type": "commonjs",
   "publishConfig": {