dominds 1.26.0 → 1.26.2

package/README.md

@@ -264,11 +264,11 @@ dominds cert create
 # Add explicit SAN hosts; --host can be repeated
 dominds cert create --host 192.168.1.10 --host my-host.local
 
-# Inspect whether a host can use an HTTPS certificate
-dominds cert status --host 0.0.0.0
+# Inspect whether the detected LAN hosts can use an HTTPS certificate
+dominds cert status
 ```
 
-`localhost`, `loopback`, `127.0.0.0/8`, `::1`, `0.0.0.0`, and `::` are not certificate hosts. `0.0.0.0` / `::` only mean bind-all; certificate matching uses detected non-loopback LAN hosts. A bare `--port 5666` disables Dominds built-in HTTPS and assumes a front proxy handles HTTPS, while the default port behavior and `--port 5666+/-` may auto-enable built-in HTTPS when a matching certificate exists.
+`localhost`, `loopback`, `127.0.0.0/8`, `169.254.0.0/16`, `::1`, `fe80::/10`, `0.0.0.0`, and `::` are not certificate hosts. `0.0.0.0` / `::` only mean bind-all; certificate matching uses detected non-loopback LAN hosts. A bare `--port 5666` disables Dominds built-in HTTPS and assumes a front proxy handles HTTPS, while the default port behavior and `--port 5666+/-` may auto-enable built-in HTTPS when a matching certificate exists.
 
 ## Start from scratch
 

package/README.zh.md

@@ -203,11 +203,11 @@ dominds cert create
 # 显式指定证书 SAN，可重复 --host
 dominds cert create --host 192.168.1.10 --host my-host.local
 
-# 查看指定 host 是否能匹配到证书
-dominds cert status --host 0.0.0.0
+# 查看检测到的 LAN 主机是否能匹配到证书
+dominds cert status
 ```
 
-`localhost`、`loopback`、`127.0.0.0/8`、`::1`、`0.0.0.0`、`::` 不会作为 HTTPS 证书主机；其中 `0.0.0.0` / `::` 仅表示绑定所有地址，匹配证书时会使用检测到的非 loopback LAN 主机。使用裸 `--port 5666` 启动时，Dominds 会认为 HTTPS 由前置代理负责，不启用内建 HTTPS；使用默认端口或 `--port 5666+/-` 时才会自动启用内建 HTTPS。
+`localhost`、`loopback`、`127.0.0.0/8`、`169.254.0.0/16`、`::1`、`fe80::/10`、`0.0.0.0`、`::` 不会作为 HTTPS 证书主机；其中 `0.0.0.0` / `::` 仅表示绑定所有地址，匹配证书时会使用检测到的非 loopback LAN 主机。使用裸 `--port 5666` 启动时，Dominds 会认为 HTTPS 由前置代理负责，不启用内建 HTTPS；使用默认端口或 `--port 5666+/-` 时才会自动启用内建 HTTPS。
 
 ## 从零开始（空文件夹启动）
 

package/dist/bootstrap/rtws-cli.d.ts

@@ -4,4 +4,5 @@ export type RtwsCliParseResult = Readonly<{
 }>;
 export declare function extractGlobalRtwsChdir(params: Readonly<{
     argv: ReadonlyArray<string>;
+    baseCwd?: string;
 }>): RtwsCliParseResult;

package/dist/bootstrap/rtws-cli.js

@@ -36,13 +36,13 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.extractGlobalRtwsChdir = extractGlobalRtwsChdir;
 const path = __importStar(require("path"));
 function extractGlobalRtwsChdir(params) {
+    const baseCwd = params.baseCwd ?? process.cwd();
     let chdir;
     const out = [];
-    const readAbsoluteChdir = (argName, value) => {
-        if (!path.isAbsolute(value)) {
-            throw new Error(`${argName} requires an absolute directory path: ${value}`);
-        }
-        return value;
+    const readChdir = (argName, value) => {
+        if (value.trim() === '')
+            throw new Error(`${argName} requires a directory argument`);
+        return path.resolve(baseCwd, value);
     };
     for (let i = 0; i < params.argv.length; i++) {
         const arg = params.argv[i];
@@ -55,7 +55,7 @@ function extractGlobalRtwsChdir(params) {
             if (typeof next !== 'string' || next.length === 0 || next === '--') {
                 throw new Error(`${arg} requires a directory argument`);
             }
-            chdir = readAbsoluteChdir(arg, next);
+            chdir = readChdir(arg, next);
             i++;
             continue;
         }
@@ -63,14 +63,14 @@ function extractGlobalRtwsChdir(params) {
             const value = arg.slice('--cwd='.length);
             if (value.length === 0)
                 throw new Error(`--cwd requires a directory argument`);
-            chdir = readAbsoluteChdir('--cwd', value);
+            chdir = readChdir('--cwd', value);
             continue;
         }
         if (arg.startsWith('--chdir=')) {
             const value = arg.slice('--chdir='.length);
             if (value.length === 0)
                 throw new Error(`--chdir requires a directory argument`);
-            chdir = readAbsoluteChdir('--chdir', value);
+            chdir = readChdir('--chdir', value);
             continue;
         }
         out.push(arg);

package/dist/cli/cert.d.ts

@@ -1,2 +1,4 @@
 #!/usr/bin/env node
-export declare function main(args?: readonly string[]): Promise<void>;
+export declare function main(args?: readonly string[], runtimeOptions?: Readonly<{
+    certsDirAbs?: string;
+}>): Promise<void>;

package/dist/cli/cert.js

@@ -10,11 +10,10 @@ Dominds certificate tools
 
 Usage:
   dominds cert create [--host <host>] [--days <days>] [--force]
-  dominds cert self-cert [--host <host>] [--days <days>] [--force]
-  dominds cert status --host <host> [--port <port>] [--origin]
+  dominds cert status [--host <host>] [--port <port>] [--origin]
 
 Options:
-  --host <host>      Host name or IP address (default for create: detected non-loopback LAN hosts)
+  --host <host>      Host name or IP address (default: detected non-loopback LAN hosts)
   --days <days>      Certificate validity in days (default: ${certificates_1.DEFAULT_SELF_SIGNED_CERT_DAYS})
   --force            Overwrite existing generated files
   --port <port>      Port for status --origin output
@@ -25,7 +24,7 @@ Certificates live in ~/.dominds/certs/. A WebUI server automatically enables HTT
 a certificate/key pair that matches the bind host or, for 0.0.0.0/::, a detected non-loopback LAN host.
 `);
 }
-async function main(args = process.argv.slice(2)) {
+async function main(args = process.argv.slice(2), runtimeOptions = {}) {
     const first = args[0];
     if (first === undefined || first === '--help' || first === '-h') {
         printHelp();
@@ -49,6 +48,7 @@ async function main(args = process.argv.slice(2)) {
             altHosts: options.altHosts,
             days: options.days,
             force: options.force,
+            certsDirAbs: runtimeOptions.certsDirAbs,
         });
         console.log(`Created self-signed certificate for ${created.host}`);
         console.log(`  hosts: ${created.hosts.join(', ')}`);
@@ -58,17 +58,15 @@ async function main(args = process.argv.slice(2)) {
         console.log(`  days: ${created.days}`);
         return;
     }
-    if (options.host === undefined) {
-        console.error('Error: cert status requires --host <host>');
-        printHelp();
-        process.exit(1);
-    }
-    const lookup = await (0, certificates_1.findAutoHttpsCertificateForHost)({ host: options.host });
     if (options.origin) {
         if (options.port === undefined) {
             console.error('Error: cert status --origin requires --port <port>');
             process.exit(1);
         }
+        const lookup = await withConsoleInfoOnStderr(async () => (0, certificates_1.findAutoHttpsCertificateForHost)({
+            host: options.host ?? '::',
+            certsDirAbs: runtimeOptions.certsDirAbs,
+        }));
         console.log((0, auth_1.formatServerOrigin)({
             scheme: lookup.kind === 'found' ? 'https' : 'http',
             host: lookup.kind === 'found' ? lookup.certificate.matchedHost : lookup.endpoint.urlHost,
@@ -76,6 +74,10 @@ async function main(args = process.argv.slice(2)) {
         }));
         return;
     }
+    const lookup = await (0, certificates_1.findAutoHttpsCertificateForHost)({
+        host: options.host ?? '::',
+        certsDirAbs: runtimeOptions.certsDirAbs,
+    });
     for (const diagnostic of lookup.diagnostics) {
         console.warn(`warning: ${diagnostic.message}`);
     }
@@ -94,7 +96,6 @@ async function main(args = process.argv.slice(2)) {
 function parseAction(value) {
     switch (value) {
         case 'create':
-        case 'self-cert':
             return 'create';
         case 'status':
             return 'status';
@@ -113,24 +114,30 @@ function parseOptions(args, action) {
         const arg = args[i];
         if (arg === '--host') {
             const next = args[i + 1];
-            if (!next)
+            if (next === undefined || next === '') {
                 return { kind: 'error', message: '--host requires a value' };
-            if (host === undefined)
-                host = next;
-            else
-                altHosts.push(next);
+            }
+            const hostResult = addHostOption({ action, host, altHosts, value: next });
+            if (hostResult.kind === 'error')
+                return hostResult;
+            host = hostResult.host;
             i += 1;
             continue;
         }
         if (arg.startsWith('--host=')) {
             const value = arg.slice('--host='.length);
-            if (host === undefined)
-                host = value;
-            else
-                altHosts.push(value);
+            if (value === '')
+                return { kind: 'error', message: '--host requires a value' };
+            const hostResult = addHostOption({ action, host, altHosts, value });
+            if (hostResult.kind === 'error')
+                return hostResult;
+            host = hostResult.host;
             continue;
         }
         if (arg === '--days') {
+            if (action !== 'create') {
+                return { kind: 'error', message: '--days is only valid for cert create' };
+            }
             const next = args[i + 1];
             const parsed = next === undefined ? null : parseInteger(next);
             if (parsed === null)
@@ -140,6 +147,9 @@ function parseOptions(args, action) {
             continue;
         }
         if (arg.startsWith('--days=')) {
+            if (action !== 'create') {
+                return { kind: 'error', message: '--days is only valid for cert create' };
+            }
             const parsed = parseInteger(arg.slice('--days='.length));
             if (parsed === null)
                 return { kind: 'error', message: '--days requires an integer' };
@@ -147,6 +157,9 @@ function parseOptions(args, action) {
             continue;
         }
         if (arg === '--port') {
+            if (action !== 'status') {
+                return { kind: 'error', message: '--port is only valid for cert status' };
+            }
             const next = args[i + 1];
             const parsed = next === undefined ? null : parseInteger(next);
             if (parsed === null || parsed < 1 || parsed > 65535) {
@@ -157,6 +170,9 @@ function parseOptions(args, action) {
             continue;
         }
         if (arg.startsWith('--port=')) {
+            if (action !== 'status') {
+                return { kind: 'error', message: '--port is only valid for cert status' };
+            }
             const parsed = parseInteger(arg.slice('--port='.length));
             if (parsed === null || parsed < 1 || parsed > 65535) {
                 return { kind: 'error', message: '--port requires a valid TCP port' };
@@ -165,10 +181,16 @@ function parseOptions(args, action) {
             continue;
         }
         if (arg === '--force') {
+            if (action !== 'create') {
+                return { kind: 'error', message: '--force is only valid for cert create' };
+            }
             force = true;
             continue;
         }
         if (arg === '--origin') {
+            if (action !== 'status') {
+                return { kind: 'error', message: '--origin is only valid for cert status' };
+            }
             origin = true;
             continue;
         }
@@ -184,12 +206,39 @@ function parseOptions(args, action) {
     }
     return { kind: 'ok', host, days, altHosts, force, port, origin };
 }
+function addHostOption(params) {
+    if (params.host === undefined) {
+        return { kind: 'ok', host: params.value };
+    }
+    if (params.action !== 'create') {
+        return { kind: 'error', message: '--host can only be repeated for cert create' };
+    }
+    params.altHosts.push(params.value);
+    return { kind: 'ok', host: params.host };
+}
 function parseInteger(raw) {
     if (!/^[0-9]+$/.test(raw))
         return null;
     const parsed = Number(raw);
     return Number.isSafeInteger(parsed) ? parsed : null;
 }
+async function withConsoleInfoOnStderr(fn) {
+    const originalInfo = console.info;
+    const originalDebug = console.debug;
+    console.info = (...args) => {
+        console.error(...args);
+    };
+    console.debug = (...args) => {
+        console.error(...args);
+    };
+    try {
+        return await fn();
+    }
+    finally {
+        console.info = originalInfo;
+        console.debug = originalDebug;
+    }
+}
 if (require.main === module) {
     main().catch((error) => {
         console.error(error instanceof Error ? error.message : String(error));

package/dist/cli/create.d.ts

@@ -8,7 +8,7 @@
  *
  * Notes:
  * - Template can be a short name (resolved via DOMINDS_TEMPLATE_BASE) or a git URL.
- * - rtws directory is `process.cwd()`. Use 'dominds -C <abs-dir> create ...' to create under another base dir.
+ * - rtws directory is `process.cwd()`. Use 'dominds -C <dir> create ...' to create under another base dir.
  */
 declare function main(argv?: readonly string[]): Promise<void>;
 export { main };

package/dist/cli/create.js

@@ -9,7 +9,7 @@
  *
  * Notes:
  * - Template can be a short name (resolved via DOMINDS_TEMPLATE_BASE) or a git URL.
- * - rtws directory is `process.cwd()`. Use 'dominds -C <abs-dir> create ...' to create under another base dir.
+ * - rtws directory is `process.cwd()`. Use 'dominds -C <dir> create ...' to create under another base dir.
  */
 var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
     if (k2 === undefined) k2 = k;

package/dist/cli/read.js

@@ -59,7 +59,7 @@ function printUsage() {
     console.log('`--audit` runs prompt audit via hidden teammate @fuxi using default LLM config (skips when unavailable), and also includes static toolset checks (registry vs `.minds/mcp.yaml` declarations).');
     console.log('When <member-id> is omitted, reads all visible team members.');
     console.log('');
-    console.log("Note: rtws (runtime workspace) directory is `process.cwd()`. Use 'dominds -C <abs-dir> read' to run in another rtws.");
+    console.log("Note: rtws (runtime workspace) directory is `process.cwd()`. Use 'dominds -C <dir> read' to run in another rtws.");
     console.log('');
     console.log('Examples:');
     console.log('  dominds read                    # Read all team members');

package/dist/cli/tui.js

@@ -76,7 +76,7 @@ function showHelp() {
     console.log('');
     console.log('Start or continue a dialog with an AI team member using a Taskdoc.');
     console.log('');
-    console.log("Note: rtws (runtime workspace) directory is `process.cwd()`. Use 'dominds -C <abs-dir> tui ...' to run in another rtws.");
+    console.log("Note: rtws (runtime workspace) directory is `process.cwd()`. Use 'dominds -C <dir> tui ...' to run in another rtws.");
     console.log('');
     console.log('Arguments:');
     console.log('  <taskdoc-path>    Path to Taskdoc (required for dialog)');

package/dist/cli/webui.js

@@ -38,7 +38,7 @@ Usage:
   dominds webui [options]
 
 Note:
-  rtws (runtime workspace) directory is \`process.cwd()\`. Use 'dominds -C <abs-dir> webui' to run in another rtws.
+  rtws (runtime workspace) directory is \`process.cwd()\`. Use 'dominds -C <dir> webui' to run in another rtws.
 
 Options:
   -p, --port <port>    Port to listen on. Bare port is strict; suffix + tries higher ports; suffix - tries lower ports.
@@ -164,17 +164,19 @@ async function main(args = process.argv.slice(2)) {
             host: started.urlHost,
             port: started.port,
         })}`);
+        let httpsEndpoint;
         if (started.httpsPort !== undefined && started.httpsUrlHost !== undefined) {
+            httpsEndpoint = { host: started.httpsUrlHost, port: started.httpsPort };
             const httpsBaseUrl = (0, auth_1.formatServerOrigin)({
                 scheme: 'https',
-                host: started.httpsUrlHost,
-                port: started.httpsPort,
+                host: httpsEndpoint.host,
+                port: httpsEndpoint.port,
             });
             log.info(`HTTPS WebUI ready: ${httpsBaseUrl}`);
             log.debug(`HTTPS WebSocket endpoint: ${formatWebSocketEndpoint({
                 scheme: 'wss',
-                host: started.httpsUrlHost,
-                port: started.httpsPort,
+                host: httpsEndpoint.host,
+                port: httpsEndpoint.port,
             })}`);
         }
         if (auth.kind === 'enabled') {
@@ -185,6 +187,14 @@ async function main(args = process.argv.slice(2)) {
                 authKey: auth.key,
             });
             log.info(`auto auth url (sensitive): ${autoAuthUrl}`);
+            if (httpsEndpoint !== undefined) {
+                log.info(`HTTPS auto auth url (sensitive): ${(0, auth_1.formatAutoAuthUrl)({
+                    scheme: 'https',
+                    host: httpsEndpoint.host,
+                    port: httpsEndpoint.port,
+                    authKey: auth.key,
+                })}`);
+            }
             if (shouldOpen) {
                 log.debug(`Opening browser: ${autoAuthUrl}`);
                 openInBrowser(autoAuthUrl);

package/dist/cli-runner.d.ts

@@ -0,0 +1,31 @@
+#!/usr/bin/env node
+/**
+ * Business CLI runner for dominds
+ *
+ * Usage:
+ *   dominds [subcommand] [options]
+ *
+ * Subcommands:
+ *   webui    - Start WebUI server (default)
+ *   tui      - Start Text User Interface
+ *   run      - Run task dialog (alias for tui)
+ *   read     - Read team configuration
+ *   man      - Render toolset manual to stdout
+ *   manual   - Alias for man
+ *   validate_team_def - Validate explicit team toolset declarations
+ *   cert     - Create and inspect local HTTPS certificates
+ *   create   - Create a new runtime workspace (rtws) from a template
+ *   install  - Install a Dominds App into this rtws
+ *   doctor   - Diagnose Dominds App state in this rtws
+ *   enable   - Enable an installed Dominds App in this rtws
+ *   disable  - Disable an installed Dominds App in this rtws
+ *   uninstall- Uninstall a Dominds App from this rtws
+ *   update   - Update installed Dominds App(s)
+ *   new      - Alias for create
+ *   help     - Show help
+ *
+ * This file is launched by the top-level dominds supervisor.
+ */
+import './tools/builtins';
+export declare function configureEnvProxySupport(): void;
+export declare function main(argv?: readonly string[]): Promise<void>;