newmark-agent 0.3.12 → 0.4.2

package/dist/toolchain/registry/tool-registry.d.ts

@@ -1,4 +1,4 @@
-import { ToolDescriptor, ToolIdempotency, RiskLevel } from '../../context/domain/types';
+import { ToolDescriptor, ToolIdempotency, RiskLevel, ToolExecuteFn, ToolConcurrencySafeFn, ToolRenderFn, ToolPresentationMetaFn, ToolFinalizeContentFn, ToolPresentCallFn, ToolPresentResultFn } from '../../context/domain/types';
 export interface ToolDescriptorInput {
     toolId: string;
     capabilityId: string;
@@ -15,6 +15,18 @@ export interface ToolDescriptorInput {
     supportedScopes?: string[];
     cacheGroup?: string;
     implementationHash?: string;
+    /** DSH ToolDefinition.execute：命令式功能实现引用（cordis 核功能承载）。 */
+    execute?: ToolExecuteFn;
+    /** DSH ToolDefinition.isConcurrencySafe：运行时并发分类。 */
+    isConcurrencySafe?: ToolConcurrencySafeFn;
+    /** DSH ToolOutputDefinition.render / presentationMeta。 */
+    render?: ToolRenderFn;
+    presentationMeta?: ToolPresentationMetaFn;
+    /** DSH ToolDefinition.finalizeContent / timeoutMs / presentCall / presentResult。 */
+    finalizeContent?: ToolFinalizeContentFn;
+    timeoutMs?: number;
+    presentCall?: ToolPresentCallFn;
+    presentResult?: ToolPresentResultFn;
 }
 /**
  * Tool Registry: the authoritative set of ToolDescriptors. Schemas are

package/dist/toolchain/registry/tool-registry.js

@@ -28,6 +28,14 @@ class ToolRegistry {
             implementationHash: input.implementationHash,
             cacheGroup: input.cacheGroup || `${input.namespace}.${input.name}`,
             enabled: true,
+            execute: input.execute,
+            isConcurrencySafe: input.isConcurrencySafe,
+            render: input.render,
+            presentationMeta: input.presentationMeta,
+            finalizeContent: input.finalizeContent,
+            timeoutMs: input.timeoutMs,
+            presentCall: input.presentCall,
+            presentResult: input.presentResult,
         };
         this.tools.set(input.toolId, descriptor);
         return descriptor;

package/dist/toolchain/registry-seeder.js

@@ -15,7 +15,7 @@ const DOMAIN_PREFIXES = [
     [/^web_/, 'web'],
     [/^computer_use$/, 'computer'],
     [/^(image_|ocr_|pdf_)/, 'media'],
-    [/^(bash|pwd|read|write|edit|glob|grep)$/, 'core'],
+    [/^(bash|pwd|read|write|edit|delete_file|glob|grep)$/, 'core'],
 ];
 const READ_TOOL_PATTERN = /^(pwd|read|glob|grep|git_status|git_log|git_diff|git_branch|git_show|memory_lab_read|memory_lab_query|skill|linked_plan|build_history_query|subagent_read|subagent_result|subagent_list|subagent_progress|question|image_inspect|image_display|ocr_read|pdf_read|automation_list|automation_status)$/;
 /**
@@ -60,15 +60,28 @@ function inferRiskLevel(name, description, annotations) {
         return 'external';
     if (READ_TOOL_PATTERN.test(name))
         return 'read';
+    // DSH 读工具命名惯例（get_/list_/query_/inspect_/read_ 前缀）：这些动词本质只读，
+    // 避免被启发式误判为 write（例如 DSH 的 get_goal / cordis_inspect_list）。
+    if (/^(get_|list_|query_|inspect_|read_)/.test(name) && !/_(create|update|set|write|delete|remove|run|execute|send|save|push|edit|toggle|define|stop|start)$/.test(name))
+        return 'read';
     return 'write';
 }
 function inferIdempotency(name) {
-    if (/^(bash|computer_use|browser_use|run|exec|execute|task)$/.test(name))
+    // shell 命令工具每次执行都可能改变外部状态，本质非幂等（DSH pwsh/bash/terminal 等）。
+    if (/^(bash|pwsh|powershell|cmd|shell|terminal|computer_use|browser_use|run|exec|execute|task)$/.test(name))
         return 'non_idempotent';
     if (/^(write|edit|append|send|save|create|update|set|put|register|patch)/.test(name))
         return 'conditionally_idempotent';
     return undefined;
 }
+/** 从真实 tool description 提取简洁 shortDescription（首句或截断），保 cordis 核可读。 */
+function compactDescription(description, fallback) {
+    const clean = String(description || '').replace(/\s+/g, ' ').trim();
+    if (!clean)
+        return fallback;
+    const firstSentence = clean.split(/(?<=[.!?])\s+/)[0] || clean;
+    return firstSentence.slice(0, 120);
+}
 function resolveDefinition(definition) {
     if (!definition || typeof definition !== 'object')
         return null;
@@ -82,11 +95,35 @@ function resolveDefinition(definition) {
         };
     }
     if (typeof record.name === 'string') {
+        // 兼容两种字段名：Newmark 的 SeededToolDefinition 用 inputSchema，
+        // DSH 的 ToolSchema 用 parameters（dsh-llm ToolSchema：{name, description, parameters}）。
+        const rawParameters = record.inputSchema ?? record.parameters;
+        const rawExecute = record.execute;
+        const rawConcurrencySafe = record.isConcurrencySafe;
+        // DSH ToolOutputDefinition 是嵌套对象 {schema, render, presentationMeta}；
+        // outputSchema 从 output.schema 提取。
+        const rawOutput = record.output;
+        const outputSchema = record.outputSchema ?? rawOutput?.schema;
+        const render = rawOutput?.render;
+        const presentationMeta = rawOutput?.presentationMeta;
+        const finalizeContent = record.finalizeContent;
+        const timeoutMs = record.timeoutMs;
+        const presentCall = record.presentCall;
+        const presentResult = record.presentResult;
         return {
             name: record.name,
             description: typeof record.description === 'string' ? record.description : '',
-            parameters: record.inputSchema,
+            parameters: rawParameters,
+            outputSchema,
             annotations: record.annotations,
+            execute: typeof rawExecute === 'function' ? rawExecute : undefined,
+            isConcurrencySafe: typeof rawConcurrencySafe === 'function' ? rawConcurrencySafe : undefined,
+            render: typeof render === 'function' ? render : undefined,
+            presentationMeta: typeof presentationMeta === 'function' ? presentationMeta : undefined,
+            finalizeContent: typeof finalizeContent === 'function' ? finalizeContent : undefined,
+            timeoutMs: typeof timeoutMs === 'number' ? timeoutMs : undefined,
+            presentCall: typeof presentCall === 'function' ? presentCall : undefined,
+            presentResult: typeof presentResult === 'function' ? presentResult : undefined,
         };
     }
     return null;
@@ -135,7 +172,7 @@ function seedToolchainFromDefinitions(definitions, options) {
         if (riskLevel === 'destructive' || (riskLevel === 'external' && entry.input.riskLevel !== 'destructive')) {
             entry.input.riskLevel = riskLevel;
         }
-        entry.resolved.push({ name: definition.name, riskLevel, parameters: definition.parameters });
+        entry.resolved.push({ ...definition, riskLevel, domain });
     }
     for (const [domain, entry] of byDomain) {
         const requiredPermissions = entry.input.riskLevel === 'destructive'
@@ -166,13 +203,22 @@ function seedToolchainFromDefinitions(definitions, options) {
                 namespace,
                 name: tool.name,
                 version,
-                shortDescription: tool.name,
-                fullDescription: `${tool.name} (${domain})`,
+                shortDescription: compactDescription(tool.description, tool.name),
+                fullDescription: tool.description && tool.description.trim() ? tool.description : `${tool.name} (${domain})`,
                 inputSchema: tool.parameters ?? { type: 'object', properties: {}, required: [] },
+                outputSchema: tool.outputSchema,
                 riskLevel: tool.riskLevel,
                 idempotency,
                 requiredPermissions: required,
                 implementationHash: (0, deterministic_1.sha256)(tool.name),
+                execute: tool.execute,
+                isConcurrencySafe: tool.isConcurrencySafe,
+                render: tool.render,
+                presentationMeta: tool.presentationMeta,
+                finalizeContent: tool.finalizeContent,
+                timeoutMs: tool.timeoutMs,
+                presentCall: tool.presentCall,
+                presentResult: tool.presentResult,
             };
             core.registry.register(input);
             toolIds.push(tool.name);

package/dist/tools/index.d.ts

@@ -59,6 +59,7 @@ export declare class ToolExecutor {
     private fread;
     private fwrite;
     private fedit;
+    private fdelete;
     private glob;
     private grep;
     private createProxyAgent;

package/dist/tools/index.js

@@ -227,6 +227,7 @@ class ToolExecutor {
             t('read', 'Read file contents. Use ABSOLUTE paths. The working directory is given in system prompt.', { path: { type: 'string' } }, ['path']),
             t('write', 'Write/create a file. Use ABSOLUTE paths.', { path: { type: 'string' }, content: { type: 'string' } }, ['path', 'content']),
             t('edit', 'Edit file with find-and-replace. Use ABSOLUTE paths.', { path: { type: 'string' }, old_str: { type: 'string' }, new_str: { type: 'string' } }, ['path', 'old_str', 'new_str']),
+            t('delete_file', 'Delete ONE file under Agent supervision. Use ABSOLUTE paths. This tool refuses directory deletion and wildcard paths; delete files one by one. Never use bash rm/del/Remove-Item for batch (recursive/wildcard/loop/pipe/multi-target) deletion — the runtime hard-blocks such commands.', { path: { type: 'string' } }, ['path']),
             t('glob', 'Find files by glob pattern (e.g. **/*.ts, src/**/*.html)', { pattern: { type: 'string' } }, ['pattern']),
             t('grep', 'Search file content with regex', { pattern: { type: 'string' }, path: { type: 'string' } }, ['pattern', 'path']),
             t('web_search', 'Search the web', { query: { type: 'string' } }, ['query']),
@@ -349,9 +350,9 @@ class ToolExecutor {
             t('subagent_result', 'Return the persisted transcript, mailbox summary, status, and latest result for a peer agent. Target by exact id (preferred) or name.', { id: { type: 'string', description: 'Exact peer id from subagent_list.' }, name: { type: 'string', description: 'Convenience peer name.' } }, []),
             t('subagent_close', 'Close a same-conversation peer. Root can close any peer; a peer can close only itself. Target by exact id (preferred) or name.', { id: { type: 'string', description: 'Exact peer id from subagent_list.' }, name: { type: 'string', description: 'Convenience peer name.' } }, []),
             t('linked_plan', 'Read or update the current conversation linked Markdown plan. Update requires the current expected_revision.', { action: { type: 'string', enum: ['get', 'update'] }, markdown: { type: 'string' }, expected_revision: { type: 'number' } }, ['action']),
-            t('build_history_query', 'Read the concrete public work details of one historical Build Block. The prompt already exposes user input, final summary, and completion status; call this read-only tool only when the user asks what specifically happened. Select by newest-to-oldest history_index, or by run_id returned from an earlier query.', { history_index: { type: 'number', minimum: 1, description: '1-based historical Build Block index from the request ledger; 1 is the newest previous task.' }, run_id: { type: 'string', description: 'Exact run id returned by an earlier build_history_query result.' }, max_events: { type: 'number', minimum: 1, maximum: 200, description: 'Maximum trailing public work events; defaults to 80.' } }, []),
+            t('build_history_query', 'Read the concrete public work details of one historical Build Block. The prompt already exposes user input, final summary, and completion status; call this read-only tool only when the user asks what specifically happened. Select by newest-to-oldest history_index, or by run_id returned from an earlier query. Every activity/guide content is bounded to max_chars (default 2000) to keep the read lean and cache-friendly.', { history_index: { type: 'number', minimum: 1, description: '1-based historical Build Block index from the request ledger; 1 is the newest previous task.' }, run_id: { type: 'string', description: 'Exact run id returned by an earlier build_history_query result.' }, max_events: { type: 'number', minimum: 1, maximum: 200, description: 'Maximum trailing public work events; defaults to 80.' }, max_chars: { type: 'number', minimum: 100, maximum: 4000, description: 'Per-event/per-guide content character bound; defaults to 2000.' } }, []),
             t('context_compress', 'Actively compress the LLM context history for this conversation. This collapses older history entries into a concise summary while preserving the recent tail, which reduces context tokens and cost. IMPORTANT: it affects only the LLM context (what the model sees); the displayed conversation history shown to the user is never altered. Call this when the conversation is long, token pressure is high, or you judge that older turns are no longer needed in full. Idempotent and safe: repeated calls produce incremental summaries.', { keep_recent: { type: 'number', minimum: 2, maximum: 60, description: 'Recent message count to keep uncompressed at the tail. Defaults to the configured keep_recent_messages.' }, force: { type: 'boolean', description: 'Compress even if the context is not yet over the automatic threshold. Defaults to false.' } }, []),
-            t('context_history_manage', 'Manage the LLM context history for this conversation without affecting the displayed conversation history. This is the active context-management surface. The hot cache stays bounded; evicted folded segments remain in a conversation-isolated append-only cold archive and are loaded only by explicit search/read/restore calls. Actions: list returns a bounded index of current context entries; remove deletes one current entry; summarize folds a contiguous current range; restore reinserts a folded segment when its summary marker is still present; search finds matching hot or archived segments; read returns one bounded segment without injecting the whole archive; status reports budgets, hot cache, cold archive, and the protected recent zone. The recent context tail and last user message are protected from remove/summarize unless dangerous is true.', {
+            t('context_history_manage', 'Manage the LLM context history for this conversation without affecting the displayed conversation history. This is the active context-management surface. The hot cache stays bounded; evicted folded segments remain in a conversation-isolated append-only cold archive and are loaded only by explicit search/read/restore calls. Actions: list returns a bounded index of current context entries; remove declares one long-term entry for unload (see below); summarize folds a contiguous current range; restore reinserts a folded segment when its summary marker is still present; search finds matching hot or archived segments; read returns one bounded segment without injecting the whole archive; status reports budgets, hot cache, cold archive, the protected recent zone, and pending removals. The recent context tail and last user message are protected from remove/summarize unless dangerous is true. For cache-optimization, remove ONLY targets long-term history (never the protected recent tail or last user message) and does NOT unload immediately: the declared entry stays in context for the rest of the current Build Block so the provider prefix cache stays stable, then is physically removed when the Block ends — applying to subsequent Blocks only.', {
                 action: { type: 'string', enum: ['list', 'remove', 'summarize', 'restore', 'search', 'read', 'status'], description: 'list current entries; remove one; summarize a range; restore by restore_id; search hot/cold folded segments; read one bounded folded segment; status report context budgets and storage.' },
                 position: { type: 'number', minimum: 0, description: '0-based context entry index for remove, or the start of the range for summarize.' },
                 to: { type: 'number', minimum: 0, description: '0-based inclusive end of the range for summarize. Defaults to position.' },
@@ -363,6 +364,15 @@ class ToolExecutor {
                 max_chars: { type: 'number', minimum: 1000, maximum: 60000, description: 'Maximum message-content characters returned by read (default 12000).' },
                 dangerous: { type: 'boolean', description: 'Set true to override the protected recent-message zone and allow removing/summarizing entries that include the recent context tail or the last user message.' },
             }, ['action']),
+            t('branch_list', 'List all branches in this conversation and their mailbox/activity status. Only available when the conversation was created with "允许分支交流" (allow branch communication) enabled. Returns each branch id, active flag, source message index, message/history/workRun counts, and unread mailbox counts so you can decide who to message or read next.', {}, []),
+            t('branch_send', 'Send a message to another branch in this conversation. Only available when branch communication is enabled. The message is persisted to the target branch mailbox and becomes visible to that branch on its next branch_read. Use this to coordinate work across concurrently running branches. A branch cannot message itself.', { to_branch: { type: 'string', description: 'Target branch id (from branch_list).' }, message: { type: 'string', description: 'Message body to deliver.' }, kind: { type: 'string', enum: ['message', 'directive', 'result'], description: 'Message kind; defaults to message.' }, correlation_id: { type: 'string', description: 'Optional correlation id for reply tracking.' }, reply_to: { type: 'string', description: 'Optional message id this message replies to.' } }, ['to_branch', 'message']),
+            t('branch_read', 'Read inbound messages and recent activity from another branch in this conversation. Only available when branch communication is enabled. Marks inbound messages read. Returns the branch metadata, inbound messages, and recent Build Block activity (final results and recent events).', { branch: { type: 'string', description: 'Branch id to read (from branch_list).' }, max_chars: { type: 'number', minimum: 100, maximum: 16000, description: 'Maximum characters for final-result text; defaults to 8000.' } }, ['branch']),
+            t('branch_create', 'Create a new conversation branch at a historical block position (a user message index) with a new initial instruction. Only available when branch communication is enabled. The new branch becomes an additional running branch. Use this to spin off alternative work from a past point without disturbing existing branches.', { message_index: { type: 'number', minimum: 0, description: '0-based index of a user message in the conversation history (the historical block position to branch from).' }, prompt: { type: 'string', description: 'The new branch initial instruction (becomes the branch user message).' }, message_id: { type: 'string', description: 'Optional exact message id to anchor the branch target.' }, guide_id: { type: 'string', description: 'Optional guide id to anchor the branch target.' } }, ['message_index', 'prompt']),
+            t('compress_tool_result', 'Compress ONE oversized tool result into a concise, format-preserving summary using the model, instead of hard truncation. Pass the artifact_id returned inline by an oversized tool result (the full raw content stays out of context, on disk). Use this when a read/grep/bash result reported an oversized_tool_result marker and you want to recover its structure (JSON arrays, table rows, code blocks, identifiers, error strings) as a compact summary. This runs an isolated compression call whose system prefix does not touch the conversation prompt cache, so it does not disturb cache hit rate.', { artifact_id: { type: 'string', description: 'The artifact_id from the oversized_tool_result marker returned inline by an oversized tool result.' }, content: { type: 'string', description: 'Optional fallback: a SHORT raw result text to compress directly when no artifact_id exists.' }, format_hint: { type: 'string', description: 'Optional description of the structure to preserve verbatim (e.g. "keep JSON arrays and file paths", "keep table columns and error strings").' } }, []),
+            t('background_tool', 'Run a tool call in the background WITHOUT blocking the conversation turn. Pass the target tool name and its arguments; this tool returns a background_id IMMEDIATELY, and the real tool keeps running in the background. The result is persisted and can be retrieved later with read_tool_result. Use this for long-running or non-critical tools (bash, web_fetch, long read/grep) so the conversation continues without waiting. The background result stays OUT of context until you explicitly read it, preserving prompt-cache hit rate. Orchestration/flow/subagent/question tools cannot be backgrounded.', { tool: { type: 'string', description: 'The tool name to run in the background (e.g. bash, web_fetch, read, grep).' }, args: { type: 'object', description: 'The arguments object for the target tool, matching its normal schema.' } }, ['tool']),
+            t('read_tool_result', 'Read the result of a background tool. Pass the background_id returned by background_tool. When status is running, returns a running marker; when done, returns the persisted result (optionally release it from storage after reading); when error, returns the failure. Background results are released from storage only when you set release=true.', { background_id: { type: 'string', description: 'The background_id returned by background_tool.' }, release: { type: 'boolean', description: 'Set true to release the persisted result from storage after reading it.' } }, ['background_id']),
+            t('goal_manage', 'Actively manage the persistent Goal state for this conversation. You may enter Goal mode, update (edit) its objective, mark it complete, or exit Goal mode yourself. Call this when the user asks you to pursue a persistent objective, when the objective changes, when you have verified the objective is genuinely achieved, or when you judge the Goal is no longer needed and should be cleared. This is the agent-side state control that mirrors the GUI goal panel controls. enter/update require objective; complete marks the objective verified and exits Goal mode; exit clears the Goal (and returns to Build mode) without claiming completion.', { action: { type: 'string', enum: ['enter', 'update', 'complete', 'exit'], description: 'enter=enter Goal mode and set the objective; update=edit the objective (records a change); complete=mark the objective verified-achieved and exit Goal mode; exit=clear the Goal and return to Build mode without claiming completion.' }, objective: { type: 'string', description: 'The Goal objective text. Required for enter and update.' }, reason: { type: 'string', description: 'Optional one-line reason for the state change, recorded for audit.' } }, ['action']),
+            t('conversation_rename', 'Rename the CURRENT conversation to a concise, descriptive title you choose. On the FIRST Build Block of a NEW conversation the runtime asks you to call this once so the conversation list shows a meaningful name instead of an auto-generated one. Keep the title short (a few words) and cache-friendly: a concrete noun phrase describing the task, never a sentence or quoted prompt.', { title: { type: 'string', description: 'The new conversation title (a short noun phrase, e.g. "Fix TUI color leak", "Add goal_manage tool").' } }, ['title']),
             t('question', 'Ask user a multiple-choice question', { questions: { type: 'array' } }, ['questions']),
             t('skill_download', 'Download a skill', { name: { type: 'string' }, source: { type: 'string' } }, ['name', 'source']),
             t('skill', 'Search enabled skill metadata or load one exact skill body on demand. Use query when unsure, then name to load the selected skill.', { query: { type: 'string', maxLength: 200 }, name: { type: 'string', maxLength: 200 } }, []),
@@ -569,6 +579,7 @@ class ToolExecutor {
                 case 'read':
                 case 'write':
                 case 'edit':
+                case 'delete_file':
                 case 'grep':
                 case 'file_audit':
                 case 'pdf_read':
@@ -589,6 +600,15 @@ class ToolExecutor {
             : null;
         if (bashGuard)
             return bashGuard;
+        // 硬性删除审查：允许单文件删除，拒绝脚本/命令批量删除。
+        const deletionGuardTarget = tool === 'bash' || (tool === 'terminal_takeover' && g('action') === 'write')
+            ? g('command')
+            : null;
+        if (deletionGuardTarget !== null) {
+            const deletionGuard = (0, toolPolicy_1.evaluateDeletionGuard)(deletionGuardTarget);
+            if (deletionGuard.blocked)
+                return deletionGuard.reason || '[deletion guard] Batch deletion is not allowed.';
+        }
         try {
             switch (tool) {
                 case 'bash': return await this.bash(g('command'), wsPath, args.timeout_ms, context.signal);
@@ -596,6 +616,7 @@ class ToolExecutor {
                 case 'read': return this.fread(resolve(g('path')));
                 case 'write': return this.fwrite(resolve(g('path')), g('content'));
                 case 'edit': return this.fedit(resolve(g('path')), g('old_str'), g('new_str'));
+                case 'delete_file': return this.fdelete(resolve(g('path')));
                 case 'glob': return this.glob(g('pattern'), wsPath);
                 case 'grep': return this.grep(g('pattern'), resolve(g('path')));
                 case 'web_search': return await this.wsearch(g('query'), context.signal);
@@ -1127,6 +1148,22 @@ class ToolExecutor {
             return `[edit] ${e}`;
         }
     }
+    fdelete(p) {
+        try {
+            if (/[*?]/.test(p))
+                return '[delete_file] Refused: wildcard paths are not allowed. Delete one file per call.';
+            const resolved = path.resolve(p);
+            const stat = fs.lstatSync(resolved);
+            if (stat.isDirectory()) {
+                return '[delete_file] Refused: deleting a directory is not allowed. Delete files one by one under Agent supervision.';
+            }
+            fs.unlinkSync(resolved);
+            return `[delete_file] OK: ${resolved}`;
+        }
+        catch (e) {
+            return `[delete_file] ${e instanceof Error ? e.message : String(e)}`;
+        }
+    }
     glob(pattern, ws) {
         try {
             const results = globSync(pattern, {

package/dist/tools/nativeTools.js

@@ -11,6 +11,7 @@ exports.NATIVE_TOOL_CATALOG = [
     { name: 'read', label: 'Read file', description: 'Read workspace file contents.', category: 'core', defaultEnabled: true, protected: true, availability: 'required' },
     { name: 'write', label: 'Write file', description: 'Create or overwrite workspace files.', category: 'core', defaultEnabled: true },
     { name: 'edit', label: 'Edit file', description: 'Patch workspace files through exact find and replace.', category: 'core', defaultEnabled: true },
+    { name: 'delete_file', label: 'Delete file', description: 'Delete one file at a time under Agent supervision; refuses directory and wildcard deletion.', category: 'core', defaultEnabled: true },
     { name: 'glob', label: 'Glob files', description: 'Find files by glob pattern.', category: 'core', defaultEnabled: true, protected: true, availability: 'required' },
     { name: 'grep', label: 'Search files', description: 'Search workspace text by regex.', category: 'core', defaultEnabled: true, protected: true, availability: 'required' },
     { name: 'web_search', label: 'Web search', description: 'Search the web from the Agent.', category: 'web', defaultEnabled: true },
@@ -38,10 +39,14 @@ exports.NATIVE_TOOL_CATALOG = [
     { name: 'subagent_send', label: 'Subagent send', description: 'Persist a message to a peer mailbox.', category: 'agent', defaultEnabled: true, protected: true, availability: 'mode-scoped' },
     { name: 'subagent_result', label: 'Subagent result', description: 'Read peer transcript and result.', category: 'agent', defaultEnabled: true, protected: true, availability: 'mode-scoped' },
     { name: 'subagent_close', label: 'Subagent close', description: 'Close a same-conversation peer agent.', category: 'agent', defaultEnabled: true, protected: true, availability: 'mode-scoped' },
+    { name: 'branch_list', label: 'Branch list', description: 'List all conversation branches and their mailbox/activity status. Only available when branch communication is enabled.', category: 'agent', defaultEnabled: true, protected: true, availability: 'mode-scoped' },
+    { name: 'branch_send', label: 'Branch send', description: 'Send a message to another conversation branch. Only available when branch communication is enabled.', category: 'agent', defaultEnabled: true, protected: true, availability: 'mode-scoped' },
+    { name: 'branch_read', label: 'Branch read', description: 'Read inbound messages and recent activity from another conversation branch. Only available when branch communication is enabled.', category: 'agent', defaultEnabled: true, protected: true, availability: 'mode-scoped' },
+    { name: 'branch_create', label: 'Branch create', description: 'Create a new conversation branch at a historical block position. Only available when branch communication is enabled.', category: 'agent', defaultEnabled: true, protected: true, availability: 'mode-scoped' },
     { name: 'linked_plan', label: 'Linked plan', description: 'Read or conservatively update the conversation-linked Markdown plan.', category: 'agent', defaultEnabled: true, protected: true, availability: 'mode-scoped' },
     { name: 'build_history_query', label: 'Build history query', description: 'Read concrete public work details for one historical Build Block.', category: 'agent', defaultEnabled: true, protected: true, availability: 'mode-scoped' },
     { name: 'context_compress', label: 'Context compress', description: 'Actively compress the LLM context history, leaving the displayed conversation history unchanged.', category: 'agent', defaultEnabled: true, protected: true, availability: 'mode-scoped' },
-    { name: 'context_history_manage', label: 'Context history manage', description: 'Inspect, search, restore, or fold LLM context history without touching the displayed conversation history.', category: 'agent', defaultEnabled: true, protected: true, availability: 'mode-scoped' },
+    { name: 'context_history_manage', label: 'Context history manage', description: 'Inspect, search, restore, fold, or unload LLM context history without touching the displayed conversation history. Unload (remove) targets long-term entries only and takes effect after the current Build Block, for subsequent Blocks only.', category: 'agent', defaultEnabled: true, protected: true, availability: 'mode-scoped' },
     { name: 'question', label: 'Ask question', description: 'Ask the user for structured option feedback.', category: 'agent', defaultEnabled: true, protected: true, availability: 'mode-scoped' },
     { name: 'skill_download', label: 'Skill download', description: 'Download and install a skill.', category: 'agent', defaultEnabled: true },
     { name: 'skill', label: 'Skill', description: 'Search enabled skill metadata or load one skill body on demand.', category: 'agent', defaultEnabled: true, protected: true, availability: 'mode-scoped' },

package/dist/tui/src/app.js

@@ -17,9 +17,12 @@ const {
   createState,
   cycleConversationMode,
   enterConversation,
+  enterHistoryEventFocus,
+  exitHistoryEventFocus,
   filteredCommands,
   moveFocusHorizontal,
   moveConversationHistoryCursor,
+  moveHistoryEventCursor,
   moveInputCursorVertical,
   moveMenuSelection,
   moveSettingChoiceSelection,
@@ -37,6 +40,7 @@ const {
   toggleAgentHistory,
   toggleConversationPinned,
   toggleSelectedBuildBlock,
+  toggleSelectedBuildEvent,
   toggleSelected,
   toggleWorkflowDetails,
   validateSelectedModel
@@ -330,7 +334,21 @@ function start(options = {}) {
         Promise.resolve(requestConversationStop(state)).finally(paint);
       } else if (key.name === "tab") {
         state.conversationHistoryFocus = false;
+        state.historyEventFocus = false;
+        state.historyEventIndex = -1;
         returnToConversationSelection(state);
+      } else if (state.historyEventFocus) {
+        if (key.name === "left") {
+          exitHistoryEventFocus(state);
+        } else if (key.name === "up") {
+          moveHistoryEventCursor(state, -1);
+        } else if (key.name === "down") {
+          moveHistoryEventCursor(state, 1);
+        } else if (key.name === "return" || key.name === "space") {
+          toggleSelectedBuildEvent(state);
+        }
+      } else if (key.name === "right") {
+        enterHistoryEventFocus(state);
       } else if (key.name === "up") {
         moveConversationHistoryCursor(state, -1);
       } else if (key.name === "down") {
@@ -490,6 +508,12 @@ function start(options = {}) {
       state.focusRegion = "content";
       state.contentColumn = 0;
       state.notice = "Search Memory Lab tags";
+    } else if (state.view === "memory" && !state.inputMode && (str === "o" || str === "O")) {
+      state.notice = "Opening Memory Lab Overview";
+      var overviewResult = state.adapter.openMemoryOverview();
+      if (overviewResult && typeof overviewResult.then === "function") {
+        overviewResult.catch(function(error) { state.notice = "Overview failed: " + error.message; }).finally(paint);
+      }
     } else if (key.name === "tab") {
       state.focusRegion = "menu";
       state.contentColumn = 0;

package/dist/tui/src/i18n.js

@@ -0,0 +1,151 @@
+"use strict";
+
+/**
+ * Lightweight terminal i18n for the Newmark TUI.
+ *
+ * The TUI chrome (navigation, section headers, view titles, and hints) is
+ * rendered in the language chosen under Settings → General → Language. Model,
+ * tool, provider, conversation, and workspace names are user data and stay
+ * verbatim. Keys are the English source strings, so an untranslated string
+ * silently falls back to English rather than dropping text.
+ */
+
+const ZH = Object.freeze({
+  // Sidebar sections
+  "WORKSPACES": "工作区",
+  "OPERATIONS": "操作",
+  "ACTIVE TARGET": "当前目标",
+  "ACTIVE CONVERSATION": "当前对话",
+  "Agent TUI": "Agent 终端",
+
+  // Navigation labels (TUI/src/data.js)
+  "Conversations": "对话",
+  "Plan": "计划",
+  "Goal": "目标",
+  "Subagents": "子代理",
+  "Model": "模型",
+  "Flow Bar": "流程条",
+  "Flow List": "流程列表",
+  "Flow Task": "流程任务",
+  "Tools": "工具",
+  "Memory Lab": "记忆实验室",
+  "Automations": "自动化",
+  "WorkFlow": "工作流",
+  "Settings": "设置",
+  "Help": "帮助",
+
+  // Conversation context
+  "Conversation plan": "对话计划",
+  "Conversation goal": "对话目标",
+  "Conversation subagents": "对话子代理",
+  "Model and reasoning effort": "模型与推理档位",
+  "Flow bar": "流程条",
+  "Flow list": "流程列表",
+  "Flow task": "流程任务",
+
+  // Model view
+  "Reasoning effort": "推理档位",
+  "Deployment": "部署",
+  "Shared GUI/TUI request tier · ←/→ changes section": "GUI/TUI 共享请求档位 · ←/→ 切换区块",
+  "Used by this conversation, including its Plan and Subagents": "当前对话使用（含计划与子代理）",
+  "Enter applies the focused tier or deployment. Effort persists globally; deployments remain per conversation.":
+    "Enter 应用当前档位或部署。档位全局持久化，部署按对话保存。",
+
+  // Memory Lab
+  "Tags": "标签",
+  "Selected tag": "已选标签",
+  "Child tags": "子标签",
+  "Memory components": "记忆组件",
+  "Core memory": "核心记忆",
+  "No memory components": "无记忆组件",
+  "No component selected": "未选择组件",
+  "Overview": "总览",
+  "Memory overview": "记忆总览",
+  "Memory tag": "记忆标签",
+
+  // Chat view
+  "N new": "N 新建",
+  "Workspace": "工作区",
+  "Current": "当前",
+  "Preview": "预览",
+  "Current conversation": "当前对话",
+  "Enter to open this conversation": "Enter 打开此对话",
+  "Type a message · Shift+Enter newline · Enter send": "输入消息 · Shift+Enter 换行 · Enter 发送",
+  "Select a conversation · Enter to edit": "选择对话 · Enter 编辑",
+
+  // Settings categories
+  "General": "通用",
+  "Personalization": "个性化",
+  "Runtime": "运行时",
+  "Providers": "服务商",
+  "Models": "模型",
+  "Archive": "归档",
+  "Updates": "更新",
+
+  // Settings
+  "Categories": "分类",
+  "Language": "语言",
+  "Input mode": "输入模式",
+  "Conversation style": "对话风格",
+  "Option feedback": "选项反馈",
+  "Close behavior": "关闭行为",
+  "Expand tool usage": "展开工具使用",
+  "Theme": "主题",
+  "Application font": "应用字体",
+  "Font color": "字体颜色",
+  "Background color": "背景颜色",
+  "Glass intensity": "玻璃强度",
+  "Agent backend": "Agent 后端",
+  "WSL distribution": "WSL 发行版",
+  "Terminal timeout cap": "终端超时上限",
+  "Default shell": "默认 Shell",
+  "Automatic archive": "自动归档",
+  "Retention": "保留期",
+  "Include Memory Lab": "包含记忆实验室",
+  "Export format": "导出格式",
+  "Update channel": "更新通道",
+  "Automatic checks": "自动检查",
+  "Automatic download": "自动下载",
+  "Update source": "更新来源",
+  "Live color preview": "实时颜色预览",
+
+  // Plan / Goal / Agents
+  "Linked Plan": "关联计划",
+  "Next handoff": "下一交接",
+  "Linked goal": "关联目标",
+  "No active goal": "无活动目标",
+  "RESULT": "结果",
+  "No messages recorded yet.": "暂无消息记录。",
+  "Records come from the active Newmark conversation": "记录来自当前 Newmark 对话",
+
+  // Tools
+  "Tools & connectors": "工具与连接器",
+  "Live runtime": "实时运行时",
+  "Safety boundary": "安全边界",
+
+  // Automation / Workflow
+  "[+] New automation": "[+] 新建自动化",
+  "[+] New workflow": "[+] 新建工作流",
+  "No workflows configured.": "未配置工作流。",
+
+  // Help
+  "SHORTCUT GUIDE": "快捷键指南",
+  "Navigation": "导航",
+  "Conversation editing": "对话编辑",
+  "Running work": "运行中的工作",
+  "Operation content": "操作内容",
+  "Global": "全局"
+});
+
+function resolveLanguage(state) {
+  const value = String(state?.settings?.general?.language || "Auto");
+  return value === "中文" || value === "zh" ? "zh" : "en";
+}
+
+function tr(state, text) {
+  const value = String(text ?? "");
+  if (resolveLanguage(state) === "zh") return ZH[value] || value;
+  return value;
+}
+
+module.exports = { resolveLanguage, tr };