nolo-cli 0.1.22 → 0.1.26

package/README.md

@@ -168,6 +168,7 @@ The preferred command model is Agent-first:
 nolo agent list
 nolo agent switch <agent>
 nolo agent read <agent>
+nolo agent update <agent> --model gpt-5.4 --cli-provider codex --api-source cli
 nolo agent run <agent> "检查最近失败任务"
 nolo agent run frontend-implementer --msg "修一个小的通知弹窗 CSS 问题"
 nolo dialog list --agent <agent>
@@ -183,6 +184,19 @@ nolo table add-column --table meta-b2e06f801f-NOLOTASKBOARD --schema-write-ok --
 `--schema-write-ok` and should be run serially per table. Row-level table writes
 do not require this flag.
 
+For agent config inspection and small config mutations, prefer the CLI-native
+commands instead of ad hoc scripts:
+
+- `nolo agent list` is CLI-native and prefers the local cache, then degrades to
+  remote query when the local LevelDB cache is unavailable or locked.
+- `nolo agent read <agent>` reads local cached agent records first, then falls
+  back to remote fetch + local cache refresh across known server candidates.
+- if the local LevelDB cache is unavailable or locked, `nolo agent read`
+  degrades to remote-only lookup instead of hard-failing on the local DB.
+- `nolo agent update <agent> ...` is CLI-native and supports small targeted
+  updates such as `--model`, `--cli-provider`, `--api-source`, and repeated
+  `--field key=value`.
+
 Inside the current TUI, examples of supported slash commands include:
 `/agent`, `/agents`, `/switch`, `/context` (alias `/ctx`), `/dialog`, `/doc`,
 `/help`, `/new`, `/customize`, `/login`, `/profile`, `/version`, `/quit`
@@ -216,13 +230,21 @@ This creates a `dist/` directory with:
 - Inlined workspace dependencies (copied as nested directories)
 - A modified package.json with workspace dependencies stripped
 
-The `dist/` directory can be published to npm:
+The `dist/` directory is the publish-safe artifact consumed by the CI npm
+publish workflow:
 
 ```bash
-cd dist
-npm publish
+bun ./scripts/release/prepareCliPublishPackage.ts --out-dir .tmp/nolo-cli-publish
+cd .tmp/nolo-cli-publish
+npm pack
 ```
 
+For this repository, the default release path for `nolo-cli` is the GitHub
+Actions workflow [`.github/workflows/cli-npm-publish.yml`](../../.github/workflows/cli-npm-publish.yml).
+Use local `npm pack` or tarball-based `npm install -g` as preflight verification.
+Do not treat manual local `npm publish` as the normal release route unless you
+are intentionally debugging the CI publish lane.
+
 Key differences between repo-local and published versions:
 - **Repo-local**: Runs from source (`packages/cli/index.ts`) with workspace
   dependencies resolved by the monorepo

package/agent-runtime/agentRecordConfig.ts

@@ -73,6 +73,9 @@ export function resolveAgentRuntimeConfigFromRecord(
   const maxTokens = numberField(record, "max_tokens");
   const reasoningEffort = stringField(record, "reasoning_effort");
   const runtimeBinding = objectField(record, "runtimeBinding");
+  const runtimeToolPolicy =
+    objectField(record, "runtimeToolPolicy") ??
+    objectField(runtimeBinding ?? {}, "runtimeToolPolicy");
   const localWorkspaceMode = localWorkspaceModeField(record);
   const delegation = objectField(record, "delegation");
   return {
@@ -92,6 +95,7 @@ export function resolveAgentRuntimeConfigFromRecord(
     ...(maxTokens !== undefined ? { max_tokens: maxTokens } : {}),
     ...(reasoningEffort ? { reasoning_effort: reasoningEffort } : {}),
     ...(runtimeBinding ? { runtimeBinding } : {}),
+    ...(runtimeToolPolicy ? { runtimeToolPolicy } : {}),
     ...(localWorkspaceMode ? { localWorkspaceMode } : {}),
     ...(delegation ? { delegation } : {}),
     rawRecord: record,

package/agent-runtime/hostAdapter.ts

@@ -2,6 +2,7 @@ import type {
   AgentRuntimeChatMessage,
   AgentRuntimeHost,
   AgentRuntimeResult,
+  AgentRuntimeToolPolicy,
 } from "./types";
 
 export type AgentRuntimeAgentConfig = {
@@ -21,6 +22,7 @@ export type AgentRuntimeAgentConfig = {
   max_tokens?: number;
   reasoning_effort?: string;
   runtimeBinding?: Record<string, unknown>;
+  runtimeToolPolicy?: AgentRuntimeToolPolicy;
   localWorkspaceMode?: "current" | "task-worktree";
   delegation?: Record<string, unknown>;
   rawRecord?: Record<string, unknown>;

package/agent-runtime/hybridRecordStore.ts

@@ -15,6 +15,7 @@ export type HybridRecordStore = {
 type HybridRecordStoreDeps = {
   db: HybridRecordKvDb;
   defaultServer: string;
+  fallbackServers?: string[];
   authToken?: string;
   fetchImpl?: typeof fetch;
 };
@@ -23,10 +24,15 @@ function normalizeHybridServer(value: string) {
   return value.trim().replace(/\/+$/, "");
 }
 
-function resolveHybridServers(defaultServer: string, preferredServerOrigin?: string | null) {
+function resolveHybridServers(
+  defaultServer: string,
+  preferredServerOrigin?: string | null,
+  fallbackServers: string[] = []
+) {
   const raw = [
     preferredServerOrigin || "",
     defaultServer,
+    ...fallbackServers,
   ].filter((value) => value.trim().length > 0);
   return [...new Set(raw.map(normalizeHybridServer))];
 }
@@ -72,10 +78,16 @@ function shouldReplaceWithHybridRecord(nextRecord: any, currentRecord: any): boo
   return isHybridTombstoneRecord(nextRecord) && !isHybridTombstoneRecord(currentRecord);
 }
 
+function isHybridNotFoundError(error: unknown) {
+  const message = error instanceof Error ? error.message : String(error);
+  return /not found|notfound|leveldb: not found|key not found/i.test(message);
+}
+
 async function readHybridLocalRecord(db: HybridRecordKvDb, dbKey: string) {
   try {
     return await db.get(dbKey);
-  } catch {
+  } catch (error) {
+    if (!isHybridNotFoundError(error)) throw error;
     return null;
   }
 }
@@ -117,13 +129,22 @@ export function createHybridRecordStore(
       if (localRecord) return { ...localRecord, dbKey };
       if (options?.remote === false) return null;
 
-      for (const server of resolveHybridServers(deps.defaultServer, options?.preferredServerOrigin)) {
-        const remoteRecord = await fetchHybridRemoteRecord({
-          dbKey,
-          server,
-          authToken: deps.authToken,
-          fetchImpl,
-        });
+      for (const server of resolveHybridServers(
+        deps.defaultServer,
+        options?.preferredServerOrigin,
+        deps.fallbackServers
+      )) {
+        let remoteRecord = null;
+        try {
+          remoteRecord = await fetchHybridRemoteRecord({
+            dbKey,
+            server,
+            authToken: deps.authToken,
+            fetchImpl,
+          });
+        } catch {
+          continue;
+        }
         if (!remoteRecord) continue;
         if (shouldCacheHybridRemoteRecord(remoteRecord, localRecord)) {
           await deps.db.put(dbKey, remoteRecord);

package/agent-runtime/index.ts

@@ -45,6 +45,11 @@ export {
   executeLocalToolWithPolicy,
   resolveLocalToolPolicy,
 } from "./localToolPolicy";
+export {
+  mergeAgentRuntimeToolPolicies,
+  normalizeAgentRuntimeToolPolicy,
+  resolveEffectiveRuntimeToolPolicy,
+} from "./runtimeToolPolicy";
 export {
   buildLocalWorkspaceOpenAiTools,
   buildLocalWorkspacePolicyToolNames,
@@ -94,5 +99,7 @@ export type {
   AgentRuntimeMode,
   AgentRuntimeRequestedMode,
   AgentRuntimeResult,
+  AgentRuntimeToolPolicy,
   AgentRuntimeToolCall,
+  AgentRuntimeWorkspaceMode,
 } from "./types";

package/agent-runtime/localLoop.ts

@@ -26,9 +26,11 @@ export type LocalAgentToolEvent = {
   toolCallId: string;
   toolName: string;
   message?: string;
+  metadata?: Record<string, unknown>;
 };
 
-const DEFAULT_LOCAL_AGENT_MAX_TOOL_ROUNDS = 16;
+export const DEFAULT_LOCAL_AGENT_MAX_TOOL_ROUNDS = 128;
+export const LOCAL_AGENT_CONFIG_MISSING_CODE = "LOCAL_AGENT_CONFIG_MISSING";
 
 function formatToolExecutionError(args: {
   toolName: string;
@@ -54,9 +56,10 @@ function buildMessages(args: {
   history: AgentRuntimeChatMessage[];
   input: AgentRuntimeMessageContent;
 }): AgentRuntimeChatMessage[] {
+  const systemContent = args.prompt?.trim();
   return [
-    ...(args.prompt?.trim()
-      ? [{ role: "system" as const, content: args.prompt.trim() }]
+    ...(systemContent
+      ? [{ role: "system" as const, content: systemContent }]
       : []),
     ...args.history,
     { role: "user" as const, content: args.input },
@@ -68,7 +71,13 @@ export async function runLocalAgentTurn(
 ): Promise<LocalAgentTurnResult> {
   const agentConfig = await input.adapter.loadAgentConfig(input.agentRef);
   if (!agentConfig) {
-    throw new Error(`Local agent config not found: ${input.agentRef}`);
+    const error = new Error(`Local agent config not found: ${input.agentRef}`) as Error & {
+      code?: string;
+      agentRef?: string;
+    };
+    error.code = LOCAL_AGENT_CONFIG_MISSING_CODE;
+    error.agentRef = input.agentRef;
+    throw error;
   }
 
   const history = input.continueDialogId
@@ -119,6 +128,7 @@ export async function runLocalAgentTurn(
           round,
           toolCallId: toolCall.id,
           toolName,
+          metadata: toolResult.metadata,
         });
       } catch (error) {
         if (!shouldReturnToolExecutionErrors(input.adapter)) throw error;

package/agent-runtime/localToolPolicy.ts

@@ -16,6 +16,15 @@ const NEVER_LOCAL_TOOLS = new Set([
   "createAgent",
 ]);
 
+const REMOVED_LOCAL_TOOLS = new Set([
+  "gitStatus",
+  "gitDiff",
+  "gitCreateBranch",
+  "gitAdd",
+  "gitCommit",
+  "commitWorkspace",
+]);
+
 const DEFAULT_LOCAL_TOOLS = new Set([
   "listWorkspaceFiles",
   "readWorkspaceFile",
@@ -24,16 +33,12 @@ const DEFAULT_LOCAL_TOOLS = new Set([
   "listFiles",
   "readFile",
   "writeFile",
+  "editFile",
+  "searchFiles",
   "searchWorkspace",
   "applyPatch",
-  "gitStatus",
-  "gitDiff",
-  "gitCreateBranch",
-  "gitAdd",
-  "gitCommit",
-  "commitWorkspace",
   "runPackageScript",
-  "execBash",
+  "execShell",
 ]);
 
 function parseToolAllowlist(value: string | undefined) {
@@ -68,15 +73,14 @@ export function resolveLocalToolPolicy(args: {
   toolName: string;
 }): LocalToolPolicyDecision {
   const restrictedMode = isRestrictedLocalToolMode(args.env);
-  const isShellTool = args.toolName === "execShell" || args.toolName === "execBash";
-  if (isShellTool) {
+  if (args.toolName === "execShell") {
     if (isLocalShellModeEnabled(args.env)) {
       return { allowed: true, toolName: args.toolName };
     }
     return {
       allowed: false,
       toolName: args.toolName,
-      reason: `${args.toolName} requires NOLO_LOCAL_SHELL_MODE=worktree.`,
+      reason: "execShell requires NOLO_LOCAL_SHELL_MODE=worktree.",
     };
   }
 
@@ -88,6 +92,14 @@ export function resolveLocalToolPolicy(args: {
     };
   }
 
+  if (REMOVED_LOCAL_TOOLS.has(args.toolName)) {
+    return {
+      allowed: false,
+      toolName: args.toolName,
+      reason: `${args.toolName} has been removed from the local runtime tool surface. Use execShell in shell-enabled workspace runs when shell is needed.`,
+    };
+  }
+
   const allowedByEnv = new Set(parseToolAllowlist(args.env.NOLO_LOCAL_ALLOWED_TOOLS));
   const agentTools = new Set(args.agentToolNames ?? []);
   if (!restrictedMode && agentTools.has(args.toolName)) {