nolo-cli 0.1.29 → 0.1.31

package/agent-runtime/shellCommandPolicy.ts

@@ -0,0 +1,117 @@
+export type ShellCommandPolicyVerdict = "allowed" | "forbidden";
+
+export type ShellCommandPolicyResult =
+  | {
+      verdict: "allowed";
+    }
+  | {
+      verdict: "forbidden";
+      code: "destructive_action_requires_confirmation";
+      reason: string;
+      policy: {
+        capability: "destructive_action";
+        target: "shell_command";
+        detail: string;
+      };
+    };
+
+const DESTRUCTIVE_NEGATION_PATTERNS = [
+  "别删",
+  "别删除",
+  "不要删",
+  "不要删除",
+  "别乱删",
+  "别动",
+  "不要动",
+  "不要清理",
+  "不要清空",
+  "不要重置",
+  "don't delete",
+  "do not delete",
+  "don't remove",
+  "do not remove",
+  "without deleting",
+] as const;
+
+const EXPLICIT_DESTRUCTIVE_REQUEST_PATTERNS = [
+  "删除",
+  "删掉",
+  "移除",
+  "清理",
+  "清空",
+  "重置",
+  "drop",
+  "delete",
+  "remove",
+  "erase",
+  "clean up",
+  "reset",
+] as const;
+
+const SHELL_DESTRUCTIVE_PATTERNS = [
+  /\brm\s+(-[^\n\r]*\s+)?/i,
+  /\bremove-item\b/i,
+  /\bdel\s+\/?[a-z]*\s+/i,
+  /\berase\s+/i,
+  /\brmdir\s+/i,
+  /\brd\s+\/s\b/i,
+  /\bgit\s+reset\s+(--hard\b|--merge\b|--keep\b)/i,
+  /\bgit\s+clean\s+-[^\n\r]*f/i,
+  /\bgit\s+checkout\s+--\b/i,
+  /\bgit\s+restore\s+--source=/i,
+] as const;
+
+const normalizeUserInput = (value: unknown): string =>
+  typeof value === "string" ? value.trim().toLowerCase() : "";
+
+const containsAny = (text: string, patterns: readonly string[]): boolean =>
+  patterns.some((pattern) => text.includes(pattern));
+
+const hasExplicitDestructivePermission = (userInput: unknown): boolean => {
+  const normalized = normalizeUserInput(userInput);
+  if (!normalized) return false;
+  if (containsAny(normalized, DESTRUCTIVE_NEGATION_PATTERNS)) return false;
+  return containsAny(normalized, EXPLICIT_DESTRUCTIVE_REQUEST_PATTERNS);
+};
+
+const buildCombinedShellInput = (args: {
+  command?: unknown;
+  input?: unknown;
+}): string =>
+  [
+    typeof args.command === "string" ? args.command : "",
+    typeof args.input === "string" ? args.input : "",
+  ]
+    .filter(Boolean)
+    .join("\n");
+
+export function isDestructiveShellCommand(args: {
+  command?: unknown;
+  input?: unknown;
+}): boolean {
+  const combined = buildCombinedShellInput(args);
+  if (!combined.trim()) return false;
+  return SHELL_DESTRUCTIVE_PATTERNS.some((pattern) => pattern.test(combined));
+}
+
+export function evaluateShellCommandPolicy(args: {
+  command?: unknown;
+  input?: unknown;
+  userInput?: unknown;
+}): ShellCommandPolicyResult {
+  if (isDestructiveShellCommand(args) && !hasExplicitDestructivePermission(args.userInput)) {
+    return {
+      verdict: "forbidden",
+      code: "destructive_action_requires_confirmation",
+      reason:
+        "当前运行默认禁止自动执行可能删除用户内容的 shell 命令。只有当用户在当前请求里明确要求删除/清理时，才能继续；否则请停止并先说明限制。",
+      policy: {
+        capability: "destructive_action",
+        target: "shell_command",
+        detail: "execShell destructive command",
+      },
+    };
+  }
+
+  return { verdict: "allowed" };
+}

package/agent-runtime/toolGate.ts

@@ -0,0 +1,38 @@
+import { canonicalizeToolName } from "../ai/tools/toolNameAliases";
+
+export type RuntimeToolGateDecision =
+  | { allowed: true; toolName: string }
+  | { allowed: false; toolName: string; reason: string };
+
+function normalizeExposedToolNames(toolNames?: string[]): Set<string> {
+  return new Set(
+    (toolNames ?? [])
+      .map((toolName) => canonicalizeToolName(String(toolName ?? "").replace(/^functions\./, "").trim()))
+      .filter(Boolean),
+  );
+}
+
+export function resolveRuntimeToolGate(args: {
+  toolName: string;
+  exposedToolNames?: string[];
+  forbiddenReason?: string;
+}): RuntimeToolGateDecision {
+  const toolName = canonicalizeToolName(args.toolName.replace(/^functions\./, "").trim());
+  if (!toolName) {
+    return {
+      allowed: false,
+      toolName,
+      reason: "Tool name is required.",
+    };
+  }
+
+  if (normalizeExposedToolNames(args.exposedToolNames).has(toolName)) {
+    return { allowed: true, toolName };
+  }
+
+  return {
+    allowed: false,
+    toolName,
+    reason: args.forbiddenReason ?? `${toolName} is not exposed by this runtime turn.`,
+  };
+}

package/agentCreateCustomCommands.ts

@@ -3,6 +3,7 @@ import { createSpaceKey } from "./create/space/spaceKeys";
 import { readDbRecord, writeDbRecord } from "./agentRecordHelpers";
 import {
   parseUserIdFromAuthToken,
+  readCliOptionValue,
   resolveAuthToken,
   resolveServerUrl,
   type EnvLike,
@@ -68,11 +69,13 @@ function buildAgentKeys(agentId: string, userId: string) {
 
 async function createCustomAgentWithCliAuth(
   options: CreateCustomCodingAgentOptions,
-  deps: Pick<AgentCreateCustomDeps, "env" | "fallbackFetchImpl" | "fetchImpl">
+  deps: Pick<AgentCreateCustomDeps, "env" | "fallbackFetchImpl" | "fetchImpl"> & {
+    cliArgs?: string[];
+  }
 ) {
   const env = deps.env ?? process.env;
   const fetchImpl = deps.fetchImpl ?? fetch;
-  const authToken = resolveAuthToken(env);
+  const authToken = readCliOptionValue(deps.cliArgs ?? [], "--token") || resolveAuthToken(env);
   const userId = parseUserIdFromAuthToken(authToken);
   if (!authToken || !userId) {
     throw new Error("agent create-custom requires an auth token with userId. Run `nolo login`.");
@@ -232,9 +235,11 @@ export async function runAgentCreateCustomCommand(
   }
 
   try {
-    const createCustomAgent = deps.createCustomAgent ?? ((options) => createCustomAgentWithCliAuth(options, deps));
+    const createCustomAgent =
+      deps.createCustomAgent ??
+      ((options) => createCustomAgentWithCliAuth(options, { ...deps, cliArgs: args }));
     const result = await createCustomAgent({
-      baseUrl: resolveServerUrl(env),
+      baseUrl: resolveServerUrl(args, env),
       spaceId: readOption(args, "--space-id"),
       agentId: env.CUSTOM_AGENT_ID,
       apiKey,

package/agentDialogsCommands.ts

@@ -93,7 +93,7 @@ export async function runAgentDialogsCommand(
     return agentInput ? 0 : 1;
   }
 
-  const authToken = resolveAuthToken(env);
+  const authToken = resolveAuthToken(args, env);
   if (!authToken) {
     output.write("[nolo] agent dialogs requires an auth token. Run `nolo login` or set AUTH_TOKEN.\n");
     return 1;
@@ -112,12 +112,13 @@ export async function runAgentDialogsCommand(
   const db = deps.db ?? await getReadableCliDb(output);
   const fetchImpl = deps.fetchImpl ?? fetch;
   const fallbackFetchImpl = deps.fallbackFetchImpl;
-  const serverUrl = resolveServerUrl(env);
-  const serverCandidates = resolveServerCandidates(env, serverUrl);
+  const serverUrl = resolveServerUrl(args, env);
+  const serverCandidates = resolveServerCandidates(args, env, serverUrl);
 
   try {
     const resolvedAgent = await resolveAgentRecordFromHybridStore({
       agentInput,
+      cliArgs: args,
       env,
       db,
       fetchImpl,

package/agentDoctorCommands.ts

@@ -45,7 +45,7 @@ export async function runAgentDoctorCommand(
     return 0;
   }
 
-  const authToken = resolveAuthToken(env);
+  const authToken = resolveAuthToken(args, env);
   if (!authToken) {
     output.write("[nolo] agent doctor requires an auth token. Run `nolo login` or set AUTH_TOKEN.\n");
     return 1;
@@ -60,8 +60,8 @@ export async function runAgentDoctorCommand(
   const db = deps.db ?? await getReadableCliDb(output);
   const fetchImpl = deps.fetchImpl ?? fetch;
   const fallbackFetchImpl = deps.fallbackFetchImpl;
-  const defaultServerUrl = resolveServerUrl(env);
-  const serverCandidates = resolveServerCandidates(env, defaultServerUrl);
+  const defaultServerUrl = resolveServerUrl(args, env);
+  const serverCandidates = resolveServerCandidates(args, env, defaultServerUrl);
 
   try {
     const [profile, settings, agents] = await Promise.all([

package/agentListCommands.ts

@@ -25,7 +25,7 @@ export async function runAgentListCommand(
   const output = deps.output ?? process.stdout;
   const { wantJson, publicOnly, idsOnly, includeLegacy } = parseAgentListArgs(args);
 
-  const authToken = resolveAuthToken(env);
+  const authToken = resolveAuthToken(args, env);
   if (!authToken) {
     output.write("[nolo] agent list requires an auth token. Run `nolo login` or set AUTH_TOKEN.\n");
     return 1;
@@ -40,8 +40,8 @@ export async function runAgentListCommand(
   const db = deps.db ?? await getReadableCliDb(output);
   const fetchImpl = deps.fetchImpl ?? fetch;
   const fallbackFetchImpl = deps.fallbackFetchImpl;
-  const serverUrl = resolveServerUrl(env);
-  const serverCandidates = resolveServerCandidates(env, serverUrl);
+  const serverUrl = resolveServerUrl(args, env);
+  const serverCandidates = resolveServerCandidates(args, env, serverUrl);
 
   try {
     const loadRemoteAgents = async () => {

package/agentMachineCommands.ts

@@ -225,7 +225,7 @@ export async function runAgentBindCurrentCommand(
     return agentKey ? 0 : 1;
   }
 
-  const authToken = resolveAuthToken(env);
+  const authToken = resolveAuthToken(args, env);
   if (!authToken) {
     output.write("[nolo] agent bind-current requires an auth token. Run `nolo login` or set AUTH_TOKEN.\n");
     return 1;
@@ -237,7 +237,7 @@ export async function runAgentBindCurrentCommand(
     return 1;
   }
 
-  const serverUrl = resolveServerUrl(env);
+  const serverUrl = resolveServerUrl(args, env);
   const fetchImpl = deps.fetchImpl ?? fetch;
   const fallbackFetchImpl = deps.fallbackFetchImpl;
   const machine = await (deps.machineInfo ?? detectLaunchableMachineInfo)();
@@ -292,7 +292,7 @@ export async function runAgentSmokeCurrentCommand(
   }
   const agentKey = resolveCliAgentKeyInput(agentInput);
 
-  const authToken = resolveAuthToken(env);
+  const authToken = resolveAuthToken(args, env);
   if (!authToken) {
     output.write("[nolo] agent smoke-current requires an auth token. Run `nolo login` or set AUTH_TOKEN.\n");
     return 1;
@@ -304,7 +304,7 @@ export async function runAgentSmokeCurrentCommand(
   }
 
   const userInput = readOption(args, "--msg") ?? "Smoke test from nolo connector.";
-  const serverUrl = resolveServerUrl(env);
+  const serverUrl = resolveServerUrl(args, env);
   const fetchImpl = deps.fetchImpl ?? fetch;
   const fallbackFetchImpl = deps.fallbackFetchImpl;
   const machine = await (deps.machineInfo ?? detectLaunchableMachineInfo)();
@@ -415,13 +415,13 @@ export async function runAgentRuntimeDoctorCommand(
   }
   const agentKey = resolveCliAgentKeyInput(agentInput);
 
-  const authToken = resolveAuthToken(env);
+  const authToken = resolveAuthToken(args, env);
   if (!authToken) {
     output.write("[nolo] agent runtime-doctor requires an auth token. Run `nolo login` or set AUTH_TOKEN.\n");
     return 1;
   }
 
-  const serverUrl = resolveServerUrl(env);
+  const serverUrl = resolveServerUrl(args, env);
   const fetchImpl = deps.fetchImpl ?? fetch;
   const fallbackFetchImpl = deps.fallbackFetchImpl;
   const machine = await (deps.machineInfo ?? detectLaunchableMachineInfo)();

package/agentPullCommand.ts

@@ -4,8 +4,8 @@ import type { OutputLike } from "./cliIoTypes";
 import { resolveCliAgentKeyInput } from "./agentAliases";
 import {
   readCliOptionValue,
-  resolveAuthTokenFromEnv,
-  resolveServerUrlFromEnv,
+  resolveAuthToken,
+  resolveServerUrl,
 } from "./cliEnvHelpers";
 
 type EnvLike = Record<string, string | undefined>;
@@ -44,14 +44,6 @@ export function parseAgentPullArgs(args: string[]): ParsedAgentPullArgs | null {
   return { agentKey: resolveCliAgentKeyInput(agentKey) };
 }
 
-function resolveServerUrl(env: EnvLike) {
-  return resolveServerUrlFromEnv(env);
-}
-
-function resolveAuthToken(env: EnvLike) {
-  return resolveAuthTokenFromEnv(env);
-}
-
 function extractToolNames(record: any) {
   if (Array.isArray(record?.toolNames)) return record.toolNames.filter((tool: unknown) => typeof tool === "string");
   if (!Array.isArray(record?.tools)) return [];
@@ -113,8 +105,8 @@ export async function runAgentPullCommand(args: string[], deps: AgentPullCommand
     return 1;
   }
 
-  const serverUrl = resolveServerUrl(env);
-  const authToken = resolveAuthToken(env);
+  const serverUrl = resolveServerUrl(args, env);
+  const authToken = resolveAuthToken(args, env);
   const fetchImpl = deps.fetchImpl ?? fetch;
   const db = deps.db ?? await getDefaultCliLocalRuntimeDb();
 

package/agentRecordCommands.ts

@@ -17,11 +17,11 @@ export async function runAgentReadCommand(
   const output = deps.output ?? process.stdout;
   const agentInput = args[0]?.trim();
   if (!agentInput || agentInput === "--help" || agentInput === "-h") {
-    output.write("Usage: nolo agent read <agent>\n");
+    output.write("Usage: nolo agent read <agent> [--server <url>]\n");
     return agentInput ? 0 : 1;
   }
 
-  const authToken = resolveAuthToken(env);
+  const authToken = resolveAuthToken(args, env);
   if (!authToken) {
     output.write("[nolo] agent read requires an auth token. Run `nolo login` or set AUTH_TOKEN.\n");
     return 1;
@@ -35,6 +35,7 @@ export async function runAgentReadCommand(
   try {
     const result = await resolveAgentRecordFromHybridStore({
       agentInput,
+      cliArgs: args,
       env,
       db,
       fetchImpl,
@@ -79,7 +80,7 @@ export async function runAgentUpdateCommand(
     return args[0] ? 0 : 1;
   }
 
-  const authToken = resolveAuthToken(env);
+  const authToken = resolveAuthToken(args, env);
   if (!authToken) {
     output.write("[nolo] agent update requires an auth token. Run `nolo login` or set AUTH_TOKEN.\n");
     return 1;
@@ -97,6 +98,7 @@ export async function runAgentUpdateCommand(
 
   try {
     const built = await buildUpdatedAgentRecord({
+      cliArgs: args,
       parsed,
       env,
       db,

package/agentRecordHelpers.ts

@@ -3,6 +3,7 @@ import { resolveCliAgentKeyInput } from "./agentAliases";
 import type { CliKvDb } from "./client/hybridRecordStore";
 import { buildLocalAgentLookupKeys, shouldReadAgentKeyRemotely } from "./client/localAgentRecords";
 import {
+  hasExplicitServerOverride,
   parseUserIdFromAuthToken,
   readOption,
   resolveAuthToken,
@@ -262,34 +263,21 @@ export async function deleteDbRecord(args: {
 
 export async function resolveAgentRecordFromHybridStore(args: {
   agentInput: string;
+  cliArgs?: string[];
   env: EnvLike;
   db: CliKvDb;
   fetchImpl: typeof fetch;
   fallbackFetchImpl?: typeof fetch;
 }) {
   const agentKey = resolveCliAgentKeyInput(args.agentInput);
-  const authToken = resolveAuthToken(args.env);
-  const defaultServerUrl = resolveServerUrl(args.env);
-
-  for (const key of buildLocalAgentLookupKeys({
-    agentRef: agentKey,
-    userId: parseUserIdFromAuthToken(authToken) || "local",
-  })) {
-    try {
-      const record = await args.db.get(key);
-      if (record && typeof record === "object") {
-        return {
-          agentKey: key,
-          record,
-          source: record?.serverOrigin ? "remote-cache" : "local-cache",
-        } as const;
-      }
-    } catch {
-      // local miss
-    }
-
-    if (!shouldReadAgentKeyRemotely(key)) continue;
-    for (const serverUrl of resolveServerCandidates(args.env, defaultServerUrl)) {
+  const authToken = resolveAuthToken(args.cliArgs ?? [], args.env);
+  const cliArgs = args.cliArgs ?? [];
+  const defaultServerUrl = resolveServerUrl(cliArgs, args.env);
+  const serverCandidates = resolveServerCandidates(cliArgs, args.env, defaultServerUrl);
+  const preferRemote = hasExplicitServerOverride(cliArgs);
+
+  const readRemoteRecord = async (key: string) => {
+    for (const serverUrl of serverCandidates) {
       try {
         const remoteRecord = await readAgentRecord({
           agentKey: key,
@@ -309,6 +297,34 @@ export async function resolveAgentRecordFromHybridStore(args: {
         // try next
       }
     }
+    return null;
+  };
+
+  for (const key of buildLocalAgentLookupKeys({
+    agentRef: agentKey,
+    userId: parseUserIdFromAuthToken(authToken) || "local",
+  })) {
+    if (preferRemote && shouldReadAgentKeyRemotely(key)) {
+      const remoteFirst = await readRemoteRecord(key);
+      if (remoteFirst) return remoteFirst;
+    }
+
+    try {
+      const record = await args.db.get(key);
+      if (record && typeof record === "object") {
+        return {
+          agentKey: key,
+          record,
+          source: record?.serverOrigin ? "remote-cache" : "local-cache",
+        } as const;
+      }
+    } catch {
+      // local miss
+    }
+
+    if (!shouldReadAgentKeyRemotely(key)) continue;
+    const remoteFallback = await readRemoteRecord(key);
+    if (remoteFallback) return remoteFallback;
   }
 
   return null;
@@ -380,6 +396,7 @@ export function parseAgentUpdateArgs(args: string[]) {
 }
 
 export async function buildUpdatedAgentRecord(args: {
+  cliArgs?: string[];
   parsed: NonNullable<ReturnType<typeof parseAgentUpdateArgs>>;
   env: EnvLike;
   db: CliKvDb;
@@ -389,13 +406,14 @@ export async function buildUpdatedAgentRecord(args: {
 }) {
   const cached = await resolveAgentRecordFromHybridStore({
     agentInput: args.parsed.agentInput,
+    cliArgs: args.cliArgs,
     env: args.env,
     db: args.db,
     fetchImpl: args.fetchImpl,
     fallbackFetchImpl: args.fallbackFetchImpl,
   });
   const agentKey = cached?.agentKey ?? resolveCliAgentKeyInput(args.parsed.agentInput);
-  const serverUrl = cached?.record?.serverOrigin ?? resolveServerUrl(args.env);
+  const serverUrl = cached?.record?.serverOrigin ?? resolveServerUrl(args.cliArgs ?? [], args.env);
   const currentRecord = await readAgentRecord({
     agentKey,
     authToken: args.authToken,
@@ -407,6 +425,7 @@ export async function buildUpdatedAgentRecord(args: {
   if (args.parsed.copyProviderFrom) {
     const providerSource = await resolveAgentRecordFromHybridStore({
       agentInput: args.parsed.copyProviderFrom,
+      cliArgs: args.cliArgs,
       env: args.env,
       db: args.db,
       fetchImpl: args.fetchImpl,

package/agentRunCommand.ts

@@ -1,4 +1,3 @@
-import { DEFAULT_NOLO_SERVER_URL } from "./defaultServer";
 import { runAgentTurn, type RunAgentTurnResult } from "./client/agentRun";
 import type { AgentRuntimeHostAdapter } from "./agentRuntimeLocal";
 import {
@@ -20,6 +19,7 @@ import {
   type ParsedAgentRunArgs,
   type ResolvedWorkflowReference,
 } from "./agentRunParsing";
+import { resolveServerUrl } from "./cliEnvHelpers";
 
 type AgentRunCommandDeps = {
   env?: EnvLike;
@@ -49,10 +49,6 @@ function shouldPrintLocalRunSummary(args: {
   return Boolean(args.localRuntimeCwd && args.parsed.runtimeMode === "local");
 }
 
-function resolveServerUrl(env: EnvLike) {
-  return (env.NOLO_SERVER || env.BASE_URL || DEFAULT_NOLO_SERVER_URL).replace(/\/+$/, "");
-}
-
 function writeUsage(output: OutputLike) {
   output.write(
     "Usage: nolo agent run <agent> <message> [--local|--server|--auto] [--continue <dialogId>] [--cwd <path>] [--max-tool-rounds <n>]\n" +
@@ -95,7 +91,7 @@ export async function runAgentRunCommand(args: string[], deps: AgentRunCommandDe
   const result: RunAgentTurnResult = await runner({
     agentName: parsed.agentKey,
     agentKey: parsed.agentKey,
-    serverUrl: resolveServerUrl(env),
+    serverUrl: resolveServerUrl(args, env),
     message: prependWorkflowReferencePrompt(parsed.message, workflowReference),
     imageUrls: parsed.imageUrls.map(normalizeCliImageInput),
     scriptDir: deps.scriptDir,

package/agentRunParsing.ts

@@ -1,6 +1,10 @@
 import { existsSync, readFileSync } from "node:fs";
 import { extname, resolve } from "node:path";
 
+import {
+  buildAgentRunDialogLineageFields,
+  normalizeAgentRunDialogLineage,
+} from "./ai/agent/agentRunDialogLineage";
 import { parseSkillDocProtocol, type WorkflowReferenceConfig } from "./ai/skills/skillDocProtocol";
 
 import { resolveCliAgentKeyInput } from "./agentAliases";
@@ -168,7 +172,10 @@ export function parseAgentRunArgs(
   if (!agentKey || !rawMessage.trim()) return null;
   const message = rawMessage.trim();
   const runtimeMode = runtimeModeFromArgs(args);
-  const continueDialogId = readFlagValue(args, "--continue") ?? readFlagValue(args, "--dialog");
+  const rawContinueDialogId = readFlagValue(args, "--continue") ?? readFlagValue(args, "--dialog");
+  const continueDialogId = normalizeAgentRunDialogLineage({
+    continueDialogId: rawContinueDialogId,
+  }).continueDialogId;
   const spaceId = readFlagValue(args, "--space");
   const category = readFlagValue(args, "--category");
   const inheritedFromDialog = readFlagValue(args, "--inherit-from-dialog");
@@ -219,11 +226,17 @@ export function parseAgentRunArgs(
     background: args.includes("--bg"),
     noStream: args.includes("--no-stream"),
     noDefaultTestRoot,
-    ...(continueDialogId ? { continueDialogId } : {}),
+    ...buildAgentRunDialogLineageFields({
+      continueDialogId,
+      inheritedFromDialogKey: inheritedRef?.dialogKey,
+      parentDialogId: inheritedRef?.dialogId,
+    }),
     ...(!continueDialogId && spaceId ? { spaceId } : {}),
-    ...(category ? { category } : !continueDialogId && !noDefaultTestRoot ? { category: DEFAULT_TEST_DIALOG_CATEGORY_ID } : {}),
-    ...(inheritedRef?.dialogKey ? { inheritedFromDialogKey: inheritedRef.dialogKey } : {}),
-    ...(inheritedRef?.dialogId ? { parentDialogId: inheritedRef.dialogId } : {}),
+    ...(category
+      ? { category }
+      : !continueDialogId && !noDefaultTestRoot
+        ? { category: DEFAULT_TEST_DIALOG_CATEGORY_ID }
+        : {}),
     ...(cwd ? { cwd } : {}),
     ...(typeof maxToolRounds === "number" ? { maxToolRounds } : {}),
     ...(typeof timeoutMs === "number" ? { timeoutMs } : {}),

package/agentRuntimeLocal.ts

@@ -1,7 +1,9 @@
 export {
+  createHostRuntimeConfig,
   buildOpenAiCompatibleChatCompletionRequest,
   buildPlatformChatCompletionRequest,
   canUsePlatformChatProvider,
+  createHostRuntimeCapabilities,
   hasDirectOpenAiCompatibleProvider,
   createHybridRecordStore,
   executeLocalToolWithPolicy,
@@ -16,9 +18,12 @@ export {
   parsePlatformChatCompletionData,
   parsePlatformChatCompletionResponse,
   resolveAgentRuntimeConfigFromRecord,
+  resolveHostRuntimeConfigFromEnv,
+  resolveHostRuntimeCapabilitiesFromEnv,
   resolvePlatformChatProviderConfig,
   resolveLocalToolPolicy,
   resolveOpenAiCompatibleProviderConfig,
+  resolveRequestedRuntimeToolNames,
   shouldUsePlatformChatProvider,
   shouldCacheHybridRemoteRecord,
   shouldFetchAgentRuntimeRecordRemotely,
@@ -27,6 +32,7 @@ export { runLocalAgentTurn } from "./agent-runtime/localLoop";
 export {
   buildLocalWorkspaceOpenAiTools,
   buildLocalWorkspacePolicyToolNames,
+  resolveLocalWorkspaceShellToolExposure,
   buildLocalWorkspaceToolset,
   createLocalWorkspaceToolExecutors,
 } from "./agent-runtime/localWorkspaceTools";
@@ -35,6 +41,10 @@ export type {
   AgentRuntimeHostAdapter,
   AgentRuntimeRequestedMode,
   AgentRuntimeSaveTurnInput,
+  HostRuntimeConfig,
+  HostRuntimeCapabilities,
+  HostRuntimeSurface,
+  HostRuntimeWorkspaceBinding,
   HybridRecordKvDb,
   HybridRecordStore,
   LocalToolPolicyDecision,

package/agentUnpublishCommands.ts

@@ -36,7 +36,7 @@ export async function runAgentUnpublishCommand(
     return 1;
   }
 
-  const authToken = resolveAuthToken(env);
+  const authToken = resolveAuthToken(args, env);
   if (!authToken) {
     output.write("[nolo] agent unpublish requires an auth token. Run `nolo login` or set AUTH_TOKEN.\n");
     return 1;
@@ -51,13 +51,14 @@ export async function runAgentUnpublishCommand(
   const db = deps.db ?? await getReadableCliDb(output);
   const fetchImpl = deps.fetchImpl ?? fetch;
   const fallbackFetchImpl = deps.fallbackFetchImpl;
-  const serverUrl = resolveServerUrl(env);
+  const serverUrl = resolveServerUrl(args, env);
   const privateKey = `agent-${userId}-${agentId}`;
   const publicKey = `agent-pub-${agentId}`;
 
   try {
     const resolved = await resolveAgentRecordFromHybridStore({
       agentInput: privateKey,
+      cliArgs: args,
       env,
       db,
       fetchImpl,