nolo-cli 0.1.31 → 0.1.32

package/commandRegistry.ts

@@ -64,6 +64,7 @@ export function renderHelpText() {
     '  nolo agent run frontend-implementer --msg "polish notifications"',
     "  nolo agent bind-current agent-user-1-agent-1",
     "  nolo agent runtime-doctor agent-user-1-agent-1",
+    '  nolo agent smoke-bound agent-user-1-agent-1 --msg "ping"',
     '  nolo agent smoke-current agent-user-1-agent-1 --msg "ping"',
     '  nolo chat --agent agent-pub-01APPBUILDER00000001YAII3I --msg "你好"',
     "  nolo space read 01KKY77TT0DA9NY7TNW3R7255N --content-key page-user-id --brief",

package/connectorWebSocketTarget.ts

@@ -12,6 +12,40 @@ export function isConnectorWebSocketAuthError(error: unknown): error is Connecto
   return error instanceof ConnectorWebSocketAuthError;
 }
 
+export class ConnectorWebSocketRetryableError extends Error {
+  reason: string;
+  retryAfterMs?: number;
+
+  constructor(message: string, options: { reason?: string; retryAfterMs?: number } = {}) {
+    super(message);
+    this.name = "ConnectorWebSocketRetryableError";
+    this.reason = options.reason ?? "retryable";
+    this.retryAfterMs = options.retryAfterMs;
+  }
+}
+
+export function isConnectorWebSocketRetryableError(
+  error: unknown
+): error is ConnectorWebSocketRetryableError {
+  return error instanceof ConnectorWebSocketRetryableError;
+}
+
+function parseRetryAfterMs(response: Response, bodyRetryAfterMs?: unknown) {
+  const headerValue = response.headers.get("Retry-After");
+  if (typeof headerValue === "string" && headerValue.trim()) {
+    const asSeconds = Number(headerValue.trim());
+    if (Number.isFinite(asSeconds) && asSeconds >= 0) {
+      return Math.round(asSeconds * 1_000);
+    }
+    const asDateMs = Date.parse(headerValue.trim());
+    if (Number.isFinite(asDateMs)) {
+      return Math.max(0, asDateMs - Date.now());
+    }
+  }
+  const parsed = Number(bodyRetryAfterMs);
+  return Number.isFinite(parsed) && parsed >= 0 ? Math.round(parsed) : undefined;
+}
+
 export async function resolveConnectorWebSocketTarget(input: {
   serverUrl: string;
   machineId: string;
@@ -43,12 +77,33 @@ export async function resolveConnectorWebSocketTarget(input: {
     throw new ConnectorWebSocketAuthError(`${code}: ${message}`, code);
   }
 
+  if (response && !response.ok) {
+    const json = await response.clone().json().catch(() => null);
+    const retryable =
+      json?.retryable === true ||
+      json?.reason === "core_draining" ||
+      response.status === 502 ||
+      response.status === 503 ||
+      response.status === 504;
+    if (retryable) {
+      const reason = typeof json?.reason === "string" ? json.reason : "retryable";
+      const message =
+        typeof json?.error === "string"
+          ? json.error
+          : `Connector websocket unavailable with HTTP ${response.status}`;
+      throw new ConnectorWebSocketRetryableError(message, {
+        reason,
+        retryAfterMs: parseRetryAfterMs(response, json?.retryAfterMs),
+      });
+    }
+  }
+
   if (!response || !response.ok) {
     return directWsUrl.toString();
   }
-
-  const json = await response.json().catch(() => null);
-  return typeof json?.wsUrl === "string" && json.wsUrl
-    ? json.wsUrl
-    : directWsUrl.toString();
-}
+
+  const json = await response.json().catch(() => null);
+  return typeof json?.wsUrl === "string" && json.wsUrl
+    ? json.wsUrl
+    : directWsUrl.toString();
+}

package/machineCommands.ts

@@ -230,7 +230,7 @@ export async function runMachineConnectCommand(
           env.NOLO_CONNECT_RUNTIME_SERVER_URL ||
           env.NOLO_RUNTIME_SERVER_URL ||
           targetServerUrl;
-        const exitCode = await runMachineWsSession({
+        const sessionResult = await runMachineWsSession({
           env,
           output,
           signal,
@@ -270,13 +270,19 @@ export async function runMachineConnectCommand(
               }
             ),
         });
+        const exitCode = sessionResult.exitCode;
         if (exitCode === 2) return { serverUrl: targetServerUrl, exitCode: 2 };
         if (signal?.aborted) {
           return { serverUrl: targetServerUrl, exitCode: 0 };
         }
         if (attempt >= maxAttempts) return { serverUrl: targetServerUrl, exitCode };
-        output.write(`[nolo] Connector websocket disconnected. Reconnecting in ${reconnectDelayMs}ms.\n`);
-        await sleepWithAbort(reconnectDelayMs, sleep, signal);
+        const retryDelayMs = sessionResult.retryAfterMs ?? reconnectDelayMs;
+        const reconnectContext =
+          sessionResult.reconnectReason === "core_draining" ? " during core draining" : "";
+        output.write(
+          `[nolo] Connector websocket disconnected${reconnectContext}. Reconnecting in ${retryDelayMs}ms.\n`
+        );
+        await sleepWithAbort(retryDelayMs, sleep, signal);
       }
       return { serverUrl: targetServerUrl, exitCode: 0 };
     };

package/machineWsRunDispatch.ts

@@ -58,7 +58,7 @@ type ConnectorRunProgress = {
 
 type PermissionPolicy = ReturnType<typeof defaultResolveMachineRunPermissionPolicy>;
 
-type MachineWsRunDispatchDeps = {
+export type MachineWsRunDispatchDeps = {
   assertMachineRunAllowed?: typeof defaultAssertMachineRunAllowed;
   resolveMachineRunPermissionPolicy?: typeof defaultResolveMachineRunPermissionPolicy;
   resolveConnectorRunCwd?: typeof defaultResolveConnectorRunCwd;

package/machineWsSession.ts

@@ -1,6 +1,9 @@
 import type { HeartbeatLoopOptions } from "./connector-experimental/heartbeatLoop";
 import type { MachineHeartbeat } from "./connector-experimental/protocol";
-import { isConnectorWebSocketAuthError } from "./connectorWebSocketTarget";
+import {
+  isConnectorWebSocketAuthError,
+  isConnectorWebSocketRetryableError,
+} from "./connectorWebSocketTarget";
 
 type EnvLike = Record<string, string | undefined>;
 type OutputLike = { write(chunk: string): unknown };
@@ -12,6 +15,12 @@ export type ConnectorWebSocketOptions = {
   signal?: AbortSignal;
 };
 
+export type RunMachineWsSessionResult = {
+  exitCode: number;
+  retryAfterMs?: number;
+  reconnectReason?: string;
+};
+
 const CONNECTOR_WS_KEEPALIVE_MS = 25_000;
 
 function buildConnectorKeepaliveMessage() {
@@ -115,14 +124,14 @@ export async function runMachineWsSession(options: {
   }) => Promise<string>;
   connectWebSocket: (url: string, options: ConnectorWebSocketOptions) => Promise<void>;
   onMessage: (message: string, send: (message: string) => void) => void | Promise<void>;
-}) {
+}): Promise<RunMachineWsSessionResult> {
   const sentMessages: string[] = [];
   const heartbeatAbort = new AbortController();
   let heartbeatLoopPromise: Promise<void> | null = null;
   let websocketPromise: Promise<void> | null = null;
   try {
     if (options.signal?.aborted) {
-      return 0;
+      return { exitCode: 0 };
     }
     await options.sendHeartbeat();
     options.output.write(
@@ -168,9 +177,9 @@ export async function runMachineWsSession(options: {
     heartbeatAbort.abort();
     await Promise.allSettled([websocketPromise, heartbeatLoopPromise]);
     if (raceResult === "aborted") {
-      return 0;
+      return { exitCode: 0 };
     }
-    return 0;
+    return { exitCode: 0 };
   } catch (error) {
     heartbeatAbort.abort();
     await Promise.allSettled(
@@ -180,13 +189,25 @@ export async function runMachineWsSession(options: {
       options.output.write(
         `[nolo] Connector websocket auth failed: ${error.message}. Re-register this machine or update NOLO_MACHINE_API_KEY.\n`
       );
-      return 2;
+      return { exitCode: 2 };
+    }
+    if (isConnectorWebSocketRetryableError(error)) {
+      const description =
+        error.reason === "core_draining" ? "core draining" : error.reason;
+      options.output.write(
+        `[nolo] Connector websocket unavailable: ${description} (${error.message}).\n`
+      );
+      return {
+        exitCode: 1,
+        retryAfterMs: error.retryAfterMs,
+        reconnectReason: error.reason,
+      };
     }
     options.output.write(
       `[nolo] Connector websocket failed: ${
         error instanceof Error ? error.message : String(error)
       }\n`
     );
-    return 1;
+    return { exitCode: 1 };
   }
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "nolo-cli",
-  "version": "0.1.31",
+  "version": "0.1.32",
   "type": "module",
   "description": "Agent-first terminal workspace for Nolo",
   "bin": {
@@ -142,73 +142,181 @@
     "README.md",
     "ai/agent.ts",
     "ai/tools/agent/taskRunTool.ts",
-    "ai/agent/cliExecutor.ts",
     "ai/agent/agentSlice.ts",
     "ai/agent/machineRunPermissions.ts",
-    "ai/agent/agentRunDialogLineage.ts",
-    "ai/agent/cliPrompt.ts",
     "ai/index.ts",
     "connector-experimental/protocol.ts",
     "connector-experimental/machineInfo.ts",
-    "../agent-runtime/index.ts",
-    "../ai/tools/agent/taskRunTool.ts",
-    "../ai/agent/cliExecutor.ts",
-    "../ai/agent/cliPrompt.ts",
-    "../agent-runtime/hostAdapter.ts",
-    "../agent-runtime/localLoop.ts",
-    "../agent-runtime/agentConfigOptions.ts",
-    "../agent-runtime/openAiCompatibleProvider.ts",
-    "../agent-runtime/openAiCompatibleProviderConfig.ts",
-    "../agent-runtime/platformChatProvider.ts",
-    "../agent-runtime/runtimeDecision.ts",
-    "../agent-runtime/runtimeFacts.ts",
-    "../agent-runtime/agentRecordKeys.ts",
-    "../agent-runtime/agentRecordConfig.ts",
-    "../agent-runtime/dialogMessageRecord.ts",
-    "../agent-runtime/dialogStatus.ts",
-    "../agent-runtime/dialogWritePlan.ts",
-    "../agent-runtime/hybridRecordStore.ts",
-    "../agent-runtime/workspaceSession.ts",
-    "../agent-runtime/taskWorkspace.ts",
-    "../agent-runtime/hostRuntimeConfig.ts",
-    "../agent-runtime/localToolPolicy.ts",
-    "../agent-runtime/runtimeToolPolicy.ts",
-    "../agent-runtime/localWorkspaceTools.ts",
-    "../agent-runtime/types.ts",
-    "../database/config.ts",
-    "../app/types.ts",
-    "../create/space/spaceKeys.ts",
     "spaceAttachCommands.ts",
     "cliRuntimeDoctorReport.ts",
-    "../ai/agent/agentRunDialogLineage.ts",
-    "../ai/agent/machineRunPermissions.ts",
     "noloReadBridgePrompt.ts",
-    "../chat/messages/fetchMessages.ts",
-    "../chat/messages/types.ts",
-    "../database/server/dbPath.ts",
-    "../database/server/db.ts",
-    "../database/server/ensureDbOpen.ts",
-    "../database/server/legacyServerDb.ts",
-    "../database/server/authorityStoreTypes.ts",
-    "../database/server/serverStoreFactory.ts",
-    "../database/server/levelAuthorityStore.ts",
-    "../database/server/memoryAuthorityStore.ts",
-    "../database/keys.ts",
-    "../database/utils/ulid.ts",
-    "agent-runtime/**/*.ts",
-    "connector-experimental/**/*.ts",
-    "app/**/*.ts",
-    "create/**/*.ts",
-    "database/**/*.ts",
-    "ai/**/*.ts",
-    "chat/**/*.ts",
-    "render/**/*.ts",
-    "share/**/*.ts",
-    "auth/**/*.ts",
-    "life/**/*.ts",
-    "core/**/*.ts",
-    "server/**/*.ts",
-    "integrations/**/*.ts"
+    "cli/commandRegistry.ts",
+    "cli/client/profileConfig.ts",
+    "cli/runtimeModeArgs.ts",
+    "cli/tui/readlineWorkspace.ts",
+    "cli/updateCommands.ts",
+    "cli/client/hybridRecordStore.ts",
+    "cli/cliEnvHelpers.ts",
+    "cli/cliIoTypes.ts",
+    "cli/machineWsRunDispatch.ts",
+    "cli/localRuntimeDb.ts",
+    "cli/agentRecordHelpers.ts",
+    "cli/customCodingAgentFlow.ts",
+    "cli/customCodingAgentRecord.ts",
+    "cli/agentCommandSupport.ts",
+    "cli/hybridReadHelpers.ts",
+    "cli/agentListHelpers.ts",
+    "cli/client/localRuntimeAdapter.ts",
+    "cli/agentListCommands.ts",
+    "cli/agentMachineCommands.ts",
+    "cli/runtimeDoctorCommands.ts",
+    "cli/connectorWebSocketTarget.ts",
+    "cli/agentAliases.ts",
+    "cli/machineCommandPrompts.ts",
+    "cli/client/taskWorktree.ts",
+    "cli/agentRuntimeLocal.ts",
+    "cli/client/taskRunPrompt.ts",
+    "cli/client/localAgentRecords.ts",
+    "cli/spaceMutationHelpers.ts",
+    "cli/client/agentRun.ts",
+    "cli/agentRunLocalWorkspace.ts",
+    "cli/agentRunParsing.ts",
+    "cli/scriptPassthroughHelpers.ts",
+    "cli/defaultServer.ts",
+    "cli/buildPublish.ts",
+    "cli/buildPublishArtifactAssembly.ts",
+    "cli/buildPublishImportAnalysis.ts",
+    "cli/publishPackage.ts",
+    "cli/cliCommandTypes.ts",
+    "cli/cliCommandAdapters.ts",
+    "cli/cliCommandDispatch.ts",
+    "cli/internalCommandEntries.ts",
+    "cli/scriptCommandEntries.ts",
+    "cli/agentCreateCustomCommands.ts",
+    "cli/agentDialogsCommands.ts",
+    "cli/agentDoctorCommands.ts",
+    "cli/agentUnpublishCommands.ts",
+    "cli/agentSuperviseCommands.ts",
+    "cli/agentPullCommand.ts",
+    "cli/agentRecordCommands.ts",
+    "cli/agentRunCommand.ts",
+    "cli/cliCommandFactories.ts",
+    "cli/dialogReadCommands.ts",
+    "cli/dialogStatusCommands.ts",
+    "cli/dialogReadHelpers.ts",
+    "cli/dialogDataAccess.ts",
+    "cli/pageCreateCommands.ts",
+    "cli/pageDeleteCommands.ts",
+    "cli/pageReadCommands.ts",
+    "cli/pageUpdateCommands.ts",
+    "cli/agentInternalCommandEntries.ts",
+    "cli/dialogInternalCommandEntries.ts",
+    "cli/docInternalCommandEntries.ts",
+    "cli/runtimeInternalCommandEntries.ts",
+    "cli/spaceInternalCommandEntries.ts",
+    "cli/systemInternalCommandEntries.ts",
+    "cli/workflowInternalCommandEntries.ts",
+    "cli/noloReadBridgePrompt.ts",
+    "cli/machineDaemonCommands.ts",
+    "cli/machineHeartbeatCommands.ts",
+    "cli/machineWatchCommands.ts",
+    "cli/machineWsSession.ts",
+    "cli/machineCommandResolution.ts",
+    "cli/machineStatusCommands.ts",
+    "cli/connectorRunArtifact.ts",
+    "cli/machineWsPromptMaterialization.ts",
+    "cli/pageWriteHelpers.ts",
+    "cli/secretScanHelpers.ts",
+    "cli/runtimePassthroughCommands.ts",
+    "cli/cliRuntimeDoctorReport.ts",
+    "cli/spaceAttachCommands.ts",
+    "cli/spaceCategoryCommands.ts",
+    "cli/spaceDeleteCommands.ts",
+    "cli/spaceCommands.ts",
+    "cli/spaceReadCommands.ts",
+    "cli/authCommands.ts",
+    "cli/machineCommands.ts",
+    "cli/tableDataOutput.ts",
+    "cli/tableQueryParsing.ts",
+    "cli/tableDataSafety.ts",
+    "cli/taskRunParsing.ts",
+    "cli/taskRunActions.ts",
+    "cli/tableMetaCommands.ts",
+    "cli/tableMutationCommands.ts",
+    "cli/tableCommands.ts",
+    "cli/taskRunCommand.ts",
+    "cli/tableQueryRequest.ts",
+    "cli/client/compactDialog.ts",
+    "cli/client/agentRunLocalExecution.ts",
+    "cli/client/workspaceSession.ts",
+    "cli/client/localProviderResolver.ts",
+    "cli/client/agentRunInput.ts",
+    "cli/client/agentRunTaskRunRecorder.ts",
+    "cli/client/localDialogRecords.ts",
+    "cli/client/localToolPolicy.ts",
+    "cli/client/streamingOutput.ts",
+    "cli/client/agentRunRuntimeSelection.ts",
+    "cli/client/agentRunLocalExecutor.ts",
+    "cli/client/agentRunServerTransport.ts",
+    "cli/taskRunPromptShared.ts",
+    "cli/client/agentConfigResolver.ts",
+    "cli/tui/tuiCatalog.ts",
+    "cli/tui/session.ts",
+    "cli/tui/tuiCommandInterpreter.ts",
+    "cli/tui/tuiPresentation.ts",
+    "agent-runtime/index.ts",
+    "agent-runtime/localLoop.ts",
+    "agent-runtime/localWorkspaceTools.ts",
+    "agent-runtime/dialogStatus.ts",
+    "agent-runtime/hostRuntimeConfig.ts",
+    "agent-runtime/taskWorkspace.ts",
+    "agent-runtime/workspaceSession.ts",
+    "agent-runtime/runtimeDecision.ts",
+    "agent-runtime/types.ts",
+    "agent-runtime/hostAdapter.ts",
+    "agent-runtime/agentConfigOptions.ts",
+    "agent-runtime/openAiCompatibleProvider.ts",
+    "agent-runtime/openAiCompatibleProviderConfig.ts",
+    "agent-runtime/platformChatProvider.ts",
+    "agent-runtime/runtimeFacts.ts",
+    "agent-runtime/agentRecordKeys.ts",
+    "agent-runtime/agentRecordConfig.ts",
+    "agent-runtime/dialogMessageRecord.ts",
+    "agent-runtime/dialogWritePlan.ts",
+    "agent-runtime/hybridRecordStore.ts",
+    "agent-runtime/localToolPolicy.ts",
+    "agent-runtime/runtimeToolPolicy.ts",
+    "connector-experimental/heartbeatLoop.ts",
+    "connector-experimental/daemonLauncher.ts",
+    "connector-experimental/capabilities.ts",
+    "connector-experimental/codexBinary.ts",
+    "app/types.ts",
+    "create/space/spaceKeys.ts",
+    "create/types.ts",
+    "database/keys.ts",
+    "database/server/dbPath.ts",
+    "database/server/db.ts",
+    "database/config.ts",
+    "database/tombstones.ts",
+    "database/server/ensureDbOpen.ts",
+    "database/server/legacyServerDb.ts",
+    "database/server/authorityStoreTypes.ts",
+    "database/server/serverStoreFactory.ts",
+    "database/server/levelAuthorityStore.ts",
+    "database/server/memoryAuthorityStore.ts",
+    "database/utils/ulid.ts",
+    "ai/agent/cliExecutor.ts",
+    "ai/agent/agentRunDialogLineage.ts",
+    "ai/skills/skillDocProtocol.ts",
+    "ai/skills/skillSummaryMarker.ts",
+    "ai/agent/cliPrompt.ts",
+    "ai/policy/types.ts",
+    "chat/messages/fetchMessages.ts",
+    "chat/messages/types.ts",
+    "render/table/activityColumns.ts",
+    "share/keys.ts",
+    "share/helpers.ts",
+    "share/types.ts"
   ],
   "publishConfig": {
     "access": "public"
@@ -220,50 +328,9 @@
     "typescript": "^5.0.0"
   },
   "dependencies": {
-    "unist-util-visit": "^5.0.0",
-    "date-fns-tz": "^2.0.0",
-    "level": "^10.0.0",
-    "js-yaml": "^4.1.0",
-    "@types/crypto-js": "^4.1.2",
-    "crypto-js": "^4.1.1",
-    "tweetnacl": "^1.0.3",
-    "@reduxjs/toolkit": "^2.5.0",
-    "react-redux": "^9.2.0",
-    "react": "^19.2.1",
-    "react-hot-toast": "^2.4.1",
-    "react-i18next": "^14.1.2",
-    "i18next": "^23.11.5",
-    "browser-image-compression": "^2.0.2",
-    "pino": "^9.9.0",
     "ulid": "^2.3.0",
-    "slate": "^0.112.0",
-    "slate-react": "^0.112.1",
-    "pdfjs-dist": "^5.2.133",
-    "slate-history": "^0.113.1",
-    "mdast-util-from-markdown": "^2.0.2",
-    "mdast-util-gfm": "^3.0.0",
-    "micromark-extension-gfm": "^3.0.0",
-    "@react-native-community/netinfo": "^11.5.0",
-    "react-native-blob-util": "^0.24.7",
     "rambda": "^8.6.0",
-    "@lobehub/icons": "^5.0.1",
-    "pizzip": "^3.2.0",
-    "docxtemplater": "^3.67.5",
-    "iztro": "^2.5.8",
-    "zod": "^3.25.20",
-    "react-hook-form": "^7.51.5",
-    "@hookform/resolvers": "^3.3.2",
-    "react-native-sse": "^1.2.1",
-    "xlsx": "^0.18.5",
-    "react-router-dom": "^6.23.1",
-    "croner": "^8.0.1",
-    "mermaid": "^11.6.0",
-    "react-native-keychain": "^9.2.2",
-    "async-mutex": "^0.5.0",
-    "js-base64": "^3.7.7",
-    "react-dom": "^19.2.1",
-    "diff": "^8.0.2",
-    "playwright": "^1.59.1",
-    "@waffo/pancake-ts": "^0.5.2"
+    "level": "^10.0.0",
+    "js-yaml": "^4.1.0"
   }
 }

package/spaceAttachCommands.ts

@@ -1,5 +1,4 @@
 import { ContentType } from "./app/types";
-import { resolveCliAgentKeyInput } from "./agentAliases";
 import { getReadableCliDb, type AgentCommandDeps } from "./agentCommandSupport";
 import { resolveAgentRecordFromHybridStore } from "./agentRecordHelpers";
 import {
@@ -57,7 +56,6 @@ export async function runSpaceAttachAgentCommand(
 
   try {
     const spaceId = parseSpaceIdFromInput(rawSpace);
-    const agentKey = resolveCliAgentKeyInput(rawAgent);
     const spaceRecord = await readSpaceRecordWithFallback({
       authToken,
       db,
@@ -75,8 +73,9 @@ export async function runSpaceAttachAgentCommand(
       fallbackFetchImpl,
     });
     if (!resolvedAgent?.record || typeof resolvedAgent.record !== "object") {
-      throw new Error(`agent not found: ${agentKey}`);
+      throw new Error(`agent not found: ${rawAgent}`);
     }
+    const agentKey = resolvedAgent.agentKey;
 
     const title =
       typeof resolvedAgent.record.name === "string" && resolvedAgent.record.name.trim()

package/agent-runtime/hostRuntimeCapabilities.ts

@@ -1,7 +0,0 @@
-export type {
-  HostRuntimeCapabilities,
-} from "./hostRuntimeConfig";
-export {
-  createHostRuntimeCapabilities,
-  resolveHostRuntimeCapabilitiesFromEnv,
-} from "./hostRuntimeConfig";

package/agent-runtime/shellCommandPolicy.ts

@@ -1,117 +0,0 @@
-export type ShellCommandPolicyVerdict = "allowed" | "forbidden";
-
-export type ShellCommandPolicyResult =
-  | {
-      verdict: "allowed";
-    }
-  | {
-      verdict: "forbidden";
-      code: "destructive_action_requires_confirmation";
-      reason: string;
-      policy: {
-        capability: "destructive_action";
-        target: "shell_command";
-        detail: string;
-      };
-    };
-
-const DESTRUCTIVE_NEGATION_PATTERNS = [
-  "别删",
-  "别删除",
-  "不要删",
-  "不要删除",
-  "别乱删",
-  "别动",
-  "不要动",
-  "不要清理",
-  "不要清空",
-  "不要重置",
-  "don't delete",
-  "do not delete",
-  "don't remove",
-  "do not remove",
-  "without deleting",
-] as const;
-
-const EXPLICIT_DESTRUCTIVE_REQUEST_PATTERNS = [
-  "删除",
-  "删掉",
-  "移除",
-  "清理",
-  "清空",
-  "重置",
-  "drop",
-  "delete",
-  "remove",
-  "erase",
-  "clean up",
-  "reset",
-] as const;
-
-const SHELL_DESTRUCTIVE_PATTERNS = [
-  /\brm\s+(-[^\n\r]*\s+)?/i,
-  /\bremove-item\b/i,
-  /\bdel\s+\/?[a-z]*\s+/i,
-  /\berase\s+/i,
-  /\brmdir\s+/i,
-  /\brd\s+\/s\b/i,
-  /\bgit\s+reset\s+(--hard\b|--merge\b|--keep\b)/i,
-  /\bgit\s+clean\s+-[^\n\r]*f/i,
-  /\bgit\s+checkout\s+--\b/i,
-  /\bgit\s+restore\s+--source=/i,
-] as const;
-
-const normalizeUserInput = (value: unknown): string =>
-  typeof value === "string" ? value.trim().toLowerCase() : "";
-
-const containsAny = (text: string, patterns: readonly string[]): boolean =>
-  patterns.some((pattern) => text.includes(pattern));
-
-const hasExplicitDestructivePermission = (userInput: unknown): boolean => {
-  const normalized = normalizeUserInput(userInput);
-  if (!normalized) return false;
-  if (containsAny(normalized, DESTRUCTIVE_NEGATION_PATTERNS)) return false;
-  return containsAny(normalized, EXPLICIT_DESTRUCTIVE_REQUEST_PATTERNS);
-};
-
-const buildCombinedShellInput = (args: {
-  command?: unknown;
-  input?: unknown;
-}): string =>
-  [
-    typeof args.command === "string" ? args.command : "",
-    typeof args.input === "string" ? args.input : "",
-  ]
-    .filter(Boolean)
-    .join("\n");
-
-export function isDestructiveShellCommand(args: {
-  command?: unknown;
-  input?: unknown;
-}): boolean {
-  const combined = buildCombinedShellInput(args);
-  if (!combined.trim()) return false;
-  return SHELL_DESTRUCTIVE_PATTERNS.some((pattern) => pattern.test(combined));
-}
-
-export function evaluateShellCommandPolicy(args: {
-  command?: unknown;
-  input?: unknown;
-  userInput?: unknown;
-}): ShellCommandPolicyResult {
-  if (isDestructiveShellCommand(args) && !hasExplicitDestructivePermission(args.userInput)) {
-    return {
-      verdict: "forbidden",
-      code: "destructive_action_requires_confirmation",
-      reason:
-        "当前运行默认禁止自动执行可能删除用户内容的 shell 命令。只有当用户在当前请求里明确要求删除/清理时，才能继续；否则请停止并先说明限制。",
-      policy: {
-        capability: "destructive_action",
-        target: "shell_command",
-        detail: "execShell destructive command",
-      },
-    };
-  }
-
-  return { verdict: "allowed" };
-}