nolo-cli 0.104.0-alpha.1 → 0.105.0-alpha.1

package/{agentDeleteCommand-2YAHAZFJ.js → agentDeleteCommand-YB3S2LPY.js}

@@ -15,7 +15,7 @@ import "./chunk-KQHGZWSV.js";
 import {
   Level
 } from "./chunk-UV6VISQJ.js";
-import "./chunk-6VFARHZW.js";
+import "./chunk-LC43IGO4.js";
 import "./chunk-ZCYXJSTU.js";
 import "./chunk-Q5FJJ6XI.js";
 import "./chunk-ZNFJWEN4.js";

package/{agentEmailCommands-O2KH4G7U.js → agentEmailCommands-AQZVMNLR.js}

@@ -8,8 +8,8 @@ import {
 } from "./chunk-V7E4PXQD.js";
 import {
   runAgentCreateCommand
-} from "./chunk-7SOWRCQQ.js";
-import "./chunk-ITBLTYQB.js";
+} from "./chunk-S6JLBH6Z.js";
+import "./chunk-RJ4QOQDA.js";
 import "./chunk-53HEEOTT.js";
 import "./chunk-EADNWBAZ.js";
 import "./chunk-SH43IESU.js";
@@ -71,7 +71,7 @@ import "./chunk-JRQFUXY7.js";
 import "./chunk-DHDMC6FO.js";
 import "./chunk-Q554LLSI.js";
 import "./chunk-KHCLMKZZ.js";
-import "./chunk-6VFARHZW.js";
+import "./chunk-LC43IGO4.js";
 import "./chunk-ZCYXJSTU.js";
 import "./chunk-Q5FJJ6XI.js";
 import "./chunk-ZNFJWEN4.js";

package/{agentListCommands-GUDMBDHZ.js → agentListCommands-3GWH4E4G.js}

@@ -40,7 +40,7 @@ import {
 } from "./chunk-PQFHGD77.js";
 import "./chunk-KQHGZWSV.js";
 import "./chunk-YYLHWIW6.js";
-import "./chunk-6VFARHZW.js";
+import "./chunk-LC43IGO4.js";
 import "./chunk-ZCYXJSTU.js";
 import "./chunk-Q5FJJ6XI.js";
 import "./chunk-ZNFJWEN4.js";

package/{agentMachineCommands-5I5CCUBM.js → agentMachineCommands-R5AVYYN3.js}

@@ -15,7 +15,7 @@ import {
 } from "./chunk-SV5IJK6K.js";
 import "./chunk-NF64D32W.js";
 import "./chunk-3L2WKC3W.js";
-import "./chunk-6VFARHZW.js";
+import "./chunk-LC43IGO4.js";
 import "./chunk-ZCYXJSTU.js";
 import "./chunk-Q5FJJ6XI.js";
 import "./chunk-ZNFJWEN4.js";
@@ -91,7 +91,7 @@ async function defaultExecuteCli(provider, prompt, options) {
   return executeCli(provider, prompt, options);
 }
 async function forwardConnectorRunMessage(machine, message, pushMessage, executeCli, env, fetchImpl) {
-  const { handleConnectorRunMessage } = await import("./machineWsRunDispatch-VXYBYYKM.js");
+  const { handleConnectorRunMessage } = await import("./machineWsRunDispatch-D2NHL3P7.js");
   return handleConnectorRunMessage(message, pushMessage, executeCli, env, fetchImpl);
 }
 async function detectLaunchableMachineInfo() {

package/{agentRecordCommands-RSS44XHC.js → agentRecordCommands-JY4IWSSQ.js}

@@ -2,8 +2,8 @@ import {
   runAgentCreateCommand,
   runAgentReadCommand,
   runAgentUpdateCommand
-} from "./chunk-7SOWRCQQ.js";
-import "./chunk-ITBLTYQB.js";
+} from "./chunk-S6JLBH6Z.js";
+import "./chunk-RJ4QOQDA.js";
 import "./chunk-53HEEOTT.js";
 import "./chunk-EADNWBAZ.js";
 import "./chunk-SH43IESU.js";
@@ -58,7 +58,7 @@ import "./chunk-JRQFUXY7.js";
 import "./chunk-DHDMC6FO.js";
 import "./chunk-Q554LLSI.js";
 import "./chunk-KHCLMKZZ.js";
-import "./chunk-6VFARHZW.js";
+import "./chunk-LC43IGO4.js";
 import "./chunk-ZCYXJSTU.js";
 import "./chunk-Q5FJJ6XI.js";
 import "./chunk-ZNFJWEN4.js";

package/{agentRunCommand-P7VHL4ZR.js → agentRunCommand-7VTYZY3Q.js}

@@ -8,12 +8,12 @@ import {
   resolveRunSettlementNote,
   resolveWorkflowReference,
   runAgentRunCommand
-} from "./chunk-4J4QNKTW.js";
+} from "./chunk-O7EBSHZR.js";
 import "./chunk-S7Z2HMCN.js";
 import {
   parseAgentRunArgs
 } from "./chunk-V7E4PXQD.js";
-import "./chunk-ITBLTYQB.js";
+import "./chunk-RJ4QOQDA.js";
 import "./chunk-53HEEOTT.js";
 import "./chunk-EADNWBAZ.js";
 import "./chunk-SH43IESU.js";
@@ -74,7 +74,7 @@ import "./chunk-JRQFUXY7.js";
 import "./chunk-DHDMC6FO.js";
 import "./chunk-Q554LLSI.js";
 import "./chunk-KHCLMKZZ.js";
-import "./chunk-6VFARHZW.js";
+import "./chunk-LC43IGO4.js";
 import "./chunk-ZCYXJSTU.js";
 import "./chunk-Q5FJJ6XI.js";
 import "./chunk-ZNFJWEN4.js";

package/{agentRuntimeLocal-VXZSDIGT.js → agentRuntimeLocal-FRUE5P2V.js}

@@ -5,12 +5,14 @@ import {
   buildLocalWorkspacePolicyToolNames,
   buildLocalWorkspaceToolset,
   buildOpenAiCompatibleChatCompletionRequest,
+  buildToolParametersIndex,
   createHybridRecordStore,
   createLocalWorkspaceToolExecutors,
   dialogMessageRecordToAgentRuntimeMessage,
   evaluateShellCommandPolicy,
   executeLocalToolWithPolicy,
   executeOpenAiCompatibleChatCompletion,
+  getAgentRuntimeToolParametersIndex,
   isDestructiveShellCommand,
   parseOpenAiCompatibleChatCompletionResponse,
   parseSyncServersEnv,
@@ -19,7 +21,7 @@ import {
   resolveOpenAiCompatibleProviderConfig,
   runLocalAgentTurn,
   shouldCacheHybridRemoteRecord
-} from "./chunk-6VFARHZW.js";
+} from "./chunk-LC43IGO4.js";
 import {
   buildPlatformChatCompletionRequest,
   canUsePlatformChatProvider,
@@ -105,6 +107,7 @@ export {
   buildLocalWorkspaceToolset,
   buildOpenAiCompatibleChatCompletionRequest,
   buildPlatformChatCompletionRequest,
+  buildToolParametersIndex,
   canUsePlatformChatProvider,
   createHybridRecordStore,
   createLocalWorkspaceToolExecutors,
@@ -112,6 +115,7 @@ export {
   evaluateShellCommandPolicy,
   executeLocalToolWithPolicy,
   executeOpenAiCompatibleChatCompletion,
+  getAgentRuntimeToolParametersIndex,
   hasDirectOpenAiCompatibleProvider,
   isDestructiveShellCommand,
   parseOpenAiCompatibleChatCompletionResponse,

package/{appDeleteCommands-32MHLR4L.js → appDeleteCommands-JPWTSFID.js}

@@ -13,7 +13,7 @@ import "./chunk-AEOE4Z6Q.js";
 import "./chunk-Z77CRGTW.js";
 import "./chunk-SV5IJK6K.js";
 import "./chunk-VF4K2QE6.js";
-import "./chunk-6VFARHZW.js";
+import "./chunk-LC43IGO4.js";
 import "./chunk-ZCYXJSTU.js";
 import "./chunk-Q5FJJ6XI.js";
 import "./chunk-ZNFJWEN4.js";

package/{appDeployCommands-WCQOUSOB.js → appDeployCommands-YCVY2UYO.js}

@@ -14,7 +14,7 @@ import "./chunk-AEOE4Z6Q.js";
 import "./chunk-Z77CRGTW.js";
 import "./chunk-SV5IJK6K.js";
 import "./chunk-VF4K2QE6.js";
-import "./chunk-6VFARHZW.js";
+import "./chunk-LC43IGO4.js";
 import "./chunk-ZCYXJSTU.js";
 import "./chunk-Q5FJJ6XI.js";
 import "./chunk-ZNFJWEN4.js";

package/{appDeployStatusCommands-6QKB7DYN.js → appDeployStatusCommands-JMCEIKTI.js}

@@ -13,7 +13,7 @@ import "./chunk-AEOE4Z6Q.js";
 import "./chunk-Z77CRGTW.js";
 import "./chunk-SV5IJK6K.js";
 import "./chunk-VF4K2QE6.js";
-import "./chunk-6VFARHZW.js";
+import "./chunk-LC43IGO4.js";
 import "./chunk-ZCYXJSTU.js";
 import "./chunk-Q5FJJ6XI.js";
 import "./chunk-ZNFJWEN4.js";

package/{appGetCommands-SFAPP5PB.js → appGetCommands-EXWT3QAE.js}

@@ -14,7 +14,7 @@ import "./chunk-AEOE4Z6Q.js";
 import "./chunk-Z77CRGTW.js";
 import "./chunk-SV5IJK6K.js";
 import "./chunk-VF4K2QE6.js";
-import "./chunk-6VFARHZW.js";
+import "./chunk-LC43IGO4.js";
 import "./chunk-ZCYXJSTU.js";
 import "./chunk-Q5FJJ6XI.js";
 import "./chunk-ZNFJWEN4.js";

package/{appListCommands-EKUBDRUO.js → appListCommands-PKRLSWRE.js}

@@ -14,7 +14,7 @@ import "./chunk-AEOE4Z6Q.js";
 import "./chunk-Z77CRGTW.js";
 import "./chunk-SV5IJK6K.js";
 import "./chunk-VF4K2QE6.js";
-import "./chunk-6VFARHZW.js";
+import "./chunk-LC43IGO4.js";
 import "./chunk-ZCYXJSTU.js";
 import "./chunk-Q5FJJ6XI.js";
 import "./chunk-ZNFJWEN4.js";

package/{chunk-6VFARHZW.js → chunk-LC43IGO4.js}

@@ -64,6 +64,7 @@ import {
   applyToolSurfaceConstraints,
   buildDialogReadEnvelope,
   buildNoloWorkspaceCommandArgs,
+  buildNoloWorkspaceOpenAiTools,
   createStreamingDialogReadProjector,
   noloPositiveIntegerString,
   noloStringArg,
@@ -15652,132 +15653,6 @@ async function evaluateCapabilityPolicy(capability, normalizedInput, ctx) {
   }
 }
 
-// packages/agent-runtime/localToolPolicy.ts
-var NEVER_LOCAL_TOOLS = /* @__PURE__ */ new Set([
-  "deleteSpaces",
-  "updateAgent",
-  "updateSelf",
-  "createAgent"
-]);
-var DEFAULT_LOCAL_TOOLS = /* @__PURE__ */ new Set([
-  "readFile",
-  "writeFile",
-  "editFile",
-  "globFiles",
-  "execShell",
-  "launchProcess",
-  "listProcesses",
-  // ProcessTask follow-up tools. Same tier as listProcesses: they observe/stop
-  // tasks the agent itself already spawned, so their blast radius is strictly
-  // narrower than launchProcess (which is default-enabled). Model-facing
-  // follow-ups are taskWait/taskStop only — lifecycle history (taskLogs) stays
-  // runtime-internal.
-  "taskWait",
-  "taskStop",
-  // Scheduling tools: forking/observing sub-agents is a declared capability
-  // of capable agents, and the blast radius is strictly narrower than
-  // execShell (already default-enabled). Requiring an env allowlist for these
-  // while execShell is open by default inverted the risk model and forced every
-  // new local user to hand-edit .env files before sub-agent tasks worked.
-  "startAgentRun",
-  "controlAgentRun"
-]);
-function parseToolAllowlist(value) {
-  return (value ?? "").split(",").flatMap((item) => {
-    const trimmed = item.trim();
-    return trimmed ? [trimmed] : [];
-  });
-}
-function normalizeLocalToolName(toolName) {
-  return canonicalizeToolName(
-    String(toolName ?? "").replace(/^functions\./, "").trim()
-  );
-}
-function isRestrictedLocalToolMode(env) {
-  return env.NOLO_LOCAL_TOOL_MODE === "restricted";
-}
-function resolveLocalToolPolicy(args2) {
-  const toolName = normalizeLocalToolName(args2.toolName);
-  const restrictedMode = isRestrictedLocalToolMode(args2.env);
-  if (!toolName) {
-    return {
-      allowed: false,
-      toolName,
-      reason: "Tool name is required."
-    };
-  }
-  if (NEVER_LOCAL_TOOLS.has(toolName)) {
-    return {
-      allowed: false,
-      toolName,
-      reason: `${toolName} is blocked by the local runtime safety policy.`
-    };
-  }
-  const allowedByEnv = new Set(parseToolAllowlist(args2.env.NOLO_LOCAL_ALLOWED_TOOLS));
-  const agentTools = new Set(
-    (args2.agentToolNames ?? []).flatMap((item) => {
-      const normalized = normalizeLocalToolName(item);
-      return normalized ? [normalized] : [];
-    })
-  );
-  if (!restrictedMode && agentTools.has(toolName)) {
-    return { allowed: true, toolName };
-  }
-  if (DEFAULT_LOCAL_TOOLS.has(toolName) && agentTools.has(toolName)) {
-    return { allowed: true, toolName };
-  }
-  if (allowedByEnv.has(toolName) && agentTools.has(toolName)) {
-    return { allowed: true, toolName };
-  }
-  return {
-    allowed: false,
-    toolName,
-    reason: `${toolName} is not enabled for local runtime runs. The agent must declare the tool in its manifest; in restricted mode (NOLO_LOCAL_TOOL_MODE=restricted) non-default tools also require adding to NOLO_LOCAL_ALLOWED_TOOLS (e.g. NOLO_LOCAL_ALLOWED_TOOLS=someCustomTool) and restarting the session so the env var loads.`
-  };
-}
-async function executeLocalToolWithPolicy(args2) {
-  if (args2.runToolNames !== void 0 && !args2.runToolNames.includes(normalizeLocalToolName(args2.call.name))) {
-    throw new Error(`${args2.call.name} is outside the final run tool surface.`);
-  }
-  const decision = resolveLocalToolPolicy({
-    env: args2.env,
-    agentToolNames: args2.agentToolNames,
-    toolName: args2.call.name
-  });
-  if (!decision.allowed) throw new Error(decision.reason);
-  const executor = args2.executors?.[decision.toolName];
-  if (!executor) {
-    throw new Error(`${decision.toolName} is allowed by policy but no local executor is registered.`);
-  }
-  const opts = {
-    ...args2.abortSignal ? { abortSignal: args2.abortSignal } : {},
-    ...args2.detachMs !== void 0 ? { detachMs: args2.detachMs } : {},
-    ...args2.confirmed !== void 0 ? { confirmed: args2.confirmed } : {},
-    ...args2.enableDestructiveShellGuard !== void 0 ? { enableDestructiveShellGuard: args2.enableDestructiveShellGuard } : {},
-    ...args2.confirmDestructiveAction ? { confirmDestructiveAction: args2.confirmDestructiveAction } : {},
-    ...args2.blockDestructiveWithoutConfirmation !== void 0 ? { blockDestructiveWithoutConfirmation: args2.blockDestructiveWithoutConfirmation } : {}
-  };
-  if (decision.toolName === "execShell") {
-    let parsedInput = args2.call.arguments;
-    if (typeof parsedInput === "string") {
-      try {
-        parsedInput = JSON.parse(parsedInput);
-      } catch {
-        parsedInput = { command: parsedInput };
-      }
-    }
-    await evaluateExecShellDestructiveGuard(parsedInput, opts);
-    opts.confirmed = true;
-  }
-  return executor(
-    {
-      ...args2.call,
-      name: decision.toolName
-    },
-    opts
-  );
-}
-
 // packages/agent-runtime/localWorkspaceTools.ts
 import { existsSync as existsSync3 } from "node:fs";
 import { createHash as createHash3 } from "node:crypto";
@@ -19312,6 +19187,290 @@ function createLocalWorkspaceToolExecutors(args2) {
   };
 }
 
+// packages/agent-runtime/toolArgumentGate.ts
+var FIELD_ALIAS_GROUPS = [
+  // localWorkspaceTools.ts:336 导出常量（readFile/writeFile/editFile/globFiles）
+  PATH_FIELD_ALIASES,
+  // localWorkspaceTools.ts:339-340 导出常量（editFile）
+  OLD_TEXT_FIELD_ALIASES,
+  NEW_TEXT_FIELD_ALIASES,
+  // localWorkspaceTools.ts:733 `args.cmd || args.command`（launchProcess）；
+  // launchProcess 的 required ["command"] 见 localWorkspaceToolDefs.ts:283。
+  // 注：execShell 的 schema 无 required（command 在 executor 层强制，
+  // capabilities/execShellCapability.ts:42 声明 cmd 兼容字段），本组对它不产生拦截。
+  ["command", "cmd"],
+  // localWorkspaceTools.ts:698-699 `args.pattern ?? args.glob`（globFiles）
+  ["pattern", "glob"],
+  // noloWorkspaceTools.ts:492 `args.dialog ?? args.dialogId ?? args.id`（readDialog）
+  ["dialog", "dialogId", "id"],
+  // noloWorkspaceTools.ts:545 `args.agent ?? args.agentKey ?? args.id`（readAgent）
+  ["agent", "agentKey", "id"],
+  // noloWorkspaceTools.ts:552 `args.space ?? args.spaceId ?? args.id`（readSpace）
+  ["space", "spaceId", "id"],
+  // noloWorkspaceTools.ts:561/567 `args.doc ?? args.docKey ?? args.pageKey ?? args.key`
+  // （readDoc / readSkillDoc）
+  ["doc", "docKey", "pageKey", "key"],
+  // noloWorkspaceTools.node.ts:238 `parsed.name ?? parsed.skillName ?? parsed.skill`（loadSkill）
+  ["name", "skillName", "skill"],
+  // noloWorkspaceTools.ts:593 `args.table ?? args.tableId ?? args.metaKey`（queryTableRows）
+  ["table", "tableId", "metaKey"]
+];
+var TYPE_MATCHERS = {
+  string: (value) => typeof value === "string",
+  // 数字字符串视为可接受：executor 普遍 Number()/clamp 宽松处理，拦截会误报。
+  number: (value) => typeof value === "number" || typeof value === "string" && value.trim() !== "" && Number.isFinite(Number(value)),
+  integer: (value) => typeof value === "number" || typeof value === "string" && value.trim() !== "" && Number.isFinite(Number(value)),
+  boolean: (value) => typeof value === "boolean" || value === "true" || value === "false",
+  object: (value) => typeof value === "object" && value !== null && !Array.isArray(value),
+  array: (value) => Array.isArray(value)
+};
+function describeValueType(value) {
+  if (value === null) return "null";
+  if (Array.isArray(value)) return "array";
+  return typeof value;
+}
+function isAliasSatisfied(args2, field) {
+  for (const group of FIELD_ALIAS_GROUPS) {
+    if (!group.includes(field)) continue;
+    if (group.some((alias) => args2[alias] !== void 0)) return true;
+  }
+  return false;
+}
+function readRequiredFields(parameters) {
+  const required = parameters.required;
+  if (!Array.isArray(required)) return [];
+  return required.filter((field) => typeof field === "string");
+}
+function readProperties(parameters) {
+  const properties = parameters.properties;
+  if (!properties || typeof properties !== "object" || Array.isArray(properties)) {
+    return {};
+  }
+  return properties;
+}
+function validateToolArguments(args2) {
+  const { toolName, rawArguments, parameters } = args2;
+  if (!parameters || typeof parameters !== "object" || Array.isArray(parameters)) {
+    return { ok: true, args: {} };
+  }
+  const schema = parameters;
+  const requiredFields = readRequiredFields(schema);
+  const properties = readProperties(schema);
+  if (requiredFields.length === 0 && Object.keys(properties).length === 0) {
+    return { ok: true, args: {} };
+  }
+  const raw = typeof rawArguments === "string" ? rawArguments.trim() : "";
+  let record = {};
+  if (raw !== "") {
+    let parsed;
+    try {
+      parsed = JSON.parse(raw);
+    } catch {
+      return { ok: true, args: {} };
+    }
+    if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) {
+      return { ok: true, args: {} };
+    }
+    record = parsed;
+  }
+  for (const field of requiredFields) {
+    if (record[field] !== void 0) continue;
+    if (isAliasSatisfied(record, field)) continue;
+    return {
+      ok: false,
+      message: `${toolName} \u53C2\u6570\u6821\u9A8C\u5931\u8D25\uFF1A\u7F3A\u5C11\u5FC5\u586B\u53C2\u6570 "${field}"\u3002\u8BF7\u8865\u4E0A\u540E\u91CD\u65B0\u8C03\u7528 ${toolName}\u3002`
+    };
+  }
+  for (const [field, spec] of Object.entries(properties)) {
+    const value = record[field];
+    if (value === void 0 || value === null) continue;
+    if (!spec || typeof spec !== "object" || Array.isArray(spec)) continue;
+    const declared = spec.type;
+    if (typeof declared !== "string") continue;
+    const matcher = TYPE_MATCHERS[declared];
+    if (!matcher) continue;
+    if (!matcher(value)) {
+      return {
+        ok: false,
+        message: `${toolName} \u53C2\u6570\u6821\u9A8C\u5931\u8D25\uFF1A\u53C2\u6570 "${field}" \u5E94\u4E3A ${declared}\uFF0C\u5B9E\u9645\u6536\u5230 ${describeValueType(value)}\u3002\u8BF7\u4FEE\u6B63\u540E\u91CD\u65B0\u8C03\u7528 ${toolName}\u3002`
+      };
+    }
+  }
+  return { ok: true, args: record };
+}
+function buildToolParametersIndex(tools) {
+  const index = /* @__PURE__ */ new Map();
+  for (const tool of tools) {
+    if (!tool || typeof tool !== "object") continue;
+    const fn3 = tool.function;
+    if (!fn3 || typeof fn3 !== "object") continue;
+    const name = fn3.name;
+    const parameters = fn3.parameters;
+    if (typeof name === "string" && name && parameters !== void 0) {
+      index.set(name, parameters);
+    }
+  }
+  return index;
+}
+var cachedAgentRuntimeIndex = null;
+function getAgentRuntimeToolParametersIndex() {
+  if (cachedAgentRuntimeIndex) return cachedAgentRuntimeIndex;
+  const index = /* @__PURE__ */ new Map();
+  try {
+    const workspaceTools = buildLocalWorkspaceOpenAiTools({
+      toolNames: [...WORKSPACE_TOOL_NAMES],
+      exposeShellTools: true
+    });
+    for (const [name, parameters] of buildToolParametersIndex(workspaceTools)) {
+      index.set(name, parameters);
+    }
+    const noloTools = buildNoloWorkspaceOpenAiTools({
+      toolNames: [...NOLO_WORKSPACE_TOOL_NAMES]
+    });
+    for (const [name, parameters] of buildToolParametersIndex(noloTools)) {
+      index.set(name, parameters);
+    }
+  } catch {
+  }
+  cachedAgentRuntimeIndex = index;
+  return index;
+}
+
+// packages/agent-runtime/localToolPolicy.ts
+var NEVER_LOCAL_TOOLS = /* @__PURE__ */ new Set([
+  "deleteSpaces",
+  "updateAgent",
+  "updateSelf",
+  "createAgent"
+]);
+var DEFAULT_LOCAL_TOOLS = /* @__PURE__ */ new Set([
+  "readFile",
+  "writeFile",
+  "editFile",
+  "globFiles",
+  "execShell",
+  "launchProcess",
+  "listProcesses",
+  // ProcessTask follow-up tools. Same tier as listProcesses: they observe/stop
+  // tasks the agent itself already spawned, so their blast radius is strictly
+  // narrower than launchProcess (which is default-enabled). Model-facing
+  // follow-ups are taskWait/taskStop only — lifecycle history (taskLogs) stays
+  // runtime-internal.
+  "taskWait",
+  "taskStop",
+  // Scheduling tools: forking/observing sub-agents is a declared capability
+  // of capable agents, and the blast radius is strictly narrower than
+  // execShell (already default-enabled). Requiring an env allowlist for these
+  // while execShell is open by default inverted the risk model and forced every
+  // new local user to hand-edit .env files before sub-agent tasks worked.
+  "startAgentRun",
+  "controlAgentRun"
+]);
+function parseToolAllowlist(value) {
+  return (value ?? "").split(",").flatMap((item) => {
+    const trimmed = item.trim();
+    return trimmed ? [trimmed] : [];
+  });
+}
+function normalizeLocalToolName(toolName) {
+  return canonicalizeToolName(
+    String(toolName ?? "").replace(/^functions\./, "").trim()
+  );
+}
+function isRestrictedLocalToolMode(env) {
+  return env.NOLO_LOCAL_TOOL_MODE === "restricted";
+}
+function resolveLocalToolPolicy(args2) {
+  const toolName = normalizeLocalToolName(args2.toolName);
+  const restrictedMode = isRestrictedLocalToolMode(args2.env);
+  if (!toolName) {
+    return {
+      allowed: false,
+      toolName,
+      reason: "Tool name is required."
+    };
+  }
+  if (NEVER_LOCAL_TOOLS.has(toolName)) {
+    return {
+      allowed: false,
+      toolName,
+      reason: `${toolName} is blocked by the local runtime safety policy.`
+    };
+  }
+  const allowedByEnv = new Set(parseToolAllowlist(args2.env.NOLO_LOCAL_ALLOWED_TOOLS));
+  const agentTools = new Set(
+    (args2.agentToolNames ?? []).flatMap((item) => {
+      const normalized = normalizeLocalToolName(item);
+      return normalized ? [normalized] : [];
+    })
+  );
+  if (!restrictedMode && agentTools.has(toolName)) {
+    return { allowed: true, toolName };
+  }
+  if (DEFAULT_LOCAL_TOOLS.has(toolName) && agentTools.has(toolName)) {
+    return { allowed: true, toolName };
+  }
+  if (allowedByEnv.has(toolName) && agentTools.has(toolName)) {
+    return { allowed: true, toolName };
+  }
+  return {
+    allowed: false,
+    toolName,
+    reason: `${toolName} is not enabled for local runtime runs. The agent must declare the tool in its manifest; in restricted mode (NOLO_LOCAL_TOOL_MODE=restricted) non-default tools also require adding to NOLO_LOCAL_ALLOWED_TOOLS (e.g. NOLO_LOCAL_ALLOWED_TOOLS=someCustomTool) and restarting the session so the env var loads.`
+  };
+}
+async function executeLocalToolWithPolicy(args2) {
+  if (args2.runToolNames !== void 0 && !args2.runToolNames.includes(normalizeLocalToolName(args2.call.name))) {
+    throw new Error(`${args2.call.name} is outside the final run tool surface.`);
+  }
+  const decision = resolveLocalToolPolicy({
+    env: args2.env,
+    agentToolNames: args2.agentToolNames,
+    toolName: args2.call.name
+  });
+  if (!decision.allowed) throw new Error(decision.reason);
+  const executor = args2.executors?.[decision.toolName];
+  if (!executor) {
+    throw new Error(`${decision.toolName} is allowed by policy but no local executor is registered.`);
+  }
+  const parametersSchema = args2.toolParametersIndex?.get(decision.toolName);
+  if (parametersSchema !== void 0) {
+    const gate = validateToolArguments({
+      toolName: decision.toolName,
+      rawArguments: args2.call.arguments,
+      parameters: parametersSchema
+    });
+    if (!gate.ok) throw new Error(gate.message);
+  }
+  const opts = {
+    ...args2.abortSignal ? { abortSignal: args2.abortSignal } : {},
+    ...args2.detachMs !== void 0 ? { detachMs: args2.detachMs } : {},
+    ...args2.confirmed !== void 0 ? { confirmed: args2.confirmed } : {},
+    ...args2.enableDestructiveShellGuard !== void 0 ? { enableDestructiveShellGuard: args2.enableDestructiveShellGuard } : {},
+    ...args2.confirmDestructiveAction ? { confirmDestructiveAction: args2.confirmDestructiveAction } : {},
+    ...args2.blockDestructiveWithoutConfirmation !== void 0 ? { blockDestructiveWithoutConfirmation: args2.blockDestructiveWithoutConfirmation } : {}
+  };
+  if (decision.toolName === "execShell") {
+    let parsedInput = args2.call.arguments;
+    if (typeof parsedInput === "string") {
+      try {
+        parsedInput = JSON.parse(parsedInput);
+      } catch {
+        parsedInput = { command: parsedInput };
+      }
+    }
+    await evaluateExecShellDestructiveGuard(parsedInput, opts);
+    opts.confirmed = true;
+  }
+  return executor(
+    {
+      ...args2.call,
+      name: decision.toolName
+    },
+    opts
+  );
+}
+
 // packages/cli/client/localDialogRecords.ts
 var localDialogMessageRecordToRuntimeMessage = dialogMessageRecordToAgentRuntimeMessage;
 function buildLocalDialogWritePlan(args2) {
@@ -20016,7 +20175,7 @@ function buildGeminiGenerateContentRequest(args2) {
   const toolsResult = convertOpenAiToolsToGemini(args2.tools);
   if (toolsResult) {
     request3.tools = toolsResult;
-    request3.toolConfig = { functionCallingConfig: { mode: "VALIDATED" } };
+    request3.toolConfig = { functionCallingConfig: { mode: "AUTO" } };
   }
   const generationConfig = {};
   if (typeof args2.maxTokens === "number" && args2.maxTokens > 0) {
@@ -20065,7 +20224,7 @@ function buildCloudCodeAssistPayload(args2) {
   );
   if (tools) {
     request3.tools = tools;
-    request3.toolConfig = { functionCallingConfig: { mode: "VALIDATED" } };
+    request3.toolConfig = { functionCallingConfig: { mode: "AUTO" } };
   }
   const generationConfig = {};
   if (profile?.maxOutputTokens) {
@@ -20792,8 +20951,6 @@ export {
   createHybridRecordStore,
   isDestructiveShellCommand,
   evaluateShellCommandPolicy,
-  resolveLocalToolPolicy,
-  executeLocalToolWithPolicy,
   filterRetainedLedgerRecords,
   isLineRangeCovered,
   getProcessRegistry,
@@ -20804,6 +20961,10 @@ export {
   internalSearchWorkspace,
   internalListWorkspaceEntries,
   createLocalWorkspaceToolExecutors,
+  buildToolParametersIndex,
+  getAgentRuntimeToolParametersIndex,
+  resolveLocalToolPolicy,
+  executeLocalToolWithPolicy,
   localDialogMessageRecordToRuntimeMessage,
   buildLocalDialogWritePlan,
   buildNoloWorkspaceCliToolExecutors,

package/{chunk-4J4QNKTW.js → chunk-O7EBSHZR.js}

@@ -27,7 +27,7 @@ import {
   resolveLocalUserId,
   t,
   toolLabel
-} from "./chunk-ITBLTYQB.js";
+} from "./chunk-RJ4QOQDA.js";
 import {
   createRunActivityTracker,
   popSingleQueueMessage,
@@ -115,7 +115,7 @@ import {
   LOCAL_AGENT_CONFIG_MISSING_CODE,
   LOCAL_TURN_ABORTED_CODE,
   readActionGate
-} from "./chunk-6VFARHZW.js";
+} from "./chunk-LC43IGO4.js";
 import {
   resolveAgentRuntimeConfigFromRecord
 } from "./chunk-5H7KJX7J.js";
@@ -10459,7 +10459,7 @@ function findCollapsedPasteSpanAt(buffer, pos, opts = {}) {
 // packages/cli/client/agentRun.ts
 import { ulid as ulid2 } from "ulid";
 async function loadRunLocalAgentTurn() {
-  const { runLocalAgentTurn } = await import("./agentRuntimeLocal-VXZSDIGT.js");
+  const { runLocalAgentTurn } = await import("./agentRuntimeLocal-FRUE5P2V.js");
   return runLocalAgentTurn;
 }
 var stripDebugNoise = (s) => s.replace(/\s*raw="[\s\S]*"/g, "").replace(/\s*raw=\S+/g, "").replace(/\s*headers=\[[^\]]*\]/g, "").replace(/\s*headers=\S+/g, "").trim();

package/{chunk-ITBLTYQB.js → chunk-RJ4QOQDA.js}

@@ -156,6 +156,7 @@ import {
   executeOpenAiCompatibleChatCompletion,
   fetchAntigravityCloudCodeCompletion,
   filterRetainedLedgerRecords,
+  getAgentRuntimeToolParametersIndex,
   internalListWorkspaceEntries,
   internalSearchWorkspace,
   isGemini3Model,
@@ -170,7 +171,7 @@ import {
   resolveOpenAiCompatibleProviderConfig,
   shouldUseGeminiNativeToolRoute,
   summarizeToolArguments
-} from "./chunk-6VFARHZW.js";
+} from "./chunk-LC43IGO4.js";
 import {
   PlatformStreamInterruptedError,
   buildPlatformChatCompletionRequest,
@@ -9313,6 +9314,8 @@ var resolveCursorTransport = async (ctx) => {
         agentToolNames: activeAgentToolNames,
         call,
         executors: localToolExecutors,
+        // 分发前参数闸门：与 host adapter 的 executeTool 同口径。
+        toolParametersIndex: getAgentRuntimeToolParametersIndex(),
         detachMs: resolveExecShellDetachMs(deps.env),
         ...deps.confirmDestructiveAction ? { confirmDestructiveAction: deps.confirmDestructiveAction } : {}
       });
@@ -13448,6 +13451,11 @@ function createCliLocalRuntimeAdapter(deps) {
         runToolNames: activeAgentToolNames,
         call: injectedCall,
         executors: localToolExecutors,
+        // 分发前参数闸门：只覆盖 agent-runtime 工具族（workspace + nolo
+        // workspace）。ai/tools registry 的工具不接——它们有各自的前置 policy
+        // guard 与结构化结果契约（例：createTable 的 capture 确认守卫），
+        // 闸门抢先拦截会覆盖这些语义（见 toolArgumentGate.ts 的范围说明）。
+        toolParametersIndex: getAgentRuntimeToolParametersIndex(),
         abortSignal: opts?.abortSignal,
         detachMs: resolveExecShellDetachMs(deps.env),
         ...deps.confirmDestructiveAction ? { confirmDestructiveAction: deps.confirmDestructiveAction } : {}

package/{chunk-7SOWRCQQ.js → chunk-S6JLBH6Z.js}

@@ -1,6 +1,6 @@
 import {
   clearCliLocalRuntimePreparedAgentCache
-} from "./chunk-ITBLTYQB.js";
+} from "./chunk-RJ4QOQDA.js";
 import {
   getReadableCliDb
 } from "./chunk-LS2ZANRJ.js";

package/{chunk-B6P4QKEN.js → chunk-VLI5LVL5.js}

@@ -1,13 +1,13 @@
 import {
   createCliLocalRuntimeAdapter,
   summarizeEndpoint
-} from "./chunk-ITBLTYQB.js";
+} from "./chunk-RJ4QOQDA.js";
 import {
   clipMultilineText
 } from "./chunk-H66KLASO.js";
 import {
   runLocalAgentTurn
-} from "./chunk-6VFARHZW.js";
+} from "./chunk-LC43IGO4.js";
 import {
   applyToolSurfaceConstraints
 } from "./chunk-IIVGDG4I.js";

package/{dialogCommands-5J56DFWN.js → dialogCommands-YVMHDEOX.js}

@@ -24,7 +24,7 @@ import "./chunk-KQHGZWSV.js";
 import "./chunk-3BMYXEUW.js";
 import "./chunk-URMS4XY2.js";
 import "./chunk-GLKOYSRU.js";
-import "./chunk-6VFARHZW.js";
+import "./chunk-LC43IGO4.js";
 import "./chunk-ZCYXJSTU.js";
 import "./chunk-Q5FJJ6XI.js";
 import "./chunk-ZNFJWEN4.js";

package/{docCreateCommands-KYI2DC2U.js → docCreateCommands-7UTWDYJU.js}

@@ -28,7 +28,7 @@ import "./chunk-SV5IJK6K.js";
 import "./chunk-VF4K2QE6.js";
 import "./chunk-Q554LLSI.js";
 import "./chunk-KHCLMKZZ.js";
-import "./chunk-6VFARHZW.js";
+import "./chunk-LC43IGO4.js";
 import "./chunk-ZCYXJSTU.js";
 import "./chunk-Q5FJJ6XI.js";
 import "./chunk-ZNFJWEN4.js";

package/{docDeleteCommands-67REUSRY.js → docDeleteCommands-GG6BJ4PS.js}

@@ -21,7 +21,7 @@ import "./chunk-KQHGZWSV.js";
 import "./chunk-VF4K2QE6.js";
 import "./chunk-Q554LLSI.js";
 import "./chunk-KHCLMKZZ.js";
-import "./chunk-6VFARHZW.js";
+import "./chunk-LC43IGO4.js";
 import "./chunk-ZCYXJSTU.js";
 import "./chunk-Q5FJJ6XI.js";
 import "./chunk-ZNFJWEN4.js";

package/{docReadCommands-HOSVSBDJ.js → docReadCommands-QHMQVSLP.js}

@@ -16,7 +16,7 @@ import "./chunk-SV5IJK6K.js";
 import "./chunk-VF4K2QE6.js";
 import "./chunk-Q554LLSI.js";
 import "./chunk-KHCLMKZZ.js";
-import "./chunk-6VFARHZW.js";
+import "./chunk-LC43IGO4.js";
 import "./chunk-ZCYXJSTU.js";
 import "./chunk-Q5FJJ6XI.js";
 import "./chunk-ZNFJWEN4.js";

package/{docUpdateCommands-EMGCSMXY.js → docUpdateCommands-QPL6IVUK.js}

@@ -30,7 +30,7 @@ import {
   resolvePageSkillMetadata
 } from "./chunk-Q554LLSI.js";
 import "./chunk-KHCLMKZZ.js";
-import "./chunk-6VFARHZW.js";
+import "./chunk-LC43IGO4.js";
 import "./chunk-ZCYXJSTU.js";
 import "./chunk-Q5FJJ6XI.js";
 import "./chunk-ZNFJWEN4.js";

package/index.js

@@ -127,7 +127,7 @@ function createDaemonShortcutCommand(path, description, command2) {
 // packages/cli/agentInternalCommandEntries.ts
 function getAgentInternalCommandEntries() {
   const createAgentRunCommand = (path, description) => createContextCommand(path, description, async (args2, ctx) => {
-    const { runAgentRunCommand } = await import("./agentRunCommand-P7VHL4ZR.js");
+    const { runAgentRunCommand } = await import("./agentRunCommand-7VTYZY3Q.js");
     return runAgentRunCommand(args2, {
       env: ctx.env,
       scriptDir: ctx.scriptDir,
@@ -139,11 +139,11 @@ function getAgentInternalCommandEntries() {
     createAgentRunCommand(["run"], "Run a no-login local agent in this workspace"),
     createAgentRunCommand(["chat"], "Chat with an agent"),
     createEnvCommand(["agent", "list"], "List owned agents", async (args2, deps) => {
-      const { runAgentListCommand } = await import("./agentListCommands-GUDMBDHZ.js");
+      const { runAgentListCommand } = await import("./agentListCommands-3GWH4E4G.js");
       return runAgentListCommand(args2, deps);
     }),
     createEnvCommand(["agent", "create"], "Create a new agent", async (args2, deps) => {
-      const { runAgentCreateCommand } = await import("./agentRecordCommands-RSS44XHC.js");
+      const { runAgentCreateCommand } = await import("./agentRecordCommands-JY4IWSSQ.js");
       return runAgentCreateCommand(args2, deps);
     }),
     createEnvCommand(["agent", "models"], "List models available on an OpenAI-compatible provider", async (args2, deps) => {
@@ -159,7 +159,7 @@ function getAgentInternalCommandEntries() {
       return runAgentPullCommand(args2, deps);
     }),
     createEnvCommand(["agent", "read"], "Read a single agent", async (args2, deps) => {
-      const { runAgentReadCommand } = await import("./agentRecordCommands-RSS44XHC.js");
+      const { runAgentReadCommand } = await import("./agentRecordCommands-JY4IWSSQ.js");
       return runAgentReadCommand(args2, deps);
     }),
     createAgentRunCommand(["agent", "run"], "Run an agent"),
@@ -188,31 +188,31 @@ function getAgentInternalCommandEntries() {
       return runSetupOfflineMarxistsAgentCommand(args2, deps);
     }),
     createEnvCommand(["agent", "update"], "Update agent fields", async (args2, deps) => {
-      const { runAgentUpdateCommand } = await import("./agentRecordCommands-RSS44XHC.js");
+      const { runAgentUpdateCommand } = await import("./agentRecordCommands-JY4IWSSQ.js");
       return runAgentUpdateCommand(args2, deps);
     }),
     createEnvCommand(["agent", "email", "provision"], "Provision a controlled inbox for an agent", async (args2, deps) => {
-      const { runAgentEmailProvisionCommand } = await import("./agentEmailCommands-O2KH4G7U.js");
+      const { runAgentEmailProvisionCommand } = await import("./agentEmailCommands-AQZVMNLR.js");
       return runAgentEmailProvisionCommand(args2, deps);
     }),
     createEnvCommand(["agent", "email", "bind"], "Bind an existing email address to an agent", async (args2, deps) => {
-      const { runAgentEmailBindCommand } = await import("./agentEmailCommands-O2KH4G7U.js");
+      const { runAgentEmailBindCommand } = await import("./agentEmailCommands-AQZVMNLR.js");
       return runAgentEmailBindCommand(args2, deps);
     }),
     createEnvCommand(["agent", "email", "transfer"], "Transfer an email identity from one agent to another (cross-account)", async (args2, deps) => {
-      const { runAgentEmailTransferCommand } = await import("./agentEmailCommands-O2KH4G7U.js");
+      const { runAgentEmailTransferCommand } = await import("./agentEmailCommands-AQZVMNLR.js");
       return runAgentEmailTransferCommand(args2, deps);
     }),
     createEnvCommand(
       ["agent", "email", "create-and-provision"],
       "Create an agent and provision its controlled inbox",
       async (args2, deps) => {
-        const { runAgentEmailCreateAndProvisionCommand } = await import("./agentEmailCommands-O2KH4G7U.js");
+        const { runAgentEmailCreateAndProvisionCommand } = await import("./agentEmailCommands-AQZVMNLR.js");
         return runAgentEmailCreateAndProvisionCommand(args2, deps);
       }
     ),
     createEnvCommand(["agent", "delete"], "Hard-delete an agent's private and public records", async (args2, deps) => {
-      const { runAgentDeleteCommand } = await import("./agentDeleteCommand-2YAHAZFJ.js");
+      const { runAgentDeleteCommand } = await import("./agentDeleteCommand-YB3S2LPY.js");
       return runAgentDeleteCommand(args2, deps);
     }),
     createEnvCommand(["agent", "grant"], "Grant another user access to this agent's owner credentials", async (args2, deps) => {
@@ -228,15 +228,15 @@ function getAgentInternalCommandEntries() {
       return runAgentRevokeGrantCommand(args2, deps);
     }),
     createEnvCommand(["agent", "bind-current"], "Bind an agent to this machine", async (args2, deps) => {
-      const { runAgentBindCurrentCommand } = await import("./agentMachineCommands-5I5CCUBM.js");
+      const { runAgentBindCurrentCommand } = await import("./agentMachineCommands-R5AVYYN3.js");
       return runAgentBindCurrentCommand(args2, deps);
     }),
     createEnvCommand(["agent", "smoke-current"], "Smoke test a bound agent through this machine", async (args2, deps) => {
-      const { runAgentSmokeCurrentCommand } = await import("./agentMachineCommands-5I5CCUBM.js");
+      const { runAgentSmokeCurrentCommand } = await import("./agentMachineCommands-R5AVYYN3.js");
       return runAgentSmokeCurrentCommand(args2, deps);
     }),
     createEnvCommand(["agent", "runtime-doctor"], "Diagnose current machine runtime compatibility", async (args2, deps) => {
-      const { runAgentRuntimeDoctorCommand } = await import("./agentMachineCommands-5I5CCUBM.js");
+      const { runAgentRuntimeDoctorCommand } = await import("./agentMachineCommands-R5AVYYN3.js");
       return runAgentRuntimeDoctorCommand(args2, deps);
     }),
     createAgentRunCommand(["agent", "chat"], "Chat with an agent")
@@ -247,23 +247,23 @@ function getAgentInternalCommandEntries() {
 function getAppInternalCommandEntries() {
   return [
     createEnvCommand(["app", "list"], "List your apps", async (args2, deps) => {
-      const { runAppListCommand } = await import("./appListCommands-EKUBDRUO.js");
+      const { runAppListCommand } = await import("./appListCommands-PKRLSWRE.js");
       return runAppListCommand(args2, deps);
     }),
     createEnvCommand(["app", "get"], "Get app details", async (args2, deps) => {
-      const { runAppGetCommand } = await import("./appGetCommands-SFAPP5PB.js");
+      const { runAppGetCommand } = await import("./appGetCommands-EXWT3QAE.js");
       return runAppGetCommand(args2, deps);
     }),
     createEnvCommand(["app", "deploy"], "Deploy an app", async (args2, deps) => {
-      const { runAppDeployCommand } = await import("./appDeployCommands-WCQOUSOB.js");
+      const { runAppDeployCommand } = await import("./appDeployCommands-YCVY2UYO.js");
       return runAppDeployCommand(args2, deps);
     }),
     createEnvCommand(["app", "deploy", "status"], "Check app deploy status", async (args2, deps) => {
-      const { runAppDeployStatusCommand } = await import("./appDeployStatusCommands-6QKB7DYN.js");
+      const { runAppDeployStatusCommand } = await import("./appDeployStatusCommands-JMCEIKTI.js");
       return runAppDeployStatusCommand(args2, deps);
     }),
     createEnvCommand(["app", "delete"], "Delete an app", async (args2, deps) => {
-      const { runAppDeleteCommand } = await import("./appDeleteCommands-32MHLR4L.js");
+      const { runAppDeleteCommand } = await import("./appDeleteCommands-JPWTSFID.js");
       return runAppDeleteCommand(args2, deps);
     })
   ];
@@ -332,27 +332,27 @@ function getChromeInternalCommandEntries() {
 function getDialogInternalCommandEntries() {
   return [
     createEnvCommand(["dialog", "search"], "Search dialog messages across dialogs", async (args2, deps) => {
-      const { runDialogSearchCommand } = await import("./dialogCommands-5J56DFWN.js");
+      const { runDialogSearchCommand } = await import("./dialogCommands-YVMHDEOX.js");
       return runDialogSearchCommand(args2, deps);
     }),
     createEnvCommand(["dialog", "list"], "List dialogs (default --limit 50; --all/--limit 0 full; --jsonl streams)", async (args2, deps) => {
-      const { runDialogListCommand } = await import("./dialogCommands-5J56DFWN.js");
+      const { runDialogListCommand } = await import("./dialogCommands-YVMHDEOX.js");
       return runDialogListCommand(args2, deps);
     }),
     createEnvCommand(["dialog", "delete"], "Delete one or more dialogs", async (args2, deps) => {
-      const { runDialogDeleteCommand } = await import("./dialogCommands-5J56DFWN.js");
+      const { runDialogDeleteCommand } = await import("./dialogCommands-YVMHDEOX.js");
       return runDialogDeleteCommand(args2, deps);
     }),
     createEnvCommand(["dialog", "query"], "Query dialogs by subject refs (default --limit 50; --all full; --jsonl streams)", async (args2, deps) => {
-      const { runDialogQueryCommand } = await import("./dialogCommands-5J56DFWN.js");
+      const { runDialogQueryCommand } = await import("./dialogCommands-YVMHDEOX.js");
       return runDialogQueryCommand(args2, deps);
     }),
     createEnvCommand(["dialog", "read"], "Read a dialog", async (args2, deps) => {
-      const { runDialogReadCommand } = await import("./dialogCommands-5J56DFWN.js");
+      const { runDialogReadCommand } = await import("./dialogCommands-YVMHDEOX.js");
       return runDialogReadCommand(args2, deps);
     }),
     createEnvCommand(["dialog", "status"], "Read compact dialog status", async (args2, deps) => {
-      const { runDialogStatusCommand } = await import("./dialogCommands-5J56DFWN.js");
+      const { runDialogStatusCommand } = await import("./dialogCommands-YVMHDEOX.js");
       return runDialogStatusCommand(args2, deps);
     })
   ];
@@ -362,39 +362,39 @@ function getDialogInternalCommandEntries() {
 function getDocInternalCommandEntries() {
   return [
     createEnvCommand(["doc", "create"], "Create a normal doc", async (args2, deps) => {
-      const { runDocCreateCommand } = await import("./docCreateCommands-KYI2DC2U.js");
+      const { runDocCreateCommand } = await import("./docCreateCommands-7UTWDYJU.js");
       return runDocCreateCommand(args2, deps);
     }),
     createEnvCommand(["doc", "read"], "Read a normal doc", async (args2, deps) => {
-      const { runDocReadCommand } = await import("./docReadCommands-HOSVSBDJ.js");
+      const { runDocReadCommand } = await import("./docReadCommands-QHMQVSLP.js");
       return runDocReadCommand(args2, deps);
     }),
     createEnvCommand(["doc", "update"], "Update a normal doc", async (args2, deps) => {
-      const { runDocUpdateCommand } = await import("./docUpdateCommands-EMGCSMXY.js");
+      const { runDocUpdateCommand } = await import("./docUpdateCommands-QPL6IVUK.js");
       return runDocUpdateCommand(args2, deps);
     }),
     createEnvCommand(["doc", "delete"], "Delete a normal doc", async (args2, deps) => {
-      const { runDocDeleteCommand } = await import("./docDeleteCommands-67REUSRY.js");
+      const { runDocDeleteCommand } = await import("./docDeleteCommands-GG6BJ4PS.js");
       return runDocDeleteCommand(args2, deps);
     }),
     createEnvCommand(["skill-doc", "create"], "Create a skill-backed doc", async (args2, deps) => {
-      const { runSkillDocCreateCommand } = await import("./docCreateCommands-KYI2DC2U.js");
+      const { runSkillDocCreateCommand } = await import("./docCreateCommands-7UTWDYJU.js");
       return runSkillDocCreateCommand(args2, deps);
     }),
     createEnvCommand(["skill", "create-doc"], "Create a skill-backed doc", async (args2, deps) => {
-      const { runSkillDocCreateCommand } = await import("./docCreateCommands-KYI2DC2U.js");
+      const { runSkillDocCreateCommand } = await import("./docCreateCommands-7UTWDYJU.js");
       return runSkillDocCreateCommand(args2, deps);
     }),
     createEnvCommand(["skill-doc", "read"], "Read a skill doc", async (args2, deps) => {
-      const { runSkillDocReadCommand } = await import("./docReadCommands-HOSVSBDJ.js");
+      const { runSkillDocReadCommand } = await import("./docReadCommands-QHMQVSLP.js");
       return runSkillDocReadCommand(args2, deps);
     }),
     createEnvCommand(["skill-doc", "update"], "Update a skill doc", async (args2, deps) => {
-      const { runSkillDocUpdateCommand } = await import("./docUpdateCommands-EMGCSMXY.js");
+      const { runSkillDocUpdateCommand } = await import("./docUpdateCommands-QPL6IVUK.js");
       return runSkillDocUpdateCommand(args2, deps);
     }),
     createEnvCommand(["skill-doc", "delete"], "Delete a skill doc", async (args2, deps) => {
-      const { runSkillDocDeleteCommand } = await import("./docDeleteCommands-67REUSRY.js");
+      const { runSkillDocDeleteCommand } = await import("./docDeleteCommands-GG6BJ4PS.js");
       return runSkillDocDeleteCommand(args2, deps);
     })
   ];
@@ -422,19 +422,19 @@ function getMemoryInternalCommandEntries() {
 function getSpaceInternalCommandEntries() {
   return [
     createEnvCommand(["space", "create"], "Create a space", async (args2, deps) => {
-      const { runSpaceCreateCommand } = await import("./spaceCommands-NKJVJCQQ.js");
+      const { runSpaceCreateCommand } = await import("./spaceCommands-BMXKR7H6.js");
       return runSpaceCreateCommand(args2, deps);
     }),
     createEnvCommand(["space", "invite"], "Invite an existing user to a space", async (args2, deps) => {
-      const { runSpaceInviteCommand } = await import("./spaceCommands-NKJVJCQQ.js");
+      const { runSpaceInviteCommand } = await import("./spaceCommands-BMXKR7H6.js");
       return runSpaceInviteCommand(args2, deps);
     }),
     createEnvCommand(["space", "accept-invite"], "Accept a space invite", async (args2, deps) => {
-      const { runSpaceAcceptInviteCommand } = await import("./spaceCommands-NKJVJCQQ.js");
+      const { runSpaceAcceptInviteCommand } = await import("./spaceCommands-BMXKR7H6.js");
       return runSpaceAcceptInviteCommand(args2, deps);
     }),
     createEnvCommand(["space", "upload"], "Upload a file to a space", async (args2, deps) => {
-      const { runSpaceUploadCommand } = await import("./spaceCommands-NKJVJCQQ.js");
+      const { runSpaceUploadCommand } = await import("./spaceCommands-BMXKR7H6.js");
       return runSpaceUploadCommand(args2, deps);
     })
   ];
@@ -488,15 +488,15 @@ function getSystemInternalCommandEntries(renderHelpText2) {
       return runWhoamiCommand({ args: args2, env: ctx.env });
     }),
     createEntrypointEnvCommand(["connect"], "Send machine heartbeats or hold a connector websocket", async (args2, deps) => {
-      const { runMachineConnectCommand } = await import("./machineCommands-G5J754EH.js");
+      const { runMachineConnectCommand } = await import("./machineCommands-7DEUPY32.js");
       return runMachineConnectCommand(args2, deps);
     }),
     createDaemonShortcutCommand(["daemon"], "Run the connector daemon shortcut", async (args2, deps) => {
-      const { runMachineConnectCommand } = await import("./machineCommands-G5J754EH.js");
+      const { runMachineConnectCommand } = await import("./machineCommands-7DEUPY32.js");
       return runMachineConnectCommand(args2, deps);
     }),
     createEnvCommand(["machine", "status"], "List machines registered to the current profile", async (args2, deps) => {
-      const { runMachineStatusCommand } = await import("./machineCommands-G5J754EH.js");
+      const { runMachineStatusCommand } = await import("./machineCommands-7DEUPY32.js");
       return runMachineStatusCommand(args2, deps);
     }),
     createEnvCommand(["doctor", "runtime"], "Diagnose local-first agent runtime selection", async (args2, deps) => {
@@ -892,7 +892,7 @@ async function runScript(script, forwardedArgs, env) {
   return proc.exited;
 }
 async function launchTuiWorkspace(args2) {
-  const { startTuiWorkspace } = await import("./readlineWorkspace-TGCYJFEB.js");
+  const { startTuiWorkspace } = await import("./readlineWorkspace-JP2AOALW.js");
   const { createTuiSummaryLlmCaller } = await import("./tuiSummaryLlmCaller-WFRWERGK.js");
   return startTuiWorkspace({
     ...args2,

package/{machineCommands-G5J754EH.js → machineCommands-7DEUPY32.js}

@@ -2,13 +2,13 @@ import {
   buildMachinePermissionPromptBlock,
   handleConnectorRunMessage,
   resolveMachineRunPermissionPolicy
-} from "./chunk-B6P4QKEN.js";
+} from "./chunk-VLI5LVL5.js";
 import {
   isConnectorWebSocketAuthError,
   isConnectorWebSocketRetryableError,
   resolveConnectorWebSocketTarget
 } from "./chunk-ALXHV7NK.js";
-import "./chunk-ITBLTYQB.js";
+import "./chunk-RJ4QOQDA.js";
 import "./chunk-53HEEOTT.js";
 import "./chunk-EADNWBAZ.js";
 import "./chunk-SH43IESU.js";
@@ -69,7 +69,7 @@ import "./chunk-KHCLMKZZ.js";
 import {
   PATH_FIELD_ALIASES,
   createLocalWorkspaceToolExecutors
-} from "./chunk-6VFARHZW.js";
+} from "./chunk-LC43IGO4.js";
 import "./chunk-ZCYXJSTU.js";
 import "./chunk-Q5FJJ6XI.js";
 import "./chunk-ZNFJWEN4.js";

package/{machineWsRunDispatch-VXYBYYKM.js → machineWsRunDispatch-D2NHL3P7.js}

@@ -11,8 +11,8 @@ import {
   runtimeWorkspacePermissionPolicy,
   scopePermissionPolicyToRuntimeWorkspace,
   summarizeAgentConfigForLogs
-} from "./chunk-B6P4QKEN.js";
-import "./chunk-ITBLTYQB.js";
+} from "./chunk-VLI5LVL5.js";
+import "./chunk-RJ4QOQDA.js";
 import "./chunk-53HEEOTT.js";
 import "./chunk-EADNWBAZ.js";
 import "./chunk-SH43IESU.js";
@@ -65,7 +65,7 @@ import "./chunk-JRQFUXY7.js";
 import "./chunk-DHDMC6FO.js";
 import "./chunk-Q554LLSI.js";
 import "./chunk-KHCLMKZZ.js";
-import "./chunk-6VFARHZW.js";
+import "./chunk-LC43IGO4.js";
 import "./chunk-ZCYXJSTU.js";
 import "./chunk-Q5FJJ6XI.js";
 import "./chunk-ZNFJWEN4.js";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "nolo-cli",
-  "version": "0.104.0-alpha.1",
+  "version": "0.105.0-alpha.1",
   "type": "module",
   "description": "Agent-first terminal workspace for Nolo",
   "bin": {

package/{readlineWorkspace-TGCYJFEB.js → readlineWorkspace-JP2AOALW.js}

@@ -72,7 +72,7 @@ import {
   wrapTextToLines,
   wrapTranscriptLine,
   wrapTranscriptLineWithLayout
-} from "./chunk-4J4QNKTW.js";
+} from "./chunk-O7EBSHZR.js";
 import "./chunk-S7Z2HMCN.js";
 import "./chunk-V7E4PXQD.js";
 import {
@@ -97,7 +97,7 @@ import {
   readTimestamp,
   setCliLocale,
   t
-} from "./chunk-ITBLTYQB.js";
+} from "./chunk-RJ4QOQDA.js";
 import "./chunk-53HEEOTT.js";
 import "./chunk-EADNWBAZ.js";
 import "./chunk-SH43IESU.js";
@@ -207,7 +207,7 @@ import {
   formatToolOverflowMarker,
   getProcessRegistry,
   readCommandActionGatePayload
-} from "./chunk-6VFARHZW.js";
+} from "./chunk-LC43IGO4.js";
 import "./chunk-ZCYXJSTU.js";
 import "./chunk-Q5FJJ6XI.js";
 import "./chunk-ZNFJWEN4.js";

package/{spaceCommands-NKJVJCQQ.js → spaceCommands-BMXKR7H6.js}

@@ -11,7 +11,7 @@ import {
 import "./chunk-Z77CRGTW.js";
 import "./chunk-SV5IJK6K.js";
 import "./chunk-KQHGZWSV.js";
-import "./chunk-6VFARHZW.js";
+import "./chunk-LC43IGO4.js";
 import "./chunk-ZCYXJSTU.js";
 import "./chunk-Q5FJJ6XI.js";
 import "./chunk-ZNFJWEN4.js";