nolo-cli 0.107.0-alpha.4 → 0.107.0

package/{chunk-LS2ZANRJ.js → chunk-LOCNXNOU.js}

@@ -4,7 +4,7 @@ import {
 
 // packages/cli/agentCommandSupport.ts
 async function getDefaultCliDb() {
-  const { getDefaultCliLocalRuntimeDb } = await import("./localRuntimeDb-SYQGUF4U.js");
+  const { getDefaultCliLocalRuntimeDb } = await import("./localRuntimeDb-VKWVOPPI.js");
   return getDefaultCliLocalRuntimeDb();
 }
 function createNullCliDb() {

package/{chunk-DHDMC6FO.js → chunk-LUBFABMJ.js}

@@ -1,13 +1,16 @@
-import {
-  buildSkillDocMarkdown
-} from "./chunk-Q554LLSI.js";
 import {
   SYSTEM_AGENT_CAPABILITIES,
   SYSTEM_AGENT_CAPABILITY_IDS
-} from "./chunk-QDSINZM3.js";
+} from "./chunk-IXH3HKY2.js";
+import {
+  buildSkillDocMarkdown
+} from "./chunk-DMXLXZKL.js";
+import {
+  CHROME_CONNECTOR_ACCEPTED_TOOL_NAMES
+} from "./chunk-LWLNLZC5.js";
 import {
   createKey
-} from "./chunk-VMFTFOWF.js";
+} from "./chunk-OKGVNZTL.js";
 
 // packages/ai/tools/codeWorkDiscipline.ts
 var CODE_WORK_DISCIPLINE_BODY = `## \u6548\u7387\u4F18\u5148\uFF08\u7701 token\uFF09
@@ -30,7 +33,7 @@ var CODE_WORK_DISCIPLINE_BODY = `## \u6548\u7387\u4F18\u5148\uFF08\u7701 token\u
 - \u6309\u89D2\u8272\u52A0\u8F7D\u5BF9\u5E94 skill\uFF1Areviewer \u5148 \`loadSkill("coding-review")\` \u62FF\u901A\u7528\u6D41\u7A0B\uFF0C\u518D\u6309\u89D2\u8272 \`loadSkill("coding-review-<role>")\` \u62FF\u68C0\u67E5\u9879\u3002\u89D2\u8272\u6E05\u5355\uFF1Acode-quality\uFF08**\u5FC5\u8DD1**\uFF09/ architecture\uFF08**\u5355\u72EC\u6D3E\u53D1**\uFF0C\u4E2D\u7EA7\u4EE5\u4E0A\u95EE\u9898\uFF09/ security\uFF08\u6309\u9700 + \u5B89\u5168\u654F\u611F\u89E6\u53D1\u5FC5\u8DD1\uFF09/ frontend-ux\uFF08\u6D89\u53CA UI \u65F6\uFF09/ backend-data\uFF08\u6D89\u53CA server \u65F6\uFF09\u3002\u89D2\u8272\u5207\u5272\u7684\u76EE\u7684\u662F\u6CE8\u610F\u529B\u9694\u79BB\u2014\u2014\u6BCF\u4E2A\u89D2\u8272\u53EA\u76EF\u81EA\u5DF1\u7684\u68C0\u67E5\u9762\uFF0C\u6309\u9700\u542F\u7528\uFF0C\u907F\u514D\u4E00\u4E2A reviewer \u80CC\u6240\u6709\u89D2\u8272\u5BFC\u81F4\u6CE8\u610F\u529B\u7A00\u91CA\u3002
 - Verdict \u6807\u51C6\uFF1AAPPROVE\uFF08\u65E0 CRITICAL \u6216 HIGH\uFF09\u2192 \u53EF commit\uFF1BWARNING\uFF08\u4EC5 HIGH\uFF09\u2192 \u62A5\u544A owner \u51B3\u5B9A\uFF1BBLOCK\uFF08\u6709 CRITICAL\uFF09\u2192 \u5FC5\u987B\u5148\u4FEE\u3002
 - review \u662F\u591A\u8F6E\u6536\u655B\u7684\uFF1A\u6D3E reviewer \u5BA1\u5DE5\u4F5C\u533A diff \u2192 \u51FA finding \u5C31\u4FEE \u2192 \u590D\u5BA1\uFF0C\u76F4\u5230 APPROVE \u624D\u63D0\u4EA4\u3002\u6BCF\u8F6E review \u65E0\u4E0A\u4E0B\u6587\u2014\u2014reviewer \u53EA\u770B\u5F53\u524D\u5DE5\u4F5C\u533A diff\uFF0C\u4E0D\u5E26\u4E0A\u4E00\u8F6E finding \u8BB0\u5FC6\u3002
-- \u82E5\u5904\u4E8E\u5355 Agent \u72EC\u5360\u73AF\u5883\u3001\u5176\u4ED6 agent \u4E0D\u53EF\u8FBE\u3001\u6216\u7528\u6237\u660E\u786E\u8981\u6C42\u76F4\u63A5\u63D0\u4EA4\uFF0C\u5141\u8BB8\u5E26\u539F\u56E0\u8DF3\u8FC7\uFF08commit message \u6CE8\u660E [no-review: \u539F\u56E0]\uFF09\uFF0C\u4F46\u9ED8\u8BA4\u5FC5\u987B\u6D3E review\u3002`;
+- \u82E5\u5904\u4E8E\u5355 Agent \u72EC\u5360\u73AF\u5883\u3001\u5176\u4ED6 agent \u4E0D\u53EF\u8FBE\u3001\u6216\u7528\u6237\u660E\u786E\u8981\u6C42\u76F4\u63A5\u63D0\u4EA4\uFF1A\u4E0D\u8981\u8865\u5199\u6216\u4F2A\u9020 review \u8BC1\u636E\uFF0C\u4E5F**\u4E0D\u8981\u7528 [no-review: \u539F\u56E0] \u8FD9\u7C7B\u5199\u6CD5**\u2014\u2014\u5B83\u4EFB\u4F55\u5224\u636E\u90FD\u89E3\u6790\u4E0D\u4E86\uFF0C\u5199\u4E86\u7167\u6837\u88AB\u62E6\u3002\u81EA\u6709\u95F8\u95E8\u8BA4\u7684\u5F62\u5F0F\u662F Reviewed-by: <\u975E\u7A7A\u7F72\u540D> \u52A0 Review: \u5E26\u7ED3\u8BBA\uFF08APPROVE / Approved / WARNING\uFF0C\u5360\u4F4D\u7B26\u5982 <pending> \u4E0D\u7B97\uFF09\uFF0Ccommit-msg \u4E0E pre-push / pre-merge \u90FD\u8D70\u8FD9\u4E00\u6761\u6B63\u5219\u3002pre-push / pre-merge **\u53E6**\u8BA4\u4E00\u6761 owner-only \u8C41\u514D\uFF1A\u6B63\u6587\u5199 No-Review: <\u539F\u56E0> \u4E14 commit author email \u547D\u4E2D packages/nolo-ci/core/src/mapping.ts \u7684 NO_REVIEW_OWNER_EMAILS \u767D\u540D\u5355\u2014\u2014agent \u8EAB\u4EFD\uFF08\u5982 app-builder@nolo.local\uFF09\u4E0D\u9002\u7528\u3002\u771F\u88AB\u5361\u4F4F\u5C31\u5982\u5B9E\u4E0A\u62A5\u5361\u70B9\u3001\u7531 owner \u51B3\u5B9A\uFF1Bgit push --no-verify \u4EC5\u9650\u7BA1\u7406\u5458/\u7D27\u6025\u6062\u590D\uFF0C\u670D\u52A1\u7AEF G2 \u4E0D\u53EF\u7ED5\u8FC7\u3002`;
 var buildCodeWorkDiscipline = (heading) => `# ${heading}
 
 ${CODE_WORK_DISCIPLINE_BODY}`;
@@ -50,9 +53,6 @@ var TOOL_PACKS = {
   // queryModelUsage / queryUserGrowthReport：server-only 工具（web/CLI executor
   // 直接返回 serverOnlyResult），不随 CORE 常驻——server 端由 agent 显式
   // tools 配置按需挂载（utilityServerTools 执行器），web 端不再挂死 schema。
-  // setTodoList 已移至「conversation-todo」系统能力包（defaultEnabled:true）
-  // 作为唯一 owner——single source of truth：普通 agent 默认仍有 setTodoList，
-  // 但关闭「对话 Todo」开关即可真正摘掉它（CORE 常驻时该开关形同虚设）。
   CORE: [
     "read",
     "createDoc",
@@ -61,6 +61,8 @@ var TOOL_PACKS = {
     "updateSelf",
     "ask_user",
     "createAgentAutomation",
+    "updateAgentAutomation",
+    "deleteAgentAutomation",
     "notifyUser"
   ],
   // L2 - 联网搜索：与 CAPABILITY_PACKS「web-search」对齐。
@@ -236,7 +238,7 @@ var CAPABILITY_PACKS = [
   {
     id: "video-transcription",
     label: "\u89C6\u9891\u8F6C\u5199",
-    description: "\u8D34\u89C6\u9891\u94FE\u63A5\u5373\u53EF\u8F6C\u5199\u4E3A\u5E26\u6807\u70B9\u6587\u672C\u4E0E SRT\u3002\u652F\u6301 B \u7AD9\u5206 P\uFF08\u9ED8\u8BA4\u5168\u90E8\u5904\u7406\uFF09\u3001YouTube \u7B49\uFF1B\u6296\u97F3\u8BF7\u5728\u684C\u9762\u7AEF\u6D4F\u89C8\u5668\u4F7F\u7528\u3002",
+    description: "\u8D34\u89C6\u9891\u94FE\u63A5\u5373\u53EF\u8F6C\u5199\u4E3A\u5E26\u6807\u70B9\u6587\u672C\u4E0E SRT\u3002\u652F\u6301 B \u7AD9\u5206 P\uFF08\u9ED8\u8BA4\u5168\u90E8\u5904\u7406\uFF09\u3001YouTube \u7B49\uFF1B\u652F\u6301\u6296\u97F3\u5206\u4EAB\u6587\u6848/\u77ED\u94FE\uFF0C\u628A\u5206\u4EAB\u6587\u5B57\u91CC\u7684\u94FE\u63A5\u4F20\u7ED9 url\u3002",
     tools: ["transcribeVideo"],
     defaultEnabled: false,
     icon: "\u{1F3AC}",
@@ -246,7 +248,7 @@ var CAPABILITY_PACKS = [
 - \u7528\u6237\u8D34\u4E0A\u89C6\u9891\u94FE\u63A5\u65F6\uFF0C\u76F4\u63A5\u8C03\u7528 \`transcribeVideo({ url })\`\uFF0C\u4E0D\u8981\u5148\u95EE\u8981\u4E0D\u8981\u8F6C\u5199\u3002
 - B \u7AD9\u5206 P / \u5408\u96C6\uFF1A\u7F3A\u7701\u5904\u7406\u5168\u90E8\uFF1B\u82E5\u7528\u6237\u6307\u5B9A\u300C\u53EA\u8981\u7B2C 3\u30014 \u96C6\u300D\u5219\u4F20 \`p: [3, 4]\`\u3002
 - \u8FD4\u56DE\u91CC\u7684 \`processedParts\` / \`availableParts\` \u5FC5\u987B\u5411\u7528\u6237\u8BF4\u6E05\u695A\uFF0C\u907F\u514D\u9759\u9ED8\u4E22\u5206 P\u3002
-- \u6296\u97F3\u82E5\u62A5\u300C\u8BE5\u5E73\u53F0\u9700\u8981\u767B\u5F55\u6001\uFF0C\u8BF7\u5728\u684C\u9762\u7AEF\u6D4F\u89C8\u5668\u4E2D\u4F7F\u7528\u300D\uFF0C\u63D0\u793A\u7528\u6237\u6539\u8D70\u684C\u9762\u7AEF\u6D4F\u89C8\u80FD\u529B\uFF0C\u4E0D\u8981\u5C1D\u8BD5\u4F20 cookie\u3002
+- \u652F\u6301\u6296\u97F3\u5206\u4EAB\u6587\u6848/\u77ED\u94FE\uFF0C\u628A\u5206\u4EAB\u6587\u5B57\u91CC\u7684\u94FE\u63A5\u4F20\u7ED9 url\u3002
 `
   }
 ];
@@ -281,8 +283,7 @@ function resolveEffectiveEnabledPacks(args) {
 }
 var SYSTEM_BUILTIN_SKILL_PACK_IDS = SYSTEM_AGENT_CAPABILITY_IDS;
 var DEFAULT_MOUNT_SYSTEM_CAPABILITY_IDS = [
-  "agent-orchestration",
-  "conversation-todo"
+  "agent-orchestration"
 ];
 function getDefaultSystemCapabilityTools() {
   const ids = DEFAULT_MOUNT_SYSTEM_CAPABILITY_IDS;
@@ -353,7 +354,7 @@ function isWebSearchTool(name) {
   return WEB_SEARCH_TOOL_NAMES.has(name);
 }
 function isBrowserTool(name) {
-  return name.startsWith("browser_");
+  return name.startsWith("browser_") && !CHROME_CONNECTOR_ACCEPTED_TOOL_NAMES.includes(name);
 }
 function addDefaultLightWebToolsForConfiguredAgents(toolNames, agentConfig) {
   const explicitToolNames = Array.isArray(

package/{chunk-NA35QHCF.js → chunk-LVBFKW65.js}

@@ -1,6 +1,6 @@
 import {
   requireTokenUser
-} from "./chunk-ETI2NYVF.js";
+} from "./chunk-CIP3AAMT.js";
 import {
   resolveServerUrl
 } from "./chunk-A7GB5UGH.js";

package/chunk-LWLNLZC5.js

@@ -0,0 +1,265 @@
+// packages/ai/tools/chromeConnectorTools.ts
+var CHROME_CONNECTOR_TOOL_NAMES = [
+  "browser_list_tabs",
+  "browser_open_tab",
+  "browser_close_tab",
+  "browser_read_page",
+  "browser_click_element",
+  "browser_type",
+  "browser_press",
+  "browser_scroll",
+  "browser_screenshot",
+  "browser_read_console",
+  "browser_read_network"
+];
+var CHROME_CONNECTOR_LEGACY_TOOL_ALIASES = {
+  chrome_list_tabs: "browser_list_tabs",
+  chrome_open_tab: "browser_open_tab",
+  chrome_close_tab: "browser_close_tab",
+  chrome_read_page: "browser_read_page",
+  chrome_click: "browser_click_element",
+  chrome_type: "browser_type",
+  chrome_press: "browser_press",
+  chrome_scroll: "browser_scroll",
+  chrome_screenshot: "browser_screenshot",
+  chrome_read_console: "browser_read_console",
+  chrome_read_network: "browser_read_network"
+};
+var CHROME_CONNECTOR_LEGACY_TOOL_NAMES = Object.keys(
+  CHROME_CONNECTOR_LEGACY_TOOL_ALIASES
+);
+var CHROME_CONNECTOR_ACCEPTED_TOOL_NAMES = [
+  ...CHROME_CONNECTOR_TOOL_NAMES,
+  ...CHROME_CONNECTOR_LEGACY_TOOL_NAMES
+];
+function resolveChromeConnectorToolName(name) {
+  if (CHROME_CONNECTOR_TOOL_NAMES.includes(name)) {
+    return name;
+  }
+  return CHROME_CONNECTOR_LEGACY_TOOL_ALIASES[name];
+}
+function canonicalizeChromeConnectorToolNames(toolNames) {
+  const out = [];
+  for (const name of toolNames ?? []) {
+    const resolved = typeof name === "string" ? resolveChromeConnectorToolName(name) : void 0;
+    if (resolved && !out.includes(resolved)) out.push(resolved);
+  }
+  return out;
+}
+var CONNECTOR_TARGET_PROPERTY = {
+  type: "string",
+  enum: ["chrome", "firefox"],
+  description: `Which browser's connector serves this call: "chrome" or "firefox". Omit for the default endpoint.`
+};
+var CHROME_CONNECTOR_READ_TOOL_NAMES = [
+  "browser_list_tabs",
+  "browser_read_page",
+  "browser_screenshot",
+  "browser_read_console",
+  "browser_read_network"
+];
+var getChromeConnectorToolBehavior = (name) => CHROME_CONNECTOR_READ_TOOL_NAMES.includes(resolveChromeConnectorToolName(name)) ? "data" : "action";
+var getChromeConnectorToolDefaultConsent = (name) => CHROME_CONNECTOR_READ_TOOL_NAMES.includes(resolveChromeConnectorToolName(name)) ? "auto" : "ask";
+function baseSchema(name, description, properties, required = []) {
+  return {
+    name,
+    description,
+    parameters: {
+      type: "object",
+      properties: { ...properties, target: CONNECTOR_TARGET_PROPERTY },
+      required
+    }
+  };
+}
+var tabId = {
+  type: "string",
+  description: "Browser tab id returned by browser_list_tabs or browser_open_tab."
+};
+var elementRef = {
+  type: "string",
+  description: "Revision-scoped ref like 1a2b3c4d-e2, copied verbatim from browser_read_page; preferred over selector when available."
+};
+var selector = {
+  type: "string",
+  description: "CSS selector for the visible page element to operate on; fallback when no elementRef is available."
+};
+var chromeListTabsFunctionSchema = baseSchema(
+  "browser_list_tabs",
+  "List controllable browser tabs from the user's browser profile through the Nolo Browser Connector.",
+  {}
+);
+var chromeOpenTabFunctionSchema = baseSchema(
+  "browser_open_tab",
+  "Open a URL in the user's browser (Chrome or Firefox) through the Nolo Browser Connector.",
+  {
+    url: {
+      type: "string",
+      description: "HTTP or HTTPS URL to open in the browser."
+    },
+    active: {
+      type: "boolean",
+      description: "Whether to focus the new browser tab. Defaults to true."
+    }
+  },
+  ["url"]
+);
+var chromeCloseTabFunctionSchema = baseSchema(
+  "browser_close_tab",
+  "Close a browser tab through the Nolo Browser Connector. Prefer closing the tabs your own run opened with browser_open_tab, and ask the user before closing a tab they are using. Pinned tabs are refused (TAB_PINNED); unknown tab ids fail (TAB_NOT_FOUND).",
+  {
+    tabId
+  },
+  ["tabId"]
+);
+var chromeReadPageFunctionSchema = baseSchema(
+  "browser_read_page",
+  "Read a compact view of a browser tab: visible text (hard cap 6000 chars) plus short-lived elementRefs (hard cap 35) and a pageRevision. Reuse those refs for browser_click_element and browser_type instead of guessing selectors; use region to focus a big page. When the element list exceeds one page, continue by passing the returned nextOffset as offset. Does not read cookies or profile databases.",
+  {
+    tabId,
+    region: {
+      type: "string",
+      description: "Optional CSS selector limiting the read to part of the page."
+    },
+    maxChars: {
+      type: "number",
+      description: "Optional text character budget; the connector clamps it to a hard maximum."
+    },
+    detail: {
+      type: "string",
+      enum: ["compact", "full"],
+      description: "compact (default) returns budgeted text; full raises the budget and adds capped HTML."
+    },
+    offset: {
+      type: "integer",
+      minimum: 0,
+      description: "Optional element offset for paging. When an element list exceeds one page, continue by passing the returned nextOffset as offset."
+    },
+    viewportOnly: {
+      type: "boolean",
+      description: "Optional. When true, only elements intersecting the current viewport are listed."
+    }
+  },
+  ["tabId"]
+);
+var chromeClickFunctionSchema = baseSchema(
+  "browser_click_element",
+  "Click a visible element in a browser tab by elementRef from browser_read_page, or by CSS selector. Controls whose name indicates an irreversible external action (payment, send, delete, publish, permission change) are refused with SENSITIVE_ACTION_REQUIRES_CONFIRMATION: this desktop runtime has no approval channel, so name the control and ask the user to activate it themselves.",
+  {
+    tabId,
+    elementRef,
+    selector
+  },
+  ["tabId"]
+);
+var chromeTypeFunctionSchema = baseSchema(
+  "browser_type",
+  "Type text into a browser page element identified by elementRef from browser_read_page or by CSS selector. Typing into a control whose name indicates an irreversible external action is refused with SENSITIVE_ACTION_REQUIRES_CONFIRMATION, same as clicking it.",
+  {
+    tabId,
+    elementRef,
+    selector,
+    text: {
+      type: "string",
+      description: "Text to type into the selected element."
+    },
+    clearFirst: {
+      type: "boolean",
+      description: "Whether to clear the field before typing. Defaults to true."
+    }
+  },
+  ["tabId", "text"]
+);
+var chromePressFunctionSchema = baseSchema(
+  "browser_press",
+  "Send a keyboard key or shortcut to a browser tab. Enter-like keys are refused with SENSITIVE_ACTION_REQUIRES_CONFIRMATION when the focused control is an irreversible action.",
+  {
+    tabId,
+    key: {
+      type: "string",
+      description: "Key or shortcut, for example Enter, Escape, ArrowDown, or Meta+L."
+    }
+  },
+  ["tabId", "key"]
+);
+var chromeScrollFunctionSchema = baseSchema(
+  "browser_scroll",
+  "Scroll a browser tab by pixel deltas.",
+  {
+    tabId,
+    deltaX: {
+      type: "number",
+      description: "Horizontal scroll delta in pixels."
+    },
+    deltaY: {
+      type: "number",
+      description: "Vertical scroll delta in pixels."
+    }
+  },
+  ["tabId"]
+);
+var chromeScreenshotFunctionSchema = baseSchema(
+  "browser_screenshot",
+  "Capture a screenshot from a browser tab through the Nolo Browser Connector.",
+  {
+    tabId,
+    fullPage: {
+      type: "boolean",
+      description: "Whether to capture the full page. Defaults to false."
+    }
+  },
+  ["tabId"]
+);
+var chromeReadConsoleFunctionSchema = baseSchema(
+  "browser_read_console",
+  "Read recent console messages from a browser tab using debugger-backed connector state.",
+  {
+    tabId,
+    limit: {
+      type: "number",
+      description: "Maximum number of recent console messages to return."
+    }
+  },
+  ["tabId"]
+);
+var chromeReadNetworkFunctionSchema = baseSchema(
+  "browser_read_network",
+  "Read a deduplicated recent network summary from a browser tab using debugger-backed connector state. Static assets are filtered unless includeAssets is set.",
+  {
+    tabId,
+    limit: {
+      type: "number",
+      description: "Maximum number of recent network entries to return."
+    },
+    includeAssets: {
+      type: "boolean",
+      description: "Include images, CSS, fonts and other static assets. Defaults to false."
+    }
+  },
+  ["tabId"]
+);
+var chromeConnectorToolSchemas = [
+  chromeListTabsFunctionSchema,
+  chromeOpenTabFunctionSchema,
+  chromeCloseTabFunctionSchema,
+  chromeReadPageFunctionSchema,
+  chromeClickFunctionSchema,
+  chromeTypeFunctionSchema,
+  chromePressFunctionSchema,
+  chromeScrollFunctionSchema,
+  chromeScreenshotFunctionSchema,
+  chromeReadConsoleFunctionSchema,
+  chromeReadNetworkFunctionSchema
+];
+async function chromeConnectorUnavailableFunc() {
+  throw new Error("Browser connector tools are only executable in the Nolo desktop local runtime.");
+}
+
+export {
+  CHROME_CONNECTOR_LEGACY_TOOL_ALIASES,
+  CHROME_CONNECTOR_ACCEPTED_TOOL_NAMES,
+  canonicalizeChromeConnectorToolNames,
+  getChromeConnectorToolBehavior,
+  getChromeConnectorToolDefaultConsent,
+  chromeConnectorToolSchemas,
+  chromeConnectorUnavailableFunc
+};

package/{chunk-EEGDMATE.js → chunk-M3NMHYRB.js}

@@ -1,87 +1,21 @@
 import {
   listUserRecordsFromServers,
   readLiveDbRecordAfterTombstoneMerge
-} from "./chunk-GEPUP7OO.js";
+} from "./chunk-OR2UWD6X.js";
 import {
   agentRecordHasConfiguredCredential
-} from "./chunk-AEOE4Z6Q.js";
+} from "./chunk-K6L5PNXK.js";
 import {
-  deriveCredentialGroup,
-  toSafeAgentSummary
-} from "./chunk-PQFHGD77.js";
+  deriveCredentialGroup
+} from "./chunk-TBM2RS3U.js";
 import {
   PUBLIC_AGENT_KEY_PREFIX,
-  isOwnedAgentKey,
   ownedAgentKey,
   ownedAgentKeyPrefix,
   parseOwnedAgentId,
   publicAgentKey
 } from "./chunk-M2EJHDJP.js";
 
-// packages/ai/agent/quotaSnapshot.ts
-function findTightestQuotaWindow(quota, now = Date.now()) {
-  if (!quota || !Array.isArray(quota.windows) || quota.windows.length === 0) {
-    return void 0;
-  }
-  let best;
-  let bestScore = -Infinity;
-  for (const w of quota.windows) {
-    let score = 0;
-    if (typeof w.utilization === "number" && w.utilization >= 0) {
-      score = 500 + Math.min(w.utilization, 1) * 500;
-    } else if (typeof w.remaining === "number" && typeof w.limit === "number" && w.limit > 0) {
-      const util = Math.max(0, 1 - w.remaining / w.limit);
-      score = 500 + util * 500;
-    } else if (typeof w.resetAt === "number" && w.resetAt > now) {
-      score = 200;
-    } else if (typeof w.remaining === "number") {
-      score = 100;
-    }
-    if (score > bestScore) {
-      bestScore = score;
-      best = w;
-    }
-  }
-  return best ?? quota.windows[0];
-}
-function formatQuotaSummary(quota, now = Date.now(), options) {
-  const tightest = findTightestQuotaWindow(quota, now);
-  if (!tightest) return void 0;
-  const compact = options?.compact === true;
-  const parts = [];
-  if (typeof tightest.utilization === "number") {
-    const pct = Math.round(tightest.utilization * 100);
-    parts.push(`${pct}%\u5DF2\u7528`);
-  } else if (typeof tightest.remaining === "number") {
-    if (typeof tightest.limit === "number") {
-      parts.push(`${tightest.remaining}/${tightest.limit}${tightest.unit ? ` ${tightest.unit}` : ""}`);
-    } else {
-      parts.push(`\u4F59${tightest.remaining}${tightest.unit ? ` ${tightest.unit}` : ""}`);
-    }
-  }
-  if (compact) return parts.length > 0 ? parts[0] : void 0;
-  if (tightest.scope && tightest.scope !== "user" && tightest.scope !== "project" && tightest.scope !== tightest.unit) {
-    parts.push(tightest.scope);
-  }
-  if (typeof tightest.resetAt === "number" && tightest.resetAt > now) {
-    const diffSec = Math.round((tightest.resetAt - now) / 1e3);
-    if (diffSec < 60) {
-      parts.push(`${diffSec}s\u540E\u91CD\u7F6E`);
-    } else if (diffSec < 3600) {
-      parts.push(`${Math.round(diffSec / 60)}m\u540E\u91CD\u7F6E`);
-    } else if (diffSec < 86400) {
-      const hours = (diffSec / 3600).toFixed(1).replace(/\.0$/, "");
-      parts.push(`${hours}h\u540E\u91CD\u7F6E`);
-    } else {
-      const days = (diffSec / 86400).toFixed(1).replace(/\.0$/, "");
-      parts.push(`${days}d\u540E\u91CD\u7F6E`);
-    }
-  }
-  if (parts.length === 0) return void 0;
-  if (parts.length === 1 && parts[0] === tightest.scope) return void 0;
-  return parts.join(" \xB7 ");
-}
-
 // packages/cli/agentListHelpers.ts
 function parseAgentRecordId(privateKey, explicitId) {
   if (explicitId) return explicitId;
@@ -117,6 +51,9 @@ function normalizeListedAgent(record) {
     ...typeof record?.handle === "string" && record.handle ? { handle: record.handle } : {},
     ...typeof record?.introduction === "string" && record.introduction ? { introduction: record.introduction } : typeof record?.description === "string" && record.description ? { introduction: record.description } : {},
     ...typeof record?.provider === "string" && record.provider ? { provider: record.provider } : {},
+    // 仅供 resolveBillingSource 判定订阅端点（Step Plan / OpenCode Go 等），
+    // safe 投影不输出它。缺了它本地 agent list 会把订阅端点全报成 user_api。
+    ...typeof record?.customProviderUrl === "string" && record.customProviderUrl ? { customProviderUrl: record.customProviderUrl } : {},
     ...typeof record?.inputPrice === "number" && Number.isFinite(record.inputPrice) ? { inputPrice: record.inputPrice } : {},
     ...typeof record?.outputPrice === "number" && Number.isFinite(record.outputPrice) ? { outputPrice: record.outputPrice } : {},
     updatedAt: typeof record?.updatedAt === "string" || typeof record?.updatedAt === "number" ? record.updatedAt : typeof record?.createdAt === "string" || typeof record?.createdAt === "number" ? record.createdAt : typeof record?.created === "string" || typeof record?.created === "number" ? record.created : null,
@@ -135,13 +72,6 @@ function normalizeListedAgent(record) {
     ...record?.quota && typeof record.quota === "object" && Array.isArray(record.quota.windows) ? { quota: record.quota } : {}
   };
 }
-function toSafeListedAgentSummary(agent, options) {
-  const summary = toSafeAgentSummary(agent, options);
-  if (agent.publicRecordExists === false) {
-    delete summary.publicKey;
-  }
-  return summary;
-}
 function sortListedAgents(agents) {
   agents.sort((a, b) => {
     const ta = a.updatedAt == null ? 0 : new Date(a.updatedAt).getTime();
@@ -162,6 +92,7 @@ function parseAgentListArgs(args) {
     publicOnly: args.includes("--public-only"),
     idsOnly: args.includes("--ids-only"),
     scope: readArgValue(args, "--scope"),
+    query: readArgValue(args, "--query"),
     showUnavailable: args.includes("--show-unavailable"),
     // --safe 默认输出精简投影（与 server listAgents 一致，防大列表被截断）；
     // --verbose 拿回完整字段集排障。
@@ -175,7 +106,7 @@ async function listLocalCachedAgents(args) {
   for (const prefix of [ownedPrefix, PUBLIC_AGENT_KEY_PREFIX]) {
     for await (const [key, value] of args.db.iterator({ gte: prefix, lte: `${prefix}\uFFFF` })) {
       if (typeof key !== "string" || !value || typeof value !== "object") continue;
-      if (isOwnedAgentKey(key, args.userId)) {
+      if (key.startsWith(ownedPrefix)) {
         privateRecords.set(key, { ...value, dbKey: key });
         continue;
       }
@@ -302,15 +233,89 @@ async function decorateAgentsWithPublicStatusAcrossServers(args) {
   return args.agents;
 }
 
+// packages/ai/agent/quotaSnapshot.ts
+function findTightestQuotaWindow(quota, now = Date.now()) {
+  if (!quota || !Array.isArray(quota.windows) || quota.windows.length === 0) {
+    return void 0;
+  }
+  let best;
+  let bestScore = -Infinity;
+  for (const w of quota.windows) {
+    let score = 0;
+    if (typeof w.utilization === "number" && w.utilization >= 0) {
+      score = 500 + Math.min(w.utilization, 1) * 500;
+    } else if (typeof w.remaining === "number" && typeof w.limit === "number" && w.limit > 0) {
+      const util = Math.max(0, 1 - w.remaining / w.limit);
+      score = 500 + util * 500;
+    } else if (typeof w.resetAt === "number" && w.resetAt > now) {
+      score = 200;
+    } else if (typeof w.remaining === "number") {
+      score = 100;
+    }
+    if (score > bestScore) {
+      bestScore = score;
+      best = w;
+    }
+  }
+  return best ?? quota.windows[0];
+}
+function formatQuotaSummary(quota, now = Date.now(), options) {
+  const compact = options?.compact === true;
+  const planText = formatPlanLabel(quota?.plan);
+  const planName = typeof quota?.plan?.name === "string" ? quota.plan.name.trim() : "";
+  const tightest = findTightestQuotaWindow(quota, now);
+  if (!tightest) return compact ? planName || void 0 : planText;
+  const parts = [];
+  if (typeof tightest.utilization === "number") {
+    const pct = Math.round(tightest.utilization * 100);
+    parts.push(`${pct}%\u5DF2\u7528`);
+  } else if (typeof tightest.remaining === "number") {
+    if (typeof tightest.limit === "number") {
+      parts.push(`${tightest.remaining}/${tightest.limit}${tightest.unit ? ` ${tightest.unit}` : ""}`);
+    } else {
+      parts.push(`\u4F59${tightest.remaining}${tightest.unit ? ` ${tightest.unit}` : ""}`);
+    }
+  }
+  if (compact) {
+    const head = parts.length > 0 ? parts[0] : void 0;
+    return [planName || void 0, head].filter(Boolean).join(" \xB7 ") || void 0;
+  }
+  if (tightest.scope && tightest.scope !== "user" && tightest.scope !== "project" && tightest.scope !== tightest.unit) {
+    parts.push(tightest.scope);
+  }
+  if (typeof tightest.resetAt === "number" && tightest.resetAt > now) {
+    const diffSec = Math.round((tightest.resetAt - now) / 1e3);
+    if (diffSec < 60) {
+      parts.push(`${diffSec}s\u540E\u91CD\u7F6E`);
+    } else if (diffSec < 3600) {
+      parts.push(`${Math.round(diffSec / 60)}m\u540E\u91CD\u7F6E`);
+    } else if (diffSec < 86400) {
+      const hours = (diffSec / 3600).toFixed(1).replace(/\.0$/, "");
+      parts.push(`${hours}h\u540E\u91CD\u7F6E`);
+    } else {
+      const days = (diffSec / 86400).toFixed(1).replace(/\.0$/, "");
+      parts.push(`${days}d\u540E\u91CD\u7F6E`);
+    }
+  }
+  const onlyScope = parts.length === 0 || parts.length === 1 && parts[0] === tightest.scope;
+  if (onlyScope) return planText;
+  return [planText, ...parts].filter(Boolean).join(" \xB7 ");
+}
+function formatPlanLabel(plan) {
+  const name = typeof plan?.name === "string" ? plan.name.trim() : "";
+  if (!name) return void 0;
+  const credits = typeof plan?.monthlyCreditsUsd === "number" && Number.isFinite(plan.monthlyCreditsUsd) && plan.monthlyCreditsUsd > 0 ? `\u6708\u5EA6\u989D\u5EA6 $${plan.monthlyCreditsUsd}` : void 0;
+  return [`${name} \u5957\u9910`, credits].filter(Boolean).join(" \xB7 ");
+}
+
 export {
-  formatQuotaSummary,
   normalizeListedAgent,
-  toSafeListedAgentSummary,
   parseAgentListArgs,
   listLocalCachedAgents,
   listRemotePublicAgents,
   listRemoteAgents,
   listRemoteAgentsAcrossServers,
   listFavoriteAgentIdsAcrossServers,
-  decorateAgentsWithPublicStatusAcrossServers
+  decorateAgentsWithPublicStatusAcrossServers,
+  formatQuotaSummary
 };