nolo-cli 0.155.0-alpha.1 → 0.155.0

package/{chunk-2KKTIPQ3.js → chunk-HW7EBEC5.js}

@@ -1,32 +1,29 @@
-import {
-  buildResponseGuidelines
-} from "./chunk-W4S6OTSC.js";
 import {
   getLocalProviderSecret
 } from "./chunk-HS7MLR74.js";
 import {
   performServerProxyFetchWithRetry
-} from "./chunk-4ZSZP7PY.js";
-import {
-  shouldUseServerProxy
-} from "./chunk-UKZX3NHN.js";
+} from "./chunk-QZIOZDM6.js";
 import {
   fetchServerSyncedCredential
-} from "./chunk-KO4VPOIN.js";
+} from "./chunk-DT7EWFTY.js";
 import {
   buildSkillGuidancePromptBlock
-} from "./chunk-4Z245KOA.js";
+} from "./chunk-SH3XD4E2.js";
 import {
+  CREDENTIAL_HYGIENE_RULE,
   DELETE_SAFETY_RED_LINE,
+  DISPATCH_BACKEND_POLICY,
   PARALLEL_DISPATCH_DEFAULT_RULE,
   PLATFORM_RISK_CONTROL_RULE,
   buildConsultationModeBlock,
   buildIdentityBlock,
+  buildResponseGuidelines,
   buildRuntimeGuidanceBlocks,
   compileContextLayers,
   detectDispatchIntentFromMessages,
   resolveToolGuidedSections
-} from "./chunk-TYND6RDQ.js";
+} from "./chunk-QI2WVWXV.js";
 import {
   convertMessagesToResponsesInput,
   getUsageRequestOptions,
@@ -35,32 +32,33 @@ import {
   resolveReasoningReplayOptions,
   shouldStripReasoningContentForOutbound,
   stablePromptCacheKey
-} from "./chunk-6TF64IF2.js";
+} from "./chunk-4L4K6YR7.js";
+import {
+  resolveAgentCallPlan,
+  resolveClientWire
+} from "./chunk-TT644UJD.js";
 import {
   createFileCredentialBroker
 } from "./chunk-UHTDNB5Y.js";
+import {
+  MEMORY_USE_GUIDANCE,
+  buildUserResponseLanguageContext,
+  wrapHistoricalSummaryWithReplayGuard
+} from "./chunk-4VJAC32I.js";
 import {
   canonicalizeToolNames
 } from "./chunk-5EBLANFT.js";
 import {
-  ANTIGRAVITY_CLOUD_CODE_BASE_URL,
-  isAntigravityCloudCodeBaseUrl,
-  isAntigravityOAuthAgent
-} from "./chunk-JGRPBIZZ.js";
+  API_ENDPOINTS
+} from "./chunk-LCBAMY2M.js";
 import {
   buildProviderAuthHeaders
-} from "./chunk-SUKSWFLP.js";
-import {
-  isOpenAiResponsesModel,
-  resolvePlatformChatCompletionsEndpoint,
-  resolvePlatformResponsesEndpoint
-} from "./chunk-I2RMFLLH.js";
+} from "./chunk-PIG2IUVZ.js";
 import {
   clampReasoningEffort,
-  findModelConfig,
   getModelConfig,
   isModelSupportReasoningEffort
-} from "./chunk-TRW43TSC.js";
+} from "./chunk-6EQD4AQL.js";
 import {
   isRecord
 } from "./chunk-KUG52IAP.js";
@@ -70,9 +68,6 @@ import {
 import {
   toErrorMessage
 } from "./chunk-HNMXYYJR.js";
-import {
-  API_ENDPOINTS
-} from "./chunk-LCBAMY2M.js";
 import {
   isLoopbackUrl
 } from "./chunk-4SN6J65J.js";
@@ -85,14 +80,6 @@ import {
   isPlatformMimoProviderModel,
   resolveFireworksKimiModel
 } from "./chunk-CGFNDIKK.js";
-import {
-  asTrimmedLowercaseString
-} from "./chunk-QSJ3HFEF.js";
-import {
-  MEMORY_USE_GUIDANCE,
-  buildUserResponseLanguageContext,
-  wrapHistoricalSummaryWithReplayGuard
-} from "./chunk-4VJAC32I.js";
 
 // packages/agent-runtime/responsesConversationState.ts
 function supportsResponsesConversationState(agent) {
@@ -133,177 +120,6 @@ function isResponsesConversationStateRejection(status, responseBody) {
   return mentionsResponseState && rejectsState;
 }
 
-// packages/agent-runtime/agentCallPlan.ts
-var CODEX_RESPONSES_URL = "https://chatgpt.com/backend-api/codex/responses";
-var CURSOR_AGENT_URL = "https://api2.cursor.sh/agent.v1.AgentService/Run";
-var DEVIN_CONNECT_URL = "https://server.codeium.com/exa.api_server_pb.ApiServerService/GetChatMessage";
-function resolveClientWire(plan) {
-  if (plan.upstreamWire === "gemini-cca") return "chat.completions";
-  if (plan.upstreamWire === "anthropic-messages") return "chat.completions";
-  if (plan.upstreamWire === "cursor-connect") return "chat.completions";
-  if (plan.upstreamWire === "devin-connect") return "chat.completions";
-  if (plan.upstreamWire === "custom-gemini") return "chat.completions";
-  if (plan.upstreamWire === "custom-openai-responses") return "chat.completions";
-  if (plan.upstreamWire === "custom-anthropic-messages") return "chat.completions";
-  if (plan.upstreamWire === "responses" && plan.authMethod.kind === "oauth" && plan.authMethod.ref === "chatgpt") {
-    return "chat.completions";
-  }
-  return plan.upstreamWire;
-}
-var XAI_CHAT_COMPLETIONS_URL = "https://api.x.ai/v1/chat/completions";
-var ANTHROPIC_MESSAGES_URL = "https://api.anthropic.com/v1/messages";
-var CODEX_REQUIRED_HEADERS = [
-  "chatgpt-account-id",
-  "OpenAI-Beta",
-  "originator",
-  "version"
-];
-var ANTIGRAVITY_REQUIRED_HEADERS = [
-  "User-Agent"
-  // antigravity-specific UA (matches getAntigravityUserAgent)
-];
-function agentShouldUseServerProxy(agentConfig) {
-  return shouldUseServerProxy(agentConfig);
-}
-function resolveCustomUpstreamWire(endpoint, nativeProtocol) {
-  const responsesEndpoint = endpoint.includes("/responses");
-  if (nativeProtocol === "openai-responses" && responsesEndpoint) return "responses";
-  if (nativeProtocol === "gemini") return "custom-gemini";
-  if (nativeProtocol === "openai-responses") return "custom-openai-responses";
-  if (nativeProtocol === "anthropic-messages") return "custom-anthropic-messages";
-  return responsesEndpoint ? "responses" : "chat.completions";
-}
-function hasOwnCustomProviderKey(agentConfig) {
-  const endpoint = asOptionalTrimmedString(agentConfig.customProviderUrl);
-  if (!endpoint) return false;
-  if (isAntigravityCloudCodeBaseUrl(endpoint)) return false;
-  return Boolean(asOptionalTrimmedString(agentConfig.apiKey));
-}
-function resolveAgentCallPlan(agentConfig, _env) {
-  const apiKeyRef = asTrimmedLowercaseString(agentConfig.apiKeyRef);
-  const provider = asTrimmedLowercaseString(
-    agentConfig.provider ?? agentConfig.apiSource
-  );
-  const ownCustomKeyWins = hasOwnCustomProviderKey(agentConfig);
-  const oauthApiKeyRef = ownCustomKeyWins ? "" : apiKeyRef;
-  if (!ownCustomKeyWins && isAntigravityOAuthAgent(agentConfig)) {
-    return {
-      authMethod: { kind: "oauth", ref: "antigravity" },
-      transport: "server-proxy",
-      upstreamWire: "gemini-cca",
-      endpoint: ANTIGRAVITY_CLOUD_CODE_BASE_URL,
-      requiredHeaders: [...ANTIGRAVITY_REQUIRED_HEADERS],
-      vendor: provider || "google-antigravity"
-    };
-  }
-  if (oauthApiKeyRef === "chatgpt") {
-    return {
-      authMethod: { kind: "oauth", ref: "chatgpt" },
-      transport: "server-proxy",
-      upstreamWire: "responses",
-      endpoint: CODEX_RESPONSES_URL,
-      requiredHeaders: [...CODEX_REQUIRED_HEADERS],
-      vendor: provider || "openai"
-    };
-  }
-  if (oauthApiKeyRef === "claude") {
-    return {
-      authMethod: { kind: "oauth", ref: "claude" },
-      transport: "server-proxy",
-      upstreamWire: "anthropic-messages",
-      endpoint: ANTHROPIC_MESSAGES_URL,
-      requiredHeaders: ["anthropic-version", "anthropic-beta"],
-      vendor: provider || "anthropic"
-    };
-  }
-  if (oauthApiKeyRef === "workbuddy" || oauthApiKeyRef === "workbuddy-ai") {
-    return {
-      authMethod: { kind: "oauth", ref: oauthApiKeyRef },
-      transport: "server-proxy",
-      upstreamWire: "chat.completions",
-      endpoint: oauthApiKeyRef === "workbuddy" ? "https://copilot.tencent.com/v2/chat/completions" : "https://www.workbuddy.ai/v2/chat/completions",
-      requiredHeaders: [],
-      vendor: oauthApiKeyRef
-    };
-  }
-  if (oauthApiKeyRef === "xai") {
-    return {
-      authMethod: { kind: "oauth", ref: "xai" },
-      transport: "server-proxy",
-      upstreamWire: "chat.completions",
-      endpoint: XAI_CHAT_COMPLETIONS_URL,
-      requiredHeaders: [],
-      vendor: provider || "xai"
-    };
-  }
-  if (oauthApiKeyRef === "cursor") {
-    return {
-      authMethod: { kind: "oauth", ref: "cursor" },
-      transport: "server-proxy",
-      upstreamWire: "cursor-connect",
-      endpoint: CURSOR_AGENT_URL,
-      requiredHeaders: [
-        "x-cursor-client-version",
-        "x-cursor-client-type",
-        "x-ghost-mode"
-      ],
-      vendor: provider || "cursor"
-    };
-  }
-  if (oauthApiKeyRef === "devin" || !ownCustomKeyWins && provider === "devin") {
-    return {
-      authMethod: { kind: "oauth", ref: "devin" },
-      transport: "server-proxy",
-      upstreamWire: "devin-connect",
-      endpoint: DEVIN_CONNECT_URL,
-      requiredHeaders: ["connect-protocol-version"],
-      vendor: provider || "devin"
-    };
-  }
-  if (agentConfig.cliProvider || agentConfig.apiSource === "cli" || provider === "cli") {
-    return {
-      authMethod: { kind: "cli", provider: agentConfig.cliProvider || provider || "codex" },
-      transport: "direct",
-      upstreamWire: "cli",
-      endpoint: "",
-      requiredHeaders: [],
-      vendor: provider || "cli"
-    };
-  }
-  if (agentConfig.customProviderUrl || agentConfig.apiSource === "custom") {
-    const transport2 = agentShouldUseServerProxy(agentConfig) ? "server-proxy" : "direct";
-    const endpoint2 = asOptionalTrimmedString(agentConfig.customProviderUrl) ?? "";
-    const upstreamWire2 = resolveCustomUpstreamWire(
-      endpoint2,
-      findModelConfig(provider, agentConfig.model ?? "")?.nativeProtocol
-    );
-    return {
-      authMethod: { kind: "custom-key" },
-      transport: transport2,
-      upstreamWire: upstreamWire2,
-      endpoint: endpoint2,
-      requiredHeaders: [],
-      vendor: provider || "custom"
-    };
-  }
-  const transport = agentShouldUseServerProxy(agentConfig) ? "server-proxy" : "direct";
-  const useResponses = isOpenAiResponsesModel({
-    provider,
-    model: agentConfig.model,
-    endpointKey: agentConfig.endpointKey
-  });
-  const upstreamWire = useResponses ? "responses" : "chat.completions";
-  const endpoint = upstreamWire === "responses" ? resolvePlatformResponsesEndpoint(provider, agentConfig.model) ?? "" : resolvePlatformChatCompletionsEndpoint(provider, agentConfig.model) ?? "";
-  return {
-    authMethod: { kind: "platform-key" },
-    transport,
-    upstreamWire,
-    endpoint,
-    requiredHeaders: [],
-    vendor: provider || "openai"
-  };
-}
-
 // packages/ai/agent/buildSystemPrompt.ts
 var CLARIFICATION_MODE_INSTRUCTIONS = `\u5728\u4F60\u8FD8\u4E0D\u4E86\u89E3\u7528\u6237\u610F\u56FE\u65F6\uFF0C\u901A\u8FC7\u63D0\u95EE\u6765\u6F84\u6E05\u9700\u6C42\uFF0C\u800C\u4E0D\u662F\u4ED3\u4FC3\u7ED9\u51FA\u7B54\u6848\u3002`;
 var isBrowser = typeof window !== "undefined";
@@ -455,6 +271,13 @@ ${wrapHistoricalSummaryWithReplayGuard(contexts.dialogSummary)}` : "";
       cacheScope: "static",
       content: DELETE_SAFETY_RED_LINE
     },
+    // 凭据纪律：与红线同为无条件系统层块，四条装配线同源。
+    {
+      id: "credential-hygiene",
+      owner: "platform",
+      cacheScope: "static",
+      content: CREDENTIAL_HYGIENE_RULE
+    },
     // 并行是默认：系统层固定块，紧随红线（同为无条件前缀，不随工具/轮次变化）。
     {
       id: "parallel-dispatch-default",
@@ -462,6 +285,13 @@ ${wrapHistoricalSummaryWithReplayGuard(contexts.dialogSummary)}` : "";
       cacheScope: "static",
       content: PARALLEL_DISPATCH_DEFAULT_RULE
     },
+    // 派发落点：并行派发纪律的下一层（派到哪个执行后端），紧随并行块。
+    {
+      id: "dispatch-backend-policy",
+      owner: "platform",
+      cacheScope: "static",
+      content: DISPATCH_BACKEND_POLICY
+    },
     // 平台风控纪律：无条件静态前缀，紧随并行派发块。
     {
       id: "platform-risk-control",
@@ -1397,8 +1227,6 @@ export {
   selectResponsesConversationState,
   updateResponsesConversationState,
   isResponsesConversationStateRejection,
-  resolveClientWire,
-  resolveAgentCallPlan,
   generateRequestBody,
   CONFIRMATION_INPUT_KEYS,
   stripModelToolArgs,

package/{chunk-B2EGWZJG.js → chunk-I7S63QUU.js}

@@ -1,7 +1,7 @@
 import {
   generatePkcePair,
   startCallbackServer
-} from "./chunk-7KYVUFDG.js";
+} from "./chunk-G3VYRPTV.js";
 import {
   asOptionalFiniteNumber
 } from "./chunk-WWC7I6TA.js";

package/{chunk-PDJ6ZODI.js → chunk-IF7V3CBU.js}

@@ -7,7 +7,7 @@ import {
 import {
   patch,
   selectById
-} from "./chunk-A7HQF6YH.js";
+} from "./chunk-CDLP56BS.js";
 
 // packages/chat/dialog/actions/setDialogExtraReferencesAction.ts
 var setDialogExtraReferencesAction = async (extraReferences, thunkApi) => {

package/{chunk-T6CBQ6BN.js → chunk-INFHX73M.js}

@@ -1,7 +1,7 @@
 import {
   DEFAULT_AGENT_BASE_POLICY,
   DEFAULT_USER_PREFERENCE_PROFILE
-} from "./chunk-HXHSTRGH.js";
+} from "./chunk-VYNMQ6HW.js";
 
 // packages/ai/policy/runtimePolicy.ts
 var clampLevel = (value, fallback) => {

package/{chunk-YBNHPX4S.js → chunk-IW64YHXL.js}

@@ -4,15 +4,15 @@ import {
 import {
   DEFAULT_NOLO_SERVER_URL
 } from "./chunk-OLZBQWZU.js";
-import {
-  normalizeServerOrigin
-} from "./chunk-CF7PE763.js";
 import {
   loadProfileConfig
-} from "./chunk-TNIX77YM.js";
+} from "./chunk-R5GO3YZP.js";
 import {
   resolveDefaultSpawn
 } from "./chunk-Y6ROFCZO.js";
+import {
+  normalizeServerOrigin
+} from "./chunk-CF7PE763.js";
 
 // packages/cli/updateCommands.ts
 import { existsSync as existsSync2, readFileSync as readFileSync2, accessSync, constants } from "node:fs";
@@ -912,6 +912,144 @@ async function runShellScript(script, {
   ]);
   return exitCode;
 }
+function shellQuote(value) {
+  return "'" + value.replace(/'/g, "'\\''") + "'";
+}
+function buildStandaloneUpdateScript(args) {
+  const curl = "curl -fL --progress-bar --connect-timeout 20 --max-time 600 --speed-limit 1 --speed-time 60";
+  return `set -eu
+EXTRACT_DIR=${shellQuote(args.extractDir)}
+ENTRY=${shellQuote(args.symlinkPath)}
+CURRENT_VERSION=${shellQuote(args.currentVersion)}
+STAGING="$EXTRACT_DIR.new.$$"
+BACKUP="$EXTRACT_DIR.old.$$"
+LINK="$ENTRY.new.$$"
+old_moved=0
+new_moved=0
+committed=0
+cleanup() {
+  status=$?
+  trap - 0 HUP INT TERM
+  if [ "$committed" = 0 ]; then
+    if [ "$new_moved" = 1 ] && [ -d "$EXTRACT_DIR" ]; then
+      mv "$EXTRACT_DIR" "$STAGING" || exit 1
+    fi
+    if [ "$old_moved" = 1 ] && [ -d "$BACKUP" ]; then
+      mv "$BACKUP" "$EXTRACT_DIR" || exit 1
+    fi
+  fi
+  rm -rf "$STAGING" || true
+  rm -f "$LINK" || true
+  exit "$status"
+}
+# Refuse collisions before installing cleanup: never remove somebody else's path.
+if [ -e "$STAGING" ] || [ -L "$STAGING" ] ||
+   [ -e "$BACKUP" ] || [ -L "$BACKUP" ] ||
+   [ -e "$LINK" ] || [ -L "$LINK" ]; then
+  echo "Error: update staging path already exists" >&2
+  exit 1
+fi
+mkdir -p "\${EXTRACT_DIR%/*}"
+mkdir "$STAGING"
+trap cleanup 0
+trap 'exit 1' HUP INT TERM
+
+echo ${shellQuote(`Downloading nolo from ${args.tarballUrl}...`)}
+if ! ${curl} ${shellQuote(args.tarballUrl)} -o "$STAGING/bundle.tar.gz"; then
+  ${args.tarballUrl !== args.fallbackUrl ? `echo ${shellQuote(`Primary source unavailable, trying ${args.fallbackUrl}...`)}
+  if ! ${curl} ${shellQuote(args.fallbackUrl)} -o "$STAGING/bundle.tar.gz"; then
+    echo "Error: download failed" >&2
+    exit 1
+  fi` : `echo "Error: download failed" >&2
+  exit 1`}
+fi
+tar -xzf "$STAGING/bundle.tar.gz" -C "$STAGING"
+rm -f "$STAGING/bundle.tar.gz"
+chmod +x "$STAGING/nolo"
+# A failing, empty or malformed version response must not touch the live install.
+VERSION_TEXT=$("$STAGING/nolo" -v)
+case "$VERSION_TEXT" in
+  "nolo-cli "*) VERSION=\${VERSION_TEXT#nolo-cli } ;;
+  *) VERSION=$VERSION_TEXT ;;
+esac
+CORE=\${VERSION%%[-+]*}
+MAJOR=\${CORE%%.*}
+REST=\${CORE#*.}
+MINOR=\${REST%%.*}
+PATCH=\${REST#*.}
+case "$MAJOR:$MINOR:$PATCH" in
+  *[!0-9:]*|:*|*::*|*:) echo "Error: invalid bundle version" >&2; exit 1 ;;
+esac
+if [ "$CORE" != "$MAJOR.$MINOR.$PATCH" ]; then
+  echo "Error: invalid bundle version" >&2
+  exit 1
+fi
+case "$VERSION" in
+  *[!0-9A-Za-z.+-]*) echo "Error: invalid bundle version" >&2; exit 1 ;;
+esac
+case "$CURRENT_VERSION" in
+  "nolo-cli "*) CUR_VER=\${CURRENT_VERSION#nolo-cli } ;;
+  *) CUR_VER=$CURRENT_VERSION ;;
+esac
+CUR_CORE=\${CUR_VER%%[-+]*}
+CUR_MAJOR=\${CUR_CORE%%.*}
+CUR_REST=\${CUR_CORE#*.}
+CUR_MINOR=\${CUR_REST%%.*}
+CUR_PATCH=\${CUR_REST#*.}
+if [ -n "$CUR_MAJOR" ] && [ -n "$CUR_MINOR" ] && [ -n "$CUR_PATCH" ]; then
+  case "$CUR_MAJOR:$CUR_MINOR:$CUR_PATCH" in
+    *[!0-9:]*|:*|*::*|*:) ;;
+    *)
+      if [ "$CUR_CORE" = "$CUR_MAJOR.$CUR_MINOR.$CUR_PATCH" ]; then
+        is_downgrade=0
+        if [ "$MAJOR" -lt "$CUR_MAJOR" ]; then
+          is_downgrade=1
+        elif [ "$MAJOR" -eq "$CUR_MAJOR" ]; then
+          if [ "$MINOR" -lt "$CUR_MINOR" ]; then
+            is_downgrade=1
+          elif [ "$MINOR" -eq "$CUR_MINOR" ]; then
+            if [ "$PATCH" -lt "$CUR_PATCH" ]; then
+              is_downgrade=1
+            fi
+          fi
+        fi
+        if [ "$is_downgrade" = 1 ]; then
+          echo "Error: refusing downgrade from $CURRENT_VERSION to $VERSION" >&2
+          exit 11
+        fi
+      fi
+      ;;
+  esac
+fi
+if [ "$VERSION" = "$CURRENT_VERSION" ]; then
+  echo "\u2713 Already up to date (nolo-cli $VERSION)."
+  exit 10
+fi
+mkdir -p "\${ENTRY%/*}"
+# mv without -T is portable only when the destination is not a directory.
+if [ -d "$ENTRY" ] || [ -L "$EXTRACT_DIR" ]; then
+  echo "Error: refusing directory entrypoint or symlink bundle directory" >&2
+  exit 1
+fi
+ln -s "$EXTRACT_DIR/nolo" "$LINK"
+if [ -e "$EXTRACT_DIR" ]; then
+  old_moved=1
+  mv "$EXTRACT_DIR" "$BACKUP"
+fi
+new_moved=1
+mv "$STAGING" "$EXTRACT_DIR"
+mv -f "$LINK" "$ENTRY"
+committed=1
+# Retain only the newest recovery copy from this run; prune older backups.
+for old_copy in "$EXTRACT_DIR.old."*; do
+  if [ -d "$old_copy" ] && [ ! -L "$old_copy" ] && [ "$old_copy" != "$BACKUP" ]; then
+    rm -rf "$old_copy" || true
+  fi
+done
+# Retain the previous bundle as a recovery copy; never unlink the live entry.
+echo "nolo updated to $ENTRY"
+`;
+}
 async function runStandaloneBundleUpdate(options) {
   const output = options.output ?? process.stdout;
   const spawn2 = options.spawn ?? resolveDefaultSpawn();
@@ -937,33 +1075,13 @@ async function runStandaloneBundleUpdate(options) {
   const extractDir = join2(homedir2(), ".nolo", extractSubdir);
   const installDir = resolveStandaloneInstallDir();
   const symlinkPath = join2(installDir, "nolo");
-  const script = `set -euo pipefail
-TEMP_DIR=$(mktemp -d)
-trap 'rm -rf "$TEMP_DIR"' EXIT
-
-echo "Downloading nolo from ${tarballUrl}..."
-if ! curl -fL --progress-bar "${tarballUrl}" -o "$TEMP_DIR/${tarballName}"; then
-  ${tarballUrl !== fallbackUrl ? `echo "Primary source unavailable, trying ${fallbackUrl}..."
-  if ! curl -fL --progress-bar "${fallbackUrl}" -o "$TEMP_DIR/${tarballName}"; then
-    echo "Error: download failed from ${fallbackUrl}" >&2
-    exit 1
-  fi` : `echo "Error: download failed from ${tarballUrl}" >&2
-  exit 1`}
-fi
-
-mkdir -p "${extractDir}"
-tar -xzf "$TEMP_DIR/${tarballName}" -C "${extractDir}"
-chmod +x "${extractDir}/nolo"
-
-mkdir -p "${installDir}"
-if [ -e "${symlinkPath}" ] || [ -L "${symlinkPath}" ]; then
-  rm -f "${symlinkPath}"
-fi
-ln -s "${extractDir}/nolo" "${symlinkPath}"
-trap - EXIT
-
-echo "nolo updated to ${installDir}/nolo"
-`;
+  const script = buildStandaloneUpdateScript({
+    tarballUrl,
+    fallbackUrl,
+    extractDir,
+    symlinkPath,
+    currentVersion: readPackageInfo().version
+  });
   output.write(`
 Nolo Agent CLI Installer & Updater
 `);
@@ -980,6 +1098,11 @@ Nolo Agent CLI Installer & Updater
     env,
     useCustomSink
   });
+  if (exitCode === 10) {
+    output.write(`  ${renderProgressBar(100)}
+`);
+    return 0;
+  }
   if (exitCode === 0) {
     output.write(`  ${renderProgressBar(100)}
 `);
@@ -1167,6 +1290,7 @@ export {
   buildSelfUpdateCommand,
   resolveSelfUpdateServerUrl,
   buildCliDoctorText,
+  buildStandaloneUpdateScript,
   runStandaloneBundleUpdate,
   NOLO_UPDATE_CHECK_KILL_SWITCH,
   compareCliVersions,

package/{chunk-RV3PVWWL.js → chunk-JDKSYQQN.js}

@@ -1,12 +1,12 @@
 import {
   addContentToSpace
-} from "./chunk-GW7LIREE.js";
+} from "./chunk-YR47Y7CN.js";
 import {
   format,
   prepareAndPersistMessage,
   uiAskChoiceFunc,
   uiAskChoiceFunctionSchema
-} from "./chunk-ZJWUXAJ7.js";
+} from "./chunk-F5WASHQA.js";
 import {
   formatISO
 } from "./chunk-ZRAU6T47.js";
@@ -16,16 +16,16 @@ import {
   removeCachedEntity,
   upsertSSREntity,
   write
-} from "./chunk-A7HQF6YH.js";
+} from "./chunk-CDLP56BS.js";
 import {
   isDevelopment
 } from "./chunk-6Q7UTJKR.js";
 import {
   selectIdentityUserId
-} from "./chunk-SEJ5OS6F.js";
+} from "./chunk-PXYBUFDB.js";
 import {
   buildBuiltinObjectSkillReference
-} from "./chunk-JZX2XLKC.js";
+} from "./chunk-YCRROBDY.js";
 import {
   extractCustomId
 } from "./chunk-M2EJHDJP.js";

package/{chunk-K43ZF2C3.js → chunk-JPPQ3GUO.js}

@@ -1,6 +1,6 @@
 import {
   resolvePlatformAuthToken
-} from "./chunk-SUKSWFLP.js";
+} from "./chunk-PIG2IUVZ.js";
 import {
   getCredentialsDir
 } from "./chunk-ZWQUWF6W.js";

package/{chunk-VEJFPTX7.js → chunk-JWEXJ573.js}

@@ -4,14 +4,14 @@ import {
 import {
   patch,
   read
-} from "./chunk-A7HQF6YH.js";
+} from "./chunk-CDLP56BS.js";
 import {
   DEVICE_LOCAL_OWNER_ID,
   isDeviceLocalSpaceBody
-} from "./chunk-4YRTZIVN.js";
+} from "./chunk-43OFVLWJ.js";
 import {
   selectIdentityUserId
-} from "./chunk-SEJ5OS6F.js";
+} from "./chunk-PXYBUFDB.js";
 
 // packages/create/space/utils/permissions.ts
 var checkSpaceMembership = (spaceData, userId) => {