nolo-cli 0.157.0-alpha.1 → 0.158.0-alpha.1

package/{chunk-SW4S4XYB.js → chunk-2AB2HA4M.js}

@@ -296,21 +296,49 @@ var STRINGS = {
     en: "Usage: /altscreen <on|off>",
     zh: "\u7528\u6CD5\uFF1A/altscreen <on|off>"
   },
-  autoCurrent: {
-    en: "Permission auto-approve: {0}",
-    zh: "\u6743\u9650\u81EA\u52A8\u5316\uFF1A{0}"
-  },
   autoUsage: {
-    en: "Usage: /auto <on|off>",
-    zh: "\u7528\u6CD5\uFF1A/auto <on|off>"
+    en: "Usage: /auto [local|remote] <on|off> \xB7 /auto reset (clear both)",
+    zh: "\u7528\u6CD5\uFF1A/auto [local|remote] <on|off> \xB7 /auto reset\uFF08\u4E24\u6876\u6E05\u96F6\uFF09"
+  },
+  autoStateLine: {
+    en: "Local-run grant: {0} \xB7 Remote-origin shell grant: {1}",
+    zh: "\u672C\u673A run \u6388\u6743\uFF1A{0} \xB7 \u8FDC\u7A0B\u6765\u6E90\u5728\u672C\u673A\u6267\u884C shell \u6388\u6743\uFF1A{1}"
+  },
+  autoStateOnPersisted: {
+    en: "granted (saved)",
+    zh: "\u5DF2\u6388\u6743\uFF08\u5DF2\u4FDD\u5B58\uFF09"
+  },
+  autoStateOff: {
+    en: "ask every time",
+    zh: "\u9010\u6B21\u8BE2\u95EE"
+  },
+  autoKindLocal: {
+    en: "local-run confirmations (destructive shell / outside-workspace files / file writes)",
+    zh: "\u672C\u673A run \u7684\u786E\u8BA4\uFF08\u7834\u574F\u6027\u547D\u4EE4 / \u5DE5\u4F5C\u533A\u5916\u6587\u4EF6 / \u5199\u6587\u4EF6\uFF09"
+  },
+  autoKindRemote: {
+    en: "a remote origin running shell on this machine",
+    zh: "\u8FDC\u7A0B\u6765\u6E90\u5728\u672C\u673A\u6267\u884C shell"
+  },
+  autoGrantOn: {
+    en: "Approved and saved: {0}. That class no longer asks (this session and future starts). Undo with {1}.",
+    zh: "\u5DF2\u6279\u51C6\u5E76\u4FDD\u5B58\uFF1A{0}\u3002\u8BE5\u7C7B\u786E\u8BA4\u4E0D\u518D\u8BE2\u95EE\uFF08\u672C\u6B21\u4E0E\u540E\u7EED\u542F\u52A8\u90FD\u751F\u6548\uFF09\u3002\u64A4\u9500\u7528 {1}\u3002"
   },
-  autoOn: {
-    en: "Permission auto-approve ON \u2014 destructive shell and external-file confirmations will be skipped for this session.",
-    zh: "\u6743\u9650\u81EA\u52A8\u5316\u5DF2\u5F00\u542F\uFF1A\u672C\u4F1A\u8BDD\u5185\u7834\u574F\u6027 shell \u4E0E\u5916\u90E8\u6587\u4EF6\u8BBF\u95EE\u786E\u8BA4\u5C06\u81EA\u52A8\u653E\u884C\u3002"
+  autoGrantOff: {
+    en: "Revoked and saved: {0}. Those confirmations ask again (this session and future starts). Re-enable with {1}.",
+    zh: "\u5DF2\u64A4\u9500\u5E76\u4FDD\u5B58\uFF1A{0}\u3002\u8BE5\u7C7B\u786E\u8BA4\u6062\u590D\u9010\u6B21\u8BE2\u95EE\uFF08\u672C\u4F1A\u8BDD\u4E0E\u540E\u7EED\u542F\u52A8\u90FD\u751F\u6548\uFF09\u3002\u91CD\u65B0\u5F00\u542F\u7528 {1}\u3002"
   },
-  autoOff: {
-    en: "Permission auto-approve OFF \u2014 confirmations will ask again.",
-    zh: "\u6743\u9650\u81EA\u52A8\u5316\u5DF2\u5173\u95ED\uFF1A\u6062\u590D\u9010\u6B21\u786E\u8BA4\u3002"
+  autoReset: {
+    en: "Cleared and saved: both permission buckets are reset \u2014 every confirmation asks again.",
+    zh: "\u5DF2\u6E05\u7A7A\u5E76\u4FDD\u5B58\uFF1A\u672C\u673A\u4E0E\u8FDC\u7A0B\u4E24\u6876\u6388\u6743\u90FD\u6E05\u96F6\uFF0C\u6240\u6709\u786E\u8BA4\u6062\u590D\u9010\u6B21\u8BE2\u95EE\u3002"
+  },
+  autoPersistFailed: {
+    en: "This grant applies to this session only \u2014 it could not be saved to your config (no profile?).",
+    zh: "\u8BE5\u6388\u6743\u4EC5\u672C\u6B21\u4F1A\u8BDD\u6709\u6548\uFF1A\u672A\u80FD\u4FDD\u5B58\u5230\u914D\u7F6E\uFF08\u53EF\u80FD\u8FD8\u6CA1\u6709 profile\uFF09\u3002"
+  },
+  autoPersistedStartup: {
+    en: "Approved from your saved config: {0}. Those confirmations are skipped; undo with /auto reset.",
+    zh: "\u5DF2\u4ECE\u4FDD\u5B58\u7684\u914D\u7F6E\u751F\u6548\u7684\u6388\u6743\uFF1A{0}\u3002\u8FD9\u4E9B\u786E\u8BA4\u5DF2\u88AB\u8DF3\u8FC7\uFF1B\u64A4\u9500\u7528 /auto reset\u3002"
   },
   langSwitched: {
     en: "Language switched to English.",
@@ -580,40 +608,52 @@ var STRINGS = {
     zh: "\uFF08\u2191\u2193 \u79FB\u52A8 \xB7 Enter \u9009\u62E9 \xB7 Esc \u53D6\u6D88\uFF09"
   },
   dialogConfirmTitle: {
-    en: "Confirm destructive shell command",
-    zh: "\u786E\u8BA4\u6267\u884C\u7834\u574F\u6027 shell \u547D\u4EE4"
+    en: "Allow destructive shell commands from local runs?",
+    zh: "\u5141\u8BB8\u672C\u673A run \u6267\u884C\u7834\u574F\u6027 shell \u547D\u4EE4\u5417\uFF1F"
   },
   dialogConfirmBody: {
-    en: "This command may delete or reset user content and needs explicit confirmation before it runs.",
-    zh: "\u8BE5\u547D\u4EE4\u53EF\u80FD\u5220\u9664\u6216\u91CD\u7F6E\u7528\u6237\u5185\u5BB9\uFF0C\u9700\u8981\u7528\u6237\u660E\u786E\u786E\u8BA4\u540E\u624D\u80FD\u6267\u884C\u3002"
+    en: "This command may delete or reset user content \u2014 a local-run destructive shell command.",
+    zh: "\u8BE5\u547D\u4EE4\u53EF\u80FD\u5220\u9664\u6216\u91CD\u7F6E\u7528\u6237\u5185\u5BB9\uFF0C\u5C5E\u4E8E\u672C\u673A run \u7684\u7834\u574F\u6027 shell \u547D\u4EE4\u3002"
   },
   dialogConfirmExternalFileTitle: {
-    en: "Confirm reading a file outside the workspace",
-    zh: "\u786E\u8BA4\u8BFB\u53D6\u5DE5\u4F5C\u533A\u5916\u90E8\u6587\u4EF6"
+    en: "Allow reading files outside the workspace?",
+    zh: "\u5141\u8BB8\u8BFB\u53D6\u5DE5\u4F5C\u533A\u5916\u90E8\u6587\u4EF6\u5417\uFF1F"
   },
   dialogConfirmExternalFileBody: {
-    en: "This path is outside the current workspace. Allow this one-time access, or deny it.",
-    zh: "\u8BE5\u8DEF\u5F84\u4F4D\u4E8E\u5F53\u524D\u5DE5\u4F5C\u533A\u4E4B\u5916\u3002\u786E\u8BA4\u540E\u672C\u6B21\u8BBF\u95EE\u653E\u884C\uFF0C\u5426\u5219\u62D2\u7EDD\u3002"
+    en: "This path is outside the current workspace \u2014 a local-run outside-workspace file access.",
+    zh: "\u8BE5\u8DEF\u5F84\u4F4D\u4E8E\u5F53\u524D\u5DE5\u4F5C\u533A\u4E4B\u5916\uFF0C\u5C5E\u4E8E\u672C\u673A run \u7684\u5DE5\u4F5C\u533A\u5916\u6587\u4EF6\u8BBF\u95EE\u3002"
+  },
+  dialogConfirmFileWriteTitle: {
+    en: "Allow writing files from local runs?",
+    zh: "\u5141\u8BB8\u672C\u673A run \u5199\u5165\u6587\u4EF6\u5417\uFF1F"
+  },
+  dialogConfirmFileWriteBody: {
+    en: "This action writes into the workspace \u2014 a local-run file-write confirmation.",
+    zh: "\u8BE5\u64CD\u4F5C\u4F1A\u5199\u5165\u5DE5\u4F5C\u533A\u6587\u4EF6\uFF0C\u5C5E\u4E8E\u672C\u673A run \u7684\u5199\u6587\u4EF6\u786E\u8BA4\u3002"
+  },
+  dialogConfirmRememberLocal: {
+    en: "Approving covers all three local-run classes (destructive shell / outside-workspace files / file writes) and is saved, so they stop asking \u2014 this session and future starts. Undo with /auto local off or /auto reset.",
+    zh: "\u6279\u51C6\u540E\u672C\u673A run \u7684\u4E09\u7C7B\u786E\u8BA4\uFF08\u7834\u574F\u6027\u547D\u4EE4 / \u5DE5\u4F5C\u533A\u5916\u6587\u4EF6 / \u5199\u6587\u4EF6\uFF09\u90FD\u4E0D\u518D\u8BE2\u95EE\uFF0C\u5E76\u4FDD\u5B58\u5230\u914D\u7F6E\uFF08\u672C\u6B21\u4E0E\u540E\u7EED\u542F\u52A8\u90FD\u751F\u6548\uFF09\u3002\u64A4\u9500\u7528 /auto local off \u6216 /auto reset\u3002"
   },
   dialogConfirmCommandTruncated: {
     en: "(truncated)",
     zh: "\uFF08\u5DF2\u622A\u65AD\uFF09"
   },
   dialogConfirmAllowLabel: {
-    en: "Allow",
-    zh: "\u5141\u8BB8"
+    en: "Approve & remember",
+    zh: "\u6279\u51C6\u5E76\u8BB0\u4F4F"
   },
   dialogConfirmAllowDetail: {
-    en: "execute this time",
-    zh: "\u672C\u6B21\u6267\u884C"
+    en: "stop asking for this class (saved)",
+    zh: "\u540C\u7C7B\u786E\u8BA4\u4E0D\u518D\u8BE2\u95EE\uFF08\u5DF2\u4FDD\u5B58\uFF09"
   },
   dialogConfirmCancelLabel: {
-    en: "Cancel",
-    zh: "\u53D6\u6D88"
+    en: "Reject",
+    zh: "\u62D2\u7EDD"
   },
   dialogConfirmCancelDetail: {
-    en: "abort the operation",
-    zh: "\u4E2D\u6B62\u64CD\u4F5C"
+    en: "do not run it; ask again next time",
+    zh: "\u4E0D\u6267\u884C\uFF0C\u4E0B\u6B21\u4ECD\u4F1A\u8BE2\u95EE"
   },
   // --- Ask choice (ask_user) ------------------------------------------
   askChoiceTitle: {
@@ -859,7 +899,7 @@ var STRINGS = {
       "  Drag a file in        Drop an image file on the terminal to attach it; audio/video transcribes; other files stay paths",
       "  Shift+Enter / Ctrl+J  Insert a newline in the draft",
       "  /mouse <on|off>       Toggle mouse mode (off = drag to select text)",
-      "  /auto <on|off>        Toggle permission auto-approve (skip destructive-shell, external-file & file-write confirms)",
+      "  /auto [local|remote] <on|off>  Approve one permission bucket (local-run confirms / remote-origin shell) so it stops asking; saved to your config. /auto reset clears both",
       "  /shell-revoke         Revoke this session's shell grant; the next shell call re-asks (works while a reply runs; does not interrupt a running command)",
       "  /math <on|off>        Toggle math formula rendering (Unicode transcription)",
       "  /altscreen <on|off>   Toggle the terminal alternate screen (default on; off shares shell scrollback)",
@@ -905,7 +945,7 @@ var STRINGS = {
       "  \u62D6\u5165\u6587\u4EF6              \u628A\u56FE\u7247\u6587\u4EF6\u62D6\u8FDB\u7EC8\u7AEF\u5373\u6210\u4E3A\u9644\u4EF6\uFF1B\u97F3\u89C6\u9891\u81EA\u52A8\u8F6C\u5199\uFF1B\u5176\u4ED6\u6587\u4EF6\u53EA\u7559\u8DEF\u5F84",
       "  Shift+Enter / Ctrl+J  \u5728\u8349\u7A3F\u91CC\u6362\u884C",
       "  /mouse <on|off>       \u5207\u6362\u9F20\u6807\u6A21\u5F0F\uFF08off \u540E\u53EF\u76F4\u63A5\u62D6\u9009\u6587\u672C\uFF09",
-      "  /auto <on|off>        \u5207\u6362\u6743\u9650\u81EA\u52A8\u5316\uFF08\u81EA\u52A8\u653E\u884C\u7834\u574F\u6027 shell\u3001\u5916\u90E8\u6587\u4EF6\u4E0E\u5199\u6587\u4EF6\u786E\u8BA4\uFF09",
+      "  /auto [local|remote] <on|off>  \u6388\u6743\u67D0\u4E00\u6876\uFF08\u672C\u673A run \u786E\u8BA4 / \u8FDC\u7A0B\u6765\u6E90 shell\uFF09\u4E0D\u518D\u9010\u6B21\u8BE2\u95EE\uFF0C\u5E76\u4FDD\u5B58\u5230\u914D\u7F6E\uFF1B/auto reset \u4E24\u6876\u6E05\u96F6",
       "  /shell-revoke         \u64A4\u9500\u672C\u4F1A\u8BDD\u7684 shell \u6267\u884C\u6388\u6743\uFF0C\u4E0B\u4E00\u6B21 shell \u8C03\u7528\u91CD\u65B0\u786E\u8BA4\uFF08\u56DE\u590D\u8FDB\u884C\u4E2D\u4E5F\u53EF\u7528\uFF1B\u4E0D\u4E2D\u65AD\u5DF2\u653E\u884C\u7684\u547D\u4EE4\uFF09",
       "  /math <on|off>        \u5207\u6362\u6570\u5B66\u516C\u5F0F\u6E32\u67D3\uFF08Unicode \u8F6C\u5199\uFF09",
       "  /altscreen <on|off>   \u5207\u6362\u7EC8\u7AEF\u5907\u7528\u5C4F\uFF08\u9ED8\u8BA4 on\uFF1Boff \u6539\u4E3A\u4E0E shell \u5171\u7528\u56DE\u6EDA\uFF09",
@@ -1567,13 +1607,23 @@ Use /switch, /switch list, /switch minimax-m3, or a full agent key.`,
   // 分享 OAuth agent 的 shell 会话授权确认（块 D）：首次 execShell/
   // launchProcess 前弹。必须把三件事说清——这是谁的 agent / 命令在哪台
   // 设备哪个工作区跑 / 任意 shell 可读写该用户可访问的资源。
+  // 子 run 的 per-call shell 确认（远程来源在本机跑一条命令）：与会话授权同一套
+  // 语义，参数为 runId / agentKey / owner / device / workspace / 权限提示。
+  "shellPerCall.title": {
+    en: "Allow a remote origin to run this command on this machine?",
+    zh: "\u5141\u8BB8\u8FDC\u7A0B\u6765\u6E90\u5728\u672C\u673A\u6267\u884C\u8FD9\u6761\u547D\u4EE4\u5417\uFF1F"
+  },
+  "shellPerCall.body": {
+    en: "A remote origin asked to run one shell command on this device.\nRun: {0}\nAgent: {1}\nOwner: {2}\nDevice: {3}\nWorkspace: {4}\n{5}\n\nShell commands can read/write anything this user can access. Approving covers this whole class: remote-origin shell confirmations stop asking one by one (this session and future starts). Undo with /shell-revoke or /auto remote off.",
+    zh: "\u8FDC\u7A0B\u6765\u6E90\u8BF7\u6C42\u5728\u672C\u673A\u6267\u884C\u4E00\u6761 shell \u547D\u4EE4\u3002\nRun\uFF1A{0}\nAgent\uFF1A{1}\n\u4E3B\u4EBA\uFF1A{2}\n\u8BBE\u5907\uFF1A{3}\n\u5DE5\u4F5C\u533A\uFF1A{4}\n{5}\n\n\u4EFB\u610F shell \u547D\u4EE4\u53EF\u8BFB\u5199\u672C\u673A\u8BE5\u7528\u6237\u80FD\u8BBF\u95EE\u7684\u8D44\u6E90\u3002\u6279\u51C6\u540E\u300C\u8FDC\u7A0B\u6765\u6E90\u5728\u672C\u673A\u6267\u884C shell\u300D\u8FD9\u4E00\u7C7B\u786E\u8BA4\u4E0D\u518D\u9010\u6761\u8BE2\u95EE\uFF08\u672C\u6B21\u4E0E\u540E\u7EED\u542F\u52A8\u90FD\u751F\u6548\uFF09\u3002\u64A4\u9500\uFF1A/shell-revoke \u6216 /auto remote off\u3002"
+  },
   "shellGrant.confirmTitle": {
-    en: "Allow shell commands for shared agent {0}?",
-    zh: "\u5141\u8BB8\u5206\u4EAB agent {0} \u6267\u884C shell \u547D\u4EE4\u5417\uFF1F"
+    en: "Allow remote agent {0} to run shell commands on this machine?",
+    zh: "\u5141\u8BB8\u8FDC\u7A0B agent {0} \u5728\u672C\u673A\u6267\u884C shell \u547D\u4EE4\u5417\uFF1F"
   },
   "shellGrant.confirmBody": {
-    en: "Agent {0} (owner {1}) asked to run shell commands on this device.\nDevice: {2} ({3})\nWorkspace: {4}\n\nShell commands can read/write anything this user can access. Allowed for the rest of this session; revoke any time with /shell-revoke.",
-    zh: "\u5206\u4EAB agent {0}\uFF08\u4E3B\u4EBA {1}\uFF09\u8BF7\u6C42\u5728\u672C\u673A\u6267\u884C shell \u547D\u4EE4\u3002\n\u8BBE\u5907\uFF1A{2}\uFF08{3}\uFF09\n\u5DE5\u4F5C\u533A\uFF1A{4}\n\n\u4EFB\u610F shell \u547D\u4EE4\u53EF\u8BFB\u5199\u672C\u673A\u8BE5\u7528\u6237\u80FD\u8BBF\u95EE\u7684\u5168\u90E8\u8D44\u6E90\u3002\u5141\u8BB8\u540E\u5728\u672C\u4F1A\u8BDD\u6301\u7EED\u6709\u6548\uFF1B\u968F\u65F6\u53EF\u7528 /shell-revoke \u64A4\u9500\u3002"
+    en: "Remote agent {0} (owner {1}) requested to run a shell command on this machine.\nDevice: {2} ({3})\nWorkspace: {4}\nCommand: {5}\n\nShell commands can read/write anything this user can access. Approving covers this whole class: remote-origin shell confirmations stop asking one by one (this session and future starts). Undo with /shell-revoke (this session) or /auto remote off (also clears the saved grant).",
+    zh: "\u8FDC\u7A0B agent {0}\uFF08\u4E3B\u4EBA {1}\uFF09\u8BF7\u6C42\u5728\u672C\u673A\u6267\u884C shell \u547D\u4EE4\u3002\n\u8BBE\u5907\uFF1A{2}\uFF08{3}\uFF09\n\u5DE5\u4F5C\u533A\uFF1A{4}\n\u547D\u4EE4\uFF1A{5}\n\n\u4EFB\u610F shell \u547D\u4EE4\u53EF\u8BFB\u5199\u672C\u673A\u8BE5\u7528\u6237\u80FD\u8BBF\u95EE\u7684\u8D44\u6E90\u3002\u6279\u51C6\u540E\u300C\u8FDC\u7A0B\u6765\u6E90\u5728\u672C\u673A\u6267\u884C shell\u300D\u8FD9\u4E00\u7C7B\u786E\u8BA4\u4E0D\u518D\u9010\u6761\u8BE2\u95EE\uFF08\u672C\u6B21\u4E0E\u540E\u7EED\u542F\u52A8\u90FD\u751F\u6548\uFF09\u3002\u64A4\u9500\uFF1A/shell-revoke\uFF08\u672C\u4F1A\u8BDD\uFF09\u6216 /auto remote off\uFF08\u540C\u65F6\u6E05\u9664\u6301\u4E45\u6388\u6743\uFF09\u3002"
   },
   "shellGrant.revoked": {
     en: "[nolo] Shell permission revoked for shared agents in this session.",

package/{chunk-VSOWPETY.js → chunk-2BKUVRC5.js}

@@ -2,7 +2,7 @@ import {
   clipMultilineText,
   fetchAndSerializeTable,
   waitForAbortableDelay
-} from "./chunk-RUNKPFM5.js";
+} from "./chunk-CDWHHLK5.js";
 import {
   isGatewayHttpStatus
 } from "./chunk-NF64D32W.js";
@@ -11,31 +11,31 @@ import {
   isCoreDrainingBody,
   normalizeNonNegativeMs,
   parseRetryAfterHeaderMs
-} from "./chunk-XPWGOTBQ.js";
+} from "./chunk-3L2WKC3W.js";
 import {
   resolvePageReadMarkdown,
   slateToSimplifiedMarkdown
-} from "./chunk-3XZKV7QQ.js";
+} from "./chunk-US6MKPE7.js";
 import {
   extractCategorizedMentions
 } from "./chunk-AGIM7IMJ.js";
 import {
   fetchAndCacheMessages
-} from "./chunk-H4KACZMG.js";
+} from "./chunk-WTFRBJT5.js";
 import {
   createSpaceKey
 } from "./chunk-UAD2WT54.js";
 import {
   read
-} from "./chunk-HP6O6LTV.js";
+} from "./chunk-ZVQHBIWV.js";
 import {
   getRuntimeServerContext
-} from "./chunk-Z6KQDSZW.js";
+} from "./chunk-2SGAI64X.js";
 import {
   extractRuntimePageCapabilities,
   resolveBuiltinSkillPage,
   resolveSkillGraphFromRoots
-} from "./chunk-4Z245KOA.js";
+} from "./chunk-DC3SZCRR.js";
 import {
   isAbortError
 } from "./chunk-7DPNBQSV.js";

package/{chunk-Z6KQDSZW.js → chunk-2SGAI64X.js}

@@ -8,7 +8,7 @@ import {
   noloUploadRequest,
   noloWriteRequest,
   syncWithServers
-} from "./chunk-7BSQK2UC.js";
+} from "./chunk-WRCZXJ4N.js";
 import {
   getAllServers,
   getIsDesktopApp
@@ -17,7 +17,7 @@ import {
   selectIdentityToken,
   selectIdentityUser,
   selectIdentityUserId
-} from "./chunk-SEJ5OS6F.js";
+} from "./chunk-PXYBUFDB.js";
 import {
   asOptionalPositiveFiniteNumber
 } from "./chunk-U6VC4MU4.js";

package/{chunk-KOB75UNU.js → chunk-2SOS7OSQ.js}

@@ -5,7 +5,7 @@ import {
 } from "./chunk-NBTY7YJF.js";
 import {
   resolveCliLocalRuntimeKeyCapability
-} from "./chunk-XFKZ3MCV.js";
+} from "./chunk-YTXQ2U2X.js";
 import {
   HIGH_RISK_MUTATION_TOOL_NAMES
 } from "./chunk-QLQ573SU.js";
@@ -150,7 +150,7 @@ function writeUsage(output, commandPath) {
     return;
   }
   output.write(
-    "Usage: nolo agent run <agent> <message> [--local|--server|--auto] [--runtime-key <key>] [--ephemeral|--memory-only] [--continue <dialogId>] [--cwd <path>]\n       nolo agent run --agent <agent> (--msg <message>|--msg-file <path>) [--image <url-or-path>] [--space <spaceId>] [--category <name>] [--inherit-from-dialog <dialog>] [--parent-dialog <dialog>] [--subject-dialog <dialog>] [--subject-ref <kind:id[:role]>] [--task-row-dbkey <key>] [--fallback-agent <agent>] (suggestions for agent to decide on quota) [--allowed-tool <tool>] [--blocked-tool <tool>] [--read-only] [--runtime-key <key>] [--machine-shell] [--dod <cmd>] [--bg] [--timeout-ms <n>] [--events jsonl] [--no-stream] [--skill <dbKey-or-md-path>]\n"
+    "Usage: nolo agent run <agent> <message> [--local|--server|--auto] [--runtime-key <key>] [--docker-workspace-mode git|empty] [--ephemeral|--memory-only] [--continue <dialogId>] [--cwd <path>]\n       nolo agent run --agent <agent> (--msg <message>|--msg-file <path>) [--image <url-or-path>] [--space <spaceId>] [--category <name>] [--inherit-from-dialog <dialog>] [--parent-dialog <dialog>] [--subject-dialog <dialog>] [--subject-ref <kind:id[:role]>] [--task-row-dbkey <key>] [--fallback-agent <agent>] (suggestions for agent to decide on quota) [--allowed-tool <tool>] [--blocked-tool <tool>] [--read-only] [--runtime-key <key>] [--docker-workspace-mode git|empty] [--machine-shell] [--dod <cmd>] [--bg] [--timeout-ms <n>] [--events jsonl] [--no-stream] [--skill <dbKey-or-md-path>]\n"
   );
 }
 function parseAgentRunArgs(args, options = {}) {
@@ -166,6 +166,21 @@ function parseAgentRunArgs(args, options = {}) {
   const message = rawMessage.trim();
   const rawRuntimeKey = readFlagValue(args, "--runtime-key");
   const runtimeKey = rawRuntimeKey?.trim();
+  const rawDockerWorkspaceMode = readFlagValue(args, "--docker-workspace-mode")?.trim();
+  if (args.includes("--docker-workspace-mode") && rawDockerWorkspaceMode !== "git" && rawDockerWorkspaceMode !== "empty") {
+    throw new Error("--docker-workspace-mode \u5FC5\u987B\u662F git \u6216 empty");
+  }
+  const dockerWorkspaceMode = rawDockerWorkspaceMode;
+  if (dockerWorkspaceMode && !/^docker(:.+)?$/.test(runtimeKey ?? "")) {
+    throw new Error("--docker-workspace-mode \u4EC5\u9002\u7528\u4E8E --runtime-key docker[:runtimeId]");
+  }
+  const dockerWorkspaceModeRuntimeMode = runtimeModeFromArgs(args);
+  const dockerWorkspaceModeImplicitLocal = !dockerWorkspaceModeRuntimeMode && (isFullstackCodingAgentRef(rawAgentKey, agentKey) || isLocalCliAgentKey(agentKey) || args.includes("--dangerously-allow-shell"));
+  if (dockerWorkspaceMode && dockerWorkspaceModeRuntimeMode !== "local" && !dockerWorkspaceModeImplicitLocal) {
+    throw new Error(
+      "--docker-workspace-mode \u9700\u8981\u672C\u673A\u6267\u884C\u8DEF\u5F84\uFF1A\u4E0D\u5E26 --local \u65F6 runtimeMode \u89E3\u6790\u4E3A auto\uFF0C\u8BE5\u53C2\u6570\u4F1A\u88AB\u9759\u9ED8\u4E22\u5F03\u5E76\u6539\u8D70\u670D\u52A1\u7AEF\u6D3E\u53D1\u3002\u8BF7\u52A0 --local\uFF1B\u9690\u5F0F local\uFF08fullstack / local-cli agent / --dangerously-allow-shell\uFF09\u540C\u6837\u88AB\u63A5\u53D7\u3002"
+    );
+  }
   if (args.includes("--runtime-key") && !runtimeKey) {
     throw new Error(
       "runtimeKey \u5FC5\u987B\u662F\u975E\u7A7A\u7684 listRuntimes key\uFF08local | server | machine:<machineId> | docker | docker:<runtimeId> | instabox | gcp\uFF09"
@@ -244,6 +259,7 @@ function parseAgentRunArgs(args, options = {}) {
     } : {},
     ...runtimeMode ? { runtimeMode } : !runtimeKey && (fullstackLocalWorkspaceDefault || explicitLocalCliAgentDefault || args.includes("--dangerously-allow-shell")) ? { runtimeMode: "local" } : {},
     ...runtimeKey ? { runtimeKey } : {},
+    ...dockerWorkspaceMode ? { dockerWorkspaceMode } : {},
     background: args.includes("--bg"),
     noStream: args.includes("--no-stream"),
     machineShell: args.includes("--machine-shell"),

package/{chunk-C5VPAHIU.js → chunk-32ZKZET7.js}

@@ -1,6 +1,6 @@
 import {
   createSelector
-} from "./chunk-7BSQK2UC.js";
+} from "./chunk-WRCZXJ4N.js";
 import {
   getAllServers,
   getIsDesktopApp

package/{chunk-XPWGOTBQ.js → chunk-3L2WKC3W.js}

@@ -24,12 +24,6 @@ async function isDrainExhaustedResponse(response) {
   }
 }
 
-// packages/core/positiveFiniteNumberOrFallback.ts
-function parsePositiveFiniteNumberOrFallback(value, fallback) {
-  const parsed = Number(value);
-  return Number.isFinite(parsed) && parsed > 0 ? parsed : fallback;
-}
-
 // packages/core/retryAfterMs.ts
 function normalizeNonNegativeMs(value, fallbackMs) {
   const parsed = Number(value);
@@ -57,6 +51,5 @@ export {
   createDrainExhaustedResponse,
   isDrainExhaustedResponse,
   normalizeNonNegativeMs,
-  parseRetryAfterHeaderMs,
-  parsePositiveFiniteNumberOrFallback
+  parseRetryAfterHeaderMs
 };

package/{chunk-PEO24UB5.js → chunk-3TBHZPNG.js}

@@ -24,9 +24,8 @@ import {
 } from "./chunk-PWTNI4N7.js";
 import {
   hasImageInRuntimeMessages,
-  resolveAgentContextWindow,
   stripImagePartsFromMessages
-} from "./chunk-ANJTRG52.js";
+} from "./chunk-G2WP7VPD.js";
 import {
   clipToolText,
   resolveAgentImageInputSupport,
@@ -52,7 +51,9 @@ import {
   finalizeAccumulatedToolCalls
 } from "./chunk-56GBUMO5.js";
 import {
+  CREDENTIAL_HYGIENE_RULE,
   DELETE_SAFETY_RED_LINE,
+  DISPATCH_BACKEND_POLICY,
   PARALLEL_DISPATCH_DEFAULT_RULE,
   PLATFORM_RISK_CONTROL_RULE,
   TOOL_GUIDED_SECTION_ORDER,
@@ -63,8 +64,9 @@ import {
   detectDispatchIntentFromMessages,
   estimateContextTokens,
   hashStablePrefixContent,
+  resolveResponseGuidelines,
   resolveToolGuidedSections
-} from "./chunk-TYND6RDQ.js";
+} from "./chunk-LV4LV2B4.js";
 import {
   classifyUnparsableToolArgs,
   collectStablePromptPrefix,
@@ -114,10 +116,11 @@ import {
   normalizeUsage,
   readCacheCreationInputTokens,
   readCacheReadInputTokens,
+  resolveAgentContextWindow,
   resolveEmptyAssistantFallbackMessage,
   resolveEmptyAssistantOutcome,
   resolveTruncatedReasoningTailLog
-} from "./chunk-ZWG3C7VI.js";
+} from "./chunk-C6FY7HWI.js";
 import {
   COMPACTION_SUMMARY_SCHEMA_VERSION,
   COMPACTION_SUMMARY_SYSTEM_PROMPT,
@@ -18463,7 +18466,11 @@ async function executeToolCall(args2) {
         ...userInputText ? { userInput: userInputText } : {},
         ...input.runtimeContext ? { runtimeContext: input.runtimeContext } : {},
         ...args2.runToolNames ? { runToolNames: args2.runToolNames } : {},
-        ...input.abortSignal ? { abortSignal: input.abortSignal } : {}
+        ...input.abortSignal ? { abortSignal: input.abortSignal } : {},
+        // 定档信号：来源只由 turn 输入推导，不让模型/参数层参与。
+        // 三级判据见 plan §10——后台运行优先于子 run（后台派发的子 run 仍是
+        // 无人值守的，按 automation 报更保守）。
+        origin: input.background ? "automation" : input.runKind === "subtask" ? "agent" : "chat"
       }, {
         ...input.abortSignal ? { abortSignal: input.abortSignal } : {},
         ...input.runtimeContext ? { runtimeContext: input.runtimeContext } : {}
@@ -19756,18 +19763,38 @@ async function runLocalAgentTurn(input) {
       input.contextBlocks,
       input.contextBlockScopes
     );
+    const responseGuidelines = resolveResponseGuidelines(
+      input.responseViewport ?? "unknown"
+    );
+    const responseGuidelineScopes = [
+      { content: responseGuidelines.behavior, cacheScope: "session" },
+      ...responseGuidelines.presentation.trim().length > 0 ? [
+        {
+          content: responseGuidelines.presentation,
+          cacheScope: "session"
+        }
+      ] : []
+    ];
     const mergedContextBlockScopes = [
       // 删除安全红线：系统层最高优先级约束，位于所有块之前（含身份信息块），
       // owner 要求常驻「根本提示词」的最顶部（2026-09-26 批量误删事故）。
       { content: DELETE_SAFETY_RED_LINE, cacheScope: "session" },
+      // 凭据纪律：与红线同为系统层固定块，紧随其后（四条装配线同源）。
+      { content: CREDENTIAL_HYGIENE_RULE, cacheScope: "session" },
       // 并行是默认：系统层固定块，紧随红线（localLoop 无 static 作用域，用 session 占位，
       // 「最顶」由数组首位保证——与红线同一约定）。
       { content: PARALLEL_DISPATCH_DEFAULT_RULE, cacheScope: "session" },
+      // 派发落点：并行派发纪律的下一层（派到哪个执行后端），沿用 session 占位约定。
+      { content: DISPATCH_BACKEND_POLICY, cacheScope: "session" },
       // 平台风控纪律：无条件系统层块，沿用 session 占位约定。
       { content: PLATFORM_RISK_CONTROL_RULE, cacheScope: "session" },
       { content: buildConsultationModeBlock(), cacheScope: "session" },
       { content: identityBlock, cacheScope: "session" },
       ...guidanceScopes,
+      // 回复行为准则：local 线（CLI 非交互 / 桌面 / TUI）的唯一注入边界。
+      // 行为段恒注入；排版段只在宿主声明了可确认的展示能力时追加一份
+      // （unknown = 拿不到视口信息，不得猜成宽屏或窄屏）。两块同属 session scope。
+      ...responseGuidelineScopes,
       ...callerScopes
     ];
     loopTiming.mark("buildContextBlocks", 0);
@@ -21677,7 +21704,7 @@ function buildLoadSkillExecutor(args2) {
     const { resolveSkillByName } = await import("./skillDiscovery-QC35EQY4.js");
     const resolved = resolveSkillByName(args2.cwd, name);
     if (!resolved) {
-      const { resolveBuiltinSkillByName } = await import("./builtinSkillRegistry-A6VSPJEJ.js");
+      const { resolveBuiltinSkillByName } = await import("./builtinSkillRegistry-H3AY27TR.js");
       const builtin = resolveBuiltinSkillByName(name);
       if (builtin) {
         return {

package/{chunk-YBNHPX4S.js → chunk-4RJJDA57.js}

@@ -9,7 +9,7 @@ import {
 } from "./chunk-CF7PE763.js";
 import {
   loadProfileConfig
-} from "./chunk-TNIX77YM.js";
+} from "./chunk-R5GO3YZP.js";
 import {
   resolveDefaultSpawn
 } from "./chunk-Y6ROFCZO.js";

package/{chunk-X5SUT4CN.js → chunk-4UOEOHY3.js}

@@ -2,14 +2,14 @@ import {
   patch,
   remove,
   write
-} from "./chunk-HP6O6LTV.js";
+} from "./chunk-ZVQHBIWV.js";
 import {
   getRuntimeServerContext
-} from "./chunk-Z6KQDSZW.js";
+} from "./chunk-2SGAI64X.js";
 import {
   asyncThunkCreator,
   buildCreateSlice
-} from "./chunk-7BSQK2UC.js";
+} from "./chunk-WRCZXJ4N.js";
 import {
   applyAgentSecretMigrationUpdates,
   migrateAgentSecrets,
@@ -308,7 +308,7 @@ var slice = createSliceWithThunks({
       const overrides = {};
       if (args.systemPromptOverride !== void 0) overrides.prompt = args.systemPromptOverride;
       if (args.toolsOverride !== void 0) overrides.tools = args.toolsOverride;
-      const { _executeModel } = await import("./_executeModel-5WS2PA62.js");
+      const { _executeModel } = await import("./_executeModel-6BMU3URY.js");
       return _executeModel(
         {
           isStreaming: args.isStreaming ?? false,
@@ -329,7 +329,7 @@ var slice = createSliceWithThunks({
      * - 循环直到无工具调用或触发其他运行时停止条件
      */
     runAgent: create.asyncThunk(async (args, thunkApi) => {
-      const { runAgentClientLoop } = await import("./runAgentClientLoop-5QIGEALK.js");
+      const { runAgentClientLoop } = await import("./runAgentClientLoop-3KHKKBZI.js");
       const { content: loopContent, toolCallCount } = await runAgentClientLoop(
         {
           agentKey: args.agentKey,
@@ -345,7 +345,7 @@ var slice = createSliceWithThunks({
      * 聊天轮次流式 Agent 调用
      */
     streamAgentChatTurn: create.asyncThunk(async (args, thunkApi) => {
-      const { streamAgentChatTurnHandler } = await import("./streamAgentChatTurn-456DWXNY.js");
+      const { streamAgentChatTurnHandler } = await import("./streamAgentChatTurn-DMXXSEVX.js");
       return streamAgentChatTurnHandler(args, thunkApi);
     }),
     /**

package/{chunk-UUPR3TD7.js → chunk-7RF4O6AT.js}

@@ -10,9 +10,7 @@ var OAUTH_PROVIDER_REFS = [
   "antigravity",
   "claude",
   "cursor",
-  "devin",
-  "workbuddy",
-  "workbuddy-ai"
+  "devin"
 ];
 var METERED_API_KEY_REF_PREFIX = "api-key:";
 var normalizeRef = (ref) => typeof ref === "string" ? ref.trim().toLowerCase() : "";

package/{chunk-FPWT3RH2.js → chunk-AJ4V34SG.js}

@@ -1,13 +1,13 @@
 import {
   buildStaticUserPolicyContext,
   resolveSpaceContextPreloadPlan
-} from "./chunk-T6CBQ6BN.js";
+} from "./chunk-INFHX73M.js";
 import {
   fetchReferenceContents,
   mergeReferences,
   resolveReferenceAssets,
   resolveToolsFromKeys
-} from "./chunk-VSOWPETY.js";
+} from "./chunk-2BKUVRC5.js";
 import {
   UI_CARD_ENVELOPE_MAX_BYTES,
   getAllToolRuns,
@@ -20,10 +20,10 @@ import {
   selectSpaceContextLevel,
   selectUserTonePreset,
   uiCardFallback
-} from "./chunk-RUNKPFM5.js";
+} from "./chunk-CDWHHLK5.js";
 import {
   resolveToolBaseUrl
-} from "./chunk-CBHGZRCE.js";
+} from "./chunk-MYOH447Z.js";
 import {
   getFinalPrice,
   getModelPricing,
@@ -32,15 +32,15 @@ import {
 } from "./chunk-YANF2RR4.js";
 import {
   getDocState
-} from "./chunk-OH2M7WEU.js";
+} from "./chunk-EQGFFDNA.js";
 import {
   getTableState
-} from "./chunk-VAZHH6FO.js";
+} from "./chunk-VDEVDGEM.js";
 import {
   PERSONALIZATION_DIALOG_CATEGORY,
   buildPersonalizationDialogPolicyContext,
   selectAllMsgs
-} from "./chunk-H4KACZMG.js";
+} from "./chunk-WTFRBJT5.js";
 import {
   getCurrentSpaceIdRaw,
   getViewMode
@@ -51,12 +51,12 @@ import {
 import {
   read,
   selectById
-} from "./chunk-HP6O6LTV.js";
+} from "./chunk-ZVQHBIWV.js";
 import {
   getSessionSnapshotForState,
   selectIdentityUserBalance,
   selectIdentityUserId
-} from "./chunk-SEJ5OS6F.js";
+} from "./chunk-PXYBUFDB.js";
 import {
   TOOL_PACKS,
   addDefaultSystemCapabilityTools,
@@ -76,7 +76,7 @@ import {
 } from "./chunk-WJZOQR2J.js";
 import {
   extractReferenceKeysFromMessage
-} from "./chunk-ZWG3C7VI.js";
+} from "./chunk-C6FY7HWI.js";
 import {
   getModelContextWindow,
   planContextUsage

package/{chunk-2GGXHQIW.js → chunk-BLVSFYQ3.js}

@@ -1,11 +1,13 @@
+import {
+  parsePositiveFiniteNumberOrFallback
+} from "./chunk-Y5GCAMGP.js";
 import {
   isGatewayHttpStatus
 } from "./chunk-NF64D32W.js";
 import {
   CORE_DRAIN_REASON,
-  parsePositiveFiniteNumberOrFallback,
   parseRetryAfterHeaderMs
-} from "./chunk-XPWGOTBQ.js";
+} from "./chunk-3L2WKC3W.js";
 import {
   asTrimmedLowercaseString
 } from "./chunk-QSJ3HFEF.js";

package/{chunk-SKPPKHD3.js → chunk-BYQOCH75.js}

@@ -1,9 +1,9 @@
 import {
   toolRegistry
-} from "./chunk-XFKZ3MCV.js";
+} from "./chunk-YTXQ2U2X.js";
 import {
   runtime_default
-} from "./chunk-H4KACZMG.js";
+} from "./chunk-WTFRBJT5.js";
 import {
   canonicalizeToolNames
 } from "./chunk-5EBLANFT.js";

package/{chunk-UTIMX333.js → chunk-C3OK72G3.js}

@@ -1,7 +1,7 @@
 import {
   readDbRecord,
   writeAgentRecord
-} from "./chunk-HKT6QXP3.js";
+} from "./chunk-ZEY4NJRE.js";
 import {
   buildSkillSummaryMarker
 } from "./chunk-VF4K2QE6.js";