nolo-cli 0.157.0-alpha.1 → 0.159.0-alpha.1

package/{chunk-SW4S4XYB.js → chunk-2AB2HA4M.js}

@@ -296,21 +296,49 @@ var STRINGS = {
     en: "Usage: /altscreen <on|off>",
     zh: "\u7528\u6CD5\uFF1A/altscreen <on|off>"
   },
-  autoCurrent: {
-    en: "Permission auto-approve: {0}",
-    zh: "\u6743\u9650\u81EA\u52A8\u5316\uFF1A{0}"
-  },
   autoUsage: {
-    en: "Usage: /auto <on|off>",
-    zh: "\u7528\u6CD5\uFF1A/auto <on|off>"
+    en: "Usage: /auto [local|remote] <on|off> \xB7 /auto reset (clear both)",
+    zh: "\u7528\u6CD5\uFF1A/auto [local|remote] <on|off> \xB7 /auto reset\uFF08\u4E24\u6876\u6E05\u96F6\uFF09"
+  },
+  autoStateLine: {
+    en: "Local-run grant: {0} \xB7 Remote-origin shell grant: {1}",
+    zh: "\u672C\u673A run \u6388\u6743\uFF1A{0} \xB7 \u8FDC\u7A0B\u6765\u6E90\u5728\u672C\u673A\u6267\u884C shell \u6388\u6743\uFF1A{1}"
+  },
+  autoStateOnPersisted: {
+    en: "granted (saved)",
+    zh: "\u5DF2\u6388\u6743\uFF08\u5DF2\u4FDD\u5B58\uFF09"
+  },
+  autoStateOff: {
+    en: "ask every time",
+    zh: "\u9010\u6B21\u8BE2\u95EE"
+  },
+  autoKindLocal: {
+    en: "local-run confirmations (destructive shell / outside-workspace files / file writes)",
+    zh: "\u672C\u673A run \u7684\u786E\u8BA4\uFF08\u7834\u574F\u6027\u547D\u4EE4 / \u5DE5\u4F5C\u533A\u5916\u6587\u4EF6 / \u5199\u6587\u4EF6\uFF09"
+  },
+  autoKindRemote: {
+    en: "a remote origin running shell on this machine",
+    zh: "\u8FDC\u7A0B\u6765\u6E90\u5728\u672C\u673A\u6267\u884C shell"
+  },
+  autoGrantOn: {
+    en: "Approved and saved: {0}. That class no longer asks (this session and future starts). Undo with {1}.",
+    zh: "\u5DF2\u6279\u51C6\u5E76\u4FDD\u5B58\uFF1A{0}\u3002\u8BE5\u7C7B\u786E\u8BA4\u4E0D\u518D\u8BE2\u95EE\uFF08\u672C\u6B21\u4E0E\u540E\u7EED\u542F\u52A8\u90FD\u751F\u6548\uFF09\u3002\u64A4\u9500\u7528 {1}\u3002"
   },
-  autoOn: {
-    en: "Permission auto-approve ON \u2014 destructive shell and external-file confirmations will be skipped for this session.",
-    zh: "\u6743\u9650\u81EA\u52A8\u5316\u5DF2\u5F00\u542F\uFF1A\u672C\u4F1A\u8BDD\u5185\u7834\u574F\u6027 shell \u4E0E\u5916\u90E8\u6587\u4EF6\u8BBF\u95EE\u786E\u8BA4\u5C06\u81EA\u52A8\u653E\u884C\u3002"
+  autoGrantOff: {
+    en: "Revoked and saved: {0}. Those confirmations ask again (this session and future starts). Re-enable with {1}.",
+    zh: "\u5DF2\u64A4\u9500\u5E76\u4FDD\u5B58\uFF1A{0}\u3002\u8BE5\u7C7B\u786E\u8BA4\u6062\u590D\u9010\u6B21\u8BE2\u95EE\uFF08\u672C\u4F1A\u8BDD\u4E0E\u540E\u7EED\u542F\u52A8\u90FD\u751F\u6548\uFF09\u3002\u91CD\u65B0\u5F00\u542F\u7528 {1}\u3002"
   },
-  autoOff: {
-    en: "Permission auto-approve OFF \u2014 confirmations will ask again.",
-    zh: "\u6743\u9650\u81EA\u52A8\u5316\u5DF2\u5173\u95ED\uFF1A\u6062\u590D\u9010\u6B21\u786E\u8BA4\u3002"
+  autoReset: {
+    en: "Cleared and saved: both permission buckets are reset \u2014 every confirmation asks again.",
+    zh: "\u5DF2\u6E05\u7A7A\u5E76\u4FDD\u5B58\uFF1A\u672C\u673A\u4E0E\u8FDC\u7A0B\u4E24\u6876\u6388\u6743\u90FD\u6E05\u96F6\uFF0C\u6240\u6709\u786E\u8BA4\u6062\u590D\u9010\u6B21\u8BE2\u95EE\u3002"
+  },
+  autoPersistFailed: {
+    en: "This grant applies to this session only \u2014 it could not be saved to your config (no profile?).",
+    zh: "\u8BE5\u6388\u6743\u4EC5\u672C\u6B21\u4F1A\u8BDD\u6709\u6548\uFF1A\u672A\u80FD\u4FDD\u5B58\u5230\u914D\u7F6E\uFF08\u53EF\u80FD\u8FD8\u6CA1\u6709 profile\uFF09\u3002"
+  },
+  autoPersistedStartup: {
+    en: "Approved from your saved config: {0}. Those confirmations are skipped; undo with /auto reset.",
+    zh: "\u5DF2\u4ECE\u4FDD\u5B58\u7684\u914D\u7F6E\u751F\u6548\u7684\u6388\u6743\uFF1A{0}\u3002\u8FD9\u4E9B\u786E\u8BA4\u5DF2\u88AB\u8DF3\u8FC7\uFF1B\u64A4\u9500\u7528 /auto reset\u3002"
   },
   langSwitched: {
     en: "Language switched to English.",
@@ -580,40 +608,52 @@ var STRINGS = {
     zh: "\uFF08\u2191\u2193 \u79FB\u52A8 \xB7 Enter \u9009\u62E9 \xB7 Esc \u53D6\u6D88\uFF09"
   },
   dialogConfirmTitle: {
-    en: "Confirm destructive shell command",
-    zh: "\u786E\u8BA4\u6267\u884C\u7834\u574F\u6027 shell \u547D\u4EE4"
+    en: "Allow destructive shell commands from local runs?",
+    zh: "\u5141\u8BB8\u672C\u673A run \u6267\u884C\u7834\u574F\u6027 shell \u547D\u4EE4\u5417\uFF1F"
   },
   dialogConfirmBody: {
-    en: "This command may delete or reset user content and needs explicit confirmation before it runs.",
-    zh: "\u8BE5\u547D\u4EE4\u53EF\u80FD\u5220\u9664\u6216\u91CD\u7F6E\u7528\u6237\u5185\u5BB9\uFF0C\u9700\u8981\u7528\u6237\u660E\u786E\u786E\u8BA4\u540E\u624D\u80FD\u6267\u884C\u3002"
+    en: "This command may delete or reset user content \u2014 a local-run destructive shell command.",
+    zh: "\u8BE5\u547D\u4EE4\u53EF\u80FD\u5220\u9664\u6216\u91CD\u7F6E\u7528\u6237\u5185\u5BB9\uFF0C\u5C5E\u4E8E\u672C\u673A run \u7684\u7834\u574F\u6027 shell \u547D\u4EE4\u3002"
   },
   dialogConfirmExternalFileTitle: {
-    en: "Confirm reading a file outside the workspace",
-    zh: "\u786E\u8BA4\u8BFB\u53D6\u5DE5\u4F5C\u533A\u5916\u90E8\u6587\u4EF6"
+    en: "Allow reading files outside the workspace?",
+    zh: "\u5141\u8BB8\u8BFB\u53D6\u5DE5\u4F5C\u533A\u5916\u90E8\u6587\u4EF6\u5417\uFF1F"
   },
   dialogConfirmExternalFileBody: {
-    en: "This path is outside the current workspace. Allow this one-time access, or deny it.",
-    zh: "\u8BE5\u8DEF\u5F84\u4F4D\u4E8E\u5F53\u524D\u5DE5\u4F5C\u533A\u4E4B\u5916\u3002\u786E\u8BA4\u540E\u672C\u6B21\u8BBF\u95EE\u653E\u884C\uFF0C\u5426\u5219\u62D2\u7EDD\u3002"
+    en: "This path is outside the current workspace \u2014 a local-run outside-workspace file access.",
+    zh: "\u8BE5\u8DEF\u5F84\u4F4D\u4E8E\u5F53\u524D\u5DE5\u4F5C\u533A\u4E4B\u5916\uFF0C\u5C5E\u4E8E\u672C\u673A run \u7684\u5DE5\u4F5C\u533A\u5916\u6587\u4EF6\u8BBF\u95EE\u3002"
+  },
+  dialogConfirmFileWriteTitle: {
+    en: "Allow writing files from local runs?",
+    zh: "\u5141\u8BB8\u672C\u673A run \u5199\u5165\u6587\u4EF6\u5417\uFF1F"
+  },
+  dialogConfirmFileWriteBody: {
+    en: "This action writes into the workspace \u2014 a local-run file-write confirmation.",
+    zh: "\u8BE5\u64CD\u4F5C\u4F1A\u5199\u5165\u5DE5\u4F5C\u533A\u6587\u4EF6\uFF0C\u5C5E\u4E8E\u672C\u673A run \u7684\u5199\u6587\u4EF6\u786E\u8BA4\u3002"
+  },
+  dialogConfirmRememberLocal: {
+    en: "Approving covers all three local-run classes (destructive shell / outside-workspace files / file writes) and is saved, so they stop asking \u2014 this session and future starts. Undo with /auto local off or /auto reset.",
+    zh: "\u6279\u51C6\u540E\u672C\u673A run \u7684\u4E09\u7C7B\u786E\u8BA4\uFF08\u7834\u574F\u6027\u547D\u4EE4 / \u5DE5\u4F5C\u533A\u5916\u6587\u4EF6 / \u5199\u6587\u4EF6\uFF09\u90FD\u4E0D\u518D\u8BE2\u95EE\uFF0C\u5E76\u4FDD\u5B58\u5230\u914D\u7F6E\uFF08\u672C\u6B21\u4E0E\u540E\u7EED\u542F\u52A8\u90FD\u751F\u6548\uFF09\u3002\u64A4\u9500\u7528 /auto local off \u6216 /auto reset\u3002"
   },
   dialogConfirmCommandTruncated: {
     en: "(truncated)",
     zh: "\uFF08\u5DF2\u622A\u65AD\uFF09"
   },
   dialogConfirmAllowLabel: {
-    en: "Allow",
-    zh: "\u5141\u8BB8"
+    en: "Approve & remember",
+    zh: "\u6279\u51C6\u5E76\u8BB0\u4F4F"
   },
   dialogConfirmAllowDetail: {
-    en: "execute this time",
-    zh: "\u672C\u6B21\u6267\u884C"
+    en: "stop asking for this class (saved)",
+    zh: "\u540C\u7C7B\u786E\u8BA4\u4E0D\u518D\u8BE2\u95EE\uFF08\u5DF2\u4FDD\u5B58\uFF09"
   },
   dialogConfirmCancelLabel: {
-    en: "Cancel",
-    zh: "\u53D6\u6D88"
+    en: "Reject",
+    zh: "\u62D2\u7EDD"
   },
   dialogConfirmCancelDetail: {
-    en: "abort the operation",
-    zh: "\u4E2D\u6B62\u64CD\u4F5C"
+    en: "do not run it; ask again next time",
+    zh: "\u4E0D\u6267\u884C\uFF0C\u4E0B\u6B21\u4ECD\u4F1A\u8BE2\u95EE"
   },
   // --- Ask choice (ask_user) ------------------------------------------
   askChoiceTitle: {
@@ -859,7 +899,7 @@ var STRINGS = {
       "  Drag a file in        Drop an image file on the terminal to attach it; audio/video transcribes; other files stay paths",
       "  Shift+Enter / Ctrl+J  Insert a newline in the draft",
       "  /mouse <on|off>       Toggle mouse mode (off = drag to select text)",
-      "  /auto <on|off>        Toggle permission auto-approve (skip destructive-shell, external-file & file-write confirms)",
+      "  /auto [local|remote] <on|off>  Approve one permission bucket (local-run confirms / remote-origin shell) so it stops asking; saved to your config. /auto reset clears both",
       "  /shell-revoke         Revoke this session's shell grant; the next shell call re-asks (works while a reply runs; does not interrupt a running command)",
       "  /math <on|off>        Toggle math formula rendering (Unicode transcription)",
       "  /altscreen <on|off>   Toggle the terminal alternate screen (default on; off shares shell scrollback)",
@@ -905,7 +945,7 @@ var STRINGS = {
       "  \u62D6\u5165\u6587\u4EF6              \u628A\u56FE\u7247\u6587\u4EF6\u62D6\u8FDB\u7EC8\u7AEF\u5373\u6210\u4E3A\u9644\u4EF6\uFF1B\u97F3\u89C6\u9891\u81EA\u52A8\u8F6C\u5199\uFF1B\u5176\u4ED6\u6587\u4EF6\u53EA\u7559\u8DEF\u5F84",
       "  Shift+Enter / Ctrl+J  \u5728\u8349\u7A3F\u91CC\u6362\u884C",
       "  /mouse <on|off>       \u5207\u6362\u9F20\u6807\u6A21\u5F0F\uFF08off \u540E\u53EF\u76F4\u63A5\u62D6\u9009\u6587\u672C\uFF09",
-      "  /auto <on|off>        \u5207\u6362\u6743\u9650\u81EA\u52A8\u5316\uFF08\u81EA\u52A8\u653E\u884C\u7834\u574F\u6027 shell\u3001\u5916\u90E8\u6587\u4EF6\u4E0E\u5199\u6587\u4EF6\u786E\u8BA4\uFF09",
+      "  /auto [local|remote] <on|off>  \u6388\u6743\u67D0\u4E00\u6876\uFF08\u672C\u673A run \u786E\u8BA4 / \u8FDC\u7A0B\u6765\u6E90 shell\uFF09\u4E0D\u518D\u9010\u6B21\u8BE2\u95EE\uFF0C\u5E76\u4FDD\u5B58\u5230\u914D\u7F6E\uFF1B/auto reset \u4E24\u6876\u6E05\u96F6",
       "  /shell-revoke         \u64A4\u9500\u672C\u4F1A\u8BDD\u7684 shell \u6267\u884C\u6388\u6743\uFF0C\u4E0B\u4E00\u6B21 shell \u8C03\u7528\u91CD\u65B0\u786E\u8BA4\uFF08\u56DE\u590D\u8FDB\u884C\u4E2D\u4E5F\u53EF\u7528\uFF1B\u4E0D\u4E2D\u65AD\u5DF2\u653E\u884C\u7684\u547D\u4EE4\uFF09",
       "  /math <on|off>        \u5207\u6362\u6570\u5B66\u516C\u5F0F\u6E32\u67D3\uFF08Unicode \u8F6C\u5199\uFF09",
       "  /altscreen <on|off>   \u5207\u6362\u7EC8\u7AEF\u5907\u7528\u5C4F\uFF08\u9ED8\u8BA4 on\uFF1Boff \u6539\u4E3A\u4E0E shell \u5171\u7528\u56DE\u6EDA\uFF09",
@@ -1567,13 +1607,23 @@ Use /switch, /switch list, /switch minimax-m3, or a full agent key.`,
   // 分享 OAuth agent 的 shell 会话授权确认（块 D）：首次 execShell/
   // launchProcess 前弹。必须把三件事说清——这是谁的 agent / 命令在哪台
   // 设备哪个工作区跑 / 任意 shell 可读写该用户可访问的资源。
+  // 子 run 的 per-call shell 确认（远程来源在本机跑一条命令）：与会话授权同一套
+  // 语义，参数为 runId / agentKey / owner / device / workspace / 权限提示。
+  "shellPerCall.title": {
+    en: "Allow a remote origin to run this command on this machine?",
+    zh: "\u5141\u8BB8\u8FDC\u7A0B\u6765\u6E90\u5728\u672C\u673A\u6267\u884C\u8FD9\u6761\u547D\u4EE4\u5417\uFF1F"
+  },
+  "shellPerCall.body": {
+    en: "A remote origin asked to run one shell command on this device.\nRun: {0}\nAgent: {1}\nOwner: {2}\nDevice: {3}\nWorkspace: {4}\n{5}\n\nShell commands can read/write anything this user can access. Approving covers this whole class: remote-origin shell confirmations stop asking one by one (this session and future starts). Undo with /shell-revoke or /auto remote off.",
+    zh: "\u8FDC\u7A0B\u6765\u6E90\u8BF7\u6C42\u5728\u672C\u673A\u6267\u884C\u4E00\u6761 shell \u547D\u4EE4\u3002\nRun\uFF1A{0}\nAgent\uFF1A{1}\n\u4E3B\u4EBA\uFF1A{2}\n\u8BBE\u5907\uFF1A{3}\n\u5DE5\u4F5C\u533A\uFF1A{4}\n{5}\n\n\u4EFB\u610F shell \u547D\u4EE4\u53EF\u8BFB\u5199\u672C\u673A\u8BE5\u7528\u6237\u80FD\u8BBF\u95EE\u7684\u8D44\u6E90\u3002\u6279\u51C6\u540E\u300C\u8FDC\u7A0B\u6765\u6E90\u5728\u672C\u673A\u6267\u884C shell\u300D\u8FD9\u4E00\u7C7B\u786E\u8BA4\u4E0D\u518D\u9010\u6761\u8BE2\u95EE\uFF08\u672C\u6B21\u4E0E\u540E\u7EED\u542F\u52A8\u90FD\u751F\u6548\uFF09\u3002\u64A4\u9500\uFF1A/shell-revoke \u6216 /auto remote off\u3002"
+  },
   "shellGrant.confirmTitle": {
-    en: "Allow shell commands for shared agent {0}?",
-    zh: "\u5141\u8BB8\u5206\u4EAB agent {0} \u6267\u884C shell \u547D\u4EE4\u5417\uFF1F"
+    en: "Allow remote agent {0} to run shell commands on this machine?",
+    zh: "\u5141\u8BB8\u8FDC\u7A0B agent {0} \u5728\u672C\u673A\u6267\u884C shell \u547D\u4EE4\u5417\uFF1F"
   },
   "shellGrant.confirmBody": {
-    en: "Agent {0} (owner {1}) asked to run shell commands on this device.\nDevice: {2} ({3})\nWorkspace: {4}\n\nShell commands can read/write anything this user can access. Allowed for the rest of this session; revoke any time with /shell-revoke.",
-    zh: "\u5206\u4EAB agent {0}\uFF08\u4E3B\u4EBA {1}\uFF09\u8BF7\u6C42\u5728\u672C\u673A\u6267\u884C shell \u547D\u4EE4\u3002\n\u8BBE\u5907\uFF1A{2}\uFF08{3}\uFF09\n\u5DE5\u4F5C\u533A\uFF1A{4}\n\n\u4EFB\u610F shell \u547D\u4EE4\u53EF\u8BFB\u5199\u672C\u673A\u8BE5\u7528\u6237\u80FD\u8BBF\u95EE\u7684\u5168\u90E8\u8D44\u6E90\u3002\u5141\u8BB8\u540E\u5728\u672C\u4F1A\u8BDD\u6301\u7EED\u6709\u6548\uFF1B\u968F\u65F6\u53EF\u7528 /shell-revoke \u64A4\u9500\u3002"
+    en: "Remote agent {0} (owner {1}) requested to run a shell command on this machine.\nDevice: {2} ({3})\nWorkspace: {4}\nCommand: {5}\n\nShell commands can read/write anything this user can access. Approving covers this whole class: remote-origin shell confirmations stop asking one by one (this session and future starts). Undo with /shell-revoke (this session) or /auto remote off (also clears the saved grant).",
+    zh: "\u8FDC\u7A0B agent {0}\uFF08\u4E3B\u4EBA {1}\uFF09\u8BF7\u6C42\u5728\u672C\u673A\u6267\u884C shell \u547D\u4EE4\u3002\n\u8BBE\u5907\uFF1A{2}\uFF08{3}\uFF09\n\u5DE5\u4F5C\u533A\uFF1A{4}\n\u547D\u4EE4\uFF1A{5}\n\n\u4EFB\u610F shell \u547D\u4EE4\u53EF\u8BFB\u5199\u672C\u673A\u8BE5\u7528\u6237\u80FD\u8BBF\u95EE\u7684\u8D44\u6E90\u3002\u6279\u51C6\u540E\u300C\u8FDC\u7A0B\u6765\u6E90\u5728\u672C\u673A\u6267\u884C shell\u300D\u8FD9\u4E00\u7C7B\u786E\u8BA4\u4E0D\u518D\u9010\u6761\u8BE2\u95EE\uFF08\u672C\u6B21\u4E0E\u540E\u7EED\u542F\u52A8\u90FD\u751F\u6548\uFF09\u3002\u64A4\u9500\uFF1A/shell-revoke\uFF08\u672C\u4F1A\u8BDD\uFF09\u6216 /auto remote off\uFF08\u540C\u65F6\u6E05\u9664\u6301\u4E45\u6388\u6743\uFF09\u3002"
   },
   "shellGrant.revoked": {
     en: "[nolo] Shell permission revoked for shared agents in this session.",

package/{chunk-Z6KQDSZW.js → chunk-2SGAI64X.js}

@@ -8,7 +8,7 @@ import {
   noloUploadRequest,
   noloWriteRequest,
   syncWithServers
-} from "./chunk-7BSQK2UC.js";
+} from "./chunk-WRCZXJ4N.js";
 import {
   getAllServers,
   getIsDesktopApp
@@ -17,7 +17,7 @@ import {
   selectIdentityToken,
   selectIdentityUser,
   selectIdentityUserId
-} from "./chunk-SEJ5OS6F.js";
+} from "./chunk-PXYBUFDB.js";
 import {
   asOptionalPositiveFiniteNumber
 } from "./chunk-U6VC4MU4.js";

package/{chunk-C5VPAHIU.js → chunk-32ZKZET7.js}

@@ -1,6 +1,6 @@
 import {
   createSelector
-} from "./chunk-7BSQK2UC.js";
+} from "./chunk-WRCZXJ4N.js";
 import {
   getAllServers,
   getIsDesktopApp

package/{chunk-XPWGOTBQ.js → chunk-3L2WKC3W.js}

@@ -24,12 +24,6 @@ async function isDrainExhaustedResponse(response) {
   }
 }
 
-// packages/core/positiveFiniteNumberOrFallback.ts
-function parsePositiveFiniteNumberOrFallback(value, fallback) {
-  const parsed = Number(value);
-  return Number.isFinite(parsed) && parsed > 0 ? parsed : fallback;
-}
-
 // packages/core/retryAfterMs.ts
 function normalizeNonNegativeMs(value, fallbackMs) {
   const parsed = Number(value);
@@ -57,6 +51,5 @@ export {
   createDrainExhaustedResponse,
   isDrainExhaustedResponse,
   normalizeNonNegativeMs,
-  parseRetryAfterHeaderMs,
-  parsePositiveFiniteNumberOrFallback
+  parseRetryAfterHeaderMs
 };

package/{chunk-MM3662RS.js → chunk-42W7LKBM.js}

@@ -4,7 +4,7 @@ import {
 } from "./chunk-PJNFNEJE.js";
 import {
   resolvePlatformAuthToken
-} from "./chunk-SUKSWFLP.js";
+} from "./chunk-PIG2IUVZ.js";
 import {
   isCompiledBinary,
   resolveCliEntrypointPath

package/{chunk-FPWT3RH2.js → chunk-4CYTNZG3.js}

@@ -1,13 +1,13 @@
 import {
   buildStaticUserPolicyContext,
   resolveSpaceContextPreloadPlan
-} from "./chunk-T6CBQ6BN.js";
+} from "./chunk-INFHX73M.js";
 import {
   fetchReferenceContents,
   mergeReferences,
   resolveReferenceAssets,
   resolveToolsFromKeys
-} from "./chunk-VSOWPETY.js";
+} from "./chunk-RGYDJ352.js";
 import {
   UI_CARD_ENVELOPE_MAX_BYTES,
   getAllToolRuns,
@@ -20,27 +20,27 @@ import {
   selectSpaceContextLevel,
   selectUserTonePreset,
   uiCardFallback
-} from "./chunk-RUNKPFM5.js";
+} from "./chunk-JPSTJHGJ.js";
 import {
   resolveToolBaseUrl
-} from "./chunk-CBHGZRCE.js";
+} from "./chunk-MYOH447Z.js";
 import {
   getFinalPrice,
   getModelPricing,
   getPrices,
   hasExplicitAgentPricing
-} from "./chunk-YANF2RR4.js";
+} from "./chunk-ZPKUJROL.js";
 import {
   getDocState
-} from "./chunk-OH2M7WEU.js";
+} from "./chunk-PIYYH2LE.js";
 import {
   getTableState
-} from "./chunk-VAZHH6FO.js";
+} from "./chunk-NJTXRGCJ.js";
 import {
   PERSONALIZATION_DIALOG_CATEGORY,
   buildPersonalizationDialogPolicyContext,
   selectAllMsgs
-} from "./chunk-H4KACZMG.js";
+} from "./chunk-MNRZCEYU.js";
 import {
   getCurrentSpaceIdRaw,
   getViewMode
@@ -51,12 +51,12 @@ import {
 import {
   read,
   selectById
-} from "./chunk-HP6O6LTV.js";
+} from "./chunk-ZVQHBIWV.js";
 import {
   getSessionSnapshotForState,
   selectIdentityUserBalance,
   selectIdentityUserId
-} from "./chunk-SEJ5OS6F.js";
+} from "./chunk-PXYBUFDB.js";
 import {
   TOOL_PACKS,
   addDefaultSystemCapabilityTools,
@@ -69,18 +69,18 @@ import {
 } from "./chunk-JZX2XLKC.js";
 import {
   projectToolMessageContent
-} from "./chunk-IYBIRCQV.js";
+} from "./chunk-QOYJE6NX.js";
 import {
   attachmentKind,
   normalizeAttachmentPart
 } from "./chunk-WJZOQR2J.js";
 import {
   extractReferenceKeysFromMessage
-} from "./chunk-ZWG3C7VI.js";
+} from "./chunk-GB552UJS.js";
 import {
   getModelContextWindow,
   planContextUsage
-} from "./chunk-2MTE2PEH.js";
+} from "./chunk-MGSNS22D.js";
 import {
   asRecordOrEmpty
 } from "./chunk-KX6YBIHG.js";
@@ -109,7 +109,7 @@ import {
 import {
   getModelConfig,
   getProviderByModelName
-} from "./chunk-TRW43TSC.js";
+} from "./chunk-6EQD4AQL.js";
 import {
   isRecord
 } from "./chunk-KUG52IAP.js";

package/{chunk-L6EQV5OC.js → chunk-4JOZECCA.js}

@@ -27,11 +27,11 @@ import {
   stablePromptCacheKey,
   toOpenAiCompatibleMessages,
   toResponsesTools
-} from "./chunk-6TF64IF2.js";
+} from "./chunk-U6TTTB6V.js";
 import {
   isMeaningfulChatCompletionOutput,
   isMeaningfulResponsesOutput
-} from "./chunk-2MTE2PEH.js";
+} from "./chunk-MGSNS22D.js";
 import {
   clipCompactText
 } from "./chunk-5MMAK75Q.js";
@@ -44,7 +44,7 @@ import {
   resolvePlatformAuthToken,
   resolvePlatformServerUrl,
   resolveProviderTransportDecision
-} from "./chunk-SUKSWFLP.js";
+} from "./chunk-PIG2IUVZ.js";
 import {
   isRecord
 } from "./chunk-KUG52IAP.js";

package/{chunk-YBNHPX4S.js → chunk-4RJJDA57.js}

@@ -9,7 +9,7 @@ import {
 } from "./chunk-CF7PE763.js";
 import {
   loadProfileConfig
-} from "./chunk-TNIX77YM.js";
+} from "./chunk-R5GO3YZP.js";
 import {
   resolveDefaultSpawn
 } from "./chunk-Y6ROFCZO.js";

package/{chunk-B2EGWZJG.js → chunk-5MPS5OOY.js}

@@ -1,7 +1,7 @@
 import {
   generatePkcePair,
   startCallbackServer
-} from "./chunk-7KYVUFDG.js";
+} from "./chunk-YNCJYU4X.js";
 import {
   asOptionalFiniteNumber
 } from "./chunk-WWC7I6TA.js";

package/{chunk-TRW43TSC.js → chunk-6EQD4AQL.js}

@@ -575,6 +575,44 @@ var stepfunStepPlanModels = [
   }
 ];
 
+// packages/integrations/minimax/models.ts
+var minimaxModels = [
+  {
+    name: "MiniMax-M3.1-Flash",
+    displayName: "MiniMax M3.1 Flash",
+    hasVision: true,
+    contextWindow: 1e6,
+    maxOutputTokens: 8192,
+    jsonOutput: true,
+    fnCall: true,
+    supportsTool: true,
+    price: {
+      input: toCnyCredits(1),
+      output: toCnyCredits(4),
+      inputCacheHit: toCnyCredits(0.1)
+    },
+    provider: "minimax",
+    description: "MiniMax \u65B0\u4E00\u4EE3 Flash \u65D7\u8230\u6A21\u578B\uFF0C1M \u4E0A\u4E0B\u6587\uFF0C\u539F\u751F\u591A\u6A21\u6001\u89C6\u89C9\u7406\u89E3\uFF0C\u9488\u5BF9 Agent\u3001\u4EE3\u7801\u4E0E\u5DE5\u5177\u8C03\u7528\u6DF1\u5EA6\u4F18\u5316\u3002"
+  },
+  {
+    name: "MiniMax-M3",
+    displayName: "MiniMax M3",
+    hasVision: true,
+    contextWindow: 1e6,
+    maxOutputTokens: 8192,
+    jsonOutput: true,
+    fnCall: true,
+    supportsTool: true,
+    price: {
+      input: toCnyCredits(2.1),
+      output: toCnyCredits(8.4),
+      inputCacheHit: toCnyCredits(0.42)
+    },
+    provider: "minimax",
+    description: "MiniMax M3 \u65D7\u8230\u591A\u6A21\u6001\u63A8\u7406\u6A21\u578B\uFF0C1M \u4E0A\u4E0B\u6587\uFF0C\u652F\u6301\u6587\u672C\u4E0E\u89C6\u89C9\u7406\u89E3\u3001\u5DE5\u5177\u8C03\u7528\u3002"
+  }
+];
+
 // packages/integrations/commandcode/models.ts
 var commandCodeModels = [
   // ── DeepSeek ──
@@ -3297,7 +3335,8 @@ var MODEL_MAP = {
   zai: zaiModels,
   qwen: qwenAllModels,
   moonshot: moonshotAllModels,
-  stepfun: stepfunAllModels
+  stepfun: stepfunAllModels,
+  minimax: minimaxModels
 };
 var MODEL_LOOKUP_MAP = {
   anthropic: [...anthropicModels, ...anthropicOAuthModels],
@@ -3539,6 +3578,7 @@ export {
   kimiCodeModels,
   stepfunModels,
   stepfunStepPlanModels,
+  minimaxModels,
   commandCodeModels,
   opencodeGoModels,
   DEFAULT_REASONING_EFFORT,

package/{chunk-UUPR3TD7.js → chunk-7RF4O6AT.js}

@@ -10,9 +10,7 @@ var OAUTH_PROVIDER_REFS = [
   "antigravity",
   "claude",
   "cursor",
-  "devin",
-  "workbuddy",
-  "workbuddy-ai"
+  "devin"
 ];
 var METERED_API_KEY_REF_PREFIX = "api-key:";
 var normalizeRef = (ref) => typeof ref === "string" ? ref.trim().toLowerCase() : "";

package/{chunk-ZD2BLOY6.js → chunk-B5MSFO6R.js}

@@ -6,7 +6,7 @@ import {
 } from "./chunk-P5QACQDK.js";
 import {
   clearCliLocalRuntimePreparedAgentCache
-} from "./chunk-EJU23ST5.js";
+} from "./chunk-GJNYJH7O.js";
 import {
   readCredentialAvailability
 } from "./chunk-6MXDOUMH.js";
@@ -19,7 +19,7 @@ import {
   resolveAgentRecordFromHybridStore,
   sanitizeAgentRecordForCliOutput,
   writeAgentRecord
-} from "./chunk-HKT6QXP3.js";
+} from "./chunk-O4KVUI4W.js";
 import {
   resolveCliAgentKeyInput
 } from "./chunk-NBTY7YJF.js";
@@ -244,7 +244,7 @@ async function runAgentCreateCommand(args, deps = {}) {
     let verifyResult;
     if (parsed.verify) {
       try {
-        const { verifyCustomProvider } = await import("./agentProviderCommands-X2HQE6HY.js");
+        const { verifyCustomProvider } = await import("./agentProviderCommands-CUBOAVPB.js");
         const rec = built.nextRecord;
         verifyResult = await verifyCustomProvider({
           providerUrl: rec.customProviderUrl,

package/{chunk-2GGXHQIW.js → chunk-BLVSFYQ3.js}

@@ -1,11 +1,13 @@
+import {
+  parsePositiveFiniteNumberOrFallback
+} from "./chunk-Y5GCAMGP.js";
 import {
   isGatewayHttpStatus
 } from "./chunk-NF64D32W.js";
 import {
   CORE_DRAIN_REASON,
-  parsePositiveFiniteNumberOrFallback,
   parseRetryAfterHeaderMs
-} from "./chunk-XPWGOTBQ.js";
+} from "./chunk-3L2WKC3W.js";
 import {
   asTrimmedLowercaseString
 } from "./chunk-QSJ3HFEF.js";

package/{chunk-UTIMX333.js → chunk-C3WXTFRP.js}

@@ -1,7 +1,7 @@
 import {
   readDbRecord,
   writeAgentRecord
-} from "./chunk-HKT6QXP3.js";
+} from "./chunk-O4KVUI4W.js";
 import {
   buildSkillSummaryMarker
 } from "./chunk-VF4K2QE6.js";

package/{chunk-ROPSATAB.js → chunk-CON6SI7N.js}

@@ -7,7 +7,7 @@ import {
 import {
   patch,
   selectById
-} from "./chunk-HP6O6LTV.js";
+} from "./chunk-ZVQHBIWV.js";
 
 // packages/chat/dialog/actions/setDialogExtraReferencesAction.ts
 var setDialogExtraReferencesAction = async (extraReferences, thunkApi) => {

package/{chunk-4Z245KOA.js → chunk-DC3SZCRR.js}

@@ -1295,7 +1295,7 @@ var SECRETS_MANAGER_SKILL_DEFINITIONS = {
 1. **\u7EDD\u5BF9\u5B58\u50A8\u8DEF\u5F84**\uFF1A\`$NOLO_HOME/credentials/secrets.json\`\uFF08\u672A\u8BBE \`NOLO_HOME\` \u65F6\u56DE\u843D \`~/.nolo/credentials/secrets.json\`\uFF09\uFF0C\u6743\u9650\u4E25\u683C\u9501\u5B9A\u4E3A \`0600\`\uFF0C\u7236\u76EE\u5F55 \`0700\`\u3002
 2. **\u7981\u6B62\u56DE\u663E\u539F\u5219**\uFF1A
    - Agent \u65E0\u8BBA\u5728\u4EFB\u4F55\u60C5\u51B5\u4E0B\uFF0C**\u7EDD\u4E0D\u5728\u5BF9\u8BDD\u6D88\u606F\u3001\u65E5\u5FD7\u6216\u62A5\u544A\u4E2D\u6253\u5370\u4EFB\u4F55\u5BC6\u94A5\u660E\u6587**\uFF1B
-   - \u67E5\u770B\u5DF2\u4FDD\u5B58\u7684\u51ED\u636E\u4E00\u5F8B\u4F7F\u7528 \`nolo secret list\`\uFF08\u4EC5\u8F93\u51FA\u51ED\u636E\u540D\u79F0\uFF0C\u4E0D\u8F93\u51FA\u5185\u5BB9\uFF09\uFF1B
+   - \u67E5\u770B\u5DF2\u4FDD\u5B58\u7684\u51ED\u636E\u4E00\u5F8B\u4F7F\u7528 \`nolo secret list\`\uFF08\u4EBA\u7C7B\u53EF\u8BFB\uFF09\u6216 \`nolo secret list --json\`\uFF08\u673A\u5668\u53EF\u8BFB\uFF0C\u4EC5\u8F93\u51FA\u51ED\u636E\u540D\u79F0\u4E0E\u5F62\u6001\uFF0C\u4E0D\u8F93\u51FA\u5185\u5BB9\uFF09\uFF1B
    - Agent **\u4E0D\u5F97**\u6267\u884C \`nolo secret get\`\uFF08\u8BE5\u5B50\u547D\u4EE4\u53EA\u4F9B\u4EBA\u7C7B\u8C03\u8BD5\uFF09\uFF0C\u53EA\u5141\u8BB8 \`nolo secret run --with\`\u3002
 3. **\u7528\u6237\u6388\u6743\u95E8\u7981**\uFF1A
    - \u53EA\u6709\u5F53\u7528\u6237\u5728\u5BF9\u8BDD\u4E2D\u660E\u786E\u63D0\u5230\u201C\u5141\u8BB8\u83B7\u53D6 / \u4F7F\u7528\u672C\u5730\u4FDD\u5B58\u7684 xxx \u51ED\u636E\u201D\u65F6\uFF0CAgent \u624D\u88AB\u6388\u6743\u8C03\u7528\u8BE5\u51ED\u636E\uFF1B\u672A\u83B7\u7528\u6237\u660E\u786E\u6307\u793A\u65F6\uFF0C\u4E0D\u5F97\u8BFB\u53D6\u6216\u6CE8\u5165\u3002
@@ -1305,6 +1305,8 @@ var SECRETS_MANAGER_SKILL_DEFINITIONS = {
 \`\`\`bash
 # 1. \u67E5\u770B\u5DF2\u6709\u79D8\u5BC6\uFF08\u5B89\u5168\uFF0C\u4EC5\u8F93\u51FA\u540D\u79F0\u5217\u8868\uFF0C\u7EDD\u4E0D\u6253\u5370\u5BC6\u94A5\u503C\uFF09
 nolo secret list
+# \u673A\u5668\u53EF\u8BFB\u7248\uFF08\u4EC5\u540D\u79F0\u4E0E\u5F62\u6001\uFF0Cagent \u7528\u5B83\u6765\u53D1\u73B0"\u6211\u4EEC\u6709\u6CA1\u6709\u76F8\u5173\u51ED\u636E"\uFF09
+nolo secret list --json
 
 # 2. \u8BBE\u7F6E\u6216\u66F4\u65B0\u51ED\u636E\uFF08\u652F\u6301\u5B57\u7B26\u4E32\u6216 JSON \u5BF9\u8C61\uFF09
 nolo secret set amo '{"issuer":"user:<account-id>:<key-id>","secret":"<key>"}'
@@ -1338,7 +1340,9 @@ function buildSecretsManagerSkillConfig(slug) {
     id: buildSecretsManagerSkillId(slug),
     name: seed.title,
     description: seed.description,
-    triggerMode: "manual"
+    // 合法枚举是 explicit / required / recommended；"manual" 会被
+    // normalizeSkillEnumValue 静默丢弃，导致 front-matter 的 triggerMode 为空。
+    triggerMode: "explicit"
   };
 }
 function buildSecretsManagerSkillContentBySlug(slug) {

package/{chunk-X5SUT4CN.js → chunk-DD7BZWJ6.js}

@@ -2,14 +2,14 @@ import {
   patch,
   remove,
   write
-} from "./chunk-HP6O6LTV.js";
+} from "./chunk-ZVQHBIWV.js";
 import {
   getRuntimeServerContext
-} from "./chunk-Z6KQDSZW.js";
+} from "./chunk-2SGAI64X.js";
 import {
   asyncThunkCreator,
   buildCreateSlice
-} from "./chunk-7BSQK2UC.js";
+} from "./chunk-WRCZXJ4N.js";
 import {
   applyAgentSecretMigrationUpdates,
   migrateAgentSecrets,
@@ -308,7 +308,7 @@ var slice = createSliceWithThunks({
       const overrides = {};
       if (args.systemPromptOverride !== void 0) overrides.prompt = args.systemPromptOverride;
       if (args.toolsOverride !== void 0) overrides.tools = args.toolsOverride;
-      const { _executeModel } = await import("./_executeModel-5WS2PA62.js");
+      const { _executeModel } = await import("./_executeModel-JISIM4PS.js");
       return _executeModel(
         {
           isStreaming: args.isStreaming ?? false,
@@ -329,7 +329,7 @@ var slice = createSliceWithThunks({
      * - 循环直到无工具调用或触发其他运行时停止条件
      */
     runAgent: create.asyncThunk(async (args, thunkApi) => {
-      const { runAgentClientLoop } = await import("./runAgentClientLoop-5QIGEALK.js");
+      const { runAgentClientLoop } = await import("./runAgentClientLoop-MLEVVWUH.js");
       const { content: loopContent, toolCallCount } = await runAgentClientLoop(
         {
           agentKey: args.agentKey,
@@ -345,7 +345,7 @@ var slice = createSliceWithThunks({
      * 聊天轮次流式 Agent 调用
      */
     streamAgentChatTurn: create.asyncThunk(async (args, thunkApi) => {
-      const { streamAgentChatTurnHandler } = await import("./streamAgentChatTurn-456DWXNY.js");
+      const { streamAgentChatTurnHandler } = await import("./streamAgentChatTurn-J7HYND6V.js");
       return streamAgentChatTurnHandler(args, thunkApi);
     }),
     /**