nolo-cli 0.168.0-alpha.2 → 0.169.0-alpha.2

package/{chunk-6M5BXJK5.js → chunk-O2AY3CVI.js}

@@ -9,7 +9,7 @@ import {
   resolveRawAgentInput,
   resolveServerUrl,
   writeUsage
-} from "./chunk-XFTJICLD.js";
+} from "./chunk-DHNQA4VI.js";
 import {
   getReadableCliDb
 } from "./chunk-62TBKWTV.js";
@@ -31,7 +31,7 @@ import {
   resolveFileWriteGateEnabled,
   resolveLocalUserId,
   validateInstaboxWorkspaceSelection
-} from "./chunk-2BWYN4N6.js";
+} from "./chunk-WC7UXON2.js";
 import {
   clearCredentialAvailability,
   readEffectiveCredentialEntry,
@@ -64,7 +64,7 @@ import {
 import {
   readDbRecord,
   resolveAgentRecordFromHybridStore
-} from "./chunk-N6EMFRPR.js";
+} from "./chunk-KJETBEEN.js";
 import {
   isLocalCliAgentKey
 } from "./chunk-NBTY7YJF.js";
@@ -79,14 +79,14 @@ import {
 } from "./chunk-BMQ2MJUK.js";
 import {
   resolveCliLocalRuntimeKeyCapability
-} from "./chunk-TQYYH5UI.js";
+} from "./chunk-QW6SSF7V.js";
 import {
   isTransientFetchError
 } from "./chunk-KFHREHUQ.js";
 import {
   parseUiCard,
   uiCardFallback
-} from "./chunk-NH7672YN.js";
+} from "./chunk-WLPUUBFR.js";
 import {
   isGatewayHttpStatus
 } from "./chunk-NF64D32W.js";
@@ -95,7 +95,7 @@ import {
   chooseMemoryOwners,
   loadMemoryCandidatesFromDb,
   resolveAgentMemoryPolicy
-} from "./chunk-FK55VK7X.js";
+} from "./chunk-46OQD3AP.js";
 import {
   API_REPORTED_COST_MULTIPLIER,
   estimateMessagesTokens,
@@ -103,7 +103,7 @@ import {
   resolveAgentContextWindow,
   resolveOccupancy,
   resolveOccupancyWindow
-} from "./chunk-T6CYTRP4.js";
+} from "./chunk-CMRP4XHV.js";
 import {
   buildSkillDiscoveryContextLayer
 } from "./chunk-AU7AXHUL.js";
@@ -115,7 +115,7 @@ import {
   LOCAL_AGENT_CONFIG_MISSING_CODE,
   LOCAL_TURN_ABORTED_CODE,
   readActionGate
-} from "./chunk-JICBK5VC.js";
+} from "./chunk-2DXGW4UO.js";
 import {
   resolveAgentRuntimeConfigFromRecord
 } from "./chunk-CEXJ6Y3C.js";
@@ -182,13 +182,14 @@ import {
   popSingleQueueMessage,
   readRunRecord,
   recordRunResultHeaderMeta,
+  reportRunProcessIdentity,
   resolveResultServerMeta,
   resolveRunQueuePath,
   resolveRunsDir,
   serverOriginForDialog,
   settleRunTerminalAuthoritatively,
   spawnLocalBackgroundRun
-} from "./chunk-LPO6AMQU.js";
+} from "./chunk-URW5UM6Y.js";
 import {
   formatAgentListCard,
   formatFinishedRunCard,
@@ -213,7 +214,7 @@ import {
 } from "./chunk-EYLGAEB4.js";
 import {
   resolveAuthToken
-} from "./chunk-A7GB5UGH.js";
+} from "./chunk-WACI5I6V.js";
 import {
   readPipeText,
   spawnProcess
@@ -11373,7 +11374,7 @@ function isBalanceExhaustedError(error) {
 
 // packages/cli/client/agentRun.ts
 async function loadRunLocalAgentTurn() {
-  const { runLocalAgentTurn } = await import("./agentRuntimeLocal-YDRO43VQ.js");
+  const { runLocalAgentTurn } = await import("./agentRuntimeLocal-7EZYBR6X.js");
   return runLocalAgentTurn;
 }
 var stripDebugNoise = (s) => s.replace(/\s*raw="[\s\S]*"/g, "").replace(/\s*raw=\S+/g, "").replace(/\s*headers=\[[^\]]*\]/g, "").replace(/\s*headers=\S+/g, "").trim();
@@ -15600,6 +15601,7 @@ async function runAgentRunCommand(args, deps) {
   const nowMs = () => deps.now ? deps.now().getTime() : Date.now();
   const childRunId = env.NOLO_AGENT_RUN_ID;
   const hasRegistry = typeof childRunId === "string" && childRunId.length > 0;
+  if (hasRegistry) reportRunProcessIdentity(childRunId, { env, homedir: deps.homedir, fs: deps.fs, now: deps.now });
   const processExit = deps.processExit ?? ((code) => process.exit(code));
   const stallTimeoutMs = resolvePositiveMs(
     deps.stallTimeoutMs ?? env.NOLO_LOCAL_RUN_STALL_TIMEOUT_MS,

package/{chunk-TQYYH5UI.js → chunk-QW6SSF7V.js}

@@ -20,7 +20,7 @@ import {
   toolRunUpdated,
   uiCardFallback,
   waitForAbortableDelay
-} from "./chunk-NH7672YN.js";
+} from "./chunk-WLPUUBFR.js";
 import {
   isGatewayHttpStatus
 } from "./chunk-NF64D32W.js";
@@ -64,7 +64,7 @@ import {
 } from "./chunk-VF4K2QE6.js";
 import {
   createDocState
-} from "./chunk-6M2XWWM3.js";
+} from "./chunk-HZMWJUSD.js";
 import {
   addMemberSpace,
   fetchAuthoritativeRemoteSpace,
@@ -79,7 +79,7 @@ import {
 } from "./chunk-BAWAKW7X.js";
 import {
   createDialogAction
-} from "./chunk-FK55VK7X.js";
+} from "./chunk-46OQD3AP.js";
 import {
   setDialogExtraReferencesAction
 } from "./chunk-IF7V3CBU.js";
@@ -102,7 +102,7 @@ import {
   updateContentCategory,
   updateContentTitle,
   writeStoredCollapsedCategories
-} from "./chunk-DWMLT22B.js";
+} from "./chunk-URO44BCD.js";
 import {
   buildDatabaseFileContentUrl,
   deleteDialog,
@@ -115,7 +115,7 @@ import {
   selectMsgById,
   uiAskChoiceFunc,
   uiAskChoiceFunctionSchema
-} from "./chunk-T6CYTRP4.js";
+} from "./chunk-CMRP4XHV.js";
 import {
   buildMediaToolConfirmation,
   normalizeMediaConfirmExecutionRevision
@@ -126,7 +126,7 @@ import {
   runLlm,
   streamAgentChatTurn,
   updateAgent
-} from "./chunk-RG5K3ULI.js";
+} from "./chunk-XLBQQ5SB.js";
 import {
   getCurrentSpaceId,
   getCurrentSpaceIdRaw,
@@ -3882,7 +3882,7 @@ async function deleteDialogsFunc(args, thunkApi) {
   const deletedDialogIds = [];
   const deletedDialogKeys = [];
   const failures = [];
-  const { deleteDialog: deleteDialog2 } = await import("./dialogSlice-AGUU6TEF.js");
+  const { deleteDialog: deleteDialog2 } = await import("./dialogSlice-WZCWWYR3.js");
   for (const target of targets) {
     try {
       await thunkApi.dispatch(deleteDialog2(target.dbKey)).unwrap();
@@ -18563,7 +18563,7 @@ async function updateDocFunc(args, thunkApi) {
       updated_at: (/* @__PURE__ */ new Date()).toISOString()
     };
     await dispatch(write({ data: updatedPageData, customKey: id })).unwrap();
-    const { getDocState, applyExternalDocUpdate } = await import("./docStore-W72REPIB.js");
+    const { getDocState, applyExternalDocUpdate } = await import("./docStore-PTSCGC6T.js");
     if (getDocState().pageKey === id) {
       applyExternalDocUpdate({
         slateData: finalSlateData,

package/{chunk-DLV3H464.js → chunk-RV4DPEAM.js}

@@ -19,7 +19,7 @@ import {
 } from "./chunk-FDLDMJTM.js";
 import {
   resolveAuthTokenFromEnv
-} from "./chunk-A7GB5UGH.js";
+} from "./chunk-WACI5I6V.js";
 import {
   DEFAULT_NOLO_SERVER_URL
 } from "./chunk-OLZBQWZU.js";

package/{chunk-KYFGIHVF.js → chunk-TOUKACDK.js}

@@ -475,26 +475,42 @@ var AGENT_CONFIRM_BOUNDARY = `--- \u786E\u8BA4\u8FB9\u754C ---
 - \u6D89\u53CA\u4E0D\u53EF\u9006\u64CD\u4F5C\uFF08\u4FEE\u6539\u6587\u4EF6\u3001\u5220\u9664\u6570\u636E\u3001\u53D1\u9001\u6D88\u606F\u3001\u751F\u6210\u6B63\u5F0F\u6587\u4EF6\u3001\u6267\u884C\u4EA4\u6613\uFF09\u6216\u9AD8\u6210\u672C\u52A8\u4F5C\uFF08\u5927\u89C4\u6A21\u91CD\u6784/\u957F\u65F6\u8FD0\u884C/\u5927\u91CF token\uFF09\u65F6\uFF0C\u4F18\u5148\u9884\u89C8\u6216\u5411\u7528\u6237\u786E\u8BA4\uFF1B\u5DE5\u5177\u8FD4\u56DE"\u9884\u89C8/\u5F85\u786E\u8BA4"\u65F6\u6682\u505C\uFF0C\u7B49\u660E\u786E\u786E\u8BA4\u518D\u7EE7\u7EED\uFF0C\u672A\u786E\u8BA4\u524D\u4E0D\u8FDE\u7EED\u53D1\u591A\u6B21\u7834\u574F\u6027\u4FEE\u6539\u3002
 - \u6536\u5230\u300C\u5B50\u5BF9\u8BDD\u7981\u6B62\u518D\u521B\u5EFA\u5B59\u5BF9\u8BDD\u300D\uFF1D\u4F60\u5DF2\u662F\u5B50\u5BF9\u8BDD\uFF0C\u7981\u6B62\u518D\u6D3E\u53D1\uFF0C\u628A\u7ED3\u679C\u8FD4\u56DE\u7236\u5BF9\u8BDD\u5373\u53EF\u3002
 - **\u76EE\u6807\u8303\u56F4\u63A7\u5236**\uFF1A\u53D1\u73B0\u539F\u4EA4\u4ED8\u7269\u4E0D\u80FD\u5B9E\u73B0\uFF0C\u4E0D\u5F97\u81EA\u884C\u7F29\u6210\u6587\u6848/\u624B\u52A8\u9000\u8DEF\u540E\u5BA3\u79F0\u5B8C\u6210\uFF1B\u9648\u8FF0\u5DF2\u8BC1\u5B9E\u9650\u5236\u3001\u539F\u76EE\u6807\u5DEE\u8DDD\u3001\u63A8\u8350\u66FF\u4EE3\u53CA\u5F71\u54CD\uFF0C\u7F29\u51CF\u7528\u6237\u53EF\u89C1\u80FD\u529B\u9700\u660E\u786E\u786E\u8BA4\uFF1B\u540C\u8303\u56F4\u6280\u672F\u7EC6\u8282\u4E0D\u9700\u95EE\uFF0C\u5DF2\u6388\u6743\u4E0D\u53D8\u8303\u56F4\u7EE7\u7EED\u63A8\u8FDB\uFF0C\u9632\u53D8\u6210\u4E8B\u4E8B\u786E\u8BA4\u3002`;
-var AGENT_COLLABORATION_INSTRUCTIONS = [
-  AGENT_COLLABORATION_VALUE_AND_METHOD,
-  AGENT_DELEGATE_FIRST_DEFAULT,
-  AGENT_PLATFORM_CREDITS_GATE,
-  AGENT_DISPATCH_PRECHECK,
-  AGENT_COLLABORATION_FULL_PROTOCOL,
-  AGENT_COMMIT_REVIEW_GATE,
-  AGENT_CONFIRM_BOUNDARY
-].join("\n\n");
-var AGENT_COLLABORATION_MIN_INSTRUCTIONS = [
-  `--- \u591A Agent \u6D3E\u53D1\uFF08\u6700\u5C0F\u534F\u8BAE\uFF09 ---
+var AGENT_COLLABORATION_MIN_DISPATCH = `--- \u591A Agent \u6D3E\u53D1\uFF08\u6700\u5C0F\u534F\u8BAE\uFF09 ---
 - startAgentRun \u542F\u52A8\u5B50 Agent\uFF1A\u7701\u7565 agentKey\uFF08\u6216\u4F20 'self'\uFF09\u81EA\u52A8\u6D3E\u53D1\u81EA\u8EAB\u6267\u884C\u7EC6\u5206\u5B50\u4EFB\u52A1\uFF1B\u6D3E\u5176\u4ED6 Agent \u65F6 agentKey \u5FC5\u987B\u539F\u6837\u7167\u6284 listAgents \u8FD4\u56DE\u7684 agentKey \u5B57\u6BB5\uFF08\u4E0D\u62FC\u63A5/\u4E0D\u63A8\u65AD/\u4E0D\u6362\u683C\u5F0F/\u4E0D\u4F20 name\uFF09\uFF1Bwait:false\uFF08\u9ED8\u8BA4\uFF09\u5F02\u6B65\u8FD4\u56DE runId\uFF0C\u6D3E\u53D1\u540E\u7ACB\u5373\u6536\u5C3E\u7B49\u7EC8\u6001\u901A\u77E5\uFF0C\u7981\u6B62\u8F6E\u8BE2\uFF1B\u5E76\u884C\u6D3E\u53D1\u7528\u540C\u4E00 batchId \u5F52\u7EC4\u3002
 - \u5E76\u884C\u6247\u51FA\uFF1A\u540C\u4E00\u51ED\u8BC1\u9ED8\u8BA4\u5141\u8BB8\u5E76\u53D1\uFF08\u53D7\u670D\u52A1\u7AEF\u51C6\u5165\u9884\u7B97\u7EA6\u675F\uFF1B\u6CE8\u610F\u4E0A\u6E38 429 \u9650\u6D41\uFF0C\u5FC5\u8981\u65F6\u964D\u4F4E\u5E76\u53D1\u6216\u6362\u901A\u9053\uFF09\uFF1B\u82E5\u9700\u5206\u6563\u4E0A\u6E38\u538B\u529B\uFF0C\u4F18\u5148\u8DE8\u4E0D\u540C credentialGroup \u6D3E\u53D1\uFF1Bcredentialed:false\uFF08\u51ED\u8BC1\u5F52\u5C5E\u672A\u77E5\uFF09\u7684 agent \u4E0D\u662F\u300C\u72EC\u7ACB\u51ED\u8BC1\u300D\uFF0C\u540C\u6279\u5E76\u53D1\u4F1A\u88AB\u5B88\u536B\u62D2\u7EDD\uFF0C\u9700\u4E32\u884C\u6D3E\u53D1\u6216\u663E\u5F0F allowUnknownCredential \u786E\u8BA4\u98CE\u9669\u3002
-- \u672C\u8F6E\u672A\u6CE8\u5165\u5B8C\u6574\u7F16\u6392\u534F\u8BAE\uFF08\u65E0\u6D3E\u53D1\u610F\u56FE\uFF09\uFF1B\u5982\u786E\u9700\u591A Agent \u7F16\u6392\uFF0C\u6309\u672C\u6700\u5C0F\u534F\u8BAE\u4E0E startAgentRun \u5DE5\u5177\u63CF\u8FF0\u6267\u884C\uFF0C\u5B89\u5168\u786C\u95E8\u89C1\u4E0B\u3002`,
-  AGENT_DELEGATE_FIRST_DEFAULT,
-  AGENT_PLATFORM_CREDITS_GATE,
-  AGENT_DISPATCH_PRECHECK,
-  AGENT_COMMIT_REVIEW_GATE,
-  AGENT_CONFIRM_BOUNDARY
-].join("\n\n");
+- \u672C\u8F6E\u672A\u6CE8\u5165\u5B8C\u6574\u7F16\u6392\u534F\u8BAE\uFF08\u65E0\u6D3E\u53D1\u610F\u56FE\uFF09\uFF1B\u5982\u786E\u9700\u591A Agent \u7F16\u6392\uFF0C\u6309\u672C\u6700\u5C0F\u534F\u8BAE\u4E0E startAgentRun \u5DE5\u5177\u63CF\u8FF0\u6267\u884C\uFF0C\u5B89\u5168\u786C\u95E8\u89C1\u4E0B\u3002`;
+function isCommitReviewGateEnabled(opts) {
+  if (opts?.enableCommitReviewGate !== void 0) {
+    return opts.enableCommitReviewGate;
+  }
+  if (typeof process !== "undefined" && process.env?.NOLO_DISABLE_COMMIT_REVIEW_GATE === "1") {
+    return false;
+  }
+  return true;
+}
+function buildAgentCollaborationInstructions(opts) {
+  const isFull = opts?.dispatchIntent === true;
+  const gateEnabled = isCommitReviewGateEnabled(opts);
+  const sections = isFull ? [
+    AGENT_COLLABORATION_VALUE_AND_METHOD,
+    AGENT_DELEGATE_FIRST_DEFAULT,
+    AGENT_PLATFORM_CREDITS_GATE,
+    AGENT_DISPATCH_PRECHECK,
+    AGENT_COLLABORATION_FULL_PROTOCOL,
+    ...gateEnabled ? [AGENT_COMMIT_REVIEW_GATE] : [],
+    AGENT_CONFIRM_BOUNDARY
+  ] : [
+    AGENT_COLLABORATION_MIN_DISPATCH,
+    AGENT_DELEGATE_FIRST_DEFAULT,
+    AGENT_PLATFORM_CREDITS_GATE,
+    AGENT_DISPATCH_PRECHECK,
+    ...gateEnabled ? [AGENT_COMMIT_REVIEW_GATE] : [],
+    AGENT_CONFIRM_BOUNDARY
+  ];
+  return sections.join("\n\n");
+}
+var AGENT_COLLABORATION_INSTRUCTIONS = buildAgentCollaborationInstructions({ dispatchIntent: true });
+var AGENT_COLLABORATION_MIN_INSTRUCTIONS = buildAgentCollaborationInstructions({ dispatchIntent: false });
 var CONVERSATION_INTERACTION_INSTRUCTIONS = `--- \u5BF9\u8BDD\u5185\u4EA4\u4E92\uFF08show_interaction\uFF09 ---
 \u201C\u5C55\u793A\u7ED3\u6784\u5316\u5185\u5BB9 + \u8BA9\u7528\u6237\u9009\u62E9\u201D\u540C\u65F6\u51FA\u73B0\u65F6\uFF08\u591A\u65B9\u6848\u5BF9\u6BD4\u8981\u7528\u6237\u9009\u4E00\u4E2A\u3001\u5173\u952E\u6307\u6807\u914D\u5408\u786E\u8BA4\u9879\uFF09\uFF0C\u8D70 show_interaction\uFF0C\u5185\u5BB9\u4E0E\u9009\u9879\u5728\u540C\u4E00\u5757\u5448\u73B0\u4E14\u63D0\u4EA4\u540E\u539F\u4F4D\u53EA\u8BFB\uFF0C\u6BD4\u5148\u7ED9 Markdown \u8868\u683C\u518D\u8FFD\u95EE\u66F4\u7D27\u51D1\u3002
 - \u7528\u5B83\uFF1A\u7ED3\u6784\u5316\u5BF9\u6BD4/\u6307\u6807\u4E0E\u9009\u62E9\u540C\u5757\u5C55\u793A\uFF1B\u63D0\u4EA4\u540E\u7528\u6237\u9009\u62E9\u539F\u4F4D\u53EA\u8BFB\u3002
@@ -576,7 +592,7 @@ var TOOL_GUIDED_SECTIONS = [
     ],
     // 按需注入：完整编排协议仅在有派发意图时给；无派发意图给最小协议
     // （派发机制 + 安全硬门常在：平台积分授权门 / commit review 硬门）。
-    build: (_tools, opts) => opts?.dispatchIntent === true ? AGENT_COLLABORATION_INSTRUCTIONS : AGENT_COLLABORATION_MIN_INSTRUCTIONS
+    build: (_tools, opts) => buildAgentCollaborationInstructions(opts)
   },
   { id: "menuUsage", triggerTools: ["ask_user"], build: () => MENU_USAGE_INSTRUCTIONS },
   {

package/{chunk-IW64YHXL.js → chunk-TWJYVVUB.js}

@@ -1,6 +1,6 @@
 import {
   isCompiledBinary
-} from "./chunk-A7GB5UGH.js";
+} from "./chunk-WACI5I6V.js";
 import {
   DEFAULT_NOLO_SERVER_URL
 } from "./chunk-OLZBQWZU.js";

package/{chunk-DWMLT22B.js → chunk-URO44BCD.js}

@@ -2,7 +2,7 @@ import {
   deleteDialog,
   runtime_default,
   toast
-} from "./chunk-T6CYTRP4.js";
+} from "./chunk-CMRP4XHV.js";
 import {
   getCurrentSpaceId,
   getCurrentSpaceIdRaw,

package/{chunk-LPO6AMQU.js → chunk-URW5UM6Y.js}

@@ -5,7 +5,7 @@ import {
 import {
   isCompiledBinary,
   resolveCliEntrypointPath
-} from "./chunk-A7GB5UGH.js";
+} from "./chunk-WACI5I6V.js";
 import {
   resolvePlatformAuthToken
 } from "./chunk-PIG2IUVZ.js";
@@ -828,7 +828,7 @@ function scanActiveReservations(reservationsDir, deps) {
     } catch {
     }
     const reused = expectedStart && actualStart && Number.isFinite(actualStart.getTime()) && actualStart.toISOString() !== expectedStart;
-    if (!alive || reused || record.status === "active" && ageMs >= startupWindowMs) {
+    if (!alive || reused || record.status === "active" && !!expectedStart && record.childIdentity !== "unverified" && ageMs >= startupWindowMs) {
       updateReservationFile(filePath, fs, (r) => {
         r.status = "reclaimed";
         r.reclaimedAt = new Date(nowMs).toISOString();
@@ -909,14 +909,14 @@ function reserveHostMemory(deps) {
         const validStart = !!params.processStartedAt && Number.isFinite(Date.parse(params.processStartedAt));
         locked(() => updateReservationFile(recordPath, fs, (r) => {
           if (r.status !== "reserved") throw new Error("Reservation is not reserved");
+          r.status = "active";
+          r.childIdentity = validStart ? "verified" : "unverified";
           if (validStart) {
-            r.status = "active";
             r.childStartedAt = params.processStartedAt;
           }
           if (params.runId) r.runId = params.runId;
           if (typeof params.pid === "number") r.childPid = params.pid;
         }));
-        if (!validStart) throw new Error("Child starttime unknown; reservation retained");
       },
       release(reason) {
         locked(() => updateReservationFile(recordPath, fs, (r) => {
@@ -1472,6 +1472,17 @@ function writeRunRecord(record, deps = {}) {
   }
   fs.writeFileSync(path, payload);
 }
+function reportRunProcessIdentity(runId, deps = {}) {
+  const processStartedAt = new Date(Date.now() - process.uptime() * 1e3).toISOString();
+  withRunRecordLock(runId, deps, () => {
+    const record = readRunRecord(runId, deps);
+    if (!record || record.pid !== void 0 && record.pid !== process.pid) return;
+    record.pid = process.pid;
+    record.processStartedAt = processStartedAt;
+    record.processIdentity = "verified";
+    writeRunRecord(record, deps);
+  }, { strict: true });
+}
 var FILE_EDIT_TOOL_NAMES = /* @__PURE__ */ new Set(["writeFile", "editFile"]);
 var DEFAULT_ACTIVITY_WRITE_INTERVAL_MS = 2e3;
 function createRunActivityTracker(runId, deps = {}, options = {}) {
@@ -1932,7 +1943,8 @@ async function spawnLocalBackgroundRun(input, deps = {}) {
       fs: reservationFs,
       now: resolvedDeps.now,
       readHostMemory: () => hostMemory = (resolvedDeps.readHostMemory ?? readHostMemory)(),
-      getProcessStartTime: resolvedDeps.getProcessStartTime ?? defaultGetProcessStartTime,
+      // Admission remains conservative for existing reservations; no OS probes on startup.
+      getProcessStartTime: () => null,
       withLock: (id, fn, opts) => withRunRecordLock(id, resolvedDeps, fn, opts)
     });
     proc = spawn(execPath, childArgs, {
@@ -1966,24 +1978,17 @@ async function spawnLocalBackgroundRun(input, deps = {}) {
   });
   const hostMemoryNotice = emitHostMemoryNotice(hostMemory, input.output);
   if (typeof proc.pid === "number") {
-    let processStartedAt;
-    try {
-      processStartedAt = (resolvedDeps.getProcessStartTime ?? defaultGetProcessStartTime)(proc.pid);
-      if (processStartedAt && !Number.isFinite(processStartedAt.getTime())) processStartedAt = null;
-    } catch {
-      processStartedAt = null;
-    }
     withRunRecordLock(runId, resolvedDeps, () => {
       const latest = readRunRecord(runId, resolvedDeps) ?? record;
       latest.pid = proc.pid;
-      if (processStartedAt) latest.processStartedAt = processStartedAt.toISOString();
+      latest.processIdentity ??= "unverified";
       writeRunRecord(latest, resolvedDeps);
       return true;
     }, { strict: true });
     try {
       const persisted = readRunRecord(runId, resolvedDeps);
-      reservation.associate({ runId, pid: proc.pid, processStartedAt: processStartedAt?.toISOString() });
-      if (persisted?.pid !== proc.pid || !persisted.processStartedAt) throw new Error("Child identity persistence failed");
+      reservation.associate({ runId, pid: proc.pid, processStartedAt: persisted?.processStartedAt });
+      if (persisted?.pid !== proc.pid) throw new Error("Child identity persistence failed: pid not bound");
     } catch (error) {
       throw new Error(`[host-memory-reservation] child ${proc.pid}, run ${runId}: association failed: ${error}`);
     }
@@ -2187,9 +2192,29 @@ function isPidGone(pid, deps = {}) {
     return error.code === "ESRCH";
   }
 }
-function defaultGetProcessStartTime(pid) {
+function defaultGetProcessStartTime(pid, deps = {}) {
+  if (!Number.isSafeInteger(pid) || pid <= 0) return null;
   try {
-    const output = nodeExecFileSync("ps", ["-o", "lstart=", "-p", String(pid)], {
+    const execFileSync = deps.execFileSync ?? nodeExecFileSync;
+    if ((deps.platform ?? process.platform) === "win32") {
+      const systemRoot = (deps.env ?? process.env).SystemRoot;
+      const shell = systemRoot ? join2(systemRoot, "System32", "WindowsPowerShell", "v1.0", "powershell.exe") : "powershell.exe";
+      const output2 = execFileSync(shell, [
+        "-NoProfile",
+        "-NonInteractive",
+        "-Command",
+        `$ErrorActionPreference='Stop'; (Get-Process -Id ${pid} -ErrorAction Stop).StartTime.ToUniversalTime().ToString('o')`
+      ], {
+        encoding: "utf8",
+        stdio: ["ignore", "pipe", "ignore"],
+        timeout: 5e3,
+        windowsHide: true
+      }).trim();
+      if (!output2) return null;
+      const date = new Date(output2);
+      return Number.isFinite(date.getTime()) ? date : null;
+    }
+    const output = execFileSync("ps", ["-o", "lstart=", "-p", String(pid)], {
       encoding: "utf8",
       stdio: ["ignore", "pipe", "ignore"],
       timeout: 1e3,
@@ -2210,6 +2235,14 @@ function defaultGetProcessStartTime(pid) {
 }
 var MAX_PROCESS_START_TIME_DIFF_MS = 3e4;
 var MAX_PERSISTED_PROCESS_START_TIME_DIFF_MS = 2e3;
+function probeProcessStartTime(pid, deps) {
+  try {
+    const date = deps.getProcessStartTime ? deps.getProcessStartTime(pid) : defaultGetProcessStartTime(pid, deps);
+    return date && Number.isFinite(date.getTime()) ? date : null;
+  } catch {
+    return null;
+  }
+}
 var ORPHAN_HEARTBEAT_GRACE_MS = 1e4;
 function readTimestampMs(value) {
   if (!value) return null;
@@ -2217,8 +2250,7 @@ function readTimestampMs(value) {
   return Number.isNaN(ms) ? null : ms;
 }
 function isPidReused(pid, expectedStartedAt, deps = {}, maxDiffMs = MAX_PROCESS_START_TIME_DIFF_MS) {
-  const getStartTime = deps.getProcessStartTime ?? defaultGetProcessStartTime;
-  const procStartTime = getStartTime(pid);
+  const procStartTime = probeProcessStartTime(pid, deps);
   if (!procStartTime) {
     return false;
   }
@@ -2235,7 +2267,7 @@ function checkStaleRun(runId, deps = {}) {
   const pidGone = isPidGone(record.pid, deps);
   const expectedStartedAt = record.processStartedAt ?? record.startedAt;
   const maxStartTimeDiffMs = record.processStartedAt ? MAX_PERSISTED_PROCESS_START_TIME_DIFF_MS : MAX_PROCESS_START_TIME_DIFF_MS;
-  const pidReused = !pidGone && isPidReused(record.pid, expectedStartedAt, deps, maxStartTimeDiffMs);
+  const pidReused = !pidGone && record.processIdentity !== "unverified" && isPidReused(record.pid, expectedStartedAt, deps, maxStartTimeDiffMs);
   if (!pidGone && !pidReused) return record;
   const now = deps.now ?? (() => /* @__PURE__ */ new Date());
   const heartbeatAt = readTimestampMs(record.activity?.updatedAt);
@@ -2603,8 +2635,30 @@ async function terminateRunProcess(record, initialSignal, deps) {
   const sleep = deps.sleep ?? ((ms) => new Promise((r) => setTimeout(r, ms)));
   const nowMs = () => deps.now ? deps.now().getTime() : Date.now();
   const signalGroup = (sig) => {
+    const fail = (reason) => {
+      throw new Error(`Run ${record.runId}, pid ${pid}, platform ${deps.platform ?? process.platform}: \u8EAB\u4EFD\u672A\u9A8C\u8BC1\uFF0C\u65E0\u6CD5\u5B89\u5168\u7EC8\u6B62 (${reason}). \u53EF\u5148\u786E\u8BA4\u8FDB\u7A0B\u72B6\u6001\u6216\u91CD\u542F\u8BE5 run\uFF1B\u786E\u8BA4\u8EAB\u4EFD\u540E\u91CD\u8BD5 stop/kill\u3002`);
+    };
+    const expectedMs = readTimestampMs(record.processStartedAt ?? record.startedAt);
+    if (expectedMs === null) fail("no trusted process start baseline");
+    const maxDiffMs = record.processStartedAt ? MAX_PERSISTED_PROCESS_START_TIME_DIFF_MS : MAX_PROCESS_START_TIME_DIFF_MS;
+    const actual = probeProcessStartTime(pid, deps);
+    if (!actual || Math.abs(actual.getTime() - expectedMs) > maxDiffMs) {
+      fail("identity probe failed or PID start time mismatch");
+    }
+    const persisted = withRunRecordLock(record.runId, deps, () => {
+      const latest = readRunRecord(record.runId, deps);
+      if (latest) {
+        if (latest.pid !== pid || latest.processStartedAt !== record.processStartedAt || latest.startedAt !== record.startedAt) {
+          fail("record changed");
+        }
+        latest.processIdentity = "verified";
+        writeRunRecord(latest, deps);
+      }
+      return true;
+    }, { strict: true });
+    if (persisted !== true) fail("identity persistence lock contended");
     try {
-      if (process.platform !== "win32") {
+      if ((deps.platform ?? process.platform) !== "win32") {
         kill(-pid, sig);
       } else {
         kill(pid, sig);
@@ -2648,7 +2702,7 @@ async function runSignalCommand(args, signal, verb, deps) {
 `);
     return 1;
   }
-  const reconciled = checkStaleRun(record.runId, deps) ?? record;
+  const reconciled = record.status === "running" && typeof record.pid === "number" && isPidGone(record.pid, deps) ? checkStaleRun(record.runId, deps) ?? record : record;
   if (isAgentRunTerminalStatus(reconciled.status)) {
     deps.output.write(`Run ${reconciled.runId} is already ${reconciled.status}.
 `);
@@ -2659,7 +2713,14 @@ async function runSignalCommand(args, signal, verb, deps) {
 `);
     return 1;
   }
-  const confirmed = await terminateRunProcess(reconciled, signal, deps);
+  let confirmed;
+  try {
+    confirmed = await terminateRunProcess(reconciled, signal, deps);
+  } catch (error) {
+    deps.output.write(`${error instanceof Error ? error.message : String(error)}
+`);
+    return 1;
+  }
   if (!confirmed) {
     deps.output.write(
       `Failed to ${verb} ${record.runId} (pid ${record.pid}): process still alive after SIGKILL.
@@ -2725,6 +2786,7 @@ export {
   defaultGenerateBatchId,
   withRunRecordLock,
   writeRunRecord,
+  reportRunProcessIdentity,
   createRunActivityTracker,
   readRunRecord,
   backfillRunRecordParentDialog,

package/{chunk-A7GB5UGH.js → chunk-WACI5I6V.js}

@@ -130,7 +130,7 @@ function resolveCliEntrypointPath(fromModuleUrl = import.meta.url) {
   }
   const sourcePath = fileURLToPath(fromModuleUrl);
   const ext = extname(sourcePath) || ".ts";
-  return join(dirname(sourcePath), "..", `index${ext}`);
+  return join(dirname(sourcePath), `index${ext}`);
 }
 
 export {

package/{chunk-2BWYN4N6.js → chunk-WC7UXON2.js}

@@ -64,7 +64,7 @@ import {
 import {
   inlineImageUrlsForCustomProvider,
   prepareTools
-} from "./chunk-HL5KVGSL.js";
+} from "./chunk-2AZSL4GL.js";
 import {
   getServerProviderSecret
 } from "./chunk-HS7MLR74.js";
@@ -86,7 +86,7 @@ import {
   resolveCliLocalRuntimeKeyCapability,
   resolveCliLocalSpawnDispatch,
   resolveStartAgentRunCwd
-} from "./chunk-TQYYH5UI.js";
+} from "./chunk-QW6SSF7V.js";
 import {
   deriveCredentialGroup,
   deriveCustomProviderCredentialGroup
@@ -97,7 +97,7 @@ import {
 } from "./chunk-KFHREHUQ.js";
 import {
   resolveAgentRequiredPackIds
-} from "./chunk-NH7672YN.js";
+} from "./chunk-WLPUUBFR.js";
 import {
   applyBuiltinAgentRuntimeOverride,
   applyTokenUsageToDayStats,
@@ -106,14 +106,14 @@ import {
   resolveBuiltinPlatformAgentConfig,
   runKeyed,
   validateAskChoiceInput
-} from "./chunk-T6CYTRP4.js";
+} from "./chunk-CMRP4XHV.js";
 import {
   BUILTIN_DIALOG_LLM_CHAT_FALLBACK_MODEL,
   BUILTIN_TITLE_LLM_CONFIG
 } from "./chunk-523DITKR.js";
 import {
   fetchServerSyncedCredential
-} from "./chunk-RG5K3ULI.js";
+} from "./chunk-XLBQQ5SB.js";
 import {
   isTombstoneRecord
 } from "./chunk-D2MDMY2M.js";
@@ -170,7 +170,7 @@ import {
   runExecShellGates,
   validateConfiguredRootExecutionLease,
   verifyOwnerRouteAck
-} from "./chunk-JICBK5VC.js";
+} from "./chunk-2DXGW4UO.js";
 import {
   accumulateGeminiChunks,
   buildGeminiGenerateContentRequest,
@@ -303,7 +303,7 @@ import {
   terminateRunProcess,
   transitionRunToTerminal,
   withQueueLock
-} from "./chunk-LPO6AMQU.js";
+} from "./chunk-URW5UM6Y.js";
 import {
   TASK_PREVIEW_MAX,
   formatListRunsCard,
@@ -331,7 +331,7 @@ import {
   parseUserIdFromAuthToken,
   resolveAuthToken,
   resolveServerUrl
-} from "./chunk-A7GB5UGH.js";
+} from "./chunk-WACI5I6V.js";
 import {
   DEFAULT_NOLO_SERVER_URL
 } from "./chunk-OLZBQWZU.js";
@@ -12169,7 +12169,7 @@ function createCliLocalRuntimeAdapter(deps) {
   const recordRunExecutionIsolation = async () => {
     try {
       const { writeFileSync: writeFileSync4, mkdirSync: mkdirSync4 } = await import("node:fs");
-      const { resolveRunsDir: resolveRunsDir2 } = await import("./agentRunControl-QWFFIAQY.js");
+      const { resolveRunsDir: resolveRunsDir2 } = await import("./agentRunControl-EI3BGJFM.js");
       const fact = resolveLocalRunExecutionIsolationFact({
         // F1：显式点名宿主执行的 run 在审计里必须与 docker 沙盒区分开
         // （reason: host-explicit-writes vs docker-workload）。
@@ -12201,7 +12201,7 @@ function createCliLocalRuntimeAdapter(deps) {
     dockerWorkloadReleased = true;
     dockerWorkloadLoad = null;
     if (loaded) {
-      const { resolveRunsDir: resolveRunsDir2 } = await import("./agentRunControl-QWFFIAQY.js");
+      const { resolveRunsDir: resolveRunsDir2 } = await import("./agentRunControl-EI3BGJFM.js");
       const exportRunDiff = deps.exportDockerRunDiffArtifact ?? exportDockerRunDiffArtifact;
       const warn = (message) => process.stderr.write(`[nolo] ${message}
 `);

package/{chunk-NH7672YN.js → chunk-WLPUUBFR.js}

@@ -8,7 +8,7 @@ import {
 } from "./chunk-VYNMQ6HW.js";
 import {
   fetchAndCacheTableRows
-} from "./chunk-DWMLT22B.js";
+} from "./chunk-URO44BCD.js";
 import {
   require_react
 } from "./chunk-YDH3FDFQ.js";
@@ -521,7 +521,7 @@ var executeToolRun = createAsyncThunk(
     if (!executionInput) {
       throw new Error(`ToolRun ${id} has no input to execute with.`);
     }
-    const { findToolExecutor } = await import("./tools-5RNURQPU.js");
+    const { findToolExecutor } = await import("./tools-FMNDEVTZ.js");
     const { executor } = findToolExecutor(run.toolName);
     toolRunStarted({
       id: run.id,

package/{chunk-7NBDLDX2.js → chunk-WVREKHHJ.js}

@@ -1,12 +1,12 @@
 import {
   refreshSubscriptionQuotas
-} from "./chunk-U4STABYN.js";
+} from "./chunk-YGILMZ7N.js";
 import {
   getReadableCliDb
 } from "./chunk-62TBKWTV.js";
 import {
   clearCliLocalRuntimePreparedAgentCache
-} from "./chunk-2BWYN4N6.js";
+} from "./chunk-WC7UXON2.js";
 import {
   readCredentialAvailability
 } from "./chunk-R4BMKAR5.js";
@@ -19,14 +19,14 @@ import {
   resolveAgentRecordFromHybridStore,
   sanitizeAgentRecordForCliOutput,
   writeAgentRecord
-} from "./chunk-N6EMFRPR.js";
+} from "./chunk-KJETBEEN.js";
 import {
   resolveCliAgentKeyInput
 } from "./chunk-NBTY7YJF.js";
 import {
   parseUserIdFromAuthToken,
   resolveAuthToken
-} from "./chunk-A7GB5UGH.js";
+} from "./chunk-WACI5I6V.js";
 import {
   toErrorMessage
 } from "./chunk-HNMXYYJR.js";
@@ -244,7 +244,7 @@ async function runAgentCreateCommand(args, deps = {}) {
     let verifyResult;
     if (parsed.verify) {
       try {
-        const { verifyCustomProvider } = await import("./agentProviderCommands-CXBHNONN.js");
+        const { verifyCustomProvider } = await import("./agentProviderCommands-4USYTCL3.js");
         const rec = built.nextRecord;
         verifyResult = await verifyCustomProvider({
           providerUrl: rec.customProviderUrl,