nolo-cli 0.170.0 → 0.170.1

package/{agentDeleteCommand-4RAEG26P.js → agentDeleteCommand-F66NIWCF.js}

@@ -6,7 +6,7 @@ import {
 } from "./chunk-62TBKWTV.js";
 import {
   clearCliLocalRuntimePreparedAgentCache
-} from "./chunk-B4VCTNZL.js";
+} from "./chunk-WC7UXON2.js";
 import "./chunk-G3VYRPTV.js";
 import "./chunk-R4BMKAR5.js";
 import {
@@ -132,7 +132,7 @@ import {
 import "./chunk-5EMSBTQ6.js";
 import "./chunk-I42VC5KR.js";
 import "./chunk-U6VC4MU4.js";
-import "./chunk-WO5P2HTX.js";
+import "./chunk-URW5UM6Y.js";
 import "./chunk-PJNFNEJE.js";
 import "./chunk-PSCNXBYA.js";
 import {

package/{agentEmailCommands-MS6MACO5.js → agentEmailCommands-M4SHODDA.js}

@@ -4,7 +4,7 @@ import {
 } from "./chunk-I7S63QUU.js";
 import {
   runAgentCreateCommand
-} from "./chunk-3URJF2TW.js";
+} from "./chunk-WVREKHHJ.js";
 import "./chunk-YGILMZ7N.js";
 import {
   positionalArgs,
@@ -13,7 +13,7 @@ import {
 import {
   getReadableCliDb
 } from "./chunk-62TBKWTV.js";
-import "./chunk-B4VCTNZL.js";
+import "./chunk-WC7UXON2.js";
 import "./chunk-G3VYRPTV.js";
 import "./chunk-R4BMKAR5.js";
 import "./chunk-TDX2L4W2.js";
@@ -132,7 +132,7 @@ import {
 } from "./chunk-5EMSBTQ6.js";
 import "./chunk-I42VC5KR.js";
 import "./chunk-U6VC4MU4.js";
-import "./chunk-WO5P2HTX.js";
+import "./chunk-URW5UM6Y.js";
 import "./chunk-PJNFNEJE.js";
 import "./chunk-PSCNXBYA.js";
 import "./chunk-FDLDMJTM.js";

package/{agentMachineCommands-4OQUFTD2.js → agentMachineCommands-R55P5SZY.js}

@@ -93,7 +93,7 @@ async function defaultExecuteCli(provider, prompt, options) {
   return executeCli(provider, prompt, options);
 }
 async function forwardConnectorRunMessage(machine, message, pushMessage, executeCli, env, fetchImpl) {
-  const { handleConnectorRunMessage } = await import("./machineWsRunDispatch-7CRVOKDC.js");
+  const { handleConnectorRunMessage } = await import("./machineWsRunDispatch-7A3TSH4Q.js");
   return handleConnectorRunMessage(message, pushMessage, executeCli, env, fetchImpl);
 }
 async function detectLaunchableMachineInfo() {

package/{agentRecordCommands-YNLE7IBY.js → agentRecordCommands-PDWACZFR.js}

@@ -2,10 +2,10 @@ import {
   runAgentCreateCommand,
   runAgentReadCommand,
   runAgentUpdateCommand
-} from "./chunk-3URJF2TW.js";
+} from "./chunk-WVREKHHJ.js";
 import "./chunk-YGILMZ7N.js";
 import "./chunk-62TBKWTV.js";
-import "./chunk-B4VCTNZL.js";
+import "./chunk-WC7UXON2.js";
 import "./chunk-G3VYRPTV.js";
 import "./chunk-R4BMKAR5.js";
 import "./chunk-TDX2L4W2.js";
@@ -117,7 +117,7 @@ import "./chunk-M2EJHDJP.js";
 import "./chunk-5EMSBTQ6.js";
 import "./chunk-I42VC5KR.js";
 import "./chunk-U6VC4MU4.js";
-import "./chunk-WO5P2HTX.js";
+import "./chunk-URW5UM6Y.js";
 import "./chunk-PJNFNEJE.js";
 import "./chunk-PSCNXBYA.js";
 import "./chunk-FDLDMJTM.js";

package/{agentRunCommand-76DUQVWC.js → agentRunCommand-U2F74LTS.js}

@@ -9,13 +9,13 @@ import {
   resolveRunSettlementNote,
   resolveWorkflowReference,
   runAgentRunCommand
-} from "./chunk-RKKJ6SVM.js";
+} from "./chunk-O2AY3CVI.js";
 import "./chunk-6QDYSCPW.js";
 import {
   parseAgentRunArgs
 } from "./chunk-DHNQA4VI.js";
 import "./chunk-62TBKWTV.js";
-import "./chunk-B4VCTNZL.js";
+import "./chunk-WC7UXON2.js";
 import "./chunk-G3VYRPTV.js";
 import "./chunk-R4BMKAR5.js";
 import "./chunk-TDX2L4W2.js";
@@ -136,7 +136,7 @@ import "./chunk-M2EJHDJP.js";
 import "./chunk-5EMSBTQ6.js";
 import "./chunk-I42VC5KR.js";
 import "./chunk-U6VC4MU4.js";
-import "./chunk-WO5P2HTX.js";
+import "./chunk-URW5UM6Y.js";
 import "./chunk-PJNFNEJE.js";
 import "./chunk-PSCNXBYA.js";
 import "./chunk-EXAJ6DCR.js";

package/{agentRunControl-QBONJVI4.js → agentRunControl-EI3BGJFM.js}

@@ -53,6 +53,7 @@ import {
   readQueueMessages,
   readRunRecord,
   releaseRunRecordAck,
+  reportRunProcessIdentity,
   resolveNoloHome,
   resolveRunLogPath,
   resolveRunQueuePath,
@@ -73,7 +74,7 @@ import {
   withQueueLock,
   withRunRecordLock,
   writeRunRecord
-} from "./chunk-WO5P2HTX.js";
+} from "./chunk-URW5UM6Y.js";
 import "./chunk-PJNFNEJE.js";
 import "./chunk-PSCNXBYA.js";
 import "./chunk-WACI5I6V.js";
@@ -146,6 +147,7 @@ export {
   readQueueMessages,
   readRunRecord,
   releaseRunRecordAck,
+  reportRunProcessIdentity,
   resolveNoloHome,
   resolveRunLogPath,
   resolveRunQueuePath,

package/{chunk-O4R4M4M5.js → chunk-IMMA7QFE.js}

@@ -42,7 +42,7 @@ import {
 } from "./chunk-I42VC5KR.js";
 import {
   resolveRunsDir
-} from "./chunk-WO5P2HTX.js";
+} from "./chunk-URW5UM6Y.js";
 import {
   getDefaultCliLocalRuntimeDb
 } from "./chunk-GAGGEA7D.js";

package/{chunk-RKKJ6SVM.js → chunk-O2AY3CVI.js}

@@ -31,7 +31,7 @@ import {
   resolveFileWriteGateEnabled,
   resolveLocalUserId,
   validateInstaboxWorkspaceSelection
-} from "./chunk-B4VCTNZL.js";
+} from "./chunk-WC7UXON2.js";
 import {
   clearCredentialAvailability,
   readEffectiveCredentialEntry,
@@ -182,13 +182,14 @@ import {
   popSingleQueueMessage,
   readRunRecord,
   recordRunResultHeaderMeta,
+  reportRunProcessIdentity,
   resolveResultServerMeta,
   resolveRunQueuePath,
   resolveRunsDir,
   serverOriginForDialog,
   settleRunTerminalAuthoritatively,
   spawnLocalBackgroundRun
-} from "./chunk-WO5P2HTX.js";
+} from "./chunk-URW5UM6Y.js";
 import {
   formatAgentListCard,
   formatFinishedRunCard,
@@ -15600,6 +15601,7 @@ async function runAgentRunCommand(args, deps) {
   const nowMs = () => deps.now ? deps.now().getTime() : Date.now();
   const childRunId = env.NOLO_AGENT_RUN_ID;
   const hasRegistry = typeof childRunId === "string" && childRunId.length > 0;
+  if (hasRegistry) reportRunProcessIdentity(childRunId, { env, homedir: deps.homedir, fs: deps.fs, now: deps.now });
   const processExit = deps.processExit ?? ((code) => process.exit(code));
   const stallTimeoutMs = resolvePositiveMs(
     deps.stallTimeoutMs ?? env.NOLO_LOCAL_RUN_STALL_TIMEOUT_MS,

package/{chunk-WO5P2HTX.js → chunk-URW5UM6Y.js}

@@ -828,7 +828,7 @@ function scanActiveReservations(reservationsDir, deps) {
     } catch {
     }
     const reused = expectedStart && actualStart && Number.isFinite(actualStart.getTime()) && actualStart.toISOString() !== expectedStart;
-    if (!alive || reused || record.status === "active" && ageMs >= startupWindowMs) {
+    if (!alive || reused || record.status === "active" && !!expectedStart && record.childIdentity !== "unverified" && ageMs >= startupWindowMs) {
       updateReservationFile(filePath, fs, (r) => {
         r.status = "reclaimed";
         r.reclaimedAt = new Date(nowMs).toISOString();
@@ -909,14 +909,14 @@ function reserveHostMemory(deps) {
         const validStart = !!params.processStartedAt && Number.isFinite(Date.parse(params.processStartedAt));
         locked(() => updateReservationFile(recordPath, fs, (r) => {
           if (r.status !== "reserved") throw new Error("Reservation is not reserved");
+          r.status = "active";
+          r.childIdentity = validStart ? "verified" : "unverified";
           if (validStart) {
-            r.status = "active";
             r.childStartedAt = params.processStartedAt;
           }
           if (params.runId) r.runId = params.runId;
           if (typeof params.pid === "number") r.childPid = params.pid;
         }));
-        if (!validStart) throw new Error("Child starttime unknown; reservation retained");
       },
       release(reason) {
         locked(() => updateReservationFile(recordPath, fs, (r) => {
@@ -1472,6 +1472,17 @@ function writeRunRecord(record, deps = {}) {
   }
   fs.writeFileSync(path, payload);
 }
+function reportRunProcessIdentity(runId, deps = {}) {
+  const processStartedAt = new Date(Date.now() - process.uptime() * 1e3).toISOString();
+  withRunRecordLock(runId, deps, () => {
+    const record = readRunRecord(runId, deps);
+    if (!record || record.pid !== void 0 && record.pid !== process.pid) return;
+    record.pid = process.pid;
+    record.processStartedAt = processStartedAt;
+    record.processIdentity = "verified";
+    writeRunRecord(record, deps);
+  }, { strict: true });
+}
 var FILE_EDIT_TOOL_NAMES = /* @__PURE__ */ new Set(["writeFile", "editFile"]);
 var DEFAULT_ACTIVITY_WRITE_INTERVAL_MS = 2e3;
 function createRunActivityTracker(runId, deps = {}, options = {}) {
@@ -1932,7 +1943,8 @@ async function spawnLocalBackgroundRun(input, deps = {}) {
       fs: reservationFs,
       now: resolvedDeps.now,
       readHostMemory: () => hostMemory = (resolvedDeps.readHostMemory ?? readHostMemory)(),
-      getProcessStartTime: resolvedDeps.getProcessStartTime ?? defaultGetProcessStartTime,
+      // Admission remains conservative for existing reservations; no OS probes on startup.
+      getProcessStartTime: () => null,
       withLock: (id, fn, opts) => withRunRecordLock(id, resolvedDeps, fn, opts)
     });
     proc = spawn(execPath, childArgs, {
@@ -1966,24 +1978,17 @@ async function spawnLocalBackgroundRun(input, deps = {}) {
   });
   const hostMemoryNotice = emitHostMemoryNotice(hostMemory, input.output);
   if (typeof proc.pid === "number") {
-    let processStartedAt;
-    try {
-      processStartedAt = (resolvedDeps.getProcessStartTime ?? defaultGetProcessStartTime)(proc.pid);
-      if (processStartedAt && !Number.isFinite(processStartedAt.getTime())) processStartedAt = null;
-    } catch {
-      processStartedAt = null;
-    }
     withRunRecordLock(runId, resolvedDeps, () => {
       const latest = readRunRecord(runId, resolvedDeps) ?? record;
       latest.pid = proc.pid;
-      if (processStartedAt) latest.processStartedAt = processStartedAt.toISOString();
+      latest.processIdentity ??= "unverified";
       writeRunRecord(latest, resolvedDeps);
       return true;
     }, { strict: true });
     try {
       const persisted = readRunRecord(runId, resolvedDeps);
-      reservation.associate({ runId, pid: proc.pid, processStartedAt: processStartedAt?.toISOString() });
-      if (persisted?.pid !== proc.pid || !persisted.processStartedAt) throw new Error("Child identity persistence failed");
+      reservation.associate({ runId, pid: proc.pid, processStartedAt: persisted?.processStartedAt });
+      if (persisted?.pid !== proc.pid) throw new Error("Child identity persistence failed: pid not bound");
     } catch (error) {
       throw new Error(`[host-memory-reservation] child ${proc.pid}, run ${runId}: association failed: ${error}`);
     }
@@ -2187,12 +2192,14 @@ function isPidGone(pid, deps = {}) {
     return error.code === "ESRCH";
   }
 }
-function defaultGetProcessStartTime(pid) {
+function defaultGetProcessStartTime(pid, deps = {}) {
   if (!Number.isSafeInteger(pid) || pid <= 0) return null;
   try {
-    if (process.platform === "win32") {
-      const shell = process.env.SystemRoot ? join2(process.env.SystemRoot, "System32", "WindowsPowerShell", "v1.0", "powershell.exe") : "powershell.exe";
-      const output2 = nodeExecFileSync(shell, [
+    const execFileSync = deps.execFileSync ?? nodeExecFileSync;
+    if ((deps.platform ?? process.platform) === "win32") {
+      const systemRoot = (deps.env ?? process.env).SystemRoot;
+      const shell = systemRoot ? join2(systemRoot, "System32", "WindowsPowerShell", "v1.0", "powershell.exe") : "powershell.exe";
+      const output2 = execFileSync(shell, [
         "-NoProfile",
         "-NonInteractive",
         "-Command",
@@ -2207,7 +2214,7 @@ function defaultGetProcessStartTime(pid) {
       const date = new Date(output2);
       return Number.isFinite(date.getTime()) ? date : null;
     }
-    const output = nodeExecFileSync("ps", ["-o", "lstart=", "-p", String(pid)], {
+    const output = execFileSync("ps", ["-o", "lstart=", "-p", String(pid)], {
       encoding: "utf8",
       stdio: ["ignore", "pipe", "ignore"],
       timeout: 1e3,
@@ -2228,6 +2235,14 @@ function defaultGetProcessStartTime(pid) {
 }
 var MAX_PROCESS_START_TIME_DIFF_MS = 3e4;
 var MAX_PERSISTED_PROCESS_START_TIME_DIFF_MS = 2e3;
+function probeProcessStartTime(pid, deps) {
+  try {
+    const date = deps.getProcessStartTime ? deps.getProcessStartTime(pid) : defaultGetProcessStartTime(pid, deps);
+    return date && Number.isFinite(date.getTime()) ? date : null;
+  } catch {
+    return null;
+  }
+}
 var ORPHAN_HEARTBEAT_GRACE_MS = 1e4;
 function readTimestampMs(value) {
   if (!value) return null;
@@ -2235,8 +2250,7 @@ function readTimestampMs(value) {
   return Number.isNaN(ms) ? null : ms;
 }
 function isPidReused(pid, expectedStartedAt, deps = {}, maxDiffMs = MAX_PROCESS_START_TIME_DIFF_MS) {
-  const getStartTime = deps.getProcessStartTime ?? defaultGetProcessStartTime;
-  const procStartTime = getStartTime(pid);
+  const procStartTime = probeProcessStartTime(pid, deps);
   if (!procStartTime) {
     return false;
   }
@@ -2253,7 +2267,7 @@ function checkStaleRun(runId, deps = {}) {
   const pidGone = isPidGone(record.pid, deps);
   const expectedStartedAt = record.processStartedAt ?? record.startedAt;
   const maxStartTimeDiffMs = record.processStartedAt ? MAX_PERSISTED_PROCESS_START_TIME_DIFF_MS : MAX_PROCESS_START_TIME_DIFF_MS;
-  const pidReused = !pidGone && isPidReused(record.pid, expectedStartedAt, deps, maxStartTimeDiffMs);
+  const pidReused = !pidGone && record.processIdentity !== "unverified" && isPidReused(record.pid, expectedStartedAt, deps, maxStartTimeDiffMs);
   if (!pidGone && !pidReused) return record;
   const now = deps.now ?? (() => /* @__PURE__ */ new Date());
   const heartbeatAt = readTimestampMs(record.activity?.updatedAt);
@@ -2621,8 +2635,30 @@ async function terminateRunProcess(record, initialSignal, deps) {
   const sleep = deps.sleep ?? ((ms) => new Promise((r) => setTimeout(r, ms)));
   const nowMs = () => deps.now ? deps.now().getTime() : Date.now();
   const signalGroup = (sig) => {
+    const fail = (reason) => {
+      throw new Error(`Run ${record.runId}, pid ${pid}, platform ${deps.platform ?? process.platform}: \u8EAB\u4EFD\u672A\u9A8C\u8BC1\uFF0C\u65E0\u6CD5\u5B89\u5168\u7EC8\u6B62 (${reason}). \u53EF\u5148\u786E\u8BA4\u8FDB\u7A0B\u72B6\u6001\u6216\u91CD\u542F\u8BE5 run\uFF1B\u786E\u8BA4\u8EAB\u4EFD\u540E\u91CD\u8BD5 stop/kill\u3002`);
+    };
+    const expectedMs = readTimestampMs(record.processStartedAt ?? record.startedAt);
+    if (expectedMs === null) fail("no trusted process start baseline");
+    const maxDiffMs = record.processStartedAt ? MAX_PERSISTED_PROCESS_START_TIME_DIFF_MS : MAX_PROCESS_START_TIME_DIFF_MS;
+    const actual = probeProcessStartTime(pid, deps);
+    if (!actual || Math.abs(actual.getTime() - expectedMs) > maxDiffMs) {
+      fail("identity probe failed or PID start time mismatch");
+    }
+    const persisted = withRunRecordLock(record.runId, deps, () => {
+      const latest = readRunRecord(record.runId, deps);
+      if (latest) {
+        if (latest.pid !== pid || latest.processStartedAt !== record.processStartedAt || latest.startedAt !== record.startedAt) {
+          fail("record changed");
+        }
+        latest.processIdentity = "verified";
+        writeRunRecord(latest, deps);
+      }
+      return true;
+    }, { strict: true });
+    if (persisted !== true) fail("identity persistence lock contended");
     try {
-      if (process.platform !== "win32") {
+      if ((deps.platform ?? process.platform) !== "win32") {
         kill(-pid, sig);
       } else {
         kill(pid, sig);
@@ -2666,7 +2702,7 @@ async function runSignalCommand(args, signal, verb, deps) {
 `);
     return 1;
   }
-  const reconciled = checkStaleRun(record.runId, deps) ?? record;
+  const reconciled = record.status === "running" && typeof record.pid === "number" && isPidGone(record.pid, deps) ? checkStaleRun(record.runId, deps) ?? record : record;
   if (isAgentRunTerminalStatus(reconciled.status)) {
     deps.output.write(`Run ${reconciled.runId} is already ${reconciled.status}.
 `);
@@ -2677,7 +2713,14 @@ async function runSignalCommand(args, signal, verb, deps) {
 `);
     return 1;
   }
-  const confirmed = await terminateRunProcess(reconciled, signal, deps);
+  let confirmed;
+  try {
+    confirmed = await terminateRunProcess(reconciled, signal, deps);
+  } catch (error) {
+    deps.output.write(`${error instanceof Error ? error.message : String(error)}
+`);
+    return 1;
+  }
   if (!confirmed) {
     deps.output.write(
       `Failed to ${verb} ${record.runId} (pid ${record.pid}): process still alive after SIGKILL.
@@ -2743,6 +2786,7 @@ export {
   defaultGenerateBatchId,
   withRunRecordLock,
   writeRunRecord,
+  reportRunProcessIdentity,
   createRunActivityTracker,
   readRunRecord,
   backfillRunRecordParentDialog,

package/{chunk-B4VCTNZL.js → chunk-WC7UXON2.js}

@@ -303,7 +303,7 @@ import {
   terminateRunProcess,
   transitionRunToTerminal,
   withQueueLock
-} from "./chunk-WO5P2HTX.js";
+} from "./chunk-URW5UM6Y.js";
 import {
   TASK_PREVIEW_MAX,
   formatListRunsCard,
@@ -12169,7 +12169,7 @@ function createCliLocalRuntimeAdapter(deps) {
   const recordRunExecutionIsolation = async () => {
     try {
       const { writeFileSync: writeFileSync4, mkdirSync: mkdirSync4 } = await import("node:fs");
-      const { resolveRunsDir: resolveRunsDir2 } = await import("./agentRunControl-QBONJVI4.js");
+      const { resolveRunsDir: resolveRunsDir2 } = await import("./agentRunControl-EI3BGJFM.js");
       const fact = resolveLocalRunExecutionIsolationFact({
         // F1：显式点名宿主执行的 run 在审计里必须与 docker 沙盒区分开
         // （reason: host-explicit-writes vs docker-workload）。
@@ -12201,7 +12201,7 @@ function createCliLocalRuntimeAdapter(deps) {
     dockerWorkloadReleased = true;
     dockerWorkloadLoad = null;
     if (loaded) {
-      const { resolveRunsDir: resolveRunsDir2 } = await import("./agentRunControl-QBONJVI4.js");
+      const { resolveRunsDir: resolveRunsDir2 } = await import("./agentRunControl-EI3BGJFM.js");
       const exportRunDiff = deps.exportDockerRunDiffArtifact ?? exportDockerRunDiffArtifact;
       const warn = (message) => process.stderr.write(`[nolo] ${message}
 `);

package/{chunk-3URJF2TW.js → chunk-WVREKHHJ.js}

@@ -6,7 +6,7 @@ import {
 } from "./chunk-62TBKWTV.js";
 import {
   clearCliLocalRuntimePreparedAgentCache
-} from "./chunk-B4VCTNZL.js";
+} from "./chunk-WC7UXON2.js";
 import {
   readCredentialAvailability
 } from "./chunk-R4BMKAR5.js";

package/{chunk-AIHY74D3.js → chunk-Z6HR75HX.js}

@@ -1,7 +1,7 @@
 import {
   createCliLocalRuntimeAdapter,
   summarizeEndpoint
-} from "./chunk-B4VCTNZL.js";
+} from "./chunk-WC7UXON2.js";
 import {
   t
 } from "./chunk-TDX2L4W2.js";

package/{commandRegistry-PDKCQHG3.js → commandRegistry-3XBG7JHS.js}

@@ -110,7 +110,7 @@ function createDaemonShortcutCommand(path, description, command) {
 // packages/cli/agentInternalCommandEntries.ts
 function getAgentInternalCommandEntries() {
   const createAgentRunCommand = (path, description) => createContextCommand(path, description, async (args, ctx) => {
-    const { runAgentRunCommand } = await import("./agentRunCommand-76DUQVWC.js");
+    const { runAgentRunCommand } = await import("./agentRunCommand-U2F74LTS.js");
     return runAgentRunCommand(args, {
       env: ctx.env,
       scriptDir: ctx.scriptDir,
@@ -126,7 +126,7 @@ function getAgentInternalCommandEntries() {
       return runAgentListCommand(args, deps);
     }),
     createEnvCommand(["agent", "create"], "Create a new agent", async (args, deps) => {
-      const { runAgentCreateCommand } = await import("./agentRecordCommands-YNLE7IBY.js");
+      const { runAgentCreateCommand } = await import("./agentRecordCommands-PDWACZFR.js");
       return runAgentCreateCommand(args, deps);
     }),
     createEnvCommand(["agent", "models"], "List models: --preset <id> (server discovery, exit 1 on static fallback) or --url <base> --api-key <key> (OpenAI-compatible /models)", async (args, deps) => {
@@ -142,28 +142,28 @@ function getAgentInternalCommandEntries() {
       return runAgentPullCommand(args, deps);
     }),
     createEnvCommand(["agent", "read"], "Read a single agent", async (args, deps) => {
-      const { runAgentReadCommand } = await import("./agentRecordCommands-YNLE7IBY.js");
+      const { runAgentReadCommand } = await import("./agentRecordCommands-PDWACZFR.js");
       return runAgentReadCommand(args, deps);
     }),
     createAgentRunCommand(["agent", "run"], "Run an agent"),
     createEnvCommand(["agent", "ps"], "List active and recent local agent runs (--json for machine-readable output)", async (_args, deps) => {
-      const { runAgentPsCommand } = await import("./agentRunControl-QBONJVI4.js");
+      const { runAgentPsCommand } = await import("./agentRunControl-EI3BGJFM.js");
       return runAgentPsCommand(_args, { ...deps, output: process.stdout });
     }),
     createEnvCommand(["agent", "status"], "Show status of a local agent run (--json, --watch, --interval-ms N)", async (args, deps) => {
-      const { runAgentStatusCommand } = await import("./agentRunControl-QBONJVI4.js");
+      const { runAgentStatusCommand } = await import("./agentRunControl-EI3BGJFM.js");
       return runAgentStatusCommand(args, { ...deps, output: process.stdout });
     }),
     createEnvCommand(["agent", "logs"], "Show logs of a local agent run", async (args, deps) => {
-      const { runAgentLogsCommand } = await import("./agentRunControl-QBONJVI4.js");
+      const { runAgentLogsCommand } = await import("./agentRunControl-EI3BGJFM.js");
       return runAgentLogsCommand(args, { ...deps, output: process.stdout });
     }),
     createEnvCommand(["agent", "stop"], "Stop a local agent run", async (args, deps) => {
-      const { runAgentStopCommand } = await import("./agentRunControl-QBONJVI4.js");
+      const { runAgentStopCommand } = await import("./agentRunControl-EI3BGJFM.js");
       return runAgentStopCommand(args, { ...deps, output: process.stdout });
     }),
     createEnvCommand(["agent", "kill"], "Kill a local agent run", async (args, deps) => {
-      const { runAgentKillCommand } = await import("./agentRunControl-QBONJVI4.js");
+      const { runAgentKillCommand } = await import("./agentRunControl-EI3BGJFM.js");
       return runAgentKillCommand(args, { ...deps, output: process.stdout });
     }),
     createEnvCommand(["agent", "setup-offline-marxists"], "Create or update the Marxists.org offline book agent", async (args, deps) => {
@@ -171,31 +171,31 @@ function getAgentInternalCommandEntries() {
       return runSetupOfflineMarxistsAgentCommand(args, deps);
     }),
     createEnvCommand(["agent", "update"], "Update agent fields", async (args, deps) => {
-      const { runAgentUpdateCommand } = await import("./agentRecordCommands-YNLE7IBY.js");
+      const { runAgentUpdateCommand } = await import("./agentRecordCommands-PDWACZFR.js");
       return runAgentUpdateCommand(args, deps);
     }),
     createEnvCommand(["agent", "email", "provision"], "Provision a controlled inbox for an agent", async (args, deps) => {
-      const { runAgentEmailProvisionCommand } = await import("./agentEmailCommands-MS6MACO5.js");
+      const { runAgentEmailProvisionCommand } = await import("./agentEmailCommands-M4SHODDA.js");
       return runAgentEmailProvisionCommand(args, deps);
     }),
     createEnvCommand(["agent", "email", "bind"], "Bind an existing email address to an agent", async (args, deps) => {
-      const { runAgentEmailBindCommand } = await import("./agentEmailCommands-MS6MACO5.js");
+      const { runAgentEmailBindCommand } = await import("./agentEmailCommands-M4SHODDA.js");
       return runAgentEmailBindCommand(args, deps);
     }),
     createEnvCommand(["agent", "email", "transfer"], "Transfer an email identity from one agent to another (cross-account)", async (args, deps) => {
-      const { runAgentEmailTransferCommand } = await import("./agentEmailCommands-MS6MACO5.js");
+      const { runAgentEmailTransferCommand } = await import("./agentEmailCommands-M4SHODDA.js");
       return runAgentEmailTransferCommand(args, deps);
     }),
     createEnvCommand(
       ["agent", "email", "create-and-provision"],
       "Create an agent and provision its controlled inbox",
       async (args, deps) => {
-        const { runAgentEmailCreateAndProvisionCommand } = await import("./agentEmailCommands-MS6MACO5.js");
+        const { runAgentEmailCreateAndProvisionCommand } = await import("./agentEmailCommands-M4SHODDA.js");
         return runAgentEmailCreateAndProvisionCommand(args, deps);
       }
     ),
     createEnvCommand(["agent", "delete"], "Hard-delete an agent's private and public records", async (args, deps) => {
-      const { runAgentDeleteCommand } = await import("./agentDeleteCommand-4RAEG26P.js");
+      const { runAgentDeleteCommand } = await import("./agentDeleteCommand-F66NIWCF.js");
       return runAgentDeleteCommand(args, deps);
     }),
     createEnvCommand(["agent", "grant"], "Grant another user access to this agent's owner credentials", async (args, deps) => {
@@ -211,15 +211,15 @@ function getAgentInternalCommandEntries() {
       return runAgentRevokeGrantCommand(args, deps);
     }),
     createEnvCommand(["agent", "bind-current"], "Bind an agent to this machine", async (args, deps) => {
-      const { runAgentBindCurrentCommand } = await import("./agentMachineCommands-4OQUFTD2.js");
+      const { runAgentBindCurrentCommand } = await import("./agentMachineCommands-R55P5SZY.js");
       return runAgentBindCurrentCommand(args, deps);
     }),
     createEnvCommand(["agent", "smoke-current"], "Smoke test a bound agent through this machine", async (args, deps) => {
-      const { runAgentSmokeCurrentCommand } = await import("./agentMachineCommands-4OQUFTD2.js");
+      const { runAgentSmokeCurrentCommand } = await import("./agentMachineCommands-R55P5SZY.js");
       return runAgentSmokeCurrentCommand(args, deps);
     }),
     createEnvCommand(["agent", "runtime-doctor"], "Diagnose current machine runtime compatibility", async (args, deps) => {
-      const { runAgentRuntimeDoctorCommand } = await import("./agentMachineCommands-4OQUFTD2.js");
+      const { runAgentRuntimeDoctorCommand } = await import("./agentMachineCommands-R55P5SZY.js");
       return runAgentRuntimeDoctorCommand(args, deps);
     }),
     createAgentRunCommand(["agent", "chat"], "Chat with an agent")
@@ -374,27 +374,27 @@ function getCiInternalCommandEntries() {
 function getDialogInternalCommandEntries() {
   return [
     createEnvCommand(["dialog", "search"], "Search dialog messages across dialogs", async (args, deps) => {
-      const { runDialogSearchCommand } = await import("./dialogCommands-6POPB6FB.js");
+      const { runDialogSearchCommand } = await import("./dialogCommands-P5HSDZ7T.js");
       return runDialogSearchCommand(args, deps);
     }),
     createEnvCommand(["dialog", "list"], "List dialogs (default --limit 50; --all/--limit 0 full; --jsonl streams)", async (args, deps) => {
-      const { runDialogListCommand } = await import("./dialogCommands-6POPB6FB.js");
+      const { runDialogListCommand } = await import("./dialogCommands-P5HSDZ7T.js");
       return runDialogListCommand(args, deps);
     }),
     createEnvCommand(["dialog", "delete"], "Delete one or more dialogs", async (args, deps) => {
-      const { runDialogDeleteCommand } = await import("./dialogCommands-6POPB6FB.js");
+      const { runDialogDeleteCommand } = await import("./dialogCommands-P5HSDZ7T.js");
       return runDialogDeleteCommand(args, deps);
     }),
     createEnvCommand(["dialog", "query"], "Query dialogs by subject refs (default --limit 50; --all full; --jsonl streams)", async (args, deps) => {
-      const { runDialogQueryCommand } = await import("./dialogCommands-6POPB6FB.js");
+      const { runDialogQueryCommand } = await import("./dialogCommands-P5HSDZ7T.js");
       return runDialogQueryCommand(args, deps);
     }),
     createEnvCommand(["dialog", "read"], "Read a dialog", async (args, deps) => {
-      const { runDialogReadCommand } = await import("./dialogCommands-6POPB6FB.js");
+      const { runDialogReadCommand } = await import("./dialogCommands-P5HSDZ7T.js");
       return runDialogReadCommand(args, deps);
     }),
     createEnvCommand(["dialog", "status"], "Read compact dialog status", async (args, deps) => {
-      const { runDialogStatusCommand } = await import("./dialogCommands-6POPB6FB.js");
+      const { runDialogStatusCommand } = await import("./dialogCommands-P5HSDZ7T.js");
       return runDialogStatusCommand(args, deps);
     })
   ];
@@ -530,15 +530,15 @@ function getSystemInternalCommandEntries(renderHelpText2) {
       return runWhoamiCommand({ args, env: ctx.env });
     }),
     createEntrypointEnvCommand(["connect"], "Send machine heartbeats or hold a connector websocket", async (args, deps) => {
-      const { runMachineConnectCommand } = await import("./machineCommands-CTE5QJBU.js");
+      const { runMachineConnectCommand } = await import("./machineCommands-3LSEP24P.js");
       return runMachineConnectCommand(args, deps);
     }),
     createDaemonShortcutCommand(["daemon"], "Run the connector daemon shortcut", async (args, deps) => {
-      const { runMachineConnectCommand } = await import("./machineCommands-CTE5QJBU.js");
+      const { runMachineConnectCommand } = await import("./machineCommands-3LSEP24P.js");
       return runMachineConnectCommand(args, deps);
     }),
     createEnvCommand(["machine", "status"], "List machines registered to the current profile", async (args, deps) => {
-      const { runMachineStatusCommand } = await import("./machineCommands-CTE5QJBU.js");
+      const { runMachineStatusCommand } = await import("./machineCommands-3LSEP24P.js");
       return runMachineStatusCommand(args, deps);
     }),
     createEnvCommand(["doctor", "runtime"], "Diagnose local-first agent runtime selection", async (args, deps) => {

package/{dialogCommands-6POPB6FB.js → dialogCommands-P5HSDZ7T.js}

@@ -15,7 +15,7 @@ import {
   runDialogSearchCommand,
   runDialogStatusCommand,
   sortDialogs
-} from "./chunk-O4R4M4M5.js";
+} from "./chunk-IMMA7QFE.js";
 import "./chunk-ID4G2MAR.js";
 import "./chunk-LEZLJTQ4.js";
 import "./chunk-Y5GCAMGP.js";
@@ -66,7 +66,7 @@ import "./chunk-M2EJHDJP.js";
 import "./chunk-5EMSBTQ6.js";
 import "./chunk-I42VC5KR.js";
 import "./chunk-U6VC4MU4.js";
-import "./chunk-WO5P2HTX.js";
+import "./chunk-URW5UM6Y.js";
 import "./chunk-PJNFNEJE.js";
 import "./chunk-PSCNXBYA.js";
 import "./chunk-GAGGEA7D.js";

package/index.js

@@ -71,9 +71,9 @@ async function runScript(script, forwardedArgs, env) {
   return proc.exited;
 }
 async function launchTuiWorkspace(args2) {
-  const { startTuiWorkspace } = await import("./readlineWorkspace-3WLNCNV4.js");
+  const { startTuiWorkspace } = await import("./readlineWorkspace-OFBP6OA7.js");
   const { createTuiSummaryLlmCaller } = await import("./tuiSummaryLlmCaller-FQOEF4IE.js");
-  const { setCliAutoCompactionSummaryFallback } = await import("./localRuntimeAdapter-6P7JHQOK.js");
+  const { setCliAutoCompactionSummaryFallback } = await import("./localRuntimeAdapter-ZIAOTUBE.js");
   setCliAutoCompactionSummaryFallback(
     createTuiSummaryLlmCaller(args2.env, { timeoutMs: 3e4 })
   );
@@ -85,7 +85,7 @@ async function launchTuiWorkspace(args2) {
   });
 }
 async function main() {
-  const { createCliRuntimeContext, looksLikeDaemonShortcut, renderHelpText, resolveCommand, runResolvedCommand } = await import("./commandRegistry-PDKCQHG3.js");
+  const { createCliRuntimeContext, looksLikeDaemonShortcut, renderHelpText, resolveCommand, runResolvedCommand } = await import("./commandRegistry-3XBG7JHS.js");
   const { buildCliRuntimeEnv, loadProfileConfig } = await import("./profileConfig-KN3N2BLF.js");
   const { resolveTuiLaunchMode } = await import("./runtimeModeArgs-2Y7BALTO.js");
   const runtimeEnv = {

package/{localRuntimeAdapter-6P7JHQOK.js → localRuntimeAdapter-ZIAOTUBE.js}

@@ -46,7 +46,7 @@ import {
   withRuntimeEnabledPacksAndPrompt,
   writeDialog,
   writeLocalTokenRecord
-} from "./chunk-B4VCTNZL.js";
+} from "./chunk-WC7UXON2.js";
 import "./chunk-G3VYRPTV.js";
 import "./chunk-R4BMKAR5.js";
 import "./chunk-TDX2L4W2.js";
@@ -164,7 +164,7 @@ import "./chunk-I42VC5KR.js";
 import "./chunk-U6VC4MU4.js";
 import {
   setRemoteDialogSyncTimeoutForTest
-} from "./chunk-WO5P2HTX.js";
+} from "./chunk-URW5UM6Y.js";
 import "./chunk-PJNFNEJE.js";
 import "./chunk-PSCNXBYA.js";
 import "./chunk-FDLDMJTM.js";

package/{machineCommands-CTE5QJBU.js → machineCommands-3LSEP24P.js}

@@ -2,7 +2,7 @@ import {
   buildMachinePermissionPromptBlock,
   handleConnectorRunMessage,
   resolveMachineRunPermissionPolicy
-} from "./chunk-AIHY74D3.js";
+} from "./chunk-Z6HR75HX.js";
 import {
   MAX_CONNECTOR_TIMER_DELAY_MS,
   clampConnectorTimerDelayMs,
@@ -11,7 +11,7 @@ import {
   resolveConnectorProbeTimeoutMs,
   resolveConnectorWebSocketTarget
 } from "./chunk-BLVSFYQ3.js";
-import "./chunk-B4VCTNZL.js";
+import "./chunk-WC7UXON2.js";
 import "./chunk-G3VYRPTV.js";
 import "./chunk-R4BMKAR5.js";
 import "./chunk-TDX2L4W2.js";
@@ -135,7 +135,7 @@ import "./chunk-M2EJHDJP.js";
 import "./chunk-5EMSBTQ6.js";
 import "./chunk-I42VC5KR.js";
 import "./chunk-U6VC4MU4.js";
-import "./chunk-WO5P2HTX.js";
+import "./chunk-URW5UM6Y.js";
 import "./chunk-PJNFNEJE.js";
 import "./chunk-PSCNXBYA.js";
 import "./chunk-FDLDMJTM.js";

package/{machineWsRunDispatch-7CRVOKDC.js → machineWsRunDispatch-7A3TSH4Q.js}

@@ -11,8 +11,8 @@ import {
   runtimeWorkspacePermissionPolicy,
   scopePermissionPolicyToRuntimeWorkspace,
   summarizeAgentConfigForLogs
-} from "./chunk-AIHY74D3.js";
-import "./chunk-B4VCTNZL.js";
+} from "./chunk-Z6HR75HX.js";
+import "./chunk-WC7UXON2.js";
 import "./chunk-G3VYRPTV.js";
 import "./chunk-R4BMKAR5.js";
 import "./chunk-TDX2L4W2.js";
@@ -123,7 +123,7 @@ import "./chunk-M2EJHDJP.js";
 import "./chunk-5EMSBTQ6.js";
 import "./chunk-I42VC5KR.js";
 import "./chunk-U6VC4MU4.js";
-import "./chunk-WO5P2HTX.js";
+import "./chunk-URW5UM6Y.js";
 import "./chunk-PJNFNEJE.js";
 import "./chunk-PSCNXBYA.js";
 import "./chunk-FDLDMJTM.js";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "nolo-cli",
-  "version": "0.170.0",
+  "version": "0.170.1",
   "type": "module",
   "description": "Agent-first terminal workspace for Nolo",
   "bin": {

package/{readlineWorkspace-3WLNCNV4.js → readlineWorkspace-OFBP6OA7.js}

@@ -90,7 +90,7 @@ import {
   wrapTextToLines,
   wrapTranscriptLine,
   wrapTranscriptLineWithLayout
-} from "./chunk-RKKJ6SVM.js";
+} from "./chunk-O2AY3CVI.js";
 import "./chunk-6QDYSCPW.js";
 import "./chunk-DHNQA4VI.js";
 import {
@@ -102,7 +102,7 @@ import {
   createCliLocalRuntimeAdapter,
   createOriginShellGrant,
   readTimestamp
-} from "./chunk-B4VCTNZL.js";
+} from "./chunk-WC7UXON2.js";
 import "./chunk-G3VYRPTV.js";
 import "./chunk-R4BMKAR5.js";
 import {
@@ -123,7 +123,7 @@ import {
   normalizeDialogRecord,
   readDialogSnapshot,
   sortDialogs
-} from "./chunk-O4R4M4M5.js";
+} from "./chunk-IMMA7QFE.js";
 import "./chunk-ID4G2MAR.js";
 import {
   listUserRecordsFromServers,
@@ -320,7 +320,7 @@ import {
   isRunRecordClaimed,
   listRunRecords,
   readRunRecord
-} from "./chunk-WO5P2HTX.js";
+} from "./chunk-URW5UM6Y.js";
 import {
   clipText,
   formatDuration,