nolo-cli 0.183.0-alpha.1 → 0.185.0-alpha.1

package/{chunk-FUW33OOI.js → chunk-YDD6QMEG.js}

@@ -17,14 +17,14 @@ import {
   createChromeConnectorClientResolver,
   createVerifiedChromeConnectorClient,
   executeChromeConnectorTool
-} from "./chunk-GKKIZRJ6.js";
+} from "./chunk-YXTMZQGX.js";
 import {
   defaultLoopbackRequest
 } from "./chunk-VP3BINY7.js";
 import {
   OAUTH_PROVIDER_REFS,
   buildLocalAgentLookupKeys
-} from "./chunk-MPIAKYZ7.js";
+} from "./chunk-YYKHIX4X.js";
 import {
   LOCAL_CODEX_AGENT_ID,
   LOCAL_CODEX_AGENT_KEY,
@@ -60,7 +60,7 @@ import {
 import {
   inlineImageUrlsForCustomProvider,
   prepareTools
-} from "./chunk-5DVM4RIR.js";
+} from "./chunk-NCC2SYOD.js";
 import {
   getServerProviderSecret
 } from "./chunk-HS7MLR74.js";
@@ -82,18 +82,18 @@ import {
   resolveCliLocalRuntimeKeyCapability,
   resolveCliLocalSpawnDispatch,
   resolveStartAgentRunCwd
-} from "./chunk-5ROGGWPM.js";
+} from "./chunk-D4JCY67U.js";
 import {
   deriveCredentialGroup,
   deriveCustomProviderCredentialGroup
-} from "./chunk-P7JNYLDW.js";
+} from "./chunk-KHMJI7GE.js";
 import {
   fetchWithTransientRetry,
   isTransientFetchError
 } from "./chunk-KFHREHUQ.js";
 import {
   resolveAgentRequiredPackIds
-} from "./chunk-HWJZEUA6.js";
+} from "./chunk-7YW5OUQE.js";
 import {
   getDefaultCliLocalRuntimeDb
 } from "./chunk-FDLDMJTM.js";
@@ -105,14 +105,14 @@ import {
   resolveBuiltinPlatformAgentConfig,
   runKeyed,
   validateAskChoiceInput
-} from "./chunk-WGHIT2HH.js";
+} from "./chunk-VXCDYN6M.js";
 import {
   BUILTIN_DIALOG_LLM_CHAT_FALLBACK_MODEL,
   BUILTIN_TITLE_LLM_CONFIG
 } from "./chunk-523DITKR.js";
 import {
   fetchServerSyncedCredential
-} from "./chunk-MHC44FKA.js";
+} from "./chunk-DBEIHUCJ.js";
 import {
   isTombstoneRecord
 } from "./chunk-D2MDMY2M.js";
@@ -125,7 +125,7 @@ import {
   applySystemBuiltinSkillFilter,
   expandEnabledPacks,
   resolveEffectiveEnabledPacks
-} from "./chunk-NRYTWXXV.js";
+} from "./chunk-7XISFN2T.js";
 import {
   DEFAULT_HYBRID_READ_TIMEOUT_MS,
   Duration_exports,
@@ -169,7 +169,7 @@ import {
   runExecShellGates,
   validateConfiguredRootExecutionLease,
   verifyOwnerRouteAck
-} from "./chunk-FO2BTDKY.js";
+} from "./chunk-IOQHM7ID.js";
 import {
   accumulateGeminiChunks,
   buildGeminiGenerateContentRequest,
@@ -228,7 +228,7 @@ import {
   parseNoloWorkspaceToolArguments,
   resolveRequestToolSurface,
   resolveRuntimeToolSurfaceForAgent
-} from "./chunk-3FTJG5NU.js";
+} from "./chunk-FKOCI2WR.js";
 import {
   isCapacitySaturatedRateLimit,
   mergeAvailabilityDeadline,
@@ -284,11 +284,11 @@ import {
 } from "./chunk-ZWQUWF6W.js";
 import {
   canonicalizeToolNames
-} from "./chunk-NHBJHDVW.js";
+} from "./chunk-AKE53VMW.js";
 import {
   CHROME_CONNECTOR_ACCEPTED_TOOL_NAMES,
   canonicalizeChromeConnectorToolNames
-} from "./chunk-JX5XVFVW.js";
+} from "./chunk-ZC3CMUKU.js";
 import {
   isSystemBuiltinTrustedAgentKey
 } from "./chunk-LOEO7LRC.js";
@@ -358,7 +358,7 @@ import {
 import {
   agentRunCardLabels,
   t
-} from "./chunk-PS3GU7YU.js";
+} from "./chunk-CWLKTRCI.js";
 import {
   isAntigravityOAuthAgent
 } from "./chunk-JOUFPRE4.js";
@@ -7754,7 +7754,262 @@ function createCliControlAgentRunExecutor(deps = {}) {
   };
 }
 
+// packages/cli/client/hostApprovalFlow.ts
+var HOST_APPROVAL_SUMMARY_LIMIT = 2500;
+function clipApprovalSummary(text, limit = HOST_APPROVAL_SUMMARY_LIMIT) {
+  const value = String(text ?? "").replace(/\r\n?/g, "\n").trim();
+  if (value.length <= limit) return value;
+  const tailChars = Math.max(1, Math.round(limit * 0.3));
+  const headChars = Math.max(1, limit - tailChars);
+  const head = value.slice(0, headChars);
+  const tail = value.slice(value.length - tailChars);
+  const omitted = value.length - head.length - tail.length;
+  return `${head}
+\u2026\uFF08\u4E2D\u95F4 ${omitted} \u5B57\u7B26\u672A\u663E\u793A\uFF0C\u4EE5\u4E0B\u662F\u7ED3\u5C3E\uFF1B\u5168\u6587 ${value.length} \u5B57\u7B26\uFF09\u2026
+${tail}`;
+}
+function toEpochMs2(value) {
+  if (typeof value === "number" && Number.isFinite(value)) {
+    return value < 1e11 ? Math.round(value * 1e3) : Math.round(value);
+  }
+  if (typeof value === "string" && value.trim()) {
+    const asNumber = Number(value);
+    if (Number.isFinite(asNumber)) return toEpochMs2(asNumber);
+    const parsed = Date.parse(value);
+    if (Number.isFinite(parsed)) return parsed;
+  }
+  return void 0;
+}
+function remainingApprovalMs(expiresAt, now) {
+  return Math.max(0, expiresAt - now);
+}
+function formatApprovalRemaining(expiresAt, now) {
+  const totalSeconds = Math.ceil(remainingApprovalMs(expiresAt, now) / 1e3);
+  if (totalSeconds <= 0) return "0s";
+  const minutes = Math.floor(totalSeconds / 60);
+  const seconds = totalSeconds % 60;
+  return minutes > 0 ? `${minutes}m${seconds}s` : `${seconds}s`;
+}
+function isRecordLike(value) {
+  return typeof value === "object" && value !== null;
+}
+function asTrimmedString2(value) {
+  return typeof value === "string" ? value.trim() : "";
+}
+function normalizePendingApproval(raw) {
+  if (!isRecordLike(raw)) return null;
+  const approvalId = asTrimmedString2(raw.approvalId);
+  const expiresAt = toEpochMs2(raw.expiresAt ?? raw.expiresAtMs);
+  if (!approvalId || expiresAt === void 0) return null;
+  const tabId = asTrimmedString2(raw.tabId);
+  return {
+    approvalId,
+    actionLabel: asTrimmedString2(raw.action) || "unknown",
+    origin: asTrimmedString2(raw.origin),
+    // Passed through verbatim (the connector's preview already has the identity line, the head and
+    // the stated tail); only an upper-bound guard may touch it, see clipApprovalSummary.
+    summary: clipApprovalSummary(asTrimmedString2(raw.summary)),
+    expiresAt,
+    ...tabId ? { tabId } : {}
+  };
+}
+function parsePendingApprovalResult(result) {
+  let parsed;
+  try {
+    parsed = JSON.parse(result.content);
+  } catch {
+    return null;
+  }
+  if (!isRecordLike(parsed)) return null;
+  const errorBlock = isRecordLike(parsed.error) ? parsed.error : void 0;
+  const details = isRecordLike(errorBlock?.details) ? errorBlock.details : void 0;
+  const verdict = isRecordLike(parsed.result) ? parsed.result : void 0;
+  const candidates = [verdict, errorBlock, details].filter(isRecordLike);
+  const pending = candidates.find((entry) => entry.code === "USER_APPROVAL_PENDING");
+  if (!pending) return null;
+  const ordered = [pending, details, verdict].filter(isRecordLike);
+  const readField = (key) => {
+    for (const entry of ordered) {
+      const value = asTrimmedString2(entry[key]);
+      if (value) return value;
+    }
+    return "";
+  };
+  const approvalId = readField("approvalId");
+  if (!approvalId) return null;
+  let expiresAt;
+  for (const entry of ordered) {
+    const candidate = toEpochMs2(entry.expiresAt ?? entry.expiresAtMs);
+    if (candidate !== void 0) {
+      expiresAt = candidate;
+      break;
+    }
+  }
+  const message = readField("message");
+  return {
+    approvalId,
+    action: readField("action"),
+    ...expiresAt !== void 0 ? { expiresAt } : {},
+    ...message ? { message } : {}
+  };
+}
+function withApprovalId(call, approvalId) {
+  let payload;
+  try {
+    const parsed = JSON.parse(call.arguments || "{}");
+    payload = isRecordLike(parsed) ? { ...parsed } : {};
+  } catch {
+    return call;
+  }
+  payload.approvalId = approvalId;
+  return { ...call, arguments: JSON.stringify(payload) };
+}
+function withHostApprovalRequest(call) {
+  let payload;
+  try {
+    const parsed = JSON.parse(call.arguments || "{}");
+    payload = isRecordLike(parsed) ? { ...parsed } : {};
+  } catch {
+    return call;
+  }
+  payload.hostApproval = true;
+  return { ...call, arguments: JSON.stringify(payload) };
+}
+function createConnectorApprovalPort(getClient) {
+  return {
+    async listPendingApprovals() {
+      const raw = await getClient().request("list_pending_approvals", {});
+      const list = isRecordLike(raw) && Array.isArray(raw.approvals) ? raw.approvals : [];
+      return list.map(normalizePendingApproval).filter((entry) => entry !== null);
+    },
+    async submitApprovalDecision(approvalId, decision) {
+      try {
+        const raw = await getClient().request("submit_approval_decision", {
+          approvalId,
+          decision
+        });
+        if (isRecordLike(raw) && raw.ok === false) {
+          return { failed: asTrimmedString2(raw.code) || "USER_APPROVAL_REJECTED" };
+        }
+        const status = isRecordLike(raw) && raw.status === "denied" ? "denied" : "allowed";
+        return { status };
+      } catch (error) {
+        const code = asTrimmedString2(error?.code);
+        return { failed: code || "CHROME_CONNECTOR_ERROR" };
+      }
+    }
+  };
+}
+function approvalFailure(code, message, action, extra) {
+  return {
+    content: JSON.stringify({ ok: false, error: { code, message } }),
+    metadata: { chromeConnector: true, error: true, code, action, ...extra ?? {} }
+  };
+}
+async function runConnectorToolWithHostApproval(args) {
+  const first = await args.execute(
+    args.awaitHostApproval ? withHostApprovalRequest(args.call) : args.call
+  );
+  const pending = parsePendingApprovalResult(first);
+  if (!pending || !args.awaitHostApproval) return first;
+  const now = args.now ?? Date.now;
+  let listed;
+  try {
+    listed = await args.connector.listPendingApprovals();
+  } catch {
+    return first;
+  }
+  const card = listed.find((entry) => entry.approvalId === pending.approvalId);
+  if (!card) {
+    return approvalFailure(
+      "USER_APPROVAL_EXPIRED",
+      "\u5BA1\u6279\u5DF2\u8FC7\u671F\u6216\u4E0D\u518D\u5F85\u6279\uFF0C\u52A8\u4F5C\u672A\u6267\u884C\u3002",
+      args.call.name
+    );
+  }
+  if (card.expiresAt <= now()) {
+    return approvalFailure("USER_APPROVAL_EXPIRED", "\u5BA1\u6279\u5DF2\u8FC7\u671F\uFF0C\u52A8\u4F5C\u672A\u6267\u884C\u3002", args.call.name);
+  }
+  const decision = await args.awaitHostApproval(card);
+  if (decision === "deny") {
+    await args.connector.submitApprovalDecision(card.approvalId, "deny");
+    return approvalFailure("USER_APPROVAL_DENIED", "\u7528\u6237\u5DF2\u62D2\u7EDD", args.call.name, {
+      approvalId: card.approvalId
+    });
+  }
+  const submitted = await args.connector.submitApprovalDecision(card.approvalId, "allow_once");
+  if ("failed" in submitted) {
+    return approvalFailure(
+      submitted.failed,
+      submitted.failed === "USER_APPROVAL_EXPIRED" ? "\u5BA1\u6279\u5DF2\u8FC7\u671F\uFF0C\u52A8\u4F5C\u672A\u6267\u884C\u3002" : "\u5BA1\u6279\u51B3\u5B9A\u672A\u88AB\u8FDE\u63A5\u5668\u63A5\u53D7\uFF0C\u52A8\u4F5C\u672A\u6267\u884C\u3002",
+      args.call.name,
+      { approvalId: card.approvalId }
+    );
+  }
+  if (submitted.status === "denied") {
+    return approvalFailure("USER_APPROVAL_DENIED", "\u7528\u6237\u5DF2\u62D2\u7EDD", args.call.name, {
+      approvalId: card.approvalId
+    });
+  }
+  return args.execute(withApprovalId(args.call, card.approvalId));
+}
+function createHostApprovalCardQueue() {
+  const waiting = [];
+  let active = false;
+  const drain = async () => {
+    if (active) return;
+    active = true;
+    try {
+      while (waiting.length > 0) {
+        waiting.sort((a, b) => a.card.expiresAt - b.card.expiresAt);
+        const entry = waiting.shift();
+        let decision = "deny";
+        try {
+          decision = await entry.present(entry.card);
+        } catch {
+          decision = "deny";
+        }
+        entry.resolve(decision);
+      }
+    } finally {
+      active = false;
+    }
+  };
+  return {
+    /** Resolves with the user's answer once this card reaches the head of the queue. */
+    present(card, present) {
+      return new Promise((resolve5) => {
+        waiting.push({ card, present, resolve: resolve5 });
+        void Promise.resolve().then(drain);
+      });
+    },
+    /** Cards currently queued or being shown (tests/telemetry). */
+    size: () => waiting.length + (active ? 1 : 0)
+  };
+}
+var registeredRenderer = null;
+function registerHostApprovalRenderer(renderer) {
+  registeredRenderer = renderer;
+  return () => {
+    if (registeredRenderer === renderer) registeredRenderer = null;
+  };
+}
+function getHostApprovalRenderer() {
+  return registeredRenderer ?? void 0;
+}
+
 // packages/cli/client/cliChromeConnectorToolExecutors.ts
+function approvalTargetForCall(call) {
+  try {
+    const parsed = JSON.parse(call.arguments || "{}");
+    const raw = parsed?.target;
+    if (typeof raw !== "string") return void 0;
+    const trimmed = raw.trim().toLowerCase();
+    return trimmed === "chrome" || trimmed === "firefox" ? trimmed : void 0;
+  } catch {
+    return void 0;
+  }
+}
 function buildCliChromeConnectorToolExecutors(args) {
   const clientForTarget = createChromeConnectorClientResolver({
     clients: {
@@ -7762,10 +8017,23 @@ function buildCliChromeConnectorToolExecutors(args) {
       ...args?.client ? { default: createVerifiedChromeConnectorClient({ client: args.client }) } : {}
     }
   });
+  const injectedApprover = args?.awaitHostApproval;
   return Object.fromEntries(
     CHROME_CONNECTOR_ACCEPTED_TOOL_NAMES.map((toolName) => [
       toolName,
-      (call) => executeChromeConnectorTool({ clientForTarget, call })
+      (call) => {
+        const target = approvalTargetForCall(call);
+        const connector = createConnectorApprovalPort(() => clientForTarget(target));
+        return runConnectorToolWithHostApproval({
+          call,
+          execute: (nextCall) => executeChromeConnectorTool({ clientForTarget, call: nextCall }),
+          connector,
+          // Read the registry per call so a TUI that installs its renderer after the table is
+          // built still gets approvals in the conversation; no host approver ⇒ undefined ⇒ the
+          // pending verdict is returned untouched.
+          awaitHostApproval: injectedApprover ?? getHostApprovalRenderer()
+        });
+      }
     ])
   );
 }
@@ -9659,7 +9927,7 @@ async function createLocalDockerWorkload(args) {
   const createLifecycle = args.createLifecycle ?? (async () => {
     const [{ DockerWorkloadLifecycle, createDockerBindingAuthorizer }, accounts] = await Promise.all([
       import("./workloadLifecycle-2F5YKFGW.js"),
-      import("./accountResolver-HPVXZJYD.js")
+      import("./accountResolver-NQJ57BVU.js")
     ]);
     const resolveAccount = args.resolveAccount ?? accounts.createDockerAccountResolver({
       env: args.env,
@@ -13016,6 +13284,9 @@ export {
   readTimestamp,
   parseAgentRunEvent,
   isLiveAgentRunObservation,
+  formatApprovalRemaining,
+  createHostApprovalCardQueue,
+  registerHostApprovalRenderer,
   isSubtaskRun,
   RUN_WAKE_CHANNEL_ENV,
   createOriginShellGrant,

package/{chunk-53HMDUG6.js → chunk-YI75FYBS.js}

@@ -1,6 +1,6 @@
 import {
   t
-} from "./chunk-PS3GU7YU.js";
+} from "./chunk-CWLKTRCI.js";
 
 // packages/cli/windowsSelfUpdate.ts
 import { spawn } from "node:child_process";

package/{chunk-AWFDDOVW.js → chunk-YVAERPCH.js}

@@ -1,13 +1,13 @@
 import {
   listUserRecordsFromServers,
   readLiveDbRecordAfterTombstoneMerge
-} from "./chunk-F2P6YUHC.js";
+} from "./chunk-K3TVMCV3.js";
 import {
   agentRecordHasConfiguredCredential
-} from "./chunk-GTQKUQGF.js";
+} from "./chunk-IHQ7RMRS.js";
 import {
   deriveCredentialGroup
-} from "./chunk-P7JNYLDW.js";
+} from "./chunk-KHMJI7GE.js";
 import {
   isTombstoneRecord
 } from "./chunk-D2MDMY2M.js";

package/{chunk-GKKIZRJ6.js → chunk-YXTMZQGX.js}

@@ -307,6 +307,10 @@ var CHROME_TOOL_ACTIONS = {
   browser_screenshot: "screenshot",
   browser_read_console: "read_console",
   browser_read_network: "read_network",
+  // `eval_script` lives on the same table as the rest on purpose: the host's in-conversation approval
+  // card is installed over the browser tool table, so an eval reachable only through
+  // `nolo browser eval` would fall outside the card entirely.
+  browser_eval_script: "eval_script",
   // Legacy aliases (kept for existing agents/tests).
   chrome_list_tabs: "list_tabs",
   chrome_open_tab: "open_tab",
@@ -320,6 +324,7 @@ var CHROME_TOOL_ACTIONS = {
   chrome_screenshot: "screenshot",
   chrome_read_console: "read_console",
   chrome_read_network: "read_network",
+  chrome_eval_script: "eval_script",
   chrome_set_files: "set_files",
   chrome_upload_file: "set_files",
   chrome_upload: "set_files"
@@ -365,7 +370,8 @@ var TAB_ID_REQUIRED_ACTIONS = /* @__PURE__ */ new Set([
   "detach",
   "set_files",
   "set_select_value",
-  "prepare_browser_action"
+  "prepare_browser_action",
+  "eval_script"
 ]);
 var ALLOWED_PREPARE_SUB_ACTIONS = /* @__PURE__ */ new Set(["click", "type", "press"]);
 function validateChromeConnectorPayload(action, payload) {
@@ -537,7 +543,10 @@ var REQUIRED_CHROME_CONNECTOR_FEATURES = {
   read_network: ["browser_debug"],
   detach: ["browser_debug"],
   set_files: ["compact_observation_v2", "file_upload"],
-  prepare_browser_action: ["prepare_browser_action"]
+  prepare_browser_action: ["prepare_browser_action"],
+  // debugger-backed (`chrome.debugger` → Runtime.evaluate), so the same feature name the extension
+  // publishes also says "Chrome would run this, Firefox cannot" — see FIREFOX_UNAVAILABLE_FEATURES.
+  eval_script: ["eval"]
 };
 function requiredFeaturesForConnectorAction(action) {
   return [...REQUIRED_CHROME_CONNECTOR_FEATURES[action] ?? []];

package/{chunk-3PVH6HJG.js → chunk-YXTQJ2QR.js}

@@ -1,12 +1,12 @@
 import {
   addContentToSpace
-} from "./chunk-7AVKDSWD.js";
+} from "./chunk-HRLKX6YP.js";
 import {
   format,
   prepareAndPersistMessage,
   uiAskChoiceFunc,
   uiAskChoiceFunctionSchema
-} from "./chunk-WGHIT2HH.js";
+} from "./chunk-VXCDYN6M.js";
 import {
   formatISO
 } from "./chunk-ZRAU6T47.js";
@@ -25,7 +25,7 @@ import {
 } from "./chunk-PXYBUFDB.js";
 import {
   buildBuiltinObjectSkillReference
-} from "./chunk-NRYTWXXV.js";
+} from "./chunk-7XISFN2T.js";
 import {
   extractCustomId
 } from "./chunk-M2EJHDJP.js";

package/{chunk-MPIAKYZ7.js → chunk-YYKHIX4X.js}

@@ -1,7 +1,7 @@
 import {
   buildAgentRuntimeAgentLookupKeys,
   shouldFetchAgentRuntimeRecordRemotely
-} from "./chunk-3FTJG5NU.js";
+} from "./chunk-FKOCI2WR.js";
 
 // packages/agent-runtime/oauthProviderRefs.ts
 var OAUTH_PROVIDER_REFS = [

package/{chunk-JX5XVFVW.js → chunk-ZC3CMUKU.js}

@@ -11,7 +11,8 @@ var CHROME_CONNECTOR_TOOL_NAMES = [
   "browser_scroll",
   "browser_screenshot",
   "browser_read_console",
-  "browser_read_network"
+  "browser_read_network",
+  "browser_eval_script"
 ];
 var CHROME_CONNECTOR_LEGACY_TOOL_ALIASES = {
   chrome_list_tabs: "browser_list_tabs",
@@ -25,7 +26,8 @@ var CHROME_CONNECTOR_LEGACY_TOOL_ALIASES = {
   chrome_scroll: "browser_scroll",
   chrome_screenshot: "browser_screenshot",
   chrome_read_console: "browser_read_console",
-  chrome_read_network: "browser_read_network"
+  chrome_read_network: "browser_read_network",
+  chrome_eval_script: "browser_eval_script"
 };
 var CHROME_CONNECTOR_LEGACY_TOOL_NAMES = Object.keys(
   CHROME_CONNECTOR_LEGACY_TOOL_ALIASES
@@ -269,6 +271,27 @@ var chromeReadNetworkFunctionSchema = baseSchema(
   },
   ["tabId"]
 );
+var chromeEvalScriptFunctionSchema = baseSchema(
+  "browser_eval_script",
+  "Run a JavaScript expression in a browser tab and get its value back. Chrome only (it needs chrome.debugger), and every call requires a fresh user approval: the connector answers USER_APPROVAL_PENDING with an approvalId while the user allows this exact script once, and only then may the same call be retried with that approvalId. The script is never rewritten before it runs, but the approval card cannot print all of a long script: it shows the script with its own line breaks, states how many characters were cut (the approval still covers the whole text), and prints the first 8 hex digits of the script's SHA-256 so the user can check that what they read is the text being approved. Results are capped at 100 000 characters: when the reply has truncated === true (and complete === false) the value is only a cut-down part of the result and you must say so \u2014 report it as truncated instead of presenting it as the complete value. A value that cannot be serialised answers ok: false with code EVAL_RESULT_NOT_SERIALIZABLE and no value. The value comes from the live page and may contain data the user did not mean to share \u2014 report it back to the user, do not send it anywhere else.",
+  {
+    tabId,
+    expression: {
+      type: "string",
+      description: "JavaScript source to evaluate in the tab. Sent verbatim; the approval card shows it with its own line breaks, states any part it had to cut, and prints the SHA-256 prefix of the full text."
+    },
+    awaitPromise: {
+      type: "boolean",
+      description: "Wait for the returned promise to settle before answering. Omit to hand back a pending promise unresolved."
+    },
+    timeoutMs: {
+      type: "number",
+      description: "Execution deadline in ms (100..60000). The connector clamps out-of-range values."
+    },
+    approvalId
+  },
+  ["tabId", "expression"]
+);
 var chromeConnectorToolSchemas = [
   chromeListTabsFunctionSchema,
   chromeOpenTabFunctionSchema,
@@ -281,7 +304,8 @@ var chromeConnectorToolSchemas = [
   chromeScrollFunctionSchema,
   chromeScreenshotFunctionSchema,
   chromeReadConsoleFunctionSchema,
-  chromeReadNetworkFunctionSchema
+  chromeReadNetworkFunctionSchema,
+  chromeEvalScriptFunctionSchema
 ];
 async function chromeConnectorUnavailableFunc() {
   throw new Error("Browser connector tools are only executable in the Nolo desktop local runtime.");

package/{chunk-B3BTDNEC.js → chunk-ZU2BF6Q4.js}

@@ -3,13 +3,13 @@ import {
 } from "./chunk-HS7MLR74.js";
 import {
   performServerProxyFetchWithRetry
-} from "./chunk-ORYQ2GDN.js";
+} from "./chunk-MIPGIRJJ.js";
 import {
   fetchServerSyncedCredential
-} from "./chunk-MHC44FKA.js";
+} from "./chunk-DBEIHUCJ.js";
 import {
   buildSkillGuidancePromptBlock
-} from "./chunk-TXJZ7QXG.js";
+} from "./chunk-ZZE2IJ5U.js";
 import {
   CREDENTIAL_HYGIENE_RULE,
   DELETE_SAFETY_RED_LINE,
@@ -23,7 +23,7 @@ import {
   compileContextLayers,
   detectDispatchIntentFromMessages,
   resolveToolGuidedSections
-} from "./chunk-TQU64H2A.js";
+} from "./chunk-QEGPFGKA.js";
 import {
   convertMessagesToResponsesInput,
   getUsageRequestOptions,
@@ -47,7 +47,7 @@ import {
 } from "./chunk-4VJAC32I.js";
 import {
   canonicalizeToolNames
-} from "./chunk-NHBJHDVW.js";
+} from "./chunk-AKE53VMW.js";
 import {
   API_ENDPOINTS
 } from "./chunk-LCBAMY2M.js";

package/{chunk-DHMXTEM4.js → chunk-ZYI6K46I.js}

@@ -5,10 +5,10 @@ import {
 } from "./chunk-NBTY7YJF.js";
 import {
   resolveCliLocalRuntimeKeyCapability
-} from "./chunk-5ROGGWPM.js";
+} from "./chunk-D4JCY67U.js";
 import {
   HIGH_RISK_MUTATION_TOOL_NAMES
-} from "./chunk-3FTJG5NU.js";
+} from "./chunk-FKOCI2WR.js";
 import {
   DEFAULT_NOLO_SERVER_URL
 } from "./chunk-OLZBQWZU.js";

package/{chunk-TXJZ7QXG.js → chunk-ZZE2IJ5U.js}

@@ -6,7 +6,7 @@ import {
   buildBuiltinObjectSkillDbKey,
   buildBuiltinObjectSkillPageContent,
   buildCodeWorkDiscipline
-} from "./chunk-NRYTWXXV.js";
+} from "./chunk-7XISFN2T.js";
 import {
   buildSkillDocMarkdown,
   resolvePageSkillMetadata
@@ -16,7 +16,7 @@ import {
 } from "./chunk-Y6ORVLSS.js";
 import {
   canonicalizeToolNames
-} from "./chunk-NHBJHDVW.js";
+} from "./chunk-AKE53VMW.js";
 import {
   asNonEmptyStringArray
 } from "./chunk-I42VC5KR.js";