nolo-cli 0.185.0-alpha.4 → 0.186.0-alpha.1

package/{chunk-Z4AZSU7X.js → chunk-4GZ2LY5F.js}

@@ -14,7 +14,7 @@ import {
 } from "./chunk-QYPE3TS3.js";
 import {
   runLlm
-} from "./chunk-KBW2QSGY.js";
+} from "./chunk-VMMS7L64.js";
 import {
   getApproxPricePerImage
 } from "./chunk-4JH2UMJR.js";
@@ -7225,6 +7225,7 @@ var space_locale_default = {
       unpin: "Unpin",
       favorite: "Favorite",
       unfavorite: "Unfavorite",
+      favoriteDetailMissingHint: "Favorited item \u2014 opening it will show its title",
       quickAddToRail: "Add to Rail Shortcut",
       quickRemoveFromRail: "Remove from Rail Shortcut",
       quickMoveRailUp: "Move Rail Shortcut Up",
@@ -7551,6 +7552,7 @@ var space_locale_default = {
       unpin: "\u53D6\u6D88\u7F6E\u9876",
       favorite: "\u6536\u85CF",
       unfavorite: "\u53D6\u6D88\u6536\u85CF",
+      favoriteDetailMissingHint: "\u6536\u85CF\u9879\uFF0C\u6253\u5F00\u540E\u4F1A\u663E\u793A\u6807\u9898",
       quickAddToRail: "\u52A0\u5165\u5FEB\u6377",
       quickRemoveFromRail: "\u4ECE\u5FEB\u6377\u79FB\u9664",
       quickMoveRailUp: "\u5FEB\u6377\u4E0A\u79FB",
@@ -7876,6 +7878,7 @@ var space_locale_default = {
       unpin: "\u53D6\u6D88\u7F6E\u9802",
       favorite: "\u6536\u85CF",
       unfavorite: "\u53D6\u6D88\u6536\u85CF",
+      favoriteDetailMissingHint: "\u6536\u85CF\u9805\uFF0C\u958B\u555F\u5F8C\u6703\u986F\u793A\u6A19\u984C",
       quickAddToRail: "\u52A0\u5165\u5FEB\u6377",
       quickRemoveFromRail: "\u5F9E\u5FEB\u6377\u79FB\u9664",
       quickMoveRailUp: "\u5FEB\u6377\u4E0A\u79FB",
@@ -8202,6 +8205,7 @@ var space_locale_default = {
       unpin: "\u30D4\u30F3\u7559\u3081\u89E3\u9664",
       favorite: "\u304A\u6C17\u306B\u5165\u308A",
       unfavorite: "\u304A\u6C17\u306B\u5165\u308A\u89E3\u9664",
+      favoriteDetailMissingHint: "\u304A\u6C17\u306B\u5165\u308A\u9805\u76EE\u3002\u958B\u304F\u3068\u30BF\u30A4\u30C8\u30EB\u304C\u8868\u793A\u3055\u308C\u307E\u3059",
       quickAddToRail: "\u30EC\u30FC\u30EB\u306B\u8FFD\u52A0",
       quickRemoveFromRail: "\u30EC\u30FC\u30EB\u304B\u3089\u524A\u9664",
       quickMoveRailUp: "\u30EC\u30FC\u30EB\u5185\u3067\u4E0A\u3078\u79FB\u52D5",
@@ -11067,7 +11071,7 @@ var messageSlice = createSliceWithThunks({
             runtimeOptions: args.runtimeOptions
           });
           if (agentKeyToUse) {
-            const { streamAgentChatTurn } = await import("./agentSlice-XC35R4QW.js");
+            const { streamAgentChatTurn } = await import("./agentSlice-RW25WUPR.js");
             await dispatch(
               streamAgentChatTurn({
                 agentKey: agentKeyToUse,
@@ -13881,7 +13885,7 @@ var deleteDialogThunk = async (payload, thunkApi) => {
   }
   if (isCurrentDialog) {
     await thunkApi.dispatch(resetMsgs());
-    const { clearPendingAttachments: clearPendingAttachments2 } = await import("./dialogSlice-IZAIMZXJ.js");
+    const { clearPendingAttachments: clearPendingAttachments2 } = await import("./dialogSlice-PHPLFD5F.js");
     dispatch(clearPendingAttachments2());
   }
   return { dialogKey, isCurrentDialog, attachmentPlan };
@@ -13889,15 +13893,15 @@ var deleteDialogThunk = async (payload, thunkApi) => {
 
 // packages/chat/dialog/dialogSlice.ts
 var runCreateDialogAction = async (args, thunkApi) => {
-  const { createDialogAction } = await import("./createDialogAction-RGDFOBVN.js");
+  const { createDialogAction } = await import("./createDialogAction-SGOXQ7BC.js");
   return createDialogAction(args, thunkApi);
 };
 var runCreateAgentAutomationAction = async (args, thunkApi) => {
-  const { createAgentAutomationAction } = await import("./createAgentAutomationAction-KCODNBWN.js");
+  const { createAgentAutomationAction } = await import("./createAgentAutomationAction-MFE4QIL4.js");
   return createAgentAutomationAction(args, thunkApi);
 };
 var runUpdateDialogTitleAction = async (args, thunkApi) => {
-  const { updateDialogTitleAction } = await import("./updateDialogTitleAction-HUFWSVYC.js");
+  const { updateDialogTitleAction } = await import("./updateDialogTitleAction-M6U2VK5L.js");
   return updateDialogTitleAction(args, thunkApi);
 };
 var runAddDialogAgentAction = async (args, thunkApi) => {
@@ -13921,7 +13925,7 @@ var runSetDialogExtraReferencesAction = async (args, thunkApi) => {
   return setDialogExtraReferencesAction(args, thunkApi);
 };
 var runHandleSendMessageAction = async (args, thunkApi) => {
-  const { handleSendMessageAction } = await import("./handleSendMessageAction-E6PA6K6X.js");
+  const { handleSendMessageAction } = await import("./handleSendMessageAction-YAO4RDWU.js");
   return handleSendMessageAction(args, thunkApi);
 };
 function clearDialogState() {
@@ -13934,7 +13938,7 @@ var createPageAndAddReference = createAsyncThunk(
   async (payload, { dispatch, getState, rejectWithValue }) => {
     const { slateData, jsonData, title, type, fileId, groupId, dialogKey } = payload;
     try {
-      const { createDocState } = await import("./docStore-IRZWBI3X.js");
+      const { createDocState } = await import("./docStore-HI7P3MVA.js");
       const pageKey = await createDocState(
         { slateData, title },
         { dispatch, getState }

package/{chunk-KQFC7IPI.js → chunk-6HFMPUSN.js}

@@ -2,7 +2,7 @@ import {
   clipMultilineText,
   fetchAndSerializeTable,
   waitForAbortableDelay
-} from "./chunk-ZPRV4GQD.js";
+} from "./chunk-XJECR5M3.js";
 import {
   isGatewayHttpStatus
 } from "./chunk-NF64D32W.js";
@@ -21,7 +21,7 @@ import {
 } from "./chunk-AGIM7IMJ.js";
 import {
   fetchAndCacheMessages
-} from "./chunk-Z4AZSU7X.js";
+} from "./chunk-4GZ2LY5F.js";
 import {
   createSpaceKey
 } from "./chunk-UAD2WT54.js";

package/{chunk-AU7AXHUL.js → chunk-7KWPNGVJ.js}

@@ -2,16 +2,19 @@ import {
   load
 } from "./chunk-KHCLMKZZ.js";
 import {
-  buildSkillDiscoveryLayer
-} from "./chunk-VEA7H5FG.js";
+  DEFAULT_SKILL_CATALOG_BUDGET,
+  applySkillDescriptionBudget,
+  buildSkillDiscoveryCatalogLayer,
+  mapDiscoveredSkillsToCatalogEntries,
+  resolveSkillCatalog,
+  resolveSkillCatalogSync
+} from "./chunk-Q6RMLYSA.js";
 
 // packages/agent-runtime/skillDiscovery.ts
 import { existsSync, readFileSync, readdirSync, statSync } from "node:fs";
 import { join } from "node:path";
 var SKILL_SCAN_DIRS = [".agents/skills"];
-var MAX_DISCOVERED_SKILLS = 50;
-var MAX_DISCOVERY_DESC_BUDGET = 4e3;
-var MIN_DESC_LENGTH = 80;
+var MAX_DISCOVERED_SKILLS = DEFAULT_SKILL_CATALOG_BUDGET.maxEntries;
 function parseSkillFrontmatter(filePath) {
   try {
     const content = readFileSync(filePath, "utf8").slice(0, 2048);
@@ -57,17 +60,7 @@ function discoverSkills(cwd) {
     } catch {
     }
   }
-  const totalDescLen = skills.reduce((sum, s) => sum + s.description.length, 0);
-  if (totalDescLen > MAX_DISCOVERY_DESC_BUDGET && skills.length > 0) {
-    const scale = MAX_DISCOVERY_DESC_BUDGET / totalDescLen;
-    for (const s of skills) {
-      const targetLen = Math.max(MIN_DESC_LENGTH, Math.floor(s.description.length * scale));
-      if (s.description.length > targetLen) {
-        s.description = s.description.slice(0, targetLen).trimEnd();
-      }
-    }
-  }
-  return skills;
+  return applySkillDescriptionBudget(skills);
 }
 function resolveSkillByName(cwd, name) {
   const trimmed = name.trim();
@@ -94,21 +87,64 @@ function resolveSkillByName(cwd, name) {
   }
   return null;
 }
-function buildSkillDiscoveryContextLayer(cwd) {
+function listLocalWorkspaceSkillCatalogEntries(cwd) {
+  return mapDiscoveredSkillsToCatalogEntries(discoverSkills(cwd));
+}
+function createLocalWorkspaceSkillCatalogSource() {
+  return {
+    id: "local-workspace",
+    list: (query) => query.cwd ? listLocalWorkspaceSkillCatalogEntries(query.cwd) : []
+  };
+}
+var collectSources = (args) => [
+  ...args.includeLocalWorkspace === false || !args.cwd ? [] : [createLocalWorkspaceSkillCatalogSource()],
+  ...args.sources ?? []
+];
+async function collectWorkspaceSkillCatalog(args) {
+  return resolveSkillCatalog(
+    collectSources(args),
+    { cwd: args.cwd },
+    args.budget ?? DEFAULT_SKILL_CATALOG_BUDGET
+  );
+}
+function collectWorkspaceSkillCatalogSync(args) {
+  return resolveSkillCatalogSync(
+    collectSources(args),
+    { cwd: args.cwd },
+    args.budget ?? DEFAULT_SKILL_CATALOG_BUDGET,
+    // HIGH-1：注入来源里混进异步实现时，跳过它并在 skillCatalog 里打 warn，
+    // 而不是抛错把「已经收集到的本地文件技能」一起丢掉。
+    { onAsyncSource: "skip" }
+  );
+}
+function buildSkillDiscoveryContextLayerFromCatalog(catalog) {
+  return buildSkillDiscoveryCatalogLayer(catalog);
+}
+function buildSkillDiscoveryContextLayer(cwd, options = {}) {
   try {
-    return buildSkillDiscoveryLayer(discoverSkills(cwd), cwd);
-  } catch {
+    return buildSkillDiscoveryCatalogLayer(
+      collectWorkspaceSkillCatalogSync({ cwd, sources: options.sources })
+    );
+  } catch (error) {
+    console.warn(
+      `[skillDiscovery] \u6280\u80FD\u76EE\u5F55\u88C5\u914D\u5931\u8D25\uFF0C\u672C\u8F6E\u4E0D\u5E26\u6280\u80FD\u7D22\u5F15\u8FD0\u884C\uFF1A${error instanceof Error ? error.message : String(error)}`
+    );
     return null;
   }
 }
-function buildSkillDiscoveryContextBlock(cwd) {
-  return buildSkillDiscoveryContextLayer(cwd)?.content ?? null;
+function buildSkillDiscoveryContextBlock(cwd, options = {}) {
+  return buildSkillDiscoveryContextLayer(cwd, options)?.content ?? null;
 }
 
 export {
   parseSkillFrontmatter,
   discoverSkills,
   resolveSkillByName,
+  listLocalWorkspaceSkillCatalogEntries,
+  createLocalWorkspaceSkillCatalogSource,
+  collectWorkspaceSkillCatalog,
+  collectWorkspaceSkillCatalogSync,
+  buildSkillDiscoveryContextLayerFromCatalog,
   buildSkillDiscoveryContextLayer,
   buildSkillDiscoveryContextBlock
 };

package/{chunk-5STT2WW5.js → chunk-BRBG72OP.js}

@@ -5,7 +5,7 @@ import {
   inlineImageUrlsForCustomProvider,
   prepareTools,
   shouldInlineImageUrlsForAgent
-} from "./chunk-DIP5EVZD.js";
+} from "./chunk-SIX7N4AH.js";
 import {
   CONFIRMATION_INPUT_KEYS,
   INVALID_TOOL_ARGS_REPLACEMENT,
@@ -14,16 +14,16 @@ import {
   performFetchRequest,
   sanitizeOutboundMessages,
   stripModelToolArgs
-} from "./chunk-CH3QKJ2T.js";
+} from "./chunk-ZV6ESGA7.js";
 import {
   findToolExecutor,
   toolDefinitionsByName
-} from "./chunk-5BSIT4IP.js";
+} from "./chunk-37ZDGCX6.js";
 import {
   classifyApiError,
   classifyGenerationError,
   extractErrorDiagnostics
-} from "./chunk-KQFC7IPI.js";
+} from "./chunk-6HFMPUSN.js";
 import {
   createSSEParser,
   createToolRunId,
@@ -32,7 +32,7 @@ import {
   toolRunSetPending,
   toolRunStarted,
   toolRunSucceeded
-} from "./chunk-ZPRV4GQD.js";
+} from "./chunk-XJECR5M3.js";
 import {
   getPublicImageAgentMode
 } from "./chunk-VIDPVFP3.js";
@@ -45,10 +45,10 @@ import {
   messageStreaming,
   toolResultNeedsUserConfirmation,
   updateToolMessage
-} from "./chunk-Z4AZSU7X.js";
+} from "./chunk-4GZ2LY5F.js";
 import {
   streamAgentChatTurn
-} from "./chunk-KBW2QSGY.js";
+} from "./chunk-VMMS7L64.js";
 import {
   addActiveController,
   removeActiveController,

package/{chunk-3SMSREBB.js → chunk-CDUK5BF6.js}

@@ -1,10 +1,10 @@
 import {
   fetchReferenceContents,
   resolveReferenceAssets
-} from "./chunk-KQFC7IPI.js";
+} from "./chunk-6HFMPUSN.js";
 import {
   updateTokensAction
-} from "./chunk-Z4AZSU7X.js";
+} from "./chunk-4GZ2LY5F.js";
 import {
   applyUpdateTokensFulfilled
 } from "./chunk-OWYYDMGJ.js";

package/{chunk-ZN2PUXZ2.js → chunk-DK7QNJVM.js}

@@ -1,12 +1,12 @@
 import {
   addContentToSpace
-} from "./chunk-PHD5UL5B.js";
+} from "./chunk-PEOLOK72.js";
 import {
   format,
   prepareAndPersistMessage,
   uiAskChoiceFunc,
   uiAskChoiceFunctionSchema
-} from "./chunk-Z4AZSU7X.js";
+} from "./chunk-4GZ2LY5F.js";
 import {
   formatISO
 } from "./chunk-ZRAU6T47.js";

package/{chunk-TGH6MIC7.js → chunk-ECAGROXS.js}

@@ -333,7 +333,7 @@ async function saveDocState(arg, { dispatch, getState }) {
     ).unwrap();
     if (dbSpaceId) {
       try {
-        const { updateContentTitle } = await import("./contentThunks-TFYSYUDO.js");
+        const { updateContentTitle } = await import("./contentThunks-EPHFLF62.js");
         await dispatch(
           updateContentTitle({
             spaceId: dbSpaceId,
@@ -372,7 +372,7 @@ async function saveDocState(arg, { dispatch, getState }) {
   }
 }
 async function createDocState(args, thunkApi) {
-  const { createPageAction } = await import("./createPageAction-XXI7D2CN.js");
+  const { createPageAction } = await import("./createPageAction-OTNUT7WI.js");
   return createPageAction(args, thunkApi);
 }
 function subscribe(listener) {

package/{chunk-TIHN5AXV.js → chunk-IOB5RBBZ.js}

@@ -6,7 +6,7 @@ import {
 } from "./chunk-62TBKWTV.js";
 import {
   clearCliLocalRuntimePreparedAgentCache
-} from "./chunk-7XY4VVIL.js";
+} from "./chunk-J5Y3BXJP.js";
 import {
   readCredentialAvailability
 } from "./chunk-R4BMKAR5.js";

package/{chunk-7XY4VVIL.js → chunk-J5Y3BXJP.js}

@@ -60,7 +60,7 @@ import {
 import {
   inlineImageUrlsForCustomProvider,
   prepareTools
-} from "./chunk-DIP5EVZD.js";
+} from "./chunk-SIX7N4AH.js";
 import {
   getServerProviderSecret
 } from "./chunk-HS7MLR74.js";
@@ -82,7 +82,7 @@ import {
   resolveCliLocalRuntimeKeyCapability,
   resolveCliLocalSpawnDispatch,
   resolveStartAgentRunCwd
-} from "./chunk-5BSIT4IP.js";
+} from "./chunk-37ZDGCX6.js";
 import {
   deriveCredentialGroup,
   deriveCustomProviderCredentialGroup
@@ -93,7 +93,7 @@ import {
 } from "./chunk-KFHREHUQ.js";
 import {
   resolveAgentRequiredPackIds
-} from "./chunk-ZPRV4GQD.js";
+} from "./chunk-XJECR5M3.js";
 import {
   getDefaultCliLocalRuntimeDb
 } from "./chunk-FDLDMJTM.js";
@@ -105,14 +105,14 @@ import {
   resolveBuiltinPlatformAgentConfig,
   runKeyed,
   validateAskChoiceInput
-} from "./chunk-Z4AZSU7X.js";
+} from "./chunk-4GZ2LY5F.js";
 import {
   BUILTIN_DIALOG_LLM_CHAT_FALLBACK_MODEL,
   BUILTIN_TITLE_LLM_CONFIG
 } from "./chunk-523DITKR.js";
 import {
   fetchServerSyncedCredential
-} from "./chunk-KBW2QSGY.js";
+} from "./chunk-VMMS7L64.js";
 import {
   isTombstoneRecord
 } from "./chunk-D2MDMY2M.js";
@@ -169,7 +169,7 @@ import {
   runExecShellGates,
   validateConfiguredRootExecutionLease,
   verifyOwnerRouteAck
-} from "./chunk-IOQHM7ID.js";
+} from "./chunk-4ALQFIFF.js";
 import {
   accumulateGeminiChunks,
   buildGeminiGenerateContentRequest,
@@ -4201,60 +4201,153 @@ import { dirname as dirname4, extname, join as join6 } from "node:path";
 import { fileURLToPath } from "node:url";
 
 // packages/cli/client/localRunExecutionIsolation.ts
+var UNSANDBOXED_HOST_EXECUTION_MESSAGE = "\u672C\u673A\u6267\u884C\u65E0\u6C99\u76D2\u9694\u79BB\uFF0C\u547D\u4EE4\u76F4\u63A5\u4F5C\u7528\u4E8E\u4F60\u7684\u5DE5\u4F5C\u533A";
+function normalizeIsolationPlatform(value) {
+  return typeof value === "string" && value.trim() ? value.trim().toLowerCase() : "unknown";
+}
+function isSandboxBackendAvailableOnPlatform(platform) {
+  return normalizeIsolationPlatform(platform) === "linux";
+}
 function resolveLocalRunExecutionIsolationFact(args) {
   const recordedAt = args.nowMs ?? Date.now();
+  const platform = normalizeIsolationPlatform(args.platform);
+  const sandboxBackend = resolveSandboxBackendSupport({
+    platform,
+    dockerWorkloadEnabled: args.dockerWorkloadEnabled,
+    instaboxWorkloadEnabled: args.instaboxWorkloadEnabled,
+    bwrapWorkloadAvailable: args.bwrapWorkloadAvailable,
+    override: args.sandboxBackend
+  });
+  const finish = (fact) => ({
+    ...fact,
+    platform,
+    sandboxBackend,
+    notice: buildIsolationNotice({ fact, platform, sandboxBackend })
+  });
   if (args.dockerWorkloadEnabled) {
-    return {
+    return finish({
       surface: "docker-sandbox",
       isolation: "container",
       sandbox: "docker",
       reason: "docker-workload",
       note: "\u672C run \u7684\u5DE5\u4F5C\u533A\u5DE5\u5177\u65CF\uFF08execShell / readFile / writeFile / editFile / globFiles / grepFiles\uFF09\u8D70\u672C\u673A sbx \u4E91\u6C99\u76D2\uFF08container \u8FB9\u754C\uFF09\uFF0C\u5BBF\u4E3B\u6267\u884C\u5668\u96F6\u8C03\u7528\u3002",
       recordedAt
-    };
+    });
+  }
+  if (args.instaboxWorkloadEnabled) {
+    return finish({
+      surface: "instabox-sandbox",
+      isolation: "container",
+      sandbox: "instabox",
+      reason: "instabox-workload",
+      note: "\u672C run \u8D70 `runtimeKey=instabox`\uFF1AexecShell \u4E0E\u6587\u4EF6\u5DE5\u5177\uFF08readFile / writeFile / editFile / globFiles / grepFiles\uFF09\u90FD\u5728 Instabox \u4E91\u5BB9\u5668\u6267\u884C\u540E\u7AEF\u5B8C\u6210\uFF08container \u8FB9\u754C\uFF09\uFF0C\u96A7\u9053\u663E\u5F0F\u62D2\u7EDD\u56DE\u843D\u5BBF\u4E3B\uFF1B\u4E0D\u652F\u6301\u7684\u5DE5\u4F5C\u533A\u5DE5\u5177\u76F4\u63A5\u62A5\u9519\uFF0C\u4E0D\u4F1A\u843D\u5230\u672C\u673A\u3002\u9694\u79BB\u5F3A\u5EA6\u4E0E\u5BBF\u4E3B\u5E73\u53F0\u65E0\u5173\uFF08darwin / win32 \u4E0A\u540C\u6837\u662F\u5BB9\u5668\uFF09\u3002",
+      recordedAt
+    });
   }
   if (args.bwrapWorkloadAvailable === true) {
-    return {
+    return finish({
       surface: "bwrap-os-sandbox",
       isolation: "os-sandbox",
       sandbox: "bwrap",
       reason: "bwrap-execshell-only",
       note: "\u672C run \u7684 execShell \u8D70\u672C\u673A linux-bubblewrap-v1\uFF08user namespace + seccomp\uFF09\uFF1BreadFile / writeFile / editFile / globFiles / grepFiles **\u4ECD\u5728\u5BBF\u4E3B\u6267\u884C**\uFF0C\u9694\u79BB\u53EA\u8986\u76D6 shell\u3002",
       recordedAt
-    };
+    });
   }
   if (args.runtimeKey === "local") {
-    return {
+    return finish({
       surface: "host",
       isolation: "none",
       sandbox: "host",
       reason: "host-explicit-writes",
       note: "\u672C run \u7531\u8C03\u7528\u65B9**\u663E\u5F0F\u70B9\u540D runtimeKey=local**\uFF1A\u5728\u5BBF\u4E3B\u5DE5\u4F5C\u533A\u6267\u884C\u4E14**\u65E0\u9694\u79BB**\uFF0C\u5199\u64CD\u4F5C\u76F4\u63A5\u4F5C\u7528\u4E8E\u5BBF\u4E3B\u6587\u4EF6\u7CFB\u7EDF\uFF08\u4E0D\u843D docker \u526F\u672C\uFF09\u3002\u6388\u6743\u786E\u8BA4\u7531\u8C03\u7528\u65B9\u53E6\u884C\u8BB0\u5F55\uFF0C\u672C\u6587\u4EF6\u4E0D\u63A8\u65AD\u3002",
       recordedAt
-    };
+    });
   }
   if (args.readOnly === true) {
-    return {
+    return finish({
       surface: "host",
       isolation: "none",
       sandbox: "host",
       reason: "read-only-host",
       note: "\u53EA\u8BFB\u6D3E\u53D1\uFF08\u8C03\u7528\u65B9\u58F0\u660E readOnly\uFF0C\u65E0\u5199\u5DE5\u5177\uFF09\uFF1A\u7559\u5728\u5BBF\u4E3B\u6267\u884C\u4E14**\u65E0\u9694\u79BB**\uFF1B\u5B83\u5199\u4E0D\u4E86\u6587\u4EF6\uFF0C\u8D77\u6C99\u76D2\u662F\u7EAF\u6D6A\u8D39\u3002",
       recordedAt
-    };
+    });
   }
-  return {
+  if (platform !== "unknown" && !isSandboxBackendAvailableOnPlatform(platform)) {
+    return finish({
+      surface: "host",
+      isolation: "none",
+      sandbox: "host",
+      reason: "host-no-sandbox-backend",
+      note: `\u672C run \u5728\u5BBF\u4E3B\u6267\u884C\u4E14**\u65E0\u9694\u79BB**\uFF1A${platform} \u4E0A\u6CA1\u6709\u53EF\u9694\u79BB\u672C\u673A\u6267\u884C\u7684\u6C99\u76D2\u540E\u7AEF\uFF08macOS \u7684 seatbelt \u4EC5\u6709\u7C7B\u578B\u58F0\u660E\u3001\u65E0\u5B9E\u73B0\uFF1BWindows \u65E0\u5BF9\u5E94\u673A\u5236\uFF09\uFF0C\u547D\u4EE4\u4E0E\u6587\u4EF6\u5199\u5165\u76F4\u63A5\u4F5C\u7528\u4E8E\u5BBF\u4E3B\u5DE5\u4F5C\u533A\u3002\u8981\u9694\u79BB\u8BF7\u7528 --runtime-key docker\u3002`,
+      recordedAt
+    });
+  }
+  return finish({
     surface: "host",
     isolation: "none",
     sandbox: "host",
     reason: "host-no-sandbox",
     note: "\u672C run \u5728\u5BBF\u4E3B\u6267\u884C\u4E14**\u65E0\u9694\u79BB**\uFF08\u672A\u8D70 docker \u901A\u9053\uFF0C\u4E5F\u6CA1\u6709\u53EF\u7528\u7684 bwrap workload\uFF09\u3002\u5199\u64CD\u4F5C\u76F4\u63A5\u4F5C\u7528\u4E8E\u5BBF\u4E3B\u5DE5\u4F5C\u533A\uFF1B\u6D3E\u53D1\u578B run \u7684\u9ED8\u8BA4\u843D\u70B9\u662F\u672C\u673A docker \u6C99\u76D2\uFF0C\u4EA4\u4E92\u5F0F run \u53EF\u7528 --runtime-key docker\uFF08\u6216 --local \u663E\u5F0F\u58F0\u660E\u672C\u673A\u6267\u884C\uFF09\u3002",
     recordedAt
+  });
+}
+function resolveSandboxBackendSupport(args) {
+  if (args.override) return args.override;
+  if (args.dockerWorkloadEnabled || args.instaboxWorkloadEnabled || args.bwrapWorkloadAvailable === true) {
+    return "available";
+  }
+  if (args.platform === "unknown") return "unknown";
+  if (!isSandboxBackendAvailableOnPlatform(args.platform)) return "none-on-platform";
+  return args.bwrapWorkloadAvailable === false ? "unavailable" : "unknown";
+}
+function buildIsolationNotice(args) {
+  if (args.fact.reason === "read-only-host") return null;
+  if (args.fact.isolation !== "none") return null;
+  if (args.sandboxBackend !== "none-on-platform" && args.sandboxBackend !== "unavailable") {
+    return null;
+  }
+  const why = args.sandboxBackend === "none-on-platform" ? `${args.platform} \u4E0A\u6CA1\u6709\u53EF\u9694\u79BB\u672C\u673A\u6267\u884C\u7684\u6C99\u76D2\u540E\u7AEF` + (args.platform === "darwin" ? "\uFF08seatbelt \u4EC5\u6709\u7C7B\u578B\u58F0\u660E\u3001\u65E0\u5B9E\u73B0\uFF09" : "") : "\u672C\u673A\u6C99\u76D2\u540E\u7AEF\u4E0D\u53EF\u7528\uFF08Linux \u9700\u8981 bwrap \u4E0E user namespace\uFF09";
+  return {
+    code: "host-execution-unsandboxed",
+    level: "warn",
+    message: `${UNSANDBOXED_HOST_EXECUTION_MESSAGE}\uFF1A${why}\uFF0Crun \u4ECD\u5728\u5BBF\u4E3B\u8FDB\u7A0B\u91CC\u8DD1\u3002`,
+    platform: args.platform,
+    reason: args.fact.reason,
+    sandboxBackend: args.sandboxBackend
   };
 }
 function describeLocalRunExecutionIsolation(fact) {
   return `execution isolation: ${fact.isolation} (sandbox: ${fact.sandbox}, target: ${fact.surface}) \u2014 ${fact.note}`;
 }
+var emittedNoticeKeys = /* @__PURE__ */ new Set();
+function createLocalRunIsolationNoticeEmitter(args) {
+  const seen = args.seen ?? emittedNoticeKeys;
+  return (fact, context) => {
+    const notice = fact.notice;
+    if (!notice) return false;
+    const key = `${notice.platform}:${notice.sandboxBackend}:${notice.reason}`;
+    if (seen.has(key)) return false;
+    seen.add(key);
+    args.sink({
+      message: notice.message,
+      fields: {
+        event: "execution_isolation_unsandboxed",
+        code: notice.code,
+        level: notice.level,
+        isolation: fact.isolation,
+        sandbox: fact.sandbox,
+        surface: fact.surface,
+        reason: fact.reason,
+        platform: fact.platform,
+        sandboxBackend: fact.sandboxBackend,
+        ...context ?? {}
+      }
+    });
+    return true;
+  };
+}
 function recordLocalRunExecutionIsolation(args) {
   const path = joinPath(args.runsDir, `${args.runId}.isolation.json`);
   args.fs.mkdirSync?.(args.runsDir, { recursive: true });
@@ -12386,6 +12479,11 @@ function setCliAutoCompactionSummaryFallback(caller) {
 function getCliAutoCompactionSummaryFallback() {
   return cliAutoCompactionSummaryFallback;
 }
+var emitRunIsolationNotice = createLocalRunIsolationNoticeEmitter({
+  sink: ({ message, fields }) => {
+    getLogger("cli.localRuntimeAdapter").child({ fields }).warn(`[nolo] ${message}`);
+  }
+});
 function createCliLocalRuntimeAdapter(deps) {
   const now = deps.now ?? Date.now;
   const createId = deps.createId ?? createFallbackId;
@@ -12538,16 +12636,20 @@ function createCliLocalRuntimeAdapter(deps) {
     }
   };
   const recordRunExecutionIsolation = async () => {
+    const fact = resolveLocalRunExecutionIsolationFact({
+      runtimeKey: dockerRuntimeEnabled ? "docker" : instaboxRuntimeEnabled ? "instabox" : runtimeKey === "local" ? "local" : void 0,
+      dockerWorkloadEnabled: dockerRuntimeEnabled,
+      // MEDIUM-1（review）：instabox 是容器隔离通道（execShell + 文件工具 bridge，
+      // 显式拒绝回落宿主），darwin / win32 上同样不是宿主执行。不传这一项会落进
+      // 「本平台没有隔离后端」分支，产出「本机执行无沙盒隔离」的误报。
+      instaboxWorkloadEnabled: instaboxRuntimeEnabled,
+      platform: process.platform
+    });
+    const runId = asOptionalTrimmedString(deps.env?.NOLO_AGENT_RUN_ID) ?? "interactive";
+    emitRunIsolationNotice(fact, { runId });
     try {
       const { writeFileSync: writeFileSync4, mkdirSync: mkdirSync4 } = await import("node:fs");
       const { resolveRunsDir: resolveRunsDir2 } = await import("./agentRunControl-SBHIICUQ.js");
-      const fact = resolveLocalRunExecutionIsolationFact({
-        // F1：显式点名宿主执行的 run 在审计里必须与 docker 沙盒区分开
-        // （reason: host-explicit-writes vs docker-workload）。
-        runtimeKey: dockerRuntimeEnabled ? "docker" : runtimeKey === "local" ? "local" : void 0,
-        dockerWorkloadEnabled: dockerRuntimeEnabled
-      });
-      const runId = asOptionalTrimmedString(deps.env?.NOLO_AGENT_RUN_ID) ?? "interactive";
       recordLocalRunExecutionIsolation({
         runId,
         runsDir: resolveRunsDir2(deps.env),

package/{chunk-PHD5UL5B.js → chunk-PEOLOK72.js}

@@ -7,7 +7,7 @@ import {
   deleteDialog,
   runtime_default,
   toast
-} from "./chunk-Z4AZSU7X.js";
+} from "./chunk-4GZ2LY5F.js";
 import {
   formatISO
 } from "./chunk-ZRAU6T47.js";