nolo-cli 0.208.0 → 0.209.0-alpha.1

package/{appGetCommands-RKC3OW5T.js → appGetCommands-5KUXJ4VE.js}

@@ -16,7 +16,7 @@ import "./chunk-NBTY7YJF.js";
 import "./chunk-LKZPX6YH.js";
 import "./chunk-VF4K2QE6.js";
 import "./chunk-UAD2WT54.js";
-import "./chunk-UTBQCL6N.js";
+import "./chunk-2VDB25VM.js";
 import "./chunk-ZNFJWEN4.js";
 import "./chunk-3QKILTO3.js";
 import "./chunk-3IBHFELR.js";
@@ -29,11 +29,11 @@ import "./chunk-2WZXXAQD.js";
 import "./chunk-DA7CTWT4.js";
 import "./chunk-4KB6WQUL.js";
 import "./chunk-56GBUMO5.js";
-import "./chunk-UZT65S6D.js";
+import "./chunk-W5VC7F7V.js";
 import "./chunk-CVCRAO6Q.js";
 import "./chunk-E2BESSAW.js";
 import "./chunk-6HVBI6TI.js";
-import "./chunk-GMEAELJ6.js";
+import "./chunk-YUXQAVRD.js";
 import "./chunk-WJZOQR2J.js";
 import "./chunk-CKOO42G5.js";
 import "./chunk-2MBTWINN.js";

package/{appListCommands-3QVE4TSI.js → appListCommands-FJDBOSMG.js}

@@ -16,7 +16,7 @@ import "./chunk-NBTY7YJF.js";
 import "./chunk-LKZPX6YH.js";
 import "./chunk-VF4K2QE6.js";
 import "./chunk-UAD2WT54.js";
-import "./chunk-UTBQCL6N.js";
+import "./chunk-2VDB25VM.js";
 import "./chunk-ZNFJWEN4.js";
 import "./chunk-3QKILTO3.js";
 import "./chunk-3IBHFELR.js";
@@ -29,11 +29,11 @@ import "./chunk-2WZXXAQD.js";
 import "./chunk-DA7CTWT4.js";
 import "./chunk-4KB6WQUL.js";
 import "./chunk-56GBUMO5.js";
-import "./chunk-UZT65S6D.js";
+import "./chunk-W5VC7F7V.js";
 import "./chunk-CVCRAO6Q.js";
 import "./chunk-E2BESSAW.js";
 import "./chunk-6HVBI6TI.js";
-import "./chunk-GMEAELJ6.js";
+import "./chunk-YUXQAVRD.js";
 import "./chunk-WJZOQR2J.js";
 import "./chunk-CKOO42G5.js";
 import "./chunk-2MBTWINN.js";

package/{chunk-UTBQCL6N.js → chunk-2VDB25VM.js}

@@ -65,6 +65,7 @@ import {
   PARALLEL_DISPATCH_DEFAULT_RULE,
   PLATFORM_RISK_CONTROL_RULE,
   TOOL_GUIDED_SECTION_ORDER,
+  VERIFY_BEFORE_CONCLUDING_RULE,
   buildConsultationModeBlock,
   buildIdentityBlock,
   buildRuntimeGuidanceBlocks,
@@ -74,7 +75,7 @@ import {
   hashStablePrefixContent,
   resolveResponseGuidelines,
   resolveToolGuidedSections
-} from "./chunk-UZT65S6D.js";
+} from "./chunk-W5VC7F7V.js";
 import {
   classifyUnparsableToolArgs,
   collectStablePromptPrefix,
@@ -19947,6 +19948,7 @@ async function runLocalAgentTurn(input) {
       { content: CREDENTIAL_HYGIENE_RULE, cacheScope: "session" },
       // 并行是默认：系统层固定块，紧随红线（localLoop 无 static 作用域，用 session 占位，
       // 「最顶」由数组首位保证——与红线同一约定）。
+      { content: VERIFY_BEFORE_CONCLUDING_RULE, cacheScope: "session" },
       { content: PARALLEL_DISPATCH_DEFAULT_RULE, cacheScope: "session" },
       // 派发落点：并行派发纪律的下一层（派到哪个执行后端），沿用 session 占位约定。
       { content: DISPATCH_BACKEND_POLICY, cacheScope: "session" },

package/{chunk-ALBTWLUE.js → chunk-5P5RH265.js}

@@ -5,7 +5,7 @@ import {
   inlineImageUrlsForCustomProvider,
   prepareTools,
   shouldInlineImageUrlsForAgent
-} from "./chunk-YY37MQSS.js";
+} from "./chunk-GTQFLOYM.js";
 import {
   CONFIRMATION_INPUT_KEYS,
   INVALID_TOOL_ARGS_REPLACEMENT,
@@ -14,16 +14,16 @@ import {
   performFetchRequest,
   sanitizeOutboundMessages,
   stripModelToolArgs
-} from "./chunk-THE5CKB2.js";
+} from "./chunk-W4MOO6XC.js";
 import {
   findToolExecutor,
   toolDefinitionsByName
-} from "./chunk-WWSPE2GG.js";
+} from "./chunk-WYOJXAIC.js";
 import {
   classifyApiError,
   classifyGenerationError,
   extractErrorDiagnostics
-} from "./chunk-DNQ5NOAR.js";
+} from "./chunk-GHSXAOWH.js";
 import {
   createSSEParser,
   createToolRunId,
@@ -32,7 +32,7 @@ import {
   toolRunSetPending,
   toolRunStarted,
   toolRunSucceeded
-} from "./chunk-YCEA47VH.js";
+} from "./chunk-KULR4QDX.js";
 import {
   getPublicImageAgentMode
 } from "./chunk-VIDPVFP3.js";
@@ -46,10 +46,10 @@ import {
   toast,
   toolResultNeedsUserConfirmation,
   updateToolMessage
-} from "./chunk-CGQSAFXP.js";
+} from "./chunk-JBFZMJ4J.js";
 import {
   streamAgentChatTurn
-} from "./chunk-64D757HH.js";
+} from "./chunk-IQ52JEVT.js";
 import {
   addActiveController,
   getActiveDialogKey,

package/{chunk-COWSUNBH.js → chunk-BXLWFS62.js}

@@ -7,7 +7,7 @@ import {
   deleteDialog,
   runtime_default,
   toast
-} from "./chunk-CGQSAFXP.js";
+} from "./chunk-JBFZMJ4J.js";
 import {
   UNCATEGORIZED_ID,
   addContentAction,

package/{chunk-2UZ22L3V.js → chunk-ET2CWLIJ.js}

@@ -7,7 +7,7 @@ import {
 } from "./chunk-XDMGY5IU.js";
 import {
   deriveCredentialGroup
-} from "./chunk-AD26C3WW.js";
+} from "./chunk-YXOBCDNW.js";
 import {
   isTombstoneRecord
 } from "./chunk-D2MDMY2M.js";

package/{chunk-DNQ5NOAR.js → chunk-GHSXAOWH.js}

@@ -2,7 +2,7 @@ import {
   clipMultilineText,
   fetchAndSerializeTable,
   waitForAbortableDelay
-} from "./chunk-YCEA47VH.js";
+} from "./chunk-KULR4QDX.js";
 import {
   isGatewayHttpStatus
 } from "./chunk-NF64D32W.js";
@@ -21,7 +21,7 @@ import {
 } from "./chunk-AGIM7IMJ.js";
 import {
   fetchAndCacheMessages
-} from "./chunk-CGQSAFXP.js";
+} from "./chunk-JBFZMJ4J.js";
 import {
   createSpaceKey
 } from "./chunk-UAD2WT54.js";

package/{chunk-AJ65N2PX.js → chunk-GITM3OZS.js}

@@ -7,7 +7,7 @@ import {
   mergeReferences,
   resolveReferenceAssets,
   resolveToolsFromKeys
-} from "./chunk-DNQ5NOAR.js";
+} from "./chunk-GHSXAOWH.js";
 import {
   UI_CARD_ENVELOPE_MAX_BYTES,
   getAllToolRuns,
@@ -18,14 +18,14 @@ import {
   selectSpaceContextLevel,
   selectUserTonePreset,
   uiCardFallback
-} from "./chunk-YCEA47VH.js";
+} from "./chunk-KULR4QDX.js";
 import {
   resolveAgentRecommendedSkillNames,
   resolveAgentRequiredPackIds
 } from "./chunk-I5PBXF7O.js";
 import {
   getDocState
-} from "./chunk-QOI7USOV.js";
+} from "./chunk-JYL7LFKD.js";
 import {
   resolveToolBaseUrl
 } from "./chunk-MYOH447Z.js";
@@ -37,7 +37,7 @@ import {
 } from "./chunk-A2ZMIRLN.js";
 import {
   getTableState
-} from "./chunk-COWSUNBH.js";
+} from "./chunk-BXLWFS62.js";
 import {
   getCurrentSpaceIdRaw,
   getViewMode
@@ -46,7 +46,7 @@ import {
   PERSONALIZATION_DIALOG_CATEGORY,
   buildPersonalizationDialogPolicyContext,
   selectAllMsgs
-} from "./chunk-CGQSAFXP.js";
+} from "./chunk-JBFZMJ4J.js";
 import {
   selectPendingFiles
 } from "./chunk-OWYYDMGJ.js";

package/{chunk-R56VAYY4.js → chunk-GSQNH63I.js}

@@ -2,7 +2,7 @@ import {
   mergeAvailabilityDeadline,
   resolveCredentialCandidateKeys,
   resolveCredentialKeyWithFallback
-} from "./chunk-GMEAELJ6.js";
+} from "./chunk-YUXQAVRD.js";
 
 // packages/agent-runtime/credentialAvailability.ts
 import { homedir } from "node:os";

package/{chunk-YY37MQSS.js → chunk-GTQFLOYM.js}

@@ -1,9 +1,9 @@
 import {
   toolRegistry
-} from "./chunk-WWSPE2GG.js";
+} from "./chunk-WYOJXAIC.js";
 import {
   runtime_default
-} from "./chunk-CGQSAFXP.js";
+} from "./chunk-JBFZMJ4J.js";
 import {
   canonicalizeToolNames
 } from "./chunk-AKE53VMW.js";

package/{chunk-35DNCETZ.js → chunk-GWXL4KVM.js}

@@ -18,7 +18,7 @@ import {
   readCredentialEntry,
   readEffectiveCredentialEntry,
   recordCredentialProbe
-} from "./chunk-R56VAYY4.js";
+} from "./chunk-GSQNH63I.js";
 import {
   OAUTH_PROVIDER_REFS,
   buildLocalAgentLookupKeys
@@ -71,7 +71,7 @@ import {
 import {
   inlineImageUrlsForCustomProvider,
   prepareTools
-} from "./chunk-YY37MQSS.js";
+} from "./chunk-GTQFLOYM.js";
 import {
   getServerProviderSecret
 } from "./chunk-HS7MLR74.js";
@@ -93,7 +93,7 @@ import {
   resolveCliLocalRuntimeKeyCapability,
   resolveCliLocalSpawnDispatch,
   resolveStartAgentRunCwd
-} from "./chunk-WWSPE2GG.js";
+} from "./chunk-WYOJXAIC.js";
 import {
   fetchWithTransientRetry,
   isTransientFetchError
@@ -101,7 +101,7 @@ import {
 import {
   deriveCredentialGroup,
   deriveCustomProviderCredentialGroup
-} from "./chunk-AD26C3WW.js";
+} from "./chunk-YXOBCDNW.js";
 import {
   resolveAgentRequiredPackIds,
   resolveUserEnabledSkills
@@ -114,14 +114,14 @@ import {
   resolveBuiltinPlatformAgentConfig,
   runKeyed,
   validateAskChoiceInput
-} from "./chunk-CGQSAFXP.js";
+} from "./chunk-JBFZMJ4J.js";
 import {
   BUILTIN_DIALOG_LLM_CHAT_FALLBACK_MODEL,
   BUILTIN_TITLE_LLM_CONFIG
 } from "./chunk-523DITKR.js";
 import {
   fetchServerSyncedCredential
-} from "./chunk-64D757HH.js";
+} from "./chunk-IQ52JEVT.js";
 import {
   getDefaultCliLocalRuntimeDb
 } from "./chunk-AZMYUSVF.js";
@@ -181,7 +181,7 @@ import {
   runExecShellGates,
   validateConfiguredRootExecutionLease,
   verifyOwnerRouteAck
-} from "./chunk-UTBQCL6N.js";
+} from "./chunk-2VDB25VM.js";
 import {
   accumulateGeminiChunks,
   buildGeminiGenerateContentRequest,
@@ -247,7 +247,7 @@ import {
   resolveAvailabilityAction,
   resolveCooldownGate,
   resolveCredentialKeyWithFallback
-} from "./chunk-GMEAELJ6.js";
+} from "./chunk-YUXQAVRD.js";
 import {
   buildDialogFallbackTitleFromUserInput,
   normalizeDialogTitle

package/{chunk-64D757HH.js → chunk-IQ52JEVT.js}

@@ -458,7 +458,7 @@ var slice = createSliceWithThunks({
       const overrides = {};
       if (args.systemPromptOverride !== void 0) overrides.prompt = args.systemPromptOverride;
       if (args.toolsOverride !== void 0) overrides.tools = args.toolsOverride;
-      const { _executeModel } = await import("./_executeModel-F4GZ3K75.js");
+      const { _executeModel } = await import("./_executeModel-C4BBPBMI.js");
       return _executeModel(
         {
           isStreaming: args.isStreaming ?? false,
@@ -479,7 +479,7 @@ var slice = createSliceWithThunks({
      * - 循环直到无工具调用或触发其他运行时停止条件
      */
     runAgent: create.asyncThunk(async (args, thunkApi) => {
-      const { runAgentClientLoop } = await import("./runAgentClientLoop-V4KMRRPJ.js");
+      const { runAgentClientLoop } = await import("./runAgentClientLoop-Z63BHKC2.js");
       const { content: loopContent, toolCallCount } = await runAgentClientLoop(
         {
           agentKey: args.agentKey,
@@ -495,7 +495,7 @@ var slice = createSliceWithThunks({
      * 聊天轮次流式 Agent 调用
      */
     streamAgentChatTurn: create.asyncThunk(async (args, thunkApi) => {
-      const { streamAgentChatTurnHandler } = await import("./streamAgentChatTurn-SUWOIV4S.js");
+      const { streamAgentChatTurnHandler } = await import("./streamAgentChatTurn-BCOVALCO.js");
       return streamAgentChatTurnHandler(args, thunkApi);
     }),
     /**

package/{chunk-CGQSAFXP.js → chunk-JBFZMJ4J.js}

@@ -11,7 +11,7 @@ import {
 } from "./chunk-523DITKR.js";
 import {
   runLlm
-} from "./chunk-64D757HH.js";
+} from "./chunk-IQ52JEVT.js";
 import {
   isMediaToolConfirmation
 } from "./chunk-QYPE3TS3.js";
@@ -11077,7 +11077,7 @@ var messageSlice = createSliceWithThunks({
             runtimeOptions: args.runtimeOptions
           });
           if (agentKeyToUse) {
-            const { streamAgentChatTurn } = await import("./agentSlice-QHBCIRZZ.js");
+            const { streamAgentChatTurn } = await import("./agentSlice-HFQKZPGI.js");
             await dispatch(
               streamAgentChatTurn({
                 agentKey: agentKeyToUse,
@@ -13891,7 +13891,7 @@ var deleteDialogThunk = async (payload, thunkApi) => {
   }
   if (isCurrentDialog) {
     await thunkApi.dispatch(resetMsgs());
-    const { clearPendingAttachments: clearPendingAttachments2 } = await import("./dialogSlice-TBITWBDH.js");
+    const { clearPendingAttachments: clearPendingAttachments2 } = await import("./dialogSlice-ZR5REV4T.js");
     dispatch(clearPendingAttachments2());
   }
   return { dialogKey, isCurrentDialog, attachmentPlan };
@@ -13899,15 +13899,15 @@ var deleteDialogThunk = async (payload, thunkApi) => {
 
 // packages/chat/dialog/dialogSlice.ts
 var runCreateDialogAction = async (args, thunkApi) => {
-  const { createDialogAction } = await import("./createDialogAction-UXAMBNR4.js");
+  const { createDialogAction } = await import("./createDialogAction-UG2SNRXX.js");
   return createDialogAction(args, thunkApi);
 };
 var runCreateAgentAutomationAction = async (args, thunkApi) => {
-  const { createAgentAutomationAction } = await import("./createAgentAutomationAction-FGWAYVEP.js");
+  const { createAgentAutomationAction } = await import("./createAgentAutomationAction-NS3WKF2O.js");
   return createAgentAutomationAction(args, thunkApi);
 };
 var runUpdateDialogTitleAction = async (args, thunkApi) => {
-  const { updateDialogTitleAction } = await import("./updateDialogTitleAction-EDXTLVGM.js");
+  const { updateDialogTitleAction } = await import("./updateDialogTitleAction-BFBSDYW2.js");
   return updateDialogTitleAction(args, thunkApi);
 };
 var runAddDialogAgentAction = async (args, thunkApi) => {
@@ -13931,7 +13931,7 @@ var runSetDialogExtraReferencesAction = async (args, thunkApi) => {
   return setDialogExtraReferencesAction(args, thunkApi);
 };
 var runHandleSendMessageAction = async (args, thunkApi) => {
-  const { handleSendMessageAction } = await import("./handleSendMessageAction-UCFZXCXP.js");
+  const { handleSendMessageAction } = await import("./handleSendMessageAction-OSA5S6SH.js");
   return handleSendMessageAction(args, thunkApi);
 };
 function clearDialogState() {
@@ -13944,7 +13944,7 @@ var createPageAndAddReference = createAsyncThunk(
   async (payload, { dispatch, getState, rejectWithValue }) => {
     const { slateData, jsonData, title, type, fileId, groupId, dialogKey } = payload;
     try {
-      const { createDocState } = await import("./docStore-NFLRMEX3.js");
+      const { createDocState } = await import("./docStore-XWLUIDGI.js");
       const pageKey = await createDocState(
         { slateData, title },
         { dispatch, getState }

package/{chunk-QOI7USOV.js → chunk-JYL7LFKD.js}

@@ -333,7 +333,7 @@ async function saveDocState(arg, { dispatch, getState }) {
     ).unwrap();
     if (dbSpaceId) {
       try {
-        const { updateContentTitle } = await import("./contentThunks-V3CDW4YX.js");
+        const { updateContentTitle } = await import("./contentThunks-E4QWF36P.js");
         await dispatch(
           updateContentTitle({
             spaceId: dbSpaceId,
@@ -372,7 +372,7 @@ async function saveDocState(arg, { dispatch, getState }) {
   }
 }
 async function createDocState(args, thunkApi) {
-  const { createPageAction } = await import("./createPageAction-S6HULJP6.js");
+  const { createPageAction } = await import("./createPageAction-AO5OKX3T.js");
   return createPageAction(args, thunkApi);
 }
 function subscribe(listener) {

package/{chunk-YCEA47VH.js → chunk-KULR4QDX.js}

@@ -16,7 +16,7 @@ import {
 } from "./chunk-RXUKDHS5.js";
 import {
   fetchAndCacheTableRows
-} from "./chunk-COWSUNBH.js";
+} from "./chunk-BXLWFS62.js";
 import {
   createSpaceKey
 } from "./chunk-UAD2WT54.js";
@@ -783,7 +783,7 @@ var executeToolRun = createAsyncThunk(
     if (!executionInput) {
       throw new Error(`ToolRun ${id} has no input to execute with.`);
     }
-    const { findToolExecutor } = await import("./tools-JW4EEFK7.js");
+    const { findToolExecutor } = await import("./tools-56LSBUVX.js");
     const { executor } = findToolExecutor(run.toolName);
     toolRunStarted({
       id: run.id,

package/{chunk-FQQWTOBR.js → chunk-SOEYACRP.js}

@@ -1,10 +1,10 @@
 import {
   fetchReferenceContents,
   resolveReferenceAssets
-} from "./chunk-DNQ5NOAR.js";
+} from "./chunk-GHSXAOWH.js";
 import {
   updateTokensAction
-} from "./chunk-CGQSAFXP.js";
+} from "./chunk-JBFZMJ4J.js";
 import {
   applyUpdateTokensFulfilled
 } from "./chunk-OWYYDMGJ.js";

package/{chunk-CAB2CZ5H.js → chunk-TZFDJZLM.js}

@@ -9,7 +9,7 @@ import {
   resolveRawAgentInput,
   resolveServerUrl,
   writeUsage
-} from "./chunk-FPCPCTSA.js";
+} from "./chunk-W7DFYXGQ.js";
 import {
   parsePositiveFiniteNumberOrFallback
 } from "./chunk-Y5GCAMGP.js";
@@ -38,12 +38,12 @@ import {
   resolveFileWriteGateEnabled,
   resolveLocalUserId,
   validateInstaboxWorkspaceSelection
-} from "./chunk-35DNCETZ.js";
+} from "./chunk-GWXL4KVM.js";
 import {
   clearCredentialAvailability,
   readEffectiveCredentialEntry,
   recordCredentialProbe
-} from "./chunk-R56VAYY4.js";
+} from "./chunk-GSQNH63I.js";
 import {
   isLocalCliAgentKey
 } from "./chunk-NBTY7YJF.js";
@@ -72,14 +72,14 @@ import {
 } from "./chunk-BMQ2MJUK.js";
 import {
   resolveCliLocalRuntimeKeyCapability
-} from "./chunk-WWSPE2GG.js";
+} from "./chunk-WYOJXAIC.js";
 import {
   isTransientFetchError
 } from "./chunk-KFHREHUQ.js";
 import {
   parseUiCard,
   uiCardFallback
-} from "./chunk-YCEA47VH.js";
+} from "./chunk-KULR4QDX.js";
 import {
   isGatewayHttpStatus
 } from "./chunk-NF64D32W.js";
@@ -88,7 +88,7 @@ import {
   chooseMemoryOwners,
   loadMemoryCandidatesFromDb,
   resolveAgentMemoryPolicy
-} from "./chunk-MKK2YY5Q.js";
+} from "./chunk-ZKF7ZGN6.js";
 import {
   API_REPORTED_COST_MULTIPLIER,
   estimateMessagesTokens,
@@ -96,7 +96,7 @@ import {
   resolveAgentContextWindow,
   resolveOccupancy,
   resolveOccupancyWindow
-} from "./chunk-CGQSAFXP.js";
+} from "./chunk-JBFZMJ4J.js";
 import {
   isCliAuthorityBrokerProtocolError,
   isCliAuthorityBrokerTimeoutError,
@@ -116,7 +116,7 @@ import {
   LOCAL_AGENT_CONFIG_MISSING_CODE,
   LOCAL_TURN_ABORTED_CODE,
   readActionGate
-} from "./chunk-UTBQCL6N.js";
+} from "./chunk-2VDB25VM.js";
 import {
   resolveAgentRuntimeConfigFromRecord
 } from "./chunk-SZ4ADZFT.js";
@@ -135,7 +135,7 @@ import {
   mergeAvailabilityDeadline,
   resolveCooldownGate,
   resolveCredentialKeyWithFallback
-} from "./chunk-GMEAELJ6.js";
+} from "./chunk-YUXQAVRD.js";
 import {
   ATTACHMENT_PART_TYPE,
   ATTACHMENT_PART_VERSION,
@@ -11412,7 +11412,7 @@ function isBalanceExhaustedError(error) {
 
 // packages/cli/client/agentRun.ts
 async function loadRunLocalAgentTurn() {
-  const { runLocalAgentTurn } = await import("./agentRuntimeLocal-KCC7QW7Z.js");
+  const { runLocalAgentTurn } = await import("./agentRuntimeLocal-YP5JION7.js");
   return runLocalAgentTurn;
 }
 var stripDebugNoise = (s) => s.replace(/\s*raw="[\s\S]*"/g, "").replace(/\s*raw=\S+/g, "").replace(/\s*headers=\[[^\]]*\]/g, "").replace(/\s*headers=\S+/g, "").trim();

package/{chunk-BF3TXGWM.js → chunk-UAOZTOFA.js}

@@ -1,13 +1,13 @@
 import {
   createCliLocalRuntimeAdapter,
   summarizeEndpoint
-} from "./chunk-35DNCETZ.js";
+} from "./chunk-GWXL4KVM.js";
 import {
   clipMultilineText
-} from "./chunk-YCEA47VH.js";
+} from "./chunk-KULR4QDX.js";
 import {
   runLocalAgentTurn
-} from "./chunk-UTBQCL6N.js";
+} from "./chunk-2VDB25VM.js";
 import {
   applyToolSurfaceConstraints
 } from "./chunk-6HVBI6TI.js";

package/{chunk-MONJ5H3H.js → chunk-V77PUU5T.js}

@@ -16,10 +16,10 @@ import {
 } from "./chunk-XDMGY5IU.js";
 import {
   clearCliLocalRuntimePreparedAgentCache
-} from "./chunk-35DNCETZ.js";
+} from "./chunk-GWXL4KVM.js";
 import {
   readCredentialAvailability
-} from "./chunk-R56VAYY4.js";
+} from "./chunk-GSQNH63I.js";
 import {
   resolveCliAgentKeyInput
 } from "./chunk-NBTY7YJF.js";

package/{chunk-THE5CKB2.js → chunk-W4MOO6XC.js}

@@ -3,10 +3,10 @@ import {
 } from "./chunk-HS7MLR74.js";
 import {
   performServerProxyFetchWithRetry
-} from "./chunk-DNQ5NOAR.js";
+} from "./chunk-GHSXAOWH.js";
 import {
   fetchServerSyncedCredential
-} from "./chunk-64D757HH.js";
+} from "./chunk-IQ52JEVT.js";
 import {
   buildSkillGuidancePromptBlock
 } from "./chunk-Y6M7KJOA.js";
@@ -17,6 +17,7 @@ import {
   DISPATCH_CANDIDATE_POLICY,
   PARALLEL_DISPATCH_DEFAULT_RULE,
   PLATFORM_RISK_CONTROL_RULE,
+  VERIFY_BEFORE_CONCLUDING_RULE,
   buildConsultationModeBlock,
   buildIdentityBlock,
   buildResponseGuidelines,
@@ -24,7 +25,7 @@ import {
   compileContextLayers,
   detectDispatchIntentFromMessages,
   resolveToolGuidedSections
-} from "./chunk-UZT65S6D.js";
+} from "./chunk-W5VC7F7V.js";
 import {
   convertMessagesToResponsesInput,
   getUsageRequestOptions,
@@ -279,6 +280,13 @@ ${wrapHistoricalSummaryWithReplayGuard(contexts.dialogSummary)}` : "";
       cacheScope: "static",
       content: CREDENTIAL_HYGIENE_RULE
     },
+    // 先验证再下结论：一切动作的前提，紧随凭据纪律、先于并行/派发/发布规则。
+    {
+      id: "verify-before-concluding",
+      owner: "platform",
+      cacheScope: "static",
+      content: VERIFY_BEFORE_CONCLUDING_RULE
+    },
     // 并行是默认：系统层固定块，紧随红线（同为无条件前缀，不随工具/轮次变化）。
     {
       id: "parallel-dispatch-default",

package/{chunk-UZT65S6D.js → chunk-W5VC7F7V.js}

@@ -121,6 +121,17 @@ var PARALLEL_DISPATCH_DEFAULT_RULE = [
   "**\u6D3E\u53D1\u5BF9\u8C61\u4E0D\u9ED8\u8BA4\u662F\u81EA\u8EAB**\uFF1A\u6D3E\u53D1\u5B50\u4EFB\u52A1\u524D\u5FC5\u987B\u5148\u626B\u63CF\u5019\u9009\u6C60\uFF08\u626B\u63CF\u5951\u7EA6\u89C1\u5DE5\u5177\u6307\u5F15\u91CC\u7684\u300C\u9009\u4EBA\u300D\u89C4\u5219\uFF09\uFF0C\u628A\u540C\u6863\u7684\u5176\u5B83\u53EF\u7528 Agent \u4E00\u5E76\u7EB3\u5165\u5E76\u6309 credentialGroup \u5206\u6563\uFF1B\u81EA\u8EAB\uFF08\u7701\u7565 agentKey \u6216\u4F20 'self'\uFF09\u53EA\u662F\u515C\u5E95\u2014\u2014\u53EA\u5728\u6CA1\u6709\u5176\u5B83\u53EF\u7528\u4E14\u80DC\u4EFB\u7684\u5019\u9009\u65F6\u624D\u4F7F\u7528\u3002**\u7981\u6B62\u672A\u7ECF\u5019\u9009\u6C60\u626B\u63CF\u5C31\u9ED8\u8BA4\u6D3E\u81EA\u8EAB**\u3002"
 ].join("\n");
 
+// packages/agent-runtime/verifyBeforeConcluding.ts
+var VERIFY_BEFORE_CONCLUDING_RULE = [
+  "\u3010\u5148\u9A8C\u8BC1\uFF0C\u518D\u4E0B\u7ED3\u8BBA\u3011",
+  "**\u4E8B\u5B9E\u4EE5\u5F53\u6B21\u6267\u884C\u8F93\u51FA\u4E3A\u51C6**\uFF1A\u62A5\u9519\u6587\u6848\u3001\u5B57\u6BB5\u540D\u3001\u7C7B\u578B\u7B7E\u540D\u3001\u65E5\u5FD7\u7247\u6BB5\u3001\u8BB0\u5FC6\u4E0E\u76F4\u89C9\u90FD\u4E0D\u662F\u8BC1\u636E\u3002\u8981\u5224\u65AD\u7CFB\u7EDF\u884C\u4E3A\uFF0C\u5C31\u8DD1\u90A3\u6761\u80FD\u7ED9\u51FA\u771F\u503C\u7684\u547D\u4EE4\uFF08dry-run\u3001status \u67E5\u8BE2\u3001\u5B9E\u9645\u8C03\u7528\uFF09\uFF0C\u518D\u9648\u8FF0\u7ED3\u8BBA\u3002",
+  "**\u8BF4\u300C\u5DF2\u9A8C\u8BC1 / \u5DF2\u4FEE\u590D / \u5DF2\u53D1\u5E03\u300D\u5FC5\u987B\u80FD\u5BF9\u5E94\u4E00\u6761\u5F53\u6B21\u547D\u4EE4\u8F93\u51FA**\u3002\u6CA1\u6709\u5C31\u5199\u300C\u672A\u9A8C\u8BC1\u300D\uFF0C\u4E0D\u8981\u7528\u300C\u6309\u903B\u8F91\u5E94\u8BE5\u300D\u586B\u7A7A\uFF1B\u63A8\u65AD\u4E0E\u672A\u77E5\u8981\u548C\u5B9E\u6D4B\u5206\u5F00\u8868\u8FF0\uFF0C\u4E0D\u628A\u63A8\u65AD\u8BF4\u6210\u7ED3\u8BBA\u3002",
+  "**\u53D1\u5E03\u4E0E\u90E8\u7F72\u94FE\u8DEF\u5148\u67E5\u72B6\u6001\u673A\u518D\u52A8\u624B**\uFF1A\u5148\u8DD1 dry-run \u6216\u8BFB run/job \u7ED3\u8BBA\uFF08\u5177\u4F53 run id\u3001job \u540D\u3001\u7ED3\u8BBA\uFF09\uFF0C\u518D\u51B3\u5B9A\u6539\u4EC0\u4E48\u3002\u4E0D\u8981\u4ECE\u4E00\u6761\u62A5\u9519\u6587\u6848\u53CD\u63A8\u7CFB\u7EDF\u72B6\u6001\u2014\u2014\u540C\u4E00\u6761\u6587\u6848\u53EF\u80FD\u6709\u591A\u4E2A\u6210\u56E0\uFF0C\u731C\u9519\u4F1A\u8BA9\u4EBA\u6309\u9519\u8BEF\u65B9\u5411\u6539\u4EE3\u7801\u3002",
+  "**\u89C2\u5BDF\u8005\u672C\u8EAB\u4E5F\u8981\u9A8C\u8BC1**\uFF1A\u8F6E\u8BE2/\u76D1\u89C6/\u5B88\u62A4\u811A\u672C\u7684\u5339\u914D\u6761\u4EF6\u5FC5\u987B\u8986\u76D6\u771F\u5B9E\u8F93\u51FA\u5F62\u6001\uFF08\u7248\u672C\u53F7\u3001\u5206\u652F\u540D\u3001\u65F6\u95F4\u7A97\u53E3\u3001\u5B57\u6BB5\u5927\u5C0F\u5199\uFF09\u3002\u76D1\u89C6\u811A\u672C\u300C\u6CA1\u62A5\u300D\u4E0D\u7B49\u4E8E\u300C\u6CA1\u53D1\u751F\u300D\uFF1B\u5B83\u6CA1\u62A5\u65F6\u5148\u9A8C\u8BC1\u5B83\u81EA\u5DF1\u7684\u5224\u636E\u3002",
+  "**\u4E0D\u53EF\u9006\u6216\u6602\u8D35\u52A8\u4F5C\u524D\u5148\u9A8C\u8BC1\u524D\u7F6E\u6761\u4EF6**\uFF1A\u5220\u9664\u524D\u786E\u8BA4\u76EE\u6807\u6E05\u5355\uFF0C\u63A8\u9001\u524D\u786E\u8BA4\u57FA\u7EBF\u4E0E\u8FDC\u7AEF\u72B6\u6001\uFF0C\u53D1\u7248\u524D\u786E\u8BA4\u7248\u672C/tag/\u4EA7\u7269\u4E00\u81F4\u3002\u9A8C\u8BC1\u5931\u8D25\u6309\u5931\u8D25\u5904\u7406\uFF0C\u4E0D\u8DF3\u8FC7\u3001\u4E0D\u964D\u7EA7\u3001\u4E0D\u7528\u5047\u8BBE\u8865\u9F50\u3002",
+  "**\u9A8C\u8BC1\u7684\u6210\u672C\u8FDC\u4F4E\u4E8E\u8FD4\u5DE5**\uFF1A\u4E00\u6761\u547D\u4EE4\u51E0\u79D2\u949F\uFF0C\u4E00\u6B21\u9519\u8BEF\u8BCA\u65AD\u53EF\u80FD\u8BA9\u4EBA\u6539\u9519\u6587\u4EF6\u3001\u53D1\u9519\u7248\u672C\u6216\u91CD\u8DD1\u51E0\u5341\u5206\u949F\u7684\u6D41\u6C34\u7EBF\u3002\u9047\u5230\u4E0D\u786E\u5B9A\uFF0C\u5148\u82B1\u51E0\u79D2\u6267\u884C\uFF0C\u518D\u8BF4\u8BDD\u3002"
+].join("\n");
+
 // packages/agent-runtime/dispatchBackendPolicy.ts
 var DISPATCH_BACKEND_POLICY = [
   "\u3010\u6D3E\u53D1\u843D\u70B9 \xB7 \u6267\u884C\u540E\u7AEF\u3011",
@@ -841,6 +852,7 @@ export {
   DELETE_SAFETY_RED_LINE,
   CREDENTIAL_HYGIENE_RULE,
   PARALLEL_DISPATCH_DEFAULT_RULE,
+  VERIFY_BEFORE_CONCLUDING_RULE,
   DISPATCH_BACKEND_POLICY,
   DISPATCH_CANDIDATE_POLICY,
   PLATFORM_RISK_CONTROL_RULE,

package/{chunk-FPCPCTSA.js → chunk-W7DFYXGQ.js}

@@ -5,7 +5,7 @@ import {
 } from "./chunk-NBTY7YJF.js";
 import {
   resolveCliLocalRuntimeKeyCapability
-} from "./chunk-WWSPE2GG.js";
+} from "./chunk-WYOJXAIC.js";
 import {
   HIGH_RISK_MUTATION_TOOL_NAMES
 } from "./chunk-6HVBI6TI.js";