nolo-cli 0.212.0-alpha.1 → 0.222.0-alpha.2

package/{chunk-CQ46IRNN.js → chunk-B4GOW4MT.js}

@@ -3,29 +3,11 @@ import {
 } from "./chunk-KFHREHUQ.js";
 import {
   buildAgentDiscoveryResult,
+  deriveCredentialGroup,
   resolveDiscoveryScope,
   resolvePaginationArgs,
   toDiscoverySafeAgentSummary
-} from "./chunk-CJRONOYL.js";
-import {
-  getUserDataItemTimestamp,
-  mergeAndDedupUserData
-} from "./chunk-OXME3PEE.js";
-import {
-  addMemberSpace,
-  applyFetchSpaceFulfilled,
-  fetchAuthoritativeRemoteSpace,
-  getAllMemberSpaces,
-  removeMemberSpace,
-  selectSpaceRemoteAuth,
-  setMembershipLoaded,
-  setMembershipLoading,
-  setMembershipRejected,
-  updateMemberSpaceName
-} from "./chunk-OHNELDTO.js";
-import {
-  markdownToSlate
-} from "./chunk-KSTEXKL6.js";
+} from "./chunk-34J5K2YA.js";
 import {
   ToolResultError,
   clipMultilineText,
@@ -38,7 +20,7 @@ import {
   toolRunUpdated,
   uiCardFallback,
   waitForAbortableDelay
-} from "./chunk-GNDJKC4B.js";
+} from "./chunk-ON37YXGX.js";
 import {
   isGatewayHttpStatus
 } from "./chunk-NF64D32W.js";
@@ -52,10 +34,24 @@ import {
 import {
   AGENT_UPDATE_FIELD_NAMES,
   normalizeAgentUpdateFieldList
-} from "./chunk-MMNYUVLW.js";
+} from "./chunk-UB3D4TRQ.js";
+import {
+  markdownToSlate
+} from "./chunk-FJ23FZXF.js";
+import {
+  extractMentionsFromSlate
+} from "./chunk-AGIM7IMJ.js";
+import {
+  slateToRenderMarkdown
+} from "./chunk-63W5N6P3.js";
 import {
   createDocState
-} from "./chunk-5RYBGBQH.js";
+} from "./chunk-IILMY4W4.js";
+import {
+  applyFetchSpaceFulfilled,
+  fetchAuthoritativeRemoteSpace,
+  selectSpaceRemoteAuth
+} from "./chunk-7EEZJ6BS.js";
 import {
   ToolApiError,
   buildToolRequestHeaders,
@@ -63,23 +59,20 @@ import {
   getRequestConfig,
   getToolBaseUrl,
   getToolRequestContext
-} from "./chunk-MYOH447Z.js";
+} from "./chunk-4JVNURX4.js";
 import {
   readDocFunc,
   readDocFunctionSchema,
   readPageFunc,
   readPageFunctionSchema,
   resolvePageReadMarkdown
-} from "./chunk-IAPCBNEE.js";
-import {
-  extractMentionsFromSlate
-} from "./chunk-AGIM7IMJ.js";
+} from "./chunk-SQYIK6HO.js";
 import {
-  slateToRenderMarkdown
-} from "./chunk-63W5N6P3.js";
+  shareResourceAction
+} from "./chunk-AK5O76CC.js";
 import {
   createDialogAction
-} from "./chunk-OOF4UPC5.js";
+} from "./chunk-XWVCYUUU.js";
 import {
   DEFAULT_COLLAPSED_CATEGORIES,
   addContentToSpace,
@@ -96,7 +89,7 @@ import {
   updateContentCategory,
   updateContentTitle,
   writeStoredCollapsedCategories
-} from "./chunk-NJR3WKVP.js";
+} from "./chunk-YWWDC3O7.js";
 import {
   buildDatabaseFileContentUrl,
   deleteDialog,
@@ -109,52 +102,56 @@ import {
   selectMsgById,
   uiAskChoiceFunc,
   uiAskChoiceFunctionSchema
-} from "./chunk-VZKUKCA6.js";
+} from "./chunk-MZLE5HQ3.js";
 import {
   createAgent,
   deleteServerSyncedCredential,
   runLlm,
   streamAgentChatTurn,
   updateAgent
-} from "./chunk-YPD3VJZW.js";
+} from "./chunk-NWP2OYOX.js";
 import {
+  addMemberSpace,
+  getAllMemberSpaces,
   getCurrentSpaceId,
   getCurrentSpaceIdRaw,
   getCurrentSpaceRaw,
   getViewMode,
+  removeMemberSpace,
   setCurrentSpace,
   setCurrentSpaceBoth,
+  setMembershipLoaded,
+  setMembershipLoading,
+  setMembershipRejected,
   setViewMode,
-  updateCurrentSpaceIfMatch
-} from "./chunk-5XBUWM6I.js";
+  updateCurrentSpaceIfMatch,
+  updateMemberSpaceName
+} from "./chunk-MBG66ZBH.js";
 import {
   buildMediaToolConfirmation,
   normalizeMediaConfirmExecutionRevision
 } from "./chunk-QYPE3TS3.js";
-import {
-  UNCATEGORIZED_ID,
-  addContentAction,
-  checkSpaceMembership
-} from "./chunk-VPAZOH2D.js";
-import {
-  createSpaceKey,
-  normalizeSpaceId
-} from "./chunk-UAD2WT54.js";
 import {
   getActiveDialogKey,
   selectCurrentDialogKey,
   selectPendingRawDataByPageKey
-} from "./chunk-OWYYDMGJ.js";
+} from "./chunk-S2NTVGA2.js";
 import {
   require_react
-} from "./chunk-YDH3FDFQ.js";
-import {
-  shareResourceAction
-} from "./chunk-HPFCI4SK.js";
+} from "./chunk-5FUN7EG4.js";
 import {
   selectCurrentServer,
   selectSyncServers
-} from "./chunk-4I7ERB7F.js";
+} from "./chunk-VREDDN25.js";
+import {
+  UNCATEGORIZED_ID,
+  addContentAction,
+  checkSpaceMembership
+} from "./chunk-JA3ICVJY.js";
+import {
+  createSpaceKey,
+  normalizeSpaceId
+} from "./chunk-UAD2WT54.js";
 import {
   patch,
   read,
@@ -166,10 +163,14 @@ import {
   selectEntities,
   toTimestampMs,
   write
-} from "./chunk-BFM34N54.js";
+} from "./chunk-44X52WOJ.js";
+import {
+  getUserDataItemTimestamp,
+  mergeAndDedupUserData
+} from "./chunk-GBWGPTA7.js";
 import {
   readAction
-} from "./chunk-JIT6FSXJ.js";
+} from "./chunk-WAE3GFCJ.js";
 import {
   DEVICE_LOCAL_OWNER_ID,
   getRuntimeServerContext,
@@ -179,11 +180,11 @@ import {
   resolveEffectiveSpaceActorId,
   resolveRecordOwnerUserId,
   selectRuntimeSnapshot
-} from "./chunk-PYRUW7XN.js";
+} from "./chunk-2VUZSVAS.js";
 import {
   createAsyncThunk,
   noloWriteRequest
-} from "./chunk-P5L7CXOC.js";
+} from "./chunk-7Z6EW7AH.js";
 import {
   selectIdentityToken,
   selectIdentityUserBalance,
@@ -192,21 +193,13 @@ import {
 import {
   buildTombstoneRecord,
   isTombstoneRecord
-} from "./chunk-D2MDMY2M.js";
-import {
-  CAPABILITY_PACKS
-} from "./chunk-EYUBHHFB.js";
-import {
-  buildSkillDocMarkdown,
-  normalizeSkillModalities,
-  normalizeStringArray,
-  parseExternalSkillMarkdown,
-  parseSkillDocProtocol,
-  resolvePageSkillMetadata
-} from "./chunk-AETZ7AD6.js";
+} from "./chunk-BV3FLP2L.js";
 import {
+  AGENT_THREAD_ACTIVE_STATUSES,
+  AGENT_THREAD_TERMINAL_STATUSES,
   CLI_NOLO_WORKSPACE_TOOL_NAMES,
   DEFAULT_READ_DIALOG_MAX_RESPONSE_CHARS,
+  assertDispatchSelectionAdmission,
   buildAgentRuntimeAgentLookupKeys,
   buildDialogReadEnvelope,
   buildNoloSubjectRefQueryTarget,
@@ -217,27 +210,26 @@ import {
   getNoloDialogIdFromKey,
   normalizeNoloExcludeDialogIds,
   normalizeNoloSpaceInput,
-  resolveDispatchedSubtaskBudget,
   resolveNoloDialogInput,
   verifyNoloDialogSubjectRefQuery
-} from "./chunk-25JZEIXN.js";
+} from "./chunk-C4VAR65S.js";
 import {
   mergeAvailabilityDeadline,
   resolveCredentialKeyWithFallback
-} from "./chunk-YUXQAVRD.js";
+} from "./chunk-HOCHUZQ7.js";
 import {
   redactAgentRecordForWorkspaceTool,
   resolveReadOnlyToolConstraints
-} from "./chunk-KC4XDTT3.js";
+} from "./chunk-SOF4OWDM.js";
 import {
   clipCompactText
 } from "./chunk-5MMAK75Q.js";
-import {
-  createFileCredentialBroker
-} from "./chunk-OQHIVPG4.js";
 import {
   asRecordOrEmpty
 } from "./chunk-KX6YBIHG.js";
+import {
+  createFileCredentialBroker
+} from "./chunk-SNBZZPYH.js";
 import {
   compactWhitespace
 } from "./chunk-DWLEOOGR.js";
@@ -245,19 +237,53 @@ import {
   isAbortError
 } from "./chunk-7DPNBQSV.js";
 import {
-  canonicalizeToolName,
-  canonicalizeToolNames
-} from "./chunk-ZCWRMUWT.js";
+  CAPABILITY_PACKS
+} from "./chunk-PJCIP64Z.js";
 import {
   CHROME_CONNECTOR_ACCEPTED_TOOL_NAMES,
+  canonicalizeToolName,
+  canonicalizeToolNames,
   chromeConnectorToolSchemas,
   chromeConnectorUnavailableFunc,
   getChromeConnectorToolBehavior,
   getChromeConnectorToolDefaultConsent
-} from "./chunk-ZC3CMUKU.js";
+} from "./chunk-6OVNSQHN.js";
+import {
+  buildSkillDocMarkdown,
+  normalizeSkillModalities,
+  normalizeStringArray,
+  parseExternalSkillMarkdown,
+  parseSkillDocProtocol,
+  resolvePageSkillMetadata
+} from "./chunk-W6RFEDN4.js";
 import {
   extractCustomId
 } from "./chunk-M2EJHDJP.js";
+import {
+  SEPARATOR,
+  TYPE_STORAGE_PREFIXES,
+  createAgentKey,
+  fileKey,
+  isAgentKey,
+  isAppKey,
+  isFileKey,
+  isPageKey,
+  isTableMetaKey,
+  isTaskKey,
+  metaKey,
+  rowKey,
+  splitKey,
+  toTrimmedString
+} from "./chunk-SYTHYBMI.js";
+import {
+  dialogMessageRange,
+  isDialogKey,
+  ulid
+} from "./chunk-OJKUU3LP.js";
+import {
+  asNonEmptyStringArray,
+  asTrimmedNonEmptyStringArray
+} from "./chunk-I42VC5KR.js";
 import {
   RUN_TITLE_MAX,
   TASK_PREVIEW_MAX,
@@ -270,68 +296,44 @@ import {
   formatStatusRunCard,
   formatStopRunCard,
   normalizeRunTitle,
+  resolveAgentRunName,
   resolveRunLabel
-} from "./chunk-PJNFNEJE.js";
+} from "./chunk-AMEOV5VZ.js";
+import {
+  toErrorMessage
+} from "./chunk-HNMXYYJR.js";
+import {
+  asTrimmedString
+} from "./chunk-3EUW3WEO.js";
 import {
   DEFAULT_MODEL,
   clampReasoningEffort,
   resolveModelReasoningCapabilityWithCache
-} from "./chunk-SM3NSZJV.js";
-import {
-  toErrorMessage
-} from "./chunk-HNMXYYJR.js";
+} from "./chunk-2UCBGYO4.js";
 import {
   isRecord
 } from "./chunk-KUG52IAP.js";
 import {
   asTrimmedLowercaseString
 } from "./chunk-QSJ3HFEF.js";
+import {
+  asOptionalFiniteNumber
+} from "./chunk-WWC7I6TA.js";
 import {
   API_ENDPOINTS
 } from "./chunk-LCBAMY2M.js";
+import {
+  asOptionalTrimmedString
+} from "./chunk-G3SUCT4W.js";
 import {
   DEFAULT_LOCAL_API_ORIGIN
 } from "./chunk-4SN6J65J.js";
 import {
   normalizeServerOrigin
 } from "./chunk-CF7PE763.js";
-import {
-  SEPARATOR,
-  TYPE_STORAGE_PREFIXES,
-  createAgentKey,
-  fileKey,
-  isAgentKey,
-  isAppKey,
-  isFileKey,
-  isPageKey,
-  isTableMetaKey,
-  isTaskKey,
-  metaKey,
-  rowKey,
-  splitKey,
-  toTrimmedString
-} from "./chunk-JY5NGFFH.js";
-import {
-  dialogMessageRange,
-  isDialogKey,
-  ulid
-} from "./chunk-XJWWBO34.js";
-import {
-  asNonEmptyStringArray,
-  asTrimmedNonEmptyStringArray
-} from "./chunk-I42VC5KR.js";
-import {
-  asOptionalFiniteNumber
-} from "./chunk-WWC7I6TA.js";
-import {
-  asTrimmedString
-} from "./chunk-3EUW3WEO.js";
-import {
-  asOptionalTrimmedString
-} from "./chunk-G3SUCT4W.js";
 import {
   __toESM
-} from "./chunk-4VNS5WPM.js";
+} from "./chunk-U67V476Y.js";
 
 // packages/ai/tools/agentAutomationSchemas.ts
 var agentAutomationTriggerSchema = {
@@ -1021,7 +1023,7 @@ var HOSTED_EXEC_RUNTIME_TOOL_POLICY = {
   workspace: { mode: "lease" }
 };
 var findModelConfig = async (modelName, provider) => {
-  const { ALL_MODELS } = await import("./models-PJBE6JDV.js");
+  const { ALL_MODELS } = await import("./models-ULVWLSQ6.js");
   const name = toTrimmedString(modelName);
   const prov = toTrimmedString(provider ?? "");
   if (!name) return null;
@@ -1266,7 +1268,7 @@ var buildPlatformFormDataFromArgs = async (args) => {
   const trimmedModel = toTrimmedString(model);
   const trimmedProvider = toTrimmedString(provider);
   const modelConfig = await findModelConfig(trimmedModel, trimmedProvider);
-  const { getModelPricing } = await import("./getPricing-2MNMXEVG.js");
+  const { getModelPricing } = await import("./getPricing-MB2GBXOK.js");
   const normalizedTools = tools ?? [];
   const resolvedRuntimeToolPolicy = runtimeToolPolicy ?? (normalizedTools.includes("execShell") ? HOSTED_EXEC_RUNTIME_TOOL_POLICY : void 0);
   const formData = {
@@ -3537,8 +3539,10 @@ var getRuntime = (thunkApi) => {
   const snapshot = selectRuntimeSnapshot(state2);
   return {
     ...snapshot,
-    currentUserId: snapshot?.currentUserId ?? state2.currentUserId ?? state2.userId ?? state2.auth?.userId ?? state2.auth?.currentUser?.userId,
-    currentToken: snapshot?.currentToken ?? state2.currentToken ?? state2.auth?.currentToken,
+    currentUserId: snapshot?.currentUserId ?? state2.currentUserId ?? state2.userId ?? // 不再直接摸 state.auth.*：identity 迁移后 auth 切片是历史字段，
+    // 选中逻辑归 identity（各 edition 自己决定来源），此处只当最后兜底。
+    selectIdentityUserId(state2),
+    currentToken: snapshot?.currentToken ?? state2.currentToken ?? selectIdentityToken(state2),
     currentServer: snapshot?.currentServer ?? state2.currentServer ?? state2.settings?.currentServer
   };
 };
@@ -3900,7 +3904,7 @@ async function deleteDialogsFunc(args, thunkApi) {
   const deletedDialogIds = [];
   const deletedDialogKeys = [];
   const failures = [];
-  const { deleteDialog: deleteDialog2 } = await import("./dialogSlice-GRSVGDTF.js");
+  const { deleteDialog: deleteDialog2 } = await import("./dialogSlice-LFNVUSAN.js");
   for (const target of targets) {
     try {
       await thunkApi.dispatch(deleteDialog2(target.dbKey)).unwrap();
@@ -3966,18 +3970,18 @@ async function fetchUserFavoriteAgentMap(thunkApi) {
 }
 var listAgentsFunctionSchema = {
   name: "listAgents",
-  description: "List Nolo agents available for delegation as safe summaries. By default (scope='preferred'), returns the user's preferred agents (favorites, self-owned, OAuth subscriptions, custom API, and local agents). Note: favorited public agents stay in preferred and may still consume platform credits - check each agent's billingSource before dispatching. If no suitable preferred candidate is found or the user explicitly asks to explore public/shared agents, call with scope='public' (public agents may consume platform credits). scope='all' returns the deduplicated union for troubleshooting/management. listAgents does not automatically fallback to public agents. The payload returns `credentialGroups` summarizing independent credential capacities (credentialGroup, credentialKind, agentCount, and availableAt recovery timestamps). Orchestration discipline: Never fan out parallel runs on one credential; fan out only across distinct credentialGroups. A channel verdict is valid for the current dispatch attempt only; always re-read availability before dispatching, and never reuse a failure verdict from an earlier attempt. On config_unresolved-class errors, retry once before degrading. Reserve the strongest private channels for review; execution should use cheap channels. The `agents` array carries a compact agent-selection projection per agent: runnable `agentKey` (agent-<userId>-<id> owned, agent-pub-<id> public), name, model, provider, apiSource, billingSource ('user_subscription' | 'owner_subscription' | 'user_api' | 'platform_credits' | 'local'), tools, isFavorite, isOAuth, isOwned, isPublic, credentialGroup, credentialKind. Copy `agentKey` verbatim into startAgentRun. Rate-limited agents (429, nextAvailableAt in the future) are hidden by default; unavailableCount and unavailableAgents carry their nextAvailableAt recovery timestamps; pass `showUnavailable: true` to include them. Set `verbose: true` for full safe summary details.",
+  description: "List Nolo agents available for delegation as safe summaries. By default (scope='all') returns the deduplicated union of the user's own/favorite agents and public/shared agents. scope='public' returns only public/shared agents. Public agents may consume platform credits - check each agent's billingSource before dispatching. The payload returns `credentialGroups` summarizing independent credential capacities (credentialGroup, credentialKind, agentCount, and availableAt recovery timestamps). Orchestration discipline: Never fan out parallel runs on one credential; fan out only across distinct credentialGroups. A channel verdict is valid for the current dispatch attempt only; always re-read availability before dispatching, and never reuse a failure verdict from an earlier attempt. On config_unresolved-class errors, retry once before degrading. Reserve the strongest private channels for review; execution should use cheap channels. The `agents` array carries a compact agent-selection projection per agent: runnable `agentKey` (agent-<userId>-<id> owned, agent-pub-<id> public), name, model, provider, apiSource, billingSource ('user_subscription' | 'owner_subscription' | 'user_api' | 'platform_credits' | 'local'), tools, isFavorite, isOAuth, isOwned, isPublic, credentialGroup, credentialKind. Copy `agentKey` verbatim into startAgentRun. All agents are listed, including rate-limited (429) ones: cooldown agents carry `availabilityStatus` / `availabilityReason` / `nextAvailableAt` as reference info, not a dispatch gate (quota is informational; requests are still sent and upstream results are reported as-is). `unavailableCount` reports how many agents are currently rate-limited. `showUnavailable` is deprecated and has no effect (kept for compatibility). Set `verbose: true` for full safe summary details.",
   parameters: {
     type: "object",
     properties: {
       limit: { type: "integer", description: "Maximum agents to return. Default 100, max 500." },
       scope: {
         type: "string",
-        enum: ["preferred", "public", "all"],
-        description: "Discovery scope. 'preferred' (default): user's favorites, owned, OAuth, custom API, and local agents. 'public': shared/marketplace agents not in preferred (may use platform credits). 'all': deduplicated union for inspection."
+        enum: ["all", "public"],
+        description: "Discovery scope. 'all' (default): deduplicated union of the user's own/favorite agents and public/shared agents. 'public': only shared/marketplace agents (may use platform credits)."
       },
       publicOnly: { type: "boolean", description: "Deprecated compatibility alias for scope='public'." },
-      showUnavailable: { type: "boolean", description: "Include agents currently rate-limited (429). Default false." },
+      showUnavailable: { type: "boolean", description: "Deprecated no-op: rate-limited agents are always included now (reference info, not a gate). Kept for compatibility." },
       query: {
         type: "string",
         description: "Optional case-insensitive search substring matching agent name, model, provider, handle, or agentKey. Use to locate specific candidates like 'opus', 'devin', or 'claude'."
@@ -3989,6 +3993,19 @@ var listAgentsFunctionSchema = {
   }
 };
 async function listAgentsFunc(args, thunkApi) {
+  const runtime = getRuntime(thunkApi);
+  if (!runtime?.currentUserId || !runtime?.currentToken) {
+    return {
+      rawData: {
+        success: true,
+        total: 0,
+        unavailableCount: 0,
+        agents: [],
+        credentialGroups: []
+      },
+      displayData: formatAgentListCard([])
+    };
+  }
   const pagination = resolvePaginationArgs({ limit: args?.limit, offset: args?.offset });
   const hasQuery = Boolean(args?.query && typeof args?.query === "string" && args?.query.trim());
   const upstreamFetchLimit = hasQuery ? Number.POSITIVE_INFINITY : Math.max(500, (pagination.offset ?? 0) + (pagination.limit ?? 100));
@@ -3998,7 +4015,6 @@ async function listAgentsFunc(args, thunkApi) {
     Number.isFinite(upstreamFetchLimit) ? upstreamFetchLimit : 500
   );
   const favoritesMap = await fetchUserFavoriteAgentMap(thunkApi);
-  const runtime = getRuntime(thunkApi);
   const scope = resolveDiscoveryScope({ scope: args?.scope, publicOnly: args?.publicOnly });
   let publicRecords = [];
   let upstreamTruncated = false;
@@ -4087,6 +4103,7 @@ async function listAgentsFunc(args, thunkApi) {
     scope: args?.scope,
     query: args?.query,
     publicOnly: args?.publicOnly,
+    // showUnavailable 已无过滤语义（保留兼容入参，见 BuildAgentDiscoveryResultOptions）。
     showUnavailable: args?.showUnavailable,
     verbose: args?.verbose,
     compact: args?.compact,
@@ -4105,9 +4122,10 @@ async function listAgentsFunc(args, thunkApi) {
       ...discovery.truncated ? { truncated: true } : {},
       unavailableCount: discovery.unavailableCount,
       // 顺序即序列化顺序：agents 在前（派发必需），大块说明字段在后。
+      // 限流 agent 已合入 agents（带 availabilityStatus / nextAvailableAt
+      // 参考标注），不再单列 unavailableAgents，避免两套真相。
       agents: discovery.agents,
-      credentialGroups: discovery.credentialGroups,
-      unavailableAgents: discovery.unavailableAgents
+      credentialGroups: discovery.credentialGroups
     },
     displayData: formatAgentListCard(discovery.agents)
   };
@@ -4279,7 +4297,7 @@ var readSkillDocFunctionSchema = {
   }
 };
 async function readSkillDocFunc(args, thunkApi) {
-  const { buildReadDocResult } = await import("./readDocTool-AVD32RUJ.js");
+  const { buildReadDocResult } = await import("./readDocTool-4BGTXTXA.js");
   const id = args?.id ?? args?.doc ?? args?.docKey ?? args?.pageKey;
   if (typeof id !== "string" || !id.trim()) {
     throw new Error("readSkillDoc requires id or doc.");
@@ -4541,6 +4559,20 @@ var addSpaceAction = async (input, thunkAPI) => {
   return spaceMemberData;
 };
 
+// packages/app/hooks/deleteOwnershipGuard.ts
+function resolveDeleteOwnershipGuard(input) {
+  const actor = typeof input.actorUserId === "string" ? input.actorUserId.trim() : "";
+  const owner = typeof input.ownerId === "string" ? input.ownerId.trim() : "";
+  const recordLoaded = input.recordLoaded !== false;
+  if (!actor) return "unknown";
+  if (owner) {
+    if (owner === actor || owner === DEVICE_LOCAL_OWNER_ID) return "allow";
+    return "deny";
+  }
+  if (isDeviceLocalOwnerId(actor) && recordLoaded) return "allow";
+  return "unknown";
+}
+
 // packages/app/favorite/favoriteStore.ts
 var import_react = __toESM(require_react());
 var createInitialState = () => ({
@@ -4794,7 +4826,7 @@ var normalizeDeleteError = (error) => {
   }
   return new Error(getDeleteErrorMessage(error));
 };
-var deleteDbKey = (input, spaceId) => async (dispatch, getState) => {
+var deleteDbKey = (input, spaceId, options) => async (dispatch, getState) => {
   try {
     const {
       contentKey,
@@ -4802,6 +4834,30 @@ var deleteDbKey = (input, spaceId) => async (dispatch, getState) => {
       inputSpaceId,
       includeAttachments
     } = resolveDeleteInput(input);
+    if (options?.requireOwnership) {
+      const state2 = getState();
+      let ownedRecord = selectById(state2, contentKey);
+      if (!ownedRecord) {
+        try {
+          ownedRecord = await dispatch(
+            read({ dbKey: contentKey, preferredServerOrigin })
+          ).unwrap();
+        } catch {
+          ownedRecord = null;
+        }
+      }
+      const verdict = resolveDeleteOwnershipGuard({
+        ownerId: ownedRecord?.userId ?? ownedRecord?.ownerId,
+        actorUserId: selectIdentityUserId(state2),
+        recordLoaded: Boolean(ownedRecord)
+      });
+      if (verdict === "deny") {
+        throw new Error("\u65E0\u6743\u5220\u9664\u4ED6\u4EBA\u5185\u5BB9");
+      }
+      if (verdict !== "allow") {
+        throw new Error("\u65E0\u6CD5\u9A8C\u8BC1\u5185\u5BB9\u6240\u6709\u6743\uFF0C\u672A\u5220\u9664\uFF08\u53EF\u7A0D\u540E\u91CD\u8BD5\uFF09");
+      }
+    }
     const effectiveSpaceId = typeof spaceId === "string" && spaceId.trim().length > 0 ? spaceId : inputSpaceId ?? null;
     await performDirectDelete(
       dispatch,
@@ -5092,7 +5148,7 @@ var fetchSpaceAction = async (input, thunkAPI) => {
   const spaceKey = createSpaceKey.space(spaceId);
   const readSpace = async (dbKey) => {
     try {
-      const { read: read2, readAndWait: readAndWait2 } = await import("./dbSlice-HP7G4LX3.js");
+      const { read: read2, readAndWait: readAndWait2 } = await import("./dbSlice-WNON7TOL.js");
       const readPromise = fresh ? dispatch(readAndWait2(dbKey)).unwrap() : dispatch(read2({ dbKey })).unwrap();
       return await withTimeout(readPromise);
     } catch {
@@ -5785,7 +5841,7 @@ var stripHtml = (html) => typeof html === "string" ? compactWhitespace(
 ) : "";
 var cleanUrl = (url) => url.replace(/[),.;\]}>]+$/g, "");
 var extractPdfText = async (blob) => {
-  const pdfjsLib = await import("./pdf-U6KSUEZZ.js");
+  const pdfjsLib = await import("./pdf-KE3QI2V7.js");
   if (typeof window !== "undefined" && pdfjsLib.GlobalWorkerOptions && !pdfjsLib.GlobalWorkerOptions.workerSrc) {
     pdfjsLib.GlobalWorkerOptions.workerSrc = "/public/assets/pdf.worker.mjs";
   }
@@ -10962,7 +11018,7 @@ var cloudflareCrawlStatusFunctionSchema = {
 async function cloudflareCrawlStatusFunc(args, thunkApi) {
   const { jobId, limit, status, cursor } = args;
   if (!jobId) throw new Error("\u5FC5\u987B\u63D0\u4F9B jobId");
-  const { getToolRequestContext: getToolRequestContext2 } = await import("./toolApiClient-HGNO53TC.js");
+  const { getToolRequestContext: getToolRequestContext2 } = await import("./toolApiClient-OGQEBQVX.js");
   const { baseUrl, token } = getToolRequestContext2(thunkApi);
   const params = new URLSearchParams();
   if (limit !== void 0) params.set("limit", String(limit));
@@ -11740,7 +11796,7 @@ var selectUserIdFromState = (state2) => {
 var selectCurrentServerFromState = (state2) => typeof state2?.settings?.currentServer === "string" ? state2.settings.currentServer : null;
 async function addImageContentToSpace(input) {
   const injectedAddContentAction = input.thunkApi?.extra?.addContentAction;
-  const addContentAction2 = typeof injectedAddContentAction === "function" ? injectedAddContentAction : (await import("./addContentAction-N2YC5IL3.js")).addContentAction;
+  const addContentAction2 = typeof injectedAddContentAction === "function" ? injectedAddContentAction : (await import("./addContentAction-GDHDOF4U.js")).addContentAction;
   await addContentAction2(
     {
       spaceId: input.spaceId,
@@ -12361,6 +12417,81 @@ var chatgptWebImageGenerateFunc = async (args, thunkApi) => {
   };
 };
 
+// packages/ai/tools/secretRequestTool.ts
+var randomGateId = () => {
+  const webCrypto = globalThis.crypto;
+  if (typeof webCrypto?.randomUUID === "function") return webCrypto.randomUUID();
+  return `${Math.random().toString(36).slice(2, 10)}-${Date.now().toString(36)}`;
+};
+var SECRET_REQUEST_NAME_PATTERN = /^[A-Z_][A-Z0-9_]*$/;
+var secretRequestFunctionSchema = {
+  name: "secret-request",
+  description: "\u5411\u7528\u6237\u8BF7\u6C42\u4E00\u4E2A\u5177\u540D\u51ED\u636E\uFF08\u5982 API key\uFF09\u3002\u7528\u6237\u4F1A\u5728\u5BBF\u4E3B\u9762\u677F\u4E2D\u8F93\u5165\uFF0C\u51ED\u636E\u660E\u6587\u7531\u5BBF\u4E3B\u5199\u5165\u672C\u673A secret store\uFF0C\u4EFB\u4F55\u503C\u90FD\u4E0D\u4F1A\u56DE\u5230\u5BF9\u8BDD\u4E2D\uFF1B\u5DE5\u5177\u7ED3\u679C\u53EA\u544A\u77E5\u662F\u5426\u5DF2\u4FDD\u5B58\u3002\u8C03\u7528\u65F6\u53EA\u4F20\u51ED\u636E\u540D\uFF08\u5927\u5199+\u4E0B\u5212\u7EBF\uFF09\u4E0E\u53EF\u9009\u8BF4\u660E\uFF0C\u7EDD\u4E0D\u4F20\u4EFB\u4F55\u51ED\u636E\u503C\u3002\u7ED3\u679C\u8FD4\u56DE\u540E\uFF0C\u7528 `nolo secret run --with <name> -- <cmd>` \u5728\u53D7\u63A7\u901A\u9053\u6D88\u8D39\u3002",
+  parameters: {
+    type: "object",
+    properties: {
+      name: {
+        type: "string",
+        description: "\u51ED\u636E\u540D\u79F0\uFF0C\u5FC5\u987B\u5339\u914D ^[A-Z_][A-Z0-9_]*$\uFF08\u5982 OPENAI_KEY\uFF09\u3002\u8FD9\u662F\u7528\u6237\u5728\u9762\u677F\u91CC\u770B\u5230\u7684\u6761\u76EE\u540D\u3002"
+      },
+      prompt: {
+        type: "string",
+        description: "\u9762\u677F\u4E0A\u5411\u7528\u6237\u5C55\u793A\u7684\u4E00\u53E5\u8BDD\u8BF4\u660E\uFF08\u53EF\u9009\uFF09\u3002"
+      },
+      purpose: {
+        type: "string",
+        description: "\u4E3A\u4EC0\u4E48\u9700\u8981\u8FD9\u4E2A\u51ED\u636E\u7684\u7B80\u77ED\u8BF4\u660E\uFF08\u53EF\u9009\uFF09\uFF0C\u5199\u8FDB\u9762\u677F\u6B63\u6587\u3002"
+      }
+    },
+    required: ["name"]
+  }
+};
+var NAME_ERROR = "secret-request\uFF1Aname \u5FC5\u987B\u5339\u914D ^[A-Z_][A-Z0-9_]*$\uFF08\u5927\u5199\u5B57\u6BCD/\u4E0B\u5212\u7EBF\u5F00\u5934\uFF0C\u4EC5\u542B\u5927\u5199\u5B57\u6BCD\u3001\u6570\u5B57\u4E0E\u4E0B\u5212\u7EBF\uFF09\u3002";
+function validateSecretRequestName(name) {
+  if (typeof name !== "string" || name.length === 0) return NAME_ERROR;
+  if (!SECRET_REQUEST_NAME_PATTERN.test(name)) return NAME_ERROR;
+  return null;
+}
+function buildSecretRequestToolResult(args) {
+  const payload = {
+    action: "secret_request",
+    name: args.name,
+    masked: true,
+    ...args.prompt?.trim() ? { prompt: args.prompt.trim() } : {}
+  };
+  const purpose = args.purpose?.trim();
+  const fallbackContent = [
+    `\u9700\u8981\u7528\u6237\u5411\u672C\u673A secret store \u63D0\u4F9B\u51ED\u636E "${args.name}"\uFF08\u660E\u6587\u4E0D\u4F1A\u51FA\u73B0\u5728\u5BF9\u8BDD\u91CC\uFF09\u3002`,
+    ...purpose ? [`\u7528\u9014\uFF1A${purpose}`] : [],
+    "\u4F1A\u81EA\u52A8\u5F39\u51FA\u8F93\u5165\u9762\u677F\u8BA9\u7528\u6237\u586B\u5199\uFF0C\u4E0D\u8981\u5F15\u5BFC\u7528\u6237\u53BB\u7EC8\u7AEF\u6267\u884C\u547D\u4EE4\u3002",
+    "\u51ED\u636E\u4FDD\u5B58\u540E\uFF0C\u7528 nolo secret run --with " + args.name + " -- <cmd> \u5728\u53D7\u63A7\u901A\u9053\u6D88\u8D39\uFF0C\u4E0D\u8981\u5411\u7528\u6237\u7D22\u8981\u660E\u6587\u3002"
+  ].join("\n");
+  return {
+    content: fallbackContent,
+    metadata: {
+      actionGate: {
+        id: `gate-${randomGateId().slice(0, 8)}-secret-request-${args.name}`,
+        kind: "input",
+        title: `\u9700\u8981\u51ED\u636E ${args.name}`,
+        body: purpose?.trim() || "\u8BF7\u5728\u8F93\u5165\u6846\u4E2D\u586B\u5199\u8BE5\u51ED\u636E\uFF0C\u5185\u5BB9\u4EC5\u4FDD\u5B58\u5728\u672C\u673A secret store\u3002",
+        payload
+      },
+      reason: "secret-request-pending-host-input"
+    }
+  };
+}
+async function secretRequestFunc(args, _thunkApi) {
+  const nameError = validateSecretRequestName(args?.name);
+  if (nameError) {
+    throw new Error(nameError);
+  }
+  return buildSecretRequestToolResult({
+    name: args.name,
+    ...args.prompt !== void 0 ? { prompt: args.prompt } : {},
+    ...args.purpose !== void 0 ? { purpose: args.purpose } : {}
+  });
+}
+
 // packages/ai/tools/uiCardTool.ts
 var showInteractionFunctionSchema = {
   name: "show_interaction",
@@ -13496,6 +13627,15 @@ function normalizeContinueDialogId(value) {
   }
   return value.trim();
 }
+function resolveRunContextFacts(record, effectiveAgentKey) {
+  const previous = typeof record?.primaryAgentKey === "string" ? record.primaryAgentKey.trim() : "";
+  const agentChanged = !!record && !!previous && previous !== effectiveAgentKey;
+  return {
+    contextMode: record ? "continued" : "new",
+    agentChanged,
+    ...agentChanged ? { contextNote: "\u7EED\u8DD1\u5DF2\u5207\u6362 Agent\uFF0C\u6A21\u578B\u63D0\u793A\u8BCD\u7F13\u5B58\u53EF\u80FD\u5931\u6548\u3002" } : {}
+  };
+}
 
 // packages/ai/tools/agent/agentRunCwd.ts
 function isAbsoluteRunCwd(raw) {
@@ -13678,10 +13818,10 @@ var runAgentBackground = createAsyncThunk("agent/runBackground", async (args, {
           idempotencyKey,
           ...parentDialogId ? { parentDialogId } : {},
           ...runtimeKey ? { runtimeKey } : {},
-          ...args.subtaskBudgetLimits ? { subtaskBudgetLimits: args.subtaskBudgetLimits } : {},
           ...ephemeral ? { ephemeral: true } : {},
           ...runKind ? { runKind } : {},
           runtimeContext: {
+            ...args.selectionCheck ? { selectionCheck: args.selectionCheck } : {},
             ...args.runTitle ? { runTitle: args.runTitle } : {},
             surface: "web",
             host: "browser",
@@ -13741,8 +13881,9 @@ var runAgentBackground = createAsyncThunk("agent/runBackground", async (args, {
     serverBase: routedServerBase
   } = runResponse;
   onStatusChange?.("pending");
+  const contextFacts = runResponse.contextMode ? { contextMode: runResponse.contextMode, agentChanged: runResponse.agentChanged === true, ...runResponse.contextNote ? { contextNote: runResponse.contextNote } : {} } : {};
   if (args.waitForCompletion === false) {
-    return { dialogId, status: runResponse.status };
+    return { dialogId, status: runResponse.status, ...contextFacts, ...runResponse.selectionCheck ? { selectionCheck: runResponse.selectionCheck } : {} };
   }
   let lastError;
   let maxSseRetries = MAX_SSE_RETRIES;
@@ -13750,7 +13891,7 @@ var runAgentBackground = createAsyncThunk("agent/runBackground", async (args, {
   const eventServer = normalizeServerOrigin(routedServerBase) || currentServer;
   for (let attempt = 0; attempt <= maxSseRetries; attempt++) {
     try {
-      return await listenToDialogEvents(
+      const completed = await listenToDialogEvents(
         dialogId,
         eventServer,
         authHeader,
@@ -13760,6 +13901,7 @@ var runAgentBackground = createAsyncThunk("agent/runBackground", async (args, {
         onFailed,
         cursor
       );
+      return { ...completed, ...contextFacts, ...runResponse.selectionCheck ? { selectionCheck: runResponse.selectionCheck } : {} };
     } catch (e) {
       if (isAbortError(e)) throw e;
       if (!e?.retryable || attempt >= maxSseRetries) throw e;
@@ -14145,15 +14287,29 @@ function checkCredentialFanout(args) {
 }
 
 // packages/ai/tools/agent/startAgentRunTool.ts
-var BATCH_FANOUT_ENTRY_TTL_MS = 30 * 60 * 1e3;
 var batchFanoutRegistry = /* @__PURE__ */ new Map();
-function pruneBatchFanoutRegistry(nowMs) {
-  for (const [batchId, entries] of batchFanoutRegistry) {
-    const alive = entries.filter(
-      (e) => nowMs - e.startedAtMs < BATCH_FANOUT_ENTRY_TTL_MS
-    );
-    if (alive.length === 0) batchFanoutRegistry.delete(batchId);
-    else batchFanoutRegistry.set(batchId, alive);
+async function refreshBatchFanout(entries, thunkApi) {
+  const snapshot = entries.filter((entry) => entry.runId);
+  if (!snapshot.length) return;
+  const response = await callToolApi(
+    thunkApi,
+    "/api/agent/runs/control",
+    { action: "list", limit: 1e4 },
+    { withAuth: true }
+  );
+  const data = response?.data ?? response;
+  if (!Array.isArray(data?.runs) || data.hasMore === true) {
+    throw new Error("batch admission: live list unavailable or incomplete; retry after recovery");
+  }
+  for (const entry of snapshot) {
+    const run = data.runs.find((run2) => run2.runId === entry.runId);
+    if (!run || !AGENT_THREAD_ACTIVE_STATUSES.includes(run.status) && !AGENT_THREAD_TERMINAL_STATUSES.includes(run.status)) {
+      throw new Error(`batch admission: unknown live status for ${entry.runId}; retry after recovery`);
+    }
+    if (AGENT_THREAD_TERMINAL_STATUSES.includes(run.status)) {
+      const index = entries.indexOf(entry);
+      if (index >= 0) entries.splice(index, 1);
+    }
   }
 }
 function buildStartAgentRunFunctionSchema(opts) {
@@ -14165,6 +14321,9 @@ function buildStartAgentRunFunctionSchema(opts) {
     parameters: {
       type: "object",
       properties: {
+        dimension: { type: "string", enum: ["general", "design_frontend", "writing"], default: "general", description: "\u4EFB\u52A1\u9886\u57DF\u4F18\u5148\u4E8E\u6863\u4F4D\uFF1B\u4EC5\u4F9B\u9009\u4EBA\u53C2\u8003\uFF0C\u4E0D\u6539\u53D8\u51C6\u5165\u3002" },
+        difficulty: { type: "string", description: "easy / normal / complex / extreme\uFF1B\u9ED8\u8BA4 normal\u3002\u58F0\u660E\u672C\u6B21\u4EFB\u52A1\u7684\u96BE\u5EA6\u6863\u4F4D\uFF1B\u5DF2\u77E5\u8DE8\u6863\uFF08\u6240\u9009 Agent \u7684\u6A21\u578B\u6863\u4F4D\u4E0E\u672C\u6863\u4F4D\u4E0D\u4E00\u81F4\uFF09\u4E14\u672A\u7ED9\u51FA selectionReason \u65F6\u62D2\u7EDD\u542F\u52A8\uFF0C\u540C\u6863\u6216\u6863\u4F4D\u672A\u77E5\u4E0D\u62E6\u3002\u4E0D\u81EA\u52A8\u6362\u4EBA\u3001\u4E0D\u53D6\u6D88\u5DF2\u542F\u52A8\u7684 run\u3002", default: "normal" },
+        selectionReason: { type: "string", description: "\u53EF\u9009\u3002\u8DE8\u6863\u9009\u62E9\u7406\u7531\uFF08\u81EA\u7531\u6587\u672C\uFF09\uFF1A\u6240\u9009 Agent \u7684\u6A21\u578B\u6863\u4F4D\u4E0E difficulty \u4E0D\u4E00\u81F4\u65F6\u5FC5\u987B\u7ED9\u51FA\uFF08\u5982\u9886\u57DF\u4F18\u52BF\u3001\u7528\u6237\u660E\u786E\u6307\u5B9A\uFF09\u3002\u53EA\u6821\u9A8C\u7406\u7531\u662F\u5426\u5B58\u5728\uFF0C\u4E0D\u4EE3\u8868\u5DF2\u6838\u5B9E\u7406\u7531\u771F\u5B9E\u6027\u3001\u7528\u6237\u6388\u6743\u6216\u989D\u5EA6/\u8D39\u7528\u6743\u9650\u3002" },
         agentKey: {
           type: "string",
           description: "\u8981\u542F\u52A8\u7684 Agent \u7684\u53EF\u8FD0\u884C dbKey\uFF0C\u5FC5\u987B\u662F listAgents \u8FD4\u56DE\u7684 agentKey \u5B57\u6BB5\uFF08owned: agent-<userId>-<id>\uFF1Bpublic: agent-pub-<id>\uFF09\u6216 readAgent \u8FD4\u56DE\u7684 agentKey\u3002\u53EA\u63A5\u53D7\u7CBE\u786E dbKey\uFF0C\u4E0D\u63A5\u53D7 name/handle/bare id\u3002\u53EF\u9009\uFF1B\u7701\u7565\u6216\u4F20 'self' \u65F6\u81EA\u52A8\u4F7F\u7528\u5F53\u524D AgentKey\uFF08\u6D3E\u53D1\u81EA\u8EAB\u6267\u884C\u7EC6\u5206\u5B50\u4EFB\u52A1\uFF09\u3002"
@@ -14178,7 +14337,7 @@ function buildStartAgentRunFunctionSchema(opts) {
         },
         agentName: {
           type: "string",
-          description: "\u53EF\u9009\u3002\u7531 listAgents/readAgent \u5F97\u5230\u7684\u53EF\u8BFB Agent \u540D\u79F0\uFF0C\u7528\u4E8E TUI \u8FD0\u884C\u5361\u7247\u5C55\u793A\u3002"
+          description: "\u53EF\u9009\u3002\u8986\u76D6\u8FD0\u884C\u5361\u7247\u7684 Agent \u5C55\u793A\u540D\uFF1B\u7701\u7565\u65F6\u6309 agentKey \u81EA\u52A8\u8BFB\u53D6\u914D\u7F6E\u4E2D\u7684 name\u3002"
         },
         title: {
           type: "string",
@@ -14193,9 +14352,11 @@ function buildStartAgentRunFunctionSchema(opts) {
         // review findings 与子任务产出都必须可回读——把选项藏起来比写一条
         // 「不要用它」的克制指令更可靠（2026-09-14 owner 反馈）。CLI `--ephemeral`
         // 与 server 透传保持不动，探活/烟测仍走 CLI 侧。
+        // Returns previousRun evidence when available and difficultyRecheckRequired.
+        // Evidence never inherits a tier or bypasses selection_reason_required.
         continueDialogId: {
           type: "string",
-          description: "\u53EF\u9009\u3002\u7EED\u8DD1\u5F53\u524D\u7528\u6237\u5DF2\u6709\u7684 dialog\uFF08\u4E0D\u5B58\u5728\u6216\u4E0D\u5C5E\u4E8E\u5F53\u524D\u7528\u6237\u65F6\u663E\u5F0F\u62A5\u9519\uFF0C\u4E0D\u65B0\u5EFA\uFF09\u3002\u9002\u7528\u4E8E\u540C\u4E00\u5B50\u4EFB\u52A1\u7684\u5B9A\u5411\u95ED\u5408\uFF0C\u6838\u9A8C\u4E0A\u4E00\u8F6E finding \u662F\u5426\u4FEE\u597D\uFF1B\u7981\u7528\u4E8E\u8BC4\u5BA1\u7C7B\u4EFB\u52A1\u7684\u72EC\u7ACB\u5224\u65AD\uFF0C\u7EED\u8DD1\u4F1A\u5E26\u5165\u4E4B\u524D\u7684\u7ED3\u8BBA\u3001\u7834\u574F\u72EC\u7ACB\u6027\u30022026-10-19 review \u673A\u5236\u7EA6\u5B9A\uFF1Afull \u5BA1\u67E5\u7528\u65B0 dialog\uFF08\u4E0D\u4F20\u672C\u53C2\u6570\uFF09\uFF0Cclosure \u7528\u7EED\u8DD1\u3002\u7EED\u8DD1\u65F6\u5FC5\u987B\u663E\u5F0F\u4F20\u8BE5\u5BF9\u8BDD\u539F\u672C\u7684 agentKey\uFF08\u5BF9\u8BDD\u7684 primaryAgentKey\uFF09\uFF1A\u7701\u7565 agentKey \u4E0D\u4F1A\u6CBF\u7528\u539F agent\uFF0C\u800C\u662F\u56DE\u843D\u5230\u5F53\u524D\u7F16\u6392\u8005\u81EA\u5DF1\uFF0C\u7B49\u4E8E\u6362\u6A21\u578B\u5E76\u628A\u8FD9\u4EFD\u5BF9\u8BDD\u7684 prompt \u7F13\u5B58\u5168\u90E8\u4F5C\u5E9F\uFF1B\u786E\u9700\u6362\u6A21\u578B\uFF08\u539F agent \u4E0D\u53EF\u7528/\u914D\u989D\u8017\u5C3D\uFF09\u624D\u4F20\u65B0 key\uFF0C\u5E76\u5728 task \u91CC\u8BF4\u660E\u7406\u7531\u3002"
+          description: "\u53EF\u9009\u3002\u7EED\u8DD1\u5F53\u524D\u7528\u6237\u5DF2\u6709\u7684 dialog\uFF08\u4E0D\u5B58\u5728\u6216\u4E0D\u5C5E\u4E8E\u5F53\u524D\u7528\u6237\u65F6\u663E\u5F0F\u62A5\u9519\uFF0C\u4E0D\u65B0\u5EFA\uFF09\u3002\u9002\u7528\u4E8E\u540C\u4E00\u5B50\u4EFB\u52A1\u7684\u5B9A\u5411\u95ED\u5408\uFF0C\u6838\u9A8C\u4E0A\u4E00\u8F6E finding \u662F\u5426\u4FEE\u597D\uFF1B\u7981\u7528\u4E8E\u8BC4\u5BA1\u7C7B\u4EFB\u52A1\u7684\u72EC\u7ACB\u5224\u65AD\uFF0C\u7EED\u8DD1\u4F1A\u5E26\u5165\u4E4B\u524D\u7684\u7ED3\u8BBA\u3001\u7834\u574F\u72EC\u7ACB\u6027\u30022026-10-19 review \u673A\u5236\u7EA6\u5B9A\uFF1Afull \u5BA1\u67E5\u7528\u65B0 dialog\uFF08\u4E0D\u4F20\u672C\u53C2\u6570\uFF09\uFF0Cclosure \u7528\u7EED\u8DD1\u3002\u7EED\u8DD1\u65F6\u5FC5\u987B\u663E\u5F0F\u4F20\u8BE5\u5BF9\u8BDD\u539F\u672C\u7684 agentKey\uFF08\u5BF9\u8BDD\u7684 primaryAgentKey\uFF09\uFF1A\u7701\u7565 agentKey \u4E0D\u4F1A\u6CBF\u7528\u539F agent\uFF0C\u800C\u662F\u56DE\u843D\u5230\u5F53\u524D\u7F16\u6392\u8005\u81EA\u5DF1\uFF0C\u7B49\u4E8E\u6362\u6A21\u578B\u5E76\u628A\u8FD9\u4EFD\u5BF9\u8BDD\u7684 prompt \u7F13\u5B58\u5168\u90E8\u4F5C\u5E9F\uFF1B\u786E\u9700\u6362\u6A21\u578B\uFF08\u539F agent \u4E0D\u53EF\u7528/\u914D\u989D\u8017\u5C3D\uFF09\u624D\u4F20\u65B0 key\uFF0C\u5E76\u5728 task \u91CC\u8BF4\u660E\u7406\u7531\u3002\u53EA\u6709\u7EED\u8DD1\u624D\u5E26\u6B64\u524D\u5BF9\u8BDD\u5386\u53F2\uFF1A\u65B0\u5EFA run\uFF08\u4E0D\u4F20\u672C\u53C2\u6570\uFF09\u6CA1\u6709\u4EFB\u4F55\u6B64\u524D\u5BF9\u8BDD\u5386\u53F2\uFF0C\u540C\u4E00 agentKey \u4E5F\u4E0D\u7B49\u4E8E\u540C\u4E00\u4E0A\u4E0B\u6587\u3002\u7EED\u8DD1\u4F9D\u8D56\u672C\u5730 dialog \u5386\u53F2\uFF1B\u5386\u53F2\u4E0D\u53EF\u7528\u65F6\u8BE5 run \u4F1A\u76F4\u63A5\u5931\u8D25\uFF08\u62A5 Strict continuation history load failed\uFF09\u800C\u4E0D\u4F1A\u9000\u5316\u4E3A\u65B0\u5EFA dialog\u2014\u2014\u6B64\u65F6\u82E5\u6539\u4EE5\u65B0 dialog \u91CD\u6D3E\uFF0C\u7B49\u4E8E\u4E00\u4E2A\u6CA1\u6709\u6B64\u524D\u5386\u53F2\u7684\u65B0\u4EFB\u52A1\uFF0C\u5FC5\u987B\u5728 task \u91CC\u8865\u9F50\u539F finding\u3001\u5FC5\u8981\u4E0A\u4E0B\u6587\u4E0E\u6838\u9A8C\u6807\u51C6\uFF1B\u786E\u5B9E\u4F9D\u8D56\u539F\u5BF9\u8BDD\u5386\u53F2\u65F6\u5E94\u5148\u6062\u590D\u5386\u53F2\uFF0C\u4E0D\u8981\u5047\u88C5\u4ECD\u5728\u7EED\u8DD1\u3002"
         },
         batchId: {
           type: "string",
@@ -14203,7 +14364,7 @@ function buildStartAgentRunFunctionSchema(opts) {
         },
         credentialGroup: {
           type: "string",
-          description: "\u53EF\u9009\u3002\u7167\u6284 listAgents \u8FD4\u56DE\u7684 credentialGroup \u5B57\u6BB5\uFF0C\u7528\u4E8E\u540C\u6279\u6B21\u5E76\u53D1\u6247\u51FA\u7684\u51ED\u8BC1\u9694\u79BB\u6821\u9A8C\u3002\u7F3A\u7701/\u7A7A\u503C\u89C6\u4E3A\u300C\u672A\u77E5\u300D\uFF08\u4E0D\u662F\u300C\u72EC\u7ACB\u300D\uFF09\uFF1A\u4E0E\u540C batch \u5185\u4EFB\u4F55\u5176\u4ED6 run \u5E76\u53D1\u90FD\u4F1A\u88AB\u62D2\u7EDD\u3002"
+          description: "\u53EF\u9009\u3002\u517C\u5BB9 listAgents \u8FD4\u56DE\u7684 credentialGroup \u63D0\u793A\uFF1B\u4E0D\u4F5C\u4E3A\u6743\u5A01\u51ED\u636E\u8EAB\u4EFD\u3002Web \u5B88\u536B\u4ECE\u5E94\u7528\u914D\u7F6E\u4E2D\u7684\u51ED\u636E reference \u89E3\u6790\uFF0C\u65E0\u6CD5\u89E3\u6790\u5219\u4E3A\u672A\u77E5\uFF08\u4E0D\u662F\u72EC\u7ACB\uFF09\uFF1B\u670D\u52A1\u7AEF\u4ECD\u6267\u884C\u6700\u7EC8\u51C6\u5165\u6821\u9A8C\u3002"
         },
         allowUnknownCredential: {
           type: "boolean",
@@ -14224,14 +14385,6 @@ function buildStartAgentRunFunctionSchema(opts) {
           type: "boolean",
           description: '\u53EF\u9009\u3002\u4E3A true \u65F6\u672C\u6B21 run \u4F1A\u88AB\u8BB0\u5F55\u8FDB runtime todo\uFF08~/.nolo/todos.json\uFF09\u3002\u4F20\u4E86 batchId \u65F6\u9ED8\u8BA4\u5373\u8BB0\u5F55\uFF08\u6BCF\u6279\u5BF9\u5E94\u4E00\u9879 todo\uFF09\u3002todo \u72B6\u6001\u7531\u5173\u8054 run \u72B6\u6001 + review \u7ED3\u8BBA\u63A8\u5BFC\uFF0C\u7528 controlAgentRun(action:"todo") \u67E5\u8BE2\u3002'
         },
-        maxToolCalls: {
-          type: "number",
-          description: "\u53EF\u9009\u3002\u8FD9\u6B21\u5B50\u4EFB\u52A1\u7684\u5DE5\u5177\u8C03\u7528\u6388\u6743\u989D\u5EA6\uFF08\u786C\u4E0A\u9650\uFF09\u3002\u4E0D\u4F20\u5219\u7528 runtime \u9ED8\u8BA4 200\u3002\u5230\u9650\u5373\u505C\u6B62\u542F\u52A8\u65B0\u7684\u5DE5\u5177\u4E0E\u6A21\u578B\u8C03\u7528\u3001\u6709\u754C\u6536\u5C3E\uFF0C\u8FD4\u56DE\u4E2D\u95F4\u7ED3\u8BBA\u5E76\u6807\u8BB0 budget-exhausted\uFF08\u4E0D\u7B97 provider \u9519\u8BEF\uFF09\u3002\u5E94\u6309\u4EFB\u52A1\u610F\u56FE\u6536\u7D27\uFF1A\u6539\u4E00\u4E2A\u5E38\u91CF\u7ED9 10~20\uFF0C\u5355\u6587\u4EF6\u4FEE\u590D\u7ED9 40\uFF0C\u5BA1\u67E5\u7ED9 60\u3002\u6CE8\u610F\u9ED8\u8BA4 200 \u53EA\u7528\u6765\u515C\u65E0\u754C\u635F\u5931\uFF0C\u4E0D\u662F\u5931\u63A7\u8BC6\u522B\u2014\u2014\u8DD1\u5230\u4E0A\u9650\u4E0D\u4EE3\u8868\u4EFB\u52A1\u6B63\u5E38\u3002"
-        },
-        maxWallClockMs: {
-          type: "number",
-          description: "\u53EF\u9009\u3002\u8FD9\u6B21\u5B50\u4EFB\u52A1\u7684\u5899\u949F\u786C\u4E0A\u9650\uFF08\u6BEB\u79D2\uFF09\u3002\u4E0D\u4F20\u5219\u7528 runtime \u9ED8\u8BA4 3600000\uFF0860 \u5206\u949F\uFF09\u3002\u4E0E maxToolCalls \u4EFB\u4E00\u5148\u5230\u5373\u7EC8\u6B62\u3002\u4F5C\u7528\u662F\u515C\u4F4F\u300C\u5355\u6B21\u8C03\u7528\u91CC\u5957\u5FAA\u73AF\u300D\u8FD9\u7C7B\u5DE5\u5177\u8BA1\u6570\u6D4B\u4E0D\u51FA\u8017\u65F6\u7684\u573A\u666F\uFF0C\u4F8B\u5982\u4E00\u6761 shell \u91CC `for i in 1 2 3` \u53CD\u590D\u8DD1\u540C\u4E00\u5957\u6D4B\u8BD5\uFF0C\u8C03\u7528\u6570\u53EA\u6709 1 \u4F46\u8017\u65F6\u5F88\u957F\u3002"
-        },
         ...supportsWait ? {
           wait: {
             type: "boolean",
@@ -14264,7 +14417,7 @@ function buildStartAgentRunFunctionSchema(opts) {
         instaboxAllowPaid: { type: "boolean", description: "\u663E\u5F0F\u5141\u8BB8\u4ED8\u8D39\u5EFA\u673A\uFF1B\u9ED8\u8BA4 false\uFF0C\u4FDD\u7559\u514D\u8D39\u989D\u5EA6\u95E8\u7981\u3002" },
         allowHostWrites: {
           type: "boolean",
-          description: "\u53EF\u9009\u3002\u4EC5\u5F53 runtimeKey='local' \u65F6\u9700\u8981\u663E\u5F0F\u58F0\u660E\uFF1A\u8868\u793A\u8C03\u7528\u65B9\u540C\u610F\u5B50 run \u76F4\u63A5\u5728**\u5BBF\u4E3B\u6587\u4EF6\u7CFB\u7EDF**\u4E0A\u8BFB\u5199\u4EE3\u7801\uFF08\u65E0\u9694\u79BB\uFF09\u3002runtimeKey='local' \u4F46\u672A\u58F0\u660E\u65F6\u4F1A\u88AB\u663E\u5F0F\u62D2\u7EDD\uFF08\u4E0D\u56DE\u843D\u5BBF\u4E3B\u3001\u4E5F\u4E0D\u6084\u6084\u6539\u6210 docker\uFF09\u3002\u7701\u7565 runtimeKey \u65F6\u65E0\u6548\u3002\u6CE8\u610F**\u7701\u7565 key \u65F6\u7684\u9ED8\u8BA4\u4F4D\u7F6E\u6709\u4F8B\u5916**\uFF1A\u5199\u578B\u6D3E\u53D1\u9ED8\u8BA4\u8FDB\u672C\u673A docker \u6C99\u76D2\uFF1B\u53EA\u8BFB\u6D3E\u53D1\uFF08readOnly=true\uFF09\u4ECD\u5728\u5BBF\u4E3B\u6267\u884C\uFF08\u5B83\u79FB\u9664\u4E86\u4E13\u7528\u5199\u5DE5\u5177\uFF0C\u8D77\u6C99\u76D2\u662F\u6D6A\u8D39\uFF1B\u4F46 shell \u4ECD\u53EF\u5199\u6587\u4EF6\uFF0C\u8FD9\u4E0D\u662F\u6587\u4EF6\u7CFB\u7EDF\u53EA\u8BFB\u9694\u79BB\uFF09\u3002"
+          description: "\u53EF\u9009\u3002\u4EC5\u5F53 runtimeKey='local' \u65F6\u9700\u8981\u663E\u5F0F\u58F0\u660E\uFF1A\u8868\u793A\u8C03\u7528\u65B9\u540C\u610F\u5B50 run \u76F4\u63A5\u5728**\u5BBF\u4E3B\u6587\u4EF6\u7CFB\u7EDF**\u4E0A\u8BFB\u5199\u4EE3\u7801\uFF08\u65E0\u9694\u79BB\uFF09\u3002runtimeKey='local' \u4F46\u672A\u58F0\u660E\u65F6\u4F1A\u88AB\u663E\u5F0F\u62D2\u7EDD\uFF08\u4E0D\u56DE\u843D\u5BBF\u4E3B\u3001\u4E5F\u4E0D\u6084\u6084\u6539\u6210 docker\uFF09\u3002\u7701\u7565 runtimeKey \u65F6\u65E0\u6548\u3002\u6CE8\u610F**\u7701\u7565 key \u65F6\u7684\u9ED8\u8BA4\u4F4D\u7F6E\u6709\u4F8B\u5916**\uFF1A\u5199\u578B\u6D3E\u53D1\u9ED8\u8BA4\u8FDB\u672C\u673A docker \u6C99\u76D2\uFF1B\u53EA\u8BFB\u6D3E\u53D1\uFF08readOnly=true\uFF09\u5F53\u524D\u5B9E\u73B0\u4ECD\u7559\u5728\u5BBF\u4E3B\u6267\u884C\uFF08\u5B83\u79FB\u9664\u7684\u662F nolo \u4FA7\u4E13\u7528\u5199\u5DE5\u5177\uFF1Bshell \u4E0E\u5916\u90E8 CLI \u901A\u9053\u4ECD\u53EF\u5199\u6587\u4EF6\uFF0C\u8FD9\u4E0D\u662F\u6587\u4EF6\u7CFB\u7EDF\u53EA\u8BFB\u9694\u79BB\uFF09\u3002"
         }
       },
       required: ["task", "title"]
@@ -14325,23 +14478,7 @@ async function startAgentRunFunc(args, thunkApi, _context) {
     );
   }
   const effectiveAllowCredentialConcurrency = args.allowCredentialConcurrency ?? true;
-  if (explicitBatchId) {
-    const nowMs = Date.now();
-    pruneBatchFanoutRegistry(nowMs);
-    const active = batchFanoutRegistry.get(explicitBatchId) ?? [];
-    const verdict = checkCredentialFanout({
-      active,
-      candidate: { agentKey: effectiveAgentKey, credentialGroup: args.credentialGroup },
-      allowUnknownCredential: args.allowUnknownCredential === true,
-      allowCredentialConcurrency: effectiveAllowCredentialConcurrency
-    });
-    if (!verdict.allowed) throw new Error(verdict.message);
-  }
   const content = buildDelegatedTaskContent(task, input);
-  const dispatchedSubtaskBudget = resolveDispatchedSubtaskBudget({
-    ...typeof args.maxToolCalls === "number" ? { maxToolCalls: args.maxToolCalls } : {},
-    ...typeof args.maxWallClockMs === "number" ? { maxWallClockMs: args.maxWallClockMs } : {}
-  });
   const payloadMetrics = calculateDelegatedPayloadMetrics(task, input, content);
   const activeDialogKey = getActiveDialogKey();
   const explicitParentDialogId = typeof args.parentDialogId === "string" && args.parentDialogId.trim() ? args.parentDialogId.includes("-") ? extractCustomId(args.parentDialogId) : args.parentDialogId.trim() : void 0;
@@ -14355,7 +14492,44 @@ async function startAgentRunFunc(args, thunkApi, _context) {
       throw new Error(HOST_EXECUTOR_UNAVAILABLE_MESSAGE);
     }
   }
+  const state2 = thunkApi.getState();
+  const config = state2?.db ? selectById(state2, effectiveAgentKey) : void 0;
+  const credentialGroup = deriveCredentialGroup(config?.apiKeyRef ?? config?.credentialRef)?.credentialGroup;
+  let selectionCheck = assertDispatchSelectionAdmission({
+    dimension: args.dimension,
+    difficulty: args.difficulty,
+    model: config?.model,
+    selectionReason: args.selectionReason
+  });
+  let entries;
+  let reservation;
+  if (explicitBatchId) {
+    entries = batchFanoutRegistry.get(explicitBatchId);
+    if (!entries) {
+      entries = [];
+      batchFanoutRegistry.set(explicitBatchId, entries);
+    }
+    const verdict = checkCredentialFanout({
+      active: entries,
+      candidate: { agentKey: effectiveAgentKey, credentialGroup },
+      allowUnknownCredential: args.allowUnknownCredential === true,
+      allowCredentialConcurrency: effectiveAllowCredentialConcurrency
+    });
+    if (!verdict.allowed && entries.some((entry) => !entry.runId)) throw new Error(verdict.message);
+    reservation = { agentKey: effectiveAgentKey, credentialGroup };
+    entries.push(reservation);
+  }
   try {
+    if (entries && reservation) {
+      await refreshBatchFanout(entries, thunkApi);
+      const verdict = checkCredentialFanout({
+        active: entries.filter((entry) => entry !== reservation),
+        candidate: reservation,
+        allowUnknownCredential: args.allowUnknownCredential === true,
+        allowCredentialConcurrency: effectiveAllowCredentialConcurrency
+      });
+      if (!verdict.allowed) throw new Error(verdict.message);
+    }
     const bgResult = runtimeKey === "local" ? await hostAgentRunDispatcher({
       agentKey: effectiveAgentKey,
       userInput: content,
@@ -14363,9 +14537,8 @@ async function startAgentRunFunc(args, thunkApi, _context) {
       waitForCompletion: wait === true,
       runKind: "subtask",
       runTitle: title,
+      selectionCheck,
       runtimeKey: "local",
-      // 已解析的硬预算（子 run 只消费，不再自行读 env）。
-      subtaskBudgetLimits: dispatchedSubtaskBudget.limits,
       allowHostWrites: true,
       ...args.readOnly === true ? { readOnly: true } : {},
       ...parentDialogId ? { parentDialogId } : {}
@@ -14380,36 +14553,42 @@ async function startAgentRunFunc(args, thunkApi, _context) {
         waitForCompletion: wait === true,
         runKind: "subtask",
         runTitle: title,
-        // 已解析的硬预算（子 run 只消费，不再自行读 env）。
-        subtaskBudgetLimits: dispatchedSubtaskBudget.limits,
+        selectionCheck,
         ...args.readOnly === true ? { readOnly: true } : {},
         ...parentDialogId ? { parentDialogId } : {},
         ...runtimeKey ? { runtimeKey } : {}
       })
     ).unwrap();
+    selectionCheck = bgResult.selectionCheck ?? selectionCheck;
+    const contextFacts = bgResult.contextMode ? { contextMode: bgResult.contextMode, agentChanged: bgResult.agentChanged === true, ...bgResult.contextNote ? { contextNote: bgResult.contextNote } : {} } : {};
+    const continuationEvidence = continueDialogId ? {
+      difficultyRecheckRequired: true,
+      ...bgResult.previousRun ? { previousRun: bgResult.previousRun } : {}
+    } : {};
     if (wait === true) {
       const fullContent = bgResult.content ?? "";
       return {
         rawData: resultMode === "summary" ? summarizeChildContent(fullContent) : fullContent,
         displayData: `\u2705 startAgentRun \u540C\u6B65\u5B8C\u6210\uFF0CdialogId: ${bgResult.dialogId}${resultMode === "summary" ? "\uFF08summary\uFF09" : ""}`,
         metadata: {
-          payloadMetrics
+          payloadMetrics,
+          selectionCheck,
+          ...contextFacts,
+          ...continuationEvidence
         }
       };
     }
     const runId = bgResult.dialogId;
-    if (explicitBatchId) {
-      const entries = batchFanoutRegistry.get(explicitBatchId) ?? [];
-      entries.push({
-        runId,
-        agentKey: effectiveAgentKey,
-        ...typeof args.credentialGroup === "string" && args.credentialGroup.trim() ? { credentialGroup: args.credentialGroup.trim() } : {},
-        startedAtMs: Date.now()
-      });
-      batchFanoutRegistry.set(explicitBatchId, entries);
+    if (reservation) {
+      if (typeof runId !== "string" || !runId) throw new Error("batch admission: creation returned no runId");
+      reservation.runId = runId;
     }
     const status = bgResult.status ?? "pending";
-    const resolvedName = agentName?.trim() || bgResult.agentName || bgResult.name;
+    const resolvedName = await resolveAgentRunName(
+      effectiveAgentKey,
+      [agentName, bgResult.agentName, bgResult.name],
+      async (dbKey) => dispatch(read({ dbKey })).unwrap()
+    );
     const identity = { agentName: resolvedName, agentKey: effectiveAgentKey, runId };
     const taskPreview = task.replace(/\s+/g, " ").trim().slice(0, TASK_PREVIEW_MAX);
     return {
@@ -14417,6 +14596,8 @@ async function startAgentRunFunc(args, thunkApi, _context) {
         runId,
         status,
         agentKey,
+        ...contextFacts,
+        ...continuationEvidence,
         // batchId is always returned — minted above when the caller didn't
         // supply one — so controlAgentRun(list, batchId=...) works on every
         // host. On the server path the id lives in the tool return; on the
@@ -14425,7 +14606,8 @@ async function startAgentRunFunc(args, thunkApi, _context) {
         ...resolvedName ? { agentName: resolvedName } : {},
         ...taskPreview ? { taskPreview } : {},
         ...title ? { title } : {},
-        payloadMetrics
+        payloadMetrics,
+        selectionCheck
       },
       displayData: formatStartRunCard(resolveRunLabel(identity), status, {
         task: taskPreview,
@@ -14438,6 +14620,11 @@ async function startAgentRunFunc(args, thunkApi, _context) {
     };
   } catch (e) {
     throw new Error(`startAgentRun \u542F\u52A8 Agent [${agentKey}] \u5931\u8D25: ${toErrorMessage(e)}`);
+  } finally {
+    if (entries && reservation && !reservation.runId) {
+      const index = entries.indexOf(reservation);
+      if (index >= 0) entries.splice(index, 1);
+    }
   }
 }
 var SUMMARY_HEAD_CHARS = 1500;
@@ -14462,6 +14649,7 @@ var CONTROL_AGENT_RUN_ACTIONS = [
   "append"
 ];
 var ACTION_DESCRIPTIONS = {
+  recoverPreparedWriter: "recoverPreparedWriter=\u4EC5\u672C\u5730\uFF1A\u663E\u5F0F\u64A4\u9500\u540C\u4E00 attemptId \u7684 fenced-launch-v1 prepared writer \u5E76\u91CA\u653E claim\uFF1Bgranted\u3001legacy\u3001unknown \u6216 attempt \u4E0D\u5339\u914D\u5747\u62D2\u7EDD\uFF1B\u4E0D\u7EC8\u6B62\u8FDB\u7A0B\u3001\u4E0D\u63D0\u4F9B force",
   list: "list=\u5217\u51FA run\uFF08\u7701\u7565 runId\uFF09",
   status: "status=\u67E5\u5355\u6761 run \u72B6\u6001 + \u53EF\u9009\u65E5\u5FD7\uFF1B\u7EC8\u6001 run \u7684\u5B8C\u6574\u7ED3\u8BBA\u5728\u8FD4\u56DE\u7684 resultFile\uFF08\u7528 readFile \u8BFB\u539F\u6587\uFF1BlastAssistantText \u53EA\u662F 2000 \u5B57\u6458\u8981\uFF0C\u4E0D\u5B58\u5728\u65F6\u8BFB resultFile\uFF09\uFF1BresultFile \u7F3A\u5931\u53EF\u80FD\u662F run \u88AB\u7528\u6237\u4E2D\u65AD\uFF0C\u6309\u300C\u65E0\u7ED3\u8BBA\u300D\u5904\u7406\uFF0C\u4E0D\u636E\u6B64\u5224\u5DE5\u5177\u6545\u969C",
   stop: "stop=\u53D6\u6D88 run",
@@ -14492,9 +14680,13 @@ function buildControlAgentRunFunctionSchema(opts) {
           type: "string",
           description: "\u76EE\u6807 run \u7684 ID\uFF08startAgentRun \u8FD4\u56DE\u7684 runId\uFF09\u3002action=list \u65F6\u7701\u7565\u3002"
         },
+        ...actions.includes("recoverPreparedWriter") ? { attemptId: {
+          type: "string",
+          description: "recoverPreparedWriter \u5FC5\u586B\uFF1Astatus \u8FD4\u56DE\u7684 writerLaunch.attemptId\uFF1B\u5FC5\u987B\u4E0E\u76EE\u6807 prepared attempt \u5B8C\u5168\u76F8\u540C\u3002\u73AF\u5883\u53D8\u91CF\u4EC5 locator\uFF0C\u4E0D\u6388\u4E88\u6062\u590D\u6743\u9650\u3002"
+        } } : {},
         dialogKey: {
           type: "string",
-          description: "\u53EF\u9009\u3002action=append \u65F6\u76EE\u6807 dialog \u7684 dbKey\uFF08\u5982 dialog-user-xxx\uFF09\u3002\u7F3A\u7701\u65F6\u7531 runId \u63A8\u5BFC\u3002"
+          description: "\u53EF\u9009\u3002action=append \u65F6\u76EE\u6807 dialog \u7684 dbKey\uFF08\u5982 dialog-user-xxx\uFF09\u3002\u7ED9\u4E86 runId \u65F6\u7531 runId \u63A8\u5BFC\uFF1B\u672C\u5730 CLI \u5BBF\u4E3B\u4E0A\u53EA\u7ED9 dialogKey = \u5411\u540C\u7528\u6237\u6D3B\u7740\u7684\u666E\u901A CLI dialog \u6295\u9012\u4E00\u6761\u901A\u77E5\uFF08\u8FDB\u5B83\u73B0\u6709\u961F\u5217\u6392\u961F\uFF0C\u4E0D\u542F\u52A8 run/\u6A21\u578B\uFF0C\u7B49\u5F85\u786E\u8BA4\u6216 stop \u65F6\u53EA defer\uFF1B\u76EE\u6807\u79BB\u7EBF\u6216\u65E0\u63A5\u6536\u5668\u65F6\u660E\u786E\u8FD4\u56DE unsupported/offline\uFF0C\u4E0D\u9759\u9ED8\u843D\u5E93\uFF09\u3002"
         },
         userInput: {
           type: "string",
@@ -14503,7 +14695,7 @@ function buildControlAgentRunFunctionSchema(opts) {
         mode: {
           type: "string",
           enum: ["enqueue", "continue"],
-          description: "\u53EF\u9009\u3002action=append \u65F6\u7684\u8FFD\u52A0\u6A21\u5F0F\uFF1Aenqueue=\u52A0\u5165\u961F\u5217\u4F9B\u4E0B\u4E00\u8F6E\u6D88\u8D39\uFF1Bcontinue=\u7EC8\u6001\u7EED\u8DD1\u3002\u7F3A\u7701\u65F6\u81EA\u52A8\u6839\u636E run \u72B6\u6001\u9002\u914D\u3002"
+          description: "\u53EF\u9009\u3002action=append \u65F6\u7684\u8FFD\u52A0\u6A21\u5F0F\uFF1Aenqueue=\u52A0\u5165\u961F\u5217\u4F9B\u4E0B\u4E00\u8F6E\u6D88\u8D39\uFF1Bcontinue=\u7EC8\u6001\u7EED\u8DD1\uFF08\u9700\u8981 runId\uFF1B\u672C\u5730 CLI \u5BBF\u4E3B\u4E0A\u53EA\u7ED9 dialogKey \u65F6\u4EC5\u652F\u6301 enqueue\uFF09\u3002\u7F3A\u7701\u65F6\u81EA\u52A8\u6839\u636E run \u72B6\u6001\u9002\u914D\u3002"
         },
         ...hasWait ? {
           timeoutMs: {
@@ -18110,6 +18302,32 @@ var deriveAppIdFromRouteKey = (appKey, userId) => {
   return legacyAppId || void 0;
 };
 
+// packages/core/appHttpUrl.ts
+var HTTP_PROTOCOLS = /* @__PURE__ */ new Set(["http:", "https:"]);
+var normalizeAbsoluteUrl = (value) => {
+  if (typeof value !== "string") return void 0;
+  const trimmed2 = value.trim();
+  if (!trimmed2) return void 0;
+  return trimmed2;
+};
+var parseHttpUrl = (value) => {
+  const normalized = normalizeAbsoluteUrl(value);
+  if (!normalized) return void 0;
+  let parsed;
+  try {
+    parsed = new URL(normalized);
+  } catch {
+    return void 0;
+  }
+  if (!HTTP_PROTOCOLS.has(parsed.protocol)) return void 0;
+  return parsed;
+};
+var normalizeAppHttpUrl = (value) => {
+  const normalized = normalizeAbsoluteUrl(value);
+  if (!normalized || !parseHttpUrl(normalized)) return void 0;
+  return normalized;
+};
+
 // packages/app/types/appSummary.ts
 var toIsoString = (value) => {
   const timestamp = toTimestampMs(value);
@@ -18130,18 +18348,25 @@ function toAppSummary(record, fallbackServerOrigin) {
   if (!appKey) return null;
   const appId = explicitAppId ?? deriveAppIdFromRouteKey(appKey, record.userId);
   const name = typeof record.name === "string" && record.name.trim().length > 0 ? record.name : appId ?? appKey;
+  const versionServerOrigin = typeof record.versionServerOrigin === "string" && record.versionServerOrigin.trim().length > 0 ? record.versionServerOrigin.trim() : void 0;
+  const hostServerOrigin = typeof record.serverOrigin === "string" && record.serverOrigin.trim().length > 0 ? record.serverOrigin.trim() : fallbackServerOrigin;
+  const recordedUrl = normalizeAppHttpUrl(record.url);
   return {
     name,
-    url: buildAppUrl(record.serverOrigin ?? fallbackServerOrigin, appId),
+    url: recordedUrl ?? buildAppUrl(versionServerOrigin ?? hostServerOrigin, appId),
     appId,
     appKey,
-    serverOrigin: typeof record.serverOrigin === "string" && record.serverOrigin.trim().length > 0 ? record.serverOrigin : fallbackServerOrigin,
+    serverOrigin: hostServerOrigin,
+    versionServerOrigin,
     spaceId: typeof record.spaceId === "string" && record.spaceId.trim().length > 0 ? record.spaceId : null,
     customUrl: typeof record.customUrl === "string" && record.customUrl.trim().length > 0 ? record.customUrl : void 0,
     modifiedOn: toIsoString(record.updatedAt ?? record.createdAt),
     visibility: record.visibility ?? "private",
     deployMode: record.deployMode ?? "platform",
-    icon: record.icon ?? null
+    icon: record.icon ?? null,
+    // 记录里的真实 owner（服务端记录字段，不是客户端推测）。卡片上的
+    // 「发布到社区」用它门控：非 owner 不渲染，避免假按钮（review 假按钮）。
+    ownerUserId: typeof record.userId === "string" && record.userId.trim().length > 0 ? record.userId.trim() : void 0
   };
 }
 
@@ -18177,6 +18402,11 @@ var toTimestamp = (value) => typeof value === "number" ? value : Date.parse(valu
 var normalizeSpaceId2 = (spaceId) => {
   return asOptionalTrimmedString(spaceId) ?? null;
 };
+var normalizeTrimmedOrUndefined = (value) => {
+  if (typeof value !== "string") return void 0;
+  const trimmed2 = value.trim();
+  return trimmed2.length > 0 ? trimmed2 : void 0;
+};
 var resolveRecordTimestamp = (record) => record.updatedAt ?? record.updated_at ?? record.createdAt ?? record.created ?? 0;
 function pinnedFirst(a, b) {
   return Number(Boolean(b.pinned)) - Number(Boolean(a.pinned));
@@ -18229,6 +18459,7 @@ function buildMyContentItemsFromUserData(records, currentServer = "", spaceNameB
         originalName: typeof record.originalName === "string" && record.originalName.trim().length > 0 ? record.originalName : void 0,
         contentKey,
         ...record.type === "dialog" ? { status: dialogSummaryStatus(record.status), unreadAt: dialogSummaryUnreadAt(record.unreadAt) } : {},
+        ...contentType === "dialog" && typeof record.userId === "string" && record.userId.trim() && contentKey.startsWith(`dialog-${record.userId.trim()}-`) && contentKey.length > `dialog-${record.userId.trim()}-`.length ? { userId: record.userId.trim(), dialogId: contentKey.slice(`dialog-${record.userId.trim()}-`.length) } : {},
         pinned: Boolean(record.pinned),
         createdAt: record.createdAt ?? record.created ?? 0,
         updatedAt: timestamp,
@@ -18237,8 +18468,10 @@ function buildMyContentItemsFromUserData(records, currentServer = "", spaceNameB
         spaceId,
         spaceName,
         serverOrigin: typeof record.serverOrigin === "string" && record.serverOrigin.trim().length > 0 ? record.serverOrigin : void 0,
-        cybots: record.cybots,
-        primaryAgentKey: record.primaryAgentKey || record.primaryCybotKey || record.runtimeBinding?.agentKey || (Array.isArray(record.cybots) && record.cybots.length > 0 ? record.cybots[0] : void 0)
+        cybots: Array.isArray(record.cybots) ? record.cybots.filter((entry) => typeof entry === "string" && entry.trim().length > 0) : void 0,
+        primaryAgentKey: record.primaryAgentKey || record.primaryCybotKey || record.runtimeBinding?.agentKey || (Array.isArray(record.cybots) && record.cybots.length > 0 ? record.cybots[0] : void 0),
+        parentDialogId: normalizeTrimmedOrUndefined(record.parentDialogId),
+        rootDialogId: normalizeTrimmedOrUndefined(record.rootDialogId)
       }
     ];
   });
@@ -18701,7 +18934,7 @@ async function updateDocFunc(args, thunkApi) {
       updated_at: (/* @__PURE__ */ new Date()).toISOString()
     };
     await dispatch(write({ data: updatedPageData, customKey: id })).unwrap();
-    const { getDocState, applyExternalDocUpdate } = await import("./docStore-KNZK6Y2G.js");
+    const { getDocState, applyExternalDocUpdate } = await import("./docStore-2VAWVLWH.js");
     if (getDocState().pageKey === id) {
       applyExternalDocUpdate({
         slateData: finalSlateData,
@@ -18726,7 +18959,7 @@ async function updateDocFunc(args, thunkApi) {
 // packages/ai/tools/updateUserPreferenceProfileTool.ts
 async function dispatchSetSettings(thunkApi, changes) {
   const injectedSetSettings = thunkApi?.extra?.setSettings;
-  const setSettings = typeof injectedSetSettings === "function" ? injectedSetSettings : (await import("./settingThunks-UGBPCNYF.js")).setSettings;
+  const setSettings = typeof injectedSetSettings === "function" ? injectedSetSettings : (await import("./settingThunks-ENOAK2WV.js")).setSettings;
   await thunkApi.dispatch(setSettings(changes)).unwrap();
 }
 var updateUserPreferenceProfileFunctionSchema = {
@@ -19095,7 +19328,7 @@ async function runZiweiChart(input) {
   const gender = normalizeGender(input.gender);
   const fixLeap = input.fixLeap !== false;
   const isLeapMonth = input.isLeapMonth === true;
-  const { astro } = await import("./lib-5KKIBFIT.js");
+  const { astro } = await import("./lib-OT5OTXRU.js");
   const rawChart = calendarType === "lunar" ? astro.byLunar(dateStr, timeIndex, gender, isLeapMonth, fixLeap, language) : astro.bySolar(dateStr, timeIndex, gender, fixLeap, language);
   const palaces = rawChart.palaces.map((palace) => ({
     index: palace.index,
@@ -19318,6 +19551,16 @@ async function toolQueryFunc(args) {
   return { rawData, displayData };
 }
 var baseToolDefinitions = [
+  {
+    id: "secretRequest",
+    schema: secretRequestFunctionSchema,
+    executor: secretRequestFunc,
+    description: {
+      name: "secret-request",
+      description: "\u5411\u7528\u6237\u8BF7\u6C42\u5177\u540D\u51ED\u636E\uFF0C\u5BBF\u4E3B\u9762\u677F\u8F93\u5165\u540E\u5199\u5165\u672C\u673A secret store\uFF1B\u503C\u4E0D\u8FDB\u5BF9\u8BDD\u3002",
+      category: "interaction"
+    }
+  },
   {
     id: "uiAskChoice",
     schema: uiAskChoiceFunctionSchema,
@@ -21110,6 +21353,7 @@ export {
   deleteMemoryFunctionSchema,
   queryMemoryFunctionSchema,
   normalizeContinueDialogId,
+  resolveRunContextFacts,
   resolveStartAgentRunCwd,
   isDockerRuntimeKey,
   resolveCliLocalRuntimeKeyCapability,