nolo-cli 0.213.0 → 0.223.0-alpha.1

package/{chunk-6VLJ6YA7.js → chunk-4DESLZTK.js}

@@ -3,7 +3,7 @@ import {
   require_differenceInMilliseconds,
   require_differenceInMinutes,
   require_roundingMethods
-} from "./chunk-FY7F4Q6X.js";
+} from "./chunk-Z4PCXPUE.js";
 import {
   normalizeStats,
   require_addMilliseconds,
@@ -23,27 +23,27 @@ import {
   require_startOfUTCWeek,
   require_subMilliseconds,
   require_toInteger
-} from "./chunk-7RFNTILS.js";
+} from "./chunk-BUDVRYES.js";
 import {
   require_formatISO
-} from "./chunk-WPORQFYN.js";
+} from "./chunk-UVLYNWIE.js";
 import {
   require_addLeadingZeros,
   require_interopRequireDefault,
   require_requiredArgs,
   require_toDate,
   require_typeof
-} from "./chunk-MMA3LZ3W.js";
+} from "./chunk-YNIYE47Z.js";
 import {
   getDefaultCliLocalRuntimeDb
-} from "./chunk-AZMYUSVF.js";
+} from "./chunk-N5Z2V73W.js";
 import {
   createTokenStatsKey
-} from "./chunk-JY5NGFFH.js";
+} from "./chunk-SYTHYBMI.js";
 import {
   __commonJS,
   __toESM
-} from "./chunk-4VNS5WPM.js";
+} from "./chunk-U67V476Y.js";
 
 // node_modules/date-fns/addDays/index.js
 var require_addDays = __commonJS({
@@ -11658,7 +11658,7 @@ async function runUsageCommand(args, deps) {
   const output = deps.output ?? process.stdout;
   const errorOutput = deps.errorOutput ?? process.stderr;
   if (args[0] === "rebuild") {
-    const { runUsageRebuildCommand } = await import("./usageRebuildCommand-HAW2AD5N.js");
+    const { runUsageRebuildCommand } = await import("./usageRebuildCommand-SP2BLNJU.js");
     return runUsageRebuildCommand(args.slice(1), deps);
   }
   if (hasFlag(args, "-h") || hasFlag(args, "--help")) {
@@ -11729,7 +11729,7 @@ async function runUsageCommand(args, deps) {
   return 0;
 }
 async function resolveUsageUserId(env) {
-  const { resolveLocalUserId } = await import("./cliAgentConfigHelpers-WJBZQTLW.js");
+  const { resolveLocalUserId } = await import("./cliAgentConfigHelpers-TKYL43MT.js");
   return resolveLocalUserId(env);
 }
 function isLocalDbMissingError(error) {

package/{chunk-MYOH447Z.js → chunk-4JVNURX4.js}

@@ -3,7 +3,7 @@ import {
 } from "./chunk-QYPE3TS3.js";
 import {
   getActiveDialogKey
-} from "./chunk-OWYYDMGJ.js";
+} from "./chunk-S2NTVGA2.js";
 import {
   selectIdentityToken
 } from "./chunk-PXYBUFDB.js";

package/chunk-5CHGAKRT.js

@@ -0,0 +1,364 @@
+import {
+  authRoutes
+} from "./chunk-M3JEW6N6.js";
+import {
+  BUILTIN_DIALOG_LLM_FALLBACK_MODEL,
+  BUILTIN_SUMMARY_LLM_CONFIG
+} from "./chunk-523DITKR.js";
+import {
+  buildPlatformChatCompletionRequest,
+  canUsePlatformChatProvider,
+  parsePlatformChatCompletionResponse,
+  resolvePlatformChatProviderConfig
+} from "./chunk-QNWG52I4.js";
+import {
+  COMPACTION_SUMMARY_SYSTEM_PROMPT,
+  classifySummaryError,
+  createSummaryBudget,
+  isTruncatedCompletion,
+  selectSummaryRoute,
+  summaryCompletionTokens
+} from "./chunk-RDH5CQ4T.js";
+import {
+  isAbortError
+} from "./chunk-7DPNBQSV.js";
+import {
+  resolvePlatformAuthToken,
+  resolvePlatformServerUrl
+} from "./chunk-I7WBYGBP.js";
+import {
+  PLATFORM_HOSTED_DEEPSEEK_FLASH_MODEL
+} from "./chunk-CKG3PRZ7.js";
+import {
+  parseUserIdFromAuthToken
+} from "./chunk-2THCNKE4.js";
+
+// packages/core/accountSession/fetchAccountProfile.ts
+async function fetchAccountProfile(input) {
+  const serverUrl = input.serverUrl?.trim();
+  const token = input.token?.trim();
+  const userId = input.userId?.trim();
+  if (!serverUrl || !token || !userId) {
+    throw new Error("missing_profile_request_params");
+  }
+  const path = authRoutes.users.detail.createPath({ userId });
+  const fetchImpl = input.fetchImpl ?? ((url, init) => fetch(url, init));
+  const response = await fetchImpl(`${serverUrl}${path}`, {
+    method: authRoutes.users.detail.method,
+    headers: {
+      Authorization: `Bearer ${token}`
+    }
+  });
+  if (!response.ok) {
+    const errorText = await response.text().catch(() => "");
+    throw new Error(`profile_fetch_failed: ${response.status} ${errorText}`);
+  }
+  const profileData = await response.json().catch(() => ({}));
+  return {
+    userId,
+    balance: profileData.balance,
+    gptProAccess: profileData.gptProAccess,
+    adminPermissions: profileData.adminPermissions
+  };
+}
+
+// packages/cli/client/tuiSummaryLlmCaller.ts
+import { randomUUID } from "node:crypto";
+var TUI_SUMMARY_MAX_OUTPUT_TOKENS = 8192;
+function createTuiSummaryLlmCaller(env, options) {
+  const fetchImpl = options?.fetchImpl ?? fetch;
+  const configuredTimeout = options?.timeoutMs;
+  const timeoutMs = typeof configuredTimeout === "number" && Number.isFinite(configuredTimeout) && configuredTimeout > 0 ? Math.min(configuredTimeout, 3e4) : 3e4;
+  const resolveProviderConfig = options?.resolveProviderConfig ?? resolvePlatformChatProviderConfig;
+  const caller = async (content, callOptions) => {
+    if (callOptions?.signal?.aborted) throw new DOMException("Summary cancelled", "AbortError");
+    if (!canUsePlatformChatProvider(env)) return null;
+    const requestedOutputTokens = callOptions?.maxOutputTokens;
+    if (requestedOutputTokens !== void 0 && (!Number.isFinite(requestedOutputTokens) || requestedOutputTokens < 1)) return null;
+    const maxOutputTokens = requestedOutputTokens === void 0 ? TUI_SUMMARY_MAX_OUTPUT_TOKENS : Math.min(TUI_SUMMARY_MAX_OUTPUT_TOKENS, Math.floor(requestedOutputTokens));
+    const deadlineMs = Math.min(Date.now() + timeoutMs, callOptions?.deadlineMs ?? Infinity);
+    const remainingMs = deadlineMs - Date.now();
+    if (!(remainingMs > 0)) return null;
+    const controller = new AbortController();
+    const parentSignal = callOptions?.signal;
+    const onAbort = () => controller.abort(parentSignal?.reason);
+    parentSignal?.addEventListener("abort", onAbort, { once: true });
+    if (parentSignal?.aborted) onAbort();
+    const timer = setTimeout(() => controller.abort(new DOMException("Summary deadline exceeded", "TimeoutError")), remainingMs);
+    const signal = controller.signal;
+    const attemptId = callOptions?.attemptId ?? randomUUID();
+    const attempt = async (model, budgetMs) => {
+      if (signal.aborted || !(budgetMs > 0)) return null;
+      const attemptController = new AbortController();
+      const attemptSignal = attemptController.signal;
+      const attemptDeadlineMs = Date.now() + budgetMs;
+      const onStop = () => attemptController.abort(signal.reason);
+      signal.addEventListener("abort", onStop, { once: true });
+      if (signal.aborted) onStop();
+      const attemptTimer = setTimeout(() => attemptController.abort(
+        new DOMException("Summary attempt budget exceeded", "TimeoutError")
+      ), budgetMs);
+      let onAttemptAbort = () => {
+      };
+      const stopped = new Promise((resolve) => {
+        onAttemptAbort = () => resolve(null);
+        if (attemptSignal.aborted) resolve(null);
+        else attemptSignal.addEventListener("abort", onAttemptAbort, { once: true });
+      });
+      const isStopped = () => attemptSignal.aborted || Date.now() >= attemptDeadlineMs;
+      let stage = "resolve";
+      let operationStage = "resolve";
+      let errorKind = null;
+      let httpStatus = null;
+      const startedAt = Date.now();
+      const work = async () => {
+        try {
+          const providerConfig = await resolveProviderConfig({
+            agentConfig: { ...BUILTIN_SUMMARY_LLM_CONFIG, model, key: BUILTIN_SUMMARY_LLM_CONFIG.id },
+            env,
+            apiKeyRefResolver: options?.apiKeyRefResolver,
+            credentialBroker: options?.credentialBroker
+          });
+          if (isStopped()) return null;
+          operationStage = "build";
+          if (!providerConfig?.authToken) {
+            stage = "auth";
+            return null;
+          }
+          stage = "build";
+          const messages = [
+            { role: "system", content: COMPACTION_SUMMARY_SYSTEM_PROMPT },
+            { role: "user", content }
+          ];
+          const request = buildPlatformChatCompletionRequest({
+            providerConfig: {
+              ...providerConfig,
+              requestOptions: { ...providerConfig.requestOptions, max_tokens: maxOutputTokens, reasoning_effort: "low" }
+            },
+            messages,
+            stream: false,
+            requestId: attemptId
+          });
+          stage = "http";
+          operationStage = "http";
+          if (isStopped()) return null;
+          const response = await fetchImpl(request.url, { ...request.init, signal: attemptSignal });
+          httpStatus = response.status;
+          if (isStopped() || !response.ok) return null;
+          stage = "body";
+          operationStage = "body";
+          let responseText;
+          try {
+            responseText = await response.text();
+          } catch (error) {
+            if (isAbortError(error)) throw error;
+            errorKind = "body";
+            throw new Error("body-read-failed");
+          }
+          if (isStopped()) return null;
+          operationStage = "parse";
+          let data;
+          try {
+            data = JSON.parse(responseText);
+          } catch {
+            errorKind = "parse";
+            throw new Error("response-json-invalid");
+          }
+          if (isStopped()) return null;
+          stage = "parse";
+          const parsed = parsePlatformChatCompletionResponse({ providerConfig, data, trace: [] });
+          if (isTruncatedCompletion({
+            finishReason: parsed.finish_reason,
+            responseStatus: data?.status,
+            incompleteReason: data?.incomplete_details?.reason,
+            truncated: !!data?.incomplete_details
+          })) {
+            stage = "truncated";
+            throw {
+              code: "SUMMARY_TRUNCATED",
+              stage: "decode",
+              finishReason: parsed.finish_reason,
+              responseStatus: data?.status,
+              incompleteReason: data?.incomplete_details?.reason,
+              maxOutputTokens,
+              completionTokens: summaryCompletionTokens(parsed.usage),
+              outputChars: parsed.content?.length,
+              model,
+              provider: "nolo",
+              attemptId
+            };
+          }
+          const summary = parsed?.content?.trim() || null;
+          stage = summary ? "done" : "empty";
+          return summary;
+        } catch (error) {
+          if (parentSignal?.aborted || isAbortError(error) && !attemptSignal.aborted) {
+            throw new DOMException("Summary cancelled", "AbortError");
+          }
+          if (error?.code === "SUMMARY_TRUNCATED") {
+            const safe = classifySummaryError(error);
+            throw Object.assign(new Error(safe.message), safe);
+          }
+          if (errorKind === null) errorKind = operationStage === "resolve" ? "resolve" : operationStage === "http" ? "http" : null;
+          return null;
+        }
+      };
+      try {
+        const result = await Promise.race([work(), stopped]);
+        if (parentSignal?.aborted) throw new DOMException("Summary cancelled", "AbortError");
+        if (!result) console.warn("[tuiSummary] summary attempt failed", {
+          attemptId,
+          model,
+          stage: parentSignal?.aborted ? "cancelled" : signal.aborted || Date.now() >= deadlineMs ? "deadline" : isStopped() ? "attempt-budget" : stage,
+          operationStage,
+          elapsedMs: Math.max(0, Date.now() - startedAt),
+          ...errorKind ? { errorKind } : {},
+          ...httpStatus !== null ? { httpStatus } : {}
+        });
+        return result;
+      } finally {
+        clearTimeout(attemptTimer);
+        signal.removeEventListener("abort", onStop);
+        attemptSignal.removeEventListener("abort", onAttemptAbort);
+      }
+    };
+    try {
+      const primary = await attempt(options?.platformPrimary ? PLATFORM_HOSTED_DEEPSEEK_FLASH_MODEL : BUILTIN_SUMMARY_LLM_CONFIG.model, deadlineMs - Date.now());
+      if (options?.platformPrimary) return primary;
+      if (primary || signal.aborted || parentSignal?.aborted || Date.now() >= deadlineMs) return primary;
+      return await attempt(BUILTIN_DIALOG_LLM_FALLBACK_MODEL, deadlineMs - Date.now());
+    } finally {
+      clearTimeout(timer);
+      parentSignal?.removeEventListener("abort", onAbort);
+    }
+  };
+  return Object.assign(caller, {
+    complete: async (content, callOptions) => {
+      const configured = typeof configuredTimeout === "number" && Number.isFinite(configuredTimeout) && configuredTimeout > 0 ? Date.now() + configuredTimeout : Infinity;
+      const budget = createSummaryBudget({
+        mode: "manual",
+        signal: callOptions?.signal,
+        deadlineMs: Math.min(callOptions?.deadlineMs ?? Date.now() + 6e4, configured)
+      });
+      const model = PLATFORM_HOSTED_DEEPSEEK_FLASH_MODEL;
+      const attemptId = callOptions?.attemptId ?? randomUUID();
+      let stage = "resolve";
+      let httpStatus;
+      try {
+        return await budget.run(async ({ signal, deadlineMs }) => {
+          if (!canUsePlatformChatProvider(env)) throw { code: "PLATFORM_AUTH_UNAVAILABLE", stage: "auth" };
+          const requested = callOptions?.maxOutputTokens;
+          if (requested !== void 0 && (!Number.isFinite(requested) || requested < 1)) throw { code: "INVALID_OUTPUT_BUDGET", stage: "build" };
+          const providerConfig = await resolveProviderConfig({
+            agentConfig: { ...BUILTIN_SUMMARY_LLM_CONFIG, model, key: BUILTIN_SUMMARY_LLM_CONFIG.id },
+            env,
+            apiKeyRefResolver: options?.apiKeyRefResolver,
+            credentialBroker: options?.credentialBroker
+          });
+          if (signal.aborted) throw signal.reason;
+          if (!providerConfig?.authToken) throw { code: "PLATFORM_AUTH_UNAVAILABLE", stage: "auth" };
+          stage = "build";
+          const request = buildPlatformChatCompletionRequest({
+            providerConfig: {
+              ...providerConfig,
+              requestOptions: { ...providerConfig.requestOptions, max_tokens: Math.min(TUI_SUMMARY_MAX_OUTPUT_TOKENS, Math.floor(requested ?? TUI_SUMMARY_MAX_OUTPUT_TOKENS)), reasoning_effort: "low" }
+            },
+            messages: [{ role: "system", content: COMPACTION_SUMMARY_SYSTEM_PROMPT }, { role: "user", content }],
+            stream: false,
+            requestId: attemptId
+          });
+          stage = "http";
+          const response = await fetchImpl(request.url, { ...request.init, signal });
+          httpStatus = response.status;
+          stage = "body";
+          const body = await response.text();
+          if (!response.ok) {
+            let data2;
+            try {
+              data2 = JSON.parse(body);
+            } catch {
+              data2 = {};
+            }
+            throw {
+              status: response.status,
+              code: data2?.error?.code ?? data2?.code,
+              type: data2?.error?.type ?? data2?.type,
+              balanceSource: data2?.balanceSource,
+              stage: "http"
+            };
+          }
+          stage = "decode";
+          let data;
+          try {
+            data = JSON.parse(body);
+          } catch {
+            throw { code: "INVALID_SUMMARY_JSON" };
+          }
+          const parsed = parsePlatformChatCompletionResponse({ providerConfig, data, trace: [] });
+          return {
+            text: parsed.content ?? "",
+            finishReason: parsed.finish_reason,
+            responseStatus: data?.status,
+            incompleteReason: data?.incomplete_details?.reason,
+            maxOutputTokens: Math.min(TUI_SUMMARY_MAX_OUTPUT_TOKENS, Math.floor(requested ?? TUI_SUMMARY_MAX_OUTPUT_TOKENS)),
+            completionTokens: summaryCompletionTokens(parsed.usage),
+            truncated: isTruncatedCompletion({ finishReason: parsed.finish_reason, responseStatus: data?.status, incompleteReason: data?.incomplete_details?.reason, truncated: !!data?.incomplete_details })
+          };
+        });
+      } catch (cause) {
+        const safe = classifySummaryError(
+          budget.signal.aborted ? budget.signal.reason : cause,
+          { model, provider: "nolo", attemptId, stage }
+        );
+        if (httpStatus !== void 0 && safe.status === void 0) safe.status = httpStatus;
+        throw Object.assign(new Error(safe.message), safe, {
+          type: safe.errorType,
+          name: safe.category === "cancelled" ? "AbortError" : safe.category === "timeout" ? "TimeoutError" : "SummaryError"
+        });
+      } finally {
+        budget.dispose();
+      }
+    },
+    preferPlatform: async (callOptions) => {
+      if (callOptions?.signal?.aborted) throw new DOMException("Summary cancelled", "AbortError");
+      if (!options?.platformPrimary || !canUsePlatformChatProvider(env)) return false;
+      const token = resolvePlatformAuthToken(env);
+      const userId = parseUserIdFromAuthToken(token);
+      if (!userId || userId === "local" || userId === "guest") return false;
+      const controller = new AbortController();
+      const onAbort = () => controller.abort(callOptions?.signal?.reason);
+      callOptions?.signal?.addEventListener("abort", onAbort, { once: true });
+      if (callOptions?.signal?.aborted) onAbort();
+      const budget = Math.min(5e3, (callOptions?.deadlineMs ?? Infinity) - Date.now());
+      const timer = setTimeout(() => controller.abort(), Math.max(0, budget));
+      try {
+        if (!(budget > 0)) throw new DOMException("Summary deadline exceeded", "TimeoutError");
+        const profile = await fetchAccountProfile({
+          serverUrl: resolvePlatformServerUrl(env),
+          token,
+          userId,
+          fetchImpl: (url, init) => fetchImpl(url, { ...init, signal: controller.signal })
+        });
+        return selectSummaryRoute({
+          userId,
+          authenticated: true,
+          platformAvailable: !controller.signal.aborted,
+          credits: profile.balance
+        }).kind === "platform";
+      } catch (error) {
+        if (callOptions?.signal?.aborted) throw callOptions.signal.reason ?? new DOMException("Summary cancelled", "AbortError");
+        if (Date.now() >= (callOptions?.deadlineMs ?? Infinity)) throw new DOMException("Summary deadline exceeded", "TimeoutError");
+        if (isAbortError(error) && !controller.signal.aborted) throw new DOMException("Summary cancelled", "AbortError");
+        return false;
+      } finally {
+        clearTimeout(timer);
+        callOptions?.signal?.removeEventListener("abort", onAbort);
+      }
+    }
+  });
+}
+
+export {
+  TUI_SUMMARY_MAX_OUTPUT_TOKENS,
+  createTuiSummaryLlmCaller
+};

package/{chunk-YDH3FDFQ.js → chunk-5FUN7EG4.js}

@@ -1,6 +1,6 @@
 import {
   __commonJS
-} from "./chunk-4VNS5WPM.js";
+} from "./chunk-U67V476Y.js";
 
 // node_modules/react/cjs/react.production.js
 var require_react_production = __commonJS({

package/{chunk-INUFILG6.js → chunk-5RKUPJYL.js}

@@ -1,6 +1,6 @@
 import {
   t
-} from "./chunk-VNYYOX3V.js";
+} from "./chunk-OB6DVWPF.js";
 
 // packages/cli/windowsSelfUpdate.ts
 import { spawn } from "node:child_process";

package/{chunk-ZC3CMUKU.js → chunk-6OVNSQHN.js}

@@ -311,12 +311,94 @@ async function chromeConnectorUnavailableFunc() {
   throw new Error("Browser connector tools are only executable in the Nolo desktop local runtime.");
 }
 
+// packages/agent-runtime/toolNameAliases.ts
+var LEGACY_TOOL_NAME_ALIASES = {
+  // Nolo Browser Connector: legacy chrome_* → canonical browser_*
+  ...CHROME_CONNECTOR_LEGACY_TOOL_ALIASES,
+  createPage: "createDoc",
+  updatePage: "updateDoc",
+  update_page: "updateDoc",
+  create_page: "createDoc",
+  fetchwebpage: "fetchWebpage",
+  fetch_webpage: "fetchWebpage",
+  "fetch-page": "fetchWebpage",
+  exasearch: "exa_search",
+  "exa-search": "exa_search",
+  exa_search: "exa_search",
+  firecrawlscrape: "firecrawl_scrape",
+  "firecrawl-scrape": "firecrawl_scrape",
+  firecrawl_scrape: "firecrawl_scrape",
+  firecrawlsearch: "firecrawl_search",
+  "firecrawl-search": "firecrawl_search",
+  firecrawl_search: "firecrawl_search",
+  readDoc: "readDoc",
+  readpage: "readDoc",
+  read_page: "readDoc",
+  read_doc: "readDoc",
+  createdoc: "createDoc",
+  updateDocTool: "updateDoc",
+  terminalCommand: "execShell",
+  terminal_command: "execShell",
+  runCommand: "execShell",
+  run_command: "execShell",
+  runInBash: "execShell",
+  run_in_bash: "execShell",
+  executeCommand: "execShell",
+  execute_command: "execShell",
+  // Codex CLI 风格工具名 → nolo 原生工具名
+  bash: "execShell",
+  shell: "execShell",
+  read: "readFile",
+  edit: "editFile",
+  write: "writeFile",
+  glob: "globFiles",
+  // 联网搜索别名
+  web_search: "exa_search",
+  websearch: "exa_search",
+  search_web: "exa_search",
+  searchweb: "exa_search",
+  webfetch: "fetchWebpage",
+  web_fetch: "fetchWebpage",
+  fetchweb: "fetchWebpage",
+  fetch_web: "fetchWebpage",
+  // 模型偶尔会把 loadSkill 幻觉成 readSkill（参数风格 name= 一致），
+  // 规范化到 loadSkill，避免 localToolPolicy 把这种调用直接拦死。
+  readSkill: "loadSkill"
+};
+var normalizeToolName = (name) => name.replace(/[-_]/g, "").toLowerCase();
+var canonicalizeToolName = (rawName) => {
+  const trimmedName = rawName.trim();
+  if (!trimmedName) return rawName;
+  if (LEGACY_TOOL_NAME_ALIASES[trimmedName]) {
+    return LEGACY_TOOL_NAME_ALIASES[trimmedName];
+  }
+  const normalizedRawName = normalizeToolName(trimmedName);
+  const matchedAlias = Object.entries(LEGACY_TOOL_NAME_ALIASES).find(
+    ([alias]) => normalizeToolName(alias) === normalizedRawName
+  );
+  return matchedAlias?.[1] ?? trimmedName;
+};
+var canonicalizeToolNames = (toolNames) => Array.from(
+  new Set(
+    toolNames.filter((toolName) => typeof toolName === "string").map(canonicalizeToolName)
+  )
+);
+var prioritizeToolNames = (toolNames, preferredToolNames) => {
+  const canonicalTools = canonicalizeToolNames(toolNames);
+  const preferred = new Set(canonicalizeToolNames(preferredToolNames));
+  const prioritized = canonicalTools.filter((toolName) => preferred.has(toolName));
+  const remaining = canonicalTools.filter((toolName) => !preferred.has(toolName));
+  return [...prioritized, ...remaining];
+};
+
 export {
-  CHROME_CONNECTOR_LEGACY_TOOL_ALIASES,
   CHROME_CONNECTOR_ACCEPTED_TOOL_NAMES,
   canonicalizeChromeConnectorToolNames,
   getChromeConnectorToolBehavior,
   getChromeConnectorToolDefaultConsent,
   chromeConnectorToolSchemas,
-  chromeConnectorUnavailableFunc
+  chromeConnectorUnavailableFunc,
+  canonicalizeToolName,
+  canonicalizeToolNames,
+  prioritizeToolNames
 };

package/{chunk-MOIJOHA5.js → chunk-6WU5572L.js}

@@ -1,25 +1,38 @@
-import {
-  resolveCliAgentKeyInput
-} from "./chunk-NBTY7YJF.js";
 import {
   buildRestorePatch
-} from "./chunk-SVYO6AO7.js";
+} from "./chunk-BV3FLP2L.js";
+import {
+  buildLocalAgentLookupKeys,
+  shouldReadAgentKeyRemotely
+} from "./chunk-2ZKFCIJJ.js";
+import {
+  resolveCliAgentKeyInput
+} from "./chunk-BR3GT6MR.js";
 import {
   createHostCredentialBrokerChain,
   createStrictHostCredentialBroker
-} from "./chunk-RSHTSUEG.js";
+} from "./chunk-Z2PITYZN.js";
 import {
-  buildAgentRuntimeAgentLookupKeys,
-  shouldFetchAgentRuntimeRecordRemotely
-} from "./chunk-RZOV7OMV.js";
+  collectInvalidAgentSkillModes,
+  formatInvalidAgentSkillModeMessage,
+  formatInvalidAgentSkillModesFieldMessage,
+  isAgentSkillModesFieldShapeValid
+} from "./chunk-FS2XP5D7.js";
 import {
   buildAgentApiKeyCredentialRef,
   migrateAgentSecrets
-} from "./chunk-2QHFH3DR.js";
+} from "./chunk-47ITIXO7.js";
 import {
   assertCredentialRef,
   createFileCredentialBroker
-} from "./chunk-OQHIVPG4.js";
+} from "./chunk-SNBZZPYH.js";
+import {
+  createAgentKey
+} from "./chunk-SYTHYBMI.js";
+import {
+  readPipeText,
+  spawnProcess
+} from "./chunk-4O22PGNQ.js";
 import {
   toErrorMessage
 } from "./chunk-HNMXYYJR.js";
@@ -29,14 +42,7 @@ import {
   resolveAuthToken,
   resolveServerCandidates,
   resolveServerUrl
-} from "./chunk-WACI5I6V.js";
-import {
-  readPipeText,
-  spawnProcess
-} from "./chunk-4O22PGNQ.js";
-import {
-  createAgentKey
-} from "./chunk-JY5NGFFH.js";
+} from "./chunk-2THCNKE4.js";
 
 // packages/agent-runtime/sessionCredentialBroker.ts
 function createSessionMemoryCredentialBroker() {
@@ -111,10 +117,6 @@ function normalizeAgentHandle(value) {
   return typeof value === "string" && value.trim() ? value.trim().toLowerCase().replace(/\s+/g, " ") : void 0;
 }
 
-// packages/cli/client/localAgentRecords.ts
-var buildLocalAgentLookupKeys = buildAgentRuntimeAgentLookupKeys;
-var shouldReadAgentKeyRemotely = shouldFetchAgentRuntimeRecordRemotely;
-
 // packages/cli/agentRecordHelpers.ts
 var PROVIDER_COPY_FIELDS = [
   "apiSource",
@@ -635,7 +637,7 @@ async function bindVaultCredentialToAgent(args) {
   const secret = await broker.get(args.vaultId);
   if (!secret) {
     throw new Error(
-      `--api-key received a vault credential id (${args.vaultId}) but no secret is stored for it on this device. Re-paste the key in the chat so the runtime can isolate it again, or ask the user to run \`nolo secret set <name> --prompt\`.`
+      `--api-key received a vault credential id (${args.vaultId}) but no secret is stored for it on this device. Re-paste the key in the chat so the runtime can isolate it again.`
     );
   }
   return await storeAgentCredential({ agentKey: args.agentKey, secret, broker: args.broker });
@@ -694,6 +696,16 @@ function parseAgentUpdateArgs(args) {
     }
     updates[entry.slice(0, index)] = parseJsonishValue(entry.slice(index + 1));
   }
+  if (Object.prototype.hasOwnProperty.call(updates, "skills")) {
+    const skillsField = updates.skills;
+    if (!isAgentSkillModesFieldShapeValid(skillsField)) {
+      throw new Error(formatInvalidAgentSkillModesFieldMessage());
+    }
+    const invalidModes = collectInvalidAgentSkillModes(skillsField);
+    if (invalidModes.length > 0) {
+      throw new Error(formatInvalidAgentSkillModeMessage(invalidModes[0]));
+    }
+  }
   if (Object.keys(updates).length === 0) {
     if (!promptDoc && !copyProviderFrom && !presetId) {
       throw new Error("No updates provided. Use --model / --cli-provider / --api-source / --field key=value.");
@@ -751,7 +763,7 @@ async function buildCreatedAgentRecord(args) {
   const resolvedAgentInput = resolveCliAgentKeyInput(args.parsed.agentInput);
   const agentKey = resolvedAgentInput.startsWith("agent-") ? resolvedAgentInput : createAgentKey.private(userId || "local", resolvedAgentInput);
   if (args.parsed.presetId) {
-    const { resolveProviderPresetFields } = await import("./providerPresetApply-YXGV6NXB.js");
+    const { resolveProviderPresetFields } = await import("./providerPresetApply-OIFQ73LH.js");
     const fields = resolveProviderPresetFields(args.parsed.presetId);
     if (fields.kind === "manual") {
       throw new Error(
@@ -914,7 +926,6 @@ async function buildUpdatedAgentRecord(args) {
 export {
   getSharedSessionCredentialBroker,
   OAUTH_PROVIDER_REFS,
-  buildLocalAgentLookupKeys,
   fetchWithTransportFallback,
   readAgentRecord,
   readDbRecord,