nolo-cli 0.33.0-alpha.3 → 0.33.0-alpha.31

package/{chunk-73GINUCW.js → chunk-SQPMYIR5.js}

@@ -8,15 +8,15 @@ import {
 import {
   isOAuthApiKeyRef
 } from "./chunk-YYLHWIW6.js";
+import {
+  runLlm
+} from "./chunk-VBJVODPE.js";
 import {
   getApproxPricePerImage
 } from "./chunk-CWMSB67P.js";
-import {
-  runLlm
-} from "./chunk-ZJMME4DS.js";
 import {
   cleanupCliSessionForDialog
-} from "./chunk-JZ5AMMXU.js";
+} from "./chunk-244YJUYS.js";
 import {
   getActiveDialogAgentId,
   getDialogAgentIds,
@@ -26,16 +26,27 @@ import {
   require_date_fns
 } from "./chunk-M76ECQRD.js";
 import {
-  fetchMessages
-} from "./chunk-KSRFVP36.js";
+  abortActiveControllers,
+  addPageReferenceToRuntime,
+  applyClearDialogStateRuntime,
+  applyUpdateTokensFulfilled,
+  clearActiveControllers,
+  deleteDialogRuntime,
+  getActiveDialogKey,
+  getDialogRuntimeTokens,
+  require_react,
+  resetDialogRuntimeSessionState,
+  selectCurrentDialogKey,
+  setActiveDialogKey,
+  setDialogConfigError
+} from "./chunk-MRWGHF56.js";
 import {
   DEFAULT_AUTO_EXECUTION_PROFILE,
   DEFAULT_CONTEXT_WINDOW,
   getModelContextWindow,
   getModelInfo,
-  resolveAutoExecutionProfile,
-  resolveBuiltinPlatformAgentRecord
-} from "./chunk-2H3XIBY4.js";
+  resolveAutoExecutionProfile
+} from "./chunk-FSOCQPX7.js";
 import {
   COMPACTION_SUMMARY_SYSTEM_PROMPT,
   buildCompactionMetricsFromPlan,
@@ -47,36 +58,24 @@ import {
   normalizeAssistantContentBuffer,
   planCompression,
   serializeMessageContent
-} from "./chunk-AOXVOC6D.js";
+} from "./chunk-W2DNU6FK.js";
 import {
   findModelConfig,
   getModelConfig
-} from "./chunk-DFUPZE6V.js";
-import {
-  abortActiveControllers,
-  addPageReferenceToRuntime,
-  applyClearDialogStateRuntime,
-  applyUpdateTokensFulfilled,
-  clearActiveControllers,
-  deleteDialogRuntime,
-  getActiveDialogKey,
-  getDialogRuntimeTokens,
-  require_react,
-  resetDialogRuntimeSessionState,
-  selectCurrentDialogKey,
-  setActiveDialogKey,
-  setDialogConfigError
-} from "./chunk-MRWGHF56.js";
+} from "./chunk-P35OZHD4.js";
 import {
   toErrorMessage
 } from "./chunk-HNMXYYJR.js";
+import {
+  fetchMessages
+} from "./chunk-KSRFVP36.js";
 import {
   getPlatformHostedDeepSeekV4Price,
   isPlatformHostedDeepSeekV4Model
-} from "./chunk-OR2HNLVO.js";
+} from "./chunk-HYQSSY7V.js";
 import {
   nolotusId
-} from "./chunk-CLP2K7U4.js";
+} from "./chunk-OS63QEVB.js";
 import {
   asRecordOrEmpty
 } from "./chunk-KX6YBIHG.js";
@@ -86,7 +85,7 @@ import {
   remove,
   selectById,
   write
-} from "./chunk-57QJXIB6.js";
+} from "./chunk-FEDK54U6.js";
 import {
   buildDialogAgentListIndexDeleteOps,
   createDialogMessageKeyAndId,
@@ -107,6 +106,17 @@ import {
 import {
   asTrimmedLowercaseString
 } from "./chunk-QSJ3HFEF.js";
+import {
+  builtinAgentCatalogEntryById,
+  builtinRuntimeFallbackEntries,
+  isBuiltinPlatformAgentKey
+} from "./chunk-52DHSNJC.js";
+import {
+  extractCustomId,
+  extractUserId,
+  parsePublicAgentId,
+  publicAgentKey
+} from "./chunk-BJIRLHJR.js";
 import {
   asyncThunkCreator,
   buildCreateSlice,
@@ -117,25 +127,21 @@ import {
   parseOwnerUserIdFromDbKey,
   scheduleDeleteReplication,
   selectIdentityUserId
-} from "./chunk-X664KVEV.js";
+} from "./chunk-HHBXCRJS.js";
 import {
   createClientLogger,
   isAbortError
-} from "./chunk-WJSW43QZ.js";
+} from "./chunk-L3JWI7WX.js";
 import {
   isTombstoneRecord,
   shouldReplaceWithNextRecord
 } from "./chunk-GBRG75BQ.js";
-import {
-  asTrimmedString
-} from "./chunk-3EUW3WEO.js";
-import {
-  extractCustomId,
-  extractUserId
-} from "./chunk-BJIRLHJR.js";
 import {
   isRecord
 } from "./chunk-KUG52IAP.js";
+import {
+  asTrimmedString
+} from "./chunk-3EUW3WEO.js";
 import {
   asOptionalTrimmedString
 } from "./chunk-G3SUCT4W.js";
@@ -1525,6 +1531,10 @@ var uiAskChoiceFunctionSchema = {
               type: "string",
               description: "\u95EE\u9898\u6807\u8BC6\u3002"
             },
+            header: {
+              type: "string",
+              description: "\u591A\u95EE\u9898 tab \u680F\u663E\u793A\u7684\u77ED\u6807\u7B7E\uFF08\u226412 \u5B57\u7B26\uFF0C\u5982\u201C\u683C\u5F0F/\u8BED\u8A00/\u8303\u56F4\u201D\uFF09\uFF0C\u7F3A\u7701\u7528 Qn\u3002"
+            },
             question: {
               type: "string",
               description: "\u95EE\u9898\u6587\u6848\u3002"
@@ -1643,6 +1653,76 @@ var buildPersonalizationDialogPolicyContext = () => [
   "\u9664\u975E\u7528\u6237\u660E\u786E\u8981\u6C42\uFF0C\u5426\u5219\u4E0D\u8981\u521B\u5EFA\u6587\u6863\uFF0C\u4E0D\u8981\u521B\u5EFA\u6216\u4FEE\u6539\u4EFB\u4F55 agent\u3002"
 ].join("\n");
 
+// packages/agent-runtime/builtinPlatformAgentRoute.ts
+function resolveBuiltinAgentRuntimeFields(agentKey) {
+  if (!isBuiltinPlatformAgentKey(agentKey)) return null;
+  const entry = builtinAgentCatalogEntryById(parsePublicAgentId(agentKey));
+  if (!entry) return null;
+  return { provider: entry.provider, model: entry.model };
+}
+
+// packages/agent-runtime/builtinPlatformAgentConfigs.ts
+function buildConfig(e) {
+  const key = publicAgentKey(e.id);
+  const rawRecord = {
+    dbKey: key,
+    isPublic: true,
+    provider: e.provider,
+    model: e.model,
+    apiSource: e.apiSource ?? "platform",
+    useServerProxy: e.useServerProxy ?? true
+  };
+  if (e.hasImageOutput) rawRecord.hasImageOutput = true;
+  if (e.imageModel) rawRecord.imageModel = e.imageModel;
+  if (e.imageWorkflow) rawRecord.imageWorkflow = e.imageWorkflow;
+  if (e.imageConfig) rawRecord.imageConfig = e.imageConfig;
+  return {
+    key,
+    name: e.name,
+    provider: e.provider,
+    model: e.model,
+    apiSource: e.apiSource ?? "platform",
+    useServerProxy: e.useServerProxy ?? true,
+    rawRecord
+  };
+}
+var BUILTIN_PLATFORM_AGENT_CONFIGS = Object.fromEntries(
+  builtinRuntimeFallbackEntries().map((e) => [publicAgentKey(e.id), buildConfig(e)])
+);
+function resolveBuiltinPlatformAgentConfig(agentRef) {
+  return BUILTIN_PLATFORM_AGENT_CONFIGS[agentRef] ?? null;
+}
+function resolveBuiltinPlatformAgentRecord(agentRef) {
+  const config = resolveBuiltinPlatformAgentConfig(agentRef);
+  if (!config) return null;
+  return {
+    ...config.rawRecord,
+    dbKey: agentRef,
+    ...config.name ? { name: config.name } : {}
+  };
+}
+function applyBuiltinAgentRuntimeOverride(agentKey, record) {
+  const fields = resolveBuiltinAgentRuntimeFields(agentKey);
+  if (!fields) return record;
+  const current = record;
+  const rawNeedsOverride = current.rawRecord != null && (current.rawRecord.provider !== fields.provider || current.rawRecord.model !== fields.model);
+  if (current.provider === fields.provider && current.model === fields.model && !rawNeedsOverride) {
+    return record;
+  }
+  return {
+    ...record,
+    provider: fields.provider,
+    model: fields.model,
+    ...current.rawRecord ? {
+      rawRecord: {
+        ...current.rawRecord,
+        provider: fields.provider,
+        model: fields.model
+      }
+    } : {}
+  };
+}
+
 // packages/chat/dialog/dialogAgentPolicy.ts
 var resolveDialogAgentMode = (dialog) => {
   if (dialog?.agentMode === "auto") return "auto";
@@ -3444,7 +3524,7 @@ var messageSlice = createSliceWithThunks({
             runtimeOptions: args.runtimeOptions
           });
           if (agentKeyToUse) {
-            const { streamAgentChatTurn } = await import("./agentSlice-TNMFQQOV.js");
+            const { streamAgentChatTurn } = await import("./agentSlice-3U3H657P.js");
             await dispatch(
               streamAgentChatTurn({
                 agentKey: agentKeyToUse,
@@ -3886,13 +3966,11 @@ var calculateBasicCost = (model, usage, provider, externalPrice, billingServiceT
     case "openai":
     case "deepinfra":
       return calculateCacheBasedCost(resolvedPrice, usage, externalPrice);
-    // nolo/crof: honor inputCacheHit only when the model defines it (K3 has
-    // inputCacheHit=2, K2.6 has 0.32 from its OpenRouter upstream). Models
     // without it keep simple full-price billing so cached tokens are not
     // priced at 0 — but a platform-hosted model用于 agentic 循环时必须补上
     // 这一项，否则每轮重放的上下文会被按 input 原价重复计费。
     case "nolo":
-    case "crof":
+    case "upstream-k3":
       return typeof resolvedPrice.inputCacheHit === "number" ? calculateCacheBasedCost(resolvedPrice, usage, externalPrice) : calculateSimpleCost(resolvedPrice, usage, externalPrice);
     case "anthropic":
       return calculateAnthropicCost(resolvedPrice, usage, externalPrice);
@@ -4641,7 +4719,7 @@ var deleteOwnedDialogAttachments = async (args) => {
     metadataReadFailures
   });
   if (!plan.deleteCandidates.length) return plan;
-  const { deleteFileAction } = await import("./deleteFile-XQXPBFFB.js");
+  const { deleteFileAction } = await import("./deleteFile-NPZ64DFN.js");
   for (const candidate of plan.deleteCandidates) {
     if (candidate.fileDbKey) {
       await deleteFileAction(candidate.fileDbKey, args.thunkApi);
@@ -4703,7 +4781,7 @@ var deleteDialogThunk = async (payload, thunkApi) => {
   }
   if (isCurrentDialog) {
     await thunkApi.dispatch(resetMsgs());
-    const { clearPendingAttachments: clearPendingAttachments2 } = await import("./dialogSlice-DOWKOILN.js");
+    const { clearPendingAttachments: clearPendingAttachments2 } = await import("./dialogSlice-5VZFBHCA.js");
     dispatch(clearPendingAttachments2());
     clearWorkflow();
   }
@@ -4712,39 +4790,39 @@ var deleteDialogThunk = async (payload, thunkApi) => {
 
 // packages/chat/dialog/dialogSlice.ts
 var runCreateDialogAction = async (args, thunkApi) => {
-  const { createDialogAction } = await import("./createDialogAction-LDCPDI73.js");
+  const { createDialogAction } = await import("./createDialogAction-QG7DKUA7.js");
   return createDialogAction(args, thunkApi);
 };
 var runCreateAgentAutomationAction = async (args, thunkApi) => {
-  const { createAgentAutomationAction } = await import("./createAgentAutomationAction-INQT23LX.js");
+  const { createAgentAutomationAction } = await import("./createAgentAutomationAction-CMOMDO6G.js");
   return createAgentAutomationAction(args, thunkApi);
 };
 var runUpdateDialogTitleAction = async (args, thunkApi) => {
-  const { updateDialogTitleAction } = await import("./updateDialogTitleAction-XPJZRJEL.js");
+  const { updateDialogTitleAction } = await import("./updateDialogTitleAction-BB53DOCT.js");
   return updateDialogTitleAction(args, thunkApi);
 };
 var runAddDialogAgentAction = async (args, thunkApi) => {
-  const { addDialogAgentAction } = await import("./addDialogAgentAction-W44ZCEHB.js");
+  const { addDialogAgentAction } = await import("./addDialogAgentAction-JNIAUFE6.js");
   return addDialogAgentAction(args, thunkApi);
 };
 var runRemoveDialogAgentAction = async (args, thunkApi) => {
-  const { removeDialogAgentAction } = await import("./removeDialogAgentAction-E7H557UO.js");
+  const { removeDialogAgentAction } = await import("./removeDialogAgentAction-UBYX7RVR.js");
   return removeDialogAgentAction(args, thunkApi);
 };
 var runSetPrimaryDialogAgentAction = async (args, thunkApi) => {
-  const { setPrimaryDialogAgentAction } = await import("./setPrimaryDialogAgentAction-FWBKKLVA.js");
+  const { setPrimaryDialogAgentAction } = await import("./setPrimaryDialogAgentAction-JKVEILI3.js");
   return setPrimaryDialogAgentAction(args, thunkApi);
 };
 var runSwitchDialogAgentAction = async (args, thunkApi) => {
-  const { switchDialogAgentAction } = await import("./switchDialogAgentAction-US6QNL3N.js");
+  const { switchDialogAgentAction } = await import("./switchDialogAgentAction-DSC2T3JW.js");
   return switchDialogAgentAction(args, thunkApi);
 };
 var runSetDialogExtraReferencesAction = async (args, thunkApi) => {
-  const { setDialogExtraReferencesAction } = await import("./setDialogExtraReferencesAction-RMMGBR5F.js");
+  const { setDialogExtraReferencesAction } = await import("./setDialogExtraReferencesAction-GMXZTTQA.js");
   return setDialogExtraReferencesAction(args, thunkApi);
 };
 var runHandleSendMessageAction = async (args, thunkApi) => {
-  const { handleSendMessageAction } = await import("./handleSendMessageAction-C3TSDWKH.js");
+  const { handleSendMessageAction } = await import("./handleSendMessageAction-7GF5IU4J.js");
   return handleSendMessageAction(args, thunkApi);
 };
 function clearDialogState() {
@@ -4757,7 +4835,7 @@ var createPageAndAddReference = createAsyncThunk(
   async (payload, { dispatch, getState, rejectWithValue }) => {
     const { slateData, jsonData, title, type, fileId, groupId, dialogKey } = payload;
     try {
-      const { createDocState } = await import("./docStore-UAWSKZ2Y.js");
+      const { createDocState } = await import("./docStore-LTAGA6XZ.js");
       const pageKey = await createDocState(
         { slateData, title },
         { dispatch, getState }
@@ -4927,6 +5005,9 @@ export {
   parseUiAskChoiceContent,
   PERSONALIZATION_DIALOG_CATEGORY,
   buildPersonalizationDialogPolicyContext,
+  resolveBuiltinPlatformAgentConfig,
+  resolveBuiltinPlatformAgentRecord,
+  applyBuiltinAgentRuntimeOverride,
   resolveDialogRuntimeAgentKey,
   resolveHandleSendMessageContext,
   estimateMissingUsage,
@@ -4935,7 +5016,6 @@ export {
   selectMsgById,
   addUserMessage,
   messageStreaming,
-  resetMsgs,
   removeTransientMessage,
   finalizeTransientMessageOnError,
   prepareAndPersistMessage,
@@ -4947,7 +5027,6 @@ export {
   updateStep,
   incrementStepsExecuted,
   incrementFailedSteps,
-  clearWorkflow,
   toast,
   API_REPORTED_COST_MULTIPLIER,
   normalizeUsage,

package/{chunk-XCCGU6QB.js → chunk-SSK4QDFL.js}

@@ -7,7 +7,7 @@ import {
 import {
   patch,
   selectById
-} from "./chunk-57QJXIB6.js";
+} from "./chunk-FEDK54U6.js";
 import {
   __toESM
 } from "./chunk-4VNS5WPM.js";

package/{chunk-IL545V3E.js → chunk-TACRGJZO.js}

@@ -1,22 +1,22 @@
 import {
   readDbRecord,
   writeAgentRecord
-} from "./chunk-YDTYDA5W.js";
+} from "./chunk-NBIS3WYT.js";
 import {
   buildSkillSummaryMarker
 } from "./chunk-VF4K2QE6.js";
+import {
+  createSpaceKey
+} from "./chunk-ASA3CJSG.js";
+import {
+  asTrimmedLowercaseString
+} from "./chunk-QSJ3HFEF.js";
 import {
   parseUserIdFromAuthToken,
   readOption,
   resolveAuthToken,
   resolveServerUrl
 } from "./chunk-A7GB5UGH.js";
-import {
-  createSpaceKey
-} from "./chunk-JTSGWTYZ.js";
-import {
-  asTrimmedLowercaseString
-} from "./chunk-QSJ3HFEF.js";
 import {
   NOLO_CLUSTER_SERVERS
 } from "./chunk-LCBAMY2M.js";

package/chunk-TVXJEOU2.js

@@ -0,0 +1,78 @@
+import {
+  Lifetime,
+  QuickJSContext,
+  QuickJSNotImplemented,
+  QuickJSRuntime,
+  QuickJSWASMModule,
+  Scope,
+  applyBaseRuntimeOptions,
+  applyModuleEvalRuntimeOptions,
+  evalOptionsToFlags,
+  intrinsicsToFlags
+} from "./chunk-UOLENXLQ.js";
+
+// node_modules/quickjs-emscripten-core/dist/chunk-TAV5CUKK.mjs
+var QuickJSAsyncContext = class extends QuickJSContext {
+  async evalCodeAsync(code, filename = "eval.js", options) {
+    let detectModule = options === void 0 ? 1 : 0, flags = evalOptionsToFlags(options), resultPtr = 0;
+    try {
+      resultPtr = await this.memory.newHeapCharPointer(code).consume((charHandle) => this.ffi.QTS_Eval_MaybeAsync(this.ctx.value, charHandle.value.ptr, charHandle.value.strlen, filename, detectModule, flags));
+    } catch (error) {
+      throw this.runtime.debugLog("QTS_Eval_MaybeAsync threw", error), error;
+    }
+    let errorPtr = this.ffi.QTS_ResolveException(this.ctx.value, resultPtr);
+    return errorPtr ? (this.ffi.QTS_FreeValuePointer(this.ctx.value, resultPtr), this.fail(this.memory.heapValueHandle(errorPtr))) : this.success(this.memory.heapValueHandle(resultPtr));
+  }
+  newAsyncifiedFunction(name, fn) {
+    return this.newFunction(name, fn);
+  }
+};
+var QuickJSAsyncRuntime = class extends QuickJSRuntime {
+  constructor(args) {
+    super(args);
+  }
+  newContext(options = {}) {
+    let intrinsics = intrinsicsToFlags(options.intrinsics), ctx = new Lifetime(this.ffi.QTS_NewContext(this.rt.value, intrinsics), void 0, (ctx_ptr) => {
+      this.contextMap.delete(ctx_ptr), this.callbacks.deleteContext(ctx_ptr), this.ffi.QTS_FreeContext(ctx_ptr);
+    }), context = new QuickJSAsyncContext({ module: this.module, ctx, ffi: this.ffi, rt: this.rt, ownedLifetimes: [], runtime: this, callbacks: this.callbacks });
+    return this.contextMap.set(ctx.value, context), context;
+  }
+  setModuleLoader(moduleLoader, moduleNormalizer) {
+    super.setModuleLoader(moduleLoader, moduleNormalizer);
+  }
+  setMaxStackSize(stackSize) {
+    return super.setMaxStackSize(stackSize);
+  }
+};
+var QuickJSAsyncWASMModule = class extends QuickJSWASMModule {
+  constructor(module, ffi) {
+    super(module, ffi);
+    this.ffi = ffi, this.module = module;
+  }
+  newRuntime(options = {}) {
+    let rt = new Lifetime(this.ffi.QTS_NewRuntime(), void 0, (rt_ptr) => {
+      this.callbacks.deleteRuntime(rt_ptr), this.ffi.QTS_FreeRuntime(rt_ptr);
+    }), runtime = new QuickJSAsyncRuntime({ module: this.module, ffi: this.ffi, rt, callbacks: this.callbacks });
+    return applyBaseRuntimeOptions(runtime, options), options.moduleLoader && runtime.setModuleLoader(options.moduleLoader), runtime;
+  }
+  newContext(options = {}) {
+    let runtime = this.newRuntime(), lifetimes = options.ownedLifetimes ? options.ownedLifetimes.concat([runtime]) : [runtime], context = runtime.newContext({ ...options, ownedLifetimes: lifetimes });
+    return runtime.context = context, context;
+  }
+  evalCode() {
+    throw new QuickJSNotImplemented("QuickJSWASMModuleAsyncify.evalCode: use evalCodeAsync instead");
+  }
+  evalCodeAsync(code, options) {
+    return Scope.withScopeAsync(async (scope) => {
+      let vm = scope.manage(this.newContext());
+      applyModuleEvalRuntimeOptions(vm.runtime, options);
+      let result = await vm.evalCodeAsync(code, "eval.js");
+      if (options.memoryLimitBytes !== void 0 && vm.runtime.setMemoryLimit(-1), result.error) throw vm.dump(scope.manage(result.error));
+      return vm.dump(scope.manage(result.value));
+    });
+  }
+};
+
+export {
+  QuickJSAsyncWASMModule
+};

package/{chunk-NUO3QFWD.js → chunk-UNHKVD2N.js}

@@ -4,7 +4,7 @@ import {
 
 // packages/cli/agentCommandSupport.ts
 async function getDefaultCliDb() {
-  const { getDefaultCliLocalRuntimeDb } = await import("./localRuntimeDb-DDZCJFQZ.js");
+  const { getDefaultCliLocalRuntimeDb } = await import("./localRuntimeDb-N3H3HQ7G.js");
   return getDefaultCliLocalRuntimeDb();
 }
 function createNullCliDb() {

package/{chunk-GE6IWA5N.js → chunk-UNZDCI3O.js}

@@ -1,5 +1,13 @@
 // packages/cli/client/profileConfig.ts
-import { existsSync, mkdirSync, readFileSync, writeFileSync } from "node:fs";
+import {
+  appendFileSync,
+  chmodSync,
+  existsSync,
+  mkdirSync,
+  readFileSync,
+  statSync,
+  writeFileSync
+} from "node:fs";
 import { dirname, join } from "node:path";
 import { homedir } from "node:os";
 
@@ -27,6 +35,10 @@ function canonicalizeNoloServerUrl(value) {
 
 // packages/cli/client/profileConfig.ts
 var normalizeProfileServerUrl = canonicalizeNoloServerUrl;
+function isProtectedHomeProfileWrite(path) {
+  if (process.env.NODE_ENV !== "test") return false;
+  return path === join(homedir(), ".nolo", "config.json");
+}
 function getDefaultProfileConfigPath() {
   const noloHome = process.env.NOLO_HOME?.trim();
   return noloHome ? join(noloHome, "config.json") : join(homedir(), ".nolo", "config.json");
@@ -43,6 +55,7 @@ function loadProfileConfig(path = getDefaultProfileConfigPath()) {
   return parsed;
 }
 function clearProfileAuthToken(path = getDefaultProfileConfigPath()) {
+  if (isProtectedHomeProfileWrite(path)) return false;
   const config = loadProfileConfig(path);
   if (!config) return false;
   const profile = config.profiles[config.currentProfile];
@@ -54,6 +67,11 @@ function clearProfileAuthToken(path = getDefaultProfileConfigPath()) {
   return true;
 }
 function saveDefaultProfile(path, profile) {
+  if (isProtectedHomeProfileWrite(path)) {
+    throw new Error(
+      `Refusing to write the developer's real profile from a test process: ${path}. Pass a temp path or set NOLO_HOME.`
+    );
+  }
   const existing = loadProfileConfig(path);
   const mergedDefault = {
     ...existing?.profiles?.default ?? {},
@@ -89,9 +107,11 @@ function buildCliRuntimeEnv(processEnv, config) {
   const profileEnv = buildEnvFromProfile(config);
   const explicitAuthToken = processEnv.AUTH_TOKEN || processEnv.AUTH;
   const explicitServerUrl = processEnv.NOLO_SERVER || processEnv.NOLO_SERVER_URL || processEnv.BASE_URL;
+  const agentSource = processEnv.NOLO_AGENT?.trim() ? "env" : profileEnv.NOLO_AGENT ? "profile" : void 0;
   return {
     ...profileEnv,
     ...processEnv,
+    NOLO_AGENT_SOURCE: agentSource,
     ...explicitAuthToken ? { AUTH_TOKEN: explicitAuthToken } : {},
     ...explicitServerUrl ? {
       NOLO_SERVER: explicitServerUrl,
@@ -104,6 +124,7 @@ function getCurrentProfile(config) {
   return config.profiles[config.currentProfile] ?? null;
 }
 function saveProfileLocale(locale, path = getDefaultProfileConfigPath()) {
+  if (isProtectedHomeProfileWrite(path)) return null;
   const config = loadProfileConfig(path);
   if (!config) return null;
   const profile = config.profiles[config.currentProfile];
@@ -114,13 +135,115 @@ function saveProfileLocale(locale, path = getDefaultProfileConfigPath()) {
 `, "utf8");
   return config;
 }
+function getAgentSelectionAuditPath(configPath = getDefaultProfileConfigPath()) {
+  return join(dirname(configPath), "agent-selection.log");
+}
+var AGENT_SELECTION_AUDIT_MAX_BYTES = 512 * 1024;
+var AGENT_SELECTION_AUDIT_KEEP_LINES = 200;
+var SECRET_ARGV_FLAGS = /* @__PURE__ */ new Set([
+  "--token",
+  "--auth",
+  "--auth-token",
+  "--key",
+  "--api-key",
+  "--app-key",
+  "--machine-key",
+  "--provider-api-key",
+  "--invite-token",
+  "--password",
+  "--secret"
+]);
+function redactArgvSecrets(argv) {
+  const redacted = [];
+  let maskNext = false;
+  for (const arg of argv) {
+    if (maskNext) {
+      maskNext = false;
+      redacted.push("[REDACTED]");
+      continue;
+    }
+    const equals = arg.indexOf("=");
+    if (equals > 0 && SECRET_ARGV_FLAGS.has(arg.slice(0, equals))) {
+      redacted.push(`${arg.slice(0, equals)}=[REDACTED]`);
+      continue;
+    }
+    maskNext = SECRET_ARGV_FLAGS.has(arg);
+    redacted.push(arg);
+  }
+  return redacted;
+}
+function appendAgentSelectionAudit(entry, auditPath = getAgentSelectionAuditPath(entry.configPath)) {
+  try {
+    const stack = (new Error().stack ?? "").split("\n").slice(2, 8).map((line2) => line2.trim()).filter(Boolean);
+    const line = `${JSON.stringify({
+      at: (/* @__PURE__ */ new Date()).toISOString(),
+      pid: process.pid,
+      // Distinguishes repo source / installed binary / bundled desktop build —
+      // the field that says whether a stale build is doing the writing.
+      execPath: process.execPath,
+      argv: redactArgvSecrets(process.argv),
+      cwd: process.cwd(),
+      previous: entry.previous,
+      next: entry.next,
+      stack
+    })}
+`;
+    mkdirSync(dirname(auditPath), { recursive: true });
+    const auditMode = 384;
+    if (existsSync(auditPath) && statSync(auditPath).size > AGENT_SELECTION_AUDIT_MAX_BYTES) {
+      const kept = readFileSync(auditPath, "utf8").split("\n").filter((entry2) => entry2.trim()).slice(-AGENT_SELECTION_AUDIT_KEEP_LINES).join("\n");
+      writeFileSync(auditPath, `${kept}
+`, {
+        encoding: "utf8",
+        mode: auditMode
+      });
+    }
+    appendFileSync(auditPath, line, { encoding: "utf8", mode: auditMode });
+    try {
+      chmodSync(auditPath, auditMode);
+    } catch {
+    }
+  } catch {
+  }
+}
+function readLastAgentSelectionAudit(auditPath = getAgentSelectionAuditPath()) {
+  try {
+    if (!existsSync(auditPath)) return { logExists: false, last: null };
+    const lines = readFileSync(auditPath, "utf8").trim().split("\n");
+    for (let index = lines.length - 1; index >= 0; index -= 1) {
+      const raw = lines[index]?.trim();
+      if (!raw) continue;
+      const parsed = JSON.parse(raw);
+      if (!parsed.next) continue;
+      return {
+        logExists: true,
+        last: {
+          agentKey: parsed.next.agentKey ?? "",
+          agentName: parsed.next.agentName ?? ""
+        }
+      };
+    }
+    return { logExists: true, last: null };
+  } catch {
+    return { logExists: false, last: null };
+  }
+}
 function saveProfileAgentSelection(selection, path = getDefaultProfileConfigPath()) {
+  if (isProtectedHomeProfileWrite(path)) return null;
   const config = loadProfileConfig(path);
   if (!config) return null;
   const profile = config.profiles[config.currentProfile];
   if (!profile) return null;
   const agentKey = selection.agentKey.trim();
   const agentName = selection.agentName.trim();
+  appendAgentSelectionAudit({
+    previous: {
+      ...profile.agentKey ? { agentKey: profile.agentKey } : {},
+      ...profile.agentName ? { agentName: profile.agentName } : {}
+    },
+    next: { agentKey, agentName },
+    configPath: path
+  });
   if (!agentKey) {
     delete profile.agentKey;
     delete profile.agentName;
@@ -143,5 +266,7 @@ export {
   buildCliRuntimeEnv,
   getCurrentProfile,
   saveProfileLocale,
+  getAgentSelectionAuditPath,
+  readLastAgentSelectionAudit,
   saveProfileAgentSelection
 };