nolo-cli 0.49.0-alpha.1 → 0.49.1

package/{chunk-S3HB4CQY.js → chunk-IKSFDJXB.js}

@@ -7,7 +7,7 @@ import {
   providerHttpFailure,
   readSseFrames,
   throwIfChatCompletionStreamFailed
-} from "./chunk-XB7ACJFH.js";
+} from "./chunk-GDGIEGHV.js";
 import {
   FRESH_TOOL_OUTPUT_MAX_CHARS,
   MAX_HISTORICAL_TOOL_CONTENT_CHARS,
@@ -17,7 +17,7 @@ import {
   resolveHistoricalToolContentCap,
   resolveToolOutputProfile,
   stripImagePartsFromMessages
-} from "./chunk-VKSBVRGP.js";
+} from "./chunk-CVT7L2WZ.js";
 import {
   sanitizeForOutbound
 } from "./chunk-T27IEBNQ.js";
@@ -36,7 +36,7 @@ import {
   requiresBareImageUrl,
   resolveToolGuidedSections,
   toBareImageUrlMessages
-} from "./chunk-HMMOAG2I.js";
+} from "./chunk-NN3AMBY3.js";
 import {
   convertMessagesToResponsesInput,
   extractReasoningFromResponseOutput,
@@ -50,7 +50,7 @@ import {
 import {
   buildProviderAuthHeaders,
   buildProviderExecutionPlan
-} from "./chunk-JBL24PK6.js";
+} from "./chunk-SP3DPVBH.js";
 import {
   NOLO_WORKSPACE_TOOL_NAMES,
   buildNoloWorkspaceCommandArgs,
@@ -69,7 +69,7 @@ import {
   resolveEmptyAssistantFallbackMessage,
   resolveEmptyAssistantOutcome,
   resolveTruncatedReasoningTailLog
-} from "./chunk-F22JQTSX.js";
+} from "./chunk-SW7RCUGA.js";
 import {
   COMPACTION_SUMMARY_SCHEMA_VERSION,
   COMPACTION_SUMMARY_SYSTEM_PROMPT,
@@ -174,6 +174,26 @@ function readTitleParams(value) {
   return Object.fromEntries(entries);
 }
 
+// packages/agent-runtime/fileWritePolicy.ts
+function evaluateFileWritePolicy(args) {
+  if (args.sessionApproved) return { permissionDecision: "allow" };
+  return {
+    permissionDecision: "ask",
+    permissionRequest: {
+      id: "permission-file-write-session",
+      tool: args.tool,
+      action: "file_write",
+      title: "\u786E\u8BA4\u5199\u5165\u6587\u4EF6",
+      body: `\u672C\u4F1A\u8BDD\u9996\u6B21\u5199\u5165\u6587\u4EF6\uFF1A${args.path}\u3002\u6279\u51C6\u540E\u672C\u4F1A\u8BDD\u540E\u7EED\u5199\u5165\u4E0D\u518D\u9010\u6B21\u786E\u8BA4\u3002`,
+      command: args.path,
+      suggestedRule: {
+        scope: "session",
+        pattern: { capability: "file_write", target: "session" }
+      }
+    }
+  };
+}
+
 // packages/agent-runtime/toolCallPairing.ts
 function readToolCallId(message) {
   if (typeof message.tool_call_id === "string" && message.tool_call_id) {
@@ -1540,6 +1560,41 @@ function applyPersistedTurnInput(messages, persistedInput, persistedInputReferen
     };
   });
 }
+var fileWriteSessionApproval = /* @__PURE__ */ new WeakMap();
+var fileWriteSessionKeys = /* @__PURE__ */ new Map();
+function getFileWriteSessionApproval(input) {
+  if (input.fileWriteSessionId) {
+    let key2 = fileWriteSessionKeys.get(input.fileWriteSessionId);
+    if (!key2) {
+      key2 = {};
+      fileWriteSessionKeys.set(input.fileWriteSessionId, key2);
+    }
+    const existing2 = fileWriteSessionApproval.get(key2);
+    if (existing2) return existing2;
+    const created2 = { approved: false };
+    fileWriteSessionApproval.set(key2, created2);
+    return created2;
+  }
+  const key = input.adapter;
+  const existing = fileWriteSessionApproval.get(key);
+  if (existing) return existing;
+  const created = { approved: false };
+  fileWriteSessionApproval.set(key, created);
+  return created;
+}
+function readToolPathForWriteGate(argumentsValue) {
+  try {
+    const parsed = JSON.parse(argumentsValue);
+    return typeof parsed.path === "string" && parsed.path.trim() ? parsed.path.trim() : "the requested file";
+  } catch {
+    return "the requested file";
+  }
+}
+function isCompletedActionGateResult(value) {
+  return Boolean(
+    value && typeof value === "object" && value.status === "completed"
+  );
+}
 async function runLocalAgentTurn(input) {
   const agentConfig = await input.adapter.loadAgentConfig(input.agentRef);
   if (!agentConfig) {
@@ -1865,25 +1920,62 @@ ${reasoningTailLog}
           }
         );
         try {
-          const executePromise = input.adapter.executeTool({
-            id: toolCall.id,
-            name: toolName,
-            arguments: toolCall.function.arguments,
-            ...userInputText ? { userInput: userInputText } : {},
-            ...input.runtimeContext ? { runtimeContext: input.runtimeContext } : {},
-            ...input.abortSignal ? { abortSignal: input.abortSignal } : {}
-          }, {
-            ...input.abortSignal ? { abortSignal: input.abortSignal } : {},
-            ...input.runtimeContext ? { runtimeContext: input.runtimeContext } : {}
-          });
-          toolResult = await raceWithAbort(input, executePromise, toolName);
+          const writeTool = toolName === "writeFile" || toolName === "editFile";
+          if (writeTool && input.onActionGate) {
+            const writeSession = getFileWriteSessionApproval(input);
+            const policy = evaluateFileWritePolicy({
+              tool: toolName,
+              path: readToolPathForWriteGate(toolCall.function.arguments),
+              sessionApproved: writeSession.approved
+            });
+            if (policy.permissionDecision === "ask") {
+              const gate = {
+                ...policy.permissionRequest,
+                id: `${policy.permissionRequest.id}-${toolCall.id}`,
+                kind: "confirm",
+                toolName,
+                toolCallId: toolCall.id
+              };
+              const replacement = await raceWithAbort(
+                input,
+                input.onActionGate(gate),
+                `${toolName} confirmation`
+              );
+              const gateResult = replacement?.metadata?.actionGateResult;
+              if (replacement !== void 0 && isCompletedActionGateResult(gateResult)) {
+                writeSession.approved = true;
+              } else {
+                toolResult = replacement ?? {
+                  content: `${toolName} cancelled: user declined file write confirmation.`,
+                  metadata: {
+                    cancelled: true,
+                    actionGateResult: { gateId: gate.id, status: "cancelled" }
+                  }
+                };
+              }
+            }
+          }
+          if (!toolResult) {
+            const executePromise = input.adapter.executeTool({
+              id: toolCall.id,
+              name: toolName,
+              arguments: toolCall.function.arguments,
+              ...userInputText ? { userInput: userInputText } : {},
+              ...input.runtimeContext ? { runtimeContext: input.runtimeContext } : {},
+              ...input.abortSignal ? { abortSignal: input.abortSignal } : {}
+            }, {
+              ...input.abortSignal ? { abortSignal: input.abortSignal } : {},
+              ...input.runtimeContext ? { runtimeContext: input.runtimeContext } : {}
+            });
+            toolResult = await raceWithAbort(input, executePromise, toolName);
+          }
           const actionGate = buildActionGate({
             toolName,
             toolCallId: toolCall.id,
             metadata: toolResult.metadata
           });
           if (actionGate && input.onActionGate) {
-            const replacement = await input.onActionGate(actionGate);
+            const replacement = await raceWithAbort(input, input.onActionGate(actionGate), `${toolName} action gate`);
             if (replacement) {
               toolResult = replacement;
             }
@@ -1899,7 +1991,7 @@ ${reasoningTailLog}
               toolCallId: toolCall.id,
               toolName,
               atMs: finishedAt,
-              ok: true,
+              ok: toolResult.metadata?.cancelled !== true && toolResult.metadata?.actionGateResult?.status !== "cancelled" && toolResult.metadata?.actionGateResult?.status !== "failed",
               elapsedMs: Math.max(0, finishedAt - startedAt),
               ...summary ? { summary } : {},
               ...safeMetadata ? { metadata: safeMetadata } : {}
@@ -6950,6 +7042,7 @@ Available skills: ${available.join(", ")}`;
 export {
   readCommandActionGatePayload,
   readActionGate,
+  evaluateFileWritePolicy,
   summarizeToolArguments,
   LOCAL_AGENT_CONFIG_MISSING_CODE,
   LOCAL_TURN_ABORTED_CODE,

package/{chunk-W3RZLXMA.js → chunk-IKTHA3JH.js}

@@ -6,10 +6,10 @@ import {
 } from "./chunk-AGGIDPCZ.js";
 import {
   getModelConfig
-} from "./chunk-BO3YFOZR.js";
+} from "./chunk-QDHZCAH3.js";
 import {
   isPlatformHostedImageModel
-} from "./chunk-VFN256RI.js";
+} from "./chunk-WL3UOGYO.js";
 import {
   asOptionalFiniteNumber
 } from "./chunk-WWC7I6TA.js";