nolo-cli 0.53.0-alpha.1 → 0.54.0-alpha.2

package/{chunk-SG65C33A.js → chunk-32I5RVMY.js}

@@ -1,15 +1,15 @@
 import {
   selectCurrentServer
-} from "./chunk-X7S7OFUX.js";
+} from "./chunk-3QJTD6DO.js";
 import {
   patch
-} from "./chunk-76UA7376.js";
+} from "./chunk-AV6KQCM5.js";
 import {
   selectIdentityToken
-} from "./chunk-HHBXCRJS.js";
+} from "./chunk-PYKV6FSC.js";
 import {
   getIsDesktopApp
-} from "./chunk-L3JWI7WX.js";
+} from "./chunk-QOKAKDPE.js";
 
 // packages/ai/agent/cliChatClient.ts
 function getCliChatRequestConfig(thunkApi) {

package/{chunk-X7S7OFUX.js → chunk-3QJTD6DO.js}

@@ -13,7 +13,7 @@ import {
   toTimestampMs,
   upsert,
   write
-} from "./chunk-76UA7376.js";
+} from "./chunk-AV6KQCM5.js";
 import {
   createUserKey,
   createUserPreferenceKey,
@@ -24,7 +24,7 @@ import {
 } from "./chunk-QSJ3HFEF.js";
 import {
   BUILTIN_NOLO_AGENT_KEY
-} from "./chunk-2JYSSXLY.js";
+} from "./chunk-VULELK4T.js";
 import {
   asyncThunkCreator,
   buildCreateSlice,
@@ -32,12 +32,12 @@ import {
   createAsyncThunk,
   createSelector,
   selectIdentityUserId
-} from "./chunk-HHBXCRJS.js";
+} from "./chunk-PYKV6FSC.js";
 import {
   getAllServers,
   getIsDesktopApp,
   isProduction
-} from "./chunk-L3JWI7WX.js";
+} from "./chunk-QOKAKDPE.js";
 import {
   SERVERS
 } from "./chunk-LCBAMY2M.js";

package/{chunk-CY5KIIPU.js → chunk-3Z3DXZBD.js}

@@ -5,14 +5,14 @@ import {
   inlineImageUrlsForCustomProvider,
   prepareTools,
   shouldInlineImageUrlsForAgent
-} from "./chunk-H5QLIP6S.js";
+} from "./chunk-UW4INMD2.js";
 import {
   INVALID_TOOL_ARGS_REPLACEMENT,
   buildInvalidToolCallSelfHealResult,
   parseToolCallArguments,
   performFetchRequest,
   sanitizeOutboundMessages
-} from "./chunk-TZRB2I2M.js";
+} from "./chunk-TI5BCZCH.js";
 import {
   createSSEParser,
   createToolRunId,
@@ -23,22 +23,22 @@ import {
   toolRunSetPending,
   toolRunStarted,
   toolRunSucceeded
-} from "./chunk-5SLTA66C.js";
+} from "./chunk-V4KZGLOI.js";
 import {
   getPublicImageAgentMode
 } from "./chunk-VIDPVFP3.js";
 import {
   getCurrentSpaceId
-} from "./chunk-DFY6O64O.js";
+} from "./chunk-LA4IDAK7.js";
 import {
   addToolMessage,
   messageStreamEnd,
   messageStreaming,
   updateToolMessage
-} from "./chunk-PGKZ2KGE.js";
+} from "./chunk-BJLYCOZK.js";
 import {
   streamAgentChatTurn
-} from "./chunk-KOZ2G3ZG.js";
+} from "./chunk-U2A47SVI.js";
 import {
   addActiveController,
   removeActiveController,
@@ -56,19 +56,19 @@ import {
 import {
   EMPTY_ASSISTANT_REPAIR_PROMPT,
   getModelInfo
-} from "./chunk-F22JQTSX.js";
+} from "./chunk-KUUTWU4I.js";
 import {
   getApiEndpoint
-} from "./chunk-BO3YFOZR.js";
+} from "./chunk-QDHZCAH3.js";
 import {
   toErrorMessage
 } from "./chunk-HNMXYYJR.js";
 import {
   selectCurrentServer
-} from "./chunk-X7S7OFUX.js";
+} from "./chunk-3QJTD6DO.js";
 import {
   write
-} from "./chunk-76UA7376.js";
+} from "./chunk-AV6KQCM5.js";
 import {
   createDialogMessageKeyAndId,
   dialogMessageKey,
@@ -80,10 +80,10 @@ import {
 import {
   createAsyncThunk,
   selectIdentityToken
-} from "./chunk-HHBXCRJS.js";
+} from "./chunk-PYKV6FSC.js";
 import {
   isAbortError
-} from "./chunk-L3JWI7WX.js";
+} from "./chunk-QOKAKDPE.js";
 import {
   isRecord
 } from "./chunk-KUG52IAP.js";

package/{chunk-RO2IUWZE.js → chunk-4NN3EK7H.js}

@@ -1,7 +1,7 @@
 import {
   DEFAULT_AGENT_BASE_POLICY,
   DEFAULT_USER_PREFERENCE_PROFILE
-} from "./chunk-X7S7OFUX.js";
+} from "./chunk-3QJTD6DO.js";
 
 // packages/ai/policy/runtimePolicy.ts
 var clampLevel = (value, fallback) => {

package/{chunk-Y7TGWSUN.js → chunk-56W233KG.js}

@@ -4,7 +4,7 @@ import {
   openrouterModels,
   platformHostedModels,
   zaiModels
-} from "./chunk-VFN256RI.js";
+} from "./chunk-WL3UOGYO.js";
 
 // packages/ai/llm/modelAbility.ts
 var MODEL_ABILITY_TABLE = {

package/{chunk-C2WF2OY7.js → chunk-5WADL4O7.js}

@@ -7,7 +7,7 @@ import {
 } from "./chunk-DQLYEGP7.js";
 import {
   toSafeAgentSummary
-} from "./chunk-Z7A54NFZ.js";
+} from "./chunk-RU5D3B22.js";
 import {
   PUBLIC_AGENT_KEY_PREFIX,
   isOwnedAgentKey,

package/{chunk-QTH72J3N.js → chunk-6BGAQ3KR.js}

@@ -7,7 +7,7 @@ import {
   providerHttpFailure,
   readSseFrames,
   throwIfChatCompletionStreamFailed
-} from "./chunk-XB7ACJFH.js";
+} from "./chunk-INXBNYCG.js";
 import {
   FRESH_TOOL_OUTPUT_MAX_CHARS,
   MAX_HISTORICAL_TOOL_CONTENT_CHARS,
@@ -17,7 +17,7 @@ import {
   resolveHistoricalToolContentCap,
   resolveToolOutputProfile,
   stripImagePartsFromMessages
-} from "./chunk-VKSBVRGP.js";
+} from "./chunk-CVT7L2WZ.js";
 import {
   sanitizeForOutbound
 } from "./chunk-T27IEBNQ.js";
@@ -36,7 +36,7 @@ import {
   requiresBareImageUrl,
   resolveToolGuidedSections,
   toBareImageUrlMessages
-} from "./chunk-OZKJBDG4.js";
+} from "./chunk-YBV6QJKM.js";
 import {
   convertMessagesToResponsesInput,
   extractReasoningFromResponseOutput,
@@ -50,7 +50,7 @@ import {
 import {
   buildProviderAuthHeaders,
   buildProviderExecutionPlan
-} from "./chunk-JBL24PK6.js";
+} from "./chunk-SP3DPVBH.js";
 import {
   NOLO_WORKSPACE_TOOL_NAMES,
   buildNoloWorkspaceCommandArgs,
@@ -69,7 +69,7 @@ import {
   resolveEmptyAssistantFallbackMessage,
   resolveEmptyAssistantOutcome,
   resolveTruncatedReasoningTailLog
-} from "./chunk-F22JQTSX.js";
+} from "./chunk-KUUTWU4I.js";
 import {
   COMPACTION_SUMMARY_SCHEMA_VERSION,
   COMPACTION_SUMMARY_SYSTEM_PROMPT,
@@ -83,7 +83,7 @@ import {
   formatMessagesForSummaryWithTruncation,
   planCompression,
   planContextUsage
-} from "./chunk-HR5XDXYM.js";
+} from "./chunk-H4RYESI6.js";
 import {
   resolveNoloStateDir
 } from "./chunk-FD36SCCD.js";
@@ -174,6 +174,26 @@ function readTitleParams(value) {
   return Object.fromEntries(entries);
 }
 
+// packages/agent-runtime/fileWritePolicy.ts
+function evaluateFileWritePolicy(args) {
+  if (args.sessionApproved) return { permissionDecision: "allow" };
+  return {
+    permissionDecision: "ask",
+    permissionRequest: {
+      id: "permission-file-write-session",
+      tool: args.tool,
+      action: "file_write",
+      title: "\u786E\u8BA4\u5199\u5165\u6587\u4EF6",
+      body: `\u672C\u4F1A\u8BDD\u9996\u6B21\u5199\u5165\u6587\u4EF6\uFF1A${args.path}\u3002\u6279\u51C6\u540E\u672C\u4F1A\u8BDD\u540E\u7EED\u5199\u5165\u4E0D\u518D\u9010\u6B21\u786E\u8BA4\u3002`,
+      command: args.path,
+      suggestedRule: {
+        scope: "session",
+        pattern: { capability: "file_write", target: "session" }
+      }
+    }
+  };
+}
+
 // packages/agent-runtime/toolCallPairing.ts
 function readToolCallId(message) {
   if (typeof message.tool_call_id === "string" && message.tool_call_id) {
@@ -1540,6 +1560,41 @@ function applyPersistedTurnInput(messages, persistedInput, persistedInputReferen
     };
   });
 }
+var fileWriteSessionApproval = /* @__PURE__ */ new WeakMap();
+var fileWriteSessionKeys = /* @__PURE__ */ new Map();
+function getFileWriteSessionApproval(input) {
+  if (input.fileWriteSessionId) {
+    let key2 = fileWriteSessionKeys.get(input.fileWriteSessionId);
+    if (!key2) {
+      key2 = {};
+      fileWriteSessionKeys.set(input.fileWriteSessionId, key2);
+    }
+    const existing2 = fileWriteSessionApproval.get(key2);
+    if (existing2) return existing2;
+    const created2 = { approved: false };
+    fileWriteSessionApproval.set(key2, created2);
+    return created2;
+  }
+  const key = input.adapter;
+  const existing = fileWriteSessionApproval.get(key);
+  if (existing) return existing;
+  const created = { approved: false };
+  fileWriteSessionApproval.set(key, created);
+  return created;
+}
+function readToolPathForWriteGate(argumentsValue) {
+  try {
+    const parsed = JSON.parse(argumentsValue);
+    return typeof parsed.path === "string" && parsed.path.trim() ? parsed.path.trim() : "the requested file";
+  } catch {
+    return "the requested file";
+  }
+}
+function isCompletedActionGateResult(value) {
+  return Boolean(
+    value && typeof value === "object" && value.status === "completed"
+  );
+}
 async function runLocalAgentTurn(input) {
   const agentConfig = await input.adapter.loadAgentConfig(input.agentRef);
   if (!agentConfig) {
@@ -1865,25 +1920,62 @@ ${reasoningTailLog}
           }
         );
         try {
-          const executePromise = input.adapter.executeTool({
-            id: toolCall.id,
-            name: toolName,
-            arguments: toolCall.function.arguments,
-            ...userInputText ? { userInput: userInputText } : {},
-            ...input.runtimeContext ? { runtimeContext: input.runtimeContext } : {},
-            ...input.abortSignal ? { abortSignal: input.abortSignal } : {}
-          }, {
-            ...input.abortSignal ? { abortSignal: input.abortSignal } : {},
-            ...input.runtimeContext ? { runtimeContext: input.runtimeContext } : {}
-          });
-          toolResult = await raceWithAbort(input, executePromise, toolName);
+          const writeTool = toolName === "writeFile" || toolName === "editFile";
+          if (writeTool && input.onActionGate && input.fileWriteGateEnabled !== false) {
+            const writeSession = getFileWriteSessionApproval(input);
+            const policy = evaluateFileWritePolicy({
+              tool: toolName,
+              path: readToolPathForWriteGate(toolCall.function.arguments),
+              sessionApproved: writeSession.approved
+            });
+            if (policy.permissionDecision === "ask") {
+              const gate = {
+                ...policy.permissionRequest,
+                id: `${policy.permissionRequest.id}-${toolCall.id}`,
+                kind: "confirm",
+                toolName,
+                toolCallId: toolCall.id
+              };
+              const replacement = await raceWithAbort(
+                input,
+                input.onActionGate(gate),
+                `${toolName} confirmation`
+              );
+              const gateResult = replacement?.metadata?.actionGateResult;
+              if (replacement !== void 0 && isCompletedActionGateResult(gateResult)) {
+                writeSession.approved = true;
+              } else {
+                toolResult = replacement ?? {
+                  content: `${toolName} cancelled: user declined file write confirmation.`,
+                  metadata: {
+                    cancelled: true,
+                    actionGateResult: { gateId: gate.id, status: "cancelled" }
+                  }
+                };
+              }
+            }
+          }
+          if (!toolResult) {
+            const executePromise = input.adapter.executeTool({
+              id: toolCall.id,
+              name: toolName,
+              arguments: toolCall.function.arguments,
+              ...userInputText ? { userInput: userInputText } : {},
+              ...input.runtimeContext ? { runtimeContext: input.runtimeContext } : {},
+              ...input.abortSignal ? { abortSignal: input.abortSignal } : {}
+            }, {
+              ...input.abortSignal ? { abortSignal: input.abortSignal } : {},
+              ...input.runtimeContext ? { runtimeContext: input.runtimeContext } : {}
+            });
+            toolResult = await raceWithAbort(input, executePromise, toolName);
+          }
           const actionGate = buildActionGate({
             toolName,
             toolCallId: toolCall.id,
             metadata: toolResult.metadata
           });
           if (actionGate && input.onActionGate) {
-            const replacement = await input.onActionGate(actionGate);
+            const replacement = await raceWithAbort(input, input.onActionGate(actionGate), `${toolName} action gate`);
             if (replacement) {
               toolResult = replacement;
             }
@@ -1899,7 +1991,7 @@ ${reasoningTailLog}
               toolCallId: toolCall.id,
               toolName,
               atMs: finishedAt,
-              ok: true,
+              ok: toolResult.metadata?.cancelled !== true && toolResult.metadata?.actionGateResult?.status !== "cancelled" && toolResult.metadata?.actionGateResult?.status !== "failed",
               elapsedMs: Math.max(0, finishedAt - startedAt),
               ...summary ? { summary } : {},
               ...safeMetadata ? { metadata: safeMetadata } : {}
@@ -6894,10 +6986,10 @@ function buildLoadSkillExecutor(args) {
         metadata: { loadSkill: true, resolved: false }
       };
     }
-    const { resolveSkillByName } = await import("./skillDiscovery-COX56OBO.js");
+    const { resolveSkillByName } = await import("./skillDiscovery-GPUDHDTZ.js");
     const resolved = resolveSkillByName(args.cwd, name);
     if (!resolved) {
-      const { resolveCodingBuiltinSlug, buildCodingSkillContentBySlug } = await import("./codingSkills-BYQI6EPT.js");
+      const { resolveCodingBuiltinSlug, buildCodingSkillContentBySlug } = await import("./codingSkills-BCQXRZOI.js");
       const builtinSlug = resolveCodingBuiltinSlug(name);
       if (builtinSlug) {
         const body = buildCodingSkillContentBySlug(builtinSlug);
@@ -6932,7 +7024,7 @@ ${body}`,
   };
 }
 async function formatUnknownSkillMessage(cwd, requestedName) {
-  const { discoverSkills } = await import("./skillDiscovery-COX56OBO.js");
+  const { discoverSkills } = await import("./skillDiscovery-GPUDHDTZ.js");
   let available = [];
   try {
     available = discoverSkills(cwd).map((s) => s.name);
@@ -6950,6 +7042,7 @@ Available skills: ${available.join(", ")}`;
 export {
   readCommandActionGatePayload,
   readActionGate,
+  evaluateFileWritePolicy,
   summarizeToolArguments,
   LOCAL_AGENT_CONFIG_MISSING_CODE,
   LOCAL_TURN_ABORTED_CODE,