nolo-cli 0.8.0-alpha.21 → 0.8.0-alpha.23

package/{chunk-JRKKFRAV.js → chunk-AWY2AFHN.js}

@@ -1,21 +1,21 @@
 import {
   getModelConfig
-} from "./chunk-BBYVOSU2.js";
+} from "./chunk-AOKWJZ5N.js";
 import {
   asTrimmedLowercaseString
 } from "./chunk-QSJ3HFEF.js";
 import {
   asTrimmedString
 } from "./chunk-3EUW3WEO.js";
+import {
+  isRecord
+} from "./chunk-KUG52IAP.js";
 import {
   normalizeServerOrigin
 } from "./chunk-CF7PE763.js";
 import {
   asOptionalTrimmedString
 } from "./chunk-G3SUCT4W.js";
-import {
-  isRecord
-} from "./chunk-KUG52IAP.js";
 
 // packages/agent-runtime/agentConfigOptions.ts
 function pickAgentRuntimeInferenceOptions(agentConfig) {
@@ -56,10 +56,14 @@ function isOpenAiResponsesModel(args) {
     return false;
   }
 }
+var PLATFORM_PROVIDER_ENDPOINT_ALIASES = {
+  "ollama-cloud": "nolo"
+};
 function resolvePlatformChatCompletionsEndpoint(provider) {
   const key = asTrimmedLowercaseString(provider);
   if (!key) return void 0;
-  return PLATFORM_CHAT_COMPLETIONS_ENDPOINTS[key];
+  const aliased = PLATFORM_PROVIDER_ENDPOINT_ALIASES[key] ?? key;
+  return PLATFORM_CHAT_COMPLETIONS_ENDPOINTS[aliased];
 }
 
 // packages/agent-runtime/providerResolution.ts

package/{chunk-RL776AGR.js → chunk-BB2PII22.js}

@@ -2,7 +2,7 @@ import {
   deleteDbRecord,
   queryUserRecords,
   readDbRecord
-} from "./chunk-SDJDLO5W.js";
+} from "./chunk-EUN3SYY7.js";
 import {
   mergeAndDedupUserData
 } from "./chunk-KQHGZWSV.js";

package/{chunk-I6XMPTMR.js → chunk-BFDWXLFF.js}

@@ -4,12 +4,12 @@ import {
 import {
   patch,
   read
-} from "./chunk-URUUZLPA.js";
+} from "./chunk-L3KWEH3V.js";
 import {
   DEVICE_LOCAL_OWNER_ID,
   isDeviceLocalSpaceBody,
   selectIdentityUserId
-} from "./chunk-UTLZINAP.js";
+} from "./chunk-DVRHHFEA.js";
 
 // packages/create/space/utils/permissions.ts
 var checkSpaceMembership = (spaceData, userId) => {

package/{chunk-VVX233PH.js → chunk-BT37DVDA.js}

@@ -9,15 +9,6 @@ import {
   loadProfileConfig,
   saveDefaultProfile
 } from "./chunk-ROWQEJRP.js";
-import {
-  resolveAuthTokenFromEnv
-} from "./chunk-ISNCLGUZ.js";
-import {
-  DEFAULT_NOLO_SERVER_URL
-} from "./chunk-OLZBQWZU.js";
-import {
-  getDefaultCliLocalRuntimeDb
-} from "./chunk-H33743XH.js";
 import {
   createMemoryKey,
   createMemoryOwnerIndexKey,
@@ -27,6 +18,15 @@ import {
 import {
   asTrimmedNonEmptyStringArray
 } from "./chunk-I42VC5KR.js";
+import {
+  resolveAuthTokenFromEnv
+} from "./chunk-AVMJVOQY.js";
+import {
+  DEFAULT_NOLO_SERVER_URL
+} from "./chunk-OLZBQWZU.js";
+import {
+  getDefaultCliLocalRuntimeDb
+} from "./chunk-H33743XH.js";
 import {
   asTrimmedString
 } from "./chunk-3EUW3WEO.js";

package/{chunk-C3RUNRHT.js → chunk-D55DXHXL.js}

@@ -1,6 +1,6 @@
 import {
   trimTrailingSlash
-} from "./chunk-JRKKFRAV.js";
+} from "./chunk-AWY2AFHN.js";
 import {
   asTrimmedLowercaseString
 } from "./chunk-QSJ3HFEF.js";

package/{chunk-7DAJ4AI4.js → chunk-DSNLHTP3.js}

@@ -1,10 +1,10 @@
 import {
   listUserRecordsFromServers,
   readLiveDbRecordAfterTombstoneMerge
-} from "./chunk-RL776AGR.js";
+} from "./chunk-BB2PII22.js";
 import {
   agentRecordHasConfiguredCredential
-} from "./chunk-SDJDLO5W.js";
+} from "./chunk-EUN3SYY7.js";
 
 // packages/cli/agentListHelpers.ts
 function parseAgentRecordId(privateKey, explicitId) {

package/{chunk-SDJDLO5W.js → chunk-EUN3SYY7.js}

@@ -2,7 +2,7 @@ import {
   buildLocalAgentLookupKeys,
   normalizeAgentHandle,
   shouldReadAgentKeyRemotely
-} from "./chunk-N54XAP77.js";
+} from "./chunk-ZJS64PZJ.js";
 import {
   resolveCliAgentKeyInput
 } from "./chunk-VHBWHNVT.js";
@@ -10,19 +10,19 @@ import {
   readPipeText,
   spawnProcess
 } from "./chunk-IDZTNRP2.js";
+import {
+  createAgentKey
+} from "./chunk-O4BU24WZ.js";
 import {
   parseUserIdFromAuthToken,
   readOption,
   resolveAuthToken,
   resolveServerCandidates,
   resolveServerUrl
-} from "./chunk-ISNCLGUZ.js";
+} from "./chunk-AVMJVOQY.js";
 import {
   toErrorMessage
 } from "./chunk-HNMXYYJR.js";
-import {
-  createAgentKey
-} from "./chunk-O4BU24WZ.js";
 
 // packages/cli/agentRecordHelpers.ts
 import { readFileSync } from "node:fs";

package/{chunk-FSO5B7GH.js → chunk-HAC6GPRE.js}

@@ -1,10 +1,10 @@
 import {
   i18n_default,
   toolRegistry
-} from "./chunk-AL2KDGR2.js";
+} from "./chunk-PTT6KSYQ.js";
 import {
   canonicalizeToolNames
-} from "./chunk-P3PKED2I.js";
+} from "./chunk-6OHYC4BY.js";
 import {
   asTrimmedLowercaseString
 } from "./chunk-QSJ3HFEF.js";

package/{chunk-CKOJQDKR.js → chunk-JEMATI63.js}

@@ -6,7 +6,7 @@ import {
 } from "./chunk-IDZTNRP2.js";
 import {
   isCompiledBinary
-} from "./chunk-ISNCLGUZ.js";
+} from "./chunk-AVMJVOQY.js";
 import {
   DEFAULT_NOLO_SERVER_URL
 } from "./chunk-OLZBQWZU.js";

package/{chunk-7U44LYTR.js → chunk-JTINRTBT.js}

@@ -1,7 +1,7 @@
 import {
   getRuntimeServerContext,
   scheduleDeleteReplication
-} from "./chunk-UTLZINAP.js";
+} from "./chunk-DVRHHFEA.js";
 import {
   fetchFromClientDb
 } from "./chunk-OOSFSFMA.js";

package/{chunk-YPRZSPF3.js → chunk-KLOCUWKZ.js}

@@ -6,7 +6,7 @@ import {
 } from "./chunk-CWMSB67P.js";
 import {
   getModelConfig
-} from "./chunk-BBYVOSU2.js";
+} from "./chunk-AOKWJZ5N.js";
 import {
   asOptionalFiniteNumber
 } from "./chunk-WWC7I6TA.js";

package/{chunk-4O3CARJ4.js → chunk-KTHLAJEY.js}

@@ -1,7 +1,7 @@
 import {
   DEFAULT_AGENT_BASE_POLICY,
   DEFAULT_USER_PREFERENCE_PROFILE
-} from "./chunk-VX3SXJ3N.js";
+} from "./chunk-UBSKX3LP.js";
 
 // packages/ai/policy/runtimePolicy.ts
 var clampLevel = (value, fallback) => {

package/{chunk-URUUZLPA.js → chunk-L3KWEH3V.js}

@@ -5,7 +5,7 @@ import {
   loadFileFromIndexedDb,
   removeAction,
   saveFileToIndexedDb
-} from "./chunk-7U44LYTR.js";
+} from "./chunk-JTINRTBT.js";
 import {
   fileKey,
   getFileIdFromKey,
@@ -15,7 +15,7 @@ import {
   readAction,
   readRequestManager,
   resolveAgentReadServers
-} from "./chunk-DSZUWUYB.js";
+} from "./chunk-VBKJTOAW.js";
 import {
   asyncThunkCreator,
   buildCreateSlice,
@@ -35,7 +35,7 @@ import {
   shouldReplaceLocalWithRemoteRecord,
   shouldReplicateLocalRecord,
   uploadToCurrentServer
-} from "./chunk-UTLZINAP.js";
+} from "./chunk-DVRHHFEA.js";
 import {
   fetchFromClientDb,
   fetchFromServer,
@@ -45,12 +45,12 @@ import {
 import {
   isTombstoneRecord
 } from "./chunk-GBRG75BQ.js";
-import {
-  API_ENDPOINTS
-} from "./chunk-LCBAMY2M.js";
 import {
   isRecord
 } from "./chunk-KUG52IAP.js";
+import {
+  API_ENDPOINTS
+} from "./chunk-LCBAMY2M.js";
 
 // packages/database/actions/readAndWait.ts
 var hashTokenScope = (currentToken) => {
@@ -674,7 +674,7 @@ var dbSlice = createSliceWithThunks({
     // 动态 import 在调用期解析，避开 TDZ/求值顺序问题（同下方 share）。
     read: create.asyncThunk(
       async (payload, thunkApi) => {
-        const { readAction: readAction2 } = await import("./read-GW7ZEI23.js");
+        const { readAction: readAction2 } = await import("./read-5ZMY7FKP.js");
         return readAction2(payload, thunkApi);
       },
       {
@@ -748,7 +748,7 @@ var dbSlice = createSliceWithThunks({
     // 这里改成动态 import，运行期才解析，彻底断开这条边。
     share: create.asyncThunk(
       async (config, thunkApi) => {
-        const { shareResourceAction } = await import("./action-TLI3V62L.js");
+        const { shareResourceAction } = await import("./action-QM2ONPYZ.js");
         return shareResourceAction(config, thunkApi);
       }
     ),

package/{chunk-O2ZNTTET.js → chunk-LBUTKV7S.js}

@@ -5,10 +5,10 @@ import {
   readSseFrames,
   throwIfChatCompletionStreamFailed,
   toOpenAiCompatibleMessages
-} from "./chunk-5KLGBAAR.js";
+} from "./chunk-6UUD2WES.js";
 import {
   parseToolArgumentsJson
-} from "./chunk-4QEWT7KD.js";
+} from "./chunk-RBB43B5W.js";
 import {
   createThinkParserState,
   extractThinkContent
@@ -16,15 +16,12 @@ import {
 import {
   buildProviderAuthHeaders,
   buildProviderExecutionPlan
-} from "./chunk-JRKKFRAV.js";
+} from "./chunk-AWY2AFHN.js";
 import {
   canonicalizeToolName,
   createGlob,
   resolveExecutableOnPath
-} from "./chunk-P3PKED2I.js";
-import {
-  toErrorMessage
-} from "./chunk-HNMXYYJR.js";
+} from "./chunk-6OHYC4BY.js";
 import {
   asRecordOrEmpty
 } from "./chunk-KX6YBIHG.js";
@@ -40,21 +37,24 @@ import {
 import {
   asTrimmedLowercaseString
 } from "./chunk-QSJ3HFEF.js";
+import {
+  toErrorMessage
+} from "./chunk-HNMXYYJR.js";
 import {
   asTrimmedString
 } from "./chunk-3EUW3WEO.js";
 import {
   asOptionalPositiveFiniteNumber
 } from "./chunk-U6VC4MU4.js";
+import {
+  isRecord
+} from "./chunk-KUG52IAP.js";
 import {
   normalizeServerOrigin
 } from "./chunk-CF7PE763.js";
 import {
   asOptionalTrimmedString
 } from "./chunk-G3SUCT4W.js";
-import {
-  isRecord
-} from "./chunk-KUG52IAP.js";
 
 // packages/agent-runtime/kimiUserAgent.ts
 var KIMI_CODE_CLI_VERSION = "0.29.2";
@@ -389,6 +389,7 @@ function dialogMessageRecordToAgentRuntimeMessage(record) {
   return {
     role: record.role,
     content: record.content ?? "",
+    ...record.contextReference !== void 0 ? { context_reference: record.contextReference } : {},
     ...typeof record.reasoning_content === "string" ? { reasoning_content: record.reasoning_content } : {},
     ...typeof record.toolCallId === "string" ? { tool_call_id: record.toolCallId } : {},
     ...Array.isArray(record.tool_calls) ? { tool_calls: record.tool_calls } : {},
@@ -469,6 +470,7 @@ function buildDialogMessageWriteOps(args) {
         dialogId: args.dialogId,
         role: message.role,
         content: message.content ?? "",
+        ...message.context_reference !== void 0 ? { contextReference: message.context_reference } : {},
         // 持久化思维链(reasoning):空轮/异常排查的关键证据,
         // 回读由 dialogMessageRecordToAgentRuntimeMessage 还原。
         ...typeof message.reasoning_content === "string" ? { reasoning_content: message.reasoning_content } : {},
@@ -878,7 +880,14 @@ var DEFAULT_LOCAL_TOOLS = /* @__PURE__ */ new Set([
   "searchFiles",
   "execShell",
   "launchProcess",
-  "listProcesses"
+  "listProcesses",
+  // Scheduling tools: forking/observing sub-agents is a declared capability
+  // of capable agents, and the blast radius is strictly narrower than
+  // execShell (already default-enabled). Requiring an env allowlist for these
+  // while execShell is open by default inverted the risk model and forced every
+  // new local user to hand-edit .env files before sub-agent tasks worked.
+  "startAgentRun",
+  "controlAgentRun"
 ]);
 function parseToolAllowlist(value) {
   return (value ?? "").split(",").flatMap((item) => {
@@ -951,7 +960,7 @@ function resolveLocalToolPolicy(args) {
   return {
     allowed: false,
     toolName,
-    reason: `${toolName} is not enabled for local runtime runs. Set NOLO_LOCAL_ALLOWED_TOOLS and make sure the agent declares the tool before using it locally.`
+    reason: `${toolName} is not enabled for local runtime runs. The agent must declare the tool in its manifest; in restricted mode (NOLO_LOCAL_TOOL_MODE=restricted) non-default tools also require adding to NOLO_LOCAL_ALLOWED_TOOLS (e.g. NOLO_LOCAL_ALLOWED_TOOLS=someCustomTool) and restarting the session so the env var loads.`
   };
 }
 async function executeLocalToolWithPolicy(args) {