nolo-cli 0.8.0-alpha.21 → 0.8.0-alpha.24

package/{chunk-VVX233PH.js → chunk-BT37DVDA.js}

@@ -9,15 +9,6 @@ import {
   loadProfileConfig,
   saveDefaultProfile
 } from "./chunk-ROWQEJRP.js";
-import {
-  resolveAuthTokenFromEnv
-} from "./chunk-ISNCLGUZ.js";
-import {
-  DEFAULT_NOLO_SERVER_URL
-} from "./chunk-OLZBQWZU.js";
-import {
-  getDefaultCliLocalRuntimeDb
-} from "./chunk-H33743XH.js";
 import {
   createMemoryKey,
   createMemoryOwnerIndexKey,
@@ -27,6 +18,15 @@ import {
 import {
   asTrimmedNonEmptyStringArray
 } from "./chunk-I42VC5KR.js";
+import {
+  resolveAuthTokenFromEnv
+} from "./chunk-AVMJVOQY.js";
+import {
+  DEFAULT_NOLO_SERVER_URL
+} from "./chunk-OLZBQWZU.js";
+import {
+  getDefaultCliLocalRuntimeDb
+} from "./chunk-H33743XH.js";
 import {
   asTrimmedString
 } from "./chunk-3EUW3WEO.js";

package/{chunk-ENOG22KJ.js → chunk-BT57QC5K.js}

@@ -1,54 +1,52 @@
-import {
-  chooseMemoryOwners,
-  loadMemoryCandidatesFromDb
-} from "./chunk-XENYHRUE.js";
 import {
   addContentToSpace,
   prepareAndPersistMessage,
   uiAskChoiceFunc,
   uiAskChoiceFunctionSchema
-} from "./chunk-2ECQG4YX.js";
+} from "./chunk-GROGNZOA.js";
 import {
   require_date_fns
 } from "./chunk-M76ECQRD.js";
-import {
-  PLATFORM_HOSTED_GLM_52_MODEL,
-  PLATFORM_HOSTED_GLM_PRICE
-} from "./chunk-BBYVOSU2.js";
-import {
-  PLATFORM_HOSTED_KIMI_PROVIDER
-} from "./chunk-IWX4UW2E.js";
-import {
-  extractCustomId
-} from "./chunk-DFFIZ25G.js";
 import {
   read,
   readAndWait,
   removeCachedEntity,
   upsertSSREntity,
   write
-} from "./chunk-URUUZLPA.js";
+} from "./chunk-L3KWEH3V.js";
+import {
+  chooseMemoryOwners,
+  loadMemoryCandidatesFromDb
+} from "./chunk-XENYHRUE.js";
+import {
+  PLATFORM_HOSTED_GLM_52_MODEL,
+  PLATFORM_HOSTED_GLM_PRICE,
+  PLATFORM_HOSTED_KIMI_PROVIDER
+} from "./chunk-524BDL33.js";
 import {
   createAgentKey,
   createDialogKey,
   createKey,
   dialogMessageRange
 } from "./chunk-O4BU24WZ.js";
+import {
+  extractCustomId
+} from "./chunk-DFFIZ25G.js";
 import {
   selectIdentityUserId
-} from "./chunk-UTLZINAP.js";
+} from "./chunk-DVRHHFEA.js";
 import {
   asTrimmedString
 } from "./chunk-3EUW3WEO.js";
 import {
   asOptionalPositiveFiniteNumber
 } from "./chunk-U6VC4MU4.js";
-import {
-  asOptionalTrimmedString
-} from "./chunk-G3SUCT4W.js";
 import {
   isRecord
 } from "./chunk-KUG52IAP.js";
+import {
+  asOptionalTrimmedString
+} from "./chunk-G3SUCT4W.js";
 import {
   __toESM
 } from "./chunk-4VNS5WPM.js";

package/{chunk-O2ZNTTET.js → chunk-C4DZRHFJ.js}

@@ -3,28 +3,25 @@ import {
   finalizeAccumulatedToolCalls,
   flushChatCompletionStream,
   readSseFrames,
-  throwIfChatCompletionStreamFailed,
-  toOpenAiCompatibleMessages
-} from "./chunk-5KLGBAAR.js";
+  throwIfChatCompletionStreamFailed
+} from "./chunk-3KGTFX3T.js";
 import {
   parseToolArgumentsJson
-} from "./chunk-4QEWT7KD.js";
+} from "./chunk-AISLHYDB.js";
 import {
   createThinkParserState,
   extractThinkContent
 } from "./chunk-OPZYGHUC.js";
 import {
   buildProviderAuthHeaders,
-  buildProviderExecutionPlan
-} from "./chunk-JRKKFRAV.js";
+  buildProviderExecutionPlan,
+  toOpenAiCompatibleMessages
+} from "./chunk-3HPUUWOR.js";
 import {
   canonicalizeToolName,
   createGlob,
   resolveExecutableOnPath
-} from "./chunk-P3PKED2I.js";
-import {
-  toErrorMessage
-} from "./chunk-HNMXYYJR.js";
+} from "./chunk-FZ2G3I4B.js";
 import {
   asRecordOrEmpty
 } from "./chunk-KX6YBIHG.js";
@@ -40,21 +37,24 @@ import {
 import {
   asTrimmedLowercaseString
 } from "./chunk-QSJ3HFEF.js";
+import {
+  toErrorMessage
+} from "./chunk-HNMXYYJR.js";
 import {
   asTrimmedString
 } from "./chunk-3EUW3WEO.js";
 import {
   asOptionalPositiveFiniteNumber
 } from "./chunk-U6VC4MU4.js";
+import {
+  isRecord
+} from "./chunk-KUG52IAP.js";
 import {
   normalizeServerOrigin
 } from "./chunk-CF7PE763.js";
 import {
   asOptionalTrimmedString
 } from "./chunk-G3SUCT4W.js";
-import {
-  isRecord
-} from "./chunk-KUG52IAP.js";
 
 // packages/agent-runtime/kimiUserAgent.ts
 var KIMI_CODE_CLI_VERSION = "0.29.2";
@@ -389,6 +389,7 @@ function dialogMessageRecordToAgentRuntimeMessage(record) {
   return {
     role: record.role,
     content: record.content ?? "",
+    ...record.contextReference !== void 0 ? { context_reference: record.contextReference } : {},
     ...typeof record.reasoning_content === "string" ? { reasoning_content: record.reasoning_content } : {},
     ...typeof record.toolCallId === "string" ? { tool_call_id: record.toolCallId } : {},
     ...Array.isArray(record.tool_calls) ? { tool_calls: record.tool_calls } : {},
@@ -469,6 +470,7 @@ function buildDialogMessageWriteOps(args) {
         dialogId: args.dialogId,
         role: message.role,
         content: message.content ?? "",
+        ...message.context_reference !== void 0 ? { contextReference: message.context_reference } : {},
         // 持久化思维链(reasoning):空轮/异常排查的关键证据,
         // 回读由 dialogMessageRecordToAgentRuntimeMessage 还原。
         ...typeof message.reasoning_content === "string" ? { reasoning_content: message.reasoning_content } : {},
@@ -878,7 +880,14 @@ var DEFAULT_LOCAL_TOOLS = /* @__PURE__ */ new Set([
   "searchFiles",
   "execShell",
   "launchProcess",
-  "listProcesses"
+  "listProcesses",
+  // Scheduling tools: forking/observing sub-agents is a declared capability
+  // of capable agents, and the blast radius is strictly narrower than
+  // execShell (already default-enabled). Requiring an env allowlist for these
+  // while execShell is open by default inverted the risk model and forced every
+  // new local user to hand-edit .env files before sub-agent tasks worked.
+  "startAgentRun",
+  "controlAgentRun"
 ]);
 function parseToolAllowlist(value) {
   return (value ?? "").split(",").flatMap((item) => {
@@ -951,7 +960,7 @@ function resolveLocalToolPolicy(args) {
   return {
     allowed: false,
     toolName,
-    reason: `${toolName} is not enabled for local runtime runs. Set NOLO_LOCAL_ALLOWED_TOOLS and make sure the agent declares the tool before using it locally.`
+    reason: `${toolName} is not enabled for local runtime runs. The agent must declare the tool in its manifest; in restricted mode (NOLO_LOCAL_TOOL_MODE=restricted) non-default tools also require adding to NOLO_LOCAL_ALLOWED_TOOLS (e.g. NOLO_LOCAL_ALLOWED_TOOLS=someCustomTool) and restarting the session so the env var loads.`
   };
 }
 async function executeLocalToolWithPolicy(args) {

package/{chunk-4XENYTF5.js → chunk-DS3VC4EA.js}

@@ -1,6 +1,6 @@
 import {
   clearCliLocalRuntimePreparedAgentCache
-} from "./chunk-RCSJFQPB.js";
+} from "./chunk-BQECZ3Q4.js";
 import {
   getReadableCliDb
 } from "./chunk-W4NVOSFF.js";
@@ -12,14 +12,14 @@ import {
   resolveAgentRecordFromHybridStore,
   sanitizeAgentRecordForCliOutput,
   writeAgentRecord
-} from "./chunk-SDJDLO5W.js";
+} from "./chunk-SBVUZC2E.js";
 import {
   resolveCliAgentKeyInput
 } from "./chunk-VHBWHNVT.js";
 import {
   parseUserIdFromAuthToken,
   resolveAuthToken
-} from "./chunk-ISNCLGUZ.js";
+} from "./chunk-AVMJVOQY.js";
 import {
   toErrorMessage
 } from "./chunk-HNMXYYJR.js";

package/{chunk-N54XAP77.js → chunk-FVVST32H.js}

@@ -1,7 +1,7 @@
 import {
   buildAgentRuntimeAgentLookupKeys,
   shouldFetchAgentRuntimeRecordRemotely
-} from "./chunk-O2ZNTTET.js";
+} from "./chunk-C4DZRHFJ.js";
 
 // packages/cli/client/localAgentRecords.ts
 var buildLocalAgentLookupKeys = buildAgentRuntimeAgentLookupKeys;

package/{chunk-P3PKED2I.js → chunk-FZ2G3I4B.js}

@@ -8,12 +8,12 @@ import {
 import {
   asOptionalFiniteNumber
 } from "./chunk-WWC7I6TA.js";
-import {
-  asOptionalTrimmedString
-} from "./chunk-G3SUCT4W.js";
 import {
   isRecord
 } from "./chunk-KUG52IAP.js";
+import {
+  asOptionalTrimmedString
+} from "./chunk-G3SUCT4W.js";
 
 // packages/agent-runtime/toolNameAliases.ts
 var LEGACY_TOOL_NAME_ALIASES = {
@@ -401,12 +401,6 @@ var DIALOG_PATH_RE = /^\/(?:space\/([^/]+)\/)?dialog-(.+)-([0-9A-HJKMNP-TV-Z]{26
 function stringToolParam(description) {
   return { type: "string", description };
 }
-function isNoloWorkspaceToolName(toolName) {
-  return typeof toolName === "string" && NOLO_WORKSPACE_TOOL_NAME_SET.has(toolName);
-}
-function filterNoloWorkspaceToolNames(toolNames) {
-  return (toolNames ?? []).filter(isNoloWorkspaceToolName);
-}
 function buildNoloWorkspaceOpenAiTools(args) {
   const toolNames = new Set(args.toolNames ?? []);
   const tools = [];
@@ -457,9 +451,13 @@ function buildNoloWorkspaceOpenAiTools(args) {
       description: "Confirmed dialog ids or dbKeys to delete."
     }
   }, ["query"]);
-  add("listAgents", "List the current user's agents in the Nolo workspace.", {
+  add("listAgents", "List the current user's agents as safe summaries; use readAgent to resolve the runnable agentKey before delegation.", {
     space: stringToolParam("Optional space id or URL."),
     publicOnly: { type: "boolean", description: "Only show public agents." }
+    // 端间差异（LOW-R2-3）：CLI 命令 `nolo agent list` 无 --limit（parseAgentListArgs
+    // 仅支持 --json/--public-only/--ids-only），本地缓存全量列出；web 端
+    // listAgentsFunc 另有 limit（默认 100，最大 500）。如后续对齐需在
+    // parseAgentListArgs / agentListCommands 增加 --limit 透传。
   });
   add("readAgent", "Read one agent config in the Nolo workspace.", {
     agent: stringToolParam("Agent key, id, alias, or URL.")
@@ -775,6 +773,7 @@ function buildNoloWorkspaceCommandArgs(call) {
       const space = noloStringArg(args.space);
       if (space) cliArgs.push("--space", space);
       if (args.publicOnly === true) cliArgs.push("--public-only");
+      cliArgs.push("--json", "--safe");
       return cliArgs;
     }
     case "readAgent": {
@@ -796,12 +795,12 @@ function buildNoloWorkspaceCommandArgs(call) {
     case "readDoc": {
       const doc = noloStringArg(args.doc ?? args.docKey ?? args.pageKey ?? args.key);
       if (!doc) throw new Error("readDoc requires doc.");
-      return ["doc", "read", doc];
+      return doc.startsWith("page-") ? ["doc", "read", "--key", doc] : ["doc", "read", "--id", doc];
     }
     case "readSkillDoc": {
       const doc = noloStringArg(args.doc ?? args.docKey ?? args.pageKey ?? args.key);
       if (!doc) throw new Error("readSkillDoc requires doc.");
-      return ["skill-doc", "read", doc];
+      return doc.startsWith("page-") ? ["skill-doc", "read", "--key", doc] : ["skill-doc", "read", "--id", doc];
     }
     case "loadSkill":
       throw new Error("loadSkill is a local-fs tool and has no CLI mapping; wire buildLoadSkillExecutor instead.");
@@ -944,7 +943,6 @@ export {
   resolveExecutableOnPath,
   createGlob,
   NOLO_WORKSPACE_TOOL_NAMES,
-  filterNoloWorkspaceToolNames,
   buildNoloWorkspaceOpenAiTools,
   parseNoloWorkspaceToolArguments,
   clampNoloPositiveInteger,

package/{chunk-AGFH73SK.js → chunk-G7KM6BBZ.js}

@@ -1,6 +1,6 @@
 import {
   canonicalizeToolNames
-} from "./chunk-P3PKED2I.js";
+} from "./chunk-FZ2G3I4B.js";
 import {
   asTrimmedString
 } from "./chunk-3EUW3WEO.js";