nolo-cli 0.9.1 → 0.11.0

package/{chunk-6GANEXVO.js → chunk-5OIFWVX7.js}

@@ -1,7 +1,7 @@
 import {
   DEFAULT_AGENT_BASE_POLICY,
   DEFAULT_USER_PREFERENCE_PROFILE
-} from "./chunk-TSS3XJY4.js";
+} from "./chunk-3NSIQZZ6.js";
 
 // packages/ai/policy/runtimePolicy.ts
 var clampLevel = (value, fallback) => {

package/{chunk-MGOJ5R6J.js → chunk-7D3JY6C2.js}

@@ -4,12 +4,12 @@ import {
 import {
   patch,
   read
-} from "./chunk-COMXDWNM.js";
+} from "./chunk-O26GI2JP.js";
 import {
   DEVICE_LOCAL_OWNER_ID,
   isDeviceLocalSpaceBody,
   selectIdentityUserId
-} from "./chunk-EYEEHCU4.js";
+} from "./chunk-OOM6SJNR.js";
 
 // packages/create/space/utils/permissions.ts
 var checkSpaceMembership = (spaceData, userId) => {

package/{chunk-7OOXPE3N.js → chunk-AEZAORLG.js}

@@ -2,7 +2,7 @@ import {
   buildLocalAgentLookupKeys,
   normalizeAgentHandle,
   shouldReadAgentKeyRemotely
-} from "./chunk-2PUGVR6E.js";
+} from "./chunk-C2MDQQ4O.js";
 import {
   resolveCliAgentKeyInput
 } from "./chunk-VHBWHNVT.js";
@@ -10,6 +10,9 @@ import {
   readPipeText,
   spawnProcess
 } from "./chunk-IDZTNRP2.js";
+import {
+  createAgentKey
+} from "./chunk-O4BU24WZ.js";
 import {
   parseUserIdFromAuthToken,
   readOption,
@@ -20,9 +23,6 @@ import {
 import {
   toErrorMessage
 } from "./chunk-HNMXYYJR.js";
-import {
-  createAgentKey
-} from "./chunk-SH2CFQOH.js";
 
 // packages/cli/agentRecordHelpers.ts
 import { readFileSync } from "node:fs";

package/chunk-AFON4QUU.js

@@ -0,0 +1,112 @@
+import {
+  buildSkillDiscoveryLayer
+} from "./chunk-C4FTUXVF.js";
+import {
+  load
+} from "./chunk-WZSRQNQG.js";
+
+// packages/agent-runtime/skillDiscovery.ts
+import { existsSync, readFileSync, readdirSync, statSync } from "node:fs";
+import { join } from "node:path";
+var SKILL_SCAN_DIRS = [".agents/skills", "docs/skills"];
+var MAX_DISCOVERED_SKILLS = 50;
+function parseSkillFrontmatter(filePath) {
+  try {
+    const content = readFileSync(filePath, "utf8").slice(0, 2048);
+    const fmMatch = content.match(/^---\n([\s\S]*?)\n---/);
+    if (!fmMatch) return {};
+    const fm = load(fmMatch[1]);
+    if (!fm || typeof fm !== "object") return {};
+    const name = typeof fm.name === "string" ? fm.name : void 0;
+    const rawDesc = fm.description;
+    const description = typeof rawDesc === "string" ? rawDesc : rawDesc == null ? void 0 : String(rawDesc);
+    const sanitize = (s) => s?.trim().replace(/^["']|["']$/g, "").replace(/[\n\r]+/g, " ").slice(0, 200);
+    return { name: sanitize(name), description: sanitize(description) };
+  } catch {
+    return {};
+  }
+}
+function discoverSkills(cwd) {
+  const skills = [];
+  for (const dir of SKILL_SCAN_DIRS) {
+    if (skills.length >= MAX_DISCOVERED_SKILLS) break;
+    const absDir = join(cwd, dir);
+    if (!existsSync(absDir) || !statSync(absDir).isDirectory()) continue;
+    try {
+      for (const entry of readdirSync(absDir)) {
+        if (skills.length >= MAX_DISCOVERED_SKILLS) break;
+        const skillMdPath = join(absDir, entry, "SKILL.md");
+        if (existsSync(skillMdPath)) {
+          const { name, description } = parseSkillFrontmatter(skillMdPath);
+          skills.push({ name: name ?? entry, description: description ?? "", relativePath: join(dir, entry, "SKILL.md") });
+          continue;
+        }
+        if (dir === "docs/skills" && entry.endsWith(".md")) {
+          const flatPath = join(absDir, entry);
+          const { name, description } = parseSkillFrontmatter(flatPath);
+          skills.push({ name: name ?? entry.replace(/\.md$/, ""), description: description ?? "", relativePath: join(dir, entry) });
+        }
+      }
+    } catch {
+    }
+  }
+  return skills;
+}
+function resolveSkillByName(cwd, name) {
+  const trimmed = name.trim();
+  if (!trimmed || trimmed.includes("/") || trimmed.includes("\\") || trimmed.includes("..")) {
+    return null;
+  }
+  const agentsDir = join(cwd, ".agents", "skills", trimmed);
+  const agentsSkillMd = join(agentsDir, "SKILL.md");
+  if (existsSync(agentsSkillMd)) return agentsSkillMd;
+  const agentsParent = join(cwd, ".agents", "skills");
+  if (existsSync(agentsParent) && statSync(agentsParent).isDirectory()) {
+    try {
+      for (const entry of readdirSync(agentsParent)) {
+        const candidate = join(agentsParent, entry, "SKILL.md");
+        if (!existsSync(candidate)) continue;
+        try {
+          const { name: fmName } = parseSkillFrontmatter(candidate);
+          if (fmName && fmName === trimmed) return candidate;
+        } catch {
+        }
+      }
+    } catch {
+    }
+  }
+  const docsFlat = join(cwd, "docs", "skills", `${trimmed}.md`);
+  if (existsSync(docsFlat)) return docsFlat;
+  const docsDir = join(cwd, "docs", "skills");
+  if (existsSync(docsDir) && statSync(docsDir).isDirectory()) {
+    try {
+      for (const entry of readdirSync(docsDir)) {
+        if (!entry.endsWith(".md")) continue;
+        const candidate = join(docsDir, entry);
+        try {
+          const { name: fmName } = parseSkillFrontmatter(candidate);
+          if (fmName && fmName === trimmed) return candidate;
+        } catch {
+        }
+      }
+    } catch {
+    }
+  }
+  return null;
+}
+function buildSkillDiscoveryContextBlock(cwd) {
+  try {
+    const discovered = discoverSkills(cwd);
+    const layer = buildSkillDiscoveryLayer(discovered, cwd);
+    return layer?.content ?? null;
+  } catch {
+    return null;
+  }
+}
+
+export {
+  parseSkillFrontmatter,
+  discoverSkills,
+  resolveSkillByName,
+  buildSkillDiscoveryContextBlock
+};

package/{chunk-YBWOP46I.js → chunk-BX6U3ETE.js}

@@ -5,10 +5,10 @@ import {
   readSseFrames,
   throwIfChatCompletionStreamFailed,
   toOpenAiCompatibleMessages
-} from "./chunk-5KLGBAAR.js";
+} from "./chunk-ZPRK73XY.js";
 import {
   parseToolArgumentsJson
-} from "./chunk-XS466O7S.js";
+} from "./chunk-S3GS2PRL.js";
 import {
   createThinkParserState,
   extractThinkContent
@@ -16,21 +16,18 @@ import {
 import {
   buildProviderAuthHeaders,
   buildProviderExecutionPlan
-} from "./chunk-JRKKFRAV.js";
+} from "./chunk-YTBMA7NO.js";
 import {
   canonicalizeToolName,
   createGlob,
   resolveExecutableOnPath
-} from "./chunk-AUQ747NZ.js";
-import {
-  toErrorMessage
-} from "./chunk-HNMXYYJR.js";
+} from "./chunk-4SOKXIW4.js";
 import {
   asRecordOrEmpty
 } from "./chunk-KX6YBIHG.js";
 import {
   dialogMessageKey
-} from "./chunk-SH2CFQOH.js";
+} from "./chunk-O4BU24WZ.js";
 import {
   asTrimmedNonEmptyStringArray
 } from "./chunk-I42VC5KR.js";
@@ -40,21 +37,24 @@ import {
 import {
   asTrimmedLowercaseString
 } from "./chunk-QSJ3HFEF.js";
+import {
+  toErrorMessage
+} from "./chunk-HNMXYYJR.js";
 import {
   asTrimmedString
 } from "./chunk-3EUW3WEO.js";
 import {
   asOptionalPositiveFiniteNumber
 } from "./chunk-U6VC4MU4.js";
+import {
+  isRecord
+} from "./chunk-KUG52IAP.js";
 import {
   normalizeServerOrigin
 } from "./chunk-CF7PE763.js";
 import {
   asOptionalTrimmedString
 } from "./chunk-G3SUCT4W.js";
-import {
-  isRecord
-} from "./chunk-KUG52IAP.js";
 
 // packages/agent-runtime/kimiUserAgent.ts
 var KIMI_CODE_CLI_VERSION = "0.29.2";
@@ -878,7 +878,14 @@ var DEFAULT_LOCAL_TOOLS = /* @__PURE__ */ new Set([
   "searchFiles",
   "execShell",
   "launchProcess",
-  "listProcesses"
+  "listProcesses",
+  // Scheduling tools: forking/observing sub-agents is a declared capability
+  // of capable agents, and the blast radius is strictly narrower than
+  // execShell (already default-enabled). Requiring an env allowlist for these
+  // while execShell is open by default inverted the risk model and forced every
+  // new local user to hand-edit .env files before sub-agent tasks worked.
+  "startAgentRun",
+  "controlAgentRun"
 ]);
 function parseToolAllowlist(value) {
   return (value ?? "").split(",").flatMap((item) => {
@@ -951,7 +958,7 @@ function resolveLocalToolPolicy(args) {
   return {
     allowed: false,
     toolName,
-    reason: `${toolName} is not enabled for local runtime runs. Set NOLO_LOCAL_ALLOWED_TOOLS and make sure the agent declares the tool before using it locally.`
+    reason: `${toolName} is not enabled for local runtime runs. The agent must declare the tool in its manifest; in restricted mode (NOLO_LOCAL_TOOL_MODE=restricted) non-default tools also require adding to NOLO_LOCAL_ALLOWED_TOOLS (e.g. NOLO_LOCAL_ALLOWED_TOOLS=someCustomTool) and restarting the session so the env var loads.`
   };
 }
 async function executeLocalToolWithPolicy(args) {

package/{chunk-2PUGVR6E.js → chunk-C2MDQQ4O.js}

@@ -1,7 +1,7 @@
 import {
   buildAgentRuntimeAgentLookupKeys,
   shouldFetchAgentRuntimeRecordRemotely
-} from "./chunk-YBWOP46I.js";
+} from "./chunk-BX6U3ETE.js";
 
 // packages/cli/client/localAgentRecords.ts
 var buildLocalAgentLookupKeys = buildAgentRuntimeAgentLookupKeys;

package/{chunk-SL35K7AH.js → chunk-C4FTUXVF.js}

@@ -2,85 +2,6 @@ import {
   MEMORY_USE_GUIDANCE
 } from "./chunk-KKY4B2Q2.js";
 
-// packages/agent-runtime/modelLayerOverride.ts
-var MODEL_LAYER_KEYS = [
-  "provider",
-  "model",
-  "apiSource",
-  "cliProvider",
-  "useServerProxy",
-  "apiKey",
-  "apiKeyRef",
-  "apiKeyHeader",
-  "customProviderUrl",
-  "credentialRef",
-  "credentialSynced",
-  "temperature",
-  "top_p",
-  "frequency_penalty",
-  "presence_penalty",
-  "max_tokens",
-  "reasoning_effort",
-  "enableThinking",
-  "thinkingBudget"
-];
-function mergeReferences(base, extra) {
-  const safeBase = Array.isArray(base) ? base : [];
-  const safeExtra = Array.isArray(extra) ? extra : [];
-  const seen = /* @__PURE__ */ new Set();
-  const merged = [];
-  for (const item of [...safeBase, ...safeExtra]) {
-    const key = item?.dbKey;
-    if (key && seen.has(key)) continue;
-    if (key) seen.add(key);
-    if (item) merged.push(item);
-  }
-  return merged;
-}
-var asNonEmptyString = (value) => typeof value === "string" && value.trim().length > 0;
-function buildModelLayerOverride(agent) {
-  if (!agent || !asNonEmptyString(agent.provider) || !asNonEmptyString(agent.model)) {
-    return null;
-  }
-  const override = {
-    provider: agent.provider,
-    model: agent.model
-  };
-  for (const key of MODEL_LAYER_KEYS) {
-    if (key === "provider" || key === "model") continue;
-    const value = agent[key];
-    if (value !== void 0) {
-      override[key] = value;
-    }
-  }
-  if (Array.isArray(agent.references) && agent.references.length > 0) {
-    override.references = agent.references;
-  }
-  return override;
-}
-function applyModelLayerOverride(base, override) {
-  const next = { ...base };
-  for (const key of MODEL_LAYER_KEYS) {
-    delete next[key];
-  }
-  for (const key of MODEL_LAYER_KEYS) {
-    const value = override[key];
-    if (value !== void 0) {
-      next[key] = value;
-    }
-  }
-  const merged = mergeReferences(
-    base.references,
-    override.references
-  );
-  if (merged.length > 0) {
-    next.references = merged;
-  } else {
-    delete next.references;
-  }
-  return next;
-}
-
 // packages/agent-runtime/turnContext.ts
 var DEFAULT_RECENT_CONTENT_LIMIT = 10;
 var asTrimmed = (value) => typeof value === "string" ? value.trim() : "";
@@ -160,7 +81,8 @@ var buildSkillDiscoveryLayer = (skills, boundFolder) => {
   const lines = [
     "--- \u53EF\u7528\u6280\u80FD\uFF08Skills\uFF09---",
     `\u5DE5\u4F5C\u533A ${boundFolder} \u4E2D\u53D1\u73B0\u4E86 ${skills.length} \u4E2A\u6280\u80FD\uFF08SKILL.md\uFF09\uFF1A`,
-    "\u6A21\u578B\u53EF\u6309\u9700\u7528 readFile \u8BFB\u53D6\u4EE5\u4E0B\u6587\u4EF6\u83B7\u53D6\u8BE6\u7EC6\u6307\u4EE4\uFF1A",
+    "\u6A21\u578B\u53EF\u6309\u9700\u7528 loadSkill \u5DE5\u5177\u6309\u540D\u52A0\u8F7D\uFF0C\u628A SKILL.md \u5168\u6587\u62C9\u8FDB\u4E0A\u4E0B\u6587\u540E\u9075\u5FAA\u5176\u6307\u4EE4\uFF1B",
+    "\u5982 loadSkill \u4E0D\u53EF\u7528\u6216\u60F3\u76F4\u63A5\u8BFB\u53D6\u6587\u4EF6\uFF0C\u4E0B\u65B9 path \u4ECD\u53EF\u7528 readFile \u4F5C\u4E3A fallback\uFF1A",
     "",
     ...skills.map(
       (s) => `- ${s.name}: ${s.description}
@@ -216,8 +138,6 @@ var buildMemoryUseGuidanceLayer = (args) => {
 };
 
 export {
-  buildModelLayerOverride,
-  applyModelLayerOverride,
   buildSpaceContextLayer,
   buildSkillDiscoveryLayer,
   buildLinkedSpacesSection,

package/{chunk-GAKEBQD6.js → chunk-D6OQHXVG.js}

@@ -1,3 +1,11 @@
+// packages/core/drainReason.ts
+var CORE_DRAIN_REASON = "core_draining";
+
+// packages/core/gatewayHttpStatus.ts
+function isGatewayHttpStatus(status) {
+  return status === 502 || status === 503 || status === 504;
+}
+
 // packages/core/retryAfterMs.ts
 function normalizeNonNegativeMs(value, fallbackMs) {
   const parsed = Number(value);
@@ -18,13 +26,9 @@ function parseRetryAfterHeaderMs(value, nowMs = Date.now()) {
   return null;
 }
 
-// packages/core/gatewayHttpStatus.ts
-function isGatewayHttpStatus(status) {
-  return status === 502 || status === 503 || status === 504;
-}
-
 export {
+  CORE_DRAIN_REASON,
+  isGatewayHttpStatus,
   normalizeNonNegativeMs,
-  parseRetryAfterHeaderMs,
-  isGatewayHttpStatus
+  parseRetryAfterHeaderMs
 };

package/{chunk-WKM6FH35.js → chunk-DWGAEFJL.js}

@@ -2,7 +2,7 @@ import {
   deleteDbRecord,
   queryUserRecords,
   readDbRecord
-} from "./chunk-7OOXPE3N.js";
+} from "./chunk-AEZAORLG.js";
 import {
   mergeAndDedupUserData
 } from "./chunk-KQHGZWSV.js";

package/{chunk-PG5PNA7Y.js → chunk-E4HNJSHC.js}

@@ -1,16 +1,23 @@
-import {
-  chooseMemoryOwners,
-  loadMemoryCandidatesFromDb
-} from "./chunk-Q2YZULBH.js";
 import {
   addContentToSpace,
   prepareAndPersistMessage,
   uiAskChoiceFunc,
   uiAskChoiceFunctionSchema
-} from "./chunk-ZIG5LJ7X.js";
+} from "./chunk-5MOUAAMK.js";
 import {
   require_date_fns
 } from "./chunk-M76ECQRD.js";
+import {
+  read,
+  readAndWait,
+  removeCachedEntity,
+  upsertSSREntity,
+  write
+} from "./chunk-O26GI2JP.js";
+import {
+  chooseMemoryOwners,
+  loadMemoryCandidatesFromDb
+} from "./chunk-XENYHRUE.js";
 import {
   PLATFORM_HOSTED_GLM_52_MODEL,
   PLATFORM_HOSTED_GLM_PRICE
@@ -18,37 +25,30 @@ import {
 import {
   PLATFORM_HOSTED_KIMI_PROVIDER
 } from "./chunk-IWX4UW2E.js";
-import {
-  extractCustomId
-} from "./chunk-DFFIZ25G.js";
-import {
-  read,
-  readAndWait,
-  removeCachedEntity,
-  upsertSSREntity,
-  write
-} from "./chunk-COMXDWNM.js";
 import {
   createAgentKey,
   createDialogKey,
   createKey,
   dialogMessageRange
-} from "./chunk-SH2CFQOH.js";
+} from "./chunk-O4BU24WZ.js";
+import {
+  extractCustomId
+} from "./chunk-DFFIZ25G.js";
 import {
   selectIdentityUserId
-} from "./chunk-EYEEHCU4.js";
+} from "./chunk-OOM6SJNR.js";
 import {
   asTrimmedString
 } from "./chunk-3EUW3WEO.js";
 import {
   asOptionalPositiveFiniteNumber
 } from "./chunk-U6VC4MU4.js";
-import {
-  asOptionalTrimmedString
-} from "./chunk-G3SUCT4W.js";
 import {
   isRecord
 } from "./chunk-KUG52IAP.js";
+import {
+  asOptionalTrimmedString
+} from "./chunk-G3SUCT4W.js";
 import {
   __toESM
 } from "./chunk-4VNS5WPM.js";