nolo-cli 0.90.0-alpha.1 → 0.91.1

package/{chunk-7MYYE7WX.js → chunk-B4PW6UAI.js}

@@ -7,7 +7,7 @@ import {
 import {
   clipMultilineText,
   fetchAndSerializeTable
-} from "./chunk-WXPVOQD7.js";
+} from "./chunk-6PELJ3DS.js";
 import {
   isGatewayHttpStatus
 } from "./chunk-NF64D32W.js";
@@ -17,37 +17,40 @@ import {
   normalizeNonNegativeMs,
   parseRetryAfterHeaderMs
 } from "./chunk-3L2WKC3W.js";
-import {
-  slateToSimplifiedMarkdown
-} from "./chunk-ZBT3WNBK.js";
 import {
   waitForAbortableDelay
 } from "./chunk-N4G4PKQ6.js";
+import {
+  resolvePageReadMarkdown,
+  slateToSimplifiedMarkdown
+} from "./chunk-BJUDYFV5.js";
 import {
   extractCategorizedMentions
 } from "./chunk-MEYIRKDN.js";
 import {
   fetchAndCacheMessages
-} from "./chunk-HMEMJ7GH.js";
+} from "./chunk-PAYUVQ6P.js";
 import {
   shouldUseServerProxy
 } from "./chunk-YYLHWIW6.js";
 import {
   fetchServerSyncedCredential
-} from "./chunk-TVNI5FLG.js";
+} from "./chunk-46CRK7XP.js";
 import {
   buildSkillGuidancePromptBlock,
   extractRuntimePageCapabilities,
   resolveBuiltinSkillPage,
   resolveSkillGraphFromRoots
-} from "./chunk-2ADBVBEM.js";
+} from "./chunk-55VQ4OPL.js";
 import {
+  DELETE_SAFETY_RED_LINE,
   buildIdentityBlock,
   buildRuntimeGuidanceBlocks,
   compileContextLayers,
+  detectDispatchIntentFromMessages,
   normalizeChatCompletionsBodyForProvider,
   resolveToolGuidedSections
-} from "./chunk-N3OAPEZE.js";
+} from "./chunk-HBTA2SGQ.js";
 import {
   convertMessagesToResponsesInput,
   getUsageRequestOptions,
@@ -57,29 +60,32 @@ import {
 import {
   ANTIGRAVITY_CLOUD_CODE_BASE_URL,
   isAntigravityOAuthAgent
-} from "./chunk-MJHQ3NRV.js";
+} from "./chunk-ISHYYQJC.js";
 import {
   buildProviderAuthHeaders
-} from "./chunk-K7M3MWCE.js";
+} from "./chunk-OOSVFT6S.js";
 import {
   estimateTokenCount
 } from "./chunk-PSCNXBYA.js";
+import {
+  createFileCredentialBroker
+} from "./chunk-ESRMFY7G.js";
 import {
   isOpenAiResponsesModel,
   resolvePlatformChatCompletionsEndpoint,
   resolvePlatformResponsesEndpoint
-} from "./chunk-ND2J3NRB.js";
+} from "./chunk-ZGJLSHER.js";
+import {
+  toErrorMessage
+} from "./chunk-HNMXYYJR.js";
 import {
   clampReasoningEffort,
   getModelConfig,
   isModelSupportReasoningEffort
-} from "./chunk-VRLI2WNW.js";
-import {
-  createFileCredentialBroker
-} from "./chunk-HVURBGF3.js";
+} from "./chunk-ZI2MEZMT.js";
 import {
-  toErrorMessage
-} from "./chunk-HNMXYYJR.js";
+  createSpaceKey
+} from "./chunk-UAD2WT54.js";
 import {
   MEMORY_USE_GUIDANCE,
   buildUserResponseLanguageContext,
@@ -93,28 +99,25 @@ import {
   isFireworksKimiModel,
   isPlatformMimoProviderModel,
   resolveFireworksKimiModel
-} from "./chunk-ASGDO77C.js";
-import {
-  createSpaceKey
-} from "./chunk-UAD2WT54.js";
+} from "./chunk-Q67DOFOO.js";
 import {
   read
-} from "./chunk-UA5S3LQQ.js";
+} from "./chunk-QALRKMHF.js";
 import {
   asTrimmedLowercaseString
 } from "./chunk-QSJ3HFEF.js";
-import {
-  extractCustomId
-} from "./chunk-GII32WZW.js";
 import {
   getRuntimeServerContext
-} from "./chunk-UKWGR5SS.js";
+} from "./chunk-AUXHZ2M5.js";
 import {
   isAbortError
 } from "./chunk-QOKAKDPE.js";
 import {
   isRecord
 } from "./chunk-KUG52IAP.js";
+import {
+  extractCustomId
+} from "./chunk-M2EJHDJP.js";
 import {
   asTrimmedString
 } from "./chunk-3EUW3WEO.js";
@@ -619,7 +622,9 @@ var buildSystemPromptContext = (options) => {
 ${mainPrompt}` : "";
   const agentTools = canonicalizeToolNames(agentConfig.tools ?? []);
   const hasAskTool = agentTools.includes("ask_user");
-  const toolSections = resolveToolGuidedSections(agentTools);
+  const toolSections = resolveToolGuidedSections(agentTools, {
+    dispatchIntent: options.dispatchIntent === true
+  });
   const {
     startupProtocol,
     contextLayerContract,
@@ -645,6 +650,14 @@ ${contexts.userGlobalPrompt.trim()} ` : "";
   const dialogSummarySection = contexts.dialogSummary?.trim() ? `--- \u5386\u53F2\u5BF9\u8BDD\u6458\u8981 ---
 ${wrapHistoricalSummaryWithReplayGuard(contexts.dialogSummary)}` : "";
   return compileContextLayers([
+    // 删除安全红线：系统层最高优先级约束，位于所有层之前（含身份信息），
+    // owner 要求常驻「根本提示词」的最顶部（2026-09-26 批量误删事故）。
+    {
+      id: "delete-safety-red-line",
+      owner: "platform",
+      cacheScope: "static",
+      content: DELETE_SAFETY_RED_LINE
+    },
     { id: "identity", owner: "platform", cacheScope: "session", content: identitySection },
     { id: "user-response-language", owner: "platform", cacheScope: "session", content: buildUserResponseLanguageContext({ language: safeLanguage }) },
     { id: "startup-protocol", owner: "platform", cacheScope: "static", content: startupProtocol },
@@ -652,6 +665,7 @@ ${wrapHistoricalSummaryWithReplayGuard(contexts.dialogSummary)}` : "";
     { id: "tool-round-economy", owner: "platform", cacheScope: "session", content: toolSections.toolRoundEconomy },
     { id: "tool-use-guidance", owner: "platform", cacheScope: "session", content: toolSections.toolUseGuidance },
     { id: "privilege-escalation", owner: "platform", cacheScope: "session", content: toolSections.privilegeEscalation },
+    { id: "shell-task-lifecycle", owner: "platform", cacheScope: "session", content: toolSections.shellTaskLifecycle },
     { id: "agent-orchestration", owner: "platform", cacheScope: "session", content: toolSections.agentOrchestration },
     { id: "agent-collaboration", owner: "platform", cacheScope: "session", content: toolSections.agentCollaboration },
     { id: "web-access", owner: "platform", cacheScope: "session", content: toolSections.webAccess },
@@ -699,8 +713,9 @@ var applyClaudeCache = (stableContent, dynamicContent) => {
 var prependPromptMessage = (messages, agentConfig, resolvedModel, language, contexts, prependSystemPrompt = true) => {
   if (!prependSystemPrompt) return messages;
   if (!contexts && !agentConfig.prompt) return messages;
+  const dispatchIntent = detectDispatchIntentFromMessages(messages);
   if (isClaudeModel(resolvedModel)) {
-    const compiled = buildSystemPromptContext({ agentConfig, language, contexts });
+    const compiled = buildSystemPromptContext({ agentConfig, language, contexts, dispatchIntent });
     if (!compiled.content.trim()) return messages;
     const content = applyClaudeCache(
       compiled.stablePrefixContent,
@@ -709,7 +724,7 @@ var prependPromptMessage = (messages, agentConfig, resolvedModel, language, cont
     const systemMessage2 = { role: "system", content };
     return [systemMessage2, ...messages];
   }
-  const promptContent = buildSystemPrompt({ agentConfig, language, contexts });
+  const promptContent = buildSystemPrompt({ agentConfig, language, contexts, dispatchIntent });
   if (!promptContent.trim()) return messages;
   const systemMessage = { role: "system", content: promptContent };
   return [systemMessage, ...messages];
@@ -772,8 +787,13 @@ var buildRequestBody = (options) => {
     endpoint: customProviderUrl
   });
   Object.assign(bodyData, usageRequestOptions);
-  if (reasoning_effort && isModelSupportReasoningEffort(model)) {
-    const clamped = clampReasoningEffort(reasoning_effort, providerName);
+  const effectiveProviderForReasoning = providerName?.toLowerCase() === "openrouter" || customProviderUrl?.toLowerCase().includes("openrouter.ai") ? "openrouter" : providerName;
+  if (reasoning_effort && isModelSupportReasoningEffort(model, effectiveProviderForReasoning)) {
+    const clamped = clampReasoningEffort(
+      reasoning_effort,
+      effectiveProviderForReasoning,
+      model
+    );
     if (clamped) {
       bodyData.reasoning_effort = clamped;
     }
@@ -892,7 +912,9 @@ function generateResponseRequestBody(agentConfig, msgs, contexts, prependSystemP
     const promptContent = buildSystemPrompt({
       agentConfig,
       language,
-      contexts
+      contexts,
+      // 按当前用户输入检测派发意图：无意图只注入最小派发协议（安全硬门常在）。
+      dispatchIntent: detectDispatchIntentFromMessages(msgs)
     });
     body.instructions = promptContent;
   }
@@ -1788,12 +1810,17 @@ ${tableMd}
 `;
 };
 var fetchSlateReference = async (dbKey, refContent, dispatch, options) => {
-  if (!refContent?.slateData) return null;
+  const hasSlate = Array.isArray(refContent?.slateData) && refContent.slateData.length > 0;
+  const legacyContent = hasSlate ? null : resolvePageReadMarkdown(refContent).trim() || null;
+  if (!hasSlate && !legacyContent) return null;
   const title = refContent.title || `Untitled (${dbKey})`;
   let contentString;
   let contentType;
   const inlineMentionMeta = options.inlineMentionMeta ?? options.format === "simplified_markdown";
-  switch (options.format) {
+  if (legacyContent) {
+    contentType = "Markdown (legacy content)";
+    contentString = legacyContent;
+  } else switch (options.format) {
     case "text":
       contentType = "Plain Text";
       contentString = slateToText(refContent.slateData);

package/{chunk-4DRWWIOL.js → chunk-B7ANJQWZ.js}

@@ -4,11 +4,11 @@ import {
 import {
   patch,
   read
-} from "./chunk-UA5S3LQQ.js";
+} from "./chunk-QALRKMHF.js";
 import {
   DEVICE_LOCAL_OWNER_ID,
   isDeviceLocalSpaceBody
-} from "./chunk-UKWGR5SS.js";
+} from "./chunk-AUXHZ2M5.js";
 import {
   selectIdentityUserId
 } from "./chunk-SEJ5OS6F.js";

package/{chunk-XKQJJK4F.js → chunk-BAAKVSMZ.js}

@@ -1,19 +1,19 @@
 import {
   readDbRecord,
   writeAgentRecord
-} from "./chunk-UTCCPWB2.js";
+} from "./chunk-RZ6CQZB2.js";
 import {
   buildSkillSummaryMarker
 } from "./chunk-VF4K2QE6.js";
+import {
+  createSpaceKey
+} from "./chunk-UAD2WT54.js";
 import {
   parseUserIdFromAuthToken,
   readOption,
   resolveAuthToken,
   resolveServerUrl
 } from "./chunk-A7GB5UGH.js";
-import {
-  createSpaceKey
-} from "./chunk-UAD2WT54.js";
 import {
   asTrimmedLowercaseString
 } from "./chunk-QSJ3HFEF.js";

package/{chunk-FQYMLZ6C.js → chunk-BFCXG6AJ.js}

@@ -9,29 +9,29 @@ import {
   initReactI18next,
   instance,
   toast
-} from "./chunk-HMEMJ7GH.js";
+} from "./chunk-PAYUVQ6P.js";
 import {
   require_date_fns
 } from "./chunk-M76ECQRD.js";
 import {
   require_react
 } from "./chunk-YDH3FDFQ.js";
-import {
-  isSystemAdmin
-} from "./chunk-RZANZZL2.js";
-import {
-  asRecordOrEmpty
-} from "./chunk-KX6YBIHG.js";
 import {
   UNCATEGORIZED_ID,
   addContentAction,
   checkSpaceMembership,
   localSpaceAuthorityPatchStamp
-} from "./chunk-4DRWWIOL.js";
+} from "./chunk-B7ANJQWZ.js";
 import {
   createSpaceKey,
   normalizeSpaceId
 } from "./chunk-UAD2WT54.js";
+import {
+  isSystemAdmin
+} from "./chunk-QDSINZM3.js";
+import {
+  asRecordOrEmpty
+} from "./chunk-KX6YBIHG.js";
 import {
   patch,
   read,
@@ -41,7 +41,7 @@ import {
   uploadFileAction,
   upsertSSREntity,
   write
-} from "./chunk-UA5S3LQQ.js";
+} from "./chunk-QALRKMHF.js";
 import {
   SEPARATOR,
   asTrimmedNonEmptyStringArray,
@@ -53,13 +53,10 @@ import {
   rowKey,
   splitKey,
   ulid
-} from "./chunk-VMFTFOWF.js";
+} from "./chunk-3AH7LNUB.js";
 import {
   asOptionalFiniteNumber
 } from "./chunk-WWC7I6TA.js";
-import {
-  extractUserId
-} from "./chunk-GII32WZW.js";
 import {
   DEVICE_LOCAL_OWNER_ID,
   createAsyncThunk,
@@ -68,7 +65,7 @@ import {
   resolveReplicationServers,
   scheduleDeleteReplication,
   scheduleWriteReplication
-} from "./chunk-UKWGR5SS.js";
+} from "./chunk-AUXHZ2M5.js";
 import {
   createClientLogger,
   isAbortError
@@ -82,6 +79,9 @@ import {
 import {
   isRecord
 } from "./chunk-KUG52IAP.js";
+import {
+  extractUserId
+} from "./chunk-M2EJHDJP.js";
 import {
   asTrimmedString
 } from "./chunk-3EUW3WEO.js";
@@ -1453,11 +1453,11 @@ var ENTITY_DELETE_STRATEGIES = {
     await dispatch(deleteTable({ dbKey: key })).unwrap();
   },
   file: async (key, { thunkAPI }) => {
-    const { deleteFileAction } = await import("./deleteFile-YG6QMJLU.js");
+    const { deleteFileAction } = await import("./deleteFile-UEAD5A5Z.js");
     await deleteFileAction(key, thunkAPI);
   },
   image: async (key, { thunkAPI }) => {
-    const { deleteFileAction } = await import("./deleteFile-YG6QMJLU.js");
+    const { deleteFileAction } = await import("./deleteFile-UEAD5A5Z.js");
     await deleteFileAction(key, thunkAPI);
   },
   agent: async (key, { dispatch, userId, sourceServerOrigin }) => {

package/{chunk-ZBT3WNBK.js → chunk-BJUDYFV5.js}

@@ -153,6 +153,13 @@ function slateToSimplifiedMarkdown(nodes, options = {}) {
 }
 
 // packages/ai/tools/readDocTool.ts
+var resolvePageReadMarkdown = (pageData) => {
+  const slateData = pageData.slateData;
+  if (Array.isArray(slateData) && slateData.length > 0) {
+    return slateToSimplifiedMarkdown(slateData);
+  }
+  return typeof pageData.content === "string" ? pageData.content : "";
+};
 var readDocFunctionSchema = {
   name: "readDoc",
   description: [
@@ -175,7 +182,7 @@ var readPageFunctionSchema = {
   name: "readPage"
 };
 var buildReadDocResult = (pageData) => {
-  const markdownContent = slateToSimplifiedMarkdown(pageData.slateData || []);
+  const markdownContent = resolvePageReadMarkdown(pageData);
   const rawData = {
     success: true,
     id: pageData.dbKey,
@@ -199,7 +206,7 @@ async function readDocFunc(args, thunkApi) {
     throw new Error(`\u65E0\u6548\u7684\u9875\u9762 ID: ${id}\u3002\u9875\u9762 ID \u901A\u5E38\u4EE5 "page-" \u5F00\u5934\u3002`);
   }
   try {
-    const { readAction } = await import("./read-M2Q6WEKB.js");
+    const { readAction } = await import("./read-IEJLLUXY.js");
     const pageData = await readAction({ dbKey: id }, thunkApi);
     if (!pageData) {
       throw new Error(`\u672A\u627E\u5230 ID \u4E3A ${id} \u7684\u9875\u9762\u3002`);
@@ -213,6 +220,7 @@ var readPageFunc = readDocFunc;
 
 export {
   slateToSimplifiedMarkdown,
+  resolvePageReadMarkdown,
   readDocFunctionSchema,
   readPageFunctionSchema,
   buildReadDocResult,

package/chunk-BMQ2MJUK.js

@@ -0,0 +1,153 @@
+import {
+  isRecord
+} from "./chunk-KUG52IAP.js";
+
+// packages/core/chat/validationUrl.ts
+function safeUrl(raw) {
+  if (typeof raw !== "string") return void 0;
+  const trimmed = raw.trim();
+  if (!/^https?:\/\//i.test(trimmed)) return void 0;
+  try {
+    const parsed = new URL(trimmed);
+    if (parsed.protocol !== "http:" && parsed.protocol !== "https:") {
+      return void 0;
+    }
+    return parsed.href;
+  } catch {
+    return void 0;
+  }
+}
+function scanValidationDetails(details) {
+  if (!Array.isArray(details)) return {};
+  let url;
+  let text;
+  let learnMoreUrl;
+  for (const detail of details) {
+    if (url && learnMoreUrl) break;
+    if (!isRecord(detail)) continue;
+    const metadata = isRecord(detail.metadata) ? detail.metadata : void 0;
+    if (metadata) {
+      url = url ?? safeUrl(metadata.validation_url);
+      text = text ?? (typeof metadata.validation_url_link_text === "string" ? metadata.validation_url_link_text : void 0);
+      learnMoreUrl = learnMoreUrl ?? safeUrl(metadata.validation_learn_more_url);
+    }
+    const links = Array.isArray(detail.links) ? detail.links : [];
+    for (const link of links) {
+      if (!isRecord(link)) continue;
+      const linkUrl = safeUrl(link.url);
+      if (!linkUrl) continue;
+      const desc = typeof link.description === "string" ? link.description : "";
+      if (!url && /verify|continue/i.test(desc)) {
+        url = linkUrl;
+        text = text ?? desc;
+      } else if (!learnMoreUrl && /learn more/i.test(desc)) {
+        learnMoreUrl = linkUrl;
+      }
+    }
+  }
+  return { url, text, learnMoreUrl };
+}
+function unescapeJsonString(text) {
+  return text.replace(
+    /\\(["\\/nrtbf]|u[0-9a-fA-F]{4})/g,
+    (_match, esc) => {
+      switch (esc[0]) {
+        case "n":
+          return "\n";
+        case "r":
+          return "\r";
+        case "t":
+          return "	";
+        case "b":
+          return "\b";
+        case "f":
+          return "\f";
+        case "u":
+          return String.fromCharCode(parseInt(esc.slice(1), 16));
+        default:
+          return esc;
+      }
+    }
+  );
+}
+function sliceBalancedJsonObject(text) {
+  const start = text.indexOf("{");
+  if (start < 0) return void 0;
+  let depth = 0;
+  let inString = false;
+  let escaped = false;
+  for (let i = start; i < text.length; i += 1) {
+    const ch = text[i];
+    if (inString) {
+      if (escaped) escaped = false;
+      else if (ch === "\\") escaped = true;
+      else if (ch === '"') inString = false;
+      continue;
+    }
+    if (ch === '"') inString = true;
+    else if (ch === "{") depth += 1;
+    else if (ch === "}") {
+      depth -= 1;
+      if (depth === 0) return text.slice(start, i + 1);
+    }
+  }
+  return void 0;
+}
+function parseBalancedJson(text) {
+  const slice = sliceBalancedJsonObject(text);
+  if (!slice) return void 0;
+  try {
+    return JSON.parse(slice);
+  } catch {
+    return void 0;
+  }
+}
+function findValidationInParsed(parsed, depth = 0) {
+  if (depth > 3 || !isRecord(parsed)) return {};
+  const err = isRecord(parsed.error) ? parsed.error : parsed;
+  const fromDetails = scanValidationDetails(isRecord(err) ? err.details : void 0);
+  if (fromDetails.url) return fromDetails;
+  const nested = isRecord(err) ? err.message : void 0;
+  if (typeof nested === "string" && nested.trim().startsWith("{")) {
+    try {
+      const reparsed = findValidationInParsed(JSON.parse(nested), depth + 1);
+      if (reparsed.url) return reparsed;
+    } catch {
+    }
+  }
+  return {};
+}
+function stripTerminalControlChars(raw) {
+  return raw.replace(/[\u0000-\u001f\u007f]/g, "");
+}
+function regexValidationFallback(text) {
+  const urlMatch = text.match(
+    /validation_url[^h]{0,10}(https?:\/\/[^\s"\\]+)/i
+  );
+  if (!urlMatch) return {};
+  const textMatch = text.match(
+    /validation_url_link_text[^A-Za-z]{0,10}([^"\\\n]{1,60})/i
+  );
+  return {
+    // safeUrl first (normalizes C0 into %XX); fall back to stripping controls
+    // so a truncated-but-real link is still emitted rather than dropped.
+    url: safeUrl(urlMatch[1]) ?? stripTerminalControlChars(urlMatch[1]),
+    text: textMatch?.[1] ? stripTerminalControlChars(textMatch[1].trim()) || void 0 : void 0
+  };
+}
+function extractGoogleValidationLink(errorText) {
+  for (const candidate of [
+    parseBalancedJson(errorText),
+    parseBalancedJson(unescapeJsonString(errorText))
+  ]) {
+    if (candidate === void 0) continue;
+    const found = findValidationInParsed(candidate);
+    if (found.url) return found;
+  }
+  return regexValidationFallback(errorText);
+}
+
+export {
+  scanValidationDetails,
+  extractGoogleValidationLink
+};