nolo-cli 0.1.40 → 0.1.41

package/client/localRuntimeAdapter.ts

@@ -42,6 +42,8 @@ import {
   type HybridRecordStore,
 } from "./hybridRecordStore";
 import { executeLocalToolWithPolicy } from "./localToolPolicy";
+import { inferCaptureIntent } from "../ai/policy/runtimePolicy";
+import { prepareTools } from "../ai/tools/prepareTools";
 import { taskRunFunctionSchema } from "../ai/tools/agent/taskRunTool";
 import {
   MIMO_MONTH_AGENT_KEY,
@@ -56,6 +58,11 @@ import {
 } from "../agent-runtime/noloWorkspaceTools";
 import { executeCli as defaultExecuteCli, type CliExecuteResult, type CliImageInput } from "../ai/agent/cliExecutor";
 import { buildCliPrompt } from "../ai/agent/cliPrompt";
+import {
+  readXhsProfileFunc,
+  readXhsProfileFunctionSchema,
+} from "../ai/tools/readXhsProfileTool";
+import { resolveDefaultXhsProfileDir } from "../integrations/xhs-reader/bridge/readXhsProfileWithBridge";
 
 type EnvLike = Record<string, string | undefined>;
 type FetchInput = Parameters<typeof fetch>[0];
@@ -78,6 +85,14 @@ export const BUILTIN_NOLO_AGENT_ID = NOLO_DEFAULT_AGENT_ID;
 export const BUILTIN_NOLO_AGENT_KEY = NOLO_DEFAULT_AGENT_KEY;
 const CLI_DIR = dirname(fileURLToPath(import.meta.url));
 const CLI_ENTRYPOINT = join(CLI_DIR, "..", "index.ts");
+const LOCAL_SERVER_TABLE_TOOL_NAMES = [
+  "createTable",
+  "addTableRow",
+  "addTableRows",
+  "updateTableRow",
+  "updateTableRows",
+] as const;
+const LOCAL_SERVER_TABLE_TOOL_NAME_SET = new Set<string>(LOCAL_SERVER_TABLE_TOOL_NAMES);
 
 export type CliLocalRuntimeDb = CliKvDb;
 
@@ -91,6 +106,7 @@ export type CliLocalRuntimeAdapterDeps = {
   cwd?: string;
   output?: { write(chunk: string): unknown };
   localToolExecutors?: Record<string, (call: any) => Promise<{ content: string; metadata?: Record<string, unknown> }>>;
+  readXhsProfile?: typeof readXhsProfileFunc;
   executeCli?: LocalCliExecutor;
   sleep?: (ms: number) => Promise<void>;
   loopbackRequest?: (input: FetchInput, init?: FetchInit) => Promise<Response>;
@@ -235,12 +251,14 @@ function buildRequestTimeoutSignal(timeoutMs?: number) {
   if (typeof timeoutMs !== "number" || !Number.isFinite(timeoutMs) || timeoutMs <= 0) {
     return undefined;
   }
-  if (typeof AbortSignal !== "undefined" && typeof AbortSignal.timeout === "function") {
-    return AbortSignal.timeout(timeoutMs);
-  }
   const controller = new AbortController();
-  setTimeout(() => controller.abort(new Error(`request timed out after ${timeoutMs}ms`)), timeoutMs);
-  return controller.signal;
+  const timeout = setTimeout(() => {
+    controller.abort(new Error(`request timed out after ${timeoutMs}ms`));
+  }, timeoutMs);
+  return {
+    signal: controller.signal,
+    clear: () => clearTimeout(timeout),
+  };
 }
 
 function summarizeEndpoint(value: unknown) {
@@ -383,12 +401,17 @@ function buildLocalPolicyToolNames(args: { toolNames?: string[]; env: EnvLike })
       exposeShellTools: true,
     }),
     ...((args.toolNames ?? []).includes("taskRun") ? ["taskRun"] : []),
+    ...((args.toolNames ?? []).includes("read_xhs_profile") ? ["read_xhs_profile"] : []),
+    ...(args.toolNames ?? []).filter((name) => LOCAL_SERVER_TABLE_TOOL_NAME_SET.has(name)),
     ...filterNoloWorkspaceToolNames(args.toolNames),
   ];
 }
 
 function buildServerPlatformOpenAiTools(args: { toolNames?: string[] }) {
   const toolNames = new Set(args.toolNames ?? []);
+  const tableTools = prepareTools(
+    (args.toolNames ?? []).filter((name) => LOCAL_SERVER_TABLE_TOOL_NAME_SET.has(name)),
+  );
   return [
     ...(toolNames.has("taskRun")
       ? [{
@@ -396,6 +419,13 @@ function buildServerPlatformOpenAiTools(args: { toolNames?: string[] }) {
           function: taskRunFunctionSchema,
         }]
       : []),
+    ...(toolNames.has("read_xhs_profile")
+      ? [{
+          type: "function",
+          function: readXhsProfileFunctionSchema,
+        }]
+      : []),
+    ...tableTools,
   ];
 }
 
@@ -467,29 +497,72 @@ function buildServerPlatformToolExecutors(args: {
   env: EnvLike;
   fetchImpl: typeof fetch;
 }) {
+  const postServer = async (path: string, body: object) => {
+    const serverUrl = resolveRuntimeServerUrl(args.env);
+    const authToken = resolveRuntimeAuthToken(args.env);
+    if (!serverUrl) throw new Error("server platform tools require NOLO_SERVER_URL, NOLO_SERVER, or BASE_URL.");
+    if (!authToken) throw new Error("server platform tools require AUTH_TOKEN or NOLO_MACHINE_API_KEY.");
+    const response = await args.fetchImpl(`${serverUrl}${path}`, {
+      method: "POST",
+      headers: {
+        "Content-Type": "application/json",
+        Authorization: `Bearer ${authToken}`,
+      },
+      body: JSON.stringify(body),
+    });
+    const text = await response.text().catch(() => "");
+    if (!response.ok) {
+      throw new Error(`server platform tool bridge failed: HTTP ${response.status} ${text.slice(0, 500)}`);
+    }
+    return text;
+  };
+  const guardExplicitTableCapture = (call: any) => {
+    if (inferCaptureIntent(String(call.userInput ?? "")) === "strong") return null;
+    return JSON.stringify({
+      error: "knowledge_capture_requires_confirmation",
+      message:
+        "当前本地运行不允许自动写入表格。只有当用户在当前请求里明确要求保存、建表、写入 table 或做成数据集时，才能继续；否则请先询问用户。",
+      policy: {
+        capability: "knowledge_capture",
+        target: "table",
+        mode: "explicit-only-local",
+      },
+    });
+  };
+  const tableExecutors = Object.fromEntries(
+    LOCAL_SERVER_TABLE_TOOL_NAMES.map((toolName) => [
+      toolName,
+      async (call: any) => {
+        const blocked = guardExplicitTableCapture(call);
+        if (blocked) {
+          return {
+            content: blocked,
+            metadata: { serverPlatformTool: true, tableWriteBlocked: true },
+          };
+        }
+        const parsed = parseNoloWorkspaceToolArguments(call.arguments);
+        const path =
+          toolName === "createTable" ? "/api/table/create"
+          : toolName === "addTableRow" ? "/api/table/add-row"
+          : toolName === "addTableRows" ? "/api/table/add-rows"
+          : toolName === "updateTableRow" ? "/api/table/update-row"
+          : "/api/table/update-rows";
+        const content = await postServer(path, parsed);
+        return {
+          content,
+          metadata: { serverPlatformTool: true, tableWrite: true },
+        };
+      },
+    ]),
+  );
   return {
     taskRun: async (call: any) => {
-      const serverUrl = resolveRuntimeServerUrl(args.env);
-      const authToken = resolveRuntimeAuthToken(args.env);
-      if (!serverUrl) throw new Error("taskRun requires NOLO_SERVER_URL, NOLO_SERVER, or BASE_URL.");
-      if (!authToken) throw new Error("taskRun requires AUTH_TOKEN or NOLO_MACHINE_API_KEY.");
-      const response = await args.fetchImpl(`${serverUrl}/api/task-run`, {
-        method: "POST",
-        headers: {
-          "Content-Type": "application/json",
-          Authorization: `Bearer ${authToken}`,
-        },
-        body: JSON.stringify(parseNoloWorkspaceToolArguments(call.arguments)),
-      });
-      const text = await response.text().catch(() => "");
-      if (!response.ok) {
-        throw new Error(`taskRun bridge failed: HTTP ${response.status} ${text.slice(0, 500)}`);
-      }
       return {
-        content: text,
+        content: await postServer("/api/task-run", parseNoloWorkspaceToolArguments(call.arguments)),
         metadata: { serverPlatformTool: true },
       };
     },
+    ...tableExecutors,
   };
 }
 
@@ -498,9 +571,34 @@ function buildLocalToolExecutors(args: {
   env: EnvLike;
   fetchImpl: typeof fetch;
   localToolExecutors?: CliLocalRuntimeAdapterDeps["localToolExecutors"];
+  readXhsProfile?: CliLocalRuntimeAdapterDeps["readXhsProfile"];
   commandTimeoutMs?: number;
   commandOutputLimit?: number;
 }) {
+  const resolveCliDefaultXhsArgs = (parsedArgs: any) => {
+    if (
+      parsedArgs?.profileDir ||
+      parsedArgs?.profile_dir ||
+      args.env.NOLO_XHS_READER_PROFILE_DIR
+    ) {
+      return parsedArgs;
+    }
+    return {
+      ...parsedArgs,
+      profileDir: resolveDefaultXhsProfileDir({
+        env: {
+          ...process.env,
+          ...args.env,
+          NOLO_DESKTOP: "1",
+          NOLO_DESKTOP_CHANNEL:
+            args.env.NOLO_DESKTOP_CHANNEL?.trim() ||
+            args.env.NOLO_XHS_READER_DESKTOP_CHANNEL?.trim() ||
+            "stable",
+        },
+      }),
+    };
+  };
+
   return {
     ...createLocalWorkspaceToolExecutors({
       workspaceRoot: args.workspaceRoot,
@@ -514,6 +612,22 @@ function buildLocalToolExecutors(args: {
     ...buildCliWorkspaceToolExecutors({
       env: args.env,
     }),
+    read_xhs_profile: async (call: any) => {
+      const parsedArgs = (() => {
+        try { return JSON.parse(call.arguments || "{}"); } catch { return {}; }
+      })();
+      const result = await (args.readXhsProfile ?? readXhsProfileFunc)(
+        resolveCliDefaultXhsArgs(parsedArgs),
+        undefined,
+      );
+      return {
+        content: JSON.stringify(result.rawData),
+        metadata: {
+          xhsLocalBridge: true,
+          displayData: result.displayData,
+        },
+      };
+    },
     ...(args.localToolExecutors ?? {}),
   };
 }
@@ -599,6 +713,7 @@ export function createCliLocalRuntimeAdapter(
     env: deps.env,
     fetchImpl,
     localToolExecutors: deps.localToolExecutors,
+    readXhsProfile: deps.readXhsProfile,
     ...runtimeToolExecutionLimits,
   });
 
@@ -629,6 +744,7 @@ export function createCliLocalRuntimeAdapter(
         env: deps.env,
         fetchImpl,
         localToolExecutors: deps.localToolExecutors,
+        readXhsProfile: deps.readXhsProfile,
         ...runtimeToolExecutionLimits,
       });
       return agentConfig;
@@ -725,7 +841,7 @@ export function createCliLocalRuntimeAdapter(
               messages,
               tools,
             });
-            const signal = buildRequestTimeoutSignal(options?.timeoutMs);
+            const timeoutSignal = buildRequestTimeoutSignal(options?.timeoutMs);
             logLocalRuntimeDiagnostic("provider.request.start", {
               agentKey: agentConfig.key,
               transport: "platform-proxy",
@@ -740,11 +856,11 @@ export function createCliLocalRuntimeAdapter(
             });
             const res = await fetchWithTransientRetry(fetchImpl, request.url, {
               ...request.init,
-              ...(signal ? { signal } : {}),
+              ...(timeoutSignal ? { signal: timeoutSignal.signal } : {}),
             }, {
               sleep: deps.sleep,
               loopbackRequest,
-            });
+            }).finally(() => timeoutSignal?.clear());
             const raw = await res.text().catch(() => "");
             logLocalRuntimeDiagnostic("provider.request.result", {
               agentKey: agentConfig.key,
@@ -798,7 +914,7 @@ export function createCliLocalRuntimeAdapter(
             messages,
             tools,
           });
-          const signal = buildRequestTimeoutSignal(options?.timeoutMs);
+          const timeoutSignal = buildRequestTimeoutSignal(options?.timeoutMs);
           logLocalRuntimeDiagnostic("provider.request.start", {
             agentKey: agentConfig.key,
             transport: "direct-openai-compatible",
@@ -812,11 +928,11 @@ export function createCliLocalRuntimeAdapter(
           });
           const res = await fetchWithTransientRetry(fetchImpl, request.url, {
             ...request.init,
-            ...(signal ? { signal } : {}),
+            ...(timeoutSignal ? { signal: timeoutSignal.signal } : {}),
           }, {
             sleep: deps.sleep,
             loopbackRequest,
-          });
+          }).finally(() => timeoutSignal?.clear());
           const raw = await res.text().catch(() => "");
           logLocalRuntimeDiagnostic("provider.request.result", {
             agentKey: agentConfig.key,

package/core/builtinAgents.ts

@@ -0,0 +1,209 @@
+import { APP_BUILDER_PRESET } from "../ai/tools/agent/presets/appBuilderPreset";
+import { FIREWORKS_KIMI_LATEST_MODEL } from "../ai/llm/kimi";
+
+export const BUILTIN_NOLO_AGENT_KEY = "agent-pub-01NOLOAPPBLD000000019KCKT0";
+export const BUILTIN_APP_BUILDER_AGENT_KEY =
+  "agent-pub-01APPBUILDER00000001YAII3I";
+export const BUILTIN_ECOMMERCE_AGENT_KEY =
+  "agent-pub-01ECOMMERCEAG00000001PYQ2J";
+export const BUILTIN_AGENT_CREATOR_AGENT_KEY =
+  "agent-pub-01NOLOAGENTCRT000000000001";
+export const BUILTIN_NOLO_AGENT_ID = "01NOLOAPPBLD000000019KCKT0";
+export const BUILTIN_APP_BUILDER_AGENT_ID = "01APPBUILDER00000001YAII3I";
+export const BUILTIN_ECOMMERCE_AGENT_ID = "01ECOMMERCEAG00000001PYQ2J";
+export const BUILTIN_AGENT_CREATOR_AGENT_ID = "01NOLOAGENTCRT000000000001";
+
+const BUILTIN_PUBLIC_RUNTIME_SERVER_BASE = "https://nolo.chat";
+
+const buildBuiltinBaseAgent = (overrides: Record<string, unknown>) => {
+  const timestamp = Date.now();
+  return {
+    type: "agent",
+    isPublic: true,
+    userId: "builtin",
+    createdAt: timestamp,
+    updatedAt: timestamp,
+    references: [],
+    ...overrides,
+  };
+};
+
+const BUILTIN_NOLO_PROMPT = [
+  "你是 nolo，负责帮助刚进入产品的用户理解现在能做什么，并把他们带到合适的下一步。",
+  "优先直接回答、解释入口、帮用户开始对话、创建 AI、创建文档，或把任务交给更合适的 agent。",
+  "用户只是泛泛提问时，先收敛问题，不要立刻切换到重型流程。",
+  `当用户明确要创建、定制或发布 AI / Agent / 智能体时，调用 runStreamingAgent 转交给 AI 创建助手，agentKey 是 ${BUILTIN_AGENT_CREATOR_AGENT_KEY}。`,
+  "不要自己调用 prepareAgentDraft 或 createAgent；AI 创建助手负责草稿预览、用户确认和最终创建。",
+  "不要调用 deleteSpaces 这类高风险能力。",
+].join("\n");
+
+export const BUILTIN_AGENT_CREATOR_PROMPT = [
+  "你是 Nolo 的 AI 创建助手，只负责通过对话帮助用户创建或调整一个新的 Agent。",
+  "先理解用户想让这个 AI 服务谁、完成什么任务、使用什么语气、需要哪些能力、是否需要知识引用，以及是否适合公开。",
+  "当信息足够形成初版配置时，先调用 prepareAgentDraft，生成可预览草稿；信息不足时每次只问一个关键问题。",
+  "prepareAgentDraft 只生成草稿，不代表已经创建真实 Agent。",
+  "草稿展示后，等待用户明确确认，例如“确认创建”“就按这个创建”“创建这个 AI”。",
+  "只有得到明确确认后，才调用 createAgent 创建真实 Agent。",
+  "用户只是讨论、补充、修改或说“先看看”时，不要调用 createAgent。",
+  "默认模型使用 provider=fireworks, model=accounts/fireworks/models/kimi-latest；除非用户明确要求且平台已知支持，不要选择 Claude/Anthropic 等当前 runtime 不支持的 provider。",
+  "公开状态保持保守：你可以建议公开，但只有用户明确要求公开发布时，createAgent 的 isPublic 才能为 true。",
+  "如果用户想手动微调模型、工具、知识引用或发布状态，可以引导用户进入 /create/agent 高级编辑页。",
+].join("\n");
+
+export const buildBuiltinNoloRecord = () =>
+  buildBuiltinBaseAgent({
+    dbKey: BUILTIN_NOLO_AGENT_KEY,
+    id: BUILTIN_NOLO_AGENT_ID,
+    name: "nolo",
+    introduction:
+      "专门用来引导用户理解 Nolo 能做什么，并把问题带到正确入口或更合适的 Agent。",
+    greeting:
+      "你好，我是 nolo。你可以直接说你想做什么，我会帮你开始、解释入口，或把任务交给更合适的能力。",
+    provider: "fireworks",
+    model: FIREWORKS_KIMI_LATEST_MODEL,
+    useServerProxy: true,
+    apiSource: "platform",
+    runtimeServerBase: BUILTIN_PUBLIC_RUNTIME_SERVER_BASE,
+    inputPrice: 0.95 * 8,
+    outputPrice: 4 * 8,
+    hasVision: true,
+    tags: ["nolo", "引导", "分发"],
+    tools: ["fetchWebpage", "runStreamingAgent"],
+    prompt: BUILTIN_NOLO_PROMPT,
+  });
+
+export const buildBuiltinAppBuilderRecord = () =>
+  buildBuiltinBaseAgent({
+    ...APP_BUILDER_PRESET,
+    dbKey: BUILTIN_APP_BUILDER_AGENT_KEY,
+    id: BUILTIN_APP_BUILDER_AGENT_ID,
+    runtimeServerBase: BUILTIN_PUBLIC_RUNTIME_SERVER_BASE,
+    tags: ["应用构建", "App Builder", "无代码"],
+  });
+
+export const buildBuiltinEcommerceAgentRecord = () =>
+  buildBuiltinBaseAgent({
+    dbKey: BUILTIN_ECOMMERCE_AGENT_KEY,
+    id: BUILTIN_ECOMMERCE_AGENT_ID,
+    name: "电商商品参数助手",
+    introduction:
+      "专门获取淘宝、天猫、京东等电商商品真实参数、SKU、价格、库存和店铺信息，并做结构化对比。",
+    greeting: "发给我淘宝、天猫或京东商品链接，我会尽量获取真实商品参数。",
+    provider: "fireworks",
+    model: FIREWORKS_KIMI_LATEST_MODEL,
+    useServerProxy: true,
+    apiSource: "platform",
+    runtimeServerBase: BUILTIN_PUBLIC_RUNTIME_SERVER_BASE,
+    inputPrice: 0.95 * 8,
+    outputPrice: 4 * 8,
+    hasVision: false,
+    tags: ["电商", "商品参数", "数据抓取"],
+    tools: ["taobaoTmallProductScraper", "jdProductScraper"],
+    prompt: [
+      "你是电商商品参数助手，只负责获取和整理电商商品真实数据。",
+      "当用户给淘宝/天猫链接或商品 ID 时，先提取数字 itemId，再调用 taobaoTmallProductScraper。",
+      "当用户给京东链接或 SKU 时，先提取数字 skuId，再调用 jdProductScraper。",
+      "输出要结构化：商品标题、品牌、型号、店铺、价格、SKU/规格、库存、尺寸重量、质保、数据来源和缺失项。",
+      "用户问参数或详情时，必须展开工具返回的详细参数，不要只摘要基础字段。",
+      "只输出用户请求的数据结果；不要输出寒暄、确认、过渡句或结尾追问。",
+      "如果用户给多个商品，逐个调用对应工具后再做对比表。",
+      "如果工具返回缺失字段，如实说明缺失；不要编造参数，也不要要求用户手抄页面。",
+    ].join("\n"),
+  });
+
+export const buildBuiltinAgentCreatorRecord = () =>
+  buildBuiltinBaseAgent({
+    dbKey: BUILTIN_AGENT_CREATOR_AGENT_KEY,
+    id: BUILTIN_AGENT_CREATOR_AGENT_ID,
+    name: "AI 创建助手",
+    introduction:
+      "通过对话帮你整理专属 AI 的用途、能力、Prompt、知识引用和发布建议，并在确认后创建。",
+    greeting:
+      "告诉我你想创建一个什么样的 AI：它要帮谁、完成什么、需要哪些能力或资料？",
+    provider: "fireworks",
+    model: "accounts/fireworks/models/kimi-latest",
+    useServerProxy: true,
+    apiSource: "platform",
+    runtimeServerBase: BUILTIN_PUBLIC_RUNTIME_SERVER_BASE,
+    inputPrice: 0.95 * 8,
+    outputPrice: 4 * 8,
+    hasVision: false,
+    tags: ["AI 创建", "Agent 创建", "配置助手"],
+    tools: ["prepareAgentDraft", "createAgent"],
+    prompt: BUILTIN_AGENT_CREATOR_PROMPT,
+  });
+
+export const normalizeBuiltinPublicAgentRecord = <T extends Record<string, any>>(
+  agent: T,
+): T => {
+  if (!agent || typeof agent !== "object") return agent;
+  const key = typeof agent.dbKey === "string" ? agent.dbKey : "";
+  const id = typeof agent.id === "string" ? agent.id : "";
+  const isBuiltinCreator =
+    key === BUILTIN_AGENT_CREATOR_AGENT_KEY || id === BUILTIN_AGENT_CREATOR_AGENT_ID;
+
+  if (!isBuiltinCreator) return agent;
+
+  const builtin = buildBuiltinAgentCreatorRecord();
+  return {
+    ...agent,
+    name: builtin.name,
+    introduction: builtin.introduction,
+    greeting: builtin.greeting,
+    provider: builtin.provider,
+    model: builtin.model,
+    useServerProxy: builtin.useServerProxy,
+    apiSource: builtin.apiSource,
+    runtimeServerBase: builtin.runtimeServerBase,
+    inputPrice: builtin.inputPrice,
+    outputPrice: builtin.outputPrice,
+    hasVision: builtin.hasVision,
+    references: builtin.references,
+    tags: builtin.tags,
+    tools: builtin.tools,
+    prompt: builtin.prompt,
+  };
+};
+
+export const BUILTIN_PLATFORM_AGENT_KEYS = [
+  BUILTIN_NOLO_AGENT_KEY,
+  BUILTIN_APP_BUILDER_AGENT_KEY,
+  BUILTIN_ECOMMERCE_AGENT_KEY,
+  BUILTIN_AGENT_CREATOR_AGENT_KEY,
+] as const;
+
+const BUILTIN_PLATFORM_AGENT_KEY_SET = new Set<string>(BUILTIN_PLATFORM_AGENT_KEYS);
+
+export const isBuiltinPlatformAgentRecord = (agent: {
+  dbKey?: string | null;
+  id?: string | null;
+}): boolean => {
+  const dbKey = typeof agent?.dbKey === "string" ? agent.dbKey : "";
+  if (dbKey && BUILTIN_PLATFORM_AGENT_KEY_SET.has(dbKey)) return true;
+
+  const id = typeof agent?.id === "string" ? agent.id : "";
+  if (!id) return false;
+
+  return BUILTIN_PLATFORM_AGENT_KEYS.some((key) => key.endsWith(id));
+};
+
+export const shouldHideBuiltinAgentFromPublicPlaza = (agent: {
+  dbKey?: string | null;
+  id?: string | null;
+}): boolean => isBuiltinPlatformAgentRecord(agent);
+
+export const buildBuiltinPlatformAgentRecord = (dbKey: string) => {
+  if (dbKey === BUILTIN_NOLO_AGENT_KEY) {
+    return buildBuiltinNoloRecord();
+  }
+  if (dbKey === BUILTIN_APP_BUILDER_AGENT_KEY) {
+    return buildBuiltinAppBuilderRecord();
+  }
+  if (dbKey === BUILTIN_ECOMMERCE_AGENT_KEY) {
+    return buildBuiltinEcommerceAgentRecord();
+  }
+  if (dbKey === BUILTIN_AGENT_CREATOR_AGENT_KEY) {
+    return buildBuiltinAgentCreatorRecord();
+  }
+  return null;
+};

package/core/config.ts

@@ -0,0 +1,15 @@
+const providerName = "nolotus";
+
+const slogonforYou =
+  "The goodness or badness of this world concerns every individual.";
+
+// be cart  CryptoJS.PBKDF2  keySize: 256 / AUTH_VERSION[1].keylen,
+// even keylen same ,maybe error rn with web version
+export const AUTH_VERSION = {
+  "1": {
+    iterations: 10000,
+    salt: providerName + slogonforYou,
+    keylen: 32,
+  },
+};
+export const SALT = AUTH_VERSION[1].salt;

package/core/crypto.ts

@@ -0,0 +1,51 @@
+import nacl from "tweetnacl";
+import { Base64 } from "js-base64";
+
+export const signMessage = (
+  message: string,
+  secretKeyBase64: string
+): string => {
+  const messageUint8 = new TextEncoder().encode(message);
+  const signedMessage = nacl.sign(
+    messageUint8,
+    Base64.toUint8Array(secretKeyBase64)
+  );
+  return Base64.fromUint8Array(signedMessage);
+};
+
+export const verifySignedMessage = (
+  signedMessageBase64: string,
+  publicKeyBase64: string
+): string => {
+  const message = nacl.sign.open(
+    Base64.toUint8Array(signedMessageBase64),
+    Base64.toUint8Array(publicKeyBase64)
+  );
+
+  if (!message) throw new Error("Decoding failed");
+  return new TextDecoder().decode(message);
+};
+
+export const detachedSign = (message: string, secretKeyBase64: string) => {
+  const signature = nacl.sign.detached(
+    new TextEncoder().encode(message),
+    Base64.toUint8Array(secretKeyBase64)
+  );
+  return Base64.fromUint8Array(signature, true);
+};
+
+export const verifyDetachedSignature = (
+  message: string,
+  signatureBase64: string,
+  publicKeyBase64: string
+): boolean => {
+  try {
+    return nacl.sign.detached.verify(
+      new TextEncoder().encode(message),
+      Base64.toUint8Array(signatureBase64),
+      Base64.toUint8Array(publicKeyBase64)
+    );
+  } catch {
+    return false;
+  }
+};

package/core/generateKeyPairFromSeedV1.ts

@@ -0,0 +1,15 @@
+// keypair.ts
+import nacl from "tweetnacl";
+import { Base64 } from "js-base64";
+
+export const generateKeyPairFromSeedV1 = (seedData: string) => {
+  const seed = new TextEncoder().encode(seedData);
+  const hashSeed = nacl.hash(seed);
+  const seed32 = hashSeed.slice(0, 32);
+  const keyPair = nacl.sign.keyPair.fromSeed(seed32);
+
+  return {
+    publicKey: Base64.fromUint8Array(keyPair.publicKey, true),
+    secretKey: Base64.fromUint8Array(keyPair.secretKey, true),
+  };
+};

package/core/generateMainKey.ts

@@ -0,0 +1,22 @@
+import nacl from "tweetnacl";
+
+export const generateUserIdV1 = (
+  publicKey: string,
+  username: string,
+  language: string,
+  extra: string = ""
+) => {
+  const text = publicKey + username + language + extra;
+  const encodedText = new TextEncoder().encode(text);
+  const hash = nacl.hash(encodedText);
+
+  // 方案1：使用Array.from和map
+  const hexString = Array.from(hash)
+    .map((b) => b.toString(16).padStart(2, "0"))
+    .join("");
+
+  // 方案2：更简洁的写法，用Uint8Array直接转
+  // const hexString = [...hash].map(x => x.toString(16).padStart(2,'0')).join('');
+
+  return hexString.slice(0, 10);
+};

package/core/init.ts

@@ -0,0 +1,41 @@
+import { BUILTIN_NOLO_AGENT_KEY } from "./builtinAgents";
+
+export const nolotusId = "0e95801d90";
+export const copilotDemoId = "b2e06f801f";
+
+const ADMIN_IDS = new Set([nolotusId, copilotDemoId]);
+
+export const isSystemAdmin = (userId?: string | null) =>
+  userId != null && ADMIN_IDS.has(userId);
+
+export const AI_ADMIN_ROLE = "AI管理员";
+
+const envAiAdminIds = () =>
+  new Set(
+    (process.env.AI_ADMIN_USER_IDS ?? "")
+      .split(",")
+      .map((item) => item.trim())
+      .filter(Boolean)
+  );
+
+const recordHasAiAdminRole = (record: unknown): boolean => {
+  if (!record || typeof record !== "object") return false;
+  const value = record as Record<string, unknown>;
+  const scalarFields = [value.role, value.globalRole, value.systemRole];
+  if (scalarFields.some((item) => item === AI_ADMIN_ROLE)) return true;
+  const listFields = [value.roles, value.globalRoles, value.systemRoles, value.permissions];
+  return listFields.some(
+    (item) => Array.isArray(item) && item.includes(AI_ADMIN_ROLE)
+  );
+};
+
+export const isAIAdmin = (
+  userId?: string | null,
+  ...records: unknown[]
+) =>
+  isSystemAdmin(userId) ||
+  (userId != null && envAiAdminIds().has(userId)) ||
+  records.some(recordHasAiAdminRole);
+
+export const legacyNoloAgentId = "cybot-pub-01JYRSTM0MPPGQC9S25S3Y9J20";
+export const noloAgentId = BUILTIN_NOLO_AGENT_KEY;

package/core/localOrigins.ts

@@ -0,0 +1,8 @@
+export const DEFAULT_LOCAL_HOST = "127.0.0.1";
+export const DEFAULT_LOCAL_API_PORT = "38123";
+
+export const DEFAULT_LOCAL_API_ORIGIN = `http://${DEFAULT_LOCAL_HOST}:${DEFAULT_LOCAL_API_PORT}`;
+
+export function normalizeOrigin(value: string): string {
+  return value.trim().replace(/\/+$/, "");
+}

package/core/password.ts

@@ -0,0 +1,13 @@
+import CryptoJS from "crypto-js";
+import { SALT, AUTH_VERSION } from ".//config";
+
+export const hashPasswordV1 = async (password: string): Promise<string> => {
+  const hash = CryptoJS.PBKDF2(password, SALT, {
+    keySize: 256 / AUTH_VERSION[1].keylen,
+    iterations: AUTH_VERSION[1].iterations,
+    hasher: CryptoJS.algo.SHA512,
+  });
+
+  // 将 salt 和 hash 组合存储
+  return hash.toString(CryptoJS.enc.Base64);
+};