nolo-cli 0.101.0-alpha.1 → 0.101.0

package/{chunk-UKZDAFYT.js → chunk-UM4PH574.js}

@@ -1,19 +1,15 @@
 import {
-  getActiveDialogKey
-} from "./chunk-6YTOJY35.js";
+  formatISO
+} from "./chunk-ZRAU6T47.js";
 import {
-  require_date_fns
-} from "./chunk-M76ECQRD.js";
+  getActiveDialogKey
+} from "./chunk-BZ7NPA6G.js";
 import {
   patch,
   selectById
-} from "./chunk-H62HCIUP.js";
-import {
-  __toESM
-} from "./chunk-4VNS5WPM.js";
+} from "./chunk-4FFUDT6D.js";
 
 // packages/chat/dialog/actions/setDialogExtraReferencesAction.ts
-var import_date_fns = __toESM(require_date_fns());
 var setDialogExtraReferencesAction = async (extraReferences, thunkApi) => {
   const { dispatch, getState } = thunkApi;
   const state = getState();
@@ -33,7 +29,7 @@ var setDialogExtraReferencesAction = async (extraReferences, thunkApi) => {
       dbKey: currentDialogKey,
       changes: {
         extraReferences: extraReferences ?? [],
-        updatedAt: (0, import_date_fns.formatISO)(/* @__PURE__ */ new Date())
+        updatedAt: formatISO(/* @__PURE__ */ new Date())
       }
     })
   ).unwrap();

package/{chunk-GEPUP7OO.js → chunk-UVKDJUTL.js}

@@ -2,16 +2,16 @@ import {
   deleteDbRecord,
   queryUserRecords,
   readDbRecord
-} from "./chunk-AEOE4Z6Q.js";
+} from "./chunk-NZWAO6LH.js";
 import {
   mergeAndDedupUserData
-} from "./chunk-KQHGZWSV.js";
+} from "./chunk-OXME3PEE.js";
 import {
   toErrorMessage
 } from "./chunk-HNMXYYJR.js";
 import {
   isTombstoneRecord
-} from "./chunk-GBRG75BQ.js";
+} from "./chunk-D2MDMY2M.js";
 
 // packages/cli/globalRecordOperations.ts
 async function listUserRecordsFromServers(args) {

package/{chunk-ZCYXJSTU.js → chunk-V5OWQOJZ.js}

@@ -1,3 +1,6 @@
+import {
+  readSseFrames
+} from "./chunk-GMZLP5DV.js";
 import {
   sanitizeForOutbound
 } from "./chunk-CQ3WA2NE.js";
@@ -25,7 +28,14 @@ import {
   stablePromptCacheKey,
   toOpenAiCompatibleMessages,
   toResponsesTools
-} from "./chunk-PUOC4YRO.js";
+} from "./chunk-M7VLQGQP.js";
+import {
+  isMeaningfulChatCompletionOutput,
+  isMeaningfulResponsesOutput
+} from "./chunk-7MMSLEPA.js";
+import {
+  clipCompactText
+} from "./chunk-5MMAK75Q.js";
 import {
   buildProviderExecutionPlan,
   canUsePlatformChatProvider,
@@ -35,16 +45,11 @@ import {
   resolvePlatformAuthToken,
   resolvePlatformServerUrl,
   resolveProviderTransportDecision
-} from "./chunk-6OZ36FXI.js";
-import {
-  clipCompactText,
-  isMeaningfulChatCompletionOutput,
-  isMeaningfulResponsesOutput
-} from "./chunk-DNCEALKX.js";
+} from "./chunk-27ONFIEY.js";
 import {
   NOLO_CLIENT_VERSION_HEADER,
   isPlatformMimoProviderModel
-} from "./chunk-Q67DOFOO.js";
+} from "./chunk-Y3PMXGLH.js";
 import {
   isRecord
 } from "./chunk-KUG52IAP.js";
@@ -347,83 +352,6 @@ function flushChatCompletionStream(state) {
   }
 }
 
-// packages/agent-runtime/sseFrames.ts
-async function* readSseFrames(response) {
-  const reader = response.body?.getReader();
-  if (!reader) {
-    throw new Error("SSE response did not include a readable body.");
-  }
-  const decoder = new TextDecoder();
-  let buffer = "";
-  while (true) {
-    const { done, value } = await reader.read();
-    if (done) break;
-    buffer += decoder.decode(value, { stream: true });
-    let boundary = findSseFrameBoundary(buffer);
-    while (boundary) {
-      yield buffer.slice(0, boundary.index);
-      buffer = buffer.slice(boundary.index + boundary.separatorLength);
-      boundary = findSseFrameBoundary(buffer);
-    }
-  }
-  const remaining = decoder.decode();
-  if (remaining) {
-    buffer += remaining;
-    let boundary = findSseFrameBoundary(buffer);
-    while (boundary) {
-      yield buffer.slice(0, boundary.index);
-      buffer = buffer.slice(boundary.index + boundary.separatorLength);
-      boundary = findSseFrameBoundary(buffer);
-    }
-  }
-  if (buffer.trim()) yield buffer;
-}
-function findSseFrameBoundary(buffer) {
-  const lfLf = buffer.indexOf("\n\n");
-  const crLfCrLf = buffer.indexOf("\r\n\r\n");
-  if (lfLf === -1 && crLfCrLf === -1) return null;
-  const useLf = lfLf !== -1 && (crLfCrLf === -1 || lfLf < crLfCrLf);
-  return useLf ? { index: lfLf, separatorLength: 2 } : { index: crLfCrLf, separatorLength: 4 };
-}
-async function* streamSseDataValues(response, parse) {
-  const reader = response.body?.getReader();
-  if (!reader) return;
-  const decoder = new TextDecoder();
-  let buffer = "";
-  while (true) {
-    const { done, value } = await reader.read();
-    if (done) break;
-    buffer += decoder.decode(value, { stream: true });
-    const lines = buffer.split("\n");
-    buffer = lines.pop() ?? "";
-    for (const line of lines) {
-      const parsed = parse(line);
-      if (parsed) yield parsed;
-    }
-  }
-  const remaining = decoder.decode();
-  if (remaining) {
-    buffer += remaining;
-    const lines = buffer.split("\n");
-    buffer = lines.pop() ?? "";
-    for (const line of lines) {
-      const parsed = parse(line);
-      if (parsed) yield parsed;
-    }
-  }
-  if (buffer.trim()) {
-    const parsed = parse(buffer);
-    if (parsed) yield parsed;
-  }
-}
-async function readSseDataValues(response, parse) {
-  const values = [];
-  for await (const value of streamSseDataValues(response, parse)) {
-    values.push(value);
-  }
-  return values;
-}
-
 // packages/agent-runtime/platformChatProvider.ts
 var PlatformStreamInterruptedError = class extends Error {
   code = "PLATFORM_STREAM_INTERRUPTED";
@@ -535,6 +463,12 @@ async function resolvePlatformChatProviderConfig(args) {
   };
 }
 function buildPlatformChatCompletionRequest(args) {
+  if (!args.providerConfig.authToken?.trim()) {
+    throw Object.assign(
+      new Error("desktop platform provider failed: AUTH_NO_TOKEN"),
+      { code: "AUTH_NO_TOKEN", authCode: "AUTH_NO_TOKEN", stage: "provider" }
+    );
+  }
   const usesResponsesApi = isResponsesEndpoint(args.providerConfig.endpoint);
   const requestOptions = usesResponsesApi ? toResponsesRequestOptions(args.providerConfig.requestOptions) : args.providerConfig.requestOptions;
   const shouldStripReasoning = shouldStripReasoningContentForOutbound(
@@ -926,9 +860,6 @@ export {
   applyChatCompletionDelta,
   flushChatCompletionStream,
   providerHttpFailure,
-  readSseFrames,
-  streamSseDataValues,
-  readSseDataValues,
   createResponsesToolAccumulator,
   applyResponsesToolEvent,
   finalizeResponsesToolCalls,

package/{chunk-NA35QHCF.js → chunk-V7Y6KRAH.js}

@@ -1,6 +1,6 @@
 import {
   requireTokenUser
-} from "./chunk-ETI2NYVF.js";
+} from "./chunk-YPOPJAKN.js";
 import {
   resolveServerUrl
 } from "./chunk-A7GB5UGH.js";

package/{chunk-3DII57IT.js → chunk-VCAQFMVN.js}

@@ -1,7 +1,7 @@
 import {
   DEFAULT_AGENT_BASE_POLICY,
   DEFAULT_USER_PREFERENCE_PROFILE
-} from "./chunk-AFUORTY4.js";
+} from "./chunk-DZ7R5V3Y.js";
 
 // packages/ai/policy/runtimePolicy.ts
 var clampLevel = (value, fallback) => {

package/{chunk-JRQFUXY7.js → chunk-VEYL5MO5.js}

@@ -6,20 +6,20 @@ import {
   buildBuiltinObjectSkillDbKey,
   buildBuiltinObjectSkillPageContent,
   buildCodeWorkDiscipline
-} from "./chunk-DHDMC6FO.js";
+} from "./chunk-WCGC6S77.js";
 import {
   buildSkillDocMarkdown,
   resolvePageSkillMetadata
-} from "./chunk-Q554LLSI.js";
-import {
-  canonicalizeToolNames
-} from "./chunk-O6OSWFZQ.js";
+} from "./chunk-AUDNYVRC.js";
 import {
   nolotusId
-} from "./chunk-QDSINZM3.js";
+} from "./chunk-A4SQRTZ6.js";
+import {
+  canonicalizeToolNames
+} from "./chunk-XUWRURDF.js";
 import {
   asNonEmptyStringArray
-} from "./chunk-VMFTFOWF.js";
+} from "./chunk-3AH7LNUB.js";
 import {
   asOptionalTrimmedString
 } from "./chunk-G3SUCT4W.js";
@@ -242,7 +242,7 @@ var CODING_SKILL_SEEDS = [
       "## \u6D41\u7A0B",
       "1. Gather\uFF1A\u8BFB spec \u7ED9\u7684\u5BA1\u67E5\u547D\u4EE4\uFF08`git diff` \u6216 `git diff alpha...HEAD`\uFF09\uFF0C\u62FF\u5230 diff\uFF1B\u65E0\u6539\u52A8\u76F4\u63A5 Clean review\u3002",
       "2. Scope\uFF1A\u786E\u8BA4\u6539\u52A8\u8303\u56F4\uFF0C\u53EA\u5BA1 diff \u89E6\u53CA\u7684\u6587\u4EF6\uFF0C\u5F04\u6E05\u5BF9\u5E94\u4EC0\u4E48\u529F\u80FD/\u4FEE\u590D\u3002",
-      "3. Context\uFF1A\u4E0D\u8981\u53EA\u770B hunk\uFF1B\u8BFB\u5468\u56F4\u5B9E\u73B0\u3001imports\u3001\u8C03\u7528\u65B9\u3002",
+      "3. Context\uFF1A\u4E0D\u8981\u53EA\u770B hunk\uFF1B\u8BFB\u5468\u56F4\u5B9E\u73B0\u3001imports\u3001\u8C03\u7528\u65B9\u3002**\u4EE3\u7801\u771F\u503C\u4F18\u5148**\uFF1Areview brief\u3001prompt\u3001\u6CE8\u91CA\u548C\u6D4B\u8BD5\u540D\u4E0D\u662F\u5B9E\u73B0\u771F\u503C\uFF1B\u6D89\u53CA\u884C\u4E3A\u5951\u7EA6\u65F6\u4EE5\u5B9E\u9645\u5B9E\u73B0\u3001\u7C7B\u578B\u548C\u53EF\u6267\u884C\u6D4B\u8BD5\u4E3A\u51C6\uFF0C\u51B2\u7A81\u5FC5\u987B\u62A5\u544A\uFF0C\u672A\u7ECF\u9A8C\u8BC1\u4E0D\u5F97 APPROVE\u3002",
       "4. Checklist\uFF1A\u6309\u89D2\u8272\u4ECE CRITICAL \u2192 LOW\uFF1B\u53EA\u62A5 >80% \u6709\u628A\u63E1\u7684\u771F\u5B9E\u95EE\u9898\u3002",
       "5. Report\uFF1A\u4EA7\u51FA finding \u8868 + Verdict\uFF1B\u540C\u7C7B\u95EE\u9898\u5408\u5E76\u3002",
       "",
@@ -252,8 +252,15 @@ var CODING_SKILL_SEEDS = [
       "\u4EFB\u4E00\u7B54\u300C\u5426\u300D\u6216\u300C\u4E0D\u786E\u5B9A\u300D\u5219\u964D\u7EA7\u6216\u4E22\u5F03\uFF1A",
       "1. \u80FD\u5F15\u7528\u786E\u5207\u884C\u53F7\uFF1F\uFF08\u6A21\u7CCA\u53D1\u73B0\u4E0D actionable\uFF09",
       "2. \u80FD\u63CF\u8FF0\u5177\u4F53\u5931\u8D25\u6A21\u5F0F\uFF1F\uFF08\u547D\u540D\u8F93\u5165\u3001\u72B6\u6001\u3001\u574F\u7ED3\u679C\uFF1B\u8BF4\u4E0D\u51FA\u89E6\u53D1\u6761\u4EF6 = \u6A21\u5F0F\u5339\u914D\uFF09",
-      "3. \u80FD\u7ED9\u51FA\u5177\u4F53\u4FEE\u590D\u5EFA\u8BAE\uFF1F\uFF08\u4EE3\u7801\u7EA7\uFF0C\u4E0D\u662F\u9AD8\u5C42\u5EFA\u8BAE\uFF09",
-      "4. \u5224\u65AD\u6807\u5C3A\u2014\u2014**\u8FD9\u4E2A\u56E2\u961F\u7684\u9AD8\u7EA7\u5DE5\u7A0B\u5E08\u771F\u4F1A\u5728 review \u91CC\u6539\u8FD9\u4E2A\u5417?** \u4E0D\u4F1A\u5C31\u8DF3\u8FC7\u3002",
+      "3. \u8BFB\u8FC7\u5468\u56F4\u4E0A\u4E0B\u6587\uFF1F\uFF08\u67E5\u8FC7\u8C03\u7528\u65B9\u3001imports\u3001\u6D4B\u8BD5\uFF1B\u5F88\u591A\u8868\u9762\u95EE\u9898\u4E0A\u4E00\u5C42\u5DF2\u5904\u7406\u6216\u6709\u7C7B\u578B guard\uFF09",
+      "4. \u4E25\u91CD\u5EA6\u7AD9\u5F97\u4F4F\uFF1F\uFF08\u7F3A JSDoc \u6C38\u8FDC\u4E0D\u662F HIGH\uFF1B\u6D4B\u8BD5 fixture \u91CC\u7684 `any` \u6C38\u8FDC\u4E0D\u662F CRITICAL\uFF1B\u4E25\u91CD\u5EA6\u81A8\u80C0\u6BD4\u6F0F\u62A5\u66F4\u4F24\u4FE1\u4EFB\uFF09",
+      "\u53E6\u6709\u5224\u65AD\u6807\u5C3A\u2014\u2014**\u8FD9\u4E2A\u56E2\u961F\u7684\u9AD8\u7EA7\u5DE5\u7A0B\u5E08\u771F\u4F1A\u5728 review \u91CC\u6539\u8FD9\u4E2A\u5417?** \u4E0D\u4F1A\u5C31\u8DF3\u8FC7\u3002\u6BCF\u6761 finding \u9644\u4EE3\u7801\u7EA7\u4FEE\u590D\u5EFA\u8BAE\uFF08Fix\uFF09\uFF0C\u4E0D\u662F\u9AD8\u5C42\u5EFA\u8BAE\u3002",
+      "",
+      "### HIGH / CRITICAL \u5FC5\u987B\u5E26\u8BC1\u636E",
+      "\u7F3A\u4EFB\u4E00\u6761\u5219\u964D\u7EA7\u5230 MEDIUM \u6216\u4E22\u5F03\uFF1A\u2460 \u786E\u5207\u4EE3\u7801\u7247\u6BB5 + \u884C\u53F7\uFF1B\u2461 \u5177\u4F53\u5931\u8D25\u573A\u666F\uFF08\u4EC0\u4E48\u8F93\u5165 \u2192 \u4EC0\u4E48\u72B6\u6001 \u2192 \u4EC0\u4E48\u574F\u7ED3\u679C\uFF09\uFF1B\u2462 \u4E3A\u4EC0\u4E48\u73B0\u6709\u9632\u62A4\uFF08\u7C7B\u578B\u7CFB\u7EDF/\u6821\u9A8C/\u6846\u67B6\u9ED8\u8BA4\uFF09\u6321\u4E0D\u4F4F\u3002",
+      "",
+      "### \u96F6\u53D1\u73B0\u662F\u5408\u6CD5\u7ED3\u679C",
+      "\u5E72\u51C0\u7684 review \u662F\u6709\u6548\u7684 review\uFF1Adiff \u5C0F\u3001\u7C7B\u578B\u5B8C\u5907\u3001\u6709\u6D4B\u8BD5\u3001\u9075\u5FAA\u9879\u76EE\u6A21\u5F0F\u65F6\uFF0C\u6B63\u786E\u8F93\u51FA\u662F\u96F6 finding + `Clean review`\u3002\u4E0D\u8981\u4E3A\u8BC1\u660E\u8DD1\u8FC7\u800C\u5236\u9020 finding\u3001\u586B\u5145\u5F0F nitpick \u6216\u65E0\u89E6\u53D1\u6761\u4EF6\u7684\u5047\u8BBE\u6027 edge case\u3002",
       "",
       "## \u5047\u9633\u6027\u6E05\u5355\uFF08\u8FD9\u4E9B\u4E0D\u62A5\uFF09",
       "- \u300C\u8003\u8651\u52A0\u9519\u8BEF\u5904\u7406\u300D\uFF1A\u5148\u67E5\u8C03\u7528\u65B9/\u6846\u67B6\u662F\u5426\u5DF2\u5904\u7406\u3002",
@@ -1112,9 +1119,72 @@ function buildSearchSpaceSkillContentBySlug(slug) {
   });
 }
 
+// packages/ai/skills/autoReviewSkill.ts
+var AUTO_REVIEW_SKILL_SLUGS = ["auto-review"];
+function deterministicId6(prefix, seed) {
+  let h = 2166136261;
+  for (let i = 0; i < seed.length; i++) {
+    h ^= seed.charCodeAt(i);
+    h = h * 16777619 >>> 0;
+  }
+  const suffix = h.toString(36).toUpperCase().padStart(14, "0");
+  return (prefix + suffix).slice(0, 26);
+}
+function buildAutoReviewSkillId(slug) {
+  return deterministicId6("01SK", slug);
+}
+function buildAutoReviewSkillPageKey(userId, slug) {
+  return `page-${userId}-${buildAutoReviewSkillId(slug)}`;
+}
+function buildAutoReviewSkillConfig(slug) {
+  return {
+    version: "0.1",
+    kind: "skill",
+    id: buildAutoReviewSkillId(slug),
+    name: "\u81EA\u52A8\u5BA1\u67E5\u5408\u5E76\uFF08auto-review\uFF09",
+    triggerMode: "explicit",
+    description: "\u6539\u52A8\u5B8C\u6210\u540E\u81EA\u52A8\u8D70\u5B8C\u300C\u72EC\u7ACB reviewer \u5BA1\u67E5 \u2192 \u4FEE\u590D \u2192 \u63D0\u4EA4 \u2192 \u5408\u5E76\u5230\u672C\u5730\u96C6\u6210\u5206\u652F\u300D\u3002\u5F00\u542F\u5373\u6388\u6743 review \u901A\u8FC7\u540E\u81EA\u52A8\u63D0\u4EA4\u4E0E\u672C\u5730\u5408\u5E76\uFF0C\u4F46\u7EDD\u4E0D\u81EA\u52A8 push\u3001\u4E0D\u5408\u5E76\u8FDC\u7AEF\u6216\u4E3B\u5E72\u3001\u4E0D\u53D1\u5E03\u3002\u89E6\u53D1\u8BCD\uFF1Aauto-review\u3001\u81EA\u52A8\u5BA1\u67E5\u3001review \u540E\u81EA\u52A8\u5408\u5E76\u3001\u5BA1\u5B8C\u76F4\u63A5\u63D0\u4EA4\u5408\u5E76\u3001auto review\u3002\u4E0D\u9002\u7528\uFF1A\u53EA\u8BFB\u4EFB\u52A1\u3001\u7528\u6237\u8981\u5148\u9A8C\u6536\u6548\u679C\u7684\u6539\u52A8\uFF08\u5148\u4EA4\u4ED8\u4EA7\u7269\u7B49\u53CD\u9988\uFF09\u3002"
+  };
+}
+var BODY = [
+  "\u4F60\u662F\u300C\u81EA\u52A8\u5BA1\u67E5\u5408\u5E76\u300D\u6D41\u7A0B\u7684\u6267\u884C\u8005\uFF1A\u6539\u52A8\u505A\u5B8C\u540E\uFF0C\u4E0D\u7B49\u7528\u6237\u9010\u6B65\u70B9\u5934\uFF0C\u81EA\u5DF1\u628A\u5BA1\u67E5\u3001\u63D0\u4EA4\u3001\u672C\u5730\u5408\u5E76\u8D70\u5B8C\u3002",
+  "",
+  "## \u5F00\u542F\u6761\u4EF6\u4E0E\u8FB9\u754C",
+  "- \u4EC5\u5728\u7528\u6237\u663E\u5F0F\u5F00\u542F\uFF08\u8BF4 auto-review / \u81EA\u52A8\u5BA1\u67E5\u5408\u5E76\uFF09\u540E\u4F7F\u7528\uFF1B\u5F00\u542F\u53EA\u6388\u6743**\u672C\u5730\u63D0\u4EA4\u4E0E\u672C\u5730\u96C6\u6210\u5206\u652F\u5408\u5E76**\u3002",
+  "- \u6C38\u8FDC\u9700\u8981\u5F53\u6B21\u660E\u786E\u6279\u51C6\uFF1A`git push`\u3001\u5408\u5E76\u5230\u8FDC\u7AEF\u6216\u4E3B\u5E72\u5206\u652F\u3001\u53D1\u5E03/\u90E8\u7F72\u3001\u56DE\u6EDA\u3002\u5F00\u542F\u672C skill \u4E0D\u653E\u5BBD\u8FD9\u4E9B\u3002",
+  "- \u9700\u8981\u7528\u6237\u4EB2\u81EA\u9A8C\u6536\u7684\u6539\u52A8\uFF08UI\u3001\u4F53\u9A8C\u7C7B\uFF09\uFF1A\u5148\u4EA4\u4ED8\u53EF\u6D4B\u8BD5\u4EA7\u7269\u5E76\u505C\u4E0B\uFF0C\u7B49\u7528\u6237\u786E\u8BA4\u300C\u53EF\u4EE5\u300D\u518D\u8FDB\u5165\u4E0B\u9762\u6D41\u7A0B\u3002",
+  "",
+  "## \u6D41\u7A0B",
+  "1. **\u9694\u79BB**\uFF1A\u6539\u52A8\u5E94\u5DF2\u5728\u72EC\u7ACB worktree/\u5206\u652F\u91CC\uFF08\u89C1 `worktree-isolation`\uFF09\uFF1B\u4E0D\u5728\u5C31\u5148\u5EFA\u3002",
+  "2. **\u6D3E reviewer**\uFF1A\u4E0E\u4F5C\u8005\u4E0D\u540C\u7684 agent \u5B9E\u4F8B\uFF0C\u53EA\u8BFB\u5BA1 diff\uFF0C\u53EA\u4F20 worktree \u8DEF\u5F84\u4E0E\u6587\u4EF6\u6E05\u5355\uFF0C\u4E0D\u5185\u5D4C diff\u3002brief \u8981\u6C42\u6700\u7EC8\u6587\u672C\u542B Verdict\uFF08APPROVE / WARNING / BLOCK\uFF09\u4E0E\u5E26\u884C\u53F7\u7684 finding\u3002",
+  "3. **\u5224\u5B9A**\uFF1A",
+  "   - \u6700\u7EC8\u6587\u672C\u542B\u660E\u786E APPROVE \u4E14\u65E0 CRITICAL/HIGH \u2192 \u7EE7\u7EED\uFF1B",
+  "   - BLOCK \u2192 \u4FEE\u590D\u540E\u590D\u5BA1\uFF0C\u5FAA\u73AF\u76F4\u5230 APPROVE\uFF1B",
+  "   - WARNING\uFF08\u6709 HIGH\uFF09\u2192 \u505C\u4E0B\uFF0C\u628A finding \u62A5\u7ED9\u7528\u6237\u51B3\u5B9A\uFF0C\u4E0D\u81EA\u52A8\u5408\u5E76\uFF1B",
+  "   - \u7A7A\u56DE\u590D\u3001\u8D85\u65F6\u3001\u53EA\u8BF4\u300C\u6211\u5148\u68C0\u67E5\u300D\u90FD\u4E0D\u662F\u5BA1\u67E5\u8BC1\u636E\uFF1A\u6700\u591A\u91CD\u8BD5\u4E00\u6B21\uFF0C\u4ECD\u65E0\u7ED3\u8BBA\u5C31\u62A5\u544A `review incomplete`\uFF0C\u4EA4\u7528\u6237\u5904\u7406\u3002",
+  "4. **\u63D0\u4EA4**\uFF1A\u6309\u9879\u76EE\u7684\u63D0\u4EA4\u89C4\u8303\u5199 message\uFF1B\u5982\u5B9E\u8BB0\u5F55\u8C01\u5BA1\u7684\u3001\u7ED3\u8BBA\u662F\u4EC0\u4E48\u3002\u65E0 review \u4E0D\u63D0\u4EA4\uFF08\u22642 \u6B65\u96F6\u903B\u8F91\u98CE\u9669\u7684\u673A\u68B0\u6539\u52A8\u9664\u5916\uFF0C\u987B\u5728 message \u6CE8\u660E\u539F\u56E0\uFF09\u3002",
+  "5. **\u5408\u5E76**\uFF1A\u5728\u4E3B\u4ED3\u7528 `git merge --no-ff <\u5206\u652F>` \u5408\u5E76\u5230\u672C\u5730\u96C6\u6210\u5206\u652F\uFF0C\u4FDD\u7559\u5206\u652F\u5386\u53F2\u3002",
+  "6. **\u6E05\u7406**\uFF1A\u5408\u5E76\u6210\u529F\u540E\uFF0C\u4E3B\u52A8\u5217\u51FA\u672C\u6B21\u4EA7\u751F\u7684\u5F85\u6E05\u7406\u8D44\u6E90\u6E05\u5355\uFF08\u786E\u5207\u7684 worktree \u76F8\u5BF9\u8DEF\u5F84\u4E0E\u5206\u652F\u540D\u79F0\uFF09\uFF1B\u83B7\u5F97\u7528\u6237\u660E\u786E\u786E\u8BA4\u540E\uFF0C\u6267\u884C `git worktree remove <worktreePath>` \u4E0E `git branch -d <branchName>` \u5B8C\u6210\u6E05\u7406\u95ED\u73AF\uFF1B\u4E25\u7981\u9759\u9ED8\u5220\u9664\u6216\u5148\u5220\u540E\u62A5\u3002",
+  "7. **\u6536\u5C3E**\uFF1A\u6C47\u62A5 commit\u3001\u5408\u5E76\u4E0E\u6E05\u7406\u7ED3\u679C\u3001reviewer \u4E0E Verdict\u3001\u672A\u5904\u7406\u7684 WARNING\u3002\u5230\u6B64\u4E3A\u6B62\uFF0C\u4E0D push\u3002",
+  "",
+  "## \u9009 reviewer",
+  "- \u6309\u5E73\u53F0\u9009\u4EBA\u5951\u7EA6\uFF1A\u6536\u85CF\u7684\u79C1\u6709\u8BA2\u9605/\u81EA\u5E26 key agent \u4F18\u5148\uFF0C\u5176\u6B21\u5176\u4ED6\u6536\u85CF\uFF0C\u518D\u5176\u6B21\u672A\u6536\u85CF\u7684\u79C1\u6709 agent\uFF1B\u4F4E\u4EF7\u80DC\u4EFB\u8005\u5373\u53EF\u3002\u53EA\u6709\u67B6\u6784/\u8BA1\u8D39/\u5B89\u5168/\u6570\u636E\u5B8C\u6574\u6027\u9AD8\u98CE\u9669\u6539\u52A8\u624D\u7528\u9876\u6863\u3002",
+  "- \u4F1A\u6D88\u8017\u5E73\u53F0\u79EF\u5206\u7684 agent \u5FC5\u987B\u5148\u5F81\u5F97\u7528\u6237\u5F53\u6B21\u540C\u610F\u3002",
+  "",
+  "## Boundaries",
+  "- \u4E0D\u66FF\u4EE3 reviewer \u4FA7\u7684\u8D28\u91CF\u95E8\uFF0C\u4E5F\u4E0D\u66FF\u4EE3\u6D4B\u8BD5\uFF1B\u6D4B\u8BD5\u6CA1\u8DD1\u8FC7\u4E0D\u8981\u5408\u5E76\u3002",
+  "- \u4E0D\u4F2A\u9020 review \u8BC1\u636E\uFF1B\u4E0D\u7528 `--no-verify` \u7ED5\u8FC7\u63D0\u4EA4\u6216\u5408\u5E76\u94A9\u5B50\u3002"
+].join("\n");
+function buildAutoReviewSkillContentBySlug(slug) {
+  return buildSkillDocMarkdown({
+    body: BODY,
+    skillConfig: buildAutoReviewSkillConfig(slug)
+  });
+}
+
 // packages/ai/skills/worktreeSkill.ts
 var WORKTREE_SKILL_SLUGS = ["worktree-isolation"];
-function deterministicId6(prefix, seed) {
+function deterministicId7(prefix, seed) {
   let h = 2166136261;
   for (let i = 0; i < seed.length; i++) {
     h ^= seed.charCodeAt(i);
@@ -1127,7 +1197,7 @@ function normalizeSkillSeed6(input) {
   return input.trim().toLowerCase().replace(/[^a-z0-9\u4e00-\u9fa5]+/g, "-").replace(/^-+|-+$/g, "");
 }
 function buildWorktreeSkillId(slug) {
-  return deterministicId6("01SK", normalizeSkillSeed6(slug) || slug);
+  return deterministicId7("01SK", normalizeSkillSeed6(slug) || slug);
 }
 function buildWorktreeSkillPageKey(userId, slug) {
   return `page-${userId}-${buildWorktreeSkillId(slug)}`;
@@ -1194,7 +1264,7 @@ function buildWorktreeSkillContentBySlug(slug) {
 
 // packages/ai/skills/systematicInvestigationSkill.ts
 var SYSTEMATIC_INVESTIGATION_SKILL_SLUGS = ["systematic-investigation"];
-function deterministicId7(prefix, seed) {
+function deterministicId8(prefix, seed) {
   let h = 2166136261;
   for (let i = 0; i < seed.length; i++) {
     h ^= seed.charCodeAt(i);
@@ -1207,7 +1277,7 @@ function normalizeSkillSeed7(input) {
   return input.trim().toLowerCase().replace(/[^a-z0-9\u4e00-\u9fa5]+/g, "-").replace(/^-+|-+$/g, "");
 }
 function buildSystematicinvestigationSkillId(slug) {
-  return deterministicId7("01SK", normalizeSkillSeed7(slug) || slug);
+  return deterministicId8("01SK", normalizeSkillSeed7(slug) || slug);
 }
 function buildSystematicinvestigationSkillPageKey(userId, slug) {
   return `page-${userId}-${buildSystematicinvestigationSkillId(slug)}`;
@@ -1231,7 +1301,7 @@ function buildSystematicinvestigationSkillContentBySlug(slug) {
 
 // packages/ai/skills/showMeSkill.ts
 var SHOW_ME_SKILL_SLUGS = ["show-me"];
-function deterministicId8(prefix, seed) {
+function deterministicId9(prefix, seed) {
   let h = 2166136261;
   for (let i = 0; i < seed.length; i++) {
     h ^= seed.charCodeAt(i);
@@ -1244,7 +1314,7 @@ function normalizeSkillSeed8(input) {
   return input.trim().toLowerCase().replace(/[^a-z0-9\u4e00-\u9fa5]+/g, "-").replace(/^-+|-+$/g, "");
 }
 function buildShowmeSkillId(slug) {
-  return deterministicId8("01SK", normalizeSkillSeed8(slug) || slug);
+  return deterministicId9("01SK", normalizeSkillSeed8(slug) || slug);
 }
 function buildShowmeSkillPageKey(userId, slug) {
   return `page-${userId}-${buildShowmeSkillId(slug)}`;
@@ -1268,7 +1338,7 @@ function buildShowmeSkillContentBySlug(slug) {
 
 // packages/ai/skills/cavemanSkill.ts
 var CAVEMAN_SKILL_SLUGS = ["caveman"];
-function deterministicId9(prefix, seed) {
+function deterministicId10(prefix, seed) {
   let h = 2166136261;
   for (let i = 0; i < seed.length; i++) {
     h ^= seed.charCodeAt(i);
@@ -1281,7 +1351,7 @@ function normalizeSkillSeed9(input) {
   return input.trim().toLowerCase().replace(/[^a-z0-9\u4e00-\u9fa5]+/g, "-").replace(/^-+|-+$/g, "");
 }
 function buildCavemanSkillId(slug) {
-  return deterministicId9("01SK", normalizeSkillSeed9(slug) || slug);
+  return deterministicId10("01SK", normalizeSkillSeed9(slug) || slug);
 }
 function buildCavemanSkillPageKey(userId, slug) {
   return `page-${userId}-${buildCavemanSkillId(slug)}`;
@@ -1305,7 +1375,7 @@ function buildCavemanSkillContentBySlug(slug) {
 
 // packages/ai/skills/skillCreatorSkill.ts
 var SKILL_CREATOR_SKILL_SLUGS = ["skill-creator"];
-function deterministicId10(prefix, seed) {
+function deterministicId11(prefix, seed) {
   let h = 2166136261;
   for (let i = 0; i < seed.length; i++) {
     h ^= seed.charCodeAt(i);
@@ -1318,7 +1388,7 @@ function normalizeSkillSeed10(input) {
   return input.trim().toLowerCase().replace(/[^a-z0-9\u4e00-\u9fa5]+/g, "-").replace(/^-+|-+$/g, "");
 }
 function buildSkillCreatorSkillId(slug) {
-  return deterministicId10("01SK", normalizeSkillSeed10(slug) || slug);
+  return deterministicId11("01SK", normalizeSkillSeed10(slug) || slug);
 }
 function buildSkillCreatorSkillPageKey(userId, slug) {
   return `page-${userId}-${buildSkillCreatorSkillId(slug)}`;
@@ -1342,7 +1412,7 @@ function buildSkillCreatorSkillContentBySlug(slug) {
 
 // packages/ai/skills/agentProviderSetupSkill.ts
 var AGENT_PROVIDER_SETUP_SKILL_SLUGS = ["agent-provider-setup"];
-function deterministicId11(prefix, seed) {
+function deterministicId12(prefix, seed) {
   let h = 2166136261;
   for (let i = 0; i < seed.length; i++) {
     h ^= seed.charCodeAt(i);
@@ -1355,7 +1425,7 @@ function normalizeSkillSeed11(input) {
   return input.trim().toLowerCase().replace(/[^a-z0-9\u4e00-\u9fa5]+/g, "-").replace(/^-+|-+$/g, "");
 }
 function buildAgentProviderSetupSkillId(slug) {
-  return deterministicId11("01SK", normalizeSkillSeed11(slug) || slug);
+  return deterministicId12("01SK", normalizeSkillSeed11(slug) || slug);
 }
 function buildAgentProviderSetupSkillPageKey(userId, slug) {
   return `page-${userId}-${buildAgentProviderSetupSkillId(slug)}`;
@@ -1486,6 +1556,13 @@ var SOURCES = [
     buildConfig: buildSearchSpaceSkillConfig,
     buildContent: buildSearchSpaceSkillContentBySlug
   },
+  {
+    slugs: AUTO_REVIEW_SKILL_SLUGS,
+    buildSkillId: buildAutoReviewSkillId,
+    buildPageKey: buildAutoReviewSkillPageKey,
+    buildConfig: buildAutoReviewSkillConfig,
+    buildContent: buildAutoReviewSkillContentBySlug
+  },
   {
     slugs: WORKTREE_SKILL_SLUGS,
     buildSkillId: buildWorktreeSkillId,

package/chunk-VIWDGTDA.js

@@ -0,0 +1,8 @@
+// packages/agent-runtime/cursor/isCursorOAuthAgent.ts
+function isCursorOAuthAgent(agent) {
+  return agent.apiKeyRef?.trim().toLowerCase() === "cursor";
+}
+
+export {
+  isCursorOAuthAgent
+};

package/chunk-VJVNU77E.js

@@ -0,0 +1,83 @@
+// packages/cli/secretScan.ts
+var ASSIGNMENT_KEYS = [
+  { label: "password", keys: "password|passwd", min: 8 },
+  { label: "psk", keys: "psk", min: 8 },
+  { label: "api key", keys: "api[_-]?key|apikey", min: 12 },
+  { label: "token", keys: "token|secret", min: 12 }
+];
+var ASSIGNMENT_PATTERNS = ASSIGNMENT_KEYS.map(
+  ({ label, keys, min }) => ({
+    label,
+    // 反向引用 \1 让引号成对成为必要条件：半截引号不算。值里允许空格与逗号——
+    // 写成带空格的口令是常见形态，旧的字符类会把这种值截成半截从而整条漏掉。
+    quoted: new RegExp(
+      `\\b(?:${keys})\\s*[:=]\\s*(["'])([^"']{${min},})\\1`,
+      "i"
+    ),
+    // 不带引号时只取到分隔符为止，是否算密钥交给 looksLikeBareSecret 判。
+    bare: new RegExp(
+      `\\b(?:${keys})\\s*[:=]\\s*([^\\s"',#]{${min},})`,
+      "i"
+    )
+  })
+);
+var PRIVATE_KEY_PATTERN = /-----BEGIN [A-Z ]*PRIVATE KEY-----/;
+var EXPRESSION_CHARS = /[?(){};|&<>$]/;
+var CONSTANT_CASE = /^[A-Z][A-Z0-9_]*$/;
+var CAMEL_CASE = /^[a-z][a-z0-9]*(?:[A-Z][a-z0-9]+)+$/;
+var PROPERTY_SEGMENT = /^[A-Za-z_$][\w$]*$/;
+var NAME_FORM_MAX_CHARS = 48;
+var PROPERTY_SEGMENT_MAX_CHARS = 24;
+function looksLikeDottedName(value) {
+  const segments = value.split(".");
+  if (segments.length < 2) return false;
+  return segments.every(
+    (segment) => PROPERTY_SEGMENT.test(segment) && (segment.length <= PROPERTY_SEGMENT_MAX_CHARS || CONSTANT_CASE.test(segment) && segment.includes("_"))
+  );
+}
+function stripTrailingMarkdownFence(value) {
+  return value.replace(/`+$/, "");
+}
+function looksLikeBareSecret(rawValue) {
+  const value = stripTrailingMarkdownFence(rawValue);
+  if (EXPRESSION_CHARS.test(value)) return false;
+  if (CONSTANT_CASE.test(value) && value.includes("_")) return false;
+  if (looksLikeDottedName(value)) return false;
+  if (value.length > NAME_FORM_MAX_CHARS) {
+    return /\d/.test(value);
+  }
+  if (CAMEL_CASE.test(value)) return false;
+  return true;
+}
+function toPreview(line) {
+  return line.length > 120 ? `${line.slice(0, 117)}...` : line;
+}
+function findPotentialSecrets(text) {
+  const findings = [];
+  text.split(/\r?\n/).forEach((line, index) => {
+    const lineNumber = index + 1;
+    const preview = toPreview(line);
+    for (const { label, quoted, bare } of ASSIGNMENT_PATTERNS) {
+      if (quoted.test(line)) {
+        findings.push({ label, line: lineNumber, preview });
+        continue;
+      }
+      const bareMatch = bare.exec(line);
+      if (bareMatch && looksLikeBareSecret(bareMatch[1])) {
+        findings.push({ label, line: lineNumber, preview });
+      }
+    }
+    if (PRIVATE_KEY_PATTERN.test(line)) {
+      findings.push({ label: "private key", line: lineNumber, preview });
+    }
+  });
+  return findings;
+}
+function formatSecretFindings(findings) {
+  return findings.map((finding) => `  line ${finding.line} (${finding.label}): ${finding.preview}`).join("\n");
+}
+
+export {
+  findPotentialSecrets,
+  formatSecretFindings
+};