nolo-cli 0.103.0-alpha.1 → 0.103.0

package/chunk-VJVNU77E.js

@@ -0,0 +1,83 @@
+// packages/cli/secretScan.ts
+var ASSIGNMENT_KEYS = [
+  { label: "password", keys: "password|passwd", min: 8 },
+  { label: "psk", keys: "psk", min: 8 },
+  { label: "api key", keys: "api[_-]?key|apikey", min: 12 },
+  { label: "token", keys: "token|secret", min: 12 }
+];
+var ASSIGNMENT_PATTERNS = ASSIGNMENT_KEYS.map(
+  ({ label, keys, min }) => ({
+    label,
+    // 反向引用 \1 让引号成对成为必要条件：半截引号不算。值里允许空格与逗号——
+    // 写成带空格的口令是常见形态，旧的字符类会把这种值截成半截从而整条漏掉。
+    quoted: new RegExp(
+      `\\b(?:${keys})\\s*[:=]\\s*(["'])([^"']{${min},})\\1`,
+      "i"
+    ),
+    // 不带引号时只取到分隔符为止，是否算密钥交给 looksLikeBareSecret 判。
+    bare: new RegExp(
+      `\\b(?:${keys})\\s*[:=]\\s*([^\\s"',#]{${min},})`,
+      "i"
+    )
+  })
+);
+var PRIVATE_KEY_PATTERN = /-----BEGIN [A-Z ]*PRIVATE KEY-----/;
+var EXPRESSION_CHARS = /[?(){};|&<>$]/;
+var CONSTANT_CASE = /^[A-Z][A-Z0-9_]*$/;
+var CAMEL_CASE = /^[a-z][a-z0-9]*(?:[A-Z][a-z0-9]+)+$/;
+var PROPERTY_SEGMENT = /^[A-Za-z_$][\w$]*$/;
+var NAME_FORM_MAX_CHARS = 48;
+var PROPERTY_SEGMENT_MAX_CHARS = 24;
+function looksLikeDottedName(value) {
+  const segments = value.split(".");
+  if (segments.length < 2) return false;
+  return segments.every(
+    (segment) => PROPERTY_SEGMENT.test(segment) && (segment.length <= PROPERTY_SEGMENT_MAX_CHARS || CONSTANT_CASE.test(segment) && segment.includes("_"))
+  );
+}
+function stripTrailingMarkdownFence(value) {
+  return value.replace(/`+$/, "");
+}
+function looksLikeBareSecret(rawValue) {
+  const value = stripTrailingMarkdownFence(rawValue);
+  if (EXPRESSION_CHARS.test(value)) return false;
+  if (CONSTANT_CASE.test(value) && value.includes("_")) return false;
+  if (looksLikeDottedName(value)) return false;
+  if (value.length > NAME_FORM_MAX_CHARS) {
+    return /\d/.test(value);
+  }
+  if (CAMEL_CASE.test(value)) return false;
+  return true;
+}
+function toPreview(line) {
+  return line.length > 120 ? `${line.slice(0, 117)}...` : line;
+}
+function findPotentialSecrets(text) {
+  const findings = [];
+  text.split(/\r?\n/).forEach((line, index) => {
+    const lineNumber = index + 1;
+    const preview = toPreview(line);
+    for (const { label, quoted, bare } of ASSIGNMENT_PATTERNS) {
+      if (quoted.test(line)) {
+        findings.push({ label, line: lineNumber, preview });
+        continue;
+      }
+      const bareMatch = bare.exec(line);
+      if (bareMatch && looksLikeBareSecret(bareMatch[1])) {
+        findings.push({ label, line: lineNumber, preview });
+      }
+    }
+    if (PRIVATE_KEY_PATTERN.test(line)) {
+      findings.push({ label: "private key", line: lineNumber, preview });
+    }
+  });
+  return findings;
+}
+function formatSecretFindings(findings) {
+  return findings.map((finding) => `  line ${finding.line} (${finding.label}): ${finding.preview}`).join("\n");
+}
+
+export {
+  findPotentialSecrets,
+  formatSecretFindings
+};

package/{chunk-ZCYXJSTU.js → chunk-VL3H5ZU3.js}

@@ -1,6 +1,9 @@
+import {
+  readSseFrames
+} from "./chunk-GMZLP5DV.js";
 import {
   sanitizeForOutbound
-} from "./chunk-CQ3WA2NE.js";
+} from "./chunk-NKWIS6G2.js";
 import {
   accumulateToolCallDelta,
   createThinkParserState,
@@ -25,7 +28,14 @@ import {
   stablePromptCacheKey,
   toOpenAiCompatibleMessages,
   toResponsesTools
-} from "./chunk-PUOC4YRO.js";
+} from "./chunk-M7VLQGQP.js";
+import {
+  isMeaningfulChatCompletionOutput,
+  isMeaningfulResponsesOutput
+} from "./chunk-LB5A6JTU.js";
+import {
+  clipCompactText
+} from "./chunk-5MMAK75Q.js";
 import {
   buildProviderExecutionPlan,
   canUsePlatformChatProvider,
@@ -35,16 +45,11 @@ import {
   resolvePlatformAuthToken,
   resolvePlatformServerUrl,
   resolveProviderTransportDecision
-} from "./chunk-6OZ36FXI.js";
-import {
-  clipCompactText,
-  isMeaningfulChatCompletionOutput,
-  isMeaningfulResponsesOutput
-} from "./chunk-DNCEALKX.js";
+} from "./chunk-27ONFIEY.js";
 import {
   NOLO_CLIENT_VERSION_HEADER,
   isPlatformMimoProviderModel
-} from "./chunk-Q67DOFOO.js";
+} from "./chunk-Y3PMXGLH.js";
 import {
   isRecord
 } from "./chunk-KUG52IAP.js";
@@ -213,18 +218,58 @@ function createResponsesToolAccumulator() {
 function keyOf(event) {
   return typeof event?.item_id === "string" && event.item_id ? event.item_id : typeof event?.item?.id === "string" && event.item.id ? event.item.id : typeof event?.item?.call_id === "string" && event.item.call_id ? event.item.call_id : typeof event?.call_id === "string" && event.call_id ? event.call_id : "";
 }
+function shortFingerprint(value) {
+  let hash = 2166136261;
+  for (let i = 0; i < value.length; i++) {
+    hash ^= value.charCodeAt(i);
+    hash = Math.imul(hash, 16777619);
+  }
+  return (hash >>> 0).toString(16).padStart(8, "0");
+}
+function parsesAsJsonObject(value) {
+  try {
+    const parsed = JSON.parse(value);
+    return parsed !== null && typeof parsed === "object";
+  } catch {
+    return false;
+  }
+}
 function applyResponsesToolEvent(calls, event) {
   const key = keyOf(event);
   if (!key) return;
   const item = event?.item;
   const id = item?.call_id || item?.id || event?.call_id || key;
-  const current = calls.get(key) ?? { id, name: "", arguments: "" };
+  const current = calls.get(key) ?? { id, name: "", arguments: "", sawDelta: false };
   if (typeof item?.name === "string" && item.name) current.name = item.name;
+  const applySnapshot = (next) => {
+    if (!current.sawDelta) {
+      current.arguments = next;
+      return;
+    }
+    if (next.startsWith(current.arguments)) {
+      current.arguments = next;
+    } else if (current.arguments.startsWith(next)) {
+    } else {
+      if (!parsesAsJsonObject(current.arguments) && parsesAsJsonObject(next)) {
+        console.warn(
+          `[responses-tool-call] adopting parsable snapshot over unparsable accumulation (accumulated length=${current.arguments.length}, fingerprint=${shortFingerprint(current.arguments)}; snapshot length=${next.length}, fingerprint=${shortFingerprint(next)})`
+        );
+        current.arguments = next;
+        return;
+      }
+      console.warn(
+        `[responses-tool-call] conflicting arguments snapshot (accumulated length=${current.arguments.length}, fingerprint=${shortFingerprint(current.arguments)}; snapshot length=${next.length}, fingerprint=${shortFingerprint(next)})`
+      );
+    }
+  };
   const itemArguments = normalizeResponsesToolArguments(item?.arguments);
-  if (itemArguments !== void 0) current.arguments = itemArguments;
+  if (itemArguments !== void 0) applySnapshot(itemArguments);
   const eventArguments = normalizeResponsesToolArguments(event?.arguments);
-  if (eventArguments !== void 0) current.arguments = eventArguments;
-  if (typeof event?.delta === "string") current.arguments += event.delta;
+  if (eventArguments !== void 0) applySnapshot(eventArguments);
+  if (typeof event?.delta === "string") {
+    current.sawDelta = true;
+    current.arguments += event.delta;
+  }
   calls.set(key, current);
 }
 function addResponsesToolCall(calls, call) {
@@ -232,7 +277,8 @@ function addResponsesToolCall(calls, call) {
   calls.set(key, {
     id: call.id,
     name: call.function.name,
-    arguments: call.function.arguments
+    arguments: call.function.arguments,
+    sawDelta: false
   });
 }
 function finalizeResponsesToolCalls(calls) {
@@ -347,83 +393,6 @@ function flushChatCompletionStream(state) {
   }
 }
 
-// packages/agent-runtime/sseFrames.ts
-async function* readSseFrames(response) {
-  const reader = response.body?.getReader();
-  if (!reader) {
-    throw new Error("SSE response did not include a readable body.");
-  }
-  const decoder = new TextDecoder();
-  let buffer = "";
-  while (true) {
-    const { done, value } = await reader.read();
-    if (done) break;
-    buffer += decoder.decode(value, { stream: true });
-    let boundary = findSseFrameBoundary(buffer);
-    while (boundary) {
-      yield buffer.slice(0, boundary.index);
-      buffer = buffer.slice(boundary.index + boundary.separatorLength);
-      boundary = findSseFrameBoundary(buffer);
-    }
-  }
-  const remaining = decoder.decode();
-  if (remaining) {
-    buffer += remaining;
-    let boundary = findSseFrameBoundary(buffer);
-    while (boundary) {
-      yield buffer.slice(0, boundary.index);
-      buffer = buffer.slice(boundary.index + boundary.separatorLength);
-      boundary = findSseFrameBoundary(buffer);
-    }
-  }
-  if (buffer.trim()) yield buffer;
-}
-function findSseFrameBoundary(buffer) {
-  const lfLf = buffer.indexOf("\n\n");
-  const crLfCrLf = buffer.indexOf("\r\n\r\n");
-  if (lfLf === -1 && crLfCrLf === -1) return null;
-  const useLf = lfLf !== -1 && (crLfCrLf === -1 || lfLf < crLfCrLf);
-  return useLf ? { index: lfLf, separatorLength: 2 } : { index: crLfCrLf, separatorLength: 4 };
-}
-async function* streamSseDataValues(response, parse) {
-  const reader = response.body?.getReader();
-  if (!reader) return;
-  const decoder = new TextDecoder();
-  let buffer = "";
-  while (true) {
-    const { done, value } = await reader.read();
-    if (done) break;
-    buffer += decoder.decode(value, { stream: true });
-    const lines = buffer.split("\n");
-    buffer = lines.pop() ?? "";
-    for (const line of lines) {
-      const parsed = parse(line);
-      if (parsed) yield parsed;
-    }
-  }
-  const remaining = decoder.decode();
-  if (remaining) {
-    buffer += remaining;
-    const lines = buffer.split("\n");
-    buffer = lines.pop() ?? "";
-    for (const line of lines) {
-      const parsed = parse(line);
-      if (parsed) yield parsed;
-    }
-  }
-  if (buffer.trim()) {
-    const parsed = parse(buffer);
-    if (parsed) yield parsed;
-  }
-}
-async function readSseDataValues(response, parse) {
-  const values = [];
-  for await (const value of streamSseDataValues(response, parse)) {
-    values.push(value);
-  }
-  return values;
-}
-
 // packages/agent-runtime/platformChatProvider.ts
 var PlatformStreamInterruptedError = class extends Error {
   code = "PLATFORM_STREAM_INTERRUPTED";
@@ -535,6 +504,12 @@ async function resolvePlatformChatProviderConfig(args) {
   };
 }
 function buildPlatformChatCompletionRequest(args) {
+  if (!args.providerConfig.authToken?.trim()) {
+    throw Object.assign(
+      new Error("desktop platform provider failed: AUTH_NO_TOKEN"),
+      { code: "AUTH_NO_TOKEN", authCode: "AUTH_NO_TOKEN", stage: "provider" }
+    );
+  }
   const usesResponsesApi = isResponsesEndpoint(args.providerConfig.endpoint);
   const requestOptions = usesResponsesApi ? toResponsesRequestOptions(args.providerConfig.requestOptions) : args.providerConfig.requestOptions;
   const shouldStripReasoning = shouldStripReasoningContentForOutbound(
@@ -926,9 +901,6 @@ export {
   applyChatCompletionDelta,
   flushChatCompletionStream,
   providerHttpFailure,
-  readSseFrames,
-  streamSseDataValues,
-  readSseDataValues,
   createResponsesToolAccumulator,
   applyResponsesToolEvent,
   finalizeResponsesToolCalls,

package/{chunk-Q554LLSI.js → chunk-VLGL7FOL.js}

@@ -4,7 +4,7 @@ import {
 } from "./chunk-KHCLMKZZ.js";
 import {
   asTrimmedNonEmptyStringArray
-} from "./chunk-VMFTFOWF.js";
+} from "./chunk-ODAPITXL.js";
 import {
   asOptionalTrimmedString
 } from "./chunk-G3SUCT4W.js";