nolo-cli 0.105.0-alpha.2 → 0.105.0

package/{chunk-3DII57IT.js → chunk-VCAQFMVN.js}

@@ -1,7 +1,7 @@
 import {
   DEFAULT_AGENT_BASE_POLICY,
   DEFAULT_USER_PREFERENCE_PROFILE
-} from "./chunk-AFUORTY4.js";
+} from "./chunk-DZ7R5V3Y.js";
 
 // packages/ai/policy/runtimePolicy.ts
 var clampLevel = (value, fallback) => {

package/chunk-VIWDGTDA.js

@@ -0,0 +1,8 @@
+// packages/agent-runtime/cursor/isCursorOAuthAgent.ts
+function isCursorOAuthAgent(agent) {
+  return agent.apiKeyRef?.trim().toLowerCase() === "cursor";
+}
+
+export {
+  isCursorOAuthAgent
+};

package/chunk-VJVNU77E.js

@@ -0,0 +1,83 @@
+// packages/cli/secretScan.ts
+var ASSIGNMENT_KEYS = [
+  { label: "password", keys: "password|passwd", min: 8 },
+  { label: "psk", keys: "psk", min: 8 },
+  { label: "api key", keys: "api[_-]?key|apikey", min: 12 },
+  { label: "token", keys: "token|secret", min: 12 }
+];
+var ASSIGNMENT_PATTERNS = ASSIGNMENT_KEYS.map(
+  ({ label, keys, min }) => ({
+    label,
+    // 反向引用 \1 让引号成对成为必要条件：半截引号不算。值里允许空格与逗号——
+    // 写成带空格的口令是常见形态，旧的字符类会把这种值截成半截从而整条漏掉。
+    quoted: new RegExp(
+      `\\b(?:${keys})\\s*[:=]\\s*(["'])([^"']{${min},})\\1`,
+      "i"
+    ),
+    // 不带引号时只取到分隔符为止，是否算密钥交给 looksLikeBareSecret 判。
+    bare: new RegExp(
+      `\\b(?:${keys})\\s*[:=]\\s*([^\\s"',#]{${min},})`,
+      "i"
+    )
+  })
+);
+var PRIVATE_KEY_PATTERN = /-----BEGIN [A-Z ]*PRIVATE KEY-----/;
+var EXPRESSION_CHARS = /[?(){};|&<>$]/;
+var CONSTANT_CASE = /^[A-Z][A-Z0-9_]*$/;
+var CAMEL_CASE = /^[a-z][a-z0-9]*(?:[A-Z][a-z0-9]+)+$/;
+var PROPERTY_SEGMENT = /^[A-Za-z_$][\w$]*$/;
+var NAME_FORM_MAX_CHARS = 48;
+var PROPERTY_SEGMENT_MAX_CHARS = 24;
+function looksLikeDottedName(value) {
+  const segments = value.split(".");
+  if (segments.length < 2) return false;
+  return segments.every(
+    (segment) => PROPERTY_SEGMENT.test(segment) && (segment.length <= PROPERTY_SEGMENT_MAX_CHARS || CONSTANT_CASE.test(segment) && segment.includes("_"))
+  );
+}
+function stripTrailingMarkdownFence(value) {
+  return value.replace(/`+$/, "");
+}
+function looksLikeBareSecret(rawValue) {
+  const value = stripTrailingMarkdownFence(rawValue);
+  if (EXPRESSION_CHARS.test(value)) return false;
+  if (CONSTANT_CASE.test(value) && value.includes("_")) return false;
+  if (looksLikeDottedName(value)) return false;
+  if (value.length > NAME_FORM_MAX_CHARS) {
+    return /\d/.test(value);
+  }
+  if (CAMEL_CASE.test(value)) return false;
+  return true;
+}
+function toPreview(line) {
+  return line.length > 120 ? `${line.slice(0, 117)}...` : line;
+}
+function findPotentialSecrets(text) {
+  const findings = [];
+  text.split(/\r?\n/).forEach((line, index) => {
+    const lineNumber = index + 1;
+    const preview = toPreview(line);
+    for (const { label, quoted, bare } of ASSIGNMENT_PATTERNS) {
+      if (quoted.test(line)) {
+        findings.push({ label, line: lineNumber, preview });
+        continue;
+      }
+      const bareMatch = bare.exec(line);
+      if (bareMatch && looksLikeBareSecret(bareMatch[1])) {
+        findings.push({ label, line: lineNumber, preview });
+      }
+    }
+    if (PRIVATE_KEY_PATTERN.test(line)) {
+      findings.push({ label: "private key", line: lineNumber, preview });
+    }
+  });
+  return findings;
+}
+function formatSecretFindings(findings) {
+  return findings.map((finding) => `  line ${finding.line} (${finding.label}): ${finding.preview}`).join("\n");
+}
+
+export {
+  findPotentialSecrets,
+  formatSecretFindings
+};

package/{chunk-A6FMKU7M.js → chunk-VVJ2ENLY.js}

@@ -5,20 +5,18 @@ import {
 } from "./chunk-ZJ7UHBJS.js";
 import {
   deleteDialog,
-  i18nBaseConfig,
-  initReactI18next,
-  instance,
+  runtime_default,
   toast
-} from "./chunk-FQUHIG5X.js";
+} from "./chunk-44CU7CKA.js";
 import {
-  require_date_fns
-} from "./chunk-M76ECQRD.js";
+  formatISO
+} from "./chunk-ZRAU6T47.js";
 import {
   require_react
 } from "./chunk-YDH3FDFQ.js";
 import {
   isSystemAdmin
-} from "./chunk-QDSINZM3.js";
+} from "./chunk-A4SQRTZ6.js";
 import {
   asRecordOrEmpty
 } from "./chunk-KX6YBIHG.js";
@@ -27,7 +25,7 @@ import {
   addContentAction,
   checkSpaceMembership,
   localSpaceAuthorityPatchStamp
-} from "./chunk-V4MJDUSR.js";
+} from "./chunk-3F424ASC.js";
 import {
   createSpaceKey,
   normalizeSpaceId
@@ -41,7 +39,24 @@ import {
   uploadFileAction,
   upsertSSREntity,
   write
-} from "./chunk-H62HCIUP.js";
+} from "./chunk-4WMMIL66.js";
+import {
+  DEVICE_LOCAL_OWNER_ID,
+  getRuntimeServerContext,
+  isDeviceLocalSpaceBody,
+  resolveReplicationServers,
+  scheduleDeleteReplication,
+  scheduleWriteReplication
+} from "./chunk-O7SVKKLY.js";
+import {
+  buildTombstoneRecord
+} from "./chunk-D2MDMY2M.js";
+import {
+  extractUserId
+} from "./chunk-M2EJHDJP.js";
+import {
+  isRecord
+} from "./chunk-KUG52IAP.js";
 import {
   SEPARATOR,
   asTrimmedNonEmptyStringArray,
@@ -53,41 +68,26 @@ import {
   rowKey,
   splitKey,
   ulid
-} from "./chunk-VMFTFOWF.js";
+} from "./chunk-OKGVNZTL.js";
 import {
   asOptionalFiniteNumber
 } from "./chunk-WWC7I6TA.js";
 import {
-  extractUserId
-} from "./chunk-M2EJHDJP.js";
-import {
-  DEVICE_LOCAL_OWNER_ID,
-  createAsyncThunk,
-  getRuntimeServerContext,
-  isDeviceLocalSpaceBody,
-  resolveReplicationServers,
-  scheduleDeleteReplication,
-  scheduleWriteReplication
-} from "./chunk-UKWGR5SS.js";
+  createAsyncThunk
+} from "./chunk-VY6VFGKR.js";
 import {
   createClientLogger,
   isAbortError
-} from "./chunk-QOKAKDPE.js";
+} from "./chunk-HIM3FCLF.js";
 import {
   selectIdentityUserId
 } from "./chunk-SEJ5OS6F.js";
 import {
-  buildTombstoneRecord
-} from "./chunk-GBRG75BQ.js";
-import {
-  isRecord
-} from "./chunk-KUG52IAP.js";
+  asOptionalPositiveFiniteNumber
+} from "./chunk-U6VC4MU4.js";
 import {
   asTrimmedString
 } from "./chunk-3EUW3WEO.js";
-import {
-  asOptionalPositiveFiniteNumber
-} from "./chunk-U6VC4MU4.js";
 import {
   asOptionalTrimmedString
 } from "./chunk-G3SUCT4W.js";
@@ -97,7 +97,6 @@ import {
 
 // packages/render/table/tableStore.ts
 var import_react = __toESM(require_react(), 1);
-var import_date_fns2 = __toESM(require_date_fns(), 1);
 import { ulid as ulid3 } from "ulid";
 
 // packages/render/table/fetchAndCacheTableRows.ts
@@ -434,25 +433,7 @@ function addColumnOptionInMeta(meta, input, deps) {
 }
 
 // packages/render/table/createTableAction.ts
-var import_date_fns = __toESM(require_date_fns(), 1);
 import { ulid as ulid2 } from "ulid";
-
-// packages/app/i18n/client.ts
-instance.use(initReactI18next).init({
-  ...i18nBaseConfig,
-  lng: "zh-CN" /* ZH_CN */,
-  fallbackLng: {
-    ["en" /* EN */]: ["en" /* EN */],
-    ["zh-CN" /* ZH_CN */]: ["zh-CN" /* ZH_CN */, "en" /* EN */],
-    ["zh-Hant" /* ZH_HANT */]: ["zh-Hant" /* ZH_HANT */, "zh-CN" /* ZH_CN */, "en" /* EN */],
-    ["ja" /* JA */]: ["ja" /* JA */, "en" /* EN */],
-    default: ["en" /* EN */]
-  },
-  compatibilityJSON: "v3"
-});
-var client_default = instance;
-
-// packages/render/table/createTableAction.ts
 var DEFAULT_COLUMNS = [
   {
     name: "title",
@@ -554,9 +535,9 @@ var createTableAction = async ({
   const spaceId = customSpaceId ?? getCurrentSpaceId();
   const tableId = ulid2();
   const now = /* @__PURE__ */ new Date();
-  const nowIso = (0, import_date_fns.formatISO)(now);
+  const nowIso = formatISO(now);
   const dbKey = metaKey(userId, tableId);
-  const defaultTitle = client_default.t("space:newTable", {
+  const defaultTitle = runtime_default.t("space:newTable", {
     defaultValue: "\u65B0\u5EFA\u8868\u683C"
   });
   const title = asOptionalTrimmedString(customTitle) ?? defaultTitle;
@@ -924,7 +905,7 @@ var addRow = createTableCommand(
     });
     try {
       const { dbKey, rowId } = rowKey.create(tenantId, tableId);
-      const nowIso = (0, import_date_fns2.formatISO)(/* @__PURE__ */ new Date());
+      const nowIso = formatISO(/* @__PURE__ */ new Date());
       const row = {
         dbKey,
         tenantId,
@@ -985,7 +966,7 @@ var deleteRow = createTableCommand(
       if (!row) {
         throw new Error(`\u5F53\u524D\u8868\u4E2D\u627E\u4E0D\u5230\u8981\u5220\u9664\u7684\u884C\uFF1A${dbKey}`);
       }
-      const nowIso = (0, import_date_fns2.formatISO)(/* @__PURE__ */ new Date());
+      const nowIso = formatISO(/* @__PURE__ */ new Date());
       const tombstoneRow = {
         ...row,
         deletedAt: nowIso,
@@ -1063,7 +1044,7 @@ var addColumn = createTableCommand(
     const result = addColumnToMeta(
       meta,
       { columnName },
-      { id: ulid3(), nowIso: (0, import_date_fns2.formatISO)(/* @__PURE__ */ new Date()) }
+      { id: ulid3(), nowIso: formatISO(/* @__PURE__ */ new Date()) }
     );
     if (!result.ok) {
       throw new Error(result.error);
@@ -1104,7 +1085,7 @@ var deleteColumn = createTableCommand(
       meta,
       state.rows,
       { columnName },
-      { nowIso: (0, import_date_fns2.formatISO)(/* @__PURE__ */ new Date()) }
+      { nowIso: formatISO(/* @__PURE__ */ new Date()) }
     );
     if (!result.ok) {
       throw new Error(result.error);
@@ -1146,7 +1127,7 @@ var reorderColumn = createTableCommand(
     const result = reorderColumnInMeta(
       meta,
       { fromIndex, toIndex },
-      { nowIso: (0, import_date_fns2.formatISO)(/* @__PURE__ */ new Date()) }
+      { nowIso: formatISO(/* @__PURE__ */ new Date()) }
     );
     if (!result.ok) {
       throw new Error(result.error);
@@ -1187,7 +1168,7 @@ var renameColumnLabel = createTableCommand(
     const result = renameColumnLabelInMeta(
       meta,
       { columnId, label: newLabel },
-      { nowIso: (0, import_date_fns2.formatISO)(/* @__PURE__ */ new Date()) }
+      { nowIso: formatISO(/* @__PURE__ */ new Date()) }
     );
     if (!result.ok) {
       throw new Error(result.error);
@@ -1225,7 +1206,7 @@ var updateColumnWidth = createTableCommand(
     const result = updateColumnWidthInMeta(
       meta,
       { columnId, width },
-      { nowIso: (0, import_date_fns2.formatISO)(/* @__PURE__ */ new Date()) }
+      { nowIso: formatISO(/* @__PURE__ */ new Date()) }
     );
     if (!result.ok) {
       throw new Error(result.error);
@@ -1263,7 +1244,7 @@ var addColumnOption = createTableCommand(
     const result = addColumnOptionInMeta(
       meta,
       { columnId, option },
-      { nowIso: (0, import_date_fns2.formatISO)(/* @__PURE__ */ new Date()) }
+      { nowIso: formatISO(/* @__PURE__ */ new Date()) }
     );
     if (!result.ok) {
       throw new Error(result.error);
@@ -1305,7 +1286,7 @@ var renameTable = createTableCommand(
     if (!meta || meta.tenantId !== tenantId || meta.tableId !== tableId) {
       throw new Error("\u5F53\u524D\u6CA1\u6709\u52A0\u8F7D\u5BF9\u5E94\u7684\u8868\u5B9A\u4E49");
     }
-    const nowIso = (0, import_date_fns2.formatISO)(/* @__PURE__ */ new Date());
+    const nowIso = formatISO(/* @__PURE__ */ new Date());
     setState((s) => ({ ...s, error: null }));
     try {
       if (dispatch) {
@@ -1346,7 +1327,7 @@ var updateTableIcon = createTableCommand(
     if (!meta || meta.tenantId !== tenantId || meta.tableId !== tableId) {
       throw new Error("\u5F53\u524D\u6CA1\u6709\u52A0\u8F7D\u5BF9\u5E94\u7684\u8868\u5B9A\u4E49");
     }
-    const nowIso = (0, import_date_fns2.formatISO)(/* @__PURE__ */ new Date());
+    const nowIso = formatISO(/* @__PURE__ */ new Date());
     setState((s) => ({ ...s, error: null }));
     try {
       if (dispatch) {
@@ -1384,7 +1365,7 @@ var updateCell = createTableCommand(
     const { dbKey, columnName, value } = args;
     setState((s) => ({ ...s, error: null }));
     try {
-      const nowIso = (0, import_date_fns2.formatISO)(/* @__PURE__ */ new Date());
+      const nowIso = formatISO(/* @__PURE__ */ new Date());
       if (dispatch) {
         await safeDispatch(
           dispatch,
@@ -1453,11 +1434,11 @@ var ENTITY_DELETE_STRATEGIES = {
     await dispatch(deleteTable({ dbKey: key })).unwrap();
   },
   file: async (key, { thunkAPI }) => {
-    const { deleteFileAction } = await import("./deleteFile-YG6QMJLU.js");
+    const { deleteFileAction } = await import("./deleteFile-KESP65GC.js");
     await deleteFileAction(key, thunkAPI);
   },
   image: async (key, { thunkAPI }) => {
-    const { deleteFileAction } = await import("./deleteFile-YG6QMJLU.js");
+    const { deleteFileAction } = await import("./deleteFile-KESP65GC.js");
     await deleteFileAction(key, thunkAPI);
   },
   agent: async (key, { dispatch, userId, sourceServerOrigin }) => {
@@ -2097,11 +2078,11 @@ var uploadAndAddFileToSpaceAction = async (payload, thunkAPI) => {
   const state3 = getState();
   const userId = selectIdentityUserId(state3);
   if (!userId) {
-    console.warn("[uploadAndAddFileToSpace] Warning: No userId found in state. Uploading as anonymous/unknown might cause issues.");
+    throw new Error("Cannot upload a file to a space without an authenticated user.");
   }
   try {
     const id = ulid();
-    const dbKey = fileKey.single(userId || "unknown", id);
+    const dbKey = fileKey.single(userId, id);
     const contentType = "file" /* FILE */;
     const fileCategory = resolveFileCategory({
       mimeType: file.type,
@@ -2391,7 +2372,6 @@ var updateContentCategory = createAsyncThunk(
 
 export {
   fetchAndCacheTableRows,
-  client_default,
   getTableState,
   loadTableRows,
   addRow,