nolo-cli 0.107.0-alpha.4 → 0.107.0

package/{chunk-6YTOJY35.js → chunk-VBG7GWWR.js}

@@ -10,6 +10,114 @@ var GLOBAL_DIALOG_RUNTIME_KEY = "__global__";
 
 // packages/chat/dialog/dialogRuntimeStore.ts
 var import_react = __toESM(require_react());
+
+// packages/app/utils/localStorageState.ts
+function readStorageJSON(key) {
+  if (typeof window === "undefined") return null;
+  try {
+    const raw = window.localStorage.getItem(key);
+    if (!raw) return null;
+    return JSON.parse(raw);
+  } catch {
+    return null;
+  }
+}
+function writeStorageJSON(key, value) {
+  if (typeof window === "undefined") return;
+  try {
+    window.localStorage.setItem(key, JSON.stringify(value));
+  } catch {
+  }
+}
+
+// packages/chat/dialog/mediaJobPendingPersistence.ts
+var MEDIA_JOB_PENDING_STORAGE_KEY = "nolo:chat:media-job-pending:v1";
+var MEDIA_JOB_PENDING_KEEP_PER_DIALOG = 10;
+var currentActorId = null;
+function setMediaJobPendingActor(actorId) {
+  currentActorId = actorId && actorId.length > 0 ? actorId : null;
+}
+function getMediaJobPendingActor() {
+  return currentActorId;
+}
+var actorKey = () => `@${currentActorId ?? "anon"}`;
+var bucketKeyOf = (dialogKey) => dialogKey ?? GLOBAL_DIALOG_RUNTIME_KEY;
+var isEntry = (value) => {
+  if (!value || typeof value !== "object") return false;
+  const entry = value;
+  return typeof entry.id === "string" && entry.id.length > 0 && typeof entry.name === "string";
+};
+var readAllActors = () => {
+  const raw = readStorageJSON(MEDIA_JOB_PENDING_STORAGE_KEY);
+  if (!raw || typeof raw !== "object" || Array.isArray(raw)) return {};
+  return raw;
+};
+var writeActorMap = (map) => {
+  const all = readAllActors();
+  all[actorKey()] = map;
+  writeStorageJSON(MEDIA_JOB_PENDING_STORAGE_KEY, all);
+};
+function readMediaJobPendingMap() {
+  const scoped = readAllActors()[actorKey()];
+  if (!scoped || typeof scoped !== "object" || Array.isArray(scoped)) return {};
+  const map = {};
+  for (const [dialogKey, entries] of Object.entries(scoped)) {
+    if (!Array.isArray(entries)) continue;
+    const valid = entries.filter(isEntry).map((entry) => ({
+      id: entry.id,
+      name: entry.name,
+      fileKey: typeof entry.fileKey === "string" ? entry.fileKey : void 0,
+      mimeType: typeof entry.mimeType === "string" ? entry.mimeType : void 0,
+      size: typeof entry.size === "number" ? entry.size : void 0,
+      durationSec: typeof entry.durationSec === "number" ? entry.durationSec : void 0,
+      savedAt: typeof entry.savedAt === "number" && Number.isFinite(entry.savedAt) ? entry.savedAt : 0
+    }));
+    if (valid.length) map[dialogKey] = valid;
+  }
+  return map;
+}
+function upsertMediaJobPendingEntry(entry) {
+  const map = readMediaJobPendingMap();
+  const dialogKey = bucketKeyOf(entry.dialogKey);
+  const kept = (map[dialogKey] ?? []).filter((item) => item.id !== entry.id);
+  kept.push({ ...entry, savedAt: Date.now() });
+  map[dialogKey] = kept.slice(-MEDIA_JOB_PENDING_KEEP_PER_DIALOG);
+  writeActorMap(map);
+}
+function removeMediaJobPendingEntryById(id) {
+  const map = readMediaJobPendingMap();
+  let changed = false;
+  for (const [dialogKey, entries] of Object.entries(map)) {
+    const kept = entries.filter((entry) => entry.id !== id);
+    if (kept.length !== entries.length) {
+      changed = true;
+      if (kept.length) map[dialogKey] = kept;
+      else delete map[dialogKey];
+    }
+  }
+  if (changed) writeActorMap(map);
+}
+function clearMediaJobPendingEntries(payload) {
+  if (payload?.all) {
+    writeStorageJSON(MEDIA_JOB_PENDING_STORAGE_KEY, {});
+    return;
+  }
+  const dialogKey = bucketKeyOf(payload?.dialogKey);
+  const map = readMediaJobPendingMap();
+  if (!(dialogKey in map)) return;
+  delete map[dialogKey];
+  writeActorMap(map);
+}
+function pruneMediaJobPendingEntries(dialogKey, keep = MEDIA_JOB_PENDING_KEEP_PER_DIALOG) {
+  const key = bucketKeyOf(dialogKey);
+  const map = readMediaJobPendingMap();
+  const entries = map[key];
+  if (!entries || entries.length <= keep) return;
+  map[key] = entries.slice(-keep);
+  writeActorMap(map);
+}
+
+// packages/chat/dialog/dialogRuntimeStore.ts
 var createEmptyTokenStats = () => ({
   inputTokens: 0,
   outputTokens: 0,
@@ -21,7 +129,10 @@ var createEmptyDialogRuntimeState = () => ({
   activeControllers: {},
   pendingRawData: {},
   loopStopReason: null,
-  pendingUserInputQueue: []
+  turnPhase: null,
+  turnPhaseTurnId: null,
+  pendingUserInputQueue: [],
+  recoveredForegroundTurn: null
 });
 var activeDialogKey = null;
 var configError = null;
@@ -67,6 +178,8 @@ function resetDialogRuntimeSessionState(dialogKey) {
   const runtime = ensureDialogRuntimeState(dialogKey);
   runtime.tokens = createEmptyTokenStats();
   runtime.loopStopReason = null;
+  runtime.turnPhase = null;
+  runtime.turnPhaseTurnId = null;
   runtime.pendingUserInputQueue = [];
   notify();
 }
@@ -74,21 +187,49 @@ function addPendingFile(payload) {
   const targetRuntimeKey = payload.targetDialogKey ?? payload.runtimeDialogKey ?? (payload.type === "dialog" ? activeDialogKey : payload.dialogKey);
   const runtime = ensureDialogRuntimeState(targetRuntimeKey);
   if (!runtime.pendingFiles.some((f) => f.id === payload.id)) {
-    runtime.pendingFiles.push(payload);
+    runtime.pendingFiles = [...runtime.pendingFiles, payload];
+    if (payload.type === "media_job") {
+      upsertMediaJobPendingEntry({
+        id: payload.id,
+        name: payload.name,
+        fileKey: payload.fileKey,
+        mimeType: payload.mimeType,
+        size: payload.size,
+        durationSec: payload.durationSec,
+        // 与写入侧 bucket 推导严格同源：`dialogKey || GLOBAL_DIALOG_RUNTIME_KEY`
+        // （useMessageInputFiles 的 effectiveDialogKey 同规则）。不依赖
+        // activeDialogKey 隐式回退，保证恢复时读到的就是当初写入的 bucket。
+        dialogKey: payload.dialogKey ?? GLOBAL_DIALOG_RUNTIME_KEY
+      });
+    }
     notify();
   }
   return action("dialogRuntime/addPendingFile", payload);
 }
 function removePendingFile(fileId) {
   const runtime = ensureDialogRuntimeState();
-  const fileToRemove = runtime.pendingFiles.find((f) => f.id === fileId);
+  let fileToRemove = runtime.pendingFiles.find((f) => f.id === fileId);
+  let runtimeHoldingFile = runtime;
+  if (!fileToRemove) {
+    for (const candidate of Object.values(runtimeByKey)) {
+      const found = candidate.pendingFiles.find((f) => f.id === fileId);
+      if (found) {
+        fileToRemove = found;
+        runtimeHoldingFile = candidate;
+        break;
+      }
+    }
+  }
   if (fileToRemove) {
     if (fileToRemove.pageKey) {
-      delete runtime.pendingRawData[fileToRemove.pageKey];
+      delete runtimeHoldingFile.pendingRawData[fileToRemove.pageKey];
     }
-    runtime.pendingFiles = runtime.pendingFiles.filter(
+    runtimeHoldingFile.pendingFiles = runtimeHoldingFile.pendingFiles.filter(
       (file) => file.id !== fileId
     );
+    if (fileToRemove.type === "media_job") {
+      removeMediaJobPendingEntryById(fileToRemove.id);
+    }
     notify();
   }
   return action("dialogRuntime/removePendingFile", fileId);
@@ -99,10 +240,14 @@ function clearPendingAttachments(payload) {
       runtime2.pendingFiles = [];
       runtime2.pendingRawData = {};
     });
+    clearMediaJobPendingEntries({ all: true });
     notify();
     return action("dialogRuntime/clearPendingAttachments", payload);
   }
   const runtime = ensureDialogRuntimeState(payload?.dialogKey);
+  runtime.pendingFiles.forEach((file) => {
+    if (file.type === "media_job") removeMediaJobPendingEntryById(file.id);
+  });
   runtime.pendingFiles = [];
   runtime.pendingRawData = {};
   notify();
@@ -114,11 +259,89 @@ function setLoopStopReason(payload) {
   notify();
   return action("dialogRuntime/setLoopStopReason", payload);
 }
+function setRecoveredForegroundTurn(payload) {
+  const runtime = ensureDialogRuntimeState(payload.dialogKey);
+  runtime.recoveredForegroundTurn = payload.status;
+  notify();
+  return action("dialogRuntime/setRecoveredForegroundTurn", payload);
+}
+function claimDialogTurnPhase(payload) {
+  const runtime = ensureDialogRuntimeState(payload.dialogKey);
+  runtime.turnPhaseTurnId = payload.turnId;
+  runtime.turnPhase = null;
+  notify();
+  return action("dialogRuntime/claimDialogTurnPhase", payload);
+}
+function setDialogTurnPhase(payload) {
+  const runtime = ensureDialogRuntimeState(payload.dialogKey);
+  if (typeof payload.turnId === "string" && runtime.turnPhaseTurnId !== null && runtime.turnPhaseTurnId !== payload.turnId) {
+    return action("dialogRuntime/setDialogTurnPhase:rejected", payload);
+  }
+  runtime.turnPhase = payload.phase;
+  runtime.turnPhaseTurnId = payload.phase === null ? null : payload.turnId ?? null;
+  notify();
+  return action("dialogRuntime/setDialogTurnPhase", payload);
+}
+function clearDialogTurnPhase(payload = {}) {
+  return setDialogTurnPhase({ phase: null, dialogKey: payload.dialogKey, turnId: payload.turnId });
+}
 function clearDialogRuntimeState(payload) {
+  const runtime = runtimeByKey[payload.dialogKey];
+  runtime?.pendingFiles.forEach((file) => {
+    if (file.type === "media_job") removeMediaJobPendingEntryById(file.id);
+  });
   delete runtimeByKey[payload.dialogKey];
   notify();
   return action("dialogRuntime/clearDialogRuntimeState", payload);
 }
+function restoreMediaJobPendingFiles(dialogKey) {
+  const runtimeKey = resolveDialogRuntimeKey(dialogKey);
+  const entries = (readMediaJobPendingMap()[runtimeKey] ?? []).slice(-MEDIA_JOB_PENDING_KEEP_PER_DIALOG);
+  if (!entries.length) return 0;
+  const runtime = ensureDialogRuntimeState(runtimeKey);
+  const existingIds = new Set(runtime.pendingFiles.map((file) => file.id));
+  let restored = 0;
+  for (const entry of entries) {
+    if (existingIds.has(entry.id)) continue;
+    addPendingFile({
+      id: entry.id,
+      name: entry.name,
+      type: "media_job",
+      fileKey: entry.fileKey,
+      mimeType: entry.mimeType,
+      size: entry.size,
+      durationSec: entry.durationSec,
+      trackingId: entry.id,
+      dialogKey: runtimeKey
+    });
+    restored += 1;
+  }
+  pruneMediaJobPendingEntries(runtimeKey);
+  return restored;
+}
+var MEDIA_NOTE_PAGE_KEY_PREFIX = "media-note:";
+var isMediaNotePageReference = (pageKey) => typeof pageKey === "string" && pageKey.startsWith(MEDIA_NOTE_PAGE_KEY_PREFIX);
+var getMediaJobRuntimeActor = () => getMediaJobPendingActor();
+function setMediaJobRuntimeActor(actorId) {
+  const next = actorId && actorId.length ? actorId : null;
+  if (getMediaJobPendingActor() === next) return;
+  setMediaJobPendingActor(next);
+  for (const key of Object.keys(runtimeByKey)) {
+    const runtime = runtimeByKey[key];
+    const kept = runtime.pendingFiles.filter(
+      (f) => f.type !== "media_job" && !isMediaNotePageReference(f.pageKey)
+    );
+    if (kept.length !== runtime.pendingFiles.length) {
+      runtime.pendingFiles = kept;
+    }
+    for (const pageKey of Object.keys(runtime.pendingRawData)) {
+      if (isMediaNotePageReference(pageKey)) {
+        delete runtime.pendingRawData[pageKey];
+      }
+    }
+  }
+  notify();
+}
 function addActiveController(payload) {
   const runtime = ensureDialogRuntimeState(payload.dialogKey);
   runtime.activeControllers[payload.messageId] = payload.controller;
@@ -181,7 +404,7 @@ function tokenUsageLiveUpdate(payload) {
 }
 function addPageReferenceToRuntime(payload) {
   const runtime = ensureDialogRuntimeState(payload.dialogKey);
-  runtime.pendingFiles.push(payload.reference);
+  runtime.pendingFiles = [...runtime.pendingFiles, payload.reference];
   if (payload.rawData?.pageKey) {
     runtime.pendingRawData[payload.rawData.pageKey] = payload.rawData;
   }
@@ -258,6 +481,12 @@ function getPendingUserInputQueue(dialogKey) {
 function getLoopStopReason(dialogKey) {
   return getDialogRuntimeState(dialogKey).loopStopReason;
 }
+function getDialogTurnPhase(dialogKey) {
+  return getDialogRuntimeState(dialogKey).turnPhase;
+}
+function getRecoveredForegroundTurn(dialogKey) {
+  return getDialogRuntimeState(dialogKey).recoveredForegroundTurn;
+}
 var selectDialogRuntimeByKey = (_state, dialogKey) => getDialogRuntimeState(dialogKey);
 var selectPendingFiles = (_state, dialogKey) => getPendingFiles(dialogKey);
 var selectActiveControllers = (_state, dialogKey) => getActiveControllers(dialogKey);
@@ -293,6 +522,14 @@ function useLoopStopReason(dialogKey) {
   (0, import_react.useSyncExternalStore)(subscribe, getSnapshot, getSnapshot);
   return getLoopStopReason(dialogKey);
 }
+function useDialogTurnPhase(dialogKey) {
+  (0, import_react.useSyncExternalStore)(subscribe, getSnapshot, getSnapshot);
+  return getDialogTurnPhase(dialogKey);
+}
+function useRecoveredForegroundTurn(dialogKey) {
+  (0, import_react.useSyncExternalStore)(subscribe, getSnapshot, getSnapshot);
+  return getRecoveredForegroundTurn(dialogKey);
+}
 function useDialogRuntimeTokens(dialogKey) {
   (0, import_react.useSyncExternalStore)(subscribe, getSnapshot, getSnapshot);
   return getDialogRuntimeTokens(dialogKey);
@@ -316,7 +553,14 @@ export {
   removePendingFile,
   clearPendingAttachments,
   setLoopStopReason,
+  setRecoveredForegroundTurn,
+  claimDialogTurnPhase,
+  setDialogTurnPhase,
+  clearDialogTurnPhase,
   clearDialogRuntimeState,
+  restoreMediaJobPendingFiles,
+  getMediaJobRuntimeActor,
+  setMediaJobRuntimeActor,
   addActiveController,
   removeActiveController,
   clearActiveControllers,
@@ -330,8 +574,7 @@ export {
   deleteDialogRuntime,
   abortActiveControllers,
   getDialogRuntimeTokens,
-  getPendingUserInputQueue,
-  getLoopStopReason,
+  getRecoveredForegroundTurn,
   selectDialogRuntimeByKey,
   selectPendingFiles,
   selectActiveControllers,
@@ -346,6 +589,8 @@ export {
   useActiveControllers,
   usePendingUserInputQueue,
   useLoopStopReason,
+  useDialogTurnPhase,
+  useRecoveredForegroundTurn,
   useDialogRuntimeTokens,
   useCurrentDialogKey,
   useDialogConfigError

package/chunk-VIWDGTDA.js

@@ -0,0 +1,8 @@
+// packages/agent-runtime/cursor/isCursorOAuthAgent.ts
+function isCursorOAuthAgent(agent) {
+  return agent.apiKeyRef?.trim().toLowerCase() === "cursor";
+}
+
+export {
+  isCursorOAuthAgent
+};

package/chunk-VJVNU77E.js

@@ -0,0 +1,83 @@
+// packages/cli/secretScan.ts
+var ASSIGNMENT_KEYS = [
+  { label: "password", keys: "password|passwd", min: 8 },
+  { label: "psk", keys: "psk", min: 8 },
+  { label: "api key", keys: "api[_-]?key|apikey", min: 12 },
+  { label: "token", keys: "token|secret", min: 12 }
+];
+var ASSIGNMENT_PATTERNS = ASSIGNMENT_KEYS.map(
+  ({ label, keys, min }) => ({
+    label,
+    // 反向引用 \1 让引号成对成为必要条件：半截引号不算。值里允许空格与逗号——
+    // 写成带空格的口令是常见形态，旧的字符类会把这种值截成半截从而整条漏掉。
+    quoted: new RegExp(
+      `\\b(?:${keys})\\s*[:=]\\s*(["'])([^"']{${min},})\\1`,
+      "i"
+    ),
+    // 不带引号时只取到分隔符为止，是否算密钥交给 looksLikeBareSecret 判。
+    bare: new RegExp(
+      `\\b(?:${keys})\\s*[:=]\\s*([^\\s"',#]{${min},})`,
+      "i"
+    )
+  })
+);
+var PRIVATE_KEY_PATTERN = /-----BEGIN [A-Z ]*PRIVATE KEY-----/;
+var EXPRESSION_CHARS = /[?(){};|&<>$]/;
+var CONSTANT_CASE = /^[A-Z][A-Z0-9_]*$/;
+var CAMEL_CASE = /^[a-z][a-z0-9]*(?:[A-Z][a-z0-9]+)+$/;
+var PROPERTY_SEGMENT = /^[A-Za-z_$][\w$]*$/;
+var NAME_FORM_MAX_CHARS = 48;
+var PROPERTY_SEGMENT_MAX_CHARS = 24;
+function looksLikeDottedName(value) {
+  const segments = value.split(".");
+  if (segments.length < 2) return false;
+  return segments.every(
+    (segment) => PROPERTY_SEGMENT.test(segment) && (segment.length <= PROPERTY_SEGMENT_MAX_CHARS || CONSTANT_CASE.test(segment) && segment.includes("_"))
+  );
+}
+function stripTrailingMarkdownFence(value) {
+  return value.replace(/`+$/, "");
+}
+function looksLikeBareSecret(rawValue) {
+  const value = stripTrailingMarkdownFence(rawValue);
+  if (EXPRESSION_CHARS.test(value)) return false;
+  if (CONSTANT_CASE.test(value) && value.includes("_")) return false;
+  if (looksLikeDottedName(value)) return false;
+  if (value.length > NAME_FORM_MAX_CHARS) {
+    return /\d/.test(value);
+  }
+  if (CAMEL_CASE.test(value)) return false;
+  return true;
+}
+function toPreview(line) {
+  return line.length > 120 ? `${line.slice(0, 117)}...` : line;
+}
+function findPotentialSecrets(text) {
+  const findings = [];
+  text.split(/\r?\n/).forEach((line, index) => {
+    const lineNumber = index + 1;
+    const preview = toPreview(line);
+    for (const { label, quoted, bare } of ASSIGNMENT_PATTERNS) {
+      if (quoted.test(line)) {
+        findings.push({ label, line: lineNumber, preview });
+        continue;
+      }
+      const bareMatch = bare.exec(line);
+      if (bareMatch && looksLikeBareSecret(bareMatch[1])) {
+        findings.push({ label, line: lineNumber, preview });
+      }
+    }
+    if (PRIVATE_KEY_PATTERN.test(line)) {
+      findings.push({ label: "private key", line: lineNumber, preview });
+    }
+  });
+  return findings;
+}
+function formatSecretFindings(findings) {
+  return findings.map((finding) => `  line ${finding.line} (${finding.label}): ${finding.preview}`).join("\n");
+}
+
+export {
+  findPotentialSecrets,
+  formatSecretFindings
+};