nolo-cli 0.107.0-alpha.4 → 0.107.0

package/chunk-VZLO4XJD.js

@@ -0,0 +1,17 @@
+// packages/ai/lecture/mediaToolConfirm.ts
+var MEDIA_TOOL_CONFIRM_STATUS = "requires_confirmation";
+var MEDIA_TOOL_NEEDS_USER_INPUT = true;
+var MEDIA_TOOL_CONFIRM_INTERACTION = "authorize";
+function normalizeMediaConfirmExecutionRevision(value) {
+  return typeof value === "number" && Number.isInteger(value) && value >= 0 ? value : void 0;
+}
+function isMediaToolConfirmation(value) {
+  if (!value || typeof value !== "object" || Array.isArray(value)) return false;
+  const v = value;
+  return v.status === MEDIA_TOOL_CONFIRM_STATUS && v.needsUserInput === MEDIA_TOOL_NEEDS_USER_INPUT && v.interaction === MEDIA_TOOL_CONFIRM_INTERACTION && (v.reason === "unauthorized" || v.reason === "budget_overrun") && typeof v.jobId === "string" && (v.step === "transcribe" || v.step === "translate") && typeof v.summary === "string";
+}
+
+export {
+  normalizeMediaConfirmExecutionRevision,
+  isMediaToolConfirmation
+};

package/{chunk-AHAHBQMU.js → chunk-WDLSZMTA.js}

@@ -4,11 +4,11 @@ import {
 import {
   patch,
   read
-} from "./chunk-VRTTFDBM.js";
+} from "./chunk-WPHY3VPF.js";
 import {
   DEVICE_LOCAL_OWNER_ID,
   isDeviceLocalSpaceBody
-} from "./chunk-UKWGR5SS.js";
+} from "./chunk-O7SVKKLY.js";
 import {
   selectIdentityUserId
 } from "./chunk-SEJ5OS6F.js";

package/{chunk-53HEEOTT.js → chunk-WF5X57VW.js}

@@ -1,3 +1,6 @@
+import {
+  writeOAuthCredential
+} from "./chunk-HNGRBWYF.js";
 import {
   ANTIGRAVITY_AUTH_URL,
   ANTIGRAVITY_CALLBACK_PATH,
@@ -11,19 +14,16 @@ import {
   getAntigravityUserAgent,
   normalizeAntigravityTokenPayload,
   refreshAntigravityToken
-} from "./chunk-UZGQNTVW.js";
-import {
-  writeOAuthCredential
-} from "./chunk-ONXOABJR.js";
+} from "./chunk-KHKTDMYG.js";
 import {
   toErrorMessage
 } from "./chunk-HNMXYYJR.js";
-import {
-  asOptionalFiniteNumber
-} from "./chunk-WWC7I6TA.js";
 import {
   isRecord
 } from "./chunk-KUG52IAP.js";
+import {
+  asOptionalFiniteNumber
+} from "./chunk-WWC7I6TA.js";
 import {
   asTrimmedString
 } from "./chunk-3EUW3WEO.js";
@@ -367,6 +367,77 @@ async function refreshAntigravityOAuthToken(credential, deps = {}) {
 // packages/cli/oauth/flows/openai-codex.ts
 import { createHash as createHash2 } from "node:crypto";
 
+// packages/agent-runtime/oauthRefreshError.ts
+var PERMANENT_REFRESH_CODES = /* @__PURE__ */ new Set([
+  "invalid_grant",
+  // OpenAI 令牌端点对失效/不存在的 refresh token 返回 401
+  // {"error":{"code":"invalid_refresh_token",...}}（2026-10-01 用必然无效的
+  // token 实测）。线上 chatgpt 凭据正是因为没认出它，被当成临时的
+  // "unauthorized"、每 15 分钟重试一次且永远不提示重新授权。
+  "invalid_refresh_token",
+  "refresh_token_reused",
+  "invalid_client"
+]);
+var SAFE_MESSAGES = {
+  invalid_grant: "refresh token \u5DF2\u5931\u6548\uFF0C\u8BF7\u91CD\u65B0\u6388\u6743",
+  invalid_refresh_token: "refresh token \u5DF2\u5931\u6548\uFF0C\u8BF7\u91CD\u65B0\u6388\u6743",
+  refresh_token_reused: "refresh token \u5DF2\u88AB\u5176\u4ED6\u526F\u672C\u4F7F\u7528\uFF0C\u8BF7\u91CD\u65B0\u6388\u6743",
+  invalid_client: "OAuth \u5BA2\u6237\u7AEF\u88AB\u62D2\u7EDD\uFF0C\u8BF7\u91CD\u65B0\u6388\u6743",
+  unauthorized: "\u4E0A\u6E38\u62D2\u7EDD\u4E86\u5237\u65B0\u8BF7\u6C42\uFF08401/403\uFF09",
+  rate_limited: "\u4E0A\u6E38\u9650\u6D41\uFF0C\u7A0D\u540E\u91CD\u8BD5",
+  http_5xx: "\u4E0A\u6E38\u670D\u52A1\u6682\u65F6\u4E0D\u53EF\u7528",
+  network: "\u65E0\u6CD5\u8FDE\u63A5\u4E0A\u6E38",
+  bad_response: "\u4E0A\u6E38\u8FD4\u56DE\u4E86\u65E0\u6CD5\u8BC6\u522B\u7684\u54CD\u5E94",
+  unknown: "\u5237\u65B0\u5931\u8D25"
+};
+var OAuthRefreshError = class extends Error {
+  code;
+  status;
+  retryAfterMs;
+  constructor(code, opts = {}) {
+    super(SAFE_MESSAGES[code]);
+    this.name = "OAuthRefreshError";
+    this.code = code;
+    if (opts.status !== void 0) this.status = opts.status;
+    if (opts.retryAfterMs !== void 0) this.retryAfterMs = opts.retryAfterMs;
+  }
+  get permanent() {
+    return PERMANENT_REFRESH_CODES.has(this.code);
+  }
+};
+function readErrorCode(payload) {
+  if (!payload || typeof payload !== "object") return void 0;
+  const err = payload.error;
+  if (typeof err === "string") return err;
+  if (err && typeof err === "object") {
+    const code = err.code;
+    if (typeof code === "string") return code;
+  }
+  return void 0;
+}
+function classifyOAuthRefreshHttpFailure(status, payload, headers) {
+  const raw = readErrorCode(payload)?.toLowerCase();
+  if (raw === "invalid_grant") return new OAuthRefreshError("invalid_grant", { status });
+  if (raw === "invalid_refresh_token") {
+    return new OAuthRefreshError("invalid_refresh_token", { status });
+  }
+  if (raw === "refresh_token_reused") {
+    return new OAuthRefreshError("refresh_token_reused", { status });
+  }
+  if (raw === "invalid_client") return new OAuthRefreshError("invalid_client", { status });
+  if (status === 429) {
+    const seconds = Number(headers?.get("retry-after"));
+    return new OAuthRefreshError("rate_limited", {
+      status,
+      ...Number.isFinite(seconds) && seconds > 0 ? { retryAfterMs: seconds * 1e3 } : {}
+    });
+  }
+  if (status === 401 || status === 403) return new OAuthRefreshError("unauthorized", { status });
+  if (status >= 500) return new OAuthRefreshError("http_5xx", { status });
+  return new OAuthRefreshError("unknown", { status });
+}
+var TRANSIENT_MAX_MS = 15 * 6e4;
+
 // packages/agent-runtime/openaiCodexOAuth.ts
 var OPENAI_CODEX_CLIENT_ID = "app_EMoamEEZ73f0CkXaXp7hrann";
 var OPENAI_CODEX_SCOPES = [
@@ -463,17 +534,14 @@ async function refreshOpenAiCodexToken(credential, deps = {}) {
       signal: AbortSignal.timeout(OPENAI_CODEX_TOKEN_REQUEST_TIMEOUT_MS)
     });
   } catch (error) {
-    throw new Error(
-      `OpenAI Codex token refresh failed: ${toErrorMessage(error)}`
-    );
+    throw new OAuthRefreshError("network");
   }
   const payload = await response.json().catch(() => ({}));
   if (!response.ok) {
-    const detail = typeof payload.error_description === "string" && payload.error_description ? payload.error_description : typeof payload.error === "string" && payload.error ? payload.error : `HTTP ${response.status}`;
-    throw new Error(`OpenAI Codex token refresh failed: ${detail}`);
+    throw classifyOAuthRefreshHttpFailure(response.status, payload, response.headers);
   }
   if (typeof payload.access_token !== "string" || !payload.access_token.trim()) {
-    throw new Error("OpenAI Codex token refresh response missing access_token");
+    throw new OAuthRefreshError("bad_response");
   }
   const now = deps.now?.() ?? Date.now();
   return normalizeOpenAiCodexTokenPayload({
@@ -1047,11 +1115,10 @@ async function refreshAnthropicToken(credential, deps = {}) {
   });
   const payload = await response.json().catch(() => ({}));
   if (!response.ok) {
-    const detail = typeof payload.error_description === "string" ? payload.error_description : typeof payload.error === "string" ? payload.error : `HTTP ${response.status}`;
-    throw new Error(`Claude token refresh failed: ${detail}`);
+    throw classifyOAuthRefreshHttpFailure(response.status, payload, response.headers);
   }
   if (typeof payload.access_token !== "string" || !payload.access_token.trim()) {
-    throw new Error("Claude token refresh response missing access_token");
+    throw new OAuthRefreshError("bad_response");
   }
   const now = deps.now?.() ?? Date.now();
   return normalizeAnthropicTokenPayload({

package/{chunk-VRTTFDBM.js → chunk-WPHY3VPF.js}

@@ -1,25 +1,17 @@
-import {
-  fileKey,
-  getFileIdFromKey,
-  ulid
-} from "./chunk-VMFTFOWF.js";
 import {
   loadFileFromIndexedDb,
   removeAction,
   saveFileToIndexedDb
-} from "./chunk-ABQYVJBJ.js";
+} from "./chunk-EV235ILT.js";
 import {
   readAction,
   readRequestManager,
   resolveAgentReadServers
-} from "./chunk-WV42OMV7.js";
+} from "./chunk-ELUDRSRD.js";
 import {
-  asyncThunkCreator,
-  buildCreateSlice,
+  beginWriteAck,
   compareRemoteRecordsByComparableTime,
-  createEntityAdapter,
   getRuntimeServerContext,
-  noloDeleteRequest,
   pickBestSettledRemoteRecord,
   planAuthorityReadServers,
   resolveAuthorityReplicationServers,
@@ -32,19 +24,30 @@ import {
   shouldReplaceLocalWithRemoteRecord,
   shouldReplicateLocalRecord,
   uploadToCurrentServer
-} from "./chunk-UKWGR5SS.js";
-import {
-  fetchFromClientDb,
-  fetchFromServer,
-  logger,
-  normalizeTimeFields
-} from "./chunk-QOKAKDPE.js";
+} from "./chunk-O7SVKKLY.js";
 import {
   isTombstoneRecord
-} from "./chunk-GBRG75BQ.js";
+} from "./chunk-D2MDMY2M.js";
 import {
   isRecord
 } from "./chunk-KUG52IAP.js";
+import {
+  fileKey,
+  getFileIdFromKey,
+  ulid
+} from "./chunk-OKGVNZTL.js";
+import {
+  asyncThunkCreator,
+  buildCreateSlice,
+  createEntityAdapter,
+  noloDeleteRequest
+} from "./chunk-VY6VFGKR.js";
+import {
+  fetchFromClientDb,
+  fetchFromServer,
+  logger,
+  normalizeTimeFields
+} from "./chunk-HIM3FCLF.js";
 import {
   API_ENDPOINTS
 } from "./chunk-LCBAMY2M.js";
@@ -260,12 +263,14 @@ var writeAction = async (writeConfig, thunkApi) => {
       `Invalid data type "${data.type}" for writeAction with key ${customKey}. Proceeding anyway.`
     );
   }
+  let writeAck = null;
   try {
     const willSaveData = normalizeTimeFields({
       ...data,
       dbKey: customKey,
       userId: recordUserId
     });
+    writeAck = beginWriteAck(customKey);
     await saveToClientDb(clientDb, customKey, willSaveData);
     const servers = resolveAuthorityReplicationServers({
       currentServer,
@@ -283,8 +288,14 @@ var writeAction = async (writeConfig, thunkApi) => {
       logger.debug(
         `[writeAction] Initiating background sync for key: ${customKey} to ${servers.length} servers.`
       );
-      scheduleWriteReplication(servers, serverWriteConfig, state);
+      const replication = scheduleWriteReplication(
+        servers,
+        serverWriteConfig,
+        state
+      );
+      writeAck.settleWithReplication(replication);
     } else {
+      writeAck.markNotReplicated();
       logger.warn(
         { customKey },
         "[writeAction] No available servers, data only saved locally."
@@ -292,6 +303,7 @@ var writeAction = async (writeConfig, thunkApi) => {
     }
     return willSaveData;
   } catch (error) {
+    writeAck?.markAborted();
     const errorMessage = `Write action failed for ${customKey}: ${error?.message || "Unknown error"}`;
     logger.error({ error }, "[writeAction] Error");
     actionToast.error(`Failed to save data for ${customKey}.`);
@@ -493,6 +505,7 @@ var resolveFileCategory = ({
   }
   return "other";
 };
+var MAX_MEDIA_FILE_SIZE = 120 * 1024 * 1024;
 
 // packages/database/actions/upload.ts
 var saveToClientDb2 = async (clientDb, dbKey, metadata) => {
@@ -712,7 +725,7 @@ var dbSlice = createSliceWithThunks({
     // 动态 import 在调用期解析，避开 TDZ/求值顺序问题（同下方 share）。
     read: create.asyncThunk(
       async (payload, thunkApi) => {
-        const { readAction: readAction2 } = await import("./read-COE3ZYR6.js");
+        const { readAction: readAction2 } = await import("./read-LSYFLSIM.js");
         return readAction2(payload, thunkApi);
       },
       {
@@ -786,7 +799,7 @@ var dbSlice = createSliceWithThunks({
     // 这里改成动态 import，运行期才解析，彻底断开这条边。
     share: create.asyncThunk(
       async (config, thunkApi) => {
-        const { shareResourceAction } = await import("./action-P4TNFGAD.js");
+        const { shareResourceAction } = await import("./action-GVA5ARSJ.js");
         return shareResourceAction(config, thunkApi);
       }
     ),

package/{chunk-ASIFZ2WY.js → chunk-YKZLFY5J.js}

@@ -1,15 +1,15 @@
 import {
   toolRegistry
-} from "./chunk-C3M4465B.js";
+} from "./chunk-LKIVH2I2.js";
 import {
-  i18n_default
-} from "./chunk-T75QD6AB.js";
+  runtime_default
+} from "./chunk-7AY2H3GA.js";
 import {
   canonicalizeToolNames
-} from "./chunk-O6OSWFZQ.js";
+} from "./chunk-IHPDK6UD.js";
 import {
   isNoloHostedProvider
-} from "./chunk-Q67DOFOO.js";
+} from "./chunk-SZC4REES.js";
 import {
   asTrimmedLowercaseString
 } from "./chunk-QSJ3HFEF.js";
@@ -18,6 +18,8 @@ import {
 } from "./chunk-KUG52IAP.js";
 
 // packages/ai/chat/inlineImageUrlsForCustomProvider.ts
+var INLINE_IMAGE_MAX_BYTES = 5 * 1024 * 1024;
+var INLINE_IMAGE_TOTAL_MAX_BYTES = 20 * 1024 * 1024;
 var FILE_CONTENT_PATH = "/api/v1/db/file/content/";
 var shouldInlineImageUrlsForAgent = (agentConfig) => {
   const apiSource = agentConfig?.apiSource?.toLowerCase();
@@ -29,14 +31,14 @@ var shouldInlineImageUrlsForAgent = (agentConfig) => {
 };
 var isInlineCandidate = (url) => /^https?:\/\//i.test(url) && url.includes(FILE_CONTENT_PATH);
 var bytesToBase64 = (bytes) => {
-  let binary = "";
-  for (const byte of bytes) {
-    binary += String.fromCharCode(byte);
+  const chunks = [];
+  for (let offset = 0; offset < bytes.length; offset += 32768) {
+    chunks.push(String.fromCharCode.apply(null, Array.from(bytes.subarray(offset, offset + 32768))));
   }
-  return btoa(binary);
+  return btoa(chunks.join(""));
 };
-var defaultFetchImage = async (url) => {
-  const response = await fetch(url);
+var defaultFetchImage = async (url, signal, _maxBytes) => {
+  const response = await fetch(url, { signal });
   if (!response.ok) {
     return {
       ok: false,
@@ -50,59 +52,69 @@ var defaultFetchImage = async (url) => {
     bytes
   };
 };
-var cloneImagePartWithDataUrl = async (part, fetchImage, isAllowedImageUrl) => {
+var cloneImagePartWithDataUrl = async (part, fetchImage, options, usedBytes) => {
   const url = part?.image_url?.url;
-  if (typeof url !== "string" || !isInlineCandidate(url) || isAllowedImageUrl && !isAllowedImageUrl(url)) {
+  if (typeof url !== "string" || !isInlineCandidate(url) || options.isAllowedImageUrl && !options.isAllowedImageUrl(url)) return part;
+  if (options.signal?.aborted) throw new DOMException("The operation was aborted", "AbortError");
+  const remaining = options.maxTotalBytes === void 0 ? void 0 : options.maxTotalBytes - usedBytes.value;
+  const fetchLimit = options.maxBytes === void 0 ? remaining : remaining === void 0 ? options.maxBytes : Math.min(options.maxBytes, remaining);
+  const result = await fetchImage(url, options.signal, fetchLimit);
+  if (options.signal?.aborted) throw new DOMException("The operation was aborted", "AbortError");
+  if (result.skippedSize !== void 0) {
+    const reason = options.maxBytes !== void 0 && result.skippedSize > options.maxBytes ? "per-image" : "total-budget";
+    options.onSkipTooLarge?.(url, result.skippedSize, reason);
     return part;
   }
-  const result = await fetchImage(url);
   if (!result.ok || !result.bytes) return part;
-  const mimeType = result.mimeType || "application/octet-stream";
-  return {
-    ...part,
-    image_url: {
-      ...part.image_url,
-      url: `data:${mimeType};base64,${bytesToBase64(result.bytes)}`
-    }
-  };
+  if (options.maxBytes !== void 0 && result.bytes.byteLength > options.maxBytes) {
+    options.onSkipTooLarge?.(url, result.bytes.byteLength, "per-image");
+    return part;
+  }
+  if (options.maxTotalBytes !== void 0 && usedBytes.value + result.bytes.byteLength > options.maxTotalBytes) {
+    options.onSkipTooLarge?.(url, result.bytes.byteLength, "total-budget");
+    return part;
+  }
+  usedBytes.value += result.bytes.byteLength;
+  const mimeType = (result.mimeType || "application/octet-stream").split(";")[0].trim() || "application/octet-stream";
+  return { ...part, image_url: { ...part.image_url, url: `data:${mimeType};base64,${bytesToBase64(result.bytes)}` } };
 };
 var inlineImageUrlsForCustomProvider = async (bodyData, options) => {
   if (!options.shouldInline) return bodyData;
   const body = bodyData;
   if (!Array.isArray(body?.messages)) return bodyData;
   const fetchImage = options.fetchImage ?? defaultFetchImage;
-  let changed = false;
-  const messages = [];
-  for (const message of body.messages) {
-    if (!Array.isArray(message?.content)) {
-      messages.push(message);
-      continue;
+  const fetched = /* @__PURE__ */ new Map();
+  const fetchOnce = (url, signal, maxBytes) => {
+    let result = fetched.get(url);
+    if (!result) {
+      result = fetchImage(url, signal, maxBytes);
+      fetched.set(url, result);
     }
-    const content = await Promise.all(
-      message.content.map(async (part) => {
-        if (part?.type !== "image_url") return part;
-        return cloneImagePartWithDataUrl(
-          part,
-          fetchImage,
-          options.isAllowedImageUrl
-        );
-      })
-    );
-    let messageChanged = false;
-    for (let i = 0; i < content.length; i++) {
-      if (content[i] !== message.content[i]) {
+    return result;
+  };
+  const usedBytes = { value: 0 };
+  let changed = false;
+  const messages = [...body.messages];
+  for (let mi = messages.length - 1; mi >= 0; mi--) {
+    const message = messages[mi];
+    if (!Array.isArray(message?.content)) continue;
+    const content = [...message.content];
+    for (let pi = content.length - 1; pi >= 0; pi--) {
+      const part = content[pi];
+      if (part?.type !== "image_url") continue;
+      if (options.maxTotalBytes !== void 0 && usedBytes.value >= options.maxTotalBytes) {
+        if (typeof part?.image_url?.url === "string" && isInlineCandidate(part.image_url.url)) options.onSkipTooLarge?.(part.image_url.url, void 0, "total-budget");
+        continue;
+      }
+      const cloned = await cloneImagePartWithDataUrl(part, fetchOnce, options, usedBytes);
+      if (cloned !== part) {
+        content[pi] = cloned;
         changed = true;
-        messageChanged = true;
-        break;
       }
     }
-    messages.push(messageChanged ? { ...message, content } : message);
+    if (content.some((part, index) => part !== message.content[index])) messages[mi] = { ...message, content };
   }
-  if (!changed) return bodyData;
-  return {
-    ...body,
-    messages
-  };
+  return changed ? { ...body, messages } : bodyData;
 };
 
 // packages/ai/tools/toolSchemaCompatibility.ts
@@ -151,12 +163,12 @@ var PREPARE_TOOLS_CACHE_LIMIT = 128;
 var warnedUnknownToolNames = /* @__PURE__ */ new Set();
 function getTranslation(keys, defaultVal) {
   for (const key of keys) {
-    if (i18n_default.exists(key)) {
-      return i18n_default.t(key);
+    if (runtime_default.exists(key)) {
+      return runtime_default.t(key);
     }
     const aiKey = key.startsWith("ai:") ? key : `ai:${key}`;
-    if (i18n_default.exists(aiKey)) {
-      return i18n_default.t(aiKey);
+    if (runtime_default.exists(aiKey)) {
+      return runtime_default.t(aiKey);
     }
   }
   return defaultVal;
@@ -203,7 +215,7 @@ function translateSchema(schema) {
   return nextSchema;
 }
 function currentI18nLanguage() {
-  return typeof i18n_default.language === "string" ? i18n_default.language : "";
+  return typeof runtime_default.language === "string" ? runtime_default.language : "";
 }
 function translateSchemaCached(schema) {
   if (!schema || typeof schema !== "object") return schema;