nolo-cli 0.107.0-alpha.4 → 0.107.1

package/{chunk-SH43IESU.js → chunk-GGC55Q32.js}

@@ -5,13 +5,10 @@ import {
   isRecord
 } from "./chunk-KUG52IAP.js";
 
-// packages/desktop-chrome-connector/chromeConnector.ts
-import { existsSync as existsSync2, readFileSync } from "node:fs";
-import { resolve as resolve2 } from "node:path";
-
 // packages/desktop-chrome-connector/uploadSecurity.mjs
-import { existsSync, realpathSync, statSync } from "node:fs";
-import { isAbsolute, relative, resolve } from "node:path";
+import { existsSync, lstatSync, mkdirSync, realpathSync, statSync } from "node:fs";
+import { homedir } from "node:os";
+import { isAbsolute, join, relative, resolve } from "node:path";
 var DEFAULT_MAX_FILE_BYTES = 25 * 1024 * 1024;
 var DEFAULT_MAX_FILES = 10;
 var UploadSecurityError = class extends Error {
@@ -28,22 +25,106 @@ function isSubpath(parent, child) {
   const rel = relative(parent, child);
   return !rel.startsWith("..") && !isAbsolute(rel);
 }
-function parseAllowedRoots(env = process.env) {
-  const raw = env?.NOLO_CHROME_UPLOAD_ROOTS;
-  if (!raw || typeof raw !== "string") {
-    return [];
+var DEFAULT_UPLOAD_ROOT_SUFFIX = join(".nolo", "uploads");
+function resolveDefaultUploadRoot(env = process.env) {
+  let home;
+  try {
+    home = env?.HOME || homedir();
+  } catch (err) {
+    throw createUploadSecurityError(
+      "path_not_allowed",
+      `Could not determine the home directory for the default upload root: ${err instanceof Error ? err.message : String(err)}`
+    );
   }
-  return raw.split(",").map((entry) => entry.trim()).filter(Boolean).filter((entry) => isAbsolute(entry)).map((entry) => {
-    const resolved = resolve(entry);
-    if (existsSync(resolved)) {
+  if (typeof home !== "string" || !isAbsolute(home)) {
+    throw createUploadSecurityError(
+      "path_not_allowed",
+      `Home directory '${String(home)}' must be an absolute path to derive the default upload root '${DEFAULT_UPLOAD_ROOT_SUFFIX}'.`
+    );
+  }
+  return resolve(join(home, DEFAULT_UPLOAD_ROOT_SUFFIX));
+}
+function splitConfiguredRoots(raw) {
+  const entries = typeof raw === "string" ? raw.split(",").map((entry) => entry.trim()).filter(Boolean) : [];
+  const absolute = [];
+  const dropped = [];
+  for (const entry of entries) {
+    (isAbsolute(entry) ? absolute : dropped).push(entry);
+  }
+  return { absolute, dropped };
+}
+function resolveUploadRoots(env = process.env) {
+  const raw = env?.NOLO_CHROME_UPLOAD_ROOTS;
+  if (raw !== void 0) {
+    const { absolute, dropped } = splitConfiguredRoots(raw);
+    const roots = absolute.map((entry) => {
+      const resolved = resolve(entry);
+      if (!existsSync(resolved)) {
+        return resolved;
+      }
       try {
         return realpathSync(resolved);
       } catch {
         return resolved;
       }
+    });
+    return { configured: true, isDefault: false, roots, dropped };
+  }
+  const defaultDir = resolveDefaultUploadRoot(env);
+  return {
+    configured: false,
+    isDefault: true,
+    roots: [existsSync(defaultDir) ? inspectDefaultUploadRoot(defaultDir) : defaultDir],
+    dropped: []
+  };
+}
+function ensureDefaultUploadRoot(env = process.env) {
+  if (env?.NOLO_CHROME_UPLOAD_ROOTS !== void 0) {
+    return resolveUploadRoots(env);
+  }
+  const defaultDir = resolveDefaultUploadRoot(env);
+  if (!existsSync(defaultDir)) {
+    try {
+      mkdirSync(defaultDir, { recursive: true, mode: 448 });
+    } catch (err) {
+      throw createUploadSecurityError(
+        "path_not_allowed",
+        `Default upload root '${defaultDir}' could not be created: ${err instanceof Error ? err.message : String(err)}`
+      );
     }
-    return resolved;
-  });
+  }
+  return { configured: false, isDefault: true, roots: [inspectDefaultUploadRoot(defaultDir)], dropped: [] };
+}
+function inspectDefaultUploadRoot(defaultDir) {
+  let lst;
+  try {
+    lst = lstatSync(defaultDir);
+  } catch (err) {
+    throw createUploadSecurityError(
+      "path_not_allowed",
+      `Default upload root '${defaultDir}' could not be inspected: ${err instanceof Error ? err.message : String(err)}`
+    );
+  }
+  if (lst.isSymbolicLink()) {
+    throw createUploadSecurityError(
+      "path_not_allowed",
+      `Default upload root '${defaultDir}' is a symbolic link, which is not permitted. Set NOLO_CHROME_UPLOAD_ROOTS to the real directory if you need a custom location.`
+    );
+  }
+  if (!lst.isDirectory()) {
+    throw createUploadSecurityError(
+      "path_not_allowed",
+      `Default upload root '${defaultDir}' is not a directory.`
+    );
+  }
+  try {
+    return realpathSync(defaultDir);
+  } catch (err) {
+    throw createUploadSecurityError(
+      "path_not_allowed",
+      `Default upload root '${defaultDir}' canonical path could not be resolved: ${err instanceof Error ? err.message : String(err)}`
+    );
+  }
 }
 function validateUploadFiles(options = {}) {
   const {
@@ -61,11 +142,14 @@ function validateUploadFiles(options = {}) {
       `Too many files: ${files.length} provided, maximum allowed is ${maxFiles}.`
     );
   }
-  const allowedRoots = parseAllowedRoots(env);
+  const rootsInfo = ensureDefaultUploadRoot(env);
+  const allowedRoots = rootsInfo.roots;
   if (allowedRoots.length === 0) {
+    const dropped = rootsInfo.dropped ?? [];
+    const droppedHint = dropped.length ? ` Ignored entries: ${dropped.map((entry) => `'${entry}'`).join(", ")} (only absolute paths are accepted; '~' and relative paths are never expanded).` : "";
     throw createUploadSecurityError(
       "path_not_allowed",
-      "Upload roots not configured in NOLO_CHROME_UPLOAD_ROOTS; all uploads are refused."
+      `NOLO_CHROME_UPLOAD_ROOTS is set but contains no usable absolute path; all uploads are refused.${droppedHint}`
     );
   }
   const fileStats = [];
@@ -135,8 +219,29 @@ function logUploadAudit(entry, logFn = console.warn) {
 }
 
 // packages/desktop-chrome-connector/chromeConnector.ts
+import { existsSync as existsSync2, readFileSync } from "node:fs";
+import { resolve as resolve2 } from "node:path";
 var NOLO_CHROME_CONNECTOR_EXTENSION_ID = "ahpdoopadkamnglhlacfjdfnonpjdplg";
+var NOLO_FIREFOX_CONNECTOR_EXTENSION_ID = "nolo-browser-connector@nolo.chat";
+var NOLO_CONNECTOR_EXTENSION_IDS = [
+  NOLO_CHROME_CONNECTOR_EXTENSION_ID,
+  NOLO_FIREFOX_CONNECTOR_EXTENSION_ID
+];
 var NOLO_CHROME_CONNECTOR_PROTOCOL_VERSION = "2";
+var NOLO_CHROME_CONNECTOR_DEFAULT_PORTS = {
+  chrome: 38947,
+  firefox: 38948
+};
+var CONNECTOR_BROWSER_EXTENSION_IDS = {
+  chrome: NOLO_CHROME_CONNECTOR_EXTENSION_ID,
+  firefox: NOLO_FIREFOX_CONNECTOR_EXTENSION_ID
+};
+function connectorEndpointForBrowser(browser, env = process.env) {
+  const explicitUrl = env.NOLO_CHROME_CONNECTOR_RPC_URL;
+  if (explicitUrl) return explicitUrl;
+  const port = browser === "firefox" ? env.NOLO_FIREFOX_CONNECTOR_PORT : env.NOLO_CHROME_CONNECTOR_PORT;
+  return `http://127.0.0.1:${port || NOLO_CHROME_CONNECTOR_DEFAULT_PORTS[browser]}/rpc`;
+}
 function defaultTokenPath() {
   return resolve2(
     process.env.HOME || "",
@@ -149,6 +254,18 @@ function readConnectorToken(tokenPath = defaultTokenPath()) {
   return readFileSync(tokenPath, "utf8").trim();
 }
 var CHROME_TOOL_ACTIONS = {
+  browser_list_tabs: "list_tabs",
+  browser_open_tab: "open_tab",
+  browser_close_tab: "close_tab",
+  browser_read_page: "read_page",
+  browser_click_element: "click",
+  browser_type: "type",
+  browser_press: "press",
+  browser_scroll: "scroll",
+  browser_screenshot: "screenshot",
+  browser_read_console: "read_console",
+  browser_read_network: "read_network",
+  // Legacy aliases (kept for existing agents/tests).
   chrome_list_tabs: "list_tabs",
   chrome_open_tab: "open_tab",
   chrome_close_tab: "close_tab",
@@ -164,6 +281,12 @@ var CHROME_TOOL_ACTIONS = {
   chrome_upload_file: "set_files",
   chrome_upload: "set_files"
 };
+for (const legacyName of ["chrome_set_files", "chrome_upload_file", "chrome_upload"]) {
+  const action = CHROME_TOOL_ACTIONS[legacyName];
+  if (action) {
+    CHROME_TOOL_ACTIONS[`browser_${legacyName.slice("chrome_".length)}`] = action;
+  }
+}
 function createConnectorError(code, message, details) {
   const error = new Error(message);
   error.code = code;
@@ -183,9 +306,13 @@ function parseArguments(raw) {
   }
 }
 function errorPayload(error) {
+  const code = error?.code ?? "CHROME_CONNECTOR_ERROR";
   return {
-    code: error?.code ?? "CHROME_CONNECTOR_ERROR",
+    code,
     message: toErrorMessage(error),
+    ...code === "CHROME_CONNECTOR_UNAVAILABLE" ? {
+      hint: "The Nolo Browser Connector is not reachable. It runs inside the user's own Chrome or Firefox \u2014 ask the user to open their browser with the Nolo Browser Connector extension enabled, or install it from https://nolo.chat/downloads (Firefox can install the signed .xpi directly), then retry."
+    } : {},
     ...error?.details !== void 0 ? { details: error.details } : {}
   };
 }
@@ -198,7 +325,7 @@ function validateChromeConnectorPayload(action, payload) {
     if (!tabId) {
       throw createConnectorError(
         "TAB_ID_REQUIRED",
-        `Provide the tabId from chrome_list_tabs before calling ${action}.`
+        `Provide the tabId from browser_list_tabs before calling ${action}.`
       );
     }
     if (!TARGET_REQUIRED_ACTIONS.has(action)) return;
@@ -210,7 +337,7 @@ function validateChromeConnectorPayload(action, payload) {
   if (!elementRef && !selector) {
     throw createConnectorError(
       "ELEMENT_TARGET_REQUIRED",
-      "Provide elementRef from chrome_read_page or a CSS selector."
+      "Provide elementRef from browser_read_page or a CSS selector."
     );
   }
   if (action === "set_files") {
@@ -240,8 +367,8 @@ function validateChromeConnectorPayload(action, payload) {
 }
 function createChromeConnectorClient(args) {
   if (args?.request) return { request: args.request };
-  const defaultPort = process.env.NOLO_CHROME_CONNECTOR_PORT || "38947";
-  const endpoint = args?.endpoint ?? process.env.NOLO_CHROME_CONNECTOR_RPC_URL ?? `http://127.0.0.1:${defaultPort}/rpc`;
+  const browser = args?.browser ?? "chrome";
+  const endpoint = args?.endpoint ?? connectorEndpointForBrowser(browser);
   const fetchImpl = args?.fetchImpl ?? fetch;
   const token = args?.token ?? readConnectorToken(args?.tokenPath);
   return {
@@ -285,7 +412,10 @@ var REQUIRED_CHROME_CONNECTOR_FEATURES = {
   type: ["compact_observation_v2", "action_gate"],
   press: ["compact_observation_v2", "action_gate"],
   scroll: ["compact_observation_v2"],
-  screenshot: ["browser_debug"],
+  // Both browsers advertise the dedicated `screenshot` feature: Chrome serves it through
+  // Page.captureScreenshot (browser_debug-adjacent) while Firefox falls back to
+  // tabs.captureVisibleTab, so gating on browser_debug would wrongly refuse Firefox.
+  screenshot: ["screenshot"],
   read_console: ["browser_debug"],
   read_network: ["browser_debug"],
   detach: ["browser_debug"],
@@ -294,19 +424,43 @@ var REQUIRED_CHROME_CONNECTOR_FEATURES = {
 function requiredFeaturesForConnectorAction(action) {
   return [...REQUIRED_CHROME_CONNECTOR_FEATURES[action] ?? []];
 }
+function createChromeConnectorClientResolver(args) {
+  const cache = /* @__PURE__ */ new Map();
+  const overrides = args?.clients;
+  const resolve3 = (selector) => {
+    const existing = cache.get(selector);
+    if (existing) return existing;
+    let client;
+    if (selector === "chrome" || selector === "firefox") {
+      const inner = overrides?.[selector] ?? createChromeConnectorClient({ browser: selector });
+      client = createVerifiedChromeConnectorClient({
+        client: inner,
+        expectedBrowser: selector
+      });
+    } else {
+      client = overrides?.default ?? createVerifiedChromeConnectorClient({ client: createChromeConnectorClient() });
+    }
+    cache.set(selector, client);
+    return client;
+  };
+  return resolve3;
+}
 function createVerifiedChromeConnectorClient(args) {
   const client = args?.client ?? createChromeConnectorClient();
-  const expectedExtensionId = args?.expectedExtensionId ?? NOLO_CHROME_CONNECTOR_EXTENSION_ID;
+  const expectedExtensionIds = new Set(
+    args?.expectedExtensionIds ?? (args?.expectedBrowser ? [CONNECTOR_BROWSER_EXTENSION_IDS[args.expectedBrowser]] : args?.expectedExtensionId ? [args.expectedExtensionId] : NOLO_CONNECTOR_EXTENSION_IDS)
+  );
   let verified = null;
   let negotiatedFeatures = [];
   const verify = async () => {
     const connectorInfo = await client.request("connector_info", {});
     const receivedExtensionId = connectorInfo?.extensionId;
-    if (receivedExtensionId !== expectedExtensionId) {
+    if (typeof receivedExtensionId !== "string" || !expectedExtensionIds.has(receivedExtensionId)) {
+      const expectedList = [...expectedExtensionIds].join(", ");
       throw createConnectorError(
         "CHROME_CONNECTOR_EXTENSION_MISMATCH",
-        `Chrome connector extension id mismatch: expected ${expectedExtensionId}, received ${typeof receivedExtensionId === "string" ? receivedExtensionId : "unknown"}.`,
-        { expectedExtensionId, receivedExtensionId }
+        `Chrome connector extension id mismatch: expected one of ${expectedList}, received ${typeof receivedExtensionId === "string" ? receivedExtensionId : "unknown"}.`,
+        { expectedExtensionIds: [...expectedExtensionIds], receivedExtensionId }
       );
     }
     const receivedProtocolVersion = connectorInfo?.protocolVersion;
@@ -366,9 +520,21 @@ async function executeChromeConnectorTool(args) {
     };
   }
   try {
-    const payload = parseArguments(args.call.arguments);
+    const { target: rawTarget, ...payload } = parseArguments(args.call.arguments);
+    const target = typeof rawTarget === "string" && rawTarget.trim().length > 0 ? rawTarget.trim().toLowerCase() : void 0;
+    if (target !== void 0 && target !== "chrome" && target !== "firefox") {
+      throw createConnectorError(
+        "INVALID_BROWSER_TARGET",
+        `browser target must be "chrome" or "firefox", received "${rawTarget}".`,
+        { receivedTarget: rawTarget }
+      );
+    }
     validateChromeConnectorPayload(action, payload);
-    const result = await (args.client ?? createChromeConnectorClient()).request(action, payload);
+    const client = args.clientForTarget?.(target) ?? (target ? createVerifiedChromeConnectorClient({
+      client: createChromeConnectorClient({ browser: target }),
+      expectedBrowser: target
+    }) : args.client ?? createVerifiedChromeConnectorClient({ client: createChromeConnectorClient() }));
+    const result = await client.request(action, payload);
     return {
       content: JSON.stringify({ ok: true, result }),
       metadata: {
@@ -391,10 +557,14 @@ async function executeChromeConnectorTool(args) {
 var CHROME_CONNECTOR_TOOL_ACTIONS = { ...CHROME_TOOL_ACTIONS };
 
 export {
+  resolveUploadRoots,
   NOLO_CHROME_CONNECTOR_EXTENSION_ID,
+  NOLO_FIREFOX_CONNECTOR_EXTENSION_ID,
+  NOLO_CONNECTOR_EXTENSION_IDS,
   NOLO_CHROME_CONNECTOR_PROTOCOL_VERSION,
   createChromeConnectorClient,
   REQUIRED_CHROME_CONNECTOR_FEATURES,
+  createChromeConnectorClientResolver,
   createVerifiedChromeConnectorClient,
   executeChromeConnectorTool
 };

package/chunk-GMZLP5DV.js

@@ -0,0 +1,82 @@
+// packages/agent-runtime/sseFrames.ts
+async function* readSseFrames(response) {
+  const reader = response.body?.getReader();
+  if (!reader) {
+    throw new Error("SSE response did not include a readable body.");
+  }
+  const decoder = new TextDecoder();
+  let buffer = "";
+  while (true) {
+    const { done, value } = await reader.read();
+    if (done) break;
+    buffer += decoder.decode(value, { stream: true });
+    let boundary = findSseFrameBoundary(buffer);
+    while (boundary) {
+      yield buffer.slice(0, boundary.index);
+      buffer = buffer.slice(boundary.index + boundary.separatorLength);
+      boundary = findSseFrameBoundary(buffer);
+    }
+  }
+  const remaining = decoder.decode();
+  if (remaining) {
+    buffer += remaining;
+    let boundary = findSseFrameBoundary(buffer);
+    while (boundary) {
+      yield buffer.slice(0, boundary.index);
+      buffer = buffer.slice(boundary.index + boundary.separatorLength);
+      boundary = findSseFrameBoundary(buffer);
+    }
+  }
+  if (buffer.trim()) yield buffer;
+}
+function findSseFrameBoundary(buffer) {
+  const lfLf = buffer.indexOf("\n\n");
+  const crLfCrLf = buffer.indexOf("\r\n\r\n");
+  if (lfLf === -1 && crLfCrLf === -1) return null;
+  const useLf = lfLf !== -1 && (crLfCrLf === -1 || lfLf < crLfCrLf);
+  return useLf ? { index: lfLf, separatorLength: 2 } : { index: crLfCrLf, separatorLength: 4 };
+}
+async function* streamSseDataValues(response, parse) {
+  const reader = response.body?.getReader();
+  if (!reader) return;
+  const decoder = new TextDecoder();
+  let buffer = "";
+  while (true) {
+    const { done, value } = await reader.read();
+    if (done) break;
+    buffer += decoder.decode(value, { stream: true });
+    const lines = buffer.split("\n");
+    buffer = lines.pop() ?? "";
+    for (const line of lines) {
+      const parsed = parse(line);
+      if (parsed) yield parsed;
+    }
+  }
+  const remaining = decoder.decode();
+  if (remaining) {
+    buffer += remaining;
+    const lines = buffer.split("\n");
+    buffer = lines.pop() ?? "";
+    for (const line of lines) {
+      const parsed = parse(line);
+      if (parsed) yield parsed;
+    }
+  }
+  if (buffer.trim()) {
+    const parsed = parse(buffer);
+    if (parsed) yield parsed;
+  }
+}
+async function readSseDataValues(response, parse) {
+  const values = [];
+  for await (const value of streamSseDataValues(response, parse)) {
+    values.push(value);
+  }
+  return values;
+}
+
+export {
+  readSseFrames,
+  streamSseDataValues,
+  readSseDataValues
+};

package/{chunk-FDTR4QJ6.js → chunk-H6A6X4EK.js}

@@ -180,6 +180,36 @@ function resolveCooldownGate(input, now) {
   }
   return now - lastProbeAt >= PROBE_INTERVAL_MS ? "probe" : "blocked";
 }
+function resolveCredentialKey(agent) {
+  if (!agent || typeof agent !== "object") return void 0;
+  for (const field of ["apiKeyRef", "credentialRef"]) {
+    const value = agent[field];
+    if (typeof value === "string") {
+      const trimmed = value.trim();
+      if (trimmed) return trimmed;
+    }
+  }
+  return void 0;
+}
+function resolveCredentialKeyWithFallback(agent) {
+  const byRef = resolveCredentialKey(agent);
+  if (byRef) return byRef;
+  if (!agent || typeof agent !== "object") return void 0;
+  const endpoint = agent.customProviderUrl;
+  if (typeof endpoint === "string") {
+    const trimmed = endpoint.trim();
+    if (trimmed) {
+      try {
+        const origin = new URL(trimmed).origin;
+        if (origin && origin !== "null") return `custom-endpoint:${origin}`;
+      } catch {
+      }
+    }
+  }
+  const key = agent.key;
+  if (typeof key === "string" && key.trim()) return `custom-agent:${key.trim()}`;
+  return void 0;
+}
 
 export {
   QUOTA_ERROR_PATTERNS,
@@ -188,5 +218,6 @@ export {
   isQuotaLimited403Body,
   resolveAvailabilityAction,
   mergeAvailabilityDeadline,
-  resolveCooldownGate
+  resolveCooldownGate,
+  resolveCredentialKeyWithFallback
 };

package/{chunk-DVINR3PL.js → chunk-HDLLCBRF.js}

@@ -1,7 +1,7 @@
 import {
   MEMORY_USE_GUIDANCE,
   wrapHistoricalSummaryWithReplayGuard
-} from "./chunk-2GRGFCF6.js";
+} from "./chunk-4VJAC32I.js";
 
 // packages/agent-runtime/turnContext.ts
 var DEFAULT_RECENT_CONTENT_LIMIT = 10;

package/{chunk-QOKAKDPE.js → chunk-HIM3FCLF.js}

@@ -258,7 +258,6 @@ var normalizeTimeFields = (data) => ({
 });
 
 export {
-  isProduction,
   isDevelopment,
   getIsDesktopApp,
   createClientLogger,

package/{chunk-ONXOABJR.js → chunk-HNGRBWYF.js}

@@ -206,9 +206,12 @@ export {
   resolveNoloStateDir,
   getLegacyCredentialPath,
   migrateLegacyCredentialFile,
+  DEFAULT_REFRESH_SKEW_MS,
   getCredentialsDir,
+  getCredentialPath,
   readOAuthCredential,
   writeOAuthCredential,
+  removeOAuthCredential,
   createOAuthTokenStore,
   isTokenExpired,
   resolveFreshAccessToken

package/{chunk-BNGW5ASC.js → chunk-I2RGRVQ7.js}

@@ -209,6 +209,13 @@ var BUILTIN_AGENT_CATALOG = [
     provider: "nolo",
     model: "gemini-3.8-flash"
   },
+  {
+    id: "01GEM4ARGPB00000001TDQ94E",
+    group: "public",
+    name: "Gemini 4 Argon",
+    provider: "nolo",
+    model: "gemini-4-argon"
+  },
   {
     id: "01GROK46PLAZ00000001PTJZ3K",
     group: "public",
@@ -296,7 +303,20 @@ var BUILTIN_CHROME_OPERATOR_AGENT_KEY = publicAgentKey(BUILTIN_CHROME_OPERATOR_A
 var BUILTIN_PLATFORM_AGENT_KEYS = builtinPlatformEntries().map(
   (e) => publicAgentKey(e.id)
 );
-var BUILTIN_PLATFORM_AGENT_KEY_SET = new Set(BUILTIN_PLATFORM_AGENT_KEYS);
+var BUILTIN_PLATFORM_AGENT_ID_SET = new Set(
+  builtinPlatformEntries().map((e) => e.id)
+);
+if (builtinPlatformEntries().some((e) => e.id.includes("-"))) {
+  throw new Error("builtin platform agent ids must not contain hyphens");
+}
+var parseBuiltinPlatformAgentId = (key) => {
+  if (typeof key !== "string") return null;
+  if (key !== key.slice(key.lastIndexOf("-") + 1) && !key.startsWith("agent-")) {
+    return null;
+  }
+  const id = key.slice(key.lastIndexOf("-") + 1);
+  return BUILTIN_PLATFORM_AGENT_ID_SET.has(id) ? id : null;
+};
 var PUBLIC_DEEPSEEK_V4_FLASH_AGENT_ID = entry("01DSV4FLASHPB00000000JFPFD").id;
 var PUBLIC_DEEPSEEK_V4_FLASH_AGENT_KEY = publicAgentKey(PUBLIC_DEEPSEEK_V4_FLASH_AGENT_ID);
 var PUBLIC_DEEPSEEK_V4_PRO_AGENT_ID = entry("01DSV4PRONPB00000001VIR3EK").id;
@@ -322,7 +342,7 @@ var SYSTEM_BUILTIN_TRUSTED_AGENT_KEY_SET = new Set(
   SYSTEM_BUILTIN_TRUSTED_AGENT_KEYS
 );
 var isSystemBuiltinTrustedAgentKey = (key) => typeof key === "string" && SYSTEM_BUILTIN_TRUSTED_AGENT_KEY_SET.has(key);
-var isBuiltinPlatformAgentKey = (key) => typeof key === "string" && BUILTIN_PLATFORM_AGENT_KEY_SET.has(key);
+var isBuiltinPlatformAgentKey = (key) => parseBuiltinPlatformAgentId(key) !== null;
 
 export {
   builtinAgentCatalogEntryById,

package/{chunk-O6OSWFZQ.js → chunk-IHPDK6UD.js}

@@ -1,5 +1,11 @@
+import {
+  CHROME_CONNECTOR_LEGACY_TOOL_ALIASES
+} from "./chunk-LWLNLZC5.js";
+
 // packages/agent-runtime/toolNameAliases.ts
 var LEGACY_TOOL_NAME_ALIASES = {
+  // Nolo Browser Connector: legacy chrome_* → canonical browser_*
+  ...CHROME_CONNECTOR_LEGACY_TOOL_ALIASES,
   createPage: "createDoc",
   updatePage: "updateDoc",
   update_page: "updateDoc",

package/{chunk-QDSINZM3.js → chunk-IXH3HKY2.js}

@@ -1,7 +1,3 @@
-import {
-  BUILTIN_NOLO_AGENT_KEY
-} from "./chunk-BNGW5ASC.js";
-
 // packages/ai/tools/agentCapabilities.ts
 var SYSTEM_AGENT_CAPABILITIES = [
   {
@@ -20,14 +16,6 @@ var SYSTEM_AGENT_CAPABILITIES = [
     defaultEnabled: false,
     icon: "\u{1F578}\uFE0F"
   },
-  {
-    id: "conversation-todo",
-    label: "\u5BF9\u8BDD Todo",
-    description: "\u5728\u591A\u6B65\u9AA4\u5BF9\u8BDD\u4E2D\u663E\u793A\u548C\u66F4\u65B0\u4EFB\u52A1\u8FDB\u5EA6\u3002\u5173\u95ED\u540E\uFF0CAgent \u4E0D\u4F1A\u4F7F\u7528\u5BF9\u8BDD\u5185 Todo \u5DE5\u5177\u3002",
-    tools: ["setTodoList"],
-    defaultEnabled: true,
-    icon: "\u2611\uFE0F"
-  },
   {
     id: "agent-orchestration",
     label: "\u591A agent \u7F16\u6392",
@@ -47,17 +35,8 @@ var DEFAULT_SYSTEM_AGENT_CAPABILITIES = Object.fromEntries(
   ])
 );
 
-// packages/core/init.ts
-var nolotusId = "0e95801d90";
-var ADMIN_IDS = /* @__PURE__ */ new Set([nolotusId]);
-var isSystemAdmin = (userId) => userId != null && ADMIN_IDS.has(userId);
-var noloAgentId = BUILTIN_NOLO_AGENT_KEY;
-
 export {
   SYSTEM_AGENT_CAPABILITIES,
   SYSTEM_AGENT_CAPABILITY_IDS,
-  DEFAULT_SYSTEM_AGENT_CAPABILITIES,
-  nolotusId,
-  isSystemAdmin,
-  noloAgentId
+  DEFAULT_SYSTEM_AGENT_CAPABILITIES
 };

package/{chunk-GQBOR3G6.js → chunk-JBKHQOYK.js}

@@ -1,11 +1,11 @@
 import {
   getModelConfig
-} from "./chunk-OIVSQH2O.js";
+} from "./chunk-CDEEFJXN.js";
 import {
   isPlatformHostedDeepseekModel,
   isPlatformHostedOpenAIImageModel,
   resolvePlatformHostedRouting
-} from "./chunk-Q67DOFOO.js";
+} from "./chunk-SZC4REES.js";
 import {
   asTrimmedLowercaseString
 } from "./chunk-QSJ3HFEF.js";
@@ -43,18 +43,22 @@ function isOpenAiResponsesModel(args) {
     }
   }
   if (provider === "deepseek" || provider === "nolo" || provider === "ollama-cloud") {
+    const hostedRoute = resolvePlatformHostedRouting(args.model);
+    if (hostedRoute) return hostedRoute.wire === "responses";
     if (isPlatformHostedDeepseekModel(args.model)) return true;
     if (isPlatformHostedOpenAIImageModel(args.model)) return true;
   }
   return false;
 }
+var PLATFORM_HOSTED_RESPONSES_GATEWAY_MARKER = "nolo-platform-gateway://responses";
+var CLOUDFLARE_ACCOUNT_ID_PLACEHOLDER = "{account}";
 function resolvePlatformResponsesEndpoint(provider, model) {
   const normalized = asTrimmedLowercaseString(provider);
   if (normalized === "openai") return OPENAI_RESPONSES_ENDPOINT;
   if (normalized === "deepseek" || normalized === "nolo" || normalized === "ollama-cloud") {
     const route = resolvePlatformHostedRouting(model);
     if (route && route.wire === "responses") {
-      return route.endpoint;
+      return route.endpoint.includes(CLOUDFLARE_ACCOUNT_ID_PLACEHOLDER) ? PLATFORM_HOSTED_RESPONSES_GATEWAY_MARKER : route.endpoint;
     }
     if (!model || isPlatformHostedDeepseekModel(model)) {
       return DEEPSEEK_RESPONSES_ENDPOINT;
@@ -72,7 +76,7 @@ function resolvePlatformChatCompletionsEndpoint(provider, model) {
   const aliased = PLATFORM_PROVIDER_ENDPOINT_ALIASES[key] ?? key;
   if (aliased === "nolo") {
     const route = resolvePlatformHostedRouting(model);
-    if (route && route.wire !== "responses") {
+    if (route && route.wire === "chat.completions") {
       return route.endpoint;
     }
     return void 0;

package/{chunk-XD2MJFUG.js → chunk-JEFXP73H.js}

@@ -1,7 +1,7 @@
 import {
   DEFAULT_AGENT_BASE_POLICY,
   DEFAULT_USER_PREFERENCE_PROFILE
-} from "./chunk-GP5LKBUZ.js";
+} from "./chunk-RQ6CTX2E.js";
 
 // packages/ai/policy/runtimePolicy.ts
 var clampLevel = (value, fallback) => {