nolo-cli 0.107.0-alpha.4 → 0.107.1

package/{chunk-AHAHBQMU.js → chunk-WDLSZMTA.js}

@@ -4,11 +4,11 @@ import {
 import {
   patch,
   read
-} from "./chunk-VRTTFDBM.js";
+} from "./chunk-WPHY3VPF.js";
 import {
   DEVICE_LOCAL_OWNER_ID,
   isDeviceLocalSpaceBody
-} from "./chunk-UKWGR5SS.js";
+} from "./chunk-O7SVKKLY.js";
 import {
   selectIdentityUserId
 } from "./chunk-SEJ5OS6F.js";

package/{chunk-53HEEOTT.js → chunk-WF5X57VW.js}

@@ -1,3 +1,6 @@
+import {
+  writeOAuthCredential
+} from "./chunk-HNGRBWYF.js";
 import {
   ANTIGRAVITY_AUTH_URL,
   ANTIGRAVITY_CALLBACK_PATH,
@@ -11,19 +14,16 @@ import {
   getAntigravityUserAgent,
   normalizeAntigravityTokenPayload,
   refreshAntigravityToken
-} from "./chunk-UZGQNTVW.js";
-import {
-  writeOAuthCredential
-} from "./chunk-ONXOABJR.js";
+} from "./chunk-KHKTDMYG.js";
 import {
   toErrorMessage
 } from "./chunk-HNMXYYJR.js";
-import {
-  asOptionalFiniteNumber
-} from "./chunk-WWC7I6TA.js";
 import {
   isRecord
 } from "./chunk-KUG52IAP.js";
+import {
+  asOptionalFiniteNumber
+} from "./chunk-WWC7I6TA.js";
 import {
   asTrimmedString
 } from "./chunk-3EUW3WEO.js";
@@ -367,6 +367,77 @@ async function refreshAntigravityOAuthToken(credential, deps = {}) {
 // packages/cli/oauth/flows/openai-codex.ts
 import { createHash as createHash2 } from "node:crypto";
 
+// packages/agent-runtime/oauthRefreshError.ts
+var PERMANENT_REFRESH_CODES = /* @__PURE__ */ new Set([
+  "invalid_grant",
+  // OpenAI 令牌端点对失效/不存在的 refresh token 返回 401
+  // {"error":{"code":"invalid_refresh_token",...}}（2026-10-01 用必然无效的
+  // token 实测）。线上 chatgpt 凭据正是因为没认出它，被当成临时的
+  // "unauthorized"、每 15 分钟重试一次且永远不提示重新授权。
+  "invalid_refresh_token",
+  "refresh_token_reused",
+  "invalid_client"
+]);
+var SAFE_MESSAGES = {
+  invalid_grant: "refresh token \u5DF2\u5931\u6548\uFF0C\u8BF7\u91CD\u65B0\u6388\u6743",
+  invalid_refresh_token: "refresh token \u5DF2\u5931\u6548\uFF0C\u8BF7\u91CD\u65B0\u6388\u6743",
+  refresh_token_reused: "refresh token \u5DF2\u88AB\u5176\u4ED6\u526F\u672C\u4F7F\u7528\uFF0C\u8BF7\u91CD\u65B0\u6388\u6743",
+  invalid_client: "OAuth \u5BA2\u6237\u7AEF\u88AB\u62D2\u7EDD\uFF0C\u8BF7\u91CD\u65B0\u6388\u6743",
+  unauthorized: "\u4E0A\u6E38\u62D2\u7EDD\u4E86\u5237\u65B0\u8BF7\u6C42\uFF08401/403\uFF09",
+  rate_limited: "\u4E0A\u6E38\u9650\u6D41\uFF0C\u7A0D\u540E\u91CD\u8BD5",
+  http_5xx: "\u4E0A\u6E38\u670D\u52A1\u6682\u65F6\u4E0D\u53EF\u7528",
+  network: "\u65E0\u6CD5\u8FDE\u63A5\u4E0A\u6E38",
+  bad_response: "\u4E0A\u6E38\u8FD4\u56DE\u4E86\u65E0\u6CD5\u8BC6\u522B\u7684\u54CD\u5E94",
+  unknown: "\u5237\u65B0\u5931\u8D25"
+};
+var OAuthRefreshError = class extends Error {
+  code;
+  status;
+  retryAfterMs;
+  constructor(code, opts = {}) {
+    super(SAFE_MESSAGES[code]);
+    this.name = "OAuthRefreshError";
+    this.code = code;
+    if (opts.status !== void 0) this.status = opts.status;
+    if (opts.retryAfterMs !== void 0) this.retryAfterMs = opts.retryAfterMs;
+  }
+  get permanent() {
+    return PERMANENT_REFRESH_CODES.has(this.code);
+  }
+};
+function readErrorCode(payload) {
+  if (!payload || typeof payload !== "object") return void 0;
+  const err = payload.error;
+  if (typeof err === "string") return err;
+  if (err && typeof err === "object") {
+    const code = err.code;
+    if (typeof code === "string") return code;
+  }
+  return void 0;
+}
+function classifyOAuthRefreshHttpFailure(status, payload, headers) {
+  const raw = readErrorCode(payload)?.toLowerCase();
+  if (raw === "invalid_grant") return new OAuthRefreshError("invalid_grant", { status });
+  if (raw === "invalid_refresh_token") {
+    return new OAuthRefreshError("invalid_refresh_token", { status });
+  }
+  if (raw === "refresh_token_reused") {
+    return new OAuthRefreshError("refresh_token_reused", { status });
+  }
+  if (raw === "invalid_client") return new OAuthRefreshError("invalid_client", { status });
+  if (status === 429) {
+    const seconds = Number(headers?.get("retry-after"));
+    return new OAuthRefreshError("rate_limited", {
+      status,
+      ...Number.isFinite(seconds) && seconds > 0 ? { retryAfterMs: seconds * 1e3 } : {}
+    });
+  }
+  if (status === 401 || status === 403) return new OAuthRefreshError("unauthorized", { status });
+  if (status >= 500) return new OAuthRefreshError("http_5xx", { status });
+  return new OAuthRefreshError("unknown", { status });
+}
+var TRANSIENT_MAX_MS = 15 * 6e4;
+
 // packages/agent-runtime/openaiCodexOAuth.ts
 var OPENAI_CODEX_CLIENT_ID = "app_EMoamEEZ73f0CkXaXp7hrann";
 var OPENAI_CODEX_SCOPES = [
@@ -463,17 +534,14 @@ async function refreshOpenAiCodexToken(credential, deps = {}) {
       signal: AbortSignal.timeout(OPENAI_CODEX_TOKEN_REQUEST_TIMEOUT_MS)
     });
   } catch (error) {
-    throw new Error(
-      `OpenAI Codex token refresh failed: ${toErrorMessage(error)}`
-    );
+    throw new OAuthRefreshError("network");
   }
   const payload = await response.json().catch(() => ({}));
   if (!response.ok) {
-    const detail = typeof payload.error_description === "string" && payload.error_description ? payload.error_description : typeof payload.error === "string" && payload.error ? payload.error : `HTTP ${response.status}`;
-    throw new Error(`OpenAI Codex token refresh failed: ${detail}`);
+    throw classifyOAuthRefreshHttpFailure(response.status, payload, response.headers);
   }
   if (typeof payload.access_token !== "string" || !payload.access_token.trim()) {
-    throw new Error("OpenAI Codex token refresh response missing access_token");
+    throw new OAuthRefreshError("bad_response");
   }
   const now = deps.now?.() ?? Date.now();
   return normalizeOpenAiCodexTokenPayload({
@@ -1047,11 +1115,10 @@ async function refreshAnthropicToken(credential, deps = {}) {
   });
   const payload = await response.json().catch(() => ({}));
   if (!response.ok) {
-    const detail = typeof payload.error_description === "string" ? payload.error_description : typeof payload.error === "string" ? payload.error : `HTTP ${response.status}`;
-    throw new Error(`Claude token refresh failed: ${detail}`);
+    throw classifyOAuthRefreshHttpFailure(response.status, payload, response.headers);
   }
   if (typeof payload.access_token !== "string" || !payload.access_token.trim()) {
-    throw new Error("Claude token refresh response missing access_token");
+    throw new OAuthRefreshError("bad_response");
   }
   const now = deps.now?.() ?? Date.now();
   return normalizeAnthropicTokenPayload({

package/{chunk-VRTTFDBM.js → chunk-WPHY3VPF.js}

@@ -1,25 +1,17 @@
-import {
-  fileKey,
-  getFileIdFromKey,
-  ulid
-} from "./chunk-VMFTFOWF.js";
 import {
   loadFileFromIndexedDb,
   removeAction,
   saveFileToIndexedDb
-} from "./chunk-ABQYVJBJ.js";
+} from "./chunk-EV235ILT.js";
 import {
   readAction,
   readRequestManager,
   resolveAgentReadServers
-} from "./chunk-WV42OMV7.js";
+} from "./chunk-ELUDRSRD.js";
 import {
-  asyncThunkCreator,
-  buildCreateSlice,
+  beginWriteAck,
   compareRemoteRecordsByComparableTime,
-  createEntityAdapter,
   getRuntimeServerContext,
-  noloDeleteRequest,
   pickBestSettledRemoteRecord,
   planAuthorityReadServers,
   resolveAuthorityReplicationServers,
@@ -32,19 +24,30 @@ import {
   shouldReplaceLocalWithRemoteRecord,
   shouldReplicateLocalRecord,
   uploadToCurrentServer
-} from "./chunk-UKWGR5SS.js";
-import {
-  fetchFromClientDb,
-  fetchFromServer,
-  logger,
-  normalizeTimeFields
-} from "./chunk-QOKAKDPE.js";
+} from "./chunk-O7SVKKLY.js";
 import {
   isTombstoneRecord
-} from "./chunk-GBRG75BQ.js";
+} from "./chunk-D2MDMY2M.js";
 import {
   isRecord
 } from "./chunk-KUG52IAP.js";
+import {
+  fileKey,
+  getFileIdFromKey,
+  ulid
+} from "./chunk-OKGVNZTL.js";
+import {
+  asyncThunkCreator,
+  buildCreateSlice,
+  createEntityAdapter,
+  noloDeleteRequest
+} from "./chunk-VY6VFGKR.js";
+import {
+  fetchFromClientDb,
+  fetchFromServer,
+  logger,
+  normalizeTimeFields
+} from "./chunk-HIM3FCLF.js";
 import {
   API_ENDPOINTS
 } from "./chunk-LCBAMY2M.js";
@@ -260,12 +263,14 @@ var writeAction = async (writeConfig, thunkApi) => {
       `Invalid data type "${data.type}" for writeAction with key ${customKey}. Proceeding anyway.`
     );
   }
+  let writeAck = null;
   try {
     const willSaveData = normalizeTimeFields({
       ...data,
       dbKey: customKey,
       userId: recordUserId
     });
+    writeAck = beginWriteAck(customKey);
     await saveToClientDb(clientDb, customKey, willSaveData);
     const servers = resolveAuthorityReplicationServers({
       currentServer,
@@ -283,8 +288,14 @@ var writeAction = async (writeConfig, thunkApi) => {
       logger.debug(
         `[writeAction] Initiating background sync for key: ${customKey} to ${servers.length} servers.`
       );
-      scheduleWriteReplication(servers, serverWriteConfig, state);
+      const replication = scheduleWriteReplication(
+        servers,
+        serverWriteConfig,
+        state
+      );
+      writeAck.settleWithReplication(replication);
     } else {
+      writeAck.markNotReplicated();
       logger.warn(
         { customKey },
         "[writeAction] No available servers, data only saved locally."
@@ -292,6 +303,7 @@ var writeAction = async (writeConfig, thunkApi) => {
     }
     return willSaveData;
   } catch (error) {
+    writeAck?.markAborted();
     const errorMessage = `Write action failed for ${customKey}: ${error?.message || "Unknown error"}`;
     logger.error({ error }, "[writeAction] Error");
     actionToast.error(`Failed to save data for ${customKey}.`);
@@ -493,6 +505,7 @@ var resolveFileCategory = ({
   }
   return "other";
 };
+var MAX_MEDIA_FILE_SIZE = 120 * 1024 * 1024;
 
 // packages/database/actions/upload.ts
 var saveToClientDb2 = async (clientDb, dbKey, metadata) => {
@@ -712,7 +725,7 @@ var dbSlice = createSliceWithThunks({
     // 动态 import 在调用期解析，避开 TDZ/求值顺序问题（同下方 share）。
     read: create.asyncThunk(
       async (payload, thunkApi) => {
-        const { readAction: readAction2 } = await import("./read-COE3ZYR6.js");
+        const { readAction: readAction2 } = await import("./read-LSYFLSIM.js");
         return readAction2(payload, thunkApi);
       },
       {
@@ -786,7 +799,7 @@ var dbSlice = createSliceWithThunks({
     // 这里改成动态 import，运行期才解析，彻底断开这条边。
     share: create.asyncThunk(
       async (config, thunkApi) => {
-        const { shareResourceAction } = await import("./action-P4TNFGAD.js");
+        const { shareResourceAction } = await import("./action-GVA5ARSJ.js");
         return shareResourceAction(config, thunkApi);
       }
     ),

package/{chunk-3L2WKC3W.js → chunk-XPWGOTBQ.js}

@@ -24,6 +24,12 @@ async function isDrainExhaustedResponse(response) {
   }
 }
 
+// packages/core/positiveFiniteNumberOrFallback.ts
+function parsePositiveFiniteNumberOrFallback(value, fallback) {
+  const parsed = Number(value);
+  return Number.isFinite(parsed) && parsed > 0 ? parsed : fallback;
+}
+
 // packages/core/retryAfterMs.ts
 function normalizeNonNegativeMs(value, fallbackMs) {
   const parsed = Number(value);
@@ -51,5 +57,6 @@ export {
   createDrainExhaustedResponse,
   isDrainExhaustedResponse,
   normalizeNonNegativeMs,
-  parseRetryAfterHeaderMs
+  parseRetryAfterHeaderMs,
+  parsePositiveFiniteNumberOrFallback
 };