nolo-cli 0.140.0-alpha.2 → 0.141.0-alpha.2

package/{chunk-K3NOJJUS.js → chunk-MPRDXX4T.js}

@@ -24,6 +24,7 @@ import {
   parseRetryAfterHeaderMs
 } from "./chunk-3L2WKC3W.js";
 import {
+  RUN_TITLE_MAX,
   TASK_PREVIEW_MAX,
   buildDelegatedTaskContent,
   calculateDelegatedPayloadMetrics,
@@ -32,11 +33,12 @@ import {
   formatStartRunCard,
   formatStatusRunCard,
   formatStopRunCard,
+  normalizeRunTitle,
   resolveRunLabel
-} from "./chunk-3VNWWVKB.js";
+} from "./chunk-L4KXQ6QP.js";
 import {
   createDialogAction
-} from "./chunk-F5IMTLHP.js";
+} from "./chunk-A3JENOEB.js";
 import {
   addMemberSpace,
   fetchAuthoritativeRemoteSpace,
@@ -60,7 +62,7 @@ import {
 } from "./chunk-VF4K2QE6.js";
 import {
   createDocState
-} from "./chunk-XFEBG6NU.js";
+} from "./chunk-TUETDBTI.js";
 import {
   setDialogExtraReferencesAction
 } from "./chunk-Z7IZQF56.js";
@@ -99,7 +101,7 @@ import {
   updateContentCategory,
   updateContentTitle,
   writeStoredCollapsedCategories
-} from "./chunk-XWVHWH35.js";
+} from "./chunk-CRGSU5DB.js";
 import {
   getCurrentSpaceId,
   getCurrentSpaceIdRaw,
@@ -121,14 +123,14 @@ import {
   selectMsgById,
   uiAskChoiceFunc,
   uiAskChoiceFunctionSchema
-} from "./chunk-2VMY5RLA.js";
+} from "./chunk-TS5BDIPV.js";
 import {
   createAgent,
   deleteServerSyncedCredential,
   runLlm,
   streamAgentChatTurn,
   updateAgent
-} from "./chunk-SNVNLFVK.js";
+} from "./chunk-TV5ODOAF.js";
 import {
   getActiveDialogKey,
   selectCurrentDialogKey,
@@ -3976,7 +3978,7 @@ async function deleteDialogsFunc(args, thunkApi) {
   const deletedDialogIds = [];
   const deletedDialogKeys = [];
   const failures = [];
-  const { deleteDialog: deleteDialog2 } = await import("./dialogSlice-OU5IGCJ5.js");
+  const { deleteDialog: deleteDialog2 } = await import("./dialogSlice-7IGCUDZE.js");
   for (const target of targets) {
     try {
       await thunkApi.dispatch(deleteDialog2(target.dbKey)).unwrap();
@@ -13223,6 +13225,10 @@ function buildStartAgentRunFunctionSchema(opts) {
           type: "string",
           description: "\u53EF\u9009\u3002\u7531 listAgents/readAgent \u5F97\u5230\u7684\u53EF\u8BFB Agent \u540D\u79F0\uFF0C\u7528\u4E8E TUI \u8FD0\u884C\u5361\u7247\u5C55\u793A\u3002"
         },
+        title: {
+          type: "string",
+          description: `\u53EF\u9009\u3002\u8FD9\u6B21\u5B50\u4EFB\u52A1\u7684\u77ED\u6807\u9898\uFF08\u2264${RUN_TITLE_MAX} \u5B57\uFF0C\u4E00\u884C\uFF0C\u5982\u300C\u590D\u5BA1\u989D\u5EA6 diff\u300D\u300COpus \u672C\u5730\u62C9\u53D6\u8BBE\u8BA1\u300D\uFF09\u3002\u672C\u5730 TUI \u7684\u8FD0\u884C\u533A\u7528\u5B83\u6807\u8BC6\u8FD9\u4E2A run\uFF08\u670D\u52A1\u7AEF Web \u8DEF\u5F84\u53EA\u5728\u8FD4\u56DE\u503C\u91CC\u56DE\u663E\uFF0C\u4E0D\u6301\u4E45\u5316\uFF09\u3002\u540C\u4E00\u4E2A agent \u5E76\u53D1\u591A\u4E2A run \u65F6\u540D\u5B57\u5B8C\u5168\u76F8\u540C\u3001brief \u5F00\u5934\u53C8\u5E38\u662F\u540C\u6837\u7684\u5957\u8BDD\uFF0C\u5F3A\u70C8\u5EFA\u8BAE\u586B\u5199\uFF1B\u4E0D\u586B\u5219\u4E0D\u663E\u793A\u6807\u9898\uFF0C\u4E0D\u4F1A\u81EA\u52A8\u4ECE\u4EFB\u52A1\u6B63\u6587\u751F\u6210\u3002`
+        },
         // 刻意不向模型暴露 ephemeral：AI 不需要知道这个选项，不提供即默认持久化。
         // 非持久化 run 在失败/stall/输出被截断时不会留下任何可找回的结论，而
         // review findings 与子任务产出都必须可回读——把选项藏起来比写一条
@@ -13346,6 +13352,7 @@ async function startAgentRunFunc(args, thunkApi, _context) {
     const resolvedName = agentName?.trim() || bgResult.agentName || bgResult.name;
     const identity = { agentName: resolvedName, agentKey, runId };
     const taskPreview = task.replace(/\s+/g, " ").trim().slice(0, TASK_PREVIEW_MAX);
+    const title = normalizeRunTitle(args.title);
     return {
       rawData: {
         runId,
@@ -13358,6 +13365,7 @@ async function startAgentRunFunc(args, thunkApi, _context) {
         batchId: effectiveBatchId,
         ...resolvedName ? { agentName: resolvedName } : {},
         ...taskPreview ? { taskPreview } : {},
+        ...title ? { title } : {},
         payloadMetrics
       },
       displayData: formatStartRunCard(resolveRunLabel(identity), status, {
@@ -15035,7 +15043,7 @@ var executeToolRun = createAsyncThunk(
     if (!executionInput) {
       throw new Error(`ToolRun ${id} has no input to execute with.`);
     }
-    const { findToolExecutor: findToolExecutor2 } = await import("./tools-ZX3DP5DJ.js");
+    const { findToolExecutor: findToolExecutor2 } = await import("./tools-VSECJ5T7.js");
     const { executor } = findToolExecutor2(run.toolName);
     toolRunStarted({
       id: run.id,
@@ -17542,7 +17550,7 @@ async function updateDocFunc(args, thunkApi) {
       updated_at: (/* @__PURE__ */ new Date()).toISOString()
     };
     await dispatch(write({ data: updatedPageData, customKey: id })).unwrap();
-    const { getDocState, applyExternalDocUpdate } = await import("./docStore-UQF3EY2X.js");
+    const { getDocState, applyExternalDocUpdate } = await import("./docStore-OD3NRNBN.js");
     if (getDocState().pageKey === id) {
       applyExternalDocUpdate({
         slateData: finalSlateData,

package/{chunk-I3TQJXQ7.js → chunk-QFPJEU36.js}

@@ -1,6 +1,7 @@
 import {
-  isAgentRunTerminalStatus
-} from "./chunk-3VNWWVKB.js";
+  isAgentRunTerminalStatus,
+  normalizeRunTitle
+} from "./chunk-L4KXQ6QP.js";
 import {
   isCompiledBinary,
   resolveCliEntrypointPath
@@ -836,10 +837,12 @@ async function spawnLocalBackgroundRun(input, deps = {}) {
     }
   } catch {
   }
+  const title = normalizeRunTitle(input.title);
   const record = {
     runId,
     agentKey: input.agentKey,
     ...typeof input.agentName === "string" && input.agentName.trim() ? { agentName: input.agentName.trim() } : {},
+    ...title ? { title } : {},
     cwd: input.cwd,
     ...messagePath ? { msgFile: messagePath } : input.msgFile ? { msgFile: input.msgFile } : {},
     startedAt: now().toISOString(),

package/{chunk-PP6FTGA6.js → chunk-SFRMB7XN.js}

@@ -4,7 +4,7 @@ import {
   refreshAntigravityOAuthToken,
   refreshOpenAiCodexToken,
   xaiRefresh
-} from "./chunk-LLVHGBUH.js";
+} from "./chunk-W5UYXCQE.js";
 import {
   createChromeConnectorClient,
   createVerifiedChromeConnectorClient,
@@ -46,7 +46,7 @@ import {
   terminateRunProcess,
   transitionRunToTerminal,
   withQueueLock
-} from "./chunk-I3TQJXQ7.js";
+} from "./chunk-QFPJEU36.js";
 import {
   getDefaultCliLocalRuntimeDb
 } from "./chunk-ZOVKKMF6.js";
@@ -63,7 +63,7 @@ import {
 import {
   inlineImageUrlsForCustomProvider,
   prepareTools
-} from "./chunk-OXY64W6K.js";
+} from "./chunk-SUFNELDG.js";
 import {
   getServerProviderSecret
 } from "./chunk-HS7MLR74.js";
@@ -82,7 +82,7 @@ import {
   rememberMemoryFunctionSchema,
   resolveAgentRequiredPackIds,
   setTodoListFunc
-} from "./chunk-K3NOJJUS.js";
+} from "./chunk-MPRDXX4T.js";
 import {
   deriveCredentialGroup,
   deriveCustomProviderCredentialGroup
@@ -100,23 +100,24 @@ import {
   formatStopRunCard,
   isAgentNameFallback,
   isAgentRunTerminalStatus,
+  normalizeRunTitle,
   resolveRunLabel,
   shortRunId
-} from "./chunk-3VNWWVKB.js";
+} from "./chunk-L4KXQ6QP.js";
 import {
   applyBuiltinAgentRuntimeOverride,
   applyTokenUsageToDayStats,
   prepareTokenUsageData,
   resolveBuiltinPlatformAgentConfig,
   runKeyed
-} from "./chunk-2VMY5RLA.js";
+} from "./chunk-TS5BDIPV.js";
 import {
   BUILTIN_DIALOG_LLM_CHAT_FALLBACK_MODEL,
   BUILTIN_TITLE_LLM_CONFIG
 } from "./chunk-MC4XLIJ7.js";
 import {
   fetchServerSyncedCredential
-} from "./chunk-SNVNLFVK.js";
+} from "./chunk-TV5ODOAF.js";
 import {
   require_date_fns
 } from "./chunk-M76ECQRD.js";
@@ -468,10 +469,6 @@ var STRINGS = {
     en: "Esc to stop",
     zh: "Esc \u505C\u6B62\u56DE\u590D"
   },
-  queuedHint: {
-    en: "queued",
-    zh: "\u6392\u961F"
-  },
   flushQueuedIdleHint: {
     en: "Flushed {0} queued messages as one.",
     zh: "\u5DF2\u628A {0} \u6761\u6392\u961F\u6D88\u606F\u5408\u5E76\u53D1\u9001\u3002"
@@ -11269,6 +11266,7 @@ function buildSnapshot(parsed, event) {
   });
   const logLines = readLogLines(parsed);
   const taskPreview = readString(parsed.taskPreview);
+  const title = normalizeRunTitle(parsed.title);
   const lastToolNames = readToolNames(parsed.lastToolNames);
   const lastAssistantText = readString(parsed.lastAssistantText);
   const errorMessage = readString(parsed.errorMessage);
@@ -11281,6 +11279,7 @@ function buildSnapshot(parsed, event) {
     // site: an unnamed run should render no name row, not the word "agent".
     ...isAgentNameFallback(label) ? {} : { agentName: label },
     ...taskPreview ? { taskPreview } : {},
+    ...title ? { title } : {},
     ...typeof parsed.toolCallCount === "number" && Number.isFinite(parsed.toolCallCount) ? { toolCallCount: parsed.toolCallCount } : {},
     ...lastToolNames ? { lastToolNames } : {},
     ...lastAssistantText ? { lastAssistantText } : {},
@@ -11749,9 +11748,11 @@ function createCliStartAgentRunExecutor(deps = {}) {
       ...batchId ? { batchId } : {},
       ...parentDialogId ? { parentDialogId } : {},
       ...typeof args.credentialGroup === "string" && args.credentialGroup.trim() ? { credentialGroup: args.credentialGroup.trim() } : {},
-      allowUnknownCredential: args.allowUnknownCredential === true
+      allowUnknownCredential: args.allowUnknownCredential === true,
+      allowCredentialConcurrency: args.allowCredentialConcurrency === true
     });
     const dodCommands = Array.isArray(args.dodCommands) ? args.dodCommands.filter((c) => typeof c === "string" && c.trim().length > 0).map((c) => c.trim()) : typeof args.dod === "string" && args.dod.trim().length > 0 ? [args.dod.trim()] : Array.isArray(args.dod) ? args.dod.filter((c) => typeof c === "string" && c.trim().length > 0).map((c) => c.trim()) : void 0;
+    const runTitle = normalizeRunTitle(args.title);
     const { runId, batchId: resolvedBatchId } = await spawnLocalBackgroundRun(
       {
         rawArgs,
@@ -11759,6 +11760,7 @@ function createCliStartAgentRunExecutor(deps = {}) {
         cliEntrypointPath: deps.cliEntrypoint,
         agentKey,
         ...agentName ? { agentName } : {},
+        ...runTitle ? { title: runTitle } : {},
         ...batchId ? { batchId } : {},
         ...credentialGroup ? { credentialGroup } : {},
         ...parentDialogId ? { parentDialogId } : {},
@@ -11807,6 +11809,7 @@ function createCliStartAgentRunExecutor(deps = {}) {
         batchId: resolvedBatchId,
         ...agentName ? { agentName } : {},
         ...taskPreview ? { taskPreview } : {},
+        ...runTitle ? { title: runTitle } : {},
         payloadMetrics
       }),
       metadata: {

package/{chunk-OXY64W6K.js → chunk-SUFNELDG.js}

@@ -1,9 +1,9 @@
 import {
   toolRegistry
-} from "./chunk-K3NOJJUS.js";
+} from "./chunk-MPRDXX4T.js";
 import {
   i18n_default
-} from "./chunk-2VMY5RLA.js";
+} from "./chunk-TS5BDIPV.js";
 import {
   canonicalizeToolNames
 } from "./chunk-O6OSWFZQ.js";

package/{chunk-2VMY5RLA.js → chunk-TS5BDIPV.js}

@@ -11,7 +11,7 @@ import {
 } from "./chunk-6O4IK4V2.js";
 import {
   runLlm
-} from "./chunk-SNVNLFVK.js";
+} from "./chunk-TV5ODOAF.js";
 import {
   cleanupCliSessionForDialog
 } from "./chunk-D76D3RTR.js";
@@ -23937,7 +23937,7 @@ var messageSlice = createSliceWithThunks({
             runtimeOptions: args.runtimeOptions
           });
           if (agentKeyToUse) {
-            const { streamAgentChatTurn } = await import("./agentSlice-CFXREBVL.js");
+            const { streamAgentChatTurn } = await import("./agentSlice-EYRJX2J6.js");
             await dispatch(
               streamAgentChatTurn({
                 agentKey: agentKeyToUse,
@@ -25073,7 +25073,7 @@ var deleteDialogThunk = async (payload, thunkApi) => {
   }
   if (isCurrentDialog) {
     await thunkApi.dispatch(resetMsgs());
-    const { clearPendingAttachments: clearPendingAttachments2 } = await import("./dialogSlice-OU5IGCJ5.js");
+    const { clearPendingAttachments: clearPendingAttachments2 } = await import("./dialogSlice-7IGCUDZE.js");
     dispatch(clearPendingAttachments2());
   }
   return { dialogKey, isCurrentDialog, attachmentPlan };
@@ -25081,15 +25081,15 @@ var deleteDialogThunk = async (payload, thunkApi) => {
 
 // packages/chat/dialog/dialogSlice.ts
 var runCreateDialogAction = async (args, thunkApi) => {
-  const { createDialogAction } = await import("./createDialogAction-ZTC23O42.js");
+  const { createDialogAction } = await import("./createDialogAction-2BMDM4X3.js");
   return createDialogAction(args, thunkApi);
 };
 var runCreateAgentAutomationAction = async (args, thunkApi) => {
-  const { createAgentAutomationAction } = await import("./createAgentAutomationAction-QS5HQOP5.js");
+  const { createAgentAutomationAction } = await import("./createAgentAutomationAction-SWO62RE2.js");
   return createAgentAutomationAction(args, thunkApi);
 };
 var runUpdateDialogTitleAction = async (args, thunkApi) => {
-  const { updateDialogTitleAction } = await import("./updateDialogTitleAction-6ZCZK2I7.js");
+  const { updateDialogTitleAction } = await import("./updateDialogTitleAction-WE5KY3SM.js");
   return updateDialogTitleAction(args, thunkApi);
 };
 var runAddDialogAgentAction = async (args, thunkApi) => {
@@ -25113,7 +25113,7 @@ var runSetDialogExtraReferencesAction = async (args, thunkApi) => {
   return setDialogExtraReferencesAction(args, thunkApi);
 };
 var runHandleSendMessageAction = async (args, thunkApi) => {
-  const { handleSendMessageAction } = await import("./handleSendMessageAction-NFT57BBK.js");
+  const { handleSendMessageAction } = await import("./handleSendMessageAction-PRF7JNOH.js");
   return handleSendMessageAction(args, thunkApi);
 };
 function clearDialogState() {
@@ -25126,7 +25126,7 @@ var createPageAndAddReference = createAsyncThunk(
   async (payload, { dispatch, getState, rejectWithValue }) => {
     const { slateData, jsonData, title, type, fileId, groupId, dialogKey } = payload;
     try {
-      const { createDocState } = await import("./docStore-UQF3EY2X.js");
+      const { createDocState } = await import("./docStore-OD3NRNBN.js");
       const pageKey = await createDocState(
         { slateData, title },
         { dispatch, getState }

package/{chunk-XFEBG6NU.js → chunk-TUETDBTI.js}

@@ -326,7 +326,7 @@ async function saveDocState(arg, { dispatch, getState }) {
     ).unwrap();
     if (dbSpaceId) {
       try {
-        const { updateContentTitle } = await import("./contentThunks-BHQXUKKG.js");
+        const { updateContentTitle } = await import("./contentThunks-2PJ4QDAV.js");
         await dispatch(
           updateContentTitle({
             spaceId: dbSpaceId,
@@ -365,7 +365,7 @@ async function saveDocState(arg, { dispatch, getState }) {
   }
 }
 async function createDocState(args, thunkApi) {
-  const { createPageAction } = await import("./createPageAction-RFAUZO6Y.js");
+  const { createPageAction } = await import("./createPageAction-HLSLX4R4.js");
   return createPageAction(args, thunkApi);
 }
 function subscribe(listener) {

package/{chunk-SNVNLFVK.js → chunk-TV5ODOAF.js}

@@ -304,7 +304,7 @@ var slice = createSliceWithThunks({
       const overrides = {};
       if (args.systemPromptOverride !== void 0) overrides.prompt = args.systemPromptOverride;
       if (args.toolsOverride !== void 0) overrides.tools = args.toolsOverride;
-      const { _executeModel } = await import("./_executeModel-SOYFJXV6.js");
+      const { _executeModel } = await import("./_executeModel-PHFKA2OL.js");
       return _executeModel(
         {
           isStreaming: args.isStreaming ?? false,
@@ -325,7 +325,7 @@ var slice = createSliceWithThunks({
      * - 循环直到无工具调用或触发其他运行时停止条件
      */
     runAgent: create.asyncThunk(async (args, thunkApi) => {
-      const { runAgentClientLoop } = await import("./runAgentClientLoop-ZHN7EVIF.js");
+      const { runAgentClientLoop } = await import("./runAgentClientLoop-66UNGCTW.js");
       const { content: loopContent, toolCallCount } = await runAgentClientLoop(
         {
           agentKey: args.agentKey,
@@ -341,7 +341,7 @@ var slice = createSliceWithThunks({
      * 聊天轮次流式 Agent 调用
      */
     streamAgentChatTurn: create.asyncThunk(async (args, thunkApi) => {
-      const { streamAgentChatTurnHandler } = await import("./streamAgentChatTurn-KV7NADH2.js");
+      const { streamAgentChatTurnHandler } = await import("./streamAgentChatTurn-6F3M4KUY.js");
       return streamAgentChatTurnHandler(args, thunkApi);
     }),
     /**

package/chunk-U4STABYN.js

@@ -0,0 +1,81 @@
+import {
+  resolveAuthToken,
+  resolveServerUrl
+} from "./chunk-A7GB5UGH.js";
+
+// packages/cli/subscriptionQuotaRefresh.ts
+var CATALOG_QUOTA_REFRESH_TIMEOUT_MS = 2e3;
+var CATALOG_QUOTA_STALE_MS = 6e4;
+var EMPTY_REFRESH_BACKOFF_MS = 5 * 6e4;
+var lastRefreshEmptyAt = 0;
+function quotaIsFresh(entry, now) {
+  const observedAt = entry.quota?.observedAt;
+  return typeof observedAt === "number" && Number.isFinite(observedAt) && now - observedAt < CATALOG_QUOTA_STALE_MS;
+}
+async function refreshSubscriptionQuotas(args) {
+  const fresh = {};
+  try {
+    const now = Date.now();
+    const needsRefresh = args.entries.some(
+      (entry) => entry.probeable !== false && (!args.onlyKeys || args.onlyKeys.includes(entry.key)) && !quotaIsFresh(entry, now)
+    );
+    if (!needsRefresh) return fresh;
+    const wholeBatch = !args.onlyKeys || args.onlyKeys.length === 0;
+    if (wholeBatch && lastRefreshEmptyAt && now - lastRefreshEmptyAt < EMPTY_REFRESH_BACKOFF_MS) {
+      return fresh;
+    }
+    const env = args.env ?? process.env;
+    const authToken = resolveAuthToken(args.cliArgs ?? [], env);
+    if (!authToken) return fresh;
+    const fetchImpl = args.fetchImpl ?? fetch;
+    const refreshPromise = (async () => {
+      const res = await fetchImpl(
+        `${resolveServerUrl(args.cliArgs ?? [], env)}/api/agents/quota/refresh`,
+        {
+          method: "POST",
+          headers: {
+            "Content-Type": "application/json",
+            Authorization: `Bearer ${authToken}`
+          },
+          body: JSON.stringify(
+            args.onlyKeys && args.onlyKeys.length > 0 ? { agentKeys: args.onlyKeys } : {}
+          ),
+          signal: AbortSignal.timeout(CATALOG_QUOTA_REFRESH_TIMEOUT_MS)
+        }
+      );
+      if (!res.ok) return;
+      const payload = await res.json().catch(() => null);
+      const quotas = payload?.quotas;
+      if (!quotas || typeof quotas !== "object") return;
+      const probed = typeof payload?.probed === "number" ? payload.probed : 0;
+      if (probed === 0 && Object.keys(quotas).length === 0) {
+        if (wholeBatch) lastRefreshEmptyAt = Date.now();
+        return;
+      }
+      if (wholeBatch) lastRefreshEmptyAt = 0;
+      for (const entry of args.entries) {
+        const quota = quotas[entry.key];
+        if (quota && Array.isArray(quota.windows)) {
+          fresh[entry.key] = quota;
+        }
+      }
+    })();
+    let timer;
+    await Promise.race([
+      refreshPromise,
+      new Promise((resolve) => {
+        timer = setTimeout(resolve, CATALOG_QUOTA_REFRESH_TIMEOUT_MS);
+      })
+    ]).catch(() => {
+    });
+    if (timer) clearTimeout(timer);
+    refreshPromise.catch(() => {
+    });
+  } catch {
+  }
+  return fresh;
+}
+
+export {
+  refreshSubscriptionQuotas
+};

package/{chunk-LLVHGBUH.js → chunk-W5UYXCQE.js}

@@ -367,6 +367,77 @@ async function refreshAntigravityOAuthToken(credential, deps = {}) {
 // packages/cli/oauth/flows/openai-codex.ts
 import { createHash as createHash2 } from "node:crypto";
 
+// packages/agent-runtime/oauthRefreshError.ts
+var PERMANENT_REFRESH_CODES = /* @__PURE__ */ new Set([
+  "invalid_grant",
+  // OpenAI 令牌端点对失效/不存在的 refresh token 返回 401
+  // {"error":{"code":"invalid_refresh_token",...}}（2026-10-01 用必然无效的
+  // token 实测）。线上 chatgpt 凭据正是因为没认出它，被当成临时的
+  // "unauthorized"、每 15 分钟重试一次且永远不提示重新授权。
+  "invalid_refresh_token",
+  "refresh_token_reused",
+  "invalid_client"
+]);
+var SAFE_MESSAGES = {
+  invalid_grant: "refresh token \u5DF2\u5931\u6548\uFF0C\u8BF7\u91CD\u65B0\u6388\u6743",
+  invalid_refresh_token: "refresh token \u5DF2\u5931\u6548\uFF0C\u8BF7\u91CD\u65B0\u6388\u6743",
+  refresh_token_reused: "refresh token \u5DF2\u88AB\u5176\u4ED6\u526F\u672C\u4F7F\u7528\uFF0C\u8BF7\u91CD\u65B0\u6388\u6743",
+  invalid_client: "OAuth \u5BA2\u6237\u7AEF\u88AB\u62D2\u7EDD\uFF0C\u8BF7\u91CD\u65B0\u6388\u6743",
+  unauthorized: "\u4E0A\u6E38\u62D2\u7EDD\u4E86\u5237\u65B0\u8BF7\u6C42\uFF08401/403\uFF09",
+  rate_limited: "\u4E0A\u6E38\u9650\u6D41\uFF0C\u7A0D\u540E\u91CD\u8BD5",
+  http_5xx: "\u4E0A\u6E38\u670D\u52A1\u6682\u65F6\u4E0D\u53EF\u7528",
+  network: "\u65E0\u6CD5\u8FDE\u63A5\u4E0A\u6E38",
+  bad_response: "\u4E0A\u6E38\u8FD4\u56DE\u4E86\u65E0\u6CD5\u8BC6\u522B\u7684\u54CD\u5E94",
+  unknown: "\u5237\u65B0\u5931\u8D25"
+};
+var OAuthRefreshError = class extends Error {
+  code;
+  status;
+  retryAfterMs;
+  constructor(code, opts = {}) {
+    super(SAFE_MESSAGES[code]);
+    this.name = "OAuthRefreshError";
+    this.code = code;
+    if (opts.status !== void 0) this.status = opts.status;
+    if (opts.retryAfterMs !== void 0) this.retryAfterMs = opts.retryAfterMs;
+  }
+  get permanent() {
+    return PERMANENT_REFRESH_CODES.has(this.code);
+  }
+};
+function readErrorCode(payload) {
+  if (!payload || typeof payload !== "object") return void 0;
+  const err = payload.error;
+  if (typeof err === "string") return err;
+  if (err && typeof err === "object") {
+    const code = err.code;
+    if (typeof code === "string") return code;
+  }
+  return void 0;
+}
+function classifyOAuthRefreshHttpFailure(status, payload, headers) {
+  const raw = readErrorCode(payload)?.toLowerCase();
+  if (raw === "invalid_grant") return new OAuthRefreshError("invalid_grant", { status });
+  if (raw === "invalid_refresh_token") {
+    return new OAuthRefreshError("invalid_refresh_token", { status });
+  }
+  if (raw === "refresh_token_reused") {
+    return new OAuthRefreshError("refresh_token_reused", { status });
+  }
+  if (raw === "invalid_client") return new OAuthRefreshError("invalid_client", { status });
+  if (status === 429) {
+    const seconds = Number(headers?.get("retry-after"));
+    return new OAuthRefreshError("rate_limited", {
+      status,
+      ...Number.isFinite(seconds) && seconds > 0 ? { retryAfterMs: seconds * 1e3 } : {}
+    });
+  }
+  if (status === 401 || status === 403) return new OAuthRefreshError("unauthorized", { status });
+  if (status >= 500) return new OAuthRefreshError("http_5xx", { status });
+  return new OAuthRefreshError("unknown", { status });
+}
+var TRANSIENT_MAX_MS = 15 * 6e4;
+
 // packages/agent-runtime/openaiCodexOAuth.ts
 var OPENAI_CODEX_CLIENT_ID = "app_EMoamEEZ73f0CkXaXp7hrann";
 var OPENAI_CODEX_SCOPES = [
@@ -463,17 +534,14 @@ async function refreshOpenAiCodexToken(credential, deps = {}) {
       signal: AbortSignal.timeout(OPENAI_CODEX_TOKEN_REQUEST_TIMEOUT_MS)
     });
   } catch (error) {
-    throw new Error(
-      `OpenAI Codex token refresh failed: ${toErrorMessage(error)}`
-    );
+    throw new OAuthRefreshError("network");
   }
   const payload = await response.json().catch(() => ({}));
   if (!response.ok) {
-    const detail = typeof payload.error_description === "string" && payload.error_description ? payload.error_description : typeof payload.error === "string" && payload.error ? payload.error : `HTTP ${response.status}`;
-    throw new Error(`OpenAI Codex token refresh failed: ${detail}`);
+    throw classifyOAuthRefreshHttpFailure(response.status, payload, response.headers);
   }
   if (typeof payload.access_token !== "string" || !payload.access_token.trim()) {
-    throw new Error("OpenAI Codex token refresh response missing access_token");
+    throw new OAuthRefreshError("bad_response");
   }
   const now = deps.now?.() ?? Date.now();
   return normalizeOpenAiCodexTokenPayload({
@@ -1047,11 +1115,10 @@ async function refreshAnthropicToken(credential, deps = {}) {
   });
   const payload = await response.json().catch(() => ({}));
   if (!response.ok) {
-    const detail = typeof payload.error_description === "string" ? payload.error_description : typeof payload.error === "string" ? payload.error : `HTTP ${response.status}`;
-    throw new Error(`Claude token refresh failed: ${detail}`);
+    throw classifyOAuthRefreshHttpFailure(response.status, payload, response.headers);
   }
   if (typeof payload.access_token !== "string" || !payload.access_token.trim()) {
-    throw new Error("Claude token refresh response missing access_token");
+    throw new OAuthRefreshError("bad_response");
   }
   const now = deps.now?.() ?? Date.now();
   return normalizeAnthropicTokenPayload({

package/{chunk-ZW4TU76B.js → chunk-X45MLRN4.js}

@@ -1,6 +1,9 @@
+import {
+  refreshSubscriptionQuotas
+} from "./chunk-U4STABYN.js";
 import {
   clearCliLocalRuntimePreparedAgentCache
-} from "./chunk-PP6FTGA6.js";
+} from "./chunk-SFRMB7XN.js";
 import {
   getReadableCliDb
 } from "./chunk-CTUQJVQM.js";
@@ -67,8 +70,20 @@ async function runAgentReadCommand(args, deps = {}) {
     if (!result) {
       throw new Error(`agent not found: ${agentKey}`);
     }
+    const rawRecord = result.record;
+    const recordQuota = rawRecord?.quota;
+    const hasSubscriptionCredential = typeof rawRecord?.apiKeyRef === "string" && rawRecord.apiKeyRef.trim() !== "";
+    const fresh = hasSubscriptionCredential ? await refreshSubscriptionQuotas({
+      entries: [{ key: result.agentKey, ...recordQuota ? { quota: recordQuota } : {} }],
+      onlyKeys: [result.agentKey],
+      env,
+      cliArgs: args,
+      fetchImpl
+    }) : {};
+    const quota = fresh[result.agentKey] ?? recordQuota;
     output.write(JSON.stringify({
       ...normalizeAgentRecordForOutput(result.agentKey, authToken, result.record),
+      ...quota ? { quota } : {},
       source: result.source
     }, null, 2));
     output.write("\n");