nolo-cli 0.141.0-alpha.2 → 0.143.0-alpha.1

package/{authCommand-CYPLLWIC.js → authCommand-LARLQ3GC.js}

@@ -3,7 +3,7 @@ import {
   parseFlagWithOptionalValue,
   runCloudflareOAuthLogin,
   upsertEnvVariable
-} from "./chunk-ATXCJGRN.js";
+} from "./chunk-AAROOKLX.js";
 import {
   ANTHROPIC_OAUTH_AUTHORIZE_URL,
   ANTHROPIC_OAUTH_CALLBACK_PORT,
@@ -38,13 +38,14 @@ import {
   readJsonBody,
   refreshAntigravityOAuthToken,
   renderDeviceCodeDisplay,
+  resolveServerSyncConfig,
   runAntigravityOAuthLogin,
   runOpenAiCodexBrowserPkce,
   runOpenAiCodexDeviceCode,
   startCallbackServer,
   validateXAIEndpoint,
   xaiOAuthDiscovery
-} from "./chunk-W5UYXCQE.js";
+} from "./chunk-QDT5T7MK.js";
 import {
   defaultOpenBrowser
 } from "./chunk-VPFEPRME.js";
@@ -75,13 +76,13 @@ import "./chunk-W7XHHYWM.js";
 import {
   createOAuthTokenStore,
   resolveFreshAccessToken
-} from "./chunk-HNGRBWYF.js";
-import "./chunk-A7GB5UGH.js";
+} from "./chunk-ZWQUWF6W.js";
+import {
+  parseUserIdFromAuthToken
+} from "./chunk-A7GB5UGH.js";
 import "./chunk-OLZBQWZU.js";
 import {
-  buildEnvFromProfile,
   getProfileOAuthSync,
-  loadProfileConfig,
   saveProfileOAuthSync
 } from "./chunk-TNIX77YM.js";
 import "./chunk-Y3PMXGLH.js";
@@ -898,27 +899,34 @@ var HELP_BY_PROVIDER = {
   cursor: CURSOR_HELP_TEXT,
   devin: DEVIN_HELP_TEXT
 };
-function resolveServerSyncConfig() {
-  const envServer = process.env.NOLO_SERVER?.trim() || process.env.NOLO_SERVER_URL?.trim() || process.env.BASE_URL?.trim() || "";
-  const envToken = process.env.AUTH_TOKEN?.trim() || process.env.NOLO_AUTH_TOKEN?.trim() || "";
-  if (envServer && envToken) {
-    return { serverOrigin: envServer.replace(/\/+$/, ""), authToken: envToken };
-  }
-  let profileServer = "";
-  let profileToken = "";
+function markCredentialServerManaged(provider, credential, syncConfig, deps) {
+  const output = deps.output ?? console;
+  const userId = parseUserIdFromAuthToken(syncConfig.authToken) || "local-user";
   try {
-    const config = loadProfileConfig();
-    const profileEnv = buildEnvFromProfile(config);
-    profileServer = profileEnv.NOLO_SERVER?.trim() || "";
-    profileToken = profileEnv.AUTH_TOKEN?.trim() || "";
-  } catch {
-  }
-  const serverOrigin = (envServer || profileServer).replace(/\/+$/, "");
-  const authToken = envToken || profileToken;
-  if (serverOrigin && authToken) {
-    return { serverOrigin, authToken };
+    const { refreshToken: _dropped, ...rest } = credential;
+    const tokenStore = deps.tokenStore ?? createOAuthTokenStore(
+      void 0,
+      deps.credentialMigration ?? { enableLegacyMigration: true }
+    );
+    tokenStore.write(provider, {
+      ...rest,
+      obtainedAt: credential.obtainedAt ?? Date.now(),
+      serverManaged: {
+        origin: syncConfig.serverOrigin,
+        userId,
+        syncedAt: Date.now()
+      }
+    });
+    output.log(
+      `[nolo] \u672C\u5730\u4E0D\u518D\u4FDD\u5B58 refresh token\uFF1A${provider} \u7531 ${syncConfig.serverOrigin} \u7EDF\u4E00\u5237\u65B0\uFF08\u7528\u5B8C\u5373\u53D6\uFF09\u3002`
+    );
+    return true;
+  } catch (err) {
+    output.log(
+      `[nolo] Warning: \u672C\u5730\u51ED\u636E\u72B6\u6001\u66F4\u65B0\u5931\u8D25\uFF08${toErrorMessage(err)}\uFF09\u3002`
+    );
+    return false;
   }
-  return null;
 }
 async function syncCredentialToServer(provider, credential, deps) {
   const output = deps.output ?? console;
@@ -928,7 +936,7 @@ async function syncCredentialToServer(provider, credential, deps) {
     output.log(
       `[nolo] Warning: server sync requires NOLO_SERVER and AUTH_TOKEN env vars, or a configured profile. Skipping server sync.`
     );
-    return;
+    return "sync_failed";
   }
   const { serverOrigin, authToken } = syncConfig;
   const url = `${serverOrigin}/api/oauth/${provider}/sync`;
@@ -951,8 +959,13 @@ async function syncCredentialToServer(provider, credential, deps) {
       })
     });
     if (res.ok) {
-      output.log(`[nolo] Synced to ${serverOrigin}`);
-      output.log(`[nolo] \u7F51\u9875\u7AEF\u73B0\u5728\u53EF\u4EE5\u4F7F\u7528\u8BE5\u8BA2\u9605\u4E86\u3002`);
+      const marked = markCredentialServerManaged(provider, credential, syncConfig, deps);
+      if (marked) {
+        output.log(`[nolo] Synced to ${serverOrigin}`);
+        output.log(`[nolo] \u7F51\u9875\u7AEF\u73B0\u5728\u53EF\u4EE5\u4F7F\u7528\u8BE5\u8BA2\u9605\u4E86\u3002`);
+        return "ok";
+      }
+      return "mark_failed";
     } else {
       let errorDetail = "";
       try {
@@ -963,11 +976,13 @@ async function syncCredentialToServer(provider, credential, deps) {
       output.log(
         `[nolo] Warning: server sync failed (${res.status}${errorDetail ? `: ${errorDetail}` : ""}). Token saved locally.`
       );
+      return "sync_failed";
     }
   } catch (err) {
     output.log(
       `[nolo] Warning: server sync failed (${err?.message ?? "network error"}). Token saved locally.`
     );
+    return "sync_failed";
   }
 }
 async function runAuthProviderCommand(provider, args, _ctx, deps = {}) {
@@ -997,8 +1012,15 @@ async function runAuthProviderCommand(provider, args, _ctx, deps = {}) {
       );
       return 1;
     }
-    await syncCredentialToServer(provider, credential, deps);
-    return 0;
+    if (credential.serverManaged) {
+      error.error(
+        `[nolo] ${provider} \u51ED\u636E\u5DF2\u7531 ${credential.serverManaged.origin} \u670D\u52A1\u7AEF\u6258\u7BA1\uFF08\u672C\u5730\u65E0 refreshToken\uFF09\u3002
+\u5982\u9700\u91CD\u65B0\u540C\u6B65\uFF0C\u8BF7\u8FD0\u884C: nolo auth ${provider} --sync-to-server`
+      );
+      return 1;
+    }
+    const synced = await syncCredentialToServer(provider, credential, deps);
+    return synced === "ok" ? 0 : 1;
   }
   if (verify) {
     if (provider !== "antigravity") {
@@ -1216,7 +1238,11 @@ Store it as CLOUDFLARE_EMAIL_ROUTING_API_TOKEN:
       }
     }
     if (shouldSync) {
-      await syncCredentialToServer(provider, credential, deps);
+      const syncResult = await syncCredentialToServer(provider, credential, deps);
+      if (syncResult === "mark_failed") {
+        error.error(`[nolo] \u51ED\u636E\u5DF2\u6210\u529F\u4E0A\u4F20\u670D\u52A1\u5668\uFF0C\u4F46\u672C\u5730\u6253\u4E0A\u6258\u7BA1\u6807\u8BB0\u5931\u8D25\u3002\u4E3A\u9632\u53CC\u65B9\u7ADE\u6001\u5237\u65B0\u5BFC\u81F4\u5931\u6548\uFF0C\u8BF7\u91CD\u65B0\u6388\u6743\u3002`);
+        return 1;
+      }
     }
     return 0;
   } catch (err) {

package/{chatQueueReduxAdapter-YNI7ALFW.js → chatQueueReduxAdapter-KIQ3FQ62.js}

@@ -4,11 +4,11 @@ import {
 } from "./chunk-YPREESF4.js";
 import {
   handleSendMessage
-} from "./chunk-TS5BDIPV.js";
+} from "./chunk-KUPDS66Q.js";
 import "./chunk-MC4XLIJ7.js";
 import "./chunk-YYLHWIW6.js";
 import "./chunk-6O4IK4V2.js";
-import "./chunk-TV5ODOAF.js";
+import "./chunk-MXRUAINC.js";
 import "./chunk-D76D3RTR.js";
 import "./chunk-5RGU3J7P.js";
 import "./chunk-M76ECQRD.js";
@@ -25,7 +25,7 @@ import "./chunk-AGGIDPCZ.js";
 import "./chunk-RVX32KGQ.js";
 import "./chunk-F64B2W3R.js";
 import "./chunk-PSCNXBYA.js";
-import "./chunk-ESRMFY7G.js";
+import "./chunk-L36OWPP3.js";
 import "./chunk-BYXBJQAS.js";
 import "./chunk-DWLEOOGR.js";
 import "./chunk-7KVZ5LDQ.js";
@@ -34,7 +34,7 @@ import "./chunk-3BXNTXYI.js";
 import "./chunk-W7XHHYWM.js";
 import "./chunk-B7ANJQWZ.js";
 import "./chunk-UAD2WT54.js";
-import "./chunk-HNGRBWYF.js";
+import "./chunk-ZWQUWF6W.js";
 import "./chunk-CYSYR67N.js";
 import "./chunk-Y3PMXGLH.js";
 import "./chunk-3IYMTWYZ.js";

package/{chunk-SUFNELDG.js → chunk-44F6KKUE.js}

@@ -1,9 +1,9 @@
 import {
   toolRegistry
-} from "./chunk-MPRDXX4T.js";
+} from "./chunk-K25DK52L.js";
 import {
   i18n_default
-} from "./chunk-TS5BDIPV.js";
+} from "./chunk-KUPDS66Q.js";
 import {
   canonicalizeToolNames
 } from "./chunk-O6OSWFZQ.js";

package/{chunk-ATXCJGRN.js → chunk-AAROOKLX.js}

@@ -1,7 +1,7 @@
 import {
   generatePkcePair,
   startCallbackServer
-} from "./chunk-W5UYXCQE.js";
+} from "./chunk-QDT5T7MK.js";
 import {
   toErrorMessage
 } from "./chunk-HNMXYYJR.js";

package/{chunk-DT7WS4NV.js → chunk-DID5AVGT.js}

@@ -10,7 +10,7 @@ import {
 import {
   clipMultilineText,
   fetchAndSerializeTable
-} from "./chunk-MPRDXX4T.js";
+} from "./chunk-K25DK52L.js";
 import {
   resolvePageReadMarkdown,
   slateToSimplifiedMarkdown
@@ -20,13 +20,13 @@ import {
 } from "./chunk-MEYIRKDN.js";
 import {
   fetchAndCacheMessages
-} from "./chunk-TS5BDIPV.js";
+} from "./chunk-KUPDS66Q.js";
 import {
   shouldUseServerProxy
 } from "./chunk-YYLHWIW6.js";
 import {
   fetchServerSyncedCredential
-} from "./chunk-TV5ODOAF.js";
+} from "./chunk-MXRUAINC.js";
 import {
   buildSkillGuidancePromptBlock,
   extractRuntimePageCapabilities,
@@ -60,7 +60,7 @@ import {
 } from "./chunk-PSCNXBYA.js";
 import {
   createFileCredentialBroker
-} from "./chunk-ESRMFY7G.js";
+} from "./chunk-L36OWPP3.js";
 import {
   isOpenAiResponsesModel,
   resolvePlatformChatCompletionsEndpoint,

package/{chunk-BWSBFGQN.js → chunk-DOBBRISY.js}

@@ -28,7 +28,7 @@ import {
   t,
   toolLabel,
   toolLabelVariants
-} from "./chunk-SFRMB7XN.js";
+} from "./chunk-ZOI6KA4N.js";
 import {
   clearCredentialAvailability,
   readCredentialEntry,
@@ -75,7 +75,7 @@ import {
 } from "./chunk-LTRXGFMS.js";
 import {
   formatAgentListCard
-} from "./chunk-MPRDXX4T.js";
+} from "./chunk-K25DK52L.js";
 import {
   isTransientFetchError
 } from "./chunk-5UTFL4QJ.js";
@@ -96,11 +96,11 @@ import {
   chooseMemoryOwners,
   loadMemoryCandidatesFromDb,
   resolveAgentMemoryPolicy
-} from "./chunk-A3JENOEB.js";
+} from "./chunk-T36EFAW7.js";
 import {
   API_REPORTED_COST_MULTIPLIER,
   parseUiAskChoiceContent
-} from "./chunk-TS5BDIPV.js";
+} from "./chunk-KUPDS66Q.js";
 import {
   isOAuthApiKeyRef
 } from "./chunk-YYLHWIW6.js";
@@ -115,7 +115,7 @@ import {
   LOCAL_AGENT_CONFIG_MISSING_CODE,
   LOCAL_TURN_ABORTED_CODE,
   readActionGate
-} from "./chunk-65U5FCBE.js";
+} from "./chunk-GH4MH73K.js";
 import {
   resolveAgentRuntimeConfigFromRecord
 } from "./chunk-I4A26N52.js";
@@ -10739,7 +10739,7 @@ function findCollapsedPasteSpanAt(buffer, pos, opts = {}) {
 // packages/cli/client/agentRun.ts
 import { ulid as ulid2 } from "ulid";
 async function loadRunLocalAgentTurn() {
-  const { runLocalAgentTurn } = await import("./agentRuntimeLocal-F7VBM3ZK.js");
+  const { runLocalAgentTurn } = await import("./agentRuntimeLocal-VOQ3UYZB.js");
   return runLocalAgentTurn;
 }
 var stripDebugNoise = (s) => s.replace(/\s*raw="[\s\S]*"/g, "").replace(/\s*raw=\S+/g, "").replace(/\s*headers=\[[^\]]*\]/g, "").replace(/\s*headers=\S+/g, "").trim();

package/{chunk-65U5FCBE.js → chunk-GH4MH73K.js}

@@ -121,7 +121,7 @@ import {
 } from "./chunk-HNMXYYJR.js";
 import {
   resolveNoloStateDir
-} from "./chunk-HNGRBWYF.js";
+} from "./chunk-ZWQUWF6W.js";
 import {
   buildDialogSummaryLayer
 } from "./chunk-DVINR3PL.js";

package/{chunk-CRGSU5DB.js → chunk-GZQNKKDG.js}

@@ -9,7 +9,7 @@ import {
   initReactI18next,
   instance,
   toast
-} from "./chunk-TS5BDIPV.js";
+} from "./chunk-KUPDS66Q.js";
 import {
   require_date_fns
 } from "./chunk-M76ECQRD.js";

package/{chunk-MPRDXX4T.js → chunk-K25DK52L.js}

@@ -38,7 +38,7 @@ import {
 } from "./chunk-L4KXQ6QP.js";
 import {
   createDialogAction
-} from "./chunk-A3JENOEB.js";
+} from "./chunk-T36EFAW7.js";
 import {
   addMemberSpace,
   fetchAuthoritativeRemoteSpace,
@@ -62,7 +62,7 @@ import {
 } from "./chunk-VF4K2QE6.js";
 import {
   createDocState
-} from "./chunk-TUETDBTI.js";
+} from "./chunk-WTUVMKSQ.js";
 import {
   setDialogExtraReferencesAction
 } from "./chunk-Z7IZQF56.js";
@@ -101,7 +101,7 @@ import {
   updateContentCategory,
   updateContentTitle,
   writeStoredCollapsedCategories
-} from "./chunk-CRGSU5DB.js";
+} from "./chunk-GZQNKKDG.js";
 import {
   getCurrentSpaceId,
   getCurrentSpaceIdRaw,
@@ -123,14 +123,14 @@ import {
   selectMsgById,
   uiAskChoiceFunc,
   uiAskChoiceFunctionSchema
-} from "./chunk-TS5BDIPV.js";
+} from "./chunk-KUPDS66Q.js";
 import {
   createAgent,
   deleteServerSyncedCredential,
   runLlm,
   streamAgentChatTurn,
   updateAgent
-} from "./chunk-TV5ODOAF.js";
+} from "./chunk-MXRUAINC.js";
 import {
   getActiveDialogKey,
   selectCurrentDialogKey,
@@ -183,7 +183,7 @@ import {
 } from "./chunk-F64B2W3R.js";
 import {
   createFileCredentialBroker
-} from "./chunk-ESRMFY7G.js";
+} from "./chunk-L36OWPP3.js";
 import {
   compactWhitespace
 } from "./chunk-DWLEOOGR.js";
@@ -3978,7 +3978,7 @@ async function deleteDialogsFunc(args, thunkApi) {
   const deletedDialogIds = [];
   const deletedDialogKeys = [];
   const failures = [];
-  const { deleteDialog: deleteDialog2 } = await import("./dialogSlice-7IGCUDZE.js");
+  const { deleteDialog: deleteDialog2 } = await import("./dialogSlice-J24APUGG.js");
   for (const target of targets) {
     try {
       await thunkApi.dispatch(deleteDialog2(target.dbKey)).unwrap();
@@ -15043,7 +15043,7 @@ var executeToolRun = createAsyncThunk(
     if (!executionInput) {
       throw new Error(`ToolRun ${id} has no input to execute with.`);
     }
-    const { findToolExecutor: findToolExecutor2 } = await import("./tools-VSECJ5T7.js");
+    const { findToolExecutor: findToolExecutor2 } = await import("./tools-5NAJJTFN.js");
     const { executor } = findToolExecutor2(run.toolName);
     toolRunStarted({
       id: run.id,
@@ -17550,7 +17550,7 @@ async function updateDocFunc(args, thunkApi) {
       updated_at: (/* @__PURE__ */ new Date()).toISOString()
     };
     await dispatch(write({ data: updatedPageData, customKey: id })).unwrap();
-    const { getDocState, applyExternalDocUpdate } = await import("./docStore-OD3NRNBN.js");
+    const { getDocState, applyExternalDocUpdate } = await import("./docStore-SPOGE7K3.js");
     if (getDocState().pageKey === id) {
       applyExternalDocUpdate({
         slateData: finalSlateData,

package/{chunk-TS5BDIPV.js → chunk-KUPDS66Q.js}

@@ -11,7 +11,7 @@ import {
 } from "./chunk-6O4IK4V2.js";
 import {
   runLlm
-} from "./chunk-TV5ODOAF.js";
+} from "./chunk-MXRUAINC.js";
 import {
   cleanupCliSessionForDialog
 } from "./chunk-D76D3RTR.js";
@@ -23937,7 +23937,7 @@ var messageSlice = createSliceWithThunks({
             runtimeOptions: args.runtimeOptions
           });
           if (agentKeyToUse) {
-            const { streamAgentChatTurn } = await import("./agentSlice-EYRJX2J6.js");
+            const { streamAgentChatTurn } = await import("./agentSlice-4AK24F5F.js");
             await dispatch(
               streamAgentChatTurn({
                 agentKey: agentKeyToUse,
@@ -25073,7 +25073,7 @@ var deleteDialogThunk = async (payload, thunkApi) => {
   }
   if (isCurrentDialog) {
     await thunkApi.dispatch(resetMsgs());
-    const { clearPendingAttachments: clearPendingAttachments2 } = await import("./dialogSlice-7IGCUDZE.js");
+    const { clearPendingAttachments: clearPendingAttachments2 } = await import("./dialogSlice-J24APUGG.js");
     dispatch(clearPendingAttachments2());
   }
   return { dialogKey, isCurrentDialog, attachmentPlan };
@@ -25081,15 +25081,15 @@ var deleteDialogThunk = async (payload, thunkApi) => {
 
 // packages/chat/dialog/dialogSlice.ts
 var runCreateDialogAction = async (args, thunkApi) => {
-  const { createDialogAction } = await import("./createDialogAction-2BMDM4X3.js");
+  const { createDialogAction } = await import("./createDialogAction-KTDAEA42.js");
   return createDialogAction(args, thunkApi);
 };
 var runCreateAgentAutomationAction = async (args, thunkApi) => {
-  const { createAgentAutomationAction } = await import("./createAgentAutomationAction-SWO62RE2.js");
+  const { createAgentAutomationAction } = await import("./createAgentAutomationAction-TZVIJTZ7.js");
   return createAgentAutomationAction(args, thunkApi);
 };
 var runUpdateDialogTitleAction = async (args, thunkApi) => {
-  const { updateDialogTitleAction } = await import("./updateDialogTitleAction-WE5KY3SM.js");
+  const { updateDialogTitleAction } = await import("./updateDialogTitleAction-IKZPJCRA.js");
   return updateDialogTitleAction(args, thunkApi);
 };
 var runAddDialogAgentAction = async (args, thunkApi) => {
@@ -25113,7 +25113,7 @@ var runSetDialogExtraReferencesAction = async (args, thunkApi) => {
   return setDialogExtraReferencesAction(args, thunkApi);
 };
 var runHandleSendMessageAction = async (args, thunkApi) => {
-  const { handleSendMessageAction } = await import("./handleSendMessageAction-PRF7JNOH.js");
+  const { handleSendMessageAction } = await import("./handleSendMessageAction-I2IN64DS.js");
   return handleSendMessageAction(args, thunkApi);
 };
 function clearDialogState() {
@@ -25126,7 +25126,7 @@ var createPageAndAddReference = createAsyncThunk(
   async (payload, { dispatch, getState, rejectWithValue }) => {
     const { slateData, jsonData, title, type, fileId, groupId, dialogKey } = payload;
     try {
-      const { createDocState } = await import("./docStore-OD3NRNBN.js");
+      const { createDocState } = await import("./docStore-SPOGE7K3.js");
       const pageKey = await createDocState(
         { slateData, title },
         { dispatch, getState }

package/{chunk-ESRMFY7G.js → chunk-L36OWPP3.js}

@@ -2,7 +2,7 @@ import {
   getCredentialsDir,
   getLegacyCredentialPath,
   migrateLegacyCredentialFile
-} from "./chunk-HNGRBWYF.js";
+} from "./chunk-ZWQUWF6W.js";
 import {
   asNonEmptyStringArray
 } from "./chunk-3AH7LNUB.js";

package/{chunk-X45MLRN4.js → chunk-L6RB42ZR.js}

@@ -3,7 +3,10 @@ import {
 } from "./chunk-U4STABYN.js";
 import {
   clearCliLocalRuntimePreparedAgentCache
-} from "./chunk-SFRMB7XN.js";
+} from "./chunk-ZOI6KA4N.js";
+import {
+  readCredentialAvailability
+} from "./chunk-62IL3KQV.js";
 import {
   getReadableCliDb
 } from "./chunk-CTUQJVQM.js";
@@ -81,8 +84,20 @@ async function runAgentReadCommand(args, deps = {}) {
       fetchImpl
     }) : {};
     const quota = fresh[result.agentKey] ?? recordQuota;
+    const rawRecordObj = result.record;
+    const credAvail = await readCredentialAvailability(env).catch(() => ({}));
+    const credGroup = typeof rawRecordObj?.apiKeyRef === "string" ? rawRecordObj.apiKeyRef : void 0;
+    const credDeadline = credGroup ? credAvail[credGroup] : void 0;
+    const recordDeadline = typeof rawRecordObj?.nextAvailableAt === "number" ? rawRecordObj.nextAvailableAt : void 0;
+    const effectiveNextAvailableAt = Math.max(recordDeadline ?? 0, credDeadline ?? 0) || void 0;
+    const isRateLimited = typeof effectiveNextAvailableAt === "number" && effectiveNextAvailableAt > Date.now();
     output.write(JSON.stringify({
       ...normalizeAgentRecordForOutput(result.agentKey, authToken, result.record),
+      ...isRateLimited ? {
+        rateLimited: true,
+        cooldownRemainingSeconds: Math.ceil((effectiveNextAvailableAt - Date.now()) / 1e3),
+        nextAvailableAt: new Date(effectiveNextAvailableAt).toISOString()
+      } : {},
       ...quota ? { quota } : {},
       source: result.source
     }, null, 2));
@@ -242,7 +257,7 @@ async function runAgentCreateCommand(args, deps = {}) {
     const OAUTH_REFS = /* @__PURE__ */ new Set(["claude", "chatgpt", "xai", "antigravity", "cloudflare"]);
     if (apiKeyRef && OAUTH_REFS.has(apiKeyRef)) {
       try {
-        const { createOAuthTokenStore } = await import("./oauthTokenStore-ITEB663N.js");
+        const { createOAuthTokenStore } = await import("./oauthTokenStore-PADKLNOC.js");
         const store = createOAuthTokenStore();
         if (!store.read(apiKeyRef)) {
           authHint = `Subscription "${apiKeyRef}" is not authorized yet. Run \`nolo auth ${apiKeyRef}\` to log in.`;

package/{chunk-TV5ODOAF.js → chunk-MXRUAINC.js}

@@ -3,7 +3,7 @@ import {
   createFileCredentialBroker,
   migrateAgentSecrets,
   normalizeAgentRuntimeToolPolicy
-} from "./chunk-ESRMFY7G.js";
+} from "./chunk-L36OWPP3.js";
 import {
   asRecordOrEmpty
 } from "./chunk-KX6YBIHG.js";
@@ -304,7 +304,7 @@ var slice = createSliceWithThunks({
       const overrides = {};
       if (args.systemPromptOverride !== void 0) overrides.prompt = args.systemPromptOverride;
       if (args.toolsOverride !== void 0) overrides.tools = args.toolsOverride;
-      const { _executeModel } = await import("./_executeModel-PHFKA2OL.js");
+      const { _executeModel } = await import("./_executeModel-QK43QR2R.js");
       return _executeModel(
         {
           isStreaming: args.isStreaming ?? false,
@@ -325,7 +325,7 @@ var slice = createSliceWithThunks({
      * - 循环直到无工具调用或触发其他运行时停止条件
      */
     runAgent: create.asyncThunk(async (args, thunkApi) => {
-      const { runAgentClientLoop } = await import("./runAgentClientLoop-66UNGCTW.js");
+      const { runAgentClientLoop } = await import("./runAgentClientLoop-CQWLWU4W.js");
       const { content: loopContent, toolCallCount } = await runAgentClientLoop(
         {
           agentKey: args.agentKey,
@@ -341,7 +341,7 @@ var slice = createSliceWithThunks({
      * 聊天轮次流式 Agent 调用
      */
     streamAgentChatTurn: create.asyncThunk(async (args, thunkApi) => {
-      const { streamAgentChatTurnHandler } = await import("./streamAgentChatTurn-6F3M4KUY.js");
+      const { streamAgentChatTurnHandler } = await import("./streamAgentChatTurn-XD5JEJXA.js");
       return streamAgentChatTurnHandler(args, thunkApi);
     }),
     /**

package/{chunk-6YT7I7KF.js → chunk-OUOJE2P2.js}

@@ -5,7 +5,7 @@ import {
   inlineImageUrlsForCustomProvider,
   prepareTools,
   shouldInlineImageUrlsForAgent
-} from "./chunk-SUFNELDG.js";
+} from "./chunk-44F6KKUE.js";
 import {
   parseApiError
 } from "./chunk-OCZKATRC.js";
@@ -15,7 +15,7 @@ import {
   parseToolCallArguments,
   performFetchRequest,
   sanitizeOutboundMessages
-} from "./chunk-DT7WS4NV.js";
+} from "./chunk-DID5AVGT.js";
 import {
   createToolRunId,
   findToolExecutor,
@@ -25,7 +25,7 @@ import {
   toolRunSetPending,
   toolRunStarted,
   toolRunSucceeded
-} from "./chunk-MPRDXX4T.js";
+} from "./chunk-K25DK52L.js";
 import {
   createSSEParser
 } from "./chunk-GOMR6S5Z.js";
@@ -37,10 +37,10 @@ import {
   messageStreamEnd,
   messageStreaming,
   updateToolMessage
-} from "./chunk-TS5BDIPV.js";
+} from "./chunk-KUPDS66Q.js";
 import {
   streamAgentChatTurn
-} from "./chunk-TV5ODOAF.js";
+} from "./chunk-MXRUAINC.js";
 import {
   addActiveController,
   removeActiveController,

package/{chunk-W5UYXCQE.js → chunk-QDT5T7MK.js}

@@ -17,7 +17,11 @@ import {
 } from "./chunk-HNMXYYJR.js";
 import {
   writeOAuthCredential
-} from "./chunk-HNGRBWYF.js";
+} from "./chunk-ZWQUWF6W.js";
+import {
+  buildEnvFromProfile,
+  loadProfileConfig
+} from "./chunk-TNIX77YM.js";
 import {
   asOptionalFiniteNumber
 } from "./chunk-WWC7I6TA.js";
@@ -840,6 +844,30 @@ var refreshOpenAiCodexToken2 = async (credential, deps = {}) => {
   });
 };
 
+// packages/cli/oauth/serverSyncConfig.ts
+function resolveServerSyncConfig() {
+  const envServer = process.env.NOLO_SERVER?.trim() || process.env.NOLO_SERVER_URL?.trim() || process.env.BASE_URL?.trim() || "";
+  const envToken = process.env.AUTH_TOKEN?.trim() || process.env.NOLO_AUTH_TOKEN?.trim() || "";
+  if (envServer && envToken) {
+    return { serverOrigin: envServer.replace(/\/+$/, ""), authToken: envToken };
+  }
+  let profileServer = "";
+  let profileToken = "";
+  try {
+    const config = loadProfileConfig();
+    const profileEnv = buildEnvFromProfile(config);
+    profileServer = profileEnv.NOLO_SERVER?.trim() || "";
+    profileToken = profileEnv.AUTH_TOKEN?.trim() || "";
+  } catch {
+  }
+  const serverOrigin = (envServer || profileServer).replace(/\/+$/, "");
+  const authToken = envToken || profileToken;
+  if (serverOrigin && authToken) {
+    return { serverOrigin, authToken };
+  }
+  return null;
+}
+
 // packages/agent-runtime/xaiOAuth.ts
 var XAI_OAUTH_ISSUER = "https://auth.x.ai";
 var XAI_OAUTH_DISCOVERY_URL = `${XAI_OAUTH_ISSUER}/.well-known/openid-configuration`;
@@ -1260,5 +1288,6 @@ export {
   CURSOR_POLL_MAX_CONSECUTIVE_ERRORS,
   CURSOR_ACCESS_TOKEN_CLIENT_SKEW_MS,
   decodeJwtExp,
-  cursorRefresh
+  cursorRefresh,
+  resolveServerSyncConfig
 };

package/{chunk-A3JENOEB.js → chunk-T36EFAW7.js}

@@ -1,11 +1,11 @@
 import {
   addContentToSpace
-} from "./chunk-CRGSU5DB.js";
+} from "./chunk-GZQNKKDG.js";
 import {
   prepareAndPersistMessage,
   uiAskChoiceFunc,
   uiAskChoiceFunctionSchema
-} from "./chunk-TS5BDIPV.js";
+} from "./chunk-KUPDS66Q.js";
 import {
   require_date_fns
 } from "./chunk-M76ECQRD.js";