nolo-cli 0.144.0-alpha.1 → 0.145.0-alpha.1

package/{chunk-QMJG7UFL.js → chunk-RHDOQWXZ.js}

@@ -11,7 +11,7 @@ import {
   flushChatCompletionStream,
   providerHttpFailure,
   throwIfChatCompletionStreamFailed
-} from "./chunk-YFIUVDQY.js";
+} from "./chunk-A6FNUMCF.js";
 import {
   readSseFrames
 } from "./chunk-GMZLP5DV.js";
@@ -53,7 +53,7 @@ import {
   requiresBareImageUrl,
   resolveToolGuidedSections,
   toBareImageUrlMessages
-} from "./chunk-AQTJUKN6.js";
+} from "./chunk-JLQKV2ZJ.js";
 import {
   convertMessagesToResponsesInput,
   extractReasoningFromResponseOutput,
@@ -13195,6 +13195,93 @@ function evaluateFileWritePolicy(args2) {
   };
 }
 
+// packages/agent-runtime/toolArgsTruncationPolicy.ts
+import { createHash as createHash2 } from "node:crypto";
+var TRUNCATION_TAIL_DROP_ALLOWED_TOOLS = /* @__PURE__ */ new Set([
+  "ask_user"
+]);
+function isTailDropRepairAllowed(toolName) {
+  return typeof toolName === "string" && TRUNCATION_TAIL_DROP_ALLOWED_TOOLS.has(toolName);
+}
+function scanTruncation(input) {
+  const stack = [];
+  const commaAtDepth = [];
+  let inString = false;
+  let escaped = false;
+  const closersOf = () => stack.slice().reverse().map((ch) => ch === "{" ? "}" : "]").join("");
+  for (let i = 0; i < input.length; i += 1) {
+    const ch = input[i];
+    if (inString) {
+      if (escaped) escaped = false;
+      else if (ch === "\\") escaped = true;
+      else if (ch === '"') inString = false;
+      continue;
+    }
+    if (ch === '"') {
+      inString = true;
+    } else if (ch === "{" || ch === "[") {
+      stack.push(ch);
+      commaAtDepth[stack.length] = void 0;
+    } else if (ch === "}" || ch === "]") {
+      const open = stack.pop();
+      if (open !== (ch === "}" ? "{" : "[")) {
+        return { inString, malformed: true, tailArrayComma: null };
+      }
+      commaAtDepth[stack.length + 1] = void 0;
+    } else if (ch === "," && stack[stack.length - 1] === "[") {
+      commaAtDepth[stack.length] = { index: i, closers: closersOf() };
+    }
+  }
+  let tailArrayComma = null;
+  for (let d = stack.length; d >= 1; d -= 1) {
+    const c = commaAtDepth[d];
+    if (c && stack[d - 1] === "[") {
+      tailArrayComma = c;
+      break;
+    }
+  }
+  return { inString, malformed: false, tailArrayComma };
+}
+function repairTruncatedToolArgumentsDroppingTail(toolName, raw) {
+  if (!isTailDropRepairAllowed(toolName)) return null;
+  if (typeof raw !== "string") return null;
+  const scan2 = scanTruncation(raw);
+  if (scan2.malformed || !scan2.tailArrayComma) return null;
+  const { index, closers } = scan2.tailArrayComma;
+  const head3 = raw.slice(0, index).replace(/\s+$/, "");
+  if (head3 === "") return null;
+  const candidate = head3 + closers;
+  try {
+    const parsed = JSON.parse(candidate);
+    if (parsed !== null && typeof parsed === "object" && !Array.isArray(parsed) && Object.keys(parsed).length > 0) {
+      return { repaired: candidate, droppedChars: raw.length - index };
+    }
+  } catch {
+  }
+  return null;
+}
+var TOOL_ARGS_DEBUG_ENV = "NOLO_CLI_DEBUG_TOOL_ARGS";
+var DEBUG_TAIL_MAX = 200;
+function buildToolArgsDiagnosticLine(args2) {
+  const { toolName, raw, outcome, context: context3 } = args2;
+  const env = args2.env ?? process.env;
+  const scan2 = scanTruncation(raw);
+  const sha = createHash2("sha256").update(raw).digest("hex").slice(0, 12);
+  const parts2 = [
+    `[tool-args-diag] ${toolName} ${outcome}`,
+    `len=${raw.length}`,
+    `sha256=${sha}`,
+    `inString=${scan2.inString}`,
+    `provider=${context3?.provider ?? "unknown"}`,
+    `model=${context3?.model ?? "unknown"}`,
+    `finish_reason=${context3?.finishReason ?? "unknown"}`
+  ];
+  if (env[TOOL_ARGS_DEBUG_ENV] === "1") {
+    parts2.push(`tail=${JSON.stringify(raw.slice(-DEBUG_TAIL_MAX))}`);
+  }
+  return parts2.join(" ");
+}
+
 // packages/agent-runtime/parseToolArguments.ts
 function parseToolArgumentsJson(raw) {
   if (!raw?.trim()) return {};
@@ -13827,7 +13914,7 @@ async function evaluateCapabilityPolicy(capability, normalizedInput, ctx) {
 
 // packages/agent-runtime/localWorkspaceTools.ts
 import { existsSync as existsSync3 } from "node:fs";
-import { createHash as createHash2 } from "node:crypto";
+import { createHash as createHash3 } from "node:crypto";
 import { lstat, mkdir, readdir as readdir2, readFile as readFile3, realpath, stat as stat3, writeFile } from "node:fs/promises";
 import { homedir } from "node:os";
 import { dirname, isAbsolute as isAbsolute2, relative as relative3, resolve as resolve4, sep } from "node:path";
@@ -16812,7 +16899,7 @@ async function readFileTool(args2) {
   const force = parsed.force === true;
   const ledger = args2.readLedger;
   const requestRange = { startLine: sliced.startLine, endLine: sliced.endLine };
-  const fingerprint = createHash2("sha1").update(content).digest("hex").slice(0, 20);
+  const fingerprint = createHash3("sha1").update(content).digest("hex").slice(0, 20);
   let entry = ledger?.get(relativePath);
   if (entry && entry.fingerprint !== fingerprint) {
     entry = void 0;
@@ -18156,6 +18243,7 @@ async function executeToolCall(args2) {
   const toolName = toolCall.function.name;
   let toolResult;
   let toolExecMs;
+  let tailDropNotice;
   const startedAt = Date.now();
   loopTiming.mark("toolCallStart", round);
   const argumentsPreview = summarizeToolArguments(toolName, toolCall.function.arguments);
@@ -18181,6 +18269,7 @@ async function executeToolCall(args2) {
   );
   try {
     const rawPoisonArguments = toolCall.function?.arguments;
+    let tailDrop = null;
     if (typeof rawPoisonArguments === "string" && rawPoisonArguments.trim() !== "" && !hasParsableObjectArguments(rawPoisonArguments)) {
       const repairedArguments = repairTruncatedToolArguments(rawPoisonArguments);
       if (repairedArguments) {
@@ -18188,7 +18277,36 @@ async function executeToolCall(args2) {
           `[tool-args-repair] ${toolName}: \u8865\u5168\u88AB\u622A\u65AD\u7684 arguments\uFF08${rawPoisonArguments.length} \u2192 ${repairedArguments.length} \u5B57\u7B26\uFF0C\u5185\u5BB9\u96F6\u635F\u5931\uFF09`
         );
         toolCall.function.arguments = repairedArguments;
+      } else if (
+        // 有损降级（仅白名单交互类工具，如 ask_user；写/破坏类一律不进）：
+        // 截断落在字符串内、只能丢弃未闭合的尾部数组元素时，保留完整前缀成员。
+        tailDrop = repairTruncatedToolArgumentsDroppingTail(
+          toolName,
+          rawPoisonArguments
+        )
+      ) {
+        console.warn(
+          buildToolArgsDiagnosticLine({
+            toolName,
+            raw: rawPoisonArguments,
+            outcome: "tail-dropped",
+            context: args2.diagnosticContext
+          })
+        );
+        console.log(
+          `[tool-args-repair] ${toolName}: arguments \u88AB\u622A\u65AD\uFF0C\u5DF2\u4E22\u5F03\u672A\u95ED\u5408\u7684\u5C3E\u90E8\u6210\u5458\uFF08${rawPoisonArguments.length} \u2192 ${tailDrop.repaired.length} \u5B57\u7B26\uFF0C\u4E22\u5F03 ${tailDrop.droppedChars} \u5B57\u7B26\uFF09`
+        );
+        toolCall.function.arguments = tailDrop.repaired;
+        tailDropNotice = `[tool-args-repair] \u4E0A\u6E38\u622A\u65AD\u4E86 ${toolName} \u7684\u53C2\u6570\uFF0C\u6700\u540E\u4E00\u4E2A\u672A\u95ED\u5408\u7684\u6210\u5458\uFF08\u5982\u6700\u540E\u4E00\u4E2A\u9009\u9879\uFF09\u5DF2\u88AB\u4E22\u5F03\uFF0C\u5176\u4F59\u6210\u5458\u539F\u6837\u4FDD\u7559\uFF1B\u82E5\u7F3A\u5C11\u9884\u671F\u5185\u5BB9\uFF0C\u8BF7\u636E\u6B64\u91CD\u65B0\u8C03\u7528\u3002`;
       } else {
+        console.warn(
+          buildToolArgsDiagnosticLine({
+            toolName,
+            raw: rawPoisonArguments,
+            outcome: "rejected",
+            context: args2.diagnosticContext
+          })
+        );
         throw new Error(
           `\u6A21\u578B\u751F\u6210\u7684 tool_call arguments \u4E0D\u662F\u5408\u6CD5 JSON\uFF08\u7591\u4F3C\u4E0A\u6E38\u6D41\u5F0F\u622A\u65AD\uFF0C\u539F\u59CB\u957F\u5EA6 ${rawPoisonArguments.length}\uFF09\u3002\u8BF7\u91CD\u65B0\u5B8C\u6574\u8C03\u7528 ${toolName}\uFF0C\u786E\u4FDD arguments \u662F\u95ED\u5408\u7684 JSON \u5BF9\u8C61\uFF1B\u82E5\u56E0\u53C2\u6570\u8FC7\u957F\u88AB\u622A\u65AD\uFF0C\u5148\u7CBE\u7B80\u53C2\u6570\uFF08\u4E0D\u8981\u5185\u5D4C diff/\u65E5\u5FD7\u7B49\u5927\u6BB5\u6587\u672C\uFF0C\u6539\u4F20\u8DEF\u5F84\u8BA9\u5BF9\u65B9\u81EA\u884C\u8BFB\u53D6\uFF09\u518D\u91CD\u8BD5\u3002`
         );
@@ -18256,6 +18374,14 @@ async function executeToolCall(args2) {
       toolResult = await runAbortableToolTask(input, executePromise, toolName);
       toolExecMs = Date.now() - execStartedAtMs;
     }
+    if (tailDropNotice) {
+      toolResult = {
+        ...toolResult,
+        content: typeof toolResult.content === "string" ? `${tailDropNotice}
+${toolResult.content}` : toolResult.content,
+        metadata: { ...toolResult.metadata, argsTailDropped: true }
+      };
+    }
     const actionGate = buildActionGate({
       toolName,
       toolCallId: toolCall.id,
@@ -18477,7 +18603,7 @@ var normalizeContextBlockScopes = (legacyBlocks = void 0, scopes = void 0) => {
 };
 
 // packages/agent-runtime/localAutoCompaction.ts
-import { createHash as createHash3 } from "node:crypto";
+import { createHash as createHash4 } from "node:crypto";
 function toPlanCompressionMessages(history) {
   return history.map((message, index) => ({
     id: `local-${index}`,
@@ -18492,7 +18618,7 @@ function hashSummarySourceSlice(history, summarizedBeforeId) {
   const found = bridged.findIndex((m) => m.id === summarizedBeforeId);
   if (found === -1) return void 0;
   const slice = bridged.slice(0, found + 1);
-  return createHash3("sha256").update(JSON.stringify(slice)).digest("hex");
+  return createHash4("sha256").update(JSON.stringify(slice)).digest("hex");
 }
 function validateStoredSummary(args2) {
   const { history, stored } = args2;
@@ -19535,7 +19661,12 @@ ${reasoningTailLog}
             boundary: observationBoundary,
             loopTiming,
             userInputText,
-            runToolNames: agentConfig.runScopedToolSurface?.finalToolNames
+            runToolNames: agentConfig.runScopedToolSurface?.finalToolNames,
+            diagnosticContext: {
+              ...agentConfig.provider ? { provider: String(agentConfig.provider) } : {},
+              ...agentConfig.model ? { model: String(agentConfig.model) } : {},
+              ...result4.finish_reason ? { finishReason: result4.finish_reason } : {}
+            }
           });
           const observedMetadata = toolExecMs === void 0 ? toolResult.metadata : { ...toolResult.metadata ?? {}, [TOOL_DURATION_METADATA_KEY]: toolExecMs };
           executedToolResults.push({
@@ -19778,8 +19909,31 @@ function createResponsesStreamCollector(callbacks) {
   };
   const finalize2 = () => {
     let finalToolCalls = finalizeResponsesToolCalls(toolCallsAcc);
-    if (finalToolCalls.length === 0 && completedResponse) {
-      finalToolCalls = extractToolCallsFromResponseOutput(completedResponse);
+    if (completedResponse) {
+      const completedToolCalls = extractToolCallsFromResponseOutput(completedResponse);
+      const completedById = new Map(completedToolCalls.map((call) => [call.id, call]));
+      finalToolCalls = finalToolCalls.map((call) => {
+        const completed = completedById.get(call.id);
+        if (!completed) return call;
+        let accumulatedParses = false;
+        let completedParses = false;
+        try {
+          JSON.parse(call.function.arguments);
+          accumulatedParses = true;
+        } catch {
+        }
+        try {
+          JSON.parse(completed.function.arguments);
+          completedParses = true;
+        } catch {
+          return call;
+        }
+        if (completedParses && (!accumulatedParses || completed.function.arguments.startsWith(call.function.arguments))) {
+          return { ...call, function: { ...call.function, arguments: completed.function.arguments } };
+        }
+        return call;
+      });
+      if (finalToolCalls.length === 0) finalToolCalls = completedToolCalls;
     }
     if (!content && completedResponse) {
       content = extractTextFromResponseOutput(completedResponse);
@@ -20790,7 +20944,7 @@ function buildLoadSkillExecutor(args2) {
     const { resolveSkillByName } = await import("./skillDiscovery-CYUCJMAG.js");
     const resolved = resolveSkillByName(args2.cwd, name);
     if (!resolved) {
-      const { resolveBuiltinSkillByName } = await import("./builtinSkillRegistry-HRI7DXC2.js");
+      const { resolveBuiltinSkillByName } = await import("./builtinSkillRegistry-ZMF6YGNO.js");
       const builtin = resolveBuiltinSkillByName(name);
       if (builtin) {
         return {

package/{chunk-6Z5V5T6Q.js → chunk-UMB7CHAY.js}

@@ -304,7 +304,7 @@ var slice = createSliceWithThunks({
       const overrides = {};
       if (args.systemPromptOverride !== void 0) overrides.prompt = args.systemPromptOverride;
       if (args.toolsOverride !== void 0) overrides.tools = args.toolsOverride;
-      const { _executeModel } = await import("./_executeModel-VA7AOJ7I.js");
+      const { _executeModel } = await import("./_executeModel-M3FASQ2Z.js");
       return _executeModel(
         {
           isStreaming: args.isStreaming ?? false,
@@ -325,7 +325,7 @@ var slice = createSliceWithThunks({
      * - 循环直到无工具调用或触发其他运行时停止条件
      */
     runAgent: create.asyncThunk(async (args, thunkApi) => {
-      const { runAgentClientLoop } = await import("./runAgentClientLoop-AXFKKSVY.js");
+      const { runAgentClientLoop } = await import("./runAgentClientLoop-KAYGKVTK.js");
       const { content: loopContent, toolCallCount } = await runAgentClientLoop(
         {
           agentKey: args.agentKey,
@@ -341,7 +341,7 @@ var slice = createSliceWithThunks({
      * 聊天轮次流式 Agent 调用
      */
     streamAgentChatTurn: create.asyncThunk(async (args, thunkApi) => {
-      const { streamAgentChatTurnHandler } = await import("./streamAgentChatTurn-RG7NWZWY.js");
+      const { streamAgentChatTurnHandler } = await import("./streamAgentChatTurn-DFNDU2UY.js");
       return streamAgentChatTurnHandler(args, thunkApi);
     }),
     /**

package/{chunk-XPV3S4HP.js → chunk-VJ4FUWPC.js}

@@ -1,13 +1,13 @@
 import {
   createCliLocalRuntimeAdapter,
   summarizeEndpoint
-} from "./chunk-3T6MH737.js";
+} from "./chunk-M76SRQ3H.js";
 import {
   clipMultilineText
-} from "./chunk-L55HWODG.js";
+} from "./chunk-OKSJZ4UU.js";
 import {
   runLocalAgentTurn
-} from "./chunk-QMJG7UFL.js";
+} from "./chunk-RHDOQWXZ.js";
 import {
   applyToolSurfaceConstraints
 } from "./chunk-RGNEEJ3Y.js";

package/{chunk-2KHRSBYS.js → chunk-VZVTPDPL.js}

@@ -1,17 +1,17 @@
 import {
   addContentToSpace
-} from "./chunk-6YSYZTKW.js";
+} from "./chunk-HKBFZONG.js";
 import {
   prepareAndPersistMessage,
   uiAskChoiceFunc,
   uiAskChoiceFunctionSchema
-} from "./chunk-EP34KKT6.js";
+} from "./chunk-ANX7Z7Z2.js";
 import {
   require_date_fns
 } from "./chunk-M76ECQRD.js";
 import {
   buildBuiltinObjectSkillReference
-} from "./chunk-EMBK4B7D.js";
+} from "./chunk-6TPOEJMQ.js";
 import {
   PLATFORM_HOSTED_DEEPSEEK_FLASH_MODEL,
   PLATFORM_HOSTED_KIMI_PROVIDER

package/{chunk-XGO2LIJZ.js → chunk-XNXNHAAP.js}

@@ -1,7 +1,7 @@
 import {
   fetchReferenceContents,
   resolveReferenceAssets
-} from "./chunk-LQNRUDVN.js";
+} from "./chunk-2TKVOEQF.js";
 
 // packages/ai/agent/fetchAgentContexts.ts
 async function fetchAgentContexts(references, dispatch) {

package/{chunk-TIPZHRUE.js → chunk-Y6XHJ4JJ.js}

@@ -28,7 +28,7 @@ import {
   t,
   toolLabel,
   toolLabelVariants
-} from "./chunk-3T6MH737.js";
+} from "./chunk-M76SRQ3H.js";
 import {
   clearCredentialAvailability,
   readCredentialEntry,
@@ -75,7 +75,7 @@ import {
 } from "./chunk-LTRXGFMS.js";
 import {
   formatAgentListCard
-} from "./chunk-L55HWODG.js";
+} from "./chunk-OKSJZ4UU.js";
 import {
   isTransientFetchError
 } from "./chunk-5UTFL4QJ.js";
@@ -96,11 +96,11 @@ import {
   chooseMemoryOwners,
   loadMemoryCandidatesFromDb,
   resolveAgentMemoryPolicy
-} from "./chunk-2KHRSBYS.js";
+} from "./chunk-VZVTPDPL.js";
 import {
   API_REPORTED_COST_MULTIPLIER,
   parseUiAskChoiceContent
-} from "./chunk-EP34KKT6.js";
+} from "./chunk-ANX7Z7Z2.js";
 import {
   isOAuthApiKeyRef
 } from "./chunk-YYLHWIW6.js";
@@ -115,7 +115,7 @@ import {
   LOCAL_AGENT_CONFIG_MISSING_CODE,
   LOCAL_TURN_ABORTED_CODE,
   readActionGate
-} from "./chunk-QMJG7UFL.js";
+} from "./chunk-RHDOQWXZ.js";
 import {
   resolveAgentRuntimeConfigFromRecord
 } from "./chunk-I4A26N52.js";
@@ -10739,7 +10739,7 @@ function findCollapsedPasteSpanAt(buffer, pos, opts = {}) {
 // packages/cli/client/agentRun.ts
 import { ulid as ulid2 } from "ulid";
 async function loadRunLocalAgentTurn() {
-  const { runLocalAgentTurn } = await import("./agentRuntimeLocal-3FUYPU7E.js");
+  const { runLocalAgentTurn } = await import("./agentRuntimeLocal-DAK7RCER.js");
   return runLocalAgentTurn;
 }
 var stripDebugNoise = (s) => s.replace(/\s*raw="[\s\S]*"/g, "").replace(/\s*raw=\S+/g, "").replace(/\s*headers=\[[^\]]*\]/g, "").replace(/\s*headers=\S+/g, "").trim();
@@ -11065,7 +11065,19 @@ var NO_FALLBACK = "Not falling back to server.";
 var SERVER_FALLBACK_HINT = "or use --server to run on the server explicitly.";
 function buildAuthFailure(ctx) {
   const platformNoToken = ctx.where === "server chat proxy" && isAuthNoTokenBody(ctx.message);
-  const fix = platformNoToken ? `This install is not logged in \u2014 run \`nolo login\`, or set AUTH_TOKEN / NOLO_SERVER` : ctx.where === "server chat proxy" ? `Check the agent's provider/api-key settings on nolo.chat` : `Fix the local credential/config and retry`;
+  if (platformNoToken) {
+    const guidance = `
+  This turn did not run: you are not logged in to Nolo and no local model credential is available.
+    \xB7 Use the Nolo platform: /login (or run \`nolo login\` after exiting the TUI)
+    \xB7 Use your own subscription: nolo auth antigravity | claude | chatgpt | xai
+    \xB7 No login at all: nolo run "<task>" (runs on local Codex)`;
+    const detail = process.env.NOLO_DEBUG === "1" || process.env.NOLO_CLI_DEBUG_DETAIL === "1" ? `
+  Detail: ${ctx.message}` : `
+  Detail: platform returned AUTH_NO_TOKEN (no authentication token provided)`;
+    return `${RUN_UNAVAILABLE_PREFIX} (${ctx.where} returned HTTP ${ctx.status}, no token was sent).${guidance}${detail} ${NO_FALLBACK} ${SERVER_FALLBACK_HINT}
+`;
+  }
+  const fix = ctx.where === "server chat proxy" ? `Check the agent's provider/api-key settings on nolo.chat` : `Fix the local credential/config and retry`;
   const { url: validationUrl, text: validationText } = extractGoogleValidationLink(ctx.message);
   const validationLabel = validationText || "Verify your account";
   if (validationUrl) {