nolo-cli 0.149.0-alpha.1 → 0.151.0-alpha.2

package/{chunk-L36OWPP3.js → chunk-LIQJTQRN.js}

@@ -1,11 +1,10 @@
 import {
-  getCredentialsDir,
-  getLegacyCredentialPath,
-  migrateLegacyCredentialFile
-} from "./chunk-ZWQUWF6W.js";
+  asNonEmptyStringArray,
+  asTrimmedNonEmptyStringArray
+} from "./chunk-I42VC5KR.js";
 import {
-  asNonEmptyStringArray
-} from "./chunk-3AH7LNUB.js";
+  asOptionalPositiveFiniteNumber
+} from "./chunk-U6VC4MU4.js";
 import {
   isRecord
 } from "./chunk-KUG52IAP.js";
@@ -13,136 +12,8 @@ import {
   asTrimmedString
 } from "./chunk-3EUW3WEO.js";
 import {
-  asOptionalPositiveFiniteNumber
-} from "./chunk-U6VC4MU4.js";
-
-// packages/agent-runtime/fileCredentialBroker.ts
-import {
-  chmodSync,
-  existsSync,
-  mkdirSync,
-  readFileSync,
-  unlinkSync,
-  writeFileSync
-} from "node:fs";
-import { homedir } from "node:os";
-import { join } from "node:path";
-
-// packages/agent-runtime/credentialBroker.ts
-function assertCredentialRef(ref) {
-  const trimmed = asTrimmedString(ref);
-  if (!trimmed) {
-    throw new Error("invalid_ref");
-  }
-  if (trimmed.includes("..") || trimmed.includes("/") || trimmed.includes("\\")) {
-    throw new Error("invalid_ref");
-  }
-  return trimmed;
-}
-
-// packages/agent-runtime/fileCredentialBroker.ts
-function getApiKeyCredentialsDir(homeDir) {
-  return join(getCredentialsDir(homeDir), "keys");
-}
-function credentialRefToFileName(ref) {
-  const safe = assertCredentialRef(ref).replace(/[^a-zA-Z0-9._-]+/g, "_");
-  if (!safe || safe === "." || safe === "..") {
-    throw new Error(`Credential ref is not filesystem-safe: ${ref}`);
-  }
-  return `${safe}.json`;
-}
-function getApiKeyCredentialPath(ref, homeDir) {
-  return join(getApiKeyCredentialsDir(homeDir), credentialRefToFileName(ref));
-}
-function ensurePrivateDir(dir) {
-  mkdirSync(dir, { recursive: true, mode: 448 });
-  try {
-    chmodSync(dir, 448);
-  } catch {
-  }
-}
-function writePrivateFile(path, body) {
-  writeFileSync(path, body, { encoding: "utf8", mode: 384 });
-  try {
-    chmodSync(path, 384);
-  } catch {
-  }
-}
-function migrateApiKeyCredentialIfNeeded(ref, homeDir, migration) {
-  if (homeDir !== void 0 || !migration?.enableLegacyMigration) return;
-  const legacyHomeDir = migration.legacyHomeDir ?? homedir();
-  const relativePath = join("keys", credentialRefToFileName(ref));
-  migrateLegacyCredentialFile({
-    canonicalPath: getApiKeyCredentialPath(ref),
-    legacyPath: getLegacyCredentialPath(relativePath, legacyHomeDir),
-    mode: migration.mode ?? (migration.legacyHomeDir ? "test" : "production"),
-    isValid: (raw) => {
-      try {
-        const parsed = JSON.parse(raw);
-        return typeof parsed?.secret === "string" && Boolean(parsed.secret);
-      } catch {
-        return false;
-      }
-    }
-  });
-}
-function readApiKeyCredential(ref, homeDir, migration) {
-  migrateApiKeyCredentialIfNeeded(ref, homeDir, migration);
-  const path = getApiKeyCredentialPath(ref, homeDir);
-  if (!existsSync(path)) return null;
-  try {
-    const raw = readFileSync(path, "utf8");
-    const parsed = JSON.parse(raw);
-    if (typeof parsed?.secret !== "string" || !parsed.secret) return null;
-    return parsed.secret;
-  } catch {
-    return null;
-  }
-}
-function writeApiKeyCredential(ref, secret, homeDir, now = Date.now()) {
-  const trimmedSecret = secret.trim();
-  if (!trimmedSecret) {
-    throw new Error("Cannot store an empty credential secret.");
-  }
-  assertCredentialRef(ref);
-  const dir = getApiKeyCredentialsDir(homeDir);
-  ensurePrivateDir(dir);
-  const path = getApiKeyCredentialPath(ref, homeDir);
-  const payload = {
-    secret: trimmedSecret,
-    updatedAt: now
-  };
-  writePrivateFile(path, `${JSON.stringify(payload, null, 2)}
-`);
-}
-function removeApiKeyCredential(ref, homeDir) {
-  assertCredentialRef(ref);
-  const path = getApiKeyCredentialPath(ref, homeDir);
-  if (!existsSync(path)) return;
-  unlinkSync(path);
-}
-function hasApiKeyCredential(ref, homeDir, migration) {
-  return readApiKeyCredential(ref, homeDir, migration) !== null;
-}
-function createFileCredentialBroker(options = {}) {
-  const homeDir = options.homeDir;
-  const migration = options.migration;
-  const now = options.now ?? Date.now;
-  return {
-    get(ref) {
-      return readApiKeyCredential(ref, homeDir, migration);
-    },
-    put(ref, secret) {
-      writeApiKeyCredential(ref, secret, homeDir, now());
-    },
-    delete(ref) {
-      removeApiKeyCredential(ref, homeDir);
-    },
-    has(ref) {
-      return hasApiKeyCredential(ref, homeDir, migration);
-    }
-  };
-}
+  asOptionalTrimmedString
+} from "./chunk-G3SUCT4W.js";
 
 // packages/agent-runtime/migrateAgentSecrets.ts
 function buildAgentApiKeyCredentialRef(agentKey) {
@@ -255,13 +126,51 @@ function applyAgentSecretMigrationUpdates(record, updates) {
 function unique(values) {
   return [...new Set(values)];
 }
+function mergeRecords(base, override) {
+  if (!base && !override) return void 0;
+  return {
+    ...base ?? {},
+    ...override ?? {}
+  };
+}
+function normalizeWorkspacePolicy(value) {
+  if (!isRecord(value)) return void 0;
+  const mode = value.mode === "none" || value.mode === "current" || value.mode === "lease" ? value.mode : void 0;
+  const readableRoots = unique(asNonEmptyStringArray(value.readableRoots));
+  const writableRoots = unique(asNonEmptyStringArray(value.writableRoots));
+  const cwd = asOptionalTrimmedString(value.cwd);
+  const normalized = {
+    ...mode ? { mode } : {},
+    ...readableRoots.length ? { readableRoots } : {},
+    ...writableRoots.length ? { writableRoots } : {},
+    ...cwd ? { cwd } : {}
+  };
+  return Object.keys(normalized).length > 0 ? normalized : void 0;
+}
+function mergeWorkspacePolicy(base, override) {
+  const readableRoots = unique([
+    ...base?.readableRoots ?? [],
+    ...override?.readableRoots ?? []
+  ]);
+  const writableRoots = unique([
+    ...base?.writableRoots ?? [],
+    ...override?.writableRoots ?? []
+  ]);
+  return {
+    ...base ?? {},
+    ...override ?? {},
+    ...readableRoots.length ? { readableRoots } : {},
+    ...writableRoots.length ? { writableRoots } : {}
+  };
+}
 function normalizeAgentRuntimeToolPolicy(value) {
   if (!isRecord(value)) return void 0;
+  const workspace = normalizeWorkspacePolicy(value.workspace);
   return {
     version: 1,
     ...asNonEmptyStringArray(value.agentTools).length ? { agentTools: unique(asNonEmptyStringArray(value.agentTools)) } : {},
     ...asNonEmptyStringArray(value.runtimeTools).length ? { runtimeTools: unique(asNonEmptyStringArray(value.runtimeTools)) } : {},
-    ...isRecord(value.workspace) ? { workspace: { ...value.workspace } } : {},
+    ...workspace ? { workspace } : {},
     ...isRecord(value.shell) ? { shell: { ...value.shell } } : {},
     ...isRecord(value.isolation) ? { isolation: { ...value.isolation } } : {},
     ...isRecord(value.git) ? { git: { ...value.git } } : {},
@@ -269,6 +178,21 @@ function normalizeAgentRuntimeToolPolicy(value) {
     ...isRecord(value.audit) ? { audit: { ...value.audit } } : {}
   };
 }
+function normalizeRuntimeToolPolicyOverride(value) {
+  if (!isRecord(value)) return void 0;
+  const runtimeTools = unique(
+    asTrimmedNonEmptyStringArray(value.runtimeTools).filter(
+      (tool) => tool === "execShell"
+    )
+  );
+  const workspace = isRecord(value.workspace) && value.workspace.mode === "lease" ? { mode: "lease" } : void 0;
+  if (!runtimeTools.length && !workspace) return void 0;
+  return {
+    version: 1,
+    ...runtimeTools.length ? { runtimeTools } : {},
+    ...workspace ? { workspace } : {}
+  };
+}
 function runtimeBindingRecord(runtimeBinding) {
   return isRecord(runtimeBinding) ? runtimeBinding : void 0;
 }
@@ -278,6 +202,26 @@ function runtimeToolNamesFromPolicy(policy) {
 function readPositiveNumber(value) {
   return asOptionalPositiveFiniteNumber(Number(value));
 }
+function mergeAgentRuntimeToolPolicies(base, override) {
+  if (!base && !override) return void 0;
+  return {
+    version: 1,
+    agentTools: unique([
+      ...base?.agentTools ?? [],
+      ...override?.agentTools ?? []
+    ]),
+    runtimeTools: unique([
+      ...base?.runtimeTools ?? [],
+      ...override?.runtimeTools ?? []
+    ]),
+    workspace: mergeWorkspacePolicy(base?.workspace, override?.workspace),
+    shell: mergeRecords(base?.shell, override?.shell),
+    isolation: mergeRecords(base?.isolation, override?.isolation),
+    git: mergeRecords(base?.git, override?.git),
+    budget: mergeRecords(base?.budget, override?.budget),
+    audit: mergeRecords(base?.audit, override?.audit)
+  };
+}
 function resolveRequestedRuntimeToolNames(args) {
   const runtimeBinding = runtimeBindingRecord(args.agentConfig.runtimeBinding);
   const bindingPolicy = normalizeAgentRuntimeToolPolicy(
@@ -310,14 +254,49 @@ function resolveLocalWorkspaceExecutorOptionsFromPolicy(policy) {
     ...maxOutputBytes ? { commandOutputLimit: Math.floor(maxOutputBytes) } : {}
   };
 }
+function policyRequestsHostedWorkspace(policy) {
+  if (!policy) return false;
+  const workspaceMode = policy.workspace?.mode;
+  return policy.shell?.enabled === true || policy.runtimeTools?.some((tool) => tool === "execShell") || workspaceMode === "lease";
+}
+function applyWebRuntimeSafetyBaseline(policy) {
+  if (!policyRequestsHostedWorkspace(policy)) return policy;
+  return mergeAgentRuntimeToolPolicies(
+    policy,
+    {
+      version: 1,
+      shell: {
+        commandPolicy: "approval",
+        networkPolicy: "default-deny"
+      },
+      isolation: {
+        mode: "os-sandbox"
+      },
+      audit: {
+        logToolCalls: true,
+        logShellCommands: true,
+        writeToDialog: true
+      }
+    }
+  );
+}
+function resolveEffectiveRuntimeToolPolicy(args) {
+  const agentPolicy = resolveCurrentRunRuntimeToolPolicy(args.agentConfig);
+  const requestedPolicy = normalizeRuntimeToolPolicyOverride(
+    args.runtimeToolPolicyOverride
+  );
+  const effectivePolicy = mergeAgentRuntimeToolPolicies(agentPolicy, requestedPolicy);
+  return args.host === "web" ? applyWebRuntimeSafetyBaseline(effectivePolicy) : effectivePolicy;
+}
 
 export {
-  createFileCredentialBroker,
   migrateAgentSecrets,
   applyAgentSecretMigrationUpdates,
   normalizeAgentRuntimeToolPolicy,
+  normalizeRuntimeToolPolicyOverride,
   resolveRequestedRuntimeToolNames,
   resolveCurrentRunRuntimeToolPolicy,
   resolveLocalRuntimeEnvFromPolicy,
-  resolveLocalWorkspaceExecutorOptionsFromPolicy
+  resolveLocalWorkspaceExecutorOptionsFromPolicy,
+  resolveEffectiveRuntimeToolPolicy
 };

package/{chunk-UASIEDKM.js → chunk-LTRUTOHX.js}

@@ -1,53 +1,56 @@
 import {
   createCliLocalRuntimeAdapter,
   summarizeEndpoint
-} from "./chunk-XYJSY4KG.js";
+} from "./chunk-FJMRBOPO.js";
+import {
+  t
+} from "./chunk-SW4S4XYB.js";
 import {
   clipMultilineText
-} from "./chunk-ATLTFRYJ.js";
+} from "./chunk-ES633ZS5.js";
 import {
   runLocalAgentTurn
-} from "./chunk-4H22P2JV.js";
+} from "./chunk-AUIJZACN.js";
 import {
   applyToolSurfaceConstraints
-} from "./chunk-RGNEEJ3Y.js";
+} from "./chunk-QLQ573SU.js";
 import {
   resolveLocalRuntimeEnvFromPolicy
-} from "./chunk-L36OWPP3.js";
-import {
-  toErrorMessage
-} from "./chunk-HNMXYYJR.js";
-import {
-  parseUserIdFromAuthToken
-} from "./chunk-A7GB5UGH.js";
-import {
-  DEFAULT_NOLO_SERVER_URL
-} from "./chunk-OLZBQWZU.js";
-import {
-  readPipeText,
-  spawnProcess
-} from "./chunk-Y6ROFCZO.js";
+} from "./chunk-LIQJTQRN.js";
 import {
   asRecordOrEmpty
 } from "./chunk-KX6YBIHG.js";
+import {
+  ownedAgentKey
+} from "./chunk-M2EJHDJP.js";
 import {
   asTrimmedNonEmptyStringArray
-} from "./chunk-3AH7LNUB.js";
+} from "./chunk-I42VC5KR.js";
+import {
+  asOptionalPositiveFiniteNumber
+} from "./chunk-U6VC4MU4.js";
 import {
   isRecord
 } from "./chunk-KUG52IAP.js";
-import {
-  ownedAgentKey
-} from "./chunk-M2EJHDJP.js";
 import {
   asTrimmedString
 } from "./chunk-3EUW3WEO.js";
 import {
-  asOptionalPositiveFiniteNumber
-} from "./chunk-U6VC4MU4.js";
+  toErrorMessage
+} from "./chunk-HNMXYYJR.js";
+import {
+  parseUserIdFromAuthToken
+} from "./chunk-A7GB5UGH.js";
+import {
+  DEFAULT_NOLO_SERVER_URL
+} from "./chunk-OLZBQWZU.js";
 import {
   asOptionalTrimmedString
 } from "./chunk-G3SUCT4W.js";
+import {
+  readPipeText,
+  spawnProcess
+} from "./chunk-Y6ROFCZO.js";
 
 // packages/ai/agent/machineRunPermissions.ts
 var DEFAULT_POLICY = {
@@ -655,7 +658,7 @@ ${Date.now()}
   } catch (error) {
     const code = error && typeof error === "object" && "code" in error ? error.code : void 0;
     if (code === "EEXIST") {
-      throw new Error("ChatGPT \u7F51\u9875\u751F\u56FE\u4EFB\u52A1\u6B63\u5728\u8FDB\u884C\u4E2D\uFF0C\u8BF7\u7A0D\u540E\u518D\u8BD5\uFF08\u9501\u6587\u4EF6\u5360\u7528\uFF09");
+      throw new Error(t("chatgptWebImage.jobInProgress"));
     }
     throw error;
   }
@@ -706,10 +709,10 @@ function assertOutputImage(outPath) {
   try {
     st = statSync(outPath);
   } catch {
-    throw new Error(`ChatGPT \u7F51\u9875\u751F\u56FE\u672A\u4EA7\u51FA\u6587\u4EF6\uFF1A${outPath}`);
+    throw new Error(t("chatgptWebImage.noOutputFile", outPath));
   }
   if (!st.isFile() || st.size <= 0) {
-    throw new Error(`ChatGPT \u7F51\u9875\u751F\u56FE\u6587\u4EF6\u65E0\u6548\u6216\u4E3A\u7A7A\uFF1A${outPath}`);
+    throw new Error(t("chatgptWebImage.outputFileInvalid", outPath));
   }
 }
 async function uploadPngToNoloFs(args) {
@@ -752,11 +755,11 @@ async function uploadPngToNoloFs(args) {
   if (!response.ok) {
     const errField = body.error;
     const message = typeof errField === "string" && errField || isRecord(errField) && typeof errField.message === "string" && errField.message || typeof body.details === "string" && body.details || `HTTP ${response.status}`;
-    throw new Error(`\u4E0A\u4F20\u751F\u56FE\u7ED3\u679C\u5230 Nolo FS \u5931\u8D25\uFF1A${message}`);
+    throw new Error(t("chatgptWebImage.uploadFailed", message));
   }
   const fileId = asTrimmedString(body.fileId);
   if (!fileId) {
-    throw new Error("\u4E0A\u4F20\u751F\u56FE\u7ED3\u679C\u6210\u529F\u4F46\u54CD\u5E94\u7F3A\u5C11 fileId");
+    throw new Error(t("chatgptWebImage.missingUploadFileId"));
   }
   const metadata = asRecordOrEmpty(body.metadata);
   return { fileId, metadata };
@@ -764,7 +767,7 @@ async function uploadPngToNoloFs(args) {
 async function runChatgptWebImageLocalJob(input, deps = {}) {
   const prompt = asTrimmedString(input.prompt);
   if (!prompt) {
-    throw new Error("\u7F3A\u5C11\u751F\u56FE prompt\uFF08payload.meta.prompt \u5FC5\u586B\uFF09");
+    throw new Error(t("chatgptWebImage.missingPrompt"));
   }
   const home = (deps.homedir ?? homedir)();
   const lockPath = deps.lockPath ?? defaultLockPath(home);
@@ -781,7 +784,9 @@ async function runChatgptWebImageLocalJob(input, deps = {}) {
     });
     assertOutputImage(outPath);
     const userAuthToken = input.userAuthToken?.trim() || "";
-    const userId = parseUserIdFromAuthToken(userAuthToken) || "default";
+    if (!userAuthToken) throw new Error("Cannot upload generated image without a user authentication token.");
+    const userId = parseUserIdFromAuthToken(userAuthToken);
+    if (!userId) throw new Error("Cannot determine authenticated user from the user authentication token.");
     const serverBase = (input.serverBase?.trim() || DEFAULT_NOLO_SERVER_URL).replace(/\/+$/, "");
     const uploaded = await uploadPngToNoloFs({
       outPath,

package/{chunk-BFU6C242.js → chunk-NMFV26UG.js}

@@ -37,7 +37,7 @@ function resolveCliAuthorityBrokerPort(options = {}) {
     ...options,
     env: options.env ?? {}
   });
-  return 47e3 + hashString(noloHome) % 2e3;
+  return 24e3 + hashString(noloHome) % 2e3;
 }
 function resolveCliAuthorityStoreDriver(options = {}) {
   return readCliAuthorityDriver(options.env ?? {}).driver;

package/{chunk-5J3PYNUP.js → chunk-NYYFIKHI.js}

@@ -48,7 +48,8 @@ function canonicalizeChromeConnectorToolNames(toolNames) {
 }
 var CONNECTOR_TARGET_PROPERTY = {
   type: "string",
-  description: "Reserved and ignored for now; future multi-provider targeting."
+  enum: ["chrome", "firefox"],
+  description: `Which browser's connector serves this call: "chrome" or "firefox". Omit for the default endpoint.`
 };
 var CHROME_CONNECTOR_READ_TOOL_NAMES = [
   "browser_list_tabs",
@@ -112,7 +113,7 @@ var chromeCloseTabFunctionSchema = baseSchema(
 );
 var chromeReadPageFunctionSchema = baseSchema(
   "browser_read_page",
-  "Read a compact view of a browser tab: visible text (hard cap 6000 chars) plus short-lived elementRefs (hard cap 35) and a pageRevision. Reuse those refs for browser_click_element and browser_type instead of guessing selectors; use region to focus a big page. Does not read cookies or profile databases.",
+  "Read a compact view of a browser tab: visible text (hard cap 6000 chars) plus short-lived elementRefs (hard cap 35) and a pageRevision. Reuse those refs for browser_click_element and browser_type instead of guessing selectors; use region to focus a big page. When the element list exceeds one page, continue by passing the returned nextOffset as offset. Does not read cookies or profile databases.",
   {
     tabId,
     region: {
@@ -127,6 +128,15 @@ var chromeReadPageFunctionSchema = baseSchema(
       type: "string",
       enum: ["compact", "full"],
       description: "compact (default) returns budgeted text; full raises the budget and adds capped HTML."
+    },
+    offset: {
+      type: "integer",
+      minimum: 0,
+      description: "Optional element offset for paging. When an element list exceeds one page, continue by passing the returned nextOffset as offset."
+    },
+    viewportOnly: {
+      type: "boolean",
+      description: "Optional. When true, only elements intersecting the current viewport are listed."
     }
   },
   ["tabId"]
@@ -173,9 +183,13 @@ var chromePressFunctionSchema = baseSchema(
 );
 var chromeScrollFunctionSchema = baseSchema(
   "browser_scroll",
-  "Scroll a browser tab by pixel deltas.",
+  "Scroll the browser page or a CSS-selected container by pixel deltas; with selector and no deltas, observe the container's scroll position without moving it. Selector matching must resolve to exactly one valid element; invalid, missing, or ambiguous selectors fail without falling back to page scrolling. Results include targetBefore and targetAfter measurements for scrollTop, scrollLeft, scrollHeight, scrollWidth, clientHeight, and clientWidth.",
   {
     tabId,
+    selector: {
+      type: "string",
+      description: "Optional CSS selector for exactly one scroll container. When provided, only that container is scrolled; invalid, not-found, or ambiguous selectors fail without falling back. May be used without deltas to observe scroll position."
+    },
     deltaX: {
       type: "number",
       description: "Horizontal scroll delta in pixels."

package/{chunk-6O4IK4V2.js → chunk-OFFL4DCR.js}

@@ -1,6 +1,6 @@
 import {
   dialogMessageKey
-} from "./chunk-3AH7LNUB.js";
+} from "./chunk-5EMSBTQ6.js";
 import {
   asOptionalFiniteNumber
 } from "./chunk-WWC7I6TA.js";