nolo-cli 0.149.0-alpha.1 → 0.151.0-alpha.3

package/{chunk-L36OWPP3.js → chunk-LIQJTQRN.js}

@@ -1,11 +1,10 @@
 import {
-  getCredentialsDir,
-  getLegacyCredentialPath,
-  migrateLegacyCredentialFile
-} from "./chunk-ZWQUWF6W.js";
+  asNonEmptyStringArray,
+  asTrimmedNonEmptyStringArray
+} from "./chunk-I42VC5KR.js";
 import {
-  asNonEmptyStringArray
-} from "./chunk-3AH7LNUB.js";
+  asOptionalPositiveFiniteNumber
+} from "./chunk-U6VC4MU4.js";
 import {
   isRecord
 } from "./chunk-KUG52IAP.js";
@@ -13,136 +12,8 @@ import {
   asTrimmedString
 } from "./chunk-3EUW3WEO.js";
 import {
-  asOptionalPositiveFiniteNumber
-} from "./chunk-U6VC4MU4.js";
-
-// packages/agent-runtime/fileCredentialBroker.ts
-import {
-  chmodSync,
-  existsSync,
-  mkdirSync,
-  readFileSync,
-  unlinkSync,
-  writeFileSync
-} from "node:fs";
-import { homedir } from "node:os";
-import { join } from "node:path";
-
-// packages/agent-runtime/credentialBroker.ts
-function assertCredentialRef(ref) {
-  const trimmed = asTrimmedString(ref);
-  if (!trimmed) {
-    throw new Error("invalid_ref");
-  }
-  if (trimmed.includes("..") || trimmed.includes("/") || trimmed.includes("\\")) {
-    throw new Error("invalid_ref");
-  }
-  return trimmed;
-}
-
-// packages/agent-runtime/fileCredentialBroker.ts
-function getApiKeyCredentialsDir(homeDir) {
-  return join(getCredentialsDir(homeDir), "keys");
-}
-function credentialRefToFileName(ref) {
-  const safe = assertCredentialRef(ref).replace(/[^a-zA-Z0-9._-]+/g, "_");
-  if (!safe || safe === "." || safe === "..") {
-    throw new Error(`Credential ref is not filesystem-safe: ${ref}`);
-  }
-  return `${safe}.json`;
-}
-function getApiKeyCredentialPath(ref, homeDir) {
-  return join(getApiKeyCredentialsDir(homeDir), credentialRefToFileName(ref));
-}
-function ensurePrivateDir(dir) {
-  mkdirSync(dir, { recursive: true, mode: 448 });
-  try {
-    chmodSync(dir, 448);
-  } catch {
-  }
-}
-function writePrivateFile(path, body) {
-  writeFileSync(path, body, { encoding: "utf8", mode: 384 });
-  try {
-    chmodSync(path, 384);
-  } catch {
-  }
-}
-function migrateApiKeyCredentialIfNeeded(ref, homeDir, migration) {
-  if (homeDir !== void 0 || !migration?.enableLegacyMigration) return;
-  const legacyHomeDir = migration.legacyHomeDir ?? homedir();
-  const relativePath = join("keys", credentialRefToFileName(ref));
-  migrateLegacyCredentialFile({
-    canonicalPath: getApiKeyCredentialPath(ref),
-    legacyPath: getLegacyCredentialPath(relativePath, legacyHomeDir),
-    mode: migration.mode ?? (migration.legacyHomeDir ? "test" : "production"),
-    isValid: (raw) => {
-      try {
-        const parsed = JSON.parse(raw);
-        return typeof parsed?.secret === "string" && Boolean(parsed.secret);
-      } catch {
-        return false;
-      }
-    }
-  });
-}
-function readApiKeyCredential(ref, homeDir, migration) {
-  migrateApiKeyCredentialIfNeeded(ref, homeDir, migration);
-  const path = getApiKeyCredentialPath(ref, homeDir);
-  if (!existsSync(path)) return null;
-  try {
-    const raw = readFileSync(path, "utf8");
-    const parsed = JSON.parse(raw);
-    if (typeof parsed?.secret !== "string" || !parsed.secret) return null;
-    return parsed.secret;
-  } catch {
-    return null;
-  }
-}
-function writeApiKeyCredential(ref, secret, homeDir, now = Date.now()) {
-  const trimmedSecret = secret.trim();
-  if (!trimmedSecret) {
-    throw new Error("Cannot store an empty credential secret.");
-  }
-  assertCredentialRef(ref);
-  const dir = getApiKeyCredentialsDir(homeDir);
-  ensurePrivateDir(dir);
-  const path = getApiKeyCredentialPath(ref, homeDir);
-  const payload = {
-    secret: trimmedSecret,
-    updatedAt: now
-  };
-  writePrivateFile(path, `${JSON.stringify(payload, null, 2)}
-`);
-}
-function removeApiKeyCredential(ref, homeDir) {
-  assertCredentialRef(ref);
-  const path = getApiKeyCredentialPath(ref, homeDir);
-  if (!existsSync(path)) return;
-  unlinkSync(path);
-}
-function hasApiKeyCredential(ref, homeDir, migration) {
-  return readApiKeyCredential(ref, homeDir, migration) !== null;
-}
-function createFileCredentialBroker(options = {}) {
-  const homeDir = options.homeDir;
-  const migration = options.migration;
-  const now = options.now ?? Date.now;
-  return {
-    get(ref) {
-      return readApiKeyCredential(ref, homeDir, migration);
-    },
-    put(ref, secret) {
-      writeApiKeyCredential(ref, secret, homeDir, now());
-    },
-    delete(ref) {
-      removeApiKeyCredential(ref, homeDir);
-    },
-    has(ref) {
-      return hasApiKeyCredential(ref, homeDir, migration);
-    }
-  };
-}
+  asOptionalTrimmedString
+} from "./chunk-G3SUCT4W.js";
 
 // packages/agent-runtime/migrateAgentSecrets.ts
 function buildAgentApiKeyCredentialRef(agentKey) {
@@ -255,13 +126,51 @@ function applyAgentSecretMigrationUpdates(record, updates) {
 function unique(values) {
   return [...new Set(values)];
 }
+function mergeRecords(base, override) {
+  if (!base && !override) return void 0;
+  return {
+    ...base ?? {},
+    ...override ?? {}
+  };
+}
+function normalizeWorkspacePolicy(value) {
+  if (!isRecord(value)) return void 0;
+  const mode = value.mode === "none" || value.mode === "current" || value.mode === "lease" ? value.mode : void 0;
+  const readableRoots = unique(asNonEmptyStringArray(value.readableRoots));
+  const writableRoots = unique(asNonEmptyStringArray(value.writableRoots));
+  const cwd = asOptionalTrimmedString(value.cwd);
+  const normalized = {
+    ...mode ? { mode } : {},
+    ...readableRoots.length ? { readableRoots } : {},
+    ...writableRoots.length ? { writableRoots } : {},
+    ...cwd ? { cwd } : {}
+  };
+  return Object.keys(normalized).length > 0 ? normalized : void 0;
+}
+function mergeWorkspacePolicy(base, override) {
+  const readableRoots = unique([
+    ...base?.readableRoots ?? [],
+    ...override?.readableRoots ?? []
+  ]);
+  const writableRoots = unique([
+    ...base?.writableRoots ?? [],
+    ...override?.writableRoots ?? []
+  ]);
+  return {
+    ...base ?? {},
+    ...override ?? {},
+    ...readableRoots.length ? { readableRoots } : {},
+    ...writableRoots.length ? { writableRoots } : {}
+  };
+}
 function normalizeAgentRuntimeToolPolicy(value) {
   if (!isRecord(value)) return void 0;
+  const workspace = normalizeWorkspacePolicy(value.workspace);
   return {
     version: 1,
     ...asNonEmptyStringArray(value.agentTools).length ? { agentTools: unique(asNonEmptyStringArray(value.agentTools)) } : {},
     ...asNonEmptyStringArray(value.runtimeTools).length ? { runtimeTools: unique(asNonEmptyStringArray(value.runtimeTools)) } : {},
-    ...isRecord(value.workspace) ? { workspace: { ...value.workspace } } : {},
+    ...workspace ? { workspace } : {},
     ...isRecord(value.shell) ? { shell: { ...value.shell } } : {},
     ...isRecord(value.isolation) ? { isolation: { ...value.isolation } } : {},
     ...isRecord(value.git) ? { git: { ...value.git } } : {},
@@ -269,6 +178,21 @@ function normalizeAgentRuntimeToolPolicy(value) {
     ...isRecord(value.audit) ? { audit: { ...value.audit } } : {}
   };
 }
+function normalizeRuntimeToolPolicyOverride(value) {
+  if (!isRecord(value)) return void 0;
+  const runtimeTools = unique(
+    asTrimmedNonEmptyStringArray(value.runtimeTools).filter(
+      (tool) => tool === "execShell"
+    )
+  );
+  const workspace = isRecord(value.workspace) && value.workspace.mode === "lease" ? { mode: "lease" } : void 0;
+  if (!runtimeTools.length && !workspace) return void 0;
+  return {
+    version: 1,
+    ...runtimeTools.length ? { runtimeTools } : {},
+    ...workspace ? { workspace } : {}
+  };
+}
 function runtimeBindingRecord(runtimeBinding) {
   return isRecord(runtimeBinding) ? runtimeBinding : void 0;
 }
@@ -278,6 +202,26 @@ function runtimeToolNamesFromPolicy(policy) {
 function readPositiveNumber(value) {
   return asOptionalPositiveFiniteNumber(Number(value));
 }
+function mergeAgentRuntimeToolPolicies(base, override) {
+  if (!base && !override) return void 0;
+  return {
+    version: 1,
+    agentTools: unique([
+      ...base?.agentTools ?? [],
+      ...override?.agentTools ?? []
+    ]),
+    runtimeTools: unique([
+      ...base?.runtimeTools ?? [],
+      ...override?.runtimeTools ?? []
+    ]),
+    workspace: mergeWorkspacePolicy(base?.workspace, override?.workspace),
+    shell: mergeRecords(base?.shell, override?.shell),
+    isolation: mergeRecords(base?.isolation, override?.isolation),
+    git: mergeRecords(base?.git, override?.git),
+    budget: mergeRecords(base?.budget, override?.budget),
+    audit: mergeRecords(base?.audit, override?.audit)
+  };
+}
 function resolveRequestedRuntimeToolNames(args) {
   const runtimeBinding = runtimeBindingRecord(args.agentConfig.runtimeBinding);
   const bindingPolicy = normalizeAgentRuntimeToolPolicy(
@@ -310,14 +254,49 @@ function resolveLocalWorkspaceExecutorOptionsFromPolicy(policy) {
     ...maxOutputBytes ? { commandOutputLimit: Math.floor(maxOutputBytes) } : {}
   };
 }
+function policyRequestsHostedWorkspace(policy) {
+  if (!policy) return false;
+  const workspaceMode = policy.workspace?.mode;
+  return policy.shell?.enabled === true || policy.runtimeTools?.some((tool) => tool === "execShell") || workspaceMode === "lease";
+}
+function applyWebRuntimeSafetyBaseline(policy) {
+  if (!policyRequestsHostedWorkspace(policy)) return policy;
+  return mergeAgentRuntimeToolPolicies(
+    policy,
+    {
+      version: 1,
+      shell: {
+        commandPolicy: "approval",
+        networkPolicy: "default-deny"
+      },
+      isolation: {
+        mode: "os-sandbox"
+      },
+      audit: {
+        logToolCalls: true,
+        logShellCommands: true,
+        writeToDialog: true
+      }
+    }
+  );
+}
+function resolveEffectiveRuntimeToolPolicy(args) {
+  const agentPolicy = resolveCurrentRunRuntimeToolPolicy(args.agentConfig);
+  const requestedPolicy = normalizeRuntimeToolPolicyOverride(
+    args.runtimeToolPolicyOverride
+  );
+  const effectivePolicy = mergeAgentRuntimeToolPolicies(agentPolicy, requestedPolicy);
+  return args.host === "web" ? applyWebRuntimeSafetyBaseline(effectivePolicy) : effectivePolicy;
+}
 
 export {
-  createFileCredentialBroker,
   migrateAgentSecrets,
   applyAgentSecretMigrationUpdates,
   normalizeAgentRuntimeToolPolicy,
+  normalizeRuntimeToolPolicyOverride,
   resolveRequestedRuntimeToolNames,
   resolveCurrentRunRuntimeToolPolicy,
   resolveLocalRuntimeEnvFromPolicy,
-  resolveLocalWorkspaceExecutorOptionsFromPolicy
+  resolveLocalWorkspaceExecutorOptionsFromPolicy,
+  resolveEffectiveRuntimeToolPolicy
 };

package/{chunk-BFU6C242.js → chunk-NMFV26UG.js}

@@ -37,7 +37,7 @@ function resolveCliAuthorityBrokerPort(options = {}) {
     ...options,
     env: options.env ?? {}
   });
-  return 47e3 + hashString(noloHome) % 2e3;
+  return 24e3 + hashString(noloHome) % 2e3;
 }
 function resolveCliAuthorityStoreDriver(options = {}) {
   return readCliAuthorityDriver(options.env ?? {}).driver;

package/{chunk-5J3PYNUP.js → chunk-NYYFIKHI.js}

@@ -48,7 +48,8 @@ function canonicalizeChromeConnectorToolNames(toolNames) {
 }
 var CONNECTOR_TARGET_PROPERTY = {
   type: "string",
-  description: "Reserved and ignored for now; future multi-provider targeting."
+  enum: ["chrome", "firefox"],
+  description: `Which browser's connector serves this call: "chrome" or "firefox". Omit for the default endpoint.`
 };
 var CHROME_CONNECTOR_READ_TOOL_NAMES = [
   "browser_list_tabs",
@@ -112,7 +113,7 @@ var chromeCloseTabFunctionSchema = baseSchema(
 );
 var chromeReadPageFunctionSchema = baseSchema(
   "browser_read_page",
-  "Read a compact view of a browser tab: visible text (hard cap 6000 chars) plus short-lived elementRefs (hard cap 35) and a pageRevision. Reuse those refs for browser_click_element and browser_type instead of guessing selectors; use region to focus a big page. Does not read cookies or profile databases.",
+  "Read a compact view of a browser tab: visible text (hard cap 6000 chars) plus short-lived elementRefs (hard cap 35) and a pageRevision. Reuse those refs for browser_click_element and browser_type instead of guessing selectors; use region to focus a big page. When the element list exceeds one page, continue by passing the returned nextOffset as offset. Does not read cookies or profile databases.",
   {
     tabId,
     region: {
@@ -127,6 +128,15 @@ var chromeReadPageFunctionSchema = baseSchema(
       type: "string",
       enum: ["compact", "full"],
       description: "compact (default) returns budgeted text; full raises the budget and adds capped HTML."
+    },
+    offset: {
+      type: "integer",
+      minimum: 0,
+      description: "Optional element offset for paging. When an element list exceeds one page, continue by passing the returned nextOffset as offset."
+    },
+    viewportOnly: {
+      type: "boolean",
+      description: "Optional. When true, only elements intersecting the current viewport are listed."
     }
   },
   ["tabId"]
@@ -173,9 +183,13 @@ var chromePressFunctionSchema = baseSchema(
 );
 var chromeScrollFunctionSchema = baseSchema(
   "browser_scroll",
-  "Scroll a browser tab by pixel deltas.",
+  "Scroll the browser page or a CSS-selected container by pixel deltas; with selector and no deltas, observe the container's scroll position without moving it. Selector matching must resolve to exactly one valid element; invalid, missing, or ambiguous selectors fail without falling back to page scrolling. Results include targetBefore and targetAfter measurements for scrollTop, scrollLeft, scrollHeight, scrollWidth, clientHeight, and clientWidth.",
   {
     tabId,
+    selector: {
+      type: "string",
+      description: "Optional CSS selector for exactly one scroll container. When provided, only that container is scrolled; invalid, not-found, or ambiguous selectors fail without falling back. May be used without deltas to observe scroll position."
+    },
     deltaX: {
       type: "number",
       description: "Horizontal scroll delta in pixels."

package/{chunk-6O4IK4V2.js → chunk-OFFL4DCR.js}

@@ -1,6 +1,6 @@
 import {
   dialogMessageKey
-} from "./chunk-3AH7LNUB.js";
+} from "./chunk-5EMSBTQ6.js";
 import {
   asOptionalFiniteNumber
 } from "./chunk-WWC7I6TA.js";

package/{chunk-B6SAMB33.js → chunk-OWYYDMGJ.js}

@@ -10,6 +10,114 @@ var GLOBAL_DIALOG_RUNTIME_KEY = "__global__";
 
 // packages/chat/dialog/dialogRuntimeStore.ts
 var import_react = __toESM(require_react());
+
+// packages/app/utils/localStorageState.ts
+function readStorageJSON(key) {
+  if (typeof window === "undefined") return null;
+  try {
+    const raw = window.localStorage.getItem(key);
+    if (!raw) return null;
+    return JSON.parse(raw);
+  } catch {
+    return null;
+  }
+}
+function writeStorageJSON(key, value) {
+  if (typeof window === "undefined") return;
+  try {
+    window.localStorage.setItem(key, JSON.stringify(value));
+  } catch {
+  }
+}
+
+// packages/chat/dialog/mediaJobPendingPersistence.ts
+var MEDIA_JOB_PENDING_STORAGE_KEY = "nolo:chat:media-job-pending:v1";
+var MEDIA_JOB_PENDING_KEEP_PER_DIALOG = 10;
+var currentActorId = null;
+function setMediaJobPendingActor(actorId) {
+  currentActorId = actorId && actorId.length > 0 ? actorId : null;
+}
+function getMediaJobPendingActor() {
+  return currentActorId;
+}
+var actorKey = () => `@${currentActorId ?? "anon"}`;
+var bucketKeyOf = (dialogKey) => dialogKey ?? GLOBAL_DIALOG_RUNTIME_KEY;
+var isEntry = (value) => {
+  if (!value || typeof value !== "object") return false;
+  const entry = value;
+  return typeof entry.id === "string" && entry.id.length > 0 && typeof entry.name === "string";
+};
+var readAllActors = () => {
+  const raw = readStorageJSON(MEDIA_JOB_PENDING_STORAGE_KEY);
+  if (!raw || typeof raw !== "object" || Array.isArray(raw)) return {};
+  return raw;
+};
+var writeActorMap = (map) => {
+  const all = readAllActors();
+  all[actorKey()] = map;
+  writeStorageJSON(MEDIA_JOB_PENDING_STORAGE_KEY, all);
+};
+function readMediaJobPendingMap() {
+  const scoped = readAllActors()[actorKey()];
+  if (!scoped || typeof scoped !== "object" || Array.isArray(scoped)) return {};
+  const map = {};
+  for (const [dialogKey, entries] of Object.entries(scoped)) {
+    if (!Array.isArray(entries)) continue;
+    const valid = entries.filter(isEntry).map((entry) => ({
+      id: entry.id,
+      name: entry.name,
+      fileKey: typeof entry.fileKey === "string" ? entry.fileKey : void 0,
+      mimeType: typeof entry.mimeType === "string" ? entry.mimeType : void 0,
+      size: typeof entry.size === "number" ? entry.size : void 0,
+      durationSec: typeof entry.durationSec === "number" ? entry.durationSec : void 0,
+      savedAt: typeof entry.savedAt === "number" && Number.isFinite(entry.savedAt) ? entry.savedAt : 0
+    }));
+    if (valid.length) map[dialogKey] = valid;
+  }
+  return map;
+}
+function upsertMediaJobPendingEntry(entry) {
+  const map = readMediaJobPendingMap();
+  const dialogKey = bucketKeyOf(entry.dialogKey);
+  const kept = (map[dialogKey] ?? []).filter((item) => item.id !== entry.id);
+  kept.push({ ...entry, savedAt: Date.now() });
+  map[dialogKey] = kept.slice(-MEDIA_JOB_PENDING_KEEP_PER_DIALOG);
+  writeActorMap(map);
+}
+function removeMediaJobPendingEntryById(id) {
+  const map = readMediaJobPendingMap();
+  let changed = false;
+  for (const [dialogKey, entries] of Object.entries(map)) {
+    const kept = entries.filter((entry) => entry.id !== id);
+    if (kept.length !== entries.length) {
+      changed = true;
+      if (kept.length) map[dialogKey] = kept;
+      else delete map[dialogKey];
+    }
+  }
+  if (changed) writeActorMap(map);
+}
+function clearMediaJobPendingEntries(payload) {
+  if (payload?.all) {
+    writeStorageJSON(MEDIA_JOB_PENDING_STORAGE_KEY, {});
+    return;
+  }
+  const dialogKey = bucketKeyOf(payload?.dialogKey);
+  const map = readMediaJobPendingMap();
+  if (!(dialogKey in map)) return;
+  delete map[dialogKey];
+  writeActorMap(map);
+}
+function pruneMediaJobPendingEntries(dialogKey, keep = MEDIA_JOB_PENDING_KEEP_PER_DIALOG) {
+  const key = bucketKeyOf(dialogKey);
+  const map = readMediaJobPendingMap();
+  const entries = map[key];
+  if (!entries || entries.length <= keep) return;
+  map[key] = entries.slice(-keep);
+  writeActorMap(map);
+}
+
+// packages/chat/dialog/dialogRuntimeStore.ts
 var createEmptyTokenStats = () => ({
   inputTokens: 0,
   outputTokens: 0,
@@ -17,6 +125,7 @@ var createEmptyTokenStats = () => ({
 });
 var createEmptyDialogRuntimeState = () => ({
   tokens: createEmptyTokenStats(),
+  lastProviderInput: null,
   pendingFiles: [],
   activeControllers: {},
   pendingRawData: {},
@@ -79,21 +188,49 @@ function addPendingFile(payload) {
   const targetRuntimeKey = payload.targetDialogKey ?? payload.runtimeDialogKey ?? (payload.type === "dialog" ? activeDialogKey : payload.dialogKey);
   const runtime = ensureDialogRuntimeState(targetRuntimeKey);
   if (!runtime.pendingFiles.some((f) => f.id === payload.id)) {
-    runtime.pendingFiles.push(payload);
+    runtime.pendingFiles = [...runtime.pendingFiles, payload];
+    if (payload.type === "media_job") {
+      upsertMediaJobPendingEntry({
+        id: payload.id,
+        name: payload.name,
+        fileKey: payload.fileKey,
+        mimeType: payload.mimeType,
+        size: payload.size,
+        durationSec: payload.durationSec,
+        // 与写入侧 bucket 推导严格同源：`dialogKey || GLOBAL_DIALOG_RUNTIME_KEY`
+        // （useMessageInputFiles 的 effectiveDialogKey 同规则）。不依赖
+        // activeDialogKey 隐式回退，保证恢复时读到的就是当初写入的 bucket。
+        dialogKey: payload.dialogKey ?? GLOBAL_DIALOG_RUNTIME_KEY
+      });
+    }
     notify();
   }
   return action("dialogRuntime/addPendingFile", payload);
 }
 function removePendingFile(fileId) {
   const runtime = ensureDialogRuntimeState();
-  const fileToRemove = runtime.pendingFiles.find((f) => f.id === fileId);
+  let fileToRemove = runtime.pendingFiles.find((f) => f.id === fileId);
+  let runtimeHoldingFile = runtime;
+  if (!fileToRemove) {
+    for (const candidate of Object.values(runtimeByKey)) {
+      const found = candidate.pendingFiles.find((f) => f.id === fileId);
+      if (found) {
+        fileToRemove = found;
+        runtimeHoldingFile = candidate;
+        break;
+      }
+    }
+  }
   if (fileToRemove) {
     if (fileToRemove.pageKey) {
-      delete runtime.pendingRawData[fileToRemove.pageKey];
+      delete runtimeHoldingFile.pendingRawData[fileToRemove.pageKey];
     }
-    runtime.pendingFiles = runtime.pendingFiles.filter(
+    runtimeHoldingFile.pendingFiles = runtimeHoldingFile.pendingFiles.filter(
       (file) => file.id !== fileId
     );
+    if (fileToRemove.type === "media_job") {
+      removeMediaJobPendingEntryById(fileToRemove.id);
+    }
     notify();
   }
   return action("dialogRuntime/removePendingFile", fileId);
@@ -104,10 +241,14 @@ function clearPendingAttachments(payload) {
       runtime2.pendingFiles = [];
       runtime2.pendingRawData = {};
     });
+    clearMediaJobPendingEntries({ all: true });
     notify();
     return action("dialogRuntime/clearPendingAttachments", payload);
   }
   const runtime = ensureDialogRuntimeState(payload?.dialogKey);
+  runtime.pendingFiles.forEach((file) => {
+    if (file.type === "media_job") removeMediaJobPendingEntryById(file.id);
+  });
   runtime.pendingFiles = [];
   runtime.pendingRawData = {};
   notify();
@@ -146,10 +287,62 @@ function clearDialogTurnPhase(payload = {}) {
   return setDialogTurnPhase({ phase: null, dialogKey: payload.dialogKey, turnId: payload.turnId });
 }
 function clearDialogRuntimeState(payload) {
+  const runtime = runtimeByKey[payload.dialogKey];
+  runtime?.pendingFiles.forEach((file) => {
+    if (file.type === "media_job") removeMediaJobPendingEntryById(file.id);
+  });
   delete runtimeByKey[payload.dialogKey];
   notify();
   return action("dialogRuntime/clearDialogRuntimeState", payload);
 }
+function restoreMediaJobPendingFiles(dialogKey) {
+  const runtimeKey = resolveDialogRuntimeKey(dialogKey);
+  const entries = (readMediaJobPendingMap()[runtimeKey] ?? []).slice(-MEDIA_JOB_PENDING_KEEP_PER_DIALOG);
+  if (!entries.length) return 0;
+  const runtime = ensureDialogRuntimeState(runtimeKey);
+  const existingIds = new Set(runtime.pendingFiles.map((file) => file.id));
+  let restored = 0;
+  for (const entry of entries) {
+    if (existingIds.has(entry.id)) continue;
+    addPendingFile({
+      id: entry.id,
+      name: entry.name,
+      type: "media_job",
+      fileKey: entry.fileKey,
+      mimeType: entry.mimeType,
+      size: entry.size,
+      durationSec: entry.durationSec,
+      trackingId: entry.id,
+      dialogKey: runtimeKey
+    });
+    restored += 1;
+  }
+  pruneMediaJobPendingEntries(runtimeKey);
+  return restored;
+}
+var MEDIA_NOTE_PAGE_KEY_PREFIX = "media-note:";
+var isMediaNotePageReference = (pageKey) => typeof pageKey === "string" && pageKey.startsWith(MEDIA_NOTE_PAGE_KEY_PREFIX);
+var getMediaJobRuntimeActor = () => getMediaJobPendingActor();
+function setMediaJobRuntimeActor(actorId) {
+  const next = actorId && actorId.length ? actorId : null;
+  if (getMediaJobPendingActor() === next) return;
+  setMediaJobPendingActor(next);
+  for (const key of Object.keys(runtimeByKey)) {
+    const runtime = runtimeByKey[key];
+    const kept = runtime.pendingFiles.filter(
+      (f) => f.type !== "media_job" && !isMediaNotePageReference(f.pageKey)
+    );
+    if (kept.length !== runtime.pendingFiles.length) {
+      runtime.pendingFiles = kept;
+    }
+    for (const pageKey of Object.keys(runtime.pendingRawData)) {
+      if (isMediaNotePageReference(pageKey)) {
+        delete runtime.pendingRawData[pageKey];
+      }
+    }
+  }
+  notify();
+}
 function addActiveController(payload) {
   const runtime = ensureDialogRuntimeState(payload.dialogKey);
   runtime.activeControllers[payload.messageId] = payload.controller;
@@ -204,6 +397,9 @@ function clearPendingUserInputQueue(payload) {
 }
 function tokenUsageLiveUpdate(payload) {
   const runtime = ensureDialogRuntimeState(payload.dialogKey);
+  if (payload.input_tokens > 0) {
+    runtime.lastProviderInput = { inputTokens: payload.input_tokens, observedAt: Date.now() };
+  }
   runtime.tokens.inputTokens += payload.input_tokens;
   runtime.tokens.outputTokens += payload.output_tokens;
   runtime.tokens.totalCost += payload.cost ?? 0;
@@ -212,15 +408,18 @@ function tokenUsageLiveUpdate(payload) {
 }
 function addPageReferenceToRuntime(payload) {
   const runtime = ensureDialogRuntimeState(payload.dialogKey);
-  runtime.pendingFiles.push(payload.reference);
+  runtime.pendingFiles = [...runtime.pendingFiles, payload.reference];
   if (payload.rawData?.pageKey) {
     runtime.pendingRawData[payload.rawData.pageKey] = payload.rawData;
   }
   notify();
 }
 function applyUpdateTokensFulfilled(payload) {
-  const runtime = runtimeByKey[payload.dialogKey];
-  if (!runtime) return;
+  const runtime = ensureDialogRuntimeState(payload.dialogKey);
+  const observedAt = payload.observedAt ?? Date.now();
+  if (payload.authoritative !== false && typeof payload.input_tokens === "number" && payload.input_tokens > 0 && (!runtime.lastProviderInput || observedAt > runtime.lastProviderInput.observedAt)) {
+    runtime.lastProviderInput = { inputTokens: payload.input_tokens, observedAt };
+  }
   runtime.tokens.inputTokens = Math.max(
     0,
     runtime.tokens.inputTokens - (payload.input_tokens ?? 0)
@@ -366,6 +565,9 @@ export {
   setDialogTurnPhase,
   clearDialogTurnPhase,
   clearDialogRuntimeState,
+  restoreMediaJobPendingFiles,
+  getMediaJobRuntimeActor,
+  setMediaJobRuntimeActor,
   addActiveController,
   removeActiveController,
   clearActiveControllers,
@@ -379,8 +581,6 @@ export {
   deleteDialogRuntime,
   abortActiveControllers,
   getDialogRuntimeTokens,
-  getPendingUserInputQueue,
-  getLoopStopReason,
   getRecoveredForegroundTurn,
   selectDialogRuntimeByKey,
   selectPendingFiles,

package/{chunk-KQHGZWSV.js → chunk-OXME3PEE.js}

@@ -2,7 +2,7 @@ import {
   getRecordTimestamp,
   isTombstoneRecord,
   shouldReplaceWithNextRecord
-} from "./chunk-GBRG75BQ.js";
+} from "./chunk-D2MDMY2M.js";
 
 // packages/database/userDataMerge.ts
 var getUserDataItemTimestamp = (dataItem) => getRecordTimestamp(dataItem);