nolo-cli 0.157.0-alpha.1 → 0.157.0

package/{chunk-DW7MGLMG.js → chunk-GGUTTH6C.js}

@@ -1,32 +1,29 @@
-import {
-  buildResponseGuidelines
-} from "./chunk-W4S6OTSC.js";
 import {
   getLocalProviderSecret
 } from "./chunk-HS7MLR74.js";
 import {
   performServerProxyFetchWithRetry
-} from "./chunk-VSOWPETY.js";
-import {
-  shouldUseServerProxy
-} from "./chunk-UKZX3NHN.js";
+} from "./chunk-4226O6F7.js";
 import {
   fetchServerSyncedCredential
-} from "./chunk-X5SUT4CN.js";
+} from "./chunk-R7GCGOGZ.js";
 import {
   buildSkillGuidancePromptBlock
-} from "./chunk-4Z245KOA.js";
+} from "./chunk-SH3XD4E2.js";
 import {
+  CREDENTIAL_HYGIENE_RULE,
   DELETE_SAFETY_RED_LINE,
+  DISPATCH_BACKEND_POLICY,
   PARALLEL_DISPATCH_DEFAULT_RULE,
   PLATFORM_RISK_CONTROL_RULE,
   buildConsultationModeBlock,
   buildIdentityBlock,
+  buildResponseGuidelines,
   buildRuntimeGuidanceBlocks,
   compileContextLayers,
   detectDispatchIntentFromMessages,
   resolveToolGuidedSections
-} from "./chunk-TYND6RDQ.js";
+} from "./chunk-ZZDVBZOP.js";
 import {
   convertMessagesToResponsesInput,
   getUsageRequestOptions,
@@ -35,32 +32,33 @@ import {
   resolveReasoningReplayOptions,
   shouldStripReasoningContentForOutbound,
   stablePromptCacheKey
-} from "./chunk-6TF64IF2.js";
+} from "./chunk-4L4K6YR7.js";
+import {
+  resolveAgentCallPlan,
+  resolveClientWire
+} from "./chunk-TT644UJD.js";
 import {
   createFileCredentialBroker
 } from "./chunk-UHTDNB5Y.js";
+import {
+  MEMORY_USE_GUIDANCE,
+  buildUserResponseLanguageContext,
+  wrapHistoricalSummaryWithReplayGuard
+} from "./chunk-4VJAC32I.js";
 import {
   canonicalizeToolNames
 } from "./chunk-5EBLANFT.js";
 import {
-  ANTIGRAVITY_CLOUD_CODE_BASE_URL,
-  isAntigravityCloudCodeBaseUrl,
-  isAntigravityOAuthAgent
-} from "./chunk-JGRPBIZZ.js";
+  API_ENDPOINTS
+} from "./chunk-LCBAMY2M.js";
 import {
   buildProviderAuthHeaders
-} from "./chunk-SUKSWFLP.js";
-import {
-  isOpenAiResponsesModel,
-  resolvePlatformChatCompletionsEndpoint,
-  resolvePlatformResponsesEndpoint
-} from "./chunk-I2RMFLLH.js";
+} from "./chunk-PIG2IUVZ.js";
 import {
   clampReasoningEffort,
-  findModelConfig,
   getModelConfig,
   isModelSupportReasoningEffort
-} from "./chunk-TRW43TSC.js";
+} from "./chunk-6EQD4AQL.js";
 import {
   isRecord
 } from "./chunk-KUG52IAP.js";
@@ -70,9 +68,6 @@ import {
 import {
   toErrorMessage
 } from "./chunk-HNMXYYJR.js";
-import {
-  API_ENDPOINTS
-} from "./chunk-LCBAMY2M.js";
 import {
   isLoopbackUrl
 } from "./chunk-4SN6J65J.js";
@@ -85,14 +80,6 @@ import {
   isPlatformMimoProviderModel,
   resolveFireworksKimiModel
 } from "./chunk-CGFNDIKK.js";
-import {
-  asTrimmedLowercaseString
-} from "./chunk-QSJ3HFEF.js";
-import {
-  MEMORY_USE_GUIDANCE,
-  buildUserResponseLanguageContext,
-  wrapHistoricalSummaryWithReplayGuard
-} from "./chunk-4VJAC32I.js";
 
 // packages/agent-runtime/responsesConversationState.ts
 function supportsResponsesConversationState(agent) {
@@ -133,177 +120,6 @@ function isResponsesConversationStateRejection(status, responseBody) {
   return mentionsResponseState && rejectsState;
 }
 
-// packages/agent-runtime/agentCallPlan.ts
-var CODEX_RESPONSES_URL = "https://chatgpt.com/backend-api/codex/responses";
-var CURSOR_AGENT_URL = "https://api2.cursor.sh/agent.v1.AgentService/Run";
-var DEVIN_CONNECT_URL = "https://server.codeium.com/exa.api_server_pb.ApiServerService/GetChatMessage";
-function resolveClientWire(plan) {
-  if (plan.upstreamWire === "gemini-cca") return "chat.completions";
-  if (plan.upstreamWire === "anthropic-messages") return "chat.completions";
-  if (plan.upstreamWire === "cursor-connect") return "chat.completions";
-  if (plan.upstreamWire === "devin-connect") return "chat.completions";
-  if (plan.upstreamWire === "custom-gemini") return "chat.completions";
-  if (plan.upstreamWire === "custom-openai-responses") return "chat.completions";
-  if (plan.upstreamWire === "custom-anthropic-messages") return "chat.completions";
-  if (plan.upstreamWire === "responses" && plan.authMethod.kind === "oauth" && plan.authMethod.ref === "chatgpt") {
-    return "chat.completions";
-  }
-  return plan.upstreamWire;
-}
-var XAI_CHAT_COMPLETIONS_URL = "https://api.x.ai/v1/chat/completions";
-var ANTHROPIC_MESSAGES_URL = "https://api.anthropic.com/v1/messages";
-var CODEX_REQUIRED_HEADERS = [
-  "chatgpt-account-id",
-  "OpenAI-Beta",
-  "originator",
-  "version"
-];
-var ANTIGRAVITY_REQUIRED_HEADERS = [
-  "User-Agent"
-  // antigravity-specific UA (matches getAntigravityUserAgent)
-];
-function agentShouldUseServerProxy(agentConfig) {
-  return shouldUseServerProxy(agentConfig);
-}
-function resolveCustomUpstreamWire(endpoint, nativeProtocol) {
-  const responsesEndpoint = endpoint.includes("/responses");
-  if (nativeProtocol === "openai-responses" && responsesEndpoint) return "responses";
-  if (nativeProtocol === "gemini") return "custom-gemini";
-  if (nativeProtocol === "openai-responses") return "custom-openai-responses";
-  if (nativeProtocol === "anthropic-messages") return "custom-anthropic-messages";
-  return responsesEndpoint ? "responses" : "chat.completions";
-}
-function hasOwnCustomProviderKey(agentConfig) {
-  const endpoint = asOptionalTrimmedString(agentConfig.customProviderUrl);
-  if (!endpoint) return false;
-  if (isAntigravityCloudCodeBaseUrl(endpoint)) return false;
-  return Boolean(asOptionalTrimmedString(agentConfig.apiKey));
-}
-function resolveAgentCallPlan(agentConfig, _env) {
-  const apiKeyRef = asTrimmedLowercaseString(agentConfig.apiKeyRef);
-  const provider = asTrimmedLowercaseString(
-    agentConfig.provider ?? agentConfig.apiSource
-  );
-  const ownCustomKeyWins = hasOwnCustomProviderKey(agentConfig);
-  const oauthApiKeyRef = ownCustomKeyWins ? "" : apiKeyRef;
-  if (!ownCustomKeyWins && isAntigravityOAuthAgent(agentConfig)) {
-    return {
-      authMethod: { kind: "oauth", ref: "antigravity" },
-      transport: "server-proxy",
-      upstreamWire: "gemini-cca",
-      endpoint: ANTIGRAVITY_CLOUD_CODE_BASE_URL,
-      requiredHeaders: [...ANTIGRAVITY_REQUIRED_HEADERS],
-      vendor: provider || "google-antigravity"
-    };
-  }
-  if (oauthApiKeyRef === "chatgpt") {
-    return {
-      authMethod: { kind: "oauth", ref: "chatgpt" },
-      transport: "server-proxy",
-      upstreamWire: "responses",
-      endpoint: CODEX_RESPONSES_URL,
-      requiredHeaders: [...CODEX_REQUIRED_HEADERS],
-      vendor: provider || "openai"
-    };
-  }
-  if (oauthApiKeyRef === "claude") {
-    return {
-      authMethod: { kind: "oauth", ref: "claude" },
-      transport: "server-proxy",
-      upstreamWire: "anthropic-messages",
-      endpoint: ANTHROPIC_MESSAGES_URL,
-      requiredHeaders: ["anthropic-version", "anthropic-beta"],
-      vendor: provider || "anthropic"
-    };
-  }
-  if (oauthApiKeyRef === "workbuddy" || oauthApiKeyRef === "workbuddy-ai") {
-    return {
-      authMethod: { kind: "oauth", ref: oauthApiKeyRef },
-      transport: "server-proxy",
-      upstreamWire: "chat.completions",
-      endpoint: oauthApiKeyRef === "workbuddy" ? "https://copilot.tencent.com/v2/chat/completions" : "https://www.workbuddy.ai/v2/chat/completions",
-      requiredHeaders: [],
-      vendor: oauthApiKeyRef
-    };
-  }
-  if (oauthApiKeyRef === "xai") {
-    return {
-      authMethod: { kind: "oauth", ref: "xai" },
-      transport: "server-proxy",
-      upstreamWire: "chat.completions",
-      endpoint: XAI_CHAT_COMPLETIONS_URL,
-      requiredHeaders: [],
-      vendor: provider || "xai"
-    };
-  }
-  if (oauthApiKeyRef === "cursor") {
-    return {
-      authMethod: { kind: "oauth", ref: "cursor" },
-      transport: "server-proxy",
-      upstreamWire: "cursor-connect",
-      endpoint: CURSOR_AGENT_URL,
-      requiredHeaders: [
-        "x-cursor-client-version",
-        "x-cursor-client-type",
-        "x-ghost-mode"
-      ],
-      vendor: provider || "cursor"
-    };
-  }
-  if (oauthApiKeyRef === "devin" || !ownCustomKeyWins && provider === "devin") {
-    return {
-      authMethod: { kind: "oauth", ref: "devin" },
-      transport: "server-proxy",
-      upstreamWire: "devin-connect",
-      endpoint: DEVIN_CONNECT_URL,
-      requiredHeaders: ["connect-protocol-version"],
-      vendor: provider || "devin"
-    };
-  }
-  if (agentConfig.cliProvider || agentConfig.apiSource === "cli" || provider === "cli") {
-    return {
-      authMethod: { kind: "cli", provider: agentConfig.cliProvider || provider || "codex" },
-      transport: "direct",
-      upstreamWire: "cli",
-      endpoint: "",
-      requiredHeaders: [],
-      vendor: provider || "cli"
-    };
-  }
-  if (agentConfig.customProviderUrl || agentConfig.apiSource === "custom") {
-    const transport2 = agentShouldUseServerProxy(agentConfig) ? "server-proxy" : "direct";
-    const endpoint2 = asOptionalTrimmedString(agentConfig.customProviderUrl) ?? "";
-    const upstreamWire2 = resolveCustomUpstreamWire(
-      endpoint2,
-      findModelConfig(provider, agentConfig.model ?? "")?.nativeProtocol
-    );
-    return {
-      authMethod: { kind: "custom-key" },
-      transport: transport2,
-      upstreamWire: upstreamWire2,
-      endpoint: endpoint2,
-      requiredHeaders: [],
-      vendor: provider || "custom"
-    };
-  }
-  const transport = agentShouldUseServerProxy(agentConfig) ? "server-proxy" : "direct";
-  const useResponses = isOpenAiResponsesModel({
-    provider,
-    model: agentConfig.model,
-    endpointKey: agentConfig.endpointKey
-  });
-  const upstreamWire = useResponses ? "responses" : "chat.completions";
-  const endpoint = upstreamWire === "responses" ? resolvePlatformResponsesEndpoint(provider, agentConfig.model) ?? "" : resolvePlatformChatCompletionsEndpoint(provider, agentConfig.model) ?? "";
-  return {
-    authMethod: { kind: "platform-key" },
-    transport,
-    upstreamWire,
-    endpoint,
-    requiredHeaders: [],
-    vendor: provider || "openai"
-  };
-}
-
 // packages/ai/agent/buildSystemPrompt.ts
 var CLARIFICATION_MODE_INSTRUCTIONS = `\u5728\u4F60\u8FD8\u4E0D\u4E86\u89E3\u7528\u6237\u610F\u56FE\u65F6\uFF0C\u901A\u8FC7\u63D0\u95EE\u6765\u6F84\u6E05\u9700\u6C42\uFF0C\u800C\u4E0D\u662F\u4ED3\u4FC3\u7ED9\u51FA\u7B54\u6848\u3002`;
 var isBrowser = typeof window !== "undefined";
@@ -455,6 +271,13 @@ ${wrapHistoricalSummaryWithReplayGuard(contexts.dialogSummary)}` : "";
       cacheScope: "static",
       content: DELETE_SAFETY_RED_LINE
     },
+    // 凭据纪律：与红线同为无条件系统层块，四条装配线同源。
+    {
+      id: "credential-hygiene",
+      owner: "platform",
+      cacheScope: "static",
+      content: CREDENTIAL_HYGIENE_RULE
+    },
     // 并行是默认：系统层固定块，紧随红线（同为无条件前缀，不随工具/轮次变化）。
     {
       id: "parallel-dispatch-default",
@@ -462,6 +285,13 @@ ${wrapHistoricalSummaryWithReplayGuard(contexts.dialogSummary)}` : "";
       cacheScope: "static",
       content: PARALLEL_DISPATCH_DEFAULT_RULE
     },
+    // 派发落点：并行派发纪律的下一层（派到哪个执行后端），紧随并行块。
+    {
+      id: "dispatch-backend-policy",
+      owner: "platform",
+      cacheScope: "static",
+      content: DISPATCH_BACKEND_POLICY
+    },
     // 平台风控纪律：无条件静态前缀，紧随并行派发块。
     {
       id: "platform-risk-control",
@@ -1397,8 +1227,6 @@ export {
   selectResponsesConversationState,
   updateResponsesConversationState,
   isResponsesConversationStateRejection,
-  resolveClientWire,
-  resolveAgentCallPlan,
   generateRequestBody,
   CONFIRMATION_INPUT_KEYS,
   stripModelToolArgs,

package/{chunk-6MJNEXUU.js → chunk-HGDKT2D6.js}

@@ -607,7 +607,11 @@ function createDockerToolChannel(runGrant, backend) {
 
 export {
   SANDBOX_WORKSPACE_ROOT,
+  SANDBOX_HELPER_PATH,
   buildSandboxHelperUploadArgv,
+  SANDBOX_OUTPUT_LIMITS,
+  buildWorkspaceHelperSource,
+  parseToolOutput,
   buildPrimaryExecutionTicket,
   dockerExecutionToolNames,
   createDockerToolChannel

package/{chunk-B2EGWZJG.js → chunk-I7S63QUU.js}

@@ -1,7 +1,7 @@
 import {
   generatePkcePair,
   startCallbackServer
-} from "./chunk-7KYVUFDG.js";
+} from "./chunk-G3VYRPTV.js";
 import {
   asOptionalFiniteNumber
 } from "./chunk-WWC7I6TA.js";

package/{chunk-ROPSATAB.js → chunk-IF7V3CBU.js}

@@ -7,7 +7,7 @@ import {
 import {
   patch,
   selectById
-} from "./chunk-HP6O6LTV.js";
+} from "./chunk-CDLP56BS.js";
 
 // packages/chat/dialog/actions/setDialogExtraReferencesAction.ts
 var setDialogExtraReferencesAction = async (extraReferences, thunkApi) => {