nolo-cli 0.157.0-alpha.1 → 0.157.0

package/{authCommand-J3XILHWW.js → authCommand-3Z52KJID.js}

@@ -3,7 +3,7 @@ import {
   parseFlagWithOptionalValue,
   runCloudflareOAuthLogin,
   upsertEnvVariable
-} from "./chunk-B2EGWZJG.js";
+} from "./chunk-I7S63QUU.js";
 import {
   ANTHROPIC_OAUTH_AUTHORIZE_URL,
   ANTHROPIC_OAUTH_CALLBACK_PORT,
@@ -19,11 +19,6 @@ import {
   CURSOR_POLL_MAX_CONSECUTIVE_ERRORS,
   CURSOR_POLL_MAX_DELAY_MS,
   CURSOR_POLL_URL,
-  WORKBUDDY_APP_VERSION,
-  WORKBUDDY_POLL_INTERVAL_MS,
-  WORKBUDDY_REQUEST_TIMEOUT_MS,
-  WORKBUDDY_SIGN_IN_TIMEOUT_MS,
-  WORKBUDDY_UA_VERSION,
   XAI_ACCESS_TOKEN_CLIENT_SKEW_MS,
   XAI_DEVICE_CODE_DEFAULT_EXPIRES_MS,
   XAI_DEVICE_CODE_DEFAULT_INTERVAL_MS,
@@ -39,9 +34,7 @@ import {
   XAI_TOKEN_REQUEST_TIMEOUT_MS,
   decodeJwtExp,
   generatePkcePair,
-  getWorkBuddySite,
   normalizeAnthropicTokenPayload,
-  normalizeWorkBuddyTokenPayload,
   readJsonBody,
   refreshAntigravityOAuthToken,
   renderDeviceCodeDisplay,
@@ -49,18 +42,16 @@ import {
   runAntigravityOAuthLogin,
   runOpenAiCodexBrowserPkce,
   runOpenAiCodexDeviceCode,
-  sanitizeWorkBuddyDomain,
-  sanitizeWorkBuddyError,
   startCallbackServer,
   validateXAIEndpoint,
   xaiOAuthDiscovery
-} from "./chunk-7KYVUFDG.js";
+} from "./chunk-G3VYRPTV.js";
 import {
   t
-} from "./chunk-SW4S4XYB.js";
+} from "./chunk-2AB2HA4M.js";
 import {
   defaultOpenBrowser
-} from "./chunk-36OMEXXR.js";
+} from "./chunk-DLV3H464.js";
 import "./chunk-TY3TIUJK.js";
 import "./chunk-S73EPYNC.js";
 import "./chunk-ZEZC7IIM.js";
@@ -74,19 +65,30 @@ import {
   detectLocalDevinCredentials,
   extractDevinToken,
   fetchAntigravityCloudCodeCompletion
-} from "./chunk-3C2QLERX.js";
+} from "./chunk-KMDDG73K.js";
 import "./chunk-HNUWUO75.js";
 import "./chunk-5ZUL4CUO.js";
 import "./chunk-5EMSBTQ6.js";
 import "./chunk-I42VC5KR.js";
 import "./chunk-U6VC4MU4.js";
-import "./chunk-JGRPBIZZ.js";
+import "./chunk-FDLDMJTM.js";
+import "./chunk-GLKOYSRU.js";
+import {
+  parseUserIdFromAuthToken
+} from "./chunk-A7GB5UGH.js";
+import "./chunk-OLZBQWZU.js";
+import "./chunk-LCBAMY2M.js";
+import {
+  getProfileOAuthSync,
+  saveProfileOAuthSync
+} from "./chunk-R5GO3YZP.js";
+import "./chunk-SQX235S2.js";
 import {
   asOptionalFiniteNumber
 } from "./chunk-WWC7I6TA.js";
-import "./chunk-SUKSWFLP.js";
-import "./chunk-I2RMFLLH.js";
-import "./chunk-TRW43TSC.js";
+import "./chunk-PIG2IUVZ.js";
+import "./chunk-V7PCFWX3.js";
+import "./chunk-6EQD4AQL.js";
 import "./chunk-5BHQICF2.js";
 import {
   isRecord
@@ -97,20 +99,9 @@ import {
 import {
   toErrorMessage
 } from "./chunk-HNMXYYJR.js";
-import "./chunk-FY4SDK2E.js";
-import "./chunk-GLKOYSRU.js";
-import {
-  parseUserIdFromAuthToken
-} from "./chunk-A7GB5UGH.js";
-import "./chunk-OLZBQWZU.js";
-import "./chunk-LCBAMY2M.js";
 import "./chunk-4SN6J65J.js";
 import "./chunk-CF7PE763.js";
 import "./chunk-G3SUCT4W.js";
-import {
-  getProfileOAuthSync,
-  saveProfileOAuthSync
-} from "./chunk-TNIX77YM.js";
 import "./chunk-CGFNDIKK.js";
 import "./chunk-QSJ3HFEF.js";
 import {
@@ -725,219 +716,6 @@ async function runDevinOAuthLogin(deps = {}) {
   return buildDevinOAuthCredential(token);
 }
 
-// packages/cli/oauth/flows/workbuddy.ts
-import { randomBytes as randomBytes2 } from "node:crypto";
-function validateWorkBuddyAuthUrl(site, authUrlString) {
-  let url;
-  try {
-    url = new URL(authUrlString);
-  } catch {
-    throw new Error(`Invalid WorkBuddy auth URL: "${authUrlString}"`);
-  }
-  if (url.protocol !== "https:") {
-    throw new Error(`WorkBuddy sign-in page must use https:, got ${url.protocol}`);
-  }
-  const hostname = url.hostname.toLowerCase();
-  if (site === "workbuddy") {
-    const isAllowed = hostname === "copilot.tencent.com" || hostname.endsWith(".tencent.com");
-    if (!isAllowed) {
-      throw new Error(`Untrusted authorization host for WorkBuddy: ${hostname}`);
-    }
-  } else if (site === "workbuddy-ai") {
-    const isAllowed = hostname === "www.workbuddy.ai" || hostname === "workbuddy.ai" || hostname.endsWith(".workbuddy.ai");
-    if (!isAllowed) {
-      throw new Error(`Untrusted authorization host for WorkBuddy AI: ${hostname}`);
-    }
-  }
-  return url;
-}
-async function callWorkBuddyApi(siteConfig, method, path, headers, body, fetchImpl) {
-  let response;
-  try {
-    response = await fetchImpl(`${siteConfig.endpoint}${path}`, {
-      method,
-      headers: {
-        "Content-Type": "application/json",
-        Accept: "application/json",
-        "User-Agent": `WorkBuddy/${WORKBUDDY_UA_VERSION}`,
-        ...headers
-      },
-      body: body === void 0 ? void 0 : JSON.stringify(body),
-      signal: AbortSignal.timeout(WORKBUDDY_REQUEST_TIMEOUT_MS)
-    });
-  } catch (error) {
-    throw new Error(
-      sanitizeWorkBuddyError(`${siteConfig.name} API request failed: ${toErrorMessage(error)}`)
-    );
-  }
-  let text = "";
-  try {
-    text = await response.text();
-  } catch {
-  }
-  let env = {};
-  try {
-    env = JSON.parse(text);
-  } catch {
-  }
-  const code = typeof env.code === "number" ? env.code : Number.parseInt(String(env.code ?? ""), 10) || 0;
-  if (!response.ok) {
-    const why = String(env.msg || env.message || text.slice(0, 200) || response.statusText);
-    const err = new Error(
-      sanitizeWorkBuddyError(
-        `${siteConfig.name}: ${why} (HTTP ${response.status}${code ? `, code ${code}` : ""})`
-      )
-    );
-    err.code = code;
-    err.status = response.status;
-    throw err;
-  }
-  if (code !== 0) {
-    const why = String(env.msg || env.message || "error");
-    const err = new Error(
-      sanitizeWorkBuddyError(`${siteConfig.name}: ${why} (${code})`)
-    );
-    err.code = code;
-    err.status = response.status;
-    throw err;
-  }
-  return env.data;
-}
-async function pollWorkBuddyEndpoint(siteConfig, path, headers, retryCodes, deadline, fetchImpl, sleepFn, nowFn) {
-  while (true) {
-    if (nowFn() > deadline) {
-      throw new Error(`${siteConfig.name} sign-in timed out. Please try again.`);
-    }
-    try {
-      const data = await callWorkBuddyApi(siteConfig, "GET", path, headers, void 0, fetchImpl);
-      if (data && typeof data === "object" && Object.keys(data).length > 0) {
-        return data;
-      }
-    } catch (rawError) {
-      const err = rawError;
-      const isRetryable = typeof err.code === "number" && retryCodes.includes(err.code) || err.status === 408 || err.status === 429;
-      if (!isRetryable) {
-        throw rawError;
-      }
-    }
-    await sleepFn(WORKBUDDY_POLL_INTERVAL_MS);
-  }
-}
-async function resolveEnterpriseId(siteConfig, accessToken, domain, who, fetchImpl) {
-  const own = typeof who.enterpriseId === "string" ? who.enterpriseId.trim() : "";
-  if (own) return own;
-  const type = String(who.type ?? "").trim().toLowerCase();
-  if (!type || type === "personal") return "";
-  try {
-    const list = await callWorkBuddyApi(
-      siteConfig,
-      "GET",
-      "/v2/plugin/accounts",
-      {
-        Authorization: `Bearer ${accessToken}`,
-        "X-Domain": domain
-      },
-      void 0,
-      fetchImpl
-    );
-    const mine = (list?.accounts ?? []).filter(
-      (x) => x?.uid === who.uid && typeof x?.enterpriseId === "string" && x.enterpriseId.trim()
-    );
-    const same = mine.filter((x) => String(x.type ?? "").trim().toLowerCase() === type);
-    const last = mine.filter((x) => x.lastLogin);
-    const pick = same.length === 1 ? same[0] : last.length === 1 ? last[0] : mine.length === 1 ? mine[0] : void 0;
-    return pick && typeof pick.enterpriseId === "string" ? pick.enterpriseId.trim() : "";
-  } catch {
-    return "";
-  }
-}
-async function runWorkBuddyOAuthLogin(site, deps = {}) {
-  const siteConfig = getWorkBuddySite(site);
-  const output = deps.output ?? console;
-  const fetchImpl = deps.fetchImpl ?? fetch;
-  const sleepFn = deps.sleep ?? ((ms) => new Promise((resolve) => setTimeout(resolve, ms)));
-  const nowFn = deps.now ?? (() => Date.now());
-  const stateData = await callWorkBuddyApi(
-    siteConfig,
-    "POST",
-    `/v2/plugin/auth/state?platform=${encodeURIComponent(siteConfig.platform)}`,
-    {
-      "X-No-Authorization": "true",
-      "X-No-User-Id": "true",
-      "X-No-Enterprise-Id": "true",
-      "X-No-Department-Info": "true"
-    },
-    {},
-    fetchImpl
-  );
-  if (!stateData?.state || !stateData?.authUrl) {
-    throw new Error(`${siteConfig.name} gave no sign-in page`);
-  }
-  const validatedUrl = validateWorkBuddyAuthUrl(site, stateData.authUrl);
-  validatedUrl.searchParams.set("version", WORKBUDDY_APP_VERSION);
-  validatedUrl.searchParams.set("loginSessionId", randomBytes2(16).toString("hex"));
-  const finalAuthUrl = validatedUrl.toString();
-  output.log(
-    `
-Open this URL in your browser to authorize ${siteConfig.name}:
-${finalAuthUrl}
-
-Waiting for browser authentication...`
-  );
-  if (deps.openBrowser) {
-    try {
-      await deps.openBrowser(finalAuthUrl);
-    } catch {
-    }
-  }
-  const deadline = nowFn() + WORKBUDDY_SIGN_IN_TIMEOUT_MS;
-  const qState = encodeURIComponent(stateData.state);
-  const token = await pollWorkBuddyEndpoint(
-    siteConfig,
-    `/v2/plugin/auth/token?state=${qState}`,
-    {},
-    [11217],
-    deadline,
-    fetchImpl,
-    sleepFn,
-    nowFn
-  );
-  if (typeof token?.accessToken !== "string" || !token.accessToken.trim()) {
-    throw new Error(`${siteConfig.name} sent back no token`);
-  }
-  const defaultHost = new URL(siteConfig.endpoint).host;
-  const tokenDomain = sanitizeWorkBuddyDomain(token.domain, defaultHost);
-  const who = await pollWorkBuddyEndpoint(
-    siteConfig,
-    `/v2/plugin/login/account?state=${qState}`,
-    {
-      Authorization: `Bearer ${token.accessToken}`,
-      "X-Domain": tokenDomain,
-      "X-No-User-Id": "true",
-      "X-No-Enterprise-Id": "true"
-    },
-    [12151],
-    deadline,
-    fetchImpl,
-    sleepFn,
-    nowFn
-  );
-  const enterpriseId = await resolveEnterpriseId(
-    siteConfig,
-    token.accessToken,
-    tokenDomain,
-    who,
-    fetchImpl
-  );
-  const now = nowFn();
-  return normalizeWorkBuddyTokenPayload(site, {
-    ...token,
-    uid: who.uid,
-    nickname: who.nickname || who.phoneNumber,
-    enterpriseId: enterpriseId || who.enterpriseId
-  }, void 0, now);
-}
-
 // packages/cli/oauth/authCommand.ts
 var SYNC_HELP_LINE = `  --sync-to-server     After local save, push the credential to your nolo server and remember this choice.
   --no-sync-to-server  Skip server sync and remember this choice (keeps credentials local only).
@@ -1118,42 +896,6 @@ Options:
 ${SYNC_HELP_LINE}
   --help, -h           Show this help and exit.
 `;
-var WORKBUDDY_HELP_TEXT = `Authorize nolo-cli to call WorkBuddy (China) models via your WorkBuddy account.
-
-This authorizes model API access only. It does NOT log you into the Nolo
-platform. To manage agents, docs, spaces, and other Nolo resources, run
-"nolo login" first.
-
-Usage: nolo auth workbuddy [--browser] [--no-browser] [--sync-to-server] [--help]
-
-The flow opens https://copilot.tencent.com in your browser and polls the login status.
-After approval, tokens are stored in $NOLO_HOME/credentials/workbuddy.json (or ~/.nolo/credentials/workbuddy.json when NOLO_HOME is unset).
-Agents can reference the stored token with apiKeyRef: "workbuddy".
-
-Options:
-  --browser         Open the login URL in your browser automatically (default).
-  --no-browser      Print the login URL without opening a browser.
-${SYNC_HELP_LINE}
-  --help, -h        Show this help and exit.
-`;
-var WORKBUDDY_AI_HELP_TEXT = `Authorize nolo-cli to call WorkBuddy AI (International) models via your WorkBuddy AI account.
-
-This authorizes model API access only. It does NOT log you into the Nolo
-platform. To manage agents, docs, spaces, and other Nolo resources, run
-"nolo login" first.
-
-Usage: nolo auth workbuddy-ai [--browser] [--no-browser] [--sync-to-server] [--help]
-
-The flow opens https://www.workbuddy.ai in your browser and polls the login status.
-After approval, tokens are stored in $NOLO_HOME/credentials/workbuddy-ai.json (or ~/.nolo/credentials/workbuddy-ai.json when NOLO_HOME is unset).
-Agents can reference the stored token with apiKeyRef: "workbuddy-ai".
-
-Options:
-  --browser         Open the login URL in your browser automatically (default).
-  --no-browser      Print the login URL without opening a browser.
-${SYNC_HELP_LINE}
-  --help, -h        Show this help and exit.
-`;
 var HELP_BY_PROVIDER = {
   chatgpt: CHATGPT_HELP_TEXT,
   xai: XAI_HELP_TEXT,
@@ -1161,9 +903,7 @@ var HELP_BY_PROVIDER = {
   claude: CLAUDE_HELP_TEXT,
   cloudflare: CLOUDFLARE_HELP_TEXT,
   cursor: CURSOR_HELP_TEXT,
-  devin: DEVIN_HELP_TEXT,
-  workbuddy: WORKBUDDY_HELP_TEXT,
-  "workbuddy-ai": WORKBUDDY_AI_HELP_TEXT
+  devin: DEVIN_HELP_TEXT
 };
 function markCredentialServerManaged(provider, credential, syncConfig, deps) {
   const output = deps.output ?? console;
@@ -1404,8 +1144,6 @@ async function runAuthProviderCommand(provider, args, _ctx, deps = {}) {
       credential = await runCursorOAuthLogin(flowDeps);
     } else if (provider === "devin") {
       credential = await runDevinOAuthLogin(flowDeps);
-    } else if (provider === "workbuddy" || provider === "workbuddy-ai") {
-      credential = await runWorkBuddyOAuthLogin(provider, flowDeps);
     } else if (provider === "cloudflare") {
       credential = await runCloudflareOAuthLogin({
         ...flowDeps,
@@ -1460,17 +1198,7 @@ async function runAuthProviderCommand(provider, args, _ctx, deps = {}) {
       saveProfileOAuthSync(p, s);
     });
     let shouldSync = false;
-    if (provider === "workbuddy" || provider === "workbuddy-ai") {
-      if (hasExplicitSync) {
-        setOAuthSync(provider, true);
-        shouldSync = true;
-      } else {
-        if (hasExplicitNoSync) {
-          setOAuthSync(provider, false);
-        }
-        shouldSync = false;
-      }
-    } else if (hasExplicitNoSync || envAutoSync === "0") {
+    if (hasExplicitNoSync || envAutoSync === "0") {
       if (hasExplicitNoSync) {
         setOAuthSync(provider, false);
       }
@@ -1568,12 +1296,6 @@ async function runAuthCursorCommand(args, ctx, deps) {
 async function runAuthDevinCommand(args, ctx, deps) {
   return runAuthProviderCommand("devin", args, ctx, deps);
 }
-async function runAuthWorkbuddyCommand(args, ctx, deps) {
-  return runAuthProviderCommand("workbuddy", args, ctx, deps);
-}
-async function runAuthWorkbuddyAiCommand(args, ctx, deps) {
-  return runAuthProviderCommand("workbuddy-ai", args, ctx, deps);
-}
 export {
   resolveServerSyncConfig,
   runAuthAntigravityCommand,
@@ -1583,7 +1305,5 @@ export {
   runAuthCursorCommand,
   runAuthDevinCommand,
   runAuthProviderCommand,
-  runAuthWorkbuddyAiCommand,
-  runAuthWorkbuddyCommand,
   runAuthXaiCommand
 };

package/{authCommands-77CHYBGF.js → authCommands-QOCKVPX3.js}

@@ -7,7 +7,7 @@ import {
   runLogoutCommand,
   runWhoamiCommand,
   saveTokenLogin
-} from "./chunk-36OMEXXR.js";
+} from "./chunk-DLV3H464.js";
 import "./chunk-TY3TIUJK.js";
 import "./chunk-S73EPYNC.js";
 import "./chunk-ZEZC7IIM.js";
@@ -15,17 +15,17 @@ import "./chunk-OW765XBU.js";
 import "./chunk-5EMSBTQ6.js";
 import "./chunk-I42VC5KR.js";
 import "./chunk-U6VC4MU4.js";
-import "./chunk-WWC7I6TA.js";
-import "./chunk-3EUW3WEO.js";
-import "./chunk-FY4SDK2E.js";
+import "./chunk-FDLDMJTM.js";
 import "./chunk-GLKOYSRU.js";
 import "./chunk-A7GB5UGH.js";
 import "./chunk-OLZBQWZU.js";
 import "./chunk-LCBAMY2M.js";
+import "./chunk-R5GO3YZP.js";
+import "./chunk-WWC7I6TA.js";
+import "./chunk-3EUW3WEO.js";
 import "./chunk-4SN6J65J.js";
 import "./chunk-CF7PE763.js";
 import "./chunk-G3SUCT4W.js";
-import "./chunk-TNIX77YM.js";
 import "./chunk-4VNS5WPM.js";
 export {
   LOGIN_HELP_TEXT,

package/{builtinSkillRegistry-A6VSPJEJ.js → builtinSkillRegistry-LJV7FHNI.js}

@@ -7,11 +7,12 @@ import {
   resolveBuiltinSkillEntry,
   resolveBuiltinSkillPage,
   resolveBuiltinSkillSlug
-} from "./chunk-4Z245KOA.js";
-import "./chunk-JZX2XLKC.js";
+} from "./chunk-SH3XD4E2.js";
+import "./chunk-YCRROBDY.js";
 import "./chunk-EUGTFFO6.js";
-import "./chunk-XETG4RIX.js";
+import "./chunk-AETZ7AD6.js";
 import "./chunk-Y6ORVLSS.js";
+import "./chunk-KHCLMKZZ.js";
 import "./chunk-5EBLANFT.js";
 import "./chunk-NYYFIKHI.js";
 import "./chunk-LOEO7LRC.js";
@@ -22,7 +23,6 @@ import "./chunk-U6VC4MU4.js";
 import "./chunk-WWC7I6TA.js";
 import "./chunk-3EUW3WEO.js";
 import "./chunk-G3SUCT4W.js";
-import "./chunk-KHCLMKZZ.js";
 import "./chunk-4VNS5WPM.js";
 export {
   CAPABILITY_SLUG_COLLISIONS,

package/{chromeCommands-OBBNJCLS.js → chromeCommands-IY4NVSXZ.js}

@@ -22,7 +22,7 @@ import { resolve as resolve2 } from "node:path";
 // packages/desktop-chrome-connector/nativeHostInstall.mjs
 import { chmodSync, existsSync, mkdirSync, readFileSync, statSync, writeFileSync } from "node:fs";
 import { createHash, randomBytes } from "node:crypto";
-import { dirname, resolve } from "node:path";
+import { dirname, isAbsolute, resolve } from "node:path";
 import { execFileSync } from "node:child_process";
 import { fileURLToPath } from "node:url";
 var DEFAULT_CONNECTOR_ROOT = dirname(fileURLToPath(import.meta.url));
@@ -34,15 +34,22 @@ function extensionIdFromPublicKey(publicKeyBase64) {
     (byte) => `${String.fromCharCode(97 + (byte >> 4))}${String.fromCharCode(97 + (byte & 15))}`
   ).join("");
 }
-function resolveNodePath() {
-  if (typeof Bun !== "undefined" && typeof Bun.which === "function") {
-    const bunResolvedNode = Bun.which("node");
-    if (bunResolvedNode) return bunResolvedNode;
+function resolveNativeHostRuntimePath({ env = process.env } = {}) {
+  for (const runtime of ["bun", "node"]) {
+    try {
+      const output = execFileSync("/usr/bin/env", [
+        runtime,
+        "-e",
+        "console.log(JSON.stringify({execPath:process.execPath,bun:process.versions.bun,node:process.versions.node}))"
+      ], { env, encoding: "utf8", timeout: 5e3, stdio: ["ignore", "pipe", "pipe"] });
+      const probe = JSON.parse(output.trim());
+      if (isAbsolute(probe.execPath) && (runtime === "bun" ? probe.bun : probe.node && !probe.bun)) {
+        return probe.execPath;
+      }
+    } catch {
+    }
   }
-  const resolved = execFileSync("/usr/bin/env", ["node", "-p", "process.execPath"], {
-    encoding: "utf8"
-  }).trim();
-  return resolved || "node";
+  throw new Error("Native host requires a standalone Bun executable (preferred) or Node.js on PATH; install Bun or pass nodePath explicitly.");
 }
 function nativeMessagingHostsDir({
   home = process.env.HOME || "",
@@ -114,7 +121,7 @@ function installNativeHostManifest({
   const manifest = JSON.parse(readFileSync(paths.templatePath, "utf8"));
   const extensionManifest = JSON.parse(readFileSync(paths.extensionManifestPath, "utf8"));
   const resolvedExtensionId = extensionId || (browser === "firefox" ? FIREFOX_EXTENSION_ID : extensionIdFromPublicKey(extensionManifest.key));
-  const resolvedNodePath = nodePath || resolveNodePath();
+  const resolvedNodePath = nodePath || resolveNativeHostRuntimePath();
   mkdirSync(paths.supportDir, { recursive: true });
   const existingToken = existsSync(paths.tokenPath) ? readFileSync(paths.tokenPath, "utf8").trim() : "";
   const token = existingToken || randomBytes(32).toString("hex");