nolo-cli 0.29.1 → 0.30.0-alpha.1

package/chunk-5CS33IBL.js

@@ -1,301 +0,0 @@
-import {
-  getCredentialsDir
-} from "./chunk-JZPBVBIY.js";
-import {
-  asNonEmptyStringArray
-} from "./chunk-I42VC5KR.js";
-import {
-  asTrimmedString
-} from "./chunk-3EUW3WEO.js";
-import {
-  asOptionalPositiveFiniteNumber
-} from "./chunk-U6VC4MU4.js";
-import {
-  isRecord
-} from "./chunk-KUG52IAP.js";
-
-// packages/agent-runtime/fileCredentialBroker.ts
-import {
-  chmodSync,
-  existsSync,
-  mkdirSync,
-  readFileSync,
-  unlinkSync,
-  writeFileSync
-} from "node:fs";
-import { homedir } from "node:os";
-import { join } from "node:path";
-
-// packages/agent-runtime/credentialBroker.ts
-function assertCredentialRef(ref) {
-  const trimmed = asTrimmedString(ref);
-  if (!trimmed) {
-    throw new Error("invalid_ref");
-  }
-  if (trimmed.includes("..") || trimmed.includes("/") || trimmed.includes("\\")) {
-    throw new Error("invalid_ref");
-  }
-  return trimmed;
-}
-
-// packages/agent-runtime/fileCredentialBroker.ts
-function getApiKeyCredentialsDir(homeDir = homedir()) {
-  return join(getCredentialsDir(homeDir), "keys");
-}
-function credentialRefToFileName(ref) {
-  const safe = assertCredentialRef(ref).replace(/[^a-zA-Z0-9._-]+/g, "_");
-  if (!safe || safe === "." || safe === "..") {
-    throw new Error(`Credential ref is not filesystem-safe: ${ref}`);
-  }
-  return `${safe}.json`;
-}
-function getApiKeyCredentialPath(ref, homeDir = homedir()) {
-  return join(getApiKeyCredentialsDir(homeDir), credentialRefToFileName(ref));
-}
-function ensurePrivateDir(dir) {
-  mkdirSync(dir, { recursive: true, mode: 448 });
-  try {
-    chmodSync(dir, 448);
-  } catch {
-  }
-}
-function writePrivateFile(path, body) {
-  writeFileSync(path, body, { encoding: "utf8", mode: 384 });
-  try {
-    chmodSync(path, 384);
-  } catch {
-  }
-}
-function readApiKeyCredential(ref, homeDir = homedir()) {
-  const path = getApiKeyCredentialPath(ref, homeDir);
-  if (!existsSync(path)) return null;
-  try {
-    const raw = readFileSync(path, "utf8");
-    const parsed = JSON.parse(raw);
-    if (typeof parsed?.secret !== "string" || !parsed.secret) return null;
-    return parsed.secret;
-  } catch {
-    return null;
-  }
-}
-function writeApiKeyCredential(ref, secret, homeDir = homedir(), now = Date.now()) {
-  const trimmedSecret = secret.trim();
-  if (!trimmedSecret) {
-    throw new Error("Cannot store an empty credential secret.");
-  }
-  assertCredentialRef(ref);
-  const dir = getApiKeyCredentialsDir(homeDir);
-  ensurePrivateDir(dir);
-  const path = getApiKeyCredentialPath(ref, homeDir);
-  const payload = {
-    secret: trimmedSecret,
-    updatedAt: now
-  };
-  writePrivateFile(path, `${JSON.stringify(payload, null, 2)}
-`);
-}
-function removeApiKeyCredential(ref, homeDir = homedir()) {
-  assertCredentialRef(ref);
-  const path = getApiKeyCredentialPath(ref, homeDir);
-  if (!existsSync(path)) return;
-  unlinkSync(path);
-}
-function hasApiKeyCredential(ref, homeDir = homedir()) {
-  return readApiKeyCredential(ref, homeDir) !== null;
-}
-function createFileCredentialBroker(options = {}) {
-  const homeDir = options.homeDir ?? homedir();
-  const now = options.now ?? Date.now;
-  return {
-    get(ref) {
-      return readApiKeyCredential(ref, homeDir);
-    },
-    put(ref, secret) {
-      writeApiKeyCredential(ref, secret, homeDir, now());
-    },
-    delete(ref) {
-      removeApiKeyCredential(ref, homeDir);
-    },
-    has(ref) {
-      return hasApiKeyCredential(ref, homeDir);
-    }
-  };
-}
-
-// packages/agent-runtime/migrateAgentSecrets.ts
-function buildAgentApiKeyCredentialRef(agentKey) {
-  const key = asTrimmedString(agentKey);
-  if (!key) throw new Error("agentKey is required to build a credential ref.");
-  return `api-key:${key}`;
-}
-function readRawApiKey(agent) {
-  return asTrimmedString(agent.apiKey);
-}
-function resolveTargetRef(agent) {
-  const fromCredential = asTrimmedString(agent.credentialRef);
-  if (fromCredential) return fromCredential;
-  const fromApiKeyRef = asTrimmedString(agent.apiKeyRef);
-  if (fromApiKeyRef.startsWith("api-key:")) return fromApiKeyRef;
-  return buildAgentApiKeyCredentialRef(agent.key);
-}
-async function brokerHas(broker, ref) {
-  return Boolean(await broker.has(ref));
-}
-async function brokerPut(broker, ref, secret) {
-  await broker.put(ref, secret);
-}
-async function migrateAgentSecrets(args) {
-  const { agent, broker } = args;
-  const raw = readRawApiKey(agent);
-  const migration = asTrimmedString(agent.credentialMigration);
-  if (migration === "done" && !raw) {
-    const ref = typeof agent.credentialRef === "string" && agent.credentialRef.trim() || (typeof agent.apiKeyRef === "string" && agent.apiKeyRef.startsWith("api-key:") ? agent.apiKeyRef.trim() : "") || void 0;
-    return {
-      updates: {},
-      status: "already-done",
-      ...ref ? { credentialRef: ref } : {},
-      phase: "complete"
-    };
-  }
-  if (!raw && migration !== "pending") {
-    return { updates: {}, status: "noop", phase: "none" };
-  }
-  const targetRef = resolveTargetRef(agent);
-  if (raw) {
-    await brokerPut(broker, targetRef, raw);
-    const stored2 = await brokerHas(broker, targetRef);
-    if (!stored2) {
-      return {
-        updates: {
-          credentialRef: targetRef,
-          credentialMigration: "pending"
-        },
-        status: "resumed-pending",
-        credentialRef: targetRef,
-        phase: "put"
-      };
-    }
-    return {
-      updates: {
-        apiKey: null,
-        credentialRef: targetRef,
-        // Keep apiKeyRef for resolution if not already an OAuth provider name.
-        // Prefer explicit credentialRef; set apiKeyRef only when empty so OAuth agents stay intact.
-        ...!(typeof agent.apiKeyRef === "string" && agent.apiKeyRef.trim()) ? { apiKeyRef: targetRef } : {},
-        credentialMigration: "done"
-      },
-      status: migration === "pending" ? "resumed-pending" : "migrated",
-      credentialRef: targetRef,
-      phase: "strip"
-    };
-  }
-  const stored = await brokerHas(broker, targetRef);
-  if (stored) {
-    return {
-      updates: {
-        credentialRef: targetRef,
-        credentialMigration: "done",
-        ...!(typeof agent.apiKeyRef === "string" && agent.apiKeyRef.trim()) ? { apiKeyRef: targetRef } : {}
-      },
-      status: "resumed-pending",
-      credentialRef: targetRef,
-      phase: "complete"
-    };
-  }
-  return {
-    updates: {
-      credentialRef: targetRef,
-      credentialMigration: "pending"
-    },
-    status: "awaiting-secret",
-    credentialRef: targetRef,
-    phase: "put"
-  };
-}
-function applyAgentSecretMigrationUpdates(record, updates) {
-  const next = { ...record };
-  if ("apiKey" in updates) {
-    if (updates.apiKey === null || updates.apiKey === "") {
-      delete next.apiKey;
-    } else if (typeof updates.apiKey === "string") {
-      next.apiKey = updates.apiKey;
-    }
-  }
-  if (updates.apiKeyRef !== void 0) next.apiKeyRef = updates.apiKeyRef;
-  if (updates.credentialRef !== void 0) next.credentialRef = updates.credentialRef;
-  if (updates.credentialMigration !== void 0) {
-    next.credentialMigration = updates.credentialMigration;
-  }
-  return next;
-}
-
-// packages/agent-runtime/runtimeToolPolicy.ts
-function unique(values) {
-  return [...new Set(values)];
-}
-function normalizeAgentRuntimeToolPolicy(value) {
-  if (!isRecord(value)) return void 0;
-  return {
-    version: 1,
-    ...asNonEmptyStringArray(value.agentTools).length ? { agentTools: unique(asNonEmptyStringArray(value.agentTools)) } : {},
-    ...asNonEmptyStringArray(value.runtimeTools).length ? { runtimeTools: unique(asNonEmptyStringArray(value.runtimeTools)) } : {},
-    ...isRecord(value.workspace) ? { workspace: { ...value.workspace } } : {},
-    ...isRecord(value.shell) ? { shell: { ...value.shell } } : {},
-    ...isRecord(value.isolation) ? { isolation: { ...value.isolation } } : {},
-    ...isRecord(value.git) ? { git: { ...value.git } } : {},
-    ...isRecord(value.budget) ? { budget: { ...value.budget } } : {},
-    ...isRecord(value.audit) ? { audit: { ...value.audit } } : {}
-  };
-}
-function runtimeBindingRecord(runtimeBinding) {
-  return isRecord(runtimeBinding) ? runtimeBinding : void 0;
-}
-function runtimeToolNamesFromPolicy(policy) {
-  return asNonEmptyStringArray(policy?.runtimeTools);
-}
-function readPositiveNumber(value) {
-  return asOptionalPositiveFiniteNumber(Number(value));
-}
-function resolveRequestedRuntimeToolNames(args) {
-  const runtimeBinding = runtimeBindingRecord(args.agentConfig.runtimeBinding);
-  const bindingPolicy = normalizeAgentRuntimeToolPolicy(
-    runtimeBinding?.runtimeToolPolicy
-  );
-  const bindingSnapshotPolicy = normalizeAgentRuntimeToolPolicy(
-    runtimeBinding?.runtimeToolPolicySnapshot
-  );
-  return unique([
-    ...asNonEmptyStringArray(args.agentConfig.toolNames),
-    ...runtimeToolNamesFromPolicy(
-      normalizeAgentRuntimeToolPolicy(args.agentConfig.runtimeToolPolicy)
-    ),
-    ...runtimeToolNamesFromPolicy(bindingPolicy),
-    ...runtimeToolNamesFromPolicy(bindingSnapshotPolicy)
-  ]);
-}
-function resolveCurrentRunRuntimeToolPolicy(agentConfig) {
-  const runtimeBinding = runtimeBindingRecord(agentConfig?.runtimeBinding);
-  return normalizeAgentRuntimeToolPolicy(
-    runtimeBinding?.runtimeToolPolicySnapshot ?? agentConfig?.runtimeToolPolicy ?? runtimeBinding?.runtimeToolPolicy
-  );
-}
-function resolveLocalRuntimeEnvFromPolicy(runtimeEnv, policy) {
-  return { ...runtimeEnv };
-}
-function resolveLocalWorkspaceExecutorOptionsFromPolicy(policy) {
-  const maxOutputBytes = readPositiveNumber(policy?.shell?.maxOutputBytes);
-  return {
-    ...maxOutputBytes ? { commandOutputLimit: Math.floor(maxOutputBytes) } : {}
-  };
-}
-
-export {
-  createFileCredentialBroker,
-  migrateAgentSecrets,
-  applyAgentSecretMigrationUpdates,
-  normalizeAgentRuntimeToolPolicy,
-  resolveRequestedRuntimeToolNames,
-  resolveCurrentRunRuntimeToolPolicy,
-  resolveLocalRuntimeEnvFromPolicy,
-  resolveLocalWorkspaceExecutorOptionsFromPolicy
-};

package/chunk-5MMAK75Q.js

@@ -1,15 +0,0 @@
-import {
-  compactWhitespace
-} from "./chunk-DWLEOOGR.js";
-
-// packages/core/clipCompactText.ts
-function clipCompactText(value, max, ellipsis = "...") {
-  const compact = compactWhitespace(value);
-  if (compact.length <= max) return compact;
-  if (max <= ellipsis.length) return compact.slice(0, max);
-  return `${compact.slice(0, max - ellipsis.length)}${ellipsis}`;
-}
-
-export {
-  clipCompactText
-};

package/chunk-MRC4Q34M.js

@@ -1,188 +0,0 @@
-import {
-  API_VERSION
-} from "./chunk-LCBAMY2M.js";
-
-// packages/auth/routes.ts
-var authRoutes = {
-  login: {
-    path: `${API_VERSION}/users/login`,
-    method: "POST",
-    createPath: () => `${API_VERSION}/users/login`
-  },
-  signup: {
-    path: `${API_VERSION}/users/signup`,
-    method: "POST",
-    createPath: () => `${API_VERSION}/users/signup`
-  },
-  users: {
-    cliLoginStart: {
-      path: `${API_VERSION}/users/cli-login/start`,
-      method: "POST",
-      createPath: () => `${API_VERSION}/users/cli-login/start`
-    },
-    cliLoginAuthorize: {
-      path: `${API_VERSION}/users/cli-login/authorize`,
-      method: "POST",
-      createPath: () => `${API_VERSION}/users/cli-login/authorize`
-    },
-    cliLoginPoll: {
-      path: `${API_VERSION}/users/cli-login/poll`,
-      method: "POST",
-      createPath: () => `${API_VERSION}/users/cli-login/poll`
-    },
-    list: {
-      path: `${API_VERSION}/users`,
-      method: "GET",
-      createPath: () => `${API_VERSION}/users`
-    },
-    usageReport: {
-      path: `${API_VERSION}/users/usage-report`,
-      method: "GET",
-      createPath: () => `${API_VERSION}/users/usage-report`
-    },
-    growthReport: {
-      path: `${API_VERSION}/users/growth-report`,
-      method: "GET",
-      createPath: () => `${API_VERSION}/users/growth-report`
-    },
-    providerBillingHealth: {
-      path: `${API_VERSION}/users/provider-billing-health`,
-      method: "GET",
-      createPath: () => `${API_VERSION}/users/provider-billing-health`
-    },
-    providerBillingDrilldown: {
-      path: `${API_VERSION}/users/provider-billing-drilldown`,
-      method: "GET",
-      createPath: () => `${API_VERSION}/users/provider-billing-drilldown`
-    },
-    providerCredentials: {
-      path: `${API_VERSION}/users/provider-credentials`,
-      method: "GET",
-      createPath: () => `${API_VERSION}/users/provider-credentials`
-    },
-    providerCredentialLifecycle: {
-      path: `${API_VERSION}/users/provider-credentials/lifecycle`,
-      method: "POST",
-      createPath: () => `${API_VERSION}/users/provider-credentials/lifecycle`
-    },
-    billingAnomalyLifecycle: {
-      path: `${API_VERSION}/users/billing-anomalies/lifecycle`,
-      method: "POST",
-      createPath: () => `${API_VERSION}/users/billing-anomalies/lifecycle`
-    },
-    billingAnomalyDrilldown: {
-      path: `${API_VERSION}/users/billing-anomalies/drilldown`,
-      method: "GET",
-      createPath: () => `${API_VERSION}/users/billing-anomalies/drilldown`
-    },
-    billingAnomalyAudit: {
-      path: `${API_VERSION}/users/billing-anomalies/audit`,
-      method: "POST",
-      createPath: () => `${API_VERSION}/users/billing-anomalies/audit`
-    },
-    detail: {
-      path: `${API_VERSION}/users/:userId`,
-      method: "GET",
-      createPath: (params) => `${API_VERSION}/users/${params.userId}`
-    },
-    sessionRevoke: {
-      path: `${API_VERSION}/users/session-revoke`,
-      method: "POST",
-      createPath: () => `${API_VERSION}/users/session-revoke`
-    },
-    transfer: {
-      path: `${API_VERSION}/users/:userId/transfer`,
-      method: "POST",
-      createPath: (params) => `${API_VERSION}/users/${params.userId}/transfer`
-    },
-    delete: {
-      path: `${API_VERSION}/users/:userId`,
-      method: "DELETE",
-      createPath: (params) => `${API_VERSION}/users/${params.userId}`
-    },
-    disable: {
-      path: `${API_VERSION}/users/:userId/disable`,
-      method: "POST",
-      createPath: (params) => `${API_VERSION}/users/${params.userId}/disable`
-    },
-    enable: {
-      path: `${API_VERSION}/users/:userId/enable`,
-      method: "POST",
-      createPath: (params) => `${API_VERSION}/users/${params.userId}/enable`
-    },
-    adminPermissions: {
-      path: `${API_VERSION}/users/:userId/admin-permissions`,
-      method: "POST",
-      createPath: (params) => `${API_VERSION}/users/${params.userId}/admin-permissions`
-    },
-    sendEmail: {
-      path: `${API_VERSION}/users/send-email`,
-      method: "POST",
-      createPath: () => `${API_VERSION}/users/send-email`
-    },
-    spaceInvite: {
-      path: `${API_VERSION}/users/space-invite`,
-      method: "POST",
-      createPath: () => `${API_VERSION}/users/space-invite`
-    },
-    spaceInviteStatus: {
-      path: `${API_VERSION}/users/space-invite/status`,
-      method: "GET",
-      createPath: () => `${API_VERSION}/users/space-invite/status`
-    },
-    spaceInviteAccept: {
-      path: `${API_VERSION}/users/space-invite/accept`,
-      method: "POST",
-      createPath: () => `${API_VERSION}/users/space-invite/accept`
-    },
-    emailPreferencesGet: {
-      path: `${API_VERSION}/users/email-preferences`,
-      method: "GET",
-      createPath: () => `${API_VERSION}/users/email-preferences`
-    },
-    emailPreferencesUpdate: {
-      path: `${API_VERSION}/users/email-preferences`,
-      method: "POST",
-      createPath: () => `${API_VERSION}/users/email-preferences`
-    },
-    emailReport: {
-      path: `${API_VERSION}/users/email-report`,
-      method: "GET",
-      createPath: () => `${API_VERSION}/users/email-report`
-    },
-    emailRetryRun: {
-      path: `${API_VERSION}/users/email-retry/run`,
-      method: "POST",
-      createPath: () => `${API_VERSION}/users/email-retry/run`
-    },
-    emailReplayFailures: {
-      path: `${API_VERSION}/users/email-replay-failures`,
-      method: "POST",
-      createPath: () => `${API_VERSION}/users/email-replay-failures`
-    },
-    emailConfigGet: {
-      path: `${API_VERSION}/users/email-config`,
-      method: "GET",
-      createPath: () => `${API_VERSION}/users/email-config`
-    },
-    emailConfigUpdate: {
-      path: `${API_VERSION}/users/email-config`,
-      method: "POST",
-      createPath: () => `${API_VERSION}/users/email-config`
-    },
-    emailUnsubscribe: {
-      path: `${API_VERSION}/users/email-unsubscribe`,
-      method: "GET",
-      createPath: () => `${API_VERSION}/users/email-unsubscribe`
-    },
-    rechargeHistory: {
-      path: `${API_VERSION}/users/:userId/recharge-history`,
-      method: "POST",
-      createPath: (params) => `${API_VERSION}/users/${params.userId}/recharge-history`
-    }
-  }
-};
-
-export {
-  authRoutes
-};