nolo-cli 0.8.0 → 0.9.0

package/chunk-EXTIQUCI.js

@@ -0,0 +1,482 @@
+import {
+  resolveMachineId
+} from "./chunk-6HYVJV7B.js";
+import {
+  buildCliRuntimeEnv,
+  clearProfileAuthToken,
+  getCurrentProfile,
+  getDefaultProfileConfigPath,
+  loadProfileConfig,
+  saveDefaultProfile
+} from "./chunk-ROWQEJRP.js";
+import {
+  resolveAuthTokenFromEnv
+} from "./chunk-ISNCLGUZ.js";
+import {
+  DEFAULT_NOLO_SERVER_URL
+} from "./chunk-OLZBQWZU.js";
+import {
+  getDefaultCliLocalRuntimeDb
+} from "./chunk-H33743XH.js";
+import {
+  createMemoryKey,
+  createMemoryOwnerIndexKey,
+  createMemorySubjectKindIndexKey,
+  memoryOwnerRange
+} from "./chunk-SH2CFQOH.js";
+import {
+  asTrimmedNonEmptyStringArray
+} from "./chunk-I42VC5KR.js";
+import {
+  asTrimmedString
+} from "./chunk-3EUW3WEO.js";
+import {
+  normalizeServerOrigin
+} from "./chunk-CF7PE763.js";
+
+// packages/cli/authCommands.ts
+import { createInterface } from "node:readline/promises";
+import { stdin as input, stdout as output } from "node:process";
+import { spawn } from "node:child_process";
+
+// packages/ai/memory/delete.ts
+var normalizeSet = (values) => {
+  if (!Array.isArray(values) || values.length === 0) return null;
+  const normalized = asTrimmedNonEmptyStringArray(values);
+  return normalized.length > 0 ? new Set(normalized) : null;
+};
+var matchesFilters = (item, filters) => {
+  const idSet = normalizeSet(filters.ids);
+  if (idSet && !idSet.has(item.id)) return false;
+  const kindSet = normalizeSet(filters.kinds);
+  if (kindSet && !kindSet.has(item.kind)) return false;
+  const facetSet = normalizeSet(filters.facets);
+  if (facetSet && (!item.facet || !facetSet.has(item.facet))) return false;
+  if (filters.subjectType && item.subjectType !== filters.subjectType) return false;
+  if (filters.subjectId && item.subjectId !== filters.subjectId) return false;
+  const prefix = asTrimmedString(filters.patternKeyPrefix);
+  if (prefix && !(item.patternKey ?? "").startsWith(prefix)) return false;
+  if (filters.sourceDialogId && item.sourceDialogId !== filters.sourceDialogId) {
+    return false;
+  }
+  const tagSet = normalizeSet(filters.tags);
+  if (tagSet) {
+    const itemTags = new Set(asTrimmedNonEmptyStringArray(item.tags));
+    for (const tag of tagSet) {
+      if (!itemTags.has(tag)) return false;
+    }
+  }
+  return true;
+};
+var deleteMemoryItemWithIndexesInBatch = (batch, item) => {
+  batch.del(createMemoryKey(item.ownerType, item.ownerId, item.id));
+  batch.del(
+    createMemoryOwnerIndexKey(
+      item.ownerType,
+      item.ownerId,
+      item.createdAt,
+      item.id
+    )
+  );
+  batch.del(
+    createMemorySubjectKindIndexKey(
+      item.subjectType,
+      item.subjectId,
+      item.kind,
+      item.createdAt,
+      item.id
+    )
+  );
+};
+var deleteMemoriesForOwnerFromDb = async (db, owner, filters = {}) => {
+  const range = memoryOwnerRange(owner.ownerType, owner.ownerId);
+  const matchedItems = [];
+  const limit = typeof filters.limit === "number" && filters.limit > 0 ? filters.limit : Number.POSITIVE_INFINITY;
+  for await (const [, value] of db.iterator({
+    gte: range.start,
+    lte: range.end,
+    reverse: true
+  })) {
+    const memoryId = typeof value?.memoryId === "string" ? value.memoryId : "";
+    if (!memoryId) continue;
+    const item = await db.get(createMemoryKey(owner.ownerType, owner.ownerId, memoryId)).catch(() => null);
+    if (!item) continue;
+    if (!matchesFilters(item, filters)) continue;
+    matchedItems.push(item);
+    if (matchedItems.length >= limit) break;
+  }
+  if (matchedItems.length === 0) {
+    return { deletedCount: 0, deletedIds: [], matchedItems: [] };
+  }
+  const batch = db.batch();
+  for (const item of matchedItems) {
+    deleteMemoryItemWithIndexesInBatch(batch, item);
+  }
+  await batch.write();
+  return {
+    deletedCount: matchedItems.length,
+    deletedIds: matchedItems.map((item) => item.id),
+    matchedItems
+  };
+};
+
+// packages/cli/client/memoryRekey.ts
+async function scanLocalMemoryItems(localDb, machineId) {
+  const range = memoryOwnerRange("user", machineId);
+  const refs = [];
+  for await (const [, value] of localDb.iterator({
+    gte: range.start,
+    lte: range.end,
+    reverse: true
+  })) {
+    refs.push(value ?? {});
+  }
+  const items = await Promise.all(
+    refs.map(
+      (ref) => typeof ref?.memoryId === "string" ? localDb.get(createMemoryKey("user", machineId, ref.memoryId)).catch(() => null) : Promise.resolve(null)
+    )
+  );
+  return items.filter((item) => !!item);
+}
+async function performLocalMemoryRekey(args) {
+  const { localDb, authToken, serverUrl, machineId } = args;
+  const fetchImpl = args.fetchImpl ?? fetch;
+  const items = await scanLocalMemoryItems(localDb, machineId);
+  if (items.length === 0) {
+    return { migrated: 0, merged: 0 };
+  }
+  const snapshotIds = items.map((item) => item.id);
+  const response = await fetchImpl(`${serverUrl}/api/memory/rekey`, {
+    method: "POST",
+    headers: {
+      Authorization: `Bearer ${authToken}`,
+      "Content-Type": "application/json"
+    },
+    body: JSON.stringify({ items }),
+    signal: AbortSignal?.timeout?.(3e4)
+  }).catch((e) => {
+    if (e?.name === "TimeoutError" || e?.name === "AbortError") {
+      throw new Error("memory rekey upload timed out (30s)");
+    }
+    throw e;
+  });
+  if (!response.ok) {
+    let detail = "";
+    try {
+      const body2 = await response.json();
+      detail = body2?.error?.message ?? "";
+    } catch {
+    }
+    throw new Error(
+      `memory rekey upload failed (HTTP ${response.status})${detail ? `: ${detail}` : ""}`
+    );
+  }
+  const body = await response.json().catch(() => ({}));
+  const migrated = typeof body?.migratedCount === "number" ? body.migratedCount : 0;
+  const merged = typeof body?.mergedCount === "number" ? body.mergedCount : 0;
+  await deleteMemoriesForOwnerFromDb(
+    localDb,
+    { ownerType: "user", ownerId: machineId },
+    { ids: snapshotIds }
+  );
+  return { migrated, merged };
+}
+
+// packages/cli/authCommands.ts
+var LOGIN_HELP_TEXT = `Log in to Nolo and save a local profile.
+
+Usage:
+  nolo login [--server <url>] [--no-browser] [--token <jwt>] [--manual]
+
+Options:
+  --server <url>   Nolo server URL (default: ${DEFAULT_NOLO_SERVER_URL})
+  --no-browser     Print the authorization URL instead of opening a browser
+  --token <jwt>    Save a token directly without browser authorization
+  --manual         Prompt to paste a token interactively
+
+By default, opens the Nolo website and polls until authorization completes.
+In SSH sessions, use --no-browser and open the printed URL on a machine with a browser
+where you are already logged into Nolo.
+
+Note: nolo login only authorizes your Nolo platform account. To let your agents
+call third-party models using your own subscriptions, you also need:
+  nolo auth antigravity   # Google Antigravity (Gemini 3, Claude, GPT-OSS)
+  nolo auth claude        # Claude Pro/Max
+  nolo auth chatgpt       # ChatGPT Plus / OpenAI Codex
+  nolo auth xai           # xAI Grok (SuperGrok)
+  nolo auth cloudflare    # Cloudflare OAuth (email routing, etc.)
+See "nolo auth <provider> --help" for details.
+`;
+var LOGOUT_HELP_TEXT = `Log out of Nolo by clearing the saved auth token.
+
+Usage:
+  nolo logout
+
+Keeps other profile settings such as server URL and default agent preferences.
+Does not unset AUTH_TOKEN or other auth-related environment variables.
+`;
+var WHOAMI_HELP_TEXT = `Show the current login state.
+
+Usage:
+  nolo whoami
+`;
+function wantsHelp(args) {
+  return args.includes("--help") || args.includes("-h");
+}
+function formatDuration(ms) {
+  const totalSec = Math.max(0, Math.ceil(ms / 1e3));
+  const minutes = Math.floor(totalSec / 60);
+  const seconds = totalSec % 60;
+  if (minutes > 0) return `${minutes}m ${seconds}s`;
+  return `${seconds}s`;
+}
+function formatTokenPreview(token) {
+  const trimmed = token.trim();
+  if (!trimmed) return "";
+  return `${trimmed.slice(0, 8)}...`;
+}
+function getArg(args, flag) {
+  const index = args.indexOf(flag);
+  return index >= 0 ? args[index + 1] : void 0;
+}
+var postJson = async (fetchImpl, url, body) => fetchImpl(url, {
+  method: "POST",
+  headers: { "Content-Type": "application/json" },
+  body: JSON.stringify(body)
+});
+var defaultSleep = (ms) => new Promise((resolve) => setTimeout(resolve, ms));
+var defaultOpenBrowser = async (url) => {
+  const command = process.platform === "darwin" ? "open" : process.platform === "win32" ? "cmd" : "xdg-open";
+  const args = process.platform === "win32" ? ["/c", "start", "", url.replace(/&/g, "^&")] : [url];
+  try {
+    const child = spawn(command, args, {
+      detached: true,
+      stdio: "ignore"
+    });
+    child.unref();
+    return true;
+  } catch {
+    return false;
+  }
+};
+async function saveTokenLogin(args) {
+  if (!args.authToken.trim()) {
+    args.error.error("No auth token provided.");
+    return 1;
+  }
+  saveDefaultProfile(args.configPath, {
+    serverUrl: args.serverUrl,
+    authToken: args.authToken.trim()
+  });
+  args.output.log(`Saved profile default -> ${args.serverUrl}`);
+  try {
+    const localDb = await getDefaultCliLocalRuntimeDb();
+    const machineId = resolveMachineId();
+    const result = await performLocalMemoryRekey({
+      localDb,
+      authToken: args.authToken.trim(),
+      serverUrl: args.serverUrl,
+      machineId
+    });
+    if (result.migrated > 0 || result.merged > 0) {
+      args.output.log(
+        `[nolo] Migrated ${result.migrated} local memor${result.migrated === 1 ? "y" : "ies"} to your account` + (result.merged > 0 ? ` (${result.merged} merged with existing)` : "") + "."
+      );
+    }
+  } catch (error) {
+    args.error.error(
+      `[nolo] Local memory migration skipped: ${error instanceof Error ? error.message : String(error)}`
+    );
+  }
+  return 0;
+}
+async function runWebLogin(args) {
+  const startResponse = await postJson(
+    args.fetchImpl,
+    `${args.serverUrl}/api/v1/users/cli-login/start`,
+    { clientName: "nolo-cli" }
+  );
+  const start = await startResponse.json().catch(() => ({}));
+  if (!startResponse.ok || !start?.deviceCode || !start?.verificationUriComplete) {
+    args.error.error(
+      `Failed to start web login (${startResponse.status}). Use --token to paste a token manually.`
+    );
+    return 1;
+  }
+  args.output.log("Open this URL to authorize nolo-cli:");
+  args.output.log(start.verificationUriComplete);
+  args.output.log(`Code: ${start.userCode}`);
+  if (!args.noBrowser) {
+    const opened = await args.openBrowser(start.verificationUriComplete);
+    if (!opened) {
+      args.output.log("Could not open a browser automatically. Paste the URL above.");
+    }
+  }
+  const intervalMs = Math.max(1, Number(start.interval) || 2) * 1e3;
+  const timeoutMs = Math.max(1, Number(start.expiresIn) || 600) * 1e3;
+  const deadline = args.now() + timeoutMs;
+  const statusLogIntervalMs = 15e3;
+  let lastStatusLogAt = 0;
+  args.output.log(
+    `[nolo] Waiting for browser authorization (${formatDuration(timeoutMs)} remaining)...`
+  );
+  while (args.now() <= deadline) {
+    const pollResponse = await postJson(
+      args.fetchImpl,
+      `${args.serverUrl}/api/v1/users/cli-login/poll`,
+      { deviceCode: start.deviceCode }
+    );
+    const poll = await pollResponse.json().catch(() => ({}));
+    if (pollResponse.status === 202) {
+      const currentTime = args.now();
+      if (lastStatusLogAt > 0 && currentTime - lastStatusLogAt >= statusLogIntervalMs) {
+        const remainingMs = Math.max(0, deadline - currentTime);
+        args.output.log(
+          `[nolo] Still waiting... (${formatDuration(remainingMs)} remaining)`
+        );
+        lastStatusLogAt = currentTime;
+      } else if (lastStatusLogAt === 0) {
+        lastStatusLogAt = currentTime;
+      }
+      await args.sleep(intervalMs);
+      continue;
+    }
+    if (pollResponse.ok && poll?.token) {
+      const approvedServer = typeof poll.serverUrl === "string" && poll.serverUrl.trim() ? normalizeServerOrigin(poll.serverUrl) : args.serverUrl;
+      return saveTokenLogin({
+        configPath: args.configPath,
+        serverUrl: approvedServer,
+        authToken: poll.token,
+        output: args.output,
+        error: args.error
+      });
+    }
+    args.error.error(
+      `Web login failed: ${poll?.error || `HTTP ${pollResponse.status}`}. Use --token to paste a token manually.`
+    );
+    return 1;
+  }
+  args.error.error("Web login timed out. Run `nolo login` again or use --token.");
+  return 1;
+}
+async function runLoginCommand(args, deps = {}) {
+  const outputTarget = deps.output ?? console;
+  const errorTarget = deps.error ?? console;
+  if (wantsHelp(args)) {
+    outputTarget.log(LOGIN_HELP_TEXT);
+    return 0;
+  }
+  const configPath = deps.configPath ?? getDefaultProfileConfigPath();
+  const serverArg = getArg(args, "--server");
+  const tokenArg = getArg(args, "--token");
+  const noBrowser = args.includes("--no-browser");
+  const serverUrl = (serverArg || DEFAULT_NOLO_SERVER_URL).replace(/\/+$/, "");
+  if (tokenArg) {
+    return saveTokenLogin({
+      configPath,
+      serverUrl,
+      authToken: tokenArg,
+      output: outputTarget,
+      error: errorTarget
+    });
+  }
+  if (args.includes("--manual")) {
+    const rl = createInterface({ input, output });
+    const question = deps.question ?? ((prompt) => rl.question(prompt));
+    try {
+      const authToken = await question("paste auth token: ");
+      return saveTokenLogin({
+        configPath,
+        serverUrl,
+        authToken,
+        output: outputTarget,
+        error: errorTarget
+      });
+    } finally {
+      rl.close();
+    }
+  }
+  return runWebLogin({
+    configPath,
+    serverUrl,
+    fetchImpl: deps.fetchImpl ?? fetch,
+    openBrowser: deps.openBrowser ?? defaultOpenBrowser,
+    sleep: deps.sleep ?? defaultSleep,
+    now: deps.now ?? Date.now,
+    output: outputTarget,
+    error: errorTarget,
+    noBrowser
+  });
+}
+function runWhoamiCommand(deps = {}) {
+  const output2 = deps.output ?? console;
+  if (wantsHelp(deps.args ?? [])) {
+    output2.log(WHOAMI_HELP_TEXT);
+    return 0;
+  }
+  const env = deps.env ?? process.env;
+  const config = loadProfileConfig(deps.configPath);
+  const profile = getCurrentProfile(config);
+  const profileToken = profile?.authToken?.trim() ?? "";
+  const envToken = resolveAuthTokenFromEnv(env);
+  if (!profileToken && !envToken) {
+    output2.log("Not logged in. Run: nolo login");
+    return 1;
+  }
+  const runtimeEnv = buildCliRuntimeEnv(env, config);
+  const explicitServer = env.NOLO_SERVER || env.NOLO_SERVER_URL || env.BASE_URL;
+  if (!profileToken && envToken) {
+    output2.log("profile: not logged in (no saved token)");
+    if (profile?.serverUrl) {
+      output2.log(`profile server: ${profile.serverUrl}`);
+    }
+    output2.log(`effective server: ${runtimeEnv.NOLO_SERVER ?? resolveServerUrlFallback(profile)}`);
+    output2.log(`server source: ${explicitServer ? "env" : profile?.serverUrl ? "profile" : "default"}`);
+    output2.log(`env token: ${formatTokenPreview(envToken)} (source: environment)`);
+    return 0;
+  }
+  const effectiveServer = runtimeEnv.NOLO_SERVER ?? profile.serverUrl;
+  const effectiveToken = runtimeEnv.AUTH_TOKEN ?? profileToken;
+  output2.log(`profile: ${config.currentProfile}`);
+  output2.log(`profile server: ${profile.serverUrl}`);
+  output2.log(`effective server: ${effectiveServer}`);
+  output2.log(`server source: ${explicitServer ? "env" : "profile"}`);
+  output2.log(`token: ${formatTokenPreview(effectiveToken)} (source: ${envToken && envToken !== profileToken ? "environment" : "profile"})`);
+  if (envToken && envToken !== profileToken) {
+    output2.log(`profile token: ${formatTokenPreview(profileToken)} (source: profile, overridden by environment)`);
+  }
+  return 0;
+}
+function resolveServerUrlFallback(profile) {
+  return profile?.serverUrl ?? DEFAULT_NOLO_SERVER_URL;
+}
+function runLogoutCommand(deps = {}) {
+  const output2 = deps.output ?? console;
+  if (wantsHelp(deps.args ?? [])) {
+    output2.log(LOGOUT_HELP_TEXT);
+    return 0;
+  }
+  const env = deps.env ?? process.env;
+  const configPath = deps.configPath ?? getDefaultProfileConfigPath();
+  if (!clearProfileAuthToken(configPath)) {
+    output2.log("Not logged in.");
+    return 0;
+  }
+  output2.log("Logged out.");
+  if (resolveAuthTokenFromEnv(env)) {
+    output2.log(
+      "Note: AUTH_TOKEN in the environment is unchanged and may still authenticate commands."
+    );
+  }
+  return 0;
+}
+
+export {
+  LOGIN_HELP_TEXT,
+  LOGOUT_HELP_TEXT,
+  WHOAMI_HELP_TEXT,
+  defaultOpenBrowser,
+  runLoginCommand,
+  runWhoamiCommand,
+  runLogoutCommand
+};