nolo-cli 0.91.0-alpha.1 → 0.91.1

package/{chunk-QFMFJZLO.js → chunk-V7E4PXQD.js}

@@ -2,7 +2,7 @@ import {
   LOCAL_CODEX_AGENT_KEY,
   isLocalCliAgentKey,
   resolveCliAgentKeyInput
-} from "./chunk-SAFZABH7.js";
+} from "./chunk-SV5IJK6K.js";
 import {
   DEFAULT_NOLO_SERVER_URL
 } from "./chunk-OLZBQWZU.js";

package/{chunk-G5X57NDE.js → chunk-VBSVA6CB.js}

@@ -3,11 +3,11 @@ import {
 } from "./chunk-5ZUL4CUO.js";
 import {
   getModelContextWindow
-} from "./chunk-GRDSMV4V.js";
+} from "./chunk-LS2MI3B4.js";
 import {
   findModelConfig,
   getProviderByModelName
-} from "./chunk-4CAPEGHN.js";
+} from "./chunk-ZI2MEZMT.js";
 import {
   asOptionalFiniteNumber
 } from "./chunk-WWC7I6TA.js";

package/{chunk-3XMOAYRC.js → chunk-VETFWL5K.js}

@@ -2,7 +2,7 @@ import {
   deleteDbRecord,
   queryUserRecords,
   readDbRecord
-} from "./chunk-E2NP7ZQU.js";
+} from "./chunk-RZ6CQZB2.js";
 import {
   mergeAndDedupUserData
 } from "./chunk-KQHGZWSV.js";

package/chunk-VJVNU77E.js

@@ -0,0 +1,83 @@
+// packages/cli/secretScan.ts
+var ASSIGNMENT_KEYS = [
+  { label: "password", keys: "password|passwd", min: 8 },
+  { label: "psk", keys: "psk", min: 8 },
+  { label: "api key", keys: "api[_-]?key|apikey", min: 12 },
+  { label: "token", keys: "token|secret", min: 12 }
+];
+var ASSIGNMENT_PATTERNS = ASSIGNMENT_KEYS.map(
+  ({ label, keys, min }) => ({
+    label,
+    // 反向引用 \1 让引号成对成为必要条件：半截引号不算。值里允许空格与逗号——
+    // 写成带空格的口令是常见形态，旧的字符类会把这种值截成半截从而整条漏掉。
+    quoted: new RegExp(
+      `\\b(?:${keys})\\s*[:=]\\s*(["'])([^"']{${min},})\\1`,
+      "i"
+    ),
+    // 不带引号时只取到分隔符为止，是否算密钥交给 looksLikeBareSecret 判。
+    bare: new RegExp(
+      `\\b(?:${keys})\\s*[:=]\\s*([^\\s"',#]{${min},})`,
+      "i"
+    )
+  })
+);
+var PRIVATE_KEY_PATTERN = /-----BEGIN [A-Z ]*PRIVATE KEY-----/;
+var EXPRESSION_CHARS = /[?(){};|&<>$]/;
+var CONSTANT_CASE = /^[A-Z][A-Z0-9_]*$/;
+var CAMEL_CASE = /^[a-z][a-z0-9]*(?:[A-Z][a-z0-9]+)+$/;
+var PROPERTY_SEGMENT = /^[A-Za-z_$][\w$]*$/;
+var NAME_FORM_MAX_CHARS = 48;
+var PROPERTY_SEGMENT_MAX_CHARS = 24;
+function looksLikeDottedName(value) {
+  const segments = value.split(".");
+  if (segments.length < 2) return false;
+  return segments.every(
+    (segment) => PROPERTY_SEGMENT.test(segment) && (segment.length <= PROPERTY_SEGMENT_MAX_CHARS || CONSTANT_CASE.test(segment) && segment.includes("_"))
+  );
+}
+function stripTrailingMarkdownFence(value) {
+  return value.replace(/`+$/, "");
+}
+function looksLikeBareSecret(rawValue) {
+  const value = stripTrailingMarkdownFence(rawValue);
+  if (EXPRESSION_CHARS.test(value)) return false;
+  if (CONSTANT_CASE.test(value) && value.includes("_")) return false;
+  if (looksLikeDottedName(value)) return false;
+  if (value.length > NAME_FORM_MAX_CHARS) {
+    return /\d/.test(value);
+  }
+  if (CAMEL_CASE.test(value)) return false;
+  return true;
+}
+function toPreview(line) {
+  return line.length > 120 ? `${line.slice(0, 117)}...` : line;
+}
+function findPotentialSecrets(text) {
+  const findings = [];
+  text.split(/\r?\n/).forEach((line, index) => {
+    const lineNumber = index + 1;
+    const preview = toPreview(line);
+    for (const { label, quoted, bare } of ASSIGNMENT_PATTERNS) {
+      if (quoted.test(line)) {
+        findings.push({ label, line: lineNumber, preview });
+        continue;
+      }
+      const bareMatch = bare.exec(line);
+      if (bareMatch && looksLikeBareSecret(bareMatch[1])) {
+        findings.push({ label, line: lineNumber, preview });
+      }
+    }
+    if (PRIVATE_KEY_PATTERN.test(line)) {
+      findings.push({ label: "private key", line: lineNumber, preview });
+    }
+  });
+  return findings;
+}
+function formatSecretFindings(findings) {
+  return findings.map((finding) => `  line ${finding.line} (${finding.label}): ${finding.preview}`).join("\n");
+}
+
+export {
+  findPotentialSecrets,
+  formatSecretFindings
+};

package/{chunk-6D6VBVEW.js → chunk-VPFEPRME.js}

@@ -3,7 +3,13 @@ import {
 } from "./chunk-ESHYE7WU.js";
 import {
   getDefaultCliLocalRuntimeDb
-} from "./chunk-2F7RJC6L.js";
+} from "./chunk-ZOVKKMF6.js";
+import {
+  resolveAuthTokenFromEnv
+} from "./chunk-A7GB5UGH.js";
+import {
+  DEFAULT_NOLO_SERVER_URL
+} from "./chunk-OLZBQWZU.js";
 import {
   buildCliRuntimeEnv,
   clearProfileAuthToken,
@@ -12,20 +18,14 @@ import {
   getProfileTokens,
   loadProfileConfig,
   saveDefaultProfile
-} from "./chunk-BYMV6QZG.js";
-import {
-  resolveAuthTokenFromEnv
-} from "./chunk-A7GB5UGH.js";
-import {
-  DEFAULT_NOLO_SERVER_URL
-} from "./chunk-OLZBQWZU.js";
+} from "./chunk-TNIX77YM.js";
 import {
   asTrimmedNonEmptyStringArray,
   createMemoryKey,
   createMemoryOwnerIndexKey,
   createMemorySubjectKindIndexKey,
   memoryOwnerRange
-} from "./chunk-VMFTFOWF.js";
+} from "./chunk-3AH7LNUB.js";
 import {
   asTrimmedString
 } from "./chunk-3EUW3WEO.js";

package/{chunk-HGRDL36J.js → chunk-W2P25VGS.js}

@@ -1,9 +1,9 @@
 import {
   clearCliLocalRuntimePreparedAgentCache
-} from "./chunk-7IBK6MYW.js";
+} from "./chunk-7EMJBGCA.js";
 import {
   getReadableCliDb
-} from "./chunk-LS2ZANRJ.js";
+} from "./chunk-CTUQJVQM.js";
 import {
   buildCreatedAgentRecord,
   buildUpdatedAgentRecord,
@@ -12,10 +12,10 @@ import {
   resolveAgentRecordFromHybridStore,
   sanitizeAgentRecordForCliOutput,
   writeAgentRecord
-} from "./chunk-E2NP7ZQU.js";
+} from "./chunk-RZ6CQZB2.js";
 import {
   resolveCliAgentKeyInput
-} from "./chunk-SAFZABH7.js";
+} from "./chunk-SV5IJK6K.js";
 import {
   toErrorMessage
 } from "./chunk-HNMXYYJR.js";
@@ -212,7 +212,7 @@ async function runAgentCreateCommand(args, deps = {}) {
     clearCliLocalRuntimePreparedAgentCache();
     let verifyResult;
     if (parsed.verify) {
-      const { verifyCustomProvider } = await import("./agentProviderCommands-TOMVKJOV.js");
+      const { verifyCustomProvider } = await import("./agentProviderCommands-JCRK6ST2.js");
       const rec = built.nextRecord;
       verifyResult = await verifyCustomProvider({
         providerUrl: rec.customProviderUrl,
@@ -222,15 +222,34 @@ async function runAgentCreateCommand(args, deps = {}) {
         fetchImpl
       });
     }
+    const apiKeyRef = String(built.updates?.apiKeyRef || "").trim();
+    let authHint;
+    const OAUTH_REFS = /* @__PURE__ */ new Set(["claude", "chatgpt", "xai", "antigravity", "cloudflare"]);
+    if (apiKeyRef && OAUTH_REFS.has(apiKeyRef)) {
+      try {
+        const { createOAuthTokenStore } = await import("./oauthTokenStore-ITEB663N.js");
+        const store = createOAuthTokenStore();
+        if (!store.read(apiKeyRef)) {
+          authHint = `Subscription "${apiKeyRef}" is not authorized yet. Run \`nolo auth ${apiKeyRef}\` to log in.`;
+        }
+      } catch {
+      }
+    }
     output.write(JSON.stringify({
       ok: true,
       agentKey: built.agentKey,
       baseUrl: built.serverUrl,
       updates: sanitizeAgentRecordForCliOutput(built.updates),
       record: sanitizeAgentRecordForCliOutput(built.nextRecord),
-      ...verifyResult ? { verify: verifyResult } : {}
+      ...verifyResult ? { verify: verifyResult } : {},
+      ...authHint ? { hint: authHint } : {}
     }, null, 2));
     output.write("\n");
+    if (authHint) {
+      const errorOutput = deps.error ?? process.stderr;
+      errorOutput.write(`[nolo] Hint: ${authHint}
+`);
+    }
     return 0;
   } catch (error) {
     output.write(

package/{chunk-XAQAF25W.js → chunk-WC6A2Q7S.js}

@@ -1,13 +1,13 @@
 import {
   buildSkillDocMarkdown
-} from "./chunk-Q554LLSI.js";
+} from "./chunk-AUDNYVRC.js";
 import {
   SYSTEM_AGENT_CAPABILITIES,
   SYSTEM_AGENT_CAPABILITY_IDS
-} from "./chunk-546FPOW3.js";
+} from "./chunk-QDSINZM3.js";
 import {
   createKey
-} from "./chunk-VMFTFOWF.js";
+} from "./chunk-3AH7LNUB.js";
 
 // packages/ai/tools/codeWorkDiscipline.ts
 var CODE_WORK_DISCIPLINE_BODY = `## \u6548\u7387\u4F18\u5148\uFF08\u7701 token\uFF09
@@ -61,6 +61,8 @@ var TOOL_PACKS = {
     "updateSelf",
     "ask_user",
     "createAgentAutomation",
+    "updateAgentAutomation",
+    "deleteAgentAutomation",
     "notifyUser"
   ],
   // L2 - 联网搜索：与 CAPABILITY_PACKS「web-search」对齐。

package/{chunk-WON762L4.js → chunk-WT2IAJAJ.js}

@@ -11,13 +11,13 @@ import {
   getAntigravityUserAgent,
   normalizeAntigravityTokenPayload,
   refreshAntigravityToken
-} from "./chunk-NKIH4Q7W.js";
-import {
-  writeOAuthCredential
-} from "./chunk-ONXOABJR.js";
+} from "./chunk-ISHYYQJC.js";
 import {
   toErrorMessage
 } from "./chunk-HNMXYYJR.js";
+import {
+  writeOAuthCredential
+} from "./chunk-HNGRBWYF.js";
 import {
   asOptionalFiniteNumber
 } from "./chunk-WWC7I6TA.js";