nolo-cli 0.92.0-alpha.1 → 0.92.0

package/{chunk-VUHXTHIK.js → chunk-V2AB7ULS.js}

@@ -6,20 +6,20 @@ import {
   buildBuiltinObjectSkillDbKey,
   buildBuiltinObjectSkillPageContent,
   buildCodeWorkDiscipline
-} from "./chunk-2L3O7RDP.js";
+} from "./chunk-EMBK4B7D.js";
 import {
   buildSkillDocMarkdown,
   resolvePageSkillMetadata
-} from "./chunk-Q554LLSI.js";
+} from "./chunk-AUDNYVRC.js";
 import {
   canonicalizeToolNames
-} from "./chunk-O6OSWFZQ.js";
+} from "./chunk-XUWRURDF.js";
 import {
   nolotusId
-} from "./chunk-T67757YH.js";
+} from "./chunk-QDSINZM3.js";
 import {
   asNonEmptyStringArray
-} from "./chunk-VMFTFOWF.js";
+} from "./chunk-3AH7LNUB.js";
 import {
   asOptionalTrimmedString
 } from "./chunk-G3SUCT4W.js";

package/{chunk-QFMFJZLO.js → chunk-V7E4PXQD.js}

@@ -2,7 +2,7 @@ import {
   LOCAL_CODEX_AGENT_KEY,
   isLocalCliAgentKey,
   resolveCliAgentKeyInput
-} from "./chunk-SAFZABH7.js";
+} from "./chunk-SV5IJK6K.js";
 import {
   DEFAULT_NOLO_SERVER_URL
 } from "./chunk-OLZBQWZU.js";

package/chunk-VJVNU77E.js

@@ -0,0 +1,83 @@
+// packages/cli/secretScan.ts
+var ASSIGNMENT_KEYS = [
+  { label: "password", keys: "password|passwd", min: 8 },
+  { label: "psk", keys: "psk", min: 8 },
+  { label: "api key", keys: "api[_-]?key|apikey", min: 12 },
+  { label: "token", keys: "token|secret", min: 12 }
+];
+var ASSIGNMENT_PATTERNS = ASSIGNMENT_KEYS.map(
+  ({ label, keys, min }) => ({
+    label,
+    // 反向引用 \1 让引号成对成为必要条件：半截引号不算。值里允许空格与逗号——
+    // 写成带空格的口令是常见形态，旧的字符类会把这种值截成半截从而整条漏掉。
+    quoted: new RegExp(
+      `\\b(?:${keys})\\s*[:=]\\s*(["'])([^"']{${min},})\\1`,
+      "i"
+    ),
+    // 不带引号时只取到分隔符为止，是否算密钥交给 looksLikeBareSecret 判。
+    bare: new RegExp(
+      `\\b(?:${keys})\\s*[:=]\\s*([^\\s"',#]{${min},})`,
+      "i"
+    )
+  })
+);
+var PRIVATE_KEY_PATTERN = /-----BEGIN [A-Z ]*PRIVATE KEY-----/;
+var EXPRESSION_CHARS = /[?(){};|&<>$]/;
+var CONSTANT_CASE = /^[A-Z][A-Z0-9_]*$/;
+var CAMEL_CASE = /^[a-z][a-z0-9]*(?:[A-Z][a-z0-9]+)+$/;
+var PROPERTY_SEGMENT = /^[A-Za-z_$][\w$]*$/;
+var NAME_FORM_MAX_CHARS = 48;
+var PROPERTY_SEGMENT_MAX_CHARS = 24;
+function looksLikeDottedName(value) {
+  const segments = value.split(".");
+  if (segments.length < 2) return false;
+  return segments.every(
+    (segment) => PROPERTY_SEGMENT.test(segment) && (segment.length <= PROPERTY_SEGMENT_MAX_CHARS || CONSTANT_CASE.test(segment) && segment.includes("_"))
+  );
+}
+function stripTrailingMarkdownFence(value) {
+  return value.replace(/`+$/, "");
+}
+function looksLikeBareSecret(rawValue) {
+  const value = stripTrailingMarkdownFence(rawValue);
+  if (EXPRESSION_CHARS.test(value)) return false;
+  if (CONSTANT_CASE.test(value) && value.includes("_")) return false;
+  if (looksLikeDottedName(value)) return false;
+  if (value.length > NAME_FORM_MAX_CHARS) {
+    return /\d/.test(value);
+  }
+  if (CAMEL_CASE.test(value)) return false;
+  return true;
+}
+function toPreview(line) {
+  return line.length > 120 ? `${line.slice(0, 117)}...` : line;
+}
+function findPotentialSecrets(text) {
+  const findings = [];
+  text.split(/\r?\n/).forEach((line, index) => {
+    const lineNumber = index + 1;
+    const preview = toPreview(line);
+    for (const { label, quoted, bare } of ASSIGNMENT_PATTERNS) {
+      if (quoted.test(line)) {
+        findings.push({ label, line: lineNumber, preview });
+        continue;
+      }
+      const bareMatch = bare.exec(line);
+      if (bareMatch && looksLikeBareSecret(bareMatch[1])) {
+        findings.push({ label, line: lineNumber, preview });
+      }
+    }
+    if (PRIVATE_KEY_PATTERN.test(line)) {
+      findings.push({ label: "private key", line: lineNumber, preview });
+    }
+  });
+  return findings;
+}
+function formatSecretFindings(findings) {
+  return findings.map((finding) => `  line ${finding.line} (${finding.label}): ${finding.preview}`).join("\n");
+}
+
+export {
+  findPotentialSecrets,
+  formatSecretFindings
+};

package/{chunk-6D6VBVEW.js → chunk-VPFEPRME.js}

@@ -3,7 +3,13 @@ import {
 } from "./chunk-ESHYE7WU.js";
 import {
   getDefaultCliLocalRuntimeDb
-} from "./chunk-2F7RJC6L.js";
+} from "./chunk-ZOVKKMF6.js";
+import {
+  resolveAuthTokenFromEnv
+} from "./chunk-A7GB5UGH.js";
+import {
+  DEFAULT_NOLO_SERVER_URL
+} from "./chunk-OLZBQWZU.js";
 import {
   buildCliRuntimeEnv,
   clearProfileAuthToken,
@@ -12,20 +18,14 @@ import {
   getProfileTokens,
   loadProfileConfig,
   saveDefaultProfile
-} from "./chunk-BYMV6QZG.js";
-import {
-  resolveAuthTokenFromEnv
-} from "./chunk-A7GB5UGH.js";
-import {
-  DEFAULT_NOLO_SERVER_URL
-} from "./chunk-OLZBQWZU.js";
+} from "./chunk-TNIX77YM.js";
 import {
   asTrimmedNonEmptyStringArray,
   createMemoryKey,
   createMemoryOwnerIndexKey,
   createMemorySubjectKindIndexKey,
   memoryOwnerRange
-} from "./chunk-VMFTFOWF.js";
+} from "./chunk-3AH7LNUB.js";
 import {
   asTrimmedString
 } from "./chunk-3EUW3WEO.js";

package/{chunk-EKXNV6EM.js → chunk-X5VY2LEV.js}

@@ -3,11 +3,11 @@ import {
 } from "./chunk-5ZUL4CUO.js";
 import {
   getModelContextWindow
-} from "./chunk-W6MEYAGX.js";
+} from "./chunk-TC6TTNZW.js";
 import {
   findModelConfig,
   getProviderByModelName
-} from "./chunk-QTV7ZYBE.js";
+} from "./chunk-3BXNTXYI.js";
 import {
   asOptionalFiniteNumber
 } from "./chunk-WWC7I6TA.js";

package/{chunk-O6OSWFZQ.js → chunk-XUWRURDF.js}

@@ -1,5 +1,11 @@
+import {
+  CHROME_CONNECTOR_LEGACY_TOOL_ALIASES
+} from "./chunk-5J3PYNUP.js";
+
 // packages/agent-runtime/toolNameAliases.ts
 var LEGACY_TOOL_NAME_ALIASES = {
+  // Nolo Browser Connector: legacy chrome_* → canonical browser_*
+  ...CHROME_CONNECTOR_LEGACY_TOOL_ALIASES,
   createPage: "createDoc",
   updatePage: "updateDoc",
   update_page: "updateDoc",

package/{chunk-Q67DOFOO.js → chunk-Y3PMXGLH.js}

@@ -11,6 +11,7 @@ var PLATFORM_HOSTED_KIMI_K3_MODEL = "kimi-k3";
 var PLATFORM_HOSTED_KIMI_K26_MODEL = "kimi-k2.6";
 var PLATFORM_HOSTED_KIMI_PROVIDER = "nolo";
 var LEGACY_OLLAMA_CLOUD_PROVIDER = "ollama-cloud";
+var PLATFORM_LLM_BUSY_USER_MESSAGE = "\u670D\u52A1\u5668\u7D27\u5F20";
 var isNoloHostedProvider = (provider) => {
   const normalized = asTrimmedLowercaseString(provider);
   return normalized === PLATFORM_HOSTED_KIMI_PROVIDER || normalized === LEGACY_OLLAMA_CLOUD_PROVIDER;
@@ -1200,6 +1201,7 @@ export {
   openrouterModels,
   PLATFORM_HOSTED_KIMI_K3_MODEL,
   PLATFORM_HOSTED_KIMI_PROVIDER,
+  PLATFORM_LLM_BUSY_USER_MESSAGE,
   isNoloHostedProvider,
   isFireworksKimiModel,
   isDeepInfraKimiModel,

package/{chunk-IMCXPAQV.js → chunk-YFIUVDQY.js}

@@ -1,3 +1,6 @@
+import {
+  readSseFrames
+} from "./chunk-GMZLP5DV.js";
 import {
   sanitizeForOutbound
 } from "./chunk-CQ3WA2NE.js";
@@ -35,16 +38,16 @@ import {
   resolvePlatformAuthToken,
   resolvePlatformServerUrl,
   resolveProviderTransportDecision
-} from "./chunk-UYJKSCJ4.js";
+} from "./chunk-27ONFIEY.js";
 import {
   clipCompactText,
   isMeaningfulChatCompletionOutput,
   isMeaningfulResponsesOutput
-} from "./chunk-RAYTIPJ5.js";
+} from "./chunk-F64B2W3R.js";
 import {
   NOLO_CLIENT_VERSION_HEADER,
   isPlatformMimoProviderModel
-} from "./chunk-Q67DOFOO.js";
+} from "./chunk-Y3PMXGLH.js";
 import {
   isRecord
 } from "./chunk-KUG52IAP.js";
@@ -347,83 +350,6 @@ function flushChatCompletionStream(state) {
   }
 }
 
-// packages/agent-runtime/sseFrames.ts
-async function* readSseFrames(response) {
-  const reader = response.body?.getReader();
-  if (!reader) {
-    throw new Error("SSE response did not include a readable body.");
-  }
-  const decoder = new TextDecoder();
-  let buffer = "";
-  while (true) {
-    const { done, value } = await reader.read();
-    if (done) break;
-    buffer += decoder.decode(value, { stream: true });
-    let boundary = findSseFrameBoundary(buffer);
-    while (boundary) {
-      yield buffer.slice(0, boundary.index);
-      buffer = buffer.slice(boundary.index + boundary.separatorLength);
-      boundary = findSseFrameBoundary(buffer);
-    }
-  }
-  const remaining = decoder.decode();
-  if (remaining) {
-    buffer += remaining;
-    let boundary = findSseFrameBoundary(buffer);
-    while (boundary) {
-      yield buffer.slice(0, boundary.index);
-      buffer = buffer.slice(boundary.index + boundary.separatorLength);
-      boundary = findSseFrameBoundary(buffer);
-    }
-  }
-  if (buffer.trim()) yield buffer;
-}
-function findSseFrameBoundary(buffer) {
-  const lfLf = buffer.indexOf("\n\n");
-  const crLfCrLf = buffer.indexOf("\r\n\r\n");
-  if (lfLf === -1 && crLfCrLf === -1) return null;
-  const useLf = lfLf !== -1 && (crLfCrLf === -1 || lfLf < crLfCrLf);
-  return useLf ? { index: lfLf, separatorLength: 2 } : { index: crLfCrLf, separatorLength: 4 };
-}
-async function* streamSseDataValues(response, parse) {
-  const reader = response.body?.getReader();
-  if (!reader) return;
-  const decoder = new TextDecoder();
-  let buffer = "";
-  while (true) {
-    const { done, value } = await reader.read();
-    if (done) break;
-    buffer += decoder.decode(value, { stream: true });
-    const lines = buffer.split("\n");
-    buffer = lines.pop() ?? "";
-    for (const line of lines) {
-      const parsed = parse(line);
-      if (parsed) yield parsed;
-    }
-  }
-  const remaining = decoder.decode();
-  if (remaining) {
-    buffer += remaining;
-    const lines = buffer.split("\n");
-    buffer = lines.pop() ?? "";
-    for (const line of lines) {
-      const parsed = parse(line);
-      if (parsed) yield parsed;
-    }
-  }
-  if (buffer.trim()) {
-    const parsed = parse(buffer);
-    if (parsed) yield parsed;
-  }
-}
-async function readSseDataValues(response, parse) {
-  const values = [];
-  for await (const value of streamSseDataValues(response, parse)) {
-    values.push(value);
-  }
-  return values;
-}
-
 // packages/agent-runtime/platformChatProvider.ts
 var PlatformStreamInterruptedError = class extends Error {
   code = "PLATFORM_STREAM_INTERRUPTED";
@@ -926,9 +852,6 @@ export {
   applyChatCompletionDelta,
   flushChatCompletionStream,
   providerHttpFailure,
-  readSseFrames,
-  streamSseDataValues,
-  readSseDataValues,
   createResponsesToolAccumulator,
   applyResponsesToolEvent,
   finalizeResponsesToolCalls,