nolo-cli 0.95.0-alpha.5 → 0.95.0

package/chunk-VIWDGTDA.js

@@ -0,0 +1,8 @@
+// packages/agent-runtime/cursor/isCursorOAuthAgent.ts
+function isCursorOAuthAgent(agent) {
+  return agent.apiKeyRef?.trim().toLowerCase() === "cursor";
+}
+
+export {
+  isCursorOAuthAgent
+};

package/chunk-VJVNU77E.js

@@ -0,0 +1,83 @@
+// packages/cli/secretScan.ts
+var ASSIGNMENT_KEYS = [
+  { label: "password", keys: "password|passwd", min: 8 },
+  { label: "psk", keys: "psk", min: 8 },
+  { label: "api key", keys: "api[_-]?key|apikey", min: 12 },
+  { label: "token", keys: "token|secret", min: 12 }
+];
+var ASSIGNMENT_PATTERNS = ASSIGNMENT_KEYS.map(
+  ({ label, keys, min }) => ({
+    label,
+    // 反向引用 \1 让引号成对成为必要条件：半截引号不算。值里允许空格与逗号——
+    // 写成带空格的口令是常见形态，旧的字符类会把这种值截成半截从而整条漏掉。
+    quoted: new RegExp(
+      `\\b(?:${keys})\\s*[:=]\\s*(["'])([^"']{${min},})\\1`,
+      "i"
+    ),
+    // 不带引号时只取到分隔符为止，是否算密钥交给 looksLikeBareSecret 判。
+    bare: new RegExp(
+      `\\b(?:${keys})\\s*[:=]\\s*([^\\s"',#]{${min},})`,
+      "i"
+    )
+  })
+);
+var PRIVATE_KEY_PATTERN = /-----BEGIN [A-Z ]*PRIVATE KEY-----/;
+var EXPRESSION_CHARS = /[?(){};|&<>$]/;
+var CONSTANT_CASE = /^[A-Z][A-Z0-9_]*$/;
+var CAMEL_CASE = /^[a-z][a-z0-9]*(?:[A-Z][a-z0-9]+)+$/;
+var PROPERTY_SEGMENT = /^[A-Za-z_$][\w$]*$/;
+var NAME_FORM_MAX_CHARS = 48;
+var PROPERTY_SEGMENT_MAX_CHARS = 24;
+function looksLikeDottedName(value) {
+  const segments = value.split(".");
+  if (segments.length < 2) return false;
+  return segments.every(
+    (segment) => PROPERTY_SEGMENT.test(segment) && (segment.length <= PROPERTY_SEGMENT_MAX_CHARS || CONSTANT_CASE.test(segment) && segment.includes("_"))
+  );
+}
+function stripTrailingMarkdownFence(value) {
+  return value.replace(/`+$/, "");
+}
+function looksLikeBareSecret(rawValue) {
+  const value = stripTrailingMarkdownFence(rawValue);
+  if (EXPRESSION_CHARS.test(value)) return false;
+  if (CONSTANT_CASE.test(value) && value.includes("_")) return false;
+  if (looksLikeDottedName(value)) return false;
+  if (value.length > NAME_FORM_MAX_CHARS) {
+    return /\d/.test(value);
+  }
+  if (CAMEL_CASE.test(value)) return false;
+  return true;
+}
+function toPreview(line) {
+  return line.length > 120 ? `${line.slice(0, 117)}...` : line;
+}
+function findPotentialSecrets(text) {
+  const findings = [];
+  text.split(/\r?\n/).forEach((line, index) => {
+    const lineNumber = index + 1;
+    const preview = toPreview(line);
+    for (const { label, quoted, bare } of ASSIGNMENT_PATTERNS) {
+      if (quoted.test(line)) {
+        findings.push({ label, line: lineNumber, preview });
+        continue;
+      }
+      const bareMatch = bare.exec(line);
+      if (bareMatch && looksLikeBareSecret(bareMatch[1])) {
+        findings.push({ label, line: lineNumber, preview });
+      }
+    }
+    if (PRIVATE_KEY_PATTERN.test(line)) {
+      findings.push({ label: "private key", line: lineNumber, preview });
+    }
+  });
+  return findings;
+}
+function formatSecretFindings(findings) {
+  return findings.map((finding) => `  line ${finding.line} (${finding.label}): ${finding.preview}`).join("\n");
+}
+
+export {
+  findPotentialSecrets,
+  formatSecretFindings
+};

package/{chunk-6D6VBVEW.js → chunk-VPFEPRME.js}

@@ -3,7 +3,13 @@ import {
 } from "./chunk-ESHYE7WU.js";
 import {
   getDefaultCliLocalRuntimeDb
-} from "./chunk-2F7RJC6L.js";
+} from "./chunk-ZOVKKMF6.js";
+import {
+  resolveAuthTokenFromEnv
+} from "./chunk-A7GB5UGH.js";
+import {
+  DEFAULT_NOLO_SERVER_URL
+} from "./chunk-OLZBQWZU.js";
 import {
   buildCliRuntimeEnv,
   clearProfileAuthToken,
@@ -12,20 +18,14 @@ import {
   getProfileTokens,
   loadProfileConfig,
   saveDefaultProfile
-} from "./chunk-BYMV6QZG.js";
-import {
-  resolveAuthTokenFromEnv
-} from "./chunk-A7GB5UGH.js";
-import {
-  DEFAULT_NOLO_SERVER_URL
-} from "./chunk-OLZBQWZU.js";
+} from "./chunk-TNIX77YM.js";
 import {
   asTrimmedNonEmptyStringArray,
   createMemoryKey,
   createMemoryOwnerIndexKey,
   createMemorySubjectKindIndexKey,
   memoryOwnerRange
-} from "./chunk-VMFTFOWF.js";
+} from "./chunk-3AH7LNUB.js";
 import {
   asTrimmedString
 } from "./chunk-3EUW3WEO.js";

package/{chunk-JAXOVNM4.js → chunk-WILHZY7K.js}

@@ -1,15 +1,15 @@
 import {
   normalizeTimingMs
-} from "./chunk-WADCY6G6.js";
+} from "./chunk-6ZWMH6TJ.js";
 import {
   MODEL_LOOKUP_MAP
-} from "./chunk-OIVSQH2O.js";
+} from "./chunk-3BXNTXYI.js";
 import {
   ALL_MODELS
-} from "./chunk-ACTMNVHM.js";
+} from "./chunk-CYSYR67N.js";
 import {
   asTrimmedNonEmptyStringArray
-} from "./chunk-VMFTFOWF.js";
+} from "./chunk-3AH7LNUB.js";
 import {
   asOptionalFiniteNumber
 } from "./chunk-WWC7I6TA.js";
@@ -20,6 +20,43 @@ import {
   asOptionalTrimmedString
 } from "./chunk-G3SUCT4W.js";
 
+// packages/agent-runtime/autoExecutionProfiles.ts
+var createProfile = (input) => ({
+  id: input.id,
+  tier: input.tier,
+  legacyAgentKey: input.legacyAgentKey,
+  key: input.legacyAgentKey,
+  name: input.name,
+  provider: "nolo",
+  model: input.model,
+  apiSource: "platform",
+  useServerProxy: true,
+  rawRecord: {
+    dbKey: input.legacyAgentKey,
+    isPublic: true,
+    provider: "nolo",
+    model: input.model,
+    apiSource: "platform",
+    useServerProxy: true
+  }
+});
+var FLASH_PROFILE = createProfile({
+  id: "builtin:auto:nolo",
+  tier: "flash",
+  legacyAgentKey: BUILTIN_NOLO_AGENT_KEY,
+  name: "nolo",
+  model: "deepseek-flash"
+});
+var AUTO_EXECUTION_PROFILES = {
+  flash: FLASH_PROFILE,
+  balanced: { ...FLASH_PROFILE, tier: "balanced" },
+  quality: { ...FLASH_PROFILE, tier: "quality" },
+  image: { ...FLASH_PROFILE, tier: "image" }
+};
+var DEFAULT_AUTO_EXECUTION_TIER = "flash";
+var DEFAULT_AUTO_EXECUTION_PROFILE = AUTO_EXECUTION_PROFILES[DEFAULT_AUTO_EXECUTION_TIER];
+var resolveAutoExecutionProfile = (tier) => AUTO_EXECUTION_PROFILES[tier ?? DEFAULT_AUTO_EXECUTION_TIER] ?? DEFAULT_AUTO_EXECUTION_PROFILE;
+
 // packages/ai/token/cacheTokenFields.ts
 var finiteTokenCount = (value) => {
   if (typeof value !== "number" || !Number.isFinite(value)) return void 0;
@@ -279,7 +316,7 @@ var normalizeUsage = (usage) => {
 // packages/agent-runtime/emptyAssistantRepair.ts
 var EMPTY_ASSISTANT_REPAIR_PROMPT = "\u8BF7\u7ED9\u51FA\u660E\u786E\u7684\u6587\u5B57\u56DE\u7B54\u6216\u6267\u884C\u4E0B\u4E00\u6B65\uFF1A\u5982\u679C\u4EFB\u52A1\u5DF2\u5B8C\u6210\uFF0C\u8BF7\u76F4\u63A5\u603B\u7ED3\u7ED3\u679C\uFF1B\u5982\u679C\u9700\u8981\u8C03\u7528\u5DE5\u5177\uFF0C\u53EA\u80FD\u8C03\u7528\u672C\u6B21\u8BF7\u6C42\u4E2D\u5DF2\u58F0\u660E\u7684\u5DE5\u5177\u2014\u2014\u4F60\u60F3\u7528\u7684\u5DE5\u5177\u4E0D\u5728\u58F0\u660E\u5217\u8868\u4E2D\u65F6\uFF0C\u4E0D\u8981\u5C1D\u8BD5\u8C03\u7528\u5B83\uFF0C\u76F4\u63A5\u7528\u6587\u5B57\u8BF4\u660E\u8BE5\u80FD\u529B\u5F53\u524D\u4E0D\u53EF\u7528\u3002\u8BF7\u5207\u52FF\u8FD4\u56DE\u7A7A\u5185\u5BB9\u3002";
 var EMPTY_ASSISTANT_FALLBACK_MESSAGE = "\u6A21\u578B\u8FDE\u7EED\u8FD4\u56DE\u7A7A\u6D88\u606F\uFF0C\u5F53\u524D\u4EFB\u52A1\u672A\u5B8C\u6210\u3002\u8BF7\u91CD\u8BD5\u5F53\u524D\u6B65\u9AA4\uFF0C\u6216\u7ED9\u51FA\u66F4\u5177\u4F53\u7684\u4FEE\u6539\u8303\u56F4\u3002";
-var LENGTH_TRUNCATED_FALLBACK_MESSAGE = "\u8F93\u51FA\u8FBE\u5230\u957F\u5EA6\u4E0A\u9650\u88AB\u622A\u65AD\uFF0C\u5EFA\u8BAE\u7F29\u77ED\u4EFB\u52A1\u6216\u63D0\u9AD8\u8F93\u51FA\u4E0A\u9650\u3002";
+var LENGTH_TRUNCATED_FALLBACK_MESSAGE = "\u8F93\u51FA\u8FBE\u5230\u957F\u5EA6\u4E0A\u9650\u88AB\u622A\u65AD\uFF0C\u6216\u4E0A\u4E0B\u6587\u5DF2\u8D85\u51FA\u6A21\u578B\u7A97\u53E3\u3002\u5EFA\u8BAE\u7F29\u77ED\u4EFB\u52A1\u3001\u538B\u7F29\u6216\u65B0\u5F00\u5BF9\u8BDD\uFF0C\u6216\u63D0\u9AD8\u8F93\u51FA\u4E0A\u9650\u3002";
 var STREAM_TRUNCATED_FALLBACK_MESSAGE = "\u4E0A\u6E38\u54CD\u5E94\u6D41\u5728\u6536\u5C3E\u524D\u88AB\u4E2D\u65AD\uFF08\u672A\u6536\u5230\u7ED3\u675F\u6807\u8BB0\uFF09\uFF0C\u672C\u8F6E\u8F93\u51FA\u4E0D\u5B8C\u6574\u3002\u8BF7\u91CD\u8BD5\u5F53\u524D\u6B65\u9AA4\u3002";
 var REPETITION_LOOP_FALLBACK_MESSAGE = "\u68C0\u6D4B\u5230\u6A21\u578B\u9677\u5165\u91CD\u590D\u8F93\u51FA\u6B7B\u5FAA\u73AF\uFF0C\u5DF2\u81EA\u52A8\u7194\u65AD\u7EC8\u6B62\u5F53\u524D\u4EFB\u52A1\u3002";
 var STAGNANT_TOOL_CALLS_FALLBACK_MESSAGE = "\u68C0\u6D4B\u5230\u8FDE\u7EED\u591A\u6B21\u76F8\u540C\u5DE5\u5177\u8C03\u7528\u4E14\u65E0\u5B9E\u8D28\u8FDB\u5C55\uFF0C\u5DF2\u81EA\u52A8\u7194\u65AD\u7EC8\u6B62\u5F53\u524D\u4EFB\u52A1\u3002";
@@ -346,44 +383,9 @@ function resolveTruncatedReasoningTailLog(reason, reasoning_content) {
   return null;
 }
 
-// packages/agent-runtime/autoExecutionProfiles.ts
-var createProfile = (input) => ({
-  id: input.id,
-  tier: input.tier,
-  legacyAgentKey: input.legacyAgentKey,
-  key: input.legacyAgentKey,
-  name: input.name,
-  provider: "nolo",
-  model: input.model,
-  apiSource: "platform",
-  useServerProxy: true,
-  rawRecord: {
-    dbKey: input.legacyAgentKey,
-    isPublic: true,
-    provider: "nolo",
-    model: input.model,
-    apiSource: "platform",
-    useServerProxy: true
-  }
-});
-var FLASH_PROFILE = createProfile({
-  id: "builtin:auto:nolo",
-  tier: "flash",
-  legacyAgentKey: BUILTIN_NOLO_AGENT_KEY,
-  name: "nolo",
-  model: "deepseek-flash"
-});
-var AUTO_EXECUTION_PROFILES = {
-  flash: FLASH_PROFILE,
-  balanced: { ...FLASH_PROFILE, tier: "balanced" },
-  quality: { ...FLASH_PROFILE, tier: "quality" },
-  image: { ...FLASH_PROFILE, tier: "image" }
-};
-var DEFAULT_AUTO_EXECUTION_TIER = "flash";
-var DEFAULT_AUTO_EXECUTION_PROFILE = AUTO_EXECUTION_PROFILES[DEFAULT_AUTO_EXECUTION_TIER];
-var resolveAutoExecutionProfile = (tier) => AUTO_EXECUTION_PROFILES[tier ?? DEFAULT_AUTO_EXECUTION_TIER] ?? DEFAULT_AUTO_EXECUTION_PROFILE;
-
 export {
+  DEFAULT_AUTO_EXECUTION_PROFILE,
+  resolveAutoExecutionProfile,
   readCacheReadInputTokens,
   readCacheCreationInputTokens,
   DEFAULT_CONTEXT_WINDOW,
@@ -399,7 +401,5 @@ export {
   resolveEmptyAssistantOutcome,
   resolveEmptyAssistantFallbackMessage,
   hasAssistantVisibleOutput,
-  resolveTruncatedReasoningTailLog,
-  DEFAULT_AUTO_EXECUTION_PROFILE,
-  resolveAutoExecutionProfile
+  resolveTruncatedReasoningTailLog
 };