@thinkingai/ae-cli 6.0.24 → 6.0.28

package/dist/{chunk-65DKFJZB.js → chunk-YCLVYFK7.js}

@@ -66,9 +66,14 @@ var Logger = class {
     }
     this.info(parts.join(" | "));
   }
-  /** Log command execution */
+  /** Log command execution (sensitive flags redacted to ***) */
   command(name, args) {
-    const filtered = Object.entries(args).filter(([, v]) => v !== void 0 && v !== null && v !== "").map(([k, v]) => `--${k}=${JSON.stringify(v)}`).join(" ");
+    const SENSITIVE = ["token", "apikey", "secret", "accesstoken", "headers"];
+    const isSensitive = (k) => {
+      const lk = k.toLowerCase();
+      return SENSITIVE.some((s) => lk.includes(s));
+    };
+    const filtered = Object.entries(args).filter(([, v]) => v !== void 0 && v !== null && v !== "").map(([k, v]) => `--${k}=${isSensitive(k) ? "***" : JSON.stringify(v)}`).join(" ");
     this.info(`CMD ${name}${filtered ? " " + filtered : ""}`);
   }
 };
@@ -88,6 +93,15 @@ function safeReadJsonFile(filePath) {
   return safeJsonParse(content);
 }
 
+// src/core/url-utils.ts
+function normalizeUrl(url) {
+  if (!url) return url;
+  if (!url.startsWith("http://") && !url.startsWith("https://")) {
+    url = `https://${url}`;
+  }
+  return url.replace(/\/$/, "");
+}
+
 // src/core/config.ts
 import fs3 from "fs";
 import path2 from "path";
@@ -159,16 +173,41 @@ function getFallbackCliToken(hostUrl) {
 function ensureDir() {
   if (!fs3.existsSync(CONFIG_DIR)) fs3.mkdirSync(CONFIG_DIR, { recursive: true });
 }
+function dedupeNormalizedHosts(config) {
+  const hosts = {};
+  for (const [url, entry] of Object.entries(config.hosts)) {
+    const key = normalizeUrl(url);
+    if (!hosts[key]) {
+      hosts[key] = entry;
+    }
+  }
+  return {
+    activeHost: config.activeHost ? normalizeUrl(config.activeHost) : "",
+    hosts
+  };
+}
+function configNeedsNormalization(config) {
+  if (config.activeHost && normalizeUrl(config.activeHost) !== config.activeHost) return true;
+  const keys = Object.keys(config.hosts);
+  if (keys.some((url) => normalizeUrl(url) !== url)) return true;
+  return new Set(keys.map(normalizeUrl)).size !== keys.length;
+}
 function loadConfig() {
   try {
     if (fs3.existsSync(CONFIG_FILE)) {
       const raw = safeReadJsonFile(CONFIG_FILE);
       if (raw.defaultHost && !raw.activeHost) {
-        const migrated = migrateConfig(raw);
+        const migrated = dedupeNormalizedHosts(migrateConfig(raw));
         saveConfig(migrated);
         return migrated;
       }
-      return raw;
+      const rawConfig = raw;
+      if (configNeedsNormalization(rawConfig)) {
+        const config = dedupeNormalizedHosts(rawConfig);
+        saveConfig(config);
+        return config;
+      }
+      return rawConfig;
     }
   } catch (err) {
     logger.error(`Error loading config: ${err.message}`);
@@ -181,11 +220,11 @@ function migrateConfig(old) {
   const oldHost = old.defaultHost;
   if (old.hosts) {
     for (const [key, val] of Object.entries(old.hosts)) {
-      const url = key.startsWith("http") ? key : `https://${key}`;
+      const url = normalizeUrl(key.startsWith("http") ? key : `https://${key}`);
       hosts[url] = val;
     }
   }
-  const activeHost = oldHost.startsWith("http") ? oldHost : `https://${oldHost}`;
+  const activeHost = normalizeUrl(oldHost.startsWith("http") ? oldHost : `https://${oldHost}`);
   if (!hosts[activeHost]) {
     hosts[activeHost] = { label: "default" };
   }
@@ -203,6 +242,7 @@ function getActiveHost() {
   return config.activeHost || "";
 }
 function setActiveHost(url) {
+  url = normalizeUrl(url);
   const config = loadConfig();
   if (!config.hosts[url]) {
     throw new Error(`Host ${url} is not in the configured hosts list. Add it first.`);
@@ -211,6 +251,7 @@ function setActiveHost(url) {
   saveConfig(config);
 }
 function addHost(url, label) {
+  url = normalizeUrl(url);
   const config = loadConfig();
   assertUniqueHostLabel(config, label, url);
   config.hosts[url] = { label };
@@ -226,6 +267,7 @@ function assertUniqueHostLabel(config, label, excludeUrl) {
   }
 }
 function removeHost(url) {
+  url = normalizeUrl(url);
   const config = loadConfig();
   delete config.hosts[url];
   if (config.activeHost === url) {
@@ -250,6 +292,7 @@ export {
   logger,
   safeJsonParse,
   safeReadJsonFile,
+  normalizeUrl,
   getSandboxRuntimeRoot,
   getSandboxClusterInfoFilePath,
   getFallbackCliToken,

package/dist/{chunk-2OW2RENH.js → chunk-YNQFYBDB.js}

@@ -4,11 +4,11 @@ import {
 import {
   clearCliToken,
   getCliToken
-} from "./chunk-OCQPQYHZ.js";
+} from "./chunk-2NDGFQHW.js";
 import {
   logger,
   safeJsonParse
-} from "./chunk-65DKFJZB.js";
+} from "./chunk-YCLVYFK7.js";
 
 // src/core/capability-api.ts
 import { readFile } from "fs/promises";
@@ -48,6 +48,9 @@ async function permissionMessage(resp) {
   }
   return "Permission denied for this resource (HTTP 403)";
 }
+function isInvalidCliTokenMessage(message) {
+  return /\byour token is invalid\b/i.test(message) || /\bcli[-_\s]?token\b.*\binvalid\b/i.test(message) || /\binvalid\b.*\bcli[-_\s]?token\b/i.test(message);
+}
 function parseCapabilityResponse(text) {
   if (!text) return void 0;
   try {
@@ -118,15 +121,28 @@ async function requestMultipartOnce(url, token, form) {
     body: form
   });
 }
+async function requestDownloadOnce(url, token) {
+  return fetch(url, {
+    method: "GET",
+    headers: {
+      "cli-token": token,
+      "Accept": "*/*"
+    }
+  });
+}
 async function callGateway(host, domain, pathAfterV1, method, body) {
   const url = buildCapabilityGatewayUrl(host, domain, pathAfterV1);
   const token = await getCliToken(host);
   let resp = await requestOnce(url, method, token, body);
+  let permissionMsg;
   if (resp.status === 403) {
-    throw new PermissionError(await permissionMessage(resp));
+    permissionMsg = await permissionMessage(resp);
+    if (!isInvalidCliTokenMessage(permissionMsg)) {
+      throw new PermissionError(permissionMsg);
+    }
   }
-  if (resp.status === 401) {
-    logger.warn(`Capability gateway request failed (HTTP 401) for ${host}, refreshing CLI token`);
+  if (resp.status === 401 || resp.status === 403 && permissionMsg) {
+    logger.warn(`Capability gateway request failed (${resp.status === 403 ? permissionMsg : "HTTP 401"}) for ${host}, refreshing CLI token`);
     clearCliToken(host);
     const newToken = await getCliToken(host);
     process.stderr.write(`[ae-cli] CLI token refreshed for ${host}
@@ -183,11 +199,53 @@ async function uploadInputFileBytes(host, domain, projectId, purpose, bytes, fil
   }
   return unwrapCapabilityEnvelope(parseCapabilityResponse(await resp.text()));
 }
+async function downloadCapabilityArtifact(host, domain, runId, artifactId) {
+  const url = buildCapabilityGatewayUrl(
+    host,
+    domain,
+    `runs/${encodeURIComponent(runId)}/artifacts/${encodeURIComponent(artifactId)}/download`
+  );
+  const token = await getCliToken(host);
+  let resp = await requestDownloadOnce(url, token);
+  if (resp.status === 403) {
+    throw new PermissionError(await permissionMessage(resp));
+  }
+  if (resp.status === 401) {
+    logger.warn(`Capability gateway artifact download failed (HTTP 401) for ${host}, refreshing CLI token`);
+    clearCliToken(host);
+    const newToken = await getCliToken(host);
+    process.stderr.write(`[ae-cli] CLI token refreshed for ${host}
+`);
+    resp = await requestDownloadOnce(url, newToken);
+    if (resp.status === 403) {
+      throw new PermissionError(await permissionMessage(resp));
+    }
+    if (!resp.ok) {
+      await throwCapabilityHttpError(resp);
+    }
+  } else if (!resp.ok) {
+    await throwCapabilityHttpError(resp);
+  }
+  return {
+    bytes: Buffer.from(await resp.arrayBuffer()),
+    contentType: resp.headers.get("content-type") ?? void 0,
+    contentDisposition: resp.headers.get("content-disposition") ?? void 0
+  };
+}
+async function callCapabilityApi(host, domain, action, method = "POST", params = {}) {
+  const isGet = method === "GET";
+  if (isGet) {
+    return callGateway(host, domain, action.replace(/^\/+|\/+$/g, ""), "GET");
+  }
+  return callGateway(host, domain, action.replace(/^\/+|\/+$/g, ""), method, params);
+}
 
 export {
   CapabilityGatewayError,
   buildCapabilityGatewayUrl,
   executeCapability,
   uploadInputFile,
-  uploadInputFileBytes
+  uploadInputFileBytes,
+  downloadCapabilityArtifact,
+  callCapabilityApi
 };

package/dist/{chunk-ONOA6DYB.js → chunk-ZAOL36CG.js}

@@ -1,6 +1,6 @@
 import {
   logger
-} from "./chunk-65DKFJZB.js";
+} from "./chunk-YCLVYFK7.js";
 
 // src/framework/output.ts
 import Table from "cli-table3";

package/dist/cli-token-TVQRSE46.js

@@ -0,0 +1,18 @@
+import {
+  _resetRenewMemoryForTest,
+  clearCliToken,
+  getCliToken,
+  localRenewDate,
+  mintCliToken,
+  setCliTokenManual
+} from "./chunk-2NDGFQHW.js";
+import "./chunk-AJTH7LT3.js";
+import "./chunk-YCLVYFK7.js";
+export {
+  _resetRenewMemoryForTest,
+  clearCliToken,
+  getCliToken,
+  localRenewDate,
+  mintCliToken,
+  setCliTokenManual
+};

package/dist/{client-7L735LVY.js → client-2643Z5AG.js}

@@ -7,9 +7,9 @@ import {
   queryReportData,
   querySql,
   wsQuery
-} from "./chunk-F3ZDMC2W.js";
-import "./chunk-PFJFZVCK.js";
-import "./chunk-65DKFJZB.js";
+} from "./chunk-KCA6BA5D.js";
+import "./chunk-AJTH7LT3.js";
+import "./chunk-YCLVYFK7.js";
 export {
   httpDelete,
   httpGet,

package/dist/{config-SXD2JKSL.js → config-ZVPARN4R.js}

@@ -1,19 +1,20 @@
 import {
   printError,
   printOutput
-} from "./chunk-ONOA6DYB.js";
+} from "./chunk-ZAOL36CG.js";
 import {
   GLOBAL_QUERY_CONFIG_KEY,
   getAnalysisMappingPathForClusterMode,
   getClusterInfoFilePath,
   isGlobalQueryModeEnabled,
   setGlobalQueryModeEnabled
-} from "./chunk-WXBCP6SD.js";
+} from "./chunk-KGJQCYVC.js";
 import {
   addHost,
   loadConfig,
+  normalizeUrl,
   setActiveHost
-} from "./chunk-65DKFJZB.js";
+} from "./chunk-YCLVYFK7.js";
 
 // src/commands/config.ts
 function registerConfig(program) {
@@ -119,12 +120,6 @@ function failConfig(message, hint) {
   printError("config", message, hint);
   process.exitCode = 1;
 }
-function normalizeUrl(url) {
-  if (!url.startsWith("http://") && !url.startsWith("https://")) {
-    url = `https://${url}`;
-  }
-  return url.replace(/\/$/, "");
-}
 export {
   registerConfig
 };

package/dist/index.js

@@ -1,33 +1,33 @@
 import {
   TeAgentApiError,
   TeAgentCredentialsError
-} from "./chunk-4FQ36OGO.js";
+} from "./chunk-R77JT7XD.js";
 import {
   printError,
   printOutput
-} from "./chunk-ONOA6DYB.js";
+} from "./chunk-ZAOL36CG.js";
 import {
   CapabilityGatewayError,
   executeCapability,
   uploadInputFileBytes
-} from "./chunk-2OW2RENH.js";
+} from "./chunk-YNQFYBDB.js";
 import {
   PermissionError
 } from "./chunk-NOO24N7W.js";
 import {
   clearCliToken,
   getCliToken
-} from "./chunk-OCQPQYHZ.js";
+} from "./chunk-2NDGFQHW.js";
 import {
   SecureStoreAuthError,
   resolveHost
-} from "./chunk-PFJFZVCK.js";
+} from "./chunk-AJTH7LT3.js";
 import {
   getActiveHost,
   getConfigDir,
   logger,
   safeJsonParse
-} from "./chunk-65DKFJZB.js";
+} from "./chunk-YCLVYFK7.js";
 
 // src/index.ts
 import { Command as CommanderCommand } from "commander";
@@ -120,7 +120,7 @@ function createRuntimeContext(cmd, opts, globalOpts) {
   let _clientModule = null;
   async function getClient() {
     if (!_clientModule) {
-      _clientModule = await import("./client-7L735LVY.js");
+      _clientModule = await import("./client-2643Z5AG.js");
     }
     return _clientModule;
   }
@@ -168,7 +168,7 @@ function createRuntimeContext(cmd, opts, globalOpts) {
       return client.queryReportData(projectId, reportId, qp, eventModel, options, ctx.host());
     },
     async token() {
-      const { getToken } = await import("./auth-IDPKDFSY.js");
+      const { getToken } = await import("./auth-MEJ642P4.js");
       return getToken(ctx.host());
     },
     host() {
@@ -3001,57 +3001,57 @@ program.name("ae-cli").version(version).description("CLI tool for ThinkingAI (AE
 async function loadCommands() {
   const commands = [];
   try {
-    const teAnalysis = await import("./te-analysis-CRPFK3LX.js");
+    const teAnalysis = await import("./te-analysis-KAEZXLNS.js");
     commands.push(...teAnalysis.default);
   } catch {
   }
   try {
-    const teAudience = await import("./te-audience-RO2IZOUC.js");
+    const teAudience = await import("./te-audience-PVMKQAFH.js");
     commands.push(...teAudience.default);
   } catch {
   }
   try {
-    const teMeta = await import("./te-meta-5ESSQ5B3.js");
+    const teMeta = await import("./te-meta-TOA6FWDE.js");
     commands.push(...teMeta.default);
   } catch {
   }
   try {
-    const teCommon = await import("./te-common-PUXBUPOL.js");
+    const teCommon = await import("./te-common-CFGQXTFV.js");
     commands.push(...teCommon.default);
   } catch {
   }
   try {
-    const engage = await import("./te-engage-YPQIVF5H.js");
+    const engage = await import("./te-engage-AGREUOW7.js");
     commands.push(...engage.default);
   } catch {
   }
   try {
-    const community = await import("./te-community-NPDZQKMY.js");
+    const community = await import("./te-community-6A7LKYUH.js");
     commands.push(...community.default);
   } catch {
   }
   try {
-    const dataops = await import("./te-dataops-6KWLFNV4.js");
+    const dataops = await import("./te-dataops-Z53CTG2U.js");
     commands.push(...dataops.default);
   } catch {
   }
   try {
-    const teKb = await import("./te-kb-DOGDQIU4.js");
+    const teKb = await import("./te-kb-KQJ53M3A.js");
     commands.push(...teKb.default);
   } catch {
   }
   try {
-    const teTeam = await import("./te-team-SOVKZIDD.js");
+    const teTeam = await import("./te-team-TQGMNHQQ.js");
     commands.push(...teTeam.default);
   } catch {
   }
   try {
-    const teAgent = await import("./te-agent-OYNNTJDU.js");
+    const teAgent = await import("./te-agent-QLIVKRUN.js");
     commands.push(...teAgent.default);
   } catch {
   }
   try {
-    const metadata = await import("./metadata-XWTEGEN2.js");
+    const metadata = await import("./metadata-IPSPQBX3.js");
     commands.push(...metadata.default);
   } catch {
   }
@@ -3059,35 +3059,35 @@ async function loadCommands() {
 }
 async function registerAuthCommands() {
   try {
-    const { registerAuth } = await import("./auth-A2XXG5K4.js");
+    const { registerAuth } = await import("./auth-7TQRGLBC.js");
     registerAuth(program);
   } catch {
   }
 }
 async function registerConfigCommands() {
   try {
-    const { registerConfig } = await import("./config-SXD2JKSL.js");
+    const { registerConfig } = await import("./config-ZVPARN4R.js");
     registerConfig(program);
   } catch {
   }
 }
 async function registerApiCommand() {
   try {
-    const { registerApi } = await import("./raw-IANB4AV5.js");
+    const { registerApi } = await import("./raw-OHSUK42D.js");
     registerApi(program);
   } catch {
   }
 }
 async function registerSyncCommand() {
   try {
-    const { registerSync } = await import("./sync-4HQ3CXSK.js");
+    const { registerSync } = await import("./sync-ULT5SECP.js");
     registerSync(program);
   } catch {
   }
 }
 async function registerModelCommand() {
   try {
-    const { registerModel } = await import("./model-3OVX42DA.js");
+    const { registerModel } = await import("./model-T3KZJWLW.js");
     registerModel(program);
   } catch {
   }

package/dist/{metadata-QWUAX625.js → metadata-IPSPQBX3.js}

@@ -2,15 +2,15 @@ import {
   createCapabilityCommand,
   registerCapabilityGatewayRoute,
   resolveGatewayDomain
-} from "./chunk-AKORWVHJ.js";
+} from "./chunk-LG5YT7P7.js";
 import {
   buildCapabilityGatewayUrl,
   uploadInputFile
-} from "./chunk-V5R5UIRM.js";
+} from "./chunk-YNQFYBDB.js";
 import "./chunk-NOO24N7W.js";
-import "./chunk-OCQPQYHZ.js";
-import "./chunk-PFJFZVCK.js";
-import "./chunk-65DKFJZB.js";
+import "./chunk-2NDGFQHW.js";
+import "./chunk-AJTH7LT3.js";
+import "./chunk-YCLVYFK7.js";
 
 // src/commands/metadata/shared.ts
 function createCapabilityCommand2(config) {

package/dist/{metadata-XWTEGEN2.js → metadata-N5REJ7R7.js}

@@ -2,15 +2,15 @@ import {
   createCapabilityCommand,
   registerCapabilityGatewayRoute,
   resolveGatewayDomain
-} from "./chunk-FIT4CFIN.js";
+} from "./chunk-C4DH76LX.js";
 import {
   buildCapabilityGatewayUrl,
   uploadInputFile
-} from "./chunk-2OW2RENH.js";
+} from "./chunk-BXMXMUD7.js";
 import "./chunk-NOO24N7W.js";
-import "./chunk-OCQPQYHZ.js";
-import "./chunk-PFJFZVCK.js";
-import "./chunk-65DKFJZB.js";
+import "./chunk-2NDGFQHW.js";
+import "./chunk-AJTH7LT3.js";
+import "./chunk-YCLVYFK7.js";
 
 // src/commands/metadata/shared.ts
 function createCapabilityCommand2(config) {

package/dist/{model-3OVX42DA.js → model-T3KZJWLW.js}

@@ -9,8 +9,8 @@ import {
   getClaudeConfigDir,
   getSandboxModels,
   postSandboxModelSelection
-} from "./chunk-4FQ36OGO.js";
-import "./chunk-65DKFJZB.js";
+} from "./chunk-R77JT7XD.js";
+import "./chunk-YCLVYFK7.js";
 
 // src/commands/model/index.ts
 import { existsSync, readFileSync } from "fs";

package/dist/{raw-IANB4AV5.js → raw-OHSUK42D.js}

@@ -1,18 +1,18 @@
 import {
   printError,
   printOutput
-} from "./chunk-ONOA6DYB.js";
+} from "./chunk-ZAOL36CG.js";
 import {
   httpGet,
   httpPost
-} from "./chunk-F3ZDMC2W.js";
+} from "./chunk-KCA6BA5D.js";
 import {
   SecureStoreAuthError,
   resolveHost
-} from "./chunk-PFJFZVCK.js";
+} from "./chunk-AJTH7LT3.js";
 import {
   safeJsonParse
-} from "./chunk-65DKFJZB.js";
+} from "./chunk-YCLVYFK7.js";
 
 // src/api/raw.ts
 function registerApi(program) {

package/dist/{sync-4HQ3CXSK.js → sync-ULT5SECP.js}

@@ -19,11 +19,11 @@ import {
   getSandboxSyncPullCandidates,
   postSandboxSyncPull,
   postToMainApp
-} from "./chunk-4FQ36OGO.js";
+} from "./chunk-R77JT7XD.js";
 import {
   printError
-} from "./chunk-ONOA6DYB.js";
-import "./chunk-65DKFJZB.js";
+} from "./chunk-ZAOL36CG.js";
+import "./chunk-YCLVYFK7.js";
 
 // src/commands/sync/index.ts
 import Table from "cli-table3";