@thinkingai/ae-cli 6.0.42 → 6.0.44

package/dist/{te-agent-IFKZDHZI.js → te-agent-4BKBODMF.js}

@@ -9,12 +9,42 @@ import {
   postToMainApp,
   putToMainApp,
   uploadToMainApp
-} from "./chunk-VLWOLBGZ.js";
-import "./chunk-3FY3RJ26.js";
+} from "./chunk-VPKZ7I72.js";
+import {
+  buildCapabilityGatewayUrl,
+  callCapabilityApi
+} from "./chunk-ILIU36SU.js";
+import "./chunk-6EIJSNBD.js";
+import "./chunk-4SGZG4XY.js";
+import "./chunk-ZZUOD757.js";
 import {
   CliValidationError
-} from "./chunk-AXDXJTPC.js";
-import "./chunk-JHENBQ5B.js";
+} from "./chunk-UW5UN47B.js";
+import "./chunk-LYVNONC4.js";
+import "./chunk-QGM4M3NI.js";
+
+// src/commands/te-agent/api-client.ts
+function getAgentApi(ctx, path) {
+  return getFromMainApp(path, ctx.host());
+}
+function postAgentApi(ctx, path, body) {
+  return postToMainApp(path, body, ctx.host());
+}
+function patchAgentApi(ctx, path, body) {
+  return patchToMainApp(path, body, ctx.host());
+}
+function putAgentApi(ctx, path, body) {
+  return putToMainApp(path, body, ctx.host());
+}
+function deleteAgentApi(ctx, path) {
+  return deleteFromMainApp(path, ctx.host());
+}
+function uploadAgentApi(ctx, path, formData) {
+  return uploadToMainApp(path, formData, ctx.host());
+}
+function getAgentBuffer(ctx, path) {
+  return getBufferFromMainApp(path, ctx.host());
+}
 
 // src/commands/te-agent/agents.ts
 var BASE_PATH = "/api/sandbox/agent/agents";
@@ -53,7 +83,7 @@ var listAgents = {
     }
   },
   dryRun: (ctx) => ({ method: "GET", url: `${BASE_PATH}${buildQuery(ctx)}` }),
-  execute: async (ctx) => getFromMainApp(`${BASE_PATH}${buildQuery(ctx)}`)
+  execute: async (ctx) => getAgentApi(ctx, `${BASE_PATH}${buildQuery(ctx)}`)
 };
 async function resolveInstructions(raw) {
   if (raw === "@-") {
@@ -126,7 +156,7 @@ var createAgent = {
     const skillIds = ctx.json("skillIds");
     if (skillIds) body.skillIds = skillIds;
     if (ctx.bool("autoRename")) body.autoRename = true;
-    return postToMainApp(BASE_PATH, body);
+    return postAgentApi(ctx, BASE_PATH, body);
   }
 };
 var updateAgent = {
@@ -182,7 +212,7 @@ var updateAgent = {
     const skillIds = ctx.json("skillIds");
     if (skillIds) body.skillIds = skillIds;
     if (ctx.str("enabled")) body.enabled = ctx.bool("enabled");
-    return patchToMainApp(`${BASE_PATH}/${encodeURIComponent(ctx.str("id"))}`, body);
+    return patchAgentApi(ctx, `${BASE_PATH}/${encodeURIComponent(ctx.str("id"))}`, body);
   }
 };
 var delAgent = {
@@ -198,7 +228,7 @@ var delAgent = {
     url: `${BASE_PATH}/${encodeURIComponent(ctx.str("id"))}`
   }),
   execute: async (ctx) => {
-    return deleteFromMainApp(`${BASE_PATH}/${encodeURIComponent(ctx.str("id"))}`);
+    return deleteAgentApi(ctx, `${BASE_PATH}/${encodeURIComponent(ctx.str("id"))}`);
   }
 };
 var getAgent = {
@@ -214,7 +244,7 @@ var getAgent = {
     url: `${BASE_PATH}/${encodeURIComponent(ctx.str("id"))}`
   }),
   execute: async (ctx) => {
-    return getFromMainApp(`${BASE_PATH}/${encodeURIComponent(ctx.str("id"))}`);
+    return getAgentApi(ctx, `${BASE_PATH}/${encodeURIComponent(ctx.str("id"))}`);
   }
 };
 
@@ -252,7 +282,8 @@ var listModels = {
     if (scope) params.set("scope", scope);
     const qs = params.toString();
     const current = process.env.TE_AGENT_CURRENT_MODEL_ID?.trim();
-    const data = await getFromMainApp(
+    const data = await getAgentApi(
+      ctx,
       `${BASE_PATH2}${qs ? `?${qs}` : ""}`
     );
     const items = data?.items ?? [];
@@ -332,7 +363,7 @@ var addModel = {
     }
   }),
   execute: async (ctx) => {
-    return postToMainApp(BASE_PATH2, {
+    return postAgentApi(ctx, BASE_PATH2, {
       modelId: ctx.str("modelId"),
       displayName: ctx.str("name"),
       baseUrl: ctx.str("baseUrl"),
@@ -378,7 +409,7 @@ var delModel = {
   execute: async (ctx) => {
     const scope = ctx.str("scope") || "personal";
     const qs = `id=${encodeURIComponent(ctx.str("id"))}&scope=${encodeURIComponent(scope)}`;
-    return deleteFromMainApp(`${BASE_PATH2}?${qs}`);
+    return deleteAgentApi(ctx, `${BASE_PATH2}?${qs}`);
   }
 };
 var toggleModel = {
@@ -406,7 +437,7 @@ var toggleModel = {
     body: { id: ctx.str("id"), enabled: ctx.bool("enabled") }
   }),
   execute: async (ctx) => {
-    return patchToMainApp(BASE_PATH2, {
+    return patchAgentApi(ctx, BASE_PATH2, {
       id: ctx.str("id"),
       enabled: ctx.bool("enabled")
     });
@@ -480,7 +511,7 @@ var updateModel = {
     if (contextLength !== void 0) body.contextLength = contextLength;
     if (ctx.bool("autoRename")) body.autoRename = true;
     body.scope = ctx.str("scope") || "personal";
-    return postToMainApp(BASE_PATH2, body);
+    return postAgentApi(ctx, BASE_PATH2, body);
   }
 };
 var testModel = {
@@ -527,7 +558,7 @@ var testModel = {
     if (provider) body.provider = provider;
     const id = ctx.str("id");
     if (id) body.existingConfigId = id;
-    return postToMainApp(`${BASE_PATH2}/test`, body);
+    return postAgentApi(ctx, `${BASE_PATH2}/test`, body);
   }
 };
 
@@ -601,7 +632,7 @@ var listMcps = {
   execute: async (ctx) => {
     const scope = ctx.str("scope");
     const qs = scope ? `?scope=${encodeURIComponent(scope)}` : "";
-    return getFromMainApp(`${BASE_PATH3}${qs}`);
+    return getAgentApi(ctx, `${BASE_PATH3}${qs}`);
   }
 };
 var addMcp = {
@@ -665,7 +696,7 @@ var addMcp = {
     return { method: "POST", url: BASE_PATH3, body };
   },
   execute: async (ctx) => {
-    const created = await postToMainApp(BASE_PATH3, {
+    const created = await postAgentApi(ctx, BASE_PATH3, {
       name: ctx.str("name"),
       url: ctx.str("url"),
       displayName: ctx.str("displayName") || void 0,
@@ -678,7 +709,7 @@ var addMcp = {
     const meta = buildMetaBody(ctx);
     if (id && meta) {
       try {
-        await patchToMainApp(`${MARKET_BASE_PATH}/${encodeURIComponent(id)}/meta`, meta);
+        await patchAgentApi(ctx, `${MARKET_BASE_PATH}/${encodeURIComponent(id)}/meta`, meta);
       } catch (err) {
         process.stderr.write(`Warning: MCP created but meta update failed: ${err?.message ?? err}
 `);
@@ -700,7 +731,7 @@ var delMcp = {
     url: `${BASE_PATH3}?id=${encodeURIComponent(ctx.str("id"))}`
   }),
   execute: async (ctx) => {
-    return deleteFromMainApp(`${BASE_PATH3}?id=${encodeURIComponent(ctx.str("id"))}`);
+    return deleteAgentApi(ctx, `${BASE_PATH3}?id=${encodeURIComponent(ctx.str("id"))}`);
   }
 };
 var toggleMcp = {
@@ -718,7 +749,7 @@ var toggleMcp = {
     body: { id: ctx.str("id"), enabled: ctx.bool("enabled") }
   }),
   execute: async (ctx) => {
-    return patchToMainApp(BASE_PATH3, {
+    return patchAgentApi(ctx, BASE_PATH3, {
       id: ctx.str("id"),
       enabled: ctx.bool("enabled")
     });
@@ -756,7 +787,7 @@ var listMcpMarket = {
     url: `${MARKET_BASE_PATH}/market?${buildMarketQuery(ctx).toString()}`
   }),
   execute: async (ctx) => {
-    return getFromMainApp(`${MARKET_BASE_PATH}/market?${buildMarketQuery(ctx).toString()}`);
+    return getAgentApi(ctx, `${MARKET_BASE_PATH}/market?${buildMarketQuery(ctx).toString()}`);
   }
 };
 var setMcpMeta = {
@@ -785,7 +816,8 @@ var setMcpMeta = {
     body: buildMetaBody(ctx)
   }),
   execute: async (ctx) => {
-    return patchToMainApp(
+    return patchAgentApi(
+      ctx,
       `${MARKET_BASE_PATH}/${encodeURIComponent(ctx.str("id"))}/meta`,
       buildMetaBody(ctx)
     );
@@ -875,7 +907,8 @@ var updateMcp = {
     body: buildUpdateBody(ctx)
   }),
   execute: async (ctx) => {
-    return patchToMainApp(
+    return patchAgentApi(
+      ctx,
       `${BASE_PATH3}/${encodeURIComponent(ctx.str("id"))}`,
       buildUpdateBody(ctx)
     );
@@ -894,7 +927,7 @@ var mcpTools = {
     url: `${BASE_PATH3}/${encodeURIComponent(ctx.str("id"))}/tools`
   }),
   execute: async (ctx) => {
-    return getFromMainApp(`${BASE_PATH3}/${encodeURIComponent(ctx.str("id"))}/tools`);
+    return getAgentApi(ctx, `${BASE_PATH3}/${encodeURIComponent(ctx.str("id"))}/tools`);
   }
 };
 var mcpAuthStart = {
@@ -916,7 +949,8 @@ var mcpAuthStart = {
     }
   }),
   execute: async (ctx) => {
-    const result = await postToMainApp(
+    const result = await postAgentApi(
+      ctx,
       `${BASE_PATH3}/${encodeURIComponent(ctx.str("id"))}/auth/start`,
       {
         redirectAfter: ctx.str("redirectAfter") || void 0
@@ -951,7 +985,7 @@ var mcpAuthStatus = {
     url: `${BASE_PATH3}/${encodeURIComponent(ctx.str("id"))}/auth/status`
   }),
   execute: async (ctx) => {
-    return getFromMainApp(`${BASE_PATH3}/${encodeURIComponent(ctx.str("id"))}/auth/status`);
+    return getAgentApi(ctx, `${BASE_PATH3}/${encodeURIComponent(ctx.str("id"))}/auth/status`);
   }
 };
 var mcpAuthDisconnect = {
@@ -967,7 +1001,8 @@ var mcpAuthDisconnect = {
     url: `${BASE_PATH3}/${encodeURIComponent(ctx.str("id"))}/auth/disconnect`
   }),
   execute: async (ctx) => {
-    return postToMainApp(
+    return postAgentApi(
+      ctx,
       `${BASE_PATH3}/${encodeURIComponent(ctx.str("id"))}/auth/disconnect`,
       {}
     );
@@ -983,8 +1018,8 @@ var listMcpCredentials = {
     method: "GET",
     url: CRED_BASE_PATH
   }),
-  execute: async () => {
-    return getFromMainApp(CRED_BASE_PATH);
+  execute: async (ctx) => {
+    return getAgentApi(ctx, CRED_BASE_PATH);
   }
 };
 var setMcpCredential = {
@@ -1022,7 +1057,7 @@ var setMcpCredential = {
     }
   }),
   execute: async (ctx) => {
-    return postToMainApp(CRED_BASE_PATH, {
+    return postAgentApi(ctx, CRED_BASE_PATH, {
       mcpServerId: ctx.str("mcpServerId"),
       authType: ctx.str("authType") || "oauth",
       token: ctx.str("token") || void 0,
@@ -1047,7 +1082,7 @@ var autoProvisionMcpCredentials = {
   }),
   execute: async (ctx) => {
     const accessToken = ctx.str("accessToken") || await ctx.token();
-    return postToMainApp(`${CRED_BASE_PATH}/auto-provision`, { accessToken });
+    return postAgentApi(ctx, `${CRED_BASE_PATH}/auto-provision`, { accessToken });
   }
 };
 var mcpToken = {
@@ -1061,7 +1096,7 @@ var mcpToken = {
     url: `${CRED_BASE_PATH}/mcp-token`
   }),
   execute: async (ctx) => {
-    const result = await getFromMainApp(`${CRED_BASE_PATH}/mcp-token`);
+    const result = await getAgentApi(ctx, `${CRED_BASE_PATH}/mcp-token`);
     if (process.stderr.isTTY) {
       process.stderr.write(
         `
@@ -1093,7 +1128,7 @@ var mcpStats = {
   },
   execute: async (ctx) => {
     const days = ctx.optionalNum("days") ?? 30;
-    return getFromMainApp(`${STATS_PATH}?days=${days}`);
+    return getAgentApi(ctx, `${STATS_PATH}?days=${days}`);
   }
 };
 
@@ -1149,7 +1184,7 @@ var listSkills = {
   execute: async (ctx) => {
     const scope = ctx.str("scope");
     const qs = scope ? `?scope=${encodeURIComponent(scope)}` : "";
-    return getFromMainApp(`${BASE_PATH4}${qs}`);
+    return getAgentApi(ctx, `${BASE_PATH4}${qs}`);
   }
 };
 var addSkill = {
@@ -1245,7 +1280,7 @@ var addSkill = {
   },
   execute: async (ctx) => {
     const instructions = await resolveInstructions2(ctx.str("instructions"));
-    const created = await postToMainApp(BASE_PATH4, {
+    const created = await postAgentApi(ctx, BASE_PATH4, {
       name: ctx.str("name"),
       description: ctx.str("description"),
       instructions,
@@ -1257,7 +1292,7 @@ var addSkill = {
     const meta = buildMetaBody2(ctx);
     if (id && meta) {
       try {
-        await patchToMainApp(`${MARKET_BASE_PATH2}/${encodeURIComponent(id)}/meta`, meta);
+        await patchAgentApi(ctx, `${MARKET_BASE_PATH2}/${encodeURIComponent(id)}/meta`, meta);
       } catch (err) {
         process.stderr.write(`Warning: Skill created but meta update failed: ${err?.message ?? err}
 `);
@@ -1284,7 +1319,7 @@ var delSkill = {
     url: `${BASE_PATH4}?id=${encodeURIComponent(ctx.str("id"))}`
   }),
   execute: async (ctx) => {
-    return deleteFromMainApp(`${BASE_PATH4}?id=${encodeURIComponent(ctx.str("id"))}`);
+    return deleteAgentApi(ctx, `${BASE_PATH4}?id=${encodeURIComponent(ctx.str("id"))}`);
   }
 };
 var toggleSkill = {
@@ -1312,7 +1347,7 @@ var toggleSkill = {
     body: { id: ctx.str("id"), enabled: ctx.bool("enabled") }
   }),
   execute: async (ctx) => {
-    return patchToMainApp(BASE_PATH4, {
+    return patchAgentApi(ctx, BASE_PATH4, {
       id: ctx.str("id"),
       enabled: ctx.bool("enabled")
     });
@@ -1384,7 +1419,7 @@ var listSkillMarket = {
     url: `${MARKET_BASE_PATH2}/market?${buildMarketQuery(ctx).toString()}`
   }),
   execute: async (ctx) => {
-    return getFromMainApp(`${MARKET_BASE_PATH2}/market?${buildMarketQuery(ctx).toString()}`);
+    return getAgentApi(ctx, `${MARKET_BASE_PATH2}/market?${buildMarketQuery(ctx).toString()}`);
   }
 };
 var setSkillMeta = {
@@ -1433,7 +1468,7 @@ var setSkillMeta = {
     body: buildMetaBody2(ctx)
   }),
   execute: async (ctx) => {
-    return patchToMainApp(`${MARKET_BASE_PATH2}/${encodeURIComponent(ctx.str("id"))}/meta`, buildMetaBody2(ctx));
+    return patchAgentApi(ctx, `${MARKET_BASE_PATH2}/${encodeURIComponent(ctx.str("id"))}/meta`, buildMetaBody2(ctx));
   }
 };
 var copySkill = {
@@ -1479,7 +1514,7 @@ var copySkill = {
     body: buildMetaBody2(ctx) ?? {}
   }),
   execute: async (ctx) => {
-    return postToMainApp(`${MARKET_BASE_PATH2}/${encodeURIComponent(ctx.str("id"))}/copy`, buildMetaBody2(ctx) ?? {});
+    return postAgentApi(ctx, `${MARKET_BASE_PATH2}/${encodeURIComponent(ctx.str("id"))}/copy`, buildMetaBody2(ctx) ?? {});
   }
 };
 
@@ -1561,7 +1596,7 @@ function makeAssetListCommand(commandName, description, dirName) {
       url: `${BASE_PATH5}/${encodeURIComponent(ctx.str("id"))}/${dirName}`
     }),
     execute: async (ctx) => {
-      return getFromMainApp(`${BASE_PATH5}/${encodeURIComponent(ctx.str("id"))}/${dirName}`);
+      return getAgentApi(ctx, `${BASE_PATH5}/${encodeURIComponent(ctx.str("id"))}/${dirName}`);
     }
   };
 }
@@ -1604,7 +1639,7 @@ function makeAssetUploadCommand(commandName, description, dirName) {
     }),
     execute: async (ctx) => {
       const fd = buildAssetFormData(ctx.str("file"), ctx.str("subPath") || void 0);
-      return uploadToMainApp(`${BASE_PATH5}/${encodeURIComponent(ctx.str("id"))}/${dirName}`, fd);
+      return uploadAgentApi(ctx, `${BASE_PATH5}/${encodeURIComponent(ctx.str("id"))}/${dirName}`, fd);
     }
   };
 }
@@ -1647,7 +1682,7 @@ function makeAssetReadCommand(commandName, description, dirName) {
       const filePath = ctx.str("path");
       const encodedPath = filePath.split("/").map((seg) => encodeURIComponent(seg)).join("/");
       const url = `${BASE_PATH5}/${encodeURIComponent(ctx.str("id"))}/${dirName}/${encodedPath}`;
-      const { buffer, fileName, contentType } = await getBufferFromMainApp(url);
+      const { buffer, fileName, contentType } = await getAgentBuffer(ctx, url);
       const outputPath = ctx.str("output");
       if (outputPath) {
         const resolved = resolve(outputPath);
@@ -1692,7 +1727,7 @@ function makeAssetDelCommand(commandName, description, dirName) {
     execute: async (ctx) => {
       const filePath = ctx.str("path");
       const encodedPath = filePath.split("/").map((seg) => encodeURIComponent(seg)).join("/");
-      return deleteFromMainApp(`${BASE_PATH5}/${encodeURIComponent(ctx.str("id"))}/${dirName}/${encodedPath}`);
+      return deleteAgentApi(ctx, `${BASE_PATH5}/${encodeURIComponent(ctx.str("id"))}/${dirName}/${encodedPath}`);
     }
   };
 }
@@ -1807,7 +1842,7 @@ var editSkill = {
     if (ctx.str("iconEmoji")) body.iconEmoji = ctx.str("iconEmoji");
     if (ctx.str("iconColor")) body.iconColor = ctx.str("iconColor");
     if (ctx.str("version")) body.version = ctx.str("version");
-    return putToMainApp(`${BASE_PATH5}/${encodeURIComponent(ctx.str("id"))}`, body);
+    return putAgentApi(ctx, `${BASE_PATH5}/${encodeURIComponent(ctx.str("id"))}`, body);
   }
 };
 var getSkillContent = {
@@ -1828,7 +1863,7 @@ var getSkillContent = {
     url: `${BASE_PATH5}/${encodeURIComponent(ctx.str("id"))}/content`
   }),
   execute: async (ctx) => {
-    return getFromMainApp(`${BASE_PATH5}/${encodeURIComponent(ctx.str("id"))}/content`);
+    return getAgentApi(ctx, `${BASE_PATH5}/${encodeURIComponent(ctx.str("id"))}/content`);
   }
 };
 var listSkillAssets = makeAssetListCommand(
@@ -2039,7 +2074,7 @@ var uploadSkill = {
     if (ctx.str("iconEmoji")) fd.append("iconEmoji", ctx.str("iconEmoji"));
     if (ctx.str("iconColor")) fd.append("iconColor", ctx.str("iconColor"));
     if (ctx.str("version")) fd.append("version", ctx.str("version"));
-    return uploadToMainApp(`${BASE_PATH5}/upload`, fd);
+    return uploadAgentApi(ctx, `${BASE_PATH5}/upload`, fd);
   }
 };
 var rescanSkills = {
@@ -2052,8 +2087,8 @@ var rescanSkills = {
     method: "POST",
     url: `${BASE_PATH5}/rescan`
   }),
-  execute: async () => {
-    return postToMainApp(`${BASE_PATH5}/rescan`, {});
+  execute: async (ctx) => {
+    return postAgentApi(ctx, `${BASE_PATH5}/rescan`, {});
   }
 };
 
@@ -2103,7 +2138,7 @@ var submitSkill = {
     if (iconEmoji) body.iconEmoji = iconEmoji;
     const iconColor = ctx.str("iconColor");
     if (iconColor) body.iconColor = iconColor;
-    return postToMainApp(`${BASE}/${encodeURIComponent(ctx.str("id"))}/submit`, body);
+    return postAgentApi(ctx, `${BASE}/${encodeURIComponent(ctx.str("id"))}/submit`, body);
   }
 };
 var listSkillSubmissions = {
@@ -2135,7 +2170,7 @@ var listSkillSubmissions = {
     if (status) params.set("status", status);
     if (ctx.bool("mine")) params.set("mine", "true");
     const qs = params.toString();
-    return getFromMainApp(`${BASE}/submissions${qs ? `?${qs}` : ""}`);
+    return getAgentApi(ctx, `${BASE}/submissions${qs ? `?${qs}` : ""}`);
   }
 };
 var cancelSkillSubmission = {
@@ -2151,7 +2186,7 @@ var cancelSkillSubmission = {
     url: `${BASE}/submissions/${encodeURIComponent(ctx.str("id"))}/cancel`
   }),
   execute: async (ctx) => {
-    return postToMainApp(`${BASE}/submissions/${encodeURIComponent(ctx.str("id"))}/cancel`, {});
+    return postAgentApi(ctx, `${BASE}/submissions/${encodeURIComponent(ctx.str("id"))}/cancel`, {});
   }
 };
 var approveSkill = {
@@ -2167,7 +2202,7 @@ var approveSkill = {
     url: `${BASE}/submissions/${encodeURIComponent(ctx.str("id"))}/approve`
   }),
   execute: async (ctx) => {
-    return postToMainApp(`${BASE}/submissions/${encodeURIComponent(ctx.str("id"))}/approve`, {});
+    return postAgentApi(ctx, `${BASE}/submissions/${encodeURIComponent(ctx.str("id"))}/approve`, {});
   }
 };
 var rejectSkill = {
@@ -2191,7 +2226,7 @@ var rejectSkill = {
     body: { reason: ctx.str("reason") }
   }),
   execute: async (ctx) => {
-    return postToMainApp(`${BASE}/submissions/${encodeURIComponent(ctx.str("id"))}/reject`, {
+    return postAgentApi(ctx, `${BASE}/submissions/${encodeURIComponent(ctx.str("id"))}/reject`, {
       reason: ctx.str("reason")
     });
   }
@@ -2239,7 +2274,7 @@ var shareSkill = {
     if (iconEmoji) body.iconEmoji = iconEmoji;
     const iconColor = ctx.str("iconColor");
     if (iconColor) body.iconColor = iconColor;
-    return postToMainApp(`${BASE2}/${encodeURIComponent(ctx.str("id"))}/share`, body);
+    return postAgentApi(ctx, `${BASE2}/${encodeURIComponent(ctx.str("id"))}/share`, body);
   }
 };
 var listSkillShares = {
@@ -2273,7 +2308,7 @@ var listSkillShares = {
     params.set("direction", ctx.str("direction") || "received");
     const status = ctx.str("status");
     if (status) params.set("status", status);
-    return getFromMainApp(`${BASE2}/shares?${params.toString()}`);
+    return getAgentApi(ctx, `${BASE2}/shares?${params.toString()}`);
   }
 };
 var acceptSkillShare = {
@@ -2289,7 +2324,7 @@ var acceptSkillShare = {
     url: `${BASE2}/shares/${encodeURIComponent(ctx.str("id"))}/accept`
   }),
   execute: async (ctx) => {
-    return postToMainApp(`${BASE2}/shares/${encodeURIComponent(ctx.str("id"))}/accept`, {});
+    return postAgentApi(ctx, `${BASE2}/shares/${encodeURIComponent(ctx.str("id"))}/accept`, {});
   }
 };
 var rejectSkillShare = {
@@ -2305,7 +2340,7 @@ var rejectSkillShare = {
     url: `${BASE2}/shares/${encodeURIComponent(ctx.str("id"))}/reject`
   }),
   execute: async (ctx) => {
-    return postToMainApp(`${BASE2}/shares/${encodeURIComponent(ctx.str("id"))}/reject`, {});
+    return postAgentApi(ctx, `${BASE2}/shares/${encodeURIComponent(ctx.str("id"))}/reject`, {});
   }
 };
 
@@ -2362,7 +2397,7 @@ function resolveFilePaths(ctx) {
     throw err;
   }
 }
-async function uploadFiles(filePaths) {
+async function uploadFiles(ctx, filePaths) {
   const formData = new FormData();
   for (const filePath of filePaths) {
     const resolved = resolve2(filePath);
@@ -2374,7 +2409,7 @@ async function uploadFiles(filePaths) {
     const blob = new Blob([buffer], { type: mimeType });
     formData.append("file", blob, basename2(resolved));
   }
-  return uploadToMainApp(UPLOAD_PATH, formData);
+  return uploadAgentApi(ctx, UPLOAD_PATH, formData);
 }
 var listAttachments = {
   service: "agent",
@@ -2409,7 +2444,7 @@ var listAttachments = {
     if (ctx.num("page")) params.set("page", String(ctx.num("page")));
     if (ctx.num("pageSize")) params.set("pageSize", String(ctx.num("pageSize")));
     const qs = params.toString();
-    return getFromMainApp(`${LIST_PATH}${qs ? "?" + qs : ""}`);
+    return getAgentApi(ctx, `${LIST_PATH}${qs ? "?" + qs : ""}`);
   }
 };
 var addAttachment = {
@@ -2430,7 +2465,7 @@ var addAttachment = {
   },
   execute: async (ctx) => {
     const paths = resolveFilePaths(ctx);
-    return uploadFiles(paths);
+    return uploadFiles(ctx, paths);
   }
 };
 var delAttachment = {
@@ -2446,7 +2481,7 @@ var delAttachment = {
     url: `${LIST_PATH}?id=${encodeURIComponent(ctx.str("id"))}`
   }),
   execute: async (ctx) => {
-    return deleteFromMainApp(`${LIST_PATH}?id=${encodeURIComponent(ctx.str("id"))}`);
+    return deleteAgentApi(ctx, `${LIST_PATH}?id=${encodeURIComponent(ctx.str("id"))}`);
   }
 };
 var attachmentStats = {
@@ -2459,8 +2494,8 @@ var attachmentStats = {
     method: "GET",
     url: STATS_PATH2
   }),
-  execute: async () => {
-    return getFromMainApp(STATS_PATH2);
+  execute: async (ctx) => {
+    return getAgentApi(ctx, STATS_PATH2);
   }
 };
 
@@ -2695,7 +2730,7 @@ var listAutomations = {
     method: "GET",
     url: buildListPath(ctx)
   }),
-  execute: async (ctx) => getFromMainApp(buildListPath(ctx))
+  execute: async (ctx) => getAgentApi(ctx, buildListPath(ctx))
 };
 var createAutomation = {
   service: "agent",
@@ -2764,7 +2799,7 @@ var createAutomation = {
     url: BASE_PATH6,
     body: buildCreateBody(ctx)
   }),
-  execute: async (ctx) => postToMainApp(BASE_PATH6, buildCreateBody(ctx))
+  execute: async (ctx) => postAgentApi(ctx, BASE_PATH6, buildCreateBody(ctx))
 };
 var updateAutomation = {
   service: "agent",
@@ -2810,7 +2845,8 @@ var updateAutomation = {
     url: `${BASE_PATH6}/${encodeURIComponent(ctx.str("id"))}`,
     body: buildUpdateBody2(ctx)
   }),
-  execute: async (ctx) => patchToMainApp(
+  execute: async (ctx) => patchAgentApi(
+    ctx,
     `${BASE_PATH6}/${encodeURIComponent(ctx.str("id"))}`,
     buildUpdateBody2(ctx)
   )
@@ -3151,7 +3187,8 @@ var findArchivedConversations = {
   }),
   execute: async (ctx) => {
     const timeZone = readTimeZone(ctx);
-    const result = await getFromMainApp(
+    const result = await getAgentApi(
+      ctx,
       buildArchivedConversationSearchPath(ctx)
     );
     return {
@@ -3181,7 +3218,8 @@ var restoreConversation = {
     body: {}
   }),
   execute: async (ctx) => {
-    const result = await postToMainApp(
+    const result = await postAgentApi(
+      ctx,
       `${CONVERSATION_PATH}/${encodeURIComponent(ctx.str("conversationId"))}/restore`,
       {}
     );
@@ -3189,6 +3227,569 @@ var restoreConversation = {
   }
 };
 
+// src/commands/te-agent/approval-cli-client.ts
+var APPROVAL_GATEWAY_DOMAIN = "approval";
+var DEFAULT_TE_CLAUDE_BASE_PATH = "/agent";
+function normalizeBasePath(value) {
+  const trimmed = value.trim();
+  if (!trimmed || trimmed === "/") return "";
+  return `/${trimmed.replace(/^\/+|\/+$/g, "")}`;
+}
+function resolveApprovalApiBaseUrl(host) {
+  const base = host.replace(/\/+$/, "");
+  const basePath = normalizeBasePath(
+    process.env.TE_CLAUDE_BASE_PATH ?? process.env.AE_API_PREFIX ?? DEFAULT_TE_CLAUDE_BASE_PATH
+  );
+  return basePath && !base.endsWith(basePath) ? `${base}${basePath}` : base;
+}
+function buildApprovalCliUrl(ctx, path) {
+  return buildCapabilityGatewayUrl(resolveApprovalApiBaseUrl(ctx.host()), APPROVAL_GATEWAY_DOMAIN, path);
+}
+function requestApprovalCli(ctx, method, path, body, options = {}) {
+  return callCapabilityApi(
+    ctx.host(),
+    APPROVAL_GATEWAY_DOMAIN,
+    path,
+    method,
+    body,
+    {
+      apiBaseUrl: resolveApprovalApiBaseUrl(ctx.host()),
+      ...options,
+      retryOnInvalidTokenForbidden: false
+    }
+  );
+}
+function getApprovalCli(ctx, path) {
+  return requestApprovalCli(ctx, "GET", path);
+}
+function postApprovalCli(ctx, path, body, options = {}) {
+  return requestApprovalCli(ctx, "POST", path, body, options);
+}
+
+// src/commands/te-agent/approval-commands.ts
+var SERVICE = "agent";
+var MAX_ID_LENGTH = 191;
+var MAX_VERSION = 2147483647;
+var DECISION_STATUSES = ["pending", "approved", "rejected", "cancelled"];
+var TASK_STATUSES = ["pending", "completed", "cancelled"];
+var EFFECT_STATUSES = ["pending", "running", "succeeded", "failed", "manual_required"];
+var LOCAL_DRY_RUN_HELP = [
+  "Dry-run is a local request preview only.",
+  "It does not verify server permissions, current approval state, or future conditional routing."
+].join(" ");
+function validation(message, hint) {
+  throw new CliValidationError(message, { hint });
+}
+function optionalString(ctx, name) {
+  const value = ctx.str(name);
+  return value ? value : void 0;
+}
+function validateStableId(ctx, name, flagName) {
+  const value = ctx.str(name);
+  if (!value || value !== value.trim() || value.length > MAX_ID_LENGTH) {
+    validation(`--${flagName} must be a non-empty identifier of at most ${MAX_ID_LENGTH} characters`);
+  }
+}
+function validateApprovalTypeId(ctx) {
+  const value = ctx.str("approvalTypeId");
+  if (!value || value.length > MAX_ID_LENGTH || !/^[a-z][a-z0-9_.-]*@[1-9]\d*$/.test(value)) {
+    validation("--approval-type-id must use the format type.key@version");
+  }
+  const version = value.slice(value.lastIndexOf("@") + 1);
+  if (BigInt(version) > BigInt(MAX_VERSION)) {
+    validation("--approval-type-id version is out of range");
+  }
+}
+function validateClientRequestId(ctx) {
+  validateStableId(ctx, "clientRequestId", "client-request-id");
+  if (ctx.str("clientRequestId").startsWith("system:")) {
+    validation("--client-request-id must not use the reserved system: prefix");
+  }
+}
+function validateText(ctx, name, flagName, options) {
+  const value = ctx.str(name);
+  if (!value && !options.required) return;
+  if (!value || value.trim().length === 0) {
+    validation(`--${flagName} must not be empty`);
+  }
+  if (value.length > options.maxLength) {
+    validation(`--${flagName} must not exceed ${options.maxLength} characters`);
+  }
+}
+function validateNonNegativeInteger(ctx, name, flagName) {
+  const value = ctx.optionalNum(name);
+  if (value === void 0 || !Number.isInteger(value) || value < 0 || value > MAX_VERSION) {
+    validation(`--${flagName} must be an integer between 0 and ${MAX_VERSION}`);
+  }
+}
+function validateExpectedVersion(ctx) {
+  validateNonNegativeInteger(ctx, "expectedVersion", "expected-version");
+}
+function validateExpectedAttempt(ctx) {
+  validateNonNegativeInteger(ctx, "expectedAttempt", "expected-attempt");
+}
+function assertAllowed(value, flagName, allowed) {
+  if (value && !allowed.includes(value)) {
+    validation(`--${flagName} must be one of: ${allowed.join(", ")}`);
+  }
+}
+function validateDateRange(ctx) {
+  const createdAfter = optionalString(ctx, "createdAfter");
+  const createdBefore = optionalString(ctx, "createdBefore");
+  if (createdAfter && Number.isNaN(Date.parse(createdAfter))) {
+    validation("--created-after must be a valid ISO datetime");
+  }
+  if (createdBefore && Number.isNaN(Date.parse(createdBefore))) {
+    validation("--created-before must be a valid ISO datetime");
+  }
+  if (createdAfter && createdBefore && Date.parse(createdAfter) >= Date.parse(createdBefore)) {
+    validation("--created-after must be earlier than --created-before");
+  }
+}
+function validateLimit(ctx) {
+  const limit = ctx.optionalNum("limit") ?? 20;
+  if (!Number.isInteger(limit) || limit < 1 || limit > 100) {
+    validation("--limit must be an integer between 1 and 100");
+  }
+}
+function isRecord(value) {
+  return value !== null && typeof value === "object" && !Array.isArray(value);
+}
+function validateSnakeCaseValue(value, path = "payload") {
+  if (Array.isArray(value)) {
+    value.forEach((item, index) => validateSnakeCaseValue(item, `${path}[${index}]`));
+    return;
+  }
+  if (!isRecord(value)) return;
+  for (const [key, child] of Object.entries(value)) {
+    if (!/^[a-z][a-z0-9]*(?:_[a-z0-9]+)*$/.test(key)) {
+      validation(`--payload keys must use snake_case (invalid key at ${path})`);
+    }
+    validateSnakeCaseValue(child, `${path}.${key}`);
+  }
+}
+function approvalPayload(ctx) {
+  const payload = ctx.json("payload");
+  if (!isRecord(payload)) {
+    validation("--payload must be a JSON object");
+  }
+  validateSnakeCaseValue(payload);
+  return payload;
+}
+function buildQuery2(params) {
+  const searchParams = new URLSearchParams();
+  for (const [key, value] of Object.entries(params)) {
+    if (value !== void 0 && value !== "") searchParams.set(key, String(value));
+  }
+  const query = searchParams.toString();
+  return query ? `?${query}` : "";
+}
+function requestListPath(ctx) {
+  return `requests${buildQuery2({
+    cursor: optionalString(ctx, "cursor"),
+    limit: ctx.optionalNum("limit") ?? 20,
+    type_id: optionalString(ctx, "approvalTypeId"),
+    status: optionalString(ctx, "status"),
+    requester_id: optionalString(ctx, "requesterId"),
+    created_after: optionalString(ctx, "createdAfter"),
+    created_before: optionalString(ctx, "createdBefore")
+  })}`;
+}
+function taskListPath(ctx) {
+  return `tasks${buildQuery2({
+    cursor: optionalString(ctx, "cursor"),
+    limit: ctx.optionalNum("limit") ?? 20,
+    status: optionalString(ctx, "status"),
+    request_id: optionalString(ctx, "approvalRequestId"),
+    created_after: optionalString(ctx, "createdAfter"),
+    created_before: optionalString(ctx, "createdBefore")
+  })}`;
+}
+function effectListPath(ctx) {
+  return `effects${buildQuery2({
+    cursor: optionalString(ctx, "cursor"),
+    limit: ctx.optionalNum("limit") ?? 20,
+    status: optionalString(ctx, "status"),
+    request_id: optionalString(ctx, "approvalRequestId"),
+    created_after: optionalString(ctx, "createdAfter"),
+    created_before: optionalString(ctx, "createdBefore")
+  })}`;
+}
+function submitBody(ctx) {
+  return {
+    type_id: ctx.str("approvalTypeId"),
+    resource_id: ctx.str("resourceId"),
+    reason: ctx.str("reason"),
+    payload: approvalPayload(ctx),
+    client_request_id: ctx.str("clientRequestId")
+  };
+}
+function cancelBody(ctx) {
+  return {
+    expected_version: ctx.num("expectedVersion"),
+    ...optionalString(ctx, "reason") ? { reason: ctx.str("reason") } : {},
+    client_request_id: ctx.str("clientRequestId")
+  };
+}
+function approveBody(ctx) {
+  return {
+    expected_version: ctx.num("expectedVersion"),
+    ...optionalString(ctx, "note") ? { note: ctx.str("note") } : {},
+    client_request_id: ctx.str("clientRequestId")
+  };
+}
+function rejectBody(ctx) {
+  return {
+    expected_version: ctx.num("expectedVersion"),
+    reason: ctx.str("reason"),
+    client_request_id: ctx.str("clientRequestId")
+  };
+}
+function retryEffectBody(ctx) {
+  return {
+    expected_version: ctx.num("expectedVersion"),
+    expected_attempt: ctx.num("expectedAttempt"),
+    reason: ctx.str("reason"),
+    confirm_risk: true,
+    client_request_id: ctx.str("clientRequestId")
+  };
+}
+var approvalTypeIdFlag = {
+  name: "approval-type-id",
+  type: "string",
+  required: true,
+  maxLength: MAX_ID_LENGTH,
+  desc: "Versioned approval type ID, for example skill.publish@1"
+};
+var approvalRequestIdFlag = {
+  name: "approval-request-id",
+  type: "string",
+  required: true,
+  maxLength: MAX_ID_LENGTH,
+  desc: "Approval request ID"
+};
+var taskIdFlag = {
+  name: "task-id",
+  type: "string",
+  required: true,
+  maxLength: MAX_ID_LENGTH,
+  desc: "Approval task ID"
+};
+var effectIdFlag = {
+  name: "effect-id",
+  type: "string",
+  required: true,
+  maxLength: MAX_ID_LENGTH,
+  desc: "Approval Effect ID"
+};
+var clientRequestIdFlag = {
+  name: "client-request-id",
+  type: "string",
+  required: true,
+  maxLength: MAX_ID_LENGTH,
+  desc: "Caller-generated idempotency key"
+};
+var expectedVersionFlag = {
+  name: "expected-version",
+  type: "number",
+  required: true,
+  min: 0,
+  max: MAX_VERSION,
+  desc: "Expected optimistic version from the latest request, task, or Effect read"
+};
+var expectedAttemptFlag = {
+  name: "expected-attempt",
+  type: "number",
+  required: true,
+  min: 0,
+  max: MAX_VERSION,
+  desc: "Expected Effect attempt from the latest Effect read"
+};
+var pageFlags = [
+  { name: "cursor", type: "string", required: false, maxLength: 1024, desc: "Opaque cursor from the previous page" },
+  { name: "limit", type: "number", required: false, default: 20, min: 1, max: 100, desc: "Page size from 1 to 100" },
+  { name: "created-after", type: "string", required: false, desc: "Include records created at or after this ISO datetime" },
+  { name: "created-before", type: "string", required: false, desc: "Include records created before this ISO datetime" }
+];
+var listApprovalTypes = {
+  service: SERVICE,
+  resource: "approval-type",
+  command: "list",
+  description: "List registered versioned approval types and their input contracts",
+  flags: [],
+  risk: "read",
+  dryRun: (ctx) => ({ method: "GET", url: buildApprovalCliUrl(ctx, "types") }),
+  execute: (ctx) => getApprovalCli(ctx, "types")
+};
+var getApprovalType = {
+  service: SERVICE,
+  resource: "approval-type",
+  command: "get",
+  description: "Get one versioned approval type and its input contract",
+  flags: [approvalTypeIdFlag],
+  risk: "read",
+  validate: validateApprovalTypeId,
+  dryRun: (ctx) => ({
+    method: "GET",
+    url: buildApprovalCliUrl(ctx, `types/${encodeURIComponent(ctx.str("approvalTypeId"))}`)
+  }),
+  execute: (ctx) => getApprovalCli(ctx, `types/${encodeURIComponent(ctx.str("approvalTypeId"))}`)
+};
+var listApprovalRequests = {
+  service: SERVICE,
+  resource: "approval-request",
+  command: "list",
+  description: "List approval requests visible to the current user",
+  flags: [
+    ...pageFlags,
+    { name: "approval-type-id", type: "string", required: false, maxLength: MAX_ID_LENGTH, desc: "Filter by versioned approval type ID" },
+    { name: "status", type: "string", required: false, desc: `Filter by decision status: ${DECISION_STATUSES.join(" | ")}` },
+    { name: "requester-id", type: "string", required: false, maxLength: MAX_ID_LENGTH, desc: "Filter by requester user ID when authorized" }
+  ],
+  risk: "read",
+  validate: (ctx) => {
+    validateLimit(ctx);
+    validateDateRange(ctx);
+    assertAllowed(optionalString(ctx, "status"), "status", DECISION_STATUSES);
+    if (optionalString(ctx, "approvalTypeId")) validateApprovalTypeId(ctx);
+    if (optionalString(ctx, "requesterId")) validateStableId(ctx, "requesterId", "requester-id");
+  },
+  dryRun: (ctx) => ({ method: "GET", url: buildApprovalCliUrl(ctx, requestListPath(ctx)) }),
+  execute: (ctx) => getApprovalCli(ctx, requestListPath(ctx))
+};
+var getApprovalRequest = {
+  service: SERVICE,
+  resource: "approval-request",
+  command: "get",
+  description: "Get one approval request by approval request ID",
+  flags: [approvalRequestIdFlag],
+  risk: "read",
+  validate: (ctx) => validateStableId(ctx, "approvalRequestId", "approval-request-id"),
+  dryRun: (ctx) => ({
+    method: "GET",
+    url: buildApprovalCliUrl(ctx, `requests/${encodeURIComponent(ctx.str("approvalRequestId"))}`)
+  }),
+  execute: (ctx) => getApprovalCli(ctx, `requests/${encodeURIComponent(ctx.str("approvalRequestId"))}`)
+};
+var submitApprovalRequest = {
+  service: SERVICE,
+  resource: "approval-request",
+  command: "submit",
+  description: "Submit a resource snapshot to a versioned approval type",
+  helpText: LOCAL_DRY_RUN_HELP,
+  flags: [
+    approvalTypeIdFlag,
+    { name: "resource-id", type: "string", required: true, maxLength: MAX_ID_LENGTH, desc: "Business resource ID resolved by the selected approval type" },
+    { name: "reason", type: "string", required: true, maxLength: 2e3, desc: "Submission reason" },
+    { name: "payload", type: "json", required: true, desc: "Type-specific snake_case JSON object from approval-type get" },
+    clientRequestIdFlag
+  ],
+  risk: "write",
+  validate: (ctx) => {
+    validateApprovalTypeId(ctx);
+    validateStableId(ctx, "resourceId", "resource-id");
+    validateText(ctx, "reason", "reason", { required: true, maxLength: 2e3 });
+    validateClientRequestId(ctx);
+    approvalPayload(ctx);
+  },
+  dryRun: (ctx) => ({ method: "POST", url: buildApprovalCliUrl(ctx, "requests"), body: submitBody(ctx) }),
+  execute: (ctx) => postApprovalCli(ctx, "requests", submitBody(ctx))
+};
+var cancelApprovalRequest = {
+  service: SERVICE,
+  resource: "approval-request",
+  command: "cancel",
+  description: "Cancel a pending approval request with optimistic concurrency control",
+  helpText: LOCAL_DRY_RUN_HELP,
+  flags: [
+    approvalRequestIdFlag,
+    expectedVersionFlag,
+    { name: "reason", type: "string", required: false, maxLength: 2e3, desc: "Optional cancellation reason; required when cancelling another user request" },
+    clientRequestIdFlag
+  ],
+  risk: "write",
+  validate: (ctx) => {
+    validateStableId(ctx, "approvalRequestId", "approval-request-id");
+    validateExpectedVersion(ctx);
+    validateText(ctx, "reason", "reason", { required: false, maxLength: 2e3 });
+    validateClientRequestId(ctx);
+  },
+  dryRun: (ctx) => ({
+    method: "POST",
+    url: buildApprovalCliUrl(ctx, `requests/${encodeURIComponent(ctx.str("approvalRequestId"))}/cancel`),
+    body: cancelBody(ctx)
+  }),
+  execute: (ctx) => postApprovalCli(
+    ctx,
+    `requests/${encodeURIComponent(ctx.str("approvalRequestId"))}/cancel`,
+    cancelBody(ctx)
+  )
+};
+var listApprovalTasks = {
+  service: SERVICE,
+  resource: "approval-task",
+  command: "list",
+  description: "List approval tasks currently visible to the current approver",
+  flags: [
+    ...pageFlags,
+    { name: "status", type: "string", required: false, desc: `Filter by task status: ${TASK_STATUSES.join(" | ")}` },
+    { name: "approval-request-id", type: "string", required: false, maxLength: MAX_ID_LENGTH, desc: "Filter by approval request ID" }
+  ],
+  risk: "read",
+  validate: (ctx) => {
+    validateLimit(ctx);
+    validateDateRange(ctx);
+    assertAllowed(optionalString(ctx, "status"), "status", TASK_STATUSES);
+    if (optionalString(ctx, "approvalRequestId")) {
+      validateStableId(ctx, "approvalRequestId", "approval-request-id");
+    }
+  },
+  dryRun: (ctx) => ({ method: "GET", url: buildApprovalCliUrl(ctx, taskListPath(ctx)) }),
+  execute: (ctx) => getApprovalCli(ctx, taskListPath(ctx))
+};
+var getApprovalTask = {
+  service: SERVICE,
+  resource: "approval-task",
+  command: "get",
+  description: "Get one approval task by task ID",
+  flags: [taskIdFlag],
+  risk: "read",
+  validate: (ctx) => validateStableId(ctx, "taskId", "task-id"),
+  dryRun: (ctx) => ({
+    method: "GET",
+    url: buildApprovalCliUrl(ctx, `tasks/${encodeURIComponent(ctx.str("taskId"))}`)
+  }),
+  execute: (ctx) => getApprovalCli(ctx, `tasks/${encodeURIComponent(ctx.str("taskId"))}`)
+};
+var approveApprovalTask = {
+  service: SERVICE,
+  resource: "approval-task",
+  command: "approve",
+  description: "Approve a pending approval task with optimistic concurrency control",
+  helpText: LOCAL_DRY_RUN_HELP,
+  flags: [
+    taskIdFlag,
+    expectedVersionFlag,
+    { name: "note", type: "string", required: false, maxLength: 2e3, desc: "Optional approval note" },
+    clientRequestIdFlag
+  ],
+  risk: "write",
+  validate: (ctx) => {
+    validateStableId(ctx, "taskId", "task-id");
+    validateExpectedVersion(ctx);
+    validateText(ctx, "note", "note", { required: false, maxLength: 2e3 });
+    validateClientRequestId(ctx);
+  },
+  dryRun: (ctx) => ({
+    method: "POST",
+    url: buildApprovalCliUrl(ctx, `tasks/${encodeURIComponent(ctx.str("taskId"))}/approve`),
+    body: approveBody(ctx)
+  }),
+  execute: (ctx) => postApprovalCli(
+    ctx,
+    `tasks/${encodeURIComponent(ctx.str("taskId"))}/approve`,
+    approveBody(ctx)
+  )
+};
+var rejectApprovalTask = {
+  service: SERVICE,
+  resource: "approval-task",
+  command: "reject",
+  description: "Reject a pending approval task with a required reason",
+  helpText: LOCAL_DRY_RUN_HELP,
+  flags: [
+    taskIdFlag,
+    expectedVersionFlag,
+    { name: "reason", type: "string", required: true, maxLength: 2e3, desc: "Rejection reason" },
+    clientRequestIdFlag
+  ],
+  risk: "write",
+  validate: (ctx) => {
+    validateStableId(ctx, "taskId", "task-id");
+    validateExpectedVersion(ctx);
+    validateText(ctx, "reason", "reason", { required: true, maxLength: 2e3 });
+    validateClientRequestId(ctx);
+  },
+  dryRun: (ctx) => ({
+    method: "POST",
+    url: buildApprovalCliUrl(ctx, `tasks/${encodeURIComponent(ctx.str("taskId"))}/reject`),
+    body: rejectBody(ctx)
+  }),
+  execute: (ctx) => postApprovalCli(
+    ctx,
+    `tasks/${encodeURIComponent(ctx.str("taskId"))}/reject`,
+    rejectBody(ctx)
+  )
+};
+var listApprovalEffects = {
+  service: SERVICE,
+  resource: "approval-effect",
+  command: "list",
+  description: "List approval Effects visible to the current company administrator",
+  flags: [
+    ...pageFlags,
+    { name: "status", type: "string", required: false, desc: `Filter by Effect status: ${EFFECT_STATUSES.join(" | ")}` },
+    { name: "approval-request-id", type: "string", required: false, maxLength: MAX_ID_LENGTH, desc: "Filter by approval request ID" }
+  ],
+  risk: "read",
+  validate: (ctx) => {
+    validateLimit(ctx);
+    validateDateRange(ctx);
+    assertAllowed(optionalString(ctx, "status"), "status", EFFECT_STATUSES);
+    if (optionalString(ctx, "approvalRequestId")) {
+      validateStableId(ctx, "approvalRequestId", "approval-request-id");
+    }
+  },
+  dryRun: (ctx) => ({ method: "GET", url: buildApprovalCliUrl(ctx, effectListPath(ctx)) }),
+  execute: (ctx) => getApprovalCli(ctx, effectListPath(ctx))
+};
+var getApprovalEffect = {
+  service: SERVICE,
+  resource: "approval-effect",
+  command: "get",
+  description: "Get one approval Effect by Effect ID",
+  flags: [effectIdFlag],
+  risk: "read",
+  validate: (ctx) => validateStableId(ctx, "effectId", "effect-id"),
+  dryRun: (ctx) => ({
+    method: "GET",
+    url: buildApprovalCliUrl(ctx, `effects/${encodeURIComponent(ctx.str("effectId"))}`)
+  }),
+  execute: (ctx) => getApprovalCli(ctx, `effects/${encodeURIComponent(ctx.str("effectId"))}`)
+};
+var retryApprovalEffect = {
+  service: SERVICE,
+  resource: "approval-effect",
+  command: "retry",
+  description: "Manually retry a failed or manual-required approval Effect",
+  helpText: `${LOCAL_DRY_RUN_HELP} Actual execution requires confirmation; pass global --yes only after explicit user authorization.`,
+  flags: [
+    effectIdFlag,
+    expectedVersionFlag,
+    expectedAttemptFlag,
+    { name: "reason", type: "string", required: true, maxLength: 2e3, desc: "Auditable manual retry reason" },
+    clientRequestIdFlag
+  ],
+  risk: "high-risk-write",
+  validate: (ctx) => {
+    validateStableId(ctx, "effectId", "effect-id");
+    validateExpectedVersion(ctx);
+    validateExpectedAttempt(ctx);
+    validateText(ctx, "reason", "reason", { required: true, maxLength: 2e3 });
+    validateClientRequestId(ctx);
+  },
+  dryRun: (ctx) => ({
+    method: "POST",
+    url: buildApprovalCliUrl(ctx, `effects/${encodeURIComponent(ctx.str("effectId"))}/retry`),
+    body: retryEffectBody(ctx)
+  }),
+  execute: (ctx) => postApprovalCli(
+    ctx,
+    `effects/${encodeURIComponent(ctx.str("effectId"))}/retry`,
+    retryEffectBody(ctx)
+  )
+};
+
 // src/commands/te-agent/index.ts
 var commands = [
   // Agent CRUD
@@ -3252,6 +3853,20 @@ var commands = [
   cancelSkillSubmission,
   approveSkill,
   rejectSkill,
+  // Generic versioned approval workflow
+  listApprovalTypes,
+  getApprovalType,
+  listApprovalRequests,
+  getApprovalRequest,
+  submitApprovalRequest,
+  cancelApprovalRequest,
+  listApprovalTasks,
+  getApprovalTask,
+  approveApprovalTask,
+  rejectApprovalTask,
+  listApprovalEffects,
+  getApprovalEffect,
+  retryApprovalEffect,
   // Skill share (peer-to-peer)
   shareSkill,
   listSkillShares,