@thinkingai/ae-cli 6.0.46 → 6.0.47

package/dist/chunk-JYMGHGCE.js

@@ -0,0 +1,191 @@
+import { createRequire as __createRequire } from 'node:module'; const require = __createRequire(import.meta.url);
+import {
+  CapabilityGatewayError
+} from "./chunk-GJXRF7Y6.js";
+import {
+  clearCliToken,
+  getCliToken
+} from "./chunk-RWXIXOZG.js";
+import {
+  safeJsonParse
+} from "./chunk-KZ6ZHF5J.js";
+import {
+  PermissionError
+} from "./chunk-533JK3YX.js";
+
+// src/core/mcp-access.ts
+function buildUrl(host, path, params = {}) {
+  const base = host.replace(/\/$/, "");
+  const p = path.startsWith("/") ? path : `/${path}`;
+  const url = new URL(`${base}${p}`);
+  for (const [key, value] of Object.entries(params)) {
+    if (value !== void 0 && value !== null) {
+      url.searchParams.set(key, String(value));
+    }
+  }
+  return url.toString();
+}
+var KbUnauthorizedError = class extends Error {
+};
+function optionalString(value) {
+  return typeof value === "string" && value.trim() ? value.trim() : void 0;
+}
+function responseReturnCode(data) {
+  const value = data?.return_code;
+  if (value === void 0 || value === null || value === 0 || value === "0") {
+    return void 0;
+  }
+  if (typeof value === "number" && Number.isFinite(value)) return String(value);
+  return optionalString(value);
+}
+function responseErrorMetadata(data) {
+  const nestedError = data?.error && typeof data.error === "object" ? data.error : void 0;
+  return {
+    code: optionalString(data?.errorCode) ?? optionalString(data?.error_code) ?? optionalString(data?.code) ?? optionalString(nestedError?.code) ?? responseReturnCode(data),
+    hint: optionalString(data?.hint) ?? optionalString(nestedError?.hint)
+  };
+}
+function responseErrorMessage(data) {
+  const nestedError = data?.error && typeof data.error === "object" ? data.error : void 0;
+  return optionalString(typeof data?.error === "string" ? data.error : void 0) ?? optionalString(nestedError?.message) ?? optionalString(data?.message) ?? optionalString(data?.return_message);
+}
+function responseStatus(resp) {
+  const statusText = optionalString(resp.statusText);
+  return statusText ? `${resp.status} ${statusText}` : String(resp.status);
+}
+function malformedResponseError(resp, detail) {
+  if (!resp.ok) {
+    return new Error(`KB API HTTP error: ${responseStatus(resp)} (${detail})`);
+  }
+  return new Error(
+    `KB API protocol error: HTTP ${responseStatus(resp)} (${detail})`
+  );
+}
+var KbHttpError = class extends CapabilityGatewayError {
+  constructor(message, code, status, hint) {
+    super(message, code, status, hint);
+    this.name = "Error";
+  }
+};
+function nonOkResponseError(resp, data, options) {
+  const metadata = responseErrorMetadata(data);
+  const serverMessage = responseErrorMessage(data);
+  const fallbackMessage = `KB API HTTP error: ${responseStatus(resp)}`;
+  const businessCode = options.preserveBusinessErrorCode && typeof data?.error === "string" && metadata.code ? metadata.code : void 0;
+  const message = businessCode ? `${businessCode}: ${serverMessage ?? fallbackMessage}` : serverMessage ?? fallbackMessage;
+  if (metadata.code || metadata.hint) {
+    return new KbHttpError(message, metadata.code, resp.status, metadata.hint);
+  }
+  return new Error(message);
+}
+function parseKbResponse(resp, text, options = {}) {
+  if (resp.status === 403) {
+    let msg = "Permission denied for this resource (HTTP 403)";
+    let metadata = {};
+    try {
+      const d = safeJsonParse(text);
+      const m = d && (typeof d.error === "string" ? d.error : d.error?.message || d.message);
+      if (m && typeof m === "string") msg = m;
+      if (options.preserveErrorMetadata) metadata = responseErrorMetadata(d);
+    } catch {
+    }
+    throw new PermissionError(msg, metadata.code, metadata.hint);
+  }
+  if (resp.status === 401) {
+    throw new KbUnauthorizedError(
+      `KB API token auth failed: HTTP ${resp.status} ${resp.statusText}`
+    );
+  }
+  if (!text.trim()) {
+    throw malformedResponseError(resp, "empty response body");
+  }
+  let data;
+  try {
+    data = safeJsonParse(text);
+  } catch {
+    throw malformedResponseError(resp, "non-JSON response");
+  }
+  if (data?.return_code === -1001) {
+    throw new KbUnauthorizedError(
+      `KB API token auth failed: ${data.return_message || "unauthorized"} (code: ${data.return_code})`
+    );
+  }
+  if (!resp.ok) {
+    throw nonOkResponseError(resp, data, options);
+  }
+  if (data?.return_code !== 0 && data?.return_code !== void 0) {
+    throw new Error(
+      `AE API error: ${data.return_message || "unknown"} (code: ${data.return_code})`
+    );
+  }
+  if (data && typeof data === "object" && typeof data.error === "string" && data.error.trim() && data.return_code === void 0 && data.success === void 0) {
+    if (options.preserveErrorMetadata) {
+      const metadata = responseErrorMetadata(data);
+      throw new CapabilityGatewayError(
+        data.error,
+        metadata.code,
+        resp.status,
+        metadata.hint
+      );
+    }
+    const businessCode = options.preserveBusinessErrorCode && typeof data.code === "string" && data.code.trim() ? data.code.trim() : "";
+    throw new Error(businessCode ? `${businessCode}: ${data.error}` : data.error);
+  }
+  return data?.data !== void 0 ? data.data : data;
+}
+async function fetchWithCliToken(input, init, cliToken, options = {}) {
+  const headers = new Headers(init.headers);
+  headers.set("cli-token", cliToken);
+  const resp = await fetch(input, { ...init, headers });
+  return parseKbResponse(resp, await resp.text(), options);
+}
+async function requestWithCliToken(host, input, init, options) {
+  const request = async () => fetchWithCliToken(input, init, await getCliToken(host), options);
+  try {
+    return await request();
+  } catch (error) {
+    if (!(error instanceof KbUnauthorizedError) || !options.retryUnauthorized) {
+      throw error;
+    }
+    clearCliToken(host);
+    return request();
+  }
+}
+async function getAuthHeaders(ctx) {
+  const cliToken = await getCliToken(ctx.host());
+  return { "cli-token": cliToken };
+}
+async function kbApi(ctx, method, path, params = {}, body, options = {}) {
+  const host = ctx.host();
+  const upperMethod = method.toUpperCase();
+  return requestWithCliToken(
+    host,
+    buildUrl(host, path, params),
+    {
+      method: upperMethod,
+      headers: {
+        "Content-Type": "application/json"
+      },
+      body: upperMethod === "GET" ? void 0 : JSON.stringify(body ?? {})
+    },
+    options
+  );
+}
+async function kbUpload(ctx, path, form, params = {}, options = {}) {
+  const host = ctx.host();
+  return requestWithCliToken(
+    host,
+    buildUrl(host, path, params),
+    {
+      method: "POST",
+      body: form
+    },
+    options
+  );
+}
+
+export {
+  getAuthHeaders,
+  kbApi,
+  kbUpload
+};

package/dist/{chunk-BYYS3ANB.js → chunk-KEWVSO64.js}

@@ -1,18 +1,19 @@
+import { createRequire as __createRequire } from 'node:module'; const require = __createRequire(import.meta.url);
 import {
   peekCliToken
-} from "./chunk-J2DEBMRF.js";
+} from "./chunk-RWXIXOZG.js";
 import {
   getToken
-} from "./chunk-ZQKDZXDO.js";
+} from "./chunk-O6K2ODUE.js";
 import {
   getActiveHost,
   getConfigDir,
   isAeSandboxRuntime,
   normalizeUrl
-} from "./chunk-3FY3RJ26.js";
+} from "./chunk-KZ6ZHF5J.js";
 import {
   logger
-} from "./chunk-JHENBQ5B.js";
+} from "./chunk-FR2EDAQM.js";
 
 // src/core/version-sync.ts
 import { spawnSync } from "child_process";

package/dist/{chunk-3FY3RJ26.js → chunk-KZ6ZHF5J.js}

@@ -1,6 +1,7 @@
+import { createRequire as __createRequire } from 'node:module'; const require = __createRequire(import.meta.url);
 import {
   logger
-} from "./chunk-JHENBQ5B.js";
+} from "./chunk-FR2EDAQM.js";
 
 // src/core/json-utils.ts
 import fs from "fs";

package/dist/{chunk-2MN54X6H.js → chunk-NSIVXKJH.js}

@@ -1,14 +1,15 @@
+import { createRequire as __createRequire } from 'node:module'; const require = __createRequire(import.meta.url);
 import {
   withOutputMetadata
-} from "./chunk-BYYS3ANB.js";
+} from "./chunk-KEWVSO64.js";
 import {
   dryRunCapability,
   executeCapabilityWithEnvelope,
   validateCapability
-} from "./chunk-OMPRXM3V.js";
+} from "./chunk-GJXRF7Y6.js";
 import {
   resolveGatewayDomain
-} from "./chunk-3KWQYGYI.js";
+} from "./chunk-TKHSULJT.js";
 
 // src/core/capability-command.ts
 import { randomBytes } from "crypto";

package/dist/{chunk-ZQKDZXDO.js → chunk-O6K2ODUE.js}

@@ -1,12 +1,13 @@
+import { createRequire as __createRequire } from 'node:module'; const require = __createRequire(import.meta.url);
 import {
   getActiveHost,
   getConfigDir,
   normalizeUrl,
   safeJsonParse
-} from "./chunk-3FY3RJ26.js";
+} from "./chunk-KZ6ZHF5J.js";
 import {
   logger
-} from "./chunk-JHENBQ5B.js";
+} from "./chunk-FR2EDAQM.js";
 
 // src/core/secure-store.ts
 import crypto from "crypto";