@thinkingai/ae-cli 6.0.46 → 6.0.48-customer.1

package/dist/{chunk-DQRPU6EE.js → chunk-BVDST5YT.js}

@@ -1,19 +1,20 @@
+import { createRequire as __createRequire } from 'node:module'; const require = __createRequire(import.meta.url);
 import {
   readOutputMetadata,
   unwrapOutputData,
   withOutputMetadata
-} from "./chunk-BYYS3ANB.js";
+} from "./chunk-KEWVSO64.js";
 import {
   CapabilityGatewayError,
   fetchCapabilityGateway,
   requestCapabilityGateway
-} from "./chunk-ZQ47LWTI.js";
+} from "./chunk-GJXRF7Y6.js";
 import {
   resolveGatewayDomain
-} from "./chunk-3KWQYGYI.js";
+} from "./chunk-TKHSULJT.js";
 import {
   PermissionError
-} from "./chunk-UW5UN47B.js";
+} from "./chunk-533JK3YX.js";
 
 // src/core/analysis-async-artifact.ts
 import { randomBytes } from "crypto";

package/dist/{chunk-VTWMIC5L.js → chunk-E2JKXMVO.js}

@@ -1,3 +1,5 @@
+import { createRequire as __createRequire } from 'node:module'; const require = __createRequire(import.meta.url);
+
 // src/core/package-info.ts
 import fs from "fs";
 import path from "path";

package/dist/{chunk-JHENBQ5B.js → chunk-FR2EDAQM.js}

@@ -1,3 +1,4 @@
+import { createRequire as __createRequire } from 'node:module'; const require = __createRequire(import.meta.url);
 var __create = Object.create;
 var __defProp = Object.defineProperty;
 var __getOwnPropDesc = Object.getOwnPropertyDescriptor;

package/dist/{chunk-ZQ47LWTI.js → chunk-GJXRF7Y6.js}

@@ -1,19 +1,20 @@
+import { createRequire as __createRequire } from 'node:module'; const require = __createRequire(import.meta.url);
 import {
   internalCallSourceHeaders
-} from "./chunk-SERWF6G5.js";
+} from "./chunk-Y74WTIKJ.js";
 import {
   clearCliToken,
   getCliToken
-} from "./chunk-J2DEBMRF.js";
+} from "./chunk-RWXIXOZG.js";
 import {
   safeJsonParse
-} from "./chunk-3FY3RJ26.js";
+} from "./chunk-KZ6ZHF5J.js";
 import {
   PermissionError
-} from "./chunk-UW5UN47B.js";
+} from "./chunk-533JK3YX.js";
 import {
   logger
-} from "./chunk-JHENBQ5B.js";
+} from "./chunk-FR2EDAQM.js";
 
 // src/core/capability-api.ts
 import { readFile } from "fs/promises";

package/dist/{chunk-DWO43OIB.js → chunk-JQ3ENZZH.js}

@@ -1,3 +1,5 @@
+import { createRequire as __createRequire } from 'node:module'; const require = __createRequire(import.meta.url);
+
 // src/commands/sync/scanners.ts
 import { createHash } from "crypto";
 import { readdirSync, readFileSync as readFileSync2, statSync, lstatSync, existsSync as existsSync2, realpathSync } from "fs";

package/dist/chunk-JYMGHGCE.js

@@ -0,0 +1,191 @@
+import { createRequire as __createRequire } from 'node:module'; const require = __createRequire(import.meta.url);
+import {
+  CapabilityGatewayError
+} from "./chunk-GJXRF7Y6.js";
+import {
+  clearCliToken,
+  getCliToken
+} from "./chunk-RWXIXOZG.js";
+import {
+  safeJsonParse
+} from "./chunk-KZ6ZHF5J.js";
+import {
+  PermissionError
+} from "./chunk-533JK3YX.js";
+
+// src/core/mcp-access.ts
+function buildUrl(host, path, params = {}) {
+  const base = host.replace(/\/$/, "");
+  const p = path.startsWith("/") ? path : `/${path}`;
+  const url = new URL(`${base}${p}`);
+  for (const [key, value] of Object.entries(params)) {
+    if (value !== void 0 && value !== null) {
+      url.searchParams.set(key, String(value));
+    }
+  }
+  return url.toString();
+}
+var KbUnauthorizedError = class extends Error {
+};
+function optionalString(value) {
+  return typeof value === "string" && value.trim() ? value.trim() : void 0;
+}
+function responseReturnCode(data) {
+  const value = data?.return_code;
+  if (value === void 0 || value === null || value === 0 || value === "0") {
+    return void 0;
+  }
+  if (typeof value === "number" && Number.isFinite(value)) return String(value);
+  return optionalString(value);
+}
+function responseErrorMetadata(data) {
+  const nestedError = data?.error && typeof data.error === "object" ? data.error : void 0;
+  return {
+    code: optionalString(data?.errorCode) ?? optionalString(data?.error_code) ?? optionalString(data?.code) ?? optionalString(nestedError?.code) ?? responseReturnCode(data),
+    hint: optionalString(data?.hint) ?? optionalString(nestedError?.hint)
+  };
+}
+function responseErrorMessage(data) {
+  const nestedError = data?.error && typeof data.error === "object" ? data.error : void 0;
+  return optionalString(typeof data?.error === "string" ? data.error : void 0) ?? optionalString(nestedError?.message) ?? optionalString(data?.message) ?? optionalString(data?.return_message);
+}
+function responseStatus(resp) {
+  const statusText = optionalString(resp.statusText);
+  return statusText ? `${resp.status} ${statusText}` : String(resp.status);
+}
+function malformedResponseError(resp, detail) {
+  if (!resp.ok) {
+    return new Error(`KB API HTTP error: ${responseStatus(resp)} (${detail})`);
+  }
+  return new Error(
+    `KB API protocol error: HTTP ${responseStatus(resp)} (${detail})`
+  );
+}
+var KbHttpError = class extends CapabilityGatewayError {
+  constructor(message, code, status, hint) {
+    super(message, code, status, hint);
+    this.name = "Error";
+  }
+};
+function nonOkResponseError(resp, data, options) {
+  const metadata = responseErrorMetadata(data);
+  const serverMessage = responseErrorMessage(data);
+  const fallbackMessage = `KB API HTTP error: ${responseStatus(resp)}`;
+  const businessCode = options.preserveBusinessErrorCode && typeof data?.error === "string" && metadata.code ? metadata.code : void 0;
+  const message = businessCode ? `${businessCode}: ${serverMessage ?? fallbackMessage}` : serverMessage ?? fallbackMessage;
+  if (metadata.code || metadata.hint) {
+    return new KbHttpError(message, metadata.code, resp.status, metadata.hint);
+  }
+  return new Error(message);
+}
+function parseKbResponse(resp, text, options = {}) {
+  if (resp.status === 403) {
+    let msg = "Permission denied for this resource (HTTP 403)";
+    let metadata = {};
+    try {
+      const d = safeJsonParse(text);
+      const m = d && (typeof d.error === "string" ? d.error : d.error?.message || d.message);
+      if (m && typeof m === "string") msg = m;
+      if (options.preserveErrorMetadata) metadata = responseErrorMetadata(d);
+    } catch {
+    }
+    throw new PermissionError(msg, metadata.code, metadata.hint);
+  }
+  if (resp.status === 401) {
+    throw new KbUnauthorizedError(
+      `KB API token auth failed: HTTP ${resp.status} ${resp.statusText}`
+    );
+  }
+  if (!text.trim()) {
+    throw malformedResponseError(resp, "empty response body");
+  }
+  let data;
+  try {
+    data = safeJsonParse(text);
+  } catch {
+    throw malformedResponseError(resp, "non-JSON response");
+  }
+  if (data?.return_code === -1001) {
+    throw new KbUnauthorizedError(
+      `KB API token auth failed: ${data.return_message || "unauthorized"} (code: ${data.return_code})`
+    );
+  }
+  if (!resp.ok) {
+    throw nonOkResponseError(resp, data, options);
+  }
+  if (data?.return_code !== 0 && data?.return_code !== void 0) {
+    throw new Error(
+      `AE API error: ${data.return_message || "unknown"} (code: ${data.return_code})`
+    );
+  }
+  if (data && typeof data === "object" && typeof data.error === "string" && data.error.trim() && data.return_code === void 0 && data.success === void 0) {
+    if (options.preserveErrorMetadata) {
+      const metadata = responseErrorMetadata(data);
+      throw new CapabilityGatewayError(
+        data.error,
+        metadata.code,
+        resp.status,
+        metadata.hint
+      );
+    }
+    const businessCode = options.preserveBusinessErrorCode && typeof data.code === "string" && data.code.trim() ? data.code.trim() : "";
+    throw new Error(businessCode ? `${businessCode}: ${data.error}` : data.error);
+  }
+  return data?.data !== void 0 ? data.data : data;
+}
+async function fetchWithCliToken(input, init, cliToken, options = {}) {
+  const headers = new Headers(init.headers);
+  headers.set("cli-token", cliToken);
+  const resp = await fetch(input, { ...init, headers });
+  return parseKbResponse(resp, await resp.text(), options);
+}
+async function requestWithCliToken(host, input, init, options) {
+  const request = async () => fetchWithCliToken(input, init, await getCliToken(host), options);
+  try {
+    return await request();
+  } catch (error) {
+    if (!(error instanceof KbUnauthorizedError) || !options.retryUnauthorized) {
+      throw error;
+    }
+    clearCliToken(host);
+    return request();
+  }
+}
+async function getAuthHeaders(ctx) {
+  const cliToken = await getCliToken(ctx.host());
+  return { "cli-token": cliToken };
+}
+async function kbApi(ctx, method, path, params = {}, body, options = {}) {
+  const host = ctx.host();
+  const upperMethod = method.toUpperCase();
+  return requestWithCliToken(
+    host,
+    buildUrl(host, path, params),
+    {
+      method: upperMethod,
+      headers: {
+        "Content-Type": "application/json"
+      },
+      body: upperMethod === "GET" ? void 0 : JSON.stringify(body ?? {})
+    },
+    options
+  );
+}
+async function kbUpload(ctx, path, form, params = {}, options = {}) {
+  const host = ctx.host();
+  return requestWithCliToken(
+    host,
+    buildUrl(host, path, params),
+    {
+      method: "POST",
+      body: form
+    },
+    options
+  );
+}
+
+export {
+  getAuthHeaders,
+  kbApi,
+  kbUpload
+};

package/dist/{chunk-BYYS3ANB.js → chunk-KEWVSO64.js}

@@ -1,18 +1,19 @@
+import { createRequire as __createRequire } from 'node:module'; const require = __createRequire(import.meta.url);
 import {
   peekCliToken
-} from "./chunk-J2DEBMRF.js";
+} from "./chunk-RWXIXOZG.js";
 import {
   getToken
-} from "./chunk-ZQKDZXDO.js";
+} from "./chunk-O6K2ODUE.js";
 import {
   getActiveHost,
   getConfigDir,
   isAeSandboxRuntime,
   normalizeUrl
-} from "./chunk-3FY3RJ26.js";
+} from "./chunk-KZ6ZHF5J.js";
 import {
   logger
-} from "./chunk-JHENBQ5B.js";
+} from "./chunk-FR2EDAQM.js";
 
 // src/core/version-sync.ts
 import { spawnSync } from "child_process";

package/dist/{chunk-3FY3RJ26.js → chunk-KZ6ZHF5J.js}

@@ -1,6 +1,7 @@
+import { createRequire as __createRequire } from 'node:module'; const require = __createRequire(import.meta.url);
 import {
   logger
-} from "./chunk-JHENBQ5B.js";
+} from "./chunk-FR2EDAQM.js";
 
 // src/core/json-utils.ts
 import fs from "fs";

package/dist/{chunk-2MN54X6H.js → chunk-NSIVXKJH.js}

@@ -1,14 +1,15 @@
+import { createRequire as __createRequire } from 'node:module'; const require = __createRequire(import.meta.url);
 import {
   withOutputMetadata
-} from "./chunk-BYYS3ANB.js";
+} from "./chunk-KEWVSO64.js";
 import {
   dryRunCapability,
   executeCapabilityWithEnvelope,
   validateCapability
-} from "./chunk-OMPRXM3V.js";
+} from "./chunk-GJXRF7Y6.js";
 import {
   resolveGatewayDomain
-} from "./chunk-3KWQYGYI.js";
+} from "./chunk-TKHSULJT.js";
 
 // src/core/capability-command.ts
 import { randomBytes } from "crypto";

package/dist/{chunk-ZQKDZXDO.js → chunk-O6K2ODUE.js}

@@ -1,12 +1,13 @@
+import { createRequire as __createRequire } from 'node:module'; const require = __createRequire(import.meta.url);
 import {
   getActiveHost,
   getConfigDir,
   normalizeUrl,
   safeJsonParse
-} from "./chunk-3FY3RJ26.js";
+} from "./chunk-KZ6ZHF5J.js";
 import {
   logger
-} from "./chunk-JHENBQ5B.js";
+} from "./chunk-FR2EDAQM.js";
 
 // src/core/secure-store.ts
 import crypto from "crypto";

package/dist/{chunk-J2DEBMRF.js → chunk-RWXIXOZG.js}

@@ -1,10 +1,11 @@
+import { createRequire as __createRequire } from 'node:module'; const require = __createRequire(import.meta.url);
 import {
   SecureStoreAuthError,
   getToken,
   load,
   loadCliToken,
   save
-} from "./chunk-ZQKDZXDO.js";
+} from "./chunk-O6K2ODUE.js";
 import {
   getActiveHost,
   getConfigDir,
@@ -13,13 +14,13 @@ import {
   normalizeUrl,
   safeJsonParse,
   safeReadJsonFile
-} from "./chunk-3FY3RJ26.js";
+} from "./chunk-KZ6ZHF5J.js";
 import {
   PermissionError
-} from "./chunk-UW5UN47B.js";
+} from "./chunk-533JK3YX.js";
 import {
   logger
-} from "./chunk-JHENBQ5B.js";
+} from "./chunk-FR2EDAQM.js";
 
 // src/core/cli-token.ts
 import fs from "fs";
@@ -27,6 +28,17 @@ import path from "path";
 var CLI_TOKEN_GENERATE_PATH = "/v1/ta/cli/token/generate";
 var CLI_TOKEN_RENEW_PATH = "/v1/ta/cli/token/renew";
 var CLI_TOKEN_VALIDATE_PATH = "/v1/ta/cli/token/validate";
+var CliTokenValidationUnavailableError = class extends Error {
+  constructor(message) {
+    super(message);
+    this.name = "CliTokenValidationUnavailableError";
+  }
+};
+function isExplicitCliTokenRejection(data, responseText) {
+  const code = String(data?.code ?? data?.error?.code ?? "");
+  const message = String(data?.return_message ?? data?.message ?? data?.error?.message ?? responseText);
+  return /cli[_-]?token[_-]?(invalid|expired)/i.test(code) || /cli[-_\s]?token.*\b(invalid|expired)\b/i.test(message) || /\b(invalid|expired)\b.*cli[-_\s]?token/i.test(message);
+}
 var _cliTokenCache = /* @__PURE__ */ new Map();
 var _renewedLocalDateByHost = /* @__PURE__ */ new Map();
 var _renewInFlightByHost = /* @__PURE__ */ new Map();
@@ -162,7 +174,7 @@ async function validateCliTokenOnServer(hostUrl, cliToken) {
       }
     });
   } catch (e) {
-    throw new SecureStoreAuthError(`Unable to validate CLI token for ${hostUrl}: ${e.message}`);
+    throw new CliTokenValidationUnavailableError(`Unable to validate CLI token for ${hostUrl}: ${e.message}`);
   }
   const responseText = await resp.text();
   let data;
@@ -171,18 +183,18 @@ async function validateCliTokenOnServer(hostUrl, cliToken) {
   } catch {
     data = void 0;
   }
-  if (resp.status === 401 || resp.status === 403 || data?.return_code !== void 0 && data.return_code !== 0) {
+  if (isExplicitCliTokenRejection(data, responseText)) {
     throw new SecureStoreAuthError(
       `CLI token is invalid or expired for ${hostUrl}. Run: ae-cli auth logout --host ${hostUrl}, then ae-cli auth login --host ${hostUrl}`
     );
   }
   if (!resp.ok) {
-    throw new SecureStoreAuthError(
-      `CLI token validation failed for ${hostUrl} (HTTP ${resp.status} ${resp.statusText})`
+    throw new CliTokenValidationUnavailableError(
+      `CLI token validation is unavailable for ${hostUrl} (HTTP ${resp.status} ${resp.statusText})`
     );
   }
   if (data?.return_code !== 0) {
-    throw new SecureStoreAuthError(`CLI token validation returned an invalid response for ${hostUrl}`);
+    throw new CliTokenValidationUnavailableError(`CLI token validation returned an unsupported response for ${hostUrl}`);
   }
 }
 async function renewCliTokenOnServer(hostUrl, cliToken) {
@@ -305,6 +317,7 @@ function clearCliToken(hostUrl) {
 }
 
 export {
+  CliTokenValidationUnavailableError,
   validateCliTokenOnServer,
   peekCliToken,
   getCliToken,

package/dist/{chunk-4NN5IWVN.js → chunk-T6OSFQZD.js}

@@ -1,3 +1,5 @@
+import { createRequire as __createRequire } from 'node:module'; const require = __createRequire(import.meta.url);
+
 // src/commands/te-agent/skill-version.ts
 var SKILL_VERSION_PATTERN = /^(0|[1-9]\d*)\.(0|[1-9]\d*)$/;
 var MAX_VERSION_PART = 2147483647;

package/dist/{chunk-3KWQYGYI.js → chunk-TKHSULJT.js}

@@ -1,3 +1,5 @@
+import { createRequire as __createRequire } from 'node:module'; const require = __createRequire(import.meta.url);
+
 // src/core/capability-routing.ts
 var cliServiceRoutes = /* @__PURE__ */ new Map();
 function envGatewayDomain(cliService) {

package/dist/{chunk-6EIJSNBD.js → chunk-Y74WTIKJ.js}

@@ -1,3 +1,5 @@
+import { createRequire as __createRequire } from 'node:module'; const require = __createRequire(import.meta.url);
+
 // src/core/internal-call-source.ts
 function internalCallSourceHeaders() {
   return {};

package/dist/{client-L2YDMHQ6.js → client-N7NGZUNI.js}

@@ -1,15 +1,16 @@
+import { createRequire as __createRequire } from 'node:module'; const require = __createRequire(import.meta.url);
 import {
   SecureStoreAuthError,
   getToken,
   invalidateAccessTokenForRetry,
   resolveHost
-} from "./chunk-ZQKDZXDO.js";
+} from "./chunk-O6K2ODUE.js";
 import {
   safeJsonParse
-} from "./chunk-3FY3RJ26.js";
+} from "./chunk-KZ6ZHF5J.js";
 import {
   logger
-} from "./chunk-JHENBQ5B.js";
+} from "./chunk-FR2EDAQM.js";
 
 // src/core/client.ts
 import WebSocket from "ws";

package/dist/{community-report-client-C7WDGET3.js → community-report-client-6OL6GBQW.js}

@@ -1,9 +1,10 @@
+import { createRequire as __createRequire } from 'node:module'; const require = __createRequire(import.meta.url);
 import {
   CommunityReportError
-} from "./chunk-UW5UN47B.js";
+} from "./chunk-533JK3YX.js";
 import {
   logger
-} from "./chunk-JHENBQ5B.js";
+} from "./chunk-FR2EDAQM.js";
 
 // src/core/community-report-client.ts
 var DEFAULT_TIMEOUT_MS = 3e4;

package/dist/{config-BMYZX2UE.js → config-XNMACCKX.js}

@@ -1,16 +1,17 @@
+import { createRequire as __createRequire } from 'node:module'; const require = __createRequire(import.meta.url);
 import {
   MultiselectCancelled,
   promptSingleSelect
-} from "./chunk-TUKQZTMI.js";
+} from "./chunk-7K24F7T2.js";
 import {
   printError,
   printOutput
-} from "./chunk-BYYS3ANB.js";
-import "./chunk-J2DEBMRF.js";
+} from "./chunk-KEWVSO64.js";
+import "./chunk-RWXIXOZG.js";
 import {
   AE_TRIAL_URL,
   missingAeHostHint
-} from "./chunk-ZQKDZXDO.js";
+} from "./chunk-O6K2ODUE.js";
 import {
   addHost,
   listHosts,
@@ -20,9 +21,9 @@ import {
   resolveHostSelector,
   setActiveHost,
   updateHostLabel
-} from "./chunk-3FY3RJ26.js";
-import "./chunk-UW5UN47B.js";
-import "./chunk-JHENBQ5B.js";
+} from "./chunk-KZ6ZHF5J.js";
+import "./chunk-533JK3YX.js";
+import "./chunk-FR2EDAQM.js";
 
 // src/commands/config.ts
 import * as readline2 from "readline";