@thinkingai/ae-cli 6.0.47 → 6.0.48-workbuddy

package/dist/{capability-RUSV77CO.js → capability-JHYVQNQ4.js}

@@ -3,36 +3,38 @@ import {
   normalizeRiskLevel,
   requiresConfirmation
 } from "./chunk-AMBFK2K3.js";
-import {
-  printError,
-  printOutput
-} from "./chunk-KEWVSO64.js";
-import {
-  CapabilityGatewayError,
-  dryRunCapability,
-  executeCapability,
-  inspectCapability,
-  listCapabilities,
-  validateCapability
-} from "./chunk-GJXRF7Y6.js";
 import {
   findGatewayDomain,
   listRegisteredCapabilityDomains,
   resolveGatewayDomain
 } from "./chunk-TKHSULJT.js";
-import "./chunk-Y74WTIKJ.js";
-import "./chunk-RWXIXOZG.js";
 import {
-  SecureStoreAuthError,
   resolveHost
-} from "./chunk-O6K2ODUE.js";
+} from "./chunk-2BDQB42E.js";
+import {
+  CapabilityGatewayError,
+  dryRunCapabilityWithEnvelope,
+  executeCapabilityWithEnvelope,
+  inspectCapability,
+  inspectCapabilityWithEnvelope,
+  listCapabilitiesWithEnvelope,
+  validateCapabilityWithEnvelope
+} from "./chunk-6MXFJVNP.js";
+import {
+  printError,
+  printOutput,
+  withOutputMetadata
+} from "./chunk-ZCM47ROU.js";
+import "./chunk-Y74WTIKJ.js";
+import {
+  SecureStoreAuthError
+} from "./chunk-Y3S2KNNR.js";
 import {
   safeJsonParse
-} from "./chunk-KZ6ZHF5J.js";
+} from "./chunk-ARTIHWVD.js";
 import {
   PermissionError
-} from "./chunk-533JK3YX.js";
-import "./chunk-FR2EDAQM.js";
+} from "./chunk-NXRKDG6E.js";
 
 // src/commands/capability/index.ts
 import * as readline from "readline";
@@ -178,15 +180,16 @@ function registerCapability(program) {
     await executeAndPrint(program, async (host) => {
       const gatewayDomain = resolveCapabilityListDomain(opts.domain);
       const projectId = parseOptionalProjectId(opts.projectId);
-      const catalog = normalizeCapabilityList(await listCapabilities(host, gatewayDomain, projectId));
+      const envelope = await listCapabilitiesWithEnvelope(host, gatewayDomain, projectId);
+      const catalog = normalizeCapabilityList(envelope.data);
       const capabilities = filterCapabilities(catalog, opts.domain);
       const warning = emptyCapabilityCatalogWarning(catalog);
-      return {
+      return withOutputMetadata({
         domain: opts.domain,
         count: capabilities.length,
         capabilities,
         ...warning ? { warning } : {}
-      };
+      }, envelope.meta);
     });
   }).addHelpText(
     "after",
@@ -196,16 +199,17 @@ function registerCapability(program) {
     await executeAndPrint(program, async (host) => {
       const gatewayDomain = resolveCapabilityListDomain(opts.domain);
       const projectId = parseOptionalProjectId(opts.projectId);
-      const catalog = normalizeCapabilityList(await listCapabilities(host, gatewayDomain, projectId));
+      const envelope = await listCapabilitiesWithEnvelope(host, gatewayDomain, projectId);
+      const catalog = normalizeCapabilityList(envelope.data);
       const capabilities = filterCapabilities(catalog, opts.domain, query);
       const warning = emptyCapabilityCatalogWarning(catalog);
-      return {
+      return withOutputMetadata({
         domain: opts.domain,
         query,
         count: capabilities.length,
         capabilities,
         ...warning ? { warning } : {}
-      };
+      }, envelope.meta);
     });
   }).addHelpText(
     "after",
@@ -214,7 +218,7 @@ function registerCapability(program) {
   capability.command("inspect").description("Inspect one capability schema, risk, auth, and output metadata").argument("<capability-id>", "Capability ID, such as analysis.report.list").option("--domain <domain>", "Override the capability namespace used for gateway routing").option("--project-id <project-id>", "Check availability in a project before returning metadata").action(async (capabilityId, opts) => {
     await executeAndPrint(program, async (host) => {
       const gatewayDomain = resolveCapabilityGatewayDomain(capabilityId, opts.domain);
-      return inspectCapability(host, gatewayDomain, capabilityId, parseOptionalProjectId(opts.projectId));
+      return gatewayOutput(await inspectCapabilityWithEnvelope(host, gatewayDomain, capabilityId, parseOptionalProjectId(opts.projectId)), host);
     });
   }).addHelpText(
     "after",
@@ -225,7 +229,7 @@ function registerCapability(program) {
   ).argument("<capability-id>", "Capability ID, such as metadata.data_table.sql_write").option("--domain <domain>", "Override the capability namespace used for gateway routing").option("--input <json-or-path>", "Input JSON object, file path, @<path>, or - for stdin").action(async (capabilityId, opts) => {
     await executeAndPrint(program, async (host) => {
       const gatewayDomain = resolveCapabilityGatewayDomain(capabilityId, opts.domain);
-      return validateCapability(host, gatewayDomain, capabilityId, parseCapabilityInput(opts.input));
+      return gatewayOutput(await validateCapabilityWithEnvelope(host, gatewayDomain, capabilityId, parseCapabilityInput(opts.input)), host);
     });
   }).addHelpText(
     "after",
@@ -247,7 +251,7 @@ Examples:
   ).argument("<capability-id>", "Capability ID, such as analysis.query.export").option("--domain <domain>", "Override the capability namespace used for gateway routing").option("--input <json-or-path>", "Input JSON object, file path, @<path>, or - for stdin").action(async (capabilityId, opts) => {
     await executeAndPrint(program, async (host) => {
       const gatewayDomain = resolveCapabilityGatewayDomain(capabilityId, opts.domain);
-      return dryRunCapability(host, gatewayDomain, capabilityId, parseCapabilityInput(opts.input));
+      return gatewayOutput(await dryRunCapabilityWithEnvelope(host, gatewayDomain, capabilityId, parseCapabilityInput(opts.input)), host);
     });
   }).addHelpText(
     "after",
@@ -267,10 +271,10 @@ Examples:
         );
       }
       if (globalOpts.validate) {
-        return validateCapability(host, gatewayDomain, capabilityId, input);
+        return gatewayOutput(await validateCapabilityWithEnvelope(host, gatewayDomain, capabilityId, input), host);
       }
       if (globalOpts.dryRun) {
-        return dryRunCapability(host, gatewayDomain, capabilityId, input);
+        return gatewayOutput(await dryRunCapabilityWithEnvelope(host, gatewayDomain, capabilityId, input), host);
       }
       if (!globalOpts.yes) {
         const metadata = await inspectCapability(host, gatewayDomain, capabilityId);
@@ -283,7 +287,7 @@ Examples:
           }
         }
       }
-      return executeCapability(host, gatewayDomain, capabilityId, input);
+      return gatewayOutput(await executeCapabilityWithEnvelope(host, gatewayDomain, capabilityId, input), host);
     });
   }).addHelpText(
     "after",
@@ -293,6 +297,15 @@ Examples:
   ae-cli capability run analysis.dashboard.list --input input.json`
   );
 }
+function gatewayOutput(envelope, host) {
+  return withOutputMetadata(withPageUrl(envelope.data, host), envelope.meta);
+}
+function withPageUrl(value, host) {
+  if (!value || typeof value !== "object" || Array.isArray(value)) return value;
+  const record = value;
+  if (typeof record.page_path !== "string" || !/^\/(?![\\/])/.test(record.page_path) || record.page_url !== void 0) return value;
+  return { ...record, page_url: new URL(record.page_path, host).toString() };
+}
 async function executeAndPrint(program, action) {
   const globalOpts = program.opts();
   const host = resolveHost(globalOpts.host);
@@ -312,11 +325,11 @@ async function executeAndPrint(program, action) {
       process.exitCode = 1;
       return;
     }
-    printCapabilityError(error);
+    printCapabilityError(error, host);
     process.exitCode = 1;
   }
 }
-function printCapabilityError(error) {
+function printCapabilityError(error, host) {
   if (error instanceof CapabilityCommandValidationError) {
     printError("validation", error.message, error.hint, error.code);
     return;
@@ -330,7 +343,7 @@ function printCapabilityError(error) {
     return;
   }
   if (error instanceof CapabilityGatewayError) {
-    printError("api", error.message, error.hint, error.code);
+    printError("api", error.message, error.hint, error.code, withPageUrl(error.meta, host));
     return;
   }
   const message = error instanceof Error ? error.message : String(error);

package/dist/chunk-2BDQB42E.js

@@ -0,0 +1,15 @@
+import { createRequire as __createRequire } from 'node:module'; const require = __createRequire(import.meta.url);
+import {
+  getActiveHost,
+  normalizeUrl
+} from "./chunk-ARTIHWVD.js";
+
+// src/core/auth.ts
+function resolveHost(hostOverride) {
+  if (hostOverride) return normalizeUrl(hostOverride);
+  return getActiveHost();
+}
+
+export {
+  resolveHost
+};

package/dist/{chunk-GJXRF7Y6.js → chunk-6MXFJVNP.js}

@@ -3,18 +3,15 @@ import {
   internalCallSourceHeaders
 } from "./chunk-Y74WTIKJ.js";
 import {
-  clearCliToken,
+  SecureStoreAuthError,
   getCliToken
-} from "./chunk-RWXIXOZG.js";
+} from "./chunk-Y3S2KNNR.js";
 import {
   safeJsonParse
-} from "./chunk-KZ6ZHF5J.js";
+} from "./chunk-ARTIHWVD.js";
 import {
   PermissionError
-} from "./chunk-533JK3YX.js";
-import {
-  logger
-} from "./chunk-FR2EDAQM.js";
+} from "./chunk-NXRKDG6E.js";
 
 // src/core/capability-api.ts
 import { readFile } from "fs/promises";
@@ -135,7 +132,13 @@ function buildCapabilityHttpError(resp, body) {
 }
 async function throwCapabilityHttpError(resp) {
   const body = parseCapabilityResponse(await resp.text());
-  throw buildCapabilityHttpError(resp, body);
+  const error = buildCapabilityHttpError(resp, body);
+  if (resp.status === 401) {
+    throw new SecureStoreAuthError(
+      `${error.message}. The stored CLI token is invalid or expired; run: ae-cli auth login`
+    );
+  }
+  throw error;
 }
 async function requestOnce(url, method, token, body, accept = "application/json") {
   const headers = {
@@ -167,45 +170,17 @@ async function callGateway(host, domain, pathAfterV1, method, body, queryParams
 async function callGatewayWithEnvelope(host, domain, pathAfterV1, method, body, queryParams = {}, options = {}) {
   const url = buildCapabilityGatewayUrl(options.apiBaseUrl ?? host, domain, pathAfterV1, queryParams);
   const token = await getCliToken(host);
-  let resp = await requestOnce(url, method, token, body);
-  let permissionMsg;
+  const resp = await requestOnce(url, method, token, body);
   if (resp.status === 403) {
     const error = await permissionError(resp);
-    permissionMsg = error.message;
-    if (options.retryOnInvalidTokenForbidden === false || !isInvalidCliTokenMessage(permissionMsg)) {
-      throw error;
+    if (options.retryOnInvalidTokenForbidden !== false && isInvalidCliTokenMessage(error.message)) {
+      throw new SecureStoreAuthError(
+        `${error.message} Run: ae-cli auth login`
+      );
     }
+    throw error;
   }
-  if (resp.status === 401) {
-    if (options.retryOnUnauthorized === false) {
-      await throwCapabilityHttpError(resp);
-    }
-    logger.warn(`Capability gateway request failed (HTTP 401) for ${host}, refreshing CLI token`);
-    clearCliToken(host);
-    const newToken = await getCliToken(host);
-    process.stderr.write(`[ae-cli] CLI token refreshed for ${host}
-`);
-    resp = await requestOnce(url, method, newToken, body);
-    if (resp.status === 403) {
-      throw new PermissionError(await permissionMessage(resp));
-    }
-    if (!resp.ok) {
-      await throwCapabilityHttpError(resp);
-    }
-  } else if (resp.status === 403 && permissionMsg) {
-    logger.warn(`Capability gateway request failed (${permissionMsg}) for ${host}, refreshing CLI token`);
-    clearCliToken(host);
-    const newToken = await getCliToken(host);
-    process.stderr.write(`[ae-cli] CLI token refreshed for ${host}
-`);
-    resp = await requestOnce(url, method, newToken, body);
-    if (resp.status === 403) {
-      throw await permissionError(resp);
-    }
-    if (!resp.ok) {
-      await throwCapabilityHttpError(resp);
-    }
-  } else if (!resp.ok) {
+  if (!resp.ok) {
     await throwCapabilityHttpError(resp);
   }
   return parseCapabilityEnvelope(parseCapabilityResponse(await resp.text()));
@@ -213,24 +188,15 @@ async function callGatewayWithEnvelope(host, domain, pathAfterV1, method, body,
 async function fetchCapabilityGateway(host, domain, pathAfterV1, method = "GET", body, accept = "application/json") {
   const url = buildCapabilityGatewayUrl(host, domain, pathAfterV1);
   const token = await getCliToken(host);
-  let resp = await requestOnce(url, method, token, body, accept);
+  const resp = await requestOnce(url, method, token, body, accept);
   if (resp.status === 403) {
-    throw await permissionError(resp);
-  }
-  if (resp.status === 401) {
-    logger.warn(`Capability gateway request failed (HTTP 401) for ${host}, refreshing CLI token`);
-    clearCliToken(host);
-    const newToken = await getCliToken(host);
-    process.stderr.write(`[ae-cli] CLI token refreshed for ${host}
-`);
-    resp = await requestOnce(url, method, newToken, body, accept);
-    if (resp.status === 403) {
-      throw await permissionError(resp);
-    }
-    if (!resp.ok) {
-      await throwCapabilityHttpError(resp);
+    const error = await permissionError(resp);
+    if (isInvalidCliTokenMessage(error.message)) {
+      throw new SecureStoreAuthError(`${error.message} Run: ae-cli auth login`);
     }
-  } else if (!resp.ok) {
+    throw error;
+  }
+  if (!resp.ok) {
     await throwCapabilityHttpError(resp);
   }
   return resp;
@@ -243,8 +209,11 @@ async function requestCapabilityGatewayWithEnvelope(host, domain, pathAfterV1, m
   const resp = await fetchCapabilityGateway(host, domain, pathAfterV1, method, body);
   return parseCapabilityEnvelope(parseCapabilityResponse(await resp.text()));
 }
-async function listCapabilities(host, domain, projectId) {
-  return callGateway(host, domain, "capabilities", "GET", void 0, { project_id: projectId });
+async function listCapabilitiesWithEnvelope(host, domain, projectId) {
+  return callGatewayWithEnvelope(host, domain, "capabilities", "GET", void 0, { project_id: projectId });
+}
+async function inspectCapabilityWithEnvelope(host, domain, capabilityId, projectId) {
+  return callGatewayWithEnvelope(host, domain, `capabilities/${capabilityId}`, "GET", void 0, { project_id: projectId });
 }
 async function inspectCapability(host, domain, capabilityId, projectId) {
   return callGateway(
@@ -265,6 +234,12 @@ async function executeCapabilityWithEnvelope(host, domain, capabilityId, input =
 async function dryRunCapability(host, domain, capabilityId, input = {}) {
   return callGateway(host, domain, `capabilities/${capabilityId}/dry-run`, "POST", { input });
 }
+async function dryRunCapabilityWithEnvelope(host, domain, capabilityId, input = {}) {
+  return callGatewayWithEnvelope(host, domain, `capabilities/${capabilityId}/dry-run`, "POST", { input });
+}
+async function validateCapabilityWithEnvelope(host, domain, capabilityId, input = {}) {
+  return callGatewayWithEnvelope(host, domain, `capabilities/${capabilityId}/validate`, "POST", { input });
+}
 async function validateCapability(host, domain, capabilityId, input = {}) {
   return callGateway(host, domain, `capabilities/${capabilityId}/validate`, "POST", { input });
 }
@@ -302,24 +277,15 @@ async function uploadInputFileBytes(host, domain, projectId, purpose, bytes, fil
   form.append("purpose", purpose);
   form.append("file", new Blob([fileBuffer], { type: contentType }), filename);
   const token = await getCliToken(host);
-  let resp = await requestMultipartOnce(url, token, form);
+  const resp = await requestMultipartOnce(url, token, form);
   if (resp.status === 403) {
-    throw await permissionError(resp);
-  }
-  if (resp.status === 401) {
-    logger.warn(`Capability gateway request failed (HTTP 401) for ${host}, refreshing CLI token`);
-    clearCliToken(host);
-    const newToken = await getCliToken(host);
-    process.stderr.write(`[ae-cli] CLI token refreshed for ${host}
-`);
-    resp = await requestMultipartOnce(url, newToken, form);
-    if (resp.status === 403) {
-      throw await permissionError(resp);
-    }
-    if (!resp.ok) {
-      await throwCapabilityHttpError(resp);
+    const error = await permissionError(resp);
+    if (isInvalidCliTokenMessage(error.message)) {
+      throw new SecureStoreAuthError(`${error.message} Run: ae-cli auth login`);
     }
-  } else if (!resp.ok) {
+    throw error;
+  }
+  if (!resp.ok) {
     await throwCapabilityHttpError(resp);
   }
   return unwrapCapabilityEnvelope(parseCapabilityResponse(await resp.text()));
@@ -338,11 +304,14 @@ export {
   fetchCapabilityGateway,
   requestCapabilityGateway,
   requestCapabilityGatewayWithEnvelope,
-  listCapabilities,
+  listCapabilitiesWithEnvelope,
+  inspectCapabilityWithEnvelope,
   inspectCapability,
   executeCapability,
   executeCapabilityWithEnvelope,
   dryRunCapability,
+  dryRunCapabilityWithEnvelope,
+  validateCapabilityWithEnvelope,
   validateCapability,
   uploadInputFile,
   uploadInputFileBytes,

package/dist/chunk-6ZIQV5GW.js

@@ -0,0 +1,26 @@
+import { createRequire as __createRequire } from 'node:module'; const require = __createRequire(import.meta.url);
+
+// src/core/host-guidance.ts
+var AE_TRIAL_URL = "https://thinkingai.cn/request-demo";
+var AE_HOST_SETUP_COMMAND = "ae-cli config set-host <url>";
+function missingAeHostHint(additionalAction) {
+  const actions = [
+    `If your organization already uses AgenticEngine, ask your administrator for its AE URL, then run: ${AE_HOST_SETUP_COMMAND}.`,
+    `If you do not have an AgenticEngine environment, request a trial: ${AE_TRIAL_URL}`
+  ];
+  if (additionalAction) actions.push(additionalAction);
+  return actions.join(" ");
+}
+function missingAeHostGuidance() {
+  return {
+    configure_host: AE_HOST_SETUP_COMMAND,
+    existing_customer: "Ask your AgenticEngine administrator for the AE environment URL.",
+    request_trial_url: AE_TRIAL_URL
+  };
+}
+
+export {
+  AE_TRIAL_URL,
+  missingAeHostHint,
+  missingAeHostGuidance
+};

package/dist/{chunk-KZ6ZHF5J.js → chunk-ARTIHWVD.js}

@@ -1,7 +1,22 @@
 import { createRequire as __createRequire } from 'node:module'; const require = __createRequire(import.meta.url);
 import {
+  getConfigDir,
+  hasConfigDirOverride,
   logger
-} from "./chunk-FR2EDAQM.js";
+} from "./chunk-NXRKDG6E.js";
+
+// src/core/url-utils.ts
+function normalizeUrl(url) {
+  if (!url) return url;
+  if (!url.startsWith("http://") && !url.startsWith("https://")) {
+    url = `https://${url}`;
+  }
+  return url.replace(/\/$/, "");
+}
+
+// src/core/config.ts
+import fs3 from "fs";
+import path from "path";
 
 // src/core/json-utils.ts
 import fs from "fs";
@@ -39,19 +54,6 @@ function safeReadJsonFile(filePath) {
   return safeJsonParse(content);
 }
 
-// src/core/url-utils.ts
-function normalizeUrl(url) {
-  if (!url) return url;
-  if (!url.startsWith("http://") && !url.startsWith("https://")) {
-    url = `https://${url}`;
-  }
-  return url.replace(/\/$/, "");
-}
-
-// src/core/config.ts
-import fs3 from "fs";
-import path from "path";
-
 // src/core/sandbox-runtime.ts
 import { homedir } from "os";
 import { join } from "path";
@@ -86,9 +88,11 @@ function isAeSandboxRuntime() {
 }
 
 // src/core/config.ts
-var CONFIG_DIR = path.join(process.env.HOME || "", ".ae-cli");
-var CONFIG_FILE = path.join(CONFIG_DIR, "config.json");
+function configFile() {
+  return path.join(getConfigDir(), "config.json");
+}
 function sandboxCliTokenCandidatePaths() {
+  if (hasConfigDirOverride()) return [];
   const paths = [getSandboxCliTokenFilePath()];
   const homeFallback = path.join(process.env.HOME || "", ".ae-config", "cli-token.json");
   if (!paths.includes(homeFallback)) {
@@ -127,7 +131,8 @@ function getFallbackCliToken(hostUrl) {
   return null;
 }
 function ensureDir() {
-  if (!fs3.existsSync(CONFIG_DIR)) fs3.mkdirSync(CONFIG_DIR, { recursive: true });
+  const configDir = getConfigDir();
+  if (!fs3.existsSync(configDir)) fs3.mkdirSync(configDir, { recursive: true });
 }
 function dedupeNormalizedHosts(config) {
   const hosts = {};
@@ -150,8 +155,9 @@ function configNeedsNormalization(config) {
 }
 function loadConfig() {
   try {
-    if (fs3.existsSync(CONFIG_FILE)) {
-      const raw = safeReadJsonFile(CONFIG_FILE);
+    const file = configFile();
+    if (fs3.existsSync(file)) {
+      const raw = safeReadJsonFile(file);
       if (raw.defaultHost && !raw.activeHost) {
         const migrated = dedupeNormalizedHosts(migrateConfig(raw));
         saveConfig(migrated);
@@ -188,7 +194,7 @@ function migrateConfig(old) {
 }
 function saveConfig(config) {
   ensureDir();
-  fs3.writeFileSync(CONFIG_FILE, JSON.stringify(config, null, 2));
+  fs3.writeFileSync(configFile(), JSON.stringify(config, null, 2));
   logger.info(`Config saved: activeHost=${config.activeHost}, hosts=${Object.keys(config.hosts).length}`);
 }
 function getActiveHost() {
@@ -270,9 +276,6 @@ function resolveHostSelector(env) {
   if (byLabel.length > 1) return { status: "duplicate-label", matches: byLabel };
   return { status: "not-found", hosts };
 }
-function getConfigDir() {
-  return CONFIG_DIR;
-}
 
 export {
   safeJsonParse,
@@ -289,6 +292,5 @@ export {
   updateHostLabel,
   removeHost,
   listHosts,
-  resolveHostSelector,
-  getConfigDir
+  resolveHostSelector
 };