@thinkingai/ae-cli 6.0.48-customer.1 → 6.0.48-workbuddy

package/dist/{chunk-6QK7SYYY.js → chunk-DU5MZQFQ.js}

@@ -3,16 +3,15 @@ import {
   internalCallSourceHeaders
 } from "./chunk-Y74WTIKJ.js";
 import {
-  clearCliToken,
   getCliToken
-} from "./chunk-RWXIXOZG.js";
+} from "./chunk-Y3S2KNNR.js";
 import {
   getActiveHost,
   getSandboxRuntimeRoot
-} from "./chunk-KZ6ZHF5J.js";
+} from "./chunk-ARTIHWVD.js";
 import {
   PermissionError
-} from "./chunk-533JK3YX.js";
+} from "./chunk-NXRKDG6E.js";
 
 // src/core/te-agent-credentials.ts
 import { readFileSync } from "fs";
@@ -109,6 +108,17 @@ import { open, unlink } from "fs/promises";
 import path from "path";
 import { Readable } from "stream";
 import { pipeline } from "stream/promises";
+
+// src/core/te-claude-base-url.ts
+function resolveTeClaudeBaseUrl(host) {
+  const base = host.replace(/\/+$/, "");
+  const configured = (process.env.TE_CLAUDE_BASE_PATH ?? process.env.AE_API_PREFIX ?? "/agent").trim();
+  const path2 = configured.replace(/^\/+|\/+$/g, "");
+  const basePath = path2 ? `/${path2}` : "";
+  return basePath && !base.endsWith(basePath) ? `${base}${basePath}` : base;
+}
+
+// src/core/te-agent-client.ts
 var TeAgentApiError = class extends Error {
   constructor(message, status, code, body) {
     super(message);
@@ -170,9 +180,7 @@ function teClaudeBaseFromActiveHost(hostOverride) {
   if (override) return override.replace(/\/+$/, "");
   const h = hostOverride || getActiveHost();
   if (!h) return void 0;
-  const base = h.replace(/\/+$/, "");
-  const bp = process.env.TE_CLAUDE_BASE_PATH || "/agent";
-  return base.endsWith(bp) ? base : base + bp;
+  return resolveTeClaudeBaseUrl(h);
 }
 async function signRequest(method, path2, hostOverride, includeJsonContentType = true) {
   const sandboxCred = tryLoadTeAgentSandboxCredentials();
@@ -211,34 +219,22 @@ async function signRequest(method, path2, hostOverride, includeJsonContentType =
     tokenHost: hostForToken
   };
 }
-async function fetchSignedWithRetry(options) {
-  let signed = await signRequest(
+async function fetchSigned(options) {
+  const signed = await signRequest(
     options.method,
     options.path,
     options.hostOverride,
     options.includeJsonContentType
   );
-  const request = (requestToSend) => fetchWithTimeout(
-    requestToSend.url,
+  return fetchWithTimeout(
+    signed.url,
     {
       method: options.method,
-      headers: requestToSend.headers,
+      headers: signed.headers,
       body: options.body
     },
     options.timeoutMs
   );
-  let response = await request(signed);
-  if (response.status === 401 && signed.authKind === "cli-token" && signed.tokenHost) {
-    clearCliToken(signed.tokenHost);
-    signed = await signRequest(
-      options.method,
-      options.path,
-      options.hostOverride,
-      options.includeJsonContentType
-    );
-    response = await request(signed);
-  }
-  return response;
 }
 function errorDetails(parsed, defaultErrorPrefix, status) {
   const nested = parsed && typeof parsed === "object" && parsed.error && typeof parsed.error === "object" ? parsed.error : parsed;
@@ -276,7 +272,7 @@ async function parseResponse(response, defaultErrorPrefix) {
 }
 async function postToMainApp(path2, body, hostOverride) {
   const rawBody = JSON.stringify(body);
-  const response = await fetchSignedWithRetry({
+  const response = await fetchSigned({
     method: "POST",
     path: path2,
     body: rawBody,
@@ -285,7 +281,7 @@ async function postToMainApp(path2, body, hostOverride) {
   return parseResponse(response, "Main app returned");
 }
 async function getFromMainApp(path2, hostOverride) {
-  const response = await fetchSignedWithRetry({
+  const response = await fetchSigned({
     method: "GET",
     path: path2,
     hostOverride
@@ -319,7 +315,7 @@ async function postSandboxSyncPull(args) {
   });
 }
 async function deleteFromMainApp(path2, hostOverride) {
-  const response = await fetchSignedWithRetry({
+  const response = await fetchSigned({
     method: "DELETE",
     path: path2,
     hostOverride
@@ -328,7 +324,7 @@ async function deleteFromMainApp(path2, hostOverride) {
 }
 async function patchToMainApp(path2, body, hostOverride) {
   const rawBody = JSON.stringify(body);
-  const response = await fetchSignedWithRetry({
+  const response = await fetchSigned({
     method: "PATCH",
     path: path2,
     body: rawBody,
@@ -338,7 +334,7 @@ async function patchToMainApp(path2, body, hostOverride) {
 }
 async function putToMainApp(path2, body, hostOverride) {
   const rawBody = JSON.stringify(body);
-  const response = await fetchSignedWithRetry({
+  const response = await fetchSigned({
     method: "PUT",
     path: path2,
     body: rawBody,
@@ -347,7 +343,7 @@ async function putToMainApp(path2, body, hostOverride) {
   return parseResponse(response, "Main app returned");
 }
 async function getBufferFromMainApp(path2, hostOverride) {
-  const response = await fetchSignedWithRetry({
+  const response = await fetchSigned({
     method: "GET",
     path: path2,
     hostOverride
@@ -411,7 +407,7 @@ async function downloadFromMainApp(requestPath, outputPath, hostOverride) {
         "OUTPUT_ERROR"
       );
     }
-    let signed = await signRequest("GET", requestPath, hostOverride);
+    const signed = await signRequest("GET", requestPath, hostOverride);
     let response;
     const request = async (requestToSend) => {
       try {
@@ -432,11 +428,6 @@ async function downloadFromMainApp(requestPath, outputPath, hostOverride) {
       }
     };
     response = await request(signed);
-    if (response.status === 401 && signed.authKind === "cli-token" && signed.tokenHost) {
-      clearCliToken(signed.tokenHost);
-      signed = await signRequest("GET", requestPath, hostOverride);
-      response = await request(signed);
-    }
     if (!response.ok) {
       await parseResponse(response, "Main app returned");
     }
@@ -479,7 +470,7 @@ async function downloadFromMainApp(requestPath, outputPath, hostOverride) {
   }
 }
 async function uploadToMainApp(path2, formData, hostOverride) {
-  const response = await fetchSignedWithRetry({
+  const response = await fetchSigned({
     method: "POST",
     path: path2,
     body: formData,
@@ -494,6 +485,7 @@ export {
   TeAgentCredentialsError,
   tryLoadTeAgentSandboxCredentials,
   getClaudeConfigDir,
+  resolveTeClaudeBaseUrl,
   TeAgentApiError,
   postToMainApp,
   getFromMainApp,

package/dist/{chunk-BVDST5YT.js → chunk-JFOGWBAT.js}

@@ -1,20 +1,20 @@
 import { createRequire as __createRequire } from 'node:module'; const require = __createRequire(import.meta.url);
 import {
-  readOutputMetadata,
-  unwrapOutputData,
-  withOutputMetadata
-} from "./chunk-KEWVSO64.js";
+  resolveGatewayDomain
+} from "./chunk-TKHSULJT.js";
 import {
   CapabilityGatewayError,
   fetchCapabilityGateway,
   requestCapabilityGateway
-} from "./chunk-GJXRF7Y6.js";
+} from "./chunk-6MXFJVNP.js";
 import {
-  resolveGatewayDomain
-} from "./chunk-TKHSULJT.js";
+  readOutputMetadata,
+  unwrapOutputData,
+  withOutputMetadata
+} from "./chunk-ZCM47ROU.js";
 import {
   PermissionError
-} from "./chunk-533JK3YX.js";
+} from "./chunk-NXRKDG6E.js";
 
 // src/core/analysis-async-artifact.ts
 import { randomBytes } from "crypto";

package/dist/{chunk-JYMGHGCE.js → chunk-KSQGGXGA.js}

@@ -1,17 +1,17 @@
 import { createRequire as __createRequire } from 'node:module'; const require = __createRequire(import.meta.url);
 import {
   CapabilityGatewayError
-} from "./chunk-GJXRF7Y6.js";
+} from "./chunk-6MXFJVNP.js";
 import {
-  clearCliToken,
+  SecureStoreAuthError,
   getCliToken
-} from "./chunk-RWXIXOZG.js";
+} from "./chunk-Y3S2KNNR.js";
 import {
   safeJsonParse
-} from "./chunk-KZ6ZHF5J.js";
+} from "./chunk-ARTIHWVD.js";
 import {
   PermissionError
-} from "./chunk-533JK3YX.js";
+} from "./chunk-NXRKDG6E.js";
 
 // src/core/mcp-access.ts
 function buildUrl(host, path, params = {}) {
@@ -73,7 +73,7 @@ function nonOkResponseError(resp, data, options) {
   const fallbackMessage = `KB API HTTP error: ${responseStatus(resp)}`;
   const businessCode = options.preserveBusinessErrorCode && typeof data?.error === "string" && metadata.code ? metadata.code : void 0;
   const message = businessCode ? `${businessCode}: ${serverMessage ?? fallbackMessage}` : serverMessage ?? fallbackMessage;
-  if (metadata.code || metadata.hint) {
+  if (options.preserveErrorMetadata !== false && (metadata.code || metadata.hint)) {
     return new KbHttpError(message, metadata.code, resp.status, metadata.hint);
   }
   return new Error(message);
@@ -137,18 +137,28 @@ async function fetchWithCliToken(input, init, cliToken, options = {}) {
   const headers = new Headers(init.headers);
   headers.set("cli-token", cliToken);
   const resp = await fetch(input, { ...init, headers });
+  if (options.responseType === "bytes" && resp.ok) {
+    if (resp.headers.get("content-type")?.includes("application/json")) {
+      parseKbResponse(resp, await resp.text(), options);
+      throw new Error("KB raw-file protocol error: unexpected JSON response");
+    }
+    return {
+      bytes: new Uint8Array(await resp.arrayBuffer()),
+      contentType: resp.headers.get("content-type") ?? "application/octet-stream"
+    };
+  }
   return parseKbResponse(resp, await resp.text(), options);
 }
 async function requestWithCliToken(host, input, init, options) {
-  const request = async () => fetchWithCliToken(input, init, await getCliToken(host), options);
   try {
-    return await request();
+    return await fetchWithCliToken(input, init, await getCliToken(host), options);
   } catch (error) {
-    if (!(error instanceof KbUnauthorizedError) || !options.retryUnauthorized) {
-      throw error;
+    if (error instanceof KbUnauthorizedError) {
+      throw new SecureStoreAuthError(
+        `The stored CLI token for ${host} is invalid or expired. Run: ae-cli auth login --host ${host}`
+      );
     }
-    clearCliToken(host);
-    return request();
+    throw error;
   }
 }
 async function getAuthHeaders(ctx) {
@@ -173,6 +183,7 @@ async function kbApi(ctx, method, path, params = {}, body, options = {}) {
 }
 async function kbUpload(ctx, path, form, params = {}, options = {}) {
   const host = ctx.host();
+  const uploadOptions = { preserveErrorMetadata: false, ...options };
   return requestWithCliToken(
     host,
     buildUrl(host, path, params),
@@ -180,7 +191,7 @@ async function kbUpload(ctx, path, form, params = {}, options = {}) {
       method: "POST",
       body: form
     },
-    options
+    uploadOptions
   );
 }
 

package/dist/{chunk-FR2EDAQM.js → chunk-NXRKDG6E.js}

@@ -33,8 +33,24 @@ var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__ge
 
 // src/core/logger.ts
 import fs from "fs";
+import path2 from "path";
+
+// src/core/config-dir.ts
 import path from "path";
-var LOG_DIR = path.join(process.env.HOME || "", ".ae-cli", "log");
+var CONFIG_DIR_ENV = "AE_CLI_CONFIG_DIR";
+function hasConfigDirOverride() {
+  return Boolean(process.env[CONFIG_DIR_ENV]?.trim());
+}
+function getConfigDir() {
+  const home = process.env.HOME || "";
+  const configured = process.env[CONFIG_DIR_ENV]?.trim();
+  if (!configured) return path.join(home, ".ae-cli");
+  const expanded = configured.replace(/^\$\{HOME\}(?=\/|$)/, home).replace(/^\$HOME(?=\/|$)/, home);
+  return path.resolve(expanded);
+}
+
+// src/core/logger.ts
+var LOG_DIR = path2.join(getConfigDir(), "log");
 var Logger = class {
   logDir;
   date;
@@ -60,7 +76,7 @@ var Logger = class {
     if (today !== this.date) {
       this.date = today;
     }
-    return path.join(this.logDir, `${this.date}_${level}.log`);
+    return path2.join(this.logDir, `${this.date}_${level}.log`);
   }
   /**
    * Write a log entry to file (not printed to the console; console output is handled by existing process.stderr.write calls)
@@ -114,9 +130,79 @@ var Logger = class {
 };
 var logger = new Logger();
 
+// src/core/errors.ts
+var PermissionError = class extends Error {
+  constructor(message, code, hint) {
+    super(message);
+    this.code = code;
+    this.hint = hint;
+    this.name = "PermissionError";
+  }
+  code;
+  hint;
+};
+var CliValidationError = class extends Error {
+  code;
+  hint;
+  location;
+  constructor(message, options = {}) {
+    super(message);
+    this.name = "CliValidationError";
+    this.code = options.code;
+    this.hint = options.hint;
+    if (options.location) {
+      const location = {};
+      if (typeof options.location.segment === "number" && Number.isFinite(options.location.segment)) {
+        location.segment = options.location.segment;
+      }
+      if (typeof options.location.record === "number" && Number.isFinite(options.location.record)) {
+        location.record = options.location.record;
+      }
+      if (typeof options.location.field === "string" && options.location.field.length > 0) {
+        location.field = options.location.field;
+      }
+      if (Object.keys(location).length > 0) this.location = location;
+    }
+  }
+};
+var CommunityReportError = class extends Error {
+  code;
+  httpStatus;
+  hint;
+  meta;
+  constructor(message, options = {}) {
+    super(message, options.cause === void 0 ? void 0 : { cause: options.cause });
+    this.name = "CommunityReportError";
+    this.code = options.code;
+    this.httpStatus = options.httpStatus;
+    this.hint = options.hint;
+    this.meta = options.meta;
+  }
+};
+var LocalDataUploadError = class extends Error {
+  code;
+  httpStatus;
+  hint;
+  meta;
+  constructor(message, options = {}) {
+    super(message, options.cause === void 0 ? void 0 : { cause: options.cause });
+    this.name = "LocalDataUploadError";
+    this.code = options.code;
+    this.httpStatus = options.httpStatus;
+    this.hint = options.hint;
+    this.meta = options.meta;
+  }
+};
+
 export {
   __require,
   __commonJS,
   __toESM,
-  logger
+  hasConfigDirOverride,
+  getConfigDir,
+  logger,
+  PermissionError,
+  CliValidationError,
+  CommunityReportError,
+  LocalDataUploadError
 };

package/dist/{chunk-NSIVXKJH.js → chunk-QSO4SA6C.js}

@@ -1,15 +1,15 @@
 import { createRequire as __createRequire } from 'node:module'; const require = __createRequire(import.meta.url);
 import {
-  withOutputMetadata
-} from "./chunk-KEWVSO64.js";
+  resolveGatewayDomain
+} from "./chunk-TKHSULJT.js";
 import {
   dryRunCapability,
   executeCapabilityWithEnvelope,
   validateCapability
-} from "./chunk-GJXRF7Y6.js";
+} from "./chunk-6MXFJVNP.js";
 import {
-  resolveGatewayDomain
-} from "./chunk-TKHSULJT.js";
+  withOutputMetadata
+} from "./chunk-ZCM47ROU.js";
 
 // src/core/capability-command.ts
 import { randomBytes } from "crypto";

package/dist/{chunk-BE73PUFX.js → chunk-QYJ252CT.js}

@@ -3,12 +3,12 @@ import {
   require_inherits,
   require_lib,
   require_node
-} from "./chunk-B5HMQAOM.js";
+} from "./chunk-UL6SJDYE.js";
 import {
   __commonJS,
   __require,
   __toESM
-} from "./chunk-FR2EDAQM.js";
+} from "./chunk-NXRKDG6E.js";
 
 // node_modules/exceljs/lib/utils/under-dash.js
 var require_under_dash = __commonJS({

package/dist/{chunk-B5HMQAOM.js → chunk-UL6SJDYE.js}

@@ -2,7 +2,7 @@ import { createRequire as __createRequire } from 'node:module'; const require =
 import {
   __commonJS,
   __require
-} from "./chunk-FR2EDAQM.js";
+} from "./chunk-NXRKDG6E.js";
 
 // node_modules/process-nextick-args/index.js
 var require_process_nextick_args = __commonJS({