@thinkingai/ae-cli 6.0.55 → 6.0.57

package/dist/chunk-752BSLZC.js

@@ -0,0 +1,222 @@
+import { createRequire as __createRequire } from 'node:module'; const require = __createRequire(import.meta.url);
+import {
+  getPendingHostCompatNotice,
+  getPendingUpdateNotice
+} from "./chunk-TULINOLS.js";
+import {
+  logger,
+  redactExternalCliToken
+} from "./chunk-Z3Q2AEIN.js";
+
+// src/framework/output.ts
+import Table from "cli-table3";
+import { JqError, json as jqJson } from "jq-wasm";
+var KNOWN_ARRAY_FIELDS = [
+  "items",
+  "events",
+  "reports",
+  "dashboards",
+  "tags",
+  "clusters",
+  "flows",
+  "tasks",
+  "channels",
+  "nodes",
+  "members",
+  "records",
+  "entities",
+  "metrics",
+  "tables",
+  "columns",
+  "properties"
+];
+var OUTPUT_METADATA = /* @__PURE__ */ Symbol("ae-cli-output-metadata");
+function withOutputMetadata(data, meta) {
+  if (!meta || Object.keys(meta).length === 0) return data;
+  if (isOutputWithMetadata(data)) {
+    return {
+      [OUTPUT_METADATA]: true,
+      data: data.data,
+      meta: { ...data.meta, ...meta }
+    };
+  }
+  return {
+    [OUTPUT_METADATA]: true,
+    data,
+    meta
+  };
+}
+function isOutputWithMetadata(value) {
+  return Boolean(value?.[OUTPUT_METADATA]);
+}
+function unwrapOutputData(value) {
+  return isOutputWithMetadata(value) ? value.data : value;
+}
+function readOutputMetadata(value) {
+  return isOutputWithMetadata(value) ? value.meta : void 0;
+}
+function findArrayField(data) {
+  if (Array.isArray(data)) return { rows: data };
+  if (typeof data !== "object" || data === null) return null;
+  for (const key of KNOWN_ARRAY_FIELDS) {
+    if (Array.isArray(data[key])) return { key, rows: data[key] };
+  }
+  for (const key of Object.keys(data)) {
+    if (Array.isArray(data[key])) return { key, rows: data[key] };
+  }
+  return null;
+}
+function formatTable(data) {
+  if (Array.isArray(data?.title) && data.title.length > 0 && Array.isArray(data?.rows)) {
+    const headers = data.title.map((value) => String(value));
+    const table2 = new Table({ head: headers, wordWrap: true });
+    for (const row of data.rows) {
+      const values = Array.isArray(row) ? row : [row];
+      table2.push(headers.map((_header, index) => {
+        const value = values[index];
+        if (value === void 0 || value === null) return "";
+        if (typeof value === "object") return JSON.stringify(value);
+        return String(value);
+      }));
+    }
+    return table2.toString();
+  }
+  const arrayField = findArrayField(data);
+  if (!arrayField || arrayField.rows.length === 0) {
+    return JSON.stringify(data, null, 2);
+  }
+  const rows = arrayField.rows;
+  const allKeys = /* @__PURE__ */ new Set();
+  for (const row of rows) {
+    if (typeof row === "object" && row !== null) {
+      Object.keys(row).forEach((k) => allKeys.add(k));
+    }
+  }
+  const keys = Array.from(allKeys);
+  if (keys.length === 0) return JSON.stringify(rows, null, 2);
+  const table = new Table({ head: keys, wordWrap: true });
+  for (const row of rows) {
+    table.push(keys.map((k) => {
+      const v = row?.[k];
+      if (v === void 0 || v === null) return "";
+      if (typeof v === "object") return JSON.stringify(v);
+      return String(v);
+    }));
+  }
+  const sections = [];
+  if (arrayField.key && typeof data === "object" && data !== null) {
+    const summaryEntries = Object.entries(data).filter(([key]) => key !== arrayField.key);
+    if (summaryEntries.length > 0) {
+      const summary = new Table({ head: ["field", "value"], wordWrap: true });
+      for (const [key, value] of summaryEntries) {
+        summary.push([key, typeof value === "object" && value !== null ? JSON.stringify(value) : String(value ?? "")]);
+      }
+      sections.push(summary.toString());
+    }
+  }
+  sections.push(table.toString());
+  return sections.join("\n\n");
+}
+async function applyJq(data, expr) {
+  const trimmed = expr.trim();
+  if (!trimmed) return data;
+  let results;
+  try {
+    results = await jqJson(data ?? null, trimmed);
+  } catch (err) {
+    const message = err instanceof JqError ? err.message : err?.message || String(err);
+    const error = new Error(`Invalid --jq expression: ${message}`);
+    error.type = "validation";
+    error.code = "OUTPUT_PROJECTION_FAILED";
+    error.hint = "The command completed. Original data and metadata are preserved in stdout; fix the jq expression locally without executing the command again. --jq applies to the command data before envelope wrapping.";
+    throw error;
+  }
+  if (results.length === 0) return null;
+  if (results.length === 1) return results[0];
+  return results;
+}
+async function formatOutput(data, format, jqExpr) {
+  const outputData = isOutputWithMetadata(data) ? data.data : data;
+  const meta = isOutputWithMetadata(data) ? data.meta : void 0;
+  let processed = outputData;
+  if (jqExpr) {
+    processed = await applyJq(outputData, jqExpr);
+  }
+  if (format === "table") {
+    return redactExternalCliToken(formatTable(processed));
+  }
+  const hostCompat = getPendingHostCompatNotice();
+  const updateNotice = getPendingUpdateNotice();
+  const notices = {
+    ...updateNotice ? {} : hostCompat ? { host_compat: hostCompat } : {},
+    ...updateNotice ? { update: updateNotice } : {}
+  };
+  const envelope = {
+    ok: true,
+    data: processed,
+    ...meta ? { meta } : {},
+    // Soft tip lives only under _notice (not mirrored into meta) to avoid duplicate fields.
+    ...Object.keys(notices).length > 0 ? { _notice: notices } : {}
+  };
+  return redactExternalCliToken(JSON.stringify(envelope, null, 2));
+}
+function formatError(type, message, hint, code, meta, details) {
+  const envelope = {
+    ok: false,
+    error: { type, message, hint, code, ...details === void 0 ? {} : { details } },
+    ...meta && Object.keys(meta).length > 0 ? { meta } : {}
+  };
+  return redactExternalCliToken(JSON.stringify(envelope, null, 2));
+}
+function printError(type, message, hint, code, meta, options = {}) {
+  const formatted = formatError(type, message, hint, code, meta, options.details);
+  process.stderr.write(formatted + "\n");
+  if (options.log !== false) {
+    logger.error(`[${type}] ${message}${hint ? " | " + hint : ""}`);
+  }
+}
+function sensitiveRecoveryData(data) {
+  const safe = {};
+  const item = {};
+  if (typeof data?.item?.id === "string") item.id = data.item.id;
+  if (Number.isSafeInteger(data?.item?.contentRevision)) item.contentRevision = data.item.contentRevision;
+  if (Object.keys(item).length > 0) safe.item = item;
+  if (["markdown", "text"].includes(data?.contentFormat)) safe.contentFormat = data.contentFormat;
+  if (typeof data?.out === "string") safe.out = data.out;
+  return safe;
+}
+async function printOutput(data, format, jqExpr, options = {}) {
+  try {
+    process.stdout.write(await formatOutput(data, format, jqExpr) + "\n");
+  } catch (error) {
+    if (error?.code === "OUTPUT_PROJECTION_FAILED") {
+      if (options.redactErrors) {
+        error.message = "Invalid --jq expression: output projection failed; source content is omitted from diagnostics.";
+        error.hint = "The read completed. Fix --jq and explicitly run read-text again without --out, or inspect the file at data.out if present. This error result excludes source content.";
+      }
+      const recovery = JSON.parse(formatError(
+        "validation",
+        error.message,
+        error.hint,
+        error.code,
+        options.redactErrors ? void 0 : readOutputMetadata(data)
+      ));
+      const recoveryData = options.redactErrors ? sensitiveRecoveryData(unwrapOutputData(data)) : unwrapOutputData(data);
+      await new Promise((resolve, reject) => {
+        process.stdout.write(
+          redactExternalCliToken(JSON.stringify({ ...recovery, data: recoveryData }, null, 2)) + "\n",
+          (error2) => error2 ? reject(error2) : resolve()
+        );
+      });
+    }
+    throw error;
+  }
+}
+
+export {
+  withOutputMetadata,
+  unwrapOutputData,
+  readOutputMetadata,
+  printError,
+  printOutput
+};

package/dist/{chunk-RGYPSEYD.js → chunk-7ABK2PEJ.js}

@@ -6,15 +6,15 @@ import {
   CapabilityGatewayError,
   fetchCapabilityGateway,
   requestCapabilityGateway
-} from "./chunk-VZZNLV3I.js";
+} from "./chunk-JCWM2TYP.js";
 import {
   readOutputMetadata,
   unwrapOutputData,
   withOutputMetadata
-} from "./chunk-6VNIR4AP.js";
+} from "./chunk-752BSLZC.js";
 import {
   PermissionError
-} from "./chunk-WNGFSIOB.js";
+} from "./chunk-Z3Q2AEIN.js";
 
 // src/core/analysis-async-artifact.ts
 import { randomBytes } from "crypto";

package/dist/{chunk-Q5US7JC5.js → chunk-7JAVT5TK.js}

@@ -9,15 +9,15 @@ import {
   postAgentApi,
   putAgentApi,
   uploadAgentApi
-} from "./chunk-CI24BDR2.js";
+} from "./chunk-N6XBLRB7.js";
 import {
   TeAgentApiError,
   createTeAgentApiError
-} from "./chunk-3YVEAZUN.js";
+} from "./chunk-RJHGDWSC.js";
 import {
   CliValidationError,
   isApiErrorType
-} from "./chunk-WNGFSIOB.js";
+} from "./chunk-Z3Q2AEIN.js";
 
 // src/commands/workspace/client.ts
 var DEFAULT_TE_CLAUDE_BASE_PATH = "/agent";

package/dist/{chunk-GHXZK54S.js → chunk-H3K5UGYC.js}

@@ -3,14 +3,17 @@ import {
   getActiveHost,
   getConfigDir,
   getFallbackCliToken,
-  normalizeUrl,
+  readSandboxCliTokenEntry,
   safeJsonParse,
   safeReadJsonFile
-} from "./chunk-ZL7SGNIA.js";
+} from "./chunk-JNVVJ273.js";
 import {
   PermissionError,
-  logger
-} from "./chunk-WNGFSIOB.js";
+  externalCliTokenRequestOptions,
+  logger,
+  normalizeUrl,
+  readExternalCliToken
+} from "./chunk-Z3Q2AEIN.js";
 
 // src/core/secure-store.ts
 import crypto from "crypto";
@@ -696,7 +699,8 @@ async function validateCliTokenOnServer(hostUrl, cliToken) {
   try {
     resp = await fetch(url, {
       method: "GET",
-      headers: { Accept: "application/json", "cli-token": cliToken }
+      headers: { Accept: "application/json", "cli-token": cliToken },
+      ...externalCliTokenRequestOptions(url)
     });
   } catch (error) {
     throw new CliTokenValidationUnavailableError(`Unable to validate CLI token for ${hostUrl}: ${error.message}`);
@@ -734,10 +738,14 @@ async function validateCliTokenOnServer(hostUrl, cliToken) {
     ...cliTokenExpiresAt ? { cliTokenExpiresAt } : {}
   };
 }
-async function renewCliTokenOnServer(hostUrl, cliToken) {
+async function renewCliTokenOnServer(hostUrl, cliToken, external = false) {
   const url = new URL(`${hostUrl.replace(/\/+$/, "")}${CLI_TOKEN_RENEW_PATH}`);
-  url.searchParams.set("cli-token", cliToken);
-  const resp = await fetch(url.toString(), { method: "GET", headers: { Accept: "application/json" } });
+  if (!external) url.searchParams.set("cli-token", cliToken);
+  const resp = await fetch(url.toString(), {
+    method: "GET",
+    headers: { Accept: "application/json", ...external ? { "cli-token": cliToken } : {} },
+    ...externalCliTokenRequestOptions(url.toString())
+  });
   const text = await resp.text();
   let data;
   try {
@@ -750,10 +758,10 @@ async function renewCliTokenOnServer(hostUrl, cliToken) {
     throw new Error(`CLI token renew error: ${data.return_message || "unknown"} (code: ${data.return_code})`);
   }
 }
-async function maybeRenewCliTokenDaily(hostUrl, cliToken) {
+async function maybeRenewCliTokenDaily(hostUrl, cliToken, external = false) {
   const key = renewKey(hostUrl, cliToken);
   const today = localRenewDate();
-  if (renewedLocalDate.get(key) === today || persistedRenewDate(hostUrl, cliToken) === today) {
+  if (renewedLocalDate.get(key) === today || !external && persistedRenewDate(hostUrl, cliToken) === today) {
     renewedLocalDate.set(key, today);
     return;
   }
@@ -761,11 +769,12 @@ async function maybeRenewCliTokenDaily(hostUrl, cliToken) {
   if (existing) return existing;
   const attempt = (async () => {
     try {
-      await renewCliTokenOnServer(hostUrl, cliToken);
-      markRenewSucceeded(hostUrl, cliToken, today);
+      await renewCliTokenOnServer(hostUrl, cliToken, external);
+      if (external) renewedLocalDate.set(key, today);
+      else markRenewSucceeded(hostUrl, cliToken, today);
       logger.info(`cli-token: renewed for ${normalizeUrl(hostUrl)} (local day ${today})`);
     } catch (error) {
-      logger.warn(`cli-token: renew failed for ${normalizeUrl(hostUrl)}: ${error?.message || error}; business call proceeds`);
+      logger.warn(`cli-token: renew failed for ${normalizeUrl(hostUrl)}${external ? "" : `: ${error?.message || error}`}; business call proceeds`);
     } finally {
       renewInFlight.delete(key);
     }
@@ -774,6 +783,9 @@ async function maybeRenewCliTokenDaily(hostUrl, cliToken) {
   await attempt;
 }
 function peekCliToken(hostOverride) {
+  const external = readExternalCliToken(hostOverride);
+  if (external) return external.token;
+  if (process.env.TE_AGENT_CLI_CONFIG_DIR !== void 0) return sessionCliToken(hostOverride);
   const hostUrl = hostOverride || getActiveHost();
   if (!hostUrl) return void 0;
   const normalizedHost = normalizeUrl(hostUrl);
@@ -791,6 +803,16 @@ function peekCliToken(hostOverride) {
   return cliTokenCache.get(normalizedHost) || getFallbackCliToken(normalizedHost) || void 0;
 }
 async function getCliToken(hostOverride) {
+  const external = readExternalCliToken(hostOverride);
+  if (external) {
+    await maybeRenewCliTokenDaily(external.url, external.token, true);
+    return external.token;
+  }
+  if (process.env.TE_AGENT_CLI_CONFIG_DIR !== void 0) {
+    const token2 = sessionCliToken(hostOverride);
+    if (!token2) throw new SecureStoreAuthError("Current session CLI credential is unavailable or does not match the requested host.");
+    return token2;
+  }
   const resolvedHost = hostOverride || getActiveHost();
   if (!resolvedHost) throw new SecureStoreAuthError("No AE host configured. Run: ae-cli auth login --host <url>");
   const hostUrl = normalizeUrl(resolvedHost);
@@ -803,6 +825,12 @@ async function getCliToken(hostOverride) {
   await maybeRenewCliTokenDaily(hostUrl, token);
   return token;
 }
+function sessionCliToken(hostOverride) {
+  const entry = readSandboxCliTokenEntry();
+  if (!entry?.token.startsWith("cli_")) return void 0;
+  if (hostOverride && normalizeUrl(entry.url) !== normalizeUrl(hostOverride)) return void 0;
+  return entry.token;
+}
 async function mintCliToken(hostUrl, accessToken) {
   logger.info(`Generating CLI token for ${hostUrl}`);
   const cliToken = await generateCliToken(hostUrl, accessToken);

package/dist/{chunk-OP44TT4H.js → chunk-IN7KKL6K.js}

@@ -1,8 +1,10 @@
 import { createRequire as __createRequire } from 'node:module'; const require = __createRequire(import.meta.url);
 import {
-  getActiveHost,
+  getActiveHost
+} from "./chunk-JNVVJ273.js";
+import {
   normalizeUrl
-} from "./chunk-ZL7SGNIA.js";
+} from "./chunk-Z3Q2AEIN.js";
 
 // src/core/auth.ts
 function resolveHost(hostOverride) {

package/dist/{chunk-VZZNLV3I.js → chunk-JCWM2TYP.js}

@@ -6,13 +6,15 @@ import {
   SecureStoreAuthError,
   clearCliTokenCache,
   getCliToken
-} from "./chunk-GHXZK54S.js";
+} from "./chunk-H3K5UGYC.js";
 import {
-  safeJsonParse
-} from "./chunk-ZL7SGNIA.js";
+  safeJsonParse,
+  stringifyJsonRequest
+} from "./chunk-JNVVJ273.js";
 import {
-  PermissionError
-} from "./chunk-WNGFSIOB.js";
+  PermissionError,
+  externalCliTokenRequestOptions
+} from "./chunk-Z3Q2AEIN.js";
 
 // src/core/cli-agent-context.ts
 import { readFileSync, statSync } from "fs";
@@ -306,7 +308,13 @@ async function permissionError(resp) {
   const body = safeJsonParse(await codeResponse.text());
   const error = isRecord(body?.error) ? body.error : void 0;
   const code = nonEmptyString(error?.code) ?? nonEmptyString(body?.code);
-  return new PermissionError(message, code);
+  return new PermissionError(
+    message,
+    code,
+    nonEmptyString(error?.hint),
+    void 0,
+    isRecord(body?.meta) ? body.meta : void 0
+  );
 }
 function isInvalidCliTokenMessage(message) {
   return /\byour token is invalid\b/i.test(message) || /\bcli[-_\s]?token\b.*\binvalid\b/i.test(message) || /\binvalid\b.*\bcli[-_\s]?token\b/i.test(message);
@@ -319,7 +327,10 @@ function parseCapabilityResponse(text) {
     return text;
   }
 }
-function parseCapabilityEnvelope(body) {
+function isCommunityGatewayRequest(domain, pathAfterV1) {
+  return domain.replace(/^\/+|\/+$/g, "") === "community" || /^capabilities\/community\./.test(pathAfterV1.replace(/^\/+/, ""));
+}
+function parseCapabilityEnvelope(body, acceptCommunityLegacyEnvelope = false) {
   if (body == null) {
     throw new CapabilityGatewayError("Empty capability gateway response");
   }
@@ -344,10 +355,32 @@ function parseCapabilityEnvelope(body) {
       err.type === "validation" ? "validation" : "api"
     );
   }
+  const legacyReturnCode = acceptCommunityLegacyEnvelope ? body.return_code ?? body.returnCode : void 0;
+  if (legacyReturnCode !== void 0 && Number(legacyReturnCode) !== 0) {
+    const code = String(legacyReturnCode);
+    const rawMessage = nonEmptyString(body.return_message) ?? nonEmptyString(body.returnMessage) ?? nonEmptyString(body.message);
+    const message = safeLegacyErrorMessage(rawMessage, code);
+    throw new CapabilityGatewayError(
+      message,
+      code,
+      void 0,
+      "The community service returned a legacy error envelope. Verify that the capability gateway route is deployed on the current host.",
+      { legacy_return_code: legacyReturnCode }
+    );
+  }
+  if (legacyReturnCode !== void 0 && Number(legacyReturnCode) === 0 && "data" in body) {
+    return { ok: true, data: body.data };
+  }
   return { ok: true, data: body };
 }
-function unwrapCapabilityEnvelope(body) {
-  return parseCapabilityEnvelope(body).data;
+function safeLegacyErrorMessage(message, code) {
+  if (!message || /\n\s*at\s|stacktrace|\.java:\d+/i.test(message)) {
+    return `Capability service request failed (legacy return code ${code})`;
+  }
+  return message.slice(0, 500);
+}
+function unwrapCapabilityEnvelope(body, acceptCommunityLegacyEnvelope = false) {
+  return parseCapabilityEnvelope(body, acceptCommunityLegacyEnvelope).data;
 }
 function nonEmptyString(value) {
   return typeof value === "string" && value.trim() ? value.trim() : void 0;
@@ -400,13 +433,14 @@ async function requestOnce(url, method, token, body, accept = "application/json"
   const init = { method, headers };
   if (body !== void 0 && method !== "GET") {
     headers["Content-Type"] = "application/json";
-    init.body = JSON.stringify(includeClientContextInBody ? withCliAgentContextBody(body, agentContext) : body);
+    init.body = stringifyJsonRequest(includeClientContextInBody ? withCliAgentContextBody(body, agentContext) : body);
   }
-  return fetch(url, init);
+  return fetch(url, { ...init, ...externalCliTokenRequestOptions(url) });
 }
 async function requestMultipartOnce(url, token, form) {
   return fetch(url, {
     method: "POST",
+    ...externalCliTokenRequestOptions(url),
     headers: {
       "cli-token": token,
       "Accept": "application/json",
@@ -439,7 +473,10 @@ async function callGatewayWithEnvelope(host, domain, pathAfterV1, method, body,
   if (!resp.ok) {
     await throwCapabilityHttpError(resp);
   }
-  return parseCapabilityEnvelope(parseCapabilityResponse(await resp.text()));
+  return parseCapabilityEnvelope(
+    parseCapabilityResponse(await resp.text()),
+    isCommunityGatewayRequest(domain, pathAfterV1)
+  );
 }
 async function fetchCapabilityGateway(host, domain, pathAfterV1, method = "GET", body, accept = "application/json") {
   const url = buildCapabilityGatewayUrl(host, domain, pathAfterV1);
@@ -459,11 +496,17 @@ async function fetchCapabilityGateway(host, domain, pathAfterV1, method = "GET",
 }
 async function requestCapabilityGateway(host, domain, pathAfterV1, method = "GET", body) {
   const resp = await fetchCapabilityGateway(host, domain, pathAfterV1, method, body);
-  return unwrapCapabilityEnvelope(parseCapabilityResponse(await resp.text()));
+  return unwrapCapabilityEnvelope(
+    parseCapabilityResponse(await resp.text()),
+    isCommunityGatewayRequest(domain, pathAfterV1)
+  );
 }
 async function requestCapabilityGatewayWithEnvelope(host, domain, pathAfterV1, method = "GET", body) {
   const resp = await fetchCapabilityGateway(host, domain, pathAfterV1, method, body);
-  return parseCapabilityEnvelope(parseCapabilityResponse(await resp.text()));
+  return parseCapabilityEnvelope(
+    parseCapabilityResponse(await resp.text()),
+    isCommunityGatewayRequest(domain, pathAfterV1)
+  );
 }
 async function listCapabilitiesWithEnvelope(host, domain, projectId) {
   return callGatewayWithEnvelope(host, domain, "capabilities", "GET", void 0, { project_id: projectId });
@@ -544,7 +587,10 @@ async function uploadInputFileBytes(host, domain, projectId, purpose, bytes, fil
   if (!resp.ok) {
     await throwCapabilityHttpError(resp);
   }
-  return unwrapCapabilityEnvelope(parseCapabilityResponse(await resp.text()));
+  return unwrapCapabilityEnvelope(
+    parseCapabilityResponse(await resp.text()),
+    isCommunityGatewayRequest(domain, "input-files")
+  );
 }
 async function callCapabilityApi(host, domain, action, method = "POST", params = {}, options = {}) {
   const isGet = method === "GET";

package/dist/{chunk-S6M42KND.js → chunk-JEUXDY3B.js}

@@ -2,7 +2,7 @@ import { createRequire as __createRequire } from 'node:module'; const require =
 import {
   __commonJS,
   __require
-} from "./chunk-WNGFSIOB.js";
+} from "./chunk-Z3Q2AEIN.js";
 
 // node_modules/process-nextick-args/index.js
 var require_process_nextick_args = __commonJS({