@thinkingai/ae-cli 6.0.55 → 6.0.57

package/dist/{chunk-ZL7SGNIA.js → chunk-JNVVJ273.js}

@@ -1,15 +1,44 @@
 import { createRequire as __createRequire } from 'node:module'; const require = __createRequire(import.meta.url);
 import {
-  logger
-} from "./chunk-WNGFSIOB.js";
+  logger,
+  normalizeUrl,
+  readExternalCliToken
+} from "./chunk-Z3Q2AEIN.js";
 
-// src/core/url-utils.ts
-function normalizeUrl(url) {
-  if (!url) return url;
-  if (!url.startsWith("http://") && !url.startsWith("https://")) {
-    url = `https://${url}`;
+// src/core/sandbox-runtime.ts
+import { homedir } from "os";
+import { join } from "path";
+import fs from "fs";
+var LINUX_SANDBOX_RUNTIME_ROOT = "/home/ta/te_agent_ta";
+function getDefaultSandboxRuntimeRoot() {
+  if (process.platform === "linux") {
+    return LINUX_SANDBOX_RUNTIME_ROOT;
   }
-  return url.replace(/\/$/, "");
+  return homedir();
+}
+function getSandboxRuntimeRoot() {
+  return process.env.SANDBOX_RUNTIME_ROOT || getDefaultSandboxRuntimeRoot();
+}
+function getSandboxAeConfigDir() {
+  return join(getSandboxRuntimeRoot(), ".ae-config");
+}
+function getSandboxCliTokenFilePath() {
+  return join(getSandboxAeConfigDir(), "cli-token.json");
+}
+function isAeSandboxRuntime() {
+  if (process.env.SANDBOX_RUNTIME_ROOT) {
+    return true;
+  }
+  if (process.platform !== "linux") {
+    return false;
+  }
+  try {
+    if (fs.existsSync(getSandboxCliTokenFilePath())) {
+      return true;
+    }
+  } catch {
+  }
+  return false;
 }
 
 // src/core/config.ts
@@ -18,11 +47,17 @@ import path from "path";
 import os from "os";
 
 // src/core/json-utils.ts
-import fs from "fs";
+import fs2 from "fs";
 import { createRequire } from "module";
 var require2 = createRequire(import.meta.url);
 var JSONbig = require2("json-bigint");
 var jsonParser = JSONbig({ storeAsString: true });
+var requestJsonStringifier = JSONbig({ useNativeBigInt: true });
+var requestJsonParser = JSONbig({
+  useNativeBigInt: true,
+  protoAction: "error",
+  constructorAction: "error"
+});
 var INTEGER_TOKEN = /^-?(?:0|[1-9]\d*)$/;
 function normalizeParsedNumbers(lossless, native) {
   if (typeof lossless === "string" && typeof native === "number") {
@@ -49,50 +84,24 @@ function safeJsonParse(text) {
   return normalizeParsedNumbers(lossless, JSON.parse(text));
 }
 function safeReadJsonFile(filePath) {
-  const content = fs.readFileSync(filePath, "utf-8");
+  const content = fs2.readFileSync(filePath, "utf-8");
   return safeJsonParse(content);
 }
-
-// src/core/sandbox-runtime.ts
-import { homedir } from "os";
-import { join } from "path";
-import fs2 from "fs";
-var LINUX_SANDBOX_RUNTIME_ROOT = "/home/ta/te_agent_ta";
-function getDefaultSandboxRuntimeRoot() {
-  if (process.platform === "linux") {
-    return LINUX_SANDBOX_RUNTIME_ROOT;
-  }
-  return homedir();
+function stringifyJsonRequest(obj) {
+  return requestJsonStringifier.stringify(obj);
 }
-function getSandboxRuntimeRoot() {
-  return process.env.SANDBOX_RUNTIME_ROOT || getDefaultSandboxRuntimeRoot();
-}
-function getSandboxAeConfigDir() {
-  return join(getSandboxRuntimeRoot(), ".ae-config");
-}
-function getSandboxCliTokenFilePath() {
-  return join(getSandboxAeConfigDir(), "cli-token.json");
-}
-function isAeSandboxRuntime() {
-  if (process.env.SANDBOX_RUNTIME_ROOT) {
-    return true;
-  }
-  if (process.platform !== "linux") {
-    return false;
-  }
-  try {
-    if (fs2.existsSync(getSandboxCliTokenFilePath())) {
-      return true;
-    }
-  } catch {
-  }
-  return false;
+function parseJsonRequest(text) {
+  return requestJsonParser.parse(text);
 }
 
 // src/core/config.ts
 var CONFIG_DIR = path.join(process.env.HOME || os.homedir(), ".ae-cli");
 var CONFIG_FILE = path.join(CONFIG_DIR, "config.json");
 function sandboxCliTokenCandidatePaths() {
+  if (process.env.TE_AGENT_CLI_CONFIG_DIR !== void 0) {
+    const directory = process.env.TE_AGENT_CLI_CONFIG_DIR;
+    return path.isAbsolute(directory) ? [path.join(directory, "cli-token.json")] : [];
+  }
   const paths = [getSandboxCliTokenFilePath()];
   const homeFallback = path.join(process.env.HOME || os.homedir(), ".ae-config", "cli-token.json");
   if (!paths.includes(homeFallback)) {
@@ -108,7 +117,7 @@ function readSandboxCliTokenEntry() {
       if (data && typeof data === "object" && !Array.isArray(data)) {
         const url = data.url;
         const token = data.token ?? data["cli-token"];
-        if (url && token) {
+        if (typeof url === "string" && url && typeof token === "string" && token) {
           return { url, token };
         }
       }
@@ -196,6 +205,8 @@ function saveConfig(config) {
   logger.info(`Config saved: activeHost=${config.activeHost}, hosts=${Object.keys(config.hosts).length}`);
 }
 function getActiveHost() {
+  const externalHost = readExternalCliToken()?.url;
+  if (externalHost) return externalHost;
   const sandboxHost = readSandboxCliTokenEntry()?.url;
   if (sandboxHost) return sandboxHost;
   const config = loadConfig();
@@ -281,7 +292,8 @@ function getConfigDir() {
 export {
   safeJsonParse,
   safeReadJsonFile,
-  normalizeUrl,
+  stringifyJsonRequest,
+  parseJsonRequest,
   getSandboxRuntimeRoot,
   isAeSandboxRuntime,
   readSandboxCliTokenEntry,

package/dist/chunk-N6XBLRB7.js

@@ -0,0 +1,105 @@
+import { createRequire as __createRequire } from 'node:module'; const require = __createRequire(import.meta.url);
+import {
+  TeAgentApiError,
+  deleteFromMainApp,
+  fetchSigned,
+  getBufferFromMainApp,
+  getFromMainApp,
+  parseResponse,
+  patchToMainApp,
+  postToMainApp,
+  putToMainApp,
+  uploadToMainApp
+} from "./chunk-RJHGDWSC.js";
+import {
+  clearCliTokenCache
+} from "./chunk-H3K5UGYC.js";
+
+// src/core/resource-package-client.ts
+function checkPath(path) {
+  if (!path.startsWith("/api/resource-packages/")) {
+    throw new TypeError("Resource package requests must use /api/resource-packages/");
+  }
+}
+async function fetchResourcePackage(input) {
+  const request = () => fetchSigned({ ...input, hostOverride: input.host });
+  let response = await request();
+  if (response.status === 401) {
+    await response.body?.cancel();
+    clearCliTokenCache(input.host);
+    response = await request();
+  }
+  return response;
+}
+async function resourcePackageJson(input) {
+  checkPath(input.path);
+  const response = await fetchResourcePackage({
+    method: input.method,
+    path: input.path,
+    host: input.host,
+    includeJsonContentType: true,
+    body: input.body === void 0 ? void 0 : JSON.stringify(input.body)
+  });
+  return parseResponse(response, "Resource package service returned");
+}
+async function resourcePackageRaw(input) {
+  checkPath(input.path);
+  const response = await fetchResourcePackage({
+    ...input,
+    includeJsonContentType: false
+  });
+  if (!response.ok) await parseResponse(response, "Resource package service returned");
+  return response;
+}
+
+// src/commands/te-agent/api-client.ts
+function getAgentApi(ctx, path) {
+  return getFromMainApp(path, ctx.host());
+}
+function postAgentApi(ctx, path, body) {
+  return postToMainApp(path, body, ctx.host());
+}
+function patchAgentApi(ctx, path, body) {
+  return patchToMainApp(path, body, ctx.host());
+}
+function putAgentApi(ctx, path, body) {
+  return putToMainApp(path, body, ctx.host());
+}
+function deleteAgentApi(ctx, path) {
+  return deleteFromMainApp(path, ctx.host());
+}
+function uploadAgentApi(ctx, path, formData) {
+  return uploadToMainApp(path, formData, ctx.host());
+}
+function getAgentBuffer(ctx, path) {
+  return getBufferFromMainApp(path, ctx.host());
+}
+function requestResourcePackageApi(ctx, method, path, body) {
+  return resourcePackageJson({ host: ctx.host(), method, path, body });
+}
+function requestResourcePackageRaw(ctx, method, path, options = {}) {
+  return resourcePackageRaw({ host: ctx.host(), method, path, ...options });
+}
+function isTransientResourcePackageError(error) {
+  return error instanceof TeAgentApiError && (error.status === 0 || error.status === 429 || error.status >= 500);
+}
+function resourcePackagePreflightChange(error) {
+  if (!(error instanceof TeAgentApiError) || error.code !== "PREFLIGHT_CHANGED") return void 0;
+  const body = error.body;
+  if (!body || typeof body !== "object" || !("preflight" in body)) return void 0;
+  return body.preflight;
+}
+
+export {
+  getAgentApi,
+  postAgentApi,
+  patchAgentApi,
+  putAgentApi,
+  deleteAgentApi,
+  uploadAgentApi,
+  getAgentBuffer,
+  requestResourcePackageApi,
+  requestResourcePackageRaw,
+  isTransientResourcePackageError,
+  resourcePackagePreflightChange
+};

package/dist/{chunk-AP7YP2NX.js → chunk-OAWPT7VP.js}

@@ -5,14 +5,14 @@ import {
   require_node,
   require_process_nextick_args,
   require_util
-} from "./chunk-S6M42KND.js";
+} from "./chunk-JEUXDY3B.js";
 import {
   __commonJS,
   __esm,
   __export,
   __require,
   __toCommonJS
-} from "./chunk-WNGFSIOB.js";
+} from "./chunk-Z3Q2AEIN.js";
 
 // node_modules/readdir-glob/node_modules/minimatch/lib/path.js
 var require_path = __commonJS({

package/dist/{chunk-7KU2WNQE.js → chunk-QEMQKVHW.js}

@@ -1,17 +1,21 @@
 import { createRequire as __createRequire } from 'node:module'; const require = __createRequire(import.meta.url);
 import {
   CapabilityGatewayError
-} from "./chunk-VZZNLV3I.js";
+} from "./chunk-JCWM2TYP.js";
 import {
   SecureStoreAuthError,
   getCliToken
-} from "./chunk-GHXZK54S.js";
+} from "./chunk-H3K5UGYC.js";
 import {
   safeJsonParse
-} from "./chunk-ZL7SGNIA.js";
+} from "./chunk-JNVVJ273.js";
 import {
-  PermissionError
-} from "./chunk-WNGFSIOB.js";
+  PermissionError,
+  externalCliTokenRequestOptions,
+  isKbQueryPath,
+  kbReadHeaders,
+  readKbExecutionContext
+} from "./chunk-Z3Q2AEIN.js";
 
 // src/core/mcp-access.ts
 function buildUrl(host, path, params = {}) {
@@ -170,7 +174,7 @@ function parseKbResponse(resp, text, options = {}) {
 async function fetchWithCliToken(input, init, cliToken, options = {}) {
   const headers = new Headers(init.headers);
   headers.set("cli-token", cliToken);
-  const resp = await fetch(input, { ...init, headers });
+  const resp = await fetch(input, { ...init, headers, ...externalCliTokenRequestOptions(input) });
   if (options.responseType === "empty" && resp.status === 204) return null;
   if (options.responseType === "bytes" && resp.ok) {
     if (resp.headers.get("content-type")?.includes("application/json")) {
@@ -217,18 +221,36 @@ async function getAuthHeaders(ctx) {
   return { "cli-token": cliToken };
 }
 async function kbApi(ctx, method, path, params = {}, body, options = {}) {
-  const host = ctx.host();
   const upperMethod = method.toUpperCase();
+  const isQuery = isKbQueryPath(upperMethod, path);
+  const execution = isQuery ? readKbExecutionContext() : void 0;
+  const host = execution ? ctx.hostOverride?.() || execution.origin : ctx.host();
+  const selectedHost = execution && !ctx.hostOverride ? ctx.host() : host;
+  const url = buildUrl(selectedHost, path, params);
+  const queryHeaders = isQuery ? kbReadHeaders(url, ctx.str("read-context")) : void 0;
+  const init = {
+    method: upperMethod,
+    headers: { "Content-Type": "application/json", ...queryHeaders },
+    body: upperMethod === "GET" ? void 0 : JSON.stringify(body ?? {})
+  };
+  if (execution) {
+    const response = await fetch(url, { ...init, redirect: "error" });
+    const text = await response.text();
+    if (!response.ok) {
+      let code = "KB_READ_CONTEXT_REQUEST_FAILED";
+      try {
+        const value = responseErrorMetadata(safeJsonParse(text)).code;
+        if (value?.startsWith("KB_READ_CONTEXT_")) code = value;
+      } catch {
+      }
+      throw new KbHttpError(code, code, response.status);
+    }
+    return parseKbResponse(response, text, { ...options, redactErrorDetails: true });
+  }
   return requestWithCliToken(
     host,
-    buildUrl(host, path, params),
-    {
-      method: upperMethod,
-      headers: {
-        "Content-Type": "application/json"
-      },
-      body: upperMethod === "GET" ? void 0 : JSON.stringify(body ?? {})
-    },
+    url,
+    init,
     options
   );
 }

package/dist/{chunk-CT7QDJS6.js → chunk-QVRIDN42.js}

@@ -5,11 +5,11 @@ import {
   require_node,
   require_process_nextick_args,
   require_util
-} from "./chunk-S6M42KND.js";
+} from "./chunk-JEUXDY3B.js";
 import {
   __commonJS,
   __require
-} from "./chunk-WNGFSIOB.js";
+} from "./chunk-Z3Q2AEIN.js";
 
 // node_modules/jszip/node_modules/readable-stream/lib/internal/streams/stream.js
 var require_stream = __commonJS({

package/dist/{chunk-RPBOAQQQ.js → chunk-QZUVLFNR.js}

@@ -3,7 +3,7 @@ import {
   getAgentApi,
   patchAgentApi,
   postAgentApi
-} from "./chunk-CI24BDR2.js";
+} from "./chunk-N6XBLRB7.js";
 
 // src/commands/memory/cli-client.ts
 var DEFAULT_TE_CLAUDE_BASE_PATH = "/agent";

package/dist/{chunk-3YVEAZUN.js → chunk-RJHGDWSC.js}

@@ -4,15 +4,17 @@ import {
 } from "./chunk-Y74WTIKJ.js";
 import {
   getCliToken
-} from "./chunk-GHXZK54S.js";
+} from "./chunk-H3K5UGYC.js";
 import {
   getActiveHost,
   getSandboxRuntimeRoot
-} from "./chunk-ZL7SGNIA.js";
+} from "./chunk-JNVVJ273.js";
 import {
   PermissionError,
-  isApiErrorType
-} from "./chunk-WNGFSIOB.js";
+  externalCliTokenRequestOptions,
+  isApiErrorType,
+  readExternalCliToken
+} from "./chunk-Z3Q2AEIN.js";
 
 // src/core/te-agent-credentials.ts
 import { readFileSync } from "fs";
@@ -153,7 +155,7 @@ async function fetchWithTimeout(url, init, timeoutMs = DEFAULT_TIMEOUT_MS) {
   const controller = new AbortController();
   const timer = setTimeout(() => controller.abort(), timeoutMs);
   try {
-    return await fetch(url, { ...init, signal: controller.signal });
+    return await fetch(url, { ...init, signal: controller.signal, ...externalCliTokenRequestOptions(url) });
   } catch (err) {
     if (err?.name === "AbortError") {
       throw new TeAgentApiError(
@@ -197,7 +199,8 @@ function teClaudeBaseFromActiveHost(hostOverride) {
   if (!h) return void 0;
   return resolveTeClaudeBaseUrl(h);
 }
-async function signRequest(method, path2, hostOverride, includeJsonContentType = true) {
+async function signRequest(method, path2, hostOverride, includeJsonContentType = true, authMode = "auto") {
+  const external = readExternalCliToken(hostOverride);
   const configuredHost = hostOverride || getActiveHost();
   const sandboxOnly = !hostOverride && (/* @__PURE__ */ new Set([
     "/api/sandbox/models",
@@ -207,8 +210,8 @@ async function signRequest(method, path2, hostOverride, includeJsonContentType =
     "/api/sandbox/sync/pull",
     "/api/sandbox/sync/pull/candidates"
   ])).has(path2.split("?")[0]);
-  const sandboxCred = configuredHost && !sandboxOnly ? null : tryLoadTeAgentSandboxCredentials();
-  if (!hostOverride && sandboxCred && sandboxCred.sandboxId && sandboxCred.sandboxSecretKey) {
+  const sandboxCred = external || configuredHost && !sandboxOnly ? null : tryLoadTeAgentSandboxCredentials();
+  if (authMode === "auto" && !hostOverride && sandboxCred && sandboxCred.sandboxId && sandboxCred.sandboxSecretKey) {
     const headers = {
       "X-Sandbox-Id": sandboxCred.sandboxId,
       "X-Sandbox-Secret-Key": sandboxCred.sandboxSecretKey
@@ -222,7 +225,7 @@ async function signRequest(method, path2, hostOverride, includeJsonContentType =
       authKind: "sandbox"
     };
   }
-  const baseUrl = hostOverride ? teClaudeBaseFromActiveHost(hostOverride) : sandboxCred?.url || teClaudeBaseFromActiveHost();
+  const baseUrl = hostOverride || external ? teClaudeBaseFromActiveHost(hostOverride || external?.url) : sandboxCred?.url || teClaudeBaseFromActiveHost();
   if (!baseUrl) {
     throw new TeAgentCredentialsError(
       "Cannot determine the te-claude service URL",
@@ -248,13 +251,14 @@ async function fetchSigned(options) {
     options.method,
     options.path,
     options.hostOverride,
-    options.includeJsonContentType
+    options.includeJsonContentType,
+    options.authMode
   );
   return fetchWithTimeout(
     signed.url,
     {
       method: options.method,
-      headers: signed.headers,
+      headers: { ...Object.fromEntries(new Headers(options.headers).entries()), ...signed.headers },
       body: options.body
     },
     options.timeoutMs
@@ -263,7 +267,7 @@ async function fetchSigned(options) {
 function errorDetails(parsed, defaultErrorPrefix, status) {
   const nested = parsed && typeof parsed === "object" && parsed.error && typeof parsed.error === "object" ? parsed.error : parsed;
   const message = typeof parsed?.error === "string" ? parsed.error : typeof nested?.message === "string" ? nested.message : typeof parsed?.message === "string" ? parsed.message : typeof parsed?.return_message === "string" ? parsed.return_message : `${defaultErrorPrefix} ${status}`;
-  const code = typeof nested?.code === "string" ? nested.code : typeof parsed?.code === "string" ? parsed.code : void 0;
+  const code = typeof nested?.code === "string" ? nested.code : typeof parsed?.code === "string" ? parsed.code : typeof parsed?.errorCode === "string" ? parsed.errorCode : void 0;
   const hint = typeof nested?.hint === "string" ? nested.hint : typeof parsed?.hint === "string" ? parsed.hint : void 0;
   const declaredType = isApiErrorType(nested?.type) ? nested.type : void 0;
   const type = status === 401 ? "auth" : status === 403 ? "permission" : declaredType ?? ([400, 413, 422].includes(status) ? "validation" : status === 404 ? "not_found" : "api");
@@ -303,21 +307,23 @@ async function parseResponse(response, defaultErrorPrefix) {
   }
   return parsed;
 }
-async function postToMainApp(path2, body, hostOverride) {
+async function postToMainApp(path2, body, hostOverride, authMode = "auto") {
   const rawBody = JSON.stringify(body);
   const response = await fetchSigned({
     method: "POST",
     path: path2,
     body: rawBody,
-    hostOverride
+    hostOverride,
+    authMode
   });
   return parseResponse(response, "Main app returned");
 }
-async function getFromMainApp(path2, hostOverride) {
+async function getFromMainApp(path2, hostOverride, authMode = "auto") {
   const response = await fetchSigned({
     method: "GET",
     path: path2,
-    hostOverride
+    hostOverride,
+    authMode
   });
   return parseResponse(response, "Main app returned");
 }
@@ -347,21 +353,23 @@ async function postSandboxSyncPull(args) {
     mode: "merge"
   });
 }
-async function deleteFromMainApp(path2, hostOverride) {
+async function deleteFromMainApp(path2, hostOverride, authMode = "auto") {
   const response = await fetchSigned({
     method: "DELETE",
     path: path2,
-    hostOverride
+    hostOverride,
+    authMode
   });
   return parseResponse(response, "Main app returned");
 }
-async function patchToMainApp(path2, body, hostOverride) {
+async function patchToMainApp(path2, body, hostOverride, authMode = "auto") {
   const rawBody = JSON.stringify(body);
   const response = await fetchSigned({
     method: "PATCH",
     path: path2,
     body: rawBody,
-    hostOverride
+    hostOverride,
+    authMode
   });
   return parseResponse(response, "Main app returned");
 }
@@ -447,7 +455,8 @@ async function downloadFromMainApp(requestPath, outputPath, hostOverride) {
         return await fetch(requestToSend.url, {
           method: "GET",
           headers: requestToSend.headers,
-          signal: controller.signal
+          signal: controller.signal,
+          ...externalCliTokenRequestOptions(requestToSend.url)
         });
       } catch (error) {
         if (error?.name === "AbortError") {
@@ -519,7 +528,9 @@ export {
   getClaudeConfigDir,
   resolveTeClaudeBaseUrl,
   TeAgentApiError,
+  fetchSigned,
   createTeAgentApiError,
+  parseResponse,
   postToMainApp,
   getFromMainApp,
   getSandboxModels,

package/dist/{chunk-374V5R6N.js → chunk-TKVVACEJ.js}

@@ -6,13 +6,16 @@ import {
   dryRunCapability,
   executeCapabilityWithEnvelope,
   validateCapability
-} from "./chunk-VZZNLV3I.js";
+} from "./chunk-JCWM2TYP.js";
 import {
   withOutputMetadata
-} from "./chunk-6VNIR4AP.js";
+} from "./chunk-752BSLZC.js";
 import {
   CliValidationError
-} from "./chunk-WNGFSIOB.js";
+} from "./chunk-Z3Q2AEIN.js";
+
+// src/core/capability-command.ts
+import { randomBytes } from "crypto";
 
 // src/core/definition-intent.ts
 import { createHash } from "crypto";
@@ -83,7 +86,6 @@ function isRecord(value) {
 }
 
 // src/core/capability-command.ts
-import { randomBytes } from "crypto";
 function createCapabilityCommand(config) {
   return {
     service: config.cliService,