@thinkingai/ae-cli 6.0.56 → 6.0.58

package/dist/{chunk-3TQA5RXE.js → chunk-HQCY3QCA.js}

@@ -6,13 +6,16 @@ import {
   dryRunCapability,
   executeCapabilityWithEnvelope,
   validateCapability
-} from "./chunk-MXV3PYC3.js";
+} from "./chunk-UYJMEHAF.js";
 import {
   withOutputMetadata
-} from "./chunk-ELCR235M.js";
+} from "./chunk-WMDO53YK.js";
 import {
   CliValidationError
-} from "./chunk-ZW4VMY5H.js";
+} from "./chunk-Z3Q2AEIN.js";
+
+// src/core/capability-command.ts
+import { randomBytes } from "crypto";
 
 // src/core/definition-intent.ts
 import { createHash } from "crypto";
@@ -83,7 +86,6 @@ function isRecord(value) {
 }
 
 // src/core/capability-command.ts
-import { randomBytes } from "crypto";
 function createCapabilityCommand(config) {
   return {
     service: config.cliService,

package/dist/{chunk-T44M3PLZ.js → chunk-JEUXDY3B.js}

@@ -2,7 +2,7 @@ import { createRequire as __createRequire } from 'node:module'; const require =
 import {
   __commonJS,
   __require
-} from "./chunk-ZW4VMY5H.js";
+} from "./chunk-Z3Q2AEIN.js";
 
 // node_modules/process-nextick-args/index.js
 var require_process_nextick_args = __commonJS({

package/dist/{chunk-2UWS5CUP.js → chunk-JSBLCLFE.js}

@@ -4,17 +4,17 @@ import {
 } from "./chunk-Y74WTIKJ.js";
 import {
   getCliToken
-} from "./chunk-P7KL7IOH.js";
+} from "./chunk-SOSFRU3O.js";
 import {
   getActiveHost,
   getSandboxRuntimeRoot
-} from "./chunk-LMCYSVVA.js";
+} from "./chunk-4PSTYEG5.js";
 import {
   PermissionError,
   externalCliTokenRequestOptions,
   isApiErrorType,
   readExternalCliToken
-} from "./chunk-ZW4VMY5H.js";
+} from "./chunk-Z3Q2AEIN.js";
 
 // src/core/te-agent-credentials.ts
 import { readFileSync } from "fs";

package/dist/chunk-K2Z7QHDR.js

@@ -0,0 +1,132 @@
+import { createRequire as __createRequire } from 'node:module'; const require = __createRequire(import.meta.url);
+import {
+  canManageGlobalSkills,
+  fetchCliConfig,
+  getLocalCliPackageInfo,
+  isBusinessSkillContextCurrent,
+  rememberBusinessConfig,
+  reserveBusinessSkillContext,
+  syncBusinessSkills
+} from "./chunk-GBSACKFB.js";
+import {
+  peekCliToken
+} from "./chunk-SOSFRU3O.js";
+import {
+  getActiveHost,
+  getConfigDir
+} from "./chunk-4PSTYEG5.js";
+import {
+  normalizeUrl
+} from "./chunk-Z3Q2AEIN.js";
+
+// src/core/environment-refresh.ts
+import crypto from "crypto";
+import fs from "fs";
+import path from "path";
+function cliTokenFingerprint(token) {
+  return crypto.createHash("sha256").update(token).digest("hex");
+}
+function invalidateBusinessSkillSynchronization() {
+  if (canManageGlobalSkills()) reserveBusinessSkillContext({});
+}
+async function refreshEnvironmentConfig(host, options = {}) {
+  const normalized = normalizeUrl(host);
+  const skipped = (reason) => ({
+    host: normalized,
+    businesses: {},
+    source: "unavailable",
+    skills: { status: "skipped", reason }
+  });
+  let token;
+  try {
+    token = peekCliToken(normalized);
+  } catch {
+    return skipped("Credentials could not be read. Sign in before refreshing Skills.");
+  }
+  if (!token) return skipped("Sign in to this environment before refreshing its business configuration.");
+  const fingerprint = cliTokenFingerprint(token);
+  const localActiveEnvironment = () => {
+    try {
+      return canManageGlobalSkills() && normalizeUrl(getActiveHost()) === normalized && cliTokenFingerprint(peekCliToken(normalized) ?? "") === fingerprint;
+    } catch {
+      return false;
+    }
+  };
+  const synchronize = options.synchronizeSkills !== false && localActiveEnvironment();
+  const generation = synchronize ? reserveBusinessSkillContext({ host: normalized, tokenFingerprint: fingerprint }) : void 0;
+  let config;
+  try {
+    config = await (options.fetchConfig ?? fetchCliConfig)(normalized, token);
+  } catch {
+    config = null;
+  }
+  if (!config) return skipped("CLI configuration is unavailable; existing Skills were preserved.");
+  if (generation && !isBusinessSkillContextCurrent({
+    host: normalized,
+    tokenFingerprint: fingerprint,
+    generation,
+    isCurrentContext: localActiveEnvironment
+  })) {
+    return {
+      host: normalized,
+      businesses: {},
+      source: "remote",
+      skills: { status: "skipped", reason: "A newer environment refresh superseded this response." }
+    };
+  }
+  rememberBusinessConfig(normalized, token, config.businesses);
+  const result = {
+    host: normalized,
+    businesses: config.businesses ?? {},
+    source: "remote",
+    skills: { status: "skipped", reason: "Only an explicitly refreshed active local environment changes global Skills." }
+  };
+  if (config.businesses === void 0) {
+    result.skills = { status: "skipped", reason: "This server does not provide business states; existing Skills were preserved." };
+    return result;
+  }
+  if (!synchronize || !localActiveEnvironment()) return result;
+  try {
+    const syncOptions = {
+      skillsDirectory: path.join(getLocalCliPackageInfo().root, "skills"),
+      host: normalized,
+      tokenFingerprint: fingerprint,
+      businesses: config.businesses,
+      packageVersion: getLocalCliPackageInfo().version,
+      generation,
+      isCurrentContext: localActiveEnvironment
+    };
+    if (!fs.existsSync(path.join(getConfigDir(), "business-skills.json"))) {
+      const adoption = syncBusinessSkills({ ...syncOptions, mode: "adopt" });
+      if (["failed", "busy", "stale"].includes(adoption.status)) {
+        result.skills = adoption;
+        return result;
+      }
+    }
+    result.skills = syncBusinessSkills(syncOptions);
+  } catch {
+    result.skills = { status: "failed", reason: "Skill synchronization could not complete. Retry: ae-cli config refresh" };
+  }
+  return result;
+}
+async function refreshEnvironmentAfterLogin(host) {
+  try {
+    const result = await refreshEnvironmentConfig(host);
+    if (!["success", "skipped"].includes(result.skills.status)) {
+      process.stderr.write("[ae-cli] Some Skills could not be synchronized. Run: ae-cli config refresh\n");
+    }
+    if (result.source === "unavailable") {
+      process.stderr.write("[ae-cli] Business configuration could not be refreshed. Sign in if needed, then run: ae-cli config refresh\n");
+    }
+    return result;
+  } catch {
+    process.stderr.write("[ae-cli] Business configuration could not be refreshed. Retry: ae-cli config refresh\n");
+    return void 0;
+  }
+}
+
+export {
+  invalidateBusinessSkillSynchronization,
+  refreshEnvironmentConfig,
+  refreshEnvironmentAfterLogin
+};

package/dist/{chunk-QSAR3GHY.js → chunk-OAWPT7VP.js}

@@ -5,14 +5,14 @@ import {
   require_node,
   require_process_nextick_args,
   require_util
-} from "./chunk-T44M3PLZ.js";
+} from "./chunk-JEUXDY3B.js";
 import {
   __commonJS,
   __esm,
   __export,
   __require,
   __toCommonJS
-} from "./chunk-ZW4VMY5H.js";
+} from "./chunk-Z3Q2AEIN.js";
 
 // node_modules/readdir-glob/node_modules/minimatch/lib/path.js
 var require_path = __commonJS({

package/dist/{chunk-2IYIYSUO.js → chunk-QVRIDN42.js}

@@ -5,11 +5,11 @@ import {
   require_node,
   require_process_nextick_args,
   require_util
-} from "./chunk-T44M3PLZ.js";
+} from "./chunk-JEUXDY3B.js";
 import {
   __commonJS,
   __require
-} from "./chunk-ZW4VMY5H.js";
+} from "./chunk-Z3Q2AEIN.js";
 
 // node_modules/jszip/node_modules/readable-stream/lib/internal/streams/stream.js
 var require_stream = __commonJS({

package/dist/{chunk-F6NIPIT5.js → chunk-QWSA3EOD.js}

@@ -1,18 +1,21 @@
 import { createRequire as __createRequire } from 'node:module'; const require = __createRequire(import.meta.url);
 import {
   CapabilityGatewayError
-} from "./chunk-MXV3PYC3.js";
+} from "./chunk-UYJMEHAF.js";
 import {
   SecureStoreAuthError,
   getCliToken
-} from "./chunk-P7KL7IOH.js";
+} from "./chunk-SOSFRU3O.js";
 import {
   safeJsonParse
-} from "./chunk-LMCYSVVA.js";
+} from "./chunk-4PSTYEG5.js";
 import {
   PermissionError,
-  externalCliTokenRequestOptions
-} from "./chunk-ZW4VMY5H.js";
+  externalCliTokenRequestOptions,
+  isKbQueryPath,
+  kbReadHeaders,
+  readKbExecutionContext
+} from "./chunk-Z3Q2AEIN.js";
 
 // src/core/mcp-access.ts
 function buildUrl(host, path, params = {}) {
@@ -218,18 +221,36 @@ async function getAuthHeaders(ctx) {
   return { "cli-token": cliToken };
 }
 async function kbApi(ctx, method, path, params = {}, body, options = {}) {
-  const host = ctx.host();
   const upperMethod = method.toUpperCase();
+  const isQuery = isKbQueryPath(upperMethod, path);
+  const execution = isQuery ? readKbExecutionContext() : void 0;
+  const host = execution ? ctx.hostOverride?.() || execution.origin : ctx.host();
+  const selectedHost = execution && !ctx.hostOverride ? ctx.host() : host;
+  const url = buildUrl(selectedHost, path, params);
+  const queryHeaders = isQuery ? kbReadHeaders(url, ctx.str("read-context")) : void 0;
+  const init = {
+    method: upperMethod,
+    headers: { "Content-Type": "application/json", ...queryHeaders },
+    body: upperMethod === "GET" ? void 0 : JSON.stringify(body ?? {})
+  };
+  if (execution) {
+    const response = await fetch(url, { ...init, redirect: "error" });
+    const text = await response.text();
+    if (!response.ok) {
+      let code = "KB_READ_CONTEXT_REQUEST_FAILED";
+      try {
+        const value = responseErrorMetadata(safeJsonParse(text)).code;
+        if (value?.startsWith("KB_READ_CONTEXT_")) code = value;
+      } catch {
+      }
+      throw new KbHttpError(code, code, response.status);
+    }
+    return parseKbResponse(response, text, { ...options, redactErrorDetails: true });
+  }
   return requestWithCliToken(
     host,
-    buildUrl(host, path, params),
-    {
-      method: upperMethod,
-      headers: {
-        "Content-Type": "application/json"
-      },
-      body: upperMethod === "GET" ? void 0 : JSON.stringify(body ?? {})
-    },
+    url,
+    init,
     options
   );
 }

package/dist/{chunk-P7KL7IOH.js → chunk-SOSFRU3O.js}

@@ -6,14 +6,14 @@ import {
   readSandboxCliTokenEntry,
   safeJsonParse,
   safeReadJsonFile
-} from "./chunk-LMCYSVVA.js";
+} from "./chunk-4PSTYEG5.js";
 import {
   PermissionError,
   externalCliTokenRequestOptions,
   logger,
   normalizeUrl,
   readExternalCliToken
-} from "./chunk-ZW4VMY5H.js";
+} from "./chunk-Z3Q2AEIN.js";
 
 // src/core/secure-store.ts
 import crypto from "crypto";

package/dist/{chunk-MXV3PYC3.js → chunk-UYJMEHAF.js}

@@ -6,14 +6,15 @@ import {
   SecureStoreAuthError,
   clearCliTokenCache,
   getCliToken
-} from "./chunk-P7KL7IOH.js";
+} from "./chunk-SOSFRU3O.js";
 import {
-  safeJsonParse
-} from "./chunk-LMCYSVVA.js";
+  safeJsonParse,
+  stringifyJsonRequest
+} from "./chunk-4PSTYEG5.js";
 import {
   PermissionError,
   externalCliTokenRequestOptions
-} from "./chunk-ZW4VMY5H.js";
+} from "./chunk-Z3Q2AEIN.js";
 
 // src/core/cli-agent-context.ts
 import { readFileSync, statSync } from "fs";
@@ -326,7 +327,10 @@ function parseCapabilityResponse(text) {
     return text;
   }
 }
-function parseCapabilityEnvelope(body) {
+function isCommunityGatewayRequest(domain, pathAfterV1) {
+  return domain.replace(/^\/+|\/+$/g, "") === "community" || /^capabilities\/community\./.test(pathAfterV1.replace(/^\/+/, ""));
+}
+function parseCapabilityEnvelope(body, acceptCommunityLegacyEnvelope = false) {
   if (body == null) {
     throw new CapabilityGatewayError("Empty capability gateway response");
   }
@@ -351,10 +355,32 @@ function parseCapabilityEnvelope(body) {
       err.type === "validation" ? "validation" : "api"
     );
   }
+  const legacyReturnCode = acceptCommunityLegacyEnvelope ? body.return_code ?? body.returnCode : void 0;
+  if (legacyReturnCode !== void 0 && Number(legacyReturnCode) !== 0) {
+    const code = String(legacyReturnCode);
+    const rawMessage = nonEmptyString(body.return_message) ?? nonEmptyString(body.returnMessage) ?? nonEmptyString(body.message);
+    const message = safeLegacyErrorMessage(rawMessage, code);
+    throw new CapabilityGatewayError(
+      message,
+      code,
+      void 0,
+      "The community service returned a legacy error envelope. Verify that the capability gateway route is deployed on the current host.",
+      { legacy_return_code: legacyReturnCode }
+    );
+  }
+  if (legacyReturnCode !== void 0 && Number(legacyReturnCode) === 0 && "data" in body) {
+    return { ok: true, data: body.data };
+  }
   return { ok: true, data: body };
 }
-function unwrapCapabilityEnvelope(body) {
-  return parseCapabilityEnvelope(body).data;
+function safeLegacyErrorMessage(message, code) {
+  if (!message || /\n\s*at\s|stacktrace|\.java:\d+/i.test(message)) {
+    return `Capability service request failed (legacy return code ${code})`;
+  }
+  return message.slice(0, 500);
+}
+function unwrapCapabilityEnvelope(body, acceptCommunityLegacyEnvelope = false) {
+  return parseCapabilityEnvelope(body, acceptCommunityLegacyEnvelope).data;
 }
 function nonEmptyString(value) {
   return typeof value === "string" && value.trim() ? value.trim() : void 0;
@@ -407,7 +433,7 @@ async function requestOnce(url, method, token, body, accept = "application/json"
   const init = { method, headers };
   if (body !== void 0 && method !== "GET") {
     headers["Content-Type"] = "application/json";
-    init.body = JSON.stringify(includeClientContextInBody ? withCliAgentContextBody(body, agentContext) : body);
+    init.body = stringifyJsonRequest(includeClientContextInBody ? withCliAgentContextBody(body, agentContext) : body);
   }
   return fetch(url, { ...init, ...externalCliTokenRequestOptions(url) });
 }
@@ -447,7 +473,10 @@ async function callGatewayWithEnvelope(host, domain, pathAfterV1, method, body,
   if (!resp.ok) {
     await throwCapabilityHttpError(resp);
   }
-  return parseCapabilityEnvelope(parseCapabilityResponse(await resp.text()));
+  return parseCapabilityEnvelope(
+    parseCapabilityResponse(await resp.text()),
+    isCommunityGatewayRequest(domain, pathAfterV1)
+  );
 }
 async function fetchCapabilityGateway(host, domain, pathAfterV1, method = "GET", body, accept = "application/json") {
   const url = buildCapabilityGatewayUrl(host, domain, pathAfterV1);
@@ -467,11 +496,17 @@ async function fetchCapabilityGateway(host, domain, pathAfterV1, method = "GET",
 }
 async function requestCapabilityGateway(host, domain, pathAfterV1, method = "GET", body) {
   const resp = await fetchCapabilityGateway(host, domain, pathAfterV1, method, body);
-  return unwrapCapabilityEnvelope(parseCapabilityResponse(await resp.text()));
+  return unwrapCapabilityEnvelope(
+    parseCapabilityResponse(await resp.text()),
+    isCommunityGatewayRequest(domain, pathAfterV1)
+  );
 }
 async function requestCapabilityGatewayWithEnvelope(host, domain, pathAfterV1, method = "GET", body) {
   const resp = await fetchCapabilityGateway(host, domain, pathAfterV1, method, body);
-  return parseCapabilityEnvelope(parseCapabilityResponse(await resp.text()));
+  return parseCapabilityEnvelope(
+    parseCapabilityResponse(await resp.text()),
+    isCommunityGatewayRequest(domain, pathAfterV1)
+  );
 }
 async function listCapabilitiesWithEnvelope(host, domain, projectId) {
   return callGatewayWithEnvelope(host, domain, "capabilities", "GET", void 0, { project_id: projectId });
@@ -552,7 +587,10 @@ async function uploadInputFileBytes(host, domain, projectId, purpose, bytes, fil
   if (!resp.ok) {
     await throwCapabilityHttpError(resp);
   }
-  return unwrapCapabilityEnvelope(parseCapabilityResponse(await resp.text()));
+  return unwrapCapabilityEnvelope(
+    parseCapabilityResponse(await resp.text()),
+    isCommunityGatewayRequest(domain, "input-files")
+  );
 }
 async function callCapabilityApi(host, domain, action, method = "POST", params = {}, options = {}) {
   const isGet = method === "GET";

package/dist/{chunk-JJJIP2XQ.js → chunk-VDICGXCY.js}

@@ -10,10 +10,10 @@ import {
   postToMainApp,
   putToMainApp,
   uploadToMainApp
-} from "./chunk-2UWS5CUP.js";
+} from "./chunk-JSBLCLFE.js";
 import {
   clearCliTokenCache
-} from "./chunk-P7KL7IOH.js";
+} from "./chunk-SOSFRU3O.js";
 
 // src/core/resource-package-client.ts
 function checkPath(path) {

package/dist/chunk-WMDO53YK.js

@@ -0,0 +1,222 @@
+import { createRequire as __createRequire } from 'node:module'; const require = __createRequire(import.meta.url);
+import {
+  getPendingHostCompatNotice,
+  getPendingUpdateNotice
+} from "./chunk-GBSACKFB.js";
+import {
+  logger,
+  redactExternalCliToken
+} from "./chunk-Z3Q2AEIN.js";
+
+// src/framework/output.ts
+import Table from "cli-table3";
+import { JqError, json as jqJson } from "jq-wasm";
+var KNOWN_ARRAY_FIELDS = [
+  "items",
+  "events",
+  "reports",
+  "dashboards",
+  "tags",
+  "clusters",
+  "flows",
+  "tasks",
+  "channels",
+  "nodes",
+  "members",
+  "records",
+  "entities",
+  "metrics",
+  "tables",
+  "columns",
+  "properties"
+];
+var OUTPUT_METADATA = /* @__PURE__ */ Symbol("ae-cli-output-metadata");
+function withOutputMetadata(data, meta) {
+  if (!meta || Object.keys(meta).length === 0) return data;
+  if (isOutputWithMetadata(data)) {
+    return {
+      [OUTPUT_METADATA]: true,
+      data: data.data,
+      meta: { ...data.meta, ...meta }
+    };
+  }
+  return {
+    [OUTPUT_METADATA]: true,
+    data,
+    meta
+  };
+}
+function isOutputWithMetadata(value) {
+  return Boolean(value?.[OUTPUT_METADATA]);
+}
+function unwrapOutputData(value) {
+  return isOutputWithMetadata(value) ? value.data : value;
+}
+function readOutputMetadata(value) {
+  return isOutputWithMetadata(value) ? value.meta : void 0;
+}
+function findArrayField(data) {
+  if (Array.isArray(data)) return { rows: data };
+  if (typeof data !== "object" || data === null) return null;
+  for (const key of KNOWN_ARRAY_FIELDS) {
+    if (Array.isArray(data[key])) return { key, rows: data[key] };
+  }
+  for (const key of Object.keys(data)) {
+    if (Array.isArray(data[key])) return { key, rows: data[key] };
+  }
+  return null;
+}
+function formatTable(data) {
+  if (Array.isArray(data?.title) && data.title.length > 0 && Array.isArray(data?.rows)) {
+    const headers = data.title.map((value) => String(value));
+    const table2 = new Table({ head: headers, wordWrap: true });
+    for (const row of data.rows) {
+      const values = Array.isArray(row) ? row : [row];
+      table2.push(headers.map((_header, index) => {
+        const value = values[index];
+        if (value === void 0 || value === null) return "";
+        if (typeof value === "object") return JSON.stringify(value);
+        return String(value);
+      }));
+    }
+    return table2.toString();
+  }
+  const arrayField = findArrayField(data);
+  if (!arrayField || arrayField.rows.length === 0) {
+    return JSON.stringify(data, null, 2);
+  }
+  const rows = arrayField.rows;
+  const allKeys = /* @__PURE__ */ new Set();
+  for (const row of rows) {
+    if (typeof row === "object" && row !== null) {
+      Object.keys(row).forEach((k) => allKeys.add(k));
+    }
+  }
+  const keys = Array.from(allKeys);
+  if (keys.length === 0) return JSON.stringify(rows, null, 2);
+  const table = new Table({ head: keys, wordWrap: true });
+  for (const row of rows) {
+    table.push(keys.map((k) => {
+      const v = row?.[k];
+      if (v === void 0 || v === null) return "";
+      if (typeof v === "object") return JSON.stringify(v);
+      return String(v);
+    }));
+  }
+  const sections = [];
+  if (arrayField.key && typeof data === "object" && data !== null) {
+    const summaryEntries = Object.entries(data).filter(([key]) => key !== arrayField.key);
+    if (summaryEntries.length > 0) {
+      const summary = new Table({ head: ["field", "value"], wordWrap: true });
+      for (const [key, value] of summaryEntries) {
+        summary.push([key, typeof value === "object" && value !== null ? JSON.stringify(value) : String(value ?? "")]);
+      }
+      sections.push(summary.toString());
+    }
+  }
+  sections.push(table.toString());
+  return sections.join("\n\n");
+}
+async function applyJq(data, expr) {
+  const trimmed = expr.trim();
+  if (!trimmed) return data;
+  let results;
+  try {
+    results = await jqJson(data ?? null, trimmed);
+  } catch (err) {
+    const message = err instanceof JqError ? err.message : err?.message || String(err);
+    const error = new Error(`Invalid --jq expression: ${message}`);
+    error.type = "validation";
+    error.code = "OUTPUT_PROJECTION_FAILED";
+    error.hint = "The command completed. Original data and metadata are preserved in stdout; fix the jq expression locally without executing the command again. --jq applies to the command data before envelope wrapping.";
+    throw error;
+  }
+  if (results.length === 0) return null;
+  if (results.length === 1) return results[0];
+  return results;
+}
+async function formatOutput(data, format, jqExpr) {
+  const outputData = isOutputWithMetadata(data) ? data.data : data;
+  const meta = isOutputWithMetadata(data) ? data.meta : void 0;
+  let processed = outputData;
+  if (jqExpr) {
+    processed = await applyJq(outputData, jqExpr);
+  }
+  if (format === "table") {
+    return redactExternalCliToken(formatTable(processed));
+  }
+  const hostCompat = getPendingHostCompatNotice();
+  const updateNotice = getPendingUpdateNotice();
+  const notices = {
+    ...updateNotice ? {} : hostCompat ? { host_compat: hostCompat } : {},
+    ...updateNotice ? { update: updateNotice } : {}
+  };
+  const envelope = {
+    ok: true,
+    data: processed,
+    ...meta ? { meta } : {},
+    // Soft tip lives only under _notice (not mirrored into meta) to avoid duplicate fields.
+    ...Object.keys(notices).length > 0 ? { _notice: notices } : {}
+  };
+  return redactExternalCliToken(JSON.stringify(envelope, null, 2));
+}
+function formatError(type, message, hint, code, meta, details) {
+  const envelope = {
+    ok: false,
+    error: { type, message, hint, code, ...details === void 0 ? {} : { details } },
+    ...meta && Object.keys(meta).length > 0 ? { meta } : {}
+  };
+  return redactExternalCliToken(JSON.stringify(envelope, null, 2));
+}
+function printError(type, message, hint, code, meta, options = {}) {
+  const formatted = formatError(type, message, hint, code, meta, options.details);
+  process.stderr.write(formatted + "\n");
+  if (options.log !== false) {
+    logger.error(`[${type}] ${message}${hint ? " | " + hint : ""}`);
+  }
+}
+function sensitiveRecoveryData(data) {
+  const safe = {};
+  const item = {};
+  if (typeof data?.item?.id === "string") item.id = data.item.id;
+  if (Number.isSafeInteger(data?.item?.contentRevision)) item.contentRevision = data.item.contentRevision;
+  if (Object.keys(item).length > 0) safe.item = item;
+  if (["markdown", "text"].includes(data?.contentFormat)) safe.contentFormat = data.contentFormat;
+  if (typeof data?.out === "string") safe.out = data.out;
+  return safe;
+}
+async function printOutput(data, format, jqExpr, options = {}) {
+  try {
+    process.stdout.write(await formatOutput(data, format, jqExpr) + "\n");
+  } catch (error) {
+    if (error?.code === "OUTPUT_PROJECTION_FAILED") {
+      if (options.redactErrors) {
+        error.message = "Invalid --jq expression: output projection failed; source content is omitted from diagnostics.";
+        error.hint = "The read completed. Fix --jq and explicitly run read-text again without --out, or inspect the file at data.out if present. This error result excludes source content.";
+      }
+      const recovery = JSON.parse(formatError(
+        "validation",
+        error.message,
+        error.hint,
+        error.code,
+        options.redactErrors ? void 0 : readOutputMetadata(data)
+      ));
+      const recoveryData = options.redactErrors ? sensitiveRecoveryData(unwrapOutputData(data)) : unwrapOutputData(data);
+      await new Promise((resolve, reject) => {
+        process.stdout.write(
+          redactExternalCliToken(JSON.stringify({ ...recovery, data: recoveryData }, null, 2)) + "\n",
+          (error2) => error2 ? reject(error2) : resolve()
+        );
+      });
+    }
+    throw error;
+  }
+}
+
+export {
+  withOutputMetadata,
+  unwrapOutputData,
+  readOutputMetadata,
+  printError,
+  printOutput
+};

package/dist/{chunk-X7DRLE62.js → chunk-YVG6QD3V.js}

@@ -2,7 +2,7 @@ import { createRequire as __createRequire } from 'node:module'; const require =
 import {
   CliValidationError,
   logger
-} from "./chunk-ZW4VMY5H.js";
+} from "./chunk-Z3Q2AEIN.js";
 
 // src/core/eval-endpoint.ts
 function resolveEvaluationHost(host) {