@thinkingai/ae-cli 6.0.57 → 6.0.58

package/dist/{auth-YEIJLBFY.js → auth-A5OO4VS4.js}

@@ -2,7 +2,7 @@ import { createRequire as __createRequire } from 'node:module'; const require =
 import {
   invalidateBusinessSkillSynchronization,
   refreshEnvironmentAfterLogin
-} from "./chunk-ZGIYG473.js";
+} from "./chunk-K2Z7QHDR.js";
 import {
   MultiselectCancelled,
   promptSingleSelect
@@ -13,15 +13,15 @@ import {
 } from "./chunk-6ZIQV5GW.js";
 import {
   resolveHost
-} from "./chunk-IN7KKL6K.js";
+} from "./chunk-2F64AZYH.js";
 import {
   printError,
   printOutput
-} from "./chunk-752BSLZC.js";
+} from "./chunk-WMDO53YK.js";
 import {
   getLocalCliPackageInfo,
   runHostCompatCheck
-} from "./chunk-TULINOLS.js";
+} from "./chunk-GBSACKFB.js";
 import {
   CliTokenValidationUnavailableError,
   CredentialStoreUnreadableError,
@@ -37,12 +37,12 @@ import {
   saveCredential,
   updateCredentialMetadata,
   validateCliTokenOnServer
-} from "./chunk-H3K5UGYC.js";
+} from "./chunk-SOSFRU3O.js";
 import {
   getFallbackCliToken,
   loadConfig,
   saveConfig
-} from "./chunk-JNVVJ273.js";
+} from "./chunk-4PSTYEG5.js";
 import {
   ExternalCliTokenError,
   PermissionError,

package/dist/{automation-NAR5DDGL.js → automation-FD2QZUP6.js}

@@ -1,21 +1,21 @@
 import { createRequire as __createRequire } from 'node:module'; const require = __createRequire(import.meta.url);
 import {
   resolveWorkspaceTarget
-} from "./chunk-7JAVT5TK.js";
+} from "./chunk-E25OSZLJ.js";
 import {
   currentAgentSpaceId
 } from "./chunk-RK6GLDGI.js";
-import "./chunk-N6XBLRB7.js";
+import "./chunk-VDICGXCY.js";
 import {
   TeAgentApiError,
   deleteFromMainApp,
   getFromMainApp,
   patchToMainApp,
   postToMainApp
-} from "./chunk-RJHGDWSC.js";
+} from "./chunk-JSBLCLFE.js";
 import "./chunk-Y74WTIKJ.js";
-import "./chunk-H3K5UGYC.js";
-import "./chunk-JNVVJ273.js";
+import "./chunk-SOSFRU3O.js";
+import "./chunk-4PSTYEG5.js";
 import "./chunk-Z3Q2AEIN.js";
 
 // src/commands/automation/index.ts

package/dist/{capability-P7DD4Q73.js → capability-SKI4GHF4.js}

@@ -17,29 +17,29 @@ import {
   inspectCapabilityWithEnvelope,
   listCapabilitiesWithEnvelope,
   validateCapabilityWithEnvelope
-} from "./chunk-JCWM2TYP.js";
+} from "./chunk-UYJMEHAF.js";
 import {
   resolveHost
-} from "./chunk-IN7KKL6K.js";
+} from "./chunk-2F64AZYH.js";
 import {
   printError,
   printOutput,
   withOutputMetadata
-} from "./chunk-752BSLZC.js";
+} from "./chunk-WMDO53YK.js";
 import "./chunk-Y74WTIKJ.js";
 import {
   assertBusinessEnabled,
   businessForCapability,
   readBusinessConfigForExecution,
   readCurrentBusinessConfig
-} from "./chunk-TULINOLS.js";
+} from "./chunk-GBSACKFB.js";
 import {
   CredentialStoreUnreadableError,
   SecureStoreAuthError
-} from "./chunk-H3K5UGYC.js";
+} from "./chunk-SOSFRU3O.js";
 import {
   parseJsonRequest
-} from "./chunk-JNVVJ273.js";
+} from "./chunk-4PSTYEG5.js";
 import {
   CliValidationError,
   ExternalCliTokenError,

package/dist/{chunk-IN7KKL6K.js → chunk-2F64AZYH.js}

@@ -1,7 +1,7 @@
 import { createRequire as __createRequire } from 'node:module'; const require = __createRequire(import.meta.url);
 import {
   getActiveHost
-} from "./chunk-JNVVJ273.js";
+} from "./chunk-4PSTYEG5.js";
 import {
   normalizeUrl
 } from "./chunk-Z3Q2AEIN.js";

package/dist/{chunk-JNVVJ273.js → chunk-4PSTYEG5.js}

@@ -53,28 +53,23 @@ var require2 = createRequire(import.meta.url);
 var JSONbig = require2("json-bigint");
 var jsonParser = JSONbig({ storeAsString: true });
 var requestJsonStringifier = JSONbig({ useNativeBigInt: true });
-var requestJsonParser = JSONbig({
-  useNativeBigInt: true,
-  protoAction: "error",
-  constructorAction: "error"
-});
 var INTEGER_TOKEN = /^-?(?:0|[1-9]\d*)$/;
-function normalizeParsedNumbers(lossless, native) {
+function normalizeParsedNumbers(lossless, native, useBigInt = false) {
   if (typeof lossless === "string" && typeof native === "number") {
     if (INTEGER_TOKEN.test(lossless) && !Number.isSafeInteger(native)) {
-      return lossless;
+      return useBigInt ? BigInt(lossless) : lossless;
     }
     return native;
   }
   if (Array.isArray(lossless) && Array.isArray(native)) {
     for (let index = 0; index < lossless.length; index++) {
-      lossless[index] = normalizeParsedNumbers(lossless[index], native[index]);
+      lossless[index] = normalizeParsedNumbers(lossless[index], native[index], useBigInt);
     }
     return lossless;
   }
   if (lossless !== null && native !== null && typeof lossless === "object" && typeof native === "object") {
     for (const key of Object.keys(lossless)) {
-      lossless[key] = normalizeParsedNumbers(lossless[key], native[key]);
+      lossless[key] = normalizeParsedNumbers(lossless[key], native[key], useBigInt);
     }
   }
   return lossless;
@@ -91,7 +86,7 @@ function stringifyJsonRequest(obj) {
   return requestJsonStringifier.stringify(obj);
 }
 function parseJsonRequest(text) {
-  return requestJsonParser.parse(text);
+  return normalizeParsedNumbers(jsonParser.parse(text), JSON.parse(text), true);
 }
 
 // src/core/config.ts

package/dist/{chunk-QZUVLFNR.js → chunk-AWVZTN2B.js}

@@ -3,7 +3,7 @@ import {
   getAgentApi,
   patchAgentApi,
   postAgentApi
-} from "./chunk-N6XBLRB7.js";
+} from "./chunk-VDICGXCY.js";
 
 // src/commands/memory/cli-client.ts
 var DEFAULT_TE_CLAUDE_BASE_PATH = "/agent";

package/dist/{chunk-7JAVT5TK.js → chunk-E25OSZLJ.js}

@@ -9,11 +9,11 @@ import {
   postAgentApi,
   putAgentApi,
   uploadAgentApi
-} from "./chunk-N6XBLRB7.js";
+} from "./chunk-VDICGXCY.js";
 import {
   TeAgentApiError,
   createTeAgentApiError
-} from "./chunk-RJHGDWSC.js";
+} from "./chunk-JSBLCLFE.js";
 import {
   CliValidationError,
   isApiErrorType

package/dist/{chunk-7ABK2PEJ.js → chunk-EEARZNHE.js}

@@ -6,12 +6,12 @@ import {
   CapabilityGatewayError,
   fetchCapabilityGateway,
   requestCapabilityGateway
-} from "./chunk-JCWM2TYP.js";
+} from "./chunk-UYJMEHAF.js";
 import {
   readOutputMetadata,
   unwrapOutputData,
   withOutputMetadata
-} from "./chunk-752BSLZC.js";
+} from "./chunk-WMDO53YK.js";
 import {
   PermissionError
 } from "./chunk-Z3Q2AEIN.js";

package/dist/{chunk-TULINOLS.js → chunk-GBSACKFB.js}

@@ -1,13 +1,13 @@
 import { createRequire as __createRequire } from 'node:module'; const require = __createRequire(import.meta.url);
 import {
   peekCliToken
-} from "./chunk-H3K5UGYC.js";
+} from "./chunk-SOSFRU3O.js";
 import {
   getActiveHost,
   getConfigDir,
   isAeSandboxRuntime,
   readSandboxCliTokenEntry
-} from "./chunk-JNVVJ273.js";
+} from "./chunk-4PSTYEG5.js";
 import {
   PermissionError,
   externalCliTokenRequestOptions,
@@ -675,7 +675,7 @@ async function readBusinessConfigForExecution(hostOverride) {
     const token = peekCliToken(host);
     if (!token) return {};
     return await resolveBusinessConfig(host, token, async () => {
-      const { fetchCliConfig: fetchCliConfig2 } = await import("./compat-check-PMEGUPZU.js");
+      const { fetchCliConfig: fetchCliConfig2 } = await import("./compat-check-WFEKVLTH.js");
       return fetchCliConfig2(host, token);
     });
   } catch {

package/dist/{chunk-TKVVACEJ.js → chunk-HQCY3QCA.js}

@@ -6,10 +6,10 @@ import {
   dryRunCapability,
   executeCapabilityWithEnvelope,
   validateCapability
-} from "./chunk-JCWM2TYP.js";
+} from "./chunk-UYJMEHAF.js";
 import {
   withOutputMetadata
-} from "./chunk-752BSLZC.js";
+} from "./chunk-WMDO53YK.js";
 import {
   CliValidationError
 } from "./chunk-Z3Q2AEIN.js";

package/dist/{chunk-RJHGDWSC.js → chunk-JSBLCLFE.js}

@@ -4,11 +4,11 @@ import {
 } from "./chunk-Y74WTIKJ.js";
 import {
   getCliToken
-} from "./chunk-H3K5UGYC.js";
+} from "./chunk-SOSFRU3O.js";
 import {
   getActiveHost,
   getSandboxRuntimeRoot
-} from "./chunk-JNVVJ273.js";
+} from "./chunk-4PSTYEG5.js";
 import {
   PermissionError,
   externalCliTokenRequestOptions,

package/dist/{chunk-ZGIYG473.js → chunk-K2Z7QHDR.js}

@@ -7,14 +7,14 @@ import {
   rememberBusinessConfig,
   reserveBusinessSkillContext,
   syncBusinessSkills
-} from "./chunk-TULINOLS.js";
+} from "./chunk-GBSACKFB.js";
 import {
   peekCliToken
-} from "./chunk-H3K5UGYC.js";
+} from "./chunk-SOSFRU3O.js";
 import {
   getActiveHost,
   getConfigDir
-} from "./chunk-JNVVJ273.js";
+} from "./chunk-4PSTYEG5.js";
 import {
   normalizeUrl
 } from "./chunk-Z3Q2AEIN.js";

package/dist/{chunk-QEMQKVHW.js → chunk-QWSA3EOD.js}

@@ -1,14 +1,14 @@
 import { createRequire as __createRequire } from 'node:module'; const require = __createRequire(import.meta.url);
 import {
   CapabilityGatewayError
-} from "./chunk-JCWM2TYP.js";
+} from "./chunk-UYJMEHAF.js";
 import {
   SecureStoreAuthError,
   getCliToken
-} from "./chunk-H3K5UGYC.js";
+} from "./chunk-SOSFRU3O.js";
 import {
   safeJsonParse
-} from "./chunk-JNVVJ273.js";
+} from "./chunk-4PSTYEG5.js";
 import {
   PermissionError,
   externalCliTokenRequestOptions,

package/dist/{chunk-H3K5UGYC.js → chunk-SOSFRU3O.js}

@@ -6,7 +6,7 @@ import {
   readSandboxCliTokenEntry,
   safeJsonParse,
   safeReadJsonFile
-} from "./chunk-JNVVJ273.js";
+} from "./chunk-4PSTYEG5.js";
 import {
   PermissionError,
   externalCliTokenRequestOptions,

package/dist/{chunk-JCWM2TYP.js → chunk-UYJMEHAF.js}

@@ -6,11 +6,11 @@ import {
   SecureStoreAuthError,
   clearCliTokenCache,
   getCliToken
-} from "./chunk-H3K5UGYC.js";
+} from "./chunk-SOSFRU3O.js";
 import {
   safeJsonParse,
   stringifyJsonRequest
-} from "./chunk-JNVVJ273.js";
+} from "./chunk-4PSTYEG5.js";
 import {
   PermissionError,
   externalCliTokenRequestOptions

package/dist/{chunk-N6XBLRB7.js → chunk-VDICGXCY.js}

@@ -10,10 +10,10 @@ import {
   postToMainApp,
   putToMainApp,
   uploadToMainApp
-} from "./chunk-RJHGDWSC.js";
+} from "./chunk-JSBLCLFE.js";
 import {
   clearCliTokenCache
-} from "./chunk-H3K5UGYC.js";
+} from "./chunk-SOSFRU3O.js";
 
 // src/core/resource-package-client.ts
 function checkPath(path) {

package/dist/{chunk-752BSLZC.js → chunk-WMDO53YK.js}

@@ -2,7 +2,7 @@ import { createRequire as __createRequire } from 'node:module'; const require =
 import {
   getPendingHostCompatNotice,
   getPendingUpdateNotice
-} from "./chunk-TULINOLS.js";
+} from "./chunk-GBSACKFB.js";
 import {
   logger,
   redactExternalCliToken

package/dist/{compat-check-PMEGUPZU.js → compat-check-WFEKVLTH.js}

@@ -12,9 +12,9 @@ import {
   shouldNotifyCompat,
   shouldSkipAutoSync,
   shouldSkipCompatCheck
-} from "./chunk-TULINOLS.js";
-import "./chunk-H3K5UGYC.js";
-import "./chunk-JNVVJ273.js";
+} from "./chunk-GBSACKFB.js";
+import "./chunk-SOSFRU3O.js";
+import "./chunk-4PSTYEG5.js";
 import "./chunk-Z3Q2AEIN.js";
 export {
   fetchCliConfig,

package/dist/{config-VWVPR4WW.js → config-U4I7X25P.js}

@@ -3,7 +3,7 @@ import {
   invalidateBusinessSkillSynchronization,
   refreshEnvironmentAfterLogin,
   refreshEnvironmentConfig
-} from "./chunk-ZGIYG473.js";
+} from "./chunk-K2Z7QHDR.js";
 import {
   MultiselectCancelled,
   promptSingleSelect
@@ -15,15 +15,15 @@ import {
 import {
   printError,
   printOutput
-} from "./chunk-752BSLZC.js";
+} from "./chunk-WMDO53YK.js";
 import {
   fetchCliConfig,
   readCurrentBusinessConfig,
   resolveKbAutoDiscoveryFeature
-} from "./chunk-TULINOLS.js";
+} from "./chunk-GBSACKFB.js";
 import {
   peekCliToken
-} from "./chunk-H3K5UGYC.js";
+} from "./chunk-SOSFRU3O.js";
 import {
   addHost,
   getActiveHost,
@@ -33,7 +33,7 @@ import {
   resolveHostSelector,
   setActiveHost,
   updateHostLabel
-} from "./chunk-JNVVJ273.js";
+} from "./chunk-4PSTYEG5.js";
 import {
   normalizeUrl
 } from "./chunk-Z3Q2AEIN.js";

package/dist/{context-F6FCGTF3.js → context-CDB5H5PD.js}

@@ -2,12 +2,12 @@ import { createRequire as __createRequire } from 'node:module'; const require =
 import {
   TeAgentApiError,
   getFromMainApp
-} from "./chunk-RJHGDWSC.js";
+} from "./chunk-JSBLCLFE.js";
 import "./chunk-Y74WTIKJ.js";
-import "./chunk-H3K5UGYC.js";
+import "./chunk-SOSFRU3O.js";
 import {
   safeJsonParse
-} from "./chunk-JNVVJ273.js";
+} from "./chunk-4PSTYEG5.js";
 import {
   CliValidationError
 } from "./chunk-Z3Q2AEIN.js";

package/dist/{data-integration-6UAZO4GG.js → data-integration-QE37EQ3A.js}

@@ -16,7 +16,7 @@ import {
 import "./chunk-JEUXDY3B.js";
 import {
   getConfigDir
-} from "./chunk-JNVVJ273.js";
+} from "./chunk-4PSTYEG5.js";
 import {
   CliValidationError,
   LocalDataUploadError,

package/dist/{evaluation-4LO2O4AF.js → evaluation-LR4YDYWL.js}

@@ -7,10 +7,10 @@ import {
 } from "./chunk-YVG6QD3V.js";
 import {
   getCliToken
-} from "./chunk-H3K5UGYC.js";
+} from "./chunk-SOSFRU3O.js";
 import {
   isAeSandboxRuntime
-} from "./chunk-JNVVJ273.js";
+} from "./chunk-4PSTYEG5.js";
 import {
   CliValidationError,
   externalCliTokenRequestOptions

package/dist/index.js

@@ -27,19 +27,19 @@ import "./chunk-JEUXDY3B.js";
 import {
   TeAgentApiError,
   TeAgentCredentialsError
-} from "./chunk-RJHGDWSC.js";
+} from "./chunk-JSBLCLFE.js";
 import {
   CapabilityGatewayError,
   executeCapability,
   uploadInputFileBytes
-} from "./chunk-JCWM2TYP.js";
+} from "./chunk-UYJMEHAF.js";
 import {
   resolveHost
-} from "./chunk-IN7KKL6K.js";
+} from "./chunk-2F64AZYH.js";
 import {
   printError,
   printOutput
-} from "./chunk-752BSLZC.js";
+} from "./chunk-WMDO53YK.js";
 import "./chunk-Y74WTIKJ.js";
 import {
   BusinessDisabledError,
@@ -55,18 +55,18 @@ import {
   resolveKbAutoDiscoveryFeature,
   runHostCompatCheck,
   shouldSkipAutoSync
-} from "./chunk-TULINOLS.js";
+} from "./chunk-GBSACKFB.js";
 import {
   CredentialStoreUnreadableError,
   SecureStoreAuthError,
   getCliToken,
   peekCliToken
-} from "./chunk-H3K5UGYC.js";
+} from "./chunk-SOSFRU3O.js";
 import {
   getActiveHost,
   getConfigDir,
   safeJsonParse
-} from "./chunk-JNVVJ273.js";
+} from "./chunk-4PSTYEG5.js";
 import {
   CliApiError,
   CliValidationError,
@@ -2640,105 +2640,105 @@ function warnLoadFailure(label, err) {
 async function loadCommands() {
   const commands = [];
   try {
-    const teAnalysis = await import("./te-analysis-ADX7RKO4.js");
+    const teAnalysis = await import("./te-analysis-WQ6D6YG4.js");
     commands.push(...teAnalysis.default);
   } catch (err) {
     warnLoadFailure("domain te-analysis", err);
   }
   try {
-    const engage = await import("./te-engage-VE2NUH5V.js");
+    const engage = await import("./te-engage-V2QW7TIC.js");
     commands.push(...engage.default);
   } catch (err) {
     warnLoadFailure("domain te-engage", err);
   }
   try {
-    const community = await import("./te-community-PREDRXG3.js");
+    const community = await import("./te-community-VRWMFGI6.js");
     commands.push(...community.default);
   } catch (err) {
     warnLoadFailure("domain te-community", err);
   }
   try {
-    const dataops = await import("./te-dataops-ITWJHO2U.js");
+    const dataops = await import("./te-dataops-YTLFTTW7.js");
     commands.push(...dataops.default);
   } catch (err) {
     warnLoadFailure("domain te-dataops", err);
   }
   try {
-    const teKb = await import("./te-kb-WSMOW7WS.js");
+    const teKb = await import("./te-kb-4AQLISDR.js");
     commands.push(...teKb.default);
   } catch (err) {
     warnLoadFailure("domain te-kb", err);
   }
   try {
-    const teTeam = await import("./te-team-T2WRLOOD.js");
+    const teTeam = await import("./te-team-6ELNGBWT.js");
     commands.push(...teTeam.default);
   } catch (err) {
     warnLoadFailure("domain te-team", err);
   }
   try {
-    const teAgent = await import("./te-agent-WBKIFEQD.js");
+    const teAgent = await import("./te-agent-BJ36B4QI.js");
     commands.push(...teAgent.default);
   } catch (err) {
     warnLoadFailure("domain te-agent", err);
   }
   try {
-    const memory = await import("./memory-HHPX3NF2.js");
+    const memory = await import("./memory-SNFR5M23.js");
     commands.push(...memory.default);
   } catch (err) {
     warnLoadFailure("domain memory", err);
   }
-  const automation = await import("./automation-NAR5DDGL.js");
+  const automation = await import("./automation-FD2QZUP6.js");
   commands.push(...automation.default);
   try {
-    const things = await import("./things-6QOMFXOG.js");
+    const things = await import("./things-HFWLGCUH.js");
     commands.push(...things.default);
   } catch (err) {
     warnLoadFailure("domain things", err);
   }
   try {
-    const workspace = await import("./workspace-LYDAP647.js");
+    const workspace = await import("./workspace-2CKQX2XL.js");
     commands.push(...workspace.default);
   } catch (err) {
     warnLoadFailure("domain workspace", err);
   }
   try {
-    const teSystem = await import("./te-system-YM657FKO.js");
+    const teSystem = await import("./te-system-CYWSK3UN.js");
     commands.push(...teSystem.default);
   } catch (err) {
     warnLoadFailure("domain te-system", err);
   }
   try {
-    const metadata = await import("./metadata-HEQQEEG3.js");
+    const metadata = await import("./metadata-6QM6EED5.js");
     commands.push(...metadata.default);
   } catch (err) {
     warnLoadFailure("domain metadata", err);
   }
   try {
-    const personalSemanticPreference = await import("./personal-semantic-preference-V4L6ZWR2.js");
+    const personalSemanticPreference = await import("./personal-semantic-preference-7VXQPP2N.js");
     commands.push(...personalSemanticPreference.default);
   } catch (err) {
     warnLoadFailure("domain personal-semantic-preference", err);
   }
   try {
-    const projectSemantic = await import("./project-semantic-NKHKJX6M.js");
+    const projectSemantic = await import("./project-semantic-PSEPYH2L.js");
     commands.push(...projectSemantic.default);
   } catch (err) {
     warnLoadFailure("domain project-semantic", err);
   }
   try {
-    const dataIntegration = await import("./data-integration-6UAZO4GG.js");
+    const dataIntegration = await import("./data-integration-QE37EQ3A.js");
     commands.push(...dataIntegration.default);
   } catch (err) {
     warnLoadFailure("domain data-integration", err);
   }
   try {
-    const context = await import("./context-F6FCGTF3.js");
+    const context = await import("./context-CDB5H5PD.js");
     commands.push(...context.default);
   } catch (err) {
     warnLoadFailure("domain context", err);
   }
   try {
-    const evaluation = await import("./evaluation-4LO2O4AF.js");
+    const evaluation = await import("./evaluation-LR4YDYWL.js");
     commands.push(...evaluation.default);
   } catch (err) {
     warnLoadFailure("domain evaluation", err);
@@ -2747,7 +2747,7 @@ async function loadCommands() {
 }
 async function registerAuthCommands() {
   try {
-    const { registerAuth } = await import("./auth-YEIJLBFY.js");
+    const { registerAuth } = await import("./auth-A5OO4VS4.js");
     registerAuth(program);
   } catch (err) {
     warnLoadFailure("auth commands", err);
@@ -2755,7 +2755,7 @@ async function registerAuthCommands() {
 }
 async function registerConfigCommands() {
   try {
-    const { registerConfig } = await import("./config-VWVPR4WW.js");
+    const { registerConfig } = await import("./config-U4I7X25P.js");
     registerConfig(program);
   } catch (err) {
     warnLoadFailure("config commands", err);
@@ -2763,7 +2763,7 @@ async function registerConfigCommands() {
 }
 async function registerCapabilityCommands() {
   try {
-    const { registerCapability } = await import("./capability-P7DD4Q73.js");
+    const { registerCapability } = await import("./capability-SKI4GHF4.js");
     registerCapability(program);
   } catch (err) {
     warnLoadFailure("capability commands", err);
@@ -2771,7 +2771,7 @@ async function registerCapabilityCommands() {
 }
 async function registerSyncCommand() {
   try {
-    const { registerSync } = await import("./sync-ZJMXCRIN.js");
+    const { registerSync } = await import("./sync-22ACDK5Z.js");
     registerSync(program);
   } catch (err) {
     warnLoadFailure("sync commands", err);
@@ -2779,7 +2779,7 @@ async function registerSyncCommand() {
 }
 async function registerModelCommand() {
   try {
-    const { registerModel } = await import("./model-7UHGWYVR.js");
+    const { registerModel } = await import("./model-KEVCEXWD.js");
     registerModel(program);
   } catch (err) {
     warnLoadFailure("model commands", err);
@@ -2787,7 +2787,7 @@ async function registerModelCommand() {
 }
 async function registerUpdateCommand() {
   try {
-    const { registerUpdate } = await import("./update-I4MOUYOX.js");
+    const { registerUpdate } = await import("./update-3CRVVHV5.js");
     registerUpdate(program);
   } catch (err) {
     warnLoadFailure("update commands", err);

package/dist/{memory-HHPX3NF2.js → memory-SNFR5M23.js}

@@ -4,15 +4,15 @@ import {
   getMemoryCli,
   patchMemoryCli,
   postMemoryCli
-} from "./chunk-QZUVLFNR.js";
+} from "./chunk-AWVZTN2B.js";
 import {
   currentAgentSpaceId
 } from "./chunk-RK6GLDGI.js";
-import "./chunk-N6XBLRB7.js";
-import "./chunk-RJHGDWSC.js";
+import "./chunk-VDICGXCY.js";
+import "./chunk-JSBLCLFE.js";
 import "./chunk-Y74WTIKJ.js";
-import "./chunk-H3K5UGYC.js";
-import "./chunk-JNVVJ273.js";
+import "./chunk-SOSFRU3O.js";
+import "./chunk-4PSTYEG5.js";
 import {
   CliValidationError
 } from "./chunk-Z3Q2AEIN.js";

package/dist/{metadata-HEQQEEG3.js → metadata-6QM6EED5.js}

@@ -1,19 +1,19 @@
 import { createRequire as __createRequire } from 'node:module'; const require = __createRequire(import.meta.url);
 import {
   withAsyncArtifactLifecycle
-} from "./chunk-7ABK2PEJ.js";
+} from "./chunk-EEARZNHE.js";
 import {
   createCapabilityCommand
-} from "./chunk-TKVVACEJ.js";
+} from "./chunk-HQCY3QCA.js";
 import {
   registerCapabilityGatewayRoute
 } from "./chunk-KPQY44JQ.js";
-import "./chunk-JCWM2TYP.js";
-import "./chunk-752BSLZC.js";
+import "./chunk-UYJMEHAF.js";
+import "./chunk-WMDO53YK.js";
 import "./chunk-Y74WTIKJ.js";
-import "./chunk-TULINOLS.js";
-import "./chunk-H3K5UGYC.js";
-import "./chunk-JNVVJ273.js";
+import "./chunk-GBSACKFB.js";
+import "./chunk-SOSFRU3O.js";
+import "./chunk-4PSTYEG5.js";
 import "./chunk-Z3Q2AEIN.js";
 
 // src/commands/metadata/shared.ts

package/dist/{model-7UHGWYVR.js → model-KEVCEXWD.js}

@@ -15,10 +15,10 @@ import {
   getClaudeConfigDir,
   getSandboxModels,
   postSandboxModelSelection
-} from "./chunk-RJHGDWSC.js";
+} from "./chunk-JSBLCLFE.js";
 import "./chunk-Y74WTIKJ.js";
-import "./chunk-H3K5UGYC.js";
-import "./chunk-JNVVJ273.js";
+import "./chunk-SOSFRU3O.js";
+import "./chunk-4PSTYEG5.js";
 import "./chunk-Z3Q2AEIN.js";
 
 // src/commands/model/index.ts

package/dist/{personal-semantic-preference-V4L6ZWR2.js → personal-semantic-preference-7VXQPP2N.js}

@@ -1,16 +1,16 @@
 import { createRequire as __createRequire } from 'node:module'; const require = __createRequire(import.meta.url);
 import {
   createCapabilityCommand
-} from "./chunk-TKVVACEJ.js";
+} from "./chunk-HQCY3QCA.js";
 import {
   registerCapabilityGatewayRoute
 } from "./chunk-KPQY44JQ.js";
-import "./chunk-JCWM2TYP.js";
-import "./chunk-752BSLZC.js";
+import "./chunk-UYJMEHAF.js";
+import "./chunk-WMDO53YK.js";
 import "./chunk-Y74WTIKJ.js";
-import "./chunk-TULINOLS.js";
-import "./chunk-H3K5UGYC.js";
-import "./chunk-JNVVJ273.js";
+import "./chunk-GBSACKFB.js";
+import "./chunk-SOSFRU3O.js";
+import "./chunk-4PSTYEG5.js";
 import "./chunk-Z3Q2AEIN.js";
 
 // src/commands/personal-semantic-preference/shared.ts

package/dist/{project-semantic-NKHKJX6M.js → project-semantic-PSEPYH2L.js}

@@ -3,7 +3,7 @@ import {
   assertOutputPathAvailable,
   downloadAnalysisArtifact,
   withAsyncArtifactLifecycle
-} from "./chunk-7ABK2PEJ.js";
+} from "./chunk-EEARZNHE.js";
 import {
   registerCapabilityGatewayRoute,
   resolveGatewayDomain
@@ -13,12 +13,12 @@ import {
   dryRunCapability,
   executeCapabilityWithEnvelope,
   validateCapability
-} from "./chunk-JCWM2TYP.js";
-import "./chunk-752BSLZC.js";
+} from "./chunk-UYJMEHAF.js";
+import "./chunk-WMDO53YK.js";
 import "./chunk-Y74WTIKJ.js";
-import "./chunk-TULINOLS.js";
-import "./chunk-H3K5UGYC.js";
-import "./chunk-JNVVJ273.js";
+import "./chunk-GBSACKFB.js";
+import "./chunk-SOSFRU3O.js";
+import "./chunk-4PSTYEG5.js";
 import "./chunk-Z3Q2AEIN.js";
 
 // src/commands/project-semantic/asset-package/materializer.ts

package/dist/{sync-ZJMXCRIN.js → sync-22ACDK5Z.js}

@@ -33,14 +33,14 @@ import {
   postSandboxSyncPull,
   postToMainApp,
   uploadToMainApp
-} from "./chunk-RJHGDWSC.js";
+} from "./chunk-JSBLCLFE.js";
 import {
   printError
-} from "./chunk-752BSLZC.js";
+} from "./chunk-WMDO53YK.js";
 import "./chunk-Y74WTIKJ.js";
-import "./chunk-TULINOLS.js";
-import "./chunk-H3K5UGYC.js";
-import "./chunk-JNVVJ273.js";
+import "./chunk-GBSACKFB.js";
+import "./chunk-SOSFRU3O.js";
+import "./chunk-4PSTYEG5.js";
 import {
   __toESM
 } from "./chunk-Z3Q2AEIN.js";

package/dist/{te-agent-WBKIFEQD.js → te-agent-BJ36B4QI.js}

@@ -11,7 +11,7 @@ import {
   workspaceResourcePath,
   workspaceTargetFlags,
   workspaceTargetPath
-} from "./chunk-7JAVT5TK.js";
+} from "./chunk-E25OSZLJ.js";
 import {
   currentAgentSpaceId
 } from "./chunk-RK6GLDGI.js";
@@ -27,20 +27,20 @@ import {
   requestResourcePackageRaw,
   resourcePackagePreflightChange,
   uploadAgentApi
-} from "./chunk-N6XBLRB7.js";
+} from "./chunk-VDICGXCY.js";
 import {
   TeAgentApiError,
   resolveTeClaudeBaseUrl
-} from "./chunk-RJHGDWSC.js";
+} from "./chunk-JSBLCLFE.js";
 import {
   buildCapabilityGatewayUrl,
   callCapabilityApi
-} from "./chunk-JCWM2TYP.js";
+} from "./chunk-UYJMEHAF.js";
 import "./chunk-Y74WTIKJ.js";
-import "./chunk-H3K5UGYC.js";
+import "./chunk-SOSFRU3O.js";
 import {
   getConfigDir
-} from "./chunk-JNVVJ273.js";
+} from "./chunk-4PSTYEG5.js";
 import {
   CliValidationError
 } from "./chunk-Z3Q2AEIN.js";

package/dist/{te-analysis-ADX7RKO4.js → te-analysis-WQ6D6YG4.js}

@@ -7,12 +7,12 @@ import {
   waitForAnalysisRun,
   withAsyncArtifactLifecycle,
   withInterruptSignal
-} from "./chunk-7ABK2PEJ.js";
+} from "./chunk-EEARZNHE.js";
 import {
   createCapabilityCommand,
   definitionIntentSnapshotFlag,
   modelDefinitionIntentSnapshotFlag
-} from "./chunk-TKVVACEJ.js";
+} from "./chunk-HQCY3QCA.js";
 import {
   registerCapabilityGatewayRoute,
   resolveGatewayDomain
@@ -30,16 +30,16 @@ import {
   uploadInputFile,
   validateCapability,
   validateCapabilityWithEnvelope
-} from "./chunk-JCWM2TYP.js";
+} from "./chunk-UYJMEHAF.js";
 import {
   withOutputMetadata
-} from "./chunk-752BSLZC.js";
+} from "./chunk-WMDO53YK.js";
 import "./chunk-Y74WTIKJ.js";
-import "./chunk-TULINOLS.js";
+import "./chunk-GBSACKFB.js";
 import {
   getCliToken
-} from "./chunk-H3K5UGYC.js";
-import "./chunk-JNVVJ273.js";
+} from "./chunk-SOSFRU3O.js";
+import "./chunk-4PSTYEG5.js";
 import {
   CliValidationError
 } from "./chunk-Z3Q2AEIN.js";

package/dist/{te-community-PREDRXG3.js → te-community-VRWMFGI6.js}

@@ -1,7 +1,7 @@
 import { createRequire as __createRequire } from 'node:module'; const require = __createRequire(import.meta.url);
 import {
   createCapabilityCommand
-} from "./chunk-TKVVACEJ.js";
+} from "./chunk-HQCY3QCA.js";
 import {
   registerCapabilityGatewayRoute,
   resolveGatewayDomain
@@ -10,25 +10,25 @@ import {
   CapabilityGatewayError,
   buildCapabilityGatewayUrl,
   requestCapabilityGatewayWithEnvelope
-} from "./chunk-JCWM2TYP.js";
+} from "./chunk-UYJMEHAF.js";
 import {
   unwrapOutputData,
   withOutputMetadata
-} from "./chunk-752BSLZC.js";
+} from "./chunk-WMDO53YK.js";
 import {
   internalCallSourceHeaders
 } from "./chunk-Y74WTIKJ.js";
-import "./chunk-TULINOLS.js";
+import "./chunk-GBSACKFB.js";
 import {
   SecureStoreAuthError,
   getCliToken
-} from "./chunk-H3K5UGYC.js";
+} from "./chunk-SOSFRU3O.js";
 import {
   getActiveHost,
   parseJsonRequest,
   safeJsonParse,
   stringifyJsonRequest
-} from "./chunk-JNVVJ273.js";
+} from "./chunk-4PSTYEG5.js";
 import {
   CliValidationError,
   PermissionError,

package/dist/{te-dataops-ITWJHO2U.js → te-dataops-YTLFTTW7.js}

@@ -1,21 +1,21 @@
 import { createRequire as __createRequire } from 'node:module'; const require = __createRequire(import.meta.url);
 import {
   resolveHost
-} from "./chunk-IN7KKL6K.js";
+} from "./chunk-2F64AZYH.js";
 import {
   printError
-} from "./chunk-752BSLZC.js";
+} from "./chunk-WMDO53YK.js";
 import {
   internalCallSourceHeaders
 } from "./chunk-Y74WTIKJ.js";
-import "./chunk-TULINOLS.js";
+import "./chunk-GBSACKFB.js";
 import {
   SecureStoreAuthError,
   getCliToken
-} from "./chunk-H3K5UGYC.js";
+} from "./chunk-SOSFRU3O.js";
 import {
   safeJsonParse
-} from "./chunk-JNVVJ273.js";
+} from "./chunk-4PSTYEG5.js";
 import {
   CliApiError,
   CliValidationError,

package/dist/{te-engage-VE2NUH5V.js → te-engage-V2QW7TIC.js}

@@ -1,7 +1,7 @@
 import { createRequire as __createRequire } from 'node:module'; const require = __createRequire(import.meta.url);
 import {
   createCapabilityCommand
-} from "./chunk-TKVVACEJ.js";
+} from "./chunk-HQCY3QCA.js";
 import {
   registerCapabilityGatewayRoute,
   resolveGatewayDomain
@@ -12,15 +12,15 @@ import {
   fetchCapabilityGateway,
   requestCapabilityGateway,
   requestCapabilityGatewayWithEnvelope
-} from "./chunk-JCWM2TYP.js";
+} from "./chunk-UYJMEHAF.js";
 import {
   printError,
   withOutputMetadata
-} from "./chunk-752BSLZC.js";
+} from "./chunk-WMDO53YK.js";
 import "./chunk-Y74WTIKJ.js";
-import "./chunk-TULINOLS.js";
-import "./chunk-H3K5UGYC.js";
-import "./chunk-JNVVJ273.js";
+import "./chunk-GBSACKFB.js";
+import "./chunk-SOSFRU3O.js";
+import "./chunk-4PSTYEG5.js";
 import {
   CliValidationError
 } from "./chunk-Z3Q2AEIN.js";

package/dist/{te-kb-WSMOW7WS.js → te-kb-4AQLISDR.js}

@@ -2,20 +2,20 @@ import { createRequire as __createRequire } from 'node:module'; const require =
 import {
   kbApi,
   kbUpload
-} from "./chunk-QEMQKVHW.js";
+} from "./chunk-QWSA3EOD.js";
 import {
   TeAgentApiError
-} from "./chunk-RJHGDWSC.js";
+} from "./chunk-JSBLCLFE.js";
 import {
   CapabilityGatewayError
-} from "./chunk-JCWM2TYP.js";
+} from "./chunk-UYJMEHAF.js";
 import {
   printError
-} from "./chunk-752BSLZC.js";
+} from "./chunk-WMDO53YK.js";
 import "./chunk-Y74WTIKJ.js";
-import "./chunk-TULINOLS.js";
-import "./chunk-H3K5UGYC.js";
-import "./chunk-JNVVJ273.js";
+import "./chunk-GBSACKFB.js";
+import "./chunk-SOSFRU3O.js";
+import "./chunk-4PSTYEG5.js";
 import {
   CliApiError,
   CliValidationError,

package/dist/{te-system-YM657FKO.js → te-system-CYWSK3UN.js}

@@ -12,14 +12,14 @@ import {
   postToMainApp,
   putToMainApp,
   uploadToMainApp
-} from "./chunk-RJHGDWSC.js";
+} from "./chunk-JSBLCLFE.js";
 import "./chunk-Y74WTIKJ.js";
-import "./chunk-H3K5UGYC.js";
+import "./chunk-SOSFRU3O.js";
 import {
   isAeSandboxRuntime,
   readSandboxCliTokenEntry,
   safeJsonParse
-} from "./chunk-JNVVJ273.js";
+} from "./chunk-4PSTYEG5.js";
 import {
   CliValidationError,
   PermissionError,

package/dist/{te-team-T2WRLOOD.js → te-team-6ELNGBWT.js}

@@ -2,16 +2,16 @@ import { createRequire as __createRequire } from 'node:module'; const require =
 import {
   getAuthHeaders,
   kbApi
-} from "./chunk-QEMQKVHW.js";
-import "./chunk-JCWM2TYP.js";
+} from "./chunk-QWSA3EOD.js";
+import "./chunk-UYJMEHAF.js";
 import {
   printError,
   printOutput
-} from "./chunk-752BSLZC.js";
+} from "./chunk-WMDO53YK.js";
 import "./chunk-Y74WTIKJ.js";
-import "./chunk-TULINOLS.js";
-import "./chunk-H3K5UGYC.js";
-import "./chunk-JNVVJ273.js";
+import "./chunk-GBSACKFB.js";
+import "./chunk-SOSFRU3O.js";
+import "./chunk-4PSTYEG5.js";
 import {
   externalCliTokenRequestOptions,
   redactExternalCliToken

package/dist/{things-6QOMFXOG.js → things-HFWLGCUH.js}

@@ -1,17 +1,17 @@
 import { createRequire as __createRequire } from 'node:module'; const require = __createRequire(import.meta.url);
 import {
   resolveMemoryApiBaseUrl
-} from "./chunk-QZUVLFNR.js";
-import "./chunk-N6XBLRB7.js";
-import "./chunk-RJHGDWSC.js";
+} from "./chunk-AWVZTN2B.js";
+import "./chunk-VDICGXCY.js";
+import "./chunk-JSBLCLFE.js";
 import {
   CapabilityGatewayError,
   buildCapabilityGatewayUrl,
   callCapabilityApi
-} from "./chunk-JCWM2TYP.js";
+} from "./chunk-UYJMEHAF.js";
 import "./chunk-Y74WTIKJ.js";
-import "./chunk-H3K5UGYC.js";
-import "./chunk-JNVVJ273.js";
+import "./chunk-SOSFRU3O.js";
+import "./chunk-4PSTYEG5.js";
 import {
   PermissionError
 } from "./chunk-Z3Q2AEIN.js";

package/dist/{update-I4MOUYOX.js → update-3CRVVHV5.js}

@@ -5,7 +5,7 @@ import {
 import {
   printError,
   printOutput
-} from "./chunk-752BSLZC.js";
+} from "./chunk-WMDO53YK.js";
 import {
   buildVersionInstallPlan,
   exactVersion,
@@ -17,13 +17,13 @@ import {
   installVersion,
   recordVersionSyncResult,
   rememberBusinessConfig
-} from "./chunk-TULINOLS.js";
+} from "./chunk-GBSACKFB.js";
 import {
   peekCliToken
-} from "./chunk-H3K5UGYC.js";
+} from "./chunk-SOSFRU3O.js";
 import {
   getActiveHost
-} from "./chunk-JNVVJ273.js";
+} from "./chunk-4PSTYEG5.js";
 import "./chunk-Z3Q2AEIN.js";
 
 // src/commands/update.ts

package/dist/{workspace-LYDAP647.js → workspace-2CKQX2XL.js}

@@ -13,15 +13,15 @@ import {
   workspaceResourcePath,
   workspaceTargetFlags,
   workspaceTargetPath
-} from "./chunk-7JAVT5TK.js";
+} from "./chunk-E25OSZLJ.js";
 import "./chunk-RK6GLDGI.js";
 import {
   getAgentBuffer
-} from "./chunk-N6XBLRB7.js";
-import "./chunk-RJHGDWSC.js";
+} from "./chunk-VDICGXCY.js";
+import "./chunk-JSBLCLFE.js";
 import "./chunk-Y74WTIKJ.js";
-import "./chunk-H3K5UGYC.js";
-import "./chunk-JNVVJ273.js";
+import "./chunk-SOSFRU3O.js";
+import "./chunk-4PSTYEG5.js";
 import {
   CliValidationError
 } from "./chunk-Z3Q2AEIN.js";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@thinkingai/ae-cli",
-  "version": "6.0.57",
+  "version": "6.0.58",
   "description": "CLI tool for ThinkingAI (AE) analytics platform",
   "type": "module",
   "bin": {

package/skills/ae-kb/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: ae-kb
-version: 1.0.8
+version: 1.0.9
 description: 'AE knowledge base CLI manual for creating, importing read-only compiled snapshots, querying, LLM-powered ask, listing accessible knowledge bases and their sources, deterministic index/grep/read retrieval, checking status, ZIP source upload and directory management, raw child-file reading, revision-checked child updates and deletion, compiling, schema generation, URL sources, source deletion, ordinary text source creation, full reads and revision-checked editing, file/ZIP source draft replacement and restoration, and knowledge base deletion. Use when the user asks to manage AE (Agentic Engine) knowledge bases, import a compiled Markdown ZIP snapshot, upload documents or URLs to a knowledge base, query knowledge, ask knowledge bases with an LLM, list accessible knowledge bases or source metadata, inspect knowledge base indexes, search knowledge base pages, read a specific knowledge base page, check knowledge base status, generate schemas, compile knowledge, remove sources, create or edit text sources, or delete a knowledge base. To choose which knowledge base is worth searching, use the ae-kb-discovery skill first; this skill runs the retrieval once a target is chosen. Must use ae-cli kb commands and must not guess knowledge base names, scopes, page paths, source IDs, source display names, JSON payload shapes, or URL formats.'
 ---
 
@@ -29,7 +29,7 @@ Read [Publication and read contexts](references/publication.md) for company appr
 - Read operations can run directly after required inputs are known. Write operations require explicit user intent. Only `high-risk-write` commands require the CLI confirmation prompt; use `--yes` after explicit authorization.
 - Prefer `--dry-run` before destructive or broad writes when the user has not already validated the target.
 - Do not invent knowledge base names, scopes, source IDs, source display names, or JSON payloads. Ask the user or query known context when values are missing.
-- When building a `--sources` ref (or `+read --source`), copy the exact `scope` and `name` from `+list` output — run `ae-cli kb +list` first when the scope of a named knowledge base is unknown.
+- When building a `--sources` ref (or `+read --source`), copy the exact `scope` and display `name` from trusted active-source context or `+list` output. Run `ae-cli kb +list` when neither supplies the exact scope and name; never use a slug as the display name.
 - JSON flags must be valid JSON strings, usually wrapped in single quotes in shell commands.
 - Successful commands return JSON by default. Use `--format table` only when a table is easier for a human to scan. Envelope may include optional `_notice.host_compat`.
 - `--host <url>` overrides the active AE host. It is available on every command and may be placed after the subcommand, e.g. `ae-cli kb +<command> --host <url>`.
@@ -348,7 +348,9 @@ Use the deterministic retrieval primitives when an agent needs to explore knowle
 
 **Before running a real query, read [`references/query-workflow.md`](references/query-workflow.md)** — it selects the next useful retrieval step without crawling. It covers candidate indexing, copied-path grep, direct bounded reads of linked short pages, same-page read windows, linked-page re-grep when needed, optional outline-derived ranges, and coverage assessment. This section below is the per-command reference the workflow draws on.
 
-Start with `+list` or `+index` to discover accessible knowledge bases. Use `+index` when you also need navigation maps:
+Start with the trusted active sources described by `ae-kb-discovery`. Explicit references go straight to scoped retrieval without `+list`; relevant preferred candidates go first, with `+list` only if unrelated or insufficient. When no trusted active sources exist, use `+list` to discover accessible knowledge bases. Use `+index` when you also need navigation maps:
+
+When discovery is needed:
 
 ```bash
 ae-cli kb +list

package/skills/ae-kb/references/query-workflow.md

@@ -11,11 +11,12 @@ Everything below is server-side LLM-free.
 
 ## The loop
 
-This picks up **after** `ae-kb-discovery` has listed accessible knowledge bases
-and ranked candidates. Start here with a chosen candidate; scope every `+index`
-/ `+grep` / `+read` call to it with `--sources` / `--source`. If the candidate
-turns out not to cover the question, go back to `ae-kb-discovery` for the next
-candidate rather than searching everything blindly.
+This picks up **after** `ae-kb-discovery` has chosen a candidate from trusted active sources or `+list`.
+An explicit reference skips `+list` and stays within the referenced list, even when page evidence is insufficient.
+Preferred candidates are searched only when relevant; clearly unrelated candidates or evidence gaps can lead to `+list`.
+After `+list`, retrieve from at most three distinct newly discovered knowledge bases; count every new source in a multi-source `+ask` separately. Explicit references and preferred candidates do not consume that budget.
+Start here with a chosen candidate; scope every `+index` / `+grep` / `+read` call to it with `--sources` / `--source`. If the candidate turns out not to cover the question, go back to `ae-kb-discovery` for the next allowed candidate rather than searching everything blindly.
+When using `+ask` with explicit references or preferred candidates, always pass `--sources` containing only the relevant authorized sources from that active list; never omit it or include unrelated sources. For an explicit reference, insufficient evidence does not authorize expansion to another knowledge base.
 
 **Known-page fast path:** within the same host, identity, KB and published revision,
 reuse navigation and read evidence already obtained in this task. Copy exact

package/skills/ae-kb-discovery/SKILL.md

@@ -1,5 +1,6 @@
 ---
 name: ae-kb-discovery
+version: 1.0.0
 description: >
   Discover which AE (Agentic Engine) knowledge bases accessible to the current user are worth searching, and decide whether to search at all, through read-only operations. Use when the user explicitly asks to search knowledge bases, internal documentation, or company materials. Also use when a task requires internal facts or business context, or when ae-analysis sees an enabled KB auto-discovery company switch before choosing its query route. Use internal context to explain data analysis results, anomalies, or trends and form evidence-backed conclusions. Do not use if the user explicitly asks not to access knowledge bases. This skill covers discovery and candidate selection; run the actual `+index` / `+grep` / `+read` / `+ask` retrieval with the `ae-kb` skill.
 ---
@@ -32,9 +33,17 @@ Do not use this skill when:
 
 ## Discovery Workflow
 
-### 1. Get the List of Accessible Knowledge Bases
+### 1. Use Trusted Active Sources Before Discovery
 
-First, get the lightweight list of knowledge bases accessible to the current user:
+If the current turn's trusted system context supplies **explicitly referenced** knowledge bases with exact `scope` and display `name`, use only relevant references from that list. Hand them directly to `ae-kb` for scoped `+index` / `+grep` / `+read` retrieval; do not call `+list` or search an unreferenced knowledge base. If retrieved pages leave a gap, report it. A knowledge base named only in user text is not a trusted active reference.
+
+If trusted context instead supplies **preferred candidates**, compare their names, descriptions and bindings with the question. Search only relevant candidates first. If all are clearly unrelated, or their retrieved pages leave a gap, call `+list` for other accessible sources. Metadata never counts as answer evidence. Preferred candidates are not a search limit and do not consume the newly discovered source budget below.
+
+When no trusted active sources are supplied, discover accessible knowledge bases with `+list` as usual. Copy exact `scope` and display `name` from trusted context or `+list`; never derive a CLI `--sources` name from a slug alone.
+
+### 2. Get the List of Accessible Knowledge Bases When Needed
+
+When discovery is needed, get the lightweight list of knowledge bases accessible to the current user:
 
 ```bash
 ae-cli kb +list
@@ -44,7 +53,7 @@ Use the exact `scope` and knowledge base name returned by the command, together
 
 If `+list` is unavailable or fails, do not guess which knowledge bases exist. If the user explicitly requested a knowledge base search, explain that discovery cannot currently be completed. Otherwise, return to the original task and reassess the capabilities currently available.
 
-### 2. Rank Candidate Knowledge Bases
+### 3. Rank Candidate Knowledge Bases
 
 Rank candidates in this order:
 
@@ -54,9 +63,9 @@ Rank candidates in this order:
 
 Compare `targetId` with the corresponding current ID or code first. Use `targetName` only as a secondary signal when an ID or code is unavailable; do not replace a conflicting ID match with a name match. A candidate with no bindings or no current-context match remains eligible for semantic ranking. A binding to another project or space lowers implicit priority but does not exclude the candidate, and an explicit user choice still takes precedence.
 
-Select one preferred knowledge base by default. When several candidates are highly relevant, retain no more than three and try them one at a time in priority order. Do not read the indexes of all candidates in advance. A binding, name, description, tag, or language match only indicates that a knowledge base is worth searching; it does not prove a content match, grant access, or count as knowledge base evidence.
+Select one candidate to search at a time. After `+list`, retrieve from at most three distinct newly discovered knowledge bases in this task; stop when page evidence is sufficient. Every new source used by `+index`, `+grep`, `+read` or `+ask` counts once, including each source in a multi-source `+ask`. Explicit references and preferred candidates do not count toward this budget. Do not read the indexes of all candidates in advance. A binding, name, description, tag, or language match only indicates that a knowledge base is worth searching; it does not prove a content match, grant access, or count as knowledge base evidence.
 
-### 3. Hand Off to Retrieval
+### 4. Hand Off to Retrieval
 
 Once a preferred knowledge base is selected, hand off to the `ae-kb` skill and follow its `references/query-workflow.md` for the entire retrieval procedure — including when `+ask` is appropriate.
 
@@ -98,7 +107,7 @@ When using internal context to explain data analysis results, anomalies, or tren
 When knowledge base evidence provides only partial coverage, is entirely absent, or retrieval fails:
 
 1. Stop repeating searches against the same candidate knowledge base.
-2. If ranked candidates remain, switch to the next candidate. Search no more than three knowledge bases in one task.
+2. If ranked candidates remain, switch to the next candidate. After `+list`, retrieve from no more than three distinct newly discovered knowledge bases; explicit references and preferred candidates do not consume that budget.
 3. When all candidates provide no coverage, return to the user's original request instead of remaining in the knowledge base retrieval subtask.
 4. Reassess the capabilities currently available and choose the next path that best serves the original task. Do not hard-code a fixed fallback.
 5. Retain verified background evidence when useful, but never attribute conclusions drawn from other sources to a knowledge base.