@thinkingai/ae-cli 6.1.20 → 6.1.21

package/dist/{te-kb-WYQWHFSC.js → te-kb-3TS73NO6.js}

@@ -2,28 +2,23 @@ import { createRequire as __createRequire } from 'node:module'; const require =
 import {
   kbApi,
   kbUpload
-} from "./chunk-VXNMYUXU.js";
+} from "./chunk-57RRFUEZ.js";
 import {
   TeAgentApiError
-} from "./chunk-BBEFP4SB.js";
+} from "./chunk-HBGADCKA.js";
 import {
   CapabilityGatewayError
-} from "./chunk-QJQZH5GQ.js";
+} from "./chunk-HFGZGYCG.js";
 import {
   printError
-} from "./chunk-CZU3V3DQ.js";
+} from "./chunk-DX5CDO34.js";
 import "./chunk-Y74WTIKJ.js";
-import "./chunk-ATSM5XAW.js";
-import "./chunk-WZ6YVQSF.js";
+import "./chunk-7XGFSUOM.js";
+import "./chunk-7FTTULED.js";
 import {
   CliValidationError,
   PermissionError
-} from "./chunk-4P355ZWB.js";
-
-// src/commands/te-kb/add.ts
-import { promises as fs } from "fs";
-import * as path from "path";
-import TurndownService from "turndown";
+} from "./chunk-MAPZ7VB6.js";
 
 // src/commands/te-kb/target-scope.ts
 function getExternalKnowledgeBaseTargetScope(ctx) {
@@ -35,8 +30,235 @@ function getExternalKnowledgeBaseTargetScope(ctx) {
   );
 }
 
+// src/commands/te-kb/source-check-updates.ts
+var API_PATH = "/agent/api/external/knowledge-bases/sources/check-updates";
+function body(ctx) {
+  const scope = getExternalKnowledgeBaseTargetScope(ctx);
+  return { name: ctx.str("name").trim(), sourceId: ctx.str("id").trim(), ...scope ? { scope } : {} };
+}
+var sourceCheckUpdates = {
+  service: "kb",
+  resource: "source",
+  command: "check-updates",
+  risk: "write",
+  description: "Check one compiled Feishu URL source for updates using the scheduled detector. Marks changes without compiling. Existing pending changes are preserved; updated=0 does not prove identical content.",
+  flags: [
+    { name: "name", type: "string", required: true, minLength: 1, maxLength: 200, desc: "Knowledge base name" },
+    { name: "id", type: "string", required: true, minLength: 1, maxLength: 191, desc: "Stable Feishu source ID from kb +list-sources" },
+    { name: "scope", type: "string", desc: "Exact scope: personal | company (omit for personal then company lookup)" }
+  ],
+  validate: (ctx) => {
+    for (const [flag, max] of [["name", 200], ["id", 191]]) {
+      const value = ctx.str(flag).trim();
+      if (!value || value.length > max) throw new CliValidationError(`Invalid --${flag}: expected 1-${max} characters.`);
+    }
+    getExternalKnowledgeBaseTargetScope(ctx);
+  },
+  dryRun: (ctx) => ({ method: "POST", url: `${ctx.host().replace(/\/$/, "")}${API_PATH}`, body: body(ctx) }),
+  execute: async (ctx) => {
+    try {
+      return await kbApi(ctx, "POST", API_PATH, {}, body(ctx), { preserveErrorMetadata: true });
+    } catch (error) {
+      const hint = "Read kb +list-sources to confirm the current source state before retrying.";
+      if (error instanceof PermissionError) {
+        throw new PermissionError("Source write permission is required for this knowledge base.", error.code, "Request source write access; signing in again does not grant permission.");
+      }
+      if (error instanceof CapabilityGatewayError) {
+        const messages = {
+          INVALID_REQUEST: "Invalid source update-check parameters.",
+          KB_NOT_FOUND: "The knowledge base was not found or is not accessible.",
+          SOURCE_NOT_FOUND: "The source was not found in the selected knowledge base.",
+          SOURCE_NOT_FEISHU: "Only Feishu URL sources support update checks.",
+          SOURCE_NOT_COMPILED: "The source must finish compilation before checking for updates.",
+          SOURCE_CHECK_FAILED: "The Feishu source update check failed. Check server detection logs.",
+          SOURCE_CHECK_UNAVAILABLE: "The source changed or could not be selected for detection.",
+          SOURCE_CHECK_INTERNAL_ERROR: "The Feishu source update check could not complete."
+        };
+        throw new CapabilityGatewayError(messages[error.code ?? ""] ?? "The source update-check request failed.", error.code, error.httpStatus, hint, error.meta);
+      }
+      if (error instanceof Error && /[^\x00-\x7f]/.test(error.message)) {
+        error.message = "The source update-check request failed. Check credentials, rate limits and server logs.";
+      }
+      throw error;
+    }
+  }
+};
+
+// src/commands/te-kb/source-mutation.ts
+import { promises as fs } from "fs";
+import path from "path";
+var API = "/agent/api/external/knowledge-bases";
+var apiOptions = { preserveErrorMetadata: true };
+var maxBytes = 50 * 1024 * 1024;
+var fileExtensions = /* @__PURE__ */ new Set([".md", ".markdown", ".txt", ".csv", ".pdf", ".doc", ".docx", ".xls", ".xlsx", ".ppt", ".pptx", ".jpg", ".jpeg", ".png", ".gif", ".webp", ".bmp", ".svg"]);
+var identityFlags = [
+  { name: "name", type: "string", required: true, desc: "Exact knowledge base name from kb +list" },
+  { name: "scope", type: "string", required: true, desc: "Exact knowledge base scope: personal or company" },
+  { name: "id", type: "string", required: true, desc: "Current stable source ID from kb +list-sources" }
+];
+var typeFlag = { name: "source-type", type: "string", required: true, desc: "Current source type from kb +list-sources: file or zip" };
+var revisionFlag = { name: "expected-revision", type: "number", required: true, min: 1, max: 2147483647, desc: "Current contentRevision from kb +list-sources; never automatically retry a conflict" };
+var previewFlag = { name: "preview-id", type: "string", required: true, desc: "Exact previewId returned by ZIP replace or restore" };
+function validateIdentity(ctx) {
+  for (const [flag, max] of [["name", 200], ["id", 191], ["preview-id", 191]]) {
+    const value = ctx.str(flag);
+    if ((flag !== "preview-id" || value) && (!value.trim() || value.length > max || /[\x00-\x1f\x7f]/.test(value))) {
+      throw new CliValidationError(`--${flag} must contain 1 to ${max} characters without control characters.`);
+    }
+  }
+  if (!["personal", "company"].includes(ctx.str("scope"))) throw new CliValidationError("--scope must be personal or company.");
+}
+function positiveInteger(ctx, flag) {
+  const value = ctx.num(flag);
+  if (!Number.isSafeInteger(value) || value < 1 || value > 2147483647) throw new CliValidationError(`--${flag} must be an integer from 1 to 2147483647.`);
+}
+function validateMutation(ctx) {
+  validateIdentity(ctx);
+  positiveInteger(ctx, "expected-revision");
+  if (!["file", "zip"].includes(ctx.str("source-type"))) throw new CliValidationError("--source-type must be file or zip; URL sources cannot be replaced or restored.");
+}
+function query(ctx) {
+  return { name: ctx.str("name").trim(), scope: ctx.str("scope") };
+}
+function sourceEndpoint(ctx, suffix) {
+  return `${API}/sources/${encodeURIComponent(ctx.str("id").trim())}/${suffix}`;
+}
+function previewEndpoint(ctx) {
+  return sourceEndpoint(ctx, `directory/previews/${encodeURIComponent(ctx.str("preview-id").trim())}`);
+}
+function dryRequest(ctx, method, endpoint2, body2) {
+  return { method, url: `${ctx.host().replace(/\/$/, "")}${endpoint2}`, params: query(ctx), ...body2 === void 0 ? {} : { body: body2 } };
+}
+async function replacementFile(ctx, read) {
+  const file = path.resolve(ctx.str("file"));
+  const extension = path.extname(file).toLowerCase();
+  if (ctx.str("source-type") === "zip" ? extension !== ".zip" : !fileExtensions.has(extension)) {
+    throw new CliValidationError("--file must be a ZIP for a ZIP source, or a supported non-ZIP file for a file source. File sources must keep their original format.");
+  }
+  const handle = await fs.open(file, "r");
+  try {
+    const stat = await handle.stat();
+    if (!stat.isFile() || stat.size > maxBytes) throw new CliValidationError("--file must be a regular file of at most 50 MB.");
+    const content = read ? await handle.readFile() : void 0;
+    if (content && content.length > maxBytes) throw new CliValidationError("--file exceeds 50 MB.");
+    return { file, filename: path.basename(file), sizeBytes: content?.length ?? stat.size, content };
+  } finally {
+    await handle.close();
+  }
+}
+function replaceEndpoint(ctx) {
+  return sourceEndpoint(ctx, ctx.str("source-type") === "zip" ? "directory/previews" : "raw");
+}
+function replaceFields(ctx) {
+  return { expectedRevision: ctx.num("expected-revision"), ...ctx.str("source-type") === "zip" ? { mode: "archive" } : {} };
+}
+var sourceReplace = {
+  service: "kb",
+  resource: "source",
+  command: "replace",
+  risk: "write",
+  description: "Replace a file source draft, or prepare a ZIP archive replacement preview. ZIP changes require source commit. Does not compile or publish.",
+  flags: [...identityFlags, typeFlag, revisionFlag, { name: "file", type: "string", required: true, desc: "Local replacement file, at most 50 MB; same format, different filename allowed" }],
+  validate: (ctx) => {
+    validateMutation(ctx);
+    if (!ctx.str("file").trim()) throw new CliValidationError("--file is required.");
+  },
+  dryRun: async (ctx) => {
+    const { file, filename, sizeBytes } = await replacementFile(ctx, false);
+    return { ...dryRequest(ctx, ctx.str("source-type") === "zip" ? "POST" : "PUT", replaceEndpoint(ctx), replaceFields(ctx)), multipart: { file, filename, sizeBytes, content: "<redacted>" } };
+  },
+  execute: async (ctx) => {
+    const file = await replacementFile(ctx, true);
+    const form = new FormData();
+    form.append("file", new Blob([new Uint8Array(file.content)]), file.filename);
+    for (const [key, value] of Object.entries(replaceFields(ctx))) form.append(key, String(value));
+    return kbUpload(ctx, replaceEndpoint(ctx), form, query(ctx), { ...apiOptions, method: ctx.str("source-type") === "zip" ? "POST" : "PUT" });
+  }
+};
+function restoreEndpoint(ctx) {
+  return `${API}/versions/${ctx.num("version")}/sources/${encodeURIComponent(ctx.str("id").trim())}/restore`;
+}
+function restoreBody(ctx) {
+  return { expectedRevision: ctx.num("expected-revision"), ...ctx.str("source-type") === "zip" ? ctx.str("path") ? { target: "file", path: ctx.str("path") } : { target: "source" } : {} };
+}
+var sourceRestore = {
+  service: "kb",
+  resource: "source",
+  command: "restore",
+  risk: "write",
+  description: "Restore one current source draft from a published version. File sources restore immediately; ZIP source or child restores return a preview. Does not roll back the whole knowledge base or publish.",
+  flags: [
+    ...identityFlags,
+    typeFlag,
+    revisionFlag,
+    { name: "version", type: "number", required: true, min: 1, max: 2147483647, desc: "Published version number from kb +versions; use the latest number to discard unpublished changes" },
+    { name: "path", type: "string", desc: "Optional exact historical ZIP child file path from kb +version-tree; omit to restore the entire ZIP source" }
+  ],
+  validate: (ctx) => {
+    validateMutation(ctx);
+    positiveInteger(ctx, "version");
+    const value = ctx.str("path");
+    if (value && (ctx.str("source-type") !== "zip" || value.length > 1024 || /[\\\x00-\x1f\x7f]/.test(value) || /^[A-Za-z]:/.test(value) || value.split("/").some((p) => !p || p === "." || p === ".."))) {
+      throw new CliValidationError("--path is only valid for a ZIP child and must be a normalized relative file path.");
+    }
+  },
+  dryRun: (ctx) => dryRequest(ctx, "POST", restoreEndpoint(ctx), restoreBody(ctx)),
+  execute: (ctx) => kbApi(ctx, "POST", restoreEndpoint(ctx), query(ctx), restoreBody(ctx), apiOptions)
+};
+var sourcePreview = {
+  service: "kb",
+  resource: "source",
+  command: "preview",
+  risk: "read",
+  description: "Read one page of a ZIP replacement or restore preview, including additions, modifications and deletions.",
+  flags: [
+    ...identityFlags,
+    previewFlag,
+    { name: "cursor", type: "string", desc: "Opaque nextCursor returned by the previous preview page" },
+    { name: "limit", type: "number", default: 100, min: 1, max: 200, desc: "Preview page size from 1 to 200" }
+  ],
+  validate: (ctx) => {
+    validateIdentity(ctx);
+    if (!Number.isInteger(ctx.num("limit")) || ctx.num("limit") < 1 || ctx.num("limit") > 200) throw new CliValidationError("--limit must be an integer from 1 to 200.");
+    if (ctx.str("cursor").length > 4096) throw new CliValidationError("--cursor must be at most 4096 characters.");
+  },
+  dryRun: (ctx) => ({ ...dryRequest(ctx, "GET", previewEndpoint(ctx)), params: { ...query(ctx), limit: ctx.num("limit"), ...ctx.str("cursor") ? { cursor: ctx.str("cursor") } : {} } }),
+  execute: (ctx) => kbApi(ctx, "GET", previewEndpoint(ctx), { ...query(ctx), limit: ctx.num("limit"), ...ctx.str("cursor") ? { cursor: ctx.str("cursor") } : {} }, void 0, apiOptions)
+};
+var sourceCommit = {
+  service: "kb",
+  resource: "source",
+  command: "commit",
+  risk: "high-risk-write",
+  description: "Confirm a reviewed ZIP replacement or restore preview. May delete missing files; changes only the draft. On uncertain outcome, inspect state before any retry.",
+  flags: [...identityFlags, previewFlag, revisionFlag],
+  validate: (ctx) => {
+    validateIdentity(ctx);
+    positiveInteger(ctx, "expected-revision");
+  },
+  dryRun: (ctx) => dryRequest(ctx, "POST", `${previewEndpoint(ctx)}/commit`, { expectedRevision: ctx.num("expected-revision"), confirmed: true }),
+  execute: (ctx) => kbApi(ctx, "POST", `${previewEndpoint(ctx)}/commit`, query(ctx), { expectedRevision: ctx.num("expected-revision"), confirmed: true }, apiOptions)
+};
+var sourceCancel = {
+  service: "kb",
+  resource: "source",
+  command: "cancel",
+  risk: "high-risk-write",
+  description: "Discard an uncommitted ZIP replacement or restore preview; leaves the source draft unchanged.",
+  flags: [...identityFlags, previewFlag],
+  validate: validateIdentity,
+  dryRun: (ctx) => dryRequest(ctx, "DELETE", previewEndpoint(ctx)),
+  execute: async (ctx) => {
+    await kbApi(ctx, "DELETE", previewEndpoint(ctx), query(ctx), void 0, { ...apiOptions, responseType: "empty" });
+    return { previewId: ctx.str("preview-id"), cancelled: true };
+  }
+};
+
 // src/commands/te-kb/add.ts
-var API_PATH = "/agent/api/external/knowledge-bases/sources/upload";
+import { promises as fs2 } from "fs";
+import * as path2 from "path";
+import TurndownService from "turndown";
+var API_PATH2 = "/agent/api/external/knowledge-bases/sources/upload";
 var SUPPORTED_EXTENSIONS = /* @__PURE__ */ new Set([
   ".zip",
   ".md",
@@ -83,7 +305,7 @@ function sanitizeFilename(name) {
   return cleaned || "document";
 }
 function getMimeType(filename) {
-  const ext = path.extname(filename).toLowerCase();
+  const ext = path2.extname(filename).toLowerCase();
   switch (ext) {
     case ".zip":
       return "application/zip";
@@ -126,23 +348,23 @@ function getMimeType(filename) {
   }
 }
 async function readLocalFile(filePath) {
-  const ext = path.extname(filePath).toLowerCase();
+  const ext = path2.extname(filePath).toLowerCase();
   if (!SUPPORTED_EXTENSIONS.has(ext)) {
     throw new Error(`Unsupported file extension (${ext || "none"}): ${filePath}`);
   }
-  const content = await fs.readFile(filePath);
-  const filename = path.basename(filePath);
+  const content = await fs2.readFile(filePath);
+  const filename = path2.basename(filePath);
   return { filename, content, mimeType: getMimeType(filename), origin: "file", source: filePath };
 }
 async function readDirectory(dir) {
-  const entries = await fs.readdir(dir, { withFileTypes: true });
+  const entries = await fs2.readdir(dir, { withFileTypes: true });
   const files = [];
   for (const entry of entries) {
     if (!entry.isFile()) continue;
-    const ext = path.extname(entry.name).toLowerCase();
+    const ext = path2.extname(entry.name).toLowerCase();
     if (!SUPPORTED_EXTENSIONS.has(ext)) continue;
-    const full = path.join(dir, entry.name);
-    const content = await fs.readFile(full);
+    const full = path2.join(dir, entry.name);
+    const content = await fs2.readFile(full);
     files.push({ filename: entry.name, content, mimeType: getMimeType(entry.name), origin: "dir", source: full });
   }
   if (files.length === 0) {
@@ -177,10 +399,10 @@ async function fetchAsMarkdown(rawUrl) {
   };
 }
 async function resolveLocalPath(p) {
-  const abs = path.resolve(p);
+  const abs = path2.resolve(p);
   let stat;
   try {
-    stat = await fs.stat(abs);
+    stat = await fs2.stat(abs);
   } catch {
     throw new Error(`Path not found: ${p}`);
   }
@@ -216,7 +438,7 @@ function dedupeByFilename(files) {
     const count = used.get(f.filename) ?? 0;
     used.set(f.filename, count + 1);
     if (count === 0) return f;
-    const ext = path.extname(f.filename);
+    const ext = path2.extname(f.filename);
     const stem = f.filename.slice(0, f.filename.length - ext.length);
     return { ...f, filename: `${stem}-${count}${ext}` };
   });
@@ -251,17 +473,17 @@ var add = {
   },
   dryRun: (ctx) => {
     const items = normalizeFilesInput(ctx.json("files"));
-    const body = {
+    const body2 = {
       name: ctx.str("name")
     };
     const scope = getExternalKnowledgeBaseTargetScope(ctx);
-    if (scope) body.scope = scope;
-    body.files = items.map((item) => ({ value: item, type: classifyInput(item) }));
-    body.contentType = "multipart/form-data";
+    if (scope) body2.scope = scope;
+    body2.files = items.map((item) => ({ value: item, type: classifyInput(item) }));
+    body2.contentType = "multipart/form-data";
     return {
       method: "POST",
-      url: `${ctx.host().replace(/\/$/, "")}${API_PATH}`,
-      body
+      url: `${ctx.host().replace(/\/$/, "")}${API_PATH2}`,
+      body: body2
     };
   },
   execute: async (ctx) => {
@@ -269,7 +491,7 @@ var add = {
     const scope = getExternalKnowledgeBaseTargetScope(ctx);
     const files = await collectFiles(ctx);
     const form = buildForm(name, scope, files);
-    const result = await kbUpload(ctx, API_PATH, form);
+    const result = await kbUpload(ctx, API_PATH2, form);
     return {
       uploaded: files.map((f) => ({ filename: f.filename, origin: f.origin, source: f.source })),
       result
@@ -278,7 +500,7 @@ var add = {
 };
 
 // src/commands/te-kb/compile.ts
-var API_PATH2 = "/agent/api/external/knowledge-bases/compile";
+var API_PATH3 = "/agent/api/external/knowledge-bases/compile";
 var VALID_MODES = /* @__PURE__ */ new Set(["incremental", "full"]);
 function getMode(ctx) {
   const mode = ctx.str("mode") || "incremental";
@@ -288,15 +510,15 @@ function getMode(ctx) {
   return mode;
 }
 function buildBody(ctx) {
-  const body = {
+  const body2 = {
     name: ctx.str("name"),
     mode: getMode(ctx)
   };
   const scope = getExternalKnowledgeBaseTargetScope(ctx);
-  if (scope) body.scope = scope;
+  if (scope) body2.scope = scope;
   const model = ctx.str("model");
-  if (model) body.model = model;
-  return body;
+  if (model) body2.model = model;
+  return body2;
 }
 var compile = {
   service: "kb",
@@ -315,19 +537,19 @@ var compile = {
   },
   dryRun: (ctx) => ({
     method: "POST",
-    url: `${ctx.host().replace(/\/$/, "")}${API_PATH2}`,
+    url: `${ctx.host().replace(/\/$/, "")}${API_PATH3}`,
     body: buildBody(ctx)
   }),
-  execute: async (ctx) => kbApi(ctx, "POST", API_PATH2, {}, buildBody(ctx))
+  execute: async (ctx) => kbApi(ctx, "POST", API_PATH3, {}, buildBody(ctx))
 };
 
 // src/commands/te-kb/remove.ts
-var API_PATH3 = "/agent/api/external/knowledge-bases";
+var API_PATH4 = "/agent/api/external/knowledge-bases";
 function buildBody2(ctx) {
-  const body = { name: ctx.str("name") };
+  const body2 = { name: ctx.str("name") };
   const scope = getExternalKnowledgeBaseTargetScope(ctx);
-  if (scope) body.scope = scope;
-  return body;
+  if (scope) body2.scope = scope;
+  return body2;
 }
 var remove = {
   service: "kb",
@@ -343,14 +565,14 @@ var remove = {
   },
   dryRun: (ctx) => ({
     method: "DELETE",
-    url: `${ctx.host().replace(/\/$/, "")}${API_PATH3}`,
+    url: `${ctx.host().replace(/\/$/, "")}${API_PATH4}`,
     body: buildBody2(ctx)
   }),
-  execute: async (ctx) => kbApi(ctx, "DELETE", API_PATH3, {}, buildBody2(ctx))
+  execute: async (ctx) => kbApi(ctx, "DELETE", API_PATH4, {}, buildBody2(ctx))
 };
 
 // src/commands/te-kb/create.ts
-var API_PATH4 = "/agent/api/external/knowledge-bases/create";
+var API_PATH5 = "/agent/api/external/knowledge-bases/create";
 var VALID_SCOPES = /* @__PURE__ */ new Set(["personal", "company"]);
 function getScope(ctx) {
   const scope = ctx.str("scope") || "company";
@@ -378,19 +600,19 @@ function normalizeTags(raw) {
   return tags;
 }
 function buildBody3(ctx) {
-  const body = {
+  const body2 = {
     scope: getScope(ctx),
     name: ctx.str("name")
   };
   const description = ctx.str("description");
-  if (description) body.description = description;
+  if (description) body2.description = description;
   const tags = normalizeTags(ctx.json("tags"));
-  if (tags && tags.length > 0) body.tags = tags;
+  if (tags && tags.length > 0) body2.tags = tags;
   const projectId = ctx.str("project-id");
-  if (projectId) body.projectId = projectId;
+  if (projectId) body2.projectId = projectId;
   const projectName = ctx.str("project-name");
-  if (projectName) body.projectName = projectName;
-  return body;
+  if (projectName) body2.projectName = projectName;
+  return body2;
 }
 var create = {
   service: "kb",
@@ -411,14 +633,14 @@ var create = {
   },
   dryRun: (ctx) => ({
     method: "POST",
-    url: `${ctx.host().replace(/\/$/, "")}${API_PATH4}`,
+    url: `${ctx.host().replace(/\/$/, "")}${API_PATH5}`,
     body: buildBody3(ctx)
   }),
-  execute: async (ctx) => kbApi(ctx, "POST", API_PATH4, {}, buildBody3(ctx))
+  execute: async (ctx) => kbApi(ctx, "POST", API_PATH5, {}, buildBody3(ctx))
 };
 
 // src/commands/te-kb/rm-source.ts
-var API_PATH5 = "/agent/api/external/knowledge-bases/sources";
+var API_PATH6 = "/agent/api/external/knowledge-bases/sources";
 function sourceSelector(ctx) {
   const id = ctx.str("id").trim();
   if (id) return { id };
@@ -427,12 +649,12 @@ function sourceSelector(ctx) {
   throw new CliValidationError("One of --id or --display-name is required.");
 }
 function buildBody4(ctx) {
-  const body = {
+  const body2 = {
     name: ctx.str("name")
   };
   const scope = getExternalKnowledgeBaseTargetScope(ctx);
-  if (scope) body.scope = scope;
-  return { ...body, ...sourceSelector(ctx) };
+  if (scope) body2.scope = scope;
+  return { ...body2, ...sourceSelector(ctx) };
 }
 var rmSource = {
   service: "kb",
@@ -451,31 +673,49 @@ var rmSource = {
   },
   dryRun: (ctx) => ({
     method: "DELETE",
-    url: `${ctx.host().replace(/\/$/, "")}${API_PATH5}`,
+    url: `${ctx.host().replace(/\/$/, "")}${API_PATH6}`,
     body: buildBody4(ctx)
   }),
-  execute: async (ctx) => kbApi(ctx, "DELETE", API_PATH5, {}, buildBody4(ctx), {
+  execute: async (ctx) => kbApi(ctx, "DELETE", API_PATH6, {}, buildBody4(ctx), {
     preserveErrorMetadata: true
   })
 };
 
 // src/commands/te-kb/schema.ts
-var API_PATH6 = "/agent/api/external/knowledge-bases/schema";
+import fs3 from "fs";
+import path3 from "path";
+var API_PATH7 = "/agent/api/external/knowledge-bases/schema";
+var MAX_CUSTOM_INSTRUCTIONS_CHARS = 1e4;
+function getCustomInstructions(ctx) {
+  const inline = ctx.str("custom-instructions");
+  const file = ctx.str("custom-instructions-file");
+  if (inline && file) {
+    throw new Error("Use either --custom-instructions or --custom-instructions-file, not both.");
+  }
+  const content = file ? fs3.readFileSync(path3.resolve(file), "utf8") : inline;
+  if (file && !content.trim()) {
+    throw new Error("--custom-instructions-file is empty.");
+  }
+  if ([...content].length > MAX_CUSTOM_INSTRUCTIONS_CHARS) {
+    throw new Error("Custom instructions exceed 10000 characters.");
+  }
+  return content;
+}
 function buildBody5(ctx) {
-  const body = {
+  const body2 = {
     name: ctx.str("name")
   };
   const scope = getExternalKnowledgeBaseTargetScope(ctx);
-  if (scope) body.scope = scope;
-  if (ctx.bool("force")) body.force = true;
+  if (scope) body2.scope = scope;
+  if (ctx.bool("force")) body2.force = true;
   const model = ctx.str("model");
-  if (model) body.model = model;
-  const customInstructions = ctx.str("custom-instructions");
-  if (customInstructions) body.customInstructions = customInstructions;
-  return body;
+  if (model) body2.model = model;
+  const customInstructions = getCustomInstructions(ctx);
+  if (customInstructions) body2.customInstructions = customInstructions;
+  return body2;
 }
 async function executeSchema(ctx, api = kbApi) {
-  return api(ctx, "POST", API_PATH6, {}, buildBody5(ctx), {
+  return api(ctx, "POST", API_PATH7, {}, buildBody5(ctx), {
     preserveBusinessErrorCode: true
   });
 }
@@ -494,29 +734,37 @@ var schema = {
       required: false,
       sensitive: true,
       desc: "Optional per-run instructions for generating this knowledge base schema"
+    },
+    {
+      name: "custom-instructions-file",
+      type: "string",
+      required: false,
+      sensitive: true,
+      desc: "Read optional per-run schema generation instructions from a UTF-8 text file"
     }
   ],
   risk: "write",
   validate: (ctx) => {
     getExternalKnowledgeBaseTargetScope(ctx);
+    getCustomInstructions(ctx);
   },
   dryRun: (ctx) => ({
     method: "POST",
-    url: `${ctx.host().replace(/\/$/, "")}${API_PATH6}`,
+    url: `${ctx.host().replace(/\/$/, "")}${API_PATH7}`,
     body: buildBody5(ctx)
   }),
   execute: executeSchema
 };
 
 // src/commands/te-kb/status.ts
-var API_PATH7 = "/agent/api/external/knowledge-bases/status";
+var API_PATH8 = "/agent/api/external/knowledge-bases/status";
 function buildBody6(ctx) {
-  const body = {
+  const body2 = {
     name: ctx.str("name")
   };
   const scope = getExternalKnowledgeBaseTargetScope(ctx);
-  if (scope) body.scope = scope;
-  return body;
+  if (scope) body2.scope = scope;
+  return body2;
 }
 var status = {
   service: "kb",
@@ -532,21 +780,21 @@ var status = {
   },
   dryRun: (ctx) => ({
     method: "POST",
-    url: `${ctx.host().replace(/\/$/, "")}${API_PATH7}`,
+    url: `${ctx.host().replace(/\/$/, "")}${API_PATH8}`,
     body: buildBody6(ctx)
   }),
-  execute: async (ctx) => kbApi(ctx, "POST", API_PATH7, {}, buildBody6(ctx))
+  execute: async (ctx) => kbApi(ctx, "POST", API_PATH8, {}, buildBody6(ctx))
 };
 
 // src/commands/te-kb/kb-index.ts
-var API_PATH8 = "/agent/api/external/knowledge-bases/index";
+var API_PATH9 = "/agent/api/external/knowledge-bases/index";
 function buildBody7(ctx) {
-  const body = {};
+  const body2 = {};
   const sources = ctx.json("sources");
-  if (sources) body.sources = sources;
+  if (sources) body2.sources = sources;
   const locale = ctx.str("locale");
-  if (locale) body.locale = locale;
-  return body;
+  if (locale) body2.locale = locale;
+  return body2;
 }
 var kbIndex = {
   service: "kb",
@@ -564,14 +812,14 @@ var kbIndex = {
   risk: "read",
   dryRun: (ctx) => ({
     method: "POST",
-    url: `${ctx.host().replace(/\/$/, "")}${API_PATH8}`,
+    url: `${ctx.host().replace(/\/$/, "")}${API_PATH9}`,
     body: buildBody7(ctx)
   }),
-  execute: async (ctx) => kbApi(ctx, "POST", API_PATH8, {}, buildBody7(ctx))
+  execute: async (ctx) => kbApi(ctx, "POST", API_PATH9, {}, buildBody7(ctx))
 };
 
 // src/commands/te-kb/kb-list.ts
-var API_PATH9 = "/agent/api/external/knowledge-bases/list";
+var API_PATH10 = "/agent/api/external/knowledge-bases/list";
 var DEFAULT_BUILD_STATUS = "compiled";
 var VALID_BUILD_STATUSES = ["idle", "pending", "compiling", "compiled", "failed"];
 function getBuildStatus(ctx) {
@@ -588,12 +836,12 @@ function validateBuildStatus(ctx) {
   }
 }
 function buildBody8(ctx) {
-  const body = {
+  const body2 = {
     buildStatus: getBuildStatus(ctx)
   };
   const locale = ctx.str("locale");
-  if (locale) body.locale = locale;
-  return body;
+  if (locale) body2.locale = locale;
+  return body2;
 }
 var kbList = {
   service: "kb",
@@ -615,20 +863,20 @@ var kbList = {
   },
   dryRun: (ctx) => ({
     method: "POST",
-    url: `${ctx.host().replace(/\/$/, "")}${API_PATH9}`,
+    url: `${ctx.host().replace(/\/$/, "")}${API_PATH10}`,
     body: buildBody8(ctx)
   }),
-  execute: async (ctx) => kbApi(ctx, "POST", API_PATH9, {}, buildBody8(ctx))
+  execute: async (ctx) => kbApi(ctx, "POST", API_PATH10, {}, buildBody8(ctx))
 };
 
 // src/commands/te-kb/list-sources.ts
-var API_PATH10 = "/agent/api/external/knowledge-bases/sources";
+var API_PATH11 = "/agent/api/external/knowledge-bases/sources";
 var MAX_KNOWLEDGE_BASE_NAME_LENGTH = 200;
 function knowledgeBaseName(ctx) {
   return ctx.str("name").trim();
 }
 function buildUrl(ctx) {
-  const url2 = new URL(`${ctx.host().replace(/\/$/, "")}${API_PATH10}`);
+  const url2 = new URL(`${ctx.host().replace(/\/$/, "")}${API_PATH11}`);
   url2.searchParams.set("name", knowledgeBaseName(ctx));
   const scope = getExternalKnowledgeBaseTargetScope(ctx);
   if (scope) url2.searchParams.set("scope", scope);
@@ -675,26 +923,26 @@ var listSources = {
     const params = { name: knowledgeBaseName(ctx) };
     const scope = getExternalKnowledgeBaseTargetScope(ctx);
     if (scope) params.scope = scope;
-    return kbApi(ctx, "GET", API_PATH10, params, void 0, {
+    return kbApi(ctx, "GET", API_PATH11, params, void 0, {
       preserveErrorMetadata: true,
-      retryUnauthorized: true
+      retryUnauthorized: false
     });
   }
 };
 
 // src/commands/te-kb/kb-grep.ts
-var API_PATH11 = "/agent/api/external/knowledge-bases/grep";
+var API_PATH12 = "/agent/api/external/knowledge-bases/grep";
 function buildBody9(ctx) {
-  const body = {
+  const body2 = {
     query: ctx.str("query"),
     sources: ctx.json("sources"),
     paths: ctx.json("paths")
   };
   const topK = ctx.optionalNum("top-k");
-  if (topK !== void 0) body.topK = topK;
+  if (topK !== void 0) body2.topK = topK;
   const locale = ctx.str("locale");
-  if (locale) body.locale = locale;
-  return body;
+  if (locale) body2.locale = locale;
+  return body2;
 }
 var kbGrep = {
   service: "kb",
@@ -726,14 +974,14 @@ var kbGrep = {
   risk: "read",
   dryRun: (ctx) => ({
     method: "POST",
-    url: `${ctx.host().replace(/\/$/, "")}${API_PATH11}`,
+    url: `${ctx.host().replace(/\/$/, "")}${API_PATH12}`,
     body: buildBody9(ctx)
   }),
-  execute: async (ctx) => kbApi(ctx, "POST", API_PATH11, {}, buildBody9(ctx))
+  execute: async (ctx) => kbApi(ctx, "POST", API_PATH12, {}, buildBody9(ctx))
 };
 
 // src/commands/te-kb/kb-read.ts
-var API_PATH12 = "/agent/api/external/knowledge-bases/read";
+var API_PATH13 = "/agent/api/external/knowledge-bases/read";
 var VALID_EXPAND_MODES = /* @__PURE__ */ new Set(["block", "none"]);
 var MAX_READ_LIMIT = 2e3;
 function readExpand(ctx) {
@@ -757,20 +1005,20 @@ function readLimit(ctx) {
   return limit;
 }
 function buildBody10(ctx) {
-  const body = {
+  const body2 = {
     source: ctx.json("source"),
     path: ctx.str("path")
   };
   const offset = ctx.optionalNum("offset");
-  if (offset !== void 0) body.offset = offset;
+  if (offset !== void 0) body2.offset = offset;
   const limit = ctx.optionalNum("limit");
-  if (limit !== void 0) body.limit = limit;
+  if (limit !== void 0) body2.limit = limit;
   const expand = readExpand(ctx);
-  if (expand) body.expand = expand;
-  if (ctx.bool("outline")) body.outline = true;
+  if (expand) body2.expand = expand;
+  if (ctx.bool("outline")) body2.outline = true;
   const locale = ctx.str("locale");
-  if (locale) body.locale = locale;
-  return body;
+  if (locale) body2.locale = locale;
+  return body2;
 }
 var kbRead = {
   service: "kb",
@@ -811,10 +1059,10 @@ var kbRead = {
   },
   dryRun: (ctx) => ({
     method: "POST",
-    url: `${ctx.host().replace(/\/$/, "")}${API_PATH12}`,
+    url: `${ctx.host().replace(/\/$/, "")}${API_PATH13}`,
     body: buildBody10(ctx)
   }),
-  execute: async (ctx) => kbApi(ctx, "POST", API_PATH12, {}, buildBody10(ctx))
+  execute: async (ctx) => kbApi(ctx, "POST", API_PATH13, {}, buildBody10(ctx))
 };
 
 // src/commands/te-kb/ask-shared.ts
@@ -895,16 +1143,16 @@ function validateLocale(locale) {
   }
 }
 function buildBody11(ctx) {
-  const body = {
+  const body2 = {
     question: ctx.str("question")
   };
   const sources = ctx.json("sources");
-  if (sources) body.sources = sources;
+  if (sources) body2.sources = sources;
   const modelId = ctx.str("model-id");
-  if (modelId) body.modelId = modelId;
+  if (modelId) body2.modelId = modelId;
   const locale = ctx.str("locale");
-  if (locale) body.locale = locale;
-  return body;
+  if (locale) body2.locale = locale;
+  return body2;
 }
 var ask = {
   service: "kb",
@@ -1024,24 +1272,24 @@ var askStatus = {
 };
 
 // src/commands/te-kb/url.ts
-var API_PATH13 = "/agent/api/external/knowledge-bases/sources/url";
+var API_PATH14 = "/agent/api/external/knowledge-bases/sources/url";
 function validateUrl(url2) {
   if (!/^https?:\/\//i.test(url2)) {
     throw new Error(`Invalid --url: ${url2}. Must be an http(s) URL`);
   }
 }
 function buildBody12(ctx) {
-  const body = {
+  const body2 = {
     name: ctx.str("name"),
     url: ctx.str("url")
   };
   const scope = getExternalKnowledgeBaseTargetScope(ctx);
-  if (scope) body.scope = scope;
+  if (scope) body2.scope = scope;
   const displayName = ctx.str("display-name");
-  if (displayName) body.displayName = displayName;
+  if (displayName) body2.displayName = displayName;
   const parseInstruction = ctx.str("parse-instruction");
-  if (parseInstruction) body.parseInstruction = parseInstruction;
-  return body;
+  if (parseInstruction) body2.parseInstruction = parseInstruction;
+  return body2;
 }
 var url = {
   service: "kb",
@@ -1061,16 +1309,16 @@ var url = {
   },
   dryRun: (ctx) => ({
     method: "POST",
-    url: `${ctx.host().replace(/\/$/, "")}${API_PATH13}`,
+    url: `${ctx.host().replace(/\/$/, "")}${API_PATH14}`,
     body: buildBody12(ctx)
   }),
-  execute: async (ctx) => kbApi(ctx, "POST", API_PATH13, {}, buildBody12(ctx))
+  execute: async (ctx) => kbApi(ctx, "POST", API_PATH14, {}, buildBody12(ctx))
 };
 
 // src/commands/te-kb/import.ts
-import { promises as fs2 } from "fs";
-import path2 from "path";
-var API_PATH14 = "/agent/api/external/knowledge-bases/import";
+import { promises as fs4 } from "fs";
+import path4 from "path";
+var API_PATH15 = "/agent/api/external/knowledge-bases/import";
 var MAX_SNAPSHOT_ARCHIVE_BYTES = 50 * 1024 * 1024;
 var VALID_SCOPES2 = /* @__PURE__ */ new Set(["personal", "company"]);
 function getScope2(ctx) {
@@ -1106,16 +1354,16 @@ function normalizeTags2(raw) {
   return tags;
 }
 function validateArchivePath(filePath) {
-  if (path2.extname(filePath).toLocaleLowerCase("en-US") !== ".zip") {
+  if (path4.extname(filePath).toLocaleLowerCase("en-US") !== ".zip") {
     throw new Error("--file must point to a .zip archive");
   }
 }
 async function readArchive(filePath) {
   validateArchivePath(filePath);
-  const absolutePath = path2.resolve(filePath);
+  const absolutePath = path4.resolve(filePath);
   let stat;
   try {
-    stat = await fs2.stat(absolutePath);
+    stat = await fs4.stat(absolutePath);
   } catch {
     throw new Error(`File not found: ${filePath}`);
   }
@@ -1125,7 +1373,7 @@ async function readArchive(filePath) {
   if (stat.size > MAX_SNAPSHOT_ARCHIVE_BYTES) {
     throw new Error("--file must not exceed 50 MB");
   }
-  return { absolutePath, bytes: await fs2.readFile(absolutePath) };
+  return { absolutePath, bytes: await fs4.readFile(absolutePath) };
 }
 function appendOptionalFields(ctx, form) {
   const description = ctx.str("description").trim();
@@ -1192,7 +1440,7 @@ var importSnapshot = {
     form.append(
       "file",
       new Blob([Uint8Array.from(archive.bytes)], { type: "application/zip" }),
-      path2.basename(archive.absolutePath)
+      path4.basename(archive.absolutePath)
     );
     form.append("name", ctx.str("name").trim());
     form.append("scope", getScope2(ctx));
@@ -1200,7 +1448,7 @@ var importSnapshot = {
     try {
       return await kbUpload(
         ctx,
-        API_PATH14,
+        API_PATH15,
         form,
         { scope: getScope2(ctx) },
         { preserveErrorMetadata: true, retryUnauthorized: true }
@@ -1229,7 +1477,7 @@ var importSnapshot = {
 };
 
 // src/commands/te-kb/import-status.ts
-var API_PATH15 = "/agent/api/external/knowledge-bases/import";
+var API_PATH16 = "/agent/api/external/knowledge-bases/import";
 var MAX_REQUEST_ID_LENGTH = 191;
 function requestIdFrom(ctx) {
   return ctx.str("request-id").trim();
@@ -1260,7 +1508,7 @@ var importStatus = {
   },
   dryRun: (ctx) => ({
     method: "GET",
-    url: `${ctx.host().replace(/\/$/, "")}${API_PATH15}?requestId=${encodeURIComponent(requestIdFrom(ctx))}`
+    url: `${ctx.host().replace(/\/$/, "")}${API_PATH16}?requestId=${encodeURIComponent(requestIdFrom(ctx))}`
   }),
   execute: async (ctx) => {
     const hint = "Verify the request ID and that the server supports kb +import-status. Do not retry the import until its status is known.";
@@ -1268,10 +1516,10 @@ var importStatus = {
       return await kbApi(
         ctx,
         "GET",
-        API_PATH15,
+        API_PATH16,
         { requestId: requestIdFrom(ctx) },
         void 0,
-        { preserveErrorMetadata: true }
+        { preserveErrorMetadata: true, retryUnauthorized: true }
       );
     } catch (error) {
       if (error instanceof PermissionError) {
@@ -1299,23 +1547,23 @@ var importStatus = {
 };
 
 // src/commands/te-kb/source-directory.ts
-import { promises as fs3 } from "fs";
-import path3 from "path";
+import { promises as fs5 } from "fs";
+import path5 from "path";
 var sourceFlags = [
   { name: "name", type: "string", required: true, desc: "Knowledge base name (personal then company)" },
   { name: "id", type: "string", required: true, desc: "ZIP source ID copied from +list-sources" }
 ];
 var pathFlag = { name: "path", type: "string", required: true, desc: "Exact path relative to the ZIP source root" };
-var revisionFlag = {
+var revisionFlag2 = {
   name: "expected-revision",
   type: "number",
   required: true,
   min: 1,
   desc: "Revision returned by +source-ls; a conflict requires a fresh read and explicit retry"
 };
-var apiOptions = { preserveErrorMetadata: true, retryUnauthorized: true };
+var apiOptions2 = { preserveErrorMetadata: true, retryUnauthorized: false };
 var maxFileBytes = 50 * 1024 * 1024;
-function validateIdentity(ctx) {
+function validateIdentity2(ctx) {
   for (const [flag, max] of [["name", 200], ["id", 191]]) {
     const value = ctx.str(flag).trim();
     if (!value || value.length > max) throw new CliValidationError(`Invalid --${flag}.`);
@@ -1329,8 +1577,8 @@ function relativePath(ctx, allowRoot = false) {
   }
   return value;
 }
-function validateMutation(ctx) {
-  validateIdentity(ctx);
+function validateMutation2(ctx) {
+  validateIdentity2(ctx);
   relativePath(ctx);
   if (!Number.isSafeInteger(ctx.num("expected-revision")) || ctx.num("expected-revision") < 1) {
     throw new CliValidationError("--expected-revision must be a positive safe integer.");
@@ -1339,11 +1587,11 @@ function validateMutation(ctx) {
 function endpoint(ctx, suffix = "directory") {
   return `/agent/api/external/knowledge-bases/sources/${encodeURIComponent(ctx.str("id").trim())}/${suffix}`;
 }
-function query(ctx) {
+function query2(ctx) {
   return { name: ctx.str("name").trim(), path: ctx.str("path") };
 }
-function preview(ctx, method, suffix = "directory", body) {
-  return { method, url: `${ctx.host().replace(/\/$/, "")}${endpoint(ctx, suffix)}`, ...body ? { body } : { params: query(ctx) } };
+function preview(ctx, method, suffix = "directory", body2) {
+  return { method, url: `${ctx.host().replace(/\/$/, "")}${endpoint(ctx, suffix)}`, ...body2 ? { body: body2 } : { params: query2(ctx) } };
 }
 function mutationBody(ctx, operation) {
   return { name: ctx.str("name").trim(), expectedRevision: ctx.num("expected-revision"), operations: [operation] };
@@ -1360,18 +1608,18 @@ var sourceLs = {
     { name: "limit", type: "number", default: 100, min: 1, max: 200, desc: "Page size (1-200)" }
   ],
   validate: (ctx) => {
-    validateIdentity(ctx);
+    validateIdentity2(ctx);
     relativePath(ctx, true);
     if (!Number.isInteger(ctx.num("limit")) || ctx.num("limit") < 1 || ctx.num("limit") > 200) {
       throw new CliValidationError("--limit must be an integer from 1 to 200.");
     }
   },
-  dryRun: (ctx) => ({ ...preview(ctx, "GET"), params: { ...query(ctx), limit: ctx.num("limit"), ...ctx.str("cursor") ? { cursor: ctx.str("cursor") } : {} } }),
+  dryRun: (ctx) => ({ ...preview(ctx, "GET"), params: { ...query2(ctx), limit: ctx.num("limit"), ...ctx.str("cursor") ? { cursor: ctx.str("cursor") } : {} } }),
   execute: (ctx) => kbApi(ctx, "GET", endpoint(ctx), {
-    ...query(ctx),
+    ...query2(ctx),
     limit: ctx.num("limit"),
     ...ctx.str("cursor") ? { cursor: ctx.str("cursor") } : {}
-  }, void 0, apiOptions)
+  }, void 0, apiOptions2)
 };
 var sourceRead = {
   service: "kb",
@@ -1385,18 +1633,18 @@ var sourceRead = {
     { name: "output", type: "string", desc: "Save original bytes to this local path; existing files are never overwritten" }
   ],
   validate: (ctx) => {
-    validateIdentity(ctx);
+    validateIdentity2(ctx);
     relativePath(ctx);
     if (!["utf8", "base64"].includes(ctx.str("encoding"))) throw new CliValidationError("--encoding must be utf8 or base64.");
   },
   dryRun: (ctx) => preview(ctx, "GET", "raw"),
   execute: async (ctx) => {
-    const result = await kbApi(ctx, "GET", endpoint(ctx, "raw"), query(ctx), void 0, { ...apiOptions, responseType: "bytes" });
+    const result = await kbApi(ctx, "GET", endpoint(ctx, "raw"), query2(ctx), void 0, { ...apiOptions2, responseType: "bytes" });
     const bytes = Buffer.from(result.bytes);
     const metadata = { path: ctx.str("path"), sizeBytes: bytes.length, contentType: result.contentType };
     if (ctx.str("output")) {
-      const output = path3.resolve(ctx.str("output"));
-      await fs3.writeFile(output, bytes, { flag: "wx" });
+      const output = path5.resolve(ctx.str("output"));
+      await fs5.writeFile(output, bytes, { flag: "wx" });
       return { ...metadata, output };
     }
     if (ctx.str("encoding") === "base64") return { ...metadata, encoding: "base64", content: bytes.toString("base64") };
@@ -1408,8 +1656,8 @@ var sourceRead = {
   }
 };
 async function fileOperation(ctx, dryRun) {
-  const file = path3.resolve(ctx.str("file"));
-  const handle = await fs3.open(file, "r");
+  const file = path5.resolve(ctx.str("file"));
+  const handle = await fs5.open(file, "r");
   try {
     const stat = await handle.stat();
     if (!stat.isFile() || stat.size > maxFileBytes) throw new CliValidationError("--file must be a regular file of at most 50 MB.");
@@ -1434,17 +1682,17 @@ var sourcePut = {
   flags: [
     ...sourceFlags,
     pathFlag,
-    revisionFlag,
+    revisionFlag2,
     { name: "file", type: "string", required: true, desc: "Local file to upload (at most 50 MB)" },
     { name: "action", type: "string", default: "add", desc: "add rejects an existing path; replace explicitly overwrites an existing file" }
   ],
   validate: (ctx) => {
-    validateMutation(ctx);
+    validateMutation2(ctx);
     if (!ctx.str("file").trim()) throw new CliValidationError("--file must be non-empty.");
     if (!["add", "replace"].includes(ctx.str("action"))) throw new CliValidationError("--action must be add or replace.");
   },
   dryRun: async (ctx) => preview(ctx, "POST", "directory", mutationBody(ctx, await fileOperation(ctx, true))),
-  execute: async (ctx) => kbApi(ctx, "POST", endpoint(ctx), {}, mutationBody(ctx, await fileOperation(ctx, false)), apiOptions)
+  execute: async (ctx) => kbApi(ctx, "POST", endpoint(ctx), {}, mutationBody(ctx, await fileOperation(ctx, false)), apiOptions2)
 };
 function deleteOperation(ctx) {
   return { action: "delete", path: ctx.str("path"), confirmed: true, ...ctx.bool("recursive") ? { recursive: true } : {} };
@@ -1457,19 +1705,19 @@ var sourceRm = {
   flags: [
     ...sourceFlags,
     pathFlag,
-    revisionFlag,
+    revisionFlag2,
     { name: "recursive", type: "boolean", desc: "Explicitly allow recursive directory deletion" }
   ],
-  validate: validateMutation,
+  validate: validateMutation2,
   dryRun: (ctx) => preview(ctx, "POST", "directory", mutationBody(ctx, deleteOperation(ctx))),
-  execute: (ctx) => kbApi(ctx, "POST", endpoint(ctx), {}, mutationBody(ctx, deleteOperation(ctx)), apiOptions)
+  execute: (ctx) => kbApi(ctx, "POST", endpoint(ctx), {}, mutationBody(ctx, deleteOperation(ctx)), apiOptions2)
 };
 
 // src/commands/te-kb/version-management.ts
-import { promises as fs4 } from "fs";
-import path4 from "path";
-var API = "/agent/api/external/knowledge-bases/versions";
-var apiOptions2 = { preserveErrorMetadata: true, retryUnauthorized: true };
+import { promises as fs6 } from "fs";
+import path6 from "path";
+var API2 = "/agent/api/external/knowledge-bases/versions";
+var apiOptions3 = { preserveErrorMetadata: true, retryUnauthorized: false };
 var targetFlags = [
   { name: "name", type: "string", required: true, minLength: 1, maxLength: 200, desc: "Exact knowledge base name copied from +list" },
   { name: "scope", type: "string", desc: "Exact personal or company scope; omit for personal then company lookup" }
@@ -1481,7 +1729,7 @@ var pagingFlags = [
   { name: "limit", type: "number", default: 100, min: 1, max: 200, desc: "Page size from 1 to 200" }
 ];
 var pathFlag2 = { name: "path", type: "string", desc: "Exact path relative to the historical source directory" };
-function positiveInteger(ctx, flag) {
+function positiveInteger2(ctx, flag) {
   const value = ctx.num(flag);
   if (!Number.isSafeInteger(value) || value < 1 || value > 2147483647) throw new CliValidationError(`--${flag} must be a positive integer no greater than 2147483647.`);
   return value;
@@ -1493,7 +1741,7 @@ function validateTarget(ctx) {
 }
 function validateVersion(ctx) {
   validateTarget(ctx);
-  positiveInteger(ctx, "version");
+  positiveInteger2(ctx, "version");
 }
 function validateSource(ctx) {
   validateVersion(ctx);
@@ -1512,21 +1760,21 @@ function validatePath(ctx, required = false) {
     throw new CliValidationError("--path must be a normalized relative path inside the historical source.");
   }
 }
-function query2(ctx) {
+function query3(ctx) {
   const scope = getExternalKnowledgeBaseTargetScope(ctx);
   return { name: ctx.str("name").trim(), ...scope ? { scope } : {} };
 }
 function pageQuery(ctx) {
-  return { ...query2(ctx), limit: ctx.num("limit"), ...ctx.str("cursor") ? { cursor: ctx.str("cursor") } : {} };
+  return { ...query3(ctx), limit: ctx.num("limit"), ...ctx.str("cursor") ? { cursor: ctx.str("cursor") } : {} };
 }
 function versionEndpoint(ctx, suffix = "") {
-  return `${API}/${positiveInteger(ctx, "version")}${suffix}`;
+  return `${API2}/${positiveInteger2(ctx, "version")}${suffix}`;
 }
-function sourceEndpoint(ctx, action) {
+function sourceEndpoint2(ctx, action) {
   return versionEndpoint(ctx, `/sources/${encodeURIComponent(ctx.str("id").trim())}/${action}`);
 }
-function preview2(ctx, endpoint2, params, body) {
-  return { method: body ? "POST" : "GET", url: `${ctx.host().replace(/\/$/, "")}${endpoint2}`, params, ...body ? { body } : {} };
+function preview2(ctx, endpoint2, params, body2) {
+  return { method: body2 ? "POST" : "GET", url: `${ctx.host().replace(/\/$/, "")}${endpoint2}`, params, ...body2 ? { body: body2 } : {} };
 }
 var versions = {
   service: "kb",
@@ -1539,8 +1787,8 @@ var versions = {
     validatePage(ctx);
     if (ctx.str("cursor") && (!/^[1-9][0-9]*$/.test(ctx.str("cursor")) || Number(ctx.str("cursor")) > 2147483647)) throw new CliValidationError("--cursor must be a version number returned as nextCursor.");
   },
-  dryRun: (ctx) => preview2(ctx, API, pageQuery(ctx)),
-  execute: (ctx) => kbApi(ctx, "GET", API, pageQuery(ctx), void 0, apiOptions2)
+  dryRun: (ctx) => preview2(ctx, API2, pageQuery(ctx)),
+  execute: (ctx) => kbApi(ctx, "GET", API2, pageQuery(ctx), void 0, apiOptions3)
 };
 var versionShow = {
   service: "kb",
@@ -1549,8 +1797,8 @@ var versionShow = {
   description: "Read one published version summary without reading current sources.",
   flags: [...targetFlags, versionFlag],
   validate: validateVersion,
-  dryRun: (ctx) => preview2(ctx, versionEndpoint(ctx), query2(ctx)),
-  execute: (ctx) => kbApi(ctx, "GET", versionEndpoint(ctx), query2(ctx), void 0, apiOptions2)
+  dryRun: (ctx) => preview2(ctx, versionEndpoint(ctx), query3(ctx)),
+  execute: (ctx) => kbApi(ctx, "GET", versionEndpoint(ctx), query3(ctx), void 0, apiOptions3)
 };
 var versionSources = {
   service: "kb",
@@ -1564,7 +1812,7 @@ var versionSources = {
     if (ctx.str("source-type") && !["file", "url", "zip"].includes(ctx.str("source-type"))) throw new CliValidationError("--source-type must be file, url, or zip.");
   },
   dryRun: (ctx) => preview2(ctx, versionEndpoint(ctx, "/sources"), { ...pageQuery(ctx), ...ctx.str("source-type") ? { sourceType: ctx.str("source-type") } : {} }),
-  execute: (ctx) => kbApi(ctx, "GET", versionEndpoint(ctx, "/sources"), { ...pageQuery(ctx), ...ctx.str("source-type") ? { sourceType: ctx.str("source-type") } : {} }, void 0, apiOptions2)
+  execute: (ctx) => kbApi(ctx, "GET", versionEndpoint(ctx, "/sources"), { ...pageQuery(ctx), ...ctx.str("source-type") ? { sourceType: ctx.str("source-type") } : {} }, void 0, apiOptions3)
 };
 var versionDiff = {
   service: "kb",
@@ -1574,11 +1822,11 @@ var versionDiff = {
   flags: [...targetFlags, { ...versionFlag, name: "from", desc: "Before version number" }, { ...versionFlag, name: "to", desc: "After version number" }],
   validate: (ctx) => {
     validateTarget(ctx);
-    positiveInteger(ctx, "from");
-    positiveInteger(ctx, "to");
+    positiveInteger2(ctx, "from");
+    positiveInteger2(ctx, "to");
   },
-  dryRun: (ctx) => preview2(ctx, `${API}/compare`, { ...query2(ctx), from: ctx.num("from"), to: ctx.num("to") }),
-  execute: (ctx) => kbApi(ctx, "GET", `${API}/compare`, { ...query2(ctx), from: ctx.num("from"), to: ctx.num("to") }, void 0, apiOptions2)
+  dryRun: (ctx) => preview2(ctx, `${API2}/compare`, { ...query3(ctx), from: ctx.num("from"), to: ctx.num("to") }),
+  execute: (ctx) => kbApi(ctx, "GET", `${API2}/compare`, { ...query3(ctx), from: ctx.num("from"), to: ctx.num("to") }, void 0, apiOptions3)
 };
 var versionTree = {
   service: "kb",
@@ -1591,8 +1839,8 @@ var versionTree = {
     validatePath(ctx);
     validatePage(ctx);
   },
-  dryRun: (ctx) => preview2(ctx, sourceEndpoint(ctx, "tree"), { ...pageQuery(ctx), path: ctx.str("path") }),
-  execute: (ctx) => kbApi(ctx, "GET", sourceEndpoint(ctx, "tree"), { ...pageQuery(ctx), path: ctx.str("path") }, void 0, apiOptions2)
+  dryRun: (ctx) => preview2(ctx, sourceEndpoint2(ctx, "tree"), { ...pageQuery(ctx), path: ctx.str("path") }),
+  execute: (ctx) => kbApi(ctx, "GET", sourceEndpoint2(ctx, "tree"), { ...pageQuery(ctx), path: ctx.str("path") }, void 0, apiOptions3)
 };
 var versionRead = {
   service: "kb",
@@ -1604,8 +1852,8 @@ var versionRead = {
     validateSource(ctx);
     validatePath(ctx, true);
   },
-  dryRun: (ctx) => preview2(ctx, sourceEndpoint(ctx, "file"), { ...query2(ctx), path: ctx.str("path") }),
-  execute: (ctx) => kbApi(ctx, "GET", sourceEndpoint(ctx, "file"), { ...query2(ctx), path: ctx.str("path") }, void 0, apiOptions2)
+  dryRun: (ctx) => preview2(ctx, sourceEndpoint2(ctx, "file"), { ...query3(ctx), path: ctx.str("path") }),
+  execute: (ctx) => kbApi(ctx, "GET", sourceEndpoint2(ctx, "file"), { ...query3(ctx), path: ctx.str("path") }, void 0, apiOptions3)
 };
 var versionDownload = {
   service: "kb",
@@ -1617,12 +1865,12 @@ var versionDownload = {
     validateSource(ctx);
     if (!ctx.str("output").trim()) throw new CliValidationError("--output is required.");
   },
-  dryRun: (ctx) => ({ ...preview2(ctx, sourceEndpoint(ctx, "raw"), query2(ctx)), output: path4.resolve(ctx.str("output")) }),
+  dryRun: (ctx) => ({ ...preview2(ctx, sourceEndpoint2(ctx, "raw"), query3(ctx)), output: path6.resolve(ctx.str("output")) }),
   execute: async (ctx) => {
-    const result = await kbApi(ctx, "GET", sourceEndpoint(ctx, "raw"), query2(ctx), void 0, { ...apiOptions2, responseType: "bytes" });
-    const output = path4.resolve(ctx.str("output"));
+    const result = await kbApi(ctx, "GET", sourceEndpoint2(ctx, "raw"), query3(ctx), void 0, { ...apiOptions3, responseType: "bytes" });
+    const output = path6.resolve(ctx.str("output"));
     const bytes = Buffer.from(result.bytes);
-    await fs4.writeFile(output, bytes, { flag: "wx" });
+    await fs6.writeFile(output, bytes, { flag: "wx" });
     return { versionNumber: ctx.num("version"), sourceId: ctx.str("id").trim(), sizeBytes: String(bytes.length), output };
   }
 };
@@ -1646,8 +1894,8 @@ var rollback = {
     const latest = ctx.str("expected-latest-version-id");
     if (!latest || latest.length > 191) throw new CliValidationError("--expected-latest-version-id must contain 1 to 191 characters.");
   },
-  dryRun: (ctx) => preview2(ctx, versionEndpoint(ctx, "/rollback"), query2(ctx), rollbackBody(ctx)),
-  execute: (ctx) => kbApi(ctx, "POST", versionEndpoint(ctx, "/rollback"), query2(ctx), rollbackBody(ctx), apiOptions2)
+  dryRun: (ctx) => preview2(ctx, versionEndpoint(ctx, "/rollback"), query3(ctx), rollbackBody(ctx)),
+  execute: (ctx) => kbApi(ctx, "POST", versionEndpoint(ctx, "/rollback"), query3(ctx), rollbackBody(ctx), apiOptions3)
 };
 var rollbackStatus = {
   service: "kb",
@@ -1659,12 +1907,18 @@ var rollbackStatus = {
     validateTarget(ctx);
     if (!ctx.str("operation-id").trim() || ctx.str("operation-id").length > 191) throw new CliValidationError("--operation-id must contain 1 to 191 characters.");
   },
-  dryRun: (ctx) => preview2(ctx, `${API}/operations/${encodeURIComponent(ctx.str("operation-id").trim())}`, query2(ctx)),
-  execute: (ctx) => kbApi(ctx, "GET", `${API}/operations/${encodeURIComponent(ctx.str("operation-id").trim())}`, query2(ctx), void 0, apiOptions2)
+  dryRun: (ctx) => preview2(ctx, `${API2}/operations/${encodeURIComponent(ctx.str("operation-id").trim())}`, query3(ctx)),
+  execute: (ctx) => kbApi(ctx, "GET", `${API2}/operations/${encodeURIComponent(ctx.str("operation-id").trim())}`, query3(ctx), void 0, apiOptions3)
 };
 
 // src/commands/te-kb/index.ts
 var commands = [
+  sourceCheckUpdates,
+  sourceReplace,
+  sourceRestore,
+  sourcePreview,
+  sourceCommit,
+  sourceCancel,
   versions,
   versionShow,
   versionSources,
@@ -1716,9 +1970,15 @@ export {
   rollback,
   rollbackStatus,
   schema,
+  sourceCancel,
+  sourceCheckUpdates,
+  sourceCommit,
   sourceLs,
+  sourcePreview,
   sourcePut,
   sourceRead,
+  sourceReplace,
+  sourceRestore,
   sourceRm,
   status,
   url,