@thinkingai/ae-cli 6.1.27 → 6.1.28

package/dist/chunk-JJJIP2XQ.js

@@ -0,0 +1,105 @@
+import { createRequire as __createRequire } from 'node:module'; const require = __createRequire(import.meta.url);
+import {
+  TeAgentApiError,
+  deleteFromMainApp,
+  fetchSigned,
+  getBufferFromMainApp,
+  getFromMainApp,
+  parseResponse,
+  patchToMainApp,
+  postToMainApp,
+  putToMainApp,
+  uploadToMainApp
+} from "./chunk-2UWS5CUP.js";
+import {
+  clearCliTokenCache
+} from "./chunk-P7KL7IOH.js";
+
+// src/core/resource-package-client.ts
+function checkPath(path) {
+  if (!path.startsWith("/api/resource-packages/")) {
+    throw new TypeError("Resource package requests must use /api/resource-packages/");
+  }
+}
+async function fetchResourcePackage(input) {
+  const request = () => fetchSigned({ ...input, hostOverride: input.host });
+  let response = await request();
+  if (response.status === 401) {
+    await response.body?.cancel();
+    clearCliTokenCache(input.host);
+    response = await request();
+  }
+  return response;
+}
+async function resourcePackageJson(input) {
+  checkPath(input.path);
+  const response = await fetchResourcePackage({
+    method: input.method,
+    path: input.path,
+    host: input.host,
+    includeJsonContentType: true,
+    body: input.body === void 0 ? void 0 : JSON.stringify(input.body)
+  });
+  return parseResponse(response, "Resource package service returned");
+}
+async function resourcePackageRaw(input) {
+  checkPath(input.path);
+  const response = await fetchResourcePackage({
+    ...input,
+    includeJsonContentType: false
+  });
+  if (!response.ok) await parseResponse(response, "Resource package service returned");
+  return response;
+}
+
+// src/commands/te-agent/api-client.ts
+function getAgentApi(ctx, path) {
+  return getFromMainApp(path, ctx.host());
+}
+function postAgentApi(ctx, path, body) {
+  return postToMainApp(path, body, ctx.host());
+}
+function patchAgentApi(ctx, path, body) {
+  return patchToMainApp(path, body, ctx.host());
+}
+function putAgentApi(ctx, path, body) {
+  return putToMainApp(path, body, ctx.host());
+}
+function deleteAgentApi(ctx, path) {
+  return deleteFromMainApp(path, ctx.host());
+}
+function uploadAgentApi(ctx, path, formData) {
+  return uploadToMainApp(path, formData, ctx.host());
+}
+function getAgentBuffer(ctx, path) {
+  return getBufferFromMainApp(path, ctx.host());
+}
+function requestResourcePackageApi(ctx, method, path, body) {
+  return resourcePackageJson({ host: ctx.host(), method, path, body });
+}
+function requestResourcePackageRaw(ctx, method, path, options = {}) {
+  return resourcePackageRaw({ host: ctx.host(), method, path, ...options });
+}
+function isTransientResourcePackageError(error) {
+  return error instanceof TeAgentApiError && (error.status === 0 || error.status === 429 || error.status >= 500);
+}
+function resourcePackagePreflightChange(error) {
+  if (!(error instanceof TeAgentApiError) || error.code !== "PREFLIGHT_CHANGED") return void 0;
+  const body = error.body;
+  if (!body || typeof body !== "object" || !("preflight" in body)) return void 0;
+  return body.preflight;
+}
+
+export {
+  getAgentApi,
+  postAgentApi,
+  patchAgentApi,
+  putAgentApi,
+  deleteAgentApi,
+  uploadAgentApi,
+  getAgentBuffer,
+  requestResourcePackageApi,
+  requestResourcePackageRaw,
+  isTransientResourcePackageError,
+  resourcePackagePreflightChange
+};

package/dist/{chunk-5XJYLEVC.js → chunk-KHS64JZQ.js}

@@ -1,20 +1,20 @@
 import { createRequire as __createRequire } from 'node:module'; const require = __createRequire(import.meta.url);
 import {
   require_lib
-} from "./chunk-CT7QDJS6.js";
+} from "./chunk-2IYIYSUO.js";
 import {
   require_archiver,
   require_string_decoder
-} from "./chunk-AP7YP2NX.js";
+} from "./chunk-QSAR3GHY.js";
 import {
   require_inherits,
   require_node
-} from "./chunk-S6M42KND.js";
+} from "./chunk-T44M3PLZ.js";
 import {
   __commonJS,
   __require,
   __toESM
-} from "./chunk-WNGFSIOB.js";
+} from "./chunk-ZW4VMY5H.js";
 
 // node_modules/exceljs/lib/utils/under-dash.js
 var require_under_dash = __commonJS({

package/dist/{chunk-ZL7SGNIA.js → chunk-LMCYSVVA.js}

@@ -1,16 +1,9 @@
 import { createRequire as __createRequire } from 'node:module'; const require = __createRequire(import.meta.url);
 import {
-  logger
-} from "./chunk-WNGFSIOB.js";
-
-// src/core/url-utils.ts
-function normalizeUrl(url) {
-  if (!url) return url;
-  if (!url.startsWith("http://") && !url.startsWith("https://")) {
-    url = `https://${url}`;
-  }
-  return url.replace(/\/$/, "");
-}
+  logger,
+  normalizeUrl,
+  readExternalCliToken
+} from "./chunk-ZW4VMY5H.js";
 
 // src/core/config.ts
 import fs3 from "fs";
@@ -93,6 +86,10 @@ function isAeSandboxRuntime() {
 var CONFIG_DIR = path.join(process.env.HOME || os.homedir(), ".ae-cli");
 var CONFIG_FILE = path.join(CONFIG_DIR, "config.json");
 function sandboxCliTokenCandidatePaths() {
+  if (process.env.TE_AGENT_CLI_CONFIG_DIR !== void 0) {
+    const directory = process.env.TE_AGENT_CLI_CONFIG_DIR;
+    return path.isAbsolute(directory) ? [path.join(directory, "cli-token.json")] : [];
+  }
   const paths = [getSandboxCliTokenFilePath()];
   const homeFallback = path.join(process.env.HOME || os.homedir(), ".ae-config", "cli-token.json");
   if (!paths.includes(homeFallback)) {
@@ -108,7 +105,7 @@ function readSandboxCliTokenEntry() {
       if (data && typeof data === "object" && !Array.isArray(data)) {
         const url = data.url;
         const token = data.token ?? data["cli-token"];
-        if (url && token) {
+        if (typeof url === "string" && url && typeof token === "string" && token) {
           return { url, token };
         }
       }
@@ -196,6 +193,8 @@ function saveConfig(config) {
   logger.info(`Config saved: activeHost=${config.activeHost}, hosts=${Object.keys(config.hosts).length}`);
 }
 function getActiveHost() {
+  const externalHost = readExternalCliToken()?.url;
+  if (externalHost) return externalHost;
   const sandboxHost = readSandboxCliTokenEntry()?.url;
   if (sandboxHost) return sandboxHost;
   const config = loadConfig();
@@ -281,7 +280,6 @@ function getConfigDir() {
 export {
   safeJsonParse,
   safeReadJsonFile,
-  normalizeUrl,
   getSandboxRuntimeRoot,
   isAeSandboxRuntime,
   readSandboxCliTokenEntry,

package/dist/{chunk-OP44TT4H.js → chunk-P6VFCH3P.js}

@@ -1,8 +1,10 @@
 import { createRequire as __createRequire } from 'node:module'; const require = __createRequire(import.meta.url);
 import {
-  getActiveHost,
+  getActiveHost
+} from "./chunk-LMCYSVVA.js";
+import {
   normalizeUrl
-} from "./chunk-ZL7SGNIA.js";
+} from "./chunk-ZW4VMY5H.js";
 
 // src/core/auth.ts
 function resolveHost(hostOverride) {

package/dist/{chunk-GHXZK54S.js → chunk-P7KL7IOH.js}

@@ -3,14 +3,17 @@ import {
   getActiveHost,
   getConfigDir,
   getFallbackCliToken,
-  normalizeUrl,
+  readSandboxCliTokenEntry,
   safeJsonParse,
   safeReadJsonFile
-} from "./chunk-ZL7SGNIA.js";
+} from "./chunk-LMCYSVVA.js";
 import {
   PermissionError,
-  logger
-} from "./chunk-WNGFSIOB.js";
+  externalCliTokenRequestOptions,
+  logger,
+  normalizeUrl,
+  readExternalCliToken
+} from "./chunk-ZW4VMY5H.js";
 
 // src/core/secure-store.ts
 import crypto from "crypto";
@@ -696,7 +699,8 @@ async function validateCliTokenOnServer(hostUrl, cliToken) {
   try {
     resp = await fetch(url, {
       method: "GET",
-      headers: { Accept: "application/json", "cli-token": cliToken }
+      headers: { Accept: "application/json", "cli-token": cliToken },
+      ...externalCliTokenRequestOptions(url)
     });
   } catch (error) {
     throw new CliTokenValidationUnavailableError(`Unable to validate CLI token for ${hostUrl}: ${error.message}`);
@@ -734,10 +738,14 @@ async function validateCliTokenOnServer(hostUrl, cliToken) {
     ...cliTokenExpiresAt ? { cliTokenExpiresAt } : {}
   };
 }
-async function renewCliTokenOnServer(hostUrl, cliToken) {
+async function renewCliTokenOnServer(hostUrl, cliToken, external = false) {
   const url = new URL(`${hostUrl.replace(/\/+$/, "")}${CLI_TOKEN_RENEW_PATH}`);
-  url.searchParams.set("cli-token", cliToken);
-  const resp = await fetch(url.toString(), { method: "GET", headers: { Accept: "application/json" } });
+  if (!external) url.searchParams.set("cli-token", cliToken);
+  const resp = await fetch(url.toString(), {
+    method: "GET",
+    headers: { Accept: "application/json", ...external ? { "cli-token": cliToken } : {} },
+    ...externalCliTokenRequestOptions(url.toString())
+  });
   const text = await resp.text();
   let data;
   try {
@@ -750,10 +758,10 @@ async function renewCliTokenOnServer(hostUrl, cliToken) {
     throw new Error(`CLI token renew error: ${data.return_message || "unknown"} (code: ${data.return_code})`);
   }
 }
-async function maybeRenewCliTokenDaily(hostUrl, cliToken) {
+async function maybeRenewCliTokenDaily(hostUrl, cliToken, external = false) {
   const key = renewKey(hostUrl, cliToken);
   const today = localRenewDate();
-  if (renewedLocalDate.get(key) === today || persistedRenewDate(hostUrl, cliToken) === today) {
+  if (renewedLocalDate.get(key) === today || !external && persistedRenewDate(hostUrl, cliToken) === today) {
     renewedLocalDate.set(key, today);
     return;
   }
@@ -761,11 +769,12 @@ async function maybeRenewCliTokenDaily(hostUrl, cliToken) {
   if (existing) return existing;
   const attempt = (async () => {
     try {
-      await renewCliTokenOnServer(hostUrl, cliToken);
-      markRenewSucceeded(hostUrl, cliToken, today);
+      await renewCliTokenOnServer(hostUrl, cliToken, external);
+      if (external) renewedLocalDate.set(key, today);
+      else markRenewSucceeded(hostUrl, cliToken, today);
       logger.info(`cli-token: renewed for ${normalizeUrl(hostUrl)} (local day ${today})`);
     } catch (error) {
-      logger.warn(`cli-token: renew failed for ${normalizeUrl(hostUrl)}: ${error?.message || error}; business call proceeds`);
+      logger.warn(`cli-token: renew failed for ${normalizeUrl(hostUrl)}${external ? "" : `: ${error?.message || error}`}; business call proceeds`);
     } finally {
       renewInFlight.delete(key);
     }
@@ -774,6 +783,9 @@ async function maybeRenewCliTokenDaily(hostUrl, cliToken) {
   await attempt;
 }
 function peekCliToken(hostOverride) {
+  const external = readExternalCliToken(hostOverride);
+  if (external) return external.token;
+  if (process.env.TE_AGENT_CLI_CONFIG_DIR !== void 0) return sessionCliToken(hostOverride);
   const hostUrl = hostOverride || getActiveHost();
   if (!hostUrl) return void 0;
   const normalizedHost = normalizeUrl(hostUrl);
@@ -791,6 +803,16 @@ function peekCliToken(hostOverride) {
   return cliTokenCache.get(normalizedHost) || getFallbackCliToken(normalizedHost) || void 0;
 }
 async function getCliToken(hostOverride) {
+  const external = readExternalCliToken(hostOverride);
+  if (external) {
+    await maybeRenewCliTokenDaily(external.url, external.token, true);
+    return external.token;
+  }
+  if (process.env.TE_AGENT_CLI_CONFIG_DIR !== void 0) {
+    const token2 = sessionCliToken(hostOverride);
+    if (!token2) throw new SecureStoreAuthError("Current session CLI credential is unavailable or does not match the requested host.");
+    return token2;
+  }
   const resolvedHost = hostOverride || getActiveHost();
   if (!resolvedHost) throw new SecureStoreAuthError("No AE host configured. Run: ae-cli auth login --host <url>");
   const hostUrl = normalizeUrl(resolvedHost);
@@ -803,6 +825,12 @@ async function getCliToken(hostOverride) {
   await maybeRenewCliTokenDaily(hostUrl, token);
   return token;
 }
+function sessionCliToken(hostOverride) {
+  const entry = readSandboxCliTokenEntry();
+  if (!entry?.token.startsWith("cli_")) return void 0;
+  if (hostOverride && normalizeUrl(entry.url) !== normalizeUrl(hostOverride)) return void 0;
+  return entry.token;
+}
 async function mintCliToken(hostUrl, accessToken) {
   logger.info(`Generating CLI token for ${hostUrl}`);
   const cliToken = await generateCliToken(hostUrl, accessToken);

package/dist/{chunk-AP7YP2NX.js → chunk-QSAR3GHY.js}

@@ -5,14 +5,14 @@ import {
   require_node,
   require_process_nextick_args,
   require_util
-} from "./chunk-S6M42KND.js";
+} from "./chunk-T44M3PLZ.js";
 import {
   __commonJS,
   __esm,
   __export,
   __require,
   __toCommonJS
-} from "./chunk-WNGFSIOB.js";
+} from "./chunk-ZW4VMY5H.js";
 
 // node_modules/readdir-glob/node_modules/minimatch/lib/path.js
 var require_path = __commonJS({

package/dist/{chunk-VZZNLV3I.js → chunk-QW3R6O7L.js}

@@ -6,13 +6,14 @@ import {
   SecureStoreAuthError,
   clearCliTokenCache,
   getCliToken
-} from "./chunk-GHXZK54S.js";
+} from "./chunk-P7KL7IOH.js";
 import {
   safeJsonParse
-} from "./chunk-ZL7SGNIA.js";
+} from "./chunk-LMCYSVVA.js";
 import {
-  PermissionError
-} from "./chunk-WNGFSIOB.js";
+  PermissionError,
+  externalCliTokenRequestOptions
+} from "./chunk-ZW4VMY5H.js";
 
 // src/core/cli-agent-context.ts
 import { readFileSync, statSync } from "fs";
@@ -306,7 +307,13 @@ async function permissionError(resp) {
   const body = safeJsonParse(await codeResponse.text());
   const error = isRecord(body?.error) ? body.error : void 0;
   const code = nonEmptyString(error?.code) ?? nonEmptyString(body?.code);
-  return new PermissionError(message, code);
+  return new PermissionError(
+    message,
+    code,
+    nonEmptyString(error?.hint) ?? nonEmptyString(body?.hint),
+    void 0,
+    isRecord(body?.meta) ? body.meta : void 0
+  );
 }
 function isInvalidCliTokenMessage(message) {
   return /\byour token is invalid\b/i.test(message) || /\bcli[-_\s]?token\b.*\binvalid\b/i.test(message) || /\binvalid\b.*\bcli[-_\s]?token\b/i.test(message);
@@ -402,11 +409,12 @@ async function requestOnce(url, method, token, body, accept = "application/json"
     headers["Content-Type"] = "application/json";
     init.body = JSON.stringify(includeClientContextInBody ? withCliAgentContextBody(body, agentContext) : body);
   }
-  return fetch(url, init);
+  return fetch(url, { ...init, ...externalCliTokenRequestOptions(url) });
 }
 async function requestMultipartOnce(url, token, form) {
   return fetch(url, {
     method: "POST",
+    ...externalCliTokenRequestOptions(url),
     headers: {
       "cli-token": token,
       "Accept": "application/json",

package/dist/{chunk-S6M42KND.js → chunk-T44M3PLZ.js}

@@ -2,7 +2,7 @@ import { createRequire as __createRequire } from 'node:module'; const require =
 import {
   __commonJS,
   __require
-} from "./chunk-WNGFSIOB.js";
+} from "./chunk-ZW4VMY5H.js";
 
 // node_modules/process-nextick-args/index.js
 var require_process_nextick_args = __commonJS({

package/dist/{chunk-AQJPNWZF.js → chunk-UF244C5C.js}

@@ -3,7 +3,7 @@ import {
   CapabilityGatewayError,
   fetchCapabilityGateway,
   requestCapabilityGateway
-} from "./chunk-VZZNLV3I.js";
+} from "./chunk-QW3R6O7L.js";
 import {
   resolveGatewayDomain
 } from "./chunk-KPQY44JQ.js";
@@ -11,10 +11,10 @@ import {
   readOutputMetadata,
   unwrapOutputData,
   withOutputMetadata
-} from "./chunk-6VNIR4AP.js";
+} from "./chunk-ELCR235M.js";
 import {
   PermissionError
-} from "./chunk-WNGFSIOB.js";
+} from "./chunk-ZW4VMY5H.js";
 
 // src/core/analysis-async-artifact.ts
 import { randomBytes } from "crypto";

package/dist/{chunk-MWIA43UJ.js → chunk-UJ7UPRXK.js}

@@ -3,16 +3,16 @@ import {
   dryRunCapability,
   executeCapabilityWithEnvelope,
   validateCapability
-} from "./chunk-VZZNLV3I.js";
+} from "./chunk-QW3R6O7L.js";
 import {
   resolveGatewayDomain
 } from "./chunk-KPQY44JQ.js";
 import {
   withOutputMetadata
-} from "./chunk-6VNIR4AP.js";
+} from "./chunk-ELCR235M.js";
 import {
   CliValidationError
-} from "./chunk-WNGFSIOB.js";
+} from "./chunk-ZW4VMY5H.js";
 
 // src/core/definition-intent.ts
 import { createHash } from "crypto";

package/dist/{chunk-Q5US7JC5.js → chunk-UUD5RB36.js}

@@ -9,15 +9,15 @@ import {
   postAgentApi,
   putAgentApi,
   uploadAgentApi
-} from "./chunk-CI24BDR2.js";
+} from "./chunk-JJJIP2XQ.js";
 import {
   TeAgentApiError,
   createTeAgentApiError
-} from "./chunk-3YVEAZUN.js";
+} from "./chunk-2UWS5CUP.js";
 import {
   CliValidationError,
   isApiErrorType
-} from "./chunk-WNGFSIOB.js";
+} from "./chunk-ZW4VMY5H.js";
 
 // src/commands/workspace/client.ts
 var DEFAULT_TE_CLAUDE_BASE_PATH = "/agent";