@thinkingai/ae-cli 6.1.28 → 6.1.29

package/dist/chunk-ELCR235M.js

@@ -1,1429 +0,0 @@
-import { createRequire as __createRequire } from 'node:module'; const require = __createRequire(import.meta.url);
-import {
-  peekCliToken
-} from "./chunk-P7KL7IOH.js";
-import {
-  getActiveHost,
-  getConfigDir,
-  isAeSandboxRuntime
-} from "./chunk-LMCYSVVA.js";
-import {
-  externalCliTokenRequestOptions,
-  logger,
-  normalizeUrl,
-  readExternalCliToken,
-  redactExternalCliToken
-} from "./chunk-ZW4VMY5H.js";
-
-// src/core/install-process.ts
-import spawn from "cross-spawn";
-import fs from "fs";
-import path from "path";
-var INSTALL_TIMEOUT_MS = 12e4;
-var SKILLS_TOOL = "skills@1.5.12";
-var defaultInstallRunner = (command, args, timeoutMs) => {
-  const result = spawn.sync(command, args, {
-    encoding: "utf8",
-    maxBuffer: 8 * 1024 * 1024,
-    stdio: ["ignore", "pipe", "pipe"],
-    timeout: timeoutMs,
-    windowsHide: true,
-    env: {
-      ...process.env,
-      DISABLE_TELEMETRY: "1",
-      NO_COLOR: "1",
-      // Select installed clients, not only the AI that launched AE CLI.
-      ...args[1] === SKILLS_TOOL && args[2] === "add" ? { AI_AGENT: "ae-cli" } : {}
-    }
-  });
-  return { ...result, stdout: result.stdout || "", stderr: result.stderr || "" };
-};
-function resolveNodeTool(tool, execPath = process.execPath, platform = process.platform) {
-  const filename = platform === "win32" ? `${tool}.cmd` : tool;
-  const sibling = path.join(path.dirname(execPath), filename);
-  return fs.existsSync(sibling) ? sibling : filename;
-}
-function commandSucceeded(result) {
-  return !result.error && !result.signal && result.status === 0;
-}
-function exactVersion(raw) {
-  const version = raw.trim().replace(/^v/i, "");
-  if (!/^(0|[1-9]\d*)\.(0|[1-9]\d*)\.(0|[1-9]\d*)(?:-[0-9A-Za-z-]+(?:\.[0-9A-Za-z-]+)*)?(?:\+[0-9A-Za-z-]+(?:\.[0-9A-Za-z-]+)*)?$/.test(version)) {
-    throw new Error("Expected an exact version such as 6.0.49 or 6.1.9.");
-  }
-  return version;
-}
-function installHost(raw) {
-  if (!raw) return null;
-  const normalized = normalizeUrl(raw.trim());
-  try {
-    if (raw.includes("://") && !/^https?:\/\//.test(raw.trim())) throw new Error();
-    const url = new URL(normalized);
-    if (!["https:", "http:"].includes(url.protocol) || !url.hostname || url.username || url.password || url.search || url.hash || /[\s'"`$\\<>]/.test(normalized)) throw new Error();
-    return normalized;
-  } catch {
-    throw new Error("Host must be an HTTP(S) URL without credentials, query parameters, or fragments.");
-  }
-}
-function classifyInstallFailure(result) {
-  const text = `${result.error?.message || ""}
-${result.stderr}
-${result.stdout}`;
-  if (result.error?.code === "ETIMEDOUT" || /timed?\s*out|ETIMEDOUT/i.test(text)) return "timeout";
-  if (/EACCES|EPERM|permission denied|access is denied/i.test(text)) return "permission";
-  if (/EAI_AGAIN|ENOTFOUND|ECONNRESET|ECONNREFUSED|network|unable to access|could not resolve|certificate|SSL/i.test(text)) return "network";
-  if (/E404|404 Not Found|no matching version|couldn't find remote ref/i.test(text)) return "package_missing";
-  return "unknown";
-}
-
-// src/core/package-info.ts
-import fs2 from "fs";
-import path2 from "path";
-import { fileURLToPath } from "url";
-function getLocalCliPackageInfo() {
-  let dir = path2.dirname(fileURLToPath(import.meta.url));
-  for (let i = 0; i < 8; i += 1) {
-    const candidate = path2.join(dir, "package.json");
-    try {
-      if (fs2.existsSync(candidate)) {
-        const pkg = JSON.parse(fs2.readFileSync(candidate, "utf8"));
-        if (pkg.name && pkg.version && String(pkg.name).includes("ae-cli")) {
-          return { name: pkg.name, version: pkg.version, root: dir };
-        }
-      }
-    } catch {
-    }
-    const parent = path2.dirname(dir);
-    if (parent === dir) break;
-    dir = parent;
-  }
-  return { name: "@tant/ae-cli", version: "0.0.0", root: "" };
-}
-
-// src/core/version-sync.ts
-import fs5 from "fs";
-import path5 from "path";
-
-// src/core/update-check.ts
-function shouldSkipUpdateCheck(argv = process.argv) {
-  if (process.env.AE_CLI_NO_UPDATE_CHECK === "1") return true;
-  if (process.env.CI === "true" || process.env.CI === "1") return true;
-  return argv.slice(2).some((arg, index, args) => {
-    if (arg === "--no-update-check") return true;
-    if (arg === "--version") {
-      const value = args[index + 1];
-      return !value || value.startsWith("-");
-    }
-    if (arg === "-V" || arg === "--help" || arg === "-h") return true;
-    return false;
-  });
-}
-function parseVersion(version) {
-  const core = version.trim().split("-")[0];
-  return core.split(".").map((part) => {
-    const n = Number.parseInt(part, 10);
-    return Number.isFinite(n) ? n : 0;
-  });
-}
-function isNewer(latest, current) {
-  const a = parseVersion(latest);
-  const b = parseVersion(current);
-  const len = Math.max(a.length, b.length, 3);
-  for (let i = 0; i < len; i += 1) {
-    const av = a[i] ?? 0;
-    const bv = b[i] ?? 0;
-    if (av > bv) return true;
-    if (av < bv) return false;
-  }
-  return false;
-}
-
-// src/core/legacy-cli-version-map.ts
-var HISTORICAL_CLUSTER_TO_PUBLIC_PIN = {
-  "6.0.0": "1.0.15",
-  "6.0.1": "1.0.15",
-  "6.0.2": "1.0.18",
-  "6.0.3": "1.0.18",
-  "6.0.4": "1.0.20",
-  "6.0.5": "1.0.21",
-  "6.0.6": "1.0.22",
-  "6.0.7": "1.0.22",
-  "6.0.8": "1.0.22",
-  "6.0.9": "1.0.22",
-  "6.0.10": "1.0.24",
-  "6.0.11": "1.0.24",
-  "6.0.12": "1.0.27",
-  "6.0.13": "1.0.28",
-  "6.0.14": "1.0.28",
-  "6.0.15": "1.0.30",
-  "6.0.16": "6.0.16",
-  "6.0.17": "6.0.17",
-  "6.0.18": "6.0.18",
-  "6.0.19": "6.0.18",
-  "6.0.20": "6.0.20",
-  "6.0.21": "6.0.20",
-  "6.0.22": "6.0.22",
-  "6.0.23": "6.0.22",
-  "6.0.24": "6.0.24",
-  "6.0.25": "6.0.24",
-  "6.0.26": "6.0.24"
-};
-
-// src/core/version-compat.ts
-var OPEN_SOURCE_AE_CLI_PACKAGE = "@thinkingai/ae-cli";
-var PUBLISHED_EXTERNAL_VERSIONS = /* @__PURE__ */ new Set([
-  "1.0.15",
-  "1.0.18",
-  "1.0.20",
-  "1.0.21",
-  "1.0.22",
-  "1.0.24",
-  "1.0.27",
-  "1.0.28",
-  "1.0.30",
-  "6.0.16",
-  "6.0.17",
-  "6.0.18",
-  "6.0.20",
-  "6.0.22",
-  "6.0.24",
-  "6.0.27",
-  "6.0.28",
-  "6.0.29",
-  "6.0.30",
-  "6.0.31"
-]);
-function normalizeCliVersion(version) {
-  return version.trim().replace(/^v/i, "");
-}
-function versionLine(version) {
-  const parts = normalizeCliVersion(version).split(/[.-]/);
-  if (parts.length < 2) return normalizeCliVersion(version);
-  return `${parts[0]}.${parts[1]}`;
-}
-function sameVersionLine(a, b) {
-  return versionLine(a) === versionLine(b);
-}
-function parseVersionParts(version) {
-  const core = normalizeCliVersion(version).split("-")[0];
-  return core.split(".").map((p) => {
-    const n = Number.parseInt(p, 10);
-    return Number.isFinite(n) ? n : 0;
-  });
-}
-function compareNormalized(a, b) {
-  const pa = parseVersionParts(a);
-  const pb = parseVersionParts(b);
-  const len = Math.max(pa.length, pb.length, 3);
-  for (let i = 0; i < len; i += 1) {
-    const av = pa[i] ?? 0;
-    const bv = pb[i] ?? 0;
-    if (av > bv) return 1;
-    if (av < bv) return -1;
-  }
-  return 0;
-}
-function evaluateCompat(localRaw, expectedRaw, clusterLine) {
-  const local = normalizeCliVersion(localRaw);
-  const expected = normalizeCliVersion(expectedRaw);
-  if (!local || !expected) return { kind: "ok" };
-  const line = clusterLine && clusterLine.trim() || versionLine(expected);
-  if (!sameVersionLine(local, expected)) {
-    return { kind: "line_mismatch", local, expected, line };
-  }
-  if (clusterLine && clusterLine.trim()) {
-    const clusterNorm = clusterLine.trim();
-    const localLine = versionLine(local);
-    if (localLine !== clusterNorm && localLine !== versionLine(clusterNorm)) {
-      return { kind: "line_mismatch", local, expected, line: clusterNorm };
-    }
-  }
-  if (local === expected) return { kind: "ok" };
-  if (isNewer(local, expected)) {
-    return { kind: "local_newer", local, expected, line };
-  }
-  if (isNewer(expected, local)) {
-    return { kind: "local_older", local, expected, line };
-  }
-  return { kind: "ok" };
-}
-function resolvePinTarget(expectedVersion) {
-  const expected = expectedVersion.trim().replace(/^v/i, "");
-  if (!expected) return null;
-  if (PUBLISHED_EXTERNAL_VERSIONS.has(expected)) return expected;
-  const historical = HISTORICAL_CLUSTER_TO_PUBLIC_PIN[expected];
-  if (historical && PUBLISHED_EXTERNAL_VERSIONS.has(historical)) {
-    return historical;
-  }
-  const line = versionLine(expected);
-  const candidates = [...PUBLISHED_EXTERNAL_VERSIONS].filter((tag) => {
-    if (versionLine(tag) !== line) return false;
-    return compareNormalized(tag, expected) <= 0;
-  });
-  if (candidates.length === 0) return null;
-  candidates.sort((a, b) => compareNormalized(a, b));
-  return candidates[candidates.length - 1] ?? null;
-}
-function formatPinCommands(expectedVersion) {
-  const ver = resolvePinTarget(expectedVersion);
-  if (!ver) return [];
-  return [
-    `npx ${OPEN_SOURCE_AE_CLI_PACKAGE}@latest update --target ${ver}`
-  ];
-}
-function formatUpgradeCommands(expectedVersion) {
-  let ver;
-  try {
-    ver = exactVersion(expectedVersion);
-  } catch {
-    return [];
-  }
-  return [
-    `npx ${OPEN_SOURCE_AE_CLI_PACKAGE}@latest update --target ${ver}`
-  ];
-}
-function formatUnifiedUpdateCommand() {
-  return "ae-cli update";
-}
-function formatCompatNotice(verdict) {
-  if (verdict.kind === "ok") return void 0;
-  const canUpdateToHost = formatUpgradeCommands(verdict.expected).length > 0;
-  if (verdict.kind === "local_newer") {
-    if (canUpdateToHost) {
-      return [
-        `[ae-cli] Host compat: local ${verdict.local} > environment ${verdict.expected} (cluster ${verdict.line}).`,
-        `         Run: ${formatUnifiedUpdateCommand()} to sync CLI + skills to this host.`,
-        `         Or update cluster components to the latest version.`
-      ].join("\n");
-    }
-    return [
-      `[ae-cli] Host compat: local ${verdict.local} > environment ${verdict.expected} (cluster ${verdict.line}).`,
-      `         No public GitHub/npm release on this line is \u2264 environment ${verdict.expected}.`,
-      `         Update cluster components to the latest version to match your CLI.`
-    ].join("\n");
-  }
-  if (verdict.kind === "local_older") {
-    if (canUpdateToHost) {
-      return [
-        `[ae-cli] Host compat: local ${verdict.local} < environment ${verdict.expected} (cluster ${verdict.line}).`,
-        `         Run: ${formatUnifiedUpdateCommand()} to sync CLI + skills to this host.`
-      ].join("\n");
-    }
-    return [
-      `[ae-cli] Host compat: local ${verdict.local} < environment ${verdict.expected} (cluster ${verdict.line}).`,
-      `         No installable semver target for environment ${verdict.expected}.`,
-      `         Ask the platform owner for the install package, or wait for a published build.`
-    ].join("\n");
-  }
-  if (canUpdateToHost) {
-    return [
-      `[ae-cli] Host compat: local ${verdict.local} line mismatches environment ${verdict.expected} (cluster ${verdict.line}).`,
-      `         Run: ${formatUnifiedUpdateCommand()} to sync CLI + skills to this host.`,
-      `         Or update cluster components to the latest version to match your CLI line.`
-    ].join("\n");
-  }
-  return [
-    `[ae-cli] Host compat: local ${verdict.local} line mismatches environment ${verdict.expected} (cluster ${verdict.line}).`,
-    `         No public GitHub/npm release for this line; update cluster components to the latest version, or install a published build on the same line.`
-  ].join("\n");
-}
-
-// src/core/installation.ts
-import fs4 from "fs";
-import path4 from "path";
-
-// src/core/skills-install.ts
-import fs3 from "fs";
-import os from "os";
-import path3 from "path";
-import { parseDocument } from "yaml";
-function globalSkillsDirectory() {
-  return path3.join(os.homedir(), ".agents", "skills");
-}
-function skillName(content) {
-  const frontmatter = content.match(/^---\r?\n([\s\S]*?)\r?\n---(?:\r?\n|$)/);
-  if (!frontmatter) throw new Error("Missing YAML frontmatter.");
-  const parsed = parseDocument(frontmatter[1], { uniqueKeys: true });
-  if (parsed.errors.length) throw new Error("Invalid YAML frontmatter.");
-  const data = parsed.toJS({ maxAliasCount: 100 });
-  if (!data || typeof data.name !== "string" || !/^[a-z0-9]+(?:-[a-z0-9]+)*$/.test(data.name) || typeof data.description !== "string" || !data.description.trim()) throw new Error("Invalid Skill metadata.");
-  return data.name;
-}
-function readFiles(root, prefix = "", files = /* @__PURE__ */ new Map()) {
-  for (const entry of fs3.readdirSync(path3.join(root, prefix), { withFileTypes: true })) {
-    if (entry.name.startsWith(".") || ["metadata.json", "__pycache__", "__pypackages__"].includes(entry.name)) continue;
-    const relative = path3.join(prefix, entry.name);
-    if (entry.isSymbolicLink()) throw new Error("Bundled Skills must contain regular files.");
-    if (entry.isDirectory()) readFiles(root, relative, files);
-    else if (entry.isFile()) files.set(relative, fs3.readFileSync(path3.join(root, relative)));
-  }
-  return files;
-}
-function readBundledSkills(directory) {
-  const skills = fs3.readdirSync(directory, { withFileTypes: true }).filter((entry) => entry.isDirectory() && !entry.name.startsWith(".")).map((entry) => {
-    try {
-      const files = readFiles(path3.join(directory, entry.name));
-      return { name: skillName(files.get("SKILL.md").toString("utf8")), files };
-    } catch {
-      const name = /^[a-z0-9-]+$/.test(entry.name) ? entry.name : "(invalid name)";
-      throw new Error(`Invalid bundled Skill ${name}: missing files or YAML/frontmatter error.`);
-    }
-  });
-  if (!skills.length || new Set(skills.map((skill) => skill.name)).size !== skills.length) {
-    throw new Error("Bundled Skills are empty or contain duplicate names.");
-  }
-  return skills;
-}
-function verifyGlobalSkills(skills, directory) {
-  return skills.flatMap((skill) => {
-    let reason = "";
-    try {
-      const target = path3.join(directory, skill.name);
-      if (skillName(fs3.readFileSync(path3.join(target, "SKILL.md"), "utf8")) !== skill.name) {
-        reason = "Installed Skill name does not match the bundled Skill.";
-      } else {
-        for (const [file, expected] of skill.files) {
-          if (!fs3.readFileSync(path3.join(target, file)).equals(expected)) {
-            reason = "Installed files do not match the CLI package version.";
-            break;
-          }
-        }
-      }
-    } catch (error) {
-      reason = error.code === "ENOENT" ? "Expected Skill file is missing." : "Installed Skill has invalid YAML/frontmatter or unreadable files.";
-    }
-    return reason ? [{ skill: skill.name, reason }] : [];
-  });
-}
-function skillProcessProblem(result) {
-  const output = `${result.stdout}
-${result.stderr}`.replace(/\x1b\[[0-9;]*m/g, "");
-  if (/(?:YAML|frontmatter)[^\n]*(?:parse|invalid|error)|(?:parse|invalid|error)[^\n]*(?:YAML|frontmatter)/i.test(output)) {
-    return "Skills reported a YAML/frontmatter parsing error.";
-  }
-  const lines = output.split(/\r?\n/);
-  const ignored = lines.filter((line) => /(?:PromptScript|Eve) does not support global skill installation\s*$/.test(line));
-  const failures = [...output.matchAll(/Failed to install (\d+)/g)].reduce((sum, match) => sum + Number(match[1]), 0);
-  const remaining = lines.filter((line) => !ignored.includes(line) && !/Failed to install \d+/.test(line)).join("\n");
-  if (failures > ignored.length || /✗|(?:^|\n)[^\w\n]*(?:Error\b|Installation failed\b|Failed\b)/i.test(remaining)) {
-    return "Skills installation failed for a supported client. Check directory permissions and retry.";
-  }
-  if (commandSucceeded(result)) return null;
-  if (!result.error && !result.signal && ignored.length > 0 && failures === ignored.length && !/EACCES|EPERM|ETIMEDOUT|ENOTFOUND|ECONN|network|permission denied/i.test(remaining)) return null;
-  return "Skills process failed. Check network access and directory permissions, then retry.";
-}
-
-// src/core/installation.ts
-function distribution(packageName) {
-  if (packageName === "@thinkingai/ae-cli") return { registry: "https://registry.npmjs.org", repository: "ThinkingAIAgenticEngine/ae-cli" };
-  if (packageName === "@tant/ae-cli") return { registry: "https://npm.thinkingdata.cn:3443", repository: "http://10.27.249.150:8888/te-ai/te-cli.git" };
-  throw new Error("Unsupported CLI package. Use an official AE CLI distribution.");
-}
-function newInstallationReport(packageName, version, dryRun = false) {
-  return {
-    ok: false,
-    dry_run: dryRun,
-    cli: { package: packageName, version, path: null, verified: false, action: "pending", warnings: [] },
-    skills: {
-      directory: globalSkillsDirectory(),
-      expected_count: 0,
-      installed_count: 0,
-      missing: [],
-      source: null,
-      version,
-      status: "pending",
-      failures: [],
-      attempts: []
-    },
-    auth: { host: null, authenticated: null, warnings: [] },
-    next_steps: []
-  };
-}
-function failInstallation(report, stage, message, cause = "validation") {
-  report.ok = false;
-  report.error = { type: "config", code: "AE_CLI_INSTALL_FAILED", message, stage, cause };
-  if (!report.next_steps.length) report.next_steps.push("Fix the reported problem and rerun the same install or update command.");
-  return report;
-}
-function installPlan(packageName, version, root = "<npm-root>") {
-  const config = distribution(packageName);
-  const target = exactVersion(version);
-  const source = path4.join(root, packageName, "skills");
-  return [
-    `npm install -g ${packageName}@${target} --registry=${config.registry}`,
-    `npx -y ${SKILLS_TOOL} add ${JSON.stringify(source)} -g -y --agent universal`,
-    `npx -y ${SKILLS_TOOL} add ${config.repository}#v${target} -g -y --agent universal`,
-    `npx -y ${SKILLS_TOOL} add ${JSON.stringify(globalSkillsDirectory())} -g -y --copy`
-  ];
-}
-function verifySkillsAttempt(report, skills, result, stage, source) {
-  const problem = skillProcessProblem(result);
-  report.skills.failures = verifyGlobalSkills(skills, report.skills.directory);
-  if (problem) {
-    for (const skill of skills) {
-      if (!report.skills.failures.some((failure) => failure.skill === skill.name)) {
-        report.skills.failures.push({ skill: skill.name, reason: problem });
-      }
-    }
-  }
-  report.skills.missing = report.skills.failures.map((failure) => failure.skill);
-  report.skills.installed_count = skills.length - report.skills.missing.length;
-  const cause = commandSucceeded(result) ? "validation" : classifyInstallFailure(result);
-  report.skills.attempts.push({
-    source,
-    stage,
-    cause: report.skills.missing.length ? cause : null,
-    failures: [...report.skills.failures]
-  });
-  report.skills.status = !report.skills.missing.length ? "success" : report.skills.installed_count ? "partial" : "failed";
-  return report.skills.status === "success";
-}
-function readPackage(root) {
-  try {
-    return JSON.parse(fs4.readFileSync(path4.join(root, "package.json"), "utf8"));
-  } catch {
-    return null;
-  }
-}
-function linked(root) {
-  try {
-    return fs4.lstatSync(root).isSymbolicLink();
-  } catch {
-    return false;
-  }
-}
-function cliBinBelongsToPackage(bin, packageRoot, platform) {
-  const entry = fs4.realpathSync(path4.join(packageRoot, "bin", "ae-cli.js"));
-  if (platform !== "win32") return fs4.realpathSync(bin) === entry;
-  const shim = fs4.readFileSync(bin, "utf8");
-  const targets = [...shim.matchAll(/"%(?:dp0%|~dp0)[\\/]([^"\r\n]+)"/gi)];
-  return targets.some(([, relative]) => {
-    try {
-      const target = path4.resolve(path4.dirname(bin), relative.replace(/\\/g, path4.sep));
-      return fs4.realpathSync(target).toLowerCase() === entry.toLowerCase();
-    } catch {
-      return false;
-    }
-  });
-}
-function runInstallation(options = {}) {
-  const local = getLocalCliPackageInfo();
-  const packageName = options.packageName ?? local.name;
-  const report = newInstallationReport(packageName, "", Boolean(options.dryRun));
-  const runner = options.runner ?? defaultInstallRunner;
-  const progress = options.progress ?? (() => {
-  });
-  const platform = options.platform ?? process.platform;
-  report.skills.directory = options.skillsDirectory ?? globalSkillsDirectory();
-  let stage = "environment";
-  try {
-    const target = exactVersion(options.target ?? local.version);
-    report.cli.version = target;
-    report.skills.version = target;
-    const config = distribution(packageName);
-    report.auth.host = installHost(options.host);
-    const major = Number((options.nodeVersion ?? process.versions.node).split(".")[0]);
-    if (!Number.isInteger(major) || major < 20) return failInstallation(report, stage, "AE CLI requires Node.js 20 or later. Select an existing supported Node runtime and rerun.");
-    if (options.dryRun) {
-      report.ok = true;
-      report.commands = installPlan(packageName, target);
-      report.next_steps.push("Dry run only; CLI, global Skills, and authentication have not been verified.");
-      return report;
-    }
-    const npm = resolveNodeTool("npm", process.execPath, platform);
-    progress("[ae-cli] [1/4] Checking Node.js, npm, and npx...");
-    for (const tool of [npm, resolveNodeTool("npx", process.execPath, platform)]) {
-      const result = runner(tool, ["--version"], 15e3);
-      if (!commandSucceeded(result)) return failInstallation(report, stage, "npm and npx must be available alongside the selected Node.js runtime.", classifyInstallFailure(result));
-    }
-    stage = "package_validation";
-    const rootResult = runner(npm, ["root", "-g"], 15e3);
-    const prefixResult = runner(npm, ["prefix", "-g"], 15e3);
-    const globalRoot = rootResult.stdout.trim();
-    const prefix = prefixResult.stdout.trim();
-    if (!commandSucceeded(rootResult) || !commandSucceeded(prefixResult) || !path4.isAbsolute(globalRoot) || !path4.isAbsolute(prefix) || /[\r\n]/.test(globalRoot + prefix)) return failInstallation(report, stage, "Cannot resolve npm global root and prefix. Check npm configuration.");
-    const packageRoot = path4.join(globalRoot, packageName);
-    const bin = platform === "win32" ? path4.join(prefix, "ae-cli.cmd") : path4.join(prefix, "bin", "ae-cli");
-    report.cli.path = bin;
-    const env = options.env ?? process.env;
-    const installedBefore = readPackage(packageRoot);
-    if (linked(packageRoot) && !options.skipCliInstall) return failInstallation(report, stage, "The global CLI is npm-linked to source. Preserve the link; use a separate npm prefix for a packaged installation.");
-    if (options.skipCliInstall || installedBefore?.name === packageName && installedBefore.version === target && fs4.existsSync(bin)) {
-      report.cli.action = "skipped";
-      progress("[ae-cli] [2/4] Verifying the existing CLI...");
-    } else {
-      stage = "npm_install";
-      progress(`[ae-cli] [2/4] Installing ${packageName}@${target}...`);
-      const result = runner(npm, ["install", "-g", `${packageName}@${target}`, "--registry", config.registry], INSTALL_TIMEOUT_MS);
-      if (!commandSucceeded(result)) return failInstallation(report, stage, "npm installation failed. Check network access and a user-writable npm prefix; do not use sudo.", classifyInstallFailure(result));
-      report.cli.action = "installed";
-    }
-    stage = "package_validation";
-    const installed = readPackage(packageRoot);
-    if (installed?.name !== packageName || installed.version !== target) return failInstallation(report, stage, "Installed CLI package identity or version does not match the requested distribution.");
-    if (!fs4.existsSync(bin)) return failInstallation(report, stage, "npm did not create the global ae-cli executable. Enable npm bin-links, reinstall, and add the global executable directory to PATH.");
-    if (!cliBinBelongsToPackage(bin, packageRoot, platform)) return failInstallation(report, stage, "The global executable does not belong to the installed CLI package.");
-    const versionResult = runner(bin, ["--version"], 15e3);
-    if (!commandSucceeded(versionResult) || versionResult.stdout.trim() !== target) return failInstallation(report, stage, "ae-cli --version did not return the requested version. Refresh the shell command cache and check npm bin links.");
-    report.cli.verified = true;
-    const pathKey = platform === "win32" ? Object.keys(env).find((key) => key.toLowerCase() === "path") : "PATH";
-    const installedPathBin = (env[pathKey ?? "PATH"] ?? "").split(platform === "win32" ? ";" : path4.delimiter).filter(Boolean).map((dir) => path4.join(dir.replace(/^"(.*)"$/, "$1"), platform === "win32" ? "ae-cli.cmd" : "ae-cli")).find((file) => fs4.existsSync(file) && !file.includes(`${path4.sep}_npx${path4.sep}`));
-    if (!installedPathBin || fs4.realpathSync(installedPathBin) !== fs4.realpathSync(bin)) {
-      report.cli.warnings.push(`Add ${path4.dirname(bin)} to the front of PATH and refresh the shell command cache. The absolute executable was verified.`);
-      report.next_steps.push(`Use the verified executable at ${bin}, or correct PATH before invoking ae-cli.`);
-    }
-    stage = "skills_local";
-    const skillsPath = path4.join(packageRoot, "skills");
-    const skills = readBundledSkills(skillsPath);
-    report.skills.expected_count = skills.length;
-    for (const source of [skillsPath, `${config.repository}#v${target}`]) {
-      stage = source === skillsPath ? "skills_local" : "skills_github";
-      report.skills.source = source === skillsPath ? "installed-package" : source;
-      progress("[ae-cli] [3/4] Installing and verifying global Skills...");
-      const result = runner(resolveNodeTool("npx", process.execPath, platform), [
-        "-y",
-        SKILLS_TOOL,
-        "add",
-        source,
-        "-g",
-        "-y",
-        "--agent",
-        "universal",
-        "--skill",
-        ...skills.map((skill) => skill.name)
-      ], INSTALL_TIMEOUT_MS);
-      if (verifySkillsAttempt(report, skills, result, stage, report.skills.source)) break;
-    }
-    if (report.skills.status !== "success") {
-      report.skills.status = report.skills.installed_count ? "partial" : "failed";
-      const first = report.skills.attempts[0];
-      return failInstallation(
-        report,
-        first.stage,
-        "Global Skills installation is incomplete. See skills.attempts for the original and fallback failures.",
-        first.cause ?? "validation"
-      );
-    }
-    stage = "skills_clients";
-    progress("[ae-cli] [3/4] Distributing Skills to detected clients...");
-    const clientResult = runner(
-      resolveNodeTool("npx", process.execPath, platform),
-      ["-y", SKILLS_TOOL, "add", report.skills.directory, "-g", "-y", "--copy", "--skill", ...skills.map((skill) => skill.name)],
-      INSTALL_TIMEOUT_MS
-    );
-    if (!verifySkillsAttempt(report, skills, clientResult, stage, report.skills.directory)) {
-      return failInstallation(
-        report,
-        stage,
-        "Global Skills were installed, but client distribution is incomplete. See skills.attempts for details.",
-        report.skills.attempts.at(-1).cause ?? "validation"
-      );
-    }
-    progress("[ae-cli] [4/4] Checking authentication guidance...");
-    if (report.auth.host) {
-      const result = runner(bin, ["--no-update-check", "--format", "json", "auth", "status", "--host", report.auth.host], INSTALL_TIMEOUT_MS);
-      try {
-        const body = JSON.parse(result.stdout);
-        if (!commandSucceeded(result) || !body.ok || typeof body.data?.authenticated !== "boolean") throw new Error();
-        report.auth.authenticated = body.data.authenticated;
-      } catch {
-        report.auth.warnings.push("Authentication status could not be verified. Run auth status for this host.");
-      }
-    }
-    if (report.auth.authenticated !== true) {
-      report.next_steps.push(`ae-cli auth login --host ${report.auth.host ?? "<AE_HOST>"} --no-wait`);
-      report.next_steps.push("Complete browser authorization, then run ae-cli auth login --host <AE_HOST> --device-code <DEVICE_CODE>.");
-    }
-    report.ok = true;
-    return report;
-  } catch (error) {
-    const safe = error instanceof Error && /^(Expected an exact|Unsupported CLI package|Host must|Invalid bundled Skill|Bundled Skills are empty)/.test(error.message);
-    return failInstallation(report, stage, safe ? error.message : "Installation could not complete at this stage. Check file permissions, package contents, and global Skills directory.");
-  }
-}
-
-// src/core/version-sync.ts
-var AUTO_ATTEMPT_INTERVAL_MS = 60 * 60 * 1e3;
-var MAX_AUTO_ATTEMPTS_PER_DAY = 3;
-var LOCK_STALE_MS = 10 * 60 * 1e3;
-var SYNC_STATE_FILE = "version-sync.json";
-var SYNC_LOCK_FILE = "version-sync.lock";
-function syncStatePath() {
-  return path5.join(getConfigDir(), SYNC_STATE_FILE);
-}
-function syncLockPath() {
-  return path5.join(getConfigDir(), SYNC_LOCK_FILE);
-}
-function readSyncStore() {
-  try {
-    const raw = JSON.parse(fs5.readFileSync(syncStatePath(), "utf8"));
-    if (raw && typeof raw === "object" && raw.hosts && typeof raw.hosts === "object") {
-      return raw;
-    }
-  } catch {
-  }
-  return { hosts: {} };
-}
-function writeSyncStore(store) {
-  try {
-    fs5.mkdirSync(getConfigDir(), { recursive: true });
-    fs5.writeFileSync(syncStatePath(), JSON.stringify(store, null, 2));
-  } catch {
-  }
-}
-function localDay(now) {
-  const year = now.getFullYear();
-  const month = String(now.getMonth() + 1).padStart(2, "0");
-  const day = String(now.getDate()).padStart(2, "0");
-  return `${year}-${month}-${day}`;
-}
-function freshAttemptEntry(target, now) {
-  return {
-    target,
-    attemptDay: localDay(now),
-    attemptsToday: 0
-  };
-}
-function evaluateAutoAttempt(existing, target, now = /* @__PURE__ */ new Date()) {
-  const today = localDay(now);
-  const entry = !existing || existing.target !== target || existing.attemptDay !== today ? freshAttemptEntry(target, now) : { ...existing };
-  if (entry.attemptsToday >= MAX_AUTO_ATTEMPTS_PER_DAY) {
-    return { allowed: false, reason: "daily_limit", entry };
-  }
-  if (entry.lastAttemptAt) {
-    const elapsed = now.getTime() - new Date(entry.lastAttemptAt).getTime();
-    if (Number.isFinite(elapsed) && elapsed < AUTO_ATTEMPT_INTERVAL_MS) {
-      return { allowed: false, reason: "hourly_limit", entry };
-    }
-  }
-  return { allowed: true, entry };
-}
-function reserveAutoAttempt(host, target, now = /* @__PURE__ */ new Date()) {
-  const store = readSyncStore();
-  const key = normalizeUrl(host);
-  const decision = evaluateAutoAttempt(store.hosts[key], target, now);
-  if (!decision.allowed) return decision;
-  decision.entry.attemptsToday += 1;
-  decision.entry.lastAttemptAt = now.toISOString();
-  store.hosts[key] = decision.entry;
-  writeSyncStore(store);
-  return decision;
-}
-function getPendingSkillsTarget(host) {
-  const entry = readSyncStore().hosts[normalizeUrl(host)];
-  return entry?.pendingSkills ? entry.target : void 0;
-}
-function recordVersionSyncResult(host, target, result) {
-  const store = readSyncStore();
-  const key = normalizeUrl(host);
-  const existing = store.hosts[key] ?? freshAttemptEntry(target, /* @__PURE__ */ new Date());
-  const entry = existing.target === target ? existing : freshAttemptEntry(target, /* @__PURE__ */ new Date());
-  if (result.ok) {
-    entry.pendingSkills = false;
-    delete entry.lastFailureStage;
-  } else {
-    entry.pendingSkills = result.skillsPending;
-    entry.lastFailureStage = result.stage;
-  }
-  store.hosts[key] = entry;
-  writeSyncStore(store);
-}
-function isRegularCliVersion(version) {
-  const normalized = normalizeCliVersion(version);
-  return /^(0|[1-9]\d*)\.(0|[1-9]\d*)\.(0|[1-9]\d*)$/.test(normalized) && normalized.split(".").every((part) => Number.isSafeInteger(Number(part)));
-}
-function isAutoSyncTargetEligible(version) {
-  if (!isRegularCliVersion(version)) return false;
-  const [major, minor, patch] = normalizeCliVersion(version).split(".").map(Number);
-  if (major > 6) return true;
-  if (major !== 6) return false;
-  if (minor > 1) return true;
-  if (minor === 1) return patch >= 5;
-  if (minor === 0) return patch >= 33;
-  return false;
-}
-function isPublicAeCliPackage(packageName) {
-  return packageName === OPEN_SOURCE_AE_CLI_PACKAGE;
-}
-function buildVersionInstallPlan(targetRaw, globalRoot = "<npm-root>", packageName = OPEN_SOURCE_AE_CLI_PACKAGE) {
-  const target = normalizeCliVersion(targetRaw);
-  return { target, commands: installPlan(packageName, target, globalRoot), skillsSources: ["installed-package", "github-fallback"] };
-}
-function friendlyVersionSyncFailure(result) {
-  if (result.cause === "busy") {
-    return "Another ae-cli process is synchronizing the global installation.";
-  }
-  if (result.cause === "permission") {
-    return "The global npm installation directory is not writable.";
-  }
-  if (result.cause === "timeout") {
-    return "The npm or Skills download timed out.";
-  }
-  if (result.cause === "network") {
-    return "The npm registry or Skills source could not be reached.";
-  }
-  if (result.cause === "package_missing") {
-    return "The required CLI package or Skills tag is not available.";
-  }
-  if (result.cause === "validation") {
-    return "The installed package could not be validated.";
-  }
-  return `Version synchronization failed at ${result.stage}.`;
-}
-function acquireInstallLock(now) {
-  fs5.mkdirSync(getConfigDir(), { recursive: true });
-  const file = syncLockPath();
-  try {
-    return fs5.openSync(file, "wx");
-  } catch {
-    try {
-      const age = now.getTime() - fs5.statSync(file).mtimeMs;
-      if (age >= LOCK_STALE_MS) {
-        fs5.unlinkSync(file);
-        return fs5.openSync(file, "wx");
-      }
-    } catch {
-      try {
-        return fs5.openSync(file, "wx");
-      } catch {
-        return null;
-      }
-    }
-    return null;
-  }
-}
-function releaseInstallLock(fd) {
-  try {
-    fs5.closeSync(fd);
-  } catch {
-  }
-  try {
-    fs5.unlinkSync(syncLockPath());
-  } catch {
-  }
-}
-function installVersion(targetRaw, options = {}) {
-  const run = () => {
-    const report = runInstallation({ ...options, target: targetRaw });
-    const cliInstalled = report.cli.verified || report.cli.action === "installed";
-    if (report.ok) return { ok: true, cliInstalled, skillsSource: report.skills.source === "installed-package" ? "local" : "github", report };
-    return {
-      ok: false,
-      stage: report.error?.stage ?? "environment",
-      cliInstalled,
-      skillsPending: cliInstalled,
-      cause: report.error?.cause ?? "validation",
-      message: report.error?.message ?? "Installation failed.",
-      report
-    };
-  };
-  if (options.dryRun) return run();
-  let lock;
-  try {
-    lock = acquireInstallLock(options.now ?? /* @__PURE__ */ new Date());
-  } catch {
-    return {
-      ok: false,
-      stage: "lock",
-      cliInstalled: false,
-      skillsPending: Boolean(options.skipCliInstall),
-      cause: "permission",
-      message: "The installation lock directory is not writable."
-    };
-  }
-  if (lock === null) return {
-    ok: false,
-    stage: "lock",
-    cliInstalled: false,
-    skillsPending: Boolean(options.skipCliInstall),
-    cause: "busy",
-    message: "Another ae-cli process is already synchronizing the global installation."
-  };
-  try {
-    return run();
-  } finally {
-    releaseInstallLock(lock);
-  }
-}
-function autoSyncDirection(current, expected) {
-  if (versionLine(current) !== versionLine(expected)) return "switch";
-  const currentParts = normalizeCliVersion(current).split("-")[0].split(".").map(Number);
-  const expectedParts = normalizeCliVersion(expected).split("-")[0].split(".").map(Number);
-  for (let i = 0; i < Math.max(currentParts.length, expectedParts.length, 3); i += 1) {
-    const local = currentParts[i] ?? 0;
-    const target = expectedParts[i] ?? 0;
-    if (local < target) return "upgrade";
-    if (local > target) return "downgrade";
-  }
-  return "switch";
-}
-
-// src/core/feature-config.ts
-import crypto from "crypto";
-import fs6 from "fs";
-import path6 from "path";
-var FEATURE_TTL_MS = 24 * 60 * 60 * 1e3;
-var UNAVAILABLE_TTL_MS = 5 * 60 * 1e3;
-function cachePath() {
-  return path6.join(getConfigDir(), "feature-config.json");
-}
-function cacheKey(host, token) {
-  const fingerprint = crypto.createHash("sha256").update(token).digest("hex");
-  return `${normalizeUrl(host)}#${fingerprint}`;
-}
-function readStore() {
-  try {
-    const value = JSON.parse(fs6.readFileSync(cachePath(), "utf8"));
-    return value?.entries && typeof value.entries === "object" ? value : { entries: {} };
-  } catch {
-    return { entries: {} };
-  }
-}
-function writeStore(store) {
-  const target = cachePath();
-  const temp = `${target}.${process.pid}.${crypto.randomBytes(6).toString("hex")}.tmp`;
-  try {
-    fs6.mkdirSync(path6.dirname(target), { recursive: true });
-    fs6.writeFileSync(temp, JSON.stringify(store), { encoding: "utf8", mode: 384 });
-    fs6.renameSync(temp, target);
-    fs6.chmodSync(target, 384);
-  } catch {
-    try {
-      fs6.rmSync(temp, { force: true });
-    } catch {
-    }
-  }
-}
-function remember(host, token, entry) {
-  const store = readStore();
-  store.entries[cacheKey(host, token)] = entry;
-  writeStore(store);
-}
-function rememberKbAutoDiscoveryFeature(host, token, enabled) {
-  remember(host, token, { enabled, available: true, fetchedAt: Date.now() });
-}
-async function resolveKbAutoDiscoveryFeature(host, token, fetchRemote) {
-  const entry = readStore().entries[cacheKey(host, token)];
-  const ttl = entry?.available ? FEATURE_TTL_MS : UNAVAILABLE_TTL_MS;
-  if (entry && Date.now() >= entry.fetchedAt && Date.now() - entry.fetchedAt < ttl) {
-    return { enabled: entry.enabled, source: entry.available ? "cache" : "unavailable" };
-  }
-  const remote = await fetchRemote().catch(() => null);
-  if (!remote) {
-    remember(host, token, { enabled: false, available: false, fetchedAt: Date.now() });
-    return { enabled: false, source: "unavailable" };
-  }
-  const enabled = remote.projectSemanticKbAutoDiscovery === true;
-  remember(host, token, { enabled, available: true, fetchedAt: Date.now() });
-  return { enabled, source: "remote" };
-}
-
-// src/core/compat-check.ts
-import fs7 from "fs";
-import path7 from "path";
-var CHECK_INTERVAL_MS = 60 * 60 * 1e3;
-var NOTIFY_INTERVAL_MS = 24 * 60 * 60 * 1e3;
-var FETCH_TIMEOUT_MS = 3e3;
-var CLI_CONFIG_PATH = "/v1/ta/cli/config";
-function cacheFilePath() {
-  return path7.join(getConfigDir(), "compat-check.json");
-}
-function readStore2() {
-  try {
-    const file = cacheFilePath();
-    if (!fs7.existsSync(file)) return { hosts: {} };
-    const raw = JSON.parse(fs7.readFileSync(file, "utf8"));
-    if (!raw || typeof raw !== "object" || !raw.hosts) return { hosts: {} };
-    return raw;
-  } catch {
-    return { hosts: {} };
-  }
-}
-function writeStore2(store) {
-  try {
-    const dir = getConfigDir();
-    if (!fs7.existsSync(dir)) fs7.mkdirSync(dir, { recursive: true });
-    fs7.writeFileSync(cacheFilePath(), JSON.stringify(store, null, 2));
-  } catch {
-  }
-}
-function hostKey(host) {
-  return normalizeUrl(host);
-}
-function isCompatCacheStale(entry, now = Date.now()) {
-  if (!entry?.lastFetchedAt) return true;
-  const age = now - new Date(entry.lastFetchedAt).getTime();
-  return age >= CHECK_INTERVAL_MS;
-}
-function shouldNotifyCompat(entry, now = Date.now()) {
-  if (!entry?.lastNotifiedAt) return true;
-  const age = now - new Date(entry.lastNotifiedAt).getTime();
-  return age >= NOTIFY_INTERVAL_MS;
-}
-function shouldSkipCompatCheck(argv = process.argv) {
-  if (process.env.AE_CLI_NO_COMPAT_CHECK === "1") return true;
-  if (isAeSandboxRuntime()) return true;
-  return shouldSkipUpdateCheck(argv);
-}
-function rootCommand(argv) {
-  const args = argv.slice(2);
-  for (let i = 0; i < args.length; i += 1) {
-    const token = args[i];
-    if (token === "--") return void 0;
-    if (token.startsWith("-")) {
-      if (!token.includes("=") && ["--host", "--cli-token-file", "--mcp-url", "--format", "--jq"].includes(token)) {
-        i += 1;
-      }
-      continue;
-    }
-    return token;
-  }
-  return void 0;
-}
-function shouldSkipAutoSync(argv = process.argv) {
-  const command = rootCommand(argv);
-  return command === "update" || command === "install" || command === "auth" || command === "config";
-}
-async function fetchCliConfig(host, cliToken) {
-  const url = new URL(CLI_CONFIG_PATH, host.endsWith("/") ? host : `${host}/`);
-  const external = readExternalCliToken(host)?.token === cliToken;
-  if (!external) url.searchParams.set("cli-token", cliToken);
-  const controller = new AbortController();
-  const timer = setTimeout(() => controller.abort(), FETCH_TIMEOUT_MS);
-  try {
-    const resp = await fetch(url.toString(), {
-      signal: controller.signal,
-      headers: { Accept: "application/json", ...external ? { "cli-token": cliToken } : {} },
-      ...externalCliTokenRequestOptions(url.toString())
-    });
-    if (!resp.ok) return null;
-    const body = await resp.json();
-    const data = body.data ?? body;
-    const versions = data.versions;
-    if (!versions) return null;
-    const clusterVersion = versions.clusterVersion ?? versions.cluster_version ?? null;
-    const aeCliVersion = versions.aeCliVersion ?? versions.ae_cli_version ?? null;
-    return {
-      clusterVersion: clusterVersion?.trim() || null,
-      aeCliVersion: aeCliVersion?.trim() || null,
-      ...typeof data.features?.projectSemanticKbAutoDiscovery === "boolean" ? { projectSemanticKbAutoDiscovery: data.features.projectSemanticKbAutoDiscovery } : {}
-    };
-  } catch {
-    return null;
-  } finally {
-    clearTimeout(timer);
-  }
-}
-function printNotice(text) {
-  process.stderr.write(`${text}
-`);
-}
-var pendingHostCompatNotice;
-var pendingUpdateNotice;
-function getPendingHostCompatNotice() {
-  return pendingHostCompatNotice;
-}
-function getPendingUpdateNotice() {
-  return pendingUpdateNotice;
-}
-function getCachedCompatForHost(host) {
-  return readStore2().hosts[hostKey(host)];
-}
-function formatCapabilityMissCompatHint(host) {
-  if (shouldSkipCompatCheck()) return void 0;
-  const active = host || getActiveHost();
-  if (!active) {
-    return "This capability may be missing on the current private cluster. Update cluster components to the latest version, or pin this machine to the environment ae-cli version.";
-  }
-  const cached = getCachedCompatForHost(active);
-  if (cached?.expectedVersion) {
-    const pins = formatPinCommands(cached.expectedVersion);
-    if (pins.length > 0) {
-      return [
-        `Host may be older than this CLI (environment ae-cli ${cached.expectedVersion}, cluster ${cached.clusterVersion || "?"}).`,
-        `Update cluster components to the latest version, or pin locally:`,
-        ...pins.map((c) => `  ${c}`)
-      ].join("\n");
-    }
-    return [
-      `Host may be older than this CLI (environment ae-cli ${cached.expectedVersion}, cluster ${cached.clusterVersion || "?"}).`,
-      `No public GitHub/npm release matches that environment version; update cluster components to the latest version instead of pinning.`
-    ].join("\n");
-  }
-  return "This capability may be missing on the current private cluster. Update cluster components to the latest version, or pin this machine CLI + skills to the environment version (see ae-cli host compat notices after auth login).";
-}
-function setUpdateNotice(pkg, expected, cluster, verdict, state, stage, message) {
-  pendingHostCompatNotice = void 0;
-  pendingUpdateNotice = {
-    command: "ae-cli update",
-    current: pkg.version,
-    expected,
-    cluster,
-    reason: verdict.kind === "ok" && state === "skills_pending" ? "skills_pending" : verdict.kind,
-    state,
-    ...stage ? { stage } : {},
-    message: message ?? `Current ae-cli is ${pkg.version}; this host requires ${expected}. Run: ae-cli update`
-  };
-}
-async function refreshAndMaybeNotify(host, pkg, allowAutoSync) {
-  const token = peekCliToken(host);
-  if (!token) return { status: "continue" };
-  const store = readStore2();
-  const key = hostKey(host);
-  const existing = store.hosts[key];
-  let expected = existing?.expectedVersion;
-  let cluster = existing?.clusterVersion;
-  let fetchedAt = existing?.lastFetchedAt;
-  if (isCompatCacheStale(existing)) {
-    const remote = await fetchCliConfig(host, token);
-    if (remote) rememberKbAutoDiscoveryFeature(host, token, remote.projectSemanticKbAutoDiscovery ?? false);
-    if (!remote?.aeCliVersion) {
-      return { status: "continue" };
-    }
-    expected = remote.aeCliVersion;
-    cluster = remote.clusterVersion ?? "";
-    fetchedAt = (/* @__PURE__ */ new Date()).toISOString();
-    store.hosts[key] = {
-      host: key,
-      localVersion: pkg.version,
-      expectedVersion: expected,
-      clusterVersion: cluster,
-      lastFetchedAt: fetchedAt,
-      lastNotifiedAt: existing?.lastNotifiedAt
-    };
-    writeStore2(store);
-  }
-  if (!expected) return { status: "continue" };
-  let verdict = evaluateCompat(pkg.version, expected, cluster);
-  let pendingSkills = getPendingSkillsTarget(host) === expected;
-  if (verdict.kind === "ok" && !pendingSkills) {
-    pendingHostCompatNotice = void 0;
-    pendingUpdateNotice = void 0;
-    return { status: "continue" };
-  }
-  let entry = store.hosts[key] ?? {
-    host: key,
-    localVersion: pkg.version,
-    expectedVersion: expected,
-    clusterVersion: cluster || "",
-    lastFetchedAt: fetchedAt || (/* @__PURE__ */ new Date()).toISOString()
-  };
-  entry.localVersion = pkg.version;
-  entry.expectedVersion = expected;
-  entry.clusterVersion = cluster || entry.clusterVersion;
-  const canAutoSync = allowAutoSync && isPublicAeCliPackage(pkg.name) && isRegularCliVersion(pkg.version) && isAutoSyncTargetEligible(expected);
-  if (canAutoSync) {
-    const confirmed = await fetchCliConfig(host, token);
-    if (confirmed) rememberKbAutoDiscoveryFeature(host, token, confirmed.projectSemanticKbAutoDiscovery ?? false);
-    if (confirmed?.aeCliVersion) {
-      expected = confirmed.aeCliVersion;
-      cluster = confirmed.clusterVersion ?? cluster ?? "";
-      verdict = evaluateCompat(pkg.version, expected, cluster);
-      pendingSkills = getPendingSkillsTarget(host) === expected;
-      entry = {
-        ...entry,
-        localVersion: pkg.version,
-        expectedVersion: expected,
-        clusterVersion: cluster || "",
-        lastFetchedAt: (/* @__PURE__ */ new Date()).toISOString()
-      };
-      store.hosts[key] = entry;
-      writeStore2(store);
-      if (verdict.kind === "ok" && !pendingSkills) {
-        pendingHostCompatNotice = void 0;
-        pendingUpdateNotice = void 0;
-        return { status: "continue" };
-      }
-      if (isAutoSyncTargetEligible(expected)) {
-        const attempt = reserveAutoAttempt(host, expected);
-        if (attempt.allowed) {
-          const direction = verdict.kind === "ok" && pendingSkills ? "skills" : autoSyncDirection(pkg.version, expected);
-          const verb = direction === "upgrade" ? "upgrading" : direction === "downgrade" ? "downgrading" : direction === "skills" ? "repairing" : "switching";
-          printNotice(
-            `[ae-cli] Current version ${pkg.version}; this host requires ${expected}. Automatically ${verb} CLI and Skills, please wait...`
-          );
-          const result = installVersion(expected, {
-            skipCliInstall: verdict.kind === "ok" && pendingSkills,
-            progress: printNotice
-          });
-          recordVersionSyncResult(host, expected, result);
-          if (result.ok) {
-            printNotice(
-              `[ae-cli] Synchronized to ${expected}. Re-run the previous command to use the new version.`
-            );
-            pendingHostCompatNotice = void 0;
-            pendingUpdateNotice = void 0;
-            return {
-              status: "synced",
-              current: pkg.version,
-              expected,
-              cluster: cluster || "",
-              direction
-            };
-          }
-          const state = result.skillsPending ? "skills_pending" : "auto_sync_failed";
-          const friendlyCause = friendlyVersionSyncFailure(result);
-          const failure = result.skillsPending ? `CLI switched to ${expected}, but Skills synchronization failed. ${friendlyCause} This command will continue; run ae-cli update after access is restored.` : `${friendlyCause} This command will continue; run ae-cli update after fixing access.`;
-          printNotice(`[ae-cli] ${failure}`);
-          setUpdateNotice(pkg, expected, cluster || "", verdict, state, result.stage, failure);
-          entry.lastNotifiedAt = (/* @__PURE__ */ new Date()).toISOString();
-          store.hosts[key] = entry;
-          writeStore2(store);
-          return { status: "continue" };
-        }
-      }
-    }
-  }
-  const notice = verdict.kind === "ok" && pendingSkills ? `[ae-cli] CLI ${expected} is installed, but its Skills are not synchronized.
-         Run: ae-cli update` : formatCompatNotice(verdict);
-  if (!notice) return { status: "continue" };
-  const dueForTip = shouldNotifyCompat(entry);
-  if (!dueForTip) {
-    pendingHostCompatNotice = void 0;
-    pendingUpdateNotice = void 0;
-    store.hosts[key] = entry;
-    writeStore2(store);
-    return { status: "continue" };
-  }
-  setUpdateNotice(
-    pkg,
-    expected,
-    cluster || "",
-    verdict,
-    pendingSkills ? "skills_pending" : "prompt_only",
-    void 0,
-    pendingSkills ? `Skills for ae-cli ${expected} are not synchronized. Run: ae-cli update` : void 0
-  );
-  printNotice(notice);
-  entry.lastNotifiedAt = (/* @__PURE__ */ new Date()).toISOString();
-  store.hosts[key] = entry;
-  writeStore2(store);
-  return { status: "continue" };
-}
-async function runHostCompatCheck(pkg, hostOverride, argv = process.argv) {
-  pendingHostCompatNotice = void 0;
-  pendingUpdateNotice = void 0;
-  if (shouldSkipCompatCheck(argv)) return { status: "continue" };
-  const host = hostOverride || getActiveHost();
-  if (!host) return { status: "continue" };
-  try {
-    return await refreshAndMaybeNotify(host, pkg, !shouldSkipAutoSync(argv));
-  } catch {
-    return { status: "continue" };
-  }
-}
-
-// src/framework/output.ts
-import Table from "cli-table3";
-import { JqError, json as jqJson } from "jq-wasm";
-var KNOWN_ARRAY_FIELDS = [
-  "items",
-  "events",
-  "reports",
-  "dashboards",
-  "tags",
-  "clusters",
-  "flows",
-  "tasks",
-  "channels",
-  "nodes",
-  "members",
-  "records",
-  "entities",
-  "metrics",
-  "tables",
-  "columns",
-  "properties"
-];
-var OUTPUT_METADATA = /* @__PURE__ */ Symbol("ae-cli-output-metadata");
-function withOutputMetadata(data, meta) {
-  if (!meta || Object.keys(meta).length === 0) return data;
-  if (isOutputWithMetadata(data)) {
-    return {
-      [OUTPUT_METADATA]: true,
-      data: data.data,
-      meta: { ...data.meta, ...meta }
-    };
-  }
-  return {
-    [OUTPUT_METADATA]: true,
-    data,
-    meta
-  };
-}
-function isOutputWithMetadata(value) {
-  return Boolean(value?.[OUTPUT_METADATA]);
-}
-function unwrapOutputData(value) {
-  return isOutputWithMetadata(value) ? value.data : value;
-}
-function readOutputMetadata(value) {
-  return isOutputWithMetadata(value) ? value.meta : void 0;
-}
-function findArrayField(data) {
-  if (Array.isArray(data)) return data;
-  if (typeof data !== "object" || data === null) return null;
-  for (const key of KNOWN_ARRAY_FIELDS) {
-    if (Array.isArray(data[key])) return data[key];
-  }
-  for (const key of Object.keys(data)) {
-    if (Array.isArray(data[key])) return data[key];
-  }
-  return null;
-}
-function formatTable(data) {
-  if (Array.isArray(data?.title) && data.title.length > 0 && Array.isArray(data?.rows)) {
-    const headers = data.title.map((value) => String(value));
-    const table2 = new Table({ head: headers, wordWrap: true });
-    for (const row of data.rows) {
-      const values = Array.isArray(row) ? row : [row];
-      table2.push(headers.map((_header, index) => {
-        const value = values[index];
-        if (value === void 0 || value === null) return "";
-        if (typeof value === "object") return JSON.stringify(value);
-        return String(value);
-      }));
-    }
-    return table2.toString();
-  }
-  const rows = findArrayField(data);
-  if (!rows || rows.length === 0) {
-    return JSON.stringify(data, null, 2);
-  }
-  const allKeys = /* @__PURE__ */ new Set();
-  for (const row of rows) {
-    if (typeof row === "object" && row !== null) {
-      Object.keys(row).forEach((k) => allKeys.add(k));
-    }
-  }
-  const keys = Array.from(allKeys);
-  if (keys.length === 0) return JSON.stringify(rows, null, 2);
-  const table = new Table({ head: keys, wordWrap: true });
-  for (const row of rows) {
-    table.push(keys.map((k) => {
-      const v = row?.[k];
-      if (v === void 0 || v === null) return "";
-      if (typeof v === "object") return JSON.stringify(v);
-      return String(v);
-    }));
-  }
-  return table.toString();
-}
-async function applyJq(data, expr) {
-  const trimmed = expr.trim();
-  if (!trimmed) return data;
-  let results;
-  try {
-    results = await jqJson(data ?? null, trimmed);
-  } catch (err) {
-    const message = err instanceof JqError ? err.message : err?.message || String(err);
-    const error = new Error(`Invalid --jq expression: ${message}`);
-    error.type = "validation";
-    error.code = "OUTPUT_PROJECTION_FAILED";
-    error.hint = "The command completed. Original data and metadata are preserved in stdout; fix the jq expression locally without executing the command again. --jq applies to the command data before envelope wrapping.";
-    throw error;
-  }
-  if (results.length === 0) return null;
-  if (results.length === 1) return results[0];
-  return results;
-}
-async function formatOutput(data, format, jqExpr) {
-  const outputData = isOutputWithMetadata(data) ? data.data : data;
-  const meta = isOutputWithMetadata(data) ? data.meta : void 0;
-  let processed = outputData;
-  if (jqExpr) {
-    processed = await applyJq(outputData, jqExpr);
-  }
-  if (format === "table") {
-    return redactExternalCliToken(formatTable(processed));
-  }
-  const hostCompat = getPendingHostCompatNotice();
-  const updateNotice = getPendingUpdateNotice();
-  const notices = {
-    ...updateNotice ? {} : hostCompat ? { host_compat: hostCompat } : {},
-    ...updateNotice ? { update: updateNotice } : {}
-  };
-  const envelope = {
-    ok: true,
-    data: processed,
-    ...meta ? { meta } : {},
-    // Soft tip lives only under _notice (not mirrored into meta) to avoid duplicate fields.
-    ...Object.keys(notices).length > 0 ? { _notice: notices } : {}
-  };
-  return redactExternalCliToken(JSON.stringify(envelope, null, 2));
-}
-function formatError(type, message, hint, code, meta, details) {
-  const envelope = {
-    ok: false,
-    error: { type, message, hint, code, ...details === void 0 ? {} : { details } },
-    ...meta && Object.keys(meta).length > 0 ? { meta } : {}
-  };
-  return redactExternalCliToken(JSON.stringify(envelope, null, 2));
-}
-function printError(type, message, hint, code, meta, options = {}) {
-  const formatted = formatError(type, message, hint, code, meta, options.details);
-  process.stderr.write(formatted + "\n");
-  if (options.log !== false) {
-    logger.error(`[${type}] ${message}${hint ? " | " + hint : ""}`);
-  }
-}
-function sensitiveRecoveryData(data) {
-  const safe = {};
-  const item = {};
-  if (typeof data?.item?.id === "string") item.id = data.item.id;
-  if (Number.isSafeInteger(data?.item?.contentRevision)) item.contentRevision = data.item.contentRevision;
-  if (Object.keys(item).length > 0) safe.item = item;
-  if (["markdown", "text"].includes(data?.contentFormat)) safe.contentFormat = data.contentFormat;
-  if (typeof data?.out === "string") safe.out = data.out;
-  return safe;
-}
-async function printOutput(data, format, jqExpr, options = {}) {
-  try {
-    process.stdout.write(await formatOutput(data, format, jqExpr) + "\n");
-  } catch (error) {
-    if (error?.code === "OUTPUT_PROJECTION_FAILED") {
-      if (options.redactErrors) {
-        error.message = "Invalid --jq expression: output projection failed; source content is omitted from diagnostics.";
-        error.hint = "The read completed. Fix --jq and explicitly run read-text again without --out, or inspect the file at data.out if present. This error result excludes source content.";
-      }
-      const recovery = JSON.parse(formatError(
-        "validation",
-        error.message,
-        error.hint,
-        error.code,
-        options.redactErrors ? void 0 : readOutputMetadata(data)
-      ));
-      const recoveryData = options.redactErrors ? sensitiveRecoveryData(unwrapOutputData(data)) : unwrapOutputData(data);
-      await new Promise((resolve, reject) => {
-        process.stdout.write(
-          redactExternalCliToken(JSON.stringify({ ...recovery, data: recoveryData }, null, 2)) + "\n",
-          (error2) => error2 ? reject(error2) : resolve()
-        );
-      });
-    }
-    throw error;
-  }
-}
-
-export {
-  exactVersion,
-  installHost,
-  getLocalCliPackageInfo,
-  newInstallationReport,
-  failInstallation,
-  recordVersionSyncResult,
-  buildVersionInstallPlan,
-  friendlyVersionSyncFailure,
-  installVersion,
-  resolveKbAutoDiscoveryFeature,
-  shouldSkipAutoSync,
-  fetchCliConfig,
-  getCachedCompatForHost,
-  formatCapabilityMissCompatHint,
-  runHostCompatCheck,
-  withOutputMetadata,
-  unwrapOutputData,
-  readOutputMetadata,
-  printError,
-  printOutput
-};