@thinkingai/ae-cli 6.1.28 → 6.1.29

package/dist/chunk-QZLRHGVH.js

@@ -0,0 +1,222 @@
+import { createRequire as __createRequire } from 'node:module'; const require = __createRequire(import.meta.url);
+import {
+  getPendingHostCompatNotice,
+  getPendingUpdateNotice
+} from "./chunk-2UW3Y463.js";
+import {
+  logger,
+  redactExternalCliToken
+} from "./chunk-Z3Q2AEIN.js";
+
+// src/framework/output.ts
+import Table from "cli-table3";
+import { JqError, json as jqJson } from "jq-wasm";
+var KNOWN_ARRAY_FIELDS = [
+  "items",
+  "events",
+  "reports",
+  "dashboards",
+  "tags",
+  "clusters",
+  "flows",
+  "tasks",
+  "channels",
+  "nodes",
+  "members",
+  "records",
+  "entities",
+  "metrics",
+  "tables",
+  "columns",
+  "properties"
+];
+var OUTPUT_METADATA = /* @__PURE__ */ Symbol("ae-cli-output-metadata");
+function withOutputMetadata(data, meta) {
+  if (!meta || Object.keys(meta).length === 0) return data;
+  if (isOutputWithMetadata(data)) {
+    return {
+      [OUTPUT_METADATA]: true,
+      data: data.data,
+      meta: { ...data.meta, ...meta }
+    };
+  }
+  return {
+    [OUTPUT_METADATA]: true,
+    data,
+    meta
+  };
+}
+function isOutputWithMetadata(value) {
+  return Boolean(value?.[OUTPUT_METADATA]);
+}
+function unwrapOutputData(value) {
+  return isOutputWithMetadata(value) ? value.data : value;
+}
+function readOutputMetadata(value) {
+  return isOutputWithMetadata(value) ? value.meta : void 0;
+}
+function findArrayField(data) {
+  if (Array.isArray(data)) return { rows: data };
+  if (typeof data !== "object" || data === null) return null;
+  for (const key of KNOWN_ARRAY_FIELDS) {
+    if (Array.isArray(data[key])) return { key, rows: data[key] };
+  }
+  for (const key of Object.keys(data)) {
+    if (Array.isArray(data[key])) return { key, rows: data[key] };
+  }
+  return null;
+}
+function formatTable(data) {
+  if (Array.isArray(data?.title) && data.title.length > 0 && Array.isArray(data?.rows)) {
+    const headers = data.title.map((value) => String(value));
+    const table2 = new Table({ head: headers, wordWrap: true });
+    for (const row of data.rows) {
+      const values = Array.isArray(row) ? row : [row];
+      table2.push(headers.map((_header, index) => {
+        const value = values[index];
+        if (value === void 0 || value === null) return "";
+        if (typeof value === "object") return JSON.stringify(value);
+        return String(value);
+      }));
+    }
+    return table2.toString();
+  }
+  const arrayField = findArrayField(data);
+  if (!arrayField || arrayField.rows.length === 0) {
+    return JSON.stringify(data, null, 2);
+  }
+  const rows = arrayField.rows;
+  const allKeys = /* @__PURE__ */ new Set();
+  for (const row of rows) {
+    if (typeof row === "object" && row !== null) {
+      Object.keys(row).forEach((k) => allKeys.add(k));
+    }
+  }
+  const keys = Array.from(allKeys);
+  if (keys.length === 0) return JSON.stringify(rows, null, 2);
+  const table = new Table({ head: keys, wordWrap: true });
+  for (const row of rows) {
+    table.push(keys.map((k) => {
+      const v = row?.[k];
+      if (v === void 0 || v === null) return "";
+      if (typeof v === "object") return JSON.stringify(v);
+      return String(v);
+    }));
+  }
+  const sections = [];
+  if (arrayField.key && typeof data === "object" && data !== null) {
+    const summaryEntries = Object.entries(data).filter(([key]) => key !== arrayField.key);
+    if (summaryEntries.length > 0) {
+      const summary = new Table({ head: ["field", "value"], wordWrap: true });
+      for (const [key, value] of summaryEntries) {
+        summary.push([key, typeof value === "object" && value !== null ? JSON.stringify(value) : String(value ?? "")]);
+      }
+      sections.push(summary.toString());
+    }
+  }
+  sections.push(table.toString());
+  return sections.join("\n\n");
+}
+async function applyJq(data, expr) {
+  const trimmed = expr.trim();
+  if (!trimmed) return data;
+  let results;
+  try {
+    results = await jqJson(data ?? null, trimmed);
+  } catch (err) {
+    const message = err instanceof JqError ? err.message : err?.message || String(err);
+    const error = new Error(`Invalid --jq expression: ${message}`);
+    error.type = "validation";
+    error.code = "OUTPUT_PROJECTION_FAILED";
+    error.hint = "The command completed. Original data and metadata are preserved in stdout; fix the jq expression locally without executing the command again. --jq applies to the command data before envelope wrapping.";
+    throw error;
+  }
+  if (results.length === 0) return null;
+  if (results.length === 1) return results[0];
+  return results;
+}
+async function formatOutput(data, format, jqExpr) {
+  const outputData = isOutputWithMetadata(data) ? data.data : data;
+  const meta = isOutputWithMetadata(data) ? data.meta : void 0;
+  let processed = outputData;
+  if (jqExpr) {
+    processed = await applyJq(outputData, jqExpr);
+  }
+  if (format === "table") {
+    return redactExternalCliToken(formatTable(processed));
+  }
+  const hostCompat = getPendingHostCompatNotice();
+  const updateNotice = getPendingUpdateNotice();
+  const notices = {
+    ...updateNotice ? {} : hostCompat ? { host_compat: hostCompat } : {},
+    ...updateNotice ? { update: updateNotice } : {}
+  };
+  const envelope = {
+    ok: true,
+    data: processed,
+    ...meta ? { meta } : {},
+    // Soft tip lives only under _notice (not mirrored into meta) to avoid duplicate fields.
+    ...Object.keys(notices).length > 0 ? { _notice: notices } : {}
+  };
+  return redactExternalCliToken(JSON.stringify(envelope, null, 2));
+}
+function formatError(type, message, hint, code, meta, details) {
+  const envelope = {
+    ok: false,
+    error: { type, message, hint, code, ...details === void 0 ? {} : { details } },
+    ...meta && Object.keys(meta).length > 0 ? { meta } : {}
+  };
+  return redactExternalCliToken(JSON.stringify(envelope, null, 2));
+}
+function printError(type, message, hint, code, meta, options = {}) {
+  const formatted = formatError(type, message, hint, code, meta, options.details);
+  process.stderr.write(formatted + "\n");
+  if (options.log !== false) {
+    logger.error(`[${type}] ${message}${hint ? " | " + hint : ""}`);
+  }
+}
+function sensitiveRecoveryData(data) {
+  const safe = {};
+  const item = {};
+  if (typeof data?.item?.id === "string") item.id = data.item.id;
+  if (Number.isSafeInteger(data?.item?.contentRevision)) item.contentRevision = data.item.contentRevision;
+  if (Object.keys(item).length > 0) safe.item = item;
+  if (["markdown", "text"].includes(data?.contentFormat)) safe.contentFormat = data.contentFormat;
+  if (typeof data?.out === "string") safe.out = data.out;
+  return safe;
+}
+async function printOutput(data, format, jqExpr, options = {}) {
+  try {
+    process.stdout.write(await formatOutput(data, format, jqExpr) + "\n");
+  } catch (error) {
+    if (error?.code === "OUTPUT_PROJECTION_FAILED") {
+      if (options.redactErrors) {
+        error.message = "Invalid --jq expression: output projection failed; source content is omitted from diagnostics.";
+        error.hint = "The read completed. Fix --jq and explicitly run read-text again without --out, or inspect the file at data.out if present. This error result excludes source content.";
+      }
+      const recovery = JSON.parse(formatError(
+        "validation",
+        error.message,
+        error.hint,
+        error.code,
+        options.redactErrors ? void 0 : readOutputMetadata(data)
+      ));
+      const recoveryData = options.redactErrors ? sensitiveRecoveryData(unwrapOutputData(data)) : unwrapOutputData(data);
+      await new Promise((resolve, reject) => {
+        process.stdout.write(
+          redactExternalCliToken(JSON.stringify({ ...recovery, data: recoveryData }, null, 2)) + "\n",
+          (error2) => error2 ? reject(error2) : resolve()
+        );
+      });
+    }
+    throw error;
+  }
+}
+
+export {
+  withOutputMetadata,
+  unwrapOutputData,
+  readOutputMetadata,
+  printError,
+  printOutput
+};

package/dist/{chunk-GI5BMEZO.js → chunk-QZUVLFNR.js}

@@ -3,7 +3,7 @@ import {
   getAgentApi,
   patchAgentApi,
   postAgentApi
-} from "./chunk-JJJIP2XQ.js";
+} from "./chunk-N6XBLRB7.js";
 
 // src/commands/memory/cli-client.ts
 var DEFAULT_TE_CLAUDE_BASE_PATH = "/agent";

package/dist/{chunk-2UWS5CUP.js → chunk-RJHGDWSC.js}

@@ -4,17 +4,17 @@ import {
 } from "./chunk-Y74WTIKJ.js";
 import {
   getCliToken
-} from "./chunk-P7KL7IOH.js";
+} from "./chunk-H3K5UGYC.js";
 import {
   getActiveHost,
   getSandboxRuntimeRoot
-} from "./chunk-LMCYSVVA.js";
+} from "./chunk-JNVVJ273.js";
 import {
   PermissionError,
   externalCliTokenRequestOptions,
   isApiErrorType,
   readExternalCliToken
-} from "./chunk-ZW4VMY5H.js";
+} from "./chunk-Z3Q2AEIN.js";
 
 // src/core/te-agent-credentials.ts
 import { readFileSync } from "fs";

package/dist/{chunk-UJ7UPRXK.js → chunk-VCZE3IWO.js}

@@ -1,18 +1,21 @@
 import { createRequire as __createRequire } from 'node:module'; const require = __createRequire(import.meta.url);
-import {
-  dryRunCapability,
-  executeCapabilityWithEnvelope,
-  validateCapability
-} from "./chunk-QW3R6O7L.js";
 import {
   resolveGatewayDomain
 } from "./chunk-KPQY44JQ.js";
 import {
   withOutputMetadata
-} from "./chunk-ELCR235M.js";
+} from "./chunk-QZLRHGVH.js";
+import {
+  dryRunCapability,
+  executeCapabilityWithEnvelope,
+  validateCapability
+} from "./chunk-3SDHJOCR.js";
 import {
   CliValidationError
-} from "./chunk-ZW4VMY5H.js";
+} from "./chunk-Z3Q2AEIN.js";
+
+// src/core/capability-command.ts
+import { randomBytes } from "crypto";
 
 // src/core/definition-intent.ts
 import { createHash } from "crypto";
@@ -83,7 +86,6 @@ function isRecord(value) {
 }
 
 // src/core/capability-command.ts
-import { randomBytes } from "crypto";
 function createCapabilityCommand(config) {
   return {
     service: config.cliService,

package/dist/{chunk-X7DRLE62.js → chunk-YVG6QD3V.js}

@@ -2,7 +2,7 @@ import { createRequire as __createRequire } from 'node:module'; const require =
 import {
   CliValidationError,
   logger
-} from "./chunk-ZW4VMY5H.js";
+} from "./chunk-Z3Q2AEIN.js";
 
 // src/core/eval-endpoint.ts
 function resolveEvaluationHost(host) {

package/dist/{chunk-ZW4VMY5H.js → chunk-Z3Q2AEIN.js}

@@ -48,6 +48,139 @@ var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__ge
 ));
 var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
 
+// src/core/errors.ts
+var PermissionError = class extends Error {
+  constructor(message, code, hint, details, meta) {
+    super(message);
+    this.code = code;
+    this.hint = hint;
+    this.details = details;
+    this.meta = meta;
+    this.name = "PermissionError";
+  }
+  code;
+  hint;
+  details;
+  meta;
+};
+function isApiErrorType(value) {
+  return value === "auth" || value === "permission" || value === "validation" || value === "not_found" || value === "api";
+}
+var CliValidationError = class extends Error {
+  code;
+  hint;
+  location;
+  constructor(message, options = {}) {
+    super(message);
+    this.name = "CliValidationError";
+    this.code = options.code;
+    this.hint = options.hint;
+    if (options.location) {
+      const location = {};
+      if (typeof options.location.segment === "number" && Number.isFinite(options.location.segment)) {
+        location.segment = options.location.segment;
+      }
+      if (typeof options.location.record === "number" && Number.isFinite(options.location.record)) {
+        location.record = options.location.record;
+      }
+      if (typeof options.location.field === "string" && options.location.field.length > 0) {
+        location.field = options.location.field;
+      }
+      if (Object.keys(location).length > 0) this.location = location;
+    }
+  }
+};
+var CliApiError = class extends Error {
+  code;
+  hint;
+  meta;
+  constructor(message, options = {}) {
+    super(message);
+    this.name = "CliApiError";
+    this.code = options.code;
+    this.hint = options.hint;
+    this.meta = options.meta;
+  }
+};
+var CommunityReportError = class extends Error {
+  code;
+  httpStatus;
+  hint;
+  meta;
+  constructor(message, options = {}) {
+    super(message, options.cause === void 0 ? void 0 : { cause: options.cause });
+    this.name = "CommunityReportError";
+    this.code = options.code;
+    this.httpStatus = options.httpStatus;
+    this.hint = options.hint;
+    this.meta = options.meta;
+  }
+};
+var LocalDataUploadError = class extends Error {
+  code;
+  httpStatus;
+  hint;
+  meta;
+  constructor(message, options = {}) {
+    super(message, options.cause === void 0 ? void 0 : { cause: options.cause });
+    this.name = "LocalDataUploadError";
+    this.code = options.code;
+    this.httpStatus = options.httpStatus;
+    this.hint = options.hint;
+    this.meta = options.meta;
+  }
+};
+
+// src/core/kb-read-context.ts
+import fs from "fs";
+var secrets = /* @__PURE__ */ new Set();
+function fail(code) {
+  throw new CliValidationError(code, { code });
+}
+function kbExecutionContextRequired() {
+  return process.env.AE_KB_READ_CONTEXT_REQUIRED !== void 0 || process.env.AE_KB_READ_CONTEXT_FILE !== void 0;
+}
+function isKbQueryPath(method, pathname) {
+  return method === "POST" && /^\/(?:agent\/)?api\/external\/knowledge-bases\/(list|index|grep|read)$/.test(pathname);
+}
+function readKbExecutionContext() {
+  if (!kbExecutionContextRequired()) return void 0;
+  const file = process.env.AE_KB_READ_CONTEXT_FILE;
+  if (process.env.AE_KB_READ_CONTEXT_REQUIRED !== "1" || !file) fail("KB_READ_CONTEXT_REQUIRED");
+  let fd;
+  let data;
+  try {
+    fd = fs.openSync(file, fs.constants.O_RDONLY | fs.constants.O_NOFOLLOW);
+    const stat = fs.fstatSync(fd);
+    if (!stat.isFile() || stat.size > 16384 || (stat.mode & 511) !== 384 || process.getuid && stat.uid !== process.getuid())
+      throw new Error();
+    data = JSON.parse(fs.readFileSync(fd, "utf8"));
+    if (!data || Array.isArray(data) || Object.keys(data).sort().join(",") !== "executionRef,expiresAt,formatVersion,origin,readContextId,required,token" || data.formatVersion !== 1 || data.required !== true || typeof data.executionRef !== "string" || !/^[^\s\0]{1,191}$/.test(data.executionRef) || typeof data.readContextId !== "string" || !/^[^\s\0]{1,191}$/.test(data.readContextId) || typeof data.token !== "string" || !/^cli_kbr_[A-Za-z0-9_-]{43,}$/.test(data.token) || typeof data.expiresAt !== "string" || !Number.isFinite(Date.parse(data.expiresAt)))
+      throw new Error();
+    const origin = new URL(data.origin);
+    if (!["http:", "https:"].includes(origin.protocol) || origin.username || origin.password || origin.origin !== data.origin)
+      throw new Error();
+  } catch {
+    fail("KB_READ_CONTEXT_REQUIRED");
+  } finally {
+    if (fd !== void 0) fs.closeSync(fd);
+  }
+  secrets.add(data.token);
+  if (Date.parse(data.expiresAt) <= Date.now()) fail("KB_READ_CONTEXT_EXPIRED");
+  return data;
+}
+function kbReadHeaders(url, explicitId) {
+  const context = readKbExecutionContext();
+  if (!context) return explicitId ? { "X-KB-Read-Context": explicitId } : void 0;
+  if (new URL(url).origin !== context.origin || explicitId && explicitId !== context.readContextId)
+    fail("KB_READ_CONTEXT_MISMATCH");
+  return { "cli-token": context.token, "X-KB-Read-Context": context.readContextId };
+}
+function redactKbReadCredential(value) {
+  for (const token of secrets) value = value.split(token).join("[REDACTED]");
+  return value.replace(/cli_kbr_[A-Za-z0-9_-]+/g, "[REDACTED]");
+}
+
 // src/core/url-utils.ts
 function normalizeUrl(url) {
   if (!url) return url;
@@ -58,7 +191,7 @@ function normalizeUrl(url) {
 }
 
 // src/core/external-cli-token.ts
-import fs from "fs";
+import fs2 from "fs";
 var ExternalCliTokenError = class extends Error {
   constructor(message, code = "EXTERNAL_CLI_TOKEN_INVALID") {
     super(message);
@@ -98,9 +231,9 @@ function readExternalCliToken(hostOverride) {
     if (!file.trim()) throw new ExternalCliTokenError("The external CLI token file path is empty.");
     let data;
     try {
-      const stat = fs.statSync(file);
+      const stat = fs2.statSync(file);
       if (!stat.isFile() || stat.size > 64 * 1024) throw new Error();
-      data = JSON.parse(fs.readFileSync(file, "utf8"));
+      data = JSON.parse(fs2.readFileSync(file, "utf8"));
     } catch {
       throw new ExternalCliTokenError("The external CLI token file must be a readable JSON file no larger than 64 KiB.");
     }
@@ -134,11 +267,11 @@ function redactExternalCliToken(value) {
   }
   const forms = [...diagnosticSecrets].flatMap((token) => [token, JSON.stringify(token).slice(1, -1), encodeURIComponent(token)]);
   for (const form of [...new Set(forms)].sort((a, b) => b.length - a.length)) value = value.split(form).join("[REDACTED]");
-  return value;
+  return redactKbReadCredential(value);
 }
 
 // src/core/logger.ts
-import fs2 from "fs";
+import fs3 from "fs";
 import path from "path";
 var LOG_DIR = path.join(process.env.HOME || "", ".ae-cli", "log");
 var Logger = class {
@@ -157,8 +290,8 @@ var Logger = class {
     return (/* @__PURE__ */ new Date()).toISOString().replace("T", " ").split(".")[0];
   }
   ensureDir() {
-    if (!fs2.existsSync(this.logDir)) {
-      fs2.mkdirSync(this.logDir, { recursive: true });
+    if (!fs3.existsSync(this.logDir)) {
+      fs3.mkdirSync(this.logDir, { recursive: true });
     }
   }
   filePath(level) {
@@ -176,7 +309,7 @@ var Logger = class {
     const line = `[${ts}] ${redactExternalCliToken(message)}
 `;
     try {
-      fs2.appendFileSync(this.filePath(level), line);
+      fs3.appendFileSync(this.filePath(level), line);
     } catch {
     }
   }
@@ -220,89 +353,6 @@ var Logger = class {
 };
 var logger = new Logger();
 
-// src/core/errors.ts
-var PermissionError = class extends Error {
-  constructor(message, code, hint, details, meta) {
-    super(message);
-    this.code = code;
-    this.hint = hint;
-    this.details = details;
-    this.meta = meta;
-    this.name = "PermissionError";
-  }
-  code;
-  hint;
-  details;
-  meta;
-};
-function isApiErrorType(value) {
-  return value === "auth" || value === "permission" || value === "validation" || value === "not_found" || value === "api";
-}
-var CliValidationError = class extends Error {
-  code;
-  hint;
-  location;
-  constructor(message, options = {}) {
-    super(message);
-    this.name = "CliValidationError";
-    this.code = options.code;
-    this.hint = options.hint;
-    if (options.location) {
-      const location = {};
-      if (typeof options.location.segment === "number" && Number.isFinite(options.location.segment)) {
-        location.segment = options.location.segment;
-      }
-      if (typeof options.location.record === "number" && Number.isFinite(options.location.record)) {
-        location.record = options.location.record;
-      }
-      if (typeof options.location.field === "string" && options.location.field.length > 0) {
-        location.field = options.location.field;
-      }
-      if (Object.keys(location).length > 0) this.location = location;
-    }
-  }
-};
-var CliApiError = class extends Error {
-  code;
-  hint;
-  meta;
-  constructor(message, options = {}) {
-    super(message);
-    this.name = "CliApiError";
-    this.code = options.code;
-    this.hint = options.hint;
-    this.meta = options.meta;
-  }
-};
-var CommunityReportError = class extends Error {
-  code;
-  httpStatus;
-  hint;
-  meta;
-  constructor(message, options = {}) {
-    super(message, options.cause === void 0 ? void 0 : { cause: options.cause });
-    this.name = "CommunityReportError";
-    this.code = options.code;
-    this.httpStatus = options.httpStatus;
-    this.hint = options.hint;
-    this.meta = options.meta;
-  }
-};
-var LocalDataUploadError = class extends Error {
-  code;
-  httpStatus;
-  hint;
-  meta;
-  constructor(message, options = {}) {
-    super(message, options.cause === void 0 ? void 0 : { cause: options.cause });
-    this.name = "LocalDataUploadError";
-    this.code = options.code;
-    this.httpStatus = options.httpStatus;
-    this.hint = options.hint;
-    this.meta = options.meta;
-  }
-};
-
 export {
   __require,
   __esm,
@@ -310,17 +360,21 @@ export {
   __export,
   __toESM,
   __toCommonJS,
+  PermissionError,
+  isApiErrorType,
+  CliValidationError,
+  CliApiError,
+  CommunityReportError,
+  LocalDataUploadError,
+  kbExecutionContextRequired,
+  isKbQueryPath,
+  readKbExecutionContext,
+  kbReadHeaders,
   normalizeUrl,
   ExternalCliTokenError,
   setExternalCliTokenFile,
   readExternalCliToken,
   externalCliTokenRequestOptions,
   redactExternalCliToken,
-  logger,
-  PermissionError,
-  isApiErrorType,
-  CliValidationError,
-  CliApiError,
-  CommunityReportError,
-  LocalDataUploadError
+  logger
 };

package/dist/{community-report-client-S2K3A3Q6.js → community-report-client-TJVCLZ3K.js}

@@ -2,7 +2,7 @@ import { createRequire as __createRequire } from 'node:module'; const require =
 import {
   CommunityReportError,
   logger
-} from "./chunk-ZW4VMY5H.js";
+} from "./chunk-Z3Q2AEIN.js";
 
 // src/core/community-report-client.ts
 var DEFAULT_TIMEOUT_MS = 3e4;

package/dist/compat-check-CII6B74E.js

@@ -0,0 +1,32 @@
+import { createRequire as __createRequire } from 'node:module'; const require = __createRequire(import.meta.url);
+import {
+  fetchCliConfig,
+  formatCapabilityMissCompatHint,
+  getCachedCompatForHost,
+  getPendingHostCompatNotice,
+  getPendingUpdateNotice,
+  isCompatCacheStale,
+  isNonInteractiveOutput,
+  notifyIfHostCompat,
+  runHostCompatCheck,
+  shouldNotifyCompat,
+  shouldSkipAutoSync,
+  shouldSkipCompatCheck
+} from "./chunk-2UW3Y463.js";
+import "./chunk-H3K5UGYC.js";
+import "./chunk-JNVVJ273.js";
+import "./chunk-Z3Q2AEIN.js";
+export {
+  fetchCliConfig,
+  formatCapabilityMissCompatHint,
+  getCachedCompatForHost,
+  getPendingHostCompatNotice,
+  getPendingUpdateNotice,
+  isCompatCacheStale,
+  isNonInteractiveOutput,
+  notifyIfHostCompat,
+  runHostCompatCheck,
+  shouldNotifyCompat,
+  shouldSkipAutoSync,
+  shouldSkipCompatCheck
+};