npm - @kweaver-ai/kweaver-sdk - Versions diffs - 0.4.11 → 0.4.13 - Mend

@kweaver-ai/kweaver-sdk 0.4.11 → 0.4.13

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (30) hide show

package/README.md +59 -3
package/README.zh.md +40 -1
package/dist/api/dataflow.d.ts +2 -0
package/dist/api/dataflow.js +5 -3
package/dist/api/dataviews.d.ts +98 -1
package/dist/api/dataviews.js +167 -14
package/dist/api/vega.js +1 -1
package/dist/auth/oauth.d.ts +21 -0
package/dist/auth/oauth.js +226 -54
package/dist/cli.js +13 -0
package/dist/client.d.ts +12 -0
package/dist/client.js +16 -0
package/dist/commands/agent.js +15 -15
package/dist/commands/auth.js +80 -6
package/dist/commands/bkn.d.ts +11 -0
package/dist/commands/bkn.js +102 -59
package/dist/commands/dataview.d.ts +1 -0
package/dist/commands/dataview.js +303 -0
package/dist/commands/vega.js +7 -7
package/dist/index.d.ts +3 -0
package/dist/index.js +2 -0
package/dist/resources/dataflows.d.ts +17 -0
package/dist/resources/dataflows.js +22 -0
package/dist/resources/datasources.d.ts +52 -0
package/dist/resources/datasources.js +54 -0
package/dist/resources/dataviews.d.ts +37 -0
package/dist/resources/dataviews.js +47 -0
package/dist/resources/vega.d.ts +41 -0
package/dist/resources/vega.js +80 -0
package/package.json +1 -1

package/dist/auth/oauth.js CHANGED Viewed

@@ -5,6 +5,87 @@ const TOKEN_TTL_SECONDS = 3600;
 const REFRESH_THRESHOLD_SEC = 60;
 const DEFAULT_REDIRECT_PORT = 9010;
 const DEFAULT_SCOPE = "openid offline all";
+/** POSIX shell single-quote escaping for copy-paste commands. */
+export function shellQuoteForShell(value) {
+    return `'${value.replace(/'/g, `'\\''`)}'`;
+}
+/**
+ * Build a one-line `kweaver auth login ...` command for headless / other machines.
+ * Omits `--client-secret` when empty (PKCE-only client); headless refresh may still require a confidential client.
+ */
+export function buildCopyCommand(baseUrl, clientId, clientSecret, refreshToken, tlsInsecure) {
+    const parts = ["kweaver", "auth", "login", shellQuoteForShell(normalizeBaseUrl(baseUrl)), "--client-id", shellQuoteForShell(clientId)];
+    if (clientSecret) {
+        parts.push("--client-secret", shellQuoteForShell(clientSecret));
+    }
+    if (refreshToken) {
+        parts.push("--refresh-token", shellQuoteForShell(refreshToken));
+    }
+    if (tlsInsecure) {
+        parts.push("--insecure");
+    }
+    return parts.join(" ");
+}
+function escapeHtml(value) {
+    return value
+        .replace(/&/g, "&amp;")
+        .replace(/</g, "&lt;")
+        .replace(/>/g, "&gt;")
+        .replace(/"/g, "&quot;");
+}
+/**
+ * HTML shown after successful OAuth callback with a copyable headless login command.
+ */
+export function buildCallbackHtml(copyCommand) {
+    const safeCmd = escapeHtml(copyCommand);
+    return `<!DOCTYPE html>
+<html lang="en">
+<head>
+  <meta charset="utf-8"/>
+  <meta name="viewport" content="width=device-width, initial-scale=1"/>
+  <title>Login successful</title>
+  <style>
+    body { font-family: system-ui, sans-serif; max-width: 52rem; margin: 2rem auto; padding: 0 1rem; line-height: 1.5; }
+    pre { background: #f4f4f5; padding: 1rem; border-radius: 6px; overflow-x: auto; white-space: pre-wrap; word-break: break-all; }
+    button { margin-top: 0.75rem; padding: 0.5rem 1rem; cursor: pointer; }
+    .warn { color: #b45309; margin-top: 1.5rem; font-size: 0.9rem; }
+  </style>
+</head>
+<body>
+  <h2>Login successful</h2>
+  <p>You can close this tab.</p>
+  <h3>Headless machine</h3>
+  <p>On the computer that has no browser (SSH server, CI runner, container), run:</p>
+  <pre id="kw-cmd">${safeCmd}</pre>
+  <button type="button" id="kw-copy">Copy command</button>
+  <p class="warn">Keep these credentials secure. Anyone with the refresh token and client secret can obtain new access tokens.</p>
+  <script>
+    (function () {
+      var btn = document.getElementById("kw-copy");
+      var pre = document.getElementById("kw-cmd");
+      if (btn && pre) {
+        btn.addEventListener("click", function () {
+          var text = pre.textContent || "";
+          if (navigator.clipboard && navigator.clipboard.writeText) {
+            navigator.clipboard.writeText(text.trim()).then(function () {
+              btn.textContent = "Copied";
+              setTimeout(function () { btn.textContent = "Copy command"; }, 2000);
+            });
+          } else {
+            window.prompt("Copy this command:", text.trim());
+          }
+        });
+      }
+    })();
+  </script>
+</body>
+</html>`;
+}
+function buildCallbackExchangeErrorHtml(message) {
+    return `<!DOCTYPE html>
+<html lang="en"><head><meta charset="utf-8"/><title>Login error</title></head>
+<body><h2>Login error</h2><pre>${escapeHtml(message)}</pre></body></html>`;
+}
 export function normalizeBaseUrl(value) {
     return value.replace(/\/+$/, "");
 }
@@ -96,35 +177,62 @@ export async function oauth2Login(baseUrl, options) {
             authParams.set("code_challenge_method", "S256");
         }
         const authUrl = `${base}/oauth2/auth?${authParams.toString()}`;
-        // Step 4: Start local callback server, wait for code
-        const code = await new Promise((resolve, reject) => {
+        // Step 4: Start local callback server; exchange code inside handler, then show credentials HTML
+        const token = await new Promise((resolve, reject) => {
+            let server;
             const timeoutId = setTimeout(() => {
-                server.close();
+                server?.close();
                 reject(new Error("OAuth2 login timed out (120s). No authorization code received."));
             }, 120_000);
-            const server = createServer((req, res) => {
-                const url = new URL(req.url ?? "/", `http://127.0.0.1:${port}`);
-                if (url.pathname === "/callback") {
-                    const receivedState = url.searchParams.get("state");
-                    const receivedCode = url.searchParams.get("code");
-                    res.writeHead(200, { "Content-Type": "text/html; charset=utf-8" });
-                    res.end("<html><body><h2>Login successful. You can close this tab.</h2></body></html>");
-                    clearTimeout(timeoutId);
-                    server.close();
-                    if (receivedState !== state) {
-                        reject(new Error("OAuth2 state mismatch — possible CSRF attack."));
+            server = createServer((req, res) => {
+                void (async () => {
+                    try {
+                        const url = new URL(req.url ?? "/", `http://127.0.0.1:${port}`);
+                        if (url.pathname !== "/callback") {
+                            res.writeHead(404);
+                            res.end();
+                            return;
+                        }
+                        const receivedState = url.searchParams.get("state");
+                        const receivedCode = url.searchParams.get("code");
+                        if (receivedState !== state) {
+                            res.writeHead(400, { "Content-Type": "text/html; charset=utf-8" });
+                            res.end(buildCallbackExchangeErrorHtml("OAuth2 state mismatch — possible CSRF attack."));
+                            clearTimeout(timeoutId);
+                            server.close();
+                            reject(new Error("OAuth2 state mismatch — possible CSRF attack."));
+                            return;
+                        }
+                        if (!receivedCode) {
+                            res.writeHead(400, { "Content-Type": "text/html; charset=utf-8" });
+                            res.end(buildCallbackExchangeErrorHtml("No authorization code received in callback."));
+                            clearTimeout(timeoutId);
+                            server.close();
+                            reject(new Error("No authorization code received in callback."));
+                            return;
+                        }
+                        const exchanged = await exchangeCodeForToken(base, receivedCode, client.clientId, client.clientSecret, redirectUri, pkce?.verifier, options?.tlsInsecure);
+                        const copyCommand = buildCopyCommand(base, client.clientId, client.clientSecret, exchanged.refreshToken, options?.tlsInsecure);
+                        res.writeHead(200, { "Content-Type": "text/html; charset=utf-8" });
+                        res.end(buildCallbackHtml(copyCommand));
+                        clearTimeout(timeoutId);
+                        server.close();
+                        resolve(exchanged);
                     }
-                    else if (!receivedCode) {
-                        reject(new Error("No authorization code received in callback."));
+                    catch (err) {
+                        const message = err instanceof Error ? err.message : String(err);
+                        try {
+                            res.writeHead(500, { "Content-Type": "text/html; charset=utf-8" });
+                            res.end(buildCallbackExchangeErrorHtml(message));
+                        }
+                        catch {
+                            /* response may already be sent */
+                        }
+                        clearTimeout(timeoutId);
+                        server.close();
+                        reject(err instanceof Error ? err : new Error(message));
                     }
-                    else {
-                        resolve(receivedCode);
-                    }
-                }
-                else {
-                    res.writeHead(404);
-                    res.end();
-                }
+                })();
             });
             server.listen(port, "127.0.0.1", () => {
                 // Step 5: Open browser (uses spawn with proper Windows quoting)
@@ -134,8 +242,6 @@ export async function oauth2Login(baseUrl, options) {
                 process.stderr.write(`If the wrong browser opens, copy this URL to your correct browser:\n  ${authUrl}\n`);
             });
         });
-        // Step 6: Exchange code for tokens
-        const token = await exchangeCodeForToken(base, code, client.clientId, client.clientSecret, redirectUri, pkce?.verifier, options?.tlsInsecure);
         setCurrentPlatform(base);
         return token;
     });
@@ -275,40 +381,70 @@ export async function playwrightLogin(baseUrl, options) {
             product: "adp",
         });
         const authUrl = `${base}/oauth2/auth?${authParams.toString()}`;
-        // Step 4: Start local callback server to capture the authorization code
-        const code = await new Promise((resolve, reject) => {
+        // Step 4: Start local callback server; exchange code inside handler, then show credentials HTML
+        let browser;
+        const token = await new Promise((resolve, reject) => {
             const TIMEOUT_MS = hasCredentials ? 30_000 : 120_000;
+            let server;
             const timeoutId = setTimeout(() => {
-                server.close();
+                server?.close();
                 browser?.close();
                 reject(new Error(`OAuth2 login timed out (${TIMEOUT_MS / 1000}s). No authorization code received.`));
             }, TIMEOUT_MS);
-            const server = createServer((req, res) => {
-                const url = new URL(req.url ?? "/", `http://127.0.0.1:${port}`);
-                if (url.pathname === "/callback") {
-                    const receivedState = url.searchParams.get("state");
-                    const receivedCode = url.searchParams.get("code");
-                    res.writeHead(200, { "Content-Type": "text/html; charset=utf-8" });
-                    res.end("<html><body><h2>Login successful. You can close this tab.</h2></body></html>");
-                    clearTimeout(timeoutId);
-                    server.close();
-                    browser?.close();
-                    if (receivedState !== state) {
-                        reject(new Error("OAuth2 state mismatch — possible CSRF attack."));
-                    }
-                    else if (!receivedCode) {
-                        reject(new Error("No authorization code received in callback."));
+            server = createServer((req, res) => {
+                void (async () => {
+                    try {
+                        const url = new URL(req.url ?? "/", `http://127.0.0.1:${port}`);
+                        if (url.pathname !== "/callback") {
+                            res.writeHead(404);
+                            res.end();
+                            return;
+                        }
+                        const receivedState = url.searchParams.get("state");
+                        const receivedCode = url.searchParams.get("code");
+                        if (receivedState !== state) {
+                            res.writeHead(400, { "Content-Type": "text/html; charset=utf-8" });
+                            res.end(buildCallbackExchangeErrorHtml("OAuth2 state mismatch — possible CSRF attack."));
+                            clearTimeout(timeoutId);
+                            server.close();
+                            browser?.close();
+                            reject(new Error("OAuth2 state mismatch — possible CSRF attack."));
+                            return;
+                        }
+                        if (!receivedCode) {
+                            res.writeHead(400, { "Content-Type": "text/html; charset=utf-8" });
+                            res.end(buildCallbackExchangeErrorHtml("No authorization code received in callback."));
+                            clearTimeout(timeoutId);
+                            server.close();
+                            browser?.close();
+                            reject(new Error("No authorization code received in callback."));
+                            return;
+                        }
+                        const exchanged = await exchangeCodeForToken(base, receivedCode, client.clientId, client.clientSecret, redirectUri, undefined, options?.tlsInsecure);
+                        const copyCommand = buildCopyCommand(base, client.clientId, client.clientSecret, exchanged.refreshToken, options?.tlsInsecure);
+                        res.writeHead(200, { "Content-Type": "text/html; charset=utf-8" });
+                        res.end(buildCallbackHtml(copyCommand));
+                        clearTimeout(timeoutId);
+                        server.close();
+                        browser?.close();
+                        resolve(exchanged);
                     }
-                    else {
-                        resolve(receivedCode);
+                    catch (err) {
+                        const message = err instanceof Error ? err.message : String(err);
+                        try {
+                            res.writeHead(500, { "Content-Type": "text/html; charset=utf-8" });
+                            res.end(buildCallbackExchangeErrorHtml(message));
+                        }
+                        catch {
+                            /* response may already be sent */
+                        }
+                        clearTimeout(timeoutId);
+                        server.close();
+                        browser?.close();
+                        reject(err instanceof Error ? err : new Error(message));
                     }
-                }
-                else {
-                    res.writeHead(404);
-                    res.end();
-                }
+                })();
             });
-            let browser;
             server.listen(port, "127.0.0.1", async () => {
                 try {
                     browser = await chromium.launch({ headless: hasCredentials });
@@ -334,12 +470,48 @@ export async function playwrightLogin(baseUrl, options) {
                 }
             });
         });
-        // Step 5: Exchange authorization code for tokens (includes refresh_token)
-        const token = await exchangeCodeForToken(base, code, client.clientId, client.clientSecret, redirectUri, undefined, options?.tlsInsecure);
+        if (hasCredentials) {
+            const copyCommand = buildCopyCommand(base, client.clientId, client.clientSecret, token.refreshToken, options?.tlsInsecure);
+            process.stderr.write("\nHeadless login: copy this command and run it on a machine without a browser, or use `kweaver auth export`:\n\n" +
+                copyCommand +
+                "\n\n");
+        }
         setCurrentPlatform(base);
         return token;
     });
 }
+/**
+ * Log in on a headless machine using OAuth2 client credentials and a refresh token (no browser).
+ * Exchanges the refresh token for a new access token and persists ~/.kweaver/ state.
+ */
+export async function refreshTokenLogin(baseUrl, options) {
+    const base = normalizeBaseUrl(baseUrl);
+    const redirectUri = `http://127.0.0.1:${DEFAULT_REDIRECT_PORT}/callback`;
+    const client = {
+        baseUrl: base,
+        clientId: options.clientId,
+        clientSecret: options.clientSecret,
+        redirectUri,
+        logoutRedirectUri: redirectUri.replace("/callback", "/successful-logout"),
+        scope: DEFAULT_SCOPE,
+        lang: "zh-cn",
+        product: "adp",
+        xForwardedPrefix: "",
+    };
+    saveClientConfig(base, client);
+    const synthetic = {
+        baseUrl: base,
+        accessToken: "",
+        tokenType: "Bearer",
+        scope: "",
+        refreshToken: options.refreshToken,
+        obtainedAt: new Date().toISOString(),
+        ...(options.tlsInsecure ? { tlsInsecure: true } : {}),
+    };
+    const token = await runWithTlsInsecure(options.tlsInsecure, () => refreshAccessToken(synthetic));
+    setCurrentPlatform(base);
+    return token;
+}
 function tokenNeedsRefresh(token) {
     if (!token.expiresAt) {
         return false;

package/dist/cli.js CHANGED Viewed

@@ -6,6 +6,7 @@ import { runCallCommand } from "./commands/call.js";
 import { runConfigCommand } from "./commands/config.js";
 import { runContextLoaderCommand } from "./commands/context-loader.js";
 import { runDsCommand } from "./commands/ds.js";
+import { runDataviewCommand } from "./commands/dataview.js";
 import { runTokenCommand } from "./commands/token.js";
 import { runVegaCommand } from "./commands/vega.js";
 function printHelp() {
@@ -17,6 +18,8 @@ Usage:
   kweaver auth <platform-url> [--alias name] [-u user] [-p pass] [--playwright] [--insecure|-k]
   kweaver auth login <platform-url>          (alias for auth <url>)
+  kweaver auth login <url> --client-id ID --client-secret S --refresh-token T   (run on host without browser)
+  kweaver auth export [platform-url|alias] [--json]
   kweaver auth status [platform-url|alias]
   kweaver auth list
   kweaver auth use <platform-url|alias>
@@ -47,6 +50,12 @@ Usage:
   kweaver ds tables <id> [--keyword X] [--pretty]
   kweaver ds connect <db_type> <host> <port> <database> --account X --password Y [--schema S] [--name N]
+  kweaver dataview list [--datasource-id id] [--type atomic|custom] [--limit n] [-bd value] [--pretty]
+  kweaver dataview find --name <name> [--exact] [--datasource-id id] [--wait] [--timeout ms] [-bd value] [--pretty]
+  kweaver dataview get <id> [-bd value] [--pretty]
+  kweaver dataview query <id> [--sql sql] [--limit n] [--offset n] [--need-total] [-bd value] [--pretty]
+  kweaver dataview delete <id> [-y] [-bd value]
   kweaver bkn list [options]
   kweaver bkn get <kn-id> [options]
   kweaver bkn search <kn-id> <query> [--max-concepts N] [--mode M] [--pretty] [-bd value]
@@ -90,6 +99,7 @@ Commands:
   call (curl)    Call an API with curl-style flags and auto-injected token headers
   agent          Agent CRUD, chat, sessions, history, publish/unpublish
   ds             Manage datasources (list, get, delete, tables, connect)
+  dataview|dv    List, find, get, query (SQL), delete data views (atomic / custom)
   bkn            Knowledge network (CRUD, build, validate, export, stats, push/pull,
                  object-type, relation-type, subgraph, action-type, action-execution, action-log)
   config         Per-platform configuration (business domain)
@@ -120,6 +130,9 @@ export async function run(argv) {
     if (command === "ds") {
         return runDsCommand(rest);
     }
+    if (command === "dataview" || command === "dv") {
+        return runDataviewCommand(rest);
+    }
     if (command === "token") {
         return runTokenCommand(rest);
     }

package/dist/client.d.ts CHANGED Viewed

@@ -1,8 +1,12 @@
 import { AgentsResource } from "./resources/agents.js";
 import { ConversationsResource } from "./resources/conversations.js";
 import { ContextLoaderResource } from "./resources/context-loader.js";
+import { DataflowsResource } from "./resources/dataflows.js";
+import { DataSourcesResource } from "./resources/datasources.js";
+import { DataViewsResource } from "./resources/dataviews.js";
 import { KnowledgeNetworksResource } from "./resources/knowledge-networks.js";
 import { BknResource } from "./resources/bkn.js";
+import { VegaResource } from "./resources/vega.js";
 /**
  * Shared credentials passed to every resource method.
  * Internal — use KWeaverClient.
@@ -78,6 +82,14 @@ export declare class KWeaverClient implements ClientContext {
     readonly bkn: BknResource;
     /** Conversation and message history. */
     readonly conversations: ConversationsResource;
+    /** Dataflow DAG automation (create/run/poll/delete). */
+    readonly dataflows: DataflowsResource;
+    /** Data source management (connect, test, list tables). */
+    readonly datasources: DataSourcesResource;
+    /** Data view creation and retrieval. */
+    readonly dataviews: DataViewsResource;
+    /** Vega observability platform (catalogs, resources, connector types). */
+    readonly vega: VegaResource;
     constructor(opts?: KWeaverClientOptions);
     /**
      * Async factory that auto-refreshes expired or revoked tokens.

package/dist/client.js CHANGED Viewed

@@ -4,8 +4,12 @@ import { ensureValidToken } from "./auth/oauth.js";
 import { AgentsResource } from "./resources/agents.js";
 import { ConversationsResource } from "./resources/conversations.js";
 import { ContextLoaderResource } from "./resources/context-loader.js";
+import { DataflowsResource } from "./resources/dataflows.js";
+import { DataSourcesResource } from "./resources/datasources.js";
+import { DataViewsResource } from "./resources/dataviews.js";
 import { KnowledgeNetworksResource } from "./resources/knowledge-networks.js";
 import { BknResource } from "./resources/bkn.js";
+import { VegaResource } from "./resources/vega.js";
 // ── KWeaverClient ─────────────────────────────────────────────────────────────
 /**
  * Main entry point for the KWeaver TypeScript SDK.
@@ -47,6 +51,14 @@ export class KWeaverClient {
     bkn;
     /** Conversation and message history. */
     conversations;
+    /** Dataflow DAG automation (create/run/poll/delete). */
+    dataflows;
+    /** Data source management (connect, test, list tables). */
+    datasources;
+    /** Data view creation and retrieval. */
+    dataviews;
+    /** Vega observability platform (catalogs, resources, connector types). */
+    vega;
     constructor(opts = {}) {
         const envDomain = process.env.KWEAVER_BUSINESS_DOMAIN;
         let baseUrl;
@@ -98,6 +110,10 @@ export class KWeaverClient {
         this.agents = new AgentsResource(this);
         this.bkn = new BknResource(this);
         this.conversations = new ConversationsResource(this);
+        this.dataflows = new DataflowsResource(this);
+        this.datasources = new DataSourcesResource(this);
+        this.dataviews = new DataViewsResource(this);
+        this.vega = new VegaResource(this);
     }
     /**
      * Async factory that auto-refreshes expired or revoked tokens.

package/dist/commands/agent.js CHANGED Viewed

@@ -45,7 +45,7 @@ export function formatSimpleAgentList(text, pretty) {
 export function parseAgentListArgs(args) {
     let name = "";
     let offset = 0;
-    let limit = 50;
+    let limit = 30;
     let category_id = "";
     let custom_space_id = "";
     let is_to_square = 1;
@@ -70,9 +70,9 @@ export function parseAgentListArgs(args) {
             continue;
         }
         if (arg === "--limit") {
-            limit = parseInt(args[i + 1] ?? "50", 10);
+            limit = parseInt(args[i + 1] ?? "30", 10);
             if (Number.isNaN(limit) || limit < 1)
-                limit = 50;
+                limit = 30;
             i += 1;
             continue;
         }
@@ -134,7 +134,7 @@ export function parseAgentSessionsArgs(args) {
         throw new Error("Missing agent_id");
     }
     let businessDomain = "";
-    let limit;
+    let limit = 30;
     let pretty = true;
     for (let i = 1; i < args.length; i += 1) {
         const arg = args[i];
@@ -150,9 +150,9 @@ export function parseAgentSessionsArgs(args) {
             continue;
         }
         if (arg === "--limit") {
-            limit = parseInt(args[i + 1] ?? "0", 10);
+            limit = parseInt(args[i + 1] ?? "30", 10);
             if (Number.isNaN(limit) || limit < 1)
-                limit = undefined;
+                limit = 30;
             i += 1;
             continue;
         }
@@ -176,7 +176,7 @@ export function parseAgentHistoryArgs(args) {
         throw new Error("Missing conversation_id");
     }
     let businessDomain = "";
-    let limit;
+    let limit = 30;
     let pretty = true;
     for (let i = 1; i < args.length; i += 1) {
         const arg = args[i];
@@ -192,9 +192,9 @@ export function parseAgentHistoryArgs(args) {
             continue;
         }
         if (arg === "--limit") {
-            limit = parseInt(args[i + 1] ?? "0", 10);
+            limit = parseInt(args[i + 1] ?? "30", 10);
             if (Number.isNaN(limit) || limit < 1)
-                limit = undefined;
+                limit = 30;
             i += 1;
             continue;
         }
@@ -309,7 +309,7 @@ List published agents from the agent-factory API.
 Options:
   --name <text>             Filter by name
   --offset <n>              Pagination offset (default: 0)
-  --limit <n>               Max items to return (default: 50)
+  --limit <n>               Max items to return (default: 30)
   --category-id <id>        Filter by category
   --custom-space-id <id>    Filter by custom space
   --is-to-square <0|1>      Is to square (default: 1)
@@ -326,7 +326,7 @@ Options:
 List all conversations for an agent.
 Options:
-  --limit <n>              Max conversations to return
+  --limit <n>              Max conversations to return (default: 30)
   -bd, --biz-domain <value> Business domain (default: bd_public)
   --pretty                  Pretty-print JSON output (default)`);
             return 0;
@@ -339,7 +339,7 @@ Options:
 Show message history for a conversation.
 Options:
-  --limit <n>              Max messages to return
+  --limit <n>              Max messages to return (default: 30)
   -bd, --biz-domain <value> Business domain (default: bd_public)
   --pretty                  Pretty-print JSON output (default)`);
             return 0;
@@ -462,7 +462,7 @@ List published agents from the agent-factory API.
 Options:
   --name <text>             Filter by name
   --offset <n>              Pagination offset (default: 0)
-  --limit <n>               Max items to return (default: 50)
+  --limit <n>               Max items to return (default: 30)
   --category-id <id>        Filter by category
   --custom-space-id <id>    Filter by custom space
   --is-to-square <0|1>      Is to square (default: 1)
@@ -509,7 +509,7 @@ async function runAgentSessionsCommand(args) {
 List all conversations for an agent.
 Options:
-  --limit <n>              Max conversations to return
+  --limit <n>              Max conversations to return (default: 30)
   -bd, --biz-domain <value> Business domain (default: bd_public)
   --pretty                  Pretty-print JSON output (default)`);
             return 0;
@@ -546,7 +546,7 @@ async function runAgentHistoryCommand(args) {
 Show message history for a conversation.
 Options:
-  --limit <n>              Max messages to return
+  --limit <n>              Max messages to return (default: 30)
   -bd, --biz-domain <value> Business domain (default: bd_public)
   --pretty                  Pretty-print JSON output (default)`);
             return 0;