@seclai/cli 1.0.6 → 1.1.1

package/dist/cli.js

@@ -2,10 +2,13 @@
 
 // src/cli.ts
 import { Command } from "commander";
-import { readFile } from "fs/promises";
-import { readFileSync, realpathSync } from "fs";
-import process from "process";
+import { realpathSync } from "fs";
 import { fileURLToPath, pathToFileURL } from "url";
+
+// src/helpers.ts
+import { readFile } from "fs/promises";
+import { readFileSync } from "fs";
+import process2 from "process";
 import {
   Seclai,
   SeclaiAPIStatusError,
@@ -14,15 +17,15 @@ import {
 } from "@seclai/sdk";
 function defaultRuntime() {
   return {
-    stdin: process.stdin,
+    stdin: process2.stdin,
     writeOut: (text) => {
-      process.stdout.write(text);
+      process2.stdout.write(text);
     },
     writeErr: (text) => {
-      process.stderr.write(text);
+      process2.stderr.write(text);
     },
     setExitCode: (code) => {
-      process.exitCode = code;
+      process2.exitCode = code;
     }
   };
 }
@@ -69,12 +72,13 @@ function getCliVersion() {
 function createClient(opts) {
   const seclaiOpts = {};
   if (opts.apiKey !== void 0) seclaiOpts.apiKey = opts.apiKey;
-  const envUrl = process.env.SECLAI_API_URL;
+  const envUrl = process2.env.SECLAI_API_URL;
   seclaiOpts.baseUrl = envUrl && envUrl.length > 0 ? envUrl : "https://api.seclai.com";
   return new Seclai(seclaiOpts);
 }
 function printJson(rt, value) {
-  rt.writeOut(`${JSON.stringify(value, null, 2)}
+  const indent = rt.compact ? void 0 : 2;
+  rt.writeOut(`${JSON.stringify(value, null, indent)}
 `);
 }
 function printError(rt, err) {
@@ -103,6 +107,8 @@ function printError(rt, err) {
   }
   if (err instanceof SeclaiConfigurationError) {
     rt.writeErr(`${err.name}: ${err.message}
+`);
+    rt.writeErr(`hint: Set the SECLAI_API_KEY environment variable or pass --api-key.
 `);
     return;
   }
@@ -122,250 +128,2101 @@ async function run(rt, main) {
     rt.setExitCode(1);
   }
 }
-function createProgram(rt = defaultRuntime()) {
-  const program = new Command();
-  const cliVersion = getCliVersion();
-  program.name("seclai").description(
-    `Seclai Command Line Interface (v${cliVersion})
-
-Use this CLI to interact with Seclai from scripts and CI: manage connected content sources, run agents, and inspect agent runs and indexed content.
-
-All commands return JSON to stdout by default, which makes it easy to pipe into tools like jq.`
-  ).version(cliVersion, "-V, --version", "output the version").option(
-    "--api-key <key>",
-    "Seclai API key (defaults to SECLAI_API_KEY). You can create/manage keys in the Seclai dashboard (Settings \u2192 API Keys)."
-  );
-  program.addHelpText(
-    "after",
-    `
-Environment:
-  SECLAI_API_KEY   Default API key (alternative to --api-key)
-  SECLAI_API_URL   Override API base URL (default: https://api.seclai.com). Intended for dev/staging.
+function withFileUploadOptions(cmd) {
+  return cmd.requiredOption("--file <path>", "Path to a local file to upload.").option("--title <title>", "Optional title.").option("--metadata <json>", "Metadata JSON object. Use '-' for stdin.").option("--metadata-file <path>", "Path to metadata JSON file. Use '-' for stdin.").option("--file-name <name>", "Override filename sent to API.").option("--mime-type <type>", "Explicit MIME type.");
+}
+async function buildUploadOpts(rt, opts) {
+  const bytes = new Uint8Array(await readFile(opts.file));
+  const result = { file: bytes };
+  if (opts.title !== void 0) result.title = opts.title;
+  if (opts.metadata !== void 0 || opts.metadataFile !== void 0) {
+    const jsonArg = opts.metadata !== void 0 ? { json: opts.metadata } : {};
+    const jsonFileArg = opts.metadataFile !== void 0 ? { jsonFile: opts.metadataFile } : {};
+    result.metadata = await readJsonObjectInput(rt, { ...jsonArg, ...jsonFileArg });
+  }
+  if (opts.fileName !== void 0) result.fileName = opts.fileName;
+  if (opts.mimeType !== void 0) result.mimeType = opts.mimeType;
+  return result;
+}
+function listOpts(opts) {
+  const o = {};
+  if (opts.page !== void 0) o.page = opts.page;
+  if (opts.limit !== void 0) o.limit = opts.limit;
+  if (opts.sort !== void 0) o.sort = opts.sort;
+  if (opts.order !== void 0) o.order = opts.order;
+  return o;
+}
+function withAiInputOptions(cmd) {
+  return cmd.option("--user-input <text>", `User input text (shorthand for --json '{"user_input":"..."}')`).option("--json <json>", "Full request body JSON.").option("--json-file <path>", "Request body JSON file.");
+}
+async function readAiInput(rt, opts) {
+  if (opts.userInput !== void 0) {
+    return { user_input: opts.userInput };
+  }
+  const jsonArg = opts.json !== void 0 ? { json: opts.json } : {};
+  const jsonFileArg = opts.jsonFile !== void 0 ? { jsonFile: opts.jsonFile } : {};
+  return readJsonInput(rt, { ...jsonArg, ...jsonFileArg });
+}
 
-Examples:
-  seclai sources list
-  seclai sources upload <sourceConnectionId> --file ./document.pdf --metadata '{"category":"docs"}'
-  seclai contents upload <sourceConnectionContentVersionId> --file ./updated.pdf
-  seclai agents run <agentId> --json '{"input":"Hello"}'
-  seclai agents run <agentId> --json-file - --stream --timeout-ms 60000 < run.json
-`
-  );
-  program.configureOutput({
-    writeOut: (str) => rt.writeOut(str),
-    writeErr: (str) => rt.writeErr(str)
+// src/commands/agents.ts
+function register(program, rt) {
+  const agents = program.command("agents").description("Manage agents, runs, definitions, and AI assistance.");
+  agents.command("list").description("List agents.").option("--page <n>", "Page number.", (v) => Number(v)).option("--limit <n>", "Page size.", (v) => Number(v)).action(async (opts) => {
+    await run(rt, async () => {
+      const client = createClient(program.opts());
+      printJson(rt, await client.listAgents(listOpts(opts)));
+    });
   });
-  program.exitOverride();
-  const sources = program.command("sources").alias("source").description(
-    "Manage content sources connected to Seclai.\n\nSources are how Seclai ingests content (e.g., websites, RSS feeds, document uploads) into a knowledge base so agents can retrieve and cite it."
-  );
-  sources.command("list").description(
-    "List sources available to your organization/account.\n\nUse this to discover source connections and their IDs before uploading documents or debugging indexing."
-  ).option("--page <n>", "Page number for pagination (1-based).", (v) => Number(v)).option("--limit <n>", "Page size (number of items to return).", (v) => Number(v)).option("--sort <field>", "Sort field (API-defined; commonly created_at or updated_at).").option("--order <asc|desc>", "Sort direction: asc or desc.").option("--account-id <id>", "Filter results to a specific account/organization id.").action(async (opts) => {
-    await run(rt, async () => {
-      const global = program.opts();
-      const client = createClient(global);
-      const res = await client.listSources({
-        page: opts.page,
-        limit: opts.limit,
-        sort: opts.sort,
-        order: opts.order,
-        accountId: opts.accountId
-      });
-      printJson(rt, res);
-    });
-  });
-  sources.command("upload").description(
-    "Upload a local file to an existing source connection.\n\nThis is commonly used for document-upload sources inside a knowledge base. The uploaded file becomes indexed content that agents can retrieve from.\n\nNote: file size limits and supported MIME types are defined by the Seclai API (see the API reference for the upload endpoint)."
-  ).argument(
-    "<sourceConnectionId>",
-    "Source connection ID to upload into. You can find this in the Seclai dashboard or by listing sources."
-  ).requiredOption("--file <path>", "Path to a local file to upload.").option("--title <title>", "Optional human-readable title to associate with the uploaded content.").option(
-    "--metadata <json>",
-    `Optional metadata JSON object to attach to the upload (e.g. '{"category":"docs"}'). Use '-' to read JSON from stdin.`
-  ).option(
-    "--metadata-file <path>",
-    "Path to a JSON file containing a metadata object. Use '-' to read JSON from stdin."
-  ).option(
-    "--file-name <name>",
-    "Override the filename sent to the API (defaults to the basename of --file). Useful when uploading from temp paths."
-  ).option("--mime-type <type>", "Explicit MIME type (e.g., application/pdf, text/plain).").action(async (sourceConnectionId, opts) => {
-    await run(rt, async () => {
-      const global = program.opts();
-      const client = createClient(global);
-      const bytes = new Uint8Array(await readFile(opts.file));
-      const uploadOpts = { file: bytes };
-      if (opts.title !== void 0) uploadOpts.title = opts.title;
-      if (opts.metadata !== void 0 || opts.metadataFile !== void 0) {
-        uploadOpts.metadata = await readJsonObjectInput(rt, { json: opts.metadata, jsonFile: opts.metadataFile });
-      }
-      if (opts.fileName !== void 0) uploadOpts.fileName = opts.fileName;
-      if (opts.mimeType !== void 0) uploadOpts.mimeType = opts.mimeType;
-      const res = await client.uploadFileToSource(sourceConnectionId, uploadOpts);
-      printJson(rt, res);
+  agents.command("create").description("Create a new agent.").option("--json <json>", "Inline JSON body. Use '-' for stdin.").option("--json-file <path>", "JSON file path. Use '-' for stdin.").action(async (opts) => {
+    await run(rt, async () => {
+      const client = createClient(program.opts());
+      const body = await readJsonInput(rt, { json: opts.json, jsonFile: opts.jsonFile });
+      printJson(rt, await client.createAgent(body));
     });
   });
-  const agents = program.command("agents").description(
-    "Run agents and manage agent runs.\n\nAgents are workflows/assistants backed by your configured knowledge base and model settings. Running an agent creates a run, which you can inspect later for status, outputs, and (optionally) step-level details."
-  );
-  agents.command("run").description(
-    "Run an agent by ID and print the run result as JSON.\n\nThe request body is passed through to the Seclai API as-is (see the API docs for the specific agent/run schema).\n\nFor automation, prefer --json-file and pipe input via stdin (use '-' as the path)."
-  ).argument("<agentId>", "Agent ID to run (from the Seclai dashboard).").option("--json <json>", "Inline JSON request body. Use '-' to read JSON from stdin.").option("--json-file <path>", "Path to a JSON file containing the request body. Use '-' to read from stdin.").option(
-    "--stream",
-    "Wait for completion using the streaming (SSE) endpoint. The CLI prints the final result when the run is done."
-  ).option(
-    "--timeout-ms <n>",
-    "Client-side timeout (milliseconds) when using --stream. This controls how long the CLI waits; it does not change server-side execution limits.",
-    (v) => Number(v)
-  ).action(async (agentId, opts) => {
+  agents.command("get").description("Get an agent by ID.").argument("<agentId>", "Agent ID.").action(async (agentId) => {
+    await run(rt, async () => {
+      const client = createClient(program.opts());
+      printJson(rt, await client.getAgent(agentId));
+    });
+  });
+  agents.command("update").description("Update an agent.").argument("<agentId>", "Agent ID.").option("--json <json>", "Inline JSON body.").option("--json-file <path>", "JSON file path.").action(async (agentId, opts) => {
     await run(rt, async () => {
-      const global = program.opts();
-      const client = createClient(global);
+      const client = createClient(program.opts());
       const body = await readJsonInput(rt, { json: opts.json, jsonFile: opts.jsonFile });
-      let res;
-      if (opts.stream) {
-        res = await client.runStreamingAgentAndWait(
+      printJson(rt, await client.updateAgent(agentId, body));
+    });
+  });
+  agents.command("delete").description("Delete an agent.").argument("<agentId>", "Agent ID.").action(async (agentId) => {
+    await run(rt, async () => {
+      const client = createClient(program.opts());
+      await client.deleteAgent(agentId);
+      printJson(rt, { ok: true });
+    });
+  });
+  agents.command("run").description("Run an agent. Use --stream/--events/--poll for different modes.").argument("<agentId>", "Agent ID.").option("--json <json>", "Inline JSON body. Use '-' for stdin.").option("--json-file <path>", "JSON file path. Use '-' for stdin.").option("--stream", "Stream and print final result when done.").option("--events", "Stream SSE events as newline-delimited JSON.").option("--event-filter <types>", "Comma-separated event types to show (with --events).").option("--output <mode>", "Output mode: 'full' prints entire event, 'data' prints only the data field, 'status' prints a one-line summary.", "full").option("--poll", "Poll until completion instead of streaming.").option("--poll-interval-ms <n>", "Poll interval in ms (with --poll).", (v) => Number(v)).option("--timeout-ms <n>", "Client-side timeout in ms.", (v) => Number(v)).option("--include-step-outputs", "Include step outputs (with --poll).").action(async (agentId, opts) => {
+    await run(rt, async () => {
+      const client = createClient(program.opts());
+      const body = await readJsonInput(rt, { json: opts.json, jsonFile: opts.jsonFile });
+      if (opts.events) {
+        const filterSet = opts.eventFilter ? new Set(opts.eventFilter.split(",").map((s) => s.trim())) : void 0;
+        const stream = client.runStreamingAgent(
           agentId,
           body,
           opts.timeoutMs !== void 0 ? { timeoutMs: opts.timeoutMs } : void 0
         );
-      } else {
-        res = await client.runAgent(agentId, body);
+        for await (const event of stream) {
+          if (filterSet && !filterSet.has(event.type ?? "")) continue;
+          if (opts.output === "data") {
+            rt.writeOut(JSON.stringify(event.data ?? event) + "\n");
+          } else if (opts.output === "status") {
+            const e = event;
+            rt.writeOut(`${e.type ?? "event"}: ${e.status ?? JSON.stringify(e.data ?? e)}
+`);
+          } else {
+            rt.writeOut(JSON.stringify(event) + "\n");
+          }
+        }
+        return;
+      }
+      if (opts.poll) {
+        const pollOpts = {};
+        if (opts.pollIntervalMs !== void 0) pollOpts.pollIntervalMs = opts.pollIntervalMs;
+        if (opts.timeoutMs !== void 0) pollOpts.timeoutMs = opts.timeoutMs;
+        if (opts.includeStepOutputs) pollOpts.includeStepOutputs = true;
+        printJson(rt, await client.runAgentAndPoll(agentId, body, pollOpts));
+        return;
+      }
+      if (opts.stream) {
+        printJson(
+          rt,
+          await client.runStreamingAgentAndWait(
+            agentId,
+            body,
+            opts.timeoutMs !== void 0 ? { timeoutMs: opts.timeoutMs } : void 0
+          )
+        );
+        return;
       }
-      printJson(rt, res);
+      printJson(rt, await client.runAgent(agentId, body));
     });
   });
-  const agentRuns = agents.command("runs").description("Manage agent runs");
-  agentRuns.command("list").description(
-    "List runs for a specific agent.\n\nThis is useful for monitoring recent executions, checking statuses, and obtaining run IDs for follow-up commands."
-  ).argument("<agentId>", "Agent ID whose runs you want to list.").option("--page <n>", "Page number for pagination (1-based).", (v) => Number(v)).option("--limit <n>", "Page size (number of runs to return).", (v) => Number(v)).action(async (agentId, opts) => {
+  const runs = agents.command("runs").description("Manage agent runs.");
+  runs.command("list").description("List runs for an agent.").argument("<agentId>", "Agent ID.").option("--page <n>", "Page number.", (v) => Number(v)).option("--limit <n>", "Page size.", (v) => Number(v)).option("--status <status>", "Filter by run status (e.g. queued, running, completed, failed, cancelled).").action(async (agentId, opts) => {
     await run(rt, async () => {
-      const global = program.opts();
-      const client = createClient(global);
-      const res = await client.listAgentRuns(agentId, { page: opts.page, limit: opts.limit });
-      printJson(rt, res);
+      const client = createClient(program.opts());
+      const o = listOpts(opts);
+      if (opts.status) o.status = opts.status;
+      printJson(rt, await client.listAgentRuns(agentId, o));
     });
   });
-  agentRuns.command("get").description(
-    "Fetch a specific agent run and print it as JSON.\n\nUse this to inspect status, timestamps, and outputs. Optionally include step outputs for deeper debugging (may be large)."
-  ).argument("<runId>", "Run ID to retrieve.").option(
-    "--include-step-outputs",
-    "Include step-level outputs when available. This may increase response size and latency."
-  ).action(async (agentId, runId, opts) => {
+  runs.command("get").description("Get a specific run.").argument("<runId>", "Run ID.").option("--include-step-outputs", "Include step-level outputs.").action(async (runId, opts) => {
     await run(rt, async () => {
-      const global = program.opts();
-      const client = createClient(global);
-      const res = await client.getAgentRun(runId, opts.includeStepOutputs ? { includeStepOutputs: true } : void 0);
-      printJson(rt, res);
+      const client = createClient(program.opts());
+      printJson(
+        rt,
+        await client.getAgentRun(runId, opts.includeStepOutputs ? { includeStepOutputs: true } : void 0)
+      );
     });
   });
-  agentRuns.command("delete").description(
-    "Cancel or delete a specific agent run by ID.\n\nIf a run is still in progress, this requests cancellation. If it has already completed, behavior depends on the API (it may delete or mark the run)."
-  ).argument("<runId>", "Run ID to cancel/delete.").action(async (runId) => {
+  runs.command("delete").description("Delete a run.").argument("<runId>", "Run ID.").action(async (runId) => {
     await run(rt, async () => {
-      const global = program.opts();
-      const client = createClient(global);
-      const res = await client.deleteAgentRun(runId);
-      printJson(rt, res);
+      const client = createClient(program.opts());
+      await client.deleteAgentRun(runId);
+      printJson(rt, { ok: true });
     });
   });
-  const runs = program.command("runs").alias("agent-runs").description(
-    "Manage agent runs by run ID (globally unique)."
-  );
-  runs.command("get").description(
-    "Fetch a specific agent run by run ID and print it as JSON.\n\nUse --include-step-outputs to include step-level details when available (may be large)."
-  ).argument("<runId>", "Run ID to retrieve.").option(
-    "--include-step-outputs",
-    "Include step-level outputs when available. This may increase response size and latency."
-  ).action(async (runId, opts) => {
+  runs.command("cancel").description("Cancel a running agent run.").argument("<runId>", "Run ID.").action(async (runId) => {
     await run(rt, async () => {
-      const global = program.opts();
-      const client = createClient(global);
-      const res = await client.getAgentRun(runId, opts.includeStepOutputs ? { includeStepOutputs: true } : void 0);
-      printJson(rt, res);
+      const client = createClient(program.opts());
+      printJson(rt, await client.cancelAgentRun(runId));
     });
   });
-  runs.command("delete").description(
-    "Cancel or delete a specific agent run by run ID.\n\nIf the run is in progress, this requests cancellation. If it is completed, behavior depends on the API (it may delete or mark the run)."
-  ).argument("<runId>", "Run ID to cancel/delete.").action(async (runId) => {
+  runs.command("search").description("Search agent runs.").option("--json <json>", "Search body JSON.").option("--json-file <path>", "Search body JSON file.").action(async (opts) => {
     await run(rt, async () => {
-      const global = program.opts();
-      const client = createClient(global);
-      const res = await client.deleteAgentRun(runId);
-      printJson(rt, res);
+      const client = createClient(program.opts());
+      const body = await readJsonInput(rt, { json: opts.json, jsonFile: opts.jsonFile });
+      printJson(rt, await client.searchAgentRuns(body));
     });
   });
-  const contents = program.command("contents").description(
-    "Inspect indexed content and embeddings.\n\nWhen Seclai ingests data from sources into a knowledge base, it creates content versions and generates vector embeddings for retrieval. These commands help you debug what was indexed and what embeddings were produced."
-  );
-  contents.command("upload").alias("replace").description(
-    "Upload a local file to replace the underlying data for an existing content version.\n\nThis calls the content replace upload endpoint (/contents/{source_connection_content_version}/upload).\n\nUse this when you want to keep the same content version ID but update the file contents (e.g., new revision of a PDF)."
-  ).argument(
-    "<sourceConnectionContentVersion>",
-    "Content version ID to replace (from Seclai dashboard or API responses)."
-  ).requiredOption("--file <path>", "Path to a local file to upload.").option("--title <title>", "Optional title to associate with the uploaded content.").option(
-    "--metadata <json>",
-    `Optional metadata JSON object to attach to the upload (e.g. '{"revision":2}'). Use '-' to read JSON from stdin.`
-  ).option(
-    "--metadata-file <path>",
-    "Path to a JSON file containing a metadata object. Use '-' to read JSON from stdin."
-  ).option(
-    "--file-name <name>",
-    "Override the filename sent to the API (defaults to the basename of --file). Useful when uploading from temp paths."
-  ).option("--mime-type <type>", "Explicit MIME type (e.g., application/pdf, text/plain).").action(async (sourceConnectionContentVersion, opts) => {
-    await run(rt, async () => {
-      const global = program.opts();
-      const client = createClient(global);
-      const bytes = new Uint8Array(await readFile(opts.file));
-      const uploadOpts = { file: bytes };
-      if (opts.title !== void 0) uploadOpts.title = opts.title;
-      if (opts.metadata !== void 0 || opts.metadataFile !== void 0) {
-        uploadOpts.metadata = await readJsonObjectInput(rt, { json: opts.metadata, jsonFile: opts.metadataFile });
-      }
-      if (opts.fileName !== void 0) uploadOpts.fileName = opts.fileName;
-      if (opts.mimeType !== void 0) uploadOpts.mimeType = opts.mimeType;
-      const res = await client.uploadFileToContent(sourceConnectionContentVersion, uploadOpts);
-      printJson(rt, res);
-    });
-  });
-  contents.command("get").description(
-    "Get details for a specific content version.\n\nThis typically includes extracted text/metadata produced during indexing. Use --start/--end to fetch a slice of the text for faster inspection."
-  ).argument(
-    "<sourceConnectionContentVersion>",
-    "Content version ID to retrieve (from Seclai dashboard or API responses)."
-  ).option("--start <n>", "Start offset for returned text (0-based).", (v) => Number(v)).option("--end <n>", "End offset for returned text (exclusive).", (v) => Number(v)).action(async (sourceConnectionContentVersion, opts) => {
-    await run(rt, async () => {
-      const global = program.opts();
-      const client = createClient(global);
-      const res = await client.getContentDetail(sourceConnectionContentVersion, {
-        start: opts.start,
-        end: opts.end
-      });
-      printJson(rt, res);
-    });
-  });
-  contents.command("delete").description(
-    "Delete a specific content version from Seclai.\n\nUse with care: removing a content version can affect retrieval results for agents that rely on the associated knowledge base."
-  ).argument("<sourceConnectionContentVersion>", "Content version ID to delete.").action(async (sourceConnectionContentVersion) => {
-    await run(rt, async () => {
-      const global = program.opts();
-      const client = createClient(global);
-      await client.deleteContent(sourceConnectionContentVersion);
+  const def = agents.command("def").description("Agent definition (step workflow).");
+  def.command("get").description("Get agent definition.").argument("<agentId>", "Agent ID.").action(async (agentId) => {
+    await run(rt, async () => {
+      const client = createClient(program.opts());
+      printJson(rt, await client.getAgentDefinition(agentId));
+    });
+  });
+  def.command("update").description("Update agent definition.").argument("<agentId>", "Agent ID.").option("--json <json>", "Definition JSON body.").option("--json-file <path>", "Definition JSON file.").action(async (agentId, opts) => {
+    await run(rt, async () => {
+      const client = createClient(program.opts());
+      const body = await readJsonInput(rt, { json: opts.json, jsonFile: opts.jsonFile });
+      printJson(rt, await client.updateAgentDefinition(agentId, body));
+    });
+  });
+  agents.command("upload-input").description("Upload a file as agent input.").argument("<agentId>", "Agent ID.").requiredOption("--file <path>", "File to upload.").option("--file-name <name>", "Override filename.").option("--mime-type <type>", "MIME type.").action(async (agentId, opts) => {
+    await run(rt, async () => {
+      const client = createClient(program.opts());
+      const { readFile: readFile3 } = await import("fs/promises");
+      const bytes = new Uint8Array(await readFile3(opts.file));
+      const o = { file: bytes };
+      if (opts.fileName) o.fileName = opts.fileName;
+      if (opts.mimeType) o.mimeType = opts.mimeType;
+      printJson(rt, await client.uploadAgentInput(agentId, o));
+    });
+  });
+  agents.command("input-status").description("Check agent input upload status.").argument("<agentId>", "Agent ID.").argument("<uploadId>", "Upload ID.").action(async (agentId, uploadId) => {
+    await run(rt, async () => {
+      const client = createClient(program.opts());
+      printJson(rt, await client.getAgentInputUploadStatus(agentId, uploadId));
+    });
+  });
+  const ai = agents.command("ai").description("Agent AI assistant.");
+  withAiInputOptions(
+    ai.command("gen-steps").description("Generate agent steps via AI.").argument("<agentId>", "Agent ID.")
+  ).action(async (agentId, opts) => {
+    await run(rt, async () => {
+      const client = createClient(program.opts());
+      const body = await readAiInput(rt, opts);
+      printJson(rt, await client.generateAgentSteps(agentId, body));
+    });
+  });
+  withAiInputOptions(
+    ai.command("step-config").description("Generate step config via AI.").argument("<agentId>", "Agent ID.")
+  ).action(async (agentId, opts) => {
+    await run(rt, async () => {
+      const client = createClient(program.opts());
+      const body = await readAiInput(rt, opts);
+      printJson(rt, await client.generateStepConfig(agentId, body));
+    });
+  });
+  ai.command("history").description("Get agent AI conversation history.").argument("<agentId>", "Agent ID.").action(async (agentId) => {
+    await run(rt, async () => {
+      const client = createClient(program.opts());
+      printJson(rt, await client.getAgentAiConversationHistory(agentId));
+    });
+  });
+  ai.command("mark").description("Mark an AI suggestion (accept/reject).").argument("<agentId>", "Agent ID.").argument("<conversationId>", "Conversation ID.").option("--json <json>", "Mark body JSON.").option("--json-file <path>", "Mark body JSON file.").action(async (agentId, conversationId, opts) => {
+    await run(rt, async () => {
+      const client = createClient(program.opts());
+      const body = await readJsonInput(rt, { json: opts.json, jsonFile: opts.jsonFile });
+      await client.markAgentAiSuggestion(agentId, conversationId, body);
+      printJson(rt, { ok: true });
+    });
+  });
+  runs.command("eval-results").description("List evaluation results for a run.").argument("<agentId>", "Agent ID.").argument("<runId>", "Run ID.").option("--page <n>", "Page number.", (v) => Number(v)).option("--limit <n>", "Page size.", (v) => Number(v)).action(async (agentId, runId, opts) => {
+    await run(rt, async () => {
+      const client = createClient(program.opts());
+      printJson(rt, await client.listRunEvaluationResults(agentId, runId, listOpts(opts)));
+    });
+  });
+}
+
+// src/commands/sources.ts
+function register2(program, rt) {
+  const sources = program.command("sources").alias("source").description("Manage content sources.");
+  sources.command("list").description("List sources.").option("--page <n>", "Page number.", (v) => Number(v)).option("--limit <n>", "Page size.", (v) => Number(v)).option("--sort <field>", "Sort field.").option("--order <asc|desc>", "Sort direction.").option("--account-id <id>", "Filter by account ID.").action(async (opts) => {
+    await run(rt, async () => {
+      const client = createClient(program.opts());
+      const o = listOpts(opts);
+      if (opts.accountId) o.accountId = opts.accountId;
+      printJson(rt, await client.listSources(o));
+    });
+  });
+  sources.command("create").description("Create a source.").option("--json <json>", "Source body JSON.").option("--json-file <path>", "Source body JSON file.").action(async (opts) => {
+    await run(rt, async () => {
+      const client = createClient(program.opts());
+      const body = await readJsonInput(rt, { json: opts.json, jsonFile: opts.jsonFile });
+      printJson(rt, await client.createSource(body));
+    });
+  });
+  sources.command("get").description("Get a source by ID.").argument("<sourceId>", "Source ID.").action(async (sourceId) => {
+    await run(rt, async () => {
+      const client = createClient(program.opts());
+      printJson(rt, await client.getSource(sourceId));
+    });
+  });
+  sources.command("update").description("Update a source.").argument("<sourceId>", "Source ID.").option("--json <json>", "Update body JSON.").option("--json-file <path>", "Update body JSON file.").action(async (sourceId, opts) => {
+    await run(rt, async () => {
+      const client = createClient(program.opts());
+      const body = await readJsonInput(rt, { json: opts.json, jsonFile: opts.jsonFile });
+      printJson(rt, await client.updateSource(sourceId, body));
+    });
+  });
+  sources.command("delete").description("Delete a source.").argument("<sourceId>", "Source ID.").action(async (sourceId) => {
+    await run(rt, async () => {
+      const client = createClient(program.opts());
+      await client.deleteSource(sourceId);
+      printJson(rt, { ok: true });
+    });
+  });
+  const uploadCmd = sources.command("upload").description("Upload a file to a source.");
+  withFileUploadOptions(uploadCmd).argument("<sourceId>", "Source ID.").action(async (sourceId, opts) => {
+    await run(rt, async () => {
+      const client = createClient(program.opts());
+      const uploadOpts = await buildUploadOpts(rt, opts);
+      printJson(rt, await client.uploadFileToSource(sourceId, uploadOpts));
+    });
+  });
+  sources.command("upload-text").description("Upload inline text to a source.").argument("<sourceId>", "Source ID.").option("--json <json>", "Inline text body JSON.").option("--json-file <path>", "Inline text body JSON file.").action(async (sourceId, opts) => {
+    await run(rt, async () => {
+      const client = createClient(program.opts());
+      const body = await readJsonInput(rt, { json: opts.json, jsonFile: opts.jsonFile });
+      printJson(rt, await client.uploadInlineTextToSource(sourceId, body));
+    });
+  });
+  const exports_ = sources.command("exports").description("Manage source exports.");
+  exports_.command("list").description("List exports for a source.").argument("<sourceId>", "Source ID.").option("--page <n>", "Page number.", (v) => Number(v)).option("--limit <n>", "Page size.", (v) => Number(v)).action(async (sourceId, opts) => {
+    await run(rt, async () => {
+      const client = createClient(program.opts());
+      printJson(rt, await client.listSourceExports(sourceId, listOpts(opts)));
+    });
+  });
+  exports_.command("create").description("Create an export.").argument("<sourceId>", "Source ID.").option("--json <json>", "Export body JSON.").option("--json-file <path>", "Export body JSON file.").action(async (sourceId, opts) => {
+    await run(rt, async () => {
+      const client = createClient(program.opts());
+      const body = await readJsonInput(rt, { json: opts.json, jsonFile: opts.jsonFile });
+      printJson(rt, await client.createSourceExport(sourceId, body));
+    });
+  });
+  exports_.command("get").description("Get an export.").argument("<sourceId>", "Source ID.").argument("<exportId>", "Export ID.").action(async (sourceId, exportId) => {
+    await run(rt, async () => {
+      const client = createClient(program.opts());
+      printJson(rt, await client.getSourceExport(sourceId, exportId));
+    });
+  });
+  exports_.command("cancel").description("Cancel an export.").argument("<sourceId>", "Source ID.").argument("<exportId>", "Export ID.").action(async (sourceId, exportId) => {
+    await run(rt, async () => {
+      const client = createClient(program.opts());
+      printJson(rt, await client.cancelSourceExport(sourceId, exportId));
+    });
+  });
+  exports_.command("delete").description("Delete an export.").argument("<sourceId>", "Source ID.").argument("<exportId>", "Export ID.").action(async (sourceId, exportId) => {
+    await run(rt, async () => {
+      const client = createClient(program.opts());
+      await client.deleteSourceExport(sourceId, exportId);
+      printJson(rt, { ok: true });
+    });
+  });
+  exports_.command("download").description("Download an export (prints raw response body).").argument("<sourceId>", "Source ID.").argument("<exportId>", "Export ID.").action(async (sourceId, exportId) => {
+    await run(rt, async () => {
+      const client = createClient(program.opts());
+      const res = await client.downloadSourceExport(sourceId, exportId);
+      rt.writeOut(await res.text());
+    });
+  });
+  exports_.command("estimate").description("Estimate an export.").argument("<sourceId>", "Source ID.").option("--json <json>", "Estimate body JSON.").option("--json-file <path>", "Estimate body JSON file.").action(async (sourceId, opts) => {
+    await run(rt, async () => {
+      const client = createClient(program.opts());
+      const body = await readJsonInput(rt, { json: opts.json, jsonFile: opts.jsonFile });
+      printJson(rt, await client.estimateSourceExport(sourceId, body));
+    });
+  });
+  const migration = sources.command("migration").description("Source embedding migrations.");
+  migration.command("get").description("Get migration status.").argument("<sourceId>", "Source ID.").action(async (sourceId) => {
+    await run(rt, async () => {
+      const client = createClient(program.opts());
+      printJson(rt, await client.getSourceEmbeddingMigration(sourceId));
+    });
+  });
+  migration.command("start").description("Start an embedding migration.").argument("<sourceId>", "Source ID.").option("--json <json>", "Migration config JSON.").option("--json-file <path>", "Migration config JSON file.").action(async (sourceId, opts) => {
+    await run(rt, async () => {
+      const client = createClient(program.opts());
+      const body = await readJsonInput(rt, { json: opts.json, jsonFile: opts.jsonFile });
+      printJson(rt, await client.startSourceEmbeddingMigration(sourceId, body));
+    });
+  });
+  migration.command("cancel").description("Cancel an embedding migration.").argument("<sourceId>", "Source ID.").action(async (sourceId) => {
+    await run(rt, async () => {
+      const client = createClient(program.opts());
+      printJson(rt, await client.cancelSourceEmbeddingMigration(sourceId));
+    });
+  });
+}
+
+// src/commands/contents.ts
+function register3(program, rt) {
+  const contents = program.command("contents").description("Manage indexed content and embeddings.");
+  contents.command("get").description("Get content version details.").argument("<contentVersionId>", "Content version ID.").option("--start <n>", "Text start offset (0-based).", (v) => Number(v)).option("--end <n>", "Text end offset (exclusive).", (v) => Number(v)).action(async (contentVersionId, opts) => {
+    await run(rt, async () => {
+      const client = createClient(program.opts());
+      const o = {};
+      if (opts.start !== void 0) o.start = opts.start;
+      if (opts.end !== void 0) o.end = opts.end;
+      printJson(rt, await client.getContentDetail(contentVersionId, o));
+    });
+  });
+  contents.command("delete").description("Delete a content version.").argument("<contentVersionId>", "Content version ID.").action(async (contentVersionId) => {
+    await run(rt, async () => {
+      const client = createClient(program.opts());
+      await client.deleteContent(contentVersionId);
+      printJson(rt, { ok: true });
+    });
+  });
+  const uploadCmd = contents.command("upload").alias("replace").description("Upload/replace content file.");
+  withFileUploadOptions(uploadCmd).argument("<contentVersionId>", "Content version ID.").action(async (contentVersionId, opts) => {
+    await run(rt, async () => {
+      const client = createClient(program.opts());
+      const uploadOpts = await buildUploadOpts(rt, opts);
+      printJson(rt, await client.uploadFileToContent(contentVersionId, uploadOpts));
+    });
+  });
+  contents.command("replace-text").description("Replace content with inline text.").argument("<contentVersionId>", "Content version ID.").option("--json <json>", "Inline text body JSON.").option("--json-file <path>", "Inline text body JSON file.").action(async (contentVersionId, opts) => {
+    await run(rt, async () => {
+      const client = createClient(program.opts());
+      const body = await readJsonInput(rt, { json: opts.json, jsonFile: opts.jsonFile });
+      printJson(rt, await client.replaceContentWithInlineText(contentVersionId, body));
+    });
+  });
+  contents.command("embeddings").description("List embeddings for a content version.").argument("<contentVersionId>", "Content version ID.").option("--page <n>", "Page number.", (v) => Number(v)).option("--limit <n>", "Page size.", (v) => Number(v)).action(async (contentVersionId, opts) => {
+    await run(rt, async () => {
+      const client = createClient(program.opts());
+      printJson(rt, await client.listContentEmbeddings(contentVersionId, listOpts(opts)));
+    });
+  });
+}
+
+// src/commands/kb.ts
+function register4(program, rt) {
+  const kb = program.command("kb").description("Manage knowledge bases.");
+  kb.command("list").description("List knowledge bases.").option("--page <n>", "Page number.", (v) => Number(v)).option("--limit <n>", "Page size.", (v) => Number(v)).option("--sort <field>", "Sort field.").option("--order <asc|desc>", "Sort direction.").action(async (opts) => {
+    await run(rt, async () => {
+      const client = createClient(program.opts());
+      printJson(rt, await client.listKnowledgeBases(listOpts(opts)));
+    });
+  });
+  kb.command("create").description("Create a knowledge base.").option("--json <json>", "Body JSON.").option("--json-file <path>", "Body JSON file.").action(async (opts) => {
+    await run(rt, async () => {
+      const client = createClient(program.opts());
+      const body = await readJsonInput(rt, { json: opts.json, jsonFile: opts.jsonFile });
+      printJson(rt, await client.createKnowledgeBase(body));
+    });
+  });
+  kb.command("get").description("Get a knowledge base.").argument("<kbId>", "Knowledge base ID.").action(async (kbId) => {
+    await run(rt, async () => {
+      const client = createClient(program.opts());
+      printJson(rt, await client.getKnowledgeBase(kbId));
+    });
+  });
+  kb.command("update").description("Update a knowledge base.").argument("<kbId>", "Knowledge base ID.").option("--json <json>", "Update body JSON.").option("--json-file <path>", "Update body JSON file.").action(async (kbId, opts) => {
+    await run(rt, async () => {
+      const client = createClient(program.opts());
+      const body = await readJsonInput(rt, { json: opts.json, jsonFile: opts.jsonFile });
+      printJson(rt, await client.updateKnowledgeBase(kbId, body));
+    });
+  });
+  kb.command("delete").description("Delete a knowledge base.").argument("<kbId>", "Knowledge base ID.").action(async (kbId) => {
+    await run(rt, async () => {
+      const client = createClient(program.opts());
+      await client.deleteKnowledgeBase(kbId);
+      printJson(rt, { ok: true });
+    });
+  });
+}
+
+// src/commands/memory.ts
+function register5(program, rt) {
+  const memory = program.command("memory").description("Manage memory banks.");
+  memory.command("list").description("List memory banks.").option("--page <n>", "Page number.", (v) => Number(v)).option("--limit <n>", "Page size.", (v) => Number(v)).option("--sort <field>", "Sort field.").option("--order <asc|desc>", "Sort direction.").action(async (opts) => {
+    await run(rt, async () => {
+      const client = createClient(program.opts());
+      printJson(rt, await client.listMemoryBanks(listOpts(opts)));
+    });
+  });
+  memory.command("create").description("Create a memory bank.").option("--json <json>", "Body JSON.").option("--json-file <path>", "Body JSON file.").action(async (opts) => {
+    await run(rt, async () => {
+      const client = createClient(program.opts());
+      const body = await readJsonInput(rt, { json: opts.json, jsonFile: opts.jsonFile });
+      printJson(rt, await client.createMemoryBank(body));
+    });
+  });
+  memory.command("get").description("Get a memory bank.").argument("<memoryBankId>", "Memory bank ID.").action(async (memoryBankId) => {
+    await run(rt, async () => {
+      const client = createClient(program.opts());
+      printJson(rt, await client.getMemoryBank(memoryBankId));
+    });
+  });
+  memory.command("update").description("Update a memory bank.").argument("<memoryBankId>", "Memory bank ID.").option("--json <json>", "Update body JSON.").option("--json-file <path>", "Update body JSON file.").action(async (memoryBankId, opts) => {
+    await run(rt, async () => {
+      const client = createClient(program.opts());
+      const body = await readJsonInput(rt, { json: opts.json, jsonFile: opts.jsonFile });
+      printJson(rt, await client.updateMemoryBank(memoryBankId, body));
+    });
+  });
+  memory.command("delete").description("Delete a memory bank.").argument("<memoryBankId>", "Memory bank ID.").action(async (memoryBankId) => {
+    await run(rt, async () => {
+      const client = createClient(program.opts());
+      await client.deleteMemoryBank(memoryBankId);
+      printJson(rt, { ok: true });
+    });
+  });
+  memory.command("stats").description("Get memory bank statistics.").argument("<memoryBankId>", "Memory bank ID.").action(async (memoryBankId) => {
+    await run(rt, async () => {
+      const client = createClient(program.opts());
+      printJson(rt, await client.getMemoryBankStats(memoryBankId));
+    });
+  });
+  memory.command("agents").description("List agents using a memory bank.").argument("<memoryBankId>", "Memory bank ID.").action(async (memoryBankId) => {
+    await run(rt, async () => {
+      const client = createClient(program.opts());
+      printJson(rt, await client.getAgentsUsingMemoryBank(memoryBankId));
+    });
+  });
+  memory.command("compact").description("Compact a memory bank.").argument("<memoryBankId>", "Memory bank ID.").action(async (memoryBankId) => {
+    await run(rt, async () => {
+      const client = createClient(program.opts());
+      await client.compactMemoryBank(memoryBankId);
+      printJson(rt, { ok: true });
+    });
+  });
+  memory.command("delete-source").description("Delete a memory bank's source data.").argument("<memoryBankId>", "Memory bank ID.").action(async (memoryBankId) => {
+    await run(rt, async () => {
+      const client = createClient(program.opts());
+      await client.deleteMemoryBankSource(memoryBankId);
       printJson(rt, { ok: true });
     });
   });
-  contents.command("embeddings").description(
-    "List embeddings generated for a content version.\n\nEmbeddings power similarity search and retrieval for knowledge base agents. Listing them is useful for debugging indexing and verifying that content produced vectors."
-  ).argument("<sourceConnectionContentVersion>", "Content version ID whose embeddings you want to list.").option("--page <n>", "Page number for pagination (1-based).", (v) => Number(v)).option("--limit <n>", "Page size (number of embeddings to return).", (v) => Number(v)).action(async (sourceConnectionContentVersion, opts) => {
+  memory.command("templates").description("List memory bank templates.").action(async () => {
+    await run(rt, async () => {
+      const client = createClient(program.opts());
+      printJson(rt, await client.listMemoryBankTemplates());
+    });
+  });
+  memory.command("test-compaction").description("Test compaction on a memory bank.").argument("<memoryBankId>", "Memory bank ID.").option("--json <json>", "Test config JSON.").option("--json-file <path>", "Test config JSON file.").action(async (memoryBankId, opts) => {
+    await run(rt, async () => {
+      const client = createClient(program.opts());
+      const body = await readJsonInput(rt, { json: opts.json, jsonFile: opts.jsonFile });
+      printJson(rt, await client.testMemoryBankCompaction(memoryBankId, body));
+    });
+  });
+  memory.command("test-compaction-standalone").description("Test compaction prompt standalone (no memory bank required).").option("--json <json>", "Test config JSON.").option("--json-file <path>", "Test config JSON file.").action(async (opts) => {
+    await run(rt, async () => {
+      const client = createClient(program.opts());
+      const body = await readJsonInput(rt, { json: opts.json, jsonFile: opts.jsonFile });
+      printJson(rt, await client.testCompactionPromptStandalone(body));
+    });
+  });
+  const ai = memory.command("ai").description("Memory bank AI assistant.");
+  withAiInputOptions(
+    ai.command("generate").description("Generate memory bank config via AI.")
+  ).action(async (opts) => {
+    await run(rt, async () => {
+      const client = createClient(program.opts());
+      const body = await readAiInput(rt, opts);
+      printJson(rt, await client.generateMemoryBankConfig(body));
+    });
+  });
+  ai.command("last").description("Get last memory bank AI conversation.").action(async () => {
     await run(rt, async () => {
-      const global = program.opts();
-      const client = createClient(global);
-      const res = await client.listContentEmbeddings(sourceConnectionContentVersion, {
-        page: opts.page,
-        limit: opts.limit
-      });
-      printJson(rt, res);
+      const client = createClient(program.opts());
+      printJson(rt, await client.getMemoryBankAiLastConversation());
     });
   });
+  ai.command("accept").description("Accept a memory bank AI suggestion.").argument("<conversationId>", "Conversation ID.").option("--json <json>", "Accept body JSON.").option("--json-file <path>", "Accept body JSON file.").action(async (conversationId, opts) => {
+    await run(rt, async () => {
+      const client = createClient(program.opts());
+      const body = await readJsonInput(rt, { json: opts.json, jsonFile: opts.jsonFile });
+      printJson(rt, await client.acceptMemoryBankAiSuggestion(conversationId, body));
+    });
+  });
+}
+
+// src/commands/evals.ts
+function register6(program, rt) {
+  const evals = program.command("evals").description("Manage evaluations.");
+  const criteria = evals.command("criteria").description("Evaluation criteria.");
+  criteria.command("list").description("List evaluation criteria for an agent.").argument("<agentId>", "Agent ID.").option("--page <n>", "Page number.", (v) => Number(v)).option("--limit <n>", "Page size.", (v) => Number(v)).action(async (agentId, opts) => {
+    await run(rt, async () => {
+      const client = createClient(program.opts());
+      printJson(rt, await client.listEvaluationCriteria(agentId, listOpts(opts)));
+    });
+  });
+  criteria.command("create").description("Create evaluation criteria.").argument("<agentId>", "Agent ID.").option("--json <json>", "Criteria body JSON.").option("--json-file <path>", "Criteria body JSON file.").action(async (agentId, opts) => {
+    await run(rt, async () => {
+      const client = createClient(program.opts());
+      const body = await readJsonInput(rt, { json: opts.json, jsonFile: opts.jsonFile });
+      printJson(rt, await client.createEvaluationCriteria(agentId, body));
+    });
+  });
+  criteria.command("get").description("Get evaluation criteria.").argument("<criteriaId>", "Criteria ID.").action(async (criteriaId) => {
+    await run(rt, async () => {
+      const client = createClient(program.opts());
+      printJson(rt, await client.getEvaluationCriteria(criteriaId));
+    });
+  });
+  criteria.command("update").description("Update evaluation criteria.").argument("<criteriaId>", "Criteria ID.").option("--json <json>", "Update body JSON.").option("--json-file <path>", "Update body JSON file.").action(async (criteriaId, opts) => {
+    await run(rt, async () => {
+      const client = createClient(program.opts());
+      const body = await readJsonInput(rt, { json: opts.json, jsonFile: opts.jsonFile });
+      printJson(rt, await client.updateEvaluationCriteria(criteriaId, body));
+    });
+  });
+  criteria.command("delete").description("Delete evaluation criteria.").argument("<criteriaId>", "Criteria ID.").action(async (criteriaId) => {
+    await run(rt, async () => {
+      const client = createClient(program.opts());
+      await client.deleteEvaluationCriteria(criteriaId);
+      printJson(rt, { ok: true });
+    });
+  });
+  criteria.command("summary").description("Get criteria evaluation summary.").argument("<criteriaId>", "Criteria ID.").action(async (criteriaId) => {
+    await run(rt, async () => {
+      const client = createClient(program.opts());
+      printJson(rt, await client.getEvaluationCriteriaSummary(criteriaId));
+    });
+  });
+  const results = evals.command("results").description("Evaluation results.");
+  results.command("list").description("List results for criteria.").argument("<criteriaId>", "Criteria ID.").option("--page <n>", "Page number.", (v) => Number(v)).option("--limit <n>", "Page size.", (v) => Number(v)).action(async (criteriaId, opts) => {
+    await run(rt, async () => {
+      const client = createClient(program.opts());
+      printJson(rt, await client.listEvaluationResults(criteriaId, listOpts(opts)));
+    });
+  });
+  results.command("create").description("Create an evaluation result.").argument("<criteriaId>", "Criteria ID.").option("--json <json>", "Result body JSON.").option("--json-file <path>", "Result body JSON file.").action(async (criteriaId, opts) => {
+    await run(rt, async () => {
+      const client = createClient(program.opts());
+      const body = await readJsonInput(rt, { json: opts.json, jsonFile: opts.jsonFile });
+      printJson(rt, await client.createEvaluationResult(criteriaId, body));
+    });
+  });
+  evals.command("compatible-runs").description("List runs compatible with criteria.").argument("<criteriaId>", "Criteria ID.").option("--page <n>", "Page number.", (v) => Number(v)).option("--limit <n>", "Page size.", (v) => Number(v)).action(async (criteriaId, opts) => {
+    await run(rt, async () => {
+      const client = createClient(program.opts());
+      printJson(rt, await client.listCompatibleRuns(criteriaId, listOpts(opts)));
+    });
+  });
+  evals.command("test-draft").description("Test a draft evaluation.").argument("<agentId>", "Agent ID.").option("--json <json>", "Test body JSON.").option("--json-file <path>", "Test body JSON file.").action(async (agentId, opts) => {
+    await run(rt, async () => {
+      const client = createClient(program.opts());
+      const body = await readJsonInput(rt, { json: opts.json, jsonFile: opts.jsonFile });
+      printJson(rt, await client.testDraftEvaluation(agentId, body));
+    });
+  });
+  evals.command("agent-results").description("List all evaluation results for an agent.").argument("<agentId>", "Agent ID.").option("--page <n>", "Page number.", (v) => Number(v)).option("--limit <n>", "Page size.", (v) => Number(v)).action(async (agentId, opts) => {
+    await run(rt, async () => {
+      const client = createClient(program.opts());
+      printJson(rt, await client.listAgentEvaluationResults(agentId, listOpts(opts)));
+    });
+  });
+  evals.command("agent-runs").description("List evaluation run summaries for an agent.").argument("<agentId>", "Agent ID.").option("--page <n>", "Page number.", (v) => Number(v)).option("--limit <n>", "Page size.", (v) => Number(v)).action(async (agentId, opts) => {
+    await run(rt, async () => {
+      const client = createClient(program.opts());
+      printJson(rt, await client.listEvaluationRuns(agentId, listOpts(opts)));
+    });
+  });
+  evals.command("non-manual-summary").description("Get non-manual evaluation summary for an agent.").argument("<agentId>", "Agent ID.").action(async (agentId) => {
+    await run(rt, async () => {
+      const client = createClient(program.opts());
+      printJson(rt, await client.getNonManualEvaluationSummary(agentId));
+    });
+  });
+}
+
+// src/commands/solutions.ts
+function register7(program, rt) {
+  const solutions = program.command("solutions").description("Manage solutions.");
+  solutions.command("list").description("List solutions.").option("--page <n>", "Page number.", (v) => Number(v)).option("--limit <n>", "Page size.", (v) => Number(v)).option("--sort <field>", "Sort field.").option("--order <asc|desc>", "Sort direction.").action(async (opts) => {
+    await run(rt, async () => {
+      const client = createClient(program.opts());
+      printJson(rt, await client.listSolutions(listOpts(opts)));
+    });
+  });
+  solutions.command("create").description("Create a solution.").option("--json <json>", "Body JSON.").option("--json-file <path>", "Body JSON file.").action(async (opts) => {
+    await run(rt, async () => {
+      const client = createClient(program.opts());
+      const body = await readJsonInput(rt, { json: opts.json, jsonFile: opts.jsonFile });
+      printJson(rt, await client.createSolution(body));
+    });
+  });
+  solutions.command("get").description("Get a solution.").argument("<solutionId>", "Solution ID.").action(async (solutionId) => {
+    await run(rt, async () => {
+      const client = createClient(program.opts());
+      printJson(rt, await client.getSolution(solutionId));
+    });
+  });
+  solutions.command("update").description("Update a solution.").argument("<solutionId>", "Solution ID.").option("--json <json>", "Update body JSON.").option("--json-file <path>", "Update body JSON file.").action(async (solutionId, opts) => {
+    await run(rt, async () => {
+      const client = createClient(program.opts());
+      const body = await readJsonInput(rt, { json: opts.json, jsonFile: opts.jsonFile });
+      printJson(rt, await client.updateSolution(solutionId, body));
+    });
+  });
+  solutions.command("delete").description("Delete a solution.").argument("<solutionId>", "Solution ID.").action(async (solutionId) => {
+    await run(rt, async () => {
+      const client = createClient(program.opts());
+      await client.deleteSolution(solutionId);
+      printJson(rt, { ok: true });
+    });
+  });
+  solutions.command("link").description("Link resources to a solution. Use --agents, --kb, or --sources with JSON array of IDs.").argument("<solutionId>", "Solution ID.").option("--agents <json>", "Link agents (JSON body).").option("--kb <json>", "Link knowledge bases (JSON body).").option("--sources <json>", "Link sources (JSON body).").action(async (solutionId, opts) => {
+    await run(rt, async () => {
+      if (!opts.agents && !opts.kb && !opts.sources) {
+        rt.writeErr("Provide at least one of --agents, --kb, or --sources.\n");
+        rt.setExitCode(1);
+        return;
+      }
+      const client = createClient(program.opts());
+      const results = {};
+      if (opts.agents) {
+        results.agents = await client.linkAgentsToSolution(solutionId, JSON.parse(opts.agents));
+      }
+      if (opts.kb) {
+        results.knowledgeBases = await client.linkKnowledgeBasesToSolution(solutionId, JSON.parse(opts.kb));
+      }
+      if (opts.sources) {
+        results.sources = await client.linkSourceConnectionsToSolution(solutionId, JSON.parse(opts.sources));
+      }
+      printJson(rt, results);
+    });
+  });
+  solutions.command("unlink").description("Unlink resources from a solution. Use --agents, --kb, or --sources with JSON array of IDs.").argument("<solutionId>", "Solution ID.").option("--agents <json>", "Unlink agents (JSON body).").option("--kb <json>", "Unlink knowledge bases (JSON body).").option("--sources <json>", "Unlink sources (JSON body).").action(async (solutionId, opts) => {
+    await run(rt, async () => {
+      if (!opts.agents && !opts.kb && !opts.sources) {
+        rt.writeErr("Provide at least one of --agents, --kb, or --sources.\n");
+        rt.setExitCode(1);
+        return;
+      }
+      const client = createClient(program.opts());
+      const results = {};
+      if (opts.agents) {
+        results.agents = await client.unlinkAgentsFromSolution(solutionId, JSON.parse(opts.agents));
+      }
+      if (opts.kb) {
+        results.knowledgeBases = await client.unlinkKnowledgeBasesFromSolution(solutionId, JSON.parse(opts.kb));
+      }
+      if (opts.sources) {
+        results.sources = await client.unlinkSourceConnectionsFromSolution(solutionId, JSON.parse(opts.sources));
+      }
+      printJson(rt, results);
+    });
+  });
+  const convos = solutions.command("convos").description("Solution conversations.");
+  convos.command("list").description("List conversations for a solution.").argument("<solutionId>", "Solution ID.").action(async (solutionId) => {
+    await run(rt, async () => {
+      const client = createClient(program.opts());
+      printJson(rt, await client.listSolutionConversations(solutionId));
+    });
+  });
+  convos.command("add").description("Add a conversation turn.").argument("<solutionId>", "Solution ID.").option("--json <json>", "Turn body JSON.").option("--json-file <path>", "Turn body JSON file.").action(async (solutionId, opts) => {
+    await run(rt, async () => {
+      const client = createClient(program.opts());
+      const body = await readJsonInput(rt, { json: opts.json, jsonFile: opts.jsonFile });
+      printJson(rt, await client.addSolutionConversationTurn(solutionId, body));
+    });
+  });
+  convos.command("mark").description("Mark a conversation turn.").argument("<solutionId>", "Solution ID.").argument("<conversationId>", "Conversation ID.").option("--json <json>", "Mark body JSON.").option("--json-file <path>", "Mark body JSON file.").action(async (solutionId, conversationId, opts) => {
+    await run(rt, async () => {
+      const client = createClient(program.opts());
+      const body = await readJsonInput(rt, { json: opts.json, jsonFile: opts.jsonFile });
+      await client.markSolutionConversationTurn(solutionId, conversationId, body);
+      printJson(rt, { ok: true });
+    });
+  });
+  const ai = solutions.command("ai").description("Solution AI assistant.");
+  withAiInputOptions(
+    ai.command("generate").description("Generate a solution AI plan.").argument("<solutionId>", "Solution ID.")
+  ).action(async (solutionId, opts) => {
+    await run(rt, async () => {
+      const client = createClient(program.opts());
+      const body = await readAiInput(rt, opts);
+      printJson(rt, await client.generateSolutionAiPlan(solutionId, body));
+    });
+  });
+  withAiInputOptions(
+    ai.command("kb").description("Generate a KB plan via solution AI.").argument("<solutionId>", "Solution ID.")
+  ).action(async (solutionId, opts) => {
+    await run(rt, async () => {
+      const client = createClient(program.opts());
+      const body = await readAiInput(rt, opts);
+      printJson(rt, await client.generateSolutionAiKnowledgeBase(solutionId, body));
+    });
+  });
+  withAiInputOptions(
+    ai.command("source").description("Generate a source plan via solution AI.").argument("<solutionId>", "Solution ID.")
+  ).action(async (solutionId, opts) => {
+    await run(rt, async () => {
+      const client = createClient(program.opts());
+      const body = await readAiInput(rt, opts);
+      printJson(rt, await client.generateSolutionAiSource(solutionId, body));
+    });
+  });
+  ai.command("accept").description("Accept a solution AI plan.").argument("<solutionId>", "Solution ID.").argument("<conversationId>", "Conversation ID.").option("--json <json>", "Accept body JSON.").option("--json-file <path>", "Accept body JSON file.").action(async (solutionId, conversationId, opts) => {
+    await run(rt, async () => {
+      const client = createClient(program.opts());
+      const body = await readJsonInput(rt, { json: opts.json, jsonFile: opts.jsonFile });
+      printJson(rt, await client.acceptSolutionAiPlan(solutionId, conversationId, body));
+    });
+  });
+  ai.command("decline").description("Decline a solution AI plan.").argument("<solutionId>", "Solution ID.").argument("<conversationId>", "Conversation ID.").action(async (solutionId, conversationId) => {
+    await run(rt, async () => {
+      const client = createClient(program.opts());
+      await client.declineSolutionAiPlan(solutionId, conversationId);
+      printJson(rt, { ok: true });
+    });
+  });
+}
+
+// src/commands/governance.ts
+function register8(program, rt) {
+  const governance = program.command("governance").description("Governance AI assistant.");
+  const ai = governance.command("ai").description("Governance AI operations.");
+  withAiInputOptions(
+    ai.command("generate").description("Generate a governance AI plan.")
+  ).action(async (opts) => {
+    await run(rt, async () => {
+      const client = createClient(program.opts());
+      const body = await readAiInput(rt, opts);
+      printJson(rt, await client.generateGovernanceAiPlan(body));
+    });
+  });
+  ai.command("list").description("List governance AI conversations.").action(async () => {
+    await run(rt, async () => {
+      const client = createClient(program.opts());
+      printJson(rt, await client.listGovernanceAiConversations());
+    });
+  });
+  ai.command("accept").description("Accept a governance AI plan.").argument("<conversationId>", "Conversation ID.").action(async (conversationId) => {
+    await run(rt, async () => {
+      const client = createClient(program.opts());
+      printJson(rt, await client.acceptGovernanceAiPlan(conversationId));
+    });
+  });
+  ai.command("decline").description("Decline a governance AI plan.").argument("<conversationId>", "Conversation ID.").action(async (conversationId) => {
+    await run(rt, async () => {
+      const client = createClient(program.opts());
+      await client.declineGovernanceAiPlan(conversationId);
+      printJson(rt, { ok: true });
+    });
+  });
+}
+
+// src/commands/alerts.ts
+function register9(program, rt) {
+  const alerts = program.command("alerts").description("Manage alerts and alert configurations.");
+  alerts.command("list").description("List alerts.").option("--page <n>", "Page number.", (v) => Number(v)).option("--limit <n>", "Page size.", (v) => Number(v)).option("--status <status>", "Filter by status.").option("--severity <severity>", "Filter by severity.").action(async (opts) => {
+    await run(rt, async () => {
+      const client = createClient(program.opts());
+      const o = listOpts(opts);
+      if (opts.status) o.status = opts.status;
+      if (opts.severity) o.severity = opts.severity;
+      printJson(rt, await client.listAlerts(o));
+    });
+  });
+  alerts.command("get").description("Get an alert.").argument("<alertId>", "Alert ID.").action(async (alertId) => {
+    await run(rt, async () => {
+      const client = createClient(program.opts());
+      printJson(rt, await client.getAlert(alertId));
+    });
+  });
+  alerts.command("status").description("Change alert status.").argument("<alertId>", "Alert ID.").option("--json <json>", "Status body JSON.").option("--json-file <path>", "Status body JSON file.").action(async (alertId, opts) => {
+    await run(rt, async () => {
+      const client = createClient(program.opts());
+      const body = await readJsonInput(rt, { json: opts.json, jsonFile: opts.jsonFile });
+      printJson(rt, await client.changeAlertStatus(alertId, body));
+    });
+  });
+  alerts.command("comment").description("Add a comment to an alert.").argument("<alertId>", "Alert ID.").option("--json <json>", "Comment body JSON.").option("--json-file <path>", "Comment body JSON file.").action(async (alertId, opts) => {
+    await run(rt, async () => {
+      const client = createClient(program.opts());
+      const body = await readJsonInput(rt, { json: opts.json, jsonFile: opts.jsonFile });
+      printJson(rt, await client.addAlertComment(alertId, body));
+    });
+  });
+  alerts.command("subscribe").description("Subscribe to an alert.").argument("<alertId>", "Alert ID.").action(async (alertId) => {
+    await run(rt, async () => {
+      const client = createClient(program.opts());
+      printJson(rt, await client.subscribeToAlert(alertId));
+    });
+  });
+  alerts.command("unsubscribe").description("Unsubscribe from an alert.").argument("<alertId>", "Alert ID.").action(async (alertId) => {
+    await run(rt, async () => {
+      const client = createClient(program.opts());
+      printJson(rt, await client.unsubscribeFromAlert(alertId));
+    });
+  });
+  const configs = alerts.command("configs").description("Alert configurations.");
+  configs.command("list").description("List alert configurations.").option("--page <n>", "Page number.", (v) => Number(v)).option("--limit <n>", "Page size.", (v) => Number(v)).action(async (opts) => {
+    await run(rt, async () => {
+      const client = createClient(program.opts());
+      printJson(rt, await client.listAlertConfigs(listOpts(opts)));
+    });
+  });
+  configs.command("create").description("Create an alert configuration.").option("--json <json>", "Config body JSON.").option("--json-file <path>", "Config body JSON file.").action(async (opts) => {
+    await run(rt, async () => {
+      const client = createClient(program.opts());
+      const body = await readJsonInput(rt, { json: opts.json, jsonFile: opts.jsonFile });
+      printJson(rt, await client.createAlertConfig(body));
+    });
+  });
+  configs.command("get").description("Get an alert configuration.").argument("<configId>", "Config ID.").action(async (configId) => {
+    await run(rt, async () => {
+      const client = createClient(program.opts());
+      printJson(rt, await client.getAlertConfig(configId));
+    });
+  });
+  configs.command("update").description("Update an alert configuration.").argument("<configId>", "Config ID.").option("--json <json>", "Update body JSON.").option("--json-file <path>", "Update body JSON file.").action(async (configId, opts) => {
+    await run(rt, async () => {
+      const client = createClient(program.opts());
+      const body = await readJsonInput(rt, { json: opts.json, jsonFile: opts.jsonFile });
+      printJson(rt, await client.updateAlertConfig(configId, body));
+    });
+  });
+  configs.command("delete").description("Delete an alert configuration.").argument("<configId>", "Config ID.").action(async (configId) => {
+    await run(rt, async () => {
+      const client = createClient(program.opts());
+      await client.deleteAlertConfig(configId);
+      printJson(rt, { ok: true });
+    });
+  });
+  const prefs = alerts.command("prefs").description("Organization alert preferences.");
+  prefs.command("list").description("List organization alert preferences.").action(async () => {
+    await run(rt, async () => {
+      const client = createClient(program.opts());
+      printJson(rt, await client.listOrganizationAlertPreferences());
+    });
+  });
+  prefs.command("update").description("Update an organization alert preference.").argument("<organizationId>", "Organization ID.").argument("<alertType>", "Alert type.").option("--json <json>", "Preference body JSON.").option("--json-file <path>", "Preference body JSON file.").action(async (organizationId, alertType, opts) => {
+    await run(rt, async () => {
+      const client = createClient(program.opts());
+      const body = await readJsonInput(rt, { json: opts.json, jsonFile: opts.jsonFile });
+      printJson(rt, await client.updateOrganizationAlertPreference(organizationId, alertType, body));
+    });
+  });
+}
+
+// src/commands/models.ts
+function register10(program, rt) {
+  const models = program.command("models").description("Model alerts and recommendations.");
+  const alerts = models.command("alerts").description("Model alerts.");
+  alerts.command("list").description("List model alerts.").option("--page <n>", "Page number.", (v) => Number(v)).option("--limit <n>", "Page size.", (v) => Number(v)).action(async (opts) => {
+    await run(rt, async () => {
+      const client = createClient(program.opts());
+      printJson(rt, await client.listModelAlerts(listOpts(opts)));
+    });
+  });
+  alerts.command("mark-read").description("Mark a model alert as read.").argument("<alertId>", "Alert ID.").action(async (alertId) => {
+    await run(rt, async () => {
+      const client = createClient(program.opts());
+      await client.markModelAlertRead(alertId);
+      printJson(rt, { ok: true });
+    });
+  });
+  alerts.command("mark-all-read").description("Mark all model alerts as read.").action(async () => {
+    await run(rt, async () => {
+      const client = createClient(program.opts());
+      await client.markAllModelAlertsRead();
+      printJson(rt, { ok: true });
+    });
+  });
+  alerts.command("unread-count").description("Get unread model alert count.").action(async () => {
+    await run(rt, async () => {
+      const client = createClient(program.opts());
+      printJson(rt, await client.getUnreadModelAlertCount());
+    });
+  });
+  models.command("recommendations").description("Get model recommendations.").argument("<modelId>", "Model ID.").action(async (modelId) => {
+    await run(rt, async () => {
+      const client = createClient(program.opts());
+      printJson(rt, await client.getModelRecommendations(modelId));
+    });
+  });
+}
+
+// src/commands/search.ts
+function register11(program, rt) {
+  program.command("search").description("Search across Seclai resources.").requiredOption("--query <text>", "Search query text.").option("--limit <n>", "Max results.", (v) => Number(v)).option("--entity-type <type>", "Filter by entity type (e.g. agent, source, knowledge_base, memory_bank).").action(async (opts) => {
+    await run(rt, async () => {
+      const client = createClient(program.opts());
+      const o = { query: opts.query };
+      if (opts.limit !== void 0) o.limit = opts.limit;
+      if (opts.entityType) o.entityType = opts.entityType;
+      printJson(rt, await client.search(o));
+    });
+  });
+}
+
+// src/commands/ai.ts
+function register12(program, rt) {
+  const ai = program.command("ai").description("Top-level AI assistant.");
+  ai.command("feedback").description("Submit AI feedback.").option("--json <json>", "Feedback body JSON.").option("--json-file <path>", "Feedback body JSON file.").action(async (opts) => {
+    await run(rt, async () => {
+      const client = createClient(program.opts());
+      const body = await readJsonInput(rt, { json: opts.json, jsonFile: opts.jsonFile });
+      printJson(rt, await client.submitAiFeedback(body));
+    });
+  });
+  withAiInputOptions(
+    ai.command("kb").description("AI assistant for knowledge bases.")
+  ).action(async (opts) => {
+    await run(rt, async () => {
+      const client = createClient(program.opts());
+      const body = await readAiInput(rt, opts);
+      printJson(rt, await client.aiAssistantKnowledgeBase(body));
+    });
+  });
+  withAiInputOptions(
+    ai.command("source").description("AI assistant for sources.")
+  ).action(async (opts) => {
+    await run(rt, async () => {
+      const client = createClient(program.opts());
+      const body = await readAiInput(rt, opts);
+      printJson(rt, await client.aiAssistantSource(body));
+    });
+  });
+  withAiInputOptions(
+    ai.command("solution").description("AI assistant for solutions.")
+  ).action(async (opts) => {
+    await run(rt, async () => {
+      const client = createClient(program.opts());
+      const body = await readAiInput(rt, opts);
+      printJson(rt, await client.aiAssistantSolution(body));
+    });
+  });
+  withAiInputOptions(
+    ai.command("memory").description("AI assistant for memory banks.")
+  ).action(async (opts) => {
+    await run(rt, async () => {
+      const client = createClient(program.opts());
+      const body = await readAiInput(rt, opts);
+      printJson(rt, await client.aiAssistantMemoryBank(body));
+    });
+  });
+  ai.command("memory-history").description("Get AI assistant memory bank conversation history.").action(async () => {
+    await run(rt, async () => {
+      const client = createClient(program.opts());
+      printJson(rt, await client.getAiAssistantMemoryBankHistory());
+    });
+  });
+  ai.command("accept").description("Accept an AI assistant plan.").argument("<conversationId>", "Conversation ID.").option("--json <json>", "Accept body JSON.").option("--json-file <path>", "Accept body JSON file.").action(async (conversationId, opts) => {
+    await run(rt, async () => {
+      const client = createClient(program.opts());
+      const body = await readJsonInput(rt, { json: opts.json, jsonFile: opts.jsonFile });
+      printJson(rt, await client.acceptAiAssistantPlan(conversationId, body));
+    });
+  });
+  ai.command("decline").description("Decline an AI assistant plan.").argument("<conversationId>", "Conversation ID.").action(async (conversationId) => {
+    await run(rt, async () => {
+      const client = createClient(program.opts());
+      await client.declineAiAssistantPlan(conversationId);
+      printJson(rt, { ok: true });
+    });
+  });
+  ai.command("memory-accept").description("Accept an AI memory bank suggestion.").argument("<conversationId>", "Conversation ID.").option("--json <json>", "Accept body JSON.").option("--json-file <path>", "Accept body JSON file.").action(async (conversationId, opts) => {
+    await run(rt, async () => {
+      const client = createClient(program.opts());
+      const body = await readJsonInput(rt, { json: opts.json, jsonFile: opts.jsonFile });
+      printJson(rt, await client.acceptAiMemoryBankSuggestion(conversationId, body));
+    });
+  });
+}
+
+// src/commands/skills.ts
+import { existsSync, statSync } from "fs";
+import { mkdir, writeFile } from "fs/promises";
+import { dirname, join } from "path";
+var SKILL_MD = `---
+name: seclai-cli
+description: >-
+  Manage Seclai agents, knowledge bases, sources, memory banks, evaluations,
+  solutions, governance, alerts, and more via the CLI. Use when working with
+  the Seclai platform or when the user mentions Seclai CLI commands.
+---
+
+# Seclai CLI
+
+The Seclai CLI (\`seclai\` / \`npx @seclai/cli\`) manages agents, knowledge bases, sources, memory banks, evaluations, solutions, governance, alerts, and more from the terminal.
+
+All commands output JSON to stdout. Pipe into \`jq\` for filtering.
+
+## Quick start
+
+\`\`\`bash
+# authenticate
+export SECLAI_API_KEY="sk-..."
+
+# create an agent
+seclai agents create --json '{"name":"My Agent","description":"QA chatbot"}'
+
+# configure steps via AI assistant
+seclai agents ai gen-steps <agentId> --user-input "Build a QA chatbot that uses a knowledge base"
+
+# accept the generated plan
+seclai agents ai mark <agentId> <conversationId> --json '{"accepted":true}'
+
+# run the agent
+seclai agents run <agentId> --json '{"input":"How do I reset my password?"}' --stream
+
+# list runs
+seclai agents runs list <agentId>
+\`\`\`
+
+## Authentication
+
+Set \`SECLAI_API_KEY\` env var or pass \`--api-key <key>\`.
+Override the API URL with \`SECLAI_API_URL\` (default: https://api.seclai.com).
+
+## Global options
+
+\`\`\`bash
+--api-key <key>    # Seclai API key (or set SECLAI_API_KEY)
+--compact          # Output compact single-line JSON
+-V, --version      # Print version
+\`\`\`
+
+## Common patterns
+
+### JSON input
+Most create/update commands accept \`--json '{"key":"value"}'\` or \`--json-file path.json\`.
+Use \`--json -\` or \`--json-file -\` to read from stdin.
+
+### AI assistant shorthand
+AI generation commands accept \`--user-input <text>\` as shorthand for \`--json '{"user_input":"<text>"}'\`.
+
+### Pagination
+List commands support \`--page <n>\` and \`--limit <n>\`. Some also support \`--sort <field>\` and \`--order asc|desc\`.
+
+### File uploads
+Upload commands accept \`--file <path>\` (required), plus optional \`--title\`, \`--metadata '{"k":"v"}'\`, \`--metadata-file path.json\`, \`--file-name\`, \`--mime-type\`.
+
+## Commands
+
+### Agents
+
+\`\`\`bash
+seclai agents list [--page N] [--limit N]
+seclai agents create --json '{"name":"My Agent","description":"..."}'
+seclai agents get <agentId>
+seclai agents update <agentId> --json '{"name":"Renamed"}'
+seclai agents delete <agentId>
+\`\`\`
+
+### Running agents
+
+\`\`\`bash
+# simple run \u2014 returns the final result
+seclai agents run <agentId> --json '{"input":"Hello"}'
+
+# stream \u2014 wait for completion via SSE, print final result
+seclai agents run <agentId> --json '{"input":"Hello"}' --stream [--timeout-ms 60000]
+
+# events \u2014 stream individual SSE events as NDJSON lines
+# --output: full (entire event), data (event data only), status (status events only)
+# --event-filter: comma-separated event types to include, e.g. "status,data"
+seclai agents run <agentId> --json '{"input":"Hello"}' --events [--output full|data|status] [--event-filter "status,data"]
+
+# poll \u2014 poll for completion
+seclai agents run <agentId> --json '{"input":"Hello"}' --poll [--poll-interval-ms 2000] [--include-step-outputs]
+\`\`\`
+
+### Agent runs
+
+\`\`\`bash
+seclai agents runs list <agentId> [--page N] [--limit N] [--status <status>]
+seclai agents runs get <runId> [--include-step-outputs]
+seclai agents runs delete <runId>
+seclai agents runs cancel <runId>
+seclai agents runs search --json '{"query":"..."}'
+seclai agents runs eval-results <agentId> <runId> [--page N] [--limit N]
+\`\`\`
+
+### Agent definitions
+
+\`\`\`bash
+seclai agents def get <agentId>
+seclai agents def update <agentId> --json '{"steps":[{"step_type":"llm","config":{...}}]}'
+\`\`\`
+
+### Agent input uploads
+
+\`\`\`bash
+seclai agents upload-input <agentId> --file ./input.pdf [--file-name name] [--mime-type type]
+seclai agents input-status <agentId> <uploadId>
+\`\`\`
+
+### Agent AI assistant
+
+\`\`\`bash
+seclai agents ai gen-steps <agentId> --user-input "Build a QA chatbot"
+seclai agents ai step-config <agentId> --json '{"step_type":"llm","user_input":"Configure the LLM step"}'
+seclai agents ai history <agentId>
+seclai agents ai mark <agentId> <conversationId> --json '{"accepted":true}'
+\`\`\`
+
+### Sources
+
+\`\`\`bash
+seclai sources list [--page N] [--limit N] [--sort field] [--order asc|desc] [--account-id id]
+seclai sources create --json '{"name":"Docs","description":"Product documentation"}'
+seclai sources get <sourceId>
+seclai sources update <sourceId> --json '{"name":"Updated Docs"}'
+seclai sources delete <sourceId>
+\`\`\`
+
+### Source uploads
+
+\`\`\`bash
+seclai sources upload <sourceId> --file ./doc.pdf [--title "My Doc"] [--metadata '{"category":"docs"}'] [--file-name name] [--mime-type type]
+seclai sources upload-text <sourceId> --json '{"text":"Article content here...","title":"My Article"}'
+\`\`\`
+
+### Source exports
+
+\`\`\`bash
+seclai sources exports list <sourceId> [--page N] [--limit N]
+seclai sources exports create <sourceId> --json '{"format":"jsonl"}'
+seclai sources exports get <sourceId> <exportId>
+seclai sources exports cancel <sourceId> <exportId>
+seclai sources exports delete <sourceId> <exportId>
+seclai sources exports download <sourceId> <exportId>
+seclai sources exports estimate <sourceId> --json '{"format":"jsonl"}'
+\`\`\`
+
+### Embedding migration
+
+\`\`\`bash
+seclai sources migration get <sourceId>
+seclai sources migration start <sourceId> --json '{"target_model":"text-embedding-3-large"}'
+seclai sources migration cancel <sourceId>
+\`\`\`
+
+### Contents (indexed content)
+
+\`\`\`bash
+seclai contents get <contentVersionId> [--start N] [--end N]
+seclai contents delete <contentVersionId>
+seclai contents upload <contentVersionId> --file ./updated.pdf [--title "Title"] [--file-name name] [--mime-type type]
+seclai contents replace-text <contentVersionId> --json '{"text":"Replacement text","title":"Updated"}'
+seclai contents embeddings <contentVersionId> [--page N] [--limit N]
+\`\`\`
+
+### Knowledge bases
+
+\`\`\`bash
+seclai kb list [--page N] [--limit N] [--sort field] [--order asc|desc]
+seclai kb create --json '{"name":"Support KB","description":"Customer support articles"}'
+seclai kb get <kbId>
+seclai kb update <kbId> --json '{"name":"Updated KB"}'
+seclai kb delete <kbId>
+\`\`\`
+
+### Memory banks
+
+\`\`\`bash
+seclai memory list [--page N] [--limit N] [--sort field] [--order asc|desc]
+# type: "conversation" (chat history) or "general" (structured facts)
+seclai memory create --json '{"name":"Chat Memory","type":"conversation"}'
+seclai memory get <memoryBankId>
+seclai memory update <memoryBankId> --json '{"name":"Renamed"}'
+seclai memory delete <memoryBankId>
+\`\`\`
+
+### Memory bank utilities
+
+\`\`\`bash
+seclai memory stats <memoryBankId>
+seclai memory agents <memoryBankId>
+seclai memory compact <memoryBankId>
+seclai memory delete-source <memoryBankId>
+seclai memory templates
+seclai memory test-compaction <memoryBankId> --json '{"prompt":"Summarize the conversation"}'
+seclai memory test-compaction-standalone --json '{"prompt":"Summarize the conversation"}'
+\`\`\`
+
+### Memory bank AI
+
+\`\`\`bash
+seclai memory ai generate --user-input "Configure compaction for chat memory"
+seclai memory ai last
+seclai memory ai accept <conversationId> --json '{"accepted":true}'
+\`\`\`
+
+### Evaluations \u2014 criteria
+
+\`\`\`bash
+seclai evals criteria list <agentId> [--page N] [--limit N]
+seclai evals criteria create <agentId> --json '{"name":"Response Quality","description":"...","eval_type":"llm_judge"}'
+seclai evals criteria get <criteriaId>
+seclai evals criteria update <criteriaId> --json '{"name":"Updated Criteria"}'
+seclai evals criteria delete <criteriaId>
+seclai evals criteria summary <criteriaId>
+\`\`\`
+
+### Evaluations \u2014 results & runs
+
+\`\`\`bash
+seclai evals results list <criteriaId> [--page N] [--limit N]
+seclai evals results create <criteriaId> --json '{"run_id":"...","score":0.9}'
+seclai evals compatible-runs <criteriaId> [--page N] [--limit N]
+seclai evals test-draft <agentId> --json '{"criteria":{"name":"Test","eval_type":"llm_judge"},"run_id":"..."}'
+seclai evals agent-results <agentId> [--page N] [--limit N]
+seclai evals agent-runs <agentId> [--page N] [--limit N]
+seclai evals non-manual-summary <agentId>
+\`\`\`
+
+### Solutions
+
+\`\`\`bash
+seclai solutions list [--page N] [--limit N] [--sort field] [--order asc|desc]
+seclai solutions create --json '{"name":"Customer Support Solution"}'
+seclai solutions get <solutionId>
+seclai solutions update <solutionId> --json '{"name":"Updated"}'
+seclai solutions delete <solutionId>
+\`\`\`
+
+### Solution links
+
+\`\`\`bash
+# link resources \u2014 each flag takes a JSON array of IDs
+seclai solutions link <solutionId> --agents '["agentId1"]' --kb '["kbId1"]' --sources '["sourceId1"]'
+seclai solutions unlink <solutionId> --agents '["agentId1"]'
+\`\`\`
+
+### Solution conversations & AI
+
+\`\`\`bash
+seclai solutions convos list <solutionId>
+seclai solutions convos add <solutionId> --json '{"message":"How should I structure this?"}'
+seclai solutions convos mark <solutionId> <conversationId> --json '{"accepted":true}'
+
+seclai solutions ai generate <solutionId> --user-input "Add an FAQ source"
+seclai solutions ai kb <solutionId> --user-input "Create a knowledge base for docs"
+seclai solutions ai source <solutionId> --user-input "Create a file source for PDFs"
+seclai solutions ai accept <solutionId> <conversationId> --json '{"accepted":true}'
+seclai solutions ai decline <solutionId> <conversationId>
+\`\`\`
+
+### Alerts
+
+\`\`\`bash
+seclai alerts list [--page N] [--limit N] [--status <status>] [--severity <severity>]
+seclai alerts get <alertId>
+seclai alerts status <alertId> --json '{"status":"resolved"}'
+seclai alerts comment <alertId> --json '{"comment":"Fixed the issue"}'
+seclai alerts subscribe <alertId>
+seclai alerts unsubscribe <alertId>
+\`\`\`
+
+### Alert configurations
+
+\`\`\`bash
+seclai alerts configs list [--page N] [--limit N]
+seclai alerts configs create --json '{"name":"Latency Alert","description":"...","threshold":5000}'
+seclai alerts configs get <configId>
+seclai alerts configs update <configId> --json '{"threshold":3000}'
+seclai alerts configs delete <configId>
+\`\`\`
+
+### Alert preferences
+
+\`\`\`bash
+seclai alerts prefs list
+seclai alerts prefs update <organizationId> <alertType> --json '{"enabled":true}'
+\`\`\`
+
+### Governance AI
+
+\`\`\`bash
+seclai governance ai generate --user-input "Create a content safety policy"
+seclai governance ai list
+seclai governance ai accept <conversationId>
+seclai governance ai decline <conversationId>
+\`\`\`
+
+### Model alerts
+
+\`\`\`bash
+seclai models alerts list [--page N] [--limit N]
+seclai models alerts mark-read <alertId>
+seclai models alerts mark-all-read
+seclai models alerts unread-count
+seclai models recommendations <modelId>
+\`\`\`
+
+### Search
+
+\`\`\`bash
+seclai search --query "deployment guide" [--limit N] [--entity-type <type>]
+\`\`\`
+
+### AI assistant (global)
+
+\`\`\`bash
+seclai ai feedback --json '{"feedback":"The response was helpful"}'
+seclai ai kb --user-input "Create a support knowledge base"
+seclai ai source --user-input "Create a documentation source"
+seclai ai solution --user-input "Build a customer support solution"
+seclai ai memory --user-input "Create a conversation memory bank"
+seclai ai memory-history
+seclai ai accept <conversationId> --json '{"accepted":true}'
+seclai ai decline <conversationId>
+seclai ai memory-accept <conversationId> --json '{"accepted":true}'
+\`\`\`
+
+### Skills
+
+\`\`\`bash
+# install skill files into AI coding tool directories (auto-detects or specify)
+seclai skills install [--tool copilot|claude|cursor|windsurf|codex|kiro|cline|roo|gemini|antigravity|all] [--dir .]
+\`\`\`
+
+### MCP server
+
+\`\`\`bash
+# configure MCP server access in AI coding tool config files
+seclai mcp configure --key <apiKey> [--target claude-code|cursor|claude-desktop|windsurf|all] [--dir .]
+
+# show the MCP config JSON snippet
+seclai mcp show [--key <apiKey>]
+\`\`\`
+
+## Example: Create a source and upload content
+
+\`\`\`bash
+seclai sources create --json '{"name":"Product Docs","description":"Product documentation source"}'
+# note the id from the output
+seclai sources upload <sourceId> --file ./docs.pdf --title "Product Manual" --metadata '{"version":"2.0"}'
+seclai sources get <sourceId>
+\`\`\`
+
+## Example: Set up a knowledge base with an agent
+
+\`\`\`bash
+seclai kb create --json '{"name":"Support KB","description":"Customer support articles"}'
+seclai agents create --json '{"name":"Support Bot","description":"Answers customer questions"}'
+seclai agents ai gen-steps <agentId> --user-input "Build a QA chatbot that searches the Support KB"
+seclai agents ai mark <agentId> <conversationId> --json '{"accepted":true}'
+seclai agents run <agentId> --json '{"input":"How do I reset my password?"}' --stream
+\`\`\`
+
+## Example: Evaluate agent quality
+
+\`\`\`bash
+# create eval criteria
+seclai evals criteria create <agentId> --json '{"name":"Answer Accuracy","eval_type":"llm_judge","description":"Does the answer correctly address the question?"}'
+# find compatible runs
+seclai evals compatible-runs <criteriaId> --limit 5
+# test the criteria against a run without persisting
+seclai evals test-draft <agentId> --json '{"criteria":{"name":"Answer Accuracy","eval_type":"llm_judge"},"run_id":"<runId>"}'
+# create a persisted result
+seclai evals results create <criteriaId> --json '{"run_id":"<runId>","score":0.95}'
+# view summary
+seclai evals criteria summary <criteriaId>
+\`\`\`
+
+## Example: Solution with linked resources
+
+\`\`\`bash
+seclai solutions create --json '{"name":"Customer Support"}'
+seclai solutions link <solutionId> --agents '["<agentId>"]' --kb '["<kbId>"]' --sources '["<sourceId>"]'
+seclai solutions get <solutionId>
+\`\`\`
+
+## Example: Memory-powered agent
+
+\`\`\`bash
+seclai memory create --json '{"name":"User Preferences","type":"general"}'
+seclai agents create --json '{"name":"Personal Assistant","description":"Remembers user preferences"}'
+seclai agents ai gen-steps <agentId> --user-input "Build a chat agent that remembers user preferences. Use general memory bank <memoryBankId>"
+seclai agents ai mark <agentId> <conversationId> --json '{"accepted":true}'
+\`\`\`
+
+## Example: Governance policy setup
+
+\`\`\`bash
+seclai governance ai generate --user-input "Create a content safety policy that blocks harmful outputs"
+seclai governance ai list
+seclai governance ai accept <conversationId>
+\`\`\`
+
+## Specific topics
+
+* **Streaming & event modes** [references/streaming.md](references/streaming.md)
+* **File uploads & content management** [references/uploads.md](references/uploads.md)
+* **Evaluations workflow** [references/evaluations.md](references/evaluations.md)
+`;
+var STREAMING_REF = `# Streaming Agent Runs
+
+## Modes
+
+### --stream
+Wait for the agent run to complete via SSE. Prints the final result as a single JSON object.
+Useful when you want to block until done.
+
+\`\`\`bash
+seclai agents run <agentId> --json '{"input":"Hello"}' --stream
+seclai agents run <agentId> --json '{"input":"Hello"}' --stream --timeout-ms 120000
+\`\`\`
+
+### --events
+Stream individual SSE events as NDJSON (one JSON object per line). Use for real-time processing.
+
+\`\`\`bash
+# all events, full event objects
+seclai agents run <agentId> --json '{"input":"Hello"}' --events
+
+# only data payloads (no event metadata)
+seclai agents run <agentId> --json '{"input":"Hello"}' --events --output data
+
+# only status events
+seclai agents run <agentId> --json '{"input":"Hello"}' --events --output status
+
+# filter specific event types
+seclai agents run <agentId> --json '{"input":"Hello"}' --events --event-filter "status,data"
+\`\`\`
+
+Output modes for --events:
+- \`full\`: entire SSE event object (default)
+- \`data\`: only the data payload of each event
+- \`status\`: only events with status information
+
+### --poll
+Poll the API at intervals for run completion. Does not use SSE.
+
+\`\`\`bash
+seclai agents run <agentId> --json '{"input":"Hello"}' --poll
+seclai agents run <agentId> --json '{"input":"Hello"}' --poll --poll-interval-ms 5000 --include-step-outputs
+\`\`\`
+
+### No flag
+Fire-and-forget: starts the run and immediately returns the run ID.
+
+\`\`\`bash
+seclai agents run <agentId> --json '{"input":"Hello"}'
+# returns: {"id":"run_...","status":"queued",...}
+# check later:
+seclai agents runs get <runId>
+\`\`\`
+`;
+var UPLOADS_REF = `# File Uploads & Content Management
+
+## Upload to a source
+\`\`\`bash
+seclai sources upload <sourceId> --file ./doc.pdf
+seclai sources upload <sourceId> --file ./doc.pdf --title "My Doc" --metadata '{"category":"docs"}' --file-name "custom-name.pdf" --mime-type "application/pdf"
+seclai sources upload <sourceId> --file ./doc.pdf --metadata-file ./meta.json
+\`\`\`
+
+## Upload text directly
+\`\`\`bash
+seclai sources upload-text <sourceId> --json '{"text":"Article content here...","title":"My Article"}'
+\`\`\`
+
+## Upload input for agent runs
+\`\`\`bash
+seclai agents upload-input <agentId> --file ./input.pdf
+seclai agents upload-input <agentId> --file ./data.csv --file-name "report.csv" --mime-type "text/csv"
+seclai agents input-status <agentId> <uploadId>
+\`\`\`
+
+## Replace content
+\`\`\`bash
+# replace with file
+seclai contents upload <contentVersionId> --file ./updated.pdf
+
+# replace with text
+seclai contents replace-text <contentVersionId> --json '{"text":"Updated content","title":"Revised Article"}'
+\`\`\`
+
+## Read content
+\`\`\`bash
+# full content
+seclai contents get <contentVersionId>
+
+# text slice (0-based offsets)
+seclai contents get <contentVersionId> --start 0 --end 1000
+
+# view embeddings
+seclai contents embeddings <contentVersionId> [--page N] [--limit N]
+\`\`\`
+`;
+var EVALUATIONS_REF = `# Evaluations Workflow
+
+## Step 1: Create evaluation criteria for an agent
+\`\`\`bash
+seclai evals criteria create <agentId> --json '{"name":"Answer Accuracy","description":"Does the answer correctly address the question?","eval_type":"llm_judge"}'
+\`\`\`
+
+## Step 2: Find runs to evaluate
+\`\`\`bash
+# list all runs for an agent
+seclai agents runs list <agentId> --limit 10
+
+# or find runs compatible with specific criteria
+seclai evals compatible-runs <criteriaId> --limit 10
+\`\`\`
+
+## Step 3: Test criteria before committing
+\`\`\`bash
+seclai evals test-draft <agentId> --json '{"criteria":{"name":"Answer Accuracy","eval_type":"llm_judge","description":"..."},"run_id":"<runId>"}'
+\`\`\`
+
+## Step 4: Create evaluation results
+\`\`\`bash
+seclai evals results create <criteriaId> --json '{"run_id":"<runId>","score":0.95}'
+\`\`\`
+
+## Step 5: Review summaries
+\`\`\`bash
+seclai evals criteria summary <criteriaId>
+seclai evals agent-results <agentId>
+seclai evals agent-runs <agentId> --limit 20
+seclai evals non-manual-summary <agentId>
+\`\`\`
+
+## Managing criteria
+\`\`\`bash
+seclai evals criteria list <agentId>
+seclai evals criteria get <criteriaId>
+seclai evals criteria update <criteriaId> --json '{"name":"Updated Name"}'
+seclai evals criteria delete <criteriaId>
+\`\`\`
+
+## Viewing results
+\`\`\`bash
+seclai evals results list <criteriaId> [--page N] [--limit N]
+\`\`\`
+`;
+function getToolConfig(tool, destDir) {
+  const skillFiles = [
+    { name: "SKILL.md", content: SKILL_MD },
+    { name: "references/streaming.md", content: STREAMING_REF },
+    { name: "references/uploads.md", content: UPLOADS_REF },
+    { name: "references/evaluations.md", content: EVALUATIONS_REF }
+  ];
+  switch (tool) {
+    case "copilot":
+      return { dir: join(destDir, ".github", "copilot", "seclai-cli"), files: skillFiles };
+    case "claude":
+      return { dir: join(destDir, ".claude", "skills", "seclai-cli"), files: skillFiles };
+    case "cursor":
+      return { dir: join(destDir, ".cursor", "skills", "seclai-cli"), files: skillFiles };
+    case "windsurf":
+      return { dir: join(destDir, ".windsurf", "skills", "seclai-cli"), files: skillFiles };
+    case "codex":
+      return { dir: join(destDir, ".codex", "skills", "seclai-cli"), files: skillFiles };
+    case "kiro":
+      return { dir: join(destDir, ".kiro", "steering", "seclai-cli"), files: skillFiles };
+    case "cline":
+      return { dir: join(destDir, ".clinerules", "seclai-cli"), files: skillFiles };
+    case "roo":
+      return { dir: join(destDir, ".roo", "rules", "seclai-cli"), files: skillFiles };
+    case "gemini":
+      return { dir: join(destDir, ".gemini", "seclai-cli"), files: skillFiles };
+    case "antigravity":
+      return { dir: join(destDir, ".antigravity", "seclai-cli"), files: skillFiles };
+    default:
+      throw new Error(`Unknown tool: ${tool}. Use copilot, claude, cursor, windsurf, codex, kiro, cline, roo, gemini, or antigravity.`);
+  }
+}
+function detectTools(destDir) {
+  const detected = [];
+  if (existsSync(join(destDir, ".github", "copilot"))) detected.push("copilot");
+  if (existsSync(join(destDir, ".claude")) || existsSync(join(destDir, "CLAUDE.md")))
+    detected.push("claude");
+  if (existsSync(join(destDir, ".cursor"))) detected.push("cursor");
+  if (existsSync(join(destDir, ".windsurf"))) detected.push("windsurf");
+  if (existsSync(join(destDir, ".codex"))) detected.push("codex");
+  if (existsSync(join(destDir, ".kiro"))) detected.push("kiro");
+  if (existsSync(join(destDir, ".clinerules")) && statSync(join(destDir, ".clinerules")).isDirectory()) detected.push("cline");
+  if (existsSync(join(destDir, ".roo"))) detected.push("roo");
+  if (existsSync(join(destDir, ".gemini")) || existsSync(join(destDir, "GEMINI.md")))
+    detected.push("gemini");
+  if (existsSync(join(destDir, ".antigravity"))) detected.push("antigravity");
+  return detected;
+}
+function register13(program, rt) {
+  const skills = program.command("skills").description("Install Seclai CLI skill files for AI coding tools.");
+  skills.command("install").description(
+    "Write Seclai CLI skill/instruction files into the current workspace.\n\nDetected tools: copilot, claude, cursor, windsurf, codex, kiro, cline, roo, gemini, antigravity.\nUse --tool to target a specific tool, or 'all' for all supported tools."
+  ).option("--tool <name>", "Target tool (copilot|claude|cursor|windsurf|codex|kiro|cline|roo|gemini|antigravity|all). Auto-detects if omitted.").option("--dir <path>", "Target directory (default: current directory).", ".").action(async (opts) => {
+    await run(rt, async () => {
+      const destDir = opts.dir;
+      let tools;
+      if (opts.tool === "all") {
+        tools = ["copilot", "claude", "cursor", "windsurf", "codex", "kiro", "cline", "roo", "gemini", "antigravity"];
+      } else if (opts.tool) {
+        tools = [opts.tool];
+      } else {
+        tools = detectTools(destDir);
+        if (tools.length === 0) {
+          tools = ["copilot"];
+          rt.writeErr("No AI tool detected, defaulting to copilot.\n");
+        }
+      }
+      let totalFiles = 0;
+      for (const tool of tools) {
+        const config = getToolConfig(tool, destDir);
+        for (const file of config.files) {
+          const filePath = join(config.dir, file.name);
+          await mkdir(dirname(filePath), { recursive: true });
+          await writeFile(filePath, file.content, "utf8");
+          totalFiles++;
+        }
+        rt.writeErr(`Installed ${config.files.length} skill files for ${tool} \u2192 ${config.dir}
+`);
+      }
+      printJson(rt, { ok: true, tools, filesWritten: totalFiles });
+    });
+  });
+}
+
+// src/commands/mcp.ts
+import { existsSync as existsSync2 } from "fs";
+import { mkdir as mkdir2, readFile as readFile2, writeFile as writeFile2 } from "fs/promises";
+import { dirname as dirname2, join as join2 } from "path";
+import { homedir, platform } from "os";
+var MCP_URL = "https://api.seclai.com/mcp";
+function buildMcpEntry(apiKey) {
+  return {
+    type: "streamable-http",
+    url: MCP_URL,
+    headers: { "X-API-Key": apiKey }
+  };
+}
+function getTargets(destDir) {
+  const home = homedir();
+  const os = platform();
+  const targets = [
+    // Project-scoped configs
+    { name: "claude-code", path: join2(destDir, ".mcp.json"), scope: "project" },
+    { name: "cursor", path: join2(destDir, ".cursor", "mcp.json"), scope: "project" }
+  ];
+  if (os === "win32") {
+    targets.push({
+      name: "claude-desktop",
+      path: join2(process.env["APPDATA"] ?? join2(home, "AppData", "Roaming"), "Claude", "claude_desktop_config.json"),
+      scope: "global"
+    });
+  } else if (os === "darwin") {
+    targets.push({
+      name: "claude-desktop",
+      path: join2(home, "Library", "Application Support", "Claude", "claude_desktop_config.json"),
+      scope: "global"
+    });
+  }
+  targets.push({ name: "windsurf", path: join2(home, ".codeium", "windsurf", "mcp_config.json"), scope: "global" });
+  return targets;
+}
+async function mergeConfig(filePath, apiKey) {
+  let existing = {};
+  if (existsSync2(filePath)) {
+    try {
+      const parsed = JSON.parse(await readFile2(filePath, "utf8"));
+      if (typeof parsed !== "object" || parsed === null || Array.isArray(parsed)) return false;
+      existing = parsed;
+    } catch {
+      return false;
+    }
+  }
+  const raw = existing["mcpServers"];
+  const servers = typeof raw === "object" && raw !== null && !Array.isArray(raw) ? raw : {};
+  servers["seclai"] = buildMcpEntry(apiKey);
+  existing["mcpServers"] = servers;
+  await mkdir2(dirname2(filePath), { recursive: true });
+  await writeFile2(filePath, JSON.stringify(existing, null, 2) + "\n", "utf8");
+  return true;
+}
+function detectTargets(destDir) {
+  const all = getTargets(destDir);
+  return all.filter((t) => {
+    if (t.scope === "global") return existsSync2(dirname2(t.path));
+    if (t.name === "claude-code") return existsSync2(join2(destDir, ".claude")) || existsSync2(join2(destDir, "CLAUDE.md"));
+    if (t.name === "cursor") return existsSync2(join2(destDir, ".cursor"));
+    return false;
+  });
+}
+function register14(program, rt) {
+  const mcp = program.command("mcp").description("Configure the Seclai MCP server for AI coding tools.");
+  mcp.command("configure").description(
+    "Add the Seclai MCP server to AI coding tool config files.\n\nTargets: claude-code, cursor, claude-desktop, windsurf.\nUse --target to pick a specific tool, or 'all' for all known targets."
+  ).requiredOption("--key <key>", "Seclai API key to embed in the config.").option("--target <name>", "Target tool (claude-code|cursor|claude-desktop|windsurf|all). Auto-detects if omitted.").option("--dir <path>", "Project directory for project-scoped configs (default: current directory).", ".").action(async (opts) => {
+    await run(rt, async () => {
+      const destDir = opts.dir;
+      const apiKey = opts.key;
+      const allTargets = getTargets(destDir);
+      let targets;
+      if (opts.target === "all") {
+        targets = allTargets;
+      } else if (opts.target) {
+        const found = allTargets.find((t) => t.name === opts.target);
+        if (!found) {
+          rt.writeErr(`Unknown target "${opts.target}". Use: claude-code, cursor, claude-desktop, windsurf, or all.
+`);
+          rt.setExitCode(1);
+          return;
+        }
+        targets = [found];
+      } else {
+        targets = detectTargets(destDir);
+        if (targets.length === 0) {
+          targets = [allTargets[0]];
+          rt.writeErr("No MCP-compatible tool detected, defaulting to claude-code (.mcp.json).\n");
+        }
+      }
+      let configured = 0;
+      const failures = [];
+      for (const target of targets) {
+        const ok = await mergeConfig(target.path, apiKey);
+        if (ok) {
+          configured++;
+          rt.writeErr(`Configured seclai MCP for ${target.name} \u2192 ${target.path}
+`);
+        } else {
+          failures.push(target.name);
+          rt.writeErr(`Failed to parse existing config at ${target.path}, skipping.
+`);
+        }
+      }
+      const allOk = failures.length === 0;
+      printJson(rt, { ok: allOk, targets: targets.map((t) => t.name), filesWritten: configured, ...failures.length > 0 ? { failures } : {} });
+      if (!allOk) rt.setExitCode(1);
+    });
+  });
+  mcp.command("show").description("Show the Seclai MCP server JSON configuration snippet.").option("--key <key>", "API key to include (default: placeholder).").action(async (opts) => {
+    await run(rt, async () => {
+      const entry = buildMcpEntry(opts.key ?? "YOUR_API_KEY");
+      printJson(rt, { mcpServers: { seclai: entry } });
+    });
+  });
+}
+
+// src/commands/completion.ts
+var BASH = `#!/usr/bin/env bash
+# seclai bash completion \u2014 add to ~/.bashrc:
+#   eval "$(seclai completion bash)"
+
+_seclai_completions() {
+  local cur prev commands
+  cur="\${COMP_WORDS[COMP_CWORD]}"
+  prev="\${COMP_WORDS[COMP_CWORD-1]}"
+
+  # Top-level commands
+  commands="agents sources contents kb memory evals solutions governance alerts models search ai skills mcp completion help"
+
+  case "\${COMP_WORDS[1]}" in
+    agents)
+      case "\${COMP_WORDS[2]}" in
+        runs)   COMPREPLY=( $(compgen -W "list get delete cancel search eval-results" -- "$cur") ); return ;;
+        def)    COMPREPLY=( $(compgen -W "get update" -- "$cur") ); return ;;
+        ai)     COMPREPLY=( $(compgen -W "gen-steps step-config history mark" -- "$cur") ); return ;;
+        *)      COMPREPLY=( $(compgen -W "list create get update delete run runs def upload-input input-status ai" -- "$cur") ); return ;;
+      esac ;;
+    sources|source)
+      case "\${COMP_WORDS[2]}" in
+        exports)    COMPREPLY=( $(compgen -W "list create get cancel delete download estimate" -- "$cur") ); return ;;
+        migration)  COMPREPLY=( $(compgen -W "get start cancel" -- "$cur") ); return ;;
+        *)          COMPREPLY=( $(compgen -W "list create get update delete upload upload-text exports migration" -- "$cur") ); return ;;
+      esac ;;
+    contents) COMPREPLY=( $(compgen -W "get delete upload replace replace-text embeddings" -- "$cur") ); return ;;
+    kb)       COMPREPLY=( $(compgen -W "list create get update delete" -- "$cur") ); return ;;
+    memory)
+      case "\${COMP_WORDS[2]}" in
+        ai) COMPREPLY=( $(compgen -W "generate last accept" -- "$cur") ); return ;;
+        *)  COMPREPLY=( $(compgen -W "list create get update delete stats agents compact delete-source templates test-compaction test-compaction-standalone ai" -- "$cur") ); return ;;
+      esac ;;
+    evals)
+      case "\${COMP_WORDS[2]}" in
+        criteria) COMPREPLY=( $(compgen -W "list create get update delete summary" -- "$cur") ); return ;;
+        results)  COMPREPLY=( $(compgen -W "list create" -- "$cur") ); return ;;
+        *)        COMPREPLY=( $(compgen -W "criteria results compatible-runs test-draft agent-results agent-runs non-manual-summary" -- "$cur") ); return ;;
+      esac ;;
+    solutions)
+      case "\${COMP_WORDS[2]}" in
+        convos) COMPREPLY=( $(compgen -W "list add mark" -- "$cur") ); return ;;
+        ai)     COMPREPLY=( $(compgen -W "generate kb source accept decline" -- "$cur") ); return ;;
+        *)      COMPREPLY=( $(compgen -W "list create get update delete link unlink convos ai" -- "$cur") ); return ;;
+      esac ;;
+    governance)
+      case "\${COMP_WORDS[2]}" in
+        ai) COMPREPLY=( $(compgen -W "generate list accept decline" -- "$cur") ); return ;;
+        *)  COMPREPLY=( $(compgen -W "ai" -- "$cur") ); return ;;
+      esac ;;
+    alerts)
+      case "\${COMP_WORDS[2]}" in
+        configs) COMPREPLY=( $(compgen -W "list create get update delete" -- "$cur") ); return ;;
+        prefs)   COMPREPLY=( $(compgen -W "list update" -- "$cur") ); return ;;
+        *)       COMPREPLY=( $(compgen -W "list get status comment subscribe unsubscribe configs prefs" -- "$cur") ); return ;;
+      esac ;;
+    models)
+      case "\${COMP_WORDS[2]}" in
+        alerts) COMPREPLY=( $(compgen -W "list mark-read mark-all-read unread-count" -- "$cur") ); return ;;
+        *)      COMPREPLY=( $(compgen -W "alerts recommendations" -- "$cur") ); return ;;
+      esac ;;
+    ai) COMPREPLY=( $(compgen -W "feedback kb source solution memory memory-history accept decline memory-accept" -- "$cur") ); return ;;
+    skills) COMPREPLY=( $(compgen -W "install" -- "$cur") ); return ;;
+    mcp) COMPREPLY=( $(compgen -W "configure show" -- "$cur") ); return ;;
+    completion) COMPREPLY=( $(compgen -W "bash zsh fish" -- "$cur") ); return ;;
+  esac
+
+  COMPREPLY=( $(compgen -W "$commands" -- "$cur") )
+}
+
+complete -F _seclai_completions seclai
+`;
+var ZSH = `#compdef seclai
+# seclai zsh completion \u2014 add to ~/.zshrc:
+#   eval "$(seclai completion zsh)"
+
+_seclai() {
+  local -a commands
+  commands=(
+    'agents:Manage agents, runs, definitions, and AI assistance'
+    'sources:Manage content sources'
+    'contents:Manage indexed content and embeddings'
+    'kb:Manage knowledge bases'
+    'memory:Manage memory banks'
+    'evals:Manage evaluations'
+    'solutions:Manage solutions'
+    'governance:Governance AI assistant'
+    'alerts:Manage alerts and alert configurations'
+    'models:Model alerts and recommendations'
+    'search:Search across Seclai resources'
+    'ai:Top-level AI assistant'
+    'skills:Install skill files for AI coding tools'
+    'mcp:Configure the Seclai MCP server'
+    'completion:Generate shell completion scripts'
+    'help:Display help for command'
+  )
+
+  _arguments -C \\
+    '--api-key[Seclai API key]:key' \\
+    '--compact[Output compact JSON]' \\
+    '-V[Output version]' \\
+    '-h[Display help]' \\
+    '1:command:->cmd' \\
+    '*::arg:->args'
+
+  case $state in
+    cmd) _describe 'command' commands ;;
+    args)
+      case \${words[1]} in
+        agents)
+          local -a sub=(list create get update delete run runs def upload-input input-status ai)
+          _describe 'subcommand' sub ;;
+        sources|source)
+          local -a sub=(list create get update delete upload upload-text exports migration)
+          _describe 'subcommand' sub ;;
+        contents)
+          local -a sub=(get delete upload replace replace-text embeddings)
+          _describe 'subcommand' sub ;;
+        kb)
+          local -a sub=(list create get update delete)
+          _describe 'subcommand' sub ;;
+        memory)
+          local -a sub=(list create get update delete stats agents compact delete-source templates test-compaction test-compaction-standalone ai)
+          _describe 'subcommand' sub ;;
+        evals)
+          local -a sub=(criteria results compatible-runs test-draft agent-results agent-runs non-manual-summary)
+          _describe 'subcommand' sub ;;
+        solutions)
+          local -a sub=(list create get update delete link unlink convos ai)
+          _describe 'subcommand' sub ;;
+        governance)
+          local -a sub=(ai)
+          _describe 'subcommand' sub ;;
+        alerts)
+          local -a sub=(list get status comment subscribe unsubscribe configs prefs)
+          _describe 'subcommand' sub ;;
+        models)
+          local -a sub=(alerts recommendations)
+          _describe 'subcommand' sub ;;
+        ai)
+          local -a sub=(feedback kb source solution memory memory-history accept decline memory-accept)
+          _describe 'subcommand' sub ;;
+        skills)
+          local -a sub=(install)
+          _describe 'subcommand' sub ;;
+        mcp)
+          local -a sub=(configure show)
+          _describe 'subcommand' sub ;;
+        completion)
+          local -a sub=(bash zsh fish)
+          _describe 'shell' sub ;;
+      esac ;;
+  esac
+}
+
+_seclai "$@"
+`;
+var FISH = `# seclai fish completion \u2014 save to ~/.config/fish/completions/seclai.fish
+#   seclai completion fish > ~/.config/fish/completions/seclai.fish
+
+set -l top agents sources contents kb memory evals solutions governance alerts models search ai skills mcp completion help
+
+# Top-level
+complete -c seclai -n "not __fish_seen_subcommand_from $top" -f -a "agents" -d "Manage agents"
+complete -c seclai -n "not __fish_seen_subcommand_from $top" -f -a "sources" -d "Manage sources"
+complete -c seclai -n "not __fish_seen_subcommand_from $top" -f -a "contents" -d "Manage content"
+complete -c seclai -n "not __fish_seen_subcommand_from $top" -f -a "kb" -d "Knowledge bases"
+complete -c seclai -n "not __fish_seen_subcommand_from $top" -f -a "memory" -d "Memory banks"
+complete -c seclai -n "not __fish_seen_subcommand_from $top" -f -a "evals" -d "Evaluations"
+complete -c seclai -n "not __fish_seen_subcommand_from $top" -f -a "solutions" -d "Solutions"
+complete -c seclai -n "not __fish_seen_subcommand_from $top" -f -a "governance" -d "Governance AI"
+complete -c seclai -n "not __fish_seen_subcommand_from $top" -f -a "alerts" -d "Alerts"
+complete -c seclai -n "not __fish_seen_subcommand_from $top" -f -a "models" -d "Model alerts"
+complete -c seclai -n "not __fish_seen_subcommand_from $top" -f -a "search" -d "Search resources"
+complete -c seclai -n "not __fish_seen_subcommand_from $top" -f -a "ai" -d "AI assistant"
+complete -c seclai -n "not __fish_seen_subcommand_from $top" -f -a "skills" -d "Skill files"
+complete -c seclai -n "not __fish_seen_subcommand_from $top" -f -a "mcp" -d "MCP server config"
+complete -c seclai -n "not __fish_seen_subcommand_from $top" -f -a "completion" -d "Shell completions"
+
+# agents
+complete -c seclai -n "__fish_seen_subcommand_from agents; and not __fish_seen_subcommand_from list create get update delete run runs def upload-input input-status ai" -f -a "list create get update delete run runs def upload-input input-status ai"
+
+# sources
+complete -c seclai -n "__fish_seen_subcommand_from sources; and not __fish_seen_subcommand_from list create get update delete upload upload-text exports migration" -f -a "list create get update delete upload upload-text exports migration"
+
+# contents
+complete -c seclai -n "__fish_seen_subcommand_from contents; and not __fish_seen_subcommand_from get delete upload replace replace-text embeddings" -f -a "get delete upload replace replace-text embeddings"
+
+# kb
+complete -c seclai -n "__fish_seen_subcommand_from kb; and not __fish_seen_subcommand_from list create get update delete" -f -a "list create get update delete"
+
+# memory
+complete -c seclai -n "__fish_seen_subcommand_from memory; and not __fish_seen_subcommand_from list create get update delete stats agents compact delete-source templates test-compaction test-compaction-standalone ai" -f -a "list create get update delete stats agents compact delete-source templates test-compaction test-compaction-standalone ai"
+
+# evals
+complete -c seclai -n "__fish_seen_subcommand_from evals; and not __fish_seen_subcommand_from criteria results compatible-runs test-draft agent-results agent-runs non-manual-summary" -f -a "criteria results compatible-runs test-draft agent-results agent-runs non-manual-summary"
+
+# solutions
+complete -c seclai -n "__fish_seen_subcommand_from solutions; and not __fish_seen_subcommand_from list create get update delete link unlink convos ai" -f -a "list create get update delete link unlink convos ai"
+
+# governance
+complete -c seclai -n "__fish_seen_subcommand_from governance; and not __fish_seen_subcommand_from ai" -f -a "ai"
+
+# alerts
+complete -c seclai -n "__fish_seen_subcommand_from alerts; and not __fish_seen_subcommand_from list get status comment subscribe unsubscribe configs prefs" -f -a "list get status comment subscribe unsubscribe configs prefs"
+
+# models
+complete -c seclai -n "__fish_seen_subcommand_from models; and not __fish_seen_subcommand_from alerts recommendations" -f -a "alerts recommendations"
+
+# ai
+complete -c seclai -n "__fish_seen_subcommand_from ai; and not __fish_seen_subcommand_from feedback kb source solution memory memory-history accept decline memory-accept" -f -a "feedback kb source solution memory memory-history accept decline memory-accept"
+
+# skills
+complete -c seclai -n "__fish_seen_subcommand_from skills; and not __fish_seen_subcommand_from install" -f -a "install"
+
+# mcp
+complete -c seclai -n "__fish_seen_subcommand_from mcp; and not __fish_seen_subcommand_from configure show" -f -a "configure show"
+
+# completion
+complete -c seclai -n "__fish_seen_subcommand_from completion; and not __fish_seen_subcommand_from bash zsh fish" -f -a "bash zsh fish"
+
+# Global options
+complete -c seclai -l api-key -d "Seclai API key"
+complete -c seclai -l compact -d "Output compact JSON"
+complete -c seclai -s V -l version -d "Output version"
+`;
+var SCRIPTS = { bash: BASH, zsh: ZSH, fish: FISH };
+function register15(program, rt) {
+  const completion = program.command("completion").description("Generate shell completion scripts.").argument("<shell>", "Shell type: bash, zsh, or fish.").action(async (shell) => {
+    const script = SCRIPTS[shell];
+    if (!script) {
+      rt.writeErr(`Unknown shell "${shell}". Use: bash, zsh, or fish.
+`);
+      rt.setExitCode(1);
+      return;
+    }
+    rt.writeOut(script);
+  });
+}
+
+// src/cli.ts
+function createProgram(rt = defaultRuntime()) {
+  const program = new Command();
+  const cliVersion = getCliVersion();
+  program.name("seclai").description(
+    `Seclai Command Line Interface (v${cliVersion})
+
+Manage agents, knowledge bases, sources, memory banks, evaluations, and more from the terminal.
+
+All commands return JSON to stdout, making it easy to pipe into jq or other tools.`
+  ).version(cliVersion, "-V, --version", "output the version").option(
+    "--api-key <key>",
+    "Seclai API key (defaults to SECLAI_API_KEY)."
+  ).option(
+    "--compact",
+    "Output compact JSON (no indentation)."
+  );
+  program.addHelpText(
+    "after",
+    `
+Environment:
+  SECLAI_API_KEY   Default API key (alternative to --api-key)
+  SECLAI_API_URL   Override API base URL (default: https://api.seclai.com)
+
+Examples:
+  seclai agents list
+  seclai agents run <agentId> --json '{"input":"Hello"}'
+  seclai agents run <agentId> --json '{"input":"Hi"}' --events
+  seclai sources list
+  seclai kb list
+  seclai search --query "deployment guide"
+  npx @seclai/cli agents list
+`
+  );
+  program.configureOutput({
+    writeOut: (str) => rt.writeOut(str),
+    writeErr: (str) => rt.writeErr(str)
+  });
+  program.exitOverride();
+  program.hook("preAction", (thisCommand) => {
+    const globalOpts = thisCommand.opts();
+    rt.compact = Boolean(globalOpts.compact);
+  });
+  register(program, rt);
+  register2(program, rt);
+  register3(program, rt);
+  register4(program, rt);
+  register5(program, rt);
+  register6(program, rt);
+  register7(program, rt);
+  register8(program, rt);
+  register9(program, rt);
+  register10(program, rt);
+  register11(program, rt);
+  register12(program, rt);
+  register13(program, rt);
+  register14(program, rt);
+  register15(program, rt);
   return program;
 }
 async function runCli(argv, rt = defaultRuntime()) {