@seclai/cli 1.2.2 → 1.4.0

package/README.md

@@ -42,7 +42,7 @@ npx add-mcp https://api.seclai.com/mcp --header "X-API-Key: $SECLAI_API_KEY" --n
 
 ## Documentation
 
-Command reference (latest): https://seclai.github.io/seclai-cli/1.2.2/
+Command reference (latest): https://seclai.github.io/seclai-cli/1.4.0/
 
 ## Authentication
 
@@ -162,6 +162,9 @@ seclai agents runs delete <runId>
 seclai agents runs cancel <runId>
 seclai agents runs search [--page N] [--limit N] [--json '...']
 seclai agents runs eval-results <agentId> <runId> [--page N] [--limit N]
+# Download a file attachment emitted by a run step. attachmentId is the
+# URL-safe-base64 storage_key from run output manifests / webhooks.
+seclai agents runs download-attachment <runId> <attachmentId> [--download-name <name>] [--output <path>]
 ```
 
 #### Agent Definition
@@ -171,16 +174,27 @@ seclai agents def get <agentId>
 seclai agents def update <agentId> --json '{"steps":[...]}'
 ```
 
-#### Agent Export
+#### Agent Export / Import
 
 ```bash
 seclai agents export <agentId>
 seclai agents export <agentId> --no-download
+
+# Validate an agent_definition payload without creating an agent.
+# Reports counts and any unresolved_refs you'll need to map with entity_remap
+# when calling `agents create` or `agents update`.
+# The body shape is `{ "agent_definition": <export payload> }`.
+seclai agents preview-import --json-file ./preview-body.json
+seclai agents export <agentId> \
+  | jq '{agent_definition: .}' \
+  | seclai agents preview-import --json-file -
 ```
 
 #### Agent Input Upload
 
 ```bash
+# Discover which files (if any) the agent expects before staging uploads.
+seclai agents attachment-references <agentId>
 seclai agents upload-input <agentId> --file ./data.csv [--file-name data.csv] [--mime-type text/csv]
 seclai agents input-status <agentId> <uploadId>
 ```
@@ -403,6 +417,16 @@ seclai models alerts unread-count
 seclai models recommendations <modelId>
 ```
 
+#### Model Playground Experiments
+
+```bash
+seclai models experiments list [--days N] [--start-date <date>] [--end-date <date>] [--limit N] [--offset N]
+seclai models experiments create --json '{"model_ids":["gpt-4o"],"prompt":"Compare responses"}'
+seclai models experiments get <experimentId>
+seclai models experiments cancel <experimentId>
+seclai models experiments delete <experimentId>   # soft-delete, preserves audit history
+```
+
 ### Search
 
 ```bash

package/dist/cli.js

@@ -21,6 +21,9 @@ function defaultRuntime() {
     writeOut: (text) => {
       process2.stdout.write(text);
     },
+    writeOutBytes: (bytes) => {
+      process2.stdout.write(bytes);
+    },
     writeErr: (text) => {
       process2.stderr.write(text);
     },
@@ -291,6 +294,37 @@ function register(program, rt) {
       printJson(rt, await client.searchAgentRuns(body));
     });
   });
+  runs.command("download-attachment").description(
+    "Download a file attachment emitted by a step in an agent run. The attachmentId is the URL-safe-base64 storage_key from run output manifests / webhooks."
+  ).argument("<runId>", "Run ID.").argument("<attachmentId>", "Attachment ID (storage_key).").option("--download-name <name>", "Filename hint for the download disposition.").option("--output <path>", "Write the attachment bytes to this file. If omitted, raw bytes are written to stdout.").action(async (runId, attachmentId, opts) => {
+    await run(rt, async () => {
+      const client = createClient(program.opts());
+      const res = await client.downloadAgentRunAttachment(
+        runId,
+        attachmentId,
+        opts.downloadName ? { downloadName: opts.downloadName } : {}
+      );
+      if (opts.output) {
+        const { createWriteStream } = await import("fs");
+        const { stat } = await import("fs/promises");
+        if (res.body) {
+          const { Readable } = await import("stream");
+          const { pipeline } = await import("stream/promises");
+          await pipeline(
+            Readable.fromWeb(res.body),
+            createWriteStream(opts.output)
+          );
+        } else {
+          const { writeFile: writeFile5 } = await import("fs/promises");
+          await writeFile5(opts.output, Buffer.from(await res.arrayBuffer()));
+        }
+        const { size } = await stat(opts.output);
+        printJson(rt, { saved: opts.output, bytes: size });
+      } else {
+        rt.writeOutBytes(new Uint8Array(await res.arrayBuffer()));
+      }
+    });
+  });
   const def = agents.command("def").description("Agent definition (step workflow).");
   def.command("get").description("Get agent definition.").argument("<agentId>", "Agent ID.").action(async (agentId) => {
     await run(rt, async () => {
@@ -311,6 +345,15 @@ function register(program, rt) {
       printJson(rt, await client.exportAgent(agentId, opts.download));
     });
   });
+  agents.command("preview-import").description(
+    "Validate an agent_definition payload without creating any agent. Reports step/schedule/alert/criteria/policy counts and any unresolved_refs (workflow refs to KBs, memory banks, source connections, or sub-agents that don't exist in this account)."
+  ).option("--json <json>", "Inline JSON body ({ agent_definition: ... }). Use '-' for stdin.").option("--json-file <path>", "JSON file path. Use '-' for stdin.").action(async (opts) => {
+    await run(rt, async () => {
+      const client = createClient(program.opts());
+      const body = await readJsonInput(rt, { json: opts.json, jsonFile: opts.jsonFile });
+      printJson(rt, await client.previewImportAgent(body));
+    });
+  });
   agents.command("upload-input").description("Upload a file as agent input.").argument("<agentId>", "Agent ID.").requiredOption("--file <path>", "File to upload.").option("--file-name <name>", "Override filename.").option("--mime-type <type>", "MIME type.").action(async (agentId, opts) => {
     await run(rt, async () => {
       const client = createClient(program.opts());
@@ -328,6 +371,14 @@ function register(program, rt) {
       printJson(rt, await client.getAgentInputUploadStatus(agentId, uploadId));
     });
   });
+  agents.command("attachment-references").description(
+    "Show which files (if any) an agent's templates expect on a run. Call before staging uploads: requires_uploads reports whether the agent accepts files, and the agent block lists the exact names / indexes / patterns a run-time batch must satisfy."
+  ).argument("<agentId>", "Agent ID.").action(async (agentId) => {
+    await run(rt, async () => {
+      const client = createClient(program.opts());
+      printJson(rt, await client.getAgentAttachmentReferences(agentId));
+    });
+  });
   const ai = agents.command("ai").description("Agent AI assistant.");
   withAiInputOptions(
     ai.command("gen-steps").description("Generate agent steps via AI.").argument("<agentId>", "Agent ID.")
@@ -1126,6 +1177,13 @@ function register10(program, rt) {
       printJson(rt, await client.cancelExperiment(experimentId));
     });
   });
+  experiments.command("delete").description("Soft-delete a model playground experiment (preserves audit history).").argument("<experimentId>", "Experiment ID.").action(async (experimentId) => {
+    await run(rt, async () => {
+      const client = createClient(program.opts());
+      await client.deleteExperiment(experimentId);
+      printJson(rt, { ok: true });
+    });
+  });
 }
 
 // src/commands/search.ts
@@ -2002,10 +2060,10 @@ _seclai_completions() {
   case "\${COMP_WORDS[1]}" in
     agents)
       case "\${COMP_WORDS[2]}" in
-        runs)   COMPREPLY=( $(compgen -W "list get delete cancel search eval-results" -- "$cur") ); return ;;
+        runs)   COMPREPLY=( $(compgen -W "list get delete cancel search eval-results download-attachment" -- "$cur") ); return ;;
         def)    COMPREPLY=( $(compgen -W "get update" -- "$cur") ); return ;;
         ai)     COMPREPLY=( $(compgen -W "gen-steps step-config history mark" -- "$cur") ); return ;;
-        *)      COMPREPLY=( $(compgen -W "list create get update delete run runs def export upload-input input-status ai" -- "$cur") ); return ;;
+        *)      COMPREPLY=( $(compgen -W "list create get update delete run runs def export preview-import upload-input input-status attachment-references ai" -- "$cur") ); return ;;
       esac ;;
     sources|source)
       case "\${COMP_WORDS[2]}" in
@@ -2045,8 +2103,9 @@ _seclai_completions() {
       esac ;;
     models)
       case "\${COMP_WORDS[2]}" in
-        alerts) COMPREPLY=( $(compgen -W "list mark-read mark-all-read unread-count" -- "$cur") ); return ;;
-        *)      COMPREPLY=( $(compgen -W "alerts recommendations" -- "$cur") ); return ;;
+        alerts)      COMPREPLY=( $(compgen -W "list mark-read mark-all-read unread-count" -- "$cur") ); return ;;
+        experiments) COMPREPLY=( $(compgen -W "list create get cancel delete" -- "$cur") ); return ;;
+        *)           COMPREPLY=( $(compgen -W "alerts recommendations experiments" -- "$cur") ); return ;;
       esac ;;
     ai) COMPREPLY=( $(compgen -W "feedback kb source solution memory memory-history accept decline memory-accept" -- "$cur") ); return ;;
     skills) COMPREPLY=( $(compgen -W "install" -- "$cur") ); return ;;
@@ -2097,7 +2156,7 @@ _seclai() {
     args)
       case \${words[1]} in
         agents)
-          local -a sub=(list create get update delete run runs def export upload-input input-status ai)
+          local -a sub=(list create get update delete run runs def export preview-import upload-input input-status attachment-references ai)
           _describe 'subcommand' sub ;;
         sources|source)
           local -a sub=(list create get update delete upload upload-text exports migration)
@@ -2124,7 +2183,7 @@ _seclai() {
           local -a sub=(list get status comment subscribe unsubscribe configs prefs)
           _describe 'subcommand' sub ;;
         models)
-          local -a sub=(alerts recommendations)
+          local -a sub=(alerts recommendations experiments)
           _describe 'subcommand' sub ;;
         ai)
           local -a sub=(feedback kb source solution memory memory-history accept decline memory-accept)
@@ -2167,7 +2226,7 @@ complete -c seclai -n "not __fish_seen_subcommand_from $top" -f -a "mcp" -d "MCP
 complete -c seclai -n "not __fish_seen_subcommand_from $top" -f -a "completion" -d "Shell completions"
 
 # agents
-complete -c seclai -n "__fish_seen_subcommand_from agents; and not __fish_seen_subcommand_from list create get update delete run runs def export upload-input input-status ai" -f -a "list create get update delete run runs def export upload-input input-status ai"
+complete -c seclai -n "__fish_seen_subcommand_from agents; and not __fish_seen_subcommand_from list create get update delete run runs def export preview-import upload-input input-status attachment-references ai" -f -a "list create get update delete run runs def export preview-import upload-input input-status attachment-references ai"
 
 # sources
 complete -c seclai -n "__fish_seen_subcommand_from sources; and not __fish_seen_subcommand_from list create get update delete upload upload-text exports migration" -f -a "list create get update delete upload upload-text exports migration"
@@ -2194,7 +2253,7 @@ complete -c seclai -n "__fish_seen_subcommand_from governance; and not __fish_se
 complete -c seclai -n "__fish_seen_subcommand_from alerts; and not __fish_seen_subcommand_from list get status comment subscribe unsubscribe configs prefs" -f -a "list get status comment subscribe unsubscribe configs prefs"
 
 # models
-complete -c seclai -n "__fish_seen_subcommand_from models; and not __fish_seen_subcommand_from alerts recommendations" -f -a "alerts recommendations"
+complete -c seclai -n "__fish_seen_subcommand_from models; and not __fish_seen_subcommand_from alerts recommendations experiments" -f -a "alerts recommendations experiments"
 
 # ai
 complete -c seclai -n "__fish_seen_subcommand_from ai; and not __fish_seen_subcommand_from feedback kb source solution memory memory-history accept decline memory-accept" -f -a "feedback kb source solution memory memory-history accept decline memory-accept"