@thinkingai/ae-cli 1.0.15 → 1.0.20

package/README.md

@@ -86,14 +86,18 @@ ae-cli auth logout
 
 | Domain | Commands | Description |
 |--------|----------|-------------|
-| `analysis` | 31 | Analysis workflows: alerts, reports, dashboards, ad-hoc/drilldown, clusters/tags, metadata/metrics, project tools, entity details, analysis schema |
-| `analysis_audience` | 14 | Audience operations: clusters, tags, and cluster/tag definition schema |
-| `analysis_meta` | 20 | Metadata governance: events/properties, metrics, virtual metadata, project config, tracking plan, mark times, resource links |
+| `analysis` | 30+ | Analysis workflows: alerts, reports, dashboards, ad-hoc/drilldown, entity/event details, analysis schema |
+| `analysis_audience` | 10+ | Audience operations: clusters, tags, and cluster/tag definition schema |
+| `analysis_meta` | 20+ | Metadata governance: events/properties, metrics, virtual metadata, project config, tracking plan, mark times, entity catalog |
 | `engage` | 40+ | Hermes Engage MCP: channels, tasks, configs, flows, strategies |
-| `te_dataops` | 50+ | Data warehouse management: repos, datatables, flows, IDE queries, integration, operations |
-| `te_community` | 30+ | Community analysis: posts search, sentiment analysis, topic trends, livestream data |
+| `dataops_repo` | 8 | Data warehouse repos: spaces, catalogs, schemas, members |
+| `dataops_datatable` | 10+ | Data tables: table creation, views, batch operations, data dictionary |
+| `dataops_flow` | 20+ | Task flows: flow creation, task nodes, scheduling, execution, monitoring |
+| `dataops_ide` | 10+ | IDE queries: metadata browsing, SQL execution, query management |
+| `dataops_integration` | 20+ | Data integration: datasource management, sync solutions, data synchronization |
+| `community` | 10+ | Community analysis: posts search, sentiment analysis, topic trends, livestream data |
 | `analysis_common` | 2 | Cross-module common constraints: resource link completion, project ID gate |
-| `operation` | 11 | Tasks, flows, channels, space navigation |
+| `auth` / `config` | 2 | Authentication and host configuration |
 
 ### Global Options
 
@@ -124,44 +128,39 @@ npx skills add ThinkingAIAgenticEngine/ae-cli -g -y
 
 ## Skill Details
 
-### ae-analysis (67 tools)
+### ae-analysis
 
 Unified AE analysis capabilities:
-- **Alerts**: view, create, update alert definitions
-- **Reports & Dashboards**: create, query, update reports and dashboards
-- **Model Analysis**: event analysis, retention analysis, funnel analysis, SQL analysis, user property analysis, distribution analysis, interval analysis, path analysis, attribution analysis
+- **Analysis**: alerts, reports, dashboards, ad-hoc/drilldown, entity/event details, analysis schema
 - **Audience**: cluster and tag lifecycle management, plus definition schema tools
-- **Metadata Governance**: events/properties, metrics, virtual metadata, project config, tracking plans, mark times, entity catalog
-- **Common Constraints**: mandatory project ID gate and post-write resource-link completion
-- **Entity/Event Details**: query details, generate analysis SQL
-- **Schema Helpers**: analysis query schema, filter schema, groupby schema
+- **Metadata**: events/properties, metrics, virtual metadata, project config, tracking plans, mark times
+- **Common**: mandatory project ID gate and post-write resource-link completion
 
-### engage (40+ tools)
+### engage
 
 Hermes Engage MCP capabilities:
-- **Channels**: channel management, config channels, approval management
-- **Tasks**: task list, task details, task data/metrics overview, experiment reports
-- **Configs**: config items, strategies, strategy comparison, trigger/analysis reports
-- **Flows**: flow creation, node config, flow reports, flow validation
+- **Channels**: channel management, config channels, approval, whitelist
+- **Tasks**: task list, details, data/metrics overview, experiment reports
+- **Configs**: config items, strategies, comparison, trigger/analysis reports
+- **Flows**: flow creation, node config, reports, validation
 
-### ae-dataops (50+ tools)
+### ae-dataops
 
 Data warehouse management:
 - **Repo Management**: spaces, catalogs, schemas, members
 - **Data Tables**: table creation, views, batch operations, data dictionary
 - **Task Flows**: flow creation, task nodes, scheduling, execution, monitoring
 - **IDE Queries**: metadata browsing, SQL execution, query management
-- **Integration**: datasource management, sync solutions, data synchronization
-- **Operations**: flow instances, task instances, backfill jobs
+- **Data Integration**: datasource management, sync solutions, data synchronization
 
-### ae-community (30+ tools)
+### ae-community
 
 Community social media analysis:
 - **Posts**: search, detail, corpus tags
 - **Comments**: sentiment analysis, tag analysis, summary
 - **Topics**: hot topics, trends, daily summaries
 - **Livestreams**: rooms, sessions, analysis, metrics
-- **Advanced Analysis**: activity analysis, character analysis, weekly reports, release analysis
+- **Channel Info**: channel overview metrics
 
 ## Architecture
 

package/README.zh.md

@@ -86,14 +86,18 @@ ae-cli auth logout
 
 | 域 | 命令数 | 描述 |
 |---|---|---|
-| `analysis` | 31 | 分析工作流：告警、报表、仪表板、即时分析/下钻、分群/标签、元数据/指标、项目工具、实体详情、分析模型 |
-| `analysis_audience` | 14 | 受众运营：分群、标签及其定义模型 |
-| `analysis_meta` | 20 | 元数据治理：事件/属性、指标、虚拟元数据、项目配置、埋点方案、标记时间、资源链接 |
+| `analysis` | 30+ | 分析工作流：告警、报表、仪表板、即时分析/下钻、实体/事件详情、分析模型 |
+| `analysis_audience` | 10+ | 受众运营：分群、标签及其定义模型 |
+| `analysis_meta` | 20+ | 元数据治理：事件/属性、指标、虚拟元数据、项目配置、埋点方案、标记时间、实体目录 |
 | `engage` | 40+ | Hermes Engage MCP：渠道、任务、配置、流程、策略 |
-| `te_dataops` | 50+ | 数仓管理：仓库、数据表、任务流、IDE 查询、数据集成、运维管理 |
-| `te_community` | 30+ | 社区分析：帖子搜索、情感分析、话题趋势、直播数据 |
+| `dataops_repo` | 8 | 数仓仓库：空间、目录、模式、成员 |
+| `dataops_datatable` | 10+ | 数据表：表创建、视图、批量操作、数据字典 |
+| `dataops_flow` | 20+ | 任务流：流程创建、任务节点、调度、执行、监控 |
+| `dataops_ide` | 10+ | IDE 查询：元数据浏览、SQL 执行、查询管理 |
+| `dataops_integration` | 20+ | 数据集成：数据源管理、同步方案、数据同步 |
+| `community` | 10+ | 社区分析：帖子搜索、情感分析、话题趋势、直播数据 |
 | `analysis_common` | 2 | 跨模块通用约束：资源链接补全、项目 ID 门控 |
-| `operation` | 11 | 任务、流程、渠道、空间导航 |
+| `auth` / `config` | 2 | 身份验证和主机配置 |
 
 ### 全局选项
 
@@ -124,27 +128,23 @@ npx skills add ThinkingAIAgenticEngine/ae-cli -g -y
 
 ## Skill 详情
 
-### ae-analysis（67 个工具）
+### ae-analysis
 
 统一的 AE 分析能力：
-- **告警**：查看、创建、更新告警定义
-- **报表和仪表板**：创建、查询、更新报表和仪表板
-- **模型分析**：事件分析、留存分析、漏斗分析、SQL 分析、用户属性分析、分布分析、间隔分析、路径分析、归因分析
+- **分析**：告警、报表、仪表板、即时分析/下钻、实体/事件详情、分析模型
 - **受众**：分群和标签生命周期管理，以及定义模型工具
-- **元数据治理**：事件/属性、指标、虚拟元数据、项目配置、埋点方案、标记时间、实体目录
+- **元数据**：事件/属性、指标、虚拟元数据、项目配置、埋点方案、标记时间
 - **通用约束**：强制的项目 ID 门控和写入后资源链接补全
-- **实体/事件详情**：查询详情、生成分析 SQL
-- **模型辅助**：分析查询模型、过滤模型、分组模型
 
-### engage（40+ 个工具）
+### engage
 
 Hermes Engage MCP 能力：
-- **渠道**：渠道管理、配置渠道、审批管理
-- **任务**：任务列表、任务详情、任务数据/指标概览、实验报告
-- **配置**：配置项、策略、策略对比、触发/分析报告
-- **流程**：流程创建、节点配置、流程报告、流程验证
+- **渠道**：渠道管理、配置渠道、审批、白名单
+- **任务**：任务列表、详情、数据/指标概览、实验报告
+- **配置**：配置项、策略、对比、触发/分析报告
+- **流程**：流程创建、节点配置、报告、验证
 
-### ae-dataops（50+ 个工具）
+### ae-dataops
 
 数仓管理：
 - **仓库管理**：空间、目录、模式、成员
@@ -152,16 +152,15 @@ Hermes Engage MCP 能力：
 - **任务流**：流程创建、任务节点、调度、执行、监控
 - **IDE 查询**：元数据浏览、SQL 执行、查询管理
 - **数据集成**：数据源管理、同步方案、数据同步
-- **运维管理**：流程实例、任务实例、补数据任务
 
-### ae-community（30+ 个工具）
+### ae-community
 
 社区社媒分析：
 - **帖子**：搜索、详情、语料标签
 - **评论**：情感分析、标签分析、摘要
 - **话题**：热门话题、趋势、每日摘要
 - **直播**：直播间、场次、分析、指标
-- **高级分析**：活动分析、角色分析、周报、发布分析
+- **渠道信息**：渠道概览指标
 
 ## 架构
 

package/dist/auth-A4NV2VHD.js

@@ -0,0 +1,153 @@
+import {
+  printError,
+  printOutput
+} from "./chunk-KM57HI5B.js";
+import {
+  clearMcpToken,
+  loadMcpTokenStore,
+  setMcpTokenManual,
+  validateMcpToken
+} from "./chunk-5CCFSPAF.js";
+import {
+  clearToken,
+  getAuthStatus,
+  getToken,
+  resolveHost,
+  setTokenManual,
+  validateToken
+} from "./chunk-OVMQFFC2.js";
+import {
+  loadConfig,
+  saveConfig
+} from "./chunk-TMMUBSKW.js";
+
+// src/commands/auth.ts
+function registerAuth(program) {
+  const auth = program.command("auth").description("Authentication management");
+  auth.command("login").description("Login to AE (auto-extract token from Chrome on macOS)").action(async () => {
+    const host = resolveHost(program.opts().host);
+    if (!host) {
+      printError("config", "No AE host configured.", "Run: ae-cli config set-host");
+      process.exit(1);
+    }
+    try {
+      const token = await getToken(host);
+      process.stderr.write(`[ae-cli] Authenticated to ${host}
+`);
+      printOutput({ authenticated: true, host, token: token.slice(0, 8) + "..." }, program.opts().format || "json");
+    } catch (err) {
+      printError("auth", err.message);
+      process.exit(1);
+    }
+  });
+  auth.command("set-token <token>").description("Manually set authentication token for active host").action(async (token) => {
+    const host = resolveHost(program.opts().host);
+    if (!host) {
+      printError("config", "No AE host configured.", "Run: ae-cli config set-host");
+      process.exit(1);
+    }
+    const config = loadConfig();
+    if (!config.hosts[host]) {
+      config.hosts[host] = { label: host };
+      if (!config.activeHost) {
+        config.activeHost = host;
+      }
+      saveConfig(config);
+      process.stderr.write(`[ae-cli] Config saved for ${host}
+`);
+      printOutput({ saved: true, config }, program.opts().format || "json");
+    }
+    process.stderr.write(`[ae-cli] Validating token...
+`);
+    const isValid = await validateToken(token, host);
+    if (!isValid) {
+      process.stderr.write(`[ae-cli] Token validation failed
+`);
+      printError("auth", "Invalid token", "Please check your token and try again");
+      process.exit(1);
+    }
+    setTokenManual(token, host);
+    process.stderr.write(`[ae-cli] Token verified and saved for ${host}
+`);
+    printOutput({ saved: true, host, verified: true }, program.opts().format || "json");
+  });
+  auth.command("status").description("Show current authentication status").action(async () => {
+    const host = resolveHost(program.opts().host);
+    if (!host) {
+      printOutput({ authenticated: false, host: "(none)", hint: "Run: ae-cli config set-host" }, program.opts().format || "json");
+      return;
+    }
+    const tokenStatus = getAuthStatus(host);
+    const hasValidToken = tokenStatus.authenticated;
+    const mcpStore = loadMcpTokenStore();
+    const cachedMcpToken = mcpStore[host];
+    let hasValidMcpToken = false;
+    if (cachedMcpToken) {
+      hasValidMcpToken = await validateMcpToken(cachedMcpToken, host);
+    }
+    const authenticated = hasValidToken || hasValidMcpToken;
+    printOutput({ authenticated, host }, program.opts().format || "json");
+  });
+  auth.command("logout").description("Clear stored token for active host").action(() => {
+    const host = resolveHost(program.opts().host);
+    if (!host) {
+      printError("config", "No AE host configured.", "Run: ae-cli config set-host");
+      process.exit(1);
+    }
+    clearToken(host);
+    process.stderr.write(`[ae-cli] Token cleared for ${host}
+`);
+    printOutput({ cleared: true, host }, program.opts().format || "json");
+  });
+  auth.command("set-mcp-token <token>").description("Manually set MCP token for a host").option("--host <host>", "Target host URL (defaults to active host)").action(async (token, opts) => {
+    const host = opts.host || resolveHost(program.opts().host);
+    if (!host) {
+      printError("config", "No AE host configured.", "Use --host <url> or run: ae-cli config set-host");
+      process.exit(1);
+    }
+    const config = loadConfig();
+    if (!config.hosts[host]) {
+      config.hosts[host] = { label: host };
+      if (!config.activeHost) {
+        config.activeHost = host;
+      }
+      saveConfig(config);
+      process.stderr.write(`[ae-cli] Host config saved for ${host}
+`);
+    }
+    process.stderr.write(`[ae-cli] Validating MCP token...
+`);
+    const isValid = await validateMcpToken(token, host);
+    if (!isValid) {
+      process.stderr.write(`[ae-cli] MCP token validation failed
+`);
+      printError("auth", "Invalid MCP token", "Please check your MCP token and try again");
+      process.exit(1);
+    }
+    setMcpTokenManual(token, host);
+    process.stderr.write(`[ae-cli] MCP token verified and saved for ${host}
+`);
+    printOutput({ saved: true, host, verified: true, type: "mcp-token" }, program.opts().format || "json");
+  });
+  auth.command("clear-mcp-token").description("Clear stored MCP token for a host").option("--host <host>", "Target host URL (defaults to active host)").option("--all", "Clear MCP tokens for all hosts").action((opts) => {
+    if (opts.all) {
+      clearMcpToken();
+      process.stderr.write(`[ae-cli] All MCP tokens cleared
+`);
+      printOutput({ cleared: true, type: "all-mcp-tokens" }, program.opts().format || "json");
+      return;
+    }
+    const host = opts.host || resolveHost(program.opts().host);
+    if (!host) {
+      printError("config", "No AE host configured.", "Use --host <url> or run: ae-cli config set-host");
+      process.exit(1);
+    }
+    clearMcpToken(host);
+    process.stderr.write(`[ae-cli] MCP token cleared for ${host}
+`);
+    printOutput({ cleared: true, host }, program.opts().format || "json");
+  });
+}
+export {
+  registerAuth
+};

package/dist/{auth-4GAHTBVH.js → auth-T3ILGJKW.js}

@@ -5,9 +5,10 @@ import {
   loadToken,
   resolveHost,
   saveToken,
-  setTokenManual
-} from "./chunk-UK6HO5O5.js";
-import "./chunk-EBFUVWIZ.js";
+  setTokenManual,
+  validateToken
+} from "./chunk-OVMQFFC2.js";
+import "./chunk-TMMUBSKW.js";
 export {
   clearToken,
   getAuthStatus,
@@ -15,5 +16,6 @@ export {
   loadToken,
   resolveHost,
   saveToken,
-  setTokenManual
+  setTokenManual,
+  validateToken
 };

package/dist/{chunk-TJIMDNAU.js → chunk-5CCFSPAF.js}

@@ -1,12 +1,13 @@
 import {
   getToken
-} from "./chunk-UK6HO5O5.js";
+} from "./chunk-OVMQFFC2.js";
 import {
+  forceMigrateFromFallback,
   getActiveHost,
   getConfigDir,
   safeJsonParse,
   safeReadJsonFile
-} from "./chunk-EBFUVWIZ.js";
+} from "./chunk-TMMUBSKW.js";
 
 // src/core/mcp.ts
 import fs from "fs";
@@ -102,8 +103,60 @@ async function getMcpToken(hostOverride) {
   saveMcpTokenStore(updatedStore);
   return mcpToken;
 }
+function clearMcpToken(hostUrl) {
+  const store = loadMcpTokenStore();
+  if (hostUrl) {
+    delete store[hostUrl];
+  } else {
+    for (const key of Object.keys(store)) {
+      delete store[key];
+    }
+  }
+  saveMcpTokenStore(store);
+}
+function setMcpTokenManual(token, hostUrl) {
+  const store = loadMcpTokenStore();
+  store[hostUrl] = token;
+  saveMcpTokenStore(store);
+}
+async function validateMcpToken(token, hostUrl) {
+  const mapping = getMcpMapping("analysis");
+  const base = hostUrl.replace(/\/+$/, "");
+  const url = `${base}/mcp/${mapping.componentName}/http/${mapping.mappingPath}`;
+  const requestId = 1;
+  const body = {
+    jsonrpc: JSONRPC_VERSION,
+    id: requestId,
+    method: "tools/list",
+    params: { _meta: { progressToken: requestId } }
+  };
+  const headers = {
+    "Content-Type": "application/json",
+    "Accept": "application/json, text/event-stream",
+    "mcp-protocol-version": MCP_PROTOCOL_VERSION,
+    "mcp-token": token
+  };
+  try {
+    const resp = await fetch(url, {
+      method: "POST",
+      headers,
+      body: JSON.stringify(body)
+    });
+    if (!resp.ok) {
+      return false;
+    }
+    const data = safeJsonParse(await resp.text());
+    if (data.error) {
+      return false;
+    }
+    return data.result?.tools !== void 0;
+  } catch {
+    return false;
+  }
+}
 async function mcpRequest(url, method, params = {}, hostOverride) {
-  const token = await getMcpToken(hostOverride);
+  const hostUrl = hostOverride || getActiveHost();
+  const token = await getMcpToken(hostUrl);
   const requestId = genRequestId();
   const paramsWithMeta = {
     ...params,
@@ -127,6 +180,25 @@ async function mcpRequest(url, method, params = {}, hostOverride) {
     body: JSON.stringify(body)
   });
   if (!resp.ok) {
+    const migrated = forceMigrateFromFallback();
+    if (migrated && migrated[hostUrl]) {
+      process.stderr.write(`[ae-cli] MCP token refreshed from fallback for ${hostUrl}
+`);
+      headers["mcp-token"] = migrated[hostUrl];
+      const retryResp = await fetch(url, {
+        method: "POST",
+        headers,
+        body: JSON.stringify(body)
+      });
+      if (!retryResp.ok) {
+        throw new Error(`MCP HTTP error: ${retryResp.status} ${retryResp.statusText}`);
+      }
+      const retryData = safeJsonParse(await retryResp.text());
+      if (retryData.error) {
+        throw new Error(`MCP error: ${retryData.error.message || JSON.stringify(retryData.error)}`);
+      }
+      return retryData.result;
+    }
     throw new Error(`MCP HTTP error: ${resp.status} ${resp.statusText}`);
   }
   const data = safeJsonParse(await resp.text());
@@ -169,6 +241,10 @@ function parseMcpResult(result) {
 export {
   registerMcpMappings,
   resolveMcpUrl,
+  loadMcpTokenStore,
+  clearMcpToken,
+  setMcpTokenManual,
+  validateMcpToken,
   callMcpTool,
   parseMcpResult
 };

package/dist/{chunk-UK6HO5O5.js → chunk-OVMQFFC2.js}

@@ -2,8 +2,9 @@ import {
   extractHostname,
   getActiveHost,
   getConfigDir,
+  safeJsonParse,
   safeReadJsonFile
-} from "./chunk-EBFUVWIZ.js";
+} from "./chunk-TMMUBSKW.js";
 
 // src/core/auth.ts
 import fs from "fs";
@@ -22,6 +23,16 @@ function resolveHost(hostOverride) {
   if (hostOverride) return hostOverride;
   return getActiveHost();
 }
+async function validateToken(token, hostUrl) {
+  const url = `${hostUrl}/v1/oauth/checkToken?accessToken=${token}`;
+  try {
+    const resp = await fetch(url, { method: "POST" });
+    const respJson = safeJsonParse(await resp.text());
+    return respJson?.return_code === 0;
+  } catch {
+    return false;
+  }
+}
 function loadAllTokens() {
   try {
     const legacyTokens = path.join(LEGACY_DIR, "tokens.json");
@@ -209,6 +220,7 @@ Options:
 
 export {
   resolveHost,
+  validateToken,
   loadToken,
   saveToken,
   clearToken,

package/dist/{chunk-EBFUVWIZ.js → chunk-TMMUBSKW.js}

@@ -17,11 +17,46 @@ import fs2 from "fs";
 import path from "path";
 var CONFIG_DIR = path.join(process.env.HOME || "", ".ae-cli");
 var CONFIG_FILE = path.join(CONFIG_DIR, "config.json");
+var MCP_TOKENS_FILE = path.join(CONFIG_DIR, "mcp-tokens.json");
+var FALLBACK_MCP_TOKEN_FILE = "/data/app/te_agent_ta/.ae-config/mcp-token.json";
 function ensureDir() {
   if (!fs2.existsSync(CONFIG_DIR)) fs2.mkdirSync(CONFIG_DIR, { recursive: true });
 }
+function migrateFromFallback() {
+  if (!fs2.existsSync(FALLBACK_MCP_TOKEN_FILE) || fs2.existsSync(MCP_TOKENS_FILE)) {
+    return null;
+  }
+  return doMigrateFromFallback();
+}
+function forceMigrateFromFallback() {
+  if (!fs2.existsSync(FALLBACK_MCP_TOKEN_FILE)) {
+    return null;
+  }
+  return doMigrateFromFallback();
+}
+function doMigrateFromFallback() {
+  try {
+    const fallbackData = safeReadJsonFile(FALLBACK_MCP_TOKEN_FILE);
+    const tokenStore = {};
+    if (fallbackData && typeof fallbackData === "object" && !Array.isArray(fallbackData)) {
+      const url = fallbackData.url;
+      const token = fallbackData["mcp-token"];
+      if (url && token) {
+        tokenStore[url] = token;
+      }
+    }
+    if (Object.keys(tokenStore).length > 0) {
+      ensureDir();
+      fs2.writeFileSync(MCP_TOKENS_FILE, JSON.stringify(tokenStore, null, 2));
+      return tokenStore;
+    }
+  } catch {
+  }
+  return null;
+}
 function loadConfig() {
   try {
+    const migratedTokens = migrateFromFallback();
     if (fs2.existsSync(CONFIG_FILE)) {
       const raw = safeReadJsonFile(CONFIG_FILE);
       if (raw.defaultHost && !raw.activeHost) {
@@ -31,6 +66,22 @@ function loadConfig() {
       }
       return raw;
     }
+    if (migratedTokens && Object.keys(migratedTokens).length > 0) {
+      const hosts = {};
+      for (const url of Object.keys(migratedTokens)) {
+        hosts[url] = { label: url };
+        process.stderr.write(`[ae-cli] Added host: ${url}
+`);
+      }
+      const activeHost = Object.keys(migratedTokens)[0];
+      process.stderr.write(`[ae-cli] Active host set to: ${activeHost}
+`);
+      process.stderr.write(`[ae-cli] MCP tokens migrated from ${FALLBACK_MCP_TOKEN_FILE}
+`);
+      const config = { activeHost, hosts };
+      saveConfig(config);
+      return config;
+    }
   } catch (err) {
     console.error(`Error loading config: ${err.message}`);
   }
@@ -114,6 +165,7 @@ function extractHostname(fullUrl) {
 export {
   safeJsonParse,
   safeReadJsonFile,
+  forceMigrateFromFallback,
   loadConfig,
   saveConfig,
   getActiveHost,

package/dist/{chunk-OQ4XEG77.js → chunk-TOXRLDUP.js}

@@ -2,10 +2,10 @@ import {
   clearToken,
   getToken,
   resolveHost
-} from "./chunk-UK6HO5O5.js";
+} from "./chunk-OVMQFFC2.js";
 import {
   safeJsonParse
-} from "./chunk-EBFUVWIZ.js";
+} from "./chunk-TMMUBSKW.js";
 
 // src/core/client.ts
 import WebSocket from "ws";

package/dist/{client-HU63573O.js → client-FPA76DGY.js}

@@ -4,9 +4,9 @@ import {
   queryReportData,
   querySql,
   wsQuery
-} from "./chunk-OQ4XEG77.js";
-import "./chunk-UK6HO5O5.js";
-import "./chunk-EBFUVWIZ.js";
+} from "./chunk-TOXRLDUP.js";
+import "./chunk-OVMQFFC2.js";
+import "./chunk-TMMUBSKW.js";
 export {
   httpGet,
   httpPost,

package/dist/{config-OLF7RBPM.js → config-QZIEYXQZ.js}

@@ -1,14 +1,17 @@
 import {
+  clearToken,
   getAuthStatus,
-  getToken
-} from "./chunk-UK6HO5O5.js";
+  getToken,
+  loadToken,
+  validateToken
+} from "./chunk-OVMQFFC2.js";
 import {
   addHost,
   listHosts,
   removeHost,
   setActiveHost,
   updateHostLabel
-} from "./chunk-EBFUVWIZ.js";
+} from "./chunk-TMMUBSKW.js";
 
 // src/commands/config.ts
 import * as readline from "readline";
@@ -136,9 +139,21 @@ Delete \x1B[1m${label}\x1B[0m (${url})? [y/N]: `, (a) => {
 async function ensureAuth(hostUrl) {
   const status = getAuthStatus(hostUrl);
   if (status.authenticated) {
-    process.stderr.write(`\x1B[32m\u2713\x1B[0m Token valid for ${hostUrl}
+    const cached = loadToken(hostUrl);
+    if (cached && cached.token) {
+      process.stderr.write(`\x1B[2m[ae-cli] Validating token...\x1B[0m
 `);
-    return;
+      const isValid = await validateToken(cached.token, hostUrl);
+      if (isValid) {
+        process.stderr.write(`\x1B[32m\u2713\x1B[0m Token valid for ${hostUrl}
+`);
+        return;
+      } else {
+        clearToken(hostUrl);
+        process.stderr.write(`\x1B[33m!\x1B[0m Token expired or invalid. Re-authenticating...
+`);
+      }
+    }
   }
   process.stderr.write(`
 \x1B[33m!\x1B[0m No valid token for ${hostUrl}. Starting login...