@thinkingai/ae-cli 6.0.20 → 6.0.22

package/dist/{te-analysis-HJ22TUAA.js → te-analysis-WWX3Z6RP.js}

@@ -1,14 +1,16 @@
+import "./chunk-4EUZRJPO.js";
 import {
   callMcpTool,
   parseMcpResult,
   resolveMcpUrl
-} from "./chunk-DMMEPCST.js";
+} from "./chunk-5FBLRSMU.js";
 import {
   isGlobalQueryModeEnabled
-} from "./chunk-PN3OS34E.js";
+} from "./chunk-XE2PI5DS.js";
 import "./chunk-NOO24N7W.js";
-import "./chunk-RSHMZ3LG.js";
-import "./chunk-6W4QOZAL.js";
+import "./chunk-FPE5LGVU.js";
+import "./chunk-U6QPKCN3.js";
+import "./chunk-WPXHCP4A.js";
 
 // src/commands/te-analysis/shared.ts
 function createMcpCommand(config) {
@@ -891,7 +893,8 @@ var buildEventAnalysisQp = createMcpCommand({
     { name: "time_particle_size", type: "string", required: false, desc: "Optional time granularity. Default: total." },
     { name: "groups", type: "json", required: false, desc: "Optional group-by dimensions JSON array." },
     { name: "filters", type: "json", required: false, desc: "Optional global filters JSON array." },
-    { name: "relation", type: "string", required: false, desc: "Optional filter relation. Supported values: and, or. Default: and." }
+    { name: "relation", type: "string", required: false, desc: "Optional filter relation. Supported values: and, or. Default: and." },
+    { name: "authenticated_only", type: "boolean", required: false, desc: "When true, resolve only authenticated assets while building the QP." }
   ],
   risk: "read",
   buildArgs: (ctx) => ({
@@ -901,7 +904,8 @@ var buildEventAnalysisQp = createMcpCommand({
     timeParticleSize: ctx.str("time_particle_size") || void 0,
     groups: optionalJson(ctx, "groups"),
     filters: optionalJson(ctx, "filters"),
-    relation: ctx.str("relation") || void 0
+    relation: ctx.str("relation") || void 0,
+    authenticatedOnly: optionalBoolean(ctx, "authenticated_only")
   })
 });
 
@@ -914,7 +918,8 @@ var buildRetentionAnalysisQp = createMcpCommand({
     { name: "time_range", type: "json", required: true, desc: "Required time range JSON for retention analysis." },
     { name: "retention", type: "json", required: true, desc: "Required retention intent JSON." },
     { name: "relation", type: "string", required: false, desc: "Optional top-level retention filter relation. Supported values: and, or. Default: and." },
-    { name: "time_particle_size", type: "string", required: false, desc: "Optional time granularity. Supported values: day, week, month." }
+    { name: "time_particle_size", type: "string", required: false, desc: "Optional time granularity. Supported values: day, week, month." },
+    { name: "authenticated_only", type: "boolean", required: false, desc: "When true, resolve only authenticated assets while building the QP." }
   ],
   risk: "read",
   buildArgs: (ctx) => ({
@@ -922,7 +927,8 @@ var buildRetentionAnalysisQp = createMcpCommand({
     timeRange: ctx.json("time_range"),
     retention: ctx.json("retention"),
     relation: ctx.str("relation") || void 0,
-    timeParticleSize: ctx.str("time_particle_size") || void 0
+    timeParticleSize: ctx.str("time_particle_size") || void 0,
+    authenticatedOnly: optionalBoolean(ctx, "authenticated_only")
   })
 });
 
@@ -935,7 +941,8 @@ var buildFunnelAnalysisQp = createMcpCommand({
     { name: "time_range", type: "json", required: true, desc: "Required time range JSON for funnel analysis." },
     { name: "funnel", type: "json", required: true, desc: "Required funnel intent JSON." },
     { name: "relation", type: "string", required: false, desc: "Optional top-level funnel filter relation. Supported values: and, or. Default: and." },
-    { name: "time_particle_size", type: "string", required: false, desc: "Optional time granularity. Supported values: day, week, month." }
+    { name: "time_particle_size", type: "string", required: false, desc: "Optional time granularity. Supported values: day, week, month." },
+    { name: "authenticated_only", type: "boolean", required: false, desc: "When true, resolve only authenticated assets while building the QP." }
   ],
   risk: "read",
   buildArgs: (ctx) => ({
@@ -943,7 +950,8 @@ var buildFunnelAnalysisQp = createMcpCommand({
     timeRange: ctx.json("time_range"),
     funnel: ctx.json("funnel"),
     relation: ctx.str("relation") || void 0,
-    timeParticleSize: ctx.str("time_particle_size") || void 0
+    timeParticleSize: ctx.str("time_particle_size") || void 0,
+    authenticatedOnly: optionalBoolean(ctx, "authenticated_only")
   })
 });
 
@@ -953,12 +961,14 @@ var buildPropAnalysisQp = createMcpCommand({
   description: "Build a validated prop-analysis QP from structured intent. Call before query_adhoc for prop_analysis ad-hoc analysis. Do not call get_analysis_query_schema/list_properties/list_metrics/get_metric first; the builder resolves user properties internally. This command only builds qp and does not execute query_adhoc.",
   flags: [
     { name: "project_id", type: "number", required: true, desc: "Project ID", alias: "p" },
-    { name: "prop_analysis", type: "json", required: true, desc: "Required user property analysis intent JSON." }
+    { name: "prop_analysis", type: "json", required: true, desc: "Required user property analysis intent JSON." },
+    { name: "authenticated_only", type: "boolean", required: false, desc: "When true, resolve only authenticated assets while building the QP." }
   ],
   risk: "read",
   buildArgs: (ctx) => ({
     projectId: ctx.num("project_id"),
-    propAnalysis: ctx.json("prop_analysis")
+    propAnalysis: ctx.json("prop_analysis"),
+    authenticatedOnly: optionalBoolean(ctx, "authenticated_only")
   })
 });
 
@@ -1176,7 +1186,8 @@ var buildIntervalAnalysisQp = createMcpCommand({
     { name: "time_range", type: "json", required: true, desc: "Required time range JSON for interval analysis." },
     { name: "interval", type: "json", required: true, desc: "Interval analysis intent JSON. Required fields: initialEvent, returnEvent, window (value+unit). Optional: relationEventPropertyName, groups, filters, initialFilters, returnFilters, initialFilterRelation, returnFilterRelation." },
     { name: "relation", type: "string", required: false, desc: "Filter relation for top-level interval filters. Supported values: and, or. Default: and." },
-    { name: "time_particle_size", type: "string", required: false, desc: "Time granularity. Allowed values: day, week, month. Defaults to day when omitted." }
+    { name: "time_particle_size", type: "string", required: false, desc: "Time granularity. Allowed values: day, week, month. Defaults to day when omitted." },
+    { name: "authenticated_only", type: "boolean", required: false, desc: "When true, resolve only authenticated assets while building the QP." }
   ],
   risk: "read",
   buildArgs: (ctx) => ({
@@ -1184,7 +1195,8 @@ var buildIntervalAnalysisQp = createMcpCommand({
     timeRange: ctx.json("time_range"),
     interval: ctx.json("interval"),
     relation: optionalString(ctx, "relation"),
-    timeParticleSize: optionalString(ctx, "time_particle_size")
+    timeParticleSize: optionalString(ctx, "time_particle_size"),
+    authenticatedOnly: optionalBoolean(ctx, "authenticated_only")
   })
 });
 
@@ -1195,13 +1207,15 @@ var buildPathAnalysisQp = createMcpCommand({
   flags: [
     { name: "project_id", type: "number", required: true, desc: "Project ID", alias: "p" },
     { name: "time_range", type: "json", required: true, desc: "Required time range JSON for path analysis." },
-    { name: "path", type: "json", required: true, desc: "Path analysis intent JSON. Required fields: sourceEvent, eventNames (array), sessionInterval, sessionUnit. Optional: sourceType (0=forward, 1=backward, default 0)." }
+    { name: "path", type: "json", required: true, desc: "Path analysis intent JSON. Required fields: sourceEvent, eventNames (array), sessionInterval, sessionUnit. Optional: sourceType (0=forward, 1=backward, default 0)." },
+    { name: "authenticated_only", type: "boolean", required: false, desc: "When true, resolve only authenticated assets while building the QP." }
   ],
   risk: "read",
   buildArgs: (ctx) => ({
     projectId: ctx.num("project_id"),
     timeRange: ctx.json("time_range"),
-    path: ctx.json("path")
+    path: ctx.json("path"),
+    authenticatedOnly: optionalBoolean(ctx, "authenticated_only")
   })
 });
 
@@ -1212,13 +1226,15 @@ var buildAttributionAnalysisQp = createMcpCommand({
   flags: [
     { name: "project_id", type: "number", required: true, desc: "Project ID", alias: "p" },
     { name: "time_range", type: "json", required: true, desc: "Required time range JSON for attribution analysis." },
-    { name: "attribution", type: "json", required: true, desc: "Attribution intent JSON. Required fields: targetEvent, targetAggregation, attributionEvents (array), attributionModel (first/last/linear), window (value+unit). Optional: targetProperty, directConversion, filters, relation." }
+    { name: "attribution", type: "json", required: true, desc: "Attribution intent JSON. Required fields: targetEvent, targetAggregation, attributionEvents (array), attributionModel (first/last/linear), window (value+unit). Optional: targetProperty, directConversion, filters, relation." },
+    { name: "authenticated_only", type: "boolean", required: false, desc: "When true, resolve only authenticated assets while building the QP." }
   ],
   risk: "read",
   buildArgs: (ctx) => ({
     projectId: ctx.num("project_id"),
     timeRange: ctx.json("time_range"),
-    attribution: ctx.json("attribution")
+    attribution: ctx.json("attribution"),
+    authenticatedOnly: optionalBoolean(ctx, "authenticated_only")
   })
 });
 
@@ -1229,13 +1245,15 @@ var buildHeatMapAnalysisQp = createMcpCommand({
   flags: [
     { name: "project_id", type: "number", required: true, desc: "Project ID", alias: "p" },
     { name: "time_range", type: "json", required: true, desc: "Required time range JSON for heatmap analysis." },
-    { name: "heat_map", type: "json", required: true, desc: "Heatmap intent JSON. Required fields: hotEvent, hotAggregation, xProp, yProp. Optional: hotProperty, filters, relation." }
+    { name: "heat_map", type: "json", required: true, desc: "Heatmap intent JSON. Required fields: hotEvent, hotAggregation, xProp, yProp. Optional: hotProperty, filters, relation." },
+    { name: "authenticated_only", type: "boolean", required: false, desc: "When true, resolve only authenticated assets while building the QP." }
   ],
   risk: "read",
   buildArgs: (ctx) => ({
     projectId: ctx.num("project_id"),
     timeRange: ctx.json("time_range"),
-    heatMap: ctx.json("heat_map")
+    heatMap: ctx.json("heat_map"),
+    authenticatedOnly: optionalBoolean(ctx, "authenticated_only")
   })
 });
 
@@ -1246,13 +1264,15 @@ var buildRankListAnalysisQp = createMcpCommand({
   flags: [
     { name: "project_id", type: "number", required: true, desc: "Project ID", alias: "p" },
     { name: "time_range", type: "json", required: true, desc: "Required time range JSON for rank list analysis." },
-    { name: "rank_list", type: "json", required: true, desc: "Rank list intent JSON. Required fields: rankDimension (field), rankEvent, rankAggregation. Optional: rankProperty, rankType (rank/dense_rank/row_rank), orderBy (DESC/ASC), filters, relation." }
+    { name: "rank_list", type: "json", required: true, desc: "Rank list intent JSON. Required fields: rankDimension (field), rankEvent, rankAggregation. Optional: rankProperty, rankType (rank/dense_rank/row_rank), orderBy (DESC/ASC), filters, relation." },
+    { name: "authenticated_only", type: "boolean", required: false, desc: "When true, resolve only authenticated assets while building the QP." }
   ],
   risk: "read",
   buildArgs: (ctx) => ({
     projectId: ctx.num("project_id"),
     timeRange: ctx.json("time_range"),
-    rankList: ctx.json("rank_list")
+    rankList: ctx.json("rank_list"),
+    authenticatedOnly: optionalBoolean(ctx, "authenticated_only")
   })
 });
 
@@ -1267,7 +1287,8 @@ var buildDistributionAnalysisQp = createMcpCommand({
     { name: "time_particle_size", type: "string", required: false, desc: "Time granularity. Allowed values: day, week, month, total. Defaults to day when omitted." },
     { name: "groups", type: "json", required: false, desc: "Optional group-by dimensions JSON array." },
     { name: "filters", type: "json", required: false, desc: "Optional global filters JSON array." },
-    { name: "relation", type: "string", required: false, desc: "Optional filter relation. Supported values: and, or. Default: and." }
+    { name: "relation", type: "string", required: false, desc: "Optional filter relation. Supported values: and, or. Default: and." },
+    { name: "authenticated_only", type: "boolean", required: false, desc: "When true, resolve only authenticated assets while building the QP." }
   ],
   risk: "read",
   buildArgs: (ctx) => ({
@@ -1277,7 +1298,8 @@ var buildDistributionAnalysisQp = createMcpCommand({
     timeParticleSize: optionalString(ctx, "time_particle_size"),
     groups: optionalJson(ctx, "groups"),
     filters: optionalJson(ctx, "filters"),
-    relation: optionalString(ctx, "relation")
+    relation: optionalString(ctx, "relation"),
+    authenticatedOnly: optionalBoolean(ctx, "authenticated_only")
   })
 });
 

package/dist/{te-audience-MYDE5WEH.js → te-audience-UXGHUVBB.js}

@@ -2,11 +2,12 @@ import {
   callMcpTool,
   parseMcpResult,
   resolveMcpUrl
-} from "./chunk-DMMEPCST.js";
-import "./chunk-PN3OS34E.js";
+} from "./chunk-5FBLRSMU.js";
+import "./chunk-XE2PI5DS.js";
 import "./chunk-NOO24N7W.js";
-import "./chunk-RSHMZ3LG.js";
-import "./chunk-6W4QOZAL.js";
+import "./chunk-FPE5LGVU.js";
+import "./chunk-U6QPKCN3.js";
+import "./chunk-WPXHCP4A.js";
 
 // src/commands/te-audience/shared.ts
 function createMcpCommand(config) {
@@ -60,13 +61,14 @@ function requiredJsonString(ctx, name) {
 // src/commands/te-audience/cluster/list-clusters.ts
 var listClusters = createMcpCommand({
   command: "+list_clusters",
-  description: "List user cohort/segment cluster metadata with optional query/fields/limit/offset. Query performs fuzzy matching on clusterName, displayName, and remarks. Default returned fields: id, clusterName, displayName, remarks, clusterType, progress, usersNum.",
+  description: "List user cohort/segment cluster metadata with optional authenticated asset filtering, query, fields, limit, and offset. Query performs fuzzy matching on clusterName, displayName, and remarks. Default returned fields: id, clusterName, displayName, remarks, clusterType, progress, usersNum, authenticationStatus.",
   flags: [
     { name: "project_id", type: "number", required: true, desc: "Project ID", alias: "p" },
     { name: "query", type: "string", required: false, desc: "Optional keyword filter. Fuzzy match is applied to clusterName, displayName, and remarks.", alias: "q" },
-    { name: "fields", type: "json", required: false, desc: "Optional fields to return. Supported fields: id, clusterName, displayName, clusterType, progress, usersNum, refreshStatus, remarks. Default fields when omitted: id, clusterName, displayName, remarks, clusterType, progress, usersNum." },
-    { name: "limit", type: "number", required: false, desc: "Optional page size, default 20, max 10000" },
-    { name: "offset", type: "number", required: false, desc: "Optional page offset, default 0" }
+    { name: "fields", type: "json", required: false, desc: "Optional fields to return. Supported fields: id, clusterName, displayName, clusterType, progress, usersNum, refreshStatus, remarks, authenticationStatus. Default fields when omitted: id, clusterName, displayName, remarks, clusterType, progress, usersNum, authenticationStatus." },
+    { name: "limit", type: "number", required: false, desc: "Optional page size, default 20, max 50" },
+    { name: "offset", type: "number", required: false, desc: "Optional page offset, default 0" },
+    { name: "authenticated_only", type: "boolean", required: false, desc: "When true, return only authenticated clusters." }
   ],
   risk: "read",
   buildArgs: (ctx) => ({
@@ -74,7 +76,8 @@ var listClusters = createMcpCommand({
     query: optionalString(ctx, "query"),
     fields: optionalJson(ctx, "fields"),
     limit: optionalNumber(ctx, "limit"),
-    offset: optionalNumber(ctx, "offset")
+    offset: optionalNumber(ctx, "offset"),
+    authenticatedOnly: optionalBoolean(ctx, "authenticated_only")
   })
 });
 
@@ -134,7 +137,8 @@ var buildClusterDefinition = createMcpCommand({
     { name: "conditions", type: "json", required: false, desc: 'For type=condition: main condition group JSON (required). Example: {"filts":[{"conditionType":"event","eventCondition":{...}}],"relation":"and"}' },
     { name: "include_filter", type: "json", required: false, desc: "For type=condition: global include condition group JSON (cluster-type conditions only)." },
     { name: "exclude_filter", type: "json", required: false, desc: "For type=condition: global exclude condition group JSON (cluster-type conditions only)." },
-    { name: "sql", type: "string", required: false, desc: "For type=sql: SQL query returning a single column named #user_id." }
+    { name: "sql", type: "string", required: false, desc: "For type=sql: SQL query returning a single column named #user_id." },
+    { name: "authenticated_only", type: "boolean", required: false, desc: "When true, resolve only authenticated assets while building the definition." }
   ],
   risk: "read",
   buildArgs: (ctx) => ({
@@ -145,7 +149,8 @@ var buildClusterDefinition = createMcpCommand({
       includeFilter: optionalJson(ctx, "include_filter"),
       excludeFilter: optionalJson(ctx, "exclude_filter"),
       sql: optionalString(ctx, "sql")
-    }
+    },
+    authenticatedOnly: optionalBoolean(ctx, "authenticated_only")
   })
 });
 
@@ -298,13 +303,14 @@ var cluster_default = commands;
 // src/commands/te-audience/tag/list-tags.ts
 var listTags = createMcpCommand({
   command: "+list_tags",
-  description: "List tag metadata with optional query/fields/limit/offset. Query performs fuzzy matching on clusterName, displayName, and remarks. Default returned fields: id, clusterName, displayName, remarks, clusterType, subConditionTabType, progress, usersNum.",
+  description: "List tag metadata with optional authenticated asset filtering, query, fields, limit, and offset. Query performs fuzzy matching on clusterName, displayName, and remarks. Default returned fields: id, clusterName, displayName, remarks, clusterType, subConditionTabType, progress, usersNum, authenticationStatus.",
   flags: [
     { name: "project_id", type: "number", required: true, desc: "Project ID", alias: "p" },
     { name: "query", type: "string", required: false, desc: "Optional keyword filter. Fuzzy match is applied to clusterName, displayName, and remarks.", alias: "q" },
-    { name: "fields", type: "json", required: false, desc: "Optional fields to return. Supported fields: id, clusterName, displayName, clusterType, subConditionTabType, progress, usersNum, remarks. Default fields when omitted: id, clusterName, displayName, remarks, clusterType, subConditionTabType, progress, usersNum." },
-    { name: "limit", type: "number", required: false, desc: "Optional page size, default 20, max 10000" },
-    { name: "offset", type: "number", required: false, desc: "Optional page offset, default 0" }
+    { name: "fields", type: "json", required: false, desc: "Optional fields to return. Supported fields: id, clusterName, displayName, clusterType, subConditionTabType, progress, usersNum, remarks, authenticationStatus. Default fields when omitted: id, clusterName, displayName, remarks, clusterType, subConditionTabType, progress, usersNum, authenticationStatus." },
+    { name: "limit", type: "number", required: false, desc: "Optional page size, default 20, max 50" },
+    { name: "offset", type: "number", required: false, desc: "Optional page offset, default 0" },
+    { name: "authenticated_only", type: "boolean", required: false, desc: "When true, return only authenticated tags." }
   ],
   risk: "read",
   buildArgs: (ctx) => ({
@@ -312,7 +318,8 @@ var listTags = createMcpCommand({
     query: optionalString(ctx, "query"),
     fields: optionalJson(ctx, "fields"),
     limit: optionalNumber(ctx, "limit"),
-    offset: optionalNumber(ctx, "offset")
+    offset: optionalNumber(ctx, "offset"),
+    authenticatedOnly: optionalBoolean(ctx, "authenticated_only")
   })
 });
 
@@ -374,7 +381,8 @@ var buildTagDefinition = createMcpCommand({
     { name: "condition_values", type: "json", required: false, desc: "For type=condition: list of tag value definitions JSON array. Each item defines a segment label and its conditions." },
     { name: "metric", type: "json", required: false, desc: "For type=metric: metric definition JSON. Fields: eventName, analysis, quota (property name), recentDay/startTime/endTime." },
     { name: "first_last", type: "json", required: false, desc: "For type=first_last: first/last occurrence definition JSON. Fields: eventName, firstEvent (true=first occurrence, false=last occurrence), calcPropType, property, recentDay/startTime/endTime." },
-    { name: "sql", type: "string", required: false, desc: "For type=sql: SQL query returning two columns: #user_id and the tag value." }
+    { name: "sql", type: "string", required: false, desc: "For type=sql: SQL query returning two columns: #user_id and the tag value." },
+    { name: "authenticated_only", type: "boolean", required: false, desc: "When true, resolve only authenticated assets while building the definition." }
   ],
   risk: "read",
   buildArgs: (ctx) => ({
@@ -385,7 +393,8 @@ var buildTagDefinition = createMcpCommand({
       metric: optionalJson(ctx, "metric"),
       firstLast: optionalJson(ctx, "first_last"),
       sql: optionalString(ctx, "sql")
-    }
+    },
+    authenticatedOnly: optionalBoolean(ctx, "authenticated_only")
   })
 });
 

package/dist/{te-common-WNCZB7R7.js → te-common-7XXH73MF.js}

@@ -2,11 +2,12 @@ import {
   callMcpTool,
   parseMcpResult,
   resolveMcpUrl
-} from "./chunk-DMMEPCST.js";
-import "./chunk-PN3OS34E.js";
+} from "./chunk-5FBLRSMU.js";
+import "./chunk-XE2PI5DS.js";
 import "./chunk-NOO24N7W.js";
-import "./chunk-RSHMZ3LG.js";
-import "./chunk-6W4QOZAL.js";
+import "./chunk-FPE5LGVU.js";
+import "./chunk-U6QPKCN3.js";
+import "./chunk-WPXHCP4A.js";
 
 // src/commands/te-common/shared.ts
 function createMcpCommand(config) {

package/dist/{te-community-JEEFXPB3.js → te-community-QKE67HR2.js}

@@ -3,11 +3,12 @@ import {
   parseMcpResult,
   registerMcpMappings,
   resolveMcpUrl
-} from "./chunk-DMMEPCST.js";
-import "./chunk-PN3OS34E.js";
+} from "./chunk-5FBLRSMU.js";
+import "./chunk-XE2PI5DS.js";
 import "./chunk-NOO24N7W.js";
-import "./chunk-RSHMZ3LG.js";
-import "./chunk-6W4QOZAL.js";
+import "./chunk-FPE5LGVU.js";
+import "./chunk-U6QPKCN3.js";
+import "./chunk-WPXHCP4A.js";
 
 // src/commands/te-community/get_channel_info.ts
 var getChannelInfo = {

package/dist/{te-dataops-ZTS7XMXM.js → te-dataops-6W7NNYST.js}

@@ -1,15 +1,15 @@
 import {
   printError
-} from "./chunk-2DUEAXV3.js";
+} from "./chunk-YACCPUNQ.js";
 import {
   clearToken,
   getToken,
   resolveHost
-} from "./chunk-RSHMZ3LG.js";
+} from "./chunk-U6QPKCN3.js";
 import {
   logger,
   safeJsonParse
-} from "./chunk-6W4QOZAL.js";
+} from "./chunk-WPXHCP4A.js";
 
 // src/commands/te-dataops/shared.ts
 var TOOL_API_MAP = {
@@ -103,8 +103,7 @@ async function dataopsRequest(ctx, method, path2, params = {}, body, retry = tru
   const url = buildUrl(host, path2, params);
   const headers = {
     Authorization: `bearer ${token}`,
-    "Content-Type": "application/json",
-    "X-Source": "ae-cli"
+    "Content-Type": "application/json"
   };
   const options = { method, headers };
   if (method !== "GET") {

package/dist/{te-engage-4XHCTS6I.js → te-engage-NCFAQFX3.js}

@@ -3,11 +3,12 @@ import {
   parseMcpResult,
   registerMcpMappings,
   resolveMcpUrl
-} from "./chunk-DMMEPCST.js";
-import "./chunk-PN3OS34E.js";
+} from "./chunk-5FBLRSMU.js";
+import "./chunk-XE2PI5DS.js";
 import "./chunk-NOO24N7W.js";
-import "./chunk-RSHMZ3LG.js";
-import "./chunk-6W4QOZAL.js";
+import "./chunk-FPE5LGVU.js";
+import "./chunk-U6QPKCN3.js";
+import "./chunk-WPXHCP4A.js";
 
 // src/commands/te-engage/utils.ts
 function buildMcpDryRun(ctx, serviceName46, toolName46, args) {

package/dist/{te-kb-OWM3RQRH.js → te-kb-K5BQYUCM.js}

@@ -1,12 +1,11 @@
 import {
   kbApi,
   kbUpload
-} from "./chunk-5OC7CYCG.js";
-import "./chunk-DMMEPCST.js";
-import "./chunk-PN3OS34E.js";
+} from "./chunk-2W7HULUD.js";
 import "./chunk-NOO24N7W.js";
-import "./chunk-RSHMZ3LG.js";
-import "./chunk-6W4QOZAL.js";
+import "./chunk-FPE5LGVU.js";
+import "./chunk-U6QPKCN3.js";
+import "./chunk-WPXHCP4A.js";
 
 // src/commands/te-kb/query.ts
 var API_PATH = "/agent/api/external/knowledge-bases/query";

package/dist/{te-meta-JVO4QJBH.js → te-meta-LJZBOSMO.js}

@@ -2,11 +2,12 @@ import {
   callMcpTool,
   parseMcpResult,
   resolveMcpUrl
-} from "./chunk-DMMEPCST.js";
-import "./chunk-PN3OS34E.js";
+} from "./chunk-5FBLRSMU.js";
+import "./chunk-XE2PI5DS.js";
 import "./chunk-NOO24N7W.js";
-import "./chunk-RSHMZ3LG.js";
-import "./chunk-6W4QOZAL.js";
+import "./chunk-FPE5LGVU.js";
+import "./chunk-U6QPKCN3.js";
+import "./chunk-WPXHCP4A.js";
 
 // src/commands/te-meta/shared.ts
 function createMcpCommand(config) {
@@ -60,13 +61,14 @@ function requiredJsonString(ctx, name) {
 // src/commands/te-meta/meta/list-events.ts
 var listEvents = createMcpCommand({
   command: "+list_events",
-  description: "List events in the project. Use for explicit metadata inspection, not as a pre-step for event/retention/funnel/prop_analysis ad-hoc builders; the builders resolve event names internally. Query performs fuzzy matching on eventName, eventDesc, and remark. Supports fields/limit/offset payload governance. Default returned fields: eventId, eventName, eventDesc, remark.",
+  description: "List events in the project. Use for explicit metadata inspection, not as a pre-step for event/retention/funnel/prop_analysis ad-hoc builders; the builders resolve event names internally. Query performs fuzzy matching on eventName, eventDesc, and remark. Supports authenticated asset filtering plus fields/limit/offset payload governance. Default returned fields: eventId, eventName, eventDesc, remark, authenticationStatus.",
   flags: [
     { name: "project_id", type: "number", required: true, desc: "Project ID", alias: "p" },
     { name: "query", type: "string", required: false, desc: "Optional keyword filter. Fuzzy match is applied to eventName, eventDesc, and remark; if omitted, all events are returned.", alias: "q" },
-    { name: "fields", type: "json", required: false, desc: "Optional fields to return. Supported fields: eventId, eventName, eventDesc, remark, eventTag. Default fields when omitted: eventId, eventName, eventDesc, remark.", alias: "f" },
-    { name: "limit", type: "number", required: false, desc: "Optional page size. Default: 20, maximum: 10000.", alias: "l" },
-    { name: "offset", type: "number", required: false, desc: "Optional page offset. Default: 0.", alias: "o" }
+    { name: "fields", type: "json", required: false, desc: "Optional fields to return. Supported fields: eventId, eventName, eventDesc, remark, eventTag, authenticationStatus. Default fields when omitted: eventId, eventName, eventDesc, remark, authenticationStatus.", alias: "f" },
+    { name: "limit", type: "number", required: false, desc: "Optional page size. Default: 20, maximum: 50.", alias: "l" },
+    { name: "offset", type: "number", required: false, desc: "Optional page offset. Default: 0.", alias: "o" },
+    { name: "authenticated_only", type: "boolean", required: false, desc: "When true, return only authenticated events." }
   ],
   risk: "read",
   buildArgs: (ctx) => ({
@@ -74,22 +76,24 @@ var listEvents = createMcpCommand({
     query: optionalString(ctx, "query"),
     fields: optionalJson(ctx, "fields"),
     limit: optionalNumber(ctx, "limit"),
-    offset: optionalNumber(ctx, "offset")
+    offset: optionalNumber(ctx, "offset"),
+    authenticatedOnly: optionalBoolean(ctx, "authenticated_only")
   })
 });
 
 // src/commands/te-meta/meta/list-properties.ts
 var listProperties = createMcpCommand({
   command: "+list_properties",
-  description: "List properties in the project. Use for explicit metadata inspection, not as a pre-step for event/retention/funnel/prop_analysis ad-hoc builders; the builders resolve property names internally. Query performs fuzzy matching on propName, propDesc, and remark. Supports fields/limit/offset payload governance. Default returned fields: propId, propName, propDesc, remark, selectType, tableType.",
+  description: "List properties in the project. Use for explicit metadata inspection, not as a pre-step for event/retention/funnel/prop_analysis ad-hoc builders; the builders resolve property names internally. Query performs fuzzy matching on propName, propDesc, and remark. Supports authenticated asset filtering plus fields/limit/offset payload governance. Default returned fields: propId, propName, propDesc, remark, selectType, tableType, authenticationStatus.",
   flags: [
     { name: "project_id", type: "number", required: true, desc: "Project ID", alias: "p" },
     { name: "scope", type: "string", required: false, desc: "Property scope: event or user" },
     { name: "event_name", type: "string", required: false, desc: "Optional event name filter" },
     { name: "query", type: "string", required: false, desc: "Optional keyword filter. Fuzzy match is applied to propName, propDesc, and remark; if omitted, all accessible properties are returned.", alias: "q" },
-    { name: "fields", type: "json", required: false, desc: "Optional fields to return. Supported fields: propId, propName, propDesc, remark, selectType, tableType, subTableType. Default fields when omitted: propId, propName, propDesc, remark, selectType, tableType.", alias: "f" },
-    { name: "limit", type: "number", required: false, desc: "Optional page size. Default: 20, maximum: 10000.", alias: "l" },
-    { name: "offset", type: "number", required: false, desc: "Optional page offset. Default: 0.", alias: "o" }
+    { name: "fields", type: "json", required: false, desc: "Optional fields to return. Supported fields: propId, propName, propDesc, remark, selectType, tableType, subTableType, authenticationStatus. Default fields when omitted: propId, propName, propDesc, remark, selectType, tableType, authenticationStatus.", alias: "f" },
+    { name: "limit", type: "number", required: false, desc: "Optional page size. Default: 20, maximum: 50.", alias: "l" },
+    { name: "offset", type: "number", required: false, desc: "Optional page offset. Default: 0.", alias: "o" },
+    { name: "authenticated_only", type: "boolean", required: false, desc: "When true, return only authenticated properties." }
   ],
   risk: "read",
   buildArgs: (ctx) => ({
@@ -99,7 +103,8 @@ var listProperties = createMcpCommand({
     query: optionalString(ctx, "query"),
     fields: optionalJson(ctx, "fields"),
     limit: optionalNumber(ctx, "limit"),
-    offset: optionalNumber(ctx, "offset")
+    offset: optionalNumber(ctx, "offset"),
+    authenticatedOnly: optionalBoolean(ctx, "authenticated_only")
   })
 });
 
@@ -200,13 +205,14 @@ var createVirtualProperty = createMcpCommand({
 // src/commands/te-meta/meta/list-metrics.ts
 var listMetrics = createMcpCommand({
   command: "+list_metrics",
-  description: "List metric metadata in the project. Use for metric metadata inspection/management, not as a pre-step for event/retention/funnel/prop_analysis ad-hoc builders. For event saved metric queries, pass the metric name directly to +build_event_analysis_qp in metrics[].event. Query performs fuzzy matching on metricName, metricDesc, and metricRemark. Supports fields/limit/offset pagination. Default returned fields: metricId, metricName, metricDesc, metricRemark, metricMode.",
+  description: "List metric metadata in the project. Use for metric metadata inspection/management, not as a pre-step for event/retention/funnel/prop_analysis ad-hoc builders. For event saved metric queries, pass the metric name directly to +build_event_analysis_qp in metrics[].event. Query performs fuzzy matching on metricName, metricDesc, and metricRemark. Supports authenticated asset filtering plus fields/limit/offset pagination. Default returned fields: metricId, metricName, metricDesc, metricRemark, metricMode, authenticationStatus.",
   flags: [
     { name: "project_id", type: "number", required: true, alias: "p", desc: "Project ID" },
     { name: "query", type: "string", required: false, alias: "q", desc: "Optional keyword filter. Fuzzy match on metricName, metricDesc, metricRemark." },
-    { name: "fields", type: "json", required: false, desc: "Optional fields to return. Supported: metricId, metricName, metricDesc, metricRemark, metricMode, openId, creator, creatorLoginName, updateOpenId, updateCreator, updateLoginName, createTime, updateTime. Default fields when omitted: metricId, metricName, metricDesc, metricRemark, metricMode." },
-    { name: "limit", type: "number", required: false, desc: "Optional limit. Default: 20, maximum: 10000." },
-    { name: "offset", type: "number", required: false, desc: "Optional offset. Default: 0." }
+    { name: "fields", type: "json", required: false, desc: "Optional fields to return. Supported: metricId, metricName, metricDesc, metricRemark, metricMode, authenticationStatus, openId, creator, creatorLoginName, updateOpenId, updateCreator, updateLoginName, createTime, updateTime. Default fields when omitted: metricId, metricName, metricDesc, metricRemark, metricMode, authenticationStatus." },
+    { name: "limit", type: "number", required: false, desc: "Optional limit. Default: 20, maximum: 50." },
+    { name: "offset", type: "number", required: false, desc: "Optional offset. Default: 0." },
+    { name: "authenticated_only", type: "boolean", required: false, desc: "When true, return only authenticated metrics." }
   ],
   risk: "read",
   mcpService: "te_analysis_extend",
@@ -215,7 +221,8 @@ var listMetrics = createMcpCommand({
     query: optionalString(ctx, "query"),
     fields: optionalJson(ctx, "fields"),
     limit: optionalNumber(ctx, "limit"),
-    offset: optionalNumber(ctx, "offset")
+    offset: optionalNumber(ctx, "offset"),
+    authenticatedOnly: optionalBoolean(ctx, "authenticated_only")
   })
 });
 

package/dist/{te-team-YY24VORI.js → te-team-DHK5R7MV.js}

@@ -1,16 +1,15 @@
 import {
   getAuthHeaders,
   kbApi
-} from "./chunk-5OC7CYCG.js";
+} from "./chunk-2W7HULUD.js";
 import {
   printError,
   printOutput
-} from "./chunk-2DUEAXV3.js";
-import "./chunk-DMMEPCST.js";
-import "./chunk-PN3OS34E.js";
+} from "./chunk-YACCPUNQ.js";
 import "./chunk-NOO24N7W.js";
-import "./chunk-RSHMZ3LG.js";
-import "./chunk-6W4QOZAL.js";
+import "./chunk-FPE5LGVU.js";
+import "./chunk-U6QPKCN3.js";
+import "./chunk-WPXHCP4A.js";
 
 // src/commands/te-team/shared.ts
 var API_PREFIX = process.env.AE_API_PREFIX ?? "/agent";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@thinkingai/ae-cli",
-  "version": "6.0.20",
+  "version": "6.0.22",
   "description": "CLI tool for ThinkingAI (AE) analytics platform",
   "type": "module",
   "bin": {
@@ -22,13 +22,14 @@
     "verify:analysis-tools": "tsx scripts/verify-te-analysis-tools.mjs",
     "verify:analysis-cluster-routing": "node scripts/verify-analysis-cluster-routing.mjs",
     "verify:multi-cluster-mode": "node test/multi-cluster-mode.test.mjs",
+    "verify:metadata-capability": "node test/metadata-capability-commands.test.mjs",
     "verify:analysis-builder-dry-run": "node scripts/verify-te-analysis-builder-dry-run.mjs",
     "verify:analysis-audience-tools": "node scripts/verify-te-audience-tools.mjs",
     "verify:analysis-meta-tools": "node scripts/verify-te-meta-tools.mjs",
     "verify:analysis-common-tools": "node scripts/verify-te-common-tools.mjs",
     "verify:team-tools": "node scripts/verify-te-team-tools.mjs",
     "verify:agent-tools": "node scripts/verify-agent-tools.mjs",
-    "verify:tracking-tools": "node test/tracking-client.test.mjs && node test/tracking-commands.test.mjs",
+    "verify:tracking-tools": "node test/tracking-client.test.mjs && node test/tracking-skill-flow.test.mjs && node test/tracking-commands.test.mjs",
     "verify:self-check-overlay": "node test/self-check-overlay.test.mjs",
     "verify:update-check": "npx tsx test/update-check.test.mjs",
     "self-check": "node self-check/scan.mjs",

package/skills/ae-analysis/SKILL.md

@@ -41,10 +41,10 @@ Use `ae-analysis` for all AE analysis-side work below:
 
 - Domain `analysis`: alerts, reports/dashboards, ad-hoc model analysis, drilldown, entity/event details, schema helpers.
 - Domain `analysis_audience`: clusters/tags and definition schemas.
-- Domain `analysis_meta`: metadata governance, metrics, virtual metadata, project config, tracking plans, mark times, entity catalog.
+- Domain `analysis_meta`: metadata governance, metrics, virtual metadata, project config, tracking plans, mark times, entity catalog (MCP). For **single** super-event / super-property **detail** on the capability gateway, switch to **`ae-metadata`** skill (`metadata event get`, `metadata property get`).
 - Domain `analysis_common`: project listing and post-write resource links.
 
-If user intent is Engage/DataOps/Community, switch to `ae-engage` / `ae-dataops` / `ae-community`.
+If user intent is Engage/DataOps/Community/metadata gateway detail, switch to `ae-engage` / `ae-dataops` / `ae-community` / **`ae-metadata`**.
 
 ## Command Format
 
@@ -168,6 +168,13 @@ Builder-supported model routing is:
 
 Do not insert metadata/schema calls between steps 2 and 3 for builder-supported models. Specifically, do not call `get_analysis_query_schema`, `list_events`, `list_properties`, `list_metrics`, `get_metric`, or `get_report_definition` to prepare the builder payload. The builder resolves event/property/metric metadata internally and returns `need_clarification` when it cannot.
 
+Authenticated asset scope:
+
+- Use `--authenticated_only true` on metadata list commands (`+list_events`, `+list_properties`, `+list_metrics`, `+list_clusters`, `+list_tags`) when the user explicitly asks to see only authenticated assets.
+- Use `--authenticated_only true` on QP builders and cluster/tag definition builders when the generated QP/definition should resolve only authenticated assets.
+- Do not pass `authenticated_only` or `authenticatedOnly` to `+query_adhoc`; the filter takes effect during metadata resolution and QP/definition construction, not query execution.
+- List responses include `authenticationStatus` by default (`1` authenticated, `0` unauthenticated).
+
 Event metric shortcut:
 
 - If the user asks to query a saved/business metric through event analysis, pass the metric name/display name/remark directly as an event metric target: `--metrics '[{"event":"<metric name>"}]'`.

package/skills/ae-analysis/references/build_attribution_analysis_qp.md

@@ -26,6 +26,7 @@ ae-cli analysis +build_attribution_analysis_qp --project_id <project_id> --time_
 | Parameter | Required | Description |
 |---|---|---|
 | `--project_id` / `-p` | Yes | Project ID |
+| `--authenticated_only` | No | Resolve only authenticated assets while building the QP. Do not pass this flag to `+query_adhoc`. |
 | `--time_range` | Yes | Time range JSON |
 | `--attribution` | Yes | Attribution intent JSON |
 
@@ -53,6 +54,7 @@ ae-cli analysis +build_attribution_analysis_qp --project_id 3137 --time_range '{
 ```
 
 ## Decision Rules
+- Use `--authenticated_only true` only when the user explicitly wants authenticated assets; do not add this flag to `+query_adhoc`.
 - After successful build (`status=generated`), call `+query_adhoc --model_type attribution --qp '<response.qp>'`.
 - If non-generated status, stop and ask user to clarify.