@thinkingai/ae-cli 6.0.29 → 6.0.31

package/dist/{te-team-RG75PR5D.js → te-team-OKCOX7OE.js}

@@ -5,7 +5,7 @@ import {
 import {
   printError,
   printOutput
-} from "./chunk-ZAOL36CG.js";
+} from "./chunk-TNW2CI4W.js";
 import "./chunk-NOO24N7W.js";
 import "./chunk-2NDGFQHW.js";
 import "./chunk-AJTH7LT3.js";
@@ -428,7 +428,7 @@ var watchRun = {
       let buf = "";
       let evtName = "";
       let evtData = "";
-      const flush = () => {
+      const flush = async () => {
         if (!evtName || !evtData) {
           evtName = evtData = "";
           return;
@@ -463,13 +463,13 @@ var watchRun = {
             if (!quiet) process.stderr.write(`[status] ${status}
 `);
             if (status === "waiting_user") {
-              printOutput(payload, "json");
+              await printOutput(payload, "json");
               process.exit(2);
             }
             break;
           }
           case "final": {
-            printOutput(payload, "json");
+            await printOutput(payload, "json");
             process.exit(SUCCESS_STATUSES.has(payload.status) ? 0 : 1);
             break;
           }
@@ -492,7 +492,7 @@ var watchRun = {
           } else if (line.startsWith("data:")) {
             evtData = line.slice(5).trim();
           } else if (line === "") {
-            flush();
+            await flush();
           }
         }
       }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@thinkingai/ae-cli",
-  "version": "6.0.29",
+  "version": "6.0.31",
   "description": "CLI tool for ThinkingAI (AE) analytics platform",
   "type": "module",
   "bin": {
@@ -18,14 +18,20 @@
   "scripts": {
     "dev": "tsx src/index.ts",
     "build": "tsup src/index.ts --format esm --outDir dist && node scripts/copy-tracking-assets.mjs",
+    "generate:analysis-skill": "tsx scripts/generate-analysis-skill-index.mts",
     "verify:config": "node test/config-commands.test.mjs",
+    "verify:jq-output": "npx tsx test/jq-output.test.mjs",
     "verify:analysis-tools": "tsx scripts/verify-te-analysis-tools.mjs",
-    "verify:analysis-contract-regressions": "node test/analysis-contract-regressions.test.mjs",
+    "verify:analysis-skill": "tsx scripts/generate-analysis-skill-index.mts --check",
+    "verify:analysis-four-modules": "tsx tests/analysis-report-capability-command.test.ts && tsx tests/analysis-export-flow-command.test.ts && tsx tests/analysis-dashboard-audience-contract.test.ts",
+    "verify:analysis-contract-regressions": "tsx test/analysis-contract-regressions.test.mjs && tsx tests/analysis-sql-special-identifiers.test.ts",
+    "verify:analysis-agent-contract": "tsx tests/analysis-agent-skill-contract.test.ts",
+    "verify:output-contract": "tsx tests/output-contract.test.ts",
     "verify:analysis-cluster-routing": "node scripts/verify-analysis-cluster-routing.mjs",
     "verify:multi-cluster-mode": "node test/multi-cluster-mode.test.mjs",
-    "verify:metadata-capability": "node test/metadata-capability-commands.test.mjs",
-    "verify:analysis-builder-dry-run": "node scripts/verify-te-analysis-builder-dry-run.mjs",
-    "verify:analysis-audience-tools": "node scripts/verify-te-audience-tools.mjs",
+    "verify:metadata-capability": "npx tsx test/metadata-capability-commands.test.mjs",
+    "verify:engage-capability": "tsx test/engage/engage-capability-command.test.mjs && node test/engage/engage-skill-capability.test.mjs",
+    "verify:retired-analysis-commands": "node --test test/retired-analysis-commands.test.mjs",
     "verify:analysis-meta-tools": "node scripts/verify-te-meta-tools.mjs",
     "verify:analysis-common-tools": "node scripts/verify-te-common-tools.mjs",
     "verify:team-tools": "node scripts/verify-te-team-tools.mjs",
@@ -34,9 +40,10 @@
     "verify:self-check-overlay": "node test/self-check-overlay.test.mjs",
     "verify:update-check": "npx tsx test/update-check.test.mjs",
     "self-check": "node self-check/scan.mjs",
+    "check:release": "node self-check/release-gate.mjs",
     "sync:skills-to-db": "node scripts/sync-skills-to-db.mjs",
     "check:agents-docs": "node scripts/check-agents-docs-sync.mjs",
-    "prepublishOnly": "npm run build",
+    "prepublishOnly": "npm run check:release && npm run build",
     "start": "node dist/index.js",
     "test": "npx tsx src/index.ts --help"
   },
@@ -52,13 +59,14 @@
   "author": "ThinkingData",
   "license": "MIT",
   "engines": {
-    "node": ">=18.0.0"
+    "node": ">=20.0.0"
   },
   "dependencies": {
     "@types/json-bigint": "^1.0.4",
     "cli-table3": "^0.6.5",
     "commander": "^12.1.0",
     "exceljs": "^4.4.0",
+    "jq-wasm": "^3.0.0-jq-1.8.2",
     "json-bigint": "^1.0.0",
     "turndown": "^7.2.4",
     "undici": "^6.19.0",

package/skills/ae-agent/SKILL.md

@@ -192,12 +192,11 @@ ae-cli agent +create-automation \
   --schedule-kind daily \
   --time 09:00 \
   --message "Summarize yesterday's AI news" \
-  --agent-id <agent-id> \
-  --yes
+  --agent-id <agent-id>
 
 # 3. (Optional) Pause or edit later
 ae-cli agent +list-automations --status active
-ae-cli agent +update-automation --id <automation-id> --enabled false --yes
+ae-cli agent +update-automation --id <automation-id> --enabled false
 ```
 
 ### Add an MCP server with market meta
@@ -209,8 +208,7 @@ ae-cli agent +add-mcp \
   --transport http \
   --headers '{"Authorization":"Bearer token"}' \
   --category dev_tool \
-  --icon-emoji robot \
-  --yes
+  --icon-emoji robot
 ```
 
 ### Publish a personal Skill to the company (root review)
@@ -224,16 +222,16 @@ ae-cli agent +submit-skill --id <skill-cuid> --description "Code reviewer for th
 
 # 3. Root reviews and approves
 ae-cli agent +list-skill-submissions --status pending
-ae-cli agent +approve-skill --id <submission-cuid> --yes
+ae-cli agent +approve-skill --id <submission-cuid>
 ```
 
 ### Share a Skill peer-to-peer
 
 ```bash
-ae-cli agent +share-skill --id <skill-cuid> --to-user-id <user-id> --yes
+ae-cli agent +share-skill --id <skill-cuid> --to-user-id <user-id>
 # Recipient accepts:
 ae-cli agent +list-skill-shares --direction received --status pending
-ae-cli agent +accept-skill-share --id <share-cuid> --yes
+ae-cli agent +accept-skill-share --id <share-cuid>
 ```
 
 ## Quick Verification

package/skills/ae-agent/references/accept-skill-share.md

@@ -12,12 +12,12 @@ Domain: **Skill Share (peer-to-peer) / write**
 
 ## Mandatory Rules (MUST)
 - `--id` is required and must reference a **share** record (CUID), not a Skill ID. Obtain it via `+list-skill-shares --direction received` — do not guess.
-- Write operation: keep the confirmation prompt unless `--yes` is explicitly requested.
+- This is an ordinary `write` operation and does not require CLI confirmation.
 - Only `pending` shares can be accepted.
 
 ## Command
 ```bash
-ae-cli agent +accept-skill-share --id <share-cuid> --yes
+ae-cli agent +accept-skill-share --id <share-cuid>
 ae-cli agent +accept-skill-share --dry-run --id <share-cuid>
 ```
 

package/skills/ae-agent/references/add-attachment.md

@@ -16,15 +16,15 @@ Domain: **Attachments / write**
 - Each file must exist on disk; non-existent paths raise an error.
 - Attachment upload supports files up to 50MB each, with a 1GB user quota.
 - Batch uploads support partial success — individual file failures don't affect others.
-- Write operation: keep the confirmation prompt unless `--yes` is explicitly requested.
+- This is an ordinary `write` operation and does not require CLI confirmation.
 
 ## Command
 ```bash
 # Single file
-ae-cli agent +add-attachment --file ./output/report.png --yes
+ae-cli agent +add-attachment --file ./output/report.png
 
 # Multiple files
-ae-cli agent +add-attachment --files '["./report.png", "./data.csv", "./chart.pdf"]' --yes
+ae-cli agent +add-attachment --files '["./report.png", "./data.csv", "./chart.pdf"]'
 
 # Dry-run to inspect the request before executing
 ae-cli agent +add-attachment --dry-run --file ./output/report.png

package/skills/ae-agent/references/add-mcp.md

@@ -19,7 +19,7 @@ Domain: **MCP Servers / write**
 - `--category` must be one of the market category keys (see below) when provided.
 - **MCP creation does NOT validate server connectivity** — an unreachable URL is accepted at create time and only fails when the agent calls the MCP at runtime. Double-check the URL.
 - `--scope` controls target scope: `personal` (default) or `company`. Company scope requires root/agent_admin.
-- Write operation: keep the confirmation prompt unless `--yes` is explicitly requested.
+- This is an ordinary `write` operation and does not require CLI confirmation.
 
 ## Market Category Keys
 `ae_preset | dev_tool | search_tool | data_query | content_gen | enterprise | life | automation | other`
@@ -39,8 +39,7 @@ ae-cli agent +add-mcp \
   --transport http \
   --headers '{"Authorization":"Bearer token"}' \
   --category dev_tool \
-  --icon-emoji robot \
-  --yes
+  --icon-emoji robot
 
 # Dry-run to inspect the request before executing
 ae-cli agent +add-mcp --dry-run --name my-mcp --url "https://mcp.example.com/mcp"

package/skills/ae-agent/references/add-model.md

@@ -13,7 +13,7 @@ Domain: **Models / write**
 - `--model-id`, `--name`, and `--base-url` are required.
 - `--base-url` must be a valid URL.
 - `--scope` controls target scope: `personal` (default) or `company`. Company scope requires root/agent_admin; system models are read-only.
-- Write operation: keep the confirmation prompt unless `--yes` is explicitly requested.
+- This is an ordinary `write` operation and does not require CLI confirmation.
 
 ## Command
 ```bash
@@ -29,8 +29,7 @@ ae-cli agent +add-model \
   --name "Claude Sonnet" \
   --base-url "https://api.anthropic.com/v1" \
   --provider anthropic \
-  --context-length 200000 \
-  --yes
+  --context-length 200000
 
 # Dry-run to inspect the request before executing
 ae-cli agent +add-model --dry-run --model-id gpt-4o --name "GPT-4o" --base-url "https://api.openai.com/v1"
@@ -41,8 +40,7 @@ ae-cli agent +add-model \
   --name "GPT-4o (company)" \
   --base-url "https://api.openai.com/v1" \
   --provider openai \
-  --scope company \
-  --yes
+  --scope company
 ```
 
 ## Parameters

package/skills/ae-agent/references/add-skill.md

@@ -16,7 +16,7 @@ Domain: **Skills / write**
 - `--instructions` supports `@-` to read from stdin (useful for piping long instruction text).
 - `--category` must be one of the market category keys (see below) when provided.
 - `--scope` controls target scope: `personal` (default) or `company`. Company scope requires root/agent_admin and bypasses the submit-approve flow (directly creates a company Skill, consistent with `+upload-skill --scope company`).
-- Write operation: keep the confirmation prompt unless `--yes` is explicitly requested.
+- This is an ordinary `write` operation and does not require CLI confirmation.
 
 ## Market Category Keys
 `ae_preset | dev_tool | search_tool | data_query | content_gen | enterprise | life | automation | other`
@@ -39,8 +39,7 @@ ae-cli agent +add-skill \
   --description "Reviews code for best practices" \
   --instructions "You are a code reviewer..." \
   --category dev_tool \
-  --icon-emoji robot \
-  --yes
+  --icon-emoji robot
 
 # Dry-run to inspect the request before executing
 ae-cli agent +add-skill --dry-run --name helper --description "Helper" --instructions "x"

package/skills/ae-agent/references/approve-skill.md

@@ -13,12 +13,12 @@ Domain: **Skill Approval (company-scope publish) / write**
 ## Mandatory Rules (MUST)
 - `--id` is required and must reference a **submission** record (CUID), not a Skill ID. Obtain it via `+list-skill-submissions` — do not guess.
 - **Root only** — non-root users cannot approve submissions.
-- Write operation: keep the confirmation prompt unless `--yes` is explicitly requested.
+- This is an ordinary `write` operation and does not require CLI confirmation.
 - Only `pending` submissions can be approved.
 
 ## Command
 ```bash
-ae-cli agent +approve-skill --id <submission-cuid> --yes
+ae-cli agent +approve-skill --id <submission-cuid>
 ae-cli agent +approve-skill --dry-run --id <submission-cuid>
 ```
 

package/skills/ae-agent/references/auto-provision-mcp-credentials.md

@@ -13,16 +13,16 @@ Domain: **MCP Credentials / write**
 ## Mandatory Rules (MUST)
 - `--access-token` is optional; when omitted, the current session token is used automatically (via `ctx.token()`).
 - The access token must be valid — an invalid/expired token causes the MCP token generation to fail (reported via `mcpTokenFailed: true` in the response).
-- Write operation: keep the confirmation prompt unless `--yes` is explicitly requested.
+- This is an ordinary `write` operation and does not require CLI confirmation.
 - This is a bulk operation — it upserts credentials for ALL system MCP servers visible to the current user.
 
 ## Command
 ```bash
 # Auto-provision using the current session token (recommended)
-ae-cli agent +auto-provision-mcp-credentials --yes
+ae-cli agent +auto-provision-mcp-credentials
 
 # Explicitly pass an access token
-ae-cli agent +auto-provision-mcp-credentials --access-token "eyJhbGci..." --yes
+ae-cli agent +auto-provision-mcp-credentials --access-token "eyJhbGci..."
 
 # Dry-run to inspect the request
 ae-cli agent +auto-provision-mcp-credentials --dry-run

package/skills/ae-agent/references/cancel-skill-submission.md

@@ -13,11 +13,11 @@ Domain: **Skill Approval (company-scope publish) / write**
 ## Mandatory Rules (MUST)
 - `--id` is required and must reference a **submission** record (CUID), not a Skill ID. Obtain it via `+list-skill-submissions` — do not guess.
 - Only the submitter or root can cancel a submission.
-- Write operation: keep the confirmation prompt unless `--yes` is explicitly requested.
+- This is an ordinary `write` operation and does not require CLI confirmation.
 
 ## Command
 ```bash
-ae-cli agent +cancel-skill-submission --id <submission-cuid> --yes
+ae-cli agent +cancel-skill-submission --id <submission-cuid>
 ae-cli agent +cancel-skill-submission --dry-run --id <submission-cuid>
 ```
 

package/skills/ae-agent/references/copy-skill.md

@@ -13,7 +13,7 @@ Domain: **Copy to personal / write**
 ## Mandatory Rules (MUST)
 - `--id` is required. Obtain the real source Skill record ID (CUID, system or company scope) via `+list-skill-market` or `+list-skills` — do not guess.
 - `--category` must be one of the market category keys (see below) when provided.
-- Write operation: keep the confirmation prompt unless `--yes` is explicitly requested.
+- This is an ordinary `write` operation and does not require CLI confirmation.
 - MCP has no copy flow (use `+toggle-mcp` to enable a system/company MCP per-user).
 
 ## Market Category Keys
@@ -22,10 +22,10 @@ Domain: **Copy to personal / write**
 ## Command
 ```bash
 # Copy with inherited meta
-ae-cli agent +copy-skill --id <skill-cuid> --yes
+ae-cli agent +copy-skill --id <skill-cuid>
 
 # Copy with overridden category and icon
-ae-cli agent +copy-skill --id <skill-cuid> --category dev_tool --icon-emoji robot --yes
+ae-cli agent +copy-skill --id <skill-cuid> --category dev_tool --icon-emoji robot
 
 # Dry-run to inspect the request before executing
 ae-cli agent +copy-skill --dry-run --id <skill-cuid>

package/skills/ae-agent/references/create-agent.md

@@ -14,7 +14,7 @@ Domain: **Agents / write**
 - `--scope` defaults to `personal`; `company` requires root/agent_admin privileges.
 - `--instructions` maps to the Agent's system prompt; supports `@-` to read from stdin.
 - `--mcp-ids` / `--skill-ids` must be JSON array strings when provided.
-- Write operation: keep the confirmation prompt unless `--yes` is explicitly requested.
+- This is an ordinary `write` operation and does not require CLI confirmation.
 - Do not guess model / MCP / Skill IDs. Discover them with `+list-*` commands first.
 
 ## Command
@@ -28,15 +28,14 @@ ae-cli agent +create-agent \
   --description "Daily report agent" \
   --model-id "cm1uuid" \
   --mcp-ids '["mcp-cuid-1","mcp-cuid-2"]' \
-  --skill-ids '["skill-cuid-1"]' \
-  --yes
+  --skill-ids '["skill-cuid-1"]'
 
 # Instructions from stdin (useful for long prompts)
 echo "You are a helpful assistant that..." | \
   ae-cli agent +create-agent --name helper --instructions @-
 
 # Auto-rename on name conflict (appends -1, -2, ...)
-ae-cli agent +create-agent --name "daily-report" --auto-rename --yes
+ae-cli agent +create-agent --name "daily-report" --auto-rename
 
 # Dry-run to inspect the request before executing
 ae-cli agent +create-agent --dry-run --name "daily-report" --description "x"

package/skills/ae-agent/references/create-automation.md

@@ -14,7 +14,7 @@ Domain: **Automations / write**
 - A schedule is required: provide either `--cron` or a `--schedule-kind` (with its time/day fields). `--cron` and `--schedule-kind` are mutually exclusive.
 - `--agent-id` and `--agent-name` are mutually exclusive. Obtain a real Agent ID via `+list-agents` — do not guess.
 - JSON flags must be valid JSON strings, usually wrapped in single quotes in shell.
-- Write operation: keep the confirmation prompt unless `--yes` is explicitly requested.
+- This is an ordinary `write` operation and does not require CLI confirmation.
 - Do not surface raw automation IDs, raw JSON, or concrete detail paths in user-facing replies.
 
 ## Schedule Kinds
@@ -32,8 +32,7 @@ ae-cli agent +create-automation \
   --name "Daily AI Brief" \
   --schedule-kind daily \
   --time 09:00 \
-  --message "Summarize yesterday's AI news" \
-  --yes
+  --message "Summarize yesterday's AI news"
 
 # Create but keep paused when the user explicitly asks not to enable it
 ae-cli agent +create-automation \
@@ -41,8 +40,7 @@ ae-cli agent +create-automation \
   --schedule-kind daily \
   --time 09:00 \
   --message "Summarize yesterday's AI news" \
-  --enabled false \
-  --yes
+  --enabled false
 
 # Weekly schedule on Sunday
 ae-cli agent +create-automation \
@@ -50,15 +48,13 @@ ae-cli agent +create-automation \
   --schedule-kind weekly \
   --time 10:00 \
   --weekday 0 \
-  --message "Generate the weekly report" \
-  --yes
+  --message "Generate the weekly report"
 
 # Cron expression
 ae-cli agent +create-automation \
   --name "Cron Task" \
   --cron "0 9 * * 1-5" \
-  --message "Weekday morning brief" \
-  --yes
+  --message "Weekday morning brief"
 
 # Dry-run to inspect the request before executing
 ae-cli agent +create-automation --dry-run --name "Test" --message "x" --schedule-kind daily --time 09:00

package/skills/ae-agent/references/del-agent.md

@@ -12,12 +12,13 @@ Domain: **Agents / write**
 - `--id` is required. Obtain the real Agent record ID (CUID) via `+list-agents` — do not guess.
 - System Agents cannot be deleted via CLI.
 - Prefer `--dry-run` before executing a destructive delete.
-- Write operation: keep the confirmation prompt unless `--yes` is explicitly requested.
+- This is a high-risk-write operation; never execute it before the dry-run impact is explicitly confirmed.
 
 ## Command
 ```bash
+ae-cli agent +del-agent --id <agent-cuid> --dry-run
+# Summarize the target and impact, then wait for explicit user confirmation.
 ae-cli agent +del-agent --id <agent-cuid> --yes
-ae-cli agent +del-agent --dry-run --id <agent-cuid>
 ```
 
 ## Parameters

package/skills/ae-agent/references/del-attachment.md

@@ -11,12 +11,13 @@ Domain: **Attachments / write**
 ## Mandatory Rules (MUST)
 - `--id` is required. Obtain the real attachment ID via `+list-attachments` — do not guess.
 - This is a soft delete — prefer `--dry-run` before executing.
-- Write operation: keep the confirmation prompt unless `--yes` is explicitly requested.
+- This is a high-risk-write operation; never execute it before the dry-run impact is explicitly confirmed.
 
 ## Command
 ```bash
+ae-cli agent +del-attachment --id <attachment-id> --dry-run
+# Summarize the target and impact, then wait for explicit user confirmation.
 ae-cli agent +del-attachment --id <attachment-id> --yes
-ae-cli agent +del-attachment --dry-run --id <attachment-id>
 ```
 
 ## Parameters

package/skills/ae-agent/references/del-mcp.md

@@ -11,12 +11,13 @@ Domain: **MCP Servers / write**
 ## Mandatory Rules (MUST)
 - `--id` is required. Obtain the real MCP server record ID (CUID) via `+list-mcps` — do not guess.
 - Prefer `--dry-run` before executing a destructive delete.
-- Write operation: keep the confirmation prompt unless `--yes` is explicitly requested.
+- This is a high-risk-write operation; never execute it before the dry-run impact is explicitly confirmed.
 
 ## Command
 ```bash
+ae-cli agent +del-mcp --id <mcp-cuid> --dry-run
+# Summarize the target and impact, then wait for explicit user confirmation.
 ae-cli agent +del-mcp --id <mcp-cuid> --yes
-ae-cli agent +del-mcp --dry-run --id <mcp-cuid>
 ```
 
 ## Parameters

package/skills/ae-agent/references/del-model.md

@@ -12,12 +12,13 @@ Domain: **Models / write**
 - `--id` is required. Obtain the real model record ID (CUID) via `+list-models` — do not guess.
 - `--scope` controls target scope: `personal` (default) or `company`. Company scope requires root/agent_admin.
 - Prefer `--dry-run` before executing a destructive delete.
-- Write operation: keep the confirmation prompt unless `--yes` is explicitly requested.
+- This is a high-risk-write operation; never execute it before the dry-run impact is explicitly confirmed.
 
 ## Command
 ```bash
+ae-cli agent +del-model --id <model-cuid> --dry-run
+# Summarize the target and impact, then wait for explicit user confirmation.
 ae-cli agent +del-model --id <model-cuid> --yes
-ae-cli agent +del-model --dry-run --id <model-cuid>
 ```
 
 ## Parameters

package/skills/ae-agent/references/del-skill-asset.md

@@ -13,13 +13,13 @@ Domain: **Skills / write**
 - `--id` is required. Obtain the real Skill record ID (CUID) via `+list-skills` — do not guess.
 - `--path` is required and specifies the relative file path within the assets directory.
 - This is a **physical delete** — prefer `--dry-run` before executing.
-- Write operation: keep the confirmation prompt unless `--yes` is explicitly requested.
+- This is a high-risk-write operation; never execute it before the dry-run impact is explicitly confirmed.
 
 ## Command
 ```bash
+ae-cli agent +del-skill-asset --id <skill-cuid> --path icon.png --dry-run
+# Summarize the target and impact, then wait for explicit user confirmation.
 ae-cli agent +del-skill-asset --id <skill-cuid> --path icon.png --yes
-ae-cli agent +del-skill-asset --id <skill-cuid> --path "sub/data.csv" --yes
-ae-cli agent +del-skill-asset --dry-run --id <skill-cuid> --path icon.png
 ```
 
 ## Parameters

package/skills/ae-agent/references/del-skill-reference.md

@@ -13,13 +13,13 @@ Domain: **Skills / write**
 - `--id` is required. Obtain the real Skill record ID (CUID) via `+list-skills` — do not guess.
 - `--path` is required and specifies the relative file path within the references directory.
 - This is a **physical delete** — prefer `--dry-run` before executing.
-- Write operation: keep the confirmation prompt unless `--yes` is explicitly requested.
+- This is a high-risk-write operation; never execute it before the dry-run impact is explicitly confirmed.
 
 ## Command
 ```bash
+ae-cli agent +del-skill-reference --id <skill-cuid> --path guide.md --dry-run
+# Summarize the target and impact, then wait for explicit user confirmation.
 ae-cli agent +del-skill-reference --id <skill-cuid> --path guide.md --yes
-ae-cli agent +del-skill-reference --id <skill-cuid> --path "advanced/tips.md" --yes
-ae-cli agent +del-skill-reference --dry-run --id <skill-cuid> --path guide.md
 ```
 
 ## Parameters

package/skills/ae-agent/references/del-skill-script.md

@@ -13,13 +13,13 @@ Domain: **Skills / write**
 - `--id` is required. Obtain the real Skill record ID (CUID) via `+list-skills` — do not guess.
 - `--path` is required and specifies the relative file path within the scripts directory.
 - This is a **physical delete** — prefer `--dry-run` before executing.
-- Write operation: keep the confirmation prompt unless `--yes` is explicitly requested.
+- This is a high-risk-write operation; never execute it before the dry-run impact is explicitly confirmed.
 
 ## Command
 ```bash
+ae-cli agent +del-skill-script --id <skill-cuid> --path helper.sh --dry-run
+# Summarize the target and impact, then wait for explicit user confirmation.
 ae-cli agent +del-skill-script --id <skill-cuid> --path helper.sh --yes
-ae-cli agent +del-skill-script --id <skill-cuid> --path "tools/run.py" --yes
-ae-cli agent +del-skill-script --dry-run --id <skill-cuid> --path helper.sh
 ```
 
 ## Parameters

package/skills/ae-agent/references/del-skill.md

@@ -11,12 +11,13 @@ Domain: **Skills / write**
 ## Mandatory Rules (MUST)
 - `--id` is required. Obtain the real Skill record ID (CUID) via `+list-skills` — do not guess.
 - This is a **physical delete** — prefer `--dry-run` before executing.
-- Write operation: keep the confirmation prompt unless `--yes` is explicitly requested.
+- This is a high-risk-write operation; never execute it before the dry-run impact is explicitly confirmed.
 
 ## Command
 ```bash
+ae-cli agent +del-skill --id <skill-cuid> --dry-run
+# Summarize the target and impact, then wait for explicit user confirmation.
 ae-cli agent +del-skill --id <skill-cuid> --yes
-ae-cli agent +del-skill --dry-run --id <skill-cuid>
 ```
 
 ## Parameters

package/skills/ae-agent/references/edit-skill.md

@@ -15,7 +15,7 @@ Domain: **Skills / write**
 - `--name` must be 1–80 chars when provided.
 - `--instructions` supports `@-` to read from stdin (useful for piping long instruction text).
 - `--category` must be one of the market category keys when provided.
-- Write operation: keep the confirmation prompt unless `--yes` is explicitly requested.
+- This is an ordinary `write` operation and does not require CLI confirmation.
 
 ## Market Category Keys
 `ae_preset | dev_tool | search_tool | data_query | content_gen | enterprise | life | automation | other`
@@ -23,14 +23,14 @@ Domain: **Skills / write**
 ## Command
 ```bash
 # Edit instructions only
-ae-cli agent +edit-skill --id <skill-cuid> --instructions "Updated instructions..." --yes
+ae-cli agent +edit-skill --id <skill-cuid> --instructions "Updated instructions..."
 
 # Edit name and description
-ae-cli agent +edit-skill --id <skill-cuid> --name new-name --description "New description" --yes
+ae-cli agent +edit-skill --id <skill-cuid> --name new-name --description "New description"
 
 # Instructions from stdin
 echo "You are a helpful assistant..." | \
-  ae-cli agent +edit-skill --id <skill-cuid> --instructions @- --yes
+  ae-cli agent +edit-skill --id <skill-cuid> --instructions @-
 
 # Dry-run to inspect the request before executing
 ae-cli agent +edit-skill --dry-run --id <skill-cuid> --name new-name

package/skills/ae-agent/references/mcp-auth-disconnect.md

@@ -13,12 +13,12 @@ Domain: **MCP Servers / write**
 ## Mandatory Rules (MUST)
 - `--id` is required. Obtain the real MCP server record ID (CUID) via `+list-mcps` — do not guess.
 - After disconnect, the MCP server is disabled (`enabled=false`); re-enable with `+toggle-mcp --enabled true` after re-authorizing.
-- Write operation: keep the confirmation prompt unless `--yes` is explicitly requested.
+- This is an ordinary `write` operation and does not require CLI confirmation.
 
 ## Command
 ```bash
 # Disconnect OAuth
-ae-cli agent +mcp-auth-disconnect --id <mcp-cuid> --yes
+ae-cli agent +mcp-auth-disconnect --id <mcp-cuid>
 
 # Dry-run to inspect the request
 ae-cli agent +mcp-auth-disconnect --dry-run --id <mcp-cuid>

package/skills/ae-agent/references/mcp-auth-start.md

@@ -15,15 +15,15 @@ Domain: **MCP Servers / write**
 - The MCP server must have `authMode=oauth2`; otherwise the server returns `oauth_not_required`.
 - `--redirect-after` (when provided) must be same-origin as the service base URL; otherwise it is rejected.
 - `--cli` defaults to `true` and is always true on the sandbox endpoint — it is for documentation/compat only.
-- Write operation: keep the confirmation prompt unless `--yes` is explicitly requested.
+- This is an ordinary `write` operation and does not require CLI confirmation.
 
 ## Command
 ```bash
 # Start OAuth for an MCP server
-ae-cli agent +mcp-auth-start --id <mcp-cuid> --yes
+ae-cli agent +mcp-auth-start --id <mcp-cuid>
 
 # With a redirect-after URL
-ae-cli agent +mcp-auth-start --id <mcp-cuid> --redirect-after "https://app.example.com/mcp/done" --yes
+ae-cli agent +mcp-auth-start --id <mcp-cuid> --redirect-after "https://app.example.com/mcp/done"
 
 # Dry-run to inspect the request
 ae-cli agent +mcp-auth-start --dry-run --id <mcp-cuid>

package/skills/ae-agent/references/reject-skill-share.md

@@ -11,12 +11,12 @@ Domain: **Skill Share (peer-to-peer) / write**
 
 ## Mandatory Rules (MUST)
 - `--id` is required and must reference a **share** record (CUID), not a Skill ID. Obtain it via `+list-skill-shares --direction received` — do not guess.
-- Write operation: keep the confirmation prompt unless `--yes` is explicitly requested.
+- This is an ordinary `write` operation and does not require CLI confirmation.
 - Only `pending` shares can be rejected.
 
 ## Command
 ```bash
-ae-cli agent +reject-skill-share --id <share-cuid> --yes
+ae-cli agent +reject-skill-share --id <share-cuid>
 ae-cli agent +reject-skill-share --dry-run --id <share-cuid>
 ```