@thinkingai/ae-cli 6.0.31 → 6.0.33

package/README.md

@@ -95,7 +95,7 @@ ae-cli auth logout
 | `community` | 10+ | Community analysis: posts search, sentiment analysis, topic trends, livestream data |
 | `analysis_common` | 2 | Cross-module common constraints: resource link completion, project ID gate |
 | `team` | 14 | AI Agent Team: manage teams (list/create/update/delete/ai-generate/templates/projects) and execute TeamRuns (start/watch/chat/reply/cancel/result/artifacts) |
-| `kb` | 10 | Knowledge base lifecycle: query / new / add (md/dir/url) / schema / compile / rm-source / remove; retrieval primitives: index / grep / read |
+| `kb` | 11 | Knowledge base lifecycle: query / new / add (md/dir/url) / schema / compile / rm-source / remove; retrieval primitives: list / index / grep / read |
 | `auth` / `config` | 2 | Authentication and host configuration |
 
 ### kb
@@ -111,8 +111,9 @@ Knowledge base lifecycle (`+new` → `+add` → `+schema` → `+compile` → `+s
 - **Remove source** (`+rm-source`): `--name`, `--display-name`
 - **Remove KB** (`+remove`): `--name`
 
-Retrieval primitives for external agents (`+index` → `+grep` → `+read`); these are deterministic file-search endpoints with no server-side LLM, designed for agents (Claude Code / Codex / Cursor) to explore a KB the way they explore a codebase:
+Retrieval primitives for external agents (`+list` → `+index` → `+grep` → `+read`); these are deterministic file-search endpoints with no server-side LLM, designed for agents (Claude Code / Codex / Cursor) to explore a KB the way they explore a codebase:
 
+- **List** (`+list`): optional `--build-status` (default `compiled`), optional `--locale`. Returns accessible knowledge base metadata including `buildStatus`, without `index.md` navigation maps.
 - **Index** (`+index`): optional `--sources` JSON refs (omit to list all accessible KBs), optional `--locale`. Returns each KB's metadata plus its `index.md` navigation map.
 - **Grep** (`+grep`): `--query` / `-q`, optional `--sources`, `--top-k` (1-50, default 10), `--locale`. Returns matched lines with path, line number, breadcrumb and context snippet.
 - **Read** (`+read`): `--source` JSON ref (exactly one KB), `--path` (page path relative to the KB root), optional `--offset` / `--limit` (line window), `--locale`. Returns the full page or a line window.

package/README.zh.md

@@ -96,7 +96,7 @@ ae-cli auth logout
 | `analysis_common` | 2 | 跨模块通用约束：资源链接补全、项目 ID 门控 |
 | `agent` | 15 | Agent 平台资源管理：模型、MCP 服务、Skill、附件库的增删查和启停 |
 | `team` | 14 | AI Agent Team：团队管理（列表/创建/更新/删除/AI生成/模板/项目）和 TeamRun 执行（启动/监听/对话/回复/取消/结果/产物） |
-| `kb` | 10 | 知识库生命周期：查询 / 新建 / 添加源（md/目录/url）/ schema / 编译 / 删除源 / 删除；检索原语：index / grep / read |
+| `kb` | 11 | 知识库生命周期：查询 / 新建 / 添加源（md/目录/url）/ schema / 编译 / 删除源 / 删除；检索原语：list / index / grep / read |
 | `auth` / `config` | 2 | 身份验证和主机配置 |
 
 ### kb（知识库）
@@ -112,8 +112,9 @@ ae-cli auth logout
 - **删除源** (`+rm-source`)：`--name`，`--display-name`
 - **删除知识库** (`+remove`)：`--name`
 
-面向外部 agent 的检索原语（`+index` → `+grep` → `+read`）；均为确定性文件检索端点、服务端零 LLM 调用，让 agent（Claude Code / Codex / Cursor）像翻代码库一样探索知识库：
+面向外部 agent 的检索原语（`+list` → `+index` → `+grep` → `+read`）；均为确定性文件检索端点、服务端零 LLM 调用，让 agent（Claude Code / Codex / Cursor）像翻代码库一样探索知识库：
 
+- **列表** (`+list`)：可选 `--build-status`（默认 `compiled`）、`--locale`。返回可访问知识库的元信息（含 `buildStatus`），不含 `index.md` 导航地图。
 - **索引** (`+index`)：可选 `--sources` JSON 引用（省略则列出全部可访问知识库），可选 `--locale`。返回每个知识库的元信息及其 `index.md` 导航地图。
 - **检索** (`+grep`)：`--query` / `-q`，可选 `--sources`、`--top-k`（1-50，默认 10）、`--locale`。返回命中行的路径、行号、面包屑与上下文片段。
 - **读取** (`+read`)：`--source` JSON 引用（精确指向一个知识库），`--path`（相对知识库根目录的页面路径），可选 `--offset` / `--limit`（行窗口）、`--locale`。返回页面全文或行窗口。

package/dist/{auth-MEJ642P4.js → auth-ENM3FE6L.js}

@@ -3,8 +3,9 @@ import {
   invalidateAccessTokenForRetry,
   resolveHost,
   validateToken
-} from "./chunk-AJTH7LT3.js";
-import "./chunk-YCLVYFK7.js";
+} from "./chunk-IR4ZLVPW.js";
+import "./chunk-V6FR6WTW.js";
+import "./chunk-LYVNONC4.js";
 export {
   getToken,
   invalidateAccessTokenForRetry,

package/dist/{auth-7H3HAAJ3.js → auth-UPGUOKTW.js}

@@ -1,25 +1,31 @@
+import {
+  getLocalCliPackageInfo
+} from "./chunk-VTWMIC5L.js";
 import {
   printError,
-  printOutput
-} from "./chunk-TNW2CI4W.js";
+  printOutput,
+  runHostCompatCheck
+} from "./chunk-IMMGMU54.js";
 import {
   clearCliToken,
   mintCliToken
-} from "./chunk-2NDGFQHW.js";
+} from "./chunk-E7UXXHO3.js";
 import {
   clear,
   load,
   resolveHost,
   save
-} from "./chunk-AJTH7LT3.js";
+} from "./chunk-IR4ZLVPW.js";
 import {
   getFallbackCliToken,
   loadConfig,
-  logger,
   normalizeUrl,
   removeHost,
   saveConfig
-} from "./chunk-YCLVYFK7.js";
+} from "./chunk-V6FR6WTW.js";
+import {
+  logger
+} from "./chunk-LYVNONC4.js";
 
 // src/core/device-auth.ts
 import { execFileSync } from "child_process";
@@ -257,6 +263,7 @@ async function persistDeviceTokens(host, tokens) {
     accessExpiresAt: expiresAt
   });
   await mintCliToken(host);
+  await runHostCompatCheck(getLocalCliPackageInfo(), host);
 }
 function loginSummary(host, tokens) {
   return {

package/dist/{capability-SEH3JWLN.js → capability-AJC5CBRT.js}

@@ -4,7 +4,7 @@ import {
 } from "./chunk-OO6XR6LK.js";
 import {
   findGatewayDomain
-} from "./chunk-HL2AJQ4Q.js";
+} from "./chunk-PTE56QPL.js";
 import {
   CapabilityGatewayError,
   dryRunCapability,
@@ -12,22 +12,23 @@ import {
   inspectCapability,
   listCapabilities,
   validateCapability
-} from "./chunk-I4A62X3N.js";
+} from "./chunk-HQ2A7ITL.js";
 import {
   printError,
   printOutput
-} from "./chunk-TNW2CI4W.js";
-import {
-  PermissionError
-} from "./chunk-NOO24N7W.js";
-import "./chunk-2NDGFQHW.js";
+} from "./chunk-IMMGMU54.js";
+import "./chunk-E7UXXHO3.js";
 import {
   SecureStoreAuthError,
   resolveHost
-} from "./chunk-AJTH7LT3.js";
+} from "./chunk-IR4ZLVPW.js";
 import {
   safeJsonParse
-} from "./chunk-YCLVYFK7.js";
+} from "./chunk-V6FR6WTW.js";
+import {
+  PermissionError
+} from "./chunk-24BAVOX3.js";
+import "./chunk-LYVNONC4.js";
 
 // src/commands/capability/index.ts
 import * as readline from "readline";
@@ -55,6 +56,26 @@ function resolveCapabilityGatewayDomain(capabilityId, domainOverride) {
   }
   return findGatewayDomain(cliDomain) ?? cliDomain;
 }
+function parseOptionalProjectId(raw) {
+  if (raw === void 0) {
+    return void 0;
+  }
+  const value = raw.trim();
+  if (!/^[1-9]\d*$/.test(value)) {
+    throw new CapabilityCommandValidationError(
+      "--project-id must be a positive integer.",
+      "Example: --project-id 1"
+    );
+  }
+  const projectId = Number(value);
+  if (!Number.isSafeInteger(projectId)) {
+    throw new CapabilityCommandValidationError(
+      "--project-id is outside the supported integer range.",
+      "Pass a positive safe integer."
+    );
+  }
+  return projectId;
+}
 function normalizeCapabilityList(value) {
   if (!Array.isArray(value)) {
     throw new Error("Capability gateway returned an invalid catalog: expected an array.");
@@ -114,28 +135,39 @@ function registerCapability(program) {
     printError("validation", "Missing subcommand.", "Run: ae-cli capability --help");
     process.exitCode = 1;
   });
-  capability.command("list").description("List capability summaries in a domain").requiredOption("--domain <domain>", "Capability namespace, such as analysis or metadata").action(async (opts) => {
+  capability.command("list").description("List capability summaries in a domain").requiredOption("--domain <domain>", "Capability namespace, such as analysis or metadata").option("--project-id <project-id>", "Filter by project membership, permissions, and enabled features").action(async (opts) => {
     await executeAndPrint(program, async (host) => {
       const gatewayDomain = findGatewayDomain(opts.domain) ?? opts.domain;
-      const catalog = normalizeCapabilityList(await listCapabilities(host, gatewayDomain));
+      const projectId = parseOptionalProjectId(opts.projectId);
+      const catalog = normalizeCapabilityList(await listCapabilities(host, gatewayDomain, projectId));
       const capabilities = filterCapabilities(catalog, opts.domain);
       return { domain: opts.domain, count: capabilities.length, capabilities };
     });
-  }).addHelpText("after", "\nExample:\n  ae-cli capability list --domain analysis");
-  capability.command("search").description("Search capability IDs and descriptions in a domain").argument("<query>", "Case-insensitive search terms").requiredOption("--domain <domain>", "Capability namespace, such as analysis or metadata").action(async (query, opts) => {
+  }).addHelpText(
+    "after",
+    "\nExamples:\n  ae-cli capability list --domain analysis\n  ae-cli capability list --domain analysis --project-id 1"
+  );
+  capability.command("search").description("Search capability IDs and descriptions in a domain").argument("<query>", "Case-insensitive search terms").requiredOption("--domain <domain>", "Capability namespace, such as analysis or metadata").option("--project-id <project-id>", "Filter by project membership, permissions, and enabled features").action(async (query, opts) => {
     await executeAndPrint(program, async (host) => {
       const gatewayDomain = findGatewayDomain(opts.domain) ?? opts.domain;
-      const catalog = normalizeCapabilityList(await listCapabilities(host, gatewayDomain));
+      const projectId = parseOptionalProjectId(opts.projectId);
+      const catalog = normalizeCapabilityList(await listCapabilities(host, gatewayDomain, projectId));
       const capabilities = filterCapabilities(catalog, opts.domain, query);
       return { domain: opts.domain, query, count: capabilities.length, capabilities };
     });
-  }).addHelpText("after", '\nExample:\n  ae-cli capability search "dashboard list" --domain analysis');
-  capability.command("inspect").description("Inspect one capability schema, risk, auth, and output metadata").argument("<capability-id>", "Capability ID, such as analysis.report.list").option("--domain <domain>", "Override the capability namespace used for gateway routing").action(async (capabilityId, opts) => {
+  }).addHelpText(
+    "after",
+    '\nExamples:\n  ae-cli capability search "dashboard list" --domain analysis\n  ae-cli capability search "dashboard list" --domain analysis --project-id 1'
+  );
+  capability.command("inspect").description("Inspect one capability schema, risk, auth, and output metadata").argument("<capability-id>", "Capability ID, such as analysis.report.list").option("--domain <domain>", "Override the capability namespace used for gateway routing").option("--project-id <project-id>", "Check availability in a project before returning metadata").action(async (capabilityId, opts) => {
     await executeAndPrint(program, async (host) => {
       const gatewayDomain = resolveCapabilityGatewayDomain(capabilityId, opts.domain);
-      return inspectCapability(host, gatewayDomain, capabilityId);
+      return inspectCapability(host, gatewayDomain, capabilityId, parseOptionalProjectId(opts.projectId));
     });
-  }).addHelpText("after", "\nExample:\n  ae-cli capability inspect analysis.dashboard.list");
+  }).addHelpText(
+    "after",
+    "\nExamples:\n  ae-cli capability inspect analysis.dashboard.list\n  ae-cli capability inspect analysis.dashboard.list --project-id 1"
+  );
   capability.command("validate").description(
     "Validate and normalize capability input only (schema/params). Does not execute business logic. Use when crafting complex payloads (nested objects, qp, share/member payloads) before dry-run/run. Success data: valid, capability_id, normalized_input. Unlike dry-run, does not return risk/output_mode/supports_cancel preview."
   ).argument("<capability-id>", "Capability ID, such as metadata.data_table.sql_write").option("--domain <domain>", "Override the capability namespace used for gateway routing").option("--input <json-or-path>", "Input JSON object, file path, @<path>, or - for stdin").action(async (capabilityId, opts) => {

package/dist/{capability-SQ2IWKP3.js → capability-TQ5KU5Q6.js}

@@ -4,7 +4,7 @@ import {
 } from "./chunk-OO6XR6LK.js";
 import {
   findGatewayDomain
-} from "./chunk-HL2AJQ4Q.js";
+} from "./chunk-PTE56QPL.js";
 import {
   CapabilityGatewayError,
   dryRunCapability,
@@ -12,22 +12,23 @@ import {
   inspectCapability,
   listCapabilities,
   validateCapability
-} from "./chunk-DYOS6YY7.js";
+} from "./chunk-RGXCNC4N.js";
 import {
   printError,
   printOutput
-} from "./chunk-TNW2CI4W.js";
-import {
-  PermissionError
-} from "./chunk-NOO24N7W.js";
-import "./chunk-2NDGFQHW.js";
+} from "./chunk-IMMGMU54.js";
+import "./chunk-E7UXXHO3.js";
 import {
   SecureStoreAuthError,
   resolveHost
-} from "./chunk-AJTH7LT3.js";
+} from "./chunk-IR4ZLVPW.js";
 import {
   safeJsonParse
-} from "./chunk-YCLVYFK7.js";
+} from "./chunk-V6FR6WTW.js";
+import {
+  PermissionError
+} from "./chunk-24BAVOX3.js";
+import "./chunk-LYVNONC4.js";
 
 // src/commands/capability/index.ts
 import * as readline from "readline";
@@ -55,6 +56,26 @@ function resolveCapabilityGatewayDomain(capabilityId, domainOverride) {
   }
   return findGatewayDomain(cliDomain) ?? cliDomain;
 }
+function parseOptionalProjectId(raw) {
+  if (raw === void 0) {
+    return void 0;
+  }
+  const value = raw.trim();
+  if (!/^[1-9]\d*$/.test(value)) {
+    throw new CapabilityCommandValidationError(
+      "--project-id must be a positive integer.",
+      "Example: --project-id 1"
+    );
+  }
+  const projectId = Number(value);
+  if (!Number.isSafeInteger(projectId)) {
+    throw new CapabilityCommandValidationError(
+      "--project-id is outside the supported integer range.",
+      "Pass a positive safe integer."
+    );
+  }
+  return projectId;
+}
 function normalizeCapabilityList(value) {
   if (!Array.isArray(value)) {
     throw new Error("Capability gateway returned an invalid catalog: expected an array.");
@@ -114,28 +135,39 @@ function registerCapability(program) {
     printError("validation", "Missing subcommand.", "Run: ae-cli capability --help");
     process.exitCode = 1;
   });
-  capability.command("list").description("List capability summaries in a domain").requiredOption("--domain <domain>", "Capability namespace, such as analysis or metadata").action(async (opts) => {
+  capability.command("list").description("List capability summaries in a domain").requiredOption("--domain <domain>", "Capability namespace, such as analysis or metadata").option("--project-id <project-id>", "Filter by project membership, permissions, and enabled features").action(async (opts) => {
     await executeAndPrint(program, async (host) => {
       const gatewayDomain = findGatewayDomain(opts.domain) ?? opts.domain;
-      const catalog = normalizeCapabilityList(await listCapabilities(host, gatewayDomain));
+      const projectId = parseOptionalProjectId(opts.projectId);
+      const catalog = normalizeCapabilityList(await listCapabilities(host, gatewayDomain, projectId));
       const capabilities = filterCapabilities(catalog, opts.domain);
       return { domain: opts.domain, count: capabilities.length, capabilities };
     });
-  }).addHelpText("after", "\nExample:\n  ae-cli capability list --domain analysis");
-  capability.command("search").description("Search capability IDs and descriptions in a domain").argument("<query>", "Case-insensitive search terms").requiredOption("--domain <domain>", "Capability namespace, such as analysis or metadata").action(async (query, opts) => {
+  }).addHelpText(
+    "after",
+    "\nExamples:\n  ae-cli capability list --domain analysis\n  ae-cli capability list --domain analysis --project-id 1"
+  );
+  capability.command("search").description("Search capability IDs and descriptions in a domain").argument("<query>", "Case-insensitive search terms").requiredOption("--domain <domain>", "Capability namespace, such as analysis or metadata").option("--project-id <project-id>", "Filter by project membership, permissions, and enabled features").action(async (query, opts) => {
     await executeAndPrint(program, async (host) => {
       const gatewayDomain = findGatewayDomain(opts.domain) ?? opts.domain;
-      const catalog = normalizeCapabilityList(await listCapabilities(host, gatewayDomain));
+      const projectId = parseOptionalProjectId(opts.projectId);
+      const catalog = normalizeCapabilityList(await listCapabilities(host, gatewayDomain, projectId));
       const capabilities = filterCapabilities(catalog, opts.domain, query);
       return { domain: opts.domain, query, count: capabilities.length, capabilities };
     });
-  }).addHelpText("after", '\nExample:\n  ae-cli capability search "dashboard list" --domain analysis');
-  capability.command("inspect").description("Inspect one capability schema, risk, auth, and output metadata").argument("<capability-id>", "Capability ID, such as analysis.report.list").option("--domain <domain>", "Override the capability namespace used for gateway routing").action(async (capabilityId, opts) => {
+  }).addHelpText(
+    "after",
+    '\nExamples:\n  ae-cli capability search "dashboard list" --domain analysis\n  ae-cli capability search "dashboard list" --domain analysis --project-id 1'
+  );
+  capability.command("inspect").description("Inspect one capability schema, risk, auth, and output metadata").argument("<capability-id>", "Capability ID, such as analysis.report.list").option("--domain <domain>", "Override the capability namespace used for gateway routing").option("--project-id <project-id>", "Check availability in a project before returning metadata").action(async (capabilityId, opts) => {
     await executeAndPrint(program, async (host) => {
       const gatewayDomain = resolveCapabilityGatewayDomain(capabilityId, opts.domain);
-      return inspectCapability(host, gatewayDomain, capabilityId);
+      return inspectCapability(host, gatewayDomain, capabilityId, parseOptionalProjectId(opts.projectId));
     });
-  }).addHelpText("after", "\nExample:\n  ae-cli capability inspect analysis.dashboard.list");
+  }).addHelpText(
+    "after",
+    "\nExamples:\n  ae-cli capability inspect analysis.dashboard.list\n  ae-cli capability inspect analysis.dashboard.list --project-id 1"
+  );
   capability.command("validate").description(
     "Validate and normalize capability input only (schema/params). Does not execute business logic. Use when crafting complex payloads (nested objects, qp, share/member payloads) before dry-run/run. Success data: valid, capability_id, normalized_input. Unlike dry-run, does not return risk/output_mode/supports_cancel preview."
   ).argument("<capability-id>", "Capability ID, such as metadata.data_table.sql_write").option("--domain <domain>", "Override the capability namespace used for gateway routing").option("--input <json-or-path>", "Input JSON object, file path, @<path>, or - for stdin").action(async (capabilityId, opts) => {

package/dist/chunk-24BAVOX3.js

@@ -0,0 +1,51 @@
+// src/core/errors.ts
+var PermissionError = class extends Error {
+  constructor(message) {
+    super(message);
+    this.name = "PermissionError";
+  }
+};
+var CliValidationError = class extends Error {
+  code;
+  hint;
+  location;
+  constructor(message, options = {}) {
+    super(message);
+    this.name = "CliValidationError";
+    this.code = options.code;
+    this.hint = options.hint;
+    if (options.location) {
+      const location = {};
+      if (typeof options.location.segment === "number" && Number.isFinite(options.location.segment)) {
+        location.segment = options.location.segment;
+      }
+      if (typeof options.location.record === "number" && Number.isFinite(options.location.record)) {
+        location.record = options.location.record;
+      }
+      if (typeof options.location.field === "string" && options.location.field.length > 0) {
+        location.field = options.location.field;
+      }
+      if (Object.keys(location).length > 0) this.location = location;
+    }
+  }
+};
+var CommunityReportError = class extends Error {
+  code;
+  httpStatus;
+  hint;
+  meta;
+  constructor(message, options = {}) {
+    super(message, options.cause === void 0 ? void 0 : { cause: options.cause });
+    this.name = "CommunityReportError";
+    this.code = options.code;
+    this.httpStatus = options.httpStatus;
+    this.hint = options.hint;
+    this.meta = options.meta;
+  }
+};
+
+export {
+  PermissionError,
+  CliValidationError,
+  CommunityReportError
+};

package/dist/{chunk-MDJGDI6K.js → chunk-3KI3RRXX.js}

@@ -1,12 +1,12 @@
-import {
-  PermissionError
-} from "./chunk-NOO24N7W.js";
 import {
   getCliToken
-} from "./chunk-2NDGFQHW.js";
+} from "./chunk-E7UXXHO3.js";
 import {
   safeJsonParse
-} from "./chunk-YCLVYFK7.js";
+} from "./chunk-V6FR6WTW.js";
+import {
+  PermissionError
+} from "./chunk-24BAVOX3.js";
 
 // src/core/mcp-access.ts
 function buildUrl(host, path, params = {}) {

package/dist/{chunk-PKRD2IEM.js → chunk-3P3562ZX.js}

@@ -1,18 +1,20 @@
 import {
   getAnalysisMappingPathForClusterMode
-} from "./chunk-KGJQCYVC.js";
-import {
-  PermissionError
-} from "./chunk-NOO24N7W.js";
+} from "./chunk-LCXU3AAT.js";
 import {
   clearCliToken,
   getCliToken
-} from "./chunk-2NDGFQHW.js";
+} from "./chunk-E7UXXHO3.js";
 import {
   getActiveHost,
-  logger,
   safeJsonParse
-} from "./chunk-YCLVYFK7.js";
+} from "./chunk-V6FR6WTW.js";
+import {
+  PermissionError
+} from "./chunk-24BAVOX3.js";
+import {
+  logger
+} from "./chunk-LYVNONC4.js";
 
 // src/core/mcp.ts
 async function permissionMessage(resp) {

package/dist/{chunk-R77JT7XD.js → chunk-4Q5TNP4Q.js}

@@ -1,7 +1,7 @@
 import {
   getActiveHost,
   getSandboxRuntimeRoot
-} from "./chunk-YCLVYFK7.js";
+} from "./chunk-V6FR6WTW.js";
 
 // src/core/te-agent-credentials.ts
 import { readFileSync } from "fs";
@@ -147,8 +147,8 @@ async function signRequest(method, path, rawBody) {
       rawBody
     };
   }
-  const { getToken } = await import("./auth-MEJ642P4.js");
-  const { getCliToken } = await import("./cli-token-TVQRSE46.js");
+  const { getToken } = await import("./auth-ENM3FE6L.js");
+  const { getCliToken } = await import("./cli-token-4SBMXAUK.js");
   const baseUrl = sandboxCred?.url || teClaudeBaseFromActiveHost();
   const hostForToken = getActiveHost() || baseUrl;
   if (!baseUrl) {
@@ -338,7 +338,7 @@ async function uploadToMainApp(path, formData) {
       "X-Sandbox-Secret-Key": sandboxCred.sandboxSecretKey
     };
   } else {
-    const { getToken } = await import("./auth-MEJ642P4.js");
+    const { getToken } = await import("./auth-ENM3FE6L.js");
     baseUrl = (sandboxCred?.url || teClaudeBaseFromActiveHost() || "").replace(/\/$/, "");
     if (!baseUrl) {
       throw new TeAgentCredentialsError(

package/dist/{chunk-TKQJQXWT.js → chunk-6CHYBI64.js}

@@ -1,14 +1,14 @@
 import {
   resolveGatewayDomain
-} from "./chunk-HL2AJQ4Q.js";
+} from "./chunk-PTE56QPL.js";
 import {
   dryRunCapability,
   executeCapabilityWithEnvelope,
   validateCapability
-} from "./chunk-I4A62X3N.js";
+} from "./chunk-RGXCNC4N.js";
 import {
   withOutputMetadata
-} from "./chunk-TNW2CI4W.js";
+} from "./chunk-IMMGMU54.js";
 
 // src/core/capability-command.ts
 import { randomBytes } from "crypto";
@@ -22,6 +22,9 @@ function createCapabilityCommand(config) {
     flags: config.flags,
     risk: config.risk,
     validate: config.validate,
+    preflight: (ctx) => {
+      config.buildInput(ctx);
+    },
     validateInput: async (ctx) => {
       const gatewayDomain = resolveGatewayDomain(config.cliService, config.gatewayDomain);
       const requestHost = config.requestHost ?? ctx.host();
@@ -40,7 +43,7 @@ function createCapabilityCommand(config) {
       const input = withLifecycleRequestId(config, config.buildInput(ctx));
       announceDispatch(config.capabilityId, input);
       const result = await executeCapabilityWithEnvelope(requestHost, gatewayDomain, config.capabilityId, input);
-      const data = config.postProcess ? config.postProcess(result.data, input) : result.data;
+      const data = config.postProcess ? config.postProcess(result.data, input, ctx) : result.data;
       return withOutputMetadata(data, result.meta);
     }
   };

package/dist/{chunk-6LEYLOV3.js → chunk-CPVTECJ3.js}

@@ -1,18 +1,20 @@
 import {
   getAnalysisMappingPathForClusterMode
-} from "./chunk-KGJQCYVC.js";
-import {
-  PermissionError
-} from "./chunk-NOO24N7W.js";
+} from "./chunk-LCXU3AAT.js";
 import {
   clearCliToken,
   getCliToken
-} from "./chunk-2NDGFQHW.js";
+} from "./chunk-E7UXXHO3.js";
 import {
   getActiveHost,
-  logger,
   safeJsonParse
-} from "./chunk-YCLVYFK7.js";
+} from "./chunk-V6FR6WTW.js";
+import {
+  PermissionError
+} from "./chunk-24BAVOX3.js";
+import {
+  logger
+} from "./chunk-LYVNONC4.js";
 
 // src/core/mcp.ts
 async function permissionMessage(resp) {

package/dist/{chunk-KCA6BA5D.js → chunk-DB4Q3ANU.js}

@@ -3,11 +3,13 @@ import {
   getToken,
   invalidateAccessTokenForRetry,
   resolveHost
-} from "./chunk-AJTH7LT3.js";
+} from "./chunk-IR4ZLVPW.js";
 import {
-  logger,
   safeJsonParse
-} from "./chunk-YCLVYFK7.js";
+} from "./chunk-V6FR6WTW.js";
+import {
+  logger
+} from "./chunk-LYVNONC4.js";
 
 // src/core/client.ts
 import WebSocket from "ws";

package/dist/{chunk-2NDGFQHW.js → chunk-E7UXXHO3.js}

@@ -3,17 +3,19 @@ import {
   load,
   loadCliToken,
   save
-} from "./chunk-AJTH7LT3.js";
+} from "./chunk-IR4ZLVPW.js";
 import {
   getActiveHost,
   getConfigDir,
   getFallbackCliToken,
   listHosts,
-  logger,
   normalizeUrl,
   safeJsonParse,
   safeReadJsonFile
-} from "./chunk-YCLVYFK7.js";
+} from "./chunk-V6FR6WTW.js";
+import {
+  logger
+} from "./chunk-LYVNONC4.js";
 
 // src/core/cli-token.ts
 import fs from "fs";
@@ -125,6 +127,11 @@ function clearPersistedCliToken(hostUrl) {
     save(hostUrl, { ...existing, cliToken: void 0 });
   }
 }
+function peekCliToken(hostOverride) {
+  const hostUrl = hostOverride || getActiveHost();
+  if (!hostUrl) return void 0;
+  return _cliTokenCache.get(hostUrl) || loadCliToken(hostUrl) || getFallbackCliToken(hostUrl) || void 0;
+}
 async function getCliToken(hostOverride) {
   const hostUrl = hostOverride || getActiveHost();
   let token = _cliTokenCache.get(hostUrl);
@@ -182,6 +189,7 @@ function _resetRenewMemoryForTest() {
 
 export {
   localRenewDate,
+  peekCliToken,
   getCliToken,
   mintCliToken,
   clearCliToken,

package/dist/{chunk-I4A62X3N.js → chunk-HQ2A7ITL.js}

@@ -1,14 +1,16 @@
-import {
-  PermissionError
-} from "./chunk-NOO24N7W.js";
 import {
   clearCliToken,
   getCliToken
-} from "./chunk-2NDGFQHW.js";
+} from "./chunk-E7UXXHO3.js";
 import {
-  logger,
   safeJsonParse
-} from "./chunk-YCLVYFK7.js";
+} from "./chunk-V6FR6WTW.js";
+import {
+  PermissionError
+} from "./chunk-24BAVOX3.js";
+import {
+  logger
+} from "./chunk-LYVNONC4.js";
 
 // src/core/capability-api.ts
 import { readFile } from "fs/promises";
@@ -145,11 +147,11 @@ async function requestMultipartOnce(url, token, form) {
     body: form
   });
 }
-async function callGateway(host, domain, pathAfterV1, method, body) {
-  return (await callGatewayWithEnvelope(host, domain, pathAfterV1, method, body)).data;
+async function callGateway(host, domain, pathAfterV1, method, body, queryParams = {}) {
+  return (await callGatewayWithEnvelope(host, domain, pathAfterV1, method, body, queryParams)).data;
 }
-async function callGatewayWithEnvelope(host, domain, pathAfterV1, method, body) {
-  const url = buildCapabilityGatewayUrl(host, domain, pathAfterV1);
+async function callGatewayWithEnvelope(host, domain, pathAfterV1, method, body, queryParams = {}) {
+  const url = buildCapabilityGatewayUrl(host, domain, pathAfterV1, queryParams);
   const token = await getCliToken(host);
   let resp = await requestOnce(url, method, token, body);
   let permissionMsg;
@@ -210,11 +212,18 @@ async function requestCapabilityGatewayWithEnvelope(host, domain, pathAfterV1, m
   const resp = await fetchCapabilityGateway(host, domain, pathAfterV1, method, body);
   return parseCapabilityEnvelope(parseCapabilityResponse(await resp.text()));
 }
-async function listCapabilities(host, domain) {
-  return callGateway(host, domain, "capabilities", "GET");
+async function listCapabilities(host, domain, projectId) {
+  return callGateway(host, domain, "capabilities", "GET", void 0, { project_id: projectId });
 }
-async function inspectCapability(host, domain, capabilityId) {
-  return callGateway(host, domain, `capabilities/${capabilityId}`, "GET");
+async function inspectCapability(host, domain, capabilityId, projectId) {
+  return callGateway(
+    host,
+    domain,
+    `capabilities/${capabilityId}`,
+    "GET",
+    void 0,
+    { project_id: projectId }
+  );
 }
 async function executeCapability(host, domain, capabilityId, input = {}) {
   return callGateway(host, domain, `capabilities/${capabilityId}/execute`, "POST", { input });