@thinkingai/ae-cli 6.0.37 → 6.0.39

package/skills/ae-analysis/references/project_owner_update.md

@@ -1,4 +1,4 @@
-# analysis project owner update
+# project owner update
 
 Use when the user needs to update project owner.
 
@@ -7,8 +7,8 @@ Do not use it for unrelated project-management actions or for fields not present
 Command:
 
 ```bash
-ae-cli analysis project owner update --project-id <project_id> --company-id <company_id> --owner-user-id <owner_user_id> --project-name <project_name> --project-remark <project_remark>
-ae-cli analysis project owner update --dry-run --project-id <project_id> --company-id <company_id>
+ae-cli project owner update --project-id <project_id> --company-id <company_id> --owner-user-id <owner_user_id> --project-name <project_name> --project-remark <project_remark>
+ae-cli project owner update --dry-run --project-id <project_id> --company-id <company_id>
 ```
 
 Capability id: `project.owner.update`.

package/skills/ae-analysis/references/project_permission_binding_list.md

@@ -1,4 +1,4 @@
-# analysis project permission-binding list
+# project permission-binding list
 
 Use when the user needs to list project role and data-power bindings for company-level permission management.
 
@@ -7,8 +7,8 @@ Do not use it for unrelated project-management actions or for fields not present
 Command:
 
 ```bash
-ae-cli analysis project permission-binding list --company-id <company_id> --project-ids <project_ids>
-ae-cli analysis project permission-binding list --dry-run --company-id <company_id> --project-ids <project_ids>
+ae-cli project permission-binding list --company-id <company_id> --project-ids <project_ids>
+ae-cli project permission-binding list --dry-run --company-id <company_id> --project-ids <project_ids>
 ```
 
 Capability id: `project.permission_binding.list`.

package/skills/ae-analysis/references/project_receive_status_update.md

@@ -1,4 +1,4 @@
-# analysis project receive-status update
+# project receive-status update
 
 Use when the user needs to update project data receive status.
 
@@ -7,8 +7,8 @@ Do not use it for unrelated project-management actions or for fields not present
 Command:
 
 ```bash
-ae-cli analysis project receive-status update --project-id <project_id> --receive-status <receive_status>
-ae-cli analysis project receive-status update --dry-run --project-id <project_id> --receive-status <receive_status>
+ae-cli project receive-status update --project-id <project_id> --receive-status <receive_status>
+ae-cli project receive-status update --dry-run --project-id <project_id> --receive-status <receive_status>
 ```
 
 Capability id: `project.receive_status.update`.

package/skills/ae-analysis/references/project_role_delete.md

@@ -1,4 +1,4 @@
-# analysis project role delete
+# project role delete
 
 Use when the user needs to delete a role and optionally migrate users to another role.
 
@@ -7,8 +7,8 @@ Do not use it for unrelated project-management actions or for fields not present
 Command:
 
 ```bash
-ae-cli analysis project role delete --project-id <project_id> --role-name <role_name> --new-role-name <new_role_name>
-ae-cli analysis project role delete --dry-run --project-id <project_id> --role-name <role_name>
+ae-cli project role delete --project-id <project_id> --role-name <role_name> --new-role-name <new_role_name>
+ae-cli project role delete --dry-run --project-id <project_id> --role-name <role_name>
 ```
 
 Capability id: `project.role.delete`.

package/skills/ae-analysis/references/project_role_function_list.md

@@ -1,4 +1,4 @@
-# analysis project role-function list
+# project role-function list
 
 Use when the user needs to list functions granted to one or more roles.
 
@@ -7,8 +7,8 @@ Do not use it for unrelated project-management actions or for fields not present
 Command:
 
 ```bash
-ae-cli analysis project role-function list --company-id <company_id> --project-id <project_id> --role-name <role_name> --role-names <role_names> --show-system-func <show_system_func>
-ae-cli analysis project role-function list --dry-run 
+ae-cli project role-function list --company-id <company_id> --project-id <project_id> --role-name <role_name> --role-names <role_names> --show-system-func <show_system_func>
+ae-cli project role-function list --dry-run
 ```
 
 Capability id: `project.role_function.list`.

package/skills/ae-analysis/references/project_role_get.md

@@ -1,4 +1,4 @@
-# analysis project role get
+# project role get
 
 Use when the user needs to get one role by role name.
 
@@ -7,8 +7,8 @@ Do not use it for unrelated project-management actions or for fields not present
 Command:
 
 ```bash
-ae-cli analysis project role get --project-id <project_id> --role-name <role_name>
-ae-cli analysis project role get --dry-run --project-id <project_id> --role-name <role_name>
+ae-cli project role get --project-id <project_id> --role-name <role_name>
+ae-cli project role get --dry-run --project-id <project_id> --role-name <role_name>
 ```
 
 Capability id: `project.role.get`.

package/skills/ae-analysis/references/project_role_list.md

@@ -1,4 +1,4 @@
-# analysis project role list
+# project role list
 
 Use when the user needs to list project-visible roles.
 
@@ -7,8 +7,8 @@ Do not use it for unrelated project-management actions or for fields not present
 Command:
 
 ```bash
-ae-cli analysis project role list --company-id <company_id> --project-id <project_id> --visible-only <visible_only>
-ae-cli analysis project role list --dry-run 
+ae-cli project role list --company-id <company_id> --project-id <project_id> --visible-only <visible_only>
+ae-cli project role list --dry-run
 ```
 
 Capability id: `project.role.list`.

package/skills/ae-analysis/references/project_role_upsert.md

@@ -1,4 +1,4 @@
-# analysis project role upsert
+# project role upsert
 
 Use when the user needs to create or update a project role.
 
@@ -7,8 +7,8 @@ Do not use it for unrelated project-management actions or for fields not present
 Command:
 
 ```bash
-ae-cli analysis project role upsert --project-id <project_id> --payload <payload>
-ae-cli analysis project role upsert --dry-run --project-id <project_id> --payload <payload>
+ae-cli project role upsert --project-id <project_id> --payload <payload>
+ae-cli project role upsert --dry-run --project-id <project_id> --payload <payload>
 ```
 
 Capability id: `project.role.upsert`.

package/skills/ae-analysis/references/project_role_user_list.md

@@ -1,4 +1,4 @@
-# analysis project role-user list
+# project role-user list
 
 Use when the user needs to list users bound to a role.
 
@@ -7,8 +7,8 @@ Do not use it for unrelated project-management actions or for fields not present
 Command:
 
 ```bash
-ae-cli analysis project role-user list --project-id <project_id> --role-name <role_name>
-ae-cli analysis project role-user list --dry-run --project-id <project_id> --role-name <role_name>
+ae-cli project role-user list --project-id <project_id> --role-name <role_name>
+ae-cli project role-user list --dry-run --project-id <project_id> --role-name <role_name>
 ```
 
 Capability id: `project.role_user.list`.

package/skills/ae-analysis/references/project_space_list.md

@@ -2,7 +2,7 @@
 
 Use when the user needs project spaces they can access.
 
-Do not use for project lookup or project ID verification. Use `analysis project info list`.
+Do not use for project lookup or project ID verification. Use `project info list`.
 
 Command:
 

package/skills/ae-analysis/references/project_timezone_get.md

@@ -1,4 +1,4 @@
-# analysis project timezone get
+# project timezone get
 
 Use when the user needs to get project time zone configuration.
 
@@ -7,8 +7,8 @@ Do not use it for unrelated project-management actions or for fields not present
 Command:
 
 ```bash
-ae-cli analysis project timezone get --project-id <project_id>
-ae-cli analysis project timezone get --dry-run --project-id <project_id>
+ae-cli project timezone get --project-id <project_id>
+ae-cli project timezone get --dry-run --project-id <project_id>
 ```
 
 Capability id: `project.timezone.get`.

package/skills/ae-analysis/references/project_timezone_overview.md

@@ -1,4 +1,4 @@
-# analysis project timezone overview
+# project timezone overview
 
 Use when the user needs to get project time zone overview.
 
@@ -7,8 +7,8 @@ Do not use it for unrelated project-management actions or for fields not present
 Command:
 
 ```bash
-ae-cli analysis project timezone overview --project-id <project_id>
-ae-cli analysis project timezone overview --dry-run --project-id <project_id>
+ae-cli project timezone overview --project-id <project_id>
+ae-cli project timezone overview --dry-run --project-id <project_id>
 ```
 
 Capability id: `project.timezone.overview`.

package/skills/ae-analysis/references/project_timezone_update.md

@@ -1,4 +1,4 @@
-# analysis project timezone update
+# project timezone update
 
 Use when the user needs to update one project time zone configuration item.
 
@@ -7,8 +7,8 @@ Do not use it for unrelated project-management actions or for fields not present
 Command:
 
 ```bash
-ae-cli analysis project timezone update --project-id <project_id> --payload <payload> --item <item>
-ae-cli analysis project timezone update --dry-run --project-id <project_id> --payload <payload> --item <item>
+ae-cli project timezone update --project-id <project_id> --payload <payload> --item <item>
+ae-cli project timezone update --dry-run --project-id <project_id> --payload <payload> --item <item>
 ```
 
 Capability id: `project.timezone.update`.

package/skills/ae-analysis/references/project_user_id_items_update.md

@@ -1,4 +1,4 @@
-# analysis project user-id-items update
+# project user-id-items update
 
 Use when the user needs to update project virtual user ID item configuration.
 
@@ -7,8 +7,8 @@ Do not use it for unrelated project-management actions or for fields not present
 Command:
 
 ```bash
-ae-cli analysis project user-id-items update --project-id <project_id> --payload <payload>
-ae-cli analysis project user-id-items update --dry-run --project-id <project_id> --payload <payload>
+ae-cli project user-id-items update --project-id <project_id> --payload <payload>
+ae-cli project user-id-items update --dry-run --project-id <project_id> --payload <payload>
 ```
 
 Capability id: `project.user_id_items.update`.

package/skills/ae-analysis/references/system_admin_function_list.md

@@ -0,0 +1,22 @@
+# system admin-function list
+
+Use when the user needs to list functions assigned to a system administrator.
+
+Do not use it outside the system admin-function operation or with fields absent from the inspected capability schema.
+
+Command:
+
+```bash
+ae-cli system admin-function list --company-id <company-id> --target-open-id <target-open-id>
+```
+
+Capability id: `system.admin_function.list`.
+
+The response uses `ok`, `data`, and `meta`. Treat empty `data` as success when `ok=true`; preserve `request_id` and `invocation_id` when present.
+
+## Parameters
+
+| Parameter | Required | Description |
+|---|---|---|
+| `--company-id` | Yes | Company ID. |
+| `--target-open-id` | Yes | Target member open ID. |

package/skills/ae-analysis/references/system_admin_function_update.md

@@ -0,0 +1,26 @@
+# system admin-function update
+
+Use when the user needs to replace functions assigned to a system administrator.
+
+Do not use it outside the system admin-function operation or with fields absent from the inspected capability schema.
+
+Command:
+
+```bash
+ae-cli system admin-function update --dry-run --company-id <company-id> --target-open-id <target-open-id> --function-names <function-names_json>
+ae-cli system admin-function update --company-id <company-id> --target-open-id <target-open-id> --function-names <function-names_json> --yes
+```
+
+Capability id: `system.admin_function.update`.
+
+Run `--dry-run` first, summarize the affected target and impact, then wait for explicit user confirmation before rerunning the unchanged command with global `--yes`.
+
+The response uses `ok`, `data`, and `meta`. Treat empty `data` as success when `ok=true`; preserve `request_id` and `invocation_id` when present.
+
+## Parameters
+
+| Parameter | Required | Description |
+|---|---|---|
+| `--company-id` | Yes | Company ID. |
+| `--target-open-id` | Yes | Target member open ID. |
+| `--function-names` | Yes | Complete function-name JSON array. |

package/skills/ae-analysis/references/system_admin_list.md

@@ -0,0 +1,21 @@
+# system admin list
+
+Use when the user needs to list company system administrators.
+
+Do not use it outside the system admin operation or with fields absent from the inspected capability schema.
+
+Command:
+
+```bash
+ae-cli system admin list --company-id <company-id>
+```
+
+Capability id: `system.admin.list`.
+
+The response uses `ok`, `data`, and `meta`. Treat empty `data` as success when `ok=true`; preserve `request_id` and `invocation_id` when present.
+
+## Parameters
+
+| Parameter | Required | Description |
+|---|---|---|
+| `--company-id` | Yes | Company ID. |

package/skills/ae-analysis/references/system_admin_remove.md

@@ -0,0 +1,25 @@
+# system admin remove
+
+Use when the user needs to remove one company-scoped system administrator role.
+
+Do not use it to delete the underlying member or to edit a normal company role.
+
+Command:
+
+```bash
+ae-cli system admin remove --dry-run --company-id <company_id> --target-open-id <target_open_id>
+ae-cli system admin remove --company-id <company_id> --target-open-id <target_open_id> --yes
+```
+
+Capability id: `system.admin.remove`.
+
+Run `--dry-run` first and verify the company and target. The service rejects self-removal and removal of the last administrator. Wait for explicit user confirmation before rerunning the unchanged command with global `--yes`.
+
+The response uses `ok`, `data`, and `meta`. Do not retry a self/last-administrator protection failure unchanged.
+
+## Parameters
+
+| Parameter | Required | Description |
+|---|---|---|
+| `--company-id` | Yes | Company ID. |
+| `--target-open-id` | Yes | Target administrator open ID. |

package/skills/ae-analysis/references/system_admin_upsert.md

@@ -0,0 +1,25 @@
+# system admin upsert
+
+Use when the user needs to create or update company system-administrator assignments.
+
+Do not use it outside the system admin operation or with fields absent from the inspected capability schema.
+
+Command:
+
+```bash
+ae-cli system admin upsert --dry-run --company-id <company-id> --admins <admins_json>
+ae-cli system admin upsert --company-id <company-id> --admins <admins_json> --yes
+```
+
+Capability id: `system.admin.upsert`.
+
+Run `--dry-run` first, summarize the affected target and impact, then wait for explicit user confirmation before rerunning the unchanged command with global `--yes`.
+
+The response uses `ok`, `data`, and `meta`. Treat empty `data` as success when `ok=true`; preserve `request_id` and `invocation_id` when present.
+
+## Parameters
+
+| Parameter | Required | Description |
+|---|---|---|
+| `--company-id` | Yes | Company ID. |
+| `--admins` | Yes | Administrator array with target_user_id and function_names. |

package/skills/ae-analysis/references/system_function_list.md

@@ -0,0 +1,21 @@
+# system function list
+
+Use when the user needs to list company-level system functions available for role assignment.
+
+Do not use it outside the system function operation or with fields absent from the inspected capability schema.
+
+Command:
+
+```bash
+ae-cli system function list --company-id <company-id>
+```
+
+Capability id: `system.function.list`.
+
+The response uses `ok`, `data`, and `meta`. Treat empty `data` as success when `ok=true`; preserve `request_id` and `invocation_id` when present.
+
+## Parameters
+
+| Parameter | Required | Description |
+|---|---|---|
+| `--company-id` | Yes | Company ID. |

package/skills/ae-analysis/references/system_member_add.md

@@ -0,0 +1,25 @@
+# system member add
+
+Use when the user needs to add one or more company members as one atomic batch.
+
+Do not use it to add existing company members to a project; use the project member flow instead. Validate candidate login names first with `system member-candidate list`.
+
+Command:
+
+```bash
+ae-cli system member add --dry-run --company-id <company_id> --members @members.json
+ae-cli system member add --company-id <company_id> --members @members.json
+```
+
+Capability id: `system.member.add`.
+
+`members` must be a non-empty JSON array. Every item requires `login_name` and `user_name`. If any item is invalid, the entire batch is rolled back.
+
+The successful response returns each generated one-time `initial_password`. Handle it as a secret, deliver it only to the intended member, and do not persist it in logs or reports.
+
+## Parameters
+
+| Parameter | Required | Description |
+|---|---|---|
+| `--company-id` | Yes | Company ID. |
+| `--members` | Yes | Non-empty member JSON array containing `login_name` and `user_name`. |

package/skills/ae-analysis/references/system_member_candidate_list.md

@@ -0,0 +1,22 @@
+# system member-candidate list
+
+Use when the user needs to resolve candidate company members by login name.
+
+Do not use it outside the system member-candidate operation or with fields absent from the inspected capability schema.
+
+Command:
+
+```bash
+ae-cli system member-candidate list --company-id <company-id> --login-names <login-names_json>
+```
+
+Capability id: `system.member_candidate.list`.
+
+The response uses `ok`, `data`, and `meta`. Treat empty `data` as success when `ok=true`; preserve `request_id` and `invocation_id` when present.
+
+## Parameters
+
+| Parameter | Required | Description |
+|---|---|---|
+| `--company-id` | Yes | Company ID. |
+| `--login-names` | Yes | Login-name JSON array. |

package/skills/ae-analysis/references/system_member_delete.md

@@ -0,0 +1,25 @@
+# system member delete
+
+Use when the user needs to delete a company member after every project membership and owned asset has been cleared or handed over.
+
+Do not use it to remove a member from one project; use the project member flow instead.
+
+Command:
+
+```bash
+ae-cli system member delete --dry-run --company-id <company_id> --target-user-id <target_user_id>
+ae-cli system member delete --company-id <company_id> --target-user-id <target_user_id> --yes
+```
+
+Capability id: `system.member.delete`.
+
+Run `--dry-run` first and verify the company, target member, project membership, and asset-protection result. Wait for explicit user confirmation before rerunning the unchanged command with global `--yes`.
+
+The response uses `ok`, `data`, and `meta`. A protection rejection is not retryable until the member's project membership or owned assets change.
+
+## Parameters
+
+| Parameter | Required | Description |
+|---|---|---|
+| `--company-id` | Yes | Company ID. |
+| `--target-user-id` | Yes | Target member user ID. |

package/skills/ae-analysis/references/system_member_list.md

@@ -0,0 +1,24 @@
+# system member list
+
+Use when the user needs to list company members.
+
+Do not use it outside the system member operation or with fields absent from the inspected capability schema.
+
+Command:
+
+```bash
+ae-cli system member list --company-id <company-id>
+```
+
+Capability id: `system.member.list`.
+
+The response uses `ok`, `data`, and `meta`. Treat empty `data` as success when `ok=true`; preserve `request_id` and `invocation_id` when present.
+
+## Parameters
+
+| Parameter | Required | Description |
+|---|---|---|
+| `--company-id` | Yes | Company ID. |
+| `--query` | No | Optional keyword filter. |
+| `--limit` | No | Page size. Default and maximum depend on the capability schema. |
+| `--offset` | No | Zero-based result offset. |

package/skills/ae-analysis/references/system_member_mfa_unbind.md

@@ -0,0 +1,25 @@
+# system member-mfa unbind
+
+Use when the user needs to unbind one member MFA enrollment.
+
+Do not use it outside the system member-mfa operation or with fields absent from the inspected capability schema.
+
+Command:
+
+```bash
+ae-cli system member-mfa unbind --dry-run --company-id <company-id> --login-name <login-name>
+ae-cli system member-mfa unbind --company-id <company-id> --login-name <login-name> --yes
+```
+
+Capability id: `system.member_mfa.unbind`.
+
+Run `--dry-run` first, summarize the affected target and impact, then wait for explicit user confirmation before rerunning the unchanged command with global `--yes`.
+
+The response uses `ok`, `data`, and `meta`. Treat empty `data` as success when `ok=true`; preserve `request_id` and `invocation_id` when present.
+
+## Parameters
+
+| Parameter | Required | Description |
+|---|---|---|
+| `--company-id` | Yes | Company ID. |
+| `--login-name` | Yes | Target member login name. |

package/skills/ae-analysis/references/system_member_password_reset.md

@@ -0,0 +1,32 @@
+# system member-password reset
+
+Use when the user needs to reset one company member password.
+
+Do not use it to change the current login's own password or when the company and target member have
+not been explicitly identified.
+
+The plaintext password is accepted only from stdin or a permission-protected local file. The CLI
+encrypts it locally with the TA-compatible RSA public key and sends only `encrypted_password`.
+Never place the password directly on argv, in JSON input, logs, or chat.
+
+Command:
+
+```bash
+printf '%s\n' "$NEW_PASSWORD" | ae-cli system member-password reset --dry-run --company-id <company-id> --target-user-id <target-user-id> --password-stdin
+printf '%s\n' "$NEW_PASSWORD" | ae-cli system member-password reset --company-id <company-id> --target-user-id <target-user-id> --password-stdin --yes
+```
+
+Capability id: `system.member_password.reset`.
+
+Run `--dry-run` first, summarize the target and impact without reproducing ciphertext, then wait for
+explicit user confirmation before rerunning the unchanged target with global `--yes`.
+
+The response uses `ok`, `data`, and `meta`. Preserve `request_id` and `invocation_id` when present.
+
+## Parameters
+
+| Parameter | Required | Description |
+|---|---|---|
+| `--company-id` | Yes | Company ID. |
+| `--target-user-id` | Yes | Target member user ID. |
+| `--password-stdin` or `--password-file` | Yes | Protected plaintext source; never accepted directly on argv. |

package/skills/ae-analysis/references/system_member_project_batch_update.md

@@ -0,0 +1,27 @@
+# system member-project batch-update
+
+Use when the user needs to batch update and remove a member project assignments.
+
+Do not use it outside the system member-project operation or with fields absent from the inspected capability schema.
+
+Command:
+
+```bash
+ae-cli system member-project batch-update --dry-run --company-id <company-id> --target-open-id <target-open-id>
+ae-cli system member-project batch-update --company-id <company-id> --target-open-id <target-open-id> --yes
+```
+
+Capability id: `system.member_project.batch_update`.
+
+Run `--dry-run` first, summarize the affected target and impact, then wait for explicit user confirmation before rerunning the unchanged command with global `--yes`.
+
+The response uses `ok`, `data`, and `meta`. Treat empty `data` as success when `ok=true`; preserve `request_id` and `invocation_id` when present.
+
+## Parameters
+
+| Parameter | Required | Description |
+|---|---|---|
+| `--company-id` | Yes | Company ID. |
+| `--target-open-id` | Yes | Target member open ID. |
+| `--project-updates` | No | Project update array: project_id, role_names, and optional data_power_id. |
+| `--project-removals` | No | Project removal and handover array. |

package/skills/ae-analysis/references/system_member_status_update.md

@@ -0,0 +1,26 @@
+# system member-status update
+
+Use when the user needs to lock or reactivate a company member.
+
+Do not use it outside the system member-status operation or with fields absent from the inspected capability schema.
+
+Command:
+
+```bash
+ae-cli system member-status update --dry-run --company-id <company-id> --target-open-id <target-open-id> --status <status>
+ae-cli system member-status update --company-id <company-id> --target-open-id <target-open-id> --status <status> --yes
+```
+
+Capability id: `system.member_status.update`.
+
+Run `--dry-run` first, summarize the affected target and impact, then wait for explicit user confirmation before rerunning the unchanged command with global `--yes`.
+
+The response uses `ok`, `data`, and `meta`. Treat empty `data` as success when `ok=true`; preserve `request_id` and `invocation_id` when present.
+
+## Parameters
+
+| Parameter | Required | Description |
+|---|---|---|
+| `--company-id` | Yes | Company ID. |
+| `--target-open-id` | Yes | Target member open ID. |
+| `--status` | Yes | Target status. |

package/skills/ae-analysis/references/system_member_update.md

@@ -0,0 +1,23 @@
+# system member update
+
+Use when the user needs to update a company member display name.
+
+Do not use it outside the system member operation or with fields absent from the inspected capability schema.
+
+Command:
+
+```bash
+ae-cli system member update --company-id <company-id> --target-open-id <target-open-id> --user-name <user-name>
+```
+
+Capability id: `system.member.update`.
+
+The response uses `ok`, `data`, and `meta`. Treat empty `data` as success when `ok=true`; preserve `request_id` and `invocation_id` when present.
+
+## Parameters
+
+| Parameter | Required | Description |
+|---|---|---|
+| `--company-id` | Yes | Company ID. |
+| `--target-open-id` | Yes | Target member open ID. |
+| `--user-name` | Yes | New display name. |

package/skills/ae-analysis/references/system_mfa_get.md

@@ -0,0 +1,21 @@
+# system mfa get
+
+Use when the user needs to get the company MFA enforcement state.
+
+Do not use it outside the system mfa operation or with fields absent from the inspected capability schema.
+
+Command:
+
+```bash
+ae-cli system mfa get --company-id <company-id>
+```
+
+Capability id: `system.mfa.get`.
+
+The response uses `ok`, `data`, and `meta`. Treat empty `data` as success when `ok=true`; preserve `request_id` and `invocation_id` when present.
+
+## Parameters
+
+| Parameter | Required | Description |
+|---|---|---|
+| `--company-id` | Yes | Company ID. |