@thinkingai/ae-cli 6.0.37 → 6.0.39

package/skills/ae-analysis/references/system_receiver_detection_run.md

@@ -0,0 +1,22 @@
+# system receiver-detection run
+
+Use when the user needs to run receiver-address detection now.
+
+Do not use it outside the system receiver-detection operation or with fields absent from the inspected capability schema.
+
+Command:
+
+```bash
+ae-cli system receiver-detection run --company-id <company-id> --address-url <address-url>
+```
+
+Capability id: `system.receiver_detection.run`.
+
+The response uses `ok`, `data`, and `meta`. Treat empty `data` as success when `ok=true`; preserve `request_id` and `invocation_id` when present.
+
+## Parameters
+
+| Parameter | Required | Description |
+|---|---|---|
+| `--company-id` | Yes | Company ID. |
+| `--address-url` | Yes | Receiver address URL. |

package/skills/ae-analysis/references/system_receiver_detection_update.md

@@ -0,0 +1,25 @@
+# system receiver-detection update
+
+Use when the user needs to update typed receiver-address detection configuration.
+
+Do not use it outside the system receiver-detection operation or with fields absent from the inspected capability schema.
+
+Command:
+
+```bash
+ae-cli system receiver-detection update --company-id <company-id> --address-url <address-url> --execute-type <execute-type> --schedule-type <schedule-type> --allow-notification <true_or_false>
+```
+
+Capability id: `system.receiver_detection.update`.
+
+The response uses `ok`, `data`, and `meta`. Treat empty `data` as success when `ok=true`; preserve `request_id` and `invocation_id` when present.
+
+## Parameters
+
+| Parameter | Required | Description |
+|---|---|---|
+| `--company-id` | Yes | Company ID. |
+| `--address-url` | Yes | Receiver address URL. |
+| `--execute-type` | Yes | Detection execution scope. |
+| `--schedule-type` | Yes | Detection schedule. |
+| `--allow-notification` | Yes | Allow detection notifications. |

package/skills/ae-analysis/references/system_role_delete.md

@@ -0,0 +1,26 @@
+# system role delete
+
+Use when the user needs to delete a company role and optionally migrate its users.
+
+Do not use it outside the system role operation or with fields absent from the inspected capability schema.
+
+Command:
+
+```bash
+ae-cli system role delete --dry-run --company-id <company-id> --role-name <role-name>
+ae-cli system role delete --company-id <company-id> --role-name <role-name> --yes
+```
+
+Capability id: `system.role.delete`.
+
+Run `--dry-run` first, summarize the affected target and impact, then wait for explicit user confirmation before rerunning the unchanged command with global `--yes`.
+
+The response uses `ok`, `data`, and `meta`. Treat empty `data` as success when `ok=true`; preserve `request_id` and `invocation_id` when present.
+
+## Parameters
+
+| Parameter | Required | Description |
+|---|---|---|
+| `--company-id` | Yes | Company ID. |
+| `--role-name` | Yes | Role name. |
+| `--new-role-name` | No | Replacement role for affected users. |

package/skills/ae-analysis/references/system_role_function_list.md

@@ -0,0 +1,22 @@
+# system role-function list
+
+Use when the user needs to list functions assigned to a company role.
+
+Do not use it outside the system role-function operation or with fields absent from the inspected capability schema.
+
+Command:
+
+```bash
+ae-cli system role-function list --company-id <company-id> --role-name <role-name>
+```
+
+Capability id: `system.role_function.list`.
+
+The response uses `ok`, `data`, and `meta`. Treat empty `data` as success when `ok=true`; preserve `request_id` and `invocation_id` when present.
+
+## Parameters
+
+| Parameter | Required | Description |
+|---|---|---|
+| `--company-id` | Yes | Company ID. |
+| `--role-name` | Yes | Role name. |

package/skills/ae-analysis/references/system_role_get.md

@@ -0,0 +1,22 @@
+# system role get
+
+Use when the user needs to get one company role.
+
+Do not use it outside the system role operation or with fields absent from the inspected capability schema.
+
+Command:
+
+```bash
+ae-cli system role get --company-id <company-id> --role-name <role-name>
+```
+
+Capability id: `system.role.get`.
+
+The response uses `ok`, `data`, and `meta`. Treat empty `data` as success when `ok=true`; preserve `request_id` and `invocation_id` when present.
+
+## Parameters
+
+| Parameter | Required | Description |
+|---|---|---|
+| `--company-id` | Yes | Company ID. |
+| `--role-name` | Yes | Role name. |

package/skills/ae-analysis/references/system_role_list.md

@@ -0,0 +1,24 @@
+# system role list
+
+Use when the user needs to list company roles.
+
+Do not use it outside the system role operation or with fields absent from the inspected capability schema.
+
+Command:
+
+```bash
+ae-cli system role list --company-id <company-id>
+```
+
+Capability id: `system.role.list`.
+
+The response uses `ok`, `data`, and `meta`. Treat empty `data` as success when `ok=true`; preserve `request_id` and `invocation_id` when present.
+
+## Parameters
+
+| Parameter | Required | Description |
+|---|---|---|
+| `--company-id` | Yes | Company ID. |
+| `--query` | No | Optional keyword filter. |
+| `--limit` | No | Page size. Default and maximum depend on the capability schema. |
+| `--offset` | No | Zero-based result offset. |

package/skills/ae-analysis/references/system_role_upsert.md

@@ -0,0 +1,27 @@
+# system role upsert
+
+Use when the user needs to create or update a company role and its function set.
+
+Do not use it outside the system role operation or with fields absent from the inspected capability schema.
+
+Command:
+
+```bash
+ae-cli system role upsert --dry-run --company-id <company-id> --role-desc <role-desc> --function-names <function-names_json>
+ae-cli system role upsert --company-id <company-id> --role-desc <role-desc> --function-names <function-names_json> --yes
+```
+
+Capability id: `system.role.upsert`.
+
+Run `--dry-run` first, summarize the affected target and impact, then wait for explicit user confirmation before rerunning the unchanged command with global `--yes`.
+
+The response uses `ok`, `data`, and `meta`. Treat empty `data` as success when `ok=true`; preserve `request_id` and `invocation_id` when present.
+
+## Parameters
+
+| Parameter | Required | Description |
+|---|---|---|
+| `--company-id` | Yes | Company ID. |
+| `--role-name` | No | Existing role name for update; omit when creating. |
+| `--role-desc` | Yes | Role description. |
+| `--function-names` | Yes | Complete function-name JSON array. |

package/skills/ae-analysis/references/system_role_user_list.md

@@ -0,0 +1,22 @@
+# system role-user list
+
+Use when the user needs to list users assigned to a company role.
+
+Do not use it outside the system role-user operation or with fields absent from the inspected capability schema.
+
+Command:
+
+```bash
+ae-cli system role-user list --company-id <company-id> --role-name <role-name>
+```
+
+Capability id: `system.role_user.list`.
+
+The response uses `ok`, `data`, and `meta`. Treat empty `data` as success when `ok=true`; preserve `request_id` and `invocation_id` when present.
+
+## Parameters
+
+| Parameter | Required | Description |
+|---|---|---|
+| `--company-id` | Yes | Company ID. |
+| `--role-name` | Yes | Role name. |

package/skills/ae-analysis/references/system_seat_list.md

@@ -0,0 +1,25 @@
+# system seat list
+
+Use when the user needs to list company seat assignments.
+
+Do not use it outside the system seat operation or with fields absent from the inspected capability schema.
+
+Command:
+
+```bash
+ae-cli system seat list --company-id <company-id>
+```
+
+Capability id: `system.seat.list`.
+
+The response uses `ok`, `data`, and `meta`. Treat empty `data` as success when `ok=true`; preserve `request_id` and `invocation_id` when present.
+
+## Parameters
+
+| Parameter | Required | Description |
+|---|---|---|
+| `--company-id` | Yes | Company ID. |
+| `--query` | No | Optional keyword filter. |
+| `--limit` | No | Page size. Default and maximum depend on the capability schema. |
+| `--offset` | No | Zero-based result offset. |
+| `--seat-type` | No | Optional seat type. |

package/skills/ae-analysis/references/system_seat_update.md

@@ -0,0 +1,26 @@
+# system seat update
+
+Use when the user needs to assign management/view BI seats or remove seats from an explicit member set.
+
+Do not use it without first reading current seat assignments and company quota with `ae-cli system seat list`.
+
+Command:
+
+```bash
+ae-cli system seat update --dry-run --company-id <company_id> --seat-type <manage_or_view_or_empty> --open-ids '["ou_xxx"]'
+ae-cli system seat update --company-id <company_id> --seat-type <manage_or_view_or_empty> --open-ids '["ou_xxx"]' --yes
+```
+
+Capability id: `system.seat.update`.
+
+`seat-type=empty` removes seats. Run `--dry-run` first and verify additions, removals, unchanged members, and license quota impact. Wait for explicit user confirmation before rerunning the unchanged command with global `--yes`.
+
+The response uses `ok`, `data`, and `meta`. A quota conflict is not proof of a partial update; inspect the returned transactional result.
+
+## Parameters
+
+| Parameter | Required | Description |
+|---|---|---|
+| `--company-id` | Yes | Company ID. |
+| `--seat-type` | Yes | `manage`, `view`, or `empty`; `empty` removes seats. |
+| `--open-ids` | Yes | Non-empty company member open-ID JSON array. |

package/skills/ae-analysis/references/system_smtp_delete.md

@@ -0,0 +1,24 @@
+# system smtp delete
+
+Use when the user needs to delete company SMTP configuration.
+
+Do not use it outside the system smtp operation or with fields absent from the inspected capability schema.
+
+Command:
+
+```bash
+ae-cli system smtp delete --dry-run --company-id <company-id>
+ae-cli system smtp delete --company-id <company-id> --yes
+```
+
+Capability id: `system.smtp.delete`.
+
+Run `--dry-run` first, summarize the affected target and impact, then wait for explicit user confirmation before rerunning the unchanged command with global `--yes`.
+
+The response uses `ok`, `data`, and `meta`. Treat empty `data` as success when `ok=true`; preserve `request_id` and `invocation_id` when present.
+
+## Parameters
+
+| Parameter | Required | Description |
+|---|---|---|
+| `--company-id` | Yes | Company ID. |

package/skills/ae-analysis/references/system_smtp_get.md

@@ -0,0 +1,21 @@
+# system smtp get
+
+Use when the user needs to get sanitized company SMTP configuration.
+
+Do not use it outside the system smtp operation or with fields absent from the inspected capability schema.
+
+Command:
+
+```bash
+ae-cli system smtp get --company-id <company-id>
+```
+
+Capability id: `system.smtp.get`.
+
+The response uses `ok`, `data`, and `meta`. Treat empty `data` as success when `ok=true`; preserve `request_id` and `invocation_id` when present.
+
+## Parameters
+
+| Parameter | Required | Description |
+|---|---|---|
+| `--company-id` | Yes | Company ID. |

package/skills/ae-analysis/references/system_smtp_test.md

@@ -0,0 +1,22 @@
+# system smtp test
+
+Use when the user needs to send one SMTP test using the saved configuration.
+
+Do not use it outside the system smtp operation or with fields absent from the inspected capability schema.
+
+Command:
+
+```bash
+ae-cli system smtp test --company-id <company-id> --receiver <receiver>
+```
+
+Capability id: `system.smtp.test`.
+
+The response uses `ok`, `data`, and `meta`. Treat empty `data` as success when `ok=true`; preserve `request_id` and `invocation_id` when present.
+
+## Parameters
+
+| Parameter | Required | Description |
+|---|---|---|
+| `--company-id` | Yes | Company ID. |
+| `--receiver` | Yes | Test email receiver. |

package/skills/ae-analysis/references/system_smtp_upsert.md

@@ -0,0 +1,31 @@
+# system smtp upsert
+
+Use when the user needs to create or update company SMTP configuration using a protected password source.
+
+Do not use it outside the system smtp operation or with fields absent from the inspected capability schema.
+
+Command:
+
+```bash
+ae-cli system smtp upsert --company-id <company-id> --server-host <server-host> --server-port <server-port> --sender-address <sender-address> --sender-name <sender-name> --password-file <chmod_600_file>
+```
+
+Capability id: `system.smtp.upsert`.
+
+Sensitive values are accepted only through a permission-protected file or stdin. Never put a secret value in argv, examples, logs, validation output, dry-run output, or the response.
+
+The response uses `ok`, `data`, and `meta`. Treat empty `data` as success when `ok=true`; preserve `request_id` and `invocation_id` when present.
+
+## Parameters
+
+| Parameter | Required | Description |
+|---|---|---|
+| `--company-id` | Yes | Company ID. |
+| `--server-host` | Yes | SMTP server host. |
+| `--server-port` | Yes | SMTP server port. |
+| `--has-encrypt` | No | Encryption mode: 0, 1, or 2. |
+| `--sender-address` | Yes | Sender email address. |
+| `--sender-name` | Yes | Sender display name. |
+| `--subject-prefix` | No | Optional subject prefix. |
+| `--password-file` | No | SMTP password. Read from a local permission-protected file; one of file/stdin is required. |
+| `--password-stdin` | No | SMTP password. Read from stdin; one of file/stdin is required. |

package/skills/ae-analysis/references/system_third_party_login_disable.md

@@ -0,0 +1,25 @@
+# system third-party-login disable
+
+Use when the user needs to disable a third-party login provider.
+
+Do not use it outside the system third-party-login operation or with fields absent from the inspected capability schema.
+
+Command:
+
+```bash
+ae-cli system third-party-login disable --dry-run --company-id <company-id> --login-type <login-type>
+ae-cli system third-party-login disable --company-id <company-id> --login-type <login-type> --yes
+```
+
+Capability id: `system.third_party_login.disable`.
+
+Run `--dry-run` first, summarize the affected target and impact, then wait for explicit user confirmation before rerunning the unchanged command with global `--yes`.
+
+The response uses `ok`, `data`, and `meta`. Treat empty `data` as success when `ok=true`; preserve `request_id` and `invocation_id` when present.
+
+## Parameters
+
+| Parameter | Required | Description |
+|---|---|---|
+| `--company-id` | Yes | Company ID. |
+| `--login-type` | Yes | Third-party login type. |

package/skills/ae-analysis/references/system_third_party_login_list.md

@@ -0,0 +1,21 @@
+# system third-party-login list
+
+Use when the user needs to list sanitized third-party login configurations.
+
+Do not use it outside the system third-party-login operation or with fields absent from the inspected capability schema.
+
+Command:
+
+```bash
+ae-cli system third-party-login list --company-id <company-id>
+```
+
+Capability id: `system.third_party_login.list`.
+
+The response uses `ok`, `data`, and `meta`. Treat empty `data` as success when `ok=true`; preserve `request_id` and `invocation_id` when present.
+
+## Parameters
+
+| Parameter | Required | Description |
+|---|---|---|
+| `--company-id` | Yes | Company ID. |

package/skills/ae-analysis/references/system_third_party_login_upsert.md

@@ -0,0 +1,33 @@
+# system third-party-login upsert
+
+Use when the user needs to create or update a third-party login configuration using protected secret sources.
+
+Do not use it outside the system third-party-login operation or with fields absent from the inspected capability schema.
+
+Command:
+
+```bash
+ae-cli system third-party-login upsert --company-id <company_id> --login-type feishu --app-id <app_id> --app-secret-file <chmod_600_file>
+ae-cli system third-party-login upsert --company-id <company_id> --login-type dingtalk --app-id <app_id> --corp-id <corp_id> --agent-id <agent_id> --dd-scan-app-id <scan_app_id> --app-secret-file <chmod_600_file> --dd-scan-app-secret-file <chmod_600_file>
+```
+
+Capability id: `system.third_party_login.upsert`.
+
+Sensitive values are accepted only through a permission-protected file or stdin. Never put a secret value in argv, examples, logs, validation output, dry-run output, or the response.
+
+The response uses `ok`, `data`, and `meta`. Treat empty `data` as success when `ok=true`; preserve `request_id` and `invocation_id` when present.
+
+## Parameters
+
+| Parameter | Required | Description |
+|---|---|---|
+| `--company-id` | Yes | Company ID. |
+| `--login-type` | Yes | Third-party login type. |
+| `--app-id` | Yes | Provider application ID. |
+| `--corp-id` | No | Provider corporation ID. |
+| `--agent-id` | No | Provider agent ID. |
+| `--dd-scan-app-id` | No | DingTalk scan-login application ID. |
+| `--app-secret-file` | No | Provider application secret. Read from a local permission-protected file; one of file/stdin is required. |
+| `--app-secret-stdin` | No | Provider application secret. Read from stdin; one of file/stdin is required. |
+| `--dd-scan-app-secret-file` | No | DingTalk scan-login application secret. Read from a local permission-protected file; the value is never accepted directly on argv. |
+| `--dd-scan-app-secret-stdin` | No | DingTalk scan-login application secret. Read from stdin; do not combine with --dd-scan-app-secret-file. |

package/skills/ae-analysis/references/system_usage_overview.md

@@ -0,0 +1,21 @@
+# system usage overview
+
+Use when the user needs to get the current company system-usage summary.
+
+Do not use it outside the system usage operation or with fields absent from the inspected capability schema.
+
+Command:
+
+```bash
+ae-cli system usage overview --company-id <company-id>
+```
+
+Capability id: `system.usage.overview`.
+
+The response uses `ok`, `data`, and `meta`. Treat empty `data` as success when `ok=true`; preserve `request_id` and `invocation_id` when present.
+
+## Parameters
+
+| Parameter | Required | Description |
+|---|---|---|
+| `--company-id` | Yes | Company ID. |

package/skills/ae-analysis/references/system_usage_trend_export.md

@@ -0,0 +1,44 @@
+# system usage-trend export
+
+Use when the user needs the complete usage-trend result as a cancellable gzip JSONL artifact.
+
+Do not use it for a small inline result; use `ae-cli system usage-trend query` instead.
+
+Command:
+
+```bash
+ae-cli system usage-trend export --company-id <company_id> --metric <metric> --start-time <yyyy-MM-dd> --end-time <yyyy-MM-dd> --time-granularity <day_or_week_or_month>
+```
+
+Capability id: `system.usage_trend.export`.
+
+The submit response returns the `run_id` for this exact export. Preserve it and poll:
+
+```bash
+ae-cli analysis run inspect --run-id <run_id>
+```
+
+When the run succeeds, preserve its `artifact_id` and download the same run-scoped artifact:
+
+```bash
+ae-cli analysis artifact download --run-id <run_id> --artifact-id <artifact_id> --output <output_path>
+```
+
+The artifact format is fixed gzip-compressed JSONL (`.jsonl.gz`); this command intentionally has no `--artifact-format`. Cancel an unfinished export with `ae-cli analysis query cancel --run-id <run_id>`.
+
+The response uses `ok`, `data`, and `meta`. Empty exported data is success when `ok=true`; preserve `request_id` and `invocation_id`.
+
+## Parameters
+
+| Parameter | Required | Description |
+|---|---|---|
+| `--company-id` | Yes | Company ID. |
+| `--metric` | Yes | One supported usage metric; `apollo_token` is not implemented. |
+| `--start-time` | Yes | Inclusive start date in `yyyy-MM-dd`. |
+| `--end-time` | Yes | Inclusive end date in `yyyy-MM-dd`. |
+| `--time-granularity` | Yes | `day`, `week`, or `month`. |
+| `--scope` | No | `company` or `project`; project scope requires `--project-ids`. |
+| `--project-ids` | No | Project ID JSON array. |
+| `--data-type` | No | `all`, `event`, or `user` for project-scoped total event volume. |
+| `--request-id` | No | Caller-supplied `cli_<32 lowercase hex>` lifecycle ID; generated when omitted. |
+| `--timeout-seconds` | No | Maximum runtime, `1..21600`; default `21600`. |

package/skills/ae-analysis/references/system_usage_trend_query.md

@@ -0,0 +1,28 @@
+# system usage-trend query
+
+Use when the user needs to query a bounded company or project usage trend.
+
+Do not use it outside the system usage-trend operation or with fields absent from the inspected capability schema.
+
+Command:
+
+```bash
+ae-cli system usage-trend query --company-id <company-id> --start-time <start-time> --end-time <end-time> --metric <metric> --time-granularity <time-granularity>
+```
+
+Capability id: `system.usage_trend.query`.
+
+The response uses `ok`, `data`, and `meta`. Treat empty `data` as success when `ok=true`; preserve `request_id` and `invocation_id` when present.
+
+## Parameters
+
+| Parameter | Required | Description |
+|---|---|---|
+| `--company-id` | Yes | Company ID. |
+| `--start-time` | Yes | Inclusive ISO date/time lower bound. |
+| `--end-time` | Yes | Inclusive ISO date/time upper bound. |
+| `--metric` | Yes | Supported usage metric; apollo_token is not available. |
+| `--time-granularity` | Yes | Aggregation granularity. |
+| `--scope` | No | Aggregation scope. |
+| `--project-ids` | No | Project ID JSON array; required for project scope. |
+| `--data-type` | No | Optional event-volume data type. |

package/skills/ae-dataops/SKILL.md

@@ -89,7 +89,7 @@ You must understand the following key concepts before use, otherwise errors are
 ### Flow Lifecycle
 
 ```
-Create DEV Flow → Create/Update DEV SQL Tasks → Configure Dependencies/Schedule → Preview Release → Release to PROD → PROD Manual Execution / Operations Troubleshooting
+Create DEV Flow → Create/Update DEV SQL, Integration, or Workflow Instance Check Tasks → Configure Dependencies/Schedule → Preview Release → Release to PROD → PROD Manual Execution / Operations Troubleshooting
 ```
 
 ### CRON Format (6 fields)