@thinkingai/ae-cli 6.1.12 → 6.1.14

package/skills/ae-metadata/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: ae-metadata
-version: 1.0.0
+version: 1.0.1
 description: "AE/TE metadata capability-gateway CLI: metadata data-table management and property dimension-table binding. Metadata CLI routes through the analysis gateway. Input-file upload and event/property detail belong to ae-analysis."
 ---
 
@@ -30,6 +30,7 @@ Safety:
 - Ordinary writes (`data-table *-write`, `property-bindings-update`, dimension-table bind/create) execute without `--yes`. Delete commands are `high-risk-write`: dry-run first, summarize impact, wait for explicit confirmation, then execute with `--yes`.
 - **Before any command**, read the matching `references/<name>.md` (filename = command with spaces → underscores, e.g. `metadata data-table list` → `metadata_data_table_list.md`).
 - Never invent `project_id`, event/property names, `input_file_id`, or `data_table_id`. Discover names via `ae-analysis` and data table IDs via `metadata data-table list`.
+- `metadata data-table download` is an async artifact command: plain invocation submits, `--wait` waits, and `--output <file>` waits then streams atomically. Resume with `analysis run wait`; local interruption never cancels the remote run.
 
 ## When to Use
 

package/skills/ae-metadata/references/metadata_data_table_download.md

@@ -5,6 +5,7 @@
 ```bash
 ae-cli metadata data-table download --project-id <project_id> --data-table-id <id>
 ae-cli metadata data-table download --project-id <project_id> --data-table-id <id> --request-id cli_0123456789abcdef0123456789abcdef --timeout-seconds 120
+ae-cli metadata data-table download --project-id <project_id> --data-table-id <id> --output <file>
 ```
 
 | Parameter | Required | Description |
@@ -12,6 +13,13 @@ ae-cli metadata data-table download --project-id <project_id> --data-table-id <i
 | `--project-id` / `-p` | Yes | Numeric project ID. |
 | `--data-table-id` | Yes | Data table ID. |
 | `--request-id` | No | Optional `cli_<32 lowercase hex>` request ID. |
-| `--timeout-seconds` | No | Timeout in seconds, 1 to 7200. |
+| `--timeout-seconds` | No | Remote runtime in seconds, 1 to 21600. |
+| `--wait` | No | Wait for run `SUCCEEDED` and artifact `COMPLETED`. |
+| `--output` | No | Wait, then stream and atomically publish the artifact to this file. |
+| `--force` | No | Replace an existing `--output` file atomically; invalid without `--output`. |
 
-Use this command when the user needs an exported data-table artifact.
+Use this command when the user needs an exported data-table artifact. Plain
+invocation submits only. `--output` implies `--wait`; resume an interrupted
+wait with `ae-cli analysis run wait --run-id <run_id> [--output <file>]`.
+Local interruption never cancels the remote run. Do not use this command for
+inline data-table metadata; use `metadata data-table get` instead.

package/skills/ae-metadata/references/metadata_data_table_list.md

@@ -5,7 +5,7 @@
 ## Command
 
 ```bash
-ae-cli metadata data-table list --project-id <project_id>
+ae-cli metadata data-table list --project-id <project_id> --limit 50 --offset 0
 ae-cli metadata data-table list --project-id <project_id> --dry-run
 ```
 
@@ -14,14 +14,17 @@ ae-cli metadata data-table list --project-id <project_id> --dry-run
 | Parameter | Required | Description |
 |---|---|---|
 | `--project-id` / `-p` | Yes | Numeric project ID. |
+| `--limit` / `-l` | No | Page size. Default: 50, maximum: 200. |
+| `--offset` / `-o` | No | Zero-based page offset. Default: 0. |
 
 ## Request Body
 
 ```json
-{ "project_id": 1 }
+{ "project_id": 1, "limit": 50, "offset": 0 }
 ```
 
 ## Decision Rules
 
 - Use this command to discover `data_table_id` before get, delete, download, or property binding.
 - If the list is empty, do not invent IDs; create/upload a table first or ask for the target table.
+- Read rows from `data.items`; pagination metadata is always `total`, `limit`, `offset`, `has_more`, and `next_offset`.

package/skills/ae-metadata/references/metadata_property_dimension_table_bind_existing.md

@@ -18,7 +18,7 @@ ae-cli metadata property bind-existing-dimension-table --project-id <project_id>
 | `--property-scope` | Yes | Property owner table, for example `event` or `user`. |
 | `--data-table-id` | Yes | Existing dimension data table ID. |
 | `--timestamp-join-format` | No | Timestamp join format. |
-| `--dict-columns` | No | Dictionary column names JSON array. |
+| `--dict-columns` | No | Dictionary column names JSON array. The CLI converts each string to the canonical `{"column_name":"..."}` object required by the capability. |
 
 ## Decision Rules
 

package/skills/ae-system/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: ae-system
-version: 1.0.0
-description: "AE Agent system administration CLI for root and agent administrators. Use when the user asks to manage Agent members, sandboxes, company model visibility/defaults, usage statistics, cost quotas, balance alerts, or IM channels. Must use ae-cli system commands, discover real IDs before writes, and never attempt to bypass a permission denial."
+version: 1.1.0
+description: "AE Agent system administration CLI for root and agent administrators. Use when the user asks to manage Agent members, sandboxes and shared tools, company model visibility/defaults/pricing, usage statistics and exports, cost quotas, balance alerts, or IM channels. Must use ae-cli system commands, discover real IDs before writes, and never attempt to bypass a permission denial."
 ---
 
 # ae-system
@@ -19,11 +19,13 @@ ae-cli system +<command> [options]
 - Run `ae-cli auth login --host <host>` before using this domain. System administration requires a user access-token session; sandbox identity headers are not an authorization substitute.
 - `+npm-install` is the exception that must also run inside a Linux te-agent sandbox because it packages the installed Linux files. It still requires the logged-in user to be `root` or `agent_admin`.
 - Discover real IDs with a list command before any update or delete. Never guess a user, sandbox, model, quota rule, or channel ID.
-- Read and ordinary write commands run without confirmation. Commands marked `high-risk-write` require confirmation unless the user explicitly authorizes `--yes`.
+- Before every write, run `--dry-run`, show the target and effect, and obtain explicit user confirmation. The CLI itself prompts only for `high-risk-write`; `--yes` can bypass that prompt and is not a security boundary.
 - Use `--dry-run` to inspect method, path, query, and redacted body without executing.
 - JSON inputs accept inline JSON, `@file`, or `-` for stdin. Prefer `@file` for channel credentials and other sensitive values.
 - Successful output is JSON by default. Use `--format table` only when a human-readable table is more useful.
 - After each command, check stderr and `_notice.host_compat`. If present, show the version warning and its update commands before the business result.
+- Do not treat an absent ae-cli command as proof that an HTTP endpoint is unreachable. An Agent with Bash/network access can construct requests directly; server authentication, role checks, company isolation, and resource ownership are the actual controls.
+- Do not call `DELETE /api/admin/members?openId=...` or `/api/internal/sandboxes/**` through ad-hoc HTTP. They are intentionally excluded from this Skill because other systems own those integration contracts.
 
 ## Command Groups
 
@@ -37,6 +39,7 @@ ae-cli system +<command> [options]
 | `+set-member-status` | write | Enable or disable a member. |
 | `+set-member-role` | write | Change a non-root member between `agent_admin` and `member`. |
 | `+remove-member` | high-risk-write | Remove a non-root member. |
+| `+get-member-stats` | read | Get one member's token usage and recent conversation count. |
 
 Examples:
 
@@ -77,6 +80,7 @@ Optional flags are `--rule-id` and `--create-sandbox true|false`.
 | Command | Risk | Purpose |
 | --- | --- | --- |
 | `+list-sandboxes` | read | List company sandboxes. |
+| `+get-sandbox-config` | read | Read feature status and create/active seat limits. |
 | `+batch-create-sandboxes` | write | Create personal sandboxes for 1-100 users. |
 | `+update-sandbox` | write | Update a sandbox description. |
 | `+set-sandbox-enabled` | write | Enable or disable a sandbox. |
@@ -106,9 +110,33 @@ Use Agent database user IDs from `+list-members`, not TE openIds, for sandbox co
 | --- | --- | --- |
 | `+upload-sandbox-tool` | write | Validate, ZIP, and upload an existing tool directory. |
 | `+npm-install` | write | Install one exact npm CLI version in a temporary sandbox directory, generate `tool.json`, and upload it. |
+| `+list-sandbox-tools` | read | List preset and custom tools for the current company. |
+| `+sync-sandbox-tools` | write | Synchronize preset tools from the server manifest. |
+| `+get-sandbox-tool-distribution` | read | Read the sandboxes currently receiving one tool. |
+| `+set-sandbox-tool-enabled` | write | Enable or disable one registered tool. |
+| `+remove-sandbox-tool` | high-risk-write | Delete a fully reclaimed tool registration. |
+| `+activate-sandbox-tools` | write | Activate selected commands on selected or all running sandboxes. |
+| `+deactivate-sandbox-tools` | write | Remove managed command shims from selected or all running sandboxes. |
+| `+refresh-sandbox-tool-status` | write | Refresh observed tool state on target sandboxes. |
+| `+list-sandbox-tool-operations` | read | List activation/deactivation history. |
 
 Uploaded tools are registered for the current company with `enabled=false`. Upload does not activate the tool in any running sandbox. Review and enable/activate it through sandbox tool management after upload.
 
+For activate/deactivate/status operations:
+
+```bash
+ae-cli system +activate-sandbox-tools \
+  --target-mode selected \
+  --sandbox-ids '["<sandbox-id>"]' \
+  --tool-ids '["<tool-id>"]'
+```
+
+- `--target-mode selected` requires 1-50 `--sandbox-ids`; `all-running` forbids them.
+- `--tool-ids` contains 1-20 real IDs from `+list-sandbox-tools`.
+- `--command-names-by-tool-id` optionally limits an operation to named commands.
+- `--expected-tool-snapshots-by-id` carries the version/package/command snapshot returned by the server for optimistic concurrency checks.
+- JSON maps accept inline JSON, `@file`, or stdin. Use dry-run and user confirmation before distribution changes.
+
 #### Preferred npm Flow
 
 Run this inside the target Linux te-agent sandbox:
@@ -189,6 +217,9 @@ Upload contract:
 | --- | --- | --- |
 | `+list-system-models` | read | List system models and company visibility. |
 | `+set-system-model-enabled` | write | Toggle a system model for the current company. |
+| `+get-model-sync-settings` | read | Read the default visibility policy for newly synchronized system models. |
+| `+set-model-sync-settings` | write | Update the new-system-model visibility policy. |
+| `+get-system-model-price-rules` | read | Read one managed system model's stored pricing snapshot. |
 | `+list-company-models` | read | List company models, including disabled models. |
 | `+set-company-model-enabled` | write | Toggle a company model for all company users. |
 | `+get-default-models` | read | Read the `AE_AGENT` and `AI_QA` default slots. |
@@ -211,11 +242,16 @@ ae-cli system +set-default-model --model-id <model-id> --biz-type AE_AGENT
 | --- | --- | --- |
 | `+get-usage-summary` | read | Get token/cost summary for a relative or absolute range. |
 | `+get-usage-details` | read | Get paginated usage grouped by user, model, date, or application type. |
+| `+get-agent-tool-calls` | read | Get Agent tool-call count for a range, optionally refreshing the cache. |
+| `+get-usage-combinations` | read | Drill one parent group into the remaining dimensions. |
+| `+export-usage` | read | Stream filtered one-dimension usage groups to CSV. |
+| `+export-usage-details` | read | Stream full or drill-down multi-dimension details to CSV. |
 
 Examples:
 
 ```bash
 ae-cli system +get-usage-summary --days 30
+ae-cli system +get-usage-summary --days 30 --refresh true
 
 ae-cli system +get-usage-details \
   --start-date 2026-07-01 \
@@ -223,12 +259,26 @@ ae-cli system +get-usage-details \
   --group-by user \
   --page 1 \
   --page-size 20
+
+ae-cli system +get-usage-combinations \
+  --start-date 2026-07-01 \
+  --end-date 2026-07-24 \
+  --parent-dimension user \
+  --open-id <open-id>
+
+ae-cli system +export-usage \
+  --start-date 2026-07-01 \
+  --end-date 2026-07-24 \
+  --group-by user \
+  --output ./system-usage.csv
 ```
 
 Summary range:
 
 - Use `--days 1..365`, or provide both `--start-date` and `--end-date`.
 - Dates use `YYYY-MM-DD`.
+- Do not combine `--days` with an absolute date pair.
+- `--refresh true` is available on `+get-usage-summary` and `+get-agent-tool-calls` and bypasses the overview cache.
 
 Details flags:
 
@@ -239,11 +289,22 @@ Details flags:
 - `--sort-by`: `totalTokens | cost | share | requestCount`.
 - `--sort-dir`: `asc | desc`.
 
+Combination drill-down requires exactly one parent selector:
+
+- `user` → `--open-id` only.
+- `model` → `--model-id` and `--model-scope` only.
+- `app_type` → `--app-type` only.
+- `date` → `--date` only, inside the selected range.
+
+CSV exports require an explicit `--output`. The target is created exclusively: an existing file is never overwritten, and an HTTP or stream failure removes the incomplete file. The JSON result reports the absolute local path, bytes written, server filename, and content type.
+
 ### Cost Control
 
 | Command | Risk | Purpose |
 | --- | --- | --- |
 | `+get-cost-summary` | read | Get company cost, quota, and usage summary. |
+| `+get-balance` | read | Get the current model account balance and currency. |
+| `+list-over-limit-users` | read | List members over cost or token quota limits. |
 | `+get-balance-alert` | read | Get balance alert config and current status. |
 | `+set-balance-alert` | write | Enable, update, or disable the balance alert. |
 | `+list-quota-rules` | read | List cost/token quota rules. |
@@ -347,6 +408,8 @@ On this response:
 2. Do not recommend re-login unless the server returned 401 instead.
 3. Tell the user that `root` or `agent_admin` is required.
 
+An authenticated `root` or `agent_admin` is still scoped to their own company. The current service checks the database role and company against the session, and audited member, channel, sandbox-tool, and sandbox-management routes apply company/resource ownership checks. Never use that statement as a claim that every unreviewed admin route is safe.
+
 ## Transport Status
 
 This is a Transitional L2 domain backed by te-agent `/api/admin/**`.

package/dist/chunk-DT6Y3TD7.js

@@ -1,232 +0,0 @@
-import {
-  getAnalysisMappingPathForClusterMode
-} from "./chunk-NBPKWKRA.js";
-import {
-  clearCliToken,
-  getCliToken
-} from "./chunk-Z3OXWCIA.js";
-import {
-  getActiveHost,
-  safeJsonParse
-} from "./chunk-GJJA4CQZ.js";
-import {
-  PermissionError
-} from "./chunk-AXDXJTPC.js";
-import {
-  logger
-} from "./chunk-JHENBQ5B.js";
-
-// src/core/mcp.ts
-async function permissionMessage(resp) {
-  const text = await resp.text().catch(() => "");
-  try {
-    const d = safeJsonParse(text);
-    const msg = d && (d.error?.message || (typeof d.error === "string" ? d.error : void 0) || d.message);
-    if (msg && typeof msg === "string") return msg;
-  } catch {
-  }
-  return "Permission denied for this resource (HTTP 403)";
-}
-function isInvalidCliTokenMessage(message) {
-  return /\b(cli[-_\s]?token|token)\b.*\binvalid\b/i.test(message) || /\binvalid\b.*\b(cli[-_\s]?token|token)\b/i.test(message);
-}
-var MCP_PROTOCOL_VERSION = "2025-11-25";
-var JSONRPC_VERSION = "2.0";
-var serviceMappingMap = /* @__PURE__ */ new Map();
-registerMcpMapping("analysis", {
-  componentName: "analysis",
-  mappingPath: "analysis"
-});
-registerMcpMapping("te_analysis_extend", {
-  componentName: "analysis",
-  mappingPath: "analysis-extend"
-});
-function registerMcpMapping(serviceName, mapping) {
-  serviceMappingMap.set(serviceName, mapping);
-}
-function registerMcpMappings(mappings) {
-  for (const [serviceName, mapping] of Object.entries(mappings)) {
-    serviceMappingMap.set(serviceName, mapping);
-  }
-}
-function getMcpMapping(serviceName) {
-  const mapping = serviceMappingMap.get(serviceName);
-  if (!mapping) {
-    throw new Error(`MCP mapping not found for service: '${serviceName}'. Please register it using registerMcpMapping() first.`);
-  }
-  if (serviceName === "analysis") {
-    return { ...mapping, mappingPath: getAnalysisMappingPathForClusterMode() };
-  }
-  return mapping;
-}
-function buildMcpUrl(host, serviceName) {
-  const mapping = getMcpMapping(serviceName);
-  const base = host.replace(/\/+$/, "");
-  return `${base}/mcp/${mapping.componentName}/http/${mapping.mappingPath}`;
-}
-function resolveMcpUrl(mcpUrlOverride, host, serviceName) {
-  if (mcpUrlOverride) {
-    return mcpUrlOverride;
-  }
-  return buildMcpUrl(host, serviceName);
-}
-var requestIdCounter = 1;
-function genRequestId() {
-  return requestIdCounter++;
-}
-function buildAuthHeaders(cliToken) {
-  return {
-    "cli-token": cliToken
-  };
-}
-async function mcpRequest(url, method, params = {}, hostOverride) {
-  const hostUrl = hostOverride || getActiveHost();
-  const token = await getCliToken(hostUrl);
-  const requestId = genRequestId();
-  const paramsWithMeta = {
-    ...params,
-    _meta: { progressToken: requestId }
-  };
-  const body = {
-    jsonrpc: JSONRPC_VERSION,
-    id: requestId,
-    method,
-    params: paramsWithMeta
-  };
-  const headers = {
-    "Content-Type": "application/json",
-    "Accept": "application/json, text/event-stream",
-    "mcp-protocol-version": MCP_PROTOCOL_VERSION,
-    "X-Source": "ae-cli",
-    ...buildAuthHeaders(token)
-  };
-  const resp = await fetch(url, {
-    method: "POST",
-    headers,
-    body: JSON.stringify(body)
-  });
-  if (!resp.ok) {
-    let permissionMsg;
-    if (resp.status === 403) {
-      permissionMsg = await permissionMessage(resp);
-      if (!isInvalidCliTokenMessage(permissionMsg)) {
-        throw new PermissionError(permissionMsg);
-      }
-    }
-    if (resp.status === 401 || resp.status === 403 && permissionMsg) {
-      logger.warn(`MCP request failed (${resp.status === 403 ? permissionMsg : "HTTP 401"}) for ${hostUrl}, refreshing CLI token`);
-      clearCliToken(hostUrl);
-      const newToken = await getCliToken(hostUrl);
-      logger.info(`CLI token refreshed for ${hostUrl}`);
-      process.stderr.write(`[ae-cli] CLI token refreshed for ${hostUrl}
-`);
-      Object.assign(headers, buildAuthHeaders(newToken));
-      const retryResp = await fetch(url, {
-        method: "POST",
-        headers,
-        body: JSON.stringify(body)
-      });
-      if (retryResp.status === 403) {
-        throw new PermissionError(await permissionMessage(retryResp));
-      }
-      if (!retryResp.ok) {
-        throw new Error(`MCP HTTP error: ${retryResp.status} ${retryResp.statusText}`);
-      }
-      const retryData = safeJsonParse(await retryResp.text());
-      if (retryData.error) {
-        throw new Error(`MCP error: ${retryData.error.message || JSON.stringify(retryData.error)}`);
-      }
-      return retryData.result;
-    }
-    throw new Error(`MCP HTTP error: ${resp.status} ${resp.statusText}`);
-  }
-  const data = safeJsonParse(await resp.text());
-  if (data.error) {
-    throw new Error(`MCP error: ${data.error.message || JSON.stringify(data.error)}`);
-  }
-  return data.result;
-}
-async function callMcpTool(url, toolName, args = {}, hostOverride) {
-  const params = {
-    name: toolName,
-    arguments: args
-  };
-  logger.info(`MCP tool call: ${toolName}`);
-  const result = await mcpRequest(url, "tools/call", params, hostOverride);
-  if (result.isError) {
-    logger.warn(`MCP tool call failed: ${toolName}`);
-  }
-  return {
-    content: result.content.map((item) => {
-      if (item.type === "text") {
-        return { type: "text", text: item.text };
-      } else if (item.type === "image") {
-        return { type: "image", data: item.data, mimeType: item.mimeType };
-      } else {
-        return { type: "resource", ...item };
-      }
-    }),
-    isError: result.isError
-  };
-}
-function parseMcpResult(result) {
-  if (result.isError) {
-    const firstText = result.content.find((item) => item.type === "text")?.text || "";
-    let errorMessage = firstText.trim() || "MCP tool call failed";
-    try {
-      const parsed = safeJsonParse(firstText);
-      errorMessage = mcpResultErrorMessage(parsed) || errorMessage;
-    } catch {
-    }
-    throwMcpError(errorMessage);
-  }
-  if (result.content.length > 0 && result.content[0].type === "text") {
-    const text = result.content[0].text || "";
-    let parsed;
-    try {
-      parsed = safeJsonParse(text);
-    } catch {
-      return text;
-    }
-    const errMsg = mcpResultErrorMessage(parsed);
-    if (errMsg !== null) {
-      throwMcpError(errMsg);
-    }
-    return parsed;
-  }
-  return result;
-}
-function mcpResultErrorMessage(parsed) {
-  if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) return null;
-  if (parsed.success === true || parsed.ok === true) return null;
-  const explicitlyFailed = parsed.success === false || parsed.ok === false;
-  const e = parsed.error;
-  if (typeof e === "string" && e.trim()) return e;
-  if (e && typeof e === "object") {
-    const msg = typeof e.message === "string" && e.message || void 0;
-    const code = typeof e.code === "string" && e.code || void 0;
-    if (msg && code) return `${code}: ${msg}`;
-    if (msg || code) return msg || code;
-  }
-  if (explicitlyFailed) {
-    const msg = typeof parsed.message === "string" && parsed.message.trim() ? parsed.message.trim() : void 0;
-    const codeValue = parsed.errorCode ?? parsed.error_code ?? parsed.code;
-    const code = typeof codeValue === "string" && codeValue.trim() ? codeValue.trim() : void 0;
-    if (msg && code) return `${code}: ${msg}`;
-    return msg || code || "MCP tool call failed";
-  }
-  return null;
-}
-function throwMcpError(message) {
-  if (/no_auth|auth_error|permission|forbidden|unauthor|\u65e0\u6743/i.test(message)) {
-    throw new PermissionError(message);
-  }
-  throw new Error(message);
-}
-
-export {
-  registerMcpMappings,
-  resolveMcpUrl,
-  callMcpTool,
-  parseMcpResult
-};