@thinkingai/ae-cli 6.1.19 → 6.1.21

package/dist/{capability-ASI62I4A.js → capability-FYTU3X6L.js}

@@ -3,36 +3,40 @@ import {
   normalizeRiskLevel,
   requiresConfirmation
 } from "./chunk-AMBFK2K3.js";
+import {
+  CapabilityGatewayError,
+  dryRunCapabilityWithEnvelope,
+  executeCapabilityWithEnvelope,
+  inspectCapability,
+  inspectCapabilityWithEnvelope,
+  listCapabilitiesWithEnvelope,
+  validateCapabilityWithEnvelope
+} from "./chunk-HFGZGYCG.js";
 import {
   findGatewayDomain,
+  listCapabilityDiscoveryPrefixes,
   listRegisteredCapabilityDomains,
   resolveGatewayDomain
-} from "./chunk-TKHSULJT.js";
+} from "./chunk-KPQY44JQ.js";
 import {
-  printError,
-  printOutput
-} from "./chunk-KEWVSO64.js";
+  resolveHost
+} from "./chunk-JOCDD4ON.js";
 import {
-  CapabilityGatewayError,
-  dryRunCapability,
-  executeCapability,
-  inspectCapability,
-  listCapabilities,
-  validateCapability
-} from "./chunk-GJXRF7Y6.js";
+  printError,
+  printOutput,
+  withOutputMetadata
+} from "./chunk-DX5CDO34.js";
 import "./chunk-Y74WTIKJ.js";
-import "./chunk-RWXIXOZG.js";
 import {
-  SecureStoreAuthError,
-  resolveHost
-} from "./chunk-O6K2ODUE.js";
+  SecureStoreAuthError
+} from "./chunk-7XGFSUOM.js";
 import {
   safeJsonParse
-} from "./chunk-KZ6ZHF5J.js";
+} from "./chunk-7FTTULED.js";
 import {
+  CliValidationError,
   PermissionError
-} from "./chunk-533JK3YX.js";
-import "./chunk-FR2EDAQM.js";
+} from "./chunk-MAPZ7VB6.js";
 
 // src/commands/capability/index.ts
 import * as readline from "readline";
@@ -49,9 +53,23 @@ var CapabilityCommandValidationError = class extends Error {
   hint;
   code;
 };
+var RETIRED_CAPABILITY_REPLACEMENTS = {
+  "governance.asset_authentication.dashboard_package": "ae-cli analysis-meta governance-recommendation export --project-id <project_id> --limit 20",
+  "metadata.metric.recommended_scan": "ae-cli analysis-meta governance-recommendation export --project-id <project_id> --limit 20",
+  "metadata.metric.recommended_create": "ae-cli analysis-meta governance-recommendation submit --project-id <project_id> --run-id <run_id> --topic-name <topic_name> --decisions <json>"
+};
 function capabilityNamespace(capabilityId) {
   return capabilityId.split(".")[0] ?? "";
 }
+function assertCapabilityIsNotRetired(capabilityId) {
+  const replacement = RETIRED_CAPABILITY_REPLACEMENTS[capabilityId.trim().toLowerCase()];
+  if (!replacement) return;
+  throw new CapabilityCommandValidationError(
+    `Capability '${capabilityId}' is retired for direct ae-cli capability invocation.`,
+    `Use the current recommendation workflow instead: ${replacement}`,
+    "CAPABILITY_RETIRED"
+  );
+}
 function resolveCapabilityGatewayDomain(capabilityId, domainOverride) {
   const cliDomain = domainOverride?.trim() || capabilityNamespace(capabilityId);
   if (!cliDomain) {
@@ -116,10 +134,14 @@ function normalizeCapabilityList(value) {
   });
 }
 function filterCapabilities(capabilities, domain, query) {
-  const prefix = `${domain.toLowerCase()}.`;
+  const prefixes = listCapabilityDiscoveryPrefixes(domain);
   const terms = query?.trim().toLowerCase().split(/\s+/).filter(Boolean) ?? [];
   return capabilities.filter((capability) => {
-    if (!capability.id.toLowerCase().startsWith(prefix)) {
+    if (RETIRED_CAPABILITY_REPLACEMENTS[capability.id.toLowerCase()]) {
+      return false;
+    }
+    const normalizedId = capability.id.toLowerCase();
+    if (!prefixes.some((prefix) => normalizedId.startsWith(prefix))) {
       return false;
     }
     if (terms.length === 0) {
@@ -178,15 +200,16 @@ function registerCapability(program) {
     await executeAndPrint(program, async (host) => {
       const gatewayDomain = resolveCapabilityListDomain(opts.domain);
       const projectId = parseOptionalProjectId(opts.projectId);
-      const catalog = normalizeCapabilityList(await listCapabilities(host, gatewayDomain, projectId));
+      const envelope = await listCapabilitiesWithEnvelope(host, gatewayDomain, projectId);
+      const catalog = normalizeCapabilityList(envelope.data);
       const capabilities = filterCapabilities(catalog, opts.domain);
       const warning = emptyCapabilityCatalogWarning(catalog);
-      return {
+      return withOutputMetadata({
         domain: opts.domain,
         count: capabilities.length,
         capabilities,
         ...warning ? { warning } : {}
-      };
+      }, envelope.meta);
     });
   }).addHelpText(
     "after",
@@ -199,16 +222,17 @@ function registerCapability(program) {
     await executeAndPrint(program, async (host) => {
       const gatewayDomain = resolveCapabilityListDomain(opts.domain);
       const projectId = parseOptionalProjectId(opts.projectId);
-      const catalog = normalizeCapabilityList(await listCapabilities(host, gatewayDomain, projectId));
+      const envelope = await listCapabilitiesWithEnvelope(host, gatewayDomain, projectId);
+      const catalog = normalizeCapabilityList(envelope.data);
       const capabilities = filterCapabilities(catalog, opts.domain, query);
       const warning = emptyCapabilityCatalogWarning(catalog);
-      return {
+      return withOutputMetadata({
         domain: opts.domain,
         query,
         count: capabilities.length,
         capabilities,
         ...warning ? { warning } : {}
-      };
+      }, envelope.meta);
     });
   }).addHelpText(
     "after",
@@ -216,8 +240,9 @@ function registerCapability(program) {
   );
   capability.command("inspect").description("Inspect one capability schema, risk, auth, and output metadata").argument("<capability-id>", "Capability ID, such as analysis.report.list").option("--domain <domain>", "Override the capability namespace used for gateway routing").option("--project-id <project-id>", "Check availability in a project before returning metadata").action(async (capabilityId, opts) => {
     await executeAndPrint(program, async (host) => {
+      assertCapabilityIsNotRetired(capabilityId);
       const gatewayDomain = resolveCapabilityGatewayDomain(capabilityId, opts.domain);
-      return inspectCapability(host, gatewayDomain, capabilityId, parseOptionalProjectId(opts.projectId));
+      return gatewayOutput(await inspectCapabilityWithEnvelope(host, gatewayDomain, capabilityId, parseOptionalProjectId(opts.projectId)), host);
     });
   }).addHelpText(
     "after",
@@ -227,8 +252,9 @@ function registerCapability(program) {
     "Validate and normalize capability input only (schema/params). Does not execute business logic. Use when crafting complex payloads (nested objects, qp, share/member payloads) before dry-run/run. Success data: valid, capability_id, normalized_input. Unlike dry-run, does not return risk/output_mode/supports_cancel preview."
   ).argument("<capability-id>", "Capability ID, such as metadata.data_table.sql_write").option("--domain <domain>", "Override the capability namespace used for gateway routing").option("--input <json-or-path>", "Input JSON object, file path, @<path>, or - for stdin").action(async (capabilityId, opts) => {
     await executeAndPrint(program, async (host) => {
+      assertCapabilityIsNotRetired(capabilityId);
       const gatewayDomain = resolveCapabilityGatewayDomain(capabilityId, opts.domain);
-      return validateCapability(host, gatewayDomain, capabilityId, parseCapabilityInput(opts.input));
+      return gatewayOutput(await validateCapabilityWithEnvelope(host, gatewayDomain, capabilityId, parseCapabilityInput(opts.input)), host);
     });
   }).addHelpText(
     "after",
@@ -249,8 +275,9 @@ Examples:
     "Full pre-execution confirmation without running business logic: validates/normalizes input and returns risk, output_mode, and supports_cancel. Use alone when you need that preview or a delete gate (do not stack after validate on the same final input by default). Global --dry-run on curated/capability run also hits this endpoint."
   ).argument("<capability-id>", "Capability ID, such as analysis.query.export").option("--domain <domain>", "Override the capability namespace used for gateway routing").option("--input <json-or-path>", "Input JSON object, file path, @<path>, or - for stdin").action(async (capabilityId, opts) => {
     await executeAndPrint(program, async (host) => {
+      assertCapabilityIsNotRetired(capabilityId);
       const gatewayDomain = resolveCapabilityGatewayDomain(capabilityId, opts.domain);
-      return dryRunCapability(host, gatewayDomain, capabilityId, parseCapabilityInput(opts.input));
+      return gatewayOutput(await dryRunCapabilityWithEnvelope(host, gatewayDomain, capabilityId, parseCapabilityInput(opts.input)), host);
     });
   }).addHelpText(
     "after",
@@ -261,6 +288,7 @@ Examples:
   );
   capability.command("run").description("Execute one capability by ID").argument("<capability-id>", "Capability ID, such as analysis.report.list").option("--domain <domain>", "Override the capability namespace used for gateway routing").option("--input <json-or-path>", "Input JSON object, file path, @<path>, or - for stdin").action(async (capabilityId, opts) => {
     await executeAndPrint(program, async (host, globalOpts) => {
+      assertCapabilityIsNotRetired(capabilityId);
       const gatewayDomain = resolveCapabilityGatewayDomain(capabilityId, opts.domain);
       const input = parseCapabilityInput(opts.input);
       if (globalOpts.validate && globalOpts.dryRun) {
@@ -270,10 +298,10 @@ Examples:
         );
       }
       if (globalOpts.validate) {
-        return validateCapability(host, gatewayDomain, capabilityId, input);
+        return gatewayOutput(await validateCapabilityWithEnvelope(host, gatewayDomain, capabilityId, input), host);
       }
       if (globalOpts.dryRun) {
-        return dryRunCapability(host, gatewayDomain, capabilityId, input);
+        return gatewayOutput(await dryRunCapabilityWithEnvelope(host, gatewayDomain, capabilityId, input), host);
       }
       if (!globalOpts.yes) {
         const metadata = await inspectCapability(host, gatewayDomain, capabilityId);
@@ -286,7 +314,7 @@ Examples:
           }
         }
       }
-      return executeCapability(host, gatewayDomain, capabilityId, input);
+      return gatewayOutput(await executeCapabilityWithEnvelope(host, gatewayDomain, capabilityId, input), host);
     });
   }).addHelpText(
     "after",
@@ -296,6 +324,15 @@ Examples:
   ae-cli capability run analysis.dashboard.list --input input.json`
   );
 }
+function gatewayOutput(envelope, host) {
+  return withOutputMetadata(withPageUrl(envelope.data, host), envelope.meta);
+}
+function withPageUrl(value, host) {
+  if (!value || typeof value !== "object" || Array.isArray(value)) return value;
+  const record = value;
+  if (typeof record.page_path !== "string" || !/^\/(?![\\/])/.test(record.page_path) || record.page_url !== void 0) return value;
+  return { ...record, page_url: new URL(record.page_path, host).toString() };
+}
 async function executeAndPrint(program, action) {
   const globalOpts = program.opts();
   const host = resolveHost(globalOpts.host);
@@ -315,13 +352,19 @@ async function executeAndPrint(program, action) {
       process.exitCode = 1;
       return;
     }
-    printCapabilityError(error);
+    printCapabilityError(error, host);
     process.exitCode = 1;
   }
 }
-function printCapabilityError(error) {
-  if (error instanceof CapabilityCommandValidationError) {
-    printError("validation", error.message, error.hint, error.code);
+function printCapabilityError(error, host) {
+  if (error instanceof CapabilityCommandValidationError || error instanceof CliValidationError) {
+    printError(
+      "validation",
+      error.message,
+      error.hint,
+      error.code,
+      error instanceof CliValidationError && error.location ? { location: error.location } : void 0
+    );
     return;
   }
   if (error instanceof SecureStoreAuthError) {
@@ -333,7 +376,7 @@ function printCapabilityError(error) {
     return;
   }
   if (error instanceof CapabilityGatewayError) {
-    printError("api", error.message, error.hint, error.code);
+    printError(error.type, error.message, error.hint, error.code, withPageUrl(error.meta, host));
     return;
   }
   const message = error instanceof Error ? error.message : String(error);