@thinkingai/ae-cli 6.1.20 → 6.1.21

package/README.md

@@ -115,7 +115,7 @@ The table covers every current root command individually. Use `ae-cli --help` fo
 | Analysis and projects | `project` | Project information, members, roles, permissions, entities, time zones, and handover settings |
 | Analysis and projects | `metadata` | Capability-backed data-table, property, and dimension-table binding operations |
 | Analysis and projects | `personal-semantic-preference` | Project-scoped lightweight semantic preferences for the current user |
-| Analysis and projects | `project-semantic` | Governed project semantics, asset packages, candidate validation, review, and publishing |
+| Analysis and projects | `project-semantic` | Governed project semantics, knowledge-base asset packages, candidate validation, review, and publishing |
 | Data and tracking | `tracking` | Tracking plans, SDK samples, checks, ingestion diagnostics, code generation, and bundled wiki |
 | Data and tracking | `data-integration` | Inspect, plan, convert, upload, hand off, and reuse local CSV/JSON/Excel data |
 | Community insights | `community` | Community posts, comments, topics, sentiment, livestream, and report workflows |
@@ -134,6 +134,7 @@ The table covers every current root command individually. Use `ae-cli --help` fo
 | DataOps | `dataops_operations` | Operations, monitoring, and alert workflows |
 | Agent platform | `kb` | Knowledge-base lifecycle, LLM Q&A, and deterministic index/grep/read retrieval |
 | Agent platform | `agent` | Agents, approvals, automations, models, MCP servers, Skills, attachments, credentials, and sandbox tools |
+| Agent platform | `context` | Read the current product-page context authorized for the active Agent Run |
 | Agent platform | `memory` | User memory, Top-K context writing, and actual-usage accounting |
 | Agent platform | `team` | Agent Team and TeamRun execution, chat, results, and artifacts |
 | Agent platform | `system` | Root/admin management of members, sandboxes, tools, models, usage, quotas, and channels |

package/README.zh.md

@@ -119,7 +119,7 @@ ae-cli capability list --domain analysis --jq '.data.capabilities[] | .id'
 | 分析与项目 | `project` | 项目信息、成员、角色、权限、实体、时区和交接配置 |
 | 分析与项目 | `metadata` | 基于 Capability Gateway 的数据表、属性及维度表绑定 |
 | 分析与项目 | `personal-semantic-preference` | 当前用户按项目维护轻量个人语义偏好 |
-| 分析与项目 | `project-semantic` | 项目语义治理、资产包、候选校验、审核和发布 |
+| 分析与项目 | `project-semantic` | 项目语义治理、知识库资产包、候选校验、审核和发布 |
 | 数据与埋点 | `tracking` | 埋点方案、SDK 示例、检查、采集诊断、代码生成和内置 Wiki |
 | 数据与埋点 | `data-integration` | 检查、规划、转换、上传、交接和复用本地 CSV/JSON/Excel 数据 |
 | 社区洞察 | `community` | 社区帖子、评论、话题、情感、直播和报告工作流 |
@@ -138,6 +138,7 @@ ae-cli capability list --domain analysis --jq '.data.capabilities[] | .id'
 | DataOps | `dataops_operations` | 运维、监控和告警工作流 |
 | Agent 平台 | `kb` | 知识库生命周期、LLM 问答及确定性的 index/grep/read 检索 |
 | Agent 平台 | `agent` | Agent、审批、自动化、模型、MCP、Skills、附件、凭证和沙盒工具 |
+| Agent 平台 | `context` | 读取当前 Agent Run 已授权的产品页面上下文 |
 | Agent 平台 | `memory` | 用户记忆、Top-K 上下文写入和实际采用计数 |
 | Agent 平台 | `team` | Agent Team 和 TeamRun 的执行、对话、结果及产物 |
 | Agent 平台 | `system` | root/admin 的成员、沙盒、工具、模型、用量、配额和渠道管理 |

package/dist/{auth-FUM37MHF.js → auth-XZNXFRJS.js}

@@ -12,12 +12,12 @@ import {
 } from "./chunk-E2JKXMVO.js";
 import {
   resolveHost
-} from "./chunk-ECBLHAZO.js";
+} from "./chunk-JOCDD4ON.js";
 import {
   printError,
   printOutput,
   runHostCompatCheck
-} from "./chunk-CZU3V3DQ.js";
+} from "./chunk-DX5CDO34.js";
 import {
   CliTokenValidationUnavailableError,
   SecureStoreAuthError,
@@ -31,17 +31,17 @@ import {
   saveCredential,
   updateCredentialMetadata,
   validateCliTokenOnServer
-} from "./chunk-ATSM5XAW.js";
+} from "./chunk-7XGFSUOM.js";
 import {
   getFallbackCliToken,
   loadConfig,
   normalizeUrl,
   saveConfig
-} from "./chunk-WZ6YVQSF.js";
+} from "./chunk-7FTTULED.js";
 import {
   PermissionError,
   logger
-} from "./chunk-4P355ZWB.js";
+} from "./chunk-MAPZ7VB6.js";
 
 // src/core/device-auth.ts
 import { execFileSync } from "child_process";

package/dist/{capability-AXFQW5WM.js → capability-FYTU3X6L.js}

@@ -11,30 +11,32 @@ import {
   inspectCapabilityWithEnvelope,
   listCapabilitiesWithEnvelope,
   validateCapabilityWithEnvelope
-} from "./chunk-QJQZH5GQ.js";
+} from "./chunk-HFGZGYCG.js";
 import {
   findGatewayDomain,
+  listCapabilityDiscoveryPrefixes,
   listRegisteredCapabilityDomains,
   resolveGatewayDomain
-} from "./chunk-TKHSULJT.js";
+} from "./chunk-KPQY44JQ.js";
 import {
   resolveHost
-} from "./chunk-ECBLHAZO.js";
+} from "./chunk-JOCDD4ON.js";
 import {
   printError,
   printOutput,
   withOutputMetadata
-} from "./chunk-CZU3V3DQ.js";
+} from "./chunk-DX5CDO34.js";
 import "./chunk-Y74WTIKJ.js";
 import {
   SecureStoreAuthError
-} from "./chunk-ATSM5XAW.js";
+} from "./chunk-7XGFSUOM.js";
 import {
   safeJsonParse
-} from "./chunk-WZ6YVQSF.js";
+} from "./chunk-7FTTULED.js";
 import {
+  CliValidationError,
   PermissionError
-} from "./chunk-4P355ZWB.js";
+} from "./chunk-MAPZ7VB6.js";
 
 // src/commands/capability/index.ts
 import * as readline from "readline";
@@ -51,9 +53,23 @@ var CapabilityCommandValidationError = class extends Error {
   hint;
   code;
 };
+var RETIRED_CAPABILITY_REPLACEMENTS = {
+  "governance.asset_authentication.dashboard_package": "ae-cli analysis-meta governance-recommendation export --project-id <project_id> --limit 20",
+  "metadata.metric.recommended_scan": "ae-cli analysis-meta governance-recommendation export --project-id <project_id> --limit 20",
+  "metadata.metric.recommended_create": "ae-cli analysis-meta governance-recommendation submit --project-id <project_id> --run-id <run_id> --topic-name <topic_name> --decisions <json>"
+};
 function capabilityNamespace(capabilityId) {
   return capabilityId.split(".")[0] ?? "";
 }
+function assertCapabilityIsNotRetired(capabilityId) {
+  const replacement = RETIRED_CAPABILITY_REPLACEMENTS[capabilityId.trim().toLowerCase()];
+  if (!replacement) return;
+  throw new CapabilityCommandValidationError(
+    `Capability '${capabilityId}' is retired for direct ae-cli capability invocation.`,
+    `Use the current recommendation workflow instead: ${replacement}`,
+    "CAPABILITY_RETIRED"
+  );
+}
 function resolveCapabilityGatewayDomain(capabilityId, domainOverride) {
   const cliDomain = domainOverride?.trim() || capabilityNamespace(capabilityId);
   if (!cliDomain) {
@@ -118,10 +134,14 @@ function normalizeCapabilityList(value) {
   });
 }
 function filterCapabilities(capabilities, domain, query) {
-  const prefix = `${domain.toLowerCase()}.`;
+  const prefixes = listCapabilityDiscoveryPrefixes(domain);
   const terms = query?.trim().toLowerCase().split(/\s+/).filter(Boolean) ?? [];
   return capabilities.filter((capability) => {
-    if (!capability.id.toLowerCase().startsWith(prefix)) {
+    if (RETIRED_CAPABILITY_REPLACEMENTS[capability.id.toLowerCase()]) {
+      return false;
+    }
+    const normalizedId = capability.id.toLowerCase();
+    if (!prefixes.some((prefix) => normalizedId.startsWith(prefix))) {
       return false;
     }
     if (terms.length === 0) {
@@ -220,6 +240,7 @@ function registerCapability(program) {
   );
   capability.command("inspect").description("Inspect one capability schema, risk, auth, and output metadata").argument("<capability-id>", "Capability ID, such as analysis.report.list").option("--domain <domain>", "Override the capability namespace used for gateway routing").option("--project-id <project-id>", "Check availability in a project before returning metadata").action(async (capabilityId, opts) => {
     await executeAndPrint(program, async (host) => {
+      assertCapabilityIsNotRetired(capabilityId);
       const gatewayDomain = resolveCapabilityGatewayDomain(capabilityId, opts.domain);
       return gatewayOutput(await inspectCapabilityWithEnvelope(host, gatewayDomain, capabilityId, parseOptionalProjectId(opts.projectId)), host);
     });
@@ -231,6 +252,7 @@ function registerCapability(program) {
     "Validate and normalize capability input only (schema/params). Does not execute business logic. Use when crafting complex payloads (nested objects, qp, share/member payloads) before dry-run/run. Success data: valid, capability_id, normalized_input. Unlike dry-run, does not return risk/output_mode/supports_cancel preview."
   ).argument("<capability-id>", "Capability ID, such as metadata.data_table.sql_write").option("--domain <domain>", "Override the capability namespace used for gateway routing").option("--input <json-or-path>", "Input JSON object, file path, @<path>, or - for stdin").action(async (capabilityId, opts) => {
     await executeAndPrint(program, async (host) => {
+      assertCapabilityIsNotRetired(capabilityId);
       const gatewayDomain = resolveCapabilityGatewayDomain(capabilityId, opts.domain);
       return gatewayOutput(await validateCapabilityWithEnvelope(host, gatewayDomain, capabilityId, parseCapabilityInput(opts.input)), host);
     });
@@ -253,6 +275,7 @@ Examples:
     "Full pre-execution confirmation without running business logic: validates/normalizes input and returns risk, output_mode, and supports_cancel. Use alone when you need that preview or a delete gate (do not stack after validate on the same final input by default). Global --dry-run on curated/capability run also hits this endpoint."
   ).argument("<capability-id>", "Capability ID, such as analysis.query.export").option("--domain <domain>", "Override the capability namespace used for gateway routing").option("--input <json-or-path>", "Input JSON object, file path, @<path>, or - for stdin").action(async (capabilityId, opts) => {
     await executeAndPrint(program, async (host) => {
+      assertCapabilityIsNotRetired(capabilityId);
       const gatewayDomain = resolveCapabilityGatewayDomain(capabilityId, opts.domain);
       return gatewayOutput(await dryRunCapabilityWithEnvelope(host, gatewayDomain, capabilityId, parseCapabilityInput(opts.input)), host);
     });
@@ -265,6 +288,7 @@ Examples:
   );
   capability.command("run").description("Execute one capability by ID").argument("<capability-id>", "Capability ID, such as analysis.report.list").option("--domain <domain>", "Override the capability namespace used for gateway routing").option("--input <json-or-path>", "Input JSON object, file path, @<path>, or - for stdin").action(async (capabilityId, opts) => {
     await executeAndPrint(program, async (host, globalOpts) => {
+      assertCapabilityIsNotRetired(capabilityId);
       const gatewayDomain = resolveCapabilityGatewayDomain(capabilityId, opts.domain);
       const input = parseCapabilityInput(opts.input);
       if (globalOpts.validate && globalOpts.dryRun) {
@@ -333,8 +357,14 @@ async function executeAndPrint(program, action) {
   }
 }
 function printCapabilityError(error, host) {
-  if (error instanceof CapabilityCommandValidationError) {
-    printError("validation", error.message, error.hint, error.code);
+  if (error instanceof CapabilityCommandValidationError || error instanceof CliValidationError) {
+    printError(
+      "validation",
+      error.message,
+      error.hint,
+      error.code,
+      error instanceof CliValidationError && error.location ? { location: error.location } : void 0
+    );
     return;
   }
   if (error instanceof SecureStoreAuthError) {
@@ -346,7 +376,7 @@ function printCapabilityError(error, host) {
     return;
   }
   if (error instanceof CapabilityGatewayError) {
-    printError("api", error.message, error.hint, error.code, withPageUrl(error.meta, host));
+    printError(error.type, error.message, error.hint, error.code, withPageUrl(error.meta, host));
     return;
   }
   const message = error instanceof Error ? error.message : String(error);