@thinkingai/ae-cli 6.1.23 → 6.1.25

package/dist/{te-analysis-AISWCOOZ.js → te-analysis-5ZZ6YHVH.js}

@@ -7,12 +7,12 @@ import {
   waitForAnalysisRun,
   withAsyncArtifactLifecycle,
   withInterruptSignal
-} from "./chunk-VYXXOKYS.js";
+} from "./chunk-XKIW3QMF.js";
 import {
   createCapabilityCommand,
   definitionIntentSnapshotFlag,
   modelDefinitionIntentSnapshotFlag
-} from "./chunk-CCS66K4K.js";
+} from "./chunk-2FJM4HRV.js";
 import {
   CapabilityGatewayError,
   buildCapabilityGatewayUrl,
@@ -22,23 +22,24 @@ import {
   requestCapabilityGateway,
   requestCapabilityGatewayWithEnvelope,
   uploadInputFile,
-  validateCapability
-} from "./chunk-HFGZGYCG.js";
+  validateCapability,
+  validateCapabilityWithEnvelope
+} from "./chunk-QYXDJOLA.js";
 import {
   registerCapabilityGatewayRoute,
   resolveGatewayDomain
 } from "./chunk-KPQY44JQ.js";
 import {
   withOutputMetadata
-} from "./chunk-DX5CDO34.js";
+} from "./chunk-BW7JUDEI.js";
 import "./chunk-Y74WTIKJ.js";
 import {
   getCliToken
-} from "./chunk-7XGFSUOM.js";
-import "./chunk-7FTTULED.js";
+} from "./chunk-DU72X2IO.js";
+import "./chunk-IG3DYEIR.js";
 import {
   CliValidationError
-} from "./chunk-MAPZ7VB6.js";
+} from "./chunk-YVGXGTD6.js";
 
 // src/commands/te-analysis/capability-shared.ts
 var ANALYSIS_GATEWAY_CLI_SERVICES = /* @__PURE__ */ new Set(["project", "system"]);
@@ -148,7 +149,7 @@ var sqlTableUsageFlag = {
   name: "usage",
   type: "string",
   required: false,
-  desc: "Authorized table set: analysis (default) or tag_cluster. Use tag_cluster before creating SQL tags or clusters."
+  desc: "Authorized table set: analysis (default), tag_cluster for SQL tags/clusters, or sql_datatable for SQL-built data tables. Use the same usage for list and columns."
 };
 var reportListLimitFlag = {
   name: "limit",
@@ -288,7 +289,7 @@ function certificationScopeInput(ctx) {
   }
   return value;
 }
-function dashboardReportDataInput(ctx) {
+function dashboardReportDataInput(ctx, includeCache = true) {
   return compactInput({
     ...projectInput(ctx),
     dashboard_id: ctx.num("dashboard-id"),
@@ -299,7 +300,7 @@ function dashboardReportDataInput(ctx) {
     cluster_query_scope: optionalString(ctx, "cluster-query-scope"),
     slave_cluster_id: optionalString(ctx, "slave-cluster-id"),
     zone_offset: optionalNumber(ctx, "zone-offset"),
-    use_cache: optionalBoolean(ctx, "use-cache"),
+    ...includeCache ? { use_cache: optionalBoolean(ctx, "use-cache") } : {},
     request_id: optionalString(ctx, "request-id"),
     preview_rows: optionalNumber(ctx, "preview-rows"),
     timeout_seconds: optionalNumber(ctx, "timeout-seconds"),
@@ -756,6 +757,7 @@ var metadataEventExport = createAnalysisMetaCapabilityCommand({
     queriesFlag,
     fieldsFlag,
     { name: "authenticated-only", type: "boolean", required: false, desc: "When true, export only authenticated events." },
+    certificationScopeFlag,
     metadataExportOutputFlag
   ],
   risk: "read",
@@ -764,7 +766,8 @@ var metadataEventExport = createAnalysisMetaCapabilityCommand({
     ...projectInput(ctx),
     queries: optionalQueries(ctx),
     fields: optionalJson(ctx, "fields"),
-    authenticated_only: optionalBoolean(ctx, "authenticated-only")
+    authenticated_only: optionalBoolean(ctx, "authenticated-only"),
+    certification_scope: certificationScopeInput(ctx)
   }),
   postProcess: metadataExportPostProcess("event", "events")
 });
@@ -947,6 +950,7 @@ var metadataPropertyExport = createAnalysisMetaCapabilityCommand({
     queriesFlag,
     fieldsFlag,
     { name: "authenticated-only", type: "boolean", required: false, desc: "When true, export only authenticated properties." },
+    certificationScopeFlag,
     metadataExportOutputFlag
   ],
   risk: "read",
@@ -958,7 +962,8 @@ var metadataPropertyExport = createAnalysisMetaCapabilityCommand({
     event_name: optionalString(ctx, "event-name"),
     queries: optionalQueries(ctx),
     fields: optionalJson(ctx, "fields"),
-    authenticated_only: optionalBoolean(ctx, "authenticated-only")
+    authenticated_only: optionalBoolean(ctx, "authenticated-only"),
+    certification_scope: certificationScopeInput(ctx)
   }),
   postProcess: metadataExportPostProcess("property", "properties")
 });
@@ -1350,6 +1355,7 @@ var metadataMetricExport = createAnalysisMetaCapabilityCommand({
     queriesFlag,
     fieldsFlag,
     { name: "authenticated-only", type: "boolean", required: false, desc: "When true, export only authenticated metrics." },
+    certificationScopeFlag,
     metadataExportOutputFlag
   ],
   risk: "read",
@@ -1359,7 +1365,8 @@ var metadataMetricExport = createAnalysisMetaCapabilityCommand({
     ignore_authentication: optionalBoolean(ctx, "ignore-authentication"),
     queries: optionalQueries(ctx),
     fields: optionalJson(ctx, "fields"),
-    authenticated_only: optionalBoolean(ctx, "authenticated-only")
+    authenticated_only: optionalBoolean(ctx, "authenticated-only"),
+    certification_scope: certificationScopeInput(ctx)
   }),
   postProcess: metadataExportPostProcess("metric", "metrics")
 });
@@ -1500,13 +1507,13 @@ var ownTypesFlag = {
 var requiredQueriesFlag = {
   ...queriesFlag,
   required: true,
-  desc: "Required JSON array of 1 to 20 keyword filters. For first-pass asset discovery, use one broad search without --asset-types so results can include both dashboards and reports."
+  desc: "Required JSON array of 1 to 20 keyword filters. For first-pass asset discovery, use one broad search without --asset-types and request a large page; when has_more is true and no strong candidate is present, continue with next_offset before narrowing or rewriting keywords."
 };
 var analysisAssetSearch = createAnalysisCapabilityCommand({
   resource: "asset",
   command: "search",
   capabilityId: "analysis.asset.search",
-  description: "Search visible saved analysis assets by keyword. Default first-pass search should omit --asset-types to cover both dashboards and reports.",
+  description: "Search readable saved analysis assets by keyword, including shared read-only and editable dashboards and reports. Results are ranked before pagination by match quality, certification, recent heat/users, and governance impact. Omit --asset-types for first-pass discovery.",
   flags: [
     projectIdFlag,
     requiredQueriesFlag,
@@ -1635,7 +1642,16 @@ var statusFlag = { name: "status", type: "json", required: false, desc: "Operati
 var sortFieldFlag = { name: "sort-field", type: "string", required: false, desc: "Sort field." };
 var sortOrderFlag = { name: "sort-order", type: "string", required: false, desc: "Sort order: asc or desc." };
 var recordIdFlag = { name: "record-id", type: "number", required: false, desc: "Operation record ID." };
+var governanceExportFlags = (format) => [
+  requestIdFlag,
+  { ...artifactFormatFlag, desc: `Artifact format: ${format}. This capability supports only ${format}.` },
+  { ...asyncTimeoutSecondsFlag, max: 7200, desc: "Async export runtime in seconds. Default: 3600, max: 7200." }
+];
+var governanceExportFields = ["request_id", "format", "timeout_seconds"];
 var readers = {
+  request_id: (ctx) => optionalString(ctx, "request-id"),
+  format: (ctx) => optionalString(ctx, "artifact-format"),
+  timeout_seconds: (ctx) => optionalNumber(ctx, "timeout-seconds"),
   node_id: (ctx) => optionalString(ctx, "node-id"),
   resource_id: (ctx) => optionalString(ctx, "resource-id"),
   resource_type: (ctx) => optionalString(ctx, "resource-type"),
@@ -2238,6 +2254,715 @@ var metadataGovernanceRecommendationSubmit = createAnalysisMetaCapabilityCommand
   })
 });
 
+// src/commands/te-analysis/meta/governance-recommendation/auto-review.ts
+import { randomUUID } from "crypto";
+var windowDaysFlag3 = {
+  name: "window-days",
+  type: "number",
+  required: false,
+  min: 1,
+  max: 365,
+  desc: "Usage window in days for the recommendation batch. Default: 90."
+};
+var limitFlag4 = {
+  name: "limit",
+  type: "number",
+  required: false,
+  min: 1,
+  max: 100,
+  desc: "Maximum hot dashboard evidence packages selected before automatic asset review. Omit for CLI bounded expansion over top-20/top-50/top-100; pass explicitly for a fixed diagnostic scope."
+};
+var GOVERNANCE_RECOMMENDATION_AUTO_REVIEW_HELP = [
+  "Automatic asset certification contract:",
+  "- Use this command only when the user explicitly asks to automatically review or automatically certify recommended assets.",
+  "- Do not call this command for a plain recommendation request.",
+  "- Do not call this command when the user asks to submit recommendations to the review page.",
+  "- The command first validates project config agent_auto_asset_certification_enabled and project_semantic_enable. If disabled, report the returned config error and stop before collecting recommendations.",
+  "- When --limit is omitted, the CLI performs the same bounded expansion used by recurring page-review jobs: inspect top-20 pending material, then top-50/top-100 only when pending assets or pending dashboard branches are insufficient.",
+  "- Expansion is read-only. The CLI Agent builds automatic decisions once from the final selected material, then submits those decisions for execution and audit.",
+  "- When --limit is explicitly provided, respect that scope and do not expand it.",
+  "- Automatic review only certifies eligible asset candidates from the current recommendation batch. It does not create recommended metrics.",
+  "- CLI Agent blocks semantic duplicates, copy-like assets, synonym properties and ambiguous close definitions; every duplicate skip must name the conflicting asset targets.",
+  "- The result includes manual_review_handoff for assets still uncertified after automatic review. Use it only when the user later asks to submit those assets to the review page.",
+  "- For that later page submission, build the review packet from manual_review_handoff.page_review_items and relations so skipped assets keep their dashboard/report parent context; manual_review_handoff.items remains the exact unapproved review workload.",
+  "- Automatic decisions are recorded for audit. Page-visible reasons must be reviewer-readable Chinese; keep raw source/rule codes only in debug exports.",
+  "- Returned SKIP decisions mean the asset remains for manual review; do not describe skipped items as certified."
+].join("\n");
+var AUTO_REVIEW_CAPABILITY_ID = "metadata.governance_recommendation.auto_review";
+var EXPORT_CAPABILITY_ID = "metadata.governance_recommendation.export";
+var SUBMIT_CAPABILITY_ID = "metadata.governance_recommendation.submit";
+var DEFAULT_LIMIT = 20;
+var EXPANSION_LIMITS = [20, 50, 100];
+var MIN_PENDING_ASSETS = 10;
+var MIN_PENDING_WORK_UNITS = 3;
+var AUTO_REVIEW_DECISION_LIMIT = 100;
+var AUTO_REVIEW_MIN_HEAT = 50;
+var AUTO_REVIEW_MIN_USERS = 5;
+var AUTO_REVIEW_MIN_IMPACT = 2;
+var metadataGovernanceRecommendationAutoReview = {
+  service: "analysis-meta",
+  resource: "governance-recommendation",
+  command: "auto-review",
+  capabilityId: AUTO_REVIEW_CAPABILITY_ID,
+  description: "Automatically review and certify eligible recommended assets when the project switch is enabled.",
+  helpText: GOVERNANCE_RECOMMENDATION_AUTO_REVIEW_HELP,
+  flags: [projectIdFlag, windowDaysFlag3, limitFlag4],
+  risk: "write",
+  preflight: (ctx) => {
+    autoReviewInput(ctx);
+  },
+  validateInput: async (ctx) => validateCapability(
+    ctx.host(),
+    gatewayDomain(),
+    AUTO_REVIEW_CAPABILITY_ID,
+    autoReviewInput(ctx)
+  ),
+  dryRun: async (ctx) => dryRunCapability(
+    ctx.host(),
+    gatewayDomain(),
+    AUTO_REVIEW_CAPABILITY_ID,
+    autoReviewInput(ctx)
+  ),
+  execute: async (ctx) => {
+    const input = autoReviewInput(ctx);
+    if (hasExplicitLimit(ctx)) {
+      await validateCapabilityWithEnvelope(ctx.host(), gatewayDomain(), AUTO_REVIEW_CAPABILITY_ID, input);
+      const finalExport = await exportRecommendationMaterial(ctx, input, numberValue(input.limit) || DEFAULT_LIMIT);
+      const result2 = await executeCliAgentAutoReview(ctx, input, finalExport.data);
+      return withOutputMetadata({
+        ...record(result2.data),
+        manual_review_handoff: buildManualReviewHandoff(result2.data, finalExport.data)
+      }, result2.meta);
+    }
+    const plan = await planBoundedExpansion(ctx, input);
+    const expansion = plan.expansion;
+    const finalInput = { ...input, limit: expansion.final_limit };
+    const result = await executeCliAgentAutoReview(ctx, finalInput, plan.finalExport);
+    if (result.data && typeof result.data === "object" && !Array.isArray(result.data)) {
+      return withOutputMetadata({
+        ...result.data,
+        auto_review_expansion: expansion,
+        manual_review_handoff: buildManualReviewHandoff(result.data, plan.finalExport)
+      }, result.meta);
+    }
+    return withOutputMetadata(result.data, result.meta);
+  }
+};
+function autoReviewInput(ctx) {
+  return compactInput({
+    ...projectInput(ctx),
+    window_days: optionalNumber(ctx, "window-days"),
+    limit: optionalNumber(ctx, "limit")
+  });
+}
+function gatewayDomain() {
+  return resolveGatewayDomain("analysis-meta", "analysis");
+}
+function hasExplicitLimit(ctx) {
+  return typeof ctx.has === "function" ? ctx.has("limit") : ctx.str("limit") !== "";
+}
+async function executeCliAgentAutoReview(ctx, input, exportResult) {
+  const review = buildCliAgentAutoReview(input, exportResult);
+  if (review.decisions.length === 0) {
+    return {
+      data: {
+        ...review.base,
+        total: 0,
+        applied: 0,
+        recorded: 0,
+        failed: 0,
+        items: []
+      },
+      meta: {}
+    };
+  }
+  const submitted = await executeCapabilityWithEnvelope(ctx.host(), gatewayDomain(), SUBMIT_CAPABILITY_ID, {
+    ...input,
+    run_id: review.runId,
+    snapshot_hash: review.snapshotHash,
+    topic_id: "agent_auto_asset_certification",
+    topic_name: "Agent \u81EA\u52A8\u8BA4\u8BC1\u8D44\u4EA7",
+    decisions: review.decisions
+  });
+  const submittedData = record(submitted.data);
+  return {
+    data: {
+      ...review.base,
+      total: submittedData.total,
+      applied: submittedData.applied,
+      recorded: submittedData.recorded,
+      failed: submittedData.failed,
+      items: autoReviewItemsWithDisplayReason(submittedData.items)
+    },
+    meta: submitted.meta
+  };
+}
+async function planBoundedExpansion(ctx, input) {
+  await validateCapabilityWithEnvelope(ctx.host(), gatewayDomain(), AUTO_REVIEW_CAPABILITY_ID, {
+    ...input,
+    limit: DEFAULT_LIMIT
+  });
+  const attempts = [];
+  let finalExport = {};
+  let finalLimit = DEFAULT_LIMIT;
+  let stopReason = "top_100_inspected";
+  for (const limit of EXPANSION_LIMITS) {
+    const exported = await exportRecommendationMaterial(ctx, input, limit);
+    finalExport = exported.data;
+    const summary = summarizeExport(exported.data, limit);
+    attempts.push(summary);
+    finalLimit = limit;
+    const pendingAssets = numberValue(summary.pending_asset_candidates);
+    const pendingWorkUnits = numberValue(summary.pending_work_units);
+    const hasMore = summary.has_more === true;
+    if (pendingAssets >= MIN_PENDING_ASSETS && pendingWorkUnits >= MIN_PENDING_WORK_UNITS) {
+      stopReason = "sufficient_pending_scope";
+      break;
+    }
+    if (!hasMore) {
+      stopReason = "dashboard_pool_exhausted";
+      break;
+    }
+  }
+  return {
+    expansion: {
+      strategy: "bounded_hot_dashboard_expansion",
+      initial_limit: DEFAULT_LIMIT,
+      final_limit: finalLimit,
+      inspected_limits: attempts.map((attempt) => attempt.dashboard_limit),
+      min_pending_asset_candidates: MIN_PENDING_ASSETS,
+      min_pending_work_units: MIN_PENDING_WORK_UNITS,
+      attempts,
+      stop_reason: stopReason,
+      write_policy: "single_auto_review_execute_after_read_only_expansion"
+    },
+    finalExport
+  };
+}
+function exportRecommendationMaterial(ctx, input, limit) {
+  return executeCapabilityWithEnvelope(
+    ctx.host(),
+    gatewayDomain(),
+    EXPORT_CAPABILITY_ID,
+    compactInput({ ...input, limit, include_completed: false })
+  );
+}
+function summarizeExport(result, requestedLimit) {
+  const data = record(result);
+  const workUnits = array(data.work_units);
+  const coverage = record(data.coverage);
+  const pendingAssetCandidates = countPendingAssetCandidates(workUnits);
+  return {
+    dashboard_limit: numberValue(data.dashboard_limit) || requestedLimit,
+    run_id: stringValue(data.run_id),
+    snapshot_hash: stringValue(data.snapshot_hash),
+    selected_dashboards: numberValue(coverage.selected_dashboards),
+    returned_work_units: workUnits.length,
+    pending_work_units: workUnits.filter((unit) => numberValue(record(unit).actionable_count) > 0).length,
+    pending_asset_candidates: pendingAssetCandidates,
+    has_more: coverage.has_more === true
+  };
+}
+function countPendingAssetCandidates(workUnits) {
+  const seen = /* @__PURE__ */ new Set();
+  for (const unit of workUnits) {
+    for (const candidate of array(record(unit).asset_candidates)) {
+      const item = record(candidate);
+      if (item.actionable !== true || item.action_state !== "PENDING") {
+        continue;
+      }
+      const type = stringValue(item.resource_type);
+      const key = stringValue(item.resource_key);
+      if (type && key) {
+        seen.add(`${type}|${key}`);
+      }
+    }
+  }
+  return seen.size;
+}
+function buildCliAgentAutoReview(input, exportResult) {
+  const exported = record(exportResult);
+  const material = record(exported.review_material_package);
+  const candidates = array(material.candidate_assets).map(record);
+  const runId = `rec_auto_${randomUUID().replace(/-/g, "")}`;
+  const snapshotHash = stringValue(exported.snapshot_hash);
+  const semanticConflicts = semanticDuplicateConflicts(candidates);
+  const decisions = [];
+  let approved = 0;
+  let skipped = 0;
+  let overflow = 0;
+  const seen = /* @__PURE__ */ new Set();
+  for (const candidate of candidates) {
+    const target = record(candidate.target_ref);
+    const type = stringValue(target.type);
+    const key = stringValue(target.key);
+    if (!type || !key || !seen.add(`${type}|${key}`)) continue;
+    if (candidate.actionable !== true || candidate.action_state !== "PENDING") continue;
+    if (decisions.length >= AUTO_REVIEW_DECISION_LIMIT) {
+      overflow++;
+      continue;
+    }
+    const verdict = cliAgentAutoReviewVerdict(candidate, semanticConflicts.get(`${type}|${key}`));
+    if (verdict.decision === "APPROVE") approved++;
+    else skipped++;
+    decisions.push({
+      item_type: "asset",
+      decision: verdict.decision,
+      resource_type: type,
+      resource_key: key,
+      evidence_hash: candidate.evidence_hash,
+      reason: verdict.reason
+    });
+  }
+  return {
+    runId,
+    snapshotHash,
+    decisions,
+    base: {
+      schema_version: "1.0",
+      run_id: runId,
+      project_id: input.project_id ?? exported.project_id,
+      window_days: input.window_days ?? exported.window_days,
+      dashboard_limit: input.limit ?? exported.dashboard_limit,
+      snapshot_hash: snapshotHash,
+      rule_version: "agent_auto_asset_certification_v1",
+      config_key: "agent_auto_asset_certification_enabled",
+      semantic_config_key: "project_semantic_enable",
+      auto_approved: approved,
+      skipped,
+      overflow
+    }
+  };
+}
+function cliAgentAutoReviewVerdict(candidate, semanticConflict) {
+  if (semanticConflict) {
+    return {
+      decision: "SKIP",
+      reason: autoReviewReason(`semantic_duplicate_targets=${encodeReasonPayload(semanticConflict)}`)
+    };
+  }
+  if (listIncludes(candidate.conflict_risks, "same_evidence_rejected_before")) {
+    return {
+      decision: "SKIP",
+      reason: autoReviewReason("same_evidence_rejected_before")
+    };
+  }
+  if (array(candidate.source_evidence).length === 0 && candidate.recommendation_role !== "source_dashboard") {
+    return {
+      decision: "SKIP",
+      reason: autoReviewReason("source_evidence_missing")
+    };
+  }
+  const heat = numberValue(candidate.heat_count90d);
+  const users = numberValue(candidate.user_count90d);
+  const impact = numberValue(candidate.impact_degree);
+  const matched = [];
+  if (heat >= AUTO_REVIEW_MIN_HEAT) matched.push(`heat_count90d>=${AUTO_REVIEW_MIN_HEAT}`);
+  if (users >= AUTO_REVIEW_MIN_USERS) matched.push(`user_count90d>=${AUTO_REVIEW_MIN_USERS}`);
+  if (impact > AUTO_REVIEW_MIN_IMPACT) matched.push(`impact_degree>${AUTO_REVIEW_MIN_IMPACT}.0`);
+  if (matched.length === 0) {
+    return {
+      decision: "SKIP",
+      reason: autoReviewReason(`signals_below_threshold: heat_count90d=${heat}, user_count90d=${users}, impact_degree=${impact}`)
+    };
+  }
+  return {
+    decision: "APPROVE",
+    reason: autoReviewReason(`matched=${matched.join(",")}; role=${stringValue(candidate.recommendation_role) ?? "asset"}`)
+  };
+}
+function autoReviewReason(reason) {
+  return `source=AGENT_AUTO_REVIEW; rule_version=agent_auto_asset_certification_v1; ${reason}`;
+}
+function autoReviewItemsWithDisplayReason(items) {
+  return array(items).map((value) => {
+    const item = record(value);
+    const copy = {
+      ...item,
+      semantic_duplicate_targets: semanticDuplicateTargetsFromReason(stringValue(item.reason) ?? "")
+    };
+    if (item.decision !== "APPROVE") {
+      copy.display_reason = autoReviewDisplayReason(item);
+    }
+    return copy;
+  });
+}
+function semanticDuplicateConflicts(candidates) {
+  const result = /* @__PURE__ */ new Map();
+  const comparable = candidates.map((candidate) => comparableAsset(candidate)).filter((candidate) => !!candidate);
+  for (const candidate of comparable) {
+    if (candidate.actionable !== true || candidate.actionState !== "PENDING") continue;
+    const matches = [];
+    for (const other of comparable) {
+      if (candidate.assetKey === other.assetKey) continue;
+      const basis = semanticDuplicateBasis(candidate, other);
+      if (basis) matches.push({ asset: other, basis });
+    }
+    if (!matches.length) continue;
+    matches.sort((left, right) => duplicateRank(right.asset) - duplicateRank(left.asset));
+    const targets = matches.slice(0, 3).map(({ asset, basis }) => ({
+      target_ref: { type: asset.type, key: asset.key },
+      display_name: asset.displayName,
+      resource_type: asset.type,
+      resource_key: asset.key,
+      authentication_status: asset.authenticationStatus,
+      action_state: asset.actionState,
+      reason: duplicateBasisText(basis)
+    }));
+    result.set(candidate.assetKey, {
+      targets,
+      basis: Array.from(new Set(matches.map((match) => match.basis))).map(duplicateBasisText)
+    });
+  }
+  return result;
+}
+function comparableAsset(candidate) {
+  const target = record(candidate.target_ref);
+  const type = stringValue(target.type);
+  const key = stringValue(target.key);
+  if (!type || !key) return void 0;
+  const displayName = stringValue(candidate.display_name) ?? key;
+  const evidence = record(candidate.evidence_snapshot);
+  const evidenceAsset = record(evidence.asset);
+  const description = stringValue(record(candidate.evidence_snapshot).description) ?? stringValue(evidenceAsset.description) ?? stringValue(candidate.description) ?? "";
+  return {
+    assetKey: `${type}|${key}`,
+    type,
+    key,
+    displayName,
+    description,
+    authenticationStatus: numberValue(evidenceAsset.authentication_status ?? candidate.authentication_status),
+    actionState: stringValue(candidate.action_state) ?? "",
+    actionable: candidate.actionable === true,
+    normalizedName: normalizeSemanticText(displayName || key),
+    canonicalName: canonicalDuplicateText(displayName || key),
+    aliasName: aliasDuplicateText(displayName || key),
+    normalizedDescription: normalizeSemanticText(description),
+    heat: numberValue(candidate.heat_count90d),
+    users: numberValue(candidate.user_count90d),
+    impact: numberValue(candidate.impact_degree)
+  };
+}
+function semanticDuplicateBasis(left, right) {
+  if (!left.normalizedName || !right.normalizedName) return void 0;
+  if (left.normalizedName.length >= 3 && left.normalizedName === right.normalizedName) return "same_display_name";
+  if (left.canonicalName.length >= 3 && left.canonicalName === right.canonicalName) return "copy_or_suffix_variant";
+  if (left.aliasName.length >= 3 && left.aliasName === right.aliasName && relatedAssetTypes(left.type, right.type)) {
+    return "business_alias_equivalent";
+  }
+  if (left.normalizedDescription.length >= 6 && left.normalizedDescription === right.normalizedDescription) {
+    return "same_description";
+  }
+  return void 0;
+}
+function relatedAssetTypes(left, right) {
+  if (left === right) return true;
+  return left.endsWith("_prop") && right.endsWith("_prop");
+}
+function duplicateRank(asset) {
+  return (asset.authenticationStatus === 1 ? 1e5 : 0) + (asset.actionState === "AUTHENTICATED" ? 5e4 : 0) + asset.heat + asset.users * 10 + asset.impact * 100;
+}
+function normalizeSemanticText(value) {
+  return value.toLowerCase().replace(/[\s_\-—–/\\|:：,，.。"'`【】\[\]()（）{}<>《》]/g, "").trim();
+}
+function canonicalDuplicateText(value) {
+  return normalizeSemanticText(value).replace(/(副本|复制|拷贝|备份|copy|backup|bak|test|测试|临时|tmp)+$/g, "").replace(/v\d+$/g, "").replace(/\d+$/g, "");
+}
+function aliasDuplicateText(value) {
+  return canonicalDuplicateText(value).replace(/(公司|企业|客户|客戶|client|customer|company|account)/g, "\u5BA2\u6237").replace(/(项目|工程|project)/g, "\u9879\u76EE").replace(/(用户|玩家|会员|user|player|member)/g, "\u7528\u6237");
+}
+function duplicateBasisText(value) {
+  switch (value) {
+    case "same_display_name":
+      return "\u8D44\u4EA7\u540D\u79F0\u4E00\u81F4";
+    case "copy_or_suffix_variant":
+      return "\u540D\u79F0\u4EC5\u5B58\u5728\u526F\u672C\u3001\u7248\u672C\u6216\u4E34\u65F6\u540E\u7F00\u5DEE\u5F02";
+    case "business_alias_equivalent":
+      return "\u4E1A\u52A1\u5BF9\u8C61\u8868\u8FF0\u76F8\u8FD1\uFF0C\u53EF\u80FD\u662F\u540C\u4E49\u5C5E\u6027\u6216\u76F8\u8FD1\u53E3\u5F84";
+    case "same_description":
+      return "\u8D44\u4EA7\u63CF\u8FF0\u4E00\u81F4";
+    default:
+      return value;
+  }
+}
+function encodeReasonPayload(value) {
+  return Buffer.from(JSON.stringify(value), "utf8").toString("base64url");
+}
+function decodeReasonPayload(value) {
+  try {
+    return record(JSON.parse(Buffer.from(value, "base64url").toString("utf8")));
+  } catch {
+    return {};
+  }
+}
+function semanticDuplicateTargetsFromReason(reason) {
+  const encoded = /semantic_duplicate_targets=([A-Za-z0-9_-]+)/.exec(reason)?.[1];
+  if (!encoded) return [];
+  return array(decodeReasonPayload(encoded).targets);
+}
+function listIncludes(value, expected) {
+  return array(value).some((item) => item === expected);
+}
+function buildManualReviewHandoff(autoReviewResult, exportResult) {
+  const result = record(autoReviewResult);
+  const exported = record(exportResult);
+  const material = record(exported.review_material_package);
+  const decisions = decisionsByAsset(result.items);
+  const candidates = array(material.candidate_assets);
+  const relations = array(material.relations).map(record);
+  const handoffItems = [];
+  const approved = /* @__PURE__ */ new Set();
+  for (const decision of decisions.values()) {
+    if (decision.decision === "APPROVE" && decision.landing_status === "APPLIED") {
+      approved.add(decision.assetKey);
+    }
+  }
+  const autoCertifiedItems = buildAutoCertifiedItems(decisions, candidates);
+  for (const value of candidates) {
+    const candidate = record(value);
+    const target = record(candidate.target_ref);
+    const type = stringValue(target.type);
+    const key = stringValue(target.key);
+    if (!type || !key) {
+      continue;
+    }
+    const assetKey = `${type}|${key}`;
+    if (approved.has(assetKey)) {
+      continue;
+    }
+    const decision = decisions.get(assetKey);
+    const actionable = candidate.actionable === true;
+    if (!decision && !actionable) {
+      continue;
+    }
+    const reviewReason = decision ? manualReviewReason(decision, candidate) : "\u672C\u6B21\u81EA\u52A8\u8BA4\u8BC1\u672A\u4EA7\u751F\u660E\u786E\u7ED3\u8BBA\uFF0C\u53EF\u80FD\u662F\u5019\u9009\u8D44\u4EA7\u8D85\u51FA\u672C\u6B21\u81EA\u52A8\u8BA4\u8BC1\u5904\u7406\u4E0A\u9650\u6216\u88AB\u53BB\u91CD\uFF0C\u8BF7\u4EBA\u5DE5\u786E\u8BA4\u3002";
+    handoffItems.push({
+      ...candidate,
+      auto_review_decision: decision ? decision.raw : {
+        decision: "NOT_REVIEWED",
+        reason: reviewReason
+      },
+      semantic_duplicate_targets: decision ? array(decision.raw.semantic_duplicate_targets) : [],
+      manual_review_reason: reviewReason
+    });
+  }
+  const pageReviewItems = buildPageReviewItems(handoffItems, candidates, relations, decisions);
+  const pageReviewIds = new Set(pageReviewItems.map((item) => stringValue(item.client_item_id)).filter(Boolean));
+  return {
+    schema_version: "1.0",
+    handoff_type: "auto_review_uncertified_assets_to_page_review",
+    project_id: result.project_id ?? exported.project_id,
+    source_auto_review_run_id: result.run_id,
+    source_export_run_id: exported.run_id,
+    snapshot_hash: exported.snapshot_hash ?? result.snapshot_hash,
+    dashboard_limit: exported.dashboard_limit ?? result.dashboard_limit,
+    auto_review_trace: {
+      run_id: result.run_id,
+      rule_version: result.rule_version,
+      auto_approved: result.auto_approved,
+      skipped: result.skipped,
+      overflow: result.overflow,
+      approved_items: autoCertifiedItems,
+      skipped_items: handoffItems.map((item) => ({
+        target_ref: record(item.target_ref),
+        display_name: item.display_name,
+        manual_review_reason: item.manual_review_reason
+      }))
+    },
+    auto_certified_items: autoCertifiedItems,
+    candidate_count: handoffItems.length,
+    items: handoffItems,
+    page_review_items: pageReviewItems,
+    page_review_context_count: pageReviewItems.length - handoffItems.length,
+    relations: relations.filter((edge) => pageReviewIds.has(stringValue(edge.parent)) && pageReviewIds.has(stringValue(edge.child))),
+    source_index: array(material.source_index).map(record).filter((source) => pageReviewIds.has(stringValue(source.client_item_id))),
+    quality_gates: array(material.quality_gates),
+    definition_policy: record(material.definition_policy),
+    submit_to_page_policy: {
+      command: "analysis-meta agent-review submit-to-page",
+      scope: "Submit page_review_items so unapproved assets keep dashboard/report parent context; only items without manual_review_context require human certification decisions.",
+      reason_field: "manual_review_reason",
+      source_metadata: "When submitting leftovers, copy manual_review_handoff.auto_review_trace to submit-to-page source_metadata.auto_review_trace so the page audit records show the assets Agent already certified.",
+      requires_user_submission_intent: true
+    }
+  };
+}
+function buildPageReviewItems(handoffItems, candidates, relations, decisions) {
+  const byId = /* @__PURE__ */ new Map();
+  const requiredIds = /* @__PURE__ */ new Set();
+  for (const value of candidates) {
+    const candidate = record(value);
+    const id = stringValue(candidate.client_item_id);
+    if (id) byId.set(id, candidate);
+  }
+  for (const item of handoffItems) {
+    const id = stringValue(item.client_item_id);
+    if (id) requiredIds.add(id);
+  }
+  let changed = true;
+  while (changed) {
+    changed = false;
+    for (const edge of relations) {
+      const parent = stringValue(edge.parent);
+      const child = stringValue(edge.child);
+      if (parent && child && requiredIds.has(child) && !requiredIds.has(parent) && byId.has(parent)) {
+        requiredIds.add(parent);
+        changed = true;
+      }
+    }
+  }
+  const handoffById = new Map(handoffItems.map((item) => [stringValue(item.client_item_id), item]).filter((entry) => !!entry[0]));
+  return candidates.map(record).filter((candidate) => {
+    const id = stringValue(candidate.client_item_id);
+    return id !== void 0 && requiredIds.has(id);
+  }).map((candidate) => {
+    const id = stringValue(candidate.client_item_id) ?? "";
+    const handoff = handoffById.get(id);
+    if (handoff) return handoff;
+    const target = record(candidate.target_ref);
+    const type = stringValue(target.type);
+    const key = stringValue(target.key);
+    const decision = type && key ? decisions.get(`${type}|${key}`) : void 0;
+    return markContextCandidate(candidate, decision);
+  });
+}
+function markContextCandidate(candidate, decision) {
+  const item = { ...candidate };
+  item.manual_review_context = true;
+  item.manual_review_reason = "\u8BE5\u8D44\u4EA7\u7528\u4E8E\u4FDD\u7559\u81EA\u52A8\u53D1\u73B0\u9875\u9762\u7684\u7236\u5B50\u5C42\u7EA7\u548C\u6765\u6E90\u4E0A\u4E0B\u6587\uFF0C\u4E0D\u4F5C\u4E3A\u672C\u6B21\u4EBA\u5DE5\u5BA1\u6838\u5BF9\u8C61\u3002";
+  if (decision?.decision === "APPROVE" && decision.landing_status === "APPLIED") {
+    item.auto_review_decision = decision.raw;
+    item.auto_review_context_reason = autoReviewDisplayReason(decision.raw, candidate);
+    item.evidence_snapshot = markEvidenceAuthenticated(record(candidate.evidence_snapshot));
+  }
+  return item;
+}
+function markEvidenceAuthenticated(evidence) {
+  const snapshot = { ...evidence };
+  const asset = record(snapshot.asset);
+  if (Object.keys(asset).length) {
+    snapshot.asset = { ...asset, authentication_status: 1 };
+  }
+  return snapshot;
+}
+function decisionsByAsset(value) {
+  const result = /* @__PURE__ */ new Map();
+  for (const itemValue of array(value)) {
+    const item = record(itemValue);
+    if (item.item_type !== "asset") {
+      continue;
+    }
+    const type = stringValue(item.resource_type);
+    const key = stringValue(item.resource_key);
+    if (!type || !key) {
+      continue;
+    }
+    const assetKey = `${type}|${key}`;
+    result.set(assetKey, {
+      assetKey,
+      decision: stringValue(item.decision) ?? "",
+      landing_status: stringValue(item.landing_status) ?? "",
+      raw: item
+    });
+  }
+  return result;
+}
+function buildAutoCertifiedItems(decisions, candidates) {
+  const byAsset = /* @__PURE__ */ new Map();
+  for (const value of candidates) {
+    const candidate = record(value);
+    const target = record(candidate.target_ref);
+    const type = stringValue(target.type);
+    const key = stringValue(target.key);
+    if (type && key) byAsset.set(`${type}|${key}`, candidate);
+  }
+  const items = [];
+  for (const decision of decisions.values()) {
+    if (decision.decision !== "APPROVE" || decision.landing_status !== "APPLIED") continue;
+    const candidate = byAsset.get(decision.assetKey) ?? {};
+    items.push({
+      target_ref: record(candidate.target_ref),
+      display_name: candidate.display_name ?? decision.raw.resource_key,
+      auto_review_reason: autoReviewDisplayReason(decision.raw, candidate),
+      landing_message: decision.raw.landing_message
+    });
+  }
+  return items;
+}
+function manualReviewReason(decision, context) {
+  const reason = autoReviewDisplayReason(decision.raw, context);
+  if (decision.decision === "SKIP") {
+    return reason;
+  }
+  if (decision.decision === "APPROVE" && decision.landing_status !== "APPLIED") {
+    const landing = stringValue(decision.raw.landing_message);
+    return landing ? `${reason}; landing_${decision.landing_status.toLowerCase()}: ${landing}` : `${reason}; landing_${decision.landing_status.toLowerCase()}`;
+  }
+  return reason;
+}
+function autoReviewDisplayReason(raw, context = {}) {
+  const display = stringValue(raw.display_reason);
+  if (display) return display;
+  const reason = stringValue(raw.reason);
+  if (!reason) return "\u672C\u6B21\u81EA\u52A8\u8BA4\u8BC1\u6CA1\u6709\u8FD4\u56DE\u539F\u56E0\uFF0C\u8BF7\u4EBA\u5DE5\u786E\u8BA4\u3002";
+  return humanizeAutoReviewReason(reason, context);
+}
+function humanizeAutoReviewReason(reason, context) {
+  if (reason.includes("semantic_duplicate_targets=")) {
+    const targets = semanticDuplicateTargetsFromReason(reason).map(record).map((target) => {
+      const ref = record(target.target_ref);
+      const label = stringValue(target.display_name) ?? stringValue(target.resource_key) ?? stringValue(ref.key) ?? "\u672A\u77E5\u8D44\u4EA7";
+      const type = stringValue(target.resource_type) ?? stringValue(ref.type) ?? "asset";
+      const key = stringValue(target.resource_key) ?? stringValue(ref.key) ?? "-";
+      const targetReason = stringValue(target.reason);
+      return `${label}\uFF08${type}:${key}${targetReason ? `\uFF0C${targetReason}` : ""}\uFF09`;
+    });
+    const targetText = targets.length ? targets.join("\uFF1B") : "\u76F8\u8FD1\u8D44\u4EA7";
+    return `\u672A\u81EA\u52A8\u8BA4\u8BC1\u539F\u56E0\uFF1A\u7591\u4F3C\u4E0E ${targetText} \u8BED\u4E49\u91CD\u590D\u6216\u53E3\u5F84\u76F8\u8FD1\u3002\u8BF7\u4EBA\u5DE5\u786E\u8BA4\u662F\u5426\u5E94\u4F5C\u4E3A\u72EC\u7ACB\u8D44\u4EA7\u8BA4\u8BC1\uFF1B\u5982\u679C\u53EA\u662F\u526F\u672C\u3001\u540C\u4E49\u5C5E\u6027\u6216\u76F8\u8FD1\u53E3\u5F84\uFF0C\u8BF7\u4F18\u5148\u9009\u62E9\u66F4\u6807\u51C6\u7684\u8D44\u4EA7\u3002`;
+  }
+  if (reason.includes("previous_decision_exists_for_different_evidence")) {
+    return "\u672A\u81EA\u52A8\u8BA4\u8BC1\u539F\u56E0\uFF1A\u68C0\u6D4B\u5230\u8BE5\u8D44\u4EA7\u5B58\u5728\u5386\u53F2\u5904\u7406\u8BB0\u5F55\uFF0C\u4F46\u672C\u6B21\u672A\u8FD4\u56DE\u53EF\u6838\u9A8C\u7684\u91CD\u590D\u5BF9\u8C61\u3002\u8BF7\u6309\u5F53\u524D\u8D44\u4EA7\u5B9A\u4E49\u548C\u6765\u6E90\u8BC1\u636E\u4EBA\u5DE5\u786E\u8BA4\uFF1B\u8FD9\u4E0D\u4EE3\u8868\u7CFB\u7EDF\u53D1\u73B0\u4E86\u91CD\u590D\u8D44\u4EA7\u3002";
+  }
+  if (reason.includes("same_evidence_rejected_before")) {
+    return "\u672A\u81EA\u52A8\u8BA4\u8BC1\u539F\u56E0\uFF1A\u76F8\u540C\u8BA4\u8BC1\u5EFA\u8BAE\u6B64\u524D\u5DF2\u88AB\u4EBA\u5DE5\u9A73\u56DE\uFF0C\u81EA\u52A8\u8BA4\u8BC1\u4E0D\u4F1A\u8986\u76D6\u4EBA\u5DE5\u7ED3\u8BBA\u3002\u5982\u4E1A\u52A1\u53E3\u5F84\u5DF2\u8C03\u6574\uFF0C\u8BF7\u4EBA\u5DE5\u91CD\u65B0\u786E\u8BA4\u662F\u5426\u8BA4\u8BC1\u3002";
+  }
+  if (reason.includes("source_evidence_missing")) {
+    return "\u81EA\u52A8\u8BA4\u8BC1\u672A\u901A\u8FC7\uFF1A\u7F3A\u5C11\u53EF\u6838\u9A8C\u7684\u6765\u6E90\u8D44\u4EA7\u8BC1\u636E\uFF0C\u8BF7\u4EBA\u5DE5\u786E\u8BA4\u8D44\u4EA7\u6765\u6E90\u3001\u5B9A\u4E49\u548C\u4F9D\u8D56\u5173\u7CFB\u540E\u518D\u8BA4\u8BC1\u3002";
+  }
+  if (reason.includes("signals_below_threshold")) {
+    const heat = /heat_count90d=(\d+)/.exec(reason)?.[1];
+    const users = /user_count90d=(\d+)/.exec(reason)?.[1];
+    const impact = /impact_degree=([0-9.]+)/.exec(reason)?.[1];
+    return `\u81EA\u52A8\u8BA4\u8BC1\u672A\u901A\u8FC7\uFF1A\u8BE5\u8D44\u4EA7\u8FD1 90 \u5929\u8BBF\u95EE/\u4F7F\u7528 ${heat ?? "\u672A\u77E5"} \u6B21\u3001\u4F7F\u7528\u4EBA\u6570 ${users ?? "\u672A\u77E5"}\uFF0C\u5F71\u54CD\u5EA6 ${impact ?? "\u672A\u77E5"}\uFF0C\u672A\u8FBE\u5230\u81EA\u52A8\u8BA4\u8BC1\u9608\u503C\uFF0C\u8BF7\u4EBA\u5DE5\u786E\u8BA4\u662F\u5426\u4ECD\u9700\u8981\u8BA4\u8BC1\u3002`;
+  }
+  if (reason.includes("matched=")) {
+    const matched = [];
+    if (reason.includes("heat_count90d>=")) matched.push("\u8BBF\u95EE/\u4F7F\u7528\u6B21\u6570\u8FBE\u5230\u9608\u503C");
+    if (reason.includes("user_count90d>=")) matched.push("\u4F7F\u7528\u4EBA\u6570\u8FBE\u5230\u9608\u503C");
+    if (reason.includes("impact_degree>")) matched.push("\u5F71\u54CD\u5EA6\u8FBE\u5230\u9608\u503C");
+    const matchedText = matched.length ? matched.join("\u3001") : "\u547D\u4E2D\u81EA\u52A8\u8BA4\u8BC1\u89C4\u5219";
+    return `Agent \u81EA\u52A8\u8BA4\u8BC1\u901A\u8FC7\uFF1A\u8BE5\u8D44\u4EA7\u8FD1 90 \u5929\u8BBF\u95EE/\u4F7F\u7528 ${displaySignal(context.heat_count90d)} \u6B21\u3001\u4F7F\u7528\u4EBA\u6570 ${displaySignal(context.user_count90d)}\uFF0C\u5F71\u54CD\u5EA6 ${displaySignal(context.impact_degree)}\uFF1B\u672A\u53D1\u73B0\u8BED\u4E49\u91CD\u590D\u98CE\u9669\uFF0C\u4E14${matchedText}\u3002`;
+  }
+  return reason.replace(/^source=AGENT_AUTO_REVIEW;\s*/, "").replace(/rule_version=[^;]+;\s*/, "").replace(/conflict_risks=\[[^\]]*]/, "\u81EA\u52A8\u8BA4\u8BC1\u672A\u901A\u8FC7\uFF1A\u5B58\u5728\u9700\u8981\u4EBA\u5DE5\u786E\u8BA4\u7684\u5BA1\u6838\u98CE\u9669\u3002").replace(/conflict_risks=/, "\u81EA\u52A8\u8BA4\u8BC1\u672A\u901A\u8FC7\uFF1A\u5B58\u5728\u9700\u8981\u4EBA\u5DE5\u786E\u8BA4\u7684\u5BA1\u6838\u98CE\u9669\u3002");
+}
+function displaySignal(value) {
+  if (typeof value === "number" && Number.isFinite(value)) return String(value);
+  if (typeof value === "string" && value.trim()) return value;
+  return "\u672A\u77E5";
+}
+function record(value) {
+  return value && typeof value === "object" && !Array.isArray(value) ? value : {};
+}
+function array(value) {
+  return Array.isArray(value) ? value : [];
+}
+function numberValue(value) {
+  return typeof value === "number" && Number.isFinite(value) ? value : 0;
+}
+function stringValue(value) {
+  return typeof value === "string" && value.trim() ? value : void 0;
+}
+
 // src/commands/te-analysis/meta/governance-recommendation/decisions.ts
 var runIdFlag2 = {
   name: "run-id",
@@ -2245,7 +2970,7 @@ var runIdFlag2 = {
   required: false,
   desc: "Optional run_id filter."
 };
-var limitFlag4 = {
+var limitFlag5 = {
   name: "limit",
   type: "number",
   required: false,
@@ -2258,7 +2983,7 @@ var metadataGovernanceRecommendationDecisions = createAnalysisMetaCapabilityComm
   command: "decisions",
   capabilityId: "metadata.governance_recommendation.decisions",
   description: "List recent CLI Agent recommendation approval decisions.",
-  flags: [projectIdFlag, runIdFlag2, limitFlag4],
+  flags: [projectIdFlag, runIdFlag2, limitFlag5],
   risk: "read",
   buildInput: (ctx) => compactInput({
     ...projectInput(ctx),
@@ -2271,6 +2996,7 @@ var metadataGovernanceRecommendationDecisions = createAnalysisMetaCapabilityComm
 var commands11 = [
   metadataGovernanceRecommendationExport,
   metadataGovernanceRecommendationSubmit,
+  metadataGovernanceRecommendationAutoReview,
   metadataGovernanceRecommendationDecisions
 ];
 var governance_recommendation_default = commands11;
@@ -2322,7 +3048,7 @@ function object(value, name) {
   }
   return value;
 }
-function array(value, name) {
+function array2(value, name) {
   if (!Array.isArray(value) || value.length < 1 || value.length > 5e3) {
     throw new Error(`${name} must contain 1 to 5000 items.`);
   }
@@ -2367,6 +3093,7 @@ var SUBMIT_TO_PAGE_HELP = [
   "- relations should let the page render dashboard -> report -> metadata with contains/uses edges. Use an empty relations array only when the package truly has no known parent-child evidence.",
   "- Each submitted item must keep source_link or evidence_links[].url so reviewers can jump to source evidence.",
   "- item.ai_summary.summary is the per-item recommendation reason. It must cite concrete item evidence, not generic review boilerplate. batch ai_summary.summary is only the batch overview.",
+  "- When submitting manual_review_handoff leftovers, copy manual_review_handoff.auto_review_trace into source_metadata.auto_review_trace so page audit records include the assets already certified automatically.",
   "- For reports and SQL reports, item.ai_summary.analysis_explanation must explain reviewer-readable calculations or measures from packaged evidence_snapshot.analysis. A purpose-only summary is incomplete and is rejected locally before dispatch.",
   "- Reviewer-visible text should follow the project-KB source style: one business Chinese Agent summary that explains purpose, calculation caliber, filters, time scope, boundaries, and concrete reviewer questions. Keep raw SQL, parser labels, temporary aliases, parameter placeholders, hashes, and evidence paths in evidence_snapshot only; independent Agent preflight flags visible implementation terms as quality findings.",
   "- The command output includes review_page_url when review_url is present. Return review_page_url to the user; do not prepend the Common/API host to review_url yourself.",
@@ -2378,6 +3105,7 @@ var SUBMIT_TO_PAGE_HELP = [
   '  "title": "<review batch title>",',
   '  "source_run_id": "<export.run_id>",',
   '  "source_task_id": "<optional preauthorized task id>",',
+  '  "source_metadata": { "auto_review_trace": "<optional trace from manual_review_handoff.auto_review_trace>" },',
   '  "ai_summary": { "summary": "<batch overview>" },',
   '  "presentation_snapshot": {',
   '    "project": { "id": 1, "name": "<project name>" },',
@@ -2465,7 +3193,7 @@ var agentReviewSubmitToPage = createAnalysisMetaCapabilityCommand({
   postProcess: (result, _input, ctx) => normalizeSubmitResult(result, resolvePublicWebHost(ctx.host()), ctx.host())
 });
 function validateInput(input) {
-  const items = array(input.items, "items").map((value) => {
+  const items = array2(input.items, "items").map((value) => {
     const item = object(value, "items[]");
     fields(item, [
       "client_item_id",
@@ -2512,6 +3240,7 @@ function validateInput(input) {
     "title",
     "source_run_id",
     "source_task_id",
+    "source_metadata",
     "ai_summary",
     "presentation_snapshot",
     "items"
@@ -2581,7 +3310,7 @@ function validateEvidenceLinks(item) {
   const sourceLink = typeof item.source_link === "string" && item.source_link.trim();
   let evidenceLink = false;
   if ("evidence_links" in item) {
-    evidenceLink = array(item.evidence_links, "items[].evidence_links").some((value) => {
+    evidenceLink = array2(item.evidence_links, "items[].evidence_links").some((value) => {
       const link = object(value, "items[].evidence_links[]");
       return typeof link.url === "string" && !!link.url.trim();
     });
@@ -2592,17 +3321,17 @@ function validateEvidenceLinks(item) {
 }
 function validatePresentation(presentation, itemIds) {
   const displayed = /* @__PURE__ */ new Set();
-  for (const topicValue of array(presentation.topics, "presentation_snapshot.topics")) {
+  for (const topicValue of array2(presentation.topics, "presentation_snapshot.topics")) {
     const topic = object(topicValue, "presentation_snapshot.topics[]");
     if ("items" in topic) {
       throw new Error("presentation_snapshot.topics[] must use groups[].items, not top-level items.");
     }
-    for (const groupValue of array(topic.groups, "presentation_snapshot.topics[].groups")) {
+    for (const groupValue of array2(topic.groups, "presentation_snapshot.topics[].groups")) {
       const group = object(groupValue, "presentation_snapshot.topics[].groups[]");
       if (typeof group.id !== "string" || !group.id.trim() || typeof group.name !== "string" || !group.name.trim()) {
         throw new Error("presentation_snapshot.topics[].groups[] requires nonempty string id and name.");
       }
-      for (const itemValue of array(group.items, "presentation_snapshot.topics[].groups[].items")) {
+      for (const itemValue of array2(group.items, "presentation_snapshot.topics[].groups[].items")) {
         const item = object(itemValue, "presentation_snapshot.topics[].groups[].items[]");
         if (typeof item.id !== "string" || !item.id.trim()) {
           throw new Error("presentation_snapshot display items require nonempty string id.");
@@ -2649,7 +3378,7 @@ var agentReviewReview = createAnalysisMetaCapabilityCommand({
     { name: "decisions", type: "json", required: true, desc: "Versioned decisions: item_id (string), version (integer), decision APPROVE/DEFER/REJECT, reason (required for DEFER/REJECT)." }
   ],
   buildInput: (ctx) => {
-    const decisions = array(ctx.json("decisions"), "--decisions").map((value) => {
+    const decisions = array2(ctx.json("decisions"), "--decisions").map((value) => {
       const decision = object(value, "decisions[]");
       fields(decision, ["item_id", "version", "decision", "reason"], "decisions[]");
       decimalId(decision.item_id, "decisions[].item_id");
@@ -2686,7 +3415,7 @@ var agentReviewRetry = createAnalysisMetaCapabilityCommand({
     { name: "item-ids", type: "json", required: true, desc: "1 to 5000 failed item IDs as decimal strings. Successful items must not be retried." }
   ],
   buildInput: (ctx) => {
-    const ids = array(ctx.json("item-ids"), "--item-ids").map((id) => decimalId(id, "item_ids[]"));
+    const ids = array2(ctx.json("item-ids"), "--item-ids").map((id) => decimalId(id, "item_ids[]"));
     unique(ids, "item_ids");
     return { ...batchInput(ctx), client_request_id: text(ctx, "client-request-id"), item_ids: ids };
   }
@@ -2770,9 +3499,9 @@ var analysisMetaAssetUsageList = createAnalysisGovernanceCapabilityCommand({
   command: "list",
   capabilityId: "governance.asset.list",
   description: "List assets for usage governance.",
-  flags: [projectIdFlag, queryFlag, searchsFlag, ruleFlag, operationTypeFlag, directoryLimitFlag, directoryOffsetFlag, payloadFlag],
+  flags: [projectIdFlag, nodeIdFlag, queryFlag, searchsFlag, ruleFlag, operationTypeFlag, directoryLimitFlag, directoryOffsetFlag, payloadFlag],
   risk: "read",
-  buildInput: (ctx) => assetGovernanceInput(ctx, ["query", "searchs", "rule", "operation_type", "limit", "offset"])
+  buildInput: (ctx) => assetGovernanceInput(ctx, ["node_id", "query", "searchs", "rule", "operation_type", "limit", "offset"])
 });
 
 // src/commands/te-analysis/meta/asset/usage-export.ts
@@ -2780,10 +3509,11 @@ var analysisMetaAssetUsageExport = createAnalysisGovernanceCapabilityCommand({
   resource: "asset",
   command: "export",
   capabilityId: "governance.asset.export",
-  description: "Export asset usage governance rows as an inline gateway result.",
-  flags: [projectIdFlag, queryFlag, searchsFlag, ruleFlag, operationTypeFlag, limitFlag, offsetFlag, payloadFlag],
+  description: "Export asset usage governance rows as an asynchronous artifact; optionally wait and download.",
+  flags: [projectIdFlag, nodeIdFlag, queryFlag, searchsFlag, ruleFlag, operationTypeFlag, limitFlag, offsetFlag, payloadFlag, ...governanceExportFlags("jsonl")],
   risk: "read",
-  buildInput: (ctx) => assetGovernanceInput(ctx, ["query", "searchs", "rule", "operation_type", "limit", "offset"])
+  asyncArtifact: true,
+  buildInput: (ctx) => assetGovernanceInput(ctx, [...governanceExportFields, "node_id", "query", "searchs", "rule", "operation_type", "limit", "offset"])
 });
 
 // src/commands/te-analysis/meta/asset/lineage-get.ts
@@ -2891,9 +3621,10 @@ var analysisMetaAssetBatchInfoExport = createAnalysisGovernanceCapabilityCommand
   command: "batch-info-export",
   capabilityId: "governance.asset.batch_export_info",
   description: "Batch export asset information.",
-  flags: [projectIdFlag, nodeIdsFlag, payloadFlag],
+  flags: [projectIdFlag, nodeIdsFlag, payloadFlag, ...governanceExportFlags("xlsx")],
   risk: "read",
-  buildInput: (ctx) => assetGovernanceInput(ctx, ["node_ids"])
+  asyncArtifact: true,
+  buildInput: (ctx) => assetGovernanceInput(ctx, [...governanceExportFields, "node_ids"])
 });
 
 // src/commands/te-analysis/meta/asset/batch-sql-export.ts
@@ -2902,9 +3633,10 @@ var analysisMetaAssetBatchSqlExport = createAnalysisGovernanceCapabilityCommand(
   command: "batch-sql-export",
   capabilityId: "governance.asset.batch_export_sql",
   description: "Batch export asset SQL definitions.",
-  flags: [projectIdFlag, nodeIdsFlag, payloadFlag],
+  flags: [projectIdFlag, nodeIdsFlag, payloadFlag, ...governanceExportFlags("xlsx")],
   risk: "read",
-  buildInput: (ctx) => assetGovernanceInput(ctx, ["node_ids"])
+  asyncArtifact: true,
+  buildInput: (ctx) => assetGovernanceInput(ctx, [...governanceExportFields, "node_ids"])
 });
 
 // src/commands/te-analysis/meta/asset/batch-delete.ts
@@ -2979,9 +3711,10 @@ var analysisMetaAssetOperationRecordExport = createAnalysisGovernanceCapabilityC
   command: "export",
   capabilityId: "governance.operation_record.export",
   description: "Export one asset batch operation record result.",
-  flags: [projectIdFlag, recordIdFlag, payloadFlag],
+  flags: [projectIdFlag, recordIdFlag, payloadFlag, ...governanceExportFlags("xlsx")],
   risk: "read",
-  buildInput: (ctx) => assetGovernanceInput(ctx, ["record_id"])
+  asyncArtifact: true,
+  buildInput: (ctx) => assetGovernanceInput(ctx, [...governanceExportFields, "record_id"])
 });
 
 // src/commands/te-analysis/governance/asset-authentication-shared.ts
@@ -3359,7 +4092,7 @@ var reportList = createAnalysisCapabilityCommand({
   resource: "report",
   command: "list",
   capabilityId: "analysis.report.list",
-  description: "List analysis reports visible to the current user through the capability gateway.",
+  description: "List analysis reports the current user can edit or manage. Read-only reports are excluded; use analysis asset search for readable asset discovery.",
   flags: [
     projectIdFlag,
     queriesFlag,
@@ -3428,18 +4161,19 @@ var AI_MODEL_TYPE_VALUES = [
   "path",
   "prop_analysis",
   "sql",
+  "session",
   "heat_map",
   "rank_list",
   "revenue"
 ];
-var AI_MODEL_DESCRIPTION = "Supported AI-facing model_type values, 12 total. 9 common models: event (event analysis), retention (retention analysis), funnel (funnel conversion), distribution (distribution analysis), attribution (attribution analysis), interval (interval analysis), path (path analysis), prop_analysis (property analysis), sql (SQL analysis). 3 scenario models: heat_map (heat map analysis), rank_list (ranking analysis), revenue (revenue analysis). Tags and cohorts/clusters are separate capabilities and are not ad-hoc model_type values.";
+var AI_MODEL_DESCRIPTION = "Supported AI-facing model_type values, 13 total. 10 common models: event (event analysis), retention (retention analysis), funnel (funnel conversion), distribution (distribution analysis), attribution (attribution analysis), interval (interval analysis), path (path analysis), prop_analysis (property analysis), sql (SQL analysis), session (session analysis). 3 scenario models: heat_map (heat map analysis), rank_list (ranking analysis), revenue (revenue analysis). Tags and cohorts/clusters are separate capabilities and are not ad-hoc model_type values.";
 var REPORT_WRITE_MODEL_TYPE_VALUES = [
   ...AI_MODEL_TYPE_VALUES,
   "tag"
 ];
 var REPORT_WRITE_MODEL_DESCRIPTION = `${AI_MODEL_DESCRIPTION} Report create/update also supports tag for saved tag report data; use tag as the AI-facing spelling.`;
-var AI_DEFINITION_DESCRIPTION = 'Event metrics: omit optional display_name unless the target command schema explicitly supports it. Funnel step filters use event_property_name (not field) and string-array values, including "true"/"false" for boolean properties. For tag/cluster filters, cluster_date_policy accepts LATEST (default), AUTO (match the computed result for each analysis date), or SPECIFIED (requires specified_cluster_date in yyyy-MM-dd format). AI-facing model definition JSON. Do not pass raw QP, events, event_view, visual_view, or analysis_query. Distribution filters must be attached to the corresponding distribution_metrics[].filters; do not use top-level filters or relation. For path definitions, global filters support user_property, cluster, and tag only; event_property is not supported. session_unit accepts second (1..999), minute (1..999), or hour (1..24). Do not use day; express one day as session_interval=24 and session_unit=hour. For SQL, a simple query is {"sql":"select ..."}; raw variables use ${name}, while typed params use ${Text:name}, ${Selector:name}, or ${PartDate:name}. PartDate expands to a complete predicate, so write WHERE ${PartDate:d}, not a column followed by the placeholder. A part_date parameter may set boolean use_timezone; it defaults to false and controls whether that parameter uses the query effective timezone. Selector value must match one options[].value. Trino identifiers containing #, $, @, spaces, punctuation, or a reserved word must be delimited with double quotes, for example SELECT "#user_id", "$part_event", "end" FROM ...; single quotes are string literals. For multiline SQL JSON, the decoded sql value must contain a real line break; do not submit a literal \\n sequence outside quoted SQL text. Queries against an event table must include a date-partition predicate on the quoted "$part_date" column, for example WHERE "$part_date" BETWEEN \'2026-07-01\' AND \'2026-07-07\'; the backend rejects event-table SQL without it. The CLI preserves SQL text and never auto-quotes identifiers.';
-var REPORT_WRITE_DEFINITION_DESCRIPTION = `${AI_DEFINITION_DESCRIPTION} For model_type=tag, pass a tag report intent such as {"tag":{"tag_name":"vip_users","time_range":{"mode":"recent","unit":"day","value":7}}}. Tags are supported for report create/update and report data, not ad-hoc analysis.`;
+var AI_DEFINITION_DESCRIPTION = 'Event metrics: omit optional display_name unless the target command schema explicitly supports it. Funnel step filters use event_property_name (not field) and string-array values, including "true"/"false" for boolean properties. For tag/cluster filters, cluster_date_policy accepts LATEST (default), AUTO (match the computed result for each analysis date), or SPECIFIED (requires specified_cluster_date in yyyy-MM-dd format). AI-facing model definition JSON. Do not pass raw QP, events, event_view, visual_view, or analysis_query. Distribution filters must be attached to the corresponding distribution_metrics[].filters; do not use top-level filters or relation. For path definitions, global filters support user_property, cluster, and tag only; event_property is not supported. session_unit accepts second (1..999), minute (1..999), or hour (1..24). Do not use day; express one day as session_interval=24 and session_unit=hour. Session analysis is a different model: it cuts sessions with session_interval plus interval_unit (second and minute 1..999, hour 1..24), required unless cut_mode=session_id, and its metrics must match view_mode. For SQL, a simple query is {"sql":"select ..."}; raw variables use ${name}, while typed params use ${Text:name}, ${Selector:name}, or ${PartDate:name}. PartDate expands to a complete predicate, so write WHERE ${PartDate:d}, not a column followed by the placeholder. A part_date parameter may set boolean use_timezone; it defaults to false and controls whether that parameter uses the query effective timezone. Selector value must match one options[].value. Trino identifiers containing #, $, @, spaces, punctuation, or a reserved word must be delimited with double quotes, for example SELECT "#user_id", "$part_event", "end" FROM ...; single quotes are string literals. For multiline SQL JSON, the decoded sql value must contain a real line break; do not submit a literal \\n sequence outside quoted SQL text. Queries against an event table must include a date-partition predicate on the quoted "$part_date" column, for example WHERE "$part_date" BETWEEN \'2026-07-01\' AND \'2026-07-07\'; the backend rejects event-table SQL without it. The CLI preserves SQL text and never auto-quotes identifiers.';
+var REPORT_WRITE_DEFINITION_DESCRIPTION = `${AI_DEFINITION_DESCRIPTION} Saved-report filters may contain one compound group level only; every item inside that group must be a leaf without another items array. Historical deeper trees remain readable but cannot be written back as a definition. For model_type=tag, pass a tag report intent such as {"tag":{"tag_name":"vip_users","time_range":{"mode":"recent","unit":"day","value":7}}}. Tags are supported for report create/update and report data, not ad-hoc analysis.`;
 function aiModelTypeFlag(required) {
   return {
     name: "model-type",
@@ -3453,18 +4187,32 @@ function validateFunnelStepFilters(modelType, definition) {
   const steps = definition.funnel.steps;
   if (!Array.isArray(steps)) return;
   const errors = [];
-  steps.forEach((step, stepIndex) => {
-    if (!isRecord(step) || !Array.isArray(step.filters)) return;
-    step.filters.forEach((filter, filterIndex) => {
-      if (!isRecord(filter)) return;
-      const location = `definition.funnel.steps[${stepIndex}].filters[${filterIndex}]`;
-      if ("field" in filter || typeof filter.event_property_name !== "string" || !filter.event_property_name.trim()) {
-        errors.push(`${location}: use a non-empty event_property_name, not a generic field object.`);
+  const visit = (filter, location) => {
+    if (!isRecord(filter)) {
+      errors.push(`${location}: use a filter object.`);
+      return;
+    }
+    if ("items" in filter) {
+      if (Object.keys(filter).some((key) => key !== "items" && key !== "relation")) {
+        errors.push(`${location}: compound groups contain only items and relation; put event_property_name and operator on their leaf items.`);
       }
-      if ("values" in filter && (!Array.isArray(filter.values) || filter.values.some((value) => typeof value !== "string"))) {
-        errors.push(`${location}.values: use an array of strings (boolean properties use "true" or "false").`);
+      if (!Array.isArray(filter.items) || filter.items.length === 0) {
+        errors.push(`${location}.items: use a non-empty array of event-property filters or nested groups.`);
+      } else {
+        filter.items.forEach((item, index) => visit(item, `${location}.items[${index}]`));
       }
-    });
+      return;
+    }
+    if ("field" in filter || typeof filter.event_property_name !== "string" || !filter.event_property_name.trim()) {
+      errors.push(`${location}: use a non-empty event_property_name, not a generic field object.`);
+    }
+    if ("values" in filter && (!Array.isArray(filter.values) || filter.values.some((value) => typeof value !== "string"))) {
+      errors.push(`${location}.values: use an array of strings (boolean properties use "true" or "false").`);
+    }
+  };
+  steps.forEach((step, stepIndex) => {
+    if (!isRecord(step) || !Array.isArray(step.filters)) return;
+    step.filters.forEach((filter, filterIndex) => visit(filter, `definition.funnel.steps[${stepIndex}].filters[${filterIndex}]`));
   });
   if (errors.length) {
     throw new CliValidationError(errors.join("\n"), {
@@ -3554,7 +4302,7 @@ var reportCreate = createAnalysisCapabilityCommand({
 function validateReportUpdate(ctx) {
   const hasDefinition = ctx.str("definition") !== "";
   const hasResolutions = ctx.json("resolutions") !== void 0;
-  const hasMetadataUpdate = ctx.str("report-name") !== "" || ctx.str("report-desc") !== "";
+  const hasMetadataUpdate = ctx.str("report-name") !== "" || optionalStringPreserveEmpty(ctx, "report-desc") !== void 0;
   if (!hasDefinition && !hasMetadataUpdate) {
     throw new Error("At least one of --report-name, --report-desc, or --definition is required.");
   }
@@ -3576,7 +4324,7 @@ var reportUpdate = createAnalysisCapabilityCommand({
     { name: "report-id", type: "number", required: true, desc: "Report ID to update." },
     { name: "report-version", type: "number", required: true, desc: "Current report version from report get." },
     { name: "report-name", type: "string", required: false, desc: "New report display name." },
-    { name: "report-desc", type: "string", required: false, desc: "New report description." },
+    { name: "report-desc", type: "string", required: false, desc: "New report description. Pass an empty string to clear it; omit to preserve it." },
     reportWriteModelTypeFlag(false),
     reportWriteDefinitionFlag(false),
     modelDefinitionIntentSnapshotFlag,
@@ -3592,7 +4340,7 @@ var reportUpdate = createAnalysisCapabilityCommand({
     report_id: ctx.num("report-id"),
     version: ctx.num("report-version"),
     report_name: optionalString(ctx, "report-name"),
-    report_desc: optionalString(ctx, "report-desc"),
+    report_desc: optionalStringPreserveEmpty(ctx, "report-desc"),
     model_type: optionalString(ctx, "model-type"),
     definition: optionalJson(ctx, "definition"),
     resolutions: optionalJson(ctx, "resolutions"),
@@ -3841,7 +4589,7 @@ var dashboardList = createAnalysisCapabilityCommand({
   resource: "dashboard",
   command: "list",
   capabilityId: "analysis.dashboard.list",
-  description: "List dashboards visible to the current user through the capability gateway.",
+  description: "List dashboards the current user can update or manage. Read-only dashboards are excluded; use analysis asset search for readable asset discovery.",
   flags: [
     projectIdFlag,
     queriesFlag,
@@ -4176,14 +4924,13 @@ var dashboardReportDataExport = createAnalysisCapabilityCommand({
     clusterQueryScopeFlag,
     slaveClusterIdFlag,
     { name: "zone-offset", type: "number", required: false, desc: reportDataZoneOffsetDescription },
-    { name: "use-cache", type: "boolean", required: false, desc: "Whether to use cache. Default: true." },
     { name: "request-id", type: "string", required: false, desc: "Optional cli_<32 lowercase hex> request ID. Generated when omitted." },
     asyncTimeoutSecondsFlag,
     { name: "artifact-format", type: "string", required: false, desc: "Artifact format. Only jsonl is supported." }
   ],
   risk: "read",
   validate: validateClusterQueryRouting,
-  buildInput: dashboardReportDataInput
+  buildInput: (ctx) => dashboardReportDataInput(ctx, false)
 });
 
 // src/commands/te-analysis/dashboard-report-data/index.ts
@@ -4548,7 +5295,7 @@ var adhocRun = createAnalysisCapabilityCommand({
   resource: "adhoc",
   command: "run",
   capabilityId: "analysis.adhoc.run",
-  description: `Run one unified ad-hoc analysis from an AI-facing model definition. Supports 12 AI-facing models: 9 common models plus 3 scenario models. Tags and cohorts/clusters are separate capabilities, not ad-hoc model_type values. Returns query_context_id for Redis-backed query follow-ups. ${analysisDataRunRoutingHelp}`,
+  description: `Run one unified ad-hoc analysis from an AI-facing model definition. Supports 13 AI-facing models: 10 common models plus 3 scenario models. Tags and cohorts/clusters are separate capabilities, not ad-hoc model_type values. Returns query_context_id for Redis-backed query follow-ups. ${analysisDataRunRoutingHelp}`,
   flags: [
     ...adhocRunFlags,
     syncTimeoutSecondsFlag
@@ -5797,6 +6544,54 @@ var drilldownUserEventsRun = createAnalysisCapabilityCommand({
 var commands40 = [drilldownUserEventsRun, drilldownUserEventsExport];
 var drilldown_user_events_default = commands40;
 
+// src/commands/te-analysis/drilldown-session-details/run.ts
+var queryContextIdFlag3 = {
+  name: "query-context-id",
+  type: "string",
+  required: true,
+  desc: "query_context_id returned by a synchronous session-analysis preview. Analysis exports never create one."
+};
+var sessionPreviewRowsFlag = {
+  name: "preview-rows",
+  type: "number",
+  required: false,
+  desc: "Maximum session or step detail rows returned. Default: 100, max: 1000. 1000 is also the backend session-detail ceiling, so a larger population cannot be completed by paging.",
+  min: 1,
+  max: 1e3
+};
+var sessionDetailsRoutingHelp = "Routing: --preview-rows bounds returned detail rows; agents should normally pass 100. There is no export variant, so rows beyond the limit are unreachable; narrow the analysis itself and re-run the preview.";
+var drilldownSessionDetailsRun = createAnalysisCapabilityCommand({
+  resource: "drilldown-session-details",
+  command: "run",
+  capabilityId: "analysis.query.drilldown_session_details",
+  description: `Preview the individual sessions or steps behind one session-analysis session-count or step-count cell. Session-user and step-user columns drill down with analysis drilldown-entities run instead. ${sessionDetailsRoutingHelp}`,
+  flags: [
+    projectIdFlag,
+    queryContextIdFlag3,
+    sourceFlag,
+    coordinateFlag,
+    requestIdFlag,
+    useCacheFlag,
+    sessionPreviewRowsFlag,
+    syncTimeoutSecondsFlag
+  ],
+  risk: "read",
+  buildInput: (ctx) => compactInput({
+    project_id: ctx.num("project-id"),
+    query_context_id: ctx.str("query-context-id"),
+    source: optionalJson(ctx, "source"),
+    coordinate: ctx.json("coordinate"),
+    request_id: optionalString(ctx, "request-id"),
+    use_cache: optionalBoolean(ctx, "use-cache"),
+    preview_rows: optionalNumber(ctx, "preview-rows"),
+    timeout_seconds: optionalNumber(ctx, "timeout-seconds")
+  })
+});
+
+// src/commands/te-analysis/drilldown-session-details/index.ts
+var commands41 = [drilldownSessionDetailsRun];
+var drilldown_session_details_default = commands41;
+
 // src/commands/te-analysis/user/index.ts
 import { existsSync, statSync as statSync2 } from "fs";
 var authenticatedOnlyFlag = {
@@ -6308,7 +7103,7 @@ var memberExportFlags = [
   memberArtifactFormatFlag,
   asyncTimeoutSecondsFlag
 ];
-var commands41 = [
+var commands42 = [
   capability(
     "user-cluster",
     "list",
@@ -6563,7 +7358,7 @@ var commands41 = [
     ...memberExportFlags
   ], "read", (ctx) => historyTagDataDrilldownInput(ctx, false), { asyncArtifact: true })
 ];
-var user_default = commands41;
+var user_default = commands42;
 
 // src/commands/te-analysis/query-cluster/list.ts
 var queryClusterList = createAnalysisCapabilityCommand({
@@ -6577,8 +7372,8 @@ var queryClusterList = createAnalysisCapabilityCommand({
 });
 
 // src/commands/te-analysis/query-cluster/index.ts
-var commands42 = [queryClusterList];
-var query_cluster_default = commands42;
+var commands43 = [queryClusterList];
+var query_cluster_default = commands43;
 
 // src/commands/te-analysis/sql-table/columns.ts
 var sqlTableColumns = createAnalysisCapabilityCommand({
@@ -6592,7 +7387,7 @@ var sqlTableColumns = createAnalysisCapabilityCommand({
       name: "table-ref",
       type: "string",
       required: true,
-      desc: "Exact table_ref returned by analysis sql-table list; a unique table-only reference is also accepted."
+      desc: "Exact table_ref or quoted sql_reference returned by analysis sql-table list; a unique table-only reference is also accepted."
     },
     sqlTableUsageFlag
   ],
@@ -6609,7 +7404,7 @@ var sqlTableList = createAnalysisCapabilityCommand({
   resource: "sql-table",
   command: "list",
   capabilityId: "analysis.sql_table.list",
-  description: "List server-authoritative SQL table references queryable by the current user in a project.",
+  description: "List server-authoritative SQL table references queryable by the current user in a project, including authorized space tables. Use sql_reference when copying a table into SQL.",
   flags: [projectIdFlag, queriesFlag, directoryLimitFlag, directoryOffsetFlag, sqlTableUsageFlag],
   risk: "read",
   validate: validateQueriesFlag,
@@ -6623,8 +7418,8 @@ var sqlTableList = createAnalysisCapabilityCommand({
 });
 
 // src/commands/te-analysis/sql-table/index.ts
-var commands43 = [sqlTableList, sqlTableColumns];
-var sql_table_default = commands43;
+var commands44 = [sqlTableList, sqlTableColumns];
+var sql_table_default = commands44;
 
 // src/commands/te-analysis/entity/id-import-options.ts
 var entityIdImportOptions = createAnalysisCapabilityCommand({
@@ -6649,8 +7444,8 @@ var entityIdImportOptions = createAnalysisCapabilityCommand({
 });
 
 // src/commands/te-analysis/entity/index.ts
-var commands44 = [entityIdImportOptions];
-var entity_default = commands44;
+var commands45 = [entityIdImportOptions];
+var entity_default = commands45;
 
 // src/commands/te-analysis/input-file/inspect.ts
 var inputFileInspect = {
@@ -6733,8 +7528,8 @@ var inputFileUpload = {
 };
 
 // src/commands/te-analysis/input-file/index.ts
-var commands45 = [inputFileUpload, inputFileInspect, inputFilePurposeList];
-var input_file_default = commands45;
+var commands46 = [inputFileUpload, inputFileInspect, inputFilePurposeList];
+var input_file_default = commands46;
 
 // src/commands/te-analysis/project/access-detail/get.ts
 var projectAccessDetailGet = createAnalysisCapabilityCommand({
@@ -6752,10 +7547,10 @@ var projectAccessDetailGet = createAnalysisCapabilityCommand({
 });
 
 // src/commands/te-analysis/project/access-detail/index.ts
-var commands46 = [
+var commands47 = [
   projectAccessDetailGet
 ];
-var access_detail_default = commands46;
+var access_detail_default = commands47;
 
 // src/commands/te-analysis/project/data-power/delete.ts
 var projectDataPowerDelete = createAnalysisCapabilityCommand({
@@ -6827,13 +7622,13 @@ var projectDataPowerUpsert = createAnalysisCapabilityCommand({
 });
 
 // src/commands/te-analysis/project/data-power/index.ts
-var commands47 = [
+var commands48 = [
   projectDataPowerDelete,
   projectDataPowerGet,
   projectDataPowerList,
   projectDataPowerUpsert
 ];
-var data_power_default = commands47;
+var data_power_default = commands48;
 
 // src/commands/te-analysis/project/entity/create.ts
 var projectEntityCreate = createAnalysisCapabilityCommand({
@@ -6944,14 +7739,14 @@ var projectEntityUpdate = createAnalysisCapabilityCommand({
 });
 
 // src/commands/te-analysis/project/entity/index.ts
-var commands48 = [
+var commands49 = [
   projectEntityCreate,
   projectEntityDelete,
   projectEntityGet,
   projectEntityList,
   projectEntityUpdate
 ];
-var entity_default2 = commands48;
+var entity_default2 = commands49;
 
 // src/commands/te-analysis/project/entity-event/list.ts
 var projectEntityEventList = createAnalysisCapabilityCommand({
@@ -6971,10 +7766,10 @@ var projectEntityEventList = createAnalysisCapabilityCommand({
 });
 
 // src/commands/te-analysis/project/entity-event/index.ts
-var commands49 = [
+var commands50 = [
   projectEntityEventList
 ];
-var entity_event_default = commands49;
+var entity_event_default = commands50;
 
 // src/commands/te-analysis/project/function/list.ts
 var projectFunctionList = createAnalysisCapabilityCommand({
@@ -6994,10 +7789,10 @@ var projectFunctionList = createAnalysisCapabilityCommand({
 });
 
 // src/commands/te-analysis/project/function/index.ts
-var commands50 = [
+var commands51 = [
   projectFunctionList
 ];
-var function_default = commands50;
+var function_default = commands51;
 
 // src/commands/te-analysis/project/info/create.ts
 var projectInfoCreate = createAnalysisCapabilityCommand({
@@ -7092,14 +7887,14 @@ var projectInfoUpdate = createAnalysisCapabilityCommand({
 });
 
 // src/commands/te-analysis/project/info/index.ts
-var commands51 = [
+var commands52 = [
   projectInfoCreate,
   projectInfoDelete,
   projectInfoGet,
   projectInfoList,
   projectInfoUpdate
 ];
-var info_default = commands51;
+var info_default = commands52;
 
 // src/commands/te-analysis/project/mark-time/create.ts
 var projectMarkTimeCreate = createAnalysisCapabilityCommand({
@@ -7193,13 +7988,13 @@ var projectMarkTimeUpdate = createAnalysisCapabilityCommand({
 });
 
 // src/commands/te-analysis/project/mark-time/index.ts
-var commands52 = [
+var commands53 = [
   projectMarkTimeCreate,
   projectMarkTimeDelete,
   projectMarkTimeList,
   projectMarkTimeUpdate
 ];
-var mark_time_default = commands52;
+var mark_time_default = commands53;
 
 // src/commands/te-analysis/project/member/add.ts
 var projectMemberAdd = createAnalysisCapabilityCommand({
@@ -7315,7 +8110,7 @@ var projectMemberUpdate = createAnalysisCapabilityCommand({
 });
 
 // src/commands/te-analysis/project/member/index.ts
-var commands53 = [
+var commands54 = [
   projectMemberAdd,
   projectMemberBatchUpdate,
   projectMemberImport,
@@ -7323,7 +8118,7 @@ var commands53 = [
   projectMemberRemove,
   projectMemberUpdate
 ];
-var member_default = commands53;
+var member_default = commands54;
 
 // src/commands/te-analysis/project/member-candidate/list.ts
 var projectMemberCandidateList = createAnalysisCapabilityCommand({
@@ -7355,10 +8150,10 @@ var projectMemberCandidateList = createAnalysisCapabilityCommand({
 });
 
 // src/commands/te-analysis/project/member-candidate/index.ts
-var commands54 = [
+var commands55 = [
   projectMemberCandidateList
 ];
-var member_candidate_default = commands54;
+var member_candidate_default = commands55;
 
 // src/commands/te-analysis/project/member-handover/export.ts
 var projectMemberHandoverExport = createAnalysisCapabilityCommand({
@@ -7399,11 +8194,11 @@ var projectMemberHandoverRun = createAnalysisCapabilityCommand({
 });
 
 // src/commands/te-analysis/project/member-handover/index.ts
-var commands55 = [
+var commands56 = [
   projectMemberHandoverExport,
   projectMemberHandoverRun
 ];
-var member_handover_default = commands55;
+var member_handover_default = commands56;
 
 // src/commands/te-analysis/project/member-receiver/list.ts
 var projectMemberReceiverList = createAnalysisCapabilityCommand({
@@ -7421,10 +8216,10 @@ var projectMemberReceiverList = createAnalysisCapabilityCommand({
 });
 
 // src/commands/te-analysis/project/member-receiver/index.ts
-var commands56 = [
+var commands57 = [
   projectMemberReceiverList
 ];
-var member_receiver_default = commands56;
+var member_receiver_default = commands57;
 
 // src/commands/te-analysis/project/owner/update.ts
 var projectOwnerUpdate = createAnalysisCapabilityCommand({
@@ -7450,10 +8245,10 @@ var projectOwnerUpdate = createAnalysisCapabilityCommand({
 });
 
 // src/commands/te-analysis/project/owner/index.ts
-var commands57 = [
+var commands58 = [
   projectOwnerUpdate
 ];
-var owner_default = commands57;
+var owner_default = commands58;
 
 // src/commands/te-analysis/project/permission-binding/list.ts
 var projectPermissionBindingList = createAnalysisCapabilityCommand({
@@ -7475,10 +8270,10 @@ var projectPermissionBindingList = createAnalysisCapabilityCommand({
 });
 
 // src/commands/te-analysis/project/permission-binding/index.ts
-var commands58 = [
+var commands59 = [
   projectPermissionBindingList
 ];
-var permission_binding_default = commands58;
+var permission_binding_default = commands59;
 
 // src/commands/te-analysis/project/receive-status/update.ts
 var projectReceiveStatusUpdate = createAnalysisCapabilityCommand({
@@ -7499,10 +8294,10 @@ var projectReceiveStatusUpdate = createAnalysisCapabilityCommand({
 });
 
 // src/commands/te-analysis/project/receive-status/index.ts
-var commands59 = [
+var commands60 = [
   projectReceiveStatusUpdate
 ];
-var receive_status_default = commands59;
+var receive_status_default = commands60;
 
 // src/commands/te-analysis/project/role/delete.ts
 var projectRoleDelete = createAnalysisCapabilityCommand({
@@ -7594,13 +8389,13 @@ var projectRoleUpsert = createAnalysisCapabilityCommand({
 });
 
 // src/commands/te-analysis/project/role/index.ts
-var commands60 = [
+var commands61 = [
   projectRoleDelete,
   projectRoleGet,
   projectRoleList,
   projectRoleUpsert
 ];
-var role_default = commands60;
+var role_default = commands61;
 
 // src/commands/te-analysis/project/role-function/list.ts
 var projectRoleFunctionList = createAnalysisCapabilityCommand({
@@ -7626,10 +8421,10 @@ var projectRoleFunctionList = createAnalysisCapabilityCommand({
 });
 
 // src/commands/te-analysis/project/role-function/index.ts
-var commands61 = [
+var commands62 = [
   projectRoleFunctionList
 ];
-var role_function_default = commands61;
+var role_function_default = commands62;
 
 // src/commands/te-analysis/project/role-user/list.ts
 var projectRoleUserList = createAnalysisCapabilityCommand({
@@ -7649,10 +8444,10 @@ var projectRoleUserList = createAnalysisCapabilityCommand({
 });
 
 // src/commands/te-analysis/project/role-user/index.ts
-var commands62 = [
+var commands63 = [
   projectRoleUserList
 ];
-var role_user_default = commands62;
+var role_user_default = commands63;
 
 // src/commands/te-analysis/project/timezone/get.ts
 var projectTimezoneGet = createAnalysisCapabilityCommand({
@@ -7790,12 +8585,12 @@ function isObject(value) {
 }
 
 // src/commands/te-analysis/project/timezone/index.ts
-var commands63 = [
+var commands64 = [
   projectTimezoneGet,
   projectTimezoneOverview,
   projectTimezoneUpdate
 ];
-var timezone_default = commands63;
+var timezone_default = commands64;
 
 // src/commands/te-analysis/project/user-id-items/update.ts
 var projectUserIdItemsUpdate = createAnalysisCapabilityCommand({
@@ -7815,13 +8610,13 @@ var projectUserIdItemsUpdate = createAnalysisCapabilityCommand({
 });
 
 // src/commands/te-analysis/project/user-id-items/index.ts
-var commands64 = [
+var commands65 = [
   projectUserIdItemsUpdate
 ];
-var user_id_items_default = commands64;
+var user_id_items_default = commands65;
 
 // src/commands/te-analysis/project/index.ts
-var commands65 = [
+var commands66 = [
   ...access_detail_default,
   ...data_power_default,
   ...entity_default2,
@@ -7842,7 +8637,7 @@ var commands65 = [
   ...timezone_default,
   ...user_id_items_default
 ];
-var project_default = commands65;
+var project_default = commands66;
 
 // src/commands/te-analysis/tracking/shared.ts
 function createTrackingCapabilityCommand(config) {
@@ -8573,7 +9368,7 @@ function counts(plan, value) {
 }
 
 // src/commands/te-analysis/tracking/plan/index.ts
-var commands66 = [
+var commands67 = [
   trackingPlanGet,
   trackingPlanSaveItems,
   trackingPlanDeleteItems,
@@ -8583,7 +9378,7 @@ var commands66 = [
   trackingPlanSyncFromMeta,
   trackingPlanSyncDisplayNames
 ];
-var plan_default = commands66;
+var plan_default = commands67;
 
 // src/commands/te-analysis/tracking/sdk-sample/generate.ts
 var trackingSdkSampleGenerate = createTrackingCapabilityCommand({
@@ -8597,10 +9392,10 @@ var trackingSdkSampleGenerate = createTrackingCapabilityCommand({
 });
 
 // src/commands/te-analysis/tracking/sdk-sample/index.ts
-var commands67 = [
+var commands68 = [
   trackingSdkSampleGenerate
 ];
-var sdk_sample_default = commands67;
+var sdk_sample_default = commands68;
 
 // src/commands/te-analysis/tracking/plan-change-log/list.ts
 var trackingPlanChangeLogList = createTrackingCapabilityCommand({
@@ -8626,11 +9421,11 @@ var trackingPlanChangeLogExport = createTrackingCapabilityCommand({
 });
 
 // src/commands/te-analysis/tracking/plan-change-log/index.ts
-var commands68 = [
+var commands69 = [
   trackingPlanChangeLogList,
   trackingPlanChangeLogExport
 ];
-var plan_change_log_default = commands68;
+var plan_change_log_default = commands69;
 
 // src/commands/te-analysis/tracking/check/run.ts
 var trackingCheckRun = createTrackingCapabilityCommand({
@@ -8704,7 +9499,7 @@ var trackingCheckExport = createTrackingCapabilityCommand({
 });
 
 // src/commands/te-analysis/tracking/check/index.ts
-var commands69 = [
+var commands70 = [
   trackingCheckRun,
   trackingCheckList,
   trackingCheckGet,
@@ -8712,7 +9507,7 @@ var commands69 = [
   trackingCheckDelete,
   trackingCheckExport
 ];
-var check_default = commands69;
+var check_default = commands70;
 
 // src/commands/te-analysis/tracking/ingest/summary.ts
 var trackingIngestSummary = createTrackingCapabilityCommand({
@@ -8726,10 +9521,10 @@ var trackingIngestSummary = createTrackingCapabilityCommand({
 });
 
 // src/commands/te-analysis/tracking/ingest/index.ts
-var commands70 = [
+var commands71 = [
   trackingIngestSummary
 ];
-var ingest_default = commands70;
+var ingest_default = commands71;
 
 // src/commands/te-analysis/tracking/ingest-error/list.ts
 var trackingIngestErrorList = createTrackingCapabilityCommand({
@@ -8743,10 +9538,10 @@ var trackingIngestErrorList = createTrackingCapabilityCommand({
 });
 
 // src/commands/te-analysis/tracking/ingest-error/index.ts
-var commands71 = [
+var commands72 = [
   trackingIngestErrorList
 ];
-var ingest_error_default = commands71;
+var ingest_error_default = commands72;
 
 // src/commands/te-analysis/tracking/live-data/list.ts
 var trackingLiveDataList = createTrackingCapabilityCommand({
@@ -8772,11 +9567,11 @@ var trackingLiveDataExport = createTrackingCapabilityCommand({
 });
 
 // src/commands/te-analysis/tracking/live-data/index.ts
-var commands72 = [
+var commands73 = [
   trackingLiveDataList,
   trackingLiveDataExport
 ];
-var live_data_default = commands72;
+var live_data_default = commands73;
 
 // src/commands/te-analysis/tracking/event-blacklist/list.ts
 var trackingEventBlacklistList = createTrackingCapabilityCommand({
@@ -8812,12 +9607,12 @@ var trackingEventBlacklistUpdate = createTrackingCapabilityCommand({
 });
 
 // src/commands/te-analysis/tracking/event-blacklist/index.ts
-var commands73 = [
+var commands74 = [
   trackingEventBlacklistList,
   trackingEventBlacklistAdd,
   trackingEventBlacklistUpdate
 ];
-var event_blacklist_default = commands73;
+var event_blacklist_default = commands74;
 
 // src/commands/te-analysis/tracking/debug-device/add.ts
 var trackingDebugDeviceAdd = createTrackingCapabilityCommand({
@@ -8860,12 +9655,12 @@ var trackingDebugDeviceSelect = createTrackingCapabilityCommand({
 });
 
 // src/commands/te-analysis/tracking/debug-device/index.ts
-var commands74 = [
+var commands75 = [
   trackingDebugDeviceList,
   trackingDebugDeviceAdd,
   trackingDebugDeviceSelect
 ];
-var debug_device_default = commands74;
+var debug_device_default = commands75;
 
 // src/commands/te-analysis/tracking/debug-data/list.ts
 var debugStartTimeFlag = {
@@ -8924,11 +9719,11 @@ function isRecord3(value) {
 }
 
 // src/commands/te-analysis/tracking/debug-data/index.ts
-var commands75 = [trackingDebugDataList];
-var debug_data_default = commands75;
+var commands76 = [trackingDebugDataList];
+var debug_data_default = commands76;
 
 // src/commands/te-analysis/tracking/index.ts
-var commands76 = [
+var commands77 = [
   ...plan_default,
   ...sdk_sample_default,
   ...plan_change_log_default,
@@ -8940,7 +9735,7 @@ var commands76 = [
   ...debug_device_default,
   ...debug_data_default
 ];
-var tracking_default = commands76;
+var tracking_default = commands77;
 
 // src/commands/te-analysis/alert/shared.ts
 var alertIdFlag = {
@@ -9053,7 +9848,7 @@ var analysisAlertStop = createAnalysisCapabilityCommand({
 });
 
 // src/commands/te-analysis/alert/index.ts
-var commands77 = [
+var commands78 = [
   analysisAlertList,
   analysisAlertGet,
   analysisAlertCreate,
@@ -9062,7 +9857,7 @@ var commands77 = [
   analysisAlertStart,
   analysisAlertStop
 ];
-var alert_default = commands77;
+var alert_default = commands78;
 
 // src/commands/te-analysis/alert-detail/list.ts
 var analysisAlertDetailList = createAnalysisCapabilityCommand({
@@ -9076,10 +9871,10 @@ var analysisAlertDetailList = createAnalysisCapabilityCommand({
 });
 
 // src/commands/te-analysis/alert-detail/index.ts
-var commands78 = [
+var commands79 = [
   analysisAlertDetailList
 ];
-var alert_detail_default = commands78;
+var alert_detail_default = commands79;
 
 // src/commands/te-analysis/alert-job/list.ts
 var analysisAlertJobList = createAnalysisCapabilityCommand({
@@ -9093,10 +9888,10 @@ var analysisAlertJobList = createAnalysisCapabilityCommand({
 });
 
 // src/commands/te-analysis/alert-job/index.ts
-var commands79 = [
+var commands80 = [
   analysisAlertJobList
 ];
-var alert_job_default = commands79;
+var alert_job_default = commands80;
 
 // src/commands/te-analysis/alert-notice-config/list.ts
 var analysisAlertNoticeConfigList = createAnalysisCapabilityCommand({
@@ -9110,10 +9905,10 @@ var analysisAlertNoticeConfigList = createAnalysisCapabilityCommand({
 });
 
 // src/commands/te-analysis/alert-notice-config/index.ts
-var commands80 = [
+var commands81 = [
   analysisAlertNoticeConfigList
 ];
-var alert_notice_config_default = commands80;
+var alert_notice_config_default = commands81;
 
 // src/commands/te-analysis/system/shared.ts
 import { readFileSync as readFileSync3, statSync as statSync3 } from "fs";
@@ -10177,14 +10972,14 @@ var systemUsageCommands = [
 ];
 
 // src/commands/te-analysis/system/index.ts
-var commands81 = [
+var commands82 = [
   ...systemUsageCommands,
   ...systemIdentityCommands,
   ...systemSecurityCommands,
   ...systemMonitoringCommands,
   ...systemConfigurationCommands
 ];
-var system_default = commands81;
+var system_default = commands82;
 
 // src/commands/te-analysis/index.ts
 registerCapabilityGatewayRoute("analysis", { gatewayDomain: "analysis" });
@@ -10221,6 +11016,7 @@ var baseCommands = [
   ...drilldown_events_default,
   ...drilldown_entities_default,
   ...drilldown_user_events_default,
+  ...drilldown_session_details_default,
   ...user_default,
   ...sql_table_default,
   ...query_cluster_default,
@@ -10234,8 +11030,8 @@ var baseCommands = [
   ...alert_notice_config_default,
   ...system_default
 ];
-var commands82 = [...baseCommands];
-var te_analysis_default = commands82;
+var commands83 = [...baseCommands];
+var te_analysis_default = commands83;
 export {
   baseCommands,
   te_analysis_default as default