@thinkingai/ae-cli 6.1.4 → 6.1.6

package/README.md

@@ -52,7 +52,8 @@ ae-cli kb +add --name engineering-handbook --files '["./docs/guide.md","https://
 ae-cli kb +schema --name engineering-handbook
 ae-cli kb +compile --name engineering-handbook
 ae-cli kb +query -q "How to configure sandbox?" \
-  --sources '[{"scope":"company","name":"engineering-handbook"}]'
+  --sources '[{"scope":"company","name":"engineering-handbook"}]' \
+  --top-k 10
 
 # Retrieval primitives for external agents (read index → grep → read page)
 ae-cli kb +index --sources '[{"scope":"company","name":"engineering-handbook"}]'
@@ -107,7 +108,7 @@ Knowledge base lifecycle (`+new` → `+add` → `+schema` → `+compile` → `+s
 - **Schema** (`+schema`): `--name`, optional `--force`, `--model`
 - **Compile** (`+compile`): `--name`, `--mode incremental|full` (default: incremental)
 - **Status** (`+status`): `--name`
-- **Query** (`+query`): `--query` / `-q`, `--sources` JSON refs e.g. `[{"scope":"company","name":"engineering-handbook"}]`
+- **Query** (`+query`): `--query` / `-q`, optional `--sources` JSON refs (omit to search all accessible KBs), `--top-k` (1-50, default 10), `--locale`
 - **Remove source** (`+rm-source`): `--name`, `--display-name`
 - **Remove KB** (`+remove`): `--name`
 

package/README.zh.md

@@ -52,7 +52,8 @@ ae-cli kb +add --name engineering-handbook --files '["./docs/guide.md","https://
 ae-cli kb +schema --name engineering-handbook
 ae-cli kb +compile --name engineering-handbook
 ae-cli kb +query -q "如何配置 sandbox 容器？" \
-  --sources '[{"scope":"company","name":"engineering-handbook"}]'
+  --sources '[{"scope":"company","name":"engineering-handbook"}]' \
+  --top-k 10
 
 # 面向外部 agent 的检索原语（读 index → grep 定位 → read 翻页）
 ae-cli kb +index --sources '[{"scope":"company","name":"engineering-handbook"}]'
@@ -108,7 +109,7 @@ ae-cli auth logout
 - **生成 schema** (`+schema`)：`--name`，可选 `--force`、`--model`
 - **编译** (`+compile`)：`--name`，`--mode incremental|full`（默认 incremental）
 - **查询状态** (`+status`)：`--name`
-- **查询** (`+query`)：`--query` / `-q`，`--sources` JSON 引用，如 `[{"scope":"company","name":"engineering-handbook"}]`
+- **查询** (`+query`)：`--query` / `-q`，可选 `--sources` JSON 引用（省略则搜索全部可访问知识库）、`--top-k`（1-50，默认 10）、`--locale`
 - **删除源** (`+rm-source`)：`--name`，`--display-name`
 - **删除知识库** (`+remove`)：`--name`
 

package/dist/{auth-MEJ642P4.js → auth-ENM3FE6L.js}

@@ -3,8 +3,9 @@ import {
   invalidateAccessTokenForRetry,
   resolveHost,
   validateToken
-} from "./chunk-AJTH7LT3.js";
-import "./chunk-YCLVYFK7.js";
+} from "./chunk-IR4ZLVPW.js";
+import "./chunk-V6FR6WTW.js";
+import "./chunk-LYVNONC4.js";
 export {
   getToken,
   invalidateAccessTokenForRetry,

package/dist/{auth-7H3HAAJ3.js → auth-UPGUOKTW.js}

@@ -1,25 +1,31 @@
+import {
+  getLocalCliPackageInfo
+} from "./chunk-VTWMIC5L.js";
 import {
   printError,
-  printOutput
-} from "./chunk-TNW2CI4W.js";
+  printOutput,
+  runHostCompatCheck
+} from "./chunk-IMMGMU54.js";
 import {
   clearCliToken,
   mintCliToken
-} from "./chunk-2NDGFQHW.js";
+} from "./chunk-E7UXXHO3.js";
 import {
   clear,
   load,
   resolveHost,
   save
-} from "./chunk-AJTH7LT3.js";
+} from "./chunk-IR4ZLVPW.js";
 import {
   getFallbackCliToken,
   loadConfig,
-  logger,
   normalizeUrl,
   removeHost,
   saveConfig
-} from "./chunk-YCLVYFK7.js";
+} from "./chunk-V6FR6WTW.js";
+import {
+  logger
+} from "./chunk-LYVNONC4.js";
 
 // src/core/device-auth.ts
 import { execFileSync } from "child_process";
@@ -257,6 +263,7 @@ async function persistDeviceTokens(host, tokens) {
     accessExpiresAt: expiresAt
   });
   await mintCliToken(host);
+  await runHostCompatCheck(getLocalCliPackageInfo(), host);
 }
 function loginSummary(host, tokens) {
   return {

package/dist/{capability-QW4AVJHI.js → capability-AJC5CBRT.js}

@@ -12,22 +12,23 @@ import {
   inspectCapability,
   listCapabilities,
   validateCapability
-} from "./chunk-DYOS6YY7.js";
+} from "./chunk-HQ2A7ITL.js";
 import {
   printError,
   printOutput
-} from "./chunk-TNW2CI4W.js";
-import {
-  PermissionError
-} from "./chunk-NOO24N7W.js";
-import "./chunk-2NDGFQHW.js";
+} from "./chunk-IMMGMU54.js";
+import "./chunk-E7UXXHO3.js";
 import {
   SecureStoreAuthError,
   resolveHost
-} from "./chunk-AJTH7LT3.js";
+} from "./chunk-IR4ZLVPW.js";
 import {
   safeJsonParse
-} from "./chunk-YCLVYFK7.js";
+} from "./chunk-V6FR6WTW.js";
+import {
+  PermissionError
+} from "./chunk-24BAVOX3.js";
+import "./chunk-LYVNONC4.js";
 
 // src/commands/capability/index.ts
 import * as readline from "readline";
@@ -55,6 +56,26 @@ function resolveCapabilityGatewayDomain(capabilityId, domainOverride) {
   }
   return findGatewayDomain(cliDomain) ?? cliDomain;
 }
+function parseOptionalProjectId(raw) {
+  if (raw === void 0) {
+    return void 0;
+  }
+  const value = raw.trim();
+  if (!/^[1-9]\d*$/.test(value)) {
+    throw new CapabilityCommandValidationError(
+      "--project-id must be a positive integer.",
+      "Example: --project-id 1"
+    );
+  }
+  const projectId = Number(value);
+  if (!Number.isSafeInteger(projectId)) {
+    throw new CapabilityCommandValidationError(
+      "--project-id is outside the supported integer range.",
+      "Pass a positive safe integer."
+    );
+  }
+  return projectId;
+}
 function normalizeCapabilityList(value) {
   if (!Array.isArray(value)) {
     throw new Error("Capability gateway returned an invalid catalog: expected an array.");
@@ -114,28 +135,39 @@ function registerCapability(program) {
     printError("validation", "Missing subcommand.", "Run: ae-cli capability --help");
     process.exitCode = 1;
   });
-  capability.command("list").description("List capability summaries in a domain").requiredOption("--domain <domain>", "Capability namespace, such as analysis or metadata").action(async (opts) => {
+  capability.command("list").description("List capability summaries in a domain").requiredOption("--domain <domain>", "Capability namespace, such as analysis or metadata").option("--project-id <project-id>", "Filter by project membership, permissions, and enabled features").action(async (opts) => {
     await executeAndPrint(program, async (host) => {
       const gatewayDomain = findGatewayDomain(opts.domain) ?? opts.domain;
-      const catalog = normalizeCapabilityList(await listCapabilities(host, gatewayDomain));
+      const projectId = parseOptionalProjectId(opts.projectId);
+      const catalog = normalizeCapabilityList(await listCapabilities(host, gatewayDomain, projectId));
       const capabilities = filterCapabilities(catalog, opts.domain);
       return { domain: opts.domain, count: capabilities.length, capabilities };
     });
-  }).addHelpText("after", "\nExample:\n  ae-cli capability list --domain analysis");
-  capability.command("search").description("Search capability IDs and descriptions in a domain").argument("<query>", "Case-insensitive search terms").requiredOption("--domain <domain>", "Capability namespace, such as analysis or metadata").action(async (query, opts) => {
+  }).addHelpText(
+    "after",
+    "\nExamples:\n  ae-cli capability list --domain analysis\n  ae-cli capability list --domain analysis --project-id 1"
+  );
+  capability.command("search").description("Search capability IDs and descriptions in a domain").argument("<query>", "Case-insensitive search terms").requiredOption("--domain <domain>", "Capability namespace, such as analysis or metadata").option("--project-id <project-id>", "Filter by project membership, permissions, and enabled features").action(async (query, opts) => {
     await executeAndPrint(program, async (host) => {
       const gatewayDomain = findGatewayDomain(opts.domain) ?? opts.domain;
-      const catalog = normalizeCapabilityList(await listCapabilities(host, gatewayDomain));
+      const projectId = parseOptionalProjectId(opts.projectId);
+      const catalog = normalizeCapabilityList(await listCapabilities(host, gatewayDomain, projectId));
       const capabilities = filterCapabilities(catalog, opts.domain, query);
       return { domain: opts.domain, query, count: capabilities.length, capabilities };
     });
-  }).addHelpText("after", '\nExample:\n  ae-cli capability search "dashboard list" --domain analysis');
-  capability.command("inspect").description("Inspect one capability schema, risk, auth, and output metadata").argument("<capability-id>", "Capability ID, such as analysis.report.list").option("--domain <domain>", "Override the capability namespace used for gateway routing").action(async (capabilityId, opts) => {
+  }).addHelpText(
+    "after",
+    '\nExamples:\n  ae-cli capability search "dashboard list" --domain analysis\n  ae-cli capability search "dashboard list" --domain analysis --project-id 1'
+  );
+  capability.command("inspect").description("Inspect one capability schema, risk, auth, and output metadata").argument("<capability-id>", "Capability ID, such as analysis.report.list").option("--domain <domain>", "Override the capability namespace used for gateway routing").option("--project-id <project-id>", "Check availability in a project before returning metadata").action(async (capabilityId, opts) => {
     await executeAndPrint(program, async (host) => {
       const gatewayDomain = resolveCapabilityGatewayDomain(capabilityId, opts.domain);
-      return inspectCapability(host, gatewayDomain, capabilityId);
+      return inspectCapability(host, gatewayDomain, capabilityId, parseOptionalProjectId(opts.projectId));
     });
-  }).addHelpText("after", "\nExample:\n  ae-cli capability inspect analysis.dashboard.list");
+  }).addHelpText(
+    "after",
+    "\nExamples:\n  ae-cli capability inspect analysis.dashboard.list\n  ae-cli capability inspect analysis.dashboard.list --project-id 1"
+  );
   capability.command("validate").description(
     "Validate and normalize capability input only (schema/params). Does not execute business logic. Use when crafting complex payloads (nested objects, qp, share/member payloads) before dry-run/run. Success data: valid, capability_id, normalized_input. Unlike dry-run, does not return risk/output_mode/supports_cancel preview."
   ).argument("<capability-id>", "Capability ID, such as metadata.data_table.sql_write").option("--domain <domain>", "Override the capability namespace used for gateway routing").option("--input <json-or-path>", "Input JSON object, file path, @<path>, or - for stdin").action(async (capabilityId, opts) => {

package/dist/{capability-SCRFGODD.js → capability-TQ5KU5Q6.js}

@@ -12,22 +12,23 @@ import {
   inspectCapability,
   listCapabilities,
   validateCapability
-} from "./chunk-I4A62X3N.js";
+} from "./chunk-RGXCNC4N.js";
 import {
   printError,
   printOutput
-} from "./chunk-TNW2CI4W.js";
-import {
-  PermissionError
-} from "./chunk-NOO24N7W.js";
-import "./chunk-2NDGFQHW.js";
+} from "./chunk-IMMGMU54.js";
+import "./chunk-E7UXXHO3.js";
 import {
   SecureStoreAuthError,
   resolveHost
-} from "./chunk-AJTH7LT3.js";
+} from "./chunk-IR4ZLVPW.js";
 import {
   safeJsonParse
-} from "./chunk-YCLVYFK7.js";
+} from "./chunk-V6FR6WTW.js";
+import {
+  PermissionError
+} from "./chunk-24BAVOX3.js";
+import "./chunk-LYVNONC4.js";
 
 // src/commands/capability/index.ts
 import * as readline from "readline";
@@ -55,6 +56,26 @@ function resolveCapabilityGatewayDomain(capabilityId, domainOverride) {
   }
   return findGatewayDomain(cliDomain) ?? cliDomain;
 }
+function parseOptionalProjectId(raw) {
+  if (raw === void 0) {
+    return void 0;
+  }
+  const value = raw.trim();
+  if (!/^[1-9]\d*$/.test(value)) {
+    throw new CapabilityCommandValidationError(
+      "--project-id must be a positive integer.",
+      "Example: --project-id 1"
+    );
+  }
+  const projectId = Number(value);
+  if (!Number.isSafeInteger(projectId)) {
+    throw new CapabilityCommandValidationError(
+      "--project-id is outside the supported integer range.",
+      "Pass a positive safe integer."
+    );
+  }
+  return projectId;
+}
 function normalizeCapabilityList(value) {
   if (!Array.isArray(value)) {
     throw new Error("Capability gateway returned an invalid catalog: expected an array.");
@@ -114,28 +135,39 @@ function registerCapability(program) {
     printError("validation", "Missing subcommand.", "Run: ae-cli capability --help");
     process.exitCode = 1;
   });
-  capability.command("list").description("List capability summaries in a domain").requiredOption("--domain <domain>", "Capability namespace, such as analysis or metadata").action(async (opts) => {
+  capability.command("list").description("List capability summaries in a domain").requiredOption("--domain <domain>", "Capability namespace, such as analysis or metadata").option("--project-id <project-id>", "Filter by project membership, permissions, and enabled features").action(async (opts) => {
     await executeAndPrint(program, async (host) => {
       const gatewayDomain = findGatewayDomain(opts.domain) ?? opts.domain;
-      const catalog = normalizeCapabilityList(await listCapabilities(host, gatewayDomain));
+      const projectId = parseOptionalProjectId(opts.projectId);
+      const catalog = normalizeCapabilityList(await listCapabilities(host, gatewayDomain, projectId));
       const capabilities = filterCapabilities(catalog, opts.domain);
       return { domain: opts.domain, count: capabilities.length, capabilities };
     });
-  }).addHelpText("after", "\nExample:\n  ae-cli capability list --domain analysis");
-  capability.command("search").description("Search capability IDs and descriptions in a domain").argument("<query>", "Case-insensitive search terms").requiredOption("--domain <domain>", "Capability namespace, such as analysis or metadata").action(async (query, opts) => {
+  }).addHelpText(
+    "after",
+    "\nExamples:\n  ae-cli capability list --domain analysis\n  ae-cli capability list --domain analysis --project-id 1"
+  );
+  capability.command("search").description("Search capability IDs and descriptions in a domain").argument("<query>", "Case-insensitive search terms").requiredOption("--domain <domain>", "Capability namespace, such as analysis or metadata").option("--project-id <project-id>", "Filter by project membership, permissions, and enabled features").action(async (query, opts) => {
     await executeAndPrint(program, async (host) => {
       const gatewayDomain = findGatewayDomain(opts.domain) ?? opts.domain;
-      const catalog = normalizeCapabilityList(await listCapabilities(host, gatewayDomain));
+      const projectId = parseOptionalProjectId(opts.projectId);
+      const catalog = normalizeCapabilityList(await listCapabilities(host, gatewayDomain, projectId));
       const capabilities = filterCapabilities(catalog, opts.domain, query);
       return { domain: opts.domain, query, count: capabilities.length, capabilities };
     });
-  }).addHelpText("after", '\nExample:\n  ae-cli capability search "dashboard list" --domain analysis');
-  capability.command("inspect").description("Inspect one capability schema, risk, auth, and output metadata").argument("<capability-id>", "Capability ID, such as analysis.report.list").option("--domain <domain>", "Override the capability namespace used for gateway routing").action(async (capabilityId, opts) => {
+  }).addHelpText(
+    "after",
+    '\nExamples:\n  ae-cli capability search "dashboard list" --domain analysis\n  ae-cli capability search "dashboard list" --domain analysis --project-id 1'
+  );
+  capability.command("inspect").description("Inspect one capability schema, risk, auth, and output metadata").argument("<capability-id>", "Capability ID, such as analysis.report.list").option("--domain <domain>", "Override the capability namespace used for gateway routing").option("--project-id <project-id>", "Check availability in a project before returning metadata").action(async (capabilityId, opts) => {
     await executeAndPrint(program, async (host) => {
       const gatewayDomain = resolveCapabilityGatewayDomain(capabilityId, opts.domain);
-      return inspectCapability(host, gatewayDomain, capabilityId);
+      return inspectCapability(host, gatewayDomain, capabilityId, parseOptionalProjectId(opts.projectId));
     });
-  }).addHelpText("after", "\nExample:\n  ae-cli capability inspect analysis.dashboard.list");
+  }).addHelpText(
+    "after",
+    "\nExamples:\n  ae-cli capability inspect analysis.dashboard.list\n  ae-cli capability inspect analysis.dashboard.list --project-id 1"
+  );
   capability.command("validate").description(
     "Validate and normalize capability input only (schema/params). Does not execute business logic. Use when crafting complex payloads (nested objects, qp, share/member payloads) before dry-run/run. Success data: valid, capability_id, normalized_input. Unlike dry-run, does not return risk/output_mode/supports_cancel preview."
   ).argument("<capability-id>", "Capability ID, such as metadata.data_table.sql_write").option("--domain <domain>", "Override the capability namespace used for gateway routing").option("--input <json-or-path>", "Input JSON object, file path, @<path>, or - for stdin").action(async (capabilityId, opts) => {

package/dist/chunk-24BAVOX3.js

@@ -0,0 +1,51 @@
+// src/core/errors.ts
+var PermissionError = class extends Error {
+  constructor(message) {
+    super(message);
+    this.name = "PermissionError";
+  }
+};
+var CliValidationError = class extends Error {
+  code;
+  hint;
+  location;
+  constructor(message, options = {}) {
+    super(message);
+    this.name = "CliValidationError";
+    this.code = options.code;
+    this.hint = options.hint;
+    if (options.location) {
+      const location = {};
+      if (typeof options.location.segment === "number" && Number.isFinite(options.location.segment)) {
+        location.segment = options.location.segment;
+      }
+      if (typeof options.location.record === "number" && Number.isFinite(options.location.record)) {
+        location.record = options.location.record;
+      }
+      if (typeof options.location.field === "string" && options.location.field.length > 0) {
+        location.field = options.location.field;
+      }
+      if (Object.keys(location).length > 0) this.location = location;
+    }
+  }
+};
+var CommunityReportError = class extends Error {
+  code;
+  httpStatus;
+  hint;
+  meta;
+  constructor(message, options = {}) {
+    super(message, options.cause === void 0 ? void 0 : { cause: options.cause });
+    this.name = "CommunityReportError";
+    this.code = options.code;
+    this.httpStatus = options.httpStatus;
+    this.hint = options.hint;
+    this.meta = options.meta;
+  }
+};
+
+export {
+  PermissionError,
+  CliValidationError,
+  CommunityReportError
+};

package/dist/{chunk-MDJGDI6K.js → chunk-3KI3RRXX.js}

@@ -1,12 +1,12 @@
-import {
-  PermissionError
-} from "./chunk-NOO24N7W.js";
 import {
   getCliToken
-} from "./chunk-2NDGFQHW.js";
+} from "./chunk-E7UXXHO3.js";
 import {
   safeJsonParse
-} from "./chunk-YCLVYFK7.js";
+} from "./chunk-V6FR6WTW.js";
+import {
+  PermissionError
+} from "./chunk-24BAVOX3.js";
 
 // src/core/mcp-access.ts
 function buildUrl(host, path, params = {}) {

package/dist/{chunk-PKRD2IEM.js → chunk-3P3562ZX.js}

@@ -1,18 +1,20 @@
 import {
   getAnalysisMappingPathForClusterMode
-} from "./chunk-KGJQCYVC.js";
-import {
-  PermissionError
-} from "./chunk-NOO24N7W.js";
+} from "./chunk-LCXU3AAT.js";
 import {
   clearCliToken,
   getCliToken
-} from "./chunk-2NDGFQHW.js";
+} from "./chunk-E7UXXHO3.js";
 import {
   getActiveHost,
-  logger,
   safeJsonParse
-} from "./chunk-YCLVYFK7.js";
+} from "./chunk-V6FR6WTW.js";
+import {
+  PermissionError
+} from "./chunk-24BAVOX3.js";
+import {
+  logger
+} from "./chunk-LYVNONC4.js";
 
 // src/core/mcp.ts
 async function permissionMessage(resp) {

package/dist/{chunk-R77JT7XD.js → chunk-4Q5TNP4Q.js}

@@ -1,7 +1,7 @@
 import {
   getActiveHost,
   getSandboxRuntimeRoot
-} from "./chunk-YCLVYFK7.js";
+} from "./chunk-V6FR6WTW.js";
 
 // src/core/te-agent-credentials.ts
 import { readFileSync } from "fs";
@@ -147,8 +147,8 @@ async function signRequest(method, path, rawBody) {
       rawBody
     };
   }
-  const { getToken } = await import("./auth-MEJ642P4.js");
-  const { getCliToken } = await import("./cli-token-TVQRSE46.js");
+  const { getToken } = await import("./auth-ENM3FE6L.js");
+  const { getCliToken } = await import("./cli-token-4SBMXAUK.js");
   const baseUrl = sandboxCred?.url || teClaudeBaseFromActiveHost();
   const hostForToken = getActiveHost() || baseUrl;
   if (!baseUrl) {
@@ -338,7 +338,7 @@ async function uploadToMainApp(path, formData) {
       "X-Sandbox-Secret-Key": sandboxCred.sandboxSecretKey
     };
   } else {
-    const { getToken } = await import("./auth-MEJ642P4.js");
+    const { getToken } = await import("./auth-ENM3FE6L.js");
     baseUrl = (sandboxCred?.url || teClaudeBaseFromActiveHost() || "").replace(/\/$/, "");
     if (!baseUrl) {
       throw new TeAgentCredentialsError(

package/dist/{chunk-7OLGDQQ2.js → chunk-6CHYBI64.js}

@@ -5,10 +5,10 @@ import {
   dryRunCapability,
   executeCapabilityWithEnvelope,
   validateCapability
-} from "./chunk-DYOS6YY7.js";
+} from "./chunk-RGXCNC4N.js";
 import {
   withOutputMetadata
-} from "./chunk-TNW2CI4W.js";
+} from "./chunk-IMMGMU54.js";
 
 // src/core/capability-command.ts
 import { randomBytes } from "crypto";

package/dist/{chunk-6LEYLOV3.js → chunk-CPVTECJ3.js}

@@ -1,18 +1,20 @@
 import {
   getAnalysisMappingPathForClusterMode
-} from "./chunk-KGJQCYVC.js";
-import {
-  PermissionError
-} from "./chunk-NOO24N7W.js";
+} from "./chunk-LCXU3AAT.js";
 import {
   clearCliToken,
   getCliToken
-} from "./chunk-2NDGFQHW.js";
+} from "./chunk-E7UXXHO3.js";
 import {
   getActiveHost,
-  logger,
   safeJsonParse
-} from "./chunk-YCLVYFK7.js";
+} from "./chunk-V6FR6WTW.js";
+import {
+  PermissionError
+} from "./chunk-24BAVOX3.js";
+import {
+  logger
+} from "./chunk-LYVNONC4.js";
 
 // src/core/mcp.ts
 async function permissionMessage(resp) {

package/dist/{chunk-KCA6BA5D.js → chunk-DB4Q3ANU.js}

@@ -3,11 +3,13 @@ import {
   getToken,
   invalidateAccessTokenForRetry,
   resolveHost
-} from "./chunk-AJTH7LT3.js";
+} from "./chunk-IR4ZLVPW.js";
 import {
-  logger,
   safeJsonParse
-} from "./chunk-YCLVYFK7.js";
+} from "./chunk-V6FR6WTW.js";
+import {
+  logger
+} from "./chunk-LYVNONC4.js";
 
 // src/core/client.ts
 import WebSocket from "ws";

package/dist/{chunk-2NDGFQHW.js → chunk-E7UXXHO3.js}

@@ -3,17 +3,19 @@ import {
   load,
   loadCliToken,
   save
-} from "./chunk-AJTH7LT3.js";
+} from "./chunk-IR4ZLVPW.js";
 import {
   getActiveHost,
   getConfigDir,
   getFallbackCliToken,
   listHosts,
-  logger,
   normalizeUrl,
   safeJsonParse,
   safeReadJsonFile
-} from "./chunk-YCLVYFK7.js";
+} from "./chunk-V6FR6WTW.js";
+import {
+  logger
+} from "./chunk-LYVNONC4.js";
 
 // src/core/cli-token.ts
 import fs from "fs";
@@ -125,6 +127,11 @@ function clearPersistedCliToken(hostUrl) {
     save(hostUrl, { ...existing, cliToken: void 0 });
   }
 }
+function peekCliToken(hostOverride) {
+  const hostUrl = hostOverride || getActiveHost();
+  if (!hostUrl) return void 0;
+  return _cliTokenCache.get(hostUrl) || loadCliToken(hostUrl) || getFallbackCliToken(hostUrl) || void 0;
+}
 async function getCliToken(hostOverride) {
   const hostUrl = hostOverride || getActiveHost();
   let token = _cliTokenCache.get(hostUrl);
@@ -182,6 +189,7 @@ function _resetRenewMemoryForTest() {
 
 export {
   localRenewDate,
+  peekCliToken,
   getCliToken,
   mintCliToken,
   clearCliToken,

package/dist/{chunk-I4A62X3N.js → chunk-HQ2A7ITL.js}

@@ -1,14 +1,16 @@
-import {
-  PermissionError
-} from "./chunk-NOO24N7W.js";
 import {
   clearCliToken,
   getCliToken
-} from "./chunk-2NDGFQHW.js";
+} from "./chunk-E7UXXHO3.js";
 import {
-  logger,
   safeJsonParse
-} from "./chunk-YCLVYFK7.js";
+} from "./chunk-V6FR6WTW.js";
+import {
+  PermissionError
+} from "./chunk-24BAVOX3.js";
+import {
+  logger
+} from "./chunk-LYVNONC4.js";
 
 // src/core/capability-api.ts
 import { readFile } from "fs/promises";
@@ -145,11 +147,11 @@ async function requestMultipartOnce(url, token, form) {
     body: form
   });
 }
-async function callGateway(host, domain, pathAfterV1, method, body) {
-  return (await callGatewayWithEnvelope(host, domain, pathAfterV1, method, body)).data;
+async function callGateway(host, domain, pathAfterV1, method, body, queryParams = {}) {
+  return (await callGatewayWithEnvelope(host, domain, pathAfterV1, method, body, queryParams)).data;
 }
-async function callGatewayWithEnvelope(host, domain, pathAfterV1, method, body) {
-  const url = buildCapabilityGatewayUrl(host, domain, pathAfterV1);
+async function callGatewayWithEnvelope(host, domain, pathAfterV1, method, body, queryParams = {}) {
+  const url = buildCapabilityGatewayUrl(host, domain, pathAfterV1, queryParams);
   const token = await getCliToken(host);
   let resp = await requestOnce(url, method, token, body);
   let permissionMsg;
@@ -210,11 +212,18 @@ async function requestCapabilityGatewayWithEnvelope(host, domain, pathAfterV1, m
   const resp = await fetchCapabilityGateway(host, domain, pathAfterV1, method, body);
   return parseCapabilityEnvelope(parseCapabilityResponse(await resp.text()));
 }
-async function listCapabilities(host, domain) {
-  return callGateway(host, domain, "capabilities", "GET");
+async function listCapabilities(host, domain, projectId) {
+  return callGateway(host, domain, "capabilities", "GET", void 0, { project_id: projectId });
 }
-async function inspectCapability(host, domain, capabilityId) {
-  return callGateway(host, domain, `capabilities/${capabilityId}`, "GET");
+async function inspectCapability(host, domain, capabilityId, projectId) {
+  return callGateway(
+    host,
+    domain,
+    `capabilities/${capabilityId}`,
+    "GET",
+    void 0,
+    { project_id: projectId }
+  );
 }
 async function executeCapability(host, domain, capabilityId, input = {}) {
   return callGateway(host, domain, `capabilities/${capabilityId}/execute`, "POST", { input });