@thinkingai/ae-cli 6.1.9 → 6.1.11

package/skills/ae-analysis/references/system_ops_alert_contact_upsert.md

@@ -0,0 +1,39 @@
+# system ops-alert-contact upsert
+
+Use when the user needs to create or update an operations-alert contact without exposing webhooks on argv.
+
+Do not use it outside the system ops-alert-contact operation or with fields absent from the inspected capability schema.
+
+Command:
+
+```bash
+ae-cli system ops-alert-contact upsert --company-id <company_id> --name <name> --mail-address <mail_address> --on-status 1
+ae-cli system ops-alert-contact upsert --company-id <company_id> --contact-id <contact_id> --feishu-webhook-file <chmod_600_file>
+```
+
+Capability id: `system.ops_alert_contact.upsert`.
+
+Sensitive values are accepted only through a permission-protected file or stdin. Never put a secret value in argv, examples, logs, validation output, dry-run output, or the response.
+
+The response uses `ok`, `data`, and `meta`. Treat empty `data` as success when `ok=true`; preserve `request_id` and `invocation_id` when present.
+
+## Parameters
+
+| Parameter | Required | Description |
+|---|---|---|
+| `--company-id` | Yes | Company ID. |
+| `--contact-id` | No | Existing contact ID; omit to create. |
+| `--name` | No | Contact name. |
+| `--mail-address` | No | Email delivery target. |
+| `--mobile` | No | Mobile delivery target. |
+| `--on-status` | No | Enable state: 0 or 1; required on create. |
+| `--dingding-webhook-file` | No | DingTalk webhook. Read from a local permission-protected file; the value is never accepted directly on argv. |
+| `--dingding-webhook-stdin` | No | DingTalk webhook. Read from stdin; do not combine with --dingding-webhook-file. |
+| `--wechat-webhook-file` | No | WeCom webhook. Read from a local permission-protected file; the value is never accepted directly on argv. |
+| `--wechat-webhook-stdin` | No | WeCom webhook. Read from stdin; do not combine with --wechat-webhook-file. |
+| `--feishu-webhook-file` | No | Feishu webhook. Read from a local permission-protected file; the value is never accepted directly on argv. |
+| `--feishu-webhook-stdin` | No | Feishu webhook. Read from stdin; do not combine with --feishu-webhook-file. |
+| `--slack-webhook-file` | No | Slack webhook. Read from a local permission-protected file; the value is never accepted directly on argv. |
+| `--slack-webhook-stdin` | No | Slack webhook. Read from stdin; do not combine with --slack-webhook-file. |
+| `--kim-webhook-file` | No | KIM webhook. Read from a local permission-protected file; the value is never accepted directly on argv. |
+| `--kim-webhook-stdin` | No | KIM webhook. Read from stdin; do not combine with --kim-webhook-file. |

package/skills/ae-analysis/references/system_preference_get.md

@@ -0,0 +1,21 @@
+# system preference get
+
+Use when the user needs to get typed company preferences exposed to CLI.
+
+Do not use it outside the system preference operation or with fields absent from the inspected capability schema.
+
+Command:
+
+```bash
+ae-cli system preference get --company-id <company-id>
+```
+
+Capability id: `system.preference.get`.
+
+The response uses `ok`, `data`, and `meta`. Treat empty `data` as success when `ok=true`; preserve `request_id` and `invocation_id` when present.
+
+## Parameters
+
+| Parameter | Required | Description |
+|---|---|---|
+| `--company-id` | Yes | Company ID. |

package/skills/ae-analysis/references/system_preference_update.md

@@ -0,0 +1,22 @@
+# system preference update
+
+Use when the user needs to update typed company navigation preference.
+
+Do not use it outside the system preference operation or with fields absent from the inspected capability schema.
+
+Command:
+
+```bash
+ae-cli system preference update --company-id <company-id> --navigation-permission-hide <true_or_false>
+```
+
+Capability id: `system.preference.update`.
+
+The response uses `ok`, `data`, and `meta`. Treat empty `data` as success when `ok=true`; preserve `request_id` and `invocation_id` when present.
+
+## Parameters
+
+| Parameter | Required | Description |
+|---|---|---|
+| `--company-id` | Yes | Company ID. |
+| `--navigation-permission-hide` | Yes | Hide navigation entries without permission. |

package/skills/ae-analysis/references/system_project_usage_list.md

@@ -0,0 +1,28 @@
+# system project-usage list
+
+Use when the user needs to list project storage and usage statistics in a bounded time range.
+
+Do not use it outside the system project-usage operation or with fields absent from the inspected capability schema.
+
+Command:
+
+```bash
+ae-cli system project-usage list --company-id <company-id> --start-time <start-time> --end-time <end-time>
+```
+
+Capability id: `system.project_usage.list`.
+
+The response uses `ok`, `data`, and `meta`. Treat empty `data` as success when `ok=true`; preserve `request_id` and `invocation_id` when present.
+
+## Parameters
+
+| Parameter | Required | Description |
+|---|---|---|
+| `--company-id` | Yes | Company ID. |
+| `--start-time` | Yes | Inclusive ISO date/time lower bound. |
+| `--end-time` | Yes | Inclusive ISO date/time upper bound. |
+| `--fields` | No | Optional snake_case result field projection JSON array. |
+| `--limit` | No | Page size. Default and maximum depend on the capability schema. |
+| `--offset` | No | Zero-based result offset. |
+| `--sort-by` | No | Sort field. |
+| `--sort-order` | No | Sort direction. |

package/skills/ae-analysis/references/system_query_alert_rule_list.md

@@ -0,0 +1,21 @@
+# system query-alert-rule list
+
+Use when the user needs to list query-monitor alert rules and metric definitions.
+
+Do not use it outside the system query-alert-rule operation or with fields absent from the inspected capability schema.
+
+Command:
+
+```bash
+ae-cli system query-alert-rule list --company-id <company-id>
+```
+
+Capability id: `system.query_alert_rule.list`.
+
+The response uses `ok`, `data`, and `meta`. Treat empty `data` as success when `ok=true`; preserve `request_id` and `invocation_id` when present.
+
+## Parameters
+
+| Parameter | Required | Description |
+|---|---|---|
+| `--company-id` | Yes | Company ID. |

package/skills/ae-analysis/references/system_query_alert_rule_update.md

@@ -0,0 +1,26 @@
+# system query-alert-rule update
+
+Use when the user needs to batch upsert and delete query-monitor alert rules.
+
+Do not use it outside the system query-alert-rule operation or with fields absent from the inspected capability schema.
+
+Command:
+
+```bash
+ae-cli system query-alert-rule update --dry-run --company-id <company-id>
+ae-cli system query-alert-rule update --company-id <company-id> --yes
+```
+
+Capability id: `system.query_alert_rule.update`.
+
+Run `--dry-run` first, summarize the affected target and impact, then wait for explicit user confirmation before rerunning the unchanged command with global `--yes`.
+
+The response uses `ok`, `data`, and `meta`. Treat empty `data` as success when `ok=true`; preserve `request_id` and `invocation_id` when present.
+
+## Parameters
+
+| Parameter | Required | Description |
+|---|---|---|
+| `--company-id` | Yes | Company ID. |
+| `--upserts` | No | Rule upsert JSON array. |
+| `--delete-ids` | No | Positive rule-ID JSON array to delete. |

package/skills/ae-analysis/references/system_query_monitor_overview.md

@@ -0,0 +1,26 @@
+# system query-monitor overview
+
+Use when the user needs to get bounded query queue and resource-monitor charts.
+
+Do not use it outside the system query-monitor operation or with fields absent from the inspected capability schema.
+
+Command:
+
+```bash
+ae-cli system query-monitor overview --company-id <company-id> --cluster-names <cluster-names_json>
+```
+
+Capability id: `system.query_monitor.overview`.
+
+The response uses `ok`, `data`, and `meta`. Treat empty `data` as success when `ok=true`; preserve `request_id` and `invocation_id` when present.
+
+## Parameters
+
+| Parameter | Required | Description |
+|---|---|---|
+| `--company-id` | Yes | Company ID. |
+| `--duration-minutes` | No | Monitoring duration in minutes. Default: 60. |
+| `--project-ids` | No | Project ID JSON array. |
+| `--space-codes` | No | Project space-code JSON array. |
+| `--cluster-names` | Yes | Query cluster-name JSON array. |
+| `--point-interval-seconds` | No | Chart sample interval seconds. Default: 5. |

package/skills/ae-analysis/references/system_query_task_cancel.md

@@ -0,0 +1,25 @@
+# system query-task cancel
+
+Use when the user needs to cancel one running query-monitor task by task_id.
+
+Do not use it outside the system query-task operation or with fields absent from the inspected capability schema.
+
+Command:
+
+```bash
+ae-cli system query-task cancel --dry-run --company-id <company-id> --task-id <task-id>
+ae-cli system query-task cancel --company-id <company-id> --task-id <task-id> --yes
+```
+
+Capability id: `system.query_task.cancel`.
+
+Run `--dry-run` first, summarize the affected target and impact, then wait for explicit user confirmation before rerunning the unchanged command with global `--yes`.
+
+The response uses `ok`, `data`, and `meta`. Treat empty `data` as success when `ok=true`; preserve `request_id` and `invocation_id` when present.
+
+## Parameters
+
+| Parameter | Required | Description |
+|---|---|---|
+| `--company-id` | Yes | Company ID. |
+| `--task-id` | Yes | Query-monitor task ID, not a CLI run_id. |

package/skills/ae-analysis/references/system_query_task_export.md

@@ -0,0 +1,49 @@
+# system query-task export
+
+Use when the user needs the complete bounded query-monitor task result as a cancellable CSV artifact.
+
+Do not use it for an inline page; use `ae-cli system query-task list` instead.
+
+Command:
+
+```bash
+ae-cli system query-task options --company-id <company_id>
+ae-cli system query-task export --company-id <company_id> --start-time '2026-07-24 00:00:00' --end-time '2026-07-24 23:59:59' --status-codes '[4]' --content-codes '[101]' --task-type-codes '[6]' --project-ids '[123]'
+```
+
+Capability id: `system.query_task.export`.
+
+Always run `query-task options` first and select codes from its returned mappings. Do not guess numeric filter codes or cluster names.
+
+Preserve the `run_id` from this exact submit response and poll:
+
+```bash
+ae-cli analysis run inspect --run-id <run_id>
+```
+
+After success, preserve the same run's `artifact_id` and download:
+
+```bash
+ae-cli analysis artifact download --run-id <run_id> --artifact-id <artifact_id> --output <output_path>
+```
+
+The artifact is CSV and this command intentionally has no `--artifact-format`. Cancel an unfinished export with `ae-cli analysis query cancel --run-id <run_id>`.
+
+The response uses `ok`, `data`, and `meta`. Empty task data is a successful export when `ok=true`; preserve `request_id` and `invocation_id`.
+
+## Parameters
+
+| Parameter | Required | Description |
+|---|---|---|
+| `--company-id` | Yes | Company ID. |
+| `--start-time` | Yes | Inclusive range start in `yyyy-MM-dd HH:mm:ss`. |
+| `--end-time` | Yes | Inclusive range end in `yyyy-MM-dd HH:mm:ss`. |
+| `--status-codes` | Yes | Non-empty task status-code JSON array. |
+| `--content-codes` | Yes | Non-empty query content-code JSON array. |
+| `--task-type-codes` | Yes | Non-empty query task-type-code JSON array. |
+| `--project-ids` | Conditional | Non-empty project IDs or space codes are required. |
+| `--space-codes` | Conditional | Non-empty space codes or project IDs are required. |
+| `--cluster-names` | No | Optional cluster-name JSON array. |
+| `--download-columns` | No | Optional allowlisted CSV column JSON array. |
+| `--request-id` | No | Caller-supplied `cli_<32 lowercase hex>` lifecycle ID; generated when omitted. |
+| `--timeout-seconds` | No | Maximum runtime, `1..21600`; default `21600`. |

package/skills/ae-analysis/references/system_query_task_get.md

@@ -0,0 +1,23 @@
+# system query-task get
+
+Use when the user needs to get a sanitized query-monitor task detail.
+
+Do not use it outside the system query-task operation or with fields absent from the inspected capability schema.
+
+Command:
+
+```bash
+ae-cli system query-task get --company-id <company-id> --task-id <task-id>
+```
+
+Capability id: `system.query_task.get`.
+
+The response uses `ok`, `data`, and `meta`. Treat empty `data` as success when `ok=true`; preserve `request_id` and `invocation_id` when present.
+
+## Parameters
+
+| Parameter | Required | Description |
+|---|---|---|
+| `--company-id` | Yes | Company ID. |
+| `--task-id` | Yes | Query-monitor task ID. |
+| `--sql-max-chars` | No | Maximum returned SQL characters. |

package/skills/ae-analysis/references/system_query_task_list.md

@@ -0,0 +1,35 @@
+# system query-task list
+
+Use when the user needs to list query-monitor tasks within a mandatory bounded time range.
+
+Do not use it outside the system query-task operation or with fields absent from the inspected capability schema.
+
+Command:
+
+```bash
+ae-cli system query-task options --company-id <company_id>
+ae-cli system query-task list --company-id <company_id> --start-time '2026-07-24 00:00:00' --end-time '2026-07-24 23:59:59' --status-codes '[4]' --content-codes '[101]' --task-type-codes '[6]' --project-ids '[123]'
+```
+
+Capability id: `system.query_task.list`.
+
+Always run `query-task options` first and select codes from its returned status, content type, task type, project/workspace, and cluster mappings. Do not guess numeric codes.
+
+The response uses `ok`, `data`, and `meta`. Treat empty `data` as success when `ok=true`; preserve `request_id` and `invocation_id` when present.
+
+## Parameters
+
+| Parameter | Required | Description |
+|---|---|---|
+| `--company-id` | Yes | Company ID. |
+| `--start-time` | Yes | Inclusive ISO date/time lower bound. |
+| `--end-time` | Yes | Inclusive ISO date/time upper bound. |
+| `--project-ids` | No | Project ID JSON array. |
+| `--space-codes` | No | Project space-code JSON array. |
+| `--status-codes` | Yes | Task status-code JSON array. |
+| `--content-codes` | Yes | Query content-code JSON array. |
+| `--task-type-codes` | Yes | Query task-type-code JSON array. |
+| `--cluster-names` | No | Optional cluster-name JSON array. |
+| `--limit` | No | Maximum returned tasks. Default: 100, max: 1000. |
+| `--offset` | No | Zero-based result offset. |
+| `--fields` | No | Optional snake_case result field projection JSON array. |

package/skills/ae-analysis/references/system_query_task_options.md

@@ -0,0 +1,27 @@
+# system query-task options
+
+Use before query-task list or export to discover every valid filter value exposed by the current environment.
+
+Command:
+
+```bash
+ae-cli system query-task options --company-id <company_id>
+```
+
+Capability id: `system.query_task.options`.
+
+The response maps:
+
+- `statuses[].code` to the localized task status name.
+- `content_types[].code` to the localized content type name.
+- `task_types[].code` to the localized task type name.
+- `projects[].project_id` and `workspaces[].space_code` to display names.
+- `clusters[].cluster_name` to its query engine metadata.
+
+Use the returned codes and names unchanged in `query-task list` or `query-task export`. Do not infer codes from UI labels or examples.
+
+## Parameters
+
+| Parameter | Required | Description |
+|---|---|---|
+| `--company-id` | Yes | Company ID. |

package/skills/ae-analysis/references/system_receiver_address_delete.md

@@ -0,0 +1,26 @@
+# system receiver-address delete
+
+Use when the user needs to delete a receiver address.
+
+Do not use it outside the system receiver-address operation or with fields absent from the inspected capability schema.
+
+Command:
+
+```bash
+ae-cli system receiver-address delete --dry-run --company-id <company-id> --address-url <address-url> --address-type <address-type>
+ae-cli system receiver-address delete --company-id <company-id> --address-url <address-url> --address-type <address-type> --yes
+```
+
+Capability id: `system.receiver_address.delete`.
+
+Run `--dry-run` first, summarize the affected target and impact, then wait for explicit user confirmation before rerunning the unchanged command with global `--yes`.
+
+The response uses `ok`, `data`, and `meta`. Treat empty `data` as success when `ok=true`; preserve `request_id` and `invocation_id` when present.
+
+## Parameters
+
+| Parameter | Required | Description |
+|---|---|---|
+| `--company-id` | Yes | Company ID. |
+| `--address-url` | Yes | Receiver address URL. |
+| `--address-type` | Yes | Receiver address type. |

package/skills/ae-analysis/references/system_receiver_address_overview.md

@@ -0,0 +1,21 @@
+# system receiver-address overview
+
+Use when the user needs to get company receiver-address overview.
+
+Do not use it outside the system receiver-address operation or with fields absent from the inspected capability schema.
+
+Command:
+
+```bash
+ae-cli system receiver-address overview --company-id <company-id>
+```
+
+Capability id: `system.receiver_address.overview`.
+
+The response uses `ok`, `data`, and `meta`. Treat empty `data` as success when `ok=true`; preserve `request_id` and `invocation_id` when present.
+
+## Parameters
+
+| Parameter | Required | Description |
+|---|---|---|
+| `--company-id` | Yes | Company ID. |

package/skills/ae-analysis/references/system_receiver_address_project_list.md

@@ -0,0 +1,21 @@
+# system receiver-address project-list
+
+Use when the user needs to list project receiver-address overrides.
+
+Do not use it outside the system receiver-address operation or with fields absent from the inspected capability schema.
+
+Command:
+
+```bash
+ae-cli system receiver-address project-list --company-id <company-id>
+```
+
+Capability id: `system.receiver_address.project_list`.
+
+The response uses `ok`, `data`, and `meta`. Treat empty `data` as success when `ok=true`; preserve `request_id` and `invocation_id` when present.
+
+## Parameters
+
+| Parameter | Required | Description |
+|---|---|---|
+| `--company-id` | Yes | Company ID. |

package/skills/ae-analysis/references/system_receiver_address_promote.md

@@ -0,0 +1,24 @@
+# system receiver-address promote
+
+Use when the user needs to promote a receiver address to company scope.
+
+Do not use it outside the system receiver-address operation or with fields absent from the inspected capability schema.
+
+Command:
+
+```bash
+ae-cli system receiver-address promote --company-id <company-id> --address-url <address-url> --address-type <address-type>
+```
+
+Capability id: `system.receiver_address.promote`.
+
+The response uses `ok`, `data`, and `meta`. Treat empty `data` as success when `ok=true`; preserve `request_id` and `invocation_id` when present.
+
+## Parameters
+
+| Parameter | Required | Description |
+|---|---|---|
+| `--company-id` | Yes | Company ID. |
+| `--address-url` | Yes | Receiver address URL. |
+| `--address-type` | Yes | Receiver address type. |
+| `--remove-project-custom` | No | Remove matching project overrides after promotion. |

package/skills/ae-analysis/references/system_receiver_address_upsert.md

@@ -0,0 +1,27 @@
+# system receiver-address upsert
+
+Use when the user needs to create or update a typed receiver address.
+
+Do not use it outside the system receiver-address operation or with fields absent from the inspected capability schema.
+
+Command:
+
+```bash
+ae-cli system receiver-address upsert --company-id <company-id> --scope <scope> --address-url <address-url> --address-type <address-type>
+```
+
+Capability id: `system.receiver_address.upsert`.
+
+The response uses `ok`, `data`, and `meta`. Treat empty `data` as success when `ok=true`; preserve `request_id` and `invocation_id` when present.
+
+## Parameters
+
+| Parameter | Required | Description |
+|---|---|---|
+| `--company-id` | Yes | Company ID. |
+| `--scope` | Yes | Receiver scope. |
+| `--address-url` | Yes | Receiver address URL. |
+| `--address-type` | Yes | Receiver address type. |
+| `--project-ids` | No | Project ID JSON array; required for project scope. |
+| `--original-address-url` | No | Original URL when changing an existing address. |
+| `--original-address-type` | No | Original address type. |

package/skills/ae-analysis/references/system_receiver_detection_get.md

@@ -0,0 +1,22 @@
+# system receiver-detection get
+
+Use when the user needs to get receiver-address detection configuration.
+
+Do not use it outside the system receiver-detection operation or with fields absent from the inspected capability schema.
+
+Command:
+
+```bash
+ae-cli system receiver-detection get --company-id <company-id> --address-url <address-url>
+```
+
+Capability id: `system.receiver_detection.get`.
+
+The response uses `ok`, `data`, and `meta`. Treat empty `data` as success when `ok=true`; preserve `request_id` and `invocation_id` when present.
+
+## Parameters
+
+| Parameter | Required | Description |
+|---|---|---|
+| `--company-id` | Yes | Company ID. |
+| `--address-url` | Yes | Receiver address URL. |

package/skills/ae-analysis/references/system_receiver_detection_run.md

@@ -0,0 +1,22 @@
+# system receiver-detection run
+
+Use when the user needs to run receiver-address detection now.
+
+Do not use it outside the system receiver-detection operation or with fields absent from the inspected capability schema.
+
+Command:
+
+```bash
+ae-cli system receiver-detection run --company-id <company-id> --address-url <address-url>
+```
+
+Capability id: `system.receiver_detection.run`.
+
+The response uses `ok`, `data`, and `meta`. Treat empty `data` as success when `ok=true`; preserve `request_id` and `invocation_id` when present.
+
+## Parameters
+
+| Parameter | Required | Description |
+|---|---|---|
+| `--company-id` | Yes | Company ID. |
+| `--address-url` | Yes | Receiver address URL. |

package/skills/ae-analysis/references/system_receiver_detection_update.md

@@ -0,0 +1,25 @@
+# system receiver-detection update
+
+Use when the user needs to update typed receiver-address detection configuration.
+
+Do not use it outside the system receiver-detection operation or with fields absent from the inspected capability schema.
+
+Command:
+
+```bash
+ae-cli system receiver-detection update --company-id <company-id> --address-url <address-url> --execute-type <execute-type> --schedule-type <schedule-type> --allow-notification <true_or_false>
+```
+
+Capability id: `system.receiver_detection.update`.
+
+The response uses `ok`, `data`, and `meta`. Treat empty `data` as success when `ok=true`; preserve `request_id` and `invocation_id` when present.
+
+## Parameters
+
+| Parameter | Required | Description |
+|---|---|---|
+| `--company-id` | Yes | Company ID. |
+| `--address-url` | Yes | Receiver address URL. |
+| `--execute-type` | Yes | Detection execution scope. |
+| `--schedule-type` | Yes | Detection schedule. |
+| `--allow-notification` | Yes | Allow detection notifications. |

package/skills/ae-analysis/references/system_role_delete.md

@@ -0,0 +1,26 @@
+# system role delete
+
+Use when the user needs to delete a company role and optionally migrate its users.
+
+Do not use it outside the system role operation or with fields absent from the inspected capability schema.
+
+Command:
+
+```bash
+ae-cli system role delete --dry-run --company-id <company-id> --role-name <role-name>
+ae-cli system role delete --company-id <company-id> --role-name <role-name> --yes
+```
+
+Capability id: `system.role.delete`.
+
+Run `--dry-run` first, summarize the affected target and impact, then wait for explicit user confirmation before rerunning the unchanged command with global `--yes`.
+
+The response uses `ok`, `data`, and `meta`. Treat empty `data` as success when `ok=true`; preserve `request_id` and `invocation_id` when present.
+
+## Parameters
+
+| Parameter | Required | Description |
+|---|---|---|
+| `--company-id` | Yes | Company ID. |
+| `--role-name` | Yes | Role name. |
+| `--new-role-name` | No | Replacement role for affected users. |

package/skills/ae-analysis/references/system_role_function_list.md

@@ -0,0 +1,22 @@
+# system role-function list
+
+Use when the user needs to list functions assigned to a company role.
+
+Do not use it outside the system role-function operation or with fields absent from the inspected capability schema.
+
+Command:
+
+```bash
+ae-cli system role-function list --company-id <company-id> --role-name <role-name>
+```
+
+Capability id: `system.role_function.list`.
+
+The response uses `ok`, `data`, and `meta`. Treat empty `data` as success when `ok=true`; preserve `request_id` and `invocation_id` when present.
+
+## Parameters
+
+| Parameter | Required | Description |
+|---|---|---|
+| `--company-id` | Yes | Company ID. |
+| `--role-name` | Yes | Role name. |

package/skills/ae-analysis/references/system_role_get.md

@@ -0,0 +1,22 @@
+# system role get
+
+Use when the user needs to get one company role.
+
+Do not use it outside the system role operation or with fields absent from the inspected capability schema.
+
+Command:
+
+```bash
+ae-cli system role get --company-id <company-id> --role-name <role-name>
+```
+
+Capability id: `system.role.get`.
+
+The response uses `ok`, `data`, and `meta`. Treat empty `data` as success when `ok=true`; preserve `request_id` and `invocation_id` when present.
+
+## Parameters
+
+| Parameter | Required | Description |
+|---|---|---|
+| `--company-id` | Yes | Company ID. |
+| `--role-name` | Yes | Role name. |

package/skills/ae-analysis/references/system_role_list.md

@@ -0,0 +1,24 @@
+# system role list
+
+Use when the user needs to list company roles.
+
+Do not use it outside the system role operation or with fields absent from the inspected capability schema.
+
+Command:
+
+```bash
+ae-cli system role list --company-id <company-id>
+```
+
+Capability id: `system.role.list`.
+
+The response uses `ok`, `data`, and `meta`. Treat empty `data` as success when `ok=true`; preserve `request_id` and `invocation_id` when present.
+
+## Parameters
+
+| Parameter | Required | Description |
+|---|---|---|
+| `--company-id` | Yes | Company ID. |
+| `--query` | No | Optional keyword filter. |
+| `--limit` | No | Page size. Default and maximum depend on the capability schema. |
+| `--offset` | No | Zero-based result offset. |