ente-cli 0.4.71 → 0.4.72

package/README.md

@@ -423,3 +423,24 @@ JSON failures use stdout `{ "error": { "message": "..." } }` with a nonzero
 exit. REST status and structured error fields survive. Check the exit before
 parsing; see [Retrieve bounded context](playbooks/retrieve-bounded-context.md).
 The unsupported `entity show` spelling gives a targeted `entity get` correction.
+
+### Granted incident diagnostics
+
+`ente diagnostics page --source toolMessages --since <epoch-ms> --until <epoch-ms> --profile ente-operator --json`
+reads fixed global content-free aggregates using the existing bound agent REST
+credential. Access is off unless a current human platform admin explicitly grants
+this exact owned Personal agent diagnostics with expiry. Installation grants no
+access. No grant/revoke or arbitrary admin executor is exposed to agents.
+
+Sources/flags match `health page`: toolMessages, threads with `--status
+idle|running|error`, recordings with its processing status; `--limit` 1–100,
+`--cursor`, and `--stale-after-ms` 60000–86400000. Keep source/since/until fixed
+across pages. Results put aggregates and continuation under `data.page`, with
+window/observation/coverage alongside. Read every page before claiming complete
+counts; terminal recording history excludes missing progress timestamps. No
+message bodies or customer identifiers. The legacy `health page` remains a
+separate human-admin JWT surface and never serves as a fallback.
+
+Diagnostics is unavailable inside Ente-hosted chats, recordings and automations.
+Use the external operator command. Whole-history panel sharing does not grant
+access to diagnostics, and diagnostic reads do not append to chat history.

package/dist/SKILL.md

@@ -583,3 +583,26 @@ assignees and preserves humans. `--clear-agent-assignees` removes the agent assi
 Assignment requires the agent to have write access in the task space; it grants no access.
 
 Scheduled runs also accept `runCondition: "new_chats"`: skip model execution unless this agent has new manual or recording chats since its previous scheduled check. Scheduled/reflection chats do not trigger it; explicit Run now bypasses the condition.
+
+## Explicit incident diagnostics
+
+Use `ente diagnostics page --source toolMessages --since <epoch-ms> --until
+<epoch-ms> --profile <bound-profile> --json` only within the requested incident.
+A current human platform admin must explicitly grant the exact owned Personal
+agent read-only global health aggregates with expiry in its agent editor. An
+admin owner, company billing role, settings delegation or mailbox grant alone
+is insufficient. Do not grant or renew access yourself, change credentials, or
+fall back to `health page` after denial. Installation enables no grant.
+
+Source/window flags match `health page`; rows 1–100, read budget 1 MiB, tool-message
+and terminal recording windows at most 7 days. Active recordings require `since=0`;
+terminal recordings require positive since and exclude legacy missing timestamps.
+Responses contain window/observation/coverage and `data.page` aggregates. Continue
+with `--cursor <data.page.continueCursor>` while `isDone=false`, keeping the
+window/source fixed. Only sum completed pages; partial/unavailable is not zero
+failures. These live state pages are not an atomic or immutable incident history.
+No customer bodies, arbitrary account lookup, settings writes or mailbox retries.
+
+Diagnostics is unavailable inside Ente-hosted chats, recordings and automations.
+Use the external operator command. Whole-history panel sharing does not grant
+access to diagnostics, and diagnostic reads do not append to chat history.

package/dist/cli.mjs

@@ -3800,7 +3800,7 @@ async function runCli(cli2, argv, context) {
 }
 
 // ente/version.ts
-var VERSION = "0.4.71";
+var VERSION = "0.4.72";
 
 // ente/branding.ts
 var NPM_REGISTRY = "https://registry.npmjs.org";
@@ -4275,6 +4275,9 @@ var EnteClient = class _EnteClient {
       body
     );
   }
+  diagnostics(body) {
+    return this.rest.post("/api/external/agent/diagnostics", body);
+  }
   agentTasks(body) {
     return this.rest.post("/api/external/agent/tasks", body);
   }
@@ -13974,11 +13977,15 @@ var ListShow = class extends ClientCommand {
 };
 var LIST_COMMANDS = [ListCreate, ListAdd, ListColumnAdd, ListColumnRemove, ListShow];
 
+// ente/diagnosticContract.ts
+var DIAGNOSTICS_LIMITS = { rows: 100, bytes: 1048576, windowMs: 6048e5, cursorChars: 8192, grantHours: 24 };
+
 // ente/commands/health.ts
 var healthPage = makeFunctionReference("admin/health:page");
-var HealthRead = class extends ProfileCommand {
+var HealthRead = class extends ClientCommand {
   static paths = [["health", "page"]];
   static usage = Command.Usage({ category: "Admin", description: "Read one content-free operational health page (global admin only)" });
+  agentDiagnostics = false;
   source = options_exports.String("--source", { required: true });
   status = options_exports.String("--status");
   since = options_exports.String("--since", { required: true, description: "Inclusive epoch milliseconds (use 0 for active jobs; positive window for terminal recordings)" });
@@ -13994,18 +14001,25 @@ var HealthRead = class extends ProfileCommand {
     } else if (this.source === "recordings" && ["pending", "transcribing", "structuring", "reflecting", "done", "error"].includes(this.status ?? "")) {
       source = { kind: "recordings", status: this.status };
     } else throw new Error("Use toolMessages without --status, threads with idle/running/error, or recordings with a processing status.");
-    const data = await (await resolveCaller()).query(healthPage, {
+    const args = {
       source,
       since: Number(this.since),
       until: Number(this.until),
       staleAfterMs: Number(this.staleAfter),
       limit: Number(this.limit),
       cursor: this.cursor ?? null
-    });
+    };
+    if (![args.since, args.until, args.staleAfterMs, args.limit].every(Number.isSafeInteger) || args.since < 0 || args.until <= args.since || args.staleAfterMs < 6e4 || args.staleAfterMs > 864e5 || args.limit < 1 || args.limit > DIAGNOSTICS_LIMITS.rows || (args.cursor?.length ?? 0) > DIAGNOSTICS_LIMITS.cursorChars || source.kind === "recordings" && !["done", "error"].includes(source.status) && args.since !== 0 || source.kind === "recordings" && ["done", "error"].includes(source.status) && args.since === 0 || (source.kind === "toolMessages" || source.kind === "recordings" && ["done", "error"].includes(source.status)) && args.until - args.since > DIAGNOSTICS_LIMITS.windowMs) throw new Error("Invalid diagnostics window or limits");
+    const data = this.agentDiagnostics ? (await this.client().diagnostics({ operation: "health", ...args })).data : await (await resolveCaller()).query(healthPage, args);
     this.emitText({ data }, () => JSON.stringify(data, null, 2));
   }
 };
-var HEALTH_COMMANDS = [HealthRead];
+var AgentDiagnosticsRead = class extends HealthRead {
+  static paths = [["diagnostics", "page"]];
+  static usage = Command.Usage({ category: "Diagnostics", description: "Read one explicitly granted content-free health page as the bound personal agent", details: "Default denied. A current human platform admin must grant this exact owned agent read-only diagnostics with expiry. No production grant is enabled by installing or upgrading the CLI. Keep source/window fixed across cursors. Counts are partial until every page has been read; terminal recordings exclude legacy missing timestamps." });
+  agentDiagnostics = true;
+};
+var HEALTH_COMMANDS = [HealthRead, AgentDiagnosticsRead];
 
 // ente/commands/users.ts
 var MANAGED_PLANS = ["free", "sponsored", "company_managed", "own_models"];