systemlink-cli 1.13.3__tar.gz → 1.13.5__tar.gz

{systemlink_cli-1.13.3 → systemlink_cli-1.13.5}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: systemlink-cli
-Version: 1.13.3
+Version: 1.13.5
 Summary: SystemLink Integrator CLI - cross-platform CLI for SystemLink workflows and templates.
 License-File: LICENSE
 Author: Fred Visser

{systemlink_cli-1.13.3 → systemlink_cli-1.13.5}/dff-editor/editor.js

@@ -651,9 +651,7 @@ function downloadConfiguration() {
         const a = document.createElement('a');
         a.href = url;
         a.download = 'dff-configuration.json';
-        document.body.appendChild(a);
         a.click();
-        document.body.removeChild(a);
         URL.revokeObjectURL(url);
         showStatus('Configuration downloaded', 'success');
     } catch (e) {
@@ -682,53 +680,130 @@ function refreshTree() {
     
     const config = currentConfig;
     if (!config) return;
-    
-    let html = '<div class="tree-node" onclick="selectTreeNode(\'root\')"><span class="tree-icon">📄</span><span>Root Configuration</span></div>';
-    
-    // Configurations
+
+    treeView.replaceChildren();
+    treeView.appendChild(createTreeNode({
+        nodeId: 'root',
+        icon: '📄',
+        label: 'Root Configuration'
+    }));
+
     if (config.configurations && config.configurations.length > 0) {
         config.configurations.forEach((conf, i) => {
             const confLabel = conf.displayText || conf.name || conf.key || ('Configuration ' + (i + 1));
-            html += `<div class="tree-node indent-1" onclick="selectTreeNode('config-${i}')"><span class="tree-icon">⚙️</span><span>${confLabel}</span><button class="edit-btn" aria-label="Edit configuration: ${confLabel}" title="Edit configuration" onclick="event.stopPropagation(); showEditDialog('configuration', ${i})">✎</button></div>`;
-            // Show views under each configuration
+            treeView.appendChild(createTreeNode({
+                nodeId: `config-${i}`,
+                icon: '⚙️',
+                label: confLabel,
+                indent: 1,
+                editLabel: `Edit configuration: ${confLabel}`,
+                editTitle: 'Edit configuration',
+                onEdit: () => showEditDialog('configuration', i)
+            }));
+
             if (conf.views && conf.views.length > 0) {
                 conf.views.forEach((view, vi) => {
-                    html += `<div class="tree-node indent-2" onclick="selectTreeNode('config-${i}-view-${vi}')"><span class="tree-icon">👁️</span><span>${view.displayText || view.key}</span><button class="edit-btn" aria-label="Edit view: ${view.displayText || view.key}" title="Edit view" onclick="event.stopPropagation(); showEditDialog('view', ${i}, ${vi})">✎</button></div>`;
+                    const viewLabel = view.displayText || view.key;
+                    treeView.appendChild(createTreeNode({
+                        nodeId: `config-${i}-view-${vi}`,
+                        icon: '👁️',
+                        label: viewLabel,
+                        indent: 2,
+                        editLabel: `Edit view: ${viewLabel}`,
+                        editTitle: 'Edit view',
+                        onEdit: () => showEditDialog('view', i, vi)
+                    }));
                 });
             }
         });
     }
-    
-    // Groups
+
     if (config.groups && config.groups.length > 0) {
-        html += '<div class="tree-node indent-1"><span class="tree-icon">📁</span><span>Groups (' + config.groups.length + ')</span></div>';
+        treeView.appendChild(createTreeSummaryNode('📁', `Groups (${config.groups.length})`, 1));
         config.groups.forEach((group, i) => {
             const groupLabel = group.displayText || group.key;
-            html += `<div class="tree-node indent-2" onclick="selectTreeNode('group-${i}')"><span class="tree-icon">📦</span><span>${groupLabel}</span><button class="edit-btn" aria-label="Edit group: ${groupLabel}" title="Edit group" onclick="event.stopPropagation(); showEditDialog('group', ${i})">✎</button></div>`;
+            treeView.appendChild(createTreeNode({
+                nodeId: `group-${i}`,
+                icon: '📦',
+                label: groupLabel,
+                indent: 2,
+                editLabel: `Edit group: ${groupLabel}`,
+                editTitle: 'Edit group',
+                onEdit: () => showEditDialog('group', i)
+            }));
         });
     }
-    
-    // Fields
+
     if (config.fields && config.fields.length > 0) {
-        html += '<div class="tree-node indent-1"><span class="tree-icon">📁</span><span>Fields (' + config.fields.length + ')</span></div>';
+        treeView.appendChild(createTreeSummaryNode('📁', `Fields (${config.fields.length})`, 1));
         config.fields.forEach((field, i) => {
             const icon = field.required ? '🏷️' : '🔖';
             const fieldLabel = field.displayText || field.key;
-            html += `<div class="tree-node indent-2" onclick="selectTreeNode('field-${i}')"><span class="tree-icon">${icon}</span><span>${fieldLabel}</span><button class="edit-btn" aria-label="Edit field: ${fieldLabel}" title="Edit field" onclick="event.stopPropagation(); showEditDialog('field', ${i})">✎</button></div>`;
+            treeView.appendChild(createTreeNode({
+                nodeId: `field-${i}`,
+                icon,
+                label: fieldLabel,
+                indent: 2,
+                editLabel: `Edit field: ${fieldLabel}`,
+                editTitle: 'Edit field',
+                onEdit: () => showEditDialog('field', i)
+            }));
         });
     }
-    
-    treeView.innerHTML = html;
 }
 
-function selectTreeNode(nodeId) {
+function createTreeSummaryNode(icon, label, indent = 0) {
+    const node = document.createElement('div');
+    node.className = 'tree-node';
+    if (indent > 0) {
+        node.classList.add(`indent-${indent}`);
+    }
+
+    const iconElement = document.createElement('span');
+    iconElement.className = 'tree-icon';
+    iconElement.textContent = icon;
+    node.appendChild(iconElement);
+
+    const labelElement = document.createElement('span');
+    labelElement.textContent = label;
+    node.appendChild(labelElement);
+
+    return node;
+}
+
+function createTreeNode({ nodeId, icon, label, indent = 0, editLabel = '', editTitle = '', onEdit = null }) {
+    const node = createTreeSummaryNode(icon, label, indent);
+    node.dataset.nodeId = nodeId;
+    node.addEventListener('click', () => selectTreeNode(nodeId, node));
+
+    if (onEdit) {
+        const editButton = document.createElement('button');
+        editButton.className = 'edit-btn';
+        editButton.type = 'button';
+        editButton.textContent = '✎';
+        editButton.setAttribute('aria-label', editLabel);
+        editButton.title = editTitle;
+        editButton.addEventListener('click', (event) => {
+            event.stopPropagation();
+            onEdit();
+        });
+        node.appendChild(editButton);
+    }
+
+    return node;
+}
+
+function selectTreeNode(nodeId, nodeElement = null) {
     selectedTreeNode = nodeId;
     
     // Update visual selection
     document.querySelectorAll('.tree-node').forEach(node => {
         node.classList.remove('selected');
     });
-    event.currentTarget.classList.add('selected');
+    const activeNode = nodeElement || document.querySelector(`[data-node-id="${nodeId}"]`);
+    if (activeNode) {
+        activeNode.classList.add('selected');
+    }
     
     // Highlight corresponding JSON in editor
     selectNodeInEditor(nodeId);

{systemlink_cli-1.13.3 → systemlink_cli-1.13.5}/pyproject.toml

@@ -1,6 +1,6 @@
 [tool.poetry]
 name = "systemlink-cli"
-version = "1.13.3"
+version = "1.13.5"
 description = "SystemLink Integrator CLI - cross-platform CLI for SystemLink workflows and templates."
 authors = ["Fred Visser <fred.visser@emerson.com>"]
 packages = [{ include = "slcli" }]

{systemlink_cli-1.13.3 → systemlink_cli-1.13.5}/slcli/_version.py

@@ -1,4 +1,4 @@
 """Version information for slcli."""
 
 # This file is auto-generated. Do not edit manually.
-__version__ = "1.13.3"
+__version__ = "1.13.5"

{systemlink_cli-1.13.3 → systemlink_cli-1.13.5}/slcli/comment_click.py

@@ -188,7 +188,7 @@ def register_comment_commands(cli: Any) -> None:
     @cli.group()
     @click.pass_context
     def comment(ctx: click.Context) -> None:
-        """Manage comments on SystemLink resources.
+        """Manage SystemLink comments.
 
         Comments can be attached to any resource identified by a resource type
         and resource ID. Known resource types: testmonitor:Result, niapm:Asset,

{systemlink_cli-1.13.3 → systemlink_cli-1.13.5}/slcli/completion_click.py

@@ -386,7 +386,7 @@ def register_completion_command(cli: Any) -> None:
         help="Install completion script to shell config file",
     )
     def completion(shell: Optional[str], install: bool) -> None:
-        """Generate and optionally install shell completion scripts.
+        """Generate shell completion scripts and optionally install them.
 
         Examples:
             # Generate bash completion script

{systemlink_cli-1.13.3 → systemlink_cli-1.13.5}/slcli/config_click.py

@@ -225,7 +225,7 @@ def register_config_commands(cli: Any) -> None:
 
     @cli.group()
     def config() -> None:
-        """Manage slcli configuration and profiles.
+        """Manage slcli settings and profiles.
 
         Profiles allow you to configure multiple SystemLink environments
         (dev, test, prod) and switch between them easily.

{systemlink_cli-1.13.3 → systemlink_cli-1.13.5}/slcli/dataframe_click.py

@@ -646,7 +646,7 @@ def register_dataframe_commands(cli: Any) -> None:
     @cli.group()
     @click.pass_context
     def dataframe(ctx: click.Context) -> None:
-        """Manage SystemLink DataFrame tables and row data."""
+        """Manage SystemLink DataFrame tables and rows."""
         if ctx.invoked_subcommand is not None:
             require_feature("dataframe_service")
 

{systemlink_cli-1.13.3 → systemlink_cli-1.13.5}/slcli/dff_click.py

@@ -312,7 +312,7 @@ def register_dff_commands(cli: Any) -> None:
     @cli.group(name="customfield")
     @click.pass_context
     def dff(ctx: click.Context) -> None:
-        """Manage custom field (DFF) configurations."""
+        """Manage SystemLink custom field configurations."""
         # Check for platform feature availability
         # Only check if a subcommand is being invoked (not just --help)
         if ctx.invoked_subcommand is not None:

{systemlink_cli-1.13.3 → systemlink_cli-1.13.5}/slcli/example_click.py

@@ -121,7 +121,7 @@ def register_example_commands(cli: Any) -> None:
 
     @cli.group()
     def example() -> None:
-        """Manage example resource configurations.
+        """Browse and provision example SystemLink resource configurations.
 
         Examples help you quickly set up demo systems for training,
         testing, or evaluation. Each example includes systems, assets,

{systemlink_cli-1.13.3 → systemlink_cli-1.13.5}/slcli/feed_click.py

@@ -436,7 +436,7 @@ def register_feed_commands(cli: Any) -> None:
 
     @cli.group()
     def feed() -> None:
-        """Manage NI Package Manager feeds and their packages.
+        """Manage SystemLink package feeds and packages.
 
         Feeds are package repositories used by NI Package Manager to install
         software on test systems. Supports Windows (.nipkg) and NI Linux RT

{systemlink_cli-1.13.3 → systemlink_cli-1.13.5}/slcli/file_click.py

@@ -508,7 +508,7 @@ def register_file_commands(cli: Any) -> None:
 
     @cli.group()
     def file() -> None:
-        """Manage files in SystemLink File Service."""
+        """Manage SystemLink files."""
         pass
 
     @file.command(name="list")

{systemlink_cli-1.13.3 → systemlink_cli-1.13.5}/slcli/main.py

@@ -49,6 +49,55 @@ else:
     click = rich_click_module
 
 
+def _configure_rich_click_command_groups() -> None:
+    """Configure top-level help command groups when rich-click is available."""
+    rich_click_config = getattr(click, "rich_click", None)
+    if rich_click_config is None:
+        return
+
+    # Keep the command-name/help split consistent across top-level panels so
+    # descriptions start at the same column in every group.
+    rich_click_config.STYLE_COMMANDS_TABLE_EXPAND = True
+    rich_click_config.STYLE_COMMANDS_TABLE_COLUMN_WIDTH_RATIO = (1, 5)
+
+    rich_click_config.COMMAND_GROUPS = {
+        "slcli": [
+            {
+                "name": "Configure",
+                "commands": ["config", "login", "logout", "info", "completion"],
+            },
+            {
+                "name": "Administer",
+                "commands": ["auth", "user", "workspace"],
+            },
+            {
+                "name": "Operate",
+                "commands": [
+                    "asset",
+                    "system",
+                    "state",
+                    "tag",
+                    "file",
+                    "feed",
+                    "comment",
+                    "dataframe",
+                ],
+            },
+            {
+                "name": "Build & Automate",
+                "commands": ["notebook", "routine", "webapp", "customfield", "skill", "mcp"],
+            },
+            {
+                "name": "Validate & Plan",
+                "commands": ["testmonitor", "template", "spec", "workitem", "example"],
+            },
+        ]
+    }
+
+
+_configure_rich_click_command_groups()
+
+
 def get_version() -> str:
     """Get version from _version.py (built binary) or pyproject.toml (development)."""
     try:
@@ -193,7 +242,7 @@ def login(
     set_current: bool,
     readonly: bool,
 ) -> None:
-    """Save SystemLink credentials to a profile.
+    """Create or update a SystemLink profile with credentials.
 
     This is an alias for 'slcli config add'. Use that command
     for the same functionality and more configuration options.
@@ -225,7 +274,7 @@ def login(
 @click.option("--all", "remove_all", is_flag=True, help="Remove all profiles")
 @click.option("--force", "-f", is_flag=True, help="Skip confirmation prompt")
 def logout(profile: Optional[str], remove_all: bool, force: bool) -> None:
-    """Remove stored SystemLink credentials.
+    """Remove stored SystemLink profiles and credentials.
 
     By default, removes the current profile. Use --profile to remove a specific
     profile, or --all to remove all profiles.
@@ -309,7 +358,7 @@ def logout(profile: Optional[str], remove_all: bool, force: bool) -> None:
 @click.option("--format", "-f", type=click.Choice(["table", "json"]), default="table")
 @click.option("--skip-health", is_flag=True, default=False, help="Skip live service health checks.")
 def info(format: str, skip_health: bool) -> None:
-    """Show current configuration and detected platform."""
+    """Show the active profile, configuration, and platform status."""
     from .profiles import ProfileConfig, get_active_profile
 
     platform_info = get_platform_info(skip_health=skip_health)

{systemlink_cli-1.13.3 → systemlink_cli-1.13.5}/slcli/mcp_click.py

@@ -143,7 +143,7 @@ def register_mcp_commands(cli: Any) -> None:
 
     @cli.group()
     def mcp() -> None:
-        """MCP (Model Context Protocol) server integration for AI assistants."""
+        """Run and configure the SystemLink MCP server for AI assistants."""
 
     @mcp.command(name="serve")
     @click.option(

{systemlink_cli-1.13.3 → systemlink_cli-1.13.5}/slcli/notebook_click.py

@@ -6,6 +6,7 @@ All commands use Click for robust CLI interfaces and error handling.
 
 import datetime
 import json
+import re
 import sys
 import time
 import urllib.parse
@@ -50,6 +51,56 @@ PREDEFINED_NOTEBOOK_INTERFACES = [
     "Work Item Scheduler",
 ]
 
+WINDOWS_RESERVED_FILENAMES = {
+    "CON",
+    "PRN",
+    "AUX",
+    "NUL",
+    "COM1",
+    "COM2",
+    "COM3",
+    "COM4",
+    "COM5",
+    "COM6",
+    "COM7",
+    "COM8",
+    "COM9",
+    "LPT1",
+    "LPT2",
+    "LPT3",
+    "LPT4",
+    "LPT5",
+    "LPT6",
+    "LPT7",
+    "LPT8",
+    "LPT9",
+}
+
+
+def _get_safe_notebook_download_name(notebook_name: str, suffix: str) -> str:
+    """Build a local filename from remote notebook metadata without honoring path segments."""
+    name_segment = notebook_name.replace("\\", "/").split("/")[-1].strip()
+    if name_segment in {"", ".", ".."}:
+        name_segment = "notebook"
+
+    stem = name_segment[:-6] if name_segment.lower().endswith(".ipynb") else name_segment
+    safe_stem = re.sub(r"[^A-Za-z0-9._ -]+", "_", stem).strip(" ._") or "notebook"
+    if safe_stem.upper() in WINDOWS_RESERVED_FILENAMES:
+        safe_stem = f"{safe_stem}_file"
+    normalized_suffix = suffix if suffix.startswith(".") else f".{suffix}"
+
+    return f"{safe_stem}{normalized_suffix}"
+
+
+def _get_safe_notebook_download_path(notebook_name: str, suffix: str) -> Path:
+    """Build a safe local output path for remote-derived notebook filenames."""
+    safe_filename = _get_safe_notebook_download_name(notebook_name, suffix)
+    working_directory = Path.cwd().resolve()
+    output_path = (working_directory / safe_filename).resolve()
+    if output_path.parent != working_directory:
+        raise ValueError("Notebook download path must stay within the current working directory")
+    return output_path
+
 
 def _normalize_sls_notebook(notebook: Dict[str, Any]) -> None:
     """Normalize SLS notebook response to include id/name fields.
@@ -529,9 +580,10 @@ def _download_notebook_content_and_metadata(
     if download_type in ("content", "both"):
         try:
             content = _get_notebook_content_http(notebook_id)
-            output_path = output or (
-                notebook_name if notebook_name.endswith(".ipynb") else f"{notebook_name}.ipynb"
-            )
+            if output:
+                output_path = Path(output)
+            else:
+                output_path = _get_safe_notebook_download_path(notebook_name, ".ipynb")
             with open(output_path, "wb") as f:
                 f.write(content)
             click.echo(f"Notebook content downloaded to {output_path}")
@@ -543,14 +595,17 @@ def _download_notebook_content_and_metadata(
     if download_type in ("metadata", "both"):
         try:
             meta = _get_notebook_http(notebook_id)
-            meta_path = (output or notebook_name.replace(".ipynb", "")) + ".json"
+            if output:
+                meta_path = Path(f"{output}.json")
+            else:
+                meta_path = _get_safe_notebook_download_path(notebook_name, ".json")
 
             def _json_default(obj: Any) -> str:
                 if isinstance(obj, (datetime.datetime, datetime.date)):
                     return obj.isoformat()
                 return str(obj)
 
-            save_json_file(meta, meta_path, _json_default)
+            save_json_file(meta, str(meta_path), _json_default)
             click.echo(f"Notebook metadata downloaded to {meta_path}")
         except Exception as exc:
             click.echo(f"Failed to download notebook metadata: {exc}")
@@ -574,7 +629,7 @@ def register_notebook_commands(cli: Any) -> None:
 
     @cli.group()
     def notebook() -> None:  # pragma: no cover - Click wiring
-        """Manage notebooks (init locally, manage remotely, run)."""
+        """Create, run, and manage SystemLink notebooks."""
         pass
 
     # ------------------------------------------------------------------

{systemlink_cli-1.13.3 → systemlink_cli-1.13.5}/slcli/policy_click.py

@@ -32,7 +32,7 @@ def register_policy_commands(cli: Any) -> None:
 
     @cli.group(name="auth")
     def auth() -> None:
-        """Manage SystemLink auth policies and policy templates."""
+        """Manage SystemLink authorization policies and policy templates."""
         pass
 
     @auth.group(name="policy")

{systemlink_cli-1.13.3 → systemlink_cli-1.13.5}/slcli/routine_click.py

@@ -127,7 +127,7 @@ def register_routine_commands(cli: Any) -> None:
 
     @cli.group()
     def routine() -> None:
-        """Manage SystemLink routines (v1: notebook scheduling, v2: event-action)."""
+        """Manage SystemLink routines."""
         pass
 
     # ------------------------------------------------------------------

{systemlink_cli-1.13.3 → systemlink_cli-1.13.5}/slcli/skill_click.py

@@ -200,7 +200,7 @@ def register_skill_commands(cli: Any) -> None:
 
     @cli.group()
     def skill() -> None:
-        """Manage AI agent skills for most agents and Claude."""
+        """Install and manage AI assistant skills."""
 
     @skill.command(name="install")
     @click.option(

{systemlink_cli-1.13.3 → systemlink_cli-1.13.5}/slcli/spec_click.py

@@ -1263,7 +1263,7 @@ def register_spec_commands(cli: Any) -> None:
 
     @cli.group(name="spec")
     def spec() -> None:
-        """Manage specifications."""
+        """Manage SystemLink specifications."""
         pass
 
     # -- list ---------------------------------------------------------------

{systemlink_cli-1.13.3 → systemlink_cli-1.13.5}/slcli/templates_click.py

@@ -120,7 +120,7 @@ def register_templates_commands(cli: Any) -> None:
     @cli.group()
     @click.pass_context
     def template(ctx: click.Context) -> None:
-        """Manage test plan templates."""
+        """Manage SystemLink test plan templates."""
         # Check for platform feature availability
         # Only check if a subcommand is being invoked (not just --help)
         if ctx.invoked_subcommand is not None:

{systemlink_cli-1.13.3 → systemlink_cli-1.13.5}/slcli/testmonitor_click.py

@@ -735,7 +735,7 @@ def register_testmonitor_commands(cli: Any) -> None:
 
     @cli.group()
     def testmonitor() -> None:
-        """Commands for test monitor products and results."""
+        """Manage SystemLink Test Monitor products and results."""
 
     @testmonitor.group()
     def product() -> None:

{systemlink_cli-1.13.3 → systemlink_cli-1.13.5}/slcli/web_editor.py

@@ -43,10 +43,9 @@ def _build_proxy_url(
     origin_scheme: str,
     origin_netloc: str,
     target_path: str,
-    query: str = "",
 ) -> str:
     """Build a proxy URL from a validated origin and allowlisted path."""
-    return urllib.parse.urlunsplit((origin_scheme, origin_netloc, target_path, query, ""))
+    return urllib.parse.urlunsplit((origin_scheme, origin_netloc, target_path, "", ""))
 
 
 def _validated_proxy_path(request_path: str) -> str:
@@ -59,6 +58,118 @@ def _validated_proxy_path(request_path: str) -> str:
     return decoded_path
 
 
+def _validated_proxy_query_params(query: str) -> dict[str, list[str]]:
+    """Return parsed proxy query parameters."""
+    if not query:
+        return {}
+
+    try:
+        return urllib.parse.parse_qs(
+            query,
+            keep_blank_values=True,
+            strict_parsing=True,
+            separator="&",
+        )
+    except ValueError as exc:
+        raise ValueError("Editor proxy received an invalid query string") from exc
+
+
+def _validated_single_query_value(
+    query_params: dict[str, list[str]],
+    name: str,
+) -> str:
+    """Return a single query value and reject repeated parameters."""
+    values = query_params.get(name)
+    if not values:
+        raise ValueError(f"Editor proxy requires query parameter: {name}")
+    if len(values) != 1:
+        raise ValueError(f"Editor proxy rejects repeated query parameter: {name}")
+    return values[0]
+
+
+def _validated_integer_query_value(
+    query_params: dict[str, list[str]],
+    name: str,
+    *,
+    minimum: int,
+    maximum: Optional[int] = None,
+) -> str:
+    """Return a validated integer query value preserved as a string."""
+    raw_value = _validated_single_query_value(query_params, name)
+
+    try:
+        parsed_value = int(raw_value)
+    except ValueError as exc:
+        raise ValueError(f"Editor proxy requires an integer query parameter: {name}") from exc
+
+    if parsed_value < minimum or (maximum is not None and parsed_value > maximum):
+        raise ValueError(f"Editor proxy rejected out-of-range query parameter: {name}")
+
+    return str(parsed_value)
+
+
+def _validated_identifier_query_value(query_params: dict[str, list[str]], name: str) -> str:
+    """Return a single identifier-like query value safe for proxy forwarding."""
+    value = _validated_single_query_value(query_params, name)
+    if not value.strip():
+        raise ValueError(f"Editor proxy requires a non-empty query parameter: {name}")
+    if len(value) > 256:
+        raise ValueError(f"Editor proxy rejected oversized query parameter: {name}")
+    if any(ord(character) < 32 for character in value):
+        raise ValueError(f"Editor proxy rejected invalid query parameter: {name}")
+    if any(character in value for character in "/\\?#"):
+        raise ValueError(f"Editor proxy rejected invalid query parameter: {name}")
+    return value
+
+
+def _resolve_proxy_target(
+    method: str,
+    request_path: str,
+    query: str,
+) -> Optional[tuple[str, dict[str, str]]]:
+    """Resolve a frontend route to a fixed upstream path and validated params."""
+    query_params = _validated_proxy_query_params(query)
+
+    if method == "POST":
+        post_route_map = {
+            "/api/dff/configurations": "/nidynamicformfields/v1/configurations",
+            "/api/dff/update-configurations": "/nidynamicformfields/v1/update-configurations",
+            "/nidynamicformfields/v1/update-configurations": "/nidynamicformfields/v1/update-configurations",
+        }
+        target_path = post_route_map.get(request_path)
+        if target_path is None:
+            return None
+        if query_params:
+            raise ValueError("Editor proxy does not forward query parameters for this route")
+        return target_path, {}
+
+    if method == "GET" and request_path == "/niuser/v1/workspaces":
+        unexpected_params = set(query_params) - {"take", "skip"}
+        if unexpected_params:
+            raise ValueError("Editor proxy rejected unsupported workspace query parameters")
+
+        safe_params: dict[str, str] = {}
+        if "take" in query_params:
+            safe_params["take"] = _validated_integer_query_value(
+                query_params, "take", minimum=1, maximum=1000
+            )
+        if "skip" in query_params:
+            safe_params["skip"] = _validated_integer_query_value(query_params, "skip", minimum=0)
+        return "/niuser/v1/workspaces", safe_params
+
+    if method == "GET" and request_path == "/nidynamicformfields/v1/resolved-configuration":
+        unexpected_params = set(query_params) - {"configurationId"}
+        if unexpected_params:
+            raise ValueError(
+                "Editor proxy rejected unsupported resolved-configuration query parameters"
+            )
+        return "/nidynamicformfields/v1/resolved-configuration", {
+            "configurationId": _validated_identifier_query_value(query_params, "configurationId")
+        }
+
+    return None
+
+
 class DFFWebEditor:
     """Web-based editor for custom fields configurations."""
 
@@ -224,21 +335,17 @@ class DFFWebEditor:
                         self.send_error(404, "Config file not found")
                         return True
 
-                # Handle API proxying
-                path_map = {
-                    "/api/dff/configurations": "/nidynamicformfields/v1/configurations",
-                    "/api/dff/update-configurations": "/nidynamicformfields/v1/update-configurations",
-                }
-
-                if request_path in path_map:
-                    target_path = path_map[request_path]
-                elif request_path.startswith("/nidynamicformfields/v1/"):
-                    target_path = request_path
-                elif request_path.startswith("/niuser/v1/workspaces"):
-                    target_path = request_path
-                else:
+                try:
+                    resolved_target = _resolve_proxy_target(method, request_path, parsed.query)
+                except ValueError as exc:
+                    self.send_error(400, str(exc))
+                    return True
+
+                if resolved_target is None:
                     return False
 
+                target_path, target_params = resolved_target
+
                 # Require per-session secret on all proxied routes
                 req_secret = self.headers.get("X-Editor-Secret")
                 if not secret or req_secret != secret:
@@ -249,7 +356,6 @@ class DFFWebEditor:
                     origin_scheme=api_scheme,
                     origin_netloc=api_netloc,
                     target_path=target_path,
-                    query=parsed.query,
                 )
 
                 headers = dict(default_headers)
@@ -266,6 +372,7 @@ class DFFWebEditor:
                         url=target_url,
                         headers=headers,
                         data=data,
+                        params=target_params or None,
                         verify=ssl_verify,
                     )
                 except requests.RequestException as exc:  # pragma: no cover

{systemlink_cli-1.13.3 → systemlink_cli-1.13.5}/slcli/webapp_click.py

@@ -893,7 +893,7 @@ def register_webapp_commands(cli: Any) -> None:
 
     @cli.group()
     def webapp() -> None:  # pragma: no cover - Click wiring
-        """Manage web applications (init/pack locally, publish/CRUD remotely)."""
+        """Build, publish, and manage SystemLink web applications."""
 
     @webapp.command(name="init")
     @click.argument(

{systemlink_cli-1.13.3 → systemlink_cli-1.13.5}/slcli/workitem_click.py

@@ -431,7 +431,7 @@ def register_workitem_commands(cli: Any) -> None:
 
     @cli.group()
     def workitem() -> None:
-        """Manage work items, templates, and workflows."""
+        """Manage SystemLink work items, templates, and workflows."""
 
     # -----------------------------------------------------------------------
     # workitem list

{systemlink_cli-1.13.3 → systemlink_cli-1.13.5}/slcli/workspace_click.py

@@ -59,7 +59,7 @@ def register_workspace_commands(cli: Any) -> None:
 
     @cli.group()
     def workspace() -> None:
-        """Manage workspaces."""
+        """Manage SystemLink workspaces."""
         pass
 
     @workspace.command(name="list")