@ait-co/console-cli 0.1.31 → 0.1.33

package/README.en.md

@@ -5,7 +5,7 @@
 [![npm](https://img.shields.io/npm/v/@ait-co/console-cli)](https://www.npmjs.com/package/@ait-co/console-cli)
 [![license](https://img.shields.io/badge/license-BSD--3--Clause-blue)](https://github.com/apps-in-toss-community/console-cli/blob/main/LICENSE)
 
-> Pre-1.0 (`0.1.x`) — published to npm but the surface is still small. `whoami` / `login` / `logout` / `upgrade` are usable today; `deploy` / `logs` / `status` are next.
+> Pre-1.0 (`0.1.x`) — published to npm. Auth, workspace, and mini-app commands (including bundle deploy and cert management) work end-to-end today; `app logs` is deferred until the backend endpoint is available. See [Status](#status) for the full command surface.
 
 `aitcc` is a community-maintained CLI for automating Apps in Toss developer console operations — log in once in a browser, then drive subsequent operations from your shell or from an AI coding agent via headless browser automation.
 
@@ -66,7 +66,7 @@ Add `--save keychain` to persist the credentials so the next `aitcc login` runs
 
 `aitcc upgrade` respects `GITHUB_TOKEN` to avoid anonymous GitHub API rate limits.
 
-Planned commands: `deploy`, `logs`, `status`.
+Planned: `app logs` (pending backend endpoint availability).
 
 ### Project context (`aitcc.yaml`)
 
@@ -74,8 +74,8 @@ App- and workspace-scoped commands (`app status`, `app deploy`, `app certs ls`,
 
 ```yaml
 # aitcc.yaml
-workspaceId: 3095
-miniAppId: 31146
+workspaceId: 12345
+miniAppId: 67890
 ```
 
 Resolution priority (highest first):
@@ -86,7 +86,7 @@ Resolution priority (highest first):
 Each command prints a one-line context header to stderr so you always see what was resolved (suppressed under `--json` so machine-readable output is unaffected):
 
 ```
-[workspace: 3095 (from aitcc.yaml) · app: 31146 (from aitcc.yaml)]
+[workspace: 12345 (from aitcc.yaml) · app: 67890 (from aitcc.yaml)]
 ```
 
 The walk stops at the nearest `.git` directory and never crosses `$HOME`. Passing `--workspace` overrides any yaml `miniAppId` (it may belong to a different workspace), but `AITCC_WORKSPACE` keeps it.
@@ -130,7 +130,7 @@ For one-shot CI runs (e.g. `aitcc app deploy` from a workflow), seed the runner
 # Desktop (already logged in):
 aitcc auth export --format env >> $GITHUB_ENV       # or: aitcc auth export --format env  → store as a secret
 # CI (with the secret exposed as $AITCC_SESSION):
-aitcc app deploy --bundle ./dist/app.zip --json
+aitcc app deploy ./aitc-sdk-example.ait --json
 ```
 
 When `AITCC_SESSION` is set, every command reads the session from that env var instead of the local file. `logout` / `workspace use` / other write paths are silenced under env mode so a CI host never materialises a session file. Use `aitcc auth import --from-env` if you actually want the blob persisted to disk (mainly for restoring a desktop after a wipe).
@@ -168,7 +168,7 @@ Once per day per machine, a minimal anonymous ping is sent on every invocation.
 
 Three ways to opt out:
 
-- `AITC_TELEMETRY=off` environment variable — disables all telemetry for this shell session
+- `AITCC_TELEMETRY=off` environment variable — disables all telemetry for this shell session
 - `--no-telemetry` flag — disables for this single invocation only (not permanent)
 - `aitcc telemetry tier0-off` — permanently opts out (persisted to the state file)
 
@@ -190,7 +190,14 @@ State file: `$XDG_CONFIG_HOME/aitcc/telemetry.json` (fallback `~/.config/aitcc/t
 
 ## Status
 
-`login`, `logout`, `whoami`, and `upgrade` are implemented end-to-end — `login` drives a real browser over CDP and `whoami` reads the live console member API. `deploy`, `logs`, `status` are next. See the [organization landing page](https://aitc.dev/) for the full roadmap.
+The following command groups are implemented end-to-end:
+
+- Auth & session: `login` / `logout` / `whoami` / `auth` (export/import)
+- Workspace: `workspace` / `members` / `me` / `notices`
+- Mini-app: `app` — `init` / `ls` / `show` / `status` / `deploy` / `register` / `ratings` / `reports` / `metrics` / `events` / `messages` / `share-rewards`, `app bundles` (`ls`/`deployed`/`upload`/`review`/`release`/`test-push`/`test-links`), `app certs` (`ls`/`show`/`issue`/`revoke`)
+- Misc: Deploy Key issuance (`keys`), `telemetry`, `upgrade` (self-update), `completion` (shell completion)
+
+`app logs` is deferred until the backend endpoint is available. See the [organization landing page](https://aitc.dev/) for the full roadmap.
 
 ## Pre-commit hook
 

package/README.md

@@ -5,7 +5,7 @@
 [![npm](https://img.shields.io/npm/v/@ait-co/console-cli)](https://www.npmjs.com/package/@ait-co/console-cli)
 [![license](https://img.shields.io/badge/license-BSD--3--Clause-blue)](https://github.com/apps-in-toss-community/console-cli/blob/main/LICENSE)
 
-> 1.0 이전 단계 (`0.1.x`) — npm에 배포돼 있지만 표면은 아직 작습니다. 현재 `whoami` / `login` / `logout` / `upgrade`가 동작하고, `deploy` / `logs` / `status`는 다음 작업으로 진행됩니다.
+> 1.0 이전 단계 (`0.1.x`) — npm에 배포돼 있습니다. 인증·워크스페이스·미니앱 명령(번들 배포, 인증서 관리 포함)이 end-to-end로 동작하며, `app logs`는 백엔드 endpoint 확보 후 구현 예정입니다. 전체 명령 표면은 [진행 상황](#진행-상황) 참조.
 
 `aitcc`는 앱인토스 개발자 콘솔을 자동화하는 커뮤니티 CLI입니다 — 브라우저로 한 번만 로그인하면 이후 작업은 셸이나 AI 코딩 에이전트가 headless 브라우저로 처리합니다.
 
@@ -66,7 +66,7 @@ AITCC_EMAIL=you@example.com AITCC_PASSWORD=… aitcc login --json
 
 `aitcc upgrade`는 GitHub API anonymous rate limit을 피하려고 `GITHUB_TOKEN`을 존중합니다.
 
-예정 명령은 `deploy`, `logs`, `status` 입니다.
+예정 명령은 `app logs` 입니다 (백엔드 endpoint 확보 후).
 
 ### 프로젝트 컨텍스트 (`aitcc.yaml`)
 
@@ -74,8 +74,8 @@ app·workspace 범위 명령(`app status`, `app deploy`, `app certs ls`, `keys l
 
 ```yaml
 # aitcc.yaml
-workspaceId: 3095
-miniAppId: 31146
+workspaceId: 12345
+miniAppId: 67890
 ```
 
 해상도 우선순위 (높은 것부터):
@@ -86,7 +86,7 @@ miniAppId: 31146
 각 명령은 어떤 값이 resolve됐는지 stderr에 한 줄 헤더로 출력합니다 (`--json` 모드에선 machine-readable 출력에 영향 없도록 생략):
 
 ```
-[workspace: 3095 (from aitcc.yaml) · app: 31146 (from aitcc.yaml)]
+[workspace: 12345 (from aitcc.yaml) · app: 67890 (from aitcc.yaml)]
 ```
 
 탐색은 가장 가까운 `.git` 디렉토리에서 멈추고 `$HOME` 위로는 절대 안 갑니다. `--workspace`로 workspace를 명시하면 yaml의 `miniAppId`는 무시되지만(다른 workspace 소속일 수 있음) `AITCC_WORKSPACE` env는 yaml miniApp을 유지합니다.
@@ -130,7 +130,7 @@ OS 키체인 대신 plain `0600` 파일을 쓰는 이유는 [CLAUDE.md](./CLAUDE
 # Desktop (이미 로그인된 상태):
 aitcc auth export --format env >> $GITHUB_ENV       # 또는 secret으로 저장
 # CI ($AITCC_SESSION으로 secret 노출):
-aitcc app deploy --bundle ./dist/app.zip --json
+aitcc app deploy ./aitc-sdk-example.ait --json
 ```
 
 `AITCC_SESSION`이 설정되면 모든 명령은 로컬 파일 대신 이 env var에서 세션을 읽습니다. env 모드에선 `logout` / `workspace use` 등의 write 경로가 비활성화돼 CI 호스트가 세션 파일을 절대 디스크에 떨어뜨리지 않습니다. blob을 disk에 영구 저장하고 싶다면 `aitcc auth import --from-env`를 쓰세요 (주로 desktop wipe 후 복구).
@@ -168,7 +168,7 @@ aitcc app deploy --bundle ./dist/app.zip --json
 
 opt-out 방법 (세 가지):
 
-- `AITC_TELEMETRY=off` 환경 변수 — 이 쉘 세션 전체 비활성
+- `AITCC_TELEMETRY=off` 환경 변수 — 이 쉘 세션 전체 비활성
 - `--no-telemetry` 플래그 — 이 invocation만 비활성 (영구 X)
 - `aitcc telemetry tier0-off` — 영구 opt-out (state file에 저장)
 
@@ -190,7 +190,14 @@ aitcc telemetry tier0-on        # Tier 0 다시 활성화
 
 ## 진행 상황
 
-`login`, `logout`, `whoami`, `upgrade`는 end-to-end 동작 — `login`은 CDP로 실제 브라우저를 띄우고 `whoami`는 live console member API를 호출합니다. `deploy`, `logs`, `status`가 다음 작업입니다. 전체 로드맵은 [organization landing page](https://aitc.dev/) 참조.
+다음 명령군이 end-to-end로 동작합니다:
+
+- 인증·세션: `login` / `logout` / `whoami` / `auth` (export/import)
+- 워크스페이스: `workspace` / `members` / `me` / `notices`
+- 미니앱: `app` — `init` / `ls` / `show` / `status` / `deploy` / `register` / `ratings` / `reports` / `metrics` / `events` / `messages` / `share-rewards`, `app bundles` (`ls`/`deployed`/`upload`/`review`/`release`/`test-push`/`test-links`), `app certs` (`ls`/`show`/`issue`/`revoke`)
+- 그 외: Deploy Key 발급(`keys`), `telemetry`, `upgrade`(self-update), `completion`(셸 자동완성)
+
+`app logs`는 백엔드 endpoint 확보 후 구현 예정입니다. 전체 로드맵은 [organization landing page](https://aitc.dev/) 참조.
 
 ## Pre-commit hook
 

package/dist/cli.mjs

@@ -1974,7 +1974,7 @@ async function runDeploy(args, deps = {}) {
 	const release = Boolean(args.release);
 	const confirm = Boolean(args.confirm);
 	const releaseNotes = typeof args.releaseNotes === "string" ? args.releaseNotes : void 0;
-	if (requestReview && releaseNotes === void 0) {
+	if (requestReview && (releaseNotes === void 0 || releaseNotes.trim() === "")) {
 		if (args.json) emitJson({
 			ok: false,
 			reason: "missing-release-notes",
@@ -2280,7 +2280,7 @@ async function fetchTermsBlockers(workspaceId, session, apiOpts) {
 				type,
 				errorCode: WORKSPACE_TERM_ERROR_CODES[type],
 				title: t.title,
-				action: `aitcc workspace terms --type ${type}`
+				action: `aitcc workspace terms agree ${type}`
 			});
 		}
 		return {
@@ -2510,6 +2510,7 @@ function validateManifest(raw, configDir) {
 		if (!isTitleCaseWord(word)) throw new ManifestError("invalid-config", `titleEn word "${word}" must be title-case (first letter uppercase, rest lowercase); server-side rule, errorCode: miniApp.InvalidTitleEn`, "titleEn");
 	}
 	const appName = requireString(raw, "appName");
+	if (!APP_NAME_REGEX.test(appName)) throw new ManifestError("invalid-config", `appName must be a kebab-case slug starting with a lowercase letter (got "${appName}"; server-side rule)`, "appName");
 	const csEmail = requireString(raw, "csEmail");
 	if (!isValidEmail$1(csEmail)) throw new ManifestError("invalid-config", `csEmail is not a valid email address (got ${csEmail})`, "csEmail");
 	const subtitle = requireString(raw, "subtitle");
@@ -3097,7 +3098,7 @@ function emitImageDimensionError(json, err) {
 	else process.stderr.write(`${err.message}\n`);
 }
 function emitTermsNotAccepted(json) {
-	const message = "The console requires several legal-agreement checkboxes before submitting a mini-app for review. Re-run with --accept-terms to attest that you have read and agree to each of them (see VALIDATION-RULES.md or the console UI), or use --dry-run to preview the payload without submitting.";
+	const message = "The console requires several legal-agreement checkboxes before submitting a mini-app for review. Re-run with --accept-terms to attest that you have read and agree to each of them (see the console UI for the current list), or use --dry-run to preview the payload without submitting.";
 	if (json) emitJson({
 		ok: false,
 		reason: "terms-not-accepted",
@@ -3139,7 +3140,9 @@ async function emitFailureAndExit(json, err) {
 	return emitFailureFromError(json, err);
 }
 async function persistMiniAppIdToProject(json, miniAppId, cwd) {
-	if (typeof miniAppId !== "number" || !Number.isInteger(miniAppId) || miniAppId <= 0) return;
+	const coerced = typeof miniAppId === "string" && /^\d+$/.test(miniAppId) ? Number(miniAppId) : miniAppId;
+	if (typeof coerced !== "number" || !Number.isInteger(coerced) || coerced <= 0) return;
+	const numericId = coerced;
 	let ctx;
 	try {
 		ctx = await findProjectContext(cwd);
@@ -3151,12 +3154,12 @@ async function persistMiniAppIdToProject(json, miniAppId, cwd) {
 		return;
 	}
 	if (ctx === null) {
-		if (!json) process.stderr.write(`tip: drop an aitcc.yaml with \`miniAppId: ${miniAppId}\` in your project root to skip --app on later commands.\n`);
+		if (!json) process.stderr.write(`tip: drop an aitcc.yaml with \`miniAppId: ${numericId}\` in your project root to skip --app on later commands.\n`);
 		return;
 	}
 	try {
-		const outcome = await writeProjectMiniAppId(ctx.source, miniAppId);
-		if (!json && outcome.status === "written") process.stderr.write(`Updated ${ctx.source} with miniAppId: ${miniAppId}.\n`);
+		const outcome = await writeProjectMiniAppId(ctx.source, numericId);
+		if (!json && outcome.status === "written") process.stderr.write(`Updated ${ctx.source} with miniAppId: ${numericId}.\n`);
 	} catch (err) {
 		if (!json) {
 			const detail = err instanceof Error ? err.message : String(err);
@@ -5736,7 +5739,7 @@ const appCommand = defineCommand({
 				},
 				"accept-terms": {
 					type: "boolean",
-					description: "Attest to the required console legal-agreement checkboxes (see VALIDATION-RULES.md). Required for real submits.",
+					description: "Attest to the required console legal-agreement checkboxes. Required for real submits.",
 					default: false
 				},
 				json: {
@@ -6218,7 +6221,7 @@ async function clearAuthState() {
 *   2. OS keychain entry whose email is recorded in `auth-state.json`.
 *
 * Returns `null` when no source is configured. The discriminated `kind`
-* lets callers (e.g. PR β's login flow) tell why a credential was found
+* lets callers (e.g. the login flow) tell why a credential was found
 * without having to peek at process env themselves — useful for
 * "auto-login from CI" diagnostics.
 *
@@ -7051,7 +7054,7 @@ function parseAppsFlag(raw) {
 const lsCommand$3 = defineCommand({
 	meta: {
 		name: "ls",
-		description: "List console API keys in the selected workspace."
+		description: "List Deploy Keys in the selected workspace."
 	},
 	args: {
 		workspace: {
@@ -7086,11 +7089,11 @@ const lsCommand$3 = defineCommand({
 				return exitAfterFlush(ExitCode.Ok);
 			}
 			if (keys.length === 0) {
-				process.stdout.write(`No API keys in workspace ${workspaceId}.\n`);
-				process.stderr.write("Hint: `aitcc keys create --name <label>` to issue one (deploy automation requires a key).\n");
+				process.stdout.write(`No Deploy Keys in workspace ${workspaceId}.\n`);
+				process.stderr.write("Hint: `aitcc keys create --name <label>` to issue one (deploy automation requires a Deploy Key).\n");
 				return exitAfterFlush(ExitCode.Ok);
 			}
-			process.stdout.write(`${keys.length} API key(s) in workspace ${workspaceId}:\n`);
+			process.stdout.write(`${keys.length} Deploy Key(s) in workspace ${workspaceId}:\n`);
 			const now = Date.now();
 			for (const k of keys) {
 				const name = k.name ?? "(unnamed)";
@@ -7106,7 +7109,7 @@ const lsCommand$3 = defineCommand({
 const createCommand = defineCommand({
 	meta: {
 		name: "create",
-		description: "Issue a new console API key. Plaintext is shown once."
+		description: "Issue a new Deploy Key. Plaintext is shown once."
 	},
 	args: {
 		name: {
@@ -7196,13 +7199,13 @@ const createCommand = defineCommand({
 const revokeCommand = defineCommand({
 	meta: {
 		name: "revoke",
-		description: "Disable a console API key by id."
+		description: "Disable a Deploy Key by id."
 	},
 	args: {
 		id: {
 			type: "positional",
 			required: true,
-			description: "API key id (from `aitcc keys ls`)."
+			description: "Deploy Key id (from `aitcc keys ls`)."
 		},
 		workspace: {
 			type: "string",
@@ -7230,7 +7233,7 @@ const revokeCommand = defineCommand({
 				});
 				return exitAfterFlush(ExitCode.Ok);
 			}
-			process.stdout.write(`Revoked API key ${rawId} in workspace ${workspaceId}.\n`);
+			process.stdout.write(`Revoked Deploy Key ${rawId} in workspace ${workspaceId}.\n`);
 			return exitAfterFlush(ExitCode.Ok);
 		} catch (err) {
 			return emitFailureFromError(args.json, err);
@@ -7247,7 +7250,7 @@ function formatExpiry(expireTs, now) {
 const keysCommand = defineCommand({
 	meta: {
 		name: "keys",
-		description: "Manage console API keys used for deploy automation."
+		description: "Manage Deploy Keys used for deploy automation."
 	},
 	subCommands: {
 		ls: lsCommand$3,
@@ -9229,7 +9232,7 @@ function resolveVersion() {
 		if (typeof injected === "string" && injected.length > 0) return injected;
 	} catch {}
 	try {
-		return "0.1.31";
+		return "0.1.33";
 	} catch {}
 	return "0.0.0-dev";
 }
@@ -9501,7 +9504,7 @@ async function sendTier0Ping(endpoint, version) {
 * Usage: import { trackInvocation, trackTier0Ping } from './telemetry/index.js'
 *
 * Tier 0 (opt-out): anonymous daily ping. Fires on every invocation; client-side
-*   daily dedupe via tier0LastSent. Respects AITC_TELEMETRY=off, --no-telemetry,
+*   daily dedupe via tier0LastSent. Respects AITCC_TELEMETRY=off, --no-telemetry,
 *   and permanent tier0OptOut flag.
 *
 * Tier 1 (opt-in): detailed events. First invocation on a TTY prompts the user;
@@ -9555,7 +9558,7 @@ async function promptConsent() {
 */
 function isTelemetryGloballyDisabled(noTelemetryFlag) {
 	if (noTelemetryFlag) return true;
-	const env = process.env.AITC_TELEMETRY;
+	const env = process.env.AITCC_TELEMETRY;
 	if (env !== void 0 && env.toLowerCase() === "off") return true;
 	return false;
 }
@@ -9563,7 +9566,7 @@ function isTelemetryGloballyDisabled(noTelemetryFlag) {
 * Send a Tier 0 anonymous daily ping (fire-and-forget).
 *
 * Skips if:
-*   - AITC_TELEMETRY=off or --no-telemetry flag
+*   - AITCC_TELEMETRY=off or --no-telemetry flag
 *   - tier0OptOut === true in the state file
 *   - already sent today (tier0LastSent === today's ISO date)
 *
@@ -11039,7 +11042,7 @@ const main = defineCommand({
 	meta: {
 		name: "aitcc",
 		version: VERSION,
-		description: "aitcc — Apps in Toss Community Console CLI. Unofficial, not affiliated with Toss."
+		description: "aitcc — Apps in Toss Community Console CLI. Community open-source project."
 	},
 	subCommands: {
 		whoami: whoamiCommand,