@ait-co/console-cli 0.1.9 → 0.1.11

package/dist/cli.mjs

@@ -161,10 +161,10 @@ async function executeAndUnwrap(url, init, fetchImpl) {
 }
 //#endregion
 //#region src/api/mini-apps.ts
-const BASE$2 = "https://apps-in-toss.toss.im/console/api-public/v3/appsintossconsole";
+const BASE$3 = "https://apps-in-toss.toss.im/console/api-public/v3/appsintossconsole";
 async function fetchMiniApps(workspaceId, cookies, opts = {}) {
 	const raw = await requestConsoleApi({
-		url: `${BASE$2}/workspaces/${workspaceId}/mini-app`,
+		url: `${BASE$3}/workspaces/${workspaceId}/mini-app`,
 		cookies,
 		...opts.fetchImpl ? { fetchImpl: opts.fetchImpl } : {}
 	});
@@ -187,7 +187,7 @@ function normalizeMiniApp(item, workspaceId, index) {
 }
 async function fetchReviewStatus(workspaceId, cookies, opts = {}) {
 	const raw = await requestConsoleApi({
-		url: `${BASE$2}/workspaces/${workspaceId}/mini-apps/review-status`,
+		url: `${BASE$3}/workspaces/${workspaceId}/mini-apps/review-status`,
 		cookies,
 		...opts.fetchImpl ? { fetchImpl: opts.fetchImpl } : {}
 	});
@@ -206,7 +206,7 @@ async function fetchReviewStatus(workspaceId, cookies, opts = {}) {
 }
 async function fetchMiniAppWithDraft(workspaceId, miniAppId, cookies, opts = {}) {
 	const raw = await requestConsoleApi({
-		url: `${BASE$2}/workspaces/${workspaceId}/mini-app/${miniAppId}/with-draft`,
+		url: `${BASE$3}/workspaces/${workspaceId}/mini-app/${miniAppId}/with-draft`,
 		cookies,
 		...opts.fetchImpl ? { fetchImpl: opts.fetchImpl } : {}
 	});
@@ -214,15 +214,156 @@ async function fetchMiniAppWithDraft(workspaceId, miniAppId, cookies, opts = {})
 	const rec = raw;
 	return {
 		current: isRecordOrNull(rec.current) ? rec.current : null,
-		draft: isRecordOrNull(rec.draft) ? rec.draft : null
+		draft: isRecordOrNull(rec.draft) ? rec.draft : null,
+		approvalType: typeof rec.approvalType === "string" ? rec.approvalType : null,
+		rejectedMessage: typeof rec.rejectedMessage === "string" ? rec.rejectedMessage : null
 	};
 }
 function isRecordOrNull(v) {
 	return v === null || typeof v === "object" && !Array.isArray(v);
 }
+async function fetchMiniAppRatings(params, cookies, opts = {}) {
+	const page = params.page ?? 0;
+	const size = params.size ?? 20;
+	const sortField = params.sortField ?? "CREATED_AT";
+	const sortDirection = params.sortDirection ?? "DESC";
+	const raw = await requestConsoleApi({
+		url: `${BASE$3}/workspaces/${params.workspaceId}/mini-app/${params.miniAppId}/app-ratings?page=${page}&size=${size}&sortField=${sortField}&sortDirection=${sortDirection}`,
+		cookies,
+		...opts.fetchImpl ? { fetchImpl: opts.fetchImpl } : {}
+	});
+	if (raw === null || typeof raw !== "object") throw new Error(`Unexpected ratings shape for app=${params.miniAppId}`);
+	const rec = raw;
+	const ratingsRaw = rec.ratings;
+	if (!Array.isArray(ratingsRaw)) throw new Error(`Unexpected ratings shape: ratings is not an array (app=${params.miniAppId})`);
+	const ratings = ratingsRaw.map((r) => {
+		if (r === null || typeof r !== "object") return {};
+		return r;
+	});
+	const pagingRaw = rec.paging;
+	if (pagingRaw === null || typeof pagingRaw !== "object") throw new Error(`Unexpected ratings shape: paging missing (app=${params.miniAppId})`);
+	const p = pagingRaw;
+	return {
+		ratings,
+		paging: {
+			pageNumber: typeof p.pageNumber === "number" ? p.pageNumber : page,
+			pageSize: typeof p.pageSize === "number" ? p.pageSize : size,
+			hasNext: Boolean(p.hasNext),
+			totalCount: typeof p.totalCount === "number" ? p.totalCount : 0
+		},
+		averageRating: typeof rec.averageRating === "number" ? rec.averageRating : 0,
+		totalReviewCount: typeof rec.totalReviewCount === "number" ? rec.totalReviewCount : 0
+	};
+}
+async function fetchUserReports(params, cookies, opts = {}) {
+	const pageSize = params.pageSize ?? 20;
+	const qs = new URLSearchParams();
+	qs.set("pageSize", String(pageSize));
+	if (params.cursor !== void 0) qs.set("cursor", params.cursor);
+	const raw = await requestConsoleApi({
+		url: `${BASE$3}/workspaces/${params.workspaceId}/mini-apps/${params.miniAppId}/user-reports?` + qs.toString(),
+		cookies,
+		...opts.fetchImpl ? { fetchImpl: opts.fetchImpl } : {}
+	});
+	if (raw === null || typeof raw !== "object") throw new Error(`Unexpected user-reports shape for app=${params.miniAppId}`);
+	const rec = raw;
+	const reportsRaw = rec.reports;
+	if (!Array.isArray(reportsRaw)) throw new Error(`Unexpected user-reports shape: reports is not an array (app=${params.miniAppId})`);
+	return {
+		reports: reportsRaw.map((r) => {
+			if (r === null || typeof r !== "object") return {};
+			return r;
+		}),
+		nextCursor: typeof rec.nextCursor === "string" ? rec.nextCursor : null,
+		hasMore: Boolean(rec.hasMore)
+	};
+}
+async function fetchBundles(params, cookies, opts = {}) {
+	const qs = new URLSearchParams();
+	if (params.page !== void 0) qs.set("page", String(params.page));
+	if (params.tested !== void 0) qs.set("tested", String(params.tested));
+	if (params.deployStatus !== void 0) qs.set("deployStatus", params.deployStatus);
+	const query = qs.toString();
+	const raw = await requestConsoleApi({
+		url: `${BASE$3}/workspaces/${params.workspaceId}/mini-app/${params.miniAppId}/bundles` + (query ? `?${query}` : ""),
+		cookies,
+		...opts.fetchImpl ? { fetchImpl: opts.fetchImpl } : {}
+	});
+	if (raw === null || typeof raw !== "object") throw new Error(`Unexpected bundles shape for app=${params.miniAppId}`);
+	const rec = raw;
+	const contentsRaw = rec.contents;
+	if (!Array.isArray(contentsRaw)) throw new Error(`Unexpected bundles shape: contents is not an array (app=${params.miniAppId})`);
+	return {
+		contents: contentsRaw.map((b) => {
+			if (b === null || typeof b !== "object") return {};
+			return b;
+		}),
+		totalPage: typeof rec.totalPage === "number" ? rec.totalPage : 0,
+		currentPage: typeof rec.currentPage === "number" ? rec.currentPage : 0
+	};
+}
+async function fetchConversionMetrics(params, cookies, opts = {}) {
+	const qs = new URLSearchParams();
+	qs.set("refresh", String(params.refresh ?? false));
+	qs.set("timeUnitType", params.timeUnitType);
+	qs.set("startDate", params.startDate);
+	qs.set("endDate", params.endDate);
+	const raw = await requestConsoleApi({
+		url: `${BASE$3}/workspaces/${params.workspaceId}/mini-app/${params.miniAppId}/conversion-metrics?${qs.toString()}`,
+		cookies,
+		...opts.fetchImpl ? { fetchImpl: opts.fetchImpl } : {}
+	});
+	if (raw === null || typeof raw !== "object") throw new Error(`Unexpected metrics shape for app=${params.miniAppId}`);
+	const rec = raw;
+	const metricsRaw = rec.metrics;
+	if (!Array.isArray(metricsRaw)) throw new Error(`Unexpected metrics shape: metrics is not an array (app=${params.miniAppId})`);
+	return {
+		metrics: metricsRaw.map((m) => {
+			if (m === null || typeof m !== "object") return {};
+			return m;
+		}),
+		cacheTime: typeof rec.cacheTime === "string" ? rec.cacheTime : void 0
+	};
+}
+async function fetchCerts(workspaceId, miniAppId, cookies, opts = {}) {
+	const raw = await requestConsoleApi({
+		url: `${BASE$3}/workspaces/${workspaceId}/mini-app/${miniAppId}/certs`,
+		cookies,
+		...opts.fetchImpl ? { fetchImpl: opts.fetchImpl } : {}
+	});
+	if (!Array.isArray(raw)) throw new Error(`Unexpected certs shape for app=${miniAppId}: not an array`);
+	return raw.map((c) => {
+		if (c === null || typeof c !== "object") return {};
+		return c;
+	});
+}
+async function fetchShareRewards(params, cookies, opts = {}) {
+	const qs = new URLSearchParams();
+	qs.set("search", params.search ?? "");
+	const raw = await requestConsoleApi({
+		url: `${BASE$3}/workspaces/${params.workspaceId}/mini-app/${params.miniAppId}/share-rewards?${qs.toString()}`,
+		cookies,
+		...opts.fetchImpl ? { fetchImpl: opts.fetchImpl } : {}
+	});
+	if (!Array.isArray(raw)) throw new Error(`Unexpected share-rewards shape for app=${params.miniAppId}: not an array`);
+	return raw.map((r) => {
+		if (r === null || typeof r !== "object") return {};
+		return r;
+	});
+}
+async function fetchDeployedBundle(workspaceId, miniAppId, cookies, opts = {}) {
+	const raw = await requestConsoleApi({
+		url: `${BASE$3}/workspaces/${workspaceId}/mini-app/${miniAppId}/bundles/deployed`,
+		cookies,
+		...opts.fetchImpl ? { fetchImpl: opts.fetchImpl } : {}
+	});
+	if (raw === null) return null;
+	if (typeof raw !== "object" || Array.isArray(raw)) throw new Error(`Unexpected deployed-bundle shape for app=${miniAppId}`);
+	return raw;
+}
 async function createMiniApp(workspaceId, payload, cookies, opts = {}) {
 	return normalizeCreateResult(await requestConsoleApi({
-		url: `${BASE$2}/workspaces/${workspaceId}/mini-app/review`,
+		url: `${BASE$3}/workspaces/${workspaceId}/mini-app/review`,
 		method: "POST",
 		cookies,
 		body: payload,
@@ -255,7 +396,7 @@ function normalizeCreateResult(raw) {
 * the field name is actually `file` — if so, swap it in one place here.
 */
 async function uploadMiniAppResource(params, opts = {}) {
-	const url = new URL(`${BASE$2}/resource/${params.workspaceId}/upload`);
+	const url = new URL(`${BASE$3}/resource/${params.workspaceId}/upload`);
 	url.searchParams.set("validWidth", String(params.validWidth));
 	url.searchParams.set("validHeight", String(params.validHeight));
 	const form = new FormData();
@@ -505,7 +646,7 @@ async function emitFailureFromError(json, err) {
 	emitApiError(json, err.message);
 	return exitAfterFlush(ExitCode.ApiError);
 }
-function parsePositiveInt(raw) {
+function parsePositiveInt$1(raw) {
 	if (!/^[1-9]\d*$/.test(raw)) return null;
 	const n = Number.parseInt(raw, 10);
 	return Number.isSafeInteger(n) ? n : null;
@@ -533,7 +674,7 @@ async function resolveWorkspaceContext(args) {
 	let workspaceId;
 	if (args.workspace) {
 		const raw = String(args.workspace);
-		const parsed = parsePositiveInt(raw);
+		const parsed = parsePositiveInt$1(raw);
 		if (parsed === null) {
 			const message = `--workspace must be a positive integer (got ${raw})`;
 			if (args.json) emitJson({
@@ -561,6 +702,21 @@ async function resolveWorkspaceContext(args) {
 		workspaceId
 	};
 }
+/**
+* Session-only sibling of `resolveWorkspaceContext` for commands that
+* don't need a workspace id (notices come from a shared Toss workspace,
+* whoami is self-scoped). Same "exits on miss, returns null to force
+* `if (!session) return`" pattern.
+*/
+async function requireSession(json) {
+	const session = await readSession();
+	if (!session) {
+		emitNotAuthenticated(json);
+		await exitAfterFlush(ExitCode.NotAuthenticated);
+		return null;
+	}
+	return session;
+}
 //#endregion
 //#region src/config/app-manifest.ts
 var ManifestError = class extends Error {
@@ -1044,7 +1200,7 @@ function reviewStateFor(entry) {
 	const raw = entry.reviewState ?? entry.status;
 	return typeof raw === "string" ? raw : void 0;
 }
-const lsCommand$3 = defineCommand({
+const lsCommand$4 = defineCommand({
 	meta: {
 		name: "ls",
 		description: "List mini-apps in the selected workspace."
@@ -1124,220 +1280,1085 @@ function parseAppId(raw) {
 	if (!Number.isFinite(n) || !Number.isInteger(n) || n <= 0) return null;
 	return n;
 }
-const appCommand = defineCommand({
+const showCommand$2 = defineCommand({
 	meta: {
-		name: "app",
-		description: "Inspect mini-apps in a workspace."
+		name: "show",
+		description: "Show full details of a mini-app, including fields only visible in the draft view."
 	},
-	subCommands: {
-		ls: lsCommand$3,
-		show: defineCommand({
-			meta: {
-				name: "show",
-				description: "Show full details of a mini-app, including fields only visible in the draft view."
-			},
-			args: {
-				id: {
-					type: "positional",
-					description: "Mini-app ID (the numeric `appId` from `app ls` or `app register`).",
-					required: true
-				},
-				workspace: {
-					type: "string",
-					description: "Workspace ID. Defaults to the selected workspace."
-				},
-				view: {
-					type: "string",
-					description: "Which view to render: `draft` (default), `current`, or `merged`.",
-					default: "draft"
-				},
-				json: {
-					type: "boolean",
-					description: "Emit machine-readable JSON to stdout.",
-					default: false
-				}
-			},
-			async run({ args }) {
-				const appId = parseAppId(args.id);
-				if (appId === null) {
-					if (args.json) emitJson({
-						ok: false,
-						reason: "invalid-id",
-						message: `app id must be a positive integer (got ${JSON.stringify(args.id)})`
-					});
-					else process.stderr.write(`app show: invalid id ${JSON.stringify(args.id)}\n`);
-					return exitAfterFlush(ExitCode.Usage);
-				}
-				const view = args.view;
-				if (view !== "draft" && view !== "current" && view !== "merged") {
-					if (args.json) emitJson({
-						ok: false,
-						reason: "invalid-config",
-						field: "view",
-						message: `--view must be one of draft|current|merged (got ${JSON.stringify(view)})`
-					});
-					else process.stderr.write(`app show: invalid --view ${JSON.stringify(view)}\n`);
-					return exitAfterFlush(ExitCode.Usage);
-				}
-				const ctx = await resolveWorkspaceContext(args);
-				if (!ctx) return;
-				const { session, workspaceId } = ctx;
-				try {
-					const envelope = await fetchMiniAppWithDraft(workspaceId, appId, session.cookies);
-					const miniApp = pickMiniAppView(envelope, view);
-					if (args.json) {
-						emitJson({
-							ok: true,
-							workspaceId,
-							appId,
-							view,
-							miniApp
-						});
-						return exitAfterFlush(ExitCode.Ok);
-					}
-					if (miniApp === null) {
-						if (view === "current" && envelope.draft !== null) process.stdout.write(`App ${appId} has no \`current\` view yet (not reviewed). Try --view draft.\n`);
-						else process.stdout.write(`App ${appId} has no data for view=${view}.\n`);
-						return exitAfterFlush(ExitCode.Ok);
-					}
-					const pick = (k) => {
-						const v = miniApp[k];
-						return v === null || v === void 0 ? "-" : String(v);
-					};
-					const images = Array.isArray(miniApp.images) ? miniApp.images : [];
-					const impression = miniApp.impression !== null && typeof miniApp.impression === "object" ? miniApp.impression : {};
-					const keywords = Array.isArray(impression.keywordList) ? impression.keywordList : [];
-					const categoryPaths = Array.isArray(impression.categoryPaths) ? impression.categoryPaths : [];
-					process.stdout.write(`# App ${appId} (view=${view})\n\n`);
-					process.stdout.write(`Name (ko)      ${pick("title")}\n`);
-					process.stdout.write(`Name (en)      ${pick("titleEn")}\n`);
-					process.stdout.write(`App slug       ${pick("appName")}\n`);
-					process.stdout.write(`Status         ${pick("status")}\n`);
-					process.stdout.write(`Home page      ${pick("homePageUri")}\n`);
-					process.stdout.write(`CS email       ${pick("csEmail")}\n`);
-					process.stdout.write(`Logo           ${pick("iconUri")}\n`);
-					process.stdout.write(`Subtitle       ${pick("description")}\n`);
-					const detail = typeof miniApp.detailDescription === "string" ? `${[...miniApp.detailDescription].length} chars` : "-";
-					process.stdout.write(`Detail desc    ${detail}\n`);
-					process.stdout.write(`Images         ${images.length}\n`);
-					process.stdout.write(`Keywords       ${keywords.length} (${keywords.join(", ")})\n`);
-					const firstPath = categoryPaths[0];
-					if (firstPath && typeof firstPath === "object") {
-						const fp = firstPath;
-						const parts = [];
-						for (const key of [
-							"group",
-							"category",
-							"subCategory"
-						]) {
-							const node = fp[key];
-							if (node !== null && typeof node === "object") {
-								const nm = node.name;
-								if (typeof nm === "string") parts.push(nm);
-							}
-						}
-						process.stdout.write(`Category       ${parts.join(" > ") || "-"}\n`);
-					} else process.stdout.write(`Category       -\n`);
-					return exitAfterFlush(ExitCode.Ok);
-				} catch (err) {
-					return emitFailureFromError(args.json, err);
-				}
-			}
-		}),
-		register: defineCommand({
-			meta: {
-				name: "register",
-				description: "Register a mini-app in the selected workspace from a YAML/JSON manifest. Uploads logo/thumbnail/screenshots, then submits the create payload."
-			},
-			args: {
-				workspace: {
-					type: "string",
-					description: "Workspace ID. Defaults to the selected workspace (`aitcc workspace use`)."
-				},
-				config: {
-					type: "string",
-					description: "Path to the app manifest. Defaults to `./aitcc.app.yaml`, then `./aitcc.app.json`."
-				},
-				"dry-run": {
-					type: "boolean",
-					description: "Validate manifest + images and print the inferred submit payload; no uploads.",
-					default: false
-				},
-				"accept-terms": {
-					type: "boolean",
-					description: "Attest to the required console legal-agreement checkboxes (see VALIDATION-RULES.md). Required for real submits.",
-					default: false
-				},
-				json: {
-					type: "boolean",
-					description: "Emit machine-readable JSON to stdout.",
-					default: false
-				}
-			},
-			async run({ args }) {
-				await runRegister({
-					json: args.json,
-					dryRun: args["dry-run"],
-					acceptTerms: args["accept-terms"],
-					...args.workspace !== void 0 ? { workspace: args.workspace } : {},
-					...args.config !== void 0 ? { config: args.config } : {}
+	args: {
+		id: {
+			type: "positional",
+			description: "Mini-app ID (the numeric `appId` from `app ls` or `app register`).",
+			required: true
+		},
+		workspace: {
+			type: "string",
+			description: "Workspace ID. Defaults to the selected workspace."
+		},
+		view: {
+			type: "string",
+			description: "Which view to render: `draft` (default), `current`, or `merged`.",
+			default: "draft"
+		},
+		json: {
+			type: "boolean",
+			description: "Emit machine-readable JSON to stdout.",
+			default: false
+		}
+	},
+	async run({ args }) {
+		const appId = parseAppId(args.id);
+		if (appId === null) {
+			if (args.json) emitJson({
+				ok: false,
+				reason: "invalid-id",
+				message: `app id must be a positive integer (got ${JSON.stringify(args.id)})`
+			});
+			else process.stderr.write(`app show: invalid id ${JSON.stringify(args.id)}\n`);
+			return exitAfterFlush(ExitCode.Usage);
+		}
+		const view = args.view;
+		if (view !== "draft" && view !== "current" && view !== "merged") {
+			if (args.json) emitJson({
+				ok: false,
+				reason: "invalid-config",
+				field: "view",
+				message: `--view must be one of draft|current|merged (got ${JSON.stringify(view)})`
+			});
+			else process.stderr.write(`app show: invalid --view ${JSON.stringify(view)}\n`);
+			return exitAfterFlush(ExitCode.Usage);
+		}
+		const ctx = await resolveWorkspaceContext(args);
+		if (!ctx) return;
+		const { session, workspaceId } = ctx;
+		try {
+			const envelope = await fetchMiniAppWithDraft(workspaceId, appId, session.cookies);
+			const miniApp = pickMiniAppView(envelope, view);
+			if (args.json) {
+				emitJson({
+					ok: true,
+					workspaceId,
+					appId,
+					view,
+					miniApp
 				});
+				return exitAfterFlush(ExitCode.Ok);
 			}
-		})
+			if (miniApp === null) {
+				if (view === "current" && envelope.draft !== null) process.stdout.write(`App ${appId} has no \`current\` view yet (not reviewed). Try --view draft.\n`);
+				else process.stdout.write(`App ${appId} has no data for view=${view}.\n`);
+				return exitAfterFlush(ExitCode.Ok);
+			}
+			const pick = (k) => {
+				const v = miniApp[k];
+				return v === null || v === void 0 ? "-" : String(v);
+			};
+			const images = Array.isArray(miniApp.images) ? miniApp.images : [];
+			const impression = miniApp.impression !== null && typeof miniApp.impression === "object" ? miniApp.impression : {};
+			const keywords = Array.isArray(impression.keywordList) ? impression.keywordList : [];
+			const categoryPaths = Array.isArray(impression.categoryPaths) ? impression.categoryPaths : [];
+			process.stdout.write(`# App ${appId} (view=${view})\n\n`);
+			process.stdout.write(`Name (ko)      ${pick("title")}\n`);
+			process.stdout.write(`Name (en)      ${pick("titleEn")}\n`);
+			process.stdout.write(`App slug       ${pick("appName")}\n`);
+			process.stdout.write(`Status         ${pick("status")}\n`);
+			process.stdout.write(`Home page      ${pick("homePageUri")}\n`);
+			process.stdout.write(`CS email       ${pick("csEmail")}\n`);
+			process.stdout.write(`Logo           ${pick("iconUri")}\n`);
+			process.stdout.write(`Subtitle       ${pick("description")}\n`);
+			const detail = typeof miniApp.detailDescription === "string" ? `${[...miniApp.detailDescription].length} chars` : "-";
+			process.stdout.write(`Detail desc    ${detail}\n`);
+			process.stdout.write(`Images         ${images.length}\n`);
+			process.stdout.write(`Keywords       ${keywords.length} (${keywords.join(", ")})\n`);
+			const firstPath = categoryPaths[0];
+			if (firstPath && typeof firstPath === "object") {
+				const fp = firstPath;
+				const parts = [];
+				for (const key of [
+					"group",
+					"category",
+					"subCategory"
+				]) {
+					const node = fp[key];
+					if (node !== null && typeof node === "object") {
+						const nm = node.name;
+						if (typeof nm === "string") parts.push(nm);
+					}
+				}
+				process.stdout.write(`Category       ${parts.join(" > ") || "-"}\n`);
+			} else process.stdout.write(`Category       -\n`);
+			return exitAfterFlush(ExitCode.Ok);
+		} catch (err) {
+			return emitFailureFromError(args.json, err);
+		}
 	}
 });
-//#endregion
-//#region src/api/api-keys.ts
-const BASE$1 = "https://apps-in-toss.toss.im/console/api-public/v3/appsintossconsole";
-async function fetchApiKeys(workspaceId, cookies, opts = {}) {
-	const raw = await requestConsoleApi({
-		url: `${BASE$1}/workspaces/${workspaceId}/api-keys`,
-		cookies,
-		...opts.fetchImpl ? { fetchImpl: opts.fetchImpl } : {}
-	});
-	if (!Array.isArray(raw)) throw new Error(`Unexpected api-keys shape for workspace=${workspaceId}: not an array`);
-	return raw.map((entry, index) => normalizeKey(entry, workspaceId, index));
-}
-function normalizeKey(raw, workspaceId, index) {
-	if (raw === null || typeof raw !== "object") throw new Error(`Unexpected api-key entry at index ${index} for workspace=${workspaceId}: not an object`);
-	const rec = raw;
-	const rawId = rec.id ?? rec.apiKeyId ?? rec.keyId;
-	if (typeof rawId !== "string" && typeof rawId !== "number") throw new Error(`Unexpected api-key entry at index ${index} for workspace=${workspaceId}: missing id`);
-	const rawName = rec.name ?? rec.apiKeyName ?? rec.keyName ?? rec.description;
-	const name = typeof rawName === "string" ? rawName : void 0;
-	const { id: _id, apiKeyId: _aid, keyId: _kid, name: _n, apiKeyName: _an, keyName: _kn, description: _d, ...extra } = rec;
+function deriveReviewState(env) {
+	const hasCurrent = env.current !== null;
+	const hasDraft = env.draft !== null;
+	const approvalType = env.approvalType;
+	const rejectedMessage = env.rejectedMessage;
+	let state;
+	if (approvalType === null) state = "not-submitted";
+	else if (rejectedMessage !== null) state = "rejected";
+	else if (!hasCurrent) state = "under-review";
+	else if (hasDraft) state = "approved-with-edits";
+	else state = "approved";
+	if (approvalType !== null && approvalType !== "REVIEW" && state === "under-review") state = "unknown";
 	return {
-		id: rawId,
-		name,
-		extra
+		state,
+		approvalType,
+		rejectedMessage,
+		hasCurrent,
+		hasDraft
 	};
 }
-const keysCommand = defineCommand({
+const POLL_MIN_INTERVAL_SEC = 30;
+const POLL_MAX_INTERVAL_SEC = 3600;
+const statusCommand = defineCommand({
 	meta: {
-		name: "keys",
-		description: "Inspect console API keys used for deploy automation."
+		name: "status",
+		description: "Show the derived review state of a mini-app (under-review / rejected / approved)."
 	},
-	subCommands: { ls: defineCommand({
-		meta: {
-			name: "ls",
-			description: "List console API keys in the selected workspace."
+	args: {
+		id: {
+			type: "positional",
+			description: "Mini-app ID.",
+			required: true
 		},
-		args: {
-			workspace: {
-				type: "string",
-				description: "Workspace ID. Defaults to the selected workspace (`aitcc workspace use`)."
-			},
-			json: {
-				type: "boolean",
-				description: "Emit machine-readable JSON to stdout.",
-				default: false
-			}
+		workspace: {
+			type: "string",
+			description: "Workspace ID. Defaults to the selected workspace."
 		},
-		async run({ args }) {
-			const ctx = await resolveWorkspaceContext(args);
-			if (!ctx) return;
-			const { session, workspaceId } = ctx;
-			try {
+		watch: {
+			type: "boolean",
+			description: "Poll until the review state flips off `under-review` (rejected or approved). Combine with `--interval <seconds>`.",
+			default: false
+		},
+		interval: {
+			type: "string",
+			description: "Polling interval in seconds when --watch is set. Clamped to [30, 3600].",
+			default: "60"
+		},
+		json: {
+			type: "boolean",
+			description: "Emit machine-readable JSON.",
+			default: false
+		}
+	},
+	async run({ args }) {
+		const appId = parseAppId(args.id);
+		if (appId === null) {
+			if (args.json) emitJson({
+				ok: false,
+				reason: "invalid-id",
+				message: `app id must be a positive integer (got ${JSON.stringify(args.id)})`
+			});
+			else process.stderr.write(`app status: invalid id ${JSON.stringify(args.id)}\n`);
+			return exitAfterFlush(ExitCode.Usage);
+		}
+		const intervalRaw = Number(args.interval);
+		if (!Number.isFinite(intervalRaw) || intervalRaw <= 0) {
+			if (args.json) emitJson({
+				ok: false,
+				reason: "invalid-config",
+				field: "interval",
+				message: `--interval must be a positive number (got ${JSON.stringify(args.interval)})`
+			});
+			else process.stderr.write(`app status: invalid --interval ${JSON.stringify(args.interval)}\n`);
+			return exitAfterFlush(ExitCode.Usage);
+		}
+		const intervalSec = Math.max(POLL_MIN_INTERVAL_SEC, Math.min(POLL_MAX_INTERVAL_SEC, Math.floor(intervalRaw)));
+		const ctx = await resolveWorkspaceContext(args);
+		if (!ctx) return;
+		const { session, workspaceId } = ctx;
+		const emit = (status) => {
+			if (args.json) emitJson({
+				ok: true,
+				workspaceId,
+				appId,
+				...status
+			});
+			else process.stdout.write(`App ${appId} (ws ${workspaceId}): ${status.state}` + (status.rejectedMessage ? `\n  reason: ${status.rejectedMessage}` : "") + "\n");
+		};
+		try {
+			const once = async () => {
+				return deriveReviewState(await fetchMiniAppWithDraft(workspaceId, appId, session.cookies));
+			};
+			if (!args.watch) {
+				emit(await once());
+				return exitAfterFlush(ExitCode.Ok);
+			}
+			let lastState = null;
+			while (true) {
+				const status = await once();
+				if (args.json) emit(status);
+				else if (status.state !== lastState) emit(status);
+				lastState = status.state;
+				if (status.state !== "under-review") return exitAfterFlush(ExitCode.Ok);
+				await new Promise((resolve) => setTimeout(resolve, intervalSec * 1e3));
+			}
+		} catch (err) {
+			return emitFailureFromError(args.json, err);
+		}
+	}
+});
+const VALID_SORT_FIELDS = ["CREATED_AT", "SCORE"];
+const VALID_SORT_DIRECTIONS = ["ASC", "DESC"];
+function parseNonNegativeInt(raw, field) {
+	const n = Number(raw);
+	if (!Number.isFinite(n) || !Number.isInteger(n) || n < 0) return { error: `--${field} must be a non-negative integer (got ${JSON.stringify(raw)})` };
+	return { value: n };
+}
+const ratingsCommand = defineCommand({
+	meta: {
+		name: "ratings",
+		description: "List user ratings and reviews left for a mini-app."
+	},
+	args: {
+		id: {
+			type: "positional",
+			description: "Mini-app ID.",
+			required: true
+		},
+		workspace: {
+			type: "string",
+			description: "Workspace ID. Defaults to the selected workspace."
+		},
+		page: {
+			type: "string",
+			description: "Page number (0-indexed).",
+			default: "0"
+		},
+		size: {
+			type: "string",
+			description: "Page size.",
+			default: "20"
+		},
+		"sort-field": {
+			type: "string",
+			description: "Sort field: CREATED_AT (default) or SCORE.",
+			default: "CREATED_AT"
+		},
+		"sort-direction": {
+			type: "string",
+			description: "Sort direction: ASC or DESC (default).",
+			default: "DESC"
+		},
+		json: {
+			type: "boolean",
+			description: "Emit machine-readable JSON.",
+			default: false
+		}
+	},
+	async run({ args }) {
+		const appId = parseAppId(args.id);
+		if (appId === null) {
+			if (args.json) emitJson({
+				ok: false,
+				reason: "invalid-id",
+				message: `app id must be a positive integer (got ${JSON.stringify(args.id)})`
+			});
+			else process.stderr.write(`app ratings: invalid id ${JSON.stringify(args.id)}\n`);
+			return exitAfterFlush(ExitCode.Usage);
+		}
+		const pageResult = parseNonNegativeInt(args.page, "page");
+		if ("error" in pageResult) {
+			if (args.json) emitJson({
+				ok: false,
+				reason: "invalid-config",
+				field: "page",
+				message: pageResult.error
+			});
+			else process.stderr.write(`app ratings: ${pageResult.error}\n`);
+			return exitAfterFlush(ExitCode.Usage);
+		}
+		const sizeResult = parseNonNegativeInt(args.size, "size");
+		if ("error" in sizeResult) {
+			if (args.json) emitJson({
+				ok: false,
+				reason: "invalid-config",
+				field: "size",
+				message: sizeResult.error
+			});
+			else process.stderr.write(`app ratings: ${sizeResult.error}\n`);
+			return exitAfterFlush(ExitCode.Usage);
+		}
+		if (sizeResult.value === 0) {
+			if (args.json) emitJson({
+				ok: false,
+				reason: "invalid-config",
+				field: "size",
+				message: "--size must be at least 1"
+			});
+			else process.stderr.write("app ratings: --size must be at least 1\n");
+			return exitAfterFlush(ExitCode.Usage);
+		}
+		const sortField = args["sort-field"];
+		if (!VALID_SORT_FIELDS.includes(sortField)) {
+			if (args.json) emitJson({
+				ok: false,
+				reason: "invalid-config",
+				field: "sort-field",
+				message: `--sort-field must be one of ${VALID_SORT_FIELDS.join("|")} (got ${JSON.stringify(sortField)})`
+			});
+			else process.stderr.write(`app ratings: invalid --sort-field ${JSON.stringify(sortField)}\n`);
+			return exitAfterFlush(ExitCode.Usage);
+		}
+		const sortDirection = args["sort-direction"];
+		if (!VALID_SORT_DIRECTIONS.includes(sortDirection)) {
+			if (args.json) emitJson({
+				ok: false,
+				reason: "invalid-config",
+				field: "sort-direction",
+				message: `--sort-direction must be one of ${VALID_SORT_DIRECTIONS.join("|")} (got ${JSON.stringify(sortDirection)})`
+			});
+			else process.stderr.write(`app ratings: invalid --sort-direction ${JSON.stringify(sortDirection)}\n`);
+			return exitAfterFlush(ExitCode.Usage);
+		}
+		const ctx = await resolveWorkspaceContext(args);
+		if (!ctx) return;
+		const { session, workspaceId } = ctx;
+		try {
+			const result = await fetchMiniAppRatings({
+				workspaceId,
+				miniAppId: appId,
+				page: pageResult.value,
+				size: sizeResult.value,
+				sortField,
+				sortDirection
+			}, session.cookies);
+			if (args.json) {
+				emitJson({
+					ok: true,
+					workspaceId,
+					appId,
+					page: pageResult.value,
+					size: sizeResult.value,
+					sortField,
+					sortDirection,
+					averageRating: result.averageRating,
+					totalReviewCount: result.totalReviewCount,
+					paging: result.paging,
+					ratings: result.ratings
+				});
+				return exitAfterFlush(ExitCode.Ok);
+			}
+			process.stdout.write(`App ${appId} (ws ${workspaceId}): ${result.totalReviewCount} review(s), avg ${result.averageRating.toFixed(2)}\n`);
+			if (result.ratings.length === 0) {
+				process.stdout.write("No ratings on this page.\n");
+				return exitAfterFlush(ExitCode.Ok);
+			}
+			for (const r of result.ratings) {
+				const score = typeof r.score === "number" ? r.score : r.rating ?? "-";
+				const author = typeof r.nickname === "string" ? r.nickname : typeof r.userName === "string" ? r.userName : "(anon)";
+				const text = typeof r.content === "string" ? r.content : typeof r.reviewContent === "string" ? r.reviewContent : "";
+				const createdAt = typeof r.createdAt === "string" ? r.createdAt : typeof r.reviewedAt === "string" ? r.reviewedAt : "";
+				process.stdout.write(`${score}\t${createdAt}\t${author}\t${text}\n`);
+			}
+			if (result.paging.hasNext) process.stdout.write(`(more: --page ${pageResult.value + 1} for next ${sizeResult.value})\n`);
+			return exitAfterFlush(ExitCode.Ok);
+		} catch (err) {
+			return emitFailureFromError(args.json, err);
+		}
+	}
+});
+const reportsCommand = defineCommand({
+	meta: {
+		name: "reports",
+		description: "List user-submitted reports (신고 내역) for a mini-app."
+	},
+	args: {
+		id: {
+			type: "positional",
+			description: "Mini-app ID.",
+			required: true
+		},
+		workspace: {
+			type: "string",
+			description: "Workspace ID. Defaults to the selected workspace."
+		},
+		"page-size": {
+			type: "string",
+			description: "Page size (default 20).",
+			default: "20"
+		},
+		cursor: {
+			type: "string",
+			description: "Opaque cursor from a previous response `nextCursor`."
+		},
+		json: {
+			type: "boolean",
+			description: "Emit machine-readable JSON.",
+			default: false
+		}
+	},
+	async run({ args }) {
+		const appId = parseAppId(args.id);
+		if (appId === null) {
+			if (args.json) emitJson({
+				ok: false,
+				reason: "invalid-id",
+				message: `app id must be a positive integer (got ${JSON.stringify(args.id)})`
+			});
+			else process.stderr.write(`app reports: invalid id ${JSON.stringify(args.id)}\n`);
+			return exitAfterFlush(ExitCode.Usage);
+		}
+		const pageSizeResult = parseNonNegativeInt(args["page-size"], "page-size");
+		if ("error" in pageSizeResult) {
+			if (args.json) emitJson({
+				ok: false,
+				reason: "invalid-config",
+				field: "page-size",
+				message: pageSizeResult.error
+			});
+			else process.stderr.write(`app reports: ${pageSizeResult.error}\n`);
+			return exitAfterFlush(ExitCode.Usage);
+		}
+		if (pageSizeResult.value === 0) {
+			if (args.json) emitJson({
+				ok: false,
+				reason: "invalid-config",
+				field: "page-size",
+				message: "--page-size must be at least 1"
+			});
+			else process.stderr.write("app reports: --page-size must be at least 1\n");
+			return exitAfterFlush(ExitCode.Usage);
+		}
+		const ctx = await resolveWorkspaceContext(args);
+		if (!ctx) return;
+		const { session, workspaceId } = ctx;
+		try {
+			const result = await fetchUserReports({
+				workspaceId,
+				miniAppId: appId,
+				pageSize: pageSizeResult.value,
+				...typeof args.cursor === "string" && args.cursor.length > 0 ? { cursor: args.cursor } : {}
+			}, session.cookies);
+			if (args.json) {
+				emitJson({
+					ok: true,
+					workspaceId,
+					appId,
+					pageSize: pageSizeResult.value,
+					cursor: args.cursor ?? null,
+					nextCursor: result.nextCursor,
+					hasMore: result.hasMore,
+					reports: result.reports
+				});
+				return exitAfterFlush(ExitCode.Ok);
+			}
+			process.stdout.write(`App ${appId} (ws ${workspaceId}): ${result.reports.length} report(s) on this page\n`);
+			if (result.reports.length === 0) {
+				process.stdout.write("No reports.\n");
+				return exitAfterFlush(ExitCode.Ok);
+			}
+			for (const r of result.reports) {
+				const id = typeof r.id === "string" || typeof r.id === "number" ? r.id : "-";
+				const reason = typeof r.reason === "string" ? r.reason : r.reportType ?? "-";
+				const text = typeof r.content === "string" ? r.content : typeof r.detail === "string" ? r.detail : "";
+				const createdAt = typeof r.createdAt === "string" ? r.createdAt : typeof r.reportedAt === "string" ? r.reportedAt : "";
+				process.stdout.write(`${id}\t${createdAt}\t${reason}\t${text}\n`);
+			}
+			if (result.hasMore && result.nextCursor) process.stdout.write(`(more: --cursor ${result.nextCursor})\n`);
+			return exitAfterFlush(ExitCode.Ok);
+		} catch (err) {
+			return emitFailureFromError(args.json, err);
+		}
+	}
+});
+const bundlesCommand = defineCommand({
+	meta: {
+		name: "bundles",
+		description: "Inspect upload bundles for a mini-app."
+	},
+	subCommands: {
+		ls: defineCommand({
+			meta: {
+				name: "ls",
+				description: "List upload bundles for a mini-app (page-based pagination)."
+			},
+			args: {
+				id: {
+					type: "positional",
+					description: "Mini-app ID.",
+					required: true
+				},
+				workspace: {
+					type: "string",
+					description: "Workspace ID. Defaults to the selected workspace."
+				},
+				page: {
+					type: "string",
+					description: "Page number (0-indexed).",
+					default: "0"
+				},
+				tested: {
+					type: "string",
+					description: "Filter: `true` to show only tested bundles (or `false`)."
+				},
+				"deploy-status": {
+					type: "string",
+					description: "Filter by deploy status (e.g. DEPLOYED)."
+				},
+				json: {
+					type: "boolean",
+					description: "Emit machine-readable JSON.",
+					default: false
+				}
+			},
+			async run({ args }) {
+				const appId = parseAppId(args.id);
+				if (appId === null) {
+					if (args.json) emitJson({
+						ok: false,
+						reason: "invalid-id",
+						message: `app id must be a positive integer (got ${JSON.stringify(args.id)})`
+					});
+					else process.stderr.write(`app bundles ls: invalid id ${JSON.stringify(args.id)}\n`);
+					return exitAfterFlush(ExitCode.Usage);
+				}
+				const pageResult = parseNonNegativeInt(args.page, "page");
+				if ("error" in pageResult) {
+					if (args.json) emitJson({
+						ok: false,
+						reason: "invalid-config",
+						field: "page",
+						message: pageResult.error
+					});
+					else process.stderr.write(`app bundles ls: ${pageResult.error}\n`);
+					return exitAfterFlush(ExitCode.Usage);
+				}
+				let tested;
+				if (args.tested !== void 0) if (args.tested === "true") tested = true;
+				else if (args.tested === "false") tested = false;
+				else {
+					if (args.json) emitJson({
+						ok: false,
+						reason: "invalid-config",
+						field: "tested",
+						message: `--tested must be "true" or "false" (got ${JSON.stringify(args.tested)})`
+					});
+					else process.stderr.write(`app bundles ls: invalid --tested ${JSON.stringify(args.tested)}\n`);
+					return exitAfterFlush(ExitCode.Usage);
+				}
+				const ctx = await resolveWorkspaceContext(args);
+				if (!ctx) return;
+				const { session, workspaceId } = ctx;
+				try {
+					const result = await fetchBundles({
+						workspaceId,
+						miniAppId: appId,
+						page: pageResult.value,
+						...tested !== void 0 ? { tested } : {},
+						...typeof args["deploy-status"] === "string" && args["deploy-status"].length > 0 ? { deployStatus: args["deploy-status"] } : {}
+					}, session.cookies);
+					if (args.json) {
+						emitJson({
+							ok: true,
+							workspaceId,
+							appId,
+							page: pageResult.value,
+							totalPage: result.totalPage,
+							currentPage: result.currentPage,
+							bundles: result.contents
+						});
+						return exitAfterFlush(ExitCode.Ok);
+					}
+					process.stdout.write(`App ${appId} (ws ${workspaceId}): page ${result.currentPage + 1}/${Math.max(result.totalPage, 1)}, ${result.contents.length} bundle(s)\n`);
+					if (result.contents.length === 0) {
+						process.stdout.write("No bundles on this page.\n");
+						return exitAfterFlush(ExitCode.Ok);
+					}
+					for (const b of result.contents) {
+						const id = typeof b.id === "string" || typeof b.id === "number" ? b.id : "-";
+						const version = typeof b.version === "string" ? b.version : "-";
+						const status = typeof b.deployStatus === "string" ? b.deployStatus : "-";
+						const createdAt = typeof b.createdAt === "string" ? b.createdAt : "";
+						process.stdout.write(`${id}\t${version}\t${status}\t${createdAt}\n`);
+					}
+					if (result.currentPage + 1 < result.totalPage) process.stdout.write(`(more: --page ${result.currentPage + 1})\n`);
+					return exitAfterFlush(ExitCode.Ok);
+				} catch (err) {
+					return emitFailureFromError(args.json, err);
+				}
+			}
+		}),
+		deployed: defineCommand({
+			meta: {
+				name: "deployed",
+				description: "Show the currently deployed bundle for a mini-app (or null if none)."
+			},
+			args: {
+				id: {
+					type: "positional",
+					description: "Mini-app ID.",
+					required: true
+				},
+				workspace: {
+					type: "string",
+					description: "Workspace ID. Defaults to the selected workspace."
+				},
+				json: {
+					type: "boolean",
+					description: "Emit machine-readable JSON.",
+					default: false
+				}
+			},
+			async run({ args }) {
+				const appId = parseAppId(args.id);
+				if (appId === null) {
+					if (args.json) emitJson({
+						ok: false,
+						reason: "invalid-id",
+						message: `app id must be a positive integer (got ${JSON.stringify(args.id)})`
+					});
+					else process.stderr.write(`app bundles deployed: invalid id ${JSON.stringify(args.id)}\n`);
+					return exitAfterFlush(ExitCode.Usage);
+				}
+				const ctx = await resolveWorkspaceContext(args);
+				if (!ctx) return;
+				const { session, workspaceId } = ctx;
+				try {
+					const bundle = await fetchDeployedBundle(workspaceId, appId, session.cookies);
+					if (args.json) {
+						emitJson({
+							ok: true,
+							workspaceId,
+							appId,
+							bundle
+						});
+						return exitAfterFlush(ExitCode.Ok);
+					}
+					if (bundle === null) {
+						process.stdout.write(`App ${appId} (ws ${workspaceId}): no deployed bundle\n`);
+						return exitAfterFlush(ExitCode.Ok);
+					}
+					const id = typeof bundle.id === "string" || typeof bundle.id === "number" ? bundle.id : "-";
+					const version = typeof bundle.version === "string" ? bundle.version : "-";
+					const status = typeof bundle.deployStatus === "string" ? bundle.deployStatus : "-";
+					const deployedAt = typeof bundle.deployedAt === "string" ? bundle.deployedAt : "";
+					process.stdout.write(`App ${appId} deployed bundle:\n`);
+					process.stdout.write(`  id          ${id}\n`);
+					process.stdout.write(`  version     ${version}\n`);
+					process.stdout.write(`  status      ${status}\n`);
+					process.stdout.write(`  deployedAt  ${deployedAt}\n`);
+					return exitAfterFlush(ExitCode.Ok);
+				} catch (err) {
+					return emitFailureFromError(args.json, err);
+				}
+			}
+		})
+	}
+});
+const certsCommand = defineCommand({
+	meta: {
+		name: "certs",
+		description: "Inspect mTLS certificates for a mini-app."
+	},
+	subCommands: { ls: defineCommand({
+		meta: {
+			name: "ls",
+			description: "List mTLS certificates issued for a mini-app."
+		},
+		args: {
+			id: {
+				type: "positional",
+				description: "Mini-app ID.",
+				required: true
+			},
+			workspace: {
+				type: "string",
+				description: "Workspace ID. Defaults to the selected workspace."
+			},
+			json: {
+				type: "boolean",
+				description: "Emit machine-readable JSON.",
+				default: false
+			}
+		},
+		async run({ args }) {
+			const appId = parseAppId(args.id);
+			if (appId === null) {
+				if (args.json) emitJson({
+					ok: false,
+					reason: "invalid-id",
+					message: `app id must be a positive integer (got ${JSON.stringify(args.id)})`
+				});
+				else process.stderr.write(`app certs ls: invalid id ${JSON.stringify(args.id)}\n`);
+				return exitAfterFlush(ExitCode.Usage);
+			}
+			const ctx = await resolveWorkspaceContext(args);
+			if (!ctx) return;
+			const { session, workspaceId } = ctx;
+			try {
+				const certs = await fetchCerts(workspaceId, appId, session.cookies);
+				if (args.json) {
+					emitJson({
+						ok: true,
+						workspaceId,
+						appId,
+						certs
+					});
+					return exitAfterFlush(ExitCode.Ok);
+				}
+				if (certs.length === 0) {
+					process.stdout.write(`App ${appId} (ws ${workspaceId}): no mTLS certs\n`);
+					return exitAfterFlush(ExitCode.Ok);
+				}
+				process.stdout.write(`App ${appId} (ws ${workspaceId}): ${certs.length} cert(s)\n`);
+				for (const c of certs) {
+					const id = typeof c.id === "string" || typeof c.id === "number" ? c.id : typeof c.certId === "string" || typeof c.certId === "number" ? c.certId : "-";
+					const cn = typeof c.commonName === "string" ? c.commonName : "-";
+					const createdAt = typeof c.createdAt === "string" ? c.createdAt : "";
+					const expiresAt = typeof c.expiresAt === "string" ? c.expiresAt : typeof c.validUntil === "string" ? c.validUntil : "";
+					process.stdout.write(`${id}\t${cn}\t${createdAt}\t${expiresAt}\n`);
+				}
+				return exitAfterFlush(ExitCode.Ok);
+			} catch (err) {
+				return emitFailureFromError(args.json, err);
+			}
+		}
+	}) }
+});
+const VALID_TIME_UNITS = [
+	"DAY",
+	"WEEK",
+	"MONTH"
+];
+function parseIsoDate(raw, field) {
+	if (!/^\d{4}-\d{2}-\d{2}$/.test(raw)) return { error: `--${field} must be YYYY-MM-DD (got ${JSON.stringify(raw)})` };
+	const d = /* @__PURE__ */ new Date(`${raw}T00:00:00Z`);
+	if (Number.isNaN(d.getTime())) return { error: `--${field} is not a valid date (got ${JSON.stringify(raw)})` };
+	return { value: raw };
+}
+function todayLocalIso() {
+	const d = /* @__PURE__ */ new Date();
+	return `${d.getFullYear()}-${String(d.getMonth() + 1).padStart(2, "0")}-${String(d.getDate()).padStart(2, "0")}`;
+}
+function daysAgoLocalIso(days) {
+	const d = /* @__PURE__ */ new Date();
+	d.setDate(d.getDate() - days);
+	return `${d.getFullYear()}-${String(d.getMonth() + 1).padStart(2, "0")}-${String(d.getDate()).padStart(2, "0")}`;
+}
+const appCommand = defineCommand({
+	meta: {
+		name: "app",
+		description: "Inspect mini-apps in a workspace."
+	},
+	subCommands: {
+		ls: lsCommand$4,
+		show: showCommand$2,
+		status: statusCommand,
+		ratings: ratingsCommand,
+		reports: reportsCommand,
+		bundles: bundlesCommand,
+		certs: certsCommand,
+		metrics: defineCommand({
+			meta: {
+				name: "metrics",
+				description: "Show conversion metrics for a mini-app over a date range."
+			},
+			args: {
+				id: {
+					type: "positional",
+					description: "Mini-app ID.",
+					required: true
+				},
+				workspace: {
+					type: "string",
+					description: "Workspace ID. Defaults to the selected workspace."
+				},
+				"time-unit": {
+					type: "string",
+					description: "Bucket size: DAY | WEEK | MONTH.",
+					default: "DAY"
+				},
+				start: {
+					type: "string",
+					description: "Start date (YYYY-MM-DD). Defaults to 30 days before --end."
+				},
+				end: {
+					type: "string",
+					description: "End date (YYYY-MM-DD). Defaults to today (host local)."
+				},
+				refresh: {
+					type: "boolean",
+					description: "Bypass server-side cache.",
+					default: false
+				},
+				json: {
+					type: "boolean",
+					description: "Emit machine-readable JSON.",
+					default: false
+				}
+			},
+			async run({ args }) {
+				const appId = parseAppId(args.id);
+				if (appId === null) {
+					if (args.json) emitJson({
+						ok: false,
+						reason: "invalid-id",
+						message: `app id must be a positive integer (got ${JSON.stringify(args.id)})`
+					});
+					else process.stderr.write(`app metrics: invalid id ${JSON.stringify(args.id)}\n`);
+					return exitAfterFlush(ExitCode.Usage);
+				}
+				const timeUnit = String(args["time-unit"]).toUpperCase();
+				if (!VALID_TIME_UNITS.includes(timeUnit)) {
+					const message = `--time-unit must be one of ${VALID_TIME_UNITS.join("|")} (got ${JSON.stringify(args["time-unit"])})`;
+					if (args.json) emitJson({
+						ok: false,
+						reason: "invalid-time-unit",
+						message
+					});
+					else process.stderr.write(`${message}\n`);
+					return exitAfterFlush(ExitCode.Usage);
+				}
+				const endResult = parseIsoDate(args.end ? String(args.end) : todayLocalIso(), "end");
+				if ("error" in endResult) {
+					if (args.json) emitJson({
+						ok: false,
+						reason: "invalid-date",
+						message: endResult.error
+					});
+					else process.stderr.write(`${endResult.error}\n`);
+					return exitAfterFlush(ExitCode.Usage);
+				}
+				const startResult = parseIsoDate(args.start ? String(args.start) : daysAgoLocalIso(30), "start");
+				if ("error" in startResult) {
+					if (args.json) emitJson({
+						ok: false,
+						reason: "invalid-date",
+						message: startResult.error
+					});
+					else process.stderr.write(`${startResult.error}\n`);
+					return exitAfterFlush(ExitCode.Usage);
+				}
+				if (startResult.value > endResult.value) {
+					const message = `--start (${startResult.value}) must be on or before --end (${endResult.value})`;
+					if (args.json) emitJson({
+						ok: false,
+						reason: "invalid-date",
+						message
+					});
+					else process.stderr.write(`${message}\n`);
+					return exitAfterFlush(ExitCode.Usage);
+				}
+				const ctx = await resolveWorkspaceContext(args);
+				if (!ctx) return;
+				const { session, workspaceId } = ctx;
+				try {
+					const result = await fetchConversionMetrics({
+						workspaceId,
+						miniAppId: appId,
+						timeUnitType: timeUnit,
+						startDate: startResult.value,
+						endDate: endResult.value,
+						refresh: args.refresh
+					}, session.cookies);
+					if (args.json) {
+						emitJson({
+							ok: true,
+							workspaceId,
+							appId,
+							timeUnitType: timeUnit,
+							startDate: startResult.value,
+							endDate: endResult.value,
+							...result.cacheTime !== void 0 ? { cacheTime: result.cacheTime } : {},
+							metrics: result.metrics
+						});
+						return exitAfterFlush(ExitCode.Ok);
+					}
+					const header = `App ${appId} (ws ${workspaceId}) · ${timeUnit} · ${startResult.value} → ${endResult.value}`;
+					if (result.metrics.length === 0) {
+						process.stdout.write(`${header}: no metrics\n`);
+						return exitAfterFlush(ExitCode.Ok);
+					}
+					process.stdout.write(`${header}: ${result.metrics.length} bucket(s)\n`);
+					for (const m of result.metrics) {
+						const date = typeof m.date === "string" ? m.date : typeof m.bucketDate === "string" ? m.bucketDate : "";
+						const impressions = typeof m.impressions === "number" ? m.impressions : typeof m.impressionCount === "number" ? m.impressionCount : "";
+						const clicks = typeof m.clicks === "number" ? m.clicks : typeof m.clickCount === "number" ? m.clickCount : "";
+						process.stdout.write(`${date}\t${impressions}\t${clicks}\n`);
+					}
+					return exitAfterFlush(ExitCode.Ok);
+				} catch (err) {
+					return emitFailureFromError(args.json, err);
+				}
+			}
+		}),
+		"share-rewards": defineCommand({
+			meta: {
+				name: "share-rewards",
+				description: "Inspect share-reward promotions for a mini-app."
+			},
+			subCommands: { ls: defineCommand({
+				meta: {
+					name: "ls",
+					description: "List share-reward promotions configured for a mini-app."
+				},
+				args: {
+					id: {
+						type: "positional",
+						description: "Mini-app ID.",
+						required: true
+					},
+					workspace: {
+						type: "string",
+						description: "Workspace ID. Defaults to the selected workspace."
+					},
+					search: {
+						type: "string",
+						description: "Filter by title (server-side title-contains match). Empty matches everything."
+					},
+					json: {
+						type: "boolean",
+						description: "Emit machine-readable JSON.",
+						default: false
+					}
+				},
+				async run({ args }) {
+					const appId = parseAppId(args.id);
+					if (appId === null) {
+						if (args.json) emitJson({
+							ok: false,
+							reason: "invalid-id",
+							message: `app id must be a positive integer (got ${JSON.stringify(args.id)})`
+						});
+						else process.stderr.write(`app share-rewards ls: invalid id ${JSON.stringify(args.id)}\n`);
+						return exitAfterFlush(ExitCode.Usage);
+					}
+					const ctx = await resolveWorkspaceContext(args);
+					if (!ctx) return;
+					const { session, workspaceId } = ctx;
+					try {
+						const rewards = await fetchShareRewards({
+							workspaceId,
+							miniAppId: appId,
+							...args.search !== void 0 ? { search: String(args.search) } : {}
+						}, session.cookies);
+						if (args.json) {
+							emitJson({
+								ok: true,
+								workspaceId,
+								appId,
+								rewards
+							});
+							return exitAfterFlush(ExitCode.Ok);
+						}
+						if (rewards.length === 0) {
+							process.stdout.write(`App ${appId} (ws ${workspaceId}): no share-reward promotions\n`);
+							return exitAfterFlush(ExitCode.Ok);
+						}
+						process.stdout.write(`App ${appId} (ws ${workspaceId}): ${rewards.length} share-reward(s)\n`);
+						for (const r of rewards) {
+							const id = typeof r.id === "string" || typeof r.id === "number" ? r.id : typeof r.rewardId === "string" || typeof r.rewardId === "number" ? r.rewardId : "-";
+							const title = typeof r.title === "string" ? r.title : typeof r.name === "string" ? r.name : "-";
+							const status = typeof r.status === "string" ? r.status : "-";
+							process.stdout.write(`${id}\t${title}\t${status}\n`);
+						}
+						return exitAfterFlush(ExitCode.Ok);
+					} catch (err) {
+						return emitFailureFromError(args.json, err);
+					}
+				}
+			}) }
+		}),
+		register: defineCommand({
+			meta: {
+				name: "register",
+				description: "Register a mini-app in the selected workspace from a YAML/JSON manifest. Uploads logo/thumbnail/screenshots, then submits the create payload."
+			},
+			args: {
+				workspace: {
+					type: "string",
+					description: "Workspace ID. Defaults to the selected workspace (`aitcc workspace use`)."
+				},
+				config: {
+					type: "string",
+					description: "Path to the app manifest. Defaults to `./aitcc.app.yaml`, then `./aitcc.app.json`."
+				},
+				"dry-run": {
+					type: "boolean",
+					description: "Validate manifest + images and print the inferred submit payload; no uploads.",
+					default: false
+				},
+				"accept-terms": {
+					type: "boolean",
+					description: "Attest to the required console legal-agreement checkboxes (see VALIDATION-RULES.md). Required for real submits.",
+					default: false
+				},
+				json: {
+					type: "boolean",
+					description: "Emit machine-readable JSON to stdout.",
+					default: false
+				}
+			},
+			async run({ args }) {
+				await runRegister({
+					json: args.json,
+					dryRun: args["dry-run"],
+					acceptTerms: args["accept-terms"],
+					...args.workspace !== void 0 ? { workspace: args.workspace } : {},
+					...args.config !== void 0 ? { config: args.config } : {}
+				});
+			}
+		})
+	}
+});
+//#endregion
+//#region src/api/api-keys.ts
+const BASE$2 = "https://apps-in-toss.toss.im/console/api-public/v3/appsintossconsole";
+async function fetchApiKeys(workspaceId, cookies, opts = {}) {
+	const raw = await requestConsoleApi({
+		url: `${BASE$2}/workspaces/${workspaceId}/api-keys`,
+		cookies,
+		...opts.fetchImpl ? { fetchImpl: opts.fetchImpl } : {}
+	});
+	if (!Array.isArray(raw)) throw new Error(`Unexpected api-keys shape for workspace=${workspaceId}: not an array`);
+	return raw.map((entry, index) => normalizeKey(entry, workspaceId, index));
+}
+function normalizeKey(raw, workspaceId, index) {
+	if (raw === null || typeof raw !== "object") throw new Error(`Unexpected api-key entry at index ${index} for workspace=${workspaceId}: not an object`);
+	const rec = raw;
+	const rawId = rec.id ?? rec.apiKeyId ?? rec.keyId;
+	if (typeof rawId !== "string" && typeof rawId !== "number") throw new Error(`Unexpected api-key entry at index ${index} for workspace=${workspaceId}: missing id`);
+	const rawName = rec.name ?? rec.apiKeyName ?? rec.keyName ?? rec.description;
+	const name = typeof rawName === "string" ? rawName : void 0;
+	const { id: _id, apiKeyId: _aid, keyId: _kid, name: _n, apiKeyName: _an, keyName: _kn, description: _d, ...extra } = rec;
+	return {
+		id: rawId,
+		name,
+		extra
+	};
+}
+const keysCommand = defineCommand({
+	meta: {
+		name: "keys",
+		description: "Inspect console API keys used for deploy automation."
+	},
+	subCommands: { ls: defineCommand({
+		meta: {
+			name: "ls",
+			description: "List console API keys in the selected workspace."
+		},
+		args: {
+			workspace: {
+				type: "string",
+				description: "Workspace ID. Defaults to the selected workspace (`aitcc workspace use`)."
+			},
+			json: {
+				type: "boolean",
+				description: "Emit machine-readable JSON to stdout.",
+				default: false
+			}
+		},
+		async run({ args }) {
+			const ctx = await resolveWorkspaceContext(args);
+			if (!ctx) return;
+			const { session, workspaceId } = ctx;
+			try {
 				const keys = await fetchApiKeys(workspaceId, session.cookies);
 				if (args.json) {
 					emitJson({
@@ -2034,10 +3055,10 @@ const logoutCommand = defineCommand({
 });
 //#endregion
 //#region src/api/members.ts
-const BASE = "https://apps-in-toss.toss.im/console/api-public/v3/appsintossconsole";
+const BASE$1 = "https://apps-in-toss.toss.im/console/api-public/v3/appsintossconsole";
 async function fetchWorkspaceMembers(workspaceId, cookies, opts = {}) {
 	const raw = await requestConsoleApi({
-		url: `${BASE}/workspaces/${workspaceId}/members`,
+		url: `${BASE$1}/workspaces/${workspaceId}/members`,
 		cookies,
 		...opts.fetchImpl ? { fetchImpl: opts.fetchImpl } : {}
 	});
@@ -2122,6 +3143,257 @@ const membersCommand = defineCommand({
 		}
 	}) }
 });
+const BASE = "https://api-public.toss.im/api-public/v3/ipd-thor/api/v1";
+async function fetchNotices(params, cookies, opts = {}) {
+	const qs = new URLSearchParams();
+	qs.set("page", String(params.page ?? 0));
+	qs.set("size", String(params.size ?? 20));
+	if (params.titleContains !== void 0) qs.set("title__icontains", params.titleContains);
+	const raw = await requestConsoleApi({
+		url: `${BASE}/workspaces/129/posts?${qs.toString()}`,
+		cookies,
+		...opts.fetchImpl ? { fetchImpl: opts.fetchImpl } : {}
+	});
+	if (raw === null || typeof raw !== "object") throw new Error("Unexpected notices shape: not an object");
+	const rec = raw;
+	const resultsRaw = rec.results;
+	if (!Array.isArray(resultsRaw)) throw new Error("Unexpected notices shape: results is not an array");
+	const results = resultsRaw.map((r) => {
+		if (r === null || typeof r !== "object") return {};
+		return r;
+	});
+	return {
+		page: typeof rec.page === "number" ? rec.page : 1,
+		pageSize: typeof rec.pageSize === "number" ? rec.pageSize : params.size ?? 20,
+		count: typeof rec.count === "number" ? rec.count : results.length,
+		next: typeof rec.next === "string" ? rec.next : null,
+		previous: typeof rec.previous === "string" ? rec.previous : null,
+		results
+	};
+}
+async function fetchNoticeCategories(cookies, opts = {}) {
+	const raw = await requestConsoleApi({
+		url: `${BASE}/workspaces/129/categories`,
+		cookies,
+		...opts.fetchImpl ? { fetchImpl: opts.fetchImpl } : {}
+	});
+	if (!Array.isArray(raw)) throw new Error("Unexpected categories shape: not an array");
+	return raw.map((c) => {
+		if (c === null || typeof c !== "object") return {};
+		return c;
+	});
+}
+async function fetchNoticePost(postId, cookies, opts = {}) {
+	const raw = await requestConsoleApi({
+		url: `${BASE}/workspaces/129/posts/${postId}`,
+		cookies,
+		...opts.fetchImpl ? { fetchImpl: opts.fetchImpl } : {}
+	});
+	if (raw === null || typeof raw !== "object" || Array.isArray(raw)) throw new Error(`Unexpected notice-post shape for id=${postId}`);
+	return raw;
+}
+//#endregion
+//#region src/commands/notices.ts
+function parsePositiveInt(raw, field) {
+	const n = Number(raw);
+	if (!Number.isFinite(n) || !Number.isInteger(n) || n < 0) return { error: `--${field} must be a non-negative integer (got ${JSON.stringify(raw)})` };
+	return { value: n };
+}
+const noticesCommand = defineCommand({
+	meta: {
+		name: "notices",
+		description: "Read Apps in Toss notices (공지사항). Shared across all users."
+	},
+	subCommands: {
+		ls: defineCommand({
+			meta: {
+				name: "ls",
+				description: "List notices (공지사항) from Apps in Toss."
+			},
+			args: {
+				page: {
+					type: "string",
+					description: "Page number (0-indexed).",
+					default: "0"
+				},
+				size: {
+					type: "string",
+					description: "Page size.",
+					default: "20"
+				},
+				search: {
+					type: "string",
+					description: "Filter by title substring (case-insensitive)."
+				},
+				json: {
+					type: "boolean",
+					description: "Emit machine-readable JSON.",
+					default: false
+				}
+			},
+			async run({ args }) {
+				const session = await requireSession(args.json);
+				if (!session) return;
+				const pageResult = parsePositiveInt(args.page, "page");
+				if ("error" in pageResult) {
+					if (args.json) emitJson({
+						ok: false,
+						reason: "invalid-config",
+						field: "page",
+						message: pageResult.error
+					});
+					else process.stderr.write(`notices ls: ${pageResult.error}\n`);
+					return exitAfterFlush(ExitCode.Usage);
+				}
+				const sizeResult = parsePositiveInt(args.size, "size");
+				if ("error" in sizeResult) {
+					if (args.json) emitJson({
+						ok: false,
+						reason: "invalid-config",
+						field: "size",
+						message: sizeResult.error
+					});
+					else process.stderr.write(`notices ls: ${sizeResult.error}\n`);
+					return exitAfterFlush(ExitCode.Usage);
+				}
+				if (sizeResult.value === 0) {
+					if (args.json) emitJson({
+						ok: false,
+						reason: "invalid-config",
+						field: "size",
+						message: "--size must be at least 1"
+					});
+					else process.stderr.write("notices ls: --size must be at least 1\n");
+					return exitAfterFlush(ExitCode.Usage);
+				}
+				try {
+					const result = await fetchNotices({
+						page: pageResult.value,
+						size: sizeResult.value,
+						...typeof args.search === "string" && args.search.length > 0 ? { titleContains: args.search } : {}
+					}, session.cookies);
+					if (args.json) {
+						emitJson({
+							ok: true,
+							page: result.page,
+							pageSize: result.pageSize,
+							count: result.count,
+							hasNext: result.next !== null,
+							notices: result.results
+						});
+						return exitAfterFlush(ExitCode.Ok);
+					}
+					process.stdout.write(`Notices: page ${result.page}, ${result.results.length}/${result.count} shown\n`);
+					if (result.results.length === 0) {
+						process.stdout.write("No notices on this page.\n");
+						return exitAfterFlush(ExitCode.Ok);
+					}
+					for (const n of result.results) {
+						const id = typeof n.id === "string" || typeof n.id === "number" ? n.id : "-";
+						const category = typeof n.category === "string" ? n.category : "-";
+						const title = typeof n.title === "string" ? n.title : "";
+						const publishedTime = typeof n.publishedTime === "string" ? n.publishedTime : "";
+						process.stdout.write(`${id}\t${publishedTime}\t[${category}]\t${title}\n`);
+					}
+					if (result.next !== null) process.stdout.write(`(more: --page ${result.page + 1})\n`);
+					return exitAfterFlush(ExitCode.Ok);
+				} catch (err) {
+					return emitFailureFromError(args.json, err);
+				}
+			}
+		}),
+		show: defineCommand({
+			meta: {
+				name: "show",
+				description: "Show a single notice post by ID."
+			},
+			args: {
+				id: {
+					type: "positional",
+					description: "Notice post ID.",
+					required: true
+				},
+				json: {
+					type: "boolean",
+					description: "Emit machine-readable JSON.",
+					default: false
+				}
+			},
+			async run({ args }) {
+				const postId = Number(args.id);
+				if (!Number.isFinite(postId) || !Number.isInteger(postId) || postId <= 0) {
+					if (args.json) emitJson({
+						ok: false,
+						reason: "invalid-id",
+						message: `notice id must be a positive integer (got ${JSON.stringify(args.id)})`
+					});
+					else process.stderr.write(`notices show: invalid id ${JSON.stringify(args.id)}\n`);
+					return exitAfterFlush(ExitCode.Usage);
+				}
+				const session = await requireSession(args.json);
+				if (!session) return;
+				try {
+					const notice = await fetchNoticePost(postId, session.cookies);
+					if (args.json) {
+						emitJson({
+							ok: true,
+							id: postId,
+							notice
+						});
+						return exitAfterFlush(ExitCode.Ok);
+					}
+					const title = typeof notice.title === "string" ? notice.title : "";
+					const subtitle = typeof notice.subtitle === "string" ? notice.subtitle : "";
+					const category = typeof notice.category === "string" ? notice.category : "";
+					const publishedTime = typeof notice.publishedTime === "string" ? notice.publishedTime : "";
+					const body = typeof notice.fullDescription === "string" ? notice.fullDescription : typeof notice.shortDescription === "string" ? notice.shortDescription : "";
+					process.stdout.write(`# ${title}\n`);
+					if (subtitle) process.stdout.write(`${subtitle}\n`);
+					process.stdout.write(`\n[${category}] ${publishedTime}\n\n`);
+					process.stdout.write(body);
+					if (!body.endsWith("\n")) process.stdout.write("\n");
+					return exitAfterFlush(ExitCode.Ok);
+				} catch (err) {
+					return emitFailureFromError(args.json, err);
+				}
+			}
+		}),
+		categories: defineCommand({
+			meta: {
+				name: "categories",
+				description: "List notice categories and their post counts."
+			},
+			args: { json: {
+				type: "boolean",
+				description: "Emit machine-readable JSON.",
+				default: false
+			} },
+			async run({ args }) {
+				const session = await requireSession(args.json);
+				if (!session) return;
+				try {
+					const categories = await fetchNoticeCategories(session.cookies);
+					if (args.json) {
+						emitJson({
+							ok: true,
+							categories
+						});
+						return exitAfterFlush(ExitCode.Ok);
+					}
+					for (const c of categories) {
+						const id = typeof c.id === "string" || typeof c.id === "number" ? c.id : "-";
+						const name = typeof c.name === "string" ? c.name : "-";
+						const postCount = typeof c.postCount === "number" ? c.postCount : 0;
+						process.stdout.write(`${id}\t${postCount}\t${name}\n`);
+					}
+					return exitAfterFlush(ExitCode.Ok);
+				} catch (err) {
+					return emitFailureFromError(args.json, err);
+				}
+			}
+		})
+	}
+});
 //#endregion
 //#region src/github.ts
 const REPO_OWNER = "apps-in-toss-community";
@@ -2235,7 +3507,7 @@ function resolveVersion() {
 		if (typeof injected === "string" && injected.length > 0) return injected;
 	} catch {}
 	try {
-		return "0.1.9";
+		return "0.1.11";
 	} catch {}
 	return "0.0.0-dev";
 }
@@ -2692,7 +3964,7 @@ const workspaceCommand = defineCommand({
 			},
 			async run({ args }) {
 				const raw = String(args.id);
-				const parsed = parsePositiveInt(raw);
+				const parsed = parsePositiveInt$1(raw);
 				if (parsed === null) {
 					const message = `workspace id must be a positive integer (got ${raw})`;
 					if (args.json) emitJson({
@@ -2760,7 +4032,7 @@ const workspaceCommand = defineCommand({
 				let workspaceId;
 				if (args.workspace) {
 					const raw = String(args.workspace);
-					const parsed = parsePositiveInt(raw);
+					const parsed = parsePositiveInt$1(raw);
 					if (parsed === null) {
 						const message = `--workspace must be a positive integer (got ${raw})`;
 						if (args.json) emitJson({
@@ -2818,7 +4090,8 @@ runMain(defineCommand({
 		workspace: workspaceCommand,
 		app: appCommand,
 		members: membersCommand,
-		keys: keysCommand
+		keys: keysCommand,
+		notices: noticesCommand
 	}
 }));
 //#endregion