aipctl 2026.6.10 → 2026.6.12

package/build/index.cjs

@@ -89663,6 +89663,146 @@ const runMain = runMain$1;
 ({
   ...CommitPrototype$1});
 
+const BUILD_ENVS = ["local", "dev", "stage", "prod", "test"];
+const isBuildEnv = (value) => BUILD_ENVS.includes(value);
+
+const injectedBuildEnv = "stage".length > 0 ? "stage" : "local";
+if (!isBuildEnv(injectedBuildEnv)) {
+  throw new Error(`Invalid AIPCTL_BUILD_ENV: ${injectedBuildEnv}`);
+}
+const VERSION = "2026.6.12".length > 0 ? "2026.6.12" : "0.0.0";
+const BUILD_ENV = injectedBuildEnv;
+const INCLUDE_NATIVE_LOGS = BUILD_ENV !== "prod";
+
+const loadBinaryModule = () => {
+  const require$1 = node_module.createRequire((typeof document === 'undefined' ? require('u' + 'rl').pathToFileURL(__filename).href : (_documentCurrentScript && _documentCurrentScript.tagName.toUpperCase() === 'SCRIPT' && _documentCurrentScript.src || new URL('index.cjs', document.baseURI).href)));
+  return require$1(["..", "binary.cjs"].join("/"));
+};
+const resolveNativeBinary = (options = {}) => {
+  const env = options.env ?? process.env;
+  if (env.AIPCTL_NATIVE_BINARY && env.AIPCTL_NATIVE_BINARY.length > 0) {
+    return env.AIPCTL_NATIVE_BINARY;
+  }
+  const binary = (options.loadBinaryModule ?? loadBinaryModule)();
+  return binary.resolveBinaryPath(options.platform ?? process.platform, options.arch ?? process.arch);
+};
+const runNativeCommand = (args, options = {}) => new Promise((resolve) => {
+  const env = options.env ?? process.env;
+  const spawn = options.spawn ?? childProcess.spawn;
+  const binaryPath = resolveNativeBinary(options);
+  const child = spawn(binaryPath, [...args], {
+    stdio: "inherit",
+    env
+  });
+  child.on("error", (error) => {
+    console.error(`Failed to start native command: ${error.message}`);
+    process.exitCode = 1;
+    resolve();
+  });
+  child.on("exit", (code) => {
+    process.exitCode = code ?? 1;
+    resolve();
+  });
+});
+
+const restArgs = text$2({ name: "arg" }).pipe(
+  repeated,
+  withDescription$5("Arguments passed through to the native aipctl command")
+);
+const makeNativeCommand = (name, description) => make$4(
+  name,
+  { rest: restArgs },
+  ({ rest }) => promise$1(() => runNativeCommand([name, ...rest]))
+).pipe(withDescription(description));
+
+const nativeCommandDefinitions = [
+  { name: "install", description: "Install an MCP preset into a local client", includeInProd: true },
+  { name: "run", description: "Run the native MCP server", includeInProd: true },
+  { name: "tunnel", description: "Manage Edge Tunnel connections", includeInProd: true },
+  { name: "logs", description: "Inspect native MCP CLI logs", includeInProd: false }
+];
+const nativeCommandNames = nativeCommandDefinitions.map(({ name }) => name);
+const isEnabledNativeCommand = (definition, includeLogs) => definition.includeInProd || includeLogs;
+const nativeSubcommands = nativeCommandDefinitions.filter((definition) => isEnabledNativeCommand(definition, INCLUDE_NATIVE_LOGS)).map(({ name, description }) => makeNativeCommand(name, description));
+const isNativeCommandEnabled = (command, includeLogs = INCLUDE_NATIVE_LOGS) => {
+  const definition = nativeCommandDefinitions.find(({ name }) => name === command);
+  return definition ? isEnabledNativeCommand(definition, includeLogs) : false;
+};
+
+const FORCED_ARGS_SEPARATOR = "--";
+const NATIVE_ROOT_COMMANDS = new Set(nativeCommandNames);
+const trailingOptionSpecs = [
+  {
+    command: ["drive", "delete"],
+    booleanOptions: /* @__PURE__ */ new Set(["--force", "-f"]),
+    valueOptions: /* @__PURE__ */ new Set(["--org"])
+  },
+  {
+    command: ["automation", "history"],
+    booleanOptions: /* @__PURE__ */ new Set(),
+    valueOptions: /* @__PURE__ */ new Set(["--page", "--org"])
+  },
+  {
+    command: ["automation", "triggers"],
+    booleanOptions: /* @__PURE__ */ new Set(),
+    valueOptions: /* @__PURE__ */ new Set(["--account-id", "--folder-id", "--service-type", "--org"])
+  },
+  {
+    command: ["admin", "skill", "github", "import"],
+    booleanOptions: /* @__PURE__ */ new Set(["--overwrite", "--json"]),
+    valueOptions: /* @__PURE__ */ new Set(["--org", "--pat-env"])
+  }
+];
+const getOptionName = (arg) => arg.split("=", 1)[0];
+const findTrailingOptionSpec = (args) => trailingOptionSpecs.find((spec) => spec.command.every((part, index) => args[index] === part));
+const isNativeRootCommand = (args) => NATIVE_ROOT_COMMANDS.has(args[0] ?? "");
+const isBooleanOption = (arg, spec) => spec.booleanOptions.has(arg);
+const isValueOption = (arg, spec) => spec.valueOptions.has(getOptionName(arg));
+const normalizeTrailingOptions = (args, spec) => {
+  const options = [];
+  const rest = [];
+  for (let index = 0; index < args.length; index += 1) {
+    const arg = args[index];
+    if (arg === void 0) {
+      continue;
+    }
+    if (isBooleanOption(arg, spec)) {
+      options.push(arg);
+      continue;
+    }
+    if (isValueOption(arg, spec)) {
+      options.push(arg);
+      const nextArg = args[index + 1];
+      if (!arg.includes("=") && nextArg !== void 0 && !nextArg.startsWith("-")) {
+        index += 1;
+        options.push(nextArg);
+      }
+      continue;
+    }
+    rest.push(arg);
+  }
+  return [...options, ...rest];
+};
+const normalizeAipArgs = (args) => {
+  if (isNativeRootCommand(args)) {
+    return [...args];
+  }
+  const forcedArgsIndex = args.indexOf(FORCED_ARGS_SEPARATOR);
+  const parsedArgs = forcedArgsIndex === -1 ? args : args.slice(0, forcedArgsIndex);
+  const forcedArgs = forcedArgsIndex === -1 ? [] : args.slice(forcedArgsIndex);
+  const spec = findTrailingOptionSpec(parsedArgs);
+  if (!spec) {
+    return [...args];
+  }
+  const commandPrefix = parsedArgs.slice(0, spec.command.length);
+  const suffix = parsedArgs.slice(spec.command.length);
+  return [
+    ...commandPrefix,
+    ...normalizeTrailingOptions(suffix, spec),
+    ...forcedArgs
+  ];
+};
+
 const NOT_LOGGED_IN_MESSAGE = 'Not logged in. Please run "aipctl auth login" first.';
 const SESSION_EXPIRED_MESSAGE = 'Session expired. Run "aipctl auth login" to continue.';
 
@@ -92674,6 +92814,16 @@ const SENSITIVE_KEY_QUALIFIERS = /* @__PURE__ */ new Set(["api", "access", "priv
 const SENSITIVE_CONTAINER_KEYS = /* @__PURE__ */ new Set(["auth", "credential", "credentials"]);
 const COMMAND_KEY = "command";
 const MASKED_COMMAND_KEY = "maskedcommand";
+const VALUE_KEY = "value";
+const SENSITIVE_DESCRIPTOR_KEYS = ["key", "name", "label"];
+const SENSITIVE_DESCRIPTOR_TYPE_SEGMENTS = /* @__PURE__ */ new Set([
+  "password",
+  "secret",
+  "token",
+  "credential",
+  "credentials"
+]);
+const DICTIONARY_DESCRIPTOR_TYPE = "dictionary";
 const SENSITIVE_QUERY_KEYS = /* @__PURE__ */ new Set([
   "token",
   "accesstoken",
@@ -92732,6 +92882,40 @@ function isFullyRedactedKey(key) {
 function isSensitiveContainerKey(key) {
   return SENSITIVE_CONTAINER_KEYS.has(normalizeKey(key));
 }
+function getStringRecordValue(record, key) {
+  const value = record[key];
+  return typeof value === "string" ? value : void 0;
+}
+function hasSensitiveTypeDescriptor(record) {
+  const type = getStringRecordValue(record, "type");
+  if (!type) {
+    return false;
+  }
+  const normalized = normalizeKey(type);
+  if (SENSITIVE_DESCRIPTOR_TYPE_SEGMENTS.has(normalized)) {
+    return true;
+  }
+  return getKeySegments(type).some((segment) => SENSITIVE_DESCRIPTOR_TYPE_SEGMENTS.has(segment));
+}
+function hasSensitiveNameDescriptor(record) {
+  return SENSITIVE_DESCRIPTOR_KEYS.some((key) => {
+    const descriptor = getStringRecordValue(record, key);
+    return descriptor ? isFullyRedactedKey(descriptor) : false;
+  });
+}
+function isSensitiveDescriptor(record) {
+  return hasSensitiveTypeDescriptor(record) || hasSensitiveNameDescriptor(record);
+}
+function isDictionaryDescriptor(record) {
+  return normalizeKey(getStringRecordValue(record, "type") ?? "") === DICTIONARY_DESCRIPTOR_TYPE;
+}
+function maskDictionaryString(value, options) {
+  try {
+    return JSON.stringify(maskSensitiveData(JSON.parse(value), options));
+  } catch {
+    return maskSensitiveText(value);
+  }
+}
 function isSensitiveQueryKey(key, preserveOAuthAuthorizeParams) {
   const normalized = normalizeKey(key);
   if (preserveOAuthAuthorizeParams && OAUTH_PRESERVED_QUERY_KEYS.has(normalized)) {
@@ -92837,6 +93021,14 @@ function maskSensitiveData(value, options = {}, context = {}) {
       masked[key] = record.maskedCommand;
       continue;
     }
+    if (normalizedKey === VALUE_KEY && isSensitiveDescriptor(record)) {
+      masked[key] = entry == null ? entry : REDACTED_VALUE;
+      continue;
+    }
+    if (normalizedKey === VALUE_KEY && typeof entry === "string" && isDictionaryDescriptor(record)) {
+      masked[key] = maskDictionaryString(entry, options);
+      continue;
+    }
     if (isFullyRedactedKey(key)) {
       if (entry !== null && typeof entry === "object") {
         masked[key] = maskSensitiveData(entry, options, {
@@ -93610,7 +93802,7 @@ const makeRequest = (baseUrl, path, accessToken, options) => tryPromise({
     if (!response.ok) {
       throw await toApiError(response);
     }
-    if (response.status === 202 || response.status === 204) {
+    if (options?.skipJsonParse || response.status === 202 || response.status === 204) {
       return void 0;
     }
     return await response.json();
@@ -94334,11 +94526,9 @@ const ApiServiceLive = effect$1(
         yield* requireChatBaseUrlEffect();
         const token = yield* getAccessToken();
         const params = new URLSearchParams();
-        params.set("pageSize", String(options?.pageSize ?? 25));
-        params.set("sortBy", "updatedAt");
-        params.set("sortDirection", "desc");
         if (options?.cursor) params.set("cursor", options.cursor);
-        const path = `/librechat/api/${encodeURIComponent(orgSlug)}/convos?${params.toString()}`;
+        const query = params.toString();
+        const path = `/librechat/api/${encodeURIComponent(orgSlug)}/convos${query ? `?${query}` : ""}`;
         return yield* makeRequest(chatBaseUrl, path, token);
       }),
       getConversation: (orgSlug, conversationId) => gen(function* () {
@@ -94378,7 +94568,7 @@ const ApiServiceLive = effect$1(
       exportInstalledAgent: (orgSlug, agentId) => gen(function* () {
         const resolvedApiBaseUrl = yield* requireApiBaseUrlEffect();
         const token = yield* getAccessToken();
-        const path = `/api/web/admin/organizations/slug/${encodeURIComponent(orgSlug)}/installed-agents/${encodeURIComponent(agentId)}/export`;
+        const path = `/web/admin/organizations/slug/${encodeURIComponent(orgSlug)}/installed-agents/${encodeURIComponent(agentId)}/export`;
         return yield* tryPromise({
           try: async () => {
             const response = await rateLimitedFetch(`${resolvedApiBaseUrl}${path}`, {
@@ -94557,7 +94747,7 @@ const ApiServiceLive = effect$1(
       deletePreset: (presetId) => gen(function* () {
         const token = yield* getAccessToken();
         const path = `/api/web/presets/${encodeURIComponent(presetId)}`;
-        return yield* makeRequest(baseUrl, path, token, { method: "DELETE" });
+        return yield* makeRequest(baseUrl, path, token, { method: "DELETE", skipJsonParse: true });
       }),
       setPresetAsDefault: (presetId) => gen(function* () {
         const token = yield* getAccessToken();
@@ -99707,72 +99897,6 @@ const skillCommand = make$4("skill", {}).pipe(
   withSubcommands(skillSubcommands)
 );
 
-const BUILD_ENVS = ["local", "dev", "qa", "stage", "prod", "test"];
-const isBuildEnv = (value) => BUILD_ENVS.includes(value);
-
-const injectedBuildEnv = "dev".length > 0 ? "dev" : "local";
-if (!isBuildEnv(injectedBuildEnv)) {
-  throw new Error(`Invalid AIPCTL_BUILD_ENV: ${injectedBuildEnv}`);
-}
-const VERSION = "2026.6.10".length > 0 ? "2026.6.10" : "0.0.0";
-const BUILD_ENV = injectedBuildEnv;
-const INCLUDE_NATIVE_LOGS = BUILD_ENV !== "prod";
-
-const loadBinaryModule = () => {
-  const require$1 = node_module.createRequire((typeof document === 'undefined' ? require('u' + 'rl').pathToFileURL(__filename).href : (_documentCurrentScript && _documentCurrentScript.tagName.toUpperCase() === 'SCRIPT' && _documentCurrentScript.src || new URL('index.cjs', document.baseURI).href)));
-  return require$1(["..", "binary.cjs"].join("/"));
-};
-const resolveNativeBinary = (options = {}) => {
-  const env = options.env ?? process.env;
-  if (env.AIPCTL_NATIVE_BINARY && env.AIPCTL_NATIVE_BINARY.length > 0) {
-    return env.AIPCTL_NATIVE_BINARY;
-  }
-  const binary = (options.loadBinaryModule ?? loadBinaryModule)();
-  return binary.resolveBinaryPath(options.platform ?? process.platform, options.arch ?? process.arch);
-};
-const runNativeCommand = (args, options = {}) => new Promise((resolve) => {
-  const env = options.env ?? process.env;
-  const spawn = options.spawn ?? childProcess.spawn;
-  const binaryPath = resolveNativeBinary(options);
-  const child = spawn(binaryPath, [...args], {
-    stdio: "inherit",
-    env
-  });
-  child.on("error", (error) => {
-    console.error(`Failed to start native command: ${error.message}`);
-    process.exitCode = 1;
-    resolve();
-  });
-  child.on("exit", (code) => {
-    process.exitCode = code ?? 1;
-    resolve();
-  });
-});
-
-const restArgs = text$2({ name: "arg" }).pipe(
-  repeated,
-  withDescription$5("Arguments passed through to the native aipctl command")
-);
-const makeNativeCommand = (name, description) => make$4(
-  name,
-  { rest: restArgs },
-  ({ rest }) => promise$1(() => runNativeCommand([name, ...rest]))
-).pipe(withDescription(description));
-
-const nativeCommandDefinitions = [
-  { name: "install", description: "Install an MCP preset into a local client", includeInProd: true },
-  { name: "run", description: "Run the native MCP server", includeInProd: true },
-  { name: "tunnel", description: "Manage Edge Tunnel connections", includeInProd: true },
-  { name: "logs", description: "Inspect native MCP CLI logs", includeInProd: false }
-];
-nativeCommandDefinitions.map(({ name }) => name);
-const isEnabledNativeCommand = (definition, includeLogs) => definition.includeInProd || includeLogs;
-const nativeSubcommands = nativeCommandDefinitions.filter((definition) => isEnabledNativeCommand(definition, INCLUDE_NATIVE_LOGS)).map(({ name, description }) => makeNativeCommand(name, description));
-const isNativeCommandEnabled = (command, includeLogs = INCLUDE_NATIVE_LOGS) => {
-  const definition = nativeCommandDefinitions.find(({ name }) => name === command);
-  return definition ? isEnabledNativeCommand(definition, includeLogs) : false;
-};
-
 const mainCommandDescription = "AIP command-line interface for managing organizations, skills, and native MCP commands";
 const rootSubcommands = [
   adminCommand,
@@ -99917,7 +100041,12 @@ const cli = run(mainCommand, {
 const BaseLayer = mergeAll$1(ConfigServiceLive, CredentialServiceLive);
 const ApiLayer = provide(ApiServiceLive, BaseLayer);
 const AppLayer = merge$2(BaseLayer, ApiLayer);
-cli(process.argv).pipe(
+const argv = [
+  process.argv[0] ?? "node",
+  process.argv[1] ?? "aipctl",
+  ...normalizeAipArgs(args)
+];
+cli(argv).pipe(
   provide$1(AppLayer),
   provide$1(layer),
   runMain

package/docs/api-contract-inventory.md

@@ -50,10 +50,10 @@
 | SKILL-05 | skill-admin | `aipctl skill download`; `aipctl admin skill upload`, `aipctl admin skill download`, `aipctl admin skill github inspect/import/sync/credentials set/clear` | `createAdminUploadUrl` → `uploadToS3` → `completeAdminUpload` (`abortAdminUpload` on failure); `getSkillDownloadUrl` → `downloadFromUrl`; `inspectGitHubSkillSource`, `prepareGitHubSkill`, `syncPrepareGitHubSkill`, `updateGitHubSkillCredentials` | api + external | `POST`/`PUT`/`POST`; `POST`/`GET`; `POST`, `POST`, `POST`, `PATCH` | `/admin/.../skills/upload-url`; `/admin/.../skills/download-url`; `/admin/.../skills/github-repo-inspect`; `/github-prepare`; `/{skillId}/sync-prepare`; `/{skillId}/github-credentials` | upload/download local bodies; GitHub inspect/prepare `{ url, pat? }`; credentials `{ pat or null }` | upload/download/GitHub admin skill DTOs | `resource/oas/modules/backend/organization/skills/openapi.yaml` | `frontend/packages/api/src/out/modules/organization-skills-types.ts#paths["/api/web/admin/organizations/slug/{organizationSlug}/skills/upload-url"]`, `#paths["/api/web/admin/organizations/slug/{organizationSlug}/skills/download-url"]`, `#paths["/api/web/admin/organizations/slug/{organizationSlug}/skills/github-repo-inspect"]`, `#paths["/api/web/admin/organizations/slug/{organizationSlug}/skills/github-prepare"]`, `#paths["/api/web/admin/organizations/slug/{organizationSlug}/skills/{skillId}/sync-prepare"]`, `#paths["/api/web/admin/organizations/slug/{organizationSlug}/skills/{skillId}/github-credentials"]` | `external-presigned` | N/A | `keep` | none | N/A | existing `commands/admin/skill.test.ts`, `commands/skill/skill-extended.test.ts`; needed GitHub admin skill contract fixtures |
 | P1-SKILL-01 | skill-docs | `aipctl skill get --json`, `aipctl admin skill get --json`, `aipctl admin skill github import/sync --json` | same owners as `SKILL-01`/`SKILL-05` | api | same as upstream rows | same as upstream rows | runtime/JSON/help/docs now align on `source`, `origin`, `updateAvailable`, `secretsAvailable`, GitHub metadata, `secretKeys`; stale `version` and file `size` removed | JSON/help/docs contract for skill objects | `resource/oas/modules/backend/organization/skills/openapi.yaml` | `frontend/packages/api/src/out/modules/organization-skills-types.ts#components[...]` | `generated-ready` | `P1` | `keep` | none | N/A | updated `src/core/api.test.ts`, `commands/skill/skill.test.ts`, `commands/skill/skill-extended.test.ts`, `commands/admin/skill.test.ts`, `commands/json-format.test.ts`, `../docs/how-to/aip-cli-usage.md`; covers JSON/help/docs field sync |
 | P0-AGENT-01 | agent-user | `aipctl agent list`, `aipctl agent get` | `listInstalledAgents`, `getInstalledAgent` | api | `GET`, `GET` | `/api/web/organizations/slug/{organizationSlug}/installed-agents`; `/installed-agents/{installedAgentId}` | legacy implemented endpoint maps `list`/`installedAgentId` into CLI `data`/`id`; detail wraps legacy response in `{ data }` and maps `installedIntegrationList` fallback | local `ListInstalledAgentsResponse`, `{ data: InstalledAgentDetail }` | implemented: `resource/oas/duplo.yaml`; future v2 source: `resource/oas/modules/backend/agent/user/openapi.yaml` | legacy `frontend/packages/api/src/out/user-types.ts#paths["/api/web/organizations/slug/{organizationSlug}/installed-agents"]`, `#paths["/api/web/organizations/slug/{organizationSlug}/installed-agents/{installedAgentId}"]` | `legacy-generated` | `P0` | `keep legacy` | owner=`backend app AgentsApiController`; rationale=`agent v2 controllers currently throw NotImplementedError in this repo, so public beta must call implemented legacy endpoints`; removal condition=`AgentUserApiController v2 methods are implemented and deployed`; incorporation plan=`switch to agent v2 OAS/generated contract only after backend implementation lands` | `AIP-PUB-05` | updated `src/core/api.test.ts`, `commands/agent/agent.test.ts`; covers implemented legacy list/detail path and response mapping |
-| P0-AGENT-02 | agent-admin | `aipctl admin agent create`, `update`, `delete`, `export`, `share`, `templates`; `aipctl agent enable`, `disable` | `createInstalledAgent`, `updateInstalledAgent`, `deleteInstalledAgent`, `exportInstalledAgent`, `getInstalledAgentShare`, `listAgentTemplates`, `updateInstalledAgentStatus` | api | `POST`, `PATCH`, `DELETE`, `GET`, `GET`, `GET`, `PATCH` | `/api/web/admin/organizations/slug/{organizationSlug}/installed-agents`; `/{installedAgentId}`; `/export`; `/share`; `/agents`; `/{installedAgentId}/status` | create/update bodies follow implemented legacy admin request (`custom.iconKeyOrUrl`, `knowledgeBundleIdList`); templates map legacy `agentId`/`label`/`categoryList`; status body `{ status }` | create/update return plain `{ id }`; local admin agent DTOs + `Buffer` export | implemented: `resource/oas/duplo.yaml`; future v2 source: `resource/oas/modules/backend/agent/admin/openapi.yaml` | legacy `frontend/packages/api/src/out/user-types.ts#paths["/api/web/admin/organizations/slug/{organizationSlug}/installed-agents"]`, `#paths["/api/web/admin/organizations/slug/{organizationSlug}/installed-agents/{installedAgentId}"]`, `#paths["/api/web/admin/organizations/slug/{organizationSlug}/agents"]` | `legacy-generated` | `P0` | `keep legacy` | owner=`backend app AgentsApiController`; rationale=`agent v2 admin controllers currently throw NotImplementedError in this repo, so public beta must call implemented legacy endpoints`; removal condition=`AgentAdminApiController v2 methods are implemented and deployed`; incorporation plan=`switch to agent v2 OAS/generated contract only after backend implementation lands` | `AIP-PUB-05` | updated `src/core/api.test.ts`, `commands/agent/agent.test.ts`; covers implemented legacy CRUD/status/template path/body and plain response mapping |
+| P0-AGENT-02 | agent-admin | `aipctl admin agent create`, `update`, `delete`, `export`, `share`, `templates`; `aipctl agent enable`, `disable` | `createInstalledAgent`, `updateInstalledAgent`, `deleteInstalledAgent`, `exportInstalledAgent`, `getInstalledAgentShare`, `listAgentTemplates`, `updateInstalledAgentStatus` | api | `POST`, `PATCH`, `DELETE`, `GET`, `GET`, `GET`, `PATCH` | `/api/web/admin/organizations/slug/{organizationSlug}/installed-agents`; `/{installedAgentId}`; export uses legacy direct `/web/admin/organizations/slug/{organizationSlug}/installed-agents/{installedAgentId}/export`; `/share`; `/agents`; `/{installedAgentId}/status` | create/update bodies follow implemented legacy admin request (`custom.iconKeyOrUrl`, `knowledgeBundleIdList`); export is YAML bytes from direct controller path; templates map legacy `agentId`/`label`/`categoryList`; status body `{ status }` | create/update return plain `{ id }`; local admin agent DTOs + `Buffer` export | implemented: `resource/oas/duplo.yaml`; export controller path: `backend/api/src/main/kotlin/com/querypie/duplo/api/app/controller/AgentExportController.kt`; future v2 source: `resource/oas/modules/backend/agent/admin/openapi.yaml` | legacy `frontend/packages/api/src/out/user-types.ts#paths["/api/web/admin/organizations/slug/{organizationSlug}/installed-agents"]`, `#paths["/api/web/admin/organizations/slug/{organizationSlug}/installed-agents/{installedAgentId}"]`, `#paths["/api/web/admin/organizations/slug/{organizationSlug}/agents"]`; export path intentionally OAS-codegen excluded | `legacy-generated` | `P0` | `keep legacy` | owner=`backend app AgentsApiController + AgentExportController`; rationale=`agent v2 admin controllers currently throw NotImplementedError and export is implemented only at /web/admin direct controller path in PROD`; removal condition=`AgentAdminApiController v2 and export path are implemented/deployed under versioned OAS path`; incorporation plan=`switch to agent v2 OAS/generated contract only after backend implementation lands, then remove direct export exception` | `AIP-PUB-05` | updated `src/core/api.test.ts`, `commands/agent/agent.test.ts`; covers implemented legacy CRUD/status/template path/body, direct export path, Buffer response, and 404 propagation |
 | P1-CHAT-01 | agent-chat | `aipctl agent chat` | `agentNewChat`, `agentChat`, local `parseSseStream` | chat | `POST` + SSE | `/librechat/api/{orgSlug}/agent/new-chat`; `/librechat/api/{orgSlug}/agent/chat` | request body `{ agentInstallationId or conversationId, text, files: [] }` | local `AgentChatResult { text, conversationId }` parsed from SSE event fields `final`, `conversation.conversationId`, `responseMessage` | path source: `resource/oas/chat.yaml` | `frontend/packages/api/src/out/chat-types.ts#paths["/librechat/api/{orgSlug}/agent/new-chat"]`, `#paths["/librechat/api/{orgSlug}/agent/chat"]` | `stream-exception` | `P1` | `legacy-exception` | owner=`chat backend agent SSE stream contract`; rationale=`path exists in OpenAPI but final SSE event payload is still out-of-band`; removal condition=`official SSE event schema or versioned fixture is published with the chat contract`; incorporation plan=`bind CLI parser/tests to the published SSE fixture and drop local-only stream assumptions` | N/A | updated `src/core/api.test.ts`; covers content[] text, fallback text, malformed event skip, and no-final-event failure |
 | P1-AUTO-01 | automation | `aipctl automation list`, `get`, `create`, `update`, `delete`, `run`, `enable`, `disable`, `history`, `cancel`, `webhook-regen`, `triggers` | `listAutomations`, `getAutomation`, `createAutomation`, `updateAutomation`, `deleteAutomation`, `runAutomation`, `updateAutomationStatus`, `listAutomationHistories`, `cancelAutomationHistory`, `regenerateWebhookUrl`, `getTriggerProviderMetadata` | api | `GET`, `POST`, `PUT`, `DELETE` mix | `/api/web/organizations/slug/{organizationSlug}/automations...`; `/automation-trigger-providers/.../metadata` | automation pagination normalized to `{ page, pageSize, total }`; metadata calls now use provider-specific OAS paths and required args (`accountId`, `folderId`, `serviceType`) | local automation DTOs + webhook URL DTO | `resource/oas/modules/backend/automation/user/openapi.yaml` | `frontend/packages/api/src/out/modules/automation-user-types.ts#paths[...]` | `generated-ready` | `P1` | `keep` | none | N/A | updated `src/core/api.test.ts`, `commands/automation/automation.test.ts`, `commands/json-format.test.ts`; covers official pagination fields, provider-specific metadata routes, and unsupported-provider preflight failure |
-| CHAT-01 | chat-readonly | `aipctl chat list`, `aipctl chat get`, `aipctl chat messages` | `listConversations`, `getConversation`, `listMessages` | chat | `GET` | `/librechat/api/{orgSlug}/convos`; `/convos/{conversationId}`; `/messages/{conversationId}` | list query `{ cursor,pageSize,sortBy,sortDirection }` | local `ListConversationsResponse`, `ConversationDetail`, `ChatMessage[]` | `resource/oas/chat.yaml` | `frontend/packages/api/src/out/chat-types.ts#paths["/librechat/api/{orgSlug}/convos"]`, `#paths["/librechat/api/{orgSlug}/convos/{conversationId}"]`, `#paths["/librechat/api/{orgSlug}/messages/{conversationId}"]` | `legacy-generated` | N/A | `keep` | none | N/A | existing `commands/chat/chat.test.ts`; needed independent chat contract generation later |
+| CHAT-01 | chat-readonly | `aipctl chat list`, `aipctl chat get`, `aipctl chat messages` | `listConversations`, `getConversation`, `listMessages` | chat | `GET` | `/librechat/api/{orgSlug}/convos`; `/convos/{conversationId}`; `/messages/{conversationId}` | list sends no default query; optional cursor only (`?cursor=...`). `pageSize`/`sortBy`/`sortDirection` defaults removed due deployed Chat validation drift | local `ListConversationsResponse`, `ConversationDetail`, `ChatMessage[]` | `resource/oas/chat.yaml` | `frontend/packages/api/src/out/chat-types.ts#paths["/librechat/api/{orgSlug}/convos"]`, `#paths["/librechat/api/{orgSlug}/convos/{conversationId}"]`, `#paths["/librechat/api/{orgSlug}/messages/{conversationId}"]` | `legacy-generated` | N/A | `keep` | owner=`chat backend`; rationale=`PROD rejects CLI default pageSize/sort query while no-query and cursor-only read path are safe`; removal condition=`chat deployed contract publishes and accepts explicit pagination query for public CLI`; incorporation plan=`reintroduce explicit pagination only after OAS/source/deployed validation align` | N/A | updated `src/core/api.test.ts`, existing `commands/chat/chat.test.ts`; covers default no-query and cursor-only URL |
 | P0-DRIVE-01 | drive | `aipctl drive list`, `download`, `delete`, `mkdir`, `rename`, `usage` | `listDriveEntries`, `getDriveDownloadUrl`, `deleteDriveEntries`, `createDriveFolder`, `renameDriveEntry`, `getDriveUsage`, `downloadFromUrl` | api + external | `GET`, `POST`, `POST`, `POST`, `PATCH`, `GET`, external `GET` | `/drive/entries?count=200`; `/drive/entries/download-url`; `/drive/entries/delete`; `/drive/entries/{entryId}`; `/drive/usage` | official list `{ path, hasNext, nextCursor, items }`; delete body `{ entryIds[] }`; rename body `{ newName }`; download body `{ entryIds: [id] }` | official drive list/download DTOs + external file buffer | `resource/oas/modules/backend/organization/storage/openapi.yaml` | `frontend/packages/api/src/out/modules/organization-storage-types.ts#paths["/api/web/organizations/slug/{organizationSlug}/drive/entries"]`, `#paths["/api/web/organizations/slug/{organizationSlug}/drive/entries/download-url"]`, `#paths["/api/web/organizations/slug/{organizationSlug}/drive/entries/{entryId}"]`, `#paths["/api/web/organizations/slug/{organizationSlug}/drive/entries/delete"]`, `#paths["/api/web/organizations/slug/{organizationSlug}/drive/usage"]` | `generated-ready` | `P0` | `migrate` | none | `AIP-PUB-05` | updated `src/core/api.test.ts`, `commands/drive/drive.test.ts`; covers paged list shape, batch download-url request, DTO field rename (`sizeBytes`, `modifiedAt`) |
 | P0-DRIVE-02 | drive | `aipctl drive upload` | `createDriveUploadUrl` → `uploadToS3` → `completeDriveUpload` | api + external | `POST` → `PUT` → `POST` | `/drive/entries/upload-url`; external presigned `uploadUrl`; `/drive/entries/{entryId}/complete` | official upload request `{ parentId: null, filename, fileSize, mimeType }` | official `CreateDriveUploadUrlResponse { id, filename, uploadUrl, headers }` then `void` | `resource/oas/modules/backend/organization/storage/openapi.yaml` | `frontend/packages/api/src/out/modules/organization-storage-types.ts#paths["/api/web/organizations/slug/{organizationSlug}/drive/entries/upload-url"]`, `#paths["/api/web/organizations/slug/{organizationSlug}/drive/entries/{entryId}/complete"]` | `generated-ready` | `P0` | `migrate` | none | `AIP-PUB-05` | updated `src/core/api.test.ts`, `commands/drive/drive.test.ts`; covers `parentId: null` request and response `id`/`filename` usage |
 | P1-INT-01 | integration | `aipctl integration list`, `test`; `aipctl admin integration get`, `update`, `delete`, `tools`, `available` | `listIntegrations`, `testIntegration`, `getIntegration`, `updateIntegration`, `deleteIntegration`, `listIntegrationTools`, `listConfigurableIntegrations` | api | `GET`, `POST`, `GET`, `PUT`, `DELETE`, `GET`, `GET` | `/api/web/integrations/v2`; `/api/web/integration/{integrationId}/test`; `/api/web/admin/organizations/slug/{organizationSlug}/integrations/{integrationId}`; `/{integrationId}/tools`; `/configurable-integrations` | top-level list/test and admin detail/available now follow current/legacy OAS path+body+DTO where available; admin update/delete still accept untyped legacy mutation body/path until admin mutation contract lands | local `Integration`, `IntegrationDetail`, `IntegrationToolsResponse`, `ConfigurableIntegration[]` | legacy admin paths: `resource/oas/duplo-web.yaml`; partial modern source: `resource/oas/modules/backend/integration/openapi.yaml` (does not cover these admin list/CRUD/tools paths) | legacy `frontend/packages/api/src/out/user-types.ts#paths["/api/web/admin/organizations/slug/{organizationSlug}/integrations"]`, `#paths["/api/web/admin/organizations/slug/{organizationSlug}/configurable-integrations"]`; partial current `frontend/packages/api/src/out/modules/integration-types.ts` lacks these admin list/CRUD/tools paths | `legacy-generated` | `P1` | `legacy-exception` | owner=`backend app Integrations / duplo-web legacy OAS`; rationale=`public beta keeps integration list/test/admin detail/tools/available, but admin update/delete still lack an approved current contract outside legacy duplo-web`; removal condition=`independent contract covers user list/test plus admin CRUD/tools/available`; incorporation plan=`extend integration module or independent contract for list/test/admin CRUD/tools/available, then retire legacy path/body mappings and delete/update exception` | N/A | updated `src/core/api.test.ts`, `commands/integration/integration.test.ts`; covers v2 list query, test body `{ organizationSlug }`, admin detail/tools DTO fields, configurable wrapper unwrap, and pinned update/delete legacy paths |
@@ -61,7 +61,7 @@
 | USAGE-01 | usage | `aipctl admin usage credit`, `top-users`, `daily-graph`, `daily-users`, `mcp-top` | `getCreditStatistics`, `getCreditTopUsers`, `getCreditDailyGraph`, `getCreditDailyUsers`, `getMcpTopTools` | api | `GET` | `/api/web/admin/organizations/slug/{organizationSlug}/usage/...` | query `{ startDt,endDt,limit,pageNumber,pageSize,userId }` | local usage DTOs, `DailyUsageDetailsResponse.pagination { page,pageSize,total }` | `resource/oas/modules/backend/usage/openapi.yaml` | `frontend/packages/api/src/out/modules/usage-types.ts#paths[...]` | `generated-ready` | N/A | `keep` | none | N/A | existing `commands/usage/usage.test.ts`; needed generated path snapshots |
 | AUDIT-01 | audit | `aipctl admin audit list`, `types` | `listAuditLogs`, `listAuditEventTypes` | api | `GET` | `/api/web/audit/organization/slug/{organizationSlug}`; `/api/web/audit/event/types` | query `{ eventType,page,pageSize }` | local `ListAuditResponse`, `AuditEventType[]` | `resource/oas/modules/backend/audit/openapi.yaml` | `frontend/packages/api/src/out/modules/backend-audit-types.ts#paths[...]` | `generated-ready` | N/A | `keep` | none | N/A | existing `commands/audit/audit.test.ts`; needed generated path snapshots |
 | TUNNEL-01 | tunnel | `aipctl admin tunnel status`, `config`, `token` | `getTunnelStatus`, `getTunnelConfig`, `createTunnelToken` | api | `GET`, `GET`, `POST` | `/api/web/edge-tunnel/v2/organizations/slug/{organizationSlug}/status`; `/config`; `/token` | none | local `TunnelStatus`, `TunnelConfig`, `void` | `resource/oas/modules/backend/tunnel/openapi.yaml` | `frontend/packages/api/src/out/modules/tunnel-types.ts#paths[...]` | `generated-ready` | N/A | `keep` | none | N/A | existing `commands/tunnel/tunnel.test.ts`; needed v2 path snapshot |
-| P1-PRESET-01 | preset | `aipctl admin preset list`, `get`, `create`, `update`, `rename`, `delete`, `set-default`, `unset-default`, `regen-key`, `regen-static-key` | `listPresets`, `getPreset`, `createPreset`, `updatePreset`, `renamePreset`, `deletePreset`, `setPresetAsDefault`, `unsetPresetAsDefault`, `regenPresetKey`, `regenPresetStaticKey` | api | `GET`, `POST`, `PUT`, `PATCH`, `DELETE` mix | `/api/web/presets/v2`; `/api/web/presets/{presetId}`; `/key`; `/static-key`; `/default` | legacy preset API kept, root how-to/docs switched to `aipctl admin preset ...`, and contract tests pin list/detail/default/key/static-key paths | local preset DTOs with installation/json command fields | `resource/oas/duplo-web.yaml` | `frontend/packages/api/src/out/user-types.ts#paths["/api/web/presets/v2"]`, `#paths["/api/web/presets/{presetId}"]`, `#paths["/api/web/presets/{presetId}/default"]` | `legacy-generated` | `P1` | `keep` | none | N/A | updated `src/core/api.test.ts`, `commands/preset/preset.test.ts`, `../docs/how-to/aip-cli-usage.md`; covers admin namespace docs plus `/v2`, `/{id}`, `/default`, `/key`, `/static-key` paths |
+| P1-PRESET-01 | preset | `aipctl admin preset list`, `get`, `create`, `update`, `rename`, `delete`, `set-default`, `unset-default`, `regen-key`, `regen-static-key` | `listPresets`, `getPreset`, `createPreset`, `updatePreset`, `renamePreset`, `deletePreset`, `setPresetAsDefault`, `unsetPresetAsDefault`, `regenPresetKey`, `regenPresetStaticKey` | api | `GET`, `POST`, `PUT`, `PATCH`, `DELETE` mix | `/api/web/presets/v2`; `/api/web/presets/{presetId}`; `/key`; `/static-key`; `/default` | legacy preset API kept; delete response is contract-aligned to 204 No Content and CLI treats delete as endpoint-specific void response to tolerate deployed 200 empty drift | local preset DTOs with installation/json command fields; delete returns `void` | `resource/oas/duplo-web.yaml` | `frontend/packages/api/src/out/user-types.ts#paths["/api/web/presets/v2"]`, `#paths["/api/web/presets/{presetId}"]`, `#paths["/api/web/presets/{presetId}/default"]` | `legacy-generated` | `P1` | `keep` | owner=`backend app PresetsApiController`; rationale=`runtime returned 200 empty while generated/OAS says 204, causing JSON parse false failure`; removal condition=`204 is deployed everywhere and CLI no longer needs 200-empty tolerance`; incorporation plan=`keep endpoint-specific void mode, do not add global 200-empty fallback` | N/A | updated `src/core/api.test.ts`, `commands/admin/preset/preset.test.ts`, `../docs/how-to/aip-cli-usage.md`, `backend/api/src/test/kotlin/.../PresetsApiControllerTest.kt`; covers admin namespace docs, `/v2`, `/{id}`, `/default`, `/key`, `/static-key`, delete 200-empty tolerance, and JSON endpoint 200-empty failure |
 
 ## Queue IDs for follow-up
 

package/docs/architecture.md

@@ -60,7 +60,6 @@ desktop/packages/cli/
 - package base version: `0.0.0`
 - publish-time CalVer가 `AIPCTL_VERSION`으로 TS bundle과 Go ldflags에 주입됩니다.
 - `AIPCTL_BUILD_ENV`는 `local|dev|stage|prod|test` 중 하나이며 `logs` gating에 사용됩니다.
-- native input hash가 이전 발행본과 같으면 platform package를 새로 빌드하지 않고 기존 version을 재사용합니다.
 
 ## Dependency direction
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "aipctl",
-  "version": "2026.6.10",
+  "version": "2026.6.12",
   "description": "QueryPie AIP and MCP CLI tool",
   "author": "QueryPie",
   "license": "UNLICENSED",
@@ -22,16 +22,14 @@
     "node": ">=24.18.0"
   },
   "metadata": {
-    "contentHash": "db054dede0de76381e857b01ad5562185344edbf41879265d967b8dfe17f99ae",
-    "wrapperHash": "f48be2ddee664246e0bfd64966a9a4af566c63674ec7fc998a5c0e8bbe4a2fdb",
-    "nativeHash": "c162f6578140a53a3870e776304ae7e1331480ba7da919088a25ac39108af5b9"
+    "contentHash": "2e0b362640a656e8332cc6cb84843436a981b7d13547893c1fd8ca14382d0fc0"
   },
   "optionalDependencies": {
-    "aipctl-darwin-x64": "2026.6.8",
-    "aipctl-darwin-arm64": "2026.6.8",
-    "aipctl-linux-x64": "2026.6.8",
-    "aipctl-linux-arm64": "2026.6.8",
-    "aipctl-windows-x64": "2026.6.8",
-    "aipctl-windows-arm64": "2026.6.8"
+    "aipctl-darwin-x64": "2026.6.12",
+    "aipctl-darwin-arm64": "2026.6.12",
+    "aipctl-linux-x64": "2026.6.12",
+    "aipctl-linux-arm64": "2026.6.12",
+    "aipctl-windows-x64": "2026.6.12",
+    "aipctl-windows-arm64": "2026.6.12"
   }
 }