aipctl 2026.9.11 → 2026.10.2

package/build/index.cjs

@@ -89670,7 +89670,7 @@ const injectedBuildEnv = "dev".length > 0 ? "dev" : "local";
 if (!isBuildEnv(injectedBuildEnv)) {
   throw new Error(`Invalid AIPCTL_BUILD_ENV: ${injectedBuildEnv}`);
 }
-const VERSION = "2026.9.11".length > 0 ? "2026.9.11" : "0.0.0";
+const VERSION = "2026.10.2".length > 0 ? "2026.10.2" : "0.0.0";
 const BUILD_ENV = injectedBuildEnv;
 const INCLUDE_NATIVE_LOGS = BUILD_ENV !== "prod";
 
@@ -89732,6 +89732,19 @@ const isNativeCommandEnabled = (command, includeLogs = INCLUDE_NATIVE_LOGS) => {
 const FORCED_ARGS_SEPARATOR = "--";
 const NATIVE_ROOT_COMMANDS = new Set(nativeCommandNames);
 const trailingOptionSpecs = [
+  ...["list", "get"].map((command) => ({
+    command: ["automation", command],
+    booleanOptions: /* @__PURE__ */ new Set(["--json"]),
+    valueOptions: /* @__PURE__ */ new Set(["--org", ...command === "list" ? ["--name"] : []]),
+    explicitBooleanValues: true
+  })),
+  {
+    command: ["automation", "delete"],
+    booleanOptions: /* @__PURE__ */ new Set(["--force", "-f"]),
+    valueOptions: /* @__PURE__ */ new Set(["--org"]),
+    explicitBooleanValues: true,
+    booleanAliases: { "-f": "--force" }
+  },
   {
     command: ["drive", "delete"],
     booleanOptions: /* @__PURE__ */ new Set(["--force", "-f"]),
@@ -89766,6 +89779,19 @@ const normalizeTrailingOptions = (args, spec) => {
     if (arg === void 0) {
       continue;
     }
+    if (spec.explicitBooleanValues && spec.booleanOptions.has(getOptionName(arg))) {
+      const nextArg = args[index + 1];
+      const optionName = spec.booleanAliases?.[getOptionName(arg)] ?? getOptionName(arg);
+      if (arg.includes("=")) {
+        options.push(`${optionName}${arg.slice(arg.indexOf("="))}`);
+      } else if (nextArg === "true" || nextArg === "false") {
+        options.push(`${optionName}=${nextArg}`);
+        index += 1;
+      } else {
+        options.push(`${optionName}=true`);
+      }
+      continue;
+    }
     if (isBooleanOption(arg, spec)) {
       options.push(arg);
       continue;
@@ -89844,7 +89870,22 @@ const implementedCommandOperationIds = /* @__PURE__ */ new Set([
   "listCliIntegrations",
   "listCliAvailableIntegrations",
   "getCliAdminIntegration",
-  "listCliIntegrationTools"
+  "listCliIntegrationTools",
+  "listCliAutomations",
+  "getCliAutomation",
+  "listCliAutomationTriggers",
+  "listCliAutomationHistory",
+  "createCliAutomation",
+  "updateCliAutomation",
+  "deleteCliAutomation",
+  "updateCliAutomationStatus",
+  "getCliCreditUsage",
+  "listCliTopUsers",
+  "getCliDailyUsageGraph",
+  "listCliDailyUsers",
+  "listCliTopMcpTools",
+  "listCliAuditLogs",
+  "listCliAuditEventTypes"
 ]);
 const releaseEnabledCommandOperationIds = /* @__PURE__ */ new Set([
   "listCliAgents",
@@ -89886,7 +89927,22 @@ const releaseEnabledCommandOperationIds = /* @__PURE__ */ new Set([
   "listCliIntegrations",
   "listCliAvailableIntegrations",
   "getCliAdminIntegration",
-  "listCliIntegrationTools"
+  "listCliIntegrationTools",
+  "listCliAutomations",
+  "getCliAutomation",
+  "listCliAutomationTriggers",
+  "listCliAutomationHistory",
+  "createCliAutomation",
+  "updateCliAutomation",
+  "deleteCliAutomation",
+  "updateCliAutomationStatus",
+  "getCliCreditUsage",
+  "listCliTopUsers",
+  "getCliDailyUsageGraph",
+  "listCliDailyUsers",
+  "listCliTopMcpTools",
+  "listCliAuditLogs",
+  "listCliAuditEventTypes"
 ]);
 const direct = (commands, operation) => commands.map((command) => ({
   command,
@@ -93891,6 +93947,10 @@ function maskSensitiveData(value, options = {}, context = {}) {
   const shouldUseMaskedCommand = typeof record.command === "string" && typeof record.maskedCommand === "string";
   for (const [key, entry] of Object.entries(record)) {
     const normalizedKey = normalizeKey(key);
+    if (normalizedKey === "secretconfigured" && typeof entry === "boolean" && !context.forceMaskPrimitives) {
+      masked[key] = entry;
+      continue;
+    }
     if (normalizedKey === COMMAND_KEY && shouldUseMaskedCommand) {
       masked[key] = record.maskedCommand;
       continue;
@@ -94622,24 +94682,8 @@ function resolveTriggerMetadataRequest(triggerProviderType, options = {}) {
   }
 }
 function buildTriggerProviderMetadataPath(orgSlug, request) {
-  const basePath = `/api/web/organizations/slug/${encodeURIComponent(orgSlug)}/automation-trigger-providers`;
-  switch (request.triggerProviderType) {
-    case "GMAIL":
-    case "OUTLOOK": {
-      const params = new URLSearchParams({ accountId: request.options.accountId });
-      return `${basePath}/${encodeURIComponent(request.triggerProviderType)}/metadata?${params.toString()}`;
-    }
-    case "google-drive":
-    case "box": {
-      const params = new URLSearchParams({
-        accountId: request.options.accountId,
-        folderId: request.options.folderId
-      });
-      return `${basePath}/${encodeURIComponent(request.triggerProviderType)}/metadata?${params.toString()}`;
-    }
-    case "webhook":
-      return `${basePath}/webhook/${encodeURIComponent(request.options.serviceType)}/metadata`;
-  }
+  const params = new URLSearchParams({ type: request.triggerProviderType, ...request.options });
+  return `/api/cli/v1/organizations/${encodeURIComponent(orgSlug)}/automations/triggers?${params.toString()}`;
 }
 function normalizeSharedUserList(sharedUserList) {
   return sharedUserList?.map((user, index) => {
@@ -95363,11 +95407,12 @@ const makeApiServiceLive = (buildEnv) => effect$1(
       // Phase 3: Automation
       listAutomations: (orgSlug, options) => gen(function* () {
         const token = yield* getAccessToken();
+        yield* requireReleaseEnabledOperation("listCliAutomations");
         const params = new URLSearchParams();
         params.set("pageNumber", String(options?.pageNumber ?? 1));
         params.set("pageSize", String(options?.pageSize ?? 50));
         if (options?.name) params.set("name", options.name);
-        const path = `/api/web/organizations/slug/${encodeURIComponent(orgSlug)}/automations?${params.toString()}`;
+        const path = `/api/cli/v1/organizations/${encodeURIComponent(orgSlug)}/automations?${params.toString()}`;
         const response = yield* makeRequest(baseUrl, path, token);
         return {
           ...response,
@@ -95381,18 +95426,20 @@ const makeApiServiceLive = (buildEnv) => effect$1(
       }),
       updateAutomationStatus: (orgSlug, automationId, status) => gen(function* () {
         const token = yield* getAccessToken();
-        const path = `/api/web/organizations/slug/${encodeURIComponent(orgSlug)}/automations/${encodeURIComponent(automationId)}/change-status`;
+        yield* requireReleaseEnabledOperation("updateCliAutomationStatus");
+        const path = `/api/cli/v1/organizations/${encodeURIComponent(orgSlug)}/automations/${encodeURIComponent(automationId)}/status`;
         return yield* makeRequest(baseUrl, path, token, {
-          method: "POST",
+          method: "PATCH",
           body: { status }
         });
       }),
       listAutomationHistories: (orgSlug, automationId, options) => gen(function* () {
         const token = yield* getAccessToken();
+        yield* requireReleaseEnabledOperation("listCliAutomationHistory");
         const params = new URLSearchParams();
         params.set("pageNumber", String(options?.pageNumber ?? 1));
         params.set("pageSize", String(options?.pageSize ?? 20));
-        const path = `/api/web/organizations/slug/${encodeURIComponent(orgSlug)}/automations/${encodeURIComponent(automationId)}/histories?${params.toString()}`;
+        const path = `/api/cli/v1/organizations/${encodeURIComponent(orgSlug)}/automations/${encodeURIComponent(automationId)}/history?${params.toString()}`;
         const response = yield* makeRequest(baseUrl, path, token);
         return {
           ...response,
@@ -95401,12 +95448,14 @@ const makeApiServiceLive = (buildEnv) => effect$1(
       }),
       getAutomation: (orgSlug, automationId) => gen(function* () {
         const token = yield* getAccessToken();
-        const path = `/api/web/organizations/slug/${encodeURIComponent(orgSlug)}/automations/${encodeURIComponent(automationId)}`;
+        yield* requireReleaseEnabledOperation("getCliAutomation");
+        const path = `/api/cli/v1/organizations/${encodeURIComponent(orgSlug)}/automations/${encodeURIComponent(automationId)}`;
         return yield* makeRequest(baseUrl, path, token);
       }),
       createAutomation: (orgSlug, body) => gen(function* () {
         const token = yield* getAccessToken();
-        const path = `/api/web/organizations/slug/${encodeURIComponent(orgSlug)}/automations`;
+        yield* requireReleaseEnabledOperation("createCliAutomation");
+        const path = `/api/cli/v1/organizations/${encodeURIComponent(orgSlug)}/automations`;
         return yield* makeRequest(baseUrl, path, token, {
           method: "POST",
           body
@@ -95414,7 +95463,8 @@ const makeApiServiceLive = (buildEnv) => effect$1(
       }),
       updateAutomation: (orgSlug, automationId, body) => gen(function* () {
         const token = yield* getAccessToken();
-        const path = `/api/web/organizations/slug/${encodeURIComponent(orgSlug)}/automations/${encodeURIComponent(automationId)}`;
+        yield* requireReleaseEnabledOperation("updateCliAutomation");
+        const path = `/api/cli/v1/organizations/${encodeURIComponent(orgSlug)}/automations/${encodeURIComponent(automationId)}`;
         return yield* makeRequest(baseUrl, path, token, {
           method: "PUT",
           body
@@ -95422,7 +95472,8 @@ const makeApiServiceLive = (buildEnv) => effect$1(
       }),
       deleteAutomation: (orgSlug, automationId) => gen(function* () {
         const token = yield* getAccessToken();
-        const path = `/api/web/organizations/slug/${encodeURIComponent(orgSlug)}/automations/${encodeURIComponent(automationId)}`;
+        yield* requireReleaseEnabledOperation("deleteCliAutomation");
+        const path = `/api/cli/v1/organizations/${encodeURIComponent(orgSlug)}/automations/${encodeURIComponent(automationId)}`;
         return yield* makeRequest(baseUrl, path, token, { method: "DELETE" });
       }),
       cancelAutomationHistory: (orgSlug, automationId, historySeq) => gen(function* () {
@@ -95485,57 +95536,64 @@ const makeApiServiceLive = (buildEnv) => effect$1(
       }),
       getCreditStatistics: (orgSlug, options) => gen(function* () {
         const token = yield* getAccessToken();
+        yield* requireReleaseEnabledOperation("getCliCreditUsage");
         const params = new URLSearchParams();
         params.set("startDt", options.startDt);
         params.set("endDt", options.endDt);
-        const path = `/api/web/admin/organizations/slug/${encodeURIComponent(orgSlug)}/usage/credit/statistics?${params.toString()}`;
+        const path = `/api/cli/v1/organizations/${encodeURIComponent(orgSlug)}/admin/usage/credit?${params.toString()}`;
         return yield* makeRequest(baseUrl, path, token);
       }),
       getCreditTopUsers: (orgSlug, options) => gen(function* () {
         const token = yield* getAccessToken();
+        yield* requireReleaseEnabledOperation("listCliTopUsers");
         const params = new URLSearchParams();
         params.set("startDt", options.startDt);
         params.set("endDt", options.endDt);
         params.set("limit", String(options.limit));
-        const path = `/api/web/admin/organizations/slug/${encodeURIComponent(orgSlug)}/usage/credit/top-users?${params.toString()}`;
+        const path = `/api/cli/v1/organizations/${encodeURIComponent(orgSlug)}/admin/usage/top-users?${params.toString()}`;
         return yield* makeRequest(baseUrl, path, token);
       }),
       getCreditDailyGraph: (orgSlug, options) => gen(function* () {
         const token = yield* getAccessToken();
+        yield* requireReleaseEnabledOperation("getCliDailyUsageGraph");
         const params = new URLSearchParams();
         params.set("startDt", options.startDt);
         params.set("endDt", options.endDt);
-        const path = `/api/web/admin/organizations/slug/${encodeURIComponent(orgSlug)}/usage/credit/daily-graph?${params.toString()}`;
+        const path = `/api/cli/v1/organizations/${encodeURIComponent(orgSlug)}/admin/usage/daily-graph?${params.toString()}`;
         return yield* makeRequest(baseUrl, path, token);
       }),
       getCreditDailyUsers: (orgSlug, options) => gen(function* () {
         const token = yield* getAccessToken();
+        yield* requireReleaseEnabledOperation("listCliDailyUsers");
         const params = new URLSearchParams();
         params.set("startDt", options.startDt);
         params.set("endDt", options.endDt);
         params.set("pageNumber", String(options.pageNumber ?? 1));
         params.set("pageSize", String(options.pageSize ?? 20));
         if (options.userId) params.set("userId", options.userId);
-        const path = `/api/web/admin/organizations/slug/${encodeURIComponent(orgSlug)}/usage/credit/daily-users?${params.toString()}`;
+        const path = `/api/cli/v1/organizations/${encodeURIComponent(orgSlug)}/admin/usage/daily-users?${params.toString()}`;
         return yield* makeRequest(baseUrl, path, token);
       }),
       getMcpTopTools: (orgSlug, options) => gen(function* () {
         const token = yield* getAccessToken();
+        yield* requireReleaseEnabledOperation("listCliTopMcpTools");
         const params = new URLSearchParams();
         params.set("startDt", options.startDt);
         params.set("endDt", options.endDt);
         params.set("limit", String(options.limit));
-        const path = `/api/web/admin/organizations/slug/${encodeURIComponent(orgSlug)}/usage/mcp/top?${params.toString()}`;
+        const path = `/api/cli/v1/organizations/${encodeURIComponent(orgSlug)}/admin/usage/mcp-top?${params.toString()}`;
         return yield* makeRequest(baseUrl, path, token);
       }),
       listAuditLogs: (orgSlug, options) => gen(function* () {
         const token = yield* getAccessToken();
+        yield* requireReleaseEnabledOperation("listCliAuditLogs");
         const params = new URLSearchParams();
         params.set("page", String(options?.page ?? 1));
         params.set("pageSize", String(options?.pageSize ?? 20));
         if (options?.eventType) params.set("eventType", options.eventType);
-        const path = `/api/web/audit/organization/slug/${encodeURIComponent(orgSlug)}?${params.toString()}`;
-        return yield* makeRequest(baseUrl, path, token);
+        const path = `/api/cli/v1/organizations/${encodeURIComponent(orgSlug)}/admin/audit?${params.toString()}`;
+        const response = yield* makeRequest(baseUrl, path, token);
+        return { ...response, pagination: normalizePageNumberPagination(response.pagination, response.list.length) };
       }),
       // Phase 5: Drive/Integration
       listDriveEntries: (orgSlug) => gen(function* () {
@@ -95783,6 +95841,7 @@ const makeApiServiceLive = (buildEnv) => effect$1(
       }),
       getTriggerProviderMetadata: (orgSlug, triggerProviderType, options) => gen(function* () {
         const token = yield* getAccessToken();
+        yield* requireReleaseEnabledOperation("listCliAutomationTriggers");
         const request = yield* try_({
           try: () => resolveTriggerMetadataRequest(triggerProviderType, options),
           catch: (error) => apiErrorFromUnknown(error, "Invalid trigger provider metadata request")
@@ -95828,9 +95887,11 @@ const makeApiServiceLive = (buildEnv) => effect$1(
         return yield* makeRequest(baseUrl, path, token);
       }),
       // Audit event types
-      listAuditEventTypes: () => gen(function* () {
+      listAuditEventTypes: (orgSlug) => gen(function* () {
         const token = yield* getAccessToken();
-        return yield* makeRequest(baseUrl, "/api/web/audit/event/types", token);
+        yield* requireReleaseEnabledOperation("listCliAuditEventTypes");
+        const path = `/api/cli/v1/organizations/${encodeURIComponent(orgSlug)}/admin/audit/types`;
+        return yield* makeRequest(baseUrl, path, token);
       }),
       // Org capabilities & user settings
       getOrgCapabilities: (orgSlug) => gen(function* () {
@@ -96352,10 +96413,11 @@ const listCommand$a = make$4(
 
 const typesCommand = make$4(
   "types",
-  {},
-  () => gen(function* () {
+  { org: orgOption },
+  ({ org }) => gen(function* () {
     const api = yield* ApiService;
-    const eventTypes = yield* api.listAuditEventTypes().pipe(
+    const orgSlug = yield* resolveOrgSlug(org, api);
+    const eventTypes = yield* api.listAuditEventTypes(orgSlug).pipe(
       catchTag(
         "NotLoggedInError",
         (e) => gen(function* () {

package/docs/api-contract-inventory.md

@@ -53,7 +53,8 @@
 | P0-AGENT-02 | agent-admin | `aipctl admin agent create`, `update`, `delete`, `share`, `templates`; `aipctl agent enable`, `disable` | `createInstalledAgent`, `updateInstalledAgent`, `deleteInstalledAgent`, `getInstalledAgentShare`, `listAgentTemplates`, `updateInstalledAgentStatus` | api | `POST`, `PATCH`, `DELETE`, `GET`, `GET`, `PATCH` | `/api/cli/v1/organizations/{organizationSlug}/agents`; `/{installedAgentId}`; `/{installedAgentId}/share`; `/templates`; `/{installedAgentId}/status` | existing create/update/status bodies; templates collect bounded pages and retain the full catalog; share is read-only | create/update `{ id }`, void mutation responses, existing CLI template/share mapping | `resource/oas/modules/backend/cli/openapi.yaml`; shared legacy DTO refs | `backend/api/.../cli/generated/api/CliAgentApi.kt` | `generated-ready` | `P0` | `migrate` | none; AI operator/workflow/audit policy stays in existing domain owner | `AI-6344` | all eight operations capability/path tests, mutation non-replay, template paging, real CLI lifecycle/DB/audit and metadata 429 verification |
 | P0-AGENT-03 | agent-export | `aipctl admin agent export` (GA-CANDIDATE, production gated) | `exportInstalledAgent` | api | `GET` | `/web/admin/organizations/slug/{organizationSlug}/installed-agents/{installedAgentId}/export` | existing direct controller request | YAML `Buffer` | `backend/api/.../app/controller/AgentExportController.kt`; intentionally OAS-codegen excluded | none | `legacy-generated` | `P0` | `legacy-exception` | owner=`AgentExportController`; dedicated transfer contract, size/timeout/partial-file/authorization/audit gates remain | `AI-6380` | existing direct export path/Buffer/404 tests; production help remains hidden |
 | P1-CHAT-01 | agent-chat | `aipctl agent chat` | `agentNewChat`, `agentChat`, local `parseSseStream` | chat | `POST` + SSE | `/librechat/api/{orgSlug}/agent/new-chat`; `/librechat/api/{orgSlug}/agent/chat` | request body `{ agentInstallationId or conversationId, text, files: [] }` | local `AgentChatResult { text, conversationId }` parsed from SSE event fields `final`, `conversation.conversationId`, `responseMessage` | path source: `resource/oas/chat.yaml` | `frontend/packages/api/src/out/chat-types.ts#paths["/librechat/api/{orgSlug}/agent/new-chat"]`, `#paths["/librechat/api/{orgSlug}/agent/chat"]` | `stream-exception` | `P1` | `legacy-exception` | owner=`chat backend agent SSE stream contract`; rationale=`path exists in OpenAPI but final SSE event payload is still out-of-band`; removal condition=`official SSE event schema or versioned fixture is published with the chat contract`; incorporation plan=`bind CLI parser/tests to the published SSE fixture and drop local-only stream assumptions` | N/A | updated `src/core/api.test.ts`; covers content[] text, fallback text, malformed event skip, and no-final-event failure |
-| P1-AUTO-01 | automation | `aipctl automation list`, `get`, `create`, `update`, `delete`, `run`, `enable`, `disable`, `history`, `cancel`, `webhook-regen`, `triggers` | `listAutomations`, `getAutomation`, `createAutomation`, `updateAutomation`, `deleteAutomation`, `runAutomation`, `updateAutomationStatus`, `listAutomationHistories`, `cancelAutomationHistory`, `regenerateWebhookUrl`, `getTriggerProviderMetadata` | api | `GET`, `POST`, `PUT`, `DELETE` mix | `/api/web/organizations/slug/{organizationSlug}/automations...`; `/automation-trigger-providers/.../metadata` | automation pagination normalized to `{ page, pageSize, total }`; metadata calls now use provider-specific OAS paths and required args (`accountId`, `folderId`, `serviceType`) | local automation DTOs + webhook URL DTO | `resource/oas/modules/backend/automation/user/openapi.yaml` | `frontend/packages/api/src/out/modules/automation-user-types.ts#paths[...]` | `generated-ready` | `P1` | `keep` | none | N/A | updated `src/core/api.test.ts`, `commands/automation/automation.test.ts`, `commands/json-format.test.ts`; covers official pagination fields, provider-specific metadata routes, and unsupported-provider preflight failure |
+| P1-AUTO-01 | automation | `aipctl automation list`, `get`, `create`, `update`, `delete`, `enable`, `disable`, `history`, `triggers` | `listAutomations`, `getAutomation`, `createAutomation`, `updateAutomation`, `deleteAutomation`, `updateAutomationStatus`, `listAutomationHistories`, `getTriggerProviderMetadata` | api | `GET`, `POST`, `PUT`, `DELETE`, `PATCH` | `/api/cli/v1/organizations/{organizationSlug}/automations`; `/{automationId}`; `/{automationId}/status`; `/{automationId}/history`; `/triggers?type=...` | one-based pageNumber/pageSize (1..100); status `{ status }`; exactly one matching trigger branch; metadata retains required accountId/folderId/serviceType input | existing list/history domain DTOs; dedicated `GetCliAutomationResponse` and ID DTO; webhook detail only serviceType/boolean secretConfigured | `resource/oas/modules/backend/cli/openapi.yaml` → `v1_automations*.yaml`; request/list/history aliases reuse Automation user schemas | `backend/api/.../cli/generated/api/CliAutomationApi.kt` | `generated-ready` | `P1` | `migrate` | owner=`CLI Automation adapter`; Schedule/Webhook/My Drive management enabled; external account provider metadata/mutations return 403 before provider side effects; stored external detail never enriches remotely or fabricates account/folder validity | `AI-6344`; external lifecycle gate `AI-6380`; large pagination gate `AI-6413` | `src/core/automation-contract.test.ts`, `src/core/api.test.ts`, Automation command tests, `redaction.test.ts`, Backend safe-read/controller/audit tests, Gateway parity; real mise servers + production CLI CRUD/ownership/pagination/quota/DB/audit |
+| P1-AUTO-02 | automation-execution | `aipctl automation run`, `cancel`, `webhook-regen` (GA-CANDIDATE, production gated) | `runAutomation`, `cancelAutomationHistory`, `regenerateWebhookUrl` | api | `POST`, `DELETE`, `POST` | legacy `/api/web/organizations/slug/{organizationSlug}/automations/{automationId}/run`; `/histories/{seq}`; `/webhook-url/regen` | existing domain input | existing execution/history/webhook URL DTO | `resource/oas/modules/backend/automation/user/openapi.yaml` | `frontend/packages/api/src/out/modules/automation-user-types.ts#paths[...]` | `generated-ready` | `P1` | `legacy-exception` | owner=`Automation execution domain`; requires execution quota, idempotency/cancel lifetime, webhook secret rotation and safe output verification before customer enablement | `AI-6380` | existing legacy path/command tests; production availability keeps all three hidden |
 | CHAT-01 | chat-readonly | `aipctl chat list`, `aipctl chat get`, `aipctl chat messages` | `listConversations`, `getConversation`, `listMessages` | chat | `GET` | `/api/cli/v1/organizations/{orgSlug}/chats`; `/chats/{conversationId}`; `/chats/{conversationId}/messages` | list sends optional cursor; server fixes bounded `updatedAt desc` page size; detail/messages preserve organization and user ownership | local `ListConversationsResponse`, `ConversationDetail`, `ChatMessage[]` | `chat/packages/chat/src/modules/cli-chat/interface/cli-chat-read-v1.interface.controller.ts` | code-first controller contract with `operationId`/quota/capability extensions; no generated backend artifact | `oas-source-only` | `P0` | `migrate` | none; `CliChatReadInterfaceService` reuses the existing conversation/message ownership services and returns CLI-safe fields only | `AI-6344` | updated `src/core/api.test.ts`, Chat read service spec, Gateway registry/contract parity; local CLI/Chat verification covers cursor and no legacy fallback |
 | P0-DRIVE-01 | drive | `aipctl drive list`, `download`, `delete`, `mkdir`, `rename`, `usage` | `listDriveEntries`, `getDriveDownloadUrl`, `deleteDriveEntries`, `createDriveFolder`, `renameDriveEntry`, `getDriveUsage`, `downloadFromUrl` | api + external | `GET`, `POST`, `POST`, `POST`, `PATCH`, `GET`, external `GET` | CLI-managed basic CRUD: `/api/cli/v1/organizations/{organizationSlug}/drive/entries?count=200`, `/drive/entries/delete`, `/drive/folders`, `/drive/entries/{entryId}`, `/drive/usage`; download/upload remain Web/presigned | official list `{ path, hasNext, nextCursor, items }`; delete body `{ entryIds[] }`; mkdir optional `parentId`; rename body `{ newName }`; download body `{ entryIds: [id] }` | official drive list/download DTOs + external file buffer | `resource/oas/modules/backend/cli/openapi.yaml` → `v1_drive_*.yaml` (DTO aliases to organization Storage OAS); download/upload remain `resource/oas/modules/backend/organization/storage/openapi.yaml` | `backend/api/.../cli/generated/api/CliDriveApi.kt`; domain DTOs remain `com.querypie.duplo.api.drive.controller.generated.model.*` | `generated-ready` | `P0` | `migrate` | none; `CliDriveApiController` delegates membership, capacity and audit owner | `AI-6344` | `src/core/api.test.ts`, `CliSkillDriveApiControllerTest`, Gateway registry/contract parity; production CRUD/usage and local 403/404 checks (401/429 remain common gates) |
 | P0-DRIVE-02 | drive | `aipctl drive upload` | `createDriveUploadUrl` → `uploadToS3` → `completeDriveUpload` | api + external | `POST` → `PUT` → `POST` | `/drive/entries/upload-url`; external presigned `uploadUrl`; `/drive/entries/{entryId}/complete` | official upload request `{ parentId: null, filename, fileSize, mimeType }` | official `CreateDriveUploadUrlResponse { id, filename, uploadUrl, headers }` then `void` | `resource/oas/modules/backend/organization/storage/openapi.yaml` | `frontend/packages/api/src/out/modules/organization-storage-types.ts#paths["/api/web/organizations/slug/{organizationSlug}/drive/entries/upload-url"]`, `#paths["/api/web/organizations/slug/{organizationSlug}/drive/entries/{entryId}/complete"]` | `generated-ready` | `P0` | `migrate` | none | `AIP-PUB-05` | updated `src/core/api.test.ts`, `commands/drive/drive.test.ts`; covers `parentId: null` request and response `id`/`filename` usage |
@@ -61,10 +62,10 @@
 | P0-MODEL-01 | model | `aipctl model list` | `listModels` | chat | `GET` | `/api/cli/v1/organizations/{orgSlug}/models` | none | `{ models: string[], defaultModel? }` is mapped into `Model[]` and preserves active standard, custom/BYOK, and `etc` catalog IDs | code-first OAS: `chat/packages/chat/src/modules/cli-model-exec/interface/cli-model-exec-v1.interface.controller.ts` | runtime Swagger contract; the existing Web model endpoint remains an independent compatibility reference | `oas-source-only` | `P0` | `migrate` | owner=`Chat CliModelExecV1InterfaceController/ModelInternalService`; rationale=`the dedicated route reuses the existing organization-authorized model domain catalog instead of the narrowed model-exec SharedModel catalog`; removal condition=`none for the CLI route; Web migration is a separate work item`; incorporation plan=`keep the CLI path and capability/registry parity tests aligned with the code-first Chat contract` | `AIP-PUB-05` | `src/core/api.test.ts` verifies the dedicated path, production capability gate, default mapping, and preservation of custom/BYOK and `etc` IDs; Chat service/controller tests verify domain delegation and Swagger extensions |
 | P1-MODEL-EXEC-01 | model-exec | `aipctl model-exec models`, `get`, `sample`, `chat` | `listModelExecModels`, `executeModelExecChat` | chat | `GET`, `POST` | `/api/cli/v1/organizations/{orgSlug}/model-exec/models`; `/chat` | local `ModelExecChatRequest`; Chat Zod/Swagger DTO source `chat/packages/chat/src/modules/cli-model-exec/interface/dto/cli-model-exec.dto.ts` | local `ModelExecModelCatalog`, `ModelExecChatResponse` | code-first OAS: `chat/packages/chat/src/modules/cli-model-exec/interface/cli-model-exec-v1.interface.controller.ts` | runtime Swagger contract | `oas-source-only` | `P1` | `migrate` | none | `AIP-PUB-05` | `src/core/api.test.ts` verifies both v1 paths; Chat controller contract test verifies operation IDs, request/response schemas, delegation to the existing service, and absence of a v1 image route |
 | P1-MODEL-EXEC-02 | model-exec-image | `aipctl model-exec image generate` | `executeModelExecImageGeneration`; output uses `downloadFromUrl` | chat + external artifact URL | `POST`, external `GET` | legacy `/api/{orgSlug}/cli/model-exec/images/generations`; response `downloadUrl` | local `ModelExecImageGenerationRequest`; Chat DTO source `chat/packages/chat/src/modules/cli-model-exec/interface/dto/cli-model-exec.dto.ts` | local `ModelExecImageGenerationResponse`; image bytes from external URL | no GA OAS; legacy controller only | none | `oas-missing` | deferred | `hide` | owner=`chat CLI Model Exec API`; rationale=`synchronous image execution, external artifact lifetime, and cost recovery require the deferred async design`; removal condition=`image job/artifact/TTL/My Drive/cost gates pass`; incorporation plan=`publish a separate v1 image job contract only after the deferred design is implemented` | follow-up image hardening | existing image request/path test remains on the legacy route; customer capability must stay disabled |
-| USAGE-01 | usage | `aipctl admin usage credit`, `top-users`, `daily-graph`, `daily-users`, `mcp-top` | `getCreditStatistics`, `getCreditTopUsers`, `getCreditDailyGraph`, `getCreditDailyUsers`, `getMcpTopTools` | api | `GET` | `/api/web/admin/organizations/slug/{organizationSlug}/usage/...` | query `{ startDt,endDt,limit,pageNumber,pageSize,userId }` | local usage DTOs, `DailyUsageDetailsResponse.pagination { page,pageSize,total }` | `resource/oas/modules/backend/usage/openapi.yaml` | `frontend/packages/api/src/out/modules/usage-types.ts#paths[...]` | `generated-ready` | N/A | `keep` | none | N/A | existing `commands/usage/usage.test.ts`; needed generated path snapshots |
-| AUDIT-01 | audit | `aipctl admin audit list`, `types` | `listAuditLogs`, `listAuditEventTypes` | api | `GET` | `/api/web/audit/organization/slug/{organizationSlug}`; `/api/web/audit/event/types` | query `{ eventType,page,pageSize }` | local `ListAuditResponse`, `AuditEventType[]` | `resource/oas/modules/backend/audit/openapi.yaml` | `frontend/packages/api/src/out/modules/backend-audit-types.ts#paths[...]` | `generated-ready` | N/A | `keep` | none | N/A | existing `commands/audit/audit.test.ts`; needed generated path snapshots |
-| TUNNEL-01 | tunnel | `aipctl admin tunnel status`, `config`, `token` | `getTunnelStatus`, `getTunnelConfig`, `createTunnelToken` | api | `GET`, `GET`, `POST` | `/api/web/edge-tunnel/v2/organizations/slug/{organizationSlug}/status`; `/config`; `/token` | none | local `TunnelStatus`, `TunnelConfig`, `void` | `resource/oas/modules/backend/tunnel/openapi.yaml` | `frontend/packages/api/src/out/modules/tunnel-types.ts#paths[...]` | `generated-ready` | N/A | `keep` | none | N/A | existing `commands/tunnel/tunnel.test.ts`; needed v2 path snapshot |
-| P1-PRESET-01 | preset | `aipctl admin preset list`, `get`, `create`, `update`, `rename`, `delete`, `set-default`, `unset-default`, `regen-key`, `regen-static-key` | `listPresets`, `getPreset`, `createPreset`, `updatePreset`, `renamePreset`, `deletePreset`, `setPresetAsDefault`, `unsetPresetAsDefault`, `regenPresetKey`, `regenPresetStaticKey` | api | `GET`, `POST`, `PUT`, `PATCH`, `DELETE` mix | `/api/web/presets/v2`; `/api/web/presets/{presetId}`; `/key`; `/static-key`; `/default` | legacy preset API kept; delete response is contract-aligned to 204 No Content and CLI treats delete as endpoint-specific void response to tolerate deployed 200 empty drift | local preset DTOs with installation/json command fields; delete returns `void` | `resource/oas/duplo-web.yaml` | `frontend/packages/api/src/out/user-types.ts#paths["/api/web/presets/v2"]`, `#paths["/api/web/presets/{presetId}"]`, `#paths["/api/web/presets/{presetId}/default"]` | `legacy-generated` | `P1` | `keep` | owner=`backend app PresetsApiController`; rationale=`runtime returned 200 empty while generated/OAS says 204, causing JSON parse false failure`; removal condition=`204 is deployed everywhere and CLI no longer needs 200-empty tolerance`; incorporation plan=`keep endpoint-specific void mode, do not add global 200-empty fallback` | N/A | updated `src/core/api.test.ts`, `commands/admin/preset/preset.test.ts`, `../docs/how-to/aip-cli-usage.md`, `backend/api/src/test/kotlin/.../PresetsApiControllerTest.kt`; covers admin namespace docs, `/v2`, `/{id}`, `/default`, `/key`, `/static-key`, delete 200-empty tolerance, and JSON endpoint 200-empty failure |
+| USAGE-01 | usage | `aipctl admin usage credit`, `top-users`, `daily-graph`, `daily-users`, `mcp-top` | `getCreditStatistics`, `getCreditTopUsers`, `getCreditDailyGraph`, `getCreditDailyUsers`, `getMcpTopTools` | api | `GET` | `/api/cli/v1/organizations/{organizationSlug}/admin/usage/credit`; `/admin/usage/top-users`; `/admin/usage/daily-graph`; `/admin/usage/daily-users`; `/admin/usage/mcp-top` | query `{ startDt,endDt,limit,pageNumber,pageSize,userId }`; daily-users uses one-based page/pageSize 1..100 | existing usage DTOs; `DailyUsageDetailsResponse.pagination { page,pageSize,total }` normalized to CLI output | `resource/oas/modules/backend/cli/openapi.yaml` → `paths/v1_admin_usage_*.yaml`; response aliases reuse `resource/oas/modules/backend/usage/components/schemas/*` | `backend/api/.../cli/generated/api/CliUsageApi.kt`; domain DTOs remain `com.querypie.duplo.api.usage.generated.model.*` | `generated-ready` | `P0` | `migrate` | none; dedicated adapter preserves organization admin authorization, three-month/future-date validation, and existing aggregation service | `AI-6344`; query/page workload bounds remain `AI-6413` | `src/core/usage-audit-contract.test.ts`, usage command tests, `CliUsageAuditApiControllerTest`, Gateway registry/contract parity; real production CLI verifies all five paths, 401/403/404/400 and future-date clamp |
+| AUDIT-01 | audit | `aipctl admin audit list`, `types` | `listAuditLogs`, `listAuditEventTypes` | api | `GET` | `/api/cli/v1/organizations/{organizationSlug}/admin/audit`; `/api/cli/v1/organizations/{organizationSlug}/admin/audit/types` | query `{ eventType,page,pageSize }`; page is one-based and pageSize is 1..100 | existing `ListAuditResponse`/`AuditEventType[]`; page/total is normalized for CLI pagination output | `resource/oas/modules/backend/cli/openapi.yaml` → `paths/v1_admin_audit*.yaml`; response aliases reuse `resource/oas/modules/backend/audit/components/schemas/*` | `backend/api/.../cli/generated/api/CliAuditApi.kt`; domain DTOs remain `com.querypie.duplo.api.generated.models.*` | `generated-ready` | `P0` | `migrate` | none; dedicated adapter preserves AUDIT_LOGS capability, plan/retention/viewable-period and organization filters | `AI-6344`; audit volume/query workload bounds remain `AI-6413` | `src/core/usage-audit-contract.test.ts`, `commands/admin/audit/*.test.ts`, `CliUsageAuditApiControllerTest`, Gateway registry/contract parity; real production CLI verifies page 2/3, types, 401/403/404/400 |
+| TUNNEL-01 | tunnel | `aipctl admin tunnel status`, `config`, `token` | `getTunnelStatus`, `getTunnelConfig`, `createTunnelToken` | api | `GET`, `GET`, `POST` | status target: `/api/cli/v1/organizations/{organizationSlug}/admin/tunnel/status`; current legacy `/api/web/edge-tunnel/v2/organizations/slug/{organizationSlug}/status`; `/config`; `/token` | none | local `TunnelStatus`, `TunnelConfig`, `void` | current: `resource/oas/modules/backend/tunnel/openapi.yaml`; target status: Backend CLI OAS | current tunnel generated reference; target CLI generated interface pending | `legacy-generated` | N/A | `migrate` | owner=`backend tunnel domain`; rationale=`status is safe GA-DIRECT but config/token expose sensitive material`; removal condition=`status receives its dedicated v1 contract`; incorporation plan=`migrate status only and keep config/token capability-disabled until --show-sensitive, TTL, redaction, and audit gates pass` | `AI-6344` task 3.3d; sensitive gate `AI-6380` | existing tunnel command tests; needed v1 status path/registry/permission/redaction and real CLI verification |
+| P1-PRESET-01 | preset | `aipctl admin preset list`, `get`, `create`, `update`, `rename`, `delete`, `set-default`, `unset-default`; key rotation commands remain candidates | `listPresets`, `getPreset`, `createPreset`, `updatePreset`, `renamePreset`, `deletePreset`, `setPresetAsDefault`, `unsetPresetAsDefault`; `regenPresetKey`, `regenPresetStaticKey` | api | `GET`, `POST`, `PUT`, `PATCH`, `DELETE` mix | target `/api/cli/v1/organizations/{organizationSlug}/admin/presets/**`; current legacy `/api/web/presets/v2`; `/api/web/presets/{presetId}`; `/key`; `/static-key`; `/default` | dedicated v1 basic-management contract pending; current delete is contract-aligned to 204 and CLI tolerates deployed 200 empty only for that legacy void endpoint | local preset DTOs with installation/json command fields; delete returns `void`; key values must not enter the GA-DIRECT response | current `resource/oas/duplo-web.yaml`; target Backend CLI OAS | current legacy generated reference; target CLI generated interface pending | `legacy-generated` | `P1` | `migrate` | owner=`backend app PresetsApiController`/preset domain; rationale=`basic management is GA-DIRECT while key/static-key rotation requires a separate secret/rollback gate`; removal condition=`eight basic operations receive dedicated v1 contracts and actual CLI verification`; incorporation plan=`reuse domain authorization/audit, preserve endpoint-specific void handling, and keep key rotation gated` | `AI-6344` task 3.3b; key gate `AI-6380` | existing legacy tests plus needed v1 OAS/adapter/registry/manifest, permission/audit/idempotency/destructive UX and real mise CLI lifecycle |
 
 ## 공통 CLI request quota 오류 계약
 
@@ -96,7 +97,7 @@ CLI `ApiError`는 위 여섯 code에서 allowlist된 quota detail만 보존하
 ### P1 queue
 
 - `P1-INT-01` integration legacy-exception documented; current/legacy path+DTO tests added
-- `P1-AUTO-01` automation pagination/trigger metadata alignment done
+- `P1-AUTO-01` Automation management uses eight dedicated v1 operations; Schedule/Webhook/My Drive lifecycle and stored safe reads are implemented. External provider metadata/mutations and `P1-AUTO-02` remain gated.
 - `P1-PRESET-01` preset admin namespace/docs + legacy path tests done
 - `P1-SKILL-01` skill JSON/help/docs field sync done
 - `P1-CHAT-01` chat SSE fixture tests added for final/fallback/error cases

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "aipctl",
-  "version": "2026.9.11",
+  "version": "2026.10.2",
   "description": "QueryPie AIP and MCP CLI tool",
   "author": "QueryPie",
   "license": "UNLICENSED",
@@ -22,8 +22,8 @@
     "node": ">=24.18.0"
   },
   "metadata": {
-    "contentHash": "3ba1c423da1af4ecb2cfea8ed116569d9a97e579727ca173bd87fd17a77cdd32",
-    "wrapperHash": "40c7bf7e201612bd3435325d09cd6eebe577f5e56184f8e2c0f0a0b0bfa58368",
+    "contentHash": "866cf35ffc9e44ebc83327f46bc0f77d229aec2f7b688bbdf0074ae937d41e7e",
+    "wrapperHash": "2081868ac4d9ac9204f9f168fc0f33afb220ce17fdaeceb1060e9376ed3b138f",
     "nativeHash": "006b08c3e391f4571d9b7c0f12d684fe2448106259e7e0581b10f9be362452e9"
   },
   "optionalDependencies": {