aipctl 2026.9.7 → 2026.9.9

package/build/index.cjs

@@ -778,7 +778,7 @@ const isIterable = input => typeof input === "string" || hasProperty(input, Symb
  * @since 2.0.0
  * @see isObject
  */
-const isRecord$3 = input => isRecordOrArray(input) && !Array.isArray(input);
+const isRecord$2 = input => isRecordOrArray(input) && !Array.isArray(input);
 /**
  * A refinement that checks if a value is `PromiseLike`. It performs a duck-typing
  * check for a `.then` method.
@@ -25158,7 +25158,7 @@ const go = (ast, isDecoding) => {
         const concurrency = getConcurrency(ast);
         const batching = getBatching(ast);
         return (input, options) => {
-          if (!isRecord$3(input)) {
+          if (!isRecord$2(input)) {
             return left(new Type(ast, input));
           }
           const allErrors = options?.errors === "all";
@@ -89670,7 +89670,7 @@ const injectedBuildEnv = "dev".length > 0 ? "dev" : "local";
 if (!isBuildEnv(injectedBuildEnv)) {
   throw new Error(`Invalid AIPCTL_BUILD_ENV: ${injectedBuildEnv}`);
 }
-const VERSION = "2026.9.7".length > 0 ? "2026.9.7" : "0.0.0";
+const VERSION = "2026.9.9".length > 0 ? "2026.9.9" : "0.0.0";
 const BUILD_ENV = injectedBuildEnv;
 const INCLUDE_NATIVE_LOGS = BUILD_ENV !== "prod";
 
@@ -89804,6 +89804,14 @@ const normalizeAipArgs = (args) => {
 };
 
 const implementedCommandOperationIds = /* @__PURE__ */ new Set([
+  "listCliAgents",
+  "getCliAgent",
+  "listCliAgentTemplates",
+  "createCliAgent",
+  "updateCliAgent",
+  "deleteCliAgent",
+  "updateCliAgentStatus",
+  "getCliAgentShare",
   "getCliMe",
   "getCliUserSettings",
   "listCliOrganizations",
@@ -89814,6 +89822,14 @@ const implementedCommandOperationIds = /* @__PURE__ */ new Set([
   "createCliModelChatExecution"
 ]);
 const releaseEnabledCommandOperationIds = /* @__PURE__ */ new Set([
+  "listCliAgents",
+  "getCliAgent",
+  "listCliAgentTemplates",
+  "createCliAgent",
+  "updateCliAgent",
+  "deleteCliAgent",
+  "updateCliAgentStatus",
+  "getCliAgentShare",
   "getCliMe",
   "getCliUserSettings",
   "listCliOrganizations",
@@ -90634,14 +90650,14 @@ class InvalidAppUrlError extends Error {
     this.rawValue = rawValue;
   }
 }
-function isRecord$2(value) {
+function isRecord$1(value) {
   return typeof value === "object" && value !== null;
 }
 function optionalString$1(value) {
   return typeof value === "string" ? value : void 0;
 }
 function parseCurrentOrganization(value) {
-  if (!isRecord$2(value)) {
+  if (!isRecord$1(value)) {
     return void 0;
   }
   const id = optionalString$1(value["id"]);
@@ -90653,7 +90669,7 @@ function parseCurrentOrganization(value) {
   return { id, slug, name };
 }
 function normalizeLoadedConfig(value) {
-  if (!isRecord$2(value)) {
+  if (!isRecord$1(value)) {
     return {};
   }
   return {
@@ -92887,11 +92903,11 @@ const CREDENTIALS_FILE = path__namespace.join(CONFIG_DIR$1, "credentials.json");
 const CREDENTIALS_LOCK_FILE = path__namespace.join(CONFIG_DIR$1, "credentials.lock");
 class CredentialServiceTag extends Tag$1("CredentialService")() {
 }
-function isNonEmptyString$1(value) {
+function isNonEmptyString(value) {
   return typeof value === "string" && value.length > 0;
 }
 function hasOAuthClient(credentials) {
-  return isNonEmptyString$1(credentials?.clientId);
+  return isNonEmptyString(credentials?.clientId);
 }
 function isAccessTokenExpired(credentials, bufferMs = 0, now = Date.now()) {
   if (!credentials?.expiresAt) {
@@ -92900,13 +92916,13 @@ function isAccessTokenExpired(credentials, bufferMs = 0, now = Date.now()) {
   return credentials.expiresAt - bufferMs <= now;
 }
 function hasValidRefreshToken(credentials, now) {
-  return isNonEmptyString$1(credentials.refreshToken) && (credentials.refreshExpiresAt === void 0 || credentials.refreshExpiresAt > now);
+  return isNonEmptyString(credentials.refreshToken) && (credentials.refreshExpiresAt === void 0 || credentials.refreshExpiresAt > now);
 }
 function getCredentialAuthStatus(credentials, now = Date.now(), options = {}) {
   if (!hasOAuthClient(credentials)) {
     return "missing";
   }
-  const needsAccessRefresh = options.forceRefresh || !isNonEmptyString$1(credentials.accessToken) || isAccessTokenExpired(credentials, options.accessExpiryBufferMs ?? 0, now);
+  const needsAccessRefresh = options.forceRefresh || !isNonEmptyString(credentials.accessToken) || isAccessTokenExpired(credentials, options.accessExpiryBufferMs ?? 0, now);
   if (!needsAccessRefresh) {
     return "authenticated";
   }
@@ -93902,7 +93918,7 @@ function trimTrailingSlash(value) {
 function toError$1(error, fallbackMessage) {
   return error instanceof Error ? new Error(maskSensitiveText(error.message)) : new Error(maskSensitiveText(fallbackMessage));
 }
-function isRecord$1(value) {
+function isRecord(value) {
   return typeof value === "object" && value !== null;
 }
 function optionalString(value) {
@@ -93912,7 +93928,7 @@ function optionalNumber(value) {
   return typeof value === "number" && Number.isFinite(value) ? value : void 0;
 }
 function parseOAuthTokenResponse(value) {
-  if (!isRecord$1(value)) {
+  if (!isRecord(value)) {
     throw new OAuthRequestError("OAuth token response was not a JSON object", void 0, "invalid_token_response");
   }
   const accessToken = optionalString(value["access_token"]);
@@ -94441,55 +94457,6 @@ async function acquire() {
   }
 }
 
-const SERVER_CAPABILITY_SCHEMA_VERSION = 1;
-class ServerCapabilityError extends Error {
-  code;
-  constructor(code, message) {
-    super(message);
-    this.name = "ServerCapabilityError";
-    this.code = code;
-  }
-}
-function parseEnabledServerOperations(value) {
-  if (!isRecord(value) || value["schemaVersion"] !== SERVER_CAPABILITY_SCHEMA_VERSION) {
-    throw new ServerCapabilityError(
-      "CLI_CAPABILITIES_INCOMPATIBLE",
-      "The server returned an unsupported CLI capability schema."
-    );
-  }
-  const enabledOperations = value["enabledOperations"];
-  if (!Array.isArray(enabledOperations)) {
-    throw new ServerCapabilityError(
-      "CLI_CAPABILITIES_INCOMPATIBLE",
-      "The server returned an invalid CLI capability operation list."
-    );
-  }
-  const operationIds = /* @__PURE__ */ new Set();
-  for (const operation of enabledOperations) {
-    if (!isRecord(operation) || !isNonEmptyString(operation["operationId"]) || !isNonEmptyString(operation["capability"]) || operationIds.has(operation["operationId"])) {
-      throw new ServerCapabilityError(
-        "CLI_CAPABILITIES_INCOMPATIBLE",
-        "The server returned an invalid CLI capability operation."
-      );
-    }
-    operationIds.add(operation["operationId"]);
-  }
-  return operationIds;
-}
-function requireEnabledServerOperation(enabledOperations, operationId) {
-  if (enabledOperations.has(operationId)) return;
-  throw new ServerCapabilityError(
-    "CLI_OPERATION_NOT_ENABLED",
-    `CLI operation "${operationId}" is not enabled by the server.`
-  );
-}
-function isRecord(value) {
-  return typeof value === "object" && value !== null && !Array.isArray(value);
-}
-function isNonEmptyString(value) {
-  return typeof value === "string" && value.length > 0;
-}
-
 class ApiError extends TaggedError$1("ApiError") {
 }
 class NotLoggedInError extends TaggedError$1("NotLoggedInError") {
@@ -94654,26 +94621,31 @@ async function toApiError(response) {
     errorData = await response.json();
   } catch {
   }
-  const details = isCliQuotaErrorCode(errorData.code) ? parseCliQuotaErrorDetails(errorData.details) : void 0;
-  const retryAfterSeconds = details ? parseRetryAfterSeconds(response.headers.get("retry-after")) : void 0;
+  const code = errorData.code ?? errorData.errorCode;
+  const details = isCliQuotaErrorCode(code) ? parseCliQuotaErrorDetails(errorData.details, code) : void 0;
+  const retryAfterSeconds = details ? details.limitKind === "concurrent" ? void 0 : details.retryAfterSeconds ?? parseRetryAfterSeconds(response.headers.get("retry-after")) : void 0;
   return createApiError({
     message: errorData.message || `HTTP ${response.status}: ${response.statusText}`,
     statusCode: response.status,
-    code: errorData.code,
+    code,
     ...details ? { details } : {},
     ...retryAfterSeconds === void 0 ? {} : { retryAfterSeconds }
   });
 }
 function isCliQuotaErrorCode(code) {
-  return code === "CLI_QUOTA_EXCEEDED" || code === "CLI_QUOTA_POLICY_UNAVAILABLE" || code === "CLI_QUOTA_LIMITER_UNAVAILABLE";
+  return code === "CLI_QUOTA_EXCEEDED" || code === "CLI_QUOTA_POLICY_UNAVAILABLE" || code === "CLI_QUOTA_LIMITER_UNAVAILABLE" || code === "CLI_TEXT_DAILY_LIMIT" || code === "CLI_TEXT_USER_CONCURRENCY_LIMIT" || code === "CLI_TEXT_ORGANIZATION_CONCURRENCY_LIMIT";
+}
+function isCliTextQuotaErrorCode(code) {
+  return code === "CLI_TEXT_DAILY_LIMIT" || code === "CLI_TEXT_USER_CONCURRENCY_LIMIT" || code === "CLI_TEXT_ORGANIZATION_CONCURRENCY_LIMIT";
 }
-function parseCliQuotaErrorDetails(value) {
+function parseCliQuotaErrorDetails(value, code) {
   if (typeof value !== "object" || value === null || Array.isArray(value)) return void 0;
   const details = value;
-  if (details["limitKind"] !== "request_rate") return void 0;
-  if (typeof details["quotaClass"] !== "string" || !["bootstrap", "metadata", "text-execution", "control-read"].includes(details["quotaClass"])) {
-    return void 0;
-  }
+  const sourceLimitKind = details["limitKind"];
+  const limitKind = sourceLimitKind === "request_rate" ? "request_rate" : sourceLimitKind === "dailyTextAdmissions" ? "daily" : sourceLimitKind === "concurrentTextExecutions" ? "concurrent" : void 0;
+  if (!limitKind) return void 0;
+  const quotaClass = details["quotaClass"] ?? (isCliTextQuotaErrorCode(code) ? "text-execution" : void 0);
+  if (typeof quotaClass !== "string" || !["bootstrap", "metadata", "text-execution", "control-read"].includes(quotaClass)) return void 0;
   if (typeof details["requestId"] !== "string" || details["requestId"].length === 0) return void 0;
   const scope = details["scope"];
   if (scope !== void 0 && (typeof scope !== "string" || !["user", "organization", "bootstrap", "control-read"].includes(scope))) {
@@ -94683,17 +94655,42 @@ function parseCliQuotaErrorDetails(value) {
   if (resetAt !== void 0 && (typeof resetAt !== "string" || !Number.isFinite(Date.parse(resetAt)))) {
     return void 0;
   }
+  const retryAfterSeconds = details["retryAfterSeconds"];
+  if (retryAfterSeconds !== void 0 && (typeof retryAfterSeconds !== "number" || !Number.isSafeInteger(retryAfterSeconds) || retryAfterSeconds < 0)) {
+    return void 0;
+  }
   const dependency = details["dependency"];
   if (dependency !== void 0 && dependency !== "policy" && dependency !== "limiter") return void 0;
+  if (!isCliQuotaCombinationValid(code, limitKind, quotaClass, scope, dependency)) return void 0;
   return {
-    limitKind: "request_rate",
-    quotaClass: details["quotaClass"],
+    limitKind,
+    quotaClass,
     requestId: details["requestId"],
     ...scope === void 0 ? {} : { scope },
-    ...resetAt === void 0 ? {} : { resetAt },
+    ...resetAt === void 0 || limitKind === "concurrent" ? {} : { resetAt },
+    ...retryAfterSeconds === void 0 || limitKind === "concurrent" ? {} : { retryAfterSeconds },
     ...dependency === void 0 ? {} : { dependency }
   };
 }
+function isCliQuotaCombinationValid(code, limitKind, quotaClass, scope, dependency) {
+  if (isCliTextQuotaErrorCode(code)) {
+    const expectedLimitKind = code === "CLI_TEXT_DAILY_LIMIT" ? "daily" : "concurrent";
+    const expectedScope = code === "CLI_TEXT_ORGANIZATION_CONCURRENCY_LIMIT" ? "organization" : "user";
+    return limitKind === expectedLimitKind && quotaClass === "text-execution" && scope === expectedScope && dependency === void 0;
+  }
+  if (limitKind !== "request_rate") return false;
+  const validScope = scope === void 0 || (quotaClass === "bootstrap" ? scope === "bootstrap" : quotaClass === "control-read" ? scope === "control-read" : scope === "user" || scope === "organization");
+  if (!validScope) return false;
+  switch (code) {
+    case "CLI_QUOTA_EXCEEDED":
+      return dependency === void 0;
+    case "CLI_QUOTA_POLICY_UNAVAILABLE":
+      return dependency === void 0 || dependency === "policy";
+    case "CLI_QUOTA_LIMITER_UNAVAILABLE":
+      return dependency === void 0 || dependency === "limiter";
+  }
+  return false;
+}
 function parseRetryAfterSeconds(value) {
   if (!value || !/^\d+$/.test(value)) return void 0;
   const parsed = Number(value);
@@ -94952,7 +94949,7 @@ const makeApiServiceLive = (buildEnv) => effect$1(
     });
     const baseUrl = () => loadConfiguredApiBaseUrl();
     const chatBaseUrl = () => loadConfiguredChatBaseUrl();
-    const requireServerOperation = (operationId, token) => {
+    const requireReleaseEnabledOperation = (operationId) => {
       if (buildEnv !== "prod") return _void;
       if (!releaseEnabledCommandOperationIds.has(operationId)) {
         return fail$3(createApiError({
@@ -94961,24 +94958,7 @@ const makeApiServiceLive = (buildEnv) => effect$1(
           code: "CLI_OPERATION_NOT_ENABLED"
         }));
       }
-      return gen(function* () {
-        const response = yield* makeRequest(
-          baseUrl,
-          "/api/cli/v1/capabilities",
-          token
-        );
-        yield* try_({
-          try: () => {
-            const enabledOperations = parseEnabledServerOperations(response);
-            requireEnabledServerOperation(enabledOperations, operationId);
-          },
-          catch: (error) => createApiError({
-            message: error instanceof Error ? error.message : "CLI server capability validation failed",
-            statusCode: error instanceof ServerCapabilityError && error.code === "CLI_OPERATION_NOT_ENABLED" ? 404 : 503,
-            code: error instanceof ServerCapabilityError ? error.code : "CLI_CAPABILITIES_INCOMPATIBLE"
-          })
-        });
-      });
+      return _void;
     };
     const subscribeAgentChatStream = (orgSlug, conversationId, token) => gen(function* () {
       const resolvedChatBaseUrl = yield* requireChatBaseUrlEffect();
@@ -95046,12 +95026,12 @@ const makeApiServiceLive = (buildEnv) => effect$1(
     return {
       listOrganizations: () => gen(function* () {
         const token = yield* getAccessToken();
-        yield* requireServerOperation("listCliOrganizations", token);
+        yield* requireReleaseEnabledOperation("listCliOrganizations");
         return yield* makeRequest(baseUrl, "/api/cli/v1/organizations", token);
       }),
       getOrganization: (slug) => gen(function* () {
         const token = yield* getAccessToken();
-        yield* requireServerOperation("listCliOrganizations", token);
+        yield* requireReleaseEnabledOperation("listCliOrganizations");
         const orgs = yield* makeRequest(baseUrl, "/api/cli/v1/organizations", token);
         const org = orgs.find((o) => o.slug === slug);
         if (!org) {
@@ -95291,7 +95271,8 @@ const makeApiServiceLive = (buildEnv) => effect$1(
       // Phase 2: Agent management
       listInstalledAgents: (orgSlug) => gen(function* () {
         const token = yield* getAccessToken();
-        const path = `/api/web/organizations/slug/${encodeURIComponent(orgSlug)}/installed-agents`;
+        yield* requireReleaseEnabledOperation("listCliAgents");
+        const path = `/api/cli/v1/organizations/${encodeURIComponent(orgSlug)}/agents`;
         const raw = yield* makeRequest(baseUrl, path, token);
         return {
           pagination: normalizePageNumberPagination(raw.pagination, raw.list.length),
@@ -95300,7 +95281,8 @@ const makeApiServiceLive = (buildEnv) => effect$1(
       }),
       getInstalledAgent: (orgSlug, agentId) => gen(function* () {
         const token = yield* getAccessToken();
-        const path = `/api/web/organizations/slug/${encodeURIComponent(orgSlug)}/installed-agents/${encodeURIComponent(agentId)}`;
+        yield* requireReleaseEnabledOperation("getCliAgent");
+        const path = `/api/cli/v1/organizations/${encodeURIComponent(orgSlug)}/agents/${encodeURIComponent(agentId)}`;
         const raw = yield* makeRequest(baseUrl, path, token);
         return {
           data: {
@@ -95312,7 +95294,8 @@ const makeApiServiceLive = (buildEnv) => effect$1(
       }),
       updateInstalledAgentStatus: (orgSlug, agentId, status) => gen(function* () {
         const token = yield* getAccessToken();
-        const path = `/api/web/admin/organizations/slug/${encodeURIComponent(orgSlug)}/installed-agents/${encodeURIComponent(agentId)}/status`;
+        yield* requireReleaseEnabledOperation("updateCliAgentStatus");
+        const path = `/api/cli/v1/organizations/${encodeURIComponent(orgSlug)}/agents/${encodeURIComponent(agentId)}/status`;
         return yield* makeRequest(baseUrl, path, token, {
           method: "PATCH",
           body: { status }
@@ -95391,7 +95374,7 @@ const makeApiServiceLive = (buildEnv) => effect$1(
       // Phase 4: Monitoring
       listOrgMembers: (orgSlug) => gen(function* () {
         const token = yield* getAccessToken();
-        yield* requireServerOperation("listCliOrganizationMembers", token);
+        yield* requireReleaseEnabledOperation("listCliOrganizationMembers");
         const path = `/api/cli/v1/organizations/${encodeURIComponent(orgSlug)}/members`;
         const raw = yield* makeRequest(baseUrl, path, token);
         return {
@@ -95407,7 +95390,7 @@ const makeApiServiceLive = (buildEnv) => effect$1(
       listModels: (orgSlug) => gen(function* () {
         yield* requireChatBaseUrlEffect();
         const token = yield* getAccessToken();
-        yield* requireServerOperation("listCliModels", token);
+        yield* requireReleaseEnabledOperation("listCliModels");
         const path = `/api/cli/v1/organizations/${encodeURIComponent(orgSlug)}/models`;
         const response = yield* makeRequest(chatBaseUrl, path, token);
         return response.models.map((id) => ({
@@ -95418,14 +95401,14 @@ const makeApiServiceLive = (buildEnv) => effect$1(
       listModelExecModels: (orgSlug) => gen(function* () {
         yield* requireChatBaseUrlEffect();
         const token = yield* getAccessToken();
-        yield* requireServerOperation("listCliModelExecModels", token);
+        yield* requireReleaseEnabledOperation("listCliModelExecModels");
         const path = `/api/cli/v1/organizations/${encodeURIComponent(orgSlug)}/model-exec/models`;
         return yield* makeRequest(chatBaseUrl, path, token);
       }),
       executeModelExecChat: (orgSlug, body) => gen(function* () {
         yield* requireChatBaseUrlEffect();
         const token = yield* getAccessToken();
-        yield* requireServerOperation("createCliModelChatExecution", token);
+        yield* requireReleaseEnabledOperation("createCliModelChatExecution");
         const path = `/api/cli/v1/organizations/${encodeURIComponent(orgSlug)}/model-exec/chat`;
         return yield* makeRequest(chatBaseUrl, path, token, {
           method: "POST",
@@ -95567,7 +95550,7 @@ const makeApiServiceLive = (buildEnv) => effect$1(
       // Phase 6: Auth enhancements
       getMe: () => gen(function* () {
         const token = yield* getAccessToken();
-        yield* requireServerOperation("getCliMe", token);
+        yield* requireReleaseEnabledOperation("getCliMe");
         return yield* makeRequest(baseUrl, "/api/cli/v1/me", token);
       }),
       refreshToken: () => refreshAccessToken({ force: true }),
@@ -95605,7 +95588,8 @@ const makeApiServiceLive = (buildEnv) => effect$1(
       // Phase 8: Agent admin CRUD
       createInstalledAgent: (orgSlug, body) => gen(function* () {
         const token = yield* getAccessToken();
-        const path = `/api/web/admin/organizations/slug/${encodeURIComponent(orgSlug)}/installed-agents`;
+        yield* requireReleaseEnabledOperation("createCliAgent");
+        const path = `/api/cli/v1/organizations/${encodeURIComponent(orgSlug)}/agents`;
         return yield* makeRequest(baseUrl, path, token, {
           method: "POST",
           body
@@ -95613,7 +95597,8 @@ const makeApiServiceLive = (buildEnv) => effect$1(
       }),
       updateInstalledAgent: (orgSlug, agentId, body) => gen(function* () {
         const token = yield* getAccessToken();
-        const path = `/api/web/admin/organizations/slug/${encodeURIComponent(orgSlug)}/installed-agents/${encodeURIComponent(agentId)}`;
+        yield* requireReleaseEnabledOperation("updateCliAgent");
+        const path = `/api/cli/v1/organizations/${encodeURIComponent(orgSlug)}/agents/${encodeURIComponent(agentId)}`;
         return yield* makeRequest(baseUrl, path, token, {
           method: "PATCH",
           body
@@ -95621,7 +95606,8 @@ const makeApiServiceLive = (buildEnv) => effect$1(
       }),
       deleteInstalledAgent: (orgSlug, agentId) => gen(function* () {
         const token = yield* getAccessToken();
-        const path = `/api/web/admin/organizations/slug/${encodeURIComponent(orgSlug)}/installed-agents/${encodeURIComponent(agentId)}`;
+        yield* requireReleaseEnabledOperation("deleteCliAgent");
+        const path = `/api/cli/v1/organizations/${encodeURIComponent(orgSlug)}/agents/${encodeURIComponent(agentId)}`;
         return yield* makeRequest(baseUrl, path, token, { method: "DELETE" });
       }),
       exportInstalledAgent: (orgSlug, agentId) => gen(function* () {
@@ -95647,7 +95633,8 @@ const makeApiServiceLive = (buildEnv) => effect$1(
       }),
       getInstalledAgentShare: (orgSlug, agentId) => gen(function* () {
         const token = yield* getAccessToken();
-        const path = `/api/web/admin/organizations/slug/${encodeURIComponent(orgSlug)}/installed-agents/${encodeURIComponent(agentId)}/share`;
+        yield* requireReleaseEnabledOperation("getCliAgentShare");
+        const path = `/api/cli/v1/organizations/${encodeURIComponent(orgSlug)}/agents/${encodeURIComponent(agentId)}/share`;
         const raw = yield* makeRequest(baseUrl, path, token);
         const sharedUserList = yield* try_({
           try: () => normalizeSharedUserList(raw.sharedUserList),
@@ -95660,11 +95647,19 @@ const makeApiServiceLive = (buildEnv) => effect$1(
       }),
       listAgentTemplates: (orgSlug) => gen(function* () {
         const token = yield* getAccessToken();
-        const path = `/api/web/admin/organizations/slug/${encodeURIComponent(orgSlug)}/agents`;
-        const raw = yield* makeRequest(baseUrl, path, token);
+        yield* requireReleaseEnabledOperation("listCliAgentTemplates");
+        const path = `/api/cli/v1/organizations/${encodeURIComponent(orgSlug)}/agents/templates`;
+        const templates = [];
+        let page = 1;
+        while (true) {
+          const raw = yield* makeRequest(baseUrl, page === 1 ? path : `${path}?page=${page}`, token);
+          templates.push(...raw.list);
+          if (raw.list.length === 0 || page * raw.pagination.pageSize >= raw.pagination.total) break;
+          page += 1;
+        }
         return {
-          pagination: { pageNumber: 1, pageSize: raw.length, totalCount: raw.length },
-          data: raw.map((item) => ({
+          pagination: { pageNumber: 1, pageSize: templates.length, totalCount: templates.length },
+          data: templates.map((item) => ({
             id: item.agentId,
             displayName: item.label,
             categories: item.categoryList,
@@ -95749,13 +95744,13 @@ const makeApiServiceLive = (buildEnv) => effect$1(
       // Org capabilities & user settings
       getOrgCapabilities: (orgSlug) => gen(function* () {
         const token = yield* getAccessToken();
-        yield* requireServerOperation("getCliOrganizationCapabilities", token);
+        yield* requireReleaseEnabledOperation("getCliOrganizationCapabilities");
         const path = `/api/cli/v1/organizations/${encodeURIComponent(orgSlug)}/capabilities`;
         return yield* makeRequest(baseUrl, path, token);
       }),
       getUserSettings: () => gen(function* () {
         const token = yield* getAccessToken();
-        yield* requireServerOperation("getCliUserSettings", token);
+        yield* requireReleaseEnabledOperation("getCliUserSettings");
         return yield* makeRequest(baseUrl, "/api/cli/v1/me/settings", token);
       }),
       // Tunnel management

package/docs/api-contract-inventory.md

@@ -49,8 +49,9 @@
 | SKILL-04 | skill-admin | `aipctl admin skill list`, `get`, `delete`, `publish`, `unpublish` | `listAdminSkills`, `getAdminSkill`, `deleteAdminSkill`, `updateAdminSkill` | api | `GET`, `GET`, `DELETE`, `PATCH` | `/api/web/admin/organizations/slug/{organizationSlug}/skills`; `/skills/{skillId}` | list query `{ pageNumber,pageSize,search }`; publish toggle body `{ availableInLibrary: boolean }` | local `ListAdminSkillsResponse`, `SkillDetail`, `void` | `resource/oas/modules/backend/organization/skills/openapi.yaml` | `frontend/packages/api/src/out/modules/organization-skills-types.ts#paths["/api/web/admin/organizations/slug/{organizationSlug}/skills"]`, `#paths["/api/web/admin/organizations/slug/{organizationSlug}/skills/{skillId}"]` | `generated-ready` | N/A | `keep` | none | N/A | existing `commands/admin/skill.test.ts`; needed admin list/detail/update path snapshot |
 | SKILL-05 | skill-admin | `aipctl skill download`; `aipctl admin skill upload`, `aipctl admin skill download`, `aipctl admin skill github inspect/import/sync/credentials set/clear` | `createAdminUploadUrl` → `uploadToS3` → `completeAdminUpload` (`abortAdminUpload` on failure); `getSkillDownloadUrl` → `downloadFromUrl`; `inspectGitHubSkillSource`, `prepareGitHubSkill`, `syncPrepareGitHubSkill`, `updateGitHubSkillCredentials` | api + external | `POST`/`PUT`/`POST`; `POST`/`GET`; `POST`, `POST`, `POST`, `PATCH` | `/admin/.../skills/upload-url`; `/admin/.../skills/download-url`; `/admin/.../skills/github-repo-inspect`; `/github-prepare`; `/{skillId}/sync-prepare`; `/{skillId}/github-credentials` | upload/download local bodies; GitHub inspect/prepare `{ url, pat? }`; credentials `{ pat or null }` | upload/download/GitHub admin skill DTOs | `resource/oas/modules/backend/organization/skills/openapi.yaml` | `frontend/packages/api/src/out/modules/organization-skills-types.ts#paths["/api/web/admin/organizations/slug/{organizationSlug}/skills/upload-url"]`, `#paths["/api/web/admin/organizations/slug/{organizationSlug}/skills/download-url"]`, `#paths["/api/web/admin/organizations/slug/{organizationSlug}/skills/github-repo-inspect"]`, `#paths["/api/web/admin/organizations/slug/{organizationSlug}/skills/github-prepare"]`, `#paths["/api/web/admin/organizations/slug/{organizationSlug}/skills/{skillId}/sync-prepare"]`, `#paths["/api/web/admin/organizations/slug/{organizationSlug}/skills/{skillId}/github-credentials"]` | `external-presigned` | N/A | `keep` | none | N/A | existing `commands/admin/skill.test.ts`, `commands/skill/skill-extended.test.ts`; needed GitHub admin skill contract fixtures |
 | P1-SKILL-01 | skill-docs | `aipctl skill get --json`, `aipctl admin skill get --json`, `aipctl admin skill github import/sync --json` | same owners as `SKILL-01`/`SKILL-05` | api | same as upstream rows | same as upstream rows | runtime/JSON/help/docs now align on `source`, `origin`, `updateAvailable`, `secretsAvailable`, GitHub metadata, `secretKeys`; stale `version` and file `size` removed | JSON/help/docs contract for skill objects | `resource/oas/modules/backend/organization/skills/openapi.yaml` | `frontend/packages/api/src/out/modules/organization-skills-types.ts#components[...]` | `generated-ready` | `P1` | `keep` | none | N/A | updated `src/core/api.test.ts`, `commands/skill/skill.test.ts`, `commands/skill/skill-extended.test.ts`, `commands/admin/skill.test.ts`, `commands/json-format.test.ts`, `../docs/how-to/aip-cli-usage.md`; covers JSON/help/docs field sync |
-| P0-AGENT-01 | agent-user | `aipctl agent list`, `aipctl agent get` | `listInstalledAgents`, `getInstalledAgent` | api | `GET`, `GET` | `/api/web/organizations/slug/{organizationSlug}/installed-agents`; `/installed-agents/{installedAgentId}` | legacy implemented endpoint maps `list`/`installedAgentId` into CLI `data`/`id`; detail wraps legacy response in `{ data }` and maps `installedIntegrationList` fallback | local `ListInstalledAgentsResponse`, `{ data: InstalledAgentDetail }` | implemented: `resource/oas/duplo.yaml`; future v2 source: `resource/oas/modules/backend/agent/user/openapi.yaml` | legacy `frontend/packages/api/src/out/user-types.ts#paths["/api/web/organizations/slug/{organizationSlug}/installed-agents"]`, `#paths["/api/web/organizations/slug/{organizationSlug}/installed-agents/{installedAgentId}"]` | `legacy-generated` | `P0` | `keep legacy` | owner=`backend app AgentsApiController`; rationale=`agent v2 controllers currently throw NotImplementedError in this repo, so public beta must call implemented legacy endpoints`; removal condition=`AgentUserApiController v2 methods are implemented and deployed`; incorporation plan=`switch to agent v2 OAS/generated contract only after backend implementation lands` | `AIP-PUB-05` | updated `src/core/api.test.ts`, `commands/agent/agent.test.ts`; covers implemented legacy list/detail path and response mapping |
-| P0-AGENT-02 | agent-admin | `aipctl admin agent create`, `update`, `delete`, `export`, `share`, `templates`; `aipctl agent enable`, `disable` | `createInstalledAgent`, `updateInstalledAgent`, `deleteInstalledAgent`, `exportInstalledAgent`, `getInstalledAgentShare`, `listAgentTemplates`, `updateInstalledAgentStatus` | api | `POST`, `PATCH`, `DELETE`, `GET`, `GET`, `GET`, `PATCH` | `/api/web/admin/organizations/slug/{organizationSlug}/installed-agents`; `/{installedAgentId}`; export uses legacy direct `/web/admin/organizations/slug/{organizationSlug}/installed-agents/{installedAgentId}/export`; `/share`; `/agents`; `/{installedAgentId}/status` | create/update bodies follow implemented legacy admin request (`custom.iconKeyOrUrl`, `knowledgeBundleIdList`); export is YAML bytes from direct controller path; templates map legacy `agentId`/`label`/`categoryList`; status body `{ status }` | create/update return plain `{ id }`; local admin agent DTOs + `Buffer` export | implemented: `resource/oas/duplo.yaml`; export controller path: `backend/api/src/main/kotlin/com/querypie/duplo/api/app/controller/AgentExportController.kt`; future v2 source: `resource/oas/modules/backend/agent/admin/openapi.yaml` | legacy `frontend/packages/api/src/out/user-types.ts#paths["/api/web/admin/organizations/slug/{organizationSlug}/installed-agents"]`, `#paths["/api/web/admin/organizations/slug/{organizationSlug}/installed-agents/{installedAgentId}"]`, `#paths["/api/web/admin/organizations/slug/{organizationSlug}/agents"]`; export path intentionally OAS-codegen excluded | `legacy-generated` | `P0` | `keep legacy` | owner=`backend app AgentsApiController + AgentExportController`; rationale=`agent v2 admin controllers currently throw NotImplementedError and export is implemented only at /web/admin direct controller path in PROD`; removal condition=`AgentAdminApiController v2 and export path are implemented/deployed under versioned OAS path`; incorporation plan=`switch to agent v2 OAS/generated contract only after backend implementation lands, then remove direct export exception` | `AIP-PUB-05` | updated `src/core/api.test.ts`, `commands/agent/agent.test.ts`; covers implemented legacy CRUD/status/template path/body, direct export path, Buffer response, and 404 propagation |
+| P0-AGENT-01 | agent-user | `aipctl agent list`, `aipctl agent get` | `listInstalledAgents`, `getInstalledAgent` | api | `GET`, `GET` | `/api/cli/v1/organizations/{organizationSlug}/agents`; `/{installedAgentId}` | preserves user read semantics and maps `list`/`installedAgentId` to local `data`/`id` | local `ListInstalledAgentsResponse`, `{ data: InstalledAgentDetail }` | `resource/oas/modules/backend/cli/openapi.yaml`; shared DTO refs from `resource/oas/duplo.yaml` | `backend/api/.../cli/generated/api/CliAgentApi.kt` | `generated-ready` | `P0` | `migrate` | none; dedicated adapter delegates to the working `AgentsApiController` bean | `AI-6344` | `src/core/api.test.ts`, `CliAgentApiControllerTest`, Gateway registry/admission parity; real local production CLI list/get JSON |
+| P0-AGENT-02 | agent-admin | `aipctl admin agent create`, `update`, `delete`, `share`, `templates`; `aipctl agent enable`, `disable` | `createInstalledAgent`, `updateInstalledAgent`, `deleteInstalledAgent`, `getInstalledAgentShare`, `listAgentTemplates`, `updateInstalledAgentStatus` | api | `POST`, `PATCH`, `DELETE`, `GET`, `GET`, `PATCH` | `/api/cli/v1/organizations/{organizationSlug}/agents`; `/{installedAgentId}`; `/{installedAgentId}/share`; `/templates`; `/{installedAgentId}/status` | existing create/update/status bodies; templates collect bounded pages and retain the full catalog; share is read-only | create/update `{ id }`, void mutation responses, existing CLI template/share mapping | `resource/oas/modules/backend/cli/openapi.yaml`; shared legacy DTO refs | `backend/api/.../cli/generated/api/CliAgentApi.kt` | `generated-ready` | `P0` | `migrate` | none; AI operator/workflow/audit policy stays in existing domain owner | `AI-6344` | all eight operations capability/path tests, mutation non-replay, template paging, real CLI lifecycle/DB/audit and metadata 429 verification |
+| P0-AGENT-03 | agent-export | `aipctl admin agent export` (GA-CANDIDATE, production gated) | `exportInstalledAgent` | api | `GET` | `/web/admin/organizations/slug/{organizationSlug}/installed-agents/{installedAgentId}/export` | existing direct controller request | YAML `Buffer` | `backend/api/.../app/controller/AgentExportController.kt`; intentionally OAS-codegen excluded | none | `legacy-generated` | `P0` | `legacy-exception` | owner=`AgentExportController`; dedicated transfer contract, size/timeout/partial-file/authorization/audit gates remain | `AI-6380` | existing direct export path/Buffer/404 tests; production help remains hidden |
 | P1-CHAT-01 | agent-chat | `aipctl agent chat` | `agentNewChat`, `agentChat`, local `parseSseStream` | chat | `POST` + SSE | `/librechat/api/{orgSlug}/agent/new-chat`; `/librechat/api/{orgSlug}/agent/chat` | request body `{ agentInstallationId or conversationId, text, files: [] }` | local `AgentChatResult { text, conversationId }` parsed from SSE event fields `final`, `conversation.conversationId`, `responseMessage` | path source: `resource/oas/chat.yaml` | `frontend/packages/api/src/out/chat-types.ts#paths["/librechat/api/{orgSlug}/agent/new-chat"]`, `#paths["/librechat/api/{orgSlug}/agent/chat"]` | `stream-exception` | `P1` | `legacy-exception` | owner=`chat backend agent SSE stream contract`; rationale=`path exists in OpenAPI but final SSE event payload is still out-of-band`; removal condition=`official SSE event schema or versioned fixture is published with the chat contract`; incorporation plan=`bind CLI parser/tests to the published SSE fixture and drop local-only stream assumptions` | N/A | updated `src/core/api.test.ts`; covers content[] text, fallback text, malformed event skip, and no-final-event failure |
 | P1-AUTO-01 | automation | `aipctl automation list`, `get`, `create`, `update`, `delete`, `run`, `enable`, `disable`, `history`, `cancel`, `webhook-regen`, `triggers` | `listAutomations`, `getAutomation`, `createAutomation`, `updateAutomation`, `deleteAutomation`, `runAutomation`, `updateAutomationStatus`, `listAutomationHistories`, `cancelAutomationHistory`, `regenerateWebhookUrl`, `getTriggerProviderMetadata` | api | `GET`, `POST`, `PUT`, `DELETE` mix | `/api/web/organizations/slug/{organizationSlug}/automations...`; `/automation-trigger-providers/.../metadata` | automation pagination normalized to `{ page, pageSize, total }`; metadata calls now use provider-specific OAS paths and required args (`accountId`, `folderId`, `serviceType`) | local automation DTOs + webhook URL DTO | `resource/oas/modules/backend/automation/user/openapi.yaml` | `frontend/packages/api/src/out/modules/automation-user-types.ts#paths[...]` | `generated-ready` | `P1` | `keep` | none | N/A | updated `src/core/api.test.ts`, `commands/automation/automation.test.ts`, `commands/json-format.test.ts`; covers official pagination fields, provider-specific metadata routes, and unsupported-provider preflight failure |
 | CHAT-01 | chat-readonly | `aipctl chat list`, `aipctl chat get`, `aipctl chat messages` | `listConversations`, `getConversation`, `listMessages` | chat | `GET` | `/librechat/api/{orgSlug}/convos`; `/convos/{conversationId}`; `/messages/{conversationId}` | list sends no default query; optional cursor only (`?cursor=...`). `pageSize`/`sortBy`/`sortDirection` defaults removed due deployed Chat validation drift | local `ListConversationsResponse`, `ConversationDetail`, `ChatMessage[]` | `resource/oas/chat.yaml` | `frontend/packages/api/src/out/chat-types.ts#paths["/librechat/api/{orgSlug}/convos"]`, `#paths["/librechat/api/{orgSlug}/convos/{conversationId}"]`, `#paths["/librechat/api/{orgSlug}/messages/{conversationId}"]` | `legacy-generated` | N/A | `keep` | owner=`chat backend`; rationale=`PROD rejects CLI default pageSize/sort query while no-query and cursor-only read path are safe`; removal condition=`chat deployed contract publishes and accepts explicit pagination query for public CLI`; incorporation plan=`reintroduce explicit pagination only after OAS/source/deployed validation align` | N/A | updated `src/core/api.test.ts`, existing `commands/chat/chat.test.ts`; covers default no-query and cursor-only URL |
@@ -67,15 +68,18 @@
 
 ## 공통 CLI request quota 오류 계약
 
-`GA-DIRECT` 업무 호출과 `GET /api/cli/v1/capabilities`는 Gateway request-rate admission을 통과한다. Gateway-owned source 계약은 `resource/oas/modules/backend-gateway/me/components/schemas/CliQuotaErrorResponse.yaml`과 `CliQuotaErrorDetails.yaml`이다.
+`GA-DIRECT` 업무 호출과 명시적 discovery/진단용 `GET /api/cli/v1/capabilities`는 각각 Gateway request-rate admission을 통과한다. production CLI는 업무마다 capability를 선조회하지 않는다. 로컬 release manifest는 artifact에 없는 명령을 차단하고, 실제 업무 endpoint의 Gateway registry가 최신 server release/rollout/quota를 authoritative하게 검사한다. Gateway-owned source 계약은 `resource/oas/modules/backend-gateway/me/components/schemas/CliQuotaErrorResponse.yaml`과 `CliQuotaErrorDetails.yaml`이다.
 
 | HTTP | code | CLI 처리 |
 | --- | --- | --- |
 | 429 | `CLI_QUOTA_EXCEEDED` | `limitKind=request_rate`, quota class, denying scope, request ID를 보존한다. 양수 refill로 계산 가능한 경우에만 `Retry-After`, `resetAt`을 보존한다. 자동 retry는 하지 않는다. |
 | 503 | `CLI_QUOTA_POLICY_UNAVAILABLE` | Backend effective-policy auth/timeout/schema/freshness 실패. stale/default policy로 대체하거나 자동 retry하지 않는다. |
 | 503 | `CLI_QUOTA_LIMITER_UNAVAILABLE` | Redis timeout/script/result 실패. 유료·mutation 요청을 자동 retry하지 않는다. |
+| 429 | `CLI_TEXT_DAILY_LIMIT` | `limitKind=daily`, `quotaClass=text-execution`, 사용자 scope와 request ID를 보존한다. 유효한 UTC reset 시각과 그 시각에서 계산한 retry만 노출하며 자동 retry하지 않는다. |
+| 429 | `CLI_TEXT_USER_CONCURRENCY_LIMIT` | `limitKind=concurrent`, `quotaClass=text-execution`, 사용자 scope와 request ID만 보존한다. permit 해제 시각을 알 수 없으므로 `Retry-After`와 `resetAt`을 만들거나 전달하지 않는다. |
+| 429 | `CLI_TEXT_ORGANIZATION_CONCURRENCY_LIMIT` | `limitKind=concurrent`, `quotaClass=text-execution`, 조직 scope와 request ID만 보존한다. permit 해제 시각을 알 수 없으므로 `Retry-After`와 `resetAt`을 만들거나 전달하지 않는다. |
 
-CLI `ApiError`는 위 세 code에서 allowlist된 quota detail만 보존하며 서버가 추가로 보낸 조직/사용자 ID, raw policy, Redis key는 노출하지 않는다. 회귀 테스트는 `src/core/api.test.ts`와 Gateway `test/cli/quota/**`에 있다.
+CLI `ApiError`는 위 여섯 code에서 allowlist된 quota detail만 보존하며 서버가 추가로 보낸 조직/사용자 ID, raw policy, Redis key는 노출하지 않는다. Gateway는 `code`, Chat은 `errorCode`를 사용하지만 CLI에서 같은 진단 구조로 정규화한다. 회귀 테스트는 `src/core/api.test.ts`, Chat `cli-text-execution.internal.service.spec.ts`, Gateway `test/cli/quota/**`에 있다.
 
 ## Queue IDs for follow-up
 
@@ -83,8 +87,8 @@ CLI `ApiError`는 위 세 code에서 allowlist된 quota detail만 보존하며
 
 - `P0-ORG-01` org member list/mutation legacy-exception aligned (done in `AIP-PUB-04`, independent contract follow-up remains)
 - `P0-ORG-02` org invite-link trio hidden from public beta (done in `AIP-PUB-04`)
-- `P0-AGENT-01` user agent remains on implemented legacy endpoints until v2 backend lands
-- `P0-AGENT-02` admin agent remains on implemented legacy endpoints until v2 backend lands
+- `P0-AGENT-01` / `P0-AGENT-02` moved to dedicated CLI lifecycle endpoints with metadata quota and capability checks (`AI-6344`)
+- `P0-AGENT-03` export remains a gated transfer candidate (`AI-6380`)
 - `P0-DRIVE-01` drive list/download/delete/mkdir/rename/usage contract migration (done in `AIP-PUB-04`)
 - `P0-DRIVE-02` drive upload contract migration (done in `AIP-PUB-04`)
 - `P0-MODEL-01` model list path/DTO migration (done in `AIP-PUB-04`)
@@ -101,6 +105,6 @@ CLI `ApiError`는 위 세 code에서 allowlist된 quota detail만 보존하며
 ## Manual notes
 
 - Generated reference files under `frontend/packages/api/src/out/**` are inventory links only. They are not imported by CLI source/build/test/lint.
-- `agent-user` / `agent-admin` modern OAS files exist under `resource/oas/modules/backend/agent/**`, but current backend v2 controllers throw `NotImplementedError`; current CLI intentionally uses implemented `AgentsApiController` endpoints until v2 implementation lands.
+- Agent lifecycle uses the dedicated `CliAgentApiController` and CLI OAS, delegating internally to the implemented `AgentsApiController` bean. Future v2 implementation can replace that internal owner without changing the CLI endpoint. `agent chat` and `admin agent export` retain their separate candidate gates.
 - OAuth authorization-server metadata, dynamic client registration, authorize, and token endpoints used by `src/core/oauth.ts` were not found in current `resource/oas`; they need owner-backed contractization.
 - `config` commands intentionally excluded. local config surface has no network owner.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "aipctl",
-  "version": "2026.9.7",
+  "version": "2026.9.9",
   "description": "QueryPie AIP and MCP CLI tool",
   "author": "QueryPie",
   "license": "UNLICENSED",
@@ -22,8 +22,8 @@
     "node": ">=24.18.0"
   },
   "metadata": {
-    "contentHash": "193ccba3e435808c7b5d0088f7fa877f90dee7b22206ac32aaa73bc950cd77dd",
-    "wrapperHash": "dd78d97e373451c52e871f46c154b9cec801b192cb68c250932de890891e8a97",
+    "contentHash": "95bfb896d5e0e21910685b39eff86f3d35ee5c1b0ef28854912f78fdbc7bee58",
+    "wrapperHash": "a4ef2565f44cb9eb4a3706246f59427bf40a5275dc7bea030fb30024be6f5ab8",
     "nativeHash": "006b08c3e391f4571d9b7c0f12d684fe2448106259e7e0581b10f9be362452e9"
   },
   "optionalDependencies": {