feat(BA-5832): add v2 SDK + CLI for AppConfigPolicy / Fragment / merged AppConfig

SDK (`client/v2/domains_v2/`):
- New `V2AppConfigPolicyClient` — `get`, `search`, `admin_bulk_create
  / update / purge` (BEP-1052 §3, bulk-only writes).
- New `V2AppConfigFragmentClient` — `get` (POST /get with body-key),
  `scope_search`, `admin_search`, `admin_bulk_create / update /
  purge`.
- Replace legacy `V2AppConfigClient` with the merged-view (BEP-1052
  §5) surface — `my_get`, `my_search`, `admin_get`, `admin_search`,
  `my_bulk_create / update`. Old `upsert_*` / `delete_*` paths are
  removed (their backing endpoints were dropped in BA-5822).
- Register all three clients in `V2ClientRegistry`.

CLI (`client/cli/v2/`):
- `bai v2 app-config-policy` — `get`, `search`.
- `bai v2 admin app-config-policy` — `bulk-create / update / purge`,
  with `--items '{json}'` or `@file.json`.
- `bai v2 app-config-fragment` — `get`, `scope-search`.
- `bai v2 admin app-config-fragment` — `search`, `bulk-create /
  update / purge`.
- `bai v2 app-config` (merged-view) — `my-get`.
- `bai v2 my app-config` — `search`, `bulk-create`, `bulk-update`.
- `bai v2 admin app-config` — `get`, `search`.
- Replace the legacy `bai v2 app-config` commands (`get-domain` /
  `delete-domain` / `get-user` / `delete-user` / `get-merged`) — those
  REST endpoints are gone post BA-5822.

All bulk write commands accept JSON list inputs via `--items` /
`--keys` / `--config-names`, with `@path/to/file.json` shorthand for
file-loaded payloads. The CLI surface follows
`bai admin {entity}` for superadmin-only operations,
`bai my {entity}` for self-service writes that act on the caller's
own data, and `bai {entity}` for any-authenticated-user reads —
mirrors the manager-side adapter convention.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

Author: jopemachine

src/ai/backend/client/cli/v2/__init__.py

@@ -251,6 +251,30 @@ def notification() -> None:
     """Notification commands."""
 
 
+@v2.group(cls=LazyGroup, import_name="ai.backend.client.cli.v2.app_config:app_config")
+def app_config() -> None:
+    """App config (merged-view) commands."""
+
+
+@v2.group(
+    cls=LazyGroup,
+    import_name="ai.backend.client.cli.v2.app_config_fragment:app_config_fragment",
+    name="app-config-fragment",
+)
+def app_config_fragment() -> None:
+    """App config fragment commands."""
+
+
+@v2.group(
+    cls=LazyGroup,
+    import_name="ai.backend.client.cli.v2.app_config_policy:app_config_policy",
+    name="app-config-policy",
+)
+def app_config_policy() -> None:
+    """App config policy commands."""
+
+
+
 @v2.group(
     cls=LazyGroup,
     import_name="ai.backend.client.cli.v2.prometheus_query_preset:prometheus_query_preset",

src/ai/backend/client/cli/v2/admin/__init__.py

@@ -203,3 +203,30 @@ def scheduling_handler() -> None:
 )
 def invitation() -> None:
     """Admin role invitation commands."""
+
+
+@admin.group(
+    cls=LazyGroup,
+    import_name="ai.backend.client.cli.v2.admin.app_config:app_config",
+    name="app-config",
+)
+def app_config() -> None:
+    """Admin merged AppConfig commands (BEP-1052 §5)."""
+
+
+@admin.group(
+    cls=LazyGroup,
+    import_name="ai.backend.client.cli.v2.admin.app_config_fragment:app_config_fragment",
+    name="app-config-fragment",
+)
+def app_config_fragment() -> None:
+    """Admin AppConfigFragment commands (cross-scope search + bulk-only writes)."""
+
+
+@admin.group(
+    cls=LazyGroup,
+    import_name="ai.backend.client.cli.v2.admin.app_config_policy:app_config_policy",
+    name="app-config-policy",
+)
+def app_config_policy() -> None:
+    """Admin AppConfigPolicy commands (bulk-only writes)."""

src/ai/backend/client/cli/v2/admin/app_config.py

@@ -0,0 +1,94 @@
+"""Admin CLI commands for the merged AppConfig view (BEP-1052 §5)."""
+
+from __future__ import annotations
+
+import asyncio
+from uuid import UUID
+
+import click
+
+from ai.backend.client.cli.v2.helpers import (
+    create_v2_registry,
+    load_v2_config,
+    parse_order_options,
+    print_result,
+)
+
+
+@click.group(name="app-config")
+def app_config() -> None:
+    """Admin merged AppConfig commands."""
+
+
+@app_config.command()
+@click.argument("user_id", type=str)
+@click.argument("name", type=str)
+def get(user_id: str, name: str) -> None:
+    """Read a specific user's merged AppConfig (admin only)."""
+
+    async def _run() -> None:
+        registry = await create_v2_registry(load_v2_config())
+        try:
+            result = await registry.app_config.admin_get(UUID(user_id), name)
+            print_result(result)
+        finally:
+            await registry.close()
+
+    asyncio.run(_run())
+
+
+@app_config.command()
+@click.option("--limit", type=int, default=None, help="Maximum items to return.")
+@click.option("--offset", type=int, default=None, help="Number of items to skip.")
+@click.option("--name-contains", type=str, default=None, help="Filter `name` by substring.")
+@click.option("--user-id", type=str, default=None, help="Pin to a single user (UUID).")
+@click.option(
+    "--order-by",
+    multiple=True,
+    help="Order by field:direction. Fields: name, user_id.",
+)
+def search(
+    limit: int | None,
+    offset: int | None,
+    name_contains: str | None,
+    user_id: str | None,
+    order_by: tuple[str, ...],
+) -> None:
+    """Cross-user merged-view search (superadmin only)."""
+    from ai.backend.common.dto.manager.query import StringFilter
+    from ai.backend.common.dto.manager.v2.app_config.request import (
+        AppConfigFilter,
+        AppConfigOrder,
+        SearchAppConfigsInput,
+    )
+    from ai.backend.common.dto.manager.v2.app_config.types import AppConfigOrderField
+
+    filter_dto: AppConfigFilter | None = None
+    if name_contains is not None or user_id is not None:
+        filter_dto = AppConfigFilter(
+            name=StringFilter(contains=name_contains) if name_contains is not None else None,
+            user_id=UUID(user_id) if user_id is not None else None,
+        )
+
+    orders = (
+        parse_order_options(order_by, AppConfigOrderField, AppConfigOrder)
+        if order_by
+        else None
+    )
+
+    async def _run() -> None:
+        registry = await create_v2_registry(load_v2_config())
+        try:
+            result = await registry.app_config.admin_search(
+                SearchAppConfigsInput(
+                    filter=filter_dto,
+                    order=orders,
+                    limit=limit,
+                    offset=offset,
+                ),
+            )
+            print_result(result)
+        finally:
+            await registry.close()
+
+    asyncio.run(_run())

src/ai/backend/client/cli/v2/admin/app_config_fragment.py

@@ -0,0 +1,182 @@
+"""Admin CLI commands for AppConfigFragment (cross-scope search + bulk-only writes)."""
+
+from __future__ import annotations
+
+import asyncio
+import json
+from pathlib import Path
+
+import click
+
+from ai.backend.client.cli.v2.helpers import (
+    create_v2_registry,
+    load_v2_config,
+    parse_order_options,
+    print_result,
+)
+
+
+@click.group(name="app-config-fragment")
+def app_config_fragment() -> None:
+    """Admin AppConfigFragment commands (cross-scope search + bulk-only writes)."""
+
+
+def _load_items(items_arg: str) -> list[dict]:
+    """Accept JSON string or `@file.json` path."""
+    if items_arg.startswith("@"):
+        return json.loads(Path(items_arg[1:]).read_text())
+    return json.loads(items_arg)
+
+
+@app_config_fragment.command()
+@click.option("--limit", type=int, default=None, help="Maximum items to return.")
+@click.option("--offset", type=int, default=None, help="Number of items to skip.")
+@click.option("--name-contains", type=str, default=None, help="Filter `name` by substring.")
+@click.option("--scope-type", type=str, default=None, help="Filter by scope_type.")
+@click.option("--scope-id-contains", type=str, default=None, help="Filter `scope_id` by substring.")
+@click.option(
+    "--order-by",
+    multiple=True,
+    help="Order by field:direction. Fields: scope_type, scope_id, name, created_at, updated_at.",
+)
+def search(
+    limit: int | None,
+    offset: int | None,
+    name_contains: str | None,
+    scope_type: str | None,
+    scope_id_contains: str | None,
+    order_by: tuple[str, ...],
+) -> None:
+    """Cross-scope fragment search (superadmin only)."""
+    from ai.backend.common.dto.manager.query import StringFilter
+    from ai.backend.common.dto.manager.v2.app_config_fragment.request import (
+        AppConfigFragmentFilter,
+        AppConfigFragmentOrder,
+        SearchAppConfigFragmentsInput,
+    )
+    from ai.backend.common.dto.manager.v2.app_config_fragment.types import (
+        AppConfigFragmentOrderField,
+        AppConfigScopeType,
+    )
+
+    filter_dto: AppConfigFragmentFilter | None = None
+    if any([name_contains, scope_type, scope_id_contains]):
+        filter_dto = AppConfigFragmentFilter(
+            name=StringFilter(contains=name_contains) if name_contains is not None else None,
+            scope_type=AppConfigScopeType(scope_type) if scope_type is not None else None,
+            scope_id=(
+                StringFilter(contains=scope_id_contains)
+                if scope_id_contains is not None
+                else None
+            ),
+        )
+
+    orders = (
+        parse_order_options(order_by, AppConfigFragmentOrderField, AppConfigFragmentOrder)
+        if order_by
+        else None
+    )
+
+    async def _run() -> None:
+        registry = await create_v2_registry(load_v2_config())
+        try:
+            result = await registry.app_config_fragment.admin_search(
+                SearchAppConfigFragmentsInput(
+                    filter=filter_dto,
+                    order=orders,
+                    limit=limit,
+                    offset=offset,
+                ),
+            )
+            print_result(result)
+        finally:
+            await registry.close()
+
+    asyncio.run(_run())
+
+
+@app_config_fragment.command(name="bulk-create")
+@click.option(
+    "--items",
+    required=True,
+    help=(
+        "JSON list of `{key: {scope_type, scope_id, name}, extra_config}` items, "
+        "or `@path/to/items.json`."
+    ),
+)
+def bulk_create(items: str) -> None:
+    """Bulk-create fragments (partial-success semantics)."""
+    from ai.backend.common.dto.manager.v2.app_config_fragment.request import (
+        AdminAppConfigFragmentItemInput,
+        AdminBulkCreateAppConfigFragmentsInput,
+    )
+
+    parsed = [AdminAppConfigFragmentItemInput.model_validate(item) for item in _load_items(items)]
+
+    async def _run() -> None:
+        registry = await create_v2_registry(load_v2_config())
+        try:
+            result = await registry.app_config_fragment.admin_bulk_create(
+                AdminBulkCreateAppConfigFragmentsInput(items=parsed),
+            )
+            print_result(result)
+        finally:
+            await registry.close()
+
+    asyncio.run(_run())
+
+
+@app_config_fragment.command(name="bulk-update")
+@click.option(
+    "--items",
+    required=True,
+    help="Same shape as `bulk-create`; replaces `extra_config` wholesale.",
+)
+def bulk_update(items: str) -> None:
+    """Bulk-update fragments (partial-success semantics)."""
+    from ai.backend.common.dto.manager.v2.app_config_fragment.request import (
+        AdminAppConfigFragmentItemInput,
+        AdminBulkUpdateAppConfigFragmentsInput,
+    )
+
+    parsed = [AdminAppConfigFragmentItemInput.model_validate(item) for item in _load_items(items)]
+
+    async def _run() -> None:
+        registry = await create_v2_registry(load_v2_config())
+        try:
+            result = await registry.app_config_fragment.admin_bulk_update(
+                AdminBulkUpdateAppConfigFragmentsInput(items=parsed),
+            )
+            print_result(result)
+        finally:
+            await registry.close()
+
+    asyncio.run(_run())
+
+
+@app_config_fragment.command(name="bulk-purge")
+@click.option(
+    "--keys",
+    required=True,
+    help="JSON list of `{scope_type, scope_id, name}` keys, or `@path/to/keys.json`.",
+)
+def bulk_purge(keys: str) -> None:
+    """Bulk-purge fragments by natural key (partial-success semantics)."""
+    from ai.backend.common.dto.manager.v2.app_config_fragment.request import (
+        AdminBulkPurgeAppConfigFragmentsInput,
+        AppConfigFragmentKeyInput,
+    )
+
+    parsed = [AppConfigFragmentKeyInput.model_validate(item) for item in _load_items(keys)]
+
+    async def _run() -> None:
+        registry = await create_v2_registry(load_v2_config())
+        try:
+            result = await registry.app_config_fragment.admin_bulk_purge(
+                AdminBulkPurgeAppConfigFragmentsInput(keys=parsed),
+            )
+            print_result(result)
+        finally:
+            await registry.close()
+
+    asyncio.run(_run())