Implement full AXL parity (Phases 1–16, ~200 resources)

Adds ~27k lines across 108 files to bring AXL coverage from ~6% to near-full parity.

Client layer (internal/client/):
- axl_hunt, axl_features, axl_appusers, axl_actions: hunt groups/lists/pilots, call park,
  pickup groups, meet-me, app users, user groups, CTI route points, phone/device actions
- axl_templates, axl_sip: device config templates, SIP profiles/security/realms/dial rules
- axl_network, axl_media: locations, regions, SRST, DHCP, media resources, MOH
- axl_dialplan (extended): called/calling party transforms, route filters, AAR, time periods
- axl_ldap, axl_mobility, axl_voicemail: LDAP, remote destinations, device mobility, voicemail
- axl_h323, axl_vpn, axl_security: H.323 gateways/phones/trunks, VPN, credential policies
- axl_admin: UC services, service profiles, application servers, SNMP, service parameters
- axl_presence, axl_uc_features: presence groups, conference now, MLPP, FAC, CMC
- axl_wireless, axl_ime, axl_ccd: WiFi, IME federation, CCD/SAF
- axl_readonly: cluster version, process node services, route plan, licensed users

Command layer (cmd/): ~80 new top-level commands following consolidated single-file CRUD
pattern; all self-register via init() without modifying root.go (except Phase 1 additions).

skill/SKILL.md: Refactored from exhaustive per-command tables to discovery-based design —
grouped taxonomy + cucm --help directive replaces 175-line static command tables; non-
discoverable content (SQL schema, type codes, association JOIN patterns) preserved in full.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

Author: mycollablab

cmd/app_users.go

@@ -0,0 +1,169 @@
+package cmd
+
+import (
+	"errors"
+	"fmt"
+
+	"github.com/cloverhound/cucm-cli/internal/appconfig"
+	"github.com/cloverhound/cucm-cli/internal/auth"
+	"github.com/cloverhound/cucm-cli/internal/client"
+	"github.com/cloverhound/cucm-cli/internal/output"
+	"github.com/spf13/cobra"
+)
+
+var appUsersCmd = &cobra.Command{
+	Use:     "app-users",
+	Aliases: []string{"au", "app-user"},
+	Short:   "Manage application users",
+	Long:    `List, get, add, update, and remove CUCM application users.`,
+}
+
+var auListUserid string
+
+var auListCmd = &cobra.Command{
+	Use:   "list",
+	Short: "List application users",
+	RunE:  runAUList,
+}
+
+func runAUList(cmd *cobra.Command, args []string) error {
+	clusterName, err := resolveCluster(cmd)
+	if err != nil { return err }
+	cfg, err := appconfig.LoadConfig()
+	if err != nil { return fmt.Errorf("failed to load config: %w", err) }
+	clusterCfg, err := appconfig.GetCluster(cfg, clusterName)
+	if err != nil { return err }
+	user, pass, err := auth.ResolveCreds(clusterCfg, auth.CredTypeAXL)
+	if err != nil { return fmt.Errorf("failed to resolve credentials: %w", err) }
+	results, err := client.ListAppUser(clusterCfg.Host, user, pass, clusterCfg.Version, auListUserid, maxFlag)
+	if err != nil { return fmt.Errorf("failed to list app users: %w", err) }
+	return output.Print(results, outputFlag)
+}
+
+var auGetCmd = &cobra.Command{
+	Use:   "get <userid>",
+	Short: "Get application user details",
+	Args:  cobra.ExactArgs(1),
+	RunE:  runAUGet,
+}
+
+func runAUGet(cmd *cobra.Command, args []string) error {
+	clusterName, err := resolveCluster(cmd)
+	if err != nil { return err }
+	cfg, err := appconfig.LoadConfig()
+	if err != nil { return fmt.Errorf("failed to load config: %w", err) }
+	clusterCfg, err := appconfig.GetCluster(cfg, clusterName)
+	if err != nil { return err }
+	user, pass, err := auth.ResolveCreds(clusterCfg, auth.CredTypeAXL)
+	if err != nil { return fmt.Errorf("failed to resolve credentials: %w", err) }
+	result, err := client.GetAppUser(clusterCfg.Host, user, pass, clusterCfg.Version, args[0])
+	if err != nil { return fmt.Errorf("failed to get app user: %w", err) }
+	return output.Print(result, outputFlag)
+}
+
+var (
+	auAddUserid string
+	auAddPassword string
+	auAddDescription string
+	auAddPresenceGroup string
+)
+
+var auAddCmd = &cobra.Command{
+	Use:   "add",
+	Short: "Add an application user",
+	RunE:  runAUAdd,
+}
+
+func runAUAdd(cmd *cobra.Command, args []string) error {
+	if auAddUserid == "" { return fmt.Errorf("--userid is required") }
+	clusterName, err := resolveCluster(cmd)
+	if err != nil { return err }
+	cfg, err := appconfig.LoadConfig()
+	if err != nil { return fmt.Errorf("failed to load config: %w", err) }
+	clusterCfg, err := appconfig.GetCluster(cfg, clusterName)
+	if err != nil { return err }
+	user, pass, err := auth.ResolveCreds(clusterCfg, auth.CredTypeAXL)
+	if err != nil { return fmt.Errorf("failed to resolve credentials: %w", err) }
+	params := map[string]string{
+		"userid": auAddUserid,
+		"password": auAddPassword,
+		"description": auAddDescription,
+		"presenceGroupName": auAddPresenceGroup,
+	}
+	if err := client.AddAppUser(clusterCfg.Host, user, pass, clusterCfg.Version, params); err != nil {
+		if errors.Is(err, client.ErrDryRun) { return nil }
+		return fmt.Errorf("failed to add app user: %w", err)
+	}
+	fmt.Printf("Application user '%s' added successfully\n", auAddUserid)
+	return nil
+}
+
+var (
+	auUpdatePassword string
+	auUpdateDescription string
+	auUpdatePresenceGroup string
+)
+
+var auUpdateCmd = &cobra.Command{
+	Use:   "update <userid>",
+	Short: "Update an application user",
+	Args:  cobra.ExactArgs(1),
+	RunE:  runAUUpdate,
+}
+
+func runAUUpdate(cmd *cobra.Command, args []string) error {
+	clusterName, err := resolveCluster(cmd)
+	if err != nil { return err }
+	cfg, err := appconfig.LoadConfig()
+	if err != nil { return fmt.Errorf("failed to load config: %w", err) }
+	clusterCfg, err := appconfig.GetCluster(cfg, clusterName)
+	if err != nil { return err }
+	user, pass, err := auth.ResolveCreds(clusterCfg, auth.CredTypeAXL)
+	if err != nil { return fmt.Errorf("failed to resolve credentials: %w", err) }
+	params := make(map[string]string)
+	if auUpdatePassword != "" { params["password"] = auUpdatePassword }
+	if auUpdateDescription != "" { params["description"] = auUpdateDescription }
+	if auUpdatePresenceGroup != "" { params["presenceGroupName"] = auUpdatePresenceGroup }
+	if err := client.UpdateAppUser(clusterCfg.Host, user, pass, clusterCfg.Version, args[0], params); err != nil {
+		if errors.Is(err, client.ErrDryRun) { return nil }
+		return fmt.Errorf("failed to update app user: %w", err)
+	}
+	fmt.Printf("Application user '%s' updated successfully\n", args[0])
+	return nil
+}
+
+var auRemoveCmd = &cobra.Command{
+	Use:   "remove <userid>",
+	Short: "Remove an application user",
+	Args:  cobra.ExactArgs(1),
+	RunE:  runAURemove,
+}
+
+func runAURemove(cmd *cobra.Command, args []string) error {
+	clusterName, err := resolveCluster(cmd)
+	if err != nil { return err }
+	cfg, err := appconfig.LoadConfig()
+	if err != nil { return fmt.Errorf("failed to load config: %w", err) }
+	clusterCfg, err := appconfig.GetCluster(cfg, clusterName)
+	if err != nil { return err }
+	user, pass, err := auth.ResolveCreds(clusterCfg, auth.CredTypeAXL)
+	if err != nil { return fmt.Errorf("failed to resolve credentials: %w", err) }
+	if err := client.RemoveAppUser(clusterCfg.Host, user, pass, clusterCfg.Version, args[0]); err != nil {
+		if errors.Is(err, client.ErrDryRun) { return nil }
+		return fmt.Errorf("failed to remove app user: %w", err)
+	}
+	fmt.Printf("Application user '%s' removed successfully\n", args[0])
+	return nil
+}
+
+func init() {
+	appUsersCmd.AddCommand(auListCmd, auGetCmd, auAddCmd, auUpdateCmd, auRemoveCmd)
+	auListCmd.Flags().StringVar(&auListUserid, "userid", "%", "Userid filter")
+	auAddCmd.Flags().StringVar(&auAddUserid, "userid", "", "Userid (required)")
+	auAddCmd.Flags().StringVar(&auAddPassword, "password", "", "Password")
+	auAddCmd.Flags().StringVar(&auAddDescription, "description", "", "Description")
+	auAddCmd.Flags().StringVar(&auAddPresenceGroup, "presence-group", "Standard Presence group", "Presence group name")
+	auUpdateCmd.Flags().StringVar(&auUpdatePassword, "password", "", "Password")
+	auUpdateCmd.Flags().StringVar(&auUpdateDescription, "description", "", "Description")
+	auUpdateCmd.Flags().StringVar(&auUpdatePresenceGroup, "presence-group", "", "Presence group name")
+}