@lexq/cli 1.1.1 → 1.1.2

package/AGENTS.md

@@ -5,7 +5,7 @@
 ## What is this?
 
 LexQ CLI (`@lexq/cli`, binary: `lexq`) manages a policy execution engine. Policies are business rules (if-then) that
-evaluate input facts and produce actions (discounts, blocks, notifications, etc.).
+evaluate input facts and produce actions: change a number such as a discount, set a fact, or record a rejection.
 
 The CLI also doubles as an **MCP server** — run `lexq serve --mcp` to expose the full command inventory as MCP tools to
 any MCP-compatible AI client.
@@ -106,7 +106,7 @@ lexq deploy live --group-id $GID --version-id $VID --memo "Initial deploy"
 
 ## Example: Subscribe to Deployment Notifications
 
-Webhook subscriptions fire on platform events — separate from rule-level webhooks.
+Webhook subscriptions fire on deployment lifecycle events.
 
 ```bash
 # Subscribe to Slack for deployment events

package/CONTEXT.md

@@ -64,11 +64,11 @@ Tenant
 
 ### Policy Group Status
 
-| Value      | Description                        |
-|------------|------------------------------------|
-| `ACTIVE`   | Normal operation                   |
-| `DISABLED` | Execution blocked (emergency stop) |
-| `ARCHIVED` | Permanently removed                |
+| Value      | Description                                                                                                         |
+|------------|---------------------------------------------------------------------------------------------------------------------|
+| `ACTIVE`   | Normal operation                                                                                                    |
+| `DISABLED` | Production execution rejected (`P-009`); dry run, simulation, and replay still work                                 |
+| `ARCHIVED` | Deleted. Kept for audit if it was ever executed, deployed, or replayed; otherwise permanently deleted after 30 days |
 
 ### Policy Version Status
 

package/README.md

@@ -48,7 +48,7 @@ Requires **Node.js 22+**.
 ```bash
 # 1. Authenticate
 lexq auth login
-# Enter your API key (create one at console.lexq.io → Management → API Keys)
+# Enter your API key (create one with the Manage scope at console.lexq.io → Management → API Keys)
 
 # 2. Verify
 lexq auth whoami

package/dist/index.js

@@ -163,6 +163,10 @@ import Table from "cli-table3";
 function printJson(data) {
   console.log(stringifyJson(data, 2));
 }
+function groupLabel(name, archivedAt, fallback = "\u2013") {
+  const label = name ?? fallback;
+  return archivedAt ? `(deleted) ${label}` : label;
+}
 function printTable(headers, rows, options) {
   const table = new Table({
     head: headers,
@@ -227,7 +231,8 @@ function registerAuthCommands(program) {
           whoami    Verify authentication and show account info
 
         Getting Started:
-          1. Get your API key from the LexQ Console (Settings → API Keys)
+          1. Create an API key with the Manage scope in the LexQ Console (Management → API Keys).
+             An "Execute only" key is for the execution API and does not work with this CLI.
           2. Run: lexq auth login
           3. Verify: lexq auth whoami
       `
@@ -269,7 +274,7 @@ function registerAuthCommands(program) {
 
         Example:
           $ lexq auth whoami
-          { "tenantId": "abc-123", "userId": "...", "role": "ADMIN", "tenantTimezone": "Asia/Seoul", "apiKey": "lexq_us_****abcd" }
+          { "tenantId": "abc-123", "userId": "...", "role": "API_ADMIN", "tenantTimezone": "Asia/Seoul", "apiKey": "lexq****abcd", "baseUrl": "https://api.lexq.io/api/v1/partners" }
       `
   ).action(async () => {
     try {
@@ -310,7 +315,7 @@ function registerStatusCommand(program) {
 
         Example:
           $ lexq status
-          { "status": "ok", "latencyMs": 142, "tenantId": "abc-123", "role": "ADMIN", "tenantTimezone": "Asia/Seoul" }
+          { "status": "ok", "latencyMs": 142, "tenantId": "abc-123", "role": "API_ADMIN", "tenantTimezone": "Asia/Seoul" }
 
         Use this to verify your API key is valid and the LexQ API is reachable.
         tenantTimezone is the zone every yyyy-MM-dd date option is read in.
@@ -342,6 +347,8 @@ var MAX_ROUNDING_SCALE = 34;
 var MIN_TRAFFIC_RATE = 1;
 var MAX_TRAFFIC_RATE = 99;
 var REPLAY_WINDOW_MAX_RECORDS = 5e4;
+var DEFAULT_SIMULATION_RECORDS = 1e3;
+var MAX_SIMULATION_RECORDS = 1e5;
 var PROFILE_SAMPLE_PERMILLE = 10;
 var LATENCY_WINDOW_MILLIS = 6e4;
 var TAIL_MIN_OBS = 3;
@@ -384,18 +391,21 @@ function registerGroupCommands(program) {
         It controls deployment lifecycle, conflict resolution, and A/B testing.
 
         Commands:
-          list        List all policy groups
+          list        List policy groups (deleted groups are not included)
           get         Get group detail by ID
           create      Create a new group
           update      Update group settings
-          reorder     Change group priorities (drag & drag equivalent)
+          reorder     Change group priorities (drag & drop equivalent)
           delete      Archive a group
           ab-test     Manage A/B tests (start, stop, adjust)
 
-        Statuses: ACTIVE, DISABLED (emergency stop), ARCHIVED (soft delete)
+        Statuses: ACTIVE, DISABLED, ARCHIVED
+          DISABLED stops production execution (403 P-009) and keeps the deployed version and any A/B test.
+          Dry run, simulation, and replay still work. Set ACTIVE to resume.
+          ARCHIVED means deleted. Only 'lexq groups delete' sets it, and it cannot be undone.
       `
   );
-  groups.command("list").description("List all policy groups").action(async () => {
+  groups.command("list").description("List policy groups (deleted groups are not included)").action(async () => {
     try {
       const globalOpts = program.opts();
       const format = globalOpts.format ?? "json";
@@ -490,6 +500,7 @@ ${data.length} total`);
           $ lexq groups update --id <groupId> --json '{"description": "Updated", "status": "DISABLED"}'
 
         All fields are optional — only provided fields are updated. priority is not settable here — use 'lexq groups reorder'.
+        A deleted group cannot be updated (409 P-059).
       `
   ).action(async (opts) => {
     try {
@@ -512,7 +523,15 @@ ${data.length} total`);
     "after",
     dedent3`
 
-        This archives the group (soft delete). Use --force to skip the confirmation prompt.
+        A deployed group cannot be deleted (P-020). Undeploy it first, which also ends a running A/B test.
+
+        A deleted group no longer appears in 'lexq groups list', and its name can be reused right away.
+        It cannot be restored, and calls that change it (settings, versions, rules, starting an A/B
+        test, publish, deploy, rollback, scheduling a deployment) return 409 P-059. If it was ever
+        executed, deployed, or replayed, it is kept for audit; otherwise it is permanently deleted
+        after 30 days.
+
+        Use --force to skip the confirmation prompt.
       `
   ).action(async (opts) => {
     try {
@@ -1801,7 +1820,7 @@ function registerDeployCommands(program) {
           data.content.map((d) => [
             d.id.substring(0, 8),
             d.deploymentType,
-            d.policyGroupName,
+            groupLabel(d.policyGroupName, d.policyGroupArchivedAt),
             d.versionNo != null ? `v${d.versionNo}` : "\u2013",
             d.deployedByName,
             utcMinute(d.deployedAt)
@@ -2024,7 +2043,11 @@ ${data.totalElements} total \xB7 page ${data.pageNo + 1}/${data.totalPages}`);
           ["Status", "Group", "Version", "Scheduled For", "By", "Result"],
           data.content.map((s) => [
             s.status,
-            s.policyGroupName ?? s.policyGroupId.substring(0, 8),
+            groupLabel(
+              s.policyGroupName,
+              s.policyGroupArchivedAt,
+              s.policyGroupId.substring(0, 8)
+            ),
             s.versionNo != null ? `v${s.versionNo}` : "\u2013",
             utcMinute(s.scheduledFor),
             s.scheduledByName,
@@ -2377,7 +2400,7 @@ function registerAnalyticsCommands(program) {
           ["ID", "Group", "Target", "Status", "Match", "Records", "Created"],
           data.content.map((s) => [
             s.simulationId.substring(0, 8),
-            s.policyGroupName,
+            groupLabel(s.policyGroupName, s.policyGroupArchivedAt),
             s.targetVersionName ?? "\u2013",
             s.status,
             `${s.matchRate.toFixed(1)}%`,
@@ -2738,12 +2761,12 @@ function registerHistoryCommands(program) {
           ["Trace", "Group", "Version", "Status", "Matched", "Latency", "At"],
           data.content.map((h) => [
             h.traceId.substring(0, 12),
-            h.policyGroupName ?? "\u2013",
+            groupLabel(h.policyGroupName, h.policyGroupArchivedAt),
             h.policyVersionNo != null ? `v${h.policyVersionNo}` : "\u2013",
             h.status,
             h.isMatched ? "\u2713" : "\u2717",
             `${h.latencyMs}ms`,
-            utcMinute(h.createdAt)
+            utcMinute(h.executedAt)
           ]),
           { truncate: 20 }
         );
@@ -3252,8 +3275,8 @@ function registerWebhookSubscriptionCommands(program) {
     "after",
     dedent14`
 
-        Receive notifications when deployment lifecycle events occur
-        (publish, deploy, rollback, undeploy).
+        Receive notifications for deployment lifecycle events: publish, deploy, rollback, and
+        undeploy, plus a deployment being scheduled or a schedule being canceled.
 
         Commands:
           list      List all webhook subscriptions
@@ -3262,8 +3285,8 @@ function registerWebhookSubscriptionCommands(program) {
           delete    Delete a subscription
           test      Send a test event to verify connectivity
 
-        This is separate from Integrations (rule action webhooks).
-        Webhook subscriptions are for platform-level event notifications.
+        Rule actions never call external systems. These subscriptions are how LexQ pushes deployment
+        events to you.
       `
   );
   webhooks.command("list").description("List webhook subscriptions").option("--page <number>", "Page number", "0").option("--size <number>", "Page size", "20").action(async (opts) => {
@@ -3348,7 +3371,7 @@ ${data.totalElements} total \xB7 page ${data.pageNo + 1}/${data.totalPages}`);
         Fields:
           name                string      Subscription name (required, unique per tenant)
           webhookUrl          string      Webhook endpoint URL (required)
-          subscribedEvents    string[]    VERSION_PUBLISHED, DEPLOYED, ROLLED_BACK, UNDEPLOYED
+          subscribedEvents    string[]    ${PlatformEventType.join(", ")}
           payloadFormat       string      GENERIC (full JSON) or SLACK ({"text":"..."})  [default: GENERIC]
           secret              string      HMAC-SHA256 signing secret (optional)
           isActive            boolean     Enable/disable (optional)  [default: true]
@@ -3562,7 +3585,7 @@ function registerGroupTools(server, callApi) {
     {
       title: "List Policy Groups",
       annotations: { readOnlyHint: true },
-      description: "List all policy groups (tenant-wide, priority ASC).",
+      description: "List policy groups (tenant-wide, priority ASC). Deleted groups are not included.",
       inputSchema: z2.object({})
     },
     async () => callApi("GET", "policy-groups")
@@ -3615,12 +3638,14 @@ function registerGroupTools(server, callApi) {
     {
       title: "Update Policy Group",
       annotations: { readOnlyHint: false, destructiveHint: true },
-      description: "Update a policy group. Only provided fields are updated; omitted fields remain unchanged.",
+      description: "Update a policy group. Only provided fields are updated; omitted fields remain unchanged. A deleted group cannot be updated (409 P-059).",
       inputSchema: z2.object({
         groupId: z2.string().uuid().describe("Policy group ID"),
         name: z2.string().optional().describe("New name"),
         description: z2.string().optional().describe("New description"),
-        status: z2.enum(["ACTIVE", "DISABLED"]).optional().describe("Status (DISABLED = emergency stop)"),
+        status: z2.enum(["ACTIVE", "DISABLED"]).optional().describe(
+          "DISABLED stops production execution of this group: execution calls return 403 (P-009), and a composite call that includes the group is rejected in full. The deployed version and any A/B test are kept, and dry run, Impact Simulation, and Decision Replay keep working, so a fix can be verified before setting ACTIVE again. To go back to the previous version, use lexq_deploy_rollback. To take the version out of production, use lexq_deploy_undeploy."
+        ),
         activationGroup: z2.string().optional().describe(
           "Activation group (Execution Group) cluster key. Policy groups sharing this key compete, and group priority picks the winners."
         ),
@@ -3638,7 +3663,7 @@ function registerGroupTools(server, callApi) {
     {
       title: "Delete Policy Group",
       annotations: { readOnlyHint: false, destructiveHint: true },
-      description: "Archive a policy group. Only non-live groups can be deleted. This is irreversible.",
+      description: "Delete (archive) a policy group. A deployed group cannot be deleted (P-020); undeploy it first with lexq_deploy_undeploy, which also ends a running A/B test. This cannot be undone. The group no longer appears in lexq_groups_list and its name can be reused right away. Calls that change it (settings, versions, rules, starting an A/B test, publish, deploy, rollback, scheduling a deployment) return 409 P-059. If it was ever executed, deployed, or replayed, it is kept for audit; otherwise it is permanently deleted after 30 days.",
       inputSchema: z2.object({
         groupId: z2.string().uuid().describe("Policy group ID")
       })
@@ -4065,13 +4090,13 @@ function registerFactTools(server, callApi) {
     {
       title: "Update Fact Definition",
       annotations: { readOnlyHint: false, destructiveHint: true },
-      description: "Update a fact definition. The key is immutable. The type can change only while no rule references the fact; if any does, the call fails with FD-007 and reports the count. Only the fields you send are changed. System facts accept name, description, and PII only.",
+      description: "Update a fact definition. The key is immutable. The type can change only while no rule references the fact; if any does, the call fails with FD-007 and reports the count. Rules in deleted groups do not count. Only the fields you send are changed. System facts accept name, description, and PII only.",
       inputSchema: z5.object({
         factId: z5.string().uuid().describe("Fact definition ID"),
         name: z5.string().optional().describe("Display name"),
         description: z5.string().optional().describe("Description"),
         type: z5.enum(VALUE_TYPES).optional().describe(
-          "Value type. Omit to leave it unchanged. Changing it fails with FD-007 while any rule references the fact."
+          "Value type. Omit to leave it unchanged. Changing it fails with FD-007 while any rule outside a deleted group references the fact."
         ),
         isRequired: z5.boolean().optional().describe("Required flag"),
         isPii: z5.boolean().optional().describe("PII flag \u2014 enables/disables masking (changeable even on system facts)"),
@@ -4093,7 +4118,7 @@ function registerFactTools(server, callApi) {
     {
       title: "Delete Fact Definition",
       annotations: { readOnlyHint: false, destructiveHint: true },
-      description: "Delete a fact definition. System facts cannot be deleted. Neither can a fact that any rule references: that call fails with FD-006 and reports the count. Remove the references first.",
+      description: "Delete a fact definition. System facts cannot be deleted. Neither can a fact that any rule references: that call fails with FD-006 and reports the count. Rules in deleted groups do not count. Remove the references first.",
       inputSchema: z5.object({
         factId: z5.string().uuid().describe("Fact definition ID")
       })
@@ -4405,7 +4430,8 @@ function registerAnalyticsTools(server, callApi) {
           UPLOADED   → source S3_BUCKET,      with dataset.path (the path returned by lexq_dataset_upload)
           MANUAL     → source REQUEST_BODY,   with dataset.manualData (array of fact records)
 
-        options.maxRecords: number (max 100000, default 10000)
+        options.maxRecords: number (max ${MAX_SIMULATION_RECORDS}). When omitted, HISTORICAL and UPLOADED run at
+          most ${DEFAULT_SIMULATION_RECORDS} records and MANUAL runs every record sent.
         options.baselinePolicyVersionId: uuid (optional, for baseline comparison)
         options.includeRuleStats: boolean
         options.metricConfig: optional — omit for plain execution count. To aggregate a fact, pass
@@ -4885,7 +4911,7 @@ function registerWebhookSubscriptionTools(server, callApi) {
     {
       title: "List Webhook Subscriptions",
       annotations: { readOnlyHint: true },
-      description: "List platform event webhook subscriptions. These receive deployment lifecycle notifications (publish, deploy, rollback, undeploy).",
+      description: "List platform event webhook subscriptions. These receive deployment lifecycle notifications: publish, deploy, rollback, and undeploy, plus a deployment being scheduled or a schedule being canceled.",
       inputSchema: z13.object({
         page: z13.number().int().min(0).default(0).describe("Page number"),
         size: z13.number().int().min(1).max(100).default(20).describe("Page size")
@@ -4913,7 +4939,7 @@ function registerWebhookSubscriptionTools(server, callApi) {
     {
       title: "Save Webhook Subscription",
       annotations: { readOnlyHint: false, destructiveHint: true },
-      description: 'Create or update a webhook subscription. Omit id to create, provide id to update. Events: VERSION_PUBLISHED, DEPLOYED, ROLLED_BACK, UNDEPLOYED. Formats: GENERIC (full JSON), SLACK ({"text": "..."}).',
+      description: `Create or update a webhook subscription. Omit id to create, provide id to update. Events: ${PlatformEventType.join(", ")}. Formats: GENERIC (full JSON), SLACK ({"text": "..."}).`,
       inputSchema: z13.object({
         id: z13.string().uuid().optional().describe("Subscription ID (omit to create, provide to update)"),
         name: z13.string().min(1).describe("Subscription name (unique per tenant)"),

package/dist/mcp/register.js

@@ -37,6 +37,8 @@ var WebhookPayloadFormat = ["GENERIC", "SLACK"];
 // src/types/constants.ts
 var MAX_ROUNDING_SCALE = 34;
 var REPLAY_WINDOW_MAX_RECORDS = 5e4;
+var DEFAULT_SIMULATION_RECORDS = 1e3;
+var MAX_SIMULATION_RECORDS = 1e5;
 var PROFILE_SAMPLE_PERMILLE = 10;
 var LATENCY_WINDOW_MILLIS = 6e4;
 var TAIL_MIN_OBS = 3;
@@ -58,7 +60,7 @@ function registerGroupTools(server, callApi) {
     {
       title: "List Policy Groups",
       annotations: { readOnlyHint: true },
-      description: "List all policy groups (tenant-wide, priority ASC).",
+      description: "List policy groups (tenant-wide, priority ASC). Deleted groups are not included.",
       inputSchema: z2.object({})
     },
     async () => callApi("GET", "policy-groups")
@@ -111,12 +113,14 @@ function registerGroupTools(server, callApi) {
     {
       title: "Update Policy Group",
       annotations: { readOnlyHint: false, destructiveHint: true },
-      description: "Update a policy group. Only provided fields are updated; omitted fields remain unchanged.",
+      description: "Update a policy group. Only provided fields are updated; omitted fields remain unchanged. A deleted group cannot be updated (409 P-059).",
       inputSchema: z2.object({
         groupId: z2.string().uuid().describe("Policy group ID"),
         name: z2.string().optional().describe("New name"),
         description: z2.string().optional().describe("New description"),
-        status: z2.enum(["ACTIVE", "DISABLED"]).optional().describe("Status (DISABLED = emergency stop)"),
+        status: z2.enum(["ACTIVE", "DISABLED"]).optional().describe(
+          "DISABLED stops production execution of this group: execution calls return 403 (P-009), and a composite call that includes the group is rejected in full. The deployed version and any A/B test are kept, and dry run, Impact Simulation, and Decision Replay keep working, so a fix can be verified before setting ACTIVE again. To go back to the previous version, use lexq_deploy_rollback. To take the version out of production, use lexq_deploy_undeploy."
+        ),
         activationGroup: z2.string().optional().describe(
           "Activation group (Execution Group) cluster key. Policy groups sharing this key compete, and group priority picks the winners."
         ),
@@ -134,7 +138,7 @@ function registerGroupTools(server, callApi) {
     {
       title: "Delete Policy Group",
       annotations: { readOnlyHint: false, destructiveHint: true },
-      description: "Archive a policy group. Only non-live groups can be deleted. This is irreversible.",
+      description: "Delete (archive) a policy group. A deployed group cannot be deleted (P-020); undeploy it first with lexq_deploy_undeploy, which also ends a running A/B test. This cannot be undone. The group no longer appears in lexq_groups_list and its name can be reused right away. Calls that change it (settings, versions, rules, starting an A/B test, publish, deploy, rollback, scheduling a deployment) return 409 P-059. If it was ever executed, deployed, or replayed, it is kept for audit; otherwise it is permanently deleted after 30 days.",
       inputSchema: z2.object({
         groupId: z2.string().uuid().describe("Policy group ID")
       })
@@ -634,13 +638,13 @@ function registerFactTools(server, callApi) {
     {
       title: "Update Fact Definition",
       annotations: { readOnlyHint: false, destructiveHint: true },
-      description: "Update a fact definition. The key is immutable. The type can change only while no rule references the fact; if any does, the call fails with FD-007 and reports the count. Only the fields you send are changed. System facts accept name, description, and PII only.",
+      description: "Update a fact definition. The key is immutable. The type can change only while no rule references the fact; if any does, the call fails with FD-007 and reports the count. Rules in deleted groups do not count. Only the fields you send are changed. System facts accept name, description, and PII only.",
       inputSchema: z5.object({
         factId: z5.string().uuid().describe("Fact definition ID"),
         name: z5.string().optional().describe("Display name"),
         description: z5.string().optional().describe("Description"),
         type: z5.enum(VALUE_TYPES).optional().describe(
-          "Value type. Omit to leave it unchanged. Changing it fails with FD-007 while any rule references the fact."
+          "Value type. Omit to leave it unchanged. Changing it fails with FD-007 while any rule outside a deleted group references the fact."
         ),
         isRequired: z5.boolean().optional().describe("Required flag"),
         isPii: z5.boolean().optional().describe("PII flag \u2014 enables/disables masking (changeable even on system facts)"),
@@ -662,7 +666,7 @@ function registerFactTools(server, callApi) {
     {
       title: "Delete Fact Definition",
       annotations: { readOnlyHint: false, destructiveHint: true },
-      description: "Delete a fact definition. System facts cannot be deleted. Neither can a fact that any rule references: that call fails with FD-006 and reports the count. Remove the references first.",
+      description: "Delete a fact definition. System facts cannot be deleted. Neither can a fact that any rule references: that call fails with FD-006 and reports the count. Rules in deleted groups do not count. Remove the references first.",
       inputSchema: z5.object({
         factId: z5.string().uuid().describe("Fact definition ID")
       })
@@ -974,7 +978,8 @@ function registerAnalyticsTools(server, callApi) {
           UPLOADED   → source S3_BUCKET,      with dataset.path (the path returned by lexq_dataset_upload)
           MANUAL     → source REQUEST_BODY,   with dataset.manualData (array of fact records)
 
-        options.maxRecords: number (max 100000, default 10000)
+        options.maxRecords: number (max ${MAX_SIMULATION_RECORDS}). When omitted, HISTORICAL and UPLOADED run at
+          most ${DEFAULT_SIMULATION_RECORDS} records and MANUAL runs every record sent.
         options.baselinePolicyVersionId: uuid (optional, for baseline comparison)
         options.includeRuleStats: boolean
         options.metricConfig: optional — omit for plain execution count. To aggregate a fact, pass
@@ -1454,7 +1459,7 @@ function registerWebhookSubscriptionTools(server, callApi) {
     {
       title: "List Webhook Subscriptions",
       annotations: { readOnlyHint: true },
-      description: "List platform event webhook subscriptions. These receive deployment lifecycle notifications (publish, deploy, rollback, undeploy).",
+      description: "List platform event webhook subscriptions. These receive deployment lifecycle notifications: publish, deploy, rollback, and undeploy, plus a deployment being scheduled or a schedule being canceled.",
       inputSchema: z13.object({
         page: z13.number().int().min(0).default(0).describe("Page number"),
         size: z13.number().int().min(1).max(100).default(20).describe("Page size")
@@ -1482,7 +1487,7 @@ function registerWebhookSubscriptionTools(server, callApi) {
     {
       title: "Save Webhook Subscription",
       annotations: { readOnlyHint: false, destructiveHint: true },
-      description: 'Create or update a webhook subscription. Omit id to create, provide id to update. Events: VERSION_PUBLISHED, DEPLOYED, ROLLED_BACK, UNDEPLOYED. Formats: GENERIC (full JSON), SLACK ({"text": "..."}).',
+      description: `Create or update a webhook subscription. Omit id to create, provide id to update. Events: ${PlatformEventType.join(", ")}. Formats: GENERIC (full JSON), SLACK ({"text": "..."}).`,
       inputSchema: z13.object({
         id: z13.string().uuid().optional().describe("Subscription ID (omit to create, provide to update)"),
         name: z13.string().min(1).describe("Subscription name (unique per tenant)"),

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lexq/cli",
-  "version": "1.1.1",
+  "version": "1.1.2",
   "mcpName": "io.lexq/lexq",
   "description": "LexQ CLI — manage policies, simulate rules, and deploy from the terminal. Built for humans and AI agents.",
   "type": "module",

package/skills/lexq-groups/SKILL.md

@@ -17,9 +17,24 @@ controls conflict resolution when multiple groups interact.
 | `DISABLED` | `ARCHIVED` | **no**                            |
 
 - **ACTIVE** — executions are processed.
-- **DISABLED** — all executions are blocked. Use for emergency stop.
+- **DISABLED** — production execution stops. Execution calls return `P-009` (403), and a composite call that includes
+  the group is rejected in full. The live version and any A/B test are kept, and dry run, Impact Simulation, and
+  Decision Replay keep working, so you can verify a fix before setting `ACTIVE` again.
 - **ARCHIVED** — removed from execution. Reached only through `lexq groups delete`, not by setting `status` directly.
 
+### Disable, Roll Back, or Undeploy?
+
+| Situation                                                             | Use                    | Callers get                                                            |
+|-----------------------------------------------------------------------|------------------------|------------------------------------------------------------------------|
+| The previously deployed version is correct                            | `lexq deploy rollback` | Decisions from the previous version                                    |
+| This version has to leave production                                  | `lexq deploy undeploy` | `P-019` (400). Composite calls skip the group. A running A/B test ends |
+| Stop now without knowing the cause, then resume with the same version | `status: DISABLED`     | `P-009` (403). Composite calls that include the group are rejected     |
+
+Do not disable a group for a planned end, such as a promotion with a known end date. Set the version's `effectiveTo`
+instead. When that time passes, the group switches to its newest `ACTIVE` version that is still in effect, or is
+undeployed if there is none. Composite calls keep working either way. A disabled group rejects every composite call
+that includes it.
+
 ## CRUD Commands
 
 ### List Groups
@@ -93,20 +108,31 @@ lexq groups delete --id <groupId>
 lexq groups delete --id <groupId> --force
 ```
 
-**`delete` archives — it does not erase.** The group becomes `ARCHIVED` and stops executing;
-versions, rules, and history are retained for audit. Deleting an already-archived group is a
-no-op.
+**`delete` archives — it does not erase right away.** The group becomes `ARCHIVED` and stops
+executing. If it was ever executed, deployed, or replayed, it is kept for audit, along with its
+versions and rules. Otherwise it is permanently deleted after 30 days, together with its
+versions, rules, simulations, and schedules. Deleting an already-archived group is a no-op.
 
-Two conditions block it:
-
-| Condition              | What to do first                                    |
-|------------------------|-----------------------------------------------------|
-| The group is deployed  | `lexq deploy undeploy --group-id <gid>`             |
-| An A/B test is running | `lexq groups ab-test stop --group-id <gid> --force` |
+A deployed group cannot be deleted (`P-020`). Undeploy it first with
+`lexq deploy undeploy --group-id <gid> --memo "<reason>"`, which also ends a running A/B test.
 
 Archiving cancels any pending scheduled deployment and closes the priority gap — remaining groups
 are renumbered 1…N.
 
+A deleted group no longer appears in `lexq groups list` and cannot be restored or changed.
+Changing its settings, versions, or rules, starting an A/B test, and publishing, deploying,
+rolling back, or scheduling a deployment all return `409` `P-059`. To start over, create a new
+group.
+
+**The name can be reused right away.** Records keep the group's ID and the name it had, so after
+a new group takes the name, deployment history, scheduled deployments, execution history,
+simulations, and replays can list two groups under that name. These records carry
+`policyGroupArchivedAt`, the time the group was deleted (`null` if it has not been). In the
+tables of `lexq deploy history`, `deploy schedules`, `history list`, and
+`analytics simulation list` (`--format table`), a deleted group's name shows as
+`(deleted) <name>`. To see one group's deployments or executions only, pass its ID to
+`lexq deploy history --group-id` or `lexq history list --group-id`.
+
 ## Conflict Resolution
 
 ### Activation Mode (across groups in the same `activationGroup`)
@@ -246,4 +272,5 @@ lets you reuse the existing group instead of handling the error.
 lexq groups update --id <groupId> --json '{"status": "DISABLED"}'
 ```
 
-This immediately stops all executions for the group. No undeploy needed.
+This immediately stops production execution for the group. Dry run, Impact Simulation, and Decision Replay keep
+working. No undeploy needed.

package/skills/lexq-shared/SKILL.md

@@ -19,6 +19,9 @@ lexq auth login
 lexq auth whoami
 ```
 
+Create the key with the **Manage** scope in the Console (Management → API Keys). An **Execute only** key is
+for calling the execution API from your application and does not work with this CLI.
+
 The API key is passed as `X-API-KEY` header on every request. You can also override per-command:
 
 ```bash