@lotics/cli 0.205.1 → 0.205.2

package/dist/src/cli.js

@@ -15559,8 +15559,15 @@ var LoticsClient = class {
    * no caller has to remember that a partial payload silently drops
    * `instructions`, `outputs` and the model pin.
    */
-  async setAppAgent(app_id, alias, patch) {
-    return this.execute("set_app_agent", { app_id, alias, ...patch });
+  async setAppAgent(app_id, alias, patch, acknowledge_breaking_api_change) {
+    return this.execute("set_app_agent", {
+      app_id,
+      alias,
+      ...patch,
+      // Sent only when the caller asked for it: absent means "refuse a break",
+      // which is the answer a caller who said nothing gave.
+      ...acknowledge_breaking_api_change ? { acknowledge_breaking_api_change: true } : {}
+    });
   }
   /**
    * Fetch one app workflow's faithful source + bound input/output schemas via
@@ -34267,6 +34274,9 @@ var appAgentDeclarationSchema = zod_default.object({
     "Set by the server when a registry copy materialized this agent. An upgrade replaces the declaration only while it still matches this fingerprint."
   )
 });
+function declaresSchema(half) {
+  return half !== void 0 && Object.keys(half).length > 0;
+}
 var appThemeSchema = zod_default.object({
   color: optionColorSchema.nullable().optional().describe("Theme color for the app")
 });
@@ -40111,7 +40121,7 @@ function resultSideEffects(result) {
 }
 
 // src/version.ts
-var VERSION = "0.205.1";
+var VERSION = "0.205.2";
 
 // src/timezone.ts
 function machineTimezone() {
@@ -40671,6 +40681,12 @@ var COMMANDS = [
       "  lotics app create <name> [path]      Create a new custom-code app + scaffold locally",
       "         [--from <model.json>#<app>]   \u2026 with the plan's screens: each a registry shape",
       "                                       over the live table its entity became",
+      "         [--api]                       \u2026 with NO screens: the app's declared queries and",
+      "                                       workflows are the whole of what it offers, called",
+      "                                       over HTTP by the customer's own site, server or",
+      "                                       agent. No bundle, so nothing is built or deployed \u2014",
+      "                                       app query set / app workflow set publish each",
+      "                                       declaration, and app api publish snapshots them",
       "  lotics app pull <app_id> [path]      Bootstrap full local env (source + npm install + types)",
       "  lotics app deploy [--prune] [-m <msg>]",
       "                                       Typecheck + build + upload current dir as a new version \u2014 COMMIT",
@@ -40692,7 +40708,7 @@ var COMMANDS = [
       "                                       promises. Without it such a release is refused and",
       "                                       every breaking change is named. It counts only from",
       "                                       an organization admin. Same flag on app query set,",
-      "                                       app workflow set and app upgrade",
+      "                                       app workflow set, app agent set and app upgrade",
       "  lotics app versions [app_id]         Show deploy history newest-first (version,",
       "                                       timestamp, deployer, build status, -m message;",
       "                                       * marks the currently served version)",
@@ -40767,6 +40783,9 @@ var COMMANDS = [
       "                                       fields keep whatever is bound (a manifest is a",
       "                                       snapshot; replaying it would revert them). Change",
       "                                       those with set_app_agent, then pull.",
+      "         [--acknowledge-breaking-api]  \u2026 even though it breaks what the app's published API",
+      "                                       promises: an agent's alias and its declared edges",
+      "                                       are in the contract too",
       "  lotics app subdomain <new-subdomain> Rename the app's public address (its subdomain)",
       `  lotics app rename "<new name>"       Rename the app's display name (launcher title)`,
       "  lotics app dev [path] [--port=<n>] [--vite-port=<n>]",
@@ -41049,136 +41068,237 @@ var VITEST_SETUP_CONTENT = `// Runs before every test file (wired by vite.config
 // timezone pinning, anything your suite needs before it collects.
 export {};
 `;
+function packageNameFrom(appName) {
+  const folded = appName.normalize("NFD").replace(/[\u{0300}-\u{036f}]/gu, "").replace(/[đĐ]/g, (c) => c === "\u0111" ? "d" : "D");
+  return folded.toLowerCase().replace(/[^a-z0-9-]/g, "-").replace(/-+/g, "-").replace(/^-|-$/g, "").slice(0, 64) || "lotics-app";
+}
+function manifestFile(args) {
+  return {
+    path: "package.json",
+    content: JSON.stringify(
+      {
+        name: packageNameFrom(args.app_name),
+        version: "0.0.1",
+        private: true,
+        type: "module",
+        scripts: args.scripts,
+        ...args.dependencies === void 0 ? {} : { dependencies: args.dependencies },
+        devDependencies: args.devDependencies,
+        lotics: {
+          app_id: args.app_id,
+          workspace_id: args.workspace_id,
+          current_version_id: null,
+          version_number: null
+        }
+      },
+      null,
+      2
+    ) + "\n"
+  };
+}
+function tsconfigFile() {
+  return {
+    path: "tsconfig.json",
+    content: JSON.stringify(
+      {
+        compilerOptions: {
+          target: "ES2022",
+          useDefineForClassFields: true,
+          lib: ["ES2022", "DOM", "DOM.Iterable"],
+          module: "ESNext",
+          skipLibCheck: true,
+          moduleResolution: "Bundler",
+          allowImportingTsExtensions: true,
+          resolveJsonModule: true,
+          isolatedModules: true,
+          noEmit: true,
+          jsx: "react-jsx",
+          strict: true,
+          noFallthroughCasesInSwitch: true
+        },
+        // Restrict tsc to the project's own sources — a `noEmit` program has
+        // no reason to walk anything else, and under the `LOTICS_UI_SRC`
+        // dev-link `@lotics/ui` resolves to a working copy of the kit's own
+        // .tsx, which strict rules (noUnusedLocals etc.) would then fire on.
+        // `.lotics/**/*` (not bare `.lotics`): TypeScript's include glob walk
+        // SKIPS dot-directories, so a bare `.lotics` silently loads zero of the
+        // generated `.d.ts` augmentations and typed useWorkflow/useQuery/useAgentRun
+        // fall to `unknown`. The explicit glob makes the dot-dir the non-wildcard
+        // base, which IS read. (GAP-38.)
+        include: ["src", ".lotics/**/*"],
+        // src/workflows/<alias>.ts bodies run on the server (workflow globals:
+        // trigger / runtime / tool calls), and each pulls its own per-alias
+        // ambient globals under `.lotics/workflows/`. BOTH are excluded from
+        // the main typecheck: the bodies would apply the app's DOM lib (the
+        // server doesn't), and the per-alias `.globals.d.ts` files each declare
+        // their OWN ambient `trigger` — loading several into one program
+        // collides those declarations and reports false errors. Type-check the
+        // bodies with `lotics app workflow check` instead — it builds ONE
+        // isolated program per alias (mirroring the server's set-time verify),
+        // so the ambient `trigger` is unambiguous. The server stays the single
+        // verifier on `lotics app workflow set`.
+        exclude: ["node_modules", "src/workflows", ".lotics/workflows"]
+      },
+      null,
+      2
+    ) + "\n"
+  };
+}
+function gitignoreFile() {
+  return {
+    path: ".gitignore",
+    content: `node_modules
+dist
+*.tsbuildinfo
+.DS_Store
+.lotics
+coverage
+`
+  };
+}
+function ciWorkflowFile(steps) {
+  return {
+    path: ".github/workflows/ci.yml",
+    content: `name: CI
+
+on:
+  push:
+    branches: [main]
+  pull_request:
+
+jobs:
+  ci:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-node@v4
+        with:
+          node-version: 22
+      - run: npm ci
+${steps.map((step) => `      - run: ${step}
+`).join("")}`
+  };
+}
+function workflowsReadmeFile() {
+  return {
+    path: "src/workflows/README.md",
+    content: `# Workflow bodies
+
+Editable JS-subset bodies of this app's workflows live here, one file per alias:
+\`src/workflows/<alias>.ts\`.
+
+## Loop
+
+\`\`\`bash
+lotics app workflow pull          # write/refresh every src/workflows/<alias>.ts from the server
+# edit src/workflows/<alias>.ts
+lotics app workflow check <alias> # typecheck the body locally (same verdict as \`set\`)
+lotics app workflow set <alias>   # push it back through set_app_workflow (the server verifies)
+\`\`\`
+
+\`lotics app pull <app_id>\` also writes these files (alongside the rest of the project).
+
+## What a body is
+
+A workflow body is a **JS-subset expression** that runs server-side using workflow
+globals (\`trigger\`, \`runtime\`, tool calls) and ends with \`return({ data })\`. Each
+pulled file wraps the body in the server's \`__workflow\` envelope and references its
+per-alias ambient globals at \`.lotics/workflows/<alias>.globals.d.ts\`, so it **is**
+locally typecheckable:
+
+\`\`\`bash
+lotics app workflow check        # check every body; [alias] to check one
+\`\`\`
+
+\`check\` builds ONE isolated program per alias (the app's own \`typescript\`, the
+server's compile options \u2014 strict, lib es2022 with no DOM), so each body's ambient
+\`trigger\` is unambiguous and the verdict mirrors set-time verify. The main
+\`npm run typecheck\` excludes \`src/workflows\` + \`.lotics/workflows\` (the bodies would
+apply the app's DOM lib, and the per-alias globals collide on \`trigger\`). The
+verification that matters still runs on the **server** when you \`set\` \u2014 the same
+guarantee as authoring via \`set_app_workflow\` directly. Edit only the body BETWEEN
+the wrapper lines; the wrapper, the \`/// <reference>\`, and the \`export {};\` marker
+are CLI bookkeeping (stripped on \`set\`). Do not rename a file (the filename is the
+alias the binding is keyed by).
+
+## Authority
+
+\`lotics app deploy\` never authors workflows \u2014 it carries code, queries, and
+capabilities only. \`apps.workflows\` has exactly one author: \`set_app_workflow\`
+(which \`lotics app workflow set\` calls). The typed \`inputs\`/\`outputs\` schema for
+each alias lives in \`package.json#lotics.workflows.<alias>\`.
+`
+  };
+}
 function buildStarterTemplate(args) {
   const uiVersion = args.ui_version;
   const sdkVersion = args.sdk_version;
-  const folded = args.app_name.normalize("NFD").replace(/[\u0300-\u036f]/g, "").replace(/[đĐ]/g, (c) => c === "\u0111" ? "d" : "D");
-  const sanitizedPkgName = folded.toLowerCase().replace(/[^a-z0-9-]/g, "-").replace(/-+/g, "-").replace(/^-|-$/g, "").slice(0, 64) || "lotics-app";
   return [
-    {
-      path: "package.json",
-      content: JSON.stringify(
-        {
-          name: sanitizedPkgName,
-          version: "0.0.1",
-          private: true,
-          type: "module",
-          scripts: {
-            dev: "vite",
-            build: "vite build",
-            preview: "vite preview",
-            typecheck: "tsc --noEmit",
-            // Scope to src/ — oxlint's default scan walks node_modules too.
-            lint: "oxlint src",
-            // No `--passWithNoTests`, deliberately. It would be justified by a
-            // TEMPORARY condition ("the scaffold seeds nothing") and then ship
-            // forever in every app's package.json and CI, where its only
-            // remaining effect is to turn "vitest discovered no test files" into
-            // success — a green suite over a renamed `src/`, a changed `include`
-            // or a broken vitest config, indefinitely. A detector that cannot
-            // fire when the thing is ABSENT rather than excessive is not one.
-            //
-            // What the scaffold seeds instead is `src/harness.test.tsx`, which
-            // asserts the HARNESS and nothing else. The file it replaces
-            // (`src/App.test.tsx`) asserted the scaffold's placeholder copy
-            // ("First item"), so it failed the moment the author did the very
-            // thing the closing instructions tell them to do — edit
-            // `src/App.tsx` — and a smoke test that renders `<App/>` would fail
-            // the same way for any real app whose first screen reaches the host
-            // bridge on mount. The harness test touches neither.
-            test: "vitest run"
-          },
-          dependencies: {
-            "@lotics/app-sdk": sdkVersion,
-            // The FilePreview engines (pdfjs-dist / @lotics/docx / @lotics/xlsx) are
-            // NOT listed here: they ship as @lotics/ui dependencies (7.14.0+), so
-            // every app gets them transitively — one version source, no skew. An app
-            // that IMPORTS @lotics/docx or @lotics/xlsx directly (its own doc/excel
-            // builders) declares its own dependency then.
-            "@lotics/ui": uiVersion,
-            // @base-ui/react is deliberately absent: @lotics/ui declares it as an
-            // EXACT peer, npm installs a peer, and a second declaration here is a
-            // version that drifts from the kit's — which Base UI punishes
-            // silently, since it passes state through React context and a nested
-            // copy renders parts that never open.
-            "lucide-react": "^0.562.0",
-            react: "^19.0.0",
-            "react-dom": "^19.0.0",
-            // In-app routing for the scaffolded list→detail example. The app owns
-            // its routing; the SDK's `isEmbedded()` picks memory vs browser history. `react-router` is the
-            // canonical package (react-router-dom is a shim over it).
-            "react-router": "^8.3.0"
-          },
-          devDependencies: {
-            "@testing-library/react": "^16.1.0",
-            "@types/react": "^19.0.0",
-            "@types/react-dom": "^19.0.0",
-            "@vitejs/plugin-react": "^4.3.0",
-            jsdom: "^25.0.0",
-            oxlint: "^0.13.0",
-            // Track the platform's TS major so `lotics app workflow check` (which runs
-            // the app's OWN typescript) gives the same verdict the server does at set-time.
-            typescript: "~6.0.3",
-            vite: "^5.4.0",
-            vitest: "^2.1.0"
-          },
-          lotics: {
-            app_id: args.app_id,
-            workspace_id: args.workspace_id,
-            current_version_id: null,
-            version_number: null
-          }
-        },
-        null,
-        2
-      ) + "\n"
-    },
-    {
-      path: "tsconfig.json",
-      content: JSON.stringify(
-        {
-          compilerOptions: {
-            target: "ES2022",
-            useDefineForClassFields: true,
-            lib: ["ES2022", "DOM", "DOM.Iterable"],
-            module: "ESNext",
-            skipLibCheck: true,
-            moduleResolution: "Bundler",
-            allowImportingTsExtensions: true,
-            resolveJsonModule: true,
-            isolatedModules: true,
-            noEmit: true,
-            jsx: "react-jsx",
-            strict: true,
-            noFallthroughCasesInSwitch: true
-          },
-          // Restrict tsc to the project's own sources — a `noEmit` program has
-          // no reason to walk anything else, and under the `LOTICS_UI_SRC`
-          // dev-link `@lotics/ui` resolves to a working copy of the kit's own
-          // .tsx, which strict rules (noUnusedLocals etc.) would then fire on.
-          // `.lotics/**/*` (not bare `.lotics`): TypeScript's include glob walk
-          // SKIPS dot-directories, so a bare `.lotics` silently loads zero of the
-          // generated `.d.ts` augmentations and typed useWorkflow/useQuery/useAgentRun
-          // fall to `unknown`. The explicit glob makes the dot-dir the non-wildcard
-          // base, which IS read. (GAP-38.)
-          include: ["src", ".lotics/**/*"],
-          // src/workflows/<alias>.ts bodies run on the server (workflow globals:
-          // trigger / runtime / tool calls), and each pulls its own per-alias
-          // ambient globals under `.lotics/workflows/`. BOTH are excluded from
-          // the main typecheck: the bodies would apply the app's DOM lib (the
-          // server doesn't), and the per-alias `.globals.d.ts` files each declare
-          // their OWN ambient `trigger` — loading several into one program
-          // collides those declarations and reports false errors. Type-check the
-          // bodies with `lotics app workflow check` instead — it builds ONE
-          // isolated program per alias (mirroring the server's set-time verify),
-          // so the ambient `trigger` is unambiguous. The server stays the single
-          // verifier on `lotics app workflow set`.
-          exclude: ["node_modules", "src/workflows", ".lotics/workflows"]
-        },
-        null,
-        2
-      ) + "\n"
-    },
+    manifestFile({
+      app_name: args.app_name,
+      app_id: args.app_id,
+      workspace_id: args.workspace_id,
+      scripts: {
+        dev: "vite",
+        build: "vite build",
+        preview: "vite preview",
+        typecheck: "tsc --noEmit",
+        // Scope to src/ — oxlint's default scan walks node_modules too.
+        lint: "oxlint src",
+        // No `--passWithNoTests`, deliberately. It would be justified by a
+        // TEMPORARY condition ("the scaffold seeds nothing") and then ship
+        // forever in every app's package.json and CI, where its only
+        // remaining effect is to turn "vitest discovered no test files" into
+        // success — a green suite over a renamed `src/`, a changed `include`
+        // or a broken vitest config, indefinitely. A detector that cannot
+        // fire when the thing is ABSENT rather than excessive is not one.
+        //
+        // What the scaffold seeds instead is `src/harness.test.tsx`, which
+        // asserts the HARNESS and nothing else. The file it replaces
+        // (`src/App.test.tsx`) asserted the scaffold's placeholder copy
+        // ("First item"), so it failed the moment the author did the very
+        // thing the closing instructions tell them to do — edit
+        // `src/App.tsx` — and a smoke test that renders `<App/>` would fail
+        // the same way for any real app whose first screen reaches the host
+        // bridge on mount. The harness test touches neither.
+        test: "vitest run"
+      },
+      dependencies: {
+        "@lotics/app-sdk": sdkVersion,
+        // The FilePreview engines (pdfjs-dist / @lotics/docx / @lotics/xlsx) are
+        // NOT listed here: they ship as @lotics/ui dependencies (7.14.0+), so
+        // every app gets them transitively — one version source, no skew. An app
+        // that IMPORTS @lotics/docx or @lotics/xlsx directly (its own doc/excel
+        // builders) declares its own dependency then.
+        "@lotics/ui": uiVersion,
+        // @base-ui/react is deliberately absent: @lotics/ui declares it as an
+        // EXACT peer, npm installs a peer, and a second declaration here is a
+        // version that drifts from the kit's — which Base UI punishes
+        // silently, since it passes state through React context and a nested
+        // copy renders parts that never open.
+        "lucide-react": "^0.562.0",
+        react: "^19.0.0",
+        "react-dom": "^19.0.0",
+        // In-app routing for the scaffolded list→detail example. The app owns
+        // its routing; the SDK's `isEmbedded()` picks memory vs browser history. `react-router` is the
+        // canonical package (react-router-dom is a shim over it).
+        "react-router": "^8.3.0"
+      },
+      devDependencies: {
+        "@testing-library/react": "^16.1.0",
+        "@types/react": "^19.0.0",
+        "@types/react-dom": "^19.0.0",
+        "@vitejs/plugin-react": "^4.3.0",
+        jsdom: "^25.0.0",
+        oxlint: "^0.13.0",
+        // Track the platform's TS major so `lotics app workflow check` (which runs
+        // the app's OWN typescript) gives the same verdict the server does at set-time.
+        typescript: "~6.0.3",
+        vite: "^5.4.0",
+        vitest: "^2.1.0"
+      }
+    }),
+    tsconfigFile(),
     {
       path: "vite.config.ts",
       content: `/// <reference types="vitest" />
@@ -41508,63 +41628,7 @@ export default function App() {
 }
 `
     },
-    {
-      // The home for editable workflow bodies. `lotics app pull` writes one
-      // `src/workflows/<alias>.ts` per bound workflow (faithful server source);
-      // edit it, then `lotics app workflow set <alias>` pushes it back through
-      // set_app_workflow (the server verifies). A new app has no bound workflows
-      // yet, so this is just the docked directory + the loop reference. It's a
-      // .md (not a .ts) so tsc's `include: ["src"]` never tries to compile it —
-      // a workflow body is a JS-subset expression over server globals
-      // (trigger / runtime / tool calls) that does NOT typecheck standalone.
-      path: "src/workflows/README.md",
-      content: `# Workflow bodies
-
-Editable JS-subset bodies of this app's workflows live here, one file per alias:
-\`src/workflows/<alias>.ts\`.
-
-## Loop
-
-\`\`\`bash
-lotics app workflow pull          # write/refresh every src/workflows/<alias>.ts from the server
-# edit src/workflows/<alias>.ts
-lotics app workflow check <alias> # typecheck the body locally (same verdict as \`set\`)
-lotics app workflow set <alias>   # push it back through set_app_workflow (the server verifies)
-\`\`\`
-
-\`lotics app pull <app_id>\` also writes these files (alongside the rest of the project).
-
-## What a body is
-
-A workflow body is a **JS-subset expression** that runs server-side using workflow
-globals (\`trigger\`, \`runtime\`, tool calls) and ends with \`return({ data })\`. Each
-pulled file wraps the body in the server's \`__workflow\` envelope and references its
-per-alias ambient globals at \`.lotics/workflows/<alias>.globals.d.ts\`, so it **is**
-locally typecheckable:
-
-\`\`\`bash
-lotics app workflow check        # check every body; [alias] to check one
-\`\`\`
-
-\`check\` builds ONE isolated program per alias (the app's own \`typescript\`, the
-server's compile options \u2014 strict, lib es2022 with no DOM), so each body's ambient
-\`trigger\` is unambiguous and the verdict mirrors set-time verify. The main
-\`npm run typecheck\` excludes \`src/workflows\` + \`.lotics/workflows\` (the bodies would
-apply the app's DOM lib, and the per-alias globals collide on \`trigger\`). The
-verification that matters still runs on the **server** when you \`set\` \u2014 the same
-guarantee as authoring via \`set_app_workflow\` directly. Edit only the body BETWEEN
-the wrapper lines; the wrapper, the \`/// <reference>\`, and the \`export {};\` marker
-are CLI bookkeeping (stripped on \`set\`). Do not rename a file (the filename is the
-alias the binding is keyed by).
-
-## Authority
-
-\`lotics app deploy\` never authors workflows \u2014 it carries code, queries, and
-capabilities only. \`apps.workflows\` has exactly one author: \`set_app_workflow\`
-(which \`lotics app workflow set\` calls). The typed \`inputs\`/\`outputs\` schema for
-each alias lives in \`package.json#lotics.workflows.<alias>\`.
-`
-    },
+    workflowsReadmeFile(),
     {
       path: "src/css_modules.d.ts",
       content: `declare module "*.module.css" {
@@ -41610,40 +41674,8 @@ describe("test harness", () => {
       path: VITEST_SETUP_FILENAME,
       content: VITEST_SETUP_CONTENT
     },
-    {
-      path: ".github/workflows/ci.yml",
-      content: `name: CI
-
-on:
-  push:
-    branches: [main]
-  pull_request:
-
-jobs:
-  ci:
-    runs-on: ubuntu-latest
-    steps:
-      - uses: actions/checkout@v4
-      - uses: actions/setup-node@v4
-        with:
-          node-version: 22
-      - run: npm ci
-      - run: npm run typecheck
-      - run: npm run lint
-      - run: npm test
-      - run: npm run build
-`
-    },
-    {
-      path: ".gitignore",
-      content: `node_modules
-dist
-*.tsbuildinfo
-.DS_Store
-.lotics
-coverage
-`
-    },
+    ciWorkflowFile(["npm run typecheck", "npm run lint", "npm test", "npm run build"]),
+    gitignoreFile(),
     {
       path: "AGENTS.md",
       content: `# ${args.app_name} \u2014 for the agent editing this app
@@ -41767,6 +41799,144 @@ building.
     }
   ];
 }
+function buildApiStarterTemplate(args) {
+  return [
+    manifestFile({
+      app_name: args.app_name,
+      app_id: args.app_id,
+      workspace_id: args.workspace_id,
+      // `typecheck` alone. There is no bundle to build, no component to render
+      // under jsdom and no DOM source for a linter to scan — a script that
+      // exists and does nothing is a green check that means nothing.
+      scripts: { typecheck: "tsc --noEmit" },
+      devDependencies: { typescript: "~6.0.3" }
+    }),
+    tsconfigFile(),
+    workflowsReadmeFile(),
+    // `.lotics/` is generated and gitignored, so a fresh clone holds no types at
+    // all and `tsc` would refuse a program with no inputs. `app codegen` writes
+    // them from the manifest with no credential and no network, which is exactly
+    // what a CI runner has.
+    ciWorkflowFile(["npx --yes @lotics/cli app codegen", "npm run typecheck"]),
+    gitignoreFile(),
+    {
+      path: "AGENTS.md",
+      content: `# ${args.app_name} \u2014 for the agent editing this app
+
+A Lotics app with **no screens**. What it offers is its declared queries and workflows, called
+over HTTP by something outside Lotics \u2014 a website, a server, another agent. There is no React
+here, no bundle, and nothing to deploy: \`lotics app query set\` and \`lotics app workflow set\`
+publish each declaration on their own.
+
+## Read in this order, and stop when you have the answer
+
+1. **\`lotics docs data_model\`** \u2014 tables, fields and records as a query meets them. A query is
+   written against the workspace's real schema, so read the schema before the query.
+2. **\`lotics docs building_an_app\`** \u2014 the sequence: clarify the ask, model the data, declare
+   the reads, declare the writes. Skip its screen sections; everything before them applies.
+3. **\`lotics docs cli_reference\`** \u2014 every command's real behaviour, flags and refusals.
+4. **\`lotics run query_tables '{}'\`** and \`lotics run query_records '{"table_id":"tbl_\u2026"}'\` \u2014
+   the workspace itself. **Verify real VALUES, never just that a field exists.**
+
+## The rules that do not change
+
+- **A query NAMES the columns it returns.** Declare a \`project\` over the fields the caller
+  reads. Without one the app is promising whatever the table happens to hold, so the first
+  \`lotics app api publish\` is refused by alias and never publishes a shape that can move.
+- **A workflow is the only way this app writes.** Queries read. Every write is a body in
+  \`src/workflows/<alias>.ts\` with declared \`inputs\`, so a caller's bad value is a \`field_errors\`
+  reply rather than a half-written row.
+- **Declare what it changes.** \`package.json#lotics.writes\` names the fields the workflows
+  write; \`lotics app check\` refuses a body that writes outside it.
+- **No concrete id in source.** \`rec_\`, \`fld_\` and \`opt_\` literals belong in \`.lotics/\`, which
+  is generated. \`lotics app codegen\` writes the \`F\`/\`OPT\`/\`TBL\` maps to type against.
+- **An alias is a promise once the API is published.** Renaming one, or narrowing what it takes,
+  breaks a caller nobody here can redeploy \u2014 which is why such a write is refused unless it
+  carries \`--acknowledge-breaking-api\`.
+
+## Before you hand it over
+
+1. **\`lotics app check\`** \u2014 bindings, declarations, workflow bodies, id portability. It exits
+   non-zero on anything a release would refuse.
+2. **Every query projects.** No alias returns a row shape nobody declared.
+3. **Every workflow declares its inputs**, and its body reads each one.
+4. **Call it the way the consumer will** \u2014 the query endpoint with a key, and again without one
+   if the app is public. What you get back is what you are promising.
+5. **\`lotics app api publish\`**, then read the warnings: they name what the published surface
+   exposes that you may not have meant to.
+`
+    },
+    {
+      path: "README.md",
+      content: `# ${args.app_name}
+
+A Lotics app with **no screens**. Its declared queries and workflows are the API a caller
+outside Lotics reads and writes through \u2014 your own site, your own server, an agent.
+
+## The loop
+
+\`\`\`bash
+# 1. Declare a query in package.json#lotics.queries.<alias>, and NAME THE COLUMNS
+#    it returns (a \`project\` node) \u2014 they are the shape you are promising.
+lotics app query set <alias>
+
+# 2. Write a body in src/workflows/<alias>.ts, declare its inputs in
+#    package.json#lotics.workflows.<alias>, then push it (the server verifies).
+lotics app workflow check <alias>
+lotics app workflow set <alias>
+
+# 3. Everything a release would refuse, without shipping one.
+lotics app check
+
+# 4. Let something outside reach it: share the app publicly (no key at all), or
+#    give an API key access to this app \u2014 Settings \u2192 API keys \u2192 Only selected ones.
+
+# 5. Snapshot what those aliases promise, as a numbered contract version.
+lotics app api publish
+lotics app api spec -o api.openapi.json   # the OpenAPI 3.1 document of that snapshot
+lotics app api status                     # which version callers hold
+\`\`\`
+
+## Calling it
+
+\`\`\`bash
+curl -X POST https://api.lotics.ai/v1/apps/<app_id>/queries/<alias> \\
+  -H "Content-Type: application/json" \\
+  -H "Authorization: Bearer ltk_\u2026" \\
+  -d '{"params": {}, "limit": 50}'
+
+curl -X POST https://api.lotics.ai/v1/apps/<app_id>/workflows/<alias>/execute \\
+  -H "Content-Type: application/json" \\
+  -H "Authorization: Bearer ltk_\u2026" \\
+  -d '{"inputs": {}}'
+\`\`\`
+
+A query answers \`rows\` (one object per row, keyed by the column names the query declares),
+\`columns\`, and \u2014 when asked for \u2014 \`total\`, \`next_cursor\` and \`truncated\`. A workflow answers
+\`status\`, an optional \`message\`, \`data\`, \`files\`, and \`field_errors\` keyed by input name when it
+refused a value. On a **public** app, send no \`Authorization\` header at all.
+
+## While you author
+
+There is no \`npm run dev\` and no \`lotics app dev\` here \u2014 both serve a Vite bundle, and this app
+has none. Read the workspace with \`lotics run query_records '{"table_id":"tbl_\u2026"}'\`, and call the
+endpoints above once the app is shared or a key reaches it.
+
+\`\`\`bash
+lotics app codegen     # regenerate .lotics/* (types + field/option ids) from the manifest
+npm run typecheck      # tsc --noEmit over the generated types
+\`\`\`
+
+## References
+
+\`AGENTS.md\` in this directory is the reading order and the checks before you hand this over.
+\`lotics docs\` prints the rest one page at a time \u2014 \`lotics docs building_an_app\` for the
+sequence, \`lotics docs data_model\` for the schema, \`lotics docs cli_reference\` for every
+command's real behaviour.
+`
+    }
+  ];
+}
 function escapeHtml(s) {
   return s.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;");
 }
@@ -42281,10 +42451,10 @@ declare module "@lotics/app-sdk" {
   const inputLines = [];
   const resultLines = [];
   for (const [alias, declaration] of entries2) {
-    const valueType = declaration.inputs ? inputsToType(declaration.inputs, { nullableOptional: true, optionsByFieldKey }) : "Record<string, unknown>";
+    const valueType = declaresSchema(declaration.inputs) ? inputsToType(declaration.inputs, { nullableOptional: true, optionsByFieldKey }) : "Record<string, unknown>";
     const aliasKey = isValidIdentifier(alias) ? alias : JSON.stringify(alias);
     inputLines.push(`    ${aliasKey}: ${valueType};`);
-    if (declaration.outputs) {
+    if (declaresSchema(declaration.outputs)) {
       resultLines.push(
         `    ${aliasKey}: ${objectFieldsToType(declaration.outputs, optionsByFieldKey)};`
       );
@@ -42325,10 +42495,10 @@ declare module "@lotics/app-sdk" {
   const inputLines = [];
   const resultLines = [];
   for (const [alias, declaration] of entries2) {
-    const valueType = declaration.inputs ? inputsToType(declaration.inputs, { optionsByFieldKey }) : "Record<string, unknown>";
+    const valueType = declaresSchema(declaration.inputs) ? inputsToType(declaration.inputs, { optionsByFieldKey }) : "Record<string, unknown>";
     const aliasKey = isValidIdentifier(alias) ? alias : JSON.stringify(alias);
     inputLines.push(`    ${aliasKey}: ${valueType};`);
-    if (declaration.outputs) {
+    if (declaresSchema(declaration.outputs)) {
       resultLines.push(
         `    ${aliasKey}: ${objectFieldsToType(declaration.outputs, optionsByFieldKey)};`
       );
@@ -46112,6 +46282,12 @@ async function postModel(client, model, options) {
   }
 }
 
+// ../shared/src/app_reach.ts
+function reachedOnlyThroughApi(app) {
+  if (app.current_version_id != null) return false;
+  return Object.keys(app.queries ?? {}).length > 0 || Object.keys(app.workflows ?? {}).length > 0 || Object.keys(app.agents ?? {}).length > 0;
+}
+
 // src/dev/server.ts
 import http from "node:http";
 import net from "node:net";
@@ -54287,8 +54463,8 @@ async function fetchWorkflowGlobals(client, projectDir, app_id, alias, declarati
   }
 }
 async function fetchWorkflowDts(client, app_id, alias, declaration) {
-  const declaresSchema = declaration !== void 0 && (declaration.inputs !== void 0 || declaration.outputs !== void 0);
-  if (declaresSchema) return client.getAppWorkflowDts(app_id, alias, declaration);
+  const statesSchema = declaration !== void 0 && (declaration.inputs !== void 0 || declaration.outputs !== void 0);
+  if (statesSchema) return client.getAppWorkflowDts(app_id, alias, declaration);
   return client.getAppWorkflowDts(app_id, alias);
 }
 function runTar(args, cwd) {
@@ -54525,10 +54701,11 @@ function ensureAppTsconfig(projectDir) {
     changes.push(`added ${toAdd.join(", ")} to "exclude"`);
   }
   const existingExtends = parsed.extends;
-  if (existingExtends === void 0) {
+  const linked = fs11.existsSync(path12.join(projectDir, LINK_TSCONFIG_PATH));
+  if (linked && existingExtends === void 0) {
     parsed.extends = `./${LINK_TSCONFIG_PATH}`;
     changes.push(`added "extends": "./${LINK_TSCONFIG_PATH}" (so tsc resolves the same @lotics/ui as Vite)`);
-  } else if (existingExtends !== `./${LINK_TSCONFIG_PATH}`) {
+  } else if (linked && existingExtends !== `./${LINK_TSCONFIG_PATH}`) {
     console.error(
       `\u26A0 tsconfig.json already extends ${JSON.stringify(existingExtends)}, so the dev-link config was not added \u2014 \`tsc\` will keep resolving @lotics/ui from node_modules even under LOTICS_UI_SRC. Add "./${LINK_TSCONFIG_PATH}" to "extends" (it accepts an array) to fix it.`
     );
@@ -54582,9 +54759,16 @@ function readKitPeerNames(projectDir) {
   return peers && typeof peers === "object" ? Object.keys(peers) : [];
 }
 function writeAppDtsKitLinks(projectDir) {
+  if (!declaresKit(projectDir)) return;
   writeDevLinkTsconfig(projectDir);
   writeKitTypeAugmentation(projectDir);
 }
+function declaresKit(projectDir) {
+  const manifest = path12.join(projectDir, "package.json");
+  if (!fs11.existsSync(manifest)) return false;
+  const pkg = JSON.parse(fs11.readFileSync(manifest, "utf-8"));
+  return "@lotics/ui" in { ...pkg.dependencies, ...pkg.devDependencies };
+}
 function writeAppDts(projectDir, manifest, optionsByFieldKey) {
   const dotLotics = path12.join(projectDir, ".lotics");
   fs11.mkdirSync(dotLotics, { recursive: true });
@@ -54667,8 +54851,9 @@ function warnAppFieldsUnwritten(projectDir, err) {
 function warnAboutDevLink(projectDir, command) {
   const uiSrc = process.env.LOTICS_UI_SRC;
   if (!uiSrc) return;
-  const viteConfigPath = path12.join(projectDir, "vite.config.ts");
-  const config2 = fs11.existsSync(viteConfigPath) ? fs11.readFileSync(viteConfigPath, "utf-8") : "";
+  const viteConfigPath = viteConfigIn(projectDir);
+  if (viteConfigPath === null) return;
+  const config2 = fs11.readFileSync(viteConfigPath, "utf-8");
   const linked = config2.includes("loticsResolve") || config2.includes("LOTICS_UI_SRC");
   if (!linked) {
     console.error(
@@ -54823,14 +55008,20 @@ function inlinesKitUnderVitest(viteConfig) {
     }
   });
 }
+function viteConfigIn(projectDir) {
+  const name = VITE_CONFIG_NAMES.find(
+    (candidate) => fs11.existsSync(path12.join(projectDir, candidate))
+  );
+  return name === void 0 ? null : path12.join(projectDir, name);
+}
 function ensureAppVitestSetup(projectDir) {
+  const viteConfigPath = viteConfigIn(projectDir);
+  if (viteConfigPath === null) return;
   const setupPath = path12.join(projectDir, VITEST_SETUP_FILENAME);
   if (!fs11.existsSync(setupPath)) {
     fs11.writeFileSync(setupPath, VITEST_SETUP_CONTENT);
     console.error(`Wrote ${VITEST_SETUP_FILENAME} (wired by vite.config.ts; empty until you fill it).`);
   }
-  const viteConfigPath = path12.join(projectDir, "vite.config.ts");
-  if (!fs11.existsSync(viteConfigPath)) return;
   const viteConfig = fs11.readFileSync(viteConfigPath, "utf-8");
   if (!(/setupFiles\s*:/.test(viteConfig) && viteConfig.includes(VITEST_SETUP_FILENAME))) {
     console.error(
@@ -55005,7 +55196,19 @@ async function materializeScaffold(targetPath, files) {
   await runNpmInstall(targetPath);
   writeAppDtsKitLinks(targetPath);
 }
+async function starterDependencyRanges() {
+  const [ui, sdk] = await Promise.all([
+    requireLatestNpmVersion("@lotics/ui"),
+    requireLatestNpmVersion("@lotics/app-sdk")
+  ]);
+  return { ui, sdk };
+}
 async function appCreate(client, args) {
+  if (args.api === true && args.from !== void 0) {
+    throw new Error(
+      `--api and --from are different apps: a plan describes screens, and an --api app has none. Drop one.`
+    );
+  }
   const targetPath = path12.resolve(args.targetPath ?? appDirName(args.name));
   if (fs11.existsSync(targetPath)) {
     const entries2 = fs11.readdirSync(targetPath);
@@ -55016,10 +55219,7 @@ async function appCreate(client, args) {
   const plan = args.from === void 0 ? null : await resolvePlanForCreate(client, args.from);
   if (plan !== null) await reportPlanCoverage(client, plan);
   fs11.mkdirSync(targetPath, { recursive: true });
-  const [uiLatest, sdkLatest] = await Promise.all([
-    requireLatestNpmVersion("@lotics/ui"),
-    requireLatestNpmVersion("@lotics/app-sdk")
-  ]);
+  const ranges = args.api === true ? null : await starterDependencyRanges();
   const app = await client.createApp({
     name: args.name,
     ...plan?.app.description == null ? {} : { description: plan.app.description },
@@ -55027,12 +55227,16 @@ async function appCreate(client, args) {
     ...plan?.app.theme?.color == null ? {} : { theme: { color: plan.app.theme.color } }
   });
   console.error(`Created app: ${app.name} (${app.id})`);
-  const starter = buildStarterTemplate({
+  const starter = ranges === null ? buildApiStarterTemplate({
+    app_name: args.name,
+    app_id: app.id,
+    workspace_id: app.workspace_id
+  }) : buildStarterTemplate({
     app_name: args.name,
     app_id: app.id,
     workspace_id: app.workspace_id,
-    ui_version: `^${uiLatest}`,
-    sdk_version: `^${sdkLatest}`
+    ui_version: `^${ranges.ui}`,
+    sdk_version: `^${ranges.sdk}`
   });
   const files = plan === null ? starter : withPlanFiles(starter, plan);
   await materializeScaffold(targetPath, files);
@@ -55045,23 +55249,34 @@ async function appCreate(client, args) {
       );
     }
   }
-  console.error("Building initial version...");
-  await appDeploy(client, {
-    projectDir: targetPath,
-    message: "Initial version"
-  });
+  if (ranges !== null) {
+    console.error("Building initial version...");
+    await appDeploy(client, {
+      projectDir: targetPath,
+      message: "Initial version"
+    });
+  }
   console.error(`
 Ready. Next steps:`);
   console.error(`  cd ${path12.relative(process.cwd(), targetPath) || "."}`);
   console.error(`  lotics docs                # the contracts, at the versions installed here`);
-  if (plan === null) {
+  if (ranges === null) {
+    console.error(`  # declare a query in package.json#lotics.queries \u2014 name the columns it returns \u2014 then:`);
+    console.error(`  lotics app query set <alias>    # publish that read, no deploy`);
+    console.error(`  # write src/workflows/<alias>.ts for each write, then:`);
+    console.error(`  lotics app workflow set <alias> # push the body (the server verifies it)`);
+    console.error(`  lotics app check                # every pre-flight a release would run`);
+    console.error(`  # share the app publicly, or give an API key access to it, then:`);
+    console.error(`  lotics app api publish          # snapshot what those aliases promise`);
+  } else if (plan === null) {
     console.error(`  # edit src/App.tsx, then:`);
     console.error(`  lotics app check           # every pre-flight a deploy runs`);
+    console.error(`  lotics app deploy`);
   } else {
     console.error(`  # edit src/screens/*.tsx \u2014 one per plan screen \u2014 then:`);
     console.error(`  lotics app check --screens # every pre-flight a deploy runs, and the probes over each screen`);
+    console.error(`  lotics app deploy`);
   }
-  console.error(`  lotics app deploy`);
 }
 async function resolvePlanForCreate(client, from) {
   const hash2 = from.lastIndexOf("#");
@@ -55549,7 +55764,7 @@ async function appPull(client, args) {
   const app = await client.getApp(args.app_id);
   if (!app.current_version_id && args.version === void 0) {
     throw new Error(
-      `App ${app.id} has no published version yet. Deploy from another machine first, or use 'lotics app create' to scaffold a new app.`
+      reachedOnlyThroughApi(app) ? `App ${app.id} has no bundle \u2014 it is reached through its API. Check out its project from version control; 'lotics app codegen' rebuilds .lotics/ there.` : `App ${app.id} has no published version yet. Deploy from another machine first, or use 'lotics app create' to scaffold a new app.`
     );
   }
   const versionId = args.version ?? app.current_version_id;
@@ -55677,6 +55892,12 @@ function reportPortabilityIds(findings) {
 async function appDeploy(client, args) {
   const projectDir = path12.resolve(args.projectDir ?? process.cwd());
   const meta3 = readAppMeta(projectDir);
+  const scripts = JSON.parse(fs11.readFileSync(path12.join(projectDir, "package.json"), "utf-8")).scripts;
+  if (!scripts?.build) {
+    fail(
+      `package.json declares no \`build\` script, so there is no bundle to deploy \u2014 an app reached through its API goes live through \`lotics app query set\` and \`app workflow set\`, and \`lotics app api publish\` promises them.`
+    );
+  }
   warnAboutDevLink(projectDir, "deploy");
   const liveApp = await client.getApp(meta3.app_id);
   assertProjectIsCurrent(meta3, liveApp);
@@ -56040,6 +56261,11 @@ async function readLiveQueries(client, appId) {
 async function appCheck(client, args = {}) {
   const projectDir = path12.resolve(args.projectDir ?? process.cwd());
   const meta3 = readAppMeta(projectDir);
+  if (args.screens === true && viteConfigIn(projectDir) === null) {
+    fail(
+      `--screens renders this app's screens, and ${path12.basename(projectDir)} has no vite.config \u2014 it is reached through its API, not through a bundle. Run \`lotics app check\` on its own.`
+    );
+  }
   const app = await client.getApp(meta3.app_id);
   assertProjectIsCurrent(meta3, app);
   writeAppDts(projectDir, { workflows: meta3.workflows, queries: meta3.queries, agents: meta3.agents });
@@ -56214,7 +56440,7 @@ Pushing ${plan.length} binding${plan.length === 1 ? "" : "s"} ahead of the app:
     await appWorkflowSet(client, { alias, projectDir, acknowledgeBreakingApi });
   }
   for (const alias of pending.agents) {
-    await appAgentSet(client, { alias, projectDir });
+    await appAgentSet(client, { alias, projectDir, acknowledgeBreakingApi });
   }
 }
 function pendingBindings(args) {
@@ -56270,7 +56496,10 @@ function divergedAgentAliases(manifestAgents, liveAgents) {
   for (const [alias, declared] of Object.entries(manifestAgents ?? {})) {
     const live = (liveAgents ?? {})[alias];
     if (!live) continue;
-    if (AGENT_TYPED_KEYS.some((key) => !sameSchema(declared[key], live[key]))) out.push(alias);
+    const half = (value) => declaresSchema(value) ? value : void 0;
+    if (AGENT_TYPED_KEYS.some((key) => !sameSchema(half(declared[key]), half(live[key])))) {
+      out.push(alias);
+    }
   }
   return out;
 }
@@ -56440,8 +56669,7 @@ async function pruneOrphanedBindings(client, projectDir, app, orphans, undeclare
       // guard: a run recorded against an alias means something outside the
       // bundle reaches it.
       ...overrideInvocationGuard ? { even_if_invoked: true } : {},
-      // Agents carry no published entry, so the field is not theirs to take.
-      ...acknowledgeBreakingApi && target.kind !== "agents" ? { acknowledge_breaking_api_change: true } : {}
+      ...acknowledgeBreakingApi ? { acknowledge_breaking_api_change: true } : {}
     });
     if (res.error) {
       console.error(`  \u2717 could not unbind ${target.label} \u2014 ${res.error}`);
@@ -56868,6 +57096,11 @@ function resolveDeclaredVitePort(projectDir, flagPort) {
 async function appDev(client, args) {
   const projectDir = path12.resolve(args.projectDir ?? process.cwd());
   const meta3 = readAppMeta(projectDir);
+  if (viteConfigIn(projectDir) === null) {
+    fail(
+      `${path12.basename(projectDir)} has no vite.config, so there is no bundle to serve \u2014 it is reached through its API. Call its queries and workflows directly, or \`lotics app check\`.`
+    );
+  }
   warnAboutDevLink(projectDir, "dev");
   const vitePort = resolveDeclaredVitePort(projectDir, args.vitePort);
   writeAppDts(projectDir, { workflows: meta3.workflows, queries: meta3.queries, agents: meta3.agents });
@@ -57015,16 +57248,29 @@ async function appAgentSet(client, args) {
     process.exit(1);
   }
   const proseBaseline = readSynced(projectDir).agents[args.alias]?.live;
-  const res = await client.setAppAgent(meta3.app_id, args.alias, {
-    // Prose and its precondition ride together. Gating a declaration-only push on
-    // the prose baseline would refuse it because someone edited a PROMPT — a
-    // precondition must guard what this call actually writes.
-    ...instructions !== void 0 ? { instructions, ...proseBaseline ? { expected_instructions_sha: proseBaseline } : {} } : {},
-    ...declared?.inputs !== void 0 ? { inputs: declared.inputs } : {},
-    ...declared?.outputs !== void 0 ? { outputs: declared.outputs } : {}
-  });
+  const res = await client.setAppAgent(
+    meta3.app_id,
+    args.alias,
+    {
+      // Prose and its precondition ride together. Gating a declaration-only push on
+      // the prose baseline would refuse it because someone edited a PROMPT — a
+      // precondition must guard what this call actually writes.
+      ...instructions !== void 0 ? { instructions, ...proseBaseline ? { expected_instructions_sha: proseBaseline } : {} } : {},
+      ...declared?.inputs !== void 0 ? { inputs: declared.inputs } : {},
+      ...declared?.outputs !== void 0 ? { outputs: declared.outputs } : {}
+    },
+    // The author's answer to a published contract this declaration would break.
+    // Absent, the server refuses such a write and names each change.
+    args.acknowledgeBreakingApi
+  );
   if (res.error) {
-    console.error(`Failed to set agent "${args.alias}": ${res.error}`);
+    console.error(
+      `Failed to set agent "${args.alias}": ` + refusalAtThisSurface(
+        res,
+        `lotics app agent set ${args.alias}`,
+        args.acknowledgeBreakingApi
+      )
+    );
     process.exit(1);
   }
   if (instructions !== void 0) {
@@ -57608,6 +57854,7 @@ function parseArgs(argv) {
     prune: false,
     pruneInvoked: [],
     acknowledgeBreakingApi: false,
+    api: false,
     screens: false,
     screen: [],
     width: [],
@@ -57788,6 +58035,9 @@ function parseArgs(argv) {
       case "--acknowledge-breaking-api":
         flags.acknowledgeBreakingApi = true;
         break;
+      case "--api":
+        flags.api = true;
+        break;
       case "--screens":
         flags.screens = true;
         break;
@@ -59652,6 +59902,8 @@ async function main() {
   if (command === "app" && !subcommand) {
     console.error("Usage:");
     console.error("  lotics app create <name> [path]      Scaffold a new app locally");
+    console.error("  lotics app create <name> --api       ...with no screens: its queries and workflows");
+    console.error("                                       are the API something outside Lotics calls");
     console.error("  lotics app pull <app_id> [path]      Pull an existing app for local editing");
     console.error("  lotics app deploy -m <message>       Build + upload the current directory (-m required)");
     console.error("  lotics app versions [app_id]         Show deploy history (version, when, who, message)");
@@ -59956,7 +60208,7 @@ Available workspaces:`);
         process.exit(1);
       }
       const targetPath = restArgs[0];
-      await appCreate(client, { name, targetPath, from: flags.from });
+      await appCreate(client, { name, targetPath, from: flags.from, api: flags.api });
       return;
     }
     if (subcommand === "pull") {
@@ -60119,7 +60371,7 @@ Available workspaces:`);
           console.error("       Edits src/agents/<alias>.md (written by 'lotics app pull').");
           process.exit(1);
         }
-        await appAgentSet(client, { alias });
+        await appAgentSet(client, { alias, acknowledgeBreakingApi: flags.acknowledgeBreakingApi });
         return;
       }
       agentUsage();