@lotics/cli 0.74.0 → 0.75.0

package/dist/cli.js

@@ -14,7 +14,7 @@ import { LoticsClient, API_BASE_URL } from "./client.js";
 import { resolveContext, deleteConfig, getConfigPath, loadGlobalConfig, saveGlobalConfig, loadLocalConfig, upsertProfile, removeProfile, setActiveOrg, setSelectedWorkspace, resolveProfileByNameOrId, checkForUpdate, } from "./config.js";
 import { VERSION } from "./version.js";
 import { appCreate, appPull, appDeploy, appDev, appSetSubdomain, appRename, appVersions, appCodegen, appExecuteWorkflow, appWorkflowSet, appWorkflowPull, appWorkflowCheck, appQuerySet, appUiLink, } from "./app_commands.js";
-import { packageInstall, packageEject, packageDoctor, packageUpgrade, parseResolveFlags, packageNew, packageBuild, packagePublish, packageDev, packageSync, packageReset, packageExtract, packageAdopt, packageFleetUpgrade, } from "./package_commands.js";
+import { packageInstall, packageEject, packageDoctor, packageUpgrade, parseResolveFlags, packageNew, packageBuild, packagePublish, packageDev, packageSync, packageReset, packageExtract, packageAdopt, packageFleetUpgrade, packageYank, } from "./package_commands.js";
 import { parseArgs } from "./args.js";
 import { ingestJsonArgs } from "./inputs.js";
 import { runXlsxCommand } from "./xlsx.js";
@@ -124,6 +124,7 @@ COMMANDS
                                        origin app (reads .lotics/adopt_binding.json;
                                        --version N pins a specific version)
   lotics package fleet-upgrade <package_id> [--version N]
+  lotics package yank <package_id> <version> [--undo]
                                        Upgrade EVERY installation of the package across
                                        your org: applies where the preview is clean,
                                        skips + reports findings (exit 1 unless all current)
@@ -707,6 +708,7 @@ async function main() {
         console.error("  lotics package extract <app_id> [path]           Promote a bespoke app to a draft package project");
         console.error("  lotics package adopt <app_id> [path]             Bind the published project onto the origin app");
         console.error("  lotics package fleet-upgrade <package_id> [--version N]   Upgrade every org installation (clean ones apply; findings skip)");
+        console.error("  lotics package yank <package_id> <version> [--undo]       Refuse new installs/upgrades of a broken published version (pinned installations keep running)");
         process.exit(1);
     }
     if (command === "run" && !subcommand) {
@@ -736,6 +738,16 @@ async function main() {
     const { client, ctx } = requireClient(flags);
     // lotics workspace / lotics workspace list / lotics workspace select <id>
     if (command === "workspace") {
+        if (subcommand === "yank") {
+            const [packageId, versionRaw, maybeUndo] = toolArgs ? toolArgs.split(/\s+/) : [];
+            const version = Number(versionRaw);
+            if (!packageId || !Number.isInteger(version) || version <= 0) {
+                console.error("Usage: lotics package yank <package_id> <version> [--undo]");
+                process.exit(1);
+            }
+            await packageYank(client, { package_id: packageId, version, undo: maybeUndo === "--undo" });
+            return;
+        }
         if (subcommand === "doctor") {
             // The workspace command family runs before the global workspace
             // resolution — doctor needs the same first-workspace fallback every

package/dist/client.d.ts

@@ -287,6 +287,17 @@ export declare class LoticsClient {
      * per-installation consent flow. Backs `lotics package fleet-upgrade`.
      * Admin-only; org-scoped (no workspace header needed).
      */
+    /**
+     * Yank / unyank a published package version — refuses NEW installs/upgrades/
+     * adopts targeting it; pinned installations keep running. Owner-org
+     * admin-only. Backs `lotics package yank`.
+     */
+    yankAppPackageVersion(package_id: string, version: number, yanked: boolean): Promise<{
+        package_id: string;
+        version: number;
+        yanked_at: string | null;
+        latest_version: number;
+    }>;
     fleetUpgradeAppPackage(package_id: string, body: {
         version?: number;
     }): Promise<{

package/dist/client.js

@@ -255,6 +255,14 @@ export class LoticsClient {
      * per-installation consent flow. Backs `lotics package fleet-upgrade`.
      * Admin-only; org-scoped (no workspace header needed).
      */
+    /**
+     * Yank / unyank a published package version — refuses NEW installs/upgrades/
+     * adopts targeting it; pinned installations keep running. Owner-org
+     * admin-only. Backs `lotics package yank`.
+     */
+    async yankAppPackageVersion(package_id, version, yanked) {
+        return this.request("POST", `/v1/app-packages/${encodeURIComponent(package_id)}/versions/${version}/yank`, { yanked });
+    }
     async fleetUpgradeAppPackage(package_id, body) {
         return this.request("POST", `/v1/app-packages/${encodeURIComponent(package_id)}/fleet-upgrade`, body);
     }

package/dist/package_commands.d.ts

@@ -220,6 +220,17 @@ export declare function packageAdopt(client: LoticsClient, args: {
  * installations are reported per line and the process exits 1 so a release
  * script can gate on "fleet fully current".
  */
+/**
+ * `lotics package yank <package_id> <version> [--undo]` — mark a published
+ * version uninstallable (or restore it). New installs/upgrades/adopts refuse a
+ * yanked version and "latest" skips it; installations already pinned keep
+ * running. Owner-org admin-only.
+ */
+export declare function packageYank(client: LoticsClient, args: {
+    package_id: string;
+    version: number;
+    undo: boolean;
+}): Promise<void>;
 export declare function packageFleetUpgrade(client: LoticsClient, args: {
     package_id: string;
     version?: number;

package/dist/package_commands.js

@@ -925,6 +925,23 @@ export async function packageAdopt(client, args) {
  * installations are reported per line and the process exits 1 so a release
  * script can gate on "fleet fully current".
  */
+/**
+ * `lotics package yank <package_id> <version> [--undo]` — mark a published
+ * version uninstallable (or restore it). New installs/upgrades/adopts refuse a
+ * yanked version and "latest" skips it; installations already pinned keep
+ * running. Owner-org admin-only.
+ */
+export async function packageYank(client, args) {
+    const result = await client.yankAppPackageVersion(args.package_id, args.version, !args.undo);
+    if (result.yanked_at !== null) {
+        console.error(`Yanked ${result.package_id} v${result.version} (${result.yanked_at}). ` +
+            `New installs/upgrades refuse it; pinned installations keep running.`);
+    }
+    else {
+        console.error(`Restored ${result.package_id} v${result.version} — installable again.`);
+    }
+    console.error(`  Latest installable version: ${result.latest_version === 0 ? "none" : `v${result.latest_version}`}`);
+}
 export async function packageFleetUpgrade(client, args) {
     const result = await client.fleetUpgradeAppPackage(args.package_id, {
         ...(args.version !== undefined ? { version: args.version } : {}),

package/dist/src/cli.js

@@ -29818,6 +29818,18 @@ var LoticsClient = class {
    * per-installation consent flow. Backs `lotics package fleet-upgrade`.
    * Admin-only; org-scoped (no workspace header needed).
    */
+  /**
+   * Yank / unyank a published package version — refuses NEW installs/upgrades/
+   * adopts targeting it; pinned installations keep running. Owner-org
+   * admin-only. Backs `lotics package yank`.
+   */
+  async yankAppPackageVersion(package_id, version, yanked) {
+    return this.request(
+      "POST",
+      `/v1/app-packages/${encodeURIComponent(package_id)}/versions/${version}/yank`,
+      { yanked }
+    );
+  }
   async fleetUpgradeAppPackage(package_id, body) {
     return this.request(
       "POST",
@@ -34181,6 +34193,17 @@ async function packageAdopt(client, args) {
   );
   console.error(`  Verify the installation:  lotics package doctor ${app.id}`);
 }
+async function packageYank(client, args) {
+  const result = await client.yankAppPackageVersion(args.package_id, args.version, !args.undo);
+  if (result.yanked_at !== null) {
+    console.error(
+      `Yanked ${result.package_id} v${result.version} (${result.yanked_at}). New installs/upgrades refuse it; pinned installations keep running.`
+    );
+  } else {
+    console.error(`Restored ${result.package_id} v${result.version} \u2014 installable again.`);
+  }
+  console.error(`  Latest installable version: ${result.latest_version === 0 ? "none" : `v${result.latest_version}`}`);
+}
 async function packageFleetUpgrade(client, args) {
   const result = await client.fleetUpgradeAppPackage(args.package_id, {
     ...args.version !== void 0 ? { version: args.version } : {}
@@ -51008,6 +51031,7 @@ COMMANDS
                                        origin app (reads .lotics/adopt_binding.json;
                                        --version N pins a specific version)
   lotics package fleet-upgrade <package_id> [--version N]
+  lotics package yank <package_id> <version> [--undo]
                                        Upgrade EVERY installation of the package across
                                        your org: applies where the preview is clean,
                                        skips + reports findings (exit 1 unless all current)
@@ -51538,6 +51562,7 @@ async function main() {
     console.error("  lotics package extract <app_id> [path]           Promote a bespoke app to a draft package project");
     console.error("  lotics package adopt <app_id> [path]             Bind the published project onto the origin app");
     console.error("  lotics package fleet-upgrade <package_id> [--version N]   Upgrade every org installation (clean ones apply; findings skip)");
+    console.error("  lotics package yank <package_id> <version> [--undo]       Refuse new installs/upgrades of a broken published version (pinned installations keep running)");
     process.exit(1);
   }
   if (command === "run" && !subcommand) {
@@ -51566,6 +51591,16 @@ async function main() {
   }
   const { client, ctx } = requireClient(flags);
   if (command === "workspace") {
+    if (subcommand === "yank") {
+      const [packageId, versionRaw, maybeUndo] = toolArgs ? toolArgs.split(/\s+/) : [];
+      const version = Number(versionRaw);
+      if (!packageId || !Number.isInteger(version) || version <= 0) {
+        console.error("Usage: lotics package yank <package_id> <version> [--undo]");
+        process.exit(1);
+      }
+      await packageYank(client, { package_id: packageId, version, undo: maybeUndo === "--undo" });
+      return;
+    }
     if (subcommand === "doctor") {
       await resolveWorkspace(client, ctx);
       const dangling = await client.getWorkspaceDanglingReferences();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lotics/cli",
-  "version": "0.74.0",
+  "version": "0.75.0",
   "description": "Lotics SDK and CLI for AI agents",
   "type": "module",
   "bin": {